pipebrain-mcp 0.32.0 → 0.33.0

package/dist/main.js

@@ -356,9 +356,52 @@ var require_main = __commonJS({
   }
 });
 
+// ../../libs/agent-shared/dist/agent-config.js
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+// ../../libs/agent-shared/dist/agent-config-manifest.js
+var AGENT_CONFIG_DIGEST = "898da8356dac55bd14531dcb5440aa3bd7bbcaa72e873d0fee4a102e3d718ee1";
+
+// ../../libs/agent-shared/dist/agent-config.js
+function agentConfigDir(env = process.env) {
+  const configured = env.CLAUDE_CONFIG_DIR;
+  return configured !== void 0 && configured !== "" ? configured : join(homedir(), ".claude");
+}
+var STAMP_REL = "pipebrain/installed.json";
+function readInstalledStamp(dir) {
+  const file2 = join(dir, STAMP_REL);
+  if (!existsSync(file2))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync(file2, "utf8"));
+    if (typeof parsed !== "object" || parsed === null)
+      return null;
+    const stamp = parsed;
+    return typeof stamp.configDigest === "string" && stamp.configDigest !== "" ? {
+      configDigest: stamp.configDigest,
+      installedBy: typeof stamp.installedBy === "string" ? stamp.installedBy : "unknown",
+      installedAt: typeof stamp.installedAt === "string" ? stamp.installedAt : "unknown"
+    } : null;
+  } catch {
+    return null;
+  }
+}
+function agentConfigStatus(dir, shipped = AGENT_CONFIG_DIGEST) {
+  const stamp = readInstalledStamp(dir);
+  if (stamp === null)
+    return "absent";
+  return stamp.configDigest === shipped ? "current" : "behind";
+}
+var UPDATE_COMMAND = "ppb setup";
+function agentConfigNotice(status) {
+  return status === "behind" ? `This machine's shared agent configuration is not the one this build ships \u2014 run \`${UPDATE_COMMAND}\` to see what would change and update it.` : null;
+}
+
 // ../../libs/agent-shared/dist/asset-transfer.js
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync } from "node:fs";
 import { basename, extname } from "node:path";
 var MIME_BY_EXT = {
   ".png": "image/png",
@@ -381,9 +424,9 @@ function guessContentType(filename) {
   return MIME_BY_EXT[extname(filename).toLowerCase()] ?? "application/octet-stream";
 }
 async function uploadAssetFromPath(client2, apiBaseUrl, input) {
-  if (!existsSync(input.path))
+  if (!existsSync2(input.path))
     throw new Error(`file not found: ${input.path}`);
-  const bytes = readFileSync(input.path);
+  const bytes = readFileSync2(input.path);
   const filename = basename(input.path);
   const contentType = input.contentType ?? guessContentType(filename);
   const sha256 = createHash("sha256").update(bytes).digest("hex");
@@ -15589,6 +15632,22 @@ var orgInstructionSchema = external_exports.object({
   body: external_exports.string().min(1),
   createdBy: uuidSchema.nullable(),
   viaTokenId: uuidSchema.nullable(),
+  /**
+   * sha256 of the shipped default this row was SEEDED from, or null when nothing seeded
+   * it — a row written by a person, a row re-created after its scope was cleared, or a row
+   * that predates seeding.
+   *
+   * It is what lets a settings page say the shipped default has MOVED since this
+   * organization got it, without the product ever applying that move: comparing this digest
+   * against the running release's default for the same scope is the whole signal. It is not
+   * updated by an edit, because what it records is what was seeded — which stays true after
+   * the organization rewrites the body, and is exactly then that the comparison is worth
+   * making.
+   *
+   * `.default(null)` rather than a bare nullable, for the tolerance this schema keeps
+   * throughout: a payload from a server that predates the column still parses.
+   */
+  seededDefaultSha: external_exports.string().nullable().default(null),
   createdAt: external_exports.iso.datetime({ offset: true }),
   updatedAt: external_exports.iso.datetime({ offset: true }),
   deletedAt: external_exports.iso.datetime({ offset: true }).nullable()
@@ -16105,6 +16164,12 @@ var listEnvelopeSchema = (item) => external_exports.object({ items: external_exp
 var mintedTokenSchema = apiTokenSchema.extend({ token: external_exports.string().min(1) }).loose();
 var tokenListSchema = listEnvelopeSchema(apiTokenSchema);
 var orgInstructionListSchema = listEnvelopeSchema(orgInstructionSchema);
+var instructionDefaultSchema = external_exports.object({
+  scope: external_exports.string().min(1),
+  body: external_exports.string().min(1),
+  sha256: external_exports.string().min(1)
+}).loose();
+var instructionDefaultListSchema = listEnvelopeSchema(instructionDefaultSchema);
 var ApiClient = class _ApiClient {
   baseUrl;
   auth;
@@ -16715,6 +16780,18 @@ var ApiClient = class _ApiClient {
     const body = await this.request("GET", "/api/v1/org-instructions", {}, orgInstructionListSchema);
     return body.items;
   }
+  /**
+   * The starting text THIS RELEASE ships, per scope, with the digest a seeded row records.
+   *
+   * Shipped content rather than the org's, so it carries no tenant data and any
+   * authenticated caller may read it. Comparing a row's `seededDefaultSha` against the
+   * `sha256` here is how a settings page says the shipped default has MOVED since this
+   * organization was seeded — a difference the product reports and never applies.
+   */
+  async listInstructionDefaults() {
+    const body = await this.request("GET", "/api/v1/org-instructions/defaults", {}, instructionDefaultListSchema);
+    return body.items;
+  }
   /** Upserts one scope's instruction text (ADMIN+; body ≤ 4000 chars). */
   setOrgInstruction(scope, body) {
     return this.request("PUT", `/api/v1/org-instructions/${enc(scope)}`, { body: { body } }, orgInstructionSchema);
@@ -16867,11 +16944,18 @@ function bindingBanner(apiBaseUrl) {
   return `Pipebrain MCP server, bound to the ${apiBindingLabel(apiBaseUrl)} API at ${apiBaseUrl}. Every tool reads and writes THAT environment \u2014 confirm it is the one you intend before mutating.`;
 }
 var INDEX_RULES = "Until you have it: an open decision is filed as a question with `ask_questions` and never written into a body; search for an existing record before creating one, because a duplicate splits one thing\u2019s history across two identifiers and nothing merges them afterward; and a secret value never travels in a tool call, because a value in a call is disclosed before the server can encrypt it.";
-function composeIndex(base) {
+function composeIndex(base, machineNotice2 = null) {
   return [
     base,
     "Call `get_work_context` before you write anything \u2014 it returns the binding guidance, the product doctrine and this organization\u2019s own writing rules, together with the work. Nothing else delivers that guidance in full; every other read only names this call.",
-    INDEX_RULES
+    INDEX_RULES,
+    // LAST, and usually absent. It is about the MACHINE rather than about the work, so it
+    // must never displace a rule: a squeezed share keeps the prefix, and losing a sentence
+    // about an installer costs less than losing the sentence that recovers everything else.
+    // Present only when this machine's shared configuration is not the one this build ships
+    // (PIPE-354 AC-5) — a machine that never installed it is passed over in silence, since
+    // it has no configuration to be behind with.
+    ...machineNotice2 === null ? [] : [machineNotice2]
   ].join("\n\n");
 }
 async function fetchOrgInstructionsSafe(client2) {
@@ -16917,6 +17001,13 @@ function successorNotice() {
   const armed = process.env.PIPELINE_MCP_SUCCESSOR_NOTICE;
   return armed === void 0 || armed === "" ? "" : SUCCESSOR_NOTICE;
 }
+function machineNotice() {
+  try {
+    return agentConfigNotice(agentConfigStatus(agentConfigDir()));
+  } catch {
+    return null;
+  }
+}
 var DEFAULT_VERSION = "0.0.0";
 function ok(data, appended) {
   const content = [
@@ -16983,7 +17074,13 @@ function createMcpServer(client2, apiBaseUrl, orgInstructions2 = /* @__PURE__ */
     // which environment this is bound to, the call that returns the binding guidance,
     // and the three rules whose violation cannot be undone. Everything else comes from
     // `docs/DOCTRINE.md` and the org's saved texts, on the work-context read.
-    instructions: composeIndex(successorNotice() + banner)
+    //
+    // Plus, only when there is something to say, one line about the MACHINE: its shared
+    // agent configuration is not the one this build ships (PIPE-354 AC-5). Read here
+    // rather than passed in, because the fact is about the filesystem this process is
+    // running on and there is no caller better placed to know it; a read failure
+    // degrades to silence, since a session must not fail to start over an installer.
+    instructions: composeIndex(successorNotice() + banner, machineNotice())
   });
   server2.registerTool("list_projects", {
     description: "List all projects with their key, environments, milestones (token, label, active), and open-issue counts \u2014 the project switcher and workflow entry point (\xA77).",
@@ -17012,10 +17109,17 @@ function createMcpServer(client2, apiBaseUrl, orgInstructions2 = /* @__PURE__ */
     // path that has no precedent anywhere on this surface. The viewer narrowing the
     // web queue offers is filter state on that view, not something an agent picks.
   }, () => (
-    // `{ items }`, mirroring the HTTP envelope rather than unwrapping to a bare
-    // array like the sibling list tools: AC-7 asks that an agent read the SAME set
-    // the queue shows, and the two surfaces answering in the same shape is what
-    // makes that comparable at a glance.
+    // `{ items }`, mirroring the HTTP envelope rather than unwrapping to a bare array
+    // like the sibling list tools. The reason is the envelope itself: this tool is a
+    // pass-through of one endpoint's answer, and reshaping it here would be a second
+    // place for that answer's shape to be decided.
+    //
+    // The two surfaces are NOT interchangeable, and nothing here should suggest they
+    // are. This tool takes no narrowing arguments and returns the org's WHOLE queue,
+    // while the web view narrows what it DRAWS — by project, by category, and by viewer
+    // scope. One endpoint decides what counts as a gate, so that definition cannot drift
+    // between them; what an agent reads here is everything waiting, rather than whatever
+    // the operator happens to be looking at.
     run(async () => ({ items: await client2.listWaiting() }), GUIDANCE_POINTER)
   ));
   server2.registerTool(
@@ -17352,11 +17456,11 @@ function createMcpServer(client2, apiBaseUrl, orgInstructions2 = /* @__PURE__ */
     inputSchema: linkAssetInputSchema.shape
   }, (args) => run(() => client2.linkAsset(args)));
   server2.registerTool("unlink_asset", {
-    description: "Remove an asset reference by its link id (soft-delete). The asset itself is untouched \u2014 this only drops the reference from its target.",
+    description: "Remove an asset reference by its link id (soft-delete). The asset itself is untouched \u2014 this only drops the reference from its target. A link whose target is a CHAT MESSAGE is author-only: anyone but the person who wrote that message is refused with `not_message_author` (403), so an attachment you did not post is not yours to detach. Every other target type is removable by any member.",
     inputSchema: unlinkAssetInputSchema.shape
   }, (args) => run(() => client2.unlinkAsset(args.linkId)));
   server2.registerTool("set_secret", {
-    description: "Create a secret or add a new version under a project + environment (metadata only \u2014 the response NEVER echoes the value). `name` is UPPER_SNAKE_CASE (e.g. API_KEY); `environment` is the environment slug (dev/prod); optional `description`.",
+    description: "Create a secret or add a new version under a project + environment (metadata only \u2014 the response NEVER echoes the value). `name` is UPPER_SNAKE_CASE (e.g. API_KEY); `environment` is the environment slug (dev/prod); optional `description`. Writing guidance for that description lives in the product doctrine, which `get_work_context` returns.",
     inputSchema: {
       project: projectKeySchema,
       environment: external_exports.string().min(1),
@@ -17485,7 +17589,7 @@ function loadMcpConfig() {
 }
 
 // src/version.ts
-var VERSION = "0.32.0";
+var VERSION = "0.33.0";
 
 // src/main.ts
 var config2 = loadMcpConfig();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pipebrain-mcp",
-  "version": "0.32.0",
-  "description": "Pipebrain MCP server for Claude Code and Claude Desktop — issues, requirements, content, assets, and metadata-only secrets over the Pipebrain API.",
+  "version": "0.33.0",
+  "description": "Pipebrain MCP server for Claude Code and Claude Desktop \u2014 issues, requirements, content, assets, and metadata-only secrets over the Pipebrain API.",
   "type": "module",
   "license": "MIT",
   "main": "./dist/main.js",