All issues

Implement the reserved `policy: "prompt"` value — human-in-the-loop consent for tool calls

#10

· V3RON opened

on Aug 17, 2026

Tool calls can't be cancelled: add a `tool_cancel` frame and an `AbortSignal` for handlers

#9

· V3RON opened

on Aug 17, 2026

Ship a programmatic client so test runners can drive the app without shelling out to the CLI

#8

· V3RON opened

on Aug 17, 2026

Let apps declare read-only resources, not just tools (MCP `resources/read`)

#7

· V3RON opened

on Aug 17, 2026

App events never reach an agent: add daemon-side retention and an MCP surface for `app_event`

#6

· V3RON opened

on Aug 17, 2026