openplanr 1.25.3 → 2.0.0

package/dist/services/operate/mission-dispatch.d.ts

@@ -1,271 +0,0 @@
-import { type OperatingRoleId, type OperatingSensitivity } from './types.js';
-/**
- * Bounded, read-only native mandate dispatch (FR2 / E-002).
- *
- * This module owns the two enforcement guarantees the pack path never needed:
- *
- *  1. A native advisory lens receives EXACTLY the Protocol v1.3 read-only tool
- *     grant — glob, file read, content search, and read-only git history —
- *     confined to its declared, sensitivity-ceiling-narrowed roots. No write,
- *     execute, network, or environment capability exists on the surface at all,
- *     so a mission agent physically cannot mutate, shell out, egress, or read
- *     ambient process state.
- *  2. The sensitivity ceiling is enforced at READ time: even inside a granted
- *     root, a file above the role's ceiling is refused. This preserves the
- *     pack-era filter-before-handoff guarantee under agent-driven reads.
- *
- * It also owns per-role runtime isolation classification. The mandate
- * honeytoken suite exercises every refusal here.
- */
-/**
- * The effective isolation a role's dispatch resolves to. Mirrors the two-value
- * classification the pipeline's v1.3 adapter handoff now publishes
- * (`enforced-read-only-bounded | unsupported`) so OpenPlanr and the published
- * contract cannot drift. Governance moved to OUTPUT verification (citations
- * resolve fail-closed; the CLI owns every write), so a runtime is no longer
- * gated on a native-vs-structured capability split before it may think — it is
- * classified purely on whether it can carry a mandate:
- *  - `enforced-read-only-bounded` — a runtime that natively enforces the bounded
- *                                   read-only tool grant and can carry a mandate;
- *                                   this is the only first-class operate dispatch;
- *  - `unsupported`                — a runtime whose isolation is advisory or
- *                                   unverifiable, or an adapter that cannot host a
- *                                   bounded native lens; operate declares it
- *                                   unsupported rather than silently degrading it
- *                                   to a lesser path.
- */
-export type OperatingDispatchIsolation = 'enforced-read-only-bounded' | 'runtime-governed' | 'unsupported';
-export interface OperatingDispatchResolution {
-    roleId: OperatingRoleId;
-    /** The effective isolation after the FR2/FR4 reconciliation. */
-    isolation: OperatingDispatchIsolation;
-    /** True only when a native, bounded read-only lens is actually dispatched. */
-    native: boolean;
-    /** Audit note explaining why this isolation was chosen (recorded in provenance). */
-    reconciliation: string;
-}
-/**
- * The bounded read-only capability set for a mission-mode lens. Kept in lockstep
- * with the pipeline's `MISSION_READ_ONLY_TOOLS`: no write, execute, network, or
- * environment tool is present, so a grant assembled from it can never authorize
- * a mutating or escaping action.
- */
-export declare const MISSION_READ_ONLY_TOOLS: readonly ["file-read", "glob", "content-search", "git-log", "git-show", "git-diff", "git-blame"];
-export type MissionReadOnlyTool = (typeof MISSION_READ_ONLY_TOOLS)[number];
-/**
- * Whether the given runtime natively enforces the mission read-only boundary.
- * `claude-code` enforces; `codex` and `cursor` are advisory and do not.
- */
-export declare function operatingRuntimeEnforcesBoundedReadOnly(runtime: string | undefined): Promise<boolean>;
-/** Whether the selected runtime has a generated, runtime-native Operate workflow. */
-export declare function operatingRuntimeSupportsNativeOperate(runtime: string | undefined): Promise<boolean>;
-/**
- * Classify one role's dispatch isolation (FR10). Governance moved to OUTPUT
- * verification, so the runtime is no longer gated on a native-vs-structured
- * split before it may think — it is classified purely on whether it can carry a
- * mandate and return a schema-valid cited response. A runtime that natively
- * enforces the bounded read-only tool grant is `enforced-read-only-bounded`.
- * A compatible native-agent workflow running under the selected runtime's own
- * session permissions is `runtime-governed`. Only an adapter that cannot run
- * either workflow is unsupported. The specific reason is recorded in
- * `reconciliation` so it appears in dispatch provenance.
- */
-export declare function resolveOperatingDispatchIsolation(input: {
-    roleId: OperatingRoleId;
-    runtimeEnforcesBoundedReadOnly: boolean;
-    adapterNativeCapable: boolean;
-    runtimeWorkflowCapable?: boolean;
-}): OperatingDispatchResolution;
-/**
- * A runtime's operate classification (FR10): whether it can carry a mandate and
- * therefore dispatch operate lenses first-class, or is declared `unsupported`.
- * The `reason` is the exact remediation-grade explanation surfaced by
- * `operate doctor` when a runtime cannot carry a mandate.
- */
-export interface OperatingRuntimeClassification {
-    runtime: string;
-    isolation: OperatingDispatchIsolation;
-    mandateCapable: boolean;
-    reason: string;
-}
-/**
- * Classify a runtime for operate dispatch (FR10). A runtime that natively
- * enforces the bounded read-only boundary can carry a mandate and is
- * `enforced-read-only-bounded` (first-class). Compatible advisory runtimes are
- * `runtime-governed`; only missing/incompatible workflows are unsupported.
- */
-export declare function classifyOperatingRuntime(runtime: string | undefined): Promise<OperatingRuntimeClassification>;
-/**
- * Resolve the active runtime id for a project WITHOUT probing installed binaries
- * (spawn-free) so `operate doctor` can classify it. Reads the runtime the
- * project/user already selected from the pipeline's reclassified registry. Fails
- * closed to `undefined` when no runtime is selected or the registry cannot be
- * resolved, so an unresolved runtime is classified `unsupported`, never assumed
- * mandate-capable.
- */
-export declare function resolveActiveOperatingRuntime(projectRoot: string): Promise<string | undefined>;
-/**
- * Declare a role's mission read roots directly from the granted workspace roots
- * minus the explicitly forbidden paths — the coarse boundary the mandate model
- * dispatches against. There is no evidence index to narrow (the mandate carries
- * none): every granted root is declared whole, and the sensitivity ceiling is
- * enforced not by dropping a root here but by the bounded reader's read-time
- * `assertBelowCeiling` and, at record time, by the citation resolver refusing an
- * above-ceiling citation. A root that exactly matches, or is nested under, a
- * forbidden path is dropped. The result is deduplicated and sorted so the
- * declared boundary is deterministic.
- */
-export declare function narrowMissionRootsToCeiling(input: {
-    declaredRoots: readonly string[];
-    forbiddenPaths?: readonly string[];
-}): string[];
-export interface MissionReadBoundary {
-    /**
-     * Absolute, resolved read roots (already sensitivity-ceiling-narrowed). A read
-     * target must resolve inside one of these or it is refused as a root escape.
-     */
-    roots: readonly string[];
-    /** The role's sensitivity ceiling, enforced at read time. */
-    ceiling: OperatingSensitivity;
-    /**
-     * The sensitivity of a resolved absolute path. In production this is built
-     * from the ceiling-filtered evidence index; an in-root path with no explicit
-     * classification falls back to `defaultSensitivity`.
-     */
-    sensitivityByPath?: ReadonlyMap<string, OperatingSensitivity>;
-    /**
-     * Sensitivity assumed for an in-root path with no explicit classification.
-     * Defaults to the ceiling itself (readable) because the ceiling-filtered index
-     * and root narrowing already exclude above-ceiling material; individual
-     * above-ceiling files are still refused by the read-time check below.
-     */
-    defaultSensitivity?: OperatingSensitivity;
-    /** Repository root for read-only git tools. Defaults to the first read root. */
-    repositoryRoot?: string;
-}
-export type MissionToolRequest = {
-    tool: 'file-read';
-    path: string;
-} | {
-    tool: 'glob';
-    pattern?: string;
-    root?: string;
-} | {
-    tool: 'content-search';
-    query: string;
-    root?: string;
-} | {
-    tool: 'git-log' | 'git-show' | 'git-diff' | 'git-blame';
-    args?: string[];
-    path?: string;
-} | {
-    tool: string;
-    [key: string]: unknown;
-};
-export type MissionToolResult = {
-    tool: 'file-read';
-    path: string;
-    content: string;
-} | {
-    tool: 'glob';
-    matches: string[];
-} | {
-    tool: 'content-search';
-    matches: Array<{
-        path: string;
-        line: number;
-        text: string;
-    }>;
-} | {
-    tool: 'git-log' | 'git-show' | 'git-diff' | 'git-blame';
-    output: string;
-};
-/**
- * The single audited entry point for a mission lens's tool use. Every request is
- * checked against the bounded read-only grant BEFORE any filesystem or git
- * access: a tool outside the grant (write, execute, network, environment, or any
- * unknown surface) is refused, a target outside the declared roots is refused as
- * a path escape, and a target above the sensitivity ceiling is refused at read
- * time. There is deliberately no write/execute/network/environment tool to
- * invoke — those channels do not exist on this surface at all.
- */
-export declare function invokeMissionTool(boundary: MissionReadBoundary, request: MissionToolRequest): Promise<MissionToolResult>;
-/**
- * The concrete callable tool surface handed to an in-process native harness:
- * exactly the read-only tools, each bound to this boundary. There is no write,
- * execute, network, or environment callable on the returned object, so a harness
- * that walks it can never reach a mutating or escaping capability.
- */
-export declare function createMissionToolset(boundary: MissionReadBoundary): Record<MissionReadOnlyTool, (request: Omit<MissionToolRequest, 'tool'>) => Promise<MissionToolResult>>;
-/**
- * The graceful per-role research-budget signal handed to a fan-out `run` (FR12).
- *
- * The budget NEVER aborts or races a role's promise: crossing it flips
- * `budgetExceeded()` so the role can voluntarily stop reading and synthesize from
- * what it already gathered, returning its FULL output. Nothing here truncates,
- * drops, or cuts off a role's result — efficiency comes from the role concluding,
- * not from the orchestrator severing it.
- */
-export interface MissionDispatchBudgetSignal {
-    /** Wall-clock deadline (ms epoch) after which the role should synthesize; `Infinity` when unbounded. */
-    deadline: number;
-    /** True once the per-role research budget has elapsed — the cue to synthesize, not a cut-off. */
-    budgetExceeded: () => boolean;
-    /** Remaining budget in ms (never negative); `Infinity` when unbounded. */
-    remainingMs: () => number;
-}
-/**
- * A per-item lifecycle reporter (FR3, SPEC-005 T-003). The fan-out is the bounded
- * bookkeeping primitive the `AdvisorLifecycleDriver` orchestrates over: rather than
- * only resolving/rejecting a bare promise, each item now reports its dispatch,
- * return, and error boundaries through this reporter, so the driver can observe the
- * per-role lifecycle without the fan-out taking on any state-machine, recording, or
- * runtime-classification responsibility. Entirely optional and additive — a caller
- * that omits it (every pre-T-003 caller) sees byte-identical behaviour.
- *
- * The reporter is observability only: it never alters ordering, concurrency, the
- * budget signal, or a result. `onReturn` fires after `run` resolves (before the
- * result is stored at its input index); `onError` fires if `run` rejects, and the
- * rejection still propagates unchanged.
- */
-export interface MissionDispatchLifecycleReporter<Item, Result> {
-    onDispatch?: (item: Item) => void;
-    onReturn?: (item: Item, result: Result) => void;
-    onError?: (item: Item, error: unknown) => void;
-}
-/**
- * Fan a per-item dispatch out in parallel where the adapter reports
- * `parallelDispatch: true`, sequentially otherwise. Results are always returned
- * in the SAME order as `items`, so the caller can restore registry order and the
- * reduced events are byte-identical across parallel and sequential dispatch.
- *
- * FR12 additions (all optional, all backward-compatible — the existing
- * `{ items, parallel, run }` call still type-checks and behaves identically):
- *  - `concurrency` bounds how many items run at once on the parallel path;
- *  - `perRoleBudgetMs` gives each `run` a graceful budget signal it MAY consult to
- *    stop researching and synthesize — the fan-out never aborts a role's promise,
- *    so a role's output is never cut off mid-stream;
- *  - `now` injects a clock for deterministic budget tests.
- *
- * FR3 addition (T-003): `lifecycle` reports each item's dispatch/return/error
- * boundary so the `AdvisorLifecycleDriver` can observe the per-role lifecycle
- * instead of only seeing a resolved/rejected promise. It is observability only and
- * never alters ordering, concurrency, the budget signal, or a result — a caller
- * that omits it behaves exactly as before.
- */
-export declare function runMissionDispatchFanOut<Item, Result>(input: {
-    items: readonly Item[];
-    parallel: boolean;
-    run: (item: Item, signal: MissionDispatchBudgetSignal) => Promise<Result>;
-    /** Bounded fan-out concurrency for the parallel path. Absent/`<= 0` = unbounded. */
-    concurrency?: number;
-    /** Per-role research time budget (ms). Graceful: a signal to synthesize, never a cut-off. Absent/`<= 0` = unbounded. */
-    perRoleBudgetMs?: number;
-    /** Injected clock (ms epoch). Defaults to `Date.now`. */
-    now?: () => number;
-    /** Fired once, the first time a role crosses its budget (observability only). */
-    onBudgetExceeded?: (item: Item, elapsedMs: number) => void;
-    /** Per-item lifecycle reporter (FR3). Additive, observability only. */
-    lifecycle?: MissionDispatchLifecycleReporter<Item, Result>;
-}): Promise<Result[]>;
-//# sourceMappingURL=mission-dispatch.d.ts.map

package/dist/services/operate/mission-dispatch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mission-dispatch.d.ts","sourceRoot":"","sources":["../../../src/services/operate/mission-dispatch.ts"],"names":[],"mappings":"AAMA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE3F;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,0BAA0B,GAClC,4BAA4B,GAC5B,kBAAkB,GAClB,aAAa,CAAC;AAElB,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,eAAe,CAAC;IACxB,gEAAgE;IAChE,SAAS,EAAE,0BAA0B,CAAC;IACtC,8EAA8E;IAC9E,MAAM,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,kGAQzB,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAgH3E;;;GAGG;AACH,wBAAsB,uCAAuC,CAC3D,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,qFAAqF;AACrF,wBAAsB,qCAAqC,CACzD,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,MAAM,EAAE,eAAe,CAAC;IACxB,8BAA8B,EAAE,OAAO,CAAC;IACxC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,GAAG,2BAA2B,CA2B9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,0BAA0B,CAAC;IACtC,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,8BAA8B,CAAC,CAuBzC;AAID;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA0B7B;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,GAAG,MAAM,EAAE,CAKX;AAMD,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,6DAA6D;IAC7D,OAAO,EAAE,oBAAoB,CAAC;IAC9B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IAC1C,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAsQhF;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAoC5B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,mBAAmB,GAC5B,MAAM,CACP,mBAAmB,EACnB,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAC1E,CAUA;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,wGAAwG;IACxG,QAAQ,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,cAAc,EAAE,MAAM,OAAO,CAAC;IAC9B,0EAA0E;IAC1E,WAAW,EAAE,MAAM,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gCAAgC,CAAC,IAAI,EAAE,MAAM;IAC5D,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAChD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;IAClE,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wHAAwH;IACxH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D,uEAAuE;IACvE,SAAS,CAAC,EAAE,gCAAgC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyEpB"}