agor-live 0.17.2 → 0.17.3

package/dist/daemon/mcp/server.js

@@ -15308,11 +15308,47 @@ async function getOAuthStatus(ctx, mcpServer) {
   }
   return { authenticated: false };
 }
+async function summarizeMcpServer(ctx, mcpServer) {
+  const authType = mcpServer.auth?.type || "none";
+  const oauthMode = mcpServer.auth?.oauth_mode || "per_user";
+  const { authenticated } = await getOAuthStatus(ctx, mcpServer);
+  return {
+    mcp_server_id: mcpServer.mcp_server_id,
+    name: mcpServer.name,
+    display_name: mcpServer.display_name,
+    transport: mcpServer.transport,
+    auth_type: authType,
+    oauth_mode: oauthMode,
+    oauth_authenticated: authenticated,
+    enabled: mcpServer.enabled
+  };
+}
+async function listAttachedMcpServers(ctx, sessionId, opts = {}) {
+  const sessionMCPServers = await ctx.app.service("session-mcp-servers").find({
+    ...ctx.baseServiceParams,
+    query: {
+      session_id: sessionId,
+      ...opts.includeDisabled ? {} : { enabled: true },
+      $limit: 100
+    }
+  });
+  const data = Array.isArray(sessionMCPServers) ? sessionMCPServers : sessionMCPServers.data;
+  const summaries = [];
+  for (const sms of data) {
+    try {
+      const mcpServer = await ctx.app.service("mcp-servers").get(sms.mcp_server_id, ctx.baseServiceParams);
+      summaries.push(await summarizeMcpServer(ctx, mcpServer));
+    } catch (error48) {
+      console.warn(`Failed to fetch MCP server ${sms.mcp_server_id}:`, error48);
+    }
+  }
+  return summaries;
+}
 function registerMcpServerTools(server, ctx) {
   server.registerTool(
     "agor_mcp_servers_list",
     {
-      description: "List MCP servers available to the current session. Shows each server's name, transport type, authentication type, and OAuth connection status. Use this to see which external tools/services are configured and whether they need authentication.",
+      description: "List the MCP-server catalog the current user can access (i.e. servers eligible to attach to a session). Each entry includes name, transport, auth type, and OAuth status. Use this to discover IDs to pass to `agor_sessions_create({ mcpServerIds })`. To see which servers are currently ATTACHED to a session, read `attached_mcp_servers` from `agor_sessions_get_current` or `agor_sessions_get`.",
       annotations: { readOnlyHint: true },
       inputSchema: external_exports2.object({
         includeDisabled: external_exports2.boolean().optional().describe("Include disabled MCP servers (default: false)")
@@ -15320,62 +15356,20 @@ function registerMcpServerTools(server, ctx) {
     },
     async (args) => {
       const includeDisabled = args.includeDisabled === true;
-      const sessionMCPServers = await ctx.app.service("session-mcp-servers").find({
+      const result = await ctx.app.service("mcp-servers").find({
         ...ctx.baseServiceParams,
         query: {
-          session_id: ctx.sessionId,
+          scope: "global",
           ...includeDisabled ? {} : { enabled: true },
           $limit: 100
         }
       });
+      const data = Array.isArray(result) ? result : result.data;
       const servers = [];
-      const sessionMCPData = Array.isArray(sessionMCPServers) ? sessionMCPServers : sessionMCPServers.data;
-      const mcpServerIds = sessionMCPData.map(
-        (sms) => sms.mcp_server_id
-      );
-      for (const serverId of mcpServerIds) {
-        try {
-          const mcpServer = await ctx.app.service("mcp-servers").get(serverId, ctx.baseServiceParams);
-          const authType = mcpServer.auth?.type || "none";
-          const oauthMode = mcpServer.auth?.oauth_mode || "per_user";
-          const { authenticated } = await getOAuthStatus(ctx, mcpServer);
-          servers.push({
-            mcp_server_id: mcpServer.mcp_server_id,
-            name: mcpServer.name,
-            display_name: mcpServer.display_name,
-            transport: mcpServer.transport,
-            auth_type: authType,
-            oauth_mode: oauthMode,
-            oauth_authenticated: authenticated,
-            enabled: mcpServer.enabled
-          });
-        } catch (error48) {
-          console.warn(`Failed to fetch MCP server ${serverId}:`, error48);
-        }
-      }
-      const globalServers = await ctx.app.service("mcp-servers").find({
-        ...ctx.baseServiceParams,
-        query: { scope: "global", ...includeDisabled ? {} : { enabled: true }, $limit: 100 }
-      });
-      for (const mcpServer of Array.isArray(globalServers) ? globalServers : globalServers.data) {
-        if (!mcpServerIds.includes(mcpServer.mcp_server_id)) {
-          const authType = mcpServer.auth?.type || "none";
-          const oauthMode = mcpServer.auth?.oauth_mode || "per_user";
-          const { authenticated } = await getOAuthStatus(ctx, mcpServer);
-          servers.push({
-            mcp_server_id: mcpServer.mcp_server_id,
-            name: mcpServer.name,
-            display_name: mcpServer.display_name,
-            transport: mcpServer.transport,
-            auth_type: authType,
-            oauth_mode: oauthMode,
-            oauth_authenticated: authenticated,
-            enabled: mcpServer.enabled
-          });
-        }
+      for (const mcpServer of data) {
+        servers.push(await summarizeMcpServer(ctx, mcpServer));
       }
       return textResult({
-        session_id: ctx.sessionId,
         mcp_servers: servers,
         summary: {
           total: servers.length,
@@ -15781,21 +15775,40 @@ function registerSearchTools(server, registry2) {
 
 // src/mcp/tools/sessions.ts
 import { WorktreeRepository as WorktreeRepository2 } from "@agor/core/db";
-import { resolveModelConfigPrecedence } from "@agor/core/models";
+import {
+  AVAILABLE_CLAUDE_MODEL_ALIASES,
+  CODEX_MODEL_METADATA,
+  DEFAULT_CLAUDE_MODEL,
+  DEFAULT_CODEX_MODEL,
+  DEFAULT_GEMINI_MODEL,
+  GEMINI_MODELS
+} from "@agor/core/models";
+import { resolveSessionDefaults } from "@agor/core/sessions";
 import {
   AGENTIC_TOOL_CAPABILITIES,
   getSessionType
 } from "@agor/core/types";
-var modelConfigInputSchema = external_exports2.object({
+var modelConfigObjectSchema = external_exports2.object({
   mode: external_exports2.enum(["alias", "exact"]).optional().describe("Model selection mode (default: 'alias')"),
   // .min(1): reject empty-string model explicitly so callers don't silently
   // fall through to user defaults when they meant to pin a specific model.
   model: external_exports2.string().min(1).describe("Model identifier (e.g. 'claude-opus-4-6', 'claude-sonnet-4-6')"),
   effort: external_exports2.enum(["low", "medium", "high", "max"]).optional().describe("Reasoning effort level (default: high)"),
   provider: external_exports2.string().optional().describe("Provider ID (OpenCode only, e.g. 'anthropic')")
-}).optional().describe(
-  "Model override for this session. When set, overrides the user default model_config. Threaded through to the spawned agent process so it actually runs on the requested model."
+});
+var modelConfigInputSchema = external_exports2.union([
+  external_exports2.string().min(1).describe(
+    "Shorthand: just the model ID string (e.g. 'claude-opus-4-6'). Equivalent to { model: <id> }."
+  ),
+  modelConfigObjectSchema
+]).optional().describe(
+  "Model override for this session. Pass either a model ID string (e.g. 'claude-opus-4-6') or a full { mode, model, effort, provider } object. Overrides the user default model_config and is threaded through to the spawned agent process. Call agor_models_list to discover valid model IDs per agenticTool."
 );
+function coerceModelConfig(input) {
+  if (input === void 0) return void 0;
+  if (typeof input === "string") return { model: input };
+  return input;
+}
 function registerSessionTools(server, ctx) {
   server.registerTool(
     "agor_sessions_list",
@@ -15848,7 +15861,7 @@ function registerSessionTools(server, ctx) {
   server.registerTool(
     "agor_sessions_get",
     {
-      description: "Get detailed information about a specific session, including genealogy and current state. The response includes a `url` field with a clickable link to view the session in the UI.",
+      description: "Get detailed information about a specific session, including genealogy, current state, and the MCP servers currently attached to it (with OAuth status \u2014 check `attached_mcp_servers[].oauth_authenticated` to spot servers needing auth). The response includes a `url` field with a clickable link to view the session in the UI.",
       annotations: { readOnlyHint: true },
       inputSchema: external_exports2.object({
         sessionId: external_exports2.string().describe("Session ID (UUIDv7 or short ID like 01a1b2c3)")
@@ -15861,13 +15874,14 @@ function registerSessionTools(server, ctx) {
         _last_message_truncation_length: 500
       };
       const session = await ctx.app.service("sessions").get(args.sessionId, sessionParams);
-      return textResult(session);
+      const attached_mcp_servers = await listAttachedMcpServers(ctx, session.session_id);
+      return textResult({ ...session, attached_mcp_servers });
     }
   );
   server.registerTool(
     "agor_sessions_get_current",
     {
-      description: "Get information about the current session (the one making this MCP call). Returns session details plus denormalized worktree, repo, and board context \u2014 useful for introspection and getting IDs needed by other tools.",
+      description: "Get information about the current session (the one making this MCP call). Returns session details, denormalized worktree/repo/board context, and the MCP servers attached to this session (each with `oauth_authenticated` so callers can spot servers needing auth). To browse the broader catalog of servers eligible to attach, use `agor_mcp_servers_list`.",
       annotations: { readOnlyHint: true },
       inputSchema: external_exports2.object({})
     },
@@ -15917,11 +15931,13 @@ function registerSessionTools(server, ctx) {
         } catch {
         }
       }
+      const attached_mcp_servers = await listAttachedMcpServers(ctx, ctx.sessionId);
       return textResult({
         session,
         worktree,
         repo,
-        board
+        board,
+        attached_mcp_servers
       });
     }
   );
@@ -16078,10 +16094,10 @@ function registerSessionTools(server, ctx) {
         extraInstructions: args.extraInstructions,
         task_id: args.taskId,
         mcpServerIds: args.mcpServerIds,
-        modelConfig: args.modelConfig
+        modelConfig: coerceModelConfig(args.modelConfig)
       };
       const childSession = await ctx.app.service("sessions").spawn(ctx.sessionId, spawnData, ctx.baseServiceParams);
-      const promptResponse = await ctx.app.service("/sessions/:id/prompt").create(
+      const task = await ctx.app.service("/sessions/:id/prompt").create(
         {
           prompt: args.prompt,
           permissionMode: childSession.permission_config?.mode || "acceptEdits",
@@ -16094,8 +16110,8 @@ function registerSessionTools(server, ctx) {
       );
       return textResult({
         session: childSession,
-        taskId: promptResponse.taskId,
-        status: promptResponse.status,
+        taskId: task.task_id,
+        status: task.status,
         note: "Subsession created and prompt execution started in background."
       });
     }
@@ -16125,22 +16141,23 @@ function registerSessionTools(server, ctx) {
       const mode = args.mode;
       const sessionId = await resolveSessionId(ctx, args.sessionId);
       if (mode === "continue") {
-        const promptResponse = await ctx.app.service("/sessions/:id/prompt").create(
+        const task = await ctx.app.service("/sessions/:id/prompt").create(
           { prompt: args.prompt, stream: true },
           { ...ctx.baseServiceParams, route: { id: sessionId } }
         );
-        if (promptResponse.queued) {
+        if (task.status === "queued") {
           return textResult({
             success: true,
             queued: true,
-            queue_position: promptResponse.queue_position,
+            taskId: task.task_id,
+            queue_position: task.queue_position,
             note: "Session is busy. Prompt has been queued and will execute automatically when the session becomes idle."
           });
         }
         return textResult({
           success: true,
-          taskId: promptResponse.taskId,
-          status: promptResponse.status,
+          taskId: task.task_id,
+          status: task.status,
           note: "Prompt added to existing session and execution started."
         });
       } else if (mode === "fork" || mode === "btw") {
@@ -16169,7 +16186,7 @@ function registerSessionTools(server, ctx) {
           await ctx.app.service("sessions").patch(forkedSession.session_id, forkPatch, ctx.baseServiceParams);
         }
         const updatedSession = await ctx.app.service("sessions").get(forkedSession.session_id, ctx.baseServiceParams);
-        const promptResponse = await ctx.app.service("/sessions/:id/prompt").create(
+        const task = await ctx.app.service("/sessions/:id/prompt").create(
           {
             prompt: args.prompt,
             permissionMode: updatedSession.permission_config?.mode,
@@ -16180,21 +16197,21 @@ function registerSessionTools(server, ctx) {
         const note = mode === "btw" ? 'Ephemeral "btw" fork created. Result will be sent back via callback when done, then the fork will auto-archive.' : "Forked session created and prompt execution started.";
         return textResult({
           session: updatedSession,
-          taskId: promptResponse.taskId,
-          status: promptResponse.status,
+          taskId: task.task_id,
+          status: task.status,
           note
         });
       } else if (mode === "subsession") {
         const spawnData = {
           prompt: args.prompt,
           mcpServerIds: args.mcpServerIds,
-          modelConfig: args.modelConfig
+          modelConfig: coerceModelConfig(args.modelConfig)
         };
         if (args.title) spawnData.title = args.title;
         if (args.agenticTool) spawnData.agent = args.agenticTool;
         if (args.taskId) spawnData.task_id = args.taskId;
         const childSession = await ctx.app.service("sessions").spawn(sessionId, spawnData, ctx.baseServiceParams);
-        const promptResponse = await ctx.app.service("/sessions/:id/prompt").create(
+        const task = await ctx.app.service("/sessions/:id/prompt").create(
           {
             prompt: args.prompt,
             permissionMode: childSession.permission_config?.mode,
@@ -16204,8 +16221,8 @@ function registerSessionTools(server, ctx) {
         );
         return textResult({
           session: childSession,
-          taskId: promptResponse.taskId,
-          status: promptResponse.status,
+          taskId: task.task_id,
+          status: task.status,
           note: "Subsession created and prompt execution started."
         });
       }
@@ -16215,7 +16232,7 @@ function registerSessionTools(server, ctx) {
   server.registerTool(
     "agor_sessions_create",
     {
-      description: "Create a new session in an existing worktree. Use for starting fresh work on a new task in the same codebase (e.g., new feature branch, separate investigation). Unlike spawn, this creates an independent session with no parent-child relationship. MCP servers are inherited from the worktree (if configured) or user defaults, or can be overridden via `mcpServerIds`. Model selection falls back to user defaults and can be overridden via `modelConfig`. Supports optional callbacks to notify the creating session when the new session completes.",
+      description: 'Create a new session in an existing worktree. Use for starting fresh work on a new task in the same codebase (e.g., new feature branch, separate investigation). Unlike spawn, this creates an independent session with no parent-child relationship. MCP servers are inherited from the worktree (if configured) or user defaults, or can be overridden via `mcpServerIds`. Model selection falls back to user defaults and can be overridden via `modelConfig` (accepts either a model ID string like "claude-opus-4-6" or a full {mode, model, effort, provider} object \u2014 call `agor_models_list` to discover valid model IDs per agenticTool). Supports optional callbacks to notify the creating session when the new session completes.',
       inputSchema: external_exports2.object({
         worktreeId: external_exports2.string().describe("Worktree ID where the session will run (required)"),
         agenticTool: external_exports2.enum(["claude-code", "codex", "gemini"]).describe("Which agent to use for this session (required)"),
@@ -16249,27 +16266,20 @@ function registerSessionTools(server, ctx) {
       const { getGitState, getCurrentBranch } = await import("@agor/core/git");
       const currentSha = await getGitState(worktree.path);
       const currentRef = await getCurrentBranch(worktree.path);
-      const { getDefaultPermissionMode } = await import("@agor/core/types");
-      const { mapPermissionMode } = await import("@agor/core/utils/permission-mode-mapper");
-      const userToolDefaults = user?.default_agentic_config?.[agenticTool];
-      const requestedMode = userToolDefaults?.permissionMode || getDefaultPermissionMode(agenticTool);
-      const permissionMode = mapPermissionMode(requestedMode, agenticTool);
-      const permissionConfig = {
-        mode: permissionMode,
-        allowedTools: []
-      };
-      if (agenticTool === "codex" && userToolDefaults?.codexSandboxMode && userToolDefaults?.codexApprovalPolicy) {
-        permissionConfig.codex = {
-          sandboxMode: userToolDefaults.codexSandboxMode,
-          approvalPolicy: userToolDefaults.codexApprovalPolicy,
-          networkAccess: userToolDefaults.codexNetworkAccess
-        };
-      }
-      const modelConfig = resolveModelConfigPrecedence([
-        args.modelConfig,
-        userToolDefaults?.modelConfig
-      ]);
-      const mcpServerIds = args.mcpServerIds !== void 0 ? await Promise.all(args.mcpServerIds.map((id) => resolveMcpServerId(ctx, id))) : worktree.mcp_server_ids && worktree.mcp_server_ids.length > 0 ? worktree.mcp_server_ids : userToolDefaults?.mcpServerIds || [];
+      const explicitMcpServerIds = args.mcpServerIds !== void 0 ? await Promise.all(args.mcpServerIds.map((id) => resolveMcpServerId(ctx, id))) : void 0;
+      const resolvedDefaults = resolveSessionDefaults({
+        agenticTool,
+        user,
+        worktree,
+        overrides: {
+          modelConfig: coerceModelConfig(args.modelConfig),
+          mcpServerIds: explicitMcpServerIds
+        }
+      });
+      const permissionConfig = resolvedDefaults.permission_config;
+      const modelConfig = resolvedDefaults.model_config;
+      const mcpServerIds = resolvedDefaults.mcp_server_ids;
+      const permissionMode = permissionConfig.mode;
       const mcpServerIdsFromArgs = args.mcpServerIds !== void 0;
       const callbackConfig = {};
       const effectiveCallbackSessionId = args.callbackSessionId || ctx.sessionId;
@@ -16325,9 +16335,9 @@ function registerSessionTools(server, ctx) {
       if (mcpServerIds && mcpServerIds.length > 0) {
         for (const mcpServerId of mcpServerIds) {
           try {
-            await ctx.app.service("session-mcp-servers").create(
-              { session_id: session.session_id, mcp_server_id: mcpServerId },
-              ctx.baseServiceParams
+            await ctx.app.service("/sessions/:id/mcp-servers").create(
+              { mcpServerId },
+              { ...ctx.baseServiceParams, route: { id: session.session_id } }
             );
           } catch (error48) {
             const reason = error48 instanceof Error ? error48.message : String(error48);
@@ -16341,9 +16351,9 @@ function registerSessionTools(server, ctx) {
           }
         }
       }
-      let promptResponse = null;
+      let initialTask = null;
       if (args.initialPrompt) {
-        promptResponse = await ctx.app.service("/sessions/:id/prompt").create(
+        initialTask = await ctx.app.service("/sessions/:id/prompt").create(
           { prompt: args.initialPrompt, permissionMode, stream: true },
           { ...ctx.baseServiceParams, route: { id: session.session_id } }
         );
@@ -16352,7 +16362,7 @@ function registerSessionTools(server, ctx) {
       const mcpFailureNote = mcpAttachFailures.length > 0 ? ` Warning: ${mcpAttachFailures.length} requested MCP server(s) failed to attach \u2014 see mcpAttachFailures.` : "";
       return textResult({
         session,
-        taskId: promptResponse?.taskId,
+        taskId: initialTask?.task_id,
         note: args.initialPrompt ? `Session created and initial prompt execution started.${callbackNote}${mcpFailureNote}` : `Session created successfully.${callbackNote}${mcpFailureNote}`,
         ...mcpAttachFailures.length > 0 && { mcpAttachFailures }
       });
@@ -16613,6 +16623,54 @@ function registerSessionTools(server, ctx) {
       });
     }
   );
+  server.registerTool(
+    "agor_models_list",
+    {
+      description: "List valid model IDs grouped by agenticTool. Use this to discover what to pass for `modelConfig` (or its string shorthand) in agor_sessions_create / spawn / prompt. Sourced live from the daemon model registry \u2014 when new models ship and the registry is updated, this tool returns them on the next call.",
+      annotations: { readOnlyHint: true },
+      inputSchema: external_exports2.object({
+        agenticTool: external_exports2.enum(["claude-code", "codex", "gemini"]).optional().describe("Filter to a single agentic tool. Omit to return all tools.")
+      })
+    },
+    async (args) => {
+      const claudeModels = AVAILABLE_CLAUDE_MODEL_ALIASES.map((m) => ({
+        id: m.id,
+        displayName: m.displayName,
+        description: m.description,
+        family: m.family
+      }));
+      const codexModels = Object.entries(CODEX_MODEL_METADATA).map(([id, meta3]) => ({
+        id,
+        displayName: meta3.name,
+        description: meta3.description
+      }));
+      const geminiModels = Object.entries(GEMINI_MODELS).map(([id, meta3]) => ({
+        id,
+        displayName: meta3.name,
+        description: meta3.description,
+        useCase: meta3.useCase
+      }));
+      const all = {
+        "claude-code": {
+          default: DEFAULT_CLAUDE_MODEL,
+          models: claudeModels
+        },
+        codex: {
+          default: DEFAULT_CODEX_MODEL,
+          models: codexModels
+        },
+        gemini: {
+          default: DEFAULT_GEMINI_MODEL,
+          models: geminiModels,
+          note: "Gemini models are normally fetched live from the Google API per-user. This is the static fallback list \u2014 newer models may exist."
+        }
+      };
+      if (args.agenticTool) {
+        return textResult({ [args.agenticTool]: all[args.agenticTool] });
+      }
+      return textResult(all);
+    }
+  );
 }
 
 // src/mcp/tools/tasks.ts
@@ -16797,7 +16855,7 @@ function registerUserTools(server, ctx) {
 // src/mcp/tools/worktrees.ts
 import { isWorktreeRbacEnabled as isWorktreeRbacEnabled2 } from "@agor/core/config";
 import { WorktreeRepository as WorktreeRepository3 } from "@agor/core/db";
-import { resolveModelConfig } from "@agor/core/models";
+import { resolveSessionDefaults as resolveSessionDefaults2 } from "@agor/core/sessions";
 import { getAssistantConfig, isAssistant, WORKTREE_PERMISSION_LEVELS as WORKTREE_PERMISSION_LEVELS2 } from "@agor/core/types";
 import { computeZoneRelativePosition } from "@agor/core/utils/board-placement";
 import { normalizeOptionalHttpUrl } from "@agor/core/utils/url";
@@ -17235,27 +17293,28 @@ function registerWorktreeTools(server, ctx) {
         };
         const renderedPrompt = renderTemplate(zone.trigger.template, templateContext);
         if (renderedPrompt) {
-          const promptResponse = await ctx.app.service("/sessions/:id/prompt").create(
+          const task = await ctx.app.service("/sessions/:id/prompt").create(
             { prompt: renderedPrompt, stream: true },
             { ...ctx.baseServiceParams, route: { id: targetSessionId } }
           );
-          if (promptResponse.queued) {
+          if (task.status === "queued") {
             promptResult = {
               queued: true,
-              queue_position: promptResponse.queue_position,
+              taskId: task.task_id,
+              queue_position: task.queue_position,
               sessionId: targetSessionId,
               note: "Session is busy. Zone trigger prompt has been queued."
             };
             console.log(
-              `\u{1F4EC} Zone trigger queued for session ${targetSessionId.substring(0, 8)} at position ${promptResponse.queue_position}`
+              `\u{1F4EC} Zone trigger queued for session ${targetSessionId.substring(0, 8)} at position ${task.queue_position}`
             );
           } else {
             promptResult = {
-              taskId: promptResponse.taskId,
+              taskId: task.task_id,
               sessionId: targetSessionId,
               note: "Zone trigger prompt sent to target session"
             };
-            console.log(`\u2705 Zone trigger executed: task ${promptResponse.taskId.substring(0, 8)}`);
+            console.log(`\u2705 Zone trigger executed: task ${task.task_id.substring(0, 8)}`);
           }
         } else {
           promptResult = {
@@ -17295,24 +17354,11 @@ function registerWorktreeTools(server, ctx) {
           const { getGitState, getCurrentBranch } = await import("@agor/core/git");
           const currentSha = await getGitState(worktree.path);
           const currentRef = await getCurrentBranch(worktree.path);
-          const { getDefaultPermissionMode } = await import("@agor/core/types");
-          const { mapPermissionMode } = await import("@agor/core/utils/permission-mode-mapper");
-          const userToolDefaults = user?.default_agentic_config?.[agenticTool];
-          const requestedMode = userToolDefaults?.permissionMode || getDefaultPermissionMode(agenticTool);
-          const permissionMode = mapPermissionMode(requestedMode, agenticTool);
-          const permissionConfig = {
-            mode: permissionMode,
-            allowedTools: []
-          };
-          if (agenticTool === "codex" && userToolDefaults?.codexSandboxMode && userToolDefaults?.codexApprovalPolicy) {
-            permissionConfig.codex = {
-              sandboxMode: userToolDefaults.codexSandboxMode,
-              approvalPolicy: userToolDefaults.codexApprovalPolicy,
-              networkAccess: userToolDefaults.codexNetworkAccess
-            };
-          }
-          const modelConfig = resolveModelConfig(userToolDefaults?.modelConfig);
-          const mcpServerIds = worktree.mcp_server_ids && worktree.mcp_server_ids.length > 0 ? worktree.mcp_server_ids : userToolDefaults?.mcpServerIds || [];
+          const {
+            permission_config: permissionConfig,
+            model_config: modelConfig,
+            mcp_server_ids: mcpServerIds
+          } = resolveSessionDefaults2({ agenticTool, user, worktree });
           const sessionData = {
             worktree_id: worktreeId,
             agentic_tool: agenticTool,
@@ -17337,12 +17383,9 @@ function registerWorktreeTools(server, ctx) {
           if (mcpServerIds.length > 0) {
             for (const mcpServerId of mcpServerIds) {
               try {
-                await ctx.app.service("session-mcp-servers").create(
-                  {
-                    session_id: newSession.session_id,
-                    mcp_server_id: mcpServerId
-                  },
-                  ctx.baseServiceParams
+                await ctx.app.service("/sessions/:id/mcp-servers").create(
+                  { mcpServerId },
+                  { ...ctx.baseServiceParams, route: { id: newSession.session_id } }
                 );
               } catch (error48) {
                 console.warn(
@@ -17352,16 +17395,16 @@ function registerWorktreeTools(server, ctx) {
             }
             console.log(`\u2705 Attached ${mcpServerIds.length} MCP servers`);
           }
-          const promptResponse = await ctx.app.service("/sessions/:id/prompt").create(
+          const task = await ctx.app.service("/sessions/:id/prompt").create(
             { prompt: renderedPrompt, stream: true },
             { ...ctx.baseServiceParams, route: { id: newSession.session_id } }
           );
           promptResult = {
-            taskId: promptResponse.taskId,
+            taskId: task.task_id,
             sessionId: newSession.session_id,
             note: `always_new trigger: created session ${newSession.session_id.substring(0, 8)} (${agenticTool}) and sent prompt`
           };
-          console.log(`\u2705 Zone trigger executed: task ${promptResponse.taskId.substring(0, 8)}`);
+          console.log(`\u2705 Zone trigger executed: task ${task.task_id.substring(0, 8)}`);
         } else {
           promptResult = {
             note: "Zone trigger template rendered to empty string (check template syntax)"

package/dist/daemon/mcp/tools/analytics.js

@@ -13837,20 +13837,34 @@ import { extractSlugFromUrl, isValidGitUrl, isValidSlug } from "@agor/core/confi
 
 // src/mcp/tools/sessions.ts
 import { WorktreeRepository as WorktreeRepository2 } from "@agor/core/db";
-import { resolveModelConfigPrecedence } from "@agor/core/models";
+import {
+  AVAILABLE_CLAUDE_MODEL_ALIASES,
+  CODEX_MODEL_METADATA,
+  DEFAULT_CLAUDE_MODEL,
+  DEFAULT_CODEX_MODEL,
+  DEFAULT_GEMINI_MODEL,
+  GEMINI_MODELS
+} from "@agor/core/models";
+import { resolveSessionDefaults } from "@agor/core/sessions";
 import {
   AGENTIC_TOOL_CAPABILITIES,
   getSessionType
 } from "@agor/core/types";
-var modelConfigInputSchema = external_exports.object({
+var modelConfigObjectSchema = external_exports.object({
   mode: external_exports.enum(["alias", "exact"]).optional().describe("Model selection mode (default: 'alias')"),
   // .min(1): reject empty-string model explicitly so callers don't silently
   // fall through to user defaults when they meant to pin a specific model.
   model: external_exports.string().min(1).describe("Model identifier (e.g. 'claude-opus-4-6', 'claude-sonnet-4-6')"),
   effort: external_exports.enum(["low", "medium", "high", "max"]).optional().describe("Reasoning effort level (default: high)"),
   provider: external_exports.string().optional().describe("Provider ID (OpenCode only, e.g. 'anthropic')")
-}).optional().describe(
-  "Model override for this session. When set, overrides the user default model_config. Threaded through to the spawned agent process so it actually runs on the requested model."
+});
+var modelConfigInputSchema = external_exports.union([
+  external_exports.string().min(1).describe(
+    "Shorthand: just the model ID string (e.g. 'claude-opus-4-6'). Equivalent to { model: <id> }."
+  ),
+  modelConfigObjectSchema
+]).optional().describe(
+  "Model override for this session. Pass either a model ID string (e.g. 'claude-opus-4-6') or a full { mode, model, effort, provider } object. Overrides the user default model_config and is threaded through to the spawned agent process. Call agor_models_list to discover valid model IDs per agenticTool."
 );
 
 // src/mcp/tools/users.ts
@@ -13859,7 +13873,7 @@ import { ROLES as ROLES2 } from "@agor/core/types";
 // src/mcp/tools/worktrees.ts
 import { isWorktreeRbacEnabled as isWorktreeRbacEnabled2 } from "@agor/core/config";
 import { WorktreeRepository as WorktreeRepository3 } from "@agor/core/db";
-import { resolveModelConfig } from "@agor/core/models";
+import { resolveSessionDefaults as resolveSessionDefaults2 } from "@agor/core/sessions";
 import { getAssistantConfig, isAssistant, WORKTREE_PERMISSION_LEVELS as WORKTREE_PERMISSION_LEVELS2 } from "@agor/core/types";
 import { computeZoneRelativePosition } from "@agor/core/utils/board-placement";
 import { normalizeOptionalHttpUrl } from "@agor/core/utils/url";

package/dist/daemon/mcp/tools/artifacts.js

@@ -13853,20 +13853,34 @@ import { extractSlugFromUrl, isValidGitUrl, isValidSlug } from "@agor/core/confi
 
 // src/mcp/tools/sessions.ts
 import { WorktreeRepository } from "@agor/core/db";
-import { resolveModelConfigPrecedence } from "@agor/core/models";
+import {
+  AVAILABLE_CLAUDE_MODEL_ALIASES,
+  CODEX_MODEL_METADATA,
+  DEFAULT_CLAUDE_MODEL,
+  DEFAULT_CODEX_MODEL,
+  DEFAULT_GEMINI_MODEL,
+  GEMINI_MODELS
+} from "@agor/core/models";
+import { resolveSessionDefaults } from "@agor/core/sessions";
 import {
   AGENTIC_TOOL_CAPABILITIES,
   getSessionType
 } from "@agor/core/types";
-var modelConfigInputSchema = external_exports.object({
+var modelConfigObjectSchema = external_exports.object({
   mode: external_exports.enum(["alias", "exact"]).optional().describe("Model selection mode (default: 'alias')"),
   // .min(1): reject empty-string model explicitly so callers don't silently
   // fall through to user defaults when they meant to pin a specific model.
   model: external_exports.string().min(1).describe("Model identifier (e.g. 'claude-opus-4-6', 'claude-sonnet-4-6')"),
   effort: external_exports.enum(["low", "medium", "high", "max"]).optional().describe("Reasoning effort level (default: high)"),
   provider: external_exports.string().optional().describe("Provider ID (OpenCode only, e.g. 'anthropic')")
-}).optional().describe(
-  "Model override for this session. When set, overrides the user default model_config. Threaded through to the spawned agent process so it actually runs on the requested model."
+});
+var modelConfigInputSchema = external_exports.union([
+  external_exports.string().min(1).describe(
+    "Shorthand: just the model ID string (e.g. 'claude-opus-4-6'). Equivalent to { model: <id> }."
+  ),
+  modelConfigObjectSchema
+]).optional().describe(
+  "Model override for this session. Pass either a model ID string (e.g. 'claude-opus-4-6') or a full { mode, model, effort, provider } object. Overrides the user default model_config and is threaded through to the spawned agent process. Call agor_models_list to discover valid model IDs per agenticTool."
 );
 
 // src/mcp/tools/users.ts
@@ -13875,7 +13889,7 @@ import { ROLES as ROLES2 } from "@agor/core/types";
 // src/mcp/tools/worktrees.ts
 import { isWorktreeRbacEnabled as isWorktreeRbacEnabled2 } from "@agor/core/config";
 import { WorktreeRepository as WorktreeRepository2 } from "@agor/core/db";
-import { resolveModelConfig } from "@agor/core/models";
+import { resolveSessionDefaults as resolveSessionDefaults2 } from "@agor/core/sessions";
 import { getAssistantConfig, isAssistant, WORKTREE_PERMISSION_LEVELS as WORKTREE_PERMISSION_LEVELS2 } from "@agor/core/types";
 import { computeZoneRelativePosition } from "@agor/core/utils/board-placement";
 import { normalizeOptionalHttpUrl } from "@agor/core/utils/url";