orch/

Package admission gates dispatch on ledger state.

Package burnrate is the slice-4 E1 burn-rate downshift assessor — the struck slice-1 gate leg landing where the master brief put it (scheduler work).

Package calib fits window capacities from quota-trace calibration samples — fact-refresh gap #1 closed: SetCapacity finally gets its production caller (cmd/mr-orchestrate status → maybeFit).

Package childenv scrubs the environment handed to spawned lane binaries.

Package codexlane drives the official codex CLI, process-per-turn (`codex exec --json`), per R12 starting from the AMS run-codex-audit.ps1 invocation shape (--skip-git-repo-check, --sandbox workspace-write, -c model_reasoning_effort).

Package compact is W5's LOSSLESS JSON compaction (DG-3, operator-approved: "quality is the lever and the priority here.

Package dispatch is the append-only JSONL dispatch log.

Package egress is the data-boundary gate: it decides whether a dispatch may send this operator's prompts and repository context to a THIRD-PARTY lane — one whose provider is neither Anthropic nor OpenAI and whose data handling is outside the subscription relationships the rest of the system assumes.

Package exclusion is the W6 self-healing lane breaker: a lane whose ADAPTER keeps failing (spawn_error — the binary/infra is broken on OUR side; parse_error — its output contract broke; for the local lane also api_error — a harness tier fault) is excluded from routing for a backoff that doubles on each further failure and clears on the first success.

Package fuses holds DATED capacity/pricing modifiers.

Package glmlane drives the GLM coding plan through the OFFICIAL claude binary pointed at api.z.ai — the proven smoke shape (2ca0b5e/d5bbbcb).

Package hostcfg edits a HOST application's config file the way an installer must: it preserves every byte it does not own, it records what it wrote so it can prove ownership later, and it never removes anything it cannot prove it wrote.

Package jitter is the slice-4 E4 reset-boundary smoother.

Package ledger is the quota substrate: generic per-(lane,window) buckets fed by shadow accounting (always on, the floor) and any provider-reported percentages (authoritative — cross-device drift means local counts lie).

Package locallane is the BLACK-BOX adapter to the local-offload binaries.

Package lockfile is the cross-process mutex for small state files that see concurrent read-modify-write from parallel dispatches (W6: exclusions.json, local-limiter.json).

Package orchcfg holds the orchestrator's operator config.

Package pace owns window-fraction math and the bindingPaceSlack scalar (claudexor budget-ledger lineage, reconciliation W1): per window, slack = elapsedFraction − usedRatio; a lane's BINDING slack is the minimum across its known windows.

Package profiles is W2's credential-profile registry: each lane maps to an ORDERED list of subjects, each with an isolated auth home the operator provisioned by logging in once (CLAUDE_CONFIG_DIR=<home> claude /login, CODEX_HOME=<home> codex login — probe-verified 2026-07-23 that CLAUDE_CONFIG_DIR fully relocates the credential read on Windows).

Package quotapoll polls vendor usage endpoints for MEASURED window facts (reconciliation W1 / frontier Tier-A #1-2).

Package quotasig ingests the sanctioned quota signals into the ledger: the statusline drop file (rate_limits teed by the operator's statusline command, RS1) and — since W1 (Daniel-approved 2026-07-23, superseding the old D3 off-gate) — vendor-polled snapshots from quotapoll via ApplySnapshots.

Package router is the deterministic rank-table router v0 (design brief §1): rank-based (NOT scalar-score — the routing-collapse lesson), quota mask applied BEFORE selection, Pareto-pruned alternatives, a v0 shadow price that demotes the throttled lane by exactly one rank.

Package slidewin is the W6 sliding-window dispatch limiter for the LOCAL lane.

Package spenddown is the slice-4 E2 spend-down assessor — the mirror image of burnrate (E1).

Package statepaths is the single home for the orchestrator's state-file layout, shared by cmd/mr-orchestrate and cmd/mr-hook (the hook reads the ledger for the quota hint and must resolve the SAME paths).

Package strategy is the slice-3 orchestration layer: a 3-list DAG IR (Step/IR), its validator, and the per-dispatch durable state store.