pi-subagents 0.70.0 → 0.71.0

package/src/runs/shared/completion-guard.js

@@ -1,214 +0,0 @@
-import { isMutatingTool } from "./long-running-guard.js";
-import { classifyTaskMutationIntent, expectsImplementationMutation, taskMayMutate } from "./task-intent.js";
-export { expectsImplementationMutation };
-const READ_ONLY_BUILTIN_TOOLS = new Set([
-    "read",
-    "grep",
-    "find",
-    "ls",
-    "web_search",
-    "fetch_content",
-    "get_search_content",
-    "source_check",
-    "intercom",
-    "contact_supervisor",
-    "structured_output",
-]);
-// Cursor native edit/write often land as thinking traces (inactive_trace /
-// transcript_trace) rather than toolCall parts when native tool replay is off
-// or the tool is inactive in context. Match pi-cursor-sdk display labels.
-const CURSOR_FILE_MUTATION_THINKING = /(?:^|\n)\s*Cursor (?:edit|write)\s*:/i;
-const REVIVED_TASK_PREFIX = /^You are reviving a previous subagent conversation\.\n\nOriginal run: .+\nOriginal agent: .+(?:\nOriginal session file: .+)?\n\nUse the stored session context as background\. Answer the orchestrator's follow-up below\. Do not assume the original child session is still running\.\n\nFollow-up:\n/;
-const IMPLEMENTATION_CHALLENGE_FOLLOW_UP_PATTERN = /^(?:Run )?implementation challenge pass (?:one|two|\d+)(?:\s+and implement any better current[- ]scope change\.?|\s+for the accepted candidate\.\s+Reconsider it and implement any better current[- ]scope change\.?)?$/i;
-const NO_BETTER_CHANGE_NEEDED_PATTERN = /^\s*no (?:better|further|additional) (?:current[- ]scope )?(?:code |source |file )?(?:change|changes|edit|edits|patch|patches) (?:is|are) needed\b/i;
-const KEPT_CURRENT_IMPLEMENTATION_PATTERN = /\b(?:kept (?:the )?current (?:implementation|candidate|shape)|(?:the )?current (?:implementation|candidate|shape) was kept)\b/i;
-const NO_CHANGE_MADE_PATTERN = /\bno (?:new )?(?:(?:code|source|file|test)(?:\s*(?:,\s*or|,|\/|or)\s*(?:code|source|file|test))* changes?|changes?) (?:were|was) made\b/i;
-const NO_BETTER_CHANGE_QUALIFIER_PATTERN = /\b(?:do\s+not|don't|dont|not|never|cannot|can't|cant|unable|uncertain|unsure|unclear|disagree|wrong|false|reject|rejected|rejecting|maybe|might|may|\w+n['’]t)\b/i;
-const REPORT_SENTENCE_PATTERN = /[^.!?]+(?:[.!?]+(?=(?:["”'’]?\s)|["”'’]?$)|$)/g;
-const QUOTED_CLAIM_PATTERN = /["“]([^"”]+)["”]([.!?]?\s*[^.!?]*)/g;
-const QUOTED_CLAIM_REFERENCE_PATTERN = /\b(?:that|this|it|claim|report|message|disagree)\b/i;
-const CLAIM_CONTRADICTION_PATTERN = /\bbut\b[^.!?]*\b(?:uncertain|unsure|unclear|disagree|wrong|false|reject|rejected|rejecting)\b/i;
-const IMPLEMENTATION_RETRACTION_PATTERN = /\b(?:found|identified)\s+(?:(?:a|an|the)\s+)?(?:required|necessary|additional|better)?\s*(?:(?:code|source|file|test)\s+)?(?:changes?|edits?|patches?)\b|\b(?:(?:implementation|code|source|file|test)\s+)?work\s+(?:remains?|is\s+(?:needed|required))\b|\b(?:(?:a|an|the)\s+)?(?:(?:code|source|file|test)\s+)?(?:changes?|edits?|patches?)\s+(?:are|is)\s+(?:needed|required)\b|\b(?:required|necessary|additional|better)\s+(?:(?:code|source|file|test)\s+)?(?:changes?|edits?|patches?)\b|\b(?:I|we)?\s*need\s+(?:(?:code|source|file|test)\s+)?(?:changes?|edits?|patches?)\b|\b(?:need|needs|require|requires)\s+(?:to\s+)?(?:implement|make|apply)\b/i;
-const IMPLEMENTATION_RETRACTION_GLOBAL_PATTERN = new RegExp(IMPLEMENTATION_RETRACTION_PATTERN.source, "gi");
-const DIRECT_CLAIM_RETRACTION_PATTERN = /^\s*(?:I\s+)?(?:disagree|reject|retract)\b|\b(?:disagree|retract|retracted|retracting|reject|rejected|rejecting)\b[^.!?]*\b(?:that|this|it|claim|report|message)\b|\b(?:that|this|it|claim|report|message)\b[^.!?]*\b(?:is|was)\s+(?:rejected|retracted)\b/i;
-const NEGATED_RETRACTION_PREFIX_PATTERN = /\b(?:no|not|\w+n['’]t)\b(?:\s+\w+){0,2}\s*$/i;
-const REPORTED_CLAIM_PREFIX_PATTERN = /["“]|\b(?:prior|previous)\s+(?:message|report)\b|\b(?:said|stated|reported)\b/i;
-const POST_CLAIM_SEPARATOR_PATTERN = /^[\s,;:.—–'"“‘’-]+/;
-export function hasMutationToolCapability(tools, mcpDirectTools) {
-    if ((mcpDirectTools?.length ?? 0) > 0)
-        return true;
-    if (tools === undefined)
-        return true;
-    return !tools.every((tool) => READ_ONLY_BUILTIN_TOOLS.has(tool));
-}
-function hasBuiltinMutationTool(tools) {
-    return tools === undefined || tools.some((tool) => !READ_ONLY_BUILTIN_TOOLS.has(tool));
-}
-function isWriterRole(agent, acceptanceRole) {
-    return acceptanceRole === "writer"
-        || (acceptanceRole === undefined && /\bworker\b/i.test(agent));
-}
-const WRITER_DELIVERY_PATTERN = /\b(?:address|resolve|work)\s+(?:backlog\s+)?(?:item|issue)\b|\b(?:land|ship)\s+(?:the\s+)?(?:change|changes|fix|feature|implementation)\b/i;
-export function validateImplementationToolContract(input) {
-    if (input.completionGuard === false)
-        return undefined;
-    const requestedMutationTools = input.requestedTools?.filter((tool) => !READ_ONLY_BUILTIN_TOOLS.has(tool)) ?? [];
-    const declaredMutationToolsWereRemoved = requestedMutationTools.length > 0 && !hasBuiltinMutationTool(input.tools);
-    const configuredExtensionCapability = (input.configuredExtensions?.length ?? 0) > 0 && !declaredMutationToolsWereRemoved;
-    if (hasMutationToolCapability(input.tools, input.mcpDirectTools) || configuredExtensionCapability)
-        return undefined;
-    const intent = classifyTaskMutationIntent(input.acceptanceRole === "writer" ? "worker" : input.agent, input.task);
-    if (intent.kind === "read-only")
-        return undefined;
-    const writerTaskMayMutate = input.acceptanceRole === "writer"
-        ? true
-        : isWriterRole(input.agent, input.acceptanceRole)
-            && (taskMayMutate(input.task) || WRITER_DELIVERY_PATTERN.test(input.task));
-    if (intent.kind !== "implementation" && !writerTaskMayMutate && !declaredMutationToolsWereRemoved)
-        return undefined;
-    return `Agent '${input.agent}' was given an implementation task, but its tool allowlist has no mutation-capable tools. Add bash, edit, write, or another mutation-capable tool to the agent, or use a read-only task/agent.`;
-}
-function hasCheckpointMutationEvidence(message) {
-    const record = message;
-    if ((record.role !== "custom" && record.type !== "custom") || record.customType !== "pi-checkpoint")
-        return false;
-    const details = typeof record.details === "object" && record.details !== null && !Array.isArray(record.details)
-        ? record.details
-        : undefined;
-    const data = typeof record.data === "object" && record.data !== null && !Array.isArray(record.data)
-        ? record.data
-        : typeof details?.beforeCommit === "string" || typeof details?.afterCommit === "string"
-            ? details
-            : details?.data && typeof details.data === "object" && !Array.isArray(details.data)
-                ? details.data
-                : undefined;
-    return typeof data?.beforeCommit === "string"
-        && typeof data.afterCommit === "string"
-        && data.beforeCommit !== data.afterCommit;
-}
-export function hasMutationToolCall(messages, mutationTools) {
-    for (const message of messages) {
-        if (hasCheckpointMutationEvidence(message))
-            return true;
-        if (message.role !== "assistant")
-            continue;
-        for (const part of message.content) {
-            if (part.type === "thinking" && CURSOR_FILE_MUTATION_THINKING.test(part.thinking))
-                return true;
-            if (part.type !== "toolCall")
-                continue;
-            const args = typeof part.arguments === "object" && part.arguments !== null && !Array.isArray(part.arguments)
-                ? part.arguments
-                : {};
-            if (isMutatingTool(part.name, args, mutationTools))
-                return true;
-        }
-    }
-    return false;
-}
-function hasImplementationRetraction(text) {
-    return Array.from(text.matchAll(IMPLEMENTATION_RETRACTION_GLOBAL_PATTERN)).some((retraction) => !NEGATED_RETRACTION_PREFIX_PATTERN.test(text.slice(0, retraction.index)));
-}
-function hasDirectClaimRetraction(text) {
-    return DIRECT_CLAIM_RETRACTION_PATTERN.test(text.replace(POST_CLAIM_SEPARATOR_PATTERN, ""));
-}
-function isInsideQuotedText(report, index) {
-    let quote;
-    for (const char of report.slice(0, index)) {
-        if (quote === "double") {
-            if (char === "\"" || char === "”")
-                quote = undefined;
-        }
-        else if (quote === "single") {
-            if (char === "’")
-                quote = undefined;
-        }
-        else if (char === "\"" || char === "“") {
-            quote = "double";
-        }
-        else if (char === "‘") {
-            quote = "single";
-        }
-    }
-    return quote !== undefined;
-}
-function unqualifiedClaimIndex(report, sentences, pattern) {
-    return sentences.findIndex((sentence) => {
-        const claim = sentence.text.match(pattern);
-        if (claim === null)
-            return false;
-        const before = sentence.text.slice(0, claim.index);
-        const after = sentence.text.slice(claim.index + claim[0].length);
-        const previous = before.trimEnd().at(-1);
-        return previous !== "'"
-            && previous !== "‘"
-            && !isInsideQuotedText(report, sentence.offset + claim.index)
-            && !REPORTED_CLAIM_PREFIX_PATTERN.test(before)
-            && !NO_BETTER_CHANGE_QUALIFIER_PATTERN.test(before)
-            && !CLAIM_CONTRADICTION_PATTERN.test(after)
-            && !hasImplementationRetraction(after)
-            && !hasDirectClaimRetraction(after);
-    });
-}
-function hasLaterClaimRetraction(sentences, claimIndex) {
-    return sentences.slice(claimIndex + 1).some((sentence) => hasImplementationRetraction(sentence.text)
-        || hasDirectClaimRetraction(sentence.text));
-}
-function explicitlyRejectsQuotedClaim(report) {
-    for (const [, claim, response] of report.matchAll(QUOTED_CLAIM_PATTERN)) {
-        if ((KEPT_CURRENT_IMPLEMENTATION_PATTERN.test(claim) || NO_CHANGE_MADE_PATTERN.test(claim))
-            && NO_BETTER_CHANGE_QUALIFIER_PATTERN.test(response)
-            && QUOTED_CLAIM_REFERENCE_PATTERN.test(response))
-            return true;
-    }
-    return false;
-}
-function isImplementationChallengeTask(task) {
-    const followUp = task.replace(REVIVED_TASK_PREFIX, "");
-    return followUp !== task && IMPLEMENTATION_CHALLENGE_FOLLOW_UP_PATTERN.test(followUp.trim());
-}
-function reportsNoBetterChallengeChange(messages) {
-    const report = messages
-        .filter((message) => message.role === "assistant")
-        .flatMap((message) => message.content)
-        .flatMap((part) => part.type === "text" ? [part.text] : [])
-        .join("\n");
-    if (explicitlyRejectsQuotedClaim(report))
-        return false;
-    const sentences = Array.from(report.matchAll(REPORT_SENTENCE_PATTERN), (match) => ({
-        text: match[0],
-        offset: match.index,
-    }));
-    const noBetterIndex = unqualifiedClaimIndex(report, sentences, NO_BETTER_CHANGE_NEEDED_PATTERN);
-    if (noBetterIndex >= 0)
-        return !hasLaterClaimRetraction(sentences, noBetterIndex);
-    const keptIndex = unqualifiedClaimIndex(report, sentences, KEPT_CURRENT_IMPLEMENTATION_PATTERN);
-    const noChangeIndex = unqualifiedClaimIndex(report, sentences, NO_CHANGE_MADE_PATTERN);
-    return keptIndex >= 0
-        && noChangeIndex >= 0
-        && !hasLaterClaimRetraction(sentences, Math.min(keptIndex, noChangeIndex));
-}
-export function evaluateCompletionMutationGuard(input) {
-    if (input.toolAvailabilityError && expectsImplementationMutation(input.agent, input.task)) {
-        return {
-            expectedMutation: true,
-            attemptedMutation: false,
-            triggered: false,
-            blocked: true,
-            message: input.toolAvailabilityError,
-        };
-    }
-    const expectedMutation = hasMutationToolCapability(input.tools, input.mcpDirectTools)
-        ? expectsImplementationMutation(input.agent, input.task)
-        : false;
-    const attemptedMutation = hasMutationToolCall(input.messages, input.mutationTools) || input.mutationEvidence?.attemptedMutation === true;
-    const noEditChallengeComplete = isImplementationChallengeTask(input.task)
-        && reportsNoBetterChallengeChange(input.messages);
-    return {
-        expectedMutation,
-        attemptedMutation,
-        triggered: expectedMutation && !attemptedMutation && !noEditChallengeComplete,
-        blocked: false,
-    };
-}
-//# sourceMappingURL=completion-guard.js.map

package/src/runs/shared/completion-guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"completion-guard.js","sourceRoot":"","sources":["../../../../src/runs/shared/completion-guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE5G,OAAO,EAAE,6BAA6B,EAAE,CAAC;AAEzC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACvC,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,YAAY;IACZ,eAAe;IACf,oBAAoB;IACpB,cAAc;IACd,UAAU;IACV,oBAAoB;IACpB,mBAAmB;CACnB,CAAC,CAAC;AAEH,2EAA2E;AAC3E,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,6BAA6B,GAClC,uCAAuC,CAAC;AAEzC,MAAM,mBAAmB,GAAG,wSAAwS,CAAC;AACrU,MAAM,0CAA0C,GAAG,0NAA0N,CAAC;AAC9Q,MAAM,+BAA+B,GAAG,qJAAqJ,CAAC;AAC9L,MAAM,mCAAmC,GAAG,gIAAgI,CAAC;AAC7K,MAAM,sBAAsB,GAAG,0IAA0I,CAAC;AAC1K,MAAM,kCAAkC,GAAG,mKAAmK,CAAC;AAC/M,MAAM,uBAAuB,GAAG,gDAAgD,CAAC;AACjF,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AACnE,MAAM,8BAA8B,GAAG,qDAAqD,CAAC;AAC7F,MAAM,2BAA2B,GAAG,gGAAgG,CAAC;AACrI,MAAM,iCAAiC,GAAG,goBAAgoB,CAAC;AAC3qB,MAAM,wCAAwC,GAAG,IAAI,MAAM,CAAC,iCAAiC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC5G,MAAM,+BAA+B,GAAG,6PAA6P,CAAC;AACtS,MAAM,iCAAiC,GAAG,8CAA8C,CAAC;AACzF,MAAM,6BAA6B,GAAG,gFAAgF,CAAC;AACvH,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AA0B1D,MAAM,UAAU,yBAAyB,CAAC,KAA2B,EAAE,cAAoC;IAC1G,IAAI,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA2B;IAC1D,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,cAA0C;IAC9E,OAAO,cAAc,KAAK,QAAQ;WAC9B,CAAC,cAAc,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,uBAAuB,GAAG,4IAA4I,CAAC;AAE7K,MAAM,UAAU,kCAAkC,CAAC,KASlD;IACA,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,sBAAsB,GAAG,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAChH,MAAM,gCAAgC,GAAG,sBAAsB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnH,MAAM,6BAA6B,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC;IACzH,IAAI,yBAAyB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,6BAA6B;QAAE,OAAO,SAAS,CAAC;IACpH,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClH,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,mBAAmB,GAAG,KAAK,CAAC,cAAc,KAAK,QAAQ;QAC5D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC;eAC7C,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,mBAAmB,IAAI,CAAC,gCAAgC;QAAE,OAAO,SAAS,CAAC;IACpH,OAAO,UAAU,KAAK,CAAC,KAAK,gMAAgM,CAAC;AAC9N,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAgB;IACtD,MAAM,MAAM,GAAG,OAMd,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAClH,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9G,CAAC,CAAC,MAAM,CAAC,OAAkC;QAC3C,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAClG,CAAC,CAAC,MAAM,CAAC,IAA+B;QACxC,CAAC,CAAC,OAAO,OAAO,EAAE,YAAY,KAAK,QAAQ,IAAI,OAAO,OAAO,EAAE,WAAW,KAAK,QAAQ;YACtF,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClF,CAAC,CAAC,OAAO,CAAC,IAA+B;gBACzC,CAAC,CAAC,SAAS,CAAC;IACf,OAAO,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ;WACzC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;WACpC,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,WAAW,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAmB,EAAE,aAAiC;IACzF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,6BAA6B,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/F,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACvC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3G,CAAC,CAAC,IAAI,CAAC,SAAoC;gBAC3C,CAAC,CAAC,EAAE,CAAC;YACN,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC;gBAAE,OAAO,IAAI,CAAC;QACjE,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY;IAChD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9F,CAAC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,KAAM,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC7C,OAAO,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,KAAa;IACxD,IAAI,KAAsC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,GAAG,SAAS,CAAC;QACtD,CAAC;aAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,GAAG,SAAS,CAAC;QACrC,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC1C,KAAK,GAAG,QAAQ,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,KAAK,GAAG,QAAQ,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,KAAK,KAAK,SAAS,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,SAA2B,EAAE,OAAe;IAC1F,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAM,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,OAAO,QAAQ,KAAK,GAAG;eACnB,QAAQ,KAAK,GAAG;eAChB,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,KAAM,CAAC;eAC3D,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC;eAC3C,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC;eAChD,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;eACxC,CAAC,2BAA2B,CAAC,KAAK,CAAC;eACnC,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,SAA2B,EAAE,UAAkB;IAC/E,OAAO,SAAS,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC;WAChG,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAc;IACnD,KAAK,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAM,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC;eACzF,kCAAkC,CAAC,IAAI,CAAC,QAAS,CAAC;eAClD,8BAA8B,CAAC,IAAI,CAAC,QAAS,CAAC;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,QAAQ,KAAK,IAAI,IAAI,0CAA0C,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAmB;IAC1D,MAAM,MAAM,GAAG,QAAQ;SACrB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC;SACjD,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,IAAI,4BAA4B,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClF,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACd,MAAM,EAAE,KAAK,CAAC,KAAM;KACpB,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,+BAA+B,CAAC,CAAC;IAChG,IAAI,aAAa,IAAI,CAAC;QAAE,OAAO,CAAC,uBAAuB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,mCAAmC,CAAC,CAAC;IAChG,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;IACvF,OAAO,SAAS,IAAI,CAAC;WACjB,aAAa,IAAI,CAAC;WAClB,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAmC;IAClF,IAAI,KAAK,CAAC,qBAAqB,IAAI,6BAA6B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,OAAO;YACN,gBAAgB,EAAE,IAAI;YACtB,iBAAiB,EAAE,KAAK;YACxB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK,CAAC,qBAAqB;SACpC,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC;QACpF,CAAC,CAAC,6BAA6B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;QACxD,CAAC,CAAC,KAAK,CAAC;IACT,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACzI,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC;WACrE,8BAA8B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO;QACN,gBAAgB;QAChB,iBAAiB;QACjB,SAAS,EAAE,gBAAgB,IAAI,CAAC,iBAAiB,IAAI,CAAC,uBAAuB;QAC7E,OAAO,EAAE,KAAK;KACd,CAAC;AACH,CAAC"}

package/src/runs/shared/llm-intent-arbiter.d.ts

@@ -1,48 +0,0 @@
-import type { StreamFn } from "@earendil-works/pi-agent-core";
-import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
-export type TaskMutationVerdict = "read-only" | "implementation" | "unavailable";
-export type TaskMutationArbiter = (task: string) => Promise<TaskMutationVerdict>;
-/** Map a model decision to a verdict. Only a high-confidence read_only rescues. */
-export declare function mapArbiterDecision(decision: {
-    classification?: string;
-    confidence?: string;
-} | undefined): TaskMutationVerdict;
-export interface TaskMutationArbiterOptions {
-    /** Explicit "provider/id" model override (tests, config). */
-    model?: string;
-    /** Injectable stream function (tests). */
-    streamFn?: StreamFn;
-    timeoutMs?: number;
-}
-/** Model services the arbiter needs, plus the caller's session id for OpenCode session-routing headers. */
-export type ArbiterModelContext = Pick<ExtensionContext, "model" | "modelRegistry"> & {
-    /** Session id the headers attach to (the child's, captured by detached runners; the parent's, passed by foreground callers). */
-    sessionId?: string;
-};
-/** Create a memoized arbiter bound to the supplied model services, or undefined when disabled/unavailable. */
-export declare function createTaskMutationArbiter(ctx: ArbiterModelContext, options?: TaskMutationArbiterOptions): TaskMutationArbiter | undefined;
-export declare function isCompletionGuardFailure(result: {
-    error?: string;
-}): boolean;
-export declare function arbitrateCompletionGuardRescue(input: {
-    guardTriggered: boolean;
-    task: string;
-    arbiter?: TaskMutationArbiter;
-}): Promise<{
-    triggered: boolean;
-    rescued: boolean;
-}>;
-/**
- * When the completion guard hard-failed a run and the arbiter classifies the
- * task as read-only, clear the failure. Returns true when rescued. All other
- * verdicts and every failure mode keep the original guard behavior.
- *
- * Classification uses the task text only: the agent's own final message is
- * never evidence, so a child that failed to implement cannot talk its way
- * out of the guard by claiming the work was read-only.
- */
-export declare function maybeRescueCompletionGuardFailure(result: {
-    exitCode?: number;
-    error?: string;
-}, task: string, arbiter: TaskMutationArbiter | undefined): Promise<boolean>;
-//# sourceMappingURL=llm-intent-arbiter.d.ts.map

package/src/runs/shared/llm-intent-arbiter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"llm-intent-arbiter.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/llm-intent-arbiter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAoB,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAuBxE,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAgBjF,mFAAmF;AACnF,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GACpE,mBAAmB,CAIrB;AAoBD,MAAM,WAAW,0BAA0B;IAC1C,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,2GAA2G;AAC3G,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,eAAe,CAAC,GAAG;IACrF,gIAAgI;IAChI,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AA6JF,8GAA8G;AAC9G,wBAAgB,yBAAyB,CACxC,GAAG,EAAE,mBAAmB,EACxB,OAAO,CAAC,EAAE,0BAA0B,GAClC,mBAAmB,GAAG,SAAS,CAejC;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAE5E;AAED,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC3D,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC9B,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAgBpD;AAED;;;;;;;;GAQG;AACH,wBAAsB,iCAAiC,CACtD,MAAM,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAAG,SAAS,GACtC,OAAO,CAAC,OAAO,CAAC,CAOlB"}

package/src/runs/shared/llm-intent-arbiter.js

@@ -1,235 +0,0 @@
-import { createHash } from "node:crypto";
-import { Type } from "typebox";
-import { agentStreamOptions } from "../../shared/agent-stream-options.js";
-import { opencodeSessionHeaders } from "../../shared/opencode-session-headers.js";
-/**
- * LLM intent arbiter for the completion mutation guard.
- *
- * The regex classifier (task-intent.ts) is deliberately narrow, so exotic
- * review wording can still look like an implementation task ("to fix this,
- * compare the outputs", verbs inside URLs or quoted text). When the guard is
- * about to hard-fail a run that made no edits, this arbiter asks a model
- * whether the task actually instructed file changes. It can only downgrade a
- * failure to a pass; every error, timeout, or non-read-only verdict keeps the
- * guard's original behavior.
- *
- * Enabled by default; set PI_SUBAGENTS_LLM_INTENT_ARBITER=0 to disable.
- */
-const COMPLETION_GUARD_ERROR_PREFIX = "Subagent completed without making edits for an implementation task.";
-const DecisionParams = Type.Object({
-    classification: Type.String({ enum: ["read_only", "implementation"] }),
-    confidence: Type.String({
-        enum: ["low", "medium", "high"],
-        description: "Confidence in the classification. Only read_only with high confidence rescues a failed run.",
-    }),
-    reason: Type.String({ description: "One concise reason for this classification." }),
-}, { additionalProperties: false });
-/** Map a model decision to a verdict. Only a high-confidence read_only rescues. */
-export function mapArbiterDecision(decision) {
-    if (!decision)
-        return "unavailable";
-    if (decision.classification === "read_only" && decision.confidence === "high")
-        return "read-only";
-    return "implementation";
-}
-const DEFAULT_ARBITER_TIMEOUT_MS = 10_000;
-function resolveArbiterModel(ctx, options) {
-    const registry = ctx.modelRegistry;
-    const explicit = options?.model?.trim();
-    if (explicit) {
-        const [provider, id] = explicit.split("/");
-        if (provider && id)
-            return registry.find?.(provider, id) ?? null;
-        return null;
-    }
-    if (ctx.model)
-        return ctx.model;
-    const first = registry.getAvailable?.()[0];
-    if (first?.provider && first.id)
-        return registry.find?.(first.provider, first.id) ?? null;
-    return null;
-}
-function resolveArbiterRuntime(ctx, options) {
-    const model = resolveArbiterModel(ctx, options);
-    if (!model?.provider || !model.id)
-        return null;
-    const registry = ctx.modelRegistry;
-    const registered = registry.getRegisteredProviderConfig?.(model.provider);
-    return {
-        model,
-        explicitStreamFn: options?.streamFn,
-        registeredStreamFn: registered?.streamSimple,
-        registeredApi: registered?.api,
-        sessionId: ctx.sessionId,
-        timeoutMs: options?.timeoutMs ?? DEFAULT_ARBITER_TIMEOUT_MS,
-    };
-}
-async function resolveArbiterAuth(ctx, model) {
-    const registry = ctx.modelRegistry;
-    // Call as a METHOD on the registry: the host ModelRegistry implementation
-    // is a class whose method reads instance state (this.runtime), so a
-    // detached call silently fails auth. Same shape as the watchdog.
-    if (!registry.getApiKeyAndHeaders)
-        return {};
-    try {
-        const auth = await registry.getApiKeyAndHeaders(model);
-        if (auth.ok === false)
-            return undefined;
-        return {
-            ...(auth.apiKey ? { apiKey: auth.apiKey } : {}),
-            ...(auth.headers ? { headers: auth.headers } : {}),
-            ...(auth.env ? { env: auth.env } : {}),
-        };
-    }
-    catch {
-        return undefined;
-    }
-}
-/** Build the effective stream function with resolved credentials wrapped in (watchdog pattern). */
-function authWrappedStreamFn(base, auth, sessionId) {
-    return (model, context, streamOptions) => base(model, context, {
-        ...(streamOptions ?? {}),
-        ...(auth.apiKey ? { apiKey: auth.apiKey } : {}),
-        ...(auth.env || streamOptions?.env ? { env: { ...(auth.env ?? {}), ...(streamOptions?.env ?? {}) } } : {}),
-        headers: { ...opencodeSessionHeaders(model, sessionId), ...(streamOptions?.headers ?? {}), ...(auth.headers ?? {}) },
-    });
-}
-async function runArbitration(runtime, auth, task) {
-    // Keep optional Pi peers out of the detached runner's static import graph.
-    const [{ Agent }, { convertToLlm }, { streamSimple }] = await Promise.all([
-        import("@earendil-works/pi-agent-core"),
-        import("@earendil-works/pi-coding-agent"),
-        import("@earendil-works/pi-ai/compat"),
-    ]);
-    const streamFn = runtime.explicitStreamFn
-        ?? (runtime.registeredApi !== undefined && runtime.registeredApi === runtime.model.api ? runtime.registeredStreamFn : undefined)
-        ?? streamSimple;
-    let decision;
-    const tool = {
-        name: "task_mutation_decision",
-        label: "Task mutation decision",
-        description: "Classify whether the task instructed file/code changes. Call exactly once.",
-        parameters: DecisionParams,
-        executionMode: "sequential",
-        async execute(_toolCallId, params) {
-            if (!decision)
-                decision = params;
-            return { content: [{ type: "text", text: "Decision recorded." }], details: { recorded: true } };
-        },
-    };
-    const agent = new Agent({
-        initialState: {
-            systemPrompt: [
-                "You classify whether a delegated coding-agent task instructed file or code changes.",
-                "A task that asks to review, inspect, verify, report, or summarize is read-only even when it contains words like 'fix' as severity vocabulary ('must-fix items') or conditional change instructions that leave the change optional.",
-                "Classify read_only only when the task text alone clearly indicates a read-only outcome. When in doubt, classify implementation.",
-                "Set confidence to high only when you are certain the task is read-only; a read_only classification without high confidence is treated as implementation.",
-                "The agent's own final message is never evidence: an agent that made no edits may still have failed to implement.",
-                "Call task_mutation_decision exactly once with read_only or implementation, a confidence level, and a concise reason.",
-            ].join("\n"),
-            model: runtime.model,
-            tools: [tool],
-        },
-        convertToLlm,
-        ...agentStreamOptions(authWrappedStreamFn(streamFn, auth, runtime.sessionId)),
-        getApiKey: (providerName) => providerName === runtime.model.provider ? auth.apiKey : undefined,
-        beforeToolCall: async ({ toolCall }) => toolCall.name === tool.name ? undefined : { block: true, reason: "Only task_mutation_decision is allowed." },
-        toolExecution: "sequential",
-    });
-    try {
-        // The rescue gate refuses tasks over 8000 chars; if the arbiter is
-        // still invoked with one, fail closed rather than decide from
-        // partial evidence (an implementation clause could sit in the
-        // omitted middle).
-        if (task.length > 8000)
-            return "unavailable";
-        const prompt = `TASK:\n${task}`;
-        await Promise.race([
-            agent.prompt(prompt),
-            new Promise((_, reject) => {
-                const timeout = setTimeout(() => {
-                    agent.abort();
-                    reject(new Error("Task mutation arbiter timed out."));
-                }, runtime.timeoutMs);
-                timeout.unref?.();
-            }),
-        ]);
-        if (!decision)
-            return "unavailable";
-        return mapArbiterDecision(decision);
-    }
-    catch {
-        return "unavailable";
-    }
-}
-/** Create a memoized arbiter bound to the supplied model services, or undefined when disabled/unavailable. */
-export function createTaskMutationArbiter(ctx, options) {
-    if (process.env.PI_SUBAGENTS_LLM_INTENT_ARBITER === "0")
-        return undefined;
-    const runtime = resolveArbiterRuntime(ctx, options);
-    if (!runtime)
-        return undefined;
-    const cache = new Map();
-    return async (task) => {
-        const key = createHash("sha256").update(task).digest("base64url");
-        const cached = cache.get(key);
-        if (cached)
-            return cached;
-        const auth = await resolveArbiterAuth(ctx, runtime.model);
-        const verdict = auth ? await runArbitration(runtime, auth, task) : "unavailable";
-        if (cache.size > 200)
-            cache.clear();
-        cache.set(key, verdict);
-        return verdict;
-    };
-}
-export function isCompletionGuardFailure(result) {
-    return result.error?.startsWith(COMPLETION_GUARD_ERROR_PREFIX) === true;
-}
-export async function arbitrateCompletionGuardRescue(input) {
-    if (!input.guardTriggered || !input.arbiter) {
-        return { triggered: input.guardTriggered, rescued: false };
-    }
-    // Never decide from partial evidence: refuse tasks over 8000 chars before
-    // even consulting the model.
-    if (input.task.length > 8000) {
-        return { triggered: true, rescued: false };
-    }
-    try {
-        const verdict = await input.arbiter(input.task);
-        if (verdict === "read-only")
-            return { triggered: false, rescued: true };
-        return { triggered: true, rescued: false };
-    }
-    catch {
-        return { triggered: true, rescued: false };
-    }
-}
-/**
- * When the completion guard hard-failed a run and the arbiter classifies the
- * task as read-only, clear the failure. Returns true when rescued. All other
- * verdicts and every failure mode keep the original guard behavior.
- *
- * Classification uses the task text only: the agent's own final message is
- * never evidence, so a child that failed to implement cannot talk its way
- * out of the guard by claiming the work was read-only.
- */
-export async function maybeRescueCompletionGuardFailure(result, task, arbiter) {
-    if (!arbiter || !isCompletionGuardFailure(result))
-        return false;
-    const verdict = await arbitrateWithGuard(arbiter, task);
-    if (verdict !== "read-only")
-        return false;
-    result.exitCode = 0;
-    delete result.error;
-    return true;
-}
-async function arbitrateWithGuard(arbiter, task) {
-    try {
-        return await arbiter(task);
-    }
-    catch {
-        return "unavailable";
-    }
-}
-//# sourceMappingURL=llm-intent-arbiter.js.map

package/src/runs/shared/llm-intent-arbiter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"llm-intent-arbiter.js","sourceRoot":"","sources":["../../../../src/runs/shared/llm-intent-arbiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,IAAI,EAAe,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAElF;;;;;;;;;;;;GAYG;AAEH,MAAM,6BAA6B,GAClC,qEAAqE,CAAC;AAMvE,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CACjC;IACC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;IACtE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC/B,WAAW,EAAE,6FAA6F;KAC1G,CAAC;IACF,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;CACnF,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AAIF,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CACjC,QAAsE;IAEtE,IAAI,CAAC,QAAQ;QAAE,OAAO,aAAa,CAAC;IACpC,IAAI,QAAQ,CAAC,cAAc,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IAClG,OAAO,gBAAgB,CAAC;AACzB,CAAC;AA4BD,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAS1C,SAAS,mBAAmB,CAC3B,GAAwB,EACxB,OAAoC;IAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,aAGpB,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;QACjE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,KAAmC,CAAC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,QAAQ,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAC1F,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAC7B,GAAwB,EACxB,OAAoC;IAEpC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC,aAEpB,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1E,OAAO;QACN,KAAK;QACL,gBAAgB,EAAE,OAAO,EAAE,QAAQ;QACnC,kBAAkB,EAAE,UAAU,EAAE,YAAY;QAC5C,aAAa,EAAE,UAAU,EAAE,GAAG;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,0BAA0B;KAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAChC,GAAwB,EACxB,KAAoB;IAEpB,MAAM,QAAQ,GAAG,GAAG,CAAC,aAQpB,CAAC;IACF,0EAA0E;IAC1E,oEAAoE;IACpE,iEAAiE;IACjE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO;YACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,mGAAmG;AACnG,SAAS,mBAAmB,CAC3B,IAAc,EACd,IAAiB,EACjB,SAA6B;IAE7B,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE;QAC9D,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,OAAO,EAAE,EAAE,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;KACpH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC5B,OAAuB,EACvB,IAAiB,EACjB,IAAY;IAEZ,2EAA2E;IAC3E,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzE,MAAM,CAAC,+BAA+B,CAAC;QACvC,MAAM,CAAC,iCAAiC,CAAC;QACzC,MAAM,CAAC,8BAA8B,CAAC;KACtC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAa,OAAO,CAAC,gBAAgB;WAC/C,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;WAC7H,YAAY,CAAC;IACjB,IAAI,QAAoC,CAAC;IACzC,MAAM,IAAI,GAA4D;QACrE,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,4EAA4E;QACzF,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,YAAY;QAC3B,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM;YAChC,IAAI,CAAC,QAAQ;gBAAE,QAAQ,GAAG,MAAM,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QACjG,CAAC;KACD,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACvB,YAAY,EAAE;YACb,YAAY,EAAE;gBACb,qFAAqF;gBACrF,oOAAoO;gBACpO,iIAAiI;gBACjI,0JAA0J;gBAC1J,kHAAkH;gBAClH,sHAAsH;aACtH,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,CAAC,IAAI,CAAC;SACb;QACD,YAAY;QACZ,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7E,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE,CAC3B,YAAY,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAClE,cAAc,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CACtC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,EAAE;QAC7G,aAAa,EAAE,YAAY;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC;QACJ,mEAAmE;QACnE,8DAA8D;QAC9D,8DAA8D;QAC9D,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,OAAO,aAAa,CAAC;QAC7C,MAAM,MAAM,GAAG,UAAU,IAAI,EAAE,CAAC;QAChC,MAAM,OAAO,CAAC,IAAI,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC/B,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACvD,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,CAAC,CAAC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,OAAO,aAAa,CAAC;QACpC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,aAAa,CAAC;IACtB,CAAC;AACF,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,yBAAyB,CACxC,GAAwB,EACxB,OAAoC;IAEpC,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC1E,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IACrD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACjF,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IAClE,OAAO,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,6BAA6B,CAAC,KAAK,IAAI,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAIpD;IACA,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7C,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,0EAA0E;IAC1E,6BAA6B;IAC7B,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,WAAW;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,MAA6C,EAC7C,IAAY,EACZ,OAAwC;IAExC,IAAI,CAAC,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,KAAK,CAAC;IACpB,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,kBAAkB,CAChC,OAA4B,EAC5B,IAAY;IAEZ,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,aAAa,CAAC;IACtB,CAAC;AACF,CAAC"}

package/src/runs/shared/task-intent.d.ts

@@ -1,38 +0,0 @@
-/**
- * Shared task mutation-intent classifier.
- *
- * Single authority for reading a task's wording, answering two different
- * questions from one prohibition analysis:
- *
- * - `classifyTaskMutationIntent` / `expectsImplementationMutation`: does the
- *   task REQUIRE file changes? Consumed by the completion mutation guard,
- *   which blocks completion, so its vocabulary is deliberately narrow.
- *   Verbs inside filenames and path-like tokens do not count.
- * - `taskMayMutate`: COULD the task plausibly change files? Consumed by
- *   acceptance level inference, which only raises evidence gates, so its
- *   vocabulary is deliberately broad (any bare write verb).
- *
- * Explicit read-only wording ("do not modify", "review only") is a task-level
- * intent only when no write imperative survives outside those phrases. A task
- * like "Do not modify tests; implement the fix" is an implementation task with
- * a scoped constraint, not a read-only task.
- */
-declare function stripSeverityCompounds(task: string): string;
-export { stripSeverityCompounds };
-export type TaskMutationIntent = {
-    kind: "implementation";
-} | {
-    kind: "read-only";
-} | {
-    kind: "unknown";
-};
-export declare function classifyTaskMutationIntent(agent: string, task: string): TaskMutationIntent;
-export declare function expectsImplementationMutation(agent: string, task: string): boolean;
-/**
- * Whether the task could plausibly change files. Blanket prohibitions win;
- * write verbs inside a scoped prohibition's object or a read-only deliverable
- * phrase ("write a summary report") do not count; any other bare write verb
- * does.
- */
-export declare function taskMayMutate(task: string): boolean;
-//# sourceMappingURL=task-intent.d.ts.map

package/src/runs/shared/task-intent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"task-intent.d.ts","sourceRoot":"","sources":["../../../../src/runs/shared/task-intent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA4EH,iBAAS,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AACD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAwClC,MAAM,MAAM,kBAAkB,GAAG;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AA8D1G,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAoB1F;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAElF;AASD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKnD"}