@theronap/agnoclast-mcp 0.9.237 → 0.9.239

package/lib/arrivals_notice.mjs

@@ -59,6 +59,8 @@ import { fetchCortex, resolveBase, resolveTokenSource } from './diagnose.mjs'
 // Enough to hold a session's own recent output in full; small enough that the notice is READ rather
 // than spilled to a file, which is what happened at 49 KB.
 const MAX_YOURS = 25
+/** Assigned groups listed per prompt; the server hands out at most 5 new groups per prompt anyway. */
+const MAX_ASSIGNED = 8
 
 // A title is somebody else's text — anyone can send a calendar invite — and this prints into a
 // session's context. One line, bounded, and quoted so it reads as the name of a thing.
@@ -176,6 +178,21 @@ export function formatNotice(signals) {
   const total = Number(signals?.settling?.total ?? offers.length)
   const delta = Number(signals?.arrival?.count ?? 0)
 
+  // ⭐ ADR-0083 §2.3 — arrivals ASSIGNED to this session. Not an offer: this session is their one owner, and
+  // it is told at a prompt boundary so it handles them before the user's request. A conversation stays with
+  // this session for its lifetime, so its later texts come here too.
+  const assigned = Array.isArray(signals?.assigned) ? signals.assigned : []
+  if (assigned.length) {
+    const n = assigned.reduce((t, g) => t + (Number(g?.count) || 1), 0)
+    lines.push(`📥 ${n} arrival${n === 1 ? ' is' : 's are'} ASSIGNED TO THIS SESSION — you are ${n === 1 ? 'its' : 'their'} only owner. Handle ${n === 1 ? 'it' : 'them'} before the user's request, then answer the user:`)
+    for (const g of assigned.slice(0, MAX_ASSIGNED)) {
+      const many = Number(g?.count) > 1 ? ` ×${g.count}` : ''
+      const ids = (g?.ids ?? []).slice(0, 3).join(', ') + ((g?.ids ?? []).length > 3 ? ', …' : '')
+      lines.push(`     ${g?.source ?? '?'}${many} — ${g?.title ?? '(unreadable)'} · ${g?.hoursAgo ?? '?'}h · ids: ${ids}`)
+    }
+    if (assigned.length > MAX_ASSIGNED) lines.push(`     … and ${assigned.length - MAX_ASSIGNED} more groups`)
+    lines.push('   `intake_claim {intakeItemIds}` → `intake_materialize` (or `intake_discard` for junk) · `not_mine` hands one to the next session · only what only the user can decide → `intake_defer`.')
+  }
   if (delta) {
     lines.push(`⚡ ${delta} new arrival${delta === 1 ? '' : 's'} in the pile since this session was last told.`)
   }

package/lib/server.mjs

@@ -4797,6 +4797,54 @@ function renderNudge(payload) {
     },
   )
 
+  // share_record — a share link for one of your own transcripts (Theron, 2026-10-17; obligation e65b7a83).
+  // Anyone with the link gets their OWN copy (an unfiled record in their brain) or, without an account, a
+  // preview and a way to join. Never grants access to the original; never for a confidential record. NOT in
+  // the auto-allowed list (editors/claude.mjs): handing content to someone outside the brain is a disclosure,
+  // so it prompts.
+  server.registerTool(
+    'share_record',
+    {
+      title: 'Make a share link for a transcript',
+      description:
+        'Make a link (agnoclast.com/s/…) that shares one of YOUR OWN meeting or lecture transcripts with anyone, ' +
+        'including people outside Agnoclast. Whoever opens it signed in gets their own copy as an unfiled record; ' +
+        'someone without an account sees a preview and can join free. It never gives access to the original record. ' +
+        'scope "full" (default) shares the transcript and its notes; "notes" shares only the notes. Confidential ' +
+        'records cannot be shared. The link is shown ONCE — give it to the person straight away. Only when the person ' +
+        'asks to share; never on your own initiative. Turn a link off from the record\'s page on agnoclast.com.',
+      inputSchema: {
+        record_id: z.string().describe('the transcript record id (uuid)'),
+        scope: z.enum(['full', 'notes']).optional().describe('full = transcript and notes (default); notes = notes only'),
+        expires_in_days: z.number().int().min(1).max(365).optional().describe('how long the link works; default 30'),
+      },
+    },
+    async ({ record_id, scope, expires_in_days }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/records/${encodeURIComponent(record_id)}/share`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({ scope: scope ?? 'full', ...(expires_in_days ? { expiresInDays: expires_in_days } : {}) }),
+        })
+      } catch (e) {
+        return toolError(`Could not make a share link: ${e.message}`)
+      }
+      if (res.status === 404 || res.status === 409) {
+        const b = await res.json().catch(() => null)
+        return toolError(`Not shared: ${b?.detail ?? b?.error ?? 'refused'}`)
+      }
+      if (!res.ok) {
+        const d = classify(res.status, res.headers.get('content-type'), await res.text(), res.headers.get('x-vercel-id'))
+        return toolError(`Could not make a share link: ${d.message}`)
+      }
+      const out = await res.json()
+      return { content: [{ type: 'text', text:
+        `Share link for "${out.title}" (${out.scope === 'notes' ? 'notes only' : 'full transcript and notes'}), works until ${out.expiresAt.slice(0, 10)}:\n${out.url}\n` +
+        `This link is shown only once. Anyone who opens it gets their own copy; it never opens the original. share id: ${out.shareId}` }] }
+    },
+  )
+
   // set_record_notes — write the NOTES layer of one of your own transcripts (Theron, 2026-10-08: "two
   // layers … a summary and notes from the transcript … the full transcript"). The server keeps the
   // before-state in record history and refuses anything that is not your own kept transcript.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.237",
+  "version": "0.9.239",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {