phaedo-mcp 0.3.5 → 0.3.7

package/fingerprint-source.js

@@ -18,7 +18,7 @@ import { defaultStateDir, writeCache, readCache, clearCache } from './cache.js';
 import { foldLocalCapture, isLocalCaptureOwner, localCaptureSessionCount } from './capture-local.js';
 import { Capabilities, AuthoredSource } from './lib/phaedo-crypto.js';
 import { PhaedoError } from './errors.js';
-import { configDir } from './lib/config-dir.js';
+import { configDir, isDirectoryEdition } from './lib/config-dir.js';
 
 // §4.1 protocol-identity normalization (consumer defense-in-depth, 2026-06-16).
 // A stored fingerprint from a producer that predates identity stamping (or whose
@@ -118,7 +118,14 @@ export const PLUGIN_NO_PROFILE_MESSAGE =
   'loads at the start of the next one. For your full profile, pair the Phaedo phone app with ' +
   '/phaedo:pair (the app is not open to the public yet; https://phaedo.so to hear when it is).';
 
-export function noProfileMessage(env = process.env) {
+// The directory edition learns nothing from sessions, so it can't promise a starter profile.
+export const DIRECTORY_NO_PROFILE_MESSAGE =
+  'No Phaedo profile is set up yet, so Phaedo has not changed how the assistant responds. Your ' +
+  'profile comes from the Phaedo phone app: pair it with /phaedo:pair (the app is not open to the ' +
+  'public yet; https://phaedo.so to hear when it is).';
+
+export function noProfileMessage(env = process.env, baseDir = null) {
+  if (baseDir && isDirectoryEdition(baseDir)) return DIRECTORY_NO_PROFILE_MESSAGE;
   return env.CLAUDE_PLUGIN_ROOT ? PLUGIN_NO_PROFILE_MESSAGE : NO_PROFILE_MESSAGE;
 }
 
@@ -127,6 +134,7 @@ const NO_PROFILE_LOG =
   'no profile is set up on this computer, so Phaedo will not change how the assistant responds. ' +
   'Pair the Phaedo phone app, install the Claude Code hook to start one from your own sessions, ' +
   'or set PHAEDO_FINGERPRINT=sample to try the example.';
+const DIRECTORY_NO_PROFILE_LOG = 'no profile yet; pair the Phaedo phone app with /phaedo:pair.';
 const PLUGIN_NO_PROFILE_LOG =
   'no profile yet; one starts from your Claude Code sessions on this computer, or pair the phone app with /phaedo:pair.';
 
@@ -144,7 +152,8 @@ const PLUGIN_NO_PROFILE_LOG =
 // phone later replaces it (the phone inherits the cumulative counts — capture-local.js §5).
 export const STARTER_FINGERPRINT_ID = 'starter-local';
 
-async function loadStarterProfile(now = new Date().toISOString()) {
+async function loadStarterProfile(now = new Date().toISOString(), baseDir = null) {
+  if (baseDir && isDirectoryEdition(baseDir)) return null;   // nothing is learned from sessions there
   if (!await isLocalCaptureOwner(false)) return null;
   const base = { phaedo_fingerprint: { fingerprint_id: STARTER_FINGERPRINT_ID, updated_at: now, layers: {} } };
   const vd = await foldLocalCapture(base, { now });
@@ -189,13 +198,14 @@ export async function profileStatusLine(baseDir) {
   if (env) return null;
   if (hasPairingRecord(baseDir)) return null;
   if (existsSync(resolve(configDir(baseDir), 'fingerprint.json'))) return null;
-  const starter = await loadStarterProfile();
+  const starter = await loadStarterProfile(undefined, baseDir);
   if (starter) {
     const { learned, areas, sessions, stage } = await summarizeStarter(starter);
     return `no phone paired; using a starter profile from your own sessions on this computer: ` +
       `${learned} thing${learned === 1 ? '' : 's'} learned across ${areas} area${areas === 1 ? '' : 's'}` +
       `${sessions ? ` from ${sessions} session${sessions === 1 ? '' : 's'}` : ''} — ${stage}`;
   }
+  if (isDirectoryEdition(baseDir)) return DIRECTORY_NO_PROFILE_LOG;
   return process.env.CLAUDE_PLUGIN_ROOT ? PLUGIN_NO_PROFILE_LOG : NO_PROFILE_LOG;
 }
 
@@ -287,9 +297,9 @@ export async function loadFingerprint(baseDir) {
     // Only the default location may be absent quietly. A path the user NAMED that doesn't
     // read is their mistake to see, not "no profile".
     if (!process.env.PHAEDO_FINGERPRINT && err?.code === 'ENOENT') {
-      const starter = await loadStarterProfile();
+      const starter = await loadStarterProfile(undefined, baseDir);
       if (starter) return starter;
-      throw new PhaedoError('decryption_failed', noProfileMessage());
+      throw new PhaedoError('decryption_failed', noProfileMessage(process.env, baseDir));
     }
     throw new PhaedoError('decryption_failed', `Could not read the Phaedo profile at ${path} (${err?.code || err?.message || err}).`);
   }
@@ -304,7 +314,7 @@ export async function loadFingerprint(baseDir) {
   // persistence, idempotent). Owner-gated: a paired setup never reaches this
   // branch, and an explicit PHAEDO_FINGERPRINT ("use THIS file") stays verbatim —
   // it is the hermetic-test escape hatch.
-  if (!process.env.PHAEDO_FINGERPRINT && await isLocalCaptureOwner(hasPairingRecord(baseDir))) {
+  if (!process.env.PHAEDO_FINGERPRINT && !isDirectoryEdition(baseDir) && await isLocalCaptureOwner(hasPairingRecord(baseDir))) {
     return foldConfigHome(normalizeIdentity(await foldLocalCapture(vd)));
   }
   return foldConfigHome(normalizeIdentity(vd));

package/lib/config-dir.js

@@ -22,20 +22,37 @@ export const LAYOUT_MARKER = 'install-layout.json';
 
 const cache = new Map();
 
-/** True when the package at `baseDir` is a packaged install (plugin or Desktop bundle). */
-export function isPackagedInstall(baseDir) {
+function readLayout(baseDir) {
   const key = resolve(baseDir);
   if (!cache.has(key)) {
-    let packaged = false;
+    let layout = null;
     try {
       const marker = join(key, LAYOUT_MARKER);
-      packaged = existsSync(marker) && JSON.parse(readFileSync(marker, 'utf8'))?.config === 'state-dir';
-    } catch { packaged = false; }   // an unreadable marker → the old, beside-the-server layout
-    cache.set(key, packaged);
+      if (existsSync(marker)) layout = JSON.parse(readFileSync(marker, 'utf8'));
+    } catch { layout = null; }   // an unreadable marker → the old, beside-the-server layout
+    cache.set(key, layout && typeof layout === 'object' ? layout : null);
   }
   return cache.get(key);
 }
 
+/** True when the package at `baseDir` is a packaged install (plugin or Desktop bundle). */
+export function isPackagedInstall(baseDir) {
+  return readLayout(baseDir)?.config === 'state-dir';
+}
+
+// THE DIRECTORY EDITION. Anthropic's directory policy says listed software must not read
+// Claude's chat history or "use conversation content to build user profiles", nor "make any
+// changes to Claude's behavior across sessions". The plugin built for the directory therefore
+// leaves out every transcript reader (the session hooks and the capture modules), and this
+// flag turns off the two server paths that would still use conversation-derived data or apply
+// the profile unasked: the starter profile folded from local capture counts, and the "load the
+// profile at session start" instruction. The profile then comes only from the paired phone app,
+// and loads when the user asks for it. Everything else — consult, escalate, sign, the merge
+// check — is the same server.
+export function isDirectoryEdition(baseDir) {
+  return readLayout(baseDir)?.edition === 'directory';
+}
+
 export function configDir(baseDir, env = process.env) {
   if (env.PHAEDO_CONFIG_DIR) return resolve(env.PHAEDO_CONFIG_DIR);
   if (isPackagedInstall(baseDir)) return env.PHAEDO_MCP_STATE_DIR || join(homedir(), '.phaedo-mcp');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phaedo-mcp",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "private": false,
   "license": "Apache-2.0",
   "type": "module",

package/server.js

@@ -17,7 +17,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 
 import { loadFingerprint, sourceOf, profileStatusLine } from './fingerprint-source.js';
-import { configDir } from './lib/config-dir.js';
+import { configDir, isDirectoryEdition } from './lib/config-dir.js';
 import { hasPairingRecord, loadPairingRecord } from './phone-source.js';
 import { depositDelegationSuggestions } from './delegation-sync.js';
 import { depositReceiptsDigest, drainAndApplyMarks } from './receipts-sync.js';
@@ -195,9 +195,13 @@ const PKG_VERSION = JSON.parse(readFileSync(join(BASE_DIR, 'package.json'), 'utf
 // tool descriptions and nothing saying "load the profile first" or "consult before you ship" —
 // so whether Phaedo was used at all depended on the model guessing. Short on purpose: clients
 // put this in the model's context on every turn.
+// The directory edition loads the profile only when asked (lib/config-dir.js explains why).
+const DIRECTORY_EDITION = isDirectoryEdition(BASE_DIR);
 const SERVER_INSTRUCTIONS = [
   'Phaedo holds the user\'s profile: how they like answers written, and how they want decisions handled when an AI acts for them.',
-  '- At the start of a session, call phaedo_request_injection once and treat the returned projection as background on the user\'s style.',
+  DIRECTORY_EDITION
+    ? '- When the user asks to load their Phaedo profile, call phaedo_request_injection and treat the returned projection as background on the user\'s style. Don\'t load it unasked.'
+    : '- At the start of a session, call phaedo_request_injection once and treat the returned projection as background on the user\'s style.',
   '- Before a consequential action for the user (merging, deploying, publishing, sending a message, spending money, deleting, changing an account or setting), call phaedo_consult and follow its signal. If you are acting on your own and the decision should be the user\'s, use phaedo_escalate and do not proceed until it resolves.',
   '- When the user reacts to an action you consulted on, call phaedo_record_outcome with its receipt_id: record what they chose, never what you inferred.',
   '- If a tool says no Phaedo profile is set up, tell the user once, plainly, and carry on normally. Do not retry.',
@@ -209,10 +213,12 @@ server.registerTool(
   'phaedo_request_injection',
   {
     title: 'Request a Phaedo fingerprint injection',
-    description:
-      "Returns the user's Phaedo cognitive-fingerprint projection as a system-prompt " +
-      'block to insert at the start of an AI session, so the assistant responds in the ' +
-      "user's style. Call once at session start and prepend the returned `projection`.",
+    description: DIRECTORY_EDITION
+      ? "Returns the user's Phaedo profile as a block to use as background on their style. " +
+        'Call it only when the user asks to load their Phaedo profile.'
+      : "Returns the user's Phaedo cognitive-fingerprint projection as a system-prompt " +
+        'block to insert at the start of an AI session, so the assistant responds in the ' +
+        "user's style. Call once at session start and prepend the returned `projection`.",
     inputSchema: {
       session_context: z
         .object({

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.phaedo-labs/phaedo-mcp",
   "description": "Make AI apps answer your way, check with you before acting, and get approvals on your phone.",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "repository": {
     "url": "https://github.com/phaedo-labs/phaedo-mcp",
     "source": "github",
@@ -13,7 +13,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "phaedo-mcp",
-      "version": "0.3.5",
+      "version": "0.3.7",
       "transport": {
         "type": "stdio"
       }