open-multi-agent-kit 0.98.5 → 0.99.0

package/dist/core/grok-harness-dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grok-harness-dispatch.d.ts","sourceRoot":"","sources":["../../src/core/grok-harness-dispatch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,OAAO,EAAyB,KAAK,qBAAqB,EAAE,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEnH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAChF,oFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACvD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,wBAAwB,GAAG,yBAAyB,CAoCjG","sourcesContent":["/**\n * Apply the `grok-harness` domain loadout when the active provider is Grok OAuth.\n * Does not require `OMK_DOMAIN_ROUTING=1`.\n */\n\nimport { getAgentDir } from \"../config.ts\";\nimport {\n\tGROK_HARNESS_DOMAIN_ID,\n\tgrokHarnessAutoApplyEnabled,\n\tisGrokOAuthProvider,\n\tselectGrokHarnessSkills,\n} from \"./grok-harness.ts\";\nimport type { LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport { type ComposedLoadout, composeLoadout } from \"./loadout-compose.ts\";\nimport { createLoadoutPolicyFromRuntimeState } from \"./loadout-policy-bridge.ts\";\nimport { applyLoadoutToRuntime, type LoadoutRuntimeSession, type LoadoutRuntimeState } from \"./loadout-runtime.ts\";\nimport { uniqueSorted } from \"./loadout-safety.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\n\nexport interface GrokHarnessDispatchInput {\n\treadonly provider: string | undefined;\n\treadonly session: LoadoutRuntimeSession;\n\treadonly resourceLoader: ResourceLoader;\n\treadonly cwd: string;\n\treadonly agentDir?: string;\n\treadonly env?: NodeJS.ProcessEnv | Readonly<Record<string, string | undefined>>;\n\t/** When set, narrow the grok-harness skill grant to the documented 2–3 subset. */\n\treadonly task?: string;\n\t/** Optional path hints scored with the task text. */\n\treadonly paths?: readonly string[];\n}\n\nexport interface GrokHarnessDispatchResult {\n\treadonly loadoutAccessPolicy: LoadoutAccessPolicy | undefined;\n\treadonly warnings: readonly string[];\n\treadonly runtimeState: LoadoutRuntimeState | undefined;\n}\n\nexport function tryGrokHarnessDispatch(input: GrokHarnessDispatchInput): GrokHarnessDispatchResult {\n\tconst env = input.env ?? process.env;\n\tif (!grokHarnessAutoApplyEnabled(env) || !isGrokOAuthProvider(input.provider)) {\n\t\treturn { loadoutAccessPolicy: undefined, warnings: [], runtimeState: undefined };\n\t}\n\n\tconst agentDir = input.agentDir ?? getAgentDir();\n\ttry {\n\t\tconst profile = composeGrokHarnessProfile(input);\n\t\tconst state = applyLoadoutToRuntime(input.session, input.resourceLoader, input.cwd, agentDir, {\n\t\t\tprofile,\n\t\t\trole: \"coder\",\n\t\t});\n\t\tif (state.blockers.length > 0) {\n\t\t\treturn {\n\t\t\t\tloadoutAccessPolicy: undefined,\n\t\t\t\twarnings: state.blockers,\n\t\t\t\truntimeState: state,\n\t\t\t};\n\t\t}\n\t\tconst policy = createLoadoutPolicyFromRuntimeState(state, {\n\t\t\tcwd: input.cwd,\n\t\t\tcommands: profile.commands,\n\t\t});\n\t\treturn {\n\t\t\tloadoutAccessPolicy: policy,\n\t\t\twarnings: uniqueSorted([\n\t\t\t\t...state.warnings,\n\t\t\t\t...(input.task?.trim() && state.activeSkills.length === 0 ? [\"no grok-harness skill signals\"] : []),\n\t\t\t]),\n\t\t\truntimeState: state,\n\t\t};\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\treturn { loadoutAccessPolicy: undefined, warnings: [message], runtimeState: undefined };\n\t}\n}\n\nfunction composeGrokHarnessProfile(input: GrokHarnessDispatchInput): ComposedLoadout {\n\tconst profile = composeLoadout(\"coder\", GROK_HARNESS_DOMAIN_ID);\n\tconst task = input.task?.trim();\n\tif (!task) {\n\t\treturn { ...profile, skills: { allow: [{ kind: \"skill\", names: [] }] } };\n\t}\n\n\tconst inventory = input.resourceLoader.getSkills().skills;\n\tconst selected = selectGrokHarnessSkills(task, inventory, { paths: input.paths });\n\treturn {\n\t\t...profile,\n\t\tskills: { allow: [{ kind: \"skill\", names: [...selected] }] },\n\t};\n}\n"]}
+{"version":3,"file":"grok-harness-dispatch.d.ts","sourceRoot":"","sources":["../../src/core/grok-harness-dispatch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EACN,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAElC,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,wBAAwB,GAAG,4BAA4B,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;AAC3G,MAAM,MAAM,yBAAyB,GAAG,6BAA6B,CAAC,mBAAmB,CAAC,CAAC;AAE3F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,wBAAwB,GAAG,yBAAyB,CAEjG","sourcesContent":["/**\n * Apply the `grok-harness` domain loadout when the active provider is Grok OAuth.\n * Does not require `OMK_DOMAIN_ROUTING=1`. Convenience wrapper over\n * `tryProviderHarnessDispatch()` bound to the real loadout runtime.\n */\n\nimport { LOADOUT_HARNESS_RUNTIME } from \"./domain-dispatch.ts\";\nimport { GROK_HARNESS_SPEC } from \"./grok-harness.ts\";\nimport type { LoadoutRuntimeSession, LoadoutRuntimeState } from \"./loadout-runtime.ts\";\nimport {\n\ttype ProviderHarnessDispatchInput,\n\ttype ProviderHarnessDispatchResult,\n\ttryProviderHarnessDispatch,\n} from \"./provider-harness-dispatch.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\n\nexport type GrokHarnessDispatchInput = ProviderHarnessDispatchInput<LoadoutRuntimeSession, ResourceLoader>;\nexport type GrokHarnessDispatchResult = ProviderHarnessDispatchResult<LoadoutRuntimeState>;\n\nexport function tryGrokHarnessDispatch(input: GrokHarnessDispatchInput): GrokHarnessDispatchResult {\n\treturn tryProviderHarnessDispatch(GROK_HARNESS_SPEC, LOADOUT_HARNESS_RUNTIME, input);\n}\n"]}

package/dist/core/grok-harness-dispatch.js

@@ -1,61 +1,12 @@
 /**
  * Apply the `grok-harness` domain loadout when the active provider is Grok OAuth.
- * Does not require `OMK_DOMAIN_ROUTING=1`.
+ * Does not require `OMK_DOMAIN_ROUTING=1`. Convenience wrapper over
+ * `tryProviderHarnessDispatch()` bound to the real loadout runtime.
  */
-import { getAgentDir } from "../config.js";
-import { GROK_HARNESS_DOMAIN_ID, grokHarnessAutoApplyEnabled, isGrokOAuthProvider, selectGrokHarnessSkills, } from "./grok-harness.js";
-import { composeLoadout } from "./loadout-compose.js";
-import { createLoadoutPolicyFromRuntimeState } from "./loadout-policy-bridge.js";
-import { applyLoadoutToRuntime } from "./loadout-runtime.js";
-import { uniqueSorted } from "./loadout-safety.js";
+import { LOADOUT_HARNESS_RUNTIME } from "./domain-dispatch.js";
+import { GROK_HARNESS_SPEC } from "./grok-harness.js";
+import { tryProviderHarnessDispatch, } from "./provider-harness-dispatch.js";
 export function tryGrokHarnessDispatch(input) {
-    const env = input.env ?? process.env;
-    if (!grokHarnessAutoApplyEnabled(env) || !isGrokOAuthProvider(input.provider)) {
-        return { loadoutAccessPolicy: undefined, warnings: [], runtimeState: undefined };
-    }
-    const agentDir = input.agentDir ?? getAgentDir();
-    try {
-        const profile = composeGrokHarnessProfile(input);
-        const state = applyLoadoutToRuntime(input.session, input.resourceLoader, input.cwd, agentDir, {
-            profile,
-            role: "coder",
-        });
-        if (state.blockers.length > 0) {
-            return {
-                loadoutAccessPolicy: undefined,
-                warnings: state.blockers,
-                runtimeState: state,
-            };
-        }
-        const policy = createLoadoutPolicyFromRuntimeState(state, {
-            cwd: input.cwd,
-            commands: profile.commands,
-        });
-        return {
-            loadoutAccessPolicy: policy,
-            warnings: uniqueSorted([
-                ...state.warnings,
-                ...(input.task?.trim() && state.activeSkills.length === 0 ? ["no grok-harness skill signals"] : []),
-            ]),
-            runtimeState: state,
-        };
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        return { loadoutAccessPolicy: undefined, warnings: [message], runtimeState: undefined };
-    }
-}
-function composeGrokHarnessProfile(input) {
-    const profile = composeLoadout("coder", GROK_HARNESS_DOMAIN_ID);
-    const task = input.task?.trim();
-    if (!task) {
-        return { ...profile, skills: { allow: [{ kind: "skill", names: [] }] } };
-    }
-    const inventory = input.resourceLoader.getSkills().skills;
-    const selected = selectGrokHarnessSkills(task, inventory, { paths: input.paths });
-    return {
-        ...profile,
-        skills: { allow: [{ kind: "skill", names: [...selected] }] },
-    };
+    return tryProviderHarnessDispatch(GROK_HARNESS_SPEC, LOADOUT_HARNESS_RUNTIME, input);
 }
 //# sourceMappingURL=grok-harness-dispatch.js.map

package/dist/core/grok-harness-dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"grok-harness-dispatch.js","sourceRoot":"","sources":["../../src/core/grok-harness-dispatch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACN,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAwB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,mCAAmC,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAwD,MAAM,sBAAsB,CAAC;AACnH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAsBnD,MAAM,UAAU,sBAAsB,CAAC,KAA+B,EAA6B;IAClG,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;IACjD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE;YAC7F,OAAO;YACP,IAAI,EAAE,OAAO;SACb,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACN,mBAAmB,EAAE,SAAS;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,KAAK;aACnB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,mCAAmC,CAAC,KAAK,EAAE;YACzD,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,OAAO;YACN,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,YAAY,CAAC;gBACtB,GAAG,KAAK,CAAC,QAAQ;gBACjB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACnG,CAAC;YACF,YAAY,EAAE,KAAK;SACnB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACzF,CAAC;AAAA,CACD;AAED,SAAS,yBAAyB,CAAC,KAA+B,EAAmB;IACpF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;IAC1D,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,OAAO;QACN,GAAG,OAAO;QACV,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,EAAE;KAC5D,CAAC;AAAA,CACF","sourcesContent":["/**\n * Apply the `grok-harness` domain loadout when the active provider is Grok OAuth.\n * Does not require `OMK_DOMAIN_ROUTING=1`.\n */\n\nimport { getAgentDir } from \"../config.ts\";\nimport {\n\tGROK_HARNESS_DOMAIN_ID,\n\tgrokHarnessAutoApplyEnabled,\n\tisGrokOAuthProvider,\n\tselectGrokHarnessSkills,\n} from \"./grok-harness.ts\";\nimport type { LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport { type ComposedLoadout, composeLoadout } from \"./loadout-compose.ts\";\nimport { createLoadoutPolicyFromRuntimeState } from \"./loadout-policy-bridge.ts\";\nimport { applyLoadoutToRuntime, type LoadoutRuntimeSession, type LoadoutRuntimeState } from \"./loadout-runtime.ts\";\nimport { uniqueSorted } from \"./loadout-safety.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\n\nexport interface GrokHarnessDispatchInput {\n\treadonly provider: string | undefined;\n\treadonly session: LoadoutRuntimeSession;\n\treadonly resourceLoader: ResourceLoader;\n\treadonly cwd: string;\n\treadonly agentDir?: string;\n\treadonly env?: NodeJS.ProcessEnv | Readonly<Record<string, string | undefined>>;\n\t/** When set, narrow the grok-harness skill grant to the documented 2–3 subset. */\n\treadonly task?: string;\n\t/** Optional path hints scored with the task text. */\n\treadonly paths?: readonly string[];\n}\n\nexport interface GrokHarnessDispatchResult {\n\treadonly loadoutAccessPolicy: LoadoutAccessPolicy | undefined;\n\treadonly warnings: readonly string[];\n\treadonly runtimeState: LoadoutRuntimeState | undefined;\n}\n\nexport function tryGrokHarnessDispatch(input: GrokHarnessDispatchInput): GrokHarnessDispatchResult {\n\tconst env = input.env ?? process.env;\n\tif (!grokHarnessAutoApplyEnabled(env) || !isGrokOAuthProvider(input.provider)) {\n\t\treturn { loadoutAccessPolicy: undefined, warnings: [], runtimeState: undefined };\n\t}\n\n\tconst agentDir = input.agentDir ?? getAgentDir();\n\ttry {\n\t\tconst profile = composeGrokHarnessProfile(input);\n\t\tconst state = applyLoadoutToRuntime(input.session, input.resourceLoader, input.cwd, agentDir, {\n\t\t\tprofile,\n\t\t\trole: \"coder\",\n\t\t});\n\t\tif (state.blockers.length > 0) {\n\t\t\treturn {\n\t\t\t\tloadoutAccessPolicy: undefined,\n\t\t\t\twarnings: state.blockers,\n\t\t\t\truntimeState: state,\n\t\t\t};\n\t\t}\n\t\tconst policy = createLoadoutPolicyFromRuntimeState(state, {\n\t\t\tcwd: input.cwd,\n\t\t\tcommands: profile.commands,\n\t\t});\n\t\treturn {\n\t\t\tloadoutAccessPolicy: policy,\n\t\t\twarnings: uniqueSorted([\n\t\t\t\t...state.warnings,\n\t\t\t\t...(input.task?.trim() && state.activeSkills.length === 0 ? [\"no grok-harness skill signals\"] : []),\n\t\t\t]),\n\t\t\truntimeState: state,\n\t\t};\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\treturn { loadoutAccessPolicy: undefined, warnings: [message], runtimeState: undefined };\n\t}\n}\n\nfunction composeGrokHarnessProfile(input: GrokHarnessDispatchInput): ComposedLoadout {\n\tconst profile = composeLoadout(\"coder\", GROK_HARNESS_DOMAIN_ID);\n\tconst task = input.task?.trim();\n\tif (!task) {\n\t\treturn { ...profile, skills: { allow: [{ kind: \"skill\", names: [] }] } };\n\t}\n\n\tconst inventory = input.resourceLoader.getSkills().skills;\n\tconst selected = selectGrokHarnessSkills(task, inventory, { paths: input.paths });\n\treturn {\n\t\t...profile,\n\t\tskills: { allow: [{ kind: \"skill\", names: [...selected] }] },\n\t};\n}\n"]}
+{"version":3,"file":"grok-harness-dispatch.js","sourceRoot":"","sources":["../../src/core/grok-harness-dispatch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAGN,0BAA0B,GAC1B,MAAM,gCAAgC,CAAC;AAMxC,MAAM,UAAU,sBAAsB,CAAC,KAA+B,EAA6B;IAClG,OAAO,0BAA0B,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;AAAA,CACrF","sourcesContent":["/**\n * Apply the `grok-harness` domain loadout when the active provider is Grok OAuth.\n * Does not require `OMK_DOMAIN_ROUTING=1`. Convenience wrapper over\n * `tryProviderHarnessDispatch()` bound to the real loadout runtime.\n */\n\nimport { LOADOUT_HARNESS_RUNTIME } from \"./domain-dispatch.ts\";\nimport { GROK_HARNESS_SPEC } from \"./grok-harness.ts\";\nimport type { LoadoutRuntimeSession, LoadoutRuntimeState } from \"./loadout-runtime.ts\";\nimport {\n\ttype ProviderHarnessDispatchInput,\n\ttype ProviderHarnessDispatchResult,\n\ttryProviderHarnessDispatch,\n} from \"./provider-harness-dispatch.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\n\nexport type GrokHarnessDispatchInput = ProviderHarnessDispatchInput<LoadoutRuntimeSession, ResourceLoader>;\nexport type GrokHarnessDispatchResult = ProviderHarnessDispatchResult<LoadoutRuntimeState>;\n\nexport function tryGrokHarnessDispatch(input: GrokHarnessDispatchInput): GrokHarnessDispatchResult {\n\treturn tryProviderHarnessDispatch(GROK_HARNESS_SPEC, LOADOUT_HARNESS_RUNTIME, input);\n}\n"]}

package/dist/core/grok-harness.d.ts

@@ -1,4 +1,5 @@
-import { type SkillCandidate } from "./skill-selector.ts";
+import { type HarnessSkillCandidate, type HarnessSkillSelectionOptions } from "./harness-skills.ts";
+import type { ProviderHarnessSpec } from "./provider-harness-dispatch.ts";
 /** Domain loadout id applied automatically when Grok OAuth provider is active. */
 export declare const GROK_HARNESS_DOMAIN_ID = "grok-harness";
 export declare const GROK_IMAGINE_MODEL_PREFIX = "grok-imagine-";
@@ -8,21 +9,18 @@ export declare function isGrokImagineModelId(id: string): boolean;
 export declare function classifyGrokModelRoute(modelId: string): GrokModelRoute;
 export declare function assertTextChatModelForCompletion(modelId: string, provider?: string): void;
 export declare function recommendedSkillTierForIntent(intent: GrokHarnessIntent): readonly string[];
-export interface GrokHarnessSkillCandidate extends SkillCandidate {
-    readonly disableModelInvocation?: boolean;
-}
-export interface GrokHarnessSkillSelectionOptions {
-    readonly paths?: readonly string[];
-    readonly contextPressure?: boolean;
-}
+export type GrokHarnessSkillCandidate = HarnessSkillCandidate;
+export type GrokHarnessSkillSelectionOptions = HarnessSkillSelectionOptions;
 /**
  * Smallest grok-harness skill grant from the live inventory. The domain
  * profile owns the allowlist; explicit-only skills are excluded. `headroom`
  * requires lexical or measured pressure, and the result never exceeds
- * {@link MAX_SELECTED_SKILLS} names.
+ * `MAX_SELECTED_SKILLS` names.
  */
 export declare function selectGrokHarnessSkills(task: string, inventory: readonly GrokHarnessSkillCandidate[], options?: GrokHarnessSkillSelectionOptions): readonly string[];
 export declare function isGrokOAuthProvider(provider: string | undefined): boolean;
+/** Provider-harness spec consumed by `tryProviderHarnessDispatch()`. */
+export declare const GROK_HARNESS_SPEC: ProviderHarnessSpec;
 /**
  * When true (default), selecting native `xai` applies the `grok-harness` domain loadout
  * (skills/MCP/hooks/tool gate). Set `OMK_GROK_HARNESS=0` to disable.

package/dist/core/grok-harness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grok-harness.d.ts","sourceRoot":"","sources":["../../src/core/grok-harness.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,KAAK,cAAc,EAAgB,MAAM,qBAAqB,CAAC;AAE7F,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAIrD,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,mBAAmB,CAAC;AAC/D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAwB9E,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAKtE;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAIzF;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,MAAM,EAAE,CAE1F;AAED,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAChE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACnC;AAOD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,SAAS,yBAAyB,EAAE,EAC/C,OAAO,GAAE,gCAAqC,GAC5C,SAAS,MAAM,EAAE,CAiBnB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEzE;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GACjF,OAAO,CAMT","sourcesContent":["import { getDomainProfile } from \"./domain-loadouts.ts\";\nimport { GROK_OAUTH_PROVIDER } from \"./grok-playbook.ts\";\nimport { capabilityGateNames } from \"./loadout-safety.ts\";\nimport { MAX_SELECTED_SKILLS, type SkillCandidate, selectSkills } from \"./skill-selector.ts\";\n\n/** Domain loadout id applied automatically when Grok OAuth provider is active. */\nexport const GROK_HARNESS_DOMAIN_ID = \"grok-harness\";\n\nconst GROK_HARNESS_AUTO_APPLY_ENV = \"OMK_GROK_HARNESS\";\n\nexport const GROK_IMAGINE_MODEL_PREFIX = \"grok-imagine-\";\n\nexport type GrokModelRoute = \"text-chat\" | \"imagine-tool-only\";\nexport type GrokHarnessIntent = \"code\" | \"debug\" | \"plan\" | \"image\" | \"media\";\n\nconst SKILLS_BY_INTENT = {\n\tcode: [\"packages\", \"programming\"],\n\tdebug: [\"packages\", \"debugging\", \"programming\"],\n\tplan: [\"packages\", \"adaptorch-route\"],\n\timage: [\"image-prompt\"],\n\tmedia: [\"image-prompt\", \"adaptorch-route\"],\n} as const satisfies Record<GrokHarnessIntent, readonly string[]>;\n\nclass GrokImagineModelCompletionError extends Error {\n\treadonly name = \"GrokImagineModelCompletionError\";\n\treadonly modelId: string;\n\treadonly provider: string;\n\n\tconstructor(modelId: string, provider: string) {\n\t\tsuper(\n\t\t\t`Grok Imagine model \"${modelId}\" is tool-only on ${provider}; select a text-chat Grok model for completions.`,\n\t\t);\n\t\tthis.modelId = modelId;\n\t\tthis.provider = provider;\n\t}\n}\n\nexport function isGrokImagineModelId(id: string): boolean {\n\treturn id.startsWith(GROK_IMAGINE_MODEL_PREFIX);\n}\n\nexport function classifyGrokModelRoute(modelId: string): GrokModelRoute {\n\tif (isGrokImagineModelId(modelId)) {\n\t\treturn \"imagine-tool-only\";\n\t}\n\treturn \"text-chat\";\n}\n\nexport function assertTextChatModelForCompletion(modelId: string, provider?: string): void {\n\tif (provider === GROK_OAUTH_PROVIDER && isGrokImagineModelId(modelId)) {\n\t\tthrow new GrokImagineModelCompletionError(modelId, provider);\n\t}\n}\n\nexport function recommendedSkillTierForIntent(intent: GrokHarnessIntent): readonly string[] {\n\treturn SKILLS_BY_INTENT[intent];\n}\n\nexport interface GrokHarnessSkillCandidate extends SkillCandidate {\n\treadonly disableModelInvocation?: boolean;\n}\n\nexport interface GrokHarnessSkillSelectionOptions {\n\treadonly paths?: readonly string[];\n\treadonly contextPressure?: boolean;\n}\n\nconst GROK_HARNESS_ALLOWED_SKILLS: ReadonlySet<string> = new Set(\n\tcapabilityGateNames(getDomainProfile(GROK_HARNESS_DOMAIN_ID).skills),\n);\nconst HEADROOM_PRESSURE_RE = /headroom|oversized|context window|context pressure|token budget|\\bcompress\\b/i;\n\n/**\n * Smallest grok-harness skill grant from the live inventory. The domain\n * profile owns the allowlist; explicit-only skills are excluded. `headroom`\n * requires lexical or measured pressure, and the result never exceeds\n * {@link MAX_SELECTED_SKILLS} names.\n */\nexport function selectGrokHarnessSkills(\n\ttask: string,\n\tinventory: readonly GrokHarnessSkillCandidate[],\n\toptions: GrokHarnessSkillSelectionOptions = {},\n): readonly string[] {\n\tconst pressure = options.contextPressure === true || HEADROOM_PRESSURE_RE.test(task);\n\tconst skills = inventory.filter((skill) => {\n\t\tif (!GROK_HARNESS_ALLOWED_SKILLS.has(skill.name)) return false;\n\t\tif (skill.disableModelInvocation) return false;\n\t\tif (skill.name === \"headroom\" && !pressure) return false;\n\t\treturn true;\n\t});\n\tconst selected = selectSkills({\n\t\ttask,\n\t\tskills,\n\t\tpaths: options.paths,\n\t\tmax: MAX_SELECTED_SKILLS,\n\t}).selected.map((skill) => skill.name);\n\tconst headroom = pressure ? skills.find((skill) => skill.name === \"headroom\") : undefined;\n\tif (!headroom || selected.includes(headroom.name)) return selected;\n\treturn [...selected.slice(0, MAX_SELECTED_SKILLS - 1), headroom.name];\n}\n\nexport function isGrokOAuthProvider(provider: string | undefined): boolean {\n\treturn provider === GROK_OAUTH_PROVIDER;\n}\n\n/**\n * When true (default), selecting native `xai` applies the `grok-harness` domain loadout\n * (skills/MCP/hooks/tool gate). Set `OMK_GROK_HARNESS=0` to disable.\n */\nexport function grokHarnessAutoApplyEnabled(\n\tenv: NodeJS.ProcessEnv | Readonly<Record<string, string | undefined>> = process.env,\n): boolean {\n\tconst raw = env[GROK_HARNESS_AUTO_APPLY_ENV]?.trim().toLowerCase();\n\tif (raw === \"0\" || raw === \"false\" || raw === \"off\" || raw === \"no\") {\n\t\treturn false;\n\t}\n\treturn true;\n}\n"]}
+{"version":3,"file":"grok-harness.d.ts","sourceRoot":"","sources":["../../src/core/grok-harness.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EAEjC,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAIrD,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,mBAAmB,CAAC;AAC/D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAwB9E,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAKtE;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAIzF;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,MAAM,EAAE,CAE1F;AAED,MAAM,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAC9D,MAAM,MAAM,gCAAgC,GAAG,4BAA4B,CAAC;AAM5E;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,SAAS,yBAAyB,EAAE,EAC/C,OAAO,GAAE,gCAAqC,GAC5C,SAAS,MAAM,EAAE,CAEnB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEzE;AAED,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,mBAI/B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,2BAA2B,CAC1C,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GACjF,OAAO,CAMT","sourcesContent":["import { getDomainProfile } from \"./domain-loadouts.ts\";\nimport { GROK_OAUTH_PROVIDER } from \"./grok-playbook.ts\";\nimport {\n\ttype HarnessSkillCandidate,\n\ttype HarnessSkillSelectionOptions,\n\tselectHarnessSkills,\n} from \"./harness-skills.ts\";\nimport { capabilityGateNames } from \"./loadout-safety.ts\";\nimport type { ProviderHarnessSpec } from \"./provider-harness-dispatch.ts\";\n\n/** Domain loadout id applied automatically when Grok OAuth provider is active. */\nexport const GROK_HARNESS_DOMAIN_ID = \"grok-harness\";\n\nconst GROK_HARNESS_AUTO_APPLY_ENV = \"OMK_GROK_HARNESS\";\n\nexport const GROK_IMAGINE_MODEL_PREFIX = \"grok-imagine-\";\n\nexport type GrokModelRoute = \"text-chat\" | \"imagine-tool-only\";\nexport type GrokHarnessIntent = \"code\" | \"debug\" | \"plan\" | \"image\" | \"media\";\n\nconst SKILLS_BY_INTENT = {\n\tcode: [\"packages\", \"programming\"],\n\tdebug: [\"packages\", \"debugging\", \"programming\"],\n\tplan: [\"packages\", \"adaptorch-route\"],\n\timage: [\"image-prompt\"],\n\tmedia: [\"image-prompt\", \"adaptorch-route\"],\n} as const satisfies Record<GrokHarnessIntent, readonly string[]>;\n\nclass GrokImagineModelCompletionError extends Error {\n\treadonly name = \"GrokImagineModelCompletionError\";\n\treadonly modelId: string;\n\treadonly provider: string;\n\n\tconstructor(modelId: string, provider: string) {\n\t\tsuper(\n\t\t\t`Grok Imagine model \"${modelId}\" is tool-only on ${provider}; select a text-chat Grok model for completions.`,\n\t\t);\n\t\tthis.modelId = modelId;\n\t\tthis.provider = provider;\n\t}\n}\n\nexport function isGrokImagineModelId(id: string): boolean {\n\treturn id.startsWith(GROK_IMAGINE_MODEL_PREFIX);\n}\n\nexport function classifyGrokModelRoute(modelId: string): GrokModelRoute {\n\tif (isGrokImagineModelId(modelId)) {\n\t\treturn \"imagine-tool-only\";\n\t}\n\treturn \"text-chat\";\n}\n\nexport function assertTextChatModelForCompletion(modelId: string, provider?: string): void {\n\tif (provider === GROK_OAUTH_PROVIDER && isGrokImagineModelId(modelId)) {\n\t\tthrow new GrokImagineModelCompletionError(modelId, provider);\n\t}\n}\n\nexport function recommendedSkillTierForIntent(intent: GrokHarnessIntent): readonly string[] {\n\treturn SKILLS_BY_INTENT[intent];\n}\n\nexport type GrokHarnessSkillCandidate = HarnessSkillCandidate;\nexport type GrokHarnessSkillSelectionOptions = HarnessSkillSelectionOptions;\n\nconst GROK_HARNESS_ALLOWED_SKILLS: ReadonlySet<string> = new Set(\n\tcapabilityGateNames(getDomainProfile(GROK_HARNESS_DOMAIN_ID).skills),\n);\n\n/**\n * Smallest grok-harness skill grant from the live inventory. The domain\n * profile owns the allowlist; explicit-only skills are excluded. `headroom`\n * requires lexical or measured pressure, and the result never exceeds\n * `MAX_SELECTED_SKILLS` names.\n */\nexport function selectGrokHarnessSkills(\n\ttask: string,\n\tinventory: readonly GrokHarnessSkillCandidate[],\n\toptions: GrokHarnessSkillSelectionOptions = {},\n): readonly string[] {\n\treturn selectHarnessSkills(GROK_HARNESS_ALLOWED_SKILLS, task, inventory, options);\n}\n\nexport function isGrokOAuthProvider(provider: string | undefined): boolean {\n\treturn provider === GROK_OAUTH_PROVIDER;\n}\n\n/** Provider-harness spec consumed by `tryProviderHarnessDispatch()`. */\nexport const GROK_HARNESS_SPEC: ProviderHarnessSpec = {\n\tdomainId: GROK_HARNESS_DOMAIN_ID,\n\tapplies: (provider, env) => grokHarnessAutoApplyEnabled(env) && isGrokOAuthProvider(provider),\n\tselectSkills: (task, inventory, options) => selectGrokHarnessSkills(task, inventory, { paths: options.paths }),\n};\n\n/**\n * When true (default), selecting native `xai` applies the `grok-harness` domain loadout\n * (skills/MCP/hooks/tool gate). Set `OMK_GROK_HARNESS=0` to disable.\n */\nexport function grokHarnessAutoApplyEnabled(\n\tenv: NodeJS.ProcessEnv | Readonly<Record<string, string | undefined>> = process.env,\n): boolean {\n\tconst raw = env[GROK_HARNESS_AUTO_APPLY_ENV]?.trim().toLowerCase();\n\tif (raw === \"0\" || raw === \"false\" || raw === \"off\" || raw === \"no\") {\n\t\treturn false;\n\t}\n\treturn true;\n}\n"]}

package/dist/core/grok-harness.js

@@ -1,7 +1,7 @@
 import { getDomainProfile } from "./domain-loadouts.js";
 import { GROK_OAUTH_PROVIDER } from "./grok-playbook.js";
+import { selectHarnessSkills, } from "./harness-skills.js";
 import { capabilityGateNames } from "./loadout-safety.js";
-import { MAX_SELECTED_SKILLS, selectSkills } from "./skill-selector.js";
 /** Domain loadout id applied automatically when Grok OAuth provider is active. */
 export const GROK_HARNESS_DOMAIN_ID = "grok-harness";
 const GROK_HARNESS_AUTO_APPLY_ENV = "OMK_GROK_HARNESS";
@@ -41,38 +41,24 @@ export function recommendedSkillTierForIntent(intent) {
     return SKILLS_BY_INTENT[intent];
 }
 const GROK_HARNESS_ALLOWED_SKILLS = new Set(capabilityGateNames(getDomainProfile(GROK_HARNESS_DOMAIN_ID).skills));
-const HEADROOM_PRESSURE_RE = /headroom|oversized|context window|context pressure|token budget|\bcompress\b/i;
 /**
  * Smallest grok-harness skill grant from the live inventory. The domain
  * profile owns the allowlist; explicit-only skills are excluded. `headroom`
  * requires lexical or measured pressure, and the result never exceeds
- * {@link MAX_SELECTED_SKILLS} names.
+ * `MAX_SELECTED_SKILLS` names.
  */
 export function selectGrokHarnessSkills(task, inventory, options = {}) {
-    const pressure = options.contextPressure === true || HEADROOM_PRESSURE_RE.test(task);
-    const skills = inventory.filter((skill) => {
-        if (!GROK_HARNESS_ALLOWED_SKILLS.has(skill.name))
-            return false;
-        if (skill.disableModelInvocation)
-            return false;
-        if (skill.name === "headroom" && !pressure)
-            return false;
-        return true;
-    });
-    const selected = selectSkills({
-        task,
-        skills,
-        paths: options.paths,
-        max: MAX_SELECTED_SKILLS,
-    }).selected.map((skill) => skill.name);
-    const headroom = pressure ? skills.find((skill) => skill.name === "headroom") : undefined;
-    if (!headroom || selected.includes(headroom.name))
-        return selected;
-    return [...selected.slice(0, MAX_SELECTED_SKILLS - 1), headroom.name];
+    return selectHarnessSkills(GROK_HARNESS_ALLOWED_SKILLS, task, inventory, options);
 }
 export function isGrokOAuthProvider(provider) {
     return provider === GROK_OAUTH_PROVIDER;
 }
+/** Provider-harness spec consumed by `tryProviderHarnessDispatch()`. */
+export const GROK_HARNESS_SPEC = {
+    domainId: GROK_HARNESS_DOMAIN_ID,
+    applies: (provider, env) => grokHarnessAutoApplyEnabled(env) && isGrokOAuthProvider(provider),
+    selectSkills: (task, inventory, options) => selectGrokHarnessSkills(task, inventory, { paths: options.paths }),
+};
 /**
  * When true (default), selecting native `xai` applies the `grok-harness` domain loadout
  * (skills/MCP/hooks/tool gate). Set `OMK_GROK_HARNESS=0` to disable.

package/dist/core/grok-harness.js.map

@@ -1 +1 @@
-{"version":3,"file":"grok-harness.js","sourceRoot":"","sources":["../../src/core/grok-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAuB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7F,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAErD,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAEvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAKzD,MAAM,gBAAgB,GAAG;IACxB,IAAI,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;IACjC,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC;IAC/C,IAAI,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACrC,KAAK,EAAE,CAAC,cAAc,CAAC;IACvB,KAAK,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;CACsB,CAAC;AAElE,MAAM,+BAAgC,SAAQ,KAAK;IACzC,IAAI,GAAG,iCAAiC,CAAC;IACzC,OAAO,CAAS;IAChB,QAAQ,CAAS;IAE1B,YAAY,OAAe,EAAE,QAAgB,EAAE;QAC9C,KAAK,CACJ,uBAAuB,OAAO,qBAAqB,QAAQ,kDAAkD,CAC7G,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAAA,CACzB;CACD;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAW;IACzD,OAAO,EAAE,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;AAAA,CAChD;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAkB;IACvE,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,mBAAmB,CAAC;IAC5B,CAAC;IACD,OAAO,WAAW,CAAC;AAAA,CACnB;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAe,EAAE,QAAiB,EAAQ;IAC1F,IAAI,QAAQ,KAAK,mBAAmB,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,+BAA+B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAyB,EAAqB;IAC3F,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAAA,CAChC;AAWD,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAC/D,mBAAmB,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,CACpE,CAAC;AACF,MAAM,oBAAoB,GAAG,+EAA+E,CAAC;AAE7G;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACtC,IAAY,EACZ,SAA+C,EAC/C,OAAO,GAAqC,EAAE,EAC1B;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,KAAK,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,KAAK,CAAC,sBAAsB;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzD,OAAO,IAAI,CAAC;IAAA,CACZ,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC7B,IAAI;QACJ,MAAM;QACN,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,mBAAmB;KACxB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAA,CACtE;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA4B,EAAW;IAC1E,OAAO,QAAQ,KAAK,mBAAmB,CAAC;AAAA,CACxC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAC1C,GAAG,GAAqE,OAAO,CAAC,GAAG,EACzE;IACV,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ","sourcesContent":["import { getDomainProfile } from \"./domain-loadouts.ts\";\nimport { GROK_OAUTH_PROVIDER } from \"./grok-playbook.ts\";\nimport { capabilityGateNames } from \"./loadout-safety.ts\";\nimport { MAX_SELECTED_SKILLS, type SkillCandidate, selectSkills } from \"./skill-selector.ts\";\n\n/** Domain loadout id applied automatically when Grok OAuth provider is active. */\nexport const GROK_HARNESS_DOMAIN_ID = \"grok-harness\";\n\nconst GROK_HARNESS_AUTO_APPLY_ENV = \"OMK_GROK_HARNESS\";\n\nexport const GROK_IMAGINE_MODEL_PREFIX = \"grok-imagine-\";\n\nexport type GrokModelRoute = \"text-chat\" | \"imagine-tool-only\";\nexport type GrokHarnessIntent = \"code\" | \"debug\" | \"plan\" | \"image\" | \"media\";\n\nconst SKILLS_BY_INTENT = {\n\tcode: [\"packages\", \"programming\"],\n\tdebug: [\"packages\", \"debugging\", \"programming\"],\n\tplan: [\"packages\", \"adaptorch-route\"],\n\timage: [\"image-prompt\"],\n\tmedia: [\"image-prompt\", \"adaptorch-route\"],\n} as const satisfies Record<GrokHarnessIntent, readonly string[]>;\n\nclass GrokImagineModelCompletionError extends Error {\n\treadonly name = \"GrokImagineModelCompletionError\";\n\treadonly modelId: string;\n\treadonly provider: string;\n\n\tconstructor(modelId: string, provider: string) {\n\t\tsuper(\n\t\t\t`Grok Imagine model \"${modelId}\" is tool-only on ${provider}; select a text-chat Grok model for completions.`,\n\t\t);\n\t\tthis.modelId = modelId;\n\t\tthis.provider = provider;\n\t}\n}\n\nexport function isGrokImagineModelId(id: string): boolean {\n\treturn id.startsWith(GROK_IMAGINE_MODEL_PREFIX);\n}\n\nexport function classifyGrokModelRoute(modelId: string): GrokModelRoute {\n\tif (isGrokImagineModelId(modelId)) {\n\t\treturn \"imagine-tool-only\";\n\t}\n\treturn \"text-chat\";\n}\n\nexport function assertTextChatModelForCompletion(modelId: string, provider?: string): void {\n\tif (provider === GROK_OAUTH_PROVIDER && isGrokImagineModelId(modelId)) {\n\t\tthrow new GrokImagineModelCompletionError(modelId, provider);\n\t}\n}\n\nexport function recommendedSkillTierForIntent(intent: GrokHarnessIntent): readonly string[] {\n\treturn SKILLS_BY_INTENT[intent];\n}\n\nexport interface GrokHarnessSkillCandidate extends SkillCandidate {\n\treadonly disableModelInvocation?: boolean;\n}\n\nexport interface GrokHarnessSkillSelectionOptions {\n\treadonly paths?: readonly string[];\n\treadonly contextPressure?: boolean;\n}\n\nconst GROK_HARNESS_ALLOWED_SKILLS: ReadonlySet<string> = new Set(\n\tcapabilityGateNames(getDomainProfile(GROK_HARNESS_DOMAIN_ID).skills),\n);\nconst HEADROOM_PRESSURE_RE = /headroom|oversized|context window|context pressure|token budget|\\bcompress\\b/i;\n\n/**\n * Smallest grok-harness skill grant from the live inventory. The domain\n * profile owns the allowlist; explicit-only skills are excluded. `headroom`\n * requires lexical or measured pressure, and the result never exceeds\n * {@link MAX_SELECTED_SKILLS} names.\n */\nexport function selectGrokHarnessSkills(\n\ttask: string,\n\tinventory: readonly GrokHarnessSkillCandidate[],\n\toptions: GrokHarnessSkillSelectionOptions = {},\n): readonly string[] {\n\tconst pressure = options.contextPressure === true || HEADROOM_PRESSURE_RE.test(task);\n\tconst skills = inventory.filter((skill) => {\n\t\tif (!GROK_HARNESS_ALLOWED_SKILLS.has(skill.name)) return false;\n\t\tif (skill.disableModelInvocation) return false;\n\t\tif (skill.name === \"headroom\" && !pressure) return false;\n\t\treturn true;\n\t});\n\tconst selected = selectSkills({\n\t\ttask,\n\t\tskills,\n\t\tpaths: options.paths,\n\t\tmax: MAX_SELECTED_SKILLS,\n\t}).selected.map((skill) => skill.name);\n\tconst headroom = pressure ? skills.find((skill) => skill.name === \"headroom\") : undefined;\n\tif (!headroom || selected.includes(headroom.name)) return selected;\n\treturn [...selected.slice(0, MAX_SELECTED_SKILLS - 1), headroom.name];\n}\n\nexport function isGrokOAuthProvider(provider: string | undefined): boolean {\n\treturn provider === GROK_OAUTH_PROVIDER;\n}\n\n/**\n * When true (default), selecting native `xai` applies the `grok-harness` domain loadout\n * (skills/MCP/hooks/tool gate). Set `OMK_GROK_HARNESS=0` to disable.\n */\nexport function grokHarnessAutoApplyEnabled(\n\tenv: NodeJS.ProcessEnv | Readonly<Record<string, string | undefined>> = process.env,\n): boolean {\n\tconst raw = env[GROK_HARNESS_AUTO_APPLY_ENV]?.trim().toLowerCase();\n\tif (raw === \"0\" || raw === \"false\" || raw === \"off\" || raw === \"no\") {\n\t\treturn false;\n\t}\n\treturn true;\n}\n"]}
+{"version":3,"file":"grok-harness.js","sourceRoot":"","sources":["../../src/core/grok-harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAGN,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG1D,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAErD,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAEvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAKzD,MAAM,gBAAgB,GAAG;IACxB,IAAI,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;IACjC,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC;IAC/C,IAAI,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACrC,KAAK,EAAE,CAAC,cAAc,CAAC;IACvB,KAAK,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;CACsB,CAAC;AAElE,MAAM,+BAAgC,SAAQ,KAAK;IACzC,IAAI,GAAG,iCAAiC,CAAC;IACzC,OAAO,CAAS;IAChB,QAAQ,CAAS;IAE1B,YAAY,OAAe,EAAE,QAAgB,EAAE;QAC9C,KAAK,CACJ,uBAAuB,OAAO,qBAAqB,QAAQ,kDAAkD,CAC7G,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAAA,CACzB;CACD;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAW;IACzD,OAAO,EAAE,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;AAAA,CAChD;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAkB;IACvE,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,mBAAmB,CAAC;IAC5B,CAAC;IACD,OAAO,WAAW,CAAC;AAAA,CACnB;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAe,EAAE,QAAiB,EAAQ;IAC1F,IAAI,QAAQ,KAAK,mBAAmB,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,+BAA+B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAyB,EAAqB;IAC3F,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAAA,CAChC;AAKD,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAC/D,mBAAmB,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,CACpE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACtC,IAAY,EACZ,SAA+C,EAC/C,OAAO,GAAqC,EAAE,EAC1B;IACpB,OAAO,mBAAmB,CAAC,2BAA2B,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,CAClF;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA4B,EAAW;IAC1E,OAAO,QAAQ,KAAK,mBAAmB,CAAC;AAAA,CACxC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAwB;IACrD,QAAQ,EAAE,sBAAsB;IAChC,OAAO,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,QAAQ,CAAC;IAC7F,YAAY,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;CAC9G,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAC1C,GAAG,GAAqE,OAAO,CAAC,GAAG,EACzE;IACV,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ","sourcesContent":["import { getDomainProfile } from \"./domain-loadouts.ts\";\nimport { GROK_OAUTH_PROVIDER } from \"./grok-playbook.ts\";\nimport {\n\ttype HarnessSkillCandidate,\n\ttype HarnessSkillSelectionOptions,\n\tselectHarnessSkills,\n} from \"./harness-skills.ts\";\nimport { capabilityGateNames } from \"./loadout-safety.ts\";\nimport type { ProviderHarnessSpec } from \"./provider-harness-dispatch.ts\";\n\n/** Domain loadout id applied automatically when Grok OAuth provider is active. */\nexport const GROK_HARNESS_DOMAIN_ID = \"grok-harness\";\n\nconst GROK_HARNESS_AUTO_APPLY_ENV = \"OMK_GROK_HARNESS\";\n\nexport const GROK_IMAGINE_MODEL_PREFIX = \"grok-imagine-\";\n\nexport type GrokModelRoute = \"text-chat\" | \"imagine-tool-only\";\nexport type GrokHarnessIntent = \"code\" | \"debug\" | \"plan\" | \"image\" | \"media\";\n\nconst SKILLS_BY_INTENT = {\n\tcode: [\"packages\", \"programming\"],\n\tdebug: [\"packages\", \"debugging\", \"programming\"],\n\tplan: [\"packages\", \"adaptorch-route\"],\n\timage: [\"image-prompt\"],\n\tmedia: [\"image-prompt\", \"adaptorch-route\"],\n} as const satisfies Record<GrokHarnessIntent, readonly string[]>;\n\nclass GrokImagineModelCompletionError extends Error {\n\treadonly name = \"GrokImagineModelCompletionError\";\n\treadonly modelId: string;\n\treadonly provider: string;\n\n\tconstructor(modelId: string, provider: string) {\n\t\tsuper(\n\t\t\t`Grok Imagine model \"${modelId}\" is tool-only on ${provider}; select a text-chat Grok model for completions.`,\n\t\t);\n\t\tthis.modelId = modelId;\n\t\tthis.provider = provider;\n\t}\n}\n\nexport function isGrokImagineModelId(id: string): boolean {\n\treturn id.startsWith(GROK_IMAGINE_MODEL_PREFIX);\n}\n\nexport function classifyGrokModelRoute(modelId: string): GrokModelRoute {\n\tif (isGrokImagineModelId(modelId)) {\n\t\treturn \"imagine-tool-only\";\n\t}\n\treturn \"text-chat\";\n}\n\nexport function assertTextChatModelForCompletion(modelId: string, provider?: string): void {\n\tif (provider === GROK_OAUTH_PROVIDER && isGrokImagineModelId(modelId)) {\n\t\tthrow new GrokImagineModelCompletionError(modelId, provider);\n\t}\n}\n\nexport function recommendedSkillTierForIntent(intent: GrokHarnessIntent): readonly string[] {\n\treturn SKILLS_BY_INTENT[intent];\n}\n\nexport type GrokHarnessSkillCandidate = HarnessSkillCandidate;\nexport type GrokHarnessSkillSelectionOptions = HarnessSkillSelectionOptions;\n\nconst GROK_HARNESS_ALLOWED_SKILLS: ReadonlySet<string> = new Set(\n\tcapabilityGateNames(getDomainProfile(GROK_HARNESS_DOMAIN_ID).skills),\n);\n\n/**\n * Smallest grok-harness skill grant from the live inventory. The domain\n * profile owns the allowlist; explicit-only skills are excluded. `headroom`\n * requires lexical or measured pressure, and the result never exceeds\n * `MAX_SELECTED_SKILLS` names.\n */\nexport function selectGrokHarnessSkills(\n\ttask: string,\n\tinventory: readonly GrokHarnessSkillCandidate[],\n\toptions: GrokHarnessSkillSelectionOptions = {},\n): readonly string[] {\n\treturn selectHarnessSkills(GROK_HARNESS_ALLOWED_SKILLS, task, inventory, options);\n}\n\nexport function isGrokOAuthProvider(provider: string | undefined): boolean {\n\treturn provider === GROK_OAUTH_PROVIDER;\n}\n\n/** Provider-harness spec consumed by `tryProviderHarnessDispatch()`. */\nexport const GROK_HARNESS_SPEC: ProviderHarnessSpec = {\n\tdomainId: GROK_HARNESS_DOMAIN_ID,\n\tapplies: (provider, env) => grokHarnessAutoApplyEnabled(env) && isGrokOAuthProvider(provider),\n\tselectSkills: (task, inventory, options) => selectGrokHarnessSkills(task, inventory, { paths: options.paths }),\n};\n\n/**\n * When true (default), selecting native `xai` applies the `grok-harness` domain loadout\n * (skills/MCP/hooks/tool gate). Set `OMK_GROK_HARNESS=0` to disable.\n */\nexport function grokHarnessAutoApplyEnabled(\n\tenv: NodeJS.ProcessEnv | Readonly<Record<string, string | undefined>> = process.env,\n): boolean {\n\tconst raw = env[GROK_HARNESS_AUTO_APPLY_ENV]?.trim().toLowerCase();\n\tif (raw === \"0\" || raw === \"false\" || raw === \"off\" || raw === \"no\") {\n\t\treturn false;\n\t}\n\treturn true;\n}\n"]}

package/dist/core/harness-skills.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Shared skill-grant selection for provider harnesses (Grok, Devin SWE-2).
+ * The domain profile owns the allowlist; this module applies the common
+ * exclusions and the `headroom` pressure rule on top of `selectSkills()`.
+ */
+import { type SkillCandidate } from "./skill-selector.ts";
+export interface HarnessSkillCandidate extends SkillCandidate {
+    readonly disableModelInvocation?: boolean;
+}
+export interface HarnessSkillSelectionOptions {
+    readonly paths?: readonly string[];
+    readonly contextPressure?: boolean;
+}
+/**
+ * Smallest harness skill grant from the live inventory. Explicit-only skills
+ * are excluded; `headroom` requires lexical or measured pressure; the result
+ * never exceeds {@link MAX_SELECTED_SKILLS} names.
+ */
+export declare function selectHarnessSkills(allowed: ReadonlySet<string>, task: string, inventory: readonly HarnessSkillCandidate[], options?: HarnessSkillSelectionOptions): readonly string[];
+//# sourceMappingURL=harness-skills.d.ts.map

package/dist/core/harness-skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-skills.d.ts","sourceRoot":"","sources":["../../src/core/harness-skills.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAuB,KAAK,cAAc,EAAgB,MAAM,qBAAqB,CAAC;AAE7F,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC5D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACnC;AAKD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAC5B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,SAAS,qBAAqB,EAAE,EAC3C,OAAO,GAAE,4BAAiC,GACxC,SAAS,MAAM,EAAE,CAiBnB","sourcesContent":["/**\n * Shared skill-grant selection for provider harnesses (Grok, Devin SWE-2).\n * The domain profile owns the allowlist; this module applies the common\n * exclusions and the `headroom` pressure rule on top of `selectSkills()`.\n */\n\nimport { MAX_SELECTED_SKILLS, type SkillCandidate, selectSkills } from \"./skill-selector.ts\";\n\nexport interface HarnessSkillCandidate extends SkillCandidate {\n\treadonly disableModelInvocation?: boolean;\n}\n\nexport interface HarnessSkillSelectionOptions {\n\treadonly paths?: readonly string[];\n\treadonly contextPressure?: boolean;\n}\n\nconst HEADROOM_SKILL = \"headroom\";\nconst HEADROOM_PRESSURE_RE = /headroom|oversized|context window|context pressure|token budget|\\bcompress\\b/i;\n\n/**\n * Smallest harness skill grant from the live inventory. Explicit-only skills\n * are excluded; `headroom` requires lexical or measured pressure; the result\n * never exceeds {@link MAX_SELECTED_SKILLS} names.\n */\nexport function selectHarnessSkills(\n\tallowed: ReadonlySet<string>,\n\ttask: string,\n\tinventory: readonly HarnessSkillCandidate[],\n\toptions: HarnessSkillSelectionOptions = {},\n): readonly string[] {\n\tconst pressure = options.contextPressure === true || HEADROOM_PRESSURE_RE.test(task);\n\tconst skills = inventory.filter((skill) => {\n\t\tif (!allowed.has(skill.name)) return false;\n\t\tif (skill.disableModelInvocation) return false;\n\t\tif (skill.name === HEADROOM_SKILL && !pressure) return false;\n\t\treturn true;\n\t});\n\tconst selected = selectSkills({\n\t\ttask,\n\t\tskills,\n\t\tpaths: options.paths,\n\t\tmax: MAX_SELECTED_SKILLS,\n\t}).selected.map((skill) => skill.name);\n\tconst headroom = pressure ? skills.find((skill) => skill.name === HEADROOM_SKILL) : undefined;\n\tif (!headroom || selected.includes(headroom.name)) return selected;\n\treturn [...selected.slice(0, MAX_SELECTED_SKILLS - 1), headroom.name];\n}\n"]}

package/dist/core/harness-skills.js

@@ -0,0 +1,36 @@
+/**
+ * Shared skill-grant selection for provider harnesses (Grok, Devin SWE-2).
+ * The domain profile owns the allowlist; this module applies the common
+ * exclusions and the `headroom` pressure rule on top of `selectSkills()`.
+ */
+import { MAX_SELECTED_SKILLS, selectSkills } from "./skill-selector.js";
+const HEADROOM_SKILL = "headroom";
+const HEADROOM_PRESSURE_RE = /headroom|oversized|context window|context pressure|token budget|\bcompress\b/i;
+/**
+ * Smallest harness skill grant from the live inventory. Explicit-only skills
+ * are excluded; `headroom` requires lexical or measured pressure; the result
+ * never exceeds {@link MAX_SELECTED_SKILLS} names.
+ */
+export function selectHarnessSkills(allowed, task, inventory, options = {}) {
+    const pressure = options.contextPressure === true || HEADROOM_PRESSURE_RE.test(task);
+    const skills = inventory.filter((skill) => {
+        if (!allowed.has(skill.name))
+            return false;
+        if (skill.disableModelInvocation)
+            return false;
+        if (skill.name === HEADROOM_SKILL && !pressure)
+            return false;
+        return true;
+    });
+    const selected = selectSkills({
+        task,
+        skills,
+        paths: options.paths,
+        max: MAX_SELECTED_SKILLS,
+    }).selected.map((skill) => skill.name);
+    const headroom = pressure ? skills.find((skill) => skill.name === HEADROOM_SKILL) : undefined;
+    if (!headroom || selected.includes(headroom.name))
+        return selected;
+    return [...selected.slice(0, MAX_SELECTED_SKILLS - 1), headroom.name];
+}
+//# sourceMappingURL=harness-skills.js.map

package/dist/core/harness-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-skills.js","sourceRoot":"","sources":["../../src/core/harness-skills.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAuB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAW7F,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,oBAAoB,GAAG,+EAA+E,CAAC;AAE7G;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAA4B,EAC5B,IAAY,EACZ,SAA2C,EAC3C,OAAO,GAAiC,EAAE,EACtB;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,KAAK,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,KAAK,CAAC,sBAAsB;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC7D,OAAO,IAAI,CAAC;IAAA,CACZ,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC7B,IAAI;QACJ,MAAM;QACN,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,mBAAmB;KACxB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAA,CACtE","sourcesContent":["/**\n * Shared skill-grant selection for provider harnesses (Grok, Devin SWE-2).\n * The domain profile owns the allowlist; this module applies the common\n * exclusions and the `headroom` pressure rule on top of `selectSkills()`.\n */\n\nimport { MAX_SELECTED_SKILLS, type SkillCandidate, selectSkills } from \"./skill-selector.ts\";\n\nexport interface HarnessSkillCandidate extends SkillCandidate {\n\treadonly disableModelInvocation?: boolean;\n}\n\nexport interface HarnessSkillSelectionOptions {\n\treadonly paths?: readonly string[];\n\treadonly contextPressure?: boolean;\n}\n\nconst HEADROOM_SKILL = \"headroom\";\nconst HEADROOM_PRESSURE_RE = /headroom|oversized|context window|context pressure|token budget|\\bcompress\\b/i;\n\n/**\n * Smallest harness skill grant from the live inventory. Explicit-only skills\n * are excluded; `headroom` requires lexical or measured pressure; the result\n * never exceeds {@link MAX_SELECTED_SKILLS} names.\n */\nexport function selectHarnessSkills(\n\tallowed: ReadonlySet<string>,\n\ttask: string,\n\tinventory: readonly HarnessSkillCandidate[],\n\toptions: HarnessSkillSelectionOptions = {},\n): readonly string[] {\n\tconst pressure = options.contextPressure === true || HEADROOM_PRESSURE_RE.test(task);\n\tconst skills = inventory.filter((skill) => {\n\t\tif (!allowed.has(skill.name)) return false;\n\t\tif (skill.disableModelInvocation) return false;\n\t\tif (skill.name === HEADROOM_SKILL && !pressure) return false;\n\t\treturn true;\n\t});\n\tconst selected = selectSkills({\n\t\ttask,\n\t\tskills,\n\t\tpaths: options.paths,\n\t\tmax: MAX_SELECTED_SKILLS,\n\t}).selected.map((skill) => skill.name);\n\tconst headroom = pressure ? skills.find((skill) => skill.name === HEADROOM_SKILL) : undefined;\n\tif (!headroom || selected.includes(headroom.name)) return selected;\n\treturn [...selected.slice(0, MAX_SELECTED_SKILLS - 1), headroom.name];\n}\n"]}

package/dist/core/loadout-runtime-state.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Loadout runtime state shape and the blocked-state constructors shared by
+ * profile validation and builtin-shadow detection. Pure data; no session access.
+ */
+import type { CapabilityInventory, LoadoutAuthority, LoadoutProfile, SchedulerFields } from "./loadouts.ts";
+export interface LoadoutRuntimeState {
+    profileName: string;
+    authority: LoadoutAuthority;
+    activeTools: string[];
+    activeSkills: string[];
+    activeMcp: string[];
+    activeHooks: string[];
+    schedulerFields: SchedulerFields;
+    blockers: string[];
+    warnings: string[];
+}
+/** A runtime state that activates nothing because the profile could not be applied. */
+export declare function blockedLoadoutRuntime(profile: Pick<LoadoutProfile, "name" | "authority">, blockers: string[]): LoadoutRuntimeState;
+/**
+ * A builtin always wins a name collision; an extension tool must never shadow
+ * `bash` (mirrors the AgentSession._refreshToolRegistry check). Returns the
+ * sorted, deduplicated builtin names that non-builtin inventory tools reuse.
+ */
+export declare function shadowedBuiltinTools(builtinNames: Iterable<string>, inventory: Pick<CapabilityInventory, "tools">): string[];
+//# sourceMappingURL=loadout-runtime-state.d.ts.map

package/dist/core/loadout-runtime-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-runtime-state.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime-state.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE5G,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,uFAAuF;AACvF,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,WAAW,CAAC,EACnD,QAAQ,EAAE,MAAM,EAAE,GAChB,mBAAmB,CAYrB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CACnC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,EAC9B,SAAS,EAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAC3C,MAAM,EAAE,CAOV","sourcesContent":["/**\n * Loadout runtime state shape and the blocked-state constructors shared by\n * profile validation and builtin-shadow detection. Pure data; no session access.\n */\n\nimport type { CapabilityInventory, LoadoutAuthority, LoadoutProfile, SchedulerFields } from \"./loadouts.ts\";\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\n/** A runtime state that activates nothing because the profile could not be applied. */\nexport function blockedLoadoutRuntime(\n\tprofile: Pick<LoadoutProfile, \"name\" | \"authority\">,\n\tblockers: string[],\n): LoadoutRuntimeState {\n\treturn {\n\t\tprofileName: profile.name,\n\t\tauthority: profile.authority,\n\t\tactiveTools: [],\n\t\tactiveSkills: [],\n\t\tactiveMcp: [],\n\t\tactiveHooks: [],\n\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\tblockers,\n\t\twarnings: [],\n\t};\n}\n\n/**\n * A builtin always wins a name collision; an extension tool must never shadow\n * `bash` (mirrors the AgentSession._refreshToolRegistry check). Returns the\n * sorted, deduplicated builtin names that non-builtin inventory tools reuse.\n */\nexport function shadowedBuiltinTools(\n\tbuiltinNames: Iterable<string>,\n\tinventory: Pick<CapabilityInventory, \"tools\">,\n): string[] {\n\tconst builtins = new Set(builtinNames);\n\tconst shadowed = new Set<string>();\n\tfor (const tool of inventory.tools) {\n\t\tif (tool.source !== \"builtin\" && tool.source !== \"sdk\" && builtins.has(tool.name)) shadowed.add(tool.name);\n\t}\n\treturn [...shadowed].sort(compareCodeUnits);\n}\n\n/** Same ordering as the default `Array.prototype.sort` for strings, made explicit. */\nfunction compareCodeUnits(left: string, right: string): number {\n\tif (left === right) return 0;\n\treturn left < right ? -1 : 1;\n}\n"]}

package/dist/core/loadout-runtime-state.js

@@ -0,0 +1,39 @@
+/**
+ * Loadout runtime state shape and the blocked-state constructors shared by
+ * profile validation and builtin-shadow detection. Pure data; no session access.
+ */
+/** A runtime state that activates nothing because the profile could not be applied. */
+export function blockedLoadoutRuntime(profile, blockers) {
+    return {
+        profileName: profile.name,
+        authority: profile.authority,
+        activeTools: [],
+        activeSkills: [],
+        activeMcp: [],
+        activeHooks: [],
+        schedulerFields: { readSet: [], writeSet: [], parallelizable: true },
+        blockers,
+        warnings: [],
+    };
+}
+/**
+ * A builtin always wins a name collision; an extension tool must never shadow
+ * `bash` (mirrors the AgentSession._refreshToolRegistry check). Returns the
+ * sorted, deduplicated builtin names that non-builtin inventory tools reuse.
+ */
+export function shadowedBuiltinTools(builtinNames, inventory) {
+    const builtins = new Set(builtinNames);
+    const shadowed = new Set();
+    for (const tool of inventory.tools) {
+        if (tool.source !== "builtin" && tool.source !== "sdk" && builtins.has(tool.name))
+            shadowed.add(tool.name);
+    }
+    return [...shadowed].sort(compareCodeUnits);
+}
+/** Same ordering as the default `Array.prototype.sort` for strings, made explicit. */
+function compareCodeUnits(left, right) {
+    if (left === right)
+        return 0;
+    return left < right ? -1 : 1;
+}
+//# sourceMappingURL=loadout-runtime-state.js.map

package/dist/core/loadout-runtime-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-runtime-state.js","sourceRoot":"","sources":["../../src/core/loadout-runtime-state.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CACpC,OAAmD,EACnD,QAAkB,EACI;IACtB,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;QACpE,QAAQ;QACR,QAAQ,EAAE,EAAE;KACZ,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CACnC,YAA8B,EAC9B,SAA6C,EAClC;IACX,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAAA,CAC5C;AAED,sFAAsF;AACtF,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa,EAAU;IAC9D,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CAC7B","sourcesContent":["/**\n * Loadout runtime state shape and the blocked-state constructors shared by\n * profile validation and builtin-shadow detection. Pure data; no session access.\n */\n\nimport type { CapabilityInventory, LoadoutAuthority, LoadoutProfile, SchedulerFields } from \"./loadouts.ts\";\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\n/** A runtime state that activates nothing because the profile could not be applied. */\nexport function blockedLoadoutRuntime(\n\tprofile: Pick<LoadoutProfile, \"name\" | \"authority\">,\n\tblockers: string[],\n): LoadoutRuntimeState {\n\treturn {\n\t\tprofileName: profile.name,\n\t\tauthority: profile.authority,\n\t\tactiveTools: [],\n\t\tactiveSkills: [],\n\t\tactiveMcp: [],\n\t\tactiveHooks: [],\n\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\tblockers,\n\t\twarnings: [],\n\t};\n}\n\n/**\n * A builtin always wins a name collision; an extension tool must never shadow\n * `bash` (mirrors the AgentSession._refreshToolRegistry check). Returns the\n * sorted, deduplicated builtin names that non-builtin inventory tools reuse.\n */\nexport function shadowedBuiltinTools(\n\tbuiltinNames: Iterable<string>,\n\tinventory: Pick<CapabilityInventory, \"tools\">,\n): string[] {\n\tconst builtins = new Set(builtinNames);\n\tconst shadowed = new Set<string>();\n\tfor (const tool of inventory.tools) {\n\t\tif (tool.source !== \"builtin\" && tool.source !== \"sdk\" && builtins.has(tool.name)) shadowed.add(tool.name);\n\t}\n\treturn [...shadowed].sort(compareCodeUnits);\n}\n\n/** Same ordering as the default `Array.prototype.sort` for strings, made explicit. */\nfunction compareCodeUnits(left: string, right: string): number {\n\tif (left === right) return 0;\n\treturn left < right ? -1 : 1;\n}\n"]}

package/dist/core/loadout-runtime.d.ts

@@ -8,6 +8,7 @@
 import type { ToolDefinition } from "./extensions/types.ts";
 import { type HookInventory } from "./hook-inventory.ts";
 import { type LoadoutAccessPolicy } from "./loadout-access-policy.ts";
+import { type LoadoutRuntimeState } from "./loadout-runtime-state.ts";
 import { type AppliedLoadout, type CapabilityInventory, type LoadoutAuthority, type LoadoutCommands, type LoadoutProfile, type LoadoutRole, type SchedulerFields } from "./loadouts.ts";
 import type { ResourceLoader } from "./resource-loader.ts";
 import type { SourceInfo } from "./source-info.ts";
@@ -29,17 +30,7 @@ export interface LoadoutRuntimeSession {
     _extensionRunner: ExtensionRunnerLike;
     _customTools: ToolDefinition[];
 }
-export interface LoadoutRuntimeState {
-    profileName: string;
-    authority: LoadoutAuthority;
-    activeTools: string[];
-    activeSkills: string[];
-    activeMcp: string[];
-    activeHooks: string[];
-    schedulerFields: SchedulerFields;
-    blockers: string[];
-    warnings: string[];
-}
+export type { LoadoutRuntimeState };
 export interface BuildLoadoutAccessPolicyOptions {
     cwd: string;
     blockedPaths?: readonly string[];
@@ -102,5 +93,4 @@ export interface BuildSubagentLaneGrantOptions {
     acceptance?: readonly string[];
 }
 export declare function buildSubagentLaneGrant(nodeId: string, role: LoadoutRole, task: string, applied: AppliedLoadout, schedulerFields: SchedulerFields, options?: BuildSubagentLaneGrantOptions): SubagentLaneGrant;
-export {};
 //# sourceMappingURL=loadout-runtime.d.ts.map

package/dist/core/loadout-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loadout-runtime.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU,mBAAmB;IAC5B,qBAAqB,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,YAAY,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CASrB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,kBAAkB,EAAE,0BAA0B,CAAC;IAC/C,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAE/F,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,wBAAwB,GAAG,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAErH,MAAM,WAAW,gBAAgB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,aAAa,GAC1B,mBAAmB,CAgErB;AAOD,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAkDrB;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,0BAA0B,CAAC;IAChD,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,6BAAkC,GACzC,iBAAiB,CAwCnB","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport path from \"node:path\";\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { sanitizeHookPolicy } from \"./hooks/index.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\ttools: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tcontextInheritance: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates: LaneEvidenceGate[];\n\tdependsOn: string[];\n\tacceptance: string[];\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport type LaneContextInheritanceMode = \"none\" | \"receipt\" | \"last-turn\" | \"bounded\" | \"full\";\n\nexport type LaneEvidenceGate = \"plan-reread\" | \"automated-verification\" | \"manual-qa\" | \"adversarial-qa\" | \"cleanup\";\n\nexport interface LaneSpawnReceipt {\n\twhyParallel: string;\n\twhyNotLocal: string;\n\tindependence: string;\n\texpectedReceiptShape: string;\n\tmaxInlineTokens: number;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: mcpInventoryScope(cwd, entry.source),\n\t\torigin: \"top-level\",\n\t\tpath: entry.source,\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.builtin ? \"builtin\" : \"project\",\n\t\tscope: descriptor.builtin ? \"builtin\" : \"project\",\n\t\torigin: \"top-level\",\n\t\tpath: descriptor.scriptPath,\n\t\tpolicy: sanitizeHookPolicy(descriptor.policy),\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nfunction mcpInventoryScope(cwd: string, sourcePath: string): \"project\" | \"user\" {\n\tconst relative = path.relative(cwd, sourcePath);\n\treturn relative !== \"\" && !relative.startsWith(\"..\") && !path.isAbsolute(relative) ? \"project\" : \"user\";\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tblockedPaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n\tagentName?: string;\n\tcontextInheritance?: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates?: readonly LaneEvidenceGate[];\n\tdependsOn?: readonly string[];\n\tacceptance?: readonly string[];\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = uniqueSorted([\n\t\t\"**/.env*\",\n\t\t\"**/*secret*\",\n\t\t\"**/*key*\",\n\t\t\"**/.git/*\",\n\t\t...(options.blockedPaths ?? []),\n\t]);\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: options.agentName ?? `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\ttools: applied.activeTools,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tcontextInheritance: options.contextInheritance ?? defaultContextInheritance(role),\n\t\t...(options.spawnReceipt ? { spawnReceipt: options.spawnReceipt } : {}),\n\t\tevidenceGates: uniqueSortedEvidenceGates(options.evidenceGates ?? []),\n\t\tdependsOn: uniqueSorted(options.dependsOn ?? []),\n\t\tacceptance: uniqueSorted(options.acceptance ?? []),\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction defaultContextInheritance(role: LoadoutRole): LaneContextInheritanceMode {\n\tswitch (role) {\n\t\tcase \"planner\":\n\t\tcase \"critic\":\n\t\tcase \"visual-qa\":\n\t\t\treturn \"receipt\";\n\t\tcase \"security\":\n\t\t\treturn \"none\";\n\t\tdefault:\n\t\t\treturn \"bounded\";\n\t}\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n\nfunction uniqueSortedEvidenceGates(values: readonly LaneEvidenceGate[]): LaneEvidenceGate[] {\n\treturn [...new Set(values)].sort();\n}\n"]}
+{"version":3,"file":"loadout-runtime.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAyB,KAAK,mBAAmB,EAAwB,MAAM,4BAA4B,CAAC;AACnH,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU,mBAAmB;IAC5B,qBAAqB,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,YAAY,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,+BAA+B;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CASrB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,kBAAkB,EAAE,0BAA0B,CAAC;IAC/C,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAE/F,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,wBAAwB,GAAG,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAErH,MAAM,WAAW,gBAAgB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,aAAa,GAC1B,mBAAmB,CAgErB;AAOD,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAyCrB;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,0BAA0B,CAAC;IAChD,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,aAAa,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,6BAAkC,GACzC,iBAAiB,CAwCnB","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport path from \"node:path\";\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { sanitizeHookPolicy } from \"./hooks/index.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport { blockedLoadoutRuntime, type LoadoutRuntimeState, shadowedBuiltinTools } from \"./loadout-runtime-state.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport type { LoadoutRuntimeState };\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\ttools: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tcontextInheritance: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates: LaneEvidenceGate[];\n\tdependsOn: string[];\n\tacceptance: string[];\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport type LaneContextInheritanceMode = \"none\" | \"receipt\" | \"last-turn\" | \"bounded\" | \"full\";\n\nexport type LaneEvidenceGate = \"plan-reread\" | \"automated-verification\" | \"manual-qa\" | \"adversarial-qa\" | \"cleanup\";\n\nexport interface LaneSpawnReceipt {\n\twhyParallel: string;\n\twhyNotLocal: string;\n\tindependence: string;\n\texpectedReceiptShape: string;\n\tmaxInlineTokens: number;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: mcpInventoryScope(cwd, entry.source),\n\t\torigin: \"top-level\",\n\t\tpath: entry.source,\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.builtin ? \"builtin\" : \"project\",\n\t\tscope: descriptor.builtin ? \"builtin\" : \"project\",\n\t\torigin: \"top-level\",\n\t\tpath: descriptor.scriptPath,\n\t\tpolicy: sanitizeHookPolicy(descriptor.policy),\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nfunction mcpInventoryScope(cwd: string, sourcePath: string): \"project\" | \"user\" {\n\tconst relative = path.relative(cwd, sourcePath);\n\treturn relative !== \"\" && !relative.startsWith(\"..\") && !path.isAbsolute(relative) ? \"project\" : \"user\";\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) return blockedLoadoutRuntime(request.profile, validation.errors);\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst shadowed = shadowedBuiltinTools(session._baseToolDefinitions.keys(), inventory);\n\tif (shadowed.length > 0)\n\t\treturn blockedLoadoutRuntime(request.profile, [`loadout extension tool shadows builtin: ${shadowed.join(\", \")}`]);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tblockedPaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n\tagentName?: string;\n\tcontextInheritance?: LaneContextInheritanceMode;\n\tspawnReceipt?: LaneSpawnReceipt;\n\tevidenceGates?: readonly LaneEvidenceGate[];\n\tdependsOn?: readonly string[];\n\tacceptance?: readonly string[];\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = uniqueSorted([\n\t\t\"**/.env*\",\n\t\t\"**/*secret*\",\n\t\t\"**/*key*\",\n\t\t\"**/.git/*\",\n\t\t...(options.blockedPaths ?? []),\n\t]);\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: options.agentName ?? `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\ttools: applied.activeTools,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tcontextInheritance: options.contextInheritance ?? defaultContextInheritance(role),\n\t\t...(options.spawnReceipt ? { spawnReceipt: options.spawnReceipt } : {}),\n\t\tevidenceGates: uniqueSortedEvidenceGates(options.evidenceGates ?? []),\n\t\tdependsOn: uniqueSorted(options.dependsOn ?? []),\n\t\tacceptance: uniqueSorted(options.acceptance ?? []),\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction defaultContextInheritance(role: LoadoutRole): LaneContextInheritanceMode {\n\tswitch (role) {\n\t\tcase \"planner\":\n\t\tcase \"critic\":\n\t\tcase \"visual-qa\":\n\t\t\treturn \"receipt\";\n\t\tcase \"security\":\n\t\t\treturn \"none\";\n\t\tdefault:\n\t\t\treturn \"bounded\";\n\t}\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n\nfunction uniqueSortedEvidenceGates(values: readonly LaneEvidenceGate[]): LaneEvidenceGate[] {\n\treturn [...new Set(values)].sort();\n}\n"]}

package/dist/core/loadout-runtime.js

@@ -9,6 +9,7 @@ import path from "node:path";
 import { loadHookInventory } from "./hook-inventory.js";
 import { sanitizeHookPolicy } from "./hooks/index.js";
 import { createLoadoutAccessPolicy } from "./loadout-access-policy.js";
+import { blockedLoadoutRuntime, shadowedBuiltinTools } from "./loadout-runtime-state.js";
 import { applyLoadoutProfile, deriveSchedulerFields, validateLoadoutProfile, } from "./loadouts.js";
 import { loadMcpInventory } from "./mcp-inventory.js";
 export function buildLoadoutAccessPolicy(state, options) {
@@ -85,21 +86,13 @@ function mcpInventoryScope(cwd, sourcePath) {
 }
 export function applyLoadoutToRuntime(session, resourceLoader, cwd, agentDir, request) {
     const validation = validateLoadoutProfile(request.profile);
-    if (!validation.valid) {
-        return {
-            profileName: request.profile.name,
-            authority: request.profile.authority,
-            activeTools: [],
-            activeSkills: [],
-            activeMcp: [],
-            activeHooks: [],
-            schedulerFields: { readSet: [], writeSet: [], parallelizable: true },
-            blockers: validation.errors,
-            warnings: [],
-        };
-    }
+    if (!validation.valid)
+        return blockedLoadoutRuntime(request.profile, validation.errors);
     const hookInventory = loadHookInventory(agentDir);
     const inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);
+    const shadowed = shadowedBuiltinTools(session._baseToolDefinitions.keys(), inventory);
+    if (shadowed.length > 0)
+        return blockedLoadoutRuntime(request.profile, [`loadout extension tool shadows builtin: ${shadowed.join(", ")}`]);
     const applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });
     if (applied.blockers.length > 0) {
         return {