@namzu/cli 0.8.0 → 1.0.0

package/dist/integrations/mcp/__tests__/connect.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * An external tool server declared in the config is actually reachable.
+ *
+ * The server here is a REAL child process speaking real JSON-RPC over stdio,
+ * written to a temp file and spawned by the shipped transport. A stubbed
+ * transport would prove the adapter agrees with itself and would say nothing
+ * about the thing that actually breaks: a process that spawns, or does not, and
+ * a handshake that answers, or does not.
+ */
+export {};
+//# sourceMappingURL=connect.test.d.ts.map

package/dist/integrations/mcp/__tests__/connect.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.test.d.ts","sourceRoot":"","sources":["../../../../src/integrations/mcp/__tests__/connect.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/integrations/mcp/__tests__/connect.test.js

@@ -0,0 +1,231 @@
+/**
+ * An external tool server declared in the config is actually reachable.
+ *
+ * The server here is a REAL child process speaking real JSON-RPC over stdio,
+ * written to a temp file and spawned by the shipped transport. A stubbed
+ * transport would prove the adapter agrees with itself and would say nothing
+ * about the thing that actually breaks: a process that spawns, or does not, and
+ * a handshake that answers, or does not.
+ */
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { connectMcpServers, transportFor } from '../servers.js';
+let dir;
+beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), 'namzu-mcp-'));
+});
+afterEach(async () => {
+    // A child's working directory is the temp directory, and `close()` sends
+    // SIGTERM without waiting for the exit — so on Windows the directory is
+    // still held for a moment after the last assertion. Retried rather than
+    // ignored: a directory that never frees would mean a process that never
+    // died, which is the failure `close()` exists to prevent.
+    for (let attempt = 0; attempt < 20; attempt++) {
+        try {
+            rmSync(dir, { recursive: true, force: true });
+            return;
+        }
+        catch {
+            await new Promise((resolve) => setTimeout(resolve, 50));
+        }
+    }
+    rmSync(dir, { recursive: true, force: true });
+});
+/**
+ * Resolves once the process is gone, or throws after the deadline.
+ *
+ * This asserts the SYMPTOM — the pid no longer exists — and not the mechanism,
+ * and that distinction is worth stating because the same shape can be sound
+ * about the wrong thing: a child that would have exited on its own the moment
+ * its stdin pipe closed would satisfy this whether or not anything killed it,
+ * and the test would report that `close()` works while `close()` did nothing.
+ *
+ * MEASURED, not reasoned about. With `close()` replaced by an early `return`,
+ * this test fails with "process N was still alive after 5000ms" — so the child
+ * does not go away by itself here, and the pid disappearing is caused by the
+ * shutdown path under test. The symptom is the right claim for this package:
+ * whether the runtime also REAPS the child is the transport's business, and
+ * "no process left behind" is what a user is owed.
+ */
+async function waitForExit(pid, deadlineMs = 5_000) {
+    const until = Date.now() + deadlineMs;
+    for (;;) {
+        try {
+            // Signal 0 tests for existence without delivering anything.
+            process.kill(pid, 0);
+        }
+        catch {
+            return;
+        }
+        if (Date.now() > until)
+            throw new Error(`process ${pid} was still alive after ${deadlineMs}ms`);
+        await new Promise((resolve) => setTimeout(resolve, 50));
+    }
+}
+/**
+ * The smallest server that satisfies the protocol: initialize, tools/list,
+ * tools/call. Newline-delimited JSON-RPC on stdio, which is the wire the
+ * shipped `StdioTransport` speaks.
+ */
+function writeServer(name, body) {
+    const path = join(dir, name);
+    writeFileSync(path, body);
+    return path;
+}
+const WORKING_SERVER = `
+if (process.argv[2]) require('node:fs').writeFileSync(process.argv[2], String(process.pid))
+let buf = ''
+process.stdin.on('data', (chunk) => {
+  buf += chunk
+  let i
+  while ((i = buf.indexOf('\\n')) >= 0) {
+    const line = buf.slice(0, i)
+    buf = buf.slice(i + 1)
+    if (!line.trim()) continue
+    const msg = JSON.parse(line)
+    if (msg.method === 'initialize') {
+      send({ jsonrpc: '2.0', id: msg.id, result: {
+        protocolVersion: msg.params.protocolVersion,
+        serverInfo: { name: 'tickets', version: '1' },
+        capabilities: { tools: {} },
+      }})
+    } else if (msg.method === 'tools/list') {
+      send({ jsonrpc: '2.0', id: msg.id, result: { tools: [
+        { name: 'create', description: 'Open a ticket', inputSchema: {
+          type: 'object', properties: { title: { type: 'string' } }, required: ['title'] } },
+        { name: 'close', description: 'Close a ticket', inputSchema: {
+          type: 'object', properties: { id: { type: 'string' } }, required: ['id'] } },
+      ]}})
+    } else if (msg.method === 'tools/call') {
+      send({ jsonrpc: '2.0', id: msg.id, result: {
+        content: [{ type: 'text', text: 'opened ' + msg.params.arguments.title }],
+      }})
+    } else if (msg.id !== undefined) {
+      send({ jsonrpc: '2.0', id: msg.id, result: {} })
+    }
+  }
+})
+function send(o) { process.stdout.write(JSON.stringify(o) + '\\n') }
+`;
+/** Starts, and never answers. The case a request timeout cannot cover. */
+const SILENT_SERVER = 'setInterval(() => {}, 1000)\n';
+describe('a declared server', () => {
+    it('brings its tools, named after it', async () => {
+        const server = writeServer('tickets.js', WORKING_SERVER);
+        const mcp = await connectMcpServers({ tickets: { command: process.execPath, args: [server] } }, { cwd: dir });
+        try {
+            expect(mcp.failed).toEqual([]);
+            expect(mcp.connected).toEqual([{ name: 'tickets', toolCount: 2 }]);
+            // Prefixed with the server name so two servers offering `create` do
+            // not collide and the transcript says where a call went.
+            expect(mcp.tools.map((t) => t.name)).toEqual(['mcp_tickets_create', 'mcp_tickets_close']);
+        }
+        finally {
+            await mcp.close();
+        }
+    });
+    it('produces tools that actually call the server', async () => {
+        // The tool objects existing is not the feature. Registering something the
+        // model can see and cannot successfully invoke is worse than having
+        // nothing, because the failure arrives mid-task.
+        const server = writeServer('tickets.js', WORKING_SERVER);
+        const mcp = await connectMcpServers({ tickets: { command: process.execPath, args: [server] } }, { cwd: dir });
+        try {
+            const create = mcp.tools.find((t) => t.name === 'mcp_tickets_create');
+            const result = await create?.execute({ title: 'the build is red' }, {});
+            expect(result?.success).toBe(true);
+            expect(JSON.stringify(result?.output)).toContain('opened the build is red');
+        }
+        finally {
+            await mcp.close();
+        }
+    });
+    it('leaves no child process behind when the session closes', async () => {
+        // The reason `close()` exists. A stdio server is a child process and
+        // nothing else in this package owns one, so before this there was no
+        // shutdown path at all: every TUI session and every one-shot left its
+        // servers running.
+        const server = writeServer('tickets.js', WORKING_SERVER);
+        const pidFile = join(dir, 'server.pid');
+        const mcp = await connectMcpServers({ tickets: { command: process.execPath, args: [server, pidFile] } }, { cwd: dir });
+        const pid = Number(readFileSync(pidFile, 'utf8'));
+        expect(Number.isInteger(pid), 'the server must have actually started').toBe(true);
+        expect(() => process.kill(pid, 0), 'and must be alive before the close').not.toThrow();
+        await mcp.close();
+        await waitForExit(pid);
+    }, 20_000);
+    it('is absent from the roster when nothing is configured', async () => {
+        const mcp = await connectMcpServers(undefined, { cwd: dir });
+        expect(mcp.tools).toEqual([]);
+        expect(mcp.connected).toEqual([]);
+        expect(mcp.failed).toEqual([]);
+        await mcp.close();
+    });
+});
+describe('a server that does not work is named, never merely absent', () => {
+    it('reports a command that cannot be spawned', async () => {
+        const mcp = await connectMcpServers({ tickets: { command: join(dir, 'no-such-executable') } }, { cwd: dir });
+        expect(mcp.connected).toEqual([]);
+        expect(mcp.failed).toHaveLength(1);
+        expect(mcp.failed[0]?.name).toBe('tickets');
+        expect(mcp.failed[0]?.reason.length).toBeGreaterThan(0);
+        await mcp.close();
+    });
+    it('reports a server that starts and never answers, rather than hanging', async () => {
+        // The client's per-request timeout cannot cover this: the process is up,
+        // the pipe is open, and nothing is coming. Without the connect deadline a
+        // single wedged server holds the whole session open before the first turn
+        // — no error, no failure, just a namzu that does not start.
+        const server = writeServer('silent.js', SILENT_SERVER);
+        const started = Date.now();
+        const mcp = await connectMcpServers({ quiet: { command: process.execPath, args: [server] } }, { cwd: dir });
+        expect(mcp.failed[0]?.name).toBe('quiet');
+        expect(mcp.failed[0]?.reason).toContain('did not answer');
+        expect(Date.now() - started, 'the deadline has to actually bound it').toBeLessThan(30_000);
+        await mcp.close();
+    }, 40_000);
+    it('does not let one broken server take the working ones with it', async () => {
+        const good = writeServer('tickets.js', WORKING_SERVER);
+        const mcp = await connectMcpServers({
+            broken: { command: join(dir, 'no-such-executable') },
+            tickets: { command: process.execPath, args: [good] },
+        }, { cwd: dir });
+        try {
+            expect(mcp.failed.map((f) => f.name)).toEqual(['broken']);
+            expect(mcp.connected.map((c) => c.name)).toEqual(['tickets']);
+        }
+        finally {
+            await mcp.close();
+        }
+    });
+});
+describe('a spec that is not a server', () => {
+    it('refuses one that names neither a command nor a url', () => {
+        expect(transportFor({}, dir)).toContain('neither a command nor a url');
+    });
+    it('refuses one that names both, rather than picking', () => {
+        // An operator who edited a url into an entry that already had a command
+        // meant one of them. Choosing for them runs something they did not ask
+        // to run.
+        expect(transportFor({ command: 'x', url: 'https://y' }, dir)).toContain('both');
+    });
+    it('reports a bad spec by name, alongside the servers that worked', async () => {
+        const good = writeServer('tickets.js', WORKING_SERVER);
+        const mcp = await connectMcpServers({ nonsense: {}, tickets: { command: process.execPath, args: [good] } }, { cwd: dir });
+        try {
+            expect(mcp.failed[0]?.name).toBe('nonsense');
+            expect(mcp.connected.map((c) => c.name)).toEqual(['tickets']);
+        }
+        finally {
+            await mcp.close();
+        }
+    });
+    it('defaults a stdio server to the agent working directory', () => {
+        const transport = transportFor({ command: 'node' }, dir);
+        expect(typeof transport).not.toBe('string');
+        expect(transport.cwd).toBe(dir);
+    });
+});
+//# sourceMappingURL=connect.test.js.map

package/dist/integrations/mcp/__tests__/connect.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.test.js","sourceRoot":"","sources":["../../../../src/integrations/mcp/__tests__/connect.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEpE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE/D,IAAI,GAAW,CAAA;AAEf,UAAU,CAAC,GAAG,EAAE;IACf,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;AAChD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,KAAK,IAAI,EAAE;IACpB,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,0DAA0D;IAC1D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,OAAM;QACP,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QACxD,CAAC;IACF,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9C,CAAC,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,UAAU,GAAG,KAAK;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAA;IACrC,SAAS,CAAC;QACT,IAAI,CAAC;YACJ,4DAA4D;YAC5D,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACrB,CAAC;QAAC,MAAM,CAAC;YACR,OAAM;QACP,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,0BAA0B,UAAU,IAAI,CAAC,CAAA;QAC/F,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;IACxD,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC5B,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACzB,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCtB,CAAA;AAED,0EAA0E;AAC1E,MAAM,aAAa,GAAG,+BAA+B,CAAA;AAErD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QAExD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAClC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAC1D,EAAE,GAAG,EAAE,GAAG,EAAE,CACZ,CAAA;QACD,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC9B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YAClE,oEAAoE;YACpE,yDAAyD;YACzD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAA;QAC1F,CAAC;gBAAS,CAAC;YACV,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QAClB,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,0EAA0E;QAC1E,oEAAoE;QACpE,iDAAiD;QACjD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QAExD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAClC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAC1D,EAAE,GAAG,EAAE,GAAG,EAAE,CACZ,CAAA;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAA;YACrE,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAW,CAAC,CAAA;YAChF,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAA;QAC5E,CAAC;gBAAS,CAAC;YACV,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QAClB,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,mBAAmB;QACnB,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAClC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EACnE,EAAE,GAAG,EAAE,GAAG,EAAE,CACZ,CAAA;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,uCAAuC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,oCAAoC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QAEtF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QAEjB,MAAM,WAAW,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC,EAAE,MAAM,CAAC,CAAA;IAEV,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAE5D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC9B,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;IAClB,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IAC1E,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAClC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,EAAE,EACzD,EAAE,GAAG,EAAE,GAAG,EAAE,CACZ,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACvD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;IAClB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACpF,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,4DAA4D;QAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QAEtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAClC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EACxD,EAAE,GAAG,EAAE,GAAG,EAAE,CACZ,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,uCAAuC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAC1F,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;IAClB,CAAC,EAAE,MAAM,CAAC,CAAA;IAEV,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QAEtD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAClC;YACC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE;YACpD,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;SACpD,EACD,EAAE,GAAG,EAAE,GAAG,EAAE,CACZ,CAAA;QACD,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;YACzD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;QAC9D,CAAC;gBAAS,CAAC;YACV,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QAClB,CAAC;IACF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,wEAAwE;QACxE,uEAAuE;QACvE,UAAU;QACV,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;QAEtD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAClC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EACtE,EAAE,GAAG,EAAE,GAAG,EAAE,CACZ,CAAA;QACD,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC5C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;QAC9D,CAAC;gBAAS,CAAC;YACV,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QAClB,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QACjE,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAA;QAExD,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3C,MAAM,CAAE,SAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/integrations/mcp/servers.d.ts

@@ -0,0 +1,101 @@
+/**
+ * External tool servers an operator declares in their config.
+ *
+ * The kernel has spoken this protocol for a long time — `MCPClient`,
+ * `StdioTransport`, `StreamableHttpTransport` and the tool adapter are all
+ * exported from `@namzu/sdk`. `packages/cli` imported none of them, so the
+ * capability existed and was unreachable from the product: a namzu user could
+ * not connect an external tool server at all, whatever the kernel could do.
+ *
+ * A server is declared by name under `mcpServers` in `namzu.config.json`:
+ *
+ *     "mcpServers": {
+ *       "tickets": { "command": "node", "args": ["./tickets-server.js"] },
+ *       "search":   { "url": "https://tools.example.internal/mcp" }
+ *     }
+ *
+ * Its tools arrive prefixed with the server's name (`mcp_tickets_create`), so
+ * two servers offering `search` do not collide and the transcript says where a
+ * call went.
+ *
+ * ## Every failure is named
+ *
+ * A server that does not start, a spec that names neither a command nor a URL,
+ * a handshake that never answers — each becomes an entry in `failed` with a
+ * reason, never an absence. The whole hazard of this feature is the operator
+ * who configures a server, watches the agent run without its tools, and
+ * concludes the model is bad at the task.
+ *
+ * What to DO about a failure is not decided here, because the answer differs
+ * by surface: a person watching the TUI can read the line and fix their config,
+ * and a headless run has nobody to read anything, so it refuses. This module
+ * reports; the callers decide.
+ */
+import { type MCPTransportUnion, type ToolDefinition } from '@namzu/sdk';
+/**
+ * How long a single server gets to connect, hand shake and list its tools.
+ *
+ * The client's own `requestTimeoutMs` bounds one round trip; it cannot bound a
+ * process that spawns and never speaks. Without this, one wedged server holds
+ * the whole session open before the first turn — no error, no failure, just a
+ * namzu that does not start.
+ */
+export declare const CONNECT_TIMEOUT_MS = 10000;
+/**
+ * How long shutting one server down may take before it is given up on.
+ *
+ * Shorter than the connect bound because nothing waits on the answer: a
+ * one-shot is exiting and a TUI is replacing the session. What this prevents
+ * is the opposite of a leak — a `close()` that never resolves, holding the
+ * command open past the work it was asked to do.
+ */
+export declare const CLOSE_TIMEOUT_MS = 2000;
+/** A single entry under `mcpServers`. Either a command or a URL, never both. */
+export interface McpServerSpec {
+    /** Stdio: the executable to run. */
+    readonly command?: string;
+    readonly args?: readonly string[];
+    readonly env?: Readonly<Record<string, string>>;
+    /** Working directory for the child. Defaults to the agent's. */
+    readonly cwd?: string;
+    /** HTTP: the server's endpoint. */
+    readonly url?: string;
+    readonly headers?: Readonly<Record<string, string>>;
+}
+export type McpServersConfig = Readonly<Record<string, McpServerSpec>>;
+export interface ConnectedMcpServer {
+    readonly name: string;
+    readonly toolCount: number;
+}
+export interface FailedMcpServer {
+    readonly name: string;
+    /** Phrased for one line in front of a person who has to fix it. */
+    readonly reason: string;
+}
+export interface McpConnection {
+    /** Adapted tools from every server that connected, ready to register. */
+    readonly tools: readonly ToolDefinition[];
+    readonly connected: readonly ConnectedMcpServer[];
+    readonly failed: readonly FailedMcpServer[];
+    /**
+     * Shut every connected server down.
+     *
+     * A stdio server is a CHILD PROCESS. Nothing else in this package owns one,
+     * which is why the session had no shutdown path before: without this, a TUI
+     * session that ends leaves the child running, and a long-lived host that
+     * opens sessions leaks one per session.
+     */
+    close(): Promise<void>;
+}
+/**
+ * Turn one spec into a transport, or say why it is not one.
+ *
+ * Refused rather than guessed. A spec with both a command and a URL is an
+ * operator who edited one into a file that already had the other, and picking
+ * either would run something they did not mean to run.
+ */
+export declare function transportFor(spec: McpServerSpec, defaultCwd: string): MCPTransportUnion | string;
+export declare function connectMcpServers(config: McpServersConfig | undefined, options: {
+    readonly cwd: string;
+}): Promise<McpConnection>;
+//# sourceMappingURL=servers.d.ts.map

package/dist/integrations/mcp/servers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"servers.d.ts","sourceRoot":"","sources":["../../../src/integrations/mcp/servers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAEN,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEnB,MAAM,YAAY,CAAA;AAEnB;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAS,CAAA;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AAErC,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,mCAAmC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACnD;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;AAEtE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,aAAa;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C;;;;;;;OAOG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,MAAM,CAuBhG;AAkBD,wBAAsB,iBAAiB,CACtC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,OAAO,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,aAAa,CAAC,CAmExB"}

package/dist/integrations/mcp/servers.js

@@ -0,0 +1,160 @@
+/**
+ * External tool servers an operator declares in their config.
+ *
+ * The kernel has spoken this protocol for a long time — `MCPClient`,
+ * `StdioTransport`, `StreamableHttpTransport` and the tool adapter are all
+ * exported from `@namzu/sdk`. `packages/cli` imported none of them, so the
+ * capability existed and was unreachable from the product: a namzu user could
+ * not connect an external tool server at all, whatever the kernel could do.
+ *
+ * A server is declared by name under `mcpServers` in `namzu.config.json`:
+ *
+ *     "mcpServers": {
+ *       "tickets": { "command": "node", "args": ["./tickets-server.js"] },
+ *       "search":   { "url": "https://tools.example.internal/mcp" }
+ *     }
+ *
+ * Its tools arrive prefixed with the server's name (`mcp_tickets_create`), so
+ * two servers offering `search` do not collide and the transcript says where a
+ * call went.
+ *
+ * ## Every failure is named
+ *
+ * A server that does not start, a spec that names neither a command nor a URL,
+ * a handshake that never answers — each becomes an entry in `failed` with a
+ * reason, never an absence. The whole hazard of this feature is the operator
+ * who configures a server, watches the agent run without its tools, and
+ * concludes the model is bad at the task.
+ *
+ * What to DO about a failure is not decided here, because the answer differs
+ * by surface: a person watching the TUI can read the line and fix their config,
+ * and a headless run has nobody to read anything, so it refuses. This module
+ * reports; the callers decide.
+ */
+import { MCPClient, mcpToolToToolDefinition, } from '@namzu/sdk';
+/**
+ * How long a single server gets to connect, hand shake and list its tools.
+ *
+ * The client's own `requestTimeoutMs` bounds one round trip; it cannot bound a
+ * process that spawns and never speaks. Without this, one wedged server holds
+ * the whole session open before the first turn — no error, no failure, just a
+ * namzu that does not start.
+ */
+export const CONNECT_TIMEOUT_MS = 10_000;
+/**
+ * How long shutting one server down may take before it is given up on.
+ *
+ * Shorter than the connect bound because nothing waits on the answer: a
+ * one-shot is exiting and a TUI is replacing the session. What this prevents
+ * is the opposite of a leak — a `close()` that never resolves, holding the
+ * command open past the work it was asked to do.
+ */
+export const CLOSE_TIMEOUT_MS = 2_000;
+/**
+ * Turn one spec into a transport, or say why it is not one.
+ *
+ * Refused rather than guessed. A spec with both a command and a URL is an
+ * operator who edited one into a file that already had the other, and picking
+ * either would run something they did not mean to run.
+ */
+export function transportFor(spec, defaultCwd) {
+    const hasCommand = typeof spec.command === 'string' && spec.command.trim().length > 0;
+    const hasUrl = typeof spec.url === 'string' && spec.url.trim().length > 0;
+    if (hasCommand && hasUrl) {
+        return 'it declares both a command and a url — pick one';
+    }
+    if (hasCommand) {
+        return {
+            type: 'stdio',
+            command: spec.command,
+            ...(spec.args ? { args: [...spec.args] } : {}),
+            ...(spec.env ? { env: { ...spec.env } } : {}),
+            cwd: spec.cwd ?? defaultCwd,
+        };
+    }
+    if (hasUrl) {
+        return {
+            type: 'streamable-http',
+            url: spec.url,
+            ...(spec.headers ? { headers: { ...spec.headers } } : {}),
+        };
+    }
+    return 'it declares neither a command nor a url';
+}
+async function withDeadline(work, ms, what) {
+    let timer;
+    try {
+        return await Promise.race([
+            work,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error(`${what} did not answer within ${ms}ms`)), ms);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+const reasonOf = (err) => (err instanceof Error ? err.message : String(err));
+export async function connectMcpServers(config, options) {
+    const entries = Object.entries(config ?? {});
+    const tools = [];
+    const connected = [];
+    const failed = [];
+    const clients = [];
+    // Sequential, not parallel. Each server may spawn a process and each is
+    // bounded separately; a parallel fan-out would make the worst case the sum
+    // of nothing and the failure output arrive interleaved, for a saving that
+    // matters only to someone running many servers, who has other problems.
+    for (const [name, spec] of entries) {
+        const transport = transportFor(spec, options.cwd);
+        if (typeof transport === 'string') {
+            failed.push({ name, reason: transport });
+            continue;
+        }
+        const client = new MCPClient({ serverName: name, transport });
+        try {
+            await withDeadline(client.connect(), CONNECT_TIMEOUT_MS, `server "${name}"`);
+            const listed = await withDeadline(client.listTools(), CONNECT_TIMEOUT_MS, `server "${name}" listing its tools`);
+            for (const tool of listed) {
+                tools.push(mcpToolToToolDefinition(tool, client, name));
+            }
+            connected.push({ name, toolCount: listed.length });
+            clients.push(client);
+        }
+        catch (err) {
+            failed.push({ name, reason: reasonOf(err) });
+            // A half-connected client still owns a child process. Tearing it down
+            // here is the difference between a failed server and a leaked one.
+            //
+            // Bounded, and deliberately not dependent on what a transport does
+            // when it is closed having never connected — the shipped transports
+            // disagree about that (one returns early, one notifies), the
+            // divergence is a known one, and a shutdown path that only works
+            // under one of the two answers is a shutdown path waiting to hang.
+            // Nothing here reads the client's state afterwards either.
+            try {
+                await withDeadline(client.disconnect(), CLOSE_TIMEOUT_MS, `closing "${name}"`);
+            }
+            catch {
+                // Already gone, never started, or refusing to answer. The failure is
+                // already recorded and there is nothing further to do about it.
+            }
+        }
+    }
+    return {
+        tools,
+        connected,
+        failed,
+        close: async () => {
+            await Promise.all(clients.map((c) => withDeadline(c.disconnect(), CLOSE_TIMEOUT_MS, 'closing a tool server').catch(() => {
+                // Shutting down is best effort by definition: the process may
+                // already be gone, and nothing useful follows from saying so.
+                // Bounded so a server that will not close cannot hold the
+                // command open past the work it was asked to do.
+            })));
+        },
+    };
+}
+//# sourceMappingURL=servers.js.map

package/dist/integrations/mcp/servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"servers.js","sourceRoot":"","sources":["../../../src/integrations/mcp/servers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACN,SAAS,EAGT,uBAAuB,GACvB,MAAM,YAAY,CAAA;AAEnB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAA;AA4CrC;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAmB,EAAE,UAAkB;IACnE,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IACrF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IACzE,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QAC1B,OAAO,iDAAiD,CAAA;IACzD,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO;YACN,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI,CAAC,OAAiB;YAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,UAAU;SAC3B,CAAA;IACF,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO;YACN,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,IAAI,CAAC,GAAa;YACvB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAA;IACF,CAAC;IACD,OAAO,yCAAyC,CAAA;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAI,IAAgB,EAAE,EAAU,EAAE,IAAY;IACxE,IAAI,KAAiC,CAAA;IACrC,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACzB,IAAI;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACzF,CAAC,CAAC;SACF,CAAC,CAAA;IACH,CAAC;YAAS,CAAC;QACV,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;AACF,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AAE7F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAoC,EACpC,OAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,MAAM,SAAS,GAAyB,EAAE,CAAA;IAC1C,MAAM,MAAM,GAAsB,EAAE,CAAA;IACpC,MAAM,OAAO,GAAgB,EAAE,CAAA;IAE/B,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACxC,SAAQ;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QAC7D,IAAI,CAAC;YACJ,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,kBAAkB,EAAE,WAAW,IAAI,GAAG,CAAC,CAAA;YAC5E,MAAM,MAAM,GAAG,MAAM,YAAY,CAChC,MAAM,CAAC,SAAS,EAAE,EAClB,kBAAkB,EAClB,WAAW,IAAI,qBAAqB,CACpC,CAAA;YACD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;YACxD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAClD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC5C,sEAAsE;YACtE,mEAAmE;YACnE,EAAE;YACF,mEAAmE;YACnE,oEAAoE;YACpE,6DAA6D;YAC7D,iEAAiE;YACjE,mEAAmE;YACnE,2DAA2D;YAC3D,IAAI,CAAC;gBACJ,MAAM,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,YAAY,IAAI,GAAG,CAAC,CAAA;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACR,qEAAqE;gBACrE,gEAAgE;YACjE,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO;QACN,KAAK;QACL,SAAS;QACT,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAClF,8DAA8D;gBAC9D,8DAA8D;gBAC9D,0DAA0D;gBAC1D,iDAAiD;YAClD,CAAC,CAAC,CACF,CACD,CAAA;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/integrations/sessions/__tests__/archived-workspace.test.d.ts

@@ -0,0 +1,21 @@
+/**
+ * A closed workspace takes no new conversation from the CLI either.
+ *
+ * The kernel gained a workspace-closed gate and it was applied to the SDK's own
+ * ingress paths. `startConversation` calls `createSession` on the store
+ * DIRECTLY, and a store deliberately holds no view of workspace status, so the
+ * invariant did not reach here.
+ *
+ * Whether that mattered turned on one question a grep cannot answer: does the
+ * CLI ever reach a project it did not just create? It does. `openSessions`
+ * reads the project id back out of `.namzu/cli.json` and creates a new project
+ * only when the pointer is missing or stale — so every run after the first
+ * attaches to a project that already existed and may since have been closed.
+ *
+ * That is why this test archives a project created by an EARLIER `openSessions`
+ * and then reopens the same directory. A test that archived a project it made
+ * itself, in one call, would pass against the first-run case the gate can never
+ * fire on.
+ */
+export {};
+//# sourceMappingURL=archived-workspace.test.d.ts.map

package/dist/integrations/sessions/__tests__/archived-workspace.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archived-workspace.test.d.ts","sourceRoot":"","sources":["../../../../src/integrations/sessions/__tests__/archived-workspace.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/integrations/sessions/__tests__/archived-workspace.test.js

@@ -0,0 +1,62 @@
+/**
+ * A closed workspace takes no new conversation from the CLI either.
+ *
+ * The kernel gained a workspace-closed gate and it was applied to the SDK's own
+ * ingress paths. `startConversation` calls `createSession` on the store
+ * DIRECTLY, and a store deliberately holds no view of workspace status, so the
+ * invariant did not reach here.
+ *
+ * Whether that mattered turned on one question a grep cannot answer: does the
+ * CLI ever reach a project it did not just create? It does. `openSessions`
+ * reads the project id back out of `.namzu/cli.json` and creates a new project
+ * only when the pointer is missing or stale — so every run after the first
+ * attaches to a project that already existed and may since have been closed.
+ *
+ * That is why this test archives a project created by an EARLIER `openSessions`
+ * and then reopens the same directory. A test that archived a project it made
+ * itself, in one call, would pass against the first-run case the gate can never
+ * fire on.
+ */
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { ProjectManager, UNKNOWN_TENANT_ID } from '@namzu/sdk';
+import { openSessions, startConversation } from '../store.js';
+let cwd;
+beforeEach(() => {
+    cwd = mkdtempSync(join(tmpdir(), 'namzu-archived-'));
+});
+afterEach(() => {
+    rmSync(cwd, { recursive: true, force: true });
+});
+describe('a workspace its owner has closed', () => {
+    it('refuses a new conversation, instead of quietly accepting work', async () => {
+        // First run: creates the project and writes the pointer.
+        const first = await openSessions(cwd);
+        await new ProjectManager({ store: first.store }).archive(first.projectId, UNKNOWN_TENANT_ID);
+        // A later run in the same directory reaches the SAME project through the
+        // pointer — the case that exists only from the second run onward.
+        const later = await openSessions(cwd);
+        expect(later.projectId, 'the pointer has to be what makes this reachable').toBe(first.projectId);
+        await expect(startConversation(later)).rejects.toThrow(/archiv|closed/i);
+    });
+    it('still starts a conversation in an open one', async () => {
+        // The other half. A gate nothing can get past has broken the product,
+        // and this is the assertion that would catch a `requireOpenProject` call
+        // wired to the wrong project id.
+        const sessions = await openSessions(cwd);
+        const id = await startConversation(sessions);
+        expect(typeof id).toBe('string');
+        expect(id.length).toBeGreaterThan(0);
+    });
+    it('names the workspace in the refusal', async () => {
+        // A refusal that does not say which workspace sends the reader nowhere:
+        // the whole point is that an owner closed this one on purpose.
+        const first = await openSessions(cwd);
+        await new ProjectManager({ store: first.store }).archive(first.projectId, UNKNOWN_TENANT_ID);
+        const later = await openSessions(cwd);
+        await expect(startConversation(later)).rejects.toThrow(new RegExp(later.projectId));
+    });
+});
+//# sourceMappingURL=archived-workspace.test.js.map

package/dist/integrations/sessions/__tests__/archived-workspace.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archived-workspace.test.js","sourceRoot":"","sources":["../../../../src/integrations/sessions/__tests__/archived-workspace.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEpE,OAAO,EAAE,cAAc,EAAiB,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE7E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE7D,IAAI,GAAW,CAAA;AAEf,UAAU,CAAC,GAAG,EAAE;IACf,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAA;AACrD,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9C,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC9E,yDAAyD;QACzD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,IAAI,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CACvD,KAAK,CAAC,SAAS,EACf,iBAA6B,CAC7B,CAAA;QAED,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,iDAAiD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAEhG,MAAM,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC3D,sEAAsE;QACtE,yEAAyE;QACzE,iCAAiC;QACjC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAExC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAA;QAE5C,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QACnD,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,IAAI,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CACvD,KAAK,CAAC,SAAS,EACf,iBAA6B,CAC7B,CAAA;QAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAErC,MAAM,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}