@theronap/cortex-mcp 0.9.97 → 0.9.98

package/lib/skills.mjs

@@ -361,6 +361,35 @@ export async function runSkills(argv = []) {
   if (argv[0] === 'push') return runSkillsPush(argv.slice(1))
 
   const quiet = argv.includes('--quiet')
+
+  // ── C2 (ADR-0033 §5): move the MCP config key to its new name. ─────────────
+  // This runs from the SessionStart hook because that is the only channel that reaches every seat
+  // without asking anyone to do anything. It is safe here for two reasons that both matter:
+  //
+  //   • It is SELF-GUARDING. runKeyMigration adds the new namespace's allow rules and re-reads them
+  //     from disk BEFORE flipping the key, and aborts leaving the machine on the old name if they
+  //     did not land. The C1 release already pre-authorized both namespaces, so on a seat that took
+  //     C1 there is nothing left to add — but a seat that skipped C1 entirely is handled too, which
+  //     is the whole reason the guard lives on the machine rather than in the release cadence.
+  //   • It is idempotent and cheap after the first run: a state file read, then nothing.
+  //
+  // FAIL-SOFT, like every other hook step. A migration hiccup must never block a session from
+  // starting; the next SessionStart tries again.
+  try {
+    const { runKeyMigration } = await import('./migrate_key.mjs')
+    const res = runKeyMigration()
+    if (!quiet && res.status === 'migrated') {
+      process.stdout.write(`  ✓ MCP config key moved ${res.from} → ${res.to}. Restart to load it under the new name.\n`)
+    }
+    if (res.status === 'aborted') {
+      // Loud on stderr even when quiet: an abort means the machine is INTENTIONALLY still on the old
+      // key, and a silent abort is indistinguishable from never having tried.
+      process.stderr.write(`agnoclast: key migration held off at "${res.step}" (${res.reason}) — still on the old name, will retry.\n`)
+    }
+  } catch (e) {
+    process.stderr.write(`agnoclast: key migration skipped (${e?.message ?? e}) — will retry next session.\n`)
+  }
+
   if (!quiet) process.stdout.write('\nAgnoclast skills — installing managed skills…\n')
   const r = installSkills({ quiet })
   if (!quiet) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.97",
+  "version": "0.9.98",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {