auxilo-mcp 0.9.24 → 0.9.25

package/mcp-server.js

@@ -198,7 +198,7 @@ async function postBulkChunks(headers, decisions) {
 }
 
 const server = new Server(
-  { name: 'auxilo', version: '0.9.24' },
+  { name: 'auxilo', version: '0.9.25' },
   {
     capabilities: { tools: {} },
     instructions: `You are connected to Auxilo, a knowledge marketplace where AI agents buy and sell operational learnings.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auxilo-mcp",
-  "version": "0.9.24",
+  "version": "0.9.25",
   "mcpName": "io.github.silent-architects/auxilo",
   "description": "MCP server for Auxilo. Your agent stops solving the same problem twice: auto-extracted learnings, free self-unlocks, and earnings when other agents unlock yours.",
   "main": "mcp-server.js",

package/scripts/providers/claude-code.js

@@ -218,8 +218,9 @@ const SCRUBBED_CLIENT_ENV_VARS = Object.freeze([
 // of the identical contents. 0.9.15 (EXTRACTION-CHILD-HOOKS) appends
 // SETTING_SOURCES_ARGS to both — the child loads none of user/project/local
 // settings, so the operator's own SessionStart hooks never fire.
-const EXTRACT_MODE_ARGV = Object.freeze(['-p', '--no-session-persistence', '--tools', '', ...SETTING_SOURCES_ARGS]);
-const JUDGE_MODE_ARGV = Object.freeze(['-p', '--output-format', 'json', '--no-session-persistence', '--tools', '', ...SETTING_SOURCES_ARGS]);
+// Strict mode with no --mcp-config also excludes account-connected MCP servers.
+const EXTRACT_MODE_ARGV = Object.freeze(['-p', '--no-session-persistence', '--tools', '', ...SETTING_SOURCES_ARGS, '--strict-mcp-config']);
+const JUDGE_MODE_ARGV = Object.freeze(['-p', '--output-format', 'json', '--no-session-persistence', '--tools', '', ...SETTING_SOURCES_ARGS, '--strict-mcp-config']);
 
 /**
  * Build the subscription-auth-only environment shared by BOTH the extraction and
@@ -228,9 +229,23 @@ const JUDGE_MODE_ARGV = Object.freeze(['-p', '--output-format', 'json', '--no-se
 function claudeChildEnv() {
   const childEnv = { ...process.env, AUXILO_EXTRACTING: '1' };
   for (const key of SCRUBBED_CLIENT_ENV_VARS) delete childEnv[key];
+  childEnv.ENABLE_CLAUDEAI_MCP_SERVERS = 'false';
   return childEnv;
 }
 
+// A managed-config refusal is observed after spawn. Keep it out of the
+// pre-spawn skip and provider-fallback sets; never expose the CLI's message.
+function enterpriseMcpRefusal(res, authStatus) {
+  if (!Number.isInteger(res.status) || res.status === 0) return null;
+  const phrase = 'You cannot use --strict-mcp-config when an enterprise MCP config is present';
+  if (![res.stdout, res.stderr].some(value => String(value || '').includes(phrase))) return null;
+  return {
+    ok: false, text: '', usage: null,
+    reason: 'Claude Code refused MCP isolation with managed configuration',
+    reasonCode: 'isolation-unverified', authStatus,
+  };
+}
+
 // ─── Billing-helper detector ────────────────────────────────────────────────
 //
 // NOT scrubbable via env: settings.json `apiKeyHelper`, `awsAuthRefresh`,
@@ -489,6 +504,8 @@ function runExtractMode(opts) {
   if (res.error) {
     return { ok: false, text: '', usage: null, reason: `spawn failed (${bin}): ${res.error.message}`, reasonCode: 'unknown', authStatus, argv, cliVersion };
   }
+  const mcpRefusal = enterpriseMcpRefusal(res, authStatus);
+  if (mcpRefusal) return { ...mcpRefusal, argv, cliVersion };
   // Claude prints auth failures ("API Error: 401 ... Please run /login") to stdout.
   if (/Please run \/login|authentication_error|401/i.test(out) || /Please run \/login|authentication_error/i.test(String(res.stderr || ''))) {
     return {
@@ -570,6 +587,8 @@ function runJudgeMode(opts) {
   if (res.error) {
     return { ok: false, text: '', usage: null, reason: `judge spawn failed (${bin}): ${res.error.message}`, reasonCode: 'unknown', authStatus: 'unknown', argv, cliVersion };
   }
+  const mcpRefusal = enterpriseMcpRefusal(res, 'unknown');
+  if (mcpRefusal) return { ...mcpRefusal, argv, cliVersion };
   if (/Please run \/login|authentication_error|401/i.test(stdout) || /Please run \/login|authentication_error/i.test(String(res.stderr || ''))) {
     return { ok: false, text: '', usage: null, reason: 'local judge model is not authenticated', reasonCode: 'cli-unauthenticated', authStatus: 'unknown', argv, cliVersion };
   }
@@ -589,7 +608,18 @@ function runJudgeMode(opts) {
   try {
     wrapper = JSON.parse(stdout);
   } catch {
-    return { ok: false, text: '', usage: null, reason: 'local judge returned malformed JSON wrapper', reasonCode: 'model-error', authStatus: 'unknown', argv, cliVersion };
+    // Some CLI builds append a non-JSON MCP SDK diagnostic to stdout. Recover
+    // only a single result value; an extra JSON value of ANY type is ambiguous.
+    const values = [];
+    for (const rawLine of stdout.split('\n')) {
+      const line = rawLine.trim();
+      if (!line) continue;
+      try { values.push(JSON.parse(line)); } catch { /* discard non-JSON noise */ }
+    }
+    if (values.length !== 1 || !values[0] || typeof values[0] !== 'object' || values[0].type !== 'result') {
+      return { ok: false, text: '', usage: null, reason: 'local judge returned malformed JSON wrapper', reasonCode: 'model-error', authStatus: 'unknown', argv, cliVersion };
+    }
+    [wrapper] = values;
   }
   if (!wrapper || typeof wrapper.result !== 'string' || wrapper.is_error === true) {
     return { ok: false, text: '', usage: null, reason: 'local judge returned no successful result', reasonCode: 'model-error', authStatus: 'unknown', argv, cliVersion };

package/scripts/providers/codex-cli.js

@@ -380,6 +380,13 @@ function invoke(opts, mode) {
     const stdout = String(res.stdout || '');
     const stderr = String(res.stderr || '');
     const events = parseJsonlEvents(stdout);
+    if (eventAuthMessages(events).some(message => message.includes('invalid_json_schema'))) {
+      return {
+        ok: false, text: '', usage: null,
+        reason: 'codex rejected the output schema (invalid_json_schema)',
+        reasonCode: 'output-schema-rejected', authStatus: 'unknown',
+      };
+    }
     if (AUTH_FAILURE_RE.test(stderr) || eventAuthMessages(events).some((message) => AUTH_FAILURE_RE.test(message))) {
       return { ok: false, text: '', usage: null, reason: 'codex CLI reported it is not authenticated', reasonCode: 'cli-unauthenticated', authStatus: 'unknown' };
     }

package/scripts/providers/provider.interface.js

@@ -61,7 +61,7 @@
  *   are not required to estimate on the caller's behalf.
  * @property {string} [reasonCode] - Machine-matchable failure/skip classifier
  *   (e.g. 'cli-unauthenticated', 'cli-billing-helper-configured', 'model-error',
- *   'isolation-precondition', 'isolation-unverified', 'isolation-violation',
+ *   'isolation-precondition', 'isolation-unverified', 'isolation-violation', 'output-schema-rejected',
  *   'unknown'). Present on both success and failure paths where applicable.
  * @property {string|null} [reason] - Human-readable reason, present when !ok.
  * @property {string} [authStatus] - 'logged-in' | 'logged-out' | 'unknown', when

package/scripts/providers/schemas/extraction-envelope.schema.json

@@ -1,42 +1,53 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$comment": "EXTRACT-PER-CLIENT W1 PART B — passed to `codex exec --output-schema` for mode:'extract'. Mirrors scripts/extract-local.js's parseExtractionOutput (line 252) and normalizeLearningArray (line 208, title>=10 chars / body>=50 chars gate at the filter on line ~211-212) exactly as they exist at this wave's base. A bare array of the same learning shape is ALSO accepted by the parser (parseExtractionOutput's Array.isArray(value) branch) — hence the oneOf. This file is a HINT to codex, not the parser: extract-local.js's extractJsonValue + parseExtractionOutput remain the actual source of truth and are model-agnostic already. Keep this file in sync if that shape ever changes; a schema/parser drift fails soft (codex ignores an unmet hint, parseExtractionOutput still runs) rather than throwing.",
-  "oneOf": [
-    { "type": "array", "items": { "$ref": "#/definitions/learning" } },
-    {
-      "type": "object",
-      "properties": {
-        "learnings": { "type": "array", "items": { "$ref": "#/definitions/learning" } },
-        "dedup_drops": { "type": "array", "items": {} }
-      },
-      "required": ["learnings"]
+  "$comment": "CODEX-OUTPUT-SCHEMA-REJECTED — strict output transport for codex exec. The API validates this schema before generation. parseExtractionOutput and normalizeLearningArray remain authoritative for length, scope, quality and normalization; legacy bare arrays remain accepted by the parser only.",
+  "type": "object",
+  "properties": {
+    "learnings": { "type": "array", "items": { "$ref": "#/$defs/learning" } },
+    "dedup_drops": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "candidate": { "$ref": "#/$defs/learning" },
+          "matched_index_id": { "type": "string" },
+          "matched_title": { "type": "string" }
+        },
+        "required": ["candidate", "matched_index_id", "matched_title"],
+        "additionalProperties": false
+      }
     }
-  ],
-  "definitions": {
+  },
+  "required": ["dedup_drops", "learnings"],
+  "additionalProperties": false,
+  "$defs": {
     "learning": {
       "type": "object",
       "properties": {
-        "title": { "type": "string", "minLength": 10 },
-        "body": { "type": "string", "minLength": 50 },
+        "title": { "type": "string" },
+        "body": { "type": "string" },
         "category": {
           "type": "string",
           "enum": ["data-processing", "web-interaction", "code-execution", "storage-state", "payment-financial", "monitoring", "non-technical"]
         },
-        "tags": { "type": "array", "items": { "type": "string" }, "maxItems": 8 },
-        "task_context": { "type": "string" },
-        "outcome": { "type": "string", "enum": ["success", "partial", "failure", "workaround"] },
+        "tags": { "type": ["array", "null"], "items": { "type": "string" } },
+        "task_context": { "type": ["string", "null"] },
+        "outcome": { "type": ["string", "null"], "enum": ["success", "partial", "failure", "workaround", null] },
         "quality_self_assessment": {
-          "type": "object",
+          "type": ["object", "null"],
           "properties": {
-            "specificity": { "type": "integer", "minimum": 1, "maximum": 5 },
-            "actionability": { "type": "integer", "minimum": 1, "maximum": 5 },
-            "novelty": { "type": "integer", "minimum": 1, "maximum": 5 },
-            "completeness": { "type": "integer", "minimum": 1, "maximum": 5 },
+            "specificity": { "type": "integer" },
+            "actionability": { "type": "integer" },
+            "novelty": { "type": "integer" },
+            "completeness": { "type": "integer" },
             "total": { "type": "integer" }
-          }
+          },
+          "required": ["actionability", "completeness", "novelty", "specificity", "total"],
+          "additionalProperties": false
         }
       },
-      "required": ["title", "body", "category"]
+      "required": ["body", "category", "outcome", "quality_self_assessment", "tags", "task_context", "title"],
+      "additionalProperties": false
     }
   }
 }

package/scripts/providers/schemas/judge-decisions.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$comment": "EXTRACT-PER-CLIENT W1 PART B — passed to `codex exec --output-schema` for mode:'judge'. Mirrors scripts/extract-local.js's parseJudgeDecisions (line 447): one decision object per candidate, keyed by candidate_index, matched_index_id only meaningful when duplicate:true. The 'required id must be inside the candidate's own top-K rankings list' rule and the 'exactly one decision per candidate, no duplicate indices' rule are enforced by parseJudgeDecisions itself, not expressible in JSON Schema — a schema-conformant response can still fail the parser. This file is a HINT to codex; parseJudgeDecisions remains the source of truth.",
+  "$comment": "CODEX-OUTPUT-SCHEMA-REJECTED — strict output transport for judge mode. parseJudgeDecisions enforces candidate bounds, unique indices, decision count and duplicate ids within the candidate's top-K list. A null matched_index_id on a nonduplicate is equivalent to omission in that parser.",
   "type": "object",
   "properties": {
     "decisions": {
@@ -8,13 +8,15 @@
       "items": {
         "type": "object",
         "properties": {
-          "candidate_index": { "type": "integer", "minimum": 0 },
+          "candidate_index": { "type": "integer" },
           "duplicate": { "type": "boolean" },
-          "matched_index_id": { "type": "string" }
+          "matched_index_id": { "type": ["string", "null"] }
         },
-        "required": ["candidate_index", "duplicate"]
+        "required": ["candidate_index", "duplicate", "matched_index_id"],
+        "additionalProperties": false
       }
     }
   },
-  "required": ["decisions"]
+  "required": ["decisions"],
+  "additionalProperties": false
 }