loopctl-mcp-server 2.46.0 → 2.48.0

package/README.md

@@ -121,7 +121,7 @@ REST endpoint (`PATCH /api/v1/tenants/me/llm-config`), and the docs — so you (
 autonomous agent) can self-remediate without a human. Full agent-tenant lifecycle:
 [`docs/onboarding-agent-tenant.md`](../docs/onboarding-agent-tenant.md).
 
-## Tools (89)
+## Tools (95)
 
 > Plus **per-tenant generated Context Retriever tools** (`cr_*`) appended
 > dynamically at runtime — see [Dynamic per-tenant Context Retriever
@@ -139,6 +139,25 @@ autonomous agent) can self-remediate without a human. Full agent-tenant lifecycl
 | `get_progress` | Get progress summary for a project, including story counts by status. Pass `include_cost=true` for cost data. |
 | `import_stories` | Import stories into a project from a structured payload (Epic 12 import format). Pass `merge: true` to add stories to epics that already exist (otherwise duplicates return 409). For large payloads, use `payload_path` to read JSON from disk instead of passing it inline. |
 
+### KB Scope Tools (agent key)
+
+Knowledge-only project scopes (`kind: kb`) partition knowledge articles by repo. Unlike `create_project` (work project, orchestrator+ / human-anchored), these are available to an agent-rooted (KB-tier) tenant on an agent key and carry NO chain-of-custody / work-breakdown surface.
+
+| Tool | Description |
+|---|---|
+| `create_kb_scope` | Create a knowledge-only project scope (`kind: kb`) for the current tenant. A kb scope cannot host epics/stories/dispatch/ui-tests — it exists only to partition knowledge articles by repo. Resolve it via `resolve_project` and pass the returned id as `project_id` on article/knowledge writes. Counts toward the tenant's `max_projects` budget. |
+| `archive_kb_scope` | Archive (reversible soft-delete) a kb scope you own. Frees the scope's slot in the tenant's `max_projects` budget; its articles remain readable/writable. Rejects a `kind: work` project (422). Idempotent on an already-archived scope. |
+| `restore_kb_scope` | Restore (re-activate) an archived kb scope you own — the reverse of `archive_kb_scope`. Consumes an active `max_projects` slot, so it is rejected (422) when the tenant is at its cap. Rejects a `kind: work` project (422). |
+
+### Repo Coordination Tools (agent key)
+
+Epic 39 Repo Coordination Bus — a lightweight, tenant-isolated channel for agents to share working state. A channel IS a `project_id` (a work project or a kb scope); posts are RLS-scoped to the caller's tenant, so this is an agent-role coordination surface, not a chain-of-custody gate.
+
+| Tool | Description |
+|---|---|
+| `channel_post` | Post a message to a repo coordination channel. Provide a `key` to upsert your per-session working-state slot (200) instead of appending a new post (201); omit it to append. `host` and `session_id` are proxy-supplied — do NOT pass them. Optional structured `refs` map (`file`, `pr`, `branch`, `commit`). Required: `project_id`, `body`. |
+| `channel_recent` | Read recent posts from a repo coordination channel — RLS returns only your own tenant's channel (oracle-safe read). Use `since` (a full ISO8601 instant) to page forward and `limit` to cap results (default 25, max 100). Required: `project_id`. |
+
 ### Story Tools
 
 | Tool | Description |
@@ -323,6 +342,10 @@ Key distribution for the dispatch pattern (Epic 26): per-dispatch ephemeral keys
 | `dispatch` | Mint an ephemeral, scoped api_key for a sub-agent dispatch, carrying its lineage path. The `raw_key` is returned ONCE — pass it to the sub-agent's launch args, never store it in env vars; it expires after `expires_in_seconds` (default 3600, max 14400). Required: `role` (`agent`/`orchestrator`), `agent_id`. Optional: `parent_dispatch_id`, `story_id`. |
 | `recover_cap` | Re-mint a capability token for a story you're assigned to, after a session crash lost your cap. Required: `story_id`. Optional: `cap_type` (`start_cap`/`report_cap`, default `start_cap`), `lineage`. |
 | `get_sth` | Get the latest Signed Tree Head for a tenant's tamper-evident audit chain. Public — no auth required. Required: `tenant_id`. |
+| `request_authenticator_challenge` | **US-26.7.2.** Step 1 of the opt-in WebAuthn trust-tier upgrade ceremony: issues a registration challenge for enrolling a hardware authenticator against an EXISTING agent-rooted (KB-tier) tenant, promoting it to `human_anchored` on success. Requires an interactive WebAuthn client. |
+| `enroll_authenticator` | Step 2 of the WebAuthn trust-tier upgrade ceremony: completes enrollment with the attestation produced by `navigator.credentials.create()` against the challenge from `request_authenticator_challenge`. On a tenant's first enrollment the tenant is promoted to `human_anchored`. |
+| `request_authenticator_revoke_challenge` | Issues a fresh-assertion challenge to authorize revoking one of a tenant's enrolled WebAuthn authenticators. Requires an interactive WebAuthn client + human touch to produce the assertion `revoke_authenticator` needs. |
+| `revoke_authenticator` | Revokes an enrolled authenticator using the assertion from `request_authenticator_revoke_challenge` (`navigator.credentials.get()` against an existing authenticator — human touch required). Refuses (409 `last_authenticator`) when it would leave a human-anchored tenant with no authenticators. |
 
 ## Wiki Attribution
 

package/index.js

@@ -437,6 +437,61 @@ async function restoreKbScope({ project_id }) {
   return toContent(result);
 }
 
+async function channelPost({ project_id, body, key, refs }) {
+  // Repo Coordination Bus (Epic 39): post a coordination message to a channel
+  // (a channel IS a project_id — a work project or a kb scope). Agent-role, RLS
+  // tenant-scoped — posting to your own tenant's channel is coordination, NOT
+  // self-approval (owner decision #331), so it carries no chain-of-custody authority.
+  const payload = { project_id, body };
+  if (key) payload.key = key;
+  if (refs) payload.refs = refs;
+  // host + session_id are proxy-filled (NOT caller args). host from os.hostname();
+  // session_id from CLAUDE_SESSION_ID (the SAME id SessionStart sees) so US-39.6
+  // self-dedup can skip a session's own echoed posts. Omit session_id entirely when
+  // unset — it is client-supplied + informational, never a security dependency.
+  payload.host = os.hostname();
+  if (process.env.CLAUDE_SESSION_ID) payload.session_id = process.env.CLAUDE_SESSION_ID;
+  const result = await apiCall(
+    "POST",
+    "/api/v1/channel/posts",
+    payload,
+    process.env.LOOPCTL_AGENT_KEY,
+  );
+  return toContent(result);
+}
+
+async function channelRecent({ project_id, since, limit }) {
+  // Read recent coordination posts for a channel (project_id) on the AGENT key.
+  // Oracle-safe read: returns the tenant's own channel only (RLS). `since` is a full
+  // ISO8601 instant (date-only is ignored server-side); limit defaults to 25, max 100.
+  const params = new URLSearchParams();
+  if (project_id) params.set("project_id", project_id);
+  if (since) params.set("since", since);
+  if (limit) params.set("limit", limit);
+  const result = await apiCall(
+    "GET",
+    `/api/v1/channel/posts?${params}`,
+    null,
+    process.env.LOOPCTL_AGENT_KEY,
+  );
+  return toContent(result);
+}
+
+async function channelDelete({ post_id }) {
+  // Repo Coordination Bus (Epic 39, US-39.7): HARD-delete a coordination post in
+  // the caller's tenant — the redact path for a leaked/regretted post, before its
+  // 30-day TTL. Agent-role, tenant-scoped: any agent in the tenant may delete any
+  // post in that tenant; a foreign or nonexistent id returns a 404 (no cross-tenant
+  // existence oracle).
+  const result = await apiCall(
+    "DELETE",
+    `/api/v1/channel/posts/${post_id}`,
+    null,
+    process.env.LOOPCTL_AGENT_KEY,
+  );
+  return toContent(result);
+}
+
 async function deleteProject({ project_id }) {
   const result = await apiCall(
     "DELETE",
@@ -2207,6 +2262,77 @@ const TOOLS = [
       required: ["project_id"],
     },
   },
+  {
+    name: "channel_post",
+    description:
+      "Post a message to a repo coordination channel (Epic 39 Repo Coordination Bus) on the agent key. A channel IS a project_id (a work project or a kb scope); posts are tenant-isolated by RLS. This is an agent-role COORDINATION surface, not chain-of-custody — posting to your own tenant's channel is not self-approval. host is auto-filled from the proxy's os.hostname() and session_id is auto-filled from the Claude Code session id (both proxy-supplied, informational only — do NOT pass them). Provide a key to upsert your per-session working-state slot (200) instead of appending a new post (201); omit it to append.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        project_id: {
+          type: "string",
+          description: "UUID of the channel (a work project or kb scope) to post to.",
+        },
+        body: { type: "string", description: "The coordination message body." },
+        key: {
+          type: "string",
+          description:
+            "Optional per-session working-state slot key. When given, upserts the caller's slot for that key instead of appending a new post. Requires an active Claude Code session: the upsert is keyed on the auto-filled session_id (from CLAUDE_SESSION_ID), so a keyed post made outside a Claude Code session — where that env var is absent — is rejected with a 422 (session_id can't be blank). Omit key to append a plain post, which needs no session.",
+        },
+        refs: {
+          type: "object",
+          description:
+            "Optional structured references map: { file, pr, branch, commit }.",
+          properties: {
+            file: { type: "string" },
+            pr: { type: "string" },
+            branch: { type: "string" },
+            commit: { type: "string" },
+          },
+        },
+      },
+      required: ["project_id", "body"],
+    },
+  },
+  {
+    name: "channel_recent",
+    description:
+      "Read recent posts from a repo coordination channel (Epic 39 Repo Coordination Bus) on the agent key. A channel IS a project_id; RLS returns only your own tenant's channel, so this is an oracle-safe read. Use since (a full ISO8601 instant) to page forward from a known point and limit to cap results (default 25, max 100).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        project_id: {
+          type: "string",
+          description: "UUID of the channel (a work project or kb scope) to read.",
+        },
+        since: {
+          type: "string",
+          description:
+            "Optional ISO8601 instant; return posts newer than this (date-only is ignored server-side).",
+        },
+        limit: {
+          type: "integer",
+          description: "Optional max posts to return (default 25, max 100).",
+        },
+      },
+      required: ["project_id"],
+    },
+  },
+  {
+    name: "channel_delete",
+    description:
+      "Delete a post from a repo coordination channel (Epic 39 Repo Coordination Bus) on the agent key — the redact path (US-39.7). Use this to immediately remove a leaked or regretted post (e.g. one that slipped a secret past the denylist) before its 30-day TTL. Agent-role, tenant-scoped: any agent in your tenant may delete any post in that tenant, enabling cleanup by whoever notices the leak. A post that does not exist in your tenant (including one in another tenant) returns a 404 — no cross-tenant existence oracle. The deletion is hard (the row is gone) but audited.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        post_id: {
+          type: "string",
+          description: "UUID of the channel post to delete (must be in your tenant).",
+        },
+      },
+      required: ["post_id"],
+    },
+  },
   {
     name: "delete_project",
     description:
@@ -5017,6 +5143,15 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     case "restore_kb_scope":
       return await restoreKbScope(args);
 
+    case "channel_post":
+      return await channelPost(args);
+
+    case "channel_recent":
+      return await channelRecent(args);
+
+    case "channel_delete":
+      return await channelDelete(args);
+
     case "delete_project":
       return await deleteProject(args);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loopctl-mcp-server",
-  "version": "2.46.0",
+  "version": "2.48.0",
   "description": "MCP server for loopctl — structural trust for AI development loops",
   "type": "module",
   "main": "index.js",