Report the safety profile, protocol version, and stable capabilities of this bridge. This is read-only and is the startup handshake for coordinators.

Submit a prompt to one active leased agent and return a durable receipt for later collection.

Prompt one active leased agent and collect the exact receipt-bound settled result.

Deliver up to eight independent tasks to active leased agents and collect exact receipt-bound results.

Collect one to eight pending handoff receipts without submitting another prompt.

List content-free handoff receipts and their collection state.

Explicitly release an outstanding handoff barrier only after its exact leased agent is settled.

Acquire the first exclusive controller lease for the named project from this MCP client's Herdr pane. Returns an ephemeral fence token required by every coordination mutation.

Resume coordination after clear or MCP restart only from the same named Herdr agent identity. Rotates the lease id and fence token so conversational history is unnecessary.

Transfer an expired controller lease to this Herdr pane only when the previous identity is missing, done, or blocked and the caller supplies the expected predecessor lease plus durable authority.

Renew the active controller lease from its exact Herdr pane and identity.

Release this controller generation after durable checkpointing. The fence becomes invalid immediately; workers and reviewer leases are preserved.

List controller lease identities and expiry without exposing fence tokens. This is read-only.

Wait for an agent to become idle, done, or blocked, then return its state and visible output. Use after_seq to wait for a newer state transition instead of accepting stale terminal state.

Wait concurrently for the first of several agents to become idle, done, or blocked. Losing waits are cancelled. Per-target after_seq cursors prevent stale terminal states.

Create a dedicated no-focus tab in the controller's workspace, start one supported reviewer in its root pane, verify its identity, and persist a lease. This never splits the controller tab and does not accept arbitrary shell commands or agent arguments.

List persistent reviewer leases, optionally limited to one controller. This is read-only.

Capture and close only an idle or done reviewer whose pane, agent kind, name, cwd, controller, and lease still match. Blocked or working reviewers are refused.

Inspect reviewer leases for one controller and optionally close only identity-matched idle/done reviewers. Dry-run is the default; blocked, working, and ambiguous leases are preserved.

Reserve a manifest-scoped Git lane, verify its branch/base/HEAD/status digest and active ownership leases, then start one leased writer in a dedicated no-focus tab. The controller tab is never split. Durable ticket/spec authority must already have been validated by the coordinator.

List persistent writer leases, optionally limited to one controller. This is read-only.

Release only an idle/done identity-matched writer after revalidating branch, HEAD, Git status digest, and a durable checkpoint reference. The worktree and bytes are preserved.

Return the exact settled writer identity, Git status digest, and content digest used to authorize a host verification. This is read-only and executes no repository code.

Run the repository-selected verification gate on the host for one settled leased writer. Commands are fixed, controller-fenced, digest-pinned, time-bounded, and recorded. Optional dependency bootstraps accept only npm ci or unchanged, fully hash-pinned requirements.lock manifests from the accepted base commit.

List content-free host verification records, optionally for one controller or writer lease. This is read-only and never returns command output.

List live Herdr agents with matching reviewer, writer, or adopted-pane leases and report retained leases whose live identity is missing or changed. This is read-only.

Reconcile a retained failed lifecycle lease only when the exact leased pane is confirmed absent. Live panes and ambiguous writers are always preserved. Dry-run is the default.

Create a cleanup-only lease for one existing idle/done named agent after exact identity, durable authority, state cursor, and protected-pane checks. Adoption grants no Git ownership or implementation authority.

List cleanup-only leases for adopted legacy panes, optionally limited to one controller. This is read-only.

Capture and close one cleanup-only adopted pane after exact identity, idle/done state, fresh state cursor, controller, and durable checkpoint checks. Files, worktrees, and branches are preserved.

List all agents herdr currently recognizes — any supported agent type (pi, omp, claude, codex, opencode, hermes, qodercli, …) — with semantic state (idle/working/blocked/done), cwd, pane/tab/workspace ids. Use this first to discover targets for other agent tools.

Get details for a single agent (state, pane id, workspace, agent session).

Read another agent's terminal output to gather context (contextual handoff). Defaults to the visible screen, which is the most reliable source. Keep lines small to avoid flooding context. To find valid targets first, call herdr_agent_list.

Block until an agent reaches a given status. Useful to synchronize a handoff (wait for the other agent to become idle/done before sending the next step).

Block until a pane's output matches given text (or regex). Useful to wait for a build/command to finish in another agent's pane.

List herdr persistent sessions. Sessions survive disconnects and can be shared/reattached locally or over SSH.

List panes, optionally filtered to a workspace.

Get details for a pane.

Read a pane's terminal output. Keep lines small to avoid flooding context.

List tabs, optionally filtered to a workspace.

Get details for a tab.

List workspaces.

Get details for a workspace.

Show which agent integrations herdr knows about and their install status (pi, omp, claude, codex, opencode, hermes, qodercli, …). Use this to discover what agent types are available in this herdr install.