omk-adaptorch-wpl 0.91.0

package/dist/evaluate-correctness-wall.js

@@ -0,0 +1,128 @@
+/**
+ * B2C Correctness Wall orchestration — fast wall + optional OA adjudication.
+ */
+import { adjudicate } from "./adjudicator.js";
+import { createVerifierRegistry } from "./adjudicator-registry.js";
+import { mapToB2C } from "./b2c-mapper.js";
+import { DEEP_RUNNER_NOT_WIRED, DEEP_WALL_UNAVAILABLE, isDeepRunnerCompletionAllowed, resolveDeepWallPhaseFromEnv, runDeepWall, } from "./deep-wall.js";
+import { runFastWall } from "./policy-wall.js";
+import { signWallReceipt } from "./receipt-signature.js";
+import { deriveRepairHints } from "./repair-loop.js";
+import { buildVerificationDigest } from "./signed-receipt.js";
+import { CORRECTNESS_WALL_VERSION } from "./wall-meta.js";
+export async function evaluateCorrectnessWall(params) {
+    const runIds = params.runIds ?? [];
+    const previewOnly = params.previewOnly === true;
+    const registry = params.registry ?? createVerifierRegistry([]);
+    const wall = runFastWall({
+        diffText: params.diffText,
+        approvedWriteScope: params.approvedWriteScope,
+        runIds,
+        previewOnly,
+    });
+    let adjudication;
+    const useOa = runIds.length > 0 && !previewOnly && params.client !== undefined;
+    if (useOa && params.client !== undefined) {
+        const request = {
+            dispatch_record_id: params.dispatchRecordId ?? "b2c-wall",
+            kind: params.kind,
+            run_ids: runIds,
+        };
+        adjudication = await adjudicate(request, params.client, registry);
+    }
+    let policyFlags = wall.flags;
+    if (adjudication !== undefined) {
+        policyFlags = wall.flags.filter((f) => f !== "EVIDENCE_DAG_INCOMPLETE");
+    }
+    const provisional = mapToB2C({
+        kind: params.kind,
+        packetId: params.packetId,
+        dispatchRecordId: params.dispatchRecordId,
+        runIds,
+        previewOnly,
+        policyFlags,
+        diffPaths: wall.diffPaths,
+        adjudication,
+    });
+    const repairHints = deriveRepairHints({
+        userVerdict: provisional.verdictCard.verdict,
+        policyFlags,
+        adjudicationReasonCode: adjudication?.reason_code,
+        previewOnly,
+        diffPaths: wall.diffPaths,
+    });
+    const mapped = mapToB2C({
+        kind: params.kind,
+        packetId: params.packetId,
+        dispatchRecordId: params.dispatchRecordId,
+        runIds,
+        previewOnly,
+        policyFlags,
+        diffPaths: wall.diffPaths,
+        adjudication,
+        repairHints,
+    });
+    const verificationDigest = buildVerificationDigest({
+        patchText: params.diffText,
+        evidenceChunks: runIds.length > 0 ? runIds : undefined,
+        wallVersion: CORRECTNESS_WALL_VERSION,
+    });
+    let verdictCard = mapped.verdictCard;
+    let receipt = {
+        ...mapped.receipt,
+        verificationDigest,
+        wallVersion: CORRECTNESS_WALL_VERSION,
+    };
+    const signingSecret = params.receiptSigningSecret?.trim();
+    if (signingSecret !== undefined && signingSecret.length > 0 && verificationDigest !== undefined) {
+        receipt = {
+            ...receipt,
+            signedReceipt: signWallReceipt({
+                digest: verificationDigest,
+                wallVersion: CORRECTNESS_WALL_VERSION,
+                secret: signingSecret,
+            }),
+        };
+    }
+    if (params.deepWall === true) {
+        const deep = await runDeepWall({
+            kind: params.kind,
+            runIds,
+            packetId: params.packetId,
+            phase: resolveDeepWallPhaseFromEnv(),
+            runner: params.deepWallRunner,
+            allowCompletion: params.deepWallAllowCompletion,
+        });
+        const policyFlags = [...receipt.policyFlags];
+        if (deep.status !== "completed") {
+            if (!policyFlags.includes(DEEP_WALL_UNAVAILABLE)) {
+                policyFlags.push(DEEP_WALL_UNAVAILABLE);
+            }
+            if (!isDeepRunnerCompletionAllowed() && !policyFlags.includes(DEEP_RUNNER_NOT_WIRED)) {
+                policyFlags.push(DEEP_RUNNER_NOT_WIRED);
+            }
+        }
+        for (const f of deep.runnerFlags ?? []) {
+            if (!policyFlags.includes(f))
+                policyFlags.push(f);
+        }
+        const limitsCode = deep.limits?.[0] ?? verdictCard.limits.code;
+        verdictCard = {
+            ...verdictCard,
+            limits: {
+                ...verdictCard.limits,
+                requiresHumanReview: deep.status !== "completed",
+                code: limitsCode ?? verdictCard.limits.code,
+            },
+            blocked_reasons: [...new Set([...verdictCard.blocked_reasons, deep.message])],
+        };
+        receipt = {
+            ...receipt,
+            policyFlags,
+            deepWallStatus: deep.status,
+            deepWallEvidence: deep.evidence,
+        };
+    }
+    return { verdictCard, receipt };
+}
+//# sourceMappingURL=evaluate-correctness-wall.js.map

package/dist/evaluate-correctness-wall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate-correctness-wall.js","sourceRoot":"","sources":["../src/evaluate-correctness-wall.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAA4B,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAA8B,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EACN,qBAAqB,EACrB,qBAAqB,EAErB,6BAA6B,EAC7B,2BAA2B,EAC3B,WAAW,GACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AA4B1D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,MAAqC,EACI;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,WAAW,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,MAAM;QACN,WAAW;KACX,CAAC,CAAC;IAEH,IAAI,YAAgE,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;IAC/E,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAwB;YACpC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,IAAI,UAAU;YACzD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM;SACf,CAAC;QACF,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;IAC7B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAChC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,MAAM;QACN,WAAW;QACX,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;KACZ,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACrC,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO;QAC5C,WAAW;QACX,sBAAsB,EAAE,YAAY,EAAE,WAAW;QACjD,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,QAAQ,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,MAAM;QACN,WAAW;QACX,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;QACZ,WAAW;KACX,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;QAClD,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,cAAc,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACtD,WAAW,EAAE,wBAAwB;KACrC,CAAC,CAAC;IAEH,IAAI,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACrC,IAAI,OAAO,GAAwB;QAClC,GAAG,MAAM,CAAC,OAAO;QACjB,kBAAkB;QAClB,WAAW,EAAE,wBAAwB;KACrC,CAAC;IAEF,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACjG,OAAO,GAAG;YACT,GAAG,OAAO;YACV,aAAa,EAAE,eAAe,CAAC;gBAC9B,MAAM,EAAE,kBAAkB;gBAC1B,WAAW,EAAE,wBAAwB;gBACrC,MAAM,EAAE,aAAa;aACrB,CAAC;SACF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM;YACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,2BAA2B,EAAE;YACpC,MAAM,EAAE,MAAM,CAAC,cAAc;YAC7B,eAAe,EAAE,MAAM,CAAC,uBAAuB;SAC/C,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAClD,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,6BAA6B,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACtF,WAAW,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;QACF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAU,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,CAAU,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC/D,WAAW,GAAG;YACb,GAAG,WAAW;YACd,MAAM,EAAE;gBACP,GAAG,WAAW,CAAC,MAAM;gBACrB,mBAAmB,EAAE,IAAI,CAAC,MAAM,KAAK,WAAW;gBAChD,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI;aAC3C;YACD,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;SAC7E,CAAC;QACF,OAAO,GAAG;YACT,GAAG,OAAO;YACV,WAAW;YACX,cAAc,EAAE,IAAI,CAAC,MAAM;YAC3B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;SAC/B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAAA,CAChC","sourcesContent":["/**\n * B2C Correctness Wall orchestration — fast wall + optional OA adjudication.\n */\n\nimport type { AdaptOrchClient } from \"./adaptorch-client.ts\";\nimport { type AdjudicationRequest, adjudicate } from \"./adjudicator.ts\";\nimport { createVerifierRegistry, type VerifierRegistryEntry } from \"./adjudicator-registry.ts\";\nimport { mapToB2C } from \"./b2c-mapper.ts\";\nimport type { VerdictCard, VerificationReceipt } from \"./b2c-verdict.ts\";\nimport {\n\tDEEP_RUNNER_NOT_WIRED,\n\tDEEP_WALL_UNAVAILABLE,\n\ttype DeepWallRunnerFn,\n\tisDeepRunnerCompletionAllowed,\n\tresolveDeepWallPhaseFromEnv,\n\trunDeepWall,\n} from \"./deep-wall.ts\";\nimport { runFastWall } from \"./policy-wall.ts\";\nimport { signWallReceipt } from \"./receipt-signature.ts\";\nimport { deriveRepairHints } from \"./repair-loop.ts\";\nimport { buildVerificationDigest } from \"./signed-receipt.ts\";\nimport { CORRECTNESS_WALL_VERSION } from \"./wall-meta.ts\";\n\nexport interface EvaluateCorrectnessWallParams {\n\tkind: string;\n\trunIds?: string[];\n\tdispatchRecordId?: string;\n\tapprovedWriteScope?: string[];\n\tpreviewOnly?: boolean;\n\tdiffText?: string;\n\tpacketId?: string;\n\t/** When set with non-empty runIds and previewOnly false, OA adjudication is invoked. */\n\tclient?: AdaptOrchClient;\n\tregistry?: { get(kind: string): VerifierRegistryEntry };\n\t/** When true, merge deep-wall result into limits / policy flags. */\n\tdeepWall?: boolean;\n\t/** Wave 4-C3b: injected hermetic runner. Completion gated by `deepWallAllowCompletion` + evidence. */\n\tdeepWallRunner?: DeepWallRunnerFn;\n\t/** Must be true for a runner to emit `completed`. */\n\tdeepWallAllowCompletion?: boolean;\n\t/** When set, attach HMAC signed receipt attestation (never log secret). */\n\treceiptSigningSecret?: string;\n}\n\nexport interface EvaluateCorrectnessWallResult {\n\tverdictCard: VerdictCard;\n\treceipt: VerificationReceipt;\n}\n\nexport async function evaluateCorrectnessWall(\n\tparams: EvaluateCorrectnessWallParams,\n): Promise<EvaluateCorrectnessWallResult> {\n\tconst runIds = params.runIds ?? [];\n\tconst previewOnly = params.previewOnly === true;\n\tconst registry = params.registry ?? createVerifierRegistry([]);\n\n\tconst wall = runFastWall({\n\t\tdiffText: params.diffText,\n\t\tapprovedWriteScope: params.approvedWriteScope,\n\t\trunIds,\n\t\tpreviewOnly,\n\t});\n\n\tlet adjudication: Awaited<ReturnType<typeof adjudicate>> | undefined;\n\tconst useOa = runIds.length > 0 && !previewOnly && params.client !== undefined;\n\tif (useOa && params.client !== undefined) {\n\t\tconst request: AdjudicationRequest = {\n\t\t\tdispatch_record_id: params.dispatchRecordId ?? \"b2c-wall\",\n\t\t\tkind: params.kind,\n\t\t\trun_ids: runIds,\n\t\t};\n\t\tadjudication = await adjudicate(request, params.client, registry);\n\t}\n\n\tlet policyFlags = wall.flags;\n\tif (adjudication !== undefined) {\n\t\tpolicyFlags = wall.flags.filter((f) => f !== \"EVIDENCE_DAG_INCOMPLETE\");\n\t}\n\n\tconst provisional = mapToB2C({\n\t\tkind: params.kind,\n\t\tpacketId: params.packetId,\n\t\tdispatchRecordId: params.dispatchRecordId,\n\t\trunIds,\n\t\tpreviewOnly,\n\t\tpolicyFlags,\n\t\tdiffPaths: wall.diffPaths,\n\t\tadjudication,\n\t});\n\n\tconst repairHints = deriveRepairHints({\n\t\tuserVerdict: provisional.verdictCard.verdict,\n\t\tpolicyFlags,\n\t\tadjudicationReasonCode: adjudication?.reason_code,\n\t\tpreviewOnly,\n\t\tdiffPaths: wall.diffPaths,\n\t});\n\n\tconst mapped = mapToB2C({\n\t\tkind: params.kind,\n\t\tpacketId: params.packetId,\n\t\tdispatchRecordId: params.dispatchRecordId,\n\t\trunIds,\n\t\tpreviewOnly,\n\t\tpolicyFlags,\n\t\tdiffPaths: wall.diffPaths,\n\t\tadjudication,\n\t\trepairHints,\n\t});\n\n\tconst verificationDigest = buildVerificationDigest({\n\t\tpatchText: params.diffText,\n\t\tevidenceChunks: runIds.length > 0 ? runIds : undefined,\n\t\twallVersion: CORRECTNESS_WALL_VERSION,\n\t});\n\n\tlet verdictCard = mapped.verdictCard;\n\tlet receipt: VerificationReceipt = {\n\t\t...mapped.receipt,\n\t\tverificationDigest,\n\t\twallVersion: CORRECTNESS_WALL_VERSION,\n\t};\n\n\tconst signingSecret = params.receiptSigningSecret?.trim();\n\tif (signingSecret !== undefined && signingSecret.length > 0 && verificationDigest !== undefined) {\n\t\treceipt = {\n\t\t\t...receipt,\n\t\t\tsignedReceipt: signWallReceipt({\n\t\t\t\tdigest: verificationDigest,\n\t\t\t\twallVersion: CORRECTNESS_WALL_VERSION,\n\t\t\t\tsecret: signingSecret,\n\t\t\t}),\n\t\t};\n\t}\n\n\tif (params.deepWall === true) {\n\t\tconst deep = await runDeepWall({\n\t\t\tkind: params.kind,\n\t\t\trunIds,\n\t\t\tpacketId: params.packetId,\n\t\t\tphase: resolveDeepWallPhaseFromEnv(),\n\t\t\trunner: params.deepWallRunner,\n\t\t\tallowCompletion: params.deepWallAllowCompletion,\n\t\t});\n\t\tconst policyFlags = [...receipt.policyFlags];\n\t\tif (deep.status !== \"completed\") {\n\t\t\tif (!policyFlags.includes(DEEP_WALL_UNAVAILABLE)) {\n\t\t\t\tpolicyFlags.push(DEEP_WALL_UNAVAILABLE);\n\t\t\t}\n\t\t\tif (!isDeepRunnerCompletionAllowed() && !policyFlags.includes(DEEP_RUNNER_NOT_WIRED)) {\n\t\t\t\tpolicyFlags.push(DEEP_RUNNER_NOT_WIRED);\n\t\t\t}\n\t\t}\n\t\tfor (const f of deep.runnerFlags ?? []) {\n\t\t\tif (!policyFlags.includes(f as never)) policyFlags.push(f as never);\n\t\t}\n\t\tconst limitsCode = deep.limits?.[0] ?? verdictCard.limits.code;\n\t\tverdictCard = {\n\t\t\t...verdictCard,\n\t\t\tlimits: {\n\t\t\t\t...verdictCard.limits,\n\t\t\t\trequiresHumanReview: deep.status !== \"completed\",\n\t\t\t\tcode: limitsCode ?? verdictCard.limits.code,\n\t\t\t},\n\t\t\tblocked_reasons: [...new Set([...verdictCard.blocked_reasons, deep.message])],\n\t\t};\n\t\treceipt = {\n\t\t\t...receipt,\n\t\t\tpolicyFlags,\n\t\t\tdeepWallStatus: deep.status,\n\t\t\tdeepWallEvidence: deep.evidence,\n\t\t};\n\t}\n\n\treturn { verdictCard, receipt };\n}\n"]}

package/dist/in-memory-adaptorch.d.ts

@@ -0,0 +1,12 @@
+/**
+ * In-memory AdaptOrch transport for tests and local evaluation fixtures.
+ */
+import { AdaptOrchClient } from "./adaptorch-client.ts";
+export type InMemoryAdaptOrchFixture = Record<string, {
+    run: unknown;
+    artifacts: unknown;
+    traces: unknown;
+}>;
+/** Build an {@link AdaptOrchClient} backed by a per-run_id fixture map. */
+export declare function createInMemoryAdaptOrchClient(fixture: InMemoryAdaptOrchFixture): AdaptOrchClient;
+//# sourceMappingURL=in-memory-adaptorch.d.ts.map

package/dist/in-memory-adaptorch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-adaptorch.d.ts","sourceRoot":"","sources":["../src/in-memory-adaptorch.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAA2B,MAAM,uBAAuB,CAAC;AAEjF,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAgB7G,2EAA2E;AAC3E,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,wBAAwB,GAAG,eAAe,CAEhG","sourcesContent":["/**\n * In-memory AdaptOrch transport for tests and local evaluation fixtures.\n */\n\nimport { AdaptOrchClient, type AdaptOrchTransport } from \"./adaptorch-client.ts\";\n\nexport type InMemoryAdaptOrchFixture = Record<string, { run: unknown; artifacts: unknown; traces: unknown }>;\n\nfunction makeFakeTransport(byRunId: InMemoryAdaptOrchFixture): AdaptOrchTransport {\n\treturn {\n\t\tasync callTool(name: string, args: Record<string, unknown>) {\n\t\t\tconst runId = args.run_id as string;\n\t\t\tconst fixture = byRunId[runId];\n\t\t\tif (!fixture) throw new Error(`no fixture for run_id ${runId}`);\n\t\t\tif (name === \"adaptorch_get_run\") return fixture.run;\n\t\t\tif (name === \"adaptorch_get_artifacts\") return fixture.artifacts;\n\t\t\tif (name === \"adaptorch_get_traces\") return fixture.traces;\n\t\t\tthrow new Error(`unexpected tool call: ${name}`);\n\t\t},\n\t};\n}\n\n/** Build an {@link AdaptOrchClient} backed by a per-run_id fixture map. */\nexport function createInMemoryAdaptOrchClient(fixture: InMemoryAdaptOrchFixture): AdaptOrchClient {\n\treturn new AdaptOrchClient(makeFakeTransport(fixture));\n}\n"]}

package/dist/in-memory-adaptorch.js

@@ -0,0 +1,26 @@
+/**
+ * In-memory AdaptOrch transport for tests and local evaluation fixtures.
+ */
+import { AdaptOrchClient } from "./adaptorch-client.js";
+function makeFakeTransport(byRunId) {
+    return {
+        async callTool(name, args) {
+            const runId = args.run_id;
+            const fixture = byRunId[runId];
+            if (!fixture)
+                throw new Error(`no fixture for run_id ${runId}`);
+            if (name === "adaptorch_get_run")
+                return fixture.run;
+            if (name === "adaptorch_get_artifacts")
+                return fixture.artifacts;
+            if (name === "adaptorch_get_traces")
+                return fixture.traces;
+            throw new Error(`unexpected tool call: ${name}`);
+        },
+    };
+}
+/** Build an {@link AdaptOrchClient} backed by a per-run_id fixture map. */
+export function createInMemoryAdaptOrchClient(fixture) {
+    return new AdaptOrchClient(makeFakeTransport(fixture));
+}
+//# sourceMappingURL=in-memory-adaptorch.js.map

package/dist/in-memory-adaptorch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-adaptorch.js","sourceRoot":"","sources":["../src/in-memory-adaptorch.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAA2B,MAAM,uBAAuB,CAAC;AAIjF,SAAS,iBAAiB,CAAC,OAAiC,EAAsB;IACjF,OAAO;QACN,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B,EAAE;YAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAgB,CAAC;YACpC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAChE,IAAI,IAAI,KAAK,mBAAmB;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC;YACrD,IAAI,IAAI,KAAK,yBAAyB;gBAAE,OAAO,OAAO,CAAC,SAAS,CAAC;YACjE,IAAI,IAAI,KAAK,sBAAsB;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAAA,CACjD;KACD,CAAC;AAAA,CACF;AAED,2EAA2E;AAC3E,MAAM,UAAU,6BAA6B,CAAC,OAAiC,EAAmB;IACjG,OAAO,IAAI,eAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AAAA,CACvD","sourcesContent":["/**\n * In-memory AdaptOrch transport for tests and local evaluation fixtures.\n */\n\nimport { AdaptOrchClient, type AdaptOrchTransport } from \"./adaptorch-client.ts\";\n\nexport type InMemoryAdaptOrchFixture = Record<string, { run: unknown; artifacts: unknown; traces: unknown }>;\n\nfunction makeFakeTransport(byRunId: InMemoryAdaptOrchFixture): AdaptOrchTransport {\n\treturn {\n\t\tasync callTool(name: string, args: Record<string, unknown>) {\n\t\t\tconst runId = args.run_id as string;\n\t\t\tconst fixture = byRunId[runId];\n\t\t\tif (!fixture) throw new Error(`no fixture for run_id ${runId}`);\n\t\t\tif (name === \"adaptorch_get_run\") return fixture.run;\n\t\t\tif (name === \"adaptorch_get_artifacts\") return fixture.artifacts;\n\t\t\tif (name === \"adaptorch_get_traces\") return fixture.traces;\n\t\t\tthrow new Error(`unexpected tool call: ${name}`);\n\t\t},\n\t};\n}\n\n/** Build an {@link AdaptOrchClient} backed by a per-run_id fixture map. */\nexport function createInMemoryAdaptOrchClient(fixture: InMemoryAdaptOrchFixture): AdaptOrchClient {\n\treturn new AdaptOrchClient(makeFakeTransport(fixture));\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Public entry point for `omk-adaptorch-wpl` (stable since 0.91.0).
+ *
+ * See README.md and `.omk/runs/adaptorch-native-loop-algorithm-20260701/final-part{1,2,3}-*.md`
+ * for the design this package implements. Ships as a runtime dependency of the
+ * `open-multi-agent-kit` CLI.
+ */
+export type { AdaptOrchTransport } from "./adaptorch-client.ts";
+export { AdaptOrchClient } from "./adaptorch-client.ts";
+export type { AdjudicationRequest, AdjudicationResult, PerRunVerdict } from "./adjudicator.ts";
+export { adjudicate } from "./adjudicator.ts";
+export type { AdjudicationReasonCode, CheckResult, VerdictState, VerifierRegistryEntry, } from "./adjudicator-registry.ts";
+export { ADJUDICATION_REASON_CODES, createVerifierRegistry, DEFAULT_VERIFIER, reduceReasonCodes, } from "./adjudicator-registry.ts";
+export type { MapToB2CInput, MapToB2COutput } from "./b2c-mapper.ts";
+export { BATCH1_NO_DOCKER_RUNNER, mapToB2C } from "./b2c-mapper.ts";
+export type { UserRiskLevel, UserVerdict, VerdictCard, VerdictLimits, VerdictNextAction, VerificationReceipt, } from "./b2c-verdict.ts";
+export { B2C_VERDICT_SCHEMA_VERSION } from "./b2c-verdict.ts";
+export type { DeepWallPhase, DeepWallResult, DeepWallRunnerEvidence, DeepWallRunnerFn, DeepWallRunnerResult, DeepWallStatus, DeepWallStubResult, RunDeepWallStubParams, } from "./deep-wall.ts";
+export { DEEP_RUNNER_ERROR, DEEP_RUNNER_EVIDENCE_MISSING, DEEP_RUNNER_NOT_WIRED, DEEP_WALL_UNAVAILABLE, isDeepRunnerCompletionAllowed, resolveDeepWallPhaseFromEnv, runDeepWall, runDeepWallStub, } from "./deep-wall.ts";
+export type { EvaluateCorrectnessWallParams, EvaluateCorrectnessWallResult, } from "./evaluate-correctness-wall.ts";
+export { evaluateCorrectnessWall } from "./evaluate-correctness-wall.ts";
+export type { InMemoryAdaptOrchFixture } from "./in-memory-adaptorch.ts";
+export { createInMemoryAdaptOrchClient } from "./in-memory-adaptorch.ts";
+export type { AdaptOrchCallToolFn, OaTransportMode } from "./live-adaptorch-transport.ts";
+export { createLiveAdaptOrchClient, parseOaTransportModeFromEnv } from "./live-adaptorch-transport.ts";
+export type { NextActionKind, VerdictDisposition } from "./loop.ts";
+export { decideNextTransition, handleAdjudicationFailure, projectVerdictToDisposition, runAdjudicationWithTimeout, } from "./loop.ts";
+export type { CreateMcpIntrospectionTransportOptions, McpIntrospectionMode, } from "./mcp-introspection-transport.ts";
+export { createMcpIntrospectionClient } from "./mcp-introspection-transport.ts";
+export type { PolicyFlag } from "./policy-wall.ts";
+export { POLICY_FLAG, parseDiffPaths, pathMatchesApprovedScope, runFastWall, scanDiffLinesForSecrets, } from "./policy-wall.ts";
+export type { SignedWallReceipt, SignWallReceiptInput, VerifyWallReceiptInput } from "./receipt-signature.ts";
+export { signWallReceipt, verifyWallReceipt } from "./receipt-signature.ts";
+export type { BuildRegeneratePacketInput, RegeneratePacket } from "./regenerate-packet.ts";
+export { buildRegeneratePacket } from "./regenerate-packet.ts";
+export type { RepairBudgetState } from "./repair-budget.ts";
+export { capRepairHints, parseRepairBudget, shouldOfferRepair } from "./repair-budget.ts";
+export type { RepairHintInput } from "./repair-loop.ts";
+export { deriveRepairHints } from "./repair-loop.ts";
+export type { VerificationDigest, VerificationDigestInput, WallReceiptMeta, } from "./signed-receipt.ts";
+export { buildVerificationDigest } from "./signed-receipt.ts";
+export { applyTransition, canTransition, isTerminalState, requiresHumanApproval } from "./state-machine.ts";
+export type { CardinalityMode, DispatchRecord, LoopConfig, LoopTerminationCondition, TopologyClassification, TransitionLogEntry, WorkPacket, WorkPacketState, } from "./types.ts";
+export { ADJUDICATIONS_DIR, LOOP_STATE_FILE, PACKET_INDEX_FILE, PACKETS_DIR, RUN_MAP_FILE } from "./types.ts";
+export { CORRECTNESS_WALL_VERSION } from "./wall-meta.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EACX,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,qBAAqB,GACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EACX,aAAa,EACb,WAAW,EACX,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,mBAAmB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,YAAY,EACX,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,iBAAiB,EACjB,4BAA4B,EAC5B,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,2BAA2B,EAC3B,WAAW,EACX,eAAe,GACf,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACX,6BAA6B,EAC7B,6BAA6B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,YAAY,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACvG,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EACN,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,GAC1B,MAAM,WAAW,CAAC;AACnB,YAAY,EACX,sCAAsC,EACtC,oBAAoB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACN,WAAW,EACX,cAAc,EACd,wBAAwB,EACxB,WAAW,EACX,uBAAuB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAC9G,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1F,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,YAAY,EACX,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC5G,YAAY,EACX,eAAe,EACf,cAAc,EACd,UAAU,EACV,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,EACV,eAAe,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["/**\n * Public entry point for `omk-adaptorch-wpl` (stable since 0.91.0).\n *\n * See README.md and `.omk/runs/adaptorch-native-loop-algorithm-20260701/final-part{1,2,3}-*.md`\n * for the design this package implements. Ships as a runtime dependency of the\n * `open-multi-agent-kit` CLI.\n */\n\nexport type { AdaptOrchTransport } from \"./adaptorch-client.ts\";\nexport { AdaptOrchClient } from \"./adaptorch-client.ts\";\nexport type { AdjudicationRequest, AdjudicationResult, PerRunVerdict } from \"./adjudicator.ts\";\nexport { adjudicate } from \"./adjudicator.ts\";\nexport type {\n\tAdjudicationReasonCode,\n\tCheckResult,\n\tVerdictState,\n\tVerifierRegistryEntry,\n} from \"./adjudicator-registry.ts\";\nexport {\n\tADJUDICATION_REASON_CODES,\n\tcreateVerifierRegistry,\n\tDEFAULT_VERIFIER,\n\treduceReasonCodes,\n} from \"./adjudicator-registry.ts\";\nexport type { MapToB2CInput, MapToB2COutput } from \"./b2c-mapper.ts\";\nexport { BATCH1_NO_DOCKER_RUNNER, mapToB2C } from \"./b2c-mapper.ts\";\nexport type {\n\tUserRiskLevel,\n\tUserVerdict,\n\tVerdictCard,\n\tVerdictLimits,\n\tVerdictNextAction,\n\tVerificationReceipt,\n} from \"./b2c-verdict.ts\";\nexport { B2C_VERDICT_SCHEMA_VERSION } from \"./b2c-verdict.ts\";\nexport type {\n\tDeepWallPhase,\n\tDeepWallResult,\n\tDeepWallRunnerEvidence,\n\tDeepWallRunnerFn,\n\tDeepWallRunnerResult,\n\tDeepWallStatus,\n\tDeepWallStubResult,\n\tRunDeepWallStubParams,\n} from \"./deep-wall.ts\";\nexport {\n\tDEEP_RUNNER_ERROR,\n\tDEEP_RUNNER_EVIDENCE_MISSING,\n\tDEEP_RUNNER_NOT_WIRED,\n\tDEEP_WALL_UNAVAILABLE,\n\tisDeepRunnerCompletionAllowed,\n\tresolveDeepWallPhaseFromEnv,\n\trunDeepWall,\n\trunDeepWallStub,\n} from \"./deep-wall.ts\";\nexport type {\n\tEvaluateCorrectnessWallParams,\n\tEvaluateCorrectnessWallResult,\n} from \"./evaluate-correctness-wall.ts\";\nexport { evaluateCorrectnessWall } from \"./evaluate-correctness-wall.ts\";\nexport type { InMemoryAdaptOrchFixture } from \"./in-memory-adaptorch.ts\";\nexport { createInMemoryAdaptOrchClient } from \"./in-memory-adaptorch.ts\";\nexport type { AdaptOrchCallToolFn, OaTransportMode } from \"./live-adaptorch-transport.ts\";\nexport { createLiveAdaptOrchClient, parseOaTransportModeFromEnv } from \"./live-adaptorch-transport.ts\";\nexport type { NextActionKind, VerdictDisposition } from \"./loop.ts\";\nexport {\n\tdecideNextTransition,\n\thandleAdjudicationFailure,\n\tprojectVerdictToDisposition,\n\trunAdjudicationWithTimeout,\n} from \"./loop.ts\";\nexport type {\n\tCreateMcpIntrospectionTransportOptions,\n\tMcpIntrospectionMode,\n} from \"./mcp-introspection-transport.ts\";\nexport { createMcpIntrospectionClient } from \"./mcp-introspection-transport.ts\";\nexport type { PolicyFlag } from \"./policy-wall.ts\";\nexport {\n\tPOLICY_FLAG,\n\tparseDiffPaths,\n\tpathMatchesApprovedScope,\n\trunFastWall,\n\tscanDiffLinesForSecrets,\n} from \"./policy-wall.ts\";\nexport type { SignedWallReceipt, SignWallReceiptInput, VerifyWallReceiptInput } from \"./receipt-signature.ts\";\nexport { signWallReceipt, verifyWallReceipt } from \"./receipt-signature.ts\";\nexport type { BuildRegeneratePacketInput, RegeneratePacket } from \"./regenerate-packet.ts\";\nexport { buildRegeneratePacket } from \"./regenerate-packet.ts\";\nexport type { RepairBudgetState } from \"./repair-budget.ts\";\nexport { capRepairHints, parseRepairBudget, shouldOfferRepair } from \"./repair-budget.ts\";\nexport type { RepairHintInput } from \"./repair-loop.ts\";\nexport { deriveRepairHints } from \"./repair-loop.ts\";\nexport type {\n\tVerificationDigest,\n\tVerificationDigestInput,\n\tWallReceiptMeta,\n} from \"./signed-receipt.ts\";\nexport { buildVerificationDigest } from \"./signed-receipt.ts\";\nexport { applyTransition, canTransition, isTerminalState, requiresHumanApproval } from \"./state-machine.ts\";\nexport type {\n\tCardinalityMode,\n\tDispatchRecord,\n\tLoopConfig,\n\tLoopTerminationCondition,\n\tTopologyClassification,\n\tTransitionLogEntry,\n\tWorkPacket,\n\tWorkPacketState,\n} from \"./types.ts\";\nexport { ADJUDICATIONS_DIR, LOOP_STATE_FILE, PACKET_INDEX_FILE, PACKETS_DIR, RUN_MAP_FILE } from \"./types.ts\";\nexport { CORRECTNESS_WALL_VERSION } from \"./wall-meta.ts\";\n"]}

package/dist/index.js

@@ -0,0 +1,28 @@
+/**
+ * Public entry point for `omk-adaptorch-wpl` (stable since 0.91.0).
+ *
+ * See README.md and `.omk/runs/adaptorch-native-loop-algorithm-20260701/final-part{1,2,3}-*.md`
+ * for the design this package implements. Ships as a runtime dependency of the
+ * `open-multi-agent-kit` CLI.
+ */
+export { AdaptOrchClient } from "./adaptorch-client.js";
+export { adjudicate } from "./adjudicator.js";
+export { ADJUDICATION_REASON_CODES, createVerifierRegistry, DEFAULT_VERIFIER, reduceReasonCodes, } from "./adjudicator-registry.js";
+export { BATCH1_NO_DOCKER_RUNNER, mapToB2C } from "./b2c-mapper.js";
+export { B2C_VERDICT_SCHEMA_VERSION } from "./b2c-verdict.js";
+export { DEEP_RUNNER_ERROR, DEEP_RUNNER_EVIDENCE_MISSING, DEEP_RUNNER_NOT_WIRED, DEEP_WALL_UNAVAILABLE, isDeepRunnerCompletionAllowed, resolveDeepWallPhaseFromEnv, runDeepWall, runDeepWallStub, } from "./deep-wall.js";
+export { evaluateCorrectnessWall } from "./evaluate-correctness-wall.js";
+export { createInMemoryAdaptOrchClient } from "./in-memory-adaptorch.js";
+export { createLiveAdaptOrchClient, parseOaTransportModeFromEnv } from "./live-adaptorch-transport.js";
+export { decideNextTransition, handleAdjudicationFailure, projectVerdictToDisposition, runAdjudicationWithTimeout, } from "./loop.js";
+export { createMcpIntrospectionClient } from "./mcp-introspection-transport.js";
+export { POLICY_FLAG, parseDiffPaths, pathMatchesApprovedScope, runFastWall, scanDiffLinesForSecrets, } from "./policy-wall.js";
+export { signWallReceipt, verifyWallReceipt } from "./receipt-signature.js";
+export { buildRegeneratePacket } from "./regenerate-packet.js";
+export { capRepairHints, parseRepairBudget, shouldOfferRepair } from "./repair-budget.js";
+export { deriveRepairHints } from "./repair-loop.js";
+export { buildVerificationDigest } from "./signed-receipt.js";
+export { applyTransition, canTransition, isTerminalState, requiresHumanApproval } from "./state-machine.js";
+export { ADJUDICATIONS_DIR, LOOP_STATE_FILE, PACKET_INDEX_FILE, PACKETS_DIR, RUN_MAP_FILE } from "./types.js";
+export { CORRECTNESS_WALL_VERSION } from "./wall-meta.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAO9C,OAAO,EACN,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AASpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAW9D,OAAO,EACN,iBAAiB,EACjB,4BAA4B,EAC5B,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,2BAA2B,EAC3B,WAAW,EACX,eAAe,GACf,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAEvG,OAAO,EACN,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,GAC1B,MAAM,WAAW,CAAC;AAKnB,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,EACN,WAAW,EACX,cAAc,EACd,wBAAwB,EACxB,WAAW,EACX,uBAAuB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAMrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAW5G,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["/**\n * Public entry point for `omk-adaptorch-wpl` (stable since 0.91.0).\n *\n * See README.md and `.omk/runs/adaptorch-native-loop-algorithm-20260701/final-part{1,2,3}-*.md`\n * for the design this package implements. Ships as a runtime dependency of the\n * `open-multi-agent-kit` CLI.\n */\n\nexport type { AdaptOrchTransport } from \"./adaptorch-client.ts\";\nexport { AdaptOrchClient } from \"./adaptorch-client.ts\";\nexport type { AdjudicationRequest, AdjudicationResult, PerRunVerdict } from \"./adjudicator.ts\";\nexport { adjudicate } from \"./adjudicator.ts\";\nexport type {\n\tAdjudicationReasonCode,\n\tCheckResult,\n\tVerdictState,\n\tVerifierRegistryEntry,\n} from \"./adjudicator-registry.ts\";\nexport {\n\tADJUDICATION_REASON_CODES,\n\tcreateVerifierRegistry,\n\tDEFAULT_VERIFIER,\n\treduceReasonCodes,\n} from \"./adjudicator-registry.ts\";\nexport type { MapToB2CInput, MapToB2COutput } from \"./b2c-mapper.ts\";\nexport { BATCH1_NO_DOCKER_RUNNER, mapToB2C } from \"./b2c-mapper.ts\";\nexport type {\n\tUserRiskLevel,\n\tUserVerdict,\n\tVerdictCard,\n\tVerdictLimits,\n\tVerdictNextAction,\n\tVerificationReceipt,\n} from \"./b2c-verdict.ts\";\nexport { B2C_VERDICT_SCHEMA_VERSION } from \"./b2c-verdict.ts\";\nexport type {\n\tDeepWallPhase,\n\tDeepWallResult,\n\tDeepWallRunnerEvidence,\n\tDeepWallRunnerFn,\n\tDeepWallRunnerResult,\n\tDeepWallStatus,\n\tDeepWallStubResult,\n\tRunDeepWallStubParams,\n} from \"./deep-wall.ts\";\nexport {\n\tDEEP_RUNNER_ERROR,\n\tDEEP_RUNNER_EVIDENCE_MISSING,\n\tDEEP_RUNNER_NOT_WIRED,\n\tDEEP_WALL_UNAVAILABLE,\n\tisDeepRunnerCompletionAllowed,\n\tresolveDeepWallPhaseFromEnv,\n\trunDeepWall,\n\trunDeepWallStub,\n} from \"./deep-wall.ts\";\nexport type {\n\tEvaluateCorrectnessWallParams,\n\tEvaluateCorrectnessWallResult,\n} from \"./evaluate-correctness-wall.ts\";\nexport { evaluateCorrectnessWall } from \"./evaluate-correctness-wall.ts\";\nexport type { InMemoryAdaptOrchFixture } from \"./in-memory-adaptorch.ts\";\nexport { createInMemoryAdaptOrchClient } from \"./in-memory-adaptorch.ts\";\nexport type { AdaptOrchCallToolFn, OaTransportMode } from \"./live-adaptorch-transport.ts\";\nexport { createLiveAdaptOrchClient, parseOaTransportModeFromEnv } from \"./live-adaptorch-transport.ts\";\nexport type { NextActionKind, VerdictDisposition } from \"./loop.ts\";\nexport {\n\tdecideNextTransition,\n\thandleAdjudicationFailure,\n\tprojectVerdictToDisposition,\n\trunAdjudicationWithTimeout,\n} from \"./loop.ts\";\nexport type {\n\tCreateMcpIntrospectionTransportOptions,\n\tMcpIntrospectionMode,\n} from \"./mcp-introspection-transport.ts\";\nexport { createMcpIntrospectionClient } from \"./mcp-introspection-transport.ts\";\nexport type { PolicyFlag } from \"./policy-wall.ts\";\nexport {\n\tPOLICY_FLAG,\n\tparseDiffPaths,\n\tpathMatchesApprovedScope,\n\trunFastWall,\n\tscanDiffLinesForSecrets,\n} from \"./policy-wall.ts\";\nexport type { SignedWallReceipt, SignWallReceiptInput, VerifyWallReceiptInput } from \"./receipt-signature.ts\";\nexport { signWallReceipt, verifyWallReceipt } from \"./receipt-signature.ts\";\nexport type { BuildRegeneratePacketInput, RegeneratePacket } from \"./regenerate-packet.ts\";\nexport { buildRegeneratePacket } from \"./regenerate-packet.ts\";\nexport type { RepairBudgetState } from \"./repair-budget.ts\";\nexport { capRepairHints, parseRepairBudget, shouldOfferRepair } from \"./repair-budget.ts\";\nexport type { RepairHintInput } from \"./repair-loop.ts\";\nexport { deriveRepairHints } from \"./repair-loop.ts\";\nexport type {\n\tVerificationDigest,\n\tVerificationDigestInput,\n\tWallReceiptMeta,\n} from \"./signed-receipt.ts\";\nexport { buildVerificationDigest } from \"./signed-receipt.ts\";\nexport { applyTransition, canTransition, isTerminalState, requiresHumanApproval } from \"./state-machine.ts\";\nexport type {\n\tCardinalityMode,\n\tDispatchRecord,\n\tLoopConfig,\n\tLoopTerminationCondition,\n\tTopologyClassification,\n\tTransitionLogEntry,\n\tWorkPacket,\n\tWorkPacketState,\n} from \"./types.ts\";\nexport { ADJUDICATIONS_DIR, LOOP_STATE_FILE, PACKET_INDEX_FILE, PACKETS_DIR, RUN_MAP_FILE } from \"./types.ts\";\nexport { CORRECTNESS_WALL_VERSION } from \"./wall-meta.ts\";\n"]}

package/dist/live-adaptorch-transport.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Live AdaptOrch MCP transport adapter (Wave 4) — inject session `callTool` at the boundary.
+ */
+import { AdaptOrchClient, type AdaptOrchTransport } from "./adaptorch-client.ts";
+export type AdaptOrchCallToolFn = AdaptOrchTransport["callTool"];
+/**
+ * Build an {@link AdaptOrchClient} that forwards introspection (and other) tools to MCP.
+ * Caller supplies `callTool` from an MCP SDK or harness; this package does not open network I/O.
+ */
+export declare function createLiveAdaptOrchClient(callTool: AdaptOrchCallToolFn): AdaptOrchClient;
+/** Env `OMK_WALL_OA_TRANSPORT`: fixture (default) | mcp | live (alias of mcp). */
+export type OaTransportMode = "fixture" | "mcp";
+export declare function parseOaTransportModeFromEnv(): OaTransportMode;
+//# sourceMappingURL=live-adaptorch-transport.d.ts.map

package/dist/live-adaptorch-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-adaptorch-transport.d.ts","sourceRoot":"","sources":["../src/live-adaptorch-transport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;AAEjE;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,eAAe,CAGxF;AAED,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,KAAK,CAAC;AAEhD,wBAAgB,2BAA2B,IAAI,eAAe,CAI7D","sourcesContent":["/**\n * Live AdaptOrch MCP transport adapter (Wave 4) — inject session `callTool` at the boundary.\n */\n\nimport { AdaptOrchClient, type AdaptOrchTransport } from \"./adaptorch-client.ts\";\n\nexport type AdaptOrchCallToolFn = AdaptOrchTransport[\"callTool\"];\n\n/**\n * Build an {@link AdaptOrchClient} that forwards introspection (and other) tools to MCP.\n * Caller supplies `callTool` from an MCP SDK or harness; this package does not open network I/O.\n */\nexport function createLiveAdaptOrchClient(callTool: AdaptOrchCallToolFn): AdaptOrchClient {\n\tconst transport: AdaptOrchTransport = { callTool };\n\treturn new AdaptOrchClient(transport);\n}\n\n/** Env `OMK_WALL_OA_TRANSPORT`: fixture (default) | mcp | live (alias of mcp). */\nexport type OaTransportMode = \"fixture\" | \"mcp\";\n\nexport function parseOaTransportModeFromEnv(): OaTransportMode {\n\tconst raw = process.env.OMK_WALL_OA_TRANSPORT?.trim().toLowerCase();\n\tif (raw === \"mcp\" || raw === \"live\") return \"mcp\";\n\treturn \"fixture\";\n}\n"]}

package/dist/live-adaptorch-transport.js

@@ -0,0 +1,19 @@
+/**
+ * Live AdaptOrch MCP transport adapter (Wave 4) — inject session `callTool` at the boundary.
+ */
+import { AdaptOrchClient } from "./adaptorch-client.js";
+/**
+ * Build an {@link AdaptOrchClient} that forwards introspection (and other) tools to MCP.
+ * Caller supplies `callTool` from an MCP SDK or harness; this package does not open network I/O.
+ */
+export function createLiveAdaptOrchClient(callTool) {
+    const transport = { callTool };
+    return new AdaptOrchClient(transport);
+}
+export function parseOaTransportModeFromEnv() {
+    const raw = process.env.OMK_WALL_OA_TRANSPORT?.trim().toLowerCase();
+    if (raw === "mcp" || raw === "live")
+        return "mcp";
+    return "fixture";
+}
+//# sourceMappingURL=live-adaptorch-transport.js.map

package/dist/live-adaptorch-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-adaptorch-transport.js","sourceRoot":"","sources":["../src/live-adaptorch-transport.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAA2B,MAAM,uBAAuB,CAAC;AAIjF;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAA6B,EAAmB;IACzF,MAAM,SAAS,GAAuB,EAAE,QAAQ,EAAE,CAAC;IACnD,OAAO,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;AAAA,CACtC;AAKD,MAAM,UAAU,2BAA2B,GAAoB;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpE,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,SAAS,CAAC;AAAA,CACjB","sourcesContent":["/**\n * Live AdaptOrch MCP transport adapter (Wave 4) — inject session `callTool` at the boundary.\n */\n\nimport { AdaptOrchClient, type AdaptOrchTransport } from \"./adaptorch-client.ts\";\n\nexport type AdaptOrchCallToolFn = AdaptOrchTransport[\"callTool\"];\n\n/**\n * Build an {@link AdaptOrchClient} that forwards introspection (and other) tools to MCP.\n * Caller supplies `callTool` from an MCP SDK or harness; this package does not open network I/O.\n */\nexport function createLiveAdaptOrchClient(callTool: AdaptOrchCallToolFn): AdaptOrchClient {\n\tconst transport: AdaptOrchTransport = { callTool };\n\treturn new AdaptOrchClient(transport);\n}\n\n/** Env `OMK_WALL_OA_TRANSPORT`: fixture (default) | mcp | live (alias of mcp). */\nexport type OaTransportMode = \"fixture\" | \"mcp\";\n\nexport function parseOaTransportModeFromEnv(): OaTransportMode {\n\tconst raw = process.env.OMK_WALL_OA_TRANSPORT?.trim().toLowerCase();\n\tif (raw === \"mcp\" || raw === \"live\") return \"mcp\";\n\treturn \"fixture\";\n}\n"]}

package/dist/loop.d.ts

@@ -0,0 +1,149 @@
+/**
+ * Verdict-to-disposition integration layer (Part 3, `final-part3-integration.md`).
+ *
+ * This file implements exactly the bridge Part 3 defines between Part 1 (core algorithm,
+ * `final-part1-core-algorithm.md`) and Part 2 (verification layer,
+ * `final-part2-verification-layer.md`): projecting Part 2's five-state record-level
+ * `AdjudicationResult.verdict` onto Part 1's packet disposition vocabulary, and the two
+ * distinct failure-handling paths (`VERIFIER-ERROR` vs. `ADJUDICATION_FAILED`) Part 3's
+ * "VERIFIER-ERROR vs. ADJUDICATION_FAILED" section keeps separate.
+ *
+ * What is implemented here (Part 3 §1, §2 note, §3 note):
+ *  - {@link projectVerdictToDisposition} - Part 3 §1's mapping table from a *returned*
+ *    `AdjudicationResult` to a `{ targetState, nextActionKind }` disposition.
+ *  - {@link runAdjudicationWithTimeout} - the timeout/try-catch wrapper around `adjudicate()`
+ *    itself (Part 1 §2 state 9 / Part 3's "ADJUDICATION_FAILED" trigger condition), so a hung
+ *    or throwing `adjudicate()` call never escapes uncaught and never produces a verdict to
+ *    project in the first place.
+ *  - {@link decideNextTransition} - the `DECLINED -> {RETRY_QUEUED | CLOSED | ESCALATED}`
+ *    branch (Part 1 §2/§4, Part 3 §1), keyed on the per-packet attempt budget.
+ *  - {@link handleAdjudicationFailure} - the `ADJUDICATION_FAILED -> {UNDER_REVIEW |
+ *    ESCALATED}` branch (Part 1 §2 state 9), keyed on a *separate* bounded adjudication-call
+ *    retry counter, never the packet's attempt/dispatch budget.
+ *
+ * What is explicitly out of scope for this file, per the design docs' own module boundaries
+ * (Part 1's introduction puts the integration boundary itself out of its scope; Part 3 §2
+ * assigns request assembly to the core-algorithm/loop side as an already-specified
+ * responsibility distinct from this projection):
+ *  - The end-to-end AdaptOrch dispatch loop: `DRAFTED -> ROUTED -> AWAITING_APPROVAL ->
+ *    DISPATCHED -> ACTIVE`, topology routing, actual `adaptorch_run` submission, and polling
+ *    via `adaptorch_get_run`/reconciliation sweeps.
+ *  - Assembling an `AdjudicationRequest` from a Work Packet's `dispatch_records[]` (Part 3
+ *    §2's "one minor shape note") - callers of {@link runAdjudicationWithTimeout} supply an
+ *    already-built `AdjudicationRequest`.
+ *  - The on-disk persistence layer (`packet_index.json`, `run_map.json`, `loop_state.json`,
+ *    the `adjudications/` archive, Part 1 §7) - the functions here are pure/async-pure and
+ *    return decisions; they do not read or write any of those files themselves.
+ */
+import type { AdaptOrchClient } from "./adaptorch-client.ts";
+import type { AdjudicationRequest, AdjudicationResult } from "./adjudicator.ts";
+import type { VerifierRegistryEntry } from "./adjudicator-registry.ts";
+import type { WorkPacket, WorkPacketState } from "./types.ts";
+/**
+ * Part 1 §6's `next_action` vocabulary, restricted to the values Part 3 §1's projection
+ * table actually produces (`'none'` covers the `CONFIRMED` row, which carries no
+ * `next_action` of its own).
+ */
+export type NextActionKind = "retry_same_topology" | "reroute" | "escalate" | "none";
+/**
+ * The projected disposition for a single record-level `AdjudicationResult` (Part 3 §1):
+ * the Part 1 §2 state the packet should move towards, and which further-attempt behavior
+ * (if any) that implies.
+ */
+export interface VerdictDisposition {
+    targetState: WorkPacketState;
+    nextActionKind: NextActionKind;
+}
+/**
+ * Projects a Part 2 record-level {@link AdjudicationResult} onto a Part 1 packet
+ * disposition, per Part 3 §1's mapping table exactly:
+ *
+ * | verdict | condition | targetState | nextActionKind |
+ * |---|---|---|---|
+ * | `CONFIRMED` | - | `CONFIRMED` | `none` |
+ * | `CORROBORATED-FAILURE` | - | `DECLINED` | `retry_same_topology` |
+ * | `CONTRADICTED` | `reason_code` = `SCOPE_VIOLATION` | `DECLINED` | `escalate` |
+ * | `CONTRADICTED` | `reason_code` ∈ {`SCHEMA_DRIFT`, `CONTENT_CHECK_FAILED`} AND `packet.retry_count >= 1` | `DECLINED` | `reroute` |
+ * | `CONTRADICTED` | any other `reason_code` | `DECLINED` | `retry_same_topology` |
+ * | `INDETERMINATE` | - | `DECLINED` | `escalate` |
+ * | `VERIFIER-ERROR` | - | `DECLINED` | `escalate` |
+ *
+ * Branching is driven exclusively by the structured `reason_code`
+ * ({@link CONTRADICTED_DISPOSITION_CLASS}); the free-text `reason` is never inspected, so
+ * incidental wording in a check's human-readable explanation (e.g. "scoped variable")
+ * can neither trigger a false escalation nor mask a real one.
+ *
+ * `VERIFIER-ERROR` vs. `ADJUDICATION_FAILED` (Part 3's dedicated section, restated here
+ * because callers of this function must not conflate the two): `VERIFIER-ERROR` is a verdict
+ * the OA *returned normally* - `adjudicate()` completed, produced a full
+ * {@link AdjudicationResult}, and that result's own content says the OA's checks could not be
+ * trusted for this record. This function only ever runs on such a completed result, so it
+ * only ever needs to route `VERIFIER-ERROR` to `escalate` - never to a retry, and never
+ * through `ADJUDICATION_FAILED`. `ADJUDICATION_FAILED` (Part 1 §2 state 9), by contrast, is
+ * not a verdict at all: it is what happens when `adjudicate()` itself throws or times out and
+ * *never returns a verdict in the first place* - there is no `AdjudicationResult` for this
+ * function to project, because the mapping's input does not exist. That case is handled
+ * separately by {@link runAdjudicationWithTimeout} (detecting the failure) and
+ * {@link handleAdjudicationFailure} (deciding the packet's next state), never by this
+ * function.
+ *
+ * Declared `async` for interface consistency with the rest of the verdict-handling pipeline
+ * (all of whose other entry points are asynchronous); the projection logic itself is pure and
+ * synchronous.
+ */
+export declare function projectVerdictToDisposition(result: AdjudicationResult, packet: WorkPacket): Promise<VerdictDisposition>;
+/**
+ * Runs `adjudicate()` under both a timeout and a try/catch, per Part 1 §2 state 9 / Part 3's
+ * "ADJUDICATION_FAILED" trigger condition. Returns `{ ok: true, result }` when `adjudicate()`
+ * returns a verdict within `timeoutMs`; returns `{ ok: false, error }` if it throws, rejects,
+ * or does not settle before the timeout - this is the ADJUDICATION_FAILED condition, and the
+ * only way this function reports failure. It never lets a hung or throwing `adjudicate()`
+ * call escape uncaught.
+ *
+ * Note the distinction from {@link projectVerdictToDisposition}'s `VERIFIER-ERROR` handling:
+ * a `VERIFIER-ERROR` result here still comes back as `{ ok: true, result }` (a verdict was
+ * produced), and must be routed through `projectVerdictToDisposition`, not through
+ * {@link handleAdjudicationFailure}.
+ */
+export declare function runAdjudicationWithTimeout(request: AdjudicationRequest, client: AdaptOrchClient, registry: {
+    get(kind: string): VerifierRegistryEntry;
+}, timeoutMs: number): Promise<{
+    ok: true;
+    result: AdjudicationResult;
+} | {
+    ok: false;
+    error: string;
+}>;
+/**
+ * Decides the packet's next state given an already-projected {@link VerdictDisposition}
+ * (Part 1 §2/§4, Part 3 §1's `DECLINED -> {RETRY_QUEUED | CLOSED | ESCALATED}` branch). Pure
+ * and side-effect free; does not itself call {@link applyTransition} from
+ * `state-machine.ts` - callers apply the returned state via that function.
+ *
+ * - `nextActionKind === 'escalate'` always wins, regardless of remaining budget (Part 3 §1:
+ *   escalation "takes priority over the attempt-budget check below, regardless of whether
+ *   budget remains").
+ * - `targetState === 'CONFIRMED'` returns `'CONFIRMED'` directly; the caller is responsible
+ *   for the separate `CONFIRMED -> CLOSED` transition (Part 1's success-close path), which is
+ *   not this function's concern.
+ * - Otherwise (`retry_same_topology` or `reroute`), the per-packet attempt budget (Part 1 §4)
+ *   decides between `RETRY_QUEUED` (budget remains) and `CLOSED` (budget exhausted -
+ *   abandoned).
+ */
+export declare function decideNextTransition(packet: WorkPacket, disposition: VerdictDisposition): WorkPacketState;
+/**
+ * Decides the packet's next state after an `ADJUDICATION_FAILED` outcome (Part 1 §2 state 9;
+ * see {@link runAdjudicationWithTimeout} for how that outcome is detected). This is the
+ * *other* failure surface from `VERIFIER-ERROR` - there is no `AdjudicationResult` here, so
+ * this function is never fed through {@link projectVerdictToDisposition} or
+ * {@link decideNextTransition}.
+ *
+ * `adjudicationCallAttempts` / `maxAdjudicationCallAttempts` track a bounded counter for
+ * retrying the `adjudicate()` *call itself* - distinct from, and never conflated with, the
+ * packet's `retry_count` / `attempt_budget.max_dispatch_attempts` (Part 1 §7 notes this as a
+ * separate persisted field, `adjudication_retry_count`, for exactly this purpose). Returns
+ * `'UNDER_REVIEW'` (retry the call, against the already-pulled evidence) while the counter has
+ * not been exhausted, else `'ESCALATED'` once it has.
+ */
+export declare function handleAdjudicationFailure(packet: WorkPacket, adjudicationCallAttempts: number, maxAdjudicationCallAttempts: number): WorkPacketState;
+//# sourceMappingURL=loop.d.ts.map

package/dist/loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../src/loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,KAAK,EAA0B,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAuC9D;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAErF;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAClC,WAAW,EAAE,eAAe,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,2BAA2B,CAChD,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,UAAU,GAChB,OAAO,CAAC,kBAAkB,CAAC,CAwC7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,0BAA0B,CAC/C,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE;IAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAAA;CAAE,EACtD,SAAS,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBlF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,GAAG,eAAe,CAUzG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,UAAU,EAClB,wBAAwB,EAAE,MAAM,EAChC,2BAA2B,EAAE,MAAM,GACjC,eAAe,CAGjB","sourcesContent":["/**\n * Verdict-to-disposition integration layer (Part 3, `final-part3-integration.md`).\n *\n * This file implements exactly the bridge Part 3 defines between Part 1 (core algorithm,\n * `final-part1-core-algorithm.md`) and Part 2 (verification layer,\n * `final-part2-verification-layer.md`): projecting Part 2's five-state record-level\n * `AdjudicationResult.verdict` onto Part 1's packet disposition vocabulary, and the two\n * distinct failure-handling paths (`VERIFIER-ERROR` vs. `ADJUDICATION_FAILED`) Part 3's\n * \"VERIFIER-ERROR vs. ADJUDICATION_FAILED\" section keeps separate.\n *\n * What is implemented here (Part 3 §1, §2 note, §3 note):\n *  - {@link projectVerdictToDisposition} - Part 3 §1's mapping table from a *returned*\n *    `AdjudicationResult` to a `{ targetState, nextActionKind }` disposition.\n *  - {@link runAdjudicationWithTimeout} - the timeout/try-catch wrapper around `adjudicate()`\n *    itself (Part 1 §2 state 9 / Part 3's \"ADJUDICATION_FAILED\" trigger condition), so a hung\n *    or throwing `adjudicate()` call never escapes uncaught and never produces a verdict to\n *    project in the first place.\n *  - {@link decideNextTransition} - the `DECLINED -> {RETRY_QUEUED | CLOSED | ESCALATED}`\n *    branch (Part 1 §2/§4, Part 3 §1), keyed on the per-packet attempt budget.\n *  - {@link handleAdjudicationFailure} - the `ADJUDICATION_FAILED -> {UNDER_REVIEW |\n *    ESCALATED}` branch (Part 1 §2 state 9), keyed on a *separate* bounded adjudication-call\n *    retry counter, never the packet's attempt/dispatch budget.\n *\n * What is explicitly out of scope for this file, per the design docs' own module boundaries\n * (Part 1's introduction puts the integration boundary itself out of its scope; Part 3 §2\n * assigns request assembly to the core-algorithm/loop side as an already-specified\n * responsibility distinct from this projection):\n *  - The end-to-end AdaptOrch dispatch loop: `DRAFTED -> ROUTED -> AWAITING_APPROVAL ->\n *    DISPATCHED -> ACTIVE`, topology routing, actual `adaptorch_run` submission, and polling\n *    via `adaptorch_get_run`/reconciliation sweeps.\n *  - Assembling an `AdjudicationRequest` from a Work Packet's `dispatch_records[]` (Part 3\n *    §2's \"one minor shape note\") - callers of {@link runAdjudicationWithTimeout} supply an\n *    already-built `AdjudicationRequest`.\n *  - The on-disk persistence layer (`packet_index.json`, `run_map.json`, `loop_state.json`,\n *    the `adjudications/` archive, Part 1 §7) - the functions here are pure/async-pure and\n *    return decisions; they do not read or write any of those files themselves.\n */\n\nimport type { AdaptOrchClient } from \"./adaptorch-client.ts\";\nimport type { AdjudicationRequest, AdjudicationResult } from \"./adjudicator.ts\";\nimport { adjudicate } from \"./adjudicator.ts\";\nimport type { AdjudicationReasonCode, VerifierRegistryEntry } from \"./adjudicator-registry.ts\";\nimport type { WorkPacket, WorkPacketState } from \"./types.ts\";\n\n/**\n * How a `CONTRADICTED` verdict with a given reason code is dispositioned (Part 3 §1's\n * three CONTRADICTED rows). Kept as a named class so {@link CONTRADICTED_DISPOSITION_CLASS}\n * stays a *total* mapping over {@link AdjudicationReasonCode}.\n */\ntype ContradictedDispositionClass = \"escalate\" | \"reroute_on_recurrence\" | \"retry_same_topology\";\n\n/**\n * Total mapping from every {@link AdjudicationReasonCode} to its CONTRADICTED disposition\n * class. Totality is compile-time enforced: adding a new reason code without classifying\n * it here is a type error, so a new code can never silently fall into an unintended\n * disposition. Codes that cannot in practice accompany a `CONTRADICTED` verdict (e.g.\n * `ALL_CHECKS_PASSED`, `RUN_NOT_TERMINAL`) still need a row; they take the conservative\n * default (`retry_same_topology`).\n */\nconst CONTRADICTED_DISPOSITION_CLASS: Record<AdjudicationReasonCode, ContradictedDispositionClass> = {\n\t// Part 3 §1: a scope violation is a safety signal that must never silently auto-retry.\n\tSCOPE_VIOLATION: \"escalate\",\n\t// Part 3 §1: recurring schema/shape drift means the topology/plan template itself may be\n\t// structurally wrong for the payload - reroute instead of retrying the same topology.\n\tSCHEMA_DRIFT: \"reroute_on_recurrence\",\n\tCONTENT_CHECK_FAILED: \"reroute_on_recurrence\",\n\t// Default CONTRADICTED row: same-topology retry (subject to the attempt budget).\n\tNO_EVIDENCE_ON_SUCCESS: \"retry_same_topology\",\n\tEMPTY_ARTIFACT_CONTENT: \"retry_same_topology\",\n\tTRACE_CHECK_FAILED: \"retry_same_topology\",\n\tTRACE_ERROR_SPAN: \"retry_same_topology\",\n\tMIN_ACTIONS_UNMET: \"retry_same_topology\",\n\tRUN_STATUS_UNPARSEABLE: \"retry_same_topology\",\n\tRUN_FETCH_FAILED: \"retry_same_topology\",\n\tMALFORMED_REQUEST: \"retry_same_topology\",\n\tRUN_NOT_TERMINAL: \"retry_same_topology\",\n\tEVIDENCE_EMPTY: \"retry_same_topology\",\n\tFAILURE_REPORTED: \"retry_same_topology\",\n\tALL_CHECKS_PASSED: \"retry_same_topology\",\n};\n\n/**\n * Part 1 §6's `next_action` vocabulary, restricted to the values Part 3 §1's projection\n * table actually produces (`'none'` covers the `CONFIRMED` row, which carries no\n * `next_action` of its own).\n */\nexport type NextActionKind = \"retry_same_topology\" | \"reroute\" | \"escalate\" | \"none\";\n\n/**\n * The projected disposition for a single record-level `AdjudicationResult` (Part 3 §1):\n * the Part 1 §2 state the packet should move towards, and which further-attempt behavior\n * (if any) that implies.\n */\nexport interface VerdictDisposition {\n\ttargetState: WorkPacketState;\n\tnextActionKind: NextActionKind;\n}\n\n/**\n * Projects a Part 2 record-level {@link AdjudicationResult} onto a Part 1 packet\n * disposition, per Part 3 §1's mapping table exactly:\n *\n * | verdict | condition | targetState | nextActionKind |\n * |---|---|---|---|\n * | `CONFIRMED` | - | `CONFIRMED` | `none` |\n * | `CORROBORATED-FAILURE` | - | `DECLINED` | `retry_same_topology` |\n * | `CONTRADICTED` | `reason_code` = `SCOPE_VIOLATION` | `DECLINED` | `escalate` |\n * | `CONTRADICTED` | `reason_code` ∈ {`SCHEMA_DRIFT`, `CONTENT_CHECK_FAILED`} AND `packet.retry_count >= 1` | `DECLINED` | `reroute` |\n * | `CONTRADICTED` | any other `reason_code` | `DECLINED` | `retry_same_topology` |\n * | `INDETERMINATE` | - | `DECLINED` | `escalate` |\n * | `VERIFIER-ERROR` | - | `DECLINED` | `escalate` |\n *\n * Branching is driven exclusively by the structured `reason_code`\n * ({@link CONTRADICTED_DISPOSITION_CLASS}); the free-text `reason` is never inspected, so\n * incidental wording in a check's human-readable explanation (e.g. \"scoped variable\")\n * can neither trigger a false escalation nor mask a real one.\n *\n * `VERIFIER-ERROR` vs. `ADJUDICATION_FAILED` (Part 3's dedicated section, restated here\n * because callers of this function must not conflate the two): `VERIFIER-ERROR` is a verdict\n * the OA *returned normally* - `adjudicate()` completed, produced a full\n * {@link AdjudicationResult}, and that result's own content says the OA's checks could not be\n * trusted for this record. This function only ever runs on such a completed result, so it\n * only ever needs to route `VERIFIER-ERROR` to `escalate` - never to a retry, and never\n * through `ADJUDICATION_FAILED`. `ADJUDICATION_FAILED` (Part 1 §2 state 9), by contrast, is\n * not a verdict at all: it is what happens when `adjudicate()` itself throws or times out and\n * *never returns a verdict in the first place* - there is no `AdjudicationResult` for this\n * function to project, because the mapping's input does not exist. That case is handled\n * separately by {@link runAdjudicationWithTimeout} (detecting the failure) and\n * {@link handleAdjudicationFailure} (deciding the packet's next state), never by this\n * function.\n *\n * Declared `async` for interface consistency with the rest of the verdict-handling pipeline\n * (all of whose other entry points are asynchronous); the projection logic itself is pure and\n * synchronous.\n */\nexport async function projectVerdictToDisposition(\n\tresult: AdjudicationResult,\n\tpacket: WorkPacket,\n): Promise<VerdictDisposition> {\n\tswitch (result.verdict) {\n\t\tcase \"CONFIRMED\":\n\t\t\treturn { targetState: \"CONFIRMED\", nextActionKind: \"none\" };\n\n\t\tcase \"CORROBORATED-FAILURE\":\n\t\t\treturn { targetState: \"DECLINED\", nextActionKind: \"retry_same_topology\" };\n\n\t\tcase \"CONTRADICTED\": {\n\t\t\tconst dispositionClass = CONTRADICTED_DISPOSITION_CLASS[result.reason_code];\n\t\t\tswitch (dispositionClass) {\n\t\t\t\tcase \"escalate\":\n\t\t\t\t\treturn { targetState: \"DECLINED\", nextActionKind: \"escalate\" };\n\t\t\t\tcase \"reroute_on_recurrence\":\n\t\t\t\t\t// \"Recurring\" is approximated as \"this packet has already had at least\n\t\t\t\t\t// one prior dispatch attempt\" (packet.retry_count >= 1), per Part 3 §1's\n\t\t\t\t\t// \"recurring across >= 2 attempts for this packet\" condition. A first\n\t\t\t\t\t// occurrence still takes the default same-topology retry.\n\t\t\t\t\tif (packet.retry_count >= 1) {\n\t\t\t\t\t\treturn { targetState: \"DECLINED\", nextActionKind: \"reroute\" };\n\t\t\t\t\t}\n\t\t\t\t\treturn { targetState: \"DECLINED\", nextActionKind: \"retry_same_topology\" };\n\t\t\t\tcase \"retry_same_topology\":\n\t\t\t\t\treturn { targetState: \"DECLINED\", nextActionKind: \"retry_same_topology\" };\n\t\t\t\tdefault: {\n\t\t\t\t\tconst exhaustive: never = dispositionClass;\n\t\t\t\t\tthrow new Error(`unhandled CONTRADICTED disposition class: ${String(exhaustive)}`);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tcase \"INDETERMINATE\":\n\t\t\treturn { targetState: \"DECLINED\", nextActionKind: \"escalate\" };\n\n\t\tcase \"VERIFIER-ERROR\":\n\t\t\t// Hard rule, not a default: VERIFIER-ERROR must never be\n\t\t\t// retry_same_topology or reroute. See the VERIFIER-ERROR vs.\n\t\t\t// ADJUDICATION_FAILED discussion above.\n\t\t\treturn { targetState: \"DECLINED\", nextActionKind: \"escalate\" };\n\t}\n}\n\n/**\n * Runs `adjudicate()` under both a timeout and a try/catch, per Part 1 §2 state 9 / Part 3's\n * \"ADJUDICATION_FAILED\" trigger condition. Returns `{ ok: true, result }` when `adjudicate()`\n * returns a verdict within `timeoutMs`; returns `{ ok: false, error }` if it throws, rejects,\n * or does not settle before the timeout - this is the ADJUDICATION_FAILED condition, and the\n * only way this function reports failure. It never lets a hung or throwing `adjudicate()`\n * call escape uncaught.\n *\n * Note the distinction from {@link projectVerdictToDisposition}'s `VERIFIER-ERROR` handling:\n * a `VERIFIER-ERROR` result here still comes back as `{ ok: true, result }` (a verdict was\n * produced), and must be routed through `projectVerdictToDisposition`, not through\n * {@link handleAdjudicationFailure}.\n */\nexport async function runAdjudicationWithTimeout(\n\trequest: AdjudicationRequest,\n\tclient: AdaptOrchClient,\n\tregistry: { get(kind: string): VerifierRegistryEntry },\n\ttimeoutMs: number,\n): Promise<{ ok: true; result: AdjudicationResult } | { ok: false; error: string }> {\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\ttry {\n\t\tconst result = await Promise.race([\n\t\t\tadjudicate(request, client, registry),\n\t\t\tnew Promise<never>((_resolve, reject) => {\n\t\t\t\ttimer = setTimeout(() => {\n\t\t\t\t\treject(new Error(`adjudicate() call timed out after ${timeoutMs}ms`));\n\t\t\t\t}, timeoutMs);\n\t\t\t}),\n\t\t]);\n\t\treturn { ok: true, result };\n\t} catch (error) {\n\t\treturn { ok: false, error: error instanceof Error ? error.message : String(error) };\n\t} finally {\n\t\tif (timer !== undefined) clearTimeout(timer);\n\t}\n}\n\n/**\n * Decides the packet's next state given an already-projected {@link VerdictDisposition}\n * (Part 1 §2/§4, Part 3 §1's `DECLINED -> {RETRY_QUEUED | CLOSED | ESCALATED}` branch). Pure\n * and side-effect free; does not itself call {@link applyTransition} from\n * `state-machine.ts` - callers apply the returned state via that function.\n *\n * - `nextActionKind === 'escalate'` always wins, regardless of remaining budget (Part 3 §1:\n *   escalation \"takes priority over the attempt-budget check below, regardless of whether\n *   budget remains\").\n * - `targetState === 'CONFIRMED'` returns `'CONFIRMED'` directly; the caller is responsible\n *   for the separate `CONFIRMED -> CLOSED` transition (Part 1's success-close path), which is\n *   not this function's concern.\n * - Otherwise (`retry_same_topology` or `reroute`), the per-packet attempt budget (Part 1 §4)\n *   decides between `RETRY_QUEUED` (budget remains) and `CLOSED` (budget exhausted -\n *   abandoned).\n */\nexport function decideNextTransition(packet: WorkPacket, disposition: VerdictDisposition): WorkPacketState {\n\tif (disposition.nextActionKind === \"escalate\") {\n\t\treturn \"ESCALATED\";\n\t}\n\n\tif (disposition.targetState === \"CONFIRMED\") {\n\t\treturn \"CONFIRMED\";\n\t}\n\n\treturn packet.retry_count < packet.attempt_budget.max_dispatch_attempts ? \"RETRY_QUEUED\" : \"CLOSED\";\n}\n\n/**\n * Decides the packet's next state after an `ADJUDICATION_FAILED` outcome (Part 1 §2 state 9;\n * see {@link runAdjudicationWithTimeout} for how that outcome is detected). This is the\n * *other* failure surface from `VERIFIER-ERROR` - there is no `AdjudicationResult` here, so\n * this function is never fed through {@link projectVerdictToDisposition} or\n * {@link decideNextTransition}.\n *\n * `adjudicationCallAttempts` / `maxAdjudicationCallAttempts` track a bounded counter for\n * retrying the `adjudicate()` *call itself* - distinct from, and never conflated with, the\n * packet's `retry_count` / `attempt_budget.max_dispatch_attempts` (Part 1 §7 notes this as a\n * separate persisted field, `adjudication_retry_count`, for exactly this purpose). Returns\n * `'UNDER_REVIEW'` (retry the call, against the already-pulled evidence) while the counter has\n * not been exhausted, else `'ESCALATED'` once it has.\n */\nexport function handleAdjudicationFailure(\n\tpacket: WorkPacket,\n\tadjudicationCallAttempts: number,\n\tmaxAdjudicationCallAttempts: number,\n): WorkPacketState {\n\tvoid packet;\n\treturn adjudicationCallAttempts < maxAdjudicationCallAttempts ? \"UNDER_REVIEW\" : \"ESCALATED\";\n}\n"]}