@theronap/cortex-mcp 0.9.128 → 0.9.130

package/lib/diagnose.mjs

@@ -119,8 +119,18 @@ export function wiredDistTag() {
   return null
 }
 
-// The production alias — exempt from Vercel Deployment Protection.
-export const CANONICAL_BASE = 'https://cortex-console.vercel.app'
+// The canonical production host — exempt from Vercel Deployment Protection.
+//
+// ⚠ cortex-console.vercel.app IS STILL A LIVE ALIAS AND MUST STAY IN THE EXEMPT SET BELOW. It was
+// the canonical host until agnoclast.com; installed clients, frozen generated scripts and hook
+// commands on machines nobody can reach still send it. Removing it from the set would make
+// resolveBase() treat a WORKING production alias as a protected deployment URL and silently redirect
+// those clients — the exact failure this function exists to prevent, caused by the fix for it.
+export const CANONICAL_BASE = 'https://agnoclast.com'
+
+// Production aliases: real hosts that serve the app and are exempt from Deployment Protection, as
+// opposed to per-deployment URLs (cortex-console-<hash>-<team>.vercel.app) which are NOT.
+const PRODUCTION_ALIASES = new Set(['agnoclast.com', 'cortex-console.vercel.app'])
 
 // Resolve the API base from CORTEX_URL. A Vercel *deployment* URL
 // (cortex-console-<hash>-<team>.vercel.app, or any non-canonical *.vercel.app) is guarded by
@@ -134,7 +144,7 @@ export function resolveBase(rawUrl) {
   if (!raw) return CANONICAL_BASE
   let host
   try { host = new URL(raw).host } catch { return CANONICAL_BASE }
-  if (host.endsWith('.vercel.app') && host !== 'cortex-console.vercel.app') {
+  if (host.endsWith('.vercel.app') && !PRODUCTION_ALIASES.has(host)) {
     process.stderr.write(
       `cortex: CORTEX_URL (${raw}) is a protected Vercel deployment URL; using ${CANONICAL_BASE} instead.\n`,
     )
@@ -317,7 +327,7 @@ export async function checkToken(token, base) {
       message: `Token "${String(token).slice(0, 8)}…" is not a valid Agnoclast token (expected a UUID). ` +
         `Re-run setup with the token from the console.` } }
   }
-  const url = `${(base ?? 'https://cortex-console.vercel.app').replace(/\/$/, '')}/api/mcp-context`
+  const url = `${(base ?? CANONICAL_BASE).replace(/\/$/, '')}/api/mcp-context`
   let res
   try {
     res = await fetchCortex(url, { headers: { Authorization: `Bearer ${token}` } })

package/lib/server.mjs

@@ -1331,11 +1331,30 @@ function renderNudge(payload) {
             return toolError(`Could not read the timeline for "${name}": ${d.message}`)
           }
           const t = await r.json()
-          if (!t.identifiers?.length) {
-            return { content: [{ type: 'text', text: `"${name}" carries no identifier stamps yet — no history joins. Stamp its page with [[repo:owner/name]] (what it identifies) and events will accrue here.` }] }
+          // 🔴 THE EARLY RETURN USED TO FIRE ON `!identifiers.length` ALONE, WHICH DISCARDED EVERY
+          // ATTACHED EVENT THE SERVER HAD ALREADY RETURNED. nodeTimeline() ends with
+          // `events: mergeEvents([...identifierEvents, attachedEvents])` — Gate 4 page attachments
+          // are unioned in explicitly, and its own doc says so: "a node with no stamps returns the
+          // honest empty shape for identifiers — BUT GATE 4 STILL UNIONS EXPLICIT PAGE ATTACHMENTS".
+          //
+          // Measured 2026-09-03: the GEOL 100 page had 43 class sessions deterministically attached
+          // (records_attached_to_node returns 30, its limit) and this client reported "carries no
+          // identifier stamps yet — no history joins." The data was correct, complete, and INVISIBLE,
+          // and the message actively misled — it told the reader to go stamp a page that already had
+          // everything attached to it.
+          //
+          // The honest condition is: nothing to show at all.
+          if (!t.identifiers?.length && !t.events?.length) {
+            return { content: [{ type: 'text', text: `"${name}" has no history yet — no identifier stamps and nothing attached. Stamp its page with [[repo:owner/name]] (what it identifies), or attach records to it, and events will accrue here.` }] }
           }
           const lines = [`# ${name} — node timeline (history; the page is the present)`]
-          lines.push(`Joins: ${t.identifiers.map((i) => `[[${i.id}]] · ${i.visibleCount} visible`).join('  |  ')}${t.incomplete ? '  (partial — one join failed to read)' : ''}`)
+          if (t.identifiers?.length) {
+            lines.push(`Joins: ${t.identifiers.map((i) => `[[${i.id}]] · ${i.visibleCount} visible`).join('  |  ')}${t.incomplete ? '  (partial — one join failed to read)' : ''}`)
+          } else {
+            // Say WHERE the events came from. A reader who sees a timeline on a page with no stamps
+            // should not have to guess whether the stamps are missing or simply not how it got here.
+            lines.push(`Joins: none — these events are attached to the page directly, not matched through an identifier stamp.${t.incomplete ? '  (partial — one read failed)' : ''}`)
+          }
           for (const e of t.events) lines.push(`- ${String(e.occurredAt).slice(0, 10)} · ${e.source} · ${e.summary}`)
           if (!t.events.length) lines.push('(no events visible to you yet on these joins)')
           if (t.siblings?.length) lines.push(`Sibling homes (share a stamp — bridges, not history): ${t.siblings.map((s) => `"${s.title}"`).join(', ')}`)
@@ -2148,6 +2167,51 @@ function renderNudge(payload) {
     },
   )
 
+  server.registerTool(
+    'capture_record',
+    {
+      title: 'Hand something over and get it into the brain',
+      description: "Put a document, transcript, notes or any pasted content into the brain as a real record, routed to where it belongs. USE THIS WHEN THERE IS NO CONNECTOR — a lecture recording, an export from a tool nobody has wired up, something a person just handed you. ⚠ `identifiers` IS HOW IT REACHES A PAGE: a record routes to whatever page CLAIMS an identifier it carries (series:… for a class or recurring meeting, repo:owner/name, project:slug, email:someone@example.com). WITHOUT ONE IT REACHES NO PAGE — that is not an error, but it means nobody will find it, so say so rather than reporting success. `occurred_at` is WHEN THE THING HAPPENED, not now: a transcript handed over today may belong to yesterday's class, and filing it under today puts it in the wrong interval invisibly. `container_record_id` additionally places it INSIDE a specific event (a class session, a meeting) — that is an explicit human decision and is recorded as one; overlap alone never places anything.",
+      inputSchema: {
+        title: z.string().describe('a short name for this record'),
+        content: z.string().describe('the actual content — transcript, notes, document text. Summarized server-side.'),
+        occurred_at: z.string().describe('when the thing HAPPENED, ISO 8601 — not when you are uploading it'),
+        ends_at: z.string().optional().describe('when it ended, ISO 8601. Omit if unknown; NEVER guess one.'),
+        identifiers: z.array(z.string()).optional().describe('routing identifiers — how it reaches a page. e.g. ["series:geol-100-001-f2026"]'),
+        container_record_id: z.string().optional().describe('put it INSIDE this event (the record id of a class session or meeting that has a container)'),
+        summary: z.string().optional().describe('your own summary; if given, the content is stored but not sent for summarization'),
+        source: z.string().optional().describe("where it came from, for provenance — e.g. 'granola', 'learning-suite'. Default 'handoff'."),
+        brain: z.string().optional().describe('which brain, by name or org id. REQUIRED if you belong to more than one — placing a record IS a disclosure decision.'),
+      },
+    },
+    async ({ title, content, occurred_at, ends_at, identifiers, container_record_id, summary, source, brain }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/records/capture`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({
+            title, content, occurredAt: occurred_at, endsAt: ends_at, identifiers,
+            containerRecordId: container_record_id, summary, source, brain,
+          }),
+        })
+      } catch (e) {
+        return toolError(`Could not reach Agnoclast to capture "${title}": ${e.message}`)
+      }
+      const body = await res.json().catch(() => ({}))
+      if (!res.ok || !body?.ok) {
+        return toolError(`Could not capture "${title}": ${body?.error ?? res.status}${body?.detail ? ` — ${body.detail}` : ''}`)
+      }
+      const lines = [`Captured "${title}" as record ${body.id}.`]
+      // ⚠ AN UNROUTED RECORD IS REPORTED AS SUCH. It was stored, but nothing will find it — reporting
+      // that as a plain success is how a record becomes invisible while looking filed.
+      if (body.routed_by?.length) lines.push(`Routes via: ${body.routed_by.join(', ')} — it reaches whatever page claims those.`)
+      else lines.push('⚠ NO IDENTIFIERS — this record reaches no page. Nobody will find it unless you give it one (identifiers) or attach it by hand.')
+      if (body.contained) lines.push('Placed inside the container you named.')
+      return { content: [{ type: 'text', text: lines.join('\n') }] }
+    },
+  )
+
   server.registerTool(
     'capture_meeting',
     {
@@ -2201,6 +2265,18 @@ function renderNudge(payload) {
         return { content: [{ type: 'text', text: lines.join('\n') }] }
       }
 
+      // ⚠ TWO OUTCOMES, AND ONLY ONE HAS A RECORD ID. On an account with Gate 4 private intake on,
+      // the transcript lands as a SEALED UNIT and the response carries `intakeItemId` instead of
+      // `recordId` — rendering that as `Captured as record undefined` was what a real capture printed
+      // on 2026-09-01. Held-for-review is an honest outcome and now says so, including the step the
+      // reader has to take for the transcript to reach the meeting's obligation.
+      if (out.via === 'private_intake') {
+        lines.push(`Captured as a sealed intake unit ${out.intakeItemId} (scoped) — held for review.`)
+        lines.push(`  ${out.occurredAt}${out.endsAt ? ` \u2192 ${out.endsAt}` : ''}`)
+        lines.push('  It already carries the meeting\'s attendee identifiers. Materialize it to file it')
+        lines.push('  under its pages and offer it as evidence against that meeting\'s obligation.')
+        return { content: [{ type: 'text', text: lines.join('\n') }] }
+      }
       lines.push(`Captured as record ${out.recordId} (scoped).`)
       lines.push(`  ${out.occurredAt}${out.endsAt ? ` \u2192 ${out.endsAt}` : ' \u2014 no end recorded'}`)
       if (out.extentDropped) lines.push(`  \u26a0 the end was REFUSED (${out.extentDropped}) and stored as unknown`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.128",
+  "version": "0.9.130",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {