@unbrained/pm-cli 2026.10.4 → 2026.10.5

package/dist/mcp/http-server.js

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ad8ab3b3-7b07-565a-be09-2d1c2ba6133d")}catch(e2){}})();import{createServer}from"node:http";import{PM_MCP_ERROR_CODES,PmMcpProtocolError}from"../sdk/mcp/protocol.js";import{PmMcpAuthorizationError,authorizeMcpHttpRequest,buildMcpProtectedResourceMetadata,createMcpStaticBearerVerifier}from"../sdk/mcp/authorization.js";import{validateMcpHttpRequestHeaders}from"../sdk/mcp/transport.js";import{buildMcpToolCallErrorResult,closeMcpSubscription,handleRequest,isInvokedAsMcpMainModule,openMcpSubscription,resolveMcpToolSchemaForRequest}from"./server.js";const DEFAULT_MAXIMUM_BODY_BYTES=1024*1024;const DEFAULT_KEEP_ALIVE_MS=15e3;const PM_MCP_HTTP_RUNTIMES=new WeakMap;function writePmMcpSseEvent(response,payload){return new Promise((resolve,reject)=>{let settled=false;const cleanup=()=>{response.off("drain",onDrain);response.off("close",onClose)};const onDrain=()=>{settled=true;cleanup();resolve()};const onClose=()=>{settled=true;cleanup();reject(new Error("MCP response stream closed during backpressure"))};response.once("drain",onDrain);response.once("close",onClose);try{if(response.write(`data: ${JSON.stringify(payload)}
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="255ae11e-4d0f-5bcb-96a4-d769506a25c1")}catch{}})();import{createServer}from"node:http";import{PM_MCP_ERROR_CODES,PmMcpProtocolError}from"../sdk/mcp/protocol.js";import{PmMcpAuthorizationError,authorizeMcpHttpRequest,buildMcpProtectedResourceMetadata,createMcpStaticBearerVerifier}from"../sdk/mcp/authorization.js";import{validateMcpHttpRequestHeaders}from"../sdk/mcp/transport.js";import{buildMcpToolCallErrorResult,closeMcpSubscription,handleRequest,isInvokedAsMcpMainModule,openMcpSubscription,resolveMcpToolSchemaForRequest}from"./server.js";const DEFAULT_MAXIMUM_BODY_BYTES=1024*1024,DEFAULT_KEEP_ALIVE_MS=15e3,PM_MCP_HTTP_RUNTIMES=new WeakMap;function writePmMcpSseEvent(response,payload){return new Promise((resolve,reject)=>{let settled=!1;const cleanup=()=>{response.off("drain",onDrain),response.off("close",onClose)},onDrain=()=>{settled=!0,cleanup(),resolve()},onClose=()=>{settled=!0,cleanup(),reject(new Error("MCP response stream closed during backpressure"))};response.once("drain",onDrain),response.once("close",onClose);try{response.write(`data: ${JSON.stringify(payload)}
 
-`)&&!settled){settled=true;cleanup();resolve()}}catch(error){cleanup();reject(error)}})}function writeJson(response,status,payload,headers={}){response.writeHead(status,{"Cache-Control":"no-store","Content-Type":"application/json",...headers});response.end(`${JSON.stringify(payload)}
-`)}function writeJsonRpcError(response,id,error){const authorizationError=error instanceof PmMcpAuthorizationError?error:void 0;const protocolError=error instanceof PmMcpProtocolError?error:void 0;const code=protocolError?.code??-32603;const clientErrorCodes=new Set([-32700,-32600,PM_MCP_ERROR_CODES.headerMismatch,PM_MCP_ERROR_CODES.unsupportedProtocolVersion,PM_MCP_ERROR_CODES.invalidParams]);const status=authorizationError?.httpStatus??(code===-32601?404:clientErrorCodes.has(code)?400:500);writeJson(response,status,{jsonrpc:"2.0",id:id??null,error:{code,message:error instanceof Error?error.message:"Internal MCP error",...protocolError?{data:protocolError.data}:{}}},authorizationError?.challenge?{"WWW-Authenticate":authorizationError.challenge}:{})}function finishCommittedMcpResponse(response){if(!response.headersSent&&!response.writableEnded&&!response.destroyed){return false}if(!response.writableEnded&&!response.destroyed)response.end();return true}function writeMcpHttpDispatchError(response,rpcRequest,error){if(finishCommittedMcpResponse(response))return;const toolError=rpcRequest?buildMcpToolCallErrorResult(rpcRequest,error):void 0;if(toolError&&rpcRequest){writeJson(response,200,{jsonrpc:"2.0",id:rpcRequest.id??null,result:toolError});return}writeJsonRpcError(response,rpcRequest?.id,error)}function destroyFailedMcpHttpResponse(response,error){response.destroy(new Error("Unhandled MCP HTTP request failure",{cause:error}))}async function readRequestBody(request,maximumBytes){const chunks=[];let observed=0;for await(const chunk of request){const buffer=Buffer.from(chunk);observed+=buffer.length;if(observed>maximumBytes){throw new PmMcpProtocolError("MCP HTTP request body exceeds the configured limit",PM_MCP_ERROR_CODES.invalidParams,{maximumBytes})}chunks.push(buffer)}return Buffer.concat(chunks).toString("utf8")}function parseJsonRpcRequest(source){let value;try{value=JSON.parse(source)}catch{throw new PmMcpProtocolError("Invalid JSON-RPC request body",-32700)}if(typeof value!=="object"||value===null||Array.isArray(value)||"jsonrpc"in value&&value.jsonrpc!=="2.0"||"method"in value&&typeof value.method!=="string"){throw new PmMcpProtocolError("Invalid JSON-RPC request",-32600)}return value}function protectedResourcePaths(endpointPath){return new Set(["/.well-known/oauth-protected-resource",`/.well-known/oauth-protected-resource${endpointPath}`])}function routeMcpHttpBoundary(request,response,requestUrl,runtime){if(runtime.options.protectedResourceMetadata&&request.method==="GET"&&protectedResourcePaths(runtime.endpointPath).has(requestUrl.pathname)){writeJson(response,200,{...runtime.options.protectedResourceMetadata});return true}if(requestUrl.pathname!==runtime.endpointPath){writeJson(response,404,{error:"Not found"});return true}if(request.method!=="POST"){response.setHeader("Allow","POST");writeJson(response,405,{error:"Method not allowed"});return true}const origin=request.headers.origin;if(origin!==void 0&&!runtime.allowedOrigins.has(origin)){writeJson(response,403,{error:"Origin is not allowed"});return true}const accept=request.headers.accept;const contentType=request.headers["content-type"];if(typeof accept!=="string"||!accept.includes("application/json")||!accept.includes("text/event-stream")||typeof contentType!=="string"||!contentType.startsWith("application/json")){writeJson(response,406,{error:"MCP requires JSON and SSE content negotiation"});return true}return false}async function openHttpSubscription(input){if(typeof input.request.id!=="string"&&typeof input.request.id!=="number"){throw new PmMcpProtocolError("subscriptions/listen requires a JSON-RPC id",PM_MCP_ERROR_CODES.invalidParams)}const subscriptionId=input.request.id;const subscriptionKey=Symbol("pm-mcp-http-subscription");const active={id:subscriptionId,key:subscriptionKey,response:input.response};let disconnected=input.response.destroyed||input.response.writableEnded;let subscriptionOpened=false;const closeActiveSubscription=()=>{disconnected=true;if(active.timer)clearInterval(active.timer);input.runtime.activeSubscriptions.delete(subscriptionKey);if(subscriptionOpened){closeMcpSubscription(subscriptionId,subscriptionKey)}};input.response.once("close",closeActiveSubscription);let responseStarted=false;try{await openMcpSubscription({request:input.request,key:subscriptionKey,sink:notification=>{if(input.response.destroyed||input.response.writableEnded){throw new Error("MCP response stream closed before acknowledgment")}if(!responseStarted){responseStarted=true;input.response.setHeader("Cache-Control","no-cache, no-store");input.response.setHeader("Connection","keep-alive");input.response.setHeader("Content-Type","text/event-stream");input.response.setHeader("X-Accel-Buffering","no")}return writePmMcpSseEvent(input.response,notification)}});subscriptionOpened=true}catch(error){input.response.off("close",closeActiveSubscription);throw error}if(disconnected||input.response.destroyed||input.response.writableEnded){closeActiveSubscription();return}if(input.runtime.keepAliveMs>0){active.timer=setInterval(()=>input.response.write(":\r\n\r\n"),input.runtime.keepAliveMs);active.timer.unref()}input.runtime.activeSubscriptions.set(subscriptionKey,active)}async function dispatchMcpHttpRpc(input){let rpcRequest;try{if(input.runtime.options.authorization){await authorizeMcpHttpRequest({headers:input.request.headers,requestUrl:input.requestUrl.href,policy:input.runtime.options.authorization})}rpcRequest=parseJsonRpcRequest(await readRequestBody(input.request,input.runtime.maximumBodyBytes));validateMcpHttpRequestHeaders({headers:input.request.headers,request:rpcRequest,toolSchema:await resolveMcpToolSchemaForRequest(rpcRequest)});if(rpcRequest.method==="subscriptions/listen"){await openHttpSubscription({request:rpcRequest,response:input.response,runtime:input.runtime});return}const result=await(input.runtime.options.requestHandler??handleRequest)(rpcRequest);if(!Object.prototype.hasOwnProperty.call(rpcRequest,"id")){input.response.writeHead(202);input.response.end();return}writeJson(input.response,200,{jsonrpc:"2.0",id:rpcRequest.id??null,result:result??{}})}catch(error){writeMcpHttpDispatchError(input.response,rpcRequest,error)}}async function handleMcpHttpRequest(request,response,runtime){const requestUrl=new URL(request.url,"http://localhost");if(routeMcpHttpBoundary(request,response,requestUrl,runtime))return;await dispatchMcpHttpRpc({request,response,requestUrl,runtime})}function createPmMcpHttpServer(options={}){const runtime={activeSubscriptions:new Map,allowedOrigins:new Set(options.allowedOrigins??[]),endpointPath:options.endpointPath??"/mcp",keepAliveMs:options.keepAliveMs??DEFAULT_KEEP_ALIVE_MS,maximumBodyBytes:options.maximumBodyBytes??DEFAULT_MAXIMUM_BODY_BYTES,options};const server=createServer((request,response)=>{void handleMcpHttpRequest(request,response,runtime).catch(destroyFailedMcpHttpResponse.bind(void 0,response))});PM_MCP_HTTP_RUNTIMES.set(server,runtime);server.on("close",()=>{closeActiveHttpSubscriptions(runtime);PM_MCP_HTTP_RUNTIMES.delete(server)});return server}function closeActiveHttpSubscriptions(runtime){for(const[key,active]of runtime.activeSubscriptions){if(active.timer)clearInterval(active.timer);const result=closeMcpSubscription(active.id,key);if(result){active.response.write(`data: ${JSON.stringify({jsonrpc:"2.0",id:active.id,result})}
+`)&&!settled&&(settled=!0,cleanup(),resolve())}catch(error){cleanup(),reject(error)}})}function writeJson(response,status,payload,headers={}){response.writeHead(status,{"Cache-Control":"no-store","Content-Type":"application/json",...headers}),response.end(`${JSON.stringify(payload)}
+`)}function writeJsonRpcError(response,id,error){const authorizationError=error instanceof PmMcpAuthorizationError?error:void 0,protocolError=error instanceof PmMcpProtocolError?error:void 0,code=protocolError?.code??-32603,clientErrorCodes=new Set([-32700,-32600,PM_MCP_ERROR_CODES.headerMismatch,PM_MCP_ERROR_CODES.unsupportedProtocolVersion,PM_MCP_ERROR_CODES.invalidParams]),status=authorizationError?.httpStatus??(code===-32601?404:clientErrorCodes.has(code)?400:500);writeJson(response,status,{jsonrpc:"2.0",id:id??null,error:{code,message:error instanceof Error?error.message:"Internal MCP error",...protocolError?{data:protocolError.data}:{}}},authorizationError?.challenge?{"WWW-Authenticate":authorizationError.challenge}:{})}function finishCommittedMcpResponse(response){return!response.headersSent&&!response.writableEnded&&!response.destroyed?!1:(!response.writableEnded&&!response.destroyed&&response.end(),!0)}function writeMcpHttpDispatchError(response,rpcRequest,error){if(finishCommittedMcpResponse(response))return;const toolError=rpcRequest?buildMcpToolCallErrorResult(rpcRequest,error):void 0;if(toolError&&rpcRequest){writeJson(response,200,{jsonrpc:"2.0",id:rpcRequest.id??null,result:toolError});return}writeJsonRpcError(response,rpcRequest?.id,error)}function destroyFailedMcpHttpResponse(response,error){response.destroy(new Error("Unhandled MCP HTTP request failure",{cause:error}))}async function readRequestBody(request,maximumBytes){const chunks=[];let observed=0;for await(const chunk of request){const buffer=Buffer.from(chunk);if(observed+=buffer.length,observed>maximumBytes)throw new PmMcpProtocolError("MCP HTTP request body exceeds the configured limit",PM_MCP_ERROR_CODES.invalidParams,{maximumBytes});chunks.push(buffer)}return Buffer.concat(chunks).toString("utf8")}function parseJsonRpcRequest(source){let value;try{value=JSON.parse(source)}catch{throw new PmMcpProtocolError("Invalid JSON-RPC request body",-32700)}if(typeof value!="object"||value===null||Array.isArray(value)||"jsonrpc"in value&&value.jsonrpc!=="2.0"||"method"in value&&typeof value.method!