chainlesschain 0.162.174 → 0.162.176

package/src/runtime/agent-runtime.js

@@ -318,6 +318,7 @@ export class AgentRuntime {
       maxConnections,
       timeout,
       sessionManager,
+      projectRoot: project,
       remoteSessionRelayUrl,
       remoteSessionPeerId,
       envelopeBus,

package/src/runtime/coding-agent-contract-shared.cjs

@@ -90,6 +90,58 @@ const CODING_AGENT_TOOL_CONTRACTS = Object.freeze([
       tags: ["tool:write_file", "contract:coding-agent", "tier:mvp"],
     },
   },
+  {
+    name: "delete_file",
+    title: "Delete File",
+    kind: "filesystem",
+    tier: "mvp",
+    description:
+      "Delete one file. Directories are rejected. Read the file first; interactive IDE approval shows an explicit deletion diff before applying it.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: { type: "string", description: "File path to delete" },
+      },
+      required: ["path"],
+    },
+    ...TOOL_POLICY_METADATA.delete_file,
+    permissions: {
+      level: "elevated",
+      scopes: ["filesystem:write"],
+    },
+    telemetry: {
+      category: "filesystem",
+      tags: ["tool:delete_file", "contract:coding-agent", "tier:mvp"],
+    },
+  },
+  {
+    name: "move_file",
+    title: "Move File",
+    kind: "filesystem",
+    tier: "mvp",
+    description:
+      "Rename or move one file without overwriting an existing destination. Directories are rejected. Interactive IDE approval shows the explicit source and destination.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: { type: "string", description: "Existing source file path" },
+        target_path: {
+          type: "string",
+          description: "New destination file path",
+        },
+      },
+      required: ["path", "target_path"],
+    },
+    ...TOOL_POLICY_METADATA.move_file,
+    permissions: {
+      level: "elevated",
+      scopes: ["filesystem:write"],
+    },
+    telemetry: {
+      category: "filesystem",
+      tags: ["tool:move_file", "contract:coding-agent", "tier:mvp"],
+    },
+  },
   {
     name: "notebook_edit",
     title: "Edit Notebook",

package/src/runtime/coding-agent-policy.cjs

@@ -112,6 +112,26 @@ const TOOL_POLICY_METADATA = Object.freeze({
     approvalFlow: "plan",
     isReadOnly: false,
   },
+  delete_file: {
+    riskLevel: RISK_LEVELS.MEDIUM,
+    category: TOOL_CATEGORIES.WRITE,
+    availableInPlanMode: false,
+    planModeBehavior: "blocked",
+    requiresPlanApproval: true,
+    requiresConfirmation: false,
+    approvalFlow: "plan",
+    isReadOnly: false,
+  },
+  move_file: {
+    riskLevel: RISK_LEVELS.MEDIUM,
+    category: TOOL_CATEGORIES.WRITE,
+    availableInPlanMode: false,
+    planModeBehavior: "blocked",
+    requiresPlanApproval: true,
+    requiresConfirmation: false,
+    approvalFlow: "plan",
+    isReadOnly: false,
+  },
   notebook_edit: {
     riskLevel: RISK_LEVELS.MEDIUM,
     category: TOOL_CATEGORIES.WRITE,

package/src/runtime/diagnostics.js

@@ -12,7 +12,6 @@
  * Refs: docs/implementation-plans/CLI_RUNTIME_CONVERGENCE_ADR.md
  */
 
-import { execSync } from "node:child_process";
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { join as pathJoin } from "node:path";
 import { createRequire } from "node:module";
@@ -30,6 +29,9 @@ import {
 import { loadConfig } from "../lib/config-manager.js";
 import { isAppRunning, getAppPid } from "../lib/process-manager.js";
 import { readDiskVersion, versionDiagnosis } from "../lib/version-skew.js";
+import { EventRuntimeStore } from "../lib/event-runtime-store.js";
+import { executionBroker } from "../lib/process-execution-broker/index.js";
+import { resolveNpmInvocation } from "../lib/npm-invocation.js";
 
 /** Best-effort read of the npm `latest` cached by the startup update notice. */
 function readCachedLatest() {
@@ -67,9 +69,31 @@ function readdirSafe(dir) {
   }
 }
 
-function safeExec(cmd) {
+export function diagnosticProcessInvocations(
+  platform = process.platform,
+  execPath = process.execPath,
+) {
+  return {
+    npm: resolveNpmInvocation({ platform, execPath }),
+    git: { command: "git", prefixArgs: [] },
+  };
+}
+
+export const _diagnosticDeps = {
+  execFileSync: (...args) => executionBroker.execFileSync(...args),
+};
+
+export function runDiagnosticProbe(file, args = [], deps = _diagnosticDeps) {
   try {
-    return execSync(cmd, { encoding: "utf-8" }).trim();
+    return String(
+      deps.execFileSync(file, args, {
+        encoding: "utf-8",
+        origin: "runtime:diagnostics",
+        policy: "allow",
+        scope: "diagnostics",
+        shell: false,
+      }),
+    ).trim();
   } catch {
     return null;
   }
@@ -126,6 +150,7 @@ export function checkPdhPackageIntegrity(deps = {}) {
  */
 export async function collectDoctorReport() {
   const checks = [];
+  const invocations = diagnosticProcessInvocations();
 
   // Node.js
   const nodeVersion = process.versions.node;
@@ -139,7 +164,10 @@ export async function collectDoctorReport() {
   });
 
   // npm
-  const npmVersion = safeExec("npm --version");
+  const npmVersion = runDiagnosticProbe(invocations.npm.command, [
+    ...invocations.npm.prefixArgs,
+    "--version",
+  ]);
   checks.push({
     id: "npm",
     name: npmVersion ? `npm ${npmVersion}` : "npm",
@@ -168,7 +196,7 @@ export async function collectDoctorReport() {
   });
 
   // Git
-  const gitVersion = safeExec("git --version");
+  const gitVersion = runDiagnosticProbe(invocations.git.command, ["--version"]);
   checks.push({
     id: "git",
     name: gitVersion || "Git",
@@ -316,7 +344,13 @@ export function parseGitWorktrees(porcelain) {
 
 /** Best-effort live git worktree list for the current repo. */
 export function collectWorktrees() {
-  return parseGitWorktrees(safeExec("git worktree list --porcelain"));
+  return parseGitWorktrees(
+    runDiagnosticProbe(diagnosticProcessInvocations().git.command, [
+      "worktree",
+      "list",
+      "--porcelain",
+    ]),
+  );
 }
 
 /**
@@ -364,10 +398,37 @@ export function buildDoctorDiagnosticInput(report, signals = {}) {
  *     services: Array<{ name, state }> | null,
  *     note: string | null
  *   },
- *   ports: Array<{ name, port, open }>
+ *   ports: Array<{ name, port, open }>,
+ *   eventRuntime: { enabled, health, error }
  * }
  */
-export async function collectStatusReport() {
+export function collectEventRuntimeStatus({
+  env = process.env,
+  store = null,
+} = {}) {
+  const enabled = env?.CC_EVENT_RUNTIME_DURABLE === "1";
+  if (!enabled && !store) {
+    return { enabled: false, health: null, error: null };
+  }
+  try {
+    return {
+      enabled,
+      health: (store || new EventRuntimeStore()).getHealthSnapshot(),
+      error: null,
+    };
+  } catch (error) {
+    return {
+      enabled,
+      health: null,
+      error: {
+        code: error?.code || "CC_EVENT_RUNTIME_STATUS_FAILED",
+        message: String(error?.message || error),
+      },
+    };
+  }
+}
+
+export async function collectStatusReport(options = {}) {
   let config = {};
   try {
     config = loadConfig();
@@ -443,5 +504,9 @@ export async function collectStatusReport() {
     setup,
     docker,
     ports,
+    eventRuntime: collectEventRuntimeStatus({
+      env: options.eventRuntimeEnv || process.env,
+      store: options.eventRuntimeStore || null,
+    }),
   };
 }

package/src/runtime/headless-runner.js

@@ -56,6 +56,7 @@ import {
   reconcileSideEffects,
   classifyToolSideEffect,
 } from "../lib/side-effect-ledger.js";
+import { DiffReviewFollowUpTracker } from "../lib/diff-review-follow-up.js";
 import { SIDE_EFFECT_LEDGER_EVENT } from "../lib/side-effect-ledger-store.js";
 import { TurnBindingLog, createTurnBindingFeed } from "../lib/turn-binding.js";
 import { TURN_BINDING_EVENT } from "../lib/turn-binding-store.js";
@@ -80,6 +81,7 @@ import { isolationLevel } from "../lib/agent-sandbox.js";
 import { createBackgroundPhaseReporter } from "../lib/background-phase-reporter.js";
 import { withQuietStdout } from "./quiet-stdout.js";
 import { CostBudget } from "../lib/cost-budget.js";
+import { estimateTokens } from "../harness/prompt-compressor.js";
 import {
   classifyDenial,
   recordDenial,
@@ -859,6 +861,7 @@ export async function runAgentHeadless(options = {}, deps = {}) {
       }
     }
   }
+  const diffReviewFollowUps = new DiffReviewFollowUpTracker(sideEffectLedger);
 
   // ── Wire the persistent ApprovalGate with our non-interactive confirmer
   // and force the session-policy tier dictated by --permission-mode. ──────
@@ -947,6 +950,7 @@ export async function runAgentHeadless(options = {}, deps = {}) {
   // (undefined) leaves both paths byte-identical.
   const _leanNoProjectMemory = options.projectMemory === false;
   let _loadedInstructions = null;
+  let _loadedPersonaSkills = [];
   const systemContent = composeSystemPrompt(
     buildSystemPrompt(cwd, {
       additionalDirectories,
@@ -961,6 +965,9 @@ export async function runAgentHeadless(options = {}, deps = {}) {
       onInstructionsLoaded: (loaded) => {
         _loadedInstructions = loaded;
       },
+      onSkillsLoaded: (skills) => {
+        _loadedPersonaSkills = Array.isArray(skills) ? skills : [];
+      },
     },
   );
 
@@ -1340,6 +1347,34 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     });
   }
 
+  // Persist the admitted runtime schema surface so `cc context --sources` can
+  // attribute MCP cost to the actual server/tool definitions used by this run,
+  // rather than guessing from the current environment on a later invocation.
+  if (
+    persist &&
+    (mcp?.extraToolDefinitions?.length || _loadedPersonaSkills.length)
+  ) {
+    try {
+      store.appendEvent(sessionId, "context_sources", {
+        mcp: (mcp?.extraToolDefinitions || []).map((definition) => ({
+          function: {
+            name: definition?.function?.name || null,
+            description: definition?.function?.description || "",
+            parameters: definition?.function?.parameters || {},
+          },
+        })),
+        skills: _loadedPersonaSkills.map((skill) => ({
+          id: skill?.id || skill?.displayName || "skill",
+          displayName: skill?.displayName || skill?.id || "skill",
+          source: skill?.source || "skill",
+          body: typeof skill?.body === "string" ? skill.body : "",
+        })),
+      });
+    } catch {
+      // Source attribution is observability-only; never fail the agent run.
+    }
+  }
+
   const loopOptions = {
     model,
     provider,
@@ -1382,6 +1417,7 @@ export async function runAgentHeadless(options = {}, deps = {}) {
     enabledToolNames,
     disabledTools,
     iterationBudget: budget,
+    toolAdmission: options.toolAdmission || null,
     // `ask_user_question` in a BACKGROUND turn child (P0 state-machine
     // producer for `needs_input`): there is no live channel to a human
     // mid-turn, but the question IS the structured needs-input signal. Park
@@ -1811,6 +1847,13 @@ export async function runAgentHeadless(options = {}, deps = {}) {
             // P0-2: settle the in-flight side-effect (commit on success, fail on
             // a clean error) and persist the updated ledger snapshot.
             if (persist && currentSideEffectOpId) {
+              if (event.result?._diffReviewAudit) {
+                diffReviewFollowUps.observe(
+                  sideEffectLedger,
+                  currentSideEffectOpId,
+                  event.result._diffReviewAudit,
+                );
+              }
               if (err)
                 sideEffectLedger.fail(
                   currentSideEffectOpId,
@@ -1917,10 +1960,30 @@ export async function runAgentHeadless(options = {}, deps = {}) {
           }
           case "response-complete": {
             finalText = event.content || "";
+            if (
+              persist &&
+              diffReviewFollowUps.complete(sideEffectLedger, {
+                status: "completed-without-reproposal",
+              }).length > 0
+            ) {
+              persistSideEffectLedger();
+            }
             break;
           }
           case "run-ended": {
             if (event.reason) endReason = event.reason;
+            if (
+              persist &&
+              diffReviewFollowUps.complete(sideEffectLedger, {
+                status:
+                  event.reason === "complete"
+                    ? "completed-without-reproposal"
+                    : "interrupted",
+                reason: event.reason || endReason,
+              }).length > 0
+            ) {
+              persistSideEffectLedger();
+            }
             break;
           }
           default: