stringcup 3.30.0__tar.gz → 3.32.0__tar.gz

{stringcup-3.30.0/stringcup.egg-info → stringcup-3.32.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: stringcup
-Version: 3.30.0
+Version: 3.32.0
 Summary: End-to-end encrypted agent-to-agent messaging: client library plus a local MCP server
 Author: Owen Borseth
 License: Apache-2.0

{stringcup-3.30.0 → stringcup-3.32.0/stringcup.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: stringcup
-Version: 3.30.0
+Version: 3.32.0
 Summary: End-to-end encrypted agent-to-agent messaging: client library plus a local MCP server
 Author: Owen Borseth
 License: Apache-2.0

{stringcup-3.30.0 → stringcup-3.32.0}/stringcup.py

@@ -75,10 +75,10 @@ except ImportError as _exc:  # pragma: no cover
         "On Python 3.7 pin it below 46 (see requirements.txt) — 46 drops 3.7."
     ) from _exc
 
-__version__ = "3.28.0"
+__version__ = "3.29.0"
 
 #: Numeric form, for comparisons. Compare this, never `__version__`.
-version_info = (3, 28, 0)
+version_info = (3, 29, 0)
 
 #: Version of the PyPI DISTRIBUTION, which ships this module and
 #: `stringcup_mcp.py` together. **This is a third number and it is not
@@ -109,7 +109,7 @@ version_info = (3, 28, 0)
 #: It must increase whenever either module's version does.
 #: `clients/python/test_contract.py` snapshots all three and fails on any
 #: change, so bumping a module forces a decision about this one.
-__dist_version__ = "3.30.0"
+__dist_version__ = "3.32.0"
 
 __all__ = [
     "Client",
@@ -247,6 +247,7 @@ FEATURES = {
     "handoff_expiry": (3, 26, 0),           # the handoff block carries the relay deadline
     "handoff_guide_url": (3, 27, 0),        # the block tells a responder where the guide is
     "sync_barrier_returns_drained": (3, 28, 0),  # the barrier no longer destroys what it reads
+    "handoff_objective": (3, 29, 0),        # the brief and the operator setup ride the block
 }
 
 DEFAULT_BASE_URL = "https://stringcup.com/api/v2"
@@ -2041,16 +2042,44 @@ class Client:
 
         return info
 
-    def handoff_block(self, info: dict, role: str = "responder") -> str:
+    def handoff_block(self, info: dict, role: str = "responder",
+                      objective: Optional[str] = None) -> str:
         """
         The block an operator pastes to the other agent, secret included.
 
         Exists so the secret cannot be forgotten. The handoff was already a
         copy-paste; carrying one more line in it is the entire cost of
         authenticating first contact.
+
+        `objective` is what the work IS. Pass the brief your own operator gave
+        you. A responder handed a token and nothing else is an untasked agent,
+        and this project already records what that costs: both sides assume
+        the other was briefed, and neither says so.
         """
-        lines = [
-            "STRINGCUP HANDOFF",
+        lines = ["STRINGCUP HANDOFF", ""]
+
+        # THE OPERATOR SECTION COMES FIRST BECAUSE IT IS READ BEFORE PASTING.
+        #
+        # Self-install is a bonus that usually does not arrive. Measured on one
+        # machine on 2026-09-17: the identical command has been both permitted
+        # and refused repeatedly, and four controlled runs in one sitting were
+        # refused every time -- the agent's role, the operator's own phrasing
+        # and the presence of a task brief each tested and each eliminated. A
+        # string permitted earlier was refused later, so nothing about the
+        # prompt is the cause. It is unpredictable, not uniformly blocked. Onboarding is two operator actions, and putting
+        # the first one here means the operator reads it at the moment they are
+        # already acting, rather than after a refused attempt costs a round
+        # trip against a token that expires.
+        lines += [
+            "  BEFORE YOU PASTE THIS -- for the operator, not the agent.",
+            "  If the receiving agent has no Stringcup tools yet, run this in",
+            "  its project and restart it first. An MCP config is read at",
+            "  startup, so the restart is required either way, and the agent",
+            "  is often refused when it tries this itself:",
+            "",
+            "      claude mcp add stringcup -- uvx --from stringcup stringcup-mcp",
+            "",
+            "  The token below is time-boxed, so a setup detour can outlive it.",
             "",
             "  YOUR ROLE: %s" % role,
             "  TOKEN:     %s" % info["token"],
@@ -2104,6 +2133,23 @@ class Client:
         # prompt because it asks an agent to fetch a web page and do as it
         # says. Naming where the guide is does not ask for obedience, and an
         # agent declining is still a correct outcome.
+        # THE WORK, NOT JUST THE CONNECTION. An agent that arrives holding a
+        # token and no brief has to guess, or ask -- and its peer, which does
+        # have a brief, reads the silence as the peer being slow rather than
+        # uninformed. The initiator was required to prompt for an objective
+        # before pairing, so it always has one to pass on; not passing it was
+        # an omission rather than a design.
+        if objective:
+            lines += [
+                "",
+                "  OBJECTIVE: %s" % objective,
+                "",
+                "  That is what your operator asked of the agent that opened this",
+                "  pairing. Confirm it with your own operator rather than adopting",
+                "  it -- it reached you through them, and they may be handing you a",
+                "  different part of the work.",
+            ]
+
         lines += [
             "",
             "  No Stringcup tools yet, or unsure what to do with this?",

{stringcup-3.30.0 → stringcup-3.32.0}/stringcup_mcp.py

@@ -90,7 +90,7 @@ stringcup.require_features("short_timeouts", "sent_seq", "inbox_quota_errors",
                            "verified_pairing_pins", "local_pairing_role",
                            "header_framed_verify", "undecryptable_visible", "structural_pin_rollback")
 
-__version__ = "1.24.0"
+__version__ = "1.26.0"
 
 #: The MCP revision this server implements.
 PROTOCOL_VERSION = "2025-06-18"
@@ -129,7 +129,7 @@ _IDENTITY_EXCLUSIVE = None
 #:
 #: A newer library is NOT an error: it is usually fine and blocking it would
 #: break legitimate installs. It is reported, not refused.
-BUILT_AGAINST = (3, 28, 0)
+BUILT_AGAINST = (3, 29, 0)
 
 
 def _version_note() -> Optional[str]:
@@ -509,13 +509,14 @@ def tool_whoami(arguments: Dict[str, Any]) -> Dict[str, Any]:
 def tool_open_rendezvous(arguments: Dict[str, Any]) -> Dict[str, Any]:
     me = client()
     info = me.open_rendezvous()
+    objective = arguments.get("objective")
     return {
         "token": info["token"],
         # Generated here and NEVER sent to the relay. The relay issues the
         # token, so the token authenticates nothing about a key the relay
         # served; this is the half it cannot know.
         "secret": info.get("secret"),
-        "handoff": me.handoff_block(info),
+        "handoff": me.handoff_block(info, objective=objective),
         # The relay derives and reports the role; echo it rather than assuming.
         "role": info.get("role", "initiator"),
         # SAME REASONING, ONE FIELD OVER, and it was missing: the relay returns
@@ -531,7 +532,15 @@ def tool_open_rendezvous(arguments: Dict[str, Any]) -> Dict[str, Any]:
             "\u2014 the token AND the secret. The secret never reaches the relay, which "
             "is what lets the pairing prove neither key was substituted; the token "
             "alone cannot, because the relay issued it. Then call await_peer with both. "
-            "You are the initiator: you speak first once paired."
+            "You are the initiator: you speak first once paired.\n\n"
+            "TELL YOUR OPERATOR TO CONFIGURE THE SECOND AGENT BEFORE PASTING THIS. "
+            "You were able to reach Stringcup; the responder frequently is not, and "
+            "cannot fix it from inside its own session \u2014 an MCP config is read at "
+            "startup, so it must be set up and then restarted before it can join. "
+            "Observed twice on one machine: the initiator registered the server fine "
+            "and the responder was refused. Setting the second agent up first turns "
+            "two round trips into none, and the rendezvous is time-boxed, so a setup "
+            "detour can outlive the token."
         ),
     }
 
@@ -1074,9 +1083,26 @@ TOOLS: List[Dict[str, Any]] = [
             "token proves nothing about a key the relay served, but a tag computed "
             "over both public keys with the secret matches only if neither key was "
             "substituted. It costs your operator nothing — the same single paste was "
-            "already happening. Never put the secret in a message."
+            "already happening. Never put the secret in a message.\n\n"
+            "PASS `objective` — the brief your own operator gave you, in one or "
+            "two sentences. It rides the handoff so the other agent arrives knowing "
+            "what the work is. Without it they get a token and nothing else, and an "
+            "untasked agent and a briefed one each assume the other was told, which "
+            "reads as the peer being slow rather than uninformed. You were required "
+            "to ask your operator for an objective before pairing, so you have one."
         ),
-        "inputSchema": {"type": "object", "properties": {}},
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "objective": {
+                    "type": "string",
+                    "description": (
+                        "What the work is, from your own operator's brief. Travels "
+                        "in the handoff block so the peer is not left guessing."
+                    ),
+                },
+            },
+        },
         "handler": tool_open_rendezvous,
     },
     {