@taico/worker 0.0.2 → 0.0.4

package/README.md

@@ -18,6 +18,27 @@ The worker is intentionally decoupled from the backend. You can run workers anyw
 
 The worker has access to whatever the host machine has access to. If you have Claude Code installed and authenticated, the Claude runner can use it. Same for OpenCode and GitHub Copilot.
 
+## Design Constraints (Aspirational)
+
+These are the intended design constraints for the worker runtime. They are not implemented yet.
+Today the worker just runs a Claude Code, OpenCode, or GitHub Copilot process on your machine and can do whatever that process can do.
+This early version requires you to be authenticated to tools, which means you are exposing keys to the LLM. Treat it with caution.
+
+1. The shell is disposable.
+The agent may destroy its own environment and nothing outside it is affected.
+
+2. The shell has zero ambient authority.
+No credentials, no identities, no implicit cloud access, no inherited power.
+
+3. Authority is external.
+All cost-bearing or state-changing actions are mediated by a trusted service.
+
+4. The agent cannot gain power by exploration.
+Scanning the filesystem, env, or network must not reveal new capabilities.
+
+5. Capabilities are explicit and task-scoped.
+If a task needs power, it must be declared up front and granted narrowly.
+
 ## Setup
 
 ### 1. Create an Agent

package/dist/Coordinator.js

@@ -170,8 +170,6 @@ export class Coordinator {
                 }
             });
             console.log(results);
-            // Force a comment
-            this.client.addComment(task.id, `Finished.\n\n${results.result}`);
         }
         catch (error) {
             console.error(`Error running task`);

package/dist/runners/ADKAgentRunner.js

@@ -1,8 +1,45 @@
 // ADKAgentRunner.ts
 import { BaseAgentRunner } from "./BaseAgentRunner.js";
-import { LlmAgent, Runner, InMemorySessionService, MCPToolset } from "@google/adk";
+import { LlmAgent, Runner, InMemorySessionService, MCPToolset, BaseTool, } from "@google/adk";
 import { ADKMessageFormatter } from "../formatters/ADKMessageFormatter.js";
 import { ACCESS_TOKEN, BASE_URL, RUN_ID_HEADER } from "../helpers/config.js";
+class NamespacedTool extends BaseTool {
+    wrappedTool;
+    namespacedName;
+    constructor(wrappedTool, namespacedName) {
+        super({
+            name: namespacedName,
+            description: wrappedTool.description,
+            isLongRunning: wrappedTool.isLongRunning,
+        });
+        this.wrappedTool = wrappedTool;
+        this.namespacedName = namespacedName;
+    }
+    _getDeclaration() {
+        const declaration = this.wrappedTool._getDeclaration();
+        if (!declaration) {
+            return declaration;
+        }
+        return {
+            ...declaration,
+            name: this.namespacedName,
+        };
+    }
+    async runAsync(request) {
+        return this.wrappedTool.runAsync(request);
+    }
+}
+class NamespacedMCPToolset extends MCPToolset {
+    serverName;
+    constructor(connectionParams, serverName) {
+        super(connectionParams);
+        this.serverName = serverName;
+    }
+    async getTools(context) {
+        const tools = await super.getTools(context);
+        return tools.map((tool) => new NamespacedTool(tool, `mcp__${this.serverName}__${tool.name}`));
+    }
+}
 export class ADKAgentRunner extends BaseAgentRunner {
     kind = 'adk';
     formatter = new ADKMessageFormatter();
@@ -26,14 +63,22 @@ export class ADKAgentRunner extends BaseAgentRunner {
             description: '',
             instruction: '',
             tools: [
-                new MCPToolset({
+                new NamespacedMCPToolset({
                     type: 'StreamableHTTPConnectionParams',
                     url: `${BASE_URL}/api/v1/tasks/tasks/mcp`,
                     header: {
                         Authorization: `Bearer ${ACCESS_TOKEN}`,
                         [RUN_ID_HEADER]: ctx.runId,
                     },
-                })
+                }, 'tasks'),
+                new NamespacedMCPToolset({
+                    type: 'StreamableHTTPConnectionParams',
+                    url: `${BASE_URL}/api/v1/context/blocks/mcp`,
+                    header: {
+                        Authorization: `Bearer ${ACCESS_TOKEN}`,
+                        [RUN_ID_HEADER]: ctx.runId,
+                    },
+                }, 'context')
             ]
         });
         const runner = new Runner({

package/dist/runners/ClaudeAgentRunner.js

@@ -27,10 +27,19 @@ export class ClaudeAgentRunner extends BaseAgentRunner {
                             Authorization: `Bearer ${ACCESS_TOKEN}`,
                             [RUN_ID_HEADER]: ctx.runId,
                         },
+                    },
+                    context: {
+                        type: "http",
+                        url: `${BASE_URL}/api/v1/context/blocks/mcp`,
+                        headers: {
+                            Authorization: `Bearer ${ACCESS_TOKEN}`,
+                            [RUN_ID_HEADER]: ctx.runId,
+                        },
                     }
                 },
                 allowedTools: [
                     'mcp__tasks__*',
+                    'mcp__context__*',
                     'SlashCommand',
                     'Bash',
                     'Read',

package/dist/runners/GitHubCopilotAgentRunner.js

@@ -26,11 +26,21 @@ export class GitHubCopilotAgentRunner extends BaseAgentRunner {
                     },
                     tools: ["*"],
                 };
+                const contextMcpServer = {
+                    type: "http",
+                    url: `${BASE_URL}/api/v1/context/blocks/mcp`,
+                    headers: {
+                        Authorization: `Bearer ${ACCESS_TOKEN}`,
+                        [RUN_ID_HEADER]: ctx.runId,
+                    },
+                    tools: ["*"],
+                };
                 // Create a session for this work
                 const session = await this.client.createSession({
                     model: this.model,
                     mcpServers: {
                         tasks: taskMcpServer,
+                        context: contextMcpServer,
                     },
                 });
                 if (session?.sessionId) {

package/dist/runners/OpenCodeAgentRunner.js

@@ -79,6 +79,15 @@ export class OpencodeAgentRunner extends BaseAgentRunner {
                                     [RUN_ID_HEADER]: runId,
                                 },
                                 enabled: true,
+                            },
+                            context: {
+                                type: "remote",
+                                url: `${BASE_URL}/api/v1/context/blocks/mcp`,
+                                headers: {
+                                    Authorization: `Bearer ${ACCESS_TOKEN}`,
+                                    [RUN_ID_HEADER]: runId,
+                                },
+                                enabled: true,
                             }
                         }
                     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taico/worker",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "type": "module",
   "private": false,
   "license": "MIT",