@tangle-network/agent-runtime 0.46.0 → 0.47.0

package/dist/loops.js

@@ -28,10 +28,13 @@ import {
   equalKOnCost,
   fanout,
   flatWidenGate,
+  gitWorkspace,
   inlineSandboxClient,
+  localShell,
   loopDispatch,
   loopUntil,
   materializeTreeView,
+  observe,
   openSandboxRun,
   panel,
   pipeline,
@@ -39,6 +42,7 @@ import {
   registerShape,
   renderAnalyses,
   renderCorpusToInstructions,
+  renderReport,
   replaySpawnTree,
   reportLoopUsage,
   runLoop,
@@ -50,7 +54,7 @@ import {
   trajectoryReport,
   verify,
   widen
-} from "./chunk-65FQLI4V.js";
+} from "./chunk-72JQCHOZ.js";
 import {
   extractLlmCallEvent,
   mapSandboxEvent
@@ -87,11 +91,14 @@ export {
   extractLlmCallEvent,
   fanout,
   flatWidenGate,
+  gitWorkspace,
   inlineSandboxClient,
+  localShell,
   loopDispatch,
   loopUntil,
   mapSandboxEvent,
   materializeTreeView,
+  observe,
   openSandboxRun,
   panel,
   pipeline,
@@ -99,6 +106,7 @@ export {
   registerShape,
   renderAnalyses,
   renderCorpusToInstructions,
+  renderReport,
   replaySpawnTree,
   reportLoopUsage,
   runLoop,

package/dist/mcp/bin.js

@@ -4,17 +4,17 @@ import {
   createPropagatingTraceEmitter,
   detectExecutor,
   readTraceContextFromEnv
-} from "../chunk-KPN7OQ64.js";
+} from "../chunk-T4OQQEE3.js";
 import "../chunk-WIR4HOOJ.js";
 import "../chunk-JNPK46YH.js";
 import {
   createDefaultCoderDelegate
-} from "../chunk-I42NHLKX.js";
+} from "../chunk-5YDS7BLC.js";
 import "../chunk-KADIJAD4.js";
 import "../chunk-GLR25NG7.js";
 import {
   runLoop
-} from "../chunk-65FQLI4V.js";
+} from "../chunk-72JQCHOZ.js";
 import "../chunk-GSUO5QS6.js";
 import "../chunk-DGUM43GV.js";
 

package/dist/mcp/index.d.ts

@@ -1,17 +1,17 @@
-import { S as SandboxClient, f as LoopSandboxPlacement, e as LoopTraceEmitter } from '../types-DnYoHvvZ.js';
-import { c as FleetHandle, d as DelegationExecutor, e as DelegateFeedbackArgs, f as DelegationFeedbackSnapshot, g as DelegationProfile, D as DelegateCodeArgs, h as DelegateResearchArgs, i as DelegateUiAuditArgs, j as DelegationStatus, k as DelegationProgress, l as DelegationResultPayload, m as DelegationError, n as DelegationStatusResult, o as DelegationHistoryArgs, p as DelegationHistoryEntry, q as CoderDelegate, R as ResearcherDelegate, U as UiAuditorDelegate, r as DelegateCodeResult, s as DelegateFeedbackResult, t as ResearchSource, u as DelegateResearchResult, v as DelegateUiAuditResult, w as DelegationHistoryResult, x as DelegationStatusArgs } from '../kb-gate-2Gwpz_27.js';
-export { y as CoderReview, C as CoderReviewer, a as CoderWinnerSelection, z as CreateDefaultCoderDelegateOptions, b as CreateKbGateOptions, A as DelegateCodeConfig, B as DelegateResearchConfig, E as DelegateRunCtx, G as DelegateUiAuditConfig, H as DelegateUiAuditRoute, F as FactCandidate, I as FactJudge, J as FactJudgeVerdict, K as FeedbackRating, L as FeedbackRefersTo, M as FleetWorkspaceExecutorOptions, N as KbGateResult, O as ResearchOutputShape, S as SiblingSandboxExecutorOptions, P as UiAuditorDelegationOutput, Q as createDefaultCoderDelegate, T as createFleetWorkspaceExecutor, V as createKbGate, W as createSiblingSandboxExecutor } from '../kb-gate-2Gwpz_27.js';
+import { S as SandboxClient, f as LoopSandboxPlacement, e as LoopTraceEmitter } from '../types-nBMuollC.js';
+import { c as FleetHandle, d as DelegationExecutor, e as DelegateFeedbackArgs, f as DelegationFeedbackSnapshot, g as DelegationProfile, D as DelegateCodeArgs, h as DelegateResearchArgs, i as DelegateUiAuditArgs, j as DelegationStatus, k as DelegationProgress, l as DelegationResultPayload, m as DelegationError, n as DelegationStatusResult, o as DelegationHistoryArgs, p as DelegationHistoryEntry, q as CoderDelegate, R as ResearcherDelegate, U as UiAuditorDelegate, r as DelegateCodeResult, s as DelegateFeedbackResult, t as ResearchSource, u as DelegateResearchResult, v as DelegateUiAuditResult, w as DelegationHistoryResult, x as DelegationStatusArgs } from '../kb-gate-51BlLlVM.js';
+export { y as CoderReview, C as CoderReviewer, a as CoderWinnerSelection, z as CreateDefaultCoderDelegateOptions, b as CreateKbGateOptions, A as DelegateCodeConfig, B as DelegateResearchConfig, E as DelegateRunCtx, G as DelegateUiAuditConfig, H as DelegateUiAuditRoute, F as FactCandidate, I as FactJudge, J as FactJudgeVerdict, K as FeedbackRating, L as FeedbackRefersTo, M as FleetWorkspaceExecutorOptions, N as KbGateResult, O as ResearchOutputShape, S as SiblingSandboxExecutorOptions, P as UiAuditorDelegationOutput, Q as createDefaultCoderDelegate, T as createFleetWorkspaceExecutor, V as createKbGate, W as createSiblingSandboxExecutor } from '../kb-gate-51BlLlVM.js';
 export { B as BuildDelegationMcpServerOptions, C as ComposeProductionAgentProfileOptions, D as DELEGATION_MCP_SERVER_KEY, b as buildDelegationMcpServer, c as composeProductionAgentProfile } from '../delegation-profile-1GbW5yA3.js';
 import { L as LocalHarness, r as runLocalHarness } from '../local-harness-KrdFTY5R.js';
 export { a as LocalHarnessResult, R as RunLocalHarnessOptions } from '../local-harness-KrdFTY5R.js';
-import { O as OtelExporter } from '../otel-export-nurzFwuJ.js';
-export { m as mcpToolsForRuntimeMcp, a as mcpToolsForRuntimeMcpSubset } from '../otel-export-nurzFwuJ.js';
+import { O as OtelExporter } from '../otel-export-EzfsVUhh.js';
+export { m as mcpToolsForRuntimeMcp, a as mcpToolsForRuntimeMcpSubset } from '../otel-export-EzfsVUhh.js';
 import { AnalystFinding } from '@tangle-network/agent-eval';
-import { S as Scope, R as ResultBlobStore, A as Agent, B as Budget } from '../types-BfoeiQRZ.js';
+import { S as Scope, R as ResultBlobStore, A as Agent, B as Budget } from '../types-Cbx3dNK5.js';
 import { a as UiLens } from '../substrate-CUgk7F7s.js';
 import '@tangle-network/sandbox';
 import '../runtime-hooks-C7JwKb9E.js';
-import '../coder-DCWFQpmJ.js';
+import '../coder-CVZNGbyg.js';
 import 'node:child_process';
 
 /**
@@ -452,10 +452,9 @@ interface McpServerOptions {
     /** Override the default in-memory task queue. */
     queue?: DelegationTaskQueue;
     /**
-     * Extra tools to serve alongside the delegation tools — e.g. the operator toolbox
-     * (`createCoordinationTools(...).tools`), which exposes the driver's spawn/observe/steer verbs over
-     * MCP so a sandbox agent can BE the driver. Registered after the built-ins; a duplicate name
-     * throws (fail loud — no silent shadowing of a delegation tool).
+     * Extra tools to serve alongside the delegation tools, for example
+     * `createCoordinationTools(...).tools`. Registered after the built-ins; a
+     * duplicate name throws so delegation tools cannot be shadowed silently.
      */
     extraTools?: McpToolDescriptor[];
     /** Server display name surfaced via `initialize`. Default `'agent-runtime-mcp'`. */
@@ -570,9 +569,11 @@ interface CheckRunnerOptions {
 /** Run ONE lens over a trace → findings. Generic over any kind: prompt = the lens + the agent-eval
  *  finding schema; the model's JSON array is parsed (`parseRawFinding`), lifted, and firewalled. */
 declare function runCheck(kind: Check, trace: unknown, opts: CheckRunnerOptions, producedAt: string): Promise<AnalystFinding[]>;
-/** Build a `run_analyst` runner over a kind directory — the seam the operator toolbox is wired with.
- *  Returns the findings, or a typed error for an unknown kind. `producedAt` is passed in (the runtime
- *  forbids `Date.now` in replay-safe paths; the caller stamps it). */
+/**
+ * Build a `run_analyst` runner over a kind directory.
+ * Returns findings, or a typed error for an unknown kind. `producedAt` is
+ * passed in because replay-safe paths must not read `Date.now`.
+ */
 declare function makeCheckRunner(kinds: Record<string, Check>, opts: CheckRunnerOptions): (kindId: string, trace: unknown, producedAt: string) => Promise<AnalystFinding[] | {
     error: string;
 }>;
@@ -580,84 +581,84 @@ declare function makeCheckRunner(kinds: Record<string, Check>, opts: CheckRunner
 /**
  * @experimental
  *
- * COORDINATION TOOLS — the verbs a parent agent uses to coordinate the child agents it spawns,
- * exposed as MCP tools backed by a live keystone `Scope`. This is `Scope`-as-MCP.
- *
- * NOT a transport. The cross-org message bus (`docs/agent-bus-protocol.md`) and the SDK's
- * `dispatchPrompt`/`SessionMessage` are the *transports* the `steer` verb rides; THIS file is the
- * verb set (the API). One verb, several bindings: in-process `Scope.send` is a direct call; across
- * sandboxes it rides SDK session-messaging; across orgs it rides the agent-bus protocol.
- *
- *   spawn_worker  → scope.spawn   (budget-bounded, fail-closed — equal-k holds even for an LLM driver)
- *   await_next    → scope.next    (THE wake event: block until the next spawned child settles)
- *   observe_worker→ scope.view + the result blob (a child's status, spend, and settled output)
- *   steer_worker  → scope.send    (deliver a next-instruction / interrupt to a RUNNING child)
- *   list_analysts → the check menu (the trace lenses the agent can apply — see checks.ts)
- *   run_analyst   → apply a CHECK  (run a kind over a child's trace → trace-derived findings)
- *   stop          → declare the run complete (the terminal move)
- *
- * The check verbs are present only when the check seam (`analystKinds` + `runAnalyst`) is wired —
- * an agent that does not review traces (a pure dispatcher) omits them. A trace check is a SEPARATE
- * lens (selector ≠ judge: it reads the trace, never the score); authoring a NEW check at runtime is
- * the next addition.
- *
- * A worker the driver spawns may itself carry the driver profile — `spawn_worker` does not care what
- * the profile is, so drivers-of-drivers fall out for free (each sub-driver gets its own sub-scope,
- * bounded by `maxDepth` + the conserved pool).
+ * MCP binding for a live `Scope`. A sandbox driver gets the same small verbs
+ * the in-process driver has: spawn, observe, await, steer, ask/answer, analyze,
+ * and stop. Settled outputs remain Scope artifacts; product code can project
+ * them into any UI/report envelope it needs.
  */
 
-/** A worker the driver has drained via `await_next` — the operator's running ledger of settled
- *  workers + their DEPLOYABLE verdict (the driver IS the selector, so it legitimately reads the
- *  verdict; the analyst, which reads only the trace, is the separate selector≠judge lens). The
- *  driver picks its deliverable from this ledger at `stop`. */
+/** A worker the driver has drained via `await_next`. */
 interface SettledWorker {
     readonly id: string;
     readonly status: 'done' | 'down';
-    /** Deployable score in [0,1] from the worker's verdict (done only). */
     readonly score?: number;
-    /** Whether the deployable verdict passed (done only). */
     readonly valid?: boolean;
-    /** Result-blob pointer for the worker's output/trace (done only). */
     readonly outRef?: string;
-    /** Failure reason (down only). */
     readonly reason?: string;
 }
-/** How a `spawn_worker` profile becomes a spawnable leaf `Agent`. The caller wires this (e.g. the
- *  surface registry turns a profile into a shot executor) so the toolbox stays domain-blind. */
+type QuestionLevel = 'worker' | 'driver' | 'loop';
+type QuestionUrgency = 'continue-without' | 'blocks-step' | 'blocks-run';
+interface QuestionOption {
+    readonly label: string;
+    readonly tradeoff: string;
+}
+interface Question {
+    readonly id: string;
+    readonly from: string;
+    readonly level: QuestionLevel;
+    readonly question: string;
+    readonly reason: string;
+    readonly urgency: QuestionUrgency;
+    readonly options?: ReadonlyArray<QuestionOption>;
+}
+type QuestionDecision = {
+    readonly kind: 'answer';
+    readonly answer: string;
+    readonly by: string;
+} | {
+    readonly kind: 'defer';
+    readonly reason: string;
+} | {
+    readonly kind: 'escalate';
+    readonly to: 'parent' | 'user' | string;
+    readonly reason: string;
+};
+interface QuestionRecord extends Question {
+    readonly status: 'open' | 'answered' | 'deferred' | 'escalated';
+    readonly decision?: QuestionDecision;
+    readonly openedAt: number;
+}
+type QuestionPolicy = 'auto' | 'mustDecide' | 'bubble' | 'failClosed';
+interface AnalystRegistry {
+    readonly kinds: ReadonlyArray<{
+        id: string;
+        description: string;
+        area: string;
+    }>;
+    readonly run: (kindId: string, trace: unknown) => Promise<unknown>;
+}
+type CoordinationEvent = {
+    readonly type: 'question';
+    readonly question: QuestionRecord;
+};
 type MakeWorkerAgent = (profile: unknown) => Agent<unknown, unknown>;
 interface CoordinationToolsOptions {
-    /** The DRIVER's live scope — spawn/observe/steer all act on this. */
     readonly scope: Scope<unknown>;
-    /** Result blobs, so `observe_worker` can rehydrate a settled worker's output. */
     readonly blobs: ResultBlobStore;
-    /** Turn a spawn_worker `profile` into a leaf agent (registry-resolved on spawn). */
     readonly makeWorkerAgent: MakeWorkerAgent;
-    /** Per-worker conserved budget the driver reserves on each spawn. */
     readonly perWorker: Budget;
-    /** The analyst lens menu (for `list_analysts`) — id + one-line + area. Injected so the toolbox
-     *  stays domain-blind; wire it from `analyst-kinds.ts`'s directory. Omit to disable analyst tools. */
-    readonly analystKinds?: ReadonlyArray<{
-        id: string;
-        description: string;
-        area: string;
-    }>;
-    /** Run a lens over a worker's trace → findings (or a typed error). Wire it from
-     *  `makeCheckRunner(...)`. `run_analyst` fetches the worker's settled output and passes it here. */
-    readonly runAnalyst?: (kindId: string, trace: unknown) => Promise<unknown>;
+    readonly analysts?: AnalystRegistry;
+    readonly onEvent?: (event: CoordinationEvent) => void | Promise<void>;
+    readonly questionPolicy?: QuestionPolicy;
 }
 interface CoordinationTools {
-    /** MCP tools — register on an `McpServer`, or call the handlers directly in-process. */
     readonly tools: McpToolDescriptor[];
-    /** True once the driver called `stop` — the operator loop reads this to terminate. */
     isStopped(): boolean;
-    /** The reason passed to `stop`, if any. */
     stopReason(): string | undefined;
-    /** The workers drained so far via `await_next` (the driver's selection ledger). */
     settled(): ReadonlyArray<SettledWorker>;
+    questions(): ReadonlyArray<QuestionRecord>;
 }
-/** Build the operator toolbox over a live scope. The tools are the driver's verbs; their handlers
- *  are thin wrappers over the keystone (spawn/view/send), so the budget/journal/abort discipline of
- *  the Supervisor applies to a sandbox driver exactly as to the in-process one. */
+/** Build the driver's MCP tools over a live scope. */
 declare function createCoordinationTools(opts: CoordinationToolsOptions): CoordinationTools;
 
 /**
@@ -1147,4 +1148,4 @@ declare function createPropagatingTraceEmitter(ctx: TraceContext): {
  */
 declare function traceContextToEnv(ctx: TraceContext): Record<string, string>;
 
-export { type Check, type CheckRunnerOptions, CoderDelegate, type CoordinationTools, type CoordinationToolsOptions, type CreateWorktreeOptions, DELEGATE_CODE_DESCRIPTION, DELEGATE_CODE_INPUT_SCHEMA, DELEGATE_CODE_TOOL_NAME, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_RESEARCH_DESCRIPTION, DELEGATE_RESEARCH_INPUT_SCHEMA, DELEGATE_RESEARCH_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DelegateCodeArgs, DelegateCodeResult, DelegateFeedbackArgs, DelegateFeedbackResult, DelegateResearchArgs, DelegateResearchResult, DelegateUiAuditArgs, DelegateUiAuditResult, DelegationError, DelegationExecutor, DelegationFeedbackSnapshot, DelegationHistoryArgs, DelegationHistoryEntry, DelegationHistoryResult, DelegationProfile, DelegationProgress, type DelegationRecord, DelegationResultPayload, DelegationStatus, DelegationStatusArgs, DelegationStatusResult, DelegationTaskQueue, type DelegationTaskQueueOptions, type DetectExecutorArgs, type DiffOptions, type DiffResult, type FeedbackEvent, type FeedbackStore, FleetHandle, type GitRunner, InMemoryFeedbackStore, type InProcessExecutorDescribePlacement, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, LocalHarness, type MakeWorkerAgent, type McpServer, type McpServerOptions, type McpToolDescriptor, type McpTransport, type RemoveWorktreeOptions, ResearchSource, ResearcherDelegate, type SettledWorker, type SubmitInput, type SubmitOutput, type TraceContext, UiAuditorDelegate, type WorktreeHandle, captureWorktreeDiff, createCoordinationTools, createDelegateCodeHandler, createDelegateFeedbackHandler, createDelegateResearchHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createInProcessExecutor, createInProcessTransport, createMcpServer, createPropagatingTraceEmitter, createWorktree, defaultChecks, detectExecutor, eventToSnapshot, hashIdempotencyInput, liftFindings, makeCheckRunner, readTraceContextFromEnv, removeWorktree, renderTrace, runCheck, runLocalHarness, traceContextToEnv, validateDelegateCodeArgs, validateDelegateFeedbackArgs, validateDelegateResearchArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };
+export { type AnalystRegistry, type Check, type CheckRunnerOptions, CoderDelegate, type CoordinationEvent, type CoordinationTools, type CoordinationToolsOptions, type CreateWorktreeOptions, DELEGATE_CODE_DESCRIPTION, DELEGATE_CODE_INPUT_SCHEMA, DELEGATE_CODE_TOOL_NAME, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_RESEARCH_DESCRIPTION, DELEGATE_RESEARCH_INPUT_SCHEMA, DELEGATE_RESEARCH_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DelegateCodeArgs, DelegateCodeResult, DelegateFeedbackArgs, DelegateFeedbackResult, DelegateResearchArgs, DelegateResearchResult, DelegateUiAuditArgs, DelegateUiAuditResult, DelegationError, DelegationExecutor, DelegationFeedbackSnapshot, DelegationHistoryArgs, DelegationHistoryEntry, DelegationHistoryResult, DelegationProfile, DelegationProgress, type DelegationRecord, DelegationResultPayload, DelegationStatus, DelegationStatusArgs, DelegationStatusResult, DelegationTaskQueue, type DelegationTaskQueueOptions, type DetectExecutorArgs, type DiffOptions, type DiffResult, type FeedbackEvent, type FeedbackStore, FleetHandle, type GitRunner, InMemoryFeedbackStore, type InProcessExecutorDescribePlacement, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, LocalHarness, type MakeWorkerAgent, type McpServer, type McpServerOptions, type McpToolDescriptor, type McpTransport, type Question, type QuestionDecision, type QuestionPolicy, type QuestionRecord, type RemoveWorktreeOptions, ResearchSource, ResearcherDelegate, type SettledWorker, type SubmitInput, type SubmitOutput, type TraceContext, UiAuditorDelegate, type WorktreeHandle, captureWorktreeDiff, createCoordinationTools, createDelegateCodeHandler, createDelegateFeedbackHandler, createDelegateResearchHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createInProcessExecutor, createInProcessTransport, createMcpServer, createPropagatingTraceEmitter, createWorktree, defaultChecks, detectExecutor, eventToSnapshot, hashIdempotencyInput, liftFindings, makeCheckRunner, readTraceContextFromEnv, removeWorktree, renderTrace, runCheck, runLocalHarness, traceContextToEnv, validateDelegateCodeArgs, validateDelegateFeedbackArgs, validateDelegateResearchArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };

package/dist/mcp/index.js

@@ -14,7 +14,7 @@ import {
   removeWorktree,
   traceContextToEnv,
   validateDelegateUiAuditArgs
-} from "../chunk-KPN7OQ64.js";
+} from "../chunk-T4OQQEE3.js";
 import "../chunk-WIR4HOOJ.js";
 import {
   mcpToolsForRuntimeMcp,
@@ -58,7 +58,7 @@ import {
   createDefaultCoderDelegate,
   createFleetWorkspaceExecutor,
   createSiblingSandboxExecutor
-} from "../chunk-I42NHLKX.js";
+} from "../chunk-5YDS7BLC.js";
 import "../chunk-KADIJAD4.js";
 import {
   runLocalHarness
@@ -70,7 +70,7 @@ import {
 } from "../chunk-7JITYN6T.js";
 import {
   assertTraceDerivedFindings
-} from "../chunk-65FQLI4V.js";
+} from "../chunk-72JQCHOZ.js";
 import "../chunk-GSUO5QS6.js";
 import "../chunk-DGUM43GV.js";
 
@@ -246,7 +246,30 @@ var idArg = { type: "string", description: "The workerId returned by spawn_worke
 function createCoordinationTools(opts) {
   let stopped = false;
   let reason;
+  let questionSeq = 0;
   const ledger = [];
+  const questions = [];
+  const questionPolicy = opts.questionPolicy ?? "auto";
+  const str = (v, field) => {
+    if (typeof v !== "string" || v.length === 0)
+      throw new Error(`coordination tools: "${field}" must be a non-empty string`);
+    return v;
+  };
+  const obj = (raw) => {
+    if (!raw || typeof raw !== "object")
+      throw new Error("coordination tools: arguments must be an object");
+    return raw;
+  };
+  const level = (v) => {
+    if (v === "worker" || v === "driver" || v === "loop") return v;
+    throw new Error('coordination tools: "level" must be worker, driver, or loop');
+  };
+  const urgency = (v) => {
+    if (v === "continue-without" || v === "blocks-step" || v === "blocks-run") return v;
+    throw new Error(
+      'coordination tools: "urgency" must be continue-without, blocks-step, or blocks-run'
+    );
+  };
   const recordSettled = (s) => {
     const w = s.kind === "done" ? {
       id: s.handle.id,
@@ -258,24 +281,68 @@ function createCoordinationTools(opts) {
     ledger.push(w);
     return w;
   };
-  const str = (v, field) => {
-    if (typeof v !== "string" || v.length === 0)
-      throw new Error(`operator toolbox: "${field}" must be a non-empty string`);
-    return v;
+  const nextQuestionId = (from) => `${from}:q${questionSeq++}`;
+  const normalizeQuestion = (q, fallbackFrom) => {
+    const from = str(q.from ?? fallbackFrom, "from");
+    return {
+      id: typeof q.id === "string" && q.id.length > 0 ? q.id : nextQuestionId(from),
+      from,
+      level: level(q.level),
+      question: str(q.question, "question"),
+      reason: str(q.reason, "reason"),
+      ...q.options ? { options: q.options } : {},
+      urgency: urgency(q.urgency)
+    };
   };
-  const obj = (raw) => {
-    if (!raw || typeof raw !== "object")
-      throw new Error("operator toolbox: arguments must be an object");
-    return raw;
+  const addQuestion = (raw, fallbackFrom, decision) => {
+    const q = normalizeQuestion(raw, fallbackFrom);
+    const existing = questions.find((x) => x.id === q.id);
+    if (existing) return { question: existing, added: false };
+    const effectiveDecision = decision ?? (questionPolicy === "bubble" ? {
+      kind: "escalate",
+      to: "parent",
+      reason: "question policy bubbled to parent"
+    } : void 0);
+    const status = effectiveDecision?.kind === "answer" ? "answered" : effectiveDecision?.kind === "defer" ? "deferred" : effectiveDecision?.kind === "escalate" ? "escalated" : "open";
+    const record = {
+      ...q,
+      status,
+      openedAt: Date.now(),
+      ...effectiveDecision ? { decision: effectiveDecision } : {}
+    };
+    questions.push(record);
+    return { question: record, added: true };
+  };
+  const emitNewQuestion = async (record) => {
+    if (record.added) await opts.onEvent?.({ type: "question", question: record.question });
+    return record.question;
+  };
+  const decideQuestion = (questionId, decision) => {
+    const idx = questions.findIndex((q) => q.id === questionId);
+    if (idx < 0) throw new Error(`unknown questionId ${JSON.stringify(questionId)}`);
+    const prior = questions[idx];
+    const status = decision.kind === "answer" ? "answered" : decision.kind === "defer" ? "deferred" : "escalated";
+    const next = { ...prior, status, decision };
+    questions[idx] = next;
+    return next;
+  };
+  const blockingQuestionsForStop = () => {
+    if (questionPolicy === "auto" || questionPolicy === "bubble") return [];
+    return questions.filter((q) => {
+      const blocking = q.urgency === "blocks-step" || q.urgency === "blocks-run";
+      if (!blocking) return false;
+      if (questionPolicy === "mustDecide") return q.status === "open";
+      return q.status !== "answered" && q.status !== "deferred";
+    });
   };
   const tools = [
     {
       name: "spawn_worker",
-      description: 'Start a worker the operator will drive. `profile` is the worker (or another DRIVER \u2014 drivers-of-drivers are allowed); `task` is what it should do. Reserves the worker\u2019s budget from the conserved pool and FAILS CLOSED when the pool is dry \u2014 so spawning "at will" is bounded by the budget. Returns { workerId } or { error: "budget-exhausted" | "depth-exceeded" }.',
+      description: "Start a worker the driver will drive. `profile` is the worker or another driver; `task` is what it should do. Reserves budget from the conserved pool and fails closed.",
       inputSchema: {
         type: "object",
         properties: {
-          profile: { description: "The worker/driver profile to run (passed to makeWorkerAgent)." },
+          profile: { description: "The worker/driver profile to run." },
           task: { description: "The task the worker should perform." },
           label: { type: "string", description: "Optional trace label." }
         },
@@ -293,7 +360,7 @@ function createCoordinationTools(opts) {
     },
     {
       name: "observe_worker",
-      description: "Inspect a worker you are driving: its live status + conserved spend, and \u2014 once it has settled \u2014 its output artifact (rehydrated from the result blob). Use this to review work before deciding your next move. (In-flight token-level trace is surfaced via the analyst, not here.)",
+      description: "Inspect a worker status, spend, and settled output artifact when available.",
       inputSchema: { type: "object", properties: { workerId: idArg }, required: ["workerId"] },
       handler: async (raw) => {
         const id = str(obj(raw).workerId, "workerId");
@@ -310,7 +377,7 @@ function createCoordinationTools(opts) {
     },
     {
       name: "steer_worker",
-      description: "Steer a RUNNING worker out-of-band \u2014 deliver your next instruction / a course-correction / an interrupt to its inbox. Returns { delivered } \u2014 false if the worker has finished or its harness cannot be steered mid-flight (then spawn a fresh one or wait and re-observe).",
+      description: "Deliver an out-of-band instruction to a running worker inbox.",
       inputSchema: {
         type: "object",
         properties: {
@@ -329,23 +396,124 @@ function createCoordinationTools(opts) {
     },
     {
       name: "await_next",
-      description: 'Wait for the next worker you spawned to FINISH, then read its deployable verdict. This is how you advance: spawn one or more workers, then call await_next to block until the next one settles. Returns { settled: workerId, status: "done"|"down", score, valid } for a finished worker, or { idle: true } when no worker is still running (then spawn more or stop). Workers run concurrently \u2014 spawn a batch, then await_next repeatedly to collect them.',
+      description: "Wait for the next spawned worker to settle. Returns { idle: true } when none are live.",
       inputSchema: { type: "object", properties: {} },
       handler: async () => {
         const s = await opts.scope.next();
         if (!s) return { idle: true };
         const w = recordSettled(s);
-        return w.status === "done" ? { settled: w.id, status: "done", score: w.score, valid: w.valid } : { settled: w.id, status: "down", reason: w.reason };
+        return w.status === "done" ? {
+          settled: w.id,
+          status: "done",
+          score: w.score,
+          valid: w.valid,
+          outRef: w.outRef
+        } : { settled: w.id, status: "down", reason: w.reason };
+      }
+    },
+    {
+      name: "list_questions",
+      description: "List questions raised by workers, drivers, or analysts. Blocking stop behavior follows questionPolicy.",
+      inputSchema: { type: "object", properties: {} },
+      handler: () => Promise.resolve({ questions })
+    },
+    {
+      name: "answer_question",
+      description: "Record an answer, deferral, or escalation for a loop question.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          questionId: { type: "string" },
+          answer: { type: "string" },
+          by: { type: "string", description: 'Node id or "user".' },
+          deferReason: { type: "string" },
+          escalateTo: { type: "string", enum: ["parent", "user"] },
+          escalateReason: { type: "string" }
+        },
+        required: ["questionId"]
+      },
+      handler: (raw) => {
+        const a = obj(raw);
+        const questionId = str(a.questionId, "questionId");
+        if (typeof a.answer === "string" && a.answer.length > 0) {
+          return Promise.resolve({
+            question: decideQuestion(questionId, {
+              kind: "answer",
+              answer: a.answer,
+              by: typeof a.by === "string" && a.by.length > 0 ? a.by : "user"
+            })
+          });
+        }
+        if (typeof a.deferReason === "string" && a.deferReason.length > 0) {
+          return Promise.resolve({
+            question: decideQuestion(questionId, {
+              kind: "defer",
+              reason: a.deferReason
+            })
+          });
+        }
+        if (a.escalateTo === "parent" || a.escalateTo === "user") {
+          const escalateReason = typeof a.escalateReason === "string" && a.escalateReason.length > 0 ? a.escalateReason : "driver escalated";
+          return Promise.resolve({
+            question: decideQuestion(questionId, {
+              kind: "escalate",
+              to: a.escalateTo,
+              reason: escalateReason
+            })
+          });
+        }
+        throw new Error("answer_question: provide answer, deferReason, or escalateTo");
+      }
+    },
+    {
+      name: "ask_parent",
+      description: "Raise a question to the parent driver/Pi/user when this driver cannot decide.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          from: { type: "string" },
+          level: { type: "string", enum: ["worker", "driver", "loop"] },
+          question: { type: "string" },
+          reason: { type: "string" },
+          urgency: { type: "string", enum: ["continue-without", "blocks-step", "blocks-run"] }
+        },
+        required: ["from", "level", "question", "reason", "urgency"]
+      },
+      handler: async (raw) => {
+        const a = obj(raw);
+        const from = str(a.from, "from");
+        const q = await emitNewQuestion(
+          addQuestion(
+            {
+              from,
+              level: level(a.level),
+              question: str(a.question, "question"),
+              reason: str(a.reason, "reason"),
+              urgency: urgency(a.urgency)
+            },
+            from,
+            { kind: "escalate", to: "parent", reason: "asked parent" }
+          )
+        );
+        return { question: q };
       }
     },
     {
       name: "stop",
-      description: "Declare the run complete \u2014 every required change is made and verified. The terminal move.",
+      description: "Declare the run complete.",
       inputSchema: {
         type: "object",
         properties: { reason: { type: "string", description: "Why you are stopping." } }
       },
       handler: (raw) => {
+        const blocking = blockingQuestionsForStop();
+        if (blocking.length) {
+          return Promise.resolve({
+            stopped: false,
+            error: "unresolved-blocking-questions",
+            questions: blocking
+          });
+        }
         stopped = true;
         const r = obj(raw).reason;
         reason = typeof r === "string" ? r : void 0;
@@ -353,22 +521,20 @@ function createCoordinationTools(opts) {
       }
     }
   ];
-  if (opts.analystKinds) {
+  if (opts.analysts) {
     tools.push({
       name: "list_analysts",
-      description: "List the trace-analyst lenses available to run over a worker \u2014 id, what each looks for, and its area.",
+      description: "List trace-analyst lenses available to run over a settled worker.",
       inputSchema: { type: "object", properties: {} },
-      handler: () => Promise.resolve({ analysts: opts.analystKinds })
+      handler: () => Promise.resolve({ analysts: opts.analysts?.kinds })
     });
-  }
-  if (opts.runAnalyst) {
     tools.push({
       name: "run_analyst",
-      description: "Apply an analyst LENS to a worker you are driving \u2014 run `kind` over the worker\u2019s trace and return its findings (trace-derived, never score-derived). Use `list_analysts` for the menu; run several lenses to triangulate. The worker must have settled (its trace is read from its output).",
+      description: "Apply an analyst lens to a settled worker trace.",
       inputSchema: {
         type: "object",
         properties: {
-          kind: { type: "string", description: "The analyst kind id (see list_analysts)." },
+          kind: { type: "string", description: "The analyst kind id." },
           workerId: idArg
         },
         required: ["kind", "workerId"]
@@ -381,11 +547,17 @@ function createCoordinationTools(opts) {
         if (!node.outRef)
           return { error: `worker ${JSON.stringify(id)} has not settled \u2014 no trace to analyze yet` };
         const trace = await opts.blobs.get(node.outRef);
-        return { findings: await opts.runAnalyst?.(str(a.kind, "kind"), trace) };
+        return { findings: await opts.analysts?.run(str(a.kind, "kind"), trace) };
       }
     });
   }
-  return { tools, isStopped: () => stopped, stopReason: () => reason, settled: () => ledger };
+  return {
+    tools,
+    isStopped: () => stopped,
+    stopReason: () => reason,
+    settled: () => ledger,
+    questions: () => questions
+  };
 }
 export {
   DELEGATE_CODE_DESCRIPTION,