@theronap/cortex-mcp 0.9.114 → 0.9.115

package/lib/context_log.mjs

@@ -2,6 +2,7 @@ import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, unlink
 import { homedir } from 'os'
 import { join } from 'path'
 import { fetchCortex, classify, resolveBase, resolveTokenSource } from './diagnose.mjs'
+import { repoFullNameFrom } from './capture.mjs'
 
 // The private third copy of this lived here until 2026-08-19. doctor.mjs:14 warned that a third
 // copy is how a machine ends up connected to one command and 'no token found' to another; it also
@@ -47,9 +48,13 @@ export async function runSnapshotContext() {
   }
 
   const base = resolveBase(process.env.CORTEX_URL)
+  // The SessionStart snapshot is the surface that actually reaches a session's first turn, so the
+  // repo-scoped Gate 4 block is worth more here than anywhere else. Fail-closed: a non-GitHub cwd
+  // yields null and the hint is omitted (see repoFullNameFrom).
+  const repo = repoFullNameFrom(process.cwd())
   let res
   try {
-    res = await fetchCortex(`${base}/api/mcp-context`, { headers: { Authorization: `Bearer ${token}` } })
+    res = await fetchCortex(`${base}/api/mcp-context${repo ? `?repo=${encodeURIComponent(repo)}` : ''}`, { headers: { Authorization: `Bearer ${token}` } })
   } catch (e) {
     out(`Agnoclast: context snapshot failed — ${e?.message ?? String(e)}`)
     return 0

package/lib/server.mjs

@@ -12,6 +12,7 @@ import { runSendImessage } from './imessage_send.mjs'
 import { formatGrepHits } from './grep_cli.mjs'
 import { renderTriage } from './red_link_triage.mjs'
 import { runCodeGraphQuery } from './code_graph_cli.mjs'
+import { repoFullNameFrom } from './capture.mjs'
 
 // Reactive red-link triage (Mechanism 2). On a read_page miss, ask the server whether the name is a
 // tracked wanted page, whether a bare node exists for it, and whether it's a deliberately demoted page,
@@ -126,19 +127,27 @@ export async function runServer(version) {
   if (typeof _hb.unref === 'function') _hb.unref()   // don't keep the process alive just for the heartbeat
 
   // Cache context for 5 minutes so repeated tool calls don't re-fetch.
+  // KEYED BY REPO since 2026-08-27: the context now carries a repo-scoped Gate 4 block, so the same
+  // token can legitimately get different context from different cwds. One stdio server serves one cwd
+  // today and this is belt-and-braces — but an unkeyed cache would serve one repo's block to another
+  // silently, and "your repo has 12 records waiting" pointing at the wrong repo is worse than no line.
   let cache = null
   async function fetchContext() {
     const now = Date.now()
-    if (cache && now - cache.ts < 5 * 60 * 1000) return cache.text
+    // Fail-closed by construction (see repoFullNameFrom): a non-GitHub or non-repo cwd yields null and
+    // the request simply omits the hint, degrading to the generic block.
+    const repo = repoFullNameFrom(process.cwd())
+    if (cache && cache.repo === repo && now - cache.ts < 5 * 60 * 1000) return cache.text
     // fetchCortex retries transient infra/5xx; classify turns a failure into an honest message
     // (token vs infra-block vs network) instead of a bare "Agnoclast API 403: unknown".
-    const res = await fetchCortex(`${BASE}/api/mcp-context`, { headers: { Authorization: `Bearer ${TOKEN}` } })
+    const url = `${BASE}/api/mcp-context${repo ? `?repo=${encodeURIComponent(repo)}` : ''}`
+    const res = await fetchCortex(url, { headers: { Authorization: `Bearer ${TOKEN}` } })
     if (!res.ok) {
       const body = await res.text()
       throw new Error(classify(res.status, res.headers.get('content-type'), body, res.headers.get('x-vercel-id')).message)
     }
     const { context, brainRefs } = await res.json()
-    cache = { text: context, ts: now }
+    cache = { text: context, ts: now, repo }
     // T11: stash the digest node refs surfaced this fetch so capture.mjs can forward them as
     // hydrated_from at the session's ingest (feedback-loop guard). Keyed by cwd so the matching
     // session picks them up. Best-effort + inert when brainRefs is empty (digest flag off).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.114",
+  "version": "0.9.115",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {