@aipermission/mcp 0.1.8 → 0.1.9

package/README.md

@@ -54,6 +54,7 @@ The generated MCP config contains a bearer token. Keep it private. For project-l
 - `get_request`
 - `list_requests`
 - `read_console`
+- `restart_console_session`
 - `send_message`
 - `list_file_transfers`
 - `get_file_transfer`
@@ -97,7 +98,7 @@ Supported clients:
 - `gemini`: `GEMINI.md`
 - `custom`: prints portable Markdown to stdout
 
-These instructions teach the agent how to poll `approval_pending` and `running` requests, read live console output, write short reasons, use explicit file transfer paths, and avoid printing secrets. The default installer uses the operator instruction bundled in the npm package; `--source` accepts local file paths only and rejects HTTP(S) sources.
+These instructions teach the agent how to poll `approval_pending` and `running` requests, handle `stale` approvals by sending a fresh request, read live console output, write short reasons, use explicit file transfer paths, and avoid printing secrets. The default installer uses the operator instruction bundled in the npm package; `--source` accepts local file paths only and rejects HTTP(S) sources.
 
 ## Security Boundary
 

package/dist/resources/aipermission-operator/SKILL.md

@@ -67,9 +67,11 @@ failed
 declined
 blocked
 error
+stale
 ```
 
 If the request is `declined`, read `user_note` and follow the user's correction.
+If the request is `stale`, the approval context changed before execution; send a fresh `exec` request with the current command and reason instead of trying to reuse the old approval.
 
 ## Running Flow
 
@@ -80,6 +82,13 @@ When `exec` or `get_request` returns `running`:
 3. Use `read_console(server_id)` between polls only when the token has `always_run` permission.
 4. Do not start another long-running command on the same server until the active request reaches a terminal status, unless the user explicitly asks.
 
+If the request appears stuck for an unusually long time and `read_console`
+shows no useful progress, ask the operator before recovery. When the operator
+agrees, call `restart_console_session(server_id)`. This closes the
+gateway-owned persistent console session and the next `exec` opens a fresh SSH
+session. Treat any canceled request as inconclusive and re-run only the minimal
+safe inspection needed.
+
 ## Message Flow
 
 Use `send_message(message, server_id?, session_id?)` for short operator-visible notes.

package/dist/server.js

@@ -72,6 +72,19 @@ server.tool(
   }
 );
 
+server.tool(
+  "restart_console_session",
+  "Restart the persistent console session for a server when it appears stuck. This closes the current gateway-owned console session and the next exec will open a fresh SSH session.",
+  {
+    server_id: z.number().int().positive().describe("Server id from list_servers."),
+  },
+  async ({ server_id }) => {
+    return jsonToolResult(() => apiPost("/api/mcp/console/restart", {
+      server_id,
+    }));
+  }
+);
+
 server.tool(
   "get_request",
   "Read an aipermission command request by id. Use this after exec returns approval_pending or running.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aipermission/mcp",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "mcpName": "io.github.aipermission/aipermission-mcp",
   "description": "Local-first MCP bridge for the aipermission gateway.",
   "license": "MIT",

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.aipermission/aipermission-mcp",
   "title": "AIPermission",
   "description": "Local-first MCP bridge for the AIPermission gateway.",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@aipermission/mcp",
-      "version": "0.1.8",
+      "version": "0.1.9",
       "transport": {
         "type": "stdio"
       }