@odingard/guardian-mcp 0.1.2 → 0.2.0

package/README.md

@@ -18,7 +18,7 @@ npm i -g @odingard/guardian-mcp
     "guardian": {
       "command": "guardian-mcp",
       "env": {
-        "GUARDIAN_BASE_URL": "https://api.guardian.odingard.com",
+        "GUARDIAN_BASE_URL": "https://guardian-api.odingard.com",
         "GUARDIAN_AGENT_CREDENTIAL": "gac1.…",
         "GUARDIAN_CONNECTION_ID": "con_…"
       }
@@ -41,4 +41,4 @@ Nothing executes without a Guardian capability — the model's output is a propo
 
 ## License
 
-Apache-2.0. Canonical development happens in the Odingard Guardian monorepo.
+Apache-2.0. Canonical development happens in the [Odingard Guardian monorepo](https://github.com/Odingard/guardian).

package/dist/index.js

@@ -17095,6 +17095,15 @@ function errorResult(message) {
 }
 async function requestAndExecute(client2, result) {
   if (!result.ok) {
+    const heldRequestId = result.requestId;
+    if (result.reasonCode === "APPROVAL_REQUIRED" && typeof heldRequestId === "string" && heldRequestId.length > 0) {
+      return jsonResult({
+        decision: "ASK",
+        requestId: heldRequestId,
+        reasonCode: result.reasonCode,
+        next: "Held for human approval. Call guardian_claim with this requestId after approval."
+      });
+    }
     return jsonResult({ decision: "DENY", reasonCode: result.reasonCode });
   }
   if (result.decision === "ALLOW" && result.capabilityToken) {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@odingard/guardian-mcp",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "mcpName": "io.github.Odingard/guardian-mcp",
-  "description": "MCP server that routes an agent's tool calls through Guardian \u2014 the human authority layer for autonomous AI. Every tool call gets a deterministic ALLOW/ASK/DENY decision before anything executes; ASK holds for human approval, DENY never runs, every outcome carries a verifiable receipt.",
+  "description": "MCP server that routes an agent's tool calls through Guardian — the human authority layer for autonomous AI. Every tool call gets a deterministic ALLOW/ASK/DENY decision before anything executes; ASK holds for human approval, DENY never runs, every outcome carries a verifiable receipt.",
   "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.js",
@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.32.2",
-    "@odingard/guardian-sdk": "^0.1.0"
+    "@odingard/guardian-sdk": "^0.2.0"
   },
   "devDependencies": {
     "@types/node": "^22",
@@ -34,5 +34,11 @@
   },
   "publishConfig": {
     "access": "public"
-  }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Odingard/guardian-sdk.git",
+    "directory": "mcp-server"
+  },
+  "homepage": "https://guardian.odingard.com"
 }

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
   "name": "io.github.Odingard/guardian-mcp",
   "description": "MCP server that routes an agent's tool calls through Guardian — Human Authority Infrastructure for Autonomous AI. Every tool call gets a deterministic ALLOW/ASK/DENY decision before anything executes; ASK holds the call until a human approves it, DENY never runs, and every outcome carries a verifiable receipt.",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "tools": [
     {
       "name": "guardian_invoke_tool",
@@ -25,7 +25,7 @@
     {
       "registryType": "npm",
       "identifier": "@odingard/guardian-mcp",
-      "version": "0.1.2",
+      "version": "0.2.0",
       "transport": {
         "type": "stdio"
       },