@ambitresearch/genie 1.3.1

package/dist/tools/delete_files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete_files.d.ts","sourceRoot":"","sources":["../../src/tools/delete_files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAItD,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AACjE,eAAO,MAAM,wBAAwB,QAOA,CAAC;AAEtC;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB;;;kBAKhB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,iBAAkB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAChE,iDAAiD;IACjD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,+DAA+D;IAC/D,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,GAAG,sBAAsB,GAAG,cAAc,CAAC;AAEhG,iEAAiE;AACjE,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAEX,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAMvE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAI/D;AAgCD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,iBAAiB,CAAC,CA+F5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,CA+EhF"}

package/dist/tools/delete_files.js

@@ -0,0 +1,276 @@
+/**
+ * MCP tool: delete_files (M1-09; re-plumbed onto KitStore in M1-14a-1a / DRO-540).
+ *
+ * The plan-gated companion to `write_files`. Every requested path must be
+ * covered by a glob in the plan's `deletes` list (locked at `plan` time) —
+ * otherwise the whole call is rejected with `PathOutsidePlanError` and nothing
+ * is touched. A path that is authorized but no longer exists is NOT an error:
+ * it is recorded in `notFoundPaths` and the call still succeeds. This is the
+ * "known-good failure to silently retry past" from the research report — e.g.
+ * deleting a floor-card component's `_preview/*.html` that was never generated
+ * remotely.
+ *
+ * Plan-gating stays here (planId → `deletes` globs is a genie concept, not a
+ * store concept). The physical removal is delegated to the injected
+ * `KitStore.deleteFile`, so the SAME verb deletes from a `LocalFsKitStore` (fs
+ * unlink) or a `GitHostKitStore` (contents-API DELETE on the default branch)
+ * with identical gating and result shaping.
+ *
+ * Input:  { planId: string, paths: string[] }
+ * Output: { deletedPaths: string[], notFoundPaths: string[] }
+ *
+ * Ordering: paths are deleted longest-first so a file is always removed before
+ * any (shorter) prefix that names its containing directory — avoiding a
+ * spurious ENOTEMPTY. (Recursive directory delete is out of scope: paths must
+ * name files. A directory target surfaces as a hard `DeleteFailed` error.)
+ */
+import { isAbsolute } from "node:path";
+import { z } from "zod";
+import { withPlanGuard } from "../middleware/plan-guard.js";
+import { getPlan, pathMatchesGlobs, PlanNotFoundError } from "../plans/index.js";
+export const DELETE_FILES_TOOL_NAME = "mcp__genie__delete_files";
+export const DELETE_FILES_DESCRIPTION = "Delete kit files authorized by a plan. Every path must match a glob in " +
+    "the plan's `deletes`; an out-of-plan path rejects the whole call. A path " +
+    "that no longer exists is not an error — it is returned in `notFoundPaths`. " +
+    "Paths must name files, not directories. Requires a planId from mcp__genie__plan " +
+    "whose `deletes` globs cover every path being removed. After deletion, call " +
+    "mcp__genie__preview to recompile the manifest so the grid and list_components " +
+    "stop exposing removed components.";
+/**
+ * Authoritative argument schema. `.strict()` rejects unknown keys, and the
+ * per-item `.min(1)` guards against empty path strings. This is re-parsed
+ * inside `deleteFiles` so the same validation holds whether the tool is invoked
+ * over MCP or called directly (tests, future in-process callers).
+ */
+const deleteFilesArgsSchema = z
+    .object({
+    planId: z.string().min(1),
+    paths: z.array(z.string().min(1)).min(1),
+})
+    .strict();
+/** Structured, client-facing error for the delete_files tool. */
+export class DeleteFilesError extends Error {
+    code;
+    /** The offending path, when the error is path-specific. */
+    path;
+    constructor(code, message, path) {
+        super(message);
+        this.name = "DeleteFilesError";
+        this.code = code;
+        this.path = path;
+    }
+}
+/**
+ * Sort paths so deeper/longer paths come first. Deleting a file before the
+ * (shorter) path that names its parent directory avoids ENOTEMPTY. Length ties
+ * fall back to `localeCompare` for a deterministic order. Pure — never mutates
+ * the caller's array.
+ */
+export function sortPathsLongestFirst(paths) {
+    return [...paths].sort((a, b) => b.length !== a.length ? b.length - a.length : a.localeCompare(b));
+}
+/**
+ * True if any `/`- or `\`-separated segment is `.` or `..`.
+ *
+ * `pathMatchesGlobs` checks the RAW request string, but a store resolves it
+ * against the kit root. Those two views can disagree: a dot-segment input like
+ * `allowed/../secret.txt` matches a glob such as `allowed/../*.txt` yet resolves
+ * to `kitRoot/secret.txt` — a file the plan never meant to authorize. Rejecting
+ * any dot-segment BEFORE both the glob check and the store call makes plan
+ * gating depend only on the literal authorized path.
+ */
+function hasDotSegment(path) {
+    return path.split(/[/\\]/).some((segment) => segment === "." || segment === "..");
+}
+/**
+ * True if a kitId is path-shaped (contains a separator or a `..`). The tool no
+ * longer holds a `kitsRoot`, so it cannot re-derive the on-disk kit root to
+ * prove containment; instead it rejects a traversal-shaped kitId outright.
+ *
+ * `plan` accepts `kitId: z.string().min(1)` with no traversal guard and stores
+ * it verbatim, so a plan authored with e.g. `kitId: ".."` could otherwise make
+ * a LocalFs store resolve a kit dir OUTSIDE the kits root (defense in depth,
+ * mirroring read_file's kitId check). A store guards internally too, but this
+ * keeps the whole-call rejection at the atomic pre-flight, before anything is
+ * deleted.
+ */
+function isPathShapedKitId(kitId) {
+    return kitId.includes("/") || kitId.includes("\\") || kitId.includes("..");
+}
+/**
+ * Delete every `path` in `args.paths` from the plan's kit, subject to the
+ * plan's `deletes` allow-list.
+ *
+ * @param store The injected kit backend (M1-14a-1a / DRO-540). The concrete kit
+ *   is `plan.kitId`; the physical removal is `store.deleteFile(plan.kitId, path)`
+ *   — LocalFs unlink or git-host contents-API delete, behind one interface.
+ */
+export async function deleteFiles(store, args) {
+    // 1. Validate argument shape (AC2). A malformed planId / empty paths array is
+    //    an InvalidArguments error, never a silent no-op.
+    let parsed;
+    try {
+        parsed = deleteFilesArgsSchema.parse(args);
+    }
+    catch (error) {
+        if (error instanceof z.ZodError) {
+            throw new DeleteFilesError("InvalidArguments", error.issues[0]?.message ??
+                "Invalid arguments: expected { planId: string, paths: string[] }.");
+        }
+        throw error;
+    }
+    // 2. Resolve the plan. Unknown / expired / malformed-UUID planIds throw
+    //    PlanNotFoundError (surfaced to the client, not swallowed here).
+    const plan = await getPlan(parsed.planId);
+    // 2a. Defense in depth: a plan authored with a traversal-shaped kitId (e.g.
+    //     "..") could make a LocalFs store resolve a kit dir outside the kits
+    //     root. As the first destructive consumer, reject it before deleting
+    //     anything (mirrors read_file's kitId guard).
+    if (isPathShapedKitId(plan.kitId)) {
+        throw new DeleteFilesError("PathOutsidePlanError", `Plan kitId "${plan.kitId}" is not a valid kit identifier.`, plan.kitId);
+    }
+    // 3. De-duplicate while preserving first-seen order — a path repeated in the
+    //    request must not appear twice in the result, nor in both result arrays.
+    const uniquePaths = [...new Set(parsed.paths)];
+    // 4. Atomic pre-flight (AC3). EVERY path must both (a) match a `deletes` glob
+    //    and (b) stay inside the kit root. If any path fails, throw before
+    //    deleting anything — so an out-of-plan path can never take an in-plan
+    //    sibling down with it. The containment check is purely lexical now (the
+    //    tool holds no kits root): a relative path with no `.`/`..` segment can
+    //    never escape the kit root, and an absolute path always does.
+    for (const path of uniquePaths) {
+        // 4a. Normalize-first defense: a `.`/`..` segment lets the raw-string glob
+        //     check and the resolved delete target disagree (see hasDotSegment).
+        if (hasDotSegment(path)) {
+            throw new DeleteFilesError("PathOutsidePlanError", `Path "${path}" contains a "." or ".." segment.`, path);
+        }
+        // 4b. An absolute path escapes any kit root by definition.
+        if (isAbsolute(path)) {
+            throw new DeleteFilesError("PathOutsidePlanError", `Path "${path}" is absolute and resolves outside the kit root.`, path);
+        }
+        if (!pathMatchesGlobs(path, plan.deletes)) {
+            throw new DeleteFilesError("PathOutsidePlanError", `Path "${path}" is not covered by the plan's deletes.`, path);
+        }
+    }
+    // 5. Delete longest-first (files before their containing directories), via the
+    //    injected store. `{ existed: false }` is the AC5 silent-retry case; a hard
+    //    store error (a directory target, permission denied, …) fails the whole
+    //    call (AC6) rather than being swallowed.
+    const deleted = new Set();
+    const notFound = new Set();
+    for (const path of sortPathsLongestFirst(uniquePaths)) {
+        try {
+            const { existed } = await store.deleteFile(plan.kitId, path);
+            if (existed) {
+                deleted.add(path);
+            }
+            else {
+                notFound.add(path); // AC5 — authorized but absent: a non-error.
+            }
+        }
+        catch (error) {
+            const code = error instanceof Error && "code" in error ? String(error.code) : "unknown";
+            throw new DeleteFilesError("DeleteFailed", `Failed to delete "${path}": ${code}.`, path);
+        }
+    }
+    // 6. Report in the original (de-duplicated) request order.
+    return {
+        deletedPaths: uniquePaths.filter((path) => deleted.has(path)),
+        notFoundPaths: uniquePaths.filter((path) => notFound.has(path)),
+    };
+}
+/**
+ * Register the `mcp__genie__delete_files` tool.
+ *
+ * AC1: Tool name `mcp__genie__delete_files`.
+ * AC2: Input `{ planId: string, paths: string[] }`.
+ * AC3: Each path must match a plan `deletes` glob, else PathOutsidePlanError.
+ * AC4: Returns `deletedPaths` — what was actually removed.
+ * AC5: A missing path is a non-error, recorded in `notFoundPaths`.
+ * AC6: Other errors (permission denied, directory target, …) fail the call.
+ *
+ * Plan-boundary validation (planId presence/existence/expiry, path-vs-
+ * `deletes`-glob) runs through the M1-13 plan-guard middleware
+ * (`../middleware/plan-guard.ts`) so the write/delete verbs share one
+ * identical check. Delete-tool-specific validation (InvalidArguments shape,
+ * kitId containment, dot-segment rejection, unlink failure taxonomy) stays
+ * in `deleteFiles` itself — the guard is intentionally tool-agnostic about
+ * those.
+ */
+export function registerDeleteFilesTool(server, store) {
+    server.registerTool(DELETE_FILES_TOOL_NAME, {
+        title: "Delete files",
+        description: DELETE_FILES_DESCRIPTION,
+        inputSchema: {
+            planId: z
+                .string()
+                .describe("The planId returned by mcp__genie__plan whose `deletes` authorize these paths."),
+            paths: z
+                .array(z.string())
+                .describe("Kit-root-relative file paths to delete; each must match a `deletes` glob."),
+        },
+        // `deletedPaths` is the contract's required field (RFC §9.8); `notFoundPaths`
+        // is always populated but declared optional so `required` stays `["deletedPaths"]`.
+        outputSchema: {
+            deletedPaths: z.array(z.string()),
+            notFoundPaths: z.array(z.string()).optional(),
+        },
+    }, 
+    // M1-13 plan-vs-write guard (DRO-239). The middleware runs BEFORE the
+    // delete handler, catching PlanNotFoundError and out-of-plan paths and
+    // returning the canonical JSON-RPC `-32602` shape `{ code, message,
+    // data: { reason, planId?, path? } }`. The delete-side path-outside-
+    // plan branch below is now only reachable for a direct in-process caller
+    // (see the "deleteFiles — core behaviour" test suite), which bypasses
+    // MCP registration and this middleware with it — kept as defense-in-
+    // depth so removing the check from `deleteFiles` doesn't silently open
+    // that path for those callers.
+    withPlanGuard({ mode: "deletes", pathsKey: "paths" }, async (args) => {
+        try {
+            const result = await deleteFiles(store, args);
+            return {
+                content: [{ type: "text", text: JSON.stringify(result) }],
+                structuredContent: result,
+            };
+        }
+        catch (error) {
+            if (error instanceof DeleteFilesError) {
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                error: error.code,
+                                message: error.message,
+                                ...(error.path !== undefined ? { path: error.path } : {}),
+                            }),
+                        },
+                    ],
+                };
+            }
+            if (error instanceof PlanNotFoundError) {
+                // Ordinarily unreachable at the wire level — the M1-13 plan-guard
+                // middleware (above) catches PlanNotFoundError first. Kept as
+                // belt-and-suspenders for a future refactor that bypasses the
+                // guard or a race where a plan expires between the guard's
+                // getPlan and the core's getPlan.
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                error: "PlanNotFoundError",
+                                message: error.message,
+                                planId: error.planId,
+                            }),
+                        },
+                    ],
+                };
+            }
+            throw error; // unexpected — bubble up as an MCP internal error
+        }
+    }));
+}
+//# sourceMappingURL=delete_files.js.map

package/dist/tools/delete_files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete_files.js","sourceRoot":"","sources":["../../src/tools/delete_files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AACjE,MAAM,CAAC,MAAM,wBAAwB,GACnC,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,kFAAkF;IAClF,6EAA6E;IAC7E,gFAAgF;IAChF,mCAAmC,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAaZ,iEAAiE;AACjE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAuB;IACpC,2DAA2D;IAClD,IAAI,CAAU;IAEvB,YAAY,IAA0B,EAAE,OAAe,EAAE,IAAa;QACpE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAe;IACnD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAe,EACf,IAAqB;IAErB,8EAA8E;IAC9E,sDAAsD;IACtD,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO;gBACtB,kEAAkE,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,kDAAkD;IAClD,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,eAAe,IAAI,CAAC,KAAK,kCAAkC,EAC3D,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/C,8EAA8E;IAC9E,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,kEAAkE;IAClE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,SAAS,IAAI,mCAAmC,EAChD,IAAI,CACL,CAAC;QACJ,CAAC;QACD,2DAA2D;QAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,SAAS,IAAI,kDAAkD,EAC/D,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,SAAS,IAAI,yCAAyC,EACtD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,qBAAqB,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC7D,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,4CAA4C;YAClE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,qBAAqB,IAAI,MAAM,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7D,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,KAAe;IACxE,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE;YACX,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,CACP,gFAAgF,CACjF;YACH,KAAK,EAAE,CAAC;iBACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,CAAC,2EAA2E,CAAC;SACzF;QACD,8EAA8E;QAC9E,oFAAoF;QACpF,YAAY,EAAE;YACZ,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC9C;KACF;IACD,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,+BAA+B;IAC/B,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClE,iBAAiB,EAAE,MAAM;aAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,KAAK,EAAE,KAAK,CAAC,IAAI;gCACjB,OAAO,EAAE,KAAK,CAAC,OAAO;gCACtB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BAC1D,CAAC;yBACH;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,kEAAkE;gBAClE,8DAA8D;gBAC9D,8DAA8D;gBAC9D,2DAA2D;gBAC3D,kCAAkC;gBAClC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,KAAK,EAAE,mBAAmB;gCAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gCACtB,MAAM,EAAE,KAAK,CAAC,MAAM;6BACrB,CAAC;yBACH;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC,CAAC,kDAAkD;QACjE,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/delete_project.d.ts

@@ -0,0 +1,43 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { ProjectStore } from "./create_project.js";
+export declare const DELETE_PROJECT_TOOL_NAME = "mcp__genie__delete_project";
+export declare const ERR_PROJECT_READONLY = "ERR_PROJECT_READONLY";
+export declare const ERR_INVALID_PROJECT_ID = "ERR_INVALID_PROJECT_ID";
+declare const deleteProjectArgsSchema: z.ZodObject<{
+    projectId: z.ZodString;
+}, z.core.$strict>;
+export type DeleteProjectArgs = z.infer<typeof deleteProjectArgsSchema>;
+export interface DeleteProjectResult extends Record<string, unknown> {
+    deletedProjectId: string;
+    _meta?: {
+        warnings?: string[];
+    };
+}
+export declare class DeleteProjectError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Delete a project through the injected `ProjectStore` (M1-14a-1 / DRO-531 —
+ * the `delete_project` store-injection re-plumb).
+ *
+ * Previously this reached into the filesystem directly via a raw `projectsRoot`
+ * path + `node:fs`; it now routes through the same `ProjectStore` instance the
+ * rest of the project family (`create_project`/`get_project`/`bind_kit`/
+ * `conjure_screen`) already uses, so a non-LocalFs backend injected into
+ * `createServer` reaches this verb too. Persistence + read-only policy live in
+ * `ProjectStore.deleteProject`; this function owns only the tool's arg-shape
+ * validation and result/error shaping.
+ *
+ * Contract (unchanged from the pre-seam tool):
+ *   - Malformed / traversal `projectId` → `ERR_INVALID_PROJECT_ID`, nothing
+ *     touched (the Zod schema rejects it before the store is reached).
+ *   - Missing project → success with an idempotent "already deleted" warning.
+ *   - Read-only project → `ERR_PROJECT_READONLY`, nothing removed.
+ *   - Otherwise the project tree is removed and `deletedProjectId` returned.
+ */
+export declare function deleteProject(store: ProjectStore, args: DeleteProjectArgs): Promise<DeleteProjectResult>;
+export declare function registerDeleteProjectTool(server: McpServer, store: ProjectStore): void;
+export {};
+//# sourceMappingURL=delete_project.d.ts.map

package/dist/tools/delete_project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete_project.d.ts","sourceRoot":"","sources":["../../src/tools/delete_project.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsB,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAE1F,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAS/D,QAAA,MAAM,uBAAuB;;kBAIlB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE;QACN,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAmC9B;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CA8CtF"}

package/dist/tools/delete_project.js

@@ -0,0 +1,118 @@
+import { z } from "zod";
+import { PROJECT_ID_PATTERN, ProjectStore, ProjectStoreError } from "./create_project.js";
+export const DELETE_PROJECT_TOOL_NAME = "mcp__genie__delete_project";
+export const ERR_PROJECT_READONLY = "ERR_PROJECT_READONLY";
+export const ERR_INVALID_PROJECT_ID = "ERR_INVALID_PROJECT_ID";
+const projectIdSchema = z
+    .string()
+    .regex(PROJECT_ID_PATTERN, "projectId must be a 3-64 character slug containing only lowercase letters, numbers, and hyphens.");
+const deleteProjectArgsSchema = z
+    .object({
+    projectId: projectIdSchema,
+})
+    .strict();
+export class DeleteProjectError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "DeleteProjectError";
+        this.code = code;
+    }
+}
+/**
+ * Delete a project through the injected `ProjectStore` (M1-14a-1 / DRO-531 —
+ * the `delete_project` store-injection re-plumb).
+ *
+ * Previously this reached into the filesystem directly via a raw `projectsRoot`
+ * path + `node:fs`; it now routes through the same `ProjectStore` instance the
+ * rest of the project family (`create_project`/`get_project`/`bind_kit`/
+ * `conjure_screen`) already uses, so a non-LocalFs backend injected into
+ * `createServer` reaches this verb too. Persistence + read-only policy live in
+ * `ProjectStore.deleteProject`; this function owns only the tool's arg-shape
+ * validation and result/error shaping.
+ *
+ * Contract (unchanged from the pre-seam tool):
+ *   - Malformed / traversal `projectId` → `ERR_INVALID_PROJECT_ID`, nothing
+ *     touched (the Zod schema rejects it before the store is reached).
+ *   - Missing project → success with an idempotent "already deleted" warning.
+ *   - Read-only project → `ERR_PROJECT_READONLY`, nothing removed.
+ *   - Otherwise the project tree is removed and `deletedProjectId` returned.
+ */
+export async function deleteProject(store, args) {
+    let parsed;
+    try {
+        parsed = deleteProjectArgsSchema.parse(args);
+    }
+    catch (error) {
+        if (error instanceof z.ZodError) {
+            const issue = error.issues[0];
+            throw new DeleteProjectError(ERR_INVALID_PROJECT_ID, issue?.message ??
+                "projectId must be a 3-64 character slug containing only lowercase letters, numbers, and hyphens.");
+        }
+        throw error;
+    }
+    try {
+        const { existed } = await store.deleteProject(parsed.projectId);
+        if (!existed) {
+            return {
+                deletedProjectId: parsed.projectId,
+                _meta: {
+                    warnings: [`Project "${parsed.projectId}" does not exist or was already deleted.`],
+                },
+            };
+        }
+        return { deletedProjectId: parsed.projectId };
+    }
+    catch (error) {
+        // Translate the store's error taxonomy onto the tool's own so both direct
+        // callers and the MCP wrapper below keep branching on `DeleteProjectError`.
+        if (error instanceof ProjectStoreError && error.code === ERR_PROJECT_READONLY) {
+            throw new DeleteProjectError(ERR_PROJECT_READONLY, error.message);
+        }
+        throw error;
+    }
+}
+export function registerDeleteProjectTool(server, store) {
+    server.registerTool(DELETE_PROJECT_TOOL_NAME, {
+        title: "Delete project",
+        description: "Delete a workspace or blueprint project. Deleting a blueprint does not delete derived workspaces. " +
+            "Irreversible — confirm via get_project first if you need to check its bindings or screens before removing it.",
+        inputSchema: {
+            projectId: projectIdSchema,
+        },
+        outputSchema: {
+            deletedProjectId: z.string(),
+            _meta: z
+                .object({
+                warnings: z.array(z.string()).optional(),
+            })
+                .optional(),
+        },
+    }, async (args) => {
+        try {
+            const result = await deleteProject(store, args);
+            return {
+                content: [{ type: "text", text: JSON.stringify(result) }],
+                structuredContent: result,
+            };
+        }
+        catch (error) {
+            if (error instanceof DeleteProjectError) {
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                code: error.code,
+                                message: error.message,
+                            }),
+                        },
+                    ],
+                };
+            }
+            throw error;
+        }
+    });
+}
+//# sourceMappingURL=delete_project.js.map

package/dist/tools/delete_project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete_project.js","sourceRoot":"","sources":["../../src/tools/delete_project.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE1F,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,KAAK,CACJ,kBAAkB,EAClB,kGAAkG,CACnG,CAAC;AAEJ,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,SAAS,EAAE,eAAe;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAWZ,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAmB,EACnB,IAAuB;IAEvB,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,kBAAkB,CAC1B,sBAAsB,EACtB,KAAK,EAAE,OAAO;gBACZ,kGAAkG,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,gBAAgB,EAAE,MAAM,CAAC,SAAS;gBAClC,KAAK,EAAE;oBACL,QAAQ,EAAE,CAAC,YAAY,MAAM,CAAC,SAAS,0CAA0C,CAAC;iBACnF;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,4EAA4E;QAC5E,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC9E,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,KAAmB;IAC9E,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,oGAAoG;YACpG,+GAA+G;QACjH,WAAW,EAAE;YACX,SAAS,EAAE,eAAe;SAC3B;QACD,YAAY,EAAE;YACZ,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,KAAK,EAAE,CAAC;iBACL,MAAM,CAAC;gBACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;aACzC,CAAC;iBACD,QAAQ,EAAE;SACd;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,iBAAiB,EAAE,MAAM;aAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gCAChB,OAAO,EAAE,KAAK,CAAC,OAAO;6BACvB,CAAC;yBACH;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/get_kit.d.ts

@@ -0,0 +1,28 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import type { KitStore } from "../store/interface.js";
+export declare const GET_KIT_TOOL_NAME = "mcp__genie__get_kit";
+/** Shape every `kitId` produced by `buildKitId` (create_kit.ts) satisfies: a
+ * lowercase slug plus a 6-char hex suffix. Exported so other tools (e.g.
+ * `bind_kit`) validate against the exact same pattern instead of redeclaring it. */
+export declare const KIT_ID_PATTERN: RegExp;
+declare const getKitResultSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    type: z.ZodLiteral<"GENIE_KIT">;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+export type GetKitResult = z.infer<typeof getKitResultSchema>;
+export declare class ProjectNotFoundError extends Error {
+    readonly kitId: string;
+    constructor(kitId: string);
+}
+export declare class WrongProjectTypeError extends Error {
+    readonly kitId: string;
+    readonly actualType: string;
+    constructor(kitId: string, actualType: string);
+}
+export declare function registerGetKitTool(server: McpServer, store: KitStore): void;
+export declare function getKit(store: KitStore, args: unknown): Promise<GetKitResult>;
+export {};
+//# sourceMappingURL=get_kit.d.ts.map

package/dist/tools/get_kit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_kit.d.ts","sourceRoot":"","sources":["../../src/tools/get_kit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAW,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAG/D,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AAEvD;;oFAEoF;AACpF,eAAO,MAAM,cAAc,QAAsB,CAAC;AAQlD,QAAA,MAAM,kBAAkB;;;;;kBAOb,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;CAInC;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAE5C,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM;gBADlB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM;CAK9B;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,CAqC3E;AAED,wBAAsB,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAoBlF"}

package/dist/tools/get_kit.js

@@ -0,0 +1,95 @@
+import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
+import { z } from "zod";
+import { NotFoundError, KIT_TYPE } from "../store/interface.js";
+export const GET_KIT_TOOL_NAME = "mcp__genie__get_kit";
+/** Shape every `kitId` produced by `buildKitId` (create_kit.ts) satisfies: a
+ * lowercase slug plus a 6-char hex suffix. Exported so other tools (e.g.
+ * `bind_kit`) validate against the exact same pattern instead of redeclaring it. */
+export const KIT_ID_PATTERN = /^[a-z0-9-]{3,64}$/;
+const getKitArgsSchema = z
+    .object({
+    kitId: z.string().regex(KIT_ID_PATTERN),
+})
+    .strict();
+const getKitResultSchema = z
+    .object({
+    id: z.string(),
+    name: z.string(),
+    type: z.literal(KIT_TYPE),
+    createdAt: z.string(),
+})
+    .strict();
+export class ProjectNotFoundError extends Error {
+    kitId;
+    constructor(kitId) {
+        super(`Project "${kitId}" was not found.`);
+        this.kitId = kitId;
+        this.name = "ProjectNotFoundError";
+    }
+}
+export class WrongProjectTypeError extends Error {
+    kitId;
+    actualType;
+    constructor(kitId, actualType) {
+        super(`Project "${kitId}" is "${actualType}", not "${KIT_TYPE}".`);
+        this.kitId = kitId;
+        this.actualType = actualType;
+        this.name = "WrongProjectTypeError";
+    }
+}
+export function registerGetKitTool(server, store) {
+    server.registerTool(GET_KIT_TOOL_NAME, {
+        title: "Get kit",
+        description: "Return metadata for one writable UI kit and verify the kitId resolves to a GENIE_KIT. " +
+            "Useful to confirm a kitId (e.g. from list_kits) is valid and writable before " +
+            "generating or binding against it.",
+        inputSchema: {
+            kitId: z.string().regex(KIT_ID_PATTERN),
+        },
+        outputSchema: {
+            id: z.string(),
+            name: z.string(),
+            type: z.literal(KIT_TYPE),
+            createdAt: z.string(),
+        },
+    }, async (args) => {
+        try {
+            const result = await getKit(store, args);
+            return {
+                content: [{ type: "text", text: JSON.stringify(result) }],
+                structuredContent: result,
+            };
+        }
+        catch (error) {
+            if (error instanceof ProjectNotFoundError || error instanceof WrongProjectTypeError) {
+                throw new McpError(ErrorCode.InvalidParams, error.name, {
+                    code: error.name,
+                    message: error.message,
+                });
+            }
+            throw error;
+        }
+    });
+}
+export async function getKit(store, args) {
+    const { kitId } = getKitArgsSchema.parse(args);
+    let kit;
+    try {
+        kit = await store.getKit(kitId);
+    }
+    catch (error) {
+        if (error instanceof NotFoundError)
+            throw new ProjectNotFoundError(kitId);
+        throw error;
+    }
+    if (kit.type !== KIT_TYPE) {
+        throw new WrongProjectTypeError(kitId, kit.type);
+    }
+    return getKitResultSchema.parse({
+        id: kit.id,
+        name: kit.name,
+        type: KIT_TYPE,
+        createdAt: kit.createdAt,
+    });
+}
+//# sourceMappingURL=get_kit.js.map

package/dist/tools/get_kit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_kit.js","sourceRoot":"","sources":["../../src/tools/get_kit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEvD;;oFAEoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAElD,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACxB;IAArB,YAAqB,KAAa;QAChC,KAAK,CAAC,YAAY,KAAK,kBAAkB,CAAC,CAAC;QADxB,UAAK,GAAL,KAAK,CAAQ;QAEhC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAEnC;IACA;IAFX,YACW,KAAa,EACb,UAAkB;QAE3B,KAAK,CAAC,YAAY,KAAK,SAAS,UAAU,WAAW,QAAQ,IAAI,CAAC,CAAC;QAH1D,UAAK,GAAL,KAAK,CAAQ;QACb,eAAU,GAAV,UAAU,CAAQ;QAG3B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,KAAe;IACnE,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,SAAS;QAChB,WAAW,EACT,wFAAwF;YACxF,+EAA+E;YAC/E,mCAAmC;QACrC,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;SACxC;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;SACtB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,iBAAiB,EAAE,MAAM;aAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBACpF,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE;oBACtD,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAe,EAAE,IAAa;IACzD,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/get_project.d.ts

@@ -0,0 +1,37 @@
+/**
+ * MCP tool: get_project (M1-17).
+ *
+ * Metadata read for a single workspace or blueprint project manifest.
+ * Blueprints are returned through the same shape (`kind: "blueprint"`) — there is
+ * no special-case tool family for them (AC4).
+ *
+ * Input:  { projectId: string }
+ * Output: ProjectSummary & { screens: ProjectScreen[]; sourceBlueprintId?: string }
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import type { ProjectDetail } from "./create_project.js";
+export declare const GET_PROJECT_TOOL_NAME = "mcp__genie__get_project";
+/** Error code raised when `projectId` does not resolve to an existing project. */
+export declare const ERR_PROJECT_NOT_FOUND: "ERR_PROJECT_NOT_FOUND";
+declare const getProjectArgsSchema: z.ZodObject<{
+    projectId: z.ZodString;
+}, z.core.$strict>;
+export type GetProjectArgs = z.infer<typeof getProjectArgsSchema>;
+/**
+ * Narrow port `get_project` depends on — anything that can resolve a single
+ * project's full detail. `ProjectStore` (from `create_project.ts`) satisfies this
+ * structurally, matching the `ProjectListStore` pattern already used by `list_projects`.
+ */
+export interface ProjectGetStore {
+    getProject(projectId: string): Promise<ProjectDetail>;
+}
+/**
+ * Validate args and fetch project detail. Exported standalone (bypassing the MCP
+ * transport) so programmatic/direct callers get the same validation defense-in-depth
+ * as `list_files`' `listFiles()` and `get_kit`'s `getKit()`.
+ */
+export declare function getProject(store: ProjectGetStore, args: unknown): Promise<ProjectDetail>;
+export declare function registerGetProjectTool(server: McpServer, store: ProjectGetStore): void;
+export {};
+//# sourceMappingURL=get_project.d.ts.map

package/dist/tools/get_project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_project.d.ts","sourceRoot":"","sources":["../../src/tools/get_project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAE/D,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,EAAG,uBAAgC,CAAC;AAStE,QAAA,MAAM,oBAAoB;;kBAIf,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAYlE;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACvD;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,aAAa,CAAC,CAIxB;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,IAAI,CA0CtF"}