@amsterdamdatalabs/enact-operator 0.1.2

package/dist/mcp/rpcTransport.d.ts

@@ -0,0 +1,17 @@
+export interface JsonRpcRequest {
+    jsonrpc: '2.0';
+    id?: string | number | null;
+    method: string;
+    params?: unknown;
+}
+export declare function text(value: unknown): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};
+export declare function respond(id: string | number | null, result: unknown): void;
+export declare function respondError(id: string | number | null, code: number, message: string): void;
+export declare function drainInputFrames(onRequest: (req: JsonRpcRequest) => void): (chunk: Buffer) => void;
+export declare function sendNotification(method: string, params?: unknown): void;
+//# sourceMappingURL=rpcTransport.d.ts.map

package/dist/mcp/rpcTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpcTransport.d.ts","sourceRoot":"","sources":["../../src/mcp/rpcTransport.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAaD,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO;;;;;EASlC;AAWD,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAEzE;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAE5F;AAUD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,GACvC,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CA6CzB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAYvE"}

package/dist/mcp/rpcTransport.js

@@ -0,0 +1,90 @@
+let transportMode = 'framed';
+export function text(value) {
+    return {
+        content: [
+            {
+                type: 'text',
+                text: typeof value === 'string' ? value : JSON.stringify(value, null, 2),
+            },
+        ],
+    };
+}
+function send(msg) {
+    const body = JSON.stringify(msg);
+    if (transportMode === 'line') {
+        process.stdout.write(`${body}\n`);
+        return;
+    }
+    process.stdout.write(`Content-Length: ${Buffer.byteLength(body, 'utf8')}\r\n\r\n${body}`);
+}
+export function respond(id, result) {
+    send({ jsonrpc: '2.0', id, result });
+}
+export function respondError(id, code, message) {
+    send({ jsonrpc: '2.0', id, error: { code, message } });
+}
+function tryParseJson(line) {
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function drainInputFrames(onRequest) {
+    let buffer = Buffer.alloc(0);
+    return (chunk) => {
+        buffer = Buffer.concat([buffer, chunk]);
+        while (buffer.length > 0) {
+            const prefix = buffer.toString('utf8', 0, Math.min(buffer.length, 32));
+            if (/^Content-Length:/i.test(prefix)) {
+                transportMode = 'framed';
+                const headerEnd = buffer.indexOf('\r\n\r\n');
+                if (headerEnd < 0)
+                    return;
+                const header = buffer.toString('ascii', 0, headerEnd);
+                const match = header.match(/content-length:\s*(\d+)/i);
+                if (!match) {
+                    buffer = buffer.subarray(headerEnd + 4);
+                    continue;
+                }
+                const length = Number(match[1]);
+                const bodyStart = headerEnd + 4;
+                const bodyEnd = bodyStart + length;
+                if (buffer.length < bodyEnd)
+                    return;
+                const body = buffer.toString('utf8', bodyStart, bodyEnd);
+                buffer = buffer.subarray(bodyEnd);
+                const req = tryParseJson(body);
+                if (req)
+                    onRequest(req);
+                continue;
+            }
+            transportMode = 'line';
+            const newline = buffer.indexOf('\n');
+            if (newline < 0)
+                return;
+            const line = buffer.toString('utf8', 0, newline).trim();
+            buffer = buffer.subarray(newline + 1);
+            if (!line)
+                continue;
+            const req = tryParseJson(line);
+            if (req)
+                onRequest(req);
+        }
+    };
+}
+export function sendNotification(method, params) {
+    const msg = {
+        jsonrpc: '2.0',
+        method,
+        ...(params !== undefined ? { params } : {}),
+    };
+    const body = JSON.stringify(msg);
+    if (transportMode === 'line') {
+        process.stdout.write(`${body}\n`);
+        return;
+    }
+    process.stdout.write(`Content-Length: ${Buffer.byteLength(body, 'utf8')}\r\n\r\n${body}`);
+}
+//# sourceMappingURL=rpcTransport.js.map

package/dist/mcp/rpcTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpcTransport.js","sourceRoot":"","sources":["../../src/mcp/rpcTransport.ts"],"names":[],"mappings":"AAgBA,IAAI,aAAa,GAAkB,QAAQ,CAAC;AAE5C,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;aACzE;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,GAAoB;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAA0B,EAAE,MAAe;IACjE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAA0B,EAAE,IAAY,EAAE,OAAe;IACpF,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAAwC;IAExC,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7B,OAAO,CAAC,KAAa,EAAE,EAAE;QACvB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAExC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAEvE,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,aAAa,GAAG,QAAQ,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,SAAS,GAAG,CAAC;oBAAE,OAAO;gBAE1B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;oBACxC,SAAS;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;gBAChC,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;gBACnC,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO;oBAAE,OAAO;gBAEpC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,GAAG;oBAAE,SAAS,CAAC,GAAG,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,aAAa,GAAG,MAAM,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO;YAExB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG;gBAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAgB;IAC/D,MAAM,GAAG,GAAyD;QAChE,OAAO,EAAE,KAAK;QACd,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AAC5F,CAAC"}

package/dist/mcp/schemas/ralphVerify.d.ts

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+export declare const RalphVerifyVerdictSchema: z.ZodEnum<{
+    GO: "GO";
+    "NO-GO": "NO-GO";
+}>;
+export declare const RalphVerifyInputSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    verdict: z.ZodEnum<{
+        GO: "GO";
+        "NO-GO": "NO-GO";
+    }>;
+    evidence: z.ZodString;
+}, z.core.$strip>;
+export type RalphVerifyInput = z.infer<typeof RalphVerifyInputSchema>;
+export declare const ralphVerifyInputJsonSchema: {
+    readonly type: "object";
+    readonly properties: {
+        readonly sessionId: {
+            readonly type: "string";
+        };
+        readonly verdict: {
+            readonly type: "string";
+            readonly enum: readonly ["GO", "NO-GO"];
+        };
+        readonly evidence: {
+            readonly type: "string";
+        };
+    };
+    readonly required: readonly ["sessionId", "verdict", "evidence"];
+};
+export declare function parseRalphVerifyInput(input: unknown): RalphVerifyInput;
+//# sourceMappingURL=ralphVerify.d.ts.map

package/dist/mcp/schemas/ralphVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ralphVerify.d.ts","sourceRoot":"","sources":["../../../src/mcp/schemas/ralphVerify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,wBAAwB;;;EAA0B,CAAC;AAEhE,eAAO,MAAM,sBAAsB;;;;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;CAQ7B,CAAC;AAEX,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAEtE"}

package/dist/mcp/schemas/ralphVerify.js

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+export const RalphVerifyVerdictSchema = z.enum(['GO', 'NO-GO']);
+export const RalphVerifyInputSchema = z.object({
+    sessionId: z.string().min(1),
+    verdict: RalphVerifyVerdictSchema,
+    evidence: z.string().min(1),
+});
+export const ralphVerifyInputJsonSchema = {
+    type: 'object',
+    properties: {
+        sessionId: { type: 'string' },
+        verdict: { type: 'string', enum: ['GO', 'NO-GO'] },
+        evidence: { type: 'string' },
+    },
+    required: ['sessionId', 'verdict', 'evidence'],
+};
+export function parseRalphVerifyInput(input) {
+    return RalphVerifyInputSchema.parse(input);
+}
+//# sourceMappingURL=ralphVerify.js.map

package/dist/mcp/schemas/ralphVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ralphVerify.js","sourceRoot":"","sources":["../../../src/mcp/schemas/ralphVerify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,wBAAwB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;QAClD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC7B;IACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC;CACtC,CAAC;AAEX,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC"}

package/dist/mcp/server.d.ts

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+export { handleCliSubcommand } from '../mcp/cli.js';
+export { invokeTool, isRegisteredToolName, refreshRegisteredToolState, registeredToolDefinitions, startActiveSkillWatcher, toolDefinitions } from '../mcp/toolRuntime.js';
+export declare function isMainModulePath(argvPath: string | undefined, moduleUrl: string): boolean;
+//# sourceMappingURL=server.d.ts.map

package/dist/mcp/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AAeA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAiKzK,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CASzF"}

package/dist/mcp/server.js

@@ -0,0 +1,176 @@
+#!/usr/bin/env node
+import { readFileSync, realpathSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolveOperatorRoot } from '../shared/core/contract.js';
+import { readActiveSkill } from '../shared/workflow/activation/activeSkill.js';
+import { ownerSkillsForTool, isToolVisibleForState } from '../mcp/toolPartitions.js';
+import { checkTeamRoleGating } from '../lanes/team/roles.js';
+import { handleCliSubcommand } from '../mcp/cli.js';
+import { invokeTool, refreshRegisteredToolState, registeredToolDefinitions, startActiveSkillWatcher, toolDefinitions } from '../mcp/toolRuntime.js';
+import { drainInputFrames, respond, respondError, sendNotification, text } from '../mcp/rpcTransport.js';
+const PROTOCOL_VERSION = '2024-11-05';
+const PACKAGE_VERSION = readPackageVersion();
+export { handleCliSubcommand } from '../mcp/cli.js';
+export { invokeTool, isRegisteredToolName, refreshRegisteredToolState, registeredToolDefinitions, startActiveSkillWatcher, toolDefinitions } from '../mcp/toolRuntime.js';
+async function main() {
+    if (process.argv[2] === '-v' || process.argv[2] === '--version') {
+        process.stdout.write(`enact-operator ${PACKAGE_VERSION}\n`);
+        return;
+    }
+    // Hook subcommand routing — must come before MCP server setup.
+    // When invoked as `enact-operator hook <event> [...args]`, route to the
+    // package-runtime hook handler. Host hook registration is owned by
+    // enact-extensions; this process only executes the stable runtime command.
+    if (process.argv[2] === 'hook' && typeof process.argv[3] === 'string') {
+        const { fileURLToPath, pathToFileURL } = await import('node:url');
+        const { dirname: _dirname, join: _join } = await import('node:path');
+        const here = _dirname(fileURLToPath(import.meta.url));
+        // dist/mcp/server.ts compiles to dist/mcp/server.js
+        // here = dist/mcp, .. = dist, ../.. = package root
+        const packageRoot = _join(here, '..', '..');
+        const hookEvent = process.argv[3];
+        const scriptPath = _join(packageRoot, 'runtime', 'hooks', `${hookEvent}.mjs`);
+        process.argv = [process.argv[0] ?? 'node', scriptPath, ...process.argv.slice(4)];
+        await import(pathToFileURL(scriptPath).href);
+        return;
+    }
+    const cli = handleCliSubcommand(process.argv.slice(2));
+    if (cli.handled) {
+        process.exitCode = cli.exitCode;
+        return;
+    }
+    // F1 — capture workspace anchor once at server startup (INV-030 walk-up from launch cwd).
+    // All tools/list calls use this anchor; never re-resolves from process.cwd() mid-session.
+    const WORKSPACE_ROOT = resolveOperatorRoot();
+    refreshRegisteredToolState(WORKSPACE_ROOT);
+    // F2 — watch active-skill.json; emit notifications/tools/list_changed on change.
+    // The file may not exist at startup — only start watcher once the state dir exists.
+    try {
+        const watcher = startActiveSkillWatcher(WORKSPACE_ROOT, () => {
+            refreshRegisteredToolState(WORKSPACE_ROOT);
+            // Send full tool surface so gateway can build complete deferred registry for tool_search
+            sendNotification('notifications/tools/list_changed', {
+                tools: toolDefinitions.map((t) => ({
+                    name: t.name,
+                    description: t.description,
+                    inputSchema: t.inputSchema,
+                })),
+            });
+        });
+        process.on('exit', () => { watcher.close(); });
+    }
+    catch {
+        // active-skill.json not yet created — watcher will not fire until file exists.
+        // The client will re-fetch after the first activation writes the file.
+    }
+    function handleRequest(req) {
+        const id = req.id ?? null;
+        switch (req.method) {
+            case 'initialize':
+                respond(id, {
+                    protocolVersion: PROTOCOL_VERSION,
+                    capabilities: { tools: {} },
+                    serverInfo: { name: 'enact-operator', version: PACKAGE_VERSION },
+                });
+                break;
+            case 'initialized':
+            case 'notifications/initialized':
+            case 'notifications/cancelled':
+                break;
+            case 'ping':
+                respond(id, {});
+                break;
+            case 'tools/list': {
+                respond(id, {
+                    tools: registeredToolDefinitions().map((tool) => ({
+                        name: tool.name,
+                        description: tool.description,
+                        inputSchema: tool.inputSchema,
+                    })),
+                });
+                break;
+            }
+            case 'tools/call': {
+                const params = (req.params ?? {});
+                if (typeof params.name !== 'string' || params.name.trim() === '') {
+                    respondError(id, -32602, 'Missing tool name');
+                    break;
+                }
+                const args = params.arguments ?? {};
+                const callRoot = resolveOperatorRoot(typeof args.root === 'string' ? args.root : undefined);
+                if (callRoot === WORKSPACE_ROOT) {
+                    refreshRegisteredToolState(WORKSPACE_ROOT);
+                }
+                // Skill-gating: if the tool is not visible for the current active skill,
+                // respond with an activation hint instead of invoking.
+                const activeState = readActiveSkill(WORKSPACE_ROOT);
+                if (!isToolVisibleForState(params.name, activeState)) {
+                    const owners = ownerSkillsForTool(params.name);
+                    if (owners.length > 0) {
+                        const ownerHint = owners.map((owner) => `'${owner}'`).join(', ');
+                        respondError(id, -32603, `tool '${params.name}' is not active; activate ${ownerHint} skill first via operator_skill_activate(...)`);
+                        break;
+                    }
+                }
+                // Per-role MCP-tool gating: if the caller self-identifies a team role via
+                // args.role, enforce the allow/deny table before invoking the tool handler.
+                // NOTE: when args.role is absent or empty, gating is intentionally skipped —
+                // non-team callers and operator tools that do not pass a role are allowed through
+                // unconditionally (same semantics as the 'unknown role' path in teamRoleGating.ts).
+                if (typeof args.role === 'string' && args.role.trim()) {
+                    const gatingDecision = checkTeamRoleGating(args.role.trim(), params.name);
+                    if (gatingDecision.decision === 'deny') {
+                        respondError(id, -32603, gatingDecision.reason ?? `tool '${params.name}' denied for role '${args.role}'`);
+                        break;
+                    }
+                }
+                invokeTool(params.name, args)
+                    .then((result) => {
+                    respond(id, text(result));
+                })
+                    .catch((error) => {
+                    respondError(id, -32603, error instanceof Error ? error.message : String(error));
+                });
+                break;
+            }
+            default:
+                if (id !== null) {
+                    respondError(id, -32601, `Method not found: ${req.method}`);
+                }
+        }
+    }
+    await new Promise((resolve) => {
+        process.stdin.on('data', drainInputFrames(handleRequest));
+        process.stdin.on('close', resolve);
+        process.stdin.on('end', resolve);
+    });
+}
+function readPackageVersion() {
+    try {
+        const here = dirname(fileURLToPath(import.meta.url));
+        const pkg = JSON.parse(readFileSync(join(here, '..', '..', 'package.json'), 'utf8'));
+        return typeof pkg.version === 'string' ? pkg.version : 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+export function isMainModulePath(argvPath, moduleUrl) {
+    if (typeof argvPath !== 'string')
+        return false;
+    const modulePath = fileURLToPath(moduleUrl);
+    if (resolve(argvPath) === modulePath)
+        return true;
+    try {
+        return realpathSync(argvPath) === modulePath;
+    }
+    catch {
+        return false;
+    }
+}
+const isMainModule = isMainModulePath(process.argv[1], import.meta.url);
+if (isMainModule) {
+    void main();
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACnJ,OAAO,EAAE,gBAAgB,EAAuB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7H,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEzK,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,eAAe,IAAI,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,wEAAwE;IACxE,mEAAmE;IACnE,2EAA2E;IAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,oDAAoD;QACpD,mDAAmD;QACnD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAChC,OAAO;IACT,CAAC;IAED,0FAA0F;IAC1F,0FAA0F;IAC1F,MAAM,cAAc,GAAG,mBAAmB,EAAE,CAAC;IAC7C,0BAA0B,CAAC,cAAc,CAAC,CAAC;IAE3C,iFAAiF;IACjF,oFAAoF;IACpF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,uBAAuB,CAAC,cAAc,EAAE,GAAG,EAAE;YAC3D,0BAA0B,CAAC,cAAc,CAAC,CAAC;YAC3C,yFAAyF;YACzF,gBAAgB,CAAC,kCAAkC,EAAE;gBACnD,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACjC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;iBAC3B,CAAC,CAAC;aACJ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,uEAAuE;IACzE,CAAC;IAED,SAAS,aAAa,CAAC,GAAmB;QACxC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC;QAE1B,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,CAAC,EAAE,EAAE;oBACV,eAAe,EAAE,gBAAgB;oBACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE;iBACjE,CAAC,CAAC;gBACH,MAAM;YAER,KAAK,aAAa,CAAC;YACnB,KAAK,2BAA2B,CAAC;YACjC,KAAK,yBAAyB;gBAC5B,MAAM;YAER,KAAK,MAAM;gBACT,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChB,MAAM;YAER,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,OAAO,CAAC,EAAE,EAAE;oBACV,KAAK,EAAE,yBAAyB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBAChD,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B,CAAC,CAAC;iBACJ,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA2D,CAAC;gBAC5F,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACjE,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAC9C,MAAM;gBACR,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC5F,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;oBAChC,0BAA0B,CAAC,cAAc,CAAC,CAAC;gBAC7C,CAAC;gBACD,yEAAyE;gBACzE,uDAAuD;gBACvD,MAAM,WAAW,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;gBACpD,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;oBACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtB,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACjE,YAAY,CACV,EAAE,EACF,CAAC,KAAK,EACN,SAAS,MAAM,CAAC,IAAI,6BAA6B,SAAS,+CAA+C,CAC1G,CAAC;wBACF,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,0EAA0E;gBAC1E,4EAA4E;gBAC5E,6EAA6E;gBAC7E,kFAAkF;gBAClF,oFAAoF;gBACpF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBACtD,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC1E,IAAI,cAAc,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;wBACvC,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,IAAI,SAAS,MAAM,CAAC,IAAI,sBAAsB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;wBAC1G,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;qBAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBACf,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5B,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACxB,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnF,CAAC,CAAC,CAAC;gBACL,MAAM;YACR,CAAC;YAED;gBACE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBAChB,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9D,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC7G,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAA4B,EAAE,SAAiB;IAC9E,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,UAAU,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAExE,IAAI,YAAY,EAAE,CAAC;IACjB,KAAK,IAAI,EAAE,CAAC;AACd,CAAC"}

package/dist/mcp/system.d.ts

@@ -0,0 +1,5 @@
+import { type LaneToolContext, type LaneToolResult } from '../mcp/laneSupport.js';
+import type { ToolDefinition } from '../mcp/toolPartitions.js';
+export declare const systemToolDefinitions: ToolDefinition[];
+export declare function handleSystemTool(name: string, context: LaneToolContext): Promise<LaneToolResult>;
+//# sourceMappingURL=system.d.ts.map

package/dist/mcp/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../src/mcp/system.ts"],"names":[],"mappings":"AAUA,OAAO,EAAW,KAAK,eAAe,EAAE,KAAK,cAAc,EAAa,MAAM,sBAAsB,CAAC;AACrG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,eAAO,MAAM,qBAAqB,EAAE,cAAc,EA0SjD,CAAC;AAEF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CA0ItG"}