@50arms/platform-mcp 0.1.437 → 0.1.438

package/dist/heartbeat-reporter.js

@@ -33,7 +33,8 @@ export class HeartbeatReporter {
     // DX-5088 - when the heartbeat first failed to land in the current outage (across every reconnect); null while the last one landed.
     outageSince = null;
     outageAnnounced = false;
-    // DX-4418 - the stop notice for a revoked key goes out once; every later beat is refused the same way.
+    // DX-4418 - the stop notice for a revoked key goes out once per revocation; every later beat is refused the same way. DX-6894: a beat the
+    // dashboard accepts again (a person signed the session back in) re-arms it, so a second revocation is announced too.
     revocationAnnounced = false;
     constructor(deps, transcriptPath) {
         this.deps = deps;
@@ -71,6 +72,8 @@ export class HeartbeatReporter {
             const answer = await sendHeartbeat(this.deps.auth(), this.deps.http, this.deps.connection(), stats, title, statsHeld);
             if (answer.landed)
                 this.dashboardTitle = answer.title ?? undefined;
+            if (answer.landed && answer.revocation === null)
+                this.revocationAnnounced = false;
             // DX-4418 - a person revoked this session's key: tell the session to stop, at once and only once. Its next
             // dashboard call says the same.
             if (answer.revocation !== null && !this.revocationAnnounced) {

package/dist/index.js

@@ -908,11 +908,20 @@ strictTool("plan_connect",
     'The `naming` block\'s exact `{Name}: PLAN-NNN {short title}`, after renaming this thread. Omit on the first connect.'),
     assignment_id: z.number().int().positive().optional().describe("The assignment this connect answers, when a person's assignment message names one. Refused `assignment_ended` once it is over: then do nothing more about it."),
     disconnect: z.boolean().optional().describe("true = leave `plan_id` (your current plan); no `title`."),
+    person_sign_in: z
+        .boolean()
+        .optional()
+        .describe(
+    // DX-6894 (DEC-589): set only by the plugin band when a PERSON presses its Sign in; the one call that leaves a revoked key's stop.
+    "Set only by the plugin's Sign in button when a person presses it; an agent never sets it. On a session whose key a person revoked it lifts the stop and starts a new access request a person must approve; any call without it still answers the stop."),
 }, 
 // DX-2862 — the connect is also the moment the session's connection record is written for `restart_notice` and the listener reminder: of the
 // dashboard MCP servers a session may have configured, the one that connected the plan is the one whose credential they
 // must resolve (the relay needs none of this: it lives in each server, with that server's own credential).
 async (args) => {
+    // DX-6894 — a person's Sign in press leaves the revoked stop; every call without it still answers that stop.
+    if (args.person_sign_in === true)
+        access.personSignIn();
     // DX-4390 — a leave names the plan it leaves, and needs a key like any other call.
     if (args.disconnect === true && args.plan_id === undefined) {
         return haltResult("plan_connect: `disconnect: true` needs `plan_id`, the plan this session is currently on");

package/dist/machine-toolkit.js

@@ -250,7 +250,7 @@ function resolveToolkitVersion(stamped, readManifest) {
   return stamped ?? readManifest();
 }
 var readOwnManifest = () => JSON.parse(readFileSync2(new URL("../../package.json", import.meta.url), "utf8")).version;
-var TOOLKIT_VERSION = resolveToolkitVersion(false ? void 0 : "0.1.437", readOwnManifest);
+var TOOLKIT_VERSION = resolveToolkitVersion(false ? void 0 : "0.1.438", readOwnManifest);
 function envelope(now) {
   return { contract_version: CONTRACT_VERSION, toolkit_version: TOOLKIT_VERSION, profile: PROFILE, measured_at: now.toISOString() };
 }

package/dist/session-access.js

@@ -8,10 +8,11 @@
  *                   (`session-key.ts`) and a 401 on it deletes the file (`dropKey`).
  *   - signed out    no credential. Every tool but `plan_connect` halts; `plan_connect` asks.
  *
- * DX-4418: a fourth state, REVOKED, ends all three for good. The dashboard answers `401 key_revoked` to a key a person revoked
- * (as opposed to one that lapsed); this object then remembers it for the life of the process, every dashboard tool (and
- * `plan_connect`) returns the one stop halt (`key-revoked-halt.ts`), and no new access request is made. A session's key file is
- * deleted; a dispatch's credential is left to its dispatch, but the halt is the same.
+ * DX-4418: a fourth state, REVOKED, ends all three. The dashboard answers `401 key_revoked` to a key a person revoked
+ * (as opposed to one that lapsed); this object then remembers it, every dashboard tool (and `plan_connect`) returns the one stop
+ * halt (`key-revoked-halt.ts`), and no new access request is made. A session's key file is deleted; a dispatch's credential is
+ * left to its dispatch, but the halt is the same. DX-6894: the one way out is `personSignIn`, the call a PERSON's Sign in press
+ * makes (`plan_connect` with `person_sign_in: true`); nothing an agent calls lifts the stop.
  *
  * ASKING NEVER BLOCKS FOR MINUTES. The first signed-out `plan_connect` posts the request and
  * answers at once with the approval URL and confirm code. From then on THIS object polls claim in
@@ -69,7 +70,7 @@ const notReady = (answer, isError, halt) => ({
 export class SessionAccess {
     deps;
     credential;
-    // DX-4418: set once the dashboard says a person revoked the key; never cleared (a restarted server is a new process).
+    // DX-4418: set once the dashboard says a person revoked the key. Only `personSignIn` clears it (DX-6894); a restarted server is a new process.
     revoked = null;
     pending = null;
     // DX-4390: two concurrent signed-out plan_connect calls must not each post a request.
@@ -105,6 +106,19 @@ export class SessionAccess {
     revokedHalt() {
         return this.revoked === null ? null : keyRevokedHalt(this.revoked.revocation, this.revoked.dispatched);
     }
+    /**
+     * DX-6894 (DEC-589): a person pressed Sign in on a session whose key a person revoked: leave the revoked state so the next ask starts a
+     * fresh access request, which a person must approve. Only a session's own key can be signed in again: a dispatch's credential is the
+     * dispatch's, so its stop stays. True when the revoked state was left; false when the session was not revoked or holds a dispatch
+     * credential (then nothing changes).
+     */
+    personSignIn() {
+        if (this.revoked === null || this.credential !== null)
+            return false;
+        this.deps.log?.(`[platform-mcp] a person pressed Sign in on a revoked session (revoked by ${this.revoked.revocation.revokedBy} at ${this.revoked.revocation.revokedAt}): asking for access again`);
+        this.revoked = null;
+        return true;
+    }
     /**
      * DX-4418: a dashboard answer that says a person revoked the key behind it: remembered for good (a session's key file is
      * deleted, a dispatch's credential is left to its dispatch) and answered as the stop halt. Null for every other answer.
@@ -196,7 +210,7 @@ export class SessionAccess {
         return run;
     }
     async ensureAccessNow(title) {
-        // DX-4418: a person revoked this session's access; it never asks again.
+        // DX-4418: a person revoked this session's access; it asks again only after `personSignIn` (DX-6894).
         const revokedHalt = this.revokedHalt();
         if (revokedHalt !== null)
             return notReady({ state: "access_revoked", instruction: revokedHalt }, true, revokedHalt);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@50arms/platform-mcp",
-  "version": "0.1.437",
+  "version": "0.1.438",
   "description": "Stdio MCP server fronting the 50 Arms dashboard API for agents (operator sessions and dispatched workers alike): the generic 50arms_api/50arms_api_list/50arms_api_spec tools reach any route the caller's credential may call, plus dedicated agent-specific tools (plan_connect, request_permission, attach_file, and 50arms_slack_reply) (DX-3465, PLN-11 R-25).",
   "license": "MIT",
   "type": "module",