@theronap/cortex-mcp 0.9.118 → 0.9.119

package/lib/server.mjs

@@ -1820,6 +1820,42 @@ export async function runServer(version) {
     },
   )
 
+  server.registerTool(
+    'place_staged_record',
+    {
+      title: 'Place a staged arrival onto pages — the pages decide its brain',
+      description: "Place a STAGED arrival — one that is in no brain at all — onto the pages it belongs to, which is also what decides its brain. Session-start lists these separately as `[staged]`, and they are the only rows route_record CANNOT take, because there is no record yet to route: nothing upstream chose a brain for them, deliberately. That is the point (ADR-0038) — the connector used to pick the brain from which mailbox the message arrived through, which is a fact about your email plumbing rather than about the message, and it decided WHO COULD READ IT before anyone had read it. Here the pages decide instead. ⚠ PLACING IS A DISCLOSURE DECISION, not just filing: a brain is the confidentiality boundary, so putting a staged message into a shared brain makes it readable by every member of that brain. Say so when you offer, and never place a personal message into a shared brain without the owner\'s explicit answer. All the pages must live in ONE brain — a record exists in exactly one — and pages spanning two brains are refused by name rather than resolved by picking. On success the content is replayed through the real ingest pipeline into that brain, so the record it produces is identical to one that had landed there directly, and then it is attached.",
+      inputSchema: {
+        staged_id: z.string().describe('the staged id, as the [staged] rows at session start show it'),
+        pages: z.array(z.string()).describe("pages to place it on — a brain_documents id or the `ref:` read_page prints. They must all be in ONE brain; that brain is where the record lands."),
+        reason: z.string().describe('WHY these pages — recorded with the attachment, and the one thing that cannot be inferred later'),
+      },
+    },
+    async ({ staged_id, pages, reason }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/staged/place`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({ stagedId: staged_id, documentIds: pages, reason }),
+        })
+      } catch (e) {
+        return toolError(`Could not place the staged record: ${e.message}`)
+      }
+      const out = await res.json().catch(() => null)
+      if (!res.ok && res.status !== 207) {
+        const detail = out?.detail ? `\n${out.detail}` : ''
+        return toolError(`Could not place ${staged_id}: ${out?.error ?? res.status}${detail}`)
+      }
+      // 207 and the no-record branch both mean the content LANDED and the attach did not. Report
+      // that precisely rather than as success or failure — the follow-up differs for each.
+      if (out?.placed === false) {
+        return { content: [{ type: 'text', text: `Promoted into the target brain but NOT attached.\n${out.detail ?? ''}` }] }
+      }
+      return { content: [{ type: 'text', text: `Placed — promoted into its brain and attached to ${out.attached?.length ?? 0} page(s). The pages decided the brain; recorded as a session judgment.` }] }
+    },
+  )
+
   server.registerTool(
     'set_summary',
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.118",
+  "version": "0.9.119",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {