@theronap/agnoclast-mcp 0.9.206 → 0.9.208

package/lib/server.mjs

@@ -1550,11 +1550,11 @@ function renderNudge(payload) {
   server.registerTool(
     'search_spam_email',
     {
-      title: 'Search Gmail Spam intentionally',
-      description: 'Search a connected Gmail Spam folder only when the user explicitly asks you to find a message that may have been marked as Spam. This is read-only: results are returned for this request only and are NOT added to Agnoclast records, timeline, or future context. Give a specific Gmail search such as a sender, subject words, or date. Normal Gmail sync never reads Spam.',
+      title: 'Search Spam (Gmail) or Junk (Outlook) intentionally',
+      description: 'Search a connected mailbox\'s Spam folder (Gmail) or Junk folder (Outlook) only when the user explicitly asks you to find a message that may have been marked as spam. This is read-only: results are returned for this request only and are NOT added to Agnoclast records, timeline, or future context. Give a specific search. Gmail takes its own operators (a sender, subject words, or a date); Outlook matches plain words or an address as ONE phrase, so Gmail operators such as from: do not work there. Normal mail sync never reads Spam or Junk.',
       inputSchema: {
-        query: z.string().min(2).describe('specific Gmail search within Spam, e.g. `from:billing@example.com`, `subject:(appointment reminder)`, or `after:2026/08/01`'),
-        account: z.string().email().optional().describe('which connected Gmail account to search when more than one is available'),
+        query: z.string().min(2).describe('specific search within Spam/Junk. Gmail: e.g. `from:billing@example.com`, `subject:(appointment reminder)`, or `after:2026/08/01`. Outlook: plain words or an address, matched as one phrase, e.g. `billing@example.com`'),
+        account: z.string().email().optional().describe('which connected mailbox (Gmail or Outlook) to search when more than one is available'),
         limit: z.number().int().min(1).max(10).optional().describe('maximum matches to return (default 5; max 10)'),
       },
     },
@@ -1567,12 +1567,12 @@ function renderNudge(payload) {
       const body = await res.json().catch(() => null)
       if (!res.ok) {
         if (res.status === 409 && Array.isArray(body?.accounts)) {
-          return toolError(`Choose a connected Gmail account and call again with account: ${body.accounts.join(', ')}`)
+          return toolError(`Choose a connected mailbox and call again with account: ${body.accounts.join(', ')}`)
         }
         return toolError(body?.error ?? `Spam search failed (${res.status}).`)
       }
       const rows = Array.isArray(body?.messages) ? body.messages : []
-      if (!rows.length) return { content: [{ type: 'text', text: `No Spam matches in ${body?.account ?? 'the connected Gmail account'}. Nothing was saved to Agnoclast.` }] }
+      if (!rows.length) return { content: [{ type: 'text', text: `No Spam/Junk matches in ${body?.account ?? 'the connected mailbox'}. Nothing was saved to Agnoclast.` }] }
       const lines = [`Spam matches in ${body.account} (read-only; not saved to Agnoclast):`]
       for (const m of rows) {
         lines.push(`- ${m.date || 'unknown date'} · ${m.from || 'unknown sender'} · ${m.subject}\n  ${m.snippet || '(no preview)'}\n  ${m.sourceUri}`)
@@ -1599,15 +1599,15 @@ function renderNudge(payload) {
   // throw in a later chunk discards the results already collected — so a 5xx can follow real changes. V4
   // fixed exactly this lie in the web UI; the wording below is what keeps it fixed here.
 
-  /** ONE place a Gmail write failure becomes agent-readable text, so three tools cannot drift on it. */
+  /** ONE place a mailbox write failure (Gmail or Outlook) becomes agent-readable text, so three tools cannot drift on it. */
   const gmailWriteError = (res, body, tool) => {
     const msg = typeof body?.error === 'string' ? body.error : null
     if (res.status === 409 && Array.isArray(body?.accounts) && body.accounts.length) {
-      return toolError(`More than one connected Gmail account. Call ${tool} again with account: ${body.accounts.join(', ')}`)
+      return toolError(`More than one connected mailbox. Call ${tool} again with account: ${body.accounts.join(', ')}`)
     }
     if (res.status === 401 || res.status === 403) {
       return toolError(
-        `${msg ?? 'Gmail refused that write.'} Gmail write access may not be granted on this account yet — ` +
+        `${msg ?? 'The mailbox refused that write.'} Write access may not be granted on this mailbox yet — ` +
         `the person can check Connectors in Agnoclast. Nothing was changed.`)
     }
     if (res.status >= 500) {
@@ -1621,21 +1621,21 @@ function renderNudge(payload) {
   server.registerTool(
     'gmail_modify',
     {
-      title: 'Change labels on the user\'s own Gmail messages',
+      title: 'Change labels on the user\'s own email (Gmail or Outlook)',
       description:
-        'Mark read or unread, archive, move back to the inbox, or add/remove a label on messages in the USER\'S OWN connected Gmail. Only the mailbox owner can act on a message — being able to read an email record in a shared brain does NOT authorize changing it, and the server enforces that. Identify messages with recordIds (Agnoclast email record ids) or messageIds (Gmail ids); they must all be in ONE mailbox. For add_label/remove_label pass labelId — one of the user\'s own labels (Label_…), or STARRED or IMPORTANT; call without labelId to get the list. THIS CHANGES THE USER\'S MAILBOX: confirm what they want before calling unless they just asked for it plainly. move_to_inbox is the undo for archive.',
+        'Mark read or unread, archive, move back to the inbox, or add/remove a label on messages in the USER\'S OWN connected mailbox, Gmail or Outlook. Only the mailbox owner can act on a message — being able to read an email record in a shared brain does NOT authorize changing it, and the server enforces that. Identify messages with recordIds (Agnoclast email record ids) or messageIds (the mailbox\'s own message ids); they must all be in ONE mailbox. For add_label/remove_label pass labelId: STARRED or IMPORTANT work in both (in Outlook they are the follow-up flag and high importance), or one of the user\'s own labels, which is Label_… in Gmail and category:<name> (an Outlook category) in Outlook. Call without labelId to get the list. THIS CHANGES THE USER\'S MAILBOX: confirm what they want before calling unless they just asked for it plainly. move_to_inbox is the undo for archive.',
       inputSchema: {
         action: z.enum(['mark_read', 'mark_unread', 'archive', 'move_to_inbox', 'add_label', 'remove_label'])
           .describe('what to do to every message named; move_to_inbox undoes archive'),
         recordIds: z.array(z.string()).optional().describe('Agnoclast email record ids, all in the same mailbox'),
-        messageIds: z.array(z.string()).optional().describe('Gmail message ids, all in the same mailbox — an alternative to recordIds'),
-        labelId: z.string().optional().describe('required for add_label / remove_label: one of the user\'s own labels (Label_…), or STARRED or IMPORTANT. Omit to be shown the available labels.'),
-        account: z.string().email().optional().describe('which connected Gmail account, when the user has more than one'),
+        messageIds: z.array(z.string()).optional().describe('the mailbox\'s own message ids (Gmail or Outlook), all in the same mailbox — an alternative to recordIds'),
+        labelId: z.string().optional().describe('required for add_label / remove_label: STARRED or IMPORTANT, or one of the user\'s own labels (Gmail Label_…, Outlook category:<name>). Omit to be shown the available labels.'),
+        account: z.string().email().optional().describe('which connected mailbox (Gmail or Outlook), when the user has more than one'),
       },
     },
     async ({ action, recordIds, messageIds, labelId, account }) => {
       if (!recordIds?.length && !messageIds?.length) {
-        return toolError('Name the messages to change: recordIds (Agnoclast email records) or messageIds (Gmail ids).')
+        return toolError('Name the messages to change: recordIds (Agnoclast email records) or messageIds (the mailbox\'s message ids).')
       }
       // A label action with no id is not an error worth bouncing — answer it with the list, so the agent
       // can act on the reply instead of guessing an id or asking the person for one.
@@ -1680,14 +1680,14 @@ function renderNudge(payload) {
   server.registerTool(
     'draft_email_reply',
     {
-      title: 'Save a reply as a draft in the user\'s Gmail',
+      title: 'Save a reply as a draft in the user\'s mailbox (Gmail or Outlook)',
       description:
-        'Write a reply to one of the USER\'S OWN emails and save it as a DRAFT in their Gmail, threaded under the original. NOTHING IS SENT — the user reviews and sends it themselves from Gmail, so this is the safe way to help with a reply. Identify the email by recordId (an Agnoclast email record) or messageId (a Gmail id). Only the mailbox owner can draft against a message; the server enforces that. Use request_send_email instead when the user wants it actually sent.',
+        'Write a reply to one of the USER\'S OWN emails and save it as a DRAFT in their mailbox (Gmail or Outlook), threaded under the original. NOTHING IS SENT — the user reviews and sends it themselves from Gmail or Outlook, so this is the safe way to help with a reply. Identify the email by recordId (an Agnoclast email record) or messageId (the mailbox\'s own message id). Only the mailbox owner can draft against a message; the server enforces that. Use request_send_email instead when the user wants it actually sent.',
       inputSchema: {
         recordId: z.string().optional().describe('the Agnoclast email record to reply to'),
-        messageId: z.string().optional().describe('the Gmail message id to reply to — an alternative to recordId'),
+        messageId: z.string().optional().describe('the message id to reply to (Gmail or Outlook) — an alternative to recordId'),
         text: z.string().min(1).describe('the reply body, as plain text'),
-        account: z.string().email().optional().describe('which connected Gmail account, when the user has more than one'),
+        account: z.string().email().optional().describe('which connected mailbox (Gmail or Outlook), when the user has more than one'),
       },
     },
     async ({ recordId, messageId, text, account }) => {
@@ -1700,7 +1700,7 @@ function renderNudge(payload) {
       const body = await res.json().catch(() => null)
       if (!res.ok) return gmailWriteError(res, body, 'draft_email_reply')
       return { content: [{ type: 'text', text:
-        `Draft saved in ${body.account} — NOT sent. The user reviews and sends it from Gmail: ${body.openUrl}` }] }
+        `Draft saved in ${body.account} — NOT sent. The user reviews and sends it from their mailbox: ${body.openUrl}` }] }
     },
   )
 
@@ -1717,9 +1717,9 @@ function renderNudge(payload) {
   server.registerTool(
     'request_send_email',
     {
-      title: 'Ask to send an email from the user\'s Gmail',
+      title: 'Ask to send an email from the user\'s mailbox (Gmail or Outlook)',
       description:
-        'Send an email from the USER\'S OWN connected Gmail. By default this does NOT send immediately: it creates a request that WAITS for the user to approve it in Agnoclast, and it goes out at once only if their own send rule allows it. The message is frozen when the request is made, so write the final wording. Always show the user what you are about to send and get their agreement first. Returns either an approval link to relay to them, or confirmation that it already went. ⚠ NEVER call this twice for the same email — it is not idempotent, and a retry can send twice.',
+        'Send an email from the USER\'S OWN connected mailbox, Gmail or Outlook. By default this does NOT send immediately: it creates a request that WAITS for the user to approve it in Agnoclast, and it goes out at once only if their own send rule allows it. The message is frozen when the request is made, so write the final wording. Always show the user what you are about to send and get their agreement first. Returns either an approval link to relay to them, or confirmation that it already went. ⚠ NEVER call this twice for the same email — it is not idempotent, and a retry can send twice.',
       inputSchema: {
         to: z.array(z.string()).min(1).describe('recipient email addresses'),
         subject: z.string().min(1).describe('the subject line'),
@@ -1727,8 +1727,8 @@ function renderNudge(payload) {
         cc: z.array(z.string()).optional().describe('cc addresses'),
         bcc: z.array(z.string()).optional().describe('bcc addresses'),
         replyToRecordId: z.string().optional().describe('reply in the thread of this Agnoclast email record'),
-        replyToMessageId: z.string().optional().describe('reply in the thread of this Gmail message id'),
-        account: z.string().email().optional().describe('which connected Gmail account to send from, when the user has more than one'),
+        replyToMessageId: z.string().optional().describe('reply in the thread of this message id (Gmail or Outlook)'),
+        account: z.string().email().optional().describe('which connected mailbox (Gmail or Outlook) to send from, when the user has more than one'),
       },
     },
     async ({ to, subject, text, cc, bcc, replyToRecordId, replyToMessageId, account }) => {
@@ -1757,7 +1757,7 @@ function renderNudge(payload) {
       // PRESENCE, not `in` — the route omits the key rather than sending null (pinned by
       // src/send_request_verbs_test.ts). Absent means it already sent.
       const reviewUrl = body?.reviewUrl
-      const acct = body?.request?.account ?? 'your Gmail'
+      const acct = body?.request?.account ?? 'your mailbox'
       const n = body?.request?.recipientCount ?? to.length
       if (reviewUrl) {
         // Relayed VERBATIM — this exact sentence is the contract the create route records.
@@ -4114,7 +4114,7 @@ function renderNudge(payload) {
     'add_to_brain',
     {
       title: 'Add someone to one of your brains',
-      description: "Add a person to one of your brains, or work out what it would take. Resolves which brain, whether you may add to it, and the manager id they are placed under. WITHOUT execute:true it only reports the plan and hands back a console link — call it that way first and show the user what you are about to do. WITH execute:true it performs the add, and then `brain` is REQUIRED: an access grant must never be aimed by a shared write pointer. To undo an add later, use remove_member — it shows the person what removal would do and asks first. IF THE BRAIN PAYS FOR ITS MEMBERS' SEATS, adding someone raises its owner's monthly charge: the first execute is refused with the new total, you ASK THE USER whether to accept that charge, and only on a yes re-run with confirm_seat_total set to that number. Use when asked to invite/add someone to a brain.",
+      description: "Add a person to one of your brains, or work out what it would take. Resolves which brain, whether you may add to it, and the manager id they are placed under. WITHOUT execute:true it only reports the plan and hands back a console link — call it that way first and show the user what you are about to do. WITH execute:true it performs the add, and then `brain` is REQUIRED: an access grant must never be aimed by a shared write pointer. The person is EMAILED an invitation link — a new person sets their own password from it, someone who already has an account joins only when they accept — and no credential is ever returned. To undo an add later, use remove_member — it shows the person what removal would do and asks first. IF THE BRAIN PAYS FOR ITS MEMBERS' SEATS, adding someone raises its owner's monthly charge: the first execute is refused with the new total, you ASK THE USER whether to accept that charge, and only on a yes re-run with confirm_seat_total set to that number. Use when asked to invite/add someone to a brain.",
       inputSchema: {
         email: z.string().describe("the person's email address — the login their Agnoclast account is (or will be) on"),
         name: z.string().optional().describe('their full name; falls back to the email local-part'),
@@ -4247,18 +4247,35 @@ function renderNudge(payload) {
         if (r.alreadyMember) {
           return { content: [{ type: 'text', text: `${payload.email} was already a member of ${target.name} — nothing changed.` }] }
         }
-        // Two different outcomes for the human: a brand-new account has a credential that somebody
-        // must physically pass on, an existing one has none.
-        const how = r.existingAccount
-          ? 'They already had an Agnoclast account, so they keep their current login and simply gain this brain.'
-          : `A new account was created. Temporary password: ${r.password} — they must change it on first sign-in.`
+        // Every add is an emailed invitation on a server from 2026-10-03 on (CASA AL1): a new person sets
+        // their own password from the link, and an existing account joins only when it accepts. No
+        // credential ever comes back. `invitation` is absent only on an older server — kept so this
+        // release still reads one correctly.
+        const inv = r.invitation
+        const sent = inv?.emailed === true
+        const asked = Boolean(inv) && r.existingAccount
+        const how = !inv
+          ? (r.existingAccount
+              ? 'They already had an Agnoclast account, so they keep their current login and simply gain this brain.'
+              : `A new account was created. Temporary password: ${r.password} — they must change it on first sign-in.`)
+          : !sent
+            ? `The invitation was saved, but the email did not send${inv.error ? `: ${String(inv.error).trim().replace(/[.\s]*$/, '')}` : ''}. Run this again to re-send it — the new link replaces the old one.`
+            : asked
+              ? `They already have an Agnoclast account, so they were emailed an invitation. They are NOT in ${target.name} until they accept it (the link expires in 48 hours).`
+              : `They were emailed a link to set their own password; their account works once they do (the link expires in 48 hours).${r.resent ? ' The earlier link no longer works.' : ''}`
         const page = r.userPage?.status
           ? `\nTheir page in ${target.name}: ${r.userPage.status}${r.userPage.error ? ` (${r.userPage.error})` : ''}.`
           : ''
         // What the seat sync did, in the server's words: the new monthly total, or that the seat
         // could NOT be charged and the brain is not paying for them yet.
         const seatLine = typeof r.seatNote === 'string' && r.seatNote ? `\n${r.seatNote}` : ''
-        return { content: [{ type: 'text', text: `Added ${payload.name} <${payload.email}> to ${target.name} as ${payload.role}, placed under you.\n${how}${page}${seatLine}\n\nTo undo this, remove_member takes them out of this brain — it shows you what that would do and asks first.` }] }
+        const headline = asked
+          ? `Invited ${payload.name} <${payload.email}> to ${target.name} as ${payload.role}, under you — they join when they accept.`
+          : `Added ${payload.name} <${payload.email}> to ${target.name} as ${payload.role}, placed under you.`
+        const undo = asked
+          ? '\n\nNothing to undo yet: until they accept, they are not a member. Inviting them again replaces the link.'
+          : '\n\nTo undo this, remove_member takes them out of this brain — it shows you what that would do and asks first.'
+        return { content: [{ type: 'text', text: `${headline}\n${how}${page}${seatLine}${undo}` }] }
       }
 
       // ADR-0023: does this brain already have a page about them? The inviter decides — list, never pick.
@@ -4297,9 +4314,9 @@ function renderNudge(payload) {
         `  Role       ${payload.role}`,
         `  Manager    you`,
         '',
-        'If they already have an Agnoclast account they keep their existing password and simply gain',
-        'this brain; if not, the console shows a temporary password to pass on. Either way the button',
-        'handles it — you do not need to know which in advance.',
+        'Either way they are emailed an invitation link: a new person sets their own password from it,',
+        'and someone who already has an Agnoclast account joins only when they accept. The button handles',
+        'both — you do not need to know which in advance.',
         '',
         `payload: ${JSON.stringify(payload)}`,
       ].join('\n')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.206",
+  "version": "0.9.208",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {