Bugbot finding on #1445: the legacy executeCodemodeFunctionCall delegated
listProcedures to call(), which namespaces typings by cap name — legacy
mount-agnostic callers got typings that no longer matched their mount path.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Bugbot finding on #1445: the legacy executeCodemodeFunctionCall delegated
listProcedures to call(), which namespaces typings by cap name — legacy
mount-agnostic callers got typings that no longer matched their mount path.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Bugbot finding on #1445: the legacy executeCodemodeFunctionCall delegated
listProcedures to call(), which namespaces typings by cap name — legacy
mount-agnostic callers got typings that no longer matched their mount path.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Stacked on #1445. The agent's execution engine moves from
CodemodeSession to the itx runner.

## What

- **Each agent gets an itx child context** (`ctx_…`) seeded with its
tools as caps: `chat` + `debug` via a new `AgentToolsCapability`
loopback forwarder, plus `ai` / `os` / `gmail`. One
`agent/capability-noted` event per cap lands on the agent stream, so the
LLM keeps learning its tools from stream history exactly as before (the
agent processor renders these into model-visible context).
- **LLM code fences run through `runItxScript`, detached** — the
two-event execution record on the agent stream is the durable trace, and
`itx/execution-completed` turns into agent input (the yaml block now
includes console output). LLM scripts stay written as `async (ctx) =>
…`: `ctx` IS the itx handle — `ctx.chat`, `ctx.ai`, `ctx.os`,
`ctx.gmail`, `ctx.fetch` all line up name-for-name.
- **Enqueued executions**: `itx/execution-requested` with `enqueued:
true` is a queue entry the agent-host runs (first taste of processor
mode from itx-next §4). Slack bang commands use this path.
- **Security**: `AgentToolsCapability` derives the agent DO name from
registry-injected `projectId` + definer's `agentPath` — a raw
durable-object ref would have let a definer address another project's
agent by name.
- **Slack agent**: status side effects key on the itx events;
thread-route etiquette becomes a capability-noted event.

## Behavior changes

- **`ctx.slack.agent.threadInfo()` is dropped** (it was an
event-mediated tool, a codemode-only mechanism). The webhook payload
already carries channel/thread_ts — the old instructions said as much —
and it can return as a dialable cap (`SlackAgentToolsCapability`) if
missed.
- Function-call-level events are gone; execution granularity is
requested/completed. Slack "is using tools…" status now spans the whole
script run.
- Detached execution has no retry-on-DO-restart (codemode's processor
had at-least-once); record-only semantics, noted in itx-next §4 as the
processor-mode follow-up.

## Testing

typecheck / lint / format green; unit suite updated to the new events
(207 passing). Needs a deployed e2e pass for the agent loop — the
existing agents e2e suite covers it once this stack deploys to a
preview.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **High Risk**
> Touches core agent execution, tool dialing, and Slack paths; detached
itx runs lack codemode-style retry on DO restart, and security relies on
registry-injected projectId in AgentToolsCapability.
> 
> **Overview**
> Replaces **CodemodeSession** with an **itx child context** per agent:
tools are registered as caps (`chat`/`debug` via new
**`AgentToolsCapability`**, plus `ai`, `os`, `gmail`, `slack`,
`agents`), and **`agent/capability-noted`** events on the agent stream
replace **`codemode/tool-provider-registered`** for LLM-visible tool
docs.
> 
> **Agent-host** runs LLM code fences through **`runItxScript`**
(detached) and maps **`itx/execution-completed`** back to agent input
(including console logs). Slack bang commands enqueue
**`itx/execution-requested`** with **`enqueued: true`**.
**`SlackCapability`** gains an itx **`call`** path;
**`ctx.slack.agent.threadInfo`** and codemode function-call events are
removed.
> 
> **`runItxScript`** accepts optional **`executionId`** and
**`recordRequested: false`** when the queue entry already exists.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
5b92858. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

<!-- CLOUDFLARE_PREVIEW -->
## Environment Config Lease
<!-- CLOUDFLARE_PREVIEW_STATE -->
<!--
{
  "apps": {
    "os": {
      "appDisplayName": "OS",
      "appSlug": "os",
      "status": "deployed",
      "updatedAt": "2026-06-10T14:47:53.981Z",
      "headSha": "5b92858e912f9d5f460284f9e3fffc6dfaa5c16e",
      "message": null,
      "publicUrl": "https://os.iterate-preview-4.com",
"runUrl": "https://github.com/iterate/iterate/actions/runs/27284064516",
      "shortSha": "5b92858"
    },
    "semaphore": {
      "appDisplayName": "Semaphore",
      "appSlug": "semaphore",
      "status": "deployed",
      "updatedAt": "2026-06-10T14:35:21.942Z",
      "headSha": "7b6c9e26a49ca380f25b45b218a47f371abed888",
      "message": null,
      "publicUrl": "https://semaphore.iterate-preview-4.com",
"runUrl": "https://github.com/iterate/iterate/actions/runs/27283580966",
      "shortSha": "7b6c9e2"
    }
  },
  "environmentConfigLease": {
    "dopplerConfig": "preview_4",
    "leasedUntil": 1781106059566,
    "leaseId": "108459b4-bf1b-4271-a050-cf9442fa648b",
    "slug": "preview-4",
    "type": "environment-config-lease"
  }
}
-->
<!-- /CLOUDFLARE_PREVIEW_STATE -->
Lease: `preview-4`
Doppler config: `preview_4`
Type: `environment-config-lease`
Leased until: 2026-06-10T15:40:59.566Z

### OS
Status: deployed
Commit: `5b92858`
Preview: https://os.iterate-preview-4.com
[Workflow
run](https://github.com/iterate/iterate/actions/runs/27284064516)
Updated: 2026-06-10T14:47:53.981Z

### Semaphore
Status: deployed
Commit: `7b6c9e2`
Preview: https://semaphore.iterate-preview-4.com
[Workflow
run](https://github.com/iterate/iterate/actions/runs/27283580966)
Updated: 2026-06-10T14:35:21.942Z
<!-- /CLOUDFLARE_PREVIEW -->

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Final follow-up to the codemode rip (#1445/#1446/#1447). MCP's
streamable HTTP transport is a stateless protocol — fetch with metadata
— so nothing about an MCP client belongs in a Durable Object.

## What

- **`OutboundMcpFromOurClientCapability` DO deleted** — class, worker
export, alchemy namespace + `OUTBOUND_MCP_FROM_OUR_CLIENT_CAPABILITY`
binding, vitest harness wiring. Nothing has dialed it since the codemode
rip (its only caller was the deleted provider registration).
- **Core helpers promoted** to `src/itx/caps/mcp-client-core.ts` with
clean names: `connectMcp` (custom-fetch aware, closes on failed
connect), `listMcpTools`, `executeMcpToolCall`. `McpClient` dedupes onto
them; the mock-server unit test moved and adapted.
- **The DO allusion is gone from the docs**: `McpClient`'s header now
states statelessness as the design ("connect → call → close, per
invocation; deliberately no Durable Object anywhere in this path")
instead of presenting connection caching as a future optimization.

## Deploy note

This is the repo's first Durable Object class deletion. The DO had no
SQLite (in-memory cache only) and no inbound subscribers, so deletion is
data-safe; alchemy is expected to emit the `deleted_classes` migration
on deploy — **this PR's preview deploy is the proof**. If it refuses,
the fallback is a tombstone class like `CodemodeSession`'s.

## Testing

Repo typecheck / lint / knip / unit suite green locally (incl. the moved
mock-server core test). The `McpClient` e2e remains gated on a reachable
MCP server.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CLOUDFLARE_PREVIEW -->
## Environment Config Lease
<!-- CLOUDFLARE_PREVIEW_STATE -->
<!--
{
  "apps": {},
  "environmentConfigLease": {
    "dopplerConfig": "preview_4",
    "leasedUntil": 1781109925654,
    "leaseId": "f7427e44-72e2-4e04-8617-122e174b3c57",
    "slug": "preview-4",
    "type": "environment-config-lease"
  }
}
-->
<!-- /CLOUDFLARE_PREVIEW_STATE -->
Lease: `preview-4`
Doppler config: `preview_4`
Type: `environment-config-lease`
Leased until: 2026-06-10T16:45:25.654Z
<!-- /CLOUDFLARE_PREVIEW -->

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>