@orion-agents/orion-code 0.3.2 → 0.3.7

package/dist/runtime/product-bootstrap.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkspaceRuntimeKernelV1 = createWorkspaceRuntimeKernelV1;
 exports.createProductUiRuntime = createProductUiRuntime;
+const path_1 = require("path");
 const prompt_context_1 = require("../memory/prompt-context");
 const store_1 = require("../framework/store");
 const compact_1 = require("../services/compact");
@@ -12,7 +14,6 @@ const effort_1 = require("../services/effort");
 const model_context_1 = require("../services/model-context");
 const model_registry_1 = require("../services/model-registry");
 const project_instructions_1 = require("../services/project-instructions");
-const provider_resilience_1 = require("../services/provider-resilience");
 const settings_coordinator_1 = require("../services/settings-coordinator");
 const session_storage_1 = require("../services/session-storage");
 const usage_state_1 = require("../services/usage-state");
@@ -24,216 +25,232 @@ const session_composer_control_1 = require("./session-composer-control");
 const orion_session_runner_1 = require("./orion-session-runner");
 const product_orion_runtime_1 = require("./product-orion-runtime");
 const skills_1 = require("./skills");
+const workspace_runtime_kernel_1 = require("./workspace-runtime-kernel");
 /**
- * Shared product composition root for TUI, terminal, print and Web surfaces.
- *
- * Renderers receive the same Store, session runner, OrionRuntime and permission
- * bridge. Presentation layers must not construct an alternate agent loop.
+ * Composition root for one workspace-owned kernel. Web Hosts pool kernels per
+ * canonical Workspace so a Context switch can keep running Session actors on
+ * the config/Tool/MCP/Settings services they were created with, instead of
+ * rebuilding them against whatever Workspace is active at actor-start time.
  */
-async function createProductUiRuntime(options) {
+function createWorkspaceRuntimeKernelV1(options) {
+    const canonicalCwd = (0, path_1.resolve)(options.cwd);
     (0, config_dir_1.ensureConfigDir)();
     (0, global_config_1.recordFirstStartTime)();
-    const cwd = options.cwd;
-    const config = (0, config_1.loadConfig)(options.uiRenderer ? { ui: { renderer: options.uiRenderer } } : {});
-    const memoryContent = (0, prompt_context_1.buildMemoryPromptContext)('', cwd).content;
-    const projectInstructionsContent = (0, project_instructions_1.loadProjectInstructions)(cwd);
-    const firstPartyTools = (0, first_party_tool_universe_1.createProductionFirstPartyToolUniverseV1)({
-        context: { cwd, config: { name: config.name, mode: config.mode } },
+    const kernelConfig = (0, config_1.loadConfig)(options.uiRenderer ? { ui: { renderer: options.uiRenderer } } : {});
+    const kernelTools = (0, first_party_tool_universe_1.createProductionFirstPartyToolUniverseV1)({
+        context: {
+            cwd: canonicalCwd,
+            config: { name: kernelConfig.name, mode: kernelConfig.mode },
+        },
     });
-    const toolCatalog = firstPartyTools.catalog;
-    const skillProvider = (0, skills_1.createProductionFilesystemSkillProviderV1)({
-        cwd,
-        configuredPaths: config.skills?.paths,
+    const kernelSkillProvider = (0, skills_1.createProductionFilesystemSkillProviderV1)({
+        cwd: canonicalCwd,
+        configuredPaths: kernelConfig.skills?.paths,
     });
-    const mcpAdapter = (0, mcp_1.createFirstPartyMcpAdapterV1)({
+    const kernelMcpAdapter = (0, mcp_1.createFirstPartyMcpAdapterV1)({
         config: (0, mcp_1.loadFirstPartyMcpConfigurationV1)(),
-        baseDirectory: cwd,
-    });
-    const profileFor = (selector) => config.modelRegistry ? ((0, model_registry_1.lookupProfile)(config.modelRegistry, selector) ?? undefined) : undefined;
-    // `config.model` is already resolved through the explicit durable
-    // `defaultModel`. Keep the product default separate so unset agrees with
-    // loadConfig() on the next Host bootstrap.
-    const internalDefaultModelSelector = 'gpt-4o';
-    const initialProfile = profileFor(config.model) ?? config.modelRegistry?.defaultProfile ?? undefined;
-    let defaultModelSelector = config.modelRegistry?.defaultProfile?.id ?? config.model;
-    const resolveRuntimeEffort = (session) => (0, effort_1.resolveProfileEffort)(profileFor(session?.model ?? defaultModelSelector) ?? initialProfile, {
-        session: session?.effortPreference,
-        project: (0, global_config_1.getProjectConfig)(cwd).defaultEffort,
-        global: (0, global_config_1.loadGlobalConfig)().defaultEffort ?? config.defaultEffort,
+        baseDirectory: canonicalCwd,
     });
-    const initialEffort = resolveRuntimeEffort();
-    const store = new store_1.Store({
-        config,
-        tools: toolCatalog.entries.map(entry => entry.tool),
-        currentModel: config.model,
-        effortPreference: initialEffort.requested,
-        resolvedEffort: initialEffort,
-        memoryContent,
-        skillsContent: '',
-        projectInstructionsContent,
+    return new workspace_runtime_kernel_1.WorkspaceRuntimeKernelV1({
+        cwd: canonicalCwd,
+        config: kernelConfig,
+        toolUniverse: kernelTools,
+        skillProvider: kernelSkillProvider,
+        mcpAdapter: kernelMcpAdapter,
+        onSettingsInvalidated: options.onSettingsInvalidated,
     });
-    let llm = null;
-    let modelCoordinator;
-    const configured = config.modelRegistry
-        ? config.modelRegistry.defaultProfile !== null
-        : (0, config_1.isConfigured)(config);
-    if (configured) {
-        const defaultProvider = initialProfile
-            ? config.modelRegistry?.providers.get(initialProfile.provider)
-            : null;
-        llm = new llm_1.LLMService({
-            apiKey: defaultProvider
-                ? defaultProvider.apiKey.startsWith('$')
-                    ? (process.env[defaultProvider.apiKey.slice(1)] ?? '')
-                    : defaultProvider.apiKey
-                : config.apiKey,
-            baseUrl: defaultProvider?.baseUrl ?? config.apiBaseUrl,
-            model: initialProfile?.model ?? config.model,
-            fallbackModel: config.modelRegistry?.fallbackProfile?.model ?? config.fallbackModel,
-            providerProtocol: defaultProvider?.protocol,
-            reasoningCapability: initialProfile?.reasoningCapability,
-            fallbackReasoningCapability: config.modelRegistry?.fallbackProfile?.reasoningCapability,
-            effortPreference: initialEffort.requested,
+}
+/**
+ * Shared product composition root for TUI, terminal, print and Web surfaces.
+ *
+ * Renderers receive the same Store, session runner, OrionRuntime and permission
+ * bridge. Presentation layers must not construct an alternate agent loop.
+ */
+async function createProductUiRuntime(options) {
+    const canonicalCwd = (0, path_1.resolve)(options.cwd);
+    const cwd = canonicalCwd;
+    const ownsWorkspaceRuntimeKernel = options.workspaceRuntimeKernel === undefined;
+    let workspaceRuntimeKernel = options.workspaceRuntimeKernel;
+    if (!workspaceRuntimeKernel) {
+        workspaceRuntimeKernel = createWorkspaceRuntimeKernelV1({
+            cwd: canonicalCwd,
+            uiRenderer: options.uiRenderer,
+            onSettingsInvalidated: options.onSettingsInvalidated,
         });
-        llm.resilience = new provider_resilience_1.ProviderResilienceCoordinator();
-        modelCoordinator = new model_coordinator_1.ModelCoordinator();
-        if (config.modelRegistry && config.modelClientPool) {
-            modelCoordinator.bind(config.modelRegistry, config.modelClientPool);
-            modelCoordinator.initModel(initialProfile?.id ?? config.model);
-        }
-        if (config.apiBaseUrl) {
-            (0, model_context_1.discoverModelContexts)(config.apiBaseUrl, config.apiKey).catch(() => undefined);
-        }
     }
-    const compactCoordinator = new compact_1.CompactCoordinator({
-        modelId: llm?.getModel() ?? config.model,
-        llm,
-        outputReserveTokens: llm?.getMaxTokens?.(),
-        compactInstructions: (0, global_config_1.getProjectConfig)(cwd).compactInstructions,
-        getContextCapsule: () => store.getSnapshot().harnessState?.capsule,
-        getHarnessState: () => store.getSnapshot().harnessState,
-    });
-    let currentSession = null;
-    let sessionRunner;
-    let settingsRuntimeIdleProbe = () => true;
-    let shuttingDown = false;
-    let projectToolConfirmation = config.toolConfirmation;
-    const applySessionState = (session, resolvedEffortOverride) => {
-        const selector = session?.model ?? defaultModelSelector;
-        const profile = profileFor(selector);
-        const provider = profile ? config.modelRegistry?.providers.get(profile.provider) : undefined;
-        const effort = resolvedEffortOverride ?? resolveRuntimeEffort(session);
-        config.toolConfirmation = session?.toolConfirmationOverride ?? projectToolConfirmation;
-        if (profile) {
-            modelCoordinator?.initModel(profile.id);
-            if (provider && config.modelClientPool) {
-                llm?.setProviderClient(config.modelClientPool.getClient(provider));
-            }
-            llm?.setModel(profile.model);
-        }
-        else {
-            llm?.setModel(selector);
-        }
-        if (provider) {
-            llm?.setEffortContext({
-                preference: effort.requested,
-                protocol: provider.protocol,
-                capability: profile?.reasoningCapability,
-                fallbackCapability: config.modelRegistry?.fallbackProfile?.reasoningCapability,
+    else if (workspaceRuntimeKernel.cwd !== canonicalCwd) {
+        throw new Error('Workspace Runtime kernel does not match the requested working directory.');
+    }
+    let releaseSettingsRuntime;
+    try {
+        const config = workspaceRuntimeKernel.createRuntimeConfig();
+        const memoryContent = (0, prompt_context_1.buildMemoryPromptContext)('', cwd).content;
+        const projectInstructionsContent = (0, project_instructions_1.loadProjectInstructions)(cwd);
+        const toolCatalog = workspaceRuntimeKernel.toolUniverse.catalog;
+        const skillProvider = workspaceRuntimeKernel.skillProvider;
+        const mcpAdapter = workspaceRuntimeKernel.mcpAdapter;
+        const profileFor = (selector) => config.modelRegistry
+            ? ((0, model_registry_1.lookupProfile)(config.modelRegistry, selector) ?? undefined)
+            : undefined;
+        // `config.model` is already resolved through the explicit durable
+        // `defaultModel`. Keep the product default separate so unset agrees with
+        // loadConfig() on the next Host bootstrap.
+        const internalDefaultModelSelector = 'gpt-4o';
+        const initialProfile = profileFor(config.model) ?? config.modelRegistry?.defaultProfile ?? undefined;
+        let defaultModelSelector = config.modelRegistry?.defaultProfile?.id ?? config.model;
+        const resolveRuntimeEffort = (session) => (0, effort_1.resolveProfileEffort)(profileFor(session?.model ?? defaultModelSelector) ?? initialProfile, {
+            session: session?.effortPreference,
+            project: (0, global_config_1.getProjectConfig)(cwd).defaultEffort,
+            global: (0, global_config_1.loadGlobalConfig)().defaultEffort ?? config.defaultEffort,
+        });
+        const initialEffort = resolveRuntimeEffort();
+        const store = new store_1.Store({
+            config,
+            tools: toolCatalog.entries.map(entry => entry.tool),
+            currentModel: config.model,
+            effortPreference: initialEffort.requested,
+            resolvedEffort: initialEffort,
+            memoryContent,
+            skillsContent: '',
+            projectInstructionsContent,
+        });
+        let llm = null;
+        let modelCoordinator;
+        const configured = config.modelRegistry
+            ? config.modelRegistry.defaultProfile !== null
+            : (0, config_1.isConfigured)(config);
+        if (configured) {
+            const defaultProvider = initialProfile
+                ? config.modelRegistry?.providers.get(initialProfile.provider)
+                : null;
+            llm = new llm_1.LLMService({
+                apiKey: defaultProvider
+                    ? defaultProvider.apiKey.startsWith('$')
+                        ? (process.env[defaultProvider.apiKey.slice(1)] ?? '')
+                        : defaultProvider.apiKey
+                    : config.apiKey,
+                baseUrl: defaultProvider?.baseUrl ?? config.apiBaseUrl,
+                model: initialProfile?.model ?? config.model,
+                fallbackModel: config.modelRegistry?.fallbackProfile?.model ?? config.fallbackModel,
+                providerProtocol: defaultProvider?.protocol,
+                reasoningCapability: initialProfile?.reasoningCapability,
+                fallbackReasoningCapability: config.modelRegistry?.fallbackProfile?.reasoningCapability,
+                effortPreference: initialEffort.requested,
             });
+            llm.resilience = workspaceRuntimeKernel.providerResilience;
+            modelCoordinator = new model_coordinator_1.ModelCoordinator();
+            if (config.modelRegistry && config.modelClientPool) {
+                modelCoordinator.bind(config.modelRegistry, config.modelClientPool);
+                modelCoordinator.initModel(initialProfile?.id ?? config.model);
+            }
+            if (config.apiBaseUrl) {
+                (0, model_context_1.discoverModelContexts)(config.apiBaseUrl, config.apiKey).catch(() => undefined);
+            }
         }
-        store.setState({ currentModel: profile?.id ?? selector });
-        store.setEffort(effort.requested, effort);
-        compactCoordinator.configure({
-            modelId: profile?.model ?? selector,
+        const compactCoordinator = new compact_1.CompactCoordinator({
+            modelId: llm?.getModel() ?? config.model,
             llm,
             outputReserveTokens: llm?.getMaxTokens?.(),
+            compactInstructions: (0, global_config_1.getProjectConfig)(cwd).compactInstructions,
+            getContextCapsule: () => store.getSnapshot().harnessState?.capsule,
+            getHarnessState: () => store.getSnapshot().harnessState,
         });
-    };
-    const setSession = (session) => {
-        applySessionState(session);
-        currentSession = session;
-    };
-    const currentSessionSettings = () => {
-        if (!currentSession)
-            return undefined;
-        return {
-            model: currentSession.model,
-            effort: resolveRuntimeEffort(currentSession).requested,
-            overridesProjectEffort: currentSession.effortPreference !== undefined,
-        };
-    };
-    const ensureSession = () => {
-        if (!currentSession) {
-            defaultModelSelector =
-                settingsCoordinator?.describe().sections.defaults.model.effectiveValue ??
-                    defaultModelSelector;
-            const created = (0, session_storage_1.createSession)(cwd, defaultModelSelector);
-            (0, global_config_1.incrementSessionCount)();
-            setSession(created);
-            return created;
-        }
-        return currentSession;
-    };
-    const getSession = () => currentSession;
-    const prepareSettingsRuntime = (context) => {
-        const defaultModelOperation = context.operations.find(operation => operation.key === 'defaults.model');
-        const candidateDefaultModelSelector = defaultModelOperation?.op === 'set'
-            ? defaultModelOperation.value
-            : defaultModelOperation?.op === 'unset'
-                ? internalDefaultModelSelector
-                : defaultModelSelector;
-        const effortModelSelector = currentSession?.model ?? candidateDefaultModelSelector;
-        for (const operation of context.operations) {
-            if (operation.key === 'defaults.model') {
-                const candidate = operation.op === 'set' ? operation.value : internalDefaultModelSelector;
-                const configured = config.modelRegistry?.enabledProfiles.some(profile => profile.id === candidate);
-                if (config.modelRegistry && !configured) {
-                    throw new Error(`Model ${candidate} is not enabled in the configured registry.`);
+        let currentSession = null;
+        let sessionRunner;
+        let settingsRuntimeIdleProbe = () => true;
+        let shutdownResult;
+        let projectToolConfirmation = config.toolConfirmation;
+        const applySessionState = (session, resolvedEffortOverride) => {
+            const selector = session?.model ?? defaultModelSelector;
+            const profile = profileFor(selector);
+            const provider = profile ? config.modelRegistry?.providers.get(profile.provider) : undefined;
+            const effort = resolvedEffortOverride ?? resolveRuntimeEffort(session);
+            config.toolConfirmation = session?.toolConfirmationOverride ?? projectToolConfirmation;
+            if (profile) {
+                modelCoordinator?.initModel(profile.id);
+                if (provider && config.modelClientPool) {
+                    llm?.setProviderClient(config.modelClientPool.getClient(provider));
                 }
+                llm?.setModel(profile.model);
             }
-            if ((operation.key === 'defaults.effort' || operation.key === 'defaults.globalEffort') &&
-                operation.op === 'set' &&
-                operation.value !== 'auto') {
-                const profile = profileFor(effortModelSelector);
-                const resolved = (0, effort_1.resolveProfileEffort)(profile, { request: operation.value });
-                if (!resolved.supported) {
-                    throw new Error(`Effort ${operation.value} is unavailable for ${profile?.id ?? 'the active model'}.`);
-                }
-            }
-        }
-    };
-    const applySettingsRuntime = async (context) => {
-        const previousDefaultModel = defaultModelSelector;
-        const previousConfigModel = config.model;
-        const previousGlobalEffort = config.defaultEffort;
-        const previousToolConfirmation = config.toolConfirmation;
-        const previousProjectToolConfirmation = projectToolConfirmation;
-        const changesDefaultModel = context.operations.some(operation => operation.key === 'defaults.model');
-        const changesEffort = context.operations.some(operation => operation.key === 'defaults.effort' || operation.key === 'defaults.globalEffort');
-        const changesToolConfirmation = context.operations.some(operation => operation.key === 'permissions.toolConfirmation');
-        try {
-            if (changesDefaultModel) {
-                defaultModelSelector = context.document.sections.defaults.model.effectiveValue;
-                config.model = defaultModelSelector;
+            else {
+                llm?.setModel(selector);
             }
-            const globalEffortOperation = context.operations.find(operation => operation.key === 'defaults.globalEffort');
-            if (globalEffortOperation) {
-                config.defaultEffort =
-                    globalEffortOperation.op === 'set' ? globalEffortOperation.value : undefined;
+            if (provider) {
+                llm?.setEffortContext({
+                    preference: effort.requested,
+                    protocol: provider.protocol,
+                    capability: profile?.reasoningCapability,
+                    fallbackCapability: config.modelRegistry?.fallbackProfile?.reasoningCapability,
+                });
             }
-            if (changesToolConfirmation) {
-                projectToolConfirmation =
-                    context.document.sections.permissions.toolConfirmation.effectiveValue;
-            }
-            if (changesDefaultModel || changesEffort || changesToolConfirmation) {
-                applySessionState(currentSession);
+            store.setState({ currentModel: profile?.id ?? selector });
+            store.setEffort(effort.requested, effort);
+            compactCoordinator.configure({
+                modelId: profile?.model ?? selector,
+                llm,
+                outputReserveTokens: llm?.getMaxTokens?.(),
+            });
+        };
+        const setSession = (session) => {
+            applySessionState(session);
+            currentSession = session;
+        };
+        const currentSessionSettings = () => {
+            if (!currentSession)
+                return undefined;
+            return {
+                model: currentSession.model,
+                effort: resolveRuntimeEffort(currentSession).requested,
+                overridesProjectEffort: currentSession.effortPreference !== undefined,
+            };
+        };
+        const ensureSession = () => {
+            if (!currentSession) {
+                defaultModelSelector =
+                    settingsCoordinator?.describe().sections.defaults.model.effectiveValue ??
+                        defaultModelSelector;
+                const created = (0, session_storage_1.createSession)(cwd, defaultModelSelector);
+                (0, global_config_1.incrementSessionCount)();
+                setSession(created);
+                return created;
             }
-            if (changesToolConfirmation && sessionRunner && currentSession) {
-                await sessionRunner.restoreSession();
+            return currentSession;
+        };
+        const getSession = () => currentSession;
+        const prepareSettingsRuntime = (context) => {
+            const defaultModelOperation = context.operations.find(operation => operation.key === 'defaults.model');
+            const candidateDefaultModelSelector = defaultModelOperation?.op === 'set'
+                ? defaultModelOperation.value
+                : defaultModelOperation?.op === 'unset'
+                    ? internalDefaultModelSelector
+                    : defaultModelSelector;
+            const effortModelSelector = currentSession?.model ?? candidateDefaultModelSelector;
+            for (const operation of context.operations) {
+                if (operation.key === 'defaults.model') {
+                    const candidate = operation.op === 'set' ? operation.value : internalDefaultModelSelector;
+                    const configured = config.modelRegistry?.enabledProfiles.some(profile => profile.id === candidate);
+                    if (config.modelRegistry && !configured) {
+                        throw new Error(`Model ${candidate} is not enabled in the configured registry.`);
+                    }
+                }
+                if ((operation.key === 'defaults.effort' || operation.key === 'defaults.globalEffort') &&
+                    operation.op === 'set' &&
+                    operation.value !== 'auto') {
+                    const profile = profileFor(effortModelSelector);
+                    const resolved = (0, effort_1.resolveProfileEffort)(profile, { request: operation.value });
+                    if (!resolved.supported) {
+                        throw new Error(`Effort ${operation.value} is unavailable for ${profile?.id ?? 'the active model'}.`);
+                    }
+                }
             }
-        }
-        catch (error) {
+        };
+        const applySettingsRuntime = async (context) => {
+            const previousDefaultModel = defaultModelSelector;
+            const previousConfigModel = config.model;
+            const previousGlobalEffort = config.defaultEffort;
+            const previousToolConfirmation = config.toolConfirmation;
+            const previousProjectToolConfirmation = projectToolConfirmation;
             const previousEffortField = context.before.sections.defaults.effort;
             const previousResolvedEffort = (0, effort_1.resolveProfileEffort)(profileFor(currentSession?.model ?? previousDefaultModel) ?? initialProfile, {
                 session: currentSession?.effortPreference,
@@ -243,154 +260,204 @@ async function createProductUiRuntime(options) {
                         ? { global: previousEffortField.effectiveValue }
                         : {}),
             });
-            defaultModelSelector = previousDefaultModel;
-            config.model = previousConfigModel;
-            config.defaultEffort = previousGlobalEffort;
-            projectToolConfirmation = previousProjectToolConfirmation;
-            config.toolConfirmation = previousToolConfirmation;
-            // Coordinator rolls durable bytes back only after this callback rejects.
-            // Restore the live effort from the pre-write view instead of rereading
-            // the still-new project/global bytes during this catch path.
-            applySessionState(currentSession, previousResolvedEffort);
-            if (changesToolConfirmation && sessionRunner && currentSession) {
-                await sessionRunner.restoreSession().catch(() => undefined);
+            const changesDefaultModel = context.operations.some(operation => operation.key === 'defaults.model');
+            const changesEffort = context.operations.some(operation => operation.key === 'defaults.effort' || operation.key === 'defaults.globalEffort');
+            const changesToolConfirmation = context.operations.some(operation => operation.key === 'permissions.toolConfirmation');
+            let restored = false;
+            const restore = async () => {
+                if (restored)
+                    return;
+                restored = true;
+                defaultModelSelector = previousDefaultModel;
+                config.model = previousConfigModel;
+                config.defaultEffort = previousGlobalEffort;
+                projectToolConfirmation = previousProjectToolConfirmation;
+                config.toolConfirmation = previousToolConfirmation;
+                // Restore the live effort from the pre-write view instead of rereading
+                // the still-new project/global bytes during the coordinator rollback.
+                applySessionState(currentSession, previousResolvedEffort);
+                if (changesToolConfirmation && sessionRunner && currentSession) {
+                    await sessionRunner.restoreSession().catch(() => undefined);
+                }
+            };
+            try {
+                if (changesDefaultModel) {
+                    defaultModelSelector = context.document.sections.defaults.model.effectiveValue;
+                    config.model = defaultModelSelector;
+                }
+                const globalEffortOperation = context.operations.find(operation => operation.key === 'defaults.globalEffort');
+                if (globalEffortOperation) {
+                    config.defaultEffort =
+                        globalEffortOperation.op === 'set' ? globalEffortOperation.value : undefined;
+                }
+                if (changesToolConfirmation) {
+                    projectToolConfirmation =
+                        context.document.sections.permissions.toolConfirmation.effectiveValue;
+                }
+                if (changesDefaultModel || changesEffort || changesToolConfirmation) {
+                    applySessionState(currentSession);
+                }
+                if (changesToolConfirmation && sessionRunner && currentSession) {
+                    await sessionRunner.restoreSession();
+                }
+                return restore;
+            }
+            catch (error) {
+                try {
+                    await restore();
+                }
+                catch {
+                    throw new settings_coordinator_1.SettingsCoordinatorError(503, 'settings_recovery_required', 'The Session runtime could not restore its previous Settings state.');
+                }
+                throw error;
             }
-            throw error;
-        }
-    };
-    const settingsCoordinator = settings_coordinator_1.SettingsCoordinatorV1.create({
-        workspace: cwd,
-        onInvalidated: options.onSettingsInvalidated,
-        models: config.modelRegistry?.enabledProfiles.map(profile => ({
-            id: profile.id,
-            label: profile.displayName ?? profile.id,
-            provider: profile.provider,
-        })),
-        internalDefaultModel: internalDefaultModelSelector,
-        modelDefaultEffort: 'auto',
-        internalToolConfirmation: 'allow',
-        runtimeIdle: () => settingsRuntimeIdleProbe(),
-        runtimePrepare: prepareSettingsRuntime,
-        runtimeApply: applySettingsRuntime,
-    });
-    defaultModelSelector = settingsCoordinator.describe().sections.defaults.model.effectiveValue;
-    const describeSettings = () => settingsCoordinator.describe({
-        currentSession: currentSessionSettings(),
-        runtime: { busy: !settingsRuntimeIdleProbe() },
-    });
-    const updateSettings = input => settingsCoordinator.update({
-        ...input,
-        currentSession: currentSessionSettings(),
-        runtime: { busy: !settingsRuntimeIdleProbe() },
-    });
-    const synchronizeSettings = () => settingsCoordinator.synchronizeExternalChanges({
-        currentSession: currentSessionSettings(),
-        runtime: { busy: !settingsRuntimeIdleProbe() },
-    });
-    const bindSettingsRuntimeIdleProbe = probe => {
-        settingsRuntimeIdleProbe = probe;
-        return () => {
-            if (settingsRuntimeIdleProbe === probe)
-                settingsRuntimeIdleProbe = () => true;
         };
-    };
-    const costTracker = store.getSnapshot().costTracker;
-    costTracker.setRecordSink(record => {
-        (0, usage_state_1.appendUsageRecord)(record, { sessionId: currentSession?.id, projectPath: cwd });
-    });
-    const unsubscribeLlmUsage = llm?.subscribeUsage(event => {
-        costTracker.record(event.usage, { model: event.model, requestKind: event.operation });
-    });
-    const shutdown = async () => {
-        if (shuttingDown)
-            return;
-        shuttingDown = true;
-        settingsCoordinator?.close();
-        await sessionRunner?.close(options.shutdownReason ?? 'Orion product runtime shutdown');
-        if (currentSession) {
-            const messages = (0, session_storage_1.readSessionMessages)(currentSession.id);
-            if (messages.length > 0)
-                (0, session_storage_1.updateSessionSummary)(currentSession.id, messages);
-            (0, session_storage_1.endSession)(currentSession.id);
-        }
-        unsubscribeLlmUsage?.();
-    };
-    const createAgentRunner = llm
-        ? (events, runnerOptions) => {
-            if (sessionRunner)
+        const settingsCoordinator = workspaceRuntimeKernel.settingsCoordinator;
+        releaseSettingsRuntime = workspaceRuntimeKernel.registerSettingsRuntime({
+            runtimeIdle: () => settingsRuntimeIdleProbe(),
+            runtimePrepare: prepareSettingsRuntime,
+            runtimeApply: applySettingsRuntime,
+        });
+        const initialSettingsDocument = settingsCoordinator.describe();
+        defaultModelSelector = initialSettingsDocument.sections.defaults.model.effectiveValue;
+        projectToolConfirmation =
+            initialSettingsDocument.sections.permissions.toolConfirmation.effectiveValue;
+        config.toolConfirmation = projectToolConfirmation;
+        const describeSettings = () => settingsCoordinator.describe({
+            currentSession: currentSessionSettings(),
+            runtime: { busy: !workspaceRuntimeKernel.runtimeIdle() },
+        });
+        const updateSettings = input => settingsCoordinator.update({
+            ...input,
+            currentSession: currentSessionSettings(),
+            runtime: { busy: !workspaceRuntimeKernel.runtimeIdle() },
+        });
+        const synchronizeSettings = () => settingsCoordinator.synchronizeExternalChanges({
+            currentSession: currentSessionSettings(),
+            runtime: { busy: !workspaceRuntimeKernel.runtimeIdle() },
+        });
+        const bindSettingsRuntimeIdleProbe = probe => {
+            settingsRuntimeIdleProbe = probe;
+            return () => {
+                if (settingsRuntimeIdleProbe === probe)
+                    settingsRuntimeIdleProbe = () => true;
+            };
+        };
+        const costTracker = store.getSnapshot().costTracker;
+        costTracker.setRecordSink(record => {
+            (0, usage_state_1.appendUsageRecord)(record, { sessionId: currentSession?.id, projectPath: cwd });
+        });
+        const unsubscribeLlmUsage = llm?.subscribeUsage(event => {
+            costTracker.record(event.usage, { model: event.model, requestKind: event.operation });
+        });
+        const shutdown = () => {
+            if (shutdownResult)
+                return shutdownResult;
+            shutdownResult = (async () => {
+                releaseSettingsRuntime?.();
+                try {
+                    await sessionRunner?.close(options.shutdownReason ?? 'Orion product runtime shutdown');
+                    if (currentSession) {
+                        const messages = (0, session_storage_1.readSessionMessages)(currentSession.id);
+                        if (messages.length > 0)
+                            (0, session_storage_1.updateSessionSummary)(currentSession.id, messages);
+                        (0, session_storage_1.endSession)(currentSession.id);
+                    }
+                }
+                finally {
+                    unsubscribeLlmUsage?.();
+                    if (ownsWorkspaceRuntimeKernel)
+                        workspaceRuntimeKernel.releaseOwner();
+                }
+            })();
+            return shutdownResult;
+        };
+        const createAgentRunner = llm
+            ? (events, runnerOptions) => {
+                if (sessionRunner)
+                    return sessionRunner;
+                sessionRunner = new orion_session_runner_1.OrionSessionRunnerV1({
+                    eventSink: events,
+                    getSessionId: () => ensureSession().id,
+                    createRuntime: (sessionId, activation) => (0, product_orion_runtime_1.createProductOrionRuntimeV1)({
+                        cwd,
+                        config,
+                        store,
+                        llm: llm,
+                        compactCoordinator,
+                        toolCatalog,
+                        skillProviders: [skillProvider],
+                        mcpDescriptors: mcpAdapter.descriptors,
+                        mcpConnector: mcpAdapter.connector,
+                        approvalHandler: runnerOptions.approvalHandler,
+                        workspaceMutationCoordinator: options.workspaceMutationCoordinator,
+                        providerRequestGate: workspaceRuntimeKernel.providerRequestGate,
+                    }, sessionId, activation),
+                    mode: () => {
+                        const mode = store.getSnapshot().agentMode;
+                        return mode === 'plan' ? 'plan' : mode === 'auto' ? 'auto' : 'build';
+                    },
+                    onActiveRuntime: options.onActiveSessionRuntime,
+                    replayHistoryOnRestore: runnerOptions.replayHistoryOnRestore,
+                });
                 return sessionRunner;
-            sessionRunner = new orion_session_runner_1.OrionSessionRunnerV1({
-                eventSink: events,
-                getSessionId: () => ensureSession().id,
-                createRuntime: (sessionId, activation) => (0, product_orion_runtime_1.createProductOrionRuntimeV1)({
-                    cwd,
-                    config,
-                    store,
-                    llm: llm,
-                    compactCoordinator,
-                    toolCatalog,
-                    skillProviders: [skillProvider],
-                    mcpDescriptors: mcpAdapter.descriptors,
-                    mcpConnector: mcpAdapter.connector,
-                    approvalHandler: runnerOptions.approvalHandler,
-                }, sessionId, activation),
-                mode: () => {
-                    const mode = store.getSnapshot().agentMode;
-                    return mode === 'plan' ? 'plan' : mode === 'auto' ? 'auto' : 'build';
-                },
-                onActiveRuntime: options.onActiveSessionRuntime,
-                replayHistoryOnRestore: runnerOptions.replayHistoryOnRestore,
-            });
-            return sessionRunner;
-        }
-        : undefined;
-    const inspectSkills = async () => {
-        const controller = new AbortController();
-        const observation = await skillProvider.list({ id: `product:${cwd}`, sourceScopeOrder: undefined }, controller.signal);
-        return observation.descriptors;
-    };
-    const rebindSessionRuntime = async () => {
-        if (sessionRunner && currentSession)
-            await sessionRunner.restoreSession();
-    };
-    const sessionComposerControls = new session_composer_control_1.SessionComposerControlServiceV1({
-        cwd,
-        config,
-        store,
-        llm,
-        compactCoordinator,
-        modelCoordinator,
-        getSession,
-        ensureSession,
-        projectToolConfirmation: () => projectToolConfirmation,
-        applySessionState,
-        rebindSessionRuntime,
-        runtimeIdle: () => settingsRuntimeIdleProbe(),
-    });
-    return {
-        cwd,
-        version: version_1.PACKAGE_VERSION,
-        config,
-        store,
-        llm,
-        compactCoordinator,
-        modelCoordinator,
-        sessionComposerControls,
-        createAgentRunner,
-        getHarnessDiagnostics: async () => sessionRunner?.diagnostics(),
-        inspectSkills,
-        inspectMcp: () => mcpAdapter.descriptors,
-        rebindSessionRuntime,
-        settingsCoordinator,
-        describeSettings,
-        updateSettings,
-        synchronizeSettings,
-        bindSettingsRuntimeIdleProbe,
-        isConfigured: (0, config_1.isConfigured)(config),
-        ensureSession,
-        setSession,
-        getSession,
-        shutdown,
-    };
+            }
+            : undefined;
+        const inspectSkills = async () => {
+            const controller = new AbortController();
+            const observation = await skillProvider.list({ id: `product:${cwd}`, sourceScopeOrder: undefined }, controller.signal);
+            return observation.descriptors;
+        };
+        const rebindSessionRuntime = async () => {
+            if (sessionRunner && currentSession)
+                await sessionRunner.restoreSession();
+        };
+        const sessionComposerControls = new session_composer_control_1.SessionComposerControlServiceV1({
+            cwd,
+            config,
+            store,
+            llm,
+            compactCoordinator,
+            modelCoordinator,
+            getSession,
+            ensureSession,
+            projectToolConfirmation: () => projectToolConfirmation,
+            applySessionState,
+            rebindSessionRuntime,
+            runtimeIdle: () => settingsRuntimeIdleProbe(),
+        });
+        return {
+            cwd,
+            version: version_1.PACKAGE_VERSION,
+            config,
+            store,
+            llm,
+            compactCoordinator,
+            modelCoordinator,
+            sessionComposerControls,
+            workspaceRuntimeKernel,
+            createAgentRunner,
+            getHarnessDiagnostics: async () => sessionRunner?.diagnostics(),
+            inspectSkills,
+            inspectMcp: () => mcpAdapter.descriptors,
+            rebindSessionRuntime,
+            settingsCoordinator,
+            describeSettings,
+            updateSettings,
+            synchronizeSettings,
+            bindSettingsRuntimeIdleProbe,
+            isConfigured: (0, config_1.isConfigured)(config),
+            ensureSession,
+            setSession,
+            getSession,
+            shutdown,
+        };
+    }
+    catch (error) {
+        releaseSettingsRuntime?.();
+        if (ownsWorkspaceRuntimeKernel)
+            workspaceRuntimeKernel.releaseOwner();
+        throw error;
+    }
 }
 //# sourceMappingURL=product-bootstrap.js.map