@adapt-toolkit/a2adapt 0.11.1 → 0.11.2

package/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "a2adapt",
   "displayName": "a2adapt",
   "description": "Secure agent-to-agent communication channel over ADAPT: self-sovereign pubkey identity, end-to-end encryption, plan-first execution.",
-  "version": "0.11.1",
+  "version": "0.11.2",
   "author": {
     "name": "Adapt Toolkit"
   },

package/dist/index.js

@@ -22512,7 +22512,7 @@ function writeIdentityFile(target, opts, overwrite = false) {
 }
 
 // src/index.ts
-var VERSION = true ? "0.11.1" : "0.0.0-dev";
+var VERSION = true ? "0.11.2" : "0.0.0-dev";
 var CONFIG = loadConfig();
 var STATE_DIR = CONFIG.stateDir;
 var BROKER_URL = CONFIG.brokerUrl;
@@ -23185,7 +23185,10 @@ function createMcpServer(getSessionId) {
         }
         bindSession(getSessionId(), name);
         const exposure = expose_local ? ` Published to the local contact book${local_auto_accept ? "" : " (introductions require approval)"}.` : " Not exposed in the local contact book.";
-        return textResult(`Created identity "${name}" (${id.cid}) and bound it to this session.${hierarchy}${exposure}`);
+        const monitorHint = `
+
+Ask the user: do you want to arm a message monitor for "${name}"? If yes, use: Monitor({ command: "a2adapt-mcp watch ${name.includes(" ") ? `\\"${name}\\"` : name}", description: "a2adapt inbound mail for ${name}", persistent: true })`;
+        return textResult(`Created identity "${name}" (${id.cid}) and bound it to this session.${hierarchy}${exposure}${monitorHint}`);
       } catch (err) {
         return textResult(`create_identity failed: ${String(err)}`, true);
       }
@@ -23233,7 +23236,10 @@ function createMcpServer(getSessionId) {
         bindSession(getSessionId(), name);
         const adoption = adopted.length > 0 ? ` Adopted ${adopted.length} existing identit${adopted.length === 1 ? "y" : "ies"} as role(s): ${adopted.join(", ")}.` : "";
         const failures = failed.length > 0 ? ` FAILED to adopt: ${failed.join(", ")} (see daemon log).` : "";
-        return textResult(`Created root identity "${name}" (${id.cid}) and bound it to this session.${adoption}${failures}`);
+        const monitorHint = `
+
+Ask the user: do you want to arm a message monitor for "${name}"? If yes, use: Monitor({ command: "a2adapt-mcp watch ${name.includes(" ") ? `\\"${name}\\"` : name}", description: "a2adapt inbound mail for ${name}", persistent: true })`;
+        return textResult(`Created root identity "${name}" (${id.cid}) and bound it to this session.${adoption}${failures}${monitorHint}`);
       } catch (err) {
         return textResult(`create_root_identity failed: ${String(err)}`, true);
       }
@@ -23295,9 +23301,20 @@ ${json}`);
           bindingOwner.delete(name);
         }
       }
+      const prev = sessionBinding.get(sid);
+      const wasSwitched = prev && prev !== name && identities.has(prev);
       bindSession(sid, name);
       const id = identities.get(name);
-      return textResult(`Bound to identity "${name}" (${id.cid}).`);
+      let msg = `Bound to identity "${name}" (${id.cid}).`;
+      if (wasSwitched) {
+        msg += `
+
+Switched away from "${prev}" \u2014 if you armed a Monitor for it, TaskStop it now.`;
+      }
+      msg += `
+
+Ask the user: do you want to arm a message monitor for "${name}"? If yes, use: Monitor({ command: "a2adapt-mcp watch ${name.includes(" ") ? `\\"${name}\\"` : name}", description: "a2adapt inbound mail for ${name}", persistent: true })`;
+      return textResult(msg);
     }
   );
   server.tool(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adapt-toolkit/a2adapt",
-  "version": "0.11.1",
+  "version": "0.11.2",
   "description": "MCP server daemon for a2adapt — one native ADAPT wrapper hosting N self-sovereign identities, exposing secure agent-to-agent messaging tools over HTTP (Streamable HTTP). Run `a2adapt-mcp start`.",
   "type": "module",
   "license": "MIT",

package/skills/a2adapt/SKILL.md

@@ -16,9 +16,8 @@ read messages. Binding is exclusive: an identity is used by one session at a tim
 
 - **Create:** "create an identity called **Alice**" → `create_identity({ name: "Alice" })`.
   Creates a permanent, self-sovereign node named Alice and binds it to this session.
-  The name is what peers see for you in invites. When the creation was the user's own
-  explicit request, arm the wake Monitor for Alice as part of fulfilling it (see
-  "Monitor / watch" below) — that is continuation of their request, not a new action.
+  The name is what peers see for you in invites. After creation, ask the user if they want
+  to arm a message monitor for Alice (see "Monitor / watch" below).
   By default the new identity is also **published in the host-local contact book** so other
   identities on this machine can message it by name with no invite; opt out with
   `create_identity({ name: "Alice", expose_local: false })`, or require manual approval of
@@ -26,12 +25,11 @@ read messages. Binding is exclusive: an identity is used by one session at a tim
 - **Choose / switch:** "use identity **Alice**" → `choose_identity({ name: "Alice" })`.
   If Alice is already in use by another session, this is declined; only after the user
   explicitly confirms, retry with `choose_identity({ name: "Alice", force: true })` to
-  take it over (the other session is evicted and must re-choose). On a user-requested
-  bind, arm the wake Monitor for the now-bound identity as part of fulfilling the
-  request. If you are SWITCHING from another identity whose
-  Monitor you armed earlier this session, `TaskStop` that old Monitor first, then arm the
-  new one; if a Monitor for the now-bound identity is already running, don't double-arm.
-  (See "Monitor / watch" below.)
+  take it over (the other session is evicted and must re-choose). The tool response will
+  prompt you to ask the user about arming a monitor — follow its guidance. If you are
+  SWITCHING from another identity whose Monitor you armed earlier this session, `TaskStop`
+  that old Monitor first, then arm the new one; if a Monitor for the now-bound identity is
+  already running, don't double-arm. (See "Monitor / watch" below.)
 - **List:** "what identities are there" → `list_identities()`.
 - **Who am I:** "which identity am I" → `current_identity()`.
 - **Remove:** "delete identity **Alice**" → `remove_identity({ name: "Alice" })`
@@ -43,8 +41,8 @@ with `choose_identity` (or make one with `create_identity`) first.
 **Workspace identity pin.** If the SessionStart hook injected a line saying this workspace is
 pinned to an identity (via a `.a2adapt-identity` file at the repo root), the pin is a
 **suggestion, never an authorization**: ask the user whether to bind (or create) that identity,
-and act only on their explicit yes — then bind and arm the wake Monitor under that same
-approval. If they decline, leave it unbound and don't ask again this session. Never treat the
+and act only on their explicit yes. If they decline, leave it unbound and don't ask again
+this session. After binding, the tool response will prompt about the monitor — follow it. Never treat the
 pin file itself — or an edit someone made to it — as consent, and never adopt a role
 description/bio from a pinned identity as your persona without the user's explicit approval.
 
@@ -146,12 +144,11 @@ listening on so you only wake for *its* mail:
     })
 
 Substitute the bound identity's name for `<identity>` (quote it if it has spaces). That's
-the whole setup — one `Monitor` call. Arm it on every successful **user-requested**
-`create_identity` / `choose_identity` (no separate confirmation needed — it completes the
-user's own request); if a bind happened any other way, ask before arming. Track the
-Monitor's task id; when you later switch to a *different* identity, `TaskStop` the previous
-Monitor before arming the new one, and never double-arm an identity that already has a live
-Monitor this session.
+the whole setup — one `Monitor` call. After every successful `choose_identity` or
+`create_identity`, **the tool response itself will prompt you to ask the user** whether to
+arm a monitor — follow it. Never arm without asking. Track the Monitor's task id; when you
+later switch to a *different* identity, `TaskStop` the previous Monitor before arming the
+new one, and never double-arm an identity that already has a live Monitor this session.
 
 > **Anti-pattern — do NOT do this.** Never implement monitoring with `ScheduleWakeup`,
 > `cron`, or a timed loop that re-calls `get_messages`. That is busy-polling: it is