@obov/mext 0.5.0 → 0.7.1

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA4BA,sDAAsD;AACtD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAuB;IAEtC,YAAY,MAA6B;QACvC,KAAK,CACH,sBAAsB,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;YAC7E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACzF,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AA2DD,qDAAqD;AACrD,MAAM,OAAO,SAAmD,SAAQ,KAAK;IAClE,IAAI,CAAG;IACP,OAAO,CAAqB;IAErC,YAAY,IAAO,EAAE,OAAe,EAAE,OAA4B;QAChE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAA0B,KAAc,EAAE,IAAQ;IAC3E,OAAO,KAAK,YAAY,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClF,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,MAAqD;IACnF,MAAM,OAAO,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,+BAA+B,CAAA;IACzG,OAAO,IAAI,SAAS,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAyB;IACtE,MAAM,OAAO,GACX,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,qCAAqC,CAAC,CAAC,CAAC,GAAG,OAAO,wCAAwC,CAAA;IAC3H,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,aAAa;IACb,cAAc;CACf,CAAA;AAED,MAAM,UAAU,GAAG,mBAAmB,CAAA;AAEtC;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAQ;IACZ,OAAO,CAAyB;IAEzC,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAA4B,EAAE;QAC9E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,SAAS,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,IAAI,uBAAuB,CAAC,CAAA;QAC/G,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAA;AACtC,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,SAAS,IAAI,KAAK,YAAY,YAAY,CAAA;AACpE,CAAC","sourcesContent":["export type BuildIssueCode =\n  | \"COMMANDS_DIR_MISSING\"\n  | \"PATH_COLLISION\"\n  | \"DUPLICATE_ID\"\n  | \"INVALID_SEGMENT\"\n  | \"INVALID_ALIAS\"\n  | \"RESERVED_ID\"\n  | \"ROOT_INDEX\"\n  | \"INVALID_COMMAND\"\n  | \"LOAD_FAILED\"\n  | \"SCHEMA_UNREPRESENTABLE\"\n  | \"CLI_UNCONVERTIBLE\"\n  | \"BUNDLE_FAILED\"\n  | \"INVALID_CONFIG\"\n  | \"INVALID_RESOURCE\"\n  | \"INVALID_PROMPT\"\n  | \"ROUTE_CONFLICT\"\n  | \"DUPLICATE_ROUTE\"\n  | \"INVALID_ROUTE\"\n\nexport interface BuildIssue {\n  code: BuildIssueCode\n  message: string\n  /** commands/ 기준 상대 경로 (posix) */\n  file?: string\n  id?: string\n}\n\n/** 스캔 · Registry 생성의 빌드 오류. 발견한 문제를 모두 모아 한 번에 던진다 */\nexport class MextBuildError extends Error {\n  readonly issues: readonly BuildIssue[]\n\n  constructor(issues: readonly BuildIssue[]) {\n    super(\n      `mext build failed (${issues.length} issue${issues.length === 1 ? \"\" : \"s\"})\\n` +\n        issues.map((i) => `  ${i.code}${i.file ? ` ${i.file}` : \"\"}: ${i.message}`).join(\"\\n\"),\n    )\n    this.name = \"MextBuildError\"\n    this.issues = issues\n  }\n}\n\nexport type MextErrorCode =\n  | \"UNKNOWN_COMMAND\"\n  | \"INVALID_ARGUMENT\"\n  | \"UNAUTHENTICATED\"\n  | \"PERMISSION_DENIED\"\n  | \"INPUT_UNAVAILABLE\"\n  | \"INPUT_DECLINED\"\n\nexport interface ArgumentIssue {\n  /** 점 구분 경로. \"\" = 입력 전체 */\n  path: string\n  code: string\n  message: string\n}\n\nexport interface MextErrorDetails {\n  UNKNOWN_COMMAND: {\n    command: string\n    /** 유사 정식 ID (가까운 순) */\n    suggested: string[]\n    /** 다음에 볼 help 대상. \"help\" (루트) · \"help users\" (네임스페이스) */\n    usage: string\n  }\n  INVALID_ARGUMENT: {\n    command: string\n    /** 원본 입력에 없는 필수 필드 경로 */\n    missing_fields: string[]\n    issues: ArgumentIssue[]\n    /** input JSON Schema 2020-12 */\n    expected_schema: Record<string, unknown>\n    examples: unknown[]\n  }\n  UNAUTHENTICATED: {\n    reason: \"missing_token\" | \"invalid_token\"\n    /** CLI 원격 실행: 토큰 발급 명령 (mext login --url <url>) */\n    login?: string\n  }\n  PERMISSION_DENIED: {\n    command: string\n    /** anonymous = 인증 없는 주체의 readOnly 외 명령어 · read_only = readOnly 전용 호출 (split query) · scope = scopes 부족 */\n    reason: \"anonymous\" | \"read_only\" | \"scope\"\n    required_scopes: string[]\n    held_scopes: string[]\n  }\n  /** ctx.ask 를 처리할 수 없는 실행 환경 (TTY 없는 CLI 등) */\n  INPUT_UNAVAILABLE: {\n    command: string\n    /** url 요청 (ctx.ask kind url) 의 URL. 사용자가 직접 열고 다시 실행 */\n    url?: string\n  }\n  /** ctx.ask 거절 · 취소. confirm = requiresConfirmation 확인 거절 (실행 안 함), input = 입력 요청 거절 */\n  INPUT_DECLINED: {\n    command: string\n    kind: \"confirm\" | \"input\"\n  }\n}\n\n/** 구조화 오류. 어댑터는 code 로 분기하고 toJSON() 을 응답 본문으로 쓴다 */\nexport class MextError<C extends MextErrorCode = MextErrorCode> extends Error {\n  readonly code: C\n  readonly details: MextErrorDetails[C]\n\n  constructor(code: C, message: string, details: MextErrorDetails[C]) {\n    super(message)\n    this.name = \"MextError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: C; message: string } & MextErrorDetails[C] {\n    return { code: this.code, message: this.message, ...this.details }\n  }\n}\n\nexport function isMextError<C extends MextErrorCode>(error: unknown, code?: C): error is MextError<C> {\n  return error instanceof MextError && (code === undefined || error.code === code)\n}\n\n/** auth 단계에서 어댑터가 던지는 오류. anonymous 로 낮추지 않는다 */\nexport function unauthenticated(reason: MextErrorDetails[\"UNAUTHENTICATED\"][\"reason\"]): MextError<\"UNAUTHENTICATED\"> {\n  const message = reason === \"missing_token\" ? \"Authentication required.\" : \"Invalid authentication token.\"\n  return new MextError(\"UNAUTHENTICATED\", message, { reason })\n}\n\n/** ctx.ask 거절. AskHandler 가 input 요청 거절 · 취소에 던진다. invoke 는 requiresConfirmation 확인 거절에 던진다 */\nexport function inputDeclined(command: string, kind: \"confirm\" | \"input\"): MextError<\"INPUT_DECLINED\"> {\n  const message =\n    kind === \"confirm\" ? `${command} was not confirmed and did not run.` : `${command} requested input, but it was declined.`\n  return new MextError(\"INPUT_DECLINED\", message, { command, kind })\n}\n\n/** mext 가 쓰는 오류 code. CommandError 로 만들 수 없다 */\nexport const RESERVED_ERROR_CODES: readonly string[] = [\n  \"UNKNOWN_COMMAND\",\n  \"INVALID_ARGUMENT\",\n  \"UNAUTHENTICATED\",\n  \"PERMISSION_DENIED\",\n  \"INPUT_UNAVAILABLE\",\n  \"INPUT_DECLINED\",\n  \"EXECUTION_ERROR\",\n  \"EXECUTION_FAILED\",\n  \"INTERRUPTED\",\n  \"BUILD_ERROR\",\n  \"REMOTE_ERROR\",\n]\n\nconst ERROR_CODE = /^[A-Z][A-Z0-9_]*$/\n\n/**\n * 핸들러 정의 오류 (§4). 응답 본문 = { code, message, ...details } (MCP structuredContent.error · CLI --json).\n * code = 대문자 스네이크, mext 예약 code 불가 (TypeError). onCommandError 에 보고하지 않는다 (의도된 오류)\n */\nexport class CommandError extends Error {\n  readonly code: string\n  readonly details: Record<string, unknown>\n\n  constructor(code: string, message: string, details: Record<string, unknown> = {}) {\n    if (typeof code !== \"string\" || !ERROR_CODE.test(code)) {\n      throw new TypeError(`CommandError code must be UPPER_SNAKE_CASE (got ${JSON.stringify(code)})`)\n    }\n    if (RESERVED_ERROR_CODES.includes(code)) throw new TypeError(`CommandError code \"${code}\" is reserved by mext`)\n    if (typeof details !== \"object\" || details === null || Array.isArray(details)) {\n      throw new TypeError(\"CommandError details must be an object\")\n    }\n    super(message)\n    this.name = \"CommandError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: string; message: string } & Record<string, unknown> {\n    return { ...this.details, code: this.code, message: this.message }\n  }\n}\n\nexport function isCommandError(error: unknown): error is CommandError {\n  return error instanceof CommandError\n}\n\n/** 응답 본문으로 그대로 보내는 오류 (MextError · CommandError) */\nexport function isDeclaredError(error: unknown): error is MextError | CommandError {\n  return error instanceof MextError || error instanceof CommandError\n}\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AA6BtD,sDAAsD;AACtD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAuB;IAEtC,YAAY,MAA6B;QACvC,KAAK,CACH,sBAAsB,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;YAC7E,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACzF,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AA0ED,qDAAqD;AACrD,MAAM,OAAO,SAAmD,SAAQ,KAAK;IAClE,IAAI,CAAG;IACP,OAAO,CAAqB;IAErC,YAAY,IAAO,EAAE,OAAe,EAAE,OAA4B;QAChE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAA0B,KAAc,EAAE,IAAQ;IAC3E,OAAO,KAAK,YAAY,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAClF,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,MAAqD;IACnF,MAAM,OAAO,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,+BAA+B,CAAA;IACzG,OAAO,IAAI,SAAS,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAyB;IACtE,MAAM,OAAO,GACX,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,qCAAqC,CAAC,CAAC,CAAC,GAAG,OAAO,wCAAwC,CAAA;IAC3H,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,MAAuD,EACvD,OAAO,GAAwB,EAAE;IAEjC,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,iBAAiB,CAAA;QAC7B,OAAO,IAAI,SAAS,CAClB,mBAAmB,EACnB,GAAG,OAAO,yEAAyE,GAAG,6BAA6B,EACnH,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CACnC,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK;QAC3B,CAAC,CAAC,GAAG,OAAO,oFAAoF;QAChG,CAAC,CAAC,GAAG,OAAO,0EAA0E,CAAA;IACxF,OAAO,IAAI,SAAS,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;AACzE,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,aAAa;IACb,cAAc;CACf,CAAA;AAED,MAAM,UAAU,GAAG,mBAAmB,CAAA;AAEtC;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAQ;IACZ,OAAO,CAAyB;IAEzC,YAAY,IAAY,EAAE,OAAe,EAAE,OAAO,GAA4B,EAAE;QAC9E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,SAAS,CAAC,mDAAmD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,IAAI,uBAAuB,CAAC,CAAA;QAC/G,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAA;AACtC,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,SAAS,IAAI,KAAK,YAAY,YAAY,CAAA;AACpE,CAAC","sourcesContent":["import { APPROVAL_META_KEY } from \"./mcp/constants.ts\"\nexport type BuildIssueCode =\n  | \"COMMANDS_DIR_MISSING\"\n  | \"PATH_COLLISION\"\n  | \"DUPLICATE_ID\"\n  | \"INVALID_SEGMENT\"\n  | \"INVALID_ALIAS\"\n  | \"RESERVED_ID\"\n  | \"ROOT_INDEX\"\n  | \"INVALID_COMMAND\"\n  | \"LOAD_FAILED\"\n  | \"SCHEMA_UNREPRESENTABLE\"\n  | \"CLI_UNCONVERTIBLE\"\n  | \"BUNDLE_FAILED\"\n  | \"INVALID_CONFIG\"\n  | \"INVALID_RESOURCE\"\n  | \"INVALID_PROMPT\"\n  | \"ROUTE_CONFLICT\"\n  | \"DUPLICATE_ROUTE\"\n  | \"INVALID_ROUTE\"\n\nexport interface BuildIssue {\n  code: BuildIssueCode\n  message: string\n  /** commands/ 기준 상대 경로 (posix) */\n  file?: string\n  id?: string\n}\n\n/** 스캔 · Registry 생성의 빌드 오류. 발견한 문제를 모두 모아 한 번에 던진다 */\nexport class MextBuildError extends Error {\n  readonly issues: readonly BuildIssue[]\n\n  constructor(issues: readonly BuildIssue[]) {\n    super(\n      `mext build failed (${issues.length} issue${issues.length === 1 ? \"\" : \"s\"})\\n` +\n        issues.map((i) => `  ${i.code}${i.file ? ` ${i.file}` : \"\"}: ${i.message}`).join(\"\\n\"),\n    )\n    this.name = \"MextBuildError\"\n    this.issues = issues\n  }\n}\n\nexport type MextErrorCode =\n  | \"UNKNOWN_COMMAND\"\n  | \"INVALID_ARGUMENT\"\n  | \"UNAUTHENTICATED\"\n  | \"PERMISSION_DENIED\"\n  | \"INPUT_UNAVAILABLE\"\n  | \"INPUT_DECLINED\"\n  | \"APPROVAL_REQUIRED\"\n\nexport interface ArgumentIssue {\n  /** 점 구분 경로. \"\" = 입력 전체 */\n  path: string\n  code: string\n  message: string\n}\n\nexport interface MextErrorDetails {\n  UNKNOWN_COMMAND: {\n    command: string\n    /** 유사 정식 ID (가까운 순) */\n    suggested: string[]\n    /** 다음에 볼 help 대상. \"help\" (루트) · \"help users\" (네임스페이스) */\n    usage: string\n  }\n  INVALID_ARGUMENT: {\n    command: string\n    /** 원본 입력에 없는 필수 필드 경로 */\n    missing_fields: string[]\n    issues: ArgumentIssue[]\n    /** input JSON Schema 2020-12 */\n    expected_schema: Record<string, unknown>\n    examples: unknown[]\n  }\n  UNAUTHENTICATED: {\n    reason: \"missing_token\" | \"invalid_token\"\n    /** CLI 원격 실행: 토큰 발급 명령 (mext login --url <url>) */\n    login?: string\n  }\n  PERMISSION_DENIED: {\n    command: string\n    /**\n     * anonymous = 인증 없는 주체의 readOnly 외 명령어 · read_only = readOnly 전용 호출 (split query) · scope = scopes 부족 ·\n     * authorize = 명령어의 authorize 가드가 거부 (spec §4)\n     */\n    reason: \"anonymous\" | \"read_only\" | \"scope\" | \"authorize\"\n    required_scopes: string[]\n    held_scopes: string[]\n  }\n  /**\n   * 사람의 승인 없이 실행할 수 없는 호출 (needsApproval · requiresConfirmation, spec §4 승인). PERMISSION_DENIED 와 달리 사람이 확인하면 실행된다.\n   * unconfirmed = client 방식 표면인데 요청에 확인 표시가 없다 (확인받고 meta_key 에 { confirmed: true } 를 실어 다시 호출).\n   * human_required = 이 호출자는 승인할 수 없다 (행위자가 agent · client 방식 표면에서 human 이 아님). 사람이 사람 표면에서 실행해야 한다\n   */\n  APPROVAL_REQUIRED: {\n    command: string\n    reason: \"unconfirmed\" | \"human_required\"\n    /** reason unconfirmed: 확인 표시를 싣는 요청 params._meta 키 (\"dev.mext/approval\") */\n    meta_key?: string\n  }\n  /** ctx.ask 를 처리할 수 없는 실행 환경 (TTY 없는 CLI 등) */\n  INPUT_UNAVAILABLE: {\n    command: string\n    /** url 요청 (ctx.ask kind url) 의 URL. 사용자가 직접 열고 다시 실행 */\n    url?: string\n  }\n  /** ctx.ask 거절 · 취소. confirm = requiresConfirmation 확인 거절 (실행 안 함), input = 입력 요청 거절 */\n  INPUT_DECLINED: {\n    command: string\n    kind: \"confirm\" | \"input\"\n  }\n}\n\n/** 구조화 오류. 어댑터는 code 로 분기하고 toJSON() 을 응답 본문으로 쓴다 */\nexport class MextError<C extends MextErrorCode = MextErrorCode> extends Error {\n  readonly code: C\n  readonly details: MextErrorDetails[C]\n\n  constructor(code: C, message: string, details: MextErrorDetails[C]) {\n    super(message)\n    this.name = \"MextError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: C; message: string } & MextErrorDetails[C] {\n    return { code: this.code, message: this.message, ...this.details }\n  }\n}\n\nexport function isMextError<C extends MextErrorCode>(error: unknown, code?: C): error is MextError<C> {\n  return error instanceof MextError && (code === undefined || error.code === code)\n}\n\n/** auth 단계에서 어댑터가 던지는 오류. anonymous 로 낮추지 않는다 */\nexport function unauthenticated(reason: MextErrorDetails[\"UNAUTHENTICATED\"][\"reason\"]): MextError<\"UNAUTHENTICATED\"> {\n  const message = reason === \"missing_token\" ? \"Authentication required.\" : \"Invalid authentication token.\"\n  return new MextError(\"UNAUTHENTICATED\", message, { reason })\n}\n\n/** ctx.ask 거절. AskHandler 가 input 요청 거절 · 취소에 던진다. invoke 는 requiresConfirmation 확인 거절에 던진다 */\nexport function inputDeclined(command: string, kind: \"confirm\" | \"input\"): MextError<\"INPUT_DECLINED\"> {\n  const message =\n    kind === \"confirm\" ? `${command} was not confirmed and did not run.` : `${command} requested input, but it was declined.`\n  return new MextError(\"INPUT_DECLINED\", message, { command, kind })\n}\n\n/** 승인 부족 (§4 승인). agent = 서버가 정한 행위자가 agent */\nexport function approvalRequired(\n  command: string,\n  reason: MextErrorDetails[\"APPROVAL_REQUIRED\"][\"reason\"],\n  options: { agent?: boolean } = {},\n): MextError<\"APPROVAL_REQUIRED\"> {\n  if (reason === \"unconfirmed\") {\n    const key = APPROVAL_META_KEY\n    return new MextError(\n      \"APPROVAL_REQUIRED\",\n      `${command} needs approval. Confirm with the person, then call again with _meta[\"${key}\"] = { \"confirmed\": true }.`,\n      { command, reason, meta_key: key },\n    )\n  }\n  const message = options.agent\n    ? `${command} needs approval from a person. An agent cannot approve it; a person has to run it.`\n    : `${command} needs approval from a person, and this caller is not identified as one.`\n  return new MextError(\"APPROVAL_REQUIRED\", message, { command, reason })\n}\n\n/** mext 가 쓰는 오류 code. CommandError 로 만들 수 없다 */\nexport const RESERVED_ERROR_CODES: readonly string[] = [\n  \"UNKNOWN_COMMAND\",\n  \"INVALID_ARGUMENT\",\n  \"UNAUTHENTICATED\",\n  \"PERMISSION_DENIED\",\n  \"INPUT_UNAVAILABLE\",\n  \"INPUT_DECLINED\",\n  \"APPROVAL_REQUIRED\",\n  \"EXECUTION_ERROR\",\n  \"EXECUTION_FAILED\",\n  \"INTERRUPTED\",\n  \"BUILD_ERROR\",\n  \"REMOTE_ERROR\",\n]\n\nconst ERROR_CODE = /^[A-Z][A-Z0-9_]*$/\n\n/**\n * 핸들러 정의 오류 (§4). 응답 본문 = { code, message, ...details } (MCP structuredContent.error · CLI --json).\n * code = 대문자 스네이크, mext 예약 code 불가 (TypeError). onCommandError 에 보고하지 않는다 (의도된 오류)\n */\nexport class CommandError extends Error {\n  readonly code: string\n  readonly details: Record<string, unknown>\n\n  constructor(code: string, message: string, details: Record<string, unknown> = {}) {\n    if (typeof code !== \"string\" || !ERROR_CODE.test(code)) {\n      throw new TypeError(`CommandError code must be UPPER_SNAKE_CASE (got ${JSON.stringify(code)})`)\n    }\n    if (RESERVED_ERROR_CODES.includes(code)) throw new TypeError(`CommandError code \"${code}\" is reserved by mext`)\n    if (typeof details !== \"object\" || details === null || Array.isArray(details)) {\n      throw new TypeError(\"CommandError details must be an object\")\n    }\n    super(message)\n    this.name = \"CommandError\"\n    this.code = code\n    this.details = details\n  }\n\n  toJSON(): { code: string; message: string } & Record<string, unknown> {\n    return { ...this.details, code: this.code, message: this.message }\n  }\n}\n\nexport function isCommandError(error: unknown): error is CommandError {\n  return error instanceof CommandError\n}\n\n/** 응답 본문으로 그대로 보내는 오류 (MextError · CommandError) */\nexport function isDeclaredError(error: unknown): error is MextError | CommandError {\n  return error instanceof MextError || error instanceof CommandError\n}\n"]}

package/dist/expose.d.ts

@@ -0,0 +1,9 @@
+import { type Surface } from "./caller.ts";
+import { type Registry } from "./registry.ts";
+/** expose 를 쓰는 명령어가 하나라도 있는지. false = 표면과 무관하게 같은 목록 (보기 = 원본) */
+export declare function hasExposure(registry: Registry): boolean;
+/**
+ * surface 에서 보이는 Registry. 숨길 명령어가 없으면 registry 그대로 (같은 객체).
+ * 같은 숨김 집합 = 같은 보기 객체 (도구 목록 · manifestHash 를 보기별로 1회 계산할 수 있다)
+ */
+export declare function exposedRegistry(registry: Registry, surface: Surface): Registry;

package/dist/expose.js

@@ -0,0 +1,52 @@
+import { isExposedOn } from "./caller.js";
+import { filterRegistry } from "./registry.js";
+/**
+ * 표면별 노출 (defineCommand expose, spec §4) 의 Registry 보기.
+ * 숨긴 명령어 = 그 표면에서 없는 명령어: 보기에는 명령어 · 별칭 · (남은 명령어가 없는) 네임스페이스가 없다.
+ * help · tools/list · UNKNOWN_COMMAND (suggested · usage) · invoke 가 모두 보기를 쓰므로 없는 ID 와 구분되지 않는다.
+ * 판정 입력 = 서버가 정한 표면 (surfaceOf(principal, transport)) 만
+ */
+const rules = new WeakMap();
+const views = new WeakMap();
+/** expose 를 쓰는 명령어가 하나라도 있는지. false = 표면과 무관하게 같은 목록 (보기 = 원본) */
+export function hasExposure(registry) {
+    let value = rules.get(registry);
+    if (value === undefined) {
+        value = false;
+        for (const entry of registry.commands.values()) {
+            if (entry.command.expose !== undefined) {
+                value = true;
+                break;
+            }
+        }
+        rules.set(registry, value);
+    }
+    return value;
+}
+/**
+ * surface 에서 보이는 Registry. 숨길 명령어가 없으면 registry 그대로 (같은 객체).
+ * 같은 숨김 집합 = 같은 보기 객체 (도구 목록 · manifestHash 를 보기별로 1회 계산할 수 있다)
+ */
+export function exposedRegistry(registry, surface) {
+    if (!hasExposure(registry))
+        return registry;
+    const hidden = [];
+    for (const entry of registry.commands.values()) {
+        if (!isExposedOn(entry.command.expose, surface))
+            hidden.push(entry.id);
+    }
+    if (hidden.length === 0)
+        return registry;
+    let cache = views.get(registry);
+    if (!cache)
+        views.set(registry, (cache = new Map()));
+    const key = hidden.join("\n");
+    let view = cache.get(key);
+    if (!view) {
+        const set = new Set(hidden);
+        view = filterRegistry(registry, (entry) => !set.has(entry.id));
+        cache.set(key, view);
+    }
+    return view;
+}
+//# sourceMappingURL=expose.js.map

package/dist/expose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expose.js","sourceRoot":"","sources":["../src/expose.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,cAAc,EAAiB,MAAM,eAAe,CAAA;AAE7D;;;;;GAKG;AAEH,MAAM,KAAK,GAAG,IAAI,OAAO,EAAqB,CAAA;AAC9C,MAAM,KAAK,GAAG,IAAI,OAAO,EAAmC,CAAA;AAE5D,kEAAkE;AAClE,MAAM,UAAU,WAAW,CAAC,QAAkB;IAC5C,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,GAAG,KAAK,CAAA;QACb,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvC,KAAK,GAAG,IAAI,CAAA;gBACZ,MAAK;YACP,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,OAAgB;IAClE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACxC,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAC3B,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["import { isExposedOn, type Surface } from \"./caller.ts\"\nimport { filterRegistry, type Registry } from \"./registry.ts\"\n\n/**\n * 표면별 노출 (defineCommand expose, spec §4) 의 Registry 보기.\n * 숨긴 명령어 = 그 표면에서 없는 명령어: 보기에는 명령어 · 별칭 · (남은 명령어가 없는) 네임스페이스가 없다.\n * help · tools/list · UNKNOWN_COMMAND (suggested · usage) · invoke 가 모두 보기를 쓰므로 없는 ID 와 구분되지 않는다.\n * 판정 입력 = 서버가 정한 표면 (surfaceOf(principal, transport)) 만\n */\n\nconst rules = new WeakMap<Registry, boolean>()\nconst views = new WeakMap<Registry, Map<string, Registry>>()\n\n/** expose 를 쓰는 명령어가 하나라도 있는지. false = 표면과 무관하게 같은 목록 (보기 = 원본) */\nexport function hasExposure(registry: Registry): boolean {\n  let value = rules.get(registry)\n  if (value === undefined) {\n    value = false\n    for (const entry of registry.commands.values()) {\n      if (entry.command.expose !== undefined) {\n        value = true\n        break\n      }\n    }\n    rules.set(registry, value)\n  }\n  return value\n}\n\n/**\n * surface 에서 보이는 Registry. 숨길 명령어가 없으면 registry 그대로 (같은 객체).\n * 같은 숨김 집합 = 같은 보기 객체 (도구 목록 · manifestHash 를 보기별로 1회 계산할 수 있다)\n */\nexport function exposedRegistry(registry: Registry, surface: Surface): Registry {\n  if (!hasExposure(registry)) return registry\n  const hidden: string[] = []\n  for (const entry of registry.commands.values()) {\n    if (!isExposedOn(entry.command.expose, surface)) hidden.push(entry.id)\n  }\n  if (hidden.length === 0) return registry\n  let cache = views.get(registry)\n  if (!cache) views.set(registry, (cache = new Map()))\n  const key = hidden.join(\"\\n\")\n  let view = cache.get(key)\n  if (!view) {\n    const set = new Set(hidden)\n    view = filterRegistry(registry, (entry) => !set.has(entry.id))\n    cache.set(key, view)\n  }\n  return view\n}\n"]}

package/dist/index.d.ts

@@ -1,19 +1,28 @@
 export { VERSION } from "./version.ts";
 export { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from "./command.ts";
-export type { Ask, AskRequest, Command, CommandContext, CommandDefinition, ConfirmRequest, InputRequest, InputSchema, MextApp, ProgressUpdate, TaskOptions, UrlRequest, } from "./command.ts";
+export type { Ask, AskRequest, Command, CommandAudit, CommandContext, CommandDefinition, ConfirmRequest, InputRequest, InputSchema, MextApp, ProgressUpdate, TaskOptions, UrlRequest, } from "./command.ts";
+export { audio, image, isContent, isContentResult, resourceLink, splitResult, withContent } from "./content.ts";
+export type { AudioContent, BinaryData, Content, ContentBlock, ContentResult, ImageContent, ResourceLinkContent, ResultValue, } from "./content.ts";
 export { collectResources, collectResourceSet, createLazyResourceSet, createResourceSet, defineResource, describeResource, isResource, loadResourceSet, matchResource, parseUriTemplate, resourceEntries, withResources, } from "./resource.ts";
 export type { LazyResourceInput, ManifestResource, RegisteredResource, Resource, ResourceCompleteContext, ResourceCompleter, ResourceContext, ResourceDefinition, ResourceInput, ResourceListItem, ResourceSet, ResourceVariables, UriTemplatePattern, } from "./resource.ts";
 export { collectPrompts, collectPromptSet, createLazyPromptSet, createPromptSet, definePrompt, describePrompt, isPrompt, loadPromptSet, promptArguments, withPrompts, } from "./prompt.ts";
 export type { LazyPromptInput, ManifestPrompt, Prompt, PromptArgs, PromptArgument, PromptCompleteContext, PromptCompleter, PromptContext, PromptDefinition, PromptInput, PromptMessage, PromptResult, PromptSet, RegisteredPrompt, } from "./prompt.ts";
 export { ANONYMOUS, hasScope, localPrincipal } from "./principal.ts";
-export type { Principal } from "./principal.ts";
-export { CommandError, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.ts";
+export type { Actor, ActorKind, Principal } from "./principal.ts";
+export { ANY_SURFACE, callerOf, defaultSurface, isExposedOn, surfaceOf } from "./caller.ts";
+export type { BuiltinSurface, Caller, Exposure, ReportedClient, Surface } from "./caller.ts";
+export { exposedRegistry, hasExposure } from "./expose.ts";
+export { approvalModeOf, isApprovalMark } from "./approval.ts";
+export type { ApprovalConfig, ApprovalMode, ApprovalSignal } from "./approval.ts";
+export { auditHidden, startAudit } from "./audit.ts";
+export type { AuditConfig, AuditContext, AuditEvent, AuditOutcome, AuditTarget, AuditTrail } from "./audit.ts";
+export { CommandError, approvalRequired, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.ts";
 export type { ArgumentIssue, BuildIssue, BuildIssueCode, MextErrorCode, MextErrorDetails } from "./errors.ts";
 export { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from "./invoke.ts";
 export type { AskHandler, AskHandlerRequest, DetachedExecution, InvokeOptions, InvokeResult } from "./invoke.ts";
 export { findInstrumentation, INSTRUMENTATION_FILE, loadInstrumentation, loadProjectInstrumentation, } from "./instrumentation.ts";
-export type { CommandErrorInfo, Instrumentation, InstrumentationModule, LoadInstrumentationOptions, OtelApi, Transport, } from "./instrumentation.ts";
-export { collectRegistry, createLazyRegistry, createRegistry, loadCommand, resolveCommand } from "./registry.ts";
+export type { CommandErrorInfo, Instrumentation, InstrumentationModule, LoadInstrumentationOptions, OtelApi, TraceIds, Transport, } from "./instrumentation.ts";
+export { collectRegistry, createLazyRegistry, createRegistry, filterRegistry, loadCommand, resolveCommand } from "./registry.ts";
 export type { JsonSchema, LazyCommandInput, NamespaceInfo, RegisteredCommand, Registry, RegistryCommandInput, RegistryInput, RegistryNamespaceInput, } from "./registry.ts";
 export { collectCommands, loadRegistry, scanCommands, walkCommands } from "./scan.ts";
 export type { ScannedFile, ScanResult } from "./scan.ts";
@@ -21,11 +30,13 @@ export { buildManifest, describeCommand, generateManifest, MANIFEST_SCHEMA_VERSI
 export type { BuildManifest, BuildManifestCommand, BuildManifestResource, BuildManifestRoute, Manifest, ManifestCommand, ManifestNamespace } from "./manifest.ts";
 export type { BuildManifestPrompt } from "./manifest.ts";
 export { collectRoutes, loadRoutes, ROUTE_METHODS, walkRoutes } from "./route.ts";
-export type { RouteContext, RouteEntry, RouteHandler, RouteMethod, RouteModule, ScannedRoute } from "./route.ts";
+export type { RouteAuth, RouteContext, RouteEntry, RouteHandler, RouteMethod, RouteModule, RouteOptions, ScannedRoute } from "./route.ts";
 export { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnavailableError, SERVER_JS, START_ENTRY } from "./build.ts";
 export type { BuildOptions, BuildResult, BuildWarning, RolldownModule, RolldownOutputItem } from "./build.ts";
 export { formatBuildSummary, runBuild } from "./cli/build.ts";
 export { mextVersion } from "./version.ts";
+export { renderTypes, resolveTypesPath, TYPES_FILE, writeTypes } from "./typegen.ts";
+export type { WriteTypesResult } from "./typegen.ts";
 export * from "./mcp/index.ts";
 export { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from "./config.ts";
 export { resolveResourcesDir } from "./config.ts";
@@ -33,7 +44,7 @@ export { resolvePromptsDir } from "./config.ts";
 export { resolveRoutesDir } from "./config.ts";
 export { memoryState } from "./state.ts";
 export type { MemoryStateOptions, MextBus, MextState, MextStore } from "./state.ts";
-export type { CliConfig, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from "./config.ts";
+export type { CliConfig, LocalPrincipalRequest, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from "./config.ts";
 export { buildCustomerCli, CLI_BIN_FILE, CLI_DIR, customerCliIssues } from "./build-cli.ts";
 export type { BuildCustomerCliOptions, CustomerCliBuild } from "./build-cli.ts";
 export { runCustomerCli } from "./client/main.ts";

package/dist/index.js

@@ -1,18 +1,24 @@
 export { VERSION } from "./version.js";
 export { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from "./command.js";
+export { audio, image, isContent, isContentResult, resourceLink, splitResult, withContent } from "./content.js";
 export { collectResources, collectResourceSet, createLazyResourceSet, createResourceSet, defineResource, describeResource, isResource, loadResourceSet, matchResource, parseUriTemplate, resourceEntries, withResources, } from "./resource.js";
 export { collectPrompts, collectPromptSet, createLazyPromptSet, createPromptSet, definePrompt, describePrompt, isPrompt, loadPromptSet, promptArguments, withPrompts, } from "./prompt.js";
 export { ANONYMOUS, hasScope, localPrincipal } from "./principal.js";
-export { CommandError, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.js";
+export { ANY_SURFACE, callerOf, defaultSurface, isExposedOn, surfaceOf } from "./caller.js";
+export { exposedRegistry, hasExposure } from "./expose.js";
+export { approvalModeOf, isApprovalMark } from "./approval.js";
+export { auditHidden, startAudit } from "./audit.js";
+export { CommandError, approvalRequired, inputDeclined, isCommandError, isMextError, MextBuildError, MextError, RESERVED_ERROR_CODES, unauthenticated, } from "./errors.js";
 export { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from "./invoke.js";
 export { findInstrumentation, INSTRUMENTATION_FILE, loadInstrumentation, loadProjectInstrumentation, } from "./instrumentation.js";
-export { collectRegistry, createLazyRegistry, createRegistry, loadCommand, resolveCommand } from "./registry.js";
+export { collectRegistry, createLazyRegistry, createRegistry, filterRegistry, loadCommand, resolveCommand } from "./registry.js";
 export { collectCommands, loadRegistry, scanCommands, walkCommands } from "./scan.js";
 export { buildManifest, describeCommand, generateManifest, MANIFEST_SCHEMA_VERSION, manifestHash } from "./manifest.js";
 export { collectRoutes, loadRoutes, ROUTE_METHODS, walkRoutes } from "./route.js";
 export { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnavailableError, SERVER_JS, START_ENTRY } from "./build.js";
 export { formatBuildSummary, runBuild } from "./cli/build.js";
 export { mextVersion } from "./version.js";
+export { renderTypes, resolveTypesPath, TYPES_FILE, writeTypes } from "./typegen.js";
 export * from "./mcp/index.js";
 export { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from "./config.js";
 export { resolveResourcesDir } from "./config.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAe5E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAA;AAgBtB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,aAAa,CAAA;AAiBpB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpE,OAAO,EACL,YAAY,EACZ,aAAa,EACb,cAAc,EACd,WAAW,EACX,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,eAAe,GAChB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEpJ,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAA;AAS7B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAWhH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAErF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGvH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEjF,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEvI,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,cAAc,gBAAgB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC/I,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAGxC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAE3F,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGnD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAE/H,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,cAAc,mBAAmB,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export { VERSION } from \"./version.ts\"\n\nexport { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from \"./command.ts\"\nexport type {\n  Ask,\n  AskRequest,\n  Command,\n  CommandContext,\n  CommandDefinition,\n  ConfirmRequest,\n  InputRequest,\n  InputSchema,\n  MextApp,\n  ProgressUpdate,\n  TaskOptions,\n  UrlRequest,\n} from \"./command.ts\"\nexport {\n  collectResources,\n  collectResourceSet,\n  createLazyResourceSet,\n  createResourceSet,\n  defineResource,\n  describeResource,\n  isResource,\n  loadResourceSet,\n  matchResource,\n  parseUriTemplate,\n  resourceEntries,\n  withResources,\n} from \"./resource.ts\"\nexport type {\n  LazyResourceInput,\n  ManifestResource,\n  RegisteredResource,\n  Resource,\n  ResourceCompleteContext,\n  ResourceCompleter,\n  ResourceContext,\n  ResourceDefinition,\n  ResourceInput,\n  ResourceListItem,\n  ResourceSet,\n  ResourceVariables,\n  UriTemplatePattern,\n} from \"./resource.ts\"\nexport {\n  collectPrompts,\n  collectPromptSet,\n  createLazyPromptSet,\n  createPromptSet,\n  definePrompt,\n  describePrompt,\n  isPrompt,\n  loadPromptSet,\n  promptArguments,\n  withPrompts,\n} from \"./prompt.ts\"\nexport type {\n  LazyPromptInput,\n  ManifestPrompt,\n  Prompt,\n  PromptArgs,\n  PromptArgument,\n  PromptCompleteContext,\n  PromptCompleter,\n  PromptContext,\n  PromptDefinition,\n  PromptInput,\n  PromptMessage,\n  PromptResult,\n  PromptSet,\n  RegisteredPrompt,\n} from \"./prompt.ts\"\nexport { ANONYMOUS, hasScope, localPrincipal } from \"./principal.ts\"\nexport type { Principal } from \"./principal.ts\"\nexport {\n  CommandError,\n  inputDeclined,\n  isCommandError,\n  isMextError,\n  MextBuildError,\n  MextError,\n  RESERVED_ERROR_CODES,\n  unauthenticated,\n} from \"./errors.ts\"\nexport type { ArgumentIssue, BuildIssue, BuildIssueCode, MextErrorCode, MextErrorDetails } from \"./errors.ts\"\nexport { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from \"./invoke.ts\"\nexport type { AskHandler, AskHandlerRequest, DetachedExecution, InvokeOptions, InvokeResult } from \"./invoke.ts\"\nexport {\n  findInstrumentation,\n  INSTRUMENTATION_FILE,\n  loadInstrumentation,\n  loadProjectInstrumentation,\n} from \"./instrumentation.ts\"\nexport type {\n  CommandErrorInfo,\n  Instrumentation,\n  InstrumentationModule,\n  LoadInstrumentationOptions,\n  OtelApi,\n  Transport,\n} from \"./instrumentation.ts\"\nexport { collectRegistry, createLazyRegistry, createRegistry, loadCommand, resolveCommand } from \"./registry.ts\"\nexport type {\n  JsonSchema,\n  LazyCommandInput,\n  NamespaceInfo,\n  RegisteredCommand,\n  Registry,\n  RegistryCommandInput,\n  RegistryInput,\n  RegistryNamespaceInput,\n} from \"./registry.ts\"\nexport { collectCommands, loadRegistry, scanCommands, walkCommands } from \"./scan.ts\"\nexport type { ScannedFile, ScanResult } from \"./scan.ts\"\nexport { buildManifest, describeCommand, generateManifest, MANIFEST_SCHEMA_VERSION, manifestHash } from \"./manifest.ts\"\nexport type { BuildManifest, BuildManifestCommand, BuildManifestResource, BuildManifestRoute, Manifest, ManifestCommand, ManifestNamespace } from \"./manifest.ts\"\nexport type { BuildManifestPrompt } from \"./manifest.ts\"\nexport { collectRoutes, loadRoutes, ROUTE_METHODS, walkRoutes } from \"./route.ts\"\nexport type { RouteContext, RouteEntry, RouteHandler, RouteMethod, RouteModule, ScannedRoute } from \"./route.ts\"\nexport { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnavailableError, SERVER_JS, START_ENTRY } from \"./build.ts\"\nexport type { BuildOptions, BuildResult, BuildWarning, RolldownModule, RolldownOutputItem } from \"./build.ts\"\nexport { formatBuildSummary, runBuild } from \"./cli/build.ts\"\nexport { mextVersion } from \"./version.ts\"\nexport * from \"./mcp/index.ts\"\nexport { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from \"./config.ts\"\nexport { resolveResourcesDir } from \"./config.ts\"\nexport { resolvePromptsDir } from \"./config.ts\"\nexport { resolveRoutesDir } from \"./config.ts\"\nexport { memoryState } from \"./state.ts\"\nexport type { MemoryStateOptions, MextBus, MextState, MextStore } from \"./state.ts\"\nexport type { CliConfig, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from \"./config.ts\"\nexport { buildCustomerCli, CLI_BIN_FILE, CLI_DIR, customerCliIssues } from \"./build-cli.ts\"\nexport type { BuildCustomerCliOptions, CustomerCliBuild } from \"./build-cli.ts\"\nexport { runCustomerCli } from \"./client/main.ts\"\nexport type { CustomerCliConfig } from \"./client/main.ts\"\nexport { clientManifest, manifestHelp } from \"./client/manifest.ts\"\nexport type { ClientManifest, ClientManifestCommand } from \"./client/manifest.ts\"\nexport { runRemote } from \"./client/runner.ts\"\nexport type { HelpSource, RemoteRunOptions } from \"./client/runner.ts\"\nexport { runCli, SUBCOMMANDS } from \"./cli/main.ts\"\nexport type { CliSubcommand } from \"./cli/main.ts\"\nexport type { CliIo, CliWriter } from \"./cli/io.ts\"\nexport { analyzeInput, assertCliConvertible, cliBuildIssues, cliSpec, parseArgs, RESERVED_FLAGS, toKebab } from \"./cli/args.ts\"\nexport type { CliField, CliSpec, FieldKind, ParseArgsOptions, ParsedArgs, Primitive, ScalarKind } from \"./cli/args.ts\"\nexport {\n  cliPath,\n  formatInvocation,\n  renderCommandHelp,\n  renderHelp,\n  renderNamespaceHelp,\n  resolveHelpTarget,\n} from \"./cli/help.ts\"\nexport type { HelpOptions, HelpTarget } from \"./cli/help.ts\"\nexport { errorJson, exitCodeOf, formatError, formatJson, formatResult } from \"./cli/output.ts\"\nexport type { CliErrorFormatter, CliErrorInfo, CliErrorOutput } from \"./cli/output.ts\"\nexport { loginCommand, resolveServerUrl } from \"./cli/login.ts\"\nexport type { AuthCommandOptions } from \"./cli/login.ts\"\nexport { logoutCommand } from \"./cli/logout.ts\"\nexport * from \"./remote/index.ts\"\nexport { cliSpecFromJsonSchema, defineCliSpec } from \"./cli/args.ts\"\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAgB5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAW/G,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAA;AAgBtB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,aAAa,CAAA;AAiBpB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEpD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,WAAW,EACX,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,eAAe,GAChB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEpJ,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAA;AAU7B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAWhI,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAErF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGvH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEjF,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEvI,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEpF,cAAc,gBAAgB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC/I,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAGxC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAE3F,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGnD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAE/H,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,cAAc,mBAAmB,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export { VERSION } from \"./version.ts\"\n\nexport { DEFAULT_TASK_TTL_MS, defineCommand, isCommand } from \"./command.ts\"\nexport type {\n  Ask,\n  AskRequest,\n  Command,\n  CommandAudit,\n  CommandContext,\n  CommandDefinition,\n  ConfirmRequest,\n  InputRequest,\n  InputSchema,\n  MextApp,\n  ProgressUpdate,\n  TaskOptions,\n  UrlRequest,\n} from \"./command.ts\"\nexport { audio, image, isContent, isContentResult, resourceLink, splitResult, withContent } from \"./content.ts\"\nexport type {\n  AudioContent,\n  BinaryData,\n  Content,\n  ContentBlock,\n  ContentResult,\n  ImageContent,\n  ResourceLinkContent,\n  ResultValue,\n} from \"./content.ts\"\nexport {\n  collectResources,\n  collectResourceSet,\n  createLazyResourceSet,\n  createResourceSet,\n  defineResource,\n  describeResource,\n  isResource,\n  loadResourceSet,\n  matchResource,\n  parseUriTemplate,\n  resourceEntries,\n  withResources,\n} from \"./resource.ts\"\nexport type {\n  LazyResourceInput,\n  ManifestResource,\n  RegisteredResource,\n  Resource,\n  ResourceCompleteContext,\n  ResourceCompleter,\n  ResourceContext,\n  ResourceDefinition,\n  ResourceInput,\n  ResourceListItem,\n  ResourceSet,\n  ResourceVariables,\n  UriTemplatePattern,\n} from \"./resource.ts\"\nexport {\n  collectPrompts,\n  collectPromptSet,\n  createLazyPromptSet,\n  createPromptSet,\n  definePrompt,\n  describePrompt,\n  isPrompt,\n  loadPromptSet,\n  promptArguments,\n  withPrompts,\n} from \"./prompt.ts\"\nexport type {\n  LazyPromptInput,\n  ManifestPrompt,\n  Prompt,\n  PromptArgs,\n  PromptArgument,\n  PromptCompleteContext,\n  PromptCompleter,\n  PromptContext,\n  PromptDefinition,\n  PromptInput,\n  PromptMessage,\n  PromptResult,\n  PromptSet,\n  RegisteredPrompt,\n} from \"./prompt.ts\"\nexport { ANONYMOUS, hasScope, localPrincipal } from \"./principal.ts\"\nexport type { Actor, ActorKind, Principal } from \"./principal.ts\"\nexport { ANY_SURFACE, callerOf, defaultSurface, isExposedOn, surfaceOf } from \"./caller.ts\"\nexport type { BuiltinSurface, Caller, Exposure, ReportedClient, Surface } from \"./caller.ts\"\nexport { exposedRegistry, hasExposure } from \"./expose.ts\"\nexport { approvalModeOf, isApprovalMark } from \"./approval.ts\"\nexport type { ApprovalConfig, ApprovalMode, ApprovalSignal } from \"./approval.ts\"\nexport { auditHidden, startAudit } from \"./audit.ts\"\nexport type { AuditConfig, AuditContext, AuditEvent, AuditOutcome, AuditTarget, AuditTrail } from \"./audit.ts\"\nexport {\n  CommandError,\n  approvalRequired,\n  inputDeclined,\n  isCommandError,\n  isMextError,\n  MextBuildError,\n  MextError,\n  RESERVED_ERROR_CODES,\n  unauthenticated,\n} from \"./errors.ts\"\nexport type { ArgumentIssue, BuildIssue, BuildIssueCode, MextErrorCode, MextErrorDetails } from \"./errors.ts\"\nexport { authorize, confirmationMessage, createContext, findCommand, invalidArgument, invoke, OutputValidationError, parseInput } from \"./invoke.ts\"\nexport type { AskHandler, AskHandlerRequest, DetachedExecution, InvokeOptions, InvokeResult } from \"./invoke.ts\"\nexport {\n  findInstrumentation,\n  INSTRUMENTATION_FILE,\n  loadInstrumentation,\n  loadProjectInstrumentation,\n} from \"./instrumentation.ts\"\nexport type {\n  CommandErrorInfo,\n  Instrumentation,\n  InstrumentationModule,\n  LoadInstrumentationOptions,\n  OtelApi,\n  TraceIds,\n  Transport,\n} from \"./instrumentation.ts\"\nexport { collectRegistry, createLazyRegistry, createRegistry, filterRegistry, loadCommand, resolveCommand } from \"./registry.ts\"\nexport type {\n  JsonSchema,\n  LazyCommandInput,\n  NamespaceInfo,\n  RegisteredCommand,\n  Registry,\n  RegistryCommandInput,\n  RegistryInput,\n  RegistryNamespaceInput,\n} from \"./registry.ts\"\nexport { collectCommands, loadRegistry, scanCommands, walkCommands } from \"./scan.ts\"\nexport type { ScannedFile, ScanResult } from \"./scan.ts\"\nexport { buildManifest, describeCommand, generateManifest, MANIFEST_SCHEMA_VERSION, manifestHash } from \"./manifest.ts\"\nexport type { BuildManifest, BuildManifestCommand, BuildManifestResource, BuildManifestRoute, Manifest, ManifestCommand, ManifestNamespace } from \"./manifest.ts\"\nexport type { BuildManifestPrompt } from \"./manifest.ts\"\nexport { collectRoutes, loadRoutes, ROUTE_METHODS, walkRoutes } from \"./route.ts\"\nexport type { RouteAuth, RouteContext, RouteEntry, RouteHandler, RouteMethod, RouteModule, RouteOptions, ScannedRoute } from \"./route.ts\"\nexport { BUILD_DIR, BUILD_MANIFEST_FILE, buildProject, HANDLER_JS, RolldownUnavailableError, SERVER_JS, START_ENTRY } from \"./build.ts\"\nexport type { BuildOptions, BuildResult, BuildWarning, RolldownModule, RolldownOutputItem } from \"./build.ts\"\nexport { formatBuildSummary, runBuild } from \"./cli/build.ts\"\nexport { mextVersion } from \"./version.ts\"\nexport { renderTypes, resolveTypesPath, TYPES_FILE, writeTypes } from \"./typegen.ts\"\nexport type { WriteTypesResult } from \"./typegen.ts\"\nexport * from \"./mcp/index.ts\"\nexport { CLI_BUILTIN_COMMANDS, CONFIG_FILE, createApp, defineConfig, loadConfig, resolveCommandsDir, resolveLocalPrincipal } from \"./config.ts\"\nexport { resolveResourcesDir } from \"./config.ts\"\nexport { resolvePromptsDir } from \"./config.ts\"\nexport { resolveRoutesDir } from \"./config.ts\"\nexport { memoryState } from \"./state.ts\"\nexport type { MemoryStateOptions, MextBus, MextState, MextStore } from \"./state.ts\"\nexport type { CliConfig, LocalPrincipalRequest, McpCapabilities, McpConfig, McpConnectHandler, McpConnection, MextConfig } from \"./config.ts\"\nexport { buildCustomerCli, CLI_BIN_FILE, CLI_DIR, customerCliIssues } from \"./build-cli.ts\"\nexport type { BuildCustomerCliOptions, CustomerCliBuild } from \"./build-cli.ts\"\nexport { runCustomerCli } from \"./client/main.ts\"\nexport type { CustomerCliConfig } from \"./client/main.ts\"\nexport { clientManifest, manifestHelp } from \"./client/manifest.ts\"\nexport type { ClientManifest, ClientManifestCommand } from \"./client/manifest.ts\"\nexport { runRemote } from \"./client/runner.ts\"\nexport type { HelpSource, RemoteRunOptions } from \"./client/runner.ts\"\nexport { runCli, SUBCOMMANDS } from \"./cli/main.ts\"\nexport type { CliSubcommand } from \"./cli/main.ts\"\nexport type { CliIo, CliWriter } from \"./cli/io.ts\"\nexport { analyzeInput, assertCliConvertible, cliBuildIssues, cliSpec, parseArgs, RESERVED_FLAGS, toKebab } from \"./cli/args.ts\"\nexport type { CliField, CliSpec, FieldKind, ParseArgsOptions, ParsedArgs, Primitive, ScalarKind } from \"./cli/args.ts\"\nexport {\n  cliPath,\n  formatInvocation,\n  renderCommandHelp,\n  renderHelp,\n  renderNamespaceHelp,\n  resolveHelpTarget,\n} from \"./cli/help.ts\"\nexport type { HelpOptions, HelpTarget } from \"./cli/help.ts\"\nexport { errorJson, exitCodeOf, formatError, formatJson, formatResult } from \"./cli/output.ts\"\nexport type { CliErrorFormatter, CliErrorInfo, CliErrorOutput } from \"./cli/output.ts\"\nexport { loginCommand, resolveServerUrl } from \"./cli/login.ts\"\nexport type { AuthCommandOptions } from \"./cli/login.ts\"\nexport { logoutCommand } from \"./cli/logout.ts\"\nexport * from \"./remote/index.ts\"\nexport { cliSpecFromJsonSchema, defineCliSpec } from \"./cli/args.ts\"\n"]}

package/dist/inspect/agent.d.ts

@@ -0,0 +1,104 @@
+import type { AuditEvent } from "../audit.ts";
+import { type Failure } from "./compare.ts";
+import type { Inspector } from "./inspector.ts";
+/**
+ * 에이전트 plugin 계약 (specs/inspector.md §7): 에이전트에게 말로 지시하고, 서버에 남은 감사 이벤트로 판정한다.
+ * inspector 는 에이전트 종류를 모른다. 에이전트별 연결 방법은 AgentClient 를 만드는 모듈 (plugin) 안에만 있다
+ */
+/** 에이전트 쪽에서 일어난 일. 판정에는 쓰지 않는다 (판정 = 서버의 감사 이벤트). idle · error 만 단계의 끝을 정한다 */
+export type AgentEvent = 
+/** 에이전트가 한 말 */
+{
+    type: "text";
+    text: string;
+}
+/** 에이전트 쪽에서 본 도구 호출 (선택) */
+ | {
+    type: "tool";
+    name: string;
+    input?: unknown;
+    output?: unknown;
+    ok?: boolean;
+}
+/** 보낸 지시의 처리를 마쳤다 (더 올 호출이 없다). plugin 이 반드시 알린다 */
+ | {
+    type: "idle";
+}
+/** 연결 끊김 · 에이전트 실행 실패 */
+ | {
+    type: "error";
+    message: string;
+};
+export interface AgentMessage {
+    text: string;
+}
+export interface AgentClient {
+    /** 표시 이름 (결과 · 로그) */
+    readonly name?: string;
+    /** 연결하고 지시를 받을 수 있는지 확인. 실패 = throw (사람이 읽을 이유) */
+    connect(options?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
+    /** 지시 하나를 보낸다. 전달이 확인되면 끝난다 (에이전트의 일이 끝나기를 기다리지 않는다) */
+    send(message: AgentMessage): Promise<void>;
+    /** 반환 = 해제 */
+    onEvent(listener: (event: AgentEvent) => void): () => void;
+    close?(): Promise<void>;
+}
+/** --agent 모듈의 default export: AgentClient, 또는 그것을 만드는 함수 */
+export type AgentPlugin = AgentClient | ((context: AgentPluginContext) => AgentClient | Promise<AgentClient>);
+export interface AgentPluginContext {
+    cwd: string;
+    env: Record<string, string | undefined>;
+}
+export declare function isAgentClient(value: unknown): value is AgentClient;
+/** agent 단계의 기대 (각 항목 = 감사 이벤트의 일부) */
+export interface AgentExpect {
+    /** 순서대로 있어야 하는 이벤트 (사이에 다른 이벤트가 있어도 된다) */
+    audit?: Record<string, unknown>[];
+    /** 있으면 안 되는 이벤트 */
+    none?: Record<string, unknown>[];
+}
+export interface AgentToolCall {
+    name: string;
+    input?: unknown;
+    output?: unknown;
+    ok?: boolean;
+}
+export interface AgentObservation {
+    /** idle 까지 갔는가 (false = timeout · error · 취소) */
+    ok: boolean;
+    /** ok 아님 = 이유 ("timeout" · error 이벤트의 메시지 · "cancelled") */
+    problem?: string;
+    /** 보낸 지시문 */
+    instruction: string;
+    /** 관찰 구간에 온 이 에이전트의 감사 이벤트 (오래된 것부터) */
+    events: AuditEvent[];
+    /** 에이전트가 한 말 */
+    messages: string[];
+    /** 에이전트 쪽에서 본 도구 호출 */
+    tools: AgentToolCall[];
+}
+export declare const AGENT_TIMEOUT_MS = 120000;
+/** idle 뒤 늦게 오는 감사 이벤트를 기다리는 시간 */
+export declare const AGENT_SETTLE_MS = 500;
+export interface InstructOptions {
+    text: string;
+    /** 이 에이전트의 호출을 가려내는 조건 (이벤트의 일부) */
+    from?: Record<string, unknown>;
+    timeoutMs?: number;
+    settleMs?: number;
+    signal?: AbortSignal;
+}
+/** connect 한 번 (같은 AgentClient 로 여러 번 불러도). 실패하면 다음 호출이 다시 시도한다 */
+export declare function connectAgent(agent: AgentClient, signal?: AbortSignal): Promise<void>;
+/**
+ * 지시 하나를 보내고 idle 까지 서버의 감사 이벤트를 모은다.
+ * 관찰 = send 직전부터 idle (+ settleMs) 까지 온 이벤트 중 inspector 자신의 호출 (trace ID) 이 아니고 from 에 맞는 것.
+ * 시작 시각 (at) 이 send 보다 이른 이벤트는 뺀다: 감사 출처가 연결할 때 다시 보내 주는 예전 이벤트 (서버와 시계가 같다고 본다)
+ */
+export declare function instructAgent(inspector: Inspector, agent: AgentClient, options: InstructOptions): Promise<AgentObservation>;
+/** 기대와 관찰한 이벤트 비교. 못 찾은 audit 항목 · 걸린 none 항목 = failures */
+export declare function checkAudit(expect: AgentExpect | undefined, events: readonly AuditEvent[], failures: Failure[]): void;
+/** 실패 항목에 싣는 이벤트 요약 (입력 · 요약문 제외) */
+export declare function summarizeAudit(event: AuditEvent): Record<string, unknown>;

package/dist/inspect/agent.js

@@ -0,0 +1,125 @@
+import { matches } from "./compare.js";
+export function isAgentClient(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const v = value;
+    return typeof v.connect === "function" && typeof v.send === "function" && typeof v.onEvent === "function";
+}
+export const AGENT_TIMEOUT_MS = 120_000;
+/** idle 뒤 늦게 오는 감사 이벤트를 기다리는 시간 */
+export const AGENT_SETTLE_MS = 500;
+const connections = new WeakMap();
+/** connect 한 번 (같은 AgentClient 로 여러 번 불러도). 실패하면 다음 호출이 다시 시도한다 */
+export function connectAgent(agent, signal) {
+    let connected = connections.get(agent);
+    if (!connected) {
+        connected = agent.connect(signal ? { signal } : {});
+        connections.set(agent, connected);
+        connected.catch(() => connections.delete(agent));
+    }
+    return connected;
+}
+/**
+ * 지시 하나를 보내고 idle 까지 서버의 감사 이벤트를 모은다.
+ * 관찰 = send 직전부터 idle (+ settleMs) 까지 온 이벤트 중 inspector 자신의 호출 (trace ID) 이 아니고 from 에 맞는 것.
+ * 시작 시각 (at) 이 send 보다 이른 이벤트는 뺀다: 감사 출처가 연결할 때 다시 보내 주는 예전 이벤트 (서버와 시계가 같다고 본다)
+ */
+export async function instructAgent(inspector, agent, options) {
+    const started = Date.now();
+    const received = [];
+    const messages = [];
+    const tools = [];
+    let finish = () => { };
+    const finished = new Promise((resolve) => (finish = resolve));
+    const stopAudit = inspector.subscribe((event) => {
+        if (event.type === "audit")
+            received.push(event.event);
+    });
+    const stopAgent = agent.onEvent((event) => {
+        if (event.type === "text")
+            messages.push(event.text);
+        else if (event.type === "tool") {
+            const { type: _type, ...call } = event;
+            tools.push(call);
+        }
+        else if (event.type === "idle")
+            finish(undefined);
+        else if (event.type === "error")
+            finish(event.message);
+    });
+    const timer = setTimeout(() => finish("timeout"), options.timeoutMs ?? AGENT_TIMEOUT_MS);
+    const onAbort = () => finish("cancelled");
+    options.signal?.addEventListener("abort", onAbort, { once: true });
+    if (options.signal?.aborted)
+        finish("cancelled");
+    let problem;
+    try {
+        try {
+            await agent.send({ text: options.text });
+        }
+        catch (error) {
+            finish(`send failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        problem = await finished;
+        // 감사 이벤트는 호출보다 늦게 올 수 있다 (감사 출처의 전달 지연)
+        if (problem === undefined)
+            await new Promise((resolve) => setTimeout(resolve, options.settleMs ?? AGENT_SETTLE_MS));
+    }
+    finally {
+        clearTimeout(timer);
+        options.signal?.removeEventListener("abort", onAbort);
+        stopAgent();
+        stopAudit();
+    }
+    const own = new Set(inspector.history().map((record) => record.traceId));
+    const events = received.filter((event) => {
+        if (event.traceId !== undefined && own.has(event.traceId))
+            return false;
+        const at = Date.parse(event.at);
+        if (Number.isFinite(at) && at < started)
+            return false;
+        return options.from === undefined || matches(options.from, event);
+    });
+    // 에이전트가 한 말 · 도구 호출에 프로필의 비밀 값이 섞여 있으면 가린다 (감사 이벤트는 받을 때 이미 가렸다)
+    return inspector.redact({
+        ok: problem === undefined,
+        ...(problem !== undefined ? { problem } : {}),
+        instruction: options.text,
+        events,
+        messages,
+        tools,
+    });
+}
+/** 기대와 관찰한 이벤트 비교. 못 찾은 audit 항목 · 걸린 none 항목 = failures */
+export function checkAudit(expect, events, failures) {
+    let next = 0;
+    for (const [i, pattern] of (expect?.audit ?? []).entries()) {
+        const found = events.findIndex((event, index) => index >= next && matches(pattern, event));
+        if (found >= 0) {
+            next = found + 1;
+            continue;
+        }
+        // 같은 명령어의 이벤트를 보여 준다 (무엇이 달랐는지). 순서만 틀린 경우도 여기에 나온다
+        const same = typeof pattern.command === "string" ? events.filter((event) => event.command === pattern.command) : events;
+        failures.push({ path: `audit.${i}`, expected: pattern, actual: same.map(summarizeAudit) });
+    }
+    for (const [i, pattern] of (expect?.none ?? []).entries()) {
+        const hit = events.find((event) => matches(pattern, event));
+        if (hit)
+            failures.push({ path: `none.${i}`, expected: pattern, actual: summarizeAudit(hit) });
+    }
+}
+/** 실패 항목에 싣는 이벤트 요약 (입력 · 요약문 제외) */
+export function summarizeAudit(event) {
+    return {
+        command: event.command,
+        outcome: event.outcome,
+        ...(event.error ? { error: event.error.code } : {}),
+        surface: event.surface,
+        ...(event.actor ? { actor: event.actor } : {}),
+        ...(event.client ? { client: event.client.name } : {}),
+        ...(event.approval ? { approval: event.approval } : {}),
+        at: event.at,
+    };
+}
+//# sourceMappingURL=agent.js.map

package/dist/inspect/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/inspect/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAgB,MAAM,cAAc,CAAA;AA2CpD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAA;AAC3G,CAAC;AAgCD,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AACvC,mCAAmC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAWlC,MAAM,WAAW,GAAG,IAAI,OAAO,EAA8B,CAAA;AAE7D,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,KAAkB,EAAE,MAAoB;IACnE,IAAI,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACnD,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QACjC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAoB,EAAE,KAAkB,EAAE,OAAwB;IACpG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAoB,EAAE,CAAA;IACjC,IAAI,MAAM,GAA0C,GAAG,EAAE,GAAE,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAA;IACjF,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;aAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;YACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,CAAC,SAAS,CAAC,CAAA;aAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC/C,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,CAAC,WAAW,CAAC,CAAA;IAChD,IAAI,OAA2B,CAAA;IAC/B,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAClF,CAAC;QACD,OAAO,GAAG,MAAM,QAAQ,CAAA;QACxB,wCAAwC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC,CAAA;IACrH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACrD,SAAS,EAAE,CAAA;QACX,SAAS,EAAE,CAAA;IACb,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAA;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,OAAO;YAAE,OAAO,KAAK,CAAA;QACrD,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IACF,iEAAiE;IACjE,OAAO,SAAS,CAAC,MAAM,CAAC;QACtB,EAAE,EAAE,OAAO,KAAK,SAAS;QACzB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,MAAM;QACN,QAAQ;QACR,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,MAA+B,EAAE,MAA6B,EAAE,QAAmB;IAC5G,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAC1F,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,GAAG,KAAK,GAAG,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,oDAAoD;QACpD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACvH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAC3D,IAAI,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC/F,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAA;AACH,CAAC","sourcesContent":["import type { AuditEvent } from \"../audit.ts\"\nimport { matches, type Failure } from \"./compare.ts\"\nimport type { Inspector } from \"./inspector.ts\"\n\n/**\n * 에이전트 plugin 계약 (specs/inspector.md §7): 에이전트에게 말로 지시하고, 서버에 남은 감사 이벤트로 판정한다.\n * inspector 는 에이전트 종류를 모른다. 에이전트별 연결 방법은 AgentClient 를 만드는 모듈 (plugin) 안에만 있다\n */\n\n/** 에이전트 쪽에서 일어난 일. 판정에는 쓰지 않는다 (판정 = 서버의 감사 이벤트). idle · error 만 단계의 끝을 정한다 */\nexport type AgentEvent =\n  /** 에이전트가 한 말 */\n  | { type: \"text\"; text: string }\n  /** 에이전트 쪽에서 본 도구 호출 (선택) */\n  | { type: \"tool\"; name: string; input?: unknown; output?: unknown; ok?: boolean }\n  /** 보낸 지시의 처리를 마쳤다 (더 올 호출이 없다). plugin 이 반드시 알린다 */\n  | { type: \"idle\" }\n  /** 연결 끊김 · 에이전트 실행 실패 */\n  | { type: \"error\"; message: string }\n\nexport interface AgentMessage {\n  text: string\n}\n\nexport interface AgentClient {\n  /** 표시 이름 (결과 · 로그) */\n  readonly name?: string\n  /** 연결하고 지시를 받을 수 있는지 확인. 실패 = throw (사람이 읽을 이유) */\n  connect(options?: { signal?: AbortSignal }): Promise<void>\n  /** 지시 하나를 보낸다. 전달이 확인되면 끝난다 (에이전트의 일이 끝나기를 기다리지 않는다) */\n  send(message: AgentMessage): Promise<void>\n  /** 반환 = 해제 */\n  onEvent(listener: (event: AgentEvent) => void): () => void\n  close?(): Promise<void>\n}\n\n/** --agent 모듈의 default export: AgentClient, 또는 그것을 만드는 함수 */\nexport type AgentPlugin = AgentClient | ((context: AgentPluginContext) => AgentClient | Promise<AgentClient>)\n\nexport interface AgentPluginContext {\n  cwd: string\n  env: Record<string, string | undefined>\n}\n\nexport function isAgentClient(value: unknown): value is AgentClient {\n  if (typeof value !== \"object\" || value === null) return false\n  const v = value as Record<string, unknown>\n  return typeof v.connect === \"function\" && typeof v.send === \"function\" && typeof v.onEvent === \"function\"\n}\n\n/** agent 단계의 기대 (각 항목 = 감사 이벤트의 일부) */\nexport interface AgentExpect {\n  /** 순서대로 있어야 하는 이벤트 (사이에 다른 이벤트가 있어도 된다) */\n  audit?: Record<string, unknown>[]\n  /** 있으면 안 되는 이벤트 */\n  none?: Record<string, unknown>[]\n}\n\nexport interface AgentToolCall {\n  name: string\n  input?: unknown\n  output?: unknown\n  ok?: boolean\n}\n\nexport interface AgentObservation {\n  /** idle 까지 갔는가 (false = timeout · error · 취소) */\n  ok: boolean\n  /** ok 아님 = 이유 (\"timeout\" · error 이벤트의 메시지 · \"cancelled\") */\n  problem?: string\n  /** 보낸 지시문 */\n  instruction: string\n  /** 관찰 구간에 온 이 에이전트의 감사 이벤트 (오래된 것부터) */\n  events: AuditEvent[]\n  /** 에이전트가 한 말 */\n  messages: string[]\n  /** 에이전트 쪽에서 본 도구 호출 */\n  tools: AgentToolCall[]\n}\n\nexport const AGENT_TIMEOUT_MS = 120_000\n/** idle 뒤 늦게 오는 감사 이벤트를 기다리는 시간 */\nexport const AGENT_SETTLE_MS = 500\n\nexport interface InstructOptions {\n  text: string\n  /** 이 에이전트의 호출을 가려내는 조건 (이벤트의 일부) */\n  from?: Record<string, unknown>\n  timeoutMs?: number\n  settleMs?: number\n  signal?: AbortSignal\n}\n\nconst connections = new WeakMap<AgentClient, Promise<void>>()\n\n/** connect 한 번 (같은 AgentClient 로 여러 번 불러도). 실패하면 다음 호출이 다시 시도한다 */\nexport function connectAgent(agent: AgentClient, signal?: AbortSignal): Promise<void> {\n  let connected = connections.get(agent)\n  if (!connected) {\n    connected = agent.connect(signal ? { signal } : {})\n    connections.set(agent, connected)\n    connected.catch(() => connections.delete(agent))\n  }\n  return connected\n}\n\n/**\n * 지시 하나를 보내고 idle 까지 서버의 감사 이벤트를 모은다.\n * 관찰 = send 직전부터 idle (+ settleMs) 까지 온 이벤트 중 inspector 자신의 호출 (trace ID) 이 아니고 from 에 맞는 것.\n * 시작 시각 (at) 이 send 보다 이른 이벤트는 뺀다: 감사 출처가 연결할 때 다시 보내 주는 예전 이벤트 (서버와 시계가 같다고 본다)\n */\nexport async function instructAgent(inspector: Inspector, agent: AgentClient, options: InstructOptions): Promise<AgentObservation> {\n  const started = Date.now()\n  const received: AuditEvent[] = []\n  const messages: string[] = []\n  const tools: AgentToolCall[] = []\n  let finish: (problem: string | undefined) => void = () => {}\n  const finished = new Promise<string | undefined>((resolve) => (finish = resolve))\n  const stopAudit = inspector.subscribe((event) => {\n    if (event.type === \"audit\") received.push(event.event)\n  })\n  const stopAgent = agent.onEvent((event) => {\n    if (event.type === \"text\") messages.push(event.text)\n    else if (event.type === \"tool\") {\n      const { type: _type, ...call } = event\n      tools.push(call)\n    } else if (event.type === \"idle\") finish(undefined)\n    else if (event.type === \"error\") finish(event.message)\n  })\n  const timer = setTimeout(() => finish(\"timeout\"), options.timeoutMs ?? AGENT_TIMEOUT_MS)\n  const onAbort = (): void => finish(\"cancelled\")\n  options.signal?.addEventListener(\"abort\", onAbort, { once: true })\n  if (options.signal?.aborted) finish(\"cancelled\")\n  let problem: string | undefined\n  try {\n    try {\n      await agent.send({ text: options.text })\n    } catch (error) {\n      finish(`send failed: ${error instanceof Error ? error.message : String(error)}`)\n    }\n    problem = await finished\n    // 감사 이벤트는 호출보다 늦게 올 수 있다 (감사 출처의 전달 지연)\n    if (problem === undefined) await new Promise((resolve) => setTimeout(resolve, options.settleMs ?? AGENT_SETTLE_MS))\n  } finally {\n    clearTimeout(timer)\n    options.signal?.removeEventListener(\"abort\", onAbort)\n    stopAgent()\n    stopAudit()\n  }\n  const own = new Set(inspector.history().map((record) => record.traceId))\n  const events = received.filter((event) => {\n    if (event.traceId !== undefined && own.has(event.traceId)) return false\n    const at = Date.parse(event.at)\n    if (Number.isFinite(at) && at < started) return false\n    return options.from === undefined || matches(options.from, event)\n  })\n  // 에이전트가 한 말 · 도구 호출에 프로필의 비밀 값이 섞여 있으면 가린다 (감사 이벤트는 받을 때 이미 가렸다)\n  return inspector.redact({\n    ok: problem === undefined,\n    ...(problem !== undefined ? { problem } : {}),\n    instruction: options.text,\n    events,\n    messages,\n    tools,\n  })\n}\n\n/** 기대와 관찰한 이벤트 비교. 못 찾은 audit 항목 · 걸린 none 항목 = failures */\nexport function checkAudit(expect: AgentExpect | undefined, events: readonly AuditEvent[], failures: Failure[]): void {\n  let next = 0\n  for (const [i, pattern] of (expect?.audit ?? []).entries()) {\n    const found = events.findIndex((event, index) => index >= next && matches(pattern, event))\n    if (found >= 0) {\n      next = found + 1\n      continue\n    }\n    // 같은 명령어의 이벤트를 보여 준다 (무엇이 달랐는지). 순서만 틀린 경우도 여기에 나온다\n    const same = typeof pattern.command === \"string\" ? events.filter((event) => event.command === pattern.command) : events\n    failures.push({ path: `audit.${i}`, expected: pattern, actual: same.map(summarizeAudit) })\n  }\n  for (const [i, pattern] of (expect?.none ?? []).entries()) {\n    const hit = events.find((event) => matches(pattern, event))\n    if (hit) failures.push({ path: `none.${i}`, expected: pattern, actual: summarizeAudit(hit) })\n  }\n}\n\n/** 실패 항목에 싣는 이벤트 요약 (입력 · 요약문 제외) */\nexport function summarizeAudit(event: AuditEvent): Record<string, unknown> {\n  return {\n    command: event.command,\n    outcome: event.outcome,\n    ...(event.error ? { error: event.error.code } : {}),\n    surface: event.surface,\n    ...(event.actor ? { actor: event.actor } : {}),\n    ...(event.client ? { client: event.client.name } : {}),\n    ...(event.approval ? { approval: event.approval } : {}),\n    at: event.at,\n  }\n}\n"]}

package/dist/inspect/audit.d.ts

@@ -0,0 +1,46 @@
+import type { AuditEvent } from "../audit.ts";
+/**
+ * 감사 출처 (specs/inspector.md §6): 서버의 감사 이벤트 (mext.md §11.1) 를 Inspector 로 잇는다.
+ * mext dev = 감사 tap 의 endpoint (mext.md §10). 그 외 = 호출 코드가 출처를 만들어 연결한다
+ */
+export interface AuditSource {
+    /** 이벤트마다 listener 호출. 반환 = 구독 해제 */
+    subscribe(listener: (event: AuditEvent) => void): () => void;
+}
+/** 같은 프로세스의 서버와 잇는 출처: mext.config.ts · startMcpHttpServer 의 audit.sink 에 push 를 넘긴다 */
+export interface AuditChannel extends AuditSource {
+    push(event: AuditEvent): void;
+}
+export declare function auditChannel(): AuditChannel;
+export interface DevAuditCredentials {
+    /** mext dev 의 MCP 엔드포인트 (lock 의 url) */
+    url: string;
+    /** lock 의 auditToken */
+    token: string;
+}
+export interface DevAuditSourceOptions {
+    /** 연결할 때마다 읽는다 (mext dev 를 다시 시작하면 토큰이 바뀐다). undefined = 실행 중인 dev 없음 → 잠시 뒤 다시 */
+    credentials: DevAuditCredentials | (() => DevAuditCredentials | undefined);
+    fetch?: typeof fetch;
+    /** 다시 연결하기 전 대기 (기본 500ms, 실패가 이어지면 5초까지 늘어난다) */
+    retryMs?: number;
+}
+/**
+ * mext dev 의 감사 tap endpoint 를 읽는 출처. 구독자가 있는 동안 연결 하나를 유지하고, 끊기면 ?after 로 이어 받는다.
+ * 토큰은 Authorization 헤더로만 보낸다 (출력하지 않는다)
+ */
+export declare function devAuditSource(options: DevAuditSourceOptions): AuditSource;
+export type AuditAvailability = {
+    available: true;
+    source: AuditSource;
+} | {
+    available: false;
+    reason: string;
+};
+/**
+ * 대상 서버의 감사 출처. 대상이 이 프로젝트의 mext dev (대상 URL = .mext/dev/lock 의 url) 일 때만 자동 연결.
+ * 그 외 = 사용 불가 + 이유 (프로그램 API 로 출처를 직접 연결할 수 있다)
+ */
+export declare function resolveAudit(target: {
+    url: string;
+}, cwd: string): AuditAvailability;