@aipermission/mcp 0.2.24 → 0.2.26

package/README.md

@@ -122,6 +122,13 @@ sensitive application data, and offset changes can replay or skip records, so
 keep these actions in Prompt mode unless direct execution is intentional. If a
 publish has an unknown delivery outcome, inspect before retrying.
 
+For S3, discover bounded object actions, temporary URL actions, object-version
+controls, and bucket lifecycle actions through `get_connector_actions`. Signed
+URLs are bearer credentials limited to one key and at most one hour. Read the
+current lifecycle policy before changing it: replacement and deletion affect
+the complete policy and are destructive. Keep version deletion and lifecycle
+changes in Prompt unless direct execution is deliberate.
+
 For Docker, call `get_connector_actions(target_ref)` to discover bounded
 actions such as `docker_version`, `list_containers`, `list_images`,
 `list_networks`, `list_volumes`, `inspect_container`, `container_logs`,

package/dist/resources/aipermission-operator/SKILL.md

@@ -25,7 +25,7 @@ Before acting:
 2. Pick the relevant `target_ref`.
 3. Call `get_connector_help(target_ref)` the first time you use that connector.
 4. Call `get_connector_actions(target_ref)` and choose the narrowest action.
-5. Call `call_connector_action(target_ref, action_name, input, reason)`.
+5. Call `call_connector_action(target_ref, action_name, input, reason, idempotency_key)`.
 
 If no target is visible, say that the current token has no accessible connector
 targets. A target can be absent because its project is disabled for the token or
@@ -41,6 +41,11 @@ profile. Treat action errors as the current reachability/authorization signal.
 ## Reasons
 
 Every `call_connector_action` should include a short `reason`.
+Use one stable, unique `idempotency_key` for each logical action. Preserve that
+key while retrying an uncertain call. Never reuse it for a different target,
+action, input, or reason; the gateway rejects mismatched reuse.
+Blocked and missing-permission outcomes are also replayed. After the operator
+changes permission, use a new key for the new logical attempt.
 
 Good reasons:
 
@@ -203,6 +208,19 @@ prefer this sequence:
    operator explicitly approved replacement.
 7. Treat `delete_object` as destructive and ask for explicit confirmation if
    approval mode does not already provide it.
+8. Use `presign_download` and `presign_upload` only for one exact object key
+   and keep expiry between 60 and 3600 seconds. The returned URL is a temporary
+   bearer credential. When an upload result includes `required_headers`, send
+   every listed header unchanged; no-overwrite URLs require the signed
+   `If-None-Match: *` header.
+9. Use `list_object_versions` before `restore_object_version` or
+   `delete_object_version`. Restoring creates a new current version; deleting
+   an exact version or delete marker is permanent.
+10. Read `get_bucket_lifecycle` before changing retention. The bounded
+    `replace_bucket_lifecycle` action replaces every existing rule with one
+    explicit rule; `delete_bucket_lifecycle` removes the complete policy.
+11. Keep lifecycle replacement, lifecycle deletion, and version deletion in
+    Prompt unless the operator deliberately trusts that exact workflow.
 
 Object content may contain secrets or customer data. Avoid downloading or
 echoing object contents unless the operator asked for that exact object.

package/dist/server.js

@@ -69,13 +69,15 @@ server.tool(
     action_name: z.string().min(1).describe("Action name from get_connector_actions."),
     input: z.record(z.unknown()).optional().describe("Connector-specific action input."),
     reason: z.string().optional().describe("Why this connector action is needed."),
+    idempotency_key: z.string().min(1).max(128).optional().describe("Caller-stable key that makes retries return the original request without running twice."),
   },
-  async ({ target_ref, action_name, input, reason }) => {
+  async ({ target_ref, action_name, input, reason, idempotency_key }) => {
     return jsonToolResult(() => apiPost("/api/mcp/connector-actions/call", {
       target_ref,
       action_name,
       input: input || {},
       reason: reason || "",
+      idempotency_key,
     }));
   }
 );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aipermission/mcp",
-  "version": "0.2.24",
+  "version": "0.2.26",
   "mcpName": "io.github.aipermission/aipermission-mcp",
   "description": "Local-first MCP bridge for the aipermission gateway.",
   "license": "AGPL-3.0-only",

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.aipermission/aipermission-mcp",
   "title": "AIPermission",
   "description": "Local-first MCP bridge for the AIPermission gateway.",
-  "version": "0.2.24",
+  "version": "0.2.26",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@aipermission/mcp",
-      "version": "0.2.24",
+      "version": "0.2.26",
       "transport": {
         "type": "stdio"
       }