@aigentyc/mcp 0.1.0

package/dist/client.js

@@ -0,0 +1,70 @@
+import { randomUUID } from "node:crypto";
+import { AigentycError, httpStatusToCode } from "./errors.js";
+export function createClient(profile) {
+    const baseUrl = profile.baseUrl.replace(/\/$/, "");
+    async function request(method, path, opts = {}) {
+        const url = new URL(baseUrl + path);
+        if (opts.query) {
+            for (const [k, v] of Object.entries(opts.query)) {
+                if (v === undefined || v === null)
+                    continue;
+                url.searchParams.set(k, String(v));
+            }
+        }
+        if (!url.protocol.startsWith("https") &&
+            !isLocalHost(url.hostname) &&
+            !profile.allowInsecure) {
+            throw new AigentycError("NETWORK", `Refusing plaintext HTTP to non-loopback host: ${url.hostname}. Use https:// or login with --allow-insecure for dev.`);
+        }
+        const requestId = randomUUID();
+        const headers = {
+            Authorization: `Bearer ${profile.apiKey}`,
+            Accept: "application/json",
+            "X-Request-Id": requestId,
+            "User-Agent": "aigentyc-mcp/0.1.0",
+        };
+        let body;
+        if (opts.body !== undefined) {
+            headers["Content-Type"] = "application/json";
+            body = JSON.stringify(opts.body);
+        }
+        let res;
+        try {
+            res = await fetch(url, { method, headers, body });
+        }
+        catch (err) {
+            throw new AigentycError("NETWORK", `Request to ${url.toString()} failed: ${err.message}`, undefined, requestId);
+        }
+        const text = await res.text();
+        let payload = undefined;
+        if (text) {
+            try {
+                payload = JSON.parse(text);
+            }
+            catch {
+                payload = text;
+            }
+        }
+        if (!res.ok) {
+            const msg = (payload && typeof payload === "object" && "error" in payload
+                ? String(payload.error)
+                : undefined) || `HTTP ${res.status}`;
+            throw new AigentycError(httpStatusToCode(res.status), msg, res.status, requestId, payload);
+        }
+        return payload;
+    }
+    return {
+        profile,
+        get: (path, query) => request("GET", path, { query }),
+        post: (path, body) => request("POST", path, { body }),
+        patch: (path, body) => request("PATCH", path, { body }),
+        delete: (path, body) => request("DELETE", path, { body }),
+    };
+}
+function isLocalHost(hostname) {
+    return (hostname === "localhost" ||
+        hostname === "127.0.0.1" ||
+        hostname === "::1" ||
+        hostname.endsWith(".localhost"));
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAU9D,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEnD,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,IAAY,EACZ,OAA4D,EAAE;QAE9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;oBAAE,SAAS;gBAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,IACE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YACjC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC1B,CAAC,OAAO,CAAC,aAAa,EACtB,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,SAAS,EACT,iDAAiD,GAAG,CAAC,QAAQ,wDAAwD,CACtH,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE;YACzC,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,SAAS;YACzB,YAAY,EAAE,oBAAoB;SACnC,CAAC;QACF,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CACrB,SAAS,EACT,cAAc,GAAG,CAAC,QAAQ,EAAE,YAAa,GAAa,CAAC,OAAO,EAAE,EAChE,SAAS,EACT,SAAS,CACV,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAY,SAAS,CAAC;QACjC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GACP,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO;gBAC3D,CAAC,CAAC,MAAM,CAAE,OAA8B,CAAC,KAAK,CAAC;gBAC/C,CAAC,CAAC,SAAS,CAAC,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CACrB,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAC5B,GAAG,EACH,GAAG,CAAC,MAAM,EACV,SAAS,EACT,OAAO,CACR,CAAC;QACJ,CAAC;QAED,OAAO,OAAY,CAAC;IACtB,CAAC;IAED,OAAO;QACL,OAAO;QACP,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC;QACrD,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;QACrD,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;QACvD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,CACL,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,KAAK;QAClB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAChC,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,31 @@
+export interface ProfileConfig {
+    baseUrl: string;
+    projectId: string;
+    apiKey: string;
+    /**
+     * When true, the client will allow plaintext HTTP to non-loopback hosts.
+     * Dev-only — never enable in production.
+     */
+    allowInsecure?: boolean;
+}
+export interface AigentycConfig {
+    activeProfile: string;
+    profiles: Record<string, ProfileConfig>;
+}
+declare const DEFAULT_BASE_URL = "https://app.aigentyc.com";
+/**
+ * Resolve config paths at call time so `AIGENTYC_CONFIG` env overrides take
+ * effect (used by tests and by users who want a non-standard location).
+ */
+export declare function configPath(): string;
+export declare function loadConfig(): Promise<AigentycConfig | null>;
+export declare function requireConfig(): Promise<AigentycConfig>;
+export declare function getActiveProfile(cfg: AigentycConfig): ProfileConfig;
+/**
+ * Persist config with 0600 perms. Refuses to overwrite wider perms without fix.
+ */
+export declare function saveConfig(cfg: AigentycConfig): Promise<void>;
+export declare function assertSafePerms(): Promise<void>;
+export declare function upsertProfile(cfg: AigentycConfig | null, name: string, profile: ProfileConfig, makeActive: boolean): AigentycConfig;
+export { DEFAULT_BASE_URL };
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CACzC;AAED,QAAA,MAAM,gBAAgB,6BAA6B,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAInC;AAOD,wBAAsB,UAAU,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAYjE;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,cAAc,CAAC,CAQ7D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,aAAa,CAUnE;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAQnE;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAUrD;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,cAAc,GAAG,IAAI,EAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,OAAO,GAClB,cAAc,CAOhB;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/config.js

@@ -0,0 +1,79 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { readFile, writeFile, stat, mkdir, chmod } from "node:fs/promises";
+const DEFAULT_BASE_URL = "https://app.aigentyc.com";
+/**
+ * Resolve config paths at call time so `AIGENTYC_CONFIG` env overrides take
+ * effect (used by tests and by users who want a non-standard location).
+ */
+export function configPath() {
+    const override = process.env.AIGENTYC_CONFIG;
+    if (override && override.trim().length > 0)
+        return override;
+    return join(homedir(), ".aigentyc", "config.json");
+}
+function configDir() {
+    const p = configPath();
+    return p.slice(0, p.lastIndexOf("/"));
+}
+export async function loadConfig() {
+    try {
+        const raw = await readFile(configPath(), "utf8");
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object" || !parsed.profiles) {
+            return null;
+        }
+        return parsed;
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+}
+export async function requireConfig() {
+    const cfg = await loadConfig();
+    if (!cfg) {
+        throw new Error(`No aiGentyc config found at ${configPath()}. Run: aigentyc-mcp login --api-key <key> --project-id <id>`);
+    }
+    return cfg;
+}
+export function getActiveProfile(cfg) {
+    const profile = cfg.profiles[cfg.activeProfile];
+    if (!profile) {
+        throw new Error(`Active profile '${cfg.activeProfile}' not found. Available: ${Object.keys(cfg.profiles).join(", ") || "(none)"}`);
+    }
+    return profile;
+}
+/**
+ * Persist config with 0600 perms. Refuses to overwrite wider perms without fix.
+ */
+export async function saveConfig(cfg) {
+    const file = configPath();
+    await mkdir(configDir(), { recursive: true, mode: 0o700 });
+    await writeFile(file, JSON.stringify(cfg, null, 2), {
+        encoding: "utf8",
+        mode: 0o600,
+    });
+    await chmod(file, 0o600);
+}
+export async function assertSafePerms() {
+    const st = await stat(configPath());
+    // Only the owner should have any bits set.
+    const mode = st.mode & 0o777;
+    if ((mode & 0o077) !== 0) {
+        const file = configPath();
+        throw new Error(`Refusing to use ${file}: permissions are ${mode.toString(8)} (must be 600). Fix with: chmod 600 ${file}`);
+    }
+}
+export function upsertProfile(cfg, name, profile, makeActive) {
+    const next = cfg
+        ? { activeProfile: cfg.activeProfile, profiles: { ...cfg.profiles } }
+        : { activeProfile: name, profiles: {} };
+    next.profiles[name] = profile;
+    if (makeActive || !next.activeProfile)
+        next.activeProfile = name;
+    return next;
+}
+export { DEFAULT_BASE_URL };
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAkB3E,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC7C,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QACjD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,+BAA+B,UAAU,EAAE,6DAA6D,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAmB;IAClD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,mBAAmB,GAAG,CAAC,aAAa,2BAA2B,MAAM,CAAC,IAAI,CACxE,GAAG,CAAC,QAAQ,CACb,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAClD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACpC,2CAA2C;IAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,qBAAqB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,uCAAuC,IAAI,EAAE,CAC1G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAA0B,EAC1B,IAAY,EACZ,OAAsB,EACtB,UAAmB;IAEnB,MAAM,IAAI,GAAmB,GAAG;QAC9B,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE;QACrE,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC9B,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,10 @@
+export type McpErrorCode = "UNAUTHORIZED" | "FORBIDDEN" | "NOT_FOUND" | "VALIDATION" | "RATE_LIMITED" | "SERVER_ERROR" | "JOB_FAILED" | "NETWORK";
+export declare class AigentycError extends Error {
+    readonly code: McpErrorCode;
+    readonly status?: number | undefined;
+    readonly requestId?: string | undefined;
+    readonly details?: unknown | undefined;
+    constructor(code: McpErrorCode, message: string, status?: number | undefined, requestId?: string | undefined, details?: unknown | undefined);
+}
+export declare function httpStatusToCode(status: number): McpErrorCode;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,WAAW,GACX,WAAW,GACX,YAAY,GACZ,cAAc,GACd,cAAc,GACd,YAAY,GACZ,SAAS,CAAC;AAEd,qBAAa,aAAc,SAAQ,KAAK;aAEpB,IAAI,EAAE,YAAY;aAElB,MAAM,CAAC,EAAE,MAAM;aACf,SAAS,CAAC,EAAE,MAAM;aAClB,OAAO,CAAC,EAAE,OAAO;gBAJjB,IAAI,EAAE,YAAY,EAClC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,SAAS,CAAC,EAAE,MAAM,YAAA,EAClB,OAAO,CAAC,EAAE,OAAO,YAAA;CAKpC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAO7D"}

package/dist/errors.js

@@ -0,0 +1,28 @@
+export class AigentycError extends Error {
+    code;
+    status;
+    requestId;
+    details;
+    constructor(code, message, status, requestId, details) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.requestId = requestId;
+        this.details = details;
+        this.name = "AigentycError";
+    }
+}
+export function httpStatusToCode(status) {
+    if (status === 401)
+        return "UNAUTHORIZED";
+    if (status === 403)
+        return "FORBIDDEN";
+    if (status === 404)
+        return "NOT_FOUND";
+    if (status === 400 || status === 422)
+        return "VALIDATION";
+    if (status === 429)
+        return "RATE_LIMITED";
+    return "SERVER_ERROR";
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEpB;IAEA;IACA;IACA;IALlB,YACkB,IAAkB,EAClC,OAAe,EACC,MAAe,EACf,SAAkB,EAClB,OAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QANC,SAAI,GAAJ,IAAI,CAAc;QAElB,WAAM,GAAN,MAAM,CAAS;QACf,cAAS,GAAT,SAAS,CAAS;QAClB,YAAO,GAAP,OAAO,CAAU;QAGjC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC;IAC1D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/fs-safety.d.ts

@@ -0,0 +1,29 @@
+export declare const MAX_FILE_BYTES: number;
+export declare const MAX_BATCH_BYTES: number;
+export declare const MAX_BATCH_FILES = 500;
+/**
+ * File extensions we're willing to read as UTF-8 text and upload directly.
+ * Binary formats (pdf/doc/docx) require the extraction service, which has
+ * no dual-auth today — out of scope for v0.1.
+ */
+export declare const TEXT_EXTENSIONS: Set<string>;
+export interface SafeFileInfo {
+    path: string;
+    realPath: string;
+    fileName: string;
+    size: number;
+    extension: string;
+    mimeHint: string;
+}
+export declare class UnsafePathError extends Error {
+    readonly path: string;
+    constructor(message: string, path: string);
+}
+/**
+ * Resolve a user-supplied path and refuse anything that would escape the
+ * allowed roots (CWD, $HOME), is not a regular file, is too large, or
+ * has an extension we can't safely treat as text.
+ */
+export declare function resolveSafeFile(path: string): Promise<SafeFileInfo>;
+export declare function readTextFile(info: SafeFileInfo): Promise<string>;
+//# sourceMappingURL=fs-safety.d.ts.map

package/dist/fs-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-safety.d.ts","sourceRoot":"","sources":["../src/fs-safety.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,QAAmB,CAAC;AAC/C,eAAO,MAAM,eAAe,QAAoB,CAAC;AACjD,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;;GAIG;AACH,eAAO,MAAM,eAAe,aAiB1B,CAAC;AAMH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,eAAgB,SAAQ,KAAK;aACK,IAAI,EAAE,MAAM;gBAA7C,OAAO,EAAE,MAAM,EAAkB,IAAI,EAAE,MAAM;CAI1D;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAiDzE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAEtE"}

package/dist/fs-safety.js

@@ -0,0 +1,107 @@
+import { readFile, realpath, stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import { basename, extname, resolve, sep } from "node:path";
+export const MAX_FILE_BYTES = 50 * 1024 * 1024; // 50 MB
+export const MAX_BATCH_BYTES = 500 * 1024 * 1024; // 500 MB
+export const MAX_BATCH_FILES = 500;
+/**
+ * File extensions we're willing to read as UTF-8 text and upload directly.
+ * Binary formats (pdf/doc/docx) require the extraction service, which has
+ * no dual-auth today — out of scope for v0.1.
+ */
+export const TEXT_EXTENSIONS = new Set([
+    ".txt",
+    ".md",
+    ".markdown",
+    ".json",
+    ".jsonl",
+    ".ndjson",
+    ".csv",
+    ".tsv",
+    ".html",
+    ".htm",
+    ".rtf",
+    ".log",
+    ".yaml",
+    ".yml",
+    ".xml",
+    ".text",
+]);
+const ALLOWED_ROOTS = [process.cwd(), homedir()].map((p) => resolve(p) + (resolve(p).endsWith(sep) ? "" : sep));
+export class UnsafePathError extends Error {
+    path;
+    constructor(message, path) {
+        super(message);
+        this.path = path;
+        this.name = "UnsafePathError";
+    }
+}
+/**
+ * Resolve a user-supplied path and refuse anything that would escape the
+ * allowed roots (CWD, $HOME), is not a regular file, is too large, or
+ * has an extension we can't safely treat as text.
+ */
+export async function resolveSafeFile(path) {
+    const absolute = resolve(path);
+    let real;
+    try {
+        real = await realpath(absolute);
+    }
+    catch (err) {
+        throw new UnsafePathError(`Cannot resolve path: ${err.message}`, path);
+    }
+    const inAllowedRoot = ALLOWED_ROOTS.some((root) => (real + sep).startsWith(root));
+    if (!inAllowedRoot) {
+        throw new UnsafePathError(`Path escapes allowed roots (cwd=${process.cwd()}, home=${homedir()}): ${real}`, path);
+    }
+    const st = await stat(real);
+    if (!st.isFile()) {
+        throw new UnsafePathError(`Not a regular file: ${real}`, path);
+    }
+    if (st.size > MAX_FILE_BYTES) {
+        throw new UnsafePathError(`File exceeds ${MAX_FILE_BYTES} bytes (got ${st.size}): ${real}`, path);
+    }
+    const extension = extname(real).toLowerCase();
+    if (!TEXT_EXTENSIONS.has(extension)) {
+        throw new UnsafePathError(`Extension '${extension}' is not in the allowed text set. Binary formats (pdf/doc/docx) are not supported in v0.1.`, path);
+    }
+    return {
+        path,
+        realPath: real,
+        fileName: basename(real),
+        size: st.size,
+        extension,
+        mimeHint: guessMime(extension),
+    };
+}
+export async function readTextFile(info) {
+    return readFile(info.realPath, "utf8");
+}
+function guessMime(ext) {
+    switch (ext) {
+        case ".md":
+        case ".markdown":
+            return "text/markdown";
+        case ".json":
+        case ".jsonl":
+        case ".ndjson":
+            return "application/json";
+        case ".csv":
+            return "text/csv";
+        case ".tsv":
+            return "text/tab-separated-values";
+        case ".html":
+        case ".htm":
+            return "text/html";
+        case ".rtf":
+            return "application/rtf";
+        case ".yaml":
+        case ".yml":
+            return "application/yaml";
+        case ".xml":
+            return "application/xml";
+        default:
+            return "text/plain";
+    }
+}
+//# sourceMappingURL=fs-safety.js.map

package/dist/fs-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-safety.js","sourceRoot":"","sources":["../src/fs-safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE5D,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IAC7C,MAAM;IACN,KAAK;IACL,WAAW;IACX,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzD,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACnD,CAAC;AAWF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACK;IAA7C,YAAY,OAAe,EAAkB,IAAY;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAQ;QAEvD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,wBAAyB,GAAa,CAAC,OAAO,EAAE,EAChD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAC9B,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CACvB,mCAAmC,OAAO,CAAC,GAAG,EAAE,UAAU,OAAO,EAAE,MAAM,IAAI,EAAE,EAC/E,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CAAC,uBAAuB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CACvB,gBAAgB,cAAc,eAAe,EAAE,CAAC,IAAI,MAAM,IAAI,EAAE,EAChE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACvB,cAAc,SAAS,4FAA4F,EACnH,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;QACxB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,SAAS;QACT,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAkB;IACnD,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,WAAW;YACd,OAAO,eAAe,CAAC;QACzB,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,UAAU,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,2BAA2B,CAAC;QACrC,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC;QAC3B,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC;QAC3B;YACE,OAAO,YAAY,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { runStdioServer } from "./server.js";
+export { createClient } from "./client.js";
+export { AigentycError } from "./errors.js";
+export type { AigentycConfig, ProfileConfig, } from "./config.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EACV,cAAc,EACd,aAAa,GACd,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { runStdioServer } from "./server.js";
+export { createClient } from "./client.js";
+export { AigentycError } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}