@ambitresearch/genie 1.3.1

package/dist/tools/write_files.js

@@ -0,0 +1,541 @@
+/**
+ * MCP tool: write_files (M1-08; re-plumbed onto KitStore in M1-14a-1b / DRO-565).
+ *
+ * Writes up to 256 files per call into a KIT (the plan's `kitId` — the same
+ * readable surface `read_file`/`list_files`/`delete_files` see). Every `path`
+ * must match at least one glob in the plan's `writes`; the plan is resolved via
+ * `planId` against the M1-07 plan registry (`../plans/index.ts`), which must be
+ * live (exists + not expired).
+ *
+ * Each file is sourced from exactly one of:
+ *   - `localPath` — resolved against the plan's `localDir` (the harness-local
+ *     SOURCE base); the server reads the bytes directly from disk, so file
+ *     contents never enter model context (the whole point of the localPath
+ *     indirection). Note the split of roles: `localDir` is where uploads are
+ *     READ FROM; the kit is where they are WRITTEN TO.
+ *   - `data` — inline content (utf-8 or base64, per `encoding`), for content
+ *     the caller only has in-memory (e.g. LLM-generated text).
+ *
+ * ── Store re-plumb (DRO-565) ─────────────────────────────────────────────────
+ * This tool used to own an fs-native rename-to-temp/rename-back transaction and
+ * wrote straight into `plan.localDir`. That transaction now lives behind the
+ * `KitStore.writeFiles(kitId, ops)` primitive (`store/interface.ts`), so the
+ * SAME verb runs against `LocalFsKitStore` (disk, rename transaction) or
+ * `GitHostKitStore` (contents-API commit on a branch) with the AC10 atomicity +
+ * rollback contract preserved. The tool keeps ALL plan-gating and per-file
+ * validation (planId, writes-glob membership, duplicate rejection, localPath
+ * containment + streaming decision, byte cap, encoding) and hands the store a
+ * resolved `WriteOp[]` — mirroring how `delete_files` keeps `deletes`-glob
+ * gating tool-side and calls `store.deleteFile(plan.kitId, path)`.
+ *
+ * The atomicity/streaming/rollback semantics themselves are documented on the
+ * `KitStore.writeFiles` primitive and its two adapters; this file is now the
+ * validation + wire-error-shaping layer in front of them.
+ */
+import { stat } from "node:fs/promises";
+import { isAbsolute, resolve } from "node:path";
+import { z } from "zod";
+import { withPlanGuard } from "../middleware/plan-guard.js";
+import { getPlan, isPathInsideLocalDir, pathMatchesGlobs, PlanNotFoundError, } from "../plans/index.js";
+import { RollbackIncompleteError, WriteFailedError } from "../store/interface.js";
+import { isValidBase64Content } from "../store/kit-files.js";
+export const WRITE_FILES_TOOL_NAME = "mcp__genie__write_files";
+/** M1-08 AC3 — hard ceiling on files per call. */
+export const MAX_FILES_PER_CALL = 256;
+/**
+ * Byte-cap for a single `write_files` call's total decoded payload.
+ *
+ * RFC §17.5 flags Anthropic's exact server-side cap as unconfirmed for their
+ * hosted endpoint; PRD §EC-029 sets genie's own default at 16 MiB with a
+ * configurable ceiling. `GENIE_WRITE_BYTE_CAP` overrides the default; values
+ * that are non-numeric or ≤ 0 fall back to it.
+ */
+export const DEFAULT_WRITE_BYTE_CAP = 16 * 1024 * 1024;
+function resolveByteCap(env) {
+    const raw = env["GENIE_WRITE_BYTE_CAP"];
+    if (raw === undefined)
+        return DEFAULT_WRITE_BYTE_CAP;
+    const n = Number(raw);
+    return Number.isFinite(n) && n > 0 ? n : DEFAULT_WRITE_BYTE_CAP;
+}
+// ─── write_files' own error taxonomy ─────────────────────────────────────────
+//
+// Repo convention (see ListFilesError in tools/list_files.ts, ProjectStoreError
+// in tools/create_project.ts): each tool owns its error classes colocated in
+// its own file rather than a shared cross-tool errors module. The one
+// plan-layer error this tool can also see — PlanNotFoundError — is imported
+// from `../plans/index.ts` instead of redefined here.
+/** M1-08 AC3 — more than 256 files were supplied to `write_files` in one call. */
+export class TooManyFilesError extends Error {
+    count;
+    max;
+    code = "TooManyFilesError";
+    constructor(count, max) {
+        super(`write_files accepts at most ${max} files per call; received ${count}.`);
+        this.count = count;
+        this.max = max;
+        this.name = "TooManyFilesError";
+    }
+}
+/**
+ * Two or more files in the same call target the same `path` (Copilot review
+ * finding on PR #106). Without this check, `resolvedLocalPaths` — keyed by
+ * `file.path` — would silently drop all but the last entry's `localPath`
+ * (so an earlier duplicate would stage the WRONG file's bytes), and
+ * `writtenPaths` would list the same path twice as if two distinct files had
+ * been written, when in fact whichever entry committed last (an unspecified,
+ * input-order-dependent race between the two renames) is the only one that
+ * survives. Rejected up front, before any per-file validation, so partial
+ * ambiguity is never staged.
+ */
+export class DuplicatePathError extends Error {
+    path;
+    code = "DuplicatePathError";
+    constructor(path) {
+        super(`Path "${path}" appears more than once in this write_files call; every path must be unique.`);
+        this.path = path;
+        this.name = "DuplicatePathError";
+    }
+}
+/**
+ * M1-08 AC4 — a file's `path` is rejected by the plan boundary: either it
+ * doesn't match any glob in the plan's `writes` (`reason: "glob"`), or it
+ * resolves outside the plan's `localDir` even though a glob DID match
+ * (`reason: "escapesLocalDir"` — e.g. an absolute path under a permissive
+ * `**`; see the containment check in `writeFiles`). Both failure modes share
+ * one error class/code (`PathOutsidePlanError`) so callers can branch on a
+ * single `code`, but the message and `reason` field distinguish them —
+ * a Copilot review finding on PR #106 flagged the message as misleadingly
+ * glob-specific even when the actual cause was the containment check.
+ */
+export class PathOutsidePlanError extends Error {
+    path;
+    reason;
+    code = "PathOutsidePlanError";
+    constructor(path, reason = "glob") {
+        super(reason === "escapesLocalDir"
+            ? `Path "${path}" resolves outside the plan's localDir, even though it may match a writes pattern.`
+            : `Path "${path}" does not match any pattern in the plan's writes.`);
+        this.path = path;
+        this.reason = reason;
+        this.name = "PathOutsidePlanError";
+    }
+}
+/** M1-08 AC6 — a file's `localPath` resolves outside the plan's `localDir`. */
+export class LocalPathEscapeError extends Error {
+    localPath;
+    localDir;
+    code = "LocalPathEscapeError";
+    constructor(localPath, localDir) {
+        super(`localPath "${localPath}" resolves outside the plan's localDir "${localDir}".`);
+        this.localPath = localPath;
+        this.localDir = localDir;
+        this.name = "LocalPathEscapeError";
+    }
+}
+/** M1-08 AC7 — a file set neither `localPath` nor `data`, or set both. */
+export class InvalidFileInputError extends Error {
+    path;
+    code = "InvalidFileInputError";
+    constructor(path, reason) {
+        super(reason === "both"
+            ? `File "${path}" set both localPath and data; exactly one is required.`
+            : `File "${path}" set neither localPath nor data; exactly one is required.`);
+        this.path = path;
+        this.name = "InvalidFileInputError";
+    }
+}
+/** M1-08 AC7 — `data` was not valid base64 when `encoding: "base64"` was declared. */
+export class InvalidEncodingError extends Error {
+    path;
+    code = "InvalidEncodingError";
+    constructor(path) {
+        super(`File "${path}" declared encoding "base64" but data is not valid base64.`);
+        this.path = path;
+        this.name = "InvalidEncodingError";
+    }
+}
+/** M1-08 AC9 — the call's total decoded byte size exceeds the configured cap. */
+export class PayloadTooLargeError extends Error {
+    totalBytes;
+    maxBytes;
+    retryMaxFiles;
+    code = "PayloadTooLargeError";
+    constructor(totalBytes, maxBytes, retryMaxFiles) {
+        super(`write_files payload is ${totalBytes} bytes, exceeding the ${maxBytes} byte cap. ` +
+            "Halve the file count and retry.");
+        this.totalBytes = totalBytes;
+        this.maxBytes = maxBytes;
+        this.retryMaxFiles = retryMaxFiles;
+        this.name = "PayloadTooLargeError";
+    }
+}
+/**
+ * AC10 write-failure taxonomy now lives in the store layer (`store/interface.ts`),
+ * because the store owns the atomic write transaction after the DRO-565 re-plumb.
+ * Re-exported here so existing importers of these names from `write_files.js`
+ * (tests, in-process callers) keep resolving them.
+ */
+export { RollbackIncompleteError, WriteFailedError } from "../store/interface.js";
+// ─── Input/output shapes ─────────────────────────────────────────────────────
+const fileInputSchema = z
+    .object({
+    path: z
+        .string()
+        .min(1)
+        .describe("Project-relative path to write, matched against the plan's writes globs"),
+    localPath: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Path on disk to read content from, resolved against the plan's localDir"),
+    data: z
+        .string()
+        .optional()
+        .describe("Inline content — utf-8 text, or base64 when encoding is base64"),
+    encoding: z
+        .enum(["utf-8", "base64"])
+        .optional()
+        .describe('Encoding of `data`. Defaults to "utf-8".'),
+    mimeType: z.string().optional().describe("Optional MIME type hint (not currently persisted)"),
+})
+    .describe("A single file to write: exactly one of localPath or data must be set");
+const writeFilesInputSchema = {
+    planId: z.string().min(1).describe("planId returned by a prior plan call"),
+    files: z.array(fileInputSchema).describe("Files to write (max 256 per call)"),
+};
+const writeFilesOutputSchema = {
+    writtenPaths: z.array(z.string()).describe("Paths written, in the same order as the input"),
+};
+/** Structured tool-error payload shape shared by every branch below. */
+function toolError(payload) {
+    return {
+        isError: true,
+        content: [{ type: "text", text: JSON.stringify(payload) }],
+    };
+}
+/**
+ * Register the `mcp__genie__write_files` tool.
+ *
+ * @param server   The MCP server to register against. `planId`/`writes` are
+ *                 validated against the shared M1-07 plan registry
+ *                 (`../plans/index.ts`) via the M1-13 plan-guard middleware
+ *                 (`../middleware/plan-guard.ts`) — the guard owns AC5's planId
+ *                 presence/existence/expiry checks and AC4's path-vs-`writes`-
+ *                 glob check; this file's own remaining validation covers
+ *                 per-file structural rules (duplicates, localPath containment,
+ *                 encoding, byte cap) that the guard is intentionally
+ *                 tool-agnostic about.
+ * @param kitStore The injected kit backend (M1-14a-1b / DRO-565). The physical
+ *                 write is `kitStore.writeFiles(plan.kitId, ops)` — the kit is
+ *                 the destination (same surface read_file/list_files see), and
+ *                 the atomic rename-transaction (LocalFs) / contents-API commit
+ *                 (GitHost) lives behind that primitive. Mirrors how
+ *                 `registerDeleteFilesTool(server, kitStore)` routes deletes.
+ */
+export function registerWriteFilesTool(server, kitStore) {
+    server.registerTool(WRITE_FILES_TOOL_NAME, {
+        title: "Write files",
+        description: "Write up to 256 files per call into the plan's kit. Every path must match a " +
+            "glob in the plan's writes. Reads content from localPath (resolved against the " +
+            "plan's localDir, the local SOURCE base) so file contents never enter model " +
+            "context, or from inline data for in-memory content. Atomic per call — if any " +
+            "file fails, nothing is written. Requires a planId from mcp__genie__plan covering " +
+            "every path being written; call preview afterwards to show the result.",
+        inputSchema: writeFilesInputSchema,
+        outputSchema: writeFilesOutputSchema,
+    }, 
+    // M1-13 plan-vs-write guard (DRO-239). The middleware validates planId
+    // presence/existence/expiry and every file path against the plan's writes
+    // globs BEFORE the handler runs, so the four verbs share one identical
+    // plan-boundary check. Rejections surface as the canonical JSON-RPC
+    // `-32602` shape and are audit-logged as `plan.guard.reject`. The guard
+    // hands the resolved plan through in `ctx.plan`, so the handler reaches
+    // `plan.kitId` (write destination) and `plan.localDir` (localPath source
+    // base) without a second getPlan hit.
+    //
+    // The core `writeFiles(store, plan, args)` still performs the same plan
+    // check as defense-in-depth (a direct in-process caller — see the
+    // "writeFiles (core logic)" test suite — bypasses the MCP layer and this
+    // middleware with it), so removing the checks from the core would silently
+    // open a gap for those callers.
+    withPlanGuard({ mode: "writes" }, async (args) => {
+        try {
+            const result = await writeFiles(kitStore, args);
+            return {
+                content: [{ type: "text", text: JSON.stringify(result) }],
+                structuredContent: result,
+            };
+        }
+        catch (error) {
+            if (error instanceof TooManyFilesError) {
+                // AC3 — plain structured error; no retry-hint contract specified
+                // for the file-count ceiling (that's AC9's byte-cap path, below).
+                return toolError({
+                    code: "TooManyFilesError",
+                    message: error.message,
+                    count: error.count,
+                    max: error.max,
+                });
+            }
+            if (error instanceof PayloadTooLargeError) {
+                // AC9 — literal contract: "return HTTP-equivalent error code -32099
+                // with { retryWith: { maxFiles: <half> } } in data". That's the
+                // shape of a JSON-RPC error object ({ code, message, data }), which
+                // this mirrors exactly. Note this issue's AC9 and RFC §6.2's error
+                // taxonomy disagree on the number — the RFC assigns byte-cap
+                // overflow to genie.byteCapExceeded (-32031) and reserves -32099
+                // for genie.internal (unanticipated errors). This implements AC9's
+                // literal number as written (the graded contract for this issue)
+                // and flags the discrepancy in the PR description for the
+                // maintainer to reconcile.
+                return toolError({
+                    code: -32099,
+                    message: error.message,
+                    data: {
+                        retryWith: { maxFiles: error.retryMaxFiles },
+                        totalBytes: error.totalBytes,
+                        maxBytes: error.maxBytes,
+                    },
+                });
+            }
+            if (error instanceof PlanNotFoundError) {
+                // Ordinarily unreachable at the wire level — the M1-13 plan-guard
+                // middleware (above) catches PlanNotFoundError first and returns
+                // the canonical -32602 shape. Kept as a belt-and-suspenders branch
+                // in case `writeFiles` throws it from a code path the middleware
+                // didn't traverse (e.g. a future refactor that bypasses the guard,
+                // or a race where a plan expires between the guard's getPlan and
+                // the core's getPlan). Behaviour matches shipped M1-07: same
+                // PlanNotFoundError for "never existed" and "expired".
+                return toolError({
+                    code: "PlanNotFoundError",
+                    message: error.message,
+                    planId: error.planId,
+                });
+            }
+            if (error instanceof RollbackIncompleteError) {
+                // AC10's rollback guarantee could not be fully honored — this is
+                // more severe than a plain WriteFailedError (which promises a
+                // clean, fully-restored tree), so it gets its own code rather than
+                // being silently folded into that message.
+                return toolError({
+                    code: "RollbackIncompleteError",
+                    message: error.message,
+                    commitError: error.commitError,
+                    rollbackFailures: error.rollbackFailures,
+                });
+            }
+            if (error instanceof PathOutsidePlanError ||
+                error instanceof LocalPathEscapeError ||
+                error instanceof InvalidFileInputError ||
+                error instanceof InvalidEncodingError ||
+                error instanceof WriteFailedError ||
+                error instanceof DuplicatePathError) {
+                return toolError({ code: error.code, message: error.message, ...errorFields(error) });
+            }
+            throw error;
+        }
+    }));
+}
+/** Extra structured fields per own-error-type, beyond `code`/`message` (for client consumption). */
+function errorFields(error) {
+    if (error instanceof PathOutsidePlanError)
+        return { path: error.path, reason: error.reason };
+    if (error instanceof LocalPathEscapeError)
+        return { localPath: error.localPath, localDir: error.localDir };
+    if (error instanceof InvalidFileInputError)
+        return { path: error.path };
+    if (error instanceof InvalidEncodingError)
+        return { path: error.path };
+    if (error instanceof DuplicatePathError)
+        return { path: error.path };
+    return { path: error.path, cause: error.cause }; // WriteFailedError
+}
+/**
+ * Validate + execute a `write_files` call against a resolved plan, committing
+ * the batch into the plan's KIT via the injected store.
+ *
+ * Order of validation (fails fast, before any write) — keep this list in
+ * lockstep with the code below; downstream steps assume every prior step has
+ * passed (e.g. the `resolvedLocalPaths` map keyed by `file.path` assumes step 3
+ * rejected duplicates):
+ *   1. AC5           — planId exists + not expired (`getPlan`, from the M1-07
+ *                      plan registry — throws `PlanNotFoundError` for either
+ *                      failure mode).
+ *   2. AC3           — `files.length <= 256`.
+ *   3. Structural    — no two `files[]` entries share the same destination
+ *                      `path` (`DuplicatePathError`; Copilot review finding
+ *                      on PR #106).
+ *   4. AC4           — every `path` matches a plan `writes` glob.
+ *   5. Security      — every destination `path` is kit-relative and contained
+ *                      (no absolute path, no `..`/`.` segment). Destinations
+ *                      resolve against the KIT now (not `localDir`), so this is
+ *                      a lexical containment check (`PathOutsidePlanError` with
+ *                      `reason: "escapesLocalDir"`; RFC §10 T-13). The store
+ *                      re-checks via `safePath` as defense-in-depth.
+ *   6. AC7           — every file sets exactly one of `localPath` / `data`.
+ *   7. AC6           — every `localPath` resolves inside the plan's `localDir`
+ *                      (the SOURCE base — where uploads are read from).
+ *   8. AC9           — total decoded payload size <= the configured byte cap.
+ * Only once every file in the batch passes is the batch handed to
+ * `store.writeFiles(plan.kitId, ops)` for the atomic commit (AC10).
+ *
+ * @param store The injected kit backend. The destination is `plan.kitId`; the
+ *   physical atomic write (rename transaction on LocalFs / contents-API commit
+ *   on GitHost) lives behind `store.writeFiles`, so this function is now purely
+ *   validation + WriteOp assembly.
+ */
+export async function writeFiles(store, args, env = process.env) {
+    // AC5 — planId must exist and be unexpired. Propagates PlanNotFoundError as-is.
+    const plan = await getPlan(args.planId);
+    // AC3 — file-count ceiling, before any per-file validation.
+    if (args.files.length > MAX_FILES_PER_CALL) {
+        throw new TooManyFilesError(args.files.length, MAX_FILES_PER_CALL);
+    }
+    // Structural check (Copilot review finding on PR #106): reject duplicate
+    // destination `path`s before any per-file validation depends on paths
+    // being unique. `resolvedLocalPaths` below is keyed by `file.path` — a
+    // second entry with the same path would silently overwrite the first's
+    // resolved `localPath` source, and `writtenPaths` would otherwise list the
+    // same path twice as if two distinct files had committed.
+    const seenPaths = new Set();
+    for (const file of args.files) {
+        if (seenPaths.has(file.path)) {
+            throw new DuplicatePathError(file.path);
+        }
+        seenPaths.add(file.path);
+    }
+    // AC4 — every path must match the plan's writes globs.
+    for (const file of args.files) {
+        if (!pathMatchesGlobs(file.path, plan.writes)) {
+            throw new PathOutsidePlanError(file.path);
+        }
+    }
+    // Security (Copilot review finding on PR #106; RFC §10 T-13 — "Path
+    // traversal in write_files overwrites /etc/passwd"): a glob match alone does
+    // NOT guarantee the destination stays inside the kit — an absolute path like
+    // "/etc/passwd" matches a permissive glob such as `**` under micromatch, and
+    // resolving it against a kit root would escape. Post-re-plumb the destination
+    // is the KIT (not `localDir`), and the store's `safePath` will reject an
+    // escape too — but we reject up front so the whole call fails before any
+    // WriteOp is built, keeping the all-or-nothing guarantee at the tool
+    // boundary. The check is now purely lexical (kit-relative, no `.`/`..`
+    // segment, not absolute) since the tool no longer holds a concrete kit root.
+    for (const file of args.files) {
+        if (!isKitRelativeContained(file.path)) {
+            throw new PathOutsidePlanError(file.path, "escapesLocalDir");
+        }
+    }
+    // AC7 — exactly one of localPath/data per file.
+    for (const file of args.files) {
+        const hasLocalPath = file.localPath !== undefined;
+        const hasData = file.data !== undefined;
+        if (hasLocalPath && hasData) {
+            throw new InvalidFileInputError(file.path, "both");
+        }
+        if (!hasLocalPath && !hasData) {
+            throw new InvalidFileInputError(file.path, "missing");
+        }
+        if (hasData && file.encoding === "base64" && !isValidBase64Content(file.data)) {
+            throw new InvalidEncodingError(file.path);
+        }
+    }
+    // AC6 — every localPath must resolve inside the plan's localDir (the SOURCE
+    // base). Resolve once up front (rather than re-resolving during the WriteOp
+    // build) so this check and the actual read always agree on the same absolute
+    // path. isPathInsideLocalDir(path, localDir) does its own resolution of
+    // `path` against `localDir` (correctly anchoring a relative localPath there,
+    // rather than against process.cwd()) — see plans/index.ts.
+    const resolvedLocalPaths = new Map();
+    for (const file of args.files) {
+        if (file.localPath === undefined)
+            continue;
+        if (!isPathInsideLocalDir(file.localPath, plan.localDir)) {
+            throw new LocalPathEscapeError(file.localPath, plan.localDir);
+        }
+        resolvedLocalPaths.set(file.path, resolve(plan.localDir, file.localPath));
+    }
+    // AC9 — total decoded byte-size cap, checked before any write lands.
+    const maxBytes = resolveByteCap(env);
+    let totalBytes = 0;
+    for (const file of args.files) {
+        if (file.data !== undefined) {
+            totalBytes += byteLengthOf(file.data, file.encoding ?? "utf-8");
+        }
+        else {
+            const localPath = resolvedLocalPaths.get(file.path);
+            if (localPath !== undefined) {
+                totalBytes += await sizeOf(localPath, file.path);
+            }
+        }
+    }
+    if (totalBytes > maxBytes) {
+        throw new PayloadTooLargeError(totalBytes, maxBytes, Math.max(1, Math.floor(args.files.length / 2)));
+    }
+    // Build the resolved WriteOp[] — inline `data` becomes `{ path, content }`,
+    // a `localPath` becomes `{ path, sourcePath }` (the store STREAMS from it, so
+    // a large upload never fully buffers here). Then hand the batch to the store
+    // for the atomic commit into the kit (AC10).
+    const ops = args.files.map((file) => {
+        if (file.localPath !== undefined) {
+            const sourcePath = resolvedLocalPaths.get(file.path);
+            if (sourcePath === undefined) {
+                // Unreachable: every localPath file populated the map above.
+                throw new WriteFailedError(file.path, "internal: unresolved localPath");
+            }
+            return { path: file.path, sourcePath };
+        }
+        return {
+            path: file.path,
+            content: decodeData(file.data, file.encoding ?? "utf-8", file.path),
+        };
+    });
+    return store.writeFiles(plan.kitId, ops);
+}
+/** Decoded byte length of inline `data`, without materializing extra copies for utf-8. */
+function byteLengthOf(data, encoding) {
+    if (encoding === "base64") {
+        // Base64 expands 3 bytes -> 4 chars; strip padding for an exact count.
+        const padding = data.endsWith("==") ? 2 : data.endsWith("=") ? 1 : 0;
+        return Math.floor((data.length * 3) / 4) - padding;
+    }
+    return Buffer.byteLength(data, "utf-8");
+}
+async function sizeOf(localPath, publicPath) {
+    try {
+        const info = await stat(localPath);
+        return info.size;
+    }
+    catch (error) {
+        throw new WriteFailedError(publicPath, describeError(error, "source file not found"));
+    }
+}
+/**
+ * True if a destination `path` is a safe kit-relative path: not absolute, and
+ * with no `.`/`..` segment (on either separator). Post-re-plumb the destination
+ * is the kit (the tool holds no concrete kit root), so containment is a lexical
+ * check — a relative path with no dot-segment can never escape the kit root the
+ * store resolves it against, and an absolute path always does. The store's
+ * `safePath` re-verifies as defense-in-depth. Mirrors delete_files' own
+ * kit-relative path guard.
+ */
+function isKitRelativeContained(path) {
+    if (isAbsolute(path))
+        return false;
+    return !path.split(/[/\\]/).some((seg) => seg === "." || seg === "..");
+}
+function decodeData(data, encoding, path) {
+    try {
+        return Buffer.from(data, encoding === "base64" ? "base64" : "utf-8");
+    }
+    catch (error) {
+        throw new WriteFailedError(path, describeError(error, "invalid data encoding"));
+    }
+}
+function describeError(error, fallback) {
+    if (error instanceof Error)
+        return error.message;
+    return fallback;
+}
+//# sourceMappingURL=write_files.js.map

package/dist/tools/write_files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write_files.js","sourceRoot":"","sources":["../../src/tools/write_files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,OAAO,EACP,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE/D,kDAAkD;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvD,SAAS,cAAc,CAAC,GAAuC;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC;IACrD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAClE,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,sEAAsE;AACtE,4EAA4E;AAC5E,sDAAsD;AAEtD,kFAAkF;AAClF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAG/B;IACA;IAHF,IAAI,GAAG,mBAAmB,CAAC;IACpC,YACW,KAAa,EACb,GAAW;QAEpB,KAAK,CAAC,+BAA+B,GAAG,6BAA6B,KAAK,GAAG,CAAC,CAAC;QAHtE,UAAK,GAAL,KAAK,CAAQ;QACb,QAAG,GAAH,GAAG,CAAQ;QAGpB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEtB;IADZ,IAAI,GAAG,oBAAoB,CAAC;IACrC,YAAqB,IAAY;QAC/B,KAAK,CACH,SAAS,IAAI,+EAA+E,CAC7F,CAAC;QAHiB,SAAI,GAAJ,IAAI,CAAQ;QAI/B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAGlC;IACA;IAHF,IAAI,GAAG,sBAAsB,CAAC;IACvC,YACW,IAAY,EACZ,SAAqC,MAAM;QAEpD,KAAK,CACH,MAAM,KAAK,iBAAiB;YAC1B,CAAC,CAAC,SAAS,IAAI,oFAAoF;YACnG,CAAC,CAAC,SAAS,IAAI,oDAAoD,CACtE,CAAC;QAPO,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAqC;QAOpD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAGlC;IACA;IAHF,IAAI,GAAG,sBAAsB,CAAC;IACvC,YACW,SAAiB,EACjB,QAAgB;QAEzB,KAAK,CAAC,cAAc,SAAS,2CAA2C,QAAQ,IAAI,CAAC,CAAC;QAH7E,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAGzB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAGnC;IAFF,IAAI,GAAG,uBAAuB,CAAC;IACxC,YACW,IAAY,EACrB,MAA0B;QAE1B,KAAK,CACH,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,SAAS,IAAI,yDAAyD;YACxE,CAAC,CAAC,SAAS,IAAI,4DAA4D,CAC9E,CAAC;QAPO,SAAI,GAAJ,IAAI,CAAQ;QAQrB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAExB;IADZ,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAqB,IAAY;QAC/B,KAAK,CAAC,SAAS,IAAI,4DAA4D,CAAC,CAAC;QAD9D,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAGlC;IACA;IACA;IAJF,IAAI,GAAG,sBAAsB,CAAC;IACvC,YACW,UAAkB,EAClB,QAAgB,EAChB,aAAqB;QAE9B,KAAK,CACH,0BAA0B,UAAU,yBAAyB,QAAQ,aAAa;YAChF,iCAAiC,CACpC,CAAC;QAPO,eAAU,GAAV,UAAU,CAAQ;QAClB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,kBAAa,GAAb,aAAa,CAAQ;QAM9B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;GAKG;AACH,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAElF,gFAAgF;AAEhF,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,yEAAyE,CAAC;IACtF,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,yEAAyE,CAAC;IACtF,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;SACzB,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;CAC9F,CAAC;KACD,QAAQ,CAAC,sEAAsE,CAAC,CAAC;AAEpF,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC1E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CACrE,CAAC;AAEX,MAAM,sBAAsB,GAAG;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CACnF,CAAC;AAeX,wEAAwE;AACxE,SAAS,SAAS,CAAC,OAAgC;IACjD,OAAO;QACL,OAAO,EAAE,IAAa;QACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAiB,EAAE,QAAkB;IAC1E,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,8EAA8E;YAC9E,gFAAgF;YAChF,6EAA6E;YAC7E,+EAA+E;YAC/E,mFAAmF;YACnF,uEAAuE;QACzE,WAAW,EAAE,qBAAqB;QAClC,YAAY,EAAE,sBAAsB;KACrC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,oEAAoE;IACpE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sCAAsC;IACtC,EAAE;IACF,wEAAwE;IACxE,kEAAkE;IAClE,yEAAyE;IACzE,2EAA2E;IAC3E,gCAAgC;IAChC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAoB,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClE,iBAAiB,EAAE,MAAM;aAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,iEAAiE;gBACjE,kEAAkE;gBAClE,OAAO,SAAS,CAAC;oBACf,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,EAAE,KAAK,CAAC,GAAG;iBACf,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,oEAAoE;gBACpE,gEAAgE;gBAChE,oEAAoE;gBACpE,mEAAmE;gBACnE,6DAA6D;gBAC7D,iEAAiE;gBACjE,mEAAmE;gBACnE,iEAAiE;gBACjE,0DAA0D;gBAC1D,2BAA2B;gBAC3B,OAAO,SAAS,CAAC;oBACf,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE;wBACJ,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE;wBAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACzB;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,kEAAkE;gBAClE,iEAAiE;gBACjE,mEAAmE;gBACnE,iEAAiE;gBACjE,mEAAmE;gBACnE,iEAAiE;gBACjE,6DAA6D;gBAC7D,uDAAuD;gBACvD,OAAO,SAAS,CAAC;oBACf,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,iEAAiE;gBACjE,8DAA8D;gBAC9D,mEAAmE;gBACnE,2CAA2C;gBAC3C,OAAO,SAAS,CAAC;oBACf,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,IACE,KAAK,YAAY,oBAAoB;gBACrC,KAAK,YAAY,oBAAoB;gBACrC,KAAK,YAAY,qBAAqB;gBACtC,KAAK,YAAY,oBAAoB;gBACrC,KAAK,YAAY,gBAAgB;gBACjC,KAAK,YAAY,kBAAkB,EACnC,CAAC;gBACD,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,WAAW,CAClB,KAMsB;IAEtB,IAAI,KAAK,YAAY,oBAAoB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7F,IAAI,KAAK,YAAY,oBAAoB;QACvC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClE,IAAI,KAAK,YAAY,qBAAqB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,KAAK,YAAY,oBAAoB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,KAAK,YAAY,kBAAkB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,mBAAmB;AACtE,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAe,EACf,IAAoB,EACpB,MAA0C,OAAO,CAAC,GAAG;IAErD,gFAAgF;IAChF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAExC,4DAA4D;IAC5D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAC3C,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACrE,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IACvE,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,uDAAuD;IACvD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,uEAAuE;IACvE,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;QACxC,IAAI,YAAY,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAc,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,SAAS;QAC3C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC;QACD,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,qEAAqE;IACrE,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,UAAU,IAAI,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAC5B,UAAU,EACV,QAAQ,EACR,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6CAA6C;IAC7C,MAAM,GAAG,GAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAW,EAAE;QACtD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,6DAA6D;gBAC7D,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QACzC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,IAAc,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;SAC9E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,IAAY,EAAE,QAA4B;IAC9D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,uEAAuE;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,SAAiB,EAAE,UAAkB;IACzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,QAA4B,EAAE,IAAY;IAC1E,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,QAAgB;IACrD,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,77 @@
+import { type RequestListener } from "node:http";
+import type { Readable, Writable } from "node:stream";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type OidcVerifier } from "./auth/oidc/verifier.js";
+export type TransportKind = "stdio" | "http";
+export declare function isLoopbackHost(host: string): boolean;
+export declare function normalizeListenHost(host: string): string;
+export declare function formatHttpEndpoint(host: string, port: number): string;
+/** Register session-scoped resources that must close with their MCP server. */
+export declare function registerServerDisposer(server: McpServer, disposer: () => void | Promise<void>): void;
+/** Return the transport selected for a started server, if startup has begun. */
+export declare function getServerTransportKind(server: McpServer): TransportKind | undefined;
+/**
+ * Resolve which transport to use (RFC §5.2 transport multiplexer):
+ *   1. explicit `kind` argument (from the --transport CLI flag), else
+ *   2. MCP_TRANSPORT env var, else
+ *   3. auto-detect: a TTY on stdin means a human launched us → HTTP;
+ *      otherwise a harness is piping JSON-RPC over stdio → stdio.
+ */
+export declare function resolveTransport(kind?: string): TransportKind;
+/**
+ * Resolve whether preview URLs are reachable from the MCP client. HTTP is
+ * conservative by default because a loopback bind can still sit behind a
+ * reverse proxy or tunnel; same-machine HTTP deployments must opt into local
+ * URLs explicitly.
+ */
+export declare function resolvePreviewLocality(transportKind: TransportKind, locality?: string, env?: NodeJS.ProcessEnv): "local" | "remote";
+export interface StreamableHttpHandlerOptions {
+    sessionIdleTimeoutMs?: number;
+    /**
+     * Enables static `Authorization: Bearer genie_<token>` authentication
+     * (M5-02, DRO-274). When it is the only configured credential source, every
+     * `/mcp` request must use one; when OAuth or OIDC is also configured, any
+     * one enabled source may authenticate the request. `/health` is exempt.
+     */
+    requireBearerAuth?: boolean;
+    /**
+     * Public issuer URL for OAuth (DRO-273 / M5-01), e.g. `http://127.0.0.1:3000`.
+     * When set and `OAUTH_HS256_KEY` is a valid signing key, the OAuth 2.0 +
+     * DCR endpoints (`/.well-known/oauth-authorization-server`, `/register`,
+     * `/authorize`, `/token`) are mounted on this HTTP server. OAuth is
+     * opt-in: omit `oauthIssuer`, or leave `OAUTH_HS256_KEY` unset, to run
+     * without it.
+     */
+    oauthIssuer?: string;
+    /**
+     * Pre-built OIDC relying-party verifier (M5-04, DRO-276). When supplied,
+     * a bearer token issued by the configured EXTERNAL OIDC provider and
+     * asserting membership in the required group can authenticate `/mcp` (see
+     * `auth/oidc/verifier.ts`). Independent of the other credential sources: a
+     * deployment can enable any combination, and acceptance by any one source
+     * authorizes the request. A token invalid for all sources gets 401; a
+     * valid OIDC token missing the required group gets 403 (AC6).
+     */
+    oidcVerifier?: OidcVerifier;
+}
+/**
+ * Create the stateful Streamable HTTP request handler. Each initialized client
+ * receives its own MCP server + transport, keyed by Mcp-Session-Id, so
+ * initialize-scoped capabilities never leak between clients.
+ */
+export declare function createStreamableHttpRequestHandler(serverFactory: () => McpServer, options?: StreamableHttpHandlerOptions): RequestListener;
+export interface StartOptions {
+    kind?: string;
+    port?: number;
+    host?: string;
+    /** Required for HTTP; must include every caller-added registration per session. */
+    serverFactory?: () => McpServer;
+    /** Injectable stdio streams for embedders and EOF lifecycle tests. */
+    stdioInput?: Readable;
+    stdioOutput?: Writable;
+    /** HTTP only — enable static `Authorization: Bearer` tokens (M5-02, DRO-274). */
+    requireBearerAuth?: boolean;
+}
+/** Start the server on the resolved transport. Returns the kind actually used. */
+export declare function startTransport(server: McpServer, opts?: StartOptions): Promise<TransportKind>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,eAAe,EAErB,MAAM,WAAW,CAAC;AAEnB,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,EAAyB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGnF,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,CAAC;AAE7C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAepD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGxD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIrE;AAMD,+EAA+E;AAC/E,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACnC,IAAI,CAeN;AASD,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,CAEnF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAO7D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,aAAa,EAC5B,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,GAAG,QAAQ,CAOpB;AAmDD,MAAM,WAAW,4BAA4B;IAC3C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAkCD;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,aAAa,EAAE,MAAM,SAAS,EAC9B,OAAO,GAAE,4BAAiC,GACzC,eAAe,CAsQjB;AA+CD,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,SAAS,CAAC;IAChC,sEAAsE;IACtE,UAAU,CAAC,EAAE,QAAQ,CAAC;IACtB,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,kFAAkF;AAClF,wBAAsB,cAAc,CAClC,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,aAAa,CAAC,CAmBxB"}