@monster-orange/den 0.1.0 → 0.2.1

package/src/ui/cli/index.ts

@@ -5,6 +5,7 @@
  * Main entry point for the interactive CLI
  */
 
+import { isNamedTarget } from "./named-target.js";
 import chalk from "chalk";
 import oraSpinner from "ora";
 
@@ -101,6 +102,7 @@ import {
   getReposRoot,
   mergeUserConfig,
   readDenConfig,
+  isProductionEnv,
   readUserConfig,
 } from "../../shared/den-config.js";
 import { deriveGraph } from "../../shared/environment-manager/derivation/derive-graph.js";
@@ -120,7 +122,7 @@ import {
 } from "./applications-command.js";
 import { loadApplications } from "../../shared/environment-manager/load-applications.js";
 import { hasRuntime, repoKind } from "../../shared/repo-kind.js";
-import type { RepoKind } from "../../shared/types/index.js";
+import type { RepoKind, ValidationResult } from "../../shared/types/index.js";
 import { localCommandsFor } from "../../shared/stacks/manifest-commands.js";
 import {
   buildUpPlan,
@@ -131,7 +133,15 @@ import * as fs from "fs";
 import { readManifest } from "../../shared/manifest/read-manifest.js";
 import * as nodePath from "path";
 import { runInit } from "./init.js";
-import { validateManifest } from "../../shared/manifest/validate-manifest.js";
+import {
+  validateManifest,
+  validateManifestLayers,
+} from "../../shared/manifest/validate-manifest.js";
+import {
+  placementRefusal,
+  placementSuffix,
+  servicePlacement,
+} from "../../shared/manifest/placement.js";
 import {
   getDistRoot,
   getEngineRoot,
@@ -290,6 +300,13 @@ const COMMAND_HELP: Record<string, { usage: string; lines: string[] }> = {
       "This org's HTTPS edge: own CA + cert, routes at <name>.<edge.domain>.",
     ],
   },
+  mcp: {
+    usage: "mcp [--port <web port>]",
+    lines: [
+      "An MCP server over stdio for agents: a client of the running web server",
+      `(\`${product().cli} web up\`). Read tools always; actions only as named in mcp.actions.`,
+    ],
+  },
   "local-dev": {
     usage: "local-dev [on|off]",
     lines: [
@@ -345,6 +362,7 @@ const TELEMETRY_COMMANDS = new Set<string>([
   "stack",
   "apps",
   "applications",
+  "mcp",
 ]);
 
 /** Map a raw command token to a PII-safe, registered telemetry command name. */
@@ -362,6 +380,52 @@ function telemetryReason(error: unknown): string {
   return name && name !== "Object" ? name : "Error";
 }
 
+/** Print one manifest's validation: a status line, then each issue. */
+function printValidation(
+  label: string,
+  result: ValidationResult,
+  layer?: string,
+): void {
+  const tag = layer ? `${layer}, ` : "";
+  const plural = (n: number, word: string): string =>
+    `${n} ${word}${n === 1 ? "" : "s"}`;
+  if (result.valid && result.warnings.length === 0) {
+    console.log(
+      chalk.green(`  ✓  ${label}`) +
+        chalk.gray(`  (${tag}v${result.version}, no issues)`),
+    );
+  } else if (result.valid) {
+    console.log(
+      chalk.yellow(`  ⚠  ${label}`) +
+        chalk.gray(
+          `  (${tag}v${result.version}, ${plural(result.warnings.length, "warning")})`,
+        ),
+    );
+  } else {
+    console.log(
+      chalk.red(`  ✗  ${label}`) +
+        chalk.gray(
+          `  (${tag}v${result.version}, ${plural(result.errors.length, "error")}${result.warnings.length > 0 ? `, ${plural(result.warnings.length, "warning")}` : ""})`,
+        ),
+    );
+  }
+
+  for (const err of result.errors) {
+    const path = err.path ? chalk.gray(err.path) + "  " : "";
+    console.log(`  ${chalk.red("ERROR")}   ${path}${err.message}`);
+    if (err.suggestion) {
+      console.log(`            ${chalk.gray("→ " + err.suggestion)}`);
+    }
+  }
+  for (const warn of result.warnings) {
+    const path = warn.path ? chalk.gray(warn.path) + "  " : "";
+    console.log(`  ${chalk.yellow("WARNING")} ${path}${warn.message}`);
+    if (warn.suggestion) {
+      console.log(`            ${chalk.gray("→ " + warn.suggestion)}`);
+    }
+  }
+}
+
 class DenCLI {
   private static readonly serviceCommands = new Set([
     "up",
@@ -631,6 +695,26 @@ class DenCLI {
           cmdApps(args.slice(1));
           break;
 
+        case "mcp": {
+          // Setup subcommands: register the server with agents.
+          const { MCP_CONNECT_SUBCOMMANDS, runMcpConnect } =
+            await import("./mcp-connect.js");
+          if (
+            (MCP_CONNECT_SUBCOMMANDS as readonly string[]).includes(
+              args[1] ?? "",
+            )
+          ) {
+            process.exitCode = await runMcpConnect(args.slice(1));
+            break;
+          }
+          // bin/den routes `mcp` to its own entry (stdout is the protocol);
+          // this covers the CLI run directly from a checkout.
+          await import("./mcp-stdout-guard.js");
+          const { runMcp } = await import("../mcp/server.js");
+          await runMcp(args.slice(1));
+          break;
+        }
+
         case "--help":
         case "-h":
           this.displayHelp();
@@ -1226,7 +1310,15 @@ class DenCLI {
       /** Skip ANY already-healthy node (derived `up` starts only what's down). */
       skipHealthyAll?: boolean;
     },
-    opts?: { force?: boolean },
+    opts?: {
+      force?: boolean;
+      /**
+       * What the user named on the command line (repo or address). A remote
+       * service among them is refused with a non-zero exit; one reached only
+       * as part of a workspace or app run is said and skipped.
+       */
+      named?: readonly string[];
+    },
   ): Promise<void> {
     // How long to show startup output before handing control back to the menu
     // for detachable (long-running) commands like `up`.
@@ -1304,6 +1396,30 @@ class DenCLI {
         printPartialState();
         return;
       }
+      // R13: a remote service is never started or stopped from here. Said,
+      // not failed, so a workspace or app up/down carries on past it.
+      const placed = resolveService(address, workspace);
+      const remote = placed
+        ? placementRefusal(
+            address,
+            servicePlacement(
+              readManifest(placed.repoPath),
+              placed.subsystem,
+              "local",
+            ),
+            (e) => isProductionEnv(e),
+            command,
+          )
+        : null;
+      if (remote) {
+        if (isNamedTarget(address, opts?.named ?? [])) {
+          console.log(chalk.red(`  ✗ ${remote}`));
+          process.exitCode = 1;
+        } else {
+          console.log(chalk.gray(`  • ${remote}`));
+        }
+        continue;
+      }
       if (command === "up" && !seedAddresses.has(address)) {
         const resolved = resolveService(address, workspace);
         if (resolved) {
@@ -1641,6 +1757,7 @@ class DenCLI {
     plan = false,
     pull = false,
   ): Promise<void> {
+    const named = [seed];
     const full = deriveGraph({ scope: "all" });
     // Same positional closure the web "up with deps" uses: everything the seed
     // sits ON TOP OF, never anything above it. Keeps the two entry points from
@@ -1722,12 +1839,17 @@ class DenCLI {
       );
       return;
     }
-    await this.runServicesCommand(order, "up", {
+    await this.runServicesCommand(
       order,
-      waitDepsFor: (address) => hardDepsOf(graph, address),
-      failFast: true,
-      skipHealthyAll: true,
-    });
+      "up",
+      {
+        order,
+        waitDepsFor: (address) => hardDepsOf(graph, address),
+        failFast: true,
+        skipHealthyAll: true,
+      },
+      { named },
+    );
   }
 
   /**
@@ -1783,7 +1905,12 @@ class DenCLI {
       console.log(chalk.gray("  (--dry-run: not stopping anything)\n"));
       return;
     }
-    await this.runServicesCommand(order, "down", { order }, { force });
+    await this.runServicesCommand(
+      order,
+      "down",
+      { order },
+      { force, named: [seed] },
+    );
   }
 
   /** Workspace repos with no runtime (modules, libraries) → their kind. */
@@ -2301,7 +2428,9 @@ class DenCLI {
       return;
     }
     preflightSecrets();
-    await this.runServicesCommand(targets, "up");
+    await this.runServicesCommand(targets, "up", undefined, {
+      named: addresses,
+    });
   }
 
   private async cmdServiceDown(args: string[]): Promise<void> {
@@ -2361,7 +2490,10 @@ class DenCLI {
       addresses.length > 0
         ? addresses
         : this.resolveNoArgServiceTargets("down");
-    await this.runServicesCommand(targets, "down", undefined, { force });
+    await this.runServicesCommand(targets, "down", undefined, {
+      force,
+      named: addresses,
+    });
   }
 
   private async cmdServiceRestart(argv: string[]): Promise<void> {
@@ -2380,7 +2512,9 @@ class DenCLI {
       filtered.length > 0
         ? filtered
         : this.resolveNoArgServiceTargets("restart");
-    await this.runServicesCommand(addresses, "restart");
+    await this.runServicesCommand(addresses, "restart", undefined, {
+      named: filtered,
+    });
   }
 
   /** Service address with a ⏸ marker when the repo is auto-start off. */
@@ -2442,9 +2576,14 @@ class DenCLI {
     for (const r of results) {
       const healthStr = formatHealthLabel(r.health);
       const reasonStr = formatHealthReason(r);
+      const placed = placementSuffix({
+        runs: r.runs ?? "none",
+        target: r.target ?? null,
+      });
 
       table.push([
-        this.labelWithAutostart(r.address, noAutostart),
+        this.labelWithAutostart(r.address, noAutostart) +
+          (placed ? chalk.cyan(`  ${placed}`) : ""),
         r.mode === "dev-managed"
           ? chalk.blue("dev-managed")
           : chalk.magenta("managed"),
@@ -2606,13 +2745,19 @@ class DenCLI {
         /* ignore */
       }
 
+      const placed = placementSuffix({
+        runs: r.runs ?? "none",
+        target: r.target ?? null,
+      });
       table.push([
-        this.labelWithAutostart(r.address, noAutostart),
+        this.labelWithAutostart(r.address, noAutostart) +
+          (placed ? chalk.cyan(`  ${placed}`) : ""),
         r.mode === "dev-managed"
           ? chalk.blue("dev-managed")
           : chalk.magenta("managed"),
         healthStr,
-        cmds.join(", "),
+        // A remote service's commands are never run from here.
+        placed ? chalk.gray("—") : cmds.join(", "),
       ]);
     }
 
@@ -3415,10 +3560,26 @@ class DenCLI {
         req.on("error", reject);
       });
     } else {
-      const filePath = fs.existsSync(target)
-        ? fs.lstatSync(target).isDirectory()
-          ? nodePath.join(target, `${product().manifestYml}`)
-          : target
+      const isDir = fs.existsSync(target) && fs.lstatSync(target).isDirectory();
+      // A repo folder: validate each layer that applies to it (its own or the
+      // held manifest, then manifests/<repo>.override.yml, then the merge).
+      if (isDir) {
+        const layered = validateManifestLayers(nodePath.resolve(target));
+        if (layered.layers.length > 0) {
+          console.log();
+          for (const l of layered.layers)
+            printValidation(
+              chalk.bold(l.file ?? "merged"),
+              l.result,
+              l.layer === "merged" ? "merged" : l.layer,
+            );
+          console.log();
+          if (!layered.valid) process.exit(1);
+          return;
+        }
+      }
+      const filePath = isDir
+        ? nodePath.join(target, `${product().manifestYml}`)
         : target;
 
       if (!fs.existsSync(filePath)) {
@@ -3434,42 +3595,7 @@ class DenCLI {
     );
 
     console.log();
-    if (result.valid && result.warnings.length === 0) {
-      console.log(
-        chalk.green(`  ✓  ${label}`) +
-          chalk.gray(`  (v${result.version}, no issues)`),
-      );
-    } else if (result.valid) {
-      console.log(
-        chalk.yellow(`  ⚠  ${label}`) +
-          chalk.gray(
-            `  (v${result.version}, ${result.warnings.length} warning${result.warnings.length === 1 ? "" : "s"})`,
-          ),
-      );
-    } else {
-      console.log(
-        chalk.red(`  ✗  ${label}`) +
-          chalk.gray(
-            `  (v${result.version}, ${result.errors.length} error${result.errors.length === 1 ? "" : "s"}${result.warnings.length > 0 ? `, ${result.warnings.length} warning${result.warnings.length === 1 ? "" : "s"}` : ""})`,
-          ),
-      );
-    }
-
-    for (const err of result.errors) {
-      const path = err.path ? chalk.gray(err.path) + "  " : "";
-      console.log(`  ${chalk.red("ERROR")}   ${path}${err.message}`);
-      if (err.suggestion) {
-        console.log(`            ${chalk.gray("→ " + err.suggestion)}`);
-      }
-    }
-    for (const warn of result.warnings) {
-      const path = warn.path ? chalk.gray(warn.path) + "  " : "";
-      console.log(`  ${chalk.yellow("WARNING")} ${path}${warn.message}`);
-      if (warn.suggestion) {
-        console.log(`            ${chalk.gray("→ " + warn.suggestion)}`);
-      }
-    }
-
+    printValidation(label, result);
     console.log();
     if (!result.valid) process.exit(1);
   }
@@ -3559,6 +3685,9 @@ class DenCLI {
     console.log(
       "  create <name> [dir]  Scaffold a new distribution of your own (--title, --cli, --env-prefix)",
     );
+    console.log(
+      "  mcp [--port <n>]     MCP server (stdio) for agents, over the running web server",
+    );
     console.log();
     console.log("  workspace list       List workspaces");
     console.log(