@adapt-toolkit/a2adapt 0.7.0 → 0.8.0

package/dist/hooks/runner.js

@@ -100,9 +100,26 @@ function identityExists(name) {
     return false;
   }
 }
+function anyIdentityBound() {
+  let snap;
+  try {
+    snap = JSON.parse(fs.readFileSync(join(STATE_DIR, "bindings.json"), "utf8"));
+  } catch {
+    return false;
+  }
+  if (!Array.isArray(snap.bound) || snap.bound.length === 0) return false;
+  const pid = Number(snap.pid);
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
 function renderIdentityDirective(name, exists) {
   const bind = exists ? `call \`choose_identity({ name: "${name}" })\` to bind it to this session` : `it does not exist yet \u2014 call \`create_identity({ name: "${name}" })\` to create and bind it`;
-  return `a2adapt \u2014 this workspace is pinned to identity "${name}" (via ${IDENTITY_FILE}). Before other a2adapt work, ${bind}. Then arm a Monitor on the wake source \`a2adapt-mcp watch ${name}\` so new mail wakes you. Do this once, up front; if a different identity is already bound, prefer this pinned one.`;
+  return `a2adapt \u2014 this workspace is pinned to identity "${name}" (via ${IDENTITY_FILE}). Before other a2adapt work, ${bind}. Then arm a Monitor on the wake source \`a2adapt-mcp watch ${name}\` so new mail wakes you. Do this once, up front. The pin is the workspace default: if the user explicitly asks to use a different identity, bind that instead \u2014 the user's choice always wins. If choose_identity reports the identity is held by another session, do NOT retry with force \u2014 tell the user it is bound elsewhere and ask whether to forcibly rebind it to this session; only pass force=true after they confirm.`;
 }
 function sessionStart() {
   const raw = readStdin();
@@ -131,6 +148,26 @@ function sessionStart() {
     }
   });
 }
+function userPromptSubmit() {
+  const raw = readStdin();
+  let cwd = process.cwd();
+  if (raw) {
+    try {
+      const payload = JSON.parse(raw);
+      if (typeof payload.cwd === "string" && payload.cwd) cwd = payload.cwd;
+    } catch {
+    }
+  }
+  const pinned = findPinnedIdentity(cwd);
+  if (!pinned || anyIdentityBound()) return noop();
+  emit({
+    continue: true,
+    hookSpecificOutput: {
+      hookEventName: "UserPromptSubmit",
+      additionalContext: renderIdentityDirective(pinned, identityExists(pinned))
+    }
+  });
+}
 function main() {
   const kind = process.argv[2] ?? "";
   try {
@@ -138,6 +175,9 @@ function main() {
       case "session-start":
         sessionStart();
         return;
+      case "user-prompt-submit":
+        userPromptSubmit();
+        return;
       default:
         noop();
         return;

package/dist/index.js

@@ -22489,7 +22489,7 @@ function loadConfig() {
 }
 
 // src/index.ts
-var VERSION = true ? "0.7.0" : "0.0.0-dev";
+var VERSION = true ? "0.8.0" : "0.0.0-dev";
 var CONFIG = loadConfig();
 var STATE_DIR = CONFIG.stateDir;
 var BROKER_URL = CONFIG.brokerUrl;
@@ -22531,6 +22531,17 @@ var identities = /* @__PURE__ */ new Map();
 var sessionBinding = /* @__PURE__ */ new Map();
 var bindingOwner = /* @__PURE__ */ new Map();
 var evictedSessions = /* @__PURE__ */ new Set();
+var bindingsSnapshotPath = () => join2(STATE_DIR, "bindings.json");
+function persistBindings() {
+  try {
+    fs2.mkdirSync(STATE_DIR, { recursive: true });
+    const tmp = `${bindingsSnapshotPath()}.tmp`;
+    fs2.writeFileSync(tmp, JSON.stringify({ pid: process.pid, bound: [...bindingOwner.keys()] }));
+    fs2.renameSync(tmp, bindingsSnapshotPath());
+  } catch (err) {
+    log("failed to persist bindings snapshot:", String(err));
+  }
+}
 var identityDir = (name) => join2(STATE_DIR, name);
 var seedPath = (dir) => join2(dir, "identity.seed");
 var dataPath = (dir) => join2(dir, "state_data.bin");
@@ -22771,6 +22782,7 @@ async function bootWrapper() {
       }
     }
   }
+  persistBindings();
 }
 function resolveBound(sessionId) {
   if (evictedSessions.has(sessionId)) {
@@ -22784,6 +22796,7 @@ function resolveBound(sessionId) {
   if (!id) {
     sessionBinding.delete(sessionId);
     bindingOwner.delete(name);
+    persistBindings();
     return { error: `The bound identity "${name}" no longer exists. Choose another with choose_identity.` };
   }
   return { id };
@@ -22796,6 +22809,7 @@ function bindSession(sessionId, name) {
   sessionBinding.set(sessionId, name);
   bindingOwner.set(name, sessionId);
   evictedSessions.delete(sessionId);
+  persistBindings();
 }
 function renderContacts(v) {
   const out = [];
@@ -22879,7 +22893,7 @@ function createMcpServer(getSessionId) {
   );
   server.tool(
     "choose_identity",
-    "Bind an existing identity to this session so the messaging tools act as it. Binding is exclusive: if the identity is already in use by another session, this is declined unless force=true, which evicts the other session.",
+    "Bind an existing identity to this session so the messaging tools act as it. Binding is exclusive: if the identity is already in use by another session, this is declined unless force=true, which evicts the other session. Never pass force=true on your own initiative \u2014 ask the user and get an explicit confirmation first.",
     {
       name: external_exports.string().min(1).describe("Name of the identity to bind."),
       force: external_exports.boolean().default(false).describe("Evict another session that holds this identity.")
@@ -22892,7 +22906,10 @@ function createMcpServer(getSessionId) {
       const holder = bindingOwner.get(name);
       if (holder && holder !== sid) {
         if (!force) {
-          return textResult(`choose_identity failed: "${name}" is currently bound to another session. Retry with force=true to take it over.`, true);
+          return textResult(
+            `choose_identity declined: "${name}" is currently bound to another session. Do not retry with force=true on your own \u2014 tell the user the identity is in use elsewhere and ask whether to forcibly rebind it here; only retry with force=true after they explicitly confirm.`,
+            true
+          );
         }
         evictedSessions.add(holder);
         sessionBinding.delete(holder);
@@ -22947,6 +22964,7 @@ ${lines.join("\n")}`);
       if (holder) {
         bindingOwner.delete(name);
         sessionBinding.delete(holder);
+        persistBindings();
       }
       try {
         fs2.rmSync(id.dir, { recursive: true, force: true });
@@ -23234,6 +23252,7 @@ async function main() {
               if (name && bindingOwner.get(name) === sid) bindingOwner.delete(name);
               sessionBinding.delete(sid);
               evictedSessions.delete(sid);
+              persistBindings();
               log(`session ${sid.slice(0, 8)}\u2026 closed`);
             }
           };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adapt-toolkit/a2adapt",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "MCP server daemon for a2adapt — one native ADAPT wrapper hosting N self-sovereign identities, exposing secure agent-to-agent messaging tools over HTTP (Streamable HTTP). Run `a2adapt-mcp start`.",
   "type": "module",
   "license": "MIT",