audit-tools 0.32.68 → 0.33.0

package/dist/remediate/steps/sessionConfigLoad.js

@@ -0,0 +1,32 @@
+import { join } from "node:path";
+import { readValidatedRepoSessionIntent, resolveSessionConfig, ambientAuditorDescriptor, } from "audit-tools/shared";
+/**
+ * The ONE place remediate turns a persisted `RepoSessionIntent` into an effective
+ * {@link SessionConfig} — so the descriptor choice cannot drift across call sites.
+ *
+ * It is ALWAYS the ambient descriptor: remediate has no host handshake (no `--auditor`
+ * flag), but it has an environment, so its dispatch pool resolves in-process from
+ * `declared ∩ ambient-verifiable`. Host-self-class fields (model/window/roster) stay
+ * absent → the host pool sizes to the conservative floor, which is a fidelity
+ * degradation, never a block.
+ *
+ * ⚠ Why this function exists rather than three call sites each choosing: passing `null`
+ * FAILS CLOSED to driver-self-only — no pool at all — and that is exactly what happened.
+ * Between v0.32.68 and the fix, all three remediate sites hardcoded `null`, so remediate
+ * could not dispatch to ANY non-self pool, where v0.32.68 read `sources[]` straight off
+ * disk. The mechanism was deliberate; the consequence went unnoticed for four laps.
+ * Routing every site through here makes the null choice UNREPRESENTABLE instead of a
+ * thing each site must remember — enforce in tooling, never "the next author notices".
+ * [[capability-is-per-auditor-not-per-audit]] [[enforce-robustness-in-tooling-not-host-discretion]]
+ */
+export async function loadRemediateSessionConfig(params) {
+    if (params.override)
+        return params.override;
+    const intent = params.artifactsFirst
+        ? ((await readValidatedRepoSessionIntent(join(params.root, ".remediation-artifacts", "session-config.json"))) ?? (await readValidatedRepoSessionIntent(join(params.root, "session-config.json"))))
+        : await readValidatedRepoSessionIntent(join(params.root, "session-config.json"));
+    return intent
+        ? resolveSessionConfig(intent, ambientAuditorDescriptor(), params.ambient)
+        : undefined;
+}
+//# sourceMappingURL=sessionConfigLoad.js.map

package/dist/remediate/steps/sessionConfigLoad.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionConfigLoad.js","sourceRoot":"","sources":["../../../src/remediate/steps/sessionConfigLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,GAGzB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAwBhD;IACC,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc;QAClC,CAAC,CAAC,CAAC,CAAC,MAAM,8BAA8B,CACpC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,qBAAqB,CAAC,CACnE,CAAC,IAAI,CAAC,MAAM,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,MAAM,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACnF,OAAO,MAAM;QACX,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,wBAAwB,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;QAC1E,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/shared/config/resolveSessionConfig.d.ts

@@ -0,0 +1,72 @@
+import type { AuditorDescriptor } from "../types/auditorDescriptor.js";
+import { type RepoSessionIntent, type SessionConfig } from "../types/sessionConfig.js";
+import { type AmbientSourceDeps } from "../providers/auditorSources.js";
+/**
+ * The ambient probes the G2.5 source resolution reads. Production passes nothing —
+ * every probe defaults to the real environment (`process.env`, real PATH, real home
+ * dir), which is the point: the reach check must read the SAME env the provider reads
+ * at launch. Tests inject.
+ */
+export type ResolveSessionConfigOptions = AmbientSourceDeps;
+/**
+ * Produce the in-memory EFFECTIVE {@link SessionConfig} every dispatch/provider
+ * consumer reads, from the persisted {@link RepoSessionIntent} (audit intent +
+ * policy, NO dispatch inventory) overlaid with the per-invocation
+ * {@link AuditorDescriptor} (the driver's identity + own launch transport +
+ * reachable `sources[]`). This is the single seam that replaces the retired
+ * `applyDispatchInventory`: the backend/launch set now comes from the per-auditor
+ * descriptor, never the repo session-config, and is never inherited across auditors
+ * ([[capability-is-per-auditor-not-per-audit]], `spec/unified-dispatch-worker-model.md`, G2).
+ *
+ * - `descriptor == null` → FAIL CLOSED to driver-self-only: the intent is returned
+ *   with no resolved backends. The driver is definitionally reachable and
+ *   self-launches; there is NO stored dispatch value to fall back to. This is the
+ *   deliberate G2 behavior change from `applyDispatchInventory(cfg, null) ⇒ cfg`.
+ *   Ambient resolution deliberately does NOT apply here — `null` means "resolve NO
+ *   pool", which is a stronger statement than "no handshake happened".
+ *
+ *   ⚠ A caller that HAS no handshake but DOES have an environment wants
+ *   {@link ambientAuditorDescriptor}, NOT `null`. Passing `null` there is a silent
+ *   capability loss: it short-circuits before {@link resolveAmbientSources}, so a
+ *   declared + reachable lane never becomes a pool. Remediate did exactly that at all
+ *   three of its dispatch sites and consequently could not dispatch to any non-self
+ *   pool; it now routes through `loadRemediateSessionConfig`, which always supplies the
+ *   ambient descriptor.
+ * - `descriptor` present → the driver's `self.provider` becomes the effective
+ *   provider + conversation-host attribution key; its own host/IDE launch blocks
+ *   (`claude_code` / `vscode_task` / `antigravity`) overlay; and `sources[]` becomes
+ *   the effective dispatch pool. When the DRIVER itself is a dispatchable-source
+ *   backend (headless single-lane), its flat per-backend block is reconstructed from
+ *   the matching source so `createFreshSessionProvider` can build the primary
+ *   provider — the pool machinery reads `effective.sources` directly (dedup by
+ *   source id), so there is no double-count.
+ *
+ * **Where `sources[]` comes from (G2.5).** The cut is WHO LAUNCHES: `self` is what only
+ * the host can know (can-dispatch-subagents, can_proxy, roster, ceilings) and is
+ * irreducibly handshake-reported; `sources[]` are the six backends THIS PROCESS spawns
+ * (CLI subprocess or HTTP POST), so they are resolved in-process by
+ * `resolveAmbientSources` — `declared ∩ ambient-verifiable` over the operator's
+ * machine-level declaration — and never routed through the host. An explicit
+ * `descriptor.sources` still wins (the operator's escape hatch).
+ *
+ *   Deliberate deviation from `spec/unified-dispatch-worker-model.md`'s G2.5 sketch (a
+ *   pre-`next-step` shell-out printing `sources[]` for the host to merge): that merge is
+ *   an LLM hand-composing JSON — the host-discretion anti-pattern the commit exists to
+ *   kill, whose failure mode is a silently-empty pool indistinguishable from an
+ *   unreachable machine. The spec's shell-out conflated POPULATE (expensive, network-
+ *   bound, cacheable) with RESOLVE (local, cheap, must run at the moment of use).
+ *   G2.5 builds RESOLVE; POPULATE lands later behind this same seam.
+ *
+ * Every INTENT field (synthesis / analyzers / graph / quota / block_quota /
+ * design_review / dispatch fan-out knobs / …) is preserved identically. Never mutates
+ * its inputs.
+ *
+ * NOT pure since G2.5: when a descriptor omits `sources`, this READS the ambient
+ * environment (the declaration file, env vars, PATH). That is deliberate and is the
+ * whole point — resolving anywhere else would let the reach check and the launch read
+ * different environments. It stays cheap (one small JSON read, and only on the
+ * descriptor-present path; `descriptor == null` short-circuits before it) and every
+ * probe is injectable via {@link ResolveSessionConfigOptions} for tests.
+ */
+export declare function resolveSessionConfig(intent: RepoSessionIntent, descriptor: AuditorDescriptor | null | undefined, options?: ResolveSessionConfigOptions): SessionConfig;
+//# sourceMappingURL=resolveSessionConfig.d.ts.map

package/dist/shared/config/resolveSessionConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSessionConfig.d.ts","sourceRoot":"","sources":["../../../src/shared/config/resolveSessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,gCAAgC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAM5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,EAChD,OAAO,CAAC,EAAE,2BAA2B,GACpC,aAAa,CAmCf"}

package/dist/shared/config/resolveSessionConfig.js

@@ -0,0 +1,105 @@
+import { DISPATCHABLE_SOURCE_PROVIDERS, } from "../types/sessionConfig.js";
+import { sourceProviderConfig } from "../quota/apiPool.js";
+import { resolveAmbientSources, } from "../providers/auditorSources.js";
+const DISPATCHABLE_PROVIDER_SET = new Set(DISPATCHABLE_SOURCE_PROVIDERS);
+/**
+ * Produce the in-memory EFFECTIVE {@link SessionConfig} every dispatch/provider
+ * consumer reads, from the persisted {@link RepoSessionIntent} (audit intent +
+ * policy, NO dispatch inventory) overlaid with the per-invocation
+ * {@link AuditorDescriptor} (the driver's identity + own launch transport +
+ * reachable `sources[]`). This is the single seam that replaces the retired
+ * `applyDispatchInventory`: the backend/launch set now comes from the per-auditor
+ * descriptor, never the repo session-config, and is never inherited across auditors
+ * ([[capability-is-per-auditor-not-per-audit]], `spec/unified-dispatch-worker-model.md`, G2).
+ *
+ * - `descriptor == null` → FAIL CLOSED to driver-self-only: the intent is returned
+ *   with no resolved backends. The driver is definitionally reachable and
+ *   self-launches; there is NO stored dispatch value to fall back to. This is the
+ *   deliberate G2 behavior change from `applyDispatchInventory(cfg, null) ⇒ cfg`.
+ *   Ambient resolution deliberately does NOT apply here — `null` means "resolve NO
+ *   pool", which is a stronger statement than "no handshake happened".
+ *
+ *   ⚠ A caller that HAS no handshake but DOES have an environment wants
+ *   {@link ambientAuditorDescriptor}, NOT `null`. Passing `null` there is a silent
+ *   capability loss: it short-circuits before {@link resolveAmbientSources}, so a
+ *   declared + reachable lane never becomes a pool. Remediate did exactly that at all
+ *   three of its dispatch sites and consequently could not dispatch to any non-self
+ *   pool; it now routes through `loadRemediateSessionConfig`, which always supplies the
+ *   ambient descriptor.
+ * - `descriptor` present → the driver's `self.provider` becomes the effective
+ *   provider + conversation-host attribution key; its own host/IDE launch blocks
+ *   (`claude_code` / `vscode_task` / `antigravity`) overlay; and `sources[]` becomes
+ *   the effective dispatch pool. When the DRIVER itself is a dispatchable-source
+ *   backend (headless single-lane), its flat per-backend block is reconstructed from
+ *   the matching source so `createFreshSessionProvider` can build the primary
+ *   provider — the pool machinery reads `effective.sources` directly (dedup by
+ *   source id), so there is no double-count.
+ *
+ * **Where `sources[]` comes from (G2.5).** The cut is WHO LAUNCHES: `self` is what only
+ * the host can know (can-dispatch-subagents, can_proxy, roster, ceilings) and is
+ * irreducibly handshake-reported; `sources[]` are the six backends THIS PROCESS spawns
+ * (CLI subprocess or HTTP POST), so they are resolved in-process by
+ * `resolveAmbientSources` — `declared ∩ ambient-verifiable` over the operator's
+ * machine-level declaration — and never routed through the host. An explicit
+ * `descriptor.sources` still wins (the operator's escape hatch).
+ *
+ *   Deliberate deviation from `spec/unified-dispatch-worker-model.md`'s G2.5 sketch (a
+ *   pre-`next-step` shell-out printing `sources[]` for the host to merge): that merge is
+ *   an LLM hand-composing JSON — the host-discretion anti-pattern the commit exists to
+ *   kill, whose failure mode is a silently-empty pool indistinguishable from an
+ *   unreachable machine. The spec's shell-out conflated POPULATE (expensive, network-
+ *   bound, cacheable) with RESOLVE (local, cheap, must run at the moment of use).
+ *   G2.5 builds RESOLVE; POPULATE lands later behind this same seam.
+ *
+ * Every INTENT field (synthesis / analyzers / graph / quota / block_quota /
+ * design_review / dispatch fan-out knobs / …) is preserved identically. Never mutates
+ * its inputs.
+ *
+ * NOT pure since G2.5: when a descriptor omits `sources`, this READS the ambient
+ * environment (the declaration file, env vars, PATH). That is deliberate and is the
+ * whole point — resolving anywhere else would let the reach check and the launch read
+ * different environments. It stays cheap (one small JSON read, and only on the
+ * descriptor-present path; `descriptor == null` short-circuits before it) and every
+ * probe is injectable via {@link ResolveSessionConfigOptions} for tests.
+ */
+export function resolveSessionConfig(intent, descriptor, options) {
+    // The intent carries NO dispatch-inventory fields and no `dispatch.rolling_engine`
+    // (RepoDispatchConfig), so the base effective config is the intent verbatim; its
+    // narrower `dispatch` is structurally assignable to DispatchConfig.
+    const effective = { ...intent };
+    if (descriptor == null) {
+        return effective;
+    }
+    const self = descriptor.self ?? {};
+    if (self.provider !== undefined) {
+        effective.provider = self.provider;
+        effective.host_provider = self.provider;
+    }
+    if (self.claude_code !== undefined)
+        effective.claude_code = self.claude_code;
+    if (self.vscode_task !== undefined)
+        effective.vscode_task = self.vscode_task;
+    if (self.antigravity !== undefined)
+        effective.antigravity = self.antigravity;
+    if (self.parallel_workers !== undefined) {
+        effective.parallel_workers = self.parallel_workers;
+    }
+    // `declared ∩ ambient-verifiable`, resolved IN-PROCESS (G2.5). An explicit
+    // hand-authored `--auditor sources[]` still wins — it is the operator's escape
+    // hatch and the only way to force a lane this process cannot prove.
+    const sources = descriptor.sources ?? resolveAmbientSources(options).sources;
+    if (sources.length > 0) {
+        effective.sources = sources;
+        if (self.provider && DISPATCHABLE_PROVIDER_SET.has(self.provider)) {
+            // The FIRST source matching the driver's provider supplies its flat block. With
+            // multiple same-provider sources (e.g. two NIM endpoints), the operator orders
+            // `sources[]` so the driver's own endpoint is first; the non-primary ones still
+            // become their own pools via `effective.sources`.
+            const primary = sources.find((s) => s.provider === self.provider);
+            if (primary)
+                Object.assign(effective, sourceProviderConfig(primary));
+        }
+    }
+    return effective;
+}
+//# sourceMappingURL=resolveSessionConfig.js.map

package/dist/shared/config/resolveSessionConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSessionConfig.js","sourceRoot":"","sources":["../../../src/shared/config/resolveSessionConfig.ts"],"names":[],"mappings":"AACA,OAAO,EACL,6BAA6B,GAG9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAEL,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AAUxC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAC5D,6BAA6B,CAC9B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAyB,EACzB,UAAgD,EAChD,OAAqC;IAErC,mFAAmF;IACnF,iFAAiF;IACjF,oEAAoE;IACpE,MAAM,SAAS,GAAkB,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC7E,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC7E,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC7E,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACrD,CAAC;IACD,2EAA2E;IAC3E,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;IAC7E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,gFAAgF;YAChF,+EAA+E;YAC/E,gFAAgF;YAChF,kDAAkD;YAClD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClE,IAAI,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/shared/dispatch/admissionLoop.d.ts

@@ -100,15 +100,15 @@ export declare const AdmissionGrantSchema: z.ZodObject<{
     lease_id: z.ZodString;
     cost: z.ZodNumber;
 }, "strict", z.ZodTypeAny, {
+    pool_id: string;
     cost: number;
     packet_id: string;
-    pool_id: string;
     resource_key: string;
     lease_id: string;
 }, {
+    pool_id: string;
     cost: number;
     packet_id: string;
-    pool_id: string;
     resource_key: string;
     lease_id: string;
 }>;
@@ -126,19 +126,19 @@ export declare const AdmissionExplainSchema: z.ZodObject<{
     cost: z.ZodNumber;
 }, "strict", z.ZodTypeAny, {
     reason: "admitted" | "no_capable_pool" | "budget_exhausted" | "cap_reached";
+    pool_id: string | null;
     cost: number;
     admitted: boolean;
     packet_id: string;
-    pool_id: string | null;
     resource_key: string | null;
     headroom_before?: number | undefined;
     outstanding_before?: number | undefined;
 }, {
     reason: "admitted" | "no_capable_pool" | "budget_exhausted" | "cap_reached";
+    pool_id: string | null;
     cost: number;
     admitted: boolean;
     packet_id: string;
-    pool_id: string | null;
     resource_key: string | null;
     headroom_before?: number | undefined;
     outstanding_before?: number | undefined;
@@ -162,15 +162,15 @@ export declare const DispatchAdmissionSchema: z.ZodObject<{
         lease_id: z.ZodString;
         cost: z.ZodNumber;
     }, "strict", z.ZodTypeAny, {
+        pool_id: string;
         cost: number;
         packet_id: string;
-        pool_id: string;
         resource_key: string;
         lease_id: string;
     }, {
+        pool_id: string;
         cost: number;
         packet_id: string;
-        pool_id: string;
         resource_key: string;
         lease_id: string;
     }>, "many">;
@@ -187,28 +187,28 @@ export declare const DispatchAdmissionSchema: z.ZodObject<{
         cost: z.ZodNumber;
     }, "strict", z.ZodTypeAny, {
         reason: "admitted" | "no_capable_pool" | "budget_exhausted" | "cap_reached";
+        pool_id: string | null;
         cost: number;
         admitted: boolean;
         packet_id: string;
-        pool_id: string | null;
         resource_key: string | null;
         headroom_before?: number | undefined;
         outstanding_before?: number | undefined;
     }, {
         reason: "admitted" | "no_capable_pool" | "budget_exhausted" | "cap_reached";
+        pool_id: string | null;
         cost: number;
         admitted: boolean;
         packet_id: string;
-        pool_id: string | null;
         resource_key: string | null;
         headroom_before?: number | undefined;
         outstanding_before?: number | undefined;
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     leases: {
+        pool_id: string;
         cost: number;
         packet_id: string;
-        pool_id: string;
         resource_key: string;
         lease_id: string;
     }[];
@@ -216,19 +216,19 @@ export declare const DispatchAdmissionSchema: z.ZodObject<{
     declared_cap: number | null;
     explains: {
         reason: "admitted" | "no_capable_pool" | "budget_exhausted" | "cap_reached";
+        pool_id: string | null;
         cost: number;
         admitted: boolean;
         packet_id: string;
-        pool_id: string | null;
         resource_key: string | null;
         headroom_before?: number | undefined;
         outstanding_before?: number | undefined;
     }[];
 }, {
     leases: {
+        pool_id: string;
         cost: number;
         packet_id: string;
-        pool_id: string;
         resource_key: string;
         lease_id: string;
     }[];
@@ -236,10 +236,10 @@ export declare const DispatchAdmissionSchema: z.ZodObject<{
     declared_cap: number | null;
     explains: {
         reason: "admitted" | "no_capable_pool" | "budget_exhausted" | "cap_reached";
+        pool_id: string | null;
         cost: number;
         admitted: boolean;
         packet_id: string;
-        pool_id: string | null;
         resource_key: string | null;
         headroom_before?: number | undefined;
         outstanding_before?: number | undefined;

package/dist/shared/friction/stepBoundaryCapture.d.ts

@@ -68,7 +68,7 @@ import type { FrictionCategory } from "./frictionRecord.js";
  *                           classify it and improve the pattern set
  *                           (discriminator: the pool id).
  */
-export type StepBoundaryEventType = "phase_reemit" | "artifact_rejected" | "repair_round" | "post_repair_rederive" | "no_change_merge" | "intent_gate_fallback" | "quota_escalation" | "coverage_total_lines_mismatch" | "node_quarantine" | "declared_cost_drift" | "credit_exhausted" | "quota_unclassified" | (string & {});
+export type StepBoundaryEventType = "phase_reemit" | "artifact_rejected" | "repair_round" | "post_repair_rederive" | "no_change_merge" | "intent_gate_fallback" | "quota_escalation" | "coverage_total_lines_mismatch" | "node_quarantine" | "declared_cost_drift" | "credit_exhausted" | "quota_unclassified" | "newly_reachable_backend" | (string & {});
 /**
  * The REAL close-out friction category for a step-boundary fact kind. Total: an
  * unknown event type degrades to `inefficient_feeding` so the mapping is never
@@ -131,6 +131,27 @@ export interface CostDriftInfo {
  * replaces — never awaited by the caller.
  */
 export declare function captureCostDriftFriction(artifactsDir: string, runId: string, info: CostDriftInfo, source: FrictionCaptureArtifact["tool"]): void;
+/**
+ * Route an autonomous fail-closed exclusion of a newly-reachable backend (the G3
+ * reconciliation gate: this auditor can reach a backend the operator's Gate-0
+ * decision never mentions, and no human is present to confirm it) through the
+ * step-boundary chokepoint as a `newly_reachable_backend` fact.
+ *
+ * This is what keeps the autonomous branch LOUD rather than silent. The gate's
+ * whole point is that the operator confirms model choices; when autonomy rules a
+ * backend out on their behalf, they must be able to find out and re-include it at
+ * the next attended gate. One fact per backend, discriminated by its gate key, so
+ * re-derives never double-count and each backend is individually triageable.
+ *
+ * AWAITED, unlike the other reactive captures — deliberately. They fire mid-dispatch,
+ * with a long-running engine still alive to flush them; this one fires at Gate-0, and
+ * the CLI can emit its step and exit immediately after. A dropped write here would
+ * mean the exclusion happened SILENTLY — precisely the failure the gate exists to
+ * prevent — so the caller waits for it. Awaiting is safe: `captureFrictionEvent`
+ * swallows every failure internally, so this can never break the in-flight obligation
+ * (INV-O1-5), which is the property the fire-and-forget style was protecting.
+ */
+export declare function captureNewlyReachableBackendFriction(artifactsDir: string, runId: string, backendKeys: readonly string[], source: FrictionCaptureArtifact["tool"]): Promise<void>;
 /** Credit-exhaustion facts routed through {@link captureCreditExhaustionFriction}. */
 export interface CreditExhaustionInfo {
     poolId: string;

package/dist/shared/friction/stepBoundaryCapture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stepBoundaryCapture.d.ts","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,mBAAmB,GACnB,cAAc,GACd,sBAAsB,GACtB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,+BAA+B,GAC/B,iBAAiB,GACjB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,GACpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AA2ClB;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,qBAAqB,GAC/B,gBAAgB,CAElB;AAgBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAChC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,MAAM,CAIR;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,SAAS,EAAE,qBAAqB,CAAC;IACjC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,IAAI,CAgBN;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,oBAAoB,EAC1B,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,IAAI,CAiBN;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA0C9D;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,qBAAqB,EAC3B,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,IAAI,CAkBN"}
+{"version":3,"file":"stepBoundaryCapture.d.ts","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,mBAAmB,GACnB,cAAc,GACd,sBAAsB,GACtB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,+BAA+B,GAC/B,iBAAiB,GACjB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,GACpB,yBAAyB,GACzB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AA+ClB;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,qBAAqB,GAC/B,gBAAgB,CAElB;AAgBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAChC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,MAAM,CAIR;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,SAAS,EAAE,qBAAqB,CAAC;IACjC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,IAAI,CAgBN;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oCAAoC,CACxD,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,oBAAoB,EAC1B,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,IAAI,CAiBN;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA0C9D;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,qBAAqB,EAC3B,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,IAAI,CAkBN"}

package/dist/shared/friction/stepBoundaryCapture.js

@@ -38,6 +38,10 @@ const STEP_BOUNDARY_CATEGORY = {
     // classify it, so the operator must review the verbatim text and (if it's a
     // real quota/billing death) teach the tool a new precise pattern.
     quota_unclassified: "tool_should_decide",
+    // An autonomous run reached a backend the operator never confirmed and, with no
+    // human to ask, fail-closed-excluded it. Same "operator must reconcile" shape as
+    // a cost drift: only they can say whether that backend should route.
+    newly_reachable_backend: "tool_should_decide",
 };
 /**
  * The REAL close-out friction category for a step-boundary fact kind. Total: an
@@ -117,6 +121,42 @@ export function captureCostDriftFriction(artifactsDir, runId, info, source) {
         area: "dispatch/cost",
     }, source);
 }
+/**
+ * Route an autonomous fail-closed exclusion of a newly-reachable backend (the G3
+ * reconciliation gate: this auditor can reach a backend the operator's Gate-0
+ * decision never mentions, and no human is present to confirm it) through the
+ * step-boundary chokepoint as a `newly_reachable_backend` fact.
+ *
+ * This is what keeps the autonomous branch LOUD rather than silent. The gate's
+ * whole point is that the operator confirms model choices; when autonomy rules a
+ * backend out on their behalf, they must be able to find out and re-include it at
+ * the next attended gate. One fact per backend, discriminated by its gate key, so
+ * re-derives never double-count and each backend is individually triageable.
+ *
+ * AWAITED, unlike the other reactive captures — deliberately. They fire mid-dispatch,
+ * with a long-running engine still alive to flush them; this one fires at Gate-0, and
+ * the CLI can emit its step and exit immediately after. A dropped write here would
+ * mean the exclusion happened SILENTLY — precisely the failure the gate exists to
+ * prevent — so the caller waits for it. Awaiting is safe: `captureFrictionEvent`
+ * swallows every failure internally, so this can never break the in-flight obligation
+ * (INV-O1-5), which is the property the fire-and-forget style was protecting.
+ */
+export async function captureNewlyReachableBackendFriction(artifactsDir, runId, backendKeys, source) {
+    // Sequential, not Promise.all: the capture merges the whole record under a file
+    // lock, so concurrent appends would contend on the same lock for no gain.
+    for (const key of backendKeys) {
+        await captureStepBoundaryFriction(artifactsDir, runId, {
+            eventType: "newly_reachable_backend",
+            discriminator: key,
+            note: `backend "${key}" is reachable but absent from the operator's confirmed ` +
+                `route decision; this run is autonomous, so it was fail-closed-excluded ` +
+                `rather than dispatched unconfirmed. Confirm or exclude it at the next ` +
+                `attended provider-confirmation gate.`,
+            severity: "medium",
+            area: "dispatch/provider-confirmation",
+        }, source);
+    }
+}
 /**
  * Route a credit-exhaustion exclusion (a dispatch pool reported a non-
  * resettable out-of-prepaid-usage-credits condition — distinct from a rate

package/dist/shared/friction/stepBoundaryCapture.js.map

@@ -1 +1 @@
-{"version":3,"file":"stepBoundaryCapture.js","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAsB,MAAM,2BAA2B,CAAC;AAsFrF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,sBAAsB,GAAqC;IAC/D,YAAY,EAAE,qBAAqB;IACnC,YAAY,EAAE,qBAAqB;IACnC,oBAAoB,EAAE,qBAAqB;IAC3C,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,qBAAqB;IACvC,6BAA6B,EAAE,qBAAqB;IACpD,iBAAiB,EAAE,oBAAoB;IACvC,oBAAoB,EAAE,oBAAoB;IAC1C,eAAe,EAAE,oBAAoB;IACrC,iFAAiF;IACjF,+EAA+E;IAC/E,mBAAmB,EAAE,oBAAoB;IACzC,8EAA8E;IAC9E,+EAA+E;IAC/E,gBAAgB,EAAE,oBAAoB;IACtC,yEAAyE;IACzE,wEAAwE;IACxE,4EAA4E;IAC5E,kEAAkE;IAClE,kBAAkB,EAAE,oBAAoB;CACzC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAgC;IAEhC,OAAO,sBAAsB,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACtC,OAAO,EACP,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CACxD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAgC,EAChC,KAAa,EACb,aAAqB;IAErB,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AA0BD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa,EACb,IAA0B,EAC1B,IAAqC;IAErC,MAAM,KAAK,GAAkB;QAC3B,EAAE,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC;QAClE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;QACjC,gBAAgB,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9D,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa;QAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IACF,MAAM,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,KAAa,EACb,IAAmB,EACnB,MAAuC;IAEvC,KAAK,2BAA2B,CAC9B,YAAY,EACZ,KAAK,EACL;QACE,SAAS,EAAE,qBAAqB;QAChC,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,IAAI,EACF,SAAS,IAAI,CAAC,MAAM,sCAAsC,IAAI,CAAC,mBAAmB,IAAI;YACtF,qBAAqB,IAAI,CAAC,eAAe,yCAAyC;YAClF,uCAAuC;QACzC,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,eAAe;KACtB,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAC7C,YAAoB,EACpB,KAAa,EACb,IAA0B,EAC1B,MAAuC;IAEvC,KAAK,2BAA2B,CAC9B,YAAY,EACZ,KAAK,EACL;QACE,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,IAAI,EACF,SAAS,IAAI,CAAC,MAAM,mCAAmC;YACvD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,0EAA0E;YAC1E,iDAAiD;QACnD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,gBAAgB;KACvB,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,yEAAyE;IACzE,8EAA8E;IAC9E,uBAAuB;IACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACzC,IACE,CAAC,2FAA2F,CAAC,IAAI,CAC/F,IAAI,CACL,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,0EAA0E;IAC1E,+EAA+E;IAC/E,wEAAwE;IACxE,gFAAgF;IAChF,6EAA6E;IAC7E,8BAA8B;IAC9B,OAAO,QAAQ;SACZ,OAAO,CAAC,mCAAmC,EAAE,mBAAmB,CAAC;SACjE,OAAO,CAAC,sDAAsD,EAAE,YAAY,CAAC;SAC7E,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC;SAC3D,OAAO,CAAC,8BAA8B,EAAE,YAAY,CAAC;SACrD,OAAO,CAAC,+BAA+B,EAAE,YAAY,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC;SACzD,OAAO,CAAC,uBAAuB,EAAE,YAAY,CAAC;SAC9C,OAAO,CAAC,2BAA2B,EAAE,YAAY,CAAC;SAClD,OAAO,CACN,kJAAkJ,EAClJ,gBAAgB,CACjB;SACA,OAAO,CACN,iFAAiF,EACjF,cAAc,CACf,CAAC;AACN,CAAC;AAgBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAoB,EACpB,KAAa,EACb,IAA2B,EAC3B,MAAuC;IAEvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5E,KAAK,2BAA2B,CAC9B,YAAY,EACZ,KAAK,EACL;QACE,SAAS,EAAE,oBAAoB;QAC/B,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,IAAI,EACF,SAAS,IAAI,CAAC,MAAM,+EAA+E;YACnG,mGAAmG;YACnG,oGAAoG;YACpG,gCAAgC,QAAQ,GAAG;QAC7C,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,gBAAgB;KACvB,EACD,MAAM,CACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"stepBoundaryCapture.js","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAsB,MAAM,2BAA2B,CAAC;AAuFrF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,sBAAsB,GAAqC;IAC/D,YAAY,EAAE,qBAAqB;IACnC,YAAY,EAAE,qBAAqB;IACnC,oBAAoB,EAAE,qBAAqB;IAC3C,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,qBAAqB;IACvC,6BAA6B,EAAE,qBAAqB;IACpD,iBAAiB,EAAE,oBAAoB;IACvC,oBAAoB,EAAE,oBAAoB;IAC1C,eAAe,EAAE,oBAAoB;IACrC,iFAAiF;IACjF,+EAA+E;IAC/E,mBAAmB,EAAE,oBAAoB;IACzC,8EAA8E;IAC9E,+EAA+E;IAC/E,gBAAgB,EAAE,oBAAoB;IACtC,yEAAyE;IACzE,wEAAwE;IACxE,4EAA4E;IAC5E,kEAAkE;IAClE,kBAAkB,EAAE,oBAAoB;IACxC,gFAAgF;IAChF,iFAAiF;IACjF,qEAAqE;IACrE,uBAAuB,EAAE,oBAAoB;CAC9C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAgC;IAEhC,OAAO,sBAAsB,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACtC,OAAO,EACP,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CACxD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAgC,EAChC,KAAa,EACb,aAAqB;IAErB,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AA0BD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa,EACb,IAA0B,EAC1B,IAAqC;IAErC,MAAM,KAAK,GAAkB;QAC3B,EAAE,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC;QAClE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;QACjC,gBAAgB,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9D,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa;QAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IACF,MAAM,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,KAAa,EACb,IAAmB,EACnB,MAAuC;IAEvC,KAAK,2BAA2B,CAC9B,YAAY,EACZ,KAAK,EACL;QACE,SAAS,EAAE,qBAAqB;QAChC,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,IAAI,EACF,SAAS,IAAI,CAAC,MAAM,sCAAsC,IAAI,CAAC,mBAAmB,IAAI;YACtF,qBAAqB,IAAI,CAAC,eAAe,yCAAyC;YAClF,uCAAuC;QACzC,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,eAAe;KACtB,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,YAAoB,EACpB,KAAa,EACb,WAA8B,EAC9B,MAAuC;IAEvC,gFAAgF;IAChF,0EAA0E;IAC1E,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,2BAA2B,CAC/B,YAAY,EACZ,KAAK,EACL;YACE,SAAS,EAAE,yBAAyB;YACpC,aAAa,EAAE,GAAG;YAClB,IAAI,EACF,YAAY,GAAG,0DAA0D;gBACzE,yEAAyE;gBACzE,wEAAwE;gBACxE,sCAAsC;YACxC,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,gCAAgC;SACvC,EACD,MAAM,CACP,CAAC;IACJ,CAAC;AACH,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAC7C,YAAoB,EACpB,KAAa,EACb,IAA0B,EAC1B,MAAuC;IAEvC,KAAK,2BAA2B,CAC9B,YAAY,EACZ,KAAK,EACL;QACE,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,IAAI,EACF,SAAS,IAAI,CAAC,MAAM,mCAAmC;YACvD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,0EAA0E;YAC1E,iDAAiD;QACnD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,gBAAgB;KACvB,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,yEAAyE;IACzE,8EAA8E;IAC9E,uBAAuB;IACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACzC,IACE,CAAC,2FAA2F,CAAC,IAAI,CAC/F,IAAI,CACL,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,0EAA0E;IAC1E,+EAA+E;IAC/E,wEAAwE;IACxE,gFAAgF;IAChF,6EAA6E;IAC7E,8BAA8B;IAC9B,OAAO,QAAQ;SACZ,OAAO,CAAC,mCAAmC,EAAE,mBAAmB,CAAC;SACjE,OAAO,CAAC,sDAAsD,EAAE,YAAY,CAAC;SAC7E,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC;SAC3D,OAAO,CAAC,8BAA8B,EAAE,YAAY,CAAC;SACrD,OAAO,CAAC,+BAA+B,EAAE,YAAY,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC;SACzD,OAAO,CAAC,uBAAuB,EAAE,YAAY,CAAC;SAC9C,OAAO,CAAC,2BAA2B,EAAE,YAAY,CAAC;SAClD,OAAO,CACN,kJAAkJ,EAClJ,gBAAgB,CACjB;SACA,OAAO,CACN,iFAAiF,EACjF,cAAc,CACf,CAAC;AACN,CAAC;AAgBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAoB,EACpB,KAAa,EACb,IAA2B,EAC3B,MAAuC;IAEvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5E,KAAK,2BAA2B,CAC9B,YAAY,EACZ,KAAK,EACL;QACE,SAAS,EAAE,oBAAoB;QAC/B,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,IAAI,EACF,SAAS,IAAI,CAAC,MAAM,+EAA+E;YACnG,mGAAmG;YACnG,oGAAoG;YACpG,gCAAgC,QAAQ,GAAG;QAC7C,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,gBAAgB;KACvB,EACD,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/shared/index.d.ts

@@ -48,9 +48,13 @@ export type { RepoConventions } from "./tooling/repoConventions.js";
 export { detectRepoConventions, formatRepoConventions, } from "./tooling/repoConventions.js";
 export type { StepStatus, DispatchModelTier, DispatchModelHint, } from "./types/stepContract.js";
 export { StepStatusSchema, DispatchModelTierSchema, } from "./types/stepContract.js";
-export type { ProviderName, ResolvedProviderName, SessionUiMode, SubprocessTemplateConfig, ClaudeCodeConfig, CodexConfig, OpenCodeConfig, OpenAiCompatibleConfig, DispatchableSource, DispatchableSourceProvider, VSCodeTaskConfig, AntigravityConfig, AgyConfig, BlockQuotaConfig, QuotaModelLimits, QuotaConfig, ObservabilityConfig, SynthesisConfig, GraphConfig, DispatchRoutingTiers, DispatchConfig, DesignReviewConfig, AnalyzerSetting, SessionConfig, } from "./types/sessionConfig.js";
-export { PROVIDER_NAMES, SESSION_UI_MODES, PROVIDER_SECTION_KEYS, DISPATCHABLE_SOURCE_PROVIDERS, ANALYZER_SETTINGS, AnalyzerSettingSchema, resolveHostDispatchCapability, resolveRollingEngineFlag, assertHostProviderName, } from "./types/sessionConfig.js";
+export type { ProviderName, ResolvedProviderName, SessionUiMode, SubprocessTemplateConfig, ClaudeCodeConfig, CodexConfig, OpenCodeConfig, OpenAiCompatibleConfig, DispatchableSource, DispatchableSourceProvider, VSCodeTaskConfig, AntigravityConfig, AgyConfig, BlockQuotaConfig, QuotaModelLimits, QuotaConfig, ObservabilityConfig, SynthesisConfig, GraphConfig, DispatchRoutingTiers, DispatchConfig, DesignReviewConfig, AnalyzerSetting, SessionConfig, RepoSessionIntent, RepoDispatchConfig, DispatchInventoryField, } from "./types/sessionConfig.js";
+export { PROVIDER_NAMES, SESSION_UI_MODES, PROVIDER_SECTION_KEYS, DISPATCHABLE_SOURCE_PROVIDERS, ANALYZER_SETTINGS, AnalyzerSettingSchema, resolveHostDispatchCapability, resolveAutonomousMode, resolveRollingEngineFlag, assertHostProviderName, DISPATCH_INVENTORY_FIELDS, } from "./types/sessionConfig.js";
+export { resolveSessionConfig } from "./config/resolveSessionConfig.js";
+export type { ResolveSessionConfigOptions } from "./config/resolveSessionConfig.js";
 export { AUDITOR_REPORT_MARKER } from "./contracts.js";
+export type { AuditorSelf, AuditorDescriptor } from "./types/auditorDescriptor.js";
+export { ambientAuditorDescriptor } from "./types/auditorDescriptor.js";
 export { OPENCODE_MANAGED_BROAD_VALUE, withoutOpenCodeWildcard, mergeOpenCodeAgentPermissionRule, mergeOpenCodeGlobalPermissionRule, migrateOpenCodeGlobalExternalDirectory, unionOpenCodeBashCeiling, composeOpenCodeBashCeiling, verifyOpenCodeBashCeiling, } from "./opencodePermissions.js";
 export type { OpenCodeCeilingViolation } from "./opencodePermissions.js";
 export type { ReflectionClarity, ReflectionSeverity, AgentReflection, ReflectionAggregate, } from "./agentReflections.js";
@@ -98,7 +102,7 @@ export { FRICTION_CAPTURE_SCHEMA_VERSION, FRICTION_CAPTURE_DIRNAME, frictionCapt
 export type { FrictionEvent, CapturedFrictionItem, } from "./friction/captureFrictionEvent.js";
 export { captureFrictionEvent } from "./friction/captureFrictionEvent.js";
 export type { StepBoundaryEventType, StepBoundaryFriction, CostDriftInfo, CreditExhaustionInfo, QuotaUnclassifiedInfo, } from "./friction/stepBoundaryCapture.js";
-export { captureStepBoundaryFriction, stepBoundaryEventId, captureCostDriftFriction, captureCreditExhaustionFriction, captureQuotaUnclassifiedFriction, } from "./friction/stepBoundaryCapture.js";
+export { captureStepBoundaryFriction, stepBoundaryEventId, captureCostDriftFriction, captureCreditExhaustionFriction, captureQuotaUnclassifiedFriction, captureNewlyReachableBackendFriction, } from "./friction/stepBoundaryCapture.js";
 export { emitBlindDispatchFrictionIfBlind } from "./friction/blindDispatchFriction.js";
 export type { FrictionDisposition, FrictionDispositionRecord, TriageSubject, FrictionTriageDecision, FrictionOpenObservation, FrictionCategoryAttestation, FrictionCategory, TriagedFrictionArtifact, } from "./friction/triage.js";
 export { FRICTION_DISPOSITIONS, FRICTION_NAMED_DIMENSIONS, FRICTION_CATEGORIES, FRICTION_CATEGORY_LABELS, isFrictionCategory, isFrictionDisposition, reflectionKey, frictionLockPath, collectTriageSubjects, decideFrictionTriage, buildFrictionTriageBlock, appendFrictionUnderLock, recordFrictionDisposition, } from "./friction/triage.js";
@@ -115,7 +119,7 @@ export { TOKEN_USAGE_LEDGER_FILENAME, tokenUsageRunDir, tokenUsageLedgerPath, ap
 export type { ValidationSeverity, ValidationIssue } from "./validation/basic.js";
 export { describeValue, isRecord, createValidationIssue, pushValidationIssue, prefixValidationIssues, formatValidationIssues, requireKeys, } from "./validation/basic.js";
 export { AUDIT_FINDINGS_CONTRACT_VERSION, validateAuditFindingsReport, isValidAuditFindingsReport, } from "./validation/findingsReport.js";
-export { validateSessionConfig, readValidatedSessionConfig, isBareExecutableName, isDirectExecutablePath, isSupportedConfiguredCommand, } from "./validation/sessionConfig.js";
+export { validateSessionConfig, validateRepoSessionIntent, readValidatedRepoSessionIntent, isBareExecutableName, isDirectExecutablePath, isSupportedConfiguredCommand, } from "./validation/sessionConfig.js";
 export type { SourceReader } from "./validation/findingGrounding.js";
 export { normalizeForMatch, normalizeRepoPath, isBareBasename, resolveBasenameToTrackedPath, enumerateTrackedFilePaths, quoteMatches, verifyFindingGrounding, findingIsGrounded, findingNeedsVerificationBeforeFix, } from "./validation/findingGrounding.js";
 export { groundDesignFinding, groundDesignFindings, } from "./validation/designFindingGrounding.js";
@@ -140,8 +144,8 @@ export { AgyProvider, AGY_PROVIDER_NAME, buildActiveAgySessionMessage, } from ".
 export type { AgyProviderOptions } from "./providers/agyProvider.js";
 export type { AutoProviderContext, FreshSessionProviderDeps, } from "./providers/providerFactory.js";
 export { resolveFreshSessionProviderName, createFreshSessionProvider, hasConfiguredOpenAiCompatible, discoverOutputConstraintCapability, } from "./providers/providerFactory.js";
-export type { CapabilityTier, DiscoveredProvider, ConfirmedProviderPool, SourcePoolDisplayEntry, } from "./providers/providerConfirmation.js";
-export { discoverProviders, queryProviderQuota, applyProviderConfirmationSelections, representativeModelId, annotateConfirmedPoolCost, annotateConfirmedPool, deriveSourcePoolDisplay, deriveSourcePoolDisplayFromSources, } from "./providers/providerConfirmation.js";
+export type { CapabilityTier, DiscoveredProvider, SourcePoolDisplayEntry, } from "./providers/providerConfirmation.js";
+export { discoverProviders, queryProviderQuota, representativeModelId, annotateConfirmedPoolCost, annotateConfirmedPool, deriveSourcePoolDisplay, deriveSourcePoolDisplayFromSources, } from "./providers/providerConfirmation.js";
 export { commandExists, isSelfSpawnBlocked, resolveConversationHostProvider, resolveHostProviderName, setCommandExistsForTesting, } from "./providers/providerPathGuard.js";
 export type { LimitSource, LimitConfidence, HostConcurrencyLimitSource, HostConcurrencyLimit, ResolvedLimits, QuotaStateEntry, QuotaState, WaveBindingCap, WaveSchedule, QuotaBindingWindow, BackoffState, ObservedWaveOutcome, } from "./quota/types.js";
 export { LimitSourceSchema, LimitConfidenceSchema, HostConcurrencyLimitSourceSchema, HostConcurrencyLimitSchema, ResolvedLimitsSchema, WaveBindingCapSchema, BackoffStateSchema, } from "./quota/types.js";
@@ -182,6 +186,8 @@ export { computeDispatchCapacity, summarizeDispatchCapacityPools, detectLivelock
 export type { CapacityPool, PoolDispatchAllocation, DispatchCapacityPoolSummary, DispatchCapacity, ComputeDispatchCapacityInput, PartialCompletionReason, PartialCompletionTerminal, } from "./quota/capacity.js";
 export { DispatchCapacityPoolSummarySchema } from "./quota/capacity.js";
 export { buildSourcePools, buildSourcePool, sourceProviderConfig, dispatchableSourceId, collectDispatchableSources, gatherDispatchableSources, primaryInProcessSource, isDemotableInProcessProvider, shouldDemotePrimaryInProcess, withSourceConfig, sourceByPoolId, buildHostModelPool, buildHostModelPools, } from "./quota/apiPool.js";
+export { buildHostPoolPreamble } from "./quota/hostPool.js";
+export type { HostPoolPreamble } from "./quota/hostPool.js";
 export type { CacheablePromptParts } from "./prompts.js";
 export { buildCacheablePrompt, DISPATCH_PROMPT_HANDOFF_NOTE, renderHostScratchNote, } from "./prompts.js";
 export type { HostAssetKind, RenderHostAssetOptions } from "./hostAssets.js";
@@ -244,8 +250,8 @@ export type { RollingDispatchEnginePacket, RollingDispatchEngineResult, RollingD
 export { ROLLING_DISPATCH_ENGINE_VERSION } from "./types/rollingDispatch.js";
 export type { ConfirmedPoolEntry, ProviderConfirmationResult, ProviderConfirmationInput, } from "./types/providerConfirmation.js";
 export { PROVIDER_CONFIRMATION_RESULT_VERSION, PROVIDER_CONFIRMATION_INPUT_VERSION, } from "./types/providerConfirmation.js";
-export type { SharedProviderConfirmation, SharedProviderConfirmationRead } from "./providers/sharedProviderConfirmation.js";
-export { SHARED_PROVIDER_CONFIRMATION_VERSION, SHARED_PROVIDER_CONFIRMATION_FILENAME, sharedProviderConfirmationPath, currentProviderRoster, buildSharedProviderConfirmation, writeSharedProviderConfirmation, readSharedProviderConfirmation, readConfirmedCostPositions, readConfirmedDispatchBias, clampDispatchBias, PROVIDER_CONFIRMATION_INPUT_FILENAME, readProviderConfirmationInput } from "./providers/sharedProviderConfirmation.js";
+export type { SharedProviderConfirmation, RenderedProviderConfirmation, ConfirmedDispatchPolicy, DispatchExclusionPattern, DispatchExclusion, ExcludableBackend, NewlyReachableBackend } from "./providers/sharedProviderConfirmation.js";
+export { SHARED_PROVIDER_CONFIRMATION_VERSION, SHARED_PROVIDER_CONFIRMATION_FILENAME, sharedProviderConfirmationPath, buildSharedProviderConfirmation, buildProviderConfirmationRender, writeSharedProviderConfirmation, readSharedProviderConfirmation, readConfirmedCostPositions, readConfirmedDispatchBias, readConfirmedDispatchPolicy, resolveDispatchExclusion, clampDispatchBias, computeNewlyReachableBackends, confirmedBackendKeys, PROVIDER_CONFIRMATION_INPUT_FILENAME, readProviderConfirmationInput, unlinkProviderConfirmationInput } from "./providers/sharedProviderConfirmation.js";
 export type { EncodedClause, FreeFormIntentInterpretation, } from "./types/intentInterpretation.js";
 export { FREE_FORM_INTENT_INTERPRETATION_VERSION } from "./types/intentInterpretation.js";
 export type { ObligationState, Obligation, ObligationDef, ObligationOutcome, ObligationEngine, AdvanceResult, } from "./engine/obligationEngine.js";