palmier 0.6.8 → 0.7.0

package/palmier-server/spec.md

@@ -105,10 +105,10 @@ The **RPC method is derived from the NATS subject**, not the message body. The h
 
 | Method | Params | Description |
 |---|---|---|
-| `task.list` | *(none)* | List all tasks with frontmatter, body, created_at, and current status. Returns `agents` array of detected CLIs, `host_platform`, and `version`. |
-| `task.get` | `id` | Get a single task with frontmatter, body, and current status. |
-| `task.create` | `user_prompt`, `agent`, `triggers?`, `triggers_enabled?`, `requires_confirmation?`, `yolo_mode?`, `foreground_mode?`, `command?` | Create a new task with auto-generated plan and name (130s timeout), install system timers if triggers present. If `command` is set, creates a command-triggered task (plan generation is skipped). |
-| `task.update` | `id`, `user_prompt?`, `agent?`, `triggers?`, `triggers_enabled?`, `requires_confirmation?`, `yolo_mode?`, `foreground_mode?`, `command?` | Update an existing task. Regenerates plan if `user_prompt` or `agent` changed, or if no plan exists yet (130s timeout). If `command` is set, plan is cleared. Reinstall timers as needed |
+| `task.list` | *(none)* | List all tasks with frontmatter, created_at, and current status. Returns `agents` array of detected CLIs, `host_platform`, and `version`. |
+| `task.get` | `id` | Get a single task with frontmatter and current status. |
+| `task.create` | `user_prompt`, `agent`, `triggers?`, `triggers_enabled?`, `requires_confirmation?`, `yolo_mode?`, `foreground_mode?`, `command?` | Create a new task with auto-generated name (30s timeout for prompts > 50 chars), install system timers if triggers present. |
+| `task.update` | `id`, `user_prompt?`, `agent?`, `triggers?`, `triggers_enabled?`, `requires_confirmation?`, `yolo_mode?`, `foreground_mode?`, `command?` | Update an existing task. Regenerates name if `user_prompt` or `agent` changed. Reinstall timers as needed. |
 | `task.delete` | `id` | Delete a task and its systemd timers |
 | `task.run` | `id` | Start a task via system scheduler (`systemctl --user start` / `schtasks /run`) |
 | `task.abort` | `id` | Stop a running task via system scheduler (`systemctl --user stop` / `schtasks /end`) |
@@ -150,7 +150,7 @@ All tasks are stored locally on the Host machine under a `tasks/` directory rela
 history.jsonl              # Project-level run history index (append-only JSONL: { task_id, run_id })
 tasks/
 └── <task-id>/
-    ├── TASK.md                    # Current task definition (frontmatter + body)
+    ├── TASK.md                    # Current task definition (YAML frontmatter)
     ├── status.json                # Latest execution status (running_state, time_stamp, pid)
     └── <timestamp>/              # Run directory (one per run, isolated per agent session)
         ├── TASKRUN.md            # Conversational thread (frontmatter + message entries)
@@ -209,12 +209,13 @@ triggers:
 triggers_enabled: true
 requires_confirmation: true
 ---
-[Detailed execution plan generated by the non-interactive generation step]
 ```
 
+The `name` field is auto-generated by spawning the configured agent CLI with a short prompt (for prompts > 50 chars). For shorter prompts, the `user_prompt` is used directly as the name.
+
 The `agent` field stores the agent name (e.g., `"claude"`, `"codex"`). The corresponding `AgentTool` implementation is responsible for constructing the full command and arguments at execution time.
 
-The optional `command` field stores a shell command for command-triggered tasks. When set, the task runs in command-triggered mode: the command is spawned with `shell: true`, and each line of its stdout triggers a separate agent invocation with `user_prompt + "\n\nProcess this input:\n" + line`. Plan generation is skipped for command-triggered tasks.
+The optional `command` field stores a shell command for command-triggered tasks. When set, the task runs in command-triggered mode: the command is spawned with `shell: true`, and each line of its stdout triggers a separate agent invocation with `user_prompt + "\n\nProcess this input:\n" + line`.
 
 #### Trigger Lifecycle
 
@@ -263,7 +264,7 @@ The PWA connects to **one host at a time**. A host menu (hamburger drawer) lets
 
 3. PWA sends a `task.list` request to `host.<host_id>.rpc.task.list` using NATS request-reply, including the `clientToken` in the payload.
 
-4. If the host responds, it returns `{ tasks: [...] }` — an array of **flat task objects** (frontmatter fields spread to the top level, plus `body`) and displays the task list. If the request fails with NATS 503 ("no responders"), the PWA shows an empty task list — this is not treated as an error.
+4. If the host responds, it returns `{ tasks: [...] }` — an array of **flat task objects** (frontmatter fields spread to the top level) and displays the task list. If the request fails with NATS 503 ("no responders"), the PWA shows an empty task list — this is not treated as an error.
 
 5. PWA registers the service worker and subscribes the browser for Web Push notifications (via `pushManager.subscribe` with the server's VAPID public key). The push subscription is sent to `POST /api/push/subscribe` with the `hostId` so the server can relay notifications to the device.
 
@@ -275,13 +276,13 @@ The PWA connects to **one host at a time**. A host menu (hamburger drawer) lets
 
 2. User enters a prompt, selects an agent, configures triggers (UI translates human-readable times to cron formats) and confirmation settings, and clicks "Create" (or "Update" for existing tasks).
 
-3. PWA sends `task.create` (or `task.update`) via NATS request-reply to Host (130s timeout). The host generates the execution plan and task name by running the configured agent CLI in non-interactive mode (e.g., `claude -p "Generate execution plan for: [prompt]"`), then creates the task with the generated plan as its body. The PWA renders the plan markdown as rich formatted text (headings, tables, lists, code blocks) using `react-markdown` with `remark-gfm` for GFM support.
+3. PWA sends `task.create` (or `task.update`) via NATS request-reply to Host (45s timeout). For prompts > 50 chars, the host generates a concise task name by running the configured agent CLI in non-interactive mode (e.g., `claude -p "Generate a concise 3-6 word name for this task..."`). For shorter prompts, the prompt is used directly as the name.
 
-4. For updates: if the user changes the `user_prompt` or `agent`, the plan is regenerated. If neither changed, the existing plan is preserved. Existing tasks with a plan show a clickable "Execution Plan" link to view the plan; this link disappears when the user edits the prompt or changes the agent.
+4. For updates: if the user changes the `user_prompt` or `agent`, the name is regenerated. If neither changed, the existing name is preserved. Existing tasks with granted permissions show a clickable "Granted Permissions" link to view them.
 
 5. PWA sends `task.create` (or `task.update` with `id`) with the task fields as the message body. The `id` field is **not sent on create** — the host generates a UUID. The `triggers` field defaults to `[]` if omitted or undefined.
 
-6. Host creates/updates the `tasks/<task-id>/TASK.md` file and returns the **full flat task object** (all frontmatter fields plus `body` at the top level). The PWA uses this response directly to update the UI.
+6. Host creates/updates the `tasks/<task-id>/TASK.md` file and returns the **full flat task object** (all frontmatter fields at the top level). The PWA uses this response directly to update the UI.
 
 7. **OS Integration:** Host translates triggers into a systemd user timer (`~/.config/systemd/user/palmier-task-<task-id>.timer` and `.service`). The `.service` runs `palmier run <task-id>`, which executes the task as a background process. Host runs `systemctl --user daemon-reload` and enables the timer.
 
@@ -328,7 +329,7 @@ When `palmier run <task-id>` executes (triggered by a systemd timer, `systemctl
 
    * The spawned process inherits the default physical GUI session environment (`DISPLAY=:0`, `XDG_RUNTIME_DIR=/run/user/<uid>`) so that commands requiring a graphical display (e.g., headed browsers) run within the user's desktop session. `PALMIER_HTTP_PORT` is also set so agents can call the serve daemon's HTTP endpoints.
 
-   * The agent implementation is responsible for constructing the appropriate arguments (e.g., `--allowedTools` flags for Claude based on the task's permissions). The task plan (body from `TASK.md` or `user_prompt`) is included in the arguments by the agent.
+   * The agent implementation is responsible for constructing the appropriate arguments (e.g., `--allowedTools` flags for Claude based on the task's permissions). The task's `user_prompt` is included in the arguments by the agent.
 
 3. **Completion:**
 

package/src/agents/agent.ts

@@ -31,8 +31,8 @@ export interface CommandLine {
  * Abstracts how plans are generated and tasks are executed across different AI agents.
  */
 export interface AgentTool {
-  /** Return the command and args used to generate a plan from a prompt. */
-  getPlanGenerationCommandLine(prompt: string): CommandLine;
+  /** Return the command and args for a short, non-interactive prompt (e.g. generating a task name). */
+  getPromptCommandLine(prompt: string): CommandLine;
 
   /** Return the command and args used to run a task. If followupPrompt is provided, use it instead of the task's prompt,
    *  and treat it as a continuation of the original run (reuse the same session, etc).

package/src/agents/aider.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class Aider implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "aider",
-      args: ["--message", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "aider", args: ["--message", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/claude.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class ClaudeAgent implements AgentTool {
   supportsPermissions = true;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "claude",
-      args: ["-p", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "claude", args: ["-p", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/cline.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class Cline implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "cline ",
-      args: ["--yolo", "-p", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "cline ", args: ["--yolo", "-p", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/codex.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class CodexAgent implements AgentTool {
   supportsPermissions = true;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "codex",
-      args: ["exec", "--skip-git-repo-check", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "codex", args: ["exec", "--skip-git-repo-check", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/copilot.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class CopilotAgent implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "copilot",
-      args: ["-p", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "copilot", args: ["-p", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/cursor.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class Cursor implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "cursor",
-      args: ["-p", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "cursor", args: ["-p", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/deepagents.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class DeepAgents implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "deepagents",
-      args: ["--non-interactive", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "deepagents", args: ["--non-interactive", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/droid.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class DroidAgent implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "droid",
-      args: ["exec", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "droid", args: ["exec", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/gemini.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class GeminiAgent implements AgentTool {
   supportsPermissions = true;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "gemini",
-      args: ["--prompt", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "gemini", args: ["--prompt", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/goose.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class GooseAgent implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "goose",
-      args: ["run", "--text", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "goose", args: ["run", "--text", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/hermes.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class Hermes implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "hermes",
-      args: ["chat", "-q", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "hermes", args: ["chat", "-q", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/kimi.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class KimiAgent implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "kimi",
-      args: ["-p", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "kimi", args: ["-p", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/kiro.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class Kiro implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "kiro-cli",
-      args: ["--no-interactive", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "kiro-cli", args: ["--no-interactive", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/openclaw.ts

@@ -5,11 +5,8 @@ import { getAgentInstructions } from "./shared-prompt.js";
 
 export class OpenClawAgent implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "openclaw",
-      args: ["agent", "--local", "--agent", "main", "--message", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "openclaw", args: ["agent", "--local", "--agent", "main", "--message", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/opencode.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class OpenCodeAgent implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "opencode",
-      args: ["run", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "opencode", args: ["run", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/qoder.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class Qoder implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "qodercli",
-      args: ["-p", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "qodercli", args: ["-p", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/qwen.ts

@@ -6,11 +6,8 @@ import { SHELL } from "../platform/index.js";
 
 export class QwenAgent implements AgentTool {
   supportsPermissions = false;
-  getPlanGenerationCommandLine(prompt: string): CommandLine {
-    return {
-      command: "qwen",
-      args: ["-p", prompt],
-    };
+  getPromptCommandLine(prompt: string): CommandLine {
+    return { command: "qwen", args: ["-p", prompt] };
   }
 
   getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine {

package/src/agents/shared-prompt.ts

@@ -17,7 +17,7 @@ const AGENT_INSTRUCTIONS_TEMPLATE = fs.readFileSync(
  */
 export function getAgentInstructions(task: ParsedTask, skipPermissions?: boolean): string {
   const port = loadConfig().httpPort ?? 9966;
-  const taskDescription = task.body || task.frontmatter.user_prompt;
+  const taskDescription = task.frontmatter.user_prompt;
   let instructions = AGENT_INSTRUCTIONS_TEMPLATE
     .replace(/\{\{ENDPOINT_DOCS\}\}/g, generateEndpointDocs(port, task.frontmatter.id))
     .replace(/\{\{TASK_DESCRIPTION\}\}/g, taskDescription);

package/src/commands/run.ts

@@ -272,7 +272,7 @@ export async function runCommand(taskId: string): Promise<void> {
       await appendAndNotify(ctx, {
         role: "user",
         time: Date.now(),
-        content: task.body || task.frontmatter.user_prompt,
+        content: task.frontmatter.user_prompt,
       });
 
       const result = await invokeAgentWithRetries(ctx, task);
@@ -362,7 +362,6 @@ async function runCommandTriggeredMode(
     const perLinePrompt = `${ctx.task.frontmatter.user_prompt}\n\nProcess this input:\n${line}`;
     const perLineTask: ParsedTask = {
       frontmatter: { ...ctx.task.frontmatter, user_prompt: perLinePrompt },
-      body: "",
     };
 
     const result = await invokeAgentWithRetries(ctx, perLineTask);

package/src/commands/serve.ts

@@ -12,7 +12,8 @@ import { detectAgents } from "../agents/agent.js";
 import { saveConfig } from "../config.js";
 import type { HostConfig } from "../types.js";
 import { CONFIG_DIR } from "../config.js";
-import type { NatsConnection } from "nats";
+import { StringCodec, type NatsConnection } from "nats";
+import { addNotification } from "../notification-store.js";
 
 const POLL_INTERVAL_MS = 30_000;
 const DAEMON_PID_FILE = path.join(CONFIG_DIR, "daemon.pid");
@@ -130,6 +131,20 @@ export async function serveCommand(): Promise<void> {
   // Start NATS transport (loops forever, fire-and-forget)
   if (nc) {
     startNatsTransport(config, handleRpc, nc);
+
+    // Subscribe to device notifications from Android
+    const sc = StringCodec();
+    const notifSub = nc.subscribe(`host.${config.hostId}.device.notifications`);
+    (async () => {
+      for await (const msg of notifSub) {
+        try {
+          const data = JSON.parse(sc.decode(msg.data));
+          addNotification({ ...data, receivedAt: Date.now() });
+        } catch (err) {
+          console.error("[nats] Failed to parse device notification:", err);
+        }
+      }
+    })();
   }
 
   // Start HTTP transport (loops forever)

package/src/mcp-handler.ts

@@ -1,5 +1,5 @@
 import { randomUUID } from "crypto";
-import { agentTools, agentToolMap, ToolError, type ToolContext } from "./mcp-tools.js";
+import { agentTools, agentToolMap, agentResources, agentResourceMap, ToolError, type ToolContext } from "./mcp-tools.js";
 
 interface JsonRpcRequest {
   jsonrpc: string;
@@ -11,6 +11,15 @@ interface JsonRpcRequest {
 export interface McpResponse {
   body: object;
   sessionId?: string;
+  /** If true, the HTTP transport should keep the response open as an SSE stream for server-initiated notifications. */
+  stream?: boolean;
+}
+
+// Resource subscriptions: sessionId → Set of resource URIs
+const resourceSubscriptions = new Map<string, Set<string>>();
+
+export function getResourceSubscriptions(): Map<string, Set<string>> {
+  return resourceSubscriptions;
 }
 
 // Session-to-agent name map with 24h TTL
@@ -30,7 +39,10 @@ export function getAgentName(sessionId: string): string | undefined {
 function pruneExpiredSessions(): void {
   const now = Date.now();
   for (const [id, entry] of sessionAgents) {
-    if (now > entry.expiresAt) sessionAgents.delete(id);
+    if (now > entry.expiresAt) {
+      sessionAgents.delete(id);
+      resourceSubscriptions.delete(id);
+    }
   }
 }
 
@@ -78,7 +90,7 @@ export async function handleMcpRequest(body: string, sessionId: string | undefin
       return {
         body: rpcResult(id, {
           protocolVersion: "2025-03-26",
-          capabilities: { tools: {} },
+          capabilities: { tools: {}, resources: { subscribe: true } },
           serverInfo: { name: "palmier", version: "1.0.0" },
         }),
         sessionId: newSessionId,
@@ -126,6 +138,59 @@ export async function handleMcpRequest(body: string, sessionId: string | undefin
       }
     }
 
+    case "resources/list": {
+      return {
+        body: rpcResult(id, {
+          resources: agentResources.map((r) => ({
+            uri: r.uri,
+            name: r.name,
+            description: r.description[0],
+            mimeType: r.mimeType,
+          })),
+        }),
+      };
+    }
+
+    case "resources/read": {
+      const uri = req.params?.uri as string;
+      const resource = agentResourceMap.get(uri);
+      if (!resource) {
+        return { body: rpcError(id, -32602, `Unknown resource: ${uri}`) };
+      }
+      return {
+        body: rpcResult(id, {
+          contents: [{
+            uri: resource.uri,
+            mimeType: resource.mimeType,
+            text: JSON.stringify(resource.read()),
+          }],
+        }),
+      };
+    }
+
+    case "resources/subscribe": {
+      const uri = req.params?.uri as string;
+      if (!agentResourceMap.has(uri)) {
+        return { body: rpcError(id, -32602, `Unknown resource: ${uri}`) };
+      }
+      if (!sessionId) {
+        return { body: rpcError(id, -32600, "Session required for subscriptions") };
+      }
+      if (!resourceSubscriptions.has(sessionId)) {
+        resourceSubscriptions.set(sessionId, new Set());
+      }
+      resourceSubscriptions.get(sessionId)!.add(uri);
+      return { body: rpcResult(id, {}), stream: true };
+    }
+
+    case "resources/unsubscribe": {
+      const uri = req.params?.uri as string;
+      if (sessionId) {
+        resourceSubscriptions.get(sessionId)?.delete(uri);
+      }
+      return { body: rpcResult(id, {}) };
+    }
+
     default:
       console.warn(`${logPrefix} Unknown method: ${req.method}`);
       return { body: rpcError(id, -32601, `Method not found: ${req.method}`) };

package/src/mcp-tools.ts

@@ -1,6 +1,7 @@
 import { StringCodec, type NatsConnection } from "nats";
 import { registerPending } from "./pending-requests.js";
 import { getLocationDevice } from "./location-device.js";
+import { getNotifications } from "./notification-store.js";
 import type { HostConfig } from "./types.js";
 
 export class ToolError extends Error {
@@ -205,17 +206,53 @@ const deviceGeolocationTool: ToolDefinition = {
 export const agentTools: ToolDefinition[] = [notifyTool, requestInputTool, requestConfirmationTool, deviceGeolocationTool];
 export const agentToolMap = new Map<string, ToolDefinition>(agentTools.map((t) => [t.name, t]));
 
+// ── MCP Resources ─────────────────────────────────────────────────────
+
+export interface ResourceDefinition {
+  /** MCP resource URI (e.g. "notifications://device"). */
+  uri: string;
+  /** Display name. */
+  name: string;
+  /** First line is the summary (used as REST endpoint header). Remaining lines become bullet points in docs. */
+  description: string[];
+  mimeType: string;
+  /** REST endpoint path (e.g. "/notifications"). Served as GET. */
+  restPath: string;
+  /** Return the current resource content. */
+  read: () => unknown;
+}
+
+const deviceNotificationsResource: ResourceDefinition = {
+  uri: "notifications://device",
+  name: "Device Notifications",
+  description: [
+    "Get recent notifications from the user's Android device.",
+    "Response: JSON array of notification objects with `id`, `packageName`, `appName`, `title`, `text`, `timestamp`.",
+  ],
+  mimeType: "application/json",
+  restPath: "/notifications",
+  read: getNotifications,
+};
+
+export const agentResources: ResourceDefinition[] = [deviceNotificationsResource];
+export const agentResourceMap = new Map<string, ResourceDefinition>(agentResources.map((r) => [r.uri, r]));
+
 /**
  * Generate the HTTP Endpoints markdown section for agent-instructions.md from the tool registry.
  */
-export function generateEndpointDocs(port: number, taskId: string): string {
+export function generateEndpointDocs(
+  port: number,
+  taskId: string,
+  tools: ToolDefinition[] = agentTools,
+  resources: ResourceDefinition[] = agentResources,
+): string {
   const baseUrl = `http://localhost:${port}`;
   const lines: string[] = [
     `The following HTTP endpoints are available during task execution. Use curl to call them.`,
     "",
   ];
 
-  for (const tool of agentTools) {
+  for (const tool of tools) {
     const schema = tool.inputSchema as { properties?: Record<string, { type?: string; description?: string; items?: { type?: string } }>; required?: string[] };
     const props = schema.properties ?? {};
     const required = new Set(schema.required ?? []);
@@ -249,5 +286,14 @@ export function generateEndpointDocs(port: number, taskId: string): string {
     lines.push("");
   }
 
+  for (const resource of resources) {
+    const [header, ...details] = resource.description;
+    lines.push(`**\`GET ${baseUrl}${resource.restPath}\`** — ${header}`);
+    for (const detail of details) {
+      lines.push(`- ${detail}`);
+    }
+    lines.push("");
+  }
+
   return lines.join("\n").trimEnd();
 }

package/src/notification-store.ts

@@ -0,0 +1,30 @@
+export interface DeviceNotification {
+  id: string;
+  packageName: string;
+  appName: string;
+  title: string;
+  text: string;
+  timestamp: number;
+  receivedAt: number;
+}
+
+const MAX_NOTIFICATIONS = 50;
+const notifications: DeviceNotification[] = [];
+const listeners = new Set<() => void>();
+
+export function addNotification(n: DeviceNotification): void {
+  notifications.push(n);
+  if (notifications.length > MAX_NOTIFICATIONS) {
+    notifications.shift();
+  }
+  for (const cb of listeners) cb();
+}
+
+export function getNotifications(): DeviceNotification[] {
+  return [...notifications];
+}
+
+export function onNotificationsChanged(cb: () => void): () => void {
+  listeners.add(cb);
+  return () => { listeners.delete(cb); };
+}