@spinabot/brigade 0.1.2 → 1.0.1

package/dist/agents/tool-guard.js

@@ -0,0 +1,154 @@
+/**
+ * Tool-call guard — refuses problematic tool invocations BEFORE they
+ * execute. Wired into Pi's `session.agent.beforeToolCall` hook.
+ *
+ * Three failure modes caught here:
+ *
+ *   1. UNKNOWN TOOL — model hallucinated a name not in the allowlist.
+ *      Returns a refusal listing the real tools so it self-corrects on
+ *      the next turn.
+ *
+ *   2. WHITESPACE-WRAPPED NAME — provider emitted `"  read  "` instead
+ *      of `"read"`. Pi treats this as unknown. We trim before checking.
+ *      The error message tells the model to drop the spaces.
+ *
+ *   3. MALFORMED ARGS — empty args for a tool that needs params (xAI
+ *      sometimes emits broken JSON; Pi parses what it can, leaves us
+ *      with `{}`). Refuse with explicit instruction to retry.
+ *
+ * Ported from `core/agent.ts:807-929` (Runtime A) — same logic, no
+ * functional change. Lives here so Runtime B can use it without
+ * importing from Runtime A.
+ */
+/**
+ * Tools that DON'T need parameters. If the model calls one of these
+ * with empty args, that's normal — don't flag.
+ *
+ * Small allowlist of common parameter-less tools across our provider
+ * catalog. Add new ones here as they ship.
+ */
+const PARAMETERLESS_TOOLS = new Set([
+    "ping",
+    "status",
+    "list_models",
+    "list-models",
+    "version",
+    "help",
+    "now",
+    // Brigade tools with empty `Type.Object({})` schemas — calling with
+    // `{}` is the CORRECT shape, not a malformed-args bug.
+    "agents_list",
+]);
+export function trimToolCallName(name) {
+    if (typeof name !== "string")
+        return "";
+    return name.trim();
+}
+/**
+ * Canonical tool-name normaliser shared by every `beforeToolCall` hook
+ * in the chain (unknown-tool guard, loop detector, exec gate). Lowercase
+ * + trim, so a provider that emits `Read`, `READ`, or `  read  ` is
+ * handled identically across all three layers. Without a shared
+ * helper, the layers diverge — earlier audits caught the bash gate
+ * doing lowercase matching while the path guards used raw casing.
+ *
+ */
+export function normalizeToolName(name) {
+    if (typeof name !== "string")
+        return "";
+    return name.trim().toLowerCase();
+}
+/**
+ * Heuristic detector for malformed tool arguments. Returns true when
+ * the call looks suspiciously empty (likely a streaming JSON parse
+ * failure) for a tool that typically requires arguments.
+ *
+ * Pure approximation — true repair would need stream-level intervention
+ * (see `wrapStreamFnWithToolCallRepair` in `stream-wrappers.ts`). This
+ * surface-level check is the second-line defence: even if the stream
+ * wrapper missed it, the guard still refuses execution.
+ */
+export function isLikelyMalformedArgs(args, toolName) {
+    if (args === null || args === undefined)
+        return true;
+    if (typeof args !== "object")
+        return true;
+    const keys = Object.keys(args);
+    if (keys.length === 0) {
+        const normalized = (toolName ?? "").toLowerCase();
+        return !PARAMETERLESS_TOOLS.has(normalized);
+    }
+    return false;
+}
+/**
+ * Build a `beforeToolCall` hook that blocks problematic tool calls
+ * before they execute.
+ *
+ * Wire via:
+ *   session.agent.beforeToolCall = makeUnknownToolGuard(toolNames);
+ *
+ * To compose with another `beforeToolCall` hook (e.g. operator-defined
+ * audit policy), wrap manually:
+ *   const guard = makeUnknownToolGuard(toolNames);
+ *   const userHook = ...;
+ *   session.agent.beforeToolCall = async (ctx, signal) => {
+ *     const guarded = await guard(ctx, signal);
+ *     if (guarded?.block) return guarded;        // hard refusal wins
+ *     return userHook(ctx, signal);              // otherwise user policy
+ *   };
+ */
+export function makeUnknownToolGuard(allowedToolNames) {
+    // Normalise the allowlist so a model that emits `Read`, `READ`, or
+    // `  read  ` matches a `read` entry. The shared `normalizeToolName`
+    // helper applies the same rules at every other hook layer.
+    const allowed = new Set(allowedToolNames.map((n) => normalizeToolName(n)));
+    return async (ctx) => {
+        // Pi's BeforeToolCallContext exposes the tool call. Field shape
+        // varies slightly across Pi versions — the most stable accessors
+        // are `name` and `arguments`/`args`.
+        const rawName = ctx?.toolCall?.name
+            ?? ctx?.name
+            ?? "";
+        const name = normalizeToolName(rawName);
+        const args = ctx
+            ?.toolCall?.arguments
+            ?? ctx?.args
+            ?? ctx?.arguments
+            ?? {};
+        // CHECK ORDER MATTERS:
+        //   1. Unknown tool first — if the name is wrong, the model has
+        //      to retry with a different tool entirely; arg validation
+        //      is moot.
+        //   2. Malformed args second — name was right but call was
+        //      empty; model needs to retry with proper params for the
+        //      SAME tool.
+        // Without this ordering, a call with both bad name AND empty
+        // args would only learn about the name issue on the first
+        // retry, then fail again on the args.
+        if (!name || !allowed.has(name)) {
+            const list = [...allowed].sort().join(", ") || "(no tools enabled)";
+            const trimmedRaw = trimToolCallName(rawName);
+            const hadCasing = typeof rawName === "string" && trimmedRaw !== name;
+            const hadWhitespace = typeof rawName === "string" && rawName !== trimmedRaw;
+            const hint = hadCasing && hadWhitespace
+                ? ` (note: name normalises to "${name}" — re-emit lowercased and without surrounding whitespace)`
+                : hadCasing
+                    ? ` (note: name normalises to "${name}" — re-emit lowercased)`
+                    : hadWhitespace
+                        ? ` (note: name had extra whitespace — re-emit as "${name}" without spaces)`
+                        : "";
+            return {
+                block: true,
+                reason: `Tool "${String(rawName)}" is not available${hint}. Available tools: ${list}. Please use one of those instead.`,
+            };
+        }
+        if (isLikelyMalformedArgs(args, name)) {
+            return {
+                block: true,
+                reason: `Tool "${name}" was called with empty/missing arguments. Please retry with the required parameters.`,
+            };
+        }
+        return undefined;
+    };
+}
+//# sourceMappingURL=tool-guard.js.map

package/dist/agents/tool-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.js","sourceRoot":"","sources":["../../src/agents/tool-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAeH;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,QAAQ;IACR,aAAa;IACb,aAAa;IACb,SAAS;IACT,MAAM;IACN,KAAK;IACL,oEAAoE;IACpE,uDAAuD;IACvD,aAAa;CACb,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAa,EAAE,QAAgB;IACpE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,gBAA0B;IAC9D,mEAAmE;IACnE,oEAAoE;IACpE,2DAA2D;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACpB,gEAAgE;QAChE,iEAAiE;QACjE,qCAAqC;QACrC,MAAM,OAAO,GAAI,GAAyD,EAAE,QAAQ,EAAE,IAAI;eACrF,GAA0B,EAAE,IAAI;eACjC,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAI,GAAmF;YAChG,EAAE,QAAQ,EAAE,SAAS;eACjB,GAA0B,EAAE,IAAI;eAChC,GAA+B,EAAE,SAAS;eAC3C,EAAE,CAAC;QAEP,uBAAuB;QACvB,gEAAgE;QAChE,+DAA+D;QAC/D,gBAAgB;QAChB,2DAA2D;QAC3D,8DAA8D;QAC9D,kBAAkB;QAClB,6DAA6D;QAC7D,0DAA0D;QAC1D,sCAAsC;QAEtC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;YACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,CAAC;YACrE,MAAM,aAAa,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,UAAU,CAAC;YAC5E,MAAM,IAAI,GACT,SAAS,IAAI,aAAa;gBACzB,CAAC,CAAC,+BAA+B,IAAI,4DAA4D;gBACjG,CAAC,CAAC,SAAS;oBACV,CAAC,CAAC,+BAA+B,IAAI,yBAAyB;oBAC9D,CAAC,CAAC,aAAa;wBACd,CAAC,CAAC,mDAAmD,IAAI,mBAAmB;wBAC5E,CAAC,CAAC,EAAE,CAAC;YACT,OAAO;gBACN,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,sBAAsB,IAAI,oCAAoC;aACvH,CAAC;QACH,CAAC;QAED,IAAI,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO;gBACN,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,SAAS,IAAI,uFAAuF;aAC5G,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC;AACH,CAAC"}

package/dist/agents/tool-loop-detector.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Tool-loop detector — catches the model when it's stuck calling the same
+ * tool with the same arguments over and over. A real failure mode: the
+ * model emits `read({path: "src/foo.ts"})` 30 times in a row, burning
+ * turns and tokens without making progress.
+ *
+ * Two levels of escalation:
+ *
+ *   - WARNING (default: 10 identical calls in a row) — log it via the
+ *     `tool-blocked` bus event with `severity: "warning"` and let the
+ *     call pass through. This lets a marginally-redundant pattern
+ *     ("read X, then read X again to confirm") proceed, while still
+ *     surfacing the signal to operators / dashboards.
+ *
+ *   - CRITICAL (default: 20 identical calls in a row) — block with a
+ *     synthetic tool-result. The model sees a refusal explaining what
+ *     it was doing and gets pushed to try something different. Pi
+ *     turns the `{block: true, reason}` into a synthetic tool_result
+ *     so the model self-corrects on the next turn.
+ *
+ * State is process-singleton keyed by session key, NOT per-turn. A
+ * model that loops across turn boundaries (steer retries, content-
+ * quality re-prompts) is still detected. Memory cap: the ring buffer
+ * holds the last N tool calls per session (default 50), so a busy
+ * gateway with many sessions stays bounded.
+ *
+ * Wire it into the composed `beforeToolCall` chain BEFORE the exec-gate
+ * so a stuck model doesn't even consult the approval allowlist:
+ *
+ *   const nameGuard  = makeUnknownToolGuard(enabledToolNames);
+ *   const loopGuard  = makeToolLoopDetector({ctxRef});
+ *   const execGate   = makeExecGate({ctxRef});
+ *   session.agent.beforeToolCall = async (ctx, signal) => {
+ *     return (await nameGuard(ctx, signal))
+ *         ?? (await loopGuard(ctx, signal))
+ *         ?? (await execGate(ctx, signal));
+ *   };
+ */
+import { type BrigadeBeforeToolCallHook } from "./tool-guard.js";
+export interface ToolLoopDetectorConfig {
+    /** Block the call after this many identical consecutive calls. Default 20. */
+    blockAfter: number;
+    /** Emit a warning at this count and every WARNING_BUCKET above it. Default 10. */
+    warnAfter: number;
+    /** Max ring-buffer size per session. Older entries fall out. Default 50. */
+    windowSize: number;
+    /**
+     * Per-turn VOLUME warn — emit an operator-facing warning once the turn
+     * has made this many tool calls (any tools/args). Telemetry only; passes
+     * through. Default 30.
+     */
+    perTurnWarnAt: number;
+    /**
+     * Per-turn VOLUME block — refuse further tool calls once a single turn
+     * exceeds this many calls without finishing. This is the catch-all for a
+     * VARIED flail the identical-streak detector can't see. Set high enough
+     * that legitimate multi-step turns (read many files, edit several) never
+     * trip it; low enough that a runaway can't burn unbounded credits.
+     * Default 60.
+     */
+    perTurnBlockAt: number;
+}
+export declare const DEFAULT_TOOL_LOOP_CONFIG: ToolLoopDetectorConfig;
+export interface ToolLoopContext {
+    runId?: string;
+    agentId?: string;
+    /**
+     * Required for cross-turn state. Brigade's session key uniquely
+     * identifies the JSONL transcript; loop state is keyed by it so a
+     * model looping across turns is still detected. When unset (unit
+     * tests), state is keyed by `"_default"`.
+     */
+    sessionKey?: string;
+}
+export interface MakeToolLoopDetectorOptions {
+    ctxRef?: {
+        value: ToolLoopContext;
+    };
+    config?: Partial<ToolLoopDetectorConfig>;
+}
+/**
+ * Build a beforeToolCall hook that detects loops. Returns `undefined`
+ * (pass through) by default; returns a warn-and-pass for WARNING-level
+ * streaks; returns `{block: true, reason}` only at CRITICAL.
+ *
+ * Side effects:
+ *  - Updates the per-session ring buffer for every call seen.
+ *  - Emits `tool-blocked` bus events for both warning and critical
+ *    levels (consumers can filter on `severity` if needed).
+ */
+export declare function makeToolLoopDetector(opts?: MakeToolLoopDetectorOptions): BrigadeBeforeToolCallHook;
+/**
+ * Drop the loop-detection ring buffer for a single session. Call this
+ * when a session ends (e.g. operator closes the TUI, gateway client
+ * disconnects, sub-agent run completes) so a long-lived gateway
+ * doesn't accumulate per-session state forever.
+ *
+ * In v1 we don't have a session-end hook wired anywhere — the natural
+ * caller is the gateway when it tears down a `BrigadeClient` and a
+ * future sub-agent runner when its spawn returns. Until then, the
+ * function is exported for callers and tested in isolation; v1
+ * memory growth is bounded at ~1.6 KB per session (50-entry ring
+ * buffer × ~32 bytes per entry).
+ */
+export declare function dropToolLoopSession(sessionKey: string): void;
+/**
+ * Test-only helper. Wipes all per-session state so tests start from a
+ * clean slate without leaking between cases.
+ */
+export declare function __resetToolLoopStateForTests(): void;
+/**
+ * Test/debug helper: how many sessions have state right now.
+ */
+export declare function __toolLoopSessionCount(): number;
+//# sourceMappingURL=tool-loop-detector.d.ts.map

package/dist/agents/tool-loop-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-loop-detector.d.ts","sourceRoot":"","sources":["../../src/agents/tool-loop-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAOH,OAAO,EAAE,KAAK,yBAAyB,EAAqB,MAAM,iBAAiB,CAAC;AAyCpF,MAAM,WAAW,sBAAsB;IACtC,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,wBAAwB,EAAE,sBAMtC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,eAAe,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACzC;AAoED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,IAAI,GAAE,2BAAgC,GACpC,yBAAyB,CAgJ3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C"}

package/dist/agents/tool-loop-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-loop-detector.js","sourceRoot":"","sources":["../../src/agents/tool-loop-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAItC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAkC,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA+BpF,MAAM,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;AAC1D,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC;AA0BpC,MAAM,CAAC,MAAM,wBAAwB,GAA2B;IAC/D,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,EAAE;IACd,aAAa,EAAE,EAAE;IACjB,cAAc,EAAE,EAAE;CAClB,CAAC;AAmBF;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,MAAe;IAC/D,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,SAAS,GAAG,kBAAkB,CAAC;IAChC,CAAC;IACD,OAAO,MAAM;SACX,UAAU,CAAC,MAAM,CAAC;SAClB,MAAM,CAAC,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IAClD,IAAI,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC3F,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,KAA6B,EAAE,GAAW;IACvE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;;YAC9B,MAAM;IACZ,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,CAAS;IACzB,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC;IACvB,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAClD,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;QAChB,KAAK,CAAC;YACL,OAAO,GAAG,CAAC,IAAI,CAAC;QACjB,KAAK,CAAC;YACL,OAAO,GAAG,CAAC,IAAI,CAAC;QACjB,KAAK,CAAC;YACL,OAAO,GAAG,CAAC,IAAI,CAAC;QACjB;YACC,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CACnC,OAAoC,EAAE;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,EAAqB,EAAE,CAAC;IAC/D,MAAM,MAAM,GAA2B;QACtC,GAAG,wBAAwB;QAC3B,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;KACtB,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAQ,EAAE;QAChE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,cAAc,CAAC;YACd,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;YACxB,QAAQ;YACR,MAAM;SACN,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,KAAK,EAAE,GAA0B,EAA6C,EAAE;QACtF,MAAM,OAAO,GAAI,GAAyD,EAAE,QAAQ,EAAE,IAAI;eACrF,GAA0B,EAAE,IAAI;eACjC,EAAE,CAAC;QACP,kEAAkE;QAClE,mEAAmE;QACnE,gEAAgE;QAChE,yDAAyD;QACzD,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAE5B,MAAM,IAAI,GAAI,GAAmF;YAChG,EAAE,QAAQ,EAAE,SAAS;eACjB,GAA0B,EAAE,IAAI;eAChC,GAA+B,EAAE,SAAS;eAC3C,EAAE,CAAC;QAEP,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC;QACzD,MAAM,KAAK,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE9C,mEAAmE;QACnE,qEAAqE;QACrE,oEAAoE;QACpE,iEAAiE;QACjE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GACd,KAAK,CAAC,MAAM,KAAK,IAAI;YACrB,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC;YACxC,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,oBAAoB,CAAC,CAAC;QACzE,IAAI,SAAS,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACrB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpB,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;QACvB,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;QAErB,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC9C,iEAAiE;YACjE,iEAAiE;YACjE,uCAAuC;YACvC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpB,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,MAAM,GACX,gCAAgC,SAAS,sCAAsC;gBAC/E,iFAAiF;gBACjF,uFAAuF;gBACvF,0FAA0F;gBAC1F,qCAAqC,CAAC;YACvC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,KAAK,CAAC,SAAS,GAAG,YAAY,IAAI,cAAc,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;gBAC5E,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBACnD,aAAa,CACZ,IAAI,EACJ,oCAAoC,KAAK,CAAC,SAAS,6BAA6B;oBAC/E,8EAA8E;oBAC9E,8BAA8B,CAC/B,CAAC;YACH,CAAC;YACD,kEAAkE;QACnE,CAAC;QAED,oEAAoE;QACpE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,iBAAiB,GAAG,CAAC,CAAC;QAE1C,+DAA+D;QAC/D,iEAAiE;QACjE,kEAAkE;QAClE,iEAAiE;QACjE,gEAAgE;QAChE,8DAA8D;QAC9D,8DAA8D;QAC9D,2DAA2D;QAC3D,iEAAiE;QACjE,IAAI,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,MAAM,GACX,SAAS,IAAI,8BAA8B,OAAO,CAAC,WAAW,CAAC,kBAAkB;gBACjF,OAAO,IAAI,gEAAgE;gBAC3E,sDAAsD,IAAI,eAAe;gBACzE,yEAAyE;gBACzE,qEAAqE;gBACrE,sEAAsE;gBACtE,uEAAuE;gBACvE,sDAAsD,CAAC;YACxD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAChC,CAAC;QAED,+DAA+D;QAC/D,yDAAyD;QACzD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,iEAAiE;QACjE,+DAA+D;QAC/D,gCAAgC;QAChC,IAAI,WAAW,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,WAAW,GAAG,QAAQ,IAAI,cAAc,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAChE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;gBAC1C,MAAM,MAAM,GACX,SAAS,IAAI,mBAAmB,OAAO,CAAC,WAAW,CAAC,+BAA+B;oBACnF,2CAA2C,MAAM,CAAC,UAAU,oBAAoB;oBAChF,wDAAwD,IAAI,eAAe;oBAC3E,qBAAqB,CAAC;gBACvB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACrD,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B;IAC3C,aAAa,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACrC,OAAO,aAAa,CAAC,IAAI,CAAC;AAC3B,CAAC"}

package/dist/agents/tool-summaries.d.ts

@@ -0,0 +1,3 @@
+export declare const BRIGADE_TOOL_SUMMARIES: Record<string, string>;
+export declare function resolveToolSummary(name: string): string | undefined;
+//# sourceMappingURL=tool-summaries.d.ts.map

package/dist/agents/tool-summaries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-summaries.d.ts","sourceRoot":"","sources":["../../src/agents/tool-summaries.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA0DzD,CAAC;AAKF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGnE"}

package/dist/agents/tool-summaries.js

@@ -0,0 +1,78 @@
+// Tool summaries used in the system prompt's `## Tooling` section.
+//
+// The summaries are short, action-oriented one-liners — they tell the model
+// what each tool DOES, not how it works. Verbose docs belong in the model's
+// own tool-schema introspection (Pi attaches the full ToolDefinition to the
+// API request); the system prompt's job is to advertise the surface area
+// so the model picks the right name on the first try and doesn't invent
+// aliases like `cat` or `ls -la`.
+//
+// Short, action-oriented summaries by tool name. When Pi adds a tool name
+// we don't recognise, the renderer falls back to "no summary" and lets
+// the model rely on its tool schema.
+export const BRIGADE_TOOL_SUMMARIES = {
+    read: "Read file contents (text or binary).",
+    write: "Create or overwrite a file with new content.",
+    edit: "Make precise, targeted edits to an existing file.",
+    bash: "Run a shell command in the agent's working directory.",
+    grep: "Search file contents for a regex pattern (ripgrep-backed).",
+    find: "Find files by name or glob pattern.",
+    ls: "List the contents of a directory.",
+    // Primitive #4 (Memory). Recall = search; read = bounded excerpt.
+    // Writing memory uses `write_memory` for the structured fact store
+    // (declarative facts, segmented + decay-aware); free-form long notes
+    // append to `memory/<today>.md` via the regular `write`/`edit` tools.
+    // Wording for `recall_memory` is deliberately scoped to remembered
+    // CONTENT (preferences/decisions/people/dates/todos) — NOT live state
+    // like which agents/channels/skills currently exist. Live state comes
+    // from the corresponding inventory tools below; recall_memory is for
+    // remembered facts about the past.
+    recall_memory: "Search your durable memory for remembered preferences, decisions, people, dates, or todos. NOT for live inventory (use agents_list / skills / etc. for what currently exists).",
+    read_memory: "Read a bounded excerpt of a memory file found via recall_memory.",
+    write_memory: "Save a durable, declarative fact (preference, identity, correction) into structured memory.",
+    // Agent + skill catalog tools. Summaries mirror the reference
+    // implementation's terse one-liners — the structured behaviour (no
+    // inline catalog → must call the tool) does the steering work; the
+    // catalog is just the menu.
+    agents_list: "List EVERY configured Brigade agent with canSpawn/canSend reachability flags. Call this — don't enumerate agents from memory.",
+    manage_agent: "Owner-only: create, delete, or update an agent's identity. Use this for any agent-catalog mutation — never hand-edit brigade.json.",
+    manage_skill: "Owner-only: create or delete a skill (agent-scoped or shared). Never write SKILL.md by hand; this tool handles the catalog atomically.",
+    // Consolidated virtual-office surface (only present when cfg.org is set).
+    org: "Org tool: describe your position + peers, show the full chart, delegate cross-dept, init/set/explain. Single tool for everything org-shaped.",
+    // Session / sub-agent surface — terse summaries mirroring the
+    // reference codebase.
+    sessions_list: "List other sessions (incl. sub-agents) with filters/last",
+    sessions_send: "Send a message to another session/sub-agent",
+    sessions_history: "Fetch history for another session/sub-agent",
+    sessions_spawn: "Spawn an isolated sub-agent session",
+    subagents: "List, steer, or kill sub-agent runs for this requester session",
+    spawn_agent: "Spawn a one-shot sub-agent for an independent, parallelisable subtask. Returns its final reply synchronously.",
+    spawn_agents: "Spawn multiple independent sub-agents in parallel (one task each); returns their replies.",
+    // Channel + cron surface.
+    send_message: "Send a message on a connected channel (WhatsApp, Slack, …). From a channel-routed turn just pass {text}; otherwise pass {channel, to, text}.",
+    cron: "Schedule a task to run later — `at`/cron schedule routed through the same channel at fire time.",
+    // Web surface. Catalog summaries are intentionally terse — the model
+    // sees the full per-tool `description:` field at every tool-use
+    // decision; the catalog is just the menu. Lifted verbatim from the
+    // upstream reference's tool-catalog 1-liners (`Search the web` /
+    // `Fetch and extract readable content from a URL` / `Control web
+    // browser`).
+    web_search: "Search the web",
+    fetch_url: "Fetch and extract readable content from a URL",
+    web_extract: "Extract content from a batch of URLs in one call",
+    browser: "Control web browser",
+    // Reserved for future Brigade additions — keep them documented even when
+    // not yet wired so a single source-of-truth covers any tool name Pi
+    // might surface via getActiveToolNames().
+    apply_patch: "Apply a multi-file patch.",
+    process: "Run a long-lived shell process in the background.",
+    message: "Send a message on the active channel.",
+};
+// Resolve a one-line summary for the named tool. Falls back to a marker
+// the renderer can choose to hide entirely (so unknown tools surface as
+// just `- name` without a misleading invented description).
+export function resolveToolSummary(name) {
+    const normalised = name.trim().toLowerCase();
+    return BRIGADE_TOOL_SUMMARIES[normalised];
+}
+//# sourceMappingURL=tool-summaries.js.map

package/dist/agents/tool-summaries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-summaries.js","sourceRoot":"","sources":["../../src/agents/tool-summaries.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,wEAAwE;AACxE,kCAAkC;AAClC,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,qCAAqC;AAErC,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,IAAI,EAAE,sCAAsC;IAC5C,KAAK,EAAE,8CAA8C;IACrD,IAAI,EAAE,mDAAmD;IACzD,IAAI,EAAE,uDAAuD;IAC7D,IAAI,EAAE,4DAA4D;IAClE,IAAI,EAAE,qCAAqC;IAC3C,EAAE,EAAE,mCAAmC;IACvC,kEAAkE;IAClE,mEAAmE;IACnE,qEAAqE;IACrE,sEAAsE;IACtE,mEAAmE;IACnE,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,mCAAmC;IACnC,aAAa,EAAE,gLAAgL;IAC/L,WAAW,EAAE,kEAAkE;IAC/E,YAAY,EAAE,6FAA6F;IAC3G,8DAA8D;IAC9D,mEAAmE;IACnE,mEAAmE;IACnE,4BAA4B;IAC5B,WAAW,EACT,+HAA+H;IACjI,YAAY,EAAE,oIAAoI;IAClJ,YAAY,EAAE,wIAAwI;IACtJ,0EAA0E;IAC1E,GAAG,EAAE,8IAA8I;IACnJ,8DAA8D;IAC9D,sBAAsB;IACtB,aAAa,EAAE,0DAA0D;IACzE,aAAa,EAAE,6CAA6C;IAC5D,gBAAgB,EAAE,6CAA6C;IAC/D,cAAc,EAAE,qCAAqC;IACrD,SAAS,EAAE,gEAAgE;IAC3E,WAAW,EAAE,+GAA+G;IAC5H,YAAY,EAAE,2FAA2F;IACzG,0BAA0B;IAC1B,YAAY,EAAE,8IAA8I;IAC5J,IAAI,EAAE,iGAAiG;IACvG,qEAAqE;IACrE,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,iEAAiE;IACjE,aAAa;IACb,UAAU,EAAE,gBAAgB;IAC5B,SAAS,EAAE,+CAA+C;IAC1D,WAAW,EAAE,kDAAkD;IAC/D,OAAO,EAAE,qBAAqB;IAC9B,yEAAyE;IACzE,oEAAoE;IACpE,0CAA0C;IAC1C,WAAW,EAAE,2BAA2B;IACxC,OAAO,EAAE,mDAAmD;IAC5D,OAAO,EAAE,uCAAuC;CACjD,CAAC;AAEF,wEAAwE;AACxE,wEAAwE;AACxE,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,sBAAsB,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC"}

package/dist/agents/tools/agents-list-tool.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `agents_list` tool — read-only enumeration of EVERY configured Brigade agent.
+ *
+ * Single-source-of-truth design: the catalog itself is unfiltered — the
+ * model sees every agent that exists in `cfg.agents` (defaults excluded).
+ * Reachability is surfaced as per-row flags so the model can reason about
+ * what to do with each agent without having to call additional tools.
+ *
+ * Contract:
+ *
+ *   {
+ *     requester: string,
+ *     agents: [{
+ *       id: string,
+ *       name?: string,
+ *       configured: boolean,    // id is materialised in cfg.agents
+ *       self?: boolean,         // true on the caller row (placed FIRST)
+ *       canSpawn: boolean,      // id in subagents.allowAgents (or '*')
+ *       canSend: boolean,       // A2A policy allows (caller → id)
+ *     }, ...]
+ *   }
+ *
+ * The caller row is ALWAYS first and marked `self: true`. Remaining rows
+ * are configured agents in alphabetical order. The two reachability gates
+ * — spawn-allowlist (`subagents.allowAgents`) and A2A policy
+ * (`cfg.session.agentToAgent`) — are evaluated per row so the model can
+ * tell at a glance which peers it may delegate to vs. spawn as a
+ * subagent.
+ */
+import { Type } from "typebox";
+import type { BrigadeTool } from "./types.js";
+declare const AgentsListParams: Type.TObject<{}>;
+interface AgentsListEntry {
+    id: string;
+    name?: string;
+    configured: boolean;
+    self?: boolean;
+    canSpawn: boolean;
+    canSend: boolean;
+}
+interface AgentsListResult {
+    requester: string;
+    agents: AgentsListEntry[];
+}
+export interface MakeAgentsListToolOptions {
+    /** Caller's agent id (so the requester field is accurate). */
+    requesterAgentId?: string;
+}
+export declare function makeAgentsListTool(opts?: MakeAgentsListToolOptions): BrigadeTool<typeof AgentsListParams, AgentsListResult>;
+export {};
+//# sourceMappingURL=agents-list-tool.d.ts.map

package/dist/agents/tools/agents-list-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-list-tool.d.ts","sourceRoot":"","sources":["../../../src/agents/tools/agents-list-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAU/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,QAAA,MAAM,gBAAgB,kBAAkB,CAAC;AAEzC,UAAU,eAAe;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,UAAU,gBAAgB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACzC,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CACjC,IAAI,GAAE,yBAA8B,GAClC,WAAW,CAAC,OAAO,gBAAgB,EAAE,gBAAgB,CAAC,CA6HxD"}

package/dist/agents/tools/agents-list-tool.js

@@ -0,0 +1,167 @@
+/**
+ * `agents_list` tool — read-only enumeration of EVERY configured Brigade agent.
+ *
+ * Single-source-of-truth design: the catalog itself is unfiltered — the
+ * model sees every agent that exists in `cfg.agents` (defaults excluded).
+ * Reachability is surfaced as per-row flags so the model can reason about
+ * what to do with each agent without having to call additional tools.
+ *
+ * Contract:
+ *
+ *   {
+ *     requester: string,
+ *     agents: [{
+ *       id: string,
+ *       name?: string,
+ *       configured: boolean,    // id is materialised in cfg.agents
+ *       self?: boolean,         // true on the caller row (placed FIRST)
+ *       canSpawn: boolean,      // id in subagents.allowAgents (or '*')
+ *       canSend: boolean,       // A2A policy allows (caller → id)
+ *     }, ...]
+ *   }
+ *
+ * The caller row is ALWAYS first and marked `self: true`. Remaining rows
+ * are configured agents in alphabetical order. The two reachability gates
+ * — spawn-allowlist (`subagents.allowAgents`) and A2A policy
+ * (`cfg.session.agentToAgent`) — are evaluated per row so the model can
+ * tell at a glance which peers it may delegate to vs. spawn as a
+ * subagent.
+ */
+import { Type } from "typebox";
+import { resolveDefaultAgentId } from "../agent-scope.js";
+import { listAgentEntries } from "../../cli/commands/agents-config.js";
+import { loadConfig } from "../../core/config.js";
+import { orgGraphAsA2APolicy } from "../org/a2a-adapter.js";
+import { deriveOrgDisplayGraph } from "../org/derive-graph.js";
+import { DEFAULT_AGENT_ID, normalizeAgentId } from "../routing/session-key.js";
+import { jsonResult } from "./common.js";
+import { createAgentToAgentPolicy } from "./sessions/shared.js";
+const AgentsListParams = Type.Object({});
+export function makeAgentsListTool(opts = {}) {
+    return {
+        name: "agents_list",
+        label: "Agents",
+        description: "List EVERY agent currently configured. canSpawn/canSend flags tell you what is actually reachable. CALL THIS for any who/which/how-many agents question — never enumerate from memory.",
+        parameters: AgentsListParams,
+        execute: async (_toolCallId) => {
+            const cfg = loadConfig();
+            const requesterAgentId = normalizeAgentId(opts.requesterAgentId ?? DEFAULT_AGENT_ID);
+            // Brigade's cfg.agents is a KEYED MAP. Pull non-defaults entries via
+            // the same helper the `agents list` CLI uses; this is what powers
+            // `configured: true` for every row.
+            const entries = listAgentEntries(cfg);
+            const configuredIds = new Set();
+            const nameMap = new Map();
+            for (const { id, entry } of entries) {
+                const normId = normalizeAgentId(id);
+                configuredIds.add(normId);
+                const name = typeof entry.name === "string" ? entry.name.trim() : "";
+                if (name)
+                    nameMap.set(normId, name);
+            }
+            // Spawn-allowlist resolution (subagents.allowAgents). Per-agent
+            // override → defaults fallback → empty. `*` is the wildcard.
+            const spawnAllow = resolveSpawnAllowAgents(cfg, requesterAgentId);
+            const spawnAllowAny = spawnAllow.some((v) => v.trim() === "*");
+            const spawnAllowSet = new Set(spawnAllow
+                .filter((v) => v.trim() && v.trim() !== "*")
+                .map((v) => normalizeAgentId(v)));
+            const canSpawnTarget = (id) => spawnAllowAny || spawnAllowSet.has(id);
+            // A2A policy resolution (cfg.session.agentToAgent). brigade.json
+            // stores `{from, to}` pairs — flatten to a single allow list (the
+            // matcher checks both directions internally; see
+            // `createAgentToAgentPolicy` in tools/sessions/shared.ts).
+            const a2aRaw = cfg.session?.agentToAgent;
+            const a2aAllow = [];
+            if (Array.isArray(a2aRaw?.allow)) {
+                for (const pair of a2aRaw?.allow ?? []) {
+                    const from = typeof pair?.from === "string" ? pair.from.trim() : "";
+                    const to = typeof pair?.to === "string" ? pair.to.trim() : "";
+                    if (from)
+                        a2aAllow.push(from);
+                    if (to)
+                        a2aAllow.push(to);
+                }
+            }
+            // Stage C — when cfg.org is present AND mode === "derived" (or
+            // "open"), derived A2A drives canSend reasoning. Otherwise the
+            // LEGACY policy path runs unchanged (cfg.org absent → identical
+            // behaviour to pre-org installs).
+            const orgCfg = cfg.org;
+            let a2aPolicy = createAgentToAgentPolicy({
+                enabled: !!a2aRaw?.enabled,
+                allow: a2aAllow,
+            });
+            if (orgCfg && orgCfg.a2a?.mode !== "explicit") {
+                const graph = deriveOrgDisplayGraph(cfg);
+                if (graph) {
+                    // Same orchestrator bypass as resolveSessionAccessPolicy —
+                    // keep the canSend flags this tool REPORTS consistent with
+                    // what sessions_send actually ENFORCES, or the model sees
+                    // "canSend: true" rows it then can't message (or vice versa).
+                    const restrict = orgCfg.a2a
+                        ?.restrictDefaultAgent === true;
+                    a2aPolicy = orgGraphAsA2APolicy(graph, restrict ? {} : { orchestratorId: resolveDefaultAgentId(cfg) });
+                }
+            }
+            // Build the caller row first so it leads the output and so its
+            // `configured` flag accounts for the "default agent always exists"
+            // rule.
+            const requesterConfigured = configuredIds.has(requesterAgentId) || requesterAgentId === DEFAULT_AGENT_ID;
+            const requesterRow = {
+                id: requesterAgentId,
+                configured: requesterConfigured,
+                self: true,
+                // Self-send and self-spawn are always permitted (the A2A policy
+                // short-circuits `requester === target`; spawn-on-self is a
+                // no-op that the runtime allows so the model isn't gated on
+                // trivial cases).
+                canSpawn: true,
+                canSend: true,
+            };
+            const requesterName = nameMap.get(requesterAgentId);
+            if (requesterName)
+                requesterRow.name = requesterName;
+            // Every other configured agent — alphabetical. NO allowlist
+            // filtering for visibility; reachability lives in the flags.
+            const peerIds = [...configuredIds]
+                .filter((id) => id !== requesterAgentId)
+                .sort((a, b) => a.localeCompare(b));
+            const peers = peerIds.map((id) => {
+                const row = {
+                    id,
+                    configured: true,
+                    canSpawn: canSpawnTarget(id),
+                    canSend: a2aPolicy.isAllowed(requesterAgentId, id),
+                };
+                const name = nameMap.get(id);
+                if (name)
+                    row.name = name;
+                return row;
+            });
+            return jsonResult({
+                requester: requesterAgentId,
+                agents: [requesterRow, ...peers],
+            });
+        },
+    };
+}
+/**
+ * Resolve `subagents.allowAgents` with per-agent override → defaults fallback.
+ * Returns `[]` (no peers) when neither is configured.
+ */
+function resolveSpawnAllowAgents(cfg, agentId) {
+    const agents = cfg?.agents;
+    if (!agents || typeof agents !== "object")
+        return [];
+    const entry = agents[agentId];
+    const perAgent = entry?.subagents?.allowAgents;
+    if (Array.isArray(perAgent))
+        return perAgent.filter((v) => typeof v === "string");
+    const defaults = agents.defaults;
+    const fallback = defaults?.subagents?.allowAgents;
+    if (Array.isArray(fallback))
+        return fallback.filter((v) => typeof v === "string");
+    return [];
+}
+//# sourceMappingURL=agents-list-tool.js.map

package/dist/agents/tools/agents-list-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-list-tool.js","sourceRoot":"","sources":["../../../src/agents/tools/agents-list-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhE,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAqBzC,MAAM,UAAU,kBAAkB,CACjC,OAAkC,EAAE;IAEpC,OAAO;QACN,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,QAAQ;QACf,WAAW,EACV,wLAAwL;QACzL,UAAU,EAAE,gBAAgB;QAC5B,OAAO,EAAE,KAAK,EAAE,WAAmB,EAA8C,EAAE;YAClF,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,CAAC;YAErF,qEAAqE;YACrE,kEAAkE;YAClE,oCAAoC;YACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC1C,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACpC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,IAAI,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YAED,gEAAgE;YAChE,6DAA6D;YAC7D,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;YAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAC5B,UAAU;iBACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC;iBAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CACjC,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,EAAU,EAAW,EAAE,CAC9C,aAAa,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAExC,iEAAiE;YACjE,kEAAkE;YAClE,iDAAiD;YACjD,2DAA2D;YAC3D,MAAM,MAAM,GAAI,GAOd,CAAC,OAAO,EAAE,YAAY,CAAC;YACzB,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,IAAI,IAAI;wBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC9B,IAAI,EAAE;wBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC3B,CAAC;YACF,CAAC;YACD,+DAA+D;YAC/D,+DAA+D;YAC/D,gEAAgE;YAChE,kCAAkC;YAClC,MAAM,MAAM,GAAI,GAA6C,CAAC,GAAG,CAAC;YAClE,IAAI,SAAS,GAAG,wBAAwB,CAAC;gBACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO;gBAC1B,KAAK,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAY,CAAC,CAAC;gBAClD,IAAI,KAAK,EAAE,CAAC;oBACX,2DAA2D;oBAC3D,2DAA2D;oBAC3D,0DAA0D;oBAC1D,8DAA8D;oBAC9D,MAAM,QAAQ,GACZ,MAAM,CAAC,GAAsD;wBAC7D,EAAE,oBAAoB,KAAK,IAAI,CAAC;oBAClC,SAAS,GAAG,mBAAmB,CAC9B,KAAK,EACL,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,qBAAqB,CAAC,GAAY,CAAC,EAAE,CACvE,CAAC;gBACH,CAAC;YACF,CAAC;YAED,+DAA+D;YAC/D,mEAAmE;YACnE,QAAQ;YACR,MAAM,mBAAmB,GACxB,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,KAAK,gBAAgB,CAAC;YAC9E,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,gBAAgB;gBACpB,UAAU,EAAE,mBAAmB;gBAC/B,IAAI,EAAE,IAAI;gBACV,gEAAgE;gBAChE,4DAA4D;gBAC5D,4DAA4D;gBAC5D,kBAAkB;gBAClB,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,IAAI;aACb,CAAC;YACF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACpD,IAAI,aAAa;gBAAE,YAAY,CAAC,IAAI,GAAG,aAAa,CAAC;YAErD,4DAA4D;YAC5D,6DAA6D;YAC7D,MAAM,OAAO,GAAG,CAAC,GAAG,aAAa,CAAC;iBAChC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,gBAAgB,CAAC;iBACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,KAAK,GAAsB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBACnD,MAAM,GAAG,GAAoB;oBAC5B,EAAE;oBACF,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,cAAc,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC;iBAClD,CAAC;gBACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,IAAI,IAAI;oBAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;gBAC1B,OAAO,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;gBACjB,SAAS,EAAE,gBAAgB;gBAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC;aAChC,CAAsC,CAAC;QACzC,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,GAAY,EAAE,OAAe;IAC7D,MAAM,MAAM,GAAI,GAAwD,EAAE,MAAM,CAAC;IACjF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAA2D,CAAC;IACxF,MAAM,QAAQ,GAAG,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAkE,CAAC;IAC3F,MAAM,QAAQ,GAAG,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/F,OAAO,EAAE,CAAC;AACX,CAAC"}