@thehammer/danx-dashboard-mcp 0.1.211 → 0.1.212

package/dist/listen.js

@@ -122,6 +122,10 @@ export function invalidEventReason(value) {
     if (typeof value.origin !== "string" || !ACTIVITY_ORIGINS.has(value.origin)) {
         return "origin is not one of operator, agent, machine";
     }
+    // DX-4246 — the key snapshot is part of every event the dashboard sends, `null` when no key wrote it.
+    if (value.viaKey !== null && !(isRecord(value.viaKey) && typeof value.viaKey.id === "number" && typeof value.viaKey.name === "string")) {
+        return "viaKey is not null or {id, name}";
+    }
     const d = value.detail;
     if (!isRecord(d))
         return "detail is not an object";
@@ -187,7 +191,9 @@ export function invalidEventReason(value) {
  * reader would have to cross-reference.
  */
 function actorLabel(event) {
-    return `${event.actor} (${event.origin})`;
+    // DX-4246 — a write made through an API key names the user AND the key ("dan via claude-laptop (agent)").
+    const via = event.viaKey === null ? "" : ` via ${event.viaKey.name}`;
+    return `${event.actor}${via} (${event.origin})`;
 }
 /** Only ever called on an event `invalidEventReason` accepted, so its casts are checked. */
 function describe(event) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thehammer/danx-dashboard-mcp",
-  "version": "0.1.211",
+  "version": "0.1.212",
   "description": "Stdio MCP server fronting danxbot's dashboard API for agents (operator sessions and dispatched workers alike): the generic danxbot_api/danxbot_api_list/danxbot_api_spec tools reach any route the caller's credential may call, plus dedicated agent-specific tools (plan_connect, danxbot_complete, and other per-dispatch lifecycle callbacks) (DX-3465, PLN-11 R-25).",
   "license": "MIT",
   "type": "module",