bridge-agent 0.13.1 → 0.13.2

package/dist/bridge-mcp.cjs

@@ -22370,8 +22370,12 @@ async function pollAgentMessages(ctx, since) {
     projectPath(ctx, `/messages${qs}`)
   );
 }
+function isProjectScoped(ctx) {
+  return !!ctx.projectId && ctx.projectId !== "workspace";
+}
 async function listAgents(ctx) {
-  return request(ctx, "GET", workspacePath(ctx, "/agents"));
+  const suffix = isProjectScoped(ctx) ? `/agents?projectId=${encodeURIComponent(ctx.projectId)}` : "/agents";
+  return request(ctx, "GET", workspacePath(ctx, suffix));
 }
 async function getAgentStatus(ctx, agentId) {
   return request(ctx, "GET", projectPath(ctx, `/agents/${agentId}`));
@@ -22746,7 +22750,7 @@ function registerOrchestrationTools(server, ctx) {
   );
   server.tool(
     "bridge_list_agents",
-    'List all active agents in this workspace (cross-project). Each entry includes agentId, agentKey, status (idle/busy/disconnected), assignedTodo, role, runnerCmd, projectId, inRun, state (idle/working), lastOutputAt, and contextUsedPct (0\u2013100, null if not a Claude agent). inRun:true means the agent is already registered in the active run. inRun:false means it was spawned after the run started or in a previous session \u2014 it can still be assigned (auto-registered on first assign). Returns agents from all projects in the workspace \u2014 not just the current project. Runner agents (role:"runner") are dev server consoles \u2014 use bridge_get_agent_output to read them.',
+    `List active agents in your scope. Project-scoped contexts (the default) see ONLY this project's agents; workspace-scoped contexts see all agents across projects. Each entry includes agentId, agentKey, status (idle/busy/disconnected), assignedTodo, role, runnerCmd, projectId, inRun, state (idle/working), lastOutputAt, and contextUsedPct (0\u2013100, null if not a Claude agent). inRun:true means the agent is already registered in the active run. inRun:false means it was spawned after the run started or in a previous session \u2014 it can still be assigned (auto-registered on first assign). Runner agents (role:"runner") are dev server consoles \u2014 use bridge_get_agent_output to read them.`,
     {},
     () => safe(() => listAgents(ctx))
   );
@@ -22895,9 +22899,13 @@ async function safe2(fn) {
 function registerWorkspaceTools(server, ctx) {
   server.tool(
     "bridge_list_groups",
-    "List all agent groups (teams) in the workspace. Returns groupId, teamName (human-readable name if set), member agentIds, and agent count.",
+    "List agent groups (teams) in your scope. Project-scoped contexts see only their project's groups; workspace scope sees all. Returns groupId, teamName (human-readable name if set), member agentIds, and agent count.",
     {},
-    () => safe2(() => request(ctx, "GET", workspacePath(ctx, "/groups")))
+    () => safe2(() => request(
+      ctx,
+      "GET",
+      workspacePath(ctx, isProjectScoped(ctx) ? `/groups?projectId=${encodeURIComponent(ctx.projectId)}` : "/groups")
+    ))
   );
   server.tool(
     "bridge_get_group_status",
@@ -22940,7 +22948,7 @@ function registerWorkspaceTools(server, ctx) {
   );
   server.tool(
     "bridge_peek_panel",
-    "Read the last N lines of any panel's terminal output, workspace-wide (no project boundary). Use this to check what a specific agent is doing.",
+    "Read the last N lines of a panel's terminal output. Project-scoped contexts may only peek at their own project's panels (403 cross_project_block otherwise); workspace scope has no project boundary. Use this to check what a specific agent is doing.",
     {
       agentId: external_exports.string().describe("The panel/agent ID to peek at"),
       lines: external_exports.number().int().min(1).max(300).optional().describe("Trailing lines to return (default 50, max 300)")
@@ -22949,7 +22957,7 @@ function registerWorkspaceTools(server, ctx) {
   );
   server.tool(
     "bridge_status_panel",
-    "Get current status of any panel in the workspace, regardless of project. Returns agentKey, status, daemonId, role, projectId.",
+    "Get current status of a panel. Project-scoped contexts may only inspect their own project's panels (403 cross_project_block otherwise). Returns agentKey, status, daemonId, role, projectId.",
     { agentId: external_exports.string().describe("The panel/agent ID to inspect") },
     ({ agentId }) => safe2(() => request(ctx, "GET", workspacePath(ctx, `/agents/${agentId}`)))
   );