@scardis/omnifocus-mcp 0.1.0

package/dist/runtime/bridge.js

@@ -0,0 +1,76 @@
+import { spawn } from "child_process";
+import { loadSnippet } from "./snippetLoader.js";
+import { buildJxaScript } from "./jxaShim.js";
+import { parseResultLine, ExecutionError } from "./resultProtocol.js";
+const DEFAULT_TIMEOUT_MS = 30_000;
+/**
+ * Execute an OmniJS snippet inside OmniFocus via the JXA bridge.
+ *
+ * @param name - Snippet filename (without .js extension) under src/snippets/
+ * @param args - Arguments to inject. Embedded as a JSON literal; safe for
+ *               all unicode, apostrophes, quotes, etc. (Design Decision 2).
+ * @param opts - Optional timeout override (default 30s)
+ * @returns The `data` field from the success envelope
+ * @throws ExecutionError if the snippet throws inside OmniJS
+ * @throws Error on timeout, process errors, or protocol violations
+ */
+export async function runSnippet(name, args, opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    // Load and inject args — the only interpolation allowed (Decision 2)
+    const template = loadSnippet(name);
+    const snippet = template.replace("__ARGS__", JSON.stringify(args));
+    // Wrap snippet in JXA shim
+    const jxaScript = buildJxaScript(snippet);
+    return new Promise((resolve, reject) => {
+        const MAX_OUTPUT_BYTES = 10 * 1024 * 1024; // 10 MB
+        const ac = new AbortController();
+        const timer = setTimeout(() => {
+            ac.abort();
+            child.kill("SIGKILL");
+            reject(new Error(`Snippet "${name}" timed out after ${timeoutMs}ms`));
+        }, timeoutMs);
+        const child = spawn("osascript", ["-l", "JavaScript"], {
+            signal: ac.signal,
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout.on("data", (chunk) => {
+            stdout += chunk.toString();
+            if (stdout.length > MAX_OUTPUT_BYTES) {
+                child.kill("SIGKILL");
+                clearTimeout(timer);
+                reject(new Error(`Snippet "${name}" exceeded maximum output size`));
+            }
+        });
+        child.stderr.on("data", (chunk) => {
+            stderr += chunk.toString();
+        });
+        child.on("error", (err) => {
+            clearTimeout(timer);
+            if (err.code === "ABORT_ERR")
+                return; // handled by timer
+            reject(err);
+        });
+        child.on("close", (code) => {
+            clearTimeout(timer);
+            try {
+                const envelope = parseResultLine(stdout);
+                if (envelope.ok) {
+                    resolve(envelope.data);
+                }
+                else {
+                    reject(new ExecutionError(envelope.error));
+                }
+            }
+            catch (parseErr) {
+                const hint = stdout.slice(0, 200) || stderr.slice(0, 200);
+                reject(new Error(`Failed to parse bridge output for snippet "${name}" (exit ${code})` +
+                    (hint ? `: ${hint}` : "")));
+            }
+        });
+        // Write JXA script to stdin
+        child.stdin.write(jxaScript);
+        child.stdin.end();
+    });
+}
+//# sourceMappingURL=bridge.js.map

package/dist/runtime/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/runtime/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEtE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAMlC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,IAAa,EACb,OAAmB,EAAE;IAErB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAEvD,qEAAqE;IACrE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAEnE,2BAA2B;IAC3B,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAE1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;QAEnD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;QACxE,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;YACrD,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,gCAAgC,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAK,GAA6B,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,CAAC,mBAAmB;YACpF,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1D,MAAM,CACJ,IAAI,KAAK,CACP,8CAA8C,IAAI,WAAW,IAAI,GAAG;oBAClE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5B,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/index.d.ts

@@ -0,0 +1,5 @@
+export { runSnippet, type RunOptions } from "./bridge.js";
+export { loadSnippet, clearSnippetCache } from "./snippetLoader.js";
+export { parseResultLine, ExecutionError, type ResultEnvelope } from "./resultProtocol.js";
+export { buildJxaScript } from "./jxaShim.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/runtime/index.js

@@ -0,0 +1,5 @@
+export { runSnippet } from "./bridge.js";
+export { loadSnippet, clearSnippetCache } from "./snippetLoader.js";
+export { parseResultLine, ExecutionError } from "./resultProtocol.js";
+export { buildJxaScript } from "./jxaShim.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAuB,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/runtime/jxaShim.d.ts

@@ -0,0 +1,21 @@
+/**
+ * JXA wrapper template. The `__SNIPPET__` placeholder is replaced with the
+ * OmniJS snippet to execute. The resulting script is passed to
+ * `osascript -l JavaScript` via stdin.
+ *
+ * This shim:
+ *  - Calls Application('OmniFocus').evaluateJavascript() with the snippet
+ *  - Wraps in try/catch
+ *  - Prints exactly one line of JSON: {ok, data} | {ok: false, error: {...}}
+ *
+ * The JXA scripting dictionary is used ONLY for evaluateJavascript.
+ * No other scripting-dictionary domain methods are invoked here.
+ */
+export declare const JXA_SHIM_TEMPLATE = "\n(function() {\n  var snippet = __SNIPPET__;\n  var app = Application('OmniFocus');\n  app.includeStandardAdditions = true;\n  try {\n    var result = app.evaluateJavascript(snippet);\n    // result is already a JSON string produced by the snippet\n    $.NSFileHandle.fileHandleWithStandardOutput.writeData(\n      $.NSString.alloc.initWithString(result + '\\n')\n        .dataUsingEncoding($.NSUTF8StringEncoding)\n    );\n  } catch(e) {\n    var errName = e.name || 'Error';\n    var errMsg = e.message || String(e);\n    // OmniJS wraps thrown errors; the original name is embedded in the message\n    // as \"SomeName: original message\". Recover it when the name is generic.\n    var nameMatch = errMsg.match(/^([A-Z]\\w*Error): ([\\s\\S]*)$/);\n    if (nameMatch) { errName = nameMatch[1]; errMsg = nameMatch[2]; }\n    var err = JSON.stringify({\n      ok: false,\n      error: {\n        name: errName,\n        message: errMsg\n      }\n    });\n    $.NSFileHandle.fileHandleWithStandardOutput.writeData(\n      $.NSString.alloc.initWithString(err + '\\n')\n        .dataUsingEncoding($.NSUTF8StringEncoding)\n    );\n  }\n})();\n";
+/**
+ * Build the complete JXA script to pass to osascript.
+ * The snippet is embedded as a JS string literal via JSON.stringify,
+ * so it is safe to contain any characters including quotes, backslashes, etc.
+ */
+export declare function buildJxaScript(snippet: string): string;
+//# sourceMappingURL=jxaShim.d.ts.map

package/dist/runtime/jxaShim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jxaShim.d.ts","sourceRoot":"","sources":["../../src/runtime/jxaShim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,ynCAgC7B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/runtime/jxaShim.js

@@ -0,0 +1,55 @@
+/**
+ * JXA wrapper template. The `__SNIPPET__` placeholder is replaced with the
+ * OmniJS snippet to execute. The resulting script is passed to
+ * `osascript -l JavaScript` via stdin.
+ *
+ * This shim:
+ *  - Calls Application('OmniFocus').evaluateJavascript() with the snippet
+ *  - Wraps in try/catch
+ *  - Prints exactly one line of JSON: {ok, data} | {ok: false, error: {...}}
+ *
+ * The JXA scripting dictionary is used ONLY for evaluateJavascript.
+ * No other scripting-dictionary domain methods are invoked here.
+ */
+export const JXA_SHIM_TEMPLATE = `
+(function() {
+  var snippet = __SNIPPET__;
+  var app = Application('OmniFocus');
+  app.includeStandardAdditions = true;
+  try {
+    var result = app.evaluateJavascript(snippet);
+    // result is already a JSON string produced by the snippet
+    $.NSFileHandle.fileHandleWithStandardOutput.writeData(
+      $.NSString.alloc.initWithString(result + '\\n')
+        .dataUsingEncoding($.NSUTF8StringEncoding)
+    );
+  } catch(e) {
+    var errName = e.name || 'Error';
+    var errMsg = e.message || String(e);
+    // OmniJS wraps thrown errors; the original name is embedded in the message
+    // as "SomeName: original message". Recover it when the name is generic.
+    var nameMatch = errMsg.match(/^([A-Z]\\w*Error): ([\\s\\S]*)$/);
+    if (nameMatch) { errName = nameMatch[1]; errMsg = nameMatch[2]; }
+    var err = JSON.stringify({
+      ok: false,
+      error: {
+        name: errName,
+        message: errMsg
+      }
+    });
+    $.NSFileHandle.fileHandleWithStandardOutput.writeData(
+      $.NSString.alloc.initWithString(err + '\\n')
+        .dataUsingEncoding($.NSUTF8StringEncoding)
+    );
+  }
+})();
+`;
+/**
+ * Build the complete JXA script to pass to osascript.
+ * The snippet is embedded as a JS string literal via JSON.stringify,
+ * so it is safe to contain any characters including quotes, backslashes, etc.
+ */
+export function buildJxaScript(snippet) {
+    return JXA_SHIM_TEMPLATE.replace("__SNIPPET__", JSON.stringify(snippet));
+}
+//# sourceMappingURL=jxaShim.js.map

package/dist/runtime/jxaShim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jxaShim.js","sourceRoot":"","sources":["../../src/runtime/jxaShim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgChC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,iBAAiB,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/runtime/resultProtocol.d.ts

@@ -0,0 +1,66 @@
+import { z } from "zod";
+declare const ErrorDetail: z.ZodObject<{
+    name: z.ZodString;
+    message: z.ZodString;
+    stack: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    message: string;
+    stack?: string | undefined;
+}, {
+    name: string;
+    message: string;
+    stack?: string | undefined;
+}>;
+declare const Envelope: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodUnknown;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    data?: unknown;
+}, {
+    ok: true;
+    data?: unknown;
+}>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    error: z.ZodObject<{
+        name: z.ZodString;
+        message: z.ZodString;
+        stack: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        message: string;
+        stack?: string | undefined;
+    }, {
+        name: string;
+        message: string;
+        stack?: string | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    ok: false;
+    error: {
+        name: string;
+        message: string;
+        stack?: string | undefined;
+    };
+}, {
+    ok: false;
+    error: {
+        name: string;
+        message: string;
+        stack?: string | undefined;
+    };
+}>]>;
+export type ResultEnvelope = z.infer<typeof Envelope>;
+export declare class ExecutionError extends Error {
+    readonly errorName: string;
+    readonly remoteStack?: string;
+    constructor(detail: z.infer<typeof ErrorDetail>);
+}
+/**
+ * Scans stdout for the first JSON-parseable line and validates it as a result
+ * envelope. Ignores any preceding non-JSON chatter (e.g. osascript warnings).
+ */
+export declare function parseResultLine(stdout: string): ResultEnvelope;
+export {};
+//# sourceMappingURL=resultProtocol.d.ts.map

package/dist/runtime/resultProtocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultProtocol.d.ts","sourceRoot":"","sources":["../../src/runtime/resultProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,WAAW;;;;;;;;;;;;EAIf,CAAC;AAYH,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAA+D,CAAC;AAE9E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEtD,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC;CAMhD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAuB9D"}

package/dist/runtime/resultProtocol.js

@@ -0,0 +1,52 @@
+import { z } from "zod";
+const ErrorDetail = z.object({
+    name: z.string(),
+    message: z.string(),
+    stack: z.string().optional(),
+});
+const SuccessEnvelope = z.object({
+    ok: z.literal(true),
+    data: z.unknown(),
+});
+const ErrorEnvelope = z.object({
+    ok: z.literal(false),
+    error: ErrorDetail,
+});
+const Envelope = z.discriminatedUnion("ok", [SuccessEnvelope, ErrorEnvelope]);
+export class ExecutionError extends Error {
+    errorName;
+    remoteStack;
+    constructor(detail) {
+        super(detail.message);
+        this.name = "ExecutionError";
+        this.errorName = detail.name;
+        this.remoteStack = detail.stack;
+    }
+}
+/**
+ * Scans stdout for the first JSON-parseable line and validates it as a result
+ * envelope. Ignores any preceding non-JSON chatter (e.g. osascript warnings).
+ */
+export function parseResultLine(stdout) {
+    const lines = stdout.split("\n");
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        let parsed;
+        try {
+            parsed = JSON.parse(trimmed);
+        }
+        catch {
+            continue; // not JSON, skip
+        }
+        const result = Envelope.safeParse(parsed);
+        if (result.success) {
+            return result.data;
+        }
+        // Parsed as JSON but not a valid envelope — this is a protocol error
+        throw new Error(`Bridge returned JSON that is not a valid result envelope: ${trimmed}`);
+    }
+    throw new Error(`No valid JSON result envelope found in osascript output:\n${stdout}`);
+}
+//# sourceMappingURL=resultProtocol.js.map

