@theronap/agnoclast-mcp 0.9.246 → 0.9.247

package/lib/server.mjs

@@ -6491,7 +6491,11 @@ function renderNudge(payload) {
       const out = await res.json().catch(() => null)
       if (!res.ok) return toolError(`Could not ${action}: ${out?.error ?? res.status}`)
       const verb = { granted: 'now has access to', already_granted: 'already had access to', revoked: 'no longer has access to', not_granted: 'had no grant on' }[out.action]
-      return { content: [{ type: 'text', text: `Done — ${out.grantee} ${verb} the ${out.tier} page.` }] }
+      // Agent oversight (2026-10-20): a confidential page shared with an AI agent is shared with its creator and
+      // manager too. The sharer must be told who else can now read it.
+      const also = Array.isArray(out.alsoGranted) && out.alsoGranted.length
+        ? ` Because ${out.grantee} is an AI agent, its overseers can read it too: ${out.alsoGranted.join(', ')}.` : ''
+      return { content: [{ type: 'text', text: `Done — ${out.grantee} ${verb} the ${out.tier} page.${also}` }] }
     },
   )
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.246",
+  "version": "0.9.247",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {