dsh-autotier 0.1.0

package/lib/types/command.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The `/tier` command: a session-scoped escape hatch over the automatic
+ * routing. `auto` returns the session to routing, `strong`/`cheap` pin it,
+ * `off` disables routing entirely, and `status` prints the live decision state.
+ * @module dsh-autotier/command
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { AutotierService } from './service.js';
+import type { AgentStateStore } from './state.js';
+/**
+ * Register the `/tier` command on the plugin fiber.
+ * @param ctx - the plugin context (must have `commands`).
+ * @param service - the live service.
+ * @param states - the per-agent state store.
+ */
+export declare function registerTierCommand(ctx: Context, service: AutotierService, states: AgentStateStore): void;
+//# sourceMappingURL=command.d.ts.map

package/lib/types/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AA8BjD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAwBzG"}

package/lib/types/config.d.ts

@@ -0,0 +1,94 @@
+/**
+ * The explicit-resolve judge for dsh-autotier: it re-checks every default,
+ * bound and cross-field requirement field by field, so programmatic
+ * construction that bypasses Schemastery normalization still fails loud. The
+ * schema itself lives in `schema.ts`.
+ *
+ * @module dsh-autotier/config
+ */
+import { type CostMode, type EffortId, type RoutingMode } from './types.js';
+import type { Config, JudgeConfig, ScenarioToggles, VisionConfig } from './schema.js';
+export { Config } from './schema.js';
+export type { EscalationConfig, FallbackEntry, GuardConfig, IntentConfig, IntentRule, JudgeConfig, ScenarioToggles, TierConfig, VisionConfig, } from './schema.js';
+/** One resolved fallback landing. */
+export interface ResolvedFallbackEntry {
+    provider: string;
+    model: string;
+}
+/** One resolved tier landing. Runtime-frozen by {@link resolveConfig}. */
+export interface ResolvedTierConfig {
+    provider: string;
+    model: string;
+    effort: EffortId;
+    followSession: boolean;
+    fallback: ResolvedFallbackEntry[];
+}
+/** One fully-resolved declarative rule. */
+export interface ResolvedRule {
+    id: string;
+    when: {
+        patterns: string[];
+        tools: string[];
+        cwd: string;
+    };
+    tier: 'cheap' | 'strong';
+    priority: number;
+}
+/** Fully-resolved configuration: every field present, runtime-frozen. */
+export interface ResolvedConfig {
+    tiers: {
+        strong: ResolvedTierConfig;
+        cheap: ResolvedTierConfig;
+        vision: Required<VisionConfig>;
+    };
+    intent: {
+        ruleThreshold: number;
+        attemptBand: {
+            enabled: boolean;
+            tauLow: number;
+        };
+        hysteresis: {
+            toStrong: number;
+            toCheap: number;
+        };
+        rules: ResolvedRule[];
+        judge: Required<JudgeConfig>;
+        scenarios: Required<ScenarioToggles>;
+        costMode: CostMode;
+    };
+    guard: {
+        enabled: boolean;
+        tiers: ('cheap')[];
+        whitelist: string[];
+        protectedPaths: string[];
+        interopDefend: 'auto' | 'none';
+    };
+    escalation: {
+        threshold: number;
+        windowMs: number;
+        ttlMs: number;
+        fallbackTtlMs: number;
+        signature: boolean;
+    };
+    routingMode: RoutingMode;
+}
+/**
+ * Resolve raw config to the frozen runtime policy, re-judging every default,
+ * bound and cross-field requirement.
+ *
+ * @param raw - raw loader config; `undefined` for a bare row.
+ * @returns the frozen resolved config.
+ * @throws {Error} when a value is out of bounds or a cross-field requirement fails.
+ */
+export declare function resolveConfig(raw: Config | undefined): ResolvedConfig;
+/**
+ * Judge a configuration without keeping the resolved value. This is the
+ * save-time hook the `autotier` settings namespace registers, so a user write
+ * that violates a cross-field requirement is refused at the write instead of
+ * silently disabling the plugin.
+ *
+ * @param value - the configuration to judge.
+ * @throws {Error} when the configuration is invalid.
+ */
+export declare function validateConfig(value: Config): void;
+//# sourceMappingURL=config.d.ts.map

package/lib/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAKL,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,WAAW,EACjB,MAAM,YAAY,CAAA;AAEnB,OAAO,KAAK,EACV,MAAM,EAIN,WAAW,EACX,eAAe,EAEf,YAAY,EACb,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,UAAU,EACV,WAAW,EACX,eAAe,EACf,UAAU,EACV,YAAY,GACb,MAAM,aAAa,CAAA;AAEpB,qCAAqC;AACrC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,QAAQ,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE,qBAAqB,EAAE,CAAA;CAClC;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB,CAAA;QAC1B,KAAK,EAAE,kBAAkB,CAAA;QACzB,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;KAC/B,CAAA;IACD,MAAM,EAAE;QACN,aAAa,EAAE,MAAM,CAAA;QACrB,WAAW,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,UAAU,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;QACjD,KAAK,EAAE,YAAY,EAAE,CAAA;QACrB,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC5B,SAAS,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;QACpC,QAAQ,EAAE,QAAQ,CAAA;KACnB,CAAA;IACD,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAA;QAChB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAA;QAClB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,cAAc,EAAE,MAAM,EAAE,CAAA;QACxB,aAAa,EAAE,MAAM,GAAG,MAAM,CAAA;KAC/B,CAAA;IACD,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,aAAa,EAAE,MAAM,CAAA;QACrB,SAAS,EAAE,OAAO,CAAA;KACnB,CAAA;IACD,WAAW,EAAE,WAAW,CAAA;CACzB;AAuND;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAwBrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAElD"}

package/lib/types/guard-rules.d.ts

@@ -0,0 +1,97 @@
+/**
+ * High-impact command and path rules for the autotier guard.
+ *
+ * A TypeScript port of the dependency-free rule logic in `lib/pure.js` of
+ * `dsh-tier-router` (v0.5.0, MIT — see `THIRD_PARTY_NOTICES.md`): the
+ * `ARG_RUNNERS`/`DIRECT_RUNNERS` command-position detection, the 16
+ * `HIGH_IMPACT_COMMAND` patterns, and the 5 `HIGH_IMPACT_PATH` patterns. The
+ * upstream matching order, case-insensitivity, anchored command position, and
+ * 80/120-character truncation are preserved exactly; the port only adds stable
+ * rule ids and the `GuardMatch` shape the guard layer consumes.
+ *
+ * INTENTIONAL DELTA OVER UPSTREAM (the plugin's own Apache-2.0 addition, not
+ * upstream code): upstream never looks inside a `sh -c "..."` payload, so
+ * `sh -c "rm -rf /"` is a documented false negative. {@link SHELL_WRAPPERS} and
+ * {@link SHELL_WRAPPER_MAX_DEPTH} add a second pass that runs only after the
+ * upstream rules return no match: it strips a leading command runner, extracts
+ * the `-c` payload (single-dash flag clusters such as `-lc`, case-insensitive
+ * wrapper names, and the optional backslash escape included), unescapes it, and
+ * re-runs the same matcher on it (bounded by depth) under a
+ * `shell-wrapper:<inner rule>` id. No upstream verdict changes.
+ *
+ * Matching is deliberately conservative: it is a review/escalation signal, never
+ * a substitute for `dsh-defend`, approvals, or the sandbox policy.
+ * @module dsh-autotier/guard-rules
+ */
+/**
+ * Shell wrappers whose `-c` payload must be re-scanned (upstream misses these).
+ * This table and {@link SHELL_WRAPPER_MAX_DEPTH} are the plugin's own extension,
+ * not part of the upstream rule port.
+ */
+export declare const SHELL_WRAPPERS: readonly string[];
+/** Recursion depth bound for nested `sh -c "sh -c ..."` payloads. */
+export declare const SHELL_WRAPPER_MAX_DEPTH = 3;
+/** One named high-impact rule. */
+export interface GuardRule {
+    /** Stable kebab-case identifier, also reported in {@link GuardMatch.rule}. */
+    readonly id: string;
+    /** Human-readable description of the destruction the rule protects against. */
+    readonly description: string;
+    /** The upstream pattern, unchanged (no `g` flag, so matching is stateless). */
+    readonly pattern: RegExp;
+}
+/** A matched rule plus the exact text that matched. */
+export interface GuardMatch {
+    /** The {@link GuardRule.id} that matched, or `shell-wrapper:<inner rule>`. */
+    readonly rule: string;
+    /** The matched rule's description. */
+    readonly description: string;
+    /**
+     * The matched text: for commands the matched substring trimmed and truncated
+     * to 80 characters; for paths the whole target path truncated to 120
+     * characters (upstream reports the path, not the regex substring).
+     */
+    readonly matched: string;
+}
+/**
+ * The 16 upstream `HIGH_IMPACT_COMMAND` patterns, in upstream array order.
+ * `matchCommand` returns the first hit, so order is part of the contract:
+ * `sudo` precedes `wget-pipe-shell`, and the separate `rm` rule precedes all
+ * of these.
+ */
+export declare const HIGH_IMPACT_COMMAND_RULES: readonly GuardRule[];
+/**
+ * The 5 upstream `HIGH_IMPACT_PATH` patterns (credentials, keys, secrets), in
+ * upstream array order. `.env` matches unless the suffix is an
+ * example/sample/template name.
+ */
+export declare const HIGH_IMPACT_PATH_RULES: readonly GuardRule[];
+/**
+ * True for `rm` with BOTH recursive and force flags at command position (split
+ * flags included). Prose (`echo rm -rf`) and runner-argument false positives
+ * (`nohup echo rm -rf`) stay unmatched. Upstream-exact: this never unwraps a
+ * shell wrapper.
+ */
+export declare function hasRecursiveForceRm(command: string): boolean;
+/**
+ * Match one shell command string against the recursive-force `rm` rule first
+ * (upstream order) and then the command rules in array order; only when those
+ * find nothing, re-scan a `sh -c`-style payload (see the module header delta).
+ * @param command - one shell command string.
+ * @returns the first match, or null when the command is not high impact.
+ */
+export declare function matchCommand(command: string): GuardMatch | null;
+/**
+ * Match one file path (a write/edit target) against the path rules in array
+ * order.
+ * @param filePath - one target path.
+ * @returns the first match, or null when the path is not high impact.
+ */
+export declare function matchPath(filePath: string): GuardMatch | null;
+/**
+ * Credential/secret path classification for protected-path review: true when
+ * any of the {@link HIGH_IMPACT_PATH_RULES} matches, i.e. exactly the paths
+ * {@link matchPath} reports.
+ */
+export declare function isCredentialPath(filePath: string): boolean;
+//# sourceMappingURL=guard-rules.d.ts.map

package/lib/types/guard-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-rules.d.ts","sourceRoot":"","sources":["../../src/guard-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAiCH;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAAyC,CAAA;AAErF,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,IAAI,CAAA;AAiCxC,kCAAkC;AAClC,MAAM,WAAW,SAAS;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,sCAAsC;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,SAAS,EAiBzD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,SAAS,EAMtD,CAAA;AAoGD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQ7D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D"}

package/lib/types/guard.d.ts

@@ -0,0 +1,70 @@
+/**
+ * The high-risk guard: a deterministic, tier-conditional denial on
+ * `tools/pre-execute`. It protects the cheap tier only — the strong model is
+ * the reviewer — and it never weakens `dsh-defend`, the approval service or the
+ * sandbox policy.
+ *
+ * Failure discipline: a guard that throws escalates the agent to the strong
+ * tier and lets the call through. Denying every call on a guard bug would turn
+ * one defect into a dead session; the escalation keeps the safety property
+ * (the strong model reviews) without breaking the turn.
+ *
+ * @module dsh-autotier/guard
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { ResolvedConfig } from './config.js';
+import { isCredentialPath } from './guard-rules.js';
+import type { AutotierService } from './service.js';
+import type { AgentStateStore } from './state.js';
+import type { TierId } from './types.js';
+/** Redact credential-shaped spans from one snippet. */
+export declare function redactSnippet(text: string): string;
+/** The guard's verdict for one call. */
+export interface GuardVerdict {
+    readonly action: 'allow' | 'deny';
+    /** Empty for `allow`. */
+    readonly reason: string;
+    /** The rule id that fired, or `''`. */
+    readonly rule: string;
+    /** Which axis matched. */
+    readonly axis: 'command' | 'path' | 'protected-path' | 'none';
+}
+/** One call as the guard sees it. */
+export interface GuardInput {
+    readonly toolName: string;
+    readonly args: unknown;
+    readonly tier: TierId;
+    readonly config: ResolvedConfig;
+    /** Resolved sandbox mode, when the policy service is composed. */
+    readonly sandboxMode?: string;
+}
+/**
+ * Judge one tool call.
+ *
+ * Order: the guard must be enabled and the executing tier protected, then the
+ * whitelist, then the credential/command rules, then the protected-path review
+ * rule. A denial names the rule and tells the model to escalate instead of
+ * retrying.
+ *
+ * @param input - the call, the executing tier and the live configuration.
+ * @returns the verdict.
+ */
+export declare function evaluateToolCall(input: GuardInput): GuardVerdict;
+/** Options for {@link registerGuardHook}. */
+export interface GuardHookOptions {
+    readonly ctx: Context;
+    readonly service: AutotierService;
+    readonly states: AgentStateStore;
+}
+/**
+ * Register the `tools/pre-execute` guard.
+ *
+ * The listener is registered with `{ prepend: true }` so a denial claims the
+ * call before any pass-through listener; every allowed call awaits `next()`.
+ *
+ * @param options - the plugin context, service and state store.
+ */
+export declare function registerGuardHook({ ctx, service, states }: GuardHookOptions): void;
+/** Re-exported for the status surface. */
+export { isCredentialPath };
+//# sourceMappingURL=guard.d.ts.map

package/lib/types/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAA2B,MAAM,kBAAkB,CAAA;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AA6BxC,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,wCAAwC;AACxC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACjC,yBAAyB;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAAA;CAC9D;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAkDD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAqDhE;AAgBD,6CAA6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CACjC;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,gBAAgB,GAAG,IAAI,CA0DlF;AAED,0CAA0C;AAC1C,OAAO,EAAE,gBAAgB,EAAE,CAAA"}

package/lib/types/index.d.ts

@@ -0,0 +1,60 @@
+/**
+ * dsh-autotier: automatic strong/cheap model-tier routing for DeepSeek Harness.
+ *
+ * One user instruction enters, one tier decision comes out — with no manual
+ * model switching. Complex intent is planned on the strong tier and implemented
+ * on the cheap tier; simple intent is designed and implemented on the cheap
+ * tier directly. High-risk tool calls are denied while the cheap tier executes,
+ * and repeated failures escalate to the strong tier with a TTL fallback.
+ *
+ * The routing seam is the official `agent/request` waterfall: a listener
+ * registered at load time on the root scope with `{ prepend: true }` runs
+ * outermost, awaits `next()` exactly once, and returns a replacement
+ * `LlmCallConfig` (provider/model/effort plus the preserved sampling scalars).
+ *
+ * @module dsh-autotier
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { type Config as AutotierConfig } from './config.js';
+export { Config, resolveConfig, validateConfig } from './config.js';
+export type { Config as AutotierConfig, ResolvedConfig } from './config.js';
+export type { AutotierStatus, CostMode, EffortId, RouteDecision, RouteSource, RoutingMode, Scenario, TierId, TierRoute, } from './types.js';
+export { EFFORT_IDS, ROUTING_MODES, SCENARIOS, TIER_IDS } from './types.js';
+export { AutotierService } from './service.js';
+export { AutotierRouter } from './routing.js';
+export type { RouteProposal, RouteVeto, TierChange } from './routing.js';
+export { AgentStateStore, registerTierProjection, TIER_PROJECTION_KEY } from './state.js';
+export { classifyIntent, compileRules, computeSignals, evaluateRules, fingerprintOf, PosteriorTable, wilsonLowerBound, } from './intent.js';
+export type { IntentInput, IntentResult, IntentSignals, Posterior, RuleHit } from './intent.js';
+export { attemptBandApplies, createRouteState, decideTier, escalationActive, judgeNeeded, noteFailure, noteFallback, noteJudgeCall, } from './policy.js';
+export type { Decision, RouteState } from './policy.js';
+export { advanceFallback, classifyFallback, effortRank, escalationLadder, fallbackActive, nextEffortStep, resolveRoute, routeEquals, } from './tiers.js';
+export type { EscalationRung, FallbackClass, FallbackRecord } from './tiers.js';
+export { JUDGE_LABELS, parseJudgeLabel, resolveJudgeRoute, runJudge } from './judge.js';
+export type { JudgeOutcome, JudgeRoute } from './judge.js';
+export { evaluateToolCall, redactSnippet, registerGuardHook } from './guard.js';
+export type { GuardInput, GuardVerdict } from './guard.js';
+export { HIGH_IMPACT_COMMAND_RULES, HIGH_IMPACT_PATH_RULES, isCredentialPath, matchCommand, matchPath, } from './guard-rules.js';
+export type { GuardMatch, GuardRule } from './guard-rules.js';
+/** The cordis.yml row id and the plugin name must match. */
+export declare const name = "dsh-autotier";
+/**
+ * Hard service dependencies. `sessions` is plural — the service name really is
+ * `sessions` (`packages/core/session/src/index.ts` registers `super(ctx,
+ * 'sessions')`); declaring a non-existent name would leave this plugin PENDING
+ * forever. Every other capability (`agents`, `subagents`, `systemPrompt`,
+ * `planMode`, `sessionProjections`, `sandboxPolicy`) is read with `ctx.get()`
+ * and degrades when absent.
+ */
+export declare const inject: string[];
+/**
+ * Mount the plugin: judge the configuration, register the `autotier` settings
+ * namespace, publish the `ctx.autotier` service, and wire the routing listeners,
+ * the `/tier` command and the two read-only tools.
+ *
+ * @param ctx - the plugin context.
+ * @param config - the raw row configuration; every field is optional.
+ * @throws {Error} when the configuration fails the cross-field judgement.
+ */
+export declare function apply(ctx: Context, config?: AutotierConfig): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAyC,KAAK,MAAM,IAAI,cAAc,EAAE,MAAM,aAAa,CAAA;AAOlG,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACnE,YAAY,EAAE,MAAM,IAAI,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC3E,YAAY,EACV,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,WAAW,EACX,WAAW,EACX,QAAQ,EACR,MAAM,EACN,SAAS,GACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACzF,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,aAAa,EACb,aAAa,EACb,cAAc,EACd,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC/F,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC/E,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACvF,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC/E,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE7D,4DAA4D;AAC5D,eAAO,MAAM,IAAI,iBAAiB,CAAA;AAElC;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,UAAuD,CAAA;AAE1E;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,cAAmB,GAAG,IAAI,CAqCrE"}

package/lib/types/intent.d.ts

@@ -0,0 +1,179 @@
+/**
+ * The deterministic intent layer: a zero-token classifier (declarative rule
+ * table, explicit-intent patterns, bilingual keyword scoring, structural
+ * signals) plus the fingerprint posterior table that learns per-shape win rates
+ * from terminal outcomes.
+ *
+ * Everything in this module is pure and synchronous, so the whole classification
+ * matrix is unit-testable without a host. The low-confidence judge lives in
+ * `judge.ts` and is consulted only when this layer reports low confidence.
+ *
+ * @module dsh-autotier/intent
+ */
+import type { ResolvedRule, ScenarioToggles } from './config.js';
+import type { Scenario, TierId } from './types.js';
+/** One declarative rule row, already resolved by `resolveConfig`. */
+export interface CompiledRule {
+    readonly id: string;
+    readonly patterns: readonly RegExp[];
+    readonly tools: readonly string[];
+    readonly cwd: string;
+    readonly tier: 'cheap' | 'strong';
+    readonly priority: number;
+}
+/** Compile the resolved rule table, ordered by descending priority. */
+export declare function compileRules(rules: readonly ResolvedRule[]): CompiledRule[];
+/** Input facts the classifier reads. All are derived from the live session. */
+export interface IntentInput {
+    /** The newest user message text. */
+    readonly text: string;
+    /** Tool names already used in this session (advisory depth signal). */
+    readonly toolNames: readonly string[];
+    /** Whether the newest user message carries an image block. */
+    readonly hasImage: boolean;
+    /** Number of messages in the session (turn-depth signal). */
+    readonly messageCount: number;
+    /** Workspace path, matched against rule `when.cwd` prefixes. */
+    readonly cwd: string;
+}
+/** Structural signals computed from the input. */
+export interface IntentSignals {
+    readonly chars: number;
+    readonly estTokens: number;
+    /** How many of the token bands `[4000, 12000, 30000]` the input crosses. */
+    readonly tokenBands: number;
+    readonly fences: number;
+    readonly toolCalls: number;
+    readonly messageCount: number;
+    readonly hardHints: number;
+    /** 0..8; `>= 3` escalates to the strong tier regardless of scenario. */
+    readonly score: number;
+}
+/** Why a classification short-circuited before keyword scoring. */
+export type ShortCircuit = 'image' | 'long-text' | 'greeting' | 'explicit';
+/** The classifier's verdict. */
+export interface IntentResult {
+    readonly scenario: Scenario;
+    readonly tier: TierId;
+    /** 0..1; the rule layer decides alone at or above `intent.ruleThreshold`. */
+    readonly confidence: number;
+    /** Keyword score that produced the confidence. */
+    readonly keywordScore: number;
+    readonly signals: IntentSignals;
+    readonly reasons: readonly string[];
+    readonly shortCircuit: ShortCircuit | undefined;
+    /** Fingerprint of this shape: `scenario|tokenBand|fenceBand`. */
+    readonly fingerprint: string;
+}
+/** One declarative-rule hit. */
+export interface RuleHit {
+    readonly id: string;
+    readonly tier: 'cheap' | 'strong';
+}
+/**
+ * Evaluate the declarative rule table. Rules are already sorted by descending
+ * priority; the first match wins. A guard denial always outranks a rule (the
+ * guard runs on `tools/pre-execute`, after the routing decision, and denies
+ * regardless of tier).
+ *
+ * @param rules - compiled rules.
+ * @param input - the live input facts.
+ * @returns the winning hit, or null when no rule matches.
+ */
+export declare function evaluateRules(rules: readonly CompiledRule[], input: IntentInput): RuleHit | null;
+/** Compute the structural signal vector. */
+export declare function computeSignals(input: IntentInput): IntentSignals;
+/** Build the fingerprint key for one classification. */
+export declare function fingerprintOf(scenario: Scenario, signals: IntentSignals): string;
+/** Options for {@link classifyIntent}. */
+export interface ClassifyOptions {
+    readonly rules?: readonly CompiledRule[];
+    readonly scenarios: Required<ScenarioToggles>;
+    /** Score at or above which structural signals force the strong tier. */
+    readonly signalThreshold?: number;
+}
+/**
+ * Classify one user input. Deterministic and token-free; the caller decides
+ * whether the returned confidence warrants a judge call.
+ *
+ * @param input - the live input facts.
+ * @param options - compiled rules and scenario switches.
+ * @returns the verdict with its reasons.
+ */
+export declare function classifyIntent(input: IntentInput, options: ClassifyOptions): IntentResult;
+/** One fingerprint's outcome counters. */
+export interface Posterior {
+    cheapOK: number;
+    cheapN: number;
+    strongOK: number;
+    strongN: number;
+    /** Epoch millis of the last observation. */
+    lastSeen: number;
+    /** How many observations this key has accumulated (drives the half-life decay). */
+    observations: number;
+    /** How many exploration probes were spent on this key. */
+    probeN: number;
+}
+/** The verdict a posterior yields. */
+export type PosteriorVerdict = 'strong' | 'cheap' | null;
+/** Wilson score interval lower bound for `ok` successes in `n` trials. */
+export declare function wilsonLowerBound(ok: number, n: number, z?: number): number;
+/** Options for {@link PosteriorTable}. */
+export interface PosteriorOptions {
+    /** Observations between two half-life decays (default 10). */
+    readonly halfLife?: number;
+    /** Cold-start threshold: below this total the table abstains (default 8). */
+    readonly coldStart?: number;
+    /** Exploration probability (default 0.05). */
+    readonly epsilon?: number;
+    /** LRU capacity (default 2000). */
+    readonly capacity?: number;
+    /** Deterministic random source for tests. */
+    readonly random?: () => number;
+}
+/**
+ * Per-fingerprint win-rate posteriors. Labels come from terminal task outcomes
+ * only (never from the router's own judge call), and every write decays old
+ * counts once per half-life so a shape's reputation can recover.
+ */
+export declare class PosteriorTable {
+    private readonly entries;
+    private readonly halfLife;
+    private readonly coldStart;
+    private readonly epsilon;
+    private readonly capacity;
+    private readonly random;
+    /** @param options - tuning knobs; defaults match the design table. */
+    constructor(options?: PosteriorOptions);
+    /** Number of tracked fingerprints. */
+    get size(): number;
+    /** Read one posterior without decaying it. */
+    get(key: string): Posterior | undefined;
+    /** Record one terminal outcome for a fingerprint and tier. */
+    record(key: string, tier: TierId, ok: boolean, now: number): void;
+    /** Count one exploration probe on a key. */
+    probe(key: string): void;
+    /**
+     * The table's opinion about one fingerprint, without the exploration roll.
+     * @param key - the fingerprint.
+     * @returns the base verdict and whether an exploration probe is warranted.
+     */
+    opinion(key: string): {
+        verdict: PosteriorVerdict;
+        explore: boolean;
+    };
+    /**
+     * The table's opinion about one fingerprint. The exploration roll is a
+     * decision point, so callers take it once per user input and reuse the
+     * result for every step of that input's turn.
+     * @param key - the fingerprint.
+     * @returns `'strong'`, `'cheap'`, or `null` when the table abstains.
+     */
+    verdict(key: string): PosteriorVerdict;
+    /** Snapshot every key, newest first, for `/tier status` and diagnostics. */
+    snapshot(): {
+        key: string;
+        posterior: Posterior;
+    }[];
+}
+//# sourceMappingURL=intent.d.ts.map

package/lib/types/intent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent.d.ts","sourceRoot":"","sources":["../../src/intent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAElD,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAA;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,YAAY,EAAE,CAW3E;AAED,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,mEAAmE;AACnE,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAA;AAE1E,gCAAgC;AAChC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS,CAAA;IAC/C,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,gCAAgC;AAChC,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAA;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,GAAG,IAAI,CAehG;AA+FD,4CAA4C;AAC5C,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,CA0BhE;AAiBD,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,CAEhF;AAED,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;IAC7C,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,GAAG,YAAY,CAmDzF;AAID,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAA;IACpB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAA;CACf;AAED,sCAAsC;AACtC,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAA;AAExD,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,SAAO,GAAG,MAAM,CAOxE;AAED,0CAA0C;AAC1C,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,mCAAmC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;CAC/B;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IAErC,sEAAsE;gBAC1D,OAAO,GAAE,gBAAqB;IAQ1C,sCAAsC;IACtC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,8CAA8C;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAIvC,8DAA8D;IAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAqCjE,4CAA4C;IAC5C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAKxB;;;;OAIG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;IASrE;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB;IAStC,4EAA4E;IAC5E,QAAQ,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,EAAE;CAGpD"}

package/lib/types/judge.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The low-confidence judge: a cheap model classifies intent only. It is called
+ * when the deterministic layer's confidence falls below `intent.ruleThreshold`,
+ * never on cooldown, and never while the previous calls are failing — the
+ * classifier's own verdict is always the fallback.
+ *
+ * @module dsh-autotier/judge
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { ResolvedConfig } from './config.js';
+import type { Scenario, TierId } from './types.js';
+/** The label vocabulary the judge is asked to choose from. */
+export declare const JUDGE_LABELS: readonly {
+    readonly label: string;
+    readonly scenario: Scenario;
+}[];
+/** The judge's answer. */
+export interface JudgeOutcome {
+    /** Whether the call produced a usable label. */
+    readonly ok: boolean;
+    readonly scenario: Scenario | undefined;
+    readonly tier: TierId | undefined;
+    /** Short diagnostic; safe for logs (no prompt text). */
+    readonly detail: string;
+}
+/** The route the judge call uses. */
+export interface JudgeRoute {
+    readonly provider: string;
+    readonly model: string;
+}
+/**
+ * Resolve the judge route: the configured model, else the first catalog model
+ * whose id contains `flash` on the cheap tier's provider.
+ * @param ctx - the plugin context (reads `ctx.llm`).
+ * @param config - the resolved configuration.
+ * @returns the route, or undefined when no candidate exists.
+ */
+export declare function resolveJudgeRoute(ctx: Context, config: ResolvedConfig): Promise<JudgeRoute | undefined>;
+/** Extract the first label that appears in the judge's answer. */
+export declare function parseJudgeLabel(answer: string): Scenario | undefined;
+/**
+ * Run one judge call.
+ * @param ctx - the plugin context (reads `ctx.llm`).
+ * @param config - the resolved configuration.
+ * @param text - the newest user message text.
+ * @param signal - the turn's abort signal; the judge adds its own timeout.
+ * @returns the outcome; a failure is reported, never thrown.
+ */
+export declare function runJudge(ctx: Context, config: ResolvedConfig, text: string, signal: AbortSignal): Promise<JudgeOutcome>;
+//# sourceMappingURL=judge.d.ts.map

package/lib/types/judge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge.d.ts","sourceRoot":"","sources":["../../src/judge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAElD,8DAA8D;AAC9D,eAAO,MAAM,YAAY,EAAE,SAAS;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,EAS1F,CAAA;AAcD,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAc7G;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAQpE;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,YAAY,CAAC,CAgDvB"}