harness-dispatch 0.4.0 → 0.6.0

package/dist/mcp/tool-schemas.d.ts

@@ -0,0 +1,194 @@
+/**
+ * The MCP input contract: what the three tools accept, and what they refuse.
+ *
+ * Split out of tools.ts, which had grown to 1040 lines mixing the contract
+ * with the handlers that run after it. This half earns its own file rather
+ * than merely being long: these schemas ARE the safety boundary. The SDK
+ * validates arguments against them BEFORE any handler runs, so a key absent
+ * here is a key silently stripped — which is exactly how a top-level
+ * `safetyProfile` once ran a dispatch with more access than the caller
+ * asked for. Being able to read the whole accepted surface, and every
+ * deliberate refusal, in one place is the point.
+ */
+import { z } from "zod";
+export declare const taskTypeSchema: z.ZodEnum<{
+    execute: "execute";
+    plan: "plan";
+    review: "review";
+    local: "local";
+}>;
+export declare const safetyProfileSchema: z.ZodEnum<{
+    read_only: "read_only";
+    workspace_edit: "workspace_edit";
+    full_auto: "full_auto";
+}>;
+export declare const workspacePolicySchema: z.ZodEnum<{
+    shared: "shared";
+    shared_locked: "shared_locked";
+    git_worktree: "git_worktree";
+    copy: "copy";
+}>;
+export declare const routePolicySchema: z.ZodEnum<{
+    standard: "standard";
+    local_only: "local_only";
+    approval_required: "approval_required";
+    blocked: "blocked";
+}>;
+export declare const publicHintsSchema: z.ZodObject<{
+    model: z.ZodOptional<z.ZodString>;
+    taskType: z.ZodOptional<z.ZodEnum<{
+        execute: "execute";
+        plan: "plan";
+        review: "review";
+        local: "local";
+    }>>;
+    preferLargeContext: z.ZodOptional<z.ZodBoolean>;
+    safetyProfile: z.ZodOptional<z.ZodEnum<{
+        read_only: "read_only";
+        workspace_edit: "workspace_edit";
+        full_auto: "full_auto";
+    }>>;
+    workspacePolicy: z.ZodOptional<z.ZodEnum<{
+        shared: "shared";
+        shared_locked: "shared_locked";
+        git_worktree: "git_worktree";
+        copy: "copy";
+    }>>;
+    routePolicy: z.ZodOptional<z.ZodEnum<{
+        standard: "standard";
+        local_only: "local_only";
+        approval_required: "approval_required";
+        blocked: "blocked";
+    }>>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const workingDirDescription: string;
+/** Inline grace window: how long `dispatch` waits for the background run before returning a pollable jobId instead of the full result. */
+export declare const DEFAULT_GRACE_SECONDS = 25;
+/**
+ * Cap on `files` per dispatch.
+ *
+ * Not a performance limit — each entry's parent directory becomes an
+ * `--add-dir` grant on CLI routes (generic-cli.ts includedDirectories ->
+ * {{file_dirs}}), so an unbounded list is an unbounded set of directories
+ * handed to a coding agent. 64 is far above any real prompt and low enough
+ * that a runaway caller is stopped at the boundary rather than at the CLI.
+ */
+/** The only jobId shape jobs.ts produces; shared by both tools. */
+export declare const JOB_ID_RE: RegExp;
+export declare const MAX_CONTEXT_FILES = 64;
+/**
+ * Cap on prior jobs referenced by one dispatch.
+ *
+ * Each one costs a disk read and a slice of the delegate's context window.
+ * jobs.ts caps the rendered TEXT as well; this bounds the work done to produce
+ * it, so a caller naming hundreds of jobs is stopped at the boundary rather
+ * than after the reads.
+ */
+export declare const MAX_CONTEXT_JOBS = 16;
+export declare const misplacedTopLevelKeys: {
+    safetyProfile: z.ZodOptional<z.ZodNever>;
+    routePolicy: z.ZodOptional<z.ZodNever>;
+    taskType: z.ZodOptional<z.ZodNever>;
+    preferLargeContext: z.ZodOptional<z.ZodNever>;
+    timeoutMs: z.ZodOptional<z.ZodNever>;
+    model: z.ZodOptional<z.ZodNever>;
+    escalate: z.ZodOptional<z.ZodNever>;
+};
+export declare const dispatchInputShape: {
+    readonly models: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    readonly service: z.ZodOptional<z.ZodString>;
+    readonly graceSeconds: z.ZodOptional<z.ZodNumber>;
+    readonly safetyProfile: z.ZodOptional<z.ZodNever>;
+    readonly routePolicy: z.ZodOptional<z.ZodNever>;
+    readonly taskType: z.ZodOptional<z.ZodNever>;
+    readonly preferLargeContext: z.ZodOptional<z.ZodNever>;
+    readonly timeoutMs: z.ZodOptional<z.ZodNever>;
+    readonly model: z.ZodOptional<z.ZodNever>;
+    readonly escalate: z.ZodOptional<z.ZodNever>;
+    readonly prompt: z.ZodString;
+    readonly mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        single: "single";
+        fanout: "fanout";
+    }>>>;
+    readonly contextJobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    readonly files: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    readonly workingDir: z.ZodOptional<z.ZodString>;
+    readonly workspacePolicy: z.ZodOptional<z.ZodEnum<{
+        shared: "shared";
+        shared_locked: "shared_locked";
+        git_worktree: "git_worktree";
+        copy: "copy";
+    }>>;
+    readonly hints: z.ZodOptional<z.ZodObject<{
+        model: z.ZodOptional<z.ZodString>;
+        taskType: z.ZodOptional<z.ZodEnum<{
+            execute: "execute";
+            plan: "plan";
+            review: "review";
+            local: "local";
+        }>>;
+        preferLargeContext: z.ZodOptional<z.ZodBoolean>;
+        safetyProfile: z.ZodOptional<z.ZodEnum<{
+            read_only: "read_only";
+            workspace_edit: "workspace_edit";
+            full_auto: "full_auto";
+        }>>;
+        workspacePolicy: z.ZodOptional<z.ZodEnum<{
+            shared: "shared";
+            shared_locked: "shared_locked";
+            git_worktree: "git_worktree";
+            copy: "copy";
+        }>>;
+        routePolicy: z.ZodOptional<z.ZodEnum<{
+            standard: "standard";
+            local_only: "local_only";
+            approval_required: "approval_required";
+            blocked: "blocked";
+        }>>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+};
+export declare const jobStatusInputShape: {
+    readonly jobId: z.ZodOptional<z.ZodString>;
+};
+export declare const usageInputShape: {
+    listModels: z.ZodOptional<z.ZodString>;
+};
+/**
+ * `cancel_job` takes the jobId and, optionally, why.
+ *
+ * The reason is not decoration: a cancelled run's status carries it, so
+ * whoever finds the job later — often a different agent, or the same one
+ * after a restart — learns it was stopped on purpose rather than that it
+ * mysteriously died.
+ */
+export declare const cancelJobInputShape: {
+    readonly jobId: z.ZodString;
+    readonly reason: z.ZodOptional<z.ZodString>;
+};
+/**
+ * `workspace` — inspect or resolve the isolated result of a finished job.
+ *
+ * One tool with an action rather than three tools, because all three operate
+ * on the SAME object (one job's workspace) with the same parameters. That is
+ * the opposite of the dispatch/job_status split, where one tool covering both
+ * "start work" and "check work" needed runtime guards against
+ * mutually-exclusive params — a sign the boundary was wrong. Here the actions
+ * are three verbs on one noun, and nothing is mutually exclusive.
+ */
+export declare const workspaceInputShape: {
+    readonly jobId: z.ZodString;
+    readonly action: z.ZodEnum<{
+        diff: "diff";
+        apply: "apply";
+        discard: "discard";
+    }>;
+    readonly force: z.ZodOptional<z.ZodBoolean>;
+};
+/** `retry_job` — run a finished job's task again, optionally on another route. */
+export declare const retryJobInputShape: {
+    readonly jobId: z.ZodString;
+    readonly service: z.ZodOptional<z.ZodString>;
+};
+//# sourceMappingURL=tool-schemas.d.ts.map

package/dist/mcp/tool-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-schemas.d.ts","sourceRoot":"","sources":["../../src/mcp/tool-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;;;EAAiD,CAAC;AAC7E,eAAO,MAAM,mBAAmB;;;;EAAuD,CAAC;AACxF,eAAO,MAAM,qBAAqB;;;;;EAA8D,CAAC;AACjG,eAAO,MAAM,iBAAiB;;;;;EAAqE,CAAC;AAEpG,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA2EM,CAAC;AAErC,eAAO,MAAM,qBAAqB,QAG0B,CAAC;AAE7D,0IAA0I;AAC1I,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;;;;;GAQG;AACH,mEAAmE;AACnE,eAAO,MAAM,SAAS,QAA0B,CAAC;AAEjD,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAuCnC,eAAO,MAAM,qBAAqB;;;;;;;;CAejC,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuFrB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;CAUtB,CAAC;AAEX,eAAO,MAAM,eAAe;;CAc3B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;CAatB,CAAC;AAEX;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;CAoBtB,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,kBAAkB;;;CAarB,CAAC"}

package/dist/mcp/tool-schemas.js

@@ -0,0 +1,311 @@
+/**
+ * The MCP input contract: what the three tools accept, and what they refuse.
+ *
+ * Split out of tools.ts, which had grown to 1040 lines mixing the contract
+ * with the handlers that run after it. This half earns its own file rather
+ * than merely being long: these schemas ARE the safety boundary. The SDK
+ * validates arguments against them BEFORE any handler runs, so a key absent
+ * here is a key silently stripped — which is exactly how a top-level
+ * `safetyProfile` once ran a dispatch with more access than the caller
+ * asked for. Being able to read the whole accepted surface, and every
+ * deliberate refusal, in one place is the point.
+ */
+import { z } from "zod";
+export const taskTypeSchema = z.enum(["execute", "plan", "review", "local"]);
+export const safetyProfileSchema = z.enum(["read_only", "workspace_edit", "full_auto"]);
+export const workspacePolicySchema = z.enum(["shared", "shared_locked", "copy", "git_worktree"]);
+export const routePolicySchema = z.enum(["standard", "local_only", "approval_required", "blocked"]);
+export const publicHintsSchema = z
+    .object({
+    model: z
+        .string()
+        .optional()
+        .describe("Preferred route or model name (e.g. a route id like 'codex' or a model like " +
+        "'gpt-5.6-sol'). Routes that statically declare this model get a scoring " +
+        "boost; the model is ALWAYS passed to the harness as an override either way, " +
+        "even on a route that doesn't recognize it — NOT validated, so an unfamiliar " +
+        "or misspelled name can still fail at dispatch time if the harness doesn't " +
+        "support it. Check the response's routing.modelHintMatched: true means the " +
+        "picked route actually declares this model; false means it was forwarded " +
+        "blind and you should treat the result with more suspicion (or check why). " +
+        "Call the `usage` tool first to see valid route ids, their default models, " +
+        "and a modelHint per route pointing to where that harness's real model " +
+        "catalog is documented (or how to list it) — use it to pick correctly up " +
+        "front or self-correct after an unfamiliar-model failure. In fanout mode " +
+        "this field is ignored entirely — use `models` (top-level, not under " +
+        "hints) to select fanout candidates instead."),
+    taskType: taskTypeSchema
+        .optional()
+        .describe("Kind of work: 'execute' (write/modify code, run commands), 'plan' " +
+        "(architecture/design, no edits), 'review' (critique code, no edits), 'local' " +
+        "(trivial/mechanical — prefers free local endpoints). ALWAYS set this: when " +
+        "omitted, per-task capability weighting and model escalation are disabled and " +
+        "routing quality degrades."),
+    preferLargeContext: z
+        .boolean()
+        .optional()
+        .describe("Boost routes with very large context windows (for huge-codebase reads)."),
+    safetyProfile: safetyProfileSchema
+        .optional()
+        .describe("Maximum permission the routed harness may use: 'read_only' (inspect only — use " +
+        "for review/plan), 'workspace_edit' (default; may edit files in workingDir), " +
+        "'full_auto' (unrestricted shell — only when explicitly needed). Routes that " +
+        "cannot honor the requested profile are skipped."),
+    workspacePolicy: workspacePolicySchema.optional().describe("Workspace execution policy."),
+    routePolicy: routePolicySchema
+        .optional()
+        .describe("Operational routing policy: 'standard' (default), 'local_only' (never leave the " +
+        "machine), 'approval_required' (BLOCKS non-local routes — it is a restriction, " +
+        "not an approval grant), 'blocked' (dry-run: block everything)."),
+    timeoutMs: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe("Override the background run's hard ceiling (milliseconds). Every dispatch " +
+        "runs as a background job with a generous 60-minute default meant to catch a " +
+        "genuinely hung process, not to cap a slow-but-healthy run — raise this for " +
+        "a task you expect to run past an hour. This changes when the harness itself " +
+        "gives up, not how long the inline grace window waits (that's `graceSeconds`)."),
+})
+    // STRICT, and this is a safety control, not tidiness.
+    //
+    // zod drops unknown keys by default. The same setting is spelled
+    // `safety_profile` in config.yaml and `safetyProfile` here, so the obvious
+    // slip was silently discarded — `hints: { safety_profile: "read_only" }` ran
+    // a full_auto route at full_auto, while the correctly-spelled key refused
+    // it. A caller asking to be restricted got no restriction and no warning.
+    //
+    // config.ts already treats this class as a root cause (it warns on ANY
+    // unrecognised route key). This is the same fix at the MCP boundary, which
+    // PRODUCT.md calls the actual product surface.
+    .strict()
+    .describe("Public routing hints.");
+export const workingDirDescription = "Absolute path to the project the task is about. EFFECTIVELY REQUIRED: when omitted, " +
+    "the task runs in the router server's own working directory — almost never the " +
+    "project you mean. Always pass the caller's project root.";
+/** Inline grace window: how long `dispatch` waits for the background run before returning a pollable jobId instead of the full result. */
+export const DEFAULT_GRACE_SECONDS = 25;
+/**
+ * Cap on `files` per dispatch.
+ *
+ * Not a performance limit — each entry's parent directory becomes an
+ * `--add-dir` grant on CLI routes (generic-cli.ts includedDirectories ->
+ * {{file_dirs}}), so an unbounded list is an unbounded set of directories
+ * handed to a coding agent. 64 is far above any real prompt and low enough
+ * that a runaway caller is stopped at the boundary rather than at the CLI.
+ */
+/** The only jobId shape jobs.ts produces; shared by both tools. */
+export const JOB_ID_RE = /^job-\d+-[0-9a-f]{8}$/;
+export const MAX_CONTEXT_FILES = 64;
+/**
+ * Cap on prior jobs referenced by one dispatch.
+ *
+ * Each one costs a disk read and a slice of the delegate's context window.
+ * jobs.ts caps the rendered TEXT as well; this bounds the work done to produce
+ * it, so a caller naming hundreds of jobs is stopped at the boundary rather
+ * than after the reads.
+ */
+export const MAX_CONTEXT_JOBS = 16;
+/**
+ * Keys that mean nothing at the top level, trapped IN THE SCHEMA.
+ *
+ * `hints` is .strict(), so `hints: { safety_profile: ... }` is rejected — but
+ * the OUTER object was still permissive, so moving the same key up one level
+ * made it vanish silently instead:
+ *
+ *   hints.safetyProfile = read_only      -> honoured
+ *   TOP-LEVEL safetyProfile = read_only  -> dropped, ran with write access
+ *
+ * WHY SCHEMA FIELDS AND NOT A GUARD FUNCTION. The MCP SDK validates arguments
+ * against this shape in strip mode BEFORE the registered handler runs, so no
+ * code inside a handler can ever see a misplaced key — it is already gone. A
+ * previous version of this trap was a guard function, and it guarded a path
+ * nothing shipped: the registered tools stripped the key silently while only
+ * the test-only entry point rejected it. z.never() fields make the SDK's own
+ * validation throw the guidance message on every surface that parses this
+ * shape, and advertise as {"not":{}} in the tool's JSON schema, so a client
+ * reading the schema sees the key as unacceptable rather than merely absent.
+ *
+ * Full .strict() on the outer object is deliberately NOT used: MCP clients may
+ * attach their own fields (_meta and similar) and rejecting those would break
+ * legitimate callers. Naming the specific misplaced keys closes the trap
+ * without guessing at what else may legitimately arrive.
+ */
+function misplacedKeyTrap(message) {
+    return z.never({ error: message }).optional().describe(message);
+}
+function hintKeyTrap(key) {
+    return misplacedKeyTrap(`${key} belongs inside \`hints\`, not at the top level — e.g. hints: { ${key}: ... }. ` +
+        `At the top level it does nothing, which for a safety setting means the dispatch ` +
+        `runs with MORE access than you asked for.`);
+}
+export const misplacedTopLevelKeys = {
+    safetyProfile: hintKeyTrap("safetyProfile"),
+    routePolicy: hintKeyTrap("routePolicy"),
+    taskType: hintKeyTrap("taskType"),
+    preferLargeContext: hintKeyTrap("preferLargeContext"),
+    timeoutMs: hintKeyTrap("timeoutMs"),
+    model: misplacedKeyTrap("model belongs inside `hints` for single mode — hints: { model: ... }. " +
+        "In fanout mode use the top-level `models` array instead. At the top " +
+        "level it does nothing."),
+    escalate: misplacedKeyTrap("escalate is not a dispatch field — escalation is configured per route in " +
+        "config.yaml (escalate_model / escalate_on), not per call."),
+};
+export const dispatchInputShape = {
+    prompt: z
+        .string()
+        // Rejected here rather than at the harness. An empty prompt used to reach
+        // a real CLI, which spawned, failed with its own usage message, and left a
+        // consumed route call behind — a wasted dispatch for something the schema
+        // can refuse for free.
+        .min(1, "prompt must not be empty")
+        // A NUL byte passed the schema and failed deep inside cross-spawn with
+        // "The argument 'args[2]' must be a string without null bytes" — caught,
+        // never a crash, and correctly not charged to the route's failure count,
+        // but a raw Node internal message where a boundary rejection belongs.
+        .refine((v) => !v.includes("\u0000"), "prompt must not contain NUL bytes")
+        .describe("The coding task or question. Every dispatch starts as a background job " +
+        "immediately; if it finishes within the grace window you get the full result " +
+        "inline, otherwise you get a jobId — check on it with the `job_status` tool. " +
+        "Either way nothing is ever lost to a timeout."),
+    mode: z
+        .enum(["single", "fanout"])
+        .optional()
+        .default("single")
+        .describe("'single' routes to the one best-fit harness. 'fanout' runs the prompt on " +
+        "MULTIPLE routes in parallel for independent perspectives — without `models` it " +
+        "hits every eligible route and consumes quota on each; prefer passing an " +
+        "explicit `models` list. Write-capable fanout requires workspacePolicy 'copy' " +
+        "or 'git_worktree'. Fanout results that outlive the grace window each return " +
+        "their own jobId to poll individually."),
+    contextJobs: z
+        .array(z.string().regex(JOB_ID_RE, "must look like job-<timestamp>-<8 hex chars>"))
+        .max(MAX_CONTEXT_JOBS)
+        .optional()
+        .describe("jobIds of earlier dispatches whose results this one should build on. Their " +
+        "prompts and outputs are rendered into this prompt directly, so a follow-up " +
+        "step can see what came before WITHOUT you reading it into your own context " +
+        "and re-summarising it. Use this to chain delegated work."),
+    files: z
+        .array(z.string())
+        .max(MAX_CONTEXT_FILES)
+        .optional()
+        .describe(`Absolute file paths to snapshot and include as context (max ` +
+        `${MAX_CONTEXT_FILES}). A path outside workingDir is still sent, but ` +
+        `for CLI routes its PARENT DIRECTORY is also granted to the agent via ` +
+        `--add-dir, so it escapes an isolated workspace — the response carries ` +
+        `a warning naming the directories when that happens.`),
+    workingDir: z.string().optional().describe(workingDirDescription),
+    workspacePolicy: workspacePolicySchema.optional().describe("Workspace execution policy."),
+    hints: publicHintsSchema.optional(),
+    ...misplacedTopLevelKeys,
+    models: z
+        .array(z.string())
+        .optional()
+        .describe("Route ids or model names to fan out to (fanout mode only). This is the ONLY " +
+        "field that narrows which routes fanout hits — `hints.model` is ignored " +
+        "entirely in fanout mode (not used for selection, not forwarded to any " +
+        "dispatch); it only does anything in single mode. Get valid ids from the " +
+        "`usage` tool."),
+    service: z
+        .string()
+        .optional()
+        .describe("Optional explicit route id to run (e.g. 'codex', 'cursor', 'local_inference' — " +
+        "see the `usage` tool for valid ids). Omit to let the router pick. Single " +
+        "mode only — incompatible with mode='fanout' (use `models` there)."),
+    graceSeconds: z
+        .number()
+        .int()
+        .min(0)
+        .max(600)
+        .optional()
+        .describe(`Seconds to wait for the run inline before returning a pollable jobId (default ` +
+        `${DEFAULT_GRACE_SECONDS}). 0 returns the jobId immediately (pure async). ` +
+        `Raising it past your MCP client's own request timeout buys nothing — the run ` +
+        `continues in the background either way and the result stays collectible via ` +
+        `\`job_status\`, so a client timeout on this call loses nothing but the inline reply.`),
+};
+export const jobStatusInputShape = {
+    jobId: z
+        .string()
+        .regex(JOB_ID_RE, "jobId must look like job-<timestamp>-<8 hex chars>")
+        .optional()
+        .describe("Check a previously started dispatch: returns partialOutput while running and " +
+        "the full result once completed or failed. Omit to list every known background " +
+        "dispatch instead."),
+};
+export const usageInputShape = {
+    listModels: z
+        .string()
+        .optional()
+        .describe("Route id of an OpenAI-compatible endpoint (e.g. an entry from `endpoints:` " +
+        "like nvidia_nim or ollama). If the route declares a `models:` list in " +
+        "config, that operator-curated list is returned as-is — declaring it is " +
+        "how you override live discovery (e.g. to pin specific ids, or the " +
+        "endpoint's /models listing is noisy/untrustworthy). Otherwise fetches the " +
+        "endpoint's live GET /models catalog server-side — the API key never " +
+        "leaves the router. Either way, results come back under `liveModels`. CLI " +
+        "harness routes don't support this; use their modelHint instead."),
+};
+/**
+ * `cancel_job` takes the jobId and, optionally, why.
+ *
+ * The reason is not decoration: a cancelled run's status carries it, so
+ * whoever finds the job later — often a different agent, or the same one
+ * after a restart — learns it was stopped on purpose rather than that it
+ * mysteriously died.
+ */
+export const cancelJobInputShape = {
+    jobId: z
+        .string()
+        .regex(JOB_ID_RE, "must look like job-<timestamp>-<8 hex chars>")
+        .describe("The jobId returned by `dispatch`."),
+    reason: z
+        .string()
+        .max(500)
+        .optional()
+        .describe("Why it is being cancelled, recorded on the job so a later reader knows " +
+        "it was stopped deliberately (e.g. 'superseded by job-...', 'wrong directory')."),
+};
+/**
+ * `workspace` — inspect or resolve the isolated result of a finished job.
+ *
+ * One tool with an action rather than three tools, because all three operate
+ * on the SAME object (one job's workspace) with the same parameters. That is
+ * the opposite of the dispatch/job_status split, where one tool covering both
+ * "start work" and "check work" needed runtime guards against
+ * mutually-exclusive params — a sign the boundary was wrong. Here the actions
+ * are three verbs on one noun, and nothing is mutually exclusive.
+ */
+export const workspaceInputShape = {
+    jobId: z
+        .string()
+        .regex(JOB_ID_RE, "must look like job-<timestamp>-<8 hex chars>")
+        .describe("A finished job that ran with workspacePolicy 'copy' or 'git_worktree'."),
+    action: z
+        .enum(["diff", "apply", "discard"])
+        .describe("'diff' returns the actual patch of what the agent changed (and writes it to " +
+        "the job directory). 'apply' applies that patch to the ORIGINAL project. " +
+        "'discard' deletes the isolated workspace, leaving the project untouched."),
+    force: z
+        .boolean()
+        .optional()
+        .describe("apply only: apply even when the target project has uncommitted changes. " +
+        "Off by default because the patch was built against a clean base, so " +
+        "applying over newer work can conflict with or overwrite it."),
+};
+/** `retry_job` — run a finished job's task again, optionally on another route. */
+export const retryJobInputShape = {
+    jobId: z
+        .string()
+        .regex(JOB_ID_RE, "must look like job-<timestamp>-<8 hex chars>")
+        .describe("The finished job whose task should be attempted again."),
+    service: z
+        .string()
+        .optional()
+        .describe("Route the retry somewhere else (e.g. the original hit its usage limit). " +
+        "Omit to reuse the original route, or to let the router pick again if it " +
+        "had none. Get valid ids from `usage`."),
+};
+//# sourceMappingURL=tool-schemas.js.map

package/dist/mcp/tool-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-schemas.js","sourceRoot":"","sources":["../../src/mcp/tool-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AACjG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8EAA8E;QAC5E,0EAA0E;QAC1E,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,6CAA6C,CAChD;IACH,QAAQ,EAAE,cAAc;SACrB,QAAQ,EAAE;SACV,QAAQ,CACP,oEAAoE;QAClE,+EAA+E;QAC/E,6EAA6E;QAC7E,+EAA+E;QAC/E,2BAA2B,CAC9B;IACH,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,yEAAyE,CAAC;IACtF,aAAa,EAAE,mBAAmB;SAC/B,QAAQ,EAAE;SACV,QAAQ,CACP,iFAAiF;QAC/E,8EAA8E;QAC9E,8EAA8E;QAC9E,iDAAiD,CACpD;IACH,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACzF,WAAW,EAAE,iBAAiB;SAC3B,QAAQ,EAAE;SACV,QAAQ,CACP,kFAAkF;QAChF,gFAAgF;QAChF,gEAAgE,CACnE;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,4EAA4E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E,CAClF;CACJ,CAAC;IACF,sDAAsD;IACtD,EAAE;IACF,iEAAiE;IACjE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,EAAE;IACF,uEAAuE;IACvE,2EAA2E;IAC3E,+CAA+C;KAC9C,MAAM,EAAE;KACR,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,qBAAqB,GAChC,sFAAsF;IACtF,gFAAgF;IAChF,0DAA0D,CAAC;AAE7D,0IAA0I;AAC1I,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;;;;;;;GAQG;AACH,mEAAmE;AACnE,MAAM,CAAC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,gBAAgB,CACrB,GAAG,GAAG,mEAAmE,GAAG,WAAW;QACrF,kFAAkF;QAClF,2CAA2C,CAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,aAAa,EAAE,WAAW,CAAC,eAAe,CAAC;IAC3C,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC;IACvC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC;IACjC,kBAAkB,EAAE,WAAW,CAAC,oBAAoB,CAAC;IACrD,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC;IACnC,KAAK,EAAE,gBAAgB,CACrB,wEAAwE;QACtE,sEAAsE;QACtE,wBAAwB,CAC3B;IACD,QAAQ,EAAE,gBAAgB,CACxB,2EAA2E;QACzE,2DAA2D,CAC9D;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;QACT,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,uBAAuB;SACtB,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;QACnC,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;SACrE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,mCAAmC,CAAC;SACzE,QAAQ,CACP,yEAAyE;QACvE,8EAA8E;QAC9E,8EAA8E;QAC9E,+CAA+C,CAClD;IACH,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SAC1B,QAAQ,EAAE;SACV,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CACP,2EAA2E;QACzE,iFAAiF;QACjF,0EAA0E;QAC1E,+EAA+E;QAC/E,8EAA8E;QAC9E,uCAAuC,CAC1C;IACH,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,8CAA8C,CAAC,CAAC;SAClF,GAAG,CAAC,gBAAgB,CAAC;SACrB,QAAQ,EAAE;SACV,QAAQ,CACP,6EAA6E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,0DAA0D,CAC7D;IACH,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,iBAAiB,CAAC;SACtB,QAAQ,EAAE;SACV,QAAQ,CACP,8DAA8D;QAC5D,GAAG,iBAAiB,kDAAkD;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,qDAAqD,CACxD;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACjE,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACzF,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACnC,GAAG,qBAAqB;IACxB,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,8EAA8E;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,eAAe,CAClB;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,iFAAiF;QAC/E,2EAA2E;QAC3E,mEAAmE,CACtE;IACH,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,gFAAgF;QAC9E,GAAG,qBAAqB,mDAAmD;QAC3E,+EAA+E;QAC/E,8EAA8E;QAC9E,sFAAsF,CACzF;CACK,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,SAAS,EAAE,oDAAoD,CAAC;SACtE,QAAQ,EAAE;SACV,QAAQ,CACP,+EAA+E;QAC7E,gFAAgF;QAChF,mBAAmB,CACtB;CACK,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6EAA6E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,oEAAoE;QACpE,4EAA4E;QAC5E,sEAAsE;QACtE,2EAA2E;QAC3E,iEAAiE,CACpE;CACJ,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,SAAS,EAAE,8CAA8C,CAAC;SAChE,QAAQ,CAAC,mCAAmC,CAAC;IAChD,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,yEAAyE;QACvE,gFAAgF,CACnF;CACK,CAAC;AAEX;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,SAAS,EAAE,8CAA8C,CAAC;SAChE,QAAQ,CAAC,wEAAwE,CAAC;IACrF,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;SAClC,QAAQ,CACP,8EAA8E;QAC5E,0EAA0E;QAC1E,0EAA0E,CAC7E;IACH,KAAK,EAAE,CAAC;SACL,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;QACxE,sEAAsE;QACtE,6DAA6D,CAChE;CACK,CAAC;AAEX,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,SAAS,EAAE,8CAA8C,CAAC;SAChE,QAAQ,CAAC,wDAAwD,CAAC;IACrE,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,0EAA0E;QACxE,0EAA0E;QAC1E,uCAAuC,CAC1C;CACK,CAAC"}

package/dist/mcp/tools.d.ts

@@ -17,56 +17,19 @@ import { z } from "zod";
 import type { RouteSkip, TaskType, WorkspaceRun } from "../types.js";
 import type { RuntimeHolder, ConfigHotReloader } from "./config-hot-reload.js";
 import { type JobStatus } from "../jobs.js";
-declare const dispatchInputShape: {
-    readonly prompt: z.ZodString;
-    readonly mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
-        single: "single";
-        fanout: "fanout";
-    }>>>;
-    readonly files: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    readonly workingDir: z.ZodOptional<z.ZodString>;
-    readonly workspacePolicy: z.ZodOptional<z.ZodEnum<{
-        shared: "shared";
-        shared_locked: "shared_locked";
-        git_worktree: "git_worktree";
-        copy: "copy";
-    }>>;
-    readonly hints: z.ZodOptional<z.ZodObject<{
-        model: z.ZodOptional<z.ZodString>;
-        taskType: z.ZodOptional<z.ZodEnum<{
-            execute: "execute";
-            plan: "plan";
-            review: "review";
-            local: "local";
-        }>>;
-        preferLargeContext: z.ZodOptional<z.ZodBoolean>;
-        safetyProfile: z.ZodOptional<z.ZodEnum<{
-            read_only: "read_only";
-            workspace_edit: "workspace_edit";
-            full_auto: "full_auto";
-        }>>;
-        workspacePolicy: z.ZodOptional<z.ZodEnum<{
-            shared: "shared";
-            shared_locked: "shared_locked";
-            git_worktree: "git_worktree";
-            copy: "copy";
-        }>>;
-        routePolicy: z.ZodOptional<z.ZodEnum<{
-            standard: "standard";
-            local_only: "local_only";
-            approval_required: "approval_required";
-            blocked: "blocked";
-        }>>;
-        timeoutMs: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strip>>;
-    readonly models: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    readonly service: z.ZodOptional<z.ZodString>;
-    readonly graceSeconds: z.ZodOptional<z.ZodNumber>;
-};
-declare const jobStatusInputShape: {
-    readonly jobId: z.ZodOptional<z.ZodString>;
-};
-export declare const TOOL_NAMES: readonly ["dispatch", "job_status", "usage"];
+import { dispatchInputShape, jobStatusInputShape } from "./tool-schemas.js";
+/**
+ * Exactly the shape jobs.ts:679 generates: `job-${Date.now()}-${8 hex}`.
+ *
+ * The schema was a bare z.string() and getAsyncJob does
+ * `path.join(jobsRoot(), jobId)` with no validation, so a caller could read
+ * manifest.json / status.json from anywhere on disk by passing `../..`
+ * segments. Constrained to three filenames, but an MCP server's threat model
+ * is "the calling agent may be steered by injected content", not "the caller
+ * is trustworthy" — validating the format is a one-liner and removes the
+ * question entirely.
+ */
+export declare const TOOL_NAMES: readonly ["dispatch", "job_status", "cancel_job", "retry_job", "workspace", "usage"];
 export interface RouteResponse {
     success: boolean;
     output: string;
@@ -160,6 +123,19 @@ export interface ToolExtra {
     sendNotification?: (notification: ServerNotification) => Promise<void>;
 }
 export declare function handleDispatch(deps: ToolDeps, input: z.infer<z.ZodObject<typeof dispatchInputShape>>, extra?: ToolExtra): Promise<unknown>;
+export declare function handleCancelJob(args: {
+    jobId: string;
+    reason?: string | undefined;
+}): Promise<import("../jobs.js").CancelOutcome>;
+export declare function handleRetryJob(deps: ToolDeps, args: {
+    jobId: string;
+    service?: string | undefined;
+}): Promise<import("../jobs.js").RetryOutcome>;
+export declare function handleWorkspace(args: {
+    jobId: string;
+    action: "diff" | "apply" | "discard";
+    force?: boolean | undefined;
+}): Promise<unknown>;
 export declare function handleJobStatus(input: z.infer<z.ZodObject<typeof jobStatusInputShape>>): Promise<unknown>;
 export declare function registerTools(server: McpServer, deps: ToolDeps): void;
 export type InvokeResult = {
@@ -167,5 +143,4 @@ export type InvokeResult = {
     data: unknown;
 };
 export declare function invokeTool(name: string, args: unknown, deps: ToolDeps): Promise<InvokeResult>;
-export {};
 //# sourceMappingURL=tools.d.ts.map

package/dist/mcp/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAkB,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAKV,SAAS,EACT,QAAQ,EAER,YAAY,EACb,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,EAAoD,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAmF9F,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2Dd,CAAC;AAEX,QAAA,MAAM,mBAAmB;;CASf,CAAC;AAEX,eAAO,MAAM,UAAU,8CAA+C,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,EAAE,QAAQ,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf;;;;;;;WAOG;QACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,MAAM,gBAAgB,GACxB,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAAG,aAAa,CAAC,GACpE;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,KAAK,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,uEAAuE;IACvE,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtE,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AA6XD,wBAAsB,cAAc,CAClC,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,kBAAkB,CAAC,CAAC,EACtD,KAAK,CAAC,EAAE,SAAS,GAChB,OAAO,CAAC,OAAO,CAAC,CAYlB;AAKD,wBAAsB,eAAe,CACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,mBAAmB,CAAC,CAAC,GACtD,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAgFD,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CA+DrE;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3D,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,YAAY,CAAC,CAcvB"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAkB,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAKV,SAAS,EACT,QAAQ,EAER,YAAY,EACb,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAKpB,OAAO,EAKL,kBAAkB,EAElB,mBAAmB,EAOpB,MAAM,mBAAmB,CAAC;AAW3B;;;;;;;;;;GAUG;AAGH,eAAO,MAAM,UAAU,sFAAuF,CAAC;AAE/G,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,EAAE,QAAQ,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf;;;;;;;WAOG;QACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,MAAM,gBAAgB,GACxB,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAAG,aAAa,CAAC,GACpE;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,KAAK,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,uEAAuE;IACvE,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtE,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAgaD,wBAAsB,cAAc,CAClC,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,kBAAkB,CAAC,CAAC,EACtD,KAAK,CAAC,EAAE,SAAS,GAChB,OAAO,CAAC,OAAO,CAAC,CAYlB;AAKD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,+CAEzF;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,8CAItD;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACrC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7B,oBAEA;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,mBAAmB,CAAC,CAAC,GACtD,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAoED,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAuHrE;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3D,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,YAAY,CAAC,CA0BvB"}