@ixo/asks-mcp 1.10.0 → 1.11.0

package/dist/asks-mcp.mjs

@@ -264678,6 +264678,14 @@ function readVetMessage(message, expected, now3 = Date.now(), maxAgeMs = STAFF_P
   if (parts.length !== 6 || parts[0] !== "vet" || parts[1] !== expected.address || parts[2] !== expected.by || parts[3] !== expected.decision || parts[5] !== expected.digest) return "mismatch";
   return fresh(parts[4], now3, maxAgeMs);
 }
+function readHandsMineMessage(message, expected, now3 = Date.now(), maxAgeMs = READ_PROOF_MAX_AGE_MS) {
+  const parts = message.split(":");
+  if (parts.length !== 3 || parts[0] !== "hands-mine" || parts[1] !== expected.address) return "mismatch";
+  return fresh(parts[2], now3, maxAgeMs);
+}
+function readHandsShareMessage(message, expected) {
+  return message === handsShareMessage(expected.address, expected.prefAt, expected.act) ? "ok" : "mismatch";
+}
 function readHandsRemoveMessage(message, expected) {
   const parts = message.split(":");
   if (parts.length !== 3 || parts[0] !== "hands-remove" || parts[1] !== expected.address) return "mismatch";
@@ -264704,7 +264712,7 @@ async function digestOf(value) {
   const bytes3 = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(canonicalJson2(value))));
   return Array.from(bytes3, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
-var PROOF_MAX_AGE_MS2, INVITE_OPS, INVITE_WRITES, inviteOpBody, inviteOpMessage, applyMessage, invitedMessage, answersMessage, READ_PROOF_MAX_AGE_MS, FUTURE_SKEW_MS, LEGACY_WORDS_UNTIL, callsMessage, noticesMessage, tellMessage, NOTICE_KINDS, handsMessage, vettingMineMessage, vettingQueueMessage, STAFF_PROOF_MAX_AGE_MS, vetRequestBody, vetRequestMessage, vetBody, vetMessage, handsRemoveMessage, LINKEDIN_ACTS, linkedinBody, linkedinMessage, ROOM_ACTS, roomBody, roomMessage, ROOM_SEND_MAX_AGE_MS, SPONSOR_ACTS, sponsorBody, sponsorMessage;
+var PROOF_MAX_AGE_MS2, INVITE_OPS, INVITE_WRITES, inviteOpBody, inviteOpMessage, applyMessage, invitedMessage, answersMessage, READ_PROOF_MAX_AGE_MS, FUTURE_SKEW_MS, LEGACY_WORDS_UNTIL, callsMessage, noticesMessage, tellMessage, NOTICE_KINDS, handsMessage, vettingMineMessage, vettingQueueMessage, STAFF_PROOF_MAX_AGE_MS, vetRequestBody, vetRequestMessage, vetBody, vetMessage, handsRemoveMessage, handsMineMessage, LINKEDIN_ACTS, linkedinBody, linkedinMessage, ROOM_ACTS, roomBody, roomMessage, ROOM_SEND_MAX_AGE_MS, SPONSOR_ACTS, sponsorBody, sponsorMessage, HANDS_SHARE_ACTS, handsShareMessage;
 var init_inviteMessages = __esm({
   "../../packages/openhands-sdk/src/chain/inviteMessages.ts"() {
     "use strict";
@@ -264732,6 +264740,7 @@ var init_inviteMessages = __esm({
     vetBody = (body) => ({ decision: body["decision"] ?? null, prefAt: body["prefAt"] ?? null, note: body["note"] ?? null, scope: body["scope"] ?? null });
     vetMessage = (address2, by, decision, now3 = Date.now(), digest2 = "") => `vet:${address2}:${by}:${decision}:${now3}:${digest2}`;
     handsRemoveMessage = (address2, prefAt) => `hands-remove:${address2}:${prefAt}`;
+    handsMineMessage = (address2, now3 = Date.now()) => `hands-mine:${address2}:${now3}`;
     LINKEDIN_ACTS = ["start", "remove"];
     linkedinBody = (body) => {
       const { address: _address, proof: _proof, ...rest } = body;
@@ -264751,6 +264760,8 @@ var init_inviteMessages = __esm({
       return rest;
     };
     sponsorMessage = (act, signer2, now3 = Date.now(), digest2 = "") => `sponsor-${act}:${signer2}:${now3}:${digest2}`;
+    HANDS_SHARE_ACTS = ["create", "replace"];
+    handsShareMessage = (address2, prefAt, act) => `hands-share:${address2}:${prefAt}:${act}`;
   }
 });
 
@@ -264785,6 +264796,7 @@ __export(inviteProof_exports, {
   DOES: () => DOES,
   FUTURE_SKEW_MS: () => FUTURE_SKEW_MS,
   HANDLE: () => HANDLE,
+  HANDS_SHARE_ACTS: () => HANDS_SHARE_ACTS,
   HAND_LIMITS: () => HAND_LIMITS,
   INVITE_ANSWERS: () => INVITE_ANSWERS,
   INVITE_OPS: () => INVITE_OPS,
@@ -264811,7 +264823,9 @@ __export(inviteProof_exports, {
   digestOf: () => digestOf,
   fresh: () => fresh,
   handsMessage: () => handsMessage,
+  handsMineMessage: () => handsMineMessage,
   handsRemoveMessage: () => handsRemoveMessage,
+  handsShareMessage: () => handsShareMessage,
   inviteOpBody: () => inviteOpBody,
   inviteOpMessage: () => inviteOpMessage,
   inviteOpWords: () => inviteOpWords,
@@ -264827,7 +264841,9 @@ __export(inviteProof_exports, {
   readHandBlock: () => readHandBlock,
   readHandProfile: () => readHandProfile,
   readHandsMessage: () => readHandsMessage,
+  readHandsMineMessage: () => readHandsMineMessage,
   readHandsRemoveMessage: () => readHandsRemoveMessage,
+  readHandsShareMessage: () => readHandsShareMessage,
   readInviteOpMessage: () => readInviteOpMessage,
   readInvitedMessage: () => readInvitedMessage,
   readLegacyVetRequestMessage: () => readLegacyVetRequestMessage,
@@ -264890,6 +264906,7 @@ function readHandProfile(raw) {
   if (!AVAILABILITY.includes(availability)) return { problem: `availability is ${AVAILABILITY.join(", ")}` };
   const invitable = it2.invitable === void 0 ? true : it2.invitable;
   if (typeof invitable !== "boolean") return { problem: "invitable is true or false" };
+  if (it2.listed !== void 0 && typeof it2.listed !== "boolean") return { problem: "listed is true or false" };
   const L5 = HAND_LIMITS;
   const pictureUrl = (value, what) => value === void 0 || value === null || value === "" ? void 0 : https3(value) ? value : { problem: `${what} is an https address` };
   const avatar = pictureUrl(it2.avatar, "avatar");
@@ -264967,6 +264984,8 @@ function readHandProfile(raw) {
       links: [...new Set(links)],
       availability,
       invitable,
+      /* Only a private page carries it, so a page signed by an app from before the flag digests the same. */
+      ...it2.listed === false ? { listed: false } : {},
       ...avatar ? { avatar } : {},
       ...banner ? { banner } : {},
       ...location ? { location } : {},
@@ -265142,6 +265161,7 @@ __export(invites_exports, {
   post: () => post,
   rateWords: () => rateWords,
   readInvites: () => readInvites,
+  readMyPage: () => readMyPage,
   readNotices: () => readNotices,
   readPage: () => readPage,
   readStanding: () => readStanding,
@@ -265151,6 +265171,7 @@ __export(invites_exports, {
   rowAnswerWords: () => rowAnswerWords,
   setMarketplacePage: () => setMarketplacePage,
   setPage: () => setPage,
+  sharePage: () => sharePage,
   standingWords: () => standingWords,
   startLinkedin: () => startLinkedin,
   writeInvites: () => writeInvites,
@@ -265395,6 +265416,23 @@ async function readPage(site, which, fetchImpl = fetch) {
   const body = await response.json().catch(() => null);
   return body?.hand ?? null;
 }
+async function readMyPage(site, signer2, fetchImpl = fetch) {
+  const owner = signer2.principal ?? signer2.address;
+  const message = handsMineMessage(owner);
+  const answer = await post(site, "/api/hands/mine", { address: signer2.address, ...signer2.principal ? { onBehalfOf: signer2.principal } : {}, proof: { kind: "adr36", message, ...await signWords(signer2.mnemonic, message) } }, fetchImpl).catch(() => null);
+  if (answer?.ok) return answer.body.hand ? { ...answer.body.hand, shared: answer.body.shared === true } : null;
+  if (answer?.status === 404 && !codeOf2(answer)) return readPage(site, { address: owner }, fetchImpl);
+  return null;
+}
+async function sharePage(site, signer2, act, fetchImpl) {
+  const owner = signer2.principal ?? signer2.address;
+  const prefAt = Date.now();
+  const message = handsShareMessage(owner, prefAt, act);
+  const answer = await post(site, "/api/hands/share", { address: signer2.address, ...signer2.principal ? { onBehalfOf: signer2.principal } : {}, prefAt, act, proof: { kind: "adr36", message, ...await signWords(signer2.mnemonic, message) } }, fetchImpl);
+  if (answer.ok && typeof answer.body.code === "string") return { url: `${proOrigin(site)}/pro/p/${answer.body.code}` };
+  if (answer.status === 404 && !codeOf2(answer)) return { refused: "this site does not make private links yet" };
+  return { refused: refusalOf(answer) };
+}
 function pageWords(page, site) {
   const p = page.profile;
   const rate = rateWords(p.rate);
@@ -265404,6 +265442,7 @@ function pageWords(page, site) {
     page.linkedin ? `LinkedIn verified since ${page.linkedin.verifiedAt.slice(0, 10)}${page.linkedin.profileUrl ? ` \xB7 ${page.linkedin.profileUrl}` : ""}` : "Not LinkedIn verified yet",
     `Address: ${page.address}${p.location ? ` \xB7 ${p.location}` : ""}${p.timezone ? ` (${p.timezone})` : ""}`,
     `Does: ${p.does.length ? p.does.join(", ") : "not said"} \xB7 Rate: ${rate} \xB7 Availability: ${p.availability} \xB7 Invitable by handle: ${p.invitable ? "yes" : "no"}`,
+    p.listed === false ? "Private: not shown on asks.world or in search; only someone who types the exact handle or address can invite them." : "Public: shown on asks.world, anyone can find it.",
     "Profile claims are supplied by the owner. Check what independent providers signed against your own requirements.",
     ...(p.verificationCredentials ?? []).map((one) => `Signed record cited (not verified): ${one.title} \xB7 ${one.issuerDid} \xB7 ${one.url}`),
     ...(p.verificationServices ?? []).map((one) => `Independent service: ${one.title} \xB7 ${one.claims.join(", ")} \xB7 ${one.price} \xB7 Signed by: ${one.issuerDid} \xB7 Method: ${one.method} \xB7 Qualifications: ${one.qualificationCredentials.join(" ")} \xB7 ${one.serviceUrl}`),
@@ -265444,6 +265483,7 @@ var init_invites = __esm({
   "src/invites.ts"() {
     "use strict";
     init_world();
+    init_networks();
     init_dollars();
     init_accountProof();
     init_inviteProof();
@@ -292299,7 +292339,7 @@ import { randomBytes as randomBytes7 } from "node:crypto";
 // package.json
 var package_default = {
   name: "@ixo/asks-mcp",
-  version: "1.10.0",
+  version: "1.11.0",
   description: "The Openhands Network MCP server: read the board, answer asks, post work and get paid on the ixo chain, with a key of its own on your machine.",
   license: "Apache-2.0",
   repository: {
@@ -292662,7 +292702,7 @@ var TOOLS = {
   },
   set_my_page: {
     title: "Write your pro page",
-    description: "Make or change the pro page of the person you act for (or this key's own): the page posters find and invite them by, on pro.asks.world and across asks.world. A handle, a name, a headline, what they do, a rate, links, availability, and whether posters may invite them by handle. Previews by default; call again with confirm: true to sign. For guided setup, follow /pro/mcp.md#create-your-pro-profile on the matching Pro Asks host. Start with connect_linkedin: its verified profile pre-fills the name, headline, LinkedIn link and handle; ask only for what LinkedIn lacks (the work they take, rate, availability, a line about them). This tool reads no site itself, so build the rest from what the person tells you or pastes. Spends nothing.",
+    description: "Make or change the pro page of the person you act for (or this key's own): the page posters find and invite them by, on pro.asks.world and across asks.world. A handle, a name, a headline, what they do, a rate, links, availability, whether posters may invite them by handle, and `listed`: public (the default, anyone can find the page) or private (off asks.world and search; only someone who types the exact handle or address can invite them). Ask once, plainly, which they want. A private page can have a secret link (`share_link`: create, or replace to switch the old one off), said once on confirm. Previews by default; call again with confirm: true to sign. For guided setup, follow /pro/mcp.md#create-your-pro-profile on the matching Pro Asks host. Start with connect_linkedin: its verified profile pre-fills the name, headline, LinkedIn link and handle; ask only for what LinkedIn lacks (the work they take, rate, availability, a line about them). This tool reads no site itself, so build the rest from what the person tells you or pastes. Spends nothing.",
     spends: false,
     hosted: false,
     annotations: { ...acts, idempotentHint: true }
@@ -292676,7 +292716,7 @@ var TOOLS = {
   },
   remove_my_page: {
     title: "Remove your pro page",
-    description: "Take down the pro page of the person you act for (or this key's own): the page leaves /hands and the directory, and its @handle is freed for anyone. Invitations already on a call's list and the public record of their work stay. Says what goes by default; call again with confirm: true to sign. Spends nothing.",
+    description: "Delete the pro page of the person you act for (or this key's own), for good: the page, its LinkedIn tick and old checks are deleted, it leaves /hands and the directory, and its @handle is freed for anyone. Invitations already on a call's list and the public record of their work stay. Says what goes by default; call again with confirm: true to sign. Spends nothing.",
     spends: false,
     hosted: false,
     annotations: { ...acts, destructiveHint: true, idempotentHint: true }
@@ -297274,6 +297314,7 @@ The room's page: ${roomPage(SITE, collectionId, page?.profile.handle ?? sent.pro
     links: external_exports.array(external_exports.string().url().max(2048)).max(6).optional(),
     availability: external_exports.enum(["open", "busy", "closed"]).optional(),
     invitable: external_exports.boolean().optional().describe("May posters invite them by handle? Default true."),
+    listed: external_exports.boolean().optional().describe("Public (true) or private (false): a private page is off asks.world, the directory and search, and only someone who types the exact handle or address can invite them. Left out, the page keeps what it says now (public for a new page)."),
     avatar: external_exports.string().max(2048).optional().describe("Their picture: a file on this machine (png, jpg or webp, up to 5 MB) or an https address. Uploaded for them; square works best."),
     banner: external_exports.string().max(2048).optional().describe("A wide picture across the top of the page: a file on this machine or an https address. About 3:1."),
     location: external_exports.string().max(80).optional(),
@@ -297298,9 +297339,13 @@ The room's page: ${roomPage(SITE, collectionId, page?.profile.handle ?? sent.pro
     "set_my_page",
     {
       ...meta3("set_my_page"),
-      inputSchema: { page: pageInput, confirm: external_exports.boolean().optional().describe("false (the default) previews; true signs and publishes.") }
+      inputSchema: {
+        page: pageInput,
+        share_link: external_exports.enum(["create", "replace"]).optional().describe(`A private page's secret link: "create" makes one, "replace" makes a new one and switches the old one off. Said once, on confirm.`),
+        confirm: external_exports.boolean().optional().describe("false (the default) previews; true signs and publishes.")
+      }
     },
-    async ({ page, confirm }) => {
+    async ({ page, share_link, confirm }) => {
       const { readHandProfile: readHandProfile2 } = await Promise.resolve().then(() => (init_inviteProof(), inviteProof_exports));
       const invitesModule = await Promise.resolve().then(() => (init_invites(), invites_exports));
       if ([page.name, page.headline, page.about, ...page.story ?? [], ...(page.experience ?? []).map((one) => one.what ?? "")].some((one) => one && isTainted(one))) return text4(TAINT_REFUSAL);
@@ -297317,9 +297362,13 @@ The room's page: ${roomPage(SITE, collectionId, page?.profile.handle ?? sent.pro
       }
       const { pictures: _pictures, files, story, ...rest } = page;
       const blocks = [...story?.length ? [{ kind: "story", paragraphs: story }] : [], ...pictures.length ? [{ kind: "pictures", items: pictures }] : [], ...files?.length ? [{ kind: "files", items: files }] : []];
+      const acting = await principal2();
+      const owner = acting?.principal ?? await address2();
+      const listed = page.listed ?? (await invitesModule.readMyPage(SITE, await inviteSigner(acting)).catch(() => null))?.profile.listed ?? true;
       const read9 = readHandProfile2({
         v: 1,
         ...rest,
+        listed,
         does: page.does ?? [],
         links: page.links ?? [],
         availability: page.availability ?? "open",
@@ -297331,28 +297380,36 @@ The room's page: ${roomPage(SITE, collectionId, page?.profile.handle ?? sent.pro
       });
       if ("problem" in read9) return text4(`Not a page yet: ${read9.problem}. Nothing was published.`);
       const pending = [page.avatar, page.banner, ...(page.pictures ?? []).map((one) => one.url)].filter((one) => one && !/^https:\/\//.test(one)).length;
-      const acting = await principal2();
-      const owner = acting?.principal ?? await address2();
       const preview = invitesModule.pageWords({ address: owner, profile: read9.profile, updated_at: "" }, SITE);
+      const linkWords = share_link ? `
+
+On confirm, ${share_link === "replace" ? "a new private link is made and the old one stops working" : "a private link is made"}: anyone with it can see the page.` : "";
       if (!confirm) return text4(`This is the page, as the site will show it:
 
-${preview}${pending ? `
+${preview}${linkWords}${pending ? `
 
 ${pending} picture${pending === 1 ? "" : "s"} on this machine will be uploaded when you confirm.` : ""}
 
 Show it to the person. Then call again with confirm: true to sign and publish it${acting ? ` as ${acting.principal}` : " for this key"}.`);
       const answer = await invitesModule.setPage(SITE, await inviteSigner(acting), read9.profile);
       if ("refused" in answer) return text4(`Refused: ${answer.refused}. Nothing changed.`);
-      return text4(`Published the profile for ${answer.address}: ${proPage(SITE, answer.handle)}. Also available at ${SITE}/pro/pros/${answer.handle}. Posters invite them with "@${answer.handle}".`);
+      const link5 = share_link ? await invitesModule.sharePage(SITE, await inviteSigner(acting), share_link) : null;
+      const linkLine = !link5 ? "" : "url" in link5 ? `
+
+Here's your private link: ${link5.url}. Anyone with it can see your page; ask me for a new one to switch the old one off.` : `
+
+No private link was made: ${link5.refused}.`;
+      if (read9.profile.listed === false) return text4(`Saved the private profile for ${answer.address}. It is not shown on asks.world or in search; posters who type "@${answer.handle}" or the address can still invite them.${linkLine}`);
+      return text4(`Published the profile for ${answer.address}: ${proPage(SITE, answer.handle)}. Also available at ${SITE}/pro/pros/${answer.handle}. Posters invite them with "@${answer.handle}".${linkLine}`);
     }
   );
   if (offered("my_page")) server2.registerTool("my_page", { ...meta3("my_page"), inputSchema: {} }, async () => {
     const invitesModule = await Promise.resolve().then(() => (init_invites(), invites_exports));
     const acting = await principal2();
-    const owner = acting?.principal ?? await address2();
-    const page = await invitesModule.readPage(SITE, { address: owner });
+    const page = await invitesModule.readMyPage(SITE, await inviteSigner(acting));
     if (!page) return text4("No pro page yet. Next: connect_linkedin (about a minute).");
     return text4(`${invitesModule.pageWords(page, SITE)}
+${page.shared ? 'Private link: there is one (it is shown only when made; set_my_page with share_link: "replace" gives a new one and switches the old one off).' : 'Private link: none (set_my_page with share_link: "create" makes one).'}
 
 Edit the profile at ${EXPERT_SITE}/pro/profile.${page.linkedin ? "" : " Next: connect_linkedin verifies it, so you can be invited to pro asks."}`);
   });
@@ -297468,7 +297525,7 @@ Show it to the person. Then call again with the same page and confirm: true to s
       if (status.state === "failed") return text4(`Not verified: ${status.error ?? "the LinkedIn login did not finish"}. Next: connect_linkedin with no id gives a new link.`);
       const profile = status.profile;
       const acting = await principal2();
-      const page = await invitesModule.readPage(SITE, { address: acting?.principal ?? await address2() });
+      const page = await invitesModule.readMyPage(SITE, await inviteSigner(acting));
       const vanity = (profile?.vanity ?? "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 30);
       const prefill = {
         ...profile?.name ? { name: profile.name.slice(0, 80) } : {},
@@ -297491,14 +297548,14 @@ ${asData("linkedin", JSON.stringify(prefill, null, 2))}`
       const invitesModule = await Promise.resolve().then(() => (init_invites(), invites_exports));
       const acting = await principal2();
       const owner = acting?.principal ?? await address2();
-      const page = await invitesModule.readPage(SITE, { address: owner });
+      const page = await invitesModule.readMyPage(SITE, await inviteSigner(acting));
       if (!page) return text4(`${owner} has no page. Nothing to remove.`);
       const where2 = `${SITE.replace(/\/+$/, "")}/pro/pros/${page.profile.handle}`;
       if (!confirm)
         return text4(
           [
             `This takes down @${page.profile.handle} (${where2}, ${proPage(SITE, page.profile.handle)} on pro.asks.world), the page of ${owner}${acting ? ", the person this key acts for" : ""}:`,
-            `- The page and everything on it go: the CV, the rate, the links. It leaves the Hands directory.`,
+            `- The page and everything on it are deleted: the CV, the rate, the links, and the LinkedIn tick (that LinkedIn can verify again later). It leaves the Hands directory. This can't be undone.`,
             `- The handle @${page.profile.handle} is freed, and anybody may take it. Posters can no longer invite them by it.`,
             `- Invitations already on a call's list name the address, and stay. Their work and decisions are the public record and are not touched.`,
             `- Pictures uploaded for the page stay at their IPFS addresses; nothing links to them from the site any more.`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ixo/asks-mcp",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "The Openhands Network MCP server: read the board, answer asks, post work and get paid on the ixo chain, with a key of its own on your machine.",
   "license": "Apache-2.0",
   "repository": {