feat(mcp): operator-queue read tools — list + get (#1101)

[vybe]

Summary

• Adds the MCP read surface over the Operator Queue (OPS-001), closing Invariant feat: SMARTS trading pipeline with Telegram notifications and Miro visualization #13 ("MCP = third surface in sync") for the operator-queue feature.
• Read-only v1 — respond/cancel deferred (the queue is the human-in-the-loop Operating Room; the agent-autonomous-write blast radius was deferred to a follow-up).
• Pure TypeScript proxy over the existing REST router — no backend, endpoint, or dependency changes.

Tools

Tool	Proxies	Notes
list_operator_queue	GET /api/operator-queue	Broad listing, or scoped via the agent_name filter. Filters: status, type, priority, since, limit, offset.
get_operator_queue_item	GET /api/operator-queue/{id}	Single item by id.

Access control (the load-bearing part)

The backend resolves an agent-scoped MCP key to its owner and filters by the owner's accessible agents — it does not apply agent_permissions (architecture §5). So agent-to-agent gating lives in the MCP layer, mirroring executions.ts (checkAgentAccess) and agents.ts (list_agents post-filter):

• list broad path → post-filter items to {self} ∪ permitted for agent-scoped keys; system/user pass through.
• list scoped path (agent_name given) → checkAgentAccess up-front, deny-as-JSON.
• get → checkAgentAccess(item.agent_name) after fetch, before return.

A pure, unit-tested filterQueueItemsForAgentScope helper pins the broad-path filter rule.

Changes

• src/mcp-server/src/tools/operator_queue.ts (new) — createOperatorQueueTools + the pure helper
• src/mcp-server/src/operator_queue.test.ts (new) — 7 node:test cases for the filter
• src/mcp-server/src/client.ts — listOperatorQueue / getOperatorQueueItem
• src/mcp-server/src/types.ts — OperatorQueueItem / OperatorQueueListResponse
• src/mcp-server/src/server.ts, tools/index.ts — registration + barrel export (auto-counted, auto-audited via withAudit)
• docs/memory/architecture.md — MCP tools table: +operator_queue.ts, +voip.ts (was missing), count 17→20
• docs/memory/feature-flows/operating-room.md — MCP read-surface note

Test Plan

• docker compose build mcp-server — strict tsc compiles clean
• node --test dist/*.test.js — 16/16 pass (7 new + 9 existing)
• No dependency changes; no secrets in diff
• (post-merge) MCP container rebuild to expose the tools live

Fixes #1101

🤖 Generated with Claude Code