Skip to main content Crate agent_graph_mcp Copy item path Source pub use server::AgentGraphServer ;auth cli Strict CLI argument parsing for agent-graph-mcp. codex_app_server Minimal, provider-neutral handling for Codex app-server JSON-RPC notifications. compiler daemon Lock-owning daemon primitives. evidence fs_security Fail-closed filesystem security checks for durable storage. lifecycle Canonical execution lifecycle classification. migrations Versioned durable-daemon migrations. Kept independent so the store can call it. nodes operator Daemon-owned Unix operator service. The client never opens SQLite. operator_auth OS-authenticated operator authority primitives. JSON caller labels are never authority. operator_ipc Separate, versioned operator-only IPC framing. owner_lock Process-lifetime exclusive ownership of a durable data directory. policy promotion Canonical, operator-authorized template promotion.
Outcome evidence is advisory; only an authenticated operator receipt can approve. proxy Framing and stdio/Unix transport helpers for the thin proxy. run_manager server MCP server handler using rmcp’s #tool_router macro. spec store SQLite-backed persistent storage for graphs, executions, checkpoints, and events. templates tool_runtime tools Tool parameter structs for agent-graph MCP tools.
Each struct derives schemars::JsonSchema so rmcp auto-generates
the JSON Schema for the tool’s inputSchema. transport Bounded length-prefixed transport shared by the daemon and proxy.