="string")throw new PmMcpProtocolError("Invalid JSON-RPC request",-32600);return value}function protectedResourcePaths(endpointPath){return new Set(["/.well-known/oauth-protected-resource",`/.well-known/oauth-protected-resource${endpointPath}`])}function routeMcpHttpBoundary(request,response,requestUrl,runtime){if(runtime.options.protectedResourceMetadata&&request.method==="GET"&&protectedResourcePaths(runtime.endpointPath).has(requestUrl.pathname))return writeJson(response,200,{...runtime.options.protectedResourceMetadata}),!0;if(requestUrl.pathname!==runtime.endpointPath)return writeJson(response,404,{error:"Not found"}),!0;if(request.method!=="POST")return response.setHeader("Allow","POST"),writeJson(response,405,{error:"Method not allowed"}),!0;const origin=request.headers.origin;if(origin!==void 0&&!runtime.allowedOrigins.has(origin))return writeJson(response,403,{error:"Origin is not allowed"}),!0;const accept=request.headers.accept,contentType=request.headers["content-type"];return typeof accept!="string"||!accept.includes("application/json")||!accept.includes("text/event-stream")||typeof contentType!="string"||!contentType.startsWith("application/json")?(writeJson(response,406,{error:"MCP requires JSON and SSE content negotiation"}),!0):!1}async function openHttpSubscription(input){if(typeof input.request.id!="string"&&typeof input.request.id!="number")throw new PmMcpProtocolError("subscriptions/listen requires a JSON-RPC id",PM_MCP_ERROR_CODES.invalidParams);const subscriptionId=input.request.id,subscriptionKey=Symbol("pm-mcp-http-subscription"),active={id:subscriptionId,key:subscriptionKey,response:input.response};let disconnected=input.response.destroyed||input.response.writableEnded,subscriptionOpened=!1;const closeActiveSubscription=()=>{disconnected=!0,active.timer&&clearInterval(active.timer),input.runtime.activeSubscriptions.delete(subscriptionKey),subscriptionOpened&&closeMcpSubscription(subscriptionId,subscriptionKey)};input.response.once("close",closeActiveSubscription);let responseStarted=!1;try{await openMcpSubscription({request:input.request,key:subscriptionKey,sink:notification=>{if(input.response.destroyed||input.response.writableEnded)throw new Error("MCP response stream closed before acknowledgment");return responseStarted||(responseStarted=!0,input.response.setHeader("Cache-Control","no-cache, no-store"),input.response.setHeader("Connection","keep-alive"),input.response.setHeader("Content-Type","text/event-stream"),input.response.setHeader("X-Accel-Buffering","no")),writePmMcpSseEvent(input.response,notification)}}),subscriptionOpened=!0}catch(error){throw input.response.off("close",closeActiveSubscription),error}if(disconnected||input.response.destroyed||input.response.writableEnded){closeActiveSubscription();return}input.runtime.keepAliveMs>0&&(active.timer=setInterval(()=>input.response.write(`:\r
+\r
+`),input.runtime.keepAliveMs),active.timer.unref()),input.runtime.activeSubscriptions.set(subscriptionKey,active)}async function dispatchMcpHttpRpc(input){let rpcRequest;try{if(input.runtime.options.authorization&&await authorizeMcpHttpRequest({headers:input.request.headers,requestUrl:input.requestUrl.href,policy:input.runtime.options.authorization}),rpcRequest=parseJsonRpcRequest(await readRequestBody(input.request,input.runtime.maximumBodyBytes)),validateMcpHttpRequestHeaders({headers:input.request.headers,request:rpcRequest,toolSchema:await resolveMcpToolSchemaForRequest(rpcRequest)}),rpcRequest.method==="subscriptions/listen"){await openHttpSubscription({request:rpcRequest,response:input.response,runtime:input.runtime});return}const result=await(input.runtime.options.requestHandler??handleRequest)(rpcRequest);if(!Object.prototype.hasOwnProperty.call(rpcRequest,"id")){input.response.writeHead(202),input.response.end();return}writeJson(input.response,200,{jsonrpc:"2.0",id:rpcRequest.id??null,result:result??{}})}catch(error){writeMcpHttpDispatchError(input.response,rpcRequest,error)}}async function handleMcpHttpRequest(request,response,runtime){const requestUrl=new URL(request.url,"http://localhost");routeMcpHttpBoundary(request,response,requestUrl,runtime)||await dispatchMcpHttpRpc({request,response,requestUrl,runtime})}function createPmMcpHttpServer(options={}){const runtime={activeSubscriptions:new Map,allowedOrigins:new Set(options.allowedOrigins??[]),endpointPath:options.endpointPath??"/mcp",keepAliveMs:options.keepAliveMs??DEFAULT_KEEP_ALIVE_MS,maximumBodyBytes:options.maximumBodyBytes??DEFAULT_MAXIMUM_BODY_BYTES,options},server=createServer((request,response)=>{handleMcpHttpRequest(request,response,runtime).catch(destroyFailedMcpHttpResponse.bind(void 0,response))});return PM_MCP_HTTP_RUNTIMES.set(server,runtime),server.on("close",()=>{closeActiveHttpSubscriptions(runtime),PM_MCP_HTTP_RUNTIMES.delete(server)}),server}function closeActiveHttpSubscriptions(runtime){for(const[key,active]of runtime.activeSubscriptions){active.timer&&clearInterval(active.timer);const result=closeMcpSubscription(active.id,key);result&&active.response.write(`data: ${JSON.stringify({jsonrpc:"2.0",id:active.id,result})}
 
-`)}active.response.end()}runtime.activeSubscriptions.clear()}async function closePmMcpHttpServer(server){const runtime=PM_MCP_HTTP_RUNTIMES.get(server);if(runtime)closeActiveHttpSubscriptions(runtime);await new Promise((resolve,reject)=>{server.close(error=>error?reject(error):resolve())});server.closeAllConnections()}async function startPmMcpHttpServer(options={}){const server=createPmMcpHttpServer(options);const address=resolvePmMcpHttpListenAddress(options);await new Promise((resolve,reject)=>{server.once("error",reject);server.listen(address.port,address.host,()=>{server.off("error",reject);resolve()})});return server}function resolvePmMcpHttpListenAddress(options={}){return{host:options.host??"127.0.0.1",port:options.port??3e3}}function readMcpHttpEnvironment(environment){const configuredPort=environment.PM_MCP_HTTP_PORT?.trim();const port=Number(configuredPort||"3000");if(!Number.isInteger(port)||port<0||port>65535){throw new Error("PM_MCP_HTTP_PORT must be an integer from 0 through 65535")}return{host:environment.PM_MCP_HTTP_HOST?.trim()||"127.0.0.1",port,allowedOrigins:(environment.PM_MCP_HTTP_ALLOWED_ORIGINS??"").split(",").map(entry=>entry.trim()).filter(Boolean),token:environment.PM_MCP_HTTP_BEARER_TOKEN?.trim()||void 0,issuer:environment.PM_MCP_HTTP_AUTH_ISSUER?.trim()||void 0,resource:environment.PM_MCP_HTTP_RESOURCE?.trim()||void 0,scopes:(environment.PM_MCP_HTTP_SCOPES??"pm:read pm:write").split(/\s+/u).filter(Boolean)}}function buildMcpHttpAuthorizationOptions(environment){const metadata=buildMcpProtectedResourceMetadata({resource:environment.resource,authorizationServers:[environment.issuer],scopes:environment.scopes});const acceptedIssuer=environment.issuer;return{protectedResourceMetadata:metadata,authorization:{issuer:acceptedIssuer,resource:metadata.resource,requiredScopes:environment.scopes,resourceMetadataUrl:new URL("/.well-known/oauth-protected-resource",metadata.resource).href,verifyAccessToken:createMcpStaticBearerVerifier({token:environment.token,claims:{principal:"configured-remote-client",issuer:acceptedIssuer,audience:metadata.resource,scopes:environment.scopes}})}}}function hasCompleteMcpHttpAuthorization(environment){return Boolean(environment.token&&environment.issuer&&environment.resource)}function resolvePmMcpHttpServerOptionsFromEnvironment(processEnvironment=process.env){const environment=readMcpHttpEnvironment(processEnvironment);const hasAuthorization=hasCompleteMcpHttpAuthorization(environment);if(environment.host!=="127.0.0.1"&&environment.host!=="localhost"&&!hasAuthorization){throw new Error("Non-loopback MCP HTTP requires PM_MCP_HTTP_BEARER_TOKEN, PM_MCP_HTTP_AUTH_ISSUER, and PM_MCP_HTTP_RESOURCE")}const base={host:environment.host,port:environment.port,allowedOrigins:environment.allowedOrigins};return hasAuthorization?{...base,...buildMcpHttpAuthorizationOptions({issuer:environment.issuer,resource:environment.resource,token:environment.token,scopes:environment.scopes})}:base}const _testOnly={activeSubscriptionKey:server=>PM_MCP_HTTP_RUNTIMES.get(server).activeSubscriptions.keys().next().value,openHttpSubscription:(server,request,response)=>openHttpSubscription({request,response,runtime:PM_MCP_HTTP_RUNTIMES.get(server)}),writeMcpHttpDispatchError,destroyFailedMcpHttpResponse};if(isInvokedAsMcpMainModule(process.argv[1],import.meta.url)){startPmMcpHttpServer(resolvePmMcpHttpServerOptionsFromEnvironment()).catch(error=>{console.error(error instanceof Error?error.message:String(error));process.exit(1)})}export{_testOnly,closePmMcpHttpServer,createPmMcpHttpServer,resolvePmMcpHttpListenAddress,resolvePmMcpHttpServerOptionsFromEnvironment,startPmMcpHttpServer,writePmMcpSseEvent};
+`),active.response.end()}runtime.activeSubscriptions.clear()}async function closePmMcpHttpServer(server){const runtime=PM_MCP_HTTP_RUNTIMES.get(server);runtime&&closeActiveHttpSubscriptions(runtime),await new Promise((resolve,reject)=>{server.close(error=>error?reject(error):resolve())}),server.closeAllConnections()}async function startPmMcpHttpServer(options={}){const server=createPmMcpHttpServer(options),address=resolvePmMcpHttpListenAddress(options);return await new Promise((resolve,reject)=>{server.once("error",reject),server.listen(address.port,address.host,()=>{server.off("error",reject),resolve()})}),server}function resolvePmMcpHttpListenAddress(options={}){return{host:options.host??"127.0.0.1",port:options.port??3e3}}function readMcpHttpEnvironment(environment){const configuredPort=environment.PM_MCP_HTTP_PORT?.trim(),port=Number(configuredPort||"3000");if(!Number.isInteger(port)||port<0||port>65535)throw new Error("PM_MCP_HTTP_PORT must be an integer from 0 through 65535");return{host:environment.PM_MCP_HTTP_HOST?.trim()||"127.0.0.1",port,allowedOrigins:(environment.PM_MCP_HTTP_ALLOWED_ORIGINS??"").split(",").map(entry=>entry.trim()).filter(Boolean),token:environment.PM_MCP_HTTP_BEARER_TOKEN?.trim()||void 0,issuer:environment.PM_MCP_HTTP_AUTH_ISSUER?.trim()||void 0,resource:environment.PM_MCP_HTTP_RESOURCE?.trim()||void 0,scopes:(environment.PM_MCP_HTTP_SCOPES??"pm:read pm:write").split(/\s+/u).filter(Boolean)}}function buildMcpHttpAuthorizationOptions(environment){const metadata=buildMcpProtectedResourceMetadata({resource:environment.resource,authorizationServers:[environment.issuer],scopes:environment.scopes}),acceptedIssuer=environment.issuer;return{protectedResourceMetadata:metadata,authorization:{issuer:acceptedIssuer,resource:metadata.resource,requiredScopes:environment.scopes,resourceMetadataUrl:new URL("/.well-known/oauth-protected-resource",metadata.resource).href,verifyAccessToken:createMcpStaticBearerVerifier({token:environment.token,claims:{principal:"configured-remote-client",issuer:acceptedIssuer,audience:metadata.resource,scopes:environment.scopes}})}}}function hasCompleteMcpHttpAuthorization(environment){return!!(environment.token&&environment.issuer&&environment.resource)}function resolvePmMcpHttpServerOptionsFromEnvironment(processEnvironment=process.env){const environment=readMcpHttpEnvironment(processEnvironment),hasAuthorization=hasCompleteMcpHttpAuthorization(environment);if(environment.host!=="127.0.0.1"&&environment.host!=="localhost"&&!hasAuthorization)throw new Error("Non-loopback MCP HTTP requires PM_MCP_HTTP_BEARER_TOKEN, PM_MCP_HTTP_AUTH_ISSUER, and PM_MCP_HTTP_RESOURCE");const base={host:environment.host,port:environment.port,allowedOrigins:environment.allowedOrigins};return hasAuthorization?{...base,...buildMcpHttpAuthorizationOptions({issuer:environment.issuer,resource:environment.resource,token:environment.token,scopes:environment.scopes})}:base}const _testOnly={activeSubscriptionKey:server=>PM_MCP_HTTP_RUNTIMES.get(server).activeSubscriptions.keys().next().value,openHttpSubscription:(server,request,response)=>openHttpSubscription({request,response,runtime:PM_MCP_HTTP_RUNTIMES.get(server)}),writeMcpHttpDispatchError,destroyFailedMcpHttpResponse};isInvokedAsMcpMainModule(process.argv[1],import.meta.url)&&startPmMcpHttpServer(resolvePmMcpHttpServerOptionsFromEnvironment()).catch(error=>{console.error(error instanceof Error?error.message:String(error)),process.exit(1)});export{_testOnly,closePmMcpHttpServer,createPmMcpHttpServer,resolvePmMcpHttpListenAddress,resolvePmMcpHttpServerOptionsFromEnvironment,startPmMcpHttpServer,writePmMcpSseEvent};
 //# sourceMappingURL=http-server.js.map

package/dist/mcp/legacy-adapter.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b2c28b4c-9997-5b7f-a24a-12116f19c004")}catch(e2){}})();import{PmCliError}from"../sdk/runtime-primitives.js";import{PM_MCP_ERROR_CODES,PM_MCP_LEGACY_PROTOCOL_VERSIONS,PM_MCP_PROTOCOL_VERSION,PmMcpProtocolError}from"../sdk/mcp/protocol.js";function resolveLegacyProtocolVersion(requestedVersion){if(requestedVersion===void 0||requestedVersion===null){return PM_MCP_LEGACY_PROTOCOL_VERSIONS[0]}const accepted=PM_MCP_LEGACY_PROTOCOL_VERSIONS.find(candidate=>candidate===requestedVersion);if(accepted)return accepted;throw new PmMcpProtocolError("Unsupported legacy MCP protocol version",PM_MCP_ERROR_CODES.unsupportedProtocolVersion,{supported:[...PM_MCP_LEGACY_PROTOCOL_VERSIONS],requested:requestedVersion,modern:PM_MCP_PROTOCOL_VERSION})}class LegacyMcpAdapter{#options;#clientInfo;constructor(options){this.#options=options}getClientInfo(){return this.#clientInfo?structuredClone(this.#clientInfo):void 0}initialize(params){const requestedVersion=params?.protocolVersion;const negotiatedVersion=resolveLegacyProtocolVersion(requestedVersion);this.#clientInfo=this.#options.parseClientInfo(params?.clientInfo);return{protocolVersion:negotiatedVersion,capabilities:structuredClone(this.#options.capabilities),serverInfo:{...this.#options.serverInfo},instructions:this.#options.instructions}}async dispatch(request){if(request.method==="ping")return{};if(request.method==="tools/list")return this.#options.listTools(request.params);if(request.method==="tools/call"){return this.#options.callTool(request.params,this.#clientInfo)}if(request.method==="resources/list")return this.#options.listResources();if(request.method==="resources/read"){return this.#options.readResource(request.params)}if(request.method==="prompts/list")return this.#options.listPrompts();if(request.method==="prompts/get")return this.#options.getPrompt(request.params);throw new PmCliError(`Unsupported MCP method: ${request.method??"(missing)"}`,64)}}export{LegacyMcpAdapter,resolveLegacyProtocolVersion};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f8ed8c47-1a2b-576d-bfe7-f3aec3c68385")}catch{}})();import{PmCliError}from"../sdk/runtime-primitives.js";import{PM_MCP_ERROR_CODES,PM_MCP_LEGACY_PROTOCOL_VERSIONS,PM_MCP_PROTOCOL_VERSION,PmMcpProtocolError}from"../sdk/mcp/protocol.js";function resolveLegacyProtocolVersion(requestedVersion){if(requestedVersion==null)return PM_MCP_LEGACY_PROTOCOL_VERSIONS[0];const accepted=PM_MCP_LEGACY_PROTOCOL_VERSIONS.find(candidate=>candidate===requestedVersion);if(accepted)return accepted;throw new PmMcpProtocolError("Unsupported legacy MCP protocol version",PM_MCP_ERROR_CODES.unsupportedProtocolVersion,{supported:[...PM_MCP_LEGACY_PROTOCOL_VERSIONS],requested:requestedVersion,modern:PM_MCP_PROTOCOL_VERSION})}class LegacyMcpAdapter{#options;#clientInfo;constructor(options){this.#options=options}getClientInfo(){return this.#clientInfo?structuredClone(this.#clientInfo):void 0}initialize(params){const requestedVersion=params?.protocolVersion,negotiatedVersion=resolveLegacyProtocolVersion(requestedVersion);return this.#clientInfo=this.#options.parseClientInfo(params?.clientInfo),{protocolVersion:negotiatedVersion,capabilities:structuredClone(this.#options.capabilities),serverInfo:{...this.#options.serverInfo},instructions:this.#options.instructions}}async dispatch(request){if(request.method==="ping")return{};if(request.method==="tools/list")return this.#options.listTools(request.params);if(request.method==="tools/call")return this.#options.callTool(request.params,this.#clientInfo);if(request.method==="resources/list")return this.#options.listResources();if(request.method==="resources/read")return this.#options.readResource(request.params);if(request.method==="prompts/list")return this.#options.listPrompts();if(request.method==="prompts/get")return this.#options.getPrompt(request.params);throw new PmCliError(`Unsupported MCP method: ${request.method??"(missing)"}`,64)}}export{LegacyMcpAdapter,resolveLegacyProtocolVersion};
 //# sourceMappingURL=legacy-adapter.js.map

package/dist/mcp/runtime-capabilities.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="60fd538d-49b0-5a65-a368-9117b86efa32")}catch(e2){}})();import{PM_MCP_TOOL_COMMAND_CONTRACTS,listPmMcpToolsForProfile}from"../sdk/agent-capability-contracts.js";import{getWorkspaceContracts}from"../sdk/runtime.js";import{PmCliError,getSettingsPath,pathExists,resolvePmRoot}from"../sdk/runtime-primitives.js";import{TOOLS}from"./tool-definitions.js";function workspaceFields(workspace){return workspace.fields??[]}function workspaceExtensionCommands(workspace){return workspace.extensionCommands??[]}function compactSchemaDescriptions(value,inProperties=false){if(Array.isArray(value)){return value.map(entry=>compactSchemaDescriptions(entry))}if(typeof value!=="object"||value===null){return value}return Object.fromEntries(Object.entries(value).filter(([key])=>inProperties||key!=="description").map(([key,entry])=>[key,compactSchemaDescriptions(entry,key==="properties")]))}function parseCustomToolAllowlist(value,availableNames){const requested=new Set((value??"").split(",").map(name=>name.trim()).filter(Boolean));if(requested.size===0){throw new PmCliError("PM_MCP_PROFILE=custom requires a non-empty PM_MCP_TOOLS allowlist.",64)}const unknown=[...requested].filter(name=>!availableNames.has(name));if(unknown.length>0){throw new PmCliError(`PM_MCP_TOOLS contains unknown tools: ${unknown.join(", ")}.`,64)}return requested}function resolveSelectedToolNames(availableTools,profile,environment){const availableNames=new Set(availableTools.map(tool=>tool.name));return profile==="custom"?parseCustomToolAllowlist(environment.PM_MCP_TOOLS,availableNames):new Set(listPmMcpToolsForProfile([...availableNames],profile))}function resolveMcpToolProfile(environment=process.env){const value=environment.PM_MCP_PROFILE?.trim().toLowerCase()||"core";if(value!=="core"&&value!=="standard"&&value!=="full"&&value!=="custom"){throw new PmCliError(`Invalid PM_MCP_PROFILE "${value}"; expected core, standard, full, or custom.`,64)}return value}function selectMcpExtensionActions(commands,profile,selectedNames){const profileRanks={core:0,standard:1,full:2};const tierRanks={core:0,standard:1,full:2,internal:3};return commands.filter(command=>profile==="custom"?selectedNames.has("pm_run"):tierRanks[command.tier]<=profileRanks[profile]).map(command=>command.action)}function fieldProperty(type,description){if(type==="array"){return{type:"array",items:{},description}}if(type==="object"){return{type:"object",additionalProperties:true,description}}const scalar={type:type==="string_array"?"string":type,description};return type==="string_array"?{type:"array",items:scalar,description}:scalar}function projectWorkspaceToolDefinition(tool,workspace,extensionActions,compact){const inputSchema=structuredClone(tool.inputSchema);const properties=inputSchema.properties;const command=PM_MCP_TOOL_COMMAND_CONTRACTS[tool.name];if(workspace&&command){if(properties.type)properties.type.enum=[...workspace.types];if(properties.status)properties.status.enum=[...workspace.statuses];for(const field of workspaceFields(workspace)){if(field.commands.includes(command)&&!Object.prototype.hasOwnProperty.call(properties,field.optionName)){properties[field.optionName]=fieldProperty(field.type,field.description)}}}if(tool.name==="pm_run"&&extensionActions.length>0){const action=properties.action;action.enum=[...new Set([...action.enum,...extensionActions])]}return{...tool,inputSchema:compact?compactSchemaDescriptions(inputSchema):inputSchema}}async function resolveMcpToolSurface(availableTools,args={},environment=process.env){const profile=resolveMcpToolProfile(environment);const selectedNames=resolveSelectedToolNames(availableTools,profile,environment);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const workspace=await pathExists(getSettingsPath(pmRoot))?await getWorkspaceContracts(pmRoot,{cwd}):null;const extensionActions=selectMcpExtensionActions(workspace?workspaceExtensionCommands(workspace):[],profile,selectedNames);if(extensionActions.length>0&&profile!=="custom"){selectedNames.add("pm_run")}const tools=availableTools.filter(tool=>selectedNames.has(tool.name)).map(tool=>projectWorkspaceToolDefinition(tool,workspace,extensionActions,profile==="core"));return{profile,tools,extensionActions}}async function resolveMcpToolAccess(availableTools,toolName,args={},environment=process.env){const profile=resolveMcpToolProfile(environment);const selectedNames=resolveSelectedToolNames(availableTools,profile,environment);if(selectedNames.has(toolName))return{profile,available:true};if(toolName!=="pm_run"||profile==="custom"){return{profile,available:false}}const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot))){return{profile,available:false}}const workspace=await getWorkspaceContracts(pmRoot,{cwd});return{profile,available:selectMcpExtensionActions(workspaceExtensionCommands(workspace),profile,selectedNames).length>0}}async function normalizeWorkspaceToolArguments(toolName,args){const command=PM_MCP_TOOL_COMMAND_CONTRACTS[toolName];if(command!=="create"&&command!=="update")return args;const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot)))return args;const workspace=await getWorkspaceContracts(pmRoot,{cwd});const options=typeof args.options==="object"&&args.options!==null&&!Array.isArray(args.options)?{...args.options}:{};const normalizedArgs={...args};const canonicalTool=TOOLS.find(tool=>tool.name===toolName);const canonicalProperties=new Set(Object.keys(canonicalTool.inputSchema.properties));let changed=false;for(const field of workspaceFields(workspace)){if(field.commands.includes(command)&&!canonicalProperties.has(field.optionName)&&Object.prototype.hasOwnProperty.call(args,field.optionName)){options[field.optionName]=args[field.optionName];delete normalizedArgs[field.optionName];changed=true}}return changed?{...normalizedArgs,options}:args}const _testOnlyMcpRuntimeCapabilities={workspaceExtensionCommands,workspaceFields};export{_testOnlyMcpRuntimeCapabilities,normalizeWorkspaceToolArguments,resolveMcpToolAccess,resolveMcpToolProfile,resolveMcpToolSurface,selectMcpExtensionActions};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5f3001ef-f7a5-54ca-8c7e-a63a2e70693f")}catch{}})();import{PM_MCP_TOOL_COMMAND_CONTRACTS,listPmMcpToolsForProfile}from"../sdk/agent-capability-contracts.js";import{getWorkspaceContracts}from"../sdk/runtime.js";import{PmCliError,getSettingsPath,pathExists,resolvePmRoot}from"../sdk/runtime-primitives.js";import{TOOLS}from"./tool-definitions.js";function workspaceFields(workspace){return workspace.fields??[]}function workspaceExtensionCommands(workspace){return workspace.extensionCommands??[]}function compactSchemaDescriptions(value,inProperties=!1){return Array.isArray(value)?value.map(entry=>compactSchemaDescriptions(entry)):typeof value!="object"||value===null?value:Object.fromEntries(Object.entries(value).filter(([key])=>inProperties||key!=="description").map(([key,entry])=>[key,compactSchemaDescriptions(entry,key==="properties")]))}function parseCustomToolAllowlist(value,availableNames){const requested=new Set((value??"").split(",").map(name=>name.trim()).filter(Boolean));if(requested.size===0)throw new PmCliError("PM_MCP_PROFILE=custom requires a non-empty PM_MCP_TOOLS allowlist.",64);const unknown=[...requested].filter(name=>!availableNames.has(name));if(unknown.length>0)throw new PmCliError(`PM_MCP_TOOLS contains unknown tools: ${unknown.join(", ")}.`,64);return requested}function resolveSelectedToolNames(availableTools,profile,environment){const availableNames=new Set(availableTools.map(tool=>tool.name));return profile==="custom"?parseCustomToolAllowlist(environment.PM_MCP_TOOLS,availableNames):new Set(listPmMcpToolsForProfile([...availableNames],profile))}function resolveMcpToolProfile(environment=process.env){const value=environment.PM_MCP_PROFILE?.trim().toLowerCase()||"core";if(value!=="core"&&value!=="standard"&&value!=="full"&&value!=="custom")throw new PmCliError(`Invalid PM_MCP_PROFILE "${value}"; expected core, standard, full, or custom.`,64);return value}function selectMcpExtensionActions(commands,profile,selectedNames){const profileRanks={core:0,standard:1,full:2},tierRanks={core:0,standard:1,full:2,internal:3};return commands.filter(command=>profile==="custom"?selectedNames.has("pm_run"):tierRanks[command.tier]<=profileRanks[profile]).map(command=>command.action)}function fieldProperty(type,description){if(type==="array")return{type:"array",items:{},description};if(type==="object")return{type:"object",additionalProperties:!0,description};const scalar={type:type==="string_array"?"string":type,description};return type==="string_array"?{type:"array",items:scalar,description}:scalar}function projectWorkspaceToolDefinition(tool,workspace,extensionActions,compact){const inputSchema=structuredClone(tool.inputSchema),properties=inputSchema.properties,command=PM_MCP_TOOL_COMMAND_CONTRACTS[tool.name];if(workspace&&command){properties.type&&(properties.type.enum=[...workspace.types]),properties.status&&(properties.status.enum=[...workspace.statuses]);for(const field of workspaceFields(workspace))field.commands.includes(command)&&!Object.prototype.hasOwnProperty.call(properties,field.optionName)&&(properties[field.optionName]=fieldProperty(field.type,field.description))}if(tool.name==="pm_run"&&extensionActions.length>0){const action=properties.action;action.enum=[...new Set([...action.enum,...extensionActions])]}return{...tool,inputSchema:compact?compactSchemaDescriptions(inputSchema):inputSchema}}async function resolveMcpToolSurface(availableTools,args={},environment=process.env){const profile=resolveMcpToolProfile(environment),selectedNames=resolveSelectedToolNames(availableTools,profile,environment),cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),pmRoot=resolvePmRoot(cwd,typeof args.path=="string"?args.path:void 0),workspace=await pathExists(getSettingsPath(pmRoot))?await getWorkspaceContracts(pmRoot,{cwd}):null,extensionActions=selectMcpExtensionActions(workspace?workspaceExtensionCommands(workspace):[],profile,selectedNames);extensionActions.length>0&&profile!=="custom"&&selectedNames.add("pm_run");const tools=availableTools.filter(tool=>selectedNames.has(tool.name)).map(tool=>projectWorkspaceToolDefinition(tool,workspace,extensionActions,profile==="core"));return{profile,tools,extensionActions}}async function resolveMcpToolAccess(availableTools,toolName,args={},environment=process.env){const profile=resolveMcpToolProfile(environment),selectedNames=resolveSelectedToolNames(availableTools,profile,environment);if(selectedNames.has(toolName))return{profile,available:!0};if(toolName!=="pm_run"||profile==="custom")return{profile,available:!1};const cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),pmRoot=resolvePmRoot(cwd,typeof args.path=="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot)))return{profile,available:!1};const workspace=await getWorkspaceContracts(pmRoot,{cwd});return{profile,available:selectMcpExtensionActions(workspaceExtensionCommands(workspace),profile,selectedNames).length>0}}async function normalizeWorkspaceToolArguments(toolName,args){const command=PM_MCP_TOOL_COMMAND_CONTRACTS[toolName];if(command!=="create"&&command!=="update")return args;const cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),pmRoot=resolvePmRoot(cwd,typeof args.path=="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot)))return args;const workspace=await getWorkspaceContracts(pmRoot,{cwd}),options=typeof args.options=="object"&&args.options!==null&&!Array.isArray(args.options)?{...args.options}:{},normalizedArgs={...args},canonicalTool=TOOLS.find(tool=>tool.name===toolName),canonicalProperties=new Set(Object.keys(canonicalTool.inputSchema.properties));let changed=!1;for(const field of workspaceFields(workspace))field.commands.includes(command)&&!canonicalProperties.has(field.optionName)&&Object.prototype.hasOwnProperty.call(args,field.optionName)&&(options[field.optionName]=args[field.optionName],delete normalizedArgs[field.optionName],changed=!0);return changed?{...normalizedArgs,options}:args}const _testOnlyMcpRuntimeCapabilities={workspaceExtensionCommands,workspaceFields};export{_testOnlyMcpRuntimeCapabilities,normalizeWorkspaceToolArguments,resolveMcpToolAccess,resolveMcpToolProfile,resolveMcpToolSurface,selectMcpExtensionActions};
 //# sourceMappingURL=runtime-capabilities.js.map

package/dist/mcp/server.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="dd6e2455-d5f5-565f-bcbb-6d754b6be2e2")}catch(e2){}})();import{realpathSync}from"node:fs";import{readFile}from"node:fs/promises";import path from"node:path";import readline from"node:readline";import{fileURLToPath}from"node:url";import{resolvePmCliVersion,PmCliError,decodeHtmlEntitiesInOptions,levenshteinDistanceWithinLimit,asRecordClone,createSerialQueue,evaluateMutationGuard,getSettingsPath,isMutationAction,pathExists,readSettings,runWithHarnessDetectionSignals,runWithWorkspaceHarnessSignalDescriptors,boundAgentEpisodeIdentity}from"../sdk/runtime-primitives.js";import{pmToolActionNestedOptionKeys}from"../sdk/cli-contracts/tool-schema.js";import{readRequiredString,runAction,runWithActiveExtensions}from"../sdk/runtime.js";import{NARROW_TOOL_ACTIONS,TOOLS}from"./tool-definitions.js";import{normalizeWorkspaceToolArguments,resolveMcpToolAccess,resolveMcpToolSurface}from"./runtime-capabilities.js";import{PM_MCP_PROMPT_CONTRACTS,PM_MCP_RESOURCE_CONTRACTS}from"../sdk/agent-capability-contracts.js";import{PM_MCP_ENTRY_TOOL_NAMES,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION,PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,discoverPmTools,parsePmToolDiscoveryOptions}from"../sdk/mcp/discovery.js";import{commitItemMutations,previewItemMutations}from"../sdk/item-transaction.js";import{isRuntimeRecord,markMcpMutationTransportInput}from"../sdk/runtime-input.js";import{attachOutputTokenAccounting}from"../sdk/output-token-accounting.js";import{createReproducibleProcessRunner,runWithReproducibleProcessEnvironment}from"../sdk/reproducibility/process.js";import{parseAtomicMutationControls,resolveItemMutationDocument}from"../sdk/structured-mutations.js";import{resolveAuthor,resolvePmRoot,resolveWorkspaceRoot}from"../sdk/runtime-primitives.js";import{PM_MCP_ERROR_CODES,PM_MCP_META_KEYS,PM_MCP_PROTOCOL_VERSION,PmMcpProtocolError,attachMcpServerInfo,buildMcpCompleteResult,buildMcpDiscoverResult,hasMcpClientExtension,isMcpRecord,resolveMcpRequestContext}from"../sdk/mcp/protocol.js";import{PmMcpInputRequiredError,buildMcpInputRequiredResult,parseMcpInputResponses,validateMcpJsonSchema,withMcpCachePolicy}from"../sdk/mcp/interactions.js";import{PM_MCP_TASKS_EXTENSION,createMcpTaskStore}from"../sdk/mcp/tasks.js";import{PmMcpSubscriptionRegistry}from"../sdk/mcp/subscriptions.js";import{extractMcpTraceContext,runWithMcpTraceContext}from"../sdk/mcp/authorization.js";import{LegacyMcpAdapter}from"./legacy-adapter.js";import{PM_MCP_APP_CONTRACTS,PM_MCP_APP_MIME_TYPE,PM_MCP_APPS_EXTENSION,PM_MCP_APPS_SERVER_CAPABILITY,decoratePmMcpToolsWithApps,findPmMcpAppByUri,hasPmMcpAppsCapability,renderPmMcpAppHtml}from"../sdk/mcp/apps.js";import{PM_MCP_SKILLS_EXTENSION,PM_MCP_SKILLS_SERVER_CAPABILITY,PmMcpSkillRegistry,assertPmMcpSkillsCapability}from"../sdk/mcp/skills.js";function runMcpAction(args){return runAction(markMcpMutationTransportInput(args))}const PM_PACKAGE_ROOT_ENV="PM_CLI_PACKAGE_ROOT";function resolvePmPackageRoot(){return fileURLToPath(new URL("../..",import.meta.url))}if(typeof process.env[PM_PACKAGE_ROOT_ENV]!=="string"||process.env[PM_PACKAGE_ROOT_ENV]?.trim().length===0){process.env[PM_PACKAGE_ROOT_ENV]=resolvePmPackageRoot()}const PM_MCP_SERVER_VERSION=resolvePmCliVersion(import.meta.url,["../.."])??"0.0.0";const PM_MCP_SERVER_INFO={name:"pm-mcp",version:PM_MCP_SERVER_VERSION,description:"Stateless project-context management through pm SDK contracts.",websiteUrl:"https://github.com/unbraind/pm-cli"};const PM_MCP_SERVER_CAPABILITIES={prompts:{listChanged:true},resources:{listChanged:true,subscribe:true},tools:{listChanged:true},extensions:{[PM_MCP_TASKS_EXTENSION]:{},[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY,[PM_MCP_SKILLS_EXTENSION]:PM_MCP_SKILLS_SERVER_CAPABILITY,[PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]:PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY}};const PM_MCP_SUBSCRIPTIONS=new Map;function createMcpSubscriptionRegistry(){return new PmMcpSubscriptionRegistry({capabilities:PM_MCP_SERVER_CAPABILITIES,serverInfo:PM_MCP_SERVER_INFO})}function pruneClosedMcpSubscriptionRegistries(){for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(subscription.registry.size===0)PM_MCP_SUBSCRIPTIONS.delete(key)}}const PM_MCP_CACHE_POLICIES={prompts:{ttlMs:6e4,cacheScope:"public"},resource:{ttlMs:0,cacheScope:"private"},resources:{ttlMs:6e4,cacheScope:"public"},tools:{ttlMs:3e4,cacheScope:"private"}};const PM_MCP_DIRECT_TASK_TOOLS=new Set(["pm_graph","pm_health","pm_validate"]);const PM_MCP_RUN_TASK_ACTIONS=new Set(["graph","health","import","reindex","test-all","validate"]);const PM_MCP_SKILL_METHODS=new Set(["skills/list","skills/get","resources/directory/read"]);const PM_MCP_INSTRUCTIONS="You have access to native pm CLI tools for git-based project management. When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. Do not pass path during real repository tracking \u2014 only pass path for sandbox or test runs.";function declaredToolKeys(tools=TOOLS){return new Map(tools.map(tool=>{const schema=tool.inputSchema;const properties=schema.properties??{};return[tool.name,Object.keys(properties)]}))}function nearestDeclaredKey(unexpected,declared){const limit=Math.max(1,Math.min(3,Math.floor(unexpected.length/4)+1));let best;for(const candidate of declared){const distance=levenshteinDistanceWithinLimit(unexpected,candidate,limit);if(distance===null){continue}if(best===void 0||distance<best.distance){best={key:candidate,distance}}}return best?.key}const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS=new Set(["pm_run"]);const MCP_RETRY_ARGUMENT_KEYS=new Set(["inputResponses","requestState"]);function resolveMcpDiscoveryCursorIntegrityKey(){const configuredKey=process.env.PM_MCP_DISCOVERY_CURSOR_KEY;if(configuredKey===void 0)return void 0;const key=Buffer.from(configuredKey,"utf8");if(key.byteLength<32){throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.",64)}return key}function detectUnexpectedTopLevelKeys(toolName,args,toolDeclaredKeys=declaredToolKeys()){if(typeof args!=="object"||args===null||Array.isArray(args)){return[]}if(UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName)){return[]}const declared=toolDeclaredKeys.get(toolName);if(declared===void 0){return[]}const declaredSet=new Set([...declared,...MCP_RETRY_ARGUMENT_KEYS]);const warnings=[];for(const key of Object.keys(args)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`:`Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`)}return warnings}const HANDLERS={pm_run:args=>runMcpAction(args),pm_discover:async args=>{const surface=await resolveMcpToolSurface(TOOLS,args);const cursorIntegrityKey=resolveMcpDiscoveryCursorIntegrityKey();const discoveryOptions=parsePmToolDiscoveryOptions(args);return discoverPmTools(surface.tools.map(tool=>({name:tool.name,description:tool.description,inputSchema:tool.inputSchema,authorized:true,signals:{freshness:1,usage:PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)?1:0}})),{...discoveryOptions,profile:surface.profile,...cursorIntegrityKey===void 0?{}:{cursorIntegrityKey}})},pm_mutate:async args=>{const transactionId=readRequiredString(args,"transactionId");const controls=parseAtomicMutationControls(args);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const resolved=resolveItemMutationDocument(JSON.stringify({schema_version:1,mutations:args.mutations}),{transactionId,idPrefix:(await readSettings(pmRoot)).id_prefix});const{mutations,references}=resolved;if(args.dryRun===true){const validation=await runWithActiveExtensions({cwd:typeof args.cwd==="string"?args.cwd:void 0,path:pmRoot,noExtensions:args.noExtensions===true},()=>previewItemMutations({pmRoot,transactionId,author:resolveAuthor(typeof args.author==="string"?args.author:void 0,"unknown"),mutations}));return{transaction_id:transactionId,dry_run:true,validation,mutation_count:mutations.length,mutations,references}}const result=await runWithActiveExtensions({cwd:typeof args.cwd==="string"?args.cwd:void 0,path:typeof args.path==="string"?args.path:void 0,noExtensions:args.noExtensions===true},()=>commitItemMutations({pmRoot,transactionId,author:resolveAuthor(typeof args.author==="string"?args.author:void 0,"unknown"),mutations,...controls}));const{transactionId:committedTransactionId,...commitResult}=result;return{...commitResult,transaction_id:committedTransactionId,mutation_count:mutations.length,references}},...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool,action])=>[tool,args=>runMcpAction({...args,action})]))};function resolveInvokedAction(toolName,args){if(toolName==="pm_run"){return typeof args.action==="string"?args.action:void 0}return NARROW_TOOL_ACTIONS[toolName]}async function collectMutationGuardWarnings(toolName,action,args){if(toolName!=="pm_mutate"&&!isMutationAction(action??"")){return[]}const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot))){return[]}const settings=await readSettings(pmRoot);const nestedOptions=typeof args.options==="object"&&args.options!==null&&!Array.isArray(args.options)?args.options:{};const result=evaluateMutationGuard({author:resolveAuthor(typeof args.author==="string"?args.author:typeof nestedOptions.author==="string"?nestedOptions.author:void 0,settings.author_default),payload:Object.fromEntries(Object.entries(args).filter(([key])=>key!=="cwd"&&key!=="path")),settings:settings.mutation_guard,force:args.force===true||nestedOptions.force===true});return result.warnings}function detectUnexpectedOptionKeys(toolName,action,args){const options=args.options;if(action===void 0||typeof options!=="object"||options===null||Array.isArray(options)){return[]}const declared=pmToolActionNestedOptionKeys(action);if(declared===void 0){return[]}const declaredSet=new Set(declared);const warnings=[];for(const key of Object.keys(options)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`:`Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`)}return warnings}function resultContent(result,warnings,tokenAccounting=false,canonicalStructuredResult=false){const effectiveResult=tokenAccounting?attachOutputTokenAccounting(result,value=>JSON.stringify(value,null,2)):result;const structuredContent=warnings!==void 0&&warnings.length>0?{result:effectiveResult,warnings}:{result:effectiveResult};return{content:[{type:"text",text:canonicalStructuredResult?"Canonical result: structuredContent.result":JSON.stringify(effectiveResult,null,2)}],structuredContent}}function errorContent(error,canonicalStructuredResult=false){const code=error instanceof PmCliError?error.exitCode:1;const message=error instanceof Error?error.message:String(error);const details=error instanceof PmCliError?error.context:void 0;return{isError:true,content:[{type:"text",text:canonicalStructuredResult?"Canonical error: structuredContent":JSON.stringify({error:message,code,details},null,2)}],structuredContent:{result:null,error:message,code,details}}}function boundMcpClientProvenance(value){const provenance=isRuntimeRecord(value)?value:{};const bounded={};let acceptedCount=0;for(const key in provenance){if(acceptedCount>=32)break;if(!Object.prototype.hasOwnProperty.call(provenance,key))continue;const entry=provenance[key];if(/^[a-z][a-z0-9_-]{0,63}$/u.test(key)&&typeof entry==="string"&&entry.trim().length>0){bounded[key]=entry.trim().slice(0,256);acceptedCount+=1}}return bounded}function readMcpClientInfo(value){const clientInfo=isRuntimeRecord(value)?value:{};const clientName=typeof clientInfo.name==="string"?clientInfo.name.trim():"";if(clientName.length===0)return void 0;const optionalValues=[["version",clientInfo.version,128],["model",clientInfo.model,256],["session",clientInfo.session,256]];const result={name:clientName.slice(0,128)};for(const[key,value2,limit]of optionalValues){if(typeof value2==="string"&&value2.trim().length>0){result[key]=value2.trim().slice(0,limit)}}const boundedProvenance=boundMcpClientProvenance(clientInfo.provenance);if(Object.keys(boundedProvenance).length>0){result.provenance=boundedProvenance}const episode=boundAgentEpisodeIdentity(clientInfo.episode,false);if(episode!==void 0)result.episode=episode;return result}async function emitMcpChangeNotifications(action){if(isMutationAction(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({registry})=>PM_MCP_RESOURCE_CONTRACTS.map(resource=>registry.emitResourceUpdated(resource.uri))))}if(["extension","install","package","uninstall"].includes(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({registry})=>registry.emitListChanged("tools")))}pruneClosedMcpSubscriptionRegistries()}async function handleToolCall(paramsInput,clientInfo,progressiveDiscoveryNegotiated=false){const clientSignals=clientInfo?{client_info:clientInfo}:{};return runWithHarnessDetectionSignals({env:process.env,argv:process.argv,...clientSignals},async()=>{const params=asRecordClone(paramsInput);const name=readRequiredString(params,"name");const handler=Object.prototype.hasOwnProperty.call(HANDLERS,name)?HANDLERS[name]:void 0;if(!handler){throw new PmCliError(`Unknown pm MCP tool: ${name}`,64)}const inputResponses=params.inputResponses===void 0?void 0:parseMcpInputResponses(params.inputResponses);validateMcpToolArguments(params.arguments);const requestedArgs={...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),...inputResponses?{inputResponses}:{},...typeof params.requestState==="string"?{requestState:params.requestState}:{}};const access=await resolveMcpToolAccess(TOOLS,name,requestedArgs);const requiredCustomDiscoveryEntry=progressiveDiscoveryNegotiated&&access.profile==="custom"&&name==="pm_discover";if(!access.available&&!requiredCustomDiscoveryEntry){throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`,64)}const args=await normalizeWorkspaceToolArguments(name,requestedArgs);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const workspaceIdentity=await pathExists(getSettingsPath(pmRoot))?(await readSettings(pmRoot)).agent_identity:void 0;return runWithHarnessDetectionSignals({env:{...process.env,PM_PATH:pmRoot},argv:process.argv,cwd,...clientSignals},()=>runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals??[],async()=>{const action=resolveInvokedAction(name,args);const warnings=[...detectUnexpectedTopLevelKeys(name,args,declaredToolKeys()),...detectUnexpectedOptionKeys(name,action,args),...await collectMutationGuardWarnings(name,action,args)];for(const warning of warnings){console.error(`[pm-mcp] ${warning}`)}const result=await handler(args);void emitMcpChangeNotifications(action);return resultContent(result,warnings,args.tokenAccounting===true,progressiveDiscoveryNegotiated)},{probesEnabled:workspaceIdentity?.probes_enabled}))})}async function openMcpSubscription(input){if(typeof input.request.id!=="string"&&typeof input.request.id!=="number"||input.request.method!=="subscriptions/listen"){throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request",PM_MCP_ERROR_CODES.invalidParams,{required:["id","method","params.notifications"]})}resolveMcpRequestContext(input.request.params);const key=input.key??input.request.id;if(PM_MCP_SUBSCRIPTIONS.has(key)){throw new PmMcpProtocolError("MCP subscription id is already active",PM_MCP_ERROR_CODES.invalidParams,{subscriptionId:input.request.id})}const registry=createMcpSubscriptionRegistry();await registry.open({id:input.request.id,notifications:input.request.params?.notifications,sink:input.sink});PM_MCP_SUBSCRIPTIONS.set(key,{id:input.request.id,registry})}function closeMcpSubscription(id,key=id){const subscription=PM_MCP_SUBSCRIPTIONS.get(key);if(!subscription||subscription.id!==id)return void 0;PM_MCP_SUBSCRIPTIONS.delete(key);return subscription.registry.close(id)}function closeStdioMcpSubscriptions(){const closed=[];for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(key!==subscription.id)continue;const result=closeMcpSubscription(subscription.id,key);if(result)closed.push({id:subscription.id,result})}return closed}async function resolveMcpToolSchemaForRequest(request){if(request.method!=="tools/call")return void 0;const name=request.params?.name;if(typeof name!=="string")return void 0;const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));return surface.tools.find(tool=>tool.name===name)?.inputSchema}function buildMcpToolCallErrorResult(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return void 0}const content=errorContent(error,hasMcpProtocolVersionMetadata(request)&&hasMcpClientExtension(resolveMcpRequestContext(request.params),PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));return hasMcpProtocolVersionMetadata(request)?buildMcpCompleteResult(content,PM_MCP_SERVER_INFO):content}function requestWorkspaceArgs(params){const paramsRecord=asRecordClone(params);return asRecordClone(paramsRecord.arguments??paramsRecord)}async function readWorkspaceResource(uri,params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const contract=PM_MCP_RESOURCE_CONTRACTS.find(resource=>resource.uri===uri);if(!contract){throw new PmCliError(`Unknown pm MCP resource: ${uri}`,64)}let value;if(uri==="pm://workspace/context"){value=await runMcpAction({...args,action:"context",limit:10})}else if(uri==="pm://workspace/claims"){value=await runMcpAction({...args,action:"list",status:"in_progress",limit:20})}else if(uri==="pm://workspace/focus"){value=await runMcpAction({...args,action:"focus",subcommand:"show"})}else{const guidePath=path.join(cwd,"AGENTS.md");value=await pathExists(guidePath)?(await readFile(guidePath,"utf8")).slice(0,32e3):"No repository-local AGENTS.md was found."}return{contents:[{uri,mimeType:contract.mimeType,text:typeof value==="string"?value:JSON.stringify(value,null,2)}]}}async function loadRequestSkillRegistry(params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const workspaceRoot=resolveWorkspaceRoot(resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0));return PmMcpSkillRegistry.load({packageRoot:resolvePmPackageRoot(),workspaceRoot,packageVersion:PM_MCP_SERVER_VERSION})}function renderWorkflowPrompt(params){const paramsRecord=asRecordClone(params);const name=readRequiredString(paramsRecord,"name");const prompt=PM_MCP_PROMPT_CONTRACTS.find(candidate=>candidate.name===name);if(!prompt){throw new PmCliError(`Unknown pm MCP prompt: ${name}`,64)}const argumentsRecord=asRecordClone(paramsRecord.arguments);let text=prompt.template;for(const argument of prompt.arguments){const value=argumentsRecord[argument.name];if(argument.required&&(typeof value!=="string"||value.trim().length===0)){throw new PmCliError(`Missing required prompt argument: ${argument.name}`,64)}text=text.replaceAll(`{{${argument.name}}}`,typeof value==="string"?value:"")}return{description:prompt.description,messages:[{role:"user",content:{type:"text",text}}]}}const LEGACY_MCP_ADAPTER=new LegacyMcpAdapter({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS,parseClientInfo:readMcpClientInfo,listTools:async params=>({tools:(await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(params))).tools}),callTool:handleToolCall,listResources:()=>({resources:PM_MCP_RESOURCE_CONTRACTS}),readResource:params=>readWorkspaceResource(readRequiredString(asRecordClone(params),"uri"),params),listPrompts:()=>({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments}))}),getPrompt:renderWorkflowPrompt});function deterministicMcpTools(tools){return tools.map(tool=>({...tool,inputSchema:validateMcpJsonSchema(tool.inputSchema)})).sort((left,right)=>left.name.localeCompare(right.name))}function mcpTaskPrincipal(requestContext){return requestContext.clientInfo?`${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`:"anonymous-stdio"}function mcpTaskStore(){return createMcpTaskStore({pmRoot:resolvePmRoot(process.cwd()),owner:"pm-mcp-task-provider"})}function validateMcpToolArguments(value){if(value!==void 0&&!isMcpRecord(value)){throw new PmCliError("pm MCP tool arguments must be an object.",64)}}function shouldCreateMcpTask(params,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){return false}const requestParams=asRecordClone(params);const name=requestParams.name;const args=asRecordClone(requestParams.arguments);if(PM_MCP_DIRECT_TASK_TOOLS.has(name))return true;if(name==="pm_test"&&(args.subcommand==="run"||isMcpRecord(args.options)&&args.options.subcommand==="run")){return true}if(name!=="pm_run")return false;return typeof args.action==="string"&&PM_MCP_RUN_TASK_ACTIONS.has(args.action)}const PENDING_MCP_TASKS=new Map;async function executeMcpTask(execution,inputResponses){const params={...execution.params,...inputResponses?{inputResponses}:{},...execution.requestState?{requestState:execution.requestState}:{}};try{const result=await handleToolCall(params,execution.context.clientInfo,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(result,PM_MCP_SERVER_INFO));PENDING_MCP_TASKS.delete(execution.taskId)}catch(error){if(error instanceof PmMcpInputRequiredError){execution.requestState=error.requestState;await execution.store.requireInput({taskId:execution.taskId,principal:execution.principal,requestContext:execution.context,inputRequests:error.inputRequests,statusMessage:"Task requires additional client input."});return}if(error instanceof PmMcpProtocolError){await execution.store.fail(execution.taskId,execution.principal,{code:error.code,message:error.message,data:error.data})}else{await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(errorContent(error,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO))}PENDING_MCP_TASKS.delete(execution.taskId)}}async function settleMcpTaskExecution(taskId,execution){try{await execution}catch{PENDING_MCP_TASKS.delete(taskId)}}function scheduleMcpTaskExecution(execution,inputResponses){void settleMcpTaskExecution(execution.taskId,executeMcpTask(execution,inputResponses))}async function createMcpTaskForToolCall(params,requestContext){const store=mcpTaskStore();const principal=mcpTaskPrincipal(requestContext);const task=await store.create({principal,statusMessage:"pm operation accepted for asynchronous execution."});const execution={context:requestContext,params:asRecordClone(params),principal,store,taskId:task.taskId};PENDING_MCP_TASKS.set(task.taskId,execution);scheduleMcpTaskExecution(execution);return attachMcpServerInfo(task,PM_MCP_SERVER_INFO)}async function dispatchMcpTaskMethod(request,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_TASKS_EXTENSION]:{}}}})}const params=asRecordClone(request.params);const taskId=readRequiredString(params,"taskId");const principal=mcpTaskPrincipal(requestContext);const store=mcpTaskStore();if(request.method==="tasks/get"){return buildMcpCompleteResult(await store.get(taskId,principal),PM_MCP_SERVER_INFO)}if(request.method==="tasks/update"){const update=await store.update(taskId,principal,params.inputResponses);const execution=PENDING_MCP_TASKS.get(taskId);if(execution&&update.acceptedKeys.length>0&&update.remainingKeys.length===0){scheduleMcpTaskExecution(execution,await store.takeInputResponses(taskId,principal))}return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}await store.cancel(taskId,principal);PENDING_MCP_TASKS.delete(taskId);return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}async function dispatchModernToolMethod(request,requestContext,clientInfo){if(request.method==="tools/list"){const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));const progressiveDiscovery=hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION);const listedTools=progressiveDiscovery?[...surface.tools.filter(tool=>PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),...surface.profile==="custom"&&!surface.tools.some(tool=>tool.name==="pm_discover")?TOOLS.filter(tool=>tool.name==="pm_discover"):[]]:surface.tools;return buildMcpCompleteResult(withMcpCachePolicy({tools:hasCompatiblePmMcpAppsCapability(requestContext)?decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools)):deterministicMcpTools(listedTools)},PM_MCP_CACHE_POLICIES.tools),PM_MCP_SERVER_INFO)}validateMcpToolArguments(request.params?.arguments);if(shouldCreateMcpTask(request.params,requestContext)){return createMcpTaskForToolCall(request.params,requestContext)}try{return buildMcpCompleteResult(await handleToolCall(request.params,clientInfo,hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmMcpInputRequiredError))throw error;return buildMcpInputRequiredResult({requestContext,serverInfo:PM_MCP_SERVER_INFO,inputRequests:error.inputRequests,requestState:error.requestState})}}async function dispatchModernResourceMethod(request,requestContext){if(request.method==="resources/list"){const resources=[...PM_MCP_RESOURCE_CONTRACTS,...hasCompatiblePmMcpAppsCapability(requestContext)?PM_MCP_APP_CONTRACTS.map(contract=>({uri:contract.uri,name:contract.name,description:contract.description,mimeType:PM_MCP_APP_MIME_TYPE,_meta:{ui:contract.resourceMeta}})):[]].sort((left,right)=>left.uri.localeCompare(right.uri));return buildMcpCompleteResult(withMcpCachePolicy({resources},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}if(request.method==="resources/templates/list"){return buildMcpCompleteResult(withMcpCachePolicy({resourceTemplates:[]},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}try{const uri=readRequiredString(asRecordClone(request.params),"uri");const app=findPmMcpAppByUri(uri);let resource;if(app){if(!hasPmMcpAppsCapability(requestContext)){throw new PmMcpProtocolError("MCP App resource requires negotiated client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY}}})}resource={contents:[{uri,mimeType:PM_MCP_APP_MIME_TYPE,text:renderPmMcpAppHtml(app),_meta:{ui:app.resourceMeta}}]}}else if(uri.startsWith("skill://")){assertPmMcpSkillsCapability(requestContext);resource={...(await loadRequestSkillRegistry(request.params)).read(uri)}}else{resource=await readWorkspaceResource(uri,request.params)}return buildMcpCompleteResult(withMcpCachePolicy(resource,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmCliError)||!error.message.startsWith("Unknown pm MCP resource:")){throw error}throw new PmMcpProtocolError(error.message,PM_MCP_ERROR_CODES.invalidParams,{field:"uri"})}}function hasCompatiblePmMcpAppsCapability(requestContext){try{return hasPmMcpAppsCapability(requestContext)}catch(error){if(error instanceof PmMcpProtocolError)return false;throw error}}function readSkillPageOptions(params){if(params.cursor!==void 0&&typeof params.cursor!=="string"){throw new PmMcpProtocolError("Skills cursor must be a string",PM_MCP_ERROR_CODES.invalidParams,{field:"cursor"})}if(params.limit!==void 0&&typeof params.limit!=="number"){throw new PmMcpProtocolError("Skills limit must be a number",PM_MCP_ERROR_CODES.invalidParams,{field:"limit"})}return{...typeof params.cursor==="string"?{cursor:params.cursor}:{},...typeof params.limit==="number"?{limit:params.limit}:{}}}async function dispatchModernSkillMethod(request,requestContext){const directoryRead=request.method==="resources/directory/read";assertPmMcpSkillsCapability(requestContext,directoryRead);const params=asRecordClone(request.params);const registry=await loadRequestSkillRegistry(request.params);let result;if(request.method==="skills/list"){result={...registry.list(readSkillPageOptions(params))}}else if(request.method==="skills/get"){result={skill:registry.get(readRequiredString(params,"uri"))}}else{result={...registry.readDirectory(readRequiredString(params,"uri"),readSkillPageOptions(params))}}return buildMcpCompleteResult(withMcpCachePolicy(result,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}function dispatchModernPromptMethod(request){const result=request.method==="prompts/list"?withMcpCachePolicy({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments})).sort((left,right)=>left.name.localeCompare(right.name))},PM_MCP_CACHE_POLICIES.prompts):renderWorkflowPrompt(request.params);return buildMcpCompleteResult(result,PM_MCP_SERVER_INFO)}async function dispatchModernMcpRequest(request,meta){const requestContext=resolveMcpRequestContext(request.params);const clientInfo=readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);if(request.method==="server/discover"){return buildMcpDiscoverResult({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS})}if(request.method==="ping"){throw new PmMcpProtocolError("MCP method not found: ping",-32601,{removedIn:PM_MCP_PROTOCOL_VERSION})}if(PM_MCP_SKILL_METHODS.has(request.method??"")){return dispatchModernSkillMethod(request,requestContext)}if(request.method==="tasks/get"||request.method==="tasks/update"||request.method==="tasks/cancel"){return dispatchMcpTaskMethod(request,requestContext)}if(request.method==="tools/list"||request.method==="tools/call"){return dispatchModernToolMethod(request,requestContext,clientInfo)}if(request.method==="resources/list"||request.method==="resources/templates/list"||request.method==="resources/read"){return dispatchModernResourceMethod(request,requestContext)}if(request.method==="prompts/list"||request.method==="prompts/get"){return dispatchModernPromptMethod(request)}throw new PmMcpProtocolError(`MCP method not found: ${request.method??"(missing)"}`,-32601)}async function handleRequestInReproducibleContext(request){if(!request.id&&request.method?.startsWith("notifications/")){return void 0}if(hasMcpProtocolVersionMetadata(request)){const allowlist=(process.env.PM_MCP_BAGGAGE_ALLOWLIST??"").split(",").map(entry=>entry.trim()).filter(Boolean);return runWithMcpTraceContext(extractMcpTraceContext(request.params,{baggageAllowlist:allowlist}),()=>dispatchModernMcpRequest(request,request.params._meta))}if(request.method==="initialize"){return LEGACY_MCP_ADAPTER.initialize(request.params)}return LEGACY_MCP_ADAPTER.dispatch(request)}function hasMcpProtocolVersionMetadata(request){const meta=isMcpRecord(request.params)?request.params._meta:void 0;return isMcpRecord(meta)&&Object.prototype.hasOwnProperty.call(meta,PM_MCP_META_KEYS.protocolVersion)}async function handleRequest(request){return runWithReproducibleProcessEnvironment(process.env,()=>handleRequestInReproducibleContext(request))}function writeResponse(id,payload){process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,result:payload})}
-`)}function writeError(id,error){const code=error instanceof PmMcpProtocolError?error.code:error instanceof PmCliError?error.exitCode:-32603;const message=error instanceof Error?error.message:String(error);const data=error instanceof PmMcpProtocolError?error.data:error instanceof PmCliError?error.context:void 0;process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,error:{code,message,data}})}
-`)}function writeToolCallErrorResponse(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return false}writeResponse(request.id,buildMcpToolCallErrorResult(request,error));return true}async function handleStdioTransportControl(request){if(request.method==="subscriptions/listen"){await openMcpSubscription({request,sink:notification=>{process.stdout.write(`${JSON.stringify(notification)}
-`)}});return true}if(request.method!=="notifications/cancelled")return false;const requestId=request.params?.requestId;if(typeof requestId==="string"||typeof requestId==="number"){const result=closeMcpSubscription(requestId);if(result)writeResponse(requestId,result)}return true}async function processRpcLineWithHandler(line,requestHandler){if(line.trim().length===0){return}let request;try{request=JSON.parse(line)}catch(error){const message=error instanceof Error?error.message:String(error);writeError(null,new PmCliError(`Parse error: ${message}`,-32700));return}if(typeof request!=="object"||request===null||Array.isArray(request)){writeError(null,new PmCliError("Invalid JSON-RPC request: expected an object",-32600));return}const shouldRespond=Object.prototype.hasOwnProperty.call(request,"id");try{if(await handleStdioTransportControl(request))return;const result=await requestHandler(request);if(shouldRespond&&result!==void 0){writeResponse(request.id,result)}}catch(error){if(!shouldRespond){return}if(!writeToolCallErrorResponse(request,error)){writeError(request.id,error)}}}async function processRpcLine(line){await processRpcLineWithHandler(line,handleRequest)}function startMcpServer(){const rl=readline.createInterface({input:process.stdin,crlfDelay:Infinity});const queue=createSerialQueue();let processLine;try{const runInProcessContext=createReproducibleProcessRunner(process.env);processLine=line=>runInProcessContext(()=>processRpcLineWithHandler(line,handleRequestInReproducibleContext))}catch{processLine=processRpcLine}rl.on("line",line=>{void queue.enqueue(()=>processLine(line))});rl.on("close",()=>{void queue.enqueue(()=>{for(const closed of closeStdioMcpSubscriptions()){writeResponse(closed.id,closed.result)}})})}function isInvokedAsMcpMainModule(argvPath,moduleUrl){if(!argvPath){return false}const selfPath=fileURLToPath(moduleUrl);if(argvPath===selfPath){return true}try{return realpathSync(argvPath)===realpathSync(selfPath)}catch{return false}}function readRuntimeTestHook(key){const runtimeTestHooks=globalThis.__pmCliActionRunnerTestHooks;if(runtimeTestHooks===void 0){throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`,64)}return runtimeTestHooks[key]}const _testOnly={boundMcpClientProvenance,createMcpInputRequiredError:input=>new PmMcpInputRequiredError(input),createMcpProtocolError:(...input)=>new PmMcpProtocolError(...input),get closeManyOptionsFromFlat(){return readRuntimeTestHook("closeManyOptionsFromFlat")},detectUnexpectedOptionKeys,detectUnexpectedTopLevelKeys,collectMutationGuardWarnings,closeStdioMcpSubscriptions,errorContent,emitMcpChangeNotifications,expireMcpSubscriptionRecord:(id,key=id)=>PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),getMcpClientInfo:()=>LEGACY_MCP_ADAPTER.getClientInfo(),get extensionOptionsFromArgs(){return readRuntimeTestHook("extensionOptionsFromArgs")},get globalOptions(){return readRuntimeTestHook("globalOptions")},get mutationListOptions(){return readRuntimeTestHook("mutationListOptions")},nearestDeclaredKey,mcpTaskPrincipal,resultContent,resolveMcpRequestContext,shouldCreateMcpTask,settleMcpTaskExecution,subscriptionCount:()=>PM_MCP_SUBSCRIPTIONS.size,get normalizeActionName(){return readRuntimeTestHook("normalizeActionName")},get normalizeCommandPath(){return readRuntimeTestHook("normalizeCommandPath")},get normalizeMcpOptionsArrays(){return readRuntimeTestHook("normalizeMcpOptionsArrays")},get normalizeMcpUpdateOptions(){return readRuntimeTestHook("normalizeMcpUpdateOptions")},get optionsWithAuthor(){return readRuntimeTestHook("optionsWithAuthor")},get readRequiredString(){return readRuntimeTestHook("readRequiredString")},get readScalarString(){return readRuntimeTestHook("readScalarString")},get readScalarStringAllowBlank(){return readRuntimeTestHook("readScalarStringAllowBlank")},get readStringArray(){return readRuntimeTestHook("readStringArray")},runAction:runMcpAction,get updateManyOptionsFromFlat(){return readRuntimeTestHook("updateManyOptionsFromFlat")},get withAddNoteOption(){return readRuntimeTestHook("withAddNoteOption")},get withFilesDiscoveryOptions(){return readRuntimeTestHook("withFilesDiscoveryOptions")},get withMutationCompaction(){return readRuntimeTestHook("withMutationCompaction")},writeError};if(isInvokedAsMcpMainModule(process.argv[1],import.meta.url)){startMcpServer()}export{_testOnly,buildMcpToolCallErrorResult,closeMcpSubscription,handleRequest,isInvokedAsMcpMainModule,openMcpSubscription,processRpcLine,resolveMcpToolSchemaForRequest,startMcpServer};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4cb5ad92-68d4-5beb-be5b-28c5e51aae2c")}catch{}})();import{realpathSync}from"node:fs";import{readFile}from"node:fs/promises";import path from"node:path";import readline from"node:readline";import{fileURLToPath}from"node:url";import{resolvePmCliVersion,PmCliError,decodeHtmlEntitiesInOptions,levenshteinDistanceWithinLimit,asRecordClone,createSerialQueue,evaluateMutationGuard,getSettingsPath,isMutationAction,pathExists,readSettings,runWithHarnessDetectionSignals,runWithWorkspaceHarnessSignalDescriptors,boundAgentEpisodeIdentity}from"../sdk/runtime-primitives.js";import{pmToolActionNestedOptionKeys}from"../sdk/cli-contracts/tool-schema.js";import{readRequiredString,runAction,runWithActiveExtensions}from"../sdk/runtime.js";import{NARROW_TOOL_ACTIONS,TOOLS}from"./tool-definitions.js";import{normalizeWorkspaceToolArguments,resolveMcpToolAccess,resolveMcpToolSurface}from"./runtime-capabilities.js";import{PM_MCP_PROMPT_CONTRACTS,PM_MCP_RESOURCE_CONTRACTS}from"../sdk/agent-capability-contracts.js";import{PM_MCP_ENTRY_TOOL_NAMES,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION,PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,discoverPmTools,parsePmToolDiscoveryOptions}from"../sdk/mcp/discovery.js";import{commitItemMutations,previewItemMutations}from"../sdk/item-transaction.js";import{isRuntimeRecord,markMcpMutationTransportInput}from"../sdk/runtime-input.js";import{attachOutputTokenAccounting}from"../sdk/output-token-accounting.js";import{createReproducibleProcessRunner,runWithReproducibleProcessEnvironment}from"../sdk/reproducibility/process.js";import{parseAtomicMutationControls,resolveItemMutationDocument}from"../sdk/structured-mutations.js";import{resolveAuthor,resolvePmRoot,resolveWorkspaceRoot}from"../sdk/runtime-primitives.js";import{PM_MCP_ERROR_CODES,PM_MCP_META_KEYS,PM_MCP_PROTOCOL_VERSION,PmMcpProtocolError,attachMcpServerInfo,buildMcpCompleteResult,buildMcpDiscoverResult,hasMcpClientExtension,isMcpRecord,resolveMcpRequestContext}from"../sdk/mcp/protocol.js";import{PmMcpInputRequiredError,buildMcpInputRequiredResult,parseMcpInputResponses,validateMcpJsonSchema,withMcpCachePolicy}from"../sdk/mcp/interactions.js";import{PM_MCP_TASKS_EXTENSION,createMcpTaskStore}from"../sdk/mcp/tasks.js";import{PmMcpSubscriptionRegistry}from"../sdk/mcp/subscriptions.js";import{extractMcpTraceContext,runWithMcpTraceContext}from"../sdk/mcp/authorization.js";import{LegacyMcpAdapter}from"./legacy-adapter.js";import{PM_MCP_APP_CONTRACTS,PM_MCP_APP_MIME_TYPE,PM_MCP_APPS_EXTENSION,PM_MCP_APPS_SERVER_CAPABILITY,decoratePmMcpToolsWithApps,findPmMcpAppByUri,hasPmMcpAppsCapability,renderPmMcpAppHtml}from"../sdk/mcp/apps.js";import{PM_MCP_SKILLS_EXTENSION,PM_MCP_SKILLS_SERVER_CAPABILITY,PmMcpSkillRegistry,assertPmMcpSkillsCapability}from"../sdk/mcp/skills.js";function runMcpAction(args){return runAction(markMcpMutationTransportInput(args))}const PM_PACKAGE_ROOT_ENV="PM_CLI_PACKAGE_ROOT";function resolvePmPackageRoot(){return fileURLToPath(new URL("../..",import.meta.url))}(typeof process.env[PM_PACKAGE_ROOT_ENV]!="string"||process.env[PM_PACKAGE_ROOT_ENV]?.trim().length===0)&&(process.env[PM_PACKAGE_ROOT_ENV]=resolvePmPackageRoot());const PM_MCP_SERVER_VERSION=resolvePmCliVersion(import.meta.url,["../.."])??"0.0.0",PM_MCP_SERVER_INFO={name:"pm-mcp",version:PM_MCP_SERVER_VERSION,description:"Stateless project-context management through pm SDK contracts.",websiteUrl:"https://github.com/unbraind/pm-cli"},PM_MCP_SERVER_CAPABILITIES={prompts:{listChanged:!0},resources:{listChanged:!0,subscribe:!0},tools:{listChanged:!0},extensions:{[PM_MCP_TASKS_EXTENSION]:{},[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY,[PM_MCP_SKILLS_EXTENSION]:PM_MCP_SKILLS_SERVER_CAPABILITY,[PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]:PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY}},PM_MCP_SUBSCRIPTIONS=new Map;function createMcpSubscriptionRegistry(){return new PmMcpSubscriptionRegistry({capabilities:PM_MCP_SERVER_CAPABILITIES,serverInfo:PM_MCP_SERVER_INFO})}function pruneClosedMcpSubscriptionRegistries(){for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS)subscription.registry.size===0&&PM_MCP_SUBSCRIPTIONS.delete(key)}const PM_MCP_CACHE_POLICIES={prompts:{ttlMs:6e4,cacheScope:"public"},resource:{ttlMs:0,cacheScope:"private"},resources:{ttlMs:6e4,cacheScope:"public"},tools:{ttlMs:3e4,cacheScope:"private"}},PM_MCP_DIRECT_TASK_TOOLS=new Set(["pm_graph","pm_health","pm_validate"]),PM_MCP_RUN_TASK_ACTIONS=new Set(["graph","health","import","reindex","test-all","validate"]),PM_MCP_SKILL_METHODS=new Set(["skills/list","skills/get","resources/directory/read"]),PM_MCP_INSTRUCTIONS="You have access to native pm CLI tools for git-based project management. When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. Do not pass path during real repository tracking \u2014 only pass path for sandbox or test runs.";function declaredToolKeys(tools=TOOLS){return new Map(tools.map(tool=>{const properties=tool.inputSchema.properties??{};return[tool.name,Object.keys(properties)]}))}function nearestDeclaredKey(unexpected,declared){const limit=Math.max(1,Math.min(3,Math.floor(unexpected.length/4)+1));let best;for(const candidate of declared){const distance=levenshteinDistanceWithinLimit(unexpected,candidate,limit);distance!==null&&(best===void 0||distance<best.distance)&&(best={key:candidate,distance})}return best?.key}const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS=new Set(["pm_run"]),MCP_RETRY_ARGUMENT_KEYS=new Set(["inputResponses","requestState"]);function resolveMcpDiscoveryCursorIntegrityKey(){const configuredKey=process.env.PM_MCP_DISCOVERY_CURSOR_KEY;if(configuredKey===void 0)return;const key=Buffer.from(configuredKey,"utf8");if(key.byteLength<32)throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.",64);return key}function detectUnexpectedTopLevelKeys(toolName,args,toolDeclaredKeys=declaredToolKeys()){if(typeof args!="object"||args===null||Array.isArray(args))return[];if(UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName))return[];const declared=toolDeclaredKeys.get(toolName);if(declared===void 0)return[];const declaredSet=new Set([...declared,...MCP_RETRY_ARGUMENT_KEYS]),warnings=[];for(const key of Object.keys(args)){if(declaredSet.has(key))continue;const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`:`Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`)}return warnings}const HANDLERS={pm_run:args=>runMcpAction(args),pm_discover:async args=>{const surface=await resolveMcpToolSurface(TOOLS,args),cursorIntegrityKey=resolveMcpDiscoveryCursorIntegrityKey(),discoveryOptions=parsePmToolDiscoveryOptions(args);return discoverPmTools(surface.tools.map(tool=>({name:tool.name,description:tool.description,inputSchema:tool.inputSchema,authorized:!0,signals:{freshness:1,usage:PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)?1:0}})),{...discoveryOptions,profile:surface.profile,...cursorIntegrityKey===void 0?{}:{cursorIntegrityKey}})},pm_mutate:async args=>{const transactionId=readRequiredString(args,"transactionId"),controls=parseAtomicMutationControls(args),cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),pmRoot=resolvePmRoot(cwd,typeof args.path=="string"?args.path:void 0),resolved=resolveItemMutationDocument(JSON.stringify({schema_version:1,mutations:args.mutations}),{transactionId,idPrefix:(await readSettings(pmRoot)).id_prefix}),{mutations,references}=resolved;if(args.dryRun===!0){const validation=await runWithActiveExtensions({cwd:typeof args.cwd=="string"?args.cwd:void 0,path:pmRoot,noExtensions:args.noExtensions===!0},()=>previewItemMutations({pmRoot,transactionId,author:resolveAuthor(typeof args.author=="string"?args.author:void 0,"unknown"),mutations}));return{transaction_id:transactionId,dry_run:!0,validation,mutation_count:mutations.length,mutations,references}}const result=await runWithActiveExtensions({cwd:typeof args.cwd=="string"?args.cwd:void 0,path:typeof args.path=="string"?args.path:void 0,noExtensions:args.noExtensions===!0},()=>commitItemMutations({pmRoot,transactionId,author:resolveAuthor(typeof args.author=="string"?args.author:void 0,"unknown"),mutations,...controls})),{transactionId:committedTransactionId,...commitResult}=result;return{...commitResult,transaction_id:committedTransactionId,mutation_count:mutations.length,references}},...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool,action])=>[tool,args=>runMcpAction({...args,action})]))};function resolveInvokedAction(toolName,args){return toolName==="pm_run"?typeof args.action=="string"?args.action:void 0:NARROW_TOOL_ACTIONS[toolName]}async function collectMutationGuardWarnings(toolName,action,args){if(toolName!=="pm_mutate"&&!isMutationAction(action??""))return[];const cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),pmRoot=resolvePmRoot(cwd,typeof args.path=="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot)))return[];const settings=await readSettings(pmRoot),nestedOptions=typeof args.options=="object"&&args.options!==null&&!Array.isArray(args.options)?args.options:{};return evaluateMutationGuard({author:resolveAuthor(typeof args.author=="string"?args.author:typeof nestedOptions.author=="string"?nestedOptions.author:void 0,settings.author_default),payload:Object.fromEntries(Object.entries(args).filter(([key])=>key!=="cwd"&&key!=="path")),settings:settings.mutation_guard,force:args.force===!0||nestedOptions.force===!0}).warnings}function detectUnexpectedOptionKeys(toolName,action,args){const options=args.options;if(action===void 0||typeof options!="object"||options===null||Array.isArray(options))return[];const declared=pmToolActionNestedOptionKeys(action);if(declared===void 0)return[];const declaredSet=new Set(declared),warnings=[];for(const key of Object.keys(options)){if(declaredSet.has(key))continue;const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`:`Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`)}return warnings}function resultContent(result,warnings,tokenAccounting=!1,canonicalStructuredResult=!1){const effectiveResult=tokenAccounting?attachOutputTokenAccounting(result,value=>JSON.stringify(value,null,2)):result,structuredContent=warnings!==void 0&&warnings.length>0?{result:effectiveResult,warnings}:{result:effectiveResult};return{content:[{type:"text",text:canonicalStructuredResult?"Canonical result: structuredContent.result":JSON.stringify(effectiveResult,null,2)}],structuredContent}}function errorContent(error,canonicalStructuredResult=!1){const code=error instanceof PmCliError?error.exitCode:1,message=error instanceof Error?error.message:String(error),details=error instanceof PmCliError?error.context:void 0;return{isError:!0,content:[{type:"text",text:canonicalStructuredResult?"Canonical error: structuredContent":JSON.stringify({error:message,code,details},null,2)}],structuredContent:{result:null,error:message,code,details}}}function boundMcpClientProvenance(value){const provenance=isRuntimeRecord(value)?value:{},bounded={};let acceptedCount=0;for(const key in provenance){if(acceptedCount>=32)break;if(!Object.prototype.hasOwnProperty.call(provenance,key))continue;const entry=provenance[key];/^[a-z][a-z0-9_-]{0,63}$/u.test(key)&&typeof entry=="string"&&entry.trim().length>0&&(bounded[key]=entry.trim().slice(0,256),acceptedCount+=1)}return bounded}function readMcpClientInfo(value){const clientInfo=isRuntimeRecord(value)?value:{},clientName=typeof clientInfo.name=="string"?clientInfo.name.trim():"";if(clientName.length===0)return;const optionalValues=[["version",clientInfo.version,128],["model",clientInfo.model,256],["session",clientInfo.session,256]],result={name:clientName.slice(0,128)};for(const[key,value2,limit]of optionalValues)typeof value2=="string"&&value2.trim().length>0&&(result[key]=value2.trim().slice(0,limit));const boundedProvenance=boundMcpClientProvenance(clientInfo.provenance);Object.keys(boundedProvenance).length>0&&(result.provenance=boundedProvenance);const episode=boundAgentEpisodeIdentity(clientInfo.episode,!1);return episode!==void 0&&(result.episode=episode),result}async function emitMcpChangeNotifications(action){isMutationAction(action??"")&&await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({registry})=>PM_MCP_RESOURCE_CONTRACTS.map(resource=>registry.emitResourceUpdated(resource.uri)))),["extension","install","package","uninstall"].includes(action??"")&&await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({registry})=>registry.emitListChanged("tools"))),pruneClosedMcpSubscriptionRegistries()}async function handleToolCall(paramsInput,clientInfo,progressiveDiscoveryNegotiated=!1){const clientSignals=clientInfo?{client_info:clientInfo}:{};return runWithHarnessDetectionSignals({env:process.env,argv:process.argv,...clientSignals},async()=>{const params=asRecordClone(paramsInput),name=readRequiredString(params,"name"),handler=Object.prototype.hasOwnProperty.call(HANDLERS,name)?HANDLERS[name]:void 0;if(!handler)throw new PmCliError(`Unknown pm MCP tool: ${name}`,64);const inputResponses=params.inputResponses===void 0?void 0:parseMcpInputResponses(params.inputResponses);validateMcpToolArguments(params.arguments);const requestedArgs={...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),...inputResponses?{inputResponses}:{},...typeof params.requestState=="string"?{requestState:params.requestState}:{}},access=await resolveMcpToolAccess(TOOLS,name,requestedArgs),requiredCustomDiscoveryEntry=progressiveDiscoveryNegotiated&&access.profile==="custom"&&name==="pm_discover";if(!access.available&&!requiredCustomDiscoveryEntry)throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`,64);const args=await normalizeWorkspaceToolArguments(name,requestedArgs),cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),pmRoot=resolvePmRoot(cwd,typeof args.path=="string"?args.path:void 0),workspaceIdentity=await pathExists(getSettingsPath(pmRoot))?(await readSettings(pmRoot)).agent_identity:void 0;return runWithHarnessDetectionSignals({env:{...process.env,PM_PATH:pmRoot},argv:process.argv,cwd,...clientSignals},()=>runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals??[],async()=>{const action=resolveInvokedAction(name,args),warnings=[...detectUnexpectedTopLevelKeys(name,args,declaredToolKeys()),...detectUnexpectedOptionKeys(name,action,args),...await collectMutationGuardWarnings(name,action,args)];for(const warning of warnings)console.error(`[pm-mcp] ${warning}`);const result=await handler(args);return emitMcpChangeNotifications(action),resultContent(result,warnings,args.tokenAccounting===!0,progressiveDiscoveryNegotiated)},{probesEnabled:workspaceIdentity?.probes_enabled}))})}async function openMcpSubscription(input){if(typeof input.request.id!="string"&&typeof input.request.id!="number"||input.request.method!=="subscriptions/listen")throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request",PM_MCP_ERROR_CODES.invalidParams,{required:["id","method","params.notifications"]});resolveMcpRequestContext(input.request.params);const key=input.key??input.request.id;if(PM_MCP_SUBSCRIPTIONS.has(key))throw new PmMcpProtocolError("MCP subscription id is already active",PM_MCP_ERROR_CODES.invalidParams,{subscriptionId:input.request.id});const registry=createMcpSubscriptionRegistry();await registry.open({id:input.request.id,notifications:input.request.params?.notifications,sink:input.sink}),PM_MCP_SUBSCRIPTIONS.set(key,{id:input.request.id,registry})}function closeMcpSubscription(id,key=id){const subscription=PM_MCP_SUBSCRIPTIONS.get(key);if(!(!subscription||subscription.id!==id))return PM_MCP_SUBSCRIPTIONS.delete(key),subscription.registry.close(id)}function closeStdioMcpSubscriptions(){const closed=[];for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(key!==subscription.id)continue;const result=closeMcpSubscription(subscription.id,key);result&&closed.push({id:subscription.id,result})}return closed}async function resolveMcpToolSchemaForRequest(request){if(request.method!=="tools/call")return;const name=request.params?.name;return typeof name!="string"?void 0:(await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params))).tools.find(tool=>tool.name===name)?.inputSchema}function buildMcpToolCallErrorResult(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError)return;const content=errorContent(error,hasMcpProtocolVersionMetadata(request)&&hasMcpClientExtension(resolveMcpRequestContext(request.params),PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));return hasMcpProtocolVersionMetadata(request)?buildMcpCompleteResult(content,PM_MCP_SERVER_INFO):content}function requestWorkspaceArgs(params){const paramsRecord=asRecordClone(params);return asRecordClone(paramsRecord.arguments??paramsRecord)}async function readWorkspaceResource(uri,params){const args=requestWorkspaceArgs(params),cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),contract=PM_MCP_RESOURCE_CONTRACTS.find(resource=>resource.uri===uri);if(!contract)throw new PmCliError(`Unknown pm MCP resource: ${uri}`,64);let value;if(uri==="pm://workspace/context")value=await runMcpAction({...args,action:"context",limit:10});else if(uri==="pm://workspace/claims")value=await runMcpAction({...args,action:"list",status:"in_progress",limit:20});else if(uri==="pm://workspace/focus")value=await runMcpAction({...args,action:"focus",subcommand:"show"});else{const guidePath=path.join(cwd,"AGENTS.md");value=await pathExists(guidePath)?(await readFile(guidePath,"utf8")).slice(0,32e3):"No repository-local AGENTS.md was found."}return{contents:[{uri,mimeType:contract.mimeType,text:typeof value=="string"?value:JSON.stringify(value,null,2)}]}}async function loadRequestSkillRegistry(params){const args=requestWorkspaceArgs(params),cwd=typeof args.cwd=="string"?args.cwd:process.cwd(),workspaceRoot=resolveWorkspaceRoot(resolvePmRoot(cwd,typeof args.path=="string"?args.path:void 0));return PmMcpSkillRegistry.load({packageRoot:resolvePmPackageRoot(),workspaceRoot,packageVersion:PM_MCP_SERVER_VERSION})}function renderWorkflowPrompt(params){const paramsRecord=asRecordClone(params),name=readRequiredString(paramsRecord,"name"),prompt=PM_MCP_PROMPT_CONTRACTS.find(candidate=>candidate.name===name);if(!prompt)throw new PmCliError(`Unknown pm MCP prompt: ${name}`,64);const argumentsRecord=asRecordClone(paramsRecord.arguments);let text=prompt.template;for(const argument of prompt.arguments){const value=argumentsRecord[argument.name];if(argument.required&&(typeof value!="string"||value.trim().length===0))throw new PmCliError(`Missing required prompt argument: ${argument.name}`,64);text=text.replaceAll(`{{${argument.name}}}`,typeof value=="string"?value:"")}return{description:prompt.description,messages:[{role:"user",content:{type:"text",text}}]}}const LEGACY_MCP_ADAPTER=new LegacyMcpAdapter({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS,parseClientInfo:readMcpClientInfo,listTools:async params=>({tools:(await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(params))).tools}),callTool:handleToolCall,listResources:()=>({resources:PM_MCP_RESOURCE_CONTRACTS}),readResource:params=>readWorkspaceResource(readRequiredString(asRecordClone(params),"uri"),params),listPrompts:()=>({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments}))}),getPrompt:renderWorkflowPrompt});function deterministicMcpTools(tools){return tools.map(tool=>({...tool,inputSchema:validateMcpJsonSchema(tool.inputSchema)})).sort((left,right)=>left.name.localeCompare(right.name))}function mcpTaskPrincipal(requestContext){return requestContext.clientInfo?`${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`:"anonymous-stdio"}function mcpTaskStore(){return createMcpTaskStore({pmRoot:resolvePmRoot(process.cwd()),owner:"pm-mcp-task-provider"})}function validateMcpToolArguments(value){if(value!==void 0&&!isMcpRecord(value))throw new PmCliError("pm MCP tool arguments must be an object.",64)}function shouldCreateMcpTask(params,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION))return!1;const requestParams=asRecordClone(params),name=requestParams.name,args=asRecordClone(requestParams.arguments);return PM_MCP_DIRECT_TASK_TOOLS.has(name)||name==="pm_test"&&(args.subcommand==="run"||isMcpRecord(args.options)&&args.options.subcommand==="run")?!0:name!=="pm_run"?!1:typeof args.action=="string"&&PM_MCP_RUN_TASK_ACTIONS.has(args.action)}const PENDING_MCP_TASKS=new Map;async function executeMcpTask(execution,inputResponses){const params={...execution.params,...inputResponses?{inputResponses}:{},...execution.requestState?{requestState:execution.requestState}:{}};try{const result=await handleToolCall(params,execution.context.clientInfo,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(result,PM_MCP_SERVER_INFO)),PENDING_MCP_TASKS.delete(execution.taskId)}catch(error){if(error instanceof PmMcpInputRequiredError){execution.requestState=error.requestState,await execution.store.requireInput({taskId:execution.taskId,principal:execution.principal,requestContext:execution.context,inputRequests:error.inputRequests,statusMessage:"Task requires additional client input."});return}error instanceof PmMcpProtocolError?await execution.store.fail(execution.taskId,execution.principal,{code:error.code,message:error.message,data:error.data}):await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(errorContent(error,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO)),PENDING_MCP_TASKS.delete(execution.taskId)}}async function settleMcpTaskExecution(taskId,execution){try{await execution}catch{PENDING_MCP_TASKS.delete(taskId)}}function scheduleMcpTaskExecution(execution,inputResponses){settleMcpTaskExecution(execution.taskId,executeMcpTask(execution,inputResponses))}async function createMcpTaskForToolCall(params,requestContext){const store=mcpTaskStore(),principal=mcpTaskPrincipal(requestContext),task=await store.create({principal,statusMessage:"pm operation accepted for asynchronous execution."}),execution={context:requestContext,params:asRecordClone(params),principal,store,taskId:task.taskId};return PENDING_MCP_TASKS.set(task.taskId,execution),scheduleMcpTaskExecution(execution),attachMcpServerInfo(task,PM_MCP_SERVER_INFO)}async function dispatchMcpTaskMethod(request,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION))throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_TASKS_EXTENSION]:{}}}});const params=asRecordClone(request.params),taskId=readRequiredString(params,"taskId"),principal=mcpTaskPrincipal(requestContext),store=mcpTaskStore();if(request.method==="tasks/get")return buildMcpCompleteResult(await store.get(taskId,principal),PM_MCP_SERVER_INFO);if(request.method==="tasks/update"){const update=await store.update(taskId,principal,params.inputResponses),execution=PENDING_MCP_TASKS.get(taskId);return execution&&update.acceptedKeys.length>0&&update.remainingKeys.length===0&&scheduleMcpTaskExecution(execution,await store.takeInputResponses(taskId,principal)),buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}return await store.cancel(taskId,principal),PENDING_MCP_TASKS.delete(taskId),buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}async function dispatchModernToolMethod(request,requestContext,clientInfo){if(request.method==="tools/list"){const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params)),listedTools=hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)?[...surface.tools.filter(tool=>PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),...surface.profile==="custom"&&!surface.tools.some(tool=>tool.name==="pm_discover")?TOOLS.filter(tool=>tool.name==="pm_discover"):[]]:surface.tools;return buildMcpCompