lorenz 0.1.4 → 0.1.6

package/node_modules/@lorenz/cli/dist/workerDriverLoader.d.ts

@@ -1,64 +1,24 @@
 import { type WorkerDriverRegistry } from "@lorenz/worker-sdk";
+import { type EnsureExtensionLoadedOptions, type ExtensionRef } from "./extensionLoader.js";
 /**
- * Out-of-tree worker-driver loading: the configured worker-pool driver accepts a MODULE
- * SPECIFIER (an npm package name, `@scope/name`, `./relative` or `/absolute`
- * path, with an optional `#exportName` suffix) in addition to a registered
- * kind. The daemon dynamic-imports the module at startup (and on a reload that
- * changes the specifier) and registers it into the worker-driver registry under
- * the EXACT configured string, so the pool's existing registry resolution
- * (`registry.require(settings.driver)`) needs no changes and third parties
- * ship drivers without forking the repo.
- *
- * Trust: a dynamic import runs arbitrary code in the daemon process - the same
- * trust boundary as workspace hooks. Loads happen ONLY here (startup/reload),
- * never on the acquire path, and the `worker_pool_driver_loaded` audit event
- * records exactly which code went live from where.
- *
- * Module pinning: Node's ESM cache loads a given specifier's code once per
- * daemon lifetime. Changing driver CODE requires a daemon restart; changing
- * the CONFIG to a different specifier hot-loads the new module. A reload that
- * re-encounters an already-loaded specifier emits
- * `worker_pool_driver_module_pinned` so the pin is observable, and cache-busting
- * query strings are rejected (unbounded module-graph growth, half-initialized
- * module hazards).
+ * Out-of-tree worker-driver loading: `worker.worker_pool.driver` accepts a module
+ * specifier in addition to a registered kind. Instantiates the axis-generic
+ * {@link createExtensionLoader}; identity field is the driver `kind`. See
+ * {@link createExtensionLoader} for the trust boundary, module pinning, and
+ * exact-kind-wins resolution shared by every axis.
  */
 /** A parsed configured worker-pool driver value that is not a registered kind. */
-export interface WorkerDriverRef {
-    /** The module specifier with any `#exportName` suffix removed. */
-    specifier: string;
-    /** The named export selected by a `#name` suffix; undefined means default. */
-    exportName?: string | undefined;
-}
-/**
- * Parses a configured driver string into its module-specifier form. Resolution
- * rule (the single authority for the one-field-two-grammars overload): an
- * EXACT registered kind always wins - {@link ensureWorkerDriverLoaded} checks
- * `registry.get(driver)` BEFORE calling this, so a published npm package named
- * `docker` can never shadow the built-in. A `#name` suffix selects a named
- * export; everything else is the specifier itself.
- */
-export declare function parseWorkerDriverRef(driver: string): WorkerDriverRef;
+export type WorkerDriverRef = ExtensionRef;
 /** Options for {@link ensureWorkerDriverLoaded}. */
-export interface EnsureWorkerDriverLoadedOptions {
-    /** Anchor for `./relative` specifiers; the daemon passes `dirname(workflow.path)`. */
-    baseDir?: string | undefined;
-    /** Structured-event sink for the loaded/pinned audit events. */
-    logEvent?: ((event: Record<string, unknown>) => void) | undefined;
-}
+export type EnsureWorkerDriverLoadedOptions = EnsureExtensionLoadedOptions;
+/** Parses a configured driver string into its module-specifier form. */
+export declare function parseWorkerDriverRef(driver: string): WorkerDriverRef;
 /**
- * Idempotently makes the configured worker-pool driver resolvable in
- * `registry`. A registry hit (a built-in kind, an extension, or a specifier a
- * previous call already loaded) is a no-op - except that a re-encountered
- * loader-registered specifier emits `worker_pool_driver_module_pinned` so the
- * code-is-pinned semantic is observable on reload. A miss parses the driver as
- * a module reference, dynamic-imports it, and registers a factory whose kind
- * IS the configured specifier string, emitting `worker_pool_driver_loaded`.
- *
- * Called by the daemon BEFORE `createWorkerPool` at startup and (via the
- * coordinator's injected `driverLoader`) BEFORE `pool.reconcile` on reload, so
- * the pool's registry resolution stays synchronous and transactional. A module
- * registered for a reconcile that later fails is harmless: the registry is a
- * catalog, and an unused entry is inert.
+ * Idempotently makes the configured worker-pool driver resolvable in `registry`
+ * (see {@link createExtensionLoader} for the load/pin semantics). Called by the
+ * daemon BEFORE `createWorkerPool` at startup and (via the coordinator's injected
+ * `driverLoader`) BEFORE `pool.reconcile` on reload, so the pool's registry
+ * resolution stays synchronous and transactional.
  */
 export declare function ensureWorkerDriverLoaded(driver: string, registry: WorkerDriverRegistry, options?: EnsureWorkerDriverLoadedOptions): Promise<void>;
 //# sourceMappingURL=workerDriverLoader.d.ts.map

package/node_modules/@lorenz/cli/dist/workerDriverLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workerDriverLoader.d.ts","sourceRoot":"","sources":["../src/workerDriverLoader.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAsBpE;AAgLD,oDAAoD;AACpD,MAAM,WAAW,+BAA+B;IAC9C,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACnE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAoCf"}
+{"version":3,"file":"workerDriverLoader.d.ts","sourceRoot":"","sources":["../src/workerDriverLoader.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B;;;;;;GAMG;AAEH,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC;AAE3C,oDAAoD;AACpD,MAAM,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAmB3E,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAEpE;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/node_modules/@lorenz/cli/dist/workerDriverLoader.js

@@ -1,211 +1,34 @@
-import path from "node:path";
-import { pathToFileURL } from "node:url";
+import { isRecord } from "@lorenz/domain";
 import { assertWorkerDriverModule, } from "@lorenz/worker-sdk";
-/**
- * Parses a configured driver string into its module-specifier form. Resolution
- * rule (the single authority for the one-field-two-grammars overload): an
- * EXACT registered kind always wins - {@link ensureWorkerDriverLoaded} checks
- * `registry.get(driver)` BEFORE calling this, so a published npm package named
- * `docker` can never shadow the built-in. A `#name` suffix selects a named
- * export; everything else is the specifier itself.
- */
+import { createExtensionLoader, } from "./extensionLoader.js";
+const workerDriverLoader = createExtensionLoader({
+    errorPrefix: "worker_pool_driver",
+    eventNames: {
+        loaded: "worker_pool_driver_loaded",
+        pinned: "worker_pool_driver_module_pinned",
+    },
+    defineHelperName: "defineWorkerDriver",
+    unitNoun: "worker drivers",
+    assertModule: assertWorkerDriverModule,
+    looksLikeModule: (value) => isRecord(value) && typeof value["create"] === "function",
+    toFactory: (specifier, module) => ({
+        kind: specifier,
+        create: (driverOptions, deps) => module.create(driverOptions, deps),
+    }),
+    describeModule: (module) => ({ kind: module.kind, sdkVersion: module.sdkVersion }),
+});
+/** Parses a configured driver string into its module-specifier form. */
 export function parseWorkerDriverRef(driver) {
-    const hashIndex = driver.lastIndexOf("#");
-    const specifier = hashIndex === -1 ? driver : driver.slice(0, hashIndex);
-    const exportName = hashIndex === -1 ? undefined : driver.slice(hashIndex + 1);
-    if (specifier === "") {
-        throw new Error(`worker_pool_driver_invalid_specifier: ${driver} has an empty module specifier`);
-    }
-    if (exportName === "") {
-        throw new Error(`worker_pool_driver_invalid_specifier: ${driver} has an empty #exportName suffix`);
-    }
-    if (specifier.includes("?")) {
-        throw new Error(`worker_pool_driver_invalid_specifier: ${specifier} - cache-busting query strings are not ` +
-            `supported (module code is pinned for the daemon lifetime; restart the daemon to pick ` +
-            `up driver code changes)`);
-    }
-    return { specifier, exportName };
-}
-/** Whether a specifier is a filesystem path (vs a bare npm package name). */
-function isPathSpecifier(specifier) {
-    return (specifier.startsWith("./") ||
-        specifier.startsWith("../") ||
-        path.isAbsolute(specifier) ||
-        specifier.startsWith("file:"));
-}
-/**
- * Dynamic-imports a worker-driver module and validates it. Relative and absolute
- * paths resolve against `baseDir` via `pathToFileURL`; bare names resolve
- * through the daemon's module graph (the operator installs the driver package
- * next to lorenz; `./path` is the escape hatch). The imported namespace is
- * unwrapped (`default`, the transpiled-CJS `default.default` shape, or the
- * selected named export) and passed through `assertWorkerDriverModule`, so a
- * malformed module or an SDK version mismatch fails loud here - before the
- * pool, the runtime, or any provision exists.
- */
-async function loadWorkerDriverModule(specifier, options) {
-    const { baseDir, exportName, knownKinds } = options;
-    const resolvedFrom = isPathSpecifier(specifier) && !specifier.startsWith("file:")
-        ? pathToFileURL(path.resolve(baseDir, specifier)).href
-        : specifier;
-    let namespace;
-    try {
-        namespace = (await import(resolvedFrom));
-    }
-    catch (error) {
-        throw moduleResolutionError(specifier, resolvedFrom, error, knownKinds ?? []);
-    }
-    const source = exportName === undefined ? specifier : `${specifier}#${exportName}`;
-    const candidate = selectExport(namespace, exportName);
-    if (candidate === undefined) {
-        const available = Object.keys(namespace)
-            .filter((key) => key !== "__esModule")
-            .sort();
-        throw new Error(exportName === undefined
-            ? `worker_pool_driver_module_invalid: ${source} has no default export` +
-                (available.length > 0 ? ` (named exports: ${available.join(", ")})` : "") +
-                `; export defineWorkerDriver(...) as the default export or select a named export with #name`
-            : `worker_pool_driver_module_invalid: ${source} has no export named "${exportName}"` +
-                (available.length > 0 ? ` (available: ${available.join(", ")})` : ""));
-    }
-    assertWorkerDriverModule(candidate, source);
-    return { module: candidate, resolvedFrom };
-}
-/**
- * Unwraps the driver module from the imported namespace: the selected named
- * export (falling back through a transpiled-CJS `default` object), or the
- * default export including the `default.default` shape some transpilers emit.
- */
-function selectExport(namespace, exportName) {
-    if (exportName !== undefined) {
-        const named = namespace[exportName];
-        if (named !== undefined)
-            return named;
-        const viaDefault = namespace["default"];
-        if (typeof viaDefault === "object" && viaDefault !== null) {
-            return viaDefault[exportName];
-        }
-        return undefined;
-    }
-    let candidate = namespace["default"];
-    if (candidate === undefined) {
-        // A CJS module's exports are hoisted onto the namespace itself; accept the
-        // namespace only when it already looks like a driver module, so an ESM
-        // module that simply lacks a default export gets the no-default error.
-        return typeof namespace["create"] === "function" ? namespace : undefined;
-    }
-    // Transpiled-CJS double default: `module.exports = { default: <module> }`
-    // imported as `{ default: { default: <module> } }`. A real driver module has
-    // a `create` function, so only unwrap when the outer layer does not.
-    if (typeof candidate === "object" &&
-        candidate !== null &&
-        "default" in candidate &&
-        typeof candidate.create !== "function") {
-        candidate = candidate["default"];
-    }
-    return candidate;
-}
-/** Builds the actionable error for a failed module import. */
-function moduleResolutionError(specifier, resolvedFrom, cause, knownKinds) {
-    const message = cause instanceof Error ? cause.message : String(cause);
-    if (isPathSpecifier(specifier)) {
-        return new Error(`worker_pool_driver_unavailable: ${specifier} (failed to import ${resolvedFrom}: ${message})`);
-    }
-    const kinds = knownKinds.length > 0
-        ? ` (known kinds: ${[...knownKinds].sort().join(", ")})`
-        : " (no worker drivers registered)";
-    const close = closestKind(specifier, knownKinds);
-    const hint = close === undefined ? "" : ` - did you mean "${close}"?`;
-    return new Error(`worker_pool_driver_unavailable: ${specifier} is not a registered kind and could not be ` +
-        `resolved as a module${kinds}${hint} [${message}]`);
+    return workerDriverLoader.parseRef(driver);
 }
 /**
- * The registered kind within a small edit distance of a mistyped bare
- * specifier, or undefined when nothing is close. Mitigates the typo detection
- * a closed config enum used to provide: `driver: dokcer` now reads as a module
- * specifier, so the resolution failure points back at the built-in.
- */
-function closestKind(specifier, kinds) {
-    let best;
-    for (const kind of kinds) {
-        const distance = editDistance(specifier.toLowerCase(), kind.toLowerCase());
-        if (distance <= 2 && (best === undefined || distance < best.distance)) {
-            best = { kind, distance };
-        }
-    }
-    return best?.kind;
-}
-/** Levenshtein distance (small inputs only: driver kinds and specifiers). */
-function editDistance(a, b) {
-    if (a === b)
-        return 0;
-    const rows = a.length + 1;
-    const cols = b.length + 1;
-    let prev = Array.from({ length: cols }, (_, j) => j);
-    for (let i = 1; i < rows; i += 1) {
-        const current = [i, ...new Array(cols - 1).fill(0)];
-        for (let j = 1; j < cols; j += 1) {
-            const substitution = (prev[j - 1] ?? 0) + (a[i - 1] === b[j - 1] ? 0 : 1);
-            current[j] = Math.min((prev[j] ?? 0) + 1, (current[j - 1] ?? 0) + 1, substitution);
-        }
-        prev = current;
-    }
-    return prev[cols - 1] ?? Math.max(a.length, b.length);
-}
-/**
- * Specifiers THIS loader registered, per registry. Distinguishes a reload that
- * re-encounters an already-loaded specifier (emit the module-pinned audit
- * event) from an ordinary built-in/extension hit (silent no-op).
- */
-const loadedSpecifiers = new WeakMap();
-/**
- * Idempotently makes the configured worker-pool driver resolvable in
- * `registry`. A registry hit (a built-in kind, an extension, or a specifier a
- * previous call already loaded) is a no-op - except that a re-encountered
- * loader-registered specifier emits `worker_pool_driver_module_pinned` so the
- * code-is-pinned semantic is observable on reload. A miss parses the driver as
- * a module reference, dynamic-imports it, and registers a factory whose kind
- * IS the configured specifier string, emitting `worker_pool_driver_loaded`.
- *
- * Called by the daemon BEFORE `createWorkerPool` at startup and (via the
- * coordinator's injected `driverLoader`) BEFORE `pool.reconcile` on reload, so
- * the pool's registry resolution stays synchronous and transactional. A module
- * registered for a reconcile that later fails is harmless: the registry is a
- * catalog, and an unused entry is inert.
+ * Idempotently makes the configured worker-pool driver resolvable in `registry`
+ * (see {@link createExtensionLoader} for the load/pin semantics). Called by the
+ * daemon BEFORE `createWorkerPool` at startup and (via the coordinator's injected
+ * `driverLoader`) BEFORE `pool.reconcile` on reload, so the pool's registry
+ * resolution stays synchronous and transactional.
  */
 export async function ensureWorkerDriverLoaded(driver, registry, options = {}) {
-    const logEvent = options.logEvent ?? (() => { });
-    if (registry.get(driver) !== undefined) {
-        if (loadedSpecifiers.get(registry)?.has(driver)) {
-            logEvent({ event: "worker_pool_driver_module_pinned", specifier: driver });
-        }
-        return;
-    }
-    const ref = parseWorkerDriverRef(driver);
-    const { module, resolvedFrom } = await loadWorkerDriverModule(ref.specifier, {
-        baseDir: options.baseDir ?? process.cwd(),
-        exportName: ref.exportName,
-        knownKinds: registry.kinds(),
-    });
-    // Register under the EXACT configured string: the pool resolves
-    // `settings.driver` verbatim, so the factory's kind must be the specifier,
-    // not the module's self-declared kind (which is logged for the audit trail).
-    registry.register({
-        kind: driver,
-        create: (driverOptions, deps) => module.create(driverOptions, deps),
-    });
-    let loaded = loadedSpecifiers.get(registry);
-    if (loaded === undefined) {
-        loaded = new Set();
-        loadedSpecifiers.set(registry, loaded);
-    }
-    loaded.add(driver);
-    logEvent({
-        event: "worker_pool_driver_loaded",
-        specifier: driver,
-        kind: module.kind,
-        sdkVersion: module.sdkVersion,
-        resolvedFrom,
-    });
+    return workerDriverLoader.ensureLoaded(driver, registry, options);
 }
 //# sourceMappingURL=workerDriverLoader.js.map

package/node_modules/@lorenz/cli/dist/workerDriverLoader.js.map

@@ -1 +1 @@
-{"version":3,"file":"workerDriverLoader.js","sourceRoot":"","sources":["../src/workerDriverLoader.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,wBAAwB,GAGzB,MAAM,oBAAoB,CAAC;AAkC5B;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,gCAAgC,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,kCAAkC,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,yCAAyC,SAAS,yCAAyC;YACzF,uFAAuF;YACvF,yBAAyB,CAC5B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAkBD,6EAA6E;AAC7E,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO,CACL,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1B,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,OAAsC;IAEtC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IACpD,MAAM,YAAY,GAChB,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAC1D,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI;QACtD,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,SAAkC,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAA4B,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IACnF,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;aACrC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,CAAC;aACrC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,sCAAsC,MAAM,wBAAwB;gBAClE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,4FAA4F;YAChG,CAAC,CAAC,sCAAsC,MAAM,yBAAyB,UAAU,GAAG;gBAChF,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5E,CAAC;IACJ,CAAC;IACD,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,SAAkC,EAAE,UAA8B;IACtF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC1D,OAAQ,UAAsC,CAAC,UAAU,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAS,GAAY,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,2EAA2E;QAC3E,uEAAuE;QACvE,uEAAuE;QACvE,OAAO,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IACD,0EAA0E;IAC1E,6EAA6E;IAC7E,qEAAqE;IACrE,IACE,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,KAAK,IAAI;QAClB,SAAS,IAAI,SAAS;QACtB,OAAQ,SAAkC,CAAC,MAAM,KAAK,UAAU,EAChE,CAAC;QACD,SAAS,GAAI,SAAqC,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8DAA8D;AAC9D,SAAS,qBAAqB,CAC5B,SAAiB,EACjB,YAAoB,EACpB,KAAc,EACd,UAAiC;IAEjC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,KAAK,CACd,mCAAmC,SAAS,sBAAsB,YAAY,KAAK,OAAO,GAAG,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GACT,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,kBAAkB,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACxD,CAAC,CAAC,iCAAiC,CAAC;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,KAAK,IAAI,CAAC;IACtE,OAAO,IAAI,KAAK,CACd,mCAAmC,SAAS,6CAA6C;QACvF,uBAAuB,KAAK,GAAG,IAAI,KAAK,OAAO,GAAG,CACrD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,SAAiB,EAAE,KAA4B;IAClE,IAAI,IAAoD,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtE,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,EAAE,IAAI,CAAC;AACpB,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAqC,CAAC;AAU1E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAc,EACd,QAA8B,EAC9B,UAA2C,EAAE;IAE7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAS,EAAE,GAAE,CAAC,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE;QAC3E,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE;QACzC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE;KAC7B,CAAC,CAAC;IAEH,gEAAgE;IAChE,2EAA2E;IAC3E,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC;KACpE,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3B,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,QAAQ,CAAC;QACP,KAAK,EAAE,2BAA2B;QAClC,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY;KACb,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"workerDriverLoader.js","sourceRoot":"","sources":["../src/workerDriverLoader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,wBAAwB,GAIzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,qBAAqB,GAGtB,MAAM,sBAAsB,CAAC;AAgB9B,MAAM,kBAAkB,GAAG,qBAAqB,CAA0C;IACxF,WAAW,EAAE,oBAAoB;IACjC,UAAU,EAAE;QACV,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,kCAAkC;KAC3C;IACD,gBAAgB,EAAE,oBAAoB;IACtC,QAAQ,EAAE,gBAAgB;IAC1B,YAAY,EAAE,wBAAwB;IACtC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,UAAU;IACpF,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC;KACpE,CAAC;IACF,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;CACnF,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAc,EACd,QAA8B,EAC9B,UAA2C,EAAE;IAE7C,OAAO,kBAAkB,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC"}

package/node_modules/@lorenz/cli/package.json

@@ -22,6 +22,7 @@
     "@lorenz/dispatch-coordinator": "0.1.1",
     "@lorenz/docker-worker": "0.1.1",
     "@lorenz/domain": "0.1.1",
+    "@lorenz/flags": "0.1.0",
     "@lorenz/humanize": "0.1.1",
     "@lorenz/issue": "0.1.1",
     "@lorenz/jira-tracker": "0.1.1",

package/node_modules/@lorenz/config/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { PORT_MAX, ONE_WEEK_MS, RENDER_INTERVAL_MAX_MS, CONCURRENCY_MAX, MAX_TURNS_MAX, ENSEMBLE_SIZE_MAX, } from "@lorenz/domain";
 export { defaultSettings } from "./defaults.js";
 export type { DefaultSettingsOptions } from "./defaults.js";
-export { parseConfig, settingsForIssueState, validateDispatchConfig, normalizeStateName, normalizeRouteName, } from "./parse.js";
+export { parseConfig, settingsForIssueState, validateDispatchConfig, trackerSpecifierFromConfig, normalizeStateName, normalizeRouteName, } from "./parse.js";
 export type { ConfigDeprecationContext } from "./parse.js";
 export { collectConfigDeprecations, formatConfigDeprecation, warnConfigDeprecations, } from "./deprecations.js";
 export type { ConfigDeprecation } from "./deprecations.js";

package/node_modules/@lorenz/config/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,WAAW,EACX,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,WAAW,EACX,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}

package/node_modules/@lorenz/config/dist/index.js

@@ -1,5 +1,5 @@
 export { PORT_MAX, ONE_WEEK_MS, RENDER_INTERVAL_MAX_MS, CONCURRENCY_MAX, MAX_TURNS_MAX, ENSEMBLE_SIZE_MAX, } from "@lorenz/domain";
 export { defaultSettings } from "./defaults.js";
-export { parseConfig, settingsForIssueState, validateDispatchConfig, normalizeStateName, normalizeRouteName, } from "./parse.js";
+export { parseConfig, settingsForIssueState, validateDispatchConfig, trackerSpecifierFromConfig, normalizeStateName, normalizeRouteName, } from "./parse.js";
 export { collectConfigDeprecations, formatConfigDeprecation, warnConfigDeprecations, } from "./deprecations.js";
 //# sourceMappingURL=index.js.map

package/node_modules/@lorenz/config/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,WAAW,EACX,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,WAAW,EACX,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC"}

package/node_modules/@lorenz/config/dist/parse.d.ts

@@ -16,6 +16,23 @@ export interface ConfigDeprecationContext {
     warn: (message: string) => void;
 }
 export declare function validateDispatchConfig(settings: Settings, trackers?: TrackerRegistry, executors?: AgentExecutorRegistry, tools?: ToolRegistry, deprecations?: ConfigDeprecationContext): void;
+/**
+ * The effective tracker selector a raw workflow config resolves to - the value
+ * that becomes `settings.tracker.kind` - WITHOUT running the rest of config
+ * parsing. The out-of-tree extension loader needs this BEFORE {@link parseConfig}
+ * so it can dynamic-import a tracker module named by `tracker.kind` and register
+ * it (under that exact string) into the registry the parser then resolves
+ * `parseOptions`/`validateDispatch` against. Returns undefined when no tracker is
+ * configured (the default tracker applies) or when a `trackers.<name>` bundle is
+ * selected (a bundle is an in-repo composition, never a module specifier).
+ *
+ * Mirrors {@link parseTracker}'s selection: `tracker.kind` is the selector; an
+ * empty/blank value yields undefined. This reads only the selector, so a tracker
+ * module specifier in `tracker.kind` (e.g. `./acme-tracker.mjs`) surfaces here
+ * verbatim for the loader, while a bundle selection is left to the registry's
+ * built-ins.
+ */
+export declare function trackerSpecifierFromConfig(raw?: Record<string, unknown>): string | undefined;
 export declare function normalizeStateName(value: string): string;
 export declare function normalizeRouteName(value: unknown): string;
 //# sourceMappingURL=parse.d.ts.map

package/node_modules/@lorenz/config/dist/parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAMV,QAAQ,EAKT,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAInF,OAAO,EAAwC,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AA4BlG,wBAAgB,WAAW,CACzB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACjC,GAAG,GAAE,MAAM,CAAC,UAAe,EAC3B,QAAQ,GAAE,sBAA2B,EACrC,QAAQ,GAAE,eAAwC,EAClD,SAAS,GAAE,qBAAoD,GAC9D,QAAQ,CAmFV;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAcjF;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,GAAE,eAAwC,EAClD,SAAS,GAAE,qBAAoD,EAC/D,KAAK,CAAC,EAAE,YAAY,EACpB,YAAY,CAAC,EAAE,wBAAwB,GACtC,IAAI,CAoCN;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIzD"}
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAMV,QAAQ,EAKT,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAInF,OAAO,EAAwC,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AA4BlG,wBAAgB,WAAW,CACzB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACjC,GAAG,GAAE,MAAM,CAAC,UAAe,EAC3B,QAAQ,GAAE,sBAA2B,EACrC,QAAQ,GAAE,eAAwC,EAClD,SAAS,GAAE,qBAAoD,GAC9D,QAAQ,CA6FV;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAcjF;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,GAAE,eAAwC,EAClD,SAAS,GAAE,qBAAoD,EAC/D,KAAK,CAAC,EAAE,YAAY,EACpB,YAAY,CAAC,EAAE,wBAAwB,GACtC,IAAI,CAoCN;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAChC,MAAM,GAAG,SAAS,CAUpB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIzD"}

package/node_modules/@lorenz/config/dist/parse.js

@@ -35,12 +35,14 @@ export function parseConfig(raw = {}, env = {}, defaults = {}, registry = defaul
     if (workerRaw.kind !== undefined && settings.worker.sshHosts.length > 0) {
         throw new Error("worker.kind cannot be combined with worker.ssh_hosts");
     }
-    const workerPool = parseWorkerPool(workerRaw.workerPool, workerRaw, parsed.workers ?? {});
-    if (workerPool)
-        settings.worker.workerPool = workerPool;
-    if (workerPool?.enabled && settings.worker.sshHosts.length > 0) {
-        throw new Error("worker.worker_pool.enabled cannot be combined with worker.ssh_hosts");
-    }
+    // The pool is the single dispatch path; parseWorkerPool always returns one. The static-ssh
+    // fold-in caps per-host concurrency at `max_concurrent_agents_per_host ?? agent.max_concurrent_agents`.
+    // The agent override is applied later (parseAgentSettings), so resolve it here from the raw config,
+    // falling back to the value already on settings.agent.
+    const perHostConcurrency = settings.worker.maxConcurrentAgentsPerHost ??
+        parsed.agent?.maxConcurrentAgents ??
+        settings.agent.maxConcurrentAgents;
+    settings.worker.workerPool = parseWorkerPool(workerRaw.workerPool, workerRaw, parsed.workers ?? {}, settings.worker.sshHosts, perHostConcurrency);
     settings.hooks = parseHooks(settings.hooks, parsed.hooks ?? {});
     if (settings.workspace.isolation === "none")
         assertNoWorkspaceHooks(settings.hooks);
@@ -121,6 +123,35 @@ export function validateDispatchConfig(settings, trackers = defaultTrackerRegist
         executorProvider.validateAgent?.(kind, agent, settings);
     }
 }
+/**
+ * The effective tracker selector a raw workflow config resolves to - the value
+ * that becomes `settings.tracker.kind` - WITHOUT running the rest of config
+ * parsing. The out-of-tree extension loader needs this BEFORE {@link parseConfig}
+ * so it can dynamic-import a tracker module named by `tracker.kind` and register
+ * it (under that exact string) into the registry the parser then resolves
+ * `parseOptions`/`validateDispatch` against. Returns undefined when no tracker is
+ * configured (the default tracker applies) or when a `trackers.<name>` bundle is
+ * selected (a bundle is an in-repo composition, never a module specifier).
+ *
+ * Mirrors {@link parseTracker}'s selection: `tracker.kind` is the selector; an
+ * empty/blank value yields undefined. This reads only the selector, so a tracker
+ * module specifier in `tracker.kind` (e.g. `./acme-tracker.mjs`) surfaces here
+ * verbatim for the loader, while a bundle selection is left to the registry's
+ * built-ins.
+ */
+export function trackerSpecifierFromConfig(raw = {}) {
+    const parsed = parseWorkflowConfig(raw);
+    const trackersRaw = parsed.trackers ?? {};
+    const selectorRecord = parseTrackerRecord(parsed.tracker ?? {}, "tracker");
+    const selected = trackerKindValue(selectorRecord.kind);
+    if (selected === undefined)
+        return undefined;
+    // A `trackers.<name>` bundle selection composes an in-repo provider via the
+    // bundle's `provider:` key; it is never an out-of-tree module specifier.
+    if (trackersRaw[selected] !== undefined)
+        return undefined;
+    return selected;
+}
 export function normalizeStateName(value) {
     return value.trim().toLowerCase();
 }
@@ -279,14 +310,22 @@ function assertNoWorkspaceHooks(hooks) {
         return;
     throw new Error(`workspace.isolation = "none" does not support hooks; remove ${configured.join(", ")}`);
 }
-function parseWorkerPool(raw, workerRaw, workersRaw) {
+function parseWorkerPool(raw, workerRaw, workersRaw, sshHosts, perHostConcurrency) {
     const selectedWorker = selectedWorkerProfile(workerRaw.kind, workersRaw);
-    if ((raw === undefined || raw === null) && selectedWorker === undefined)
-        return undefined;
+    // No explicit worker_pool and no named worker profile: defaultDispatchWorkerPool supplies the
+    // implicit pool (a `local` pool, or a `static-ssh` pool when `ssh_hosts` is set).
+    if ((raw === undefined || raw === null) && selectedWorker === undefined) {
+        return defaultDispatchWorkerPool(sshHosts, perHostConcurrency);
+    }
     if (selectedWorker !== undefined && raw?.driver !== undefined) {
         throw new Error("worker.kind cannot be combined with worker.worker_pool.driver");
     }
-    const enabled = raw?.enabled ?? selectedWorker !== undefined;
+    // The `ssh_hosts` fold-in only auto-selects static-ssh when no driver is named; a named driver
+    // wins, so an explicit `worker_pool.driver` alongside `ssh_hosts` is ambiguous and rejected
+    // rather than dropping the hosts.
+    if (raw?.driver !== undefined && sshHosts.length > 0) {
+        throw new Error("worker.worker_pool.driver cannot be combined with worker.ssh_hosts");
+    }
     const driver = selectedWorker?.driver ?? raw?.driver ?? "fake";
     const min = raw?.min ?? 0;
     const max = raw?.max ?? 1;
@@ -301,7 +340,9 @@ function parseWorkerPool(raw, workerRaw, workersRaw) {
     // so the constructed object carries exactly ONE own field (`slotsPerMachine`). The config key
     // `worker.worker_pool.max_in_flight` is unchanged; it parses into `slotsPerMachine`.
     const input = {
-        enabled,
+        // A configured pool (an explicit worker_pool block or a named worker.kind) is always enabled;
+        // `enabled` is an internal liveness flag the reload-drain flips, not an operator config key.
+        enabled: true,
         driver,
         min,
         max,
@@ -335,6 +376,61 @@ function parseWorkerPool(raw, workerRaw, workersRaw) {
     // fail-loud startup point as an unregistered kind.
     return settings;
 }
+/**
+ * The implicit dispatch pool produced when no `worker_pool` and no `worker.kind` are configured:
+ * - empty `sshHosts`  -> an enabled `local` pool, slotsPerMachine=1, min=0/warm=0/max=1 so nothing
+ *   provisions eagerly and the single local worker is minted on first acquire. The local driver
+ *   yields an empty `workerHost`, so the per-run endpoint manager mints no tunnel and acp keeps its
+ *   own in-process MCP endpoint.
+ * - non-empty `sshHosts` -> an enabled `static-ssh` pool whose driverOptions carry the configured
+ *   hosts (the `ssh_hosts` spelling the driver's `readSshHosts` expects). `max` is the host count
+ *   and slotsPerMachine is the per-host cap (`max_concurrent_agents_per_host ??
+ *   agent.max_concurrent_agents`), so total capacity is hosts * perHostConcurrency. `co_residence`
+ *   is auto-enabled when that cap is >1, since each co-resident run owns its own per-run Token B
+ *   claim plus the shared per-host reverse tunnel. The provision policy is round-robin first-free
+ *   (static-ssh `provision`).
+ */
+function defaultDispatchWorkerPool(sshHosts, perHostConcurrency) {
+    if (sshHosts.length > 0) {
+        const slotsPerMachine = Math.max(1, perHostConcurrency);
+        const input = {
+            enabled: true,
+            driver: "static-ssh",
+            min: 0,
+            max: sshHosts.length,
+            warm: 0,
+            slotsPerMachine,
+            ttlMs: 3_600_000,
+            idleReapMs: 300_000,
+            acquireTimeoutMs: 30_000,
+            reapIntervalMs: 15_000,
+            staleHeartbeatMs: 600_000,
+            drainDeadlineMs: 30_000,
+            driverOptions: { ssh_hosts: [...sshHosts] },
+        };
+        const settings = withDerivedMaxInFlight(input);
+        // A per-host cap >1 co-resides runs on one host (guarded by the slots-per-machine gate), so
+        // auto-enable the co_residence opt-in. A cap of 1 stays single-tenant and never trips the gate.
+        if (slotsPerMachine > 1)
+            settings.coResidence = true;
+        return settings;
+    }
+    const input = {
+        enabled: true,
+        driver: "local",
+        min: 0,
+        max: 1,
+        warm: 0,
+        slotsPerMachine: 1,
+        ttlMs: 3_600_000,
+        idleReapMs: 300_000,
+        acquireTimeoutMs: 30_000,
+        reapIntervalMs: 15_000,
+        staleHeartbeatMs: 600_000,
+        drainDeadlineMs: 30_000,
+    };
+    return withDerivedMaxInFlight(input);
+}
 function selectedWorkerProfile(workerKind, workersRaw) {
     if (workerKind === undefined)
         return undefined;