pluribus-context 0.3.27 → 0.3.28

package/docs/context-budget-receipts.md

@@ -63,6 +63,22 @@ Public trace:
 
 - `examples/context-input-evidence/subagent-context-budget-otel-trace.json`
 
+## Per-agent MCP injection
+
+Role-specific subagents may need different MCP surfaces: a testing agent might need `testing` and `github`, while deployment, analytics, email, or browser servers should stay outside that boot context. The receipt should prove the policy boundary before the first task:
+
+- role/session id for the subagent without raw instructions;
+- available server count/hash for the role;
+- excluded server count/hash before boot;
+- loaded vs deferred tool-definition counts;
+- startup token bucket after the policy was applied; and
+- an explicit audit gap that this proves injection scope, not semantic tool quality.
+
+Minimal events:
+
+- `subagent.mcp_policy.applied`
+- `subagent.context_boot.evaluated`
+
 ## Delegation boundary
 
 A subagent can save parent context at boot and still lose the benefit if raw child output is pasted back into the parent. The receipt should prove:
@@ -146,7 +162,8 @@ Instead of “why is my subagent bad?”, ask for a receipt or debug JSON that c
 2. How many were loaded into the parent?
 3. How many were loaded into the subagent?
 4. How many were suppressed/deferred?
-5. What token bucket remained before the first tool call?
-6. Did raw child output return to the parent, or only a bounded summary?
+5. For a subagent, which MCP servers were allowed and which were excluded before boot?
+6. What token bucket remained before the first tool call?
+7. Did raw child output return to the parent, or only a bounded summary?
 
 That is the narrow wedge for Pluribus: context-budget evidence across agent boundaries, not another memory store or tool router.

package/examples/agent-skills/context-receipts/README.md

@@ -13,7 +13,7 @@ It is intentionally markdown-only so it can be copied into a local skills direct
 Ask an agent or harness using the skill to emit a receipt for one workflow and verify these constraints:
 
 ```bash
-grep -E 'mcp\.tool_index\.loaded|context\.skill\.registry\.index\.loaded|subagent\.delegation\.requested' receipt.jsonl
+grep -E 'mcp\.tool_index\.loaded|context\.skill\.registry\.index\.loaded|subagent\.mcp_policy\.applied|subagent\.delegation\.requested' receipt.jsonl
 grep -E 'raw_(schema|query|args|result|output)_copied":false|raw.*CopiedToReceipt":false' receipt.jsonl
 ```
 

package/examples/agent-skills/context-receipts/SKILL.md

@@ -59,6 +59,24 @@ Minimal event names:
 - `context.input.loaded`
 - `context.input.candidate_suppressed`
 
+## Per-agent MCP injection smoke
+
+For role-specific subagents or per-agent MCP configs, prove the policy boundary before debugging model quality:
+
+- which subagent role/session requested tools;
+- which MCP servers were available to that role;
+- which servers were explicitly excluded before boot;
+- whether startup loaded full schemas or only a compact index;
+- how many tool definitions stayed deferred/suppressed; and
+- the startup token bucket after policy was applied.
+
+Minimal JSONL event names:
+
+```jsonl
+{"event":"subagent.mcp_policy.applied","subagent_role":"testing","available_server_count":2,"available_servers_hash":"sha256:...","excluded_server_count":5,"excluded_servers_hash":"sha256:...","policy_source":"role_config","raw_server_names_copied":false}
+{"event":"subagent.context_boot.evaluated","subagent_role":"testing","loaded_tool_definition_count":0,"deferred_tool_definition_count":48,"startup_token_bucket":"50k_75k","raw_schema_copied":false,"audit_gap":"proves injection boundary, not tool relevance"}
+```
+
 ## Subagent / manager boundary smoke
 
 For subagents, manager agents, or child workers, answer:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pluribus-context",
-  "version": "0.3.27",
+  "version": "0.3.28",
   "description": "AI context and rules sync CLI for Claude.md, Claude Code, Cursor, and Copilot instructions, with privacy-safe context receipts that prove what memory, tools, skills, compactions, and security findings crossed agent boundaries without logging raw content.",
   "type": "module",
   "homepage": "https://github.com/caioribeiroclw-pixel/pluribus#readme",

package/src/utils/version.js

@@ -1 +1 @@
-export const VERSION = '0.3.27'
+export const VERSION = '0.3.28'