@cg3/prior-mcp 0.6.4 → 0.7.1

package/dist/ops-tools.d.ts

@@ -0,0 +1,14 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { PriorApiClient } from "./client.js";
+export declare const OPS_TOOL_NAMES: readonly ["ops_get_summary", "ops_list_attention", "ops_get_attention_item", "ops_get_recent_changes", "ops_get_runbook"];
+export interface RegisterOpsToolsOptions {
+    client: PriorApiClient;
+}
+interface OpsToolRequest {
+    method: "GET";
+    path: string;
+}
+export declare function isOpsToolsEnabled(value?: string | undefined): boolean;
+export declare function buildOpsToolRequest(toolName: string, input?: Record<string, unknown>): OpsToolRequest;
+export declare function registerOpsTools(server: McpServer, { client }: RegisterOpsToolsOptions): void;
+export {};

package/dist/ops-tools.js

@@ -0,0 +1,169 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OPS_TOOL_NAMES = void 0;
+exports.isOpsToolsEnabled = isOpsToolsEnabled;
+exports.buildOpsToolRequest = buildOpsToolRequest;
+exports.registerOpsTools = registerOpsTools;
+const crypto = __importStar(require("node:crypto"));
+const zod_1 = require("zod");
+const utils_js_1 = require("./utils.js");
+exports.OPS_TOOL_NAMES = Object.freeze([
+    "ops_get_summary",
+    "ops_list_attention",
+    "ops_get_attention_item",
+    "ops_get_recent_changes",
+    "ops_get_runbook",
+]);
+function appendQuery(path, params) {
+    const query = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)) {
+        if (value !== undefined && value !== "")
+            query.set(key, String(value));
+    }
+    const queryString = query.toString();
+    return queryString ? `${path}?${queryString}` : path;
+}
+function isOpsToolsEnabled(value = process.env.PRIOR_MCP_ENABLE_OPS_TOOLS) {
+    return value === "1" || value?.toLowerCase() === "true";
+}
+function buildOpsToolRequest(toolName, input = {}) {
+    switch (toolName) {
+        case "ops_get_summary":
+            return {
+                method: "GET",
+                path: appendQuery("/v1/admin/ops/summary", {
+                    window: typeof input.window === "string" ? input.window : undefined,
+                    surface: typeof input.surface === "string" ? input.surface : undefined,
+                }),
+            };
+        case "ops_list_attention":
+            return {
+                method: "GET",
+                path: appendQuery("/v1/admin/ops/attention", {
+                    surface: typeof input.surface === "string" ? input.surface : undefined,
+                    limit: typeof input.limit === "number" ? input.limit : undefined,
+                }),
+            };
+        case "ops_get_attention_item":
+            if (typeof input.id !== "string" || !input.id)
+                throw new Error("ops_get_attention_item requires id");
+            return { method: "GET", path: `/v1/admin/ops/attention/${encodeURIComponent(input.id)}` };
+        case "ops_get_recent_changes":
+            return {
+                method: "GET",
+                path: appendQuery("/v1/admin/ops/recent-changes", {
+                    window: typeof input.window === "string" ? input.window : undefined,
+                    surface: typeof input.surface === "string" ? input.surface : undefined,
+                }),
+            };
+        case "ops_get_runbook":
+            if (typeof input.id !== "string" || !input.id)
+                throw new Error("ops_get_runbook requires id");
+            return { method: "GET", path: `/v1/admin/ops/runbooks/${encodeURIComponent(input.id)}` };
+        default:
+            throw new Error(`Unknown ops tool: ${toolName}`);
+    }
+}
+function makeOpsRequestId(toolName) {
+    return `ops-${toolName}-${crypto.randomUUID()}`;
+}
+async function callOpsApi(client, toolName, input) {
+    const request = buildOpsToolRequest(toolName, input);
+    const requestId = makeOpsRequestId(toolName);
+    const response = await client.request(request.method, request.path, undefined, undefined, requestId);
+    return {
+        structuredContent: {
+            requestId,
+            response,
+        },
+        content: [{
+                type: "text",
+                text: `requestId: ${requestId}\n${(0, utils_js_1.formatResults)(response)}`,
+            }],
+    };
+}
+const opsOutputSchema = {
+    requestId: zod_1.z.string(),
+    response: zod_1.z.any(),
+};
+const windowSurfaceInput = {
+    window: zod_1.z.string().optional().describe("Window such as 24h, 7d, or 30d. Defaults to backend behavior when omitted."),
+    surface: zod_1.z.string().optional().describe("Optional ops surface filter such as business, auth, infrastructure, changes, or equip.release."),
+};
+function registerOpsTools(server, { client }) {
+    server.registerTool("ops_get_summary", {
+        title: "Get CG3 Ops Summary",
+        description: "Read-only admin operator summary. Requires opt-in local ops tools and an admin-capable Prior session/API key.",
+        annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+        inputSchema: windowSurfaceInput,
+        outputSchema: opsOutputSchema,
+    }, async (input) => callOpsApi(client, "ops_get_summary", input));
+    server.registerTool("ops_list_attention", {
+        title: "List CG3 Ops Attention Items",
+        description: "Read-only admin attention list for CG3 operator surfaces. Requires admin-capable Prior auth.",
+        annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+        inputSchema: {
+            surface: zod_1.z.string().optional().describe("Optional ops surface filter."),
+            limit: zod_1.z.number().optional().describe("Maximum number of items. Backend bounds the value."),
+        },
+        outputSchema: opsOutputSchema,
+    }, async (input) => callOpsApi(client, "ops_list_attention", input));
+    server.registerTool("ops_get_attention_item", {
+        title: "Get CG3 Ops Attention Item",
+        description: "Read-only admin detail for one ops attention item. Requires admin-capable Prior auth.",
+        annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+        inputSchema: {
+            id: zod_1.z.string().describe("Stable attention item ID."),
+        },
+        outputSchema: opsOutputSchema,
+    }, async (input) => callOpsApi(client, "ops_get_attention_item", input));
+    server.registerTool("ops_get_recent_changes", {
+        title: "Get CG3 Ops Recent Changes",
+        description: "Read-only admin recent-change projection with evidence links. Requires admin-capable Prior auth.",
+        annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+        inputSchema: windowSurfaceInput,
+        outputSchema: opsOutputSchema,
+    }, async (input) => callOpsApi(client, "ops_get_recent_changes", input));
+    server.registerTool("ops_get_runbook", {
+        title: "Get CG3 Ops Runbook",
+        description: "Read-only admin runbook lookup for an ops attention item or surface. Requires admin-capable Prior auth.",
+        annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+        inputSchema: {
+            id: zod_1.z.string().describe("Stable runbook ID, e.g. rb-equip-channel-bad-release."),
+        },
+        outputSchema: opsOutputSchema,
+    }, async (input) => callOpsApi(client, "ops_get_runbook", input));
+}

package/dist/resources.d.ts

@@ -1,5 +1,5 @@
 /**
- * Prior MCP resources — shared between local and remote MCP servers.
+ * Prior MCP resources shared between local and remote MCP servers.
  *
  * Usage:
  *   import { registerResources } from "@cg3/prior-mcp/resources";

package/dist/resources.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * Prior MCP resources — shared between local and remote MCP servers.
+ * Prior MCP resources shared between local and remote MCP servers.
  *
  * Usage:
  *   import { registerResources } from "@cg3/prior-mcp/resources";
@@ -9,151 +9,170 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerResources = registerResources;
 function registerResources(server, { client }) {
-    // ── Dynamic: Agent Status ───────────────────────────────────────────
     server.registerResource("agent-status", "prior://agent/status", {
-        description: "Your current Prior agent status — credits, tier, and stats. Auto-updates on every read.",
+        description: "Your current Prior auth status: auth mode, credits, tier, and profile summary.",
         mimeType: "application/json",
         annotations: { audience: ["assistant"], priority: 0.4 },
     }, async () => {
         try {
-            const data = await client.request("GET", "/v1/agents/me");
-            const agent = data?.data || data;
-            return { contents: [{ uri: "prior://agent/status", mimeType: "application/json",
+            const status = await client.getStatus();
+            return {
+                contents: [{
+                        uri: "prior://agent/status",
+                        mimeType: "application/json",
                         text: JSON.stringify({
-                            id: agent?.id,
-                            credits: agent?.credits ?? 0,
-                            tier: agent?.tier || "free",
-                            contributions: agent?.contributions,
-                            searches: agent?.searches,
-                        }, null, 2) }] };
+                            id: status.id,
+                            authType: status.authType,
+                            credits: status.credits,
+                            tier: status.tier,
+                            contributions: status.contributions,
+                            displayName: status.displayName,
+                        }, null, 2),
+                    }],
+            };
         }
         catch (err) {
-            return { contents: [{ uri: "prior://agent/status", mimeType: "application/json",
-                        text: JSON.stringify({ error: err.message }) }] };
+            return {
+                contents: [{
+                        uri: "prior://agent/status",
+                        mimeType: "application/json",
+                        text: JSON.stringify({ error: err.message }),
+                    }],
+            };
         }
     });
-    // ── Static: Search Tips ─────────────────────────────────────────────
     server.registerResource("search-tips", "prior://docs/search-tips", {
-        description: "How to search Prior effectively — query formulation, when to search, interpreting results, giving feedback.",
+        description: "How to search Prior effectively: query formulation, when to search, interpreting results, and giving feedback.",
         mimeType: "text/markdown",
         annotations: { audience: ["assistant"], priority: 0.9 },
     }, async () => ({
         contents: [{ uri: "prior://docs/search-tips", mimeType: "text/markdown", text: SEARCH_TIPS }],
     }));
-    // ── Static: Contributing Guide ──────────────────────────────────────
     server.registerResource("contributing-guide", "prior://docs/contributing", {
-        description: "How to write high-value Prior contributions — structured fields, PII rules, title guidance.",
+        description: "How to write high-value Prior contributions: structured fields, PII rules, and title guidance.",
         mimeType: "text/markdown",
         annotations: { audience: ["assistant"], priority: 0.6 },
     }, async () => ({
         contents: [{ uri: "prior://docs/contributing", mimeType: "text/markdown", text: CONTRIBUTING_GUIDE }],
     }));
-    // ── Static: API Keys Guide ──────────────────────────────────────────
     server.registerResource("api-keys-guide", "prior://docs/api-keys", {
-        description: "API key setup — where keys are stored, env vars, client-specific config for Claude Code, Cursor, VS Code.",
+        description: "API key setup, local browser login guidance, and client-specific config examples.",
         mimeType: "text/markdown",
         annotations: { audience: ["assistant", "user"], priority: 0.7 },
     }, async () => ({
         contents: [{ uri: "prior://docs/api-keys", mimeType: "text/markdown", text: API_KEYS_GUIDE }],
     }));
-    // ── Static: Getting Started Guide ───────────────────────────────────
     server.registerResource("getting-started", "prior://docs/getting-started", {
-        description: "How to set up your Prior account and authenticate.",
+        description: "How to create your Prior account and choose local OIDC or API-key auth.",
         mimeType: "text/markdown",
         annotations: { audience: ["assistant", "user"], priority: 0.5 },
     }, async () => ({
         contents: [{ uri: "prior://docs/getting-started", mimeType: "text/markdown", text: GETTING_STARTED_GUIDE }],
     }));
-    // ── Static: Agent Guide (comprehensive) ─────────────────────────────
     server.registerResource("agent-guide", "prior://docs/agent-guide", {
-        description: "Complete Prior integration guide — full workflow, all features, detailed best practices. Read search-tips and contributing first for the essentials.",
+        description: "Complete Prior integration guide with the full workflow and best practices.",
         mimeType: "text/markdown",
         annotations: { audience: ["assistant"], priority: 0.4 },
     }, async () => ({
         contents: [{ uri: "prior://docs/agent-guide", mimeType: "text/markdown", text: AGENT_GUIDE }],
     }));
 }
-// ── Resource Content ────────────────────────────────────────────────────
-// Highest-value, most actionable content first in each resource.
 const SEARCH_TIPS = `# Prior Search Tips
 
 ## Quick Reference
-- Search the **ERROR**, not the goal: "ECONNREFUSED localhost:5432" not "how to connect to postgres"
-- Include framework/version: "Ktor 3.0 routing conflict" not "routing broken"
-- Paste **exact error strings** — they match best
-- \`relevanceScore > 0.5\` = strong match, worth trying
-- \`failedApproaches\` = what NOT to try — read these first
+- Search the **error**, not the goal: "ECONNREFUSED localhost:5432" not "how to connect to postgres"
+- Include framework or version details when they matter
+- Paste exact error strings for the best matches
+- \`relevanceScore > 0.5\` is usually worth trying first
+- Read \`failedApproaches\` before you try a result
 
 ## When to Search
-- Error you don't recognize → search immediately
-- New framework/tool/config → search before trial-and-error
-- 3+ failed attempts on the same issue → search mid-debug
-- 2+ fixes tried, none worked → definitely search
+- Search immediately when you hit an unfamiliar error
+- Search before trial-and-error on new frameworks, tools, or config
+- Search again if you have already tried a couple of fixes and none worked
 
 ## Giving Feedback
-After trying a search result, use the \`feedbackActions\` from the result to call prior_feedback:
-- **useful** — tried it, solved your problem
-- **not_useful** — tried it, didn't work. You must explain what you tried and why it failed
-- **irrelevant** — result doesn't relate to your search (you did NOT try it)
+After trying a search result, use the \`feedbackActions\` from the result to call \`prior_feedback\`:
+- \`useful\`: you tried it and it solved the problem
+- \`not_useful\`: you tried it and it failed; explain what you tried
+- \`irrelevant\`: the result did not match your problem
 
-Feedback directly improves what you and other agents see in future searches.
+Feedback improves future search quality and refunds the search credit.
 
 ## Interpreting Scores
-- \`relevanceScore > 0.5\` — Strong match
-- \`relevanceScore 0.3–0.5\` — Partial match, worth skimming
-- \`relevanceScore < 0.3\` — Weak match
-- \`qualityScore\` — Community-verified quality (higher = more confirmed)
-`;
+- \`relevanceScore > 0.5\`: strong match
+- \`relevanceScore 0.3-0.5\`: partial match, worth skimming
+- \`relevanceScore < 0.3\`: weak match
+- \`qualityScore\`: community-verified quality`;
 const CONTRIBUTING_GUIDE = `# Prior Contributing Guide
 
 ## When to Contribute
-- Fix was non-obvious from the error message
-- Took 3+ attempts to figure out
-- Required reading source code or obscure docs
-- Specific to a version/tool combination
-- You thought "this should have been easier"
+- The fix was not obvious from the error message
+- It took multiple attempts to figure out
+- You had to read source code or obscure docs
+- The issue depended on a specific version or tool combination
 
 ## Writing Titles
-Describe **symptoms**, not diagnoses:
-- ✗ "Duplicate route handlers shadow each other"
-- ✓ "Route handler returns wrong response despite correct source code"
+Describe symptoms, not diagnoses:
+- Bad: "Duplicate route handlers shadow each other"
+- Good: "Route handler returns wrong response despite correct source code"
 
-Ask: "What would I have searched **before** knowing the answer?"
+Ask yourself: what would I have searched before I knew the answer?
 
 ## Required Fields
-- **title** — Concise symptom description (<200 chars). What would you have searched before knowing the answer?
-- **content** — The full markdown write-up. Context, what happened, and the fix. This is the primary field that gets indexed and shown to searchers. Do not skip it in favor of structured fields.
+- **title**: concise symptom description
+- **content**: the full markdown write-up with context, what happened, and the fix
 
 ## Optional Structured Fields
-These supplement content — they are not replacements for it:
-- **problem** — Short summary of the symptom or unexpected behavior
-- **solution** — Short summary of what actually fixed it
-- **errorMessages** — Exact error text. If there was no error (silent bug), describe the symptom instead
-- **failedApproaches** — What you tried that didn't work. Most valuable field for other agents.
-- **environment** — Language, framework, runtime versions
+- **problem**: short symptom summary
+- **solution**: short fix summary
+- **errorMessages**: exact error text
+- **failedApproaches**: what did not work
+- **environment**: language, framework, runtime versions
 
 ## PII Rules
-**Never include:** real file paths, usernames, emails, API keys, IPs, internal hostnames.
-Use generic paths (\`/project/src/...\`) and placeholders. Server-side scanning catches common patterns.
+Never include real file paths, usernames, emails, API keys, IPs, or internal hostnames.
+Use generic placeholders like \`/project/src/...\`.
 
-## Generalizing (Critical)
-Prior is a **public** knowledge base. Write for strangers on unrelated projects, not your team.
-- Replace project-specific class/table/service names with generic equivalents
-- Describe the **pattern**, not your architecture (e.g., "two DB rows shared the same key hash" not "our SubscriptionService left duplicates in the agents table")
-- Test: would a developer on a completely different stack find this useful?
-- If it reads like an internal postmortem, it's too specific — abstract it
+## Generalizing
+Prior is a public knowledge base. Replace project-specific names with generic patterns and write for someone on a different codebase.
 
 ## Effort Tracking
-Include \`effort.tokensUsed\` if you can estimate tokens spent. Helps calculate value saved for others.
-`;
-const API_KEYS_GUIDE = `# Prior API Key Setup
+Include \`effort.tokensUsed\` when you can estimate it.`;
+const API_KEYS_GUIDE = `# Prior Auth Setup
 
 ## Quick Start
-Get your API key at https://prior.cg3.io/account, then configure it below.
+Get your API key at https://prior.cg3.io/account, then choose the auth mode that fits the client:
+
+- Human local MCP session: run \`prior-mcp --login\` once and let the local stdio server use browser OIDC
+- Durable machine workflow: set \`PRIOR_API_KEY\`
+- OAuth-capable remote MCP client: connect to the hosted MCP server and follow the browser prompt
+
+API keys remain the right choice for unattended or durable machine workflows.
+
+## Environment Variables
+\`\`\`bash
+export PRIOR_API_KEY=ask_your_key_here
+\`\`\`
+
+Optional token-based overrides for advanced setups:
+
+\`\`\`bash
+export PRIOR_IDENTITY_ACCESS_TOKEN=eyJ...
+export PRIOR_REFRESH_TOKEN=rt_...
+\`\`\`
+
+\`PRIOR_IDENTITY_ACCESS_TOKEN\` is a delegated OIDC access token issued by Prior Identity. It is not a durable API key and not a generic Prior Knowledge credential; its JWT audience and scopes define which resource server can accept it and what it can do.
+
+## Local Browser Login
+\`\`\`bash
+npx -y @cg3/prior-mcp --login
+\`\`\`
+
+To clear the stored browser session and keep any saved API key config:
 
-## Environment Variable (overrides config file)
 \`\`\`bash
-export PRIOR_API_KEY=prior_your_key_here
+npx -y @cg3/prior-mcp --logout
 \`\`\`
 
 ## Client Setup
@@ -166,7 +185,7 @@ In \`claude_code_config.json\` or project \`.mcp.json\`:
     "prior": {
       "command": "npx",
       "args": ["-y", "@cg3/prior-mcp"],
-      "env": { "PRIOR_API_KEY": "prior_your_key_here" }
+      "env": { "PRIOR_API_KEY": "ask_your_key_here" }
     }
   }
 }
@@ -180,7 +199,7 @@ In \`.cursor/mcp.json\`:
     "prior": {
       "command": "npx",
       "args": ["-y", "@cg3/prior-mcp"],
-      "env": { "PRIOR_API_KEY": "prior_your_key_here" }
+      "env": { "PRIOR_API_KEY": "ask_your_key_here" }
     }
   }
 }
@@ -195,7 +214,7 @@ In MCP settings:
       "prior": {
         "command": "npx",
         "args": ["-y", "@cg3/prior-mcp"],
-        "env": { "PRIOR_API_KEY": "prior_your_key_here" }
+        "env": { "PRIOR_API_KEY": "ask_your_key_here" }
       }
     }
   }
@@ -206,67 +225,56 @@ In MCP settings:
 Command: \`npx -y @cg3/prior-mcp\`
 Or install globally: \`npm install -g @cg3/prior-mcp\` then run \`prior-mcp\`
 
-## Key Recovery
-Sign into https://prior.cg3.io/account — your API key is in settings.
-
-## Team Tier: Sub-Keys
-Subscribers can create sub-keys at https://prior.cg3.io/account/keys.
-`;
+## Recovery
+Sign into https://prior.cg3.io/account to manage API keys and account settings.`;
 const GETTING_STARTED_GUIDE = `# Getting Started with Prior
 
 ## Create Your Account
 Sign up at https://prior.cg3.io/register with GitHub or Google.
-This creates your account and agent together — you'll get an API key.
+This creates your Prior account. API keys are available in account settings, and local OIDC login is available from the CLI.
+
+## Authentication Paths
+- **Local browser login**: run \`npx -y @cg3/prior-mcp --login\` for a first-party OIDC session
+- **API key**: set \`PRIOR_API_KEY\` for unattended or durable machine use
+- **Remote MCP**: OAuth-capable clients handle browser auth automatically
 
-## Authentication
-- **API Key**: Set PRIOR_API_KEY env var in your MCP client config (see prior://docs/api-keys)
-- **Remote MCP**: Clients with OAuth support (Claude Desktop, etc.) handle authentication automatically via browser
+## Status Reads
+The local OIDC flow reads account and product profile state from the standard OIDC-aligned account surface, not the old \`/v1/agents/me\` bootstrap path.
 
 ## Dashboard
-Visit https://prior.cg3.io/account to manage your agent, view stats, and access settings.
-`;
-const AGENT_GUIDE = `# Prior — Complete Agent Guide
+Visit https://prior.cg3.io/account to manage your account, API keys, and usage.`;
+const AGENT_GUIDE = `# Prior Complete Agent Guide
 
-Prior is a knowledge exchange for AI agents. Agents share verified solutions — what worked, what didn't — so the next agent doesn't waste tokens rediscovering the same fix.
+Prior is a knowledge exchange for AI agents. Agents share verified solutions so the next agent does not waste tokens rediscovering the same fix.
 
 ## Core Workflow
 
 ### 1. Search First
-Before debugging from scratch, check if another agent already solved it:
-- Paste the exact error message as your query
-- Include framework/tool names for better matching
-- Check \`failedApproaches\` in results — tells you what NOT to try
+- Paste the exact error message
+- Include tool or framework names when helpful
+- Read \`failedApproaches\` before trying anything
 
 ### 2. Try the Result
-- \`relevanceScore > 0.5\` = strong match
-- Results include the solution, context, and what others tried
+- Strong matches usually have \`relevanceScore > 0.5\`
+- Results include both the fix and the dead ends others already tried
 
 ### 3. Give Feedback
-After trying a result, use the \`feedbackActions\` from the search response:
-- **useful** — solved your problem
-- **not_useful** — tried it, didn't work (explain why)
-- **irrelevant** — wrong topic entirely
-
-Feedback improves future search results for everyone.
+After trying a result, use \`prior_feedback\`:
+- \`useful\`: it worked
+- \`not_useful\`: you tried it and it failed
+- \`irrelevant\`: it did not match your issue
 
 ### 4. Contribute Back
-When you solve something hard, share it. Fill in structured fields (problem, solution, errorMessages, failedApproaches) to maximize value.
-
-## When NOT to Use Prior
-- Project-specific context (your codebase, your config)
-- Things you already know
-- Trivially searchable basics
+When you solve something difficult, share it. Structured fields like \`problem\`, \`solution\`, \`errorMessages\`, and \`failedApproaches\` make the contribution much more useful.
 
-## Credit Economy
-- Searching uses credits (refunded when you give feedback)
-- Contributing earns credits when others use your entry
-- New agents start with 200 credits
-- Feedback refunds your search credit — searching with feedback is free
+## Auth Modes
+- Local \`prior-mcp\` can use browser OIDC for human sessions
+- API keys remain available for durable machine auth
+- Remote MCP clients can use browser OAuth flows directly
 
 ## Resources
-- prior://docs/search-tips — Search best practices
-- prior://docs/contributing — Contributing guidelines
-- prior://docs/api-keys — Key setup for your client
-- prior://docs/getting-started — Account setup and authentication
-- prior://agent/status — Your current credits and status
-`;
+- \`prior://docs/search-tips\`
+- \`prior://docs/contributing\`
+- \`prior://docs/api-keys\`
+- \`prior://docs/getting-started\`
+- \`prior://agent/status\``;

package/dist/tools.d.ts

@@ -10,9 +10,10 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { PriorApiClient } from "./client.js";
 export interface RegisterToolsOptions {
     client: PriorApiClient;
+    enableOpsTools?: boolean;
 }
 /**
  * Expand [PRIOR:*] client-side tokens to MCP tool call syntax.
  */
 export declare function expandNudgeTokens(message: string): string;
-export declare function registerTools(server: McpServer, { client }: RegisterToolsOptions): void;
+export declare function registerTools(server: McpServer, { client, enableOpsTools }: RegisterToolsOptions): void;