Delegate to other agents

Give an agent delegation tools to send tasks to other agents and create agents when needed.

~/.config/wardrik/agents/dispatch.md

---
tools: [agents/*, agent_create]
---
Send each request to the agent that handles it. Create another agent when none does.

Tool	Does
agents_list	lists the agents it can access, with ID and status
agent_read, agent_definition_read	returns an agent's status or definition
agent_ask	sends an agent a message; the reply arrives later
agent_create	creates an agent by name
agent_define	replaces an agent's definition
agent_schedule	schedules an agent a message, once or every so often
agent_trigger_set, agent_trigger_remove	sets or removes an agent's triggers: schedules, feeds and webhooks

• Each tool takes an agent ID from agents_list.
• Reads run without approval. Changes need approval unless the policy allows them: policy: {allow: [agent_ask]}.
• A created agent inherits its creator’s policy.
• self/* has the same tools for the agent itself: self_read, self_trigger_set, and so on.

Access

Delegation tools use the calling agent’s permissions. Grant them through a binding for agent:NAME; the agent does not inherit its owner’s access:

~/.config/wardrik/config.yaml

roles:
  delegate: {rules: [{verbs: [create, define, read, ask], kinds: [agent]}]}
bindings:
  - {org: acme, role: delegate, subjects: [agent:dispatch]}

See Organizations, roles, and tokens.

Replies

agent_ask returns immediately. When the other agent's turn ends, Wardrik delivers its reply as a new message to the calling agent:

From agent agt_01JF8X5RQ2M3V9ZK0B7Y4T6WHN:
In answer to your message msg_x1…:
Two deposits match no invoice: …

• A failed turn sends It couldn't answer: and the error.
• A turn paused for approval sends nothing until it's approved or denied.
• A reply copies the other agent's labels. After untrusted content, the sender's gated calls need approval.