@reunionstudio/airlock-mcp 0.1.5 → 0.1.6

package/.agents/skills/airlock-mcp/SKILL.md

@@ -246,6 +246,17 @@ For read-only planning and audit, use `observe.reference_context`,
 `observe.explain_access(action => 'get_reference_record', object_key => ...)`
 without querying raw reference rows.
 
+Attachments remain governed evidence. Agents should discover and manage them
+through installed Airlock procedures, not by reading Airlock-owned stages or
+generated storage directly. The Streamlit Native App can preview images and
+text inline and can render bounded page-at-a-time PDF previews for files up to
+100 MB and 2,000 pages. PDFs larger than 12 MB require an explicit open action;
+the selected page and next two pages warm a private session cache. Full-file
+download remains a short-lived Snowflake link when available. Successful PDF
+page previews emit metadata-only `ATTACHMENT_PREVIEW` activity, never document
+content or stage URLs. This UI preview capability does not grant MCP clients
+direct attachment bytes.
+
 Help the app follow the loop:
 
 - Observe/read: fetch existing governed data through approved Airlock or

package/README.md

@@ -240,6 +240,18 @@ inspect `observe.usage_limits`, `observe.usage_limit`, and
 `observe.explain_access(action => 'get_reference_record', object_key => ...)`
 without reading raw reference rows.
 
+Airlock's Streamlit Native App can inspect governed attachment evidence without
+moving it into a separate document service. Images and text preview inline.
+PDFs up to 100 MB and 2,000 pages render one selected page at a time; the
+selected page and next two pages are loaded as one bounded window so ordinary
+forward navigation can use the session cache. PDFs larger than 12 MB require an
+explicit open action. Rendering is bounded by time, dimensions, concurrency,
+output size, session storage, and expiry, while full-file access remains a
+short-lived Snowflake download when available. Successful PDF page previews
+emit metadata-only `ATTACHMENT_PREVIEW` activity. This human-facing capability
+does not permit an MCP agent to bypass attachment procedures or read underlying
+stage objects directly.
+
 For governed Markdown knowledge, use the `okf-knowledge-bundle` pattern. It
 sets `core_config.payload_adapter` to `okf_knowledge_bundle` so installed
 Airlock can load locally validated bundles through

package/docs/install-surface.md

@@ -38,6 +38,14 @@ known lookup value and purpose, with `observe.reference_context`,
 `observe.explain_access(action => 'get_reference_record', object_key => ...)`
 for planning and audit.
 
+The installed Streamlit Native App also provides governed attachment
+inspection: inline image/text previews and bounded, page-at-a-time PDF preview
+for documents up to 100 MB and 2,000 pages. The selected PDF page warms the next
+two pages in the session cache; large PDFs require explicit open, and full-file
+access uses Snowflake download links when available. Successful PDF page
+previews emit metadata-only `ATTACHMENT_PREVIEW` activity. This UI capability
+does not grant MCP clients direct stage access.
+
 The connector package and MCP server live in `reunionstudio/airlock-mcp`.
 This workbench provides the spec-building implementation inside that one
 installed Airlock MCP experience.

package/docs/workflows.md

@@ -187,6 +187,17 @@ budgeting. Use `observe.reference_context`, `observe.usage_limits`,
 `observe.explain_access(action => 'get_reference_record', object_key => ...)`
 for planning and audit without reading raw reference rows.
 
+## Governed Attachment Preview
+
+Attachments remain governed evidence. Agents should discover and manage them
+through installed Airlock procedures rather than reading Airlock-owned stages.
+In the Streamlit Native App, images and text can preview inline, and PDFs up to
+100 MB and 2,000 pages can render one selected page at a time. Airlock renders a
+bounded three-page window so the next two pages are normally session-cache
+hits; PDFs larger than 12 MB require an explicit open action. Full-file download
+remains available through a short-lived Snowflake link when the runtime can
+create one. Preview activity emits metadata-only `ATTACHMENT_PREVIEW` events.
+
 The app should follow the loop:
 
 1. Observe/read governed records through approved Airlock or Snowflake surfaces.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reunionstudio/airlock-mcp",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "Single-install MCP interface for Airlock agents.",
   "type": "module",
   "repository": {

package/setup.py

@@ -27,7 +27,7 @@ def data_files():
 
 setup(
     name="airlock-mcp",
-    version="0.1.5",
+    version="0.1.6",
     description="Codex-first workbench and CLI for drafting Airlock specs.",
     packages=find_packages("src"),
     package_dir={"": "src"},

package/src/airlock_mcp/__init__.py

@@ -1,3 +1,3 @@
 """Airlock MCP CLI package."""
 
-__version__ = "0.1.5"
+__version__ = "0.1.6"

package/src/airlock_mcp/app_context.py

@@ -54,6 +54,14 @@ purpose, and role lens. Use `observe.reference_context`,
 `observe.explain_access(action => 'get_reference_record', object_key => ...)`
 for planning and audit without reading raw reference rows.
 
+Attachments remain governed evidence. Agents should discover and manage them
+through installed Airlock procedures, not by reading Airlock-owned stages.
+The Streamlit Native App can preview images and text inline and can render
+bounded page-at-a-time PDF previews for files up to 100 MB and 2,000 pages.
+PDFs larger than 12 MB require explicit open; successful page previews emit
+metadata-only `ATTACHMENT_PREVIEW` activity and do not grant MCP clients direct
+attachment bytes.
+
 Do not store credentials here. Do not write directly to Airlock-owned tables,
 stages, generated views, or generated tables. Use approved Airlock/Snowflake
 access paths and submit governed decisions or actions through spec contracts.
@@ -102,6 +110,11 @@ known lookup value and purpose, and use `observe.reference_context`,
 `observe.usage_limits`, `observe.usage_limit`, and
 `observe.explain_access(action => 'get_reference_record', object_key => ...)`
 for planning and audit.
+
+For attachments, use installed Airlock procedures and governed UI surfaces.
+The Streamlit Native App can preview images/text and bounded PDF pages, but
+`ATTACHMENT_PREVIEW` activity is metadata-only and MCP clients must not read
+Airlock-owned stages directly.
 """
 
 
@@ -162,6 +175,7 @@ def _manifest(mode: str, entries: list[dict[str, Any]]) -> dict[str, Any]:
             "agent": "governed agent work in the actor scope",
             "admin": "administrative mutation and operational changes",
             "restricted_reference": "one-record reference lookup through agent.get_reference_record; do not enumerate protected reference paths",
+            "attachment_preview": "governed Streamlit preview emits metadata-only ATTACHMENT_PREVIEW; MCP clients do not get direct stage access",
         },
         "specs": entries,
         "tracks": {

package/src/airlock_mcp/bootstrap.py

@@ -139,6 +139,15 @@ value, purpose, and role lens. Use `observe.usage_limits`,
 `observe.explain_access(action => 'get_reference_record', object_key => ...)`
 for planning and audit without reading raw reference rows.
 
+Attachments remain governed evidence. Agents should discover and manage them
+through installed Airlock procedures, not by reading Airlock-owned stages
+directly. The Streamlit Native App can preview images and text inline and can
+render bounded page-at-a-time PDF previews for files up to 100 MB and 2,000
+pages. PDFs larger than 12 MB require an explicit open action; the selected
+page and next two pages warm a private session cache. Successful PDF page
+previews emit metadata-only `ATTACHMENT_PREVIEW` activity and do not grant MCP
+clients direct attachment bytes.
+
 The app may orient the user with summaries, comparisons, rankings, exception
 queues, proposals, or dashboards. It should submit governed choices back
 through an Airlock spec contract. Do not write directly to Airlock-owned tables,

package/src/mcp.mjs

@@ -44,7 +44,7 @@ export function handleMcpRequest(message) {
       },
       serverInfo: {
         name: "airlock",
-        version: "0.1.5",
+        version: "0.1.6",
       },
       instructions:
         "Airlock MCP helps agents improve processes with Airlock specs and build apps or workflows that use existing specs. Use airlock_start for orientation or the airlock_* tools to bootstrap, draft, check, summarize, export, and render specs.",

package/src/text.mjs

@@ -79,6 +79,12 @@ role lens. It returns at most one record, applies reference row filters, checks
 \`observe.reference_context\`, \`observe.usage_limits\`, \`observe.usage_limit\`,
 and \`observe.explain_access(action => 'get_reference_record', object_key => ...)\`
 for read-only planning and audit.
+Attachments remain governed evidence. Agents should discover and manage them
+through installed Airlock procedures, not by reading Airlock-owned stages.
+The Streamlit Native App can preview images/text and bounded page-at-a-time
+PDFs up to 100 MB and 2,000 pages; PDFs larger than 12 MB require explicit
+open. Successful page previews emit metadata-only \`ATTACHMENT_PREVIEW\`
+activity and do not grant MCP clients direct attachment bytes.
 
 Do not use retired admin read wrappers such as
 \`admin.list_specs\`, \`admin.describe_role\`, or \`admin.list_events\`; use
@@ -204,6 +210,9 @@ read wrappers such as \`admin.list_specs\`, \`admin.describe_role\`, or
 \`reference_config.restricted_reference\`, do not enumerate the protected
 reference; use \`agent.get_reference_record\` for a known lookup value and
 \`observe.usage_limits\` / \`observe.usage_limit\` for budget visibility. It can
+also explain governed attachment preview: Streamlit can preview images/text and
+bounded PDF pages, while \`ATTACHMENT_PREVIEW\` remains metadata-only and agents
+must use Airlock procedures instead of direct stage reads. Airlock MCP can
 seed an app repo with \`airlock/specs.manifest.json\`, spec snapshots, sample
 records, and generated helper folders. The app should submit decisions,
 approvals, actions, comments, or follow-ups through Airlock spec contracts, not