@theronap/cortex-mcp 0.9.129 → 0.9.131

package/lib/diagnose.mjs

@@ -119,8 +119,18 @@ export function wiredDistTag() {
   return null
 }
 
-// The production alias — exempt from Vercel Deployment Protection.
-export const CANONICAL_BASE = 'https://cortex-console.vercel.app'
+// The canonical production host — exempt from Vercel Deployment Protection.
+//
+// ⚠ cortex-console.vercel.app IS STILL A LIVE ALIAS AND MUST STAY IN THE EXEMPT SET BELOW. It was
+// the canonical host until agnoclast.com; installed clients, frozen generated scripts and hook
+// commands on machines nobody can reach still send it. Removing it from the set would make
+// resolveBase() treat a WORKING production alias as a protected deployment URL and silently redirect
+// those clients — the exact failure this function exists to prevent, caused by the fix for it.
+export const CANONICAL_BASE = 'https://agnoclast.com'
+
+// Production aliases: real hosts that serve the app and are exempt from Deployment Protection, as
+// opposed to per-deployment URLs (cortex-console-<hash>-<team>.vercel.app) which are NOT.
+const PRODUCTION_ALIASES = new Set(['agnoclast.com', 'cortex-console.vercel.app'])
 
 // Resolve the API base from CORTEX_URL. A Vercel *deployment* URL
 // (cortex-console-<hash>-<team>.vercel.app, or any non-canonical *.vercel.app) is guarded by
@@ -134,7 +144,7 @@ export function resolveBase(rawUrl) {
   if (!raw) return CANONICAL_BASE
   let host
   try { host = new URL(raw).host } catch { return CANONICAL_BASE }
-  if (host.endsWith('.vercel.app') && host !== 'cortex-console.vercel.app') {
+  if (host.endsWith('.vercel.app') && !PRODUCTION_ALIASES.has(host)) {
     process.stderr.write(
       `cortex: CORTEX_URL (${raw}) is a protected Vercel deployment URL; using ${CANONICAL_BASE} instead.\n`,
     )
@@ -317,7 +327,7 @@ export async function checkToken(token, base) {
       message: `Token "${String(token).slice(0, 8)}…" is not a valid Agnoclast token (expected a UUID). ` +
         `Re-run setup with the token from the console.` } }
   }
-  const url = `${(base ?? 'https://cortex-console.vercel.app').replace(/\/$/, '')}/api/mcp-context`
+  const url = `${(base ?? CANONICAL_BASE).replace(/\/$/, '')}/api/mcp-context`
   let res
   try {
     res = await fetchCortex(url, { headers: { Authorization: `Bearer ${token}` } })

package/lib/server.mjs

@@ -2167,6 +2167,100 @@ function renderNudge(payload) {
     },
   )
 
+  server.registerTool(
+    'find_sessions',
+    {
+      title: 'Find the calendar sessions on a given day',
+      description: "Find the event records on a local calendar day — how you get the id of a SPECIFIC session (\"the Wednesday MSB 380 class\") so you can place something inside it with capture_record's container_record_id. Pass `tz` as the person's own timezone: a day means the day THEY lived through, and resolving it in UTC puts an evening class on the wrong date. Each result says whether it has a CONTAINER — a session with `container_type: null` cannot hold anything, and naming it as a target fails later for a reason you could not otherwise have seen.",
+      inputSchema: {
+        date: z.string().describe('the local calendar day, YYYY-MM-DD'),
+        tz: z.string().optional().describe("the person's IANA timezone, e.g. America/Denver. Defaults to UTC, which is usually NOT what you want."),
+        q: z.string().optional().describe('case-insensitive title filter, e.g. "MSB 380"'),
+      },
+    },
+    async ({ date, tz, q }) => {
+      const qs = new URLSearchParams({ date, ...(tz ? { tz } : {}), ...(q ? { q } : {}) })
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/sessions?${qs}`, { headers: { Authorization: `Bearer ${TOKEN}` } })
+      } catch (e) {
+        return toolError(`Could not reach Agnoclast to find sessions on ${date}: ${e.message}`)
+      }
+      const body = await res.json().catch(() => ({}))
+      if (!res.ok || !body?.ok) return toolError(`Could not find sessions on ${date}: ${body?.error ?? res.status}`)
+      if (!body.sessions?.length) {
+        return { content: [{ type: 'text', text: `No sessions on ${date}${q ? ` matching "${q}"` : ''}${tz ? ` (${tz})` : ' (UTC — pass tz if that is wrong)'}.` }] }
+      }
+      const lines = [`Sessions on ${date}${tz ? ` (${tz})` : ' (UTC)'}:`]
+      for (const s of body.sessions) {
+        const when = new Date(s.startsAt).toISOString().slice(11, 16)
+        const box = s.containerType
+          ? `container: ${s.containerType}${s.sealed ? ', sealed' : ''}${s.alreadyContains ? `, holds ${s.alreadyContains}` : ''}`
+          : '⚠ NO CONTAINER — cannot hold anything'
+        lines.push(`- ${s.title ?? '(untitled)'} · ${when}Z${s.location ? ` · ${s.location}` : ''}\n    id: ${s.recordId}\n    ${box}${s.seriesKey ? `\n    series: ${s.seriesKey}` : ''}`)
+      }
+      lines.push('', 'Use an id as capture_record\'s container_record_id to place something inside that session.')
+      return { content: [{ type: 'text', text: lines.join('\n') }] }
+    },
+  )
+
+  server.registerTool(
+    'capture_record',
+    {
+      title: 'Hand something over and get it into the brain',
+      description: "Put a document, transcript, notes or any pasted content into the brain as a real record, routed to where it belongs. USE THIS WHEN THERE IS NO CONNECTOR — a lecture recording, an export from a tool nobody has wired up, something a person just handed you. ⚠ `identifiers` IS HOW IT REACHES A PAGE: a record routes to whatever page CLAIMS an identifier it carries (series:… for a class or recurring meeting, repo:owner/name, project:slug, email:someone@example.com). WITHOUT ONE IT REACHES NO PAGE — that is not an error, but it means nobody will find it, so say so rather than reporting success. `occurred_at` is WHEN THE THING HAPPENED, not now: a transcript handed over today may belong to yesterday's class, and filing it under today puts it in the wrong interval invisibly. `container_record_id` additionally places it INSIDE a specific event (a class session, a meeting) — that is an explicit human decision and is recorded as one; overlap alone never places anything.",
+      inputSchema: {
+        title: z.string().describe('a short name for this record'),
+        content: z.string().describe('the actual content — transcript, notes, document text. Summarized server-side.'),
+        occurred_at: z.string().describe('when the thing HAPPENED, ISO 8601 — not when you are uploading it'),
+        ends_at: z.string().optional().describe('when it ended, ISO 8601. Omit if unknown; NEVER guess one.'),
+        identifiers: z.array(z.string()).optional().describe('routing identifiers — how it reaches a page. e.g. ["series:geol-100-001-f2026"]'),
+        container_record_id: z.string().optional().describe('put it INSIDE this event (the record id of a class session or meeting that has a container)'),
+        summary: z.string().optional().describe('your own summary; if given, the content is stored but not sent for summarization'),
+        source: z.string().optional().describe("where it came from, for provenance — e.g. 'granola', 'learning-suite'. Default 'handoff'."),
+        brain: z.string().optional().describe('which brain, by name or org id. REQUIRED if you belong to more than one — placing a record IS a disclosure decision.'),
+      },
+    },
+    async ({ title, content, occurred_at, ends_at, identifiers, container_record_id, summary, source, brain }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/records/capture`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({
+            title, content, occurredAt: occurred_at, endsAt: ends_at, identifiers,
+            containerRecordId: container_record_id, summary, source, brain,
+          }),
+        })
+      } catch (e) {
+        return toolError(`Could not reach Agnoclast to capture "${title}": ${e.message}`)
+      }
+      const body = await res.json().catch(() => ({}))
+      if (!res.ok || !body?.ok) {
+        return toolError(`Could not capture "${title}": ${body?.error ?? res.status}${body?.detail ? ` — ${body.detail}` : ''}`)
+      }
+      // ⚠ A SEALED UNIT IS NOT A RECORD YET, AND SAYING "captured" WOULD BE A LIE OF OMISSION.
+      // On a private-intake account the content is stored encrypted and becomes a record only when
+      // materialised — so it cannot be found, routed or contained until then. Reporting it as a
+      // plain success is how someone believes a transcript is filed when it is sitting sealed.
+      if (body.sealed) {
+        const l = [`Stored "${title}" as a SEALED private-intake unit (${body.intakeItemId}).`]
+        l.push('It is NOT a record yet — it becomes one when you materialise it, and only then can it be routed or placed in a container.')
+        if (body.duplicate) l.push('This matched an existing unit rather than creating a new one.')
+        if (body.routed_by?.length) l.push(`Carries: ${body.routed_by.join(', ')} — it will route on those once materialised.`)
+        else l.push('⚠ NO IDENTIFIERS — once materialised it will reach no page.')
+        return { content: [{ type: 'text', text: l.join('\n') }] }
+      }
+      const lines = [`Captured "${title}" as record ${body.id}.`]
+      // ⚠ AN UNROUTED RECORD IS REPORTED AS SUCH. It was stored, but nothing will find it — reporting
+      // that as a plain success is how a record becomes invisible while looking filed.
+      if (body.routed_by?.length) lines.push(`Routes via: ${body.routed_by.join(', ')} — it reaches whatever page claims those.`)
+      else lines.push('⚠ NO IDENTIFIERS — this record reaches no page. Nobody will find it unless you give it one (identifiers) or attach it by hand.')
+      if (body.contained) lines.push('Placed inside the container you named.')
+      return { content: [{ type: 'text', text: lines.join('\n') }] }
+    },
+  )
+
   server.registerTool(
     'capture_meeting',
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.129",
+  "version": "0.9.131",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {