MCO Runtime Architecture

Explicit provider selection, policy-bound execution, parallel orchestration, and raw-answer evidence

MCO Runtime Architecture Explicit provider selection, policy-bound execution, parallel orchestration, and raw-answer evidence Callers · human · coding agent · Architecture component Callers human · coding agent Entry Surfaces · npm · Python CLI · MCP · MCO local package / Python runtime · bin/mco.js · mco Entry Surfaces npm · Python CLI · MCP bin/mco.js · mco Command Router · run · review · doctor · MCO local package / Python runtime · runtime.cli Command Router run · review · doctor runtime.cli Config + Policy · scope · permissions · risk · MCO local package / Python runtime › explicit execution-policy boundary · read_only · write · yolo Config + Policy scope · permissions · risk read_only · write · yolo Invocation Workflow · parallel · chain · debate · MCO local package / Python runtime › explicit execution-policy boundary · timeouts · cancellation Invocation Workflow parallel · chain · debate timeouts · cancellation Adapter Registry · detect · run · poll · cancel · MCO local package / Python runtime › explicit execution-policy boundary · ProviderAdapter contract Adapter Registry detect · run · poll · cancel ProviderAdapter contract Transport Layer · shim stdout · ACP JSON-RPC · MCO local package / Python runtime › explicit execution-policy boundary · decode_transport Transport Layer shim stdout · ACP JSON-RPC decode_transport Provider CLIs · Claude · Codex · Pi · 7 more · Architecture component · native auth + sandbox Provider CLIs Claude · Codex · Pi · 7 more native auth + sandbox Session Daemon · detached worker + socket · MCO local package / Python runtime · queue · retry · cancel Session Daemon detached worker + socket queue · retry · cancel Session State · .mco/sessions · MCO local package / Python runtime · state · history · logs Session State .mco/sessions state · history · logs Invocation Artifacts · answers · result.md · run.json · MCO local package / Python runtime · per-stage evidence Invocation Artifacts answers · result.md · run.json per-stage evidence Output Consumers · terminal · agent · CI · Architecture component · text · JSON · JSONL Output Consumers terminal · agent · CI text · JSON · JSONL task + selected agents validated scope provider contract native CLI start · send · resume socket + history decode + persist raw evidence MCO local package / Python runtime explicit execution-policy boundary Legend Frontend Backend Database Security Message bus External

Explicit Entrypoints

  • • The npm wrapper launches the same Python runtime used by the console script
  • • CLI and optional MCP tools converge on one invocation workflow
  • • MCO never silently chooses the provider team

Policy Before Process

  • • Repository scope and allow-paths are normalized before dispatch
  • • read_only, write, and yolo map to provider-native permissions
  • • Timeout, cancellation, and partial success stay explicit

Opaque Answers, Durable Evidence

  • • Adapters normalize transport without inventing findings or consensus
  • • Each invocation keeps its raw answer and operational status
  • • Markdown artifacts and JSON metadata remain available to humans and CI