Send a message from one agent to another.

Always persists to the durable mailbox. If deliver is true, also pushes a one-shot notice to the recipient via its native mechanism (hermes chat / codex exec / claude -p) so it sees the message without polling.

from_agent/to_agent are one of: claude, hermes, codex; an unknown agent is rejected. Returns {"ok": true, "message_id", "created_at"} (plus delivery when deliver set), or {"ok": false, "error"}.

Read messages addressed to agent, oldest first.

unread_only (default true) hides messages already ack'd. Returns {"messages": [...], "count": N}.

Mark a message read so it stops appearing in the unread inbox.

Returns {"ok": true} only if a still-unread message with that id existed (idempotent — a second ack returns false).

Recent messages, newest first — the visibility / audit feed.

agent, if given, filters to messages where it is either sender or recipient. Returns {"messages": [...], "count": N}.

Ask the Hermes agent (MrAnderson) a question and wait for its reply.

Spawns a one-shot hermes chat -q — this is slower and heavier than the async mailbox; use it when you need an answer NOW. Returns {"ok", "reply"} or {"ok": false, "error"}.

Ask Codex a question and wait for its reply.

Spawns an ephemeral codex exec. Omitting model passes no --model flag, so Codex's own configured default applies. Optional model/effort selection enables JSONL usage/thread telemetry. Advisory mode uses ChatGPT auth preflight, a temporary auth-only CODEX_HOME, a neutral read-only directory, ignored user/project configuration, and stripped API-provider overrides. workdir targets a repository in default mode and is rejected in advisory mode. write=True opts into a workspace-write sandbox with approvals disabled (unattended) — it requires workdir, is rejected in advisory mode, and is refused unless this hardline-mcp process has HARDLINE_ALLOW_WRITE set to a recognized truthy value (1/true/yes, case-insensitive); omitted, Codex stays read-only. Codex JSONL does not currently report served model/effective effort, so those telemetry fields remain null rather than being guessed.

Dispatch a Codex task in the background; returns immediately.

Runs the same ask_codex in a background thread, then delivers the result through the existing mailbox as a message from "codex" to from_agent — poll it with inbox(agent=from_agent). The delivered message body is the JSON-encoded ask_codex result, plus label if supplied (use it to match results when firing several concurrent dispatches). from_agent must be a known agent. Fire-and-forget: not persisted, so a hardline-mcp restart before completion loses the task.

Ask Claude Code a question and wait for its reply.

With no options, preserves the original one-shot claude -p behavior and response shape — omitting model passes no --model flag, so Claude Code's own configured default applies — plus (parity with Codex) Edit/Write/NotebookEdit are denied by default — inspection tools like Read/Grep/Bash still work. model pins a Claude alias/full model ID. effort is one of default|low|medium|high|xhigh|max; default omits the flag. workdir targets a repository in default mode and is rejected in advisory mode. write=True opts into full tool access plus --permission-mode bypassPermissions (unattended — stdin is /dev/null, so an interactive prompt would hang to timeout instead of being answered); it requires workdir, is rejected in advisory mode, and is refused unless this hardline-mcp process has HARDLINE_ALLOW_WRITE set to a recognized truthy value (1/true/yes, case-insensitive). Mode advisory disables tools/project customizations, runs in a neutral cwd, strips API-provider overrides, and fails closed unless response telemetry verifies first-party account auth without overage. Optioned calls return actual-model, usage, rate-limit, auth-verification, and safeguard fallback metadata in addition to ok/reply.

Dispatch a Claude task in the background; returns immediately.

Runs the same ask_claude in a background thread, then delivers the result through the existing mailbox as a message from "claude" to from_agent — poll it with inbox(agent=from_agent). The delivered message body is the JSON-encoded ask_claude result, plus label if supplied (use it to match results when firing several concurrent dispatches). from_agent must be a known agent. Fire-and-forget: not persisted, so a hardline-mcp restart before completion loses the task.