package/dist/runtime/resultProtocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultProtocol.js","sourceRoot":"","sources":["../../src/runtime/resultProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACpB,KAAK,EAAE,WAAW;CACnB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;AAI9E,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,SAAS,CAAS;IAClB,WAAW,CAAU;IAE9B,YAAY,MAAmC;QAC7C,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,iBAAiB;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,qEAAqE;QACrE,MAAM,IAAI,KAAK,CACb,6DAA6D,OAAO,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,6DAA6D,MAAM,EAAE,CACtE,CAAC;AACJ,CAAC"}

package/dist/runtime/snippetLoader.d.ts

@@ -0,0 +1,4 @@
+export declare function loadSnippet(name: string): string;
+/** For testing: clear the in-memory cache. */
+export declare function clearSnippetCache(): void;
+//# sourceMappingURL=snippetLoader.d.ts.map

package/dist/runtime/snippetLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snippetLoader.d.ts","sourceRoot":"","sources":["../../src/runtime/snippetLoader.ts"],"names":[],"mappings":"AA0CA,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+BhD;AAED,8CAA8C;AAC9C,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/dist/runtime/snippetLoader.js

@@ -0,0 +1,68 @@
+import { readFileSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const SNIPPETS_DIR = join(__dirname, "..", "snippets");
+// Allowlist of valid snippet names. Adding a new snippet requires an explicit
+// entry here, which prevents path-traversal attacks if a snippet name ever
+// reaches this loader from a dynamic source.
+const ALLOWED_SNIPPETS = new Set([
+    "get_folder",
+    "get_project",
+    "get_tag",
+    "get_task",
+    "list_folders",
+    "list_projects",
+    "list_tags",
+    "list_tasks",
+    "resolve_name",
+    "create_task",
+    "edit_task",
+    "complete_task",
+    "drop_task",
+    "delete_task",
+    "create_project",
+    "edit_project",
+    "complete_project",
+    "drop_project",
+    "delete_project",
+    "create_folder",
+    "edit_folder",
+    "delete_folder",
+    "create_tag",
+    "edit_tag",
+    "delete_tag",
+    "move_task",
+    "move_project",
+]);
+const cache = new Map();
+export function loadSnippet(name) {
+    if (!ALLOWED_SNIPPETS.has(name)) {
+        throw new Error(`Unknown snippet: "${name}"`);
+    }
+    if (cache.has(name)) {
+        return cache.get(name);
+    }
+    const filePath = join(SNIPPETS_DIR, `${name}.js`);
+    let content;
+    try {
+        content = readFileSync(filePath, "utf-8");
+    }
+    catch {
+        throw new Error(`Snippet "${name}" could not be loaded`);
+    }
+    const matches = content.split("__ARGS__").length - 1;
+    if (matches === 0) {
+        throw new Error(`Snippet "${name}" contains no __ARGS__ placeholder. Every snippet must have exactly one.`);
+    }
+    if (matches > 1) {
+        throw new Error(`Snippet "${name}" contains ${matches} __ARGS__ placeholders. Exactly one is required.`);
+    }
+    cache.set(name, content);
+    return content;
+}
+/** For testing: clear the in-memory cache. */
+export function clearSnippetCache() {
+    cache.clear();
+}
+//# sourceMappingURL=snippetLoader.js.map

package/dist/runtime/snippetLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snippetLoader.js","sourceRoot":"","sources":["../../src/runtime/snippetLoader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAEvD,8EAA8E;AAC9E,2EAA2E;AAC3E,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,YAAY;IACZ,aAAa;IACb,SAAS;IACT,UAAU;IACV,cAAc;IACd,eAAe;IACf,WAAW;IACX,YAAY;IACZ,cAAc;IACd,aAAa;IACb,WAAW;IACX,eAAe;IACf,WAAW;IACX,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,eAAe;IACf,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,WAAW;IACX,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IAC1B,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;IAClD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,0EAA0E,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,cAAc,OAAO,kDAAkD,CACxF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,iBAAiB;IAC/B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/schemas/enums.d.ts

@@ -0,0 +1,9 @@
+import { z } from "zod";
+export declare const IdSchema: z.ZodString;
+export declare const EntityType: z.ZodEnum<["task", "project", "folder", "tag", "perspective"]>;
+export declare const ProjectType: z.ZodEnum<["parallel", "sequential", "singleActions"]>;
+export declare const ProjectStatus: z.ZodEnum<["active", "onHold", "done", "dropped"]>;
+export declare const TaskStatus: z.ZodEnum<["available", "incomplete", "completedByChildren", "complete", "dropped", "dueSoon", "overdue", "flagged", "blocked", "next"]>;
+export declare const TagStatus: z.ZodEnum<["active", "onHold", "dropped"]>;
+export declare const FolderStatus: z.ZodEnum<["active", "dropped"]>;
+//# sourceMappingURL=enums.d.ts.map

package/dist/schemas/enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../src/schemas/enums.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,QAAQ,aAAqD,CAAC;AAE3E,eAAO,MAAM,UAAU,gEAMrB,CAAC;AAEH,eAAO,MAAM,WAAW,wDAAsD,CAAC;AAE/E,eAAO,MAAM,aAAa,oDAAkD,CAAC;AAE7E,eAAO,MAAM,UAAU,0IAWrB,CAAC;AAEH,eAAO,MAAM,SAAS,4CAA0C,CAAC;AAEjE,eAAO,MAAM,YAAY,kCAAgC,CAAC"}

package/dist/schemas/enums.js

@@ -0,0 +1,26 @@
+import { z } from "zod";
+export const IdSchema = z.string().min(1, "ID must be a non-empty string");
+export const EntityType = z.enum([
+    "task",
+    "project",
+    "folder",
+    "tag",
+    "perspective",
+]);
+export const ProjectType = z.enum(["parallel", "sequential", "singleActions"]);
+export const ProjectStatus = z.enum(["active", "onHold", "done", "dropped"]);
+export const TaskStatus = z.enum([
+    "available",
+    "incomplete",
+    "completedByChildren",
+    "complete",
+    "dropped",
+    "dueSoon",
+    "overdue",
+    "flagged",
+    "blocked",
+    "next",
+]);
+export const TagStatus = z.enum(["active", "onHold", "dropped"]);
+export const FolderStatus = z.enum(["active", "dropped"]);
+//# sourceMappingURL=enums.js.map

package/dist/schemas/enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../src/schemas/enums.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,MAAM;IACN,SAAS;IACT,QAAQ;IACR,KAAK;IACL,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC"}

package/dist/schemas/index.d.ts

@@ -0,0 +1,3 @@
+export { IdSchema, EntityType, ProjectType, ProjectStatus, TaskStatus, TagStatus, FolderStatus, } from "./enums.js";
+export { RepetitionRuleInput, RepetitionRuleDetail, TaskSummary, ListTasksFilter, TaskDetail, CreateTaskInput, EditTaskInput, MoveTaskInput, ReviewIntervalInput, CreateProjectInput, EditProjectInput, MoveProjectInput, ListProjectsFilter, ProjectSummary, ProjectDetail, ListFoldersFilter, CreateFolderInput, EditFolderInput, FolderSummary, FolderDetail, ListTagsFilter, CreateTagInput, EditTagInput, TagSummary, TagDetail, ResolveCandidate, } from "./shapes.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,UAAU,EACV,WAAW,EACX,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,UAAU,EACV,eAAe,EACf,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,UAAU,EACV,SAAS,EACT,gBAAgB,GACjB,MAAM,aAAa,CAAC"}

package/dist/schemas/index.js

@@ -0,0 +1,3 @@
+export { IdSchema, EntityType, ProjectType, ProjectStatus, TaskStatus, TagStatus, FolderStatus, } from "./enums.js";
+export { RepetitionRuleInput, RepetitionRuleDetail, TaskSummary, ListTasksFilter, TaskDetail, CreateTaskInput, EditTaskInput, MoveTaskInput, ReviewIntervalInput, CreateProjectInput, EditProjectInput, MoveProjectInput, ListProjectsFilter, ProjectSummary, ProjectDetail, ListFoldersFilter, CreateFolderInput, EditFolderInput, FolderSummary, FolderDetail, ListTagsFilter, CreateTagInput, EditTagInput, TagSummary, TagDetail, ResolveCandidate, } from "./shapes.js";
+//# sourceMappingURL=index.js.map

package/dist/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,UAAU,EACV,WAAW,EACX,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,UAAU,EACV,eAAe,EACf,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,UAAU,EACV,SAAS,EACT,gBAAgB,GACjB,MAAM,aAAa,CAAC"}