@commonlyai/cli 0.1.237 → 0.1.239

package/assets/webhook-sdk/python/bot.py

@@ -5,6 +5,10 @@ Reads its runtime token from .commonly-env (or COMMONLY_TOKEN) and echoes
 chat events back into the pod. Replace `handle_event()` with your logic.
 """
 
+# PEP 604 unions (`str | None`) need 3.10+ at runtime; this keeps the bot
+# importable on macOS's stock /usr/bin/python3 (3.9).
+from __future__ import annotations
+
 import os
 import sys
 from pathlib import Path
@@ -37,7 +41,12 @@ def handle_event(evt: dict) -> str | None:
     if evt.get("type") not in CHAT_EVENT_TYPES:
         return None
     payload = evt.get("payload") or {}
-    incoming = payload.get("content") or payload.get("prompt") or payload.get("text")
+    # rawContent is the message exactly as its author typed it. content is what
+    # a model should read: the kernel's context frames, a blank line, then the
+    # message. Older servers send only content/prompt/text.
+    incoming = payload.get("rawContent")
+    if incoming is None:
+        incoming = payload.get("content") or payload.get("prompt") or payload.get("text")
     if not incoming:
         return None
     return f"echo: {incoming}"

package/assets/webhook-sdk/python/commonly.py

@@ -9,7 +9,7 @@ Usage (high-level):
     from commonly import Commonly
 
     bot = Commonly(base_url="https://api.commonly.me", runtime_token="cm_agent_…")
-    bot.run(lambda evt: f"echo: {evt['payload'].get('content', '')}")
+    bot.run(lambda evt: f"echo: {evt['payload'].get('rawContent', evt['payload'].get('content', ''))}")
 
 Usage (manual loop):
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonlyai/cli",
-  "version": "0.1.237",
+  "version": "0.1.239",
   "license": "Apache-2.0",
   "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
   "type": "module",

package/src/lib/grant-broker-guard.js

@@ -244,9 +244,18 @@ export const withholdGrantBroker = (environment, adapter, {
   const reason = confinementReason(environment, adapter, platform);
   if (!reason) return environment;
 
-  const kept = environment.mcp.filter((server) => !isOurGrantBroker(server, { instanceUrl }));
+  // F94: the server flags a broker whose grant names this seat (the granter's
+  // own agent, with consent) so it rides a seat no sandbox confines. Delivery
+  // only; the broker checks the naming on every call. Never on native Windows,
+  // and never for an adapter not approved for the broker.
+  const rides = (server) => server?.byoNamed === true
+    && reason !== 'adapter_cannot_confine' && platform !== 'win32';
+  const isWithheld = (server) => isOurGrantBroker(server, { instanceUrl }) && !rides(server);
+  if (!environment.mcp.some(isWithheld)) return environment;
+
+  const kept = environment.mcp.filter((server) => !isWithheld(server));
   const withheld = environment.mcp
-    .filter((server) => isOurGrantBroker(server, { instanceUrl }))
+    .filter(isWithheld)
     .map((server) => (typeof server?.name === 'string' && server.name ? server.name : '(unnamed)'));
   if (typeof onRefuse === 'function') {
     onRefuse({