amsd-pipeline-shared 0.5.43 → 0.5.45

package/docs/gateway-baseline-2.0.80.md5

@@ -1,3 +1,6 @@
+5349c655265a56795c62a0327ba4e73b  config/llm-defaults.claude.json
+5c2b348dbf4860aa6ad999eb7b882757  config/llm-defaults.mockserver.json
+c90ae290edde83ae4e13236edb1e8fb5  config/llm-defaults.openrouter.json
 33364f057aa890497019737c7004db57  config/model-pricing.json
 8a1bb4df2d1b6e7fd135f757423fb2f2  config/repo-artifacts.json
 7ab104b57abcbc8cb3cd890c753d5d67  config/resume-preserves.json

package/docs/gateway-files.txt

@@ -2,6 +2,9 @@ config/call-policy.json
 config/doctor-heavy-jobs.json
 config/doctor-signatures.json
 config/finding-contracts.json
+config/llm-defaults.claude.json
+config/llm-defaults.mockserver.json
+config/llm-defaults.openrouter.json
 config/model-pricing.json
 config/repo-artifacts.json
 config/resume-preserves.json
@@ -62,6 +65,8 @@ prompts/templates/phase-assessment-header.json
 prompts/templates/pipeline-tools-command.json
 prompts/templates/pipeline-tools-hosted.json
 prompts/templates/plan-corrective.json
+prompts/templates/plan-execute.json
+prompts/templates/plan-pass.json
 prompts/templates/plan-producer.json
 prompts/templates/plan-reviewer.json
 prompts/templates/post-failure-analyst.json
@@ -236,6 +241,7 @@ scripts/lib/pipeline-commit.sh
 scripts/lib/pipeline-tools-mcp.js
 scripts/lib/pipeline-tools.js
 scripts/lib/plan-hash.js
+scripts/lib/plan-mode.js
 scripts/lib/plan-of-record.sh
 scripts/lib/plan-scope.js
 scripts/lib/prd-change-review.sh

package/orchestrations/config/llm-defaults.claude.json

@@ -0,0 +1,236 @@
+{
+  "$comment": "THE CLAUDE PROVIDER SET — plain Claude Code on the operator's own tokens. The default stack.",
+  "$proven": "2026-08-25: plain `claude` honours ANTHROPIC_BASE_URL, reaches MockServer (POST /v1/messages in its request log) and PARSES the SSE it serves — is_error:false, result:'OK', stop_reason:'end_turn', RC=0.",
+  "$whyNotTheWrapper": "Plain `claude`, never codemie-claude. The wrapper authenticates through CodeMie SSO and spends CodeMie tokens; this set exists precisely because those are scarce and the operator has their own.",
+  "$whyTheSameLadders": "Deliberately identical to the codemie set. A rehearsal on different models proves the harness, not the run. Sharing the ladder means a mocked run climbs the chain a paid run would.",
+  "ladderTierOrder": [
+    "medium",
+    "high",
+    "highest"
+  ],
+  "ladders": {
+    "medium": {
+      "$why": "Enters cheap and tops out at Sonnet-5. A `mid` seam never reaches Opus: 14 seams resolve here, and measured turn counts are p50 4, p90 24 — work that does not need a frontier model.",
+      "startModel": "claude-haiku-4-5-20251001",
+      "modelLadder": [
+        {
+          "from": "claude-haiku-4-5-20251001",
+          "to": "claude-sonnet-5"
+        }
+      ],
+      "rungs": [
+        {
+          "rung": 0,
+          "maxIterations": 40,
+          "reasoningEffort": "medium"
+        },
+        {
+          "rung": 1,
+          "maxIterations": 120,
+          "reasoningEffort": "high"
+        }
+      ]
+    },
+    "high": {
+      "$why": "Same ENTRY as medium, higher CEILING. That is the 'different entry, same ceiling' rule applied between high and highest: what separates the tiers is how far they may climb, not where they start.",
+      "startModel": "claude-haiku-4-5-20251001",
+      "modelLadder": [
+        {
+          "from": "claude-haiku-4-5-20251001",
+          "to": "claude-sonnet-5"
+        },
+        {
+          "from": "claude-sonnet-5",
+          "to": "claude-opus-5-5"
+        }
+      ],
+      "rungs": [
+        {
+          "rung": 0,
+          "maxIterations": 40,
+          "reasoningEffort": "medium"
+        },
+        {
+          "rung": 1,
+          "maxIterations": 250,
+          "reasoningEffort": "high"
+        },
+        {
+          "rung": 2,
+          "maxIterations": 300,
+          "reasoningEffort": "high"
+        }
+      ]
+    },
+    "highest": {
+      "$why": "Skips Haiku. 25 seams resolve here and would waste a rung proving a small model cannot do the work. Same ceiling as high, entered two rungs up.",
+      "startModel": "claude-sonnet-5",
+      "modelLadder": [
+        {
+          "from": "claude-sonnet-5",
+          "to": "claude-opus-5-5"
+        }
+      ],
+      "rungs": [
+        {
+          "rung": 0,
+          "maxIterations": 250,
+          "reasoningEffort": "high"
+        },
+        {
+          "rung": 1,
+          "maxIterations": 250,
+          "reasoningEffort": "high"
+        },
+        {
+          "rung": 2,
+          "maxIterations": 300,
+          "reasoningEffort": "xhigh"
+        }
+      ]
+    }
+  },
+  "modelOverrides": {
+    "$whyAutoCompress": "150000 against a 200000 window is an OVERFLOW GUARD near the ceiling, never a token-saving device: compaction rewrites the prefix and destroys the prompt cache. Measured input is p50 13.3k, p90 19k, max 25.9k — about 13% of the window — so this should never fire. If it does, something has gone wrong upstream and that is worth knowing.",
+    "$whyNoTemperature": "codemie-claude exposes no temperature flag and Claude Code has no supported lever for it. Declaring one would be decoration. Deliberation is controlled by reasoningEffort and thinking instead.",
+    "$whyAdaptive": "Thinking is held STABLE per model. Anthropic's docs list effort and thinking-parameter changes as cache invalidators, so a config that changes between attempts discards the cache every retry — the opposite of what a 1h TTL is for.",
+    "claude-haiku-4-5": {
+      "matchOn": "model",
+      "matchSubstring": "claude-haiku-4-5",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 32000,
+      "miniTier": true,
+      "charsPerToken": 4
+    },
+    "claude-sonnet-5": {
+      "matchOn": "model",
+      "matchSubstring": "claude-sonnet-5",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 64000,
+      "charsPerToken": 4
+    },
+    "claude-opus-5-5": {
+      "matchOn": "model",
+      "matchSubstring": "claude-opus-5-5",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 64000,
+      "charsPerToken": 4,
+      "$why": "Explicit, and BEFORE claude-opus-5: matching is by first substring hit, and 'claude-opus-5' is a substring of 'claude-opus-5-5' — without this entry Opus 5.5 silently took Opus 5's settings. Values as Opus 5; not vendor-checked."
+    },
+    "claude-opus-4-8": {
+      "matchOn": "model",
+      "matchSubstring": "claude-opus-4-8",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 64000,
+      "charsPerToken": 4
+    },
+    "claude-opus-5": {
+      "matchOn": "model",
+      "matchSubstring": "claude-opus-5",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 64000,
+      "charsPerToken": 4
+    },
+    "$miniTierWhy": "miniTier marks the cheap, fast rung — the models that are quick but limited in generation capacity. It was decided in engine code by sniffing vendor naming habits (-mini, -flash, -haiku, minimax-m2), which breaks in both directions: a cheap model named differently read as capable, and a capable model containing -flash read as cheap. The set that declares the model declares its tier.",
+    "$whyCharsPerToken": "INPUT CAPACITY IN CHARACTERS. autoCompressAt is the models input ceiling in TOKENS; callers that must size a payload measure it in characters. The ratio belongs with the model, because it is a property of that models tokenizer, not of any caller. Declared so a caller derives its budget instead of inventing one: the roster review carried a literal 60000 in code, which split a 276KB roster into six calls and failed the whole review whenever any one of them answered off-schema."
+  },
+  "finalFallback": {
+    "$why": "Applies after ladder exhaustion — the one point where the ladder has nothing left to say. Sonnet-5 differs from the top rung on high and highest, so it is a real second answer rather than a retry of the model that just failed.",
+    "model": "claude-sonnet-5",
+    "provider": "claude"
+  },
+  "runners": {
+    "claude": {
+      "siChannel": {
+        "flag": "--append-system-prompt-file"
+      },
+      "$whySiChannel": "Claude Code's own --append-system-prompt-file (claude --help, 2.1.282): the agent's SI as a system prompt, separate from the task on stdin.",
+      "$why": "Plain Claude Code. No CodeMie, no SSO, no spend.",
+      "alwaysFlags": [
+        "--setting-sources",
+        "",
+        "--strict-mcp-config",
+        "--disable-slash-commands",
+        "--settings",
+        "{\"includeGitInstructions\":false}"
+      ],
+      "$whyAlwaysFlags": "The agent receives the pipeline's SI and task, nothing of the host — through Claude Code's own interface, each piece by its own switch (proven on 2.1.310, 2026-10-24, with a CLAUDE.md canary in the working folder): --setting-sources \"\" loads no user, project or local settings (so none of the host's hooks, permissions or CLAUDE.md); CLAUDE_CODE_DISABLE_CLAUDE_MDS and CLAUDE_CODE_DISABLE_AUTO_MEMORY (env below) keep the working folder's CLAUDE.md and the host's auto-memory out; --disable-slash-commands drops the skills; includeGitInstructions:false drops the git status; --strict-mcp-config makes the pipeline's MCP server (hostedToolPlugins, lib/pipeline-tools-mcp.js) the ONLY server. --safe-mode did all of this in one switch and ALSO dropped every MCP server, --mcp-config included (proven: the tool was absent), so the pipeline's tools could not be the agent's tools under it. Sign-in survives (the subscription, not an API key); --bare would not.",
+      "env": {
+        "CLAUDE_CODE_DISABLE_CLAUDE_MDS": "hostClaudeMdOff",
+        "CLAUDE_CODE_DISABLE_AUTO_MEMORY": "hostAutoMemoryOff",
+        "CLAUDE_CODE_PROMPT_CACHE_TTL": "promptCacheTtl",
+        "CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL": "promptCacheTtl"
+      },
+      "flags": {
+        "--effort": "reasoningEffort",
+        "--autocompact": "autoCompressAt"
+      },
+      "$whyFlags": "Checked against the installed CLI's own --help, not assumed: --effort takes (low, medium, high, xhigh, max) and --autocompact takes auto or a token count. These were declared as CLAUDE_CODE_* env vars that the CLI does not document and that nothing exported.",
+      "$whyNoTurnCap": "maxIterations is deliberately absent. It binds the ReAct loop in src/agent/AgentRunner.ts, which only the `epam run` arm enters; a --print call has no turn cap and the loop is Claude Code's own. Declaring one here would name a knob nothing can turn.",
+      "$whyNoOutputCap": "maxOutputTokens is deliberately unmapped: the installed CLI documents no flag or env for it. It stays declared in modelOverrides so the intent is visible, and is not routed anywhere pretending to work.",
+      "$whyNoSilentFlag": "-s is codemie-claude's silent flag and plain `claude` REJECTS it: `echo x | claude -s --print` exits 1 with \"error: unknown option '-s'\". Proven by running it, 2026-08-26, after a --help probe proved nothing (--help and --version short-circuit before option validation, so an invalid flag exits 0 there too). With -s declared, the hub passed it to plain claude, the call failed, and the arm's 2>/dev/null hid the reason — codeline-discovery reported only 'Empty response from ai-run.sh' and the mock3 run aborted with 'codeline scope could not be resolved'. The codemie runner keeps -s: codemie-claude --help documents it as -s, --silent.",
+      "unsetEnv": [
+        "ANTHROPIC_API_KEY",
+        "ANTHROPIC_AUTH_TOKEN"
+      ],
+      "$whyUnsetEnv": "THE SUBSCRIPTION PAYS, AND THAT IS WHY THIS PIPELINE SHELLS OUT TO THE CLI INSTEAD OF THE SDK. Claude Code prefers ANTHROPIC_API_KEY over the OAuth credentials at ~/.claude/.credentials.json. The repo .env declares ANTHROPIC_API_KEY and run-agent-orchestration.sh loads .env, so every run on this stack billed API CREDITS — the exact outcome invoking the CLI was meant to avoid. It surfaced on 2026-08-26 only when the credits ran out mid-run: \"No JSON in LLM response: Credit balance is too low\". Seven runs had already billed the wrong account.\n\nDeclared per RUNNER rather than scrubbed globally: openrouter needs its key, and the free-run guard only scrubs when a run is declared free — a PAID run on this stack had no equivalent because nobody expected the key to be present at all.",
+      "emitsTraces": true,
+      "toolNames": {
+        "read_file": [
+          "Read"
+        ],
+        "list_files": [
+          "Glob"
+        ],
+        "search": [
+          "Grep"
+        ],
+        "fetch_url": [
+          "WebFetch"
+        ],
+        "bash": [
+          "Bash"
+        ],
+        "write_file": [
+          "Write",
+          "Edit"
+        ]
+      },
+      "$whyToolNames": "A SEAM'S TOOL GRANT IS BOUND AT THE RUNNER, LIKE ITS SCHEMA AND ITS BUDGET. Every seam declares a grant kind (none, read-only, execute, write-file...) and it travels as EPAM_ALLOWED_TOOLS; that variable was read in ONE place, src/agent/AgentRunner.ts on the `epam run` arm, so on this runner it bound NOTHING and every seam ran `--print --dangerously-skip-permissions` with the CLI's whole tool set. Run 20260916T225207Z (skyscanner): project-roster-review, declared read-only, ran `find / -iname prd.json` and read five earlier runs' cassettes out of the pipeline repo, then refused the roster for disagreeing with them. The 2026-09-12 roster specialiser, declared write-file, spent ~350 shell calls copying a repository. This map is the runner's own vocabulary for the pipeline's tool names (`claude --help`: --tools takes built-in tool names; \"\" disables all). llm-handler.sh translates the grant through it and passes --tools when the installed CLI advertises the flag. A pipeline tool with no entry here does not exist on this runner and is dropped from the list, said aloud on stderr. A seam with NO grant (kind none) is passed nothing and keeps the CLI's default set: --tools \"\" may also remove the StructuredOutput tool --json-schema requires, and that has not been proven either way, so it is not done blind.",
+      "$emitsTraces": "Whether model calls made through this runner reach Langfuse. TRUE for every runner: traces are emitted by lib/cost-emitter.js at the cost seam — the point every arm passes through with its model, tokens, cost and timing resolved — not by the TypeScript provider decorator, which only the epam arm reaches. Verified end-to-end 2026-09-04 by driving the real emitter and reading the session back out of Langfuse.",
+      "$whyEnv": "Each name is a top-level setting of this stack (hostClaudeMdOff, hostAutoMemoryOff, promptCacheTtl), resolved by lib/llm-settings-resolve.js runnerValues and exported for the CLI; an operator overrides one with EPAM_RUNNER_VALUE_<name>. The cache TTL: Claude Code's subagent and workflow calls default to a 5-minute prompt cache; the pipeline's calls repeat the same SI and context for an hour or more, so the documented 1h TTL is declared for both (docs: prompt-caching).",
+      "hostedToolPlugins": [
+        "plugins/codegraph-plugin.js",
+        "plugins/codeline-context-plugin.js",
+        "plugins/dependency-contract-plugin.js",
+        "plugins/dependency-scan-plugin.js",
+        "plugins/secret-scan-plugin.js",
+        "plugins/verification-plugin.js"
+      ],
+      "mcpServer": "pipeline",
+      "$whyHostedToolPlugins": "The pipeline's own tool plugins — the same modules the codemie-web runner hosts — served to this runner's agents as Claude Code tools over MCP (lib/pipeline-tools-mcp.js; the hub passes --mcp-config). Before this an agent on this runner reached codegraph, the search and the package-symbol resolver only as shell scripts through Bash: a read-only seam could not call them at all, and plan mode denies such Bash calls. A 'safe' plugin tool is annotated read-only, which is what lets plan mode run it.",
+      "planModeChannel": {
+        "modeFlag": "--permission-mode",
+        "planValue": "plan",
+        "sessionFlag": "--session-id",
+        "resumeFlag": "--resume"
+      },
+      "$whyPlanModeChannel": "How a plan pass is made on this runner (llm-handler.sh; lib/plan-mode.js decides WHETHER a seam plans): Claude Code's own plan mode. Proven on 2.1.310 (2026-10-24): `--permission-mode plan` under --print returns the plan as the result and writes nothing — the agent may read, search and call read-only tools, so the plan is grounded; the answer is then made in the same session with `--resume <session-id>` and the ordinary permissions. A runner that declares no channel gets the hub's prose pass (the plan written with no tools)."
+    }
+  },
+  "$why": "Built from the mockserver set by REMOVING the redirect, because that set was already a plain-`claude` stack pointed at localhost — same ladders, same budgets, same runner. Its header records the proof: plain `claude` honours ANTHROPIC_BASE_URL, reaches the endpoint it is given, and parses the SSE served back (is_error:false, RC=0). Taking the endpoint away is the whole difference between rehearsing and running.",
+  "hostClaudeMdOff": "1",
+  "hostAutoMemoryOff": "1",
+  "promptCacheTtl": "1h",
+  "$whyHostContextOff": "Values for the claude runner's env declaration (see runners.claude.$whyEnv): the host's CLAUDE.md and auto-memory stay out of every agent call; the prompt cache lives 1h."
+}

package/orchestrations/config/llm-defaults.mockserver.json

@@ -0,0 +1,295 @@
+{
+  "$comment": "THE MOCKSERVER PROVIDER SET — the CodeMie stack, answered by MockServer instead of a model. Same ladders and same budgets, so a rehearsal exercises the chain a paid run would climb; only the ENDPOINT differs.",
+  "$proven": "2026-08-25: plain `claude` honours ANTHROPIC_BASE_URL, reaches MockServer (POST /v1/messages in its request log) and PARSES the SSE it serves — is_error:false, result:'OK', stop_reason:'end_turn', RC=0.",
+  "$whyNotTheWrapper": "This runs PLAIN `claude`, not codemie-claude. The wrapper's --base-url selects an SSO PROFILE rather than redirecting, and fails with 'SSO credentials not found' for any URL it has no credentials for. A mocked run must authenticate against NOTHING, so it bypasses the wrapper entirely.",
+  "$whyTheSameLadders": "Deliberately identical to the codemie set. A rehearsal on different models proves the harness, not the run. Sharing the ladder means a mocked run climbs the chain a paid run would.",
+  "ladderTierOrder": [
+    "medium",
+    "high",
+    "highest"
+  ],
+  "ladders": {
+    "medium": {
+      "$why": "Enters cheap and tops out at Sonnet-5. A `mid` seam never reaches Opus: 14 seams resolve here, and measured turn counts are p50 4, p90 24 — work that does not need a frontier model.",
+      "startModel": "claude-haiku-4-5-20251001",
+      "modelLadder": [
+        {
+          "from": "claude-haiku-4-5-20251001",
+          "to": "claude-sonnet-5"
+        }
+      ],
+      "rungs": [
+        {
+          "rung": 0,
+          "maxIterations": 40,
+          "reasoningEffort": "medium"
+        },
+        {
+          "rung": 1,
+          "maxIterations": 120,
+          "reasoningEffort": "high"
+        }
+      ]
+    },
+    "high": {
+      "$why": "Same ENTRY as medium, higher CEILING. That is the 'different entry, same ceiling' rule applied between high and highest: what separates the tiers is how far they may climb, not where they start.",
+      "startModel": "claude-haiku-4-5-20251001",
+      "modelLadder": [
+        {
+          "from": "claude-haiku-4-5-20251001",
+          "to": "claude-sonnet-5"
+        },
+        {
+          "from": "claude-sonnet-5",
+          "to": "claude-opus-5"
+        }
+      ],
+      "rungs": [
+        {
+          "rung": 0,
+          "maxIterations": 40,
+          "reasoningEffort": "medium"
+        },
+        {
+          "rung": 1,
+          "maxIterations": 250,
+          "reasoningEffort": "high"
+        },
+        {
+          "rung": 2,
+          "maxIterations": 300,
+          "reasoningEffort": "high"
+        }
+      ]
+    },
+    "highest": {
+      "$why": "Skips Haiku. 25 seams resolve here and would waste a rung proving a small model cannot do the work. Same ceiling as high, entered two rungs up.",
+      "startModel": "claude-sonnet-5",
+      "modelLadder": [
+        {
+          "from": "claude-sonnet-5",
+          "to": "claude-opus-4-8"
+        },
+        {
+          "from": "claude-opus-4-8",
+          "to": "claude-opus-5"
+        }
+      ],
+      "rungs": [
+        {
+          "rung": 0,
+          "maxIterations": 250,
+          "reasoningEffort": "high"
+        },
+        {
+          "rung": 1,
+          "maxIterations": 250,
+          "reasoningEffort": "high"
+        },
+        {
+          "rung": 2,
+          "maxIterations": 300,
+          "reasoningEffort": "xhigh"
+        }
+      ]
+    }
+  },
+  "modelOverrides": {
+    "$whyAutoCompress": "150000 against a 200000 window is an OVERFLOW GUARD near the ceiling, never a token-saving device: compaction rewrites the prefix and destroys the prompt cache. Measured input is p50 13.3k, p90 19k, max 25.9k — about 13% of the window — so this should never fire. If it does, something has gone wrong upstream and that is worth knowing.",
+    "$whyNoTemperature": "codemie-claude exposes no temperature flag and Claude Code has no supported lever for it. Declaring one would be decoration. Deliberation is controlled by reasoningEffort and thinking instead.",
+    "$whyAdaptive": "Thinking is held STABLE per model. Anthropic's docs list effort and thinking-parameter changes as cache invalidators, so a config that changes between attempts discards the cache every retry — the opposite of what a 1h TTL is for.",
+    "claude-haiku-4-5": {
+      "matchOn": "model",
+      "matchSubstring": "claude-haiku-4-5",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 32000,
+      "miniTier": true,
+      "charsPerToken": 4
+    },
+    "claude-sonnet-5": {
+      "matchOn": "model",
+      "matchSubstring": "claude-sonnet-5",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 64000,
+      "charsPerToken": 4
+    },
+    "claude-opus-4-8": {
+      "matchOn": "model",
+      "matchSubstring": "claude-opus-4-8",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 64000,
+      "charsPerToken": 4
+    },
+    "claude-opus-5": {
+      "matchOn": "model",
+      "matchSubstring": "claude-opus-5",
+      "thinking": "adaptive",
+      "promptCacheTtl": "1h",
+      "autoCompressAt": 150000,
+      "maxOutputTokens": 64000,
+      "charsPerToken": 4
+    },
+    "$miniTierWhy": "miniTier marks the cheap, fast rung — the models that are quick but limited in generation capacity. It was decided in engine code by sniffing vendor naming habits (-mini, -flash, -haiku, minimax-m2), which breaks in both directions: a cheap model named differently read as capable, and a capable model containing -flash read as cheap. The set that declares the model declares its tier.",
+    "$whyCharsPerToken": "INPUT CAPACITY IN CHARACTERS. autoCompressAt is the models input ceiling in TOKENS; callers that must size a payload measure it in characters. The ratio belongs with the model, because it is a property of that models tokenizer, not of any caller. Declared so a caller derives its budget instead of inventing one: the roster review carried a literal 60000 in code, which split a 276KB roster into six calls and failed the whole review whenever any one of them answered off-schema."
+  },
+  "finalFallback": {
+    "$why": "Applies after ladder exhaustion. The PROVIDER is plain `claude`, not codemie-claude, matching every other call this set makes — see $whyNotTheWrapper. That is CORRECT, not a paid escape: this set never talks to real Anthropic. runners.claude below declares ANTHROPIC_BASE_URL redirecting to MockServer and unsetEnv scrubbing every other vendor's credentials, and that redirect applies to every call routed under this set's own provider:\"claude\", finalFallback included — it never has a real endpoint to reach. Mockserver is a mock-LLM, no-pay testing mechanism by construction, not merely by convention (change-log/SEAM-CONSISTENCY-ANALYSIS.md Section 6, corrected 2026-09-03: the prior wording here mischaracterized this as an unresolved paid-escape risk).",
+    "$whyNotYetLive": "As of this writing, nothing in the runtime ladder-exhaustion path (llm-handler.sh, claude.sh, brownfield-repro-test-writer.sh) reads finalFallback — exhaustion retries the same rung instead. agent-check.js's dry-run cost estimator is the only reader, and even there this is unreachable while any ladder tier has a startModel (all of them do). Declared for correctness and for whenever that wiring exists.",
+    "model": "claude-sonnet-5",
+    "provider": "claude"
+  },
+  "runners": {
+    "claude": {
+      "siChannel": {
+        "flag": "--append-system-prompt-file"
+      },
+      "$whySiChannel": "Claude Code's own --append-system-prompt-file (claude --help, 2.1.282): the agent's SI as a system prompt, separate from the task on stdin.",
+      "$why": "Plain Claude Code. No CodeMie, no SSO, no spend.",
+      "$whyNoBaseUrlFlag": "--base-url is ABSENT on purpose: on the wrapper it means 'use this SSO profile'. The redirect is ANTHROPIC_BASE_URL, which plain claude honours.",
+      "alwaysFlags": [
+        "--setting-sources",
+        "",
+        "--strict-mcp-config",
+        "--disable-slash-commands",
+        "--settings",
+        "{\"includeGitInstructions\":false}"
+      ],
+      "$whyAlwaysFlags": "The agent receives the pipeline's SI and task, nothing of the host — through Claude Code's own interface, each piece by its own switch (proven on 2.1.310, 2026-10-24, with a CLAUDE.md canary in the working folder): --setting-sources \"\" loads no user, project or local settings (so none of the host's hooks, permissions or CLAUDE.md); CLAUDE_CODE_DISABLE_CLAUDE_MDS and CLAUDE_CODE_DISABLE_AUTO_MEMORY (env below) keep the working folder's CLAUDE.md and the host's auto-memory out; --disable-slash-commands drops the skills; includeGitInstructions:false drops the git status; --strict-mcp-config makes the pipeline's MCP server (hostedToolPlugins, lib/pipeline-tools-mcp.js) the ONLY server. --safe-mode did all of this in one switch and ALSO dropped every MCP server, --mcp-config included (proven: the tool was absent), so the pipeline's tools could not be the agent's tools under it. Sign-in survives (the subscription, not an API key); --bare would not.",
+      "env": {
+        "ANTHROPIC_BASE_URL": "mockBaseUrl",
+        "CLAUDE_CODE_DISABLE_CLAUDE_MDS": "hostClaudeMdOff",
+        "CLAUDE_CODE_DISABLE_AUTO_MEMORY": "hostAutoMemoryOff",
+        "CLAUDE_CODE_PROMPT_CACHE_TTL": "promptCacheTtl",
+        "CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL": "promptCacheTtl"
+      },
+      "flags": {
+        "--effort": "reasoningEffort",
+        "--autocompact": "autoCompressAt"
+      },
+      "$whyFlags": "Checked against the installed CLI's own --help, not assumed: --effort takes (low, medium, high, xhigh, max) and --autocompact takes auto or a token count. These were declared as CLAUDE_CODE_* env vars that the CLI does not document and that nothing exported.",
+      "$whyNoTurnCap": "maxIterations is deliberately absent. It binds the ReAct loop in src/agent/AgentRunner.ts, which only the `epam run` arm enters; a --print call has no turn cap and the loop is Claude Code's own. Declaring one here would name a knob nothing can turn.",
+      "$whyNoOutputCap": "maxOutputTokens is deliberately unmapped: the installed CLI documents no flag or env for it. It stays declared in modelOverrides so the intent is visible, and is not routed anywhere pretending to work.",
+      "$whyEnvKept": "ANTHROPIC_BASE_URL is a real, load-bearing env var: it is the mock redirect. It was declared here and never exported, so a free run would have looked redirected and reached the paid endpoint.",
+      "$whyNoSilentFlag": "-s is codemie-claude's silent flag and plain `claude` REJECTS it: `echo x | claude -s --print` exits 1 with \"error: unknown option '-s'\". Proven by running it, 2026-08-26, after a --help probe proved nothing (--help and --version short-circuit before option validation, so an invalid flag exits 0 there too). With -s declared, the hub passed it to plain claude, the call failed, and the arm's 2>/dev/null hid the reason — codeline-discovery reported only 'Empty response from ai-run.sh' and the mock3 run aborted with 'codeline scope could not be resolved'. The codemie runner keeps -s: codemie-claude --help documents it as -s, --silent.",
+      "unsetEnv": [
+        "CODEMIE_API_KEY",
+        "CODEMIE_AUTH_TOKEN",
+        "CODEMIE_KEY",
+        "CODEMIE_TOKEN",
+        "COPILOT_API_KEY",
+        "COPILOT_AUTH_TOKEN",
+        "COPILOT_KEY",
+        "COPILOT_TOKEN",
+        "CURSOR_API_KEY",
+        "CURSOR_AUTH_TOKEN",
+        "CURSOR_KEY",
+        "CURSOR_TOKEN",
+        "DASHSCOPE_API_KEY",
+        "DASHSCOPE_AUTH_TOKEN",
+        "DASHSCOPE_KEY",
+        "DASHSCOPE_TOKEN",
+        "EPAM_API_KEY_ANTHROPIC",
+        "EPAM_API_KEY_CLAUDE",
+        "EPAM_API_KEY_CODEMIE",
+        "EPAM_API_KEY_COPILOT",
+        "EPAM_API_KEY_CURSOR",
+        "EPAM_API_KEY_DASHSCOPE",
+        "EPAM_API_KEY_GEMINI",
+        "EPAM_API_KEY_MINIMAX",
+        "EPAM_API_KEY_OPENAI",
+        "EPAM_API_KEY_OPENROUTER",
+        "GEMINI_API_KEY",
+        "GEMINI_AUTH_TOKEN",
+        "GEMINI_KEY",
+        "GEMINI_TOKEN",
+        "MINIMAX_API_KEY",
+        "MINIMAX_AUTH_TOKEN",
+        "MINIMAX_KEY",
+        "MINIMAX_TOKEN",
+        "OPENAI_API_KEY",
+        "OPENAI_AUTH_TOKEN",
+        "OPENAI_KEY",
+        "OPENAI_TOKEN",
+        "OPENROUTER_API_KEY",
+        "OPENROUTER_AUTH_TOKEN",
+        "OPENROUTER_KEY",
+        "OPENROUTER_TOKEN"
+      ],
+      "$whyUnsetEnv": "A REHEARSAL MUST NOT BE ABLE TO SPEND SOMEWHERE ELSE. Under this set the writer once ran provider=minimax with MINIMAX_API_KEY present: the mockBaseUrl redirect covers Anthropic traffic and nothing else, so any other vendor's credential is a live route out. Those are removed. ANTHROPIC_API_KEY and CLAUDE_* are deliberately NOT removed: Claude Code falls back to the OAuth credentials on disk when it finds no key, and that bills for real — the exact inversion this is meant to prevent, recorded in seam-the-subscription-pays-not-the-api-key. The operator's fake key stays, and the redirect is what makes it harmless. The vendors come from llm-channel.json's credentialPattern, so one added there is covered without editing this.",
+      "emitsTraces": true,
+      "$emitsTraces": "Whether model calls made through this runner reach Langfuse. TRUE for every runner: traces are emitted by lib/cost-emitter.js at the cost seam — the point every arm passes through with its model, tokens, cost and timing resolved — not by the TypeScript provider decorator, which only the epam arm reaches. Verified end-to-end 2026-09-04 by driving the real emitter and reading the session back out of Langfuse.",
+      "toolNames": {
+        "read_file": [
+          "Read"
+        ],
+        "list_files": [
+          "Glob"
+        ],
+        "search": [
+          "Grep"
+        ],
+        "fetch_url": [
+          "WebFetch"
+        ],
+        "bash": [
+          "Bash"
+        ],
+        "write_file": [
+          "Write",
+          "Edit"
+        ]
+      },
+      "$whyToolNames": "A SEAM'S TOOL GRANT IS BOUND AT THE RUNNER, LIKE ITS SCHEMA AND ITS BUDGET. Every seam declares a grant kind (none, read-only, execute, write-file...) and it travels as EPAM_ALLOWED_TOOLS; that variable was read in ONE place, src/agent/AgentRunner.ts on the `epam run` arm, so on this runner it bound NOTHING and every seam ran `--print --dangerously-skip-permissions` with the CLI's whole tool set. Run 20260916T225207Z (skyscanner): project-roster-review, declared read-only, ran `find / -iname prd.json` and read five earlier runs' cassettes out of the pipeline repo, then refused the roster for disagreeing with them. The 2026-09-12 roster specialiser, declared write-file, spent ~350 shell calls copying a repository. This map is the runner's own vocabulary for the pipeline's tool names (`claude --help`: --tools takes built-in tool names; \"\" disables all). llm-handler.sh translates the grant through it and passes --tools when the installed CLI advertises the flag. A pipeline tool with no entry here does not exist on this runner and is dropped from the list, said aloud on stderr. A seam with NO grant (kind none) is passed nothing and keeps the CLI's default set: --tools \"\" may also remove the StructuredOutput tool --json-schema requires, and that has not been proven either way, so it is not done blind.",
+      "writeTool": {
+        "name": "Write",
+        "path": "file_path",
+        "content": "content"
+      },
+      "$whyWriteTool": "The rehearsal's stand-in writer delivers by calling the runner's own file-writing tool, and this is that tool's vocabulary for plain Claude Code (recorded sessions: 'Write' {file_path, content}). Declared here so the harness never spells a tool name.",
+      "readTool": {
+        "name": "Read",
+        "path": "file_path"
+      },
+      "$whyReadTool": "Plain Claude Code's Write refuses a file the session has not read ('File has not been read yet. Read it first before writing to it.', £0 brownfield harness run 10, 2026-09-14): a brownfield story's deliverables exist, so the stand-in writer reads each existing one through this tool before it writes, as a model does. Declared beside writeTool so the harness never spells this name either.",
+      "structuredOutputTool": "StructuredOutput",
+      "$whyStructuredOutputTool": "Under --json-schema plain Claude Code declares a tool of this name and REQUIRES the reply to call it ('[structured-output-enforce] You MUST call the StructuredOutput tool', recorded 2026-09-14); a text reply costs a second, enforcement turn per seam and never exercises the runner's structured-output path — the one a real model takes. The rehearsal answers a request that declares this tool by calling it with the seam's stand-in payload.",
+      "$whyEnv": "Each name is a top-level setting of this stack (hostClaudeMdOff, hostAutoMemoryOff, promptCacheTtl), resolved by lib/llm-settings-resolve.js runnerValues and exported for the CLI; an operator overrides one with EPAM_RUNNER_VALUE_<name>. The cache TTL: Claude Code's subagent and workflow calls default to a 5-minute prompt cache; the pipeline's calls repeat the same SI and context for an hour or more, so the documented 1h TTL is declared for both (docs: prompt-caching).",
+      "hostedToolPlugins": [
+        "plugins/codegraph-plugin.js",
+        "plugins/codeline-context-plugin.js",
+        "plugins/dependency-contract-plugin.js",
+        "plugins/dependency-scan-plugin.js",
+        "plugins/secret-scan-plugin.js",
+        "plugins/verification-plugin.js"
+      ],
+      "mcpServer": "pipeline",
+      "$whyHostedToolPlugins": "The pipeline's own tool plugins — the same modules the codemie-web runner hosts — served to this runner's agents as Claude Code tools over MCP (lib/pipeline-tools-mcp.js; the hub passes --mcp-config). Before this an agent on this runner reached codegraph, the search and the package-symbol resolver only as shell scripts through Bash: a read-only seam could not call them at all, and plan mode denies such Bash calls. A 'safe' plugin tool is annotated read-only, which is what lets plan mode run it.",
+      "planModeChannel": {
+        "modeFlag": "--permission-mode",
+        "planValue": "plan",
+        "sessionFlag": "--session-id",
+        "resumeFlag": "--resume"
+      },
+      "$whyPlanModeChannel": "How a plan pass is made on this runner (llm-handler.sh; lib/plan-mode.js decides WHETHER a seam plans): Claude Code's own plan mode. Proven on 2.1.310 (2026-10-24): `--permission-mode plan` under --print returns the plan as the result and writes nothing — the agent may read, search and call read-only tools, so the plan is grounded; the answer is then made in the same session with `--resume <session-id>` and the ordinary permissions. A runner that declares no channel gets the hub's prose pass (the plan written with no tools)."
+    }
+  },
+  "mockBaseUrl": "http://localhost:1080",
+  "$mockBaseUrl": "Where MockServer listens. Declared here so no script spells it — the same rule every other value in this layer follows.",
+  "rehearsal": true,
+  "$rehearsalWhy": "A run on this set spends nothing and answers from recordings and stand-ins. Every recorder stamps its traces rehearsal:true (lib/langfuse-emit.js), and the mock loader never replays a rehearsal's own traces as captures — on 2026-09-13 a stand-in reply recorded by one rehearsal was served to the next as a 'recorded' turn, and the roster stage failed on its own echo three launches running.",
+  "wire": {
+    "$comment": "HOW THE STAND-IN PUTS A TOOL CALL ON THE WIRE. A vendor streams a tool call as many `function.arguments` (or `input_json_delta`) fragments, and the body reaches the client in HTTP chunks that end wherever the socket ends them — inside an event as often as not. Until 2026-09-15 the stand-in served every call whole, in one read: a shape no vendor sends and the one shape the client's stream parser could never fail on. Run 20260915T101555Z lost 32 write_file calls' arguments to exactly that parser ($4.18, nothing delivered) while every harness cell was green. argumentDeltaChars is the fragment size; chunkBytes is the HTTP chunk size. Both are deliberately unaligned with any event length so boundaries fall inside events.",
+    "argumentDeltaChars": 97,
+    "chunkBytes": 333
+  },
+  "hostClaudeMdOff": "1",
+  "hostAutoMemoryOff": "1",
+  "promptCacheTtl": "1h",
+  "$whyHostContextOff": "Values for the claude runner's env declaration (see runners.claude.$whyEnv): the host's CLAUDE.md and auto-memory stay out of every agent call; the prompt cache lives 1h."
+}