external-subagent 0.2.0 → 0.3.1

package/README.md

@@ -8,10 +8,10 @@ independent axes:
 - **Hosts** — Codex (`install-plugin codex` or `install-mcp`), ZCode
   (`install-plugin zcode`), and any custom local MCP client that connects
   directly to the facade without registration.
-- **Subagents** — ZCode, DeepSeek Harness (DSH), and Codex, each routed
-  through an internal adapter and subject to the per-subagent limitations
-  listed in [docs/product.md](docs/product.md) and
-  [docs/mcp-api.md](docs/mcp-api.md).
+- **Subagents** — ZCode, DeepSeek Harness (DSH), Codex, and Google
+  Antigravity (`agy`), each routed through an internal adapter and subject to
+  the per-subagent limitations listed in [docs/product.md](docs/product.md)
+  and [docs/mcp-api.md](docs/mcp-api.md).
 
 ## Status
 
@@ -26,9 +26,9 @@ artifact and explicitly initializing to a launchd-resident service
 active-task upgrade and standalone initialization are implemented and
 reviewed.
 
-All three subagents are **disabled by default** and are enabled per name with
-`external-subagent agents enable <zcode|dsh|codex>`: a successful local probe
-writes the configuration (no write on failure), and `dsh`/`codex` need a
+All four subagents are **disabled by default** and are enabled per name with
+`external-subagent agents enable <zcode|dsh|codex|agy>`: a successful local probe
+writes the configuration (no write on failure), and `dsh`/`codex`/`agy` need a
 daemon restart to take effect. ZCode admits all four permission modes
 (build/edit/plan/yolo) and rejects an explicit spawn `model`; DSH admits
 `build` and strict `plan`, with model selection as explicit spawn model,
@@ -40,9 +40,16 @@ legacy build composition and `plan` still requires an empty manifest); Codex
 admits all four modes
 (build/edit → workspace-write, plan → read-only, yolo → danger-full-access,
 all pinning `approvalPolicy=never`) and rejects a non-empty `write_manifest`
-with `codex_write_manifest_unsupported`. `observe` works on all three: ZCode
+with `codex_write_manifest_unsupported`; Antigravity (`agy`) spawns only when
+its `enabled + spawn_supported` gate and an absolute `AGY_RUNTIME_PATH`
+executable admit it, runs with `build` (`--mode accept-edits`) or `yolo`
+(`--dangerously-skip-permissions`), selects a catalog-validated bare model
+slug, admits effort from `low|medium|high|max`, and rejects a non-empty
+`write_manifest` with `agy_write_manifest_unsupported` (it has no
+permission-respond interaction — tools are soft-denied and denied actions
+surface on failure diagnostics). `observe` works on all four: ZCode
 and DSH expose the public reasoning tail (at most 200 characters) and Codex
-reports `reasoning: null`.
+and agy report `reasoning: null`.
 
 The daemon socket environment variable is now the neutral
 `EXTERNAL_SUBAGENT_SOCKET`, with no fallback to the retired name. An existing

package/cli/commands/agents.mjs

@@ -65,7 +65,7 @@ export function parseSubagentsArgs(args) {
   const [operation, ...rest] = args;
   if (!['list', 'status', 'probe', 'models', 'enable'].includes(operation)) throw new CliError('INVALID_ARGUMENT', `unsupported subagents operation: ${operation}`, 2);
   if (operation === 'enable') {
-    if (rest.length !== 1 || !SUBAGENT_IDS.includes(rest[0])) throw new CliError('INVALID_ARGUMENT', 'usage: agents enable <zcode|dsh|codex>', 2);
+    if (rest.length !== 1 || !SUBAGENT_IDS.includes(rest[0])) throw new CliError('INVALID_ARGUMENT', 'usage: agents enable <zcode|dsh|codex|agy>', 2);
     return { operation, subagent: rest[0] };
   }
   if (operation === 'probe') return parseProbeArgs(rest);
@@ -82,7 +82,7 @@ export async function subagentsCommand(paths, input = {}, options = {}) {
   if (operation === 'enable') {
     const agent = input.subagent;
     if (!SUBAGENT_IDS.includes(agent) || ['through', 'workspace', 'home'].some((key) => input[key] !== undefined)) {
-      throw new CliError('INVALID_ARGUMENT', 'usage: agents enable <zcode|dsh|codex>', 2);
+      throw new CliError('INVALID_ARGUMENT', 'usage: agents enable <zcode|dsh|codex|agy>', 2);
     }
     if (typeof options.callDaemon !== 'function' || typeof options.socket !== 'string') throw new CliError('INTERNAL_ERROR', 'agents enable requires a daemon connection');
     const entry = config.subagents[agent];
@@ -102,9 +102,15 @@ export async function subagentsCommand(paths, input = {}, options = {}) {
       if (typeof local.runtime_path !== 'string' || !path.isAbsolute(local.runtime_path) || typeof local.version !== 'string' || !local.version.trim()) {
         throw new CliError('agent_probe_failed', 'Probe did not return an absolute runtime_path and observed version', 2);
       }
-      const home = local.scope?.home;
-      if (typeof home !== 'string' || !path.isAbsolute(home)) throw new CliError('agent_probe_failed', `Cannot enable ${agent}: configure subagents.${agent}.home or export ${agent.toUpperCase()}_HOME before starting the daemon`, 2);
-      Object.assign(patch, { runtime_path: local.runtime_path, home, profile: agent === 'dsh' ? 'acp' : (entry.profile ?? null), version: local.version });
+      if (agent === 'agy') {
+        // agy has no home override: the daemon resolves the executable from
+        // AGY_RUNTIME_PATH, so the patch carries runtime_path + version only.
+        Object.assign(patch, { runtime_path: local.runtime_path, version: local.version });
+      } else {
+        const home = local.scope?.home;
+        if (typeof home !== 'string' || !path.isAbsolute(home)) throw new CliError('agent_probe_failed', `Cannot enable ${agent}: configure subagents.${agent}.home or export ${agent.toUpperCase()}_HOME before starting the daemon`, 2);
+        Object.assign(patch, { runtime_path: local.runtime_path, home, profile: agent === 'dsh' ? 'acp' : (entry.profile ?? null), version: local.version });
+      }
     }
     const updated = updateConfig(paths.config, (latest) => {
       if (Object.entries(patch).every(([key, value]) => latest.subagents[agent][key] === value)) return latest;

package/cli/config/schema.mjs

@@ -1,7 +1,7 @@
 import { CliError } from '../errors.mjs';
 
 export const CONFIG_SCHEMA_VERSION = 2;
-export const SUBAGENT_IDS = Object.freeze(['zcode', 'dsh', 'codex']);
+export const SUBAGENT_IDS = Object.freeze(['zcode', 'dsh', 'codex', 'agy']);
 const CONFIG_FIELDS = new Set(['schema_version', 'revision', 'default_subagent', 'subagents']);
 const AGENT_FIELDS = new Set(['enabled', 'spawn_supported', 'default_model', 'runtime_path', 'home', 'profile', 'version']);
 
@@ -24,6 +24,7 @@ export function defaultConfig() {
       zcode: { enabled: false, spawn_supported: false, default_model: null },
       dsh: { enabled: false, spawn_supported: false, default_model: null, runtime_path: null, home: null, profile: null, version: null },
       codex: { enabled: false, spawn_supported: false, default_model: null, runtime_path: null, home: null, profile: null, version: null },
+      agy: { enabled: false, spawn_supported: false, default_model: null, runtime_path: null, home: null, profile: null, version: null },
     },
   };
 }

package/cli/constants.mjs

@@ -8,7 +8,7 @@ const IS_DEBUG_VARIANT = process.env.EXTERNAL_SUBAGENT_VARIANT === 'debug';
 
 export const PRODUCT_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug' : 'external-subagent';
 export const PRODUCT_ID = IS_DEBUG_VARIANT ? 'external_subagent_debug' : 'external_subagent';
-export const VERSION = '0.2.0';
+export const VERSION = '0.3.1';
 export const LAUNCH_AGENT_LABEL = IS_DEBUG_VARIANT ? 'com.external-subagent-debug.daemon' : 'com.external-subagent.daemon';
 export const DAEMON_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debugd' : 'external-subagentd';
 export const MCP_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug-mcp' : 'external-subagent-mcp';

package/cli/install/service-macos.mjs

@@ -21,7 +21,7 @@ function escapeXml(value) {
 // Presence is diagnostic only; enabling is an explicit probe + config operation.
 export function runtimeObservations(paths, options = {}) {
   const config = readConfig(paths.config);
-  return Object.fromEntries(['zcode', 'dsh', 'codex'].map((agent) => {
+  return Object.fromEntries(['zcode', 'dsh', 'codex', 'agy'].map((agent) => {
     const runtime = agent === 'zcode' ? (options.zcodeRuntime ?? ZCODE_RUNTIME) : config.subagents[agent].runtime_path;
     return [agent, { path: runtime, present: Boolean(runtime && fs.existsSync(runtime)), enabled: config.subagents[agent].enabled }];
   }));
@@ -35,6 +35,7 @@ export function launchAgentPlist(paths, options = {}) {
   const config = readConfig(paths.config);
   const { runtime_path: dshRuntime, home: dshHome, profile: dshProfile, version: dshVersion } = config.subagents.dsh;
   const { runtime_path: codexRuntime, home: codexHome } = config.subagents.codex;
+  const { runtime_path: agyRuntime } = config.subagents.agy;
   const configRevision = config.revision;
   // AUD-005/D1: the standalone service never depends on an unrelated runtime.
   // The pinned ZCode runtime is forwarded only when that installation exists;
@@ -70,6 +71,10 @@ export function launchAgentPlist(paths, options = {}) {
     // fails Codex admission closed instead of falling back to ~/.codex.
     ...(codexRuntime ? [`<key>CODEX_RUNTIME_PATH</key><string>${escapeXml(codexRuntime)}</string>`] : []),
     ...(codexHome ? [`<key>CODEX_HOME</key><string>${escapeXml(codexHome)}</string>`] : []),
+    // agy has no home override: only its persisted executable is forwarded, so
+    // the service-side daemon resolves the same AGY_RUNTIME_PATH the
+    // interactive one does.
+    ...(agyRuntime ? [`<key>AGY_RUNTIME_PATH</key><string>${escapeXml(agyRuntime)}</string>`] : []),
   ].join('');
   return Buffer.from(`<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict>\n<key>Label</key><string>${LAUNCH_AGENT_LABEL}</string>\n<key>ProgramArguments</key><array>${programArguments.join('')}</array>\n<key>EnvironmentVariables</key><dict>${dshEnvironment}</dict>\n<key>RunAtLoad</key><true/><key>KeepAlive</key><true/>\n<key>StandardOutPath</key><string>${escapeXml(path.join(paths.logs, 'daemon.log'))}</string>\n<key>StandardErrorPath</key><string>${escapeXml(path.join(paths.logs, 'daemon-error.log'))}</string>\n</dict></plist>\n`);
 }

package/cli/rpc.mjs

@@ -7,6 +7,7 @@ export const MAX_FRAME_BYTES = 512 * 1024;
 export const MAX_RESPONSE_FRAME_BYTES = 2 * 1024 * 1024;
 export const MAX_RESULT_CHUNK_BYTES = 256 * 1024;
 export const AGENT_PROBE_TRANSPORT_TIMEOUT_MS = 200_000;
+export const SPAWN_TRANSPORT_TIMEOUT_MS = 150_000;
 export const MIN_TASK_ID = 10_000_000;
 export const MAX_TASK_ID = 99_999_999;
 
@@ -38,6 +39,7 @@ export function waitTransportTimeoutMs(waitTime = 290) {
 export function daemonTransportTimeoutMs(command, params = {}) {
   if (command === 'wait') return waitTransportTimeoutMs(params.wait_time);
   if (command === 'agent-probe' || command === 'agent-models') return AGENT_PROBE_TRANSPORT_TIMEOUT_MS;
+  if (command === 'create' || command === 'spawn') return SPAWN_TRANSPORT_TIMEOUT_MS;
   return 6000;
 }
 
@@ -136,8 +138,10 @@ function methodFor(command, input) {
       } };
     }
     case 'send': {
-      rejectUnknownFields('send', input, new Set(['agent_id', 'message_id', 'content']));
+      rejectUnknownFields('send', input, new Set(['agent_id', 'message_id', 'mode', 'content']));
+      if (!['queue', 'steer'].includes(input.mode)) throw new CliError('VALIDATION', 'send mode must be queue or steer', 2);
       return { method: 'task_message', params: {
+        mode: input.mode,
         agent_id: daemonTaskId(input.agent_id),
         ...(input.message_id ? { message_id: input.message_id } : {}),
         content: input.content,
@@ -174,6 +178,16 @@ function publicTask(task) {
   };
 }
 
+// The wait response carries only the task lifecycle header: admission
+// provenance never changes after spawn, so wait does not repeat it.
+function publicTaskHeader(task) {
+  return {
+    agent_id: publicTaskId(task.agent_id),
+    status: task.status,
+    session_id: task.session_id ?? null,
+  };
+}
+
 function publicResult(result) {
   if (result == null) return null;
   return {
@@ -195,10 +209,10 @@ export function projectDaemonResult(command, result) {
     case 'agent-probe': return { evidence: result.evidence, status: result.status };
     case 'agent-models': return result.catalog ?? result;
     case 'create': case 'spawn':
-      return { agent_id: publicTaskId(result.task.agent_id), status: result.task.status };
+      return { agent_id: publicTaskId(result.task.agent_id), status: result.task.status, session_id: result.task.session_id ?? null };
     case 'wait': {
       const { result: taskResult, task, activity, kind: _kind, ...rest } = result;
-      return { ...rest, task: publicTask(task), activity, result: publicResult(taskResult) };
+      return { ...rest, task: publicTaskHeader(task), activity, result: publicResult(taskResult) };
     }
     case 'list': return { tasks: result.tasks.map(publicTask), next_cursor: result.next_cursor ?? null };
     case 'send': return { message_id: result.message_id, disposition: result.disposition };

package/npm/native/darwin-arm64/payload.json

@@ -1,20 +1,20 @@
 {
   "schema_version": 1,
   "product": "external-subagent",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "platform": "darwin-arm64",
   "files": [
     {
       "name": "external-subagentd",
-      "bytes": 9529168,
+      "bytes": 9911616,
       "mode": "755",
-      "sha256": "3ad4a342178a1550ee8c10614493d7a4f2c45588ca1a8409397fdd04e123f343"
+      "sha256": "d3f6d45a32d7675ba68fa059e70cca4c85f1ed781441b53dddfa7585751ea339"
     },
     {
       "name": "external-subagent-mcp",
-      "bytes": 937840,
+      "bytes": 935760,
       "mode": "755",
-      "sha256": "e3ccf595590286c5718a35eeefa6ff08d0549a3acf05a828f96b98ed713b5e70"
+      "sha256": "504256978a7cf0cc16b13c8f53d75bca3c53bf65d1286a3c9bc22dc923cd0476"
     }
   ]
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "external-subagent",
-  "version": "0.2.0",
-  "description": "Manage bounded ZCode, DeepSeek Harness (DSH), and Codex subagent tasks through a local MCP service for any local host (Codex, ZCode, or a custom MCP client)",
+  "version": "0.3.1",
+  "description": "Manage bounded ZCode, DeepSeek Harness (DSH), Codex, and Google Antigravity (agy) subagent tasks through a local MCP service for any local host (Codex, ZCode, or a custom MCP client)",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -52,6 +52,7 @@
     "postpack": "node scripts/release/check-native-tarball.mjs",
     "prepublishOnly": "node scripts/release/check-native-tarball.mjs --staged",
     "test:install": "node --test tests/install/*.test.mjs",
+    "test:affected": "node scripts/test/affected.mjs",
     "check": "node --check bin/external-subagent.mjs && node --check bin/external-subagent-mcp.mjs && node --check bin/external-subagent-debug.mjs && node --check bin/external-subagent-debug-mcp.mjs && node --check cli/main.mjs"
   },
   "engines": {

package/plugins/codex/external-subagent/skills/external-subagent/SKILL.md

@@ -7,7 +7,7 @@ description: Manage bounded repository-scoped tasks through external-subagent.
 
 Use the `external_subagent_*` tools to inspect status, spawn a task with an explicit
 `subagent`, wait for progress, retrieve the complete result, and close the task.
-Execution targets are `zcode`, `dsh`, and `codex`; each name currently has one
+Execution targets are `zcode`, `dsh`, `codex`, and `agy`; each name currently has one
 runtime instance and no instance selector is supported. Omitting `subagent` uses
 `default_subagent` or returns `subagent_required`; unknown targets return
 `subagent_unknown`, and unknown spawn fields are rejected before dispatch.
@@ -22,10 +22,11 @@ evidence are operator diagnostics — read them with the CLI `diagnose` command
 instead of the MCP status tool.
 
 Spawn accepts an optional `effort` token that steers the task's reasoning
-effort. Omit it to keep each agent's current default (codex keeps its existing
-wire default; zcode and dsh send no effort field or call at all). `codex`
-admits only the closed set
+effort. Omit it to keep each agent's current default (codex and agy keep their
+existing wire default; zcode and dsh send no effort field or call at all).
+`codex` admits only the closed set
 `low | medium | high | xhigh | max` — `minimal` and `ultra` are rejected;
+`agy` admits only the measured closed set `low | medium | high | max`;
 `zcode` and `dsh` accept any bounded token (1..24 bytes of `[a-z0-9_]`) and
 pass it through to the runtime, because the supported set is only known at
 runtime. A malformed or unsupported token is rejected before dispatch, so no
@@ -40,9 +41,9 @@ Codex home instances, and offers plugin or direct MCP bindings; built-in
 dirs with a single per-user instance. This is separate
 from `subagent.codex`. Protocol implementations are adapters.
 
-All three subagents (`zcode`, `dsh`, `codex`) are disabled by default; enable one
+All four subagents (`zcode`, `dsh`, `codex`, `agy`) are disabled by default; enable one
 with `external-subagent agents enable <name>`, which runs a local probe and writes
-the configuration only on success (a daemon restart is required for `dsh`/`codex`).
+the configuration only on success (a daemon restart is required for `dsh`/`codex`/`agy`).
 Actual per-subagent limitations (from the accepted code):
 
 - `zcode` — disabled until explicitly enabled; all four permission modes
@@ -56,7 +57,15 @@ Actual per-subagent limitations (from the accepted code):
   and `yolo` to sandbox=danger-full-access, all pinning approvalPolicy=never.
   A non-empty spawn `write_manifest` is rejected before task creation with
   `codex_write_manifest_unsupported`.
-- `observe` — available for all three subagents; `zcode` and `dsh` return the
-  public reasoning tail (at most 200 characters), while `codex` does not collect
-  reasoning and returns `reasoning: null`. Tool history and coverage are reported
-  truthfully per adapter capability.
+- `agy` (Google Antigravity) — disabled until explicitly enabled with an
+  absolute executable `AGY_RUNTIME_PATH`; only `build` (`--mode accept-edits`)
+  and `yolo` (`--dangerously-skip-permissions`) are admitted (plan/edit are
+  rejected with `agy_permission_mode_unsupported`); `model` is a bare slug
+  validated against the `agy models` catalog; a non-empty spawn
+  `write_manifest` is rejected before task creation with
+  `agy_write_manifest_unsupported`; there is no permission-respond interaction
+  (tools are soft-denied).
+- `observe` — available for all four subagents; `zcode` and `dsh` return the
+  public reasoning tail (at most 200 characters), while `codex` and `agy` do not
+  collect reasoning and return `reasoning: null`. Tool history and coverage are
+  reported truthfully per adapter capability.

package/schema/external-subagent-public-api.json

@@ -15,7 +15,7 @@
       "type": "object",
       "required": ["subagent", "configured", "enabled", "spawn_supported", "permission_modes", "model_selection", "effort_selection", "local", "auth", "hi"],
       "properties": {
-        "subagent": { "enum": ["zcode", "dsh", "codex"] },
+        "subagent": { "enum": ["zcode", "dsh", "codex", "agy"] },
         "configured": { "type": "boolean" },
         "enabled": { "type": "boolean" },
         "spawn_supported": { "type": "boolean" },
@@ -60,21 +60,29 @@
     },
     "spawn": {
       "type": "object",
+      "description": "Start one durable subagent in an absolute repository workspace, returning after establishing the new session.",
       "required": ["repository", "prompt"],
       "properties": {
         "subagent": { "type": "string", "minLength": 1, "description": "Subagent route key; omission uses configured default_subagent or returns subagent_required. Null is invalid; dsh production spawn requires its enabled + spawn_supported + pinned-runtime configuration." },
         "repository": { "type": "string", "minLength": 1 },
-        "permission_mode": { "$ref": "#/properties/permission_mode", "description": "codex supports build/edit (workspace-write), plan (read-only), and yolo (danger-full-access), always with approvalPolicy=never." },
+        "permission_mode": { "$ref": "#/properties/permission_mode", "description": "codex supports build/edit (workspace-write), plan (read-only), and yolo (danger-full-access), always with approvalPolicy=never; agy supports only build (--mode accept-edits) and yolo (--dangerously-skip-permissions)." },
         "prompt": { "type": "string", "minLength": 1 },
-        "model": { "type": "string", "minLength": 1, "description": "Task model. dsh requires provider:model, split at the first colon (the model side may contain further colons; a missing colon or an empty side is rejected before any task). codex uses its own model id; zcode uses provider/model (a bare token keeps its backward-compatible zai/<token> reading). Omission falls back to the configured default_model for dsh and zcode, then to the provider-native model; codex requires an explicit model or agents.codex.default_model and never falls back to a provider default." },
-        "effort": { "type": "string", "minLength": 1, "maxLength": 24, "pattern": "^[a-z0-9_]+$", "description": "Reasoning-effort token: 1..24 bytes of [a-z0-9_]. codex admits only low, medium, high or xhigh; zcode and dsh pass the bounded token through. Omission keeps the runtime default." },
-        "write_manifest": { "type": "array", "items": { "type": "string", "minLength": 1 }, "description": "codex requires an empty or omitted write_manifest; non-empty input returns codex_write_manifest_unsupported before task creation. dsh admits a non-empty manifest in build through the guarded manifest-build composition (workspace-write sandbox, only tool-fs writable, out-of-manifest paths rejected as FS_WRITE_MANIFEST_DENIED), at most 256 entries; an explicit [\".\"] keeps the existing build composition. plan requires an empty manifest for every subagent." }
+        "model": { "type": "string", "minLength": 1, "description": "Task model. dsh requires provider:model, split at the first colon (the model side may contain further colons; a missing colon or an empty side is rejected before any task). codex uses its own model id; zcode uses provider/model (a bare token keeps its backward-compatible zai/<token> reading). agy uses a bare model slug with no ':' or '/' separator or whitespace; admission validates only that shape and the daemon does not verify catalog membership, so an unknown slug fails loudly at session start when the agy CLI rejects it. Omission falls back to the configured default_model for dsh, zcode and agy, then to the provider-native model; codex requires an explicit model or agents.codex.default_model and never falls back to a provider default." },
+        "effort": { "type": "string", "minLength": 1, "maxLength": 24, "pattern": "^[a-z0-9_]+$", "description": "Reasoning-effort token: 1..24 bytes of [a-z0-9_]. codex admits only low, medium, high or xhigh; agy admits only low, medium, high or max; zcode and dsh pass the bounded token through. Omission keeps the runtime default." },
+        "write_manifest": { "type": "array", "items": { "type": "string", "minLength": 1 }, "description": "codex requires an empty or omitted write_manifest; non-empty input returns codex_write_manifest_unsupported before task creation. agy likewise requires an empty or omitted write_manifest; non-empty input returns agy_write_manifest_unsupported before task creation. dsh admits a non-empty manifest in build through the guarded manifest-build composition (workspace-write sandbox, only tool-fs writable, out-of-manifest paths rejected as FS_WRITE_MANIFEST_DENIED), at most 256 entries; an explicit [\".\"] keeps the existing build composition. plan requires an empty manifest for every subagent." }
       },
       "allOf": [
         { "if": { "required": ["subagent"], "properties": { "subagent": { "const": "codex" } } },
           "then": { "properties": { "write_manifest": { "maxItems": 0 } } } },
         { "if": { "required": ["subagent"], "properties": { "subagent": { "const": "dsh" } } },
           "then": { "properties": { "write_manifest": { "maxItems": 256 } } } },
+        { "if": { "required": ["subagent"], "properties": { "subagent": { "const": "agy" } } },
+          "then": { "properties": {
+            "permission_mode": { "enum": ["build", "yolo"] },
+            "model": { "type": "string", "minLength": 1, "maxLength": 512, "pattern": "^[^:/\\s]+$" },
+            "effort": { "enum": ["low", "medium", "high", "max"] },
+            "write_manifest": { "maxItems": 0 }
+          } } },
         { "if": { "required": ["permission_mode"], "properties": { "permission_mode": { "const": "plan" } } },
           "then": { "properties": { "write_manifest": { "maxItems": 0 } } } }
       ],
@@ -95,7 +103,7 @@
     },
     "wait": {
       "type": "object",
-      "description": "Wait returns early only for an actionable pending request (permission requests need allow/deny; user-input requests carry the full embedded question and need answer with non-empty content) or a terminal result; ordinary progress, message receipts, already-responded and unsupported requests never wake it. The pending_requests output projection is capped at 100 actionable records, while the wake decision scans the full pending set. activity carries the text tail incrementally: each wait returns only the text appended since the previous wait (an empty tail means nothing new), every byte is delivered by wait at most once, and latest_text_truncated flags undelivered bytes that rolled out of the bounded window (that response degrades to the whole window); a terminal response also strips bytes repeating the embedded result page verbatim. activity also carries a 200-char verified reasoning tail, tool calls started in the last 60 seconds, and telemetry status.",
+      "description": "Wait up to 290 seconds by default. Returns early only when an actionable pending request exists (permission requests need allow/deny; user-input requests carry the full embedded question and need answer with non-empty content) or the terminal result is available; ordinary progress, message receipts, already-responded and unsupported requests never wake it, and its timeout still returns timed_out=true. When the final result is embedded with complete=true no further result call is needed; a partial page directs you to external_subagent_result with next_offset. A failed terminal result also carries failure_message: usually the daemon's bounded single-line JSON failure detail, but an early fail_claim row may be plain text, so treat it as an opaque bounded string and attempt JSON parsing defensively (null when the task has no persisted detail or the outcome is not a failure). Read failure_message before falling back to daemon logs or sqlite. The pending_requests projection stays capped at 100 records while the wake decision scans the full pending set, and the request that woke the wait is always part of the returned projection so its request_id can be answered directly. activity carries the text tail incrementally: each wait returns only the text appended since the previous wait (an empty tail means nothing new), every byte is delivered by wait at most once, and latest_text_truncated flags the case where undelivered bytes rolled out of the bounded window so this response degraded to the whole window (on the terminal response, bytes repeating the embedded result page verbatim are stripped so they are not shipped twice), a 200-char verified reasoning tail, tool calls started in the last 60 seconds, and telemetry status; activity also exposes last_tool_calls as up to three [tool, arg] string pairs in chronological order across turns (tool up to 64 characters, arg up to 512 UTF-8 bytes), last_activity_age_ms (null before any activity), and model_request_active; additionally in_flight_tool_count counts tracked in-flight tool calls (scheduled or started without a matching result, error or permission resolution; 0 when there is no snapshot or the adapter has no per-call lifecycle tracking, such as codex) and oldest_in_flight_tool_age_ms is the age since the oldest tracked in-flight call first appeared (null when none is tracked); use observe only when these suggest a meaningless loop.",
       "required": ["agent_id"],
       "properties": {
         "agent_id": { "type": "integer", "minimum": 10000000, "maximum": 99999999 },
@@ -105,7 +113,7 @@
       "additionalProperties": false
     },
     "observe": {
-      "description": "Read captured task observations for zcode, dsh or codex. zcode and dsh expose at most 200 Unicode characters of public reasoning; codex reasoning is null. Coverage reports capture gaps and unsupported history truthfully.",
+      "description": "Read captured task observations for zcode, dsh, codex or agy. zcode and dsh expose at most 200 Unicode characters of public reasoning; codex and agy reasoning is null. Coverage reports capture gaps and unsupported history truthfully.",
       "type": "object",
       "required": ["agent_id"],
       "properties": {
@@ -175,11 +183,11 @@
       "additionalProperties": false,
       "properties": {
         "external_subagent_status": { "input": [], "output": ["mcp_version", "components", "capabilities", "subagents"] },
-        "external_subagent_spawn": { "input": ["subagent", "repository", "permission_mode", "prompt", "model", "effort", "write_manifest"], "output": ["agent_id", "status"], "idempotent": false },
+        "external_subagent_spawn": { "input": ["subagent", "repository", "permission_mode", "prompt", "model", "effort", "write_manifest"], "output": ["agent_id", "status", "session_id"], "idempotent": false },
         "external_subagent_wait": { "input": ["agent_id", "wait_time", "message_id"], "output": ["task", "pending_requests", "result_available", "activity", "result", "instruction", "timed_out", "message_receipt"] },
         "external_subagent_observe": { "input": ["agent_id"], "output": ["tools", "reasoning", "coverage"], "idempotent": true },
         "external_subagent_list": { "input": ["subagent", "repository", "phase", "outcome", "cursor", "limit"], "output": ["tasks", "next_cursor"] },
-        "external_subagent_send": { "input": ["agent_id", "message_id", "content"], "output": ["message_id", "disposition"] },
+        "external_subagent_send": { "input": ["agent_id", "message_id", "mode", "content"], "required": ["agent_id", "mode", "content"], "mode": ["queue", "steer"], "output": ["message_id", "disposition"] },
         "external_subagent_respond": { "input": ["agent_id", "request_id", "decision", "content"], "output": ["disposition", "requested_decision", "effective_decision", "policy_overrode", "policy_reason_code"] },
         "external_subagent_cancel": { "input": ["agent_id"], "output": ["task"] },
         "external_subagent_result": { "input": ["agent_id", "offset", "limit"], "output": ["task", "result"] },

package/schema/public-reasoning-source.json

@@ -31,6 +31,12 @@
       "status": "HIDDEN",
       "reasoning": null,
       "collected": false
+    },
+    "agy": {
+      "public": false,
+      "status": "HIDDEN",
+      "reasoning": null,
+      "collected": false
     }
   }
 }