@claudexor/cli 3.1.0 → 3.1.2

package/dist/acp-auth-command.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedArgs } from "./args.js";
+export declare function dispatchAcpCommand(args: ParsedArgs, json: boolean): Promise<number>;
+//# sourceMappingURL=acp-auth-command.d.ts.map

package/dist/acp-auth-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-auth-command.d.ts","sourceRoot":"","sources":["../src/acp-auth-command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAO5C,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAQzF"}

package/dist/acp-auth-command.js

@@ -0,0 +1,18 @@
+import process from "node:process";
+import { parseArgs } from "./args.js";
+import { ACP_SERVE_USAGE, resolveAcpServeAuthHarness } from "./acp-auth.js";
+import { serveAcpBridge } from "./bridge-serve.js";
+import { printUsageError } from "./cli-io.js";
+import { authCommand } from "./ops-commands.js";
+export async function dispatchAcpCommand(args, json) {
+    if (args._[1] !== "serve") {
+        return printUsageError(json, `usage: claudexor acp ${ACP_SERVE_USAGE}`);
+    }
+    if (args._.length === 2)
+        return serveAcpBridge();
+    const harness = resolveAcpServeAuthHarness(args._, process.platform);
+    if (!harness)
+        return printUsageError(json, `usage: claudexor acp ${ACP_SERVE_USAGE}`);
+    return authCommand(parseArgs(["auth", "login", harness]), false, { acpTerminal: true });
+}
+//# sourceMappingURL=acp-auth-command.js.map

package/dist/acp-auth-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-auth-command.js","sourceRoot":"","sources":["../src/acp-auth-command.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAgB,EAAE,IAAa;IACtE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,eAAe,CAAC,IAAI,EAAE,wBAAwB,eAAe,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,wBAAwB,eAAe,EAAE,CAAC,CAAC;IACtF,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/acp-auth.d.ts

@@ -0,0 +1,13 @@
+export type AcpAuthHarness = "codex";
+export declare const ACP_SERVE_USAGE = "serve [auth login codex]";
+export interface AcpTerminalAuthMethod {
+    type: "terminal";
+    id: string;
+    name: string;
+    description: string;
+    args: string[];
+}
+export declare function acpTerminalAuthMethods(platform: NodeJS.Platform): AcpTerminalAuthMethod[];
+/** Strictly decode the complete positional argv after the shared CLI parser. */
+export declare function resolveAcpServeAuthHarness(positionals: readonly string[], platform: NodeJS.Platform): AcpAuthHarness | null;
+//# sourceMappingURL=acp-auth.d.ts.map

package/dist/acp-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-auth.d.ts","sourceRoot":"","sources":["../src/acp-auth.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC;AACrC,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAE1D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAgCD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,qBAAqB,EAAE,CAYzF;AAED,gFAAgF;AAChF,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,GACxB,cAAc,GAAG,IAAI,CAevB"}

package/dist/acp-auth.js

@@ -0,0 +1,47 @@
+export const ACP_SERVE_USAGE = "serve [auth login codex]";
+/**
+ * Experimental ACP Terminal Auth projection. Keep this registry narrower than
+ * the ordinary CLI login surface: an entry is eligible only when the command
+ * can run interactively in the terminal supplied by the ACP client and remain
+ * attached until the durable login reaches an honest outcome.
+ *
+ * Claude and Cursor are intentionally absent for now. Their existing macOS
+ * setup jobs launch a second Terminal window and return before the vendor login
+ * completes, which does not satisfy ACP Terminal Auth's lifecycle contract.
+ */
+const ACP_TERMINAL_AUTH = [
+    {
+        harness: "codex",
+        name: "Sign in to Codex",
+        description: "Sign in to an isolated Claudexor Codex subscription profile.",
+        platforms: ["darwin", "linux"],
+    },
+];
+function supportedOn(definition, platform) {
+    return definition.platforms.includes(platform);
+}
+export function acpTerminalAuthMethods(platform) {
+    return ACP_TERMINAL_AUTH.filter((definition) => supportedOn(definition, platform)).map((definition) => ({
+        type: "terminal",
+        id: definition.harness,
+        name: definition.name,
+        description: definition.description,
+        // ACP clients append these arguments to the configured agent command,
+        // e.g. `claudexor acp serve auth login codex`.
+        args: ["auth", "login", definition.harness],
+    }));
+}
+/** Strictly decode the complete positional argv after the shared CLI parser. */
+export function resolveAcpServeAuthHarness(positionals, platform) {
+    if (positionals.length !== 5 ||
+        positionals[0] !== "acp" ||
+        positionals[1] !== "serve" ||
+        positionals[2] !== "auth" ||
+        positionals[3] !== "login") {
+        return null;
+    }
+    const harness = positionals[4];
+    const definition = ACP_TERMINAL_AUTH.find((candidate) => candidate.harness === harness && supportedOn(candidate, platform));
+    return definition?.harness ?? null;
+}
+//# sourceMappingURL=acp-auth.js.map

package/dist/acp-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-auth.js","sourceRoot":"","sources":["../src/acp-auth.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAiB1D;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAyC;IAC9D;QACE,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,8DAA8D;QAC3E,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC/B;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,UAAqC,EAAE,QAAyB;IACnF,OAAO,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAyB;IAC9D,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CACpF,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACf,IAAI,EAAE,UAAmB;QACzB,EAAE,EAAE,UAAU,CAAC,OAAO;QACtB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,sEAAsE;QACtE,+CAA+C;QAC/C,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC;KAC5C,CAAC,CACH,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,0BAA0B,CACxC,WAA8B,EAC9B,QAAyB;IAEzB,IACE,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK;QACxB,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO;QAC1B,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM;QACzB,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO,EAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CACvC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CACjF,CAAC;IACF,OAAO,UAAU,EAAE,OAAO,IAAI,IAAI,CAAC;AACrC,CAAC"}

package/dist/belt-bridge.d.ts

@@ -0,0 +1,2 @@
+export declare function serveBeltBridge(): Promise<number>;
+//# sourceMappingURL=belt-bridge.d.ts.map

package/dist/belt-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"belt-bridge.d.ts","sourceRoot":"","sources":["../src/belt-bridge.ts"],"names":[],"mappings":"AAcA,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAmBvD"}

package/dist/belt-bridge.js

@@ -0,0 +1,31 @@
+/**
+ * Minimal stdio entry for the scoped delegation belt.
+ *
+ * Keep this separate from bridge-serve.ts: the packaged daemon self-entry must
+ * not initialize the ACP surface merely to expose six belt tools. Starting the
+ * server is side-effect-free with respect to daemon state; a tool invocation
+ * connects to the already-running parent daemon through the injected discovery
+ * env.
+ */
+import { armOrphanExit } from "@claudexor/core";
+import { beltClaudexorTools, readDelegationPolicy, serveClaudexorMcp } from "@claudexor/mcp-server";
+import { CLAUDEXOR_VERSION } from "@claudexor/util";
+import { mcpSurfaceRunner } from "./mcp-runner.js";
+export async function serveBeltBridge() {
+    const policy = readDelegationPolicy(process.env);
+    serveClaudexorMcp({
+        version: CLAUDEXOR_VERSION,
+        tools: beltClaudexorTools(mcpSurfaceRunner({
+            requireExistingDaemon: true,
+            delegationParentRunId: policy.parentRunId,
+            delegationRepoRoot: policy.repoRoot,
+        }), policy),
+        transport: { read: process.stdin, write: process.stdout },
+    });
+    armOrphanExit({
+        onOrphaned: () => process.stderr.write("claudexor mcp-belt: host process died; exiting\n"),
+    });
+    await new Promise((resolve) => process.stdin.once("close", resolve));
+    return 0;
+}
+//# sourceMappingURL=belt-bridge.js.map

package/dist/belt-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"belt-bridge.js","sourceRoot":"","sources":["../src/belt-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,iBAAiB,CAAC;QAChB,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,kBAAkB,CACvB,gBAAgB,CAAC;YACf,qBAAqB,EAAE,IAAI;YAC3B,qBAAqB,EAAE,MAAM,CAAC,WAAW;YACzC,kBAAkB,EAAE,MAAM,CAAC,QAAQ;SACpC,CAAC,EACF,MAAM,CACP;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;KAC1D,CAAC,CAAC;IACH,aAAa,CAAC;QACZ,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC;KAC3F,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/bridge-serve.d.ts

@@ -1,12 +1,4 @@
+export { serveBeltBridge } from "./belt-bridge.js";
 export declare function serveMcpBridge(): Promise<number>;
-/**
- * Serve the SCOPED delegation belt (D32) over stdio. Injected into a delegate
- * agent run's harness sandbox; it exposes ONLY the six belt tools (ask / plan /
- * isolated run / best-of / status / result) and enforces the depth, sub-run-count
- * and budget policy read from the injected CLAUDEXOR_DELEGATION_* env. The belt
- * crosses the SAME daemon boundary as the public MCP surface (isolated envelope,
- * no thread by construction) — there is no apply/decision/thread/settings tool.
- */
-export declare function serveBeltBridge(): Promise<number>;
 export declare function serveAcpBridge(): Promise<number>;
 //# sourceMappingURL=bridge-serve.d.ts.map

package/dist/bridge-serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-serve.d.ts","sourceRoot":"","sources":["../src/bridge-serve.ts"],"names":[],"mappings":"AAuBA,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAYtD;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAUvD;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAQtD"}
+{"version":3,"file":"bridge-serve.d.ts","sourceRoot":"","sources":["../src/bridge-serve.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAQnD,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAYtD;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAStD"}

package/dist/bridge-serve.js

@@ -5,10 +5,13 @@
  * a reparent watchdog bounds the bridge's life to its host's.
  */
 import { armOrphanExit } from "@claudexor/core";
-import { beltClaudexorTools, defaultClaudexorTools, readDelegationPolicy, serveClaudexorMcp, } from "@claudexor/mcp-server";
+import { defaultClaudexorTools, serveClaudexorMcp } from "@claudexor/mcp-server";
 import { AcpServer } from "@claudexor/acp-server";
 import { CLAUDEXOR_VERSION } from "@claudexor/util";
+import { acpTerminalAuthMethods } from "./acp-auth.js";
+import { acpSessionQuery } from "./acp-surface-runner.js";
 import { mcpSurfaceRunner } from "./mcp-runner.js";
+export { serveBeltBridge } from "./belt-bridge.js";
 function armBridgeWatchdog(label) {
     armOrphanExit({
         onOrphaned: () => process.stderr.write(`claudexor ${label}: host process died; exiting\n`),
@@ -19,7 +22,7 @@ export async function serveMcpBridge() {
     // run started from an MCP host is visible/unblockable like a CLI run.
     serveClaudexorMcp({
         version: CLAUDEXOR_VERSION,
-        tools: defaultClaudexorTools(mcpSurfaceRunner()),
+        tools: defaultClaudexorTools(mcpSurfaceRunner({ acpSessionQuery })),
         transport: { read: process.stdin, write: process.stdout },
     });
     armBridgeWatchdog("mcp");
@@ -27,31 +30,13 @@ export async function serveMcpBridge() {
     await new Promise((resolve) => process.stdin.once("close", resolve));
     return 0;
 }
-/**
- * Serve the SCOPED delegation belt (D32) over stdio. Injected into a delegate
- * agent run's harness sandbox; it exposes ONLY the six belt tools (ask / plan /
- * isolated run / best-of / status / result) and enforces the depth, sub-run-count
- * and budget policy read from the injected CLAUDEXOR_DELEGATION_* env. The belt
- * crosses the SAME daemon boundary as the public MCP surface (isolated envelope,
- * no thread by construction) — there is no apply/decision/thread/settings tool.
- */
-export async function serveBeltBridge() {
-    const policy = readDelegationPolicy(process.env);
-    serveClaudexorMcp({
-        version: CLAUDEXOR_VERSION,
-        tools: beltClaudexorTools(mcpSurfaceRunner(), policy),
-        transport: { read: process.stdin, write: process.stdout },
-    });
-    armBridgeWatchdog("mcp-belt");
-    await new Promise((resolve) => process.stdin.once("close", resolve));
-    return 0;
-}
 export async function serveAcpBridge() {
     armBridgeWatchdog("acp");
     await new AcpServer({
         version: CLAUDEXOR_VERSION,
-        runner: mcpSurfaceRunner(),
+        runner: mcpSurfaceRunner({ acpSessionQuery }),
         transport: { read: process.stdin, write: process.stdout },
+        terminalAuthMethods: acpTerminalAuthMethods(process.platform),
     }).serve();
     return 0;
 }

package/dist/bridge-serve.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-serve.js","sourceRoot":"","sources":["../src/bridge-serve.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,SAAS,iBAAiB,CAAC,KAAa;IACtC,aAAa,CAAC;QACZ,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,gCAAgC,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,mEAAmE;IACnE,sEAAsE;IACtE,iBAAiB,CAAC;QAChB,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,CAAC;QAChD,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;KAC1D,CAAC,CAAC;IACH,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,gEAAgE;IAChE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,iBAAiB,CAAC;QAChB,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,EAAE,EAAE,MAAM,CAAC;QACrD,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;KAC1D,CAAC,CAAC;IACH,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,IAAI,SAAS,CAAC;QAClB,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,gBAAgB,EAAE;QAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;KAC1D,CAAC,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"bridge-serve.js","sourceRoot":"","sources":["../src/bridge-serve.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,SAAS,iBAAiB,CAAC,KAAa;IACtC,aAAa,CAAC;QACZ,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,gCAAgC,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,mEAAmE;IACnE,sEAAsE;IACtE,iBAAiB,CAAC;QAChB,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;QACnE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;KAC1D,CAAC,CAAC;IACH,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,gEAAgE;IAChE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,IAAI,SAAS,CAAC;QAClB,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;QACzD,mBAAmB,EAAE,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC;KAC9D,CAAC,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/capabilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EAUvB,MAAM,mBAAmB,CAAC;AAQ3B,8EAA8E;AAC9E,wBAAgB,YAAY,IAAI,SAAS,MAAM,EAAE,CAEhD;AAKD;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,sBAAsB,CAAC,CA0FnF"}
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EAUvB,MAAM,mBAAmB,CAAC;AAS3B,8EAA8E;AAC9E,wBAAgB,YAAY,IAAI,SAAS,MAAM,EAAE,CAEhD;AAKD;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,sBAAsB,CAAC,CA2FnF"}

package/dist/capabilities.js

@@ -5,6 +5,7 @@ import { defaultClaudexorTools } from "@claudexor/mcp-server";
 import { CLAUDEXOR_VERSION } from "@claudexor/util";
 import { CLI_COMMANDS } from "./command-registry.js";
 import { buildGateway, harnessModels } from "./registry.js";
+import { delegationCapabilityFor } from "./delegation-capability.js";
 /** MCP tool names from the server's own descriptor producer (noop runner). */
 export function mcpToolNames() {
     return defaultClaudexorTools(async () => "").map((t) => t.name);
@@ -61,6 +62,7 @@ export async function buildAgentCapabilityCatalog() {
             effortLevels: [...(s.manifest?.capabilities.effort_levels ?? [])],
             accessProfilesSupported: [...(s.manifest?.access_profiles_supported ?? [])],
             readonlyMechanism: profile?.access_control.readonly_mechanism ?? "none",
+            delegation: delegationCapabilityFor(s.manifest),
         };
     }));
     // Run-control keys are DERIVED from the schema shape, minus the keys the

package/dist/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,QAAQ,EACR,sBAAsB,EACtB,8BAA8B,EAC9B,aAAa,EACb,aAAa,GAGd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D,8EAA8E;AAC9E,MAAM,UAAU,YAAY;IAC1B,OAAO,qBAAqB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,gFAAgF;AAChF,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAEzD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAExC,MAAM,SAAS,GAAqB,MAAM,OAAO,CAAC,GAAG,CACnD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,KAAK,GAAiC,MAAM,aAAa,CAC7D,CAAC,CAAC,EAAE,EACJ,eAAe,EACf,KAAK,CACN,CAAC,KAAK,CAAC,GAAiC,EAAE,CAAC,CAAC;YAC3C,SAAS,EAAE,CAAC,CAAC,EAAE;YACf,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,MAAM;YACd,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC,CAAC;QACJ,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU;YACtB,CAAC,CAAC,aAAa,CACX,UAAU,EACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAC5C;YACH,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC/C,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO;YACP,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAC,EAAE;YAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,IAAI,SAAS;YACxD,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACrC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC;YACvC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YACvB,eAAe,EAAE,UAAU;YAC3B,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI;YAC1D,MAAM,EAAE;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC;YACD,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,IAAI,MAAM;YACxD,gBAAgB,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;YACzD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YACjE,uBAAuB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;YAC3E,iBAAiB,EAAE,OAAO,EAAE,cAAc,CAAC,kBAAkB,IAAI,MAAM;SACxE,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,8BAA8B,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC/B,IAAI,EAAE,CAAC;IAEV,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,SAAS;QACT,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,cAAc;QACd,oBAAoB,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC/E,UAAU,EAAE;YACV,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;YAC5E,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;YAC1E,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;YACpC,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;YAC1C,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;SAChD;QACD,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;SAC9B,CAAC,CAAC;QACH,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;QAC7B,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,QAAQ,EACR,sBAAsB,EACtB,8BAA8B,EAC9B,aAAa,EACb,aAAa,GAGd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,8EAA8E;AAC9E,MAAM,UAAU,YAAY;IAC1B,OAAO,qBAAqB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,gFAAgF;AAChF,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAEzD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAExC,MAAM,SAAS,GAAqB,MAAM,OAAO,CAAC,GAAG,CACnD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,KAAK,GAAiC,MAAM,aAAa,CAC7D,CAAC,CAAC,EAAE,EACJ,eAAe,EACf,KAAK,CACN,CAAC,KAAK,CAAC,GAAiC,EAAE,CAAC,CAAC;YAC3C,SAAS,EAAE,CAAC,CAAC,EAAE;YACf,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,MAAM;YACd,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC,CAAC;QACJ,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU;YACtB,CAAC,CAAC,aAAa,CACX,UAAU,EACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAC5C;YACH,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC/C,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO;YACP,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAC,EAAE;YAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,IAAI,SAAS;YACxD,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACrC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC;YACvC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YACvB,eAAe,EAAE,UAAU;YAC3B,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI;YAC1D,MAAM,EAAE;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC;YACD,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,IAAI,MAAM;YACxD,gBAAgB,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;YACzD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YACjE,uBAAuB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;YAC3E,iBAAiB,EAAE,OAAO,EAAE,cAAc,CAAC,kBAAkB,IAAI,MAAM;YACvE,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC;SAChD,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,8BAA8B,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC/B,IAAI,EAAE,CAAC;IAEV,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,SAAS;QACT,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,cAAc;QACd,oBAAoB,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC/E,UAAU,EAAE;YACV,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;YAC5E,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;YAC1E,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;YACpC,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;YAC1C,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;SAChD;QACD,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;SAC9B,CAAC,CAAC;QACH,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;QAC7B,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC"}

package/dist/claudexord-entry.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Side-effect-free dispatch for the daemon executable's alternate belt role.
+ * Kept outside claudexord.ts so the daemon owner remains below its readability
+ * ratchet and the entry decision can be tested without daemon initialization.
+ */
+export declare function isBeltServeInvocation(argv: readonly string[]): boolean;
+export declare function runBeltServeIfRequested(argv: readonly string[]): Promise<boolean>;
+export declare function dispatchClaudexordEntry(daemonMain: () => Promise<void>, argv?: readonly string[]): void;
+/** Preserve import-side-effect freedom while supporting direct `node dist/claudexord.js`. */
+export declare function runIfDirectEntry(moduleUrl: string, entry: () => void, argv?: readonly string[]): void;
+//# sourceMappingURL=claudexord-entry.d.ts.map

package/dist/claudexord-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudexord-entry.d.ts","sourceRoot":"","sources":["../src/claudexord-entry.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEtE;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAKvF;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC/B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,IAAI,CAWN;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,IAAI,EACjB,IAAI,GAAE,SAAS,MAAM,EAAiB,GACrC,IAAI,CAWN"}

package/dist/claudexord-entry.js

@@ -0,0 +1,42 @@
+import { realpathSync } from "node:fs";
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+/**
+ * Side-effect-free dispatch for the daemon executable's alternate belt role.
+ * Kept outside claudexord.ts so the daemon owner remains below its readability
+ * ratchet and the entry decision can be tested without daemon initialization.
+ */
+export function isBeltServeInvocation(argv) {
+    return argv.length === 2 && argv[0] === "mcp" && argv[1] === "serve-belt";
+}
+export async function runBeltServeIfRequested(argv) {
+    if (!isBeltServeInvocation(argv))
+        return false;
+    const { serveBeltBridge } = await import("./belt-bridge.js");
+    process.exitCode = await serveBeltBridge();
+    return true;
+}
+export function dispatchClaudexordEntry(daemonMain, argv = process.argv.slice(2)) {
+    runBeltServeIfRequested(argv)
+        .then(async (handled) => {
+        if (!handled)
+            await daemonMain();
+    })
+        .catch((error) => {
+        process.stderr.write(`claudexord: ${error instanceof Error ? error.message : String(error)}\n`);
+        process.exitCode = 1;
+    });
+}
+/** Preserve import-side-effect freedom while supporting direct `node dist/claudexord.js`. */
+export function runIfDirectEntry(moduleUrl, entry, argv = process.argv) {
+    try {
+        if (typeof argv[1] === "string" &&
+            realpathSync.native(resolve(argv[1])) === realpathSync.native(fileURLToPath(moduleUrl))) {
+            entry();
+        }
+    }
+    catch {
+        // A malformed executable path is not direct-entry proof.
+    }
+}
+//# sourceMappingURL=claudexord-entry.js.map

package/dist/claudexord-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudexord-entry.js","sourceRoot":"","sources":["../src/claudexord-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAuB;IAC3D,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAuB;IACnE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7D,OAAO,CAAC,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAA+B,EAC/B,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/C,uBAAuB,CAAC,IAAI,CAAC;SAC1B,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACtB,IAAI,CAAC,OAAO;YAAE,MAAM,UAAU,EAAE,CAAC;IACnC,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAC1E,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,KAAiB,EACjB,OAA0B,OAAO,CAAC,IAAI;IAEtC,IAAI,CAAC;QACH,IACE,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAC3B,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EACvF,CAAC;YACD,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC"}

package/dist/claudexord.d.ts

@@ -22,9 +22,6 @@ export declare function runProbeIfRequested(argv: readonly string[]): boolean;
  * nonzero when a live daemon could not be confirmed dead. */
 export declare function runStopIfRequested(argv: readonly string[]): Promise<boolean>;
 export declare function main(): Promise<void>;
-/** Boot the daemon and translate a fatal error into a nonzero exit. The npm
- * bin wrapper (packages/claudexor/bin/claudexord.js) calls this EXPLICITLY —
- * a bare import must never boot the daemon (X228: the probe test's import
- * would race the LIVE daemon for the journal writer lease). */
+/** Explicit entry preserves import-side-effect freedom for daemon probes. */
 export declare function runClaudexordEntry(): void;
 //# sourceMappingURL=claudexord.d.ts.map

package/dist/claudexord.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claudexord.d.ts","sourceRoot":"","sources":["../src/claudexord.ts"],"names":[],"mappings":";AAuCA,OAAO,EAAE,KAAK,YAAY,EAA8B,MAAM,mBAAmB,CAAC;AAclF;;;;6DAI6D;AAC7D,wBAAgB,oBAAoB,IAAI,YAAY,EAAE,CAsBrD;AAED;;;;;iDAKiD;AACjD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAKpE;AAED;;;;;;6DAM6D;AAC7D,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAsBlF;AAED,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAuf1C;AAED;;;+DAG+D;AAC/D,wBAAgB,kBAAkB,IAAI,IAAI,CAKzC"}
+{"version":3,"file":"claudexord.d.ts","sourceRoot":"","sources":["../src/claudexord.ts"],"names":[],"mappings":";AAqCA,OAAO,EAAE,KAAK,YAAY,EAA8B,MAAM,mBAAmB,CAAC;AAiBlF;;;;6DAI6D;AAC7D,wBAAgB,oBAAoB,IAAI,YAAY,EAAE,CAsBrD;AAED;;;;;iDAKiD;AACjD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAKpE;AAED;;;;;;6DAM6D;AAC7D,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAsBlF;AAED,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA4f1C;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/claudexord.js

@@ -1,15 +1,13 @@
 #!/usr/bin/env node
 import { appendFileSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import { pathToFileURL } from "node:url";
 import { DaemonClient, awaitDaemonTermination, readToken, commandProjection, interactionProjection, operatorDecisionProjection, runEventProjection, JournalManager, DaemonServer, InteractionRegistry, ProjectPartitions, projectProjection, RunEventBus, ResourceStore, quotaProjection, threadHeadPingProjection, threadProjection, daemonDir, defaultSocketPath, acquireDaemonWriterLease, ensureToken, ensureDaemonRuntimeRoot, logPath, socketAlive, } from "@claudexor/daemon";
 import { DaemonControlApiServer, normalizeRunStartRequest } from "@claudexor/control-api";
 import { armDaemonLifecycle, logLine, runStartupCrashGc } from "./daemon-lifecycle.js";
 import { assertPlanImplementReady } from "./plan-implement-readiness.js";
 import { Orchestrator } from "@claudexor/orchestrator";
-import { buildDelegationBeltDescriptor } from "./delegation-belt-descriptor.js";
+import { delegationBeltForRun } from "./delegation-belt-descriptor.js";
 import { loadConfig, sweepRetiredConfigKeysAtStartup } from "@claudexor/config";
-import { ensureThreadWorktree } from "@claudexor/workspace";
 import { engineBuildIdentity, noProjectRepoRoot, redactSecrets } from "@claudexor/util";
 import { scheduleStartupRetention } from "./retention-service.js";
 import { controlServices } from "./control-services.js";
@@ -22,6 +20,9 @@ import { DaemonRuntimeShutdown } from "./daemon-runtime-shutdown.js";
 import { refreshCodexQuota } from "./codex-quota-source.js";
 import { refreshClaudeStatuslineQuota } from "./claude-statusline.js";
 import { refreshClaudeOauthUsageQuota } from "./claude-oauth-usage.js";
+import { resolveThreadExecutionWorkspace } from "./thread-execution-workspace.js";
+import { dispatchClaudexordEntry, runIfDirectEntry } from "./claudexord-entry.js";
+import { createDelegationDaemonBinding } from "./delegation-daemon-binding.js";
 const NO_PROJECT_ROOT = noProjectRepoRoot();
 /** The registered quota-subject UNIVERSE (release cut V11a): for each harness,
  * the engine-default credential (subject null) plus one subject per enabled
@@ -131,6 +132,7 @@ export async function main() {
             logLine(logPath(), `swept retired config keys from ${sweep.path}: ${sweep.removed.join(", ")}`);
         }
         const bus = new RunEventBus();
+        const { authority: delegationBudgetAuthority, bind: bindDelegationDaemon } = createDelegationDaemonBinding();
         const journalManager = new JournalManager(daemonDir());
         const commandStoreSlot = journalManager.registerProjection(commandProjection());
         const interactionStoreSlot = journalManager.registerProjection(interactionProjection());
@@ -177,6 +179,7 @@ export async function main() {
             socketPath,
             token,
             commands: threads,
+            delegationAuthority: delegationBudgetAuthority,
             onRunTerminal: (runId, threadId) => {
                 interactions.dropForRun(runId);
                 // Run-terminal is the one W12 path with no thread-store mutation to
@@ -192,10 +195,12 @@ export async function main() {
                 const mode = p.mode;
                 const noProjectAsk = mode === "ask" && p.scope.kind === "none";
                 const repoRoot = p.scope.kind === "project" ? p.scope.root : NO_PROJECT_ROOT;
+                const runConfig = loadConfig(repoRoot);
                 if (noProjectAsk)
                     mkdirSync(NO_PROJECT_ROOT, { recursive: true, mode: 0o700 });
                 const orchestrator = new Orchestrator({
                     registry: buildRegistry(),
+                    delegationBudgetAuthority,
                     routingGoal: p.routingGoal,
                     quotaSnapshots: () => quotaStoreSlot.current().read().snapshots,
                     quotaEventSink: (harnessId, event) => quotaStoreSlot.current().ingest(harnessId, event),
@@ -220,19 +225,14 @@ export async function main() {
                         assertPlanImplementReady(planRef.runId, planRef.path);
                     }
                 }
-                let executionRoot;
-                let inPlace = p.execution.isolation === "live";
-                if (threadId && repoRoot !== NO_PROJECT_ROOT) {
-                    const thread = threads.getThread(threadId);
-                    if (thread?.workspace.mode === "isolated") {
-                        const wt = await ensureThreadWorktree(repoRoot, threadId);
-                        executionRoot = wt.path;
-                        // Only creation owns the base; apply advances it independently.
-                        if (wt.created)
-                            threads.setThreadWorktree(threadId, wt.path, wt.baseSha);
-                        inPlace = true; // isolated turns run in-place WITHIN the worktree
-                    }
-                }
+                const { executionRoot, inPlace } = await resolveThreadExecutionWorkspace({
+                    threadId,
+                    repoRoot,
+                    mode,
+                    requestedInPlace: p.execution.isolation === "live",
+                    protectedPaths: runConfig.project.constraints.protected_paths,
+                    threads,
+                });
                 const onRunStart = (info) => {
                     ctx.onRunStart?.(info);
                     if (!threadId)
@@ -306,6 +306,7 @@ export async function main() {
                     deadlineTimer.unref?.();
                     runSignal = ctx.signal ? AbortSignal.any([ctx.signal, deadline.signal]) : deadline.signal;
                 }
+                const delegationBelt = delegationBeltForRun(p.delegate === true, p.paidBudget);
                 return orchestrator
                     .run({
                     onEvent: (event) => {
@@ -319,7 +320,7 @@ export async function main() {
                         bus.publish(event);
                     },
                     onInteraction: (ctx2) => interactions.register(ctx2, p),
-                    interactionTimeoutMs: loadConfig(repoRoot).global.interaction_timeout_ms,
+                    interactionTimeoutMs: runConfig.global.interaction_timeout_ms,
                     threadId,
                     executionRoot,
                     resumeSessions: threadId ? threads.resumeMap(threadId, requestedProfileId) : undefined,
@@ -356,6 +357,9 @@ export async function main() {
                         : undefined,
                     authPreference: p.authPreference,
                     credentialProfileId: requestedProfileId,
+                    parentRunId: p.parentRunId ?? null,
+                    delegatedFromRunId: p.delegatedFromRunId ?? null,
+                    delegationAdmissionId: ctx.jobId,
                     repoRoot,
                     prompt: String(p.prompt ?? ""),
                     planRef: p.planRef && typeof p.planRef === "object"
@@ -390,7 +394,7 @@ export async function main() {
                     // Belt descriptor (D32): built once per delegate run with the parent
                     // budget snapshot; injected into agent lanes whose adapter can host
                     // MCP servers. Null when delegate is off (no belt).
-                    delegationBelt: p.delegate === true ? buildDelegationBeltDescriptor(p.paidBudget) : null,
+                    delegationBelt,
                     synthesis: p.synthesis,
                     paidBudget: p.paidBudget,
                     access: p.access,
@@ -414,6 +418,7 @@ export async function main() {
                 });
             },
         });
+        bindDelegationDaemon(server);
         const authReadiness = new AuthReadinessService(buildGateway({ includeFakes: false }), {
             cwd: NO_PROJECT_ROOT,
         });
@@ -531,27 +536,9 @@ export async function main() {
             writerLease.release();
     }
 }
-/** Boot the daemon and translate a fatal error into a nonzero exit. The npm
- * bin wrapper (packages/claudexor/bin/claudexord.js) calls this EXPLICITLY —
- * a bare import must never boot the daemon (X228: the probe test's import
- * would race the LIVE daemon for the journal writer lease). */
+/** Explicit entry preserves import-side-effect freedom for daemon probes. */
 export function runClaudexordEntry() {
-    main().catch((err) => {
-        process.stderr.write(`claudexord: ${err instanceof Error ? err.message : String(err)}\n`);
-        process.exitCode = 1;
-    });
+    dispatchClaudexordEntry(main);
 }
-// Direct execution (node dist/claudexord.js) boots via the entry guard;
-// imports (tests, the bin wrapper) get NO side effect and call
-// runClaudexordEntry() themselves.
-const invokedAsEntry = (() => {
-    try {
-        return (typeof process.argv[1] === "string" && import.meta.url === pathToFileURL(process.argv[1]).href);
-    }
-    catch {
-        return false;
-    }
-})();
-if (invokedAsEntry)
-    runClaudexordEntry();
+runIfDirectEntry(import.meta.url, runClaudexordEntry);
 //# sourceMappingURL=claudexord.js.map