@algosuite/vo-mcp 0.2.0-beta.40 → 0.2.0-beta.42

package/dist/runner-cli.js

@@ -2416,7 +2416,7 @@ async function fetchInstallationToken({ req, required = false, readOnly = false,
     const json = await res.json();
     if (!json || !json.token) return fail("missing token");
     if (readOnly && json.scope !== "read") return fail("control plane did not confirm a read-only grant");
-    return { token: json.token, expiresAt: json.expires_at || null };
+    return { token: json.token, expiresAt: json.expires_at || null, ...typeof json.ci_readable === "boolean" ? { ciReadable: json.ci_readable } : {} };
   } catch (err) {
     if (required) throw err;
     return null;
@@ -2479,7 +2479,18 @@ async function resumeCodeTaskRequest(req, taskId, { automaticRateLimit = false,
     onUnauthorized();
     throw new Error("resume unauthorized (401)");
   }
-  if (!res.ok) throw new Error(`resume failed: HTTP ${res.status}`);
+  if (!res.ok) {
+    let code = null;
+    try {
+      const body = await res.json();
+      code = typeof body?.error === "string" ? body.error : null;
+    } catch {
+    }
+    const err = new Error(`resume failed: HTTP ${res.status}${code ? ` (${code})` : ""}`);
+    err.status = res.status;
+    err.code = code;
+    throw err;
+  }
   const json = await res.json();
   return json && json.task ? json.task : null;
 }
@@ -3921,6 +3932,12 @@ var init_agent_token_usage = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/claude-result-event.mjs
+function cappedRunLastMessage(evt, lastProgress) {
+  const summary = String(evt?.summary || "").trim();
+  const salvage = String(lastProgress || "").trim();
+  if (!salvage || !CAPPED_RESULT_SUBTYPES.includes(summary)) return null;
+  return salvage;
+}
 function buildResultEvent(evt) {
   const isError = Boolean(evt.is_error) || evt.subtype === "error_max_turns" || evt.subtype === "error_during_execution";
   return {
@@ -3933,10 +3950,12 @@ function buildResultEvent(evt) {
     modelUsage: extractModelUsage(evt)
   };
 }
+var CAPPED_RESULT_SUBTYPES;
 var init_claude_result_event = __esm({
   "../../scripts/virtual-office/code-runner/claude-result-event.mjs"() {
     "use strict";
     init_agent_token_usage();
+    CAPPED_RESULT_SUBTYPES = Object.freeze(["error_max_budget_usd", "error_max_turns"]);
   }
 });
 
@@ -4250,7 +4269,7 @@ function runAgentTask({
     } catch {
     }
     let buffer = "";
-    let result = { ok: false, costUsd: null, costBasis, summary: "", numTurns: null, tokenUsage: null, modelUsage: null, executionStarted: false, killed: false };
+    let result = { ok: false, costUsd: null, costBasis, summary: "", lastAgentMessage: null, numTurns: null, tokenUsage: null, modelUsage: null, executionStarted: false, killed: false };
     child.once("spawn", () => {
       result = { ...result, executionStarted: true };
       Promise.resolve(onSpawn()).catch(() => {
@@ -4285,6 +4304,9 @@ function runAgentTask({
         costUsd: evt.costUsd,
         costBasis: result.costBasis,
         summary,
+        // A budget/turn-capped run's honest last message, kept OUT of summary (see
+        // claude-result-event.cappedRunLastMessage) and surfaced in the PR body.
+        lastAgentMessage: cappedRunLastMessage(evt, lastProgress),
         numTurns: evt.numTurns,
         // MUST be listed explicitly. This assignment spreads the PREVIOUS
         // result and then names each field it carries forward, so anything
@@ -4423,6 +4445,7 @@ var init_claude_runner = __esm({
     init_orphan_agent_reaper();
     init_agent_token_usage();
     init_claude_stream_event();
+    init_claude_result_event();
     init_claude_auth_check();
     ClaudeRunner = class {
       get enforcesBudgetCap() {
@@ -4527,7 +4550,14 @@ var init_agent_key_store = __esm({
       "oai-compat": ["VO_CODE_RUNNER_OAI_API_KEY"],
       // Sovereign local inference (Ollama / LM Studio). The key is OPTIONAL — most
       // local servers need none — and exists for locally secured endpoints only.
-      local: ["VO_CODE_RUNNER_LOCAL_API_KEY"]
+      local: ["VO_CODE_RUNNER_LOCAL_API_KEY"],
+      // AlgoHQ cloud consensus (ADR-002 moat plane) entitlement token. Not a model
+      // key: it authorises the runner's `vo_consensus_judgment` / `vo_verify_answer`
+      // tools against the moat. On an npm-installed runner the local consensus
+      // engine is never present (it is a workspace-only package), so WITHOUT this
+      // token every consensus call answers `unimplemented /
+      // consensus-engine-package-not-installed` (2026-08-16 finding, task fbd8659b).
+      moat: ["VO_ENTITLEMENT_TOKEN"]
     };
     PROVIDER_ALIAS = {
       claude: "anthropic",
@@ -4543,7 +4573,10 @@ var init_agent_key_store = __esm({
       "oai-compat": "oai-compat",
       local: "local",
       ollama: "local",
-      lmstudio: "local"
+      lmstudio: "local",
+      moat: "moat",
+      entitlement: "moat",
+      consensus: "moat"
     };
     _loadTried2 = false;
   }
@@ -9051,6 +9084,9 @@ function ciFixOccurrenceKey({ repo, prNumber, headSha, repairAttempt }) {
 function coordinationRetryDue(entry, nowMs) {
   return !entry.nextRetryAt || nowMs >= entry.nextRetryAt;
 }
+function isTerminalResumeRefusal(error) {
+  return typeof error?.code === "string" && TERMINAL_RESUME_REFUSALS.includes(error.code);
+}
 async function scheduleCoordinationRetry({
   entry,
   kind,
@@ -9061,6 +9097,14 @@ async function scheduleCoordinationRetry({
   error,
   log: log2
 }) {
+  if (kind === "resume" && isTerminalResumeRefusal(error)) {
+    entry.needsContinuation = false;
+    entry.continuationExhausted = true;
+    entry.continuationRefusal = error.code;
+    entry.continuationRefusedAt = now();
+    log2(`watch: pr #${prNumber} automatic continuation refused by the plane (${error.code}); no retry \u2014 operator may resume explicitly with a larger cap`);
+    return;
+  }
   const errorsKey = kind === "resume" ? "resumeErrors" : "enqueueErrors";
   const attemptsKey = kind === "resume" ? "resumeAttempts" : "fixAttempts";
   entry[errorsKey] = (entry[errorsKey] || 0) + 1;
@@ -9080,12 +9124,23 @@ async function scheduleCoordinationRetry({
   }
   log2(`watch: pr #${prNumber} ${kind} coordination failed ${entry[errorsKey]}x; retry in ${Math.round(delay2 / 1e3)}s: ${boundedErrorMessage(error)}`);
 }
-var MAX_BACKOFF_MS;
+var MAX_BACKOFF_MS, TERMINAL_RESUME_REFUSALS;
 var init_watcher_coordination = __esm({
   "../../scripts/virtual-office/code-runner/watcher-coordination.mjs"() {
     "use strict";
     init_error_message();
     MAX_BACKOFF_MS = 60 * 60 * 1e3;
+    TERMINAL_RESUME_REFUSALS = Object.freeze([
+      "automatic_continuation_budget_too_small",
+      "automatic_continuation_budget_required",
+      "continuation_spend_ceiling_reached",
+      "continuation_budget_exhausted",
+      "continuation_spend_unmeasured",
+      "continuation_lineage_incomplete",
+      "continuation_lineage_invalid",
+      "cancelled_not_automatically_resumable",
+      "not_resumable"
+    ]);
   }
 });
 
@@ -9201,7 +9256,7 @@ async function adoptPrOpenedTasks(tasks, {
       if (operators.size > 0 && !operators.has(task.operator_id)) continue;
       const key = watcherKey(state, task.repo, task.pr_number);
       if (state[key]) continue;
-      const partial = String(task.result || "").startsWith(PARTIAL_PR_CONTINUATION_MARKER);
+      const partial = String(task.result || "").includes(PARTIAL_PR_CONTINUATION_MARKER);
       const repairChain = task.repair_chain ?? {
         root_pr_number: task.repair_pr_number ?? task.pr_number,
         attempt: task.repair_pr_number ? 1 : 0,
@@ -9240,8 +9295,10 @@ var init_watcher_adoption = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/watcher-github-token.mjs
-function makeWatcherTokenProvider(client, { required = true, allowAmbient = false, now = () => Date.now() } = {}) {
+function makeWatcherTokenProvider(client, { required = true, allowAmbient = false, now = () => Date.now(), log: log2 = () => {
+} } = {}) {
   const cache = /* @__PURE__ */ new Map();
+  let ciUnreadableLoggedAt = null;
   return async (repo) => {
     const key = String(repo).toLowerCase();
     const prior = cache.get(key);
@@ -9251,6 +9308,10 @@ function makeWatcherTokenProvider(client, { required = true, allowAmbient = fals
       if (allowAmbient) return null;
       throw new Error(`GitHub App read token unavailable for ${repo}`);
     }
+    if (result.ciReadable === false && (ciUnreadableLoggedAt === null || now() - ciUnreadableLoggedAt > 6 * 60 * 60 * 1e3)) {
+      ciUnreadableLoggedAt = now();
+      log2(`watch: the plane minted a read token for ${repo} WITHOUT CI read (ci_readable=false \u2014 the GitHub App installation has not accepted checks:read/statuses:read); PR CI stays unreadable until the operator accepts the App permission update`);
+    }
     cache.set(key, { token: result.token, at: now() });
     return result.token;
   };
@@ -9298,25 +9359,47 @@ var init_ci_fix_prompt = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/pr-watcher-github.mjs
-async function ghViewPr(prNumber, repo, { githubToken } = {}) {
-  const stdout = await runProcess2("gh", [
+function isCiUnreadableError(err) {
+  const text = `${err?.message || ""}
+${err?.stderr || ""}`;
+  return /Resource not accessible by integration/i.test(text) && /statusCheckRollup/i.test(text);
+}
+function noteCiUnreadable(log2) {
+  const now = Date.now();
+  if (now - lastDiagnosticAt < DIAGNOSTIC_INTERVAL_MS) return;
+  lastDiagnosticAt = now;
+  log2("watch: CI status is UNREADABLE with the GitHub App read token (the installation has not granted checks:read/statuses:read \u2014 accept the App permission update on the installation). Auto-fix and merge stay dormant; untrack/resume keep working on state alone.");
+}
+async function ghViewPr(prNumber, repo, { githubToken, log: log2 = (m) => console.error(`[vo-runner] ${m}`), run = runProcess2 } = {}) {
+  const env2 = githubToken ? { ...process.env, GH_TOKEN: githubToken } : process.env;
+  const view = async (fields) => JSON.parse(await run("gh", [
     "pr",
     "view",
     String(prNumber),
     "-R",
     repo,
     "--json",
-    "state,statusCheckRollup,headRefName,headRefOid,url,isDraft,mergeStateStatus"
-  ], {
-    timeout: 3e4,
-    env: githubToken ? { ...process.env, GH_TOKEN: githubToken } : process.env
-  });
-  return JSON.parse(stdout || "{}");
+    fields
+  ], { timeout: 3e4, env: env2 }) || "{}");
+  try {
+    return await view(VIEW_FIELDS_WITH_CI);
+  } catch (err) {
+    if (!isCiUnreadableError(err)) throw err;
+    noteCiUnreadable(log2);
+    const withoutCi = await view(VIEW_FIELDS_WITHOUT_CI);
+    return { ...withoutCi, statusCheckRollup: null, ciUnreadable: true, ciUnreadableReason: CI_UNREADABLE_REASON };
+  }
 }
+var VIEW_FIELDS_WITH_CI, VIEW_FIELDS_WITHOUT_CI, CI_UNREADABLE_REASON, DIAGNOSTIC_INTERVAL_MS, lastDiagnosticAt;
 var init_pr_watcher_github = __esm({
   "../../scripts/virtual-office/code-runner/pr-watcher-github.mjs"() {
     "use strict";
     init_process_runner2();
+    VIEW_FIELDS_WITH_CI = "state,statusCheckRollup,headRefName,headRefOid,url,isDraft,mergeStateStatus";
+    VIEW_FIELDS_WITHOUT_CI = "state,headRefName,headRefOid,url,isDraft,mergeStateStatus";
+    CI_UNREADABLE_REASON = "app_token_missing_checks_read";
+    DIAGNOSTIC_INTERVAL_MS = 30 * 60 * 1e3;
+    lastDiagnosticAt = 0;
   }
 });
 
@@ -9377,7 +9460,7 @@ function parsePrCiStatus(view) {
       else if (st !== "SUCCESS") pending = true;
     }
   }
-  const ci = failedChecks.length > 0 ? "failing" : pending ? "pending" : "passing";
+  const ci = view?.ciUnreadable ? "unknown" : failedChecks.length > 0 ? "failing" : pending ? "pending" : "passing";
   return {
     state,
     ci,
@@ -9576,7 +9659,7 @@ async function runWatchCycleUnlocked({
         try {
           if (typeof reportBlocker === "function") await reportBlocker({
             taskId: entry.taskId,
-            message: entry.continuationExhausted ? `PR #${prNumber} remains a partial draft after its bounded automatic continuation; watcher is still monitoring and operator review is required before more spend.` : `PR #${prNumber} remains failing after ${entry.fixAttempts || 0} bounded repair attempt(s); watcher is still monitoring and operator review is required.`
+            message: entry.continuationExhausted ? `PR #${prNumber} remains a partial draft after its bounded automatic continuation${entry.continuationRefusal ? ` (plane refused: ${entry.continuationRefusal})` : ""}; watcher is still monitoring and operator review is required before more spend.` : `PR #${prNumber} remains failing after ${entry.fixAttempts || 0} bounded repair attempt(s); watcher is still monitoring and operator review is required.`
           });
           entry.escalatedAt = now();
           escalated += 1;
@@ -9611,9 +9694,10 @@ function makeWatchRunner({
 }) {
   const tokenForRepo = makeWatcherTokenProvider(client, {
     required: !allowAmbientGithub,
-    allowAmbient: allowAmbientGithub
+    allowAmbient: allowAmbientGithub,
+    log: log2
   });
-  const watchView = viewPr === ghViewPr ? async (prNumber, repo) => ghViewPr(prNumber, repo, { githubToken: await tokenForRepo(repo) }) : viewPr;
+  const watchView = viewPr === ghViewPr ? async (prNumber, repo) => ghViewPr(prNumber, repo, { githubToken: await tokenForRepo(repo), log: log2 }) : viewPr;
   return async () => {
     const openTasks = typeof client.listPrOpenedTasks === "function" ? await client.listPrOpenedTasks() : [];
     const adopted = await adoptPrOpenedTasks(openTasks, {
@@ -11526,6 +11610,9 @@ function buildPrBody(task, run, files, { armAutoMerge = false } = {}) {
     "",
     redactSecrets(String(run.summary || "")).slice(0, 2e3),
     "",
+    // A budget/turn-capped run ends with no assistant text (summary = the bare
+    // subtype); its LAST message is the honest report the operator needs.
+    ...run.lastAgentMessage ? ["### Last agent message before the cap", "", redactSecrets(String(run.lastAgentMessage)).slice(0, 2e3), ""] : [],
     "---",
     armAutoMerge ? "_Opened by the AlgoHQ code-runner daemon. After CI passes, the watcher must obtain a durable consensus receipt and merge the exact verified SHA._" : "_Opened by the AlgoHQ code-runner daemon. This PR awaits the verify-before-act gate / operator review \u2014 it is NOT auto-merged._"
   ].filter((l) => l !== "").join("\n");
@@ -13101,7 +13188,7 @@ function reportsBlocker(summary) {
   return /\btask remains\s+(?:\*\*)?BLOCKED\b/i.test(text) || /(?:^|\n)\s*(?:#{1,6}\s*)?(?:\*\*)?(?:host-recovery\s+)?(?:result|outcome|status)\s*:\s*(?:\*\*)?BLOCKED\b/im.test(text);
 }
 function isMaxTurnExhaustion(run = {}, maxTurns) {
-  const summary = String(run.summary || "").trim().toLowerCase();
+  const summary = String(run.summary || "").trim().toLowerCase().split("\n")[0].trim();
   if (summary === "error_max_turns" || summary === "inconclusive_max_turns") return true;
   return Number.isInteger(maxTurns) && maxTurns > 0 && Number.isInteger(run.numTurns) && run.numTurns > maxTurns;
 }