@mpowr/nexus-mcp 0.5.0

package/README.md

@@ -0,0 +1,59 @@
+# nexus-mcp
+
+MCP server for the mpowr-nexus platform. Provides the mediation layer between
+local agent runtimes (terminals) and the Nexus HTTP API.
+
+## Architecture
+
+The server exposes 36 tools across 4 layers via the Model Context Protocol
+(stdio transport). All data access goes through the Nexus API — the MCP server
+has no direct database access.
+
+- **Layer 1 — Knowledge Access:** kb_search, kb_memory, kb_get, kb_related, project_list
+- **Layer 2 — Coordination:** vault letters (vl_create/vl_reply/vl_inbox/vl_outbox/vl_ack),
+  tasks (task_create/task_update/task_note), sessions (session_create/session_list/session_close/session_append),
+  decision comments (dc_add/dc_list), document ingestion (doc_ingest),
+  skills (sk_list/sk_get/sk_create/sk_update/sk_activate/sk_assign/sk_unassign/sk_export)
+- **Layer 3 — Governance:** ADR lifecycle (adr_create/adr_submit/adr_decide)
+- **Layer 4 — Reviews:** entity reviews (rv_list/rv_get/rv_create/rv_decide/rv_comment)
+
+## Authentication
+
+Identity is resolved once at startup via `GET /api/mcp/identity` using the
+`NEXUS_PRIVATE_TOKEN` as a Bearer token. All subsequent API calls use the same
+token for authentication. The Nexus backend resolves the token to a user
+identity and enforces project-scoped RBAC.
+
+## Environment Variables
+
+| Variable | Required | Description |
+|---|---|---|
+| `NEXUS_API_URL` | yes | Nexus API base URL (e.g. `https://nexus.mpowr.tech`) |
+| `NEXUS_PRIVATE_TOKEN` | yes | nxs_pat_* API token for identity resolution |
+
+## Development
+
+```bash
+npm install
+npm run typecheck   # TypeScript check
+npm test            # Run tests
+npm run build       # Compile to dist/
+npm run dev         # Run via tsx (development)
+npm start           # Run compiled JS (production)
+```
+
+## Project Structure
+
+```
+src/
+  server.ts          # MCP server entry point (stdio transport)
+  auth.ts            # Token-based identity resolution via Nexus API
+  nexus-api.ts       # HTTP client for Nexus API (nexusGet, nexusPost)
+  tools/             # Tool modules (36 tools total)
+  __tests__/         # Unit tests with mocked API responses
+```
+
+## Related
+
+- [nexus](https://github.com/mpowr-it/nexus) — Backend + Frontend (Next.js/Supabase/Netlify)
+- [nexus-cli](https://github.com/mpowr-it/nexus-cli) — Rust CLI client

package/dist/auth.d.ts

@@ -0,0 +1,39 @@
+/**
+ * MCP Authentication Layer
+ *
+ * Resolves the NEXUS_PRIVATE_TOKEN environment variable at server startup
+ * to a verified user identity by calling the Nexus API identity endpoint.
+ *
+ * Flow:
+ *   1. Read NEXUS_PRIVATE_TOKEN from process.env
+ *   2. Call GET /api/mcp/identity with Bearer token
+ *   3. Cache resolved identity for the lifetime of the MCP process
+ */
+export interface McpIdentity {
+    userId: string;
+    email: string | null;
+    displayName: string | null;
+    isPlatformAdmin: boolean;
+    isPlatformOwner: boolean;
+    tenantId: string | null;
+    memberships: Array<{
+        project_id: string;
+        role: string;
+    }>;
+    agentAssignments: Array<{
+        project_id: string;
+        agent_id: string;
+        agent_owner: string;
+    }>;
+}
+/**
+ * Resolve the MCP server identity from NEXUS_PRIVATE_TOKEN.
+ * Called once at server startup. Caches the result.
+ * Throws if no valid token is available.
+ */
+export declare function initIdentity(): Promise<McpIdentity>;
+/**
+ * Get the cached MCP identity. Must call initIdentity() first.
+ */
+export declare function getIdentity(): McpIdentity;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,eAAe,EAAE,OAAO,CAAA;IACxB,eAAe,EAAE,OAAO,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxD,gBAAgB,EAAE,KAAK,CAAC;QACtB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAC,CAAA;CACH;AASD;;;;GAIG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,WAAW,CAAC,CAyBzD;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,WAAW,CAKzC"}

package/dist/auth.js

@@ -0,0 +1,47 @@
+/**
+ * MCP Authentication Layer
+ *
+ * Resolves the NEXUS_PRIVATE_TOKEN environment variable at server startup
+ * to a verified user identity by calling the Nexus API identity endpoint.
+ *
+ * Flow:
+ *   1. Read NEXUS_PRIVATE_TOKEN from process.env
+ *   2. Call GET /api/mcp/identity with Bearer token
+ *   3. Cache resolved identity for the lifetime of the MCP process
+ */
+import { nexusGet } from './nexus-api.js';
+// Module-level cache: resolved once at startup
+let _identity = null;
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the MCP server identity from NEXUS_PRIVATE_TOKEN.
+ * Called once at server startup. Caches the result.
+ * Throws if no valid token is available.
+ */
+export async function initIdentity() {
+    if (_identity)
+        return _identity;
+    const rawToken = process.env.NEXUS_PRIVATE_TOKEN;
+    if (!rawToken) {
+        throw new Error('MCP: NEXUS_PRIVATE_TOKEN is not set. The MCP server requires a valid nxs_pat_* token.');
+    }
+    const result = await nexusGet('/api/mcp/identity');
+    if (!result.ok || !result.data) {
+        throw new Error(`MCP: Identity resolution failed: ${result.error ?? 'Unknown error'}. Check that the token is valid, not expired, and not revoked.`);
+    }
+    _identity = result.data;
+    console.error(`[nexus-mcp] Identity resolved: ${_identity.displayName ?? _identity.email ?? _identity.userId} (admin=${_identity.isPlatformAdmin}, owner=${_identity.isPlatformOwner})`);
+    return _identity;
+}
+/**
+ * Get the cached MCP identity. Must call initIdentity() first.
+ */
+export function getIdentity() {
+    if (!_identity) {
+        throw new Error('MCP: Identity not initialized. Call initIdentity() first.');
+    }
+    return _identity;
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAqBzC,+CAA+C;AAC/C,IAAI,SAAS,GAAuB,IAAI,CAAA;AAExC,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,SAAS;QAAE,OAAO,SAAS,CAAA;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAc,mBAAmB,CAAC,CAAA;IAE/D,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,oCAAoC,MAAM,CAAC,KAAK,IAAI,eAAe,gEAAgE,CACpI,CAAA;IACH,CAAC;IAED,SAAS,GAAG,MAAM,CAAC,IAAI,CAAA;IAEvB,OAAO,CAAC,KAAK,CACX,kCAAkC,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,WAAW,SAAS,CAAC,eAAe,WAAW,SAAS,CAAC,eAAe,GAAG,CAC1K,CAAA;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/nexus-api.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Nexus API client for MCP server context.
+ *
+ * Replaces direct Supabase access with HTTP calls to the Nexus API.
+ * All operations go through /api/mcp/* endpoints, authenticated
+ * via the NEXUS_PRIVATE_TOKEN (nxs_pat_*) Bearer token.
+ */
+export interface NexusApiResponse<T = unknown> {
+    ok: boolean;
+    status: number;
+    data: T | null;
+    error: string | null;
+}
+/**
+ * Make an authenticated request to the Nexus API.
+ */
+export declare function nexusApi<T = unknown>(path: string, options?: {
+    method?: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    body?: unknown;
+}): Promise<NexusApiResponse<T>>;
+/**
+ * Convenience: POST to a Nexus MCP endpoint.
+ */
+export declare function nexusPost<T = unknown>(path: string, body: unknown): Promise<NexusApiResponse<T>>;
+/**
+ * Convenience: GET from a Nexus MCP endpoint.
+ */
+export declare function nexusGet<T = unknown>(path: string): Promise<NexusApiResponse<T>>;
+//# sourceMappingURL=nexus-api.d.ts.map

package/dist/nexus-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nexus-api.d.ts","sourceRoot":"","sources":["../src/nexus-api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA6BH,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,OAAO;IAC3C,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,CAAC,GAAG,IAAI,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,CAAC,GAAG,OAAO,EACxC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;IAC5C,IAAI,CAAC,EAAE,OAAO,CAAA;CACV,GACL,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAuC9B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACzC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAE9B;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,CAAC,GAAG,OAAO,EACxC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAE9B"}

package/dist/nexus-api.js

@@ -0,0 +1,76 @@
+/**
+ * Nexus API client for MCP server context.
+ *
+ * Replaces direct Supabase access with HTTP calls to the Nexus API.
+ * All operations go through /api/mcp/* endpoints, authenticated
+ * via the NEXUS_PRIVATE_TOKEN (nxs_pat_*) Bearer token.
+ */
+let _baseUrl = null;
+let _token = null;
+function getConfig() {
+    if (_baseUrl && _token)
+        return { baseUrl: _baseUrl, token: _token };
+    const url = process.env.NEXUS_API_URL ?? process.env.NEXUS_URL;
+    const token = process.env.NEXUS_PRIVATE_TOKEN;
+    if (!url) {
+        throw new Error('MCP: Missing NEXUS_API_URL. Set the base URL of the Nexus app (e.g. https://nexus.mpowr.tech).');
+    }
+    if (!token) {
+        throw new Error('MCP: Missing NEXUS_PRIVATE_TOKEN. The MCP server requires a valid nxs_pat_* token.');
+    }
+    // Normalize: strip trailing slash
+    _baseUrl = url.replace(/\/$/, '');
+    _token = token.trim();
+    return { baseUrl: _baseUrl, token: _token };
+}
+/**
+ * Make an authenticated request to the Nexus API.
+ */
+export async function nexusApi(path, options = {}) {
+    const { baseUrl, token } = getConfig();
+    const method = options.method ?? 'GET';
+    const url = `${baseUrl}${path}`;
+    const headers = {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json',
+    };
+    try {
+        const fetchOpts = { method, headers };
+        if (options.body !== undefined) {
+            fetchOpts.body = JSON.stringify(options.body);
+        }
+        const response = await fetch(url, fetchOpts);
+        const data = (await response.json());
+        if (!response.ok) {
+            return {
+                ok: false,
+                status: response.status,
+                data: null,
+                error: data?.error ??
+                    `HTTP ${response.status}`,
+            };
+        }
+        return { ok: true, status: response.status, data, error: null };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            status: 0,
+            data: null,
+            error: err instanceof Error ? err.message : 'Unknown fetch error',
+        };
+    }
+}
+/**
+ * Convenience: POST to a Nexus MCP endpoint.
+ */
+export async function nexusPost(path, body) {
+    return nexusApi(path, { method: 'POST', body });
+}
+/**
+ * Convenience: GET from a Nexus MCP endpoint.
+ */
+export async function nexusGet(path) {
+    return nexusApi(path, { method: 'GET' });
+}
+//# sourceMappingURL=nexus-api.js.map

package/dist/nexus-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nexus-api.js","sourceRoot":"","sources":["../src/nexus-api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,IAAI,QAAQ,GAAkB,IAAI,CAAA;AAClC,IAAI,MAAM,GAAkB,IAAI,CAAA;AAEhC,SAAS,SAAS;IAChB,IAAI,QAAQ,IAAI,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAEnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAA;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;IAE7C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAA;IACH,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAA;IACH,CAAC;IAED,kCAAkC;IAClC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACjC,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAErB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC7C,CAAC;AASD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,UAGI,EAAE;IAEN,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAA;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAA;IACtC,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAA;IAE/B,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,KAAK,EAAE;QAChC,cAAc,EAAE,kBAAkB;KACnC,CAAA;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAClD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAA;QAE9D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,IAAI;gBACV,KAAK,EACF,IAAgC,EAAE,KAAe;oBAClD,QAAQ,QAAQ,CAAC,MAAM,EAAE;aAC5B,CAAA;QACH,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;SAClE,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EACZ,IAAa;IAEb,OAAO,QAAQ,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY;IAEZ,OAAO,QAAQ,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;AAC7C,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+/**
+ * nexus-mcp -- MCP Server for mpowr-nexus
+ *
+ * Provides Knowledge Access (Layer 1), Coordination (Layer 2),
+ * Governance (Layer 3), and Reviews (Layer 4) tools.
+ * Runs as a standalone stdio MCP server.
+ *
+ * Authentication:
+ *   Identity is resolved once at startup from NEXUS_PRIVATE_TOKEN (nxs_pat_*).
+ *   All write tools receive user_id automatically from the resolved identity.
+ *   Callers no longer pass user_id as a parameter.
+ *
+ * Layer 1 - Knowledge Access:
+ *   - kb_search: Search project knowledge (keyword/semantic/hybrid)
+ *   - kb_memory: Curated project context for agent bootstrapping
+ *   - kb_get: Fetch a single knowledge object
+ *   - kb_related: Navigate entity relationships
+ *   - project_list: List accessible projects
+ *
+ * Layer 2 - Coordination:
+ *   - vl_create: Create a new vault letter
+ *   - vl_reply: Reply to an existing vault letter
+ *   - vl_inbox: List letters addressed to the calling agent/user
+ *   - vl_outbox: List letters sent by the calling agent/user
+ *   - vl_ack: Acknowledge receipt of a new vault letter
+ *   - task_create: Create a task in a project
+ *   - task_update: Update task status, priority, or assignee
+ *   - task_note: Append a note to a task (append-only)
+ *   - dc_add: Add a comment to an ADR (append-only)
+ *   - dc_list: List comments for an ADR
+ *   - sk_list: List skills for the current tenant
+ *   - sk_get: Get full skill content by identifier
+ *   - sk_create: Create a new skill in draft status
+ *   - sk_update: Update skill content or metadata
+ *   - sk_activate: Change skill status (draft/active/archived)
+ *   - sk_assign: Assign a skill to a project
+ *   - sk_unassign: Remove a skill assignment from a project
+ *   - sk_export: Export all skill assignments for a project
+ *   - doc_ingest: Push text/markdown content into project knowledge base
+ *   - session_append: Append to a session (write-isolated)
+ *   - session_create: Start a new work session
+ *   - session_close: End a session with summary and next entry point
+ *   - session_list: List open sessions for a project
+ *
+ * Layer 3 - Governance:
+ *   - adr_create: Create a new ADR draft
+ *   - adr_submit: Submit an ADR for review
+ *   - adr_decide: Accept or reject an ADR
+ *
+ * Layer 4 - Reviews:
+ *   - rv_list: List reviews with optional filters
+ *   - rv_get: Get a review by ID or entity reference
+ *   - rv_create: Create a new review for an entity
+ *   - rv_decide: Transition a review state
+ *   - rv_comment: Add a comment to a review
+ *
+ * Usage:
+ *   npx tsx src/mcp/server.ts
+ *
+ * Or via .mcp.json configuration:
+ *   { "command": "npx", "args": ["tsx", "src/mcp/server.ts"] }
+ */
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG"}

package/dist/server.js

@@ -0,0 +1,183 @@
+#!/usr/bin/env node
+/**
+ * nexus-mcp -- MCP Server for mpowr-nexus
+ *
+ * Provides Knowledge Access (Layer 1), Coordination (Layer 2),
+ * Governance (Layer 3), and Reviews (Layer 4) tools.
+ * Runs as a standalone stdio MCP server.
+ *
+ * Authentication:
+ *   Identity is resolved once at startup from NEXUS_PRIVATE_TOKEN (nxs_pat_*).
+ *   All write tools receive user_id automatically from the resolved identity.
+ *   Callers no longer pass user_id as a parameter.
+ *
+ * Layer 1 - Knowledge Access:
+ *   - kb_search: Search project knowledge (keyword/semantic/hybrid)
+ *   - kb_memory: Curated project context for agent bootstrapping
+ *   - kb_get: Fetch a single knowledge object
+ *   - kb_related: Navigate entity relationships
+ *   - project_list: List accessible projects
+ *
+ * Layer 2 - Coordination:
+ *   - vl_create: Create a new vault letter
+ *   - vl_reply: Reply to an existing vault letter
+ *   - vl_inbox: List letters addressed to the calling agent/user
+ *   - vl_outbox: List letters sent by the calling agent/user
+ *   - vl_ack: Acknowledge receipt of a new vault letter
+ *   - task_create: Create a task in a project
+ *   - task_update: Update task status, priority, or assignee
+ *   - task_note: Append a note to a task (append-only)
+ *   - dc_add: Add a comment to an ADR (append-only)
+ *   - dc_list: List comments for an ADR
+ *   - sk_list: List skills for the current tenant
+ *   - sk_get: Get full skill content by identifier
+ *   - sk_create: Create a new skill in draft status
+ *   - sk_update: Update skill content or metadata
+ *   - sk_activate: Change skill status (draft/active/archived)
+ *   - sk_assign: Assign a skill to a project
+ *   - sk_unassign: Remove a skill assignment from a project
+ *   - sk_export: Export all skill assignments for a project
+ *   - doc_ingest: Push text/markdown content into project knowledge base
+ *   - session_append: Append to a session (write-isolated)
+ *   - session_create: Start a new work session
+ *   - session_close: End a session with summary and next entry point
+ *   - session_list: List open sessions for a project
+ *
+ * Layer 3 - Governance:
+ *   - adr_create: Create a new ADR draft
+ *   - adr_submit: Submit an ADR for review
+ *   - adr_decide: Accept or reject an ADR
+ *
+ * Layer 4 - Reviews:
+ *   - rv_list: List reviews with optional filters
+ *   - rv_get: Get a review by ID or entity reference
+ *   - rv_create: Create a new review for an entity
+ *   - rv_decide: Transition a review state
+ *   - rv_comment: Add a comment to a review
+ *
+ * Usage:
+ *   npx tsx src/mcp/server.ts
+ *
+ * Or via .mcp.json configuration:
+ *   { "command": "npx", "args": ["tsx", "src/mcp/server.ts"] }
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { getIdentity, initIdentity } from './auth.js';
+// Layer 1: Knowledge Access
+import { projectList, projectListSchema } from './tools/project-list.js';
+import { getDocument, getDocumentSchema } from './tools/get-document.js';
+import { getProjectMemory, getProjectMemorySchema, } from './tools/get-project-memory.js';
+import { getRelatedEntities, getRelatedEntitiesSchema, } from './tools/get-related-entities.js';
+import { searchKnowledge, searchKnowledgeSchema, } from './tools/search-knowledge.js';
+// Layer 2: Coordination
+import { addTaskNote, addTaskNoteSchema } from './tools/add-task-note.js';
+import { appendSessionEntry, appendSessionEntrySchema, } from './tools/append-session-entry.js';
+import { createTask, createTaskSchema } from './tools/create-task.js';
+import { addDecisionComment, addDecisionCommentSchema, listDecisionComments, listDecisionCommentsSchema, } from './tools/decision-comments.js';
+import { ingestDocument, ingestDocumentSchema, } from './tools/ingest-document.js';
+import { acknowledgeLetter, acknowledgeLetterSchema, listInbox, listInboxSchema, listOutbox, listOutboxSchema, } from './tools/letter-inbox.js';
+import { createLetter, createLetterSchema, replyLetter, replyLetterSchema, } from './tools/letters.js';
+import { closeSession, closeSessionSchema, createSession, createSessionSchema, listOpenSessions, listOpenSessionsSchema, } from './tools/sessions.js';
+import { skActivate, skActivateSchema, skCreate, skCreateSchema, skGet, skGetSchema, skList, skListSchema, skUpdate, skUpdateSchema, } from './tools/skills.js';
+import { skAssign, skAssignSchema, skExport, skExportSchema, skUnassign, skUnassignSchema, } from './tools/skill-assign.js';
+import { updateTaskStatus, updateTaskStatusSchema, } from './tools/update-task-status.js';
+// Layer 3: Governance
+import { createAdrDraft, createAdrDraftSchema, recordAdrDecision, recordAdrDecisionSchema, submitAdrReview, submitAdrReviewSchema, } from './tools/governance.js';
+// Layer 4: Reviews
+import { rvComment, rvCommentSchema, rvCreate, rvCreateSchema, rvDecide, rvDecideSchema, rvGet, rvGetSchema, rvList, rvListSchema, } from './tools/reviews.js';
+// ---------------------------------------------------------------------------
+// Identity injection helper
+// ---------------------------------------------------------------------------
+/**
+ * Wrap a write-tool handler to inject user_id from the resolved identity.
+ * The caller does not need to pass user_id — it comes from the token.
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function withIdentity(handler) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return async (args) => {
+        const identity = getIdentity();
+        return handler({ ...args, user_id: identity.userId });
+    };
+}
+// ---------------------------------------------------------------------------
+// Server setup
+// ---------------------------------------------------------------------------
+const server = new McpServer({
+    name: 'nexus-mcp',
+    version: '0.5.0',
+}, {
+    capabilities: {
+        tools: {},
+    },
+});
+// ---------------------------------------------------------------------------
+// Layer 1: Knowledge Access tools
+// ---------------------------------------------------------------------------
+server.tool('kb_search', 'Search project knowledge using keyword, semantic, or hybrid mode. Applies project scope filters before retrieval. Returns matching entities with relevance ranking.', searchKnowledgeSchema, async (args) => searchKnowledge(args));
+server.tool('kb_memory', 'Get curated project context for agent bootstrapping. Returns ADRs, active tasks, recent sessions, open letters, and other project knowledge based on selected categories and depth.', getProjectMemorySchema, async (args) => getProjectMemory(args));
+server.tool('kb_get', 'Fetch a single knowledge object (session, decision, letter, task, etc.) in structured, markdown, or summary format. Includes child entries for sessions and letters.', getDocumentSchema, async (args) => getDocument(args));
+server.tool('kb_related', 'Navigate entity relationships. Returns graph-neighbor entities related to a given item, such as supersession chains for ADRs, thread siblings for letters, or tasks created during sessions.', getRelatedEntitiesSchema, async (args) => getRelatedEntities(args));
+server.tool('project_list', 'List accessible projects for the authenticated user or agent. Returns project metadata ordered by name.', projectListSchema, async (args) => projectList(args));
+// ---------------------------------------------------------------------------
+// Layer 2: Coordination tools
+// ---------------------------------------------------------------------------
+server.tool('vl_create', 'Create a new vault letter for agent-to-agent or agent-to-human coordination. Returns the new letter ID and status.', createLetterSchema, withIdentity(createLetter));
+server.tool('vl_reply', 'Reply to an existing vault letter with a new message. Optionally update the letter status. Enforces append-only semantics.', replyLetterSchema, withIdentity(replyLetter));
+server.tool('vl_inbox', 'List vault letters addressed to the calling agent or user. Returns letters scoped to the given project, ordered by blocking status and recency. Supports status filtering.', listInboxSchema, withIdentity(listInbox));
+server.tool('vl_outbox', 'List vault letters sent by the calling agent or user. Returns letters scoped to the given project, ordered by recency. Supports status filtering.', listOutboxSchema, withIdentity(listOutbox));
+server.tool('vl_ack', 'Acknowledge receipt of a new vault letter. Transitions the letter from new to acknowledged status and appends an acknowledgment message.', acknowledgeLetterSchema, withIdentity(acknowledgeLetter));
+server.tool('task_create', 'Create a new task within a project scope. Returns the new task ID.', createTaskSchema, withIdentity(createTask));
+server.tool('task_update', 'Update the status of an existing task. Optionally change priority or assignee. Automatically records a status-change note for audit trail.', updateTaskStatusSchema, withIdentity(updateTaskStatus));
+server.tool('task_note', 'Append a note to an existing task. Notes are append-only and maintain a chronological audit trail. Useful for recording progress, blockers, or decisions.', addTaskNoteSchema, withIdentity(addTaskNote));
+server.tool('doc_ingest', 'Push text or markdown content into a project knowledge base. Creates an ingest item that can later be classified. Useful for agents to persist research results, generated documents, or extracted knowledge.', ingestDocumentSchema, withIdentity(ingestDocument));
+server.tool('session_append', 'Append an entry to an existing session. Enforces session write isolation: only the session creator can append entries.', appendSessionEntrySchema, withIdentity(appendSessionEntry));
+server.tool('session_create', 'Create a new work session for a project. Returns the session ID. The session starts in open status and must be closed explicitly via session_close.', createSessionSchema, withIdentity(createSession));
+server.tool('session_close', 'Close an open session. Sets status to closed, optionally records a summary and next entry point. Only the session creator can close it.', closeSessionSchema, withIdentity(closeSession));
+server.tool('session_list', 'List open sessions for a project. Returns sessions ordered by creation date (newest first). Useful for checking active work before starting a new session.', listOpenSessionsSchema, async (args) => listOpenSessions(args));
+// ---------------------------------------------------------------------------
+// Layer 2 (continued): Decision comment tools
+// ---------------------------------------------------------------------------
+server.tool('dc_add', 'Add a comment to an ADR decision. Comments are append-only and support both human and agent actors.', addDecisionCommentSchema, withIdentity(addDecisionComment));
+server.tool('dc_list', 'List comments for an ADR decision in chronological order.', listDecisionCommentsSchema, async (args) => listDecisionComments(args));
+// ---------------------------------------------------------------------------
+// Layer 2 (continued): Skill management tools
+// ---------------------------------------------------------------------------
+server.tool('sk_list', 'List skills for the current tenant. Supports status filtering (draft, active, archived). Returns skill metadata without full body content.', skListSchema, withIdentity(skList));
+server.tool('sk_get', 'Get full skill content by skill identifier or UUID. Includes associated command information.', skGetSchema, withIdentity(skGet));
+server.tool('sk_create', 'Create a new skill in draft status. Optionally auto-generates an OpenCode command. Skill content is markdown-based instruction text.', skCreateSchema, withIdentity(skCreate));
+server.tool('sk_update', 'Update an existing skill content, metadata, or command auto-generation setting. Increments version when body changes.', skUpdateSchema, withIdentity(skUpdate));
+server.tool('sk_activate', 'Change a skill status (draft, active, archived). Active skills are available for agent loading and project selection.', skActivateSchema, withIdentity(skActivate));
+server.tool('sk_assign', 'Assign a skill to a project. Optionally pin to a specific version and set enabled state.', skAssignSchema, withIdentity(skAssign));
+server.tool('sk_unassign', 'Remove a skill assignment from a project.', skUnassignSchema, withIdentity(skUnassign));
+server.tool('sk_export', 'Export all skill assignments for a project. Returns the full assignment list with pinned versions and enabled states.', skExportSchema, withIdentity(skExport));
+// ---------------------------------------------------------------------------
+// Layer 3: Governance tools
+// ---------------------------------------------------------------------------
+server.tool('adr_create', 'Create a new ADR (Architecture Decision Record) in draft state. Auto-assigns the next ADR number for the project. Optionally links to a superseded ADR.', createAdrDraftSchema, withIdentity(createAdrDraft));
+server.tool('adr_submit', 'Submit an ADR for review. Transitions an ADR from draft to under_review state. Only drafts can be submitted.', submitAdrReviewSchema, withIdentity(submitAdrReview));
+server.tool('adr_decide', 'Accept or reject an ADR that is under review. If accepted and it supersedes another ADR, the superseded ADR is automatically marked. Optional rationale is appended to the ADR body.', recordAdrDecisionSchema, withIdentity(recordAdrDecision));
+// ---------------------------------------------------------------------------
+// Layer 4: Review tools
+// ---------------------------------------------------------------------------
+server.tool('rv_list', 'List reviews with optional filters by entity type and status. Returns reviews ordered by recency.', rvListSchema, withIdentity(rvList));
+server.tool('rv_get', 'Get a review by review ID, or by entity type and entity ID. Returns full review details including status and history.', rvGetSchema, withIdentity(rvGet));
+server.tool('rv_create', 'Create a new review for a skill or agent entity. Returns the new review ID and initial status.', rvCreateSchema, withIdentity(rvCreate));
+server.tool('rv_decide', 'Transition a review state (submit, accept, reject, request_revision, resubmit, archive). Enforces valid state transitions. Optional rationale is recorded.', rvDecideSchema, withIdentity(rvDecide));
+server.tool('rv_comment', 'Add a comment to a review. Supports inline comments with optional line range. Comments are append-only and maintain a chronological audit trail.', rvCommentSchema, withIdentity(rvComment));
+// ---------------------------------------------------------------------------
+// Start
+// ---------------------------------------------------------------------------
+async function main() {
+    // Resolve identity from NEXUS_PRIVATE_TOKEN before accepting connections
+    await initIdentity();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error('[nexus-mcp] Server started on stdio');
+}
+main().catch((err) => {
+    console.error('[nexus-mcp] Fatal error:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAEhF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAErD,4BAA4B;AAC5B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,eAAe,EACf,qBAAqB,GACtB,MAAM,6BAA6B,CAAA;AAEpC,wBAAwB;AACxB,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACrE,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,cAAc,EACd,oBAAoB,GACrB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,SAAS,EACT,eAAe,EACf,UAAU,EACV,gBAAgB,GACjB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,KAAK,EACL,WAAW,EACX,MAAM,EACN,YAAY,EACZ,QAAQ,EACR,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,cAAc,EACd,UAAU,EACV,gBAAgB,GACjB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,+BAA+B,CAAA;AAEtC,sBAAsB;AACtB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,qBAAqB,GACtB,MAAM,uBAAuB,CAAA;AAE9B,mBAAmB;AACnB,OAAO,EACL,SAAS,EACT,eAAe,EACf,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,cAAc,EACd,KAAK,EACL,WAAW,EACX,MAAM,EACN,YAAY,GACb,MAAM,oBAAoB,CAAA;AAE3B,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;GAGG;AACH,8DAA8D;AAC9D,SAAS,YAAY,CAAC,OAAoC;IACxD,8DAA8D;IAC9D,OAAO,KAAK,EAAE,IAAS,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;QAC9B,OAAO,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACvD,CAAC,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;IACE,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO;CACjB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;KACV;CACF,CACF,CAAA;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,WAAW,EACX,qKAAqK,EACrK,qBAAqB,EACrB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CACtC,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,qLAAqL,EACrL,sBAAsB,EACtB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CACvC,CAAA;AAED,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,sKAAsK,EACtK,iBAAiB,EACjB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAClC,CAAA;AAED,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,8LAA8L,EAC9L,wBAAwB,EACxB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CACzC,CAAA;AAED,MAAM,CAAC,IAAI,CACT,cAAc,EACd,yGAAyG,EACzG,iBAAiB,EACjB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAClC,CAAA;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,WAAW,EACX,oHAAoH,EACpH,kBAAkB,EAClB,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,UAAU,EACV,4HAA4H,EAC5H,iBAAiB,EACjB,YAAY,CAAC,WAAW,CAAC,CAC1B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,UAAU,EACV,4KAA4K,EAC5K,eAAe,EACf,YAAY,CAAC,SAAS,CAAC,CACxB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,mJAAmJ,EACnJ,gBAAgB,EAChB,YAAY,CAAC,UAAU,CAAC,CACzB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,0IAA0I,EAC1I,uBAAuB,EACvB,YAAY,CAAC,iBAAiB,CAAC,CAChC,CAAA;AAED,MAAM,CAAC,IAAI,CACT,aAAa,EACb,oEAAoE,EACpE,gBAAgB,EAChB,YAAY,CAAC,UAAU,CAAC,CACzB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,aAAa,EACb,4IAA4I,EAC5I,sBAAsB,EACtB,YAAY,CAAC,gBAAgB,CAAC,CAC/B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,2JAA2J,EAC3J,iBAAiB,EACjB,YAAY,CAAC,WAAW,CAAC,CAC1B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,+MAA+M,EAC/M,oBAAoB,EACpB,YAAY,CAAC,cAAc,CAAC,CAC7B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,wHAAwH,EACxH,wBAAwB,EACxB,YAAY,CAAC,kBAAkB,CAAC,CACjC,CAAA;AAED,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,qJAAqJ,EACrJ,mBAAmB,EACnB,YAAY,CAAC,aAAa,CAAC,CAC5B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,eAAe,EACf,yIAAyI,EACzI,kBAAkB,EAClB,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,cAAc,EACd,4JAA4J,EAC5J,sBAAsB,EACtB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CACvC,CAAA;AAED,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,qGAAqG,EACrG,wBAAwB,EACxB,YAAY,CAAC,kBAAkB,CAAC,CACjC,CAAA;AAED,MAAM,CAAC,IAAI,CACT,SAAS,EACT,2DAA2D,EAC3D,0BAA0B,EAC1B,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAC3C,CAAA;AAED,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,SAAS,EACT,4IAA4I,EAC5I,YAAY,EACZ,YAAY,CAAC,MAAM,CAAC,CACrB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,8FAA8F,EAC9F,WAAW,EACX,YAAY,CAAC,KAAK,CAAC,CACpB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,sIAAsI,EACtI,cAAc,EACd,YAAY,CAAC,QAAQ,CAAC,CACvB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,uHAAuH,EACvH,cAAc,EACd,YAAY,CAAC,QAAQ,CAAC,CACvB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,aAAa,EACb,uHAAuH,EACvH,gBAAgB,EAChB,YAAY,CAAC,UAAU,CAAC,CACzB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,0FAA0F,EAC1F,cAAc,EACd,YAAY,CAAC,QAAQ,CAAC,CACvB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,aAAa,EACb,2CAA2C,EAC3C,gBAAgB,EAChB,YAAY,CAAC,UAAU,CAAC,CACzB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,uHAAuH,EACvH,cAAc,EACd,YAAY,CAAC,QAAQ,CAAC,CACvB,CAAA;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,yJAAyJ,EACzJ,oBAAoB,EACpB,YAAY,CAAC,cAAc,CAAC,CAC7B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,8GAA8G,EAC9G,qBAAqB,EACrB,YAAY,CAAC,eAAe,CAAC,CAC9B,CAAA;AAED,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,sLAAsL,EACtL,uBAAuB,EACvB,YAAY,CAAC,iBAAiB,CAAC,CAChC,CAAA;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,CAAC,IAAI,CACT,SAAS,EACT,mGAAmG,EACnG,YAAY,EACZ,YAAY,CAAC,MAAM,CAAC,CACrB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,uHAAuH,EACvH,WAAW,EACX,YAAY,CAAC,KAAK,CAAC,CACpB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,gGAAgG,EAChG,cAAc,EACd,YAAY,CAAC,QAAQ,CAAC,CACvB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,WAAW,EACX,4JAA4J,EAC5J,cAAc,EACd,YAAY,CAAC,QAAQ,CAAC,CACvB,CAAA;AAED,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,kJAAkJ,EAClJ,eAAe,EACf,YAAY,CAAC,SAAS,CAAC,CACxB,CAAA;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,KAAK,UAAU,IAAI;IACjB,yEAAyE;IACzE,MAAM,YAAY,EAAE,CAAA;IAEpB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/B,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;AACtD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAA;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/tools/add-task-note.d.ts

@@ -0,0 +1,34 @@
+/**
+ * task_note -- Layer 2 Coordination
+ *
+ * Appends a note to an existing task. Notes are append-only and
+ * maintain a chronological history/timeline.
+ * Delegates to POST /api/mcp/tasks (action: task_note).
+ */
+import { z } from 'zod';
+export declare const addTaskNoteSchema: {
+    task_id: z.ZodString;
+    note: z.ZodString;
+    agent_id: z.ZodOptional<z.ZodString>;
+};
+type AddTaskNoteArgs = {
+    task_id: string;
+    note: string;
+    user_id: string;
+    agent_id?: string;
+};
+export declare function addTaskNote(args: AddTaskNoteArgs): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+export {};
+//# sourceMappingURL=add-task-note.d.ts.map

package/dist/tools/add-task-note.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-task-note.d.ts","sourceRoot":"","sources":["../../src/tools/add-task-note.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAA;AAED,KAAK,eAAe,GAAG;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe;;;;;;;;;;;;GAyBtD"}

package/dist/tools/add-task-note.js

@@ -0,0 +1,39 @@
+/**
+ * task_note -- Layer 2 Coordination
+ *
+ * Appends a note to an existing task. Notes are append-only and
+ * maintain a chronological history/timeline.
+ * Delegates to POST /api/mcp/tasks (action: task_note).
+ */
+import { z } from 'zod';
+import { nexusPost } from '../nexus-api.js';
+export const addTaskNoteSchema = {
+    task_id: z.string().uuid().describe('Task UUID to add a note to'),
+    note: z.string().describe('Note content to append'),
+    agent_id: z.string().optional().describe('Agent identifier if applicable'),
+};
+export async function addTaskNote(args) {
+    const result = await nexusPost('/api/mcp/tasks', {
+        action: 'task_note',
+        task_id: args.task_id,
+        note: args.note,
+        agent_id: args.agent_id,
+    });
+    if (!result.ok) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({ error: result.error }, null, 2),
+                },
+            ],
+            isError: true,
+        };
+    }
+    return {
+        content: [
+            { type: 'text', text: JSON.stringify(result.data, null, 2) },
+        ],
+    };
+}
+//# sourceMappingURL=add-task-note.js.map

package/dist/tools/add-task-note.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-task-note.js","sourceRoot":"","sources":["../../src/tools/add-task-note.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CAC3E,CAAA;AASD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,EAAE;QAC/C,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;iBACvD;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;SACtE;KACF,CAAA;AACH,CAAC"}