@volter/supercode-orchestrator 0.5.227 → 0.5.229

package/loop.mjs

@@ -1,3 +1,6 @@
+import { registerWorkService, closeWorkLedger } from '@volter/supercode-harness-sdk/work-ledger';
+import { registerWorkOperations, measureWork } from "@volter/supercode-harness-sdk/work-ledger";
+registerWorkOperations([{"kind":"pass","operation":"gateway.save"},{"kind":"pass","operation":"gateway.jobs"},{"kind":"pass","operation":"gateway.tick"},{"kind":"pass","operation":"gateway.apply"},{"kind":"pass","operation":"gateway.effect"},{"kind":"call","operation":"gateway.input"},{"kind":"call","operation":"gateway.delivery"}]);
 // The orchestrator loop: events in, `step` in the middle, effects out over the
 // SDK and the adapters (docs/ORCHESTRATOR-IR.md §4–§5, §7).
 //
@@ -58,6 +61,7 @@ export class Orchestrator {
    * @param {(level, message) => void} [o.log]
    */
   constructor({ state, vault = new Map(), client, adapters = {}, clock = null, launchFor = null, executeJob = null, log = () => {} }) {
+    registerWorkService({ role: 'orchestrator-gateway', scope: {kind:'install',id:state.root} });
     this.state = state;
     this.executeJob = executeJob;
     this.hostedTasks = new Set();
@@ -150,6 +154,7 @@ export class Orchestrator {
 
   /** The folder written from state, and each profile's `cron/jobs.json` as that write left it. */
   async save() {
+    return measureWork("pass", "gateway.save", async () => {
     const { rejected } = await save(this.state, this.state.root);
     // An entry the store could not read was written as the home last held it (or, never held, left out), and is again
     // at every save while it stays as it is; the log names it once per reason, not once per save.
@@ -164,6 +169,9 @@ export class Orchestrator {
         : `${collection} ${key} could not be saved (${reason}): it is left out of the home, and the orchestrator will restart without it`);
     }
     this.jobsWritten = this.jobsFiles();
+
+
+    });
   }
 
   jobsFiles() {
@@ -184,6 +192,7 @@ export class Orchestrator {
    * every other job keeps this daemon's own state, so a change not yet saved here survives the read.
    */
   async adoptOutsideJobs() {
+    return measureWork("pass", "gateway.jobs", async () => {
     const now = this.jobsFiles();
     const changed = [...now].filter(([path, text]) => this.jobsWritten.has(path) && this.jobsWritten.get(path) !== text).map(([path]) => path);
     if (!changed.length) { this.jobsWritten = now; return; }
@@ -202,15 +211,22 @@ export class Orchestrator {
       this.log('info', `profile ${name}: cron/jobs.json changed outside the daemon; jobs read back: ${touched.join(', ') || 'none'}`);
     }
     this.jobsWritten = now;
+
+
+    });
   }
 
   /** One clock tick: expiry, due cron jobs, obligation retry, breaker windows (§4.3). */
   tick(at = this.clock()) {
+    return measureWork("pass", "gateway.tick", () => {
     this.queue = this.queue.then(() => this.adoptOutsideJobs()).catch((error) => this.log('warn', `cron/jobs.json not read back: ${error.message}`));
     return this.dispatch(events.tick(at, cronInactivitySeconds(), cronMaxParallel())).then(
       (result) => { this.tickerHeartbeat(true); void this.declareLocalAgents().catch((error) => this.log('warn', `agent hand-off: ${error.message}`));return result; },
       (error) => { this.tickerHeartbeat(false); throw error; },
     );
+
+
+    });
   }
 
   /** The home's agent declarations and ends a launch could not hand to this machine's daemon (none was running) are
@@ -280,6 +296,7 @@ export class Orchestrator {
     this.retired.clear();
     for (const adapter of Object.values(this.adapters)) await attempt('adapter', () => adapter.close?.());
     await attempt('World reference', () => releaseWorld());
+    await closeWorkLedger();
     if (this.stopErrors.length) throw new AggregateError(this.stopErrors, this.stopErrors.map(error => error.message).join('; '));
   }
 
@@ -380,6 +397,7 @@ export class Orchestrator {
   }
 
   async apply(event) {
+    return measureWork("pass", "gateway.apply", async () => {
     if (event.type === 'webhook' && this.webhookAdmissions.get(event.admission_id)?.outcome?.error) return [];
     if (event.type === 'worker' && ['error', 'ended'].includes(event.ev.kind)) {
       const binding = this.state.profiles[event.profile]?.bindings?.[event.keyString];
@@ -423,9 +441,13 @@ export class Orchestrator {
       }
     }
     return effects;
+
+
+    });
   }
 
   async perform(effect) {
+    return measureWork("pass", "gateway.effect", async () => {
     switch (effect.type) {
       case 'webhook_input': {
         const admission = this.webhookAdmissions.get(effect.admission_id);
@@ -489,6 +511,9 @@ export class Orchestrator {
       case 'refused': this.log('info', effect.message); return;
       default: this.log('warn', `unknown effect ${effect.type}`);
     }
+
+
+    });
   }
 
   executeHostedJob({ profile: name, job_id, fire_id, machine = null }) {
@@ -1046,6 +1071,7 @@ export class Orchestrator {
   }
 
   async sendInput({ profile, keyString, text, context_from = null, skills = [], job_id = null, history = null, webhook_input_id = null }) {
+    return measureWork("call", "gateway.input", async () => {
     const admission = webhook_input_id ? this.webhookAdmissions.get(webhook_input_id) : null;
     // Shutdown refused this unsent request (or its handler already failed).
     // It must not be delivered later by a queued started/final completion.
@@ -1079,6 +1105,9 @@ export class Orchestrator {
       this.enqueue(events.worker({ profile, keyString, runtime_id: runtime.handle.runtime_id, ev: { kind: 'error', message: `send failed: ${error.message}` }, at: this.clock() }));
       admission?.finish(error);
     }
+
+
+    });
   }
 
   /**
@@ -1150,6 +1179,7 @@ export class Orchestrator {
    * open it; any success closes it.
    */
   async deliver({ profile: profileName, obligation_id }) {
+    return measureWork("call", "gateway.delivery", async () => {
     const profile = this.state.profiles[profileName];
     const o = profile.obligations.find((x) => x.id === obligation_id);
     if (!o || o.state !== 'pending') return;
@@ -1195,6 +1225,9 @@ export class Orchestrator {
       if (o.attempts >= MAX_ATTEMPTS) { o.state = 'failed'; this.recordDelivery(profile, o, error.message); }
     }
     await this.save();
+
+
+    });
   }
 
   /**

package/mcp/hermes-kanban-tools.json

@@ -1,7 +1,7 @@
 [
   {
     "name": "kanban_show",
-    "description": "Read a task's full state \u2014 title, body, assignee, parent task handoffs, your prior attempts on this task if any, comments, and recent events. Use this to (re)orient yourself before starting work, especially on retries. The response includes a pre-formatted ``worker_context`` string suitable for inclusion verbatim in your reasoning.",
+    "description": "Read a task's full state — title, body, assignee, parent task handoffs, your prior attempts on this task if any, comments, and recent events. Use this to (re)orient yourself before starting work, especially on retries. The response includes a pre-formatted ``worker_context`` string suitable for inclusion verbatim in your reasoning.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -11,7 +11,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
       "required": []
@@ -19,7 +19,7 @@
   },
   {
     "name": "kanban_list",
-    "description": "List Kanban task summaries so an orchestrator profile can discover work to route. Supports the same core filters as the CLI: assignee, status, tenant, include_archived, and limit. Returns compact rows with ids, title, status, assignee, priority, parent/child ids, and counts. Bounded to 50 rows by default, 200 max, with truncation metadata. Also recomputes ready tasks before listing, matching the CLI. Orchestrator-only \u2014 dispatcher-spawned task workers never see this tool.",
+    "description": "List Kanban task summaries so an orchestrator profile can discover work to route. Supports the same core filters as the CLI: assignee, status, tenant, include_archived, and limit. Returns compact rows with ids, title, status, assignee, priority, parent/child ids, and counts. Bounded to 50 rows by default, 200 max, with truncation metadata. Also recomputes ready tasks before listing, matching the CLI. Orchestrator-only — dispatcher-spawned task workers never see this tool.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -58,7 +58,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
       "required": []
@@ -66,7 +66,7 @@
   },
   {
     "name": "kanban_complete",
-    "description": "Complete through the home's declared workflow permissions with a structured handoff. Homes may reserve terminal closure to the recorded creator or manager; use kanban_request_state when you need their decision. Prefer ``summary`` for a human-readable 1-3 sentence description of what you did; put machine-readable facts in ``metadata`` (changed_files, tests_run, decisions, findings, etc). At least one of ``summary`` or ``result`` is required. If you created new tasks via ``kanban_create`` during this run, list their ids in ``created_cards`` \u2014 the kernel verifies them so phantom references are caught before they leak into downstream automation. If you produced deliverable files (charts, PDFs, spreadsheets, generated images), list their absolute paths in ``artifacts`` \u2014 the gateway notifier will upload them as native attachments to the human who subscribed to the task, so the deliverable lands in their chat alongside the summary instead of being a path they have to fetch by hand.",
+    "description": "Complete through the home's declared workflow permissions with a structured handoff. Homes may reserve terminal closure to the recorded creator or manager; use kanban_request_state when you need their decision. Prefer ``summary`` for a human-readable 1-3 sentence description of what you did; put machine-readable facts in ``metadata`` (changed_files, tests_run, decisions, findings, etc). At least one of ``summary`` or ``result`` is required. If you created new tasks via ``kanban_create`` during this run, list their ids in ``created_cards`` — the kernel verifies them so phantom references are caught before they leak into downstream automation. If you produced deliverable files (charts, PDFs, spreadsheets, generated images), list their absolute paths in ``artifacts`` — the gateway notifier will upload them as native attachments to the human who subscribed to the task, so the deliverable lands in their chat alongside the summary instead of being a path they have to fetch by hand.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -80,7 +80,7 @@
         },
         "metadata": {
           "type": "object",
-          "description": "Free-form dict of structured facts about this attempt \u2014 {\"changed_files\": [...], \"tests_run\": 12, \"findings\": [...]}. Surfaced to downstream workers alongside ``summary``."
+          "description": "Free-form dict of structured facts about this attempt — {\"changed_files\": [...], \"tests_run\": 12, \"findings\": [...]}. Surfaced to downstream workers alongside ``summary``."
         },
         "result": {
           "type": "string",
@@ -91,18 +91,18 @@
           "items": {
             "type": "string"
           },
-          "description": "Optional structured manifest of task ids you created via ``kanban_create`` during this run. The kernel verifies each id exists and was created by this worker's profile; any phantom id blocks the completion with an error listing what went wrong (auditable in the task's events). Only list ids you got back from a successful ``kanban_create`` call \u2014 do not invent or remember ids from prose. Omit the field if you did not create any cards."
+          "description": "Optional structured manifest of task ids you created via ``kanban_create`` during this run. The kernel verifies each id exists and was created by this worker's profile; any phantom id blocks the completion with an error listing what went wrong (auditable in the task's events). Only list ids you got back from a successful ``kanban_create`` call — do not invent or remember ids from prose. Omit the field if you did not create any cards."
         },
         "artifacts": {
           "type": "array",
           "items": {
             "type": "string"
           },
-          "description": "Optional list of absolute paths to deliverable files you produced during this run \u2014 generated charts, PDFs, spreadsheets, images, archives. Examples: [\"/tmp/q3-revenue.png\", \"/tmp/report.pdf\"]. The gateway notifier uploads each path as a native attachment to the subscribed chat (images embed inline, everything else uploads as a file) so the deliverable lands with the completion notification. Skip intermediate scratch files and references that are not the deliverable. The path must exist on disk at completion. Files inside a managed scratch workspace are copied to durable task attachments before cleanup; a missing declared scratch artifact keeps the task in-flight so you can fix the path and retry."
+          "description": "Optional list of absolute paths to deliverable files you produced during this run — generated charts, PDFs, spreadsheets, images, archives. Examples: [\"/tmp/q3-revenue.png\", \"/tmp/report.pdf\"]. The gateway notifier uploads each path as a native attachment to the subscribed chat (images embed inline, everything else uploads as a file) so the deliverable lands with the completion notification. Skip intermediate scratch files and references that are not the deliverable. The path must exist on disk at completion. Files inside a managed scratch workspace are copied to durable task attachments before cleanup; a missing declared scratch artifact keeps the task in-flight so you can fix the path and retry."
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         },
         "commit": {
           "type": "string",
@@ -140,21 +140,19 @@
         },
         "waiting_on": {
           "type": "string",
-          "description": "The id of the message (m-\u2026 or a-\u2026) whose answer this waits for."
+          "description": "The id of the message (m-… or a-…) whose answer this waits for."
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
-      "required": [
-        "reason"
-      ]
+      "required": []
     }
   },
   {
     "name": "kanban_request_review",
-    "description": "Request independent review of the opened PR at its exact pushed head. The dispatcher starts the declared reviewer when the arc tasks are closed. Deployment CI is not a review gate.",
+    "description": "Request independent review of one ready PR at its exact pushed head while coding and other tasks continue. A request during review queues after the current review. Explicit supersedes corrects one named queued request after verifying its replacement, preserving its receipt and the active review. Missing source details come from recorded board facts when available. Only the board starts the final arc review.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -164,12 +162,17 @@
         },
         "summary": {
           "type": "string",
-          "description": "What was implemented and how it was verified, in one or two sentences \u2014 shown to the reviewer. Don't paste the whole diff; the reviewer has the board and the PR."
+          "description": "What was implemented and how it was verified, in one or two sentences — shown to the reviewer. Don't paste the whole diff; the reviewer has the board and the PR."
         },
         "reviewer": {
           "type": "string",
           "description": "Optional reviewer profile. When provided, the task is reassigned to that profile before review dispatch."
         },
+        "supersedes": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Optional pending review_queued event ID on this card to supersede with the supplied ready PR/head. Fresh admission must succeed before only that request is settled; the active review stays intact. The replacement keeps the original FIFO position."
+        },
         "metadata": {
           "type": "object",
           "description": "Optional structured handoff facts for the reviewer, such as changed_files, tests_run, commit, or decisions.",
@@ -177,7 +180,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         },
         "commit": {
           "type": "string",
@@ -191,7 +194,7 @@
           "items": {
             "type": "string"
           },
-          "description": "Every opened PR the arc changed, one URL each (its own repository's and any other repository it changed)."
+          "description": "The ready PR URL to review. Defaults to the sole recorded PR when omitted."
         },
         "pr_head": {
           "type": [
@@ -208,9 +211,7 @@
           "description": "Ask the plan review of a big arc's proposed ADR (its PR in pr, its pushed head in pr_head) before any code. Without it, one PR named with its head is that PR's review."
         }
       },
-      "required": [
-        "summary"
-      ]
+      "required": []
     }
   },
   {
@@ -229,7 +230,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         },
         "findings": {
           "type": "array",
@@ -239,14 +240,12 @@
           "description": "Each finding, filed as a task on the arc before the card returns; an arc with no open task is refused."
         }
       },
-      "required": [
-        "reason"
-      ]
+      "required": []
     }
   },
   {
     "name": "kanban_heartbeat",
-    "description": "Signal that you're still alive during a long operation (training, encoding, large crawls). Call every few minutes so humans see liveness separately from PID checks. Pure side effect \u2014 no work changes.",
+    "description": "Record progress and optionally a waiting deadline for this run. A deadline changes no card lane and ends no run; idle supervision honors it until expiry.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -260,7 +259,14 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+        },
+        "until": {
+          "type": [
+            "string",
+            "number"
+          ],
+          "description": "Optional waiting deadline: an ISO time, a duration such as 30m, or epoch seconds."
         }
       },
       "required": []
@@ -268,13 +274,13 @@
   },
   {
     "name": "kanban_comment",
-    "description": "Append a comment to a task's thread. Use for durable notes that should outlive this run (questions for the next worker, partial findings, rationale). Ephemeral reasoning doesn't belong here \u2014 use your normal response instead.",
+    "description": "Append a comment to a task's thread. Use for durable notes that should outlive this run (questions for the next worker, partial findings, rationale). Ephemeral reasoning doesn't belong here — use your normal response instead.",
     "inputSchema": {
       "type": "object",
       "properties": {
         "task_id": {
           "type": "string",
-          "description": "Task id. Required (may be your own task or another's \u2014 comment threads are per-task)."
+          "description": "Task id. Required (may be your own task or another's — comment threads are per-task)."
         },
         "body": {
           "type": "string",
@@ -282,7 +288,55 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+        },
+        "pr": {
+          "type": "string",
+          "description": "Exact GitHub PR URL for a source or PR evidence declaration."
+        },
+        "pr_head": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{40}$"
+        },
+        "release_target": {
+          "type": "string",
+          "description": "Intended exact target for a release-only disposition."
+        },
+        "pr_disposition": {
+          "type": "string",
+          "enum": [
+            "merge",
+            "release-only"
+          ],
+          "description": "Implementer/manager exact-head disposition. Default merge. Does not grant release permission."
+        },
+        "reason": {
+          "type": "string"
+        },
+        "release_readback": {
+          "type": "object",
+          "properties": {
+            "target": {
+              "type": "string"
+            },
+            "artifact": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{40}$"
+            },
+            "evidence": {
+              "type": "string"
+            },
+            "attest": {
+              "type": "boolean",
+              "description": "Explicit manager attestation for a target without a machine verifier."
+            }
+          },
+          "required": [
+            "target",
+            "artifact",
+            "evidence"
+          ],
+          "additionalProperties": false
         }
       },
       "required": [
@@ -293,7 +347,7 @@
   },
   {
     "name": "kanban_attach",
-    "description": "Attach a file to a task by passing its bytes inline (base64). Use for genuine file artifacts the next worker or a human should be able to download \u2014 generated reports, images, exports. The file is stored as a real attachment (not a comment link) under the task's attachments dir, capped at 25 MB. Prefer kanban_attach_url when you only have a URL.",
+    "description": "Attach a file to a task by passing its bytes inline (base64). Use for genuine file artifacts the next worker or a human should be able to download — generated reports, images, exports. The file is stored as a real attachment (not a comment link) under the task's attachments dir, capped at 25 MB. Prefer kanban_attach_url when you only have a URL.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -315,7 +369,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
       "required": [
@@ -326,7 +380,7 @@
   },
   {
     "name": "kanban_attach_url",
-    "description": "Attach a file to a task by URL \u2014 Hermes downloads it server-side and stores it as a real attachment (capped at 25 MB). Use when you have a link rather than the bytes. Only http/https URLs are accepted.",
+    "description": "Attach a file to a task by URL — Hermes downloads it server-side and stores it as a real attachment (capped at 25 MB). Use when you have a link rather than the bytes. Only http/https URLs are accepted.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -348,7 +402,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
       "required": [
@@ -388,7 +442,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
       "required": []
@@ -396,7 +450,7 @@
   },
   {
     "name": "kanban_create",
-    "description": "Create a new kanban task, optionally as a child of the current one (pass the current task id in ``parents``). Used by orchestrator workers to fan out \u2014 decompose work into child tasks with specific assignees, link them into a pipeline, then complete your own task. The dispatcher picks up the new tasks on its next tick and spawns the assigned profiles.",
+    "description": "Create a new kanban task, optionally as a child of the current one (pass the current task id in ``parents``). Used by orchestrator workers to fan out — decompose work into child tasks with specific assignees, link them into a pipeline, then complete your own task. The dispatcher picks up the new tasks on its next tick and spawns the assigned profiles.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -410,7 +464,7 @@
         },
         "assignee": {
           "type": "string",
-          "description": "Profile name that should execute this task (e.g. 'researcher-a', 'reviewer', 'writer'). Required \u2014 tasks without an assignee are never dispatched."
+          "description": "Profile name that should execute this task (e.g. 'researcher-a', 'reviewer', 'writer'). Required — tasks without an assignee are never dispatched."
         },
         "body": {
           "type": "string",
@@ -450,7 +504,7 @@
         },
         "triage": {
           "type": "boolean",
-          "description": "If true, task lands in 'triage' instead of 'todo' \u2014 a specifier profile is expected to flesh out the body before work starts."
+          "description": "If true, task lands in 'triage' instead of 'todo' — a specifier profile is expected to flesh out the body before work starts."
         },
         "idempotency_key": {
           "type": "string",
@@ -473,7 +527,7 @@
           "items": {
             "type": "string"
           },
-          "description": "Skill names to force-load into the dispatched worker. The kanban lifecycle is already injected automatically; use this to pin a task to a specialist context \u2014 e.g. ['translation'] for a translation task, ['github-code-review'] for a reviewer task. The names must match skills installed on the assignee's profile."
+          "description": "Skill names to force-load into the dispatched worker. The kanban lifecycle is already injected automatically; use this to pin a task to a specialist context — e.g. ['translation'] for a translation task, ['github-code-review'] for a reviewer task. The names must match skills installed on the assignee's profile."
         },
         "goal_mode": {
           "type": "boolean",
@@ -489,11 +543,11 @@
         },
         "provider": {
           "type": "string",
-          "description": "Provider the 'model' belongs to (e.g. 'openrouter', 'anthropic', 'nous'). Set this whenever the model is not from the assignee profile's configured provider \u2014 a model name alone is resolved against the profile's provider and will fail if it belongs to a different one. Requires 'model'."
+          "description": "Provider the 'model' belongs to (e.g. 'openrouter', 'anthropic', 'nous'). Set this whenever the model is not from the assignee profile's configured provider — a model name alone is resolved against the profile's provider and will fail if it belongs to a different one. Requires 'model'."
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
       "required": [
@@ -505,7 +559,7 @@
   },
   {
     "name": "kanban_unblock",
-    "description": "Unblock a Kanban task. It moves to ready when all parents are done, or todo while any parent remains open. Orchestrator-only \u2014 only profiles with the kanban toolset can unblock routed work; dispatcher-spawned task workers never see this tool.",
+    "description": "Lift a named blocker or all current blockers when on is omitted, through the home workflow. A missing reason records none given. The worker may use this for its own card when its workflow permits it.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -515,17 +569,23 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+        },
+        "on": {
+          "type": "string",
+          "description": "Optional blocker id; omitted means all current blockers."
+        },
+        "reason": {
+          "type": "string",
+          "description": "What arrived; omitted records none given."
         }
       },
-      "required": [
-        "task_id"
-      ]
+      "required": []
     }
   },
   {
     "name": "kanban_link",
-    "description": "Add a parent\u2192child dependency edge after both tasks already exist. The child won't promote to 'ready' until all parents are 'done'. Cycles and self-links are rejected.",
+    "description": "Add a parent→child dependency edge after both tasks already exist. The child won't promote to 'ready' until all parents are 'done'. Cycles and self-links are rejected.",
     "inputSchema": {
       "type": "object",
       "properties": {
@@ -539,7 +599,7 @@
         },
         "board": {
           "type": "string",
-          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env \u2192 HERMES_KANBAN_BOARD env \u2192 the 'current' symlink under the kanban home \u2192 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
+          "description": "Kanban board slug to target. When omitted, the call resolves the active board the usual way: HERMES_KANBAN_DB env → HERMES_KANBAN_BOARD env → the 'current' symlink under the kanban home → 'default'. Pass an explicit slug only when the caller (e.g. a Telegram routing layer) needs to override the env-pinned active board for this one call."
         }
       },
       "required": [
@@ -626,8 +686,7 @@
         }
       },
       "required": [
-        "state",
-        "reason"
+        "state"
       ]
     }
   }

package/mcp/server.mjs

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+import { registerWorkOperations, measureWork } from "@volter/supercode-harness-sdk/work-ledger";
+registerWorkOperations([{"kind":"door","operation":"orchestrator.mcp"}]);
 // The orchestrator's model-facing door: ONE stdio MCP server per worker
 // session, bound to the conversation that spawned it (docs/ORCHESTRATOR-IR.md
 // §7).
@@ -99,6 +101,7 @@ export function ask(binding, verb, args) {
 
 /** `crates/harness/src/mcp.rs::handle_request`'s shape, in JavaScript. */
 export async function handleRequest(binding, request) {
+    return measureWork("door", "orchestrator.mcp", async () => {
   await knowLocalMachine();
   const id = request?.id;
   const method = request?.method ?? '';
@@ -135,7 +138,10 @@ export async function handleRequest(binding, request) {
       if (id === undefined || id === null) return null; // a notification
       return { jsonrpc: '2.0', id, error: { code: -32601, message: `unknown method \`${method}\`` } };
   }
-}
+
+
+    });
+  }
 
 /**
  * Every result names what it did (`ran`) first, then carries its rows; a tool Hermes's own handler served

package/ontology.d.ts

@@ -652,6 +652,32 @@ export interface Posted {
   message_id: string;
 }
 
+export interface PrDispositionRecorded {
+  kind: 'pr_disposition_recorded';
+  url: string;
+  head: string;
+  by?: string;
+  actor: string;
+  reason: string;
+  target: string | null;
+  disposition: 'merge' | 'release-only';
+}
+
+export interface PrReleaseReadback {
+  kind: 'pr_release_readback';
+  url: string;
+  head: string;
+  by?: string;
+  actor: string;
+  reason: string;
+  target: string;
+  artifact: string;
+  evidence: string;
+  disposition_event: number;
+  verdict: number;
+  verification: { kind: 'machine' | 'manager-attestation'; source: string; target: string; observed_at: number; by?: string; actor?: string; receipt?: Record<string, unknown> };
+}
+
 /** One profile: a folder with `AGENTS.md` at its root. */
 export interface Profile {
   /** `default` for the root, else the folder name. */