@theronap/cortex-mcp 0.9.143 → 0.9.145

package/lib/edge_extract.mjs

@@ -170,8 +170,12 @@ const PAGES_FRAGMENT =
 const OBLIGATIONS_FRAGMENT =
   '"obligations" (array of things someone must DO by a date, stated in this session. Each an object ' +
   'with "subject" (what must be done, one short phrase), ' +
-  '"due_at" (ISO 8601 date or datetime if one is stated, otherwise null — do NOT invent or infer a ' +
-  'date that was not said), ' +
+  '"due_at" (a DATE, YYYY-MM-DD, when only a day is stated; a date-time, YYYY-MM-DDTHH:MM, ONLY when a ' +
+  'time of day is actually said; otherwise null — do NOT invent or infer a date or a time that was not ' +
+  'said. A day with no time is kept as a bare date and treated as all-day), ' +
+  '"due_phrase" (the exact words that say WHEN it is due — "on the 15th", "by Tuesday the 22nd", ' +
+  '"Saturday", "by 5 pm tomorrow" — copied VERBATIM from the evidence sentence; null if the evidence ' +
+  'names no time. The date itself is worked out from these words, so copy them, do not rephrase), ' +
   '"evidence" (the sentence from the session that says so, copied EXACTLY and VERBATIM — it is ' +
   'checked against the transcript and the whole item is discarded if it does not match), ' +
   '"obligated_party" (exactly one of: "self" if the person whose session this is must do it; ' +
@@ -179,6 +183,9 @@ const OBLIGATIONS_FRAGMENT =
   'The hard part is "none", so read it carefully: a real date about a real person is still "none" ' +
   'when nobody owes anything — "so-and-so\'s birthday is today" has every surface feature of a ' +
   'deadline and is not one. Historical and course-content dates are "none" too. ' +
+  'If the SAME item is given a deadline more than once, or its deadline is changed later ("due ' +
+  'Saturday", then later "actually, plan on Tuesday the 22nd"), report it ONCE, using the LAST statement ' +
+  'for its evidence, due_phrase and due_at. ' +
   'Include an item when the session genuinely states an obligation, and do not stretch to find one; ' +
   'an empty array is correct for a session that contains no deadlines.)'
 
@@ -278,6 +285,8 @@ export function verbatimIn(needle, haystack) {
  * `obligated_party` outside the preset is malformed and goes — the server's CHECK constraint would
  * reject it anyway, and failing here means the record still lands with its other keys intact.
  */
+const normWs = (x) => x.toLowerCase().replace(/[’']/g, '').replace(/\s+/g, ' ').trim()
+
 export function keepVerifiableObligations(items, shown) {
   if (!Array.isArray(items)) return []
   const out = []
@@ -289,7 +298,17 @@ export function keepVerifiableObligations(items, shown) {
     if (!subject || !evidence || !OBLIGATION_PARTIES.has(party)) continue
     if (!verbatimIn(evidence, shown)) continue
     const due = typeof it.due_at === 'string' && it.due_at.trim() ? it.due_at.trim() : null
-    out.push({ subject: subject.slice(0, 200), due_at: due, evidence: evidence.slice(0, 500), obligated_party: party })
+    // ADR-0059 §5.2: the WHEN words, which the server resolves into a date in code. Kept only if they
+    // appear inside the evidence sentence — the check that stops a paraphrase ("Sept 22" for "the
+    // 22nd") or a phrase from some other sentence from deciding the date. Dropped otherwise: the server
+    // then falls back to due_at, exactly as it did before phrases existed.
+    const phraseRaw = typeof it.due_phrase === 'string' ? it.due_phrase.trim() : ''
+    const due_phrase = phraseRaw && normWs(evidence).includes(normWs(phraseRaw)) ? phraseRaw.slice(0, 120) : null
+    out.push({
+      subject: subject.slice(0, 200), due_at: due,
+      ...(due_phrase ? { due_phrase } : {}),
+      evidence: evidence.slice(0, 500), obligated_party: party,
+    })
     if (out.length >= MAX_OBLIGATIONS) break
   }
   return out

package/lib/obligations_render.mjs

@@ -10,6 +10,12 @@
 //
 // `dueAt` arrives in the OWNER's zone with its offset (web/lib/engine/due_dates.ts), so slice(0, 10)
 // below is the owner's calendar date and new Date() is still the exact instant.
+//
+// ADR-0059 §5.2 (Theron, 2026-09-10): a deadline with no stated time is ALL DAY, starting 00:00 local.
+// It prints "(all day)" instead of a time, reads DUE TODAY for the whole of its day, and turns OVERDUE
+// only at `overdueAfter` (the next local midnight). Without `overdueAfter`, the old rule — overdue at
+// dueAt — would call an all-day deadline OVERDUE from the first minute of its own day. A server older
+// than these fields sends neither, and gets exactly the old output.
 export function renderObligations(obs, now = Date.now()) {
   if (!obs?.length) return 'Nothing open.'
   const proposed = obs.filter((o) => o.state === 'proposed').length
@@ -20,8 +26,7 @@ export function renderObligations(obs, now = Date.now()) {
     '',
   ]
   for (const o of obs) {
-    const overdue = o.dueAt && new Date(o.dueAt).getTime() <= now
-    const when = o.dueAt ? `${overdue ? 'OVERDUE ' : 'due '}${o.dueAt.slice(0, 10)}` : 'no deadline'
+    const when = describeDue(o, now)
     lines.push(`${o.id}`)
     lines.push(`  ${o.subject}  — ${when}${o.state === 'snoozed' ? ' (snooze expired)' : ''}${o.state === 'proposed' ? '  [PROPOSED]' : ''}`)
     // ⚠ EVIDENCE IS RENDERED AS A QUESTION, NEVER AS A VERDICT. The phrasing is the feature:
@@ -37,3 +42,16 @@ export function renderObligations(obs, now = Date.now()) {
   }
   return lines.join('\n')
 }
+
+function describeDue(o, now) {
+  if (!o.dueAt) return 'no deadline'
+  const day = o.dueAt.slice(0, 10)
+  const flagged = typeof o.dueAllDay === 'boolean' // absent = a server older than all-day deadlines
+  const at = new Date(o.dueAt).getTime()
+  const after = o.overdueAfter ? new Date(o.overdueAfter).getTime() : at
+  if (!flagged) return `${at <= now ? 'OVERDUE ' : 'due '}${day}`
+  const what = o.dueAllDay ? `${day} (all day)` : `${day} ${o.dueAt.slice(11, 16)}`
+  if (after <= now) return `OVERDUE ${what}`
+  if (o.dueAllDay && at <= now) return `DUE TODAY ${what}`
+  return `due ${what}`
+}

package/lib/server.mjs

@@ -77,6 +77,28 @@ export const sectionCurrencyStamp = (s, day) => {
 // invisible on exactly the sections that were healthy.
 export const renderSection = (s, day) => `### ${s.heading}${sectionCurrencyStamp(s, day)}\n${s.body}`
 
+// gate5_status's transport half, pulled out of the tool handler so it can be exercised directly rather
+// than only string-matched (gate5_status_transport.drift.test.mjs). Takes the raw fetch Response from
+// /api/gates/5/status; the registerTool callback's only remaining job is fetching it. Same three
+// branches the drift test names: 404 (a deployment older than this tool), a generic non-ok response
+// (classified and thrown, same as every other tool here), and 200 with or without a usable `text`.
+export async function gate5StatusFromResponse(res) {
+  // A deployment older than this tool has no such route. That is a real state (the package and the
+  // web deploy move independently — #693) and it must read as "no reading", not as an error dump.
+  if (res.status === 404) {
+    return { content: [{ type: 'text', text: 'This tool is newer than the deployment it is talking to: /api/gates/5/status does not exist there yet, so NO reading was taken. This is not an all-clear. Re-check once the console has redeployed.' }] }
+  }
+  if (!res.ok) {
+    const body = await res.text()
+    throw new Error(classify(res.status, res.headers.get('content-type'), body, res.headers.get('x-vercel-id')).message)
+  }
+  const body = await res.json()
+  const text = typeof body?.text === 'string' && body.text.trim()
+    ? body.text
+    : 'gate5_status received a response with no reading in it, so NO reading was taken. This is not an all-clear.'
+  return { content: [{ type: 'text', text }] }
+}
+
 // The Agnoclast MCP server (stdio). Serves the signed-in employee's scoped org
 // context to their AI assistant. CORTEX_TOKEN identifies the user + org.
 
@@ -674,6 +696,27 @@ function renderNudge(payload) {
     },
   )
 
+  // ── gate5_status — v1 gate 5's operator-access alarm (scope lock D3) ─────────────────────────────
+  //
+  // THE VERDICT AND THE WORDS ARE RENDERED SERVER-SIDE, and that is the design rather than a shortcut.
+  // gate2_status and gate3_status build their prose here, in the client, and both ended up with wrong
+  // sentences frozen in published seats that could only be shimmed around from the route (see the
+  // notes above them). /api/gates/5/status returns the finished `text`, so its wording and verdict
+  // logic deploy with the web app. This handler only transports it, and its one rule is that "no
+  // reading" must never come out as silence or as an all-clear.
+  server.registerTool(
+    'gate5_status',
+    {
+      title: 'Gate 5 operator-access alarm (ops staff only)',
+      description: 'Read v1 gate 5\'s operator-access alarm: privileged database sessions (postgres / supabase_admin, sampled every 30s) that NO break-glass declaration covers, counted since a dated, attributed, expiring baseline (ADR-0060 option 1, accepted by Theron Peterson 2026-09-10). Aggregate-only — counts by likely source, the newest unexplained time and the window; never addresses, org names or session contents. OPS STAFF ONLY: the data is cross-org, so any other caller gets an operator-only answer, which is neither an alarm nor an all-clear. It also checks this app\'s OWN database connection: if the app itself is being recorded as operator access, the alarm is reported NOT ARMED rather than red or green. A failed read is reported as NO READING, never as clean. It decides nothing — gate 5 closes by Theron\'s decision, and what it cannot see is listed on [[Agnoclast v1 — the currency gate]].',
+      inputSchema: {},
+    },
+    async () => {
+      const res = await fetchCortex(`${BASE}/api/gates/5/status`, { headers: { Authorization: `Bearer ${TOKEN}` } })
+      return gate5StatusFromResponse(res)
+    },
+  )
+
   server.registerTool(
     'session_context',
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.143",
+  "version": "0.9.145",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {