@aipermission/mcp 0.2.24 → 0.2.25

package/README.md

@@ -122,6 +122,13 @@ sensitive application data, and offset changes can replay or skip records, so
 keep these actions in Prompt mode unless direct execution is intentional. If a
 publish has an unknown delivery outcome, inspect before retrying.
 
+For S3, discover bounded object actions, temporary URL actions, object-version
+controls, and bucket lifecycle actions through `get_connector_actions`. Signed
+URLs are bearer credentials limited to one key and at most one hour. Read the
+current lifecycle policy before changing it: replacement and deletion affect
+the complete policy and are destructive. Keep version deletion and lifecycle
+changes in Prompt unless direct execution is deliberate.
+
 For Docker, call `get_connector_actions(target_ref)` to discover bounded
 actions such as `docker_version`, `list_containers`, `list_images`,
 `list_networks`, `list_volumes`, `inspect_container`, `container_logs`,

package/dist/resources/aipermission-operator/SKILL.md

@@ -203,6 +203,19 @@ prefer this sequence:
    operator explicitly approved replacement.
 7. Treat `delete_object` as destructive and ask for explicit confirmation if
    approval mode does not already provide it.
+8. Use `presign_download` and `presign_upload` only for one exact object key
+   and keep expiry between 60 and 3600 seconds. The returned URL is a temporary
+   bearer credential. When an upload result includes `required_headers`, send
+   every listed header unchanged; no-overwrite URLs require the signed
+   `If-None-Match: *` header.
+9. Use `list_object_versions` before `restore_object_version` or
+   `delete_object_version`. Restoring creates a new current version; deleting
+   an exact version or delete marker is permanent.
+10. Read `get_bucket_lifecycle` before changing retention. The bounded
+    `replace_bucket_lifecycle` action replaces every existing rule with one
+    explicit rule; `delete_bucket_lifecycle` removes the complete policy.
+11. Keep lifecycle replacement, lifecycle deletion, and version deletion in
+    Prompt unless the operator deliberately trusts that exact workflow.
 
 Object content may contain secrets or customer data. Avoid downloading or
 echoing object contents unless the operator asked for that exact object.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aipermission/mcp",
-  "version": "0.2.24",
+  "version": "0.2.25",
   "mcpName": "io.github.aipermission/aipermission-mcp",
   "description": "Local-first MCP bridge for the aipermission gateway.",
   "license": "AGPL-3.0-only",

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.aipermission/aipermission-mcp",
   "title": "AIPermission",
   "description": "Local-first MCP bridge for the AIPermission gateway.",
-  "version": "0.2.24",
+  "version": "0.2.25",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@aipermission/mcp",
-      "version": "0.2.24",
+      "version": "0.2.25",
       "transport": {
         "type": "stdio"
       }