@snagset/mcp 0.0.2

package/dist/vendor/types/names.js

@@ -0,0 +1,256 @@
+// ─────────────────────────────────────────────────────────────────────────────
+// GENERATED FILE — DO NOT EDIT BY HAND.
+// Source of truth: packages/types/registry.json
+// Regenerate:      pnpm gen:names      (CI runs `pnpm gen:names:check`)
+//
+// The Name Registry (specs/00-foundations.md §2) made executable. Every token
+// below is DERIVED from registry.json's `brand` block — the product name lives
+// in exactly one place. test/rename.test.ts proves it: flip the brand, and no
+// token of the old one survives. SCHEMA_VERSION is the one deliberate literal.
+// ─────────────────────────────────────────────────────────────────────────────
+/** The one place the product name exists. Everything else derives from this. */
+export const BRAND = {
+    $comment: "The ONLY place the product name appears. `long` = display/global name. `short` = the terse prefix that goes on attributes, classes, params, storage keys and artefact filenames (a client's DOM should not carry a long word). `pkg` = the npm/lowercase form used for env vars, headers, metrics, DOM events and symbols.",
+    long: "Snagset",
+    short: "snag",
+    pkg: "snagset",
+};
+export const PRODUCT = "Snagset";
+export const NPM_PACKAGE = "snagset";
+export const NPM_SCOPE = "@snagset";
+/** Frozen once v1 stores real data — stamped into exports, issue bodies and the MCP contract, so it must survive a rename (registry.frozen). */
+export const SCHEMA_VERSION = "snagset.v1";
+export const CSS_VAR_PREFIX = "--snag-";
+export const HTTP_HEADER_PREFIX = "x-snagset-";
+export const ENV_PREFIX = "SNAGSET_";
+export const PG_TYPE_PREFIX = "snag_";
+export const METRIC_PREFIX = "snagset_";
+export const DOM_EVENT_PREFIX = "snagset:";
+export const SYMBOL_PREFIX = "snagset.";
+export const MENTION_SCHEME = "snag:user/";
+export const SKIP_HEADER = "x-snagset-skip";
+export const THREAD_REF_PREFIX = "SN-";
+export const TERM_SET = "Snagset";
+export const TERM_SET_PLURAL = "Snagsets";
+export const TERM_ITEM = "Snag";
+export const TERM_ITEM_PLURAL = "Snags";
+export const RESERVED_CUSTOM_PREFIX = "cr.";
+/** @returns e.g. `x-snagset-idempotency-key` */
+export const header = (name) => HTTP_HEADER_PREFIX + name;
+/** @returns e.g. `SNAGSET_SESSION_TTL_S` */
+export const env = (name) => ENV_PREFIX + name;
+/** @returns e.g. `snag_attachment_kind` */
+export const pgType = (name) => PG_TYPE_PREFIX + name;
+/** @returns e.g. `snagset_http_requests_total` */
+export const metric = (name) => METRIC_PREFIX + name;
+/** window.* names (§2.2). Dunders are internal/test affordances, not public API. */
+export const GLOBALS = {
+    api: "Snagset",
+    config: "SnagsetConfig",
+    disabled: "__SNAGSET_DISABLED__",
+    assetBase: "__SNAGSET_ASSET_BASE__",
+    collisionFallback: "__snagset__",
+};
+const scriptAttrToken = {
+    site: "data-snag-site",
+    host: "data-snag-host",
+    disabled: "data-snag-disabled",
+    env: "data-snag-env",
+    mode: "data-snag-mode",
+    badge: "data-snag-badge",
+    lang: "data-snag-lang",
+    theme: "data-snag-theme",
+    position: "data-snag-position",
+    offset: "data-snag-offset",
+    assetBase: "data-snag-asset-base",
+    branch: "data-snag-branch",
+    build: "data-snag-build",
+    storage: "data-snag-storage",
+    hotkey: "data-snag-hotkey",
+    allowAutomation: "data-snag-allow-automation",
+    screenshots: "data-snag-screenshots",
+    maskSelectors: "data-snag-mask-selectors",
+    nonce: "data-snag-nonce",
+    autoMount: "data-snag-auto-mount",
+};
+export const scriptAttr = (name) => scriptAttrToken[name];
+const widgetAttrToken = {
+    root: "data-snag-root",
+};
+export const widgetAttr = (name) => widgetAttrToken[name];
+const hostAttrToken = {
+    anchor: "data-snag-anchor",
+    ignore: "data-snag-ignore",
+    mask: "data-snag-mask",
+    nomask: "data-snag-nomask",
+    src: "data-snag-src",
+    component: "data-snag-component",
+};
+export const hostAttr = (name) => hostAttrToken[name];
+const cssClassToken = {
+    mask: "snag-mask",
+    block: "snag-block",
+};
+export const cssClass = (name) => cssClassToken[name];
+/** Custom properties (§2.1's prefix, enumerated). 06 §14 makes every one of these public SemVer surface, so they are registered rather than minted at the point of use. Values are NOT here — the registry governs names, never design. */
+export const CSS_VAR = {
+    font: "--snag-font",
+    accent: "--snag-accent",
+    onAccent: "--snag-onAccent",
+    bg: "--snag-bg",
+    fg: "--snag-fg",
+    muted: "--snag-muted",
+    border: "--snag-border",
+    radius: "--snag-radius",
+    shadow: "--snag-shadow",
+    z: "--snag-z",
+    motion: "--snag-motion",
+    surface: "--snag-surface",
+    sunken: "--snag-sunken",
+    hover: "--snag-hover",
+    focus: "--snag-focus",
+    disabled: "--snag-disabled",
+    statusOpen: "--snag-status-open",
+    statusProgress: "--snag-status-progress",
+    statusReview: "--snag-status-review",
+    statusResolved: "--snag-status-resolved",
+    anchorOrphan: "--snag-anchor-orphan",
+    tbH: "--snag-tb-h",
+    dockW: "--snag-dock-w",
+    kb: "--snag-kb",
+    thumbX: "--snag-thumb-x",
+    thumbW: "--snag-thumb-w",
+};
+/** Which tokens belong to which role — the dark block must override theme members only. */
+export const CSS_VAR_GROUPS = {
+    theme: ["font", "accent", "onAccent", "bg", "fg", "muted", "border", "radius", "shadow", "z", "motion"],
+    derived: ["surface", "sunken", "hover", "focus", "disabled"],
+    status: ["statusOpen", "statusProgress", "statusReview", "statusResolved"],
+    anchor: ["anchorOrphan"],
+    geometry: ["tbH", "dockW", "kb", "thumbX", "thumbW"],
+};
+/** @returns e.g. `--snag-bg` */
+export const cssVar = (name) => CSS_VAR[name];
+/** @returns e.g. `var(--snag-bg)` — what stylesheets actually interpolate. */
+export const cssRef = (name) => `var(${CSS_VAR[name]})`;
+/** @returns e.g. `snag_t`. The review-link secret is a FRAGMENT param (§2.5). */
+export const param = (name) => "snag_" + name;
+export const RESERVED_URL_PARAMS = {
+    query: ["snag_t", "snag_off", "snag_debug", "snag_theme"],
+    fragment: ["snag_k"],
+};
+/** Point consts for hot paths: a chunk needing ONE key imports it and
+ *  drops the whole table — object properties cannot tree-shake, and the
+ *  panels chunk was carrying ten keys to read two (M2-13). */
+export const DISCLOSURE_KEY = "snag:disclosure:v1";
+export const IDENTITY_KEY = "snag:identity";
+export const THEME_ATTR = "data-snag-theme";
+/** Web-storage keys (§2.6). Parameterised keys are functions. */
+export const storageKey = {
+    session: (uid) => `snag:session:${uid}`,
+    identity: IDENTITY_KEY,
+    threads: (uid, env) => `snag:threads:${uid}:${env}`,
+    seen: (uid, env) => `snag:seen:${uid}:${env}`,
+    counts: (origin) => `snag:counts:${origin}`,
+    draft: (route, draftId) => `snag:draft:${route}:${draftId}`,
+    outbox: (uid) => `snag:outbox:${uid}`,
+    mode: "snag:mode",
+    handoff: "snag:handoff",
+    seenCoach: "snag:seen-coach",
+    disclosure: DISCLOSURE_KEY,
+};
+/** The v0.1 IndexedDB blob store (§2.6, 05 §10.1) — one database, one
+ *  object store, shared by screenshots, reviewer images and the v2 outbox. */
+export const IDB = {
+    database: "snag:blobs",
+    store: "blobs",
+};
+/** Anchored regex sources matching every registered key — AC-22's storage diff. */
+export const STORAGE_KEY_PATTERNS = [
+    "^snag:session:.+$",
+    "^snag:identity$",
+    "^snag:threads:.+:.+$",
+    "^snag:seen:.+:.+$",
+    "^snag:counts:.+$",
+    "^snag:draft:.+:.+$",
+    "^snag:outbox:.+$",
+    "^snag:mode$",
+    "^snag:handoff$",
+    "^snag:seen-coach$",
+    "^snag:disclosure:v1$",
+];
+/** The WIDGET's two (§2.7). Neither carries a credential, and no cookie authenticates the widget API — it runs on somebody else's origin. */
+export const COOKIE = {
+    off: "snag_off",
+    on: "snag_on",
+};
+/** The dashboard's session + CSRF pair (05 §4.7) — first-party, on the server's own origin, owner audience. */
+export const DASHBOARD_COOKIE = {
+    session: "snag_session",
+    csrf: "snag_csrf",
+};
+/** 05 §4.7 names these two constants directly; both spellings resolve to the same string. */
+export const DASHBOARD_SESSION_COOKIE = DASHBOARD_COOKIE.session;
+export const DASHBOARD_CSRF_COOKIE = DASHBOARD_COOKIE.csrf;
+/** Built widget chunks (§2.8). Preact lives only in `panels`. */
+export const ARTIFACT = {
+    stub: "snag.js",
+    runtime: "snag.runtime.js",
+    panels: "snag.panels.js",
+    crumbs: "snag.crumbs.js",
+    capture: "snag.capture.js",
+    screenshot: "snag.screenshot.js",
+    anchorExt: "snag.anchor-ext.js",
+    anchorFuzzy: "snag.anchor-fuzzy.js",
+    dock: "snag.dock.js",
+    text: "snag.text.js",
+};
+/** Wire-form entity id prefixes (§2.10). Not brand-derived. */
+export const ID_PREFIX = {
+    project: "prj_",
+    thread: "thr_",
+    comment: "cmt_",
+    reviewer: "rev_",
+    attachment: "att_",
+    link: "lnk_",
+    round: "rnd_",
+};
+/** Credential literals (07 §8.2). Brand-DERIVED, and deliberately not the three-letter row shape: the literal is what gets registered with secret scanning, so a token pasted into a public repo is reported. */
+export const CREDENTIAL_PREFIX = {
+    mcp: "snagmcp_",
+};
+/** CustomEvents dispatched on document (§2.11). */
+export const DOM_EVENT = {
+    ready: "snagset:ready",
+    activate: "snagset:activate",
+    deactivate: "snagset:deactivate",
+    threadCreated: "snagset:thread-created",
+    threadResolved: "snagset:thread-resolved",
+};
+/** Request/response header names inside §2.1's prefix (05 §2.3). */
+export const HTTP_HEADER = {
+    client: "x-snagset-client",
+    schema: "x-snagset-schema",
+    idempotencyKey: "x-snagset-idempotency-key",
+    identity: "x-snagset-identity",
+    csrf: "x-snagset-csrf",
+    attachmentKind: "x-snagset-attachment-kind",
+    attachmentWidth: "x-snagset-attachment-width",
+    attachmentHeight: "x-snagset-attachment-height",
+    server: "x-snagset-server",
+    minClient: "x-snagset-min-client",
+    time: "x-snagset-time",
+    configVersion: "x-snagset-config-version",
+    idempotentReplay: "x-snagset-idempotent-replay",
+    requestId: "x-snagset-request-id",
+};
+/** Host-authored `<meta name>` keys we READ and never mint (§2.11). 03 §5.3: `route` is the only one. */
+export const META_NAME = {
+    route: "snagset:route",
+};
+/** Keys for Symbol.for() patch bookkeeping (§2.11). */
+export const SYMBOL_KEY = {
+    original: "snagset.original",
+    wrapped: "snagset.wrapped",
+    instance: "snagset.instance",
+};

package/dist/view.js

@@ -0,0 +1,174 @@
+import { fenced, DATA_BOUNDARY } from "./vendor/adapters/outbound/fence.js";
+import { sanitise, trusted } from "./vendor/adapters/outbound/sanitise.js";
+/**
+ * The view an agent sees — 07 §8.3, and the four §8.6 mitigations that live in
+ * a projection rather than in a policy.
+ *
+ * `ThreadSummary` and `ThreadDetail` are projections of
+ * `OutboundThreadView<'plain'>`, *"not of `Thread`. That is deliberate and load
+ * bearing: the MCP server gets the same sanitiser, the same clamps and the same
+ * fixture corpus as every provider."* So every string that a reviewer could
+ * have typed goes through `@snagset/adapters` on the way to a model, and this
+ * package holds no scrubbing logic of its own.
+ *
+ * ── WHAT IS DELIBERATELY MISSING ──
+ *
+ * §8.3, on orphans, states the general rule this file follows everywhere:
+ * *"a payload that promises fields the release does not have is worse than a
+ * short one."* `OutboundThreadView` lists `branch`, `labels`, `assigneeName`,
+ * `viewport`, `browser`, `platform` and `prefersColorScheme`; the L1 API does
+ * not serve most of them yet. They are absent here rather than emitted empty,
+ * because an agent that reads `labels: []` concludes the thread has no labels.
+ *
+ * ── THE FENCE ──
+ *
+ * Every Class R and Class P string is WRAPPED, not merely escaped:
+ * `<untrusted-content kind="…">…</untrusted-content>` (§8.6 mitigation 3).
+ * `author` is fenced too — the review found it emitted bare while §8.6 already
+ * listed `Reviewer.name` among the untrusted strings reaching the model, *"the
+ * kind of contradiction that survives because the two facts sat four pages
+ * apart."*
+ */
+/** 00 §5. The third place the token becomes irreversible (§8.3). */
+export const SCHEMA_VERSION = "snagset.v1";
+/** §8.3's clamp: comments capped at 50, oldest first. */
+export const MAX_COMMENTS = 50;
+/** §8.3: `limit` ≤ 50 on `list_threads`. */
+export const MAX_THREADS = 50;
+/**
+ * Clamps on the fenced strings themselves.
+ *
+ * A comment body is capped at 10 000 characters server-side, and fifty of them
+ * is half a megabyte of a model's context spent on one tool call. 4 000 is the
+ * length at which a snag's text stops being a snag and starts being a document
+ * somebody pasted *(calibration, like every number in §8)*.
+ */
+const CLAMP = { body: 4_000, name: 200, label: 400, selector: 600 };
+/**
+ * The anchor's human-readable half, fenced.
+ *
+ * `sourceRef` is NOT read here and that is §2.6.3: source locations never leave
+ * the machine. It is the one field the local MCP server *may* read — but only
+ * in `map_thread_to_source`, where it never leaves either.
+ */
+function element(anchor) {
+    if (!anchor || typeof anchor !== "object")
+        return {};
+    const out = {};
+    const el = (anchor["element"] ?? anchor);
+    const put = (key, kind, max) => {
+        const v = el[key];
+        if (typeof v === "string" && v)
+            out[key] = fenced(kind, v, max);
+    };
+    put("role", "label", CLAMP.label);
+    put("accessibleName", "label", CLAMP.label);
+    put("testId", "label", CLAMP.label);
+    put("selector", "selector", CLAMP.selector);
+    return out;
+}
+/** `Thread` → what `list_threads` returns per row. */
+export function summary(t) {
+    return {
+        id: t.id,
+        key: t.key,
+        status: t.status,
+        anchorState: t.anchorState ?? "unknown",
+        // Class S — ids, enums and timestamps we minted. `trusted()` is greppable
+        // on purpose: the review question is "is this genuinely ours?" rather than
+        // "what does this do?".
+        createdAt: trusted(t.createdAt),
+        updatedAt: trusted(t.updatedAt),
+        ...(t.environment ? { environment: t.environment } : {}),
+        ...(t.round !== undefined ? { round: t.round } : {}),
+        ...(t.route ? { route: fenced("label", t.route, CLAMP.label) } : {}),
+        commentCount: t.commentCount ?? 0,
+        ...(t.createdBy?.name ? { author: fenced("name", t.createdBy.name, CLAMP.name) } : {}),
+        // The first comment IS the snag (05 §6.2 writes them in one transaction),
+        // so a summary without it is a list of keys. Clamped harder than the
+        // detail's: this one appears fifty times in a single result.
+        ...(t.comments?.[0] ? { firstComment: fenced("body", t.comments[0].body, 500) } : {}),
+        element: element(t.anchor),
+    };
+}
+/** `get_thread` — the same row plus its conversation. */
+export function detail(t) {
+    const comments = (t.comments ?? []).slice(0, MAX_COMMENTS).map((c) => ({
+        id: c.id,
+        createdAt: trusted(c.createdAt),
+        author: fenced("name", c.author?.name ?? "Someone", CLAMP.name),
+        authorKind: c.author?.kind ?? "guest",
+        body: fenced("body", c.body ?? "", CLAMP.body),
+    }));
+    return {
+        ...summary(t),
+        // Replaced rather than merged: the summary's excerpt would be a second,
+        // shorter copy of `comments[0]` sitting beside the real thing.
+        firstComment: undefined,
+        comments,
+        ...(t.comments && t.comments.length > MAX_COMMENTS
+            ? {
+                // Said out loud. §8's own rule about silent caps: an agent that reads
+                // 50 of 200 comments and is not told will answer as if it read them
+                // all.
+                commentsTruncated: `showing the oldest ${MAX_COMMENTS} of ${t.comments.length} comments`,
+            }
+            : {}),
+        ...(t.attachments?.length
+            ? {
+                attachments: t.attachments.map((a) => ({
+                    id: a.id,
+                    kind: a.kind,
+                    // A path on the instance, never a bucket URL. There is no tool that
+                    // fetches it: §8.6 mitigation 4 — no arbitrary-fetch tool.
+                    url: a.url,
+                    ...(a.width ? { width: a.width, height: a.height } : {}),
+                })),
+            }
+            : {}),
+    };
+}
+/**
+ * `get_thread_context` — `context:read`, the personal-data-bearing half.
+ *
+ * §8.3: `CaptureContext` minus `sourceRef`, plus breadcrumbs and
+ * `capture.reasons[]` / `capture.blindSpots[]`. Breadcrumb messages are Class R
+ * — a console log on somebody else's site is text an attacker can write — so
+ * every one is fenced.
+ */
+export function context(t) {
+    const ctx = (t.context ?? {});
+    const crumbs = Array.isArray(ctx["breadcrumbs"]) ? ctx["breadcrumbs"] : [];
+    const { sourceRef: _dropped, ...rest } = ctx;
+    return {
+        // Everything except the breadcrumbs, which are re-emitted fenced below.
+        ...Object.fromEntries(Object.entries(rest).filter(([k]) => k !== "breadcrumbs")),
+        breadcrumbs: crumbs.slice(-50).map((b) => ({
+            t: b["t"],
+            type: b["type"],
+            ...(b["level"] ? { level: b["level"] } : {}),
+            message: fenced("breadcrumb", String(b["message"] ?? ""), CLAMP.body),
+        })),
+    };
+}
+/**
+ * Wrap a result for the model — mitigation 1's preamble, then the data.
+ *
+ * Text and not a JSON content block, deliberately: the preamble has to be the
+ * FIRST thing read, and a structured result puts the boundary statement
+ * somewhere inside an object where it reads as one more field.
+ */
+export function envelope(payload) {
+    return `${DATA_BOUNDARY}\n\n${JSON.stringify({ schemaVersion: SCHEMA_VERSION, ...payload }, null, 2)}`;
+}
+/**
+ * A tool's failure, in words an agent can relay.
+ *
+ * Sanitised, because the string may carry a server message that quoted the
+ * caller's own input back — an error path is exactly where an unfenced string
+ * gets emitted by accident.
+ */
+export function failure(message) {
+    return `${DATA_BOUNDARY}\n\n${sanitise(message, "plain", { max: 1_000 })}`;
+}
+//# sourceMappingURL=view.js.map

package/dist/view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../src/view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAE3C,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,4CAA4C;AAC5C,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAW,CAAC;AA6B7E;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,MAAkD;IACjE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAA4B,CAAC;IACpE,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAA0B,EAAE,GAAW,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC,CAAC;IACF,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,GAAG,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,OAAO,CAAC,CAAa;IACnC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,SAAS;QACvC,0EAA0E;QAC1E,2EAA2E;QAC3E,wBAAwB;QACxB,SAAS,EAAE,OAAO,CAAU,CAAC,CAAC,SAAS,CAAC;QACxC,SAAS,EAAE,OAAO,CAAU,CAAC,CAAC,SAAS,CAAC;QACxC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC;QACjC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,0EAA0E;QAC1E,qEAAqE;QACrE,6DAA6D;QAC7D,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,MAAM,CAAC,CAAa;IAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,OAAO,CAAU,CAAC,CAAC,SAAS,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC;QAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,OAAO;QACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;KAC/C,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,GAAG,OAAO,CAAC,CAAC,CAAC;QACb,wEAAwE;QACxE,+DAA+D;QAC/D,YAAY,EAAE,SAAS;QACvB,QAAQ;QACR,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY;YAChD,CAAC,CAAC;gBACE,sEAAsE;gBACtE,oEAAoE;gBACpE,OAAO;gBACP,iBAAiB,EAAE,sBAAsB,YAAY,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,WAAW;aACzF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM;YACvB,CAAC,CAAC;gBACE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACrC,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,oEAAoE;oBACpE,2DAA2D;oBAC3D,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzD,CAAC,CAAC;aACJ;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,CAAa;IACnC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,aAAa,CAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,GAA8B,CAAC;IACxE,OAAO;QACL,wEAAwE;QACxE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;QAChF,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;SACtE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,OAAO,GAAG,aAAa,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,GAAI,OAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACrH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,GAAG,aAAa,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@snagset/mcp",
+  "version": "0.0.2",
+  "private": false,
+  "type": "module",
+  "description": "Read your Snagset review threads from a coding agent \u2014 the pin, the element, the route and the console with each one.",
+  "license": "MIT",
+  "bin": {
+    "snagset-mcp": "./dist/bin.js"
+  },
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "node --experimental-strip-types --test test/*.test.ts",
+    "build": "node scripts/build.mjs",
+    "prepack": "node scripts/build.mjs"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.30.0",
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@snagset/adapters": "workspace:*",
+    "@snagset/tsconfig": "workspace:*",
+    "@snagset/types": "workspace:*",
+    "@types/node": "26.2.0",
+    "typescript": "^5.7.3"
+  },
+  "exports": {
+    ".": "./dist/server.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}