@theronap/cortex-mcp 0.9.109 → 0.9.110

package/lib/server.mjs

@@ -501,11 +501,45 @@ export async function runServer(version) {
     },
   )
 
+  // ── WHY THIS TOOL IS STILL CALLED `gate2_status` WHEN IT IS NO LONGER A GATE STATUS ────────────
+  //
+  // It measures a standing attribution watch now, not a gate, and the honest name would be something
+  // like `unattributed_revision_alarm`. Renaming it is a COMPATIBILITY EVENT and the trade is not
+  // close:
+  //
+  //  • `gate2_status` is live on BOTH dist-tags: 0.9.107 @stable and 0.9.109 @latest, checked
+  //    2026-08-25. Every desktop-wired seat follows @stable, which deliberately LAGS for soak — so a
+  //    rename does not reach those seats when this merges, it reaches them whenever someone
+  //    publishes AND THEN promotes, two manual steps apart. Until then a renamed tool is simply
+  //    ABSENT from their tool list, and a caller that asks for it gets "unknown tool".
+  //  • That trades a misleading sentence for a hard failure. The misleading sentence is fixable from
+  //    here — the strings below are recomputed on every call — while the missing tool is not fixable
+  //    from here at all.
+  //  • Registering BOTH names is worse, not a compromise: two tools that do the same thing sit in
+  //    every seat's tool list forever, and every future reader has to work out which is which. This
+  //    server has no aliasing primitive, so "aliasing" means literally two `registerTool` calls.
+  //  • And the rename would not fix the actual defect. What seeded the two-day misdiagnosis on
+  //    2026-08-22 was this tool's DESCRIPTION — measurably wrong in both its op set ("absorb, retier,
+  //    replace" when the counted ops were delete/retier/system) and its date ("since the 2026-08-17
+  //    fix" when `since` reports the 2026-08-20 anchor). Nobody was misled by the six characters
+  //    `gate2_`. A wrong description under a new name is still a wrong description.
+  //
+  // So: name pinned, prose replaced. This is the same call `gate3_status` made on 2026-08-24 (3f8df6a)
+  // for the same reason, and the route path `/api/gates/2/status` is pinned for the same reason on
+  // the other side of the wire — see web/app/api/gates/2/status/route.ts.
+  //
+  // ⚠ NO THRESHOLD LANGUAGE, NO CLOSURE LANGUAGE. Gate 2 CLOSED 2026-08-25 on ENUMERATION
+  // (`page_history_managed_writers_test.ts` discovers all 18 brain_documents DML sites and fails the
+  // build on a nineteenth), NOT on the session counter this tool used to report. That counter is
+  // retired. It was not merely stuck: measured against prod 2026-08-25 it stood at 2 of its 3
+  // required sessions and was CLIMBING, because PR #713's newly-managed routes write counted ops with
+  // real sessions — so one more ordinary edit would have had this tool inviting a human to close a
+  // gate that had been closed for days. Exactly gate 3's failure, three days later.
   server.registerTool(
     'gate2_status',
     {
-      title: 'Gate 2 edit-accountability monitor',
-      description: 'Read the aggregate-only Gate 2 status for this brain — whether every edit records WHICH SESSION made it. It counts only the REPAIRED write paths (absorb, retier, replace) since the 2026-08-17 fix, because the author path was never broken and would certify a repair it never exercised. Operator and migration writes are excluded: they legitimately have no session, and imputing one would violate the 0093 don\'t-impute rule. It never exposes page titles, refs, reasons or session keys. "regressed" means a repaired path lost its session attribution again and the gate must NOT be closed; "machine_evidence_ready" means enough ordinary-work evidence has accumulated to request a human closure decision.',
+      title: 'Unattributed-revision alarm (NOT a gate status — gate 2 is CLOSED)',
+      description: 'Read the aggregate-only unattributed-revision alarm for this brain: how many MCP-authored page revisions in the window carry NO session key, i.e. record an edit without recording WHICH SESSION made it. It spans EVERY mcp op, `author` included — scoping it to the "repaired" paths would let it go all-clear while attribution died on the path doing ~98% of the writing. Operator and migration writes are excluded: they legitimately have no session, and imputing one would violate the 0093 don\'t-impute rule. Aggregate-only — it never exposes page titles, refs, reasons or session keys. ⚠ IT IS NOT A GATE STATUS AND DECIDES NOTHING. Gate 2 CLOSED for v1 on 2026-08-25, on ENUMERATION of all 18 brain_documents DML sites, and the session counter this tool used to report was retired the same day as a named residual — it had begun measuring a threshold nothing was waiting on. What this alarm IS: one of the two things the closure names as able to REOPEN gate 2. So "regressed" means attribution is being dropped again — find the writer. Gate state lives on [[Agnoclast v1 — the currency gate]]; read that page, not this tool, to learn where a gate stands.',
       inputSchema: {
         days: z.number().optional().describe('rolling window in days (1-90, default 14)'),
         brain: z.string().optional().describe('brain name or org id when you belong to more than one brain; omit for a sole brain'),
@@ -522,11 +556,22 @@ export async function runServer(version) {
         throw new Error(classify(res.status, res.headers.get('content-type'), body, res.headers.get('x-vercel-id')).message)
       }
       const status = await res.json()
-      const text = status.status === 'regressed'
-        ? `\u26a0 Gate 2 has REGRESSED: ${status.unattributedMcpRevisions} MCP-authored revisions since ${status.since} carry NO session (${status.unattributedRepairedRevisions} of them on the repaired absorb/retier/replace paths). Attribution is being dropped again — do not close this gate; find the writer.`
-        : status.machineEvidenceReady
-          ? `Gate 2 machine evidence is ready: ${status.repairedPathSessions} distinct sessions exercised the repaired write paths across ${status.repairedPathRevisions} revisions since ${status.since}, and NONE lost its session. A human should confirm these were ordinary work before closing the gate.`
-          : `Gate 2 is still collecting evidence: ${status.repairedPathSessions}/${status.requiredRepairedPathSessions} distinct sessions have exercised the repaired write paths (absorb/retier/replace) since ${status.since}, across ${status.repairedPathRevisions} revisions, 0 unattributed. No gate decision has been made.`
+      // A tool ahead of its deployment must SAY SO rather than render `undefined`. `mcpRevisions` is
+      // new with the alarm; an older deployment of /api/gates/2/status does not send it. #693 is the
+      // standing lesson (0.9.104 shipped a tool against an unmerged route and was withdrawn) — the
+      // package and the web deploy move independently, so this skew is a real state, not a hypothetical.
+      const text = status.mcpRevisions === undefined
+        ? `This tool is newer than the deployment it is talking to: /api/gates/2/status still returns the retired gate-2 closure counter, not the unattributed-revision alarm. Its verdict field says "${status.status}". Do NOT read that as a gate status — gate 2 closed 2026-08-25 on enumeration. Re-check once the console has redeployed.`
+        : status.status === 'regressed'
+          // The alarm. This is the reopen detector, and its wording is the one thing here that must
+          // stay blunt: it caught the 2026-08-19 regression in two days.
+          ? `⚠ ATTRIBUTION IS BEING DROPPED: ${status.unattributedMcpRevisions} of ${status.mcpRevisions} MCP-authored revisions since ${status.since} carry NO session (${status.unattributedRepairedRevisions} of them on ops delete/retier/system; any remainder is elsewhere, most likely \`author\`). Find the writer. An unattributed MCP revision is one of the two conditions that REOPEN gate 2, which closed 2026-08-25.`
+          : status.mcpRevisions === 0
+            // "Nothing was written" and "plenty was written and none of it lost a session" are
+            // opposite conditions, and a bare "0 unattributed" renders them identically. Gate 4's
+            // denominator rule, applied here because silence is not a clean bill of health.
+            ? `No MCP-authored revisions at all in this brain in the last ${status.days} days (window floor ${status.since}), so there is NOTHING the alarm could have checked. This is an empty measurement, not an all-clear.`
+            : `Attribution is holding: 0 of ${status.mcpRevisions} MCP-authored revisions since ${status.since} lost its session, across every mcp op including \`author\`. This is a standing regression watch and it decides NOTHING — it is not a gate criterion. Gate 2 closed 2026-08-25 on enumeration of all 18 brain_documents DML sites. For where any gate actually stands, read [[Agnoclast v1 — the currency gate]].`
       return { content: [{ type: 'text', text }] }
     },
   )

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.109",
+  "version": "0.9.110",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {