@theronap/cortex-mcp 0.9.149 → 0.9.150

package/lib/redact.mjs

@@ -1,5 +1,6 @@
 // redact.mjs — strip high-confidence credential patterns from text BEFORE it leaves
-// the machine (capture POSTs a transcript tail to the org). A leaked secret in a
+// the machine or is stored (hydrate sends the prompt; capture feeds the transcript tail to
+// the local summarizer and the local queue — since D8 it never POSTs the tail). A leaked secret in a
 // transcript — a user pastes an API key, a tool reads a config file holding one, or
 // (the 2026-06-22 finding) a login token sits inlined in a hook command — must never
 // be transmitted or stored. Conservative by design: targets known secret SHAPES so it

package/lib/server.mjs

@@ -10,6 +10,7 @@ import { folderClaimLine } from './folder_claims.mjs'
 import { resolveSessionKey, resolveLogSessionId } from './session_key.mjs'
 import { runSendImessage } from './imessage_send.mjs'
 import { formatGrepHits } from './grep_cli.mjs'
+import { buildProposal, renderProposal, withAskNotice } from './propose_obligation.mjs'
 import { renderCaptureStatus } from './capture_status.mjs'
 import { renderTriage } from './red_link_triage.mjs'
 import { runCodeGraphQuery } from './code_graph_cli.mjs'
@@ -823,7 +824,7 @@ function renderNudge(payload) {
         sections.push(`Unclaimed records (${records.length}) from other sources — newest first:\n${lines.join('\n')}`)
       }
 
-      return { content: [{ type: 'text', text: sections.join('\n\n') }] }
+      return { content: [{ type: 'text', text: withAskNotice(sections.join('\n\n')) }] }
     },
   )
 
@@ -1169,7 +1170,7 @@ function renderNudge(payload) {
         if (out?.error === 'not_found') return toolError('No such intake unit in your account.')
         return toolError(`Could not look: ${out?.error ?? res.status}${out?.detail ? ` — ${out.detail}` : ''}`)
       }
-      return { content: [{ type: 'text', text: JSON.stringify(out, null, 2) }] }
+      return { content: [{ type: 'text', text: withAskNotice(JSON.stringify(out, null, 2)) }] }
     },
   )
 
@@ -2036,8 +2037,14 @@ function renderNudge(payload) {
         }
         lines.push('', 'Claim with set_routing_identifier on the page whose subject HAS that identifier.')
       }
+      // THREE OUTCOMES, ALL LEGITIMATE (ADR-0038 amendment, Theron 2026-09-11: "we need to make it an
+      // option for the agent to discard emails entirely or to create pages"). Naming only placement left an
+      // agent with no honest move for junk mail or for a subject that has no page yet — so it either
+      // mis-filed onto the nearest page or left the queue to grow. 6 of 19 arrivals sat exactly there.
       lines.push('', 'Place one with place_staged_record (staged_id + pages). The pages decide the brain, which decides who can read it.')
-      return { content: [{ type: 'text', text: lines.join('\n') }] }
+      lines.push('No page fits? `author` the page it needs, then place onto it. Junk? `discard_staged` (reversible, dry-run by default).')
+      lines.push('A default brain is NOT the answer for content — one standing rule cannot decide disclosure for mail nobody has read.')
+      return { content: [{ type: 'text', text: withAskNotice(lines.join('\n')) }] }
     },
   )
 
@@ -2202,6 +2209,49 @@ function renderNudge(payload) {
     },
   )
 
+  server.registerTool(
+    'propose_obligation',
+    {
+      title: 'Propose something a record asks of this person',
+      description:
+        'Propose an obligation you found while READING — with the sentence that asks for it. This is the verb for ' +
+        '"this email asks Theron for a call on Friday": it lands as a PROPOSAL the person confirms or dismisses, never ' +
+        'as a commitment they made. Use it whenever something you read asks this person for something and no obligation ' +
+        'covers it yet. ⚠ NOT the same tool as `track_obligation`, which records what the PERSON says they owe and ' +
+        'carries no evidence — proposing through that verb makes a machine guess indistinguishable from their own word. ' +
+        '⚠ `evidence` must be the VERBATIM sentence from that record, not your paraphrase: it is the whole reviewable ' +
+        'unit, and the person decides on the strength of it. ⚠ NEVER INVENT A DATE. Copy the words that say when into ' +
+        '`due_phrase` ("by Tuesday the 22nd", "this week") and the server works the date out against the record\'s own ' +
+        'date; pass `due_at` only when you are reading a date the record states. No date is a proposal with no date, ' +
+        'which is honest and still shows up.',
+      inputSchema: {
+        record: z.string().describe('the record the ask came from — an id from my_day, timeline_pull, list_records or find_sessions'),
+        subject: z.string().describe('what must be done, one short phrase'),
+        evidence: z.string().describe('the VERBATIM sentence from that record that asks for it'),
+        due_phrase: z.string().optional().describe('the words that say WHEN, copied from the evidence sentence — the server resolves them'),
+        due_at: z.string().optional().describe('YYYY-MM-DD, or YYYY-MM-DDTHH:MM when a time is stated. Only a date the record states.'),
+        obligated_party: z.enum(['self', 'other', 'none']).optional().describe('self (default) = this person owes it; other = someone else; none = nobody'),
+      },
+    },
+    async ({ record, subject, evidence, due_phrase, due_at, obligated_party }) => {
+      const built = buildProposal({ subject, evidence, due_phrase, due_at, obligated_party })
+      if (built.error) return toolError(`Not proposed: ${built.error}`)
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/obligations/candidates`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({ recordId: record, obligations: [built.candidate] }),
+        })
+      } catch (e) { return toolError(`Could not reach obligations: ${e.message}`) }
+      const out = await res.json().catch(() => null)
+      if (res.status === 404) return toolError('No such record of yours — pass a record id you can see (my_day, timeline_pull, list_records).')
+      if (res.status === 409) return toolError('That capture is still sealed in private intake; materialize it first, then propose against its record.')
+      if (!res.ok) return toolError(`Could not propose: ${out?.error ?? res.status}`)
+      return { content: [{ type: 'text', text: renderProposal(out, built.candidate, built.note) }] }
+    },
+  )
+
   server.registerTool(
     'resolve_obligation',
     {
@@ -3157,7 +3207,7 @@ function renderNudge(payload) {
         return toolError(`Could not build daily log: ${d.message}`)
       }
       const { text } = await res.json()
-      return { content: [{ type: 'text', text }] }
+      return { content: [{ type: 'text', text: withAskNotice(text) }] }
     },
   )
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.149",
+  "version": "0.9.150",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {