@revisium/orchestrator 0.0.0 → 0.1.0-alpha.10

package/dist/host/host-runtime.js

@@ -0,0 +1,90 @@
+/**
+ * Host daemon runtime file (`host.json`) — the tracked identity of the long-lived Revo/NestJS
+ * host daemon, the single DBOS owner (ADR 0006). It lives beside the standalone `runtime.json`
+ * in the profile data dir but is a SEPARATE file: the standalone daemon and the host daemon have
+ * independent lifecycles, so conflating them would let one's stale pid mask the other's state.
+ *
+ * Shape is intentionally minimal — only what `ensureHost`/`status`/clients need: the pid to prove
+ * liveness, the GraphQL port that is the client transport, and the profile/startedAt for display
+ * and compare-and-delete identity. Standalone HTTP/pg ports stay in `runtime.json` (readRuntime).
+ */
+import { existsSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { getConfig, isAlive, profileDataDir, PROFILES } from '../config.js';
+let cachedCodeVersion;
+/**
+ * This build's package version (e.g. `0.1.0-alpha.7`). Recorded in host.json so `ensureHost`/`doctor`
+ * can detect a stale daemon running a DIFFERENT build than the current install (slice 139). A `0.0.0`
+ * dev checkout does not change across rebuilds, so dev relies on `revo restart`; released builds differ.
+ */
+export function hostCodeVersion() {
+    if (cachedCodeVersion === undefined) {
+        try {
+            const pkgPath = fileURLToPath(new URL('../../package.json', import.meta.url));
+            const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+            cachedCodeVersion = typeof pkg.version === 'string' ? pkg.version : 'unknown';
+        }
+        catch {
+            cachedCodeVersion = 'unknown';
+        }
+    }
+    return cachedCodeVersion;
+}
+export function hostRuntimeFile() {
+    return join(getConfig().dataDir, 'host.json');
+}
+export function readHostRuntime() {
+    return readHostRuntimeAt(hostRuntimeFile());
+}
+/** Read+parse a host.json at an ARBITRARY path (a sibling profile's). Null when absent/corrupt. */
+export function readHostRuntimeAt(file) {
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Live tracked daemon pids across ALL profiles (slice 140 Phase 2). The rogue reaper must protect
+ * EVERY profile's daemon tree, not just the active one — else `revo stop --all --profile default`
+ * would SIGKILL a live `dev` daemon (and its bridges), aborting that profile's in-flight DBOS work.
+ * Band-default dirs only (a custom REVO_DATA_DIR layout isn't enumerable; documented in profileDataDir).
+ */
+export function allTrackedHostPids() {
+    const pids = [];
+    for (const profile of Object.keys(PROFILES)) {
+        const runtime = readHostRuntimeAt(join(profileDataDir(profile), 'host.json'));
+        if (runtime && isAlive(runtime.pid))
+            pids.push(runtime.pid);
+    }
+    return pids;
+}
+export function writeHostRuntime(state) {
+    writeFileSync(hostRuntimeFile(), JSON.stringify(state, null, 2));
+}
+export function removeHostRuntime() {
+    const file = hostRuntimeFile();
+    if (existsSync(file))
+        rmSync(file);
+}
+/**
+ * Remove `host.json` ONLY if the file on disk still matches the snapshot (same pid AND startedAt).
+ * A replaced file (a concurrently-started daemon) or an already-removed file is a safe no-op — so
+ * cleanup can never delete a runtime that belongs to another daemon (compare-and-delete).
+ */
+export function removeHostRuntimeIfMatches(snapshot) {
+    const current = readHostRuntime();
+    if (current?.pid === snapshot.pid && current?.startedAt === snapshot.startedAt) {
+        removeHostRuntime();
+    }
+}
+/** True when `host.json` records a daemon whose pid is still alive (liveness, not health). */
+export function isHostRunning() {
+    const runtime = readHostRuntime();
+    return runtime !== null && isAlive(runtime.pid);
+}
+//# sourceMappingURL=host-runtime.js.map

package/dist/host/host-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-runtime.js","sourceRoot":"","sources":["../../src/host/host-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAoB,MAAM,cAAc,CAAC;AAa9F,IAAI,iBAAqC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAA0B,CAAC;YAC/E,iBAAiB,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,SAAS,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAKD,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,iBAAiB,CAAC,eAAe,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAqB,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAkB,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,aAAa,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAA6B;IACtE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/E,iBAAiB,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC"}

package/dist/host/host.lifecycle.js

@@ -7,6 +7,9 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 /**
  * HostLifecycle — OnApplicationBootstrap / OnApplicationShutdown.
  *
@@ -23,17 +26,23 @@ var __metadata = (this && this.__metadata) || function (k, v) {
  *     the daemon is detached+unref'd and is a shared, long-lived process; subsequent
  *     `revo dev:status <id>` invocations must find the same daemon + embedded Postgres.
  */
-import { Injectable } from '@nestjs/common';
+import { Inject, Injectable, Optional } from '@nestjs/common';
 import { DbosService } from '../engine/dbos.service.js';
 import { ensureRevisium, readPostmasterPgPort } from './ensure-revisium.js';
 import { dbosSystemDatabaseUrl, ensurePostgres } from '../engine/ensure-postgres.js';
+import { TaskControlPlaneApiService } from '../task-control-plane/task-control-plane-api.service.js';
 function isMcpStdioHost() {
     return process.env.REVO_MCP_STDIO === '1';
 }
+function keepControlPlaneBootstrapDependency(_api) {
+    // The constructor dependency forces the control-plane provider graph to instantiate
+    // before DBOS.launch(); pipeline registration must precede launch.
+}
 let HostLifecycle = class HostLifecycle {
     dbosService;
-    constructor(dbosService) {
+    constructor(dbosService, taskControlPlaneApi) {
         this.dbosService = dbosService;
+        keepControlPlaneBootstrapDependency(taskControlPlaneApi);
     }
     async onApplicationBootstrap() {
         // Step 1: Ensure Revisium daemon is running (auto-start if absent).
@@ -69,7 +78,11 @@ let HostLifecycle = class HostLifecycle {
 };
 HostLifecycle = __decorate([
     Injectable(),
-    __metadata("design:paramtypes", [DbosService])
+    __param(0, Inject(DbosService)),
+    __param(1, Optional()),
+    __param(1, Inject(TaskControlPlaneApiService)),
+    __metadata("design:paramtypes", [DbosService,
+        TaskControlPlaneApiService])
 ], HostLifecycle);
 export { HostLifecycle };
 //# sourceMappingURL=host.lifecycle.js.map

package/dist/host/host.lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"host.lifecycle.js","sourceRoot":"","sources":["../../src/host/host.lifecycle.ts"],"names":[],"mappings":";;;;;;;;;AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAiD,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAErF,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC;AAC5C,CAAC;AAGM,IAAM,aAAa,GAAnB,MAAM,aAAa;IACK;IAA7B,YAA6B,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IAAG,CAAC;IAEzD,KAAK,CAAC,sBAAsB;QAC1B,oEAAoE;QACpE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QAE3C,0DAA0D;QAC1D,IAAI,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QAElC,oDAAoD;QACpD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,MAAM,oCAAoC,MAAM,IAAI;oBAChG,6DAA6D,CAChE,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QACD,2FAA2F;QAE3F,6CAA6C;QAC7C,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;QAEnC,qCAAqC;QACrC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE;YAC9D,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAChD,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,gEAAgE;QAChE,qCAAqC;QACrC,6EAA6E;QAC7E,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;CACF,CAAA;AAzCY,aAAa;IADzB,UAAU,EAAE;qCAE+B,WAAW;GAD1C,aAAa,CAyCzB"}
+{"version":3,"file":"host.lifecycle.js","sourceRoot":"","sources":["../../src/host/host.lifecycle.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAiD,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yDAAyD,CAAC;AAErG,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,mCAAmC,CAAC,IAA4C;IACvF,oFAAoF;IACpF,mEAAmE;AACrE,CAAC;AAGM,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEgB;IADxC,YACwC,WAAwB,EAG9D,mBAAgD;QAHV,gBAAW,GAAX,WAAW,CAAa;QAK9D,mCAAmC,CAAC,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,oEAAoE;QACpE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QAE3C,0DAA0D;QAC1D,IAAI,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QAElC,oDAAoD;QACpD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,MAAM,oCAAoC,MAAM,IAAI;oBAChG,6DAA6D,CAChE,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QACD,2FAA2F;QAE3F,6CAA6C;QAC7C,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;QAEnC,qCAAqC;QACrC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE;YAC9D,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAChD,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,gEAAgE;QAChE,qCAAqC;QACrC,6EAA6E;QAC7E,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;CACF,CAAA;AAhDY,aAAa;IADzB,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,WAAW,CAAC,CAAA;IACnB,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;qCAFgB,WAAW;QAGxC,0BAA0B;GALvC,aAAa,CAgDzB"}

package/dist/host/queue-ownership.js

@@ -0,0 +1,70 @@
+/**
+ * Daemon singleton gate (slice 139, hardened slice 140). Exactly ONE host daemon per profile may own —
+ * and therefore poll — the `dev-tasks` WorkflowQueue. Ownership is a connection-scoped Postgres
+ * ADVISORY LOCK:
+ *
+ *   - Advisory locks are DATABASE-scoped, NOT cluster-global (PG: "Advisory locks are local to each
+ *     database"). The gate works only because every contending daemon connects to the SAME fixed
+ *     maintenance `postgres` database, so they all contend in one shared per-database lock namespace.
+ *     We use `postgres` because it exists right after `ensureRevisium` — before the per-profile `dbos`
+ *     database is created — letting the daemon decide "am I the owner?" BEFORE DBOS.launch() and before
+ *     the queue worker starts polling. INVARIANT: all contenders MUST take this lock on the identical
+ *     database. NEVER probe this lock key from another database (e.g. `dbos`) expecting a conflict — it
+ *     would silently NOT conflict and could mint a second owner.
+ *   - The key is a FULL 64-bit value derived from the lock name via md5 (`('x'||substr(md5(name),1,16))
+ *     ::bit(64)::bigint`), not `hashtext(...)::bigint` — `hashtext` is only 32 bits, so distinct
+ *     profile names could hash-collide and wrongly block a different profile's daemon. md5's 64 bits
+ *     make a cross-profile collision negligible.
+ *   - The lock is held on a DEDICATED, long-lived connection for the daemon's whole life. It
+ *     auto-releases when that connection ends — on graceful shutdown OR on a hard crash — so a dead
+ *     owner never blocks a successor. (Verified by experiment: a second connection's
+ *     `pg_try_advisory_lock` returns false while held, and true again once the holder disconnects.)
+ *
+ * A daemon that does NOT win the lock lost a concurrent cold-start race (e.g. several `revo mcp`
+ * bridges spawning at once) and exits; ensureHost then attaches to the winner via host.json. This
+ * closes the "concurrent cold-start spawns multiple daemons" hole that let stale daemons accumulate.
+ * It does NOT, however, coordinate LEGACY hosts that predate the lock — those are detected by the
+ * `pg_stat_activity` census (queue-poller-census.ts) and evicted by `revo doctor`/`stop` (slice 140).
+ */
+import pg from 'pg';
+/**
+ * SQL expression that turns the text lock name (bound as `$1`) into a full 64-bit advisory-lock key.
+ * `md5` yields 128 bits of hex; the first 16 hex chars are reinterpreted as a signed bigint. Shared by
+ * lock + unlock so they always target the identical key.
+ */
+const LOCK_KEY_EXPR = `('x' || substr(md5($1), 1, 16))::bit(64)::bigint`;
+/** Stable advisory-lock identity for a profile's dev-tasks queue ownership. */
+export function ownershipLockName(profile) {
+    return `revo:dev-tasks:${profile}`;
+}
+/**
+ * Try to become the sole dev-tasks owner for `profile`. Returns `{owned:false}` (and closes its probe
+ * connection) when another live daemon already holds it. When `{owned:true}`, the returned connection
+ * stays open holding the lock until `release()` (or process death) frees it.
+ */
+export async function acquireQueueOwnership(profile, pgPort, deps = {}) {
+    const url = `postgresql://revisium:password@localhost:${pgPort}/postgres`;
+    const name = ownershipLockName(profile);
+    const createClient = deps.createClient ?? ((u) => new pg.Client(u));
+    const client = createClient(url);
+    await client.connect();
+    const res = await client.query(`SELECT pg_try_advisory_lock(${LOCK_KEY_EXPR}) AS owned`, [name]);
+    const owned = res.rows[0]?.owned === true;
+    if (!owned) {
+        await client.end().catch(() => undefined);
+        return { owned: false, release: async () => undefined };
+    }
+    // Keep `client` reachable (via this closure) so its socket — and the lock — is held for the daemon's
+    // life. The OS frees the connection (and thus the lock) on crash; release() does it gracefully.
+    const release = async () => {
+        try {
+            await client.query(`SELECT pg_advisory_unlock(${LOCK_KEY_EXPR})`, [name]);
+        }
+        catch {
+            // best-effort; ending the connection releases the lock regardless
+        }
+        await client.end().catch(() => undefined);
+    };
+    return { owned: true, release };
+}
+//# sourceMappingURL=queue-ownership.js.map

package/dist/host/queue-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-ownership.js","sourceRoot":"","sources":["../../src/host/queue-ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB;;;;GAIG;AACH,MAAM,aAAa,GAAG,kDAAkD,CAAC;AAqBzE,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,kBAAkB,OAAO,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,MAAc,EACd,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,4CAA4C,MAAM,WAAW,CAAC;IAC1E,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAA+B,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,aAAa,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;IAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;IAED,qGAAqG;IACrG,gGAAgG;IAChG,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,aAAa,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC"}

package/dist/host/queue-poller-census.js

@@ -0,0 +1,47 @@
+/**
+ * Queue-poller census (slice 140, Part A Layer 3 — detection half, pure).
+ *
+ * The advisory lock (queue-ownership.ts) only coordinates daemons that CALL it. A legacy/old-version
+ * host that predates the lock — or a `revo mcp` from before the thin-bridge era that is itself a full
+ * DBOS host — still connects to the `dbos` database and polls the `dev-tasks` queue, ignoring the lock.
+ * It has no inbound listening port, so the port-based `revo stop`/`doctor` cannot see it. The ONE
+ * control plane shared with code we do not control is the database itself: every DBOS system-DB
+ * connection is stamped `application_name = dbos_transact_<executorID>_<appVersion>` (visible in
+ * `pg_stat_activity`). A connection whose executor id is NOT this profile's pinned owner is a rogue.
+ *
+ * This module is the pure classifier (unit-tested); the live `pg_stat_activity` query lives in the IO
+ * layer (lifecycle.ts). Classification keys on the executor-id segment ONLY: `application_name` is
+ * capped at 63 bytes by Postgres, so a long suffix can truncate the appVersion — we therefore never
+ * trust the parsed version for identity (the owner's true version comes from host.json elsewhere).
+ */
+const STAMP_PREFIX = 'dbos_transact_';
+/**
+ * Parse the executor id out of `dbos_transact_<executorID>_<appVersion>` — the segment between the
+ * fixed prefix and the LAST underscore (the appVersion separator). Returns null when the string is not
+ * a DBOS stamp. Robust to a truncated/empty appVersion segment (we only need the executor id); pinned
+ * revo executor ids (`revo-<profile>`) and `local` contain no underscore, so the last-underscore split
+ * is unambiguous for the identities we classify.
+ */
+export function parseExecutorId(applicationName) {
+    if (!applicationName.startsWith(STAMP_PREFIX))
+        return null;
+    const rest = applicationName.slice(STAMP_PREFIX.length); // <executorID>_<appVersion>
+    const sep = rest.lastIndexOf('_');
+    const executorId = sep < 0 ? rest : rest.slice(0, sep);
+    return executorId.length > 0 ? executorId : null;
+}
+/**
+ * Foreign DBOS pollers among `backends` — any connection whose parsed executor id differs from the
+ * profile's pinned owner. Report-only data; the caller decides how to surface or evict it.
+ */
+export function classifyQueuePollerRogues(backends, ownerExecutorId) {
+    const rogues = [];
+    for (const b of backends) {
+        const executorId = parseExecutorId(b.applicationName);
+        if (executorId === null || executorId === ownerExecutorId)
+            continue;
+        rogues.push({ pid: b.pid, executorId, applicationName: b.applicationName, backendStart: b.backendStart });
+    }
+    return rogues;
+}
+//# sourceMappingURL=queue-poller-census.js.map

package/dist/host/queue-poller-census.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-poller-census.js","sourceRoot":"","sources":["../../src/host/queue-poller-census.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAmBtC;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,eAAuB;IACrD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAsC,EACtC,eAAuB;IAEvB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,eAAe;YAAE,SAAS;QACpE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/http/graphql-host.js

@@ -0,0 +1,56 @@
+import { ValidationPipe } from '@nestjs/common';
+import { NestFactory } from '@nestjs/core';
+import { addWsServer } from '../api/graphql-api/graphql-ws/ws.js';
+import { isPortFree, resolveDefaultGraphqlPort } from '../config.js';
+import { GraphqlHostModule } from './graphql-host.module.js';
+export const DEFAULT_GRAPHQL_HOST = '127.0.0.1';
+const defaultDeps = {
+    isPortFree,
+};
+function parsePort(raw) {
+    if (!raw)
+        return resolveDefaultGraphqlPort();
+    const candidate = raw.trim();
+    if (!/^\d+$/.test(candidate)) {
+        throw new TypeError(`Invalid GraphQL port: ${raw}`);
+    }
+    const port = Number(candidate);
+    if (!Number.isInteger(port) || port <= 0 || port > 65_535) {
+        throw new TypeError(`Invalid GraphQL port: ${raw}`);
+    }
+    return port;
+}
+export function resolveGraphqlHostOptions(options = {}) {
+    const host = options.host ?? process.env.REVO_GRAPHQL_HOST ?? DEFAULT_GRAPHQL_HOST;
+    if (host !== DEFAULT_GRAPHQL_HOST) {
+        throw new TypeError(`GraphQL host must bind ${DEFAULT_GRAPHQL_HOST} in v1; received ${host}`);
+    }
+    return {
+        host,
+        port: options.port ?? parsePort(process.env.REVO_GRAPHQL_PORT),
+    };
+}
+export async function startGraphqlHost(options = {}, deps = defaultDeps) {
+    const resolved = resolveGraphqlHostOptions(options);
+    if (resolved.host !== DEFAULT_GRAPHQL_HOST) {
+        throw new Error(`GraphQL host must bind ${DEFAULT_GRAPHQL_HOST} in v1; received ${resolved.host}`);
+    }
+    if (!(await deps.isPortFree(resolved.port))) {
+        throw new Error(`GraphQL port ${resolved.port} is already in use; set REVO_GRAPHQL_PORT or --port to a free isolated port.`);
+    }
+    const app = await NestFactory.create(GraphqlHostModule, { logger: ['error', 'warn'] });
+    app.useGlobalPipes(new ValidationPipe({ transform: true }));
+    await app.listen(resolved.port, resolved.host);
+    const ws = addWsServer(app);
+    const close = app.close.bind(app);
+    app.close = async () => {
+        await ws.dispose();
+        await close();
+    };
+    return {
+        app,
+        ...resolved,
+        url: `http://${resolved.host}:${resolved.port}/graphql`,
+    };
+}
+//# sourceMappingURL=graphql-host.js.map

package/dist/http/graphql-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-host.js","sourceRoot":"","sources":["../../src/http/graphql-host.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAkBhD,MAAM,WAAW,GAAoB;IACnC,UAAU;CACX,CAAC;AAEF,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,yBAAyB,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAA8B,EAAE;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;IACnF,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,0BAA0B,oBAAoB,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA8B,EAAE,EAChC,OAAwB,WAAW;IAEnC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,0BAA0B,oBAAoB,oBAAoB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,gBAAgB,QAAQ,CAAC,IAAI,8EAA8E,CAC5G,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACvF,GAAG,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;QACrB,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,GAAG;QACH,GAAG,QAAQ;QACX,GAAG,EAAE,UAAU,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,UAAU;KACxD,CAAC;AACJ,CAAC"}

package/dist/{mcp/mcp.module.js → http/graphql-host.module.js}

@@ -5,17 +5,19 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 import { Module } from '@nestjs/common';
+import { GraphqlApiModule } from '../api/graphql-api/graphql-api.module.js';
+import { HostLifecycle } from '../host/host.lifecycle.js';
 import { TaskControlPlaneModule } from '../task-control-plane/task-control-plane.module.js';
-import { McpFacadeService } from './mcp-facade.service.js';
-import { McpStdioService } from './mcp-stdio.service.js';
-let McpModule = class McpModule {
+// The daemon serves BOTH front doors (ADR 0006): GraphQL (frontend) + MCP (agents), over one host
+// process that is the single DBOS owner. The MCP server is built directly from TaskControlPlaneApi-
+// Service (see daemon.ts) — no separate McpModule in the graph.
+let GraphqlHostModule = class GraphqlHostModule {
 };
-McpModule = __decorate([
+GraphqlHostModule = __decorate([
     Module({
-        imports: [TaskControlPlaneModule],
-        providers: [McpFacadeService, McpStdioService],
-        exports: [McpFacadeService, McpStdioService],
+        imports: [TaskControlPlaneModule, GraphqlApiModule],
+        providers: [HostLifecycle],
     })
-], McpModule);
-export { McpModule };
-//# sourceMappingURL=mcp.module.js.map
+], GraphqlHostModule);
+export { GraphqlHostModule };
+//# sourceMappingURL=graphql-host.module.js.map

package/dist/http/graphql-host.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-host.module.js","sourceRoot":"","sources":["../../src/http/graphql-host.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAE5F,kGAAkG;AAClG,oGAAoG;AACpG,gEAAgE;AAKzD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CAAG,CAAA;AAApB,iBAAiB;IAJ7B,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QACnD,SAAS,EAAE,CAAC,aAAa,CAAC;KAC3B,CAAC;GACW,iBAAiB,CAAG"}

package/dist/infrastructure/metrics/graphql/graphql-metrics.js

@@ -0,0 +1,91 @@
+import { getOperationAST, parse } from 'graphql';
+const ANONYMOUS_OPERATION = 'anonymous';
+const OVERFLOW_OPERATION_LABEL = { operationName: 'other', operationType: 'unknown' };
+export const MAX_GRAPHQL_OPERATION_LABELS = 256;
+function key(label) {
+    return `${label.operationType}:${label.operationName}`;
+}
+function isExecutionResult(value) {
+    return typeof value === 'object' && value !== null && ('data' in value || 'errors' in value);
+}
+function resultHasErrors(result) {
+    return isExecutionResult(result) && Array.isArray(result.errors) && result.errors.length > 0;
+}
+export function identifyGraphqlOperation(params) {
+    const query = params.query;
+    if (!query) {
+        return { operationName: params.operationName ?? ANONYMOUS_OPERATION, operationType: 'unknown' };
+    }
+    try {
+        const document = parse(query);
+        const operation = getOperationAST(document, params.operationName);
+        return {
+            operationName: params.operationName ?? operation?.name?.value ?? ANONYMOUS_OPERATION,
+            operationType: operation?.operation ?? 'unknown',
+        };
+    }
+    catch {
+        return { operationName: params.operationName ?? ANONYMOUS_OPERATION, operationType: 'unknown' };
+    }
+}
+export class GraphqlOperationMetrics {
+    records = new Map();
+    record(input) {
+        let label = { operationName: input.operationName, operationType: input.operationType };
+        const labelKey = key(label);
+        const overflowKey = key(OVERFLOW_OPERATION_LABEL);
+        const leavesRoomForOverflow = this.records.size < MAX_GRAPHQL_OPERATION_LABELS - (this.records.has(overflowKey) ? 0 : 1);
+        if (!this.records.has(labelKey) && !leavesRoomForOverflow) {
+            label = OVERFLOW_OPERATION_LABEL;
+        }
+        const current = this.records.get(key(label)) ?? {
+            ...label,
+            count: 0,
+            errorCount: 0,
+            totalDurationMs: 0,
+            maxDurationMs: 0,
+        };
+        current.count += 1;
+        current.errorCount += input.errored ? 1 : 0;
+        current.totalDurationMs += input.durationMs;
+        current.maxDurationMs = Math.max(current.maxDurationMs, input.durationMs);
+        this.records.set(key(label), current);
+    }
+    snapshot() {
+        return [...this.records.values()]
+            .map((record) => ({ ...record }))
+            .sort((a, b) => `${a.operationType}:${a.operationName}`.localeCompare(`${b.operationType}:${b.operationName}`));
+    }
+    reset() {
+        this.records.clear();
+    }
+}
+export const graphqlOperationMetrics = new GraphqlOperationMetrics();
+export function createGraphqlMetricsPlugin(metrics = graphqlOperationMetrics, now = () => performance.now()) {
+    return {
+        onParams({ params, paramsHandler, setParamsHandler }) {
+            const operation = identifyGraphqlOperation(params);
+            setParamsHandler(async (payload) => {
+                const startedAt = now();
+                try {
+                    const result = await paramsHandler(payload);
+                    metrics.record({
+                        ...operation,
+                        durationMs: Math.max(0, now() - startedAt),
+                        errored: resultHasErrors(result),
+                    });
+                    return result;
+                }
+                catch (error) {
+                    metrics.record({
+                        ...operation,
+                        durationMs: Math.max(0, now() - startedAt),
+                        errored: true,
+                    });
+                    throw error;
+                }
+            });
+        },
+    };
+}
+//# sourceMappingURL=graphql-metrics.js.map

package/dist/infrastructure/metrics/graphql/graphql-metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-metrics.js","sourceRoot":"","sources":["../../../../src/infrastructure/metrics/graphql/graphql-metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,EAAgD,MAAM,SAAS,CAAC;AA0B/F,MAAM,mBAAmB,GAAG,WAAW,CAAC;AACxC,MAAM,wBAAwB,GAAmB,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AACtG,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD,SAAS,GAAG,CAAC,KAAqB;IAChC,OAAO,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAqB;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAClE,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,mBAAmB;YACpF,aAAa,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS;SACjD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IAClG,CAAC;AACH,CAAC;AAED,MAAM,OAAO,uBAAuB;IACjB,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE5E,MAAM,CAAC,KAAkB;QACvB,IAAI,KAAK,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QACvF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAClD,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,4BAA4B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC1D,KAAK,GAAG,wBAAwB,CAAC;QACnC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI;YAC9C,GAAG,KAAK;YACR,KAAK,EAAE,CAAC;YACR,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,CAAC;YAClB,aAAa,EAAE,CAAC;SACjB,CAAC;QACF,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACnB,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC;QAC5C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;aAChC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACpH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,EAAE,CAAC;AAErE,MAAM,UAAU,0BAA0B,CACxC,OAAO,GAAG,uBAAuB,EACjC,MAAoB,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;IAE3C,OAAO;QACL,QAAQ,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE;YAClD,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACnD,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACjC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5C,OAAO,CAAC,MAAM,CAAC;wBACb,GAAG,SAAS;wBACZ,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;wBAC1C,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;qBACjC,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,MAAM,CAAC;wBACb,GAAG,SAAS;wBACZ,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;wBAC1C,OAAO,EAAE,IAAI;qBACd,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/mcp/mcp-capabilities.js

@@ -13,7 +13,15 @@ export const MCP_TOOL_NAMES = [
     'get_run',
     'get_run_events',
     'get_run_log',
+    'get_agent_activity',
+    'get_agent_attempts',
+    'get_agent_log',
+    'tail_agent_log',
+    'read_agent_output_events',
     'get_run_digest',
+    'wait_for_run',
+    'wait_for_any_gate',
+    'watch_runs',
     'list_inbox',
     'get_inbox_item',
     'get_pending_decisions',
@@ -36,7 +44,7 @@ export const MCP_INSTRUCTIONS = `Revo is a local-first software-development task
 
 Use these tools to manage tasks end-to-end from your coding agent:
 - create and start runs;
-- inspect run status, events, attempts, and digests;
+- inspect run status, events, attempts, agent activity, bounded logs, and digests;
 - resolve human inbox gates and questions;
 - inspect installed playbooks, roles, and pipelines;
 - inspect PR readiness and actionable review feedback before resuming work;

package/dist/mcp/mcp-capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-capabilities.js","sourceRoot":"","sources":["../../src/mcp/mcp-capabilities.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,qBAAqB;IACrB,wBAAwB;IACxB,aAAa;IACb,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,SAAS;IACT,gBAAgB;IAChB,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;qDAWqB,CAAC"}
+{"version":3,"file":"mcp-capabilities.js","sourceRoot":"","sources":["../../src/mcp/mcp-capabilities.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,qBAAqB;IACrB,wBAAwB;IACxB,aAAa;IACb,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,SAAS;IACT,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,0BAA0B;IAC1B,gBAAgB;IAChB,cAAc;IACd,mBAAmB;IACnB,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;qDAWqB,CAAC"}

package/dist/mcp/mcp-facade.service.js

@@ -9,22 +9,52 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 import { Injectable } from '@nestjs/common';
 import { TaskControlPlaneApiService, } from '../task-control-plane/task-control-plane-api.service.js';
+import { ControlPlaneError } from '../control-plane/errors.js';
+import { AgentObservabilityError } from '../observability/types.js';
+import { CreateRunWorkflowError } from '../run/create-run.js';
+import { RunWatchService } from '../task-control-plane/run-watch.service.js';
 import { MCP_TOOL_NAMES } from './mcp-capabilities.js';
+function formatCause(error) {
+    if (error instanceof ControlPlaneError) {
+        const status = error.status === undefined ? '' : ` status=${error.status}`;
+        return `${error.code}${status}: ${error.message}`;
+    }
+    if (error instanceof Error)
+        return error.message;
+    return String(error);
+}
+function exposeApplicationError(promise) {
+    return promise.catch((error) => {
+        if (error instanceof AgentObservabilityError) {
+            throw new Error(`${error.code}: ${error.message}`);
+        }
+        throw error;
+    });
+}
 let McpFacadeService = class McpFacadeService {
     api;
-    constructor(api) {
+    /**
+     * `runWatch` is injected by the daemon with a pubSub-backed instance (slice 141 D2, option A). When
+     * absent (e2e/stdio/tests construct the facade with only the api), we lazily build a poll-fallback
+     * watch (option B) — equivalent correctness, slightly higher latency.
+     */
+    runWatchInstance;
+    constructor(api, runWatch) {
         this.api = api;
+        this.runWatchInstance = runWatch;
+    }
+    get runWatch() {
+        return (this.runWatchInstance ??= new RunWatchService(this.api));
     }
     getCapabilities() {
         return {
             transport: 'stdio',
             auth: 'none',
             tools: [...MCP_TOOL_NAMES],
-            runnerModes: ['script', 'live'],
             notes: [
                 'Local stdio MCP server; no remote HTTP listener.',
                 'Tools expose product operations, not generic Revisium row CRUD.',
-                'Live runs use the real Claude runner and git/GitHub integrator.',
+                'Runs are driven by installed playbooks, pipeline catalogs, and execution profiles.',
             ],
         };
     }
@@ -44,7 +74,15 @@ let McpFacadeService = class McpFacadeService {
         return this.api.getRepositoryContext(input);
     }
     createRun(input) {
-        return this.api.createRun(input);
+        return this.api.createRun(input).catch((error) => {
+            if (error instanceof CreateRunWorkflowError) {
+                const created = Object.keys(error.createdIds).length > 0
+                    ? `; createdBeforeFailure=${JSON.stringify(error.createdIds)}`
+                    : '';
+                throw new Error(`${error.message}: ${formatCause(error.cause)}${created}`);
+            }
+            throw error;
+        });
     }
     startRun(input) {
         return this.api.startRun(input);
@@ -67,9 +105,33 @@ let McpFacadeService = class McpFacadeService {
     getRunLog(input) {
         return this.api.getRunLog(input);
     }
+    getAgentActivity(runId) {
+        return exposeApplicationError(this.api.getAgentActivity(runId));
+    }
+    getAgentAttempts(runId) {
+        return exposeApplicationError(this.api.getAgentAttempts(runId));
+    }
+    getAgentLog(input) {
+        return exposeApplicationError(this.api.getAgentLog(input));
+    }
+    tailAgentLog(input) {
+        return exposeApplicationError(this.api.readAgentOutputEvents(input));
+    }
+    readAgentOutputEvents(input) {
+        return exposeApplicationError(this.api.readAgentOutputEvents(input));
+    }
     getRunDigest(runId) {
         return this.api.getRunDigest(runId);
     }
+    waitForRun(input) {
+        return this.api.waitForRun(input);
+    }
+    waitForAnyGate(input) {
+        return this.runWatch.waitForAnyGate(input);
+    }
+    watchRuns(input) {
+        return this.runWatch.watchRuns(input);
+    }
     listInbox(filter) {
         return this.api.listInbox(filter);
     }
@@ -124,7 +186,8 @@ let McpFacadeService = class McpFacadeService {
 };
 McpFacadeService = __decorate([
     Injectable(),
-    __metadata("design:paramtypes", [TaskControlPlaneApiService])
+    __metadata("design:paramtypes", [TaskControlPlaneApiService,
+        RunWatchService])
 ], McpFacadeService);
 export { McpFacadeService };
 //# sourceMappingURL=mcp-facade.service.js.map