@gemslibe/rbo 0.3.0 → 0.4.0

package/dist/rbo-mcp-stdio.js

@@ -7,7 +7,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // ../../packages/shared/dist/versions.js
-var RBO_STDIO_ADAPTER_VERSION = "0.2.0";
+var RBO_STDIO_ADAPTER_VERSION = "0.4.0";
 
 // ../../packages/shared/dist/errors.js
 import { z } from "zod";
@@ -686,6 +686,21 @@ var ARTIFACT_MATERIALIZE_INPUT = {
 var AGENT_PROBE_INPUT = {
   agent_id: z4.string().min(1)
 };
+var JOB_RUN_INPUT = {
+  command: z4.string().min(1).optional(),
+  project_root: z4.string().min(1).optional(),
+  job_id: z4.string().min(1).optional(),
+  cwd: z4.string().default("."),
+  timeout_seconds: z4.number().positive().max(3600).default(3600),
+  wait_seconds: z4.number().int().min(0).max(3600).optional(),
+  /** Max seconds this MCP response blocks; default keeps typical 60s clients safe. */
+  mcp_wait_slice_seconds: z4.number().int().min(1).max(55).default(50),
+  artifacts: JobRequestSchema.shape.artifacts,
+  risk_level: JobRequestSchema.shape.risk_level,
+  client_request_id: z4.string().min(1).optional(),
+  name: z4.string().optional(),
+  include_log_tail_lines: z4.number().int().min(0).max(1e3).default(80)
+};
 var MCP_TOOL_DEFS = [
   {
     name: "agents_list",
@@ -697,6 +712,11 @@ var MCP_TOOL_DEFS = [
     description: "Submit a build/test job and capture an immutable workspace snapshot.",
     inputShape: JOB_SUBMIT_INPUT
   },
+  {
+    name: "job_run",
+    description: "Run a command remotely (snapshot + execute). Waits up to mcp_wait_slice_seconds (default 50). If still running, returns resume:true \u2014 call again with the same job_id. Preferred for interactive AI clients.",
+    inputShape: JOB_RUN_INPUT
+  },
   {
     name: "job_confirm",
     description: "Confirm a destructive or hardware-risk job after snapshot capture.",
@@ -761,6 +781,32 @@ var CompatibilityMatrixSchema = z5.object({
 });
 
 // ../mcp-stdio/src/proxy.ts
+var STDIO_JOB_RUN_HEARTBEAT_MS = 5e3;
+function startProgressHeartbeat(input) {
+  const { progressToken, sendNotification } = input;
+  if (progressToken === void 0) {
+    return { stop: () => void 0 };
+  }
+  let progress = 0;
+  const prefix = input.messagePrefix ?? "job_run";
+  const timer = setInterval(() => {
+    progress += 1;
+    void sendNotification({
+      method: "notifications/progress",
+      params: {
+        progressToken,
+        progress,
+        message: `${prefix} waiting (heartbeat ${progress})`
+      }
+    }).catch(() => void 0);
+  }, input.intervalMs ?? STDIO_JOB_RUN_HEARTBEAT_MS);
+  timer.unref?.();
+  return {
+    stop: () => {
+      clearInterval(timer);
+    }
+  };
+}
 function createStdioProxyServer(options) {
   const server = new McpServer({
     name: "rbo-mcp-stdio",
@@ -771,21 +817,30 @@ function createStdioProxyServer(options) {
     server.registerTool(
       def.name,
       { description: def.description, inputSchema: def.inputShape },
-      async (args) => {
-        const response = await fetch(`${baseUrl}/internal/v1/tools/${def.name}`, {
-          method: "POST",
-          headers: {
-            "content-type": "application/json",
-            "x-rbo-client-id": options.clientId,
-            "x-rbo-client-transport": "stdio"
-          },
-          body: JSON.stringify(args ?? {})
-        });
-        const text = await response.text();
-        return {
-          content: [{ type: "text", text }],
-          isError: !response.ok
-        };
+      async (args, extra) => {
+        const heartbeat = def.name === "job_run" ? startProgressHeartbeat({
+          progressToken: extra._meta?.progressToken,
+          sendNotification: (notification) => extra.sendNotification(notification)
+        }) : { stop: () => void 0 };
+        try {
+          const response = await fetch(`${baseUrl}/internal/v1/tools/${def.name}`, {
+            method: "POST",
+            headers: {
+              "content-type": "application/json",
+              "x-rbo-client-id": options.clientId,
+              "x-rbo-client-transport": "stdio"
+            },
+            body: JSON.stringify(args ?? {}),
+            signal: extra.signal
+          });
+          const text = await response.text();
+          return {
+            content: [{ type: "text", text }],
+            isError: !response.ok
+          };
+        } finally {
+          heartbeat.stop();
+        }
       }
     );
   }

package/dist/rbo.js

@@ -14,9 +14,9 @@ var RBO_CONTROLLER_VERSION, RBO_AGENT_VERSION, RBO_STDIO_ADAPTER_VERSION, RBO_WI
 var init_versions = __esm({
   "../../packages/shared/dist/versions.js"() {
     "use strict";
-    RBO_CONTROLLER_VERSION = "0.2.0";
-    RBO_AGENT_VERSION = "0.2.0";
-    RBO_STDIO_ADAPTER_VERSION = "0.2.0";
+    RBO_CONTROLLER_VERSION = "0.4.0";
+    RBO_AGENT_VERSION = "0.4.0";
+    RBO_STDIO_ADAPTER_VERSION = "0.4.0";
     RBO_WIRE_PROTOCOL_MIN_VERSION = 1;
     RBO_WIRE_PROTOCOL_MAX_VERSION = 1;
     RBO_CONTROLLER_SCHEMA_VERSION = 3;
@@ -1636,7 +1636,7 @@ import { z as z4 } from "zod";
 function getMcpToolDef(name) {
   return MCP_TOOL_DEFS.find((def) => def.name === name);
 }
-var JOB_SUBMIT_INPUT, JOB_CONFIRM_INPUT, AGENTS_LIST_INPUT, JOB_GET_INPUT, JOB_WAIT_INPUT, JOB_LOGS_INPUT, JOB_CANCEL_INPUT, JOB_ARTIFACTS_INPUT, ARTIFACT_MATERIALIZE_INPUT, AGENT_PROBE_INPUT, MCP_TOOL_DEFS;
+var JOB_SUBMIT_INPUT, JOB_CONFIRM_INPUT, AGENTS_LIST_INPUT, JOB_GET_INPUT, JOB_WAIT_INPUT, JOB_LOGS_INPUT, JOB_CANCEL_INPUT, JOB_ARTIFACTS_INPUT, ARTIFACT_MATERIALIZE_INPUT, AGENT_PROBE_INPUT, JOB_RUN_INPUT, MCP_TOOL_DEFS;
 var init_mcp_tools = __esm({
   "../../packages/protocol/dist/mcp-tools.js"() {
     "use strict";
@@ -1680,6 +1680,21 @@ var init_mcp_tools = __esm({
     AGENT_PROBE_INPUT = {
       agent_id: z4.string().min(1)
     };
+    JOB_RUN_INPUT = {
+      command: z4.string().min(1).optional(),
+      project_root: z4.string().min(1).optional(),
+      job_id: z4.string().min(1).optional(),
+      cwd: z4.string().default("."),
+      timeout_seconds: z4.number().positive().max(3600).default(3600),
+      wait_seconds: z4.number().int().min(0).max(3600).optional(),
+      /** Max seconds this MCP response blocks; default keeps typical 60s clients safe. */
+      mcp_wait_slice_seconds: z4.number().int().min(1).max(55).default(50),
+      artifacts: JobRequestSchema.shape.artifacts,
+      risk_level: JobRequestSchema.shape.risk_level,
+      client_request_id: z4.string().min(1).optional(),
+      name: z4.string().optional(),
+      include_log_tail_lines: z4.number().int().min(0).max(1e3).default(80)
+    };
     MCP_TOOL_DEFS = [
       {
         name: "agents_list",
@@ -1691,6 +1706,11 @@ var init_mcp_tools = __esm({
         description: "Submit a build/test job and capture an immutable workspace snapshot.",
         inputShape: JOB_SUBMIT_INPUT
       },
+      {
+        name: "job_run",
+        description: "Run a command remotely (snapshot + execute). Waits up to mcp_wait_slice_seconds (default 50). If still running, returns resume:true \u2014 call again with the same job_id. Preferred for interactive AI clients.",
+        inputShape: JOB_RUN_INPUT
+      },
       {
         name: "job_confirm",
         description: "Confirm a destructive or hardware-risk job after snapshot capture.",
@@ -2067,11 +2087,11 @@ function describeWindowsExecutorResolution(options = {}) {
   }
   candidates.push(join11(moduleDir, WINDOWS_EXECUTOR_BINARY_NAME), join11(moduleDir, "..", WINDOWS_EXECUTOR_BINARY_NAME), join11(moduleDir, "..", "bin", WINDOWS_EXECUTOR_BINARY_NAME), join11(moduleDir, "../..", "bin", WINDOWS_EXECUTOR_BINARY_NAME));
   candidates.push(
-    join11(moduleDir, "../../../native/windows-executor/target/debug", WINDOWS_EXECUTOR_BINARY_NAME),
     join11(moduleDir, "../../../native/windows-executor/target/release", WINDOWS_EXECUTOR_BINARY_NAME),
+    join11(moduleDir, "../../../native/windows-executor/target/debug", WINDOWS_EXECUTOR_BINARY_NAME),
     // When bundled into apps/cli/dist/rbo.js, climb to repo root.
-    join11(moduleDir, "../../native/windows-executor/target/debug", WINDOWS_EXECUTOR_BINARY_NAME),
-    join11(moduleDir, "../../native/windows-executor/target/release", WINDOWS_EXECUTOR_BINARY_NAME)
+    join11(moduleDir, "../../native/windows-executor/target/release", WINDOWS_EXECUTOR_BINARY_NAME),
+    join11(moduleDir, "../../native/windows-executor/target/debug", WINDOWS_EXECUTOR_BINARY_NAME)
   );
   if (options.extraCandidates) {
     candidates.push(...options.extraCandidates);
@@ -2178,8 +2198,11 @@ async function writeJobScript(controlDir, execution, scriptName) {
   const scriptPath = join12(controlDir, fileName);
   const isCleanup = scriptName === "cleanup.ps1" || scriptName === "cleanup.sh" || scriptName === "cleanup.cmd";
   const scriptBody = isCleanup ? execution.cleanup_script ?? "" : execution.script;
-  const body = isDirect && process.platform !== "win32" && !scriptBody.startsWith("#!") ? `#!/usr/bin/env bash
+  let body = isDirect && process.platform !== "win32" && !scriptBody.startsWith("#!") ? `#!/usr/bin/env bash
 ${scriptBody}` : scriptBody;
+  if (isPowerShell) {
+    body = `${POWERSHELL_JOB_PRELUDE}${body}`;
+  }
   await writeFile6(scriptPath, body, "utf8");
   if (process.platform !== "win32") {
     await chmod(scriptPath, 493);
@@ -2525,7 +2548,7 @@ async function runCleanupScript(input) {
   }
   return { exitCode: result.exitCode, timedOut: false };
 }
-var execFileAsync4, ManagedChildProcess, PHASE3_UNSUPPORTED_SHELLS;
+var execFileAsync4, ManagedChildProcess, PHASE3_UNSUPPORTED_SHELLS, POWERSHELL_JOB_PRELUDE;
 var init_script = __esm({
   "../../packages/executor/dist/script.js"() {
     "use strict";
@@ -2555,6 +2578,13 @@ var init_script = __esm({
       }
     };
     PHASE3_UNSUPPORTED_SHELLS = ["sh", "zsh", "cmd", "pwsh"];
+    POWERSHELL_JOB_PRELUDE = [
+      "# RBO PowerShell runtime prelude (injected; do not remove)",
+      "$global:LASTEXITCODE = 0",
+      "# --- end RBO prelude ---",
+      "",
+      ""
+    ].join("\n");
   }
 });
 
@@ -7383,6 +7413,18 @@ async function handleRemoteLogChunk(opts, agentId, payload) {
   updateAttempt(opts.db, attempt.id, { log_acked_sequence: payload.sequence });
   sendAck();
 }
+function enqueueRemoteLogChunk(opts, agentId, payload) {
+  const key = payload.attempt_id;
+  const prev = logChunkChains.get(key) ?? Promise.resolve();
+  const next = prev.catch(() => void 0).then(() => handleRemoteLogChunk(opts, agentId, payload));
+  logChunkChains.set(key, next);
+  void next.finally(() => {
+    if (logChunkChains.get(key) === next) {
+      logChunkChains.delete(key);
+    }
+  });
+  return next;
+}
 function handleRemoteJobStarted(opts, agentId, payload) {
   const attempt = loadAttemptByLease(opts.db, payload.attempt_id, payload.lease_id, payload.lease_epoch);
   if (!rejectStale("job_started", attempt, agentId, ["running"])) {
@@ -7496,7 +7538,7 @@ function handleRemoteCleanupComplete(opts, agentId, payload) {
     result_json: JSON.stringify({ outcome, exit_code: exitCode })
   });
 }
-var execFileAsync8, logger11, DEFAULT_LEASE_TTL_SECONDS, GitBundleSizeExceededError;
+var execFileAsync8, logger11, DEFAULT_LEASE_TTL_SECONDS, GitBundleSizeExceededError, logChunkChains;
 var init_remote_execution = __esm({
   "../controller/dist/execution/remote-execution.js"() {
     "use strict";
@@ -7523,6 +7565,7 @@ var init_remote_execution = __esm({
         this.name = "GitBundleSizeExceededError";
       }
     };
+    logChunkChains = /* @__PURE__ */ new Map();
   }
 });
 
@@ -8329,7 +8372,7 @@ async function handleJobConfirm(ctx, args) {
   });
   return { job_id: job.id, state: "queued" };
 }
-async function waitForJob(ctx, jobId, waitSeconds, includeLogTailLines) {
+async function waitForJob(ctx, jobId, waitSeconds, includeLogTailLines, options) {
   const deadline = Date.now() + waitSeconds * 1e3;
   let job = getJob(ctx.db, jobId);
   if (!job) {
@@ -8338,6 +8381,9 @@ async function waitForJob(ctx, jobId, waitSeconds, includeLogTailLines) {
     };
   }
   while (job && !isTerminalJobState(job.state) && Date.now() < deadline) {
+    if (options?.onTick) {
+      await options.onTick(job);
+    }
     await new Promise((resolvePromise) => setTimeout(resolvePromise, 200));
     job = getJob(ctx.db, jobId);
   }
@@ -10618,6 +10664,49 @@ async function streamDownloadWithLimits(source, destPath, expectedSize, expected
   }
 }
 
+// ../agent/dist/executor/tls-pin.js
+init_dist();
+import { Agent as HttpsAgent } from "node:https";
+var controllerDataPlaneAgent = new HttpsAgent({
+  keepAlive: false,
+  maxCachedSessions: 100
+});
+function pinnedTlsRequestOptions(expectedFingerprint) {
+  return {
+    rejectUnauthorized: false,
+    agent: controllerDataPlaneAgent,
+    checkServerIdentity: (_host, cert) => {
+      if (!cert?.raw) {
+        return void 0;
+      }
+      const actual = certificateFingerprint(cert.raw);
+      if (actual !== expectedFingerprint) {
+        return new Error(`Controller certificate fingerprint mismatch: expected ${expectedFingerprint}, got ${actual}`);
+      }
+      return void 0;
+    }
+  };
+}
+function assertPinnedPeerCert(res, expectedFingerprint) {
+  const socket = res.socket;
+  if (!socket) {
+    return new Error("Controller did not present a TLS certificate");
+  }
+  if (socket.isSessionReused?.()) {
+    return void 0;
+  }
+  const cert = socket.getPeerCertificate?.(true);
+  const raw = cert?.raw ?? socket.getX509Certificate?.()?.raw;
+  if (!raw) {
+    return new Error("Controller did not present a TLS certificate");
+  }
+  const actual = certificateFingerprint(raw);
+  if (actual !== expectedFingerprint) {
+    return new Error(`Controller certificate fingerprint mismatch: expected ${expectedFingerprint}, got ${actual}`);
+  }
+  return void 0;
+}
+
 // ../agent/dist/executor/index.js
 var logger4 = createLogger("agent.executor");
 var ARTIFACT_TOKEN_TIMEOUT_MS = 6e4;
@@ -10639,18 +10728,6 @@ function resolveProjectIdentity(offer, prepare) {
   }
   return `local:${offer.snapshot_metadata.content_id}`;
 }
-function assertPinnedPeerCert(res, expectedFingerprint) {
-  const socket = res.socket;
-  const cert = socket.getPeerCertificate?.(true);
-  if (!cert?.raw) {
-    return new Error("Controller did not present a TLS certificate");
-  }
-  const actual = certificateFingerprint(cert.raw);
-  if (actual !== expectedFingerprint) {
-    return new Error(`Controller certificate fingerprint mismatch: expected ${expectedFingerprint}, got ${actual}`);
-  }
-  return void 0;
-}
 var AgentJobExecutor = class {
   socket;
   config;
@@ -11813,22 +11890,6 @@ var AgentJobExecutor = class {
       this.sendFrame("artifact_manifest", attemptId, leaseId, leaseEpoch, manifest);
     });
   }
-  pinnedTlsOptions() {
-    const expected = this.config.controllerFingerprint;
-    return {
-      rejectUnauthorized: false,
-      checkServerIdentity: (_host, cert) => {
-        if (!cert.raw) {
-          return new Error("Controller did not present a TLS certificate");
-        }
-        const actual = certificateFingerprint(cert.raw);
-        if (actual !== expected) {
-          return new Error(`Controller certificate fingerprint mismatch: expected ${expected}, got ${actual}`);
-        }
-        return void 0;
-      }
-    };
-  }
   downloadSnapshotFile(downloadUrl, dataToken, destPath, expectedSize, expectedSha256) {
     return new Promise((resolvePromise, rejectPromise) => {
       const req = httpsRequest(downloadUrl, {
@@ -11836,7 +11897,7 @@ var AgentJobExecutor = class {
         headers: {
           Authorization: `Bearer ${dataToken}`
         },
-        ...this.pinnedTlsOptions()
+        ...pinnedTlsRequestOptions(this.config.controllerFingerprint)
       }, (res) => {
         const pinError = assertPinnedPeerCert(res, this.config.controllerFingerprint);
         if (pinError) {
@@ -11865,7 +11926,7 @@ var AgentJobExecutor = class {
             "X-RBO-SHA256": sha2562,
             "X-RBO-Artifact-Name": logicalName
           },
-          ...this.pinnedTlsOptions()
+          ...pinnedTlsRequestOptions(this.config.controllerFingerprint)
         }, (res) => {
           const pinError = assertPinnedPeerCert(res, this.config.controllerFingerprint);
           if (pinError) {
@@ -12884,6 +12945,189 @@ function listAgents(db, includeOffline) {
 // ../controller/dist/mcp/handlers.js
 init_artifacts2();
 init_runner();
+
+// ../controller/dist/jobs/job-run.js
+init_dist2();
+init_dist();
+init_lifecycle();
+init_submit();
+var DEFAULT_MCP_WAIT_SLICE_SECONDS = 50;
+function wrapCommandAsExecution(command, timeoutSeconds, platform3 = process.platform) {
+  if (platform3 === "win32") {
+    return {
+      shell: "powershell",
+      script: [
+        "$ErrorActionPreference = 'Stop'",
+        command,
+        "if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }"
+      ].join("\n"),
+      timeout_seconds: timeoutSeconds
+    };
+  }
+  return {
+    shell: "bash",
+    script: `set -euo pipefail
+${command}
+`,
+    timeout_seconds: timeoutSeconds
+  };
+}
+function deriveJobName(command) {
+  const compact = command.replace(/\s+/g, " ").trim();
+  if (compact.length <= 72) {
+    return compact;
+  }
+  return `${compact.slice(0, 69)}...`;
+}
+function buildJobRunRequest(input, platform3 = process.platform) {
+  if (!input.command || !input.project_root) {
+    throw RboError.validation("job_run requires command and project_root unless job_id is set");
+  }
+  const timeoutSeconds = input.timeout_seconds ?? 3600;
+  return JobRequestSchema.parse({
+    client_request_id: input.client_request_id ?? generateId("req"),
+    name: input.name ?? deriveJobName(input.command),
+    source: {
+      project_root: input.project_root,
+      cwd: input.cwd ?? "."
+    },
+    execution: wrapCommandAsExecution(input.command, timeoutSeconds, platform3),
+    risk_level: input.risk_level ?? "normal",
+    artifacts: input.artifacts ?? []
+  });
+}
+function summarizeJob(job) {
+  if (!job) {
+    return {
+      state: null,
+      outcome: null,
+      exit_code: null,
+      failure_category: null,
+      failure_message: null
+    };
+  }
+  return {
+    state: job.state,
+    outcome: job.outcome,
+    exit_code: job.exit_code,
+    failure_category: job.failure_category,
+    failure_message: job.failure_message
+  };
+}
+function resolveSliceSeconds(rawInput) {
+  const slice = rawInput.mcp_wait_slice_seconds ?? DEFAULT_MCP_WAIT_SLICE_SECONDS;
+  return Math.min(55, Math.max(1, slice));
+}
+function resolveWaitBudget(rawInput) {
+  const timeoutSeconds = rawInput.timeout_seconds ?? 3600;
+  const requested = rawInput.wait_seconds ?? timeoutSeconds;
+  return Math.min(requested, resolveSliceSeconds(rawInput));
+}
+async function finishJobRunResponse(ctx, jobId, waitResult) {
+  if ("error" in waitResult && waitResult.error) {
+    return waitResult;
+  }
+  const job = waitResult.job;
+  const terminal = job ? isTerminalJobState(job.state) : false;
+  const artifacts = terminal && job ? handleJobArtifacts(ctx.db, jobId).artifacts ?? [] : [];
+  return {
+    job_id: jobId,
+    ...summarizeJob(job),
+    resume: !terminal,
+    log_tail: waitResult.log_tail ?? null,
+    artifacts
+  };
+}
+async function handleJobRun(ctx, rawInput, options = {}) {
+  const includeLogTailLines = rawInput.include_log_tail_lines ?? 80;
+  const waitBudget = resolveWaitBudget(rawInput);
+  let progressCounter = 0;
+  const startedAt = Date.now();
+  let lastProgressAt = 0;
+  const onTick = options.onProgress ? async (job) => {
+    const now = Date.now();
+    if (now - lastProgressAt < 5e3 && progressCounter > 0) {
+      return;
+    }
+    lastProgressAt = now;
+    progressCounter += 1;
+    const elapsedSec = Math.round((now - startedAt) / 1e3);
+    await options.onProgress?.({
+      progress: progressCounter,
+      message: `job_run state=${job.state} elapsed=${elapsedSec}s`
+    });
+  } : void 0;
+  let jobId = rawInput.job_id?.trim() || "";
+  if (jobId) {
+    const existing = getJob(ctx.db, jobId);
+    if (!existing) {
+      return {
+        error: {
+          category: "validation",
+          message: `Unknown job_id '${jobId}'`,
+          retryable: false
+        }
+      };
+    }
+    if (existing.state === "awaiting_confirmation") {
+      return {
+        job_id: jobId,
+        ...summarizeJob(existing),
+        resume: false,
+        confirmation_required: true,
+        log_tail: null,
+        artifacts: []
+      };
+    }
+    if (isTerminalJobState(existing.state)) {
+      const artifactsResult = handleJobArtifacts(ctx.db, jobId);
+      return {
+        job_id: jobId,
+        ...summarizeJob(existing),
+        resume: false,
+        log_tail: null,
+        artifacts: Array.isArray(artifactsResult.artifacts) ? artifactsResult.artifacts : []
+      };
+    }
+  } else {
+    if (!rawInput.command || !rawInput.project_root) {
+      return {
+        error: {
+          category: "validation",
+          message: "job_run requires command and project_root unless job_id is set",
+          retryable: false
+        }
+      };
+    }
+    const request = buildJobRunRequest(rawInput);
+    const submit = await handleJobSubmit(ctx, request);
+    if ("error" in submit && submit.error) {
+      return submit;
+    }
+    jobId = String(submit.job_id);
+    if (submit.state === "awaiting_confirmation") {
+      return {
+        job_id: jobId,
+        state: "awaiting_confirmation",
+        confirmation_token: submit.confirmation_token,
+        snapshot_id: submit.snapshot_id,
+        content_id: submit.content_id,
+        secret_warnings: submit.secret_warnings,
+        outcome: null,
+        exit_code: null,
+        failure_category: null,
+        failure_message: null,
+        resume: false,
+        log_tail: null,
+        artifacts: []
+      };
+    }
+  }
+  const waitResult = await waitForJob(ctx, jobId, waitBudget, includeLogTailLines, { onTick });
+  return finishJobRunResponse(ctx, jobId, waitResult);
+}
+
+// ../controller/dist/mcp/handlers.js
 init_lifecycle();
 init_submit();
 function runnerContext(ctx) {
@@ -12936,6 +13180,21 @@ async function handleToolCall(ctx, name, rawArgs) {
       return { agents: listAgents(ctx.db, args.include_offline === true) };
     case "job_submit":
       return handleJobSubmit(submitContext(ctx), args);
+    case "job_run":
+      return handleJobRun(submitContext(ctx), {
+        command: args.command,
+        project_root: args.project_root,
+        job_id: args.job_id,
+        cwd: args.cwd,
+        timeout_seconds: args.timeout_seconds,
+        wait_seconds: args.wait_seconds,
+        mcp_wait_slice_seconds: args.mcp_wait_slice_seconds,
+        artifacts: args.artifacts,
+        risk_level: args.risk_level,
+        client_request_id: args.client_request_id,
+        name: args.name,
+        include_log_tail_lines: args.include_log_tail_lines
+      }, ctx.jobRunOptions);
     case "job_confirm":
       return handleJobConfirm(submitContext(ctx), {
         job_id: args.job_id,
@@ -13043,8 +13302,27 @@ function buildMcpServer(ctx) {
     version: RBO_CONTROLLER_VERSION
   });
   for (const def of MCP_TOOL_DEFS) {
-    server.registerTool(def.name, { description: def.description, inputSchema: def.inputShape }, async (args) => {
-      const result = await handleToolCall(ctx, def.name, args);
+    server.registerTool(def.name, { description: def.description, inputSchema: def.inputShape }, async (args, extra) => {
+      const toolCtx = def.name === "job_run" ? {
+        ...ctx,
+        jobRunOptions: {
+          onProgress: async (update) => {
+            const progressToken = extra._meta?.progressToken;
+            if (progressToken === void 0) {
+              return;
+            }
+            await extra.sendNotification({
+              method: "notifications/progress",
+              params: {
+                progressToken,
+                progress: update.progress,
+                message: update.message
+              }
+            });
+          }
+        }
+      } : ctx;
+      const result = await handleToolCall(toolCtx, def.name, args);
       return {
         content: [{ type: "text", text: JSON.stringify(result) }]
       };
@@ -13775,7 +14053,7 @@ async function startAgentPlaneServer(options) {
             const payload = parsePayload(LogChunkPayloadSchema, message.payload, message.type);
             if (!payload)
               return;
-            void handleRemoteLogChunk(remoteOpts(), authenticated.agentId, payload);
+            void enqueueRemoteLogChunk(remoteOpts(), authenticated.agentId, payload);
             return;
           }
           case "job_exit": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gemslibe/rbo",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "type": "module",
   "main": "./dist/rbo.js",
   "bin": {
@@ -35,7 +35,7 @@
     "zod": "^3.24.2"
   },
   "optionalDependencies": {
-    "@gemslibe/rbo-windows-executor-win32-x64": "0.3.0"
+    "@gemslibe/rbo-windows-executor-win32-x64": "0.4.0"
   },
   "devDependencies": {
     "@rbo/agent": "workspace:*",