aiden-runtime 4.1.5 → 4.6.0

package/dist/cli/v4/commands/daemonStatus.js

@@ -0,0 +1,253 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * cli/v4/commands/daemonStatus.ts — v4.5 Phase 8a.
+ *
+ * `/daemon status` — read-only slash variant of `aiden daemon
+ * status` (the top-level Phase 4b CLI surface). Renders an inline
+ * summary inside the REPL without leaving the chat. Points users
+ * at `aiden daemon install|start|stop` for any mutation.
+ *
+ * Q-P8a-3(a) inline format — five lines max when running, two
+ * lines when disabled. Reads daemon.db directly so the slash
+ * command works regardless of whether the daemon is the same
+ * process as the REPL.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.daemonStatus = void 0;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const daemon_1 = require("../../../core/v4/daemon");
+const paths_1 = require("../../../core/v4/paths");
+exports.daemonStatus = {
+    name: 'daemon',
+    description: 'Show v4.5 daemon status (read-only). Use `aiden daemon` for lifecycle.',
+    category: 'system',
+    icon: '⚙',
+    handler: async (ctx) => {
+        const sub = (ctx.args[0] ?? 'status').toLowerCase();
+        if (sub !== 'status') {
+            ctx.display.printError('Usage: /daemon status\n' +
+                'For lifecycle commands (install / start / stop / restart / logs), use the top-level CLI:\n' +
+                '  aiden daemon install\n' +
+                '  aiden daemon start\n' +
+                '  aiden daemon stop\n' +
+                '  aiden daemon status\n' +
+                '  aiden daemon logs');
+            return {};
+        }
+        try {
+            const snapshot = readSnapshot();
+            printSnapshot(snapshot, ctx);
+        }
+        catch (e) {
+            ctx.display.warn(`/daemon status: failed to read state (${e instanceof Error ? e.message : String(e)})`);
+        }
+        return {};
+    },
+};
+// ── Snapshot collector ─────────────────────────────────────────────────────
+function readSnapshot() {
+    const aidenRoot = (0, paths_1.resolveAidenRoot)();
+    const dbPath = (0, daemon_1.daemonDbPath)(aidenRoot);
+    const lockPath = (0, daemon_1.daemonRuntimeLockPath)(aidenRoot);
+    // ── Liveness via the in-process bootstrap handle first, then fall
+    // back to the runtime.lock PID check (covers the case where the
+    // daemon is another process and we're a REPL inspecting its db).
+    let running = false;
+    let instanceId = null;
+    let port = null;
+    let uptimeMs = null;
+    const handle = (0, daemon_1.getDaemonHandle)();
+    if (handle?.active && handle.instanceId) {
+        running = true;
+        instanceId = handle.instanceId;
+        port = (0, daemon_1.getDaemonConfig)().port;
+        if (handle.instanceTracker) {
+            // instanceTracker has a `getStartedAt` if exposed; otherwise
+            // derive from daemon_instances row below.
+        }
+    }
+    if (!running && node_fs_1.default.existsSync(lockPath)) {
+        try {
+            const lines = node_fs_1.default.readFileSync(lockPath, 'utf-8').split(/\r?\n/);
+            // runtime.lock format: [0]=instanceId, [1]=pid, [2]=port (Phase 1).
+            const lockedInstance = lines[0] ?? '';
+            const lockedPid = Number.parseInt(lines[1] ?? '', 10);
+            const lockedPort = Number.parseInt(lines[2] ?? '', 10);
+            if (Number.isFinite(lockedPid) && pidAlive(lockedPid)) {
+                running = true;
+                instanceId = lockedInstance || null;
+                if (Number.isFinite(lockedPort))
+                    port = lockedPort;
+            }
+        }
+        catch { /* stale or unreadable */ }
+    }
+    if (!node_fs_1.default.existsSync(dbPath)) {
+        return {
+            running: false,
+            port: null,
+            instanceId: null,
+            uptimeMs: null,
+            triggerCounts: { file: 0, webhook: 0, email: 0, schedule: 0, manual: 0 },
+            recentRuns: [],
+            bus: { pending: 0, claimed: 0, deadLetter: 0 },
+            dailyBudget: null,
+        };
+    }
+    const db = (0, daemon_1.openDaemonDb)(dbPath);
+    // Uptime from the instance row when we have an instanceId.
+    if (running && instanceId) {
+        try {
+            const row = db
+                .prepare('SELECT started_at, last_heartbeat FROM daemon_instances WHERE instance_id = ?')
+                .get(instanceId);
+            if (row)
+                uptimeMs = Date.now() - row.started_at;
+        }
+        catch { /* noop */ }
+    }
+    // Trigger counts by source.
+    const triggerCounts = { file: 0, webhook: 0, email: 0, schedule: 0, manual: 0 };
+    try {
+        const rows = db.prepare(`SELECT source, COUNT(*) AS c FROM triggers WHERE enabled = 1 GROUP BY source`).all();
+        for (const r of rows) {
+            if (r.source in triggerCounts) {
+                triggerCounts[r.source] = r.c;
+            }
+        }
+    }
+    catch { /* triggers table missing — schema v1 not applied */ }
+    // Recent runs (last 3).
+    const recentRuns = (() => {
+        try {
+            const rows = db.prepare(`SELECT id, status, finish_reason, started_at, completed_at FROM runs
+          ORDER BY id DESC LIMIT 3`).all();
+            return rows.map((r) => ({
+                id: r.id,
+                status: r.status,
+                finishReason: r.finish_reason,
+                durationMs: r.completed_at !== null ? r.completed_at - r.started_at : null,
+            }));
+        }
+        catch {
+            return [];
+        }
+    })();
+    // Bus stats.
+    const bus = (() => {
+        try {
+            const rows = db.prepare(`SELECT status, COUNT(*) AS c FROM trigger_events GROUP BY status`).all();
+            const m = {};
+            for (const r of rows)
+                m[r.status] = r.c;
+            return {
+                pending: m.pending ?? 0,
+                claimed: m.claimed ?? 0,
+                deadLetter: m.dead_letter ?? 0,
+            };
+        }
+        catch {
+            return { pending: 0, claimed: 0, deadLetter: 0 };
+        }
+    })();
+    // Daily budget (piggybacked on idempotency_keys per Phase 7).
+    const dailyBudget = (() => {
+        const budgetRaw = process.env.AIDEN_DAEMON_DAILY_BUDGET;
+        if (!budgetRaw)
+            return null;
+        const budget = Number.parseInt(budgetRaw, 10);
+        if (!Number.isFinite(budget) || budget <= 0)
+            return null;
+        try {
+            const today = new Date().toISOString().slice(0, 10);
+            const row = db.prepare(`SELECT response_json FROM idempotency_keys WHERE scope = ? AND key = ?`).get('daemon_budget', today);
+            let used = 0;
+            if (row) {
+                try {
+                    const parsed = JSON.parse(row.response_json);
+                    used = typeof parsed.used === 'number' ? parsed.used : 0;
+                }
+                catch { /* noop */ }
+            }
+            return { used, budget, exhausted: used >= budget };
+        }
+        catch {
+            return { used: 0, budget, exhausted: false };
+        }
+    })();
+    return {
+        running,
+        port,
+        instanceId,
+        uptimeMs,
+        triggerCounts,
+        recentRuns,
+        bus,
+        dailyBudget,
+    };
+}
+// ── Renderer ───────────────────────────────────────────────────────────────
+function printSnapshot(s, ctx) {
+    if (!s.running) {
+        ctx.display.write('Daemon: disabled.\n');
+        ctx.display.write('To enable: `aiden daemon install` (systemd / launchd) or `AIDEN_DAEMON=1` before `aiden`.\n');
+        return;
+    }
+    const uptime = s.uptimeMs !== null ? formatUptime(s.uptimeMs) : 'unknown';
+    const instanceShort = s.instanceId ? s.instanceId.slice(0, 8) : '?';
+    ctx.display.write(`Daemon: running (port ${s.port ?? '?'}, instance ${instanceShort}, uptime ${uptime})\n`);
+    const tc = s.triggerCounts;
+    ctx.display.write(`Triggers: ${tc.file} file · ${tc.webhook} webhook · ${tc.email} email · ${tc.schedule} schedule\n`);
+    if (s.recentRuns.length === 0) {
+        ctx.display.write('Recent runs (last 3): (none)\n');
+    }
+    else {
+        const parts = s.recentRuns.map((r) => {
+            const dur = r.durationMs !== null ? `(${(r.durationMs / 1000).toFixed(1)}s)` : '';
+            return `${r.status}${dur ? ' ' + dur : ''}`;
+        });
+        ctx.display.write(`Recent runs (last ${s.recentRuns.length}): ${parts.join(' · ')}\n`);
+    }
+    ctx.display.write(`Bus: ${s.bus.pending} pending · ${s.bus.claimed} claimed · ${s.bus.deadLetter} dead-letter\n`);
+    if (s.dailyBudget) {
+        const d = s.dailyBudget;
+        const exhaustedTag = d.exhausted ? ' EXHAUSTED' : '';
+        ctx.display.write(`Daily budget: ${d.used} / ${d.budget} tokens used (UTC ${new Date().toISOString().slice(0, 10)})${exhaustedTag}\n`);
+    }
+}
+function formatUptime(ms) {
+    const s = Math.floor(ms / 1000);
+    const days = Math.floor(s / 86400);
+    const hours = Math.floor((s % 86400) / 3600);
+    const mins = Math.floor((s % 3600) / 60);
+    if (days > 0)
+        return `${days}d ${hours}h`;
+    if (hours > 0)
+        return `${hours}h ${mins}m`;
+    return `${mins}m ${s % 60}s`;
+}
+function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        // ESRCH = no such process; EPERM = process exists but we lack
+        // permission to signal it (still counts as alive).
+        return e.code === 'EPERM';
+    }
+}
+// Keep unused-import linter happy.
+void node_os_1.default;
+void node_path_1.default;

package/dist/cli/v4/commands/fanout.js

@@ -26,8 +26,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseFanoutArgs = parseFanoutArgs;
 exports.runFanoutCli = runFanoutCli;
-/* eslint-disable @typescript-eslint/no-explicit-any */
-const fanout_1 = require("../../../core/v4/subagent/fanout");
 function parseFanoutArgs(argv) {
     const args = { positional: [] };
     let i = 0;
@@ -172,65 +170,50 @@ async function runFanoutCli(argv, opts = {}) {
             return 1;
         }
     }
-    // ── Dry-run path: stub providers, stub child runner, stub aggregator
-    // ─ exercises the Promise.all + abort + merge plumbing against the
-    // built artifact without touching network or provider keys.
-    const providers = [
-        { providerId: 'stub-a', modelId: 'fake-model' },
-        { providerId: 'stub-b', modelId: 'fake-model' },
-    ];
-    const stubAdapter = {
-        apiMode: 'chat_completions',
-        async call() {
-            return {
-                content: '[dry-run aggregator]',
-                toolCalls: [],
-                finishReason: 'stop',
-                usage: { inputTokens: 0, outputTokens: 0 },
-            };
-        },
-    };
-    try {
-        const result = await (0, fanout_1.runFanout)({
-            mode: args.mode,
-            query: args.query,
-            tasks: args.mode === 'partition'
-                ? Array.from({ length: args.n }, (_, i) => ({
-                    goal: `Task ${i + 1} from CLI: ${args.query}`,
-                }))
-                : undefined,
-            n: args.n,
-            merge: args.merge,
-            providers,
-            runChild: async ({ index, prompt, provider }) => {
-                return `[dry-run child ${index} via ${provider.providerId}] echo: ${prompt}`;
-            },
-            aggregatorAdapter: stubAdapter,
-            aggregatorModel: { providerId: 'stub-a', modelId: 'fake-model' },
-            timeoutMs: args.timeoutMs,
+    // ── Dry-run path ─────────────────────────────────────────────
+    // v4.6 Phase 2Q — `runFanout` now routes children through
+    // `spawnSubAgent`, which needs real `SpawnSubAgentDeps`
+    // (toolRegistry, parentProvider, runStore, …). Pre-2Q the dry-run
+    // exercised Promise.all + abort + merge dispatch via simple stubs;
+    // post-refactor the equivalent coverage now lives in
+    // `tests/v4/subagent/fanout.behavioral.test.ts` (Slice 5).
+    //
+    // Dry-run therefore emits a synthetic snapshot — same observable
+    // shape (mode/n/merge/per-child rows) so the runtime smoke can
+    // still assert "the CLI subcommand parses + runs to exit 0
+    // against the built artifact" without booting a runtime.
+    const stubProviders = ['stub-a', 'stub-b'];
+    const childRows = [];
+    for (let i = 0; i < args.n; i += 1) {
+        const providerId = stubProviders[i % stubProviders.length];
+        const prompt = args.mode === 'partition'
+            ? `Task ${i + 1} from CLI: ${args.query}`
+            : args.query;
+        childRows.push({
+            index: i,
+            providerId,
+            modelId: 'fake-model',
+            output: `[dry-run child ${i} via ${providerId}] echo: ${prompt}`,
+            elapsedMs: 0,
         });
-        writeOut(`fanout dry-run\n`);
-        writeOut(`  mode:      ${args.mode}\n`);
-        writeOut(`  n:         ${args.n}\n`);
-        writeOut(`  merge:     ${args.merge}\n`);
-        writeOut(`  query:     ${args.query}\n`);
-        writeOut(`  succeeded: ${result.diagnostics.succeeded}/${args.n}\n`);
-        writeOut(`  totalMs:   ${result.diagnostics.totalMs}\n`);
-        writeOut(`  providers: ${result.diagnostics.providerDistribution.join(', ')}\n`);
-        writeOut(`\n--- merged ---\n`);
-        if (args.merge === 'all') {
-            for (const r of result.results) {
-                writeOut(`\n[${r.index}] ${r.providerId}:${r.modelId} (${r.elapsedMs}ms)\n`);
-                writeOut(`${r.output}\n`);
-            }
-        }
-        else {
-            writeOut(`${result.merged ?? '(no merged output)'}\n`);
+    }
+    writeOut(`fanout dry-run\n`);
+    writeOut(`  mode:      ${args.mode}\n`);
+    writeOut(`  n:         ${args.n}\n`);
+    writeOut(`  merge:     ${args.merge}\n`);
+    writeOut(`  query:     ${args.query}\n`);
+    writeOut(`  succeeded: ${args.n}/${args.n}\n`);
+    writeOut(`  totalMs:   0\n`);
+    writeOut(`  providers: ${childRows.map((r) => r.providerId).join(', ')}\n`);
+    writeOut(`\n--- merged ---\n`);
+    if (args.merge === 'all') {
+        for (const r of childRows) {
+            writeOut(`\n[${r.index}] ${r.providerId}:${r.modelId} (${r.elapsedMs}ms)\n`);
+            writeOut(`${r.output}\n`);
         }
-        return 0;
     }
-    catch (err) {
-        writeErr(`fanout failed: ${err.message}\n`);
-        return 1;
+    else {
+        writeOut(`[dry-run aggregator]\n`);
     }
+    return 0;
 }

package/dist/cli/v4/commands/help.js

@@ -58,6 +58,19 @@ exports.SUBSECTION_MAP = {
     history: 'System',
     // Phase v4.1.2-update — npm self-update for the running install.
     update: 'System',
+    // v4.5 Phase 8a — subsystem live-flip slash commands.
+    sandbox: 'System',
+    tce: 'System',
+    'browser-depth': 'System',
+    daemon: 'System',
+    // v4.5 Phase 8b — contextual capability suggestions.
+    suggestions: 'System',
+    // v4.6 Phase 2M — opt-in keyword-based tool narrower.
+    'planner-guard': 'System',
+    // v4.6 Phase 3A — operator kill-switch for sub-agent spawning.
+    'spawn-pause': 'System',
+    // v4.6 Phase 3b — self-improvement loop operator surface.
+    recovery: 'System',
     // ── Authentication ──
     auth: 'Authentication',
     // ── Help ──

package/dist/cli/v4/commands/index.js

@@ -12,7 +12,7 @@
  * and registers each on the global CommandRegistry at boot.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.allCommands = exports.update = exports.reloadSoul = exports.history = exports.show = exports.status = exports.voice = exports.channel = exports.setup = exports.cron = exports.doctor = exports.license = exports.auth = exports.plugins = exports.streaming = exports.debugPrompt = exports.identity = exports.providers = exports.quit = exports.clear = exports.verbose = exports.reasoning = exports.reloadMcp = exports.skills = exports.skin = exports.yolo = exports.usage = exports.compress = exports.title = exports.save = exports.personality = exports.model = exports.tools = exports.help = void 0;
+exports.allCommands = exports.recovery = exports.spawnPause = exports.plannerGuard = exports.suggestions = exports.daemonStatus = exports.browserDepth = exports.tce = exports.sandbox = exports.update = exports.reloadSoul = exports.history = exports.show = exports.status = exports.voice = exports.channel = exports.setup = exports.cron = exports.doctor = exports.license = exports.auth = exports.plugins = exports.streaming = exports.debugPrompt = exports.identity = exports.providers = exports.quit = exports.clear = exports.verbose = exports.reasoning = exports.reloadMcp = exports.skills = exports.skin = exports.yolo = exports.usage = exports.compress = exports.title = exports.save = exports.personality = exports.model = exports.tools = exports.help = void 0;
 const help_1 = require("./help");
 Object.defineProperty(exports, "help", { enumerable: true, get: function () { return help_1.help; } });
 const tools_1 = require("./tools");
@@ -79,6 +79,27 @@ const reloadSoul_1 = require("./reloadSoul");
 Object.defineProperty(exports, "reloadSoul", { enumerable: true, get: function () { return reloadSoul_1.reloadSoul; } });
 const update_1 = require("./update");
 Object.defineProperty(exports, "update", { enumerable: true, get: function () { return update_1.update; } });
+// v4.5 Phase 8a — subsystem live-flip slash commands.
+const sandbox_1 = require("./sandbox");
+Object.defineProperty(exports, "sandbox", { enumerable: true, get: function () { return sandbox_1.sandbox; } });
+const tce_1 = require("./tce");
+Object.defineProperty(exports, "tce", { enumerable: true, get: function () { return tce_1.tce; } });
+const browserDepth_1 = require("./browserDepth");
+Object.defineProperty(exports, "browserDepth", { enumerable: true, get: function () { return browserDepth_1.browserDepth; } });
+const daemonStatus_1 = require("./daemonStatus");
+Object.defineProperty(exports, "daemonStatus", { enumerable: true, get: function () { return daemonStatus_1.daemonStatus; } });
+// v4.5 Phase 8b — contextual capability suggestions toggle.
+const suggestions_1 = require("./suggestions");
+Object.defineProperty(exports, "suggestions", { enumerable: true, get: function () { return suggestions_1.suggestions; } });
+// v4.6 Phase 2M — opt-in keyword-based tool narrower (default OFF).
+const plannerGuard_1 = require("./plannerGuard");
+Object.defineProperty(exports, "plannerGuard", { enumerable: true, get: function () { return plannerGuard_1.plannerGuard; } });
+// v4.6 Phase 3A — operator kill-switch for sub-agent spawning.
+const spawnPause_1 = require("./spawnPause");
+Object.defineProperty(exports, "spawnPause", { enumerable: true, get: function () { return spawnPause_1.spawnPause; } });
+// v4.6 Phase 3b — self-improvement loop operator surface.
+const recovery_1 = require("./recovery");
+Object.defineProperty(exports, "recovery", { enumerable: true, get: function () { return recovery_1.recovery; } });
 /** All built-in system commands, in canonical order. */
 exports.allCommands = [
     help_1.help,
@@ -115,6 +136,19 @@ exports.allCommands = [
     // probe + shared executeInstall executor (also wired into
     // aiden_self_update tool for natural-language requests).
     update_1.update,
+    // v4.5 Phase 8a — subsystem live-flip slash commands.
+    sandbox_1.sandbox,
+    tce_1.tce,
+    browserDepth_1.browserDepth,
+    daemonStatus_1.daemonStatus,
+    // v4.5 Phase 8b — contextual suggestions toggle.
+    suggestions_1.suggestions,
+    // v4.6 Phase 2M — opt-in keyword-based tool narrower (default OFF).
+    plannerGuard_1.plannerGuard,
+    // v4.6 Phase 3A — operator kill-switch for sub-agent spawning.
+    spawnPause_1.spawnPause,
+    // v4.6 Phase 3b — self-improvement loop operator surface.
+    recovery_1.recovery,
     clear_1.clear,
     quit_1.quit,
 ];

package/dist/cli/v4/commands/mcp.js

@@ -32,10 +32,15 @@
  * tools by default; opting in means the user accepted server-side
  * execution risk at config time.
  */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AIDEN_MCP_BUILD = void 0;
 exports.runMcpSubcommand = runMcpSubcommand;
 /* eslint-disable @typescript-eslint/no-explicit-any */
+const node_os_1 = __importDefault(require("node:os"));
+const node_crypto_1 = require("node:crypto");
 const paths_1 = require("../../../core/v4/paths");
 const toolRegistry_1 = require("../../../core/v4/toolRegistry");
 const skillLoader_1 = require("../../../core/v4/skillLoader");
@@ -46,12 +51,26 @@ const processRegistry_1 = require("../../../core/v4/processRegistry");
 const config_1 = require("../../../core/v4/config");
 const providerFallback_1 = require("../../../core/v4/providerFallback");
 const chatCompletionsAdapter_1 = require("../../../providers/v4/chatCompletionsAdapter");
-const aidenAgent_1 = require("../../../core/v4/aidenAgent");
 const factory_1 = require("../../../core/v4/logger/factory");
 const index_1 = require("../../../tools/v4/index");
 const envSources_1 = require("../envSources");
 const credentialResolver_1 = require("../../../providers/v4/credentialResolver");
 const runtimeResolver_1 = require("../../../providers/v4/runtimeResolver");
+// v4.6 Phase 2R — MCP-mode subagent_fanout now routes children
+// through the `spawnSubAgent` primitive (same as REPL after 2Q-A).
+// The legacy `runChild` closure + RunChildArgs import are deleted
+// per design doc §12.3 (2R cleanup). MCP needs its own daemon-db
+// connection + instance id so child runs persist under
+// `aiden runs list --include-children` for cross-runtime
+// observability.
+const daemon_1 = require("../../../core/v4/daemon");
+const version_1 = require("../../../core/version");
+// v4.6 Phase 3A — operator kill-switch. Initialised here so
+// MCP-side `subagent_fanout` (and any future MCP-side
+// `spawn_sub_agent` exposure) reads from the same marker file the
+// REPL writes via /spawn-pause. Cross-process coordination is the
+// whole point of the file-marker design.
+const spawnPause_1 = require("../../../core/v4/subagent/spawnPause");
 const stdioServer_1 = require("../../../core/v4/mcp/server/stdioServer");
 Object.defineProperty(exports, "AIDEN_MCP_BUILD", { enumerable: true, get: function () { return stdioServer_1.AIDEN_MCP_BUILD; } });
 const diagnostics_1 = require("../../../core/v4/mcp/server/diagnostics");
@@ -206,6 +225,43 @@ async function wireSubagentFanout(opts) {
         }
     }
     const finalAdapter = wrapped;
+    // v4.6 Phase 2R — open a daemon-db connection + seed an MCP
+    // instance row so child sub-agent runs (spawned by
+    // subagent_fanout below) persist to the same `runs` table the
+    // REPL writes to. Operators can then see MCP-side fanout
+    // activity under `aiden runs list --include-children`. Same
+    // WAL-coexistence model as REPL — connection.ts caches per-path.
+    const mcpInstanceId = `mcp-${(0, node_crypto_1.randomUUID)().slice(0, 8)}`;
+    const mcpDb = (0, daemon_1.openDaemonDb)((0, daemon_1.daemonDbPath)(opts.paths.root));
+    mcpDb.prepare(`INSERT OR IGNORE INTO daemon_instances
+       (instance_id, pid, hostname, started_at, last_heartbeat, version)
+     VALUES (?, ?, ?, ?, ?, ?)`).run(mcpInstanceId, process.pid, node_os_1.default.hostname(), Date.now(), Date.now(), version_1.VERSION);
+    const mcpRunStore = (0, daemon_1.createRunStore)({ db: mcpDb });
+    // v4.6 Phase 3b — self-improvement loop singleton against the
+    // same daemon.db. MCP-side spawn_sub_agent / subagent_fanout
+    // dispatches now record failure occurrences + recoveries into
+    // the shared ledger, so operators see MCP failures alongside
+    // REPL failures in `aiden /recovery list` from a future REPL
+    // session.
+    // eslint-disable-next-line @typescript-eslint/no-var-requires
+    const { initRecoveryStore } = require('../../../core/v4/selfimprovement/recoveryStore');
+    initRecoveryStore({ db: mcpDb });
+    // v4.6 Phase 3A — wire the pause singleton against the same
+    // `paths.root` the REPL uses. The fanout handler's pause-check
+    // reads through `getSpawnPause()`, so initing here makes MCP
+    // mode respect the operator's /spawn-pause state without any
+    // additional plumbing.
+    const mcpPauseState = (0, spawnPause_1.initSpawnPause)({ aidenHome: opts.paths.root });
+    if (mcpPauseState.isPaused()) {
+        const s = mcpPauseState.status();
+        const reasonSuffix = s.reason ? ` (reason: ${s.reason})` : '';
+        opts.logger.warn(`MCP boot: subagent_fanout is PAUSED${reasonSuffix}. ` +
+            'Operator must run /spawn-pause off in a REPL session to resume.', {
+            pausedAt: s.pausedAt ?? null,
+            pausedBy: s.pausedBy ?? null,
+            durationMs: s.durationMs ?? null,
+        });
+    }
     opts.registry.register((0, index_1.makeSubagentFanoutTool)({
         logger: opts.logger,
         resolveActiveModel: () => ({ providerId, modelId }),
@@ -224,70 +280,40 @@ async function wireSubagentFanout(opts) {
             }
             return [{ providerId, modelId }];
         },
-        runChild: async (childOpts) => {
-            const childCtx = {
+        // v4.6 Phase 2R — `spawnDeps` mirrors the REPL wiring in
+        // `cli/v4/aidenCLI.ts` (2Q-A). The MCP-mode parentToolContext
+        // is intentionally lean: no approvalEngine (a server has no
+        // human at the REPL to prompt — children's mutating tools are
+        // gated by AIDEN_SUBAGENT_ALLOW_DESTRUCTIVE in childBuilder),
+        // no ssrfProtection/tirithScanner/memoryGuard (MCP's slim
+        // runtime never wired them — see header comment §9).
+        spawnDeps: {
+            toolRegistry: opts.registry,
+            parentToolContext: {
                 cwd: process.cwd(),
                 paths: opts.paths,
                 sessions: opts.sessionManager,
                 memory: opts.memoryManager,
                 skillLoader: opts.skillLoader,
-                // approvalEngine intentionally undefined — N children
-                // contending for one stdin REPL would deadlock under MCP.
-            };
-            // Filter the child tool surface — read-only by default; opt-in
-            // via AIDEN_SUBAGENT_ALLOW_DESTRUCTIVE=1 (mirrors MCP env from
-            // v4.1-mcp). Recursive fanout disallowed (depth=1).
-            const allowDestructive = process.env.AIDEN_SUBAGENT_ALLOW_DESTRUCTIVE === '1' ||
-                process.env.AIDEN_SUBAGENT_ALLOW_DESTRUCTIVE === 'true';
-            const childToolNames = [];
-            for (const name of opts.registry.list()) {
-                const h = opts.registry.get(name);
-                if (!h)
-                    continue;
-                if (h.mutates && !allowDestructive)
-                    continue;
-                if (name === 'subagent_fanout')
-                    continue;
-                childToolNames.push(name);
-            }
-            const childExecutor = opts.registry.buildExecutor(childCtx);
-            const childTools = childToolNames
-                .map((n) => opts.registry.get(n)?.schema)
-                .filter((s) => !!s);
-            // Per-child cloned FallbackAdapter — own rate-limit state.
-            const childProvider = finalAdapter instanceof providerFallback_1.FallbackAdapter
-                ? finalAdapter.clone()
-                : finalAdapter;
-            const child = new aidenAgent_1.AidenAgent({
-                provider: childProvider,
-                tools: childTools,
-                toolExecutor: childExecutor,
-                maxTurns: childOpts.maxIterations,
-                providerId: childOpts.provider.providerId,
-                modelId: childOpts.provider.modelId,
-                // No promptBuilder — children get a brief system prompt
-                // (same lesson as v4.1-subagent.1: full SOUL.md makes
-                // trivial fanouts spend 30s+ on verbose self-introductions).
-            });
-            if (childOpts.signal.aborted) {
-                throw new Error('aborted before dispatch');
-            }
-            const roleLine = childOpts.role ? `Role: ${childOpts.role}. ` : '';
-            const childSystemPrompt = `You are one of N parallel subagents. ${roleLine}` +
-                `Answer the user's request concisely. Use available tools when ` +
-                `the answer requires real-world information you don't have memorized.`;
-            const history = [
-                { role: 'system', content: childSystemPrompt },
-                { role: 'user', content: childOpts.prompt },
-            ];
-            const result = await child.runConversation(history);
-            return result.finalContent;
+            },
+            parentProvider: finalAdapter,
+            parentProviderId: providerId,
+            parentModelId: modelId,
+            runStore: mcpRunStore,
+            instanceId: mcpInstanceId,
+            logger: opts.logger,
         },
+        // No resolveParentRunId / resolveParentSessionId for MCP — the
+        // MCP server doesn't run a turn loop with its own `runs` row;
+        // each tool invocation arrives discrete from the client. Child
+        // rows therefore have NULL spawned_from_run_id, which is the
+        // honest representation (no MCP-side parent to link to).
     }));
     opts.logger.info('subagent_fanout: wired (replaces stub) [mcp serve]', {
         providerId,
         modelId,
         fallback: finalAdapter instanceof providerFallback_1.FallbackAdapter ? 'FallbackAdapter' : 'direct',
+        instanceId: mcpInstanceId,
     });
 }
 async function runMcpSubcommand(action, opts = {}) {