@theronap/cortex-mcp 0.9.75 → 0.9.76

package/lib/server.mjs

@@ -719,7 +719,14 @@ export async function runServer(version) {
       }
       const out = await res.json().catch(() => null)
       if (!res.ok) return toolError(`Could not roll back "${name}": ${out?.error ?? res.status}`)
-      return { content: [{ type: 'text', text: `Done — "${name}" ${out.note}. \`read_page "${name}"\` to confirm the current content.` }] }
+      // #477: when the target revision had no summary, the page's CURRENT summary was kept rather than
+      // erased. Say it on its own line instead of at the tail of `note` — this is the 2026-08-04 W3
+      // shape, where empty summaries copied over populated ones destroyed 31 of them under a report
+      // that read as success. A rescue the operator does not see is still a silent write.
+      const keptLine = out.summaryKept === 'current'
+        ? `\n\n⚠ That revision had NO summary, so the page's current summary was KEPT rather than erased — check it still describes the restored body, and use set_summary if not.`
+        : ''
+      return { content: [{ type: 'text', text: `Done — "${name}" ${out.note}. \`read_page "${name}"\` to confirm the current content.${keptLine}` }] }
     },
   )
 

package/lib/skills.mjs

@@ -265,22 +265,65 @@ export async function syncOrgSkills(opts = {}) {
   return summary
 }
 
-// `skills push <file>` / `skills push --disable <name>` / `skills push --enable <name>` —
-// publish or toggle an org skill (owner/manager/admin; the server enforces the role).
-async function runSkillsPush(argv) {
+// Render a failed push. THE SERVER ALREADY ANSWERED THE QUESTION — brain_choice_response.ts builds a
+// body carrying a full `message` plus every brain's NAME, PAGE COUNT and SAMPLE TITLES, explicitly so
+// the caller can choose "by what each one HOLDS, not by which name sounds related". This function
+// existed as `body.error ?? HTTP ${status}`, which printed the bare code `brain_required` and threw
+// all of that away — the user saw a two-word error with no notion of what a brain is, which ones they
+// have, or what to type next. Pure + exported so the shape is unit-testable without a network.
+export function renderPushError(body, status) {
+  const lines = [body?.message ?? body?.error ?? `HTTP ${status}`]
+  const brains = Array.isArray(body?.brains) ? body.brains : []
+  if (brains.length) {
+    lines.push('', '  Your brains:')
+    for (const b of brains) {
+      const pages = typeof b?.pageCount === 'number' ? ` — ${b.pageCount} page${b.pageCount === 1 ? '' : 's'}` : ''
+      const titles = Array.isArray(b?.sampleTitles) && b.sampleTitles.length
+        ? `: ${b.sampleTitles.slice(0, 2).join('; ')}` : ''
+      lines.push(`    ${b?.name ?? b?.orgId ?? '(unnamed)'}${pages}${titles}`)
+    }
+    lines.push('', '  Re-run with --brain "<name>".')
+  }
+  return lines.join('\n')
+}
+
+// `skills push <file> [--brain <name>]` / `skills push --disable <name> [--brain <name>]` /
+// `skills push --enable <name> [--brain <name>]` — publish or toggle an org skill
+// (owner/manager/admin; the server enforces the role).
+//
+// ⚠ --brain IS NOT OPTIONAL FOR A MULTI-BRAIN CALLER, and until 2026-08-08 there was no way to pass
+// it. Publishing MODIFIES one brain, so the server correctly uses ADR-0022's `requireBrain` half and
+// refuses to guess — but this command sent no `brain`, so every push and every --disable from a
+// multi-brain account died on `brain_required` with no way forward. Confirmed against production:
+// `skills push --disable cortex-author-docs` → `✗ brain_required`, full stop.
+//
+// This is the WRITE twin of the GET bug fixed in #467. The read was miscategorised and now fans out;
+// the write was categorised correctly and simply had no input for the answer it demanded.
+export async function runSkillsPush(argv) {
   const { resolveBase, readWiredToken, fetchCortex } = await import('./diagnose.mjs')
   const token = process.env.CORTEX_TOKEN || readWiredToken()
   if (!token) { process.stderr.write('No Agnoclast token wired — run setup first.\n'); return 1 }
   const base = resolveBase(process.env.CORTEX_URL)
 
+  const brainIdx = argv.findIndex((a) => a === '--brain')
+  const brain = brainIdx === -1 ? null : argv[brainIdx + 1]
+  if (brainIdx !== -1 && (!brain || brain.startsWith('-'))) {
+    process.stderr.write('Usage: skills push … --brain <name>  (missing brain name)\n')
+    return 1
+  }
+  // Strip --brain AND its value before any positional parsing below. The value does not start with
+  // '-', so the `argv.find(a => !a.startsWith('-'))` file lookup would otherwise take it as the
+  // SKILL.md path and push the wrong thing.
+  const rest = brainIdx === -1 ? argv : argv.filter((_, i) => i !== brainIdx && i !== brainIdx + 1)
+
   let payload
-  const toggleIdx = argv.findIndex((a) => a === '--disable' || a === '--enable')
+  const toggleIdx = rest.findIndex((a) => a === '--disable' || a === '--enable')
   if (toggleIdx !== -1) {
-    const name = argv[toggleIdx + 1]
-    if (!name) { process.stderr.write(`Usage: skills push ${argv[toggleIdx]} <name>\n`); return 1 }
-    payload = { name, enabled: argv[toggleIdx] === '--enable' }
+    const name = rest[toggleIdx + 1]
+    if (!name) { process.stderr.write(`Usage: skills push ${rest[toggleIdx]} <name>\n`); return 1 }
+    payload = { name, enabled: rest[toggleIdx] === '--enable' }
   } else {
-    const file = argv.find((a) => !a.startsWith('-'))
+    const file = rest.find((a) => !a.startsWith('-'))
     if (!file || !existsSync(file)) { process.stderr.write('Usage: skills push <SKILL.md>  (file not found)\n'); return 1 }
     const body_md = readFileSync(file, 'utf8')
     const name = frontmatterName(body_md, '').toLowerCase()
@@ -292,13 +335,14 @@ async function runSkillsPush(argv) {
   }
 
   try {
-    const res = await fetchCortex(`${base}/api/skills`, {
+    const qs = brain ? `?brain=${encodeURIComponent(brain)}` : ''
+    const res = await fetchCortex(`${base}/api/skills${qs}`, {
       method: 'POST',
       headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
       body: JSON.stringify(payload),
     })
     const body = await res.json().catch(() => ({}))
-    if (!res.ok) { process.stderr.write(`✗ ${body.error ?? `HTTP ${res.status}`}\n`); return 1 }
+    if (!res.ok) { process.stderr.write(`✗ ${renderPushError(body, res.status)}\n`); return 1 }
     process.stdout.write(
       payload.body_md
         ? `✓ published "${payload.name}" to your org — every seat installs it on next session start.\n`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.75",
+  "version": "0.9.76",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {