chainlesschain 0.166.22 → 0.166.25

package/src/lib/skill-retrieval-router.js

@@ -1,4 +1,5 @@
 import { BM25Search } from "./bm25-search.js";
+import { captureSkillRetrievalRevocationReader } from "./evolution/skill-retrieval-revocation-authority.js";
 
 export const SKILL_RETRIEVAL_RESULT_SCHEMA =
   "chainlesschain.skill-retrieval-result/v1";
@@ -82,6 +83,7 @@ export function routeSkillDescriptors({
   target = null,
   vectorScores = null,
   outcomeMetrics = null,
+  revocationReader = null,
   topK = 5,
   ambiguityMargin = 0.02,
 } = {}) {
@@ -104,6 +106,10 @@ export function routeSkillDescriptors({
   const requiredTags = new Set(
     tags.map((value) => String(value).toLowerCase()),
   );
+  const revocations =
+    revocationReader === null
+      ? null
+      : captureSkillRetrievalRevocationReader(revocationReader);
   const rejected = [];
   const admitted = [];
   for (const skill of skills) {
@@ -116,6 +122,11 @@ export function routeSkillDescriptors({
     const mismatch = compatible(skill, target);
     const reasons = [];
     if (!digest) reasons.push("missing-content-digest");
+    const revocation =
+      digest === null
+        ? null
+        : revocations?.inspect({ skillName: skill.id, contentDigest: digest });
+    if (revocation?.invalidated) reasons.push("revoked-by-evolution");
     if (namespace !== null && skill.source !== namespace)
       reasons.push("namespace-mismatch");
     if ([...requiredTags].some((value) => !skillTags.has(value)))
@@ -123,7 +134,17 @@ export function routeSkillDescriptors({
     if (!containsPath(skill, targetPath)) reasons.push("path-mismatch");
     reasons.push(...mismatch.reasons);
     if (reasons.length > 0) {
-      rejected.push({ id: skill.id, digest, reasons });
+      rejected.push({
+        id: skill.id,
+        digest,
+        reasons,
+        ...(revocation?.invalidated
+          ? {
+              revocationStateDigest: revocation.stateDigest,
+              revocationReceiptDigest: revocation.receiptDigest,
+            }
+          : {}),
+      });
       continue;
     }
     admitted.push({ skill, digest });

package/src/repl/agent-repl.js

@@ -173,6 +173,7 @@ import { newCostStore, addUsage } from "./session-cost.js";
 import { extractPluginUsageAttribution } from "../lib/plugin-usage-attribution.js";
 import { captureStructuredMemoryAgentControlPlane } from "../lib/evolution/structured-memory-agent-control-plane.js";
 import { captureAgentEvolutionIngress } from "../lib/evolution/agent-evolution-ingress.js";
+import { createAgentEvolutionSessionLifecycle } from "../lib/evolution/agent-evolution-session-lifecycle.js";
 import { formatManagedCheckpointEvent } from "../lib/managed-checkpoint-render.js";
 import { parseThinkCommand, parseEffortCommand } from "./think-command.js";
 import {
@@ -451,7 +452,6 @@ export async function runReplDirectToolWithLedger({
  * Reference to the runtime DB for hook execution (set during startAgentRepl)
  */
 let _hookDb = null;
-let _compressor = null;
 let _approvalGate = null;
 // Static + CLI-owned scoped permission rules (deny > ask > allow) and an
 // interactive confirmer for `ask` matches. Scoped rules are refreshed at each
@@ -3044,6 +3044,13 @@ async function startAgentReplInWorkspaceOwned(
   startupAdmission,
   outputScope,
 ) {
+  // The compressor captures this session's ingress and metering callbacks.
+  // A later REPL instance must not replace another session's authority.
+  let _compressor = null;
+  const evolutionIngress =
+    options.evolutionIngress == null
+      ? null
+      : captureAgentEvolutionIngress(options.evolutionIngress);
   // EPIPE guard: if the REPL's stdout is piped and the consumer closes (e.g.
   // `cc agent | head`), the async stream `error` would otherwise crash the
   // process. Route a broken pipe into the REPL's own graceful shutdown (the
@@ -3052,6 +3059,10 @@ async function startAgentReplInWorkspaceOwned(
   // a cleanup write that also EPIPEs can't loop. An early EPIPE remains pending
   // until the close handler is attached; it never skips directly to exit.
   let _replRl = null;
+  const _evolutionSession =
+    evolutionIngress === null
+      ? null
+      : createAgentEvolutionSessionLifecycle(evolutionIngress);
   let _replClosing = false;
   let _replCloseReady = false;
   let _replCleanupStarted = false;
@@ -3165,6 +3176,8 @@ async function startAgentReplInWorkspaceOwned(
   // above every direct-model surface (Advisor, /btw, /auto, /plan, /goal), and
   // clear steering immediately so queued work cannot start another paid call.
   let _processingLine = false;
+  let _lineSettled = null;
+  const _activeBtwCalls = new Set();
   const _pendingLines = [];
   const _runtimeLedgerTerminalLatch = createReplRuntimeLedgerTerminalLatch({
     onTrip: (terminalError) => {
@@ -3223,7 +3236,7 @@ async function startAgentReplInWorkspaceOwned(
       callModel,
       source: "model",
     });
-  const _runReplDirectTool = async (tool, args) => {
+  const _runReplDirectTool = async (tool, args, { signal = null } = {}) => {
     _runtimeLedgerTerminalLatch.assertOpen();
     try {
       const durableSessionId = resolveReplMeteredSessionId(useJsonl, sessionId);
@@ -3235,7 +3248,7 @@ async function startAgentReplInWorkspaceOwned(
           executeTool(name, toolArgs, {
             sessionId: durableSessionId,
             sessionBudget: _sessionBudget,
-            signal: options.signal || null,
+            signal: combineReplSignals(signal, options.signal),
           }),
         now: options.now || Date.now,
         terminalLatch: _runtimeLedgerTerminalLatch,
@@ -3396,7 +3409,11 @@ async function startAgentReplInWorkspaceOwned(
   let _compactionUsageBlock = null;
 
   try {
-    const ctx = await bootstrap({ verbose: false });
+    const ctx = await bootstrap({
+      verbose: false,
+      ...(options.skipDb === true ? { skipDb: true } : {}),
+      ...(options.dbPath == null ? {} : { dbPath: options.dbPath }),
+    });
     db = ctx.db || null;
   } catch (_err) {
     // Continue without DB — static prompt fallback
@@ -3427,6 +3444,7 @@ async function startAgentReplInWorkspaceOwned(
           includeLedgerMetadata: true,
           call: ({ signal }) =>
             chatWithTools([{ role: "user", content: prompt }], {
+              ...(evolutionIngress === null ? {} : { evolutionIngress }),
               provider,
               model,
               baseUrl,
@@ -4826,7 +4844,7 @@ async function startAgentReplInWorkspaceOwned(
   // transcript snapshot and ZERO tools. Compact call/outcome metadata shares
   // the session hash chain, while advice text itself is never persisted.
   try {
-    const { createConfiguredAdvisorRuntime, invokeToolFreeAdvisor } =
+    const { createConfiguredAdvisorRuntime } =
       await import("../lib/advisor-runtime.js");
     const advisorOverrides = {};
     if (options.advisorEnabled !== undefined) {
@@ -4841,17 +4859,8 @@ async function startAgentReplInWorkspaceOwned(
       baseUrl,
       apiKey,
       overrides: advisorOverrides,
-      invoke: (request) =>
-        _runReplMeteredModelCall({
-          callProvider: request?.provider,
-          callModel: request?.model,
-          source: "model",
-          call: ({ signal }) =>
-            invokeToolFreeAdvisor({
-              ...request,
-              signal: combineReplSignals(request?.signal, signal),
-            }),
-        }),
+      ...(evolutionIngress === null ? {} : { evolutionIngress }),
+      callWrapper: _directChatCallWrapper,
       onEvent: (event) => {
         if (!useJsonl || !sessionId) return;
         try {
@@ -5639,6 +5648,7 @@ async function startAgentReplInWorkspaceOwned(
     }
     try {
       const chatFn = createChatFn({
+        ...(evolutionIngress === null ? {} : { evolutionIngress }),
         provider,
         model,
         baseUrl,
@@ -8012,7 +8022,7 @@ async function startAgentReplInWorkspaceOwned(
           `  ${chalk.cyan("/cowork graph <path>")}       Code knowledge graph (ASCII)`,
         );
         logger.log(
-          `  ${chalk.cyan("/cowork decision <topic>")}   Architecture decision tracking`,
+          `  ${chalk.cyan("/cowork decision <path>")}    Extract architecture decisions`,
         );
         logger.log("");
       } else if (subCmd === "debate" && coworkInput) {
@@ -8034,6 +8044,7 @@ async function startAgentReplInWorkspaceOwned(
             target: targetLabel,
             code,
             llmOptions: {
+              ...(evolutionIngress === null ? {} : { evolutionIngress }),
               provider,
               model,
               baseUrl,
@@ -8073,6 +8084,7 @@ async function startAgentReplInWorkspaceOwned(
           const result = await compare({
             prompt: coworkInput,
             llmOptions: {
+              ...(evolutionIngress === null ? {} : { evolutionIngress }),
               provider,
               model,
               baseUrl,
@@ -8099,12 +8111,11 @@ async function startAgentReplInWorkspaceOwned(
         }
       } else if (subCmd === "graph" && coworkInput) {
         try {
-          const { analyzeCodeKnowledgeGraph } =
+          const { buildKnowledgeGraph } =
             await import("../lib/cowork/code-knowledge-graph-cli.js");
           process.stdout.write(chalk.gray("\n  Analyzing code graph...\n"));
-          const result = await analyzeCodeKnowledgeGraph({
-            target: coworkInput,
-            llmOptions: { provider, model, baseUrl, apiKey },
+          const result = await buildKnowledgeGraph({
+            targetPath: path.resolve(coworkInput),
           });
           // ASCII dependency graph
           if (result.entities && result.entities.length > 0) {
@@ -8119,7 +8130,7 @@ async function startAgentReplInWorkspaceOwned(
               process.stdout.write(chalk.bold("\n  Relationships:\n"));
               for (const rel of result.relationships.slice(0, 10)) {
                 process.stdout.write(
-                  `  ${rel.source} ${chalk.gray(`—${rel.type}→`)} ${rel.target}\n`,
+                  `  ${rel.from} ${chalk.gray(`—${rel.type}→`)} ${rel.to}\n`,
                 );
               }
             }
@@ -8138,12 +8149,19 @@ async function startAgentReplInWorkspaceOwned(
         }
       } else if (subCmd === "decision" && coworkInput) {
         try {
-          const { analyzeDecisions } =
+          const { extractDecisions } =
             await import("../lib/cowork/decision-kb-cli.js");
           process.stdout.write(chalk.gray("\n  Analyzing decisions...\n"));
-          const result = await analyzeDecisions({
-            target: coworkInput,
-            llmOptions: { provider, model, baseUrl, apiKey },
+          const result = await extractDecisions({
+            targetPath: path.resolve(coworkInput),
+            llmOptions: {
+              ...(evolutionIngress === null ? {} : { evolutionIngress }),
+              provider,
+              model,
+              baseUrl,
+              apiKey,
+              callWrapper: _directChatCallWrapper,
+            },
           });
           if (result.decisions && result.decisions.length > 0) {
             process.stdout.write(chalk.bold("  Architecture Decisions:\n"));
@@ -8178,7 +8196,7 @@ async function startAgentReplInWorkspaceOwned(
         }
       } else {
         logger.info(
-          "Usage: /cowork debate <file> | compare <prompt> | graph <path> | decision <topic>",
+          "Usage: /cowork debate <file> | compare <prompt> | graph <path> | decision <path>",
         );
       }
 
@@ -8281,6 +8299,7 @@ async function startAgentReplInWorkspaceOwned(
         // Lazy-init autonomous agent with LLM chat function
         if (!autonomousAgent._initialized) {
           const chatFn = createChatFn({
+            ...(evolutionIngress === null ? {} : { evolutionIngress }),
             provider,
             model,
             baseUrl,
@@ -8289,7 +8308,10 @@ async function startAgentReplInWorkspaceOwned(
           });
           autonomousAgent.initialize({
             llmChat: chatFn,
-            toolExecutor: _runReplDirectTool,
+            toolExecutor: (tool, args) =>
+              _runReplDirectTool(tool, args, {
+                signal: autonomousAgent.signal,
+              }),
           });
         }
 
@@ -8401,6 +8423,16 @@ async function startAgentReplInWorkspaceOwned(
                 logger.warn(result.error);
               }
             } catch (error) {
+              if (
+                error?.runtimeLedgerPersistence === true ||
+                error?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED"
+              ) {
+                logger.error(
+                  "Plan approval stopped because Advisor admission or settlement failed.",
+                );
+                prompt();
+                return;
+              }
               logger.warn(`Advisor plan review skipped: ${error.message}`);
             }
           }
@@ -8492,6 +8524,7 @@ async function startAgentReplInWorkspaceOwned(
           const { TerminalInteractionAdapter } =
             await import("../lib/interaction-adapter.js");
           const chatFn = createChatFn({
+            ...(evolutionIngress === null ? {} : { evolutionIngress }),
             provider,
             model,
             baseUrl,
@@ -9641,6 +9674,7 @@ async function startAgentReplInWorkspaceOwned(
         contextEngine,
         iterationBudget,
         sessionId,
+        ...(evolutionIngress === null ? {} : { evolutionIngress }),
         persistUsageTelemetry: useJsonl,
         skillLoader: _replSkillLoader,
         skillOutcomeIndex: options.skillOutcomeIndex,
@@ -9748,6 +9782,7 @@ async function startAgentReplInWorkspaceOwned(
               source: "model",
               call: ({ signal }) =>
                 chatWithTools([{ role: "user", content: p }], {
+                  ...(evolutionIngress === null ? {} : { evolutionIngress }),
                   model: activeModel,
                   provider,
                   baseUrl,
@@ -9789,6 +9824,7 @@ async function startAgentReplInWorkspaceOwned(
             logger.log(chalk.cyan(l));
           if (done) _sessionGoal = null; // completed or exhausted → drop
         } catch (err) {
+          if (err?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED") throw err;
           const terminalError = _runtimeLedgerTerminalLatch.trip(err);
           if (terminalError) _reportRuntimeLedgerTerminal();
           else logger.verbose(`/goal eval skipped: ${err.message}`);
@@ -9973,6 +10009,7 @@ async function startAgentReplInWorkspaceOwned(
             throw error;
           }
           if (error?.runtimeLedgerPersistence === true) throw error;
+          if (error?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED") throw error;
           logger.warn(`Auto-compaction failed: ${error.message}`);
         }
       }
@@ -10060,6 +10097,7 @@ async function startAgentReplInWorkspaceOwned(
 
   rl.on("line", async (input) => {
     if (!(await _waitForReplOutput())) return;
+    if (_replClosing) return;
     if (_runtimeLedgerTerminalLatch.isTripped()) {
       const terminalInput = input.trim();
       if (terminalInput === "/exit" || terminalInput === "/quit") {
@@ -10077,7 +10115,14 @@ async function startAgentReplInWorkspaceOwned(
       if (concurrentBtw) {
         // Intentionally do not await: the main turn keeps streaming while this
         // independent, tool-free snapshot call runs alongside it.
-        void runBtwSideQuestion(concurrentBtw, { concurrent: true });
+        const sideCall = runBtwSideQuestion(concurrentBtw, {
+          concurrent: true,
+        });
+        _activeBtwCalls.add(sideCall);
+        void sideCall.then(
+          () => _activeBtwCalls.delete(sideCall),
+          () => _activeBtwCalls.delete(sideCall),
+        );
         return;
       }
       if (input.trim()) {
@@ -10091,10 +10136,18 @@ async function startAgentReplInWorkspaceOwned(
       return;
     }
     _processingLine = true;
+    let settleLine;
+    _lineSettled = new Promise((resolve) => {
+      settleLine = resolve;
+    });
     try {
       await handleLine(input);
       if (!(await _waitForReplOutput())) return;
-      while (_pendingLines.length && !_runtimeLedgerTerminalLatch.isTripped()) {
+      while (
+        _pendingLines.length &&
+        !_replClosing &&
+        !_runtimeLedgerTerminalLatch.isTripped()
+      ) {
         const next = _pendingLines.shift();
         logger.log(chalk.cyan(`▶ running queued input: ${next}`));
         await handleLine(next);
@@ -10102,6 +10155,8 @@ async function startAgentReplInWorkspaceOwned(
       }
     } finally {
       _processingLine = false;
+      settleLine();
+      _lineSettled = null;
     }
   });
 
@@ -10109,7 +10164,37 @@ async function startAgentReplInWorkspaceOwned(
     if (_replCleanupStarted) return;
     _replCleanupStarted = true;
     _replClosing = true;
+    _pendingLines.length = 0;
+    // Do not certify a Run while its model/tool or auxiliary usage settlement
+    // is still in flight. EOF during a main turn cancels and leaves it incomplete.
+    if (_turnAbort !== null) {
+      const error = Object.assign(
+        new Error("REPL closed during an active turn"),
+        {
+          code: "CC_AGENT_EVOLUTION_SESSION_INTERRUPTED",
+        },
+      );
+      if (_evolutionSession !== null) _replOutputFailure ||= error;
+      _turnAbort.abort(error);
+    }
     _promptInteractions.dispose();
+    // Autonomous goals outlive the input line that submitted them. Cancel
+    // their next-step execution and wait for any current call to settle too.
+    const autonomousShutdown = autonomousAgent.shutdown();
+    void autonomousShutdown.catch(() => {});
+    await _lineSettled;
+    await Promise.allSettled([..._activeBtwCalls]);
+    try {
+      const { interrupted } = await autonomousShutdown;
+      if (interrupted > 0 && _evolutionSession !== null) {
+        _replOutputFailure ||= Object.assign(
+          new Error("REPL closed during an autonomous goal"),
+          { code: "CC_AGENT_EVOLUTION_SESSION_INTERRUPTED" },
+        );
+      }
+    } catch (error) {
+      _replOutputFailure ||= error;
+    }
     if (process.stdin.isTTY) {
       if (_replKeypressHandler) {
         process.stdin.removeListener("keypress", _replKeypressHandler);
@@ -10194,10 +10279,14 @@ async function startAgentReplInWorkspaceOwned(
       }
     }
     // Fire SessionEnd hook before shutdown (fire-and-forget)
-    await fireSessionHook(_hookDb, HookEvents.SessionEnd, {
-      sessionId,
-      messageCount: messages.length,
-    });
+    try {
+      await fireSessionHook(_hookDb, HookEvents.SessionEnd, {
+        sessionId,
+        messageCount: messages.length,
+      });
+    } catch (error) {
+      _replOutputFailure ||= error;
+    }
 
     // Phase H — park the SessionManager handle on clean exit so the session
     // can be resumed later via `cc session unpark <id>`. `--no-park-on-exit`
@@ -10323,6 +10412,15 @@ async function startAgentReplInWorkspaceOwned(
         _replOutputFailure ||= error;
       }
     }
+    if (_evolutionSession !== null) {
+      try {
+        await _evolutionSession.close(
+          _replOutputFailure || _runtimeLedgerTerminalLatch.error() || null,
+        );
+      } catch (error) {
+        _replOutputFailure ||= error;
+      }
+    }
     const outputExitCode = _replOutputFailure
       ? _replOutputFailure.code === "EPIPE"
         ? 0
@@ -10343,4 +10441,5 @@ async function startAgentReplInWorkspaceOwned(
       }
     });
   }
+  return _evolutionSession?.handle;
 }