@mycompbox/compbox-mcp 1.21.2 → 1.21.4

package/index.js

@@ -130,7 +130,7 @@ var init_mailbox = __esm({
       "failed"
     ];
     TURN_ROLES = ["agent", "user"];
-    START_EXECUTION_KINDS = ["plan", "orchestrate"];
+    START_EXECUTION_KINDS = ["plan", "orchestrate", "refine"];
   }
 });
 
@@ -863,6 +863,18 @@ var init_interview_completion = __esm({
 });
 
 // ../shared/dist/interview-conversation.js
+function requestLockReason(saved) {
+  if (!saved)
+    return null;
+  if (saved.status !== "pending")
+    return "status";
+  if (!saved.canEdit)
+    return "ownership";
+  return null;
+}
+function lockedRequestMessage(reason) {
+  return reason === "ownership" ? "Only the request's creator can change it; you can still discuss it." : "This request is locked, so it can't be changed any more.";
+}
 function renderSection(s) {
   const tag = s.required ? "needed" : "nice to have";
   return `- ${s.title} (${tag}): ${s.purpose} For example: ${s.followUps.slice(0, 2).join(" ")}`;
@@ -873,8 +885,10 @@ function renderSaved(saved) {
   const issues = saved.compliance && saved.compliance.issues.length > 0 ? `
 What the score says is missing or weak:
 ${saved.compliance.issues.slice(0, 8).map((i) => `- ${i.message}`).join("\n")}` : "";
-  const locked = saved.status === "pending" ? "It can still be changed." : `Its status is "${saved.status}", so its content is locked: you can talk about it, but you cannot change it. Never emit the completion JSON for a locked request.`;
-  return `THE REQUEST IS ALREADY SAVED. This conversation created the request "${saved.title}". ${score} ${locked}${issues}
+  const reason = requestLockReason(saved);
+  const locked = reason === null ? "It can still be changed." : reason === "status" ? `Its status is "${saved.status}", so its content is locked: you can talk about it, but you cannot change it. Never emit the completion JSON for a locked request.` : "Only the request's creator can change it, and the person you're talking to is not its creator, so its content is locked for them: you can talk about it, but you cannot change it. Never emit the completion JSON for a locked request. If they ask for a change, explain that only the creator can make it.";
+  const origin = saved.discussed ? `THE REQUEST ALREADY EXISTS. The person is discussing the existing request "${saved.title}"; this conversation did not create it.` : `THE REQUEST IS ALREADY SAVED. This conversation created the request "${saved.title}".`;
+  return `${origin} ${score} ${locked}${issues}
 
 Its current content:
 title: ${saved.title}
@@ -950,7 +964,7 @@ ${followUp}` : text;
 async function runConversationStep(input, deps) {
   const system = buildConversationSystemPrompt(input.saved);
   const messages = toConversationMessages(input.turns);
-  const locked = input.saved !== null && input.saved.status !== "pending";
+  const lockReason = requestLockReason(input.saved);
   let requestId = input.saved?.id ?? null;
   let savedNow = null;
   let createdHere = false;
@@ -973,10 +987,11 @@ Send another message (for example "try again") when you're ready and I'll pick u
     }
     const draft = extractCompletionJson(reply);
     if (draft) {
-      if (locked) {
-        messages.push({ role: "assistant", content: reply }, { role: "user", content: "That request is locked and can't be changed. Reply to me in plain text instead." });
+      if (lockReason) {
+        const why = lockReason === "ownership" ? "Only the request's creator can change it, and I'm not its creator." : "That request is locked and can't be changed.";
+        messages.push({ role: "assistant", content: reply }, { role: "user", content: `${why} Reply to me in plain text instead.` });
         if (++repairs > JSON_REPAIRS)
-          return { kind: "error", text: "This request is locked, so it can't be changed any more." };
+          return { kind: "error", text: lockedRequestMessage(lockReason) };
         continue;
       }
       let saved;
@@ -1019,7 +1034,7 @@ The request IS already saved, and the person will be shown its score. If you ask
     return { kind: "message", text };
   }
 }
-function savedContextFromRecord(record) {
+function savedContextFromRecord(record, access) {
   if (typeof record !== "object" || record === null)
     return null;
   const r = record;
@@ -1054,7 +1069,9 @@ function savedContextFromRecord(record) {
     status: typeof r.status === "string" ? r.status : "pending",
     description: typeof r.description === "string" ? r.description : "",
     fields,
-    compliance: complianceFromRecord(score)
+    compliance: complianceFromRecord(score),
+    canEdit: access.canEdit,
+    ...access.discussed ? { discussed: true } : {}
   };
 }
 function complianceFromRecord(score) {
@@ -2048,6 +2065,7 @@ __export(dist_exports, {
   isSubscriptionStatus: () => isSubscriptionStatus,
   isTurnRole: () => isTurnRole,
   isValidModelId: () => isValidModelId,
+  lockedRequestMessage: () => lockedRequestMessage,
   looksLikeCompletionAttempt: () => looksLikeCompletionAttempt,
   mcpConfigSchema: () => mcpConfigSchema,
   mcpServerConfigSchema: () => mcpServerConfigSchema,
@@ -2057,6 +2075,7 @@ __export(dist_exports, {
   ok: () => ok,
   probeProxyHealth: () => probeProxyHealth,
   renderConversationPrompt: () => renderConversationPrompt,
+  requestLockReason: () => requestLockReason,
   resolveRouting: () => resolveRouting,
   runConversationStep: () => runConversationStep,
   safeReturnTo: () => safeReturnTo,
@@ -12270,7 +12289,7 @@ function withLegacyToolCallRewrite(transport) {
 var SERVER_NAME = "compbox-mcp";
 function resolveServerVersion() {
   if (true) {
-    return "1.21.2";
+    return "1.21.4";
   }
   const require2 = createRequire(import.meta.url);
   for (const candidate of ["../package.json", "./package.json"]) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mycompbox/compbox-mcp",
-  "version": "1.21.2",
+  "version": "1.21.4",
   "description": "CompBox MCP server - Uses HTTP API client (no direct database access)",
   "license": "MIT",
   "type": "module",