@massa-ai/mcp-client 1.51.0 → 1.53.0

package/dist/index.js

@@ -27171,17 +27171,11 @@ function detectRoute(platform, host) {
   if (route === "file")
     return { kind: "proceed" };
   if (route === "marketplace") {
-    if (host === "claude")
+    if (host === "claude" || host === "codex")
       return { kind: "proceed" };
-    if (host === "codex") {
-      return {
-        kind: "refuse",
-        reason: "codex marketplace-route installs are refused (in-place bundle rewrite would dirty a checkout " + "and break the drift gate) \u2014 use the dev path: MASSA_AI_MODEL_PROFILE + regenerate."
-      };
-    }
     return {
       kind: "refuse",
-      reason: "claude/codex marketplace-route installs are refused (in-place bundle rewrite would dirty a checkout " + "and break the drift gate) \u2014 use the dev path: MASSA_AI_MODEL_PROFILE + regenerate."
+      reason: "marketplace-route installs need an explicit, supported host before switching " + "(claude and codex proceed; no other host resolves a live write target yet) \u2014 " + "use the dev path: MASSA_AI_MODEL_PROFILE + regenerate."
     };
   }
   return {
@@ -27380,6 +27374,61 @@ var init_lock = __esm(() => {
 import fs5 from "fs";
 import os5 from "os";
 import path9 from "path";
+function splitPluginKey(pluginKey) {
+  const at = pluginKey.indexOf("@");
+  if (at === -1)
+    return null;
+  const pluginName = pluginKey.slice(0, at);
+  const marketplaceName = pluginKey.slice(at + 1);
+  if (!pluginName || !marketplaceName)
+    return null;
+  return { pluginName, marketplaceName };
+}
+function isContainedPath(root, candidate) {
+  const rel = path9.relative(root, candidate);
+  return rel === "" || !rel.startsWith("..") && !path9.isAbsolute(rel);
+}
+function resolveDirectorySourceRoot(targetHome, pluginKey) {
+  const split = splitPluginKey(pluginKey);
+  if (!split)
+    return;
+  const { pluginName, marketplaceName } = split;
+  const knownMarketplacesPath = path9.join(targetHome, ".claude", "plugins", "known_marketplaces.json");
+  let known;
+  try {
+    known = JSON.parse(fs5.readFileSync(knownMarketplacesPath, "utf8"));
+  } catch {
+    return;
+  }
+  const entry = known?.[marketplaceName];
+  if (!entry || entry.source?.source !== "directory")
+    return;
+  const installLocation = entry.installLocation;
+  if (!installLocation)
+    return null;
+  const manifestPath = path9.join(installLocation, ".claude-plugin", "marketplace.json");
+  let manifest;
+  try {
+    manifest = JSON.parse(fs5.readFileSync(manifestPath, "utf8"));
+  } catch {
+    return null;
+  }
+  const plugin = manifest.plugins?.find((p) => p?.name === pluginName);
+  const relSource = plugin?.source;
+  if (!relSource)
+    return null;
+  const resolvedInstallLocation = path9.resolve(installLocation);
+  const composed = path9.resolve(resolvedInstallLocation, relSource);
+  if (!isContainedPath(resolvedInstallLocation, composed))
+    return null;
+  try {
+    if (!fs5.existsSync(composed))
+      return null;
+  } catch {
+    return null;
+  }
+  return composed;
+}
 function selectRecord(records) {
   if (records.length === 0)
     return;
@@ -27399,6 +27448,9 @@ function selectRecord(records) {
 function resolveClaudeMarketplaceRoot(opts = {}) {
   const targetHome = opts.targetHome ?? os5.homedir();
   const pluginKey = opts.pluginKey ?? DEFAULT_PLUGIN_KEY;
+  const directoryResult = resolveDirectorySourceRoot(targetHome, pluginKey);
+  if (directoryResult !== undefined)
+    return directoryResult;
   const registryPath = path9.join(targetHome, ".claude", "plugins", "installed_plugins.json");
   let records;
   try {
@@ -27430,6 +27482,7 @@ import fs6 from "fs";
 import path10 from "path";
 import os6 from "os";
 import crypto4 from "crypto";
+import { execFileSync as execFileSync2 } from "child_process";
 function namedError3(name, message) {
   const err = new SwitchEngineError(message);
   err.name = name;
@@ -27508,6 +27561,46 @@ function matchesGlob(filename, glob) {
   const suffix = glob.slice(starIdx + 1);
   return filename.length >= prefix.length + suffix.length && filename.startsWith(prefix) && filename.endsWith(suffix);
 }
+function matchingFileNames(dir, glob) {
+  return fs6.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && matchesGlob(e.name, glob)).map((e) => e.name);
+}
+function detectGitAvailability(dir) {
+  try {
+    const out = execFileSync2("git", ["-C", dir, "rev-parse", "--is-inside-work-tree"], {
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    return out.toString().trim() === "true" ? "in-repo" : "not-a-repo";
+  } catch (err) {
+    return err.code === "ENOENT" ? "no-git" : "not-a-repo";
+  }
+}
+function gitTrackedFileNames(dir, filenames) {
+  if (filenames.length === 0)
+    return new Set;
+  try {
+    const out = execFileSync2("git", ["-C", dir, "ls-files", "--", ...filenames], {
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    return new Set(out.toString().split(`
+`).map((line) => line.trim()).filter(Boolean));
+  } catch {
+    return new Set;
+  }
+}
+function checkTrackedPathGuard(activeDir, filenames) {
+  if (filenames.length === 0 || !fs6.existsSync(activeDir))
+    return GUARD_PASS;
+  const availability = detectGitAvailability(activeDir);
+  if (availability === "no-git")
+    return GUARD_UNCHECKED;
+  if (availability === "not-a-repo")
+    return GUARD_PASS;
+  const tracked = gitTrackedFileNames(activeDir, filenames);
+  if (tracked.size === 0)
+    return GUARD_PASS;
+  const offending = filenames.find((name) => tracked.has(name));
+  return { blocked: true, path: path10.join(activeDir, offending), unchecked: false };
+}
 function assertStateWritable(stateFilePath) {
   const dir = path10.dirname(stateFilePath);
   try {
@@ -27637,12 +27730,27 @@ function switchProfile(opts) {
         rows.push({ host: h.host, status: "switched" });
         continue;
       }
+      const candidateNames = matchingFileNames(h.variantDir, h.layout.activeGlob);
+      const guard = checkTrackedPathGuard(h.layout.activeDir, candidateNames);
+      if (guard.blocked) {
+        rows.push({
+          host: h.host,
+          status: "failed",
+          reason: `refusing to write ${guard.path} \u2014 it is tracked by git and this switch would dirty the checkout`
+        });
+        continue;
+      }
       try {
         const filesChanged = copyVariant(h.host, h.layout, h.variantDir);
         updatePlatform(stateFilePath, h.host, {
           modelProfile: { profile: opts.profile, switchedAt: new Date().toISOString() }
         });
-        rows.push({ host: h.host, status: "switched", filesChanged });
+        rows.push({
+          host: h.host,
+          status: "switched",
+          filesChanged,
+          ...guard.unchecked ? { reason: "tracked-path guard could not verify (git unavailable) \u2014 proceeded unchecked" } : {}
+        });
       } catch (err) {
         rows.push({ host: h.host, status: "failed", reason: err.message });
       }
@@ -27658,7 +27766,7 @@ function orderRows(universe, rows) {
   const byHost = new Map(rows.map((r) => [r.host, r]));
   return HOSTS.filter((h) => universe.includes(h) && byHost.has(h)).map((h) => byHost.get(h));
 }
-var SwitchEngineError, UnknownProfileError = (profile, known) => namedError3("UnknownProfileError", `unknown profile "${profile}" \u2014 installed: ${known.length > 0 ? known.join(", ") : "none"}`), NoHostsDetectedError = () => namedError3("NoHostsDetectedError", "no installed hosts found");
+var SwitchEngineError, UnknownProfileError = (profile, known) => namedError3("UnknownProfileError", `unknown profile "${profile}" \u2014 installed: ${known.length > 0 ? known.join(", ") : "none"}`), NoHostsDetectedError = () => namedError3("NoHostsDetectedError", "no installed hosts found"), GUARD_PASS, GUARD_UNCHECKED;
 var init_engine = __esm(() => {
   init_hosts();
   init_state();
@@ -27670,6 +27778,8 @@ var init_engine = __esm(() => {
       this.name = "SwitchEngineError";
     }
   };
+  GUARD_PASS = { blocked: false, unchecked: false };
+  GUARD_UNCHECKED = { blocked: false, unchecked: true };
 });
 
 // ../../packages/shared/dist/profile-switch/report.js
@@ -138783,7 +138893,7 @@ var init_git_ref_validation = __esm(() => {
 });
 
 // ../../packages/core/dist/services/symbol/impact-analysis.js
-import { execFileSync as execFileSync2 } from "child_process";
+import { execFileSync as execFileSync3 } from "child_process";
 function readBfsCteFlag() {
   try {
     return Boolean(config2.get("impact")?.bfsCteEnabled);
@@ -139109,19 +139219,19 @@ function defaultDiffRunner(projectPath2, scope, baseBranch, since) {
     let diffRange;
     if (since) {
       try {
-        ref = execFileSync2("git", ["-C", projectPath2, "rev-parse", "--verify", `${since}^{commit}`], {
+        ref = execFileSync3("git", ["-C", projectPath2, "rev-parse", "--verify", `${since}^{commit}`], {
           cwd: projectPath2,
           encoding: "utf-8",
           stdio: ["ignore", "pipe", "pipe"]
         }).trim();
       } catch {
-        ref = execFileSync2("git", ["-C", projectPath2, "rev-list", "-1", `--before=${since}`, "HEAD"], {
+        ref = execFileSync3("git", ["-C", projectPath2, "rev-list", "-1", `--before=${since}`, "HEAD"], {
           cwd: projectPath2,
           encoding: "utf-8",
           stdio: ["ignore", "pipe", "pipe"]
         }).trim();
         if (!ref) {
-          const emptyTree = execFileSync2("git", ["hash-object", "-t", "tree", "--stdin"], {
+          const emptyTree = execFileSync3("git", ["hash-object", "-t", "tree", "--stdin"], {
             cwd: projectPath2,
             encoding: "utf-8",
             input: "",
@@ -139133,7 +139243,7 @@ function defaultDiffRunner(projectPath2, scope, baseBranch, since) {
     }
     args.push(diffRange ?? `${ref}...HEAD`);
   }
-  const out = execFileSync2("git", args, {
+  const out = execFileSync3("git", args, {
     cwd: projectPath2,
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"],
@@ -139145,7 +139255,7 @@ function defaultDiffRunner(projectPath2, scope, baseBranch, since) {
   let untrackedFiltered = 0;
   const merged = new Set(tracked);
   if (includeUntracked) {
-    const untracked = execFileSync2("git", ["-C", projectPath2, "ls-files", "--others", "--exclude-standard"], {
+    const untracked = execFileSync3("git", ["-C", projectPath2, "ls-files", "--others", "--exclude-standard"], {
       cwd: projectPath2,
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"],
@@ -140181,7 +140291,7 @@ var init_tools = __esm(() => {
 });
 
 // ../../packages/core/dist/services/executor/runtime.js
-import { execFileSync as execFileSync3, execSync } from "child_process";
+import { execFileSync as execFileSync4, execSync } from "child_process";
 function commandExists(cmd) {
   try {
     const check2 = isWindows ? `where ${cmd}` : `command -v ${cmd}`;
@@ -140214,7 +140324,7 @@ function getVersion(cmd, args = ["--version"], deps) {
         timeout: 5000
       }).trim().split(/\r?\n/)[0];
     }
-    return execFileSync3(cmd, args, {
+    return execFileSync4(cmd, args, {
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"],
       timeout: 5000
@@ -140355,12 +140465,12 @@ var init_runtime = __esm(() => {
 
 // ../../packages/core/dist/services/executor/sandbox.js
 import { realpathSync as realpathSync2 } from "fs";
-import { execFileSync as execFileSync4 } from "child_process";
+import { execFileSync as execFileSync5 } from "child_process";
 function isDockerAvailable() {
   if (_dockerAvailable !== null)
     return _dockerAvailable;
   try {
-    execFileSync4("docker", ["--version"], { stdio: "pipe", timeout: 5000 });
+    execFileSync5("docker", ["--version"], { stdio: "pipe", timeout: 5000 });
     _dockerAvailable = true;
   } catch {
     _dockerAvailable = false;
@@ -140371,7 +140481,7 @@ function isSeatbeltAvailable() {
   if (_seatbeltAvailable !== null)
     return _seatbeltAvailable;
   try {
-    execFileSync4("sandbox-exec", ["--version"], { stdio: "pipe", timeout: 5000 });
+    execFileSync5("sandbox-exec", ["--version"], { stdio: "pipe", timeout: 5000 });
     _seatbeltAvailable = true;
   } catch {
     _seatbeltAvailable = false;
@@ -140476,7 +140586,7 @@ var init_sandbox = __esm(() => {
 });
 
 // ../../packages/core/dist/services/executor/executor.js
-import { spawn, execSync as execSync2, execFileSync as execFileSync5 } from "child_process";
+import { spawn, execSync as execSync2, execFileSync as execFileSync6 } from "child_process";
 import { mkdtempSync, writeFileSync as writeFileSync2, rmSync, realpathSync as realpathSync3 } from "fs";
 import { join as join3, resolve as resolve5, isAbsolute, relative as relative2 } from "path";
 import { tmpdir } from "os";
@@ -140679,7 +140789,7 @@ ${body}`;
     const binPath = srcPath.replace(/\.rs$/, isWin ? ".exe" : "");
     try {
       try {
-        execFileSync5("rustc", [srcPath, "-o", binPath], {
+        execFileSync6("rustc", [srcPath, "-o", binPath], {
           cwd,
           timeout: Math.min(timeout, 60000),
           encoding: "utf-8",
@@ -143621,6 +143731,85 @@ var init_scheduler = __esm(() => {
   };
 });
 
+// ../../packages/core/dist/data/proposal/proposal-payload-validation.js
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isString(value) {
+  return typeof value === "string";
+}
+function isNumber(value) {
+  return typeof value === "number";
+}
+function isValidProposalPayload(kind, value) {
+  const rule = PROPOSAL_PAYLOAD_RULES[kind];
+  if (!Object.keys(value).every((key) => rule.allowedKeys.includes(key)))
+    return false;
+  if (rule.requireNonEmpty && Object.keys(value).length === 0)
+    return false;
+  for (const [field3, fieldRule] of Object.entries(rule.fields)) {
+    const present = value[field3] !== undefined;
+    if (!present) {
+      if (!fieldRule.optional)
+        return false;
+      continue;
+    }
+    if (!fieldRule.validate(value[field3]))
+      return false;
+  }
+  return true;
+}
+function assertValidProposalPayload(kind, value) {
+  if (!isRecord(value)) {
+    throw new ProposalPayloadValidationError(kind, `proposal payload must be an object for kind "${kind}"`);
+  }
+  if (!isValidProposalPayload(kind, value)) {
+    throw new ProposalPayloadValidationError(kind, `proposal payload is invalid for kind "${kind}"`);
+  }
+}
+var PROPOSAL_PAYLOAD_RULES, ProposalPayloadValidationError;
+var init_proposal_payload_validation = __esm(() => {
+  PROPOSAL_PAYLOAD_RULES = {
+    "memory.create": {
+      allowedKeys: ["content", "type", "level", "importance", "tags"],
+      fields: {
+        content: { optional: false, validate: isString },
+        type: { optional: true, validate: isString },
+        level: { optional: true, validate: isNumber },
+        importance: { optional: true, validate: isNumber },
+        tags: { optional: true, validate: isStringArray }
+      }
+    },
+    "memory.update": {
+      allowedKeys: ["content", "importance", "tags"],
+      requireNonEmpty: true,
+      fields: {
+        content: { optional: true, validate: isString },
+        importance: { optional: true, validate: isNumber },
+        tags: { optional: true, validate: isStringArray }
+      }
+    },
+    "memory.tag": {
+      allowedKeys: ["tags"],
+      fields: {
+        tags: { optional: false, validate: isStringArray }
+      }
+    }
+  };
+  ProposalPayloadValidationError = class ProposalPayloadValidationError extends Error {
+    kind;
+    statusCode = 400;
+    constructor(kind, message) {
+      super(message);
+      this.kind = kind;
+      this.name = "ProposalPayloadValidationError";
+    }
+  };
+});
+
 // ../../packages/core/dist/data/proposal/proposal-contract.js
 class MemoryProposalStore {
   rows = [];
@@ -143644,26 +143833,53 @@ class MemoryProposalStore {
     row.decidedAt = decidedAt ?? Date.now();
     return structuredClone(row);
   }
+  async create(input) {
+    assertValidProposalPayload(input.kind, input.payload);
+    const record3 = {
+      id: input.id,
+      projectId: input.projectId,
+      kind: input.kind,
+      targetMemoryId: input.targetMemoryId ?? null,
+      payload: input.payload,
+      rationale: input.rationale ?? "",
+      status: "pending",
+      createdAt: input.createdAt ?? Date.now(),
+      decidedAt: null
+    };
+    this.rows.push(structuredClone(record3));
+    return structuredClone(record3);
+  }
+  async update(id, patch) {
+    const row = this.rows.find((item) => item.id === id);
+    if (!row)
+      return null;
+    if (patch.payload !== undefined)
+      assertValidProposalPayload(row.kind, patch.payload);
+    if (patch.rationale !== undefined)
+      row.rationale = patch.rationale;
+    if (patch.payload !== undefined)
+      row.payload = patch.payload;
+    return structuredClone(row);
+  }
+  async delete(id) {
+    const index = this.rows.findIndex((item) => item.id === id);
+    if (index === -1)
+      return null;
+    this.rows.splice(index, 1);
+    return id;
+  }
   async journalMode() {
     return "memory";
   }
 }
 var PROPOSAL_STATUSES, PROPOSAL_KINDS;
 var init_proposal_contract = __esm(() => {
+  init_proposal_payload_validation();
   PROPOSAL_STATUSES = ["pending", "approved", "rejected"];
   PROPOSAL_KINDS = ["memory.create", "memory.update", "memory.tag"];
 });
 
 // ../../packages/core/dist/data/proposal/proposal-repository-pg.js
-function isRecord(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function stringArray(value) {
-  return Array.isArray(value) && value.every((item) => typeof item === "string");
-}
-function validKeys(value, allowed) {
-  return Object.keys(value).every((key) => allowed.includes(key));
-}
 function parsePayload(raw2, kind) {
   let value;
   try {
@@ -143674,15 +143890,7 @@ function parsePayload(raw2, kind) {
   if (!isRecord(value)) {
     throw storeCorruption("proposal.payload_json", new TypeError("expected object"));
   }
-  let valid = false;
-  if (kind === "memory.create") {
-    valid = validKeys(value, ["content", "type", "level", "importance", "tags"]) && typeof value.content === "string" && (value.type === undefined || typeof value.type === "string") && (value.level === undefined || typeof value.level === "number") && (value.importance === undefined || typeof value.importance === "number") && (value.tags === undefined || stringArray(value.tags));
-  } else if (kind === "memory.update") {
-    valid = validKeys(value, ["content", "importance", "tags"]) && Object.keys(value).length > 0 && (value.content === undefined || typeof value.content === "string") && (value.importance === undefined || typeof value.importance === "number") && (value.tags === undefined || stringArray(value.tags));
-  } else {
-    valid = validKeys(value, ["tags"]) && stringArray(value.tags);
-  }
-  if (!valid) {
+  if (!isValidProposalPayload(kind, value)) {
     throw storeCorruption("proposal.payload_json", new TypeError("invalid proposal payload"));
   }
   return value;
@@ -143816,6 +144024,65 @@ class PgProposalStore {
     this.mirror.set(id, persisted);
     return structuredClone(persisted);
   }
+  async create(input) {
+    assertValidProposalPayload(input.kind, input.payload);
+    const record3 = {
+      id: input.id,
+      projectId: input.projectId,
+      kind: input.kind,
+      targetMemoryId: input.targetMemoryId ?? null,
+      payload: input.payload,
+      rationale: input.rationale ?? "",
+      status: "pending",
+      createdAt: input.createdAt ?? Date.now(),
+      decidedAt: null
+    };
+    await this.insert(record3);
+    return record3;
+  }
+  async update(id, patch) {
+    await this.ensureHydrated();
+    const current = this.mirror.get(id);
+    if (!current)
+      return null;
+    if (patch.payload !== undefined) {
+      assertValidProposalPayload(current.kind, patch.payload);
+    }
+    const merged = {
+      ...current,
+      ...patch.rationale !== undefined ? { rationale: patch.rationale } : {},
+      ...patch.payload !== undefined ? { payload: patch.payload } : {}
+    };
+    let rows;
+    try {
+      rows = await this.getClient().$queryRaw`
+        UPDATE proposals
+        SET rationale = ${merged.rationale}, payload_json = ${JSON.stringify(merged.payload)}
+        WHERE id = ${id}
+        RETURNING id, project_id, kind, target_memory_id, payload_json,
+                  rationale, status, created_at, decided_at`;
+    } catch (error51) {
+      throw searchBackendUnavailable("proposal_store", error51);
+    }
+    if (!rows[0])
+      return null;
+    const persisted = toRecord(rows[0]);
+    this.mirror.set(id, persisted);
+    return structuredClone(persisted);
+  }
+  async delete(id) {
+    await this.ensureHydrated();
+    let affected;
+    try {
+      affected = await this.getClient().$executeRaw`DELETE FROM proposals WHERE id = ${id}`;
+    } catch (error51) {
+      throw searchBackendUnavailable("proposal_store", error51);
+    }
+    if (affected === 0)
+      return null;
+    this.mirror.delete(id);
+    return id;
+  }
   async journalMode() {
     await this.ensureHydrated();
     return "postgres";
@@ -143832,6 +144099,7 @@ var init_proposal_repository_pg = __esm(() => {
   init_alias_resolver();
   init_search_diagnostics();
   init_proposal_contract();
+  init_proposal_payload_validation();
 });
 
 // ../../packages/core/dist/data/proposal/proposal-repository.js
@@ -164234,6 +164502,29 @@ class MemoryHandoffStore {
     row.acceptedAt = status === "accepted" ? acceptedAt ?? Date.now() : null;
     return structuredClone(row);
   }
+  async update(id, patch) {
+    const row = this.rows.find((item) => item.id === id);
+    if (!row)
+      return null;
+    if (patch.targetAgent !== undefined)
+      row.targetAgent = patch.targetAgent;
+    if (patch.summary !== undefined)
+      row.summary = patch.summary;
+    if (patch.openQuestions !== undefined)
+      row.openQuestions = patch.openQuestions;
+    if (patch.nextSteps !== undefined)
+      row.nextSteps = patch.nextSteps;
+    if (patch.files !== undefined)
+      row.files = patch.files;
+    return structuredClone(row);
+  }
+  async delete(id) {
+    const index = this.rows.findIndex((item) => item.id === id);
+    if (index === -1)
+      return null;
+    this.rows.splice(index, 1);
+    return id;
+  }
   async journalMode() {
     return "memory";
   }
@@ -164389,6 +164680,53 @@ class PgHandoffStore {
     this.mirror.set(id, persisted);
     return structuredClone(persisted);
   }
+  async update(id, patch) {
+    await this.ensureHydrated();
+    const current = this.mirror.get(id);
+    if (!current)
+      return null;
+    const merged = {
+      ...current,
+      ...patch.targetAgent !== undefined ? { targetAgent: patch.targetAgent } : {},
+      ...patch.summary !== undefined ? { summary: patch.summary } : {},
+      ...patch.openQuestions !== undefined ? { openQuestions: patch.openQuestions } : {},
+      ...patch.nextSteps !== undefined ? { nextSteps: patch.nextSteps } : {},
+      ...patch.files !== undefined ? { files: patch.files } : {}
+    };
+    let rows;
+    try {
+      rows = await this.getClient().$queryRaw`
+        UPDATE handoffs
+        SET target_agent = ${merged.targetAgent}, summary = ${merged.summary},
+            open_questions_json = ${JSON.stringify(merged.openQuestions ?? [])},
+            next_steps_json = ${JSON.stringify(merged.nextSteps ?? [])},
+            files_json = ${JSON.stringify(merged.files ?? [])}
+        WHERE id = ${id}
+        RETURNING id, project_id, source_session_id, target_agent, summary,
+                  open_questions_json, next_steps_json, files_json, status,
+                  created_at, accepted_at`;
+    } catch (error51) {
+      throw searchBackendUnavailable("handoff_store", error51);
+    }
+    if (!rows[0])
+      return null;
+    const persisted = toRecord2(rows[0]);
+    this.mirror.set(id, persisted);
+    return structuredClone(persisted);
+  }
+  async delete(id) {
+    await this.ensureHydrated();
+    let affected;
+    try {
+      affected = await this.getClient().$executeRaw`DELETE FROM handoffs WHERE id = ${id}`;
+    } catch (error51) {
+      throw searchBackendUnavailable("handoff_store", error51);
+    }
+    if (affected === 0)
+      return null;
+    this.mirror.delete(id);
+    return id;
+  }
   async journalMode() {
     await this.ensureHydrated();
     return "postgres";
@@ -164427,8 +164765,6 @@ var init_handoff_repository = __esm(() => {
 });
 
 // ../../packages/core/dist/services/handoff/handoff-service.js
-import { randomUUID as randomUUID10 } from "crypto";
-
 class HandoffService {
   store;
   memoryRepo;
@@ -164440,7 +164776,8 @@ class HandoffService {
     this.idFactory = deps.idFactory ?? (() => newHandoffId());
     const injectedRepo = deps.memoryRepo;
     this.memoryRepo = injectedRepo ?? {
-      insert: (i) => getMemoryRepository().insert(i)
+      insert: (i) => getMemoryRepository().insert(i),
+      update: (id, p) => getMemoryRepository().update(id, p)
     };
   }
   async begin(input) {
@@ -164482,7 +164819,7 @@ class HandoffService {
     return { ok: true, id, status: "open", memoryId };
   }
   async dualWrite(record3) {
-    const memId = `handoff-mem-${record3.id}-${randomUUID10().slice(0, 8)}`;
+    const memId = dualWriteMemoryId(record3.id);
     const input = buildHandoffMemoryInput(memId, record3);
     await Promise.resolve(this.memoryRepo.insert(input));
     return memId;
@@ -164526,6 +164863,50 @@ class HandoffService {
   async listPending(projectId, targetAgent) {
     return this.store.listPending(projectId, targetAgent ?? undefined);
   }
+  async update(params) {
+    if (!params || !params.id) {
+      return { ok: false, reason: "missing-id" };
+    }
+    const row = await this.store.getById(params.id);
+    if (!row)
+      return { ok: false, reason: "not-found" };
+    if (params.projectId && row.projectId !== params.projectId) {
+      return { ok: false, reason: "project-mismatch" };
+    }
+    const updated = await this.store.update(params.id, params.patch);
+    if (!updated)
+      return { ok: false, reason: "not-found" };
+    const touchesMemoryContent = params.patch.summary !== undefined || params.patch.openQuestions !== undefined || params.patch.nextSteps !== undefined || params.patch.files !== undefined;
+    if (touchesMemoryContent) {
+      await this.refreshDualWriteMemory(updated);
+    }
+    return { ok: true, handoff: updated };
+  }
+  async refreshDualWriteMemory(record3) {
+    try {
+      const memId = dualWriteMemoryId(record3.id);
+      const content = formatMemoryContent(record3);
+      await Promise.resolve(this.memoryRepo.update(memId, { content }));
+    } catch {}
+  }
+  async delete(params) {
+    if (!params || !params.id) {
+      return { ok: false, reason: "missing-id" };
+    }
+    const row = await this.store.getById(params.id);
+    if (!row)
+      return { ok: false, reason: "not-found" };
+    if (params.projectId && row.projectId !== params.projectId) {
+      return { ok: false, reason: "project-mismatch" };
+    }
+    const deletedId = await this.store.delete(params.id);
+    if (!deletedId)
+      return { ok: false, reason: "not-found" };
+    return { ok: true, id: deletedId };
+  }
+}
+function dualWriteMemoryId(handoffId) {
+  return `handoff-mem-${handoffId}`;
 }
 function buildHandoffMemoryInput(memId, record3) {
   const content = formatMemoryContent(record3);
@@ -164739,6 +165120,7 @@ __export(exports_dist, {
   newObservationId: () => newObservationId,
   newHandoffId: () => newHandoffId,
   jsonToKeyPathChunks: () => jsonToKeyPathChunks,
+  isValidProposalPayload: () => isValidProposalPayload,
   isKnownRegistryTable: () => isKnownRegistryTable,
   intentSearch: () => intentSearch,
   installProjectIdentityGuardsFromPool: () => installProjectIdentityGuardsFromPool,
@@ -164831,6 +165213,7 @@ __export(exports_dist, {
   boundDiagnostics: () => boundDiagnostics,
   bootstrapService: () => bootstrapService,
   autoImproveJob: () => autoImproveJob,
+  assertValidProposalPayload: () => assertValidProposalPayload,
   assertUrlSafe: () => assertUrlSafe,
   assertParserReadyForIndexing: () => assertParserReadyForIndexing,
   assertGenerationNotStale: () => assertGenerationNotStale,
@@ -164895,6 +165278,7 @@ __export(exports_dist, {
   RUBY_QUERY_PACK: () => RUBY_QUERY_PACK,
   REFERENCE_TOKEN_COST: () => REFERENCE_TOKEN_COST,
   QueueSaturatedError: () => QueueSaturatedError,
+  ProposalPayloadValidationError: () => ProposalPayloadValidationError,
   ProposalEnrichmentSchema: () => ProposalEnrichmentSchema,
   ProjectIdentityPreviewRequestSchema: () => ProjectIdentityPreviewRequestSchema,
   ProjectIdentityPreviewPlanner: () => ProjectIdentityPreviewPlanner,
@@ -164910,6 +165294,7 @@ __export(exports_dist, {
   ParserAcquireTimeoutError: () => ParserAcquireTimeoutError,
   PYTHON_QUERY_PACK: () => PYTHON_QUERY_PACK,
   PROPOSAL_STATUSES: () => PROPOSAL_STATUSES,
+  PROPOSAL_PAYLOAD_RULES: () => PROPOSAL_PAYLOAD_RULES,
   PROPOSAL_KINDS: () => PROPOSAL_KINDS,
   PROJECT_IDENTITY_REGISTRY_VERSION: () => PROJECT_IDENTITY_REGISTRY_VERSION,
   PROJECT_IDENTITY_PLAN_VERSION: () => PROJECT_IDENTITY_PLAN_VERSION,
@@ -165025,6 +165410,7 @@ var init_dist15 = __esm(() => {
   init_handoff_service();
   init_handoff_auto_injector();
   init_proposal_repository();
+  init_proposal_payload_validation();
   init_auto_improve_job();
   init_tools();
   init_services();
@@ -167667,6 +168053,26 @@ function boundedInt(val, def, min, max) {
   const i = Math.trunc(n);
   return Math.max(min, Math.min(max, i));
 }
+var HANDOFF_PATCH_ALLOWED_FIELDS = [
+  "targetAgent",
+  "summary",
+  "openQuestions",
+  "nextSteps",
+  "files"
+];
+var PROPOSAL_PATCH_ALLOWED_FIELDS = ["rationale", "payload"];
+function isStringArray2(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isRecord2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isProposalKind(value) {
+  return typeof value === "string" && PROPOSAL_KINDS.includes(value);
+}
+function proposalPayloadValidationStatus(error51) {
+  return error51 instanceof ProposalPayloadValidationError ? error51.statusCode : null;
+}
 function serializeSession(s) {
   if (!s)
     return null;
@@ -167921,6 +168327,8 @@ class EmbeddedApiClient {
           return await this.handleProposalApprove(body);
         case "/api/v1/proposal/reject":
           return await this.handleProposalReject(body);
+        case "/api/v1/proposal/create":
+          return await this.handleProposalCreate(body);
         case "/api/v1/synapse/session":
           return await this.handleSynapseSession(body);
         case "/api/v1/profiles/switch":
@@ -167983,6 +168391,14 @@ class EmbeddedApiClient {
           return { success: false, error: "Session not found or expired" };
         return { success: true, data: serializeSession(updated) };
       }
+      const handoffMatch = endpoint.match(/^\/api\/v1\/handoff\/([^/]+)$/);
+      if (handoffMatch) {
+        return await this.handleHandoffUpdate(handoffMatch[1], body);
+      }
+      const proposalMatch = endpoint.match(/^\/api\/v1\/proposal\/([^/]+)$/);
+      if (proposalMatch) {
+        return await this.handleProposalUpdate(proposalMatch[1], body);
+      }
       return httpError(404, `EmbeddedApiClient: no PATCH handler for ${endpoint}`);
     } catch (error51) {
       if (error51 instanceof ApiHttpError)
@@ -168003,6 +168419,14 @@ class EmbeddedApiClient {
         await workspaceManager.removeWorkspace(wsMatch[1]);
         return { success: true, data: { removed: wsMatch[1] } };
       }
+      const handoffMatch = endpoint.match(/^\/api\/v1\/handoff\/([^/]+)$/);
+      if (handoffMatch) {
+        return await this.handleHandoffDelete(handoffMatch[1], _body);
+      }
+      const proposalMatch = endpoint.match(/^\/api\/v1\/proposal\/([^/]+)$/);
+      if (proposalMatch) {
+        return await this.handleProposalDelete(proposalMatch[1], _body);
+      }
       return httpError(404, `EmbeddedApiClient: no DELETE handler for ${endpoint}`);
     } catch (error51) {
       if (error51 instanceof ApiHttpError)
@@ -168238,6 +168662,61 @@ class EmbeddedApiClient {
       throw httpError(500, `handoff list failed: ${e.message}`);
     }
   }
+  async handleHandoffUpdate(id, body) {
+    const raw2 = body ?? {};
+    const { projectId, ...patchFields } = raw2;
+    const keys = Object.keys(patchFields);
+    const rejected = keys.filter((k) => !HANDOFF_PATCH_ALLOWED_FIELDS.includes(k));
+    if (rejected.length > 0) {
+      throw httpError(400, `field not allowed: ${rejected.join(", ")}`);
+    }
+    const patch = {};
+    if ("targetAgent" in patchFields) {
+      const v = patchFields.targetAgent;
+      if (v !== null && typeof v !== "string")
+        throw httpError(400, "targetAgent must be a string or null");
+      patch.targetAgent = v;
+    }
+    if ("summary" in patchFields) {
+      if (typeof patchFields.summary !== "string")
+        throw httpError(400, "summary must be a string");
+      patch.summary = patchFields.summary;
+    }
+    if ("openQuestions" in patchFields) {
+      if (!isStringArray2(patchFields.openQuestions))
+        throw httpError(400, "openQuestions must be an array of strings");
+      patch.openQuestions = patchFields.openQuestions;
+    }
+    if ("nextSteps" in patchFields) {
+      if (!isStringArray2(patchFields.nextSteps))
+        throw httpError(400, "nextSteps must be an array of strings");
+      patch.nextSteps = patchFields.nextSteps;
+    }
+    if ("files" in patchFields) {
+      if (!isStringArray2(patchFields.files))
+        throw httpError(400, "files must be an array of strings");
+      patch.files = patchFields.files;
+    }
+    if (Object.keys(patch).length === 0)
+      throw httpError(400, "no editable field provided");
+    const result = await getHandoffService().update({
+      id,
+      projectId,
+      patch
+    });
+    if (!result.ok) {
+      const status = result.reason === "not-found" || result.reason === "project-mismatch" ? 404 : 400;
+      throw httpError(status, result.reason ?? "update failed");
+    }
+    return { success: true, data: result.handoff };
+  }
+  async handleHandoffDelete(id, body) {
+    const projectId = body?.projectId;
+    const result = await getHandoffService().delete({ id, projectId });
+    if (!result.ok)
+      throw httpError(404, result.reason ?? "not-found");
+    return { success: true, data: { id: result.id } };
+  }
   async handleProposalList(body) {
     const { projectId } = body;
     if (!projectId || !String(projectId).trim()) {
@@ -168274,6 +168753,104 @@ class EmbeddedApiClient {
       throw httpError(500, `proposal reject failed: ${e.message}`);
     }
   }
+  async handleProposalCreate(body) {
+    const raw2 = body ?? {};
+    if (typeof raw2.projectId !== "string" || !raw2.projectId.trim()) {
+      throw httpError(400, "projectId required");
+    }
+    if (!isProposalKind(raw2.kind)) {
+      throw httpError(400, `kind must be one of ${PROPOSAL_KINDS.join(", ")}`);
+    }
+    if (!isRecord2(raw2.payload)) {
+      throw httpError(400, "payload must be an object");
+    }
+    if (raw2.rationale !== undefined && typeof raw2.rationale !== "string") {
+      throw httpError(400, "rationale must be a string");
+    }
+    if (raw2.targetMemoryId !== undefined && raw2.targetMemoryId !== null && typeof raw2.targetMemoryId !== "string") {
+      throw httpError(400, "targetMemoryId must be a string or null");
+    }
+    const projectId = raw2.projectId;
+    const kind = raw2.kind;
+    const payload = raw2.payload;
+    try {
+      const record3 = await getProposalStore().create({
+        id: newProposalId(),
+        projectId,
+        kind,
+        payload,
+        rationale: raw2.rationale,
+        targetMemoryId: raw2.targetMemoryId
+      });
+      return { success: true, data: record3 };
+    } catch (e) {
+      const validationStatus = proposalPayloadValidationStatus(e);
+      if (validationStatus !== null)
+        throw httpError(validationStatus, e.message);
+      throw e;
+    }
+  }
+  async handleProposalUpdate(id, body) {
+    const raw2 = body ?? {};
+    const { projectId, ...patchFields } = raw2;
+    const keys = Object.keys(patchFields);
+    const rejected = keys.filter((k) => !PROPOSAL_PATCH_ALLOWED_FIELDS.includes(k));
+    if (rejected.length > 0) {
+      throw httpError(400, `field not allowed: ${rejected.join(", ")}`);
+    }
+    const patch = {};
+    if ("rationale" in patchFields) {
+      if (typeof patchFields.rationale !== "string")
+        throw httpError(400, "rationale must be a string");
+      patch.rationale = patchFields.rationale;
+    }
+    if ("payload" in patchFields) {
+      if (!isRecord2(patchFields.payload))
+        throw httpError(400, "payload must be an object");
+      patch.payload = patchFields.payload;
+    }
+    if (Object.keys(patch).length === 0)
+      throw httpError(400, "no editable field provided");
+    const current = await getProposalStore().getById(id);
+    if (!current)
+      throw httpError(404, "not-found");
+    if (projectId && current.projectId !== projectId)
+      throw httpError(404, "project-mismatch");
+    try {
+      const updated = await getProposalStore().update(id, {
+        ...patch.rationale !== undefined ? { rationale: patch.rationale } : {},
+        ...patch.payload !== undefined ? { payload: patch.payload } : {}
+      });
+      if (!updated)
+        throw httpError(404, "not-found");
+      return { success: true, data: updated };
+    } catch (e) {
+      if (e instanceof ApiHttpError)
+        throw e;
+      const validationStatus = proposalPayloadValidationStatus(e);
+      if (validationStatus !== null)
+        throw httpError(validationStatus, e.message);
+      throw e;
+    }
+  }
+  async handleProposalDelete(id, body) {
+    const projectId = body?.projectId;
+    const current = await getProposalStore().getById(id);
+    if (!current)
+      throw httpError(404, "not-found");
+    if (projectId && current.projectId !== projectId)
+      throw httpError(404, "project-mismatch");
+    const deletedId = await getProposalStore().delete(id);
+    if (!deletedId)
+      throw httpError(404, "not-found");
+    return {
+      success: true,
+      data: {
+        id: deletedId,
+        ...current.status === "approved" ? { note: "approved proposal's applied memory edit was not reversed" } : {}
+      }
+    };
+  }
   async handleSynapseSession(body) {
     const registry3 = getSessionRegistry();
     const sessionId = body.sessionId ?? newSynapseSessionId();
@@ -169873,6 +170450,39 @@ var HOOKS_EXEC_TOOL_DEFINITIONS = [
       required: ["projectId"]
     }
   },
+  {
+    name: "handoff_update",
+    description: "Edit a handoff's targetAgent/summary/openQuestions/nextSteps/files by id. Only these five fields are accepted \u2014 status, acceptedAt, id, projectId, createdAt and sourceSessionId are rejected by name; status/acceptedAt stay exclusively handoff_accept/handoff_cancel's. Refreshes the dual-written memory's content when a content-feeding field changes. Missing id or project mismatch return {ok:false, reason}. Never throws.",
+    apiEndpoint: "/api/v1/handoff/:id",
+    apiMethod: "PATCH",
+    inputSchema: {
+      type: "object",
+      properties: {
+        id: { type: "string", description: "Handoff id (required)" },
+        projectId: { type: "string", description: "Optional project scope check (mismatch returns not-found)" },
+        targetAgent: { type: "string", description: "Target agent name (or null to clear)" },
+        summary: { type: "string", description: "Handoff summary" },
+        openQuestions: { type: "array", items: { type: "string" } },
+        nextSteps: { type: "array", items: { type: "string" } },
+        files: { type: "array", items: { type: "string" } }
+      },
+      required: ["id"]
+    }
+  },
+  {
+    name: "handoff_delete",
+    description: "Hard-delete a handoff by id, permitted in any status including open. The dual-written memory row is left intact (dangling metadata.handoffId is accepted, documented behaviour). Missing id or project mismatch return {ok:false, reason}. Never throws.",
+    apiEndpoint: "/api/v1/handoff/:id",
+    apiMethod: "DELETE",
+    inputSchema: {
+      type: "object",
+      properties: {
+        id: { type: "string", description: "Handoff id (required)" },
+        projectId: { type: "string", description: "Optional project scope check (mismatch returns not-found)" }
+      },
+      required: ["id"]
+    }
+  },
   {
     name: "list_proposals",
     description: "List pending auto-improvement proposals for a project (newest-first). The review-gate surfacing primitive: proposals are generated by the auto-improve loop from recurring patterns (repeated queries, hot files, common fixes). Never throws.",
@@ -169920,6 +170530,60 @@ var HOOKS_EXEC_TOOL_DEFINITIONS = [
       required: ["id"]
     }
   },
+  {
+    name: "create_proposal",
+    description: "Create a pending auto-improvement proposal by hand. kind must be memory.create/memory.update/memory.tag; payload is validated against the same per-kind rules the store enforces on read, so a write the reader would reject is refused here instead. Never throws.",
+    apiEndpoint: "/api/v1/proposal/create",
+    apiMethod: "POST",
+    inputSchema: {
+      type: "object",
+      properties: {
+        projectId: { type: "string", description: "Project identifier (required)" },
+        kind: {
+          type: "string",
+          enum: ["memory.create", "memory.update", "memory.tag"],
+          description: "Proposal kind (required)"
+        },
+        payload: {
+          type: "object",
+          description: "Kind-specific payload (required), validated against the same per-kind rules the store enforces on read"
+        },
+        rationale: { type: "string", description: "Optional rationale" },
+        targetMemoryId: { type: "string", description: "Optional target memory id" }
+      },
+      required: ["projectId", "kind", "payload"]
+    }
+  },
+  {
+    name: "update_proposal",
+    description: "Edit a proposal's rationale/payload by id, in any status. kind, targetMemoryId, status, decidedAt, id, projectId and createdAt are rejected by name \u2014 kind/targetMemoryId are immutable because applyProposal branches its whole behaviour on them. A payload edit re-validates against the row's existing kind. Missing id or project mismatch return {ok:false, reason}. Never throws.",
+    apiEndpoint: "/api/v1/proposal/:id",
+    apiMethod: "PATCH",
+    inputSchema: {
+      type: "object",
+      properties: {
+        id: { type: "string", description: "Proposal id (required)" },
+        projectId: { type: "string", description: "Optional project scope check (mismatch returns not-found)" },
+        rationale: { type: "string", description: "Replacement rationale" },
+        payload: { type: "object", description: "Replacement payload, re-validated against the row's existing kind" }
+      },
+      required: ["id"]
+    }
+  },
+  {
+    name: "delete_proposal",
+    description: "Hard-delete a proposal by id, permitted in any status. Deleting an already-approved proposal does not reverse the memory edit it already applied \u2014 the response says so explicitly via a note field. Missing id or project mismatch return {ok:false, reason}. Never throws.",
+    apiEndpoint: "/api/v1/proposal/:id",
+    apiMethod: "DELETE",
+    inputSchema: {
+      type: "object",
+      properties: {
+        id: { type: "string", description: "Proposal id (required)" },
+        projectId: { type: "string", description: "Optional project scope check (mismatch returns not-found)" }
+      },
+      required: ["id"]
+    }
+  },
   {
     name: "execute",
     description: "Run code in a detected polyglot sandbox runtime (js/ts/python/shell/ruby/go/rust/php/perl/r). " + "Returns stdout/stderr. Local-dev trust model: code runs on the host as the current user \u2014 " + "no OS-level isolation. Timeout default 30s, cap 300s. Pass `intent` to trim large outputs.",
@@ -170045,7 +170709,7 @@ var HOOKS_EXEC_TOOL_DEFINITIONS = [
 
 // src/tool-definitions.ts
 var BY_NAME = new Map([...PROJECT_TOOL_DEFINITIONS, ...SEARCH_TOOL_DEFINITIONS, ...MEMORY_TOOL_DEFINITIONS, ...SYNAPSE_TOOL_DEFINITIONS, ...HOOKS_EXEC_TOOL_DEFINITIONS].map((t) => [t.name, t]));
-var CANONICAL_ORDER = ["index", "index_status", "search", "remember", "recall", "memory_update", "memory_delete", "list_checkpoints", "create_checkpoint", "restore_checkpoint", "compress", "optimized_context", "analytics", "list_projects", "project_map", "get_architecture", "search_definitions", "get_references", "go_to_definition", "trace_path", "impact_analysis", "reset_project", "read_file", "synapse_session", "synapse_get", "synapse_update", "synapse_end", "synapse_prime", "synapse_access", "synapse_prefetch", "synapse_list", "synapse_task_begin", "synapse_task_end", "symbol_snippet", "memory_list", "reindex", "hook_ingest", "compact_snapshot", "bootstrap", "handoff_begin", "handoff_accept", "handoff_cancel", "handoff_list_pending", "list_proposals", "approve_proposal", "reject_proposal", "execute", "execute_file", "batch_execute", "fetch_and_index", "rename_project", "merge_projects", "profile_list", "profile_set"];
+var CANONICAL_ORDER = ["index", "index_status", "search", "remember", "recall", "memory_update", "memory_delete", "list_checkpoints", "create_checkpoint", "restore_checkpoint", "compress", "optimized_context", "analytics", "list_projects", "project_map", "get_architecture", "search_definitions", "get_references", "go_to_definition", "trace_path", "impact_analysis", "reset_project", "read_file", "synapse_session", "synapse_get", "synapse_update", "synapse_end", "synapse_prime", "synapse_access", "synapse_prefetch", "synapse_list", "synapse_task_begin", "synapse_task_end", "symbol_snippet", "memory_list", "reindex", "hook_ingest", "compact_snapshot", "bootstrap", "handoff_begin", "handoff_accept", "handoff_cancel", "handoff_list_pending", "handoff_update", "handoff_delete", "list_proposals", "approve_proposal", "reject_proposal", "create_proposal", "update_proposal", "delete_proposal", "execute", "execute_file", "batch_execute", "fetch_and_index", "rename_project", "merge_projects", "profile_list", "profile_set"];
 var TOOL_DEFINITIONS = CANONICAL_ORDER.map((name26) => BY_NAME.get(name26));
 function getToolDefinition(name26) {
   return TOOL_DEFINITIONS.find((t) => t.name === name26);