agent-dealer 0.1.9 → 0.1.11

package/bundle/server/dist/runners/claude-args.js

@@ -1,11 +1,12 @@
 import { getTemporalOutputDir } from "../paths.js";
 export const DENY_SEND_TOOL = "mcp__agent-deck__call_service_tool";
 const DECK_READ_TOOLS = "mcp__agent-deck__get_playbook,mcp__agent-deck__get_bound_deck,mcp__agent-deck__bind_workspace,mcp__agent-deck__list_service_tools";
+const DECK_EXECUTE_TOOLS = `${DECK_READ_TOOLS},mcp__agent-deck__call_service_tool`;
 const PLAN_REFLECT_TOOLS = `Read,Glob,Grep,Skill,${DECK_READ_TOOLS}`;
 /** Q&A about a finished result — read-only, no deck writes, no workspace mutation. */
 const QA_TOOLS = "Read,Glob,Grep,Skill";
 function executeToolsForCategory(category) {
-    const base = ["Read", "Write", "Edit", "Glob", "Grep", "Skill", DECK_READ_TOOLS];
+    const base = ["Read", "Write", "Edit", "Glob", "Grep", "Skill", DECK_EXECUTE_TOOLS];
     if (category !== "communication" && category !== "email") {
         base.splice(5, 0, "Bash");
     }
@@ -24,6 +25,9 @@ export function buildClaudePhaseArgs(run, mode) {
         args.push("--add-dir", getTemporalOutputDir());
         args.push("--allowedTools", executeToolsForCategory(run.taskCategory));
     }
-    args.push("--disallowedTools", DENY_SEND_TOOL);
+    // Soft gate: execute may call_service_tool; plan/reflect/qa stay denied.
+    if (mode !== "execute") {
+        args.push("--disallowedTools", DENY_SEND_TOOL);
+    }
     return args;
 }

package/bundle/server/dist/runners/claude.test.js

@@ -33,8 +33,12 @@ function hasDisallowSend(args) {
     const i = args.indexOf("--disallowedTools");
     return i >= 0 && args[i + 1] === DENY_SEND_TOOL;
 }
-test("all phases deny call_service_tool", () => {
-    for (const mode of ["plan", "execute", "reflect", "qa"]) {
+test("execute allows call_service_tool; plan/reflect/qa deny it", () => {
+    const executeArgs = buildClaudePhaseArgs(runWithCategory("code"), "execute");
+    assert.equal(hasDisallowSend(executeArgs), false, "execute");
+    const i = executeArgs.indexOf("--allowedTools");
+    assert.match(executeArgs[i + 1], /call_service_tool/);
+    for (const mode of ["plan", "reflect", "qa"]) {
         const args = buildClaudePhaseArgs(runWithCategory("code"), mode);
         assert.equal(hasDisallowSend(args), true, mode);
     }

package/bundle/server/dist/runners/prompts.js

@@ -32,17 +32,19 @@ function artifactMarkdown(kind, runId) {
 }
 function outboundDraftContractSection() {
     return [
-        "## Outbound actions (required when sending Slack or email)",
-        "Do NOT send Slack messages, post to chat, or send email during execution — call_service_tool is blocked.",
-        "If the task requires an outward-facing message, end your reply with exactly one fenced ```json block shaped like:",
-        '{"actionType":"slack_message"|"email","summary":{"target":"#channel or recipient","body":"exact message text"},"toolCall":{"serviceName":"<deck service UUID>","toolName":"<tool from list_service_tools>","arguments":{...}}}',
+        "## Outbound actions (Slack/email prefer draft; other services may write directly)",
+        "Prefer ending with a fenced ```json draft for Slack/email (and any write you want human approval on before send).",
+        "call_service_tool IS available during execution — use it for non-message deck writes (Linear, GitHub, Docmost, …) when the task must complete the write now.",
+        "For Slack/email (or when drafting), do NOT send mid-run: end your reply with exactly one fenced ```json block shaped like:",
+        '{"actionType":"slack_message"|"email"|"service_tool_call","summary":{"target":"#channel, recipient, or service action","body":"exact message text or short human summary"},"toolCall":{"serviceName":"<deck service UUID>","toolName":"<tool from list_service_tools>","arguments":{...}}}',
         "Rules:",
-        "- At most one outbound draft block per run.",
+        "- At most one outbound draft block per run (omit the block if you already called call_service_tool to finish the write).",
         "- Call bind_workspace, then get_bound_deck and list_service_tools — never invent a service UUID or tool name.",
-        "- toolCall.serviceName must be the exact Slack/email service id from the bound deck (not a display name).",
+        "- toolCall.serviceName must be the exact service id from the bound deck (not a display name).",
         "- Slack: toolName is slack_send_message; arguments.channel_id is the user or channel id from slack_search_users (never guess IDs from meeting notes); arguments.message must byte-match summary.body.",
         "- Email: use the real tool name and message field from list_service_tools; message body must byte-match summary.body.",
-        "- Do not perform the send — the human approves and the server delivers verbatim.",
+        "- service_tool_call: summary is for the human review card; arguments need not byte-match summary.body.",
+        "- Draft path: do not perform the send — the human approves and the server delivers verbatim.",
     ].join("\n");
 }
 function reviewQaSections(run) {

package/bundle/server/dist/runners/prompts.test.js

@@ -178,6 +178,8 @@ test("execution prompt includes outbound draft contract", () => {
     addArtifact(run.id, "approved_plan", { markdown: "# Plan" }, "human");
     const prompt = buildExecutionPrompt(run);
     assert.match(prompt, /Outbound actions/);
-    assert.match(prompt, /call_service_tool is blocked/);
+    assert.match(prompt, /call_service_tool IS available/);
+    assert.doesNotMatch(prompt, /call_service_tool is blocked/);
+    assert.match(prompt, /service_tool_call/);
     assert.match(prompt, /"actionType"/);
 });

package/bundle/server/dist/runners/stream-json.js

@@ -100,7 +100,7 @@ export function extractOutboundDraft(resultMarkdown) {
     const strippedMarkdown = (resultMarkdown.slice(0, last.index) + resultMarkdown.slice(last.index + last[0].length)).trim();
     try {
         const parsed = OutboundDraftBlock.parse(JSON.parse(last[1]));
-        const mismatch = !outboundMessageMatchesSummary(parsed.toolCall, parsed.summary.body);
+        const mismatch = !outboundMessageMatchesSummary(parsed.toolCall, parsed.summary.body, parsed.actionType);
         return {
             markdown: strippedMarkdown,
             draft: parsed,

package/bundle/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-dealer/server",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "type": "module",
   "main": "dist/index.js",
   "files": [