@theronap/agnoclast-mcp 0.9.153 → 0.9.155

package/lib/diagnose.mjs

@@ -479,7 +479,7 @@ export async function fetchCortex(url, opts = {}, policy = {}) {
 export async function checkToken(token, base) {
   if (!token) {
     return { ok: false, status: 0, diagnosis: { kind: 'config', retriable: false,
-      message: 'No CORTEX_TOKEN found. Run: npx -y @theronap/cortex-mcp setup <your-token>' } }
+      message: 'No CORTEX_TOKEN found. Run: npx -y @theronap/cortex-mcp login (opens your browser; or `setup <token>` with a token from the console → Connect your AI)' } }
   }
   if (!isUuid(token)) {
     return { ok: false, status: 0, diagnosis: { kind: 'config', retriable: false,

package/lib/doctor.mjs

@@ -56,7 +56,7 @@ async function statusLine(out, { capturesStuck = false } = {}) {
   const base = resolveBase(process.env.CORTEX_URL)
   const { token } = resolveToken()
   if (!token) {
-    out('Agnoclast: NOT connected — no token found. Run: npx -y @theronap/cortex-mcp setup <token>')
+    out('Agnoclast: NOT connected — no token found. Run: npx -y @theronap/cortex-mcp login (opens your browser; or `setup <token>` with a token from the console → Connect your AI)')
     return
   }
   try {

package/lib/server.mjs

@@ -1438,7 +1438,7 @@ function renderNudge(payload) {
     {
       title: 'Read a wiki page in full',
       description:
-        'READ the full authored wiki page for one node (project/person/org/you) by its canonical name — every section, every tier you can see. This is how you READ a node; `grep` only LOCATES pages (snippets + their [[links]]), it does not read them. Navigate like a researcher: read the page you need, then FOLLOW its inline [[links]] by calling read_page on each linked name — keep following while the linked pages stay relevant, stop when they do not. You decide how deep to go. Returns only what you are permitted to see.',
+        'READ the full authored wiki page for one node (project/person/org/you) by its canonical name — every section you can see. This is how you READ a node; `grep` only LOCATES pages (snippets + their [[links]]), it does not read them. Navigate like a researcher: read the page you need, then FOLLOW its inline [[links]] by calling read_page on each linked name — keep following while the linked pages stay relevant, stop when they do not. You decide how deep to go. Returns only what you are permitted to see.',
       inputSchema: {
         name: z.string().describe('the canonical node name exactly as written (e.g. "Agnoclast", "Ben", or a [[link]] target) — identifier links ([[repo:owner/name]]) resolve to their authored HOME + a visible-event count'),
         kind: z.enum(['project', 'person', 'org', 'user']).optional().describe('node kind — a PREFERENCE, not a filter. The lookup matches every kind by title and only prefers this one when several share a name, so omitting it never hides a person/org/user page. Pass it to disambiguate a name that exists as more than one kind.'),
@@ -1598,7 +1598,7 @@ function renderNudge(payload) {
           // unrecoverable base_version guessing loop; say so explicitly instead.
           const versionLine = t.version
             ? `\nversion: ${t.version}`
-            : `\nversion: none (this variant predates content-hash tracking — base_version writes will always fail here; ask an admin about the ADR-0018 backfill)`
+            : `\nversion: none (this page predates content-hash tracking — base_version writes will always fail here; ask an admin about the ADR-0018 backfill)`
           const head = `[${t.tier}${day(t.updated_at) ? ` · authored ${day(t.updated_at)}` : ''}${t.validity && t.validity !== 'current' ? ` · ${t.validity}` : ''}${versionLine}]`
           // ADR-0030 step 3b (2026-08-24): the summary header is NO LONGER RENDERED here either.
           // ⚠ There were TWO of these — project_status and read_page — and the first patch fixed only
@@ -1824,19 +1824,18 @@ function renderNudge(payload) {
     'rename_section',
     {
       title: 'Rename one section heading on a wiki page',
-      description: 'Rename ONE section\'s heading on a wiki page, in place. Use this instead of re-authoring the page: `author` cannot express a rename, because a section\'s IDENTITY is its heading string — sending a new title reads as "dropped the old section, added a new one" and is rejected 409 would_drop_sections. This route changes the heading and NOTHING else: the section keeps its body, its position, and crucially its as-of date, so renaming does not reset the currency stamp on a claim nobody re-verified. It is also the ONLY way to fix a heading longer than the 80-char limit, which cannot be re-authored at all. Requires base_version (the `version` read_page prints) — that is also how it finds the right brain, so it can never rename on the wrong one. Refuses, rather than guessing, when the page exists at several tiers, when the heading repeats, or when the new heading is already taken.',
+      description: 'Rename ONE section\'s heading on a wiki page, in place. Use this instead of re-authoring the page: `author` cannot express a rename, because a section\'s IDENTITY is its heading string — sending a new title reads as "dropped the old section, added a new one" and is rejected 409 would_drop_sections. This route changes the heading and NOTHING else: the section keeps its body, its position, and crucially its as-of date, so renaming does not reset the currency stamp on a claim nobody re-verified. It is also the ONLY way to fix a heading longer than the 80-char limit, which cannot be re-authored at all. Requires base_version (the `version` read_page prints) — that is also how it finds the right brain, so it can never rename on the wrong one. Refuses, rather than guessing, when the heading repeats, or when the new heading is already taken.',
       inputSchema: {
         name: z.string().describe('the exact page name, as read_page shows it'),
         from: z.string().describe('the CURRENT heading, exactly as stored (match is case- and whitespace-insensitive)'),
         to: z.string().describe('the new heading. Max 80 chars. Must not already be used by another section on this page.'),
         base_version: z.string().describe('the `version` read_page prints for this page (64-hex). REQUIRED — it is the concurrency check AND how the right brain is resolved. A per-SECTION hash is not valid here.'),
-        tier: z.enum(['accessible', 'scoped', 'confidential']).optional().describe('only when the page exists at MORE THAN ONE tier — which one to rename in. A rename never moves content between tiers.'),
         ordinal: z.number().optional().describe('only when the same heading appears more than once on the page — which occurrence to rename (the error lists the ordinals).'),
         reason: z.string().optional().describe('why you are renaming it — recorded in page_history like any other edit'),
         identity_claim_ack: z.boolean().optional().describe('ONLY after a 409 identity_claim refusal, and only if the answer is genuinely yes: this text is meant to publish an email address or phone number as page content at this tier — e.g. the subject is publishing their OWN contact detail on their own page. Leave unset otherwise; the alternatives the refusal names (a confidential section, or set_routing_identifier for a private claim) are the right answer in every other case.'),
       },
     },
-    async ({ name, from, to, base_version, tier, ordinal, reason, identity_claim_ack }) => {
+    async ({ name, from, to, base_version, ordinal, reason, identity_claim_ack }) => {
       let res
       try {
         res = await fetchCortex(`${BASE}/api/brain/rename-section`, {
@@ -1844,7 +1843,7 @@ function renderNudge(payload) {
           headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
           body: JSON.stringify({
             name, from, to, base_version,
-            ...(tier ? { tier } : {}), ...(ordinal !== undefined ? { ordinal } : {}),
+            ...(ordinal !== undefined ? { ordinal } : {}),
             ...(reason ? { reason } : {}), ...(identity_claim_ack ? { identity_claim_ack: true } : {}),
           }),
         })
@@ -1880,7 +1879,6 @@ function renderNudge(payload) {
         into: z.string().optional().describe('the heading of the section that SURVIVES and absorbs the content. Omit to drop `from` outright without folding it anywhere.'),
         new_body: z.string().optional().describe('the condensed body the surviving section should read AFTER the merge — you write it, this route does not summarize. Required with `into`; must be absent without it.'),
         base_version: z.string().describe('the `version` read_page prints for this page (64-hex). REQUIRED — it is the concurrency check AND how the right brain is resolved. A per-SECTION hash is not valid here.'),
-        tier: z.enum(['accessible', 'scoped', 'confidential']).optional().describe('only when the page exists at MORE THAN ONE tier — which one to condense in. A merge never moves content between tiers.'),
         from_ordinal: z.number().optional().describe('only when `from`\'s heading appears more than once on the page — which occurrence (the error lists the ordinals).'),
         into_ordinal: z.number().optional().describe('only when `into`\'s heading appears more than once on the page — which occurrence (the error lists the ordinals).'),
         reason: z.string().optional().describe('WHY you are condensing, in one short phrase — recorded in page_history. Say what became redundant, not what you did.'),
@@ -1888,7 +1886,7 @@ function renderNudge(payload) {
         identity_claim_ack: z.boolean().optional().describe('ONLY after a 409 identity_claim refusal, and only if the answer is genuinely yes: this text is meant to publish an email address or phone number as page content at this tier.'),
       },
     },
-    async ({ name, from, into, new_body, base_version, tier, from_ordinal, into_ordinal, reason, drop_links_ack, identity_claim_ack }) => {
+    async ({ name, from, into, new_body, base_version, from_ordinal, into_ordinal, reason, drop_links_ack, identity_claim_ack }) => {
       let res
       try {
         res = await fetchCortex(`${BASE}/api/brain/merge-sections`, {
@@ -1897,7 +1895,6 @@ function renderNudge(payload) {
           body: JSON.stringify({
             name, from, base_version,
             ...(into ? { into } : {}), ...(new_body !== undefined ? { new_body } : {}),
-            ...(tier ? { tier } : {}),
             ...(from_ordinal !== undefined ? { from_ordinal } : {}),
             ...(into_ordinal !== undefined ? { into_ordinal } : {}),
             ...(reason ? { reason } : {}),
@@ -2754,11 +2751,10 @@ function renderNudge(payload) {
         summary: z.string().describe('the new summary: one sentence saying what this is and where it stands. May contain [[links]]. Max 2,000 chars — detail belongs in a section.'),
         base_version: z.string().describe('the `version` read_page prints for this page (64-hex). REQUIRED — it is the concurrency check AND how the right brain is resolved. A per-SECTION hash is not valid here.'),
         reason: z.string().optional().describe('WHY the summary was wrong, in one short phrase — recorded in page_history. Say what changed ("blocker resolved 08-04; was still claiming BLOCKED"), not what you did.'),
-        tier: z.enum(['accessible', 'scoped', 'confidential']).optional().describe('only when the page exists at MORE THAN ONE tier — which one to rewrite. This never moves content between tiers.'),
         identity_claim_ack: z.boolean().optional().describe('ONLY after a 409 identity_claim refusal, and only if the answer is genuinely yes: this text is meant to publish an email address or phone number as page content at this tier — e.g. the subject is publishing their OWN contact detail on their own page. Leave unset otherwise; the alternatives the refusal names (a confidential section, or set_routing_identifier for a private claim) are the right answer in every other case.'),
       },
     },
-    async ({ name, summary, base_version, reason, tier, identity_claim_ack }) => {
+    async ({ name, summary, base_version, reason, identity_claim_ack }) => {
       let res
       try {
         res = await fetchCortex(`${BASE}/api/brain/set-summary`, {
@@ -2766,7 +2762,7 @@ function renderNudge(payload) {
           headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
           body: JSON.stringify({
             name, summary, base_version,
-            ...(tier ? { tier } : {}), ...(reason ? { reason } : {}),
+            ...(reason ? { reason } : {}),
             ...(identity_claim_ack ? { identity_claim_ack: true } : {}),
           }),
         })
@@ -2803,12 +2799,11 @@ function renderNudge(payload) {
         new_string: z.string().describe('what to replace it with. May be empty, which deletes the anchored text.'),
         base_version: z.string().describe('the `version` read_page prints for this page (64-hex). REQUIRED — it is the concurrency check AND how the right brain is resolved.'),
         reason: z.string().describe('WHY you are making this change, in one short phrase — recorded in page_history exactly like an author edit.'),
-        tier: z.enum(['accessible', 'scoped', 'confidential']).optional().describe('only when the page exists at MORE THAN ONE tier — which one to edit. An edit never moves content between tiers.'),
         ordinal: z.number().optional().describe('only when the same heading appears more than once on the page — which occurrence (the error lists the ordinals).'),
         identity_claim_ack: z.boolean().optional().describe('ONLY after a 409 identity_claim refusal, and only if the answer is genuinely yes: this text is meant to publish an email address or phone number as page content at this tier — e.g. the subject is publishing their OWN contact detail on their own page. Leave unset otherwise; the alternatives the refusal names (a confidential section, or set_routing_identifier for a private claim) are the right answer in every other case.'),
       },
     },
-    async ({ name, heading, old_string, new_string, base_version, reason, tier, ordinal, identity_claim_ack }) => {
+    async ({ name, heading, old_string, new_string, base_version, reason, ordinal, identity_claim_ack }) => {
       let res
       try {
         res = await fetchCortex(`${BASE}/api/brain/edit-page`, {
@@ -2816,7 +2811,7 @@ function renderNudge(payload) {
           headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
           body: JSON.stringify({
             name, heading, old_string, new_string, base_version, reason,
-            ...(tier ? { tier } : {}), ...(ordinal !== undefined ? { ordinal } : {}),
+            ...(ordinal !== undefined ? { ordinal } : {}),
             ...(identity_claim_ack ? { identity_claim_ack: true } : {}),
           }),
         })
@@ -3148,7 +3143,7 @@ function renderNudge(payload) {
         org_id: z.string().describe('the org id of the brain to enumerate (from my_brains)'),
         owner: z.string().optional().describe('only pages owned by this person — a user id or an EXACT display name. A name matching no member of the brain is an error, never a silently empty list. Owner applies to scoped/confidential pages; accessible pages have no owner.'),
         updated_within_days: z.number().optional().describe('only pages touched in the last N days'),
-        tier: z.enum(['accessible', 'scoped', 'confidential']).optional().describe('only nodes that have a row at this tier. The row still reports every tier you can see, so a multi-tier page does not come back describing itself as single-tier.'),
+        tier: z.enum(['accessible', 'scoped', 'confidential']).optional().describe('only pages at this tier'),
         kind: z.enum(['project', 'person', 'org', 'user']).optional().describe('only nodes of this kind'),
         validity: z.enum(['current', 'superseded', 'all']).optional().describe("default 'current'. Pass 'all' for the pre-2026-08 behavior, which mixed superseded pages in with nothing marking them."),
         name_contains: z.string().optional().describe('case-insensitive substring match on the node name or page title'),
@@ -3960,16 +3955,15 @@ function renderNudge(payload) {
         ref: z.string().optional().describe('the page\'s stable id, printed as `ref:` by read_page. Prefer this over name: unique across brains, so it addresses exactly one page.'),
         grantee: z.string().describe('display name or email of a member OF THE PAGE\'S BRAIN (must resolve uniquely — use email if ambiguous)'),
         action: z.enum(['grant', 'revoke']).describe('grant or revoke'),
-        tier: z.enum(['scoped', 'confidential']).optional().describe('which variant (default: the most restrictive one)'),
       },
     },
-    async ({ kind, name, ref, grantee, action, tier }) => {
+    async ({ kind, name, ref, grantee, action }) => {
       let res
       try {
         res = await fetchCortex(`${BASE}/api/brain/page-grants`, {
           method: 'POST',
           headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
-          body: JSON.stringify({ kind, ...(name ? { name } : {}), ...(ref ? { ref } : {}), grantee, action, ...(tier ? { tier } : {}) }),
+          body: JSON.stringify({ kind, ...(name ? { name } : {}), ...(ref ? { ref } : {}), grantee, action }),
         })
       } catch (e) {
         return toolError(`Could not ${action}: ${e.message}`)
@@ -3985,7 +3979,7 @@ function renderNudge(payload) {
     'list_page_grants',
     {
       title: 'List who has granted access to your page',
-      description: 'Show every explicit access grant on YOUR page\'s tier variants (owner-only). Use after re-tiering a page — grants survive tier changes and keep granting until revoked.',
+      description: 'Show every explicit access grant on YOUR pages (owner-only). Use after re-tiering a page — grants survive tier changes and keep granting until revoked.',
       inputSchema: {
         kind: z.enum(['project', 'person', 'org', 'user']).describe('the page kind'),
         name: z.string().optional().describe('the exact page name (or pass `ref` instead — one of the two is required)'),
@@ -4005,7 +3999,7 @@ function renderNudge(payload) {
       const out = await res.json().catch(() => null)
       if (!res.ok) return toolError(`Could not list grants: ${out?.error ?? res.status}`)
       if (!out.grants?.length) return { content: [{ type: 'text', text: 'No grants on this page.' }] }
-      const lines = out.grants.map((g) => `- ${g.grantee_name ?? g.grantee_user_id} → ${g.tier} variant (since ${String(g.created_at).slice(0, 10)})`)
+      const lines = out.grants.map((g) => `- ${g.grantee_name ?? g.grantee_user_id} → ${g.tier} page (since ${String(g.created_at).slice(0, 10)})`)
       return { content: [{ type: 'text', text: `Grants (${out.grants.length}):\n${lines.join('\n')}` }] }
     },
   )
@@ -4367,8 +4361,7 @@ function renderNudge(payload) {
       // last chance to notice a page was fixed somewhere nobody reads.
       const corrections = Array.isArray(out?.tierCorrections) && out.tierCorrections.length
         ? `\n⚠ TIER: this wrote to ${out.tierCorrections.map((c) => `${c.actualTier} (you asked for ${c.requestedTier})`).join('; ')}.` +
-          ` If that is not the tier you meant, read_page and check which copy you just changed —` +
-          ` a page can exist at several tiers and they drift apart independently.`
+          ` A page has one tier and author writes at it; to change who can see the page, use set_page_privacy.`
         : ''
       // KWA-26 — the advisory undated flag. The server has computed `undatedSections` since #558 and
       // the route has returned it ever since; NOTHING PRINTED IT, so the one consumer the item names

package/lib/use_brain.mjs

@@ -45,7 +45,7 @@ export async function runUseBrain(args) {
   const base = resolveBase(process.env.CORTEX_URL)
   const { token } = resolveToken()
   if (!token) {
-    out('Agnoclast: no token found. Run: npx -y @theronap/cortex-mcp setup <token>')
+    out('Agnoclast: no token found. Run: npx -y @theronap/cortex-mcp login (opens your browser; or `setup <token>` with a token from the console → Connect your AI)')
     return 1
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.153",
+  "version": "0.9.155",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {