youmd 0.8.28 → 0.9.0

package/dist/lib/orchestrator/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../../src/lib/orchestrator/supervisor.ts"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,EAAE;AACF,4FAA4F;AAC5F,wFAAwF;AACxF,0FAA0F;AAC1F,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,8FAA8F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkC9F,wDAEC;AAmCD,kCAiBC;AAcD,gCASC;AAGD,wCAWC;AAoCD,kCAoFC;AAED,8BAEC;AAGD,0CAUC;AAGD,gCAqBC;AAQD,oEAGC;AAGD,oCAYC;AAGD,oCAWC;AApUD,6DAA+C;AAC/C,uCAAyB;AACzB,2CAA6B;AAC7B,sCAAqD;AA0BrD,mEAAmE;AACtD,QAAA,wBAAwB,GAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAExF,SAAgB,sBAAsB,CAAC,MAAoB;IACzD,OAAO,gCAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAUD,MAAM,aAAa,GAA0D;IAC3E,mCAAmC;IACnC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACpF,mCAAmC;IACnC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACnF,kCAAkC;IAClC,MAAM,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE;CAC3F,CAAC;AAEF,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,iCAAwB,GAAE,EAAE,cAAc,CAAC,CAAC;IAClE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,cAAc,CAAC,CAAC;AACtD,CAAC;AAED,SAAgB,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,uFAAuF;QACvF,yFAAyF;QACzF,OAAQ,MAAoB,CAAC,MAAM,CACjC,CAAC,CAAC,EAAqB,EAAE,CACvB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,QAAQ;YACrB,OAAQ,CAAkB,CAAC,EAAE,KAAK,QAAQ;YAC1C,OAAQ,CAAkB,CAAC,MAAM,KAAK,QAAQ,CACjD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,qFAAqF;IACrF,uFAAuF;IACvF,0FAA0F;IAC1F,sEAAsE;IACtE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC3C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,+CAA+C;AAC/C,SAAgB,UAAU,CAAC,GAAuB;IAChD,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,SAAgB,cAAc,CAAC,UAA0B,WAAW,EAAE;IACpE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;YACpB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO;IACd,0FAA0F;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,KAAK,KAAK,GAAG,IAAI,EAAE,CAAC;AAC7B,CAAC;AAwBD;;;;GAIG;AACH,SAAgB,WAAW,CAAC,KAAuB;IACjD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,GAAG,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,IAAc,CAAC;IACnB,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;QACnF,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,GAAG,GAAG,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/D,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAElD,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CACV,GAAG,EACH,6BAA6B,EAAE,eAAe,OAAO,YAAY,OAAO,IAAI,GAAG,QAAQ,GAAG,aAAa,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAC1J,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC3C,GAAG;YACH,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC;YAC3B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;SAC9B,CAAC,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAChB,0FAA0F;QAC1F,0FAA0F;QAC1F,2FAA2F;QAC3F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,CAAC;gBACH,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAsB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACtB,GAAG,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACvC,WAAW,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oBAAoB,GAAG,KAAM,GAAa,CAAC,OAAO,0CAA0C;SACpG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,EAAE;QACF,OAAO;QACP,OAAO;QACP,GAAG;QACH,IAAI;QACJ,GAAG;QACH,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;QACP,IAAI;KACL,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,WAAW,CAAC,OAAO,CAAC,CAAC;IAErB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,SAAgB,SAAS,CAAC,EAAU;IAClC,OAAO,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,2DAA2D;AAC3D,SAAgB,eAAe,CAAC,EAAU,EAAE,KAAK,GAAG,EAAE;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,SAAgB,UAAU,CAAC,EAAU;IACnC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,kDAAkD;YAClD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,WAAW,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAoB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B;IAC1C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,sGAAsG;AACtG,SAAgB,YAAY,CAAC,GAAa;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;YAClB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,WAAW,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,gGAAgG;AAChG,SAAgB,YAAY,CAAC,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1E,OAAO,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC;QAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/orchestrator/tools.d.ts

@@ -0,0 +1,16 @@
+import { LoopTool, ModelCaller } from "./loop";
+/** Resolve a You.md project name to a directory under known roots, else treat as a path. */
+export declare function resolveProjectDir(project: string | undefined, fallbackCwd: string): string;
+export interface BuildToolsOptions {
+    host?: string;
+    /** Default cwd for spawns when no project/dir is supplied. */
+    cwd?: string;
+}
+/** Build the orchestrator tool set (process supervision over worker harnesses). */
+export declare function buildOrchestratorTools(opts?: BuildToolsOptions): LoopTool[];
+/**
+ * A harness/model-agnostic model caller: try the You.md chat proxy (no key needed), fall back to
+ * the user's OpenRouter key if present. Mirrors the proven onboarding.ts pattern.
+ */
+export declare function makeModelCaller(): ModelCaller;
+//# sourceMappingURL=tools.d.ts.map

package/dist/lib/orchestrator/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/lib/orchestrator/tools.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAe,WAAW,EAAE,MAAM,QAAQ,CAAC;AAiB5D,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAe1F;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA4BD,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,iBAAsB,GAAG,QAAQ,EAAE,CA2G/E;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,WAAW,CA4C7C"}

package/dist/lib/orchestrator/tools.js

@@ -0,0 +1,258 @@
+"use strict";
+// tools.ts — orchestrator tool registry + model caller for the You agent loop.
+//
+// Wires the deterministic supervisor (spawn/list/tail/stop other harnesses) into LoopTools the
+// iterative loop can drive, and provides a harness/model-agnostic model caller that reuses the
+// existing /api/v1/chat proxy (with an OpenRouter fallback), so no new LLM plumbing is needed.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveProjectDir = resolveProjectDir;
+exports.buildOrchestratorTools = buildOrchestratorTools;
+exports.makeModelCaller = makeModelCaller;
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const supervisor_1 = require("./supervisor");
+const config_1 = require("../config");
+const remote_command_1 = require("../remote-command");
+const api_1 = require("../api");
+const SITE = process.env.YOU_APP_URL || process.env.YOUMD_APP_URL || "https://you.md";
+const CHAT_PROXY_URL = `${SITE}/api/v1/chat`;
+const OPENROUTER_URL = "https://openrouter.ai/api/v1/chat/completions";
+const OPENROUTER_MODEL = process.env.YOU_ORCHESTRATOR_MODEL || "anthropic/claude-sonnet-4.6";
+/** Resolve a You.md project name to a directory under known roots, else treat as a path. */
+function resolveProjectDir(project, fallbackCwd) {
+    if (!project)
+        return fallbackCwd;
+    if (path.isAbsolute(project))
+        return project;
+    // Common workspace roots; the daemon/machine layer keeps these in sync.
+    const home = os.homedir();
+    const candidates = [
+        path.join(process.cwd(), project),
+        path.join(home, "Desktop", "CODE_YOU", project),
+        path.join(home, "Desktop", "CODE_2025", project),
+        path.join(home, "Desktop", "CODE_2026", project),
+        path.join(home, project),
+    ];
+    // We do not stat here (supervisor validates); return the first plausible candidate that the
+    // caller can override. The supervisor returns a clear error if it does not exist.
+    return candidates[0];
+}
+/**
+ * Dispatch a whitelisted agent action to a REMOTE machine over the bus and wait (bounded) for
+ * the result. This is how the conductor delegates across machines autonomously inside the loop.
+ * Returns a human-readable string for the loop to reason over.
+ */
+async function runRemoteAgentAction(machine, action, args, timeoutMs = 90000) {
+    if (!(0, config_1.isAuthenticated)()) {
+        return "error: not authenticated — run `you login` to dispatch across machines";
+    }
+    const dispatched = await (0, remote_command_1.dispatchRemoteCommand)({ machine, action, args, sourceAgent: "you orchestrator" });
+    if (!dispatched.ok)
+        return `error dispatching ${action} to ${machine}: ${dispatched.error}`;
+    const result = await (0, remote_command_1.pollForResult)({ requestId: dispatched.data.requestId, timeoutMs });
+    if (!result) {
+        return `dispatched ${action} to ${machine} (request ${dispatched.data.requestId}) — no result within ${Math.round(timeoutMs / 1000)}s; the target may be offline or its daemon not running. Try agent.list later.`;
+    }
+    if (result.ok)
+        return `[${machine}] ${action} ok:\n${result.output || "(no output)"}`;
+    return `[${machine}] ${action} ${result.status}: ${result.error ?? "failed"}\n${result.output || ""}`.trim();
+}
+/** Build the orchestrator tool set (process supervision over worker harnesses). */
+function buildOrchestratorTools(opts = {}) {
+    const host = opts.host || os.hostname();
+    const cwd = opts.cwd || process.cwd();
+    return [
+        {
+            name: "spawn_agent",
+            description: "Launch a worker agent harness on a task in a project (delegate the actual work). Add `machine` to run it on another computer (that host must have YOU_REMOTE_AGENT_HOST=1).",
+            parameters: {
+                harness: "claude | codex | cursor (custom = local only)",
+                goal: "the task prompt for the worker",
+                project: "(optional) You.md project name or absolute path to run in",
+                dir: "(optional, local only) explicit working directory (overrides project)",
+                machine: "(optional) remote machine hostname to run on instead of this host",
+            },
+            run: async (args) => {
+                const harness = String(args.harness || "claude");
+                const goal = String(args.goal || "").trim();
+                if (!goal)
+                    return "error: spawn_agent requires a non-empty goal";
+                if (args.machine) {
+                    return runRemoteAgentAction(String(args.machine), "agent.spawn", {
+                        harness,
+                        goal,
+                        project: args.project ? String(args.project) : undefined,
+                    });
+                }
+                const dir = args.dir
+                    ? String(args.dir)
+                    : resolveProjectDir(args.project ? String(args.project) : undefined, cwd);
+                const res = (0, supervisor_1.spawnWorker)({
+                    harness,
+                    goal,
+                    cwd: dir,
+                    project: args.project ? String(args.project) : undefined,
+                    host,
+                });
+                if (!res.ok || !res.worker)
+                    return `error: ${res.error}`;
+                return `launched ${harness} worker ${res.worker.id} (pid ${res.worker.pid}) in ${dir}`;
+            },
+        },
+        {
+            name: "list_agents",
+            description: "List worker agents and their status on this host, or on a remote `machine`.",
+            parameters: { machine: "(optional) remote machine hostname" },
+            run: async (args) => {
+                if (args.machine)
+                    return runRemoteAgentAction(String(args.machine), "agent.list", {});
+                const workers = (0, supervisor_1.refreshWorkers)();
+                if (workers.length === 0)
+                    return "no workers yet";
+                return workers
+                    .map((w) => `${w.id} [${w.status}] ${w.harness} project=${w.project ?? "-"} :: ${w.goal.slice(0, 80)}`)
+                    .join("\n");
+            },
+        },
+        {
+            name: "get_agent_output",
+            description: "Tail a worker agent's captured output (local, or on a remote `machine`).",
+            parameters: {
+                id: "worker id",
+                lines: "(optional) number of lines to tail (default 40)",
+                machine: "(optional) remote machine hostname",
+            },
+            run: async (args) => {
+                const id = String(args.id || "").trim();
+                if (!id)
+                    return "error: get_agent_output requires id";
+                const lines = Number(args.lines) > 0 ? Number(args.lines) : 40;
+                if (args.machine)
+                    return runRemoteAgentAction(String(args.machine), "agent.output", { id, lines });
+                const res = (0, supervisor_1.getWorkerOutput)(id, lines);
+                return res.ok ? res.output || "(empty)" : `error: ${res.error}`;
+            },
+        },
+        {
+            name: "stop_agent",
+            description: "Stop a running worker agent (local, or on a remote `machine`).",
+            parameters: { id: "worker id", machine: "(optional) remote machine hostname" },
+            run: async (args) => {
+                const id = String(args.id || "").trim();
+                if (!id)
+                    return "error: stop_agent requires id";
+                if (args.machine)
+                    return runRemoteAgentAction(String(args.machine), "agent.stop", { id });
+                const res = (0, supervisor_1.stopWorker)(id);
+                return res.ok ? `stopped ${id}` : `error: ${res.error}`;
+            },
+        },
+        {
+            name: "list_machines",
+            description: "List the user's synced machines (candidates to delegate work to).",
+            parameters: {},
+            run: async () => {
+                if (!(0, config_1.isAuthenticated)())
+                    return "error: not authenticated — run `you login`";
+                const res = await (0, api_1.getMachineProofs)({ limit: 25 });
+                const machines = res.ok ? res.data?.machines || [] : [];
+                if (machines.length === 0)
+                    return "no synced machines yet";
+                const self = host.toLowerCase();
+                return machines
+                    .map((m) => {
+                    const name = m.hostName || "(unknown)";
+                    const tag = name.toLowerCase() === self ? " (this host)" : "";
+                    return `${name}${tag} — ${m.status ?? "?"}, last seen ${m.generatedAt ?? "?"}`;
+                })
+                    .join("\n");
+            },
+        },
+    ];
+}
+/**
+ * A harness/model-agnostic model caller: try the You.md chat proxy (no key needed), fall back to
+ * the user's OpenRouter key if present. Mirrors the proven onboarding.ts pattern.
+ */
+function makeModelCaller() {
+    return async (messages) => {
+        // Try the proxy first.
+        try {
+            const res = await fetch(CHAT_PROXY_URL, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ messages }),
+                signal: AbortSignal.timeout(60000),
+            });
+            if (res.ok) {
+                const data = (await res.json());
+                if (data.content)
+                    return data.content;
+            }
+        }
+        catch {
+            // fall through to direct call
+        }
+        const cfg = (0, config_1.readGlobalConfig)();
+        const key = cfg.openrouterKey || process.env.OPENROUTER_API_KEY;
+        if (!key)
+            throw new Error("orchestrator model unavailable (no chat proxy, no OpenRouter key)");
+        const res = await fetch(OPENROUTER_URL, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${key}`,
+                "Content-Type": "application/json",
+                "HTTP-Referer": "https://you.md",
+                "X-Title": "you.md orchestrator",
+            },
+            body: JSON.stringify({
+                model: OPENROUTER_MODEL,
+                messages,
+                max_tokens: 1024,
+                temperature: 0.3,
+            }),
+            signal: AbortSignal.timeout(60000),
+        });
+        if (!res.ok)
+            throw new Error(`OpenRouter error ${res.status}: ${await res.text()}`);
+        const data = (await res.json());
+        const content = data.choices?.[0]?.message?.content;
+        if (!content)
+            throw new Error("empty model response");
+        return content;
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/lib/orchestrator/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/lib/orchestrator/tools.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,EAAE;AACF,+FAA+F;AAC/F,+FAA+F;AAC/F,+FAA+F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsB/F,8CAeC;AAmCD,wDA2GC;AAMD,0CA4CC;AAnOD,uCAAyB;AACzB,2CAA6B;AAE7B,6CAMsB;AACtB,sCAA8D;AAC9D,sDAAyE;AACzE,gCAA0C;AAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,gBAAgB,CAAC;AACtF,MAAM,cAAc,GAAG,GAAG,IAAI,cAAc,CAAC;AAC7C,MAAM,cAAc,GAAG,+CAA+C,CAAC;AACvE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,6BAA6B,CAAC;AAE7F,4FAA4F;AAC5F,SAAgB,iBAAiB,CAAC,OAA2B,EAAE,WAAmB;IAChF,IAAI,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC;IACjC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7C,wEAAwE;IACxE,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,4FAA4F;IAC5F,kFAAkF;IAClF,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAQD;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,MAAoE,EACpE,IAA6B,EAC7B,SAAS,GAAG,KAAM;IAElB,IAAI,CAAC,IAAA,wBAAe,GAAE,EAAE,CAAC;QACvB,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,IAAA,sCAAqB,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3G,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,qBAAqB,MAAM,OAAO,OAAO,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;IAC5F,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,cAAc,MAAM,OAAO,OAAO,aAAa,UAAU,CAAC,IAAI,CAAC,SAAS,wBAAwB,IAAI,CAAC,KAAK,CAC/G,SAAS,GAAG,IAAI,CACjB,+EAA+E,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,OAAO,KAAK,MAAM,SAAS,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;IACtF,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AAC/G,CAAC;AAED,mFAAmF;AACnF,SAAgB,sBAAsB,CAAC,OAA0B,EAAE;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtC,OAAO;QACL;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EACT,6KAA6K;YAC/K,UAAU,EAAE;gBACV,OAAO,EAAE,+CAA+C;gBACxD,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,2DAA2D;gBACpE,GAAG,EAAE,uEAAuE;gBAC5E,OAAO,EAAE,mEAAmE;aAC7E;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAkB,CAAC;gBAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI;oBAAE,OAAO,8CAA8C,CAAC;gBACjE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE;wBAC/D,OAAO;wBACP,IAAI;wBACJ,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;qBACzD,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;oBAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;oBAClB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC5E,MAAM,GAAG,GAAG,IAAA,wBAAW,EAAC;oBACtB,OAAO;oBACP,IAAI;oBACJ,GAAG,EAAE,GAAG;oBACR,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBACxD,IAAI;iBACL,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;oBAAE,OAAO,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC;gBACzD,OAAO,YAAY,OAAO,WAAW,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,GAAG,EAAE,CAAC;YACzF,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,6EAA6E;YAC1F,UAAU,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE;YAC7D,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAO,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;gBACtF,MAAM,OAAO,GAAG,IAAA,2BAAc,GAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,gBAAgB,CAAC;gBAClD,OAAO,OAAO;qBACX,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAC7F;qBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;SACF;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,0EAA0E;YACvF,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW;gBACf,KAAK,EAAE,iDAAiD;gBACxD,OAAO,EAAE,oCAAoC;aAC9C;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,EAAE;oBAAE,OAAO,qCAAqC,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,IAAI,IAAI,CAAC,OAAO;oBACd,OAAO,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnF,MAAM,GAAG,GAAG,IAAA,4BAAe,EAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACvC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC;SACF;QACD;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,gEAAgE;YAC7E,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,EAAE;YAC9E,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,EAAE;oBAAE,OAAO,+BAA+B,CAAC;gBAChD,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAO,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC1F,MAAM,GAAG,GAAG,IAAA,uBAAU,EAAC,EAAE,CAAC,CAAC;gBAC3B,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1D,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,mEAAmE;YAChF,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,IAAI,CAAC,IAAA,wBAAe,GAAE;oBAAE,OAAO,4CAA4C,CAAC;gBAC5E,MAAM,GAAG,GAAG,MAAM,IAAA,sBAAgB,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,wBAAwB,CAAC;gBAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAChC,OAAO,QAAQ;qBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,IAAI,WAAW,CAAC;oBACvC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,OAAO,GAAG,IAAI,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;gBACjF,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe;IAC7B,OAAO,KAAK,EAAE,QAAuB,EAAmB,EAAE;QACxD,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;gBACtC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;gBAClC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAM,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;gBACxD,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC,OAAO,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,MAAM,GAAG,GAAG,IAAA,yBAAgB,GAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAChE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAE/F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,GAAG,EAAE;gBAC9B,cAAc,EAAE,kBAAkB;gBAClC,cAAc,EAAE,gBAAgB;gBAChC,SAAS,EAAE,qBAAqB;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,gBAAgB;gBACvB,QAAQ;gBACR,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,GAAG;aACjB,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0D,CAAC;QACzF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/remote-executor.d.ts

@@ -24,7 +24,7 @@
 export type RemoteActionMutating = "no" | "reversible";
 /** The exact set of actions a remote machine may trigger. The keys ARE the
  *  security boundary — extending it requires a code change + review. */
-export declare const ALLOWED_REMOTE_ACTIONS: readonly ["git.status", "git.last_activity", "git.commit_push", "git.pull", "agent.status"];
+export declare const ALLOWED_REMOTE_ACTIONS: readonly ["git.status", "git.last_activity", "git.commit_push", "git.pull", "agent.status", "agent.spawn", "agent.list", "agent.output", "agent.stop"];
 export type RemoteAction = (typeof ALLOWED_REMOTE_ACTIONS)[number];
 export interface RemoteActionSpec {
     /** Whether the action requires a resolved project directory. */
@@ -35,6 +35,20 @@ export interface RemoteActionSpec {
     description: string;
 }
 export declare const ACTION_SPECS: Record<RemoteAction, RemoteActionSpec>;
+/**
+ * Whether THIS host accepts remote requests to launch/stop autonomous worker agents.
+ * Off by default: a host enrolled in the brain is remotely observable (git/status/agent.list)
+ * but will NOT run a remotely-triggered coding agent unless its owner explicitly opts in. The
+ * y.computer / VPS provision flow sets this deliberately when standing up a worker host.
+ */
+export declare function remoteAgentHostEnabled(): boolean;
+/**
+ * Build a secret-minimized environment for a REMOTELY-triggered worker so it does not inherit the
+ * resident daemon's own credentials (you.md token, OpenRouter, folder.md, vault) — a remote issuer
+ * should not be able to launch an agent that can read those off process.env. Defense-in-depth, not
+ * a full sandbox: the worker harness keeps its own auth (e.g. ANTHROPIC_API_KEY) so it still runs.
+ */
+export declare function remoteWorkerEnv(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 export declare function isAllowedRemoteAction(action: unknown): action is RemoteAction;
 export interface RemoteGitState {
     branch: string | null;

package/dist/lib/remote-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-executor.d.ts","sourceRoot":"","sources":["../../src/lib/remote-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAeH,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAAG,IAAI,GAAG,YAAY,CAAC;AAEvD;wEACwE;AACxE,eAAO,MAAM,sBAAsB,6FAMzB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CA+B/D,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,YAAY,CAK7E;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC;IACpC,+DAA+D;IAC/D,mBAAmB,EAAE,KAAK,CAAC;CAC5B;AAqBD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBlD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAmB,GAAG,MAAM,CAG3E;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA6E3D;AAmGD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAcD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CA6I3B"}
+{"version":3,"file":"remote-executor.d.ts","sourceRoot":"","sources":["../../src/lib/remote-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAuBH,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAAG,IAAI,GAAG,YAAY,CAAC;AAEvD;wEACwE;AACxE,eAAO,MAAM,sBAAsB,wJAezB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAyD/D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAWhD;AAKD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAexF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,YAAY,CAK7E;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC;IACpC,+DAA+D;IAC/D,mBAAmB,EAAE,KAAK,CAAC;CAC5B;AAyBD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBlD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAmB,GAAG,MAAM,CAG3E;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA6E3D;AAmGD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAcD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAwQ3B"}

package/dist/lib/remote-executor.js

@@ -56,6 +56,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ACTION_SPECS = exports.ALLOWED_REMOTE_ACTIONS = void 0;
+exports.remoteAgentHostEnabled = remoteAgentHostEnabled;
+exports.remoteWorkerEnv = remoteWorkerEnv;
 exports.isAllowedRemoteAction = isAllowedRemoteAction;
 exports.redactSecrets = redactSecrets;
 exports.truncateOutput = truncateOutput;
@@ -66,6 +68,8 @@ const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
 const project_1 = require("./project");
+const supervisor_1 = require("./orchestrator/supervisor");
+const config_1 = require("./config");
 /** The exact set of actions a remote machine may trigger. The keys ARE the
  *  security boundary — extending it requires a code change + review. */
 exports.ALLOWED_REMOTE_ACTIONS = [
@@ -74,6 +78,15 @@ exports.ALLOWED_REMOTE_ACTIONS = [
     "git.commit_push",
     "git.pull",
     "agent.status",
+    // ── Cross-machine orchestration (the You agent conductor driving a remote host) ──
+    // agent.spawn / agent.stop launch/stop a WORKER harness on the target — a real
+    // privilege escalation beyond the git whitelist, so they require the target host to
+    // opt in via YOU_REMOTE_AGENT_HOST=1 (see remoteAgentHostEnabled). list/output are
+    // read-only and need no extra opt-in.
+    "agent.spawn",
+    "agent.list",
+    "agent.output",
+    "agent.stop",
 ];
 exports.ACTION_SPECS = {
     "git.status": {
@@ -106,7 +119,80 @@ exports.ACTION_SPECS = {
         timeoutMs: 15000,
         description: "report host/runtime + last agent-bus heartbeat hint",
     },
+    "agent.spawn": {
+        // needsProject is false here so the host opt-in gate is checked FIRST (inside the case);
+        // the project dir is resolved + contained inside the case, after the gate.
+        needsProject: false,
+        mutating: "reversible",
+        timeoutMs: 15000,
+        description: "launch a worker harness (claude|codex|cursor) on a task in a project (opt-in host)",
+    },
+    "agent.list": {
+        needsProject: false,
+        mutating: "no",
+        timeoutMs: 10000,
+        description: "list worker agents and their status on this host",
+    },
+    "agent.output": {
+        needsProject: false,
+        mutating: "no",
+        timeoutMs: 10000,
+        description: "tail a worker agent's captured output",
+    },
+    "agent.stop": {
+        needsProject: false,
+        mutating: "reversible",
+        timeoutMs: 10000,
+        description: "stop a running worker agent (opt-in host)",
+    },
 };
+/**
+ * Whether THIS host accepts remote requests to launch/stop autonomous worker agents.
+ * Off by default: a host enrolled in the brain is remotely observable (git/status/agent.list)
+ * but will NOT run a remotely-triggered coding agent unless its owner explicitly opts in. The
+ * y.computer / VPS provision flow sets this deliberately when standing up a worker host.
+ */
+function remoteAgentHostEnabled() {
+    const v = (process.env.YOU_REMOTE_AGENT_HOST || process.env.YOUMD_REMOTE_AGENT_HOST || "").trim().toLowerCase();
+    if (v === "1" || v === "true" || v === "yes")
+        return true;
+    if (v === "0" || v === "false" || v === "no")
+        return false; // explicit env override wins
+    // Persisted opt-in: the resident daemon's process env carries no shell exports, so the
+    // durable flag in config is the real enablement path (set via `you orchestrate host on`).
+    try {
+        return (0, config_1.readGlobalConfig)().remoteAgentHost === true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Worker harnesses a REMOTE issuer may request. `custom` (arbitrary argv) is intentionally excluded. */
+const REMOTE_SPAWNABLE_HARNESSES = ["claude", "codex", "cursor"];
+/**
+ * Build a secret-minimized environment for a REMOTELY-triggered worker so it does not inherit the
+ * resident daemon's own credentials (you.md token, OpenRouter, folder.md, vault) — a remote issuer
+ * should not be able to launch an agent that can read those off process.env. Defense-in-depth, not
+ * a full sandbox: the worker harness keeps its own auth (e.g. ANTHROPIC_API_KEY) so it still runs.
+ */
+function remoteWorkerEnv(base = process.env) {
+    const env = { ...base };
+    const explicitDrop = [
+        "YOU_API_KEY", "YOUMD_API_KEY",
+        "OPENROUTER_API_KEY",
+        "FOLDER_API_KEY", "FOLDERMD_API_KEY",
+        "YOU_REMOTE_AGENT_HOST", "YOUMD_REMOTE_AGENT_HOST",
+    ];
+    for (const k of explicitDrop)
+        delete env[k];
+    // Drop obvious secret-shaped vars (tokens/secrets/passwords/private keys). Keeps *_API_KEY
+    // like ANTHROPIC_API_KEY so the harness can authenticate.
+    for (const k of Object.keys(env)) {
+        if (/(_SECRET$|^SECRET|_TOKEN$|TOKEN$|PASSWORD|PASSWD|PRIVATE_KEY)/i.test(k))
+            delete env[k];
+    }
+    return env;
+}
 function isAllowedRemoteAction(action) {
     return (typeof action === "string" &&
         exports.ALLOWED_REMOTE_ACTIONS.includes(action));
@@ -126,6 +212,10 @@ const SECRET_PATTERNS = [
     /\bBearer\s+[A-Za-z0-9._-]{12,}\b/gi,
     // URLs with embedded credentials (https://user:pass@host)
     /(https?:\/\/)[^/\s:@]+:[^/\s@]+@/gi,
+    // JWTs (header.payload.signature)
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g,
+    // PEM private key blocks
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
 ];
 function redactSecrets(text) {
     let out = text;
@@ -409,6 +499,7 @@ async function executeRemoteAction(opts) {
                     `host: ${os.hostname()}`,
                     `runtime: node ${process.version}`,
                     `pid: ${process.pid}`,
+                    `remote-agent-host: ${remoteAgentHostEnabled() ? "enabled" : "disabled"}`,
                 ].join("\n");
                 return {
                     ok: true,
@@ -419,6 +510,110 @@ async function executeRemoteAction(opts) {
                     secretValuesExposed: false,
                 };
             }
+            case "agent.spawn": {
+                // Higher-privilege: requires explicit host opt-in (this launches an autonomous worker).
+                if (!remoteAgentHostEnabled()) {
+                    return reject(action, "this host does not accept remote agent spawns (set YOU_REMOTE_AGENT_HOST=1 to enable)");
+                }
+                const harness = String(args.harness ?? "claude");
+                if (!REMOTE_SPAWNABLE_HARNESSES.includes(harness)) {
+                    return reject(action, `harness not allowed for remote spawn: ${harness}`);
+                }
+                const goal = typeof args.goal === "string" ? args.goal.trim() : "";
+                if (!goal) {
+                    return reject(action, "agent.spawn requires a non-empty goal");
+                }
+                // Resolve + contain the project dir AFTER the opt-in/harness/goal gates.
+                const resolvedSpawn = resolveProjectDir(args.project, { startDir: opts.startDir });
+                if (!resolvedSpawn.ok) {
+                    return reject(action, resolvedSpawn.reason);
+                }
+                const res = (0, supervisor_1.spawnWorker)({
+                    harness,
+                    goal,
+                    cwd: resolvedSpawn.dir,
+                    project: typeof args.project === "string" ? args.project : undefined,
+                    host: os.hostname(),
+                    env: remoteWorkerEnv(), // strip the daemon's own secrets from the remote worker
+                });
+                if (!res.ok || !res.worker) {
+                    return {
+                        ok: false,
+                        action,
+                        exitCode: null,
+                        output: cleanOutput("", res.error ?? "spawn failed"),
+                        error: res.error ?? "spawn failed",
+                        status: "error",
+                        secretValuesExposed: false,
+                    };
+                }
+                return {
+                    ok: true,
+                    action,
+                    exitCode: 0,
+                    output: cleanOutput(`launched ${harness} worker ${res.worker.id} (pid ${res.worker.pid}) in ${resolvedSpawn.dir}`, ""),
+                    status: "ok",
+                    secretValuesExposed: false,
+                };
+            }
+            case "agent.list": {
+                // Worker logs/goals can contain sensitive output; do not expose them remotely unless the
+                // host owner opted in (same gate as spawn/stop). agent.status is the unauthenticated probe.
+                if (!remoteAgentHostEnabled()) {
+                    return reject(action, "this host does not expose worker agents remotely (set YOU_REMOTE_AGENT_HOST=1 to enable)");
+                }
+                const workers = (0, supervisor_1.refreshWorkers)();
+                const summary = workers.length === 0
+                    ? "no workers"
+                    : workers
+                        .map((w) => `${w.id} [${w.status}] ${w.harness} ${w.project ?? "-"} :: ${w.goal.slice(0, 60)}`)
+                        .join("\n");
+                return {
+                    ok: true,
+                    action,
+                    exitCode: 0,
+                    output: cleanOutput(summary, ""),
+                    status: "ok",
+                    secretValuesExposed: false,
+                };
+            }
+            case "agent.output": {
+                if (!remoteAgentHostEnabled()) {
+                    return reject(action, "this host does not expose worker output remotely (set YOU_REMOTE_AGENT_HOST=1 to enable)");
+                }
+                const id = typeof args.id === "string" ? args.id.trim() : "";
+                if (!id)
+                    return reject(action, "agent.output requires a worker id");
+                const lines = Number(args.lines) > 0 ? Number(args.lines) : 40;
+                const res = (0, supervisor_1.getWorkerOutput)(id, lines);
+                return {
+                    ok: res.ok,
+                    action,
+                    exitCode: res.ok ? 0 : null,
+                    output: cleanOutput(res.ok ? res.output ?? "" : "", res.ok ? "" : res.error ?? ""),
+                    status: res.ok ? "ok" : "error",
+                    ...(res.ok ? {} : { error: res.error }),
+                    secretValuesExposed: false,
+                };
+            }
+            case "agent.stop": {
+                if (!remoteAgentHostEnabled()) {
+                    return reject(action, "this host does not accept remote agent control (set YOU_REMOTE_AGENT_HOST=1 to enable)");
+                }
+                const id = typeof args.id === "string" ? args.id.trim() : "";
+                if (!id)
+                    return reject(action, "agent.stop requires a worker id");
+                const res = (0, supervisor_1.stopWorker)(id);
+                return {
+                    ok: res.ok,
+                    action,
+                    exitCode: res.ok ? 0 : null,
+                    output: cleanOutput(res.ok ? `stopped ${id}` : "", res.ok ? "" : res.error ?? ""),
+                    status: res.ok ? "ok" : "error",
+                    ...(res.ok ? {} : { error: res.error }),
+                    secretValuesExposed: false,
+                };
+            }
         }
     }
     catch (err) {