@mmerterden/multi-agent-pipeline 20.29.0 → 20.33.0

package/pipeline/schemas/service-read.schema.json

@@ -0,0 +1,58 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/service-read.schema.json",
+  "title": "Service read",
+  "description": "What GET /v1/services/confluence, /crashlytics and /figma return (`service-read.mjs`): one Confluence page, one Crashlytics issue or one Figma frame render, through the pipeline's own clients. Text is redacted; a frame comes back as base64 PNG.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion", "service"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "service": {
+      "enum": ["confluence", "crashlytics", "figma"]
+    },
+    "pageId": {
+      "type": ["string", "null"]
+    },
+    "title": {
+      "type": "string"
+    },
+    "body": {
+      "type": "string"
+    },
+    "apiContracts": {
+      "type": "integer"
+    },
+    "type": {
+      "type": ["string", "null"]
+    },
+    "occurrences": {
+      "type": ["number", "null"]
+    },
+    "impactedUsers": {
+      "type": ["number", "null"]
+    },
+    "stackTrace": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "fileKey": {
+      "type": "string"
+    },
+    "nodeId": {
+      "type": "string"
+    },
+    "mime": {
+      "const": "image/png"
+    },
+    "data": {
+      "type": "string"
+    }
+  }
+}

package/pipeline/schemas/stack-change.schema.json

@@ -0,0 +1,82 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/stack-change.schema.json",
+  "title": "Stack change",
+  "description": "What POST /v1/stack returns (`stack-toggle.mjs set`). Step one: preview {stacks, changed, enabledPlugins, dropped} with confirmToken and expiresAt, nothing written. Step two: the written enabledPlugins, the keys that changed and written.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "preview": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stacks", "changed", "enabledPlugins", "dropped"],
+      "properties": {
+        "stacks": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "changed": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "enabledPlugins": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "boolean"
+          }
+        },
+        "dropped": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "confirmToken": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{16,128}$"
+    },
+    "expiresAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "stacks": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "enabledPlugins": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "boolean"
+      }
+    },
+    "changed": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "dropped": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "written": {
+      "type": "boolean"
+    }
+  }
+}

package/pipeline/schemas/stack-request.schema.json

@@ -0,0 +1,33 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/stack-request.schema.json",
+  "title": "Stack change request",
+  "description": "The body of POST /v1/stack. The first request names repo (a name from GET /v1/repos or its path) and stacks (as /multi-agent:stack takes them, aliases allowed); the second sends only confirmToken.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "repo": {
+      "type": "string",
+      "maxLength": 4096
+    },
+    "stacks": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z]{2,16}$"
+      }
+    },
+    "confirmToken": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{16,128}$"
+    }
+  }
+}

package/pipeline/schemas/stack.schema.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/stack.schema.json",
+  "title": "Stack status",
+  "description": "What GET /v1/stack?repo= returns (`stack-toggle.mjs status --json`): the stacks a repository enables in .claude/settings.json and every marketplace plugin with its skills. manifestVerified is false when the marketplace manifest could not be read and the plugin list is the convention.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion", "stacks", "knownStacks", "plugins", "manifestVerified"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "stacks": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "knownStacks": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "plugins": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "enabled", "alwaysOn", "stack", "skills"],
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "enabled": {
+            "type": "boolean"
+          },
+          "alwaysOn": {
+            "type": "boolean"
+          },
+          "stack": {
+            "type": ["string", "null"]
+          },
+          "skills": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      }
+    },
+    "manifestVerified": {
+      "type": "boolean"
+    }
+  }
+}

package/pipeline/schemas/steer-request.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/steer-request.schema.json",
+  "title": "Steer request",
+  "description": "The body of POST /v1/runs/{id}/steer. The first request carries text (verbatim, up to 4000 characters) and gets a preview and a confirm token bound to the run and that text; the second carries only confirmToken.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "text": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4000
+    },
+    "confirmToken": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{16,128}$"
+    }
+  }
+}

package/pipeline/schemas/steer.schema.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/steer.schema.json",
+  "title": "Steer queued",
+  "description": "What POST /v1/runs/{id}/steer returns (`steer-run.mjs`). Step one: preview {text, status, currentPhase, replaces} with confirmToken and expiresAt, nothing written. Step two: the instruction is queued as the run's pendingSteer and applied at the entry to its next phase; replaced is the unconsumed instruction it replaced, or null.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion", "taskId"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "taskId": {
+      "type": "string"
+    },
+    "queuedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "replaced": {
+      "type": ["string", "null"]
+    },
+    "status": {
+      "type": ["string", "null"]
+    },
+    "currentPhase": {
+      "type": ["integer", "null"]
+    },
+    "preview": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["text", "status", "currentPhase", "replaces"],
+      "properties": {
+        "text": {
+          "type": "string"
+        },
+        "status": {
+          "type": ["string", "null"]
+        },
+        "currentPhase": {
+          "type": ["integer", "null"]
+        },
+        "replaces": {
+          "type": ["string", "null"]
+        }
+      }
+    },
+    "confirmToken": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{16,128}$"
+    },
+    "expiresAt": {
+      "type": "string",
+      "format": "date-time"
+    }
+  }
+}

package/pipeline/schemas/system-status.schema.json

@@ -0,0 +1,111 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/system-status.schema.json",
+  "title": "System status",
+  "description": "What GET /v1/system returns and `system-status.mjs --json` prints: CPU load, memory, free disk and what the pipeline itself uses. Numbers only: no path, process argument, user name or host name. A value that could not be measured is null, never 0.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion", "generatedAt", "cpu", "memory", "disk", "pipeline", "warnings"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "generatedAt": { "type": "string", "format": "date-time", "x-sensitivity": "none" },
+    "cpu": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["cores", "usage", "load"],
+      "x-sensitivity": "none",
+      "properties": {
+        "cores": { "type": "integer", "minimum": 0 },
+        "usage": {
+          "type": ["number", "null"],
+          "minimum": 0,
+          "maximum": 1,
+          "description": "Busy share of all cores over a short sampling window."
+        },
+        "load": {
+          "type": "array",
+          "minItems": 3,
+          "maxItems": 3,
+          "items": { "type": "number", "minimum": 0 },
+          "description": "Load average over 1, 5 and 15 minutes."
+        }
+      }
+    },
+    "memory": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["totalMb", "usedMb"],
+      "x-sensitivity": "none",
+      "properties": {
+        "totalMb": { "type": "integer", "minimum": 0 },
+        "usedMb": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Total minus what the OS reports free; on macOS that counts the file cache as used."
+        }
+      }
+    },
+    "disk": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["home", "logs"],
+      "x-sensitivity": "none",
+      "properties": {
+        "home": { "$ref": "#/$defs/disk" },
+        "logs": {
+          "oneOf": [{ "$ref": "#/$defs/disk" }],
+          "description": "The disk the run logs live on, when it is not the home disk; null when it is the same disk."
+        }
+      }
+    },
+    "pipeline": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sessions", "toolkit", "rssMb", "logsMb"],
+      "x-sensitivity": "none",
+      "properties": {
+        "sessions": {
+          "type": ["integer", "null"],
+          "minimum": 0,
+          "description": "Claude Code processes running."
+        },
+        "toolkit": {
+          "type": ["integer", "null"],
+          "minimum": 0,
+          "description": "multi-agent-toolkit server processes running."
+        },
+        "rssMb": {
+          "type": ["integer", "null"],
+          "minimum": 0,
+          "description": "Their resident memory together."
+        },
+        "logsMb": {
+          "type": ["integer", "null"],
+          "minimum": 0,
+          "description": "Size of the run log folder; null when it could not be measured in time."
+        }
+      }
+    },
+    "warnings": {
+      "type": "array",
+      "items": { "enum": ["disk-low", "cpu-busy"] },
+      "x-sensitivity": "none",
+      "description": "disk-low: under 10 percent of the home disk is free. cpu-busy: the 5-minute load is above the core count."
+    }
+  },
+  "$defs": {
+    "disk": {
+      "type": ["object", "null"],
+      "additionalProperties": false,
+      "required": ["totalMb", "freeMb"],
+      "properties": {
+        "totalMb": { "type": "integer", "minimum": 0 },
+        "freeMb": { "type": "integer", "minimum": 0 }
+      }
+    }
+  }
+}

package/pipeline/schemas/tool-call-request.schema.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/tool-call-request.schema.json",
+  "title": "Tool call request",
+  "description": "The body of POST /v1/tools/{name}/call: the tool's arguments, which must satisfy its inputSchema. At most 64 KiB.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "arguments": {
+      "type": "object"
+    }
+  }
+}

package/pipeline/schemas/tool-call.schema.json

@@ -0,0 +1,47 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/tool-call.schema.json",
+  "title": "Tool call result",
+  "description": "What POST /v1/tools/{name}/call returns (`toolkit-tools.mjs call`): the tool's result as text, JSON (as text) and images (base64, image types only). Every text is redacted.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion", "tool", "risk", "isError", "content"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "tool": {
+      "type": "string"
+    },
+    "risk": {
+      "enum": ["read", "low", "high"]
+    },
+    "isError": {
+      "type": "boolean"
+    },
+    "content": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["kind"],
+        "properties": {
+          "kind": {
+            "enum": ["text", "json", "image"]
+          },
+          "text": {
+            "type": "string"
+          },
+          "mime": {
+            "type": "string"
+          },
+          "data": {
+            "type": "string"
+          }
+        }
+      }
+    }
+  }
+}

package/pipeline/schemas/tools.schema.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/tools.schema.json",
+  "title": "Toolkit tools",
+  "description": "What GET /v1/tools returns (`toolkit-tools.mjs list`): every tool the registered multi-agent-toolkit MCP server serves, with its category (the name's prefix), risk from its own annotations (readOnlyHint read, destructiveHint high, else low) and its inputSchema, from which a client builds the form. Calls are denied by default; allowed says which tools can be called and reason why the others cannot.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion", "tools"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "tools": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "name",
+          "title",
+          "category",
+          "description",
+          "risk",
+          "inputSchema",
+          "allowed",
+          "reason"
+        ],
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "title": {
+            "type": ["string", "null"]
+          },
+          "category": {
+            "type": "string"
+          },
+          "description": {
+            "type": "string"
+          },
+          "risk": {
+            "enum": ["read", "low", "high"]
+          },
+          "inputSchema": {
+            "type": "object"
+          },
+          "allowed": {
+            "type": "boolean",
+            "description": "Whether POST /v1/tools/{name}/call accepts this tool: only a readOnlyHint tool whose inputSchema takes no location (path, URL, file, directory, output, project, root) and that is not in the web or context family."
+          },
+          "reason": {
+            "type": ["string", "null"]
+          }
+        }
+      }
+    },
+    "version": {
+      "type": ["string", "null"],
+      "description": "The exact toolkit version the panel starts: the registration's own when it names one, else the version the install recorded from the release.",
+      "x-sensitivity": "none"
+    }
+  }
+}

package/pipeline/schemas/unattended-profile.json

@@ -107,6 +107,10 @@
     ["Read(~/.netrc)", "plaintext host credentials"],
     ["Read(~/.git-credentials)", "plaintext git credentials"],
     ["Read(~/.docker/config.json)", "registry credentials"],
+    [
+      "Read(~/.claude/logs/multi-agent/contract-server/**)",
+      "the local contract server's bearer token, which can start sessions"
+    ],
     [
       "Edit(~/.claude/**)",
       "the installed pipeline, its settings, this profile and the runner's files; a run writes its logs and its PR request under the unattended run directory instead"
@@ -148,7 +152,7 @@
     ],
     [
       "MCP_TOOLKIT_INDEX_DENY",
-      "~/.ssh,~/.aws,~/.gnupg,~/Library/Keychains",
+      "~/.ssh,~/.aws,~/.gnupg,~/Library/Keychains,~/.claude/logs/multi-agent/contract-server,~/.claude/logs/multi-agent/office",
       "context_index never indexes, and context_get never returns, credential directories"
     ]
   ],
@@ -211,7 +215,8 @@
         "~/Library/Keychains",
         "~/.netrc",
         "~/.git-credentials",
-        "~/.docker/config.json"
+        "~/.docker/config.json",
+        "~/.claude/logs/multi-agent/contract-server"
       ]
     },
     "network": {

package/pipeline/scripts/_active-run.mjs

@@ -16,7 +16,8 @@
  *      that carries a different `hostSessionId` is another session's run and
  *      never matches this way.
  *
- * Nothing here decides anything; callers (run-stop-guard, run-scope-guard)
+ * Nothing here decides anything; callers (run-stop-guard, run-scope-guard,
+ * task-mirror)
  * apply their own rule to the run this returns. Zero runtime dependencies.
  *
  * @module pipeline/scripts/_active-run