@theronap/agnoclast-mcp 0.9.205 → 0.9.207

package/lib/server.mjs

@@ -4114,7 +4114,7 @@ function renderNudge(payload) {
     'add_to_brain',
     {
       title: 'Add someone to one of your brains',
-      description: "Add a person to one of your brains, or work out what it would take. Resolves which brain, whether you may add to it, and the manager id they are placed under. WITHOUT execute:true it only reports the plan and hands back a console link — call it that way first and show the user what you are about to do. WITH execute:true it performs the add, and then `brain` is REQUIRED: an access grant must never be aimed by a shared write pointer. Adding cannot be undone through the API. IF THE BRAIN PAYS FOR ITS MEMBERS' SEATS, adding someone raises its owner's monthly charge: the first execute is refused with the new total, you ASK THE USER whether to accept that charge, and only on a yes re-run with confirm_seat_total set to that number. Use when asked to invite/add someone to a brain.",
+      description: "Add a person to one of your brains, or work out what it would take. Resolves which brain, whether you may add to it, and the manager id they are placed under. WITHOUT execute:true it only reports the plan and hands back a console link — call it that way first and show the user what you are about to do. WITH execute:true it performs the add, and then `brain` is REQUIRED: an access grant must never be aimed by a shared write pointer. The person is EMAILED an invitation link — a new person sets their own password from it, someone who already has an account joins only when they accept — and no credential is ever returned. To undo an add later, use remove_member — it shows the person what removal would do and asks first. IF THE BRAIN PAYS FOR ITS MEMBERS' SEATS, adding someone raises its owner's monthly charge: the first execute is refused with the new total, you ASK THE USER whether to accept that charge, and only on a yes re-run with confirm_seat_total set to that number. Use when asked to invite/add someone to a brain.",
       inputSchema: {
         email: z.string().describe("the person's email address — the login their Agnoclast account is (or will be) on"),
         name: z.string().optional().describe('their full name; falls back to the email local-part'),
@@ -4247,18 +4247,35 @@ function renderNudge(payload) {
         if (r.alreadyMember) {
           return { content: [{ type: 'text', text: `${payload.email} was already a member of ${target.name} — nothing changed.` }] }
         }
-        // Two different outcomes for the human: a brand-new account has a credential that somebody
-        // must physically pass on, an existing one has none.
-        const how = r.existingAccount
-          ? 'They already had an Agnoclast account, so they keep their current login and simply gain this brain.'
-          : `A new account was created. Temporary password: ${r.password} — they must change it on first sign-in.`
+        // Every add is an emailed invitation on a server from 2026-10-03 on (CASA AL1): a new person sets
+        // their own password from the link, and an existing account joins only when it accepts. No
+        // credential ever comes back. `invitation` is absent only on an older server — kept so this
+        // release still reads one correctly.
+        const inv = r.invitation
+        const sent = inv?.emailed === true
+        const asked = Boolean(inv) && r.existingAccount
+        const how = !inv
+          ? (r.existingAccount
+              ? 'They already had an Agnoclast account, so they keep their current login and simply gain this brain.'
+              : `A new account was created. Temporary password: ${r.password} — they must change it on first sign-in.`)
+          : !sent
+            ? `The invitation was saved, but the email did not send${inv.error ? `: ${String(inv.error).trim().replace(/[.\s]*$/, '')}` : ''}. Run this again to re-send it — the new link replaces the old one.`
+            : asked
+              ? `They already have an Agnoclast account, so they were emailed an invitation. They are NOT in ${target.name} until they accept it (the link expires in 48 hours).`
+              : `They were emailed a link to set their own password; their account works once they do (the link expires in 48 hours).${r.resent ? ' The earlier link no longer works.' : ''}`
         const page = r.userPage?.status
           ? `\nTheir page in ${target.name}: ${r.userPage.status}${r.userPage.error ? ` (${r.userPage.error})` : ''}.`
           : ''
         // What the seat sync did, in the server's words: the new monthly total, or that the seat
         // could NOT be charged and the brain is not paying for them yet.
         const seatLine = typeof r.seatNote === 'string' && r.seatNote ? `\n${r.seatNote}` : ''
-        return { content: [{ type: 'text', text: `Added ${payload.name} <${payload.email}> to ${target.name} as ${payload.role}, placed under you.\n${how}${page}${seatLine}\n\nThis cannot be undone through the API — removing a membership currently needs direct database access.` }] }
+        const headline = asked
+          ? `Invited ${payload.name} <${payload.email}> to ${target.name} as ${payload.role}, under you — they join when they accept.`
+          : `Added ${payload.name} <${payload.email}> to ${target.name} as ${payload.role}, placed under you.`
+        const undo = asked
+          ? '\n\nNothing to undo yet: until they accept, they are not a member. Inviting them again replaces the link.'
+          : '\n\nTo undo this, remove_member takes them out of this brain — it shows you what that would do and asks first.'
+        return { content: [{ type: 'text', text: `${headline}\n${how}${page}${seatLine}${undo}` }] }
       }
 
       // ADR-0023: does this brain already have a page about them? The inviter decides — list, never pick.
@@ -4297,9 +4314,9 @@ function renderNudge(payload) {
         `  Role       ${payload.role}`,
         `  Manager    you`,
         '',
-        'If they already have an Agnoclast account they keep their existing password and simply gain',
-        'this brain; if not, the console shows a temporary password to pass on. Either way the button',
-        'handles it — you do not need to know which in advance.',
+        'Either way they are emailed an invitation link: a new person sets their own password from it,',
+        'and someone who already has an Agnoclast account joins only when they accept. The button handles',
+        'both — you do not need to know which in advance.',
         '',
         `payload: ${JSON.stringify(payload)}`,
       ].join('\n')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.205",
+  "version": "0.9.207",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {