wolfpack-mcp 1.0.79 → 1.0.80

package/dist/agentBuilderTools.js

@@ -116,7 +116,8 @@ export const AGENT_BUILDER_TOOLS = [
         description: 'Create an alias of an agent, so the same definition can run work in parallel. ' +
             'An agent runs one session at a time, so N concurrent workers means N aliases. ' +
             'The alias live-tracks the source for container image, prompts, instructions, LLM, tools, skills and tasks — edit those once on the source. ' +
-            'It does NOT inherit project assignment, API key permissions, secrets or schedules: set those on the alias afterwards, or it will start with a read-only key and no repository. ' +
+            'It does NOT inherit project assignment, API key permissions or schedules: set those on the alias afterwards, or it will start with a read-only key and no repository. ' +
+            'Secrets are inherited only when marked shared_with_aliases on the source (same-org only); an alias-local secret of the same name overrides. ' +
             'Aliases are auto-named from the source (e.g. "Coder (2)"). You cannot alias an alias.',
         inputSchema: {
             type: 'object',
@@ -714,16 +715,21 @@ export const AGENT_BUILDER_TOOLS = [
     {
         name: 'set_agent_secret',
         description: 'Create or update a secret for an agent. ' +
-            'Name must be uppercase letters, digits, and underscores (e.g. MY_API_KEY).',
+            'Name must be uppercase letters, digits, and underscores (e.g. MY_API_KEY). ' +
+            'Omit value to change only shared_with_aliases on an existing secret.',
         inputSchema: {
             type: 'object',
             properties: {
                 agent_id: { type: 'string', description: 'Agent profile ID' },
                 name: { type: 'string', description: 'Secret name (e.g. MY_API_KEY)' },
                 value: { type: 'string', description: 'Secret value (encrypted at rest)' },
+                shared_with_aliases: {
+                    type: 'boolean',
+                    description: 'Share with same-org aliases of this agent (default false)',
+                },
                 ...ORG_SLUG_PROP,
             },
-            required: ['agent_id', 'name', 'value'],
+            required: ['agent_id', 'name'],
         },
     },
     // ─── Group 7: Discovery ───────────────────────────────────────────────────
@@ -1315,11 +1321,12 @@ export async function handleAgentBuilderTool(name, args, client) {
                 .object({
                 agent_id: z.string(),
                 name: z.string(),
-                value: z.string(),
+                value: z.string().optional(),
+                shared_with_aliases: z.boolean().optional(),
                 org_slug: orgSlugField,
             })
                 .parse(args);
-            const secret = await client.setAgentSecret(parsed.agent_id, parsed.name, parsed.value, resolveOrg(parsed));
+            const secret = await client.setAgentSecret(parsed.agent_id, parsed.name, parsed.value, parsed.shared_with_aliases, resolveOrg(parsed));
             return { content: [{ type: 'text', text: `Set secret "${secret.name}"` }] };
         }
         // ─── Discovery ────────────────────────────────────────────────────────────

package/dist/agentMemoryTools.test.js

@@ -0,0 +1,19 @@
+import { describe, it, expect } from 'vitest';
+import { AGENT_SELF_TOOLS, AGENT_MEMORY_TOOLS } from './agentSelfTools.js';
+const names = (tools) => tools.map((t) => t.name);
+describe('agent self and memory tool split (#1776)', () => {
+    it('keeps the memory tools out of the self tools, so they can be withheld separately', () => {
+        expect(names(AGENT_SELF_TOOLS)).toEqual(['get_self', 'get_own_sessions']);
+    });
+    it('groups every memory tool under the separately gated set', () => {
+        expect(names(AGENT_MEMORY_TOOLS).sort()).toEqual([
+            'get_memory',
+            'list_memories',
+            'save_memory',
+        ]);
+    });
+    it('never lists the same tool twice', () => {
+        const all = [...names(AGENT_SELF_TOOLS), ...names(AGENT_MEMORY_TOOLS)];
+        expect(new Set(all).size).toBe(all.length);
+    });
+});

package/dist/agentSelfTools.js

@@ -23,6 +23,12 @@ export const AGENT_SELF_TOOLS = [
             },
         },
     },
+];
+/**
+ * Memory tools, gated by the `agent_memory` capability so an agent whose
+ * memory is disabled (#1776) is never offered them.
+ */
+export const AGENT_MEMORY_TOOLS = [
     {
         name: 'list_memories',
         description: 'List all your persistent memory entries. Memory persists across sessions and is scoped to you. ' +

package/dist/client.js

@@ -762,8 +762,12 @@ export class WolfpackClient {
     async listAgentSecrets(agentId, orgSlug) {
         return this.api.get(this.withOrgSlug(`/agents/${agentId}/secrets`, orgSlug));
     }
-    async setAgentSecret(agentId, name, value, orgSlug) {
-        return this.api.post(this.withOrgSlug(`/agents/${agentId}/secrets`, orgSlug), { name, value });
+    async setAgentSecret(agentId, name, value, sharedWithAliases, orgSlug) {
+        return this.api.post(this.withOrgSlug(`/agents/${agentId}/secrets`, orgSlug), {
+            name,
+            value,
+            sharedWithAliases,
+        });
     }
     // ─── Agent Builder: Skills (write) ────────────────────────────────────────
     async createSkill(body, orgSlug) {

package/dist/index.js

@@ -11,7 +11,7 @@ import { allTasksChecked, getWorkItemReminders } from './workItemReminders.js';
 import { validateConfig, config } from './config.js';
 import { AGENT_BUILDER_TOOLS, handleAgentBuilderTool } from './agentBuilderTools.js';
 import { PROCEDURE_TOOLS, handleProcedureTool } from './procedureTools.js';
-import { AGENT_SELF_TOOLS, handleAgentSelfTool } from './agentSelfTools.js';
+import { AGENT_SELF_TOOLS, AGENT_MEMORY_TOOLS, handleAgentSelfTool } from './agentSelfTools.js';
 import { resolveRadarItemId } from './resolveRadarItemId.js';
 import { fetch as proxyFetch } from './proxyFetch.js';
 // Get current package version
@@ -758,6 +758,8 @@ class WolfpackMCPServer {
                             'AGENTS: unless granted the mcp:work_items:read_all permission, your results are always ' +
                             'narrowed to items assigned to you or routed to a work pool you belong to, whatever ' +
                             'assigned_to_id you pass; the response says so when this applies. ' +
+                            'AGENTS: when more than one item is claimable, the response also states the order to take ' +
+                            'them in (bug fixes first, then higher priority, then oldest) and which to pull next. ' +
                             'TERMINOLOGY: "board" and "kanban" are synonymous - both refer to the Kanban board of work items. ' +
                             'The board has columns: "new" (to do), "doing" (in progress), "review" (pending review), "ready" (code done, awaiting deployment), "blocked", "completed" (deployed). ' +
                             'The "backlog" or "pending" status represents items not yet on the board. ' +
@@ -986,6 +988,8 @@ class WolfpackMCPServer {
                             'agent and will return 403: ask a human to route it to your pool or assign it to you. ' +
                             'AGENTS: pulling puts the item straight into "doing" — you are taking it to start on it ' +
                             'now — so there is no separate "move it to doing" step. Move it to "review" when done. ' +
+                            'AGENTS: with more than one item claimable, take them in the order list_work_items gives ' +
+                            'you: bug fixes first, then higher priority, then oldest. ' +
                             'If no assignee is specified, assigns to the API key owner. ' +
                             'In personal projects, items are always assigned to the owner.',
                         inputSchema: {
@@ -2040,6 +2044,7 @@ class WolfpackMCPServer {
                     },
                     ...(this.capabilities.includes('procedures') ? PROCEDURE_TOOLS : []),
                     ...(this.capabilities.includes('agent_self') ? AGENT_SELF_TOOLS : []),
+                    ...(this.capabilities.includes('agent_memory') ? AGENT_MEMORY_TOOLS : []),
                     ...(this.capabilities.includes('agent_builder') ? AGENT_BUILDER_TOOLS : []),
                 ],
             };
@@ -2965,6 +2970,13 @@ class WolfpackMCPServer {
                                 return handleAgentSelfTool(name, args, this.client);
                             }
                         }
+                        // Check memory tools (separately gated — #1776)
+                        if (this.capabilities.includes('agent_memory')) {
+                            const memoryToolNames = AGENT_MEMORY_TOOLS.map((t) => t.name);
+                            if (memoryToolNames.includes(name)) {
+                                return handleAgentSelfTool(name, args, this.client);
+                            }
+                        }
                         // Check agent builder tools
                         if (this.capabilities.includes('agent_builder')) {
                             return handleAgentBuilderTool(name, args, this.client);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolfpack-mcp",
-  "version": "1.0.79",
+  "version": "1.0.80",
   "description": "MCP server for Wolfpack AI-enhanced software delivery tools",
   "main": "dist/index.js",
   "type": "module",