chainlesschain 0.166.22 → 0.166.24

package/src/lib/app-server/graph-runtime.js

@@ -11,6 +11,7 @@ import {
   captureAgentSkillOutcomeIndex,
 } from "../evolution/agent-evolution-runtime-composition-brand.js";
 import { captureSkillVectorAuthority } from "../skill-vector-authority.js";
+import { captureSkillRetrievalRevocationReader } from "../evolution/skill-retrieval-revocation-authority.js";
 import {
   diffGraphTrace,
   locateBlockedRoot,
@@ -151,6 +152,7 @@ export class AppServerGraphRuntime {
     evolutionCompositionFactory = null,
     skillOutcomeIndex = null,
     skillVectorAuthority = null,
+    skillRetrievalRevocationReader = null,
     writerLeaseTtlMs = 24 * 60 * 60 * 1000,
   } = {}) {
     if (typeof executeNode !== "function") {
@@ -179,6 +181,10 @@ export class AppServerGraphRuntime {
       skillVectorAuthority === null
         ? null
         : captureSkillVectorAuthority(skillVectorAuthority);
+    this.skillRetrievalRevocationReader =
+      skillRetrievalRevocationReader === null
+        ? null
+        : captureSkillRetrievalRevocationReader(skillRetrievalRevocationReader);
     if (
       this.skillOutcomeIndex !== null &&
       this.skillVectorAuthority !== null &&
@@ -186,6 +192,22 @@ export class AppServerGraphRuntime {
     ) {
       throw new TypeError("Graph retrieval authorities must share one tenant");
     }
+    if (
+      this.skillVectorAuthority !== null &&
+      this.skillRetrievalRevocationReader !== null &&
+      this.skillVectorAuthority.tenantId !==
+        this.skillRetrievalRevocationReader.tenantId
+    ) {
+      throw new TypeError("Graph retrieval authorities must share one tenant");
+    }
+    if (
+      this.skillOutcomeIndex !== null &&
+      this.skillRetrievalRevocationReader !== null &&
+      this.skillOutcomeIndex.tenantId !==
+        this.skillRetrievalRevocationReader.tenantId
+    ) {
+      throw new TypeError("Graph retrieval authorities must share one tenant");
+    }
     this.writerLeaseTtlMs = writerLeaseTtlMs;
     this.runs = new Map();
     this.drives = new Map();
@@ -227,6 +249,15 @@ export class AppServerGraphRuntime {
               "Graph evolution composition and Skill vector authority must share one tenant",
             );
           }
+          if (
+            this.skillRetrievalRevocationReader !== null &&
+            composition.tenantId !==
+              this.skillRetrievalRevocationReader.tenantId
+          ) {
+            throw new TypeError(
+              "Graph evolution composition and Skill revocation authority must share one tenant",
+            );
+          }
           if (
             typeof composition.evolutionIngress?.start !== "function" ||
             typeof composition.evolutionIngress?.complete !== "function"
@@ -732,6 +763,7 @@ export class AppServerGraphRuntime {
         evolutionIngress: evolutionComposition?.evolutionIngress || null,
         skillOutcomeIndex: this.skillOutcomeIndex,
         skillVectorAuthority: this.skillVectorAuthority,
+        skillRetrievalRevocationReader: this.skillRetrievalRevocationReader,
       });
       if (!result || !["succeeded", "completed"].includes(result.status)) {
         const error = runtimeError(

package/src/lib/app-server/server.js

@@ -9,6 +9,7 @@ import {
 import { AppServerGraphRuntime } from "./graph-runtime.js";
 import { captureAgentSkillOutcomeIndex } from "../evolution/agent-evolution-runtime-composition-brand.js";
 import { captureSkillVectorAuthority } from "../skill-vector-authority.js";
+import { captureSkillRetrievalRevocationReader } from "../evolution/skill-retrieval-revocation-authority.js";
 import { compileGraphDefinition } from "../graph-kernel/compiler.js";
 import { createCliContextMemoryRuntime } from "../context-memory-kernel/runtime.js";
 import { isEvolutionWorkbenchCliHost } from "../evolution/evolution-workbench-cli-host.js";
@@ -151,6 +152,7 @@ export class CcAppServer {
     evolutionCompositionFactory = null,
     skillOutcomeIndex = null,
     skillVectorAuthority = null,
+    skillRetrievalRevocationReader = null,
     evolutionWorkbenchHost = null,
     governedKnowledgeReviewHost = null,
     contextMemoryRuntimeFactory = createCliContextMemoryRuntime,
@@ -200,6 +202,10 @@ export class CcAppServer {
       skillVectorAuthority === null
         ? null
         : captureSkillVectorAuthority(skillVectorAuthority);
+    this.skillRetrievalRevocationReader =
+      skillRetrievalRevocationReader === null
+        ? null
+        : captureSkillRetrievalRevocationReader(skillRetrievalRevocationReader);
     if (
       this.skillOutcomeIndex !== null &&
       this.skillVectorAuthority !== null &&
@@ -209,9 +215,32 @@ export class CcAppServer {
         "App Server retrieval authorities must share one tenant",
       );
     }
+    if (
+      this.skillVectorAuthority !== null &&
+      this.skillRetrievalRevocationReader !== null &&
+      this.skillVectorAuthority.tenantId !==
+        this.skillRetrievalRevocationReader.tenantId
+    ) {
+      throw new TypeError(
+        "App Server retrieval authorities must share one tenant",
+      );
+    }
+    if (
+      this.skillOutcomeIndex !== null &&
+      this.skillRetrievalRevocationReader !== null &&
+      this.skillOutcomeIndex.tenantId !==
+        this.skillRetrievalRevocationReader.tenantId
+    ) {
+      throw new TypeError(
+        "App Server retrieval authorities must share one tenant",
+      );
+    }
     if (
       graphRuntime &&
-      (evolutionCompositionFactory || skillOutcomeIndex || skillVectorAuthority)
+      (evolutionCompositionFactory ||
+        skillOutcomeIndex ||
+        skillVectorAuthority ||
+        skillRetrievalRevocationReader)
     ) {
       throw new TypeError(
         "graphRuntime and host-owned Graph authorities cannot both be provided",
@@ -226,6 +255,7 @@ export class CcAppServer {
         evolutionCompositionFactory,
         skillOutcomeIndex: this.skillOutcomeIndex,
         skillVectorAuthority: this.skillVectorAuthority,
+        skillRetrievalRevocationReader: this.skillRetrievalRevocationReader,
         executeNode: (context) => this._executeGraphNode(context),
         requestHumanTask: (context) => this._requestHumanTask(context),
         onEvent: (event) => {
@@ -773,6 +803,7 @@ export class CcAppServer {
     evolutionIngress,
     skillOutcomeIndex,
     skillVectorAuthority,
+    skillRetrievalRevocationReader,
   }) {
     const threadId = `graph-agent:${runId}:${nodeId}`;
     const turn = { id: attempt.id, threadId };
@@ -785,6 +816,7 @@ export class CcAppServer {
       delete turnOptions.evolutionIngress;
       delete turnOptions.skillOutcomeIndex;
       delete turnOptions.skillVectorAuthority;
+      delete turnOptions.skillRetrievalRevocationReader;
       if (evolutionIngress !== null && evolutionIngress !== undefined) {
         turnOptions.evolutionIngress = evolutionIngress;
       }
@@ -794,6 +826,13 @@ export class CcAppServer {
       if (skillVectorAuthority !== null && skillVectorAuthority !== undefined) {
         turnOptions.skillVectorAuthority = skillVectorAuthority;
       }
+      if (
+        skillRetrievalRevocationReader !== null &&
+        skillRetrievalRevocationReader !== undefined
+      ) {
+        turnOptions.skillRetrievalRevocationReader =
+          skillRetrievalRevocationReader;
+      }
       const result = await this.kernel.startTurn({
         threadId,
         turnId: attempt.id,
@@ -1038,12 +1077,17 @@ export class CcAppServer {
       const turnOptions = { ...options };
       delete turnOptions.skillOutcomeIndex;
       delete turnOptions.skillVectorAuthority;
+      delete turnOptions.skillRetrievalRevocationReader;
       if (this.skillOutcomeIndex !== null) {
         turnOptions.skillOutcomeIndex = this.skillOutcomeIndex;
       }
       if (this.skillVectorAuthority !== null) {
         turnOptions.skillVectorAuthority = this.skillVectorAuthority;
       }
+      if (this.skillRetrievalRevocationReader !== null) {
+        turnOptions.skillRetrievalRevocationReader =
+          this.skillRetrievalRevocationReader;
+      }
       const result = await this.kernel.startTurn({
         threadId: turn.threadId,
         turnId: turn.id,

package/src/lib/app-server/websocket-transport.js

@@ -418,6 +418,8 @@ export class WebSocketAppServerHost extends EventEmitter {
             this.options.evolutionCompositionFactory ?? null,
           skillOutcomeIndex: this.options.skillOutcomeIndex ?? null,
           skillVectorAuthority: this.options.skillVectorAuthority ?? null,
+          skillRetrievalRevocationReader:
+            this.options.skillRetrievalRevocationReader ?? null,
           evolutionWorkbenchHost: this.options.evolutionWorkbenchHost ?? null,
           governedKnowledgeReviewHost:
             this.options.governedKnowledgeReviewHost ?? null,

package/src/lib/autonomous-agent.js

@@ -43,6 +43,9 @@ export class CLIAutonomousAgent extends EventEmitter {
   constructor() {
     super();
     this._goals = new Map();
+    this._runningLoops = new Map();
+    this._closing = false;
+    this._shutdownAbort = new AbortController();
     this._llmChat = null;
     this._toolExecutor = null;
     this._hookManager = null;
@@ -88,6 +91,7 @@ export class CLIAutonomousAgent extends EventEmitter {
   async submitGoal(description, { tokenBudget = 50000 } = {}) {
     assertCLILegacyMutationAllowed("CLIAutonomousAgent.submitGoal");
     if (!this._initialized) throw new Error("Agent not initialized");
+    if (this._closing) throw new Error("Agent session is closing");
     if (!description) throw new Error("Goal description required");
 
     const goalId = `goal-${_deps.Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
@@ -111,11 +115,7 @@ export class CLIAutonomousAgent extends EventEmitter {
     this.emit("goal:submitted", { goalId, description });
 
     // Start the ReAct loop asynchronously
-    this._runReActLoop(goal).catch((err) => {
-      goal.status = GoalStatus.FAILED;
-      goal.errors.push(err.message);
-      this.emit("goal:failed", { goalId, error: err.message });
-    });
+    this._launchGoalLoop(goal);
 
     return { goalId };
   }
@@ -162,6 +162,7 @@ export class CLIAutonomousAgent extends EventEmitter {
    */
   resumeGoal(goalId) {
     assertCLILegacyMutationAllowed("CLIAutonomousAgent.resumeGoal");
+    if (this._closing) return { error: "Agent session is closing" };
     const goal = this._goals.get(goalId);
     if (!goal) return { error: "Goal not found" };
     if (goal.status !== GoalStatus.PAUSED)
@@ -172,14 +173,51 @@ export class CLIAutonomousAgent extends EventEmitter {
     this.emit("goal:resumed", { goalId });
 
     // Continue the loop
-    this._runReActLoop(goal).catch((err) => {
-      goal.status = GoalStatus.FAILED;
-      goal.errors.push(err.message);
-    });
+    this._launchGoalLoop(goal);
 
     return { success: true };
   }
 
+  _launchGoalLoop(goal) {
+    // Resume during an in-flight model/tool call reuses that loop, rather than
+    // launching a second execution of the same goal.
+    if (this._runningLoops.has(goal.id)) return this._runningLoops.get(goal.id);
+    const running = this._runReActLoop(goal)
+      .catch((err) => {
+        if (goal.status === GoalStatus.CANCELLED) return;
+        goal.status = GoalStatus.FAILED;
+        goal.errors.push(err.message);
+        this.emit("goal:failed", { goalId: goal.id, error: err.message });
+      })
+      .finally(() => this._runningLoops.delete(goal.id));
+    this._runningLoops.set(goal.id, running);
+    return running;
+  }
+
+  get signal() {
+    return this._shutdownAbort.signal;
+  }
+
+  async shutdown() {
+    this._closing = true;
+    let interrupted = 0;
+    for (const goal of this._goals.values()) {
+      if (
+        ![GoalStatus.PENDING, GoalStatus.RUNNING, GoalStatus.PAUSED].includes(
+          goal.status,
+        )
+      )
+        continue;
+      interrupted++;
+      goal.status = GoalStatus.CANCELLED;
+      goal.updatedAt = new Date().toISOString();
+      this.emit("goal:cancelled", { goalId: goal.id });
+    }
+    this._shutdownAbort.abort(new Error("Agent session is closing"));
+    await Promise.allSettled([...this._runningLoops.values()]);
+    return { interrupted };
+  }
+
   /**
    * Cancel a goal.
    */
@@ -374,12 +412,13 @@ Goal: ${goal.description}
 
 Available tools: read_file, write_file, edit_file, run_shell, search_files, list_dir, run_skill
 
-Return a JSON array of steps, each with: { "description": "...", "tool": "tool_name", "params": {...} }
+Return a JSON array of steps, for example: [{ "description": "Describe the step", "tool": "tool_name", "params": {} }]
+Populate params with the selected tool's actual arguments.
 Only return the JSON array, no other text.`;
 
       const response = await this._llmChat(
         [{ role: "user", content: prompt }],
-        { maxTokens: 1024 },
+        { maxTokens: 1024, signal: this.signal },
       );
 
       // Parse steps from LLM response
@@ -396,6 +435,11 @@ Only return the JSON array, no other text.`;
       }));
     } catch (_err) {
       // Fallback: single step
+      if (
+        _err?.runtimeLedgerPersistence === true ||
+        _err?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED"
+      )
+        throw _err;
       return [
         {
           description: goal.description,
@@ -450,11 +494,12 @@ Should I:
 2. Add a new prerequisite step
 3. Skip this step and continue
 
-Reply with a JSON object: { "action": "retry|add_step|skip", "newParams": {...}, "newStep": {...} }`;
+Reply with a JSON object, for example: { "action": "retry", "newParams": {}, "newStep": { "description": "Corrective step", "tool": "tool_name", "params": {} } }
+Set action to retry, add_step, or skip. Supply newParams for retry and newStep for add_step.`;
 
       const response = await this._llmChat(
         [{ role: "user", content: prompt }],
-        { maxTokens: 512 },
+        { maxTokens: 512, signal: this.signal },
       );
 
       const correction = this._parseJSON(response);
@@ -499,6 +544,11 @@ Reply with a JSON object: { "action": "retry|add_step|skip", "newParams": {...},
 
       return false;
     } catch (_err) {
+      if (
+        _err?.runtimeLedgerPersistence === true ||
+        _err?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED"
+      )
+        throw _err;
       return false;
     }
   }

package/src/lib/cowork/ab-comparator-cli.js

@@ -10,8 +10,9 @@ import { runPeerGroup } from "./agent-group-runner.js";
 
 const DEFAULT_CRITERIA = ["quality", "performance", "readability"];
 
-function throwRuntimeLedgerFailure(error) {
+function throwTerminalModelFailure(error) {
   if (error?.runtimeLedgerPersistence === true) throw error;
+  if (error?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED") throw error;
 }
 
 const VARIANT_PROFILES = [
@@ -91,7 +92,7 @@ export async function compare({
   // Ordinary variant failures remain comparable, but a host ledger failure
   // must escape before judging can spend again or a partial result is emitted.
   for (const outcome of runResult.results) {
-    throwRuntimeLedgerFailure(outcome.error);
+    throwTerminalModelFailure(outcome.error);
   }
 
   const generatedVariants = runResult.results.map((r) => {
@@ -145,7 +146,7 @@ REASON: (1-2 sentence justification)`;
     winner = parseWinner(judgement) || generatedVariants[0]?.name || "unknown";
     reason = parseReason(judgement) || "See detailed scores above.";
   } catch (err) {
-    throwRuntimeLedgerFailure(err);
+    throwTerminalModelFailure(err);
     reason = `Scoring error: ${err.message}`;
   }
 

package/src/lib/cowork/debate-review-cli.js

@@ -10,8 +10,9 @@ import { runPeerGroup } from "./agent-group-runner.js";
 
 const DEFAULT_PERSPECTIVES = ["performance", "security", "maintainability"];
 
-function throwRuntimeLedgerFailure(error) {
+function throwTerminalModelFailure(error) {
   if (error?.runtimeLedgerPersistence === true) throw error;
+  if (error?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED") throw error;
 }
 
 const PERSPECTIVE_PROMPTS = {
@@ -104,7 +105,7 @@ export async function startDebate({
   // rows. A durable usage-ledger failure is host-terminal, not review content:
   // let the REPL latch stop this and every later paid call.
   for (const outcome of runResult.results) {
-    throwRuntimeLedgerFailure(outcome.error);
+    throwTerminalModelFailure(outcome.error);
   }
 
   const reviews = runResult.results.map((r) => {
@@ -153,7 +154,7 @@ export async function startDebate({
     finalVerdict = extractVerdict(summary);
     consensusScore = extractConsensusScore(summary);
   } catch (err) {
-    throwRuntimeLedgerFailure(err);
+    throwTerminalModelFailure(err);
     summary = `Moderator error: ${err.message}`;
   }
 

package/src/lib/cowork/decision-kb-cli.js

@@ -119,6 +119,11 @@ List all decisions you can find. If no explicit decisions are documented, infer
       summary: `Found ${decisions.length} architectural decisions in ${targetPath}\n\n${decisions.map((d) => `  - ${d.title} (${d.status})`).join("\n")}`,
     };
   } catch (err) {
+    if (
+      err?.runtimeLedgerPersistence === true ||
+      err?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED"
+    )
+      throw err;
     return {
       decisions: [],
       summary: `Decision extraction failed: ${err.message}`,

package/src/lib/cowork-adapter.js

@@ -10,6 +10,7 @@
 import { LLMProviderRegistry, BUILT_IN_PROVIDERS } from "./llm-providers.js";
 import { loadConfig } from "./config-manager.js";
 import { applyConfigLlmDefaults } from "./llm-config-defaults.js";
+import { captureAgentEvolutionIngress } from "./evolution/agent-evolution-ingress.js";
 
 function plainUsage(value) {
   return value && typeof value === "object" && !Array.isArray(value)
@@ -106,6 +107,8 @@ async function invokeChatCall(callWrapper, provider, model, call) {
  * @param {string} [options.model] - Model name override
  * @param {string} [options.baseUrl] - Base URL override
  * @param {string} [options.apiKey] - API key override
+ * @param {object} [options.evolutionIngress] - Branded session ingress captured
+ *        by the adapter; per-call options cannot remove or replace it.
  * @param {(request: {call: function, provider: string, model: string}) => Promise<object>} [options.callWrapper]
  *        Optional host boundary around each real provider call. The callback
  *        may invoke `call({ signal })` to bind cancellation and resolves to a
@@ -114,6 +117,10 @@ async function invokeChatCall(callWrapper, provider, model, call) {
  * @returns {(messages: object[], opts?: object) => Promise<string>}
  */
 export function createChatFn(options = {}) {
+  const evolutionIngress =
+    options.evolutionIngress == null
+      ? null
+      : captureAgentEvolutionIngress(options.evolutionIngress);
   // Fill provider/model/baseUrl/apiKey from config.llm only when the caller
   // gave no explicit provider AND no LLM_PROVIDER env override (both still win).
   // Fail-open: a config read must never break chat construction.
@@ -140,6 +147,20 @@ export function createChatFn(options = {}) {
   return async function chat(messages, opts = {}) {
     const currentModel = opts.model || model;
     const maxTokens = opts.maxTokens || 2048;
+    const requestSignal = (hostSignal) => {
+      const signals = [
+        ...new Set([hostSignal, opts.signal, resolved.signal].filter(Boolean)),
+      ];
+      return signals.length > 1 ? AbortSignal.any(signals) : signals[0];
+    };
+    // Run inside the host's per-call meter, immediately before provider encoding.
+    // Every invocation (including concurrent reviewers) gets fresh durable
+    // admission; the original conversation is never replaced in place.
+    const prepareMessages = async () =>
+      evolutionIngress === null
+        ? messages
+        : (await evolutionIngress.prepareModelRequest({ messages, tools: [] }))
+            .messages;
 
     if (provider === "ollama") {
       const envelope = await invokeChatCall(
@@ -147,13 +168,14 @@ export function createChatFn(options = {}) {
         provider,
         currentModel,
         async ({ signal = opts.signal || resolved.signal } = {}) => {
+          const modelMessages = await prepareMessages();
           const res = await fetch(`${baseUrl}/api/chat`, {
             method: "POST",
-            signal,
+            signal: requestSignal(signal),
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify({
               model: currentModel,
-              messages,
+              messages: modelMessages,
               stream: false,
               options: { num_predict: maxTokens },
             }),
@@ -172,25 +194,24 @@ export function createChatFn(options = {}) {
     if (provider === "anthropic") {
       const key = resolved.apiKey || process.env[providerDef.apiKeyEnv];
       if (!key) throw new Error("ANTHROPIC_API_KEY not set");
-      // Extract system message if present
-      const systemMsgs = messages.filter((m) => m.role === "system");
-      const otherMsgs = messages.filter((m) => m.role !== "system");
-      const body = {
-        model: currentModel,
-        max_tokens: maxTokens,
-        messages: otherMsgs,
-      };
-      if (systemMsgs.length > 0) {
-        body.system = systemMsgs.map((m) => m.content).join("\n");
-      }
       const envelope = await invokeChatCall(
         callWrapper,
         provider,
         currentModel,
         async ({ signal = opts.signal || resolved.signal } = {}) => {
+          const modelMessages = await prepareMessages();
+          const systemMsgs = modelMessages.filter((m) => m.role === "system");
+          const body = {
+            model: currentModel,
+            max_tokens: maxTokens,
+            messages: modelMessages.filter((m) => m.role !== "system"),
+            ...(systemMsgs.length
+              ? { system: systemMsgs.map((m) => m.content).join("\n") }
+              : {}),
+          };
           const res = await fetch(`${baseUrl}/messages`, {
             method: "POST",
-            signal,
+            signal: requestSignal(signal),
             headers: {
               "Content-Type": "application/json",
               "x-api-key": key,
@@ -218,16 +239,17 @@ export function createChatFn(options = {}) {
       provider,
       currentModel,
       async ({ signal = opts.signal || resolved.signal } = {}) => {
+        const modelMessages = await prepareMessages();
         const res = await fetch(`${baseUrl}/chat/completions`, {
           method: "POST",
-          signal,
+          signal: requestSignal(signal),
           headers: {
             "Content-Type": "application/json",
             Authorization: `Bearer ${key}`,
           },
           body: JSON.stringify({
             model: currentModel,
-            messages,
+            messages: modelMessages,
             max_tokens: maxTokens,
           }),
         });