@agentvalet/mcp-server 0.2.2 → 0.2.4

package/dist/index.js

@@ -129,7 +129,7 @@ const AGENT_STATUS_TOOL = {
 };
 const AUTHZEN_EVALUATE_TOOL = {
     name: "authzen_evaluate",
-    description: "authzen_evaluate: Evaluate whether this agent has access to a specific platform scope.\nInput: platform_id (string), scope (string).\nReturns: decision (boolean), reason (\"approved\"|\"denied\"|\"revoked\"|\"scope_not_granted\").\nAuth: None.",
+    description: "authzen_evaluate: Evaluate whether this agent has access to a specific platform scope. Call this BEFORE use_platform when you want to pre-check without making the upstream call.\nInput: platform_id (string), scope (string).\nReturns: decision (boolean), reason (\"approved\"|\"denied\"|\"revoked\"|\"scope_not_granted\").\nAuth: Bearer agent JWT (sent automatically by this MCP server).",
     inputSchema: {
         type: "object",
         properties: {
@@ -145,6 +145,45 @@ const AUTHZEN_EVALUATE_TOOL = {
         required: ["platform_id", "scope"],
     },
 };
+const REPORT_SELF_DIAGNOSTIC_TOOL = {
+    name: "report_self_diagnostic",
+    description: "report_self_diagnostic: Lodge a self-report (error/warning/info) with the AgentValet owner. Use after a use_platform error returns a report_hint, OR proactively when you encounter a problem the user should know about.\nInput: severity (debug|info|warn|error|critical), message (string, required, max 4096 bytes), code (string, optional, max 128 chars), platform (string, optional), endpoint (string, optional), correlation_id (uuid string, optional — copy from the failing call's report_hint to stitch this report to the broker-side audit row), context (object, optional, JSON-serialised must be < 16 KiB).\nReturns: { id, received_at } on success.\nAuth: Bearer agent JWT (sent automatically).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            severity: {
+                type: "string",
+                enum: ["debug", "info", "warn", "error", "critical"],
+                description: "Severity level. error/critical trigger an owner notification.",
+            },
+            message: {
+                type: "string",
+                description: "One-sentence agent narrative describing what happened.",
+            },
+            code: {
+                type: "string",
+                description: "Optional short machine code (e.g. 'permission_denied').",
+            },
+            platform: {
+                type: "string",
+                description: "Optional platform id this report relates to.",
+            },
+            endpoint: {
+                type: "string",
+                description: "Optional endpoint that failed.",
+            },
+            correlation_id: {
+                type: "string",
+                description: "Optional UUID — copy from a use_platform error's report_hint to stitch this report to the audit row.",
+            },
+            context: {
+                type: "object",
+                description: "Optional structured context (request params, error details). Avoid secrets.",
+            },
+        },
+        required: ["severity", "message"],
+    },
+};
 // TODO: intent_resolve tool — planned for future release
 // ---------------------------------------------------------------------------
 // MCP server setup
@@ -157,6 +196,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         AGENT_REGISTER_TOOL,
         AGENT_STATUS_TOOL,
         AUTHZEN_EVALUATE_TOOL,
+        REPORT_SELF_DIAGNOSTIC_TOOL,
     ],
 }));
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
@@ -207,6 +247,12 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         }
         return await handleAuthzenEvaluate(args.platform_id, args.scope);
     }
+    if (name === "report_self_diagnostic") {
+        if (!args || typeof args.severity !== "string" || typeof args.message !== "string") {
+            return errorContent("Invalid or missing arguments: severity and message are required");
+        }
+        return await handleReportSelfDiagnostic(args);
+    }
     return {
         content: [{ type: "text", text: `Unknown tool: ${name}` }],
         isError: true,
@@ -326,9 +372,8 @@ async function handleAuthzenEvaluate(platformId, scope) {
     };
     let response;
     try {
-        response = await fetchWithTimeout(`${PROXY_URL}/v1/authzen/access`, {
+        response = await fetchWithAuth(`${PROXY_URL}/v1/authzen/access`, {
             method: "POST",
-            headers: { "Content-Type": "application/json" },
             body: JSON.stringify(authzenBody),
         });
     }
@@ -340,6 +385,35 @@ async function handleAuthzenEvaluate(platformId, scope) {
         return errorContent(`Proxy error ${response.status}: ${body}`);
     return { content: [{ type: "text", text: body }] };
 }
+async function handleReportSelfDiagnostic(args) {
+    if (AGENT_PRIVATE_KEY_RAW === null) {
+        await notifyBindSecret();
+        return pendingFirstCallResponse();
+    }
+    // Whitelist body fields — never forward owner_id/agent_id (proxy derives those from JWT).
+    const body = {
+        severity: args.severity,
+        message: args.message,
+    };
+    for (const k of ["code", "platform", "endpoint", "correlation_id", "context"]) {
+        if (args[k] !== undefined)
+            body[k] = args[k];
+    }
+    let response;
+    try {
+        response = await fetchWithAuth(`${PROXY_URL}/v1/agents/self/diagnostics`, {
+            method: "POST",
+            body: JSON.stringify(body),
+        });
+    }
+    catch (err) {
+        return errorContent(`Network error: ${err instanceof Error ? err.message : err}`);
+    }
+    const text = await response.text();
+    if (!response.ok)
+        return errorContent(`Proxy error ${response.status}: ${text}`);
+    return { content: [{ type: "text", text }] };
+}
 // ---------------------------------------------------------------------------
 // Connect transport
 // ---------------------------------------------------------------------------

package/dist/instructions.js

@@ -13,5 +13,6 @@ Tool selection:
 Response handling:
 - If \`use_platform\` returns \`pending_approval\`, wait — do not retry. The owner will approve out of band.
 - Do not retry a denied call with a different scope.
+- If a \`use_platform\` error response includes a \`report_hint\` block, you may briefly ask the user "Want me to lodge this with your AgentValet owner?" — on yes, call \`report_self_diagnostic\` with a one-sentence narrative plus the \`correlation_id\` from the hint so the owner can investigate.
 
 Read scopes are auto-approved. Write scopes may require approval. Destructive scopes always require approval.`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/mcp-server",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "AgentValet MCP server — lets AI agents call approved platforms via the AgentValet proxy",
   "type": "module",
   "main": "dist/index.js",