@theronap/cortex-mcp 0.9.87 → 0.9.88

package/lib/server.mjs

@@ -486,6 +486,45 @@ export async function runServer(version) {
     },
   )
 
+  server.registerTool(
+    'intake_discard',
+    {
+      title: 'Discard a private intake item',
+      description:
+        'The OTHER terminal outcome for a claimed intake unit: this is nothing, drop it. Use it for content that should never become a record — unsubscribe receipts, empty greetings, marketing blasts, a stranger\'s photo — instead of materializing junk into a brain because materialize was the only verb available. IRREVERSIBLE: the ciphertext and nonces are destroyed in the same transaction, and a content-free tombstone stops the connector re-delivering the unit. You must already hold the claim (discarding something you never read is refused), `reason` is required and is stored, and it is one item per call — a loop discarding a whole pile on one decision is a bulk job, not judgment.',
+      inputSchema: {
+        intakeItemId: z.string().describe('intake item uuid from intake_claim'),
+        reason: z.string().describe('why this is nothing — recorded on the claim, and the only surviving trace of the decision'),
+      },
+    },
+    async ({ intakeItemId, reason }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/intake/discard`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({ intakeItemId, reason }),
+        })
+      } catch (e) {
+        return toolError(`Could not discard: ${e.message}`)
+      }
+      const out = await res.json().catch(() => null)
+      if (!res.ok) {
+        if (out?.error === 'not_claimed') {
+          return toolError('You do not hold a claim on that item — intake_claim it first, so the discard follows from having read it.')
+        }
+        if (out?.error === 'already_materialized') {
+          return toolError('That unit already became a record. Discarding it now would orphan the record from its source — detach or retier the record instead.')
+        }
+        return toolError(`Could not discard: ${out?.error ?? res.status}${out?.detail ? ` — ${out.detail}` : ''}`)
+      }
+      if (out?.alreadyDiscarded) {
+        return { content: [{ type: 'text', text: 'Already discarded — nothing to do.' }] }
+      }
+      return { content: [{ type: 'text', text: 'Discarded. Content destroyed, tombstone written so the source cannot re-deliver it.' }] }
+    },
+  )
+
   server.registerTool(
     'intake_cleanup_status',
     {
@@ -1654,16 +1693,19 @@ export async function runServer(version) {
     },
   )
 
-  // ── Gate 4 record triage ──────────────────────────────────────────────────────────────────
+  // ── Gate 4 record triage, over timeline_claims ────────────────────────────────────────────
   // A connector event materializes in seconds and has no idea what the work WAS. The session that
   // did the work knows exactly, and arrives later. These three tools are that handoff: look at what
   // landed, claim what is yours, route it when you know where it goes.
+  //
+  // The ledger is `timeline_claims` (0105) — one claim discipline over one stream. Unclaimed means
+  // NO claim row: absence IS the backlog, and nothing is written at ingest.
 
   server.registerTool(
     'pending_records',
     {
       title: 'Records waiting for a home',
-      description: 'List connector records (GitHub pushes, PRs, email) that landed WITHOUT a confident home and are waiting for judgment. Check this when your session starts if the headline count sounds related to what you are about to work on — records from your own recent commits are usually in here. Returns titles and current homes only, never payloads. Use view "sweep" on one record to get graded page-name candidates without reading any pages.',
+      description: 'List recent connector records (GitHub pushes, PRs, email) that NOBODY HAS ATTENDED TO yet — no claim row in the Gate 4 ledger. Check this when your session starts if the headline count sounds related to what you are about to work on; records from your own recent commits are usually in here, and you are the only one who can recognize them as yours. Returns titles and current homes only, never payloads. Use view "sweep" on one record to get graded page-name candidates without reading any pages.',
       inputSchema: {
         view: z.enum(['digest', 'sweep']).optional().describe('digest = what is waiting (default); sweep = cheap graded candidates for one record'),
         recordId: z.string().optional().describe('required for view "sweep"'),
@@ -1728,7 +1770,7 @@ export async function runServer(version) {
     'claim_record',
     {
       title: 'Claim a pending record as your work',
-      description: 'Say "this record is mine, I will route it once I know where it goes." Use it as soon as you recognize your own work in pending_records, even before you know the destination page — the claim stops a cheap automatic sweep from guessing at something you have real context on. Claims expire, so a dead session never holds a record hostage. Pass release=true to give one back when it turns out not to be yours.',
+      description: 'Say "this record is mine, I will route it once I know where it goes." Use it as soon as you recognize your own work in pending_records, even before you know the destination page — the claim takes it out of the backlog so nothing else guesses at something you have real context on. Claims are leased and expire, so a dead session never holds a record hostage, and a record held by another LIVE session cannot be taken. Pass release=true to give one back when it turns out not to be yours — that deletes the claim, so the record looks untouched again rather than attended-to.',
       inputSchema: {
         recordId: z.string().describe('record id from pending_records'),
         note: z.string().optional().describe('what you think this is — kept for audit'),
@@ -1790,6 +1832,51 @@ export async function runServer(version) {
     },
   )
 
+  server.registerTool(
+    'unroute_record',
+    {
+      title: 'Remove pages a record should not be on',
+      description:
+        'Detach pages a record does not belong on — the inverse of route_record, and the only way a wrong placement can be undone. route_record is purely ADDITIVE, so attaching more pages can never fix a bad one. Use this when you can see a record sitting on a page it has no real relationship to — the classic case is a fuzzy title match, e.g. a commit attached to a page merely because both contain a common word. Two things it will refuse rather than surprise you: it will not remove every attachment (a record with no home is invisible, which is worse than a wrong home — route or park it instead), and detaching the page that GOVERNS the tier can tighten the record but never republish it, since a widening is pinned and proposed for a human to confirm.',
+      inputSchema: {
+        recordId: z.string().describe('record id from pending_records'),
+        documentIds: z.array(z.string()).describe('page document ids to REMOVE from this record'),
+        reason: z.string().describe('why these placements are wrong — recorded with the removal'),
+      },
+    },
+    async ({ recordId, documentIds, reason }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/brain/triage`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({ action: 'detach', recordId, documentIds, reason }),
+        })
+      } catch (e) {
+        return toolError(`Could not detach: ${e.message}`)
+      }
+      const out = await res.json().catch(() => null)
+      if (!res.ok) {
+        // These two are guard rails, not faults — say what to do instead of just naming the code.
+        if (out?.error === 'would_strand') {
+          return toolError(`Refused: ${out.detail ?? 'that would leave the record with no pages at all.'}`)
+        }
+        if (out?.error === 'not_attached') {
+          return toolError(`Nothing removed: ${out.detail ?? 'those pages are not attached to this record.'}`)
+        }
+        return toolError(`Could not detach: ${out?.error ?? res.status}${out?.detail ? ` — ${out.detail}` : ''}`)
+      }
+      const n = out?.detached?.length ?? 0
+      const left = out?.remaining ?? 0
+      return {
+        content: [{
+          type: 'text',
+          text: `Detached ${n} page(s); ${left} attachment(s) remain. Record tier: ${out?.privacy ?? 'unchanged'}. Recorded as a session judgment.`,
+        }],
+      }
+    },
+  )
+
   server.registerTool(
     'snooze_red_link',
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.87",
+  "version": "0.9.88",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {