@agentconnect.md/daemon 1.0.0-rc.322 → 1.0.0-rc.324

package/dist/{agent-list-Cs_EgUh5.js → agent-list-CE6JNwIB.js}

@@ -1,4 +1,4 @@
-import { o as loadConfig, t as discoverAgents } from "./load-agents-CROyMyq9.js";
+import { o as loadConfig, t as discoverAgents } from "./load-agents-CuXy_Ei1.js";
 //#region src/cli/agent-list.ts
 async function runAgentList(opts) {
 	const out = opts.out ?? process.stdout;
@@ -18,4 +18,4 @@ async function runAgentList(opts) {
 //#endregion
 export { runAgentList };
 
-//# sourceMappingURL=agent-list-Cs_EgUh5.js.map
+//# sourceMappingURL=agent-list-CE6JNwIB.js.map

package/dist/{agent-list-Cs_EgUh5.js.map → agent-list-CE6JNwIB.js.map}

@@ -1 +1 @@
-{"version":3,"file":"agent-list-Cs_EgUh5.js","names":[],"sources":["../src/cli/agent-list.ts"],"sourcesContent":["import { loadConfig } from '../config/load-config.js'\nimport { discoverAgents } from '../agents/load-agents.js'\n\nexport interface RunAgentListOpts {\n  agentsDir?: string\n  configPath?: string\n  root?: string\n  out?: NodeJS.WritableStream\n}\n\n// Read-only view of the local agent directory. Mutating agents (add/remove/\n// enable/disable) is intentionally not a CLI command — agent business config is\n// owned by the Control Plane (agent/upsert + register/ok roster, see\n// cp/cp-agent-registry.ts) or by hand-editing agent.json; the daemon only\n// reconciles what it finds on disk. This lists what that discovery sees.\nexport async function runAgentList(opts: RunAgentListOpts): Promise<void> {\n  const out = opts.out ?? process.stdout\n  const cfg = loadConfig({\n    root: opts.root,\n    configPath: opts.configPath,\n    optional: true,\n    overrides: { agentsDir: opts.agentsDir }\n  })\n  const agentsDir = cfg.agentsDir!\n  const discovered = discoverAgents(agentsDir)\n  if (discovered.length === 0) {\n    out.write(`no agents found under ${agentsDir}\\n`)\n    return\n  }\n  for (const { agent, dir } of discovered) {\n    out.write(`${agent.id}\\t${agent.status}\\t${agent.runtime}\\t${agent.name}\\t${dir}\\n`)\n  }\n}\n"],"mappings":";;AAeA,eAAsB,aAAa,MAAuC;CACxE,MAAM,MAAM,KAAK,OAAO,QAAQ;CAOhC,MAAM,YANM,WAAW;EACrB,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,UAAU;EACV,WAAW,EAAE,WAAW,KAAK,UAAU;CACzC,CACoB,CAAC,CAAC;CACtB,MAAM,aAAa,eAAe,SAAS;CAC3C,IAAI,WAAW,WAAW,GAAG;EAC3B,IAAI,MAAM,yBAAyB,UAAU,GAAG;EAChD;CACF;CACA,KAAK,MAAM,EAAE,OAAO,SAAS,YAC3B,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG;AAEvF"}
+{"version":3,"file":"agent-list-CE6JNwIB.js","names":[],"sources":["../src/cli/agent-list.ts"],"sourcesContent":["import { loadConfig } from '../config/load-config.js'\nimport { discoverAgents } from '../agents/load-agents.js'\n\nexport interface RunAgentListOpts {\n  agentsDir?: string\n  configPath?: string\n  root?: string\n  out?: NodeJS.WritableStream\n}\n\n// Read-only view of the local agent directory. Mutating agents (add/remove/\n// enable/disable) is intentionally not a CLI command — agent business config is\n// owned by the Control Plane (agent/upsert + register/ok roster, see\n// cp/cp-agent-registry.ts) or by hand-editing agent.json; the daemon only\n// reconciles what it finds on disk. This lists what that discovery sees.\nexport async function runAgentList(opts: RunAgentListOpts): Promise<void> {\n  const out = opts.out ?? process.stdout\n  const cfg = loadConfig({\n    root: opts.root,\n    configPath: opts.configPath,\n    optional: true,\n    overrides: { agentsDir: opts.agentsDir }\n  })\n  const agentsDir = cfg.agentsDir!\n  const discovered = discoverAgents(agentsDir)\n  if (discovered.length === 0) {\n    out.write(`no agents found under ${agentsDir}\\n`)\n    return\n  }\n  for (const { agent, dir } of discovered) {\n    out.write(`${agent.id}\\t${agent.status}\\t${agent.runtime}\\t${agent.name}\\t${dir}\\n`)\n  }\n}\n"],"mappings":";;AAeA,eAAsB,aAAa,MAAuC;CACxE,MAAM,MAAM,KAAK,OAAO,QAAQ;CAOhC,MAAM,YANM,WAAW;EACrB,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,UAAU;EACV,WAAW,EAAE,WAAW,KAAK,UAAU;CACzC,CACoB,CAAC,CAAC;CACtB,MAAM,aAAa,eAAe,SAAS;CAC3C,IAAI,WAAW,WAAW,GAAG;EAC3B,IAAI,MAAM,yBAAyB,UAAU,GAAG;EAChD;CACF;CACA,KAAK,MAAM,EAAE,OAAO,SAAS,YAC3B,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG;AAEvF"}

package/dist/{chat-Cq-5NzYK.js → chat-lv_zfcAK.js}

@@ -1,6 +1,6 @@
-import { a as agentChildEnv, i as selectAgent, o as loadConfig } from "./load-agents-CROyMyq9.js";
+import { a as agentChildEnv, i as selectAgent, o as loadConfig } from "./load-agents-CuXy_Ei1.js";
 import { l as resolveRoot } from "./paths-DEcUO8lC.js";
-import { a as prepareWorkspace, f as memoryProviderFor, t as AcpHost, w as resolveRuntimes } from "./acp-host-Dsm0i9DH.js";
+import { T as resolveRuntimes, a as prepareWorkspace, f as memoryProviderFor, t as AcpHost } from "./acp-host-DKkoWiWe.js";
 import { createInterface } from "node:readline";
 //#region src/cli/chat.ts
 function renderUpdate(out) {
@@ -84,4 +84,4 @@ async function runChat(opts) {
 //#endregion
 export { renderUpdate, runChat };
 
-//# sourceMappingURL=chat-Cq-5NzYK.js.map
+//# sourceMappingURL=chat-lv_zfcAK.js.map

package/dist/{chat-Cq-5NzYK.js.map → chat-lv_zfcAK.js.map}

@@ -1 +1 @@
-{"version":3,"file":"chat-Cq-5NzYK.js","names":[],"sources":["../src/cli/chat.ts"],"sourcesContent":["import { createInterface } from 'node:readline'\nimport type { ContentBlock, SessionUpdate } from '@agentclientprotocol/sdk'\nimport { loadConfig } from '../config/load-config.js'\nimport { resolveRuntimes } from '../runtimes/registry.js'\nimport { selectAgent } from '../agents/load-agents.js'\nimport { agentChildEnv } from '../agents/agent-env.js'\nimport { memoryProviderFor } from '../agents/memory-provider.js'\nimport { prepareWorkspace } from '../workspace/workspace-manager.js'\nimport { AcpHost } from '../acp/acp-host.js'\nimport { resolveRoot } from '../paths.js'\n\nexport function renderUpdate(out: NodeJS.WritableStream) {\n  return (_sessionId: string, update: SessionUpdate): void => {\n    if (update.sessionUpdate === 'agent_message_chunk' && update.content.type === 'text') {\n      out.write(update.content.text)\n    } else if (update.sessionUpdate === 'tool_call') {\n      const title = ('title' in update && update.title) || update.toolCallId || 'tool'\n      out.write(`\\n[tool] ${title}\\n`)\n    }\n  }\n}\n\nexport interface RunChatOpts {\n  agentsDir?: string\n  agentName?: string\n  message?: string\n  configPath?: string\n  root?: string\n  out?: NodeJS.WritableStream\n  input?: NodeJS.ReadableStream\n}\n\nexport async function runChat(opts: RunChatOpts): Promise<void> {\n  const out = opts.out ?? process.stdout\n  const root = resolveRoot(opts.root)\n  const cfg = loadConfig({\n    root: opts.root,\n    configPath: opts.configPath,\n    optional: true,\n    overrides: { agentsDir: opts.agentsDir }\n  })\n  const agent = selectAgent(cfg.agentsDir!, opts.agentName)\n\n  const runtimes = await resolveRuntimes(cfg, root, { neededRuntimes: [agent.runtime], mode: 'cache-first' })\n  const runtime = runtimes[agent.runtime]\n  if (!runtime) {\n    const available = Object.keys(runtimes).sort().join(', ') || '(none)'\n    throw new Error(`runtime \"${agent.runtime}\" not found. Available: ${available}`)\n  }\n\n  const host = new AcpHost(runtime, {\n    onUpdate: renderUpdate(out),\n    // Memory-backend env for parity with the daemon (managed disables the runtime's\n    // own memory; native redirects it under the agent root).\n    env: { ...agentChildEnv(agent), ...memoryProviderFor(agent, runtime).runtimeEnv() },\n    configPrefs: {\n      model: agent.runtimeOverrides?.model,\n      permissionMode: agent.permissionMode,\n      reasoningEffort: agent.reasoningEffort,\n      fastMode: agent.fastMode\n    }\n  })\n  // The adapter child runs in its own process group (see AcpHost.start), so a\n  // terminal Ctrl-C no longer kills it as a side effect — Node's default SIGINT\n  // exit would skip the finally below and leak it. Stop the host, then re-exit.\n  // Registered BEFORE start(): a first-run `npx -y` runtime download takes long\n  // enough that Ctrl-C mid-start is common, and the spawn happens early in start().\n  const onSigint = () => {\n    void host.stop().finally(() => process.exit(130))\n  }\n  process.once('SIGINT', onSigint)\n  try {\n    await host.start()\n    const cwd = await prepareWorkspace(agent)\n    const sessionId = await host.newSession(cwd)\n\n    const send = async (text: string) => {\n      const blocks: ContentBlock[] = [{ type: 'text', text }]\n      await host.prompt(sessionId, blocks)\n      out.write('\\n')\n    }\n\n    if (typeof opts.message === 'string' && opts.message.length > 0) {\n      await send(opts.message)\n      return\n    }\n\n    const rl = createInterface({ input: opts.input ?? process.stdin })\n    out.write(`Chatting with ${agent.name} (${agent.id}). Type .exit to quit.\\n> `)\n    try {\n      for await (const line of rl) {\n        const text = line.trim()\n        if (text === '.exit' || text === '.quit') break\n        if (text.length > 0) await send(text)\n        out.write('> ')\n      }\n    } finally {\n      rl.close()\n    }\n  } finally {\n    process.removeListener('SIGINT', onSigint)\n    await host.stop()\n  }\n}\n"],"mappings":";;;;;AAWA,SAAgB,aAAa,KAA4B;CACvD,QAAQ,YAAoB,WAAgC;EAC1D,IAAI,OAAO,kBAAkB,yBAAyB,OAAO,QAAQ,SAAS,QAC5E,IAAI,MAAM,OAAO,QAAQ,IAAI;OACxB,IAAI,OAAO,kBAAkB,aAAa;GAC/C,MAAM,QAAS,WAAW,UAAU,OAAO,SAAU,OAAO,cAAc;GAC1E,IAAI,MAAM,YAAY,MAAM,GAAG;EACjC;CACF;AACF;AAYA,eAAsB,QAAQ,MAAkC;CAC9D,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,MAAM,WAAW;EACrB,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,UAAU;EACV,WAAW,EAAE,WAAW,KAAK,UAAU;CACzC,CAAC;CACD,MAAM,QAAQ,YAAY,IAAI,WAAY,KAAK,SAAS;CAExD,MAAM,WAAW,MAAM,gBAAgB,KAAK,MAAM;EAAE,gBAAgB,CAAC,MAAM,OAAO;EAAG,MAAM;CAAc,CAAC;CAC1G,MAAM,UAAU,SAAS,MAAM;CAC/B,IAAI,CAAC,SAAS;EACZ,MAAM,YAAY,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,KAAK;EAC7D,MAAM,IAAI,MAAM,YAAY,MAAM,QAAQ,0BAA0B,WAAW;CACjF;CAEA,MAAM,OAAO,IAAI,QAAQ,SAAS;EAChC,UAAU,aAAa,GAAG;EAG1B,KAAK;GAAE,GAAG,cAAc,KAAK;GAAG,GAAG,kBAAkB,OAAO,OAAO,CAAC,CAAC,WAAW;EAAE;EAClF,aAAa;GACX,OAAO,MAAM,kBAAkB;GAC/B,gBAAgB,MAAM;GACtB,iBAAiB,MAAM;GACvB,UAAU,MAAM;EAClB;CACF,CAAC;CAMD,MAAM,iBAAiB;EACrB,KAAU,KAAK,CAAC,CAAC,cAAc,QAAQ,KAAK,GAAG,CAAC;CAClD;CACA,QAAQ,KAAK,UAAU,QAAQ;CAC/B,IAAI;EACF,MAAM,KAAK,MAAM;EACjB,MAAM,MAAM,MAAM,iBAAiB,KAAK;EACxC,MAAM,YAAY,MAAM,KAAK,WAAW,GAAG;EAE3C,MAAM,OAAO,OAAO,SAAiB;GACnC,MAAM,SAAyB,CAAC;IAAE,MAAM;IAAQ;GAAK,CAAC;GACtD,MAAM,KAAK,OAAO,WAAW,MAAM;GACnC,IAAI,MAAM,IAAI;EAChB;EAEA,IAAI,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;GAC/D,MAAM,KAAK,KAAK,OAAO;GACvB;EACF;EAEA,MAAM,KAAK,gBAAgB,EAAE,OAAO,KAAK,SAAS,QAAQ,MAAM,CAAC;EACjE,IAAI,MAAM,iBAAiB,MAAM,KAAK,IAAI,MAAM,GAAG,2BAA2B;EAC9E,IAAI;GACF,WAAW,MAAM,QAAQ,IAAI;IAC3B,MAAM,OAAO,KAAK,KAAK;IACvB,IAAI,SAAS,WAAW,SAAS,SAAS;IAC1C,IAAI,KAAK,SAAS,GAAG,MAAM,KAAK,IAAI;IACpC,IAAI,MAAM,IAAI;GAChB;EACF,UAAU;GACR,GAAG,MAAM;EACX;CACF,UAAU;EACR,QAAQ,eAAe,UAAU,QAAQ;EACzC,MAAM,KAAK,KAAK;CAClB;AACF"}
+{"version":3,"file":"chat-lv_zfcAK.js","names":[],"sources":["../src/cli/chat.ts"],"sourcesContent":["import { createInterface } from 'node:readline'\nimport type { ContentBlock, SessionUpdate } from '@agentclientprotocol/sdk'\nimport { loadConfig } from '../config/load-config.js'\nimport { resolveRuntimes } from '../runtimes/registry.js'\nimport { selectAgent } from '../agents/load-agents.js'\nimport { agentChildEnv } from '../agents/agent-env.js'\nimport { memoryProviderFor } from '../agents/memory-provider.js'\nimport { prepareWorkspace } from '../workspace/workspace-manager.js'\nimport { AcpHost } from '../acp/acp-host.js'\nimport { resolveRoot } from '../paths.js'\n\nexport function renderUpdate(out: NodeJS.WritableStream) {\n  return (_sessionId: string, update: SessionUpdate): void => {\n    if (update.sessionUpdate === 'agent_message_chunk' && update.content.type === 'text') {\n      out.write(update.content.text)\n    } else if (update.sessionUpdate === 'tool_call') {\n      const title = ('title' in update && update.title) || update.toolCallId || 'tool'\n      out.write(`\\n[tool] ${title}\\n`)\n    }\n  }\n}\n\nexport interface RunChatOpts {\n  agentsDir?: string\n  agentName?: string\n  message?: string\n  configPath?: string\n  root?: string\n  out?: NodeJS.WritableStream\n  input?: NodeJS.ReadableStream\n}\n\nexport async function runChat(opts: RunChatOpts): Promise<void> {\n  const out = opts.out ?? process.stdout\n  const root = resolveRoot(opts.root)\n  const cfg = loadConfig({\n    root: opts.root,\n    configPath: opts.configPath,\n    optional: true,\n    overrides: { agentsDir: opts.agentsDir }\n  })\n  const agent = selectAgent(cfg.agentsDir!, opts.agentName)\n\n  const runtimes = await resolveRuntimes(cfg, root, { neededRuntimes: [agent.runtime], mode: 'cache-first' })\n  const runtime = runtimes[agent.runtime]\n  if (!runtime) {\n    const available = Object.keys(runtimes).sort().join(', ') || '(none)'\n    throw new Error(`runtime \"${agent.runtime}\" not found. Available: ${available}`)\n  }\n\n  const host = new AcpHost(runtime, {\n    onUpdate: renderUpdate(out),\n    // Memory-backend env for parity with the daemon (managed disables the runtime's\n    // own memory; native redirects it under the agent root).\n    env: { ...agentChildEnv(agent), ...memoryProviderFor(agent, runtime).runtimeEnv() },\n    configPrefs: {\n      model: agent.runtimeOverrides?.model,\n      permissionMode: agent.permissionMode,\n      reasoningEffort: agent.reasoningEffort,\n      fastMode: agent.fastMode\n    }\n  })\n  // The adapter child runs in its own process group (see AcpHost.start), so a\n  // terminal Ctrl-C no longer kills it as a side effect — Node's default SIGINT\n  // exit would skip the finally below and leak it. Stop the host, then re-exit.\n  // Registered BEFORE start(): a first-run `npx -y` runtime download takes long\n  // enough that Ctrl-C mid-start is common, and the spawn happens early in start().\n  const onSigint = () => {\n    void host.stop().finally(() => process.exit(130))\n  }\n  process.once('SIGINT', onSigint)\n  try {\n    await host.start()\n    const cwd = await prepareWorkspace(agent)\n    const sessionId = await host.newSession(cwd)\n\n    const send = async (text: string) => {\n      const blocks: ContentBlock[] = [{ type: 'text', text }]\n      await host.prompt(sessionId, blocks)\n      out.write('\\n')\n    }\n\n    if (typeof opts.message === 'string' && opts.message.length > 0) {\n      await send(opts.message)\n      return\n    }\n\n    const rl = createInterface({ input: opts.input ?? process.stdin })\n    out.write(`Chatting with ${agent.name} (${agent.id}). Type .exit to quit.\\n> `)\n    try {\n      for await (const line of rl) {\n        const text = line.trim()\n        if (text === '.exit' || text === '.quit') break\n        if (text.length > 0) await send(text)\n        out.write('> ')\n      }\n    } finally {\n      rl.close()\n    }\n  } finally {\n    process.removeListener('SIGINT', onSigint)\n    await host.stop()\n  }\n}\n"],"mappings":";;;;;AAWA,SAAgB,aAAa,KAA4B;CACvD,QAAQ,YAAoB,WAAgC;EAC1D,IAAI,OAAO,kBAAkB,yBAAyB,OAAO,QAAQ,SAAS,QAC5E,IAAI,MAAM,OAAO,QAAQ,IAAI;OACxB,IAAI,OAAO,kBAAkB,aAAa;GAC/C,MAAM,QAAS,WAAW,UAAU,OAAO,SAAU,OAAO,cAAc;GAC1E,IAAI,MAAM,YAAY,MAAM,GAAG;EACjC;CACF;AACF;AAYA,eAAsB,QAAQ,MAAkC;CAC9D,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,MAAM,WAAW;EACrB,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,UAAU;EACV,WAAW,EAAE,WAAW,KAAK,UAAU;CACzC,CAAC;CACD,MAAM,QAAQ,YAAY,IAAI,WAAY,KAAK,SAAS;CAExD,MAAM,WAAW,MAAM,gBAAgB,KAAK,MAAM;EAAE,gBAAgB,CAAC,MAAM,OAAO;EAAG,MAAM;CAAc,CAAC;CAC1G,MAAM,UAAU,SAAS,MAAM;CAC/B,IAAI,CAAC,SAAS;EACZ,MAAM,YAAY,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,KAAK;EAC7D,MAAM,IAAI,MAAM,YAAY,MAAM,QAAQ,0BAA0B,WAAW;CACjF;CAEA,MAAM,OAAO,IAAI,QAAQ,SAAS;EAChC,UAAU,aAAa,GAAG;EAG1B,KAAK;GAAE,GAAG,cAAc,KAAK;GAAG,GAAG,kBAAkB,OAAO,OAAO,CAAC,CAAC,WAAW;EAAE;EAClF,aAAa;GACX,OAAO,MAAM,kBAAkB;GAC/B,gBAAgB,MAAM;GACtB,iBAAiB,MAAM;GACvB,UAAU,MAAM;EAClB;CACF,CAAC;CAMD,MAAM,iBAAiB;EACrB,KAAU,KAAK,CAAC,CAAC,cAAc,QAAQ,KAAK,GAAG,CAAC;CAClD;CACA,QAAQ,KAAK,UAAU,QAAQ;CAC/B,IAAI;EACF,MAAM,KAAK,MAAM;EACjB,MAAM,MAAM,MAAM,iBAAiB,KAAK;EACxC,MAAM,YAAY,MAAM,KAAK,WAAW,GAAG;EAE3C,MAAM,OAAO,OAAO,SAAiB;GACnC,MAAM,SAAyB,CAAC;IAAE,MAAM;IAAQ;GAAK,CAAC;GACtD,MAAM,KAAK,OAAO,WAAW,MAAM;GACnC,IAAI,MAAM,IAAI;EAChB;EAEA,IAAI,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,SAAS,GAAG;GAC/D,MAAM,KAAK,KAAK,OAAO;GACvB;EACF;EAEA,MAAM,KAAK,gBAAgB,EAAE,OAAO,KAAK,SAAS,QAAQ,MAAM,CAAC;EACjE,IAAI,MAAM,iBAAiB,MAAM,KAAK,IAAI,MAAM,GAAG,2BAA2B;EAC9E,IAAI;GACF,WAAW,MAAM,QAAQ,IAAI;IAC3B,MAAM,OAAO,KAAK,KAAK;IACvB,IAAI,SAAS,WAAW,SAAS,SAAS;IAC1C,IAAI,KAAK,SAAS,GAAG,MAAM,KAAK,IAAI;IACpC,IAAI,MAAM,IAAI;GAChB;EACF,UAAU;GACR,GAAG,MAAM;EACX;CACF,UAAU;EACR,QAAQ,eAAe,UAAU,QAAQ;EACzC,MAAM,KAAK,KAAK;CAClB;AACF"}

package/dist/{dist-BG425zHm.js → dist-D97dgR66.js}

@@ -438,6 +438,7 @@ const RESERVED_MCP_SERVER_NAME = "agentconnect";
 */
 const AgentSpec = object({
 	name: string(),
+	displayName: string().nullable().optional(),
 	description: string().optional(),
 	runtime: string().optional(),
 	model: string().nullable().optional(),
@@ -632,6 +633,7 @@ const RelayRosterEntry = object({
 const RelayRosterUpdate = object({ relays: array(RelayRosterEntry) });
 const RegisterOk = object({
 	routingEpoch: number().int(),
+	serverFeatures: array(string()).default([]),
 	assignments: array(RouteAssign),
 	agents: array(AgentSpec.extend({ agentId: string().uuid() })).default([]),
 	crons: array(CronUpsert),
@@ -649,6 +651,119 @@ const RegisterOk = object({
 });
 //#endregion
 //#region ../protocol/dist/frames/hook.js
+/** Decimal wire form for Prisma/GitHub bigint values. */
+const HookBigIntString = string().regex(/^(?:0|[1-9]\d*)$/);
+/** The highest formal-review event one hook permits. */
+const HookReviewPolicy = _enum([
+	"off",
+	"comment",
+	"request_changes",
+	"full"
+]);
+/** External run-reporting transport. `status` is reserved for the later R3. */
+const HookReportingMode = _enum([
+	"off",
+	"check",
+	"status"
+]);
+/** R2a only admits informational; `required` remains a fail-closed future mode. */
+const HookGateMode = _enum(["informational", "required"]);
+/**
+* Exact config + dispatch identity captured when the CP compiles a hook fire.
+*
+* The relay-facing frames expose these fields individually at top level so an
+* older CP/relay can omit them without making the whole fire undecodable. A
+* consumer MUST have every field before enabling review/reporting; absence is
+* not filled with a revision and therefore fails closed. Action-time RPCs use
+* this complete object so a partially rolled-out tuple cannot authorize an
+* effect.
+*/
+const HookConfigSnapshot = object({
+	configRevision: HookBigIntString,
+	dispatchRevision: HookBigIntString,
+	dispatchDaemonId: string().uuid(),
+	reviewPolicy: HookReviewPolicy,
+	reportingMode: HookReportingMode,
+	gateMode: HookGateMode
+});
+/** Optional top-level form used only on rolling-compatible delivery frames. */
+const OptionalHookConfigSnapshot = HookConfigSnapshot.partial();
+/**
+* Trusted, body-free GitHub subject/revision metadata. It is deliberately
+* separate from HookContext: HookContext contains attacker-authored prompt
+* excerpts, whereas this object is cut from a signature-verified payload and
+* fenced to the CP-compiled numeric repo/installation rule.
+*
+* `headSha` is absent for PR issue_comment deliveries because GitHub omits the
+* revision there; the daemon resolves it before `hook/start`. R2a informational
+* checks use `reportSha=headSha` once known.
+*/
+const GithubHookMetadata = object({
+	repoId: HookBigIntString,
+	repoFullName: string().min(1),
+	sourceInstallationId: HookBigIntString,
+	subjectKind: _enum(["issue", "pull_request"]),
+	pullNumber: number().int().positive().optional(),
+	headSha: string().min(1).optional(),
+	baseSha: string().min(1).optional(),
+	reportSha: string().min(1).optional(),
+	headRepoFullName: string().min(1).optional(),
+	mergeCommitSha: string().min(1).optional(),
+	isDraft: boolean().optional(),
+	baseChanged: boolean().optional()
+}).superRefine((value, ctx) => {
+	if (value.subjectKind === "pull_request" && value.pullNumber === void 0) ctx.addIssue({
+		code: "custom",
+		path: ["pullNumber"],
+		message: "pullNumber is required for a pull_request subject"
+	});
+	if (value.reportSha !== void 0 && value.headSha === void 0) ctx.addIssue({
+		code: "custom",
+		path: ["reportSha"],
+		message: "reportSha requires an authoritative headSha"
+	});
+	if (value.reportSha !== void 0 && value.headSha !== void 0 && value.reportSha !== value.headSha) ctx.addIssue({
+		code: "custom",
+		path: ["reportSha"],
+		message: "R2a reports only the authoritative pull head SHA"
+	});
+});
+const HookReviewEvent = _enum([
+	"COMMENT",
+	"REQUEST_CHANGES",
+	"APPROVE"
+]);
+const HookReviewVerdict = _enum([
+	"pass",
+	"fail",
+	"neutral"
+]);
+/** Short machine code only; raw GitHub/runtime exception text never crosses to reporting. */
+const HookReviewResultCode = string().min(1).max(100).regex(/^[a-z0-9_:-]+$/);
+/**
+* Body-free outcome of one reserved formal-review attempt.
+*
+* `not_submitted` is only legal after a deterministic no-effect failure and
+* lets the CP release the reservation. An uncertain POST remains `ambiguous`
+* until marker reconciliation proves whether GitHub created it.
+*/
+const HookReviewResult = discriminatedUnion("state", [
+	object({
+		state: literal("submitted"),
+		reviewId: string().min(1),
+		event: HookReviewEvent,
+		verdict: HookReviewVerdict,
+		commitId: string().min(1)
+	}),
+	object({
+		state: literal("not_submitted"),
+		code: HookReviewResultCode
+	}),
+	object({
+		state: literal("ambiguous"),
+		code: HookReviewResultCode
+	})
+]);
 /**
 * Hook (inbound-webhook trigger) frames — webhook-triggers-and-github-events.md.
 *
@@ -657,8 +772,8 @@ const RegisterOk = object({
 * (`rc/hook-assign`, frames/relay-cp.ts); the relay pool is the public ingress
 * that verifies + matches + dispatches the trigger to the target daemon as an
 * `rd/msg` `hook` member (frames/relay-daemon.ts). Event payloads never touch
-* the CP — the only hook frame on the daemon↔CP control WS is the completion
-* report below (pure metadata, mirroring `cron/report`).
+* the CP. R1/R2a add only metadata barriers and action-result control frames;
+* the model-visible body remains relay↔daemon.
 */
 /**
 * The trimmed event envelope a fire carries — bounded excerpts only; the full
@@ -685,21 +800,81 @@ const HookContext = object({
 	truncated: boolean().optional()
 });
 /**
-* `hook/report` (D→C EVT, fire-and-forget) — the dispatched turn ended; closes
+* `hook/report` (D→C REQ → generic `ack`) — the dispatched turn ended; closes
 * the `HookRun` row the relay's `rc/run-report` opened. Same discipline as
 * `cron/report`: scoped (the agent must be placed on the reporting daemon),
 * latest-wins, lost reports harvested by the HookRunReaper (late arrivals may
-* still overwrite `orphaned`). Keyed by `(hookId, deliveryKey)`.
+* still overwrite `orphaned`). The daemon retains a metadata-only outbox entry
+* until ACK. Keyed by `(hookId, deliveryKey)`.
 */
 const HookReport = object({
 	hookId: string().uuid(),
 	agentId: string().uuid(),
 	deliveryKey: string().min(1),
+	...OptionalHookConfigSnapshot.shape,
+	event: string().min(1).optional(),
+	github: GithubHookMetadata.optional(),
 	status: _enum(["success", "failed"]),
 	durationMs: number().int().nonnegative().optional(),
 	sessionId: string().optional(),
-	reason: string().optional()
+	reason: string().optional(),
+	reviewAttemptId: string().uuid().optional(),
+	reviewResult: HookReviewResult.optional()
+}).superRefine((report, ctx) => {
+	if (report.reviewAttemptId === void 0 !== (report.reviewResult === void 0)) ctx.addIssue({
+		code: "custom",
+		path: report.reviewAttemptId === void 0 ? ["reviewAttemptId"] : ["reviewResult"],
+		message: "reviewAttemptId and reviewResult must be reported together"
+	});
+});
+/**
+* `hook/start` (D→C REQ) — metadata barrier immediately before an accepted
+* GitHub hook enters the model prompt. A successful reply means the CP durably
+* attached the authoritative revision to the accepted HookRun and, for R2a,
+* advanced its informational projection to in_progress.
+*/
+const HookStart = object({
+	hookId: string().uuid(),
+	agentId: string().uuid(),
+	deliveryKey: string().min(1),
+	event: string().min(1).optional(),
+	github: GithubHookMetadata,
+	...HookConfigSnapshot.shape
+});
+const HookStartOk = object({ accepted: literal(true) });
+/** D→C action-time authorization for one formal GitHub review attempt. */
+const GithubReviewAuthorize = object({
+	hookId: string().uuid(),
+	deliveryKey: string().min(1),
+	attemptId: string().uuid(),
+	requestedEvent: HookReviewEvent,
+	requestedVerdict: HookReviewVerdict,
+	snapshot: HookConfigSnapshot
+});
+/** Trusted target echoed with a broker-only purpose token. Secret: never log. */
+const GithubReviewAuthorized = object({
+	attemptId: string().uuid(),
+	token: string().min(1),
+	ttlSec: number().int().positive(),
+	expiresAt: string().datetime(),
+	repoId: HookBigIntString,
+	repoFullName: string().min(1),
+	pullNumber: number().int().positive(),
+	expectedHeadSha: string().min(1),
+	expectedBaseSha: string().min(1)
 });
+/**
+* Immediate metadata-only convergence after the daemon's GitHub review POST.
+* Submitted metadata is also repeated on HookReport for lost-REP recovery.
+*/
+const GithubReviewResultReport = object({
+	hookId: string().uuid(),
+	deliveryKey: string().min(1),
+	attemptId: string().uuid(),
+	snapshot: HookConfigSnapshot,
+	result: HookReviewResult
+});
+const GithubReviewResultOk = object({ accepted: literal(true) });
 //#endregion
 //#region ../protocol/dist/frames/gitcred.js
 /**
@@ -1394,6 +1569,12 @@ const FRAME_SCHEMAS = {
 	"cron/report": CronReport,
 	"cron/run": CronRunNow,
 	"hook/report": HookReport,
+	"hook/start": HookStart,
+	"hook/start/ok": HookStartOk,
+	"github/review-authorize": GithubReviewAuthorize,
+	"github/review-authorized": GithubReviewAuthorized,
+	"github/review-result": GithubReviewResultReport,
+	"github/review-result/ok": GithubReviewResultOk,
 	"integration/upsert": IntegrationUpsert,
 	"integration/remove": IntegrationRemove,
 	"integration/channels": IntegrationChannels,
@@ -1489,6 +1670,12 @@ discriminatedUnion("type", [
 	frame("cron/report", FRAME_SCHEMAS["cron/report"]),
 	frame("cron/run", FRAME_SCHEMAS["cron/run"]),
 	frame("hook/report", FRAME_SCHEMAS["hook/report"]),
+	frame("hook/start", FRAME_SCHEMAS["hook/start"]),
+	frame("hook/start/ok", FRAME_SCHEMAS["hook/start/ok"]),
+	frame("github/review-authorize", FRAME_SCHEMAS["github/review-authorize"]),
+	frame("github/review-authorized", FRAME_SCHEMAS["github/review-authorized"]),
+	frame("github/review-result", FRAME_SCHEMAS["github/review-result"]),
+	frame("github/review-result/ok", FRAME_SCHEMAS["github/review-result/ok"]),
 	frame("integration/upsert", FRAME_SCHEMAS["integration/upsert"]),
 	frame("integration/remove", FRAME_SCHEMAS["integration/remove"]),
 	frame("integration/channels", FRAME_SCHEMAS["integration/channels"]),
@@ -1670,6 +1857,7 @@ const RcHookAssign = object({
 	kind: _enum(["webhook", "github"]),
 	agentId: string().uuid(),
 	daemonId: string().uuid(),
+	...OptionalHookConfigSnapshot.shape,
 	sessionMode: _enum([
 		"perDelivery",
 		"perThread",
@@ -1690,6 +1878,12 @@ const RcHookAssign = object({
 		appSlug: string().optional(),
 		installationIds: array(string())
 	}).optional()
+}).superRefine((rule, ctx) => {
+	if (rule.dispatchDaemonId !== void 0 && rule.dispatchDaemonId !== rule.daemonId) ctx.addIssue({
+		code: "custom",
+		path: ["dispatchDaemonId"],
+		message: "dispatchDaemonId must equal daemonId on a compiled rule"
+	});
 });
 const RcHookRemove = object({ hookId: string().uuid() });
 const RcRunReport = object({
@@ -1698,9 +1892,17 @@ const RcRunReport = object({
 	firedAt: string().datetime(),
 	agentId: string().uuid(),
 	daemonId: string().uuid().optional(),
-	event: string().optional(),
+	...OptionalHookConfigSnapshot.shape,
+	event: string().min(1).optional(),
+	github: GithubHookMetadata.optional(),
 	status: _enum(["accepted", "failed"]),
 	reason: string().optional()
+}).superRefine((report, ctx) => {
+	if (report.daemonId !== void 0 && report.dispatchDaemonId !== void 0 && report.daemonId !== report.dispatchDaemonId) ctx.addIssue({
+		code: "custom",
+		path: ["dispatchDaemonId"],
+		message: "dispatchDaemonId must equal daemonId on a delivery report"
+	});
 });
 const RcGithubInstallation = object({
 	installationId: string().min(1),
@@ -1937,6 +2139,9 @@ const RdMsg = discriminatedUnion("source", [
 		hookId: string().uuid(),
 		deliveryKey: string().min(1),
 		firedAt: string().datetime(),
+		...OptionalHookConfigSnapshot.shape,
+		event: string().min(1).optional(),
+		github: GithubHookMetadata.optional(),
 		context: HookContext.optional(),
 		target: CronTarget.optional()
 	})
@@ -2125,6 +2330,6 @@ function isFrame(type) {
 	return (frame) => frame.type === type;
 }
 //#endregion
-export { RELAY_DAEMON_WS_PATH as a, SHARED_CONFIG_ACTION_ID as c, encode as d, MAX_FRAME_BYTES as f, ZodIssueCode as g, RESERVED_MCP_SERVER_NAME as h, RELAY_DAEMON_SUBPROTOCOL as i, buildEnvelope as l, RelayRosterEntry as m, gitRepoLabel as n, buildRelayDaemonFrame as o, MEMORY_INDEX as p, normalizeGitUrl as r, decodeRelayDaemonFrame as s, isFrame as t, decodeEnvelope as u };
+export { ZodIssueCode as _, RELAY_DAEMON_WS_PATH as a, SHARED_CONFIG_ACTION_ID as c, encode as d, MAX_FRAME_BYTES as f, RESERVED_MCP_SERVER_NAME as g, RelayRosterEntry as h, RELAY_DAEMON_SUBPROTOCOL as i, buildEnvelope as l, HookReport as m, gitRepoLabel as n, buildRelayDaemonFrame as o, MEMORY_INDEX as p, normalizeGitUrl as r, decodeRelayDaemonFrame as s, isFrame as t, decodeEnvelope as u };
 
-//# sourceMappingURL=dist-BG425zHm.js.map
+//# sourceMappingURL=dist-D97dgR66.js.map