smol-symphony 0.2.0 → 0.3.0

package/dist/src/shell/main.js

@@ -0,0 +1,385 @@
+// FCIS rewrite — THE COMPOSITION ROOT (the single file allowed to import core).
+//
+// Usage (ported 1:1 from REF src/bin/symphony.ts):
+//   symphony [path-to-WORKFLOW.yaml] [--port <port>] [--reconcile-force] [--verbose]
+//   symphony doctor    [path-to-WORKFLOW.yaml] [--port <port>]
+//   symphony reconcile [path-to-WORKFLOW.yaml] [--force] [--port <port>]
+//
+// Responsibility: parse argv (pure core/cli/args), load+watch WORKFLOW.yaml, build
+// every adapter/port (in the main-adapters sibling) + the deterministic seams,
+// construct the EffectInterpreter, run doctor/preflight, branch to serve/
+// reconcile, bind the unified HTTP server (dashboard + MCP + the /acp
+// WebSocket), drive the orchestrator over the pure scheduler reducer
+// (core/schedule/tick), and install the SIGTERM/SIGINT graceful-shutdown
+// choreography (in the main-shutdown sibling). ALL decisions live in core; this
+// file only wires the pure deciders into the adapters the shell siblings build.
+//
+// FCIS discipline: imperative shell — async/await/Promise/real IO are expected.
+// This is the ONE shell file permitted to import src/core; everything that does
+// NOT need core lives in a sibling (main-adapters / main-preflight / main-shutdown
+// / main-scaffold) that imports src/types + the other shell slices only. The root
+// builds the core-backed closures and injects them into those siblings.
+import path from 'node:path';
+import process from 'node:process';
+// ─── CORE (decisions only — the ONLY file allowed these imports) ──────────────
+import { parseCli } from '../core/cli/args.js';
+import { parseWorkflow } from '../core/workflow/parse.js';
+import { parseActionsBlock } from '../core/actions/parse.js';
+import { parseMemAvailableMib } from '../core/schedule/admission.js';
+import { deriveSpawnRouting, derivePrRouting, requiredAdapterIds, resolveActionsForState } from '../core/workflow/derive.js';
+import { validateDispatch } from '../core/workflow/validate.js';
+import { probePromptTemplates } from '../core/workflow/prompt-probe.js';
+import { tick, FAILURE_BASE_MS, POLL_TIMER_ID, SPAWN_CYCLE_ACTOR } from '../core/schedule/tick.js';
+import { decideReconcileForIssue } from '../core/schedule/reconcile-issue.js';
+import { backoffDelayMs } from '../core/schedule/retry.js';
+import { classifyPushResult, parsePrNumberFromUrl, describeHandoffFailure } from '../core/git/result.js';
+import { foldRuntimeEvent, applyToolDelta, clearToolCallsAtTurnBoundary, toolCallLifecycle, foldTokenUsage, detectStall } from '../core/schedule/token-fold.js';
+// RUNNER-slice core deciders (runner-loop + actions-runner + dispatch-wrapper
+// extras). Bundled into RUNNER_CORE below + handed to main-loops; only this
+// composition root may import them.
+import { isTransportError, classifyTurnOutcome, decideTurnContinuation, decideAttemptOutcome, decideRecovery, selectPermissionOption } from '../core/runner/turn.js';
+import { resolveDispatchConfig } from '../core/runner/dispatch-config.js';
+import { applyRuntimeInjections } from '../core/runner/injection.js';
+import { buildVmPlan, byoProbeFailureMessage } from '../core/runner/vm-plan.js';
+import { buildManagedImageWiring } from '../core/image/managed-image.js';
+import { buildByoProbeScript, miseInstallFailureMessage, hasProjectMiseConfig } from '../core/runner/mise.js';
+import { selectPromptKind, renderPrompt, buildSteeringReplyPrompt, continuationPrompt } from '../core/runner/prompt.js';
+import { activeStateNames, terminalStateNames, pickHoldingState, selectIssuesByIds, selectIssuesByStates, selectCandidateIssues, matchingCandidates, resolveMatch, pickNextNumericIdentifier } from '../core/issue/parse.js';
+import { resolveActorString } from '../core/schedule/eligibility.js';
+import { assertNoCredentialMounts, assertContained } from '../core/vm-guards.js';
+import { guestMcpUrl } from '../core/mcp/url.js';
+import { deriveActionContext } from '../core/actions/context.js';
+import { planActions } from '../core/actions/plan.js';
+import { foldPredicateProbe } from '../core/actions/predicates.js';
+import { beginAction, foldActionOutcome, foldRenderFailed, foldSkipped, foldPredicateError, summarizeRun } from '../core/actions/run-fold.js';
+// Credential-egress slice deciders (the PURE half the host-only adapter + per-VM
+// egress substrate consume; only this composition root may import them).
+import { extractClaudeToken, extractCodexToken, codexEnvFallback } from '../core/credential/extract.js';
+import { extractClaudeIdentity, extractCodexMetadata } from '../core/credential/identity.js';
+import { buildAdapterCredentialSpecWithPlaceholder, buildAdapterHooksConfig, codexUpstreamRoute } from '../core/credential/shape.js';
+import { buildGondolinFakeCreds } from '../core/credential/fake-creds.js';
+import { buildStagedConfigs } from '../core/credential/adapter-config.js';
+import { buildUrl as buildMcpUrl } from '../core/mcp/url.js';
+// MCP control-plane deciders (the McpCore bundle the per-issue runtime closes over).
+import { validateEnvelope, extractId, routeFraming, makeError as makeMcpError, JsonRpcErrorCode } from '../core/mcp/protocol.js';
+import { decideToolCall } from '../core/mcp/dispatch.js';
+import { foldPostMove } from '../core/mcp/post-move.js';
+import { composeIssueFile } from '../core/issue/file.js';
+// Reconciler-slice deciders (VM reaper / workspace janitor / PR autopilot).
+import { decideVm } from '../core/reconcile/vm-decide.js';
+import { beginKill, foldKillStep } from '../core/reconcile/vm-reap.js';
+import { decideWorkspace } from '../core/reconcile/workspace-decide.js';
+import { classifyPrIntent } from '../core/reconcile/pr-classify.js';
+import { decidePr } from '../core/reconcile/pr-decide.js';
+import { foldPrEffectOutcome, MAX_PR_DECIDE_ITERATIONS } from '../core/reconcile/pr-loop.js';
+import { decidePrSummaryFreshness, decidePrViewFreshness } from '../core/reconcile/pr-notes.js';
+import { createLedger, start as ledgerStart, done as ledgerDone, error as ledgerError, record as ledgerRecord, resourceSnapshot as ledgerResourceSnapshot, } from '../core/reconcile/ledger.js';
+import { resolveHttpPort, formatStartupBanner, checkNodeVersion, checkWorkflow, checkGondolinImage, checkTrackerRoot, checkDashboardPort, doctorReportPassed, formatDoctorReport, } from '../core/doctor/checks.js';
+// HTTP/dashboard slice (core/http): the pure router/deciders/views/renderers the
+// composed `handle` drives. Only this composition root may import them.
+import { matchRoute, resolvePartialName, extractBearerToken, classifyContentType, checkSteeringCsrf, checkTriageCsrf, extractFormText, extractJsonText, } from '../core/http/routes.js';
+import { decideCreateIssue, decideMoveTransition, buildIssueDetailDto } from '../core/http/decisions.js';
+import { buildSnapshot, buildHealthRollup, buildSessionTotalsView } from '../core/http/views.js';
+import { renderDashboardHtml, renderHeaderPartial, renderHealthPartial, renderAttentionPartial, renderBoardPartial, renderTotalsPartial, renderIssueDetailPage, renderIssueNotFoundPage, } from '../core/http/render.js';
+import { hostClaudeCredentialPath, hostCodexCredentialPath, codexCredentialAvailable, codexMissingCredentialMessage, isKnownAdapter, } from '../core/credential/availability.js';
+// ─── SHELL ADAPTERS (each a THIN sibling shell module) ────────────────────────
+import { watchWorkflowSource, loadWorkflowSource, loadWorkflowProbed, validateDispatchIo } from './adapter/workflow-loader.js';
+import { buildLogSink, setLogVerbose, closeLogFile } from './interp/log.js';
+import { createEffectInterpreter } from './effect-interpreter.js';
+import { bindHttp, checkMcpPrecondition, bailStartup } from './main-http.js';
+import { wireHttpHandler, probeTrackerWritable } from './main-http-handler.js';
+import { buildMcpRuntime } from './main-mcp.js';
+import { OrchestratorLoop } from './orchestrator-loop.js';
+import { ReconcilerLoop } from './reconciler-loop.js';
+import { resolveLogFile, wireLogSink, buildConcreteAdapters, buildEffectAdapters } from './main-adapters.js';
+import { buildTransportSubstrates } from './main-substrates.js';
+import { buildReconcilerPasses } from './main-reconcilers.js';
+import { inFlightEntries } from './main-reconcilers-helpers.js';
+import { installShutdownHandlers } from './main-shutdown.js';
+import { handlePreflight } from './main-preflight.js';
+import { readSymphonyVersion, isMainEntry } from './main-entry.js';
+import { buildOrchestratorWithRunner, loadLauncherAsset, loadMiseConfigAsset } from './main-loops.js';
+import { buildRunDoctor } from './main-doctor.js';
+import { startServices } from './main-startup.js';
+// Re-exported for the public module surface (tests import the root's helpers).
+export { isMainEntry } from './main-entry.js';
+// Real YAML decoder (the shell side of the injected ParseDeps).
+import { parse as parseYaml } from 'yaml';
+// ─── Workflow parse closure + injected pure deps (core curried with decoders) ──
+/** The injected workflow ParseDeps: SHELL yaml decoder + CORE actions sub-parser. */
+const WORKFLOW_PARSE_DEPS = { parseYaml, parseActions: parseActionsBlock };
+/** Pure parse closure injected into the WorkflowSource adapter (and the doctor). */
+const parseWorkflowText = (text, workflowPath) => {
+    const { config, definition } = parseWorkflow(text, workflowPath, WORKFLOW_PARSE_DEPS, process.env);
+    return { config, definition };
+};
+/** The pure CORE fns/constants the shell adapters consume but may not import
+ *  themselves (only this composition root imports core). */
+const ADAPTER_CORE_DEPS = {
+    parseMemAvailableMib,
+    assertContained, composeIssueFile, pickNextNumericIdentifier,
+};
+/** The pure CORE credential deciders the credential-egress substrate consumes
+ *  (host-only token/identity extractors + placeholder/spec/allowlist/route
+ *  assemblers). The substrate stays core-free; the root injects these. */
+const CREDENTIAL_CORE_DEPS = {
+    pure: {
+        extractClaudeToken, extractCodexToken, codexEnvFallback, extractClaudeIdentity,
+        extractCodexMetadata,
+    },
+    buildAdapterCredentialSpecWithPlaceholder, buildAdapterHooksConfig,
+    buildGondolinFakeCreds, buildStagedConfigs, codexUpstreamRoute,
+};
+/** The pure CORE reconciler deciders + ledger reducer the reconciler passes
+ *  drive (the shell sibling may not import core; the root injects them here). */
+const RECONCILER_CORE_DEPS = {
+    decideVm, beginKill, foldKillStep, decideWorkspace, selectIssuesByStates, classifyPrIntent, decidePr,
+    foldPrEffectOutcome, maxPrDecideIterations: MAX_PR_DECIDE_ITERATIONS,
+    decidePrSummaryFreshness, decidePrViewFreshness,
+    createLedger, ledgerStart, ledgerDone, ledgerError, ledgerRecord, ledgerResourceSnapshot,
+};
+/** The pure credential-availability classifiers the WorkflowSource probes with. */
+const CREDENTIAL_AVAILABILITY_DEPS = {
+    hostClaudeCredentialPath, hostCodexCredentialPath,
+    codexCredentialAvailable, codexMissingCredentialMessage,
+};
+/** symphony version (read off package.json; works from src/ and dist/). */
+const SYMPHONY_VERSION = readSymphonyVersion(import.meta.url);
+/**
+ * Managed prebuilt-image wiring for THIS host (issue 224), built once at the root (the
+ * only core importer): the published-asset ref/URLs for the running version + host arch
+ * + `SYMPHONY_RELEASE_REPO` override. Null on an arch with no published asset (the
+ * managed source is then inert). Shared by the orchestrator loops (fetch routing +
+ * readiness) and the doctor (managed-source preflight).
+ */
+const MANAGED_IMAGE_WIRING = buildManagedImageWiring({ version: SYMPHONY_VERSION, nodeArch: process.arch, repo: process.env.SYMPHONY_RELEASE_REPO ?? null });
+/** The in-VM vm-agent launcher source (read off host disk ONCE at boot; fail-fast
+ *  if absent). Staged per-dispatch into the guest so it's byte-identical to the
+ *  host transport (eliminates the image⇄host launcher version lock). */
+const LAUNCHER_SOURCE = loadLauncherAsset().source;
+/** The symphony-bundled mise SYSTEM config source (issue 209; read off host disk ONCE
+ *  at boot, fail-fast if absent). Always staged per-dispatch into the guest at
+ *  /etc/mise/config.toml (mise provisioning is unconditional, issue 233), so node + the
+ *  agent CLIs are decoupled from the image digest (bump a pin → no image rebuild + repin). */
+const MISE_SYSTEM_CONFIG_SOURCE = loadMiseConfigAsset().source;
+// ─── Preflight: doctor / scaffold — the early-exit subcommands ─────────────────
+/** The doctor preflight closure (built in a sibling; the root injects core checks). */
+const runDoctor = buildRunDoctor({ checkNodeVersion, checkWorkflow, checkGondolinImage, checkTrackerRoot, checkDashboardPort, formatDoctorReport, doctorReportPassed }, 
+// SAME core bundle the startup probe uses (host-credential paths + classifiers +
+// messages) so doctor can't disagree with the live probe, plus the adapter union.
+{ ...CREDENTIAL_AVAILABILITY_DEPS, requiredAdapterIds, isKnownAdapter }, 
+// Load + render-probe the SAME way live serve validates: loadWorkflowProbed
+// assembles the per-state prompt templates (a missing/renamed prompt_file throws
+// `missing_prompt_file`) AND runs the pure probePromptTemplates render-probe (an
+// unparseable prompt_file throws `invalid_prompt_template`) — so BOTH surface as a
+// doctor `workflow` FAIL, matching the boot validateBootConfig probe, not at dispatch.
+// last arg: managed-image wiring (issue 224) for the doctor's managed-source preflight.
+async (p) => (await loadWorkflowProbed(p, parseWorkflowText, probePromptTemplates)).config, MANAGED_IMAGE_WIRING);
+/**
+ * Build the in-process graph: open the workflow watcher, wire the deterministic
+ * seams, construct every adapter, assemble the EffectInterpreter over them, and
+ * stand up the orchestrator + reconciler loops. The reload callback re-projects
+ * the freshly-parsed config so a WORKFLOW.yaml edit retargets the loop without a
+ * restart (REF buildReloadHandler).
+ */
+async function buildGraph(cli, workflowPath) {
+    const src = await watchWorkflowSource(workflowPath, parseWorkflowText, { watch: true });
+    let liveCfg = src.current().config;
+    validateBootConfig(src.current());
+    // Persistent log sink: SYMPHONY_LOG_FILE env override wins ("" disables);
+    // otherwise <logs.root>/symphony.log. wireLogSink points the sink + returns a
+    // reload retargeter that moves (and announces) it only when the path changes.
+    const retargetLogSink = wireLogSink(process.env.SYMPHONY_LOG_FILE, liveCfg);
+    setLogVerbose(cli.verbose);
+    const log = buildLogSink();
+    // Inject the pure core match-resolver into the tracker adapter's move path
+    // (the adapter is built in a shell sibling that may not import core).
+    const resolveIssueMatch = (all, issueId, fromState) => resolveMatch(matchingCandidates(all, issueId), issueId, fromState);
+    const a = buildConcreteAdapters(() => liveCfg, log, resolveIssueMatch, ADAPTER_CORE_DEPS);
+    // The transport substrates: host-only CredentialPort + per-VM egress substrate
+    // (placeholder-only-guest staging, REQUEST-side hooks incl. the PR#119 codex
+    // route — see main-credential) + the real ACP port over the `/acp` WebSocket,
+    // bound to the SAME AcpWsRegistry the HTTP server exposes (a.acpWs). The runner
+    // slice later populates `acp.context` + consumes `credential.registry`.
+    const { credential, acp } = buildTransportSubstrates({
+        credentialCore: CREDENTIAL_CORE_DEPS, acpCore: { toolCallLifecycle, isTransportError, selectPermissionOption },
+        random: a.random, acpWs: a.acpWs, runlog: a.runlog, clock: a.clock, log, getCfg: () => liveCfg,
+        requiredAdapters: () => requiredAdapterIds(liveCfg, isKnownAdapter),
+    });
+    // The per-issue MCP control plane (in-VM agent transition/steering/propose_issue
+    // tools/call). `applyMcpEffect` is the SAME tracker-move applier the central
+    // interpreter's `mcp_tool` family routes through; propose_issue writes WITHOUT
+    // an identifier → the tracker collision-picks the next free id (§2i fix).
+    const mcp = buildMcpRuntime({
+        core: MCP_CORE_PARTS, tracker: a.tracker, random: a.random, crypto: a.crypto,
+        clock: a.clock, log, getLiveCfg: () => liveCfg,
+        derivePrMerge: (cfg) => ({ enabled: cfg.pr.enabled, mergeState: derivePrRouting(cfg.states).mergeState }),
+    });
+    // The orchestrator owns the live running/claimed maps the reconciler reads as
+    // its intended set; it is built just below (after the interpreter it drives),
+    // so the reconciler reads it through a forward-referencing closure. The passes'
+    // `intended.inFlight()` only fires at pass-run time (well after construction).
+    let orchestrator;
+    const built = buildReconcilerPasses({
+        core: RECONCILER_CORE_DEPS, getCfg: () => liveCfg, log,
+        intended: { inFlight: () => inFlightEntries(orchestrator, liveCfg) },
+        clock: a.clock, vm: a.vm, signal: a.signal, timer: a.timer, gh: a.gh, git: a.git, workspace: a.workspace, tracker: a.tracker,
+        derivePrRouting: (cfg) => derivePrRouting(cfg.states),
+        sourceRepo: () => process.env.SYMPHONY_SOURCE_REPO ?? liveCfg.workflow_dir,
+    });
+    // The reaper / pr effect families route through the same appliers the passes
+    // drive, so a core-emitted `reaper`/`pr` Effect and a pass apply share state.
+    const interpreter = createEffectInterpreter(buildEffectAdapters({
+        ...a, log, logsRoot: () => liveCfg.logs.root,
+        acp: acp.port,
+        credential: credential.port,
+        applyKillStep: built.applyKillStep,
+        applyPrEffect: built.applyPrEffect,
+        // The `steering` family resolves/cancels McpRuntime's awaiter (the ONE live
+        // Promise); the steering-reply route + worker teardown emit, never poke it. The
+        // `mcp` family activates/deactivates the per-dispatch entry on the SAME runtime —
+        // the runner brackets via an Effect rather than poking activate/deactivate.
+        applyMcpEffect: mcp.applyMcpEffect, classifyPushResult, parsePrNumberFromUrl, steering: mcp.runtime.steering, mcpLifecycle: mcp.runtime,
+    }));
+    // The RUNNER slice + the OrchestratorLoop it drives (built together so the
+    // runner's onWorkerExit forward-references the loop). The runner brackets MCP
+    // activate/deactivate + the ACP dispatch context, runs the §2a mount guard before
+    // createVm, and folds per-issue ACP events/token-usage onto the live entry.
+    orchestrator = buildOrchestratorWithRunner({
+        core: LOOPS_CORE,
+        adapters: {
+            interpreter, workspace: a.workspace, tracker: a.tracker, vm: a.vm, acpPort: acp.port, credentialPort: credential.port, runlog: a.runlog, clock: a.clock, random: a.random, timer: a.timer, mem: a.mem,
+        },
+        substrates: { credential, acpContext: acp.context, acpRegistry: acp.registry, mcp: mcp.runtime },
+        // managedImageWiring (issue 224): built once at module level (root is the only core importer), shared with the doctor.
+        log, getLiveCfg: () => liveCfg, getWorkflow: () => src.current().definition, boundMcpPort: () => graph.boundPort, launcherSource: LAUNCHER_SOURCE, miseSystemConfigSource: MISE_SYSTEM_CONFIG_SOURCE, readEnv: (key) => process.env[key], managedImageWiring: MANAGED_IMAGE_WIRING,
+    });
+    const reconciler = new ReconcilerLoop({ passes: built.passes, timer: a.timer, log });
+    // Compose the dashboard/REST `handle`. The agent-facing MCP routes ride an
+    // McpHttpSurface assembled here: runtime.handleJsonRpc + a performSteering bound to
+    // the central interpreter (steering-reply emits a steering Effect — no awaiter poke).
+    const httpHandle = wireHttpHandler({
+        core: HTTP_HANDLER_CORE, orchestrator, tracker: a.tracker, clock: a.clock, log,
+        getLiveCfg: () => liveCfg, workflowPath: liveCfg.workflow_path, trackerWritable: () => probeTrackerWritable(liveCfg.tracker.root),
+        mcp: { handleJsonRpc: (id, t, b) => mcp.runtime.handleJsonRpc(id, t, b), performSteering: (e) => interpreter.execute(e) }
+    });
+    const graph = {
+        src, interpreter, orchestrator, reconciler, acpWs: a.acpWs,
+        http: null, boundPort: null, httpHandle, vm: a.vm, log, clock: a.clock,
+        getLiveCfg: () => liveCfg,
+        mcp: mcp.runtime,
+        credential, acp,
+    };
+    // Reload: re-point the live cfg + retarget the log sink + fan to the reconciler.
+    // The orchestrator reads the fresh cfg through its readConfig closure next tick.
+    src.onChange((cfg) => {
+        liveCfg = cfg;
+        retargetLogSink(cfg);
+        // The passes close over `getCfg: () => liveCfg` (already retargeted above), so
+        // re-hand the SAME pass set — they observe the reloaded config next pass.
+        reconciler.updateConfig(cfg, built.passes);
+    });
+    return graph;
+}
+/**
+ * The fatal boot gates (REF loadAndValidateConfig): this build serves
+ * tracker.kind=local only; the pure validateDispatch catches a misconfigured
+ * workflow; validateDispatchIo runs the IO-touching half (tracker.root exists,
+ * per-state host credential readable) against the injected pure availability
+ * classifiers so a missing credential fails at boot, not mid-dispatch.
+ */
+function validateBootConfig({ config: cfg, definition }) {
+    const fail = (reason) => {
+        process.stderr.write(`error: ${reason}\n`);
+        process.exit(2);
+    };
+    if (cfg.tracker.kind !== 'local') {
+        fail(`this build supports tracker.kind=local only (got: ${cfg.tracker.kind || '<unset>'})`);
+    }
+    // probePromptTemplates returns the same `string | null` shape as the validators,
+    // so an unparseable per-state prompt_file folds into the same chain and fails the
+    // boot here, not at first dispatch (a missing file already threw in loadWorkflowSource).
+    const invalid = validateDispatch(cfg) ?? validateDispatchIo(cfg, CREDENTIAL_AVAILABILITY_DEPS, process.env) ?? probePromptTemplates(definition);
+    if (invalid)
+        fail(invalid);
+}
+/** Loose pure-CORE fns the loops builder nests into the OrchestratorCore +
+ *  RunnerCoreParts bundles (main-loops nests). renderInitialPrompt = renderPrompt. */
+const LOOPS_CORE = {
+    orchestrator: {
+        tick: tick, selectCandidateIssues, selectIssuesByIds, decideReconcileForIssue, detectStall, deriveSpawnRouting, activeStateNames, terminalStateNames, pickHoldingState, backoffDelayMs, failureBaseMs: FAILURE_BASE_MS, pollTimerId: POLL_TIMER_ID, spawnActor: SPAWN_CYCLE_ACTOR,
+        tokenFold: { foldRuntimeEvent, applyToolDelta, clearToolCallsAtTurnBoundary, foldTokenUsage },
+    },
+    loop: {
+        resolveDispatchConfig, applyRuntimeInjections, buildVmPlan, selectPromptKind,
+        // decideRecovery defaults the per-turn budget + base backoff internally (issue 213),
+        // so the shell turn loop passes only the attempts already spent.
+        classifyTurnOutcome, decideTurnContinuation, decideAttemptOutcome, decideRecovery,
+        renderInitialPrompt: renderPrompt,
+        renderSteeringPrompt: ({ question, context, reply }) => buildSteeringReplyPrompt(question, context, reply),
+        continuationPrompt, activeStateNames, selectIssuesByIds,
+    },
+    actions: {
+        resolveActionsForState, deriveActionContext, planActions, foldPredicateProbe, beginAction, foldActionOutcome,
+        foldRenderFailed, foldSkipped, foldPredicateError, summarizeRun, describeHandoffFailure,
+    },
+    // mise toolchain-provisioning deciders (issue 209): byoProbeScript, miseInstallFailureMessage, hasProjectMiseConfig.
+    resolveActorString, assertNoCredentialMounts, resolveDispatchConfig, guestMcpUrl, byoProbeFailureMessage, byoProbeScript: buildByoProbeScript, miseInstallFailureMessage, hasProjectMiseConfig,
+};
+/** The pure CORE decisions + log-flush the HTTP boot cluster (main-http) needs. */
+const HTTP_BIND_CORE = { resolveHttpPort, buildMcpUrl, closeLog: closeLogFile };
+/** The pure CORE http router/deciders/views/renderers the composed dashboard
+ *  `handle` drives (the shell handler may not import core; the root binds them). */
+const HTTP_HANDLER_CORE = {
+    matchRoute, resolvePartialName, extractBearerToken, classifyContentType, checkSteeringCsrf, checkTriageCsrf, extractFormText, extractJsonText,
+    decideCreateIssue, decideMoveTransition, buildIssueDetailDto, buildSnapshot, buildHealthRollup, buildSessionTotalsView,
+    renderDashboardHtml, renderHeaderPartial, renderHealthPartial, renderAttentionPartial, renderBoardPartial, renderTotalsPartial, renderIssueDetailPage, renderIssueNotFoundPage,
+};
+/** The raw pure-CORE MCP deciders the per-issue runtime closes over (protocol /
+ *  dispatch / post-move family); main-mcp folds them into the McpCore bundle. */
+const MCP_CORE_PARTS = {
+    validateEnvelope, extractId, routeFraming, makeError: makeMcpError, decideToolCall, foldPostMove,
+    errorCodes: JsonRpcErrorCode,
+};
+// ─── main — argv → preflight → graph → transports → loop → shutdown handlers ───
+export async function main(argv = process.argv.slice(2)) {
+    const cli = resolveCli(argv);
+    const workflowPath = path.resolve(cli.workflow);
+    await handlePreflight(cli, workflowPath, { runDoctor });
+    const graph = await buildGraph(cli, workflowPath);
+    graph.http = await bindHttp(graph, cli, HTTP_BIND_CORE, graph.httpHandle);
+    await checkMcpPrecondition(graph, HTTP_BIND_CORE);
+    await startServices(graph, cli, workflowPath, {
+        formatStartupBanner, resolveHttpPort, version: SYMPHONY_VERSION,
+        logFile: resolveLogFile(process.env.SYMPHONY_LOG_FILE, graph.getLiveCfg()),
+        bailStartup: (msg) => bailStartup(msg, graph, HTTP_BIND_CORE),
+    });
+    // Graph already carries orchestrator/reconciler/src/http/vm/log under the names
+    // the handlers want; just add the log-sink flush closure.
+    installShutdownHandlers({ ...graph, stopCredentialTicker: () => graph.credential.ticker.stop(), closeLog: closeLogFile });
+}
+/**
+ * Parse argv (pure core/cli/args) and apply the help/error directives the way the
+ * original wrote to the stream + exited — the core only RETURNS the directive.
+ * Returns the typed Cli on the happy path (the help/error branches never return).
+ */
+function resolveCli(argv) {
+    const parsed = parseCli(argv, process.cwd());
+    if (parsed.kind === 'help') {
+        process.stdout.write(parsed.message);
+        process.exit(parsed.exitCode);
+    }
+    if (parsed.kind === 'error') {
+        process.stderr.write(parsed.message);
+        process.exit(parsed.exitCode);
+    }
+    return parsed.cli;
+}
+if (isMainEntry(import.meta.url)) {
+    main().catch(async (err) => {
+        process.stderr.write(`fatal: ${err.message}\n${err.stack ?? ''}\n`);
+        await closeLogFile().catch(() => undefined);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=main.js.map

package/dist/src/shell/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/shell/main.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,mDAAmD;AACnD,qFAAqF;AACrF,+DAA+D;AAC/D,yEAAyE;AACzE,EAAE;AACF,mFAAmF;AACnF,+EAA+E;AAC/E,0EAA0E;AAC1E,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,mFAAmF;AACnF,kFAAkF;AAClF,wEAAwE;AAExE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,iFAAiF;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC7H,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAChK,8EAA8E;AAC9E,4EAA4E;AAC5E,oCAAoC;AACpC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrK,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACxH,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC7N,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC9I,iFAAiF;AACjF,yEAAyE;AACzE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACxG,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC7F,OAAO,EAAE,yCAAyC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACrI,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC7D,qFAAqF;AACrF,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,IAAI,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACjI,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,4EAA4E;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,EACL,YAAY,EAAE,KAAK,IAAI,WAAW,EAAE,IAAI,IAAI,UAAU,EAAE,KAAK,IAAI,WAAW,EAC5E,MAAM,IAAI,YAAY,EAAE,gBAAgB,IAAI,sBAAsB,GACnE,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,kBAAkB,EACzF,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,GAC7E,MAAM,0BAA0B,CAAC;AAClC,iFAAiF;AACjF,wEAAwE;AACxE,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EACvE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,GACrE,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EACL,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EACrF,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,uBAAuB,GACxF,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EAAE,uBAAuB,EACjD,wBAAwB,EAAE,6BAA6B,EAAE,cAAc,GACxE,MAAM,oCAAoC,CAAC;AAQ5C,iFAAiF;AACjF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAE/H,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,WAAW,EAAsC,MAAM,gBAAgB,CAAC;AACjH,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,mBAAmB,EAAwB,MAAM,oBAAoB,CAAC;AACnI,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtG,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,+EAA+E;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,gEAAgE;AAChE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,kFAAkF;AAElF,qFAAqF;AACrF,MAAM,mBAAmB,GAAc,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAEtF,oFAAoF;AACpF,MAAM,iBAAiB,GAAsB,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE;IAClE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC,CAAC;AAEF;4DAC4D;AAC5D,MAAM,iBAAiB,GAAoB;IACzC,oBAAoB;IACpB,eAAe,EAAE,gBAAgB,EAAE,yBAAyB;CAC7D,CAAC;AAEF;;0EAE0E;AAC1E,MAAM,oBAAoB,GAAuB;IAC/C,IAAI,EAAE;QACJ,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB;QAC9E,oBAAoB;KACrB;IACD,yCAAyC,EAAE,uBAAuB;IAClE,sBAAsB,EAAE,kBAAkB,EAAE,kBAAkB;CAC/D,CAAC;AAEF;iFACiF;AACjF,MAAM,oBAAoB,GAAuB;IAC/C,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,QAAQ;IACpG,mBAAmB,EAAE,qBAAqB,EAAE,wBAAwB;IACpE,wBAAwB,EAAE,qBAAqB;IAC/C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAsB;CACzF,CAAC;AAEF,mFAAmF;AACnF,MAAM,4BAA4B,GAA+B;IAC/D,wBAAwB,EAAE,uBAAuB;IACjD,wBAAwB,EAAE,6BAA6B;CACxD,CAAC;AAEF,2EAA2E;AAC3E,MAAM,gBAAgB,GAAW,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC,CAAC;AAE7J;;wEAEwE;AACxE,MAAM,eAAe,GAAW,iBAAiB,EAAE,CAAC,MAAM,CAAC;AAE3D;;;8FAG8F;AAC9F,MAAM,yBAAyB,GAAW,mBAAmB,EAAE,CAAC,MAAM,CAAC;AAEvE,kFAAkF;AAElF,uFAAuF;AACvF,MAAM,SAAS,GAAG,cAAc,CAC9B,EAAE,gBAAgB,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE;AACrI,iFAAiF;AACjF,kFAAkF;AAClF,EAAE,GAAG,4BAA4B,EAAE,kBAAkB,EAAE,cAAc,EAAE;AACvE,4EAA4E;AAC5E,iFAAiF;AACjF,iFAAiF;AACjF,mFAAmF;AACnF,uFAAuF;AACvF,wFAAwF;AACxF,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,CAAC,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CACjH,CAAC;AA8BF;;;;;;GAMG;AACH,KAAK,UAAU,UAAU,CAAC,GAAQ,EAAE,YAAoB;IACtD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;IACnC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAElC,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC5E,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAE3B,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,iBAAiB,GAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CACvE,YAAY,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAE1F,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,gFAAgF;IAChF,wEAAwE;IACxE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,wBAAwB,CAAC;QACnD,cAAc,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE;QAC9G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO;QAC9F,gBAAgB,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC;KACpE,CAAC,CAAC;IAEH,iFAAiF;IACjF,6EAA6E;IAC7E,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,GAAG,GAAG,eAAe,CAAC;QAC1B,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;QAC5E,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;QAC9C,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;KAC1G,CAAC,CAAC;IAEH,8EAA8E;IAC9E,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,IAAI,YAA8B,CAAC;IACnC,MAAM,KAAK,GAAG,qBAAqB,CAAC;QAClC,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG;QACtD,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE;QACpE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;QAC5H,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QACrD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,YAAY;KAC3E,CAAC,CAAC;IAEH,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,WAAW,GAAG,uBAAuB,CACzC,mBAAmB,CAAC;QAClB,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;QAC5C,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,UAAU,EAAE,UAAU,CAAC,IAAI;QAC3B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,4EAA4E;QAC5E,gFAAgF;QAChF,kFAAkF;QAClF,4EAA4E;QAC5E,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO;KACxI,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,8EAA8E;IAC9E,kFAAkF;IAClF,4EAA4E;IAC5E,YAAY,GAAG,2BAA2B,CAAC;QACzC,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG;SACtM;QACD,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE;QAChG,uHAAuH;QACvH,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,kBAAkB,EAAE,oBAAoB;KACnR,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAErF,2EAA2E;IAC3E,oFAAoF;IACpF,sFAAsF;IACtF,MAAM,UAAU,GAAe,eAAe,CAAC;QAC7C,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG;QAC9E,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QACjI,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;KAAE,CAAC,CAAC;IAE/H,MAAM,KAAK,GAAU;QACnB,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;QAC1D,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;QACtE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;QACzB,GAAG,EAAE,GAAG,CAAC,OAAO;QAChB,UAAU,EAAE,GAAG;KAChB,CAAC;IAEF,iFAAiF;IACjF,iFAAiF;IACjF,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAkB,EAAE,EAAE;QAClC,OAAO,GAAG,GAAG,CAAC;QACd,eAAe,CAAC,GAAG,CAAC,CAAC;QACrB,+EAA+E;QAC/E,0EAA0E;QAC1E,UAAU,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAkD;IACrG,MAAM,IAAI,GAAG,CAAC,MAAc,EAAS,EAAE;QACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,MAAM,IAAI,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,qDAAqD,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,iFAAiF;IACjF,kFAAkF;IAClF,yFAAyF;IACzF,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,GAAG,EAAE,4BAA4B,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAChJ,IAAI,OAAO;QAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED;sFACsF;AACtF,MAAM,UAAU,GAAiB;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,IAA2C,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB;QACxT,SAAS,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,4BAA4B,EAAE,cAAc,EAAE;KAC9F;IACD,IAAI,EAAE;QACJ,qBAAqB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB;QAC5E,qFAAqF;QACrF,iEAAiE;QACjE,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,cAAc;QACjF,mBAAmB,EAAE,YAAY;QACjC,oBAAoB,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC;QAC1G,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB;KACxD;IACD,OAAO,EAAE;QACP,sBAAsB,EAAE,mBAAmB,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB;QAC5G,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB;KACxF;IACD,qHAAqH;IACrH,kBAAkB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,WAAW,EAAE,sBAAsB,EAAE,cAAc,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,oBAAoB;CAC/L,CAAC;AAEF,mFAAmF;AACnF,MAAM,cAAc,GAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AAE9F;oFACoF;AACpF,MAAM,iBAAiB,GAAoB;IACzC,UAAU,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe;IAC7I,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,aAAa,EAAE,iBAAiB,EAAE,sBAAsB;IACtH,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,uBAAuB;CAC/K,CAAC;AAEF;iFACiF;AACjF,MAAM,cAAc,GAAiB;IACnC,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY;IAChG,UAAU,EAAE,gBAAgB;CAC7B,CAAC;AAEF,kFAAkF;AAElF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAExD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,oBAAoB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAElD,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;QAC5C,mBAAmB,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB;QAC/D,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC1E,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC;KAC9D,CAAC,CAAC;IACH,gFAAgF;IAChF,0DAA0D;IAC1D,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;AAC5H,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC;AACpB,CAAC;AAED,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,KAAM,GAAa,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1F,MAAM,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/shell/orchestrator-feedback.js

@@ -0,0 +1,69 @@
+// FCIS rewrite — the runner-feedback folds the OrchestratorLoop applies to its live
+// running entries (kind: shell helper). Sliced out of orchestrator-loop.ts to keep
+// the loop class under the file-line budget. Each fold takes the LIVE RunningEntry
+// (the `active_tool_calls` Set is a live shell handle core never holds) plus the
+// injected PURE core folds (core/schedule/token-fold) and writes the result back.
+//
+// Shell rule: imports from src/types ONLY (the core folds arrive injected).
+/** REF: reportRuntimeEvent — fold the event + track in-flight tool calls onto `e`. */
+export function applyRuntimeEvent(e, ev, fold) {
+    const next = fold.foldRuntimeEvent({ last_event: e.last_event, last_event_at: e.last_event_at, last_message: e.last_message, recent_events: e.recent_events }, ev);
+    e.last_event = next.last_event;
+    e.last_event_at = next.last_event_at;
+    e.last_message = next.last_message;
+    e.recent_events = next.recent_events;
+    if (ev.tool && ev.tool.id) {
+        e.active_tool_calls = new Set(fold.applyToolDelta([...e.active_tool_calls], { id: ev.tool.id, ended: ev.tool.ended }));
+    }
+}
+/** REF: reportTurnStarted — turn boundary clears the in-flight tool set. */
+export function applyTurnStarted(e, turnNumber, fold) {
+    e.turn_count = turnNumber;
+    e.active_tool_calls = new Set(fold.clearToolCallsAtTurnBoundary());
+}
+/**
+ * REF: reportTokenUsage — fold the adapter's ABSOLUTE token totals onto the live
+ * entry (core `foldTokenUsage` de-dupes via the per-report delta + new baselines).
+ * The dashboard's totals footer sums these per-entry counters live, so without this
+ * the totals stay stuck at 0 (§2c).
+ */
+export function applyTokenUsage(e, usage, fold) {
+    const delta = fold.foldTokenUsage({
+        last_reported_input: e.last_reported_input_tokens,
+        last_reported_output: e.last_reported_output_tokens,
+        last_reported_total: e.last_reported_total_tokens,
+    }, usage);
+    e.input_tokens = usage.input_tokens;
+    e.output_tokens = usage.output_tokens;
+    e.total_tokens = usage.total_tokens;
+    e.last_reported_input_tokens = delta.last_reported_input;
+    e.last_reported_output_tokens = delta.last_reported_output;
+    e.last_reported_total_tokens = delta.last_reported_total;
+}
+/**
+ * REF: detectStalls — the no-activity stall reaper. Folds every running entry's
+ * last-activity reference through core `detectStall` (clock injected as nowMs) and
+ * returns the issue ids to terminate. core honors the suppression: steering-paused
+ * entries AND entries with a tool call IN FLIGHT are skipped (a long silent tool
+ * emits no ACP frames; the prompt-timeout hard cap backstops a genuine hang — the
+ * "suppress the stall reaper while a tool call is in flight" behavior, §2c).
+ */
+export function detectStalledIssues(running, stall, nowMs) {
+    const stallTimeoutMs = stall.stallTimeoutMs();
+    if (stallTimeoutMs <= 0)
+        return [];
+    const stalled = [];
+    for (const [issueId, e] of running) {
+        const verdict = stall.detectStall({
+            stallTimeoutMs,
+            steeringRequested: e.steering_requested,
+            activeToolCallCount: e.active_tool_calls.size,
+            lastReferenceMs: Date.parse(e.last_event_at ?? e.started_at),
+            nowMs,
+        });
+        if (verdict.stalled)
+            stalled.push(issueId);
+    }
+    return stalled;
+}
+//# sourceMappingURL=orchestrator-feedback.js.map

package/dist/src/shell/orchestrator-feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator-feedback.js","sourceRoot":"","sources":["../../../src/shell/orchestrator-feedback.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mFAAmF;AACnF,mFAAmF;AACnF,iFAAiF;AACjF,kFAAkF;AAClF,EAAE;AACF,4EAA4E;AAO5E,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,CAAe,EAAE,EAAgB,EAAE,IAAmB;IACtF,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAChC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,EAC1H,EAAE,CACH,CAAC;IACF,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IAC/B,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACrC,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACnC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACrC,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,CAAC,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,CAAe,EAAE,UAAkB,EAAE,IAAmB;IACvF,CAAC,CAAC,UAAU,GAAG,UAAU,CAAC;IAC1B,CAAC,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,CAAe,EAAE,KAAwB,EAAE,IAAmB;IAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAC/B;QACE,mBAAmB,EAAE,CAAC,CAAC,0BAA0B;QACjD,oBAAoB,EAAE,CAAC,CAAC,2BAA2B;QACnD,mBAAmB,EAAE,CAAC,CAAC,0BAA0B;KAClD,EACD,KAAK,CACN,CAAC;IACF,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACpC,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IACtC,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACpC,CAAC,CAAC,0BAA0B,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACzD,CAAC,CAAC,2BAA2B,GAAG,KAAK,CAAC,oBAAoB,CAAC;IAC3D,CAAC,CAAC,0BAA0B,GAAG,KAAK,CAAC,mBAAmB,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA0C,EAC1C,KAAsB,EACtB,KAAa;IAEb,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAC9C,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC;YAChC,cAAc;YACd,iBAAiB,EAAE,CAAC,CAAC,kBAAkB;YACvC,mBAAmB,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI;YAC7C,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,UAAU,CAAC;YAC5D,KAAK;SACN,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}