1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
// User-facing configuration file (`~/.orchestratectl/config.toml`), the `file`
// layer of the flag > env > file > default precedence (AGENTS-AI-FIRST-CLI §8).
// Currently read only for the `run create --harness` default; a missing/empty
// file is the common case and yields the built-in defaults.
// Behind-the-seam deterministic correctness floor (design.md §4). Pure gates +
// a thin capture layer; nothing in the live `run create` / supervisor / `run
// merge` path calls it yet — staged rollout (design §14) wires it into the
// supervisor's merge gate at T5. `#[allow(dead_code)]` covers the subtree until
// then. `unused_imports` is allowed alongside because the module's convenience
// re-exports (`pub use`) have no in-crate consumer until T5 either.
// Vendored typed git-worktree/branch wrapper (issue `workmux-extract-libs`,
// following the `multiplexer` precedent). The supervisor teardown + reconcile
// paths route their git subprocesses through `git::repo::Git`.
// Behind-the-seam code-pipeline harness contract (design.md §10). Nothing in the
// live `run create` / supervisor path constructs a `CodeHarness` yet — staged
// rollout (design §14) wires it in later. The one live surface is the standalone
// `harness bakeoff` subcommand (`harness::bakeoff`), which drives the real agent
// adapters to compare agent loops; it is explicitly run, never part of the
// supervisor path. `#[allow(dead_code)]` still covers the parts of the subtree
// (protocol variants, helpers) not reached until the supervisor wiring lands.
// Behind-the-seam inverted control loop (design.md §2 + §0.2, breakdown T4). The
// tiered orchestrator + typed action primitives + decision envelopes + loop
// skeleton, as a pure in-memory state machine with deterministic stubs. Nothing
// in the live `run create` / supervisor path constructs an `Orchestrator` or
// calls `drive` yet — staged rollout (design §14) wires it into the real
// supervisor + event log at T5. `#[allow(dead_code)]` covers the subtree until
// then; `unused_imports` is allowed alongside because the module's convenience
// re-exports (`pub use`) have no in-crate consumer until T5 either (mirrors the
// `floor` module).
use ExitCode;