@cueai/omni-reader-mcp 1.5.0 → 1.5.1

package/README.md

@@ -64,7 +64,7 @@ differ from the numbers above, report the live values.
 Always use an audited exact version, never an implicit `latest`:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.5.0 setup
+npx -y @cueai/omni-reader-mcp@1.5.1 setup
 ```
 
 The interactive setup supports Hermes, Cursor, Claude Desktop, and generic stdio
@@ -72,9 +72,9 @@ configuration. Non-interactive installation uses the same argument parsing and w
 logic:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.5.0 setup --client hermes --allowed-root /absolute/minimum/root --yes --json
-npx -y @cueai/omni-reader-mcp@1.5.0 setup --client cursor --add-root /absolute/minimum/root --yes --json
-npx -y @cueai/omni-reader-mcp@1.5.0 setup --client claude-desktop --allowed-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.5.1 setup --client hermes --allowed-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.5.1 setup --client cursor --add-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.5.1 setup --client claude-desktop --allowed-root /absolute/minimum/root --yes --json
 ```
 
 When an agent or script runs under a pty (stdin is still a TTY), declare non-interactive
@@ -82,7 +82,7 @@ mode explicitly with `--headless` (alias `--non-interactive`): no `--yes` is req
 stdin is never read:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.5.0 setup --client cursor --allowed-root /absolute/minimum/root --headless --json
+npx -y @cueai/omni-reader-mcp@1.5.1 setup --client cursor --allowed-root /absolute/minimum/root --headless --json
 ```
 
 ## Cache and journal isolation
@@ -221,16 +221,16 @@ satisfies the constraints.
 ## Commands
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.5.0 doctor
-npx -y @cueai/omni-reader-mcp@1.5.0 doctor --json
-npx -y @cueai/omni-reader-mcp@1.5.0 clean
-npx -y @cueai/omni-reader-mcp@1.5.0 uninstall --yes --json
+npx -y @cueai/omni-reader-mcp@1.5.1 doctor
+npx -y @cueai/omni-reader-mcp@1.5.1 doctor --json
+npx -y @cueai/omni-reader-mcp@1.5.1 clean
+npx -y @cueai/omni-reader-mcp@1.5.1 uninstall --yes --json
 ```
 
 Running the pinned version without a command starts the stdio MCP server:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.5.0
+npx -y @cueai/omni-reader-mcp@1.5.1
 ```
 
 `doctor --json` returns package/npm/client adapter, Key present/absent, allowed-root
@@ -239,12 +239,12 @@ status; it never prints the Key, private source paths, or content.
 
 ## Uninstall and rollback
 
-`uninstall --yes --json` removes only a trusted 1.4.1 or 1.5.0 Bridge entry; when a
+`uninstall --yes --json` removes only a trusted 1.5.0 or 1.5.1 Bridge entry; when a
 matching trusted backup exists, it restores the original URL-only `omni-reader` entry.
 Uninstall never deletes user source files and never silently removes unexpired local
 results.
 
-To roll back from 1.5.0:
+To roll back from 1.5.1:
 
 1. stop recommending or installing that version;
 2. run `uninstall --yes --json` to restore the trusted URL-only entry;

package/dist/cli/agent-config.js

@@ -7,7 +7,7 @@ const PACKAGE_SPEC = `@cueai/omni-reader-mcp@${BRIDGE_RELEASE_VERSION}`;
 // The release that the current version is a trusted upgrade from: uninstall and
 // rollback recognize exactly {previous, current} and nothing else. Bump this to
 // the version we just published when BRIDGE_RELEASE_VERSION advances.
-const PREVIOUS_RELEASE_VERSION = "1.4.1";
+const PREVIOUS_RELEASE_VERSION = "1.5.0";
 const PREVIOUS_PACKAGE_SPEC = `@cueai/omni-reader-mcp@${PREVIOUS_RELEASE_VERSION}`;
 const LEGACY_PACKAGE_SPEC = "@cueai/omni-reader-mcp";
 const TRUSTED_EXACT_PACKAGE_SPECS = new Set([PREVIOUS_PACKAGE_SPEC, PACKAGE_SPEC]);

package/dist/constants.d.ts

@@ -6,7 +6,7 @@ export declare const CUBE_GRANT_PROTOCOL_VERSION = "omni.parse_grant.v1";
 export declare const GRANTED_STREAM_PROTOCOL_VERSION = "omni.granted_parse_stream.v1";
 export declare const DEFAULT_CUBE_BASE_URL = "https://mcp.cuecue.cn";
 export declare const DEFAULT_IIIS_GRANTED_BASE_URL = "https://cubefile.ai.iiis.co:9443/omni/granted/";
-export declare const BRIDGE_RELEASE_VERSION = "1.5.0";
+export declare const BRIDGE_RELEASE_VERSION = "1.5.1";
 export declare const REMOTE_OMNI_MCP_URL = "https://mcp.cuecue.cn/api/omni-reader/mcp/";
 export declare const FOREGROUND_BUDGET_MS = 15000;
 export declare const STATUS_LONG_POLL_MAX_MS = 20000;

package/dist/constants.js

@@ -6,7 +6,7 @@ export const CUBE_GRANT_PROTOCOL_VERSION = "omni.parse_grant.v1";
 export const GRANTED_STREAM_PROTOCOL_VERSION = "omni.granted_parse_stream.v1";
 export const DEFAULT_CUBE_BASE_URL = "https://mcp.cuecue.cn";
 export const DEFAULT_IIIS_GRANTED_BASE_URL = "https://cubefile.ai.iiis.co:9443/omni/granted/";
-export const BRIDGE_RELEASE_VERSION = "1.5.0";
+export const BRIDGE_RELEASE_VERSION = "1.5.1";
 export const REMOTE_OMNI_MCP_URL = "https://mcp.cuecue.cn/api/omni-reader/mcp/";
 export const FOREGROUND_BUDGET_MS = 15_000;
 export const STATUS_LONG_POLL_MAX_MS = 20_000;

package/dist/operation-manager.js

@@ -760,7 +760,10 @@ function remoteResultUpdate(result, expectedOperationId) {
                 operationId: result.operation_id,
                 errorCode: null,
                 parserStarted: true,
-                billed: true,
+                // Owner ruling: credits are deducted only on successful completion — the public
+                // billed flag mirrors the remote settlement facts (zero-charge completion is a
+                // settled fact, not an uncharged one). Never write true unconditionally.
+                billed: (result.billing?.credits_charged ?? 0) > 0,
                 contentReleased: true,
                 stage: "completed",
                 progressPercent: 100,
@@ -778,7 +781,11 @@ function remoteResultUpdate(result, expectedOperationId) {
                 operationId: result.operation_id,
                 errorCode: null,
                 parserStarted: true,
-                billed: true,
+                // The cleanup_pending wire carries no settlement fact (the closed v3/v4 contract
+                // exposes usage/billing only on released/delivered/delivery_expired terminals) —
+                // report false rather than inventing a charge; the journal allows a later
+                // false->true completion fact (assertStableTransition only blocks true->false).
+                billed: false,
                 contentReleased: result.result !== undefined,
                 stage: "cleanup_pending",
                 progressPercent: result.result === undefined ? 99 : 100,
@@ -869,7 +876,8 @@ function localResultValue(local) {
             operationCreated: true,
             fileUploaded: true,
             parserStarted: true,
-            billed: true,
+            // Owner ruling: an integrity failure settled nothing — never report billed:true.
+            billed: false,
             contentReleased: true,
         });
     }
@@ -996,7 +1004,8 @@ function requireBundleResult(retention) {
             operationCreated: true,
             fileUploaded: true,
             parserStarted: true,
-            billed: true,
+            // Owner ruling: an integrity failure settled nothing — never report billed:true.
+            billed: false,
             contentReleased: false,
         });
     }
@@ -1429,12 +1438,32 @@ export function createLocalParseOperationManager(options) {
                         result: processingParse(operationId, stage, latestPercent, patch.contentReleased === true),
                     };
                 }
+                const checkpointBilled = snapshot.patch?.billed === true;
                 return {
                     update: {
                         state: "FAILED",
-                        patch: failurePatch(stable),
+                        patch: {
+                            ...failurePatch(stable),
+                            // The ACK checkpoint may already have recorded a settled charge
+                            // (snapshot.patch at :1751 carries resultPatch's billed fact).
+                            // Never regress it — assertStableTransition blocks true->false —
+                            // the charge happened; this failure is about the local artifact,
+                            // not the settlement.
+                            billed: checkpointBilled || stable.billed,
+                        },
+                    },
+                    result: {
+                        status: "failed",
+                        error: {
+                            ...stable.toJSON(),
+                            // Deliberately the checkpoint fact only (not the OR): the failed
+                            // public result reports exactly what this run settled — false
+                            // when nothing was settled (owner ruling), true when the ACK
+                            // checkpoint already recorded the charge and the failure is
+                            // about local delivery, not the settlement.
+                            billed: checkpointBilled,
+                        },
                     },
-                    result: { status: "failed", error: stable.toJSON() },
                 };
             }
             finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cueai/omni-reader-mcp",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Local stdio MCP bridge for direct Omni document parsing",
   "type": "module",
   "license": "UNLICENSED",