@edspencer/paddock 0.64.0 → 0.65.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edspencer/paddock",
-  "version": "0.64.0",
+  "version": "0.65.0",
   "description": "Project-first launchpad for Claude Code: server-hosted, persistent, resumable sessions organized by project.",
   "keywords": [
     "claude",

package/packages/server/dist/management-ops.js

@@ -314,6 +314,37 @@ export function buildManagementOps(ctx, params) {
                 agentRegistered,
             };
         },
+        // Promotion (#470), sharing create's gate. Same discipline: the SAME two calls,
+        // in the same order, that `POST /api/projects/:slug/promote` makes — store
+        // promote, then agent re-registration. Every guard (already unmanaged, the
+        // root workspace, an existing checkout dir, a bad URL) and the rollback to an
+        // untouched notebook on clone failure live in `ProjectStore.promote` (#213).
+        promoteProject: async (projectSlug, repo) => {
+            const project = await deps.projects.promote(projectSlug, repo);
+            // Non-fatal, as in the route — but it matters more than it does for create:
+            // re-registering is what re-symlinks the NEW working dir at the project's
+            // existing `.chats/` store, which is what keeps its chats listed + resumable.
+            let agentRegistered = true;
+            try {
+                await deps.herdctl.ensureProjectAgent(project);
+            }
+            catch {
+                agentRegistered = false;
+            }
+            return {
+                slug: project.slug,
+                name: project.name,
+                dir: project.dir,
+                workingDir: project.workingDir,
+                // #206 replaced `repoBacked` with the `managed` axis. Promotion always
+                // lands on `managed: false` — that IS what promoting means now — but read
+                // it off the project rather than hard-coding, so this reports what the
+                // store actually did.
+                managed: project.managed,
+                ...(project.repo ? { repo: project.repo } : {}),
+                agentRegistered,
+            };
+        },
         triggersMcpEnabled: includeTriggers,
         listTriggers: async (projectSlug) => {
             if (!deps.triggers)
@@ -405,12 +436,20 @@ export function enforceManagementPolicy(ops, principal) {
     const write = {
         currentProjectSlug: w.currentProjectSlug,
         currentSessionId: w.currentSessionId,
+        // The project block is offered when EITHER of its verbs is granted; the
+        // per-tool filter (`managementToolFilter`) is what hides the other one, so a
+        // client scoped to just one of them isn't denied both.
+        projectsMcpEnabled: w.projectsMcpEnabled &&
+            (isOperationAllowed(scope, "create_project") || isOperationAllowed(scope, "promote_project")),
         // Instance-level, so there is no project to scope-check — only the verb.
-        projectsMcpEnabled: w.projectsMcpEnabled && isOperationAllowed(scope, "create_project"),
         createProject: (input) => {
             assertOperation(principal, "create_project");
             return w.createProject(input);
         },
+        // Promotion DOES name an existing project, so unlike create it is scope-checked
+        // against `projects` too — a client confined to one project must not restructure
+        // another.
+        promoteProject: (projectSlug, repo) => guard("promote_project", projectSlug, () => w.promoteProject(projectSlug, repo)),
         createChat: (projectSlug, prompt, o) => guard("create_chat", projectSlug, () => w.createChat(projectSlug, prompt, o)),
         // NOTE: `fork_chat_batch` is a convenience wrapper that calls this same
         // callback N times, so it is gated on `fork_chat` here AND on

package/packages/server/dist/management-policy.d.ts

@@ -66,7 +66,7 @@ export interface ManagementPrincipal {
 /** Read-only operations: no state change, no turn started. */
 export declare const READ_OPERATIONS: readonly ["list_projects", "list_chats", "read_chat"];
 /** Chat write operations. The first four START TURNS (see the RCE note above). */
-export declare const WRITE_OPERATIONS: readonly ["create_project", "create_chat", "fork_chat", "send_message", "fork_chat_batch", "archive_chat", "unarchive_chat"];
+export declare const WRITE_OPERATIONS: readonly ["create_project", "promote_project", "create_chat", "fork_chat", "send_message", "fork_chat_batch", "archive_chat", "unarchive_chat"];
 /** Unified trigger operations (Epic T / T3). `list_triggers` is the read one. */
 export declare const TRIGGER_OPERATIONS: readonly ["list_triggers", "set_trigger", "remove_trigger", "run_trigger"];
 /** Every operation the management surface knows about. */
@@ -81,8 +81,9 @@ export declare const ALL_OPERATIONS: readonly string[];
 /**
  * Operations that grant code execution on the host, and so define the risk class
  * a write scope really is. A superset of {@link TURN_SPAWNING_OPERATIONS}:
- * `create_project` starts no turn, but it clones a CALLER-SUPPLIED git URL and
- * creates instance-level state, which belongs in the same warning.
+ * `create_project`/`promote_project` start no turn, but they clone a
+ * CALLER-SUPPLIED git URL and create (or restructure) instance-level state, which
+ * belongs in the same warning.
  */
 export declare const HIGH_RISK_OPERATIONS: readonly string[];
 export declare const TURN_SPAWNING_OPERATIONS: readonly string[];

package/packages/server/dist/management-policy.js

@@ -34,6 +34,7 @@ export const READ_OPERATIONS = ["list_projects", "list_chats", "read_chat"];
 /** Chat write operations. The first four START TURNS (see the RCE note above). */
 export const WRITE_OPERATIONS = [
     "create_project",
+    "promote_project",
     "create_chat",
     "fork_chat",
     "send_message",
@@ -64,11 +65,13 @@ export const ALL_OPERATIONS = [
 /**
  * Operations that grant code execution on the host, and so define the risk class
  * a write scope really is. A superset of {@link TURN_SPAWNING_OPERATIONS}:
- * `create_project` starts no turn, but it clones a CALLER-SUPPLIED git URL and
- * creates instance-level state, which belongs in the same warning.
+ * `create_project`/`promote_project` start no turn, but they clone a
+ * CALLER-SUPPLIED git URL and create (or restructure) instance-level state, which
+ * belongs in the same warning.
  */
 export const HIGH_RISK_OPERATIONS = [
     "create_project",
+    "promote_project",
     "create_chat",
     "fork_chat",
     "fork_chat_batch",

package/packages/server/dist/projects.d.ts

@@ -67,9 +67,18 @@ export declare class ProjectStore {
      * root, and that implicit safety is gone.
      *
      * So the check is made explicit and centralised here rather than re-derived at
-     * each call site: an `fs.rm` that escapes throws instead of deleting. Both
-     * current callers already only pass in-root paths — this exists so that stays
-     * true when someone later adds a third one.
+     * each call site: an `fs.rm` that escapes throws instead of deleting. Every
+     * caller already only passes in-root paths — this exists so that stays true
+     * when someone later adds another one.
+     *
+     * `promote()`'s two rollbacks route through here as well. Their target is
+     * `<projectsRoot>/<slug>/<checkoutName>`, which is in-root by construction, so
+     * the guard is inert there today — that is the point. This is the choke point
+     * the comment above promised, and a recursive delete that skips it is exactly
+     * the drift it exists to prevent. {@link rollback} is the deliberate exception:
+     * it deletes paths that may legitimately sit OUTSIDE the root (a user-nominated
+     * clone target), and is safe by a different mechanism — it only ever removes
+     * directories this operation created.
      */
     private rmInsideRoot;
     /**

package/packages/server/dist/projects.js

@@ -202,9 +202,18 @@ export class ProjectStore {
      * root, and that implicit safety is gone.
      *
      * So the check is made explicit and centralised here rather than re-derived at
-     * each call site: an `fs.rm` that escapes throws instead of deleting. Both
-     * current callers already only pass in-root paths — this exists so that stays
-     * true when someone later adds a third one.
+     * each call site: an `fs.rm` that escapes throws instead of deleting. Every
+     * caller already only passes in-root paths — this exists so that stays true
+     * when someone later adds another one.
+     *
+     * `promote()`'s two rollbacks route through here as well. Their target is
+     * `<projectsRoot>/<slug>/<checkoutName>`, which is in-root by construction, so
+     * the guard is inert there today — that is the point. This is the choke point
+     * the comment above promised, and a recursive delete that skips it is exactly
+     * the drift it exists to prevent. {@link rollback} is the deliberate exception:
+     * it deletes paths that may legitimately sit OUTSIDE the root (a user-nominated
+     * clone target), and is safe by a different mechanism — it only ever removes
+     * directories this operation created.
      */
     async rmInsideRoot(target) {
         const resolved = path.resolve(target);
@@ -641,7 +650,7 @@ export class ProjectStore {
             await cloneRepo(repo, checkoutDir);
         }
         catch (err) {
-            await fs.rm(checkoutDir, { recursive: true, force: true }).catch(() => undefined);
+            await this.rmInsideRoot(checkoutDir).catch(() => undefined);
             throw new ProjectError(err instanceof Error ? err.message : `Failed to clone ${repo}`, "invalid");
         }
         // `writeYaml` is the atomic COMMIT point: until it succeeds the notebook is
@@ -666,7 +675,7 @@ export class ProjectStore {
             await this.writeYaml(slug, next);
         }
         catch (err) {
-            await fs.rm(checkoutDir, { recursive: true, force: true }).catch(() => undefined);
+            await this.rmInsideRoot(checkoutDir).catch(() => undefined);
             throw err;
         }
         // Post-commit finalization — the project is now validly repo-backed; these

package/packages/server/dist/self-mcp-descriptions.d.ts

@@ -14,6 +14,7 @@ export declare const ARCHIVE_CHAT_DESC: string;
 export declare const UNARCHIVE_CHAT_DESC: string;
 export declare const FORK_CHAT_BATCH_DESC: string;
 export declare const CREATE_PROJECT_DESC: string;
+export declare const PROMOTE_PROJECT_DESC: string;
 export declare const SET_TRIGGER_DESC: string;
 export declare const REMOVE_TRIGGER_DESC: string;
 export declare const RUN_TRIGGER_DESC: string;

package/packages/server/dist/self-mcp-descriptions.js

@@ -96,7 +96,7 @@ export const FORK_CHAT_BATCH_DESC = "FAN-OUT primitive: fork ONE source chat int
     `"<name_prefix> <i>" (1-based). With \`model\`, every fork's kickoff turn runs on ` +
     `that model. Up to ${FORK_BATCH_MAX} forks per call; they run ` +
     "concurrently. Returns the source and every new child's sessionId.";
-// ── Project tools (issue #467) ──────────────────────────────────────────────
+// ── Project tools (issues #467, #470) ───────────────────────────────────────
 export const CREATE_PROJECT_DESC = "Create a BRAND-NEW Paddock project — the workspace a keeper agent lives in — and " +
     "register its keeper. `name` is the only required argument; the kebab-case `slug` " +
     "is derived from it unless you pass one. Two kinds: pass a `repo` git URL for a " +
@@ -109,6 +109,19 @@ export const CREATE_PROJECT_DESC = "Create a BRAND-NEW Paddock project — the w
     "pass that slug to `create_chat` to start working in it. A bad or unreachable " +
     "repo URL fails cleanly and leaves NO half-created project behind, so it is safe " +
     "to retry with a corrected URL.";
+export const PROMOTE_PROJECT_DESC = "Turn an EXISTING notebook project into a REPO-BACKED one, in place — use this " +
+    "when a notes-only project has grown into (or was always meant to be) a codebase, " +
+    "instead of creating a second project and abandoning the first. `repo` (a git URL) " +
+    "is required; `project` defaults to the CURRENT project, so an agent can promote " +
+    "the workspace it is running in. The repo is cloned into a nested checkout inside " +
+    "the project, that checkout becomes the agent's working directory, and the agent is " +
+    "re-registered there. Everything already in the project is KEPT — its existing " +
+    "chats stay listed and resumable, and its OVERVIEW/CHANGELOG/settings are " +
+    "untouched. Not reversible through this MCP, and only ever notebook → repo-backed: " +
+    "a project that is ALREADY repo-backed is refused, as is the root workspace. A bad " +
+    "or unreachable repo URL fails cleanly, leaving the notebook exactly as it was, so " +
+    "it is safe to retry with a corrected URL. Returns the project's new working " +
+    "directory and whether its agent re-registered.";
 // ── Unified trigger tools (Epic T / T3) ─────────────────────────────────────
 export const SET_TRIGGER_DESC = "Create or update a unified project TRIGGER — a standing rule that runs an agent " +
     "turn when something happens, keyed by `name`. Enable/disable is just this call " +

package/packages/server/dist/self-mcp-types.d.ts

@@ -54,6 +54,13 @@ export interface SelfMcpCreatedProject {
      */
     agentRegistered: boolean;
 }
+/**
+ * A promoted project as surfaced back to the agent (issue #470). Declared as an
+ * ALIAS rather than a second copy of the same fields: promotion's whole point is
+ * that the project ends up in exactly the state a repo-backed `create_project`
+ * would have produced, so the two reports must not be able to drift.
+ */
+export type SelfMcpPromotedProject = SelfMcpCreatedProject;
 /** A chat as surfaced to the agent. */
 export interface SelfMcpChat {
     /** Owning project slug. */
@@ -192,10 +199,11 @@ export interface SelfMcpWriteContext {
     /** Set (or clear) a chat's archived flag (presentational metadata only). */
     setArchived: (projectSlug: string, sessionId: string, archived: boolean) => Promise<void>;
     /**
-     * Whether the PROJECT tools (`create_project`, issue #467) are enabled for this
-     * instance — the `selfMcpProjectsEnabled` gate, resolved by the caller. When false
-     * the tool is NOT injected at all (absent, not present-but-refusing), the same
-     * binary discipline as {@link triggersMcpEnabled}.
+     * Whether the PROJECT tools (`create_project`, issue #467; `promote_project`,
+     * issue #470) are enabled for this instance — the `selfMcpProjectsEnabled` gate,
+     * resolved by the caller. When false the tools are NOT injected at all (absent,
+     * not present-but-refusing), the same binary discipline as
+     * {@link triggersMcpEnabled}.
      */
     projectsMcpEnabled: boolean;
     /**
@@ -208,6 +216,20 @@ export interface SelfMcpWriteContext {
      * non-fatal (mirroring the route) and reported via `agentRegistered`.
      */
     createProject: (input: SelfMcpCreateProjectInput) => Promise<SelfMcpCreatedProject>;
+    /**
+     * Promote an EXISTING notebook project to repo-backed in place, and re-register
+     * its agent — the SAME two steps `POST /api/projects/:slug/promote` performs, in
+     * the same order (`ProjectStore.promote` then `ensureProjectAgent`), so the REST
+     * and MCP paths cannot drift (issue #470/#213). All the real work (the already-
+     * repo-backed / root-workspace / bad-URL guards, the clone into the nested
+     * checkout, the `writeYaml` commit point and its rollback to an UNTOUCHED
+     * notebook on failure) stays in the store. Throws on a promote failure; a
+     * re-registration failure is non-fatal (mirroring the route) and reported via
+     * `agentRegistered` — though it matters more here than for create, since
+     * re-registration is what re-symlinks the new working dir at the project's
+     * existing `.chats/` store so its chats stay listed and resumable.
+     */
+    promoteProject: (projectSlug: string, repo: string) => Promise<SelfMcpPromotedProject>;
     /**
      * Whether the unified trigger-management MCP is enabled for THIS turn's project
      * (Epic T / T3 — the successor to the G5 hook-MCP gate, resolved from the SAME

package/packages/server/dist/self-mcp-write.d.ts

@@ -32,4 +32,25 @@ export declare function archiveChatHandler(write: SelfMcpWriteContext, archived:
  * an unclonable repo, and still rolls the whole project dir back on a clone failure.
  */
 export declare function createProjectHandler(write: SelfMcpWriteContext): (args: Record<string, unknown>) => Promise<McpToolCallResult>;
+/**
+ * `promote_project` (issue #470) — turn an EXISTING notebook project into a
+ * repo-backed one in place, over the same `ProjectStore.promote` (#213) that
+ * `POST /api/projects/:slug/promote` uses. Shares `create_project`'s
+ * `projectsMcpEnabled` gate: same blast-radius class (it clones a caller-supplied
+ * URL and restructures a project), and this one MUTATES existing state.
+ *
+ * Pure, like its siblings: it resolves the target (defaulting to the current
+ * project, as every other project-targeting write tool does), shape-checks the URL
+ * with the very same `isValidRepoUrl` the store uses, and delegates. Everything
+ * that makes promotion safe — the already-repo-backed / root-workspace / existing-
+ * checkout-dir guards, and the rollback that leaves an untouched notebook when the
+ * clone fails — stays in the store; nothing is re-implemented here.
+ *
+ * Deliberately NO up-front `SLUG_RE` check on the target, unlike `create_project`:
+ * there the slug names a project being INVENTED, here it names one that must
+ * already exist, so the store's own `not_found` is both the real check and the
+ * better message — and `SLUG_RE` would reject the root workspace's legitimate ""
+ * key with a misleading "invalid slug" instead of the store's explicit refusal.
+ */
+export declare function promoteProjectHandler(write: SelfMcpWriteContext): (args: Record<string, unknown>) => Promise<McpToolCallResult>;
 export declare function forkChatBatchHandler(write: SelfMcpWriteContext): (args: Record<string, unknown>) => Promise<McpToolCallResult>;

package/packages/server/dist/self-mcp-write.js

@@ -171,6 +171,50 @@ export function createProjectHandler(write) {
         }
     };
 }
+/**
+ * `promote_project` (issue #470) — turn an EXISTING notebook project into a
+ * repo-backed one in place, over the same `ProjectStore.promote` (#213) that
+ * `POST /api/projects/:slug/promote` uses. Shares `create_project`'s
+ * `projectsMcpEnabled` gate: same blast-radius class (it clones a caller-supplied
+ * URL and restructures a project), and this one MUTATES existing state.
+ *
+ * Pure, like its siblings: it resolves the target (defaulting to the current
+ * project, as every other project-targeting write tool does), shape-checks the URL
+ * with the very same `isValidRepoUrl` the store uses, and delegates. Everything
+ * that makes promotion safe — the already-repo-backed / root-workspace / existing-
+ * checkout-dir guards, and the rollback that leaves an untouched notebook when the
+ * clone fails — stays in the store; nothing is re-implemented here.
+ *
+ * Deliberately NO up-front `SLUG_RE` check on the target, unlike `create_project`:
+ * there the slug names a project being INVENTED, here it names one that must
+ * already exist, so the store's own `not_found` is both the real check and the
+ * better message — and `SLUG_RE` would reject the root workspace's legitimate ""
+ * key with a misleading "invalid slug" instead of the store's explicit refusal.
+ */
+export function promoteProjectHandler(write) {
+    return async (args) => {
+        try {
+            const projectArg = typeof args.project === "string" ? args.project.trim() : "";
+            const projectSlug = projectArg.length > 0 ? projectArg : write.currentProjectSlug;
+            const repo = typeof args.repo === "string" ? args.repo.trim() : "";
+            if (!repo) {
+                return fail("Error: `repo` is required (the git URL to back the project with).");
+            }
+            if (!isValidRepoUrl(repo)) {
+                return fail(`Error: invalid repo URL "${repo}" — expected an https://, git://, ssh:// or ` +
+                    "git@host:owner/repo url.");
+            }
+            const project = await write.promoteProject(projectSlug, repo);
+            return ok({ promoted: true, ...project });
+        }
+        catch (error) {
+            // Same hygiene as create_project: a clone failure arrives as git's whole argv
+            // (`Command failed: git clone -- <url> <dest>`), and the agent needs the repo
+            // URL + git's reason, not our on-disk layout.
+            return fail(`Error promoting project: ${truncateText(redactPaths(errText(error)))}`);
+        }
+    };
+}
 export function forkChatBatchHandler(write) {
     return async (args) => {
         try {

package/packages/server/dist/self-mcp.d.ts

@@ -12,7 +12,7 @@
  *   - `self-mcp-util.ts`         — result envelopes, clamps, arg coercion + caps
  *   - `self-mcp-descriptions.ts` — the agent-facing `*_DESC` prose
  *   - `self-mcp-read.ts`         — list_projects / list_chats / read_chat handlers
- *   - `self-mcp-write.ts`        — create/fork/send/archive/fork-batch + create_project handlers
+ *   - `self-mcp-write.ts`        — create/fork/send/archive/fork-batch + project handlers
  *   - `self-mcp-triggers.ts`     — list/set/remove/run trigger handlers
  *
  * ── How it reaches the keeper ───────────────────────────────────────────────
@@ -32,7 +32,7 @@
  */
 import type { InjectedMcpServerDef } from "@herdctl/core";
 import type { SelfMcpContext, SelfMcpWriteContext } from "./self-mcp-types.js";
-export type { SelfMcpProject, SelfMcpChat, SelfMcpMessage, SelfMcpTrigger, SelfMcpContext, SelfMcpWriteContext, SelfMcpCreateProjectInput, SelfMcpCreatedProject, } from "./self-mcp-types.js";
+export type { SelfMcpProject, SelfMcpChat, SelfMcpMessage, SelfMcpTrigger, SelfMcpContext, SelfMcpWriteContext, SelfMcpCreateProjectInput, SelfMcpCreatedProject, SelfMcpPromotedProject, } from "./self-mcp-types.js";
 export { FORK_BATCH_MAX, redactPaths, READ_CHAT_DEFAULT_LIMIT, READ_CHAT_MAX_LIMIT, READ_CHAT_MAX_TEXT, clampLimit, truncateText, resolveModelArg, coercePrompts, coerceToolList, coerceBoolean, } from "./self-mcp-util.js";
 /** Assembly-time options for {@link selfMcpServerDef}. */
 export interface SelfMcpServerDefOptions {
@@ -50,8 +50,8 @@ export interface SelfMcpServerDefOptions {
  * write flag is on), the WRITE tools (create_chat/fork_chat/send_message/
  * archive_chat/unarchive_chat/fork_chat_batch) are appended too; omit it for
  * unchanged read-only behavior. Two further blocks hang off independent gates ON
- * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issue #467)
- * appends the project tool (create_project), and
+ * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issues #467,
+ * #470) appends the project tools (create_project/promote_project), and
  * {@link SelfMcpWriteContext.triggersMcpEnabled} (the per-project trigger-MCP
  * opt-in, Epic T / T3) appends the unified trigger-management tools (list_triggers/
  * set_trigger/remove_trigger/run_trigger). Inject under
@@ -75,11 +75,12 @@ export declare const SELF_MCP_WRITE_TOOL_NAMES: {
     readonly forkChatBatch: "mcp__paddock_manage__fork_chat_batch";
 };
 /**
- * The fully-qualified name of the PROJECT tool (issue #467), present only when a
- * write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
+ * The fully-qualified names of the PROJECT tools (issues #467, #470), present only
+ * when a write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
  */
 export declare const SELF_MCP_PROJECT_TOOL_NAMES: {
     readonly createProject: "mcp__paddock_manage__create_project";
+    readonly promoteProject: "mcp__paddock_manage__promote_project";
 };
 /**
  * The fully-qualified names of the Epic T / T3 unified trigger-management tools

package/packages/server/dist/self-mcp.js

@@ -1,7 +1,7 @@
 import { FORK_BATCH_MAX, READ_CHAT_DEFAULT_LIMIT, READ_CHAT_MAX_LIMIT, } from "./self-mcp-util.js";
-import { MODEL_ARG_DESC, LIST_PROJECTS_DESC, LIST_CHATS_DESC, READ_CHAT_DESC, CREATE_CHAT_DESC, FORK_CHAT_DESC, SEND_MESSAGE_DESC, ARCHIVE_CHAT_DESC, UNARCHIVE_CHAT_DESC, FORK_CHAT_BATCH_DESC, CREATE_PROJECT_DESC, SET_TRIGGER_DESC, REMOVE_TRIGGER_DESC, RUN_TRIGGER_DESC, LIST_TRIGGERS_DESC, } from "./self-mcp-descriptions.js";
+import { MODEL_ARG_DESC, LIST_PROJECTS_DESC, LIST_CHATS_DESC, READ_CHAT_DESC, CREATE_CHAT_DESC, FORK_CHAT_DESC, SEND_MESSAGE_DESC, ARCHIVE_CHAT_DESC, UNARCHIVE_CHAT_DESC, FORK_CHAT_BATCH_DESC, CREATE_PROJECT_DESC, PROMOTE_PROJECT_DESC, SET_TRIGGER_DESC, REMOVE_TRIGGER_DESC, RUN_TRIGGER_DESC, LIST_TRIGGERS_DESC, } from "./self-mcp-descriptions.js";
 import { listProjectsHandler, listChatsHandler, readChatHandler } from "./self-mcp-read.js";
-import { createChatHandler, forkChatHandler, sendMessageHandler, archiveChatHandler, forkChatBatchHandler, createProjectHandler, } from "./self-mcp-write.js";
+import { createChatHandler, forkChatHandler, sendMessageHandler, archiveChatHandler, forkChatBatchHandler, createProjectHandler, promoteProjectHandler, } from "./self-mcp-write.js";
 import { PROJECT_STATUSES } from "./project-types.js";
 import { listTriggersHandler, setTriggerHandler, removeTriggerHandler, runTriggerHandler, } from "./self-mcp-triggers.js";
 export { FORK_BATCH_MAX, redactPaths, READ_CHAT_DEFAULT_LIMIT, READ_CHAT_MAX_LIMIT, READ_CHAT_MAX_TEXT, clampLimit, truncateText, resolveModelArg, coercePrompts, coerceToolList, coerceBoolean, } from "./self-mcp-util.js";
@@ -204,11 +204,15 @@ function writeTools(write) {
     ];
 }
 /**
- * The PROJECT tools (issue #467 — `create_project`). Appended only when
+ * The PROJECT tools (issue #467 — `create_project`; issue #470 —
+ * `promote_project`). Appended only when
  * {@link SelfMcpWriteContext.projectsMcpEnabled} is on: the same coarse binary gate
- * as the trigger tools (when off the tool is ABSENT, not present-but-refusing). Its
- * own flag because — unlike every other write tool — this one provisions
- * instance-level state and clones a caller-supplied git URL.
+ * as the trigger tools (when off the tools are ABSENT, not present-but-refusing).
+ * Their own flag because — unlike every other write tool — these provision or
+ * restructure instance-level state and clone a caller-supplied git URL. Promotion
+ * shares the flag rather than getting a third one: it is the same blast-radius
+ * class, and an operator who has granted "this agent may provision projects" has
+ * already made the decision promotion asks for.
  */
 function projectTools(write) {
     return [
@@ -244,6 +248,27 @@ function projectTools(write) {
             },
             handler: createProjectHandler(write),
         },
+        {
+            name: "promote_project",
+            description: PROMOTE_PROJECT_DESC,
+            inputSchema: {
+                type: "object",
+                properties: {
+                    project: {
+                        type: "string",
+                        description: "Slug of the NOTEBOOK project to promote. Omit to promote the current project.",
+                    },
+                    repo: {
+                        type: "string",
+                        description: "Git URL to back the project with (https://, git://, ssh:// or " +
+                            "git@host:owner/repo). Cloned into a nested checkout that becomes the " +
+                            "agent's working directory. Required.",
+                    },
+                },
+                required: ["repo"],
+            },
+            handler: promoteProjectHandler(write),
+        },
     ];
 }
 /**
@@ -386,8 +411,8 @@ function triggerTools(write) {
  * write flag is on), the WRITE tools (create_chat/fork_chat/send_message/
  * archive_chat/unarchive_chat/fork_chat_batch) are appended too; omit it for
  * unchanged read-only behavior. Two further blocks hang off independent gates ON
- * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issue #467)
- * appends the project tool (create_project), and
+ * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issues #467,
+ * #470) appends the project tools (create_project/promote_project), and
  * {@link SelfMcpWriteContext.triggersMcpEnabled} (the per-project trigger-MCP
  * opt-in, Epic T / T3) appends the unified trigger-management tools (list_triggers/
  * set_trigger/remove_trigger/run_trigger). Inject under
@@ -428,11 +453,12 @@ export const SELF_MCP_WRITE_TOOL_NAMES = {
     forkChatBatch: `mcp__${SERVER_NAME}__fork_chat_batch`,
 };
 /**
- * The fully-qualified name of the PROJECT tool (issue #467), present only when a
- * write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
+ * The fully-qualified names of the PROJECT tools (issues #467, #470), present only
+ * when a write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
  */
 export const SELF_MCP_PROJECT_TOOL_NAMES = {
     createProject: `mcp__${SERVER_NAME}__create_project`,
+    promoteProject: `mcp__${SERVER_NAME}__promote_project`,
 };
 /**
  * The fully-qualified names of the Epic T / T3 unified trigger-management tools

package/packages/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paddock/server",
-  "version": "0.64.0",
+  "version": "0.65.0",
   "private": true,
   "type": "module"
 }

package/packages/web/dist/assets/{InstanceConfigPage-Blr1a-hx.js → InstanceConfigPage-DcprTH2W.js}

@@ -1,2 +1,2 @@
-import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-B0gJ0qWe.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};
+import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-DVSsta3B.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};