fuli-context 0.7.4-beta.2 → 0.7.5

package/src/http/api-router.js

@@ -36,13 +36,67 @@ export async function handleApiRequest({
     return true;
   }
 
-  if (await handleExternalKnowledgeApiRequest({
-    request,
-    response,
-    url,
-    externalKnowledge,
-    connectedKnowledge
-  })) return true;
-
-  return handleGraphApiRequest({ request, response, url, app });
+  if (system && url.pathname === '/api/system/runtime' && request.method === 'GET') {
+    sendJson(response, 200, system.runtimeStatus());
+    return true;
+  }
+
+  if (system && url.pathname === '/api/system/runtime/leases' && request.method === 'POST') {
+    sendJson(response, 201, await system.acquireRuntimeLease(await readJson(request)));
+    return true;
+  }
+
+  const runtimeLease = url.pathname.match(/^\/api\/system\/runtime\/leases\/([^/]+)$/);
+  if (system && runtimeLease && request.method === 'PATCH') {
+    sendJson(
+      response,
+      200,
+      system.refreshRuntimeLease(decodeURIComponent(runtimeLease[1]))
+    );
+    return true;
+  }
+  if (system && runtimeLease && request.method === 'DELETE') {
+    sendJson(
+      response,
+      200,
+      system.releaseRuntimeLease(decodeURIComponent(runtimeLease[1]))
+    );
+    return true;
+  }
+
+  const externalRequest = () => handleExternalKnowledgeApiRequest({
+    request, response, url, externalKnowledge, connectedKnowledge
+  });
+  const handledExternal = system?.withGraphRuntimeLease &&
+    externalRequestNeedsGraph(url.pathname, request.method)
+    ? await system.withGraphRuntimeLease(
+        `http:${request.method}:${url.pathname}`,
+        externalRequest
+      )
+    : await externalRequest();
+  if (handledExternal) return true;
+
+  const graphRequest = () => handleGraphApiRequest({ request, response, url, app });
+  if (system?.withGraphRuntimeLease && url.pathname.startsWith('/api/')) {
+    return system.withGraphRuntimeLease(
+      `http:${request.method}:${url.pathname}`,
+      graphRequest
+    );
+  }
+  return graphRequest();
+}
+
+function externalRequestNeedsGraph(pathname, method) {
+  if (pathname === '/api/connected-knowledge/search' && method === 'POST') return true;
+  if (pathname === '/api/external-knowledge/bindings' && method === 'POST') return true;
+  if (
+    /^\/api\/external-knowledge\/bindings\/[^/]+\/sync$/.test(pathname) &&
+    method === 'POST'
+  ) return true;
+  if (
+    /^\/api\/external-knowledge\/bindings\/[^/]+\/targets$/.test(pathname) &&
+    method === 'PATCH'
+  ) return true;
+  return /^\/api\/external-knowledge\/bindings\/[^/]+$/.test(pathname) &&
+    method === 'DELETE';
 }

package/src/http/graph-api-router.js

@@ -178,6 +178,284 @@ export async function handleGraphApiRequest({
     sendJson(response, 200, await app.upsertPersonalProject(await readJson(request)));
     return true;
   }
+  if (url.pathname === '/api/project-agents' && request.method === 'GET') {
+    sendJson(response, 200, await app.listProjectAgents({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      personalProjectId: url.searchParams.get('personalProjectId'),
+      status: url.searchParams.get('status'),
+      capability: url.searchParams.get('capability')
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agents' && request.method === 'PUT') {
+    sendJson(response, 200, await app.upsertProjectAgent(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-context' && request.method === 'POST') {
+    sendJson(response, 200, await app.getProjectAgentContext(await readJson(request)));
+    return true;
+  }
+  const projectAgentPath = url.pathname.match(/^\/api\/project-agents\/([^/]+)$/);
+  if (projectAgentPath && request.method === 'GET') {
+    sendJson(response, 200, await app.getProjectAgent({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      personalProjectId: url.searchParams.get('personalProjectId'),
+      agentId: decodeURIComponent(projectAgentPath[1])
+    }));
+    return true;
+  }
+  if (projectAgentPath && request.method === 'DELETE') {
+    sendJson(response, 200, await app.deleteProjectAgent({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      agentId: decodeURIComponent(projectAgentPath[1]),
+      reason: url.searchParams.get('reason') ?? 'archived by user'
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agents/test-cleanup' && request.method === 'POST') {
+    sendJson(response, 200, await app.cleanupProjectAgentTestRoles({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      testSource: url.searchParams.get('testSource')
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-assignments' && request.method === 'GET') {
+    sendJson(response, 200, await app.listProjectAgentAssignments({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      personalProjectId: url.searchParams.get('personalProjectId'),
+      agentId: url.searchParams.get('agentId'),
+      status: url.searchParams.get('status')
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-assignments' && request.method === 'POST') {
+    sendJson(response, 200, await app.createProjectAgentAssignment(await readJson(request)));
+    return true;
+  }
+  const projectAgentAssignmentPath = url.pathname.match(
+    /^\/api\/project-agent-assignments\/([^/]+)\/(end|replace)$/
+  );
+  if (projectAgentAssignmentPath && request.method === 'POST') {
+    const body = await readJson(request);
+    const input = {
+      ...body,
+      assignmentId: decodeURIComponent(projectAgentAssignmentPath[1])
+    };
+    const result = projectAgentAssignmentPath[2] === 'end'
+      ? await app.endProjectAgentAssignment(input)
+      : await app.replaceProjectAgentAssignment(input);
+    sendJson(response, 200, result);
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-tasks' && request.method === 'GET') {
+    sendJson(response, 200, await app.listProjectAgentTasks({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      personalProjectId: url.searchParams.get('personalProjectId'),
+      agentId: url.searchParams.get('agentId'),
+      status: url.searchParams.get('status'),
+      limit: numberParam(url, 'limit', null)
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-tasks' && request.method === 'POST') {
+    sendJson(response, 200, await app.submitProjectAgentTask(await readJson(request)));
+    return true;
+  }
+  const projectAgentTaskPath = url.pathname.match(/^\/api\/project-agent-tasks\/([^/]+)$/);
+  if (projectAgentTaskPath && request.method === 'GET') {
+    sendJson(response, 200, await app.viewProjectAgentTask({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      taskId: decodeURIComponent(projectAgentTaskPath[1]),
+      includeEvents: url.searchParams.get('includeEvents') !== 'false'
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-activity' && request.method === 'GET') {
+    sendJson(response, 200, await app.viewProjectAgentActivity({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      agentId: url.searchParams.get('agentId'),
+      fromDate: url.searchParams.get('fromDate'),
+      toDate: url.searchParams.get('toDate')
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-activity' && request.method === 'POST') {
+    sendJson(response, 200, await app.recordProjectAgentTaskActivity(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-recruitment-policy' && request.method === 'GET') {
+    sendJson(response, 200, await app.getProjectAgentRecruitmentPolicy({
+      personalSpaceId: url.searchParams.get('personalSpaceId')
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-recruitment-policy' &&
+      (request.method === 'PUT' || request.method === 'PATCH')) {
+    sendJson(response, 200, await app.updateProjectAgentRecruitmentPolicy(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-recruitments' && request.method === 'GET') {
+    sendJson(response, 200, await app.listProjectAgentRecruitments({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      personalProjectId: url.searchParams.get('personalProjectId'),
+      taskId: url.searchParams.get('taskId'),
+      status: url.searchParams.get('status')
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-recruitments/decision' && request.method === 'POST') {
+    sendJson(response, 200, await app.decideProjectAgentRecruitment(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/executors' && request.method === 'GET') {
+    sendJson(response, 200, await app.listExecutors({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      capability: url.searchParams.get('capability'),
+      availableOnly: url.searchParams.get('availableOnly') === 'true'
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/executors' && request.method === 'PUT') {
+    sendJson(response, 200, await app.upsertExecutor(await readJson(request)));
+    return true;
+  }
+  const executorPath = url.pathname.match(/^\/api\/executors\/([^/]+)$/);
+  if (executorPath && request.method === 'GET') {
+    sendJson(response, 200, await app.getExecutor({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      executorId: decodeURIComponent(executorPath[1])
+    }));
+    return true;
+  }
+  if (executorPath && request.method === 'DELETE') {
+    sendJson(response, 200, await app.deleteExecutor({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      executorId: decodeURIComponent(executorPath[1])
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/executors/preflight' && request.method === 'POST') {
+    sendJson(response, 200, await app.preflightExecutor(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/executors/authorization' && request.method === 'POST') {
+    sendJson(response, 200, await app.authorizeExecutor(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/executors/health' && request.method === 'POST') {
+    sendJson(response, 200, await app.reportExecutorHealth(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-executor-actuals' && request.method === 'POST') {
+    sendJson(response, 200, await app.recordProjectAgentExecutorActual(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/executor-routing-rules' && request.method === 'GET') {
+    sendJson(response, 200, await app.listExecutorRoutingRules({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      scope: url.searchParams.get('scope'),
+      personalProjectId: url.searchParams.get('personalProjectId'),
+      taskId: url.searchParams.get('taskId'),
+      status: url.searchParams.get('status')
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/executor-routing-rules' && request.method === 'PUT') {
+    sendJson(response, 200, await app.upsertExecutorRoutingRule(await readJson(request)));
+    return true;
+  }
+  const executorRoutingRulePath = url.pathname.match(
+    /^\/api\/executor-routing-rules\/([^/]+)$/
+  );
+  if (executorRoutingRulePath && request.method === 'GET') {
+    sendJson(response, 200, await app.getExecutorRoutingRule({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      ruleId: decodeURIComponent(executorRoutingRulePath[1])
+    }));
+    return true;
+  }
+  if (executorRoutingRulePath && request.method === 'PATCH') {
+    const body = await readJson(request);
+    sendJson(response, 200, await app.updateExecutorRoutingRule({
+      ...body,
+      personalSpaceId: body.personalSpaceId ?? url.searchParams.get('personalSpaceId'),
+      ruleId: decodeURIComponent(executorRoutingRulePath[1])
+    }));
+    return true;
+  }
+  if (executorRoutingRulePath && request.method === 'DELETE') {
+    sendJson(response, 200, await app.deleteExecutorRoutingRule({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      ruleId: decodeURIComponent(executorRoutingRulePath[1])
+    }));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-routing-learning' && request.method === 'GET') {
+    sendJson(response, 200, await app.listProjectAgentRoutingLearning({
+      personalSpaceId: url.searchParams.get('personalSpaceId'),
+      personalProjectId: url.searchParams.get('personalProjectId'),
+      workKind: url.searchParams.get('workKind'),
+      agentId: url.searchParams.get('agentId'),
+      executorId: url.searchParams.get('executorId')
+    }));
+    return true;
+  }
+  const projectAgentLearningPath = url.pathname.match(
+    /^\/api\/project-agent-learning\/([^/]+)$/
+  );
+  if (projectAgentLearningPath && request.method === 'PATCH') {
+    const body = await readJson(request);
+    const evidenceId = decodeURIComponent(projectAgentLearningPath[1]);
+    const action = body.action;
+    if (!['ignore', 'reset'].includes(action)) {
+      throw new TypeError('Project Agent learning action must be ignore or reset');
+    }
+    const personalSpaceId = body.personalSpaceId ??
+      url.searchParams.get('personalSpaceId') ?? app.config?.personal?.spaceId;
+    const personalProjectId = body.personalProjectId ??
+      url.searchParams.get('personalProjectId');
+    const agentId = body.agentId ?? url.searchParams.get('agentId');
+    if (!personalSpaceId || !personalProjectId || !agentId) {
+      throw new TypeError(
+        'Project Agent learning updates require personalSpaceId, personalProjectId, and agentId'
+      );
+    }
+    const idempotencyKey = body.idempotencyKey ??
+      `console-learning:${evidenceId}:${action}`;
+    const reason = body.reason ?? `Console requested ${action} for explicit evidence`;
+    const input = {
+      ...body,
+      personalSpaceId,
+      personalProjectId,
+      agentId,
+      evidenceId,
+      idempotencyKey,
+      reason
+    };
+    if (action === 'ignore') {
+      sendJson(response, 200, await app.ignoreProjectAgentRoutingLearning(input));
+      return true;
+    }
+    if (!input.workKind || !input.executorId || !input.resetAt) {
+      throw new TypeError(
+        'Project Agent learning reset requires workKind, executorId, and resetAt'
+      );
+    }
+    sendJson(response, 200, await app.resetProjectAgentRoutingLearning(input));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-routing-learning/ignore' && request.method === 'POST') {
+    sendJson(response, 200, await app.ignoreProjectAgentRoutingLearning(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-routing-learning/reset' && request.method === 'POST') {
+    sendJson(response, 200, await app.resetProjectAgentRoutingLearning(await readJson(request)));
+    return true;
+  }
+  if (url.pathname === '/api/project-agent-routing-outcomes' && request.method === 'POST') {
+    sendJson(response, 200, await app.recordProjectAgentTaskOutcome(await readJson(request)));
+    return true;
+  }
   if (url.pathname === '/api/projects/publish' && request.method === 'POST') {
     sendJson(response, 200, await app.publishPersonalProject(await readJson(request)));
     return true;

package/src/local-runtime/lifecycle.js

@@ -7,6 +7,8 @@ import {
   stopGraphProviders
 } from '../setup/graph-runtime.js';
 import { readJsonFile } from '../storage/json-file.js';
+import { readAdaptiveRuntimeSettings } from '../adaptive-runtime/settings.js';
+import { readAdaptiveRuntimeState } from '../adaptive-runtime/state.js';
 import {
   DEFAULT_RUNTIME_SETTINGS,
   managedProviderUrls
@@ -28,6 +30,7 @@ export async function startLocalRuntime(input, dependencies = {}) {
     port: input.port,
     lan: input.lan === true,
     runtimeSettings,
+    previousRuntimeMode: input.previousRuntimeMode,
     personalOnly: !managesDevelopmentWorkspace,
     buildProviders,
     noStart: false,
@@ -51,11 +54,14 @@ export async function stopLocalRuntime(input, dependencies = {}) {
   const managesDevelopmentWorkspace = state?.managedProviders?.includes(
     'development-workspace'
   ) || hasManagedDevelopmentWorkspace(config, runtimeSettings);
+  const activeRuntimeMode = state?.runtimeSettings?.graphRuntimeMode ??
+    runtimeSettings.graphRuntimeMode;
 
   let providers = 'not_initialized';
   if (deps.fileExists(input.paths.graphEnvPath)) {
-    deps.stopProviders(input.paths, input.paths.graphEnvPath, {
-      personalOnly: !managesDevelopmentWorkspace
+    await deps.stopProviders(input.paths, input.paths.graphEnvPath, {
+      personalOnly: !managesDevelopmentWorkspace,
+      runtimeMode: activeRuntimeMode
     });
     providers = 'stopped';
   }
@@ -70,11 +76,14 @@ export async function stopLocalRuntime(input, dependencies = {}) {
 }
 
 export async function restartLocalRuntime(input, dependencies = {}) {
+  const deps = lifecycleDependencies(dependencies);
+  const previousRuntimeMode = deps.readState(input.paths.graphRuntimeStatePath)
+    ?.runtimeSettings?.graphRuntimeMode;
   const stopped = await stopLocalRuntime(input, dependencies);
   if (stopped.status === 'partial') {
     throw new Error('Could not safely verify the existing local UI process; restart was refused.');
   }
-  const started = await startLocalRuntime(input, dependencies);
+  const started = await startLocalRuntime({ ...input, previousRuntimeMode }, dependencies);
   return { stopped, ...started, status: 'restarted' };
 }
 
@@ -90,19 +99,34 @@ export async function inspectLocalRuntime(input, dependencies = {}) {
     state.pid,
     state.version
   );
+  const adaptiveSettings = deps.readAdaptiveSettings(pathsValue(
+    input.paths.adaptiveRuntimeSettingsPath
+  ));
+  const adaptiveState = adaptiveSettings.enabled
+    ? deps.readAdaptiveState(pathsValue(input.paths.adaptiveRuntimeStatePath))
+    : null;
+  const intentionallySleeping = adaptiveSettings.enabled &&
+    ['provider-sleeping', 'sleeping'].includes(adaptiveState?.stage);
   const managedUrls = managedProviderUrls(runtimeSettings);
   const personalUrl = config?.personal?.providerUrl ?? managedUrls.personal;
   const personal = config
-    ? await deps.providerHealth(personalUrl)
+    ? intentionallySleeping
+      ? { url: personalUrl, status: 'sleeping' }
+      : await deps.providerHealth(personalUrl)
     : { url: personalUrl, status: 'not_configured' };
-  const workspaces = await Promise.all((config?.workspaces ?? []).map(async (workspace) => ({
-    ...(await deps.providerHealth(workspace.providerUrl)),
-    managedDevelopment: isManagedDevelopmentUrl(workspace, runtimeSettings)
-  })));
+  const workspaces = await Promise.all((config?.workspaces ?? []).map(async (workspace) => {
+    const managedDevelopment = isManagedDevelopmentUrl(workspace, runtimeSettings);
+    return {
+      ...(intentionallySleeping && managedDevelopment
+        ? { url: workspace.providerUrl, status: 'sleeping' }
+        : await deps.providerHealth(workspace.providerUrl)),
+      managedDevelopment
+    };
+  }));
 
   let status = 'stopped';
   if (!config && !state) status = 'not_configured';
-  else if (consoleReady && personal.status === 'ready') status = 'running';
+  else if (consoleReady && ['ready', 'sleeping'].includes(personal.status)) status = 'running';
   else if (processAlive || personal.status === 'ready') status = 'degraded';
 
   return {
@@ -120,6 +144,10 @@ export async function inspectLocalRuntime(input, dependencies = {}) {
       configured: workspaces.length > 0,
       status: publicProviderStatus(workspaces),
       providers: workspaces
+    },
+    adaptiveRuntime: {
+      enabled: adaptiveSettings.enabled,
+      stage: adaptiveSettings.enabled ? adaptiveState?.stage ?? 'unknown' : 'always-on'
     }
   };
 }
@@ -162,6 +190,10 @@ function lifecycleDependencies(overrides) {
     stopProviders: stopGraphProviders,
     consoleHealth: checkLocalConsoleHealth,
     providerHealth,
+    readAdaptiveSettings: (path) => path
+      ? readAdaptiveRuntimeSettings(path)
+      : { enabled: false },
+    readAdaptiveState: (path) => path ? readAdaptiveRuntimeState(path) : null,
     isProcessAlive,
     stopProcess,
     waitForExit,
@@ -173,6 +205,10 @@ function lifecycleDependencies(overrides) {
   };
 }
 
+function pathsValue(value) {
+  return typeof value === 'string' && value ? value : null;
+}
+
 function safeReadState(path) {
   try {
     return readJsonFile(path, null);
@@ -242,7 +278,7 @@ function isLoopbackConsoleUrl(value) {
 
 function publicProviderStatus(workspaces) {
   if (!workspaces.length) return 'not_connected';
-  const ready = workspaces.filter(({ status }) => status === 'ready').length;
+  const ready = workspaces.filter(({ status }) => ['ready', 'sleeping'].includes(status)).length;
   if (ready === workspaces.length) return 'ready';
   return ready > 0 ? 'degraded' : 'unavailable';
 }

package/src/mcp/context-resources.js

@@ -6,7 +6,9 @@ const RESOURCE_MIME_TYPE = 'text/markdown';
 const MAX_PROJECT_PURPOSE_LENGTH = 240;
 const MAX_RESOURCE_TEXT_BYTES = 32 * 1024;
 
-export function registerFuliContextResources(server, app) {
+export function registerFuliContextResources(server, app, {
+  withRuntimeLease = (_owner, operation) => operation()
+} = {}) {
   server.registerResource(
     'FULI global taste',
     GLOBAL_TASTE_RESOURCE_URI,
@@ -15,13 +17,17 @@ export function registerFuliContextResources(server, app) {
       description: 'The user\'s current evidence-backed global taste and working preferences.',
       mimeType: RESOURCE_MIME_TYPE
     },
-    (uri) => readGlobalTasteResource(app, uri)
+    (uri) => withRuntimeLease(
+      'mcp-resource:global-taste',
+      () => readGlobalTasteResource(app, uri)
+    )
   );
 
   const projectResources = new ResourceTemplate(PROJECT_RESOURCE_TEMPLATE, {
-    list: async () => ({
-      resources: await listPersonalProjectResources(app)
-    })
+    list: () => withRuntimeLease(
+      'mcp-resource:list-projects',
+      async () => ({ resources: await listPersonalProjectResources(app) })
+    )
   });
   server.registerResource(
     'fuli-personal-project',
@@ -31,7 +37,10 @@ export function registerFuliContextResources(server, app) {
       description: 'Select one exact local FULI personal project for this task.',
       mimeType: RESOURCE_MIME_TYPE
     },
-    (uri, variables) => readPersonalProjectResource(app, uri, variables)
+    (uri, variables) => withRuntimeLease(
+      'mcp-resource:project',
+      () => readPersonalProjectResource(app, uri, variables)
+    )
   );
 }
 

package/src/mcp/create-mcp-server.js

@@ -19,7 +19,8 @@ import { jsonSchemaToZod, openObjectSchema } from './tool-schema.js';
 import {
   mcpHostSessionId,
   nativeCodexThreadId,
-  normalizeAgentSessionInput
+  normalizeAgentSessionInput,
+  normalizeMcpSourceApplication
 } from './session-id.js';
 
 const TOOL_RESULT_LIMIT_BYTES = Object.freeze({
@@ -33,6 +34,24 @@ const TOOL_RESULT_LIMIT_BYTES = Object.freeze({
   discover_personal_global_preference_candidates: 32 * 1024,
   preview_personal_global_preference_decision: 32 * 1024,
   list_personal_projects: 32 * 1024,
+  list_project_agents: 32 * 1024,
+  get_project_agent: 32 * 1024,
+  list_project_agent_assignments: 32 * 1024,
+  get_project_agent_context: 64 * 1024,
+  coordinate_project_agent_task: 256 * 1024,
+  acquire_runtime_lease: 4 * 1024,
+  refresh_runtime_lease: 4 * 1024,
+  release_runtime_lease: 4 * 1024,
+  view_project_agent_task: 64 * 1024,
+  view_project_agent_activity: 64 * 1024,
+  list_project_agent_recruitments: 32 * 1024,
+  list_executors: 32 * 1024,
+  get_executor: 32 * 1024,
+  preflight_executor: 32 * 1024,
+  record_project_agent_executor_actual: 32 * 1024,
+  list_executor_routing_rules: 32 * 1024,
+  get_executor_routing_rule: 32 * 1024,
+  list_project_agent_routing_learning: 64 * 1024,
   list_knowledge_review_candidates: 32 * 1024,
   list_workflow_candidates: 32 * 1024,
   recommend_next_workflow_steps: 32 * 1024
@@ -40,7 +59,12 @@ const TOOL_RESULT_LIMIT_BYTES = Object.freeze({
 
 export function createMcpServer(
   app,
-  { env = process.env, clock = () => new Date() } = {}
+  {
+    env = process.env,
+    clock = () => new Date(),
+    sourceApplication = nativeCodexThreadId(env) ? 'codex' : 'other',
+    withRuntimeLease = (_owner, operation) => operation()
+  } = {}
 ) {
   const server = new McpServer(
     { name: 'fuli', version: FULI_VERSION },
@@ -48,15 +72,20 @@ export function createMcpServer(
   );
 
   const nativeThreadId = nativeCodexThreadId(env);
+  const authoritativeSourceApplication = normalizeMcpSourceApplication(
+    sourceApplication
+  );
   const tools = createToolMap(
     app,
     createProjectActionPreviewTokens(),
     nativeThreadId,
     mcpHostSessionId(env),
-    clock
+    clock,
+    authoritativeSourceApplication,
+    withRuntimeLease
   );
   for (const tool of tools.values()) registerTool(server, tool);
-  registerFuliContextResources(server, app);
+  registerFuliContextResources(server, app, { withRuntimeLease });
   registerCallHandler(server, tools);
   return server;
 }
@@ -66,24 +95,30 @@ function createToolMap(
   projectActionPreviews,
   nativeThreadId,
   hostSessionId,
-  clock
+  clock,
+  sourceApplication,
+  withRuntimeLease
 ) {
   const commonKnowledgePreviews = createCommonKnowledgePreviewTokens();
   return new Map(listAgentTools().map((definition) => [definition.name, {
     definition,
     schema: jsonSchemaToZod(definition.inputSchema),
-    invoke: (input) => invokeAgentTool(
-      app,
-      definition.name,
-      normalizeAgentSessionInput(
+    invoke: (input) => withRuntimeLease(
+      `mcp-tool:${definition.name}`,
+      () => invokeAgentTool(
+        app,
         definition.name,
-        input,
-        nativeThreadId,
-        hostSessionId,
-        clock
-      ),
-      projectActionPreviews,
-      commonKnowledgePreviews
+        normalizeAgentSessionInput(
+          definition.name,
+          input,
+          nativeThreadId,
+          hostSessionId,
+          clock,
+          sourceApplication
+        ),
+        projectActionPreviews,
+        commonKnowledgePreviews
+      )
     )
   }]));
 }

package/src/mcp/instructions.js

@@ -1,7 +1,9 @@
 export const MCP_INSTRUCTIONS = [
-  'Each user task: hook-provided task context from begin_task_context. Otherwise, before other tools/answer, call exactly get_collaboration_preferences with projectPath=cwd and taskPrompt=current user request as fallback; never substitute a project action. Apply all effective_preferences: personal-global everywhere, matched project, authorized inheritable parent. For taste/judgment, call get_user_taste_skill; never replaces a user-authored Skill. FULI fuli:// exposes exact projects/global taste; an @ selection is explicit and adds no project. Resolve relevant deferred_conflict first; never guess personalProjectId. Writes enforce actual payload; final text is not compliance.',
-  'Before asking user to repeat a stable project fact or method, inspect task_knowledge_recall. On miss call search_current_project_knowledge with focused action, artifact, target-system, or identifier queries; never use the whole conversational request as the only query. Search active child first, then inheritable parent via authorized PART_OF/USES_KNOWLEDGE_FROM, 2 hops; parent prefs need descendants/selected_projects; local_only/RELATED_TO never inherit; authority > distance > weight; equal conflicts defer.',
-  'Before saying unknown, call search_knowledge_graph. Use exact IDs for extra projects. RELATED_TO suggests; ask first. Use all_local_confirmed only after consent, then rg only in safe current repo/workspace; never scan outside it. Live state: monitoring/Git MCP. External/public: search_connected_knowledge; agent_decide is response-only.',
-  'Use record_decision_trace; record_knowledge_feedback on rejected/outdated/failed items. Batch durable confirmed knowledge with capture_session_knowledge; no secrets/guesses. Finish with checkpoint_task_knowledge: capture_candidates or retain_nothing. Then record_knowledge_usage.',
-  'Terminal-safe Markdown. A match is a candidate only. If it supports the answer, MUST begin with sourceMarker.leadMarkdown and append sourceMarker.markdown; otherwise use noMatchSourceMarker (empty). Keep unchanged; never wrap in HTML.'
+  'Each user task: hook-provided task context via begin_task_context; otherwise before other tools/answer call exactly get_collaboration_preferences(projectPath=cwd taskPrompt=current user request) as fallback; never substitute a project action. Apply all effective_preferences: personal-global everywhere; matched project, authorized inheritable parent. get_user_taste_skill never replaces a user-authored Skill. Resolve deferred_conflict; never guess personalProjectId. Writes use actual payload; final text not compliance.',
+  'Before asking for stable project fact or method inspect task_knowledge_recall. On miss search_current_project_knowledge with focused action, artifact, target-system, or identifier queries; never use the whole conversational request as the only query. Search active child first, then authorized inheritable parent (PART_OF/USES_KNOWLEDGE_FROM); local_only/RELATED_TO never inherit.',
+  'Before saying unknown call search_knowledge_graph; exact IDs for extra projects. RELATED_TO suggests; ask. all_local_confirmed only after consent; rg safe current repo/workspace; Never scan outside it. monitoring/Git MCP; search_connected_knowledge; agent_decide response-only.',
+  'record_decision_trace; failures record_knowledge_feedback. Batch durable confirmed knowledge: capture_session_knowledge; no secrets. checkpoint_task_knowledge: capture_candidates or retain_nothing; record_knowledge_usage.',
+  'Team: coordinate_project_agent_task gives isolated contexts; Fuli never spawns. Host: acquire_runtime_lease, start workers, report activity/executor, release_runtime_lease in finally.',
+  'Non-empty Provider executionSummary: one row/worker: occupation emoji/label, actual executor/sourceApplication, work summary, workerStatus/status. Empty/absent executionSummary: omit. Configured/allowed/available are not evidence.',
+  'Terminal-safe Markdown; never wrap in HTML. A match is a candidate only. If it supports the answer, MUST begin sourceMarker.leadMarkdown and append sourceMarker.markdown; otherwise use noMatchSourceMarker (empty). Keep unchanged.'
 ].join(' ');