forgebadger 0.2.0-beta.1 → 0.2.0

package/dist/gateway/src/services/agent/run-ending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-ending.js","sourceRoot":"","sources":["../../../../src/services/agent/run-ending.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAE9F,MAAM,aAAa,GAA2B;IAC5C,qBAAqB,EAAE,QAAQ;IAC/B,mBAAmB,EAAE,UAAU;CAChC,CAAC;AAEF,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,EAAY,EAAE,MAAc,EAAE,KAAa,EAAE,UAAyB;IACpG,IAAI,CAAC,UAAU,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;IACtD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC;SAC/G,GAAG,CAAC,MAAM,EAAE,KAAK,CAAwC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC5F,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAuC,CAAC;IAChJ,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,IAAI,IAAI,CAA4B,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACzH,CAAC;IAAC,MAAM,CAAC,CAAC,oEAAoE,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC;IAC7C,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,SAAS,GAAG,CAAC,CAAC;IAChD,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC"}

package/dist/gateway/src/services/agent/run-trace.js

@@ -8,6 +8,9 @@ const DETAIL_KEYS = new Set([
     'status', 'toolName', 'decision', 'reason', 'attempt', 'tokens', 'durationMs',
     'executionMode', 'phase', 'kind', 'childRunId',
     'source', 'parentRunId',
+    // machine_search evidence: which local root was queried, how, and how many
+    // matches it surfaced (scalar-only, never file content).
+    'root', 'query', 'matchCount', 'mode',
 ]);
 function isScalar(value) {
     return value === null || ['string', 'number', 'boolean'].includes(typeof value);

package/dist/gateway/src/services/agent/run-trace.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-trace.js","sourceRoot":"","sources":["../../../../src/services/agent/run-trace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB;IACvD,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB;IACrE,mBAAmB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY;CAC1D,CAAC;AAKX,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY;IAC7E,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY;IAC9C,QAAQ,EAAE,aAAa;CACxB,CAAC,CAAC;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC;AAClF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAY,EAAE,MAAc,EAAE,KAAa,EAAE,KAAa,EACtF,KAAoB,EAAE,MAAuB,EAAE,MAAe;IAC9D,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,GAAG,GAAI,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,CAAC,KAAK,CAAqB,CAAC,GAAG,CAAC;QACzI,EAAE,CAAC,OAAO,CAAC,2HAA2H,CAAC;aACpI,GAAG,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,KAAK,EACjE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;AAChD,CAAC;AAID,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,EAAY,EAAE,MAAc,EAAE,KAAa;IACtE,OAAO,EAAE,CAAC,OAAO,CAAC,sFAAsF,CAAC;SACtG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAoB,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"run-trace.js","sourceRoot":"","sources":["../../../../src/services/agent/run-trace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB;IACvD,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB;IACrE,mBAAmB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY;CAC1D,CAAC;AAKX,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY;IAC7E,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY;IAC9C,QAAQ,EAAE,aAAa;IACvB,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM;CACtC,CAAC,CAAC;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC;AAClF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAY,EAAE,MAAc,EAAE,KAAa,EAAE,KAAa,EACtF,KAAoB,EAAE,MAAuB,EAAE,MAAe;IAC9D,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,GAAG,GAAI,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,CAAC,KAAK,CAAqB,CAAC,GAAG,CAAC;QACzI,EAAE,CAAC,OAAO,CAAC,2HAA2H,CAAC;aACpI,GAAG,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,KAAK,EACjE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;AAChD,CAAC;AAID,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,EAAY,EAAE,MAAc,EAAE,KAAa;IACtE,OAAO,EAAE,CAAC,OAAO,CAAC,sFAAsF,CAAC;SACtG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAoB,CAAC;AAC3C,CAAC"}

package/dist/gateway/src/services/agent/skills/copilot-skill-baselines.js

@@ -42,6 +42,10 @@ const baselines = [
     { "name": "session-dispatch", "version": "4.1.0", "digest": "c390210c9004a5f471b45d867bd9f08feaab4bf21cf14fc90293e5b7b72cbbd6", "commit": "bundled-2026-10-10" },
     { "name": "project-insights", "version": "2.1.0", "digest": "489f808e0956817d6472c2c1f34d336c5be5350c7f1f00a3aeeb5973866325b3", "commit": "bundled-2026-10-10" },
     { "name": "safety-and-approvals", "version": "3.1.0", "digest": "3fcf1d426818475fc8adb3ef5fa0f2db62435da3ab8f129e0c5b9fb4139013c0", "commit": "bundled-2026-10-10" },
+    // 2026-11-11: session-lifecycle added so "create/start/stop a session" tasks
+    // have a loadable playbook; it names create_session first and keeps the
+    // server-bound stop discipline of session-dispatch.
+    { "name": "session-lifecycle", "version": "1.0.0", "digest": "f11be305f81d96d303d24deb4bdf2fa957fb02924d7fe977df85cc42218b67b9", "commit": "bundled-2026-11-11" },
 ];
 export function isUnmodifiedBuiltin(snapshot) {
     if (snapshot.files.length !== 1 || snapshot.incompatibilityReasons.length)

package/dist/gateway/src/services/agent/skills/copilot-skill-baselines.js.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-skill-baselines.js","sourceRoot":"","sources":["../../../../../src/services/agent/skills/copilot-skill-baselines.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,uFAAuF;AACvF,oFAAoF;AACpF,MAAM,SAAS,GAAG;IAChB,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,iBAAiB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC5I,EAAC,MAAM,EAAC,gBAAgB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC3I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,iBAAiB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC5I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAChK,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,iBAAiB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACtJ,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAC3J,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrE,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAChK,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAC3J,wEAAwE;IACxE,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,wDAAwD;IACxD,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAChK,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;CACnJ,CAAC;AAEX,MAAM,UAAU,mBAAmB,CAAC,QAA8B;IAChE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,sBAAsB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1G,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/G,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,EAAE,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClI,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClI,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC5H,CAAC"}
+{"version":3,"file":"copilot-skill-baselines.js","sourceRoot":"","sources":["../../../../../src/services/agent/skills/copilot-skill-baselines.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,uFAAuF;AACvF,oFAAoF;AACpF,MAAM,SAAS,GAAG;IAChB,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,iBAAiB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC5I,EAAC,MAAM,EAAC,gBAAgB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC3I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,iBAAiB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC5I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACtJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IAC7I,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,UAAU,EAAC;IACjJ,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAChK,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,iBAAiB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACtJ,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAC3J,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrE,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAChK,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAC3J,wEAAwE;IACxE,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,wDAAwD;IACxD,EAAC,MAAM,EAAC,2BAA2B,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAChK,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IACvJ,EAAC,MAAM,EAAC,sBAAsB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;IAC3J,6EAA6E;IAC7E,wEAAwE;IACxE,oDAAoD;IACpD,EAAC,MAAM,EAAC,mBAAmB,EAAC,SAAS,EAAC,OAAO,EAAC,QAAQ,EAAC,kEAAkE,EAAC,QAAQ,EAAC,oBAAoB,EAAC;CAChJ,CAAC;AAEX,MAAM,UAAU,mBAAmB,CAAC,QAA8B;IAChE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,sBAAsB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1G,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/G,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,EAAE,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClI,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClI,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC5H,CAAC"}

package/dist/gateway/src/services/agent/skills/copilot-skills.js

@@ -48,6 +48,24 @@ Use search_memory {query,scope?,projectId?,limit?} and list_memory {scope?,proje
 Scopes are global, project (requires projectId), or session. Kinds include fact, preference, decision and project_note. The server enforces acting-user and conversation scope. Global records do not become accessible merely because project records are accessible.
 
 Project/session memory written from a direct user turn follows the routine scoped risk policy. Global memory changes still require exact approval. Loading this document never authorizes a write. Keep wording precise, distinguish observations from assumptions, and cite current evidence when updating an earlier conclusion.`
+    },
+    {
+        name: 'session-lifecycle', version: '1.0.0',
+        description: 'Create, start, stop and monitor CLI sessions in the selected project without guessing identities.',
+        requiredTools: ['list_sessions', 'create_session', 'start_session', 'stop_session', 'get_session_output', 'dispatch_task_to_session'],
+        body: `# Session lifecycle
+
+1. Resolve before creating. Call list_sessions {projectId, limit?} for the selected project. A usable session is one whose status is running or stopped. Status lost means the CLI exited and the session is not a live target; it may be started again only by an explicit owner request, never as a substitute for a fresh session.
+
+2. Create exactly one new session per request with create_session {projectId, aiTool, name?}. The aiTool is the CLI the user named (claude, codex, kimi, opencode or pi); a plain terminal is aiTool terminal. Do not call create_session more than once for the same request: a second call after an approved first call duplicates the session. The platform parks the create for owner approval; while it is pending, report the pending decision and wait, do not open a terminal or start another session instead.
+
+3. Start only an existing stopped session of the selected project with start_session {sessionId}. Sessions of other projects are authority-rejected; when the selected project has no session yet, create one instead of starting a foreign one. start_session never submits a task.
+
+4. Monitor with get_session_output {sessionId, maxLines:120}. Keep every stop_session target attached to the output it was read from: copy target.observationId and target.taskTitle exactly, never match titles to IDs by list order. A stale or mismatched target requires a fresh read and a new approval.
+
+5. Stop exactly the observed session with stop_session after the owner approves the server-bound target. A terminal/process-group stop does not prove detached or shared background work stopped; report the returned scope and never stop a shared Codex daemon to clear a thread lock.
+
+6. Deliver work to a running session only through dispatch_task_to_session {sessionId, message}, which is confirmed only when the composer consumes the task. COPILOT_DELIVERY_UNCONFIRMED means the task may already have reached the CLI: inspect the terminal, never retry automatically.`
     },
     {
         name: 'usage-analysis', version: '2.0.0',

package/dist/gateway/src/services/agent/skills/copilot-skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-skills.js","sourceRoot":"","sources":["../../../../../src/services/agent/skills/copilot-skills.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,sBAAsB,GAA4B;IAC7D;QACE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO;QACnD,WAAW,EAAE,wGAAwG;QACrH,aAAa,EAAE,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,eAAe,EAAE,oBAAoB,CAAC;QAChL,IAAI,EAAE;;;;;;;;idAQuc;KAC9c;IACD;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO;QAC1C,WAAW,EAAE,0FAA0F;QACvG,aAAa,EAAE,CAAC,0BAA0B,EAAE,oBAAoB,CAAC;QACjE,IAAI,EAAE;;;;;;2PAMiP;KACxP;IACD;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO;QAC1C,WAAW,EAAE,+FAA+F;QAC5G,aAAa,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,gBAAgB,CAAC;QACjE,IAAI,EAAE;;;;;;qOAM2N;KAClO;IACD;QACE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO;QACzC,WAAW,EAAE,uEAAuE;QACpF,aAAa,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,cAAc,CAAC;QAC/D,IAAI,EAAE;;;;;;mUAMyT;KAChU;IACD;QACE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO;QACxC,WAAW,EAAE,qFAAqF;QAClG,aAAa,EAAE,CAAC,mBAAmB,CAAC;QACpC,IAAI,EAAE;;;;;;wQAM8P;KACrQ;IACD;QACE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO;QAC9C,WAAW,EAAE,uEAAuE;QACpF,aAAa,EAAE,EAAE;QACjB,IAAI,EAAE;;;;;;;;uMAQ6L;KACpM;CACF,CAAC;AACF,MAAM,UAAU,yBAAyB;IACvC,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,EAAC,WAAW,EAAC,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,IAAI,KAAG,IAAI,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"copilot-skills.js","sourceRoot":"","sources":["../../../../../src/services/agent/skills/copilot-skills.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,sBAAsB,GAA4B;IAC7D;QACE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO;QACnD,WAAW,EAAE,wGAAwG;QACrH,aAAa,EAAE,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,eAAe,EAAE,oBAAoB,CAAC;QAChL,IAAI,EAAE;;;;;;;;idAQuc;KAC9c;IACD;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO;QAC1C,WAAW,EAAE,0FAA0F;QACvG,aAAa,EAAE,CAAC,0BAA0B,EAAE,oBAAoB,CAAC;QACjE,IAAI,EAAE;;;;;;2PAMiP;KACxP;IACD;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO;QAC1C,WAAW,EAAE,+FAA+F;QAC5G,aAAa,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,gBAAgB,CAAC;QACjE,IAAI,EAAE;;;;;;qOAM2N;KAClO;IACD;QACE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO;QACzC,WAAW,EAAE,uEAAuE;QACpF,aAAa,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,cAAc,CAAC;QAC/D,IAAI,EAAE;;;;;;mUAMyT;KAChU;IACD;QACE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO;QAC3C,WAAW,EAAE,mGAAmG;QAChH,aAAa,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,0BAA0B,CAAC;QACrI,IAAI,EAAE;;;;;;;;;;;;6RAYmR;KAC1R;IACD;QACE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO;QACxC,WAAW,EAAE,qFAAqF;QAClG,aAAa,EAAE,CAAC,mBAAmB,CAAC;QACpC,IAAI,EAAE;;;;;;wQAM8P;KACrQ;IACD;QACE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO;QAC9C,WAAW,EAAE,uEAAuE;QACpF,aAAa,EAAE,EAAE;QACjB,IAAI,EAAE;;;;;;;;uMAQ6L;KACpM;CACF,CAAC;AACF,MAAM,UAAU,yBAAyB;IACvC,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,EAAC,WAAW,EAAC,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,WAAW,EAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,IAAI,KAAG,IAAI,CAAC,CAAC;AAC/D,CAAC"}

package/dist/gateway/src/services/agent/tool-artifact-policy.js

@@ -1,7 +1,7 @@
 /** Explicit built-in read snapshots only. Never extend this to terminal history or external tools. */
 export const ARCHIVABLE_TOOLS = new Set(['get_project',
-    'list_project_files', 'read_project_file', 'search_project_files', 'read_project_diff']);
-export const FILE_ARTIFACT_TOOLS = new Set(['list_project_files', 'read_project_file', 'search_project_files', 'read_project_diff']);
+    'list_project_files', 'read_project_file', 'search_project_files', 'machine_search', 'read_machine_file', 'read_project_diff']);
+export const FILE_ARTIFACT_TOOLS = new Set(['list_project_files', 'read_project_file', 'search_project_files', 'machine_search', 'read_machine_file', 'read_project_diff']);
 export const MAX_ARTIFACT_BYTES = 2 * 1024 * 1024;
 export const MAX_RUN_ARTIFACT_BYTES = 16 * 1024 * 1024;
 export const MAX_USER_ARTIFACT_BYTES = 64 * 1024 * 1024;

package/dist/gateway/src/services/agent/tool-artifact-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-artifact-policy.js","sourceRoot":"","sources":["../../../../src/services/agent/tool-artifact-policy.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa;IACpD,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AACrI,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC"}
+{"version":3,"file":"tool-artifact-policy.js","sourceRoot":"","sources":["../../../../src/services/agent/tool-artifact-policy.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa;IACpD,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAClI,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC5K,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/gateway/src/services/agent/tool-surface.d.ts

@@ -4,13 +4,23 @@ import type { TurnInput } from './run-ledger.js';
 /**
  * Plane A of the tool surface: one named, ordered layer computation that both
  * the model-visible catalog and the execution-time gate project from. Layers
- * run retired → scheduled-readonly → restricted-mode →
- * session-runtime → mcp-source → owner-disabled; each exclusion records its
- * layer so rejection provenance (e.g. the run-trace tool_gate reason) names
- * the plane that closed the tool. The execution gate in orchestrator.toolStep
- * preserves its historical check ORDER — ordering is behavior there.
+ * run retired → scheduled-readonly → restricted-mode → session-runtime →
+ * mcp-source → owner-disabled → goal-catalog → on-demand; each exclusion
+ * records its layer so rejection provenance (e.g. the run-trace tool_gate
+ * reason) names the plane that closed the tool. The execution gate in
+ * orchestrator.toolStep preserves its historical check ORDER — ordering is
+ * behavior there.
  */
 export declare const RETIRED_TOOLS: Set<string>;
+/**
+ * On-demand tools: surfaced only to runs that opt into tool discovery.
+ * In a normal run the model-visible catalog is already complete, and a
+ * permanent "search for tools" affordance was pulling runs into search loops
+ * that the step budget then ended. (2026-11-11 remediation WP4.)
+ */
+export declare const ON_DEMAND_TOOLS: Set<string>;
+/** Local paths and contents stay out of channel-originated model context. */
+export declare const LOCAL_MACHINE_ROOT_TOOLS: Set<string>;
 export declare const SESSION_RUNTIME_TOOLS: Set<string>;
 /** Goal self-management and sandbox tools are only visible to runs carrying a goal (or a coding sub-run). */
 export declare const GOAL_TOOLS: Set<string>;
@@ -30,7 +40,7 @@ export declare const CODING_READS: ReadonlySet<string>;
  */
 export declare const CODING_OPERATES: ReadonlySet<string>;
 /** Layer names in evaluation order. */
-export declare const TOOL_SURFACE_LAYERS: readonly ["retired", "scheduled-readonly", "restricted-mode", "session-runtime", "mcp-source", "owner-disabled", "goal-catalog"];
+export declare const TOOL_SURFACE_LAYERS: readonly ["retired", "scheduled-readonly", "restricted-mode", "session-runtime", "mcp-source", "owner-disabled", "goal-catalog", "on-demand"];
 export type ToolSurfaceLayer = (typeof TOOL_SURFACE_LAYERS)[number];
 export interface ToolSurfaceInput {
     source?: TurnInput['source'];

package/dist/gateway/src/services/agent/tool-surface.js

@@ -1,19 +1,30 @@
 /**
  * Plane A of the tool surface: one named, ordered layer computation that both
  * the model-visible catalog and the execution-time gate project from. Layers
- * run retired → scheduled-readonly → restricted-mode →
- * session-runtime → mcp-source → owner-disabled; each exclusion records its
- * layer so rejection provenance (e.g. the run-trace tool_gate reason) names
- * the plane that closed the tool. The execution gate in orchestrator.toolStep
- * preserves its historical check ORDER — ordering is behavior there.
+ * run retired → scheduled-readonly → restricted-mode → session-runtime →
+ * mcp-source → owner-disabled → goal-catalog → on-demand; each exclusion
+ * records its layer so rejection provenance (e.g. the run-trace tool_gate
+ * reason) names the plane that closed the tool. The execution gate in
+ * orchestrator.toolStep preserves its historical check ORDER — ordering is
+ * behavior there.
  */
 export const RETIRED_TOOLS = new Set(['pm_start_task_packet', 'list_skills', 'load_skill']);
-export const SESSION_RUNTIME_TOOLS = new Set(['takeover_session', 'get_session_writer', 'get_session_output', 'start_session', 'stop_session', 'dispatch_task_to_session', 'pm_execute_task_packet', 'terminal_run', 'terminal_open', 'terminal_close']);
+/**
+ * On-demand tools: surfaced only to runs that opt into tool discovery.
+ * In a normal run the model-visible catalog is already complete, and a
+ * permanent "search for tools" affordance was pulling runs into search loops
+ * that the step budget then ended. (2026-11-11 remediation WP4.)
+ */
+export const ON_DEMAND_TOOLS = new Set(['discover_tools']);
+/** Local paths and contents stay out of channel-originated model context. */
+export const LOCAL_MACHINE_ROOT_TOOLS = new Set(['machine_search', 'read_machine_file', 'machine_tree',
+    'list_machine_roots', 'register_machine_root', 'unregister_machine_root', 'verify_retrieval_evidence']);
+export const SESSION_RUNTIME_TOOLS = new Set(['takeover_session', 'get_session_writer', 'get_session_output', 'start_session', 'stop_session', 'dispatch_task_to_session', 'create_session', 'pm_execute_task_packet', 'terminal_run', 'terminal_open', 'terminal_close']);
 /** Goal self-management and sandbox tools are only visible to runs carrying a goal (or a coding sub-run). */
 export const GOAL_TOOLS = new Set(['goal_add_tasks', 'goal_update_task', 'goal_write_journal', 'goal_ask_user',
     'goal_file_read', 'goal_file_write', 'goal_file_edit', 'goal_run_checks', 'goal_delegate', 'goal_dispatch_task']);
 /** Read-only project task catalog (research/review) plus the repair submission exception. */
-export const PROJECT_READS = new Set(['get_project_git_status', 'read_project_diff', 'read_tool_result', 'get_project', 'list_project_files', 'read_project_file', 'search_project_files',
+export const PROJECT_READS = new Set(['get_project_git_status', 'read_project_diff', 'read_tool_result', 'get_project', 'list_project_files', 'read_project_file', 'search_project_files', 'machine_search', 'read_machine_file', 'machine_tree', 'list_machine_roots', 'verify_retrieval_evidence', 'route_query',
     'project_graph_search', 'project_graph_symbol_detail', 'project_graph_impact', 'project_graph_affected_paths',
     'get_development_task', 'list_development_tasks', 'pm_get_task_progress']);
 /**
@@ -31,7 +42,7 @@ export const CODING_READS = new Set([...PROJECT_READS,
  */
 export const CODING_OPERATES = new Set(['goal_run_checks']);
 /** Layer names in evaluation order. */
-export const TOOL_SURFACE_LAYERS = ['retired', 'scheduled-readonly', 'restricted-mode', 'session-runtime', 'mcp-source', 'owner-disabled', 'goal-catalog'];
+export const TOOL_SURFACE_LAYERS = ['retired', 'scheduled-readonly', 'restricted-mode', 'session-runtime', 'mcp-source', 'owner-disabled', 'goal-catalog', 'on-demand'];
 /**
  * Project board planning tools (~2.4k schema tokens). Offered to goal runs —
  * where long-lived planning happens — and to discovery-mode runs, which load
@@ -51,6 +62,8 @@ function exclusionReasons(input, context, name, risk) {
         verdicts.push({ layer: 'scheduled-readonly', reason: 'NON_USER_SOURCE_HIDDEN' });
     if (scheduled && risk !== 'read')
         verdicts.push({ layer: 'scheduled-readonly', reason: 'SCHEDULED_READ_ONLY' });
+    if (input.channelScope && LOCAL_MACHINE_ROOT_TOOLS.has(name))
+        verdicts.push({ layer: 'restricted-mode', reason: 'CHANNEL_LOCAL_MACHINE_ROOTS_CLOSED' });
     const codingOperate = input.executionMode === 'coding' && CODING_OPERATES.has(name);
     if (input.executionMode && !repairSubmit && (!(input.executionMode === 'coding' ? CODING_READS : PROJECT_READS).has(name) || (risk !== 'read' && !codingOperate)))
         verdicts.push({ layer: 'restricted-mode', reason: 'RESTRICTED_MODE' });
@@ -64,6 +77,8 @@ function exclusionReasons(input, context, name, risk) {
         verdicts.push({ layer: 'goal-catalog', reason: 'GOAL_CATALOG' });
     if (BOARD_PLANNING_TOOLS.has(name) && !input.goalId && input.toolDiscovery !== true)
         verdicts.push({ layer: 'goal-catalog', reason: 'GOAL_CATALOG' });
+    if (ON_DEMAND_TOOLS.has(name) && input.toolDiscovery !== true)
+        verdicts.push({ layer: 'on-demand', reason: 'ON_DEMAND_TOOL' });
     return verdicts;
 }
 export function computeToolSurface(input, context) {

package/dist/gateway/src/services/agent/tool-surface.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-surface.js","sourceRoot":"","sources":["../../../../src/services/agent/tool-surface.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5F,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACzP,6GAA6G;AAC7G,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe;IAC5G,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACpH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB;IACvL,sBAAsB,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,8BAA8B;IAC7G,sBAAsB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa;IACxE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC,CAAC;AACxI;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACjF,uCAAuC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAU,CAAC;AAKpK;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,aAAa;IAC9G,qBAAqB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAkB3F,MAAM,qBAAqB,GAAG,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;AAEpI,SAAS,gBAAgB,CAAC,KAAuB,EAAE,OAA2B,EAAE,IAAY,EAAE,IAAwB;IACpH,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,KAAK,yBAAyB,CAAC;IAC5F,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;IAC/C,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;IACzD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACzF,IAAI,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACnK,IAAI,SAAS,IAAI,IAAI,KAAK,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAChH,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1O,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACtJ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC/I,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzG,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAChJ,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACtJ,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAuB,EAAE,OAA2B;IACrF,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC1C,MAAM,UAAU,GAAyD,EAAE,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAC9D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC;gBACtI,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,KAAK;QACtG,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;YAC1H,OAAO,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tool-surface.js","sourceRoot":"","sources":["../../../../src/services/agent/tool-surface.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAC3D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,cAAc;IACpG,oBAAoB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC3Q,6GAA6G;AAC7G,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe;IAC5G,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACpH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,aAAa;IAChT,sBAAsB,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,8BAA8B;IAC7G,sBAAsB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa;IACxE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC,CAAC;AACxI;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACjF,uCAAuC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,CAAU,CAAC;AAKjL;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,aAAa;IAC9G,qBAAqB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAkB3F,MAAM,qBAAqB,GAAG,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;AAEpI,SAAS,gBAAgB,CAAC,KAAuB,EAAE,OAA2B,EAAE,IAAY,EAAE,IAAwB;IACpH,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,KAAK,yBAAyB,CAAC;IAC5F,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;IAC/C,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;IACzD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACzF,IAAI,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACnK,IAAI,SAAS,IAAI,IAAI,KAAK,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAChH,IAAI,KAAK,CAAC,YAAY,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1O,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACtJ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC/I,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzG,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAChJ,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACtJ,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/H,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAuB,EAAE,OAA2B;IACrF,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC1C,MAAM,UAAU,GAAyD,EAAE,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAC9D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC;gBACtI,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,KAAK;QACtG,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;YAC1H,OAAO,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/deep-research.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from '../tool-registry.js';
+export declare function createDeepResearchTools(): AgentTool[];

package/dist/gateway/src/services/agent/tools/deep-research.js

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+import { readSource } from '../../development/workspace.js';
+import { sourcePathSchema } from '../../development/contracts.js';
+import { redactAgentText } from '../redaction.js';
+import { CopilotMachineRootRepository } from '../../../db/repositories/copilot-machine-root-repository.js';
+import { GROUNDING_LEVELS, verifyEvidence } from '../retrieval-grounding.js';
+import { routeQuery } from '../retrieval-routing.js';
+const id = z.string().min(1).max(128);
+const groundingSchema = z.enum(GROUNDING_LEVELS);
+const evidenceInput = z.object({
+    root: id,
+    /** Slash-relative file path within the root. */
+    path: sourcePathSchema,
+    /** 1-based line number of the cited evidence. */
+    line: z.number().int().min(1).max(65536),
+    /** The cited text; must be present (whitespace-normalized) on that line or the claim is falsified. */
+    snippet: z.string().trim().min(1).max(500),
+    /** The grounding level the agent proposes for this evidence. */
+    proposedGrounding: groundingSchema,
+}).strict();
+const routeInput = z.object({
+    query: z.string().trim().min(1).max(4000),
+}).strict();
+export function createDeepResearchTools() {
+    return [
+        {
+            name: 'verify_retrieval_evidence',
+            description: 'Falsify/ground a cited piece of evidence: re-read the exact path+line from an owner-registered local root and check the cited snippet is really there. '
+                + 'OA-RAG grounding levels: entailed > supported > related > unrelated. A strong label is returned only if the evidence is present on the cited line; otherwise it is downgraded to unrelated. '
+                + 'Use it to back a claim before reporting, so no claim rests on unverified evidence (FALCA-style propose/falsify).',
+            risk: 'read',
+            requiresApproval: false,
+            inputSchema: evidenceInput,
+            async execute(raw, context) {
+                const input = evidenceInput.parse(raw);
+                const rootEntry = new CopilotMachineRootRepository(context.db, context.userId).getById(input.root);
+                if (!rootEntry)
+                    throw new Error('MACHINE_ROOT_NOT_FOUND: register this local path first with register_machine_root');
+                const source = readSource(rootEntry.path, input.path);
+                const lines = source.content.split('\n');
+                const result = verifyEvidence(lines[input.line - 1], input.snippet, input.proposedGrounding, input.line);
+                return { ...result, line: input.line, snippet: redactAgentText(input.snippet), lineText: redactAgentText(lines[input.line - 1] ?? '').slice(0, 500) };
+            },
+        },
+        {
+            name: 'route_query',
+            description: 'Decide whether a document question warrants multi-step research or a direct answer (RouteDRAG-style routing). Returns mode (direct|research) with the signals that drove it. Heuristic, not learned.',
+            risk: 'read',
+            requiresApproval: false,
+            inputSchema: routeInput,
+            async execute(raw) {
+                const input = routeInput.parse(raw);
+                return { ...routeQuery(input.query) };
+            },
+        },
+    ];
+}
+//# sourceMappingURL=deep-research.js.map

package/dist/gateway/src/services/agent/tools/deep-research.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-research.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/deep-research.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAuB,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGrD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAEjD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,EAAE;IACR,gDAAgD;IAChD,IAAI,EAAE,gBAAgB;IACtB,iDAAiD;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACxC,sGAAsG;IACtG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,gEAAgE;IAChE,iBAAiB,EAAE,eAAe;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL;YACE,IAAI,EAAE,2BAA2B;YACjC,WAAW,EAAE,yJAAyJ;kBAClK,8LAA8L;kBAC9L,kHAAkH;YACtH,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,aAAa;YAC1B,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO;gBACxB,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,SAAS,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnG,IAAI,CAAC,SAAS;oBACZ,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;gBACvG,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzG,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACxJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,sMAAsM;YACnN,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,UAAU;YACvB,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpC,OAAO,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/index.js

@@ -2,6 +2,9 @@ import { createNativeLifecycleTools } from '../../mcp/lifecycle-tools.js';
 import { createProjectDiffTools } from './project-diff.js';
 import { createResearchTools } from "./research.js";
 import { createSourceSearchTools } from "./source-search.js";
+import { createMachineSearchTools } from "./machine-search.js";
+import { createMachineRootTools, createMachineRootListTools } from "./machine-roots.js";
+import { createDeepResearchTools } from "./deep-research.js";
 import { createDevelopmentTools } from './development.js';
 import { createDiscoveryTools } from './discovery.js';
 import { createPlatformCoverageTools } from "./platform-coverage.js";
@@ -23,6 +26,10 @@ export function createPlatformTools() {
         ...createProjectDiffTools(),
         ...createResearchTools(),
         ...createSourceSearchTools(),
+        ...createMachineSearchTools(),
+        ...createMachineRootTools(),
+        ...createMachineRootListTools(),
+        ...createDeepResearchTools(),
         ...createDiscoveryTools(),
         ...createDevelopmentTools(),
         ...createPlatformCoverageTools(),

package/dist/gateway/src/services/agent/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AASzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,GAAG,sBAAsB,EAAE;QAC3B,GAAG,mBAAmB,EAAE;QACxB,GAAG,uBAAuB,EAAE;QAC5B,GAAG,oBAAoB,EAAE;QACzB,GAAG,sBAAsB,EAAE;QAC3B,GAAG,2BAA2B,EAAE;QAChC,GAAG,qBAAqB,EAAE;QAC1B,GAAG,6BAA6B,EAAE;QAClC,GAAG,0BAA0B,EAAE;QAC/B,GAAG,gBAAgB,EAAE;QACrB,GAAG,kBAAkB,EAAE;QACvB,GAAG,kBAAkB,EAAE;QACvB,GAAG,mBAAmB,EAAE;QACxB,GAAG,iBAAiB,EAAE;QACtB,GAAG,gBAAgB,EAAE;QACrB,GAAG,yBAAyB,EAAE;QAC9B,GAAG,gBAAgB,EAAE;QACrB,GAAG,eAAe,EAAE;QACpB,GAAG,sBAAsB,EAAE;QAC3B,GAAG,uBAAuB,EAAE;KAC7B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AASzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,GAAG,sBAAsB,EAAE;QAC3B,GAAG,mBAAmB,EAAE;QACxB,GAAG,uBAAuB,EAAE;QAC5B,GAAG,wBAAwB,EAAE;QAC7B,GAAG,sBAAsB,EAAE;QAC3B,GAAG,0BAA0B,EAAE;QAC/B,GAAG,uBAAuB,EAAE;QAC5B,GAAG,oBAAoB,EAAE;QACzB,GAAG,sBAAsB,EAAE;QAC3B,GAAG,2BAA2B,EAAE;QAChC,GAAG,qBAAqB,EAAE;QAC1B,GAAG,6BAA6B,EAAE;QAClC,GAAG,0BAA0B,EAAE;QAC/B,GAAG,gBAAgB,EAAE;QACrB,GAAG,kBAAkB,EAAE;QACvB,GAAG,kBAAkB,EAAE;QACvB,GAAG,mBAAmB,EAAE;QACxB,GAAG,iBAAiB,EAAE;QACtB,GAAG,gBAAgB,EAAE;QACrB,GAAG,yBAAyB,EAAE;QAC9B,GAAG,gBAAgB,EAAE;QACrB,GAAG,eAAe,EAAE;QACpB,GAAG,sBAAsB,EAAE;QAC3B,GAAG,uBAAuB,EAAE;KAC7B,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/machine-roots.d.ts

@@ -0,0 +1,13 @@
+import type { AgentTool } from "../tool-registry.js";
+/**
+ * Read-only listing of the owner's registered local search roots. Pairs with the
+ * operate register/unregister tools: this is how the model discovers which roots
+ * (and their ids) it may pass to machine_search / read_machine_file.
+ */
+export declare function createMachineRootListTools(): AgentTool[];
+/**
+ * Owner-granted local roots for the read-only `machine_search` tool. Registering
+ * or revoking a root is an operate-class action, so both are approval-gated and
+ * audited like every other platform write.
+ */
+export declare function createMachineRootTools(): AgentTool[];

package/dist/gateway/src/services/agent/tools/machine-roots.js

@@ -0,0 +1,63 @@
+import { executeAgentAction } from "../../platform-commands/agent-actions.js";
+import { z } from "zod";
+import { CopilotMachineRootRepository } from "../../../db/repositories/copilot-machine-root-repository.js";
+const registerInput = z.object({
+    label: z.string().trim().min(1).max(200),
+    /** Absolute local directory path (any OS). Validated as a real directory and root-guarded. */
+    path: z.string().trim().min(1).max(1024),
+}).strict();
+const unregisterInput = z.object({ rootId: z.string().min(1).max(128) }).strict();
+/**
+ * Read-only listing of the owner's registered local search roots. Pairs with the
+ * operate register/unregister tools: this is how the model discovers which roots
+ * (and their ids) it may pass to machine_search / read_machine_file.
+ */
+export function createMachineRootListTools() {
+    return [
+        {
+            name: "list_machine_roots",
+            description: "List the local directories this owner has registered as read-only search roots (id, label, path)." +
+                " Use the returned root id as the `root` argument to machine_search and read_machine_file.",
+            risk: "read",
+            requiresApproval: false,
+            inputSchema: z.object({}).strict(),
+            async execute(_input, context) {
+                const roots = new CopilotMachineRootRepository(context.db, context.userId).list()
+                    .map(({ id, label, path }) => ({ id, label, path }));
+                return { roots, count: roots.length };
+            }
+        }
+    ];
+}
+/**
+ * Owner-granted local roots for the read-only `machine_search` tool. Registering
+ * or revoking a root is an operate-class action, so both are approval-gated and
+ * audited like every other platform write.
+ */
+export function createMachineRootTools() {
+    return [
+        {
+            name: "register_machine_root",
+            description: "Register an existing local directory as a read-only search root so machine_search can traverse it. Owner-approved.",
+            risk: "operate",
+            requiresApproval: true,
+            riskClass: "medium",
+            inputSchema: registerInput,
+            async execute(input, context) {
+                return executeAgentAction("register_machine_root", registerInput.parse(input), context);
+            }
+        },
+        {
+            name: "unregister_machine_root",
+            description: "Revoke a previously registered local search root. Owner-approved.",
+            risk: "operate",
+            requiresApproval: true,
+            riskClass: "medium",
+            inputSchema: unregisterInput,
+            async execute(input, context) {
+                return executeAgentAction("unregister_machine_root", unregisterInput.parse(input), context);
+            }
+        }
+    ];
+}
+//# sourceMappingURL=machine-roots.js.map

package/dist/gateway/src/services/agent/tools/machine-roots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-roots.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/machine-roots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAG3G,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,8FAA8F;IAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAElF;;;;GAIG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,mGAAmG;gBAC9G,2FAA2F;YAC7F,IAAI,EAAE,MAAM;YACZ,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YAClC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO;gBAC3B,MAAM,KAAK,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;qBAC9E,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL;YACE,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EAAE,oHAAoH;YACjI,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,aAAa;YAC1B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,kBAAkB,CAAC,uBAAuB,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC1F,CAAC;SACF;QACD;YACE,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EAAE,mEAAmE;YAChF,IAAI,EAAE,SAAS;YACf,gBAAgB,EAAE,IAAI;YACtB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,eAAe;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC1B,OAAO,kBAAkB,CAAC,yBAAyB,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/tools/machine-search-matcher.d.ts

@@ -0,0 +1,24 @@
+export interface SearchMatchInput {
+    files: Array<{
+        path: string;
+        content: string | null;
+    }>;
+    query: string;
+    mode: 'literal' | 'regex';
+    pathGlob?: string | undefined;
+    lineOffset: number;
+    limit: number;
+}
+export interface SearchMatchResult {
+    matches: Array<{
+        path: string;
+        line: number;
+        text: string;
+    }>;
+    scannedFiles: number;
+    resume: {
+        fileOffset: number;
+        lineOffset: number;
+    } | null;
+}
+export declare function matchSearchPage(input: SearchMatchInput, signal?: AbortSignal): Promise<SearchMatchResult>;

package/dist/gateway/src/services/agent/tools/machine-search-matcher.js

@@ -0,0 +1,98 @@
+import { Worker } from 'node:worker_threads';
+const SEARCH_TIMEOUT_MS = 2000;
+const MAX_ACTIVE_SEARCHES = 4;
+let activeSearches = 0;
+// Only this fixed source is executable. User patterns and bounded file snapshots
+// travel as structured data; both query regexes and glob regexes stay off the
+// Gateway event loop. An inline worker also works in tsx and the compiled CLI.
+const MATCHER_SOURCE = String.raw `
+const { parentPort, workerData: input } = require('node:worker_threads');
+function globPattern(glob) {
+  let out = '^';
+  for (let i = 0; i < glob.length; i++) {
+    const c = glob[i];
+    if (c === '*') {
+      if (glob[i + 1] === '*') { out += '.*'; i++; }
+      else out += '[^/]*';
+    } else if (c === '?') out += '[^/]';
+    else if ('\\^$.|+()[]{}'.includes(c)) out += '\\' + c;
+    else out += c;
+  }
+  return new RegExp(out + '$');
+}
+try {
+  const glob = input.pathGlob ? globPattern(input.pathGlob) : null;
+  const query = input.mode === 'regex' ? new RegExp(input.query, 'i') : null;
+  const literal = input.query.toLowerCase();
+  const matches = [];
+  let scannedFiles = 0;
+  let resume = null;
+  for (let fileOffset = 0; fileOffset < input.files.length; fileOffset++) {
+    const file = input.files[fileOffset];
+    scannedFiles++;
+    if (file.content === null || glob && !glob.test(file.path)) continue;
+    const lines = file.content.split('\n');
+    for (let index = fileOffset === 0 ? input.lineOffset : 0; index < lines.length; index++) {
+      const text = lines[index];
+      if (query ? query.test(text) : text.toLowerCase().includes(literal)) {
+        matches.push({ path: file.path, line: index + 1, text });
+        if (matches.length >= input.limit) {
+          resume = { fileOffset, lineOffset: index + 1 };
+          break;
+        }
+      }
+    }
+    if (resume) break;
+  }
+  parentPort.postMessage({ matches, scannedFiles, resume });
+} catch {
+  parentPort.postMessage({ error: 'MACHINE_SEARCH_INVALID_PATTERN' });
+}
+`;
+export async function matchSearchPage(input, signal) {
+    if (signal?.aborted)
+        throw new Error('MACHINE_SEARCH_CANCELLED');
+    if (activeSearches >= MAX_ACTIVE_SEARCHES)
+        throw new Error('MACHINE_SEARCH_BUSY: retry after another search finishes');
+    const worker = new Worker(MATCHER_SOURCE, {
+        eval: true, workerData: input, env: {}, execArgv: [],
+        resourceLimits: { maxOldGenerationSizeMb: 64, maxYoungGenerationSizeMb: 16, stackSizeMb: 2 },
+    });
+    activeSearches++;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (result, error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', cancel);
+            // Wait for termination before freeing capacity or completing the call.
+            // Keep the error listener until exit so shutdown cannot emit unhandled errors.
+            void worker.terminate().then(() => {
+                activeSearches--;
+                if (error)
+                    reject(error);
+                else
+                    resolve(result);
+            }, () => {
+                activeSearches--;
+                reject(new Error('MACHINE_SEARCH_WORKER_FAILED'));
+            });
+        };
+        const cancel = () => finish(undefined, new Error('MACHINE_SEARCH_CANCELLED'));
+        const timer = setTimeout(() => finish(undefined, new Error('MACHINE_SEARCH_TIMEOUT: simplify the pattern or narrow the search')), SEARCH_TIMEOUT_MS);
+        worker.once('message', (result) => {
+            if ('error' in result)
+                finish(undefined, new Error(result.error));
+            else
+                finish(result);
+        });
+        worker.once('error', () => finish(undefined, new Error('MACHINE_SEARCH_WORKER_FAILED')));
+        worker.once('exit', () => finish(undefined, new Error('MACHINE_SEARCH_WORKER_FAILED')));
+        signal?.addEventListener('abort', cancel, { once: true });
+        if (signal?.aborted)
+            cancel();
+    });
+}
+//# sourceMappingURL=machine-search-matcher.js.map

package/dist/gateway/src/services/agent/tools/machine-search-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-search-matcher.js","sourceRoot":"","sources":["../../../../../src/services/agent/tools/machine-search-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAiB7C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB,iFAAiF;AACjF,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2ChC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAuB,EAAE,MAAoB;IACjF,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjE,IAAI,cAAc,IAAI,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACvH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,EAAE;QACxC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;QACpD,cAAc,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,wBAAwB,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;KAC7F,CAAC,CAAC;IACH,cAAc,EAAE,CAAC;IACjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,MAA0B,EAAE,KAAa,EAAE,EAAE;YAC3D,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,uEAAuE;YACvE,+EAA+E;YAC/E,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChC,cAAc,EAAE,CAAC;gBACjB,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBACpB,OAAO,CAAC,MAAO,CAAC,CAAC;YACxB,CAAC,EAAE,GAAG,EAAE;gBACN,cAAc,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAC7C,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAA6C,EAAE,EAAE;YACvE,IAAI,OAAO,IAAI,MAAM;gBAAE,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;;gBAC7D,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/gateway/src/services/agent/tools/machine-search.d.ts

@@ -0,0 +1,9 @@
+import type { AgentTool } from '../tool-registry.js';
+/**
+ * Read-only agent search over an owner-registered local root. This is the
+ * machine-file half of "agent search": the orchestrator already drives the
+ * search -> read -> re-search loop, so this tool only exposes a cross-platform
+ * file finder that reuses the development workspace's guarded readers
+ * (per-segment symlink lstat, O_NOFOLLOW, 64 KiB cap, secret/hidden skip).
+ */
+export declare function createMachineSearchTools(): AgentTool[];