jarvis-hq 0.0.4 → 0.0.6

package/README.md

@@ -368,7 +368,7 @@ Sessions are the core abstraction. A session is created when a `/chat` POST is r
 
 Jarvis detects which harnesses are available at startup by checking for the `claude` CLI, the `@opencode-ai/sdk` package, and the `codex` CLI. It reports the available agents at `/agents`. A bot's `model` and `permissionMode` are applied to whichever harness runs its threads.
 
-**Claude Code** (`claude-code`): Uses the `@anthropic-ai/claude-agent-sdk` `query()` function. Runs the `claude-opus-4-6` model in `default` permission mode. Supports `canUseTool` for per-tool permission prompts. Session transcripts are stored at `~/.claude/projects/<cwd>/<session-id>.jsonl`.
+**Claude Code** (`claude-code`): Uses the `@anthropic-ai/claude-agent-sdk` `query()` function. Runs the `claude-opus-5[1m]` model (Opus 5 with the 1M-token context window) in `default` permission mode. Supports `canUseTool` for per-tool permission prompts. Session transcripts are stored at `~/.claude/projects/<cwd>/<session-id>.jsonl`.
 
 **Opencode** (`opencode`): Uses the `@opencode-ai/sdk`. Jarvis spawns an Opencode server process at startup (or connects to one already running on port 4096). Per-directory clients are maintained so sessions can be scoped to different repos simultaneously. Events are received via a persistent Opencode event stream (`client.event.subscribe()`). If the stream fails, it reconnects automatically after 2 seconds.
 

package/dist/client-html.js

@@ -72,6 +72,16 @@ exports.html = `<!DOCTYPE html>
   .bar-title { flex: 1; min-width: 0; }
   .bar-title h2 { font-size: 17px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
   .bar-title .sub { color: var(--muted); font-size: 12.5px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+  /* Context meter: how full the model's window is, in the thread's own header. */
+  .ctx { display: flex; align-items: center; gap: 6px; margin-top: 2px; font-size: 11px; color: var(--muted); }
+  .ctx-model { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; min-width: 0; }
+  .ctx-dots { display: flex; gap: 2px; flex: none; }
+  .ctx-dots i { width: 5px; height: 5px; border-radius: 50%; background: var(--border); }
+  .ctx-dots i.on { background: var(--muted); }
+  .ctx-num { flex: none; font-variant-numeric: tabular-nums; }
+  /* Past three quarters full the meter stops being background detail. */
+  .ctx.full .ctx-dots i.on { background: var(--danger); }
+  .ctx.full .ctx-num { color: var(--danger); }
 
   .back {
     display: inline-flex; align-items: center; gap: 5px; flex: none;
@@ -357,6 +367,20 @@ exports.html = `<!DOCTYPE html>
     color: var(--muted); white-space: pre-wrap; overflow-wrap: anywhere; max-height: 150px; overflow: auto;
   }
   .perm .acts { display: flex; gap: 8px; }
+  .ask-questions { display: flex; flex-direction: column; gap: 16px; margin-bottom: 14px; }
+  .ask-q { display: flex; flex-direction: column; gap: 8px; }
+  .ask-q-text { font-size: 13.5px; font-weight: 500; }
+  .ask-opts { display: flex; flex-direction: column; gap: 6px; }
+  .ask-opt-btn {
+    text-align: left; padding: 7px 12px; border-radius: 8px; font-size: 13px;
+    background: var(--surface-2); border: 1px solid var(--border); color: var(--text);
+    cursor: pointer; box-shadow: none;
+  }
+  .ask-opt-btn:hover { border-color: var(--accent); }
+  .ask-opt-btn.selected { background: color-mix(in srgb, var(--accent) 12%, var(--surface)); border-color: var(--accent); color: var(--text); }
+  .ask-opt-desc { font-size: 11.5px; color: var(--muted); margin-top: 1px; padding-left: 2px; }
+  .ask-other { width: 100%; padding: 7px 12px; border-radius: 8px; font-size: 13px; border: 1px solid var(--border); background: var(--surface-2); color: var(--text); outline: none; }
+  .ask-other:focus { border-color: var(--accent); }
 
   /* --- Composer --- */
   .composer { border-top: 1px solid var(--border); background: var(--bg); }
@@ -477,6 +501,11 @@ exports.html = `<!DOCTYPE html>
     box-shadow: var(--shadow-md); animation: rise .18s ease;
   }
   @keyframes rise { from { opacity: 0; transform: translate(-50%, 8px); } }
+  .toast-action {
+    margin-left: 10px; padding: 2px 10px; border-radius: 999px;
+    background: var(--bg); color: var(--text); border: none;
+    font-size: 13px; font-weight: 600; cursor: pointer;
+  }
 
   @media (max-width: 640px) {
     .wrap { padding: 0 16px; }
@@ -560,6 +589,11 @@ exports.html = `<!DOCTYPE html>
     <div class="bar-title">
       <h2 id="thread-title"></h2>
       <div class="sub" id="thread-sub"></div>
+      <div class="ctx" id="thread-ctx" hidden>
+        <span class="ctx-model" id="ctx-model"></span>
+        <span class="ctx-dots" id="ctx-dots"></span>
+        <span class="ctx-num" id="ctx-num"></span>
+      </div>
     </div>
   </div></div>
   <div class="messages" id="messages"><div class="wrap narrow" id="messages-inner"></div></div>
@@ -1279,6 +1313,39 @@ exports.html = `<!DOCTYPE html>
     load(startPath);
   }
 
+  // --- Context meter ---
+  // What the model is carrying into its next turn, against what it can hold.
+  // Ten dots read at a glance on a phone; the exact numbers sit beside them and
+  // the full sentence is in the tooltip.
+
+  function fmtTokens(n) {
+    if (!n) return "0";
+    return n < 1000 ? String(n) : Math.round(n / 1000) + "k";
+  }
+
+  function renderContext(ctx) {
+    var box = $("thread-ctx");
+    if (!ctx || !ctx.used || !ctx.window) { box.hidden = true; return; }
+    var pct = Math.min(100, Math.round((ctx.used / ctx.window) * 100));
+    // "/1000k" already says the window is the long one, so the meter drops the
+    // "(1M context)" tail that would otherwise eat the line on a phone. Plain
+    // string work, not a regex: this file is a template literal, and its
+    // backslashes belong to the build, not to the browser.
+    var name = ctx.label || ctx.model || "";
+    var tail = name.indexOf(" (1M");
+    $("ctx-model").textContent = tail === -1 ? name : name.slice(0, tail);
+    $("ctx-num").textContent = fmtTokens(ctx.used) + "/" + fmtTokens(ctx.window) + " (" + pct + "%)";
+    var dots = $("ctx-dots");
+    dots.innerHTML = "";
+    var lit = Math.min(10, Math.max(1, Math.ceil(pct / 10)));
+    for (var i = 0; i < 10; i++) dots.appendChild(el("i", i < lit ? "on" : null));
+    box.className = "ctx" + (pct >= 75 ? " full" : "");
+    box.title = (ctx.label ? ctx.label + " \u2014 " : "")
+      + ctx.used.toLocaleString() + " of " + ctx.window.toLocaleString()
+      + " tokens in context (" + pct + "% used)";
+    box.hidden = false;
+  }
+
   // --- Thread ---
   function openThread(thread) {
     activeThread = thread;
@@ -1286,6 +1353,7 @@ exports.html = `<!DOCTYPE html>
     $("thread-title").textContent = thread.title;
     $("thread-sub").textContent = shortPath(thread.repoPath, 30);
     $("thread-sub").title = thread.repoPath || "";
+    renderContext(thread.context);
     $("to-bot-label").textContent = threadBack === "jarvis" ? "Jarvis" : (activeBot ? activeBot.name : "Back");
     var av = $("thread-avatar");
     av.textContent = activeBot ? (activeBot.emoji || "\\u{1F916}") : "\\u{1F916}";
@@ -1529,7 +1597,7 @@ exports.html = `<!DOCTYPE html>
 
   // Every event type the agent emits on the turn stream.
   var STREAM_EVENTS = ["user_prompt", "assistant", "tool_use", "status", "permission_request", "aborted", "done", "result", "error",
-                       "delegation", "handoff", "project_created"];
+                       "delegation", "handoff", "project_created", "context"];
 
   function attachStream(sid, onEvent) {
     closeStream();
@@ -1563,6 +1631,11 @@ exports.html = `<!DOCTYPE html>
         appendTool(liveBubble, data.tool_name, data.tool_input);
         break;
 
+      case "context":
+        if (activeThread) activeThread.context = data;
+        renderContext(data);
+        break;
+
       case "status":
         if (state === "aborting") break;
         if (data.status === "thinking") setActivity("Thinking\u2026");
@@ -1677,6 +1750,7 @@ exports.html = `<!DOCTYPE html>
   }
 
   function renderPermission(data) {
+    if (data.toolName === "AskUserQuestion") { renderAskUser(data); return; }
     var card = el("div", "perm");
     card.appendChild(el("div", "head", "Allow " + data.toolName + "?"));
     card.appendChild(el("pre", null, JSON.stringify(data.input, null, 2)));
@@ -1702,6 +1776,100 @@ exports.html = `<!DOCTYPE html>
     scrollDown();
   }
 
+  function renderAskUser(data) {
+    var input = data.input || {};
+    var questions = Array.isArray(input.questions) ? input.questions : [];
+    var answers = {}; // question text -> selected label(s)
+
+    var card = el("div", "perm");
+    card.appendChild(el("div", "head", "Questions"));
+
+    var qsDiv = el("div", "ask-questions");
+
+    questions.forEach(function (q, qi) {
+      answers[q.question] = q.multiSelect ? [] : null;
+
+      var qDiv = el("div", "ask-q");
+      qDiv.appendChild(el("div", "ask-q-text", q.question));
+
+      var optsDiv = el("div", "ask-opts");
+
+      (q.options || []).forEach(function (opt) {
+        var row = el("div");
+        var btn = el("button", "ask-opt-btn", opt.label);
+        btn.onclick = function () {
+          if (q.multiSelect) {
+            var arr = answers[q.question];
+            var idx = arr.indexOf(opt.label);
+            if (idx >= 0) { arr.splice(idx, 1); btn.classList.remove("selected"); }
+            else { arr.push(opt.label); btn.classList.add("selected"); }
+          } else {
+            answers[q.question] = opt.label;
+            optsDiv.querySelectorAll(".ask-opt-btn").forEach(function (b) { b.classList.remove("selected"); });
+            btn.classList.add("selected");
+          }
+        };
+        row.appendChild(btn);
+        if (opt.description) row.appendChild(el("div", "ask-opt-desc", opt.description));
+        optsDiv.appendChild(row);
+      });
+
+      var otherInput = el("input");
+      otherInput.type = "text";
+      otherInput.placeholder = "Other\u2026";
+      otherInput.className = "ask-other";
+      otherInput.oninput = function () {
+        var val = otherInput.value.trim();
+        if (q.multiSelect) {
+          // handled on submit
+        } else {
+          if (val) {
+            answers[q.question] = val;
+            optsDiv.querySelectorAll(".ask-opt-btn").forEach(function (b) { b.classList.remove("selected"); });
+          } else if (!answers[q.question] || typeof answers[q.question] === "string") {
+            answers[q.question] = null;
+          }
+        }
+      };
+      optsDiv.appendChild(otherInput);
+      qDiv.appendChild(optsDiv);
+      qsDiv.appendChild(qDiv);
+    });
+
+    card.appendChild(qsDiv);
+
+    var acts = el("div", "acts");
+    var submit = el("button", "btn primary", "Submit");
+    submit.onclick = function () {
+      // Collect "other" text inputs for multi-select questions
+      var qDivs = qsDiv.querySelectorAll(".ask-q");
+      questions.forEach(function (q, qi) {
+        if (q.multiSelect) {
+          var inp = qDivs[qi].querySelector(".ask-other");
+          var val = inp ? inp.value.trim() : "";
+          if (val && answers[q.question].indexOf(val) === -1) answers[q.question].push(val);
+        }
+      });
+      submit.disabled = true;
+      api("/sessions/" + encodeURIComponent(sessionId) + "/permission", {
+        method: "POST",
+        body: { toolUseID: data.toolUseID, answers: answers }
+      }).then(function () {
+        var summary = questions.map(function (q) {
+          var a = answers[q.question];
+          return Array.isArray(a) ? a.join(", ") : (a || "\u2014");
+        }).join(" \u00b7 ");
+        card.replaceWith(el("div", "note", summary));
+        pendingPerms = Math.max(0, pendingPerms - 1);
+        if (!pendingPerms && state === "running") setActivity("Thinking\u2026");
+      }).catch(showError);
+    };
+    acts.appendChild(submit);
+    card.appendChild(acts);
+    $("messages-inner").appendChild(card);
+    scrollDown();
+  }
+
   function finishTurn() {
     closeStream();
     liveBubble = null;
@@ -1870,6 +2038,70 @@ exports.html = `<!DOCTYPE html>
     });
   }
 
+  // IndexedDB helpers — save the raw audio before the API call so a failed
+  // transcription can be retried without re-recording.
+  var _dictDb = null;
+  function openDictationDb() {
+    if (_dictDb) return Promise.resolve(_dictDb);
+    return new Promise(function (resolve, reject) {
+      var req = indexedDB.open("dictation", 1);
+      req.onupgradeneeded = function () { req.result.createObjectStore("pending"); };
+      req.onsuccess = function () { _dictDb = req.result; resolve(_dictDb); };
+      req.onerror = function () { reject(req.error); };
+    });
+  }
+  function savePendingAudio(audio, mimeType) {
+    return openDictationDb().then(function (db) {
+      return new Promise(function (resolve, reject) {
+        var tx = db.transaction("pending", "readwrite");
+        tx.objectStore("pending").put({ audio: audio, mimeType: mimeType }, "clip");
+        tx.oncomplete = resolve;
+        tx.onerror = function () { reject(tx.error); };
+      });
+    }).catch(function () {}); // best-effort
+  }
+  function deletePendingAudio() {
+    return openDictationDb().then(function (db) {
+      return new Promise(function (resolve) {
+        var tx = db.transaction("pending", "readwrite");
+        tx.objectStore("pending").delete("clip");
+        tx.oncomplete = resolve;
+        tx.onerror = resolve;
+      });
+    }).catch(function () {});
+  }
+  function loadPendingAudio() {
+    return openDictationDb().then(function (db) {
+      return new Promise(function (resolve) {
+        var req = db.transaction("pending", "readonly").objectStore("pending").get("clip");
+        req.onsuccess = function () { resolve(req.result || null); };
+        req.onerror = function () { resolve(null); };
+      });
+    }).catch(function () { return null; });
+  }
+
+  function sendDictation(audio, mimeType, btn, textarea) {
+    return api("/dictate", { method: "POST", body: { audio: audio, mimeType: mimeType } })
+      .then(function (d) {
+        deletePendingAudio();
+        insertDictation(textarea, d.text);
+      }).catch(function (err) {
+        toast(err.message || "Dictation failed", {
+          label: "Retry",
+          fn: function () {
+            loadPendingAudio().then(function (saved) {
+              if (!saved) { toast("No saved clip to retry"); return; }
+              btn.classList.add("busy");
+              sendDictation(saved.audio, saved.mimeType, btn, textarea)
+                .then(function () { btn.classList.remove("busy"); });
+            });
+          },
+        });
+      }).then(function () {
+        btn.classList.remove("busy");
+      });
+  }
+
   function stopRecording() {
     var rec = recording;
     if (!rec) return;
@@ -1887,6 +2119,7 @@ exports.html = `<!DOCTYPE html>
     if (!window.isSecureContext) {
       toast("Dictation needs https or localhost"); return;
     }
+    deletePendingAudio();
     navigator.mediaDevices.getUserMedia({ audio: true }).then(function (stream) {
       var mime = recordingMime();
       var recorder = mime ? new MediaRecorder(stream, { mimeType: mime }) : new MediaRecorder(stream);
@@ -1897,12 +2130,11 @@ exports.html = `<!DOCTYPE html>
         var blob = new Blob(chunks, { type: type });
         if (blob.size < 1000) { btn.classList.remove("busy"); return; }   // tapped twice by accident
         blobToBase64(blob).then(function (audio) {
-          return api("/dictate", { method: "POST", body: { audio: audio, mimeType: type } });
-        }).then(function (d) {
-          insertDictation(textarea, d.text);
+          return savePendingAudio(audio, type).then(function () {
+            return sendDictation(audio, type, btn, textarea);
+          });
         }).catch(function (err) {
           toast(err.message || "Dictation failed");
-        }).then(function () {
           btn.classList.remove("busy");
         });
       };
@@ -1923,12 +2155,19 @@ exports.html = `<!DOCTYPE html>
     };
   }
 
-  function toast(text) {
+  function toast(text, action) {
     var old = document.querySelector(".toast");
     if (old) old.remove();
     var t = el("div", "toast", text);
+    if (action) {
+      var btn = document.createElement("button");
+      btn.className = "toast-action";
+      btn.textContent = action.label;
+      btn.onclick = function () { t.remove(); action.fn(); };
+      t.appendChild(btn);
+    }
     document.body.appendChild(t);
-    setTimeout(function () { t.remove(); }, 2400);
+    setTimeout(function () { if (t.parentNode) t.remove(); }, action ? 7000 : 2400);
   }
 
   function copyText(text) {
@@ -2122,7 +2361,7 @@ exports.html = `<!DOCTYPE html>
 
     var model = field("Model", "optional", el("input"));
     model.value = bot ? (bot.model || "") : "";
-    model.placeholder = "claude-sonnet-4-6";
+    model.placeholder = "claude-opus-5[1m]";
 
     var permissionMode = field("Permissions", null, el("select"));
     [["ask-permissions", "Ask before each tool"], ["auto-approve", "Auto-approve tools"], ["plan", "Plan only (no edits)"]]

package/dist/context-window.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contextWindowFor = contextWindowFor;
+exports.tokensInContext = tokensInContext;
+exports.modelLabel = modelLabel;
+exports.contextUsage = contextUsage;
+const MILLION = 1000000;
+/** What Claude Code assumes for any model that does not ask for the long window. */
+const DEFAULT_WINDOW = 200000;
+/** The [1m] suffix is how the SDK is told to budget a 1M window; mirror that rule. */
+function contextWindowFor(model) {
+    return model?.includes("[1m]") ? MILLION : DEFAULT_WINDOW;
+}
+/** Everything the next request resends, from one message's usage block. */
+function tokensInContext(usage) {
+    if (!usage)
+        return 0;
+    const n = (v) => (typeof v === "number" && isFinite(v) && v > 0 ? v : 0);
+    return n(usage.input_tokens)
+        + n(usage.cache_read_input_tokens)
+        + n(usage.cache_creation_input_tokens)
+        + n(usage.output_tokens);
+}
+/**
+ * "claude-opus-5[1m]" -> "Opus 5 (1M context)", "claude-sonnet-4-6" ->
+ * "Sonnet 4.6". Derived rather than looked up, so a model released tomorrow
+ * still reads properly.
+ */
+function modelLabel(model) {
+    if (!model)
+        return "";
+    const long = model.includes("[1m]");
+    const parts = model.replace(/\[1m\]/g, "").replace(/^claude-/, "").split("-").filter(Boolean);
+    const family = parts.shift() ?? "";
+    const name = family.charAt(0).toUpperCase() + family.slice(1);
+    const version = parts.join(".");
+    return `${[name, version].filter(Boolean).join(" ")}${long ? " (1M context)" : ""}`;
+}
+function contextUsage(used, model, window) {
+    return {
+        used,
+        window: window && window > 0 ? window : contextWindowFor(model),
+        model: model ?? "",
+        label: modelLabel(model),
+    };
+}

package/dist/dictation.js

@@ -21,15 +21,17 @@ const OPENAI_URL = "https://api.openai.com/v1/chat/completions";
 const CLEANUP_MODEL = "gpt-4o-mini";
 // Roughly two minutes of opus; anything longer is a mistake, not a message.
 const MAX_AUDIO_BYTES = 8 * 1024 * 1024;
-const CLEANUP_PROMPT = `You are an intent extraction engine for a voice assistant.
-The user will provide a messy, unedited voice transcript containing filler words, pauses, and self-corrections.
+const CLEANUP_PROMPT = `You are a voice transcription cleanup assistant.
+The user will provide a raw voice transcript. Your job is light editing only — preserve their exact words and phrasing as much as possible.
 
 Your task:
-1. Analyze the spoken words to find the user's ultimate intent.
-2. Completely remove filler words ("uh", "um", "like") and resolve self-corrections (e.g., "set a meeting for 5, no, make it 6 PM" becomes "6 PM").
-3. Output ONLY the final, polished instructions. Do not include introductory text, explanations, or quotes.
+1. Remove filler words ("uh", "um", "er", "like") and false starts.
+2. If the user spells out a word (e.g., "t-h-r-e-s-h-o-l-d"), replace the previous misspelled or unclear attempt with the correctly spelled word and drop the spelling itself.
+3. Resolve simple self-corrections (e.g., "delete the file, actually remove the folder" → "remove the folder").
+4. Apply light markdown formatting where it clearly fits: wrap code, file names, variable names, and commands in backticks; use a bullet list if the user enumerates multiple items.
+5. Output ONLY the cleaned transcript. No explanations, no quotes, no commentary.
 
-Keep the user's wording and voice where it is already clear; do not summarize, expand, or answer the request.`;
+Do not paraphrase, summarize, reorder, or interpret — just clean up the words they said.`;
 function dictationConfigured() {
     return {
         deepgram: Boolean(process.env.DEEPGRAM_API_KEY),

package/dist/jarvis-tools.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.JARVIS_TOOL_NAMES = exports.JARVIS_MCP_NAME = void 0;
 exports.buildJarvisTools = buildJarvisTools;
 const claude_agent_sdk_1 = require("@anthropic-ai/claude-agent-sdk");
+const child_process_1 = require("child_process");
+const util_1 = require("util");
 const zod_1 = require("zod");
 const server_common_1 = require("./server-common");
 const bot_store_1 = require("./bot-store");
@@ -67,6 +69,32 @@ function buildJarvisTools(store, workspaceCwd) {
                     return fail(err?.message ?? "Could not update the project");
                 }
             }),
+            (0, claude_agent_sdk_1.tool)("find_repos", "Search the user's GitHub for a repository: their own repos and every organisation they belong to. Use it when the user names a project you do not have and no workspace folder matches, before asking them for a URL — then pass the clone URL to create_project.", {
+                query: zod_1.z.string().optional().describe("Words to match against the repo name and description, e.g. 'relay' or 'expo client'. Omit to list everything."),
+                owner: zod_1.z.string().optional().describe("Restrict to one user or organisation login. Omit to search the user's account and all their orgs."),
+                limit: zod_1.z.number().optional().describe("Maximum repos to return (default 30)"),
+            }, async ({ query, owner, limit }) => {
+                try {
+                    const { repos, searched, warnings } = await findRepos({ query, owner, limit: limit ?? 30 });
+                    const note = warnings.length ? { incomplete_results: warnings, tell_the_user: "Say this to the user; it is something only they can fix." } : {};
+                    if (!repos.length) {
+                        return text(JSON.stringify({
+                            repos: [],
+                            searched_owners: searched,
+                            ...note,
+                            next: `Nothing on GitHub matches ${query ? `"${query}"` : "that"}${owner ? ` under ${owner}` : ""}. Report any incomplete_results above, then ask the user for the repo URL.`,
+                        }, null, 2));
+                    }
+                    return text(JSON.stringify({ repos, searched_owners: searched, ...note }, null, 2));
+                }
+                catch (err) {
+                    if (err instanceof GhSetupError) {
+                        (0, server_common_1.emitEvent)(store, "github_unavailable", { kind: err.kind, message: err.message });
+                        return fail(`GITHUB IS NOT SET UP ON THIS MACHINE. Tell the user exactly this, including the command, and do not ask them for a repo URL until you have:\n\n${err.message}`);
+                    }
+                    return fail(`${err?.message ?? "Could not reach GitHub"}. Tell the user the search failed and why.`);
+                }
+            }),
             (0, claude_agent_sdk_1.tool)("delegate", "Give a project's agent a bounded task and wait for its report, so you can combine it with other things. Blocks until the agent finishes (seconds to many minutes); call it for several projects in parallel when a request spans projects. Not for a request about a single project, however small — that is a handoff, so the user's follow-ups land in the project.", {
                 project: zod_1.z.string().describe("Project name or slug"),
                 task: zod_1.z.string().describe("The task, self-contained: what to do, what to report back, and any constraints such as 'do not merge'"),
@@ -121,7 +149,7 @@ function buildJarvisTools(store, workspaceCwd) {
     });
 }
 /** Tool names as Claude Code sees them, for the allowed-tools list. */
-exports.JARVIS_TOOL_NAMES = ["list_projects", "read_project", "create_project", "update_project", "delegate", "handoff"]
+exports.JARVIS_TOOL_NAMES = ["list_projects", "read_project", "create_project", "update_project", "find_repos", "delegate", "handoff"]
     .map((t) => `mcp__${exports.JARVIS_MCP_NAME}__${t}`);
 function summary(p) {
     return {
@@ -141,3 +169,156 @@ function titleFor(text) {
         return undefined;
     return line.length > 60 ? line.slice(0, 57).replace(/\s+\S*$/, "") + "…" : line;
 }
+// --- GitHub ---
+// Jarvis has no shell, so `gh` is exposed as one read-only tool rather than as
+// a command line: fixed subcommands, arguments passed as an argv array (never
+// through a shell), and only what is needed to turn a name the user said into
+// a repository to clone.
+//
+// gh lives on the machine, not in the conversation, so when it is missing,
+// logged out or short a scope only the user can fix it. Those cases are
+// separated from ordinary failures and carry the exact command to run, which
+// find_repos tells Jarvis to pass on verbatim rather than quietly falling back
+// to "what is the repo URL?".
+const run = (0, util_1.promisify)(child_process_1.execFile);
+/** A problem with the machine's gh install that the user has to fix. */
+class GhSetupError extends Error {
+    constructor(kind, message) {
+        super(message);
+        this.kind = kind;
+    }
+}
+const INSTALL_HINT = process.platform === "darwin"
+    ? "install it with `brew install gh`"
+    : process.platform === "win32"
+        ? "install it with `winget install --id GitHub.cli`"
+        : "install it from https://cli.github.com (on Debian/Ubuntu: `sudo apt install gh`)";
+/**
+ * Confirms gh is installed and logged in before any real call, so a setup
+ * problem is reported once, precisely, instead of as a puzzling empty search.
+ * Successful results are cached; a failure is always re-checked, so the user
+ * can fix it and retry immediately.
+ */
+let authCache;
+async function ghAuth() {
+    if (authCache && Date.now() - authCache.at < 10 * 60 * 1000)
+        return authCache;
+    let out;
+    try {
+        const r = await run("gh", ["auth", "status"], { timeout: 20000 });
+        out = r.stdout + r.stderr;
+    }
+    catch (err) {
+        if (err?.code === "ENOENT") {
+            throw new GhSetupError("missing", `The GitHub CLI (gh) is not installed on the machine running Jarvis, so I cannot search GitHub. To fix it, ${INSTALL_HINT}, then run \`gh auth login\`.`);
+        }
+        const detail = String(err?.stderr || err?.stdout || err?.message || "").trim();
+        if (/not logged|no accounts|gh auth login|authentication/i.test(detail) || typeof err?.code === "number") {
+            throw new GhSetupError("auth", "The GitHub CLI is installed but not logged in, so I cannot search GitHub. To fix it, run `gh auth login` on the machine running Jarvis (or set a GH_TOKEN with `repo` and `read:org` scopes) and ask me again.");
+        }
+        throw new GhSetupError("auth", `Could not check the GitHub CLI's login: ${firstLine(detail) || "unknown error"}. Try \`gh auth status\` on the machine running Jarvis.`);
+    }
+    const login = /account (\S+)/.exec(out)?.[1] ?? "";
+    const scopes = Array.from(out.matchAll(/'([^']+)'/g)).map((m) => m[1]);
+    if (!login) {
+        // gh exited 0 but named no account: a token with no user, or an unexpected format.
+        const me = await ghRaw(["api", "user", "--jq", ".login"]).catch(() => "");
+        if (!me.trim())
+            throw new GhSetupError("auth", "The GitHub CLI is not logged in to an account I can use. Run `gh auth login` on the machine running Jarvis and ask me again.");
+        authCache = { at: Date.now(), login: me.trim(), scopes };
+        return authCache;
+    }
+    authCache = { at: Date.now(), login, scopes };
+    return authCache;
+}
+/** The logins to search: the account itself plus every org it belongs to. */
+let ownersCache;
+async function accountOwners() {
+    if (ownersCache && Date.now() - ownersCache.at < 10 * 60 * 1000)
+        return ownersCache;
+    const { login, scopes } = await ghAuth();
+    const warnings = [];
+    let orgs = [];
+    try {
+        orgs = (await ghRaw(["api", "user/orgs", "--jq", ".[].login"])).split("\n").map((l) => l.trim()).filter(Boolean);
+    }
+    catch (err) {
+        warnings.push(`I could not list your GitHub organisations, so I only searched your personal repositories (${firstLine(err?.message) || "unknown error"}). Try \`gh auth status\` on the machine running Jarvis.`);
+    }
+    // Without the read:org scope the orgs endpoint does not fail — it quietly
+    // returns only public memberships, so a private org's repos look like they
+    // do not exist. Say so whenever the scope is absent.
+    if (scopes.length && !scopes.includes("read:org")) {
+        warnings.push(`The GitHub CLI's token has no \`read:org\` scope, so I can only see organisations you are a public member of${orgs.length ? ` (${orgs.join(", ")})` : ""} — private ones are invisible to me. To fix it, run \`gh auth refresh -s read:org\` on the machine running Jarvis.`);
+    }
+    ownersCache = { at: Date.now(), owners: [login, ...orgs], warnings };
+    return ownersCache;
+}
+async function findRepos({ query, owner, limit }) {
+    const warnings = [];
+    let owners;
+    if (owner) {
+        await ghAuth();
+        owners = [owner];
+    }
+    else {
+        const found = await accountOwners();
+        owners = found.owners;
+        warnings.push(...found.warnings);
+    }
+    const perOwner = Math.max(limit, 100);
+    const searched = [];
+    const lists = await Promise.all(owners.map(async (o) => {
+        try {
+            const out = await ghRaw(["repo", "list", o, "--limit", String(perOwner), "--json", "nameWithOwner,description,url,isPrivate,primaryLanguage,updatedAt"]);
+            searched.push(o);
+            return JSON.parse(out);
+        }
+        catch (err) {
+            // One unreadable org should not sink the whole search, but the user
+            // should know their results are incomplete and why.
+            warnings.push(`Could not list repositories for "${o}": ${firstLine(err?.message) || "unknown error"}.`);
+            return [];
+        }
+    }));
+    const terms = (query ?? "").toLowerCase().split(/\s+/).filter(Boolean);
+    const repos = lists
+        .flat()
+        .map((r) => ({
+        nameWithOwner: r.nameWithOwner,
+        description: r.description ?? "",
+        url: r.url,
+        isPrivate: !!r.isPrivate,
+        language: r.primaryLanguage?.name ?? null,
+        updatedAt: r.updatedAt,
+    }))
+        .filter((r) => terms.every((t) => `${r.nameWithOwner} ${r.description}`.toLowerCase().includes(t)))
+        .sort((a, b) => score(b, terms) - score(a, terms) || b.updatedAt.localeCompare(a.updatedAt))
+        .slice(0, limit);
+    return { repos, searched, warnings };
+}
+/** A hit in the repo name beats one that only matched the description. */
+function score(r, terms) {
+    const name = r.nameWithOwner.split("/")[1]?.toLowerCase() ?? "";
+    return terms.filter((t) => name.includes(t)).length;
+}
+/** One gh call. Setup problems are classified; everything else is the caller's to handle. */
+async function ghRaw(args) {
+    try {
+        const { stdout } = await run("gh", args, { maxBuffer: 8 * 1024 * 1024, timeout: 30000 });
+        return stdout;
+    }
+    catch (err) {
+        if (err?.code === "ENOENT")
+            throw new GhSetupError("missing", `The GitHub CLI (gh) is not installed on the machine running Jarvis. To fix it, ${INSTALL_HINT}, then run \`gh auth login\`.`);
+        const detail = firstLine(String(err?.stderr || err?.message || ""));
+        if (/not logged|gh auth login|bad credentials|401/i.test(detail)) {
+            authCache = undefined;
+            throw new GhSetupError("auth", "The GitHub CLI's login has expired or was revoked. To fix it, run `gh auth login` on the machine running Jarvis and ask me again.");
+        }
+        throw new Error(`gh ${args[0]} ${args[1] ?? ""}`.trim() + ` failed: ${detail || "unknown error"}`);
+    }
+}
+function firstLine(s) {
+    return String(s ?? "").trim().split("\n")[0].trim();
+}