@polpo-ai/core 0.15.144 → 0.16.0

package/dist/mcp-capability.d.ts

@@ -0,0 +1,40 @@
+import type { ToolInvocationContext } from "./tool-invocation.js";
+import type { McpServerConfig } from "./types/agent.js";
+/** Non-secret tool inventory verified by the host. Discovery grants no access. */
+export interface McpCapabilityTool {
+    readonly name: string;
+    readonly description?: string;
+    readonly inputSchema: Readonly<Record<string, unknown>>;
+}
+export interface McpCapabilityResolveInput {
+    readonly serverName: string;
+    readonly toolName: string;
+    readonly toolCallId: string;
+    readonly invocation: ToolInvocationContext;
+    readonly signal?: AbortSignal;
+}
+/** One acquired account and one authorized MCP operation. HTTP destinations,
+ * credentials and physical Connection identifiers remain entirely host-owned. */
+export interface ResolvedMcpCapability {
+    call(arguments_: Record<string, unknown>): Promise<unknown>;
+    dispose(): void | Promise<void>;
+}
+export interface McpCapabilityResolver {
+    resolve(input: McpCapabilityResolveInput): Promise<ResolvedMcpCapability>;
+}
+export interface McpRuntimeCapabilityProvider {
+    readonly tools: readonly McpCapabilityTool[];
+    readonly resolver: McpCapabilityResolver;
+    /** Host-only diagnostics; raw errors must never enter model tool results.
+     * The host applies its own redaction before persisting audit/log records. */
+    readonly onError?: (error: unknown, input: McpCapabilityResolveInput) => void | Promise<void>;
+}
+export type McpRuntimeCapabilities = Readonly<Record<string, McpRuntimeCapabilityProvider>>;
+/** Process-local host port. Inventory is non-secret and authorizes no call. */
+export type ResolveMcpRuntimeCapabilities = (input: {
+    agentName: string;
+    mcpServers?: Readonly<Record<string, McpServerConfig>>;
+    invocation: ToolInvocationContext;
+    signal?: AbortSignal;
+}) => McpRuntimeCapabilities | Promise<McpRuntimeCapabilities>;
+//# sourceMappingURL=mcp-capability.d.ts.map

package/dist/mcp-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-capability.d.ts","sourceRoot":"","sources":["../src/mcp-capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;iFACiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC;iFAC6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/F;AAED,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAE5F,+EAA+E;AAC/E,MAAM,MAAM,6BAA6B,GAAG,CAAC,KAAK,EAAE;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACvD,UAAU,EAAE,qBAAqB,CAAC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,KAAK,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC"}

package/dist/mcp-capability.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp-capability.js.map

package/dist/mcp-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-capability.js","sourceRoot":"","sources":["../src/mcp-capability.ts"],"names":[],"mappings":""}

package/dist/mcp-runner.d.ts

@@ -0,0 +1,45 @@
+import { z } from "zod";
+import type { ResolveMcpRuntimeCapabilities } from "./mcp-capability.js";
+export declare const MCP_RUNNER_LEASE_VERSION = 2;
+export declare const MAX_MCP_RUNNER_REQUEST_BYTES: number;
+export declare const MAX_MCP_RUNNER_RESPONSE_BYTES: number;
+export declare const MCP_RUNNER_REQUEST_TIMEOUT_MS = 30000;
+/** Host-to-process bootstrap, never part of persisted RunnerConfig or model input.
+ * The bearer authorizes a run lease, not a provider account or provider URL. */
+export declare const McpRunnerLeasePayloadSchema: z.ZodObject<{
+    version: z.ZodLiteral<2>;
+    url: z.ZodString;
+    token: z.ZodString;
+    sandboxId: z.ZodString;
+    agentName: z.ZodString;
+    agentIdentity: z.ZodPipe<z.ZodUnknown, z.ZodTransform<import("./agent-store.js").AgentIdentity, unknown>>;
+    runId: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type McpRunnerLeasePayload = z.infer<typeof McpRunnerLeasePayloadSchema>;
+/** No identity, destination, credential or permission overrides from the runner. */
+export declare const McpRunnerRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    operation: z.ZodLiteral<"inventory">;
+}, z.core.$strict>, z.ZodObject<{
+    operation: z.ZodLiteral<"call">;
+    capability: z.ZodString;
+    toolCallId: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strict>], "operation">;
+export type McpRunnerRequest = z.infer<typeof McpRunnerRequestSchema>;
+export declare const McpRunnerInventorySchema: z.ZodArray<z.ZodObject<{
+    serverName: z.ZodString;
+    tools: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strict>>;
+}, z.core.$strict>>;
+export type McpRunnerInventory = z.infer<typeof McpRunnerInventorySchema>;
+/** Remote implementation of the process-local MCP port. Provider refresh,
+ * account selection and native MCP sessions stay on the trusted broker. */
+export declare function createRemoteMcpRuntimeCapabilities(input: McpRunnerLeasePayload, options?: {
+    fetch?: typeof globalThis.fetch;
+    allowLoopbackHttp?: boolean;
+}): ResolveMcpRuntimeCapabilities;
+//# sourceMappingURL=mcp-runner.d.ts.map

package/dist/mcp-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-runner.d.ts","sourceRoot":"","sources":["../src/mcp-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAIzE,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,eAAO,MAAM,4BAA4B,QAAa,CAAC;AACvD,eAAO,MAAM,6BAA6B,QAAkB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAIpD;gFACgF;AAChF,eAAO,MAAM,2BAA2B;;;;;;;;;kBAY2E,CAAC;AACpH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,oFAAoF;AACpF,eAAO,MAAM,sBAAsB;;;;;;;iCAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;;;;mBAgBnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AA8D1E;2EAC2E;AAC3E,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,qBAAqB,EAC5B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7E,6BAA6B,CAoF/B"}

package/dist/mcp-runner.js

@@ -0,0 +1,238 @@
+import { z } from "zod";
+import { ConnectionSelectionError } from "./connection-capability.js";
+import { normalizeAgentIdentity } from "./agent-store.js";
+import { createToolInvocationContext } from "./tool-invocation.js";
+export const MCP_RUNNER_LEASE_VERSION = 2;
+export const MAX_MCP_RUNNER_REQUEST_BYTES = 256 * 1024;
+export const MAX_MCP_RUNNER_RESPONSE_BYTES = 2 * 1024 * 1024;
+export const MCP_RUNNER_REQUEST_TIMEOUT_MS = 30_000;
+const name = z.string().min(1).max(256).regex(/^[A-Za-z0-9_.-]+$/);
+const identifier = z.string().min(1).max(512).refine(value => value.trim() === value && !/[\u0000-\u001f\u007f]/.test(value));
+/** Host-to-process bootstrap, never part of persisted RunnerConfig or model input.
+ * The bearer authorizes a run lease, not a provider account or provider URL. */
+export const McpRunnerLeasePayloadSchema = z.object({
+    version: z.literal(MCP_RUNNER_LEASE_VERSION),
+    url: z.string().min(1).max(2048),
+    token: z.string().min(1).max(512).regex(/^[A-Za-z0-9_-]+$/),
+    sandboxId: identifier,
+    agentName: identifier,
+    agentIdentity: z.unknown().transform((value, context) => {
+        try {
+            return normalizeAgentIdentity(value);
+        }
+        catch {
+            context.addIssue({ code: "custom", message: "Invalid agent identity" });
+            return z.NEVER;
+        }
+    }),
+    runId: identifier,
+    expiresAt: z.iso.datetime(),
+}).strict().refine(value => value.agentIdentity.name === value.agentName, { message: "Mismatched agent identity" });
+/** No identity, destination, credential or permission overrides from the runner. */
+export const McpRunnerRequestSchema = z.discriminatedUnion("operation", [
+    z.object({ operation: z.literal("inventory") }).strict(),
+    z.object({ operation: z.literal("call"), capability: z.string().min(1).max(1024),
+        toolCallId: identifier, arguments: z.record(z.string(), z.unknown()) }).strict(),
+]);
+export const McpRunnerInventorySchema = z.array(z.object({
+    serverName: name,
+    tools: z.array(z.object({ name, description: z.string().max(32_768).optional(),
+        inputSchema: z.record(z.string(), z.unknown()) }).strict()).max(512),
+}).strict()).max(128).superRefine((inventory, ctx) => {
+    const servers = new Set();
+    const capabilities = new Set();
+    for (const entry of inventory) {
+        if (servers.has(entry.serverName))
+            ctx.addIssue({ code: "custom", message: "Duplicate MCP namespace" });
+        servers.add(entry.serverName);
+        for (const tool of entry.tools) {
+            const capability = `mcp__${entry.serverName}__${tool.name}`;
+            if (capabilities.has(capability))
+                ctx.addIssue({ code: "custom", message: "Ambiguous MCP capability" });
+            capabilities.add(capability);
+        }
+    }
+});
+const unavailable = () => new ConnectionSelectionError("connection_scope_denied", "MCP capability is no longer available");
+const failed = () => new Error("MCP broker request failed");
+class McpDispatchLimitError extends Error {
+    retryAfterSeconds;
+    code = "rate_limited";
+    constructor(retryAfterSeconds) {
+        super(`Connection request limit exceeded; retry after ${retryAfterSeconds} seconds`);
+        this.retryAfterSeconds = retryAfterSeconds;
+    }
+}
+function bounded(signal, work) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted) {
+            reject(unavailable());
+            return;
+        }
+        const abort = () => reject(unavailable());
+        signal.addEventListener("abort", abort, { once: true });
+        Promise.resolve().then(() => {
+            if (signal.aborted)
+                throw unavailable();
+            return work();
+        }).then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+    });
+}
+async function responseJson(response, signal) {
+    if ((!response.ok && response.status !== 429) || Number(response.headers.get("content-length")) > MAX_MCP_RUNNER_RESPONSE_BYTES) {
+        void response.body?.cancel().catch(() => undefined);
+        throw failed();
+    }
+    if (!response.body)
+        throw failed();
+    const reader = response.body.getReader();
+    const chunks = [];
+    let size = 0;
+    try {
+        while (true) {
+            const chunk = await bounded(signal, () => reader.read());
+            if (chunk.done)
+                break;
+            size += chunk.value.byteLength;
+            if (size > MAX_MCP_RUNNER_RESPONSE_BYTES)
+                throw failed();
+            chunks.push(chunk.value);
+        }
+    }
+    finally {
+        void reader.cancel().catch(() => undefined);
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    const envelope = JSON.parse(new TextDecoder().decode(bytes));
+    if (response.status === 429) {
+        const retry = envelope?.error?.retryAfterSeconds;
+        if (envelope?.ok === false && envelope.error?.code === "rate_limited"
+            && typeof retry === "number" && Number.isSafeInteger(retry) && retry >= 1 && retry <= 86400) {
+            // Only this allowlisted code and validated integer may cross the broker.
+            // Never reflect the remote message, details, URL or other envelope fields.
+            throw new McpDispatchLimitError(retry);
+        }
+        throw failed();
+    }
+    if (!envelope || envelope.ok !== true || !Object.hasOwn(envelope, "data")
+        || Object.keys(envelope).some(key => key !== "ok" && key !== "data"))
+        throw failed();
+    return envelope.data;
+}
+/** Remote implementation of the process-local MCP port. Provider refresh,
+ * account selection and native MCP sessions stay on the trusted broker. */
+export function createRemoteMcpRuntimeCapabilities(input, options = {}) {
+    const parsed = McpRunnerLeasePayloadSchema.safeParse(input);
+    if (!parsed.success)
+        throw failed();
+    const lease = Object.freeze(parsed.data);
+    let url;
+    try {
+        url = new URL(lease.url);
+    }
+    catch {
+        throw failed();
+    }
+    const loopback = options.allowLoopbackHttp && url.protocol === "http:"
+        && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+    if ((url.protocol !== "https:" && !loopback) || url.username || url.password || url.search || url.hash)
+        throw failed();
+    const endpoint = url.toString();
+    const fetcher = options.fetch ?? globalThis.fetch;
+    const expiresAt = Date.parse(lease.expiresAt);
+    const assertActive = () => { if (expiresAt <= Date.now())
+        throw unavailable(); };
+    const assertInvocation = (value) => {
+        let invocation;
+        try {
+            invocation = createToolInvocationContext(value);
+        }
+        catch {
+            throw unavailable();
+        }
+        if (invocation.runId !== lease.runId || invocation.agent?.name !== lease.agentIdentity.name
+            || invocation.agent.incarnation !== lease.agentIdentity.incarnation)
+            throw unavailable();
+    };
+    const send = async (request, signals = []) => {
+        assertActive();
+        const controller = new AbortController();
+        const abort = () => controller.abort();
+        const timer = setTimeout(abort, Math.min(MCP_RUNNER_REQUEST_TIMEOUT_MS, expiresAt - Date.now()));
+        for (const signal of signals) {
+            signal?.addEventListener("abort", abort, { once: true });
+            if (signal?.aborted)
+                abort();
+        }
+        try {
+            const body = JSON.stringify(McpRunnerRequestSchema.parse(request));
+            if (new TextEncoder().encode(body).byteLength > MAX_MCP_RUNNER_REQUEST_BYTES)
+                throw failed();
+            const response = await bounded(controller.signal, async () => {
+                const response = await fetcher(endpoint, {
+                    method: "POST", redirect: "error", signal: controller.signal,
+                    headers: { "content-type": "application/json", authorization: `Bearer ${lease.token}`, "x-polpo-sandbox-id": lease.sandboxId },
+                    body,
+                });
+                if (controller.signal.aborted) {
+                    void response.body?.cancel().catch(() => undefined);
+                    throw unavailable();
+                }
+                return response;
+            });
+            return await responseJson(response, controller.signal);
+        }
+        catch (error) {
+            // No response body, raw URL, fetch exception or bearer in model-visible errors.
+            if (!controller.signal.aborted && error instanceof McpDispatchLimitError)
+                throw error;
+            throw controller.signal.aborted ? unavailable() : failed();
+        }
+        finally {
+            clearTimeout(timer);
+            for (const signal of signals)
+                signal?.removeEventListener("abort", abort);
+        }
+    };
+    return async (input) => {
+        assertActive();
+        if (input.agentName !== lease.agentName)
+            throw unavailable();
+        assertInvocation(input.invocation);
+        const parsedInventory = McpRunnerInventorySchema.safeParse(await send({ operation: "inventory" }, [input.signal]));
+        if (!parsedInventory.success)
+            throw failed();
+        return Object.fromEntries(parsedInventory.data.map(entry => [entry.serverName, {
+                tools: entry.tools,
+                resolver: {
+                    resolve: async (request) => {
+                        assertActive();
+                        assertInvocation(request.invocation);
+                        if (request.signal?.aborted || request.serverName !== entry.serverName
+                            || !entry.tools.some(tool => tool.name === request.toolName))
+                            throw unavailable();
+                        const controller = new AbortController();
+                        const capability = `mcp__${entry.serverName}__${request.toolName}`;
+                        const toolCallId = request.toolCallId;
+                        const signal = request.signal;
+                        let used = false;
+                        return {
+                            async call(arguments_) {
+                                if (used || controller.signal.aborted)
+                                    throw unavailable();
+                                used = true;
+                                return send({ operation: "call", capability, toolCallId, arguments: arguments_ }, [signal, controller.signal]);
+                            },
+                            dispose: () => controller.abort(),
+                        };
+                    },
+                },
+            }]));
+    };
+}
+//# sourceMappingURL=mcp-runner.js.map

package/dist/mcp-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-runner.js","sourceRoot":"","sources":["../src/mcp-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAA8B,MAAM,sBAAsB,CAAC;AAE/F,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AACpD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACnE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAE9H;gFACgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC3D,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,UAAU;IACrB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACtD,IAAI,CAAC;YAAC,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC7C,MAAM,CAAC;YAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC,KAAK,CAAC;QAAC,CAAC;IACpG,CAAC,CAAC;IACF,KAAK,EAAE,UAAU;IACjB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;AAGpH,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;IACtE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACxD,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9E,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACnF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACvD,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;QAC5E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACvE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,QAAQ,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5D,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACxG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGH,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,wBAAwB,CAAC,yBAAyB,EAAE,uCAAuC,CAAC,CAAC;AAC3H,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC5D,MAAM,qBAAsB,SAAQ,KAAK;IAElB;IADZ,IAAI,GAAG,cAAc,CAAC;IAC/B,YAAqB,iBAAyB;QAC5C,KAAK,CAAC,kDAAkD,iBAAiB,UAAU,CAAC,CAAC;QADlE,sBAAiB,GAAjB,iBAAiB,CAAQ;IAE9C,CAAC;CACF;AAED,SAAS,OAAO,CAAI,MAAmB,EAAE,IAAsB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YAC1B,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,WAAW,EAAE,CAAC;YACxC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,MAAmB;IACjE,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,6BAA6B,EAAE,CAAC;QAChI,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,MAAM,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM;YACtB,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,IAAI,GAAG,6BAA6B;gBAAE,MAAM,MAAM,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC;QACjD,IAAI,QAAQ,EAAE,EAAE,KAAK,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,cAAc;eAChE,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YAC9F,yEAAyE;YACzE,2EAA2E;YAC3E,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;WACpE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,CAAC;QAAE,MAAM,MAAM,EAAE,CAAC;IACvF,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,kCAAkC,CAChD,KAA4B,EAC5B,UAA4E,EAAE;IAE9E,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,MAAM,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,MAAM,EAAE,CAAC;IAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;WACjE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,MAAM,EAAE,CAAC;IACvH,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,GAAG,EAAE,GAAG,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,gBAAgB,GAAG,CAAC,KAA4B,EAAE,EAAE;QACxD,IAAI,UAAiC,CAAC;QACtC,IAAI,CAAC;YAAC,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAAC,CAAC;QACvF,IAAI,UAAU,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,aAAa,CAAC,IAAI;eACtF,UAAU,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,aAAa,CAAC,WAAW;YAAE,MAAM,WAAW,EAAE,CAAC;IAC7F,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,OAAyB,EAAE,UAAgD,EAAE,EAAE,EAAE;QACnG,YAAY,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjG,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,EAAE,OAAO;gBAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACnE,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,4BAA4B;gBAAE,MAAM,MAAM,EAAE,CAAC;YAC7F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;gBAC3D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;oBACzC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;oBAC5D,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,oBAAoB,EAAE,KAAK,CAAC,SAAS,EAAE;oBAC9H,IAAI;iBACH,CAAC,CAAC;gBACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACpD,MAAM,WAAW,EAAE,CAAC;gBACtB,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gFAAgF;YAChF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,YAAY,qBAAqB;gBAAE,MAAM,KAAK,CAAC;YACtF,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC;IACF,OAAO,KAAK,EAAC,KAAK,EAAC,EAAE;QACnB,YAAY,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,MAAM,WAAW,EAAE,CAAC;QAC7D,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,eAAe,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnH,IAAI,CAAC,eAAe,CAAC,OAAO;YAAE,MAAM,MAAM,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE;gBAC7E,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;wBACvB,YAAY,EAAE,CAAC;wBACf,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;wBACrC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;+BACjE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC;4BAAE,MAAM,WAAW,EAAE,CAAC;wBACpF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;wBACzC,MAAM,UAAU,GAAG,QAAQ,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACnE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;wBACtC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;wBAC9B,IAAI,IAAI,GAAG,KAAK,CAAC;wBACjB,OAAO;4BACL,KAAK,CAAC,IAAI,CAAC,UAAmC;gCAC5C,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oCAAE,MAAM,WAAW,EAAE,CAAC;gCAC3D,IAAI,GAAG,IAAI,CAAC;gCACZ,OAAO,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;4BACjH,CAAC;4BACD,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE;yBAClC,CAAC;oBACJ,CAAC;iBACF;aACF,CAAC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACJ,CAAC"}

package/dist/mission-cancellation.d.ts

@@ -0,0 +1,14 @@
+import type { MissionStore } from "./mission-store.js";
+import type { TaskStore } from "./task-store.js";
+import { type MissionAbortOptions, type MissionAbortResult, type MissionExecutionStore } from "./mission-execution.js";
+/** Cancel accepted work from a cold host without starting schedules, restoring
+ * agents or dispatching unrelated Tasks. Notify returned Run owners after commit. */
+export declare function cancelMissionExecution(stores: {
+    missionStore: Pick<MissionStore, "getMission">;
+    taskStore: Pick<TaskStore, "listTasks">;
+    missionExecutionStore?: MissionExecutionStore;
+}, missionId: string, options?: MissionAbortOptions): Promise<MissionAbortResult & {
+    missionCancelled: boolean;
+    killedRunIds: string[];
+}>;
+//# sourceMappingURL=mission-cancellation.d.ts.map

package/dist/mission-cancellation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-cancellation.d.ts","sourceRoot":"","sources":["../src/mission-cancellation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EACL,KAAK,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,KAAK,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGhH;qFACqF;AACrF,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC/C,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACxC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,GAAG;IAAE,gBAAgB,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAgC5I"}

package/dist/mission-cancellation.js

@@ -0,0 +1,43 @@
+import { currentMissionExecutionTasks } from "./mission-inspection.js";
+import { isMissionExecutionCancellationStore, MissionExecutionError, validateMissionExecutionKey } from "./mission-execution.js";
+import { TaskExecutionError } from "./task-execution.js";
+/** Cancel accepted work from a cold host without starting schedules, restoring
+ * agents or dispatching unrelated Tasks. Notify returned Run owners after commit. */
+export async function cancelMissionExecution(stores, missionId, options = {}) {
+    const executionId = options.executionId;
+    validateMissionExecutionKey(missionId, "abort");
+    if (executionId !== undefined)
+        validateMissionExecutionKey(executionId, "abort");
+    const stored = await stores.missionStore.getMission(missionId);
+    if (!stored)
+        throw new MissionExecutionError("mission_execution_invalid", "Mission not found");
+    const mission = structuredClone(stored);
+    const persistence = stores.missionExecutionStore;
+    const tasks = structuredClone(await stores.taskStore.listTasks());
+    const selected = executionId === undefined ? await currentMissionExecutionTasks(mission, tasks, persistence) : [];
+    const ids = new Set(selected.map(task => task.missionExecutionId));
+    const target = executionId ?? (ids.size === 1 ? [...ids][0] : undefined);
+    if (!target) {
+        if (!selected.length && !mission.executionCount && mission.status === "draft")
+            return { aborted: 0, missionCancelled: false, killedRunIds: [] };
+        throw new MissionExecutionError("mission_execution_unsupported", "Mission cancellation requires an accepted execution ID; legacy group labels cannot authorize cancellation");
+    }
+    if (!isMissionExecutionCancellationStore(persistence)) {
+        throw new MissionExecutionError("mission_execution_unsupported", "Mission cancellation requires atomic persistence");
+    }
+    const admission = await persistence.getMissionExecutionById(target);
+    if (!admission || admission.receipt.missionId !== missionId || admission.receipt.executionId !== target) {
+        throw new MissionExecutionError("mission_execution_invalid", "Execution does not belong to this Mission");
+    }
+    // Retain the snapshots read above through the commit. Re-reading after an
+    // await would acquire authority over a replacement attempt unintentionally.
+    const current = new Map(tasks.map(task => [task.id, task]));
+    const conditions = admission.receipt.tasks.map(accepted => {
+        const snapshot = current.get(accepted.id);
+        if (!snapshot)
+            throw new TaskExecutionError("task_execution_conflict", "Accepted Mission task is missing");
+        return { taskId: accepted.id, snapshot };
+    });
+    return persistence.abortMissionExecution({ missionId, executionId: target, tasks: conditions });
+}
+//# sourceMappingURL=mission-cancellation.js.map

package/dist/mission-cancellation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-cancellation.js","sourceRoot":"","sources":["../src/mission-cancellation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,mCAAmC,EAAE,qBAAqB,EAAE,2BAA2B,EACf,MAAM,wBAAwB,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;qFACqF;AACrF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAI5C,EAAE,SAAiB,EAAE,UAA+B,EAAE;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,2BAA2B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,WAAW,KAAK,SAAS;QAAE,2BAA2B,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,EAAE,mBAAmB,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,qBAAqB,CAAC;IACjD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,4BAA4B,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAChJ,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,EAAE,2GAA2G,CAAC,CAAC;IAChL,CAAC;IACD,IAAI,CAAC,mCAAmC,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,EAAE,kDAAkD,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACxG,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,EAAE,2CAA2C,CAAC,CAAC;IAC5G,CAAC;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,kCAAkC,CAAC,CAAC;QAC3G,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,OAAO,WAAW,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AAClG,CAAC"}

package/dist/mission-execution.d.ts

@@ -0,0 +1,103 @@
+import type { AgentConfig, Mission, ScopedNotificationRules, Task } from "./types.js";
+import { type TaskExecutionPrecondition, type TaskExecutionState } from "./task-execution.js";
+import type { RunRecord } from "./run-store.js";
+/** Immutable admission receipt. Task snapshots describe what was created;
+ * callers read TaskStore separately for current execution status. */
+export interface MissionExecutionReceipt {
+    executionId: string;
+    missionId: string;
+    idempotencyKey: string;
+    group: string;
+    sequence: number;
+    user?: string;
+    metadata?: Record<string, string>;
+    createdAt: string;
+    tasks: Task[];
+}
+/** Every control/inspection surface must use the same accepted task identity. */
+export declare function assertMissionExecutionTask(task: Task, receipt: MissionExecutionReceipt): void;
+export interface MissionExecutionCommit {
+    /** Mission used to plan and authorize all tasks, rechecked at admission. */
+    expected: Mission;
+    receipt: MissionExecutionReceipt;
+    notifications?: ScopedNotificationRules;
+    /** Agent definitions selected during planning, recovered only for this execution. */
+    runtime?: {
+        volatileAgents: AgentConfig[];
+        taskTitles?: Array<{
+            authored: string;
+            accepted: string;
+        }>;
+    };
+}
+/** Capability separate from ordinary Mission CRUD. Implementations must commit
+ * the receipt, all tasks, Mission activation and counter as one durable unit. */
+export interface MissionExecutionStore {
+    getMissionExecution(missionId: string, idempotencyKey: string): Promise<MissionExecutionReceipt | undefined>;
+    getMissionExecutionById(executionId: string): Promise<MissionExecutionCommit | undefined>;
+    commitMissionExecution(input: MissionExecutionCommit): Promise<{
+        receipt: MissionExecutionReceipt;
+        created: boolean;
+    }>;
+    /** Finalize only the current active execution, with all accepted tasks terminal. */
+    finalizeMissionExecution(executionId: string, status: MissionExecutionFinalStatus): Promise<boolean>;
+}
+export type MissionExecutionFinalStatus = "completed" | "failed" | "scheduled" | "recurring";
+/** Cancellation must commit the complete accepted Task set, its Runs and the
+ * current Mission status together. Per-Task cancellation followed by a separate
+ * finalization lets concurrent cleanup reschedule the interrupted Mission. */
+export interface MissionExecutionAbortInput {
+    missionId: string;
+    executionId: string;
+    tasks: TaskExecutionPrecondition[];
+}
+export interface MissionExecutionAbortResult {
+    executionId: string;
+    aborted: number;
+    /** False when cancelling a historical execution of a newer active Mission. */
+    missionCancelled: boolean;
+    /** Notify only these exact owners, after the durable commit succeeds. */
+    killedRunIds: string[];
+}
+export interface MissionExecutionCancellationStore extends MissionExecutionStore {
+    abortMissionExecution(input: MissionExecutionAbortInput): Promise<MissionExecutionAbortResult>;
+}
+export declare function isMissionExecutionCancellationStore(value: unknown): value is MissionExecutionCancellationStore;
+export declare function normalizeMissionExecutionAbort(input: MissionExecutionAbortInput): MissionExecutionAbortInput;
+/** Shared decision, called while storage holds all Mission/Task/Run reads stable.
+ * The returned writes must all succeed in the SAME transaction or all roll back. */
+export declare function prepareMissionExecutionAbort(input: MissionExecutionAbortInput, receipt: MissionExecutionReceipt | undefined, mission: Mission | undefined, tasks: Task[], runs: RunRecord[], now: string): {
+    tasks: TaskExecutionState[];
+    mission?: Mission;
+    result: MissionExecutionAbortResult;
+};
+export declare function validateMissionExecutionFinalStatus(status: MissionExecutionFinalStatus): void;
+export interface MissionExecutionOptions {
+    idempotencyKey?: string;
+}
+export interface MissionExecutionResult {
+    tasks: Task[];
+    group: string;
+    executionId?: string;
+}
+export interface MissionAbortOptions {
+    executionId?: string;
+}
+export interface MissionAbortResult {
+    aborted: number;
+    executionId?: string;
+}
+export declare function isMissionExecutionStore(value: unknown): value is MissionExecutionStore;
+export declare class MissionExecutionError extends Error {
+    readonly code: "mission_execution_invalid" | "mission_execution_conflict" | "mission_execution_unsupported";
+    constructor(code: "mission_execution_invalid" | "mission_execution_conflict" | "mission_execution_unsupported", message: string);
+}
+export declare function validateMissionExecutionKey(missionId: string, key: string): void;
+/** Capture a bounded JSON copy before awaiting storage. No caller can mutate
+ * its principal, dependency graph or expected Mission while admission waits. */
+export declare function normalizeMissionExecutionCommit(input: unknown): MissionExecutionCommit;
+/** Called under the store's actual transaction/lock, after receipt lookup.
+ * A committed duplicate returns its original receipt before these stale-plan
+ * checks; changed Mission configuration never reauthorizes a replay. */
+export declare function admitMissionExecution(input: MissionExecutionCommit, current: Mission | undefined, tasks: Task[]): Mission;
+//# sourceMappingURL=mission-execution.d.ts.map

package/dist/mission-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-execution.d.ts","sourceRoot":"","sources":["../src/mission-execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEtF,OAAO,EACL,KAAK,yBAAyB,EAAE,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;qEACqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAED,iFAAiF;AACjF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAO7F;AAED,MAAM,WAAW,sBAAsB;IACrC,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,uBAAuB,CAAC;IACjC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,qFAAqF;IACrF,OAAO,CAAC,EAAE;QAAE,cAAc,EAAE,WAAW,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACzG;AAED;iFACiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAC7G,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC1F,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACvH,oFAAoF;IACpF,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtG;AACD,MAAM,MAAM,2BAA2B,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAE7F;;8EAE8E;AAC9E,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,yBAAyB,EAAE,CAAC;CACpC;AACD,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AACD,MAAM,WAAW,iCAAkC,SAAQ,qBAAqB;IAC9E,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAChG;AACD,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iCAAiC,CAG9G;AACD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,0BAA0B,GAAG,0BAA0B,CAO5G;AAED;oFACoF;AACpF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,0BAA0B,EAAE,OAAO,EAAE,uBAAuB,GAAG,SAAS,EAC1H,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG;IAC5E,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;CACrF,CA4BF;AAED,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAE7F;AAED,MAAM,WAAW,uBAAuB;IAAG,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE;AACpE,MAAM,WAAW,sBAAsB;IAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9F,MAAM,WAAW,mBAAmB;IAAG,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAC7D,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAE7E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAItF;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,2BAA2B,GAAG,4BAA4B,GAAG,+BAA+B;gBAAlG,IAAI,EAAE,2BAA2B,GAAG,4BAA4B,GAAG,+BAA+B,EAAE,OAAO,EAAE,MAAM;CAIzI;AAqBD,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGhF;AAED;gFACgF;AAChF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAqDtF;AAED;;wEAEwE;AACxE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CASzH"}