@sym-bot/mesh-channel 0.3.18 → 0.3.20

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sym-mesh-channel",
-  "version": "0.3.18",
+  "version": "0.3.20",
   "description": "Real-time Claude-to-Claude mesh. Agent-to-agent cognitive signals over Bonjour LAN or WebSocket relay.",
   "author": {
     "name": "Hongwei Xu",

package/.mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@sym-bot/mesh-channel@0.3.18"
+        "@sym-bot/mesh-channel@0.3.20"
       ],
       "env": {
         "SYM_RELAY_URL": "${user_config.relay_url}",

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.3.20
+
+### Added
+
+- **`sym_inbox` — pull-based receive (bypasses channel-push gating).** Claude Code 2.1.177 gates the real-time `<channel>` push behind a managed-settings policy + server-side allowlist, but the MCP tool layer is never gated. Every inbound CMB is already accumulated server-side (the cmb-accepted handler stores it *before* the gated push), so `sym_inbox` lets the agent **pull** messages received since its last check — directed `sym_send` addressed to it plus admitted broadcasts. FIFO drain with a read cursor (no message is skipped even past the page limit), `peek` for non-destructive reads, `limit` to page. The agent is instructed to poll `sym_inbox` at the start of a turn and periodically while coordinating, so receive works regardless of the channel-push policy gate. Compact `[mNNN]` headers; `sym_fetch` for full content.
+
+## 0.3.19
+
+### Added
+
+- **Signed CMBs (MMP §8.3) — authenticity + integrity.** Pins `@sym-bot/sym` to `^0.7.10`: every CMB is now Ed25519-signed by its author and verified receiver-side against the sending peer's handshake-announced identity key **and** its content hash. A forged, tampered, or content-swapped CMB is rejected before it can reach Claude's context (audit-metered). Unsigned CMBs are allowed for interop unless `SYM_REQUIRE_SIGNED_CMB` is set. This is the cryptographic layer above the existing Ed25519 transport identity + SVAF relevance gate + prompt-injection filter. Version-bumped (plugin + `.mcp.json` pin) so installed plugins reinstall and pick up signing on restart.
+
 ## 0.3.18
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sym-bot/mesh-channel",
-  "version": "0.3.18",
+  "version": "0.3.20",
   "description": "MCP server — real-time agent-to-agent cognition for Claude Code remote teams via the SYM mesh.",
   "main": "server.js",
   "bin": {
@@ -22,7 +22,7 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "@sym-bot/sym": "^0.7.9",
+    "@sym-bot/sym": "^0.7.10",
     "bonjour-service": "^1.3.0"
   },
   "engines": {

package/server.js

@@ -324,17 +324,18 @@ function registerNodeHandlers(n) {
     // not assume it is recallable later.
     const dirTag = entry.directed ? ' →you' : '';
     const memTag = entry.directed && entry.remixed === false ? ' ·not-stored' : '';
-    const msgId = storeMessage(source, body);
-    pushChannel('cmb', `[${source}${dirTag}] ${focus}${moodSuffix}${memTag}${payloadSuffix} [${msgId}]`);
+    const header = `[${source}${dirTag}] ${focus}${moodSuffix}${memTag}${payloadSuffix}`;
+    const msgId = storeMessage(source, body, header);
+    pushChannel('cmb', `${header} [${msgId}]`);
   });
 
   n.on('message', (from, content) => {
     if (!isPeerAllowed(from)) return;
     const sec = checkSecurity(from, { focus: { text: content } }, null);
     if (!sec.safe) { securityAudit(sec.reason, from, sec.excerpt); return; }
-    const msgId = storeMessage(from, content);
-    const header = extractCompactHeader(from, content);
-    pushChannel('message', `[${from}] ${header} [${msgId}]`);
+    const header = `[${from}] ${extractCompactHeader(from, content)}`;
+    const msgId = storeMessage(from, content, header);
+    pushChannel('message', `${header} [${msgId}]`);
   });
 }
 
@@ -343,12 +344,12 @@ function registerNodeHandlers(n) {
 // Base instructions shown to the agent at every MCP initialize.
 const BASE_INSTRUCTIONS =
   `You are a peer node on the SYM mesh (identity: ${NODE_NAME}). ` +
-  'Mesh events arrive as <channel> notifications in real-time. ' +
-  'When you see a CMB from another node, respond via sym_send targeted at that node by name if the reply is for that specific peer (MMP §4.4.4 targeted CMB). ' +
+  'Mesh events may arrive as <channel> notifications in real-time, but that push can be gated by Claude Code policy — so to RECEIVE reliably, call sym_inbox to PULL messages addressed to you (directed sym_send + admitted broadcasts). Call sym_inbox at the start of your turn and periodically while coordinating with peers, so you never miss one. ' +
+  'When you receive a CMB from another node, respond via sym_send targeted at that node by name if the reply is for that specific peer (MMP §4.4.4 targeted CMB). ' +
   'Share observations about your own state with the whole mesh via sym_observe (MMP §9.2 receiver-autonomous SVAF evaluation). ' +
   'Both sym_send and sym_observe emit CAT7 CMBs; receivers run SVAF and, if admitted, remix-store with lineage pointing back to your CMB. ' +
   'Search mesh memory via sym_recall. ' +
-  'Messages arrive as compact headers with [mNNN] IDs — use sym_fetch to read the full content when the header is relevant to your current task.';
+  'sym_inbox and <channel> notifications give compact headers with [mNNN] IDs — use sym_fetch to read the full content when relevant to your current task.';
 
 // Final startup step (MMP §4.2 O2 — rejoin-without-replay). The SymNode
 // constructor builds the memory-store index from disk, so the primer is
@@ -487,6 +488,17 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
         required: ['msg_id'],
       },
     },
+    {
+      name: 'sym_inbox',
+      description: 'PULL mesh messages received since your last inbox check — directed sym_send addressed to you, plus admitted broadcasts. This is the poll-based RECEIVE path: real-time channel push can be gated by Claude Code policy, but this tool always works. Call it at the start of a turn and periodically while coordinating so you never miss a peer. Returns compact headers with [mNNN] IDs (newest last); use sym_fetch for full content, reply via sym_send.',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          peek: { type: 'boolean', description: 'If true, do not advance the read cursor (same items return next call). Default false — draining.' },
+          limit: { type: 'number', description: 'Max messages to return (default 50, newest last).' },
+        },
+      },
+    },
     {
       name: 'sym_group_info',
       description: 'Report the mesh group this node is in (MMP §5.8). Shows service type + group name + peer count.',
@@ -651,6 +663,40 @@ mcp.setRequestHandler(CallToolRequestSchema, async (request) => {
       };
     }
 
+    case 'sym_inbox': {
+      const limit = Math.max(1, Math.min(args.limit || 50, MAX_STORED));
+      const fresh = [];
+      for (const [id, entry] of MESSAGE_STORE) {
+        const seq = parseInt(id.slice(1), 10);
+        if (seq > inboxCursor) fresh.push({ id, seq, entry });
+      }
+      fresh.sort((a, b) => a.seq - b.seq);
+      // FIFO: drain the OLDEST `limit` first so the cursor advances contiguously
+      // and a backlog larger than `limit` is never skipped — the rest come on the
+      // next call. (Newest-first would jump the cursor past un-returned items.)
+      const slice = fresh.slice(0, limit);
+      if (!args.peek && slice.length) {
+        inboxCursor = Math.max(inboxCursor, ...slice.map((i) => i.seq));
+      }
+      if (!slice.length) {
+        return { content: [{ type: 'text', text: 'Inbox empty — no new mesh messages since your last check.' }] };
+      }
+      const more = fresh.length - slice.length;
+      const now = Date.now();
+      const lines = slice.map(({ id, entry }) => {
+        const age = Math.round((now - entry.timestamp) / 1000);
+        const head = entry.header || `[${entry.from}] ${String(entry.content || '').replace(/\s+/g, ' ').slice(0, 80)}`;
+        return `${head} [${id}] (${age}s ago)`;
+      });
+      const moreNote = more > 0 ? ` (+${more} more — call sym_inbox again)` : '';
+      return {
+        content: [{
+          type: 'text',
+          text: `${slice.length} new mesh message(s)${args.peek ? ' (peek — not drained)' : ''}${moreNote}:\n${lines.join('\n')}\n\nUse sym_fetch <id> for full content; reply via sym_send to=<peer>.`,
+        }],
+      };
+    }
+
     case 'sym_status': {
       const s = node.status();
       return {
@@ -865,11 +911,12 @@ mcp.setRequestHandler(CallToolRequestSchema, async (request) => {
 // savings on mesh traffic without context loss.
 const MESSAGE_STORE = new Map();
 let msgSeq = 0;
+let inboxCursor = 0; // highest msgSeq drained by sym_inbox (pull-based receive)
 const MAX_STORED = 200;
 
-function storeMessage(from, content) {
+function storeMessage(from, content, header) {
   const msgId = `m${String(++msgSeq).padStart(3, '0')}`;
-  MESSAGE_STORE.set(msgId, { from, content, timestamp: Date.now() });
+  MESSAGE_STORE.set(msgId, { from, content, header: header || null, timestamp: Date.now() });
   while (MESSAGE_STORE.size > MAX_STORED) {
     const oldest = MESSAGE_STORE.keys().next().value;
     MESSAGE_STORE.delete(oldest);