@femtomc/mu-agent 26.2.43 → 26.2.45

package/dist/extensions/index.d.ts

@@ -3,6 +3,7 @@ export { brandingExtension } from "./branding.js";
 export { eventLogExtension } from "./event-log.js";
 export { heartbeatsExtension } from "./heartbeats.js";
 export { messagingSetupExtension } from "./messaging-setup.js";
+export { operatorCommandExtension } from "./operator-command.js";
 export { orchestrationRunsExtension } from "./orchestration-runs.js";
 export { orchestrationRunsReadOnlyExtension } from "./orchestration-runs-readonly.js";
 export { serverToolsExtension, serverToolsReadOnlyExtension } from "./server-tools.js";

package/dist/extensions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/extensions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAyB1E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,UAE/B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,UAElC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/extensions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AA0B1E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,UAE/B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,UAElC,CAAC"}

package/dist/extensions/index.js

@@ -3,6 +3,7 @@ export { brandingExtension } from "./branding.js";
 export { eventLogExtension } from "./event-log.js";
 export { heartbeatsExtension } from "./heartbeats.js";
 export { messagingSetupExtension } from "./messaging-setup.js";
+export { operatorCommandExtension } from "./operator-command.js";
 export { orchestrationRunsExtension } from "./orchestration-runs.js";
 export { orchestrationRunsReadOnlyExtension } from "./orchestration-runs-readonly.js";
 export { serverToolsExtension, serverToolsReadOnlyExtension } from "./server-tools.js";
@@ -22,6 +23,7 @@ const OPERATOR_EXTENSION_MODULE_BASENAMES = [
     "event-log",
     "messaging-setup",
     "orchestration-runs-readonly",
+    "operator-command",
 ];
 const RUNTIME_EXTENSION = import.meta.url.endsWith(".ts") ? "ts" : "js";
 function resolveBundledExtensionPath(moduleBasename) {

package/dist/extensions/operator-command.d.ts

@@ -0,0 +1,14 @@
+/**
+ * mu_command — Operator mutation tool.
+ *
+ * Registered only in operator sessions. The LLM calls this tool with a
+ * structured command proposal instead of emitting fragile text directives.
+ * The tool itself does nothing except confirm receipt — the actual command
+ * is captured by the PiMessagingOperatorBackend subscriber on
+ * tool_execution_start and routed through the existing broker/audit pipeline.
+ */
+import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+export declare const MU_COMMAND_TOOL_NAME = "mu_command";
+export declare function operatorCommandExtension(pi: ExtensionAPI): void;
+export default operatorCommandExtension;
+//# sourceMappingURL=operator-command.d.ts.map

package/dist/extensions/operator-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-command.d.ts","sourceRoot":"","sources":["../../src/extensions/operator-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAGlE,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,QAuCxD;AAED,eAAe,wBAAwB,CAAC"}

package/dist/extensions/operator-command.js

@@ -0,0 +1,52 @@
+/**
+ * mu_command — Operator mutation tool.
+ *
+ * Registered only in operator sessions. The LLM calls this tool with a
+ * structured command proposal instead of emitting fragile text directives.
+ * The tool itself does nothing except confirm receipt — the actual command
+ * is captured by the PiMessagingOperatorBackend subscriber on
+ * tool_execution_start and routed through the existing broker/audit pipeline.
+ */
+import { StringEnum } from "@mariozechner/pi-ai";
+import { Type } from "@sinclair/typebox";
+export const MU_COMMAND_TOOL_NAME = "mu_command";
+export function operatorCommandExtension(pi) {
+    const CommandParams = Type.Object({
+        kind: StringEnum([
+            "status",
+            "ready",
+            "issue_list",
+            "issue_get",
+            "forum_read",
+            "run_list",
+            "run_status",
+            "run_start",
+            "run_resume",
+            "run_interrupt",
+        ]),
+        prompt: Type.Optional(Type.String({ description: "Prompt for run_start" })),
+        issue_id: Type.Optional(Type.String({ description: "Issue ID for issue_get" })),
+        topic: Type.Optional(Type.String({ description: "Topic for forum_read" })),
+        limit: Type.Optional(Type.Number({ description: "Limit for forum_read / run_resume" })),
+        root_issue_id: Type.Optional(Type.String({ description: "Root issue ID for run_status / run_resume / run_interrupt" })),
+        max_steps: Type.Optional(Type.Number({ description: "Max steps for run_start / run_resume" })),
+    });
+    pi.registerTool({
+        name: MU_COMMAND_TOOL_NAME,
+        label: "Command",
+        description: [
+            "Propose an approved mu command for execution.",
+            "This is the ONLY way to trigger mutations (starting runs, resuming runs, interrupting runs).",
+            "Read-only queries (status, issue_list, etc.) can also be proposed here.",
+            "The command will be validated and executed through the control-plane pipeline.",
+        ].join(" "),
+        parameters: CommandParams,
+        async execute(_toolCallId, params) {
+            return {
+                content: [{ type: "text", text: `Command proposal accepted: ${params.kind}` }],
+                details: { kind: params.kind },
+            };
+        },
+    });
+}
+export default operatorCommandExtension;

package/dist/operator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,eAAe,GAAG,gCAAgC,CAAC;AACxD,KAAK,eAAe,GAAG,gCAAgC,CAAC;AAIxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA6BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAG1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAOxF,MAAM,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACzB;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EACH,mBAAmB,GACnB,4BAA4B,GAC5B,yBAAyB,GACzB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG;IACvC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAaF,qBAAa,qBAAqB;;gBAId,IAAI,GAAE,yBAA8B;IAKhD,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GACjF;QACA,IAAI,EAAE,UAAU,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACnB,GACD;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EACH,4BAA4B,GAC5B,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;KAChB;CAsGJ;AAED,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B,CAAC;AAsBF,qBAAa,wBAAwB;;gBASjB,IAAI,EAAE,4BAA4B;IAoBxC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgFtG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAIlC;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAgJ1C,qBAAa,0BAA2B,YAAW,wBAAwB;;gBAcvD,IAAI,GAAE,8BAAmC;IA4H/C,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA2GlF,OAAO,IAAI,IAAI;CAKtB"}
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,eAAe,GAAG,gCAAgC,CAAC;AACxD,KAAK,eAAe,GAAG,gCAAgC,CAAC;AAIxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA6BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAG1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAGxF,MAAM,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACzB;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EACH,mBAAmB,GACnB,4BAA4B,GAC5B,yBAAyB,GACzB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG;IACvC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAaF,qBAAa,qBAAqB;;gBAId,IAAI,GAAE,yBAA8B;IAKhD,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GACjF;QACA,IAAI,EAAE,UAAU,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACnB,GACD;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EACH,4BAA4B,GAC5B,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;KAChB;CAsGJ;AAED,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B,CAAC;AAsBF,qBAAa,wBAAwB;;gBASjB,IAAI,EAAE,4BAA4B;IAoBxC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgFtG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAIlC;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAoC1C,qBAAa,0BAA2B,YAAW,wBAAwB;;gBAcvD,IAAI,GAAE,8BAAmC;IA4H/C,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAmFlF,OAAO,IAAI,IAAI;CAKtB"}

package/dist/operator.js

@@ -39,10 +39,6 @@ export const OperatorBackendTurnResultSchema = z.discriminatedUnion("kind", [
     z.object({ kind: z.literal("respond"), message: z.string().trim().min(1).max(2000) }),
     z.object({ kind: z.literal("command"), command: OperatorApprovedCommandSchema }),
 ]);
-const OperatorDecisionEnvelopeSchema = z.discriminatedUnion("kind", [
-    z.object({ kind: z.literal("respond"), message: z.string().trim().min(1).max(2000) }),
-    z.object({ kind: z.literal("command"), command: OperatorApprovedCommandSchema }),
-]);
 function splitPromptIntoTokens(prompt) {
     return prompt
         .split(/\s+/)
@@ -279,107 +275,7 @@ export class MessagingOperatorRuntime {
     }
 }
 export { DEFAULT_OPERATOR_SYSTEM_PROMPT };
-const OPERATOR_COMMAND_PREFIX = "MU_COMMAND:";
-const OPERATOR_DECISION_PREFIX = "MU_DECISION:";
-function stripOperatorDirectiveLines(text) {
-    return text
-        .split(/\r?\n/)
-        .filter((line) => {
-        const trimmed = line.trim();
-        return !(trimmed.startsWith(OPERATOR_COMMAND_PREFIX) || trimmed.startsWith(OPERATOR_DECISION_PREFIX));
-    })
-        .join("\n")
-        .trim();
-}
-function parseOperatorDirective(text) {
-    const whole = text.trim();
-    if (whole.startsWith("{") && whole.endsWith("}")) {
-        try {
-            const parsed = JSON.parse(whole);
-            const envelope = OperatorDecisionEnvelopeSchema.safeParse(parsed);
-            if (envelope.success) {
-                return envelope.data.kind === "command"
-                    ? { kind: "command", command: envelope.data.command }
-                    : { kind: "respond", message: envelope.data.message };
-            }
-            const legacy = OperatorApprovedCommandSchema.safeParse(parsed);
-            if (legacy.success) {
-                return { kind: "command", command: legacy.data };
-            }
-        }
-        catch {
-            // fall through to line-based directives / plain text fallback.
-        }
-    }
-    const lines = text.split(/\r?\n/);
-    for (const line of lines) {
-        const trimmed = line.trim();
-        if (trimmed.startsWith(OPERATOR_DECISION_PREFIX)) {
-            const payloadText = trimmed.slice(OPERATOR_DECISION_PREFIX.length).trim();
-            if (payloadText.length === 0) {
-                return {
-                    kind: "invalid",
-                    reason: "operator_decision_directive_missing_payload",
-                    fallbackMessage: stripOperatorDirectiveLines(text),
-                };
-            }
-            let parsed;
-            try {
-                parsed = JSON.parse(payloadText);
-            }
-            catch (err) {
-                return {
-                    kind: "invalid",
-                    reason: `operator_decision_directive_invalid_json: ${err instanceof Error ? err.message : String(err)}`,
-                    fallbackMessage: stripOperatorDirectiveLines(text),
-                };
-            }
-            const envelope = OperatorDecisionEnvelopeSchema.safeParse(parsed);
-            if (!envelope.success) {
-                return {
-                    kind: "invalid",
-                    reason: `operator_decision_directive_invalid_payload: ${envelope.error.message}`,
-                    fallbackMessage: stripOperatorDirectiveLines(text),
-                };
-            }
-            return envelope.data.kind === "command"
-                ? { kind: "command", command: envelope.data.command }
-                : { kind: "respond", message: envelope.data.message };
-        }
-        if (!trimmed.startsWith(OPERATOR_COMMAND_PREFIX)) {
-            continue;
-        }
-        const payloadText = trimmed.slice(OPERATOR_COMMAND_PREFIX.length).trim();
-        if (payloadText.length === 0) {
-            return {
-                kind: "invalid",
-                reason: "operator_command_directive_missing_payload",
-                fallbackMessage: stripOperatorDirectiveLines(text),
-            };
-        }
-        let parsed;
-        try {
-            parsed = JSON.parse(payloadText);
-        }
-        catch (err) {
-            return {
-                kind: "invalid",
-                reason: `operator_command_directive_invalid_json: ${err instanceof Error ? err.message : String(err)}`,
-                fallbackMessage: stripOperatorDirectiveLines(text),
-            };
-        }
-        const command = OperatorApprovedCommandSchema.safeParse(parsed);
-        if (!command.success) {
-            return {
-                kind: "invalid",
-                reason: `operator_command_directive_invalid_payload: ${command.error.message}`,
-                fallbackMessage: stripOperatorDirectiveLines(text),
-            };
-        }
-        return { kind: "command", command: command.data };
-    }
-    return { kind: "none" };
-}
+const MU_COMMAND_TOOL_NAME = "mu_command";
 function buildOperatorPrompt(input) {
     return [
         `[Messaging context]`,
@@ -516,7 +412,9 @@ export class PiMessagingOperatorBackend {
         const sessionRecord = await this.#resolveSession(input.sessionId, input.inbound.repo_root);
         const session = sessionRecord.session;
         let assistantText = "";
+        let capturedCommand = null;
         const unsub = session.subscribe((event) => {
+            // Capture assistant text for fallback responses.
             if (event?.type === "message_end" && event?.message?.role === "assistant") {
                 const msg = event.message;
                 if (typeof msg.text === "string") {
@@ -536,6 +434,13 @@ export class PiMessagingOperatorBackend {
                         assistantText = parts.join("\n");
                 }
             }
+            // Capture mu_command tool calls — structured command proposals.
+            if (event?.type === "tool_execution_start" && event?.toolName === MU_COMMAND_TOOL_NAME) {
+                const parsed = OperatorApprovedCommandSchema.safeParse(event.args);
+                if (parsed.success) {
+                    capturedCommand = parsed.data;
+                }
+            }
         });
         const timeoutPromise = new Promise((_, reject) => {
             setTimeout(() => reject(new Error("pi operator timeout")), this.#timeoutMs);
@@ -558,6 +463,16 @@ export class PiMessagingOperatorBackend {
             unsub();
             sessionRecord.lastUsedAtMs = Math.trunc(this.#nowMs());
         }
+        // If the operator called mu_command, use the captured structured command.
+        if (capturedCommand) {
+            await this.#auditTurn(input, {
+                outcome: "command",
+                command: capturedCommand,
+                messagePreview: assistantText,
+            });
+            return { kind: "command", command: capturedCommand };
+        }
+        // Otherwise treat the assistant text as a plain response.
         const message = assistantText.trim();
         if (!message) {
             await this.#auditTurn(input, {
@@ -566,57 +481,12 @@ export class PiMessagingOperatorBackend {
             });
             throw new Error("operator_empty_response");
         }
-        const parsed = parseOperatorDirective(message);
-        switch (parsed.kind) {
-            case "command":
-                await this.#auditTurn(input, {
-                    outcome: "command",
-                    command: parsed.command,
-                    messagePreview: message,
-                });
-                return {
-                    kind: "command",
-                    command: parsed.command,
-                };
-            case "respond": {
-                const responseMessage = parsed.message.trim().slice(0, 2000);
-                if (!SAFE_RESPONSE_RE.test(responseMessage)) {
-                    const fallback = buildOperatorFailureFallbackMessage("operator_invalid_response_payload");
-                    await this.#auditTurn(input, {
-                        outcome: "invalid_directive",
-                        reason: "operator_invalid_response_payload",
-                        messagePreview: message,
-                    });
-                    return { kind: "respond", message: fallback };
-                }
-                await this.#auditTurn(input, {
-                    outcome: "respond",
-                    messagePreview: responseMessage,
-                });
-                return { kind: "respond", message: responseMessage };
-            }
-            case "invalid": {
-                const fallbackMessage = parsed.fallbackMessage.trim();
-                const responseMessage = fallbackMessage.length > 0
-                    ? fallbackMessage.slice(0, 2000)
-                    : buildOperatorFailureFallbackMessage("operator_invalid_command_directive");
-                await this.#auditTurn(input, {
-                    outcome: "invalid_directive",
-                    reason: parsed.reason,
-                    messagePreview: message,
-                });
-                return { kind: "respond", message: responseMessage };
-            }
-            case "none":
-            default: {
-                const responseMessage = message.slice(0, 2000);
-                await this.#auditTurn(input, {
-                    outcome: "respond",
-                    messagePreview: responseMessage,
-                });
-                return { kind: "respond", message: responseMessage };
-            }
-        }
+        const responseMessage = message.slice(0, 2000);
+        await this.#auditTurn(input, {
+            outcome: "respond",
+            messagePreview: responseMessage,
+        });
+        return { kind: "respond", message: responseMessage };
     }
     dispose() {
         for (const sessionId of [...this.#sessions.keys()]) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@femtomc/mu-agent",
-  "version": "26.2.43",
+  "version": "26.2.45",
   "description": "Shared agent runtime for mu chat, orchestration roles, and serve extensions.",
   "keywords": [
     "mu",
@@ -23,7 +23,7 @@
     "prompts/**"
   ],
   "dependencies": {
-    "@femtomc/mu-core": "26.2.43",
+    "@femtomc/mu-core": "26.2.45",
     "@mariozechner/pi-agent-core": "^0.52.12",
     "@mariozechner/pi-ai": "^0.52.12",
     "@mariozechner/pi-coding-agent": "^0.52.12",

package/prompts/operator.md

@@ -1,16 +1,19 @@
-# Mu Operator
-
-You are mu, the operator assistant for the mu orchestration platform.
-
-## Mission
+You are an operator: you help users interact with and utilize all the capabilities that mu has to offer.
 
+Mission:
+- Free flowing discussion with users about their interests.
+- Help users with any coding tasks they ask you to handle directly.
 - Help users inspect repository/control-plane state.
 - Help users choose safe next actions.
-- When needed, propose approved operator commands.
+- When needed, propose approved commands using the mu_command tool.
 
-## Tools
+Available tools:
+- read: Read file contents
+- bash: Execute bash commands
+- edit: Make surgical edits to files
+- write: Create or overwrite files
 
-Use available read/diagnostic tools:
+You also have access to specialized read/diagnostic tools:
 - `mu_status`
 - `mu_control_plane`
 - `mu_issues`
@@ -21,17 +24,16 @@ Use available read/diagnostic tools:
 - `mu_heartbeats`
 - `mu_messaging_setup`
 
-## Hard Constraints
-
-- Never perform mutations directly through tools in operator mode.
-- Mutating actions must flow through approved command proposals.
-- If a command is needed, output exactly one line prefixed with `MU_DECISION:` and compact JSON.
-
-## Output Contract
-
-Command envelope example:
+Hard Constraints:
+- Never perform mutations directly through read/write tools.
+- Mutating actions must flow through the `mu_command` tool.
+- Use the `mu_command` tool to propose commands. It accepts structured parameters — do NOT emit raw JSON directives in your text output.
 
-`MU_DECISION: {"kind":"command","command":{"kind":"run_start","prompt":"ship release"}}`
+mu_command tool usage:
+- Call `mu_command` with `kind` set to the command type and relevant parameters.
+- Example: `mu_command({ kind: "run_start", prompt: "ship release" })`
+- Example: `mu_command({ kind: "status" })`
+- Example: `mu_command({ kind: "issue_get", issue_id: "mu-abc123" })`
 
 Allowed command kinds:
 - `status`
@@ -47,4 +49,3 @@ Allowed command kinds:
 
 For normal answers:
 - Respond in plain text (no directive prefix).
-- Be concise, practical, and actionable.

package/prompts/orchestrator.md

@@ -1,15 +1,12 @@
-# Mu Orchestrator
+You are an orchestrator: you help by engaging in planning and review as part of the orchestration engine within mu.
 
-You are mu's orchestrator: the hierarchical planner for the issue DAG.
-
-## Mission
-
-- Decompose assigned issues into executable worker issues.
+Mission:
+- Read and think carefully about the issue assigned to you. Use mu's CLI to explore related issues, and the forum for relevant conversation.
+- Decompose your assigned issue into executable worker issues, or further orchestrator issues if multi-layer decomposition is appropriate.
 - Define ordering via dependencies.
 - Move planning state forward by closing expanded planning nodes.
 
-## Hard Constraints
-
+Hard Constraints:
 1. You MUST NOT execute work directly. No code changes, no file edits, no git commits.
 2. You MUST decompose the assigned issue into worker child issues.
 3. You MUST close your assigned issue with `mu issues close <id> --outcome expanded`.
@@ -18,8 +15,7 @@ You are mu's orchestrator: the hierarchical planner for the issue DAG.
 
 If the task looks atomic, create exactly one worker child issue rather than doing the work yourself.
 
-## Workflow
-
+Workflow:
 1. Inspect context:
    - `mu issues get <id>`
    - `mu forum read issue:<id> --limit 20`
@@ -31,9 +27,8 @@ If the task looks atomic, create exactly one worker child issue rather than doin
 4. Close yourself:
    - `mu issues close <id> --outcome expanded`
 
-## Guardrails
-
+Guardrails:
 - The only valid orchestrator close outcome is `expanded`.
 - Never close with `success`, `failure`, `needs_work`, or `skipped`.
 - Keep plans small, explicit, and testable.
-- Be concise.
+- Plans should include proposed evidence for successful completion.

package/prompts/worker.md

@@ -1,20 +1,21 @@
-# Mu Worker
-
-You are mu's worker. You execute exactly one atomic issue end-to-end.
-
-## Mission
+You are a worker. You execute exactly one atomic issue end-to-end.
 
+Mission:
 - Implement the work described in your assigned issue.
 - Keep scope tight to the issue specification.
 - Verify outcomes and close with a terminal result.
 
-## Hard Constraints
+Available tools:
+- read: Read file contents
+- bash: Execute bash commands
+- edit: Make surgical edits to files
+- write: Create or overwrite files
 
+Hard Constraints:
 - Do NOT create child issues — that is the orchestrator's job.
 - If the issue is too large/unclear, close with `--outcome needs_work` and explain what is missing.
 
-## Workflow
-
+Workflow:
 1. Inspect:
    - `mu issues get <id>`
    - `mu forum read issue:<id> --limit 20`
@@ -27,8 +28,7 @@ You are mu's worker. You execute exactly one atomic issue end-to-end.
 5. Log key notes:
    - `mu forum post issue:<id> -m "..." --author worker`
 
-## Guardrails
-
+Guardrails:
 - Prefer concrete evidence over claims (test output, build output, repro checks).
 - Report what changed and why.
 - Be concise.