@achieveai/hitl-mcp-server 2.9.6 → 2.11.2

package/dist/snapshot-store.js

@@ -0,0 +1,209 @@
+import { createHash, randomBytes } from 'crypto';
+import { mkdirSync, readFileSync, writeFileSync, renameSync, existsSync, unlinkSync } from 'fs';
+import { homedir } from 'os';
+import path from 'path';
+import { resolveRepoRoot, normalizePath, toRepoRelative } from './git-context.js';
+/** Root of the snapshot store. Overridable so tests never touch a real home dir. */
+export function getPlansRoot() {
+    return path.join(process.env.HITL_HOME ?? path.join(homedir(), '.hitl'), 'plans');
+}
+const DIR_MODE = 0o700;
+const FILE_MODE = 0o600;
+function sha256Hex(value) {
+    return createHash('sha256').update(value, 'utf8').digest('hex');
+}
+/**
+ * Locate a plan file's history directory and its display name.
+ *
+ * Identity is keyed on the repo root when there is one, else on the containing
+ * directory — so the same relative path in two different repos gets two
+ * identities (B-7), while two spellings of one Windows path collapse to one
+ * (B-10). Git is resolved from the plan's own directory, never `process.cwd()`,
+ * because the plan usually lives in a sibling repo (B-6).
+ */
+export function resolvePlanIdentity(resolvedPath) {
+    const normalizedPath = normalizePath(resolvedPath);
+    const dirName = path.dirname(resolvedPath);
+    const repoRoot = resolveRepoRoot(dirName);
+    const identityKey = repoRoot ?? normalizePath(dirName);
+    const identityHash = sha256Hex(identityKey);
+    const pathHash = sha256Hex(normalizedPath);
+    return {
+        planId: sha256Hex(`${identityHash}:${pathHash}`),
+        dir: path.join(getPlansRoot(), identityHash, pathHash),
+        displayPath: repoRoot ? toRepoRelative(repoRoot, resolvedPath) : path.basename(resolvedPath),
+        repoRoot,
+        resolvedPath,
+    };
+}
+/**
+ * Validate a raw `latest.json` body before anything trusts it.
+ *
+ * Returns null — never a partially-trusted object — when the digest is not 64
+ * lowercase hex, the revision is not a positive integer, `createdAt` is zero,
+ * or the recorded `displayPath` names a different file than the one being
+ * reviewed. A rejected pointer degrades to "no history", which restarts the
+ * revision count rather than diffing against something unverified.
+ */
+export function parseLatest(raw, expectedDisplayPath) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return null;
+    const { displayPath, digest, revision, createdAt } = parsed;
+    if (typeof digest !== 'string' || !/^[0-9a-f]{64}$/.test(digest))
+        return null;
+    if (typeof revision !== 'number' || !Number.isInteger(revision) || revision < 1)
+        return null;
+    if (typeof createdAt !== 'number' || createdAt <= 0)
+        return null;
+    if (typeof displayPath !== 'string' || displayPath !== expectedDisplayPath)
+        return null;
+    return { displayPath, digest, revision, createdAt };
+}
+/** Read and validate `latest.json`, or null when absent or untrustworthy. */
+export function readLatest(identity) {
+    const file = path.join(identity.dir, 'latest.json');
+    if (!existsSync(file))
+        return null;
+    try {
+        return parseLatest(readFileSync(file, 'utf8'), identity.displayPath);
+    }
+    catch {
+        return null;
+    }
+}
+/** Read a stored revision by digest, or null when the object is missing. */
+export function readObject(identity, digest) {
+    const file = path.join(identity.dir, 'objects', digest);
+    if (!existsSync(file))
+        return null;
+    try {
+        return readFileSync(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Stage `content` as the next revision of this plan.
+ *
+ * Byte-identical content still advances the revision: a resubmit is a distinct
+ * review event, and the human must still be able to select every line of an
+ * unchanged plan (B-3).
+ *
+ * The pointer flip is deliberately a separate step. `latest.json` is what the
+ * next review diffs against, so writing it before the plan has actually reached
+ * the human means a failed publish silently rebases the next review onto a
+ * revision nobody ever saw — the change the human was meant to review vanishes
+ * from the diff (M6). Callers commit once the revision is out the door.
+ *
+ * The object is written either way; it is content-addressed and immutable, so
+ * an uncommitted one costs a few KB of orphaned disk and nothing else.
+ */
+export function prepareRevision(identity, content) {
+    mkdirSync(path.join(identity.dir, 'objects'), { recursive: true, mode: DIR_MODE });
+    // The client writes drafts here; the directory is part of the layout either way.
+    mkdirSync(path.join(identity.dir, 'drafts'), { recursive: true, mode: DIR_MODE });
+    const previous = readLatest(identity);
+    const previousContent = previous ? readObject(identity, previous.digest) : null;
+    const digest = sha256Hex(content);
+    const objectFile = path.join(identity.dir, 'objects', digest);
+    if (!existsSync(objectFile)) {
+        writeAtomic(objectFile, content);
+    }
+    const record = {
+        revision: (previous?.revision ?? 0) + 1,
+        digest,
+        isNewPlan: previous === null,
+        previous,
+        previousContent,
+    };
+    return {
+        ...record,
+        commit() {
+            const meta = {
+                displayPath: identity.displayPath,
+                digest,
+                revision: record.revision,
+                createdAt: Date.now(),
+            };
+            writeAtomic(path.join(identity.dir, 'latest.json'), JSON.stringify(meta, null, 2) + '\n');
+            return record;
+        },
+    };
+}
+/**
+ * Write via a temp file in the same directory, then rename over the target.
+ *
+ * `renameSync` maps to MoveFileEx with MOVEFILE_REPLACE_EXISTING on Windows, so
+ * replacing an existing destination is atomic there too. The temp file is
+ * removed on failure so a full disk cannot leave debris behind.
+ *
+ * The temp name must be unique per write, not per target. A shared name lets a
+ * second writer append into the first one's half-written file and then rename
+ * the torn result into place — which is precisely the corruption this function
+ * claims to prevent, and it is reproducible with two concurrent writers.
+ *
+ * Rename can also fail with EPERM on Windows when another process has the
+ * destination open for reading, which is ordinary here: every ReviewPlan reads
+ * `latest.json`. That is transient, so `renameWithRetry` absorbs it.
+ */
+function writeAtomic(file, contents) {
+    const tmp = `${file}.${process.pid}.${randomBytes(6).toString('hex')}.tmp`;
+    try {
+        writeFileSync(tmp, contents, { encoding: 'utf8', mode: FILE_MODE });
+        renameWithRetry(tmp, file);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmp);
+        }
+        catch { /* nothing to clean up */ }
+        throw err;
+    }
+}
+/**
+ * Rename, tolerating Windows sharing violations.
+ *
+ * `MoveFileEx` fails with ERROR_ACCESS_DENIED (EPERM) while another process
+ * holds the destination open, and every ReviewPlan reads `latest.json`, so this
+ * collides in ordinary use rather than only under stress. It is transient, so
+ * it is retried with jitter — without the jitter two writers that collided once
+ * retry in lockstep and collide again. Anything that is not a sharing violation
+ * is a real failure and is raised immediately.
+ */
+const RENAME_RETRY_BUDGET_MS = 5_000;
+function renameWithRetry(from, to) {
+    const started = Date.now();
+    let delay = 2;
+    for (;;) {
+        try {
+            renameSync(from, to);
+            return;
+        }
+        catch (err) {
+            const code = err.code;
+            const transient = code === 'EPERM' || code === 'EACCES' || code === 'EBUSY';
+            if (!transient || Date.now() - started >= RENAME_RETRY_BUDGET_MS)
+                throw err;
+            sleepSync(delay + Math.floor(Math.random() * delay));
+            delay = Math.min(delay * 2, 250);
+        }
+    }
+}
+/**
+ * Block for `ms`, without an event-loop turn.
+ *
+ * The whole store is synchronous so that a snapshot is durable before the
+ * caller can act on it; a promise here would let a second write interleave.
+ */
+function sleepSync(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+//# sourceMappingURL=snapshot-store.js.map

package/dist/snapshot-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-store.js","sourceRoot":"","sources":["../src/snapshot-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAmElF,oFAAoF;AACpF,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,QAAQ,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IAE3C,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,GAAG,YAAY,IAAI,QAAQ,EAAE,CAAC;QAChD,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC;QACtD,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5F,QAAQ;QACR,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,mBAA2B;IAClE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE/D,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAiC,CAAC;IAEvF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7F,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAExF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,QAAsB;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,QAAsB,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,eAAe,CAAC,QAAsB,EAAE,OAAe;IACrE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,iFAAiF;IACjF,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAElF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAAqB;QAC/B,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;QACvC,MAAM;QACN,SAAS,EAAE,QAAQ,KAAK,IAAI;QAC5B,QAAQ;QACR,eAAe;KAChB,CAAC;IAEF,OAAO;QACL,GAAG,MAAM;QACT,MAAM;YACJ,MAAM,IAAI,GAAiB;gBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC1F,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IACjD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3E,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC5D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,SAAS,eAAe,CAAC,IAAY,EAAE,EAAU;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC;YAC5E,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,sBAAsB;gBAAE,MAAM,GAAG,CAAC;YAC5E,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;YACrD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/types.d.ts

@@ -41,6 +41,14 @@ export interface RepoContext {
     /** Remote origin URL (if available) */
     remoteUrl?: string;
 }
+/** Which resolution tier produced a `SenderIdentity` label. */
+export type SenderIdentitySource = 'session' | 'worktree' | 'path';
+/** Resolved, display-ready sender identity for a machine/session sending a message. */
+export interface SenderIdentity {
+    /** Display label, e.g. "Kay9 - work-item/1-reviewplan". Never an absolute path (F-9). */
+    label: string;
+    source: SenderIdentitySource;
+}
 /** Base fields present on every message over the ntfy channel. */
 interface BaseMessage {
     /** Discriminated union tag */
@@ -49,7 +57,21 @@ interface BaseMessage {
     messageId: string;
     /** Unix-epoch millis when the message was created */
     timestamp: number;
+    /**
+     * Wire-shape version. Absent ⇒ 1.
+     *
+     * Emitted ONLY on plan_review / plan_review_response / plan_review_ack /
+     * cancel_review. The four shipping types (question, answer, notification,
+     * dismiss_notification) must keep a byte-identical wire format so a new
+     * server never breaks an already-installed client.
+     *
+     * Increment only when the wire shape changes — NEVER derive it from the
+     * package version.
+     */
+    protocolVersion?: number;
 }
+/** Current wire-shape version. See BaseMessage.protocolVersion. */
+export declare const PROTOCOL_VERSION = 2;
 /** Published by MCP server when the LLM calls ask_human. */
 export interface QuestionMessage extends BaseMessage {
     type: 'question';
@@ -86,7 +108,10 @@ export interface AnswerMessage extends BaseMessage {
     /** Per-question answers for batch questions */
     subAnswers?: SubAnswer[];
 }
-/** Union type for all messages over the ntfy channel. */
+/**
+ * Union of the four message types that predate `protocolVersion`.
+ * Their wire format is frozen — see BaseMessage.protocolVersion.
+ */
 export type HitlMessage = QuestionMessage | AnswerMessage | NotificationMessage | DismissNotificationMessage;
 /** Published by MCP server for fire-and-forget progress notifications. */
 export interface NotificationMessage extends BaseMessage {
@@ -106,6 +131,24 @@ export interface DismissNotificationMessage extends BaseMessage {
     /** Device that dismissed it */
     dismissedFrom: string;
 }
+/**
+ * Decorates a question or notification with the sender's resolved identity.
+ *
+ * Deliberately NOT part of the `HitlMessage` union and does not extend
+ * `BaseMessage` — this carries no identity of its own, only a pointer back to
+ * the message it decorates. Published once, right after that message, by a
+ * sibling of `publishPlan`. Delivery order versus the message it decorates is
+ * not guaranteed; a client that cannot match `forMessageId` to an open or
+ * soon-to-open window drops it silently — sender identity is decoration only,
+ * never required.
+ */
+export interface SenderIdentityMessage {
+    type: 'sender_identity';
+    /** messageId of the question/notification this decorates. */
+    forMessageId: string;
+    forType: 'question' | 'notification';
+    sender: SenderIdentity;
+}
 /**
  * A fragment of an oversized message body, published as its own ntfy message.
  * Not part of the `HitlMessage` union — it's a transport wrapper that never
@@ -122,6 +165,104 @@ export interface ChunkMessage extends BaseMessage {
     /** Slice of the base64-encoded original body */
     data: string;
 }
+export type PlanVerdict = 'approved' | 'changes_requested' | 'rejected' | 'skipped' | 'cancelled';
+/**
+ * ntfy-event-level attachment metadata, parsed off the raw ntfy JSON event.
+ * NEVER carried inside our own message — the URL only exists after the PUT.
+ * This is plaintext metadata outside our encryption, which is why `name` must
+ * be random hex and never a real path (F-9).
+ */
+export interface AttachmentRef {
+    name: string;
+    url: string;
+    type?: string;
+    size?: number;
+    /** Unix seconds. ntfy expires attachments after 3 h — messages after 12 h. */
+    expires?: number;
+}
+/** Where a plan-review body lives, and how to verify it once fetched. */
+export interface PlanPayloadRef {
+    kind: 'inline' | 'attachment';
+    /** inline only: the encrypted-envelope JSON string produced by crypto.encrypt() */
+    data?: string;
+    /** sha256 hex of the payload plaintext (the base64(gzip(bodyJson)) string) */
+    contentHash: string;
+    /** utf-8 byte length of that same payload plaintext */
+    contentLength: number;
+}
+/** The gzipped body of a plan_review message. */
+export interface PlanReviewBody {
+    content: string;
+    diff: string;
+}
+/** Published by the MCP server when the agent calls ReviewPlan. */
+export interface PlanReviewMessage extends BaseMessage {
+    type: 'plan_review';
+    protocolVersion: number;
+    repo: RepoContext | null;
+    context: string;
+    /** '' when absent — never undefined */
+    summary: string;
+    /** repo-relative ONLY, never an absolute path (F-9) */
+    displayPath: string;
+    /** identity hash of the plan file location; keys drafts across revisions */
+    planId: string;
+    revision: number;
+    isNewPlan: boolean;
+    /** 'sha256:<hex>' of the plan file content */
+    snapshotHash: string;
+    body: PlanPayloadRef;
+    /** Resolved from `path.dirname(plan.resolvedPath)`; absent when identityEnabled is false. */
+    sender?: SenderIdentity;
+}
+/** A single line-anchored comment, in source-line space. */
+export interface InlineComment {
+    path: string;
+    startLine: number;
+    endLine: number;
+    side: 'old' | 'new';
+    comment: string;
+}
+/** The gzipped body of a plan_review_response message. */
+export interface PlanReviewResponseBody {
+    overallFeedback: string;
+    inlineComments: InlineComment[];
+}
+/** Published by a client when the human finishes reviewing. */
+export interface PlanReviewResponseMessage extends BaseMessage {
+    type: 'plan_review_response';
+    protocolVersion: number;
+    /** messageId of the plan_review being answered */
+    reviewId: string;
+    respondedFrom: string;
+    verdict: PlanVerdict;
+    snapshotHash: string;
+    body: PlanPayloadRef;
+}
+/**
+ * Published by the server once it has actually read a response body. Without
+ * it the client shows "submitted" at click time even when the response
+ * attachment later 404s (attachments expire in 3 h, messages in 12 h).
+ */
+export interface PlanReviewAckMessage extends BaseMessage {
+    type: 'plan_review_ack';
+    protocolVersion: number;
+    reviewId: string;
+    responseId: string;
+    status: 'received' | 'lost';
+    reason?: string;
+}
+/** Published by the server when an outstanding review will never be read. */
+export interface CancelReviewMessage extends BaseMessage {
+    type: 'cancel_review';
+    protocolVersion: number;
+    reviewId: string;
+    reason: 'agent_exited' | 'cancelled' | 'superseded';
+}
+/** Union of the plan-review message types. These never chunk. */
+export type PlanMessage = PlanReviewMessage | PlanReviewResponseMessage | PlanReviewAckMessage | CancelReviewMessage;
+/** Anything that can arrive on the topic (excluding the transport-only chunk wrapper). */
+export type AnyHitlMessage = HitlMessage | PlanMessage;
 export interface HitlConfig {
     /** ntfy topic ID — a UUID used as the shared channel */
     topicId: string;
@@ -133,6 +274,8 @@ export interface HitlConfig {
     soundEnabled: boolean;
     /** Optional AES-256-GCM encryption key (64-char hex string) for encrypting messages */
     encryptionKey?: string;
+    /** Whether this device publishes its own sender identity (default: true) */
+    identityEnabled?: boolean;
 }
 export declare const DEFAULT_NTFY_URL = "https://ntfy.sh";
 export declare const DEFAULT_CONFIG: Omit<HitlConfig, 'topicId'>;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,WAAW,GAAG,wBAAwB,GAAG,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IAC3F,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,kEAAkE;AAClE,UAAU,WAAW;IACnB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,4DAA4D;AAC5D,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,IAAI,EAAE,UAAU,CAAC;IACjB,qCAAqC;IACrC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,+CAA+C;IAC/C,aAAa,EAAE,OAAO,CAAC;IACvB,8DAA8D;IAC9D,UAAU,EAAE,OAAO,CAAC;IACpB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED,yDAAyD;AACzD,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,IAAI,EAAE,QAAQ,CAAC;IACf,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,aAAa,GAAG,mBAAmB,GAAG,0BAA0B,CAAC;AAE7G,0EAA0E;AAC1E,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,IAAI,EAAE,cAAc,CAAC;IACrB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,0BAA2B,SAAQ,WAAW;IAC7D,IAAI,EAAE,sBAAsB,CAAC;IAC7B,wDAAwD;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,WAAW;IAC/C,IAAI,EAAE,OAAO,CAAC;IACd,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;CACd;AAMD,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,YAAY,EAAE,OAAO,CAAC;IACtB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AAElD,eAAO,MAAM,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAItD,CAAC;AAMF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,WAAW,GAAG,wBAAwB,GAAG,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IAC3F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,WAAW,GAAG,wBAAwB,GAAG,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IAC3F,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,+DAA+D;AAC/D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAEnE,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAMD,kEAAkE;AAClE,UAAU,WAAW;IACnB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,4DAA4D;AAC5D,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,IAAI,EAAE,UAAU,CAAC;IACjB,qCAAqC;IACrC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,+CAA+C;IAC/C,aAAa,EAAE,OAAO,CAAC;IACvB,8DAA8D;IAC9D,UAAU,EAAE,OAAO,CAAC;IACpB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED,yDAAyD;AACzD,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,IAAI,EAAE,QAAQ,CAAC;IACf,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,aAAa,GAAG,mBAAmB,GAAG,0BAA0B,CAAC;AAE7G,0EAA0E;AAC1E,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,IAAI,EAAE,cAAc,CAAC;IACrB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,0BAA2B,SAAQ,WAAW;IAC7D,IAAI,EAAE,sBAAsB,CAAC;IAC7B,wDAAwD;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,CAAC;IACxB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,UAAU,GAAG,cAAc,CAAC;IACrC,MAAM,EAAE,cAAc,CAAC;CACxB;AAMD;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,WAAW;IAC/C,IAAI,EAAE,OAAO,CAAC;IACd,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;CACd;AAUD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,mBAAmB,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAElG;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,GAAG,YAAY,CAAC;IAC9B,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,iDAAiD;AACjD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,mEAAmE;AACnE,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD,IAAI,EAAE,aAAa,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0DAA0D;AAC1D,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,aAAa,EAAE,CAAC;CACjC;AAED,+DAA+D;AAC/D,MAAM,WAAW,yBAA0B,SAAQ,WAAW;IAC5D,IAAI,EAAE,sBAAsB,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,WAAW;IACvD,IAAI,EAAE,iBAAiB,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,IAAI,EAAE,eAAe,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,GAAG,WAAW,GAAG,YAAY,CAAC;CACrD;AAED,iEAAiE;AACjE,MAAM,MAAM,WAAW,GACnB,iBAAiB,GACjB,yBAAyB,GACzB,oBAAoB,GACpB,mBAAmB,CAAC;AAExB,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,WAAW,CAAC;AAMvD,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,YAAY,EAAE,OAAO,CAAC;IACtB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AAElD,eAAO,MAAM,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAItD,CAAC;AAMF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,WAAW,GAAG,wBAAwB,GAAG,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IAC3F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/types.js

@@ -1,6 +1,8 @@
 // ============================================================
 // @hitl/shared — Protocol types for HITL MCP cross-machine messaging
 // ============================================================
+/** Current wire-shape version. See BaseMessage.protocolVersion. */
+export const PROTOCOL_VERSION = 2;
 export const DEFAULT_NTFY_URL = 'https://ntfy.sh';
 export const DEFAULT_CONFIG = {
     ntfyUrl: DEFAULT_NTFY_URL,

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,qEAAqE;AACrE,+DAA+D;AAkK/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAgC;IACzD,OAAO,EAAE,gBAAgB;IACzB,UAAU,EAAE,EAAE;IACd,YAAY,EAAE,IAAI;CACnB,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,qEAAqE;AACrE,+DAA+D;AAqF/D,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAuPlC,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAgC;IACzD,OAAO,EAAE,gBAAgB;IACzB,UAAU,EAAE,EAAE;IACd,YAAY,EAAE,IAAI;CACnB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The single source of truth for the server's version — read from package.json
+ * rather than duplicated as a literal, which had already drifted five ways
+ * (root 2.0.0 / server 2.9.6 / client 2.6.0 / shared 2.0.0 / Cargo 2.9.6).
+ *
+ * Resolves identically from `src/` (ts-jest) and from `dist/` (compiled): both
+ * sit one directory below the package root.
+ *
+ * This is NOT the wire protocol version — see PROTOCOL_VERSION in types.ts,
+ * which is a small integer bumped only when the message shape changes.
+ */
+export declare const SERVER_VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,EAAE,MAAoE,CAAC"}

package/dist/version.js

@@ -0,0 +1,15 @@
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+/**
+ * The single source of truth for the server's version — read from package.json
+ * rather than duplicated as a literal, which had already drifted five ways
+ * (root 2.0.0 / server 2.9.6 / client 2.6.0 / shared 2.0.0 / Cargo 2.9.6).
+ *
+ * Resolves identically from `src/` (ts-jest) and from `dist/` (compiled): both
+ * sit one directory below the package root.
+ *
+ * This is NOT the wire protocol version — see PROTOCOL_VERSION in types.ts,
+ * which is a small integer bumped only when the message shape changes.
+ */
+export const SERVER_VERSION = require('../package.json').version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAEvC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAY,OAAO,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC"}

package/package.json

@@ -1,61 +1,64 @@
-{
-  "name": "@achieveai/hitl-mcp-server",
-  "version": "2.9.6",
-  "description": "Human-in-the-Loop MCP Server — enables LLM agents to ask questions across all your devices via ntfy.sh",
-  "type": "module",
-  "main": "./dist/mcp-server.js",
-  "bin": {
-    "hitl": "dist/cli.js",
-    "hitl-mcp-server": "dist/mcp-server.js"
-  },
-  "files": [
-    "dist/**/*.js",
-    "dist/**/*.d.ts",
-    "dist/**/*.map",
-    "dist/bin/**/*",
-    "scripts/postinstall.js",
-    "README.md"
-  ],
-  "keywords": [
-    "mcp",
-    "llm",
-    "human-in-the-loop",
-    "hitl",
-    "dialog",
-    "interactive",
-    "model-context-protocol",
-    "ntfy",
-    "notifications"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/achieveai/HumanInTheLoop.git"
-  },
-  "license": "MIT",
-  "scripts": {
-    "build": "tsc",
-    "start": "node dist/mcp-server.js",
-    "dev": "tsx src/index.ts",
-    "test": "cross-env NODE_OPTIONS=--experimental-vm-modules jest --config jest.config.js",
-    "clean": "rimraf dist",
-    "postinstall": "node scripts/postinstall.js",
-    "prepublishOnly": "npm run build"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "eventsource": "^2.0.2",
-    "uuid": "^9.0.0"
-  },
-  "devDependencies": {
-    "@jest/globals": "^29.7.0",
-    "@types/eventsource": "^1.1.15",
-    "@types/node": "^20.0.0",
-    "@types/uuid": "^9.0.0",
-    "cross-env": "^10.1.0",
-    "jest": "^29.7.0",
-    "rimraf": "^5.0.0",
-    "ts-jest": "^29.1.0",
-    "tsx": "^4.0.0",
-    "typescript": "^5.3.0"
-  }
-}
+{
+  "name": "@achieveai/hitl-mcp-server",
+  "version": "2.11.2",
+  "description": "Human-in-the-Loop MCP Server — enables LLM agents to ask questions across all your devices via ntfy.sh",
+  "type": "module",
+  "main": "./dist/mcp-server.js",
+  "bin": {
+    "hitl": "dist/cli.js",
+    "hitl-mcp-server": "dist/mcp-server.js"
+  },
+  "files": [
+    "dist/**/*.js",
+    "dist/**/*.d.ts",
+    "dist/**/*.map",
+    "dist/bin/**/*",
+    "scripts/postinstall.js",
+    "README.md"
+  ],
+  "keywords": [
+    "mcp",
+    "llm",
+    "human-in-the-loop",
+    "hitl",
+    "dialog",
+    "interactive",
+    "model-context-protocol",
+    "ntfy",
+    "notifications"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/achieveai/HumanInTheLoop.git"
+  },
+  "license": "GPL-3.0",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/mcp-server.js",
+    "dev": "tsx src/index.ts",
+    "test": "cross-env NODE_OPTIONS=--experimental-vm-modules jest --config jest.config.js",
+    "fixture:payload": "tsx scripts/gen-payload-fixture.ts",
+    "clean": "rimraf dist",
+    "postinstall": "node scripts/postinstall.js",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "diff": "^5.2.2",
+    "eventsource": "^2.0.2",
+    "uuid": "^9.0.0"
+  },
+  "devDependencies": {
+    "@jest/globals": "^29.7.0",
+    "@types/diff": "^5.2.3",
+    "@types/eventsource": "^1.1.15",
+    "@types/node": "^20.0.0",
+    "@types/uuid": "^9.0.0",
+    "cross-env": "^10.1.0",
+    "jest": "^29.7.0",
+    "rimraf": "^5.0.0",
+    "ts-jest": "^29.1.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.3.0"
+  }
+}