Serve a connector worker its dispatch over MCP - #736

Merged

jorgemanrubia merged 33 commits into

mainfrom

connect-mcp-domain

Sep 18, 2026

Commits on Sep 17, 2026

Serve a connector worker its dispatch over MCP: basecamp_connect
jorgemanrubia
committed
639b9ae
One live task per event; the three actions agree on what is dispatchable
jorgemanrubia
committed
3cee0bf
Make a task only of instructions a worker can pull
jorgemanrubia
committed
8883096
Open an existing ledger without any path that can create it
jorgemanrubia
committed
2e6e9e7
Supersede returns unexposed work; finished work is never handed out anew
jorgemanrubia
committed
4f5f6d7
One task per conversation, one mention parser, one state-root check
jorgemanrubia
committed
b1a06c4
A removed mention leaves a space, so nothing joins across it
jorgemanrubia
committed
a29c397
Answer from the row, refuse with fields, name the domain
jorgemanrubia
committed
5d8864c
Take links as a list of strings from any caller
jorgemanrubia
committed
ff6fc5d
Build the instruction with the ledger free
jorgemanrubia
committed
3f6c7bf
Write the dispatch lifecycle down, enforce it in one place, try every edge
jorgemanrubia
committed
67aac1d
Withdraw a failed spawn's exposure; bound the token read; refuse an env token
jorgemanrubia
committed
d91e361
Withdraw only what the ledger can see no worker had
jorgemanrubia
committed
32fe533
A record is dispatched exactly while a live task carries it, in the database
jorgemanrubia
committed
b146b57
Make the lifecycle table say what the code does; use the checked directory
jorgemanrubia
committed
95fe772
One privacy check per ledger file; the task's own columns are the database's
jorgemanrubia
committed
9dbed2a
Know the ledger file by what it is, close it once, refuse before writing
jorgemanrubia
committed
7e21802
Claim the ledger file by identity, release it after the database closes
jorgemanrubia
committed
c11e554
A pull is what hands work to a worker; a live task keeps its conversation
jorgemanrubia
committed
fca7015
Read the token descriptor the way the flag parser will, or not at all
jorgemanrubia
committed
9a1042f
Tie retirement and pulls to the task, and read only this command's descriptor
jorgemanrubia
committed
6796808
Let cobra say which invocation this is, and the database tie the rest together
jorgemanrubia
committed
a089855
Hold a later open to the owner the check passed, and read for one invocation
jorgemanrubia
committed
efc7c4a
Read the arguments without touching the command that runs them
jorgemanrubia
committed
670c82e
Keep the token descriptor from children instead of racing to read it
jorgemanrubia
committed
a74d10b
Vet the whole path on a later open, without opening the ledger
jorgemanrubia
committed
0e493b0
Say why the descriptor number converts safely
jorgemanrubia
committed
4496992
Seal inherited descriptors at startup instead of scanning argv
jorgemanrubia
committed
1bac99f

Navigation Menu

Serve a connector worker its dispatch over MCP - #736

Serve a connector worker its dispatch over MCP#736
jorgemanrubia merged 33 commits into
mainfrom
connect-mcp-domain

Commits on Sep 17, 2026

Serve a connector worker its dispatch over MCP: basecamp_connect

One live task per event; the three actions agree on what is dispatchable

Make a task only of instructions a worker can pull

Open an existing ledger without any path that can create it

Supersede returns unexposed work; finished work is never handed out anew

One task per conversation, one mention parser, one state-root check

A removed mention leaves a space, so nothing joins across it

Answer from the row, refuse with fields, name the domain

Take links as a list of strings from any caller

Build the instruction with the ledger free

Write the dispatch lifecycle down, enforce it in one place, try every edge

Withdraw a failed spawn's exposure; bound the token read; refuse an env token

Withdraw only what the ledger can see no worker had

A record is dispatched exactly while a live task carries it, in the database

Make the lifecycle table say what the code does; use the checked directory

One privacy check per ledger file; the task's own columns are the database's

Know the ledger file by what it is, close it once, refuse before writing

Claim the ledger file by identity, release it after the database closes

A pull is what hands work to a worker; a live task keeps its conversation

Read the token descriptor the way the flag parser will, or not at all

Tie retirement and pulls to the task, and read only this command's descriptor

Let cobra say which invocation this is, and the database tie the rest together

Hold a later open to the owner the check passed, and read for one invocation

Read the arguments without touching the command that runs them

Keep the token descriptor from children instead of racing to read it

Vet the whole path on a later open, without opening the ledger

Say why the descriptor number converts safely

Seal inherited descriptors at startup instead of scanning argv

Commits on Sep 18, 2026

Cover the second open's file-mode check, and a mention tag that closes itself

Write the conversation a task holds on the task's own rows

Refuse to start when an inherited descriptor cannot be sealed

Read a task token only where the descriptor it arrives on is sealed

Draw the line above standard I/O once