runbios-mcp 0.2.16 → 0.2.17-dev.268

package/README.md

@@ -1,23 +1,34 @@
 # Run BiOS MCP server
 
 The MCP server exposes the authenticated Run BiOS training and model-serving
-control planes to MCP-compatible automation clients. This build registers **107
-tools** when every creation surface is open; `get_platform_guide` derives its
-inventory from what is actually registered so its count matches the wire
-(`tools/list`).
+control planes to MCP-compatible automation clients. This build registers **122
+tools** when every surface is open; `get_platform_guide` derives its inventory
+from what is actually registered so its count matches the wire (`tools/list`).
 
 PRE-LAUNCH: while the coming-soon gates are on (the default — see
 `src/config.ts`), the three creation tools (`create_training_job`,
-`upload_dataset`, `import_huggingface_dataset`) are not registered, so the wire
-count is **104** and the guide lists only live tools. Read and lifecycle tools,
-including dataset mapping/revalidation/source/integration maintenance, remain
-available. A production organization holding the training beta grant opens both
-creation gates for its own MCP session. Local API-key mode resolves the bound
-organization automatically through key introspection, so `RUNBIOS_ORG_ID` is
-optional; otherwise set
+`upload_dataset`, `import_huggingface_dataset`) are not registered, and read and
+lifecycle tools, including dataset mapping/revalidation/source/integration
+maintenance, remain available. A production organization holding the training
+beta grant opens both creation gates for its own MCP session. Local API-key mode
+resolves the bound organization automatically through key introspection, so
+`RUNBIOS_ORG_ID` is optional; otherwise set
 `RUNBIOS_TRAINING_COMING_SOON=false` / `RUNBIOS_DATASETS_COMING_SOON=false` at
 launch and the registrations return.
 
+DEVELOPMENT ONLY: the Conscious Loop is offered on the development environment
+alone (owner decision, 2026-09-24). While `RUNBIOS_LOOP_COMING_SOON` is anything
+but `false` (the default), none of its 56 `loop_` tools is registered — reads
+included — and the platform guide does not mention the loop; no organization is
+admitted early, so the training beta grant does not open it. The hosted server
+opens it only in its development task definition. To use the loop tools from a
+local client against `https://api-dev.runbios.ai`, add
+`"RUNBIOS_LOOP_COMING_SOON": "false"` to the client's `env`; anywhere else the
+API refuses them (`403 LOOP_COMING_SOON`) whatever this variable says.
+
+So the wire count is 122 with everything open, 118 with training and datasets
+gated, and 63 in staging and production, where all three gates are closed.
+
 Set these environment variables in the MCP client configuration:
 
 ```json

package/dist/capabilities.d.ts

@@ -1,16 +1,27 @@
 /**
  * Environment capability gates for tool discovery.
  *
- * Some tool families depend on a backend that is provisioned per environment
- * (the Conscious Loop runs on dev only today). IAM authorizes those tools by
- * scope, not by environment, so without this filter an agent is offered tools
- * that answer "is not available in this environment" on every call.
+ * Some tool families depend on a backend that an environment may not run at
+ * all. IAM authorizes those tools by scope, not by environment, so without this
+ * filter an agent is offered tools that answer "is not available in this
+ * environment" on every call.
  *
- * The gateway answers any route of an absent capability with 503 and code
- * capability_unavailable, without proxying and before any role verdict. That
- * answer is a stable fact about the deployment, so it is cached. Anything else
- * (success, 401/403, a network error) leaves the family visible: the gateway
- * stays the authority on every call, and a blip must never hide real tools.
+ * This is the SECOND of two filters, and the weaker one. The first is the
+ * explicit launch gate (LaunchGates in src/config.ts, applied with
+ * withoutLaunchGatedTools): the Conscious Loop is offered on development only,
+ * and that is decided by the environment's own RUNBIOS_LOOP_COMING_SOON, never
+ * by a probe. A probe cannot decide it on its own, because the answer depends on
+ * the credential: a key without loop:read is refused by the gateway
+ * (403 INSUFFICIENT_SCOPE) before loop-service could say it is gated, and that
+ * refusal says nothing about the environment.
+ *
+ * What the probe still catches is an environment where the gate reads open but
+ * the backend is missing or gated anyway: the gateway's 503
+ * capability_unavailable, or loop-service's own 403 LOOP_COMING_SOON. Both are
+ * stable facts about the deployment, so they are cached. Anything else
+ * (success, another 401/403, a network error) leaves the family visible: the
+ * gateway stays the authority on every call, and a blip must never hide real
+ * tools.
  */
 import type { BiosClient } from "./api-client.js";
 export declare const CAPABILITY_CACHE_TTL_MS: number;

package/dist/capabilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAWlD,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAGlD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAqBD,kFAAkF;AAClF,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAOtB"}
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAWlD,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAGlD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAuBD,kFAAkF;AAClF,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAOtB"}

package/dist/capabilities.js

@@ -8,7 +8,9 @@ export function resetCapabilityCache() {
 }
 function isCapabilityAbsent(error) {
     const text = error instanceof Error ? error.message : String(error);
-    return /capability_unavailable/.test(text) || /is not available in this environment/.test(text);
+    return /capability_unavailable/.test(text)
+        || /\bLOOP_COMING_SOON\b/.test(text)
+        || /is not available in this environment/.test(text);
 }
 async function familyAbsent(client, family, now) {
     const cached = cache.get(family.prefix);

package/dist/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAqBA,MAAM,QAAQ,GAAuB;IACnC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE;CAClD,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2C,CAAC;AAEjE,MAAM,UAAU,oBAAoB;IAClC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClG,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAkB,EAAE,MAAwB,EAAE,GAAW;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,EAAE,GAAG,uBAAuB;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,KAAkB,EAClB,MAAoB,IAAI,CAAC,GAAG;IAE5B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QACzE,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAAE,SAAS;QAC3D,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC;YAAE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAgCA,MAAM,QAAQ,GAAuB;IACnC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE;CAClD,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2C,CAAC;AAEjE,MAAM,UAAU,oBAAoB;IAClC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;WACrC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;WACjC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAkB,EAAE,MAAwB,EAAE,GAAW;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,EAAE,GAAG,uBAAuB;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,KAAkB,EAClB,MAAoB,IAAI,CAAC,GAAG;IAE5B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QACzE,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAAE,SAAS;QAC3D,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC;YAAE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/config.d.ts

@@ -1,4 +1,4 @@
-export declare const DEFAULT_BASE_URL = "https://api.runbios.ai";
+export declare const DEFAULT_BASE_URL = "https://api-dev.runbios.ai";
 type BaseUrlEnv = Partial<Pick<NodeJS.ProcessEnv, "RUNBIOS_BASE_URL" | "BIOS_BASE_URL">>;
 /**
  * RUNBIOS_* is the canonical environment prefix; the legacy BIOS_* names keep
@@ -18,14 +18,41 @@ export declare function resolveBaseURL(env?: BaseUrlEnv): string;
  *
  * Gated by default while pre-launch (an unset variable fails closed, never
  * open); set RUNBIOS_TRAINING_COMING_SOON=false / RUNBIOS_DATASETS_COMING_SOON=false
- * (legacy BIOS_* names still work) or flip the defaults here at launch.
+ * / RUNBIOS_LOOP_COMING_SOON=false (legacy BIOS_* names still work) or flip the
+ * defaults here at launch. The hosted server reads them from its task
+ * definition (scripts/deploy/ecs-service-contracts.json, usf-mcp), which opens
+ * all three in development only.
  */
 export interface LaunchGates {
     training: boolean;
     datasets: boolean;
+    /**
+     * The Conscious Loop, offered on development only (owner decision,
+     * 2026-09-24). Unlike the two above it hides the WHOLE family: every
+     * `loop_` tool is left unregistered and the guide says nothing about the
+     * loop, because nothing about it is offered where it is gated — not even a
+     * read. There is no per-organisation grant for it either: the training-beta
+     * grant resolved below opens training and datasets and never this.
+     * loop-service carries the same gate (LOOP_COMING_SOON, 403 on every
+     * customer route) as the authority.
+     */
+    loop: boolean;
 }
-type LaunchGateEnv = Partial<Pick<NodeJS.ProcessEnv, "RUNBIOS_TRAINING_COMING_SOON" | "BIOS_TRAINING_COMING_SOON" | "RUNBIOS_DATASETS_COMING_SOON" | "BIOS_DATASETS_COMING_SOON">>;
+type LaunchGateEnv = Partial<Pick<NodeJS.ProcessEnv, "RUNBIOS_TRAINING_COMING_SOON" | "BIOS_TRAINING_COMING_SOON" | "RUNBIOS_DATASETS_COMING_SOON" | "BIOS_DATASETS_COMING_SOON" | "RUNBIOS_LOOP_COMING_SOON" | "BIOS_LOOP_COMING_SOON">>;
 export declare function resolveLaunchGates(env?: LaunchGateEnv): LaunchGates;
+/** The tool-name prefix of the Conscious Loop family (see LaunchGates.loop). */
+export declare const LOOP_TOOL_PREFIX = "loop_";
+/**
+ * Removes every tool a closed launch gate hides from a session's authorized
+ * set, in place. The hosted MCP endpoint and the console assistant build their
+ * sessions from IAM's scope-derived tool list, which says nothing about the
+ * environment, so a scope that carries loop tools would otherwise offer them
+ * where the loop is not offered. This is decided by the environment alone —
+ * never by probing the service, whose answer depends on the credential's
+ * scopes (a key without loop:read is refused by the gateway before loop-service
+ * could say it is gated).
+ */
+export declare function withoutLaunchGatedTools(tools: Set<string>, gates: LaunchGates): Set<string>;
 /**
  * Per-session grant resolution (docs/design-training-beta-access.md). The
  * environment gates above answer "is this surface open in this deployment?";

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AAEzD,KAAK,UAAU,GAAG,OAAO,CACvB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAC9D,CAAC;AAEF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,UAAwB,GAAG,MAAM,CAEpE;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,KAAK,aAAa,GAAG,OAAO,CAC1B,IAAI,CACF,MAAM,CAAC,UAAU,EACf,8BAA8B,GAC9B,2BAA2B,GAC3B,8BAA8B,GAC9B,2BAA2B,CAC9B,CACF,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,aAA2B,GAAG,WAAW,CAKhF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAC9C,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,wBAAsB,mBAAmB,CACvC,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,MAAM,OAAO,CAAC;IAAE,GAAG,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9F,OAAO,CAAC,MAAM,CAAC,CASjB;AAKD,0EAA0E;AAC1E,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,OAAO,CAAC;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,GAAG,GAAE,aAA2B,EAChC,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,WAAW,CAAC,CAqCtB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,gBAAgB,+BAA+B,CAAC;AAE7D,KAAK,UAAU,GAAG,OAAO,CACvB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAC9D,CAAC;AAEF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,UAAwB,GAAG,MAAM,CAEpE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;;;;OASG;IACH,IAAI,EAAE,OAAO,CAAC;CACf;AAED,KAAK,aAAa,GAAG,OAAO,CAC1B,IAAI,CACF,MAAM,CAAC,UAAU,EACf,8BAA8B,GAC9B,2BAA2B,GAC3B,8BAA8B,GAC9B,2BAA2B,GAC3B,0BAA0B,GAC1B,uBAAuB,CAC1B,CACF,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,aAA2B,GAAG,WAAW,CAMhF;AAED,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,UAAU,CAAC;AAExC;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAK3F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAC9C,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,wBAAsB,mBAAmB,CACvC,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,MAAM,OAAO,CAAC;IAAE,GAAG,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9F,OAAO,CAAC,MAAM,CAAC,CASjB;AAKD,0EAA0E;AAC1E,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,OAAO,CAAC;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,GAAG,GAAE,aAA2B,EAChC,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,WAAW,CAAC,CAuCtB"}

package/dist/config.js

@@ -1,5 +1,5 @@
 // api.runbios.ai DNS does not exist yet; planned cutover target once it does.
-export const DEFAULT_BASE_URL = "https://api.runbios.ai";
+export const DEFAULT_BASE_URL = "https://api-dev.runbios.ai";
 /**
  * RUNBIOS_* is the canonical environment prefix; the legacy BIOS_* names keep
  * working so existing MCP client configs never break.
@@ -11,8 +11,29 @@ export function resolveLaunchGates(env = process.env) {
     return {
         training: (env.RUNBIOS_TRAINING_COMING_SOON ?? env.BIOS_TRAINING_COMING_SOON) !== "false",
         datasets: (env.RUNBIOS_DATASETS_COMING_SOON ?? env.BIOS_DATASETS_COMING_SOON) !== "false",
+        loop: (env.RUNBIOS_LOOP_COMING_SOON ?? env.BIOS_LOOP_COMING_SOON) !== "false",
     };
 }
+/** The tool-name prefix of the Conscious Loop family (see LaunchGates.loop). */
+export const LOOP_TOOL_PREFIX = "loop_";
+/**
+ * Removes every tool a closed launch gate hides from a session's authorized
+ * set, in place. The hosted MCP endpoint and the console assistant build their
+ * sessions from IAM's scope-derived tool list, which says nothing about the
+ * environment, so a scope that carries loop tools would otherwise offer them
+ * where the loop is not offered. This is decided by the environment alone —
+ * never by probing the service, whose answer depends on the credential's
+ * scopes (a key without loop:read is refused by the gateway before loop-service
+ * could say it is gated).
+ */
+export function withoutLaunchGatedTools(tools, gates) {
+    if (gates.loop) {
+        for (const name of [...tools])
+            if (name.startsWith(LOOP_TOOL_PREFIX))
+                tools.delete(name);
+    }
+    return tools;
+}
 /**
  * Per-session grant resolution (docs/design-training-beta-access.md). The
  * environment gates above answer "is this surface open in this deployment?";
@@ -62,7 +83,9 @@ export async function sessionLaunchGates(orgId, getFeatures, env = process.env,
     const gates = resolveLaunchGates(env);
     if (!orgId || (!gates.training && !gates.datasets))
         return gates;
-    const open = { training: false, datasets: false };
+    // The grant admits an organisation to training and datasets. It never opens
+    // the loop, which the environment alone decides.
+    const open = { ...gates, training: false, datasets: false };
     const cached = grantCache.get(orgId);
     if (cached && now() - cached.at < GRANT_CACHE_TTL_MS) {
         return cached.granted ? open : gates;

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAMzD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB,OAAO,CAAC,GAAG;IAC1D,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,aAAa,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC7F,CAAC;AAgCD,MAAM,UAAU,kBAAkB,CAAC,MAAqB,OAAO,CAAC,GAAG;IACjE,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,yBAAyB,CAAC,KAAK,OAAO;QACzF,QAAQ,EAAE,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,yBAAyB,CAAC,KAAK,OAAO;KAC1F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,eAAuB,EACvB,UAA+F;IAE/F,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,QAAQ,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEjD,0EAA0E;AAC1E,MAAM,UAAU,eAAe;IAC7B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,WAAkE,EAClE,MAAqB,OAAO,CAAC,GAAG,EAChC,MAAoB,IAAI,CAAC,GAAG;IAE5B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjE,MAAM,IAAI,GAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,kBAAkB,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAmD,CAAC;IACxD,IAAI,CAAC;QACH,kEAAkE;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC7B,WAAW,EAAE;YACb,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YACzG,CAAC,CAAC;SACH,CAAC,CAAC;QACH,OAAO,GAAG,GAAG,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,wEAAwE;QACxE,qDAAqD;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,oEAAoE;QACpE,oEAAoE;QACpE,wDAAwD;QACxD,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAChC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAM7D;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB,OAAO,CAAC,GAAG;IAC1D,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,aAAa,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC7F,CAAC;AAgDD,MAAM,UAAU,kBAAkB,CAAC,MAAqB,OAAO,CAAC,GAAG;IACjE,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,yBAAyB,CAAC,KAAK,OAAO;QACzF,QAAQ,EAAE,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,CAAC,yBAAyB,CAAC,KAAK,OAAO;QACzF,IAAI,EAAE,CAAC,GAAG,CAAC,wBAAwB,IAAI,GAAG,CAAC,qBAAqB,CAAC,KAAK,OAAO;KAC9E,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAkB,EAAE,KAAkB;IAC5E,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC;YAAE,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,eAAuB,EACvB,UAA+F;IAE/F,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,QAAQ,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEjD,0EAA0E;AAC1E,MAAM,UAAU,eAAe;IAC7B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,WAAkE,EAClE,MAAqB,OAAO,CAAC,GAAG,EAChC,MAAoB,IAAI,CAAC,GAAG;IAE5B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjE,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,IAAI,GAAgB,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,kBAAkB,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAmD,CAAC;IACxD,IAAI,CAAC;QACH,kEAAkE;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC7B,WAAW,EAAE;YACb,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YACzG,CAAC,CAAC;SACH,CAAC,CAAC;QACH,OAAO,GAAG,GAAG,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,wEAAwE;QACxE,qDAAqD;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,oEAAoE;QACpE,oEAAoE;QACpE,wDAAwD;QACxD,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAChC,CAAC"}

package/dist/http/assistant.d.ts

@@ -4,6 +4,14 @@ import { type AssistantModelMessage } from "../assistant/model.js";
 import type { AuditEmitter } from "./audit.js";
 import type { HostedConfig } from "./config.js";
 import type { McpStore } from "./store.js";
+/**
+ * How the assistant may speak about the Conscious Loop in this session:
+ *   offered   — the environment offers it and this session holds loop tools;
+ *   gated     — the environment does not offer it (everywhere but development);
+ *   no_access — offered here, but this member's role grants no loop tool.
+ */
+export type LoopAvailability = "offered" | "gated" | "no_access";
+export declare function loopAvailability(tools: ReadonlySet<string>): LoopAvailability;
 export declare function resolveSessionTools(client: BiosClient, orgId: string, workspaceId: string): Promise<Set<string>>;
 interface ResourceReference {
     kind: "dataset" | "training" | "deployment" | "checkpoint" | "integration" | "booking";
@@ -17,7 +25,24 @@ interface AssistantDeps {
     fetchImpl?: typeof fetch;
 }
 export declare function normalizeAssistantMessages(value: unknown): AssistantModelMessage[];
+export declare function systemPrompt(toolsEnabled: boolean, loop: LoopAvailability): string;
 export declare function extractResourceReferences(toolName: string, text: string): ResourceReference[];
+/** Called on SIGTERM: running segments stop at the next step boundary and hand off. */
+export declare function beginAssistantDrain(): void;
+/** Expiry of the caller's session JWT, read from its exp claim (the gateway still verifies it). */
+export declare function sessionTokenExpiresAt(authorization: string): number | null;
+/**
+ * Middle-out history compaction, front of the middle first (the same rule the
+ * serverless gateway applies in canon/compact.go): the first message (the task
+ * and any pasted document) is kept, the latest user message and everything after
+ * it are kept, and whole turns are dropped starting just after the head and
+ * moving forward until the history fits. An assistant message is always dropped
+ * together with the tool results that answer it, so the transcript stays valid.
+ */
+export declare function compactHistory(messages: AssistantModelMessage[], limit: number): {
+    messages: AssistantModelMessage[];
+    dropped: number;
+};
 export declare function createAssistantCapabilitiesHandler(deps: AssistantDeps): (req: Request, res: Response) => Promise<void>;
 export declare function createAssistantChatHandler(deps: AssistantDeps): (req: Request, res: Response) => Promise<void>;
 export {};

package/dist/http/assistant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assistant.d.ts","sourceRoot":"","sources":["../../src/http/assistant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW9C,OAAO,EAIL,KAAK,qBAAqB,EAG3B,MAAM,uBAAuB,CAAC;AAY/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAyF3C,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAEtH;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,SAAS,CAAC;IACvF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,YAAY,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAwFD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,EAAE,CAqClF;AAsND,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CA2B7F;AA4GD,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,aAAa,IACxB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAoDxF;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,IACxB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CA6WhF"}
+{"version":3,"file":"assistant.d.ts","sourceRoot":"","sources":["../../src/http/assistant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW9C,OAAO,EAIL,KAAK,qBAAqB,EAG3B,MAAM,uBAAuB,CAAC;AAY/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA0G3C;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAEjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAG7E;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAEtH;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,SAAS,CAAC;IACvF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,YAAY,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAwFD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,EAAE,CAqClF;AAsJD,wBAAgB,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAuBlF;AA2DD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CA2B7F;AAoGD,uFAAuF;AACvF,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,mGAAmG;AACnG,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU1E;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAwBvI;AAWD,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,aAAa,IACxB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAoDxF;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,IACxB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CA2ZhF"}