harness-dispatch 0.4.0

package/dist/types.d.ts

@@ -0,0 +1,402 @@
+/**
+ * Core types for harness-dispatch.
+ *
+ * These are the cross-cutting types used by dispatchers, the router, the
+ * quota tracker, and the MCP surface. Downstream modules (R2/R3/R4) import
+ * from here.
+ */
+export type TaskType = "execute" | "plan" | "review" | "local" | "";
+export type ThinkingLevel = "low" | "medium" | "high";
+export type SafetyProfile = "read_only" | "workspace_edit" | "full_auto";
+export type RoutePolicy = "standard" | "local_only" | "approval_required" | "blocked";
+export type BillingProvider = "anthropic" | "openai" | "cursor" | "google" | "local" | "custom";
+export type BillingSurface = "claude_code" | "claude_agent_sdk" | "anthropic_api" | "codex_cli" | "codex_sdk" | "openai_api" | "cursor_agent_cli" | "antigravity_cli" | "gemini_api" | "vertex_ai" | "openai_compatible" | "local_endpoint" | "custom";
+export type AuthSource = "product_login" | "api_key" | "oauth_session" | "local_network" | "configured_endpoint" | "unknown";
+export type BillingKind = "local_compute" | "included_plan_usage" | "included_plan_then_flexible_credits" | "included_credit_then_optional_overage" | "included_usage_then_on_demand" | "metered_api" | "free_quota" | "unknown";
+export type BillingConfidence = "documented" | "inferred" | "unknown" | "unsupported";
+export type EndpointMode = "provider_cloud" | "direct_openai_compatible" | "harness_native_endpoint";
+export type EndpointProvider = "ollama" | "lmstudio" | "openai_compatible" | "anthropic_gateway" | "gemini_proxy" | "custom";
+export type WireProtocol = "openai_chat_completions" | "anthropic_messages" | "gemini_generate_content" | "provider_native" | "unknown";
+export type WorkspacePolicy = "shared" | "shared_locked" | "git_worktree" | "copy";
+export type WorkspaceChangeKind = "added" | "modified" | "deleted";
+export interface WorkspaceFileChange {
+    path: string;
+    kind: WorkspaceChangeKind;
+}
+export interface WorkspaceRun {
+    policy: WorkspacePolicy;
+    originalWorkingDir: string;
+    effectiveWorkingDir: string;
+    isolated: boolean;
+    securityBoundary: "none" | "project_state" | "project_state_and_process_cwd";
+    workspaceRoot?: string;
+    changedFiles?: WorkspaceFileChange[];
+    diffSummary?: string;
+    cleanupHint?: string;
+    notes?: string[];
+}
+export interface RouteBilling {
+    provider: BillingProvider;
+    surface: BillingSurface;
+    authSource: AuthSource;
+    kind: BillingKind;
+    paidUsagePossible: boolean;
+    allowPaidUsage: boolean;
+    paidUsageRequiresOptIn: boolean | "unknown";
+    confidence: BillingConfidence;
+    notes?: string;
+}
+export interface RouteSkip {
+    route: string;
+    code: "disabled" | "no_dispatcher" | "unavailable" | "circuit_broken" | "paid_blocked" | "unknown_billing" | "route_policy" | "approval_required" | "safety_incompatible" | "workspace_isolation_required";
+    message: string;
+}
+export interface DispatchResult {
+    output: string;
+    service: string;
+    success: boolean;
+    error?: string;
+    rateLimited?: boolean;
+    retryAfter?: number;
+    rateLimitHeaders?: Record<string, string>;
+    durationMs?: number;
+    tokensUsed?: {
+        input: number;
+        output: number;
+    };
+    skippedRoutes?: RouteSkip[];
+    workspace?: WorkspaceRun;
+}
+export interface QuotaInfo {
+    service: string;
+    used?: number;
+    limit?: number;
+    remaining?: number;
+    resetAt?: string;
+    source: "headers" | "api" | "unknown";
+}
+/**
+ * One line-matching rule for `output.mode: "jsonl_stream"` (see below). A
+ * parsed JSON line is tested against `when` (every listed dotted field path
+ * must equal the given string); on match, `emit` says what to do with it.
+ * Rules are checked in order per line; a line can match more than one rule
+ * (e.g. a line can carry both a text field and a usage field).
+ */
+export interface CliEventRule {
+    /** Dotted field path -> exact string it must equal, e.g. {"type": "thinking"}. */
+    when: Record<string, string>;
+    emit: "text" | "tool_use" | "thinking" | "usage" | "error";
+    /** For emit: "text" — dotted path to the text; becomes the run's output-so-far. */
+    textField?: string;
+    /** For emit: "tool_use". */
+    nameField?: string;
+    inputField?: string;
+    /** For emit: "thinking". */
+    chunkField?: string;
+    /** For emit: "usage" — dotted paths, checked in order, first present wins. */
+    inputTokenFields?: string[];
+    outputTokenFields?: string[];
+    /**
+     * For emit: "error" — dotted path to the human-readable error message
+     * (e.g. Codex's real `{"type":"error","message":"You've hit your usage
+     * limit..."}` frame). Without a rule for this, a structured error frame
+     * is silently invisible to the dispatcher — it falls through to raw
+     * stdout/stderr text heuristics, which lose the message entirely if
+     * stderr happens to carry unrelated CLI banner noise (confirmed
+     * 2026-07-24: Codex's real stderr is just "Reading additional input from
+     * stdin...", which was shadowing the actual JSON error in stdout).
+     */
+    messageField?: string;
+}
+/**
+ * Config-driven CLI invocation template — lets a subprocess-based CLI
+ * harness be added or redefined with zero bespoke TypeScript, the same way
+ * `endpoints:` already does for HTTP-based ones.
+ *
+ * `args` is a literal command-line argument list, written the same way
+ * you'd type it by hand. A handful of reserved `{{name}}` tokens are
+ * substituted (or expanded to zero or more real tokens) at dispatch time;
+ * everything else passes through verbatim:
+ *
+ *   {{prompt}}       the prompt text (one token) — omitted if `stdin: true`
+ *   {{model}}        [model.flag, value] if a model is set, else nothing
+ *   {{safety}}       safety[requested profile] (zero or more tokens)
+ *   {{working_dir}}  [workingDir.flag, dir, ...extraArgsWhenSet] if set, else nothing
+ *   {{file_dirs}}    [fileDirs.flag, dir] repeated once per included file's directory
+ *   {{native_args}}  endpointNativeArgs[endpoint_provider], only when this route
+ *                    is dispatched as endpoint_mode: harness_native_endpoint
+ *
+ * e.g. Claude Code's real invocation is just:
+ *   args: ["-p", "{{prompt}}", "--output-format", "json", "{{safety}}", "{{model}}"]
+ */
+export interface CliProtocolConfig {
+    args: string[];
+    /** Write the prompt to the child's stdin instead of substituting {{prompt}} into args. */
+    stdin?: boolean;
+    /** Omit if the CLI has no model-override flag. Falls back to the route's static `model:` when no per-call override is given. */
+    model?: {
+        flag: string;
+    };
+    /**
+     * Omit to rely on the subprocess's cwd only (no explicit flag, e.g. Claude
+     * Code). `extraArgsWhenSet` appends more static args only when workingDir
+     * is actually non-empty (e.g. Codex's `--skip-git-repo-check`).
+     * `fallback: "home"` substitutes the user's home directory when the
+     * caller passes an empty workingDir and this CLI has no "just use the
+     * current directory" default of its own (e.g. Cursor).
+     */
+    workingDir?: {
+        flag: string;
+        extraArgsWhenSet?: string[];
+        fallback?: "home";
+    };
+    /**
+     * Flag repeated once per unique file directory (e.g. Antigravity's
+     * `--add-dir <dir>`) — computed the same way for every harness: unique
+     * parent directories of absolute `files` entries, excluding workingDir
+     * itself. Omit if the CLI has no such concept.
+     */
+    fileDirs?: {
+        flag: string;
+    };
+    /** Args appended per requested safety profile (permission-mode flags etc.), via {{safety}}. */
+    safety?: Partial<Record<SafetyProfile, string[]>>;
+    /**
+     * Env var to set to the route's configured `api_key` when present (e.g.
+     * "CURSOR_API_KEY", "OPENAI_API_KEY"). If unset in config AND the var is
+     * already present in the parent environment, it's explicitly cleared for
+     * the child — matches the built-ins' "never leak an ambient key into a
+     * subscription-auth call" behavior.
+     */
+    apiKeyEnvVar?: string;
+    /** Header/bullet used when appending a file list to the prompt text. Omit fileListHeader to skip the append entirely. */
+    fileListHeader?: string;
+    fileListBullet?: string;
+    /** How to turn stdout into a DispatchResult. */
+    output: {
+        /**
+         * - "text": raw stdout is the output, verbatim.
+         * - "json_field": parse stdout as one JSON object once the process
+         *   exits; `fields` (in priority order, dotted paths supported) picks
+         *   which field holds the answer.
+         * - "jsonl_stream": each stdout line is parsed as JSON as it arrives.
+         *   Without `eventRules`, falls back to concatenating `fields` from
+         *   every line (a poor-man's approximation). WITH `eventRules`,
+         *   supports real mid-run tool_use/thinking event surfacing and usage
+         *   aggregation, declaratively (see CliEventRule).
+         */
+        mode: "text" | "json_field" | "jsonl_stream";
+        /** Candidate field names to check, in priority order, for json_field/jsonl_stream (dotted paths supported). */
+        fields?: string[];
+        /**
+         * Token-usage extraction for "text"/"json_field" modes (jsonl_stream
+         * uses eventRules' emit: "usage" instead).
+         */
+        usage?: {
+            input: string[];
+            output: string[];
+        };
+        /** jsonl_stream only — see CliEventRule. */
+        eventRules?: CliEventRule[];
+        /**
+         * Explicit error detection for "text"/"json_field" modes (jsonl_stream
+         * uses eventRules' emit: "error" instead) — a CLI can exit 0 while its
+         * JSON body reports an API-level failure (confirmed 2026-07-24: Claude
+         * Code's `is_error`/`api_error_status` fields on an otherwise-0-exit
+         * response). `field` is a dotted path to a boolean; when true, the
+         * dispatch is forced to success: false regardless of exit code or
+         * `successRequiresOutput`, with the message from `messageFields`
+         * (falls back to `fields` if omitted).
+         */
+        error?: {
+            field: string;
+            messageFields?: string[];
+        };
+    };
+    /**
+     * Default true (matches most CLIs, and Cursor specifically): success
+     * requires BOTH exitCode === 0 AND a non-empty parsed output — an exit-0
+     * run with nothing parseable is treated as a failure. Set false to match
+     * Claude Code / Codex / Antigravity's more lenient contract: success is
+     * exitCode === 0 alone, and the output falls back to raw stdout/stderr
+     * text when the configured parsing yields nothing.
+     */
+    successRequiresOutput?: boolean;
+    /**
+     * Extra args to prepend when this route is configured with
+     * `endpoint_mode: harness_native_endpoint` against a matching
+     * `endpoint_provider` (e.g. Codex's `--oss --local-provider ollama`) —
+     * config-dependent, not a fixed property of any particular harness.
+     */
+    endpointNativeArgs?: Partial<Record<EndpointProvider, string[]>>;
+}
+export interface ServiceConfig {
+    name: string;
+    enabled: boolean;
+    type: "cli" | "openai_compatible";
+    harness?: string;
+    command?: string;
+    apiKey?: string;
+    baseUrl?: string;
+    model?: string;
+    tier: number;
+    weight: number;
+    cliCapability: number;
+    leaderboardModel?: string;
+    thinkingLevel?: ThinkingLevel;
+    escalateModel?: string;
+    escalateOn: TaskType[];
+    capabilities: Partial<Record<"execute" | "plan" | "review", number>>;
+    /**
+     * Maximum output tokens the model can produce in a single dispatch.
+     * Callers (Planners, Workers, Reconcilers) use this to size work so it fits
+     * without mid-call truncation. A value of `undefined` means "unknown /
+     * assume the provider default" — callers that need to chunk conservatively
+     * should treat absence as a low bound.
+     */
+    maxOutputTokens?: number;
+    /**
+     * Context window (input + output) in tokens. Used by the
+     * `preferLargeContext` route hint and by planners sizing up prompt payloads.
+     * Advertised by the provider; may be model-specific when `escalateModel` is
+     * in effect — consult the resolved model at dispatch time.
+     */
+    maxInputTokens?: number;
+    provider?: BillingProvider;
+    surface?: BillingSurface;
+    authSource?: AuthSource;
+    billingKind?: BillingKind;
+    paidUsagePossible?: boolean;
+    allowPaidUsage?: boolean;
+    billingConfidence?: BillingConfidence;
+    billingNotes?: string;
+    safetyProfile?: SafetyProfile;
+    /**
+     * The safety level this route ACTUALLY runs at regardless of what's
+     * requested — a capability floor, not a preference. E.g. Cursor's print
+     * mode always has write+shell capability, so its shipped entry declares
+     * `effective_safety: full_auto` and the route is skipped for stricter
+     * requests. Declared in config (shipped or user), not hardcoded per
+     * harness anywhere in code.
+     */
+    effectiveSafety?: SafetyProfile;
+    /**
+     * Operator-declared known-good model ids for this route (`models:` in
+     * config) — surfaced verbatim in status/usage so a calling agent can pick
+     * one without guessing. Optional and advisory: hints.model is still
+     * forwarded even if it's not in this list.
+     */
+    models?: string[];
+    /**
+     * Free-text pointer to where this route's REAL model catalog lives
+     * (`model_hint:` in config) — a docs URL, a CLI command like
+     * `cursor-agent --list-models`, or "GET {base_url}/models". Surfaced in
+     * status/usage; declared per entry in the shipped config, not hardcoded
+     * per harness in code.
+     */
+    modelHint?: string;
+    endpointMode?: EndpointMode;
+    endpointProvider?: EndpointProvider;
+    wireProtocol?: WireProtocol;
+    workspacePolicy?: WorkspacePolicy;
+    /** Required when `harness: "generic"` — see CliProtocolConfig. Ignored otherwise. */
+    protocol?: CliProtocolConfig;
+    /**
+     * Per-service dispatch timeout override in milliseconds. Every dispatcher
+     * hard-codes its own default (10 minutes for CLI harnesses, 2 minutes for
+     * openai_compatible) with no way to raise it — a long-running review or
+     * audit routed to a CLI harness gets killed and its result discarded at
+     * exactly the default, regardless of how the caller invoked the task
+     * (`code` or `job`). Set this to raise (or lower) the ceiling for a
+     * specific route; a per-call `hints.timeoutMs` takes precedence over this.
+     */
+    timeoutMs?: number;
+}
+export interface RouterConfig {
+    services: Record<string, ServiceConfig>;
+    disabled?: readonly string[];
+    /**
+     * OpenTelemetry traces. OFF by default — purely operator-facing local
+     * observability (OTLP to localhost unless redirected); enable only if you
+     * run a collector. `HARNESS_DISPATCH_TELEMETRY=1` is the env equivalent.
+     */
+    telemetry?: {
+        enabled: boolean;
+    };
+    /** Local artifact retention. jobsDays: how long ~/.harness-dispatch/jobs entries live (default 7). */
+    retention?: {
+        jobsDays?: number;
+    };
+    /**
+     * Config entries that were silently ignored rather than failing to load —
+     * a disabled:/overrides: name that doesn't match any auto-detected route
+     * (e.g. left over from before the claude_code -> claude_code_cli-style
+     * rename), or a clis: entry with a missing/unrecognized harness or name.
+     * Surfaced by `doctor`/`configure` so a stale or typo'd config doesn't go
+     * unnoticed forever.
+     */
+    configWarnings?: readonly string[];
+}
+export interface RoutingDecision {
+    service: string;
+    tier: number;
+    quotaScore: number;
+    qualityScore: number;
+    cliCapability: number;
+    capabilityScore: number;
+    taskType: TaskType;
+    model: string | undefined;
+    /**
+     * Set only when hints.model was provided. true if it matched something
+     * this route statically declares (model/leaderboardModel/escalateModel/
+     * route name) — false if it was passed through to the dispatcher "blind"
+     * because nothing recognized it, which can still work (CLIs often accept
+     * arbitrary --model values) or can fail at dispatch time with the
+     * harness's own rejection. hints.model is unvalidated by design (see the
+     * `code` tool's own description) — this field is how a caller
+     * distinguishes "the router picked exactly what I asked for" from "I
+     * might have a typo" without guessing from `model` alone.
+     */
+    modelHintMatched?: boolean;
+    elo: number | undefined;
+    finalScore: number;
+    reason: string;
+    skippedRoutes?: RouteSkip[];
+    safetyProfile?: SafetyProfile;
+    effectiveSafetyProfile?: SafetyProfile;
+    billing?: RouteBilling;
+    workspacePolicy?: WorkspacePolicy;
+}
+export interface RouteHints {
+    model?: string;
+    service?: string;
+    preferLargeContext?: boolean;
+    taskType?: TaskType;
+    harness?: string;
+    safetyProfile?: SafetyProfile;
+    workspacePolicy?: WorkspacePolicy;
+    routePolicy?: RoutePolicy;
+    /** Per-call dispatch timeout override in milliseconds. See ServiceConfig.timeoutMs. */
+    timeoutMs?: number;
+}
+export type DispatcherEvent = {
+    type: "stdout";
+    chunk: string;
+} | {
+    type: "stderr";
+    chunk: string;
+} | {
+    type: "tool_use";
+    name: string;
+    input: unknown;
+} | {
+    type: "thinking";
+    chunk: string;
+} | {
+    type: "completion";
+    result: DispatchResult;
+} | {
+    type: "error";
+    error: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,EAAE,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtD,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAEzE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,mBAAmB,GAAG,SAAS,CAAC;AAEtF,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,QAAQ,CAAC;AAEb,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,kBAAkB,GAClB,eAAe,GACf,WAAW,GACX,WAAW,GACX,YAAY,GACZ,kBAAkB,GAClB,iBAAiB,GACjB,YAAY,GACZ,WAAW,GACX,mBAAmB,GACnB,gBAAgB,GAChB,QAAQ,CAAC;AAEb,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,SAAS,GACT,eAAe,GACf,eAAe,GACf,qBAAqB,GACrB,SAAS,CAAC;AAEd,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,qBAAqB,GACrB,qCAAqC,GACrC,uCAAuC,GACvC,+BAA+B,GAC/B,aAAa,GACb,YAAY,GACZ,SAAS,CAAC;AAEd,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;AAEtF,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,0BAA0B,GAC1B,yBAAyB,CAAC;AAE9B,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,UAAU,GACV,mBAAmB,GACnB,mBAAmB,GACnB,cAAc,GACd,QAAQ,CAAC;AAEb,MAAM,MAAM,YAAY,GACpB,yBAAyB,GACzB,oBAAoB,GACpB,yBAAyB,GACzB,iBAAiB,GACjB,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,QAAQ,GACR,eAAe,GACf,cAAc,GACd,MAAM,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,eAAe,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EACZ,MAAM,GACN,eAAe,GACf,+BAA+B,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,WAAW,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,sBAAsB,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5C,UAAU,EAAE,iBAAiB,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EACA,UAAU,GACV,eAAe,GACf,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,iBAAiB,GACjB,cAAc,GACd,mBAAmB,GACnB,qBAAqB,GACrB,8BAA8B,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;IAC3D,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,0FAA0F;IAC1F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gIAAgI;IAChI,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,+FAA+F;IAC/F,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClD;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yHAAyH;IACzH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,MAAM,EAAE;QACN;;;;;;;;;;WAUG;QACH,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,cAAc,CAAC;QAC7C,+GAA+G;QAC/G,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB;;;WAGG;QACH,KAAK,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC9C,4CAA4C;QAC5C,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;QAC5B;;;;;;;;;WASG;QACH,KAAK,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACrD,CAAC;IACF;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,mBAAmB,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,qFAAqF;IACrF,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACjC,sGAAsG;IACtG,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,sBAAsB,CAAC,EAAE,aAAa,CAAC;IACvC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/types.js

@@ -0,0 +1,9 @@
+/**
+ * Core types for harness-dispatch.
+ *
+ * These are the cross-cutting types used by dispatchers, the router, the
+ * quota tracker, and the MCP surface. Downstream modules (R2/R3/R4) import
+ * from here.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,OAAO,QAAuB,CAAC"}

package/dist/version.js

@@ -0,0 +1,13 @@
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+function readPackageVersion() {
+    try {
+        const pkg = require("../package.json");
+        return typeof pkg.version === "string" ? pkg.version : "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+export const VERSION = readPackageVersion();
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAA0B,CAAC;QAChE,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC"}

package/dist/working-dir.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `workingDir` is effectively required on every dispatch entry point (MCP
+ * tools, jobs, HTTP): when the caller omits it, the task runs in the router
+ * server's own process cwd, almost never the project the caller means. That
+ * silent wrong-directory execution was a review finding — this resolves the
+ * value the same way everywhere and reports back whether it was defaulted so
+ * callers can surface a visible warning instead of failing quietly.
+ */
+export interface ResolvedWorkingDir {
+    workingDir: string;
+    defaulted: boolean;
+}
+export declare function resolveWorkingDir(input: string | undefined): ResolvedWorkingDir;
+export declare function workingDirWarning(resolved: ResolvedWorkingDir): string | undefined;
+//# sourceMappingURL=working-dir.d.ts.map

package/dist/working-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"working-dir.d.ts","sourceRoot":"","sources":["../src/working-dir.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,kBAAkB,CAK/E;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAOlF"}

package/dist/working-dir.js

@@ -0,0 +1,22 @@
+/**
+ * `workingDir` is effectively required on every dispatch entry point (MCP
+ * tools, jobs, HTTP): when the caller omits it, the task runs in the router
+ * server's own process cwd, almost never the project the caller means. That
+ * silent wrong-directory execution was a review finding — this resolves the
+ * value the same way everywhere and reports back whether it was defaulted so
+ * callers can surface a visible warning instead of failing quietly.
+ */
+export function resolveWorkingDir(input) {
+    if (input !== undefined && input !== "") {
+        return { workingDir: input, defaulted: false };
+    }
+    return { workingDir: process.cwd(), defaulted: true };
+}
+export function workingDirWarning(resolved) {
+    if (!resolved.defaulted)
+        return undefined;
+    return (`workingDir was not provided — ran in the router server's own directory ` +
+        `(${resolved.workingDir}), which is almost certainly not the intended project. ` +
+        `Pass an absolute workingDir on the next call.`);
+}
+//# sourceMappingURL=working-dir.js.map

package/dist/working-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"working-dir.js","sourceRoot":"","sources":["../src/working-dir.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA4B;IAC5D,IAAI,CAAC,QAAQ,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,CACL,yEAAyE;QACzE,IAAI,QAAQ,CAAC,UAAU,yDAAyD;QAChF,+CAA+C,CAChD,CAAC;AACJ,CAAC"}

package/dist/workspaces.d.ts

@@ -0,0 +1,19 @@
+import type { DispatchResult, SafetyProfile, ServiceConfig, WorkspacePolicy } from "./types.js";
+export interface PreparedWorkspace {
+    policy: WorkspacePolicy;
+    originalWorkingDir: string;
+    effectiveWorkingDir: string;
+    files: string[];
+    isolated: boolean;
+    workspaceRoot?: string;
+    finish(result: DispatchResult): Promise<DispatchResult>;
+}
+export declare function workspacePolicyFor(svc: ServiceConfig, safetyProfile: SafetyProfile | undefined, requestedPolicy?: WorkspacePolicy): WorkspacePolicy;
+export declare function isIsolatedWorkspacePolicy(policy: WorkspacePolicy): boolean;
+export declare function prepareWorkspace(opts: {
+    routeName: string;
+    policy: WorkspacePolicy;
+    workingDir: string;
+    files: string[];
+}): Promise<PreparedWorkspace>;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../src/workspaces.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,aAAa,EAEb,eAAe,EAEhB,MAAM,YAAY,CAAC;AA2BpB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,eAAe,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACzD;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,aAAa,EAClB,aAAa,EAAE,aAAa,GAAG,SAAS,EACxC,eAAe,CAAC,EAAE,eAAe,GAChC,eAAe,CAIjB;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAE1E;AA4UD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAU7B"}