@algosuite/vo-mcp 0.2.0-beta.37 → 0.2.0-beta.39

package/dist/agent-auth-probe-cli.mjs

@@ -289,6 +289,8 @@ var DEFAULT_PERMISSION_MODE = "acceptEdits";
 var VO_SESSION_STATE_TOOL = "mcp__vo-mcp__vo_report_session_state";
 var VO_HEADLESS_PNPM_TOOL = "Bash(pnpm *)";
 var VO_HEADLESS_PNPM_FROM_DIR_TOOL = "Bash(pnpm --dir *)";
+var VO_RESEARCH_TOOLS = ["WebFetch", "WebSearch"];
+var VO_WORKFLOW_TOOLS = ["Workflow"];
 var SAFE_PERMISSION_MODES = /* @__PURE__ */ new Set(["acceptEdits", "plan", "default", "dontAsk", "delegate"]);
 function normalizeClaudePermissionMode(value) {
   const normalized = String(value ?? "").trim() || DEFAULT_PERMISSION_MODE;
@@ -297,9 +299,14 @@ function normalizeClaudePermissionMode(value) {
   }
   return normalized;
 }
-function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, model, effort, maxBudgetUsd, env = process.env } = {}) {
+function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, model, effort, maxBudgetUsd, researchHarness = false, env = process.env } = {}) {
   const effectivePermissionMode = normalizeClaudePermissionMode(permissionMode);
-  const allowedTools = effectivePermissionMode === DEFAULT_PERMISSION_MODE ? `${VO_SESSION_STATE_TOOL},${VO_HEADLESS_PNPM_TOOL},${VO_HEADLESS_PNPM_FROM_DIR_TOOL}` : VO_SESSION_STATE_TOOL;
+  const noWeb = String(env?.VO_CODE_RUNNER_NO_WEB ?? "").trim() === "1";
+  const research = noWeb ? [] : VO_RESEARCH_TOOLS;
+  const noWorkflow = noWeb || String(env?.VO_CODE_RUNNER_NO_WORKFLOW ?? "").trim() === "1";
+  const workflow = researchHarness === true && !noWorkflow ? VO_WORKFLOW_TOOLS : [];
+  const baseTools = effectivePermissionMode === DEFAULT_PERMISSION_MODE ? [VO_SESSION_STATE_TOOL, VO_HEADLESS_PNPM_TOOL, VO_HEADLESS_PNPM_FROM_DIR_TOOL] : [VO_SESSION_STATE_TOOL];
+  const allowedTools = [...baseTools, ...research, ...workflow].join(",");
   const args = [
     "-p",
     "--output-format",
@@ -338,6 +345,7 @@ import path2 from "node:path";
 // ../../scripts/virtual-office/code-runner/agent-token-usage.mjs
 var MAX_TOKEN_COUNT = 1e9;
 var MAX_COST_USD = 1e4;
+var NO_AGENT_SPAWNED_ECONOMICS = Object.freeze({ cost_usd: 0, cost_basis: "no_agent_spawned" });
 function count(value) {
   if (typeof value !== "number" || !Number.isFinite(value) || value < 0) return null;
   return Math.min(MAX_TOKEN_COUNT, Math.round(value));
@@ -612,8 +620,8 @@ var ClaudeRunner = class {
   get binary() {
     return "claude";
   }
-  buildArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd } = {}) {
-    return buildClaudeArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd });
+  buildArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd, researchHarness } = {}) {
+    return buildClaudeArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd, researchHarness });
   }
   parseEvent(line) {
     return parseStreamEvent(line);

package/dist/cli.js

@@ -3009,6 +3009,8 @@ async function handleVerifyAnswer(deps, rawInput, signal) {
     engine_version: engineResult.engine_version,
     degraded: engineResult.degraded,
     ...engineResult.quorum_failed === true ? { quorum_failed: true } : {},
+    // The verification receipt (moat decision_id) — the thing an agent pastes as `receipt id: <uuid>`.
+    ...engineResult.receipt_id ? { receipt_id: engineResult.receipt_id } : {},
     gate_type: gateType,
     ...kbResult.error !== null ? { kb_unavailable: true } : {},
     ...kbTruncated > 0 ? { kb_rules_truncated: kbTruncated } : {}
@@ -3276,6 +3278,10 @@ async function handleConsensusJudgment(deps, rawInput, signal) {
     engine_version: engineResult.engine_version,
     degraded: engineResult.degraded,
     ...engineResult.quorum_failed === true ? { quorum_failed: true } : {},
+    // The verification receipt (moat decision_id) — the thing an agent pastes as `receipt id: <uuid>`.
+    // NOTE: a content-hash cache hit replays the ORIGINAL call's receipt_id (same claim, same verdict, no new spend) —
+    // a receipt asserts the stage ran for this claim, not one-receipt-per-call.
+    ...engineResult.receipt_id ? { receipt_id: engineResult.receipt_id } : {},
     gate_type: gateType,
     // ─── Consensus-engine feature outputs (additive; 2026-06-13) ─────────────
     // Feature 2 (calibrated-confidence) — ON by default; the engine attaches
@@ -6758,6 +6764,7 @@ init_common();
 var UPSERT_TOOL_NAME = "vo_private_knowledge_upsert";
 var CONTEXT_TOOL_NAME = "vo_private_knowledge_context";
 var INVALIDATE_TOOL_NAME = "vo_private_knowledge_invalidate";
+var STALE_TOOL_NAME = "vo_private_knowledge_stale";
 var KNOWLEDGE_CLASSES = ["memory", "skill", "doctrine", "hook", "command"];
 var PRECISION_CHAR_BUDGET = 12e3;
 var upsertInputSchema = {
@@ -6790,9 +6797,26 @@ var invalidateInputSchema = {
   required: ["knowledge_class", "source_path"],
   additionalProperties: false
 };
+var staleInputSchema = {
+  type: "object",
+  properties: {
+    days: { type: "number", minimum: 1, maximum: 3650, description: "Window in days (default 90): entries at least this old that were never recalled into an agent context, or not within the window." },
+    limit: { type: "number", minimum: 1, maximum: 500 }
+  },
+  additionalProperties: false
+};
+var staleDescription = `The FORGETTING REPORT: lists the authenticated operator\u2019s live private-knowledge entries that are at least N days old and have never been recalled into an agent context (or not within N days). Metadata only. SURFACES ONLY \u2014 never auto-invalidates or auto-merges: two memories that disagree may both have been right in different contexts, so you decide. Act on a candidate deliberately with ${INVALIDATE_TOOL_NAME}; recall counts come from ${CONTEXT_TOOL_NAME} reads that actually placed the entry into returned context.`;
 var upsertDescription = "Uploads or refreshes the authenticated operator\u2019s private cloud knowledge. Works for Claude, Codex, Cursor, and cowork clients via the same vo-mcp login credential. Returns metadata only, not raw stored content. PRECISION DISCIPLINE: keep each entry tight and focused (~1-3 pages) with a descriptive retrieval-friendly title \u2014 retrieval surfaces whole entries, so small dense entries beat bulk dumps. Split large corpora into focused entries, then run a retrieval self-test via vo_private_knowledge_context before relying on the knowledge.";
 var contextDescription = "Retrieves prompt-ready private knowledge context for the authenticated operator. Returns snippets/context only; no raw corpus download. Also the retrieval self-test surface: after upserting critical knowledge, query for it here and confirm the entry surfaces before trusting it in downstream work.";
 var invalidateDescription = `Soft-deletes one private-knowledge entry for the authenticated operator: closes the live entry\u2019s validity window (bi-temporal) so it stops surfacing in retrieval. Never destroys data \u2014 invalidated versions remain queryable server-side via include_invalidated. Identify the entry by the same { knowledge_class, source_path } used at upsert; a not_found response means no live entry matches. After invalidating, self-test via ${CONTEXT_TOOL_NAME} to confirm the entry no longer surfaces.`;
+function isStaleInput(value) {
+  if (value === void 0 || value === null) return true;
+  if (typeof value !== "object") return false;
+  const input = value;
+  if (input["days"] !== void 0 && typeof input["days"] !== "number") return false;
+  if (input["limit"] !== void 0 && typeof input["limit"] !== "number") return false;
+  return true;
+}
 function isKnowledgeClass(value) {
   return typeof value === "string" && KNOWLEDGE_CLASSES.includes(value);
 }
@@ -6872,6 +6896,30 @@ async function handlePrivateKnowledgeInvalidate(_deps, rawInput, _signal, fetchF
   const payload = await callPrivateKnowledge("/api/v1/knowledge/private/invalidate", rawInput, fetchFn);
   return jsonContent({ tool: INVALIDATE_TOOL_NAME, schema_version: 1, payload });
 }
+async function handlePrivateKnowledgeStale(_deps, rawInput, _signal, fetchFn = globalThis.fetch) {
+  if (!isStaleInput(rawInput)) {
+    throw invalidParams(STALE_TOOL_NAME, "expected { optional days, optional limit }.");
+  }
+  const auth = await getCloudAuth(fetchFn);
+  if (!auth.ok) return jsonContent({ tool: STALE_TOOL_NAME, schema_version: 1, payload: { ok: false, reason: auth.reason } });
+  const params = new URLSearchParams();
+  if (rawInput?.days !== void 0) params.set("days", String(Math.trunc(rawInput.days)));
+  if (rawInput?.limit !== void 0) params.set("limit", String(Math.trunc(rawInput.limit)));
+  const qs = params.toString();
+  const response = await fetchFn(`${auth.controlPlaneUrl}/api/v1/knowledge/private/stale${qs ? `?${qs}` : ""}`, {
+    method: "GET",
+    headers: { authorization: `Bearer ${auth.token}` }
+  });
+  const text = await response.text();
+  let parsed;
+  try {
+    parsed = text ? JSON.parse(text) : null;
+  } catch {
+    parsed = null;
+  }
+  const payload = response.status < 200 || response.status >= 300 ? { ok: false, status: response.status, response: parsed ?? text } : parsed;
+  return jsonContent({ tool: STALE_TOOL_NAME, schema_version: 1, payload });
+}
 async function handlePrivateKnowledgeContext(_deps, rawInput, _signal, fetchFn = globalThis.fetch) {
   if (!isContextInput(rawInput)) {
     throw invalidParams(CONTEXT_TOOL_NAME, "expected { query, optional limit, optional knowledge_class }.");
@@ -7416,6 +7464,14 @@ function buildToolRegistry() {
       },
       handler: handlePrivateKnowledgeInvalidate
     },
+    [STALE_TOOL_NAME]: {
+      definition: {
+        name: STALE_TOOL_NAME,
+        description: staleDescription,
+        inputSchema: staleInputSchema
+      },
+      handler: handlePrivateKnowledgeStale
+    },
     [POST_TOOL_NAME]: {
       definition: {
         name: POST_TOOL_NAME,
@@ -8272,8 +8328,10 @@ function createMoatConsensusClient(opts) {
         }
         const agreeing = normalizeAgreeing(parsed.models_agreeing);
         const reasoning = agreeing !== void 0 ? `${parsed.reason} (${agreeing} models agreeing)` : parsed.reason;
+        const receiptId = typeof parsed.decision_id === "string" && parsed.decision_id.trim().length > 0 ? parsed.decision_id.trim().slice(0, 120) : null;
         return {
           ok: true,
+          ...receiptId ? { receipt_id: receiptId } : {},
           synthesized_verdict: {
             verdict: parsed.approved ? "pass" : "fail",
             confidence: normalizeConfidence(parsed.confidence),