codehere 0.3.4 → 0.5.0-alpha.2

package/dist/infrastructure/protocols/mcp-server-impl.js

@@ -437,10 +437,24 @@ export function startMCPServer(options = {}) {
         // ── E2 · Per-agent readiness (onboarding surface) ─────────────────────────
         // Full registry snapshot: install state + auth state + hints. Powers the
         // setup-aware agent dropdown and the one-click swap flow on auth errors.
+        //
+        // Apr 29: Conductor moved to a separate `auto` field. The web UI IS the
+        // Conductor surface — exposing "conductor" as a peer in the agents array
+        // is the "Gmail asks you to pick 'email' before composing" anti-pattern.
+        // But Conductor's readiness state IS the Auto option's readiness, so the
+        // UI needs it preserved (codex Round 1 caught: fresh install with no
+        // specialists installed would otherwise lose the setup prompt — Auto
+        // gets selected by default, submission fails at /api/task because
+        // conductor.isInstalled() returns false). The separate `auto` field
+        // keeps the setup hint plumbing intact while preventing the dropdown
+        // from showing Conductor as a peer choice.
         if (req.method === 'GET' && req.url === '/api/readiness/agents') {
             try {
+                const all = readinessForAllAgents();
+                const auto = all.find((a) => a.id === 'conductor');
+                const agents = all.filter((a) => a.id !== 'conductor');
                 res.writeHead(200, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ agents: readinessForAllAgents() }));
+                res.end(JSON.stringify({ agents, auto }));
             }
             catch (e) {
                 res.writeHead(500, { 'Content-Type': 'application/json' });
@@ -485,9 +499,22 @@ export function startMCPServer(options = {}) {
                         // log/spawn. Stops log injection (`agent: "claude-code\n[FAKE]"`),
                         // future-proofs against partial-match exploits, and fails fast
                         // with a clear 400 instead of letting SessionManager.spawn throw.
+                        //
+                        // Apr 29: default flipped from 'claude-code' to 'conductor'. The web
+                        // UI is the Conductor surface; tasks submitted without an explicit
+                        // agent route through the supervisor (rule-based routing today,
+                        // LLM classifier in v0.6). Empty string is treated like undefined
+                        // so the form submitting `agent: ""` (Auto option) hits the same
+                        // path. Specialists remain explicit overrides via the dropdown.
+                        // Type-check is preserved: non-string non-undefined values still 400.
+                        if (agent !== undefined && agent !== null && typeof agent !== 'string') {
+                            res.writeHead(400, { 'Content-Type': 'application/json' });
+                            res.end(JSON.stringify({ error: 'agent must be a string or omitted' }));
+                            return;
+                        }
                         const validAgentIds = new Set(allAdapters().map((a) => a.id));
-                        const agentId = agent ?? 'claude-code';
-                        if (typeof agentId !== 'string' || !validAgentIds.has(agentId)) {
+                        const agentId = (typeof agent === 'string' && agent.length > 0) ? agent : 'conductor';
+                        if (!validAgentIds.has(agentId)) {
                             res.writeHead(400, { 'Content-Type': 'application/json' });
                             res.end(JSON.stringify({
                                 error: `Unknown agent: ${typeof agentId === 'string' ? agentId.slice(0, 64) : '<non-string>'}`,