optz: Goal orchestrator

packages/casan-harness/scripts/bash/goal-orchestrator.py

@@ -117,11 +117,17 @@ def scan(text: str, mode: str):
         output = os.path.join(directory, "output.txt")
         with open(source, "w", encoding="utf-8") as handle:
             handle.write(text)
+        environment = os.environ.copy()
+        # The goal workflow already records and enforces its H4 boundary. Keep
+        # deterministic injection/secret/PII checks active, but do not turn a
+        # temporary semantic-classifier outage into a false-positive block.
+        environment["CASAN_SECURITY_STRICT"] = "0"
         result = subprocess.run(
             ["bash", SECURITY, source, output, mode],
             cwd=ROOT,
             capture_output=True,
             text=True,
+            env=environment,
             timeout=60,
         )
         safe = ""
@@ -141,6 +147,11 @@ def call_model(model: str, prompt: str, cloud: bool):
             handle.write(prompt)
         environment = os.environ.copy()
         environment["CASAN_PREFLIGHT"] = "1" if cloud else "0"
+        # Long Markdown objectives need enough time for a local 9B model to
+        # ingest the brief and produce a bounded plan. The outer goal timeout
+        # remains the hard ceiling; this only raises the router's 60s default.
+        environment.setdefault("CASAN_MODEL_TIMEOUT_SEC", os.environ.get("CASAN_GOAL_LOCAL_TIMEOUT_SEC", "240") if not cloud else "120")
+        environment.setdefault("CASAN_MODEL_GENERATE_MAX_TOKENS", os.environ.get("CASAN_GOAL_MAX_OUTPUT_TOKENS", "1400"))
         try:
             result = subprocess.run(
                 ["bash", MODEL_ROUTER, prompt_path, output_path, "--role", "generate", "--model", model],
@@ -292,7 +303,7 @@ def run(job_path: str) -> int:
         if not ok:
             stage(job_path, "local-worker", "error", reason, job.get("local_provider", ""), local_model)
             emit(goal_id, "H2-tool", "error", "Local worker failed", {"reason": reason})
-            raise RuntimeError("local_worker_failed")
+            raise RuntimeError(f"local_worker_failed:{reason}")
         allowed, safe_local = scan(local_draft, "output")
         if not allowed:
             emit(goal_id, "H4-security", "blocked", "Local worker output rejected")