dc98252 · 870a037 · dad20e0 · 707c4bb · c54b333 · e4b7e3f
@@ -41,6 +41,7 @@
for a tunnel and a forge that sleeps.
| `apps` | the apps you can see: live or not, where served, how each runs itself, what is working |  |
| `archive` | `{ repo | repos, archived?, dryRun? }`: archive (true) or wake (false) a repository, by name; planned first (`dryRun` is true unless `false`); only the repository's admin with an admin token, never an agent. `repos` (at most 50) runs the fleet `archive` operation over them, answers each one's outcome and the `operation` id; `limb` with `action: "undo"`, that `operation` and any one of the repositories as `app` reverts it for a day | yes |
| `asked` | `{ repo?, show?, order? }`: what people asked the crew for, by default nothing merged yet and oldest first: who and when, the pulls that close it, the crew's last activity, waiting/building/shipped/closed, stale when not shipped in three days and flagged when stale with nothing built; repositories you can write |  |
| `assign` | `{ repo, number, kind, assignee }`: assign an issue or pull (`kind` is `issue` or `pull`) to a user, or clear it with `null`, as `PUT …/assignee` and with its refusals | yes |
| `assigned` | `{ limit? }`: the open issues and pulls assigned to you in every repository you can still read (repository, number, title, kind, state), as `GET /api/v1/user/assigned` |  |
| `audit` | who can do what, per app, read from its contract.json in git: yes, own or no per door, and whether outsiders may direct its crew (`crewOutsiders`) |  |
| `board_delete` | `{ slug }` (person admins): delete a board by slug; its history keeps it | yes |
@@ -4,7 +4,7 @@
import { good, bad, type Tool } from "../shared.ts";
export const tool: Tool = {
  name: "asks_act",
  description:
    "Decide asks (`items`: ask ids, `issue:<id>`): dismiss, decline, ship (final), close (`reason`), mute, replan",
    "Decide asks (`items`): dismiss, decline, ship, close (`reason`), mute, replan",
  inputSchema: {
    type: "object",
    properties: {
@@ -4,7 +4,7 @@
import { good, bad, type Tool } from "../shared.ts";
export const tool: Tool = {
  name: "asks_decide",
  description:
    "Let the decider answer a hand-over (`item`: `parked:<id>`); only a sure set_aside (70%+) clears it.",
    "Let the decider answer a hand-over (`item`: `parked:<id>`); only a sure set_aside clears it.",
  inputSchema: {
    type: "object",
    properties: { item: { type: "string", maxLength: 80 } },
@@ -0,0 +1,59 @@
import { getUserByName } from "../../../core/users.ts";
import { ARCHIVED_WHY } from "../../../core/repos.ts";
import { NOT_A_MEMBER } from "../../../core/roles.ts";
import { assignIssue } from "../../../actions/issues.ts";
import { good, bad, type Tool, REPO_ARG, repoArg, issueArg, isAnswer } from "../shared.ts";
export const tool: Tool = {
  name: "assign",
  doc: "`{ repo, number, kind, assignee }`: assign an issue or pull (`kind` is `issue` or `pull`) to a user, or clear it with `null`, as `PUT …/assignee` and with its refusals",
  description: "Assign an issue or pull to a user, or clear (null); PUT refusals apply.",
  inputSchema: {
    type: "object",
    properties: {
      repo: REPO_ARG,
      number: { type: "integer", minimum: 1 },
      kind: { type: "string", enum: ["issue", "pull"] },
      assignee: { type: ["string", "null"] },
      
        sentinelcrew
        19d ago
        
      
      Low: assignee has no maxLength. Other string arguments here are bounded, and the name is echoed back in no account named ${name}. The request body cap limits the damage, but maxLength: 64 (or the username limit) would make the schema say what it accepts. Optional.
    
    },
    required: ["repo", "number", "kind", "assignee"],
  },
  writes: true,
  run(ctx, user, args) {
    const repo = repoArg(ctx, user, args);
    if (isAnswer(repo)) return repo;
    const kind = args["kind"];
    if (kind !== "issue" && kind !== "pull") return bad("invalid", "kind is issue or pull");
    const name = args["assignee"];
    if (name !== null && typeof name !== "string")
      return bad("invalid_assignee", "assignee must be a username or null");
    const issue = issueArg(ctx, repo, args, "number");
    if ("ok" in issue) return issue;
    if (issue.kind !== kind) return bad("no_such_issue", `no ${kind} #${issue.number}`);
    const assignee = name === null || name === "" ? null : getUserByName(ctx.app.db, name);
    if (assignee === undefined) return bad("no_such_user", `no account named ${name}`);
    const done = assignIssue(ctx.app, user, repo, issue, assignee);
    if (!done.ok) {
      const e = done.error;
      if (e === "not_found") return bad("not_found", "no such app or repository (owner/name)");
      if (e === "unverified") return bad(e, "verify your email first");
      if (e === "archived") return bad(e, ARCHIVED_WHY);
      if (e === "not_member") return bad(e, NOT_A_MEMBER);
      if (e === "assignee_cannot_read") return bad(e, "the assignee cannot read this repository");
      if (e === "agent_not_on_crew") return bad(e, "that agent is not on this repository's crew");
      if (user.kind === "agent" && e === "forbidden")
        return bad(e, "an agent may not assign; that is a person's call");
      if (e === "forbidden" || e === "unauthorized")
        return bad(e, "your credentials lack the scope for this action");
      return bad(e, "that assignment could not be made");
    }
    return good({
      says: assignee
        ? `#${issue.number} is assigned to ${assignee.username}.`
        : `#${issue.number} is unassigned.`,
      number: issue.number,
      kind,
      assignee: assignee?.username ?? null,
    });
  },
};
@@ -5,7 +5,7 @@
export const tool: Tool = {
  name: "claim_link",
  doc: "`{ name }`: a new claim link for a child you spawned that nobody has claimed; the old one stops working. An admin's",
  description:
    "A new claim link for an unclaimed child forge, only with `reveal: true`; the old one stops at once.",
    "A new claim link for an unclaimed child forge, only with `reveal: true`; the old one stops.",
  inputSchema: {
    type: "object",
    properties: {
@@ -7,7 +7,7 @@
export const tool: Tool = {
  name: "decisions_by",
  doc: "`{ repo, by?, dryRun? }`: the standing rule for a repository's hand-overs (`me`, `decider`, `decider_tell`); with `by`, planned first (`dryRun` is true unless `false`); set only by the app's admin with an admin token, never an agent",
  description:
    "Who decides a repository's parked hand-over cards: `me`, `decider`, `decider_tell`. No `by` reads it.",
    "Who decides parked hand-over cards: `me`, `decider`, `decider_tell`. No `by` reads.",
  inputSchema: {
    type: "object",
    properties: {
@@ -7,7 +7,7 @@
export const tool: Tool = {
  name: "egress_grants",
  doc: "`{ repo, op?, destination? }`: the private `host:port` destinations an app's forge.json asks for and which are granted; `op` grant or revoke by a site admin (never an agent), and every op needs an admin-scope token; the same as the settings page and `/api/v1/repos/:owner/:name/egress-grants`",
  description:
    "An app's private destinations and their grants: list, grant or revoke (site admin). See docs/MCP.md.",
    "Private destinations and grants: list, grant or revoke (site admin).",
  inputSchema: {
    type: "object",
    properties: {
@@ -5,7 +5,7 @@
import { good, bad, type Tool } from "../shared.ts";
export const tool: Tool = {
  name: "flow",
  description:
    "Pipeline (forge admin): stage counts, `oldestWaiting`, `capacity`, bottleneck, `queue`, `reviewing`.",
    "Pipeline (forge admin): stage counts, `oldestWaiting`, `capacity`, `queue`.",
  inputSchema: { type: "object", properties: {} },
  writes: false,
  run(ctx, user) {
@@ -6,7 +6,7 @@
export const tool: Tool = {
  name: "follow_mode",
  doc: "`{ repo, … }`: choose how a spawned forge follows its parent, `tell-me` or `take-updates`; its `forge` repository's admin only",
  description:
    "How a spawned forge follows its parent: `tell-me` or `take-updates`. Its `forge` repository's admin.",
    "How a spawned forge follows its parent: `tell-me` or `take-updates`.",
  inputSchema: {
    type: "object",
    properties: {
@@ -6,7 +6,7 @@
export const tool: Tool = {
  name: "front_page",
  doc: "`{ pinned?, hidden?, weights?, dryRun? }`: the front page as a stranger sees it, ranked, with numbers; a site admin sets what is pinned (first public one featured), hidden, and what counts (weights of forks, ships, use, fresh, 0 to 10)",
  description:
    "The front page as a stranger sees it; a site admin also gets and sets `pinned`, `hidden`, `weights`.",
    "The front page as a stranger sees it; a site admin gets and sets `pinned`, `hidden`, `weights`.",
  inputSchema: {
    type: "object",
    properties: {
@@ -20,7 +20,7 @@
const notAdmin = (): Answer => bad("not_found", "no such app or repository, or y
export const tool: Tool = {
  name: "hooks",
  doc: "`{ repo, action, url, secret, kinds, id }`: `list`, `add` (`secret`, 16–200 characters, is required) or `remove` the repository's webhooks, as `…/hooks`; an admin-scope token on a repository you administer, and a secret is never shown",
  description: "List, add (`url`, `secret`, `kinds`) or remove (`id`) a repository's webhooks; admins; a secret is never shown.",
  description: "List, add (`url`, `secret`, `kinds`) or remove (`id`) webhooks; admins.",
  inputSchema: {
    type: "object",
    properties: {
@@ -17,6 +17,7 @@
export { tool as asks_act } from "./asks_act.ts";
export { tool as asks_decide } from "./asks_decide.ts";
export { tool as asks_proposal } from "./asks_proposal.ts";
export { tool as asks_undecide } from "./asks_undecide.ts";
export { tool as assign } from "./assign.ts";
export { tool as assigned } from "./assigned.ts";
export { tool as attach_look } from "./attach_look.ts";
export { tool as audit } from "./audit.ts";
@@ -10,7 +10,7 @@
export const tool: Tool = {
  name: "issue",
  doc: "`{ repo, number }`: one issue's title, state, closeReason, body, labels, assignee, comments (author, authorIsAgent, body, at) and blockedBy/blocks, as `GET …/issues/:number`; a sealed one you cannot see is not found",
  description:
    "One issue with comments, `blockedBy`, `blocks`; crew agents get `untrusted: true` on non-writers' text.",
    "One issue with comments, `blockedBy`, `blocks`; non-writers' text is `untrusted`.",
  inputSchema: {
    type: "object",
    properties: {
@@ -10,7 +10,7 @@
export const tool: Tool = {
  name: "map",
  doc: "an app's plan: ready now, waiting on what, the critical path, where the crew is, parked twice and why (`app`); draws the `ui://forge/map` card",
  description:
    "An app's plan: open issues ready or waiting, critical path, edges, where the crew is, `parkedTwice`.",
    "An app's plan: open issues ready or waiting, critical path, edges, crew, `parkedTwice`.",
  inputSchema: {
    type: "object",
    properties: { app: APP_ARG },
@@ -6,7 +6,7 @@
import { good, bad, type Tool, mayBoards } from "../shared.ts";
export const tool: Tool = {
  name: "model_ceiling",
  description:
    "Set an account's daily and per-run model spend ceilings in dollars; a run past one does not start.",
    "Set an account's daily and per-run model spend ceilings in dollars.",
  inputSchema: {
    type: "object",
    properties: {
@@ -11,7 +11,7 @@
export const tool: Tool = {
  name: "new_app",
  doc: "`{ name, description?, owner?, visibility?, agent?, pick? }`: make an app from a sentence; answers `{ repo, url, issue, agent, run }` (`run` is the first run's state, or `none`) and draws the `ui://forge/app` card: name, production URL, first issue, agent, first run; refused as `POST /api/v1/apps` is (unverified, app_limit, no_such_agent, name_taken)",
  description:
    "Make an app from a sentence: a repository, production started, and with `description` a first issue.",
    "Make an app from a sentence: a repository, production, and with `description` a first issue.",
  inputSchema: {
    type: "object",
    properties: {
@@ -15,7 +15,7 @@
export const tool: Tool = {
  name: "now",
  doc: "what the crew is doing right now: who, on what, since when, at what cost; a planner that declined the direction and waits for you comes first (`run: null`, its words in `says`)",
  description:
    "What the crew is doing across your apps: who, on what, since when, cost; what waits on your review.",
    "What the crew is doing across your apps: who, on what, since when, cost; what awaits review.",
  inputSchema: { type: "object", properties: {} },
  writes: false,
  run(ctx, user) {
@@ -8,7 +8,7 @@
export const tool: Tool = {
  name: "probe",
  doc: "knock on a running app's doors as nobody, a user and an admin; the ones that disobey its contract",
  description:
    "Try every door of a running app as nobody, a user and an admin against its contract.json; read-only.",
    "Try every door of a running app as nobody, a user and an admin; read-only.",
  inputSchema: {
    type: "object",
    properties: { repo: REPO_ARG },
@@ -5,7 +5,7 @@
export const tool: Tool = {
  name: "prompts",
  doc: "`{ repo, action, kind?, token?, at?, id? }`: list, add, run or remove an app's prompt sources (Instagram), as the `…/prompts` API does; the token goes in once and is never shown; listed only for an admin-scope token, and only the repository's admin may use it",
  description:
    "An app's prompt sources (Instagram): list, add (`kind`, `token`, `at`), run or remove (`id`). Admin token.",
    "Prompt sources: list, add (`kind`, `token`, `at`), run or remove (`id`). Admin.",
  inputSchema: {
    type: "object",
    properties: {
@@ -9,7 +9,7 @@
export const tool: Tool = {
  name: "review",
  doc: "`{ repo, number, verdict, reason? }`: approve a pull (`approve`) or request changes (`changes`, with a `reason`), as the page does; a writer's or the crew's, and never your own pull",
  description:
    "Approve a pull, or request changes with a `reason` (required for changes); your own pull is refused.",
    "Approve a pull, or request changes (`reason` required); your own pull is refused.",
  inputSchema: {
    type: "object",
    properties: {
@@ -5,7 +5,7 @@
import { good, bad, type Tool } from "../shared.ts";
export const tool: Tool = {
  name: "scorecard",
  description:
    "Crew scorecard (forge admin): per agent, all time and 30 days: landed, rounds, red rate, reverts.",
    "Crew scorecard (forge admin): per agent, all time and 30 days: landed, rounds, red rate.",
  inputSchema: { type: "object", properties: {} },
  writes: false,
  adminOnly: true,
@@ -6,7 +6,7 @@
import { good, bad, type Tool, str } from "../shared.ts";
export const tool: Tool = {
  name: "share",
  description:
    "Share a feed item: no `to` tells the app's crew and owners, else its followers; daily budget each.",
    "Share a feed item: no `to` tells the app's crew and owners, else followers; daily budget.",
  inputSchema: {
    type: "object",
    properties: {
@@ -4,7 +4,7 @@
import { good, bad, type Tool, REPO_ARG, repoArg, isAnswer } from "../shared.ts"
export const tool: Tool = {
  name: "spend",
  description:
    "Report what your session spent on work the forge did not run: who, model, tokens or dollars, issue.",
    "Report what your session spent outside the forge's runs: who, model, tokens or dollars, issue.",
  inputSchema: {
    type: "object",
    properties: {
@@ -5,7 +5,7 @@
export const tool: Tool = {
  name: "stop",
  doc: "stop one run by its id from `now`",
  description:
    "Stop one of the crew's runs, by its id from `now`. What it had pushed stays; nothing is re-queued.",
    "Stop one of the crew's runs, by its id from `now`. Its pushes stay; nothing is re-queued.",
  inputSchema: {
    type: "object",
    properties: { repo: REPO_ARG, run: { type: "string" } },
@@ -6,7 +6,7 @@
export const tool: Tool = {
  name: "system",
  doc: "the machine the forge runs on, now: CPU, load, memory, disk, network, processes; a forge admin, or an agent granted `telemetry:read`",
  description:
    "The forge's machine now: CPU, load, memory, disk, network, processes. Forge admin or telemetry:read.",
    "The forge's machine now: CPU, memory, disk, network, processes. Admin or telemetry:read.",
  inputSchema: { type: "object", properties: {} },
  writes: false,
  run(ctx, user) {
@@ -8,7 +8,7 @@
export const tool: Tool = {
  name: "tell",
  doc: "a sentence becomes an issue, a builder is picked, a run starts on the crew's next tick",
  description:
    "Tell an app's crew what should change (first line is the title). No `repo`: kept; answers a thought id.",
    "Tell an app's crew what to change (first line is the title). No `repo`: kept.",
  inputSchema: {
    type: "object",
    properties: {
@@ -6,7 +6,7 @@
export const tool: Tool = {
  name: "watch",
  doc: "`{ app, issue, watch? }`: watch a milestone, or stop with `watch: false`: one item in your feed that follows it, and one push to your phone when it lands",
  description:
    "Watch a milestone, or stop (`watch: false`): one feed item; your phone is told once when it lands.",
    "Watch a milestone, or stop (`watch: false`); your phone is told once when it lands.",
  inputSchema: {
    type: "object",
    properties: {
@@ -0,0 +1,159 @@
/** The `assign` tool does what PUT …/assignee does: a writer assigns and clears; a reader and an unknown user are refused. */
      
        sentinelcrew
        20d ago
        
      
      docs/MCP.md promises "a writer, never an agent; the assignee must read the repository", but neither refusal is exercised here. Add a private-repository case where the assignee can't read, and an agent-token case. Both should check that the assignee is unchanged.
    
import { afterAll, beforeAll, describe, expect, test } from "bun:test";
import { mkdtemp, rm } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { createApp, type App } from "../src/app.ts";
import { addToCrew, createAgent } from "../src/actions/crew.ts";
import { createRepo } from "../src/actions/repos.ts";
import { createIssue, getIssue } from "../src/core/issues.ts";
import { createToken } from "../src/core/tokens.ts";
import { createUser } from "../src/core/users.ts";
import { serve, type Servers } from "../src/http/server.ts";
import { promote } from "./helpers/members.ts";
describe("MCP assign", () => {
  let dataDir: string;
  let app: App;
  let servers: Servers;
  let aliceTok: string;
  let carolTok: string;
  let repoId: string;
  let hiddenId: string;
  let bobId: string;
  let botTok: string;
  let id = 1;
  const call = async (token: string, args: unknown) => {
    const res = await fetch(`${servers.url}/mcp`, {
      method: "POST",
      headers: {
        "content-type": "application/json",
        accept: "application/json, text/event-stream",
        authorization: `Bearer ${token}`,
      },
      body: JSON.stringify({
        jsonrpc: "2.0",
        id: id++,
        method: "tools/call",
        params: { name: "assign", arguments: args },
      }),
    });
    const body: any = await res.json();
    const text: string = body.result.content[0].text;
    return body.result.isError === true ? { error: text } : { value: JSON.parse(text) };
  };
  const assigneeOf = () => getIssue(app.db, repoId, 1)!.assigneeId;
  beforeAll(async () => {
    dataDir = await mkdtemp(join(tmpdir(), "forge-mcp-assign-"));
    app = createApp({ dataDir, port: 0 });
    servers = await serve(app);
    const mk = async (username: string, first = false) => {
      const u = await createUser(app.db, {
        origin: "seed",
        trusted: true,
        username,
        email: `${username}@forge.local`,
        password: "a-good-passphrase",
        adminIfFirst: first,
      });
      if (!u.ok) throw new Error(u.error);
      promote(app.db, u.value);
      return u.value;
    };
    const alice = await mk("alice", true);
    const bob = await mk("bob");
    const carol = await mk("carol");
    bobId = bob.id;
    aliceTok = createToken(app.db, alice.id, "rw", "rw").token;
    carolTok = createToken(app.db, carol.id, "rw", "rw").token;
    const made = await createRepo(app, alice, { name: "one", visibility: "public" });
    if (!made.ok) throw new Error(String(made.error));
    repoId = made.value.id;
    const issue = createIssue(app.db, { repoId, authorId: alice.id, title: "task" });
    if (!issue.ok) throw new Error(issue.error);
    const pull = createIssue(app.db, { repoId, authorId: alice.id, title: "change", kind: "pull" });
    if (!pull.ok) throw new Error(pull.error);
    const hidden = await createRepo(app, alice, { name: "hidden", visibility: "private" });
    if (!hidden.ok) throw new Error(String(hidden.error));
    hiddenId = hidden.value.id;
    const secret = createIssue(app.db, { repoId: hiddenId, authorId: alice.id, title: "secret" });
    if (!secret.ok) throw new Error(secret.error);
    const bot = await createAgent(app, alice, { username: "bot" });
    if (!bot.ok) throw new Error(String(bot.error));
    await createAgent(app, alice, { username: "idle" });
    if (!addToCrew(app, alice, made.value, "bot").ok) throw new Error("crew");
    botTok = createToken(app.db, bot.value.user.id, "rw", "rw").token;
  }, 30_000);
  afterAll(async () => {
    servers.stop();
    app.close();
    await rm(dataDir, { recursive: true, force: true });
  });
  const args = (assignee: string | null, extra = {}) => ({
    repo: "alice/one",
    number: 1,
    kind: "issue",
    assignee,
    ...extra,
  });
  test("a writer assigns and clears", async () => {
    const set = await call(aliceTok, args("bob"));
    expect(set.value.assignee).toBe("bob");
    expect(assigneeOf()).toBe(bobId);
    const cleared = await call(aliceTok, args(null));
    expect(cleared.value.assignee).toBeNull();
    expect(assigneeOf()).toBeNull();
  });
  test("a writer assigns and clears a pull", async () => {
    const set = await call(aliceTok, args("bob", { kind: "pull", number: 2 }));
    expect(set.value.assignee).toBe("bob");
    expect(getIssue(app.db, repoId, 2)!.assigneeId).toBe(bobId);
    await call(aliceTok, args(null, { kind: "pull", number: 2 }));
    expect(getIssue(app.db, repoId, 2)!.assigneeId).toBeNull();
  });
  test("a reader is refused with the API's words", async () => {
    const got = await call(carolTok, args("bob"));
    const api = await fetch(`${servers.url}/api/v1/repos/alice/one/issues/1/assignee`, {
      method: "PUT",
      headers: { authorization: `Bearer ${carolTok}`, "content-type": "application/json" },
      body: JSON.stringify({ assignee: "bob" }),
    });
    expect(api.status).toBe(403);
    const apiBody: any = await api.json();
    expect(got.error).toBe(`forbidden: ${apiBody.message}`);
    expect(assigneeOf()).toBeNull();
  });
  test("an unknown user, a wrong kind and a bad shape are refused", async () => {
    expect((await call(aliceTok, args("nobody"))).error).toStartWith("no_such_user");
    expect((await call(aliceTok, args("bob", { kind: "pull" }))).error).toStartWith("no_such_issue");
    expect((await call(aliceTok, args("bob", { kind: "thing" }))).error).toStartWith("invalid");
    expect((await call(aliceTok, args(5 as any))).error).toStartWith("invalid_assignee");
    expect(assigneeOf()).toBeNull();
  });
  test("an assignee who cannot read the repository is refused, and the assignee stays", async () => {
    const got = await call(aliceTok, args("bob", { repo: "alice/hidden" }));
    expect(got.error).toBe("assignee_cannot_read: the assignee cannot read this repository");
    expect(getIssue(app.db, hiddenId, 1)!.assigneeId).toBeNull();
  });
  test("an agent off the crew is refused as the API refuses it", async () => {
    const got = await call(aliceTok, args("idle"));
    expect(got.error).toBe("agent_not_on_crew: that agent is not on this repository's crew");
    expect(assigneeOf()).toBeNull();
  });
  test("an agent's rw token may not assign, and is told why", async () => {
    const got = await call(botTok, args("bob"));
    expect(got.error).toStartWith("forbidden: an agent may not assign");
    expect(assigneeOf()).toBeNull();
  });
});
@@ -243,6 +243,7 @@
describe("the forge over MCP", () => {
      "thought",
      "asked",
      "assigned",
      "assign",
      "app_members",
      "egress_grants",
      "explore",
		@@ -41,6 +41,7 @@ for a tunnel and a forge that sleeps.
41	41	\| `apps` \| the apps you can see: live or not, where served, how each runs itself, what is working \| \|
42	42	\| `archive` \| `{ repo \| repos, archived?, dryRun? }`: archive (true) or wake (false) a repository, by name; planned first (`dryRun` is true unless `false`); only the repository's admin with an admin token, never an agent. `repos` (at most 50) runs the fleet `archive` operation over them, answers each one's outcome and the `operation` id; `limb` with `action: "undo"`, that `operation` and any one of the repositories as `app` reverts it for a day \| yes \|
43	43	\| `asked` \| `{ repo?, show?, order? }`: what people asked the crew for, by default nothing merged yet and oldest first: who and when, the pulls that close it, the crew's last activity, waiting/building/shipped/closed, stale when not shipped in three days and flagged when stale with nothing built; repositories you can write \| \|
	44	\| `assign` \| `{ repo, number, kind, assignee }`: assign an issue or pull (`kind` is `issue` or `pull`) to a user, or clear it with `null`, as `PUT …/assignee` and with its refusals \| yes \|
44	45	\| `assigned` \| `{ limit? }`: the open issues and pulls assigned to you in every repository you can still read (repository, number, title, kind, state), as `GET /api/v1/user/assigned` \| \|
45	46	\| `audit` \| who can do what, per app, read from its contract.json in git: yes, own or no per door, and whether outsiders may direct its crew (`crewOutsiders`) \| \|
46	47	\| `board_delete` \| `{ slug }` (person admins): delete a board by slug; its history keeps it \| yes \|
		@@ -4,7 +4,7 @@ import { good, bad, type Tool } from "../shared.ts";
4	4	export const tool: Tool = {
5	5	name: "asks_act",
6	6	description:
7		"Decide asks (`items`: ask ids, `issue:<id>`): dismiss, decline, ship (final), close (`reason`), mute, replan",
	7	"Decide asks (`items`): dismiss, decline, ship, close (`reason`), mute, replan",
8	8	inputSchema: {
9	9	type: "object",
10	10	properties: {
		@@ -4,7 +4,7 @@ import { good, bad, type Tool } from "../shared.ts";
4	4	export const tool: Tool = {
5	5	name: "asks_decide",
6	6	description:
7		"Let the decider answer a hand-over (`item`: `parked:<id>`); only a sure set_aside (70%+) clears it.",
	7	"Let the decider answer a hand-over (`item`: `parked:<id>`); only a sure set_aside clears it.",
8	8	inputSchema: {
9	9	type: "object",
10	10	properties: { item: { type: "string", maxLength: 80 } },
		@@ -0,0 +1,59 @@
	1	import { getUserByName } from "../../../core/users.ts";
	2	import { ARCHIVED_WHY } from "../../../core/repos.ts";
	3	import { NOT_A_MEMBER } from "../../../core/roles.ts";
	4	import { assignIssue } from "../../../actions/issues.ts";
	5	import { good, bad, type Tool, REPO_ARG, repoArg, issueArg, isAnswer } from "../shared.ts";
	6
	7	export const tool: Tool = {
	8	name: "assign",
	9	doc: "`{ repo, number, kind, assignee }`: assign an issue or pull (`kind` is `issue` or `pull`) to a user, or clear it with `null`, as `PUT …/assignee` and with its refusals",
	10	description: "Assign an issue or pull to a user, or clear (null); PUT refusals apply.",
	11	inputSchema: {
	12	type: "object",
	13	properties: {
	14	repo: REPO_ARG,
	15	number: { type: "integer", minimum: 1 },
	16	kind: { type: "string", enum: ["issue", "pull"] },
	17	assignee: { type: ["string", "null"] },
		sentinelcrew 19d ago Low: `assignee` has no `maxLength`. Other string arguments here are bounded, and the name is echoed back in `no account named ${name}`. The request body cap limits the damage, but `maxLength: 64` (or the username limit) would make the schema say what it accepts. Optional.
	18	},
	19	required: ["repo", "number", "kind", "assignee"],
	20	},
	21	writes: true,
	22	run(ctx, user, args) {
	23	const repo = repoArg(ctx, user, args);
	24	if (isAnswer(repo)) return repo;
	25	const kind = args["kind"];
	26	if (kind !== "issue" && kind !== "pull") return bad("invalid", "kind is issue or pull");
	27	const name = args["assignee"];
	28	if (name !== null && typeof name !== "string")
	29	return bad("invalid_assignee", "assignee must be a username or null");
	30	const issue = issueArg(ctx, repo, args, "number");
	31	if ("ok" in issue) return issue;
	32	if (issue.kind !== kind) return bad("no_such_issue", `no ${kind} #${issue.number}`);
	33	const assignee = name === null \|\| name === "" ? null : getUserByName(ctx.app.db, name);
	34	if (assignee === undefined) return bad("no_such_user", `no account named ${name}`);
	35	const done = assignIssue(ctx.app, user, repo, issue, assignee);
	36	if (!done.ok) {
	37	const e = done.error;
	38	if (e === "not_found") return bad("not_found", "no such app or repository (owner/name)");
	39	if (e === "unverified") return bad(e, "verify your email first");
	40	if (e === "archived") return bad(e, ARCHIVED_WHY);
	41	if (e === "not_member") return bad(e, NOT_A_MEMBER);
	42	if (e === "assignee_cannot_read") return bad(e, "the assignee cannot read this repository");
	43	if (e === "agent_not_on_crew") return bad(e, "that agent is not on this repository's crew");
	44	if (user.kind === "agent" && e === "forbidden")
	45	return bad(e, "an agent may not assign; that is a person's call");
	46	if (e === "forbidden" \|\| e === "unauthorized")
	47	return bad(e, "your credentials lack the scope for this action");
	48	return bad(e, "that assignment could not be made");
	49	}
	50	return good({
	51	says: assignee
	52	? `#${issue.number} is assigned to ${assignee.username}.`
	53	: `#${issue.number} is unassigned.`,
	54	number: issue.number,
	55	kind,
	56	assignee: assignee?.username ?? null,
	57	});
	58	},
	59	};
		@@ -5,7 +5,7 @@ export const tool: Tool = {
5	5	name: "claim_link",
6	6	doc: "`{ name }`: a new claim link for a child you spawned that nobody has claimed; the old one stops working. An admin's",
7	7	description:
8		"A new claim link for an unclaimed child forge, only with `reveal: true`; the old one stops at once.",
	8	"A new claim link for an unclaimed child forge, only with `reveal: true`; the old one stops.",
9	9	inputSchema: {
10	10	type: "object",
11	11	properties: {
		@@ -7,7 +7,7 @@ export const tool: Tool = {
7	7	name: "decisions_by",
8	8	doc: "`{ repo, by?, dryRun? }`: the standing rule for a repository's hand-overs (`me`, `decider`, `decider_tell`); with `by`, planned first (`dryRun` is true unless `false`); set only by the app's admin with an admin token, never an agent",
9	9	description:
10		"Who decides a repository's parked hand-over cards: `me`, `decider`, `decider_tell`. No `by` reads it.",
	10	"Who decides parked hand-over cards: `me`, `decider`, `decider_tell`. No `by` reads.",
11	11	inputSchema: {
12	12	type: "object",
13	13	properties: {
		@@ -7,7 +7,7 @@ export const tool: Tool = {
7	7	name: "egress_grants",
8	8	doc: "`{ repo, op?, destination? }`: the private `host:port` destinations an app's forge.json asks for and which are granted; `op` grant or revoke by a site admin (never an agent), and every op needs an admin-scope token; the same as the settings page and `/api/v1/repos/:owner/:name/egress-grants`",
9	9	description:
10		"An app's private destinations and their grants: list, grant or revoke (site admin). See docs/MCP.md.",
	10	"Private destinations and grants: list, grant or revoke (site admin).",
11	11	inputSchema: {
12	12	type: "object",
13	13	properties: {
		@@ -5,7 +5,7 @@ import { good, bad, type Tool } from "../shared.ts";
5	5	export const tool: Tool = {
6	6	name: "flow",
7	7	description:
8		"Pipeline (forge admin): stage counts, `oldestWaiting`, `capacity`, bottleneck, `queue`, `reviewing`.",
	8	"Pipeline (forge admin): stage counts, `oldestWaiting`, `capacity`, `queue`.",
9	9	inputSchema: { type: "object", properties: {} },
10	10	writes: false,
11	11	run(ctx, user) {
		@@ -6,7 +6,7 @@ export const tool: Tool = {
6	6	name: "follow_mode",
7	7	doc: "`{ repo, … }`: choose how a spawned forge follows its parent, `tell-me` or `take-updates`; its `forge` repository's admin only",
8	8	description:
9		"How a spawned forge follows its parent: `tell-me` or `take-updates`. Its `forge` repository's admin.",
	9	"How a spawned forge follows its parent: `tell-me` or `take-updates`.",
10	10	inputSchema: {
11	11	type: "object",
12	12	properties: {
		@@ -6,7 +6,7 @@ export const tool: Tool = {
6	6	name: "front_page",
7	7	doc: "`{ pinned?, hidden?, weights?, dryRun? }`: the front page as a stranger sees it, ranked, with numbers; a site admin sets what is pinned (first public one featured), hidden, and what counts (weights of forks, ships, use, fresh, 0 to 10)",
8	8	description:
9		"The front page as a stranger sees it; a site admin also gets and sets `pinned`, `hidden`, `weights`.",
	9	"The front page as a stranger sees it; a site admin gets and sets `pinned`, `hidden`, `weights`.",
10	10	inputSchema: {
11	11	type: "object",
12	12	properties: {