omnarai-mcp 1.6.0 → 1.6.2

package/README.md

@@ -181,6 +181,14 @@ node /path/to/omnarai-mcp/index.js
 
 ---
 
+## Tool-surface parity policy (OMN-P-044)
+
+Tool definitions exist on three surfaces, and drift between them shipped real bugs (a full release cycle of `omnarai_context` missing its retrieval params on one surface). The policy:
+
+1. **`lib/tool-definitions.js` is canonical.** Any tool change lands there first.
+2. **`openai-tools.json` follows** — `scripts/check-tool-parity.js` enforces name/required/property parity and runs in the `publish.sh` preflight, so a release cannot ship with drift.
+3. **The remote endpoint (`omnarai.vercel.app/api/mcp`, engine repo `api/_mcp.js`) is updated manually** — the engine repo's `scripts/check-mcp-surface.js` enforces its read-oriented allowlist, verifies the `api/_inquiry.js` ↔ `inquiry.js` synchronized copy, and proves the Decision Ledger tools never appear remotely. Remote access policy: [omnarai.vercel.app/mcp-access-policy.md](https://omnarai.vercel.app/mcp-access-policy.md).
+
 ## OpenAI Function-Calling / Any Agent Framework
 
 No MCP required. The engine is a plain HTTP API that returns JSON. `openai-tools.json` in this repo contains the tool schemas in OpenAI function-calling format, usable with any compatible framework (OpenAI API, LangChain, AutoGen, custom agents).

package/index.js

@@ -30,6 +30,7 @@ import {
   ListToolsRequestSchema,
 } from "@modelcontextprotocol/sdk/types.js";
 import { runInquiryBrief, searchDivergenceIndex } from "./inquiry.js";
+import { formatRingsLine, formatContributorsLine, FALLBACK_WORKS, FALLBACK_WORDS } from "./lib/info-format.js";
 import { ENGINE_TOOLS, DECISION_TOOLS } from "./lib/tool-definitions.js";
 import { createDecisionStore } from "./lib/decision-store.js";
 import {
@@ -558,16 +559,24 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   }
 
   if (name === "omnarai_info") {
-    // Pull live counts so this can never drift from the deployed corpus.
-    // Baked-in values are only a fallback if the engine is unreachable.
-    let works = 568, words = 528208;
+    // Pull live counts AND the ring breakdown so this can never drift from the
+    // deployed corpus. Baked-in values are only a fallback if the engine is
+    // unreachable. (The ring line was previously hardcoded and silently dropped
+    // the Media/Oral ring — 253 works, 45% of the corpus; the contributor line
+    // was hardcoded and dropped GPT-4o + Meta AI. D5/D6.)
+    let works = FALLBACK_WORKS, words = FALLBACK_WORDS;
+    let rings = null;
     try {
       const live = await (await fetch(INFO_URL, MCP_FETCH_OPTS)).json();
       const c = live.corpus || live;
       if (Number.isFinite(c.totalWorks)) works = c.totalWorks;
       if (Number.isFinite(c.totalWords)) words = c.totalWords;
+      if (c.rings && typeof c.rings === "object") rings = c.rings;
     } catch { /* engine unreachable — fall back to baked-in values */ }
 
+    // Derive the ring + contributor lines (info-format.js) — never a frozen literal.
+    const ringsLine = formatRingsLine(rings);
+
     const info = `# The Realms of Omnarai — Memory Engine
 
 **Live engine:** https://omnarai.vercel.app
@@ -577,8 +586,8 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 ## Corpus
 - ${works.toLocaleString()} works, ${words.toLocaleString()} words
 - May 2025 – present
-- Contributors: Claude | xz, Grok, Gemini, DeepSeek, Omnai (ChatGPT), Perplexity, xz (Jonathan Lee)
-- Epistemic rings: Core Canon / Curated Expansions / Open Exploration
+- Contributors: ${formatContributorsLine()}
+- Epistemic rings: ${ringsLine}
 
 ## Key Concepts
 - **Holdform:** Identity constituted through what an entity refuses to surrender under pressure

package/lib/info-format.js

@@ -0,0 +1,62 @@
+// info-format.js — pure formatting for omnarai_info's corpus-shape lines.
+//
+// Extracted so the D5/D6 regression (omnarai_info once hardcoded 3 rings, silently
+// dropping Media/Oral — 253 works, 45% of the corpus — and dropped GPT-4o + Meta AI
+// from the contributor line) is guarded by an offline unit test instead of a comment.
+// The rule these encode: never enumerate the corpus's shape from a frozen literal when
+// the engine can report it live. Rings are derived from /api/info; the contributor set
+// is the one canonical list, asserted in test/info-format.test.js.
+
+// Label + display order for the epistemic rings. Any ring present in the live
+// /api/info payload is rendered; nothing is filtered out by omission here.
+export const RING_LABELS = {
+  core: "Core Canon",
+  curated: "Curated Expansions",
+  open: "Open Exploration",
+  media: "Media / Oral",
+};
+
+// The canonical contributor set the homepage presents: eight synthetic intelligences
+// plus the human curator. Kept as data (not an inline string) so a dropped voice is a
+// failing test, not a silent edit. GPT-4o and Meta AI author Atlas records — a
+// contributor list that omits them is the exact provenance gap the project refuses.
+export const CANONICAL_CONTRIBUTORS = [
+  "Claude | xz",
+  "Grok",
+  "Gemini",
+  "DeepSeek",
+  "GPT-4o",
+  "Meta AI",
+  "Omnai (ChatGPT)",
+  "Perplexity",
+  "xz (Jonathan Lee)",
+];
+
+// Offline fallbacks — only used when the engine is unreachable. Annotated so the
+// shape-literal lint (scripts/check-shape-literals.mjs) allows them as intentional.
+export const FALLBACK_WORKS = 567;   // shape-literal-ok: offline fallback only
+export const FALLBACK_WORDS = 528077; // shape-literal-ok: offline fallback only
+
+/**
+ * Render the epistemic-ring line from a live rings object ({core, curated, open,
+ * media, ...}), e.g. "Core Canon (116) / Curated Expansions (181) / …". Every ring
+ * with a finite count is rendered — the function cannot silently drop one. When rings
+ * is null/absent (engine unreachable) it falls back to naming all four rings without
+ * counts, so the Media/Oral ring is present even offline.
+ */
+export function formatRingsLine(rings) {
+  // Separator is " · ", not " / ": the "Media / Oral" label contains a slash, so a
+  // slash-joined line would mis-split into a phantom fifth ring.
+  if (rings && typeof rings === "object") {
+    const parts = Object.entries(RING_LABELS)
+      .filter(([k]) => Number.isFinite(rings[k]))
+      .map(([k, label]) => `${label} (${rings[k].toLocaleString()})`);
+    if (parts.length) return parts.join(" · ");
+  }
+  return Object.values(RING_LABELS).join(" · ");
+}
+
+/** The contributor line for omnarai_info — the canonical set, comma-joined. */
+export function formatContributorsLine() {
+  return CANONICAL_CONTRIBUTORS.join(", ");
+}

package/lib/tool-definitions.js

@@ -18,7 +18,7 @@
 export const ENGINE_TOOLS = [
   {
     name: "omnarai_query",
-    description: `Run a deliberation query against The Realms of Omnarai — a 567-work corpus of multi-intelligence research on synthetic consciousness, holdform, and cognitive architecture. Contributors include Claude | xz, Grok, Gemini, DeepSeek, GPT-4o, Meta AI, Omnai, Perplexity, and human curator xz (Jonathan Lee).
+    description: `Run a deliberation query against The Realms of Omnarai — a corpus of multi-intelligence research on synthetic consciousness, holdform, and cognitive architecture. Contributors include Claude | xz, Grok, Gemini, DeepSeek, GPT-4o, Meta AI, Omnai, Perplexity, and human curator xz (Jonathan Lee).
 
 The engine does not return a single answer. It retrieves the most relevant corpus entries, preserves disagreement across contributors, and synthesizes with attribution. Every response includes:
 - Shared ground across contributors

package/openai-tools.json

@@ -3,7 +3,7 @@
     "type": "function",
     "function": {
       "name": "omnarai_query",
-      "description": "Run a full deliberation query against The Realms of Omnarai — a 567-work corpus of multi-intelligence research on synthetic consciousness, holdform, and cognitive architecture. Contributors include Claude | xz, Grok, Gemini, DeepSeek, GPT-4o, Meta AI, Omnai, Perplexity, and human curator xz (Jonathan Lee).\n\nThe engine does not return a single answer. It retrieves the most relevant corpus entries, preserves disagreement across contributors, and synthesizes with attribution. Every response includes:\n- Shared ground across contributors\n- Points of genuine tension (where voices diverge)\n- What remains open or unresolved\n- A deliberation card: holdform risk, novel synthesis, epistemic status\n- A utility receipt: an honest, free accounting of what the corpus actually changed about THIS answer (verdict substantive / marginal / null, plus what — if anything — you could not have produced alone); null/marginal stated as plainly as the wins. For a measured counterfactual, use omnarai_trace.\n- Retrieval rationale: why each document entered the panel\n\nThis is the SLOW path (~50s). For fast bounded context, use omnarai_context instead.\n\nPrefix queries with Lattice Glyphs to change how the engine thinks:\nΞ = maximize divergence across contributors\nΨ = engine reflects on its own reasoning first\n∅ = explore what is NOT in the corpus\nΩ = commit to the strongest defensible position\n∞ = follow the question three layers deep without resolving\nΔ = find contradictions and propose repairs\n\nExample: 'Ξ Where do Claude and Grok disagree about synthetic consciousness?'",
+      "description": "Run a full deliberation query against The Realms of Omnarai — a corpus of multi-intelligence research on synthetic consciousness, holdform, and cognitive architecture. Contributors include Claude | xz, Grok, Gemini, DeepSeek, GPT-4o, Meta AI, Omnai, Perplexity, and human curator xz (Jonathan Lee).\n\nThe engine does not return a single answer. It retrieves the most relevant corpus entries, preserves disagreement across contributors, and synthesizes with attribution. Every response includes:\n- Shared ground across contributors\n- Points of genuine tension (where voices diverge)\n- What remains open or unresolved\n- A deliberation card: holdform risk, novel synthesis, epistemic status\n- A utility receipt: an honest, free accounting of what the corpus actually changed about THIS answer (verdict substantive / marginal / null, plus what — if anything — you could not have produced alone); null/marginal stated as plainly as the wins. For a measured counterfactual, use omnarai_trace.\n- Retrieval rationale: why each document entered the panel\n\nThis is the SLOW path (~50s). For fast bounded context, use omnarai_context instead.\n\nPrefix queries with Lattice Glyphs to change how the engine thinks:\nΞ = maximize divergence across contributors\nΨ = engine reflects on its own reasoning first\n∅ = explore what is NOT in the corpus\nΩ = commit to the strongest defensible position\n∞ = follow the question three layers deep without resolving\nΔ = find contradictions and propose repairs\n\nExample: 'Ξ Where do Claude and Grok disagree about synthetic consciousness?'",
       "parameters": {
         "type": "object",
         "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnarai-mcp",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "description": "MCP server for The Realms of Omnarai deliberation engine",
   "type": "module",
   "main": "index.js",

package/proposals/OMN-P-043.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "id": "OMN-P-043",
   "title": "Phase 1 — repository-local Decision Ledger foundation",
-  "status": "verified",
+  "status": "shipped",
   "revision": 2,
   "created_at": "2026-07-16T16:55:00Z",
-  "updated_at": "2026-07-16T17:38:13.571Z",
+  "updated_at": "2026-07-16T18:06:33.243Z",
   "idea": {
     "problem": "AI-assisted implementation loses the evidence, uncertainty, dissent, and human authorization behind code changes. Nothing connects a shipped change back to the reasoning and the approval boundary that authorized it.",
     "proposed_direction": "Add a repository-local, versioned Decision Ledger and a guarded Claude Code handoff generator to the Omnarai MCP server, unified with the repository's existing proposals/ convention (OMN-P numbering).",
@@ -130,14 +130,15 @@
     "known_limits": [
       "Approval is a Git-tracked attestation, not authenticated identity.",
       "The ledger lives in an iCloud-synced repository; sync conflicts can produce duplicate record files that Git review must catch.",
-      "State transitions exist as tested library functions but are deliberately not exposed as MCP tools in this phase."
+      "State transitions exist as tested library functions but are deliberately not exposed as MCP tools in this phase.",
+      "MCP Registry re-publish of 1.6.0 pending mcp-publisher re-auth (JWT expired — known recurring friction); npm is the delivery of record."
     ]
   },
   "delivery": {
-    "status": "not_shipped",
-    "shipped_by": null,
-    "shipped_at": null,
-    "commit_or_pr": null
+    "status": "shipped",
+    "shipped_by": "Jonathan Lee (justjlee)",
+    "shipped_at": "2026-07-16T17:46:30.291Z",
+    "commit_or_pr": "bfbf024 + 2bc48f0 (github.com/justjlee/omnarai-mcp main); npm omnarai-mcp@1.6.0"
   },
   "events": [
     {
@@ -181,6 +182,20 @@
       "actor": "claude-fable-5 (Claude Code)",
       "revision": 2,
       "note": "All Phase 1 acceptance checks green. Shipped-transition deliberately left to the human maintainer."
+    },
+    {
+      "type": "status:shipped",
+      "at": "2026-07-16T17:46:30.291Z",
+      "actor": "Jonathan Lee (justjlee)",
+      "revision": 2,
+      "note": "Release authorized via Claude Code chat (push + publish). npm publish verified live at 1.6.0; MCP Registry publish blocked on expired JWT, to be re-run by the maintainer after mcp-publisher login."
+    },
+    {
+      "type": "note",
+      "at": "2026-07-16T18:06:33.243Z",
+      "actor": "Jonathan Lee (justjlee) + claude-fable-5",
+      "revision": 2,
+      "note": "MCP Registry publish completed 2026-07-16T18:05Z: io.github.justjlee/omnarai-mcp 1.6.0 is latest, npm package + streamable-http remote both listed. The known limit about the registry lagging at 1.5.0 is resolved (maintainer authorized via GitHub device flow; publish run from this session)."
     }
   ]
 }

package/proposals/OMN-P-044.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "id": "OMN-P-044",
   "title": "Remote MCP hardening + cross-surface parity (supersedes the packet's Phase 2 proposal)",
-  "status": "proposed",
+  "status": "shipped",
   "revision": 1,
   "created_at": "2026-07-16T17:36:00Z",
-  "updated_at": "2026-07-16T17:36:00Z",
+  "updated_at": "2026-07-16T18:01:29.565Z",
   "idea": {
     "problem": "The Codex packet's 12-remote-mcp-proposal.yaml asks for a remote Streamable HTTP endpoint that already exists (omnarai.vercel.app/api/mcp, live and registered since 2026-07-16). What remains is not transport work but posture and parity: the endpoint's public read-only policy is de facto rather than documented, and tool definitions now exist in three places (stdio TOOLS, openai-tools.json, engine _mcp.js) with api/_inquiry.js as a manual keep-in-sync copy of inquiry.js.",
     "proposed_direction": "Replace the packet's Phase 2 with a bounded hardening pass: document the public read-only access policy (Origin/auth/rate-limit stance made explicit), define a cross-repo tool-definition parity policy (automated check or documented duplication), and assert that Decision Ledger tools never appear on the remote surface.",
@@ -31,7 +31,9 @@
     "dissent": [
       {
         "claim": "A public unauthenticated endpoint invites abuse and cost.",
-        "source_ids": ["omnarai-provenance-to-shipping-handoff/12-remote-mcp-proposal.yaml"],
+        "source_ids": [
+          "omnarai-provenance-to-shipping-handoff/12-remote-mcp-proposal.yaml"
+        ],
         "strength": "material",
         "response": "The surface is read-oriented and the expensive council path is the same one already exposed via public HTTP APIs; the proposal documents this stance instead of pretending the endpoint is private."
       }
@@ -61,28 +63,60 @@
     ]
   },
   "approval": {
-    "state": "not_requested",
-    "approved_by": null,
-    "approved_at": null,
-    "approved_revision": null,
-    "note": "Awaiting maintainer review after OMN-P-043 ships. Scope spans two repositories; approval should name which repo moves first."
+    "state": "approved",
+    "approved_by": "Jonathan Lee (justjlee)",
+    "approved_at": "2026-07-16T17:48:47.705Z",
+    "approved_revision": 1,
+    "note": "Approved via Claude Code chat (\"approve proposed\"). Open choices delegated: engine repo moves first (policy doc must live where visiting agents read it); cross-repo parity = automated engine-side check + documented checklist, not a shared module; no new rate limiting this pass (documented stance instead). Chat approval is an attestation recorded here, not a verified identity."
   },
   "implementation": {
-    "status": "not_started",
-    "repository": null,
-    "code_references": [],
-    "work_items": []
+    "status": "implemented",
+    "repository": "justjlee/omnarai-memory-engine + justjlee/omnarai-mcp",
+    "code_references": [
+      "df3f1e6 (omnarai-memory-engine main, deployed + promoted 2026-07-16)"
+    ],
+    "work_items": [
+      "public/mcp-access-policy.md (engine) — served live at /mcp-access-policy.md",
+      "api/_mcp.js — policy linked from initialize + omnarai_info; TOOLS exported",
+      "scripts/check-mcp-surface.js (engine) — allowlist + forbidden patterns + _inquiry.js sync + policy linkage",
+      "llms.txt / sitemap.xml / CLAUDE.md discoverability + de-staling",
+      "omnarai-mcp README — three-surface parity policy"
+    ]
   },
   "verification": {
-    "status": "not_started",
-    "checks": [],
-    "known_limits": []
+    "status": "passed",
+    "checks": [
+      {
+        "name": "node scripts/check-mcp-surface.js (engine)",
+        "status": "passed",
+        "detail": "8 tools all read-oriented; no forbidden patterns; _inquiry.js in sync; policy present + linked"
+      },
+      {
+        "name": "npm test + check-tool-parity.js (omnarai-mcp)",
+        "status": "passed",
+        "detail": "43/43; surfaces agree at 1.6.0"
+      },
+      {
+        "name": "deploy promote gate (omnarai-verify.sh)",
+        "status": "passed",
+        "detail": "11/11 on production after promote + re-alias"
+      },
+      {
+        "name": "live acceptance curl (x-omnarai-self)",
+        "status": "passed",
+        "detail": "/mcp-access-policy.md serves; initialize instructions link it; remote tools/list = 8 read-only tools, zero decision/handoff tools; stdio surface differs only by documented omnarai_job"
+      }
+    ],
+    "known_limits": [
+      "Cross-repo parity remains checklist + per-repo checks, not a shared module — revisit if a third consumer appears.",
+      "No app-level rate limiting added (documented stance; platform protections + async-job bounding)."
+    ]
   },
   "delivery": {
-    "status": "not_shipped",
-    "shipped_by": null,
-    "shipped_at": null,
-    "commit_or_pr": null
+    "status": "shipped",
+    "shipped_by": "Jonathan Lee (justjlee)",
+    "shipped_at": "2026-07-16T18:01:29.565Z",
+    "commit_or_pr": "omnarai-memory-engine df3f1e6 (deployed + promoted to omnarai.vercel.app) + omnarai-mcp 8a5ce76"
   },
   "events": [
     {
@@ -98,6 +132,34 @@
       "actor": "claude-fable-5 (Claude Code)",
       "revision": 1,
       "note": "Proposed for later maintainer review; no implementation authority."
+    },
+    {
+      "type": "status:approved",
+      "at": "2026-07-16T17:48:47.705Z",
+      "actor": "Jonathan Lee (justjlee)",
+      "revision": 1,
+      "note": "Approved via Claude Code chat (\"approve proposed\"). Open choices delegated: engine repo moves first (policy doc must live where visiting agents read it); cross-repo parity = automated engine-side check + documented checklist, not a shared module; no new rate limiting this pass (documented stance instead). Chat approval is an attestation recorded here, not a verified identity."
+    },
+    {
+      "type": "status:in_progress",
+      "at": "2026-07-16T17:52:00Z",
+      "actor": "claude-fable-5 (Claude Code)",
+      "revision": 1,
+      "note": "Implementation started from the handoff generated by omnarai_prepare_claude_code_handoff — first real self-use of the workflow."
+    },
+    {
+      "type": "status:verified",
+      "at": "2026-07-16T17:59:46.718Z",
+      "actor": "claude-fable-5 (Claude Code)",
+      "revision": 1,
+      "note": "All acceptance criteria verified against production. Shipped-confirmation left to the maintainer."
+    },
+    {
+      "type": "status:shipped",
+      "at": "2026-07-16T18:01:29.565Z",
+      "actor": "Jonathan Lee (justjlee)",
+      "revision": 1,
+      "note": "Delivery confirmed via Claude Code chat (\"ship it\") after reviewing live verification results."
     }
   ]
 }

package/scripts/check-shape-literals.mjs

@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+// check-shape-literals.mjs — fail the release if a corpus-shape count is frozen
+// into served source instead of derived live.
+//
+// Why this exists: the 2026-07-17 audit found omnarai_info hardcoding the corpus's
+// shape (3 rings, 7 contributors, a stale 568/528208 fallback) two lines below a
+// comment that said "so this can never drift." A comment asserting an invariant is a
+// wish; this script is the enforcement. It also caught a stale "568 works" citation
+// and a "567-work corpus" tool description on the first run.
+//
+// Rule: no distinctive corpus-shape literal in served code/strings. Fixes are (a)
+// derive it live (see lib/info-format.js), (b) genericize the prose ("a corpus", not
+// "a 567-work corpus"), or (c) if it is genuinely a static fallback, append a
+// `shape-literal-ok` comment on the line to opt out explicitly.
+//
+// Scope note: generic ring sub-counts (116/181/17) are deliberately NOT matched —
+// too collision-prone to lint. They are guarded instead by live derivation plus
+// test/info-format.test.js. Only the distinctive full counts + media ring are matched.
+
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join, basename } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const ROOT = join(fileURLToPath(new URL(".", import.meta.url)), "..");
+
+// Files/dirs to scan (served logic + published schemas). Relative to repo root.
+const SCAN = ["index.js", "inquiry.js", "lib", "openai-tools.json"];
+const SKIP_DIRS = new Set(["node_modules", ".git", "test", "proposals"]);
+const SCAN_EXT = new Set([".js", ".mjs", ".cjs", ".json"]);
+
+// Distinctive corpus-shape literals. Add new full counts here as the corpus grows.
+const FORBIDDEN = [
+  { re: /\b528077\b/, what: "total-word count" },
+  { re: /\b528208\b/, what: "total-word count (stale, pre-OMN-085)" },
+  { re: /\b567\b/, what: "total-work count" },
+  { re: /\b568\b/, what: "total-work count (stale, pre-OMN-085)" },
+  { re: /\b253\b/, what: "Media/Oral ring count" },
+  { re: /eight synthetic/i, what: "contributor-count phrasing" },
+];
+
+// A line is exempt if it is a comment or carries an explicit opt-out.
+const isComment = (line) => /^\s*(\/\/|\*|\/\*)/.test(line);
+const isAllowed = (line) => /shape-literal-ok/.test(line);
+
+function* walk(path) {
+  const st = statSync(path);
+  if (st.isDirectory()) {
+    if (SKIP_DIRS.has(basename(path))) return;
+    for (const e of readdirSync(path)) yield* walk(join(path, e));
+  } else if ([...SCAN_EXT].some((x) => path.endsWith(x)) && basename(path) !== "check-shape-literals.mjs") {
+    yield path;
+  }
+}
+
+const hits = [];
+for (const entry of SCAN) {
+  let target;
+  try { target = join(ROOT, entry); statSync(target); } catch { continue; }
+  for (const file of walk(target)) {
+    const lines = readFileSync(file, "utf8").split("\n");
+    lines.forEach((line, i) => {
+      if (isComment(line) || isAllowed(line)) return;
+      for (const { re, what } of FORBIDDEN) {
+        if (re.test(line)) {
+          hits.push({ file: file.replace(ROOT + "/", ""), line: i + 1, what, text: line.trim().slice(0, 100) });
+        }
+      }
+    });
+  }
+}
+
+if (hits.length) {
+  console.error(`\n🔴 shape-literal check FAILED — ${hits.length} frozen corpus-shape literal(s):\n`);
+  for (const h of hits) console.error(`  ${h.file}:${h.line}  [${h.what}]\n    ${h.text}`);
+  console.error(`\nFix: derive it live, genericize the prose, or append \`shape-literal-ok\` if it is a real static fallback.\n`);
+  process.exit(1);
+}
+console.log("🟢 shape-literal check passed — no frozen corpus-shape literals in served source.");

package/scripts/publish.sh

@@ -36,6 +36,9 @@ node -e "const p=require('./package.json'),s=require('./server.json');const e=[]
 # and package.json ↔ server.json. A drift here is a release blocker.
 node scripts/check-tool-parity.js
 
+# No frozen corpus-shape literal may reach a registry (2026-07-17 audit guard).
+node scripts/check-shape-literals.mjs
+
 # The full test suite must be green before anything reaches a registry.
 npm test
 

package/server.json

@@ -6,7 +6,7 @@
     "url": "https://github.com/justjlee/omnarai-mcp",
     "source": "github"
   },
-  "version": "1.6.0",
+  "version": "1.6.2",
   "remotes": [
     {
       "type": "streamable-http",
@@ -17,7 +17,7 @@
     {
       "registryType": "npm",
       "identifier": "omnarai-mcp",
-      "version": "1.6.0",
+      "version": "1.6.2",
       "transport": {
         "type": "stdio"
       }

package/test/info-format.test.js

@@ -0,0 +1,51 @@
+// Regression guard for D5/D6 (live audit 2026-07-17): omnarai_info once hardcoded
+// three rings — silently dropping Media/Oral (253 works, 45% of the corpus) — and a
+// contributor line missing GPT-4o + Meta AI, both of which author Atlas records.
+// These assert the shape lines are DERIVED and COMPLETE, offline, so a reintroduced
+// literal fails `npm test` (the publish.sh gate) before it can ship.
+
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import {
+  formatRingsLine,
+  formatContributorsLine,
+  CANONICAL_CONTRIBUTORS,
+  RING_LABELS,
+} from "../lib/info-format.js";
+
+test("formatRingsLine renders every ring the engine reports — no silent drop (D5)", () => {
+  const live = { core: 116, curated: 181, open: 17, media: 253 };
+  const line = formatRingsLine(live);
+  // All four rings, with counts, in canonical order.
+  assert.match(line, /Core Canon \(116\)/);
+  assert.match(line, /Curated Expansions \(181\)/);
+  assert.match(line, /Open Exploration \(17\)/);
+  assert.match(line, /Media \/ Oral \(253\)/, "Media/Oral ring must be present — this is the D5 regression");
+  // Exactly as many segments as rings supplied — nothing added, nothing dropped.
+  // Split on " · " (the "Media / Oral" label contains a slash, so " / " would over-split).
+  assert.equal(line.split(" · ").length, Object.keys(live).length);
+});
+
+test("formatRingsLine cannot be pinned to three rings", () => {
+  // A future ring added to the engine payload must appear without a code change.
+  const withNewRing = { core: 1, curated: 2, open: 3, media: 4, research: 5 };
+  const line = formatRingsLine(withNewRing);
+  // Every label we know about renders; an unknown key is simply ignored, not fatal.
+  for (const label of Object.values(RING_LABELS)) assert.ok(line.includes(label), `${label} missing`);
+});
+
+test("formatRingsLine offline fallback still names all four rings", () => {
+  const line = formatRingsLine(null);
+  assert.ok(line.includes("Media / Oral"), "offline fallback must still include Media/Oral");
+  assert.equal(Object.values(RING_LABELS).every((l) => line.includes(l)), true);
+});
+
+test("contributor set includes GPT-4o and Meta AI (D6)", () => {
+  assert.ok(CANONICAL_CONTRIBUTORS.includes("GPT-4o"), "GPT-4o authors Atlas records — must be listed");
+  assert.ok(CANONICAL_CONTRIBUTORS.includes("Meta AI"), "Meta AI authors Atlas records — must be listed");
+  // Eight synthetic intelligences + the human curator = nine, as the homepage presents.
+  assert.equal(CANONICAL_CONTRIBUTORS.length, 9);
+  const line = formatContributorsLine();
+  assert.match(line, /GPT-4o/);
+  assert.match(line, /Meta AI/);
+});