Repository navigation
Add steward to the per-agent AGENTS map (8627/9627) - #22
Merged
Merged
Conversation
steward is the config-owning agent (vikunja#350, build steward-config-agent-2026-08). Its git job is narrow by design: branch, commit, push and open a PR on host-forge-scripts carrying a config proposal. It holds no merge, release, tag or publish verb — enforced by a tool_allowlist in steward-agent.yml rather than a denylist, so a future githost-mcp release cannot add a write verb steward silently inherits. This map is a registration list the steward build plan did not account for: the plan grants steward githost-mcp but never provisions an instance, and githost-mcp runs one process per agent keyed here. Without this row there is no port for steward's manifest to point at. 8627/9627 rather than the contiguous 8626, which is backrest-mcp. 8625/9625 stay reserved to harlock rather than being reclaimed: that decommission (vikunja#270) is only through Phase 0, and reassigning a port out from under a half-removed agent is how two services end up racing for one bind. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> agent-id: sysadmin
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
One row in the
AGENTSmap. Companion to host-forge/scripts#44.stewardis forge's config-owning agent (vikunja#350) — the sole proposer of changes to the root-owned config surface. Its git job is deliberately narrow: branch, commit, push, open a PR onhost-forge-scriptscarrying a config proposal. It holds no merge, release, tag or publish verb, enforced by atool_allowlistinsteward-agent.ymlrather than a denylist, so a future githost-mcp release cannot add a write verb steward silently inherits.Why this PR exists at all: this map is a registration list the steward build plan did not account for. The plan grants steward
githost-mcpbut never provisions an instance, and githost-mcp runs one process per agent keyed here. Without this row there is no port for steward's manifest to point at.Port choice. 8627/9627 rather than the contiguous 8626, which is backrest-mcp. 8625/9625 stay reserved to harlock rather than being reclaimed — that decommission (vikunja#270) is only through Phase 0, and reassigning a port out from under a half-removed agent is how two services end up racing for one bind. Renumber both together when it finishes.
Noted while here, not fixed here:
buildApp()overwrites any per-agentGITHOST_MCP_AUTH_TOKENwith the shared value from~/.secrets/forge.env(line 68), so all agents present the same githost token and identity is separated by port only. The header comment above says the per-agent env file may carry "any agent-specific token overrides", which is not true of this key. That matters more for steward than for the others, since steward's whole premise is an isolated identity — filing separately rather than widening this PR.node --checkpasses. Deploy ispm2 start ecosystem.config.js --only githost-mcp-stewardafter~/.secrets/githost-mcp-steward.envis in place (already written).🤖 Generated with Claude Code