@algosuite/vo-mcp 0.2.0-beta.61 → 0.2.0-beta.62

package/dist/runner-cli.js

@@ -8937,15 +8937,25 @@ function parseFrontmatterNameDescription(raw) {
   }
   return name && description ? { name, description } : null;
 }
+function isRepoCheckout(dir) {
+  try {
+    if (!statSync4(join10(dir, ".claude", "skills")).isDirectory()) return false;
+  } catch {
+    return false;
+  }
+  try {
+    statSync4(join10(dir, ".git"));
+    return true;
+  } catch {
+    return false;
+  }
+}
 function resolveDefaultRepoRoot() {
   const starts = [dirname7(fileURLToPath4(import.meta.url)), process.cwd()];
   for (const start of starts) {
     let dir = start;
     for (let i = 0; i < 8; i += 1) {
-      try {
-        if (statSync4(join10(dir, ".claude", "skills")).isDirectory()) return dir;
-      } catch {
-      }
+      if (isRepoCheckout(dir)) return dir;
       const parent = dirname7(dir);
       if (parent === dir) break;
       dir = parent;
@@ -9306,11 +9316,12 @@ function methodologyLedgerFields(methodology) {
   return { ...shape ? { methodology_shape: shape } : {}, ...stakes ? { governed_stakes: stakes } : {} };
 }
 async function composeCodeTaskPrompt(client, task, { log: log2 = () => {
-}, allowMissingKnowledgeContext = false, attachmentManifestMarkdown = "", onMethodology } = {}) {
+}, allowMissingKnowledgeContext = false, attachmentManifestMarkdown = "", onMethodology, repoRoot: repoRoot2 } = {}) {
   const taskId = task?.code_task_id;
   if (!taskId) {
     return composeDispatchPrompt(withComposedMethodology(withAttachmentManifest(task?.prompt, attachmentManifestMarkdown), task, log2, taskId, onMethodology), {
       repo: task?.repo,
+      repoRoot: repoRoot2,
       knowledgeContextMarkdown: handleMissingKnowledgeContext(taskId, "missing code_task_id on the claimed task", {
         allowMissingKnowledgeContext,
         log: log2
@@ -9320,6 +9331,7 @@ async function composeCodeTaskPrompt(client, task, { log: log2 = () => {
   if (typeof client?.getTaskKnowledgeContext !== "function") {
     return composeDispatchPrompt(withComposedMethodology(withAttachmentManifest(task?.prompt, attachmentManifestMarkdown), task, log2, taskId, onMethodology), {
       repo: task?.repo,
+      repoRoot: repoRoot2,
       knowledgeContextMarkdown: handleMissingKnowledgeContext(taskId, "control-plane client cannot fetch knowledge context", {
         allowMissingKnowledgeContext,
         log: log2
@@ -9349,6 +9361,7 @@ async function composeCodeTaskPrompt(client, task, { log: log2 = () => {
 ${operatorInstructions}` : task?.prompt;
   return composeDispatchPrompt(withComposedMethodology(withAttachmentManifest(prompt, attachmentManifestMarkdown), task, log2, taskId, onMethodology), {
     repo: task?.repo,
+    repoRoot: repoRoot2,
     knowledgeContextMarkdown
   });
 }
@@ -10608,6 +10621,167 @@ var init_local_model_remote_config = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/prepared-job-divergence.mjs
+function context7LocalOnlyEnvPresent(env2 = {}) {
+  return CONTEXT7_LOCAL_ONLY_ENV_KEYS.some((k) => String(env2?.[k] ?? "").trim().length > 0);
+}
+function argvDivergesOnlyOnModel(runnerArgv, planeArgv, { runnerModel, planeModel } = {}) {
+  if (!Array.isArray(runnerArgv) || !Array.isArray(planeArgv)) return false;
+  if (runnerArgv.length !== planeArgv.length) return false;
+  if (runnerModel === void 0 || runnerModel === null) return false;
+  if (planeModel === void 0 || planeModel === null) return false;
+  let modelValueDiffs = 0;
+  for (let i = 0; i < runnerArgv.length; i += 1) {
+    if (runnerArgv[i] === planeArgv[i]) continue;
+    if (i === 0) return false;
+    if (runnerArgv[i - 1] !== MODEL_FLAG || planeArgv[i - 1] !== MODEL_FLAG) return false;
+    if (runnerArgv[i] !== String(runnerModel) || planeArgv[i] !== String(planeModel)) return false;
+    modelValueDiffs += 1;
+  }
+  return modelValueDiffs > 0;
+}
+function splitPromptSections(prompt) {
+  const text = String(prompt ?? "");
+  const hits = [];
+  let cursor = 0;
+  for (const [name, marker] of PROMPT_SECTION_MARKERS) {
+    const at = text.indexOf(marker, cursor);
+    if (at === -1) continue;
+    hits.push({ name, at });
+    cursor = at + marker.length;
+  }
+  const sections = { preamble: text.slice(0, hits.length ? hits[0].at : text.length) };
+  for (let i = 0; i < hits.length; i += 1) {
+    sections[hits[i].name] = text.slice(hits[i].at, i + 1 < hits.length ? hits[i + 1].at : text.length);
+  }
+  return sections;
+}
+function promptSectionDivergence(runnerPrompt, planePrompt) {
+  const a = splitPromptSections(runnerPrompt);
+  const b = splitPromptSections(planePrompt);
+  const names = PROMPT_SECTION_ORDER.filter((n) => n in a || n in b);
+  if (names.some((n) => !(n in a) || !(n in b))) return null;
+  return names.filter((n) => a[n] !== b[n]);
+}
+function promptConfinedTo(sections, section) {
+  return Array.isArray(sections) && sections.length === 1 && sections[0] === section;
+}
+function context7Config(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(String(raw));
+  } catch {
+    return null;
+  }
+  const server = parsed?.mcpServers?.context7;
+  return server && typeof server === "object" && !Array.isArray(server) ? parsed : null;
+}
+function mcpConfigDiffersOnlyOnHostLocalContext7(runnerRaw, planeRaw) {
+  const runner = context7Config(runnerRaw);
+  const plane = context7Config(planeRaw);
+  if (!runner || !plane) return false;
+  if (plane.mcpServers.context7.headers !== void 0) return false;
+  const strip = (cfg) => {
+    const copy = JSON.parse(JSON.stringify(cfg));
+    for (const field of CONTEXT7_HOST_LOCAL_FIELDS) delete copy.mcpServers.context7[field];
+    return JSON.stringify(copy);
+  };
+  return strip(runner) === strip(plane);
+}
+function argvDivergesOnlyOnLocalMcpConfig(runnerArgv, planeArgv) {
+  if (!Array.isArray(runnerArgv) || !Array.isArray(planeArgv)) return false;
+  if (runnerArgv.length !== planeArgv.length) return false;
+  let diffs = 0;
+  for (let i = 0; i < runnerArgv.length; i += 1) {
+    if (runnerArgv[i] === planeArgv[i]) continue;
+    if (i === 0) return false;
+    if (runnerArgv[i - 1] !== MCP_CONFIG_FLAG || planeArgv[i - 1] !== MCP_CONFIG_FLAG) return false;
+    if (!mcpConfigDiffersOnlyOnHostLocalContext7(runnerArgv[i], planeArgv[i])) return false;
+    diffs += 1;
+  }
+  return diffs > 0;
+}
+function safeEndpoint(url) {
+  try {
+    const u = new URL(String(url));
+    return `${u.protocol}//${u.host}${u.pathname}`;
+  } catch {
+    return REDACTED;
+  }
+}
+function redactArgvForRecord(argv) {
+  if (!Array.isArray(argv)) return argv ?? null;
+  return argv.map((value, i) => {
+    if (i === 0 || argv[i - 1] !== MCP_CONFIG_FLAG) return value;
+    let parsed;
+    try {
+      parsed = JSON.parse(String(value));
+    } catch {
+      return REDACTED;
+    }
+    for (const server of Object.values(parsed?.mcpServers ?? {})) {
+      if (!server || typeof server !== "object") continue;
+      if (typeof server.url === "string") server.url = safeEndpoint(server.url);
+      if (server.headers && typeof server.headers === "object") {
+        for (const key of Object.keys(server.headers)) server.headers[key] = REDACTED;
+      }
+    }
+    return JSON.stringify(parsed);
+  });
+}
+function classifyDivergence(field, ctx = {}) {
+  const known = (reason) => ({ class: "known_remainder", reason });
+  if (Array.isArray(ctx.envDropped) && ctx.envDropped.length > 0) {
+    return known(`env_value_too_long:${ctx.envDropped.join("+")}`);
+  }
+  if ((field === "model" || field === "tier") && ctx.planeModelRegistryUnavailable) {
+    return known("no_plane_model_registry");
+  }
+  if (field === "argv" && ctx.planeModelRegistryUnavailable && ctx.argvDivergesOnlyOnModel) {
+    return known("downstream_of_model_remainder");
+  }
+  if (field === "argv" && ctx.context7LocalOnlyEnvPresent && ctx.argvDivergesOnlyOnLocalMcpConfig) {
+    return known("host_local_context7_mcp_config");
+  }
+  if (field === "dispatch_mode" && ctx.taskDispatchModeAbsent) return known("plane_dispatch_mode_default");
+  if (ctx.dispatchModeDiverged && DISPATCH_MODE_DEPENDENT.has(field)) {
+    return known("downstream_of_dispatch_mode");
+  }
+  if (field === "prompt" && ctx.attachmentManifestPresent && promptConfinedTo(ctx.promptSectionsDiverged, "task")) {
+    return known("attachment_manifest_not_sent");
+  }
+  if (field === "prompt" && ctx.planeSkillCatalogUnavailable && (ctx.promptSectionsDiverged === null || promptConfinedTo(ctx.promptSectionsDiverged, "skill_catalog"))) {
+    return known("skill_catalog_unavailable");
+  }
+  return { class: "unexplained", reason: null };
+}
+var DISPATCH_MODE_DEPENDENT, MODEL_FLAG, MCP_CONFIG_FLAG, CONTEXT7_HOST_LOCAL_FIELDS, CONTEXT7_LOCAL_ONLY_ENV_KEYS, PROMPT_SECTION_MARKERS, PROMPT_SECTION_ORDER, REDACTED;
+var init_prepared_job_divergence = __esm({
+  "../../scripts/virtual-office/code-runner/prepared-job-divergence.mjs"() {
+    "use strict";
+    DISPATCH_MODE_DEPENDENT = /* @__PURE__ */ new Set([
+      "prompt",
+      "argv",
+      "permission_mode",
+      "tier",
+      "model",
+      "effort",
+      "max_turns"
+    ]);
+    MODEL_FLAG = "--model";
+    MCP_CONFIG_FLAG = "--mcp-config";
+    CONTEXT7_HOST_LOCAL_FIELDS = ["url", "headers"];
+    CONTEXT7_LOCAL_ONLY_ENV_KEYS = ["CONTEXT7_API_KEY", "VO_CONTEXT7_URL"];
+    PROMPT_SECTION_MARKERS = [
+      ["skill_catalog", "\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 ALGOSUITE SKILL CATALOG \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"],
+      ["knowledge_context", "\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 ALGOHQ KNOWLEDGE CONTEXT \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"],
+      ["task", "\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 YOUR TASK \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"]
+    ];
+    PROMPT_SECTION_ORDER = ["preamble", "skill_catalog", "knowledge_context", "task"];
+    REDACTED = "[redacted]";
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/prepared-job-shadow.mjs
 import { appendFileSync, mkdirSync as mkdirSync8 } from "node:fs";
 import { createHash as createHash6 } from "node:crypto";
@@ -10672,33 +10846,29 @@ function planeJobAsComparable(job = {}) {
     methodology_stakes: job.methodology?.stakes ?? null
   };
 }
-function classifyDivergence(field, ctx = {}) {
-  const known = (reason) => ({ class: "known_remainder", reason });
-  if (Array.isArray(ctx.envDropped) && ctx.envDropped.length > 0) {
-    return known(`env_value_too_long:${ctx.envDropped.join("+")}`);
-  }
-  if ((field === "model" || field === "tier") && ctx.planeModelRegistryUnavailable) {
-    return known("no_plane_model_registry");
-  }
-  if (field === "dispatch_mode" && ctx.taskDispatchModeAbsent) return known("plane_dispatch_mode_default");
-  if (ctx.dispatchModeDiverged && DISPATCH_MODE_DEPENDENT.has(field)) {
-    return known("downstream_of_dispatch_mode");
-  }
-  if (field === "prompt" && ctx.attachmentManifestPresent) return known("attachment_manifest_not_sent");
-  if (field === "prompt" && ctx.planeSkillCatalogUnavailable) return known("skill_catalog_unavailable");
-  return { class: "unexplained", reason: null };
-}
 function comparePreparedJob({ local, plane, context = {} }) {
   const L = local || {};
   const P = plane || {};
   const raw = COMPARED_FIELDS.filter((f) => !sameValue(L[f], P[f]));
-  const ctx = { ...context, dispatchModeDiverged: raw.includes("dispatch_mode") };
+  const ctx = {
+    ...context,
+    dispatchModeDiverged: raw.includes("dispatch_mode"),
+    // ADR-004 § 11.1c: computed from the argv arrays themselves, never asserted
+    // by the caller — the classifier may only explain argv when the bytes say so.
+    argvDivergesOnlyOnModel: argvDivergesOnlyOnModel(L.argv, P.argv, {
+      runnerModel: L.model,
+      planeModel: P.model
+    }),
+    argvDivergesOnlyOnLocalMcpConfig: argvDivergesOnlyOnLocalMcpConfig(L.argv, P.argv),
+    // Section NAMES, never text; null when the banners differ (fail-closed).
+    promptSectionsDiverged: promptSectionDivergence(L.prompt, P.prompt)
+  };
   const divergences = raw.map((field) => {
     const { class: cls, reason } = classifyDivergence(field, ctx);
     const entry = { field, class: cls, reason };
     if (field !== "prompt") {
-      entry.runner = L[field] ?? null;
-      entry.plane = P[field] ?? null;
+      entry.runner = (field === "argv" ? redactArgvForRecord(L.argv) : L[field]) ?? null;
+      entry.plane = (field === "argv" ? redactArgvForRecord(P.argv) : P[field]) ?? null;
     }
     return entry;
   });
@@ -10713,7 +10883,9 @@ function comparePreparedJob({ local, plane, context = {} }) {
       plane_len: String(P.prompt ?? "").length,
       runner_sha256: sha256(L.prompt),
       plane_sha256: sha256(P.prompt),
-      first_diff_index: firstDivergenceIndex(L.prompt, P.prompt)
+      first_diff_index: firstDivergenceIndex(L.prompt, P.prompt),
+      // null ⇒ the two prompts do not carry the same banners (not attributable).
+      divergent_sections: ctx.promptSectionsDiverged
     }
   };
 }
@@ -10781,6 +10953,7 @@ function formatShadowLogLine(record) {
   if (known.length) parts.push(`known=${known.map((d) => `${d.field}(${d.reason})`).join(",")}`);
   if (record.verdict === "parity_diverged" && typeof record.prompt?.first_diff_index === "number" && record.prompt.first_diff_index >= 0 && record.unexplained_fields?.includes("prompt")) {
     parts.push(`prompt_first_diff_index=${record.prompt.first_diff_index}`);
+    parts.push(`prompt_sections=${record.prompt.divergent_sections?.join(",") || "not_attributable"}`);
   }
   const loud = record.unexplained_fields?.length ? "!! " : "";
   return `${loud}[prepared-job-shadow] ${parts.join(" ")}`;
@@ -10829,6 +11002,7 @@ async function preparedJobShadowPass({
         planeSkillCatalogUnavailable: fetched.composition?.skill_catalog_available === false,
         taskDispatchModeAbsent: !task?.dispatch_mode,
         attachmentManifestPresent: Boolean(local?.attachmentManifestMarkdown),
+        context7LocalOnlyEnvPresent: context7LocalOnlyEnvPresent(env2),
         envDropped: fetched.envDropped
       }
     }) : null;
@@ -10873,11 +11047,13 @@ async function runPreparedJobShadow(options = {}) {
   }
   return result;
 }
-var PREPARED_JOB_MODES, PREPARED_JOB_MODE_ENV, PREPARED_JOB_SHADOW_TIMEOUT_ENV, DEFAULT_SHADOW_TIMEOUT_MS, PREPARED_JOB_SHADOW_SINK, remotePreparedJobMode, COMPARED_FIELDS, DISPATCH_MODE_DEPENDENT, sha256, sameValue, verdictObserver;
+var PREPARED_JOB_MODES, PREPARED_JOB_MODE_ENV, PREPARED_JOB_SHADOW_TIMEOUT_ENV, DEFAULT_SHADOW_TIMEOUT_MS, PREPARED_JOB_SHADOW_SINK, remotePreparedJobMode, COMPARED_FIELDS, sha256, sameValue, verdictObserver;
 var init_prepared_job_shadow = __esm({
   "../../scripts/virtual-office/code-runner/prepared-job-shadow.mjs"() {
     "use strict";
     init_claude_args();
+    init_prepared_job_divergence();
+    init_prepared_job_divergence();
     PREPARED_JOB_MODES = ["off", "shadow", "prepared"];
     PREPARED_JOB_MODE_ENV = "VO_CODE_RUNNER_PREPARED_JOB";
     PREPARED_JOB_SHADOW_TIMEOUT_ENV = "VO_PREPARED_JOB_SHADOW_TIMEOUT_MS";
@@ -10897,15 +11073,6 @@ var init_prepared_job_shadow = __esm({
       "methodology_shape",
       "methodology_stakes"
     ];
-    DISPATCH_MODE_DEPENDENT = /* @__PURE__ */ new Set([
-      "prompt",
-      "argv",
-      "permission_mode",
-      "tier",
-      "model",
-      "effort",
-      "max_turns"
-    ]);
     sha256 = (s) => createHash6("sha256").update(String(s ?? ""), "utf8").digest("hex");
     sameValue = (a, b) => Array.isArray(a) || Array.isArray(b) ? JSON.stringify(a) === JSON.stringify(b) : (a ?? null) === (b ?? null);
     verdictObserver = null;
@@ -13094,8 +13261,8 @@ function resolveCacheBaseDir(env2 = process.env, moduleDir = __dirname) {
   if (env2.VO_MODEL_REGISTRY_CACHE_DIR) return env2.VO_MODEL_REGISTRY_CACHE_DIR;
   if (env2.VO_RUNNER_RUNTIME_ROOT) return env2.VO_RUNNER_RUNTIME_ROOT;
   const segments = moduleDir.split(path18.sep);
-  const isRepoCheckout = segments.at(-1) === "virtual-office" && segments.at(-2) === "scripts";
-  return isRepoCheckout ? path18.resolve(moduleDir, "..", "..") : userCacheRoot();
+  const isRepoCheckout2 = segments.at(-1) === "virtual-office" && segments.at(-2) === "scripts";
+  return isRepoCheckout2 ? path18.resolve(moduleDir, "..", "..") : userCacheRoot();
 }
 function uniqueModels(models = []) {
   return [...new Set(models.map((model) => String(model || "").trim()).filter(Boolean))];
@@ -16717,7 +16884,9 @@ async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmissio
         methodology = m;
       },
       allowMissingKnowledgeContext: process.env.VO_CODE_RUNNER_ALLOW_MISSING_KNOWLEDGE_CONTEXT === "1",
-      attachmentManifestMarkdown: attachmentBundle.manifestMarkdown
+      attachmentManifestMarkdown: attachmentBundle.manifestMarkdown,
+      repoRoot: wt.worktreeDir
+      // ADR-004 § 11.1c: the skill catalog must be the one THIS agent can read
     }) });
     await runPreparedJobShadow({ client, task, agent: sel.agent, env: process.env, log, local: {
       // ADR-004 § 11.1b SHADOW: default OFF; return value deliberately unread — slice C owns consumption