@kaiba-cloud/orbital 0.0.3 → 0.0.4

package/dist/runner.js

@@ -45510,7 +45510,7 @@ function handleIntersectionResults(result, left, right) {
   const unrecKeys = /* @__PURE__ */ new Map();
   let unrecIssue;
   const keyIssues = /* @__PURE__ */ new Map();
-  const collect = (iss, side) => {
+  const collect2 = (iss, side) => {
     let keys;
     if (iss.code === "unrecognized_keys" && !iss.path?.length) {
       unrecIssue ?? (unrecIssue = iss);
@@ -45531,11 +45531,11 @@ function handleIntersectionResults(result, left, right) {
     return true;
   };
   for (const iss of left.issues) {
-    if (!collect(iss, "l"))
+    if (!collect2(iss, "l"))
       result.issues.push(iss);
   }
   for (const iss of right.issues) {
-    if (!collect(iss, "r"))
+    if (!collect2(iss, "r"))
       result.issues.push(iss);
   }
   const bothKeys = [...unrecKeys].filter(([, f]) => f.l && f.r).map(([k]) => k);
@@ -61386,6 +61386,7 @@ var ORBITAL_META = {
   requestedModel: "orbital/requestedModel",
   fromAgent: "orbital/fromAgent",
   fromSession: "orbital/fromSession",
+  fromTeam: "orbital/fromTeam",
   peerHops: "orbital/peerHops",
   entry: "orbital/entry",
   block: "orbital/block",
@@ -61645,6 +61646,16 @@ var MissionChangeSchema = external_exports.object({
   by: external_exports.string(),
   note: external_exports.string().nullable()
 });
+var MissionLinkSchema = external_exports.object({
+  label: external_exports.string().min(1),
+  url: external_exports.string().url().refine((url2) => /^https?:\/\//i.test(url2), "a link is an http or https URL"),
+  state: external_exports.string().min(1).nullable().default(null)
+});
+var MissionAskedSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  question: external_exports.string().min(1),
+  at: external_exports.string()
+});
 var MissionStateFileSchema = external_exports.object({
   mission: external_exports.string().min(1),
   node: external_exports.string().min(1),
@@ -61659,6 +61670,8 @@ var MissionStateFileSchema = external_exports.object({
   lead: external_exports.string().nullable(),
   claim: external_exports.string().nullable(),
   claimedAt: external_exports.string().nullable(),
+  links: external_exports.array(MissionLinkSchema).default([]),
+  questions: external_exports.array(MissionAskedSchema).default([]),
   history: external_exports.array(MissionChangeSchema)
 });
 var MISSION_ID = /^[a-z0-9][a-z0-9-]{0,62}$/;
@@ -61672,11 +61685,14 @@ var MissionRecordSchema = external_exports.object({
   declared: external_exports.boolean(),
   givenBy: external_exports.string().nullable(),
   brief: external_exports.string().nullable(),
+  summary: external_exports.string().nullable().default(null),
+  links: external_exports.array(MissionLinkSchema).default([]),
   sessionId: external_exports.string().nullable(),
   taskId: external_exports.string().nullable(),
   source: external_exports.string().nullable(),
   result: external_exports.string().nullable(),
   question: external_exports.string().nullable(),
+  questions: external_exports.array(MissionAskedSchema).default([]),
   giver: external_exports.string().nullable(),
   lead: external_exports.string().nullable(),
   lastActivity: external_exports.string().nullable().default(null),
@@ -61693,6 +61709,11 @@ var MissionHandoffSchema = external_exports.object({
   state: MissionOutcomeSchema.default("done"),
   result: external_exports.string().min(1)
 });
+var MissionLinkRequestSchema = MissionLinkSchema.extend({ missionId: MissionIdSchema.optional() });
+var MissionAskRequestSchema = external_exports.object({
+  missionId: MissionIdSchema.optional(),
+  question: external_exports.string().min(1)
+});
 var MissionStartRequestSchema = external_exports.object({
   mission: MissionIdSchema,
   team: external_exports.string().min(1).nullable().default(null),
@@ -61711,11 +61732,13 @@ var MissionNewRequestSchema = external_exports.object({
 var MissionWrittenSchema = external_exports.object({ missionId: external_exports.string().min(1), file: external_exports.string().min(1) });
 var MissionReplySchema = external_exports.object({
   missionId: MissionIdSchema,
-  text: external_exports.string().min(1)
+  text: external_exports.string().min(1),
+  questionId: external_exports.string().min(1).optional()
 });
 var RemoteGiverSchema = external_exports.object({ node: external_exports.string().min(1), sessionId: external_exports.string().min(1) });
-var RelayJoinSchema = external_exports.object({ missionId: MissionIdSchema, giver: RemoteGiverSchema });
-var RelayReplySchema = external_exports.object({ missionId: MissionIdSchema, text: external_exports.string().min(1), by: external_exports.string().min(1) });
+var SENDER_FIELDS = { team: external_exports.string().min(1).nullable().default(null), agent: external_exports.string().min(1).nullable().default(null) };
+var RelayJoinSchema = external_exports.object({ missionId: MissionIdSchema, giver: RemoteGiverSchema, ...SENDER_FIELDS });
+var RelayReplySchema = external_exports.object({ missionId: MissionIdSchema, text: external_exports.string().min(1), questionId: external_exports.string().min(1).optional(), by: external_exports.string().min(1), ...SENDER_FIELDS });
 var MissionControlSchema = external_exports.object({ missionId: MissionIdSchema });
 var SayRequestSchema = external_exports.object({
   target: external_exports.string().min(1),
@@ -61726,15 +61749,17 @@ var SaidSchema = external_exports.object({
   missionId: external_exports.string().nullable(),
   delivery: external_exports.enum(["reply", "steer", "turn"])
 });
-var RelayMessageSchema = external_exports.object({ missionId: MissionIdSchema, text: external_exports.string().min(1), by: external_exports.string().min(1) });
-var RelayControlSchema = external_exports.object({ missionId: MissionIdSchema, by: external_exports.string().min(1) });
+var RelayMessageSchema = external_exports.object({ missionId: MissionIdSchema, text: external_exports.string().min(1), by: external_exports.string().min(1), ...SENDER_FIELDS });
+var RelayControlSchema = external_exports.object({ missionId: MissionIdSchema, by: external_exports.string().min(1), ...SENDER_FIELDS });
 var MissionQuestionSchema = external_exports.object({
   missionId: MissionIdSchema,
   node: external_exports.string().min(1),
   lead: external_exports.string().nullable(),
   leadSessionId: external_exports.string().min(1),
   question: external_exports.string(),
-  giver: RemoteGiverSchema
+  questionId: external_exports.string().min(1).optional(),
+  giver: RemoteGiverSchema,
+  team: external_exports.string().min(1).nullable().default(null)
 });
 var MissionJoinSchema = external_exports.object({
   missionId: MissionIdSchema
@@ -61868,6 +61893,7 @@ var TelemetrySnapshotSchema = external_exports.object({
     giver: external_exports.string().nullable(),
     givenBy: external_exports.string().nullable(),
     question: external_exports.string().nullable(),
+    questions: external_exports.array(MissionAskedSchema).default([]),
     result: external_exports.string().nullable(),
     updatedAt: external_exports.string().nullable()
   })),
@@ -62258,6 +62284,12 @@ var NodeClient = class {
   async handoff(handoff2) {
     return MissionRecordSchema.parse(await this.request("/orbital/missions/handoff", { method: "POST", body: handoff2 }));
   }
+  async link(link) {
+    return MissionRecordSchema.parse(await this.request("/orbital/missions/link", { method: "POST", body: link }));
+  }
+  async ask(ask) {
+    return MissionRecordSchema.parse(await this.request("/orbital/missions/ask", { method: "POST", body: ask }));
+  }
   async transcript(sessionId, limit) {
     return SessionTranscriptSchema.parse(await this.request(`/orbital/sessions/${encodeURIComponent(sessionId)}/transcript?limit=${limit}`));
   }
@@ -62482,6 +62514,7 @@ var DeliverySchema = external_exports.object({
   fromAgent: external_exports.string().nullable(),
   fromSession: external_exports.string().nullable(),
   mission: external_exports.string().nullable().default(null),
+  question: external_exports.string().nullable().default(null),
   text: external_exports.string()
 });
 var SettleSchema = external_exports.object({
@@ -62532,6 +62565,7 @@ var HarnessFolderSchema = external_exports.strictObject({
 var HarnessAdapterDeclarationSchema = HarnessFolderSchema.extend({ id: external_exports.string().regex(/^[a-z][a-z0-9-]{0,31}$/) });
 var HarnessInstallResultSchema = external_exports.object({
   written: external_exports.array(external_exports.string()).default([]),
+  removed: external_exports.array(external_exports.string()).default([]),
   notes: external_exports.array(external_exports.string()).default([])
 });
 var HarnessAgentFileSchema = external_exports.object({
@@ -62720,12 +62754,6 @@ function localAgentSystemPrompt(systemPrompt, promptBlock) {
 ${promptBlock}` : systemPrompt;
 }
 
-// src/protocol/keychain.ts
-var KEYCHAIN_PATH = "/orbital/keychain";
-var KEYCHAIN_MODE = "keychain";
-var KeychainCallSchema = external_exports.object({ args: external_exports.array(external_exports.string()), input: external_exports.string().default("") });
-var KeychainAnswerSchema = external_exports.object({ status: external_exports.number().int(), stdout: external_exports.string(), stderr: external_exports.string() });
-
 // src/runner/runtime/harness/claude-browser.ts
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -75023,7 +75051,8 @@ var ClaudeCodeHarness = class {
       ...QUIET_ENV,
       ...this.args.toolEnvironment?.(),
       ...credential && { CLAUDE_CONFIG_DIR: this.configDir },
-      ...credential && (isOAuth ? { CLAUDE_CODE_OAUTH_TOKEN: credential.payload } : { ANTHROPIC_API_KEY: credential.payload })
+      ...credential && (isOAuth ? { CLAUDE_CODE_OAUTH_TOKEN: credential.payload } : { ANTHROPIC_API_KEY: credential.payload }),
+      ...!credential && this.host.login && { CLAUDE_CODE_OAUTH_TOKEN: this.host.login }
     };
     delete env.NODE_OPTIONS;
     return env;
@@ -81317,6 +81346,8 @@ function createAgentBridgeTools(options) {
       if (messaging.peers) host.registerTool(buildAgentPeersTool(messaging, options));
       if (messaging.mission) host.registerTool(buildMissionGetTool(messaging, options));
       if (messaging.handoffMission) host.registerTool(buildMissionHandoffTool(messaging, options));
+      if (messaging.linkMission) host.registerTool(buildMissionLinkTool(messaging, options));
+      if (messaging.askMission) host.registerTool(buildMissionAskTool(messaging, options));
       host.registerTool(buildAgentStopTool(jobs, messaging, options, log2));
       host.registerTool(buildAgentKillTool(jobs, ledger, messaging, options, log2));
     });
@@ -81658,6 +81689,48 @@ function buildMissionHandoffTool(messaging, options) {
     }
   };
 }
+var MissionLinkParams = Type.Object({
+  label: Type.String({ minLength: 1, description: "A short label, such as PR #42." }),
+  url: Type.String({ minLength: 1, description: "The http or https URL of the link." }),
+  state: Type.Optional(Type.String({ minLength: 1, description: "The state of the linked thing, such as open, merged or closed." }))
+});
+function buildMissionLinkTool(messaging, options) {
+  return {
+    name: "missionLink",
+    label: "Link Mission",
+    description: "Add a link to the mission of your session, as its lead, or change the state of a link it has: such as the pull request you opened, with its state open, merged or closed. One URL or one label is one link, so a call with the same URL replaces it. The node keeps the links with the mission, and the person sees them in the live view.",
+    promptSnippet: "missionLink: add a link to your mission, such as the PR you opened, with its state",
+    parameters: MissionLinkParams,
+    executionMode: "sequential",
+    async execute(_toolCallId, params) {
+      try {
+        return textResult(await messaging.linkMission(options.callerSessionId, { label: params.label, url: params.url, state: params.state ?? null }));
+      } catch (err) {
+        return errorResult(`missionLink failed: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+  };
+}
+var MissionAskParams = Type.Object({
+  question: Type.String({ minLength: 1, description: "The question, in full, with the options you see and what each one means: the giver has none of your context." })
+});
+function buildMissionAskTool(messaging, options) {
+  return {
+    name: "missionAsk",
+    label: "Ask Mission Giver",
+    description: "Ask the giver of the mission of your session a question, as its lead, at any moment, also while your workers run. The node keeps each question open with the mission until the giver answers it, shows it to the person as waiting on them, and pushes it to the giver at once. The answer comes back to you as a message that names the question. Use it for every decision you need from the giver: a question only in your reply text reaches no one. Keep working on what does not depend on the answer.",
+    promptSnippet: "missionAsk: ask the giver of your mission a question at any moment, also while your workers run",
+    parameters: MissionAskParams,
+    executionMode: "sequential",
+    async execute(_toolCallId, params) {
+      try {
+        return textResult(await messaging.askMission(options.callerSessionId, { question: params.question }));
+      } catch (err) {
+        return errorResult(`missionAsk failed: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+  };
+}
 function buildAgentMessageTool(jobs, ledger, messaging, options, log2) {
   return {
     name: "agentMessage",
@@ -83119,8 +83192,9 @@ var RunSpecSchema = external_exports.object({
   harness: external_exports.enum(RUNNER_HARNESSES).default("claude"),
   claude: external_exports.object({
     settings: external_exports.string().nullable(),
-    args: external_exports.array(external_exports.string())
-  }).default({ settings: null, args: [] }),
+    args: external_exports.array(external_exports.string()),
+    login: external_exports.string().nullable().default(null)
+  }).default({ settings: null, args: [], login: null }),
   agent: external_exports.discriminatedUnion("kind", [
     external_exports.object({ kind: external_exports.literal("directory"), id: external_exports.string(), bootstrap: external_exports.record(external_exports.string(), external_exports.unknown()) }),
     external_exports.object({ kind: external_exports.literal("local"), definition: LocalAgentSchema })
@@ -83139,19 +83213,88 @@ function readRunSpec(path10) {
 }
 
 // src/runner/local-store.ts
-import { appendFileSync, existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, statSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import path7 from "node:path";
+
+// src/runner/jsonl-log.ts
+import { appendFileSync, closeSync, existsSync as existsSync4, openSync, readSync, renameSync as renameSync2, statSync } from "node:fs";
+var CHUNK = 64 * 1024;
+function rotatedPath(file2) {
+  return file2.replace(/\.jsonl$/, ".1.jsonl");
+}
+function appendCapped(file2, text, cap) {
+  if (existsSync4(file2) && statSync(file2).size + Buffer.byteLength(text) > cap) renameSync2(file2, rotatedPath(file2));
+  appendFileSync(file2, text);
+}
+function backward(file2, take, into) {
+  if (!existsSync4(file2)) return true;
+  const fd = openSync(file2, "r");
+  try {
+    let position = statSync(file2).size;
+    let rest = Buffer.alloc(0);
+    while (position > 0) {
+      const length = Math.min(CHUNK, position);
+      position -= length;
+      const chunk = Buffer.alloc(length);
+      readSync(fd, chunk, 0, length, position);
+      const joined = Buffer.concat([chunk, rest]);
+      let end = joined.length;
+      for (let at = joined.lastIndexOf(10, end - 1); at !== -1; at = end > 0 ? joined.lastIndexOf(10, end - 1) : -1) {
+        const line = joined.subarray(at + 1, end).toString("utf8");
+        end = at;
+        if (line.trim() === "") continue;
+        if (!take(line)) return false;
+        into.push(line);
+      }
+      rest = joined.subarray(0, end);
+    }
+    const first = rest.toString("utf8");
+    if (first.trim() !== "") {
+      if (!take(first)) return false;
+      into.push(first);
+    }
+    return true;
+  } finally {
+    closeSync(fd);
+  }
+}
+function collect(file2, take) {
+  const lines = [];
+  if (backward(file2, take, lines)) backward(rotatedPath(file2), take, lines);
+  return lines.reverse();
+}
+function tailLines(file2, count, maxBytes = Number.POSITIVE_INFINITY) {
+  let taken = 0;
+  let bytes = 0;
+  return count <= 0 ? [] : collect(file2, (line) => {
+    if (taken >= count || taken > 0 && bytes + line.length > maxBytes) return false;
+    taken += 1;
+    bytes += line.length;
+    return true;
+  });
+}
+function sequenceOf(line) {
+  const found = /"sequence":(\d+)/.exec(line);
+  return found ? Number(found[1]) : 0;
+}
+function lastSequenceOf(file2) {
+  const last = tailLines(file2, 1)[0];
+  return last ? sequenceOf(last) : 0;
+}
+
+// src/runner/local-store.ts
 var RUNNER_LOG = "runner.jsonl";
+var RUNNER_LOG_CAP = 32 * 1024 * 1024;
 var HISTORY_DIR = "history";
 function folderUnit(dir) {
   const walk = (folder) => readdirSync2(folder).flatMap((name) => {
     const full = path7.join(folder, name);
-    return statSync(full).isDirectory() ? walk(full) : [full];
+    return statSync2(full).isDirectory() ? walk(full) : [full];
   });
   return {
     kinds: ["history"],
     async list() {
-      if (!existsSync4(dir)) return null;
+      if (!existsSync5(dir)) return null;
       return Promise.all(walk(dir).map(async (full) => {
         const bytes = readFileSync4(full);
         return { path: path7.relative(dir, full).split(path7.sep).join("/"), hash: await sha256Hex(bytes), size: bytes.length };
@@ -83159,7 +83302,7 @@ function folderUnit(dir) {
     },
     async read(_ref, file2) {
       const full = path7.join(dir, ...file2.split("/"));
-      return existsSync4(full) ? { path: file2, contentBase64: readFileSync4(full).toString("base64") } : null;
+      return existsSync5(full) ? { path: file2, contentBase64: readFileSync4(full).toString("base64") } : null;
     },
     async write() {
       throw new Error("The runner reads a session's history unit; the host writes it.");
@@ -83185,8 +83328,8 @@ var LocalSessionStore = class {
   async persistEvent(sessionId, event) {
     const sequence = (this.sequences.get(sessionId) ?? 0) + 1;
     this.sequences.set(sessionId, sequence);
-    appendFileSync(path7.join(this.recordDir(sessionId), RUNNER_LOG), `${JSON.stringify({ sequence, ...event })}
-`);
+    appendCapped(path7.join(this.recordDir(sessionId), RUNNER_LOG), `${JSON.stringify({ sequence, ...event })}
+`, RUNNER_LOG_CAP);
     this.observer.event?.(sessionId, { ...event, sequence });
   }
   async seedSequence(sessionId, sequence) {
@@ -83196,9 +83339,7 @@ var LocalSessionStore = class {
     this.sequences.delete(sessionId);
   }
   async lastEventSequence(sessionId) {
-    const file2 = path7.join(this.sessionsDir, sessionId, RUNNER_LOG);
-    const lines = existsSync4(file2) ? readFileSync4(file2, "utf8").trim().split("\n").filter(Boolean) : [];
-    const logged = lines.length === 0 ? 0 : JSON.parse(lines[lines.length - 1]).sequence;
+    const logged = lastSequenceOf(path7.join(this.sessionsDir, sessionId, RUNNER_LOG));
     return Math.max(logged, (await this.history(sessionId))?.record.watermark ?? 0);
   }
   async readConversation(sessionId) {
@@ -83238,7 +83379,7 @@ function createLocalBootstrapSource(options) {
         mcps: []
       };
     }
-    return { organizationId: LOCAL_ORGANIZATION, ...spec.agent.bootstrap };
+    return { organizationId: LOCAL_ORGANIZATION, ...spec.agent.bootstrap, systemPrompt: localAgentSystemPrompt(String(spec.agent.bootstrap.systemPrompt ?? ""), spec.promptBlock) };
   }
   return {
     async fetchBootstrap(agentId) {
@@ -83352,6 +83493,12 @@ var NodeMessaging = class {
   async handoffMission(callerSessionId, handoff2) {
     return this.as(callerSessionId).handoff(handoff2);
   }
+  async linkMission(callerSessionId, link) {
+    return this.as(callerSessionId).link(link);
+  }
+  async askMission(callerSessionId, ask) {
+    return this.as(callerSessionId).ask(ask);
+  }
 };
 
 // src/runner/node-gateway.ts
@@ -83415,40 +83562,6 @@ function localLayout(runDir, workspaceDir) {
   };
 }
 
-// src/runner/keychain-client.ts
-async function keychainClient(specPath, args, streams, fetchImpl = fetch) {
-  const spec = readRunSpec(specPath);
-  const input2 = args.length === 1 && args[0] === "-i" ? await streams.stdin() : "";
-  try {
-    const response = await fetchImpl(`${spec.node.url.replace(/\/a2a$/, "")}${KEYCHAIN_PATH}`, {
-      method: "POST",
-      headers: { authorization: `Bearer ${spec.node.token}`, [NODE_SESSION_HEADER]: spec.sessionId, "content-type": "application/json" },
-      body: JSON.stringify({ args, input: input2 })
-    });
-    if (!response.ok) {
-      streams.stderr(`security: the node refused the keychain call (${response.status}): ${(await response.text()).slice(0, 300)}
-`);
-      return 1;
-    }
-    const answer = KeychainAnswerSchema.parse(await response.json());
-    streams.stdout(answer.stdout);
-    streams.stderr(answer.stderr);
-    return answer.status;
-  } catch (error62) {
-    streams.stderr(`security: the node did not answer the keychain call: ${error62 instanceof Error ? error62.message : String(error62)}
-`);
-    return 1;
-  }
-}
-function readStdin() {
-  return new Promise((resolve2, reject) => {
-    const chunks = [];
-    process.stdin.on("data", (chunk) => chunks.push(chunk));
-    process.stdin.on("end", () => resolve2(Buffer.concat(chunks).toString("utf8")));
-    process.stdin.on("error", reject);
-  });
-}
-
 // src/runner/main.ts
 function emit(record2) {
   process.stdout.write(`${JSON.stringify(record2)}
@@ -83461,7 +83574,8 @@ function claudeOnThisMachine(spec) {
     settingSources: ["user", "project", "local"],
     subAgents: true,
     ...spec.claude.settings && { settings: spec.claude.settings },
-    extraArgs: spec.claude.args
+    extraArgs: spec.claude.args,
+    login: spec.claude.login
   };
 }
 function startLocalRun(spec, fetchImpl = fetch) {
@@ -83577,31 +83691,7 @@ async function runToCompletion(run, spec, interactiveMode = interactive) {
     await run.sessions.closeAllSessions();
   }
 }
-async function keychain() {
-  const [specPath, ...args] = process.argv.slice(3);
-  if (!specPath) throw new Error(`usage: runner ${KEYCHAIN_MODE} <spec.json> <security arguments>`);
-  installProxyDispatcher();
-  let out = "";
-  let err = "";
-  const code = await keychainClient(specPath, args, { stdin: readStdin, stdout: (text) => {
-    out += text;
-  }, stderr: (text) => {
-    err += text;
-  } });
-  await new Promise((done) => process.stdout.write(out, () => done()));
-  await new Promise((done) => process.stderr.write(err, () => done()));
-  return code;
-}
-var entered = process.argv[1] !== void 0 && import.meta.url === pathToFileURL(realpathSync2(process.argv[1])).href;
-if (entered && process.argv[2] === KEYCHAIN_MODE) {
-  keychain().then(
-    (code) => process.exit(code),
-    (err) => {
-      process.stderr.write(`security: ${err instanceof Error ? err.message : String(err)}
-`, () => process.exit(1));
-    }
-  );
-} else if (entered) {
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync2(process.argv[1])).href) {
   main().then(
     () => process.exit(0),
     (err) => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kaiba-cloud/orbital",
   "description": "orbital: the control plane lite for agents on any harness: the node, its runner, its terminal UI, its protocol and its Claude Code mod, in one command line",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/schemas/telemetry-snapshot.schema.json

@@ -297,6 +297,32 @@
               "null"
             ]
           },
+          "questions": {
+            "default": [],
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "question": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "at": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "question",
+                "at"
+              ],
+              "additionalProperties": false
+            }
+          },
           "result": {
             "type": [
               "string",
@@ -319,6 +345,7 @@
           "giver",
           "givenBy",
           "question",
+          "questions",
           "result",
           "updatedAt"
         ],

package/skills/orbital-plugin-builder/SKILL.md

@@ -16,7 +16,7 @@ plain object for each port.
 | [references/ports.md](references/ports.md) | Each port: what it is for, when the node calls it, the config, the interface, the remote methods, an example. |
 | [references/host-api.md](references/host-api.md) | Each method of the host API: `submit`, `deliver`, `completeModel`, `missions`, `snapshot` and the others. |
 | [references/manifest.md](references/manifest.md) | `orbital-plugin.json`, the `orbital.yaml` entry, the manifest, permissions, secrets, `context.init`. |
-| [references/recipes.md](references/recipes.md) | Whole plugins: a cross-machine missions relay with a directory and placements, a telemetry dashboard, a Slack channel, a policy engine, a gatekeeper for messages from the network. |
+| [references/recipes.md](references/recipes.md) | Whole plugins: a cross-machine missions relay with a directory and placements, a telemetry dashboard, a Slack channel, a policy engine, a harness. |
 
 ## Ports
 
@@ -113,8 +113,7 @@ npm test          # build, then the conformance checks and your own checks
 - Test your own logic next to the checks: call the port methods with a fake
   `PluginContext`, as the template's test does.
 - For a test against a real node, start the plugin with `startRemotePlugin`
-  and a node with `runNode`, as `plugins/channel-slack/__tests__` does in the
-  source repository.
+  and a node with `runNode`.
 
 ### 4. Check through the real protocol
 
@@ -215,15 +214,5 @@ start stops the start with "A plugin did not start: …".
 
 ## Worked examples
 
-In the source repository of orbital:
-
-- `plugins/channel-slack`: a channel with a Socket Mode service, `host.deliver`, idempotent send, secrets, a panel and a command.
-- `plugins/policy-judge`: a policy that calls a model through `host.completeModel`.
-- `plugins/gatekeeper`: a policy that asks an agent of the receiving team through `host.askAgent` if a message from the network may reach the team.
-- `plugins/store-object`: a store in an object store.
-- `plugins/reasoner-open-ontologies`: a reasoner.
-- `packages/orbital/src/core/node/static-directory.ts`: a directory, a `sessions.create` hook and a placement that send `<agent>@<node>` to another node.
-- `packages/orbital/__tests__/core/fixtures/echo-plugin`: session hooks, a directory, a hosted tool, a panel, a service that submits a turn, and a command.
-- `packages/orbital/__tests__/core/fixtures/echo-harness`: a harness and its turn program.
-- `packages/orbital-harness-pi`: the adapter of the harness `pi`: its folder `.pi`, its install, and a turn program on the Pi coding agent.
-- `packages/orbital-harness-codex`: the adapter of the harness `codex`: its folder `.codex`, its install in `config.toml`, and a turn program on the OpenAI Codex CLI.
+- `@kaiba-cloud/orbital-harness-pi` on npm: the adapter of the harness `pi`: its folder `.pi`, its install, and a turn program on the Pi coding agent.
+- `@kaiba-cloud/orbital-harness-codex` on npm: the adapter of the harness `codex`: its folder `.codex`, its install in `config.toml`, and a turn program on the OpenAI Codex CLI.

package/skills/orbital-plugin-builder/references/host-api.md

@@ -209,12 +209,12 @@ holds the mission calls them when the same plugin on another node sends it a
 request. See [ports.md](ports.md#missions).
 
 ```ts
-interface RelayJoin { missionId: string; giver: { node: string; sessionId: string } }
-interface RelayReply { missionId: string; text: string; by: string }
-interface RelayControl { missionId: string; by: string }
-interface RelayMessage { missionId: string; text: string; by: string }
+interface RelayJoin { missionId: string; giver: { node: string; sessionId: string }; team: string | null; agent: string | null }
+interface RelayReply { missionId: string; text: string; by: string; team: string | null; agent: string | null }
+interface RelayControl { missionId: string; by: string; team: string | null; agent: string | null }
+interface RelayMessage { missionId: string; text: string; by: string; team: string | null; agent: string | null }
 interface Said { sessionId: string; missionId: string | null; delivery: 'reply' | 'steer' | 'turn' }
-interface MissionQuestion { missionId: string; node: string; lead: string | null; leadSessionId: string; question: string; giver: { node: string; sessionId: string } }
+interface MissionQuestion { missionId: string; node: string; lead: string | null; leadSessionId: string; question: string; giver: { node: string; sessionId: string }; team: string | null }
 ```
 
 - `joinMission` makes the remote session the giver of the mission. When the
@@ -229,6 +229,10 @@ interface MissionQuestion { missionId: string; node: string; lead: string | null
   paused one.
 - `askGiver` gives the question to the giver session on this node. It answers
   false when the giver is not an attached session of this node.
+- `team` and `agent` name the team and the agent of the session that sent the
+  request, or are null. In a question, `team` is the team of the mission and
+  `lead` is the agent. The node gives them to the `channel.receive` policy
+  action as `origin.team` and `origin.agent`, as a claim of the sender.
 - Each of these acts only on this node. None relays again.
 
 ### snapshot

package/skills/orbital-plugin-builder/references/ports.md

@@ -185,7 +185,7 @@ engine can govern each message that reaches the node over the network.
 type ChannelTrust = 'verified' | 'unverified';
 type ChannelOrigin =
   | { kind: 'local' }
-  | { kind: 'network'; peer: string; address: Address; trust: ChannelTrust };
+  | { kind: 'network'; peer: string; address: Address; team: string | null; agent: string | null; trust: ChannelTrust };
 type ChannelReceive = {
   kind: 'channel.receive';
   channel: string;
@@ -205,6 +205,12 @@ type ChannelReceive = {
   `ade`. Else it is the name of the sender, or the name that the carrying
   plugin gives.
 - `origin.address` is the address of the sender.
+- `origin.team` and `origin.agent` name the team and the agent of the session
+  that sent the message from its node. They are null when no session of a team
+  sent it, for example a person, a plain node or the CLI. The sending node puts
+  them in the message metadata (`orbital/fromTeam`, `orbital/fromAgent`) or in
+  the relay request (`team`, `agent`). They are as trusted as the channel: with
+  `trust: unverified` they are only the claim of the sender.
 - `origin.trust` is `verified` only when the channel declares
   `authenticated: true`. Every other path gives `unverified`.
 - `origin.kind` is `local` only for a message on a channel that declares
@@ -1029,6 +1035,11 @@ transport, then calls the host API of its node:
 | `resume(request)` | `host.resumeMission(request)` |
 | `ask(question)` | `host.askGiver(question)` (true when delivered) |
 
+The near node fills `team` and `agent` with the team and the agent of the
+session that sends the request, or null. In a question, `team` is the team of
+the mission and `lead` is the agent. Carry the request whole: the far node
+gives these fields to its policy as `origin.team` and `origin.agent`.
+
 The far node does not relay a request again. To find which node holds a
 mission, read `host.missions()` on each node: it gives the missions of that
 node only. To show the missions of other nodes in the mission list, and for
@@ -1048,12 +1059,12 @@ interface MissionRelayPort {
   say(request: RelayMessage): Promise<Said | null>;
 }
 interface RemoteGiver { node: string; sessionId: string }
-interface RelayJoin { missionId: string; giver: RemoteGiver }
-interface RelayReply { missionId: string; text: string; by: string }
-interface RelayControl { missionId: string; by: string }
-interface RelayMessage { missionId: string; text: string; by: string }
+interface RelayJoin { missionId: string; giver: RemoteGiver; team: string | null; agent: string | null }
+interface RelayReply { missionId: string; text: string; by: string; team: string | null; agent: string | null }
+interface RelayControl { missionId: string; by: string; team: string | null; agent: string | null }
+interface RelayMessage { missionId: string; text: string; by: string; team: string | null; agent: string | null }
 interface Said { sessionId: string; missionId: string | null; delivery: 'reply' | 'steer' | 'turn' }
-interface MissionQuestion { missionId: string; node: string; lead: string | null; leadSessionId: string; question: string; giver: RemoteGiver }
+interface MissionQuestion { missionId: string; node: string; lead: string | null; leadSessionId: string; question: string; giver: RemoteGiver; team: string | null }
 interface MissionRecord {
   missionId: string; team: string | null; node: string; file: string | null;
   state: 'open' | 'active' | 'waiting' | 'paused' | 'done' | 'failed';