@loomweaver/mcp 0.11.0 → 0.12.0

package/dist/main.mjs

@@ -31458,7 +31458,7 @@ function pause(): Promise<void> {
 }
 
 // ../devkit/src/recipes/angular-weaver/agent-files.ts
-var AG_UI_ADAPTER_VERSION = "0.11.0";
+var AG_UI_ADAPTER_VERSION = "0.12.0";
 var AG_UI_PROTOCOL_VERSION = "0.0.x";
 function connectionFile(w) {
   return `import { signal } from '@angular/core';
@@ -31470,11 +31470,6 @@ import {
 } from '@loomweaver/ag-ui';
 import type { PluginContext } from '@loomweaver/plugin-sdk';
 
-// Commands an agent may not run on its own word. Each one asks the person at the keyboard first, and
-// declining stops it: the workbench never sees the call. This weaver's own command is listed as an
-// example \u2014 replace it with the ones that actually cost something.
-const CONSEQUENTIAL = new Set(['${w.id}.hello']);
-
 // A factory, not a module-level connection: everything a run needs lives in the closure, so a second
 // one never shares state with the first.
 export function ${w.propertyName}Connection(ctx: PluginContext): CommandTools {
@@ -31485,11 +31480,21 @@ export function ${w.propertyName}Connection(ctx: PluginContext): CommandTools {
 // deactivate(), so the panel renders an honest empty state either side of that.
 export const ${w.propertyName}Agent = signal<CommandTools | null>(null);
 
+// What an agent's word is enough for is the command's own statement, declared where the command is
+// registered and read off the call here. No list of ids lives beside the commands: a list drifts from
+// what it describes, and it cannot speak for a command another plugin registered. Acting on the
+// statement is this weaver's half: the workbench states it and enforces nothing.
 async function decide(
   ctx: PluginContext,
   call: PendingToolCall,
 ): Promise<ToolDecision> {
-  if (!CONSEQUENTIAL.has(call.commandId)) {
+  if (call.agentConsent === 'never') {
+    return {
+      decision: 'decline',
+      reason: 'an agent may not run this one on its own word.',
+    };
+  }
+  if (call.agentConsent !== 'ask' && call.agentConsent !== 'ask-always') {
     return { decision: 'run' };
   }
   const yes = await ctx.ui.confirm({
@@ -31520,7 +31525,8 @@ interface Asked {
 function contextThat(confirms: boolean, ran: Asked[]): PluginContext {
   return {
     invocableCommands: () => [
-      { id: '${w.id}.hello', title: '${w.name} action', description: 'Shows a short message.' },
+      // agentConsent travels with the command, which is what the connection reads off the call.
+      { id: '${w.id}.hello', title: '${w.name} action', description: 'Shows a short message.', agentConsent: 'ask' },
     ],
     invokeCommand: (id: string, args?: CommandArguments) => {
       ran.push({ id, args });
@@ -31806,6 +31812,11 @@ function commandBlock(w) {
     `      answers: '${w.id}.actionAnswers',`,
     `      shortcut: '${w.features.shortcut}',`,
     "      callable: true,",
+    ...w.features.agent ? [
+      "      // What an agent's word is enough for. The platform states it and enforces nothing:",
+      "      // the asking is the connection's half, which reads this off the call.",
+      "      agentConsent: 'ask',"
+    ] : [],
     "      run: (_context, args) => {",
     "        const tone = toneOf(args?.['tone']);",
     `        ctx.ui.toast({ message: '${w.id}.action', kind: tone });`,
@@ -32453,7 +32464,7 @@ var framePlugin = {
 };
 
 // ../devkit/src/recipes/platform-version.ts
-var PLATFORM_VERSION = "0.11.0";
+var PLATFORM_VERSION = "0.12.0";
 
 // ../devkit/src/recipes/angular-distribution/amendments.ts
 var DISTRIBUTION_INITIAL_BUDGET = {
@@ -32712,6 +32723,10 @@ function readme2(d) {
     "",
     "A switch takes the **affordance and the gesture**: turning `splitRight` off removes the toolbar",
     "button, the drop edges *and* `mod+\\`, so the capability cannot come back through a second door.",
+    "Two switches are finer, and named for it: `splitRightButton` and `splitDownButton` leave out the",
+    "pane toolbar's split button alone, for a product that offers splitting by dragging a tab to a",
+    "pane's edge. The command and the tab menu's entry are removed by naming them in",
+    "`provideShell({ omit })` instead, so each decision keeps one place.",
     "Fields merge group by group, so name only what you turn off. The groups are `content`,",
     "`sidebar`, `rail`, `workspaces`, `windows` and `commands`; everything is on by default except",
     "`content.escalate`, the unlabelled double-click cycle on a tab.",
@@ -34193,6 +34208,7 @@ function read(ts, file2, call) {
     return { ...empty, unreadable: "its id is not a string literal" };
   }
   const callable = properties.get("callable");
+  const consent = properties.get("agentConsent");
   return {
     at: at2,
     id: id.text,
@@ -34200,9 +34216,40 @@ function read(ts, file2, call) {
     described: properties.has("description"),
     answers: properties.has("answers"),
     returnsValue: returnsValue(ts, properties.get("run")),
-    arguments: readArguments(ts, properties.get("arguments"))
+    arguments: readArguments(ts, properties.get("arguments")),
+    ...consentOf(ts, consent)
   };
 }
+function consentOf(ts, declared) {
+  const value = unwrapped(ts, declared);
+  return value && ts.isStringLiteral(value) ? { agentConsent: value.text } : {};
+}
+function unwrapped(ts, value) {
+  if (!value) {
+    return void 0;
+  }
+  return ts.isAsExpression(value) || ts.isSatisfiesExpression(value) || ts.isParenthesizedExpression(value) ? unwrapped(ts, value.expression) : value;
+}
+var STATED = ["allow", "ask", "ask-always", "never"];
+function consentLine(consent) {
+  switch (consent) {
+    case "allow": {
+      return "says an agent's word is enough to run it.";
+    }
+    case "ask": {
+      return "says the person is asked first; whoever runs it on an agent's behalf does the asking.";
+    }
+    case "ask-always": {
+      return "says the person is asked every time; whoever runs it on an agent's behalf does the asking.";
+    }
+    case "never": {
+      return "says it is not to be run on an agent's word; closing it to other callers is what enforces that.";
+    }
+    default: {
+      return consent === void 0 ? "says nothing about whether an agent's word is enough to run it." : `declares "${consent}" about an agent's word, which is none of ${STATED.join(", ")}, so nothing reads it.`;
+    }
+  }
+}
 function readArguments(ts, value) {
   if (!value || !ts.isArrayLiteralExpression(value)) {
     return [];
@@ -34306,6 +34353,12 @@ function judge(registration) {
       message: `${id}: offered to an agent, with ${count} described argument${count === 1 ? "" : "s"}${registration.answers ? " and a declared answer" : ""}.`
     });
   }
+  findings.push({
+    level: "info",
+    code: "command.consent",
+    path: at2,
+    message: `${id}: ${consentLine(registration.agentConsent)}`
+  });
   return findings;
 }
 
@@ -34417,7 +34470,7 @@ function inputSchema(descriptor) {
 function createMcpServer() {
   const server = new McpServer({
     name: "loomweaver-devkit",
-    version: "0.11.0"
+    version: "0.12.0"
   });
   server.registerTool(
     "list_generators",
@@ -34462,7 +34515,7 @@ function createMcpServer() {
   server.registerTool(
     "validate_commands",
     {
-      description: "Say, per command a plugin registers, whether an agent is offered it and what would leave the agent guessing. Input: files = { <path>: <TypeScript source> }. Only a callable command without a description is a warning; the rest is information.",
+      description: "Say, per command a plugin registers, whether an agent is offered it, what would leave the agent guessing, and what the command states about an agent's word being enough to run it. Input: files = { <path>: <TypeScript source> }. Only a callable command without a description is a warning; the rest is information, and a command that states nothing about an agent's word is reported as stating nothing rather than faulted.",
       inputSchema: {
         files: external_exports.record(external_exports.string(), external_exports.string())
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loomweaver/mcp",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "LoomWeaver: open-source plugin platform for Angular workbenches. The MCP server: scaffolding and validation as tools, so an AI assistant in any product repo can build weavers without a checkout.",
   "keywords": [
     "loomweaver",