@theronap/cortex-mcp 0.9.129 → 0.9.130

package/lib/diagnose.mjs

@@ -119,8 +119,18 @@ export function wiredDistTag() {
   return null
 }
 
-// The production alias — exempt from Vercel Deployment Protection.
-export const CANONICAL_BASE = 'https://cortex-console.vercel.app'
+// The canonical production host — exempt from Vercel Deployment Protection.
+//
+// ⚠ cortex-console.vercel.app IS STILL A LIVE ALIAS AND MUST STAY IN THE EXEMPT SET BELOW. It was
+// the canonical host until agnoclast.com; installed clients, frozen generated scripts and hook
+// commands on machines nobody can reach still send it. Removing it from the set would make
+// resolveBase() treat a WORKING production alias as a protected deployment URL and silently redirect
+// those clients — the exact failure this function exists to prevent, caused by the fix for it.
+export const CANONICAL_BASE = 'https://agnoclast.com'
+
+// Production aliases: real hosts that serve the app and are exempt from Deployment Protection, as
+// opposed to per-deployment URLs (cortex-console-<hash>-<team>.vercel.app) which are NOT.
+const PRODUCTION_ALIASES = new Set(['agnoclast.com', 'cortex-console.vercel.app'])
 
 // Resolve the API base from CORTEX_URL. A Vercel *deployment* URL
 // (cortex-console-<hash>-<team>.vercel.app, or any non-canonical *.vercel.app) is guarded by
@@ -134,7 +144,7 @@ export function resolveBase(rawUrl) {
   if (!raw) return CANONICAL_BASE
   let host
   try { host = new URL(raw).host } catch { return CANONICAL_BASE }
-  if (host.endsWith('.vercel.app') && host !== 'cortex-console.vercel.app') {
+  if (host.endsWith('.vercel.app') && !PRODUCTION_ALIASES.has(host)) {
     process.stderr.write(
       `cortex: CORTEX_URL (${raw}) is a protected Vercel deployment URL; using ${CANONICAL_BASE} instead.\n`,
     )
@@ -317,7 +327,7 @@ export async function checkToken(token, base) {
       message: `Token "${String(token).slice(0, 8)}…" is not a valid Agnoclast token (expected a UUID). ` +
         `Re-run setup with the token from the console.` } }
   }
-  const url = `${(base ?? 'https://cortex-console.vercel.app').replace(/\/$/, '')}/api/mcp-context`
+  const url = `${(base ?? CANONICAL_BASE).replace(/\/$/, '')}/api/mcp-context`
   let res
   try {
     res = await fetchCortex(url, { headers: { Authorization: `Bearer ${token}` } })

package/lib/server.mjs

@@ -2167,6 +2167,51 @@ function renderNudge(payload) {
     },
   )
 
+  server.registerTool(
+    'capture_record',
+    {
+      title: 'Hand something over and get it into the brain',
+      description: "Put a document, transcript, notes or any pasted content into the brain as a real record, routed to where it belongs. USE THIS WHEN THERE IS NO CONNECTOR — a lecture recording, an export from a tool nobody has wired up, something a person just handed you. ⚠ `identifiers` IS HOW IT REACHES A PAGE: a record routes to whatever page CLAIMS an identifier it carries (series:… for a class or recurring meeting, repo:owner/name, project:slug, email:someone@example.com). WITHOUT ONE IT REACHES NO PAGE — that is not an error, but it means nobody will find it, so say so rather than reporting success. `occurred_at` is WHEN THE THING HAPPENED, not now: a transcript handed over today may belong to yesterday's class, and filing it under today puts it in the wrong interval invisibly. `container_record_id` additionally places it INSIDE a specific event (a class session, a meeting) — that is an explicit human decision and is recorded as one; overlap alone never places anything.",
+      inputSchema: {
+        title: z.string().describe('a short name for this record'),
+        content: z.string().describe('the actual content — transcript, notes, document text. Summarized server-side.'),
+        occurred_at: z.string().describe('when the thing HAPPENED, ISO 8601 — not when you are uploading it'),
+        ends_at: z.string().optional().describe('when it ended, ISO 8601. Omit if unknown; NEVER guess one.'),
+        identifiers: z.array(z.string()).optional().describe('routing identifiers — how it reaches a page. e.g. ["series:geol-100-001-f2026"]'),
+        container_record_id: z.string().optional().describe('put it INSIDE this event (the record id of a class session or meeting that has a container)'),
+        summary: z.string().optional().describe('your own summary; if given, the content is stored but not sent for summarization'),
+        source: z.string().optional().describe("where it came from, for provenance — e.g. 'granola', 'learning-suite'. Default 'handoff'."),
+        brain: z.string().optional().describe('which brain, by name or org id. REQUIRED if you belong to more than one — placing a record IS a disclosure decision.'),
+      },
+    },
+    async ({ title, content, occurred_at, ends_at, identifiers, container_record_id, summary, source, brain }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/records/capture`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({
+            title, content, occurredAt: occurred_at, endsAt: ends_at, identifiers,
+            containerRecordId: container_record_id, summary, source, brain,
+          }),
+        })
+      } catch (e) {
+        return toolError(`Could not reach Agnoclast to capture "${title}": ${e.message}`)
+      }
+      const body = await res.json().catch(() => ({}))
+      if (!res.ok || !body?.ok) {
+        return toolError(`Could not capture "${title}": ${body?.error ?? res.status}${body?.detail ? ` — ${body.detail}` : ''}`)
+      }
+      const lines = [`Captured "${title}" as record ${body.id}.`]
+      // ⚠ AN UNROUTED RECORD IS REPORTED AS SUCH. It was stored, but nothing will find it — reporting
+      // that as a plain success is how a record becomes invisible while looking filed.
+      if (body.routed_by?.length) lines.push(`Routes via: ${body.routed_by.join(', ')} — it reaches whatever page claims those.`)
+      else lines.push('⚠ NO IDENTIFIERS — this record reaches no page. Nobody will find it unless you give it one (identifiers) or attach it by hand.')
+      if (body.contained) lines.push('Placed inside the container you named.')
+      return { content: [{ type: 'text', text: lines.join('\n') }] }
+    },
+  )
+
   server.registerTool(
     'capture_meeting',
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.129",
+  "version": "0.9.130",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {