@mcpbridgeapp/cli 0.0.0-stage → 0.1.0

package/dist/protocol.js

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+/**
+ * The wire protocol between a local agent (`mcpbridgeapp connect`, running where the AI CLIs
+ * are signed in) and a relay (the hosted endpoint clients talk to). JSON messages over a
+ * WebSocket the agent opens outbound, so nothing on the user's machine listens.
+ *
+ * The relay only ever forwards: it never sees a credential, only prompts and answers.
+ */
+export const PROTOCOL_VERSION = 1;
+export const AgentStatusSchema = z.object({
+    name: z.string(),
+    description: z.string(),
+    requires: z.string(),
+    available: z.boolean(),
+    readsFiles: z.boolean(),
+    detail: z.string(),
+    // optional, so an older agent's hello still parses
+    status: z.string().optional(),
+    writesFiles: z.boolean().optional(),
+    runsCommands: z.boolean().optional(),
+    timeoutSeconds: z.number().optional(),
+    lastError: z.string().optional(),
+    lastErrorAt: z.string().optional(),
+    retryAt: z.string().optional(),
+    lastSuccessAt: z.string().optional(),
+    calls: z.number().optional(),
+});
+export const TOOL_NAME = z.enum(['list_agents', 'ask_agent', 'start_task', 'get_task']);
+// ---- agent -> relay ---------------------------------------------------------
+/** First message after the socket opens. */
+export const HelloMessage = z.object({
+    type: z.literal('hello'),
+    protocol: z.literal(PROTOCOL_VERSION),
+    agentVersion: z.string(),
+    device: z.string().min(1).max(80),
+    agents: z.array(AgentStatusSchema),
+});
+/** A refreshed agent list, so a dashboard can show what is installed without a call. */
+export const AgentsMessage = z.object({
+    type: z.literal('agents'),
+    agents: z.array(AgentStatusSchema),
+});
+/** The answer to a call. `ok: false` means the tool itself threw; `payload` is the message. */
+export const ResultMessage = z.object({
+    type: z.literal('result'),
+    id: z.string(),
+    ok: z.boolean(),
+    payload: z.unknown(),
+});
+export const AgentToRelay = z.discriminatedUnion('type', [HelloMessage, AgentsMessage, ResultMessage]);
+// ---- relay -> agent ---------------------------------------------------------
+export const WelcomeMessage = z.object({
+    type: z.literal('welcome'),
+    /** what the relay will call this device, which may differ if the name was taken */
+    device: z.string(),
+});
+export const CallMessage = z.object({
+    type: z.literal('call'),
+    id: z.string(),
+    tool: TOOL_NAME,
+    args: z.record(z.string(), z.unknown()),
+});
+/** Sent before the relay closes the socket on purpose, so the agent knows not to retry. */
+export const GoodbyeMessage = z.object({
+    type: z.literal('goodbye'),
+    reason: z.string(),
+    retry: z.boolean(),
+});
+export const RelayToAgent = z.discriminatedUnion('type', [WelcomeMessage, CallMessage, GoodbyeMessage]);
+export function parseAgentMessage(raw) {
+    const result = AgentToRelay.safeParse(tryJson(raw));
+    return result.success ? result.data : null;
+}
+export function parseRelayMessage(raw) {
+    const result = RelayToAgent.safeParse(tryJson(raw));
+    return result.success ? result.data : null;
+}
+function tryJson(raw) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAU,CAAC;AAE3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;AAExF,gFAAgF;AAEhF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACnC,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACnC,CAAC,CAAC;AAEH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;AAGvG,gFAAgF;AAEhF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,mFAAmF;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAGxG,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/secrets.d.ts

@@ -0,0 +1,27 @@
+/**
+ * What must not sit in config.json: API keys and the relay token.
+ *
+ * <p>config.json is the file people paste into issues and copy between machines, so it
+ * names keys by environment variable (`apiKeyEnv`) and never holds one. The values live
+ * here instead, next to it, readable only by the user where the platform allows. At
+ * startup they are copied into the process environment for any variable not already set,
+ * so a key saved once works in every window -- no `setx`, no terminal restart -- and a
+ * variable exported the usual way still wins.
+ */
+export interface Secrets {
+    /** environment variable name -> value */
+    keys: Record<string, string>;
+    relay?: {
+        url: string;
+        token: string;
+        device?: string;
+    };
+}
+export declare function secretsPath(): string;
+export declare function loadSecrets(path?: string): Secrets;
+/** Written whole, through a temporary file, so a crash mid-write cannot leave half a file. */
+export declare function saveSecrets(secrets: Secrets, path?: string): void;
+/** Saved keys become environment variables, without overriding one already exported. */
+export declare function applySecretsToEnv(secrets: Secrets, env?: NodeJS.ProcessEnv): void;
+/** Enough to recognise a key on screen without showing it. */
+export declare function maskSecret(value: string | undefined): string | null;

package/dist/secrets.js

@@ -0,0 +1,53 @@
+import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { configPath } from './config.js';
+export function secretsPath() {
+    return process.env['MCPBRIDGE_SECRETS'] ?? join(dirname(configPath()), 'secrets.json');
+}
+export function loadSecrets(path = secretsPath()) {
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch {
+        return { keys: {} };
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        const keys = Object.fromEntries(Object.entries(parsed.keys ?? {}).filter((e) => typeof e[1] === 'string'));
+        const relay = parsed.relay && typeof parsed.relay.url === 'string' && typeof parsed.relay.token === 'string'
+            ? parsed.relay
+            : undefined;
+        return relay ? { keys, relay } : { keys };
+    }
+    catch (error) {
+        throw new Error(`${path} is not valid JSON: ${error.message}`);
+    }
+}
+/** Written whole, through a temporary file, so a crash mid-write cannot leave half a file. */
+export function saveSecrets(secrets, path = secretsPath()) {
+    mkdirSync(dirname(path), { recursive: true });
+    const temporary = `${path}.tmp`;
+    writeFileSync(temporary, `${JSON.stringify(secrets, null, 2)}\n`, { mode: 0o600 });
+    renameSync(temporary, path);
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Windows has no POSIX modes; the user profile directory is what protects it there
+    }
+}
+/** Saved keys become environment variables, without overriding one already exported. */
+export function applySecretsToEnv(secrets, env = process.env) {
+    for (const [name, value] of Object.entries(secrets.keys)) {
+        if (!env[name])
+            env[name] = value;
+    }
+}
+/** Enough to recognise a key on screen without showing it. */
+export function maskSecret(value) {
+    if (!value)
+        return null;
+    return value.length <= 8 ? '••••' : `••••${value.slice(-4)}`;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkBzC,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAI,GAAG,WAAW,EAAE;IAC9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CACjG,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC1G,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAwB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAI,GAAG,WAAW,EAAE;IAChE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,IAAI,MAAM,CAAC;IAChC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,mFAAmF;IACrF,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,OAAgB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACtF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACpC,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,UAAU,CAAC,KAAyB;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,5 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { AgentRegistry } from './agents/registry.js';
+import type { ConcurrencyLimit } from './limit.js';
+import type { TaskStore } from './tasks.js';
+export declare function createServer(registry: AgentRegistry, tasks: TaskStore, limit: ConcurrencyLimit): McpServer;

package/dist/server.js

@@ -0,0 +1,97 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { executeTool } from './tools.js';
+const PACKAGE_NAME = 'mcpbridgeapp';
+const PACKAGE_VERSION = '0.1.0';
+function json(value) {
+    return { content: [{ type: 'text', text: JSON.stringify(value, null, 2) }] };
+}
+// coerced: a client holding an older copy of this schema, or one that types every
+// argument as text, sends "120" -- refusing that over a type is no help to anyone
+const TIMEOUT_ARG = z.coerce
+    .number()
+    .int()
+    .min(10)
+    .max(3600)
+    .optional()
+    .describe('Stop the agent after this many seconds. Only shortens its configured timeout.');
+export function createServer(registry, tasks, limit) {
+    const context = { registry, tasks, limit };
+    const server = new McpServer({ name: PACKAGE_NAME, version: PACKAGE_VERSION }, {
+        instructions: [
+            'MCP Bridge hands work to other AI agents installed on this machine.',
+            'Call list_agents first: an agent can be configured without being available, and',
+            '"available": false says why. Then ask_agent to delegate and get the answer in the',
+            'same call. The agent you delegate to cannot see this conversation or these files,',
+            'so write a self-contained prompt and pass workingDirectory for anything about code.',
+            'Agents are read-only unless list_agents says otherwise ("writesFiles", "runsCommands"):',
+            'shape the task to what the agent may do. Each call stops at the agent\'s "timeoutSeconds".',
+            'For work that would outlast this request, use start_task and poll get_task; only a few',
+            'run at once, and the rest wait as "queued".',
+        ].join(' '),
+    });
+    server.registerTool('list_agents', {
+        title: 'List delegable agents',
+        description: 'List the AI agents this bridge can delegate to, and what to expect from each. ' +
+            '"available" is true only when the command was found and no recent call hit a durable ' +
+            'failure. "status" says which: "ready", "unavailable", or what an earlier call ran into -- ' +
+            '"quota-exhausted", "sign-in-failed", "directory-not-trusted" -- with "lastError", ' +
+            '"lastErrorAt" and, when the agent said so, "retryAt". A "ready" agent that has never ' +
+            'been called ("calls": 0) is still unproven: its account may not work. ' +
+            '"detail" carries the reason. ' + 'Agents are read-only unless their owner allowed more: "writesFiles" and "runsCommands" ' +
+            'say whether one may change files or run commands such as tests. If neither is true, ask ' +
+            'it to read and report, not to write a file or run something. ' +
+            '"timeoutSeconds" is how long one call may run. "readsFiles" says whether passing ' +
+            'workingDirectory actually lets that agent see your files — when it is false, put the ' +
+            'content in the prompt instead.',
+        inputSchema: {},
+    }, async () => json(await executeTool('list_agents', {}, context)));
+    server.registerTool('ask_agent', {
+        title: 'Delegate a task and wait',
+        description: 'Hand a task to another AI agent and wait for its answer. One call does the whole ' +
+            'thing. The agent starts fresh with no knowledge of this conversation and cannot see ' +
+            'your files unless you point it at them, so make the prompt self-contained and pass ' +
+            'workingDirectory when the task is about code in a project. If "succeeded" is false, ' +
+            'read "diagnostics" -- that includes an agent that ran but says it could not do the ' +
+            'work. If "notes" is set, read it before trusting "output". Each call is bounded by ' +
+            'the agent\'s timeout (5 minutes unless configured); pass timeoutSeconds for less. ' +
+            'For a job long enough to outlast this request, use start_task.',
+        inputSchema: {
+            agent: z.string().describe('Which agent to use, exactly as list_agents names it, e.g. "gemini".'),
+            prompt: z.string().min(1).describe('The full self-contained task or question for that agent.'),
+            workingDirectory: z
+                .string()
+                .optional()
+                .describe('Absolute path to run the agent in, so it can read the project files.'),
+            timeoutSeconds: TIMEOUT_ARG,
+        },
+    }, async (args) => json(await executeTool('ask_agent', args, context)));
+    server.registerTool('start_task', {
+        title: 'Delegate without waiting',
+        description: 'Start a delegated task and return its id immediately, for work that would outlast ' +
+            'this request. Poll get_task with the id. Prefer ask_agent for anything that finishes ' +
+            'in a minute or two — it is one call instead of several. ' + 'Only a few delegations run at once (two by default); more wait their turn, shown as ' +
+            '"queued" by get_task, and several tasks on one agent spend its account\'s quota together. ' +
+            'An agent whose last call hit its usage limit or a failed sign-in is not started again ' +
+            'until that clears; the result says so at once.',
+        inputSchema: {
+            agent: z.string().describe('Which agent to use, exactly as list_agents names it.'),
+            prompt: z.string().min(1).describe('The full self-contained task for that agent.'),
+            workingDirectory: z.string().optional().describe('Absolute path to run the agent in.'),
+            timeoutSeconds: TIMEOUT_ARG,
+        },
+    }, async (args) => json(await executeTool('start_task', args, context)));
+    server.registerTool('get_task', {
+        title: 'Check a delegated task',
+        description: 'Look up a task started with start_task. "queued" means it is waiting for a free slot ' +
+            '("queuePosition" ahead of it) and its timeout has not started; "running" means the agent ' +
+            'is working, with its latest output in "outputSoFar" and the time of it in "lastOutputAt" ' +
+            '-- a long silence there is the sign of a stuck agent. Wait between checks rather than ' +
+            'polling in a tight loop. Once "finished", "result" holds the same shape ask_agent returns.',
+        inputSchema: {
+            id: z.string().describe('The task id returned by start_task.'),
+        },
+    }, async (args) => json(await executeTool('get_task', args, context)));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAE3D,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,kFAAkF;AAClF,kFAAkF;AAClF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM;KACzB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,GAAG,CAAC,EAAE,CAAC;KACP,GAAG,CAAC,IAAI,CAAC;KACT,QAAQ,EAAE;KACV,QAAQ,CAAC,+EAA+E,CAAC,CAAC;AAE7F,MAAM,UAAU,YAAY,CAC1B,QAAuB,EACvB,KAAgB,EAChB,KAAuB;IAEvB,MAAM,OAAO,GAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,EAChD;QACE,YAAY,EAAE;YACZ,qEAAqE;YACrE,iFAAiF;YACjF,mFAAmF;YACnF,mFAAmF;YACnF,qFAAqF;YACrF,yFAAyF;YACzF,4FAA4F;YAC5F,wFAAwF;YACxF,6CAA6C;SAC9C,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,gFAAgF;YAChF,uFAAuF;YACvF,4FAA4F;YAC5F,oFAAoF;YACpF,uFAAuF;YACvF,wEAAwE;YACxE,+BAA+B,GAAG,yFAAyF;YAC3H,0FAA0F;YAC1F,+DAA+D;YAC/D,mFAAmF;YACnF,uFAAuF;YACvF,gCAAgC;QAClC,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,aAAa,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAChE,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,mFAAmF;YACnF,sFAAsF;YACtF,qFAAqF;YACrF,sFAAsF;YACtF,qFAAqF;YACrF,qFAAqF;YACrF,oFAAoF;YACpF,gEAAgE;QAClE,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;YACjG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;YAC9F,gBAAgB,EAAE,CAAC;iBAChB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,sEAAsE,CAAC;YACnF,cAAc,EAAE,WAAW;SAC5B;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CACpE,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,oFAAoF;YACpF,uFAAuF;YACvF,0DAA0D,GAAG,sFAAsF;YACnJ,4FAA4F;YAC5F,wFAAwF;YACxF,gDAAgD;QAClD,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;YAClF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;YAClF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YACtF,cAAc,EAAE,WAAW;SAC5B;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CACrE,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,UAAU,EACV;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,uFAAuF;YACvF,2FAA2F;YAC3F,2FAA2F;YAC3F,wFAAwF;YACxF,4FAA4F;QAC9F,WAAW,EAAE;YACX,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;SAC/D;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CACnE,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tasks.d.ts

@@ -0,0 +1,48 @@
+import type { Agent, AgentResult, RunOptions } from './agents/types.js';
+import type { ConcurrencyLimit } from './limit.js';
+/**
+ * What get_task shows. Not the prompt: the caller wrote it and has it, and handing it back
+ * on every poll spends the caller's context for nothing.
+ */
+export interface Task {
+    id: string;
+    agent: string;
+    /**
+     * "queued" while it waits for one of the concurrent slots -- its timeout has not started
+     * yet -- then "running", then "finished". A queued task was reported as running before,
+     * which made one waiting behind others look like an agent hung for fifteen minutes.
+     */
+    status: 'queued' | 'running' | 'finished';
+    /** how many tasks are ahead of it while queued */
+    queuePosition?: number;
+    createdAt: string;
+    startedAt?: string;
+    finishedAt?: string;
+    /** the most recent output, while it runs: proof of life, and often most of an answer */
+    outputSoFar?: string;
+    lastOutputAt?: string;
+    /** a caveat known when the task was accepted, e.g. a workingDirectory the agent cannot use */
+    notes?: string;
+    result?: AgentResult;
+}
+/**
+ * Tasks for work that outlives a single tool call. ask_agent is the normal path; this
+ * exists because a long delegation otherwise dies on the caller's request timeout, which
+ * is a property of the client and not something the bridge can raise.
+ */
+export declare class TaskStore {
+    private readonly limit;
+    private readonly tasks;
+    /** queued task ids in the order the limit will release them */
+    private readonly queue;
+    constructor(limit: ConcurrencyLimit);
+    start(agent: Agent, prompt: string, options: RunOptions, notes?: string): Task;
+    get(id: string): Task | undefined;
+    list(): Task[];
+    /** A copy with the queue position filled in, so callers never hold the live object. */
+    private view;
+    private dequeue;
+    private finish;
+    /** Keeps the store from growing without bound in a long-lived process. */
+    private prune;
+}

package/dist/tasks.js

@@ -0,0 +1,103 @@
+import { randomUUID } from 'node:crypto';
+import { stripAnsi } from './agents/types.js';
+const KEEP_FINISHED_MS = 60 * 60 * 1000;
+const MAX_TASKS = 200;
+const PROGRESS_CHARS = 2_000;
+/**
+ * Tasks for work that outlives a single tool call. ask_agent is the normal path; this
+ * exists because a long delegation otherwise dies on the caller's request timeout, which
+ * is a property of the client and not something the bridge can raise.
+ */
+export class TaskStore {
+    limit;
+    tasks = new Map();
+    /** queued task ids in the order the limit will release them */
+    queue = [];
+    constructor(limit) {
+        this.limit = limit;
+    }
+    start(agent, prompt, options, notes) {
+        this.prune();
+        const task = {
+            id: randomUUID(),
+            agent: agent.name,
+            status: 'queued',
+            createdAt: new Date().toISOString(),
+            ...(notes ? { notes } : {}),
+        };
+        this.tasks.set(task.id, task);
+        this.queue.push(task.id);
+        const onOutput = (chunk) => {
+            const text = `${task.outputSoFar ?? ''}${stripAnsi(chunk)}`;
+            task.outputSoFar = text.length > PROGRESS_CHARS ? `…${text.slice(-PROGRESS_CHARS)}` : text;
+            task.lastOutputAt = new Date().toISOString();
+        };
+        // deliberately not awaited: the point is to return an id now
+        void this.limit
+            .run(() => {
+            this.dequeue(task.id);
+            task.status = 'running';
+            task.startedAt = new Date().toISOString();
+            return agent.run(prompt, { ...options, onOutput });
+        })
+            .then((result) => this.finish(task.id, result))
+            .catch((error) => this.finish(task.id, {
+            agent: agent.name,
+            succeeded: false,
+            output: '',
+            diagnostics: `the task threw: ${error.message}`,
+            notes: '',
+            durationMs: 0,
+            timedOut: false,
+            outputTruncated: false,
+        }));
+        return this.view(task);
+    }
+    get(id) {
+        const task = this.tasks.get(id);
+        return task ? this.view(task) : undefined;
+    }
+    list() {
+        return [...this.tasks.values()].map((t) => this.view(t)).sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+    }
+    /** A copy with the queue position filled in, so callers never hold the live object. */
+    view(task) {
+        const copy = { ...task };
+        if (task.status === 'queued')
+            copy.queuePosition = this.queue.indexOf(task.id);
+        if (task.status === 'finished')
+            delete copy.outputSoFar;
+        return copy;
+    }
+    dequeue(id) {
+        const index = this.queue.indexOf(id);
+        if (index !== -1)
+            this.queue.splice(index, 1);
+    }
+    finish(id, result) {
+        const task = this.tasks.get(id);
+        if (!task)
+            return;
+        this.dequeue(id);
+        task.status = 'finished';
+        task.result = result;
+        task.finishedAt = new Date().toISOString();
+    }
+    /** Keeps the store from growing without bound in a long-lived process. */
+    prune() {
+        const cutoff = Date.now() - KEEP_FINISHED_MS;
+        for (const [id, task] of this.tasks) {
+            if (task.finishedAt && Date.parse(task.finishedAt) < cutoff)
+                this.tasks.delete(id);
+        }
+        while (this.tasks.size >= MAX_TASKS) {
+            const oldestFinished = [...this.tasks.values()]
+                .filter((t) => t.status === 'finished')
+                .sort((a, b) => a.createdAt.localeCompare(b.createdAt))[0];
+            if (!oldestFinished)
+                break;
+            this.tasks.delete(oldestFinished.id);
+        }
+    }
+}
+//# sourceMappingURL=tasks.js.map

package/dist/tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../src/tasks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AA6B9C,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B;;;;GAIG;AACH,MAAM,OAAO,SAAS;IAKS;IAJZ,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IACjD,+DAA+D;IAC9C,KAAK,GAAa,EAAE,CAAC;IAEtC,YAA6B,KAAuB;QAAvB,UAAK,GAAL,KAAK,CAAkB;IAAG,CAAC;IAExD,KAAK,CAAC,KAAY,EAAE,MAAc,EAAE,OAAmB,EAAE,KAAc;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,UAAU,EAAE;YAChB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEzB,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3F,IAAI,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,CAAC,CAAC;QAEF,6DAA6D;QAC7D,KAAK,IAAI,CAAC,KAAK;aACZ,GAAG,CAAC,GAAG,EAAE;YACR,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC9C,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,mBAAoB,KAAe,CAAC,OAAO,EAAE;YAC1D,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,KAAK;SACvB,CAAC,CACH,CAAC;QAEJ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClH,CAAC;IAED,uFAAuF;IAC/E,IAAI,CAAC,IAAU;QACrB,MAAM,IAAI,GAAS,EAAE,GAAG,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,EAAU;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAEO,MAAM,CAAC,EAAU,EAAE,MAAmB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED,0EAA0E;IAClE,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;QAC7C,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACpC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;iBAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC;iBACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,cAAc;gBAAE,MAAM;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/tools.d.ts

@@ -0,0 +1,25 @@
+import type { AgentRegistry } from './agents/registry.js';
+import type { ConcurrencyLimit } from './limit.js';
+import type { TaskStore } from './tasks.js';
+/**
+ * The four tools, as plain functions over plain JSON. Both front doors — the MCP server a
+ * client talks to directly, and the relay connection that forwards calls from a hosted
+ * endpoint — run exactly this, so a tool cannot behave differently depending on how the
+ * request arrived.
+ */
+export declare const TOOL_NAMES: readonly ["list_agents", "ask_agent", "start_task", "get_task"];
+export type ToolName = (typeof TOOL_NAMES)[number];
+export interface ToolContext {
+    registry: AgentRegistry;
+    tasks: TaskStore;
+    limit: ConcurrencyLimit;
+}
+export interface DelegationArgs {
+    agent: string;
+    prompt: string;
+    workingDirectory?: string;
+    /** the caller's bound on this one call; only ever shortens the agent's own timeout */
+    timeoutSeconds?: number;
+}
+export declare function executeTool(name: ToolName, args: Record<string, unknown>, { registry, tasks, limit }: ToolContext): Promise<unknown>;
+export declare function isToolName(name: string): name is ToolName;

package/dist/tools.js

@@ -0,0 +1,71 @@
+/**
+ * The four tools, as plain functions over plain JSON. Both front doors — the MCP server a
+ * client talks to directly, and the relay connection that forwards calls from a hosted
+ * endpoint — run exactly this, so a tool cannot behave differently depending on how the
+ * request arrived.
+ */
+export const TOOL_NAMES = ['list_agents', 'ask_agent', 'start_task', 'get_task'];
+export async function executeTool(name, args, { registry, tasks, limit }) {
+    switch (name) {
+        case 'list_agents':
+            return registry.statuses();
+        case 'ask_agent': {
+            const parsed = delegation(args);
+            const target = registry.find(parsed.agent);
+            if (!target)
+                return unknownAgent(parsed.agent, registry);
+            return limit.run(() => target.run(parsed.prompt, runOptions(parsed)));
+        }
+        case 'start_task': {
+            const parsed = delegation(args);
+            const target = registry.find(parsed.agent);
+            if (!target)
+                return { started: false, ...unknownAgent(parsed.agent, registry) };
+            // said when the task is accepted, not only in the result minutes later
+            const ignored = parsed.workingDirectory && !target.readsFiles
+                ? `workingDirectory will be ignored: ${target.name} cannot read files, so it sees only the prompt.`
+                : undefined;
+            const task = tasks.start(target, parsed.prompt, runOptions(parsed), ignored);
+            return {
+                started: true, id: task.id, agent: task.agent, status: task.status,
+                ...(task.queuePosition !== undefined ? { queuePosition: task.queuePosition } : {}),
+                ...(ignored ? { notes: ignored } : {}),
+            };
+        }
+        case 'get_task': {
+            const id = String(args['id'] ?? '');
+            const task = tasks.get(id);
+            return task ?? { id, found: false, diagnostics: 'no task with that id; it may have expired' };
+        }
+    }
+}
+export function isToolName(name) {
+    return TOOL_NAMES.includes(name);
+}
+function delegation(args) {
+    const agent = String(args['agent'] ?? '');
+    const prompt = String(args['prompt'] ?? '');
+    const wd = args['workingDirectory'];
+    const seconds = Number(args['timeoutSeconds']);
+    return {
+        agent, prompt,
+        ...(typeof wd === 'string' && wd ? { workingDirectory: wd } : {}),
+        ...(Number.isFinite(seconds) && seconds > 0 ? { timeoutSeconds: Math.min(seconds, 3_600) } : {}),
+    };
+}
+function runOptions(args) {
+    return {
+        ...(args.workingDirectory ? { cwd: args.workingDirectory } : {}),
+        ...(args.timeoutSeconds ? { timeoutMs: args.timeoutSeconds * 1000 } : {}),
+    };
+}
+function unknownAgent(agent, registry) {
+    return {
+        agent,
+        succeeded: false,
+        output: '',
+        diagnostics: `no agent named "${agent}" is configured. Available: ${registry.names().join(', ')}`,
+        notes: '',
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAU,CAAC;AAiB1F,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAc,EACd,IAA6B,EAC7B,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAe;IAEvC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAE7B,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM;gBAAE,OAAO,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChF,uEAAuE;YACvE,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,UAAU;gBAC3D,CAAC,CAAC,qCAAqC,MAAM,CAAC,IAAI,iDAAiD;gBACnG,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;gBAClE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC;QACJ,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,IAAI,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QAChG,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAQ,UAAgC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/C,OAAO;QACL,KAAK,EAAE,MAAM;QACb,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB;IACtC,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,QAAuB;IAC1D,OAAO;QACL,KAAK;QACL,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,EAAE;QACV,WAAW,EAAE,mBAAmB,KAAK,+BAA+B,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACjG,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC"}

package/dist/ui/page.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The control panel, as one self-contained page: no build step, no external requests
+ * (the Content-Security-Policy forbids them), and every value from the server is set with
+ * textContent, never innerHTML, so an agent's output or a provider's error text cannot
+ * become markup.
+ */
+export declare function uiPage(): string;