open-multi-agent-kit 0.96.2 → 0.98.0

package/dist/commands/adaptorch-doctor-cli.js

@@ -0,0 +1,115 @@
+import { AdaptOrchApiError, createAdaptOrchApiClientFromEnv, } from "omk-adaptorch-wpl";
+/**
+ * Headless AdaptOrch connectivity check:
+ *
+ *   omk doctor adaptorch [--json]
+ *
+ * One command answers the only question that blocks getting started: does the
+ * configured key reach the hosted API? It calls `GET /v1/whoami`, which is the
+ * cheapest authenticated read in the contract, and reports the principal it
+ * resolved to.
+ *
+ * The exit code carries the verdict so a script can branch without parsing
+ * prose: 0 verified, 1 not configured, 2 configured but unreachable. Those are
+ * genuinely different states — "no key" is a setup step, while "key rejected"
+ * is a broken setup, and collapsing them would make the command useless in CI.
+ *
+ * The credential is never printed. `omk-adaptorch-wpl` already scrubs it from
+ * its own errors; this command additionally never echoes the configured value.
+ */
+const USAGE = "Usage: omk doctor adaptorch [--json]";
+/**
+ * Where to obtain a key. This is the one moment in the CLI where the reader has
+ * explicitly asked about AdaptOrch, so answering "which key, from where" here
+ * is help rather than promotion. It carries its own attribution so this
+ * touchpoint stays distinguishable from the README links.
+ */
+const ADAPTORCH_SIGNUP_URL = "https://adaptorch.com/?utm_source=omk-cli&utm_medium=doctor&utm_campaign=omk#pricing";
+function describe(report) {
+    if (!report.configured) {
+        return [
+            "AdaptOrch: not configured",
+            "  Set ADAPTORCH_API_KEY to enable it. Optionally set ADAPTORCH_API_URL.",
+            `  Get a key: ${ADAPTORCH_SIGNUP_URL}`,
+            "  AdaptOrch is a separate product; OMK does not require it.",
+        ];
+    }
+    if (!report.reachable) {
+        const detail = report.status === undefined ? "" : ` (HTTP ${report.status}${report.code ? ` ${report.code}` : ""})`;
+        return [`AdaptOrch: unreachable${detail}`, `  ${report.error ?? "the request did not complete"}`];
+    }
+    const scope = report.projectId ? `, project ${report.projectId}` : "";
+    return [`AdaptOrch: verified`, `  Authenticated as ${report.subjectId ?? "(unknown subject)"}${scope}`];
+}
+async function probe(client) {
+    try {
+        const principal = await client.whoami();
+        return {
+            configured: true,
+            reachable: true,
+            subjectId: principal.subject_id,
+            ...(principal.project_id === undefined ? {} : { projectId: principal.project_id }),
+        };
+    }
+    catch (error) {
+        if (error instanceof AdaptOrchApiError) {
+            return {
+                configured: true,
+                reachable: false,
+                status: error.status,
+                ...(error.code === undefined ? {} : { code: error.code }),
+                error: error.message,
+            };
+        }
+        return {
+            configured: true,
+            reachable: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+export async function runAdaptOrchDoctorCli(args, overrides = {}) {
+    if (args[0] !== "doctor" || args[1] !== "adaptorch") {
+        return { handled: false, exitCode: 0 };
+    }
+    const writeLine = overrides.writeLine ?? ((line) => console.log(line));
+    let json = false;
+    for (const arg of args.slice(2)) {
+        if (arg === "--json") {
+            json = true;
+            continue;
+        }
+        if (arg === "--help" || arg === "-h") {
+            writeLine(USAGE);
+            return { handled: true, exitCode: 0 };
+        }
+        writeLine(`Unknown option: ${arg}`);
+        writeLine(USAGE);
+        return { handled: true, exitCode: 2 };
+    }
+    const env = overrides.env ?? process.env;
+    const fetchImpl = overrides.fetch ?? globalThis.fetch;
+    let report;
+    try {
+        const client = createAdaptOrchApiClientFromEnv(fetchImpl, env);
+        report = client ? await probe(client) : { configured: false, reachable: false };
+    }
+    catch (error) {
+        // A configured but invalid setup (an unsafe ADAPTORCH_API_URL, for
+        // example) is a broken setup, not an absent one.
+        report = {
+            configured: true,
+            reachable: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+    if (json)
+        writeLine(JSON.stringify(report, null, 2));
+    else
+        for (const line of describe(report))
+            writeLine(line);
+    if (!report.configured)
+        return { handled: true, exitCode: 1 };
+    return { handled: true, exitCode: report.reachable ? 0 : 2 };
+}
+//# sourceMappingURL=adaptorch-doctor-cli.js.map

package/dist/commands/adaptorch-doctor-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adaptorch-doctor-cli.js","sourceRoot":"","sources":["../../src/commands/adaptorch-doctor-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,iBAAiB,EAEjB,+BAA+B,GAC/B,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,KAAK,GAAG,sCAAsC,CAAC;AAErD;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,sFAAsF,CAAC;AAyBpH,SAAS,QAAQ,CAAC,MAA6B,EAAY;IAC1D,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO;YACN,2BAA2B;YAC3B,yEAAyE;YACzE,gBAAgB,oBAAoB,EAAE;YACtC,6DAA6D;SAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,MAAM,GACX,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;QACtG,OAAO,CAAC,yBAAyB,MAAM,EAAE,EAAE,KAAK,MAAM,CAAC,KAAK,IAAI,8BAA8B,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,qBAAqB,EAAE,sBAAsB,MAAM,CAAC,SAAS,IAAI,mBAAmB,GAAG,KAAK,EAAE,CAAC,CAAC;AAAA,CACxG;AAED,KAAK,UAAU,KAAK,CAAC,MAA0B,EAAkC;IAChF,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACxC,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,SAAS,CAAC,UAAU;YAC/B,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;SAClF,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACxC,OAAO;gBACN,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACzD,KAAK,EAAE,KAAK,CAAC,OAAO;aACpB,CAAC;QACH,CAAC;QACD,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAC;IACH,CAAC;AAAA,CACD;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,IAAuB,EACvB,SAAS,GAAgC,EAAE,EACN;IACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/E,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACV,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvC,CAAC;QACD,SAAS,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QACpC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACzC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,IAAK,UAAU,CAAC,KAAmC,CAAC;IAErF,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,GAAG;YACR,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;QAChD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAE1D,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAAA,CAC7D","sourcesContent":["import {\n\ttype AdaptOrchApiClient,\n\tAdaptOrchApiError,\n\ttype AdaptOrchFetch,\n\tcreateAdaptOrchApiClientFromEnv,\n} from \"omk-adaptorch-wpl\";\n\n/**\n * Headless AdaptOrch connectivity check:\n *\n *   omk doctor adaptorch [--json]\n *\n * One command answers the only question that blocks getting started: does the\n * configured key reach the hosted API? It calls `GET /v1/whoami`, which is the\n * cheapest authenticated read in the contract, and reports the principal it\n * resolved to.\n *\n * The exit code carries the verdict so a script can branch without parsing\n * prose: 0 verified, 1 not configured, 2 configured but unreachable. Those are\n * genuinely different states — \"no key\" is a setup step, while \"key rejected\"\n * is a broken setup, and collapsing them would make the command useless in CI.\n *\n * The credential is never printed. `omk-adaptorch-wpl` already scrubs it from\n * its own errors; this command additionally never echoes the configured value.\n */\n\nconst USAGE = \"Usage: omk doctor adaptorch [--json]\";\n\n/**\n * Where to obtain a key. This is the one moment in the CLI where the reader has\n * explicitly asked about AdaptOrch, so answering \"which key, from where\" here\n * is help rather than promotion. It carries its own attribution so this\n * touchpoint stays distinguishable from the README links.\n */\nconst ADAPTORCH_SIGNUP_URL = \"https://adaptorch.com/?utm_source=omk-cli&utm_medium=doctor&utm_campaign=omk#pricing\";\n\nexport interface AdaptOrchDoctorCliOverrides {\n\treadonly env?: NodeJS.ProcessEnv;\n\treadonly writeLine?: (line: string) => void;\n\t/** Test seam: replaces the injected HTTP boundary (defaults to global fetch). */\n\treadonly fetch?: AdaptOrchFetch;\n}\n\nexport interface AdaptOrchDoctorCliOutcome {\n\treadonly handled: boolean;\n\treadonly exitCode: number;\n}\n\n/** Bounded report shape. Carries no credential, URL credentials, or raw error bodies. */\ninterface AdaptOrchDoctorReport {\n\treadonly configured: boolean;\n\treadonly reachable: boolean;\n\treadonly subjectId?: string;\n\treadonly projectId?: string;\n\treadonly status?: number;\n\treadonly code?: string;\n\treadonly error?: string;\n}\n\nfunction describe(report: AdaptOrchDoctorReport): string[] {\n\tif (!report.configured) {\n\t\treturn [\n\t\t\t\"AdaptOrch: not configured\",\n\t\t\t\"  Set ADAPTORCH_API_KEY to enable it. Optionally set ADAPTORCH_API_URL.\",\n\t\t\t`  Get a key: ${ADAPTORCH_SIGNUP_URL}`,\n\t\t\t\"  AdaptOrch is a separate product; OMK does not require it.\",\n\t\t];\n\t}\n\tif (!report.reachable) {\n\t\tconst detail =\n\t\t\treport.status === undefined ? \"\" : ` (HTTP ${report.status}${report.code ? ` ${report.code}` : \"\"})`;\n\t\treturn [`AdaptOrch: unreachable${detail}`, `  ${report.error ?? \"the request did not complete\"}`];\n\t}\n\tconst scope = report.projectId ? `, project ${report.projectId}` : \"\";\n\treturn [`AdaptOrch: verified`, `  Authenticated as ${report.subjectId ?? \"(unknown subject)\"}${scope}`];\n}\n\nasync function probe(client: AdaptOrchApiClient): Promise<AdaptOrchDoctorReport> {\n\ttry {\n\t\tconst principal = await client.whoami();\n\t\treturn {\n\t\t\tconfigured: true,\n\t\t\treachable: true,\n\t\t\tsubjectId: principal.subject_id,\n\t\t\t...(principal.project_id === undefined ? {} : { projectId: principal.project_id }),\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof AdaptOrchApiError) {\n\t\t\treturn {\n\t\t\t\tconfigured: true,\n\t\t\t\treachable: false,\n\t\t\t\tstatus: error.status,\n\t\t\t\t...(error.code === undefined ? {} : { code: error.code }),\n\t\t\t\terror: error.message,\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tconfigured: true,\n\t\t\treachable: false,\n\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t};\n\t}\n}\n\nexport async function runAdaptOrchDoctorCli(\n\targs: readonly string[],\n\toverrides: AdaptOrchDoctorCliOverrides = {},\n): Promise<AdaptOrchDoctorCliOutcome> {\n\tif (args[0] !== \"doctor\" || args[1] !== \"adaptorch\") {\n\t\treturn { handled: false, exitCode: 0 };\n\t}\n\tconst writeLine = overrides.writeLine ?? ((line: string) => console.log(line));\n\n\tlet json = false;\n\tfor (const arg of args.slice(2)) {\n\t\tif (arg === \"--json\") {\n\t\t\tjson = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--help\" || arg === \"-h\") {\n\t\t\twriteLine(USAGE);\n\t\t\treturn { handled: true, exitCode: 0 };\n\t\t}\n\t\twriteLine(`Unknown option: ${arg}`);\n\t\twriteLine(USAGE);\n\t\treturn { handled: true, exitCode: 2 };\n\t}\n\n\tconst env = overrides.env ?? process.env;\n\tconst fetchImpl = overrides.fetch ?? (globalThis.fetch as unknown as AdaptOrchFetch);\n\n\tlet report: AdaptOrchDoctorReport;\n\ttry {\n\t\tconst client = createAdaptOrchApiClientFromEnv(fetchImpl, env);\n\t\treport = client ? await probe(client) : { configured: false, reachable: false };\n\t} catch (error) {\n\t\t// A configured but invalid setup (an unsafe ADAPTORCH_API_URL, for\n\t\t// example) is a broken setup, not an absent one.\n\t\treport = {\n\t\t\tconfigured: true,\n\t\t\treachable: false,\n\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t};\n\t}\n\n\tif (json) writeLine(JSON.stringify(report, null, 2));\n\telse for (const line of describe(report)) writeLine(line);\n\n\tif (!report.configured) return { handled: true, exitCode: 1 };\n\treturn { handled: true, exitCode: report.reachable ? 0 : 2 };\n}\n"]}

package/dist/commands/resource-doctor-cli.d.ts

@@ -1,5 +1,7 @@
 import { captureHostResourceSnapshot } from "../core/host-resource-snapshot.ts";
 import { type ResourceGovernorSettings } from "../core/resource-governor-settings.ts";
+import { collectResourceObservationReport, RESOURCE_REPORT_MIN_ADMISSIONS, type ResourceObservationReport } from "../core/resource-observation-report.ts";
+export { collectResourceObservationReport, RESOURCE_REPORT_MIN_ADMISSIONS, type ResourceObservationReport };
 export interface ResourceDoctorCliOverrides {
     readonly cwd?: string;
     readonly env?: NodeJS.ProcessEnv;
@@ -13,6 +15,8 @@ export interface ResourceDoctorCliOverrides {
     readonly capture?: typeof captureHostResourceSnapshot;
     /** Test seam: monotonic clock for probeDurationMs. */
     readonly now?: () => number;
+    /** Test seam: replaces local observation aggregation. */
+    readonly collectReport?: (cwd: string) => ResourceObservationReport;
 }
 export interface ResourceDoctorCliOutcome {
     readonly handled: boolean;

package/dist/commands/resource-doctor-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-doctor-cli.d.ts","sourceRoot":"","sources":["../../src/commands/resource-doctor-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAA6B,MAAM,mCAAmC,CAAC;AAE3G,OAAO,EAIN,KAAK,wBAAwB,EAE7B,MAAM,uCAAuC,CAAC;AAiB/C,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,sFAAsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;QAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;QACrD,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;KAC/C,CAAC;IACF,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,2BAA2B,CAAC;IACtD,sDAAsD;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,oBAAoB,CACzC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,GAAE,0BAA+B,GACxC,OAAO,CAAC,wBAAwB,CAAC,CAsCnC","sourcesContent":["import { captureHostResourceSnapshot, type HostResourceSnapshot } from \"../core/host-resource-snapshot.ts\";\nimport { decideResourceAdmission } from \"../core/resource-admission.ts\";\nimport {\n\tbuildResourceDoctorReport,\n\tformatResourceProbeLines,\n\tformatResourceSummaryLines,\n\ttype ResourceGovernorSettings,\n\tresolveResourceGovernorSettings,\n} from \"../core/resource-governor-settings.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\n\n/**\n * Headless resource diagnostic (OMK v0.97.x roadmap §19.2, M1/PR2):\n *\n *   omk doctor resources [--json]\n *\n * Observe-only: probes the host, evaluates the admission policy, and prints\n * either aligned human output or the bounded §19.2 JSON schema. This command\n * is the sanctioned local surface for raw capacity values (§11.3); it still\n * never prints usernames, hostnames, or paths (§6.2). The doctor probes even\n * when the governor mode is `off` because it only runs on explicit request.\n */\n\nconst USAGE = \"Usage: omk doctor resources [--json]\";\n\nexport interface ResourceDoctorCliOverrides {\n\treadonly cwd?: string;\n\treadonly env?: NodeJS.ProcessEnv;\n\treadonly writeLine?: (line: string) => void;\n\t/** Test seam: replaces settings loading (defaults to SettingsManager.create(cwd)). */\n\treadonly loadSettings?: () => {\n\t\treadonly resourceGovernor?: ResourceGovernorSettings;\n\t\treadonly configuredMaxToolConcurrency?: number;\n\t};\n\t/** Test seam: replaces the host probe. */\n\treadonly capture?: typeof captureHostResourceSnapshot;\n\t/** Test seam: monotonic clock for probeDurationMs. */\n\treadonly now?: () => number;\n}\n\nexport interface ResourceDoctorCliOutcome {\n\treadonly handled: boolean;\n\treadonly exitCode: number;\n}\n\nexport async function runResourceDoctorCli(\n\targs: readonly string[],\n\toverrides: ResourceDoctorCliOverrides = {},\n): Promise<ResourceDoctorCliOutcome> {\n\tif (args[0] !== \"doctor\" || args[1] !== \"resources\") {\n\t\treturn { handled: false, exitCode: 0 };\n\t}\n\tconst writeLine = overrides.writeLine ?? ((line: string) => console.log(line));\n\n\tconst flags = parseDoctorFlags(args.slice(2), writeLine);\n\tif (flags.exit !== null) {\n\t\treturn { handled: true, exitCode: flags.exit };\n\t}\n\tconst json = flags.json;\n\n\tconst settings = (overrides.loadSettings ?? (() => loadSettingsFromDisk(overrides.cwd)))();\n\tconst resolved = resolveResourceGovernorSettings(settings.resourceGovernor, overrides.env ?? process.env);\n\n\tconst capture = overrides.capture ?? captureHostResourceSnapshot;\n\tconst now = overrides.now ?? (() => performance.now());\n\tconst startedAt = now();\n\tconst snapshot: HostResourceSnapshot = await capture({\n\t\tcwd: overrides.cwd,\n\t\tmaxProbeMs: resolved.maxProbeMs,\n\t\tcpuSampleMs: resolved.cpuSampleMs,\n\t});\n\tconst probeDurationMs = Math.max(0, now() - startedAt);\n\n\tconst decision = decideResourceAdmission({\n\t\tsnapshot,\n\t\tconfig: resolved.admission,\n\t\tconfiguredCaps: { maxToolConcurrency: settings.configuredMaxToolConcurrency },\n\t});\n\n\tif (json) {\n\t\tconst report = buildResourceDoctorReport({ snapshot, decision, resolved, probeDurationMs });\n\t\twriteLine(JSON.stringify(report, null, 2));\n\t\treturn { handled: true, exitCode: 0 };\n\t}\n\trenderHumanReport({ writeLine, resolved, decision, snapshot, probeDurationMs });\n\treturn { handled: true, exitCode: 0 };\n}\n\nfunction parseDoctorFlags(\n\targs: readonly string[],\n\twriteLine: (line: string) => void,\n): { readonly json: boolean; readonly exit: number | null } {\n\tlet json = false;\n\tfor (const arg of args) {\n\t\tif (arg === \"--json\") {\n\t\t\tjson = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--help\" || arg === \"-h\") {\n\t\t\twriteLine(USAGE);\n\t\t\treturn { json, exit: 0 };\n\t\t}\n\t\twriteLine(`Unknown argument: ${arg}`);\n\t\twriteLine(USAGE);\n\t\treturn { json, exit: 2 };\n\t}\n\treturn { json, exit: null };\n}\n\nfunction renderHumanReport(input: {\n\treadonly writeLine: (line: string) => void;\n\treadonly resolved: ReturnType<typeof resolveResourceGovernorSettings>;\n\treadonly decision: ReturnType<typeof decideResourceAdmission>;\n\treadonly snapshot: HostResourceSnapshot;\n\treadonly probeDurationMs: number;\n}): void {\n\tconst { writeLine, resolved, decision, snapshot, probeDurationMs } = input;\n\twriteLine(\"Resource doctor\");\n\twriteLine(\"\");\n\tfor (const line of formatResourceSummaryLines(resolved.mode, decision)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\tfor (const line of formatResourceProbeLines(snapshot)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\twriteLine(`probe duration: ${Math.round(probeDurationMs)} ms`);\n\tfor (const error of resolved.errors) {\n\t\twriteLine(`settings error: ${error}`);\n\t}\n}\n\nfunction loadSettingsFromDisk(cwd: string | undefined): {\n\treadonly resourceGovernor?: ResourceGovernorSettings;\n\treadonly configuredMaxToolConcurrency?: number;\n} {\n\ttry {\n\t\tconst manager = SettingsManager.create(cwd ?? process.cwd());\n\t\treturn {\n\t\t\tresourceGovernor: manager.getResourceGovernorSettings(),\n\t\t\tconfiguredMaxToolConcurrency: manager.getAgentRuntimeSettings().maxToolConcurrency,\n\t\t};\n\t} catch {\n\t\t// A broken settings file must not block the diagnostic; defaults apply.\n\t\treturn {};\n\t}\n}\n"]}
+{"version":3,"file":"resource-doctor-cli.d.ts","sourceRoot":"","sources":["../../src/commands/resource-doctor-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAA6B,MAAM,mCAAmC,CAAC;AAE3G,OAAO,EAIN,KAAK,wBAAwB,EAE7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACN,gCAAgC,EAChC,8BAA8B,EAC9B,KAAK,yBAAyB,EAC9B,MAAM,wCAAwC,CAAC;AAGhD,OAAO,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,KAAK,yBAAyB,EAAE,CAAC;AAgB5G,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,sFAAsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;QAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;QACrD,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;KAC/C,CAAC;IACF,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,2BAA2B,CAAC;IACtD,sDAAsD;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,yBAAyB,CAAC;CACpE;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,oBAAoB,CACzC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,GAAE,0BAA+B,GACxC,OAAO,CAAC,wBAAwB,CAAC,CA4CnC","sourcesContent":["import { captureHostResourceSnapshot, type HostResourceSnapshot } from \"../core/host-resource-snapshot.ts\";\nimport { decideResourceAdmission } from \"../core/resource-admission.ts\";\nimport {\n\tbuildResourceDoctorReport,\n\tformatResourceProbeLines,\n\tformatResourceSummaryLines,\n\ttype ResourceGovernorSettings,\n\tresolveResourceGovernorSettings,\n} from \"../core/resource-governor-settings.ts\";\nimport {\n\tcollectResourceObservationReport,\n\tRESOURCE_REPORT_MIN_ADMISSIONS,\n\ttype ResourceObservationReport,\n} from \"../core/resource-observation-report.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\n\nexport { collectResourceObservationReport, RESOURCE_REPORT_MIN_ADMISSIONS, type ResourceObservationReport };\n\n/**\n * Headless resource diagnostic (OMK v0.97.x roadmap §19.2, M1/PR2):\n *\n *   omk doctor resources [--json] [--report]\n *\n * Observe-only: probes the host, evaluates the admission policy, and prints\n * either aligned human output or the bounded §19.2 JSON schema. This command\n * is the sanctioned local surface for raw capacity values (§11.3); it still\n * never prints usernames, hostnames, or paths (§6.2). The doctor probes even\n * when the governor mode is `off` because it only runs on explicit request.\n */\n\nconst USAGE = \"Usage: omk doctor resources [--json] [--report]\";\n\nexport interface ResourceDoctorCliOverrides {\n\treadonly cwd?: string;\n\treadonly env?: NodeJS.ProcessEnv;\n\treadonly writeLine?: (line: string) => void;\n\t/** Test seam: replaces settings loading (defaults to SettingsManager.create(cwd)). */\n\treadonly loadSettings?: () => {\n\t\treadonly resourceGovernor?: ResourceGovernorSettings;\n\t\treadonly configuredMaxToolConcurrency?: number;\n\t};\n\t/** Test seam: replaces the host probe. */\n\treadonly capture?: typeof captureHostResourceSnapshot;\n\t/** Test seam: monotonic clock for probeDurationMs. */\n\treadonly now?: () => number;\n\t/** Test seam: replaces local observation aggregation. */\n\treadonly collectReport?: (cwd: string) => ResourceObservationReport;\n}\n\nexport interface ResourceDoctorCliOutcome {\n\treadonly handled: boolean;\n\treadonly exitCode: number;\n}\n\nexport async function runResourceDoctorCli(\n\targs: readonly string[],\n\toverrides: ResourceDoctorCliOverrides = {},\n): Promise<ResourceDoctorCliOutcome> {\n\tif (args[0] !== \"doctor\" || args[1] !== \"resources\") {\n\t\treturn { handled: false, exitCode: 0 };\n\t}\n\tconst writeLine = overrides.writeLine ?? ((line: string) => console.log(line));\n\n\tconst flags = parseDoctorFlags(args.slice(2), writeLine);\n\tif (flags.exit !== null) {\n\t\treturn { handled: true, exitCode: flags.exit };\n\t}\n\tconst json = flags.json;\n\tif (flags.report) {\n\t\tconst report = (overrides.collectReport ?? collectResourceObservationReport)(overrides.cwd ?? process.cwd());\n\t\tif (json) writeLine(JSON.stringify(report, null, 2));\n\t\telse renderObservationReport(report, writeLine);\n\t\treturn { handled: true, exitCode: 0 };\n\t}\n\n\tconst settings = (overrides.loadSettings ?? (() => loadSettingsFromDisk(overrides.cwd)))();\n\tconst resolved = resolveResourceGovernorSettings(settings.resourceGovernor, overrides.env ?? process.env);\n\n\tconst capture = overrides.capture ?? captureHostResourceSnapshot;\n\tconst now = overrides.now ?? (() => performance.now());\n\tconst startedAt = now();\n\tconst snapshot: HostResourceSnapshot = await capture({\n\t\tcwd: overrides.cwd,\n\t\tmaxProbeMs: resolved.maxProbeMs,\n\t\tcpuSampleMs: resolved.cpuSampleMs,\n\t});\n\tconst probeDurationMs = Math.max(0, now() - startedAt);\n\n\tconst decision = decideResourceAdmission({\n\t\tsnapshot,\n\t\tconfig: resolved.admission,\n\t\tconfiguredCaps: { maxToolConcurrency: settings.configuredMaxToolConcurrency },\n\t});\n\n\tif (json) {\n\t\tconst report = buildResourceDoctorReport({ snapshot, decision, resolved, probeDurationMs });\n\t\twriteLine(JSON.stringify(report, null, 2));\n\t\treturn { handled: true, exitCode: 0 };\n\t}\n\trenderHumanReport({ writeLine, resolved, decision, snapshot, probeDurationMs });\n\treturn { handled: true, exitCode: 0 };\n}\n\nfunction parseDoctorFlags(\n\targs: readonly string[],\n\twriteLine: (line: string) => void,\n): { readonly json: boolean; readonly report: boolean; readonly exit: number | null } {\n\tlet json = false;\n\tlet report = false;\n\tfor (const arg of args) {\n\t\tif (arg === \"--json\") {\n\t\t\tjson = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--report\") {\n\t\t\treport = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--help\" || arg === \"-h\") {\n\t\t\twriteLine(USAGE);\n\t\t\treturn { json, report, exit: 0 };\n\t\t}\n\t\twriteLine(`Unknown argument: ${arg}`);\n\t\twriteLine(USAGE);\n\t\treturn { json, report, exit: 2 };\n\t}\n\treturn { json, report, exit: null };\n}\n\nfunction renderObservationReport(report: ResourceObservationReport, writeLine: (line: string) => void): void {\n\twriteLine(\"Resource observation report\");\n\twriteLine(`journals scanned: ${report.journalsScanned}${report.truncated ? \" (truncated)\" : \"\"}`);\n\twriteLine(`admission records: ${report.admissionRecords}`);\n\twriteLine(`reason-qualified records: ${report.reasonRecords}`);\n\twriteLine(\n\t\t`pressure: normal ${report.pressure.normal}, constrained ${report.pressure.constrained}, critical ${report.pressure.critical}`,\n\t);\n\twriteLine(\n\t\t`actions: allow ${report.actions.allow}, throttle ${report.actions.throttle}, defer-heavy ${report.actions[\"defer-heavy\"]}`,\n\t);\n\twriteLine(`would have throttled: ${report.wouldHaveThrottled}`);\n\twriteLine(`probe partial/timeout: ${report.probePartial}/${report.probeTimeout}`);\n\twriteLine(\n\t\t`minimum sample: ${report.reasonRecords}/${report.minimumSampleSize} (${report.minimumSampleMet ? \"met\" : \"not met\"})`,\n\t);\n\twriteLine(`reason coverage complete: ${report.reasonCoverageComplete ? \"yes\" : \"no\"}`);\n\twriteLine(\"human review: required\");\n\tif (report.diagnostics > 0) writeLine(`diagnostics: ${report.diagnostics}`);\n}\n\nfunction renderHumanReport(input: {\n\treadonly writeLine: (line: string) => void;\n\treadonly resolved: ReturnType<typeof resolveResourceGovernorSettings>;\n\treadonly decision: ReturnType<typeof decideResourceAdmission>;\n\treadonly snapshot: HostResourceSnapshot;\n\treadonly probeDurationMs: number;\n}): void {\n\tconst { writeLine, resolved, decision, snapshot, probeDurationMs } = input;\n\twriteLine(\"Resource doctor\");\n\twriteLine(\"\");\n\tfor (const line of formatResourceSummaryLines(resolved.mode, decision)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\tfor (const line of formatResourceProbeLines(snapshot)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\twriteLine(`probe duration: ${Math.round(probeDurationMs)} ms`);\n\tfor (const error of resolved.errors) {\n\t\twriteLine(`settings error: ${error}`);\n\t}\n}\n\nfunction loadSettingsFromDisk(cwd: string | undefined): {\n\treadonly resourceGovernor?: ResourceGovernorSettings;\n\treadonly configuredMaxToolConcurrency?: number;\n} {\n\ttry {\n\t\tconst manager = SettingsManager.create(cwd ?? process.cwd());\n\t\treturn {\n\t\t\tresourceGovernor: manager.getResourceGovernorSettings(),\n\t\t\tconfiguredMaxToolConcurrency: manager.getAgentRuntimeSettings().maxToolConcurrency,\n\t\t};\n\t} catch {\n\t\t// A broken settings file must not block the diagnostic; defaults apply.\n\t\treturn {};\n\t}\n}\n"]}

package/dist/commands/resource-doctor-cli.js

@@ -1,11 +1,13 @@
 import { captureHostResourceSnapshot } from "../core/host-resource-snapshot.js";
 import { decideResourceAdmission } from "../core/resource-admission.js";
 import { buildResourceDoctorReport, formatResourceProbeLines, formatResourceSummaryLines, resolveResourceGovernorSettings, } from "../core/resource-governor-settings.js";
+import { collectResourceObservationReport, RESOURCE_REPORT_MIN_ADMISSIONS, } from "../core/resource-observation-report.js";
 import { SettingsManager } from "../core/settings-manager.js";
+export { collectResourceObservationReport, RESOURCE_REPORT_MIN_ADMISSIONS };
 /**
  * Headless resource diagnostic (OMK v0.97.x roadmap §19.2, M1/PR2):
  *
- *   omk doctor resources [--json]
+ *   omk doctor resources [--json] [--report]
  *
  * Observe-only: probes the host, evaluates the admission policy, and prints
  * either aligned human output or the bounded §19.2 JSON schema. This command
@@ -13,7 +15,7 @@ import { SettingsManager } from "../core/settings-manager.js";
  * never prints usernames, hostnames, or paths (§6.2). The doctor probes even
  * when the governor mode is `off` because it only runs on explicit request.
  */
-const USAGE = "Usage: omk doctor resources [--json]";
+const USAGE = "Usage: omk doctor resources [--json] [--report]";
 export async function runResourceDoctorCli(args, overrides = {}) {
     if (args[0] !== "doctor" || args[1] !== "resources") {
         return { handled: false, exitCode: 0 };
@@ -24,6 +26,14 @@ export async function runResourceDoctorCli(args, overrides = {}) {
         return { handled: true, exitCode: flags.exit };
     }
     const json = flags.json;
+    if (flags.report) {
+        const report = (overrides.collectReport ?? collectResourceObservationReport)(overrides.cwd ?? process.cwd());
+        if (json)
+            writeLine(JSON.stringify(report, null, 2));
+        else
+            renderObservationReport(report, writeLine);
+        return { handled: true, exitCode: 0 };
+    }
     const settings = (overrides.loadSettings ?? (() => loadSettingsFromDisk(overrides.cwd)))();
     const resolved = resolveResourceGovernorSettings(settings.resourceGovernor, overrides.env ?? process.env);
     const capture = overrides.capture ?? captureHostResourceSnapshot;
@@ -50,20 +60,40 @@ export async function runResourceDoctorCli(args, overrides = {}) {
 }
 function parseDoctorFlags(args, writeLine) {
     let json = false;
+    let report = false;
     for (const arg of args) {
         if (arg === "--json") {
             json = true;
             continue;
         }
+        if (arg === "--report") {
+            report = true;
+            continue;
+        }
         if (arg === "--help" || arg === "-h") {
             writeLine(USAGE);
-            return { json, exit: 0 };
+            return { json, report, exit: 0 };
         }
         writeLine(`Unknown argument: ${arg}`);
         writeLine(USAGE);
-        return { json, exit: 2 };
+        return { json, report, exit: 2 };
     }
-    return { json, exit: null };
+    return { json, report, exit: null };
+}
+function renderObservationReport(report, writeLine) {
+    writeLine("Resource observation report");
+    writeLine(`journals scanned: ${report.journalsScanned}${report.truncated ? " (truncated)" : ""}`);
+    writeLine(`admission records: ${report.admissionRecords}`);
+    writeLine(`reason-qualified records: ${report.reasonRecords}`);
+    writeLine(`pressure: normal ${report.pressure.normal}, constrained ${report.pressure.constrained}, critical ${report.pressure.critical}`);
+    writeLine(`actions: allow ${report.actions.allow}, throttle ${report.actions.throttle}, defer-heavy ${report.actions["defer-heavy"]}`);
+    writeLine(`would have throttled: ${report.wouldHaveThrottled}`);
+    writeLine(`probe partial/timeout: ${report.probePartial}/${report.probeTimeout}`);
+    writeLine(`minimum sample: ${report.reasonRecords}/${report.minimumSampleSize} (${report.minimumSampleMet ? "met" : "not met"})`);
+    writeLine(`reason coverage complete: ${report.reasonCoverageComplete ? "yes" : "no"}`);
+    writeLine("human review: required");
+    if (report.diagnostics > 0)
+        writeLine(`diagnostics: ${report.diagnostics}`);
 }
 function renderHumanReport(input) {
     const { writeLine, resolved, decision, snapshot, probeDurationMs } = input;

package/dist/commands/resource-doctor-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-doctor-cli.js","sourceRoot":"","sources":["../../src/commands/resource-doctor-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAA6B,MAAM,mCAAmC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EACN,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAE1B,+BAA+B,GAC/B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D;;;;;;;;;;GAUG;AAEH,MAAM,KAAK,GAAG,sCAAsC,CAAC;AAsBrD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,IAAuB,EACvB,SAAS,GAA+B,EAAE,EACN;IACpC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAExB,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAE1G,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,2BAA2B,CAAC;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAyB,MAAM,OAAO,CAAC;QACpD,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACxC,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,SAAS;QAC1B,cAAc,EAAE,EAAE,kBAAkB,EAAE,QAAQ,CAAC,4BAA4B,EAAE;KAC7E,CAAC,CAAC;IAEH,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5F,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IACD,iBAAiB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAAA,CACtC;AAED,SAAS,gBAAgB,CACxB,IAAuB,EACvB,SAAiC,EAC0B;IAC3D,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACV,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1B,CAAC;QACD,SAAS,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QACtC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAAA,CAC5B;AAED,SAAS,iBAAiB,CAAC,KAM1B,EAAQ;IACR,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;IAC3E,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,0BAA0B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxE,SAAS,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,SAAS,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,SAAS,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrC,SAAS,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;AAAA,CACD;AAED,SAAS,oBAAoB,CAAC,GAAuB,EAGnD;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,OAAO;YACN,gBAAgB,EAAE,OAAO,CAAC,2BAA2B,EAAE;YACvD,4BAA4B,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC,kBAAkB;SAClF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,wEAAwE;QACxE,OAAO,EAAE,CAAC;IACX,CAAC;AAAA,CACD","sourcesContent":["import { captureHostResourceSnapshot, type HostResourceSnapshot } from \"../core/host-resource-snapshot.ts\";\nimport { decideResourceAdmission } from \"../core/resource-admission.ts\";\nimport {\n\tbuildResourceDoctorReport,\n\tformatResourceProbeLines,\n\tformatResourceSummaryLines,\n\ttype ResourceGovernorSettings,\n\tresolveResourceGovernorSettings,\n} from \"../core/resource-governor-settings.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\n\n/**\n * Headless resource diagnostic (OMK v0.97.x roadmap §19.2, M1/PR2):\n *\n *   omk doctor resources [--json]\n *\n * Observe-only: probes the host, evaluates the admission policy, and prints\n * either aligned human output or the bounded §19.2 JSON schema. This command\n * is the sanctioned local surface for raw capacity values (§11.3); it still\n * never prints usernames, hostnames, or paths (§6.2). The doctor probes even\n * when the governor mode is `off` because it only runs on explicit request.\n */\n\nconst USAGE = \"Usage: omk doctor resources [--json]\";\n\nexport interface ResourceDoctorCliOverrides {\n\treadonly cwd?: string;\n\treadonly env?: NodeJS.ProcessEnv;\n\treadonly writeLine?: (line: string) => void;\n\t/** Test seam: replaces settings loading (defaults to SettingsManager.create(cwd)). */\n\treadonly loadSettings?: () => {\n\t\treadonly resourceGovernor?: ResourceGovernorSettings;\n\t\treadonly configuredMaxToolConcurrency?: number;\n\t};\n\t/** Test seam: replaces the host probe. */\n\treadonly capture?: typeof captureHostResourceSnapshot;\n\t/** Test seam: monotonic clock for probeDurationMs. */\n\treadonly now?: () => number;\n}\n\nexport interface ResourceDoctorCliOutcome {\n\treadonly handled: boolean;\n\treadonly exitCode: number;\n}\n\nexport async function runResourceDoctorCli(\n\targs: readonly string[],\n\toverrides: ResourceDoctorCliOverrides = {},\n): Promise<ResourceDoctorCliOutcome> {\n\tif (args[0] !== \"doctor\" || args[1] !== \"resources\") {\n\t\treturn { handled: false, exitCode: 0 };\n\t}\n\tconst writeLine = overrides.writeLine ?? ((line: string) => console.log(line));\n\n\tconst flags = parseDoctorFlags(args.slice(2), writeLine);\n\tif (flags.exit !== null) {\n\t\treturn { handled: true, exitCode: flags.exit };\n\t}\n\tconst json = flags.json;\n\n\tconst settings = (overrides.loadSettings ?? (() => loadSettingsFromDisk(overrides.cwd)))();\n\tconst resolved = resolveResourceGovernorSettings(settings.resourceGovernor, overrides.env ?? process.env);\n\n\tconst capture = overrides.capture ?? captureHostResourceSnapshot;\n\tconst now = overrides.now ?? (() => performance.now());\n\tconst startedAt = now();\n\tconst snapshot: HostResourceSnapshot = await capture({\n\t\tcwd: overrides.cwd,\n\t\tmaxProbeMs: resolved.maxProbeMs,\n\t\tcpuSampleMs: resolved.cpuSampleMs,\n\t});\n\tconst probeDurationMs = Math.max(0, now() - startedAt);\n\n\tconst decision = decideResourceAdmission({\n\t\tsnapshot,\n\t\tconfig: resolved.admission,\n\t\tconfiguredCaps: { maxToolConcurrency: settings.configuredMaxToolConcurrency },\n\t});\n\n\tif (json) {\n\t\tconst report = buildResourceDoctorReport({ snapshot, decision, resolved, probeDurationMs });\n\t\twriteLine(JSON.stringify(report, null, 2));\n\t\treturn { handled: true, exitCode: 0 };\n\t}\n\trenderHumanReport({ writeLine, resolved, decision, snapshot, probeDurationMs });\n\treturn { handled: true, exitCode: 0 };\n}\n\nfunction parseDoctorFlags(\n\targs: readonly string[],\n\twriteLine: (line: string) => void,\n): { readonly json: boolean; readonly exit: number | null } {\n\tlet json = false;\n\tfor (const arg of args) {\n\t\tif (arg === \"--json\") {\n\t\t\tjson = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--help\" || arg === \"-h\") {\n\t\t\twriteLine(USAGE);\n\t\t\treturn { json, exit: 0 };\n\t\t}\n\t\twriteLine(`Unknown argument: ${arg}`);\n\t\twriteLine(USAGE);\n\t\treturn { json, exit: 2 };\n\t}\n\treturn { json, exit: null };\n}\n\nfunction renderHumanReport(input: {\n\treadonly writeLine: (line: string) => void;\n\treadonly resolved: ReturnType<typeof resolveResourceGovernorSettings>;\n\treadonly decision: ReturnType<typeof decideResourceAdmission>;\n\treadonly snapshot: HostResourceSnapshot;\n\treadonly probeDurationMs: number;\n}): void {\n\tconst { writeLine, resolved, decision, snapshot, probeDurationMs } = input;\n\twriteLine(\"Resource doctor\");\n\twriteLine(\"\");\n\tfor (const line of formatResourceSummaryLines(resolved.mode, decision)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\tfor (const line of formatResourceProbeLines(snapshot)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\twriteLine(`probe duration: ${Math.round(probeDurationMs)} ms`);\n\tfor (const error of resolved.errors) {\n\t\twriteLine(`settings error: ${error}`);\n\t}\n}\n\nfunction loadSettingsFromDisk(cwd: string | undefined): {\n\treadonly resourceGovernor?: ResourceGovernorSettings;\n\treadonly configuredMaxToolConcurrency?: number;\n} {\n\ttry {\n\t\tconst manager = SettingsManager.create(cwd ?? process.cwd());\n\t\treturn {\n\t\t\tresourceGovernor: manager.getResourceGovernorSettings(),\n\t\t\tconfiguredMaxToolConcurrency: manager.getAgentRuntimeSettings().maxToolConcurrency,\n\t\t};\n\t} catch {\n\t\t// A broken settings file must not block the diagnostic; defaults apply.\n\t\treturn {};\n\t}\n}\n"]}
+{"version":3,"file":"resource-doctor-cli.js","sourceRoot":"","sources":["../../src/commands/resource-doctor-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAA6B,MAAM,mCAAmC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EACN,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAE1B,+BAA+B,GAC/B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACN,gCAAgC,EAChC,8BAA8B,GAE9B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,gCAAgC,EAAE,8BAA8B,EAAkC,CAAC;AAE5G;;;;;;;;;;GAUG;AAEH,MAAM,KAAK,GAAG,iDAAiD,CAAC;AAwBhE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,IAAuB,EACvB,SAAS,GAA+B,EAAE,EACN;IACpC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,IAAI,gCAAgC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7G,IAAI,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;YAChD,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAE1G,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,2BAA2B,CAAC;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAyB,MAAM,OAAO,CAAC;QACpD,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACxC,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,SAAS;QAC1B,cAAc,EAAE,EAAE,kBAAkB,EAAE,QAAQ,CAAC,4BAA4B,EAAE;KAC7E,CAAC,CAAC;IAEH,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5F,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IACD,iBAAiB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAAA,CACtC;AAED,SAAS,gBAAgB,CACxB,IAAuB,EACvB,SAAiC,EACoD;IACrF,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACV,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACV,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClC,CAAC;QACD,SAAS,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QACtC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAAA,CACpC;AAED,SAAS,uBAAuB,CAAC,MAAiC,EAAE,SAAiC,EAAQ;IAC5G,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACzC,SAAS,CAAC,qBAAqB,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,sBAAsB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3D,SAAS,CAAC,6BAA6B,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/D,SAAS,CACR,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,iBAAiB,MAAM,CAAC,QAAQ,CAAC,WAAW,cAAc,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAC9H,CAAC;IACF,SAAS,CACR,kBAAkB,MAAM,CAAC,OAAO,CAAC,KAAK,cAAc,MAAM,CAAC,OAAO,CAAC,QAAQ,iBAAiB,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAC3H,CAAC;IACF,SAAS,CAAC,yBAAyB,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAChE,SAAS,CAAC,0BAA0B,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAClF,SAAS,CACR,mBAAmB,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,CACtH,CAAC;IACF,SAAS,CAAC,6BAA6B,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvF,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;QAAE,SAAS,CAAC,gBAAgB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,iBAAiB,CAAC,KAM1B,EAAQ;IACR,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;IAC3E,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,0BAA0B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxE,SAAS,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,SAAS,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,SAAS,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrC,SAAS,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;AAAA,CACD;AAED,SAAS,oBAAoB,CAAC,GAAuB,EAGnD;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,OAAO;YACN,gBAAgB,EAAE,OAAO,CAAC,2BAA2B,EAAE;YACvD,4BAA4B,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC,kBAAkB;SAClF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,wEAAwE;QACxE,OAAO,EAAE,CAAC;IACX,CAAC;AAAA,CACD","sourcesContent":["import { captureHostResourceSnapshot, type HostResourceSnapshot } from \"../core/host-resource-snapshot.ts\";\nimport { decideResourceAdmission } from \"../core/resource-admission.ts\";\nimport {\n\tbuildResourceDoctorReport,\n\tformatResourceProbeLines,\n\tformatResourceSummaryLines,\n\ttype ResourceGovernorSettings,\n\tresolveResourceGovernorSettings,\n} from \"../core/resource-governor-settings.ts\";\nimport {\n\tcollectResourceObservationReport,\n\tRESOURCE_REPORT_MIN_ADMISSIONS,\n\ttype ResourceObservationReport,\n} from \"../core/resource-observation-report.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\n\nexport { collectResourceObservationReport, RESOURCE_REPORT_MIN_ADMISSIONS, type ResourceObservationReport };\n\n/**\n * Headless resource diagnostic (OMK v0.97.x roadmap §19.2, M1/PR2):\n *\n *   omk doctor resources [--json] [--report]\n *\n * Observe-only: probes the host, evaluates the admission policy, and prints\n * either aligned human output or the bounded §19.2 JSON schema. This command\n * is the sanctioned local surface for raw capacity values (§11.3); it still\n * never prints usernames, hostnames, or paths (§6.2). The doctor probes even\n * when the governor mode is `off` because it only runs on explicit request.\n */\n\nconst USAGE = \"Usage: omk doctor resources [--json] [--report]\";\n\nexport interface ResourceDoctorCliOverrides {\n\treadonly cwd?: string;\n\treadonly env?: NodeJS.ProcessEnv;\n\treadonly writeLine?: (line: string) => void;\n\t/** Test seam: replaces settings loading (defaults to SettingsManager.create(cwd)). */\n\treadonly loadSettings?: () => {\n\t\treadonly resourceGovernor?: ResourceGovernorSettings;\n\t\treadonly configuredMaxToolConcurrency?: number;\n\t};\n\t/** Test seam: replaces the host probe. */\n\treadonly capture?: typeof captureHostResourceSnapshot;\n\t/** Test seam: monotonic clock for probeDurationMs. */\n\treadonly now?: () => number;\n\t/** Test seam: replaces local observation aggregation. */\n\treadonly collectReport?: (cwd: string) => ResourceObservationReport;\n}\n\nexport interface ResourceDoctorCliOutcome {\n\treadonly handled: boolean;\n\treadonly exitCode: number;\n}\n\nexport async function runResourceDoctorCli(\n\targs: readonly string[],\n\toverrides: ResourceDoctorCliOverrides = {},\n): Promise<ResourceDoctorCliOutcome> {\n\tif (args[0] !== \"doctor\" || args[1] !== \"resources\") {\n\t\treturn { handled: false, exitCode: 0 };\n\t}\n\tconst writeLine = overrides.writeLine ?? ((line: string) => console.log(line));\n\n\tconst flags = parseDoctorFlags(args.slice(2), writeLine);\n\tif (flags.exit !== null) {\n\t\treturn { handled: true, exitCode: flags.exit };\n\t}\n\tconst json = flags.json;\n\tif (flags.report) {\n\t\tconst report = (overrides.collectReport ?? collectResourceObservationReport)(overrides.cwd ?? process.cwd());\n\t\tif (json) writeLine(JSON.stringify(report, null, 2));\n\t\telse renderObservationReport(report, writeLine);\n\t\treturn { handled: true, exitCode: 0 };\n\t}\n\n\tconst settings = (overrides.loadSettings ?? (() => loadSettingsFromDisk(overrides.cwd)))();\n\tconst resolved = resolveResourceGovernorSettings(settings.resourceGovernor, overrides.env ?? process.env);\n\n\tconst capture = overrides.capture ?? captureHostResourceSnapshot;\n\tconst now = overrides.now ?? (() => performance.now());\n\tconst startedAt = now();\n\tconst snapshot: HostResourceSnapshot = await capture({\n\t\tcwd: overrides.cwd,\n\t\tmaxProbeMs: resolved.maxProbeMs,\n\t\tcpuSampleMs: resolved.cpuSampleMs,\n\t});\n\tconst probeDurationMs = Math.max(0, now() - startedAt);\n\n\tconst decision = decideResourceAdmission({\n\t\tsnapshot,\n\t\tconfig: resolved.admission,\n\t\tconfiguredCaps: { maxToolConcurrency: settings.configuredMaxToolConcurrency },\n\t});\n\n\tif (json) {\n\t\tconst report = buildResourceDoctorReport({ snapshot, decision, resolved, probeDurationMs });\n\t\twriteLine(JSON.stringify(report, null, 2));\n\t\treturn { handled: true, exitCode: 0 };\n\t}\n\trenderHumanReport({ writeLine, resolved, decision, snapshot, probeDurationMs });\n\treturn { handled: true, exitCode: 0 };\n}\n\nfunction parseDoctorFlags(\n\targs: readonly string[],\n\twriteLine: (line: string) => void,\n): { readonly json: boolean; readonly report: boolean; readonly exit: number | null } {\n\tlet json = false;\n\tlet report = false;\n\tfor (const arg of args) {\n\t\tif (arg === \"--json\") {\n\t\t\tjson = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--report\") {\n\t\t\treport = true;\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--help\" || arg === \"-h\") {\n\t\t\twriteLine(USAGE);\n\t\t\treturn { json, report, exit: 0 };\n\t\t}\n\t\twriteLine(`Unknown argument: ${arg}`);\n\t\twriteLine(USAGE);\n\t\treturn { json, report, exit: 2 };\n\t}\n\treturn { json, report, exit: null };\n}\n\nfunction renderObservationReport(report: ResourceObservationReport, writeLine: (line: string) => void): void {\n\twriteLine(\"Resource observation report\");\n\twriteLine(`journals scanned: ${report.journalsScanned}${report.truncated ? \" (truncated)\" : \"\"}`);\n\twriteLine(`admission records: ${report.admissionRecords}`);\n\twriteLine(`reason-qualified records: ${report.reasonRecords}`);\n\twriteLine(\n\t\t`pressure: normal ${report.pressure.normal}, constrained ${report.pressure.constrained}, critical ${report.pressure.critical}`,\n\t);\n\twriteLine(\n\t\t`actions: allow ${report.actions.allow}, throttle ${report.actions.throttle}, defer-heavy ${report.actions[\"defer-heavy\"]}`,\n\t);\n\twriteLine(`would have throttled: ${report.wouldHaveThrottled}`);\n\twriteLine(`probe partial/timeout: ${report.probePartial}/${report.probeTimeout}`);\n\twriteLine(\n\t\t`minimum sample: ${report.reasonRecords}/${report.minimumSampleSize} (${report.minimumSampleMet ? \"met\" : \"not met\"})`,\n\t);\n\twriteLine(`reason coverage complete: ${report.reasonCoverageComplete ? \"yes\" : \"no\"}`);\n\twriteLine(\"human review: required\");\n\tif (report.diagnostics > 0) writeLine(`diagnostics: ${report.diagnostics}`);\n}\n\nfunction renderHumanReport(input: {\n\treadonly writeLine: (line: string) => void;\n\treadonly resolved: ReturnType<typeof resolveResourceGovernorSettings>;\n\treadonly decision: ReturnType<typeof decideResourceAdmission>;\n\treadonly snapshot: HostResourceSnapshot;\n\treadonly probeDurationMs: number;\n}): void {\n\tconst { writeLine, resolved, decision, snapshot, probeDurationMs } = input;\n\twriteLine(\"Resource doctor\");\n\twriteLine(\"\");\n\tfor (const line of formatResourceSummaryLines(resolved.mode, decision)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\tfor (const line of formatResourceProbeLines(snapshot)) {\n\t\twriteLine(line);\n\t}\n\twriteLine(\"\");\n\twriteLine(`probe duration: ${Math.round(probeDurationMs)} ms`);\n\tfor (const error of resolved.errors) {\n\t\twriteLine(`settings error: ${error}`);\n\t}\n}\n\nfunction loadSettingsFromDisk(cwd: string | undefined): {\n\treadonly resourceGovernor?: ResourceGovernorSettings;\n\treadonly configuredMaxToolConcurrency?: number;\n} {\n\ttry {\n\t\tconst manager = SettingsManager.create(cwd ?? process.cwd());\n\t\treturn {\n\t\t\tresourceGovernor: manager.getResourceGovernorSettings(),\n\t\t\tconfiguredMaxToolConcurrency: manager.getAgentRuntimeSettings().maxToolConcurrency,\n\t\t};\n\t} catch {\n\t\t// A broken settings file must not block the diagnostic; defaults apply.\n\t\treturn {};\n\t}\n}\n"]}

package/dist/core/adaptorch-bridge.d.ts

@@ -1,13 +1,12 @@
 /**
  * Reasoning-router AdaptOrch advisory bridge (Goal 009 Lane B).
  *
- * A default-off, advisory-only primitive for a future reasoning-router hint
- * source. This module is intentionally NOT wired into agent-session.ts; it only
- * implements the bridge's payload/result schema, sanitize/validate helpers, TTL
- * cache, budget counter, circuit breaker, and timeout wrapper around a
- * caller-injected advisory function. A future lane decides how (or whether) to
- * fuse a returned hint into a resolved ThinkingLevel and to actually call this
- * module from agent-session.ts.
+ * A default-off, advisory-only primitive wired into AgentSession's v4 resolver.
+ * AgentSession reads only the bridge's bounded cache and uses a caller-injected
+ * advisory function for refresh; the current production transport is a no-op,
+ * so it returns no hint. This module owns payload/result validation, TTL cache,
+ * budget counter, circuit breaker, and timeout handling. It never calls an MCP
+ * transport directly or receives execution authority.
  *
  * Grounded in the read-first plan at
  * .omk/goals/008-reasoning-router-advanced-accuracy-plan/laneC-privacy-adaptorch.md
@@ -18,18 +17,17 @@
  *  - The router's turn-start path is synchronous and I/O-free today (plan
  *    4.4). This module never calls an MCP transport directly and exposes a
  *    synchronous, cache-read-only accessor (`getFreshHint`) plus a
- *    fire-and-forget refresh (`requestRefresh`) so a future integration can
- *    never block or await this module inline on the turn-start path.
+ *    fire-and-forget refresh (`requestRefresh`) so the AgentSession integration
+ *    never blocks or awaits advisory I/O on the turn-start path.
  *  - The real, documented AdaptOrch tool surface has no confidence or
  *    reasoning-level field (plan 4.3); this module's inbound result type
  *    (`AdaptorchAdvisoryResult`) therefore only carries a locally-relevant
  *    `taskClass` and a `confidenceBand` - both closed enums - never a raw
- *    numeric confidence or a `ThinkingLevel` value. Fusing a hint into a
- *    resolved level is out of scope for this module.
+ *    numeric confidence or a `ThinkingLevel` value. AgentSession owns the
+ *    bounded fusion from this advisory shape into the v4 resolver.
  *  - No product source is imported here. `AdaptorchTaskClass` /
  *    `AdaptorchLaneType` intentionally mirror the v4 task/lane unions by
- *    value, not by import, so this bridge remains isolated until a future
- *    wiring lane deliberately connects it to the router.
+ *    value, while AgentSession adapts them at the integration boundary.
  *  - Every outbound/inbound field is a closed enum, a boolean, or a bounded
  *    integer, derived from local features only. There is structurally no
  *    field shaped to carry prompt text, a prompt hash, a file/working-

package/dist/core/adaptorch-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adaptorch-bridge.d.ts","sourceRoot":"","sources":["../../src/core/adaptorch-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEnH,6EAA6E;AAC7E,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEtG,4FAA4F;AAC5F,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtE,0GAA0G;AAC1G,MAAM,MAAM,uBAAuB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEhE,wDAAwD;AACxD,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE/D,gGAAgG;AAChG,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;CACjD;AA2DD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM9D;AA4BD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CA8CzF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAkBzF;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iCAAiC,iEAAkE,CAAC;AAEjH,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAiB3F;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK3D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,yBAAyB,CAGtF;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAEjG,eAAO,MAAM,mBAAmB,EAAE,sBA6BjC,CAAC;AAeF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;CAa5B,CAAC;AAEX;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,oGAAoG;IACpG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,iEAAiE;IACjE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC/B;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,GAAG,IAAI,CAAC;IAC/E;;;;OAIG;IACH,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACvD;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IACnF,4FAA4F;IAC5F,QAAQ,IAAI,oBAAoB,CAAC;CACjC;AAqJD,mGAAmG;AACnG,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAEpF","sourcesContent":["/**\n * Reasoning-router AdaptOrch advisory bridge (Goal 009 Lane B).\n *\n * A default-off, advisory-only primitive for a future reasoning-router hint\n * source. This module is intentionally NOT wired into agent-session.ts; it only\n * implements the bridge's payload/result schema, sanitize/validate helpers, TTL\n * cache, budget counter, circuit breaker, and timeout wrapper around a\n * caller-injected advisory function. A future lane decides how (or whether) to\n * fuse a returned hint into a resolved ThinkingLevel and to actually call this\n * module from agent-session.ts.\n *\n * Grounded in the read-first plan at\n * .omk/goals/008-reasoning-router-advanced-accuracy-plan/laneC-privacy-adaptorch.md\n * (Part B, sections 4.1-4.11) and the real AdaptOrch MCP tool surface\n * documented in packages/adaptorch-wpl/src/adaptorch-client.ts. Key\n * constraints carried over from that plan:\n *\n *  - The router's turn-start path is synchronous and I/O-free today (plan\n *    4.4). This module never calls an MCP transport directly and exposes a\n *    synchronous, cache-read-only accessor (`getFreshHint`) plus a\n *    fire-and-forget refresh (`requestRefresh`) so a future integration can\n *    never block or await this module inline on the turn-start path.\n *  - The real, documented AdaptOrch tool surface has no confidence or\n *    reasoning-level field (plan 4.3); this module's inbound result type\n *    (`AdaptorchAdvisoryResult`) therefore only carries a locally-relevant\n *    `taskClass` and a `confidenceBand` - both closed enums - never a raw\n *    numeric confidence or a `ThinkingLevel` value. Fusing a hint into a\n *    resolved level is out of scope for this module.\n *  - No product source is imported here. `AdaptorchTaskClass` /\n *    `AdaptorchLaneType` intentionally mirror the v4 task/lane unions by\n *    value, not by import, so this bridge remains isolated until a future\n *    wiring lane deliberately connects it to the router.\n *  - Every outbound/inbound field is a closed enum, a boolean, or a bounded\n *    integer, derived from local features only. There is structurally no\n *    field shaped to carry prompt text, a prompt hash, a file/working-\n *    directory path, a model/provider identifier, a session/user identifier,\n *    a tool name, or hook output - the sanitize/validate helpers below also\n *    reject any candidate object exposing such a field by name, and reject\n *    any key outside the exact closed schema, so a hand-built or forged\n *    payload can never smuggle one through either type.\n *  - The router-bridge tool allowlist (`ADAPTORCH_READONLY_TOOL_ALLOWLIST`)\n *    only ever contains the two read/local AdaptOrch tools the plan\n *    identifies as in scope (the session-start capabilities probe and the\n *    per-consult topology-classification call, plan 4.2/4.6); the\n *    run-submission and run-cancellation tools (and any other mutating\n *    tool) can never appear in it, checked both by an exact-value test and\n *    by `looksMutatingToolName`'s verb-segment guard.\n *\n * Pure aside from `Date.now`/`setTimeout` (both injectable/wrapped so tests\n * never depend on real wall-clock time or a real MCP call).\n */\n\n/** Closed set of task classes. Mirrors the v4 task-class union by value (see file header). */\nexport type AdaptorchTaskClass = \"trivial\" | \"simple-edit\" | \"code-gen\" | \"debug\" | \"refactor\" | \"review\" | \"plan\";\n\n/** Closed set of subagent lane types. Mirrors the v4 lane union by value. */\nexport type AdaptorchLaneType = \"planner\" | \"security\" | \"explorer\" | \"coder\" | \"reviewer\" | \"tester\";\n\n/** Local top1-vs-runner-up score-margin bucket (plan 4.5 ConsultPayloadV1.marginBucket). */\nexport type AdaptorchMarginBucket = \"tie\" | \"low\" | \"medium\" | \"high\";\n\n/** Locally-derived confidence band for a returned hint. Never a raw network-supplied float (plan 4.3). */\nexport type AdaptorchConfidenceBand = \"low\" | \"medium\" | \"high\";\n\n/** floor(log2(trimmedPromptLen+1)) clamped to [0,7]. */\nexport type AdaptorchLenBucket = 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7;\n\n/** Context-pressure band 0..3 - same bucketing as agent-session.ts's _computePressureBucket. */\nexport type AdaptorchPressureBucket = 0 | 1 | 2 | 3;\n\n/**\n * Outbound advisory request (plan 4.5, field names adapted for this lane's\n * assignment: taskClass/runnerUp/marginBucket/lenBucket/hadFence/hadDiff/\n * pressureBucket/laneType). Every field is a closed enum, a boolean, or a\n * bounded integer built from local classifier features only. Structurally\n * excludes prompt text/hash, file paths, model/provider/session\n * identifiers, tool names, and hook output - there is no field shaped to\n * carry any of those.\n */\nexport interface AdaptorchConsultPayload {\n\treadonly schemaVersion: 1;\n\treadonly taskClass: AdaptorchTaskClass;\n\treadonly runnerUp: AdaptorchTaskClass;\n\treadonly marginBucket: AdaptorchMarginBucket;\n\treadonly lenBucket: AdaptorchLenBucket;\n\treadonly hadFence: boolean;\n\treadonly hadDiff: boolean;\n\treadonly pressureBucket: AdaptorchPressureBucket;\n\treadonly laneType?: AdaptorchLaneType;\n}\n\n/**\n * Inbound advisory result after local sanitation (plan 4.3, corrected\n * schema). `confidenceBand` is always synthesized/validated locally - the\n * real AdaptOrch tool contract carries no confidence or effort-level field,\n * so this type never trusts a raw numeric confidence from the advisory\n * function.\n */\nexport interface AdaptorchAdvisoryResult {\n\treadonly schemaVersion: 1;\n\treadonly taskClass: AdaptorchTaskClass;\n\treadonly confidenceBand: AdaptorchConfidenceBand;\n}\n\nconst TASK_CLASSES: readonly AdaptorchTaskClass[] = [\n\t\"trivial\",\n\t\"simple-edit\",\n\t\"code-gen\",\n\t\"debug\",\n\t\"refactor\",\n\t\"review\",\n\t\"plan\",\n];\nconst TASK_CLASS_SET: ReadonlySet<string> = new Set(TASK_CLASSES);\n\nconst LANE_TYPES: readonly AdaptorchLaneType[] = [\"planner\", \"security\", \"explorer\", \"coder\", \"reviewer\", \"tester\"];\nconst LANE_TYPE_SET: ReadonlySet<string> = new Set(LANE_TYPES);\n\nconst MARGIN_BUCKETS: readonly AdaptorchMarginBucket[] = [\"tie\", \"low\", \"medium\", \"high\"];\nconst MARGIN_BUCKET_SET: ReadonlySet<string> = new Set(MARGIN_BUCKETS);\n\nconst CONFIDENCE_BANDS: readonly AdaptorchConfidenceBand[] = [\"low\", \"medium\", \"high\"];\nconst CONFIDENCE_BAND_SET: ReadonlySet<string> = new Set(CONFIDENCE_BANDS);\n\nconst CONSULT_PAYLOAD_KEYS: ReadonlySet<string> = new Set([\n\t\"schemaVersion\",\n\t\"taskClass\",\n\t\"runnerUp\",\n\t\"marginBucket\",\n\t\"lenBucket\",\n\t\"hadFence\",\n\t\"hadDiff\",\n\t\"pressureBucket\",\n\t\"laneType\",\n]);\n\nconst ADVISORY_RESULT_KEYS: ReadonlySet<string> = new Set([\"schemaVersion\", \"taskClass\", \"confidenceBand\"]);\n\n/**\n * Field-name markers that must never appear on a payload or result object,\n * checked case-insensitively as a substring of every own key. This is\n * defense-in-depth alongside the exact-key allowlist below: even a candidate\n * that otherwise has every required field still fails if it also carries a\n * field shaped like a stored prompt, hash, path, model/provider identifier,\n * session identifier, tool name, or hook output.\n */\nconst FORBIDDEN_KEY_SUBSTRINGS: readonly string[] = [\n\t\"prompt\",\n\t\"hash\",\n\t\"path\",\n\t\"model\",\n\t\"session\",\n\t\"tool\",\n\t\"hook\",\n\t\"provider\",\n];\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/**\n * True if any own key of `record` contains a forbidden field-name marker\n * (case-insensitive). Typed `object` rather than `Record<string, unknown>` so\n * callers (including tests) can pass any concrete object shape - named\n * interface, ad-hoc literal, or an already-`Record`-typed value - without a\n * missing-index-signature type error; only `Object.keys` is used internally,\n * which accepts any `object`.\n */\nexport function containsForbiddenField(record: object): boolean {\n\tfor (const key of Object.keys(record)) {\n\t\tconst lowerKey = key.toLowerCase();\n\t\tif (FORBIDDEN_KEY_SUBSTRINGS.some((needle) => lowerKey.includes(needle))) return true;\n\t}\n\treturn false;\n}\n\nfunction hasOnlyAllowedKeys(record: Record<string, unknown>, allowed: ReadonlySet<string>): boolean {\n\treturn Object.keys(record).every((key) => allowed.has(key));\n}\n\nfunction clampInt(value: number, min: number, max: number): number {\n\tconst truncated = Number.isFinite(value) ? Math.trunc(value) : min;\n\tif (truncated < min) return min;\n\tif (truncated > max) return max;\n\treturn truncated;\n}\n\nfunction clampLenBucket(value: number): AdaptorchLenBucket {\n\treturn clampInt(value, 0, 7) as AdaptorchLenBucket;\n}\n\nfunction clampPressureBucket(value: number): AdaptorchPressureBucket {\n\treturn clampInt(value, 0, 3) as AdaptorchPressureBucket;\n}\n\n/** `value ?? fallback`, coerced to an integer and floored at `min` (used for config, not untrusted payloads). */\nfunction boundedIntOrDefault(value: number | undefined, fallback: number, min: number): number {\n\tconst raw = value ?? fallback;\n\tif (!Number.isFinite(raw)) return fallback;\n\treturn Math.max(min, Math.trunc(raw));\n}\n\n/**\n * Sanitize/validate an outbound advisory request. Returns `null` (never\n * throws) when `candidate` is not a plain object, carries a forbidden-named\n * field, carries any key outside the exact closed schema, or has a\n * wrong-typed/unknown-enum field. `lenBucket`/`pressureBucket` are clamped\n * into their bounded ranges rather than rejected, so a caller-side rounding\n * or edge-case computation can never smuggle an out-of-range integer through.\n */\nexport function sanitizeConsultPayload(candidate: unknown): AdaptorchConsultPayload | null {\n\tif (!isPlainObject(candidate)) return null;\n\tif (containsForbiddenField(candidate)) return null;\n\tif (!hasOnlyAllowedKeys(candidate, CONSULT_PAYLOAD_KEYS)) return null;\n\n\tif (candidate.schemaVersion !== 1) return null;\n\n\tconst taskClass = candidate.taskClass;\n\tif (typeof taskClass !== \"string\" || !TASK_CLASS_SET.has(taskClass)) return null;\n\n\tconst runnerUp = candidate.runnerUp;\n\tif (typeof runnerUp !== \"string\" || !TASK_CLASS_SET.has(runnerUp)) return null;\n\n\tconst marginBucket = candidate.marginBucket;\n\tif (typeof marginBucket !== \"string\" || !MARGIN_BUCKET_SET.has(marginBucket)) return null;\n\n\tconst lenBucketRaw = candidate.lenBucket;\n\tif (typeof lenBucketRaw !== \"number\") return null;\n\n\tconst pressureBucketRaw = candidate.pressureBucket;\n\tif (typeof pressureBucketRaw !== \"number\") return null;\n\n\tconst hadFence = candidate.hadFence;\n\tif (typeof hadFence !== \"boolean\") return null;\n\n\tconst hadDiff = candidate.hadDiff;\n\tif (typeof hadDiff !== \"boolean\") return null;\n\n\tconst laneTypeRaw = candidate.laneType;\n\tlet laneType: AdaptorchLaneType | undefined;\n\tif (laneTypeRaw !== undefined) {\n\t\tif (typeof laneTypeRaw !== \"string\" || !LANE_TYPE_SET.has(laneTypeRaw)) return null;\n\t\tlaneType = laneTypeRaw as AdaptorchLaneType;\n\t}\n\n\treturn {\n\t\tschemaVersion: 1,\n\t\ttaskClass: taskClass as AdaptorchTaskClass,\n\t\trunnerUp: runnerUp as AdaptorchTaskClass,\n\t\tmarginBucket: marginBucket as AdaptorchMarginBucket,\n\t\tlenBucket: clampLenBucket(lenBucketRaw),\n\t\thadFence,\n\t\thadDiff,\n\t\tpressureBucket: clampPressureBucket(pressureBucketRaw),\n\t\t...(laneType !== undefined ? { laneType } : {}),\n\t};\n}\n\n/**\n * Sanitize/validate an inbound advisory result (i.e. whatever the injected\n * advisory function returned). Returns `null` (never throws) on any shape,\n * forbidden-field, extra-key, or unknown-enum violation - the caller\n * (`AdaptorchBridge.consult`) treats `null` as \"no hint\" and falls back\n * silently, exactly like every other failure mode.\n */\nexport function sanitizeAdvisoryResult(candidate: unknown): AdaptorchAdvisoryResult | null {\n\tif (!isPlainObject(candidate)) return null;\n\tif (containsForbiddenField(candidate)) return null;\n\tif (!hasOnlyAllowedKeys(candidate, ADVISORY_RESULT_KEYS)) return null;\n\n\tif (candidate.schemaVersion !== 1) return null;\n\n\tconst taskClass = candidate.taskClass;\n\tif (typeof taskClass !== \"string\" || !TASK_CLASS_SET.has(taskClass)) return null;\n\n\tconst confidenceBand = candidate.confidenceBand;\n\tif (typeof confidenceBand !== \"string\" || !CONFIDENCE_BAND_SET.has(confidenceBand)) return null;\n\n\treturn {\n\t\tschemaVersion: 1,\n\t\ttaskClass: taskClass as AdaptorchTaskClass,\n\t\tconfidenceBand: confidenceBand as AdaptorchConfidenceBand,\n\t};\n}\n\n/**\n * Read-only/local AdaptOrch MCP tool names this bridge may ever reference,\n * grounded in the real 10-tool surface documented in\n * packages/adaptorch-wpl/src/adaptorch-client.ts (cross-checked there\n * against the AdaptOrch server's own docs) and narrowed to the two tools the\n * read-first plan puts in scope for a reasoning-effort hint (plan 4.2): the\n * session-start capabilities probe and the per-consult topology\n * classification call. This module does not call any MCP tool directly\n * today - the advisory function is fully caller-injected - so this\n * allowlist is not wired to a transport here; it exists so a future\n * transport, and this module's own tests, can assert by construction that\n * `adaptorch_run` (submit) and `adaptorch_cancel_run` (cancel), or any other\n * mutating tool, can never be reachable from router/bridge code.\n */\nexport const ADAPTORCH_READONLY_TOOL_ALLOWLIST = [\"adaptorch_capabilities\", \"adaptorch_route_topology\"] as const;\n\nexport type AdaptorchReadonlyToolName = (typeof ADAPTORCH_READONLY_TOOL_ALLOWLIST)[number];\n\n/** Underscore-segment verbs that mark an AdaptOrch-shaped tool name as mutating (write/execute/lifecycle). */\nconst MUTATING_TOOL_VERB_SEGMENTS: ReadonlySet<string> = new Set([\n\t\"run\",\n\t\"submit\",\n\t\"cancel\",\n\t\"dispatch\",\n\t\"delete\",\n\t\"execute\",\n\t\"mutate\",\n\t\"write\",\n\t\"create\",\n\t\"update\",\n\t\"remove\",\n]);\n\n/**\n * True if any underscore-delimited segment of an AdaptOrch-shaped tool name\n * is a known mutating verb. Segment-based rather than a raw substring/regex\n * match so \"adaptorch_route_topology\" is never falsely flagged (no segment\n * is a mutating verb), while \"adaptorch_run\" and \"adaptorch_cancel_run\" are\n * always caught regardless of future prefix/suffix changes.\n */\nexport function looksMutatingToolName(name: string): boolean {\n\treturn name\n\t\t.toLowerCase()\n\t\t.split(\"_\")\n\t\t.some((segment) => MUTATING_TOOL_VERB_SEGMENTS.has(segment));\n}\n\n/**\n * Type guard: true only for the two allowlisted read/local AdaptOrch tool\n * names. Also independently rejects any name `looksMutatingToolName` flags,\n * so a future accidental addition of a mutating name to the allowlist array\n * still cannot make this function report it as allowed.\n */\nexport function isAdaptorchToolAllowed(name: string): name is AdaptorchReadonlyToolName {\n\tif (looksMutatingToolName(name)) return false;\n\treturn (ADAPTORCH_READONLY_TOOL_ALLOWLIST as readonly string[]).includes(name);\n}\n\n/**\n * Timeout wrapper interface around any injected async advisory call. Races\n * the call against a timer; a slow or hung call rejects at `timeoutMs`\n * instead of leaving the caller waiting indefinitely. Always clears the\n * timer once the call settles (or once the timeout itself fires), and\n * always resolves/rejects exactly once - a synchronous throw from `run` is\n * treated the same as an asynchronous rejection.\n */\nexport type AdvisoryTimeoutWrapper = <T>(run: () => Promise<T>, timeoutMs: number) => Promise<T>;\n\nexport const withAdvisoryTimeout: AdvisoryTimeoutWrapper = <T>(\n\trun: () => Promise<T>,\n\ttimeoutMs: number,\n): Promise<T> => {\n\treturn new Promise<T>((resolve, reject) => {\n\t\tconst timer = setTimeout(() => {\n\t\t\treject(new Error(\"adaptorch-bridge: advisory call timed out\"));\n\t\t}, timeoutMs);\n\n\t\tlet pending: Promise<T>;\n\t\ttry {\n\t\t\tpending = run();\n\t\t} catch (err) {\n\t\t\tclearTimeout(timer);\n\t\t\treject(err instanceof Error ? err : new Error(String(err)));\n\t\t\treturn;\n\t\t}\n\n\t\tpending.then(\n\t\t\t(value) => {\n\t\t\t\tclearTimeout(timer);\n\t\t\t\tresolve(value);\n\t\t\t},\n\t\t\t(err: unknown) => {\n\t\t\t\tclearTimeout(timer);\n\t\t\t\treject(err instanceof Error ? err : new Error(String(err)));\n\t\t\t},\n\t\t);\n\t});\n};\n\nconst DEFAULT_TTL_MS = 5 * 60 * 1000;\nconst MIN_TTL_MS = 30 * 1000;\nconst MAX_TTL_MS = 5 * 60 * 1000;\nconst DEFAULT_MAX_TURNS_PER_ENTRY = 10;\nconst DEFAULT_CACHE_SIZE = 16;\nconst DEFAULT_MAX_CONSULTS_PER_SESSION = 5;\nconst DEFAULT_MIN_INTERVAL_MS = 60 * 1000;\nconst DEFAULT_TIMEOUT_MS = 1500;\nconst MIN_TIMEOUT_MS = 1;\nconst MAX_TIMEOUT_MS = 30 * 1000;\nconst DEFAULT_FAILURE_THRESHOLD = 3;\nconst DEFAULT_COOLDOWN_MS = 10 * 60 * 1000;\n\n/**\n * Exact TTL/cache/budget/circuit-breaker defaults from the read-first plan,\n * section 4.8. Exported so a security/review lane can confirm the shipped\n * numbers without reading this module's internals.\n */\nexport const ADAPTORCH_BRIDGE_DEFAULTS = {\n\tttlMs: DEFAULT_TTL_MS,\n\tminTtlMs: MIN_TTL_MS,\n\tmaxTtlMs: MAX_TTL_MS,\n\tmaxTurnsPerEntry: DEFAULT_MAX_TURNS_PER_ENTRY,\n\tcacheSize: DEFAULT_CACHE_SIZE,\n\tmaxConsultsPerSession: DEFAULT_MAX_CONSULTS_PER_SESSION,\n\tminIntervalMs: DEFAULT_MIN_INTERVAL_MS,\n\ttimeoutMs: DEFAULT_TIMEOUT_MS,\n\tminTimeoutMs: MIN_TIMEOUT_MS,\n\tmaxTimeoutMs: MAX_TIMEOUT_MS,\n\tfailureThreshold: DEFAULT_FAILURE_THRESHOLD,\n\tcooldownMs: DEFAULT_COOLDOWN_MS,\n} as const;\n\n/**\n * Bridge configuration. `advisoryFn` is the ONLY seam to any external\n * system - this module never imports or calls an MCP client/transport\n * itself, so it is impossible for a unit test (or a misconfigured caller)\n * to reach a real MCP server through this module by accident.\n */\nexport interface AdaptorchBridgeConfig {\n\t/**\n\t * Caller-injected advisory call. Its return value is untrusted: `consult`\n\t * always runs it through `sanitizeAdvisoryResult` before using or caching\n\t * it, and a rejected/thrown/timed-out/schema-invalid response is treated\n\t * as an ordinary failure (counts toward the circuit breaker), never as a\n\t * value to fuse.\n\t */\n\treadonly advisoryFn: (payload: AdaptorchConsultPayload) => Promise<unknown>;\n\t/** Injectable clock; defaults to `Date.now`. Tests supply a fake to avoid real wall-clock waits. */\n\treadonly now?: () => number;\n\t/** Cache TTL in ms; clamped to [30s, 5min] (plan 4.8). Default 5 minutes. */\n\treadonly ttlMs?: number;\n\t/** A cache entry also expires after this many `getFreshHint` calls (\"turns\"). Default 10. */\n\treadonly maxTurnsPerEntry?: number;\n\t/** Max distinct cached payload keys (LRU eviction beyond this). Default 16. */\n\treadonly cacheSize?: number;\n\t/** Max advisory attempts for this bridge instance's lifetime (\"session\"). Default 5. */\n\treadonly maxConsultsPerSession?: number;\n\t/** Minimum ms between advisory attempts. Default 60000 (60s). */\n\treadonly minIntervalMs?: number;\n\t/** Per-attempt timeout in ms; clamped to [1ms, 30s]. Default 1500 (1.5s). */\n\treadonly timeoutMs?: number;\n\t/** Consecutive failures before the circuit opens. Default 3. */\n\treadonly failureThreshold?: number;\n\t/** Circuit-open duration in ms once opened. Default 600000 (10min). */\n\treadonly cooldownMs?: number;\n}\n\n/** Read-only, non-sensitive introspection snapshot - never exposes payload/result content. */\nexport interface AdaptorchBridgeStats {\n\treadonly consultCount: number;\n\treadonly failureStreak: number;\n\treadonly circuitOpen: boolean;\n\treadonly circuitOpenUntilMs: number;\n\treadonly cacheEntryCount: number;\n}\n\nexport interface AdaptorchBridge {\n\t/**\n\t * Synchronous, cache-read-only. Never blocks, never throws, and never\n\t * calls the advisory function - a cache miss or an expired/invalid entry\n\t * silently returns `null` (\"no hint\"), matching the turn-start path's\n\t * synchronous, I/O-free contract (plan 4.4).\n\t */\n\tgetFreshHint(payload: AdaptorchConsultPayload): AdaptorchAdvisoryResult | null;\n\t/**\n\t * Fire-and-forget refresh for a LATER call to `getFreshHint`, never the\n\t * current one. Never throws synchronously and never rejects into the\n\t * caller - any failure is swallowed internally by `consult`.\n\t */\n\trequestRefresh(payload: AdaptorchConsultPayload): void;\n\t/**\n\t * The awaitable core operation `requestRefresh` fires without awaiting.\n\t * Gated by the circuit breaker, budget counter, and minimum interval (in\n\t * that order) before ever invoking `advisoryFn`; always resolves (never\n\t * rejects) to either a sanitized hint or `null`.\n\t */\n\tconsult(payload: AdaptorchConsultPayload): Promise<AdaptorchAdvisoryResult | null>;\n\t/** Read-only introspection for tests/diagnostics; contains no payload or result content. */\n\tgetStats(): AdaptorchBridgeStats;\n}\n\ninterface CacheEntry {\n\treadonly result: AdaptorchAdvisoryResult;\n\treadonly insertedAtMs: number;\n\treadonly insertedAtTurn: number;\n}\n\n/** Deterministic cache key built field-by-field from a sanitized payload - never from raw prompt text. */\nfunction cacheKeyFor(payload: AdaptorchConsultPayload): string {\n\treturn JSON.stringify({\n\t\ttaskClass: payload.taskClass,\n\t\trunnerUp: payload.runnerUp,\n\t\tmarginBucket: payload.marginBucket,\n\t\tlenBucket: payload.lenBucket,\n\t\thadFence: payload.hadFence,\n\t\thadDiff: payload.hadDiff,\n\t\tpressureBucket: payload.pressureBucket,\n\t\tlaneType: payload.laneType ?? null,\n\t});\n}\n\nclass AdaptorchBridgeImpl implements AdaptorchBridge {\n\tprivate readonly advisoryFn: (payload: AdaptorchConsultPayload) => Promise<unknown>;\n\tprivate readonly now: () => number;\n\tprivate readonly ttlMs: number;\n\tprivate readonly maxTurnsPerEntry: number;\n\tprivate readonly cacheSize: number;\n\tprivate readonly maxConsultsPerSession: number;\n\tprivate readonly minIntervalMs: number;\n\tprivate readonly timeoutMs: number;\n\tprivate readonly failureThreshold: number;\n\tprivate readonly cooldownMs: number;\n\n\tprivate readonly cache = new Map<string, CacheEntry>();\n\tprivate turnCounter = 0;\n\tprivate consultCount = 0;\n\tprivate failureStreak = 0;\n\tprivate lastAttemptAtMs: number | null = null;\n\tprivate circuitOpenUntilMs = 0;\n\n\tconstructor(config: AdaptorchBridgeConfig) {\n\t\tthis.advisoryFn = config.advisoryFn;\n\t\tthis.now = config.now ?? Date.now;\n\t\tthis.ttlMs = clampInt(config.ttlMs ?? DEFAULT_TTL_MS, MIN_TTL_MS, MAX_TTL_MS);\n\t\tthis.maxTurnsPerEntry = boundedIntOrDefault(config.maxTurnsPerEntry, DEFAULT_MAX_TURNS_PER_ENTRY, 1);\n\t\tthis.cacheSize = boundedIntOrDefault(config.cacheSize, DEFAULT_CACHE_SIZE, 1);\n\t\tthis.maxConsultsPerSession = boundedIntOrDefault(\n\t\t\tconfig.maxConsultsPerSession,\n\t\t\tDEFAULT_MAX_CONSULTS_PER_SESSION,\n\t\t\t0,\n\t\t);\n\t\tthis.minIntervalMs = boundedIntOrDefault(config.minIntervalMs, DEFAULT_MIN_INTERVAL_MS, 0);\n\t\tthis.timeoutMs = clampInt(config.timeoutMs ?? DEFAULT_TIMEOUT_MS, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS);\n\t\tthis.failureThreshold = boundedIntOrDefault(config.failureThreshold, DEFAULT_FAILURE_THRESHOLD, 1);\n\t\tthis.cooldownMs = boundedIntOrDefault(config.cooldownMs, DEFAULT_COOLDOWN_MS, 0);\n\t}\n\n\tgetFreshHint(payload: AdaptorchConsultPayload): AdaptorchAdvisoryResult | null {\n\t\tthis.turnCounter += 1;\n\t\tconst sanitizedPayload = sanitizeConsultPayload(payload);\n\t\tif (sanitizedPayload === null) return null;\n\n\t\tconst key = cacheKeyFor(sanitizedPayload);\n\t\tconst entry = this.cache.get(key);\n\t\tif (entry === undefined) return null;\n\t\tif (!this.isEntryFresh(entry)) {\n\t\t\tthis.cache.delete(key);\n\t\t\treturn null;\n\t\t}\n\t\treturn entry.result;\n\t}\n\n\trequestRefresh(payload: AdaptorchConsultPayload): void {\n\t\tvoid this.consult(payload).catch(() => {\n\t\t\t// consult() already swallows every failure and always resolves; this\n\t\t\t// catch only guards a future refactor from letting one escape, so a\n\t\t\t// fire-and-forget refresh can never surface an unhandled rejection.\n\t\t});\n\t}\n\n\tasync consult(payload: AdaptorchConsultPayload): Promise<AdaptorchAdvisoryResult | null> {\n\t\tconst sanitizedPayload = sanitizeConsultPayload(payload);\n\t\tif (sanitizedPayload === null) return null;\n\n\t\tconst nowMs = this.now();\n\t\tif (nowMs < this.circuitOpenUntilMs) return null;\n\t\tif (this.consultCount >= this.maxConsultsPerSession) return null;\n\t\tif (this.lastAttemptAtMs !== null && nowMs - this.lastAttemptAtMs < this.minIntervalMs) return null;\n\n\t\tthis.consultCount += 1;\n\t\tthis.lastAttemptAtMs = nowMs;\n\n\t\tlet raw: unknown;\n\t\ttry {\n\t\t\traw = await withAdvisoryTimeout(() => this.advisoryFn(sanitizedPayload), this.timeoutMs);\n\t\t} catch {\n\t\t\tthis.recordFailure();\n\t\t\treturn null;\n\t\t}\n\n\t\tconst result = sanitizeAdvisoryResult(raw);\n\t\tif (result === null) {\n\t\t\tthis.recordFailure();\n\t\t\treturn null;\n\t\t}\n\n\t\tthis.failureStreak = 0;\n\t\tthis.cacheResult(sanitizedPayload, result);\n\t\treturn result;\n\t}\n\n\tgetStats(): AdaptorchBridgeStats {\n\t\tconst nowMs = this.now();\n\t\treturn {\n\t\t\tconsultCount: this.consultCount,\n\t\t\tfailureStreak: this.failureStreak,\n\t\t\tcircuitOpen: nowMs < this.circuitOpenUntilMs,\n\t\t\tcircuitOpenUntilMs: this.circuitOpenUntilMs,\n\t\t\tcacheEntryCount: this.cache.size,\n\t\t};\n\t}\n\n\tprivate recordFailure(): void {\n\t\tthis.failureStreak += 1;\n\t\tif (this.failureStreak >= this.failureThreshold) {\n\t\t\tthis.circuitOpenUntilMs = this.now() + this.cooldownMs;\n\t\t}\n\t}\n\n\tprivate isEntryFresh(entry: CacheEntry): boolean {\n\t\tconst ageMs = this.now() - entry.insertedAtMs;\n\t\tconst ageTurns = this.turnCounter - entry.insertedAtTurn;\n\t\treturn ageMs < this.ttlMs && ageTurns < this.maxTurnsPerEntry;\n\t}\n\n\t/** Eviction favors entries last refreshed by a successful consult (write-time LRU, not read-time). */\n\tprivate cacheResult(payload: AdaptorchConsultPayload, result: AdaptorchAdvisoryResult): void {\n\t\tconst key = cacheKeyFor(payload);\n\t\tif (this.cache.has(key)) this.cache.delete(key);\n\t\tthis.cache.set(key, { result, insertedAtMs: this.now(), insertedAtTurn: this.turnCounter });\n\t\twhile (this.cache.size > this.cacheSize) {\n\t\t\tconst oldestKey = this.cache.keys().next().value;\n\t\t\tif (oldestKey === undefined) break;\n\t\t\tthis.cache.delete(oldestKey);\n\t\t}\n\t}\n}\n\n/** Construct a default-off AdaptOrch advisory bridge. See `AdaptorchBridgeConfig` for tunables. */\nexport function createAdaptorchBridge(config: AdaptorchBridgeConfig): AdaptorchBridge {\n\treturn new AdaptorchBridgeImpl(config);\n}\n"]}
+{"version":3,"file":"adaptorch-bridge.d.ts","sourceRoot":"","sources":["../../src/core/adaptorch-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEnH,6EAA6E;AAC7E,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEtG,4FAA4F;AAC5F,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtE,0GAA0G;AAC1G,MAAM,MAAM,uBAAuB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEhE,wDAAwD;AACxD,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE/D,gGAAgG;AAChG,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;CACjD;AA2DD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM9D;AA4BD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CA8CzF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAkBzF;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iCAAiC,iEAAkE,CAAC;AAEjH,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAiB3F;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK3D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,yBAAyB,CAGtF;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAEjG,eAAO,MAAM,mBAAmB,EAAE,sBA6BjC,CAAC;AAeF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;CAa5B,CAAC;AAEX;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,oGAAoG;IACpG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,iEAAiE;IACjE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC/B;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,GAAG,IAAI,CAAC;IAC/E;;;;OAIG;IACH,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACvD;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IACnF,4FAA4F;IAC5F,QAAQ,IAAI,oBAAoB,CAAC;CACjC;AAqJD,mGAAmG;AACnG,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAEpF","sourcesContent":["/**\n * Reasoning-router AdaptOrch advisory bridge (Goal 009 Lane B).\n *\n * A default-off, advisory-only primitive wired into AgentSession's v4 resolver.\n * AgentSession reads only the bridge's bounded cache and uses a caller-injected\n * advisory function for refresh; the current production transport is a no-op,\n * so it returns no hint. This module owns payload/result validation, TTL cache,\n * budget counter, circuit breaker, and timeout handling. It never calls an MCP\n * transport directly or receives execution authority.\n *\n * Grounded in the read-first plan at\n * .omk/goals/008-reasoning-router-advanced-accuracy-plan/laneC-privacy-adaptorch.md\n * (Part B, sections 4.1-4.11) and the real AdaptOrch MCP tool surface\n * documented in packages/adaptorch-wpl/src/adaptorch-client.ts. Key\n * constraints carried over from that plan:\n *\n *  - The router's turn-start path is synchronous and I/O-free today (plan\n *    4.4). This module never calls an MCP transport directly and exposes a\n *    synchronous, cache-read-only accessor (`getFreshHint`) plus a\n *    fire-and-forget refresh (`requestRefresh`) so the AgentSession integration\n *    never blocks or awaits advisory I/O on the turn-start path.\n *  - The real, documented AdaptOrch tool surface has no confidence or\n *    reasoning-level field (plan 4.3); this module's inbound result type\n *    (`AdaptorchAdvisoryResult`) therefore only carries a locally-relevant\n *    `taskClass` and a `confidenceBand` - both closed enums - never a raw\n *    numeric confidence or a `ThinkingLevel` value. AgentSession owns the\n *    bounded fusion from this advisory shape into the v4 resolver.\n *  - No product source is imported here. `AdaptorchTaskClass` /\n *    `AdaptorchLaneType` intentionally mirror the v4 task/lane unions by\n *    value, while AgentSession adapts them at the integration boundary.\n *  - Every outbound/inbound field is a closed enum, a boolean, or a bounded\n *    integer, derived from local features only. There is structurally no\n *    field shaped to carry prompt text, a prompt hash, a file/working-\n *    directory path, a model/provider identifier, a session/user identifier,\n *    a tool name, or hook output - the sanitize/validate helpers below also\n *    reject any candidate object exposing such a field by name, and reject\n *    any key outside the exact closed schema, so a hand-built or forged\n *    payload can never smuggle one through either type.\n *  - The router-bridge tool allowlist (`ADAPTORCH_READONLY_TOOL_ALLOWLIST`)\n *    only ever contains the two read/local AdaptOrch tools the plan\n *    identifies as in scope (the session-start capabilities probe and the\n *    per-consult topology-classification call, plan 4.2/4.6); the\n *    run-submission and run-cancellation tools (and any other mutating\n *    tool) can never appear in it, checked both by an exact-value test and\n *    by `looksMutatingToolName`'s verb-segment guard.\n *\n * Pure aside from `Date.now`/`setTimeout` (both injectable/wrapped so tests\n * never depend on real wall-clock time or a real MCP call).\n */\n\n/** Closed set of task classes. Mirrors the v4 task-class union by value (see file header). */\nexport type AdaptorchTaskClass = \"trivial\" | \"simple-edit\" | \"code-gen\" | \"debug\" | \"refactor\" | \"review\" | \"plan\";\n\n/** Closed set of subagent lane types. Mirrors the v4 lane union by value. */\nexport type AdaptorchLaneType = \"planner\" | \"security\" | \"explorer\" | \"coder\" | \"reviewer\" | \"tester\";\n\n/** Local top1-vs-runner-up score-margin bucket (plan 4.5 ConsultPayloadV1.marginBucket). */\nexport type AdaptorchMarginBucket = \"tie\" | \"low\" | \"medium\" | \"high\";\n\n/** Locally-derived confidence band for a returned hint. Never a raw network-supplied float (plan 4.3). */\nexport type AdaptorchConfidenceBand = \"low\" | \"medium\" | \"high\";\n\n/** floor(log2(trimmedPromptLen+1)) clamped to [0,7]. */\nexport type AdaptorchLenBucket = 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7;\n\n/** Context-pressure band 0..3 - same bucketing as agent-session.ts's _computePressureBucket. */\nexport type AdaptorchPressureBucket = 0 | 1 | 2 | 3;\n\n/**\n * Outbound advisory request (plan 4.5, field names adapted for this lane's\n * assignment: taskClass/runnerUp/marginBucket/lenBucket/hadFence/hadDiff/\n * pressureBucket/laneType). Every field is a closed enum, a boolean, or a\n * bounded integer built from local classifier features only. Structurally\n * excludes prompt text/hash, file paths, model/provider/session\n * identifiers, tool names, and hook output - there is no field shaped to\n * carry any of those.\n */\nexport interface AdaptorchConsultPayload {\n\treadonly schemaVersion: 1;\n\treadonly taskClass: AdaptorchTaskClass;\n\treadonly runnerUp: AdaptorchTaskClass;\n\treadonly marginBucket: AdaptorchMarginBucket;\n\treadonly lenBucket: AdaptorchLenBucket;\n\treadonly hadFence: boolean;\n\treadonly hadDiff: boolean;\n\treadonly pressureBucket: AdaptorchPressureBucket;\n\treadonly laneType?: AdaptorchLaneType;\n}\n\n/**\n * Inbound advisory result after local sanitation (plan 4.3, corrected\n * schema). `confidenceBand` is always synthesized/validated locally - the\n * real AdaptOrch tool contract carries no confidence or effort-level field,\n * so this type never trusts a raw numeric confidence from the advisory\n * function.\n */\nexport interface AdaptorchAdvisoryResult {\n\treadonly schemaVersion: 1;\n\treadonly taskClass: AdaptorchTaskClass;\n\treadonly confidenceBand: AdaptorchConfidenceBand;\n}\n\nconst TASK_CLASSES: readonly AdaptorchTaskClass[] = [\n\t\"trivial\",\n\t\"simple-edit\",\n\t\"code-gen\",\n\t\"debug\",\n\t\"refactor\",\n\t\"review\",\n\t\"plan\",\n];\nconst TASK_CLASS_SET: ReadonlySet<string> = new Set(TASK_CLASSES);\n\nconst LANE_TYPES: readonly AdaptorchLaneType[] = [\"planner\", \"security\", \"explorer\", \"coder\", \"reviewer\", \"tester\"];\nconst LANE_TYPE_SET: ReadonlySet<string> = new Set(LANE_TYPES);\n\nconst MARGIN_BUCKETS: readonly AdaptorchMarginBucket[] = [\"tie\", \"low\", \"medium\", \"high\"];\nconst MARGIN_BUCKET_SET: ReadonlySet<string> = new Set(MARGIN_BUCKETS);\n\nconst CONFIDENCE_BANDS: readonly AdaptorchConfidenceBand[] = [\"low\", \"medium\", \"high\"];\nconst CONFIDENCE_BAND_SET: ReadonlySet<string> = new Set(CONFIDENCE_BANDS);\n\nconst CONSULT_PAYLOAD_KEYS: ReadonlySet<string> = new Set([\n\t\"schemaVersion\",\n\t\"taskClass\",\n\t\"runnerUp\",\n\t\"marginBucket\",\n\t\"lenBucket\",\n\t\"hadFence\",\n\t\"hadDiff\",\n\t\"pressureBucket\",\n\t\"laneType\",\n]);\n\nconst ADVISORY_RESULT_KEYS: ReadonlySet<string> = new Set([\"schemaVersion\", \"taskClass\", \"confidenceBand\"]);\n\n/**\n * Field-name markers that must never appear on a payload or result object,\n * checked case-insensitively as a substring of every own key. This is\n * defense-in-depth alongside the exact-key allowlist below: even a candidate\n * that otherwise has every required field still fails if it also carries a\n * field shaped like a stored prompt, hash, path, model/provider identifier,\n * session identifier, tool name, or hook output.\n */\nconst FORBIDDEN_KEY_SUBSTRINGS: readonly string[] = [\n\t\"prompt\",\n\t\"hash\",\n\t\"path\",\n\t\"model\",\n\t\"session\",\n\t\"tool\",\n\t\"hook\",\n\t\"provider\",\n];\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/**\n * True if any own key of `record` contains a forbidden field-name marker\n * (case-insensitive). Typed `object` rather than `Record<string, unknown>` so\n * callers (including tests) can pass any concrete object shape - named\n * interface, ad-hoc literal, or an already-`Record`-typed value - without a\n * missing-index-signature type error; only `Object.keys` is used internally,\n * which accepts any `object`.\n */\nexport function containsForbiddenField(record: object): boolean {\n\tfor (const key of Object.keys(record)) {\n\t\tconst lowerKey = key.toLowerCase();\n\t\tif (FORBIDDEN_KEY_SUBSTRINGS.some((needle) => lowerKey.includes(needle))) return true;\n\t}\n\treturn false;\n}\n\nfunction hasOnlyAllowedKeys(record: Record<string, unknown>, allowed: ReadonlySet<string>): boolean {\n\treturn Object.keys(record).every((key) => allowed.has(key));\n}\n\nfunction clampInt(value: number, min: number, max: number): number {\n\tconst truncated = Number.isFinite(value) ? Math.trunc(value) : min;\n\tif (truncated < min) return min;\n\tif (truncated > max) return max;\n\treturn truncated;\n}\n\nfunction clampLenBucket(value: number): AdaptorchLenBucket {\n\treturn clampInt(value, 0, 7) as AdaptorchLenBucket;\n}\n\nfunction clampPressureBucket(value: number): AdaptorchPressureBucket {\n\treturn clampInt(value, 0, 3) as AdaptorchPressureBucket;\n}\n\n/** `value ?? fallback`, coerced to an integer and floored at `min` (used for config, not untrusted payloads). */\nfunction boundedIntOrDefault(value: number | undefined, fallback: number, min: number): number {\n\tconst raw = value ?? fallback;\n\tif (!Number.isFinite(raw)) return fallback;\n\treturn Math.max(min, Math.trunc(raw));\n}\n\n/**\n * Sanitize/validate an outbound advisory request. Returns `null` (never\n * throws) when `candidate` is not a plain object, carries a forbidden-named\n * field, carries any key outside the exact closed schema, or has a\n * wrong-typed/unknown-enum field. `lenBucket`/`pressureBucket` are clamped\n * into their bounded ranges rather than rejected, so a caller-side rounding\n * or edge-case computation can never smuggle an out-of-range integer through.\n */\nexport function sanitizeConsultPayload(candidate: unknown): AdaptorchConsultPayload | null {\n\tif (!isPlainObject(candidate)) return null;\n\tif (containsForbiddenField(candidate)) return null;\n\tif (!hasOnlyAllowedKeys(candidate, CONSULT_PAYLOAD_KEYS)) return null;\n\n\tif (candidate.schemaVersion !== 1) return null;\n\n\tconst taskClass = candidate.taskClass;\n\tif (typeof taskClass !== \"string\" || !TASK_CLASS_SET.has(taskClass)) return null;\n\n\tconst runnerUp = candidate.runnerUp;\n\tif (typeof runnerUp !== \"string\" || !TASK_CLASS_SET.has(runnerUp)) return null;\n\n\tconst marginBucket = candidate.marginBucket;\n\tif (typeof marginBucket !== \"string\" || !MARGIN_BUCKET_SET.has(marginBucket)) return null;\n\n\tconst lenBucketRaw = candidate.lenBucket;\n\tif (typeof lenBucketRaw !== \"number\") return null;\n\n\tconst pressureBucketRaw = candidate.pressureBucket;\n\tif (typeof pressureBucketRaw !== \"number\") return null;\n\n\tconst hadFence = candidate.hadFence;\n\tif (typeof hadFence !== \"boolean\") return null;\n\n\tconst hadDiff = candidate.hadDiff;\n\tif (typeof hadDiff !== \"boolean\") return null;\n\n\tconst laneTypeRaw = candidate.laneType;\n\tlet laneType: AdaptorchLaneType | undefined;\n\tif (laneTypeRaw !== undefined) {\n\t\tif (typeof laneTypeRaw !== \"string\" || !LANE_TYPE_SET.has(laneTypeRaw)) return null;\n\t\tlaneType = laneTypeRaw as AdaptorchLaneType;\n\t}\n\n\treturn {\n\t\tschemaVersion: 1,\n\t\ttaskClass: taskClass as AdaptorchTaskClass,\n\t\trunnerUp: runnerUp as AdaptorchTaskClass,\n\t\tmarginBucket: marginBucket as AdaptorchMarginBucket,\n\t\tlenBucket: clampLenBucket(lenBucketRaw),\n\t\thadFence,\n\t\thadDiff,\n\t\tpressureBucket: clampPressureBucket(pressureBucketRaw),\n\t\t...(laneType !== undefined ? { laneType } : {}),\n\t};\n}\n\n/**\n * Sanitize/validate an inbound advisory result (i.e. whatever the injected\n * advisory function returned). Returns `null` (never throws) on any shape,\n * forbidden-field, extra-key, or unknown-enum violation - the caller\n * (`AdaptorchBridge.consult`) treats `null` as \"no hint\" and falls back\n * silently, exactly like every other failure mode.\n */\nexport function sanitizeAdvisoryResult(candidate: unknown): AdaptorchAdvisoryResult | null {\n\tif (!isPlainObject(candidate)) return null;\n\tif (containsForbiddenField(candidate)) return null;\n\tif (!hasOnlyAllowedKeys(candidate, ADVISORY_RESULT_KEYS)) return null;\n\n\tif (candidate.schemaVersion !== 1) return null;\n\n\tconst taskClass = candidate.taskClass;\n\tif (typeof taskClass !== \"string\" || !TASK_CLASS_SET.has(taskClass)) return null;\n\n\tconst confidenceBand = candidate.confidenceBand;\n\tif (typeof confidenceBand !== \"string\" || !CONFIDENCE_BAND_SET.has(confidenceBand)) return null;\n\n\treturn {\n\t\tschemaVersion: 1,\n\t\ttaskClass: taskClass as AdaptorchTaskClass,\n\t\tconfidenceBand: confidenceBand as AdaptorchConfidenceBand,\n\t};\n}\n\n/**\n * Read-only/local AdaptOrch MCP tool names this bridge may ever reference,\n * grounded in the real 10-tool surface documented in\n * packages/adaptorch-wpl/src/adaptorch-client.ts (cross-checked there\n * against the AdaptOrch server's own docs) and narrowed to the two tools the\n * read-first plan puts in scope for a reasoning-effort hint (plan 4.2): the\n * session-start capabilities probe and the per-consult topology\n * classification call. This module does not call any MCP tool directly\n * today - the advisory function is fully caller-injected - so this\n * allowlist is not wired to a transport here; it exists so a future\n * transport, and this module's own tests, can assert by construction that\n * `adaptorch_run` (submit) and `adaptorch_cancel_run` (cancel), or any other\n * mutating tool, can never be reachable from router/bridge code.\n */\nexport const ADAPTORCH_READONLY_TOOL_ALLOWLIST = [\"adaptorch_capabilities\", \"adaptorch_route_topology\"] as const;\n\nexport type AdaptorchReadonlyToolName = (typeof ADAPTORCH_READONLY_TOOL_ALLOWLIST)[number];\n\n/** Underscore-segment verbs that mark an AdaptOrch-shaped tool name as mutating (write/execute/lifecycle). */\nconst MUTATING_TOOL_VERB_SEGMENTS: ReadonlySet<string> = new Set([\n\t\"run\",\n\t\"submit\",\n\t\"cancel\",\n\t\"dispatch\",\n\t\"delete\",\n\t\"execute\",\n\t\"mutate\",\n\t\"write\",\n\t\"create\",\n\t\"update\",\n\t\"remove\",\n]);\n\n/**\n * True if any underscore-delimited segment of an AdaptOrch-shaped tool name\n * is a known mutating verb. Segment-based rather than a raw substring/regex\n * match so \"adaptorch_route_topology\" is never falsely flagged (no segment\n * is a mutating verb), while \"adaptorch_run\" and \"adaptorch_cancel_run\" are\n * always caught regardless of future prefix/suffix changes.\n */\nexport function looksMutatingToolName(name: string): boolean {\n\treturn name\n\t\t.toLowerCase()\n\t\t.split(\"_\")\n\t\t.some((segment) => MUTATING_TOOL_VERB_SEGMENTS.has(segment));\n}\n\n/**\n * Type guard: true only for the two allowlisted read/local AdaptOrch tool\n * names. Also independently rejects any name `looksMutatingToolName` flags,\n * so a future accidental addition of a mutating name to the allowlist array\n * still cannot make this function report it as allowed.\n */\nexport function isAdaptorchToolAllowed(name: string): name is AdaptorchReadonlyToolName {\n\tif (looksMutatingToolName(name)) return false;\n\treturn (ADAPTORCH_READONLY_TOOL_ALLOWLIST as readonly string[]).includes(name);\n}\n\n/**\n * Timeout wrapper interface around any injected async advisory call. Races\n * the call against a timer; a slow or hung call rejects at `timeoutMs`\n * instead of leaving the caller waiting indefinitely. Always clears the\n * timer once the call settles (or once the timeout itself fires), and\n * always resolves/rejects exactly once - a synchronous throw from `run` is\n * treated the same as an asynchronous rejection.\n */\nexport type AdvisoryTimeoutWrapper = <T>(run: () => Promise<T>, timeoutMs: number) => Promise<T>;\n\nexport const withAdvisoryTimeout: AdvisoryTimeoutWrapper = <T>(\n\trun: () => Promise<T>,\n\ttimeoutMs: number,\n): Promise<T> => {\n\treturn new Promise<T>((resolve, reject) => {\n\t\tconst timer = setTimeout(() => {\n\t\t\treject(new Error(\"adaptorch-bridge: advisory call timed out\"));\n\t\t}, timeoutMs);\n\n\t\tlet pending: Promise<T>;\n\t\ttry {\n\t\t\tpending = run();\n\t\t} catch (err) {\n\t\t\tclearTimeout(timer);\n\t\t\treject(err instanceof Error ? err : new Error(String(err)));\n\t\t\treturn;\n\t\t}\n\n\t\tpending.then(\n\t\t\t(value) => {\n\t\t\t\tclearTimeout(timer);\n\t\t\t\tresolve(value);\n\t\t\t},\n\t\t\t(err: unknown) => {\n\t\t\t\tclearTimeout(timer);\n\t\t\t\treject(err instanceof Error ? err : new Error(String(err)));\n\t\t\t},\n\t\t);\n\t});\n};\n\nconst DEFAULT_TTL_MS = 5 * 60 * 1000;\nconst MIN_TTL_MS = 30 * 1000;\nconst MAX_TTL_MS = 5 * 60 * 1000;\nconst DEFAULT_MAX_TURNS_PER_ENTRY = 10;\nconst DEFAULT_CACHE_SIZE = 16;\nconst DEFAULT_MAX_CONSULTS_PER_SESSION = 5;\nconst DEFAULT_MIN_INTERVAL_MS = 60 * 1000;\nconst DEFAULT_TIMEOUT_MS = 1500;\nconst MIN_TIMEOUT_MS = 1;\nconst MAX_TIMEOUT_MS = 30 * 1000;\nconst DEFAULT_FAILURE_THRESHOLD = 3;\nconst DEFAULT_COOLDOWN_MS = 10 * 60 * 1000;\n\n/**\n * Exact TTL/cache/budget/circuit-breaker defaults from the read-first plan,\n * section 4.8. Exported so a security/review lane can confirm the shipped\n * numbers without reading this module's internals.\n */\nexport const ADAPTORCH_BRIDGE_DEFAULTS = {\n\tttlMs: DEFAULT_TTL_MS,\n\tminTtlMs: MIN_TTL_MS,\n\tmaxTtlMs: MAX_TTL_MS,\n\tmaxTurnsPerEntry: DEFAULT_MAX_TURNS_PER_ENTRY,\n\tcacheSize: DEFAULT_CACHE_SIZE,\n\tmaxConsultsPerSession: DEFAULT_MAX_CONSULTS_PER_SESSION,\n\tminIntervalMs: DEFAULT_MIN_INTERVAL_MS,\n\ttimeoutMs: DEFAULT_TIMEOUT_MS,\n\tminTimeoutMs: MIN_TIMEOUT_MS,\n\tmaxTimeoutMs: MAX_TIMEOUT_MS,\n\tfailureThreshold: DEFAULT_FAILURE_THRESHOLD,\n\tcooldownMs: DEFAULT_COOLDOWN_MS,\n} as const;\n\n/**\n * Bridge configuration. `advisoryFn` is the ONLY seam to any external\n * system - this module never imports or calls an MCP client/transport\n * itself, so it is impossible for a unit test (or a misconfigured caller)\n * to reach a real MCP server through this module by accident.\n */\nexport interface AdaptorchBridgeConfig {\n\t/**\n\t * Caller-injected advisory call. Its return value is untrusted: `consult`\n\t * always runs it through `sanitizeAdvisoryResult` before using or caching\n\t * it, and a rejected/thrown/timed-out/schema-invalid response is treated\n\t * as an ordinary failure (counts toward the circuit breaker), never as a\n\t * value to fuse.\n\t */\n\treadonly advisoryFn: (payload: AdaptorchConsultPayload) => Promise<unknown>;\n\t/** Injectable clock; defaults to `Date.now`. Tests supply a fake to avoid real wall-clock waits. */\n\treadonly now?: () => number;\n\t/** Cache TTL in ms; clamped to [30s, 5min] (plan 4.8). Default 5 minutes. */\n\treadonly ttlMs?: number;\n\t/** A cache entry also expires after this many `getFreshHint` calls (\"turns\"). Default 10. */\n\treadonly maxTurnsPerEntry?: number;\n\t/** Max distinct cached payload keys (LRU eviction beyond this). Default 16. */\n\treadonly cacheSize?: number;\n\t/** Max advisory attempts for this bridge instance's lifetime (\"session\"). Default 5. */\n\treadonly maxConsultsPerSession?: number;\n\t/** Minimum ms between advisory attempts. Default 60000 (60s). */\n\treadonly minIntervalMs?: number;\n\t/** Per-attempt timeout in ms; clamped to [1ms, 30s]. Default 1500 (1.5s). */\n\treadonly timeoutMs?: number;\n\t/** Consecutive failures before the circuit opens. Default 3. */\n\treadonly failureThreshold?: number;\n\t/** Circuit-open duration in ms once opened. Default 600000 (10min). */\n\treadonly cooldownMs?: number;\n}\n\n/** Read-only, non-sensitive introspection snapshot - never exposes payload/result content. */\nexport interface AdaptorchBridgeStats {\n\treadonly consultCount: number;\n\treadonly failureStreak: number;\n\treadonly circuitOpen: boolean;\n\treadonly circuitOpenUntilMs: number;\n\treadonly cacheEntryCount: number;\n}\n\nexport interface AdaptorchBridge {\n\t/**\n\t * Synchronous, cache-read-only. Never blocks, never throws, and never\n\t * calls the advisory function - a cache miss or an expired/invalid entry\n\t * silently returns `null` (\"no hint\"), matching the turn-start path's\n\t * synchronous, I/O-free contract (plan 4.4).\n\t */\n\tgetFreshHint(payload: AdaptorchConsultPayload): AdaptorchAdvisoryResult | null;\n\t/**\n\t * Fire-and-forget refresh for a LATER call to `getFreshHint`, never the\n\t * current one. Never throws synchronously and never rejects into the\n\t * caller - any failure is swallowed internally by `consult`.\n\t */\n\trequestRefresh(payload: AdaptorchConsultPayload): void;\n\t/**\n\t * The awaitable core operation `requestRefresh` fires without awaiting.\n\t * Gated by the circuit breaker, budget counter, and minimum interval (in\n\t * that order) before ever invoking `advisoryFn`; always resolves (never\n\t * rejects) to either a sanitized hint or `null`.\n\t */\n\tconsult(payload: AdaptorchConsultPayload): Promise<AdaptorchAdvisoryResult | null>;\n\t/** Read-only introspection for tests/diagnostics; contains no payload or result content. */\n\tgetStats(): AdaptorchBridgeStats;\n}\n\ninterface CacheEntry {\n\treadonly result: AdaptorchAdvisoryResult;\n\treadonly insertedAtMs: number;\n\treadonly insertedAtTurn: number;\n}\n\n/** Deterministic cache key built field-by-field from a sanitized payload - never from raw prompt text. */\nfunction cacheKeyFor(payload: AdaptorchConsultPayload): string {\n\treturn JSON.stringify({\n\t\ttaskClass: payload.taskClass,\n\t\trunnerUp: payload.runnerUp,\n\t\tmarginBucket: payload.marginBucket,\n\t\tlenBucket: payload.lenBucket,\n\t\thadFence: payload.hadFence,\n\t\thadDiff: payload.hadDiff,\n\t\tpressureBucket: payload.pressureBucket,\n\t\tlaneType: payload.laneType ?? null,\n\t});\n}\n\nclass AdaptorchBridgeImpl implements AdaptorchBridge {\n\tprivate readonly advisoryFn: (payload: AdaptorchConsultPayload) => Promise<unknown>;\n\tprivate readonly now: () => number;\n\tprivate readonly ttlMs: number;\n\tprivate readonly maxTurnsPerEntry: number;\n\tprivate readonly cacheSize: number;\n\tprivate readonly maxConsultsPerSession: number;\n\tprivate readonly minIntervalMs: number;\n\tprivate readonly timeoutMs: number;\n\tprivate readonly failureThreshold: number;\n\tprivate readonly cooldownMs: number;\n\n\tprivate readonly cache = new Map<string, CacheEntry>();\n\tprivate turnCounter = 0;\n\tprivate consultCount = 0;\n\tprivate failureStreak = 0;\n\tprivate lastAttemptAtMs: number | null = null;\n\tprivate circuitOpenUntilMs = 0;\n\n\tconstructor(config: AdaptorchBridgeConfig) {\n\t\tthis.advisoryFn = config.advisoryFn;\n\t\tthis.now = config.now ?? Date.now;\n\t\tthis.ttlMs = clampInt(config.ttlMs ?? DEFAULT_TTL_MS, MIN_TTL_MS, MAX_TTL_MS);\n\t\tthis.maxTurnsPerEntry = boundedIntOrDefault(config.maxTurnsPerEntry, DEFAULT_MAX_TURNS_PER_ENTRY, 1);\n\t\tthis.cacheSize = boundedIntOrDefault(config.cacheSize, DEFAULT_CACHE_SIZE, 1);\n\t\tthis.maxConsultsPerSession = boundedIntOrDefault(\n\t\t\tconfig.maxConsultsPerSession,\n\t\t\tDEFAULT_MAX_CONSULTS_PER_SESSION,\n\t\t\t0,\n\t\t);\n\t\tthis.minIntervalMs = boundedIntOrDefault(config.minIntervalMs, DEFAULT_MIN_INTERVAL_MS, 0);\n\t\tthis.timeoutMs = clampInt(config.timeoutMs ?? DEFAULT_TIMEOUT_MS, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS);\n\t\tthis.failureThreshold = boundedIntOrDefault(config.failureThreshold, DEFAULT_FAILURE_THRESHOLD, 1);\n\t\tthis.cooldownMs = boundedIntOrDefault(config.cooldownMs, DEFAULT_COOLDOWN_MS, 0);\n\t}\n\n\tgetFreshHint(payload: AdaptorchConsultPayload): AdaptorchAdvisoryResult | null {\n\t\tthis.turnCounter += 1;\n\t\tconst sanitizedPayload = sanitizeConsultPayload(payload);\n\t\tif (sanitizedPayload === null) return null;\n\n\t\tconst key = cacheKeyFor(sanitizedPayload);\n\t\tconst entry = this.cache.get(key);\n\t\tif (entry === undefined) return null;\n\t\tif (!this.isEntryFresh(entry)) {\n\t\t\tthis.cache.delete(key);\n\t\t\treturn null;\n\t\t}\n\t\treturn entry.result;\n\t}\n\n\trequestRefresh(payload: AdaptorchConsultPayload): void {\n\t\tvoid this.consult(payload).catch(() => {\n\t\t\t// consult() already swallows every failure and always resolves; this\n\t\t\t// catch only guards a future refactor from letting one escape, so a\n\t\t\t// fire-and-forget refresh can never surface an unhandled rejection.\n\t\t});\n\t}\n\n\tasync consult(payload: AdaptorchConsultPayload): Promise<AdaptorchAdvisoryResult | null> {\n\t\tconst sanitizedPayload = sanitizeConsultPayload(payload);\n\t\tif (sanitizedPayload === null) return null;\n\n\t\tconst nowMs = this.now();\n\t\tif (nowMs < this.circuitOpenUntilMs) return null;\n\t\tif (this.consultCount >= this.maxConsultsPerSession) return null;\n\t\tif (this.lastAttemptAtMs !== null && nowMs - this.lastAttemptAtMs < this.minIntervalMs) return null;\n\n\t\tthis.consultCount += 1;\n\t\tthis.lastAttemptAtMs = nowMs;\n\n\t\tlet raw: unknown;\n\t\ttry {\n\t\t\traw = await withAdvisoryTimeout(() => this.advisoryFn(sanitizedPayload), this.timeoutMs);\n\t\t} catch {\n\t\t\tthis.recordFailure();\n\t\t\treturn null;\n\t\t}\n\n\t\tconst result = sanitizeAdvisoryResult(raw);\n\t\tif (result === null) {\n\t\t\tthis.recordFailure();\n\t\t\treturn null;\n\t\t}\n\n\t\tthis.failureStreak = 0;\n\t\tthis.cacheResult(sanitizedPayload, result);\n\t\treturn result;\n\t}\n\n\tgetStats(): AdaptorchBridgeStats {\n\t\tconst nowMs = this.now();\n\t\treturn {\n\t\t\tconsultCount: this.consultCount,\n\t\t\tfailureStreak: this.failureStreak,\n\t\t\tcircuitOpen: nowMs < this.circuitOpenUntilMs,\n\t\t\tcircuitOpenUntilMs: this.circuitOpenUntilMs,\n\t\t\tcacheEntryCount: this.cache.size,\n\t\t};\n\t}\n\n\tprivate recordFailure(): void {\n\t\tthis.failureStreak += 1;\n\t\tif (this.failureStreak >= this.failureThreshold) {\n\t\t\tthis.circuitOpenUntilMs = this.now() + this.cooldownMs;\n\t\t}\n\t}\n\n\tprivate isEntryFresh(entry: CacheEntry): boolean {\n\t\tconst ageMs = this.now() - entry.insertedAtMs;\n\t\tconst ageTurns = this.turnCounter - entry.insertedAtTurn;\n\t\treturn ageMs < this.ttlMs && ageTurns < this.maxTurnsPerEntry;\n\t}\n\n\t/** Eviction favors entries last refreshed by a successful consult (write-time LRU, not read-time). */\n\tprivate cacheResult(payload: AdaptorchConsultPayload, result: AdaptorchAdvisoryResult): void {\n\t\tconst key = cacheKeyFor(payload);\n\t\tif (this.cache.has(key)) this.cache.delete(key);\n\t\tthis.cache.set(key, { result, insertedAtMs: this.now(), insertedAtTurn: this.turnCounter });\n\t\twhile (this.cache.size > this.cacheSize) {\n\t\t\tconst oldestKey = this.cache.keys().next().value;\n\t\t\tif (oldestKey === undefined) break;\n\t\t\tthis.cache.delete(oldestKey);\n\t\t}\n\t}\n}\n\n/** Construct a default-off AdaptOrch advisory bridge. See `AdaptorchBridgeConfig` for tunables. */\nexport function createAdaptorchBridge(config: AdaptorchBridgeConfig): AdaptorchBridge {\n\treturn new AdaptorchBridgeImpl(config);\n}\n"]}

package/dist/core/adaptorch-bridge.js

@@ -1,13 +1,12 @@
 /**
  * Reasoning-router AdaptOrch advisory bridge (Goal 009 Lane B).
  *
- * A default-off, advisory-only primitive for a future reasoning-router hint
- * source. This module is intentionally NOT wired into agent-session.ts; it only
- * implements the bridge's payload/result schema, sanitize/validate helpers, TTL
- * cache, budget counter, circuit breaker, and timeout wrapper around a
- * caller-injected advisory function. A future lane decides how (or whether) to
- * fuse a returned hint into a resolved ThinkingLevel and to actually call this
- * module from agent-session.ts.
+ * A default-off, advisory-only primitive wired into AgentSession's v4 resolver.
+ * AgentSession reads only the bridge's bounded cache and uses a caller-injected
+ * advisory function for refresh; the current production transport is a no-op,
+ * so it returns no hint. This module owns payload/result validation, TTL cache,
+ * budget counter, circuit breaker, and timeout handling. It never calls an MCP
+ * transport directly or receives execution authority.
  *
  * Grounded in the read-first plan at
  * .omk/goals/008-reasoning-router-advanced-accuracy-plan/laneC-privacy-adaptorch.md
@@ -18,18 +17,17 @@
  *  - The router's turn-start path is synchronous and I/O-free today (plan
  *    4.4). This module never calls an MCP transport directly and exposes a
  *    synchronous, cache-read-only accessor (`getFreshHint`) plus a
- *    fire-and-forget refresh (`requestRefresh`) so a future integration can
- *    never block or await this module inline on the turn-start path.
+ *    fire-and-forget refresh (`requestRefresh`) so the AgentSession integration
+ *    never blocks or awaits advisory I/O on the turn-start path.
  *  - The real, documented AdaptOrch tool surface has no confidence or
  *    reasoning-level field (plan 4.3); this module's inbound result type
  *    (`AdaptorchAdvisoryResult`) therefore only carries a locally-relevant
  *    `taskClass` and a `confidenceBand` - both closed enums - never a raw
- *    numeric confidence or a `ThinkingLevel` value. Fusing a hint into a
- *    resolved level is out of scope for this module.
+ *    numeric confidence or a `ThinkingLevel` value. AgentSession owns the
+ *    bounded fusion from this advisory shape into the v4 resolver.
  *  - No product source is imported here. `AdaptorchTaskClass` /
  *    `AdaptorchLaneType` intentionally mirror the v4 task/lane unions by
- *    value, not by import, so this bridge remains isolated until a future
- *    wiring lane deliberately connects it to the router.
+ *    value, while AgentSession adapts them at the integration boundary.
  *  - Every outbound/inbound field is a closed enum, a boolean, or a bounded
  *    integer, derived from local features only. There is structurally no
  *    field shaped to carry prompt text, a prompt hash, a file/working-