Declare the MiniMax Code agent-host view

[SaladDay]

The MiniMax Code adapter (mcode) declares its agent-host view: lane L5-mcode, on the Runtime–Harness View declaration (#350) and the shared viewloader (#355). Nothing launches a view yet. The agent-host library (L5a) and the end-to-end qualification (L7) follow.

View declaration

Discovery declares a view when mcode is available and SupportsExecution, and checks it with View.Validate. If the declaration or the loader fails, discovery prints the reason and declares no view.

• Closure:
  • node: Node's resolved directory;
  • mcode-harness: the bridge directory, which must contain native/cli.js;
  • the viewloader fragment, for a dynamic node.
• Masks:
  • /assets and /opt/assets (directories);
  • /install.json and /opt/install.json (files);
  • /node_modules, so Node never falls back to the world's modules;
  • the loader masks from viewloader.
• LocalExec: node.
• Shims: git and rg.
• ShimPaths: /bin/bash.
• ForwardEnv: empty.
• Proxy: ViewProxyNone.

Executor in a view

• Launch: node runs [cli.js, acp] through ViewSession.Launch, in the world workspace.
• Environment: closed.
  • PATH is the shim directory.
  • HOME and MINIMAX_DATA_DIR are home/data.
  • PI_CODING_AGENT_DIR is home/pi-agent.
  • TMPDIR is home/tmp.
  • The MAVIS_BUILTIN_*_DIR variables point at the closure assets.
  • LD_LIBRARY_PATH comes from the loader fragment, and the tool-policy variables are kept.
• Model: config.yaml holds the gateway URL with no path, and the placeholder key.
• Workspace profile: there is no toolEnvFile and no local readiness check. The worker stays local.
• MCP: taken only from ViewSession.MCP. A stdio binding returns ErrUnsupportedOperation.
• Project .mcp.json: under protected-mcp-v1, patch-native.mjs makes the CLI ignore the workspace's project .mcp.json, so the Session's MCP comes only from the daemon.
• Session home: every create, write and read in the Session home goes through one os.Root. A link planted at data/config.yaml that points outside the home makes preparation fail.
• Rejected in a view, each with ErrUnsupportedOperation: Skills, read-only workspaces, restricted network, and enabled Subagents. The Subagent history reader has to run beside the CLI in the live view, and the protocol cannot start a second process in a live view yet. That protocol change is scheduled separately.

Checks

• View test: resolves the view through the registry. It checks the launch, the closed environment, the gateway config, the planted-link refusal and the Subagents rejection.
• Go:
  • go test ./apps/daemon/internal/agent/...;
  • -race on mcode and viewloader;
  • go vet ./apps/daemon/...;
  • gofmt;
  • the darwin and windows builds.
• Harness package: node --test packages/mcode-harness/*.test.mjs gives 7 passed and 4 skipped; the skipped tests need the packaged artifact.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}