open-multi-agent-kit 0.80.7 → 0.90.0

package/dist/core/loadout-policy-bridge.js

@@ -0,0 +1,52 @@
+/**
+ * Bridge from runtime loadout state into the AgentSession access policy shape.
+ *
+ * This wrapper keeps policy creation fail-closed for blocker-bearing states and
+ * exposes a lightweight integrity check for SDK/domain-dispatch integration.
+ */
+import { buildLoadoutAccessPolicy } from "./loadout-runtime.js";
+export function createLoadoutPolicyFromRuntimeState(state, options) {
+    if (state.blockers.length > 0) {
+        throw new Error(`cannot create loadout access policy with blockers: ${state.blockers.join("; ")}`);
+    }
+    return buildLoadoutAccessPolicy(state, {
+        cwd: options.cwd,
+        blockedPaths: options.blockedPaths,
+        commands: options.commands,
+    });
+}
+export function validatePolicyIntegrity(policy, state) {
+    const warnings = [];
+    if (!sameStringSet(policy.activeTools, state.activeTools)) {
+        warnings.push("policy active tools do not match runtime active tools");
+    }
+    const expectedReadRoots = countPathRoots(state.schedulerFields.readSet);
+    const expectedWriteRoots = countPathRoots(state.schedulerFields.writeSet);
+    if (policy.readRoots.length !== expectedReadRoots) {
+        warnings.push("policy read roots do not match runtime scheduler read set");
+    }
+    if (policy.writeRoots.length !== expectedWriteRoots) {
+        warnings.push("policy write roots do not match runtime scheduler write set");
+    }
+    return { valid: warnings.length === 0, warnings };
+}
+function countPathRoots(entries) {
+    return entries.filter((entry) => entry.symbols === undefined || entry.symbols.length === 0).length;
+}
+function sameStringSet(left, right) {
+    const normalizedLeft = uniqueSorted(left);
+    const normalizedRight = uniqueSorted(right);
+    if (normalizedLeft.length !== normalizedRight.length)
+        return false;
+    return normalizedLeft.every((value, index) => value === normalizedRight[index]);
+}
+function uniqueSorted(values) {
+    return [...new Set(values)].sort((a, b) => {
+        if (a < b)
+            return -1;
+        if (a > b)
+            return 1;
+        return 0;
+    });
+}
+//# sourceMappingURL=loadout-policy-bridge.js.map

package/dist/core/loadout-policy-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-policy-bridge.js","sourceRoot":"","sources":["../../src/core/loadout-policy-bridge.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,wBAAwB,EAA4B,MAAM,sBAAsB,CAAC;AAe1F,MAAM,UAAU,mCAAmC,CAClD,KAA0B,EAC1B,OAA4B,EACN;IACtB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,wBAAwB,CAAC,KAAK,EAAE;QACtC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,uBAAuB,CACtC,MAA2B,EAC3B,KAA0B,EACF;IACxB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,iBAAiB,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AAAA,CAClD;AAED,SAAS,cAAc,CAAC,OAAmF,EAAU;IACpH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAAA,CACnG;AAED,SAAS,aAAa,CAAC,IAAuB,EAAE,KAAwB,EAAW;IAClF,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,cAAc,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAChF;AAED,SAAS,YAAY,CAAC,MAAyB,EAAY;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QACpB,OAAO,CAAC,CAAC;IAAA,CACT,CAAC,CAAC;AAAA,CACH","sourcesContent":["/**\n * Bridge from runtime loadout state into the AgentSession access policy shape.\n *\n * This wrapper keeps policy creation fail-closed for blocker-bearing states and\n * exposes a lightweight integrity check for SDK/domain-dispatch integration.\n */\n\nimport type { LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport { buildLoadoutAccessPolicy, type LoadoutRuntimeState } from \"./loadout-runtime.ts\";\nimport type { LoadoutCommands } from \"./loadouts.ts\";\n\nexport interface PolicyBridgeOptions {\n\treadonly cwd: string;\n\treadonly blockedPaths?: readonly string[];\n\treadonly commands?: LoadoutCommands;\n\treadonly additionalSecurityChecks?: boolean;\n}\n\nexport interface PolicyIntegrityResult {\n\treadonly valid: boolean;\n\treadonly warnings: readonly string[];\n}\n\nexport function createLoadoutPolicyFromRuntimeState(\n\tstate: LoadoutRuntimeState,\n\toptions: PolicyBridgeOptions,\n): LoadoutAccessPolicy {\n\tif (state.blockers.length > 0) {\n\t\tthrow new Error(`cannot create loadout access policy with blockers: ${state.blockers.join(\"; \")}`);\n\t}\n\treturn buildLoadoutAccessPolicy(state, {\n\t\tcwd: options.cwd,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport function validatePolicyIntegrity(\n\tpolicy: LoadoutAccessPolicy,\n\tstate: LoadoutRuntimeState,\n): PolicyIntegrityResult {\n\tconst warnings: string[] = [];\n\tif (!sameStringSet(policy.activeTools, state.activeTools)) {\n\t\twarnings.push(\"policy active tools do not match runtime active tools\");\n\t}\n\tconst expectedReadRoots = countPathRoots(state.schedulerFields.readSet);\n\tconst expectedWriteRoots = countPathRoots(state.schedulerFields.writeSet);\n\tif (policy.readRoots.length !== expectedReadRoots) {\n\t\twarnings.push(\"policy read roots do not match runtime scheduler read set\");\n\t}\n\tif (policy.writeRoots.length !== expectedWriteRoots) {\n\t\twarnings.push(\"policy write roots do not match runtime scheduler write set\");\n\t}\n\treturn { valid: warnings.length === 0, warnings };\n}\n\nfunction countPathRoots(entries: readonly { readonly path: string; readonly symbols?: readonly string[] }[]): number {\n\treturn entries.filter((entry) => entry.symbols === undefined || entry.symbols.length === 0).length;\n}\n\nfunction sameStringSet(left: readonly string[], right: readonly string[]): boolean {\n\tconst normalizedLeft = uniqueSorted(left);\n\tconst normalizedRight = uniqueSorted(right);\n\tif (normalizedLeft.length !== normalizedRight.length) return false;\n\treturn normalizedLeft.every((value, index) => value === normalizedRight[index]);\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)].sort((a, b) => {\n\t\tif (a < b) return -1;\n\t\tif (a > b) return 1;\n\t\treturn 0;\n\t});\n}\n"]}

package/dist/core/loadout-runtime.d.ts

@@ -54,13 +54,28 @@ export interface SubagentLaneGrant {
     authority: LoadoutAuthority;
     allowedPaths: string[];
     blockedPaths: string[];
+    tools: string[];
     skills: string[];
     mcp: string[];
     hooks: string[];
     commands: LoadoutCommands;
+    contextInheritance: LaneContextInheritanceMode;
+    spawnReceipt?: LaneSpawnReceipt;
+    evidenceGates: LaneEvidenceGate[];
+    dependsOn: string[];
+    acceptance: string[];
     evidenceOutput?: string;
     scheduler: SchedulerFields;
 }
+export type LaneContextInheritanceMode = "none" | "receipt" | "last-turn" | "bounded" | "full";
+export type LaneEvidenceGate = "plan-reread" | "automated-verification" | "manual-qa" | "adversarial-qa" | "cleanup";
+export interface LaneSpawnReceipt {
+    whyParallel: string;
+    whyNotLocal: string;
+    independence: string;
+    expectedReceiptShape: string;
+    maxInlineTokens: number;
+}
 export declare function buildCapabilityInventory(session: LoadoutRuntimeSession, resourceLoader: ResourceLoader, cwd: string, hookInventory: HookInventory): CapabilityInventory;
 export interface ApplyLoadoutToRuntimeRequest {
     profile: LoadoutProfile;
@@ -73,11 +88,18 @@ export declare function applyLoadoutToRuntime(session: LoadoutRuntimeSession, re
 export interface BuildSubagentLaneGrantOptions {
     allowedReadPaths?: readonly string[];
     allowedWritePaths?: readonly string[];
+    blockedPaths?: readonly string[];
     evidenceOutputPattern?: string;
     runId?: string;
     profile?: {
         commands?: LoadoutCommands;
     };
+    agentName?: string;
+    contextInheritance?: LaneContextInheritanceMode;
+    spawnReceipt?: LaneSpawnReceipt;
+    evidenceGates?: readonly LaneEvidenceGate[];
+    dependsOn?: readonly string[];
+    acceptance?: readonly string[];
 }
 export declare function buildSubagentLaneGrant(nodeId: string, role: LoadoutRole, task: string, applied: AppliedLoadout, schedulerFields: SchedulerFields, options?: BuildSubagentLaneGrantOptions): SubagentLaneGrant;
 export {};

package/dist/core/loadout-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loadout-runtime.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU,mBAAmB;IAC5B,qBAAqB,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,YAAY,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CASrB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,aAAa,GAC1B,mBAAmB,CA6DrB;AAED,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAkDrB;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CACzC;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,6BAAkC,GACzC,iBAAiB,CA4BnB","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: \"project\",\n\t\torigin: \"top-level\",\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.scriptPath ?? \"builtin\",\n\t\tscope: \"builtin\",\n\t\torigin: \"top-level\",\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = [\"**/.env*\", \"**/*secret*\", \"**/*key*\", \"**/.git/*\"];\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n"]}
+{"version":3,"file":"loadout-runtime.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU,mBAAmB;IAC5B,qBAAqB,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,YAAY,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CASrB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,kBAAkB,EAAE,0BAA0B,CAAC;IAC/C,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAE/F,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,wBAAwB,GAAG,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAErH,MAAM,WAAW,gBAAgB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,aAAa,GAC1B,mBAAmB,CAgErB;AAOD,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAkDrB;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,0BAA0B,CAAC;IAChD,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,6BAAkC,GACzC,iBAAiB,CAwCnB","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport path from \"node:path\";\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { sanitizeHookPolicy } from \"./hooks/index.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\ttools: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tcontextInheritance: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates: LaneEvidenceGate[];\n\tdependsOn: string[];\n\tacceptance: string[];\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport type LaneContextInheritanceMode = \"none\" | \"receipt\" | \"last-turn\" | \"bounded\" | \"full\";\n\nexport type LaneEvidenceGate = \"plan-reread\" | \"automated-verification\" | \"manual-qa\" | \"adversarial-qa\" | \"cleanup\";\n\nexport interface LaneSpawnReceipt {\n\twhyParallel: string;\n\twhyNotLocal: string;\n\tindependence: string;\n\texpectedReceiptShape: string;\n\tmaxInlineTokens: number;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: mcpInventoryScope(cwd, entry.source),\n\t\torigin: \"top-level\",\n\t\tpath: entry.source,\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.builtin ? \"builtin\" : \"project\",\n\t\tscope: descriptor.builtin ? \"builtin\" : \"project\",\n\t\torigin: \"top-level\",\n\t\tpath: descriptor.scriptPath,\n\t\tpolicy: sanitizeHookPolicy(descriptor.policy),\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nfunction mcpInventoryScope(cwd: string, sourcePath: string): \"project\" | \"user\" {\n\tconst relative = path.relative(cwd, sourcePath);\n\treturn relative !== \"\" && !relative.startsWith(\"..\") && !path.isAbsolute(relative) ? \"project\" : \"user\";\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tblockedPaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n\tagentName?: string;\n\tcontextInheritance?: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates?: readonly LaneEvidenceGate[];\n\tdependsOn?: readonly string[];\n\tacceptance?: readonly string[];\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = uniqueSorted([\n\t\t\"**/.env*\",\n\t\t\"**/*secret*\",\n\t\t\"**/*key*\",\n\t\t\"**/.git/*\",\n\t\t...(options.blockedPaths ?? []),\n\t]);\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: options.agentName ?? `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\ttools: applied.activeTools,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tcontextInheritance: options.contextInheritance ?? defaultContextInheritance(role),\n\t\t...(options.spawnReceipt ? { spawnReceipt: options.spawnReceipt } : {}),\n\t\tevidenceGates: uniqueSortedEvidenceGates(options.evidenceGates ?? []),\n\t\tdependsOn: uniqueSorted(options.dependsOn ?? []),\n\t\tacceptance: uniqueSorted(options.acceptance ?? []),\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction defaultContextInheritance(role: LoadoutRole): LaneContextInheritanceMode {\n\tswitch (role) {\n\t\tcase \"planner\":\n\t\tcase \"critic\":\n\t\tcase \"visual-qa\":\n\t\t\treturn \"receipt\";\n\t\tcase \"security\":\n\t\t\treturn \"none\";\n\t\tdefault:\n\t\t\treturn \"bounded\";\n\t}\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n\nfunction uniqueSortedEvidenceGates(values: readonly LaneEvidenceGate[]): LaneEvidenceGate[] {\n\treturn [...new Set(values)].sort();\n}\n"]}

package/dist/core/loadout-runtime.js

@@ -5,7 +5,9 @@
  * capability inventories, lane grants, and scheduler fields without mutating
  * `AgentSession`.
  */
+import path from "node:path";
 import { loadHookInventory } from "./hook-inventory.js";
+import { sanitizeHookPolicy } from "./hooks/index.js";
 import { createLoadoutAccessPolicy } from "./loadout-access-policy.js";
 import { applyLoadoutProfile, deriveSchedulerFields, validateLoadoutProfile, } from "./loadouts.js";
 import { loadMcpInventory } from "./mcp-inventory.js";
@@ -62,18 +64,25 @@ export function buildCapabilityInventory(session, resourceLoader, cwd, hookInven
         kind: "mcp",
         name: entry.name,
         source: entry.source,
-        scope: "project",
+        scope: mcpInventoryScope(cwd, entry.source),
         origin: "top-level",
+        path: entry.source,
     }));
     const hooks = hookInventory.hooks.map((descriptor) => ({
         kind: "hook",
         name: descriptor.name,
-        source: descriptor.scriptPath ?? "builtin",
-        scope: "builtin",
+        source: descriptor.builtin ? "builtin" : "project",
+        scope: descriptor.builtin ? "builtin" : "project",
         origin: "top-level",
+        path: descriptor.scriptPath,
+        policy: sanitizeHookPolicy(descriptor.policy),
     }));
     return { tools, skills, mcp, hooks };
 }
+function mcpInventoryScope(cwd, sourcePath) {
+    const relative = path.relative(cwd, sourcePath);
+    return relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative) ? "project" : "user";
+}
 export function applyLoadoutToRuntime(session, resourceLoader, cwd, agentDir, request) {
     const validation = validateLoadoutProfile(request.profile);
     if (!validation.valid) {
@@ -124,7 +133,13 @@ export function applyLoadoutToRuntime(session, resourceLoader, cwd, agentDir, re
 }
 export function buildSubagentLaneGrant(nodeId, role, task, applied, schedulerFields, options = {}) {
     const allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);
-    const blockedPaths = ["**/.env*", "**/*secret*", "**/*key*", "**/.git/*"];
+    const blockedPaths = uniqueSorted([
+        "**/.env*",
+        "**/*secret*",
+        "**/*key*",
+        "**/.git/*",
+        ...(options.blockedPaths ?? []),
+    ]);
     let evidenceOutput;
     if (options.evidenceOutputPattern) {
         evidenceOutput = options.runId
@@ -134,24 +149,45 @@ export function buildSubagentLaneGrant(nodeId, role, task, applied, schedulerFie
     const commands = options.profile?.commands ?? { mode: "none" };
     return {
         laneId: nodeId,
-        agent: `omk-${role}`,
+        agent: options.agentName ?? `omk-${role}`,
         task,
         scope: "loadout-derived lane grant",
         authority: applied.authority,
         allowedPaths,
         blockedPaths,
+        tools: applied.activeTools,
         skills: applied.activeSkills,
         mcp: applied.activeMcp,
         hooks: applied.activeHooks,
         commands,
+        contextInheritance: options.contextInheritance ?? defaultContextInheritance(role),
+        ...(options.spawnReceipt ? { spawnReceipt: options.spawnReceipt } : {}),
+        evidenceGates: uniqueSortedEvidenceGates(options.evidenceGates ?? []),
+        dependsOn: uniqueSorted(options.dependsOn ?? []),
+        acceptance: uniqueSorted(options.acceptance ?? []),
         evidenceOutput,
         scheduler: schedulerFields,
     };
 }
+function defaultContextInheritance(role) {
+    switch (role) {
+        case "planner":
+        case "critic":
+        case "visual-qa":
+            return "receipt";
+        case "security":
+            return "none";
+        default:
+            return "bounded";
+    }
+}
 function uniqueSorted(values) {
     return [...new Set(values)]
         .map((value) => value.trim())
         .filter((value) => value !== "")
         .sort();
 }
+function uniqueSortedEvidenceGates(values) {
+    return [...new Set(values)].sort();
+}
 //# sourceMappingURL=loadout-runtime.js.map

package/dist/core/loadout-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"loadout-runtime.js","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAsB,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAA4B,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAEN,mBAAmB,EAEnB,qBAAqB,EAOrB,sBAAsB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAqCtD,MAAM,UAAU,wBAAwB,CACvC,KAA0B,EAC1B,OAAwC,EAClB;IACtB,OAAO,yBAAyB,CAAC;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;QACtC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,QAAQ;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC,CAAC;AAAA,CACH;AAkBD,MAAM,UAAU,wBAAwB,CACvC,OAA8B,EAC9B,cAA8B,EAC9B,GAAW,EACX,aAA4B,EACN;IACtB,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,WAAW;SACnB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC3E,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,IAAI,EAAE,UAAU,CAAC,IAAI;SACrB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,WAAW;SACnB,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAoB,cAAc,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;QAC/B,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK;QAC7B,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;QAC/B,IAAI,EAAE,KAAK,CAAC,QAAQ;KACpB,CAAC,CAAC,CAAC;IAEJ,MAAM,GAAG,GAAoB,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,WAAW;KACnB,CAAC,CAAC,CAAC;IAEJ,MAAM,KAAK,GAAoB,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,UAAU,CAAC,UAAU,IAAI,SAAS;QAC1C,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,WAAW;KACnB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAAA,CACrC;AAUD,MAAM,UAAU,qBAAqB,CACpC,OAA8B,EAC9B,cAA8B,EAC9B,GAAW,EACX,QAAgB,EAChB,OAAqC,EACf;IACtB,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO;YACN,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;YACjC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;YACpC,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;YACpE,QAAQ,EAAE,UAAU,CAAC,MAAM;YAC3B,QAAQ,EAAE,EAAE;SACZ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACN,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;YACpE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,qBAAqB,CAAC;QAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;KAC9C,CAAC,CAAC;IAEH,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe;QACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC;AAAA,CACF;AAUD,MAAM,UAAU,sBAAsB,CACrC,MAAc,EACd,IAAiB,EACjB,IAAY,EACZ,OAAuB,EACvB,eAAgC,EAChC,OAAO,GAAkC,EAAE,EACvB;IACpB,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAE1E,IAAI,cAAkC,CAAC;IACvC,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACnC,cAAc,GAAG,OAAO,CAAC,KAAK;YAC7B,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;YAChE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAE/D,OAAO;QACN,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,IAAI,EAAE;QACpB,IAAI;QACJ,KAAK,EAAE,4BAA4B;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY;QACZ,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,YAAY;QAC5B,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,KAAK,EAAE,OAAO,CAAC,WAAW;QAC1B,QAAQ;QACR,cAAc;QACd,SAAS,EAAE,eAAe;KAC1B,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,MAAyB,EAAY;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;SAC/B,IAAI,EAAE,CAAC;AAAA,CACT","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: \"project\",\n\t\torigin: \"top-level\",\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.scriptPath ?? \"builtin\",\n\t\tscope: \"builtin\",\n\t\torigin: \"top-level\",\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = [\"**/.env*\", \"**/*secret*\", \"**/*key*\", \"**/.git/*\"];\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n"]}
+{"version":3,"file":"loadout-runtime.js","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAsB,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAA4B,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAEN,mBAAmB,EAEnB,qBAAqB,EAOrB,sBAAsB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAqCtD,MAAM,UAAU,wBAAwB,CACvC,KAA0B,EAC1B,OAAwC,EAClB;IACtB,OAAO,yBAAyB,CAAC;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;QACtC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,QAAQ;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC,CAAC;AAAA,CACH;AAoCD,MAAM,UAAU,wBAAwB,CACvC,OAA8B,EAC9B,cAA8B,EAC9B,GAAW,EACX,aAA4B,EACN;IACtB,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,WAAW;SACnB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC3E,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,IAAI,EAAE,UAAU,CAAC,IAAI;SACrB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,WAAW;SACnB,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAoB,cAAc,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;QAC/B,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK;QAC7B,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;QAC/B,IAAI,EAAE,KAAK,CAAC,QAAQ;KACpB,CAAC,CAAC,CAAC;IAEJ,MAAM,GAAG,GAAoB,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;QAC3C,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,KAAK,CAAC,MAAM;KAClB,CAAC,CAAC,CAAC;IAEJ,MAAM,KAAK,GAAoB,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACjD,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,UAAU,CAAC,UAAU;QAC3B,MAAM,EAAE,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC;KAC7C,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAAA,CACrC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,UAAkB,EAAsB;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAAA,CACxG;AAUD,MAAM,UAAU,qBAAqB,CACpC,OAA8B,EAC9B,cAA8B,EAC9B,GAAW,EACX,QAAgB,EAChB,OAAqC,EACf;IACtB,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO;YACN,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;YACjC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;YACpC,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;YACpE,QAAQ,EAAE,UAAU,CAAC,MAAM;YAC3B,QAAQ,EAAE,EAAE;SACZ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACN,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;YACpE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,qBAAqB,CAAC;QAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;KAC9C,CAAC,CAAC;IAEH,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe;QACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC;AAAA,CACF;AAiBD,MAAM,UAAU,sBAAsB,CACrC,MAAc,EACd,IAAiB,EACjB,IAAY,EACZ,OAAuB,EACvB,eAAgC,EAChC,OAAO,GAAkC,EAAE,EACvB;IACpB,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,YAAY,GAAG,YAAY,CAAC;QACjC,UAAU;QACV,aAAa;QACb,UAAU;QACV,WAAW;QACX,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;IAEH,IAAI,cAAkC,CAAC;IACvC,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACnC,cAAc,GAAG,OAAO,CAAC,KAAK;YAC7B,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;YAChE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAE/D,OAAO;QACN,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,IAAI,EAAE;QACzC,IAAI;QACJ,KAAK,EAAE,4BAA4B;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY;QACZ,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,WAAW;QAC1B,MAAM,EAAE,OAAO,CAAC,YAAY;QAC5B,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,KAAK,EAAE,OAAO,CAAC,WAAW;QAC1B,QAAQ;QACR,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,yBAAyB,CAAC,IAAI,CAAC;QACjF,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,aAAa,EAAE,yBAAyB,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QACrE,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAChD,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAClD,cAAc;QACd,SAAS,EAAE,eAAe;KAC1B,CAAC;AAAA,CACF;AAED,SAAS,yBAAyB,CAAC,IAAiB,EAA8B;IACjF,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW;YACf,OAAO,SAAS,CAAC;QAClB,KAAK,UAAU;YACd,OAAO,MAAM,CAAC;QACf;YACC,OAAO,SAAS,CAAC;IACnB,CAAC;AAAA,CACD;AAED,SAAS,YAAY,CAAC,MAAyB,EAAY;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;SAC/B,IAAI,EAAE,CAAC;AAAA,CACT;AAED,SAAS,yBAAyB,CAAC,MAAmC,EAAsB;IAC3F,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAAA,CACnC","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport path from \"node:path\";\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { sanitizeHookPolicy } from \"./hooks/index.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\ttools: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tcontextInheritance: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates: LaneEvidenceGate[];\n\tdependsOn: string[];\n\tacceptance: string[];\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport type LaneContextInheritanceMode = \"none\" | \"receipt\" | \"last-turn\" | \"bounded\" | \"full\";\n\nexport type LaneEvidenceGate = \"plan-reread\" | \"automated-verification\" | \"manual-qa\" | \"adversarial-qa\" | \"cleanup\";\n\nexport interface LaneSpawnReceipt {\n\twhyParallel: string;\n\twhyNotLocal: string;\n\tindependence: string;\n\texpectedReceiptShape: string;\n\tmaxInlineTokens: number;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: mcpInventoryScope(cwd, entry.source),\n\t\torigin: \"top-level\",\n\t\tpath: entry.source,\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.builtin ? \"builtin\" : \"project\",\n\t\tscope: descriptor.builtin ? \"builtin\" : \"project\",\n\t\torigin: \"top-level\",\n\t\tpath: descriptor.scriptPath,\n\t\tpolicy: sanitizeHookPolicy(descriptor.policy),\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nfunction mcpInventoryScope(cwd: string, sourcePath: string): \"project\" | \"user\" {\n\tconst relative = path.relative(cwd, sourcePath);\n\treturn relative !== \"\" && !relative.startsWith(\"..\") && !path.isAbsolute(relative) ? \"project\" : \"user\";\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tblockedPaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n\tagentName?: string;\n\tcontextInheritance?: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates?: readonly LaneEvidenceGate[];\n\tdependsOn?: readonly string[];\n\tacceptance?: readonly string[];\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = uniqueSorted([\n\t\t\"**/.env*\",\n\t\t\"**/*secret*\",\n\t\t\"**/*key*\",\n\t\t\"**/.git/*\",\n\t\t...(options.blockedPaths ?? []),\n\t]);\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: options.agentName ?? `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\ttools: applied.activeTools,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tcontextInheritance: options.contextInheritance ?? defaultContextInheritance(role),\n\t\t...(options.spawnReceipt ? { spawnReceipt: options.spawnReceipt } : {}),\n\t\tevidenceGates: uniqueSortedEvidenceGates(options.evidenceGates ?? []),\n\t\tdependsOn: uniqueSorted(options.dependsOn ?? []),\n\t\tacceptance: uniqueSorted(options.acceptance ?? []),\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction defaultContextInheritance(role: LoadoutRole): LaneContextInheritanceMode {\n\tswitch (role) {\n\t\tcase \"planner\":\n\t\tcase \"critic\":\n\t\tcase \"visual-qa\":\n\t\t\treturn \"receipt\";\n\t\tcase \"security\":\n\t\t\treturn \"none\";\n\t\tdefault:\n\t\t\treturn \"bounded\";\n\t}\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n\nfunction uniqueSortedEvidenceGates(values: readonly LaneEvidenceGate[]): LaneEvidenceGate[] {\n\treturn [...new Set(values)].sort();\n}\n"]}

package/dist/core/loadout-safety.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Shared safety helpers for loadout composition and domain dispatch.
+ *
+ * This module is pure and I/O-free. It centralizes authority ordering,
+ * read-only downgrades, write-capability stripping, security hook forcing, and
+ * command-mode clamping so additive composition modules cannot accidentally
+ * widen lane authority.
+ */
+import type { CapabilityGate, CommandMode, LoadoutAuthority, LoadoutCommands, LoadoutRole, ResourceKind } from "./loadouts.ts";
+export type CapabilityGateNameKind = "tool" | "skill" | "mcp" | "hook";
+export interface StrippedCapability {
+    readonly kind: CapabilityGateNameKind;
+    readonly name: string;
+    readonly reason: string;
+}
+export interface StripNamesResult {
+    readonly names: readonly string[];
+    readonly stripped: readonly StrippedCapability[];
+}
+export interface McpDowngradeTrace {
+    readonly mcp: string;
+    readonly to: string;
+}
+export interface McpDowngradeResult {
+    readonly names: readonly string[];
+    readonly downgraded: readonly McpDowngradeTrace[];
+}
+export declare const SECURITY_HOOK_NAMES: readonly ["pre-shell-guard", "protect-secrets", "stop-verify"];
+export declare const SECURITY_HOOKS: ReadonlySet<string>;
+export declare const WRITE_TOOL_NAMES: readonly ["edit", "write"];
+export declare const WRITE_TOOLS: ReadonlySet<string>;
+export declare const MCP_READONLY_DOWNGRADE: Readonly<Record<string, string>>;
+export declare const AUTHORITY_RANK: Readonly<Record<LoadoutAuthority, number>>;
+export declare const COMMAND_MODE_RANK: Readonly<Record<CommandMode, number>>;
+export declare const WRITE_SKILLS: ReadonlySet<string>;
+export declare function authorityRank(authority: LoadoutAuthority): number;
+export declare function minAuthority(...authorities: readonly (LoadoutAuthority | undefined)[]): LoadoutAuthority;
+export declare function isReadOnlyAuthority(authority: LoadoutAuthority): boolean;
+export declare function isWritingRole(role: LoadoutRole): boolean;
+export declare function stripWriteToolsForAuthority(names: readonly string[], authority: LoadoutAuthority): StripNamesResult;
+export declare function isWriteLikeSkillName(name: string): boolean;
+export declare function stripWriteSkillsForAuthority(names: readonly string[], authority: LoadoutAuthority): StripNamesResult;
+export declare function stripWriteToolsForReadOnlyAuthority(names: readonly string[]): readonly string[];
+export declare function stripWriteSkillsForReadOnlyRole(names: readonly string[]): readonly string[];
+export declare function downgradeMcpForAuthority(names: readonly string[], authority: LoadoutAuthority): McpDowngradeResult;
+export declare function downgradeMcpForReadOnlyRole(names: readonly string[]): readonly string[];
+export declare function forceSecurityHooks(names: readonly string[], forced?: readonly string[]): string[];
+export declare function commandModeRank(mode: CommandMode): number;
+export declare function clampCommandModeForAuthority(mode: CommandMode, authority: LoadoutAuthority): CommandMode;
+export declare function selectSafestCommandMode(authority: LoadoutAuthority, ...modes: readonly (CommandMode | undefined)[]): LoadoutCommands;
+export declare function capabilityGateNames(gate: CapabilityGate | undefined, group?: "allow" | "exclude" | "require"): string[];
+export declare function unionCapabilityGateNames(group: "allow" | "exclude" | "require", ...gates: readonly (CapabilityGate | undefined)[]): string[];
+export declare function namesToCapabilityGate(kind: Exclude<ResourceKind, "extension" | "prompt" | "theme" | "tool">, names: readonly string[]): CapabilityGate;
+export declare function uniqueSorted(values: readonly string[]): string[];
+//# sourceMappingURL=loadout-safety.d.ts.map

package/dist/core/loadout-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-safety.d.ts","sourceRoot":"","sources":["../../src/core/loadout-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACX,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,YAAY,EACZ,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAClD;AAED,eAAO,MAAM,mBAAmB,gEAAiE,CAAC;AAClG,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAAgC,CAAC;AAEhF,eAAO,MAAM,gBAAgB,4BAA6B,CAAC;AAC3D,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAA6B,CAAC;AAE1E,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEnE,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAOrE,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAKnE,CAAC;AAiDF,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,CAAuC,CAAC;AAErF,wBAAgB,aAAa,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,CAEjE;AAED,wBAAgB,YAAY,CAAC,GAAG,WAAW,EAAE,SAAS,CAAC,gBAAgB,GAAG,SAAS,CAAC,EAAE,GAAG,gBAAgB,CAQxG;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAExE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAExD;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,gBAAgB,GAAG,gBAAgB,CAYnH;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,gBAAgB,GAAG,gBAAgB,CAYpH;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAE/F;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAE3F;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,gBAAgB,GAAG,kBAAkB,CAUlH;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAEvF;AAED,wBAAgB,kBAAkB,CACjC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,MAAM,GAAE,SAAS,MAAM,EAAwB,GAC7C,MAAM,EAAE,CAEV;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAEzD;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,GAAG,WAAW,CAOxG;AAED,wBAAgB,uBAAuB,CACtC,SAAS,EAAE,gBAAgB,EAC3B,GAAG,KAAK,EAAE,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,EAAE,GAC5C,eAAe,CAOjB;AAED,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,cAAc,GAAG,SAAS,EAChC,KAAK,GAAE,OAAO,GAAG,SAAS,GAAG,SAAmB,GAC9C,MAAM,EAAE,CAOV;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,EACtC,GAAG,KAAK,EAAE,SAAS,CAAC,cAAc,GAAG,SAAS,CAAC,EAAE,GAC/C,MAAM,EAAE,CAEV;AAED,wBAAgB,qBAAqB,CACpC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC,EACtE,KAAK,EAAE,SAAS,MAAM,EAAE,GACtB,cAAc,CAEhB;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAEhE","sourcesContent":["/**\n * Shared safety helpers for loadout composition and domain dispatch.\n *\n * This module is pure and I/O-free. It centralizes authority ordering,\n * read-only downgrades, write-capability stripping, security hook forcing, and\n * command-mode clamping so additive composition modules cannot accidentally\n * widen lane authority.\n */\n\nimport type {\n\tCapabilityGate,\n\tCommandMode,\n\tLoadoutAuthority,\n\tLoadoutCommands,\n\tLoadoutRole,\n\tResourceKind,\n} from \"./loadouts.ts\";\n\nexport type CapabilityGateNameKind = \"tool\" | \"skill\" | \"mcp\" | \"hook\";\n\nexport interface StrippedCapability {\n\treadonly kind: CapabilityGateNameKind;\n\treadonly name: string;\n\treadonly reason: string;\n}\n\nexport interface StripNamesResult {\n\treadonly names: readonly string[];\n\treadonly stripped: readonly StrippedCapability[];\n}\n\nexport interface McpDowngradeTrace {\n\treadonly mcp: string;\n\treadonly to: string;\n}\n\nexport interface McpDowngradeResult {\n\treadonly names: readonly string[];\n\treadonly downgraded: readonly McpDowngradeTrace[];\n}\n\nexport const SECURITY_HOOK_NAMES = [\"pre-shell-guard\", \"protect-secrets\", \"stop-verify\"] as const;\nexport const SECURITY_HOOKS: ReadonlySet<string> = new Set(SECURITY_HOOK_NAMES);\n\nexport const WRITE_TOOL_NAMES = [\"edit\", \"write\"] as const;\nexport const WRITE_TOOLS: ReadonlySet<string> = new Set(WRITE_TOOL_NAMES);\n\nexport const MCP_READONLY_DOWNGRADE: Readonly<Record<string, string>> = {\n\tfilesystem: \"filesystem-readonly\",\n};\n\nexport const AUTHORITY_RANK: Readonly<Record<LoadoutAuthority, number>> = {\n\tadvisory: 0,\n\t\"read-only\": 1,\n\t\"review-only\": 1,\n\t\"security-review\": 2,\n\t\"execute-tests\": 3,\n\t\"write-scoped\": 4,\n};\n\nexport const COMMAND_MODE_RANK: Readonly<Record<CommandMode, number>> = {\n\tnone: 0,\n\t\"read-only-shell\": 1,\n\t\"tests-only\": 2,\n\t\"scoped-shell\": 3,\n};\n\nconst WRITING_ROLES: ReadonlySet<LoadoutRole> = new Set([\n\t\"coder\",\n\t\"tester\",\n\t\"security\",\n\t\"synthesizer\",\n\t\"package-maintainer\",\n]);\n\nconst READ_ONLY_SAFE_SKILLS: ReadonlySet<string> = new Set([\n\t\"analyze\",\n\t\"audit-context-building\",\n\t\"best-practice-research\",\n\t\"code-review\",\n\t\"contrast-checker\",\n\t\"differential-review\",\n\t\"fp-check\",\n\t\"literature-review\",\n\t\"security-review\",\n\t\"understand-chat\",\n\t\"use-of-color\",\n\t\"verification-before-completion\",\n\t\"web-design-guidelines\",\n]);\n\nconst WRITE_LIKE_SKILL_FRAGMENTS = [\n\t\"add-\",\n\t\"build\",\n\t\"clone\",\n\t\"commit\",\n\t\"create\",\n\t\"deploy\",\n\t\"edit\",\n\t\"fix\",\n\t\"frontend-ui-engineering\",\n\t\"generate\",\n\t\"implement\",\n\t\"land-and-deploy\",\n\t\"publish\",\n\t\"redesign\",\n\t\"ship\",\n\t\"tdd\",\n\t\"test-driven-development\",\n\t\"update\",\n\t\"visual-ralph\",\n\t\"write-\",\n] as const;\n\nexport const WRITE_SKILLS: ReadonlySet<string> = new Set(WRITE_LIKE_SKILL_FRAGMENTS);\n\nexport function authorityRank(authority: LoadoutAuthority): number {\n\treturn AUTHORITY_RANK[authority];\n}\n\nexport function minAuthority(...authorities: readonly (LoadoutAuthority | undefined)[]): LoadoutAuthority {\n\tconst present = authorities.filter((authority): authority is LoadoutAuthority => authority !== undefined);\n\tif (present.length === 0) return \"advisory\";\n\tlet lowest = present[0];\n\tfor (const authority of present.slice(1)) {\n\t\tif (authorityRank(authority) < authorityRank(lowest)) lowest = authority;\n\t}\n\treturn lowest;\n}\n\nexport function isReadOnlyAuthority(authority: LoadoutAuthority): boolean {\n\treturn authority === \"advisory\" || authority === \"read-only\" || authority === \"review-only\";\n}\n\nexport function isWritingRole(role: LoadoutRole): boolean {\n\treturn WRITING_ROLES.has(role);\n}\n\nexport function stripWriteToolsForAuthority(names: readonly string[], authority: LoadoutAuthority): StripNamesResult {\n\tif (!isReadOnlyAuthority(authority)) return { names: uniqueSorted(names), stripped: [] };\n\tconst stripped: StrippedCapability[] = [];\n\tconst kept: string[] = [];\n\tfor (const name of names) {\n\t\tif (WRITE_TOOLS.has(name)) {\n\t\t\tstripped.push({ kind: \"tool\", name, reason: \"read-only authority cannot activate write tools\" });\n\t\t\tcontinue;\n\t\t}\n\t\tkept.push(name);\n\t}\n\treturn { names: uniqueSorted(kept), stripped };\n}\n\nexport function isWriteLikeSkillName(name: string): boolean {\n\tconst lowerName = name.toLowerCase();\n\tif (READ_ONLY_SAFE_SKILLS.has(lowerName)) return false;\n\treturn WRITE_LIKE_SKILL_FRAGMENTS.some((fragment) => lowerName.includes(fragment));\n}\n\nexport function stripWriteSkillsForAuthority(names: readonly string[], authority: LoadoutAuthority): StripNamesResult {\n\tif (!isReadOnlyAuthority(authority)) return { names: uniqueSorted(names), stripped: [] };\n\tconst stripped: StrippedCapability[] = [];\n\tconst kept: string[] = [];\n\tfor (const name of names) {\n\t\tif (isWriteLikeSkillName(name)) {\n\t\t\tstripped.push({ kind: \"skill\", name, reason: \"read-only authority cannot activate write-like skills\" });\n\t\t\tcontinue;\n\t\t}\n\t\tkept.push(name);\n\t}\n\treturn { names: uniqueSorted(kept), stripped };\n}\n\nexport function stripWriteToolsForReadOnlyAuthority(names: readonly string[]): readonly string[] {\n\treturn stripWriteToolsForAuthority(names, \"read-only\").names;\n}\n\nexport function stripWriteSkillsForReadOnlyRole(names: readonly string[]): readonly string[] {\n\treturn stripWriteSkillsForAuthority(names, \"read-only\").names;\n}\n\nexport function downgradeMcpForAuthority(names: readonly string[], authority: LoadoutAuthority): McpDowngradeResult {\n\tif (!isReadOnlyAuthority(authority)) return { names: uniqueSorted(names), downgraded: [] };\n\tconst downgraded: McpDowngradeTrace[] = [];\n\tconst mapped = names.map((name) => {\n\t\tconst replacement = MCP_READONLY_DOWNGRADE[name];\n\t\tif (!replacement) return name;\n\t\tdowngraded.push({ mcp: name, to: replacement });\n\t\treturn replacement;\n\t});\n\treturn { names: uniqueSorted(mapped), downgraded: uniqueMcpDowngrades(downgraded) };\n}\n\nexport function downgradeMcpForReadOnlyRole(names: readonly string[]): readonly string[] {\n\treturn downgradeMcpForAuthority(names, \"read-only\").names;\n}\n\nexport function forceSecurityHooks(\n\tnames: readonly string[],\n\tforced: readonly string[] = SECURITY_HOOK_NAMES,\n): string[] {\n\treturn uniqueSorted([...names, ...forced]);\n}\n\nexport function commandModeRank(mode: CommandMode): number {\n\treturn COMMAND_MODE_RANK[mode];\n}\n\nexport function clampCommandModeForAuthority(mode: CommandMode, authority: LoadoutAuthority): CommandMode {\n\tif (authority === \"write-scoped\") return mode;\n\tif (authority === \"execute-tests\") {\n\t\treturn commandModeRank(mode) > commandModeRank(\"tests-only\") ? \"tests-only\" : mode;\n\t}\n\tif (commandModeRank(mode) > commandModeRank(\"read-only-shell\")) return \"read-only-shell\";\n\treturn mode;\n}\n\nexport function selectSafestCommandMode(\n\tauthority: LoadoutAuthority,\n\t...modes: readonly (CommandMode | undefined)[]\n): LoadoutCommands {\n\tconst normalized = modes.map((mode) => mode ?? \"none\");\n\tlet safest: CommandMode = \"scoped-shell\";\n\tfor (const mode of normalized) {\n\t\tif (commandModeRank(mode) < commandModeRank(safest)) safest = mode;\n\t}\n\treturn { mode: clampCommandModeForAuthority(safest, authority) };\n}\n\nexport function capabilityGateNames(\n\tgate: CapabilityGate | undefined,\n\tgroup: \"allow\" | \"exclude\" | \"require\" = \"allow\",\n): string[] {\n\tconst selectors = gate?.[group] ?? [];\n\tconst names: string[] = [];\n\tfor (const selector of selectors) {\n\t\tfor (const name of selector.names ?? []) names.push(name);\n\t}\n\treturn uniqueSorted(names);\n}\n\nexport function unionCapabilityGateNames(\n\tgroup: \"allow\" | \"exclude\" | \"require\",\n\t...gates: readonly (CapabilityGate | undefined)[]\n): string[] {\n\treturn uniqueSorted(gates.flatMap((gate) => capabilityGateNames(gate, group)));\n}\n\nexport function namesToCapabilityGate(\n\tkind: Exclude<ResourceKind, \"extension\" | \"prompt\" | \"theme\" | \"tool\">,\n\tnames: readonly string[],\n): CapabilityGate {\n\treturn { allow: [{ kind, names: uniqueSorted(names) }] };\n}\n\nexport function uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values.map((value) => value.trim()).filter((value) => value !== \"\"))].sort(compareString);\n}\n\nfunction uniqueMcpDowngrades(values: readonly McpDowngradeTrace[]): McpDowngradeTrace[] {\n\tconst seen = new Set<string>();\n\tconst result: McpDowngradeTrace[] = [];\n\tfor (const value of values) {\n\t\tconst key = `${value.mcp}\\0${value.to}`;\n\t\tif (seen.has(key)) continue;\n\t\tseen.add(key);\n\t\tresult.push(value);\n\t}\n\treturn result.sort((a, b) => compareString(a.mcp, b.mcp) || compareString(a.to, b.to));\n}\n\nfunction compareString(a: string, b: string): number {\n\tif (a < b) return -1;\n\tif (a > b) return 1;\n\treturn 0;\n}\n"]}

package/dist/core/loadout-safety.js

@@ -0,0 +1,213 @@
+/**
+ * Shared safety helpers for loadout composition and domain dispatch.
+ *
+ * This module is pure and I/O-free. It centralizes authority ordering,
+ * read-only downgrades, write-capability stripping, security hook forcing, and
+ * command-mode clamping so additive composition modules cannot accidentally
+ * widen lane authority.
+ */
+export const SECURITY_HOOK_NAMES = ["pre-shell-guard", "protect-secrets", "stop-verify"];
+export const SECURITY_HOOKS = new Set(SECURITY_HOOK_NAMES);
+export const WRITE_TOOL_NAMES = ["edit", "write"];
+export const WRITE_TOOLS = new Set(WRITE_TOOL_NAMES);
+export const MCP_READONLY_DOWNGRADE = {
+    filesystem: "filesystem-readonly",
+};
+export const AUTHORITY_RANK = {
+    advisory: 0,
+    "read-only": 1,
+    "review-only": 1,
+    "security-review": 2,
+    "execute-tests": 3,
+    "write-scoped": 4,
+};
+export const COMMAND_MODE_RANK = {
+    none: 0,
+    "read-only-shell": 1,
+    "tests-only": 2,
+    "scoped-shell": 3,
+};
+const WRITING_ROLES = new Set([
+    "coder",
+    "tester",
+    "security",
+    "synthesizer",
+    "package-maintainer",
+]);
+const READ_ONLY_SAFE_SKILLS = new Set([
+    "analyze",
+    "audit-context-building",
+    "best-practice-research",
+    "code-review",
+    "contrast-checker",
+    "differential-review",
+    "fp-check",
+    "literature-review",
+    "security-review",
+    "understand-chat",
+    "use-of-color",
+    "verification-before-completion",
+    "web-design-guidelines",
+]);
+const WRITE_LIKE_SKILL_FRAGMENTS = [
+    "add-",
+    "build",
+    "clone",
+    "commit",
+    "create",
+    "deploy",
+    "edit",
+    "fix",
+    "frontend-ui-engineering",
+    "generate",
+    "implement",
+    "land-and-deploy",
+    "publish",
+    "redesign",
+    "ship",
+    "tdd",
+    "test-driven-development",
+    "update",
+    "visual-ralph",
+    "write-",
+];
+export const WRITE_SKILLS = new Set(WRITE_LIKE_SKILL_FRAGMENTS);
+export function authorityRank(authority) {
+    return AUTHORITY_RANK[authority];
+}
+export function minAuthority(...authorities) {
+    const present = authorities.filter((authority) => authority !== undefined);
+    if (present.length === 0)
+        return "advisory";
+    let lowest = present[0];
+    for (const authority of present.slice(1)) {
+        if (authorityRank(authority) < authorityRank(lowest))
+            lowest = authority;
+    }
+    return lowest;
+}
+export function isReadOnlyAuthority(authority) {
+    return authority === "advisory" || authority === "read-only" || authority === "review-only";
+}
+export function isWritingRole(role) {
+    return WRITING_ROLES.has(role);
+}
+export function stripWriteToolsForAuthority(names, authority) {
+    if (!isReadOnlyAuthority(authority))
+        return { names: uniqueSorted(names), stripped: [] };
+    const stripped = [];
+    const kept = [];
+    for (const name of names) {
+        if (WRITE_TOOLS.has(name)) {
+            stripped.push({ kind: "tool", name, reason: "read-only authority cannot activate write tools" });
+            continue;
+        }
+        kept.push(name);
+    }
+    return { names: uniqueSorted(kept), stripped };
+}
+export function isWriteLikeSkillName(name) {
+    const lowerName = name.toLowerCase();
+    if (READ_ONLY_SAFE_SKILLS.has(lowerName))
+        return false;
+    return WRITE_LIKE_SKILL_FRAGMENTS.some((fragment) => lowerName.includes(fragment));
+}
+export function stripWriteSkillsForAuthority(names, authority) {
+    if (!isReadOnlyAuthority(authority))
+        return { names: uniqueSorted(names), stripped: [] };
+    const stripped = [];
+    const kept = [];
+    for (const name of names) {
+        if (isWriteLikeSkillName(name)) {
+            stripped.push({ kind: "skill", name, reason: "read-only authority cannot activate write-like skills" });
+            continue;
+        }
+        kept.push(name);
+    }
+    return { names: uniqueSorted(kept), stripped };
+}
+export function stripWriteToolsForReadOnlyAuthority(names) {
+    return stripWriteToolsForAuthority(names, "read-only").names;
+}
+export function stripWriteSkillsForReadOnlyRole(names) {
+    return stripWriteSkillsForAuthority(names, "read-only").names;
+}
+export function downgradeMcpForAuthority(names, authority) {
+    if (!isReadOnlyAuthority(authority))
+        return { names: uniqueSorted(names), downgraded: [] };
+    const downgraded = [];
+    const mapped = names.map((name) => {
+        const replacement = MCP_READONLY_DOWNGRADE[name];
+        if (!replacement)
+            return name;
+        downgraded.push({ mcp: name, to: replacement });
+        return replacement;
+    });
+    return { names: uniqueSorted(mapped), downgraded: uniqueMcpDowngrades(downgraded) };
+}
+export function downgradeMcpForReadOnlyRole(names) {
+    return downgradeMcpForAuthority(names, "read-only").names;
+}
+export function forceSecurityHooks(names, forced = SECURITY_HOOK_NAMES) {
+    return uniqueSorted([...names, ...forced]);
+}
+export function commandModeRank(mode) {
+    return COMMAND_MODE_RANK[mode];
+}
+export function clampCommandModeForAuthority(mode, authority) {
+    if (authority === "write-scoped")
+        return mode;
+    if (authority === "execute-tests") {
+        return commandModeRank(mode) > commandModeRank("tests-only") ? "tests-only" : mode;
+    }
+    if (commandModeRank(mode) > commandModeRank("read-only-shell"))
+        return "read-only-shell";
+    return mode;
+}
+export function selectSafestCommandMode(authority, ...modes) {
+    const normalized = modes.map((mode) => mode ?? "none");
+    let safest = "scoped-shell";
+    for (const mode of normalized) {
+        if (commandModeRank(mode) < commandModeRank(safest))
+            safest = mode;
+    }
+    return { mode: clampCommandModeForAuthority(safest, authority) };
+}
+export function capabilityGateNames(gate, group = "allow") {
+    const selectors = gate?.[group] ?? [];
+    const names = [];
+    for (const selector of selectors) {
+        for (const name of selector.names ?? [])
+            names.push(name);
+    }
+    return uniqueSorted(names);
+}
+export function unionCapabilityGateNames(group, ...gates) {
+    return uniqueSorted(gates.flatMap((gate) => capabilityGateNames(gate, group)));
+}
+export function namesToCapabilityGate(kind, names) {
+    return { allow: [{ kind, names: uniqueSorted(names) }] };
+}
+export function uniqueSorted(values) {
+    return [...new Set(values.map((value) => value.trim()).filter((value) => value !== ""))].sort(compareString);
+}
+function uniqueMcpDowngrades(values) {
+    const seen = new Set();
+    const result = [];
+    for (const value of values) {
+        const key = `${value.mcp}\0${value.to}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        result.push(value);
+    }
+    return result.sort((a, b) => compareString(a.mcp, b.mcp) || compareString(a.to, b.to));
+}
+function compareString(a, b) {
+    if (a < b)
+        return -1;
+    if (a > b)
+        return 1;
+    return 0;
+}
+//# sourceMappingURL=loadout-safety.js.map