@theronap/agnoclast-mcp 0.9.189 → 0.9.190

package/lib/editors/claude.mjs

@@ -36,11 +36,13 @@ export const ALLOWED_TOOL_NAMES = [
   'authoring_context', 'author', 'log_session',
   // routine, reversible maintenance
   'set_page_validity', 'snooze_red_link', 'attribute_thread',
+  // clears only the caller's OWN notice that a page was handed to them; the page is already theirs
+  'confirm_page_ownership',
 ]
 
 // ⚠ DELIBERATELY ABSENT, and not an oversight to be tidied up later: `grant_page_access`,
-// `transfer_page_ownership` and `set_project_membership`. Each one changes WHO CAN SEE SOMEONE ELSE'S
-// WORK, so each one prompts, every time, even on a seat that has pre-approved everything else. The
+// `transfer_page_ownership`, `set_project_membership` and `set_successor` (which names who would
+// read your pages if you left). Each one changes WHO CAN SEE SOMEONE ELSE'S WORK, so each one prompts, every time, even on a seat that has pre-approved everything else. The
 // listing halves (`list_page_grants`, `list_project_members`) are on the allowlist above because
 // reading who already has access discloses nothing the viewer could not already ask a person, and
 // making the check expensive is how it stops being done before the grant.

package/lib/server.mjs

@@ -5239,7 +5239,7 @@ function renderNudge(payload) {
     'transfer_page_ownership',
     {
       title: 'Hand a page over to someone else',
-      description: 'Make another org member the owner of a wiki page — "put Dana in charge of the Northwind page". Ownership decides who may re-tier it, who may set its edit policy, and (for scoped/confidential pages) who can read it, so this is a real handover, not a label. Allowed for the page\'s owner, or for a manager-ancestor who can already read it; pass yourself as `to` to TAKE ownership, which is the documented path for a manager who then needs to change policy. Recorded in page history with you as the actor. The page keeps its tier — transferring does not re-tier, so a scoped page handed to someone outside the new owner\'s chain can become unreadable to its previous audience; re-tier separately if that matters.',
+      description: 'Make another org member the owner of a wiki page — "put Dana in charge of the Northwind page". Ownership decides who may re-tier it, who may set its edit policy, and (for scoped/confidential pages) who can read it, so this is a real handover, not a label. Allowed for the page\'s owner, or for a manager-ancestor who can already read it; pass yourself as `to` to TAKE ownership, which is the documented path for a manager who then needs to change policy. When the owner has LEFT the brain, their page is handed on by its steward — their manager, the most senior person they shared it with, or their named successor — who sees it listed under "Pages waiting on you as steward" at session start and may transfer it even without read access (taking it yourself is how you read it). Someone else receiving a page is told at their next session start. Recorded in page history with you as the actor. The page keeps its tier — transferring does not re-tier, so a scoped page handed to someone outside the new owner\'s chain can become unreadable to its previous audience; re-tier separately if that matters.',
       inputSchema: {
         kind: z.enum(['project', 'person', 'org', 'user']).describe('the page kind'),
         name: z.string().optional().describe('the exact page name (or pass `ref` instead — one of the two is required)'),
@@ -5277,6 +5277,99 @@ function renderNudge(payload) {
     },
   )
 
+  // PAGES HANDED TO YOU — the "and confirms" half of the stewardship removal design (Theron, 2026-09-18;
+  // built 2026-09-30). transferPageOwnership writes a notice whenever someone else hands you a page, and
+  // the session-start block lists it until you confirm here. No refusal verb, on purpose: Theron ruled
+  // one out, because the new owner already holds transfer_page_ownership.
+  server.registerTool(
+    'confirm_page_ownership',
+    {
+      title: 'Confirm pages handed to you',
+      description: 'When someone hands you a page — a colleague using transfer_page_ownership, or a steward rehoming a departed member\'s page — your session start lists it under "Pages handed to you" until you confirm it. Pass the page `refs` (as listed there) to confirm those, or `all: true` for every open one. Confirming only clears the notice: the page is already yours. To pass one on instead, use transfer_page_ownership.',
+      inputSchema: {
+        refs: z.array(z.string()).optional().describe('page refs, as listed under "Pages handed to you"'),
+        all: z.boolean().optional().describe('true = confirm every open notice'),
+      },
+    },
+    async ({ refs, all }) => {
+      if (!all && !(refs && refs.length)) return toolError('Pass `refs` (the pages to confirm) or `all: true`.')
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/brain/ownership-notices`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify(all ? { all: true } : { refs }),
+        })
+      } catch (e) {
+        return toolError(`Could not confirm: ${e.message}`)
+      }
+      const out = await res.json().catch(() => null)
+      if (!res.ok) {
+        if (out?.error) return toolError(`Could not confirm: ${out.error}`)
+        const d = classify(res.status, res.headers.get('content-type'), '', res.headers.get('x-vercel-id'))
+        return toolError(`Could not confirm: ${d.message}`)
+      }
+      const n = Number(out?.confirmed ?? 0)
+      return {
+        content: [{
+          type: 'text',
+          text: n === 0
+            ? 'Nothing to confirm — no open notice matched. It may already be confirmed, or the page has since moved on to someone else.'
+            : `Confirmed ${n} page${n === 1 ? '' : 's'}. ${n === 1 ? 'It stays' : 'They stay'} yours, and the notice will not show again.`,
+        }],
+      }
+    },
+  )
+
+  // SUCCESSOR — who inherits your pages if you leave a brain where you have no manager (20260919071500).
+  // The route existed from 2026-09-19 and nothing called it, so no root could actually name one; the
+  // session-start block now nudges anyone who needs to, and this is where they answer.
+  server.registerTool(
+    'set_successor',
+    {
+      title: 'Name who inherits your pages if you leave',
+      description: 'If you have no manager in a brain, name a successor there: the person who takes over any page of yours that nobody else can see, should you ever leave. Pass `successor` as their email (an active member of that same brain), or null to clear it; pass `brain` if you are in more than one. Called with no `successor`, it just shows your current successor in each brain and where one is still needed. Self-service only — nobody can set yours for you.',
+      inputSchema: {
+        successor: z.string().nullable().optional().describe('their email or user id; null clears it; omit to only show the current setting'),
+        brain: z.string().optional().describe('brain name or org id — needed only if you are in more than one'),
+      },
+    },
+    async ({ successor, brain }) => {
+      const show = successor === undefined
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/me/successor`, show
+          ? { headers: { Authorization: `Bearer ${TOKEN}` } }
+          : {
+              method: 'POST',
+              headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+              body: JSON.stringify({ successor, ...(brain ? { brain } : {}) }),
+            })
+      } catch (e) {
+        return toolError(`Could not ${show ? 'read' : 'set'} your successor: ${e.message}`)
+      }
+      const out = await res.json().catch(() => null)
+      if (!res.ok) {
+        if (out?.error) return toolError(`Could not ${show ? 'read' : 'set'} your successor: ${out.error}${out.brains ? ` (your brains: ${out.brains.join(', ')})` : ''}`)
+        const d = classify(res.status, res.headers.get('content-type'), '', res.headers.get('x-vercel-id'))
+        return toolError(`Could not ${show ? 'read' : 'set'} your successor: ${d.message}`)
+      }
+      if (show) {
+        const rows = (out?.memberships ?? []).map((m) =>
+          `- ${m.brain}: ${m.successor ? `${m.successor.name} (${m.successor.email})` : 'none'}${m.needed ? ' — ⚠ needed: you have no manager here' : ''}`)
+        return { content: [{ type: 'text', text: rows.length ? rows.join('\n') : 'You have no active memberships.' }] }
+      }
+      return {
+        content: [{
+          type: 'text',
+          text: out?.successor
+            ? `Done — in ${out.brain}, ${out.successor.name} (${out.successor.email}) now inherits any page of yours nobody else can see, if you leave.`
+            : `Done — your successor in ${out?.brain} is cleared.`,
+        }],
+      }
+    },
+  )
+
   server.registerTool(
     'my_retier_notices',
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.189",
+  "version": "0.9.190",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {