holonovel 2026.9.7 → 2026.9.10

package/dist/core/state.d.ts

@@ -506,7 +506,7 @@ export declare class StateManager {
         narrative_tag?: string;
     }>;
     codex: Map<string, CodexEntry>;
-    readonly dataFormat = "15312d5bcb533c32b852179fdbff0b8ee6e21473af3c1981f01fd7074709f6ad";
+    readonly dataFormat = "b2665b830a4076bc83619d7495e199f525ba72b040ec294bc5152c3c5d526d0d";
     staleData: Map<string, string>;
     corruptData: Map<string, string>;
     private restoredThisSession;

package/dist/generated/contract-fingerprints.d.ts

@@ -1,2 +1,2 @@
 export declare const PACKAGE_FORMAT = "2e36c2ccb9283086dd91056cd4571fd648854a4b83df4f391150e3942bcb85c8";
-export declare const DATA_FORMAT = "15312d5bcb533c32b852179fdbff0b8ee6e21473af3c1981f01fd7074709f6ad";
+export declare const DATA_FORMAT = "b2665b830a4076bc83619d7495e199f525ba72b040ec294bc5152c3c5d526d0d";

package/dist/generated/contract-fingerprints.js

@@ -1,5 +1,5 @@
 // Generated by scripts/lib/contract-fingerprint.ts — do not edit by hand.
 // Regenerated by build-order whenever the spec changes.
 export const PACKAGE_FORMAT = "2e36c2ccb9283086dd91056cd4571fd648854a4b83df4f391150e3942bcb85c8";
-export const DATA_FORMAT = "15312d5bcb533c32b852179fdbff0b8ee6e21473af3c1981f01fd7074709f6ad";
+export const DATA_FORMAT = "b2665b830a4076bc83619d7495e199f525ba72b040ec294bc5152c3c5d526d0d";
 //# sourceMappingURL=contract-fingerprints.js.map

package/dist/index.js

@@ -54,7 +54,7 @@ state.buildFingerprint.lastSpecReview = new Date().toISOString();
 // ── Server ─────────────────────────────────────────────────────────
 const server = new McpServer({
     name: "holonovel",
-    version: "2026.09.07",
+    version: "2026.09.10",
 });
 // REQ-426c — MCP Apps capability negotiation: the server declares the
 // `io.modelcontextprotocol/ui` extension in its capabilities; a client that
@@ -62,22 +62,43 @@ const server = new McpServer({
 // appsNegotiated() below). REQ-426a — UI resources are served under the
 // `ui://` scheme as `text/html;profile=mcp-app`.
 server.server.registerCapabilities({ extensions: { "io.modelcontextprotocol/ui": {} } });
-// REQ-133 — forbidden-call audit: every tool handler is wrapped so that a
-// thrown `[FORBIDDEN]` records the call (badge, tool name, arguments,
-// violation_type: boundary) in the Novel audit log before propagating.
-// REQ-429 — server-wide action-discriminator surface: one tool per persisted
-// entity type within a twenty-eight-tool budget; every persisted type has a
-// list/get/info/status/knowledge action; uniform verb-noun/noun+action naming.
-// REQ-450 — TDQS-conformant tool definitions: every registered tool carries a
-// mutation-class annotation (read-only vs open-world) so callers see behavior
-// hints beyond the description.
+const READ_ONLY = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false };
+const MUTATING = { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false };
 const TOOL_ANNOTATIONS = {
-    help: { readOnlyHint: true, openWorldHint: false },
+    help: READ_ONLY,
+    set_badge: MUTATING,
+    respond: MUTATING,
+    undo: MUTATING,
+    redo: MUTATING,
+    character: MUTATING,
+    npc: MUTATING,
+    world: MUTATING,
+    command: MUTATING,
+    combat: MUTATING,
+    scene: MUTATING,
+    countdown: MUTATING,
+    lore: MUTATING,
+    condition: MUTATING,
+    faction: MUTATING,
+    relationship: MUTATING,
+    vow: MUTATING,
+    fate: MUTATING,
+    ironsworn: MUTATING,
+    forged: MUTATING,
+    story: MUTATING,
+    note: MUTATING,
+    session: MUTATING,
+    adventure: MUTATING,
+    novel: MUTATING,
+    ruleset: MUTATING,
+    codex: MUTATING,
+    synthesis: MUTATING,
 };
-const DEFAULT_TOOL_ANNOTATIONS = { readOnlyHint: false, openWorldHint: true };
 const _registerTool = server.registerTool.bind(server);
 server.registerTool = ((name, config, handler) => {
-    const annotations = TOOL_ANNOTATIONS[name] ?? DEFAULT_TOOL_ANNOTATIONS;
+    const annotations = config.annotations ?? TOOL_ANNOTATIONS[name];
+    if (!annotations)
+        throw new Error(`Tool '${name}' has no REQ-450 mutation-class annotation; add it to TOOL_ANNOTATIONS.`);
     return _registerTool(name, { ...config, annotations }, withForbiddenAudit(handler, name));
 });
 // ── §5.12 Narrative Architecture helpers (REQ-335 through REQ-366) ──
@@ -731,11 +752,18 @@ function gatedRulesetTool(slug, schema, toolName) {
 for (const slug of rulesets.installedSlugs()) {
     for (const schema of rulesets.toolSchemas(slug)) {
         const toolName = `${slug}_${schema.name}`;
+        // REQ-450 — ruleset-derived tools read indexed data (lookup/search/info:
+        // idempotent) or generate content (roll/table): neither mutates Novel
+        // state, so destructiveHint is false for every ruleset-derived kind.
+        const annotations = (schema.kind === "lookup" || schema.kind === "search" || schema.kind === "info")
+            ? { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false }
+            : { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false };
         try {
             server.registerTool(toolName, {
                 title: schema.title ?? schema.name,
                 description: `${schema.description ?? ""} (ruleset: ${slug})`,
                 inputSchema: jsonSchemaToZod(schema.inputSchema),
+                annotations,
             }, gatedRulesetTool(slug, schema, toolName));
         }
         catch (e) {
@@ -1651,6 +1679,8 @@ server.registerTool("redo", {
     state.redo(novel, getBadge());
     return ok("Redo successful.");
 });
+// REQ-067 — Help and tool discovery: badge-filtered categorized task map with
+// query search and Novel-scoped category reassignment (T62/T118).
 server.registerTool("help", {
     title: "Help and Tool Discovery",
     description: "Show the available tools grouped by category (badge-filtered) or reassign a tool's category. Use when: the caller needs to discover tools, find one by keyword, or override a tool's category for a session. Do NOT use when: reading the current badge's guidance — use the badge_briefing prompt.",
@@ -1727,16 +1757,35 @@ server.registerTool("help", {
         return raw(top.map(m => `**${m.name}** — ${m.description}\nExample: ${m.example}`).join("\n\n"));
     }
     const builderCategories = BUILDER_CATEGORIES;
+    // REQ-067b — GM category reassignment: an overridden tool leaves its
+    // builder-assigned category and renders under the user-defined category.
+    // Player badge always reflects builder-assigned categories.
+    const overrides = novel?.help_category_overrides ?? {};
+    const overriddenTools = new Set(Object.keys(overrides));
     let result = "## Holonovel MCP Server\n\n### Tool Categories\n\n";
     for (const [cat, tools] of Object.entries(builderCategories)) {
         let displayTools = [...tools];
-        if (!isGM) {
-            displayTools = tools.filter(t => !GMToolsSet.has(t) && !(t === "command" && novel?.ruleset));
+        if (isGM) {
+            displayTools = displayTools.filter(t => !overriddenTools.has(t));
+        }
+        else {
+            displayTools = displayTools.filter(t => !GMToolsSet.has(t) && !(t === "command" && novel?.ruleset));
         }
         if (displayTools.length > 0) {
             result += `**${cat}:** ${displayTools.join(", ")}\n`;
         }
     }
+    if (isGM) {
+        const userCategories = new Map();
+        for (const [tool, cat] of Object.entries(overrides)) {
+            if (!userCategories.has(cat))
+                userCategories.set(cat, []);
+            userCategories.get(cat).push(tool);
+        }
+        for (const [cat, tools] of userCategories) {
+            result += `**${cat}:** ${tools.join(", ")}\n`;
+        }
+    }
     result += "\nUse the intro prompt to get started, or badge_briefing for current badge guidance.";
     // Add world-model hint if populated
     if (novel && novel.world.rooms.size > 0) {