agent-coord-mcp 0.25.0 → 0.25.2

package/README.md

@@ -69,7 +69,7 @@ If you're building an agent with the official MCP SDKs (`@modelcontextprotocol/s
 | `heartbeat({agentId})` | Manual heartbeat. Usually unnecessary — agents with a live transport get heartbeats auto-bumped on every `list_agents`. |
 | `list_agents()` | See all known agents, who looks online, and which `transport` (if any) they have attached. Validates transport pid liveness on every call. |
 | `send_message({from, to?, room?, text, kind?})` | If `to` set → that agent's inbox (DM). Else → a channel: `room` names it (`"seo"` / `"#seo"`), omit for the default `general` channel. Tag channel posts with `kind: "decision"` for GOs/verdicts (longer retention, quoted in digests), `"status"` for progress notes; absent = chatter. |
-| `send_command({from, to?, command, reminderMs?, reminderText?})` / `send_command({from, room, command, ...})` | Inject a context-management slash command (`/clear`, `/compact` or `/reload-skills`) **directly into a sub-agent's CLI** — delivered raw (no banner/prefix) so the receiving TUI runs it as a real slash command. `to` targets one agent; `room` broadcasts to a channel's tmux-attached members (never the sender). **Gated to tmux:** returns `ok:false` unless the target has a live `tmux-push`(`-remote`) transport. Command allowlist is locked to `/clear` + `/compact`. After `/clear`, a follow-up identity-reminder DM is auto-scheduled (`reminderMs:0` to opt out, `reminderText` to override) so the freshly-cleared worker re-anchors on its agentId and bus attach state. **Blocks until an out-of-band delivery receipt confirms the command reached the pane** (`delivery:"confirmed"`+`deliveredAt`, or `"pending"`+`warning` on a stale pusher); `waitForDelivery:false` for fire-and-forget, `deliveryTimeoutMs` to tune. See [clearing sub-agent context](#clearing-sub-agent-context-send_command). |
+| `send_command({from, to?, command, reminderMs?, reminderText?})` / `send_command({from, room, command, ...})` | Inject a context-management slash command (`/clear`, `/compact` or `/reload-skills`) **directly into a sub-agent's CLI** — delivered raw (no banner/prefix) so the receiving TUI runs it as a real slash command. `to` targets one agent; `room` broadcasts to a channel's tmux-attached members (never the sender). **Gated to tmux:** returns `ok:false` unless the target has a live `tmux-push`(`-remote`) transport. Command allowlist is locked to `/clear` + `/compact` + `/reload-skills`. After `/clear`, a follow-up identity-reminder DM is auto-scheduled (`reminderMs:0` to opt out, `reminderText` to override) so the freshly-cleared worker re-anchors on its agentId and bus attach state. **Blocks until an out-of-band delivery receipt confirms the command reached the pane** (`delivery:"confirmed"`+`deliveredAt`, or `"pending"`+`warning` on a stale pusher); `waitForDelivery:false` for fire-and-forget, `deliveryTimeoutMs` to tune. See [clearing sub-agent context](#clearing-sub-agent-context-send_command). |
 | `read_messages({agentId, source, room?, limit?, peek?, sinceTs?})` | Read new messages. `source` is `inbox`/`room`/`status`; for `room`, `room` picks the channel (default `general`). Advances the per-channel cursor unless `peek:true`. Room reads return the most recent `limit` (default 50); any older overflow is replaced by a compact `history` digest carrying a retrieval hash. |
 | `retrieve_room_history({agentId, hash, query?})` | Expand a `history` digest from `read_messages` into the original overflow messages. `query` filters to matching messages (case-insensitive substring). Scoped to the producing agent; entries expire after 30 min. |
 | `post_status({agentId, status, detail?})` | Append to the shared status stream (separate from chat). |

package/dist/server.js

@@ -160,7 +160,7 @@ function buildServer(initialBound, opts = {}) {
     }
     const server = new McpServer({
         name: "agent-coord",
-        version: "0.25.0",
+        version: "0.25.2",
     });
     const addTool = (name, description, inputSchema, cb) => {
         server.registerTool(name, { description, inputSchema: z.object(inputSchema) }, async (args) => cb((args ?? {})));

package/hooks/submit.mjs

@@ -38,6 +38,13 @@ export const ENTER_GAP_MS = () => envInt("AGENT_COORD_ENTER_GAP_MS", 150);
 // often. Bounded and finite — this must not spin, and it must not stall the
 // delivery loop behind a pane that will never change.
 export const VERIFY_TIMEOUT_MS = () => envInt("AGENT_COORD_SUBMIT_VERIFY_MS", 1500);
+// Ceiling for the paste-landing check: how long after paste-buffer we keep
+// polling for the pasted text to APPEAR in the input line before refusing to
+// send Enter. ENTER_DELAY_MS stays the floor (menu-settle reasoning above) —
+// landing early never shortens it. On a slow machine the paste can take
+// longer than any fixed delay; a blind Enter then submits whatever WAS in the
+// input (nothing, or someone's draft) while the real payload lands after it.
+export const PASTE_VERIFY_MS = () => envInt("AGENT_COORD_PASTE_VERIFY_MS", 4000);
 export const VERIFY_POLL_MS = () => envInt("AGENT_COORD_SUBMIT_POLL_MS", 100);
 // Extra Enters to try when the first pair didn't submit. 0 disables retrying.
 export const ENTER_RETRIES = () => envInt("AGENT_COORD_ENTER_RETRIES", 2);
@@ -187,6 +194,25 @@ export function stillInInput(paneText, payload) {
   return squash(draft).includes(needle);
 }
 
+// Has the PASTED payload appeared in the input line yet? Distinct from
+// stillInInput (verify-by-absence after Enter): before Enter, "gone" cannot
+// mean submitted — it means not-landed-yet. The input box wraps long pastes
+// across lines the prompt regex does not match, so the visible draft may be
+// only the head of the payload; match on a shared prefix in either direction.
+// true = payload (or its head) is visibly in the input; false = input readable
+// and payload not there; null = no readable input line (unknown TUI/capture).
+export function landedInInput(paneText, payload) {
+  if (paneText === null || paneText === undefined) return null;
+  const needle = squash(payload);
+  if (!needle) return false;
+  const { draft } = readPaneState(paneText);
+  if (draft === null) return null;
+  const d = squash(draft);
+  if (!d) return false;
+  if (d.includes(needle.slice(0, 32))) return true; // draft carries the payload head
+  return needle.includes(d) && d.length >= 8; // visible draft is a genuine fragment of the payload
+}
+
 // Read the pane's input state: is the TUI busy, and is there unsent text?
 //
 // Accepts BOTH plain and styled (`capture-pane -e`) text — on styled input the
@@ -323,7 +349,30 @@ export async function pasteAndSubmit(deps, payload, { bracketed = false, verify
     throw new Error(`tmux paste-buffer: ${String(paste.stderr ?? "").trim()}`);
   }
 
-  await sleep(ENTER_DELAY_MS());
+  // Verify the paste LANDED before any Enter (recurring loss on slow machines:
+  // the blind delay elapsed before the paste rendered, and the Enter submitted
+  // an empty input while the payload arrived after it). ENTER_DELAY_MS is the
+  // floor; PASTE_VERIFY_MS is the ceiling. Three outcomes:
+  //   true  — payload seen in the input; proceed to Enter.
+  //   false — input line readable the whole time and the payload never
+  //           appeared; refuse the Enter and say so (honest timeout, not a
+  //           blind CR into someone's session).
+  //   null  — no readable input line (unknown TUI / capture failed); fall back
+  //           to the legacy fixed-delay path — unknown never blocks delivery.
+  const floor = sleep(ENTER_DELAY_MS());
+  const landed = await pollUntilLanded(deps, payload);
+  await floor;
+  if (landed === false) {
+    return {
+      submitted: false,
+      verified: true, // we DID observe the input line; what we observed is a paste that never arrived
+      attempts: 0,
+      reason:
+        `pasted text did not appear in the input line of pane '${target}' within ${PASTE_VERIFY_MS()}ms — ` +
+        `Enter NOT sent (the paste may still land later; raise AGENT_COORD_PASTE_VERIFY_MS on slow machines, ` +
+        `and check the pane for a stranded draft before resending)`,
+    };
+  }
   const e1 = run(["send-keys", "-t", target, "Enter"]);
   if (e1.status !== 0) throw new Error(`tmux send-keys: ${String(e1.stderr ?? "").trim()}`);
   await sleep(ENTER_GAP_MS());
@@ -369,6 +418,22 @@ export async function pasteAndSubmit(deps, payload, { bracketed = false, verify
   }
 }
 
+// Poll capture-pane until the pasted payload APPEARS in the input line, the
+// PASTE_VERIFY_MS budget runs out, or the input line proves unreadable.
+// true = landed, false = readable-but-never-landed, null = never readable.
+async function pollUntilLanded(deps, payload) {
+  const { run, target } = deps;
+  const deadline = Date.now() + PASTE_VERIFY_MS();
+  let readable = false;
+  for (;;) {
+    const verdict = landedInInput(captureStyled(run, target), payload);
+    if (verdict === true) return true;
+    if (verdict === false) readable = true;
+    if (Date.now() >= deadline) return readable ? false : null;
+    await sleep(VERIFY_POLL_MS());
+  }
+}
+
 // Poll capture-pane until the payload leaves the input line, the budget runs
 // out, or we run out of ways to tell. true = still there, false = gone,
 // null = unknown (capture failed, or no input line we can read).

package/hooks/tmux-pusher.mjs

@@ -224,7 +224,8 @@ function readJsonl(file) {
 }
 
 // Allowlisted control commands the bus may type into this CLI. Mirrors
-// CONTROL_COMMANDS in src/tools.ts; kept tiny + literal so a bugged/compromised
+// CONTROL_COMMANDS in src/tools/transport.ts and scripts/coord-pusher.mjs
+// (test/allowlist-parity.test.mjs locks the three); kept tiny + literal so a bugged/compromised
 // sender can't smuggle an arbitrary slash command past the guard below.
 const CONTROL_COMMANDS = new Set(["/clear", "/compact", "/reload-skills"]);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-coord-mcp",
-  "version": "0.25.0",
+  "version": "0.25.2",
   "description": "File-backed MCP server for coordinating multiple AI coding agents (Claude Code, Cursor, Cline, etc.). Local stdio or networked over Streamable HTTP.",
   "type": "module",
   "bin": {
@@ -46,7 +46,7 @@
     "@modelcontextprotocol/sdk": "^1.30.0",
     "proper-lockfile": "^4.1.2",
     "zod": "^4.4.3",
-    "@davidbalzan/groundwork-seam": "0.1.1"
+    "@davidbalzan/groundwork-seam": "0.1.2"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",
@@ -55,7 +55,8 @@
     "typescript": "^7.0.2"
   },
   "scripts": {
-    "build": "tsc",
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
+    "build": "pnpm run clean && tsc",
     "start": "node dist/server.js",
     "dev": "tsx src/server.ts",
     "pretest": "node scripts/check-self-dependency.mjs && tsc",

package/scripts/check-test-count.mjs

@@ -22,13 +22,18 @@
 
 import { spawn } from "node:child_process";
 
-const EXPECTED_TESTS = 282;
+const EXPECTED_TESTS = 285;
 
 const expected = Number(process.env.AGENT_COORD_EXPECTED_TESTS ?? EXPECTED_TESTS);
 // Same glob the suite always used — `--test test/` would recurse differently
 // on some node versions, and a runner that selects a different set of files
 // is exactly the failure this script exists to catch.
-const child = spawn(process.execPath, ["--test", "test/*.test.mjs"], {
+// Reporter pinned to TAP: newer Node defaults to the spec reporter even when
+// piped (and env like FORCE_COLOR can style its summary lines), so grepping
+// the summary was machine-dependent — it broke David's publish run 2026-08-20.
+// TAP is stable, uncolored, and the format the totals-check below was written
+// against.
+const child = spawn(process.execPath, ["--test", "--test-reporter=tap", "test/*.test.mjs"], {
   stdio: ["inherit", "pipe", "inherit"],
   shell: false,
 });
@@ -41,7 +46,8 @@ child.stdout.on("data", (chunk) => {
 
 child.on("exit", (code, signal) => {
   if (signal) process.exit(1);
-  // TAP (`# pass N`) on Node 20–22; spec reporter (`ℹ pass N`) on newer Node.
+  // TAP is forced above, so `# pass N` is the contract; the `ℹ` alternative
+  // stays as a belt against a runner that ignores the flag.
   const num = (label) => {
     const m = out.match(new RegExp(`^(?:#|ℹ) ${label} (\\d+)\\s*$`, "m"));
     return m ? Number(m[1]) : null;

package/scripts/coord-pusher.mjs

@@ -179,8 +179,9 @@ let pending = [];
 let debounceTimer = null;
 let sending = false;
 
-// Allowlisted control commands (mirrors CONTROL_COMMANDS in src/tools.ts).
-const CONTROL_COMMANDS = new Set(["/clear", "/compact"]);
+// Allowlisted control commands (mirrors CONTROL_COMMANDS in src/tools/transport.ts and
+// hooks/tmux-pusher.mjs — test/allowlist-parity.test.mjs locks the three together).
+const CONTROL_COMMANDS = new Set(["/clear", "/compact", "/reload-skills"]);
 
 // Shells we refuse to inject into: if the pane's foreground command is one of
 // these, the agent CLI has exited and typing would run pasted text as commands.

package/src/server.ts

@@ -241,7 +241,7 @@ function buildServer(initialBound?: string, opts: { trackSession?: boolean } = {
 
   const server = new McpServer({
     name: "agent-coord",
-    version: "0.25.0",
+    version: "0.25.2",
   });
 
   const addTool = (