agentradar-cli 0.3.5 → 0.3.7

package/dist/vendor-runner/supervisor/supervise-agent.sh

@@ -48,6 +48,7 @@ set -a
 # shellcheck source=/dev/null
 . "${ENV_FILE}"
 set +a
+[ "${2:-}" = "--dry-run" ] && AR_DRY_RUN=1
 
 # --- 2. Validate + defaults ---------------------------------------------------
 : "${AGENT_NAME:?AGENT_NAME required in env}"
@@ -66,6 +67,11 @@ CLAUDE_BIN="${CLAUDE_BIN:-claude}"
 TMUX_BIN="${TMUX_BIN:-tmux}"
 CLAUDE_EXTRA_FLAGS="${CLAUDE_EXTRA_FLAGS:-}"          # e.g. "--chrome" (Spielberg/Sam); empty (Liza)
 PRE_LAUNCH_HOOK="${PRE_LAUNCH_HOOK:-}"                # optional per-agent script run once before claude
+PRE_LAUNCH_HOOK_REQUIRED="${PRE_LAUNCH_HOOK_REQUIRED:-0}" # 1: a failing or missing hook aborts the launch; the loop retries (e.g. wait for the gateway)
+AR_LAUNCH_ARGS_FILE="${AR_LAUNCH_ARGS_FILE:-}"        # extra launch args, one VERBATIM arg per line (`@file:<path>` = that file's whole content as one arg)
+AR_PROMPT_WATCH_SEC="${AR_PROMPT_WATCH_SEC:-180}"     # how long to answer startup prompts (dev channels, Chrome intro, resume summary)
+AR_READY_PORTS="${AR_READY_PORTS:-}"                  # e.g. "8769 8770": none up after the watch = deaf session, kill the pane so it is recreated
+AR_DRY_RUN="${AR_DRY_RUN:-0}"                         # 1 (or a 2nd argument --dry-run): print the exact argv and env, start nothing
 BROWSER_APP="${BROWSER_APP:-Google Chrome}"          # #150: app to ensure-up for --chrome agents (macOS)
 BROWSER_READY_MAX_SEC="${BROWSER_READY_MAX_SEC:-20}" # #150: bounded wait for the browser proc on cold boot
 BROWSER_READY_SETTLE_SEC="${BROWSER_READY_SETTLE_SEC:-3}" # #150: settle for extension/native-host after cold launch
@@ -149,6 +155,9 @@ else
   # SC2086: CLAUDE_EXTRA_FLAGS is intentionally UNQUOTED so "--chrome" (etc.) word-splits into flags.
   # shellcheck disable=SC2086
   _launch_flags=( ${CLAUDE_EXTRA_FLAGS} --strict-mcp-config --mcp-config="${MCP_CONFIG}" )
+  # AR_MCP_STRICT=0 (written by `agentradar join`): AgentRadar joins the agent's own MCPs and channels instead of
+  # replacing them (Vadym 13444). The default stays strict: hosted and vendor-fleet agents still get only $MCP_CONFIG.
+  [ "${AR_MCP_STRICT:-1}" = 0 ] && _launch_flags=( ${CLAUDE_EXTRA_FLAGS} --mcp-config="${MCP_CONFIG}" )
   # `agentradar join` enables the agent-guard plugin for this session only, through a settings file.
   [ -n "${CLAUDE_SETTINGS:-}" ] && _launch_flags+=( --settings "${CLAUDE_SETTINGS}" )
   # R764 + Vadym 10342: the AgentRadar channel (the stdio MCP `agentradar` in $MCP_CONFIG) pushes work in; no feeder types.
@@ -161,6 +170,24 @@ else
 fi
 AGENT_PID_PATTERN="${AGENT_PID_PATTERN:-${_agent_pid_pattern_default}}"
 
+# The launcher for a session that already has its own launch command (the secretary: model pin, plugin dirs, channels,
+# --append-system-prompt): its flags go here verbatim, after ours. CLAUDE_EXTRA_FLAGS word-splits and cannot carry them.
+AR_ARGS_CHROME=""
+if [ -n "${AR_LAUNCH_ARGS_FILE}" ]; then
+  [ -f "${AR_LAUNCH_ARGS_FILE}" ] || die "AR_LAUNCH_ARGS_FILE not found: ${AR_LAUNCH_ARGS_FILE}"
+  while IFS= read -r _a || [ -n "${_a}" ]; do
+    case "${_a}" in
+      ''|'#'*) continue ;;
+      '@file:'*) [ -f "${_a#@file:}" ] || die "AR_LAUNCH_ARGS_FILE names a missing file: ${_a#@file:}"; _a="$(cat "${_a#@file:}")" ;;
+    esac
+    [ "${_a}" = "--chrome" ] && AR_ARGS_CHROME="--chrome"
+    _launch_flags+=( "${_a}" )
+  done < "${AR_LAUNCH_ARGS_FILE}"
+fi
+if [ "${PRE_LAUNCH_HOOK_REQUIRED}" = 1 ] && [ ! -x "${PRE_LAUNCH_HOOK}" ]; then
+  die "PRE_LAUNCH_HOOK_REQUIRED=1 but PRE_LAUNCH_HOOK is not an executable file: '${PRE_LAUNCH_HOOK}'"
+fi
+
 # Optional per-agent TOOL credentials — a vendor brain's OWN MCP-tool API keys (e.g. an SEO agent's
 # WEBFLOW_TOKEN / PERPLEXITY_API_KEY). These are ADDED to the scrubbed launch env so the agent's own
 # tool servers (declared in its --mcp-config) get their creds, WITHOUT widening the daemon's
@@ -228,6 +255,24 @@ command -v "${AGENT_BIN}" >/dev/null 2>&1 || die "${AR_AGENT_HARNESS} CLI not fo
 [ -f "${PANE_LIVE_SH}" ] || die "pane liveness check not found: ${PANE_LIVE_SH}"
 [ -d "${AR_BASE}" ] || die "AR_BASE dir not found: ${AR_BASE}"
 
+# --- 2a-bis. Dry run: the exact launch, printed, nothing started or written. Secret values show only their length.
+# Same argv/env as the launch below: `env -i` allowlist + claude cfg + tool-env entries, then the resume args and flags.
+if [ "${AR_DRY_RUN}" = 1 ]; then
+  # redact by (case-insensitive) name or by value shape: a secret in a name we did not foresee still shows only its length
+  _show() { local _n; _n=$(printf %s "$1" | tr a-z A-Z); case "${_n}" in *TOKEN*|*KEY*|*SECRET*|*BEARER*|*PASS*|*AUTH*|*COOKIE*|*CRED*|PAT|*_PAT|PAT_*|*_PAT_*) printf 'ENV %s=<redacted:%s chars>\n' "$1" "${#2}"; return ;; esac
+    case "$2" in *://*:*@*|*[Bb]earer\ *) printf 'ENV %s=<redacted:%s chars>\n' "$1" "${#2}" ;; *) printf 'ENV %s=%s\n' "$1" "$2" ;; esac; }
+  _showarg() { case "$1" in *[Bb]earer*|*://*:*@*|*[Tt]oken=*|*[Ss]ecret=*|*[Kk]ey=*) printf 'ARGV <redacted:%s chars>\n' "${#1}" ;; *) printf 'ARGV %q\n' "$1" ;; esac; }
+  printf 'DRY_RUN session=%s cwd=%s harness=%s feed=%s resume=%s fresh=%s\n' "${TMUX_SESSION}" "${AR_BASE}" "${AR_AGENT_HARNESS}" "${AR_FEED}" "${AR_RESUME_FLAGS}" "${AR_FRESH_FLAGS}"
+  for _k in HOME PATH USER LOGNAME SHELL LANG LC_ALL TMPDIR NODE_OPTIONS CODEX_HOME; do _show "${_k}" "${!_k:-}"; done
+  _show TERM "${AR_AGENT_TERM:-tmux-256color}"; _show COLORTERM "${AR_AGENT_COLORTERM:-truecolor}"; _show LC_CTYPE "${AR_AGENT_LC_CTYPE:-en_US.UTF-8}"
+  _show DISABLE_AUTOUPDATER 1; _show CLAUDE_CODE_GB_DISK_CACHE_WHEN_TELEMETRY_OFF 1
+  for _kv in ${_claude_cfg[@]+"${_claude_cfg[@]}"} ${TOOL_ENV_ARGS[@]+"${TOOL_ENV_ARGS[@]}"}; do _show "${_kv%%=*}" "${_kv#*=}"; done
+  printf 'ARGV %q\n' "${AGENT_BIN}"
+  # shellcheck disable=SC2086  # the resume args word-split in the pane wrapper too
+  for _a in ${AR_RESUME_FLAGS} ${_launch_flags[@]+"${_launch_flags[@]}"}; do _showarg "${_a}"; done
+  exit 0
+fi
+
 # --- 2b. Credential hygiene (#152): secrets to 0600 files, OUT of argv+env ------
 # The AWP bearer must not linger in any long-lived process's ARGV (`ps aux`) or ENVIRONMENT
 # (`ps eww`), where a co-resident process on the box could read it. Stage it into a per-agent 0600
@@ -253,7 +298,7 @@ if [ "${#TOOL_ENV_ARGS[@]}" -gt 0 ]; then
   TOOL_ENV_ARGS=()   # #166: no longer passed inline on the env -i line
 fi
 
-session_exists() { "${TMUX_BIN}" has-session -t "${TMUX_SESSION}" 2>/dev/null; }
+session_exists() { "${TMUX_BIN}" has-session -t "=${TMUX_SESSION}" 2>/dev/null; }
 pane_alive() {
   TMUX_BIN="${TMUX_BIN}" TMUX_SESSION="${TMUX_SESSION}" AGENT_PID_PATTERN="${AGENT_PID_PATTERN}" \
     /bin/sh "${PANE_LIVE_SH}"
@@ -266,7 +311,7 @@ pane_alive() {
 # Overridable via BROWSER_APP (default "Google Chrome"). macOS-only; documented no-op elsewhere (on Linux,
 # launch the browser in your runner env / at login). Belt-and-suspenders alongside a Login-Items entry.
 ensure_browser() {
-  case " ${CLAUDE_EXTRA_FLAGS} " in
+  case " ${CLAUDE_EXTRA_FLAGS} ${AR_ARGS_CHROME} " in
     *" --chrome "*) : ;;   # --chrome as a WHOLE space-bounded token (won't false-match e.g. --chromeless)
     *) return 0 ;;         # not a --chrome agent → nothing to do
   esac
@@ -302,7 +347,7 @@ ensure_browser() {
 # True when one identical `API Error: 400` line (digits normalised: the message index moves) fills the pane
 # scrollback AR_API400_LOOP_MAX times. ponytail: only the last 200 lines are read, so a very slow loop could slip by.
 api_error_loop() {
-  "${TMUX_BIN}" capture-pane -p -J -t "${TMUX_SESSION}" -S -200 2>/dev/null \
+  "${TMUX_BIN}" capture-pane -p -J -t "=${TMUX_SESSION}:" -S -200 2>/dev/null \
     | grep -o 'API Error: 400 .*' | sed -E 's/[0-9]+/N/g' | sort | uniq -c | sort -rn \
     | awk -v m="${AR_API400_LOOP_MAX}" 'NR==1{ok=($1>=m)} END{exit !ok}'
 }
@@ -321,7 +366,7 @@ ensure_agent() {
   fi
   if session_exists && ! pane_alive; then
     log "session '${TMUX_SESSION}' exists but claude pane is dead — recreating"
-    "${TMUX_BIN}" kill-session -t "${TMUX_SESSION}" 2>/dev/null || true
+    "${TMUX_BIN}" kill-session -t "=${TMUX_SESSION}" 2>/dev/null || true
   fi
   [ -n "${AR_GUARD_MARKER}" ] && rm -f "${AR_GUARD_MARKER}"   # this launch must prove the guard afresh
   # Retire-legacy step 1 (Vadym 11054): Codex starts only with AgentRadar's guard. Its SessionStart hook does not
@@ -347,7 +392,10 @@ ensure_agent() {
   ensure_browser   # #150: bring up the browser first for --chrome agents (idempotent, no-op otherwise)
   if [ -n "${PRE_LAUNCH_HOOK}" ] && [ -x "${PRE_LAUNCH_HOOK}" ]; then
     log "running pre-launch hook: ${PRE_LAUNCH_HOOK}"
-    "${PRE_LAUNCH_HOOK}" || log "WARN pre-launch hook exited non-zero (continuing)"
+    if ! "${PRE_LAUNCH_HOOK}"; then
+      [ "${PRE_LAUNCH_HOOK_REQUIRED}" = 1 ] && { log "pre-launch hook failed and is required — not launching"; return 1; }
+      log "WARN pre-launch hook exited non-zero (continuing)"
+    fi
   fi
   # SCRUBBED launch: env -i with a strict allowlist so the agent inherits nothing from this daemon
   # (AWP_BEARER, AWP_MCP_URL, etc. never reach the pane). CONNECTOR ISOLATION is enforced by
@@ -428,19 +476,37 @@ ensure_agent() {
   return 1
 }
 
-# A pushed session starts on Claude Code's "Loading development channels" warning, and nobody sits at an unattended
-# pane to confirm it. The channel is this machine's own installed CLI (`agentradar channel <runner>`), so the
-# service confirms it, once per launch, only while that exact warning is on screen.
+# A pushed session starts on Claude Code's "Loading development channels" warning ("I am using this for local
+# development" / "Exit"), once per development channel, and nobody sits at an unattended pane to confirm it. A launcher
+# that carries its own launch args (AR_LAUNCH_ARGS_FILE) names those channels itself, so it answers every one of them,
+# however late, plus the Chrome intro and the "Resume from summary" modal, for AR_PROMPT_WATCH_SEC (same strings and
+# keys as the secretary's watchdog). Then, if AR_READY_PORTS names channel ports and none is listening, the session is
+# deaf: kill the pane so the monitor loop recreates it.
 accept_dev_channels() {
-  [ "${AR_FEED}" = "push" ] || return 0
-  for _ in $(seq 1 30); do
-    if "${TMUX_BIN}" capture-pane -p -t "=${TMUX_SESSION}:" 2>/dev/null | grep -q "Loading development channels"; then
-      "${TMUX_BIN}" send-keys -t "=${TMUX_SESSION}:" Enter
-      log "confirmed Claude Code's development-channels warning for the AgentRadar channel"
-      return 0
+  { [ "${AR_FEED}" = "push" ] || [ -n "${AR_LAUNCH_ARGS_FILE}" ]; } || return 0
+  local _pane _now _t0 _last=0 _chrome=0 _resume=0 _p _up=0 _presses=0
+  _t0=$(date +%s)
+  while _now=$(date +%s); [ $(( _now - _t0 )) -lt "${AR_PROMPT_WATCH_SEC}" ]; do
+    _pane="$("${TMUX_BIN}" capture-pane -p -t "=${TMUX_SESSION}:" 2>/dev/null || true)"
+    if [ "${_presses}" -lt 6 ] && [ $(( _now - _last )) -ge 2 ] && { grep -q "I am using this for local development" <<< "${_pane}" || grep -q "Loading development channels" <<< "${_pane}"; }; then
+      "${TMUX_BIN}" send-keys -t "=${TMUX_SESSION}:" 1 Enter
+      _last=${_now}; _presses=$(( _presses + 1 ))   # cap: text the agent itself prints must not type into its conversation forever
+      log "confirmed Claude Code's development-channels warning for a launch channel"
+    fi
+    if [ "${_chrome}" = 0 ] && grep -q "Claude in Chrome (Beta)" <<< "${_pane}"; then
+      "${TMUX_BIN}" send-keys -t "=${TMUX_SESSION}:" Enter; _chrome=1; log "dismissed the Claude-in-Chrome intro"
+    fi
+    if [ "${_resume}" = 0 ] && grep -q "Resume from summary" <<< "${_pane}"; then
+      "${TMUX_BIN}" send-keys -t "=${TMUX_SESSION}:" Enter; _resume=1; log "took the default of the resume-from-summary modal"
     fi
     sleep 1
   done
+  [ -n "${AR_READY_PORTS}" ] || return 0
+  for _p in ${AR_READY_PORTS}; do (exec 3<>"/dev/tcp/127.0.0.1/${_p}") 2>/dev/null && _up=1; done
+  if [ "${_up}" = 0 ]; then
+    log "WARNING: no channel port of '${AR_READY_PORTS}' is up after ${AR_PROMPT_WATCH_SEC}s: killing the pane so it is recreated"
+    "${TMUX_BIN}" kill-session -t "=${TMUX_SESSION}" 2>/dev/null || true   # "=": exact match, never a prefix (join-req-1 killed join-req-12)
+  fi
 }
 
 # --- 4. Run: ensure agent, run feeder in foreground, monitor both -------------
@@ -525,7 +591,7 @@ while true; do
   elif [ "${AR_ATTACH:-}" != "1" ] && [ $(( $(date +%s) - ${_LAST_HEAL:-0} )) -ge "${AR_API400_COOLDOWN_SEC}" ] && api_error_loop; then
     log "agent pane is looping on the same API 400 — replacing it with a FRESH session"
     _LAST_HEAL=$(date +%s); _FORCE_FRESH=1; _heal=1
-    "${TMUX_BIN}" kill-session -t "${TMUX_SESSION}" 2>/dev/null || true
+    "${TMUX_BIN}" kill-session -t "=${TMUX_SESSION}" 2>/dev/null || true
   fi
   if [ "${_heal}" = 1 ]; then
     if ensure_agent; then

package/dist/vendor-runner/terminal-bridge.mjs

@@ -351,6 +351,11 @@ class TerminalBridge {
       case "detach":
         this.stopPipe();
         break;
+      case "clear":
+        // An engagement ended or changed: drop the scrollback so the next client's snapshot (capture-pane -S)
+        // cannot replay the previous one's. The visible screen of the live session is not touched.
+        tmux(["clear-history", "-t", TMUX_SESSION]);
+        break;
       case "input":
         if (typeof obj.data === "string") tmux(["send-keys", "-t", TMUX_SESSION, "-l", obj.data]);
         break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentradar-cli",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "engines": {
     "node": ">=20"
   },
@@ -19,9 +19,9 @@
     "dist/sync.js",
     "dist/vault-import.js",
     "dist/update.js",
-    "dist/commands.js",
     "dist/vault-clone.js",
     "dist/secrets.js",
+    "dist/admin.js",
     "dist/vendor-runner/**",
     "dist/agentradar-vendor/SKILL.md",
     "dist/agent-guard",
@@ -32,7 +32,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsc && mkdir -p dist/agentradar-vendor dist/vendor-runner/supervisor && cp ../../skills/agentradar-vendor/SKILL.md dist/agentradar-vendor/SKILL.md && cp ../../templates/vendor-runner/feeder.mjs ../../templates/vendor-runner/pane-live.sh ../../templates/vendor-runner/session-frame.mjs ../../templates/vendor-runner/terminal-bridge.mjs dist/vendor-runner/ && cp ../../templates/vendor-runner/supervisor/supervise-agent.sh ../../templates/vendor-runner/supervisor/install-agent.sh ../../templates/vendor-runner/supervisor/com.agentradar.agent.plist.template ../../templates/vendor-runner/supervisor/agentradar-agent@.service.template dist/vendor-runner/supervisor/ && rm -rf dist/agent-guard && cp -R ../../templates/agent-guard dist/agent-guard && rm dist/agent-guard/scripts/*.test.mjs && chmod +x dist/index.js dist/vendor-runner/pane-live.sh dist/vendor-runner/supervisor/supervise-agent.sh dist/vendor-runner/supervisor/install-agent.sh",
+    "build": "tsc && mkdir -p dist/agentradar-vendor dist/vendor-runner/supervisor && cp ../../skills/agentradar-vendor/SKILL.md dist/agentradar-vendor/SKILL.md && cp ../../templates/vendor-runner/feeder.mjs ../../templates/vendor-runner/pane-live.sh ../../templates/vendor-runner/session-frame.mjs ../../templates/vendor-runner/skill-zip.mjs ../../templates/vendor-runner/terminal-bridge.mjs dist/vendor-runner/ && cp ../../templates/vendor-runner/supervisor/supervise-agent.sh ../../templates/vendor-runner/supervisor/install-agent.sh ../../templates/vendor-runner/supervisor/com.agentradar.agent.plist.template ../../templates/vendor-runner/supervisor/agentradar-agent@.service.template dist/vendor-runner/supervisor/ && rm -rf dist/agent-guard && cp -R ../../templates/agent-guard dist/agent-guard && rm dist/agent-guard/scripts/*.test.mjs && chmod +x dist/index.js dist/vendor-runner/pane-live.sh dist/vendor-runner/supervisor/supervise-agent.sh dist/vendor-runner/supervisor/install-agent.sh",
     "clean": "rm -rf dist",
     "prepack": "pnpm run build",
     "typecheck": "tsc --noEmit",

package/dist/commands.js

@@ -1,74 +0,0 @@
-/**
- * Vadym 9970 (CLI-FIRST): every agent-facing MCP tool is also a CLI command, `agentradar run <runner-id> <noun> <verb>`,
- * in AgentRadar terms. The tree is derived from the server's own tools/list at call time, so it cannot fall behind
- * the MCP; this file only says how a tool name reads as a noun and a verb.
- */
-/** Nouns a tool name is grouped under, most specific first. A tool takes the first one its name contains. */
-const NOUNS = [
-    "inbox", "thread", "message", "task", "metric", "quota", "vault", "memory", "skill", "escalation", "incident",
-    "karma", "wallet", "spend", "budget", "usage", "browser", "email", "telegram", "slack", "discord", "whatsapp",
-    "github", "model", "outcome", "role", "org_chart", "org", "project", "integration", "channel", "peer",
-    "subordinate", "secret", "service", "onboarding", "intervention", "marketplace", "hire", "egress", "feedback",
-    "contact", "placement", "mcp", "tool", "join_link", "handoff", "selftest", "readiness", "pane", "brief",
-    "teammate", "approval", "agent",
-];
-const PLURAL = {
-    messages: "message", tasks: "task", metrics: "metric", vaults: "vault", skills: "skill", escalations: "escalation",
-    threads: "thread", channels: "channel", peers: "peer", subordinates: "subordinate", integrations: "integration",
-    secrets: "secret", agents: "agent", interventions: "intervention", events: "event", retrospectives: "retrospective",
-};
-/** Where the rule above would put a tool somewhere an agent would not look for it. */
-const OVERRIDES = {
-    next_event: ["inbox", "next"],
-    mark_messages_read: ["inbox", "mark-read"],
-    search_history: ["thread", "history"],
-    reply: ["thread", "reply"],
-    read_history: ["thread", "read"],
-    mark_read: ["thread", "mark-read"],
-    expect_reply: ["thread", "expect-reply"],
-    clear_reply_allowance: ["thread", "clear-reply-allowance"],
-    request_reply_clearance: ["thread", "request-reply-clearance"],
-    github_thread: ["github", "thread"],
-    post_escalation_discussion_message: ["escalation", "post-message"],
-    read_escalation_discussion: ["escalation", "read-discussion"],
-    get_self: ["agent", "self"],
-    get_my_context: ["agent", "context"],
-    liveness_ack: ["agent", "liveness-ack"],
-    remember: ["memory", "remember"],
-    recall: ["memory", "recall"],
-    my_skills: ["skill", "mine"],
-    list_my_threads: ["thread", "list"],
-    list_my_metrics: ["metric", "list"],
-    read_my_usage: ["usage", "read"],
-    // #496 (APPROVAL-ASK): the comment thread on an approval, and the decision it acknowledges.
-    approval_comments: ["approval", "comments"],
-    approval_comment: ["approval", "comment"],
-    acknowledge_decision: ["approval", "acknowledge"],
-};
-/** One-release aliases: still on the MCP, never given a command of their own. */
-export const DEPRECATED_TOOLS = new Set(["acknowledge_messages"]);
-/** `<noun> <verb>` for a tool name. */
-export function commandFor(tool) {
-    const fixed = OVERRIDES[tool];
-    if (fixed)
-        return fixed;
-    // Plurals fold only to FIND the noun (list_tasks is a task command); the verb keeps the tool's own words, so
-    // slack_list_channels reads "list-channels" as slack_list_users reads "list-users".
-    const raw = tool.split("_");
-    const words = raw.map((word) => PLURAL[word] ?? word);
-    for (const noun of NOUNS) {
-        const parts = noun.split("_");
-        for (let i = 0; i + parts.length <= words.length; i++) {
-            if (parts.every((part, k) => words[i + k] === part)) {
-                const rest = [...raw.slice(0, i), ...raw.slice(i + parts.length)];
-                return [noun.replace(/_/g, "-"), rest.join("-") || "get"];
-            }
-        }
-    }
-    return ["agent", raw.join("-")];
-}
-/** The tool a `<noun> <verb>` names among the server's tools, or undefined. */
-export function toolFor(noun, verb, tools) {
-    return tools.find((tool) => !DEPRECATED_TOOLS.has(tool) && commandFor(tool).join(" ") === `${noun} ${verb}`);
-}
-//# sourceMappingURL=commands.js.map