@monoes/monomindcli 2.16.12 → 2.16.14

package/dist/src/orgrt/org-stop.js

@@ -0,0 +1,332 @@
+// packages/@monomind/cli/src/orgrt/org-stop.ts
+// Extracted from daemon.ts — stopping an org run: stopOrg's join/remove
+// sequence and finishStop's teardown (checkpoint, drain, history, cleanup).
+import { reapOrphanedSdkProcesses } from '../utils/resource-governor.js';
+import { captureCheckpoint } from './checkpoint.js';
+import * as decisionOps from './decisions.js';
+import { stopEndpointRetries } from './endpoint-roles.js';
+import { clearIdleRecord } from './idle-deadline.js';
+import { historyFile, readRunEvents, summarizeRun } from './reporting.js';
+import { sandboxStubs } from './sandbox-stubs.js';
+export async function stopOrg(daemon, name, opts) {
+    // Join an in-flight stop instead of no-oping: the self-stop paths
+    // (org_complete, idle watchdog) run detached, and a caller like
+    // `org run`'s final stopAll() must not resolve — letting the process
+    // exit — while that stop is still flushing the bus and writing
+    // history/runtime.json.
+    const inflight = daemon.stopping.get(name);
+    if (inflight)
+        return inflight;
+    const org = daemon.orgs.get(name);
+    if (!org)
+        return; // already stopped
+    org.pendingRoles?.clear(); // prevent lazy spawns after stop
+    daemon.spawning.delete(name); // clean up spawning tracking for this org
+    // #304: set before the delete below, since that delete is what makes
+    // abortedByStop (role loop) true — the role loop reads it off this same
+    // object reference, not a fresh lookup (the org is gone from the map by then).
+    org.closedBy = opts?.closedBy;
+    // Remove immediately (not at the end) so a concurrent stopOrg(name) call —
+    // e.g. stopAll() racing a scheduler-triggered stop on SIGINT — joins this
+    // shutdown via `stopping` instead of re-running the whole sequence and
+    // double-emitting 'org stopped' (duplicate org:complete/session:complete).
+    daemon.orgs.delete(name);
+    const p = finishStop(daemon, name, org, opts?.drainMs, opts?.closedBy);
+    daemon.stopping.set(name, p);
+    try {
+        await p;
+    }
+    finally {
+        daemon.stopping.delete(name);
+    }
+}
+async function finishStop(daemon, name, org, drainMs, closedBy) {
+    // Process- and daemon-level handles come off FIRST, before anything that
+    // can throw. These used to be removed after captureCheckpoint(), so a
+    // throw there — which a half-started org can provoke, since it may be
+    // missing state a checkpoint expects — aborted the whole stop and left a
+    // process 'exit' listener, an interval and a broker lease behind for a run
+    // that no longer exists. startOrg()'s teardown-on-failure path swallows a
+    // rejecting stopOrg (it has its own error to report), so the leak was
+    // silent.
+    const cleanup = org._crashCleanup;
+    if (cleanup)
+        process.removeListener('exit', cleanup);
+    const wd = daemon.watchdogs.get(name);
+    if (wd) {
+        clearInterval(wd);
+        daemon.watchdogs.delete(name);
+    }
+    clearIdleRecord(daemon.root, name);
+    // The run's gates are authoritative; put them back over whatever the file
+    // holds now (a role may have rewritten it).
+    if (org.gates) {
+        try {
+            decisionOps.writeGates(daemon.root, name, org.gates);
+        }
+        catch {
+            /* the next start reads the last write-through */
+        }
+    }
+    daemon.leases.get(name)?.stop();
+    daemon.leases.delete(name);
+    // Capture THIS run's forwarder now: an autoWake-restart of the same org
+    // during the long tail below (agent wait, flush, history write) would
+    // register a NEW forwarder under the same name — settling/unsubscribing
+    // that one would sever the new run's dashboard stream.
+    const forwarder = daemon.forwarders.get(name);
+    // Snapshot checkpoint BEFORE closing mailboxes / draining sessions — the
+    // queue is emptied during the drain, so capturing afterwards loses all
+    // unconsumed messages (the whole point of checkpoint-resume). Best-effort:
+    // a run that cannot be checkpointed must still be stopped and cleaned up.
+    let stopCheckpoint;
+    try {
+        stopCheckpoint = captureCheckpoint(org, 'stopped');
+    }
+    catch (err) {
+        console.error(`org ${name}: could not capture the stop checkpoint:`, err instanceof Error ? err.message : err);
+    }
+    // #275: drop task dispatches still inside their coalescing window — the
+    // mailboxes they target are closed on the next line anyway.
+    for (const held of org.pendingDispatch?.values() ?? [])
+        clearTimeout(held.timer);
+    org.pendingDispatch?.clear();
+    for (const a of org.agents.values())
+        a.mailbox.close();
+    // Closing the mailbox stops new work being handed to a session, but does
+    // NOT cancel a turn already in flight (e.g. mid provider call) — that
+    // session can keep running, and eventually crash/finish, well past this
+    // function's own bounded drain below. Abort each slot's live incarnation
+    // too, reusing respawnRole's existing force-stop handle, so in-flight
+    // work is told to stop now instead of merely being denied new input.
+    for (const slot of org.roleSlots.values())
+        slot.abort?.abort();
+    // M1: kill every tool-provider process of this org's sessions.
+    daemon.toolProviders.closeOrg(name);
+    // M2: stop endpoint retry timers (queued entries stay queued).
+    stopEndpointRetries(daemon, name);
+    // Bounded: a genuinely hung agent session (stuck mid-tool-call, not just
+    // idle) must not make stopOrg() hang forever — callers like the scheduler
+    // already race their own timeout around a run, and this wait re-blocking
+    // unboundedly on the same never-resolving promises defeated that bound.
+    // A planned completion is not an abort. The boss declaring the cycle done
+    // says nothing about its siblings: they are routinely mid-build or mid-edit
+    // when it fires, and a 15s window SIGTERM'd them (exit 143, reported as
+    // "crashed") and threw the work away. allSettled resolves as soon as every
+    // session ends, so a long drain is a ceiling, not a delay.
+    const stopWaitMs = drainMs ?? daemon.opts.stopWaitMs ?? 15_000;
+    const allDone = Promise.allSettled([...org.agents.values()].map((a) => a.done)).then(() => false);
+    // Clear the ceiling timer once the sessions win the race: left pending, a
+    // COMPLETE_DRAIN_MS stop kept `org run` (which returns without
+    // process.exit on a clean completion) alive for up to five minutes after
+    // every session had already ended. Deliberately NOT unref'd — on the
+    // timed-out path this timer may be the only thing keeping the loop alive
+    // long enough to write 'stopped' to runtime.json and flush the bus.
+    let drainTimer;
+    const timedOut = await Promise.race([
+        allDone,
+        new Promise((r) => {
+            drainTimer = setTimeout(() => r(true), stopWaitMs);
+        }),
+    ]);
+    clearTimeout(drainTimer);
+    if (timedOut) {
+        // #152: "proceeding anyway" alone didn't say WHO got cut off — a run
+        // reviewer had no way to tell whether real, in-progress work (a
+        // mid-build, a mid-write) was force-stopped, or the drain window
+        // simply outlived a handful of already-idle sessions. status is only
+        // 'ended'/'crashed' once a role's session promise has actually
+        // settled; still 'running' here means it was mid-turn when the
+        // ceiling hit, not merely idle-but-not-yet-reaped.
+        const stillActive = [...org.agents.entries()]
+            .filter(([, a]) => a.status === 'running')
+            .map(([roleId]) => roleId);
+        const rosterSuffix = stillActive.length ? ` — still active: ${stillActive.join(', ')}` : '';
+        org.bus.emit({
+            type: 'audit',
+            msg: `org stop timed out after ${stopWaitMs}ms waiting for agent sessions to finish — proceeding anyway${rosterSuffix}`,
+            reason: 'stop-timeout',
+            data: { stillActive },
+        });
+        // Reap only SDK processes spawned by THIS node process — ownerPid filter
+        // ensures other `monomind org run` daemons' agents are untouched.
+        try {
+            const reaped = reapOrphanedSdkProcesses(new Set(), process.pid);
+            if (reaped > 0)
+                org.bus.emit({
+                    type: 'audit',
+                    reason: 'orphan-reap',
+                    msg: `reaped ${reaped} orphaned SDK process(es) after stop timeout`,
+                });
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+    // The run's sessions are gone: take down the sandbox stubs it held.
+    sandboxStubs.release(`${name}:${org.run}`);
+    // #302 truth gate: every stop path funnels through here, so this is the
+    // one place that can record how the run ACTUALLY ended, regardless of
+    // which of the five paths triggered it. `closedBy` is undefined only for
+    // a bare manual `stopOrg(name)` (CLI `org stop`, shutdown) — every
+    // automated path above now tags its own real cause. reporting.ts reads
+    // this event (reason: 'org-stopped') to decide whether the run's outcome
+    // may be rendered as a boss-attributed 'partial'/'achieved' at all: only
+    // closedBy === 'org-complete' may be.
+    const runnableTasks = org.taskDag?.pendingTaskCount() ?? 0;
+    // Rendered, not just recorded (#302 AC6, same reasoning as the
+    // blockerSuffix above): `org logs` prints `msg` verbatim.
+    const stopSuffix = closedBy && closedBy !== 'org-complete'
+        ? ` (${closedBy}${runnableTasks > 0 ? `, ${runnableTasks} task(s) left` : ''})`
+        : '';
+    org.bus.emit({
+        type: 'status',
+        reason: 'org-stopped',
+        msg: `org stopped${stopSuffix}`,
+        data: { closedBy, runnableTasks },
+    });
+    await org.bus.flush();
+    // Append this run's summary to <org>/history.jsonl — read back from the
+    // flushed bus.jsonl (the full durable record) rather than the bounded
+    // in-memory buffer, so long runs summarize completely.
+    //
+    // This block runs BEFORE the seal below (#293): storeRunMemory emits an
+    // audit event when the run's memory could not be stored, and a sealed bus
+    // fans out to in-memory listeners without ever reaching bus.jsonl — an
+    // event the live view shows and the durable record does not, which is both
+    // the divergence test-loop's `persisted` check exists to catch and useless
+    // to whoever reads the run back later. Sealing after it keeps every emitted
+    // event durable. The seal still closes before this function returns, which
+    // is what its own contract (below) is about.
+    try {
+        const events = readRunEvents(daemon.root, name, org.run);
+        if (events.length) {
+            const summary = summarizeRun(events);
+            const { appendFileSync } = await import('node:fs');
+            appendFileSync(historyFile(daemon.root, name), `${JSON.stringify(summary)}\n`, 'utf8');
+            // Cross-run memory: make this run's outcome recallable by meaning.
+            // #293: the result is CHECKED — a store that silently did nothing used
+            // to be indistinguishable from one that worked, and the symptom
+            // (org_recall always empty) showed up runs later with no trail. The
+            // reason is stashed for persistState() below so runtime.json — and
+            // therefore `org status` — carries it after the bus event and the
+            // stderr warning have scrolled away.
+            const memory = await daemon.storeRunMemory(name, org.def, org.run, summary, org.bus);
+            if (memory.stored)
+                daemon.memoryErrors.delete(name);
+            else
+                daemon.memoryErrors.set(name, memory.reason ?? 'unknown');
+        }
+    }
+    catch (err) {
+        console.error(`org ${name}: could not write run history:`, err instanceof Error ? err.message : err);
+    }
+    finally {
+        daemon.recallUsage.delete(name);
+        daemon.orgLearnedRuns.delete(`${name}:${org.run}`);
+    }
+    // flush() only awaits a snapshot of writes queued at call time (see its
+    // own doc comment) — it has no visibility into a session that crashes
+    // after the abort signal above but before this function returns. Seal
+    // the bus now so any such late bus.emit() still reaches in-memory
+    // listeners but can never schedule a new disk write into a run
+    // directory a caller (e.g. a test's afterEach) may already be deleting.
+    // seal() awaits the pending writes first, so the audit event the block
+    // above may have emitted is on disk before the bus closes.
+    await org.bus.seal();
+    // the "org stopped" event above triggers the forwarder's final org:complete /
+    // session:complete POST — without waiting for it here, the CLI process can exit
+    // (and kill the in-flight fetch) before that last event reaches the dashboard,
+    // leaving the run stuck showing "running" forever. Bounded: a stalled
+    // dashboard must not hang org shutdown indefinitely.
+    if (forwarder) {
+        await Promise.race([
+            forwarder.settle(),
+            new Promise((r) => {
+                const t = setTimeout(r, 5_000);
+                t.unref?.();
+            }),
+        ]);
+        forwarder.unsubscribe();
+        // Only remove from the map if it's still OURS — an autoWake-restart may
+        // have registered the new run's forwarder under this name meanwhile.
+        if (daemon.forwarders.get(name) === forwarder)
+            daemon.forwarders.delete(name);
+    }
+    // Same guard for runtime.json: if a new run started during shutdown, its
+    // 'running' record must not be overwritten with this old run's 'stopped'.
+    // Pass the org directly since we already removed it from the map.
+    if (!daemon.orgs.has(name))
+        daemon.persistState(name, 'stopped', org.run, org, stopCheckpoint, closedBy);
+    // Clean up git worktrees — shared (workspace: 'worktree') and per-role.
+    try {
+        const { execFileSync } = await import('node:child_process');
+        if (org.worktreePath) {
+            try {
+                execFileSync('git', ['worktree', 'remove', '--force', org.worktreePath], {
+                    cwd: daemon.root,
+                    stdio: 'ignore',
+                    timeout: 30_000,
+                });
+            }
+            catch {
+                /* best-effort */
+            }
+        }
+        for (const agent of org.agents.values()) {
+            if (agent.worktreePath) {
+                try {
+                    execFileSync('git', ['worktree', 'remove', '--force', agent.worktreePath], {
+                        cwd: daemon.root,
+                        stdio: 'ignore',
+                        timeout: 30_000,
+                    });
+                }
+                catch {
+                    /* best-effort */
+                }
+            }
+        }
+        // #301: roles create their own linked worktrees with Bash (paths the
+        // daemon never recorded — org.worktreePath/agent.worktreePath above are
+        // only ever set for workspace: 'worktree'/'worktree-per-role', empty
+        // for the common workspace: 'repo' shape), and deleting the working
+        // directory from inside a role sandbox leaves .git/worktrees/<name>
+        // behind — `git worktree list` then hides it, and it never gets
+        // cleaned up. Unconditional on purpose: gating this on
+        // org/agent.worktreePath would skip exactly the runs that hit the bug.
+        // prune only drops metadata whose worktree directory is already gone,
+        // so a live worktree — including the owner's — is never touched; it is
+        // idempotent; and the two removals just above already run `git
+        // worktree remove --force` against this same repo from this same cwd,
+        // so this is strictly less invasive than what already ships. Run after
+        // both removal loops so a worktree just removed is also pruned.
+        //
+        // Bounded race, measured rather than assumed (same treatment as the
+        // SIGKILL case above): an entry whose `gitdir` file is absent is
+        // pruned unconditionally, and `--expire` cannot protect it — measured
+        // across every window from `--expire=now` to `--expire=3.months.ago`,
+        // a fresh no-gitdir entry is removed regardless, while `--expire` also
+        // makes an already-deleted worktree SURVIVE, breaking the "a run
+        // always begins clean" guarantee this fix exists to provide. So a
+        // concurrent `git worktree add` by another process in this repo is
+        // vulnerable for the microseconds between its `mkdir` and its
+        // `gitdir` write. A mid-creation state cannot persist longer than
+        // that, so an entry found in that state is dead metadata, not a live
+        // worktree in progress.
+        try {
+            execFileSync('git', ['worktree', 'prune'], {
+                cwd: daemon.root,
+                stdio: 'ignore',
+                timeout: 30_000,
+            });
+        }
+        catch {
+            /* best-effort: not a git repo, git missing, or a wedged hook */
+        }
+    }
+    catch {
+        /* node:child_process unavailable — skip */
+    }
+}
+//# sourceMappingURL=org-stop.js.map

package/dist/src/orgrt/org-stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-stop.js","sourceRoot":"","sources":["../../../src/orgrt/org-stop.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,wEAAwE;AACxE,4EAA4E;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAiB,EACjB,IAAY,EACZ,IAA8C;IAE9C,kEAAkE;IAClE,gEAAgE;IAChE,qEAAqE;IACrE,+DAA+D;IAC/D,wBAAwB;IACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,kBAAkB;IACpC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,iCAAiC;IAC5D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,+EAA+E;IAC/E,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,QAAQ,CAAC;IAC9B,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAiB,EACjB,IAAY,EACZ,GAAe,EACf,OAAgB,EAChB,QAAiB;IAEjB,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,UAAU;IACV,MAAM,OAAO,GAAI,GAAmD,CAAC,aAAa,CAAC;IACnF,IAAI,OAAO;QAAE,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,EAAE,EAAE,CAAC;QACP,aAAa,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,0EAA0E;IAC1E,4CAA4C;IAC5C,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC;YACH,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,cAAgE,CAAC;IACrE,IAAI,CAAC;QACH,cAAc,GAAG,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,OAAO,IAAI,0CAA0C,EACrD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,4DAA4D;IAC5D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjF,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvD,yEAAyE;IACzE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,qEAAqE;IACrE,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;IAC/D,+DAA+D;IAC/D,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,+DAA+D;IAC/D,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,UAAU,GAAG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAClG,0EAA0E;IAC1E,+DAA+D;IAC/D,yEAAyE;IACzE,qEAAqE;IACrE,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,UAAqD,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QAClC,OAAO;QACP,IAAI,OAAO,CAAU,CAAC,CAAC,EAAE,EAAE;YACzB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;QACrD,CAAC,CAAC;KACH,CAAC,CAAC;IACH,YAAY,CAAC,UAAU,CAAC,CAAC;IACzB,IAAI,QAAQ,EAAE,CAAC;QACb,qEAAqE;QACrE,gEAAgE;QAChE,iEAAiE;QACjE,qEAAqE;QACrE,+DAA+D;QAC/D,+DAA+D;QAC/D,mDAAmD;QACnD,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;aACzC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,4BAA4B,UAAU,8DAA8D,YAAY,EAAE;YACvH,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,EAAE,WAAW,EAAE;SACtB,CAAC,CAAC;QACH,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,MAAM,GAAG,CAAC;gBACZ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,aAAa;oBACrB,GAAG,EAAE,UAAU,MAAM,8CAA8C;iBACpE,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,oEAAoE;IACpE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,mEAAmE;IACnE,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC3D,+DAA+D;IAC/D,0DAA0D;IAC1D,MAAM,UAAU,GACd,QAAQ,IAAI,QAAQ,KAAK,cAAc;QACrC,CAAC,CAAC,KAAK,QAAQ,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG;QAC/E,CAAC,CAAC,EAAE,CAAC;IACT,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,aAAa;QACrB,GAAG,EAAE,cAAc,UAAU,EAAE;QAC/B,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;KAClC,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACtB,wEAAwE;IACxE,sEAAsE;IACtE,uDAAuD;IACvD,EAAE;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,6CAA6C;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvF,mEAAmE;YACnE,uEAAuE;YACvE,gEAAgE;YAChE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,qCAAqC;YACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACrF,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;gBAC/C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,OAAO,IAAI,gCAAgC,EAC3C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,kEAAkE;IAClE,+DAA+D;IAC/D,wEAAwE;IACxE,uEAAuE;IACvE,2DAA2D;IAC3D,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,sEAAsE;IACtE,qDAAqD;IACrD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,SAAS,CAAC,MAAM,EAAE;YAClB,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;gBACtB,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC9B,CAA4B,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1C,CAAC,CAAC;SACH,CAAC,CAAC;QACH,SAAS,CAAC,WAAW,EAAE,CAAC;QACxB,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC/E,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE;oBACvE,GAAG,EAAE,MAAM,CAAC,IAAI;oBAChB,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE;wBACzE,GAAG,EAAE,MAAM,CAAC,IAAI;wBAChB,KAAK,EAAE,QAAQ;wBACf,OAAO,EAAE,MAAM;qBAChB,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QACD,qEAAqE;QACrE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,gEAAgE;QAChE,uDAAuD;QACvD,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,+DAA+D;QAC/D,sEAAsE;QACtE,uEAAuE;QACvE,gEAAgE;QAChE,EAAE;QACF,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,kEAAkE;QAClE,mEAAmE;QACnE,8DAA8D;QAC9D,kEAAkE;QAClE,qEAAqE;QACrE,wBAAwB;QACxB,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE;gBACzC,GAAG,EAAE,MAAM,CAAC,IAAI;gBAChB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;AACH,CAAC"}

package/dist/src/orgrt/org-tools.d.ts

@@ -0,0 +1,11 @@
+import type { OrgToolDef } from './agent-runner.js';
+import type { SessionOpts } from './session-types.js';
+/** Build the org tool surface as platform-agnostic OrgToolDef[]. The handlers
+ *  close over sessionOpts callbacks (deliver, recall, remember, …) — same
+ *  wiring as the previous inline createSdkMcpServer block, just decoupled from
+ *  the Claude SDK's tool() shape so any AgentRunner can host them.
+ *
+ *  Behaviour is identical to the old inline definitions: conditional tools are
+ *  gated on their callback being present, org_send/ask_human are always added. */
+export declare function buildOrgTools(opts: SessionOpts): OrgToolDef[];
+//# sourceMappingURL=org-tools.d.ts.map

package/dist/src/orgrt/org-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-tools.d.ts","sourceRoot":"","sources":["../../../src/orgrt/org-tools.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAOtD;;;;;;kFAMkF;AAClF,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,EAAE,CA0X7D"}