@agentistics/mcp 2.104.4 → 2.105.0

package/dist/agentistics-mcp.js

@@ -787,6 +787,8 @@ var HARNESS_MODELS = {
   opencode: []
 };
 var SPAWN_SPECS_MODEL_IDS = Object.fromEntries(Object.entries(HARNESS_MODELS).map(([h, opts]) => [h, opts.map((o) => o.id)]));
+// ../core/src/taskThreads.ts
+var LIVE = new Set(["working", "waiting", "waiting-approval"]);
 // ../core/src/attachments.ts
 var IMAGE_EXTENSIONS = new Set(["png", "jpg", "jpeg", "gif", "webp", "bmp", "svg", "avif"]);
 // ../core/src/pasteSanitize.ts
@@ -1314,20 +1316,50 @@ function createAgentAuditSink(opts = {}) {
 }
 
 // task-comment-args.ts
-function taskCommentRequest(args) {
+function taskCommentRequest(args, session) {
   const a = args ?? {};
   const subtaskId = typeof a.subtaskId === "string" && a.subtaskId.trim() ? a.subtaskId.trim() : undefined;
+  const threadId = typeof a.threadId === "string" && a.threadId.trim() ? a.threadId.trim() : undefined;
+  const threadTitle = typeof a.threadTitle === "string" && a.threadTitle.trim() ? a.threadTitle.trim() : undefined;
+  const threadKind = a.threadKind === "handback" || a.threadKind === "block" ? a.threadKind : undefined;
+  const kind = a.kind === "handback" || a.kind === "block" ? a.kind : undefined;
   return {
     path: `/api/tasks/${encodeURIComponent(String(a.ref))}/comments`,
     payload: {
       body: typeof a.body === "string" ? a.body : "",
       author: typeof a.author === "string" && a.author ? a.author : "assistant",
       ...subtaskId ? { subtaskId } : {},
-      ...Array.isArray(a.attachments) && a.attachments.length > 0 ? { attachments: a.attachments } : {}
+      ...Array.isArray(a.attachments) && a.attachments.length > 0 ? { attachments: a.attachments } : {},
+      ...threadId ? { threadId } : threadTitle ? { newThread: { title: threadTitle, kind: threadKind ?? "handback" } } : {},
+      ...session ? { session } : {},
+      ...kind ? { kind } : {}
     }
   };
 }
 
+// session-proof.ts
+import { createHmac } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join2 } from "node:path";
+function sessionProofToken(key, id) {
+  return createHmac("sha256", key).update(`agentop-session:${id}`).digest("hex");
+}
+function sessionProof(env, readKey = (p) => readFileSync(p, "utf8")) {
+  const id = env.AGENTOP_MANAGED_ID;
+  if (!id)
+    return;
+  const dir = env.AGENTISTICS_DIR || join2(env.HOME || homedir2(), ".agentistics");
+  try {
+    const key = Buffer.from(readKey(join2(dir, "session-identity.key")).trim(), "hex");
+    if (key.length !== 32)
+      return;
+    return { id, token: sessionProofToken(key, id) };
+  } catch {
+    return;
+  }
+}
+
 // legacy-analytics.ts
 function legacySummary(data, harness) {
   const unified = !harness || harness === "all";
@@ -1875,7 +1907,7 @@ var TOOLS = [
   },
   {
     name: "agentistics_task_comment",
-    description: "BETA — Agentask (the task board) is new and still changing; its shapes may move between releases. Leave a comment on a task — or on ONE of its subtasks or subtask GROUPS by passing `subtaskId` (a group's own id is allowed; omit it to comment on the task itself). `body` may be empty when `attachments` is given. Comments carry attachments as REFERENCES into the chat's own attachment store (`{name, path}`; agentistics_task returns them on each comment with a `url` that serves the file) — there is no second store. Use it to tell the person and the other assistants what you did, what you found, or what you are blocked on; comment where the work is (the subtask you are on) rather than on the whole task. An unknown, deleted or other task's `subtaskId` is REFUSED with a sentence (422, `no_such_subtask` / `wrong_delivery`) — never silently filed on the task. Threads read downward: a subtask's thread is its own comments, a group's thread is its own plus its members', the task's is everything. The activity log names the target. `author` is free text — say who you are (e.g. 'claude:3f5f').",
+    description: "BETA — Agentask (the task board) is new and still changing; its shapes may move between releases. Leave a comment on a task — or on ONE of its subtasks or subtask GROUPS by passing `subtaskId` (a group's own id is allowed; omit it to comment on the task itself). `body` may be empty when `attachments` is given. Comments carry attachments as REFERENCES into the chat's own attachment store (`{name, path}`; agentistics_task returns them on each comment with a `url` that serves the file) — there is no second store. Use it to tell the person and the other assistants what you did, what you found, or what you are blocked on; comment where the work is (the subtask you are on) rather than on the whole task. An unknown, deleted or other task's `subtaskId` is REFUSED with a sentence (422, `no_such_subtask` / `wrong_delivery`) — never silently filed on the task. Threads read downward: a subtask's thread is its own comments, a group's thread is its own plus its members', the task's is everything. The activity log names the target. `author` is free text — say who you are (e.g. 'claude:3f5f'). THREADS: a thread is a topic on the task; post into one with `threadId`, or open one with `threadTitle` (sessions: handbacks and blocks only). A thread is a RECORD, not a chat: a comment there reaches nobody by itself, so never wait for an answer in a thread. When you post in a thread you join it; the person may explicitly SEND a message from it, which arrives in your own chat starting `[Agentask · … · sent by the owner]` — answer there, in your chat, which is where conversations live. If you need something from the person, ask in your own chat as always.",
     inputSchema: {
       type: "object",
       properties: {
@@ -1886,6 +1918,24 @@ var TOOLS = [
           type: "string",
           description: "Optional target: a subtask or subtask GROUP id of this task (from agentistics_task's `subtasks`). Omit for the task itself."
         },
+        threadId: {
+          type: "string",
+          description: "Optional: post INTO this thread (an id from agentistics_task's `threads`). Reply in the thread the person or another session already opened about this."
+        },
+        threadTitle: {
+          type: "string",
+          description: "Optional: OPEN a new thread with this title and post the comment as its first message. Sessions may open threads ONLY for a handback or a block (`threadKind`)."
+        },
+        threadKind: {
+          type: "string",
+          enum: ["handback", "block"],
+          description: "The kind of the thread opened with `threadTitle`. Default handback."
+        },
+        kind: {
+          type: "string",
+          enum: ["handback", "block"],
+          description: "Optional tag on THIS comment: a handback (you delivered something) or a block (you are stuck on something). Omit for a plain note."
+        },
         attachments: {
           type: "array",
           description: "Optional files left with the comment, as {name, path} references to files already in agentop's attachments directory (the path the chat upload returns). Paths outside it are dropped. At most 10.",
@@ -2385,7 +2435,7 @@ async function callTool(req) {
         return { content: [{ type: "text", text: JSON.stringify(body, null, 2) }] };
       }
       case "agentistics_task_comment": {
-        const body = await apiSend("POST", `/api/tasks/${encodeURIComponent(String(args?.ref))}/comments`, taskCommentRequest(args).payload);
+        const body = await apiSend("POST", `/api/tasks/${encodeURIComponent(String(args?.ref))}/comments`, taskCommentRequest(args, sessionProof(process.env)).payload);
         return { content: [{ type: "text", text: JSON.stringify(body, null, 2) }] };
       }
       case "agentistics_task_subtask": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentistics/mcp",
-  "version": "2.104.4",
+  "version": "2.105.0",
   "description": "Agentistics MCP server — Claude Code analytics for Claude Desktop and Claude Code",
   "type": "module",
   "main": "./dist/agentistics-mcp.js",