@aipermission/mcp 0.2.23 → 0.2.25

package/README.md

@@ -122,6 +122,13 @@ sensitive application data, and offset changes can replay or skip records, so
 keep these actions in Prompt mode unless direct execution is intentional. If a
 publish has an unknown delivery outcome, inspect before retrying.
 
+For S3, discover bounded object actions, temporary URL actions, object-version
+controls, and bucket lifecycle actions through `get_connector_actions`. Signed
+URLs are bearer credentials limited to one key and at most one hour. Read the
+current lifecycle policy before changing it: replacement and deletion affect
+the complete policy and are destructive. Keep version deletion and lifecycle
+changes in Prompt unless direct execution is deliberate.
+
 For Docker, call `get_connector_actions(target_ref)` to discover bounded
 actions such as `docker_version`, `list_containers`, `list_images`,
 `list_networks`, `list_volumes`, `inspect_container`, `container_logs`,
@@ -148,8 +155,10 @@ disclose secrets. Never automatically retry `submission_unknown`.
 
 Connector responses can include `approval_pending` or `running`. Poll
 `get_connector_action_request(request_id)` until the request reaches a terminal
-status. MCP tool responses never include file contents, gateway temporary paths,
-archive staging paths, or local upload contents.
+status. `outcome_unknown` is terminal and means the gateway could not prove the
+remote outcome after interruption; inspect target state or ask the operator
+before retrying. MCP tool responses never include file contents, gateway
+temporary paths, archive staging paths, or local upload contents.
 
 ## Operator Skill
 
@@ -172,8 +181,9 @@ Supported clients:
 
 These instructions teach the agent how to discover connector targets, poll
 `approval_pending` and `running` connector action requests, handle `stale`
-approvals by sending a fresh request, write short reasons, use explicit file
-transfer paths, and avoid printing secrets. The default installer uses the
+approvals by sending a fresh request, avoid blind retries for `outcome_unknown`,
+write short reasons, use explicit file transfer paths, and avoid printing
+secrets. The default installer uses the
 operator instruction bundled in the npm package; `--source` accepts local file
 paths only and rejects HTTP(S) sources.
 

package/dist/resources/aipermission-operator/SKILL.md

@@ -104,6 +104,7 @@ declined
 blocked
 error
 stale
+outcome_unknown
 ```
 
 If the request is `declined`, read the note/error and follow the user's
@@ -111,6 +112,11 @@ correction. If the request is `stale`, the approval context changed before
 execution; send a fresh `call_connector_action` request with the current target,
 action, input, and reason.
 
+If the request is `outcome_unknown`, do not automatically retry it. The gateway
+lost definitive lifecycle state after execution may have started. Inspect the
+target with a safe read action when possible, or ask the operator to decide
+whether retrying is safe.
+
 ## Running Flow
 
 When `call_connector_action` or `get_connector_action_request` returns
@@ -197,6 +203,19 @@ prefer this sequence:
    operator explicitly approved replacement.
 7. Treat `delete_object` as destructive and ask for explicit confirmation if
    approval mode does not already provide it.
+8. Use `presign_download` and `presign_upload` only for one exact object key
+   and keep expiry between 60 and 3600 seconds. The returned URL is a temporary
+   bearer credential. When an upload result includes `required_headers`, send
+   every listed header unchanged; no-overwrite URLs require the signed
+   `If-None-Match: *` header.
+9. Use `list_object_versions` before `restore_object_version` or
+   `delete_object_version`. Restoring creates a new current version; deleting
+   an exact version or delete marker is permanent.
+10. Read `get_bucket_lifecycle` before changing retention. The bounded
+    `replace_bucket_lifecycle` action replaces every existing rule with one
+    explicit rule; `delete_bucket_lifecycle` removes the complete policy.
+11. Keep lifecycle replacement, lifecycle deletion, and version deletion in
+    Prompt unless the operator deliberately trusts that exact workflow.
 
 Object content may contain secrets or customer data. Avoid downloading or
 echoing object contents unless the operator asked for that exact object.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aipermission/mcp",
-  "version": "0.2.23",
+  "version": "0.2.25",
   "mcpName": "io.github.aipermission/aipermission-mcp",
   "description": "Local-first MCP bridge for the aipermission gateway.",
   "license": "AGPL-3.0-only",

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.aipermission/aipermission-mcp",
   "title": "AIPermission",
   "description": "Local-first MCP bridge for the AIPermission gateway.",
-  "version": "0.2.23",
+  "version": "0.2.25",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@aipermission/mcp",
-      "version": "0.2.23",
+      "version": "0.2.25",
       "transport": {
         "type": "stdio"
       }