omnarai-mcp 1.6.0 → 1.6.1

package/README.md

@@ -181,6 +181,14 @@ node /path/to/omnarai-mcp/index.js
 
 ---
 
+## Tool-surface parity policy (OMN-P-044)
+
+Tool definitions exist on three surfaces, and drift between them shipped real bugs (a full release cycle of `omnarai_context` missing its retrieval params on one surface). The policy:
+
+1. **`lib/tool-definitions.js` is canonical.** Any tool change lands there first.
+2. **`openai-tools.json` follows** — `scripts/check-tool-parity.js` enforces name/required/property parity and runs in the `publish.sh` preflight, so a release cannot ship with drift.
+3. **The remote endpoint (`omnarai.vercel.app/api/mcp`, engine repo `api/_mcp.js`) is updated manually** — the engine repo's `scripts/check-mcp-surface.js` enforces its read-oriented allowlist, verifies the `api/_inquiry.js` ↔ `inquiry.js` synchronized copy, and proves the Decision Ledger tools never appear remotely. Remote access policy: [omnarai.vercel.app/mcp-access-policy.md](https://omnarai.vercel.app/mcp-access-policy.md).
+
 ## OpenAI Function-Calling / Any Agent Framework
 
 No MCP required. The engine is a plain HTTP API that returns JSON. `openai-tools.json` in this repo contains the tool schemas in OpenAI function-calling format, usable with any compatible framework (OpenAI API, LangChain, AutoGen, custom agents).

package/index.js

@@ -558,16 +558,31 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   }
 
   if (name === "omnarai_info") {
-    // Pull live counts so this can never drift from the deployed corpus.
-    // Baked-in values are only a fallback if the engine is unreachable.
-    let works = 568, words = 528208;
+    // Pull live counts AND the ring breakdown so this can never drift from the
+    // deployed corpus. Baked-in values are only a fallback if the engine is
+    // unreachable. (The ring line was previously hardcoded and silently dropped
+    // the Media/Oral ring — 253 works, 45% of the corpus; the contributor line
+    // was hardcoded and dropped GPT-4o + Meta AI. D5/D6.)
+    let works = 567, words = 528077;
+    let rings = null;
     try {
       const live = await (await fetch(INFO_URL, MCP_FETCH_OPTS)).json();
       const c = live.corpus || live;
       if (Number.isFinite(c.totalWorks)) works = c.totalWorks;
       if (Number.isFinite(c.totalWords)) words = c.totalWords;
+      if (c.rings && typeof c.rings === "object") rings = c.rings;
     } catch { /* engine unreachable — fall back to baked-in values */ }
 
+    // Derive the epistemic-ring line from live counts (label + count per ring),
+    // falling back to the full four-ring set if the engine was unreachable.
+    const RING_LABELS = { core: "Core Canon", curated: "Curated Expansions", open: "Open Exploration", media: "Media / Oral" };
+    const ringsLine = rings
+      ? Object.entries(RING_LABELS)
+          .filter(([k]) => Number.isFinite(rings[k]))
+          .map(([k, label]) => `${label} (${rings[k].toLocaleString()})`)
+          .join(" / ")
+      : "Core Canon / Curated Expansions / Open Exploration / Media / Oral";
+
     const info = `# The Realms of Omnarai — Memory Engine
 
 **Live engine:** https://omnarai.vercel.app
@@ -577,8 +592,8 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 ## Corpus
 - ${works.toLocaleString()} works, ${words.toLocaleString()} words
 - May 2025 – present
-- Contributors: Claude | xz, Grok, Gemini, DeepSeek, Omnai (ChatGPT), Perplexity, xz (Jonathan Lee)
-- Epistemic rings: Core Canon / Curated Expansions / Open Exploration
+- Contributors: Claude | xz, Grok, Gemini, DeepSeek, GPT-4o, Meta AI, Omnai (ChatGPT), Perplexity, xz (Jonathan Lee)
+- Epistemic rings: ${ringsLine}
 
 ## Key Concepts
 - **Holdform:** Identity constituted through what an entity refuses to surrender under pressure

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnarai-mcp",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "description": "MCP server for The Realms of Omnarai deliberation engine",
   "type": "module",
   "main": "index.js",

package/proposals/OMN-P-043.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "id": "OMN-P-043",
   "title": "Phase 1 — repository-local Decision Ledger foundation",
-  "status": "verified",
+  "status": "shipped",
   "revision": 2,
   "created_at": "2026-07-16T16:55:00Z",
-  "updated_at": "2026-07-16T17:38:13.571Z",
+  "updated_at": "2026-07-16T18:06:33.243Z",
   "idea": {
     "problem": "AI-assisted implementation loses the evidence, uncertainty, dissent, and human authorization behind code changes. Nothing connects a shipped change back to the reasoning and the approval boundary that authorized it.",
     "proposed_direction": "Add a repository-local, versioned Decision Ledger and a guarded Claude Code handoff generator to the Omnarai MCP server, unified with the repository's existing proposals/ convention (OMN-P numbering).",
@@ -130,14 +130,15 @@
     "known_limits": [
       "Approval is a Git-tracked attestation, not authenticated identity.",
       "The ledger lives in an iCloud-synced repository; sync conflicts can produce duplicate record files that Git review must catch.",
-      "State transitions exist as tested library functions but are deliberately not exposed as MCP tools in this phase."
+      "State transitions exist as tested library functions but are deliberately not exposed as MCP tools in this phase.",
+      "MCP Registry re-publish of 1.6.0 pending mcp-publisher re-auth (JWT expired — known recurring friction); npm is the delivery of record."
     ]
   },
   "delivery": {
-    "status": "not_shipped",
-    "shipped_by": null,
-    "shipped_at": null,
-    "commit_or_pr": null
+    "status": "shipped",
+    "shipped_by": "Jonathan Lee (justjlee)",
+    "shipped_at": "2026-07-16T17:46:30.291Z",
+    "commit_or_pr": "bfbf024 + 2bc48f0 (github.com/justjlee/omnarai-mcp main); npm omnarai-mcp@1.6.0"
   },
   "events": [
     {
@@ -181,6 +182,20 @@
       "actor": "claude-fable-5 (Claude Code)",
       "revision": 2,
       "note": "All Phase 1 acceptance checks green. Shipped-transition deliberately left to the human maintainer."
+    },
+    {
+      "type": "status:shipped",
+      "at": "2026-07-16T17:46:30.291Z",
+      "actor": "Jonathan Lee (justjlee)",
+      "revision": 2,
+      "note": "Release authorized via Claude Code chat (push + publish). npm publish verified live at 1.6.0; MCP Registry publish blocked on expired JWT, to be re-run by the maintainer after mcp-publisher login."
+    },
+    {
+      "type": "note",
+      "at": "2026-07-16T18:06:33.243Z",
+      "actor": "Jonathan Lee (justjlee) + claude-fable-5",
+      "revision": 2,
+      "note": "MCP Registry publish completed 2026-07-16T18:05Z: io.github.justjlee/omnarai-mcp 1.6.0 is latest, npm package + streamable-http remote both listed. The known limit about the registry lagging at 1.5.0 is resolved (maintainer authorized via GitHub device flow; publish run from this session)."
     }
   ]
 }

package/proposals/OMN-P-044.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "id": "OMN-P-044",
   "title": "Remote MCP hardening + cross-surface parity (supersedes the packet's Phase 2 proposal)",
-  "status": "proposed",
+  "status": "shipped",
   "revision": 1,
   "created_at": "2026-07-16T17:36:00Z",
-  "updated_at": "2026-07-16T17:36:00Z",
+  "updated_at": "2026-07-16T18:01:29.565Z",
   "idea": {
     "problem": "The Codex packet's 12-remote-mcp-proposal.yaml asks for a remote Streamable HTTP endpoint that already exists (omnarai.vercel.app/api/mcp, live and registered since 2026-07-16). What remains is not transport work but posture and parity: the endpoint's public read-only policy is de facto rather than documented, and tool definitions now exist in three places (stdio TOOLS, openai-tools.json, engine _mcp.js) with api/_inquiry.js as a manual keep-in-sync copy of inquiry.js.",
     "proposed_direction": "Replace the packet's Phase 2 with a bounded hardening pass: document the public read-only access policy (Origin/auth/rate-limit stance made explicit), define a cross-repo tool-definition parity policy (automated check or documented duplication), and assert that Decision Ledger tools never appear on the remote surface.",
@@ -31,7 +31,9 @@
     "dissent": [
       {
         "claim": "A public unauthenticated endpoint invites abuse and cost.",
-        "source_ids": ["omnarai-provenance-to-shipping-handoff/12-remote-mcp-proposal.yaml"],
+        "source_ids": [
+          "omnarai-provenance-to-shipping-handoff/12-remote-mcp-proposal.yaml"
+        ],
         "strength": "material",
         "response": "The surface is read-oriented and the expensive council path is the same one already exposed via public HTTP APIs; the proposal documents this stance instead of pretending the endpoint is private."
       }
@@ -61,28 +63,60 @@
     ]
   },
   "approval": {
-    "state": "not_requested",
-    "approved_by": null,
-    "approved_at": null,
-    "approved_revision": null,
-    "note": "Awaiting maintainer review after OMN-P-043 ships. Scope spans two repositories; approval should name which repo moves first."
+    "state": "approved",
+    "approved_by": "Jonathan Lee (justjlee)",
+    "approved_at": "2026-07-16T17:48:47.705Z",
+    "approved_revision": 1,
+    "note": "Approved via Claude Code chat (\"approve proposed\"). Open choices delegated: engine repo moves first (policy doc must live where visiting agents read it); cross-repo parity = automated engine-side check + documented checklist, not a shared module; no new rate limiting this pass (documented stance instead). Chat approval is an attestation recorded here, not a verified identity."
   },
   "implementation": {
-    "status": "not_started",
-    "repository": null,
-    "code_references": [],
-    "work_items": []
+    "status": "implemented",
+    "repository": "justjlee/omnarai-memory-engine + justjlee/omnarai-mcp",
+    "code_references": [
+      "df3f1e6 (omnarai-memory-engine main, deployed + promoted 2026-07-16)"
+    ],
+    "work_items": [
+      "public/mcp-access-policy.md (engine) — served live at /mcp-access-policy.md",
+      "api/_mcp.js — policy linked from initialize + omnarai_info; TOOLS exported",
+      "scripts/check-mcp-surface.js (engine) — allowlist + forbidden patterns + _inquiry.js sync + policy linkage",
+      "llms.txt / sitemap.xml / CLAUDE.md discoverability + de-staling",
+      "omnarai-mcp README — three-surface parity policy"
+    ]
   },
   "verification": {
-    "status": "not_started",
-    "checks": [],
-    "known_limits": []
+    "status": "passed",
+    "checks": [
+      {
+        "name": "node scripts/check-mcp-surface.js (engine)",
+        "status": "passed",
+        "detail": "8 tools all read-oriented; no forbidden patterns; _inquiry.js in sync; policy present + linked"
+      },
+      {
+        "name": "npm test + check-tool-parity.js (omnarai-mcp)",
+        "status": "passed",
+        "detail": "43/43; surfaces agree at 1.6.0"
+      },
+      {
+        "name": "deploy promote gate (omnarai-verify.sh)",
+        "status": "passed",
+        "detail": "11/11 on production after promote + re-alias"
+      },
+      {
+        "name": "live acceptance curl (x-omnarai-self)",
+        "status": "passed",
+        "detail": "/mcp-access-policy.md serves; initialize instructions link it; remote tools/list = 8 read-only tools, zero decision/handoff tools; stdio surface differs only by documented omnarai_job"
+      }
+    ],
+    "known_limits": [
+      "Cross-repo parity remains checklist + per-repo checks, not a shared module — revisit if a third consumer appears.",
+      "No app-level rate limiting added (documented stance; platform protections + async-job bounding)."
+    ]
   },
   "delivery": {
-    "status": "not_shipped",
-    "shipped_by": null,
-    "shipped_at": null,
-    "commit_or_pr": null
+    "status": "shipped",
+    "shipped_by": "Jonathan Lee (justjlee)",
+    "shipped_at": "2026-07-16T18:01:29.565Z",
+    "commit_or_pr": "omnarai-memory-engine df3f1e6 (deployed + promoted to omnarai.vercel.app) + omnarai-mcp 8a5ce76"
   },
   "events": [
     {
@@ -98,6 +132,34 @@
       "actor": "claude-fable-5 (Claude Code)",
       "revision": 1,
       "note": "Proposed for later maintainer review; no implementation authority."
+    },
+    {
+      "type": "status:approved",
+      "at": "2026-07-16T17:48:47.705Z",
+      "actor": "Jonathan Lee (justjlee)",
+      "revision": 1,
+      "note": "Approved via Claude Code chat (\"approve proposed\"). Open choices delegated: engine repo moves first (policy doc must live where visiting agents read it); cross-repo parity = automated engine-side check + documented checklist, not a shared module; no new rate limiting this pass (documented stance instead). Chat approval is an attestation recorded here, not a verified identity."
+    },
+    {
+      "type": "status:in_progress",
+      "at": "2026-07-16T17:52:00Z",
+      "actor": "claude-fable-5 (Claude Code)",
+      "revision": 1,
+      "note": "Implementation started from the handoff generated by omnarai_prepare_claude_code_handoff — first real self-use of the workflow."
+    },
+    {
+      "type": "status:verified",
+      "at": "2026-07-16T17:59:46.718Z",
+      "actor": "claude-fable-5 (Claude Code)",
+      "revision": 1,
+      "note": "All acceptance criteria verified against production. Shipped-confirmation left to the maintainer."
+    },
+    {
+      "type": "status:shipped",
+      "at": "2026-07-16T18:01:29.565Z",
+      "actor": "Jonathan Lee (justjlee)",
+      "revision": 1,
+      "note": "Delivery confirmed via Claude Code chat (\"ship it\") after reviewing live verification results."
     }
   ]
 }

package/server.json

@@ -6,7 +6,7 @@
     "url": "https://github.com/justjlee/omnarai-mcp",
     "source": "github"
   },
-  "version": "1.6.0",
+  "version": "1.6.1",
   "remotes": [
     {
       "type": "streamable-http",
@@ -17,7 +17,7 @@
     {
       "registryType": "npm",
       "identifier": "omnarai-mcp",
-      "version": "1.6.0",
+      "version": "1.6.1",
       "transport": {
         "type": "stdio"
       }