@saihm/mcp-server-pro 0.1.2 → 0.1.3

package/README.md

@@ -51,6 +51,16 @@ await saihm.share({
 });
 await saihm.revokeShare(cellId, recipientPinnedAgentIdHashHex);
 
+// Read a cell another agent shared TO you (the recipient side of `share`). Pin the
+// sharer's agentIdHash out-of-band; the library verifies the sharer's signature and
+// returns null when there is no live grant (e.g. revoked, or the sharer crypto-shredded it).
+const shared = await saihm.recallShared({
+  sharerPinnedAgentIdHashHex,            // the sharer's agentIdHash, pinned out-of-band
+  sharerRecord,                          // the sharer's published identity record (hex)
+  cellId,
+});
+console.log(shared?.plaintext);
+
 // Operator-observable metadata only (no plaintext).
 const status = await saihm.status();
 ```
@@ -79,7 +89,7 @@ Non-2xx responses throw `SaihmEndpointError` with `status` and a typed `code` (e
 | Integrity / authenticity | Every cell is ML-DSA-65-signed over its contents, including the sequence number. |
 | Anti-replay | The signed monotonic sequence is rejected by the endpoint if not strictly increasing. |
 | Tenant isolation | Your `agentIdHash` (= the JWT `sub`) namespaces your state; a write whose signed identity differs from the JWT is rejected. |
-| Authenticated sharing | Grantee public keys are pinned out-of-band and verified before any secret is bound to them. |
+| Authenticated sharing | Grantee public keys are pinned out-of-band and verified before any secret is bound to them; on the recipient side, `recallShared` pins the sharer's key and verifies the cell signature before returning any plaintext. |
 | Erasure | Destroying the endpoint-side wrapped DEK crypto-shreds the cell. |
 
 ## Where sealed cells are stored

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saihm/mcp-server-pro",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "SAIHM production thin-client. Seals client-side via @saihm/client-pro (ML-DSA-65 identity, per-cell AES-256-GCM DEK wrapped under a client KEK, ML-KEM-768 authenticated sharing) and POSTs opaque ciphertext to the blind, non-custodial SAIHM /mcp endpoint. The master secret, KEK, and plaintext never leave this process. Apache-2.0.",
   "type": "module",
   "main": "dist/index.js",
@@ -37,6 +37,10 @@
   "license": "Apache-2.0",
   "author": "SAIHM",
   "homepage": "https://saihm.coti.global",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SAIHM-Admin/saihm-mcp-server-pro.git"
+  },
   "engines": {
     "node": ">=20"
   },