agent-orchestrator-mcp-server 0.8.0 → 0.8.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-orchestrator-mcp-server",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Local implementation of agent-orchestrator MCP server",
   "main": "build/index.js",
   "type": "module",

package/shared/tools/wake-me-up-later.js

@@ -1,5 +1,4 @@
 import { z } from 'zod';
-import { parseAllowedAgentRoots } from '../allowed-agent-roots.js';
 export const WakeMeUpLaterSchema = z.object({
     session_id: z.union([z.string(), z.number()]),
     wake_at: z.string(),
@@ -180,17 +179,6 @@ export function wakeMeUpLaterTool(_server, clientFactory) {
                     };
                 }
                 const client = clientFactory();
-                if (parseAllowedAgentRoots() !== null) {
-                    return {
-                        content: [
-                            {
-                                type: 'text',
-                                text: 'Error: wake_me_up_later is not allowed when ALLOWED_AGENT_ROOTS is set. Triggers cannot be created because sessions are restricted to specific preconfigured agent roots.',
-                            },
-                        ],
-                        isError: true,
-                    };
-                }
                 const session = await client.getSession(session_id);
                 // Reject states the Rails API can't auto-sleep from. `needs_input` →
                 // immediate sleep; `running` → deferred sleep via pending_sleep metadata;

package/shared/tools/wake-me-up-when-session-changes-state.js

@@ -101,17 +101,6 @@ export function wakeMeUpWhenSessionChangesStateTool(_server, clientFactory) {
                     };
                 }
                 const { session_id, watched_session_id, event_name, prompt } = validated;
-                if (parseAllowedAgentRoots() !== null) {
-                    return {
-                        content: [
-                            {
-                                type: 'text',
-                                text: 'Error: wake_me_up_when_session_changes_state is not allowed when ALLOWED_AGENT_ROOTS is set. Triggers cannot be created because sessions are restricted to specific preconfigured agent roots.',
-                            },
-                        ],
-                        isError: true,
-                    };
-                }
                 const client = clientFactory();
                 const session = await client.getSession(session_id);
                 // The trigger fires on the requester's auto-sleep+resume cycle when the
@@ -167,6 +156,28 @@ export function wakeMeUpWhenSessionChangesStateTool(_server, clientFactory) {
                         isError: true,
                     };
                 }
+                // ALLOWED_AGENT_ROOTS scopes which agent roots this server is permitted
+                // to operate on. The constraint prevents an agent on a restricted server
+                // from scheduling wakes on sessions that belong to roots outside its
+                // scope. The requester is, by definition, already on an allowed root
+                // (it is the calling agent's session); we only need to validate the
+                // watched session belongs to the same scope.
+                const allowedRoots = parseAllowedAgentRoots();
+                if (allowedRoots !== null) {
+                    const watchedAgentRoot = watchedSession.metadata?.agent_root_key ?? null;
+                    if (watchedAgentRoot === null || !allowedRoots.includes(watchedAgentRoot)) {
+                        const watchedAgentRootStr = watchedAgentRoot ?? '(unknown)';
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `Error: ALLOWED_AGENT_ROOTS is set — watched session ${watched_session_id} belongs to agent root "${watchedAgentRootStr}", which is not in the allowed list [${allowedRoots.join(', ')}]. The trigger would let this server schedule wakes on a session outside its permitted scope. Pass a watched_session_id whose agent root is in the allowed list, or run this tool from a server without ALLOWED_AGENT_ROOTS restrictions.`,
+                                },
+                            ],
+                            isError: true,
+                        };
+                    }
+                }
                 if (event_name === 'session_failed' && watchedSession.status === 'failed') {
                     return {
                         content: [