@theronap/agnoclast-mcp 0.9.240 → 0.9.242

package/lib/editors/claude.mjs

@@ -30,7 +30,7 @@ export function mergeClaudeMcp(existing, spec, token) {
 export const ALLOWED_TOOL_NAMES = [
   // read surface
   'grep', 'read_page', 'my_context', 'project_status', 'session_context', 'search_org',
-  'list_records', 'read_record', 'page_history', 'page_diff', 'timeline_pull', 'my_brains', 'my_sessions', 'writing_style',
+  'list_records', 'read_record', 'page_history', 'page_diff', 'timeline_pull', 'my_brains', 'my_sessions', 'token_activity', 'writing_style',
   'code_graph_query', 'my_retier_notices', 'list_page_grants', 'list_project_members', 'file_requests',
   // the questions agents used to answer with SQL (2026-10-07) — read-only, the caller's own view
   'record_status', 'my_connectors', 'brain_stats', 'my_sends', 'find_arrivals',

package/lib/server.mjs

@@ -2364,7 +2364,10 @@ function renderNudge(payload) {
       const revs = out.revisions ?? []
       if (!revs.length) return { content: [{ type: 'text', text: `"${name}" (${k}) has no recorded version history yet.` }] }
       const lines = revs.map((r) => {
-        const who = r.actor_name ? ` · ${r.actor_name}` : ''
+        // "Theron via Frack" — the label only ever reaches the token's owner (bdb2339b phase 2).
+        const via = r.via_token_label ? ` via ${r.via_token_label}` : ''
+        const agentOf = r.actor_agent_of ? ` (agent of ${r.actor_agent_of})` : ''
+        const who = r.actor_name ? ` · ${r.actor_name}${agentOf}${via}` : (via ? ` ·${via}` : '')
         // change_kind first and bracketed so a column of [correct] is scannable — the whole point is
         // that a page with repeated corrections looks different at a glance from one that only grew.
         const what = r.change_kind ? ` · [${r.change_kind}]` : ''
@@ -2419,7 +2422,7 @@ function renderNudge(payload) {
         ? `# ${name} — rev ${d.to.revNo} (first version)`
         : `# ${name} — rev ${d.from.revNo} → rev ${d.to.revNo}`
       const meta = []
-      meta.push(`${String(d.to.createdAt).slice(0, 10)} · ${d.to.op}${d.to.changeKind ? ` · [${d.to.changeKind}]` : ''}${d.to.actorName ? ` · ${d.to.actorName}` : ''}`)
+      meta.push(`${String(d.to.createdAt).slice(0, 10)} · ${d.to.op}${d.to.changeKind ? ` · [${d.to.changeKind}]` : ''}${d.to.actorName ? ` · ${d.to.actorName}${d.to.actorAgentOf ? ` (agent of ${d.to.actorAgentOf})` : ''}${d.to.viaTokenLabel ? ` via ${d.to.viaTokenLabel}` : ''}` : ''}`)
       if (d.to.reason) meta.push(`reason: ${d.to.reason}`)
       if (d.to.sessionKey) meta.push(`session: ${String(d.to.sessionKey).slice(0, 24)}`)
       const body = []
@@ -4916,6 +4919,50 @@ function renderNudge(payload) {
     },
   )
 
+  // share_calendar — share YOUR OWN calendar with one person (ADR-0086; Theron, 2026-10-17). Same shape as
+  // share_record: NOT auto-allowed (a disclosure to someone, so it prompts), and only when the person asks.
+  // Nothing is emailed by this tool; it returns the link for the person to send.
+  server.registerTool(
+    'share_calendar',
+    {
+      title: 'Share your calendar with someone',
+      description:
+        'Share the person\'s OWN calendar with one other person by email address. They get their own read-only link ' +
+        '(agnoclast.com/c/…); if they use Agnoclast it also appears on their calendar until revoked. scope "busy" ' +
+        '(default) shows only busy blocks; "titles" also shows event titles (never notes, places or attendees). This does ' +
+        'NOT send anything: give the person the link to send, or they can send it from the Share calendar panel. Only ' +
+        'when the person asks to share their calendar; never on your own initiative. Turn it off on agnoclast.com/calendar.',
+      inputSchema: {
+        email: z.string().describe('the email address of the person to share with'),
+        scope: z.enum(['busy', 'titles']).optional().describe('busy = busy blocks only (default); titles = event titles too'),
+      },
+    },
+    async ({ email, scope }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/calendar/shares`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({ action: 'share_with', email, scope: scope ?? 'busy' }),
+        })
+      } catch (e) {
+        return toolError(`Could not share the calendar: ${e.message}`)
+      }
+      if (res.status === 400 || res.status === 409) {
+        const b = await res.json().catch(() => null)
+        return toolError(`Not shared: ${b?.error ?? 'refused'}`)
+      }
+      if (!res.ok) {
+        const d = classify(res.status, res.headers.get('content-type'), await res.text(), res.headers.get('x-vercel-id'))
+        return toolError(`Could not share the calendar: ${d.message}`)
+      }
+      const out = await res.json()
+      return { content: [{ type: 'text', text:
+        `Shared your calendar (${out.share.scope === 'titles' ? 'with event titles' : 'busy times only'}) with ${out.share.recipientEmail}:\n${out.url}\n` +
+        `Nothing was sent — give them this link. It is shown only once. If they use Agnoclast it is already on their calendar. share id: ${out.share.id}` }] }
+    },
+  )
+
   // set_record_notes — write the NOTES layer of one of your own transcripts (Theron, 2026-10-08: "two
   // layers … a summary and notes from the transcript … the full transcript"). The server keeps the
   // before-state in record history and refuses anything that is not your own kept transcript.
@@ -5370,6 +5417,46 @@ function renderNudge(payload) {
     },
   )
 
+  server.registerTool(
+    'token_activity',
+    {
+      title: 'What this agent token has done',
+      description: "Audit YOUR OWN recent activity through the token you are connected with: tool calls, wiki page edits, record placements and intake discards, newest first. Use it to report back what you did (\"what did I discard today?\"), or to check a run before handing off. Self-only: it reads the CALLING token's activity and never another agent's — the person audits all their tokens from Connect → Agent tokens. Discards are content-free by design, so they name the source, not the item. Errors if you are not connected with an agent token (console sessions have none).",
+      inputSchema: {
+        days: z.number().int().optional().describe('how far back (default 7, max 30)'),
+        kinds: z.array(z.enum(['call', 'edit', 'placement', 'discard'])).optional().describe('only these kinds (default all)'),
+        limit: z.number().int().optional().describe('max items (default 100, max 500)'),
+      },
+    },
+    async ({ days, kinds, limit }) => {
+      let res
+      try {
+        const qs = new URLSearchParams({
+          ...(days ? { days: String(days) } : {}), ...(limit ? { limit: String(limit) } : {}),
+          ...(kinds?.length ? { kinds: kinds.join(',') } : {}),
+        })
+        res = await fetchCortex(`${BASE}/api/me/token-activity?${qs}`, { headers: { Authorization: `Bearer ${TOKEN}` } })
+      } catch (e) {
+        return toolError(`Could not read this token's activity: ${e.message}`)
+      }
+      if (res.status === 400) return { content: [{ type: 'text', text: 'You are not connected with an agent token, so there is no per-token activity to show. The person can see every token\'s activity under Connect → Agent tokens.' }] }
+      if (!res.ok) {
+        const d = classify(res.status, res.headers.get('content-type'), await res.text(), res.headers.get('x-vercel-id'))
+        return toolError(`Could not read this token's activity: ${d.message}`)
+      }
+      const out = await res.json()
+      const name = out.token?.label ?? 'this token'
+      const items = out.items ?? []
+      if (!items.length) return { content: [{ type: 'text', text: `${name}: no activity in the last ${days ?? 7} day(s).` }] }
+      const counts = {}
+      for (const i of items) counts[i.kind] = (counts[i.kind] ?? 0) + 1
+      const lines = items.map((i) =>
+        `- ${String(i.at).slice(0, 16).replace('T', ' ')} · ${i.kind} · ${i.what ?? '—'}${i.detail ? ` · ${i.detail}` : ''}${i.reason ? ` — ${i.reason}` : ''}`)
+      const summary = Object.entries(counts).map(([k, n]) => `${n} ${k}`).join(' · ')
+      return { content: [{ type: 'text', text: `# ${name} — activity, last ${days ?? 7} day(s), newest first (UTC)\n${summary}\n\n${lines.join('\n')}` }] }
+    },
+  )
+
   server.registerTool(
     'my_sessions',
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.240",
+  "version": "0.9.242",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {