@praxis-ai/praxis 0.1.1 → 0.1.2

package/dist/agentCore/index.d.ts

@@ -1,6 +1,8 @@
 import { PromptPack, PraxisAgent, PraxisAgentArchetype, append, compileAgent, endpoint, harness, inspectAgentManifest, markdown, markdownFile, model, overwrite, policy, prepend, replaceLastLines, session, statePlane, tool, tools, validateAgentManifest } from "../runtimeImplementation/runtimeAgentManifest.js";
-import { createSandboxRuntimeProvider, prepareSandboxRuntime } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
+import { createSandboxRuntimeProvider, prepareSandboxRuntime, resolveRaxcellBinaryPath } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
 import { createSandboxCommandPlan, createLocalSandboxRemoteWorkerAdapter, runSandboxCommand } from "../runtimeImplementation/runtime.sandboxPlane/sandboxCommandRunner.js";
+import { createRaxcellSandboxProvider, mapSandboxProviderRequestToRaxcell } from "../runtimeImplementation/runtime.sandboxPlane/raxcellSandboxProvider.js";
+import { runSandboxPolicyMiddleware } from "../runtimeImplementation/runtime.sandboxPlane/sandboxPolicyMiddleware.js";
 import { approvalInterfaceEnvelope, createInterfaceEnvelope, eventInterfaceEnvelope, managementInterfaceEnvelope, repairInterfaceEnvelope, stateInterfaceEnvelope } from "../interfaceAdapter/interfaceEnvelope.js";
 import { createInterfaceAdapterRuntime } from "../runtimeImplementation/runtime.interfaceAdapter/interfaceAdapterRuntime.js";
 import { bindBasicInterfaceLayer } from "../runtimeImplementation/runtime.interfaceAdapter/bindBasicInterfaceLayer.js";
@@ -23,7 +25,10 @@ import { assemblePromptPack } from "../executionEngine/promptPack/promptAssemble
 import { assemblePromptContextMaterials, promptPackMaterialsForManifest } from "../runtimeImplementation/runtime.execEngine/promptContextAssembly.js";
 import { createObservationMaterial } from "../executionEngine/coreLogic/observationIntegrator.js";
 import { createMemoryPlane, memoryPlane } from "../memory_managementPool/index.js";
+import { buildMcpServerProfilesFromManifest, createMcpApplicationStateView, mcp, planMcpHarnessExposure } from "../runtimeImplementation/runtime.mcpPlane/index.js";
 export { PromptPack, PraxisAgent, PraxisAgentArchetype, STATE_PLANE_STANDARD_CONTROLS, append, compileAgent, endpoint, harness, inspectAgentManifest, loop, mainLoop, markdown, markdownFile, model, modelFleet, overwrite, policy, prepend, replaceLastLines, sandbox, session, statePlane, storage, tool, toolPolicies, tools, validateAgentManifest, type AgentCompileErrorCode, type AgentCompileResult, type AgentIdentity, type AgentManifest, type AgentManifestInspection, type AgentManifestValidationResult, type BaseToolPolicyDecision, type BaseToolPolicyMatrixSpec, type BaseToolPolicyProfile, type BaseToolPolicyRisk, type BaseToolPolicyRule, type HarnessSpec, type FrameworkCoreContractSpec, type LoopSpec, type MainLoopSpec, type ModelEndpointSpec, type ModelFleetSpec, type ModelSpec, type PolicySpec, type PraxisAgentClass, type PraxisAgentInput, type PromptMaterialSource, type PromptPackSpec, type PromptPatchSpec, type SandboxSpec, type SandboxIsolationLevel, type SandboxMountPolicy, type SandboxNetworkRuntimePolicy, type SandboxPlatformSupport, type SandboxPlatformSupportStatus, type SandboxProcessPolicy, type SandboxProviderFamily, type SessionSpec, type StatePlaneSpec, type StorageSpec, type ToolSpec, type ToolPolicyCustomInput, } from "../runtimeImplementation/runtimeAgentManifest.js";
+export { buildMcpServerProfilesFromManifest, createMcpApplicationStateView, mcp, planMcpHarnessExposure, };
+export type { McpApplicationServerView, McpApplicationServerInput, McpApplicationStateView, McpHarnessExposurePlan, McpHarnessModuleSpec, McpHarnessServerMode, McpHarnessServerSpec, McpPlusApplicationServerInput, McpTransportSpec, } from "../runtimeImplementation/runtime.mcpPlane/index.js";
 export { createMemoryPlane, memoryPlane, };
 export type { MemoryArtifactRef, MemoryIndexStatus, MemoryLayout, MemoryPlane, MemoryPlaneOptions, MemoryPolicyRisk, MemoryProfile, MemoryPromptGuide, MemoryReindexResult, MemoryRiskMetadata, MemoryScope, MemorySearchGuide, MemorySearchRequest, MemorySourceType, } from "../memory_managementPool/index.js";
 export { capabilities, capability, createProvisionPlan, dependencies, dependencyAuthoring, provisionRuntimeDescriptor, type CapabilityFallbackSpec, type CapabilityInput, type CapabilityKind, type CapabilityPolicySpec, type CapabilityReadiness, type CapabilitySpec, type CodeIntelligenceCapabilityInput, type ProvisionPlan, type SandboxCapabilityInput, } from "../runtimeImplementation/runtime.provisionPlane/index.js";
@@ -44,7 +49,9 @@ export { PRE_COMPACT_GOVERNANCE_SCHEMA, createModelPreCompactGovernanceExecutor,
 export { PRAXIS_BASE_TOOL_CALLING_PROTOCOL, assemblePromptContextMaterials, promptPackMaterialsForManifest, type PromptContextAssemblyBudget, type PromptContextAssemblyRequest, type PromptContextAssemblyResult, type PromptContextConversationMessage, type PromptContextSessionSummary, } from "../runtimeImplementation/runtime.execEngine/promptContextAssembly.js";
 export { PROMPT_PACK_PROVIDER_VISIBLE_SEGMENT_KINDS, PROMPT_PACK_SEGMENT_KINDS, inferPromptPackSegmentKind, type PromptPackSegmentKind, } from "../executionEngine/promptPack/promptDefiner.js";
 export { createSandboxCommandPlan, createLocalSandboxRemoteWorkerAdapter, runSandboxCommand, sandboxCommandRunnerDescriptor, type SandboxCommandDenial, type SandboxCommandFilesystemPolicy, type SandboxCommandNetworkPolicy, type SandboxCommandPlan, type SandboxCommandProviderFamily, type SandboxCommandRequest, type SandboxCommandRunResult, type SandboxRemoteWorkerAdapter, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxCommandRunner.js";
-export { createSandboxRuntimeProvider, prepareSandboxRuntime, sandboxRuntimeProviderDescriptor, type SandboxRuntimePrepareResult, type SandboxRuntimeDependencyCheck, type SandboxRuntimeSelfRepairHint, type SandboxRuntimeProvider, type SandboxRuntimeProviderAction, type SandboxRuntimeProviderProbe, type SandboxRuntimeProviderStatus, type SandboxRuntimeSmokeResult, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
+export { createSandboxRuntimeProvider, prepareSandboxRuntime, resolveRaxcellBinaryPath, sandboxRuntimeProviderDescriptor, type SandboxRuntimePrepareResult, type SandboxRuntimeDependencyCheck, type SandboxRuntimeSelfRepairHint, type SandboxRuntimeProvider, type SandboxRuntimeProviderAction, type SandboxRuntimeProviderProbe, type SandboxRuntimeProviderStatus, type SandboxRuntimeSmokeResult, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
+export { createRaxcellSandboxProvider, mapSandboxProviderRequestToRaxcell, raxcellSandboxProviderDescriptor, type RaxcellClientLike, type RaxcellSandboxProviderOptions, } from "../runtimeImplementation/runtime.sandboxPlane/raxcellSandboxProvider.js";
+export { runSandboxPolicyMiddleware, sandboxPolicyMiddlewareDescriptor, type SandboxExecutionProviderPort, type SandboxPolicyMiddlewareAuditEvent, type SandboxPolicyMiddlewareEnvironmentGapDecision, type SandboxPolicyMiddlewareResult, type SandboxProviderRunRequest, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxPolicyMiddleware.js";
 export { approvalInterfaceEnvelope, createInterfaceEnvelope, eventInterfaceEnvelope, managementInterfaceEnvelope, repairInterfaceEnvelope, stateInterfaceEnvelope, type InterfaceEnvelope, type InterfaceEnvelopeKind, type InterfaceEnvelopeSurface, type InterfaceEnvelopeValidationErrorCode, type InterfaceEnvelopeValidationResult, } from "../interfaceAdapter/interfaceEnvelope.js";
 export { bindBasicInterfaceLayer, type BasicInterfaceKind, type BasicInterfaceLayerBinding, type BasicInterfaceLayerBindingRequest, type BasicInterfaceLayerBindingResult, type BasicInterfaceRef, } from "../runtimeImplementation/runtime.interfaceAdapter/bindBasicInterfaceLayer.js";
 export { createInterfaceAdapterRuntime, type InterfaceAdapterRuntimeBinding, type InterfaceAdapterRuntimeBindingInput, type InterfaceAdapterRuntimeCaller, type InterfaceAdapterRuntimeHandle, type InterfaceAdapterRuntimeRequest, type InterfaceAdapterRuntimeResult, type InterfaceAdapterRuntimeSurface, } from "../runtimeImplementation/runtime.interfaceAdapter/interfaceAdapterRuntime.js";
@@ -398,7 +405,7 @@ export declare const componentPlane: Readonly<{
     officialRuntimeComponents: readonly [{
         readonly componentId: "component.sandbox.bubblewrap";
         readonly kind: "sandbox";
-        readonly title: "Linux bubblewrap sandbox";
+        readonly title: "Linux Raxcell sandbox provider";
         readonly dependencies: readonly [import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencyDeclaration];
         readonly fallbackComponentIds: readonly ["component.sandbox.workspaceRollback"];
         readonly supportedPlatforms: readonly ["linux"];
@@ -459,21 +466,37 @@ export declare const dependencyPlane: Readonly<{
     defaultManagedRoot: typeof defaultManagedRoot;
     ensureDependencyAvailable: typeof ensureDependencyAvailable;
     lookupDependencySource: typeof lookupDependencySource;
-    officialDependencySources: readonly [import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource];
+    officialDependencySources: readonly [import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource];
     planDependencyInstallation: typeof planDependencyInstallation;
     probeDependency: typeof probeDependency;
 }>;
 export declare const sandboxPlane: Readonly<{
+    createRaxcellSandboxProvider: typeof createRaxcellSandboxProvider;
     createSandboxCommandPlan: typeof createSandboxCommandPlan;
     createLocalSandboxRemoteWorkerAdapter: typeof createLocalSandboxRemoteWorkerAdapter;
     createSandboxRuntimeProvider: typeof createSandboxRuntimeProvider;
+    mapSandboxProviderRequestToRaxcell: typeof mapSandboxProviderRequestToRaxcell;
     prepareSandboxRuntime: typeof prepareSandboxRuntime;
+    resolveRaxcellBinaryPath: typeof resolveRaxcellBinaryPath;
+    runSandboxPolicyMiddleware: typeof runSandboxPolicyMiddleware;
     runSandboxCommand: typeof runSandboxCommand;
+    raxcellSandboxProviderDescriptor: {
+        readonly surface: "runtime.sandboxPlane.raxcellSandboxProvider";
+        readonly providerFamily: "linux-bubblewrap";
+        readonly policyOwner: "praxis";
+        readonly role: "environment-and-execution";
+    };
     sandboxCommandRunnerDescriptor: {
         readonly surface: "runtime.sandboxPlane.sandboxCommandRunner";
         readonly publicApiCandidate: "application may inject providers through runtime options";
         readonly providers: readonly ["host-observed", "workspace-rollback", "linux-bubblewrap", "macos-containerization", "windows-sandbox", "remote-worker"];
     };
+    sandboxPolicyMiddlewareDescriptor: {
+        readonly surface: "runtime.sandboxPlane.sandboxPolicyMiddleware";
+        readonly policyOwner: "praxis";
+        readonly providerRole: "environment-and-execution";
+        readonly publicSafe: true;
+    };
     sandboxRuntimeProviderDescriptor: {
         readonly surface: "runtime.sandboxPlane";
         readonly capability: "sandboxRuntimeProvider";
@@ -942,7 +965,7 @@ export declare const praxis: Readonly<{
         defaultManagedRoot: typeof defaultManagedRoot;
         ensureDependencyAvailable: typeof ensureDependencyAvailable;
         lookupDependencySource: typeof lookupDependencySource;
-        officialDependencySources: readonly [import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource];
+        officialDependencySources: readonly [import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource, import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencySource];
         planDependencyInstallation: typeof planDependencyInstallation;
         probeDependency: typeof probeDependency;
     }>;
@@ -964,7 +987,7 @@ export declare const praxis: Readonly<{
         officialRuntimeComponents: readonly [{
             readonly componentId: "component.sandbox.bubblewrap";
             readonly kind: "sandbox";
-            readonly title: "Linux bubblewrap sandbox";
+            readonly title: "Linux Raxcell sandbox provider";
             readonly dependencies: readonly [import("../runtimeImplementation/runtime.dependencyPlane/dependencyTypes.js").DependencyDeclaration];
             readonly fallbackComponentIds: readonly ["component.sandbox.workspaceRollback"];
             readonly supportedPlatforms: readonly ["linux"];
@@ -1066,16 +1089,32 @@ export declare const praxis: Readonly<{
         resolveRaxWorkspace: typeof resolveRaxWorkspace;
     }>;
     sandboxPlane: Readonly<{
+        createRaxcellSandboxProvider: typeof createRaxcellSandboxProvider;
         createSandboxCommandPlan: typeof createSandboxCommandPlan;
         createLocalSandboxRemoteWorkerAdapter: typeof createLocalSandboxRemoteWorkerAdapter;
         createSandboxRuntimeProvider: typeof createSandboxRuntimeProvider;
+        mapSandboxProviderRequestToRaxcell: typeof mapSandboxProviderRequestToRaxcell;
         prepareSandboxRuntime: typeof prepareSandboxRuntime;
+        resolveRaxcellBinaryPath: typeof resolveRaxcellBinaryPath;
+        runSandboxPolicyMiddleware: typeof runSandboxPolicyMiddleware;
         runSandboxCommand: typeof runSandboxCommand;
+        raxcellSandboxProviderDescriptor: {
+            readonly surface: "runtime.sandboxPlane.raxcellSandboxProvider";
+            readonly providerFamily: "linux-bubblewrap";
+            readonly policyOwner: "praxis";
+            readonly role: "environment-and-execution";
+        };
         sandboxCommandRunnerDescriptor: {
             readonly surface: "runtime.sandboxPlane.sandboxCommandRunner";
             readonly publicApiCandidate: "application may inject providers through runtime options";
             readonly providers: readonly ["host-observed", "workspace-rollback", "linux-bubblewrap", "macos-containerization", "windows-sandbox", "remote-worker"];
         };
+        sandboxPolicyMiddlewareDescriptor: {
+            readonly surface: "runtime.sandboxPlane.sandboxPolicyMiddleware";
+            readonly policyOwner: "praxis";
+            readonly providerRole: "environment-and-execution";
+            readonly publicSafe: true;
+        };
         sandboxRuntimeProviderDescriptor: {
             readonly surface: "runtime.sandboxPlane";
             readonly capability: "sandboxRuntimeProvider";

package/dist/agentCore/index.js

@@ -4,8 +4,10 @@
  * 边界：不把 runtime.* 深层实现文件作为普通 public API。
  */
 import { PromptPack, PraxisAgent, PraxisAgentArchetype, append, compileAgent, endpoint, harness, inspectAgentManifest, loop, mainLoop, markdown, markdownFile, model, modelFleet, overwrite, policy, prepend, replaceLastLines, sandbox, session, statePlane, storage, tool, toolPolicies, tools, validateAgentManifest, } from "../runtimeImplementation/runtimeAgentManifest.js";
-import { createSandboxRuntimeProvider, prepareSandboxRuntime, sandboxRuntimeProviderDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
+import { createSandboxRuntimeProvider, prepareSandboxRuntime, resolveRaxcellBinaryPath, sandboxRuntimeProviderDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
 import { createSandboxCommandPlan, createLocalSandboxRemoteWorkerAdapter, runSandboxCommand, sandboxCommandRunnerDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxCommandRunner.js";
+import { createRaxcellSandboxProvider, mapSandboxProviderRequestToRaxcell, raxcellSandboxProviderDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/raxcellSandboxProvider.js";
+import { runSandboxPolicyMiddleware, sandboxPolicyMiddlewareDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxPolicyMiddleware.js";
 import { approvalInterfaceEnvelope, createInterfaceEnvelope, eventInterfaceEnvelope, managementInterfaceEnvelope, repairInterfaceEnvelope, stateInterfaceEnvelope, } from "../interfaceAdapter/interfaceEnvelope.js";
 import { createInterfaceAdapterRuntime, } from "../runtimeImplementation/runtime.interfaceAdapter/interfaceAdapterRuntime.js";
 import { bindBasicInterfaceLayer, } from "../runtimeImplementation/runtime.interfaceAdapter/bindBasicInterfaceLayer.js";
@@ -29,7 +31,9 @@ import { assemblePromptContextMaterials, promptPackMaterialsForManifest, } from
 import { createObservationMaterial, } from "../executionEngine/coreLogic/observationIntegrator.js";
 import { runtimeAuth, } from "../runtimeImplementation/runtime.authPlane/index.js";
 import { createMemoryPlane, memoryPlane, } from "../memory_managementPool/index.js";
+import { buildMcpServerProfilesFromManifest, createMcpApplicationStateView, mcp, planMcpHarnessExposure, } from "../runtimeImplementation/runtime.mcpPlane/index.js";
 export { PromptPack, PraxisAgent, PraxisAgentArchetype, STATE_PLANE_STANDARD_CONTROLS, append, compileAgent, endpoint, harness, inspectAgentManifest, loop, mainLoop, markdown, markdownFile, model, modelFleet, overwrite, policy, prepend, replaceLastLines, sandbox, session, statePlane, storage, tool, toolPolicies, tools, validateAgentManifest, } from "../runtimeImplementation/runtimeAgentManifest.js";
+export { buildMcpServerProfilesFromManifest, createMcpApplicationStateView, mcp, planMcpHarnessExposure, };
 export { createMemoryPlane, memoryPlane, };
 export { capabilities, capability, createProvisionPlan, dependencies, dependencyAuthoring, provisionRuntimeDescriptor, } from "../runtimeImplementation/runtime.provisionPlane/index.js";
 export { component, createRuntimeComponentRegistry, lookupRuntimeComponent, officialRuntimeComponents, } from "../runtimeImplementation/runtime.componentPlane/index.js";
@@ -49,7 +53,9 @@ export { PRE_COMPACT_GOVERNANCE_SCHEMA, createModelPreCompactGovernanceExecutor,
 export { PRAXIS_BASE_TOOL_CALLING_PROTOCOL, assemblePromptContextMaterials, promptPackMaterialsForManifest, } from "../runtimeImplementation/runtime.execEngine/promptContextAssembly.js";
 export { PROMPT_PACK_PROVIDER_VISIBLE_SEGMENT_KINDS, PROMPT_PACK_SEGMENT_KINDS, inferPromptPackSegmentKind, } from "../executionEngine/promptPack/promptDefiner.js";
 export { createSandboxCommandPlan, createLocalSandboxRemoteWorkerAdapter, runSandboxCommand, sandboxCommandRunnerDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxCommandRunner.js";
-export { createSandboxRuntimeProvider, prepareSandboxRuntime, sandboxRuntimeProviderDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
+export { createSandboxRuntimeProvider, prepareSandboxRuntime, resolveRaxcellBinaryPath, sandboxRuntimeProviderDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxRuntimeProvider.js";
+export { createRaxcellSandboxProvider, mapSandboxProviderRequestToRaxcell, raxcellSandboxProviderDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/raxcellSandboxProvider.js";
+export { runSandboxPolicyMiddleware, sandboxPolicyMiddlewareDescriptor, } from "../runtimeImplementation/runtime.sandboxPlane/sandboxPolicyMiddleware.js";
 export { approvalInterfaceEnvelope, createInterfaceEnvelope, eventInterfaceEnvelope, managementInterfaceEnvelope, repairInterfaceEnvelope, stateInterfaceEnvelope, } from "../interfaceAdapter/interfaceEnvelope.js";
 export { bindBasicInterfaceLayer, } from "../runtimeImplementation/runtime.interfaceAdapter/bindBasicInterfaceLayer.js";
 export { createInterfaceAdapterRuntime, } from "../runtimeImplementation/runtime.interfaceAdapter/interfaceAdapterRuntime.js";
@@ -212,12 +218,18 @@ export const dependencyPlane = Object.freeze({
     probeDependency,
 });
 export const sandboxPlane = Object.freeze({
+    createRaxcellSandboxProvider,
     createSandboxCommandPlan,
     createLocalSandboxRemoteWorkerAdapter,
     createSandboxRuntimeProvider,
+    mapSandboxProviderRequestToRaxcell,
     prepareSandboxRuntime,
+    resolveRaxcellBinaryPath,
+    runSandboxPolicyMiddleware,
     runSandboxCommand,
+    raxcellSandboxProviderDescriptor,
     sandboxCommandRunnerDescriptor,
+    sandboxPolicyMiddlewareDescriptor,
     sandboxRuntimeProviderDescriptor,
 });
 export const interfaceAdapter = Object.freeze({

package/dist/applicationLayer/applicationContract.d.ts

@@ -1,4 +1,5 @@
 import type { BaseToolProfileName } from "../basetool/types.js";
+import type { McpApplicationStateView } from "../runtimeImplementation/runtime.mcpPlane/index.js";
 export type PraxisApplicationRuntimeMode = "dry-run" | "live";
 export type PraxisApplicationToolProfile = BaseToolProfileName;
 export type PraxisApplicationPermissionProfile = "restricted" | "standard" | "permissive" | "yolo" | "bapr";
@@ -157,6 +158,7 @@ export type PraxisApplicationViewModel = {
     approvals: readonly PraxisApplicationApprovalSummary[];
     manifest?: PraxisApplicationManifestView;
     tools: PraxisApplicationToolCatalogState;
+    mcp: McpApplicationStateView;
     counters: {
         turns: number;
         events: number;

package/dist/applicationLayer/applicationRuntime.d.ts

@@ -1,4 +1,5 @@
-import { type AgentManifest, type BaseToolExecutorPort, type AgentToolCallProgressEvent, type RuntimeApprovalResolver, type RuntimeAgentReviewResolver, type RuntimeAuthResolver, type RuntimeAuthResolverRequest, type CompactExecutor, type PreCompactGovernanceExecutor, type PraxisProjectRuntime } from "../agentCore/index.js";
+import { type AgentManifest, type BaseToolExecutorPort, type AgentToolCallProgressEvent, type RuntimeApprovalResolver, type RuntimeAgentReviewResolver, type RuntimeAuthResolver, type RuntimeAuthResolverRequest, type SandboxExecutionProviderPort, type CompactExecutor, type PreCompactGovernanceExecutor, type PraxisProjectRuntime } from "../agentCore/index.js";
+import { type McpApplicationServerInput, type McpHarnessModuleSpec, type McpPlusApplicationServerInput } from "../runtimeImplementation/runtime.mcpPlane/index.js";
 import { type OpenAIV1ResponsesProviderCaller, type OpenAIV1ResponsesResult } from "../modelAdapter/actualInvocationLayer/openai/v1_responses.js";
 import type { OpenAiV1ChatCompletionsProviderCaller } from "../modelAdapter/actualInvocationLayer/openai/v1_chat_completions.js";
 import type { AnthropicV1MessagesProviderCaller } from "../modelAdapter/actualInvocationLayer/anthropic/v1_messages.js";
@@ -66,10 +67,14 @@ export type PraxisApplicationRuntimeOptions = {
     permissionProfile?: PraxisApplicationPermissionProfile;
     toolProfile?: PraxisApplicationToolProfile;
     agentOptions?: unknown;
+    sandboxProvider?: SandboxExecutionProviderPort;
     approvalResolver?: RuntimeApprovalResolver;
     agentReviewResolver?: RuntimeAgentReviewResolver;
     contextArtifactAdapters?: Pick<Partial<BaseToolExecutorPort>, "context" | "artifact">;
     baseToolAdapters?: Partial<BaseToolExecutorPort>;
+    mcpServers?: readonly McpApplicationServerInput[];
+    mcpPlusServers?: readonly McpPlusApplicationServerInput[];
+    mcpModule?: McpHarnessModuleSpec;
     onApplicationToolEvent?: (event: PraxisApplicationEvent) => void | Promise<void>;
     initialConversations?: readonly PraxisApplicationInitialConversation[];
     foundationProject?: PraxisProjectRuntime;

package/dist/applicationLayer/applicationRuntime.js

@@ -6,6 +6,7 @@ import path from "node:path";
 import { pathToFileURL } from "node:url";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { praxis, } from "../agentCore/index.js";
+import { createMcpApplicationStateView, toMcpRuntimeServerProfile, } from "../runtimeImplementation/runtime.mcpPlane/index.js";
 import { invokeOpenAIV1Responses, } from "../modelAdapter/actualInvocationLayer/openai/v1_responses.js";
 import { invokeChatGPTCodexResponses } from "../modelAdapter/actualInvocationLayer/openai/chatgpt_codex_responses.js";
 import { createInMemoryMultiagentRuntime, } from "../runtimeImplementation/runtime.multiagentPlane/index.js";
@@ -2549,11 +2550,37 @@ function summarizeRunUsage(result) {
     }
     return summary.modelCalls > 0 ? summary : undefined;
 }
+function createApplicationMcpModule(options) {
+    if (options.mcpModule !== undefined)
+        return options.mcpModule;
+    const nativeServers = (options.mcpServers ?? []).map((server) => ({
+        ...server,
+        mode: server.mode ?? "native",
+    }));
+    const plusServers = (options.mcpPlusServers ?? []).map((server) => ({
+        ...server,
+        mode: "mcp-plus",
+    }));
+    const servers = [...nativeServers, ...plusServers];
+    if (servers.length === 0)
+        return undefined;
+    return {
+        kind: "praxis.mcp.module",
+        version: "praxis.mcp.v1",
+        servers,
+        recommended: true,
+        metadata: { source: "application.mcp.options" },
+    };
+}
+function applicationMcpServerProfiles(module) {
+    return (module?.servers ?? []).map(toMcpRuntimeServerProfile);
+}
 export function createPraxisApplicationRuntime(options) {
     const now = options.now ?? defaultNow;
     const listeners = new Set();
     const project = options.project;
     const applicationId = options.applicationId ?? project.applicationId;
+    const applicationMcpModule = createApplicationMcpModule(options);
     const state = {
         status: "idle",
         sessionId: options.sessionId ?? `session.${applicationId}.default`,
@@ -2602,6 +2629,7 @@ export function createPraxisApplicationRuntime(options) {
         multiagentActiveSessions: 1,
         multiagentBackgroundRuns: new Set(),
         auth: undefined,
+        mcp: createMcpApplicationStateView(applicationMcpModule),
     };
     async function refreshAuthState() {
         const next = await options.authStateProvider?.({
@@ -2809,12 +2837,14 @@ export function createPraxisApplicationRuntime(options) {
                         exposeProviderTools: true,
                         approvalResolver: approvalResolverForRun(),
                         agentReviewResolver: options.agentReviewResolver,
+                        mcpServers: applicationMcpServerProfiles(applicationMcpModule),
+                        mcpModule: applicationMcpModule,
                         storage: {
                             cwd: childSession.workingDirectory,
                             workspaceRoot: path.join(project.projectRoot, ".raxode"),
                             initMode: "on-run",
                         },
-                        sandbox: { cwd: childSession.workingDirectory },
+                        sandbox: { cwd: childSession.workingDirectory, provider: options.sandboxProvider },
                         baseToolAdapters: {
                             agent: multiagentAgentAdapter(),
                             ...(options.contextArtifactAdapters ?? {}),
@@ -2946,6 +2976,7 @@ export function createPraxisApplicationRuntime(options) {
                 : "input budget: unknown",
             `permission: ${state.permissionProfile}`,
             `tool profile: ${state.toolProfile}`,
+            `mcp servers: ${state.mcp.servers.length}`,
             `workspace: ${state.cwd}`,
             `tools: ${summarizeToolCatalog(state.manifest, state.toolProfile).mounted}/${summarizeToolCatalog(state.manifest, state.toolProfile).total}`,
             state.finalOutput ? `final: ${state.finalOutput}` : `status: ${state.status}`,
@@ -2976,6 +3007,7 @@ export function createPraxisApplicationRuntime(options) {
             approvals: [...state.approvals.values()].sort((left, right) => right.updatedAt.localeCompare(left.updatedAt)),
             manifest: summarizeManifest(state.manifest),
             tools: summarizeToolCatalog(state.manifest, state.toolProfile),
+            mcp: state.mcp,
             counters: {
                 turns: state.turns,
                 events: state.events.length,
@@ -3170,7 +3202,7 @@ export function createPraxisApplicationRuntime(options) {
                         workspaceRoot: path.join(project.projectRoot, ".raxode"),
                         initMode: "on-run",
                     },
-                    sandbox: { cwd: state.cwd },
+                    sandbox: { cwd: state.cwd, provider: options.sandboxProvider },
                     now,
                 }),
                 timeoutMs,
@@ -3432,12 +3464,14 @@ export function createPraxisApplicationRuntime(options) {
             compactThresholdRatio: options.compactThresholdRatio,
             approvalResolver: approvalResolverForRun(),
             agentReviewResolver: options.agentReviewResolver,
+            mcpServers: applicationMcpServerProfiles(applicationMcpModule),
+            mcpModule: applicationMcpModule,
             storage: {
                 cwd: state.cwd,
                 workspaceRoot: path.join(project.projectRoot, ".raxode"),
                 initMode: "on-run",
             },
-            sandbox: { cwd: state.cwd },
+            sandbox: { cwd: state.cwd, provider: options.sandboxProvider },
             baseToolAdapters: {
                 agent: multiagentAgentAdapter(),
                 ...(options.contextArtifactAdapters ?? {}),

package/dist/applicationLayer/index.d.ts

@@ -1,4 +1,5 @@
 export type { PraxisApplicationAttachment, PraxisApplicationAgentEntryView, PraxisApplicationAuxiliaryTaskInput, PraxisApplicationAuthProfileView, PraxisApplicationAuthState, PraxisApplicationCommand, PraxisApplicationCommandResult, PraxisApplicationContextTelemetry, PraxisApplicationEvent, PraxisApplicationEventKind, PraxisApplicationInputEnvelope, PraxisApplicationManifestView, PraxisApplicationModelState, PraxisApplicationPermissionProfile, PraxisApplicationReasoningEffort, PraxisApplicationRuntime, PraxisApplicationRuntimeMode, PraxisApplicationStatus, PraxisApplicationToolCatalogState, PraxisApplicationToolProfile, PraxisApplicationUsageTelemetry, PraxisApplicationViewModel, } from "./applicationContract.js";
 export { loadApplicationProject, type PraxisApplicationProject, type PraxisApplicationProjectDescriptor, type PraxisApplicationProjectResult, } from "./applicationProject.js";
 export { createApplicationProjectRuntime, createPraxisApplicationRuntime, type PraxisApplicationBaseToolIntegrationOptions, type CreateApplicationProjectRuntimeOptions, type PraxisApplicationInitialConversation, type PraxisApplicationInitialConversationMessage, type PraxisApplicationLiveProvider, type PraxisApplicationRuntimeOptions, } from "./applicationRuntime.js";
+export type { McpApplicationServerInput, McpPlusApplicationServerInput, } from "../runtimeImplementation/runtime.mcpPlane/index.js";
 export { createApplicationRestServer, createApplicationWebSocketServer, createLocalApplicationTransport, describeApplicationRestTransport, describeApplicationWebSocketTransport, type PraxisApplicationRestServer, type PraxisApplicationWebSocketServer, type PraxisApplicationProtocolMessage, type PraxisApplicationRestRoute, type PraxisApplicationTransportClient, type PraxisApplicationTransportDescriptor, type PraxisApplicationTransportKind, type PraxisApplicationWebSocketMessage, } from "./applicationTransport.js";

package/dist/basetool/core/shellRun.js

@@ -16,7 +16,12 @@ export async function invokeShellRunCore(definition, request) {
     const run = namespaceMethod(definition, request, "shell", "run");
     if (!run.ok)
         return run.result;
-    return callRuntimePort(definition, run.value(compactRecord({ command: command.value, cwd: cwd.value, timeoutMs: timeoutMs.value })), {
+    return callRuntimePort(definition, run.value(compactRecord({
+        command: command.value,
+        cwd: cwd.value,
+        timeoutMs: timeoutMs.value,
+        context: input.value.context,
+    })), {
         portPath: "shell.run",
         metadata: { command: command.value, cwd: cwd.value },
     });

package/dist/rax_packageManager/raxCli.js

@@ -138,6 +138,33 @@ async function pathExists(pathname) {
         return false;
     }
 }
+async function findProjectRootForAgent(agentPath) {
+    let current = path.dirname(path.resolve(agentPath));
+    while (true) {
+        if (await pathExists(path.join(current, "rax.project.json")) || await pathExists(path.join(current, "package.json"))) {
+            return current;
+        }
+        const parent = path.dirname(current);
+        if (parent === current) {
+            return undefined;
+        }
+        current = parent;
+    }
+}
+async function isFrameworkDependencyMissing(projectRoot) {
+    const packageJsonPath = path.join(projectRoot, "package.json");
+    if (!await pathExists(packageJsonPath)) {
+        return false;
+    }
+    const packageJson = JSON.parse(await readFile(packageJsonPath, "utf8"));
+    const declaresFramework = packageJson.dependencies?.["@praxis-ai/praxis"] !== undefined
+        || packageJson.devDependencies?.["@praxis-ai/praxis"] !== undefined
+        || packageJson.peerDependencies?.["@praxis-ai/praxis"] !== undefined;
+    if (!declaresFramework) {
+        return false;
+    }
+    return !await pathExists(path.join(projectRoot, "node_modules", "@praxis-ai", "praxis", "package.json"));
+}
 async function resolveAgentEntry(inputPath, exportName) {
     const absolute = path.resolve(inputPath);
     const info = await stat(absolute);
@@ -171,7 +198,7 @@ async function resolveProjectAgentEntry(inputPath, exportName) {
     const absolute = path.resolve(inputPath);
     const info = await stat(absolute);
     if (!info.isDirectory()) {
-        return { agentPath: absolute, exportName };
+        return { agentPath: absolute, exportName, projectRoot: await findProjectRootForAgent(absolute) };
     }
     const resolved = await resolveAgentEntry(inputPath, exportName);
     return { ...resolved, projectRoot: absolute };
@@ -777,6 +804,20 @@ async function handleInspectTestRun(command, args) {
     if (!plan.ok) {
         return { exitCode: 1, output: `${plan.error.message}\n` };
     }
+    if (resolvedEntry?.projectRoot !== undefined && await isFrameworkDependencyMissing(resolvedEntry.projectRoot)) {
+        return {
+            exitCode: 1,
+            output: [
+                `rax ${command} could not load ${agentPath}`,
+                "project dependency @praxis-ai/praxis is declared but not installed",
+                "self-repair hints:",
+                "  - run npm install in the generated agent project",
+                "  - verify @praxis-ai/praxis is installed or linked",
+                "  - rerun rax inspect after the issue is fixed",
+                "",
+            ].join("\n"),
+        };
+    }
     let compiled;
     try {
         compiled = await compileAgentFile(resolvedEntry?.agentPath ?? agentPath, resolvedEntry?.exportName ?? exportName);

package/dist/runtimeImplementation/praxisRuntimeKernel.d.ts

@@ -21,6 +21,9 @@ import type { ToolDependencyProbe } from "./runtime.execEngine/baseToolDependenc
 import { type RuntimeApprovalRecord, type RuntimeSessionSnapshot, type RuntimeSessionStateEventStore } from "./runtimeSessionStateEventStore.js";
 import { type RaxStorageInitMode } from "./runtime.storagePlane/storagePlaneRuntime.js";
 import type { SandboxRemoteWorkerAdapter } from "./runtime.sandboxPlane/sandboxCommandRunner.js";
+import type { SandboxExecutionProviderPort } from "./runtime.sandboxPlane/sandboxPolicyMiddleware.js";
+import { type McpHarnessModuleSpec } from "./runtime.mcpPlane/index.js";
+import type { McpRuntimeServerProfile } from "./runtime.execEngine/mcpRuntimeAdapter.js";
 export type PraxisRuntimeKernelErrorCode = "MANIFEST_COMPILE_FAILED" | "TEXT_INPUT_REJECTED" | "PROMPT_PACK_FAILED" | "MAIN_LOOP_INTERRUPTED" | "MODEL_INVOCATION_FAILED" | "MODEL_DECISION_FAILED" | "TOOL_INVOCATION_FAILED" | "PROCEDURE_INVOCATION_FAILED" | "APPROVAL_REQUIRED" | "SANDBOX_UNAVAILABLE" | "STORAGE_RESOLUTION_FAILED" | "TEXT_OUTPUT_REJECTED";
 export type PraxisRuntimeKernelError = {
     code: PraxisRuntimeKernelErrorCode;
@@ -47,6 +50,8 @@ export type PraxisRuntimeKernelOptions = {
     };
     executor?: BaseToolExecutorPort;
     baseToolAdapters?: Partial<BaseToolExecutorPort>;
+    mcpServers?: readonly McpRuntimeServerProfile[];
+    mcpModule?: McpHarnessModuleSpec;
     baseToolPolicy?: RuntimeBaseToolExecutorPolicy;
     baseToolResourceLimits?: RuntimeBaseToolExecutorResourceLimits;
     store?: RuntimeSessionStateEventStore;
@@ -85,6 +90,7 @@ export type PraxisRuntimeKernelOptions = {
         cwd?: string;
         runSmoke?: boolean;
         failOnUnavailable?: boolean;
+        provider?: SandboxExecutionProviderPort;
         remoteWorker?: SandboxRemoteWorkerAdapter;
     };
     onTextDelta?: (delta: string, metadata?: Readonly<Record<string, unknown>>) => void | Promise<void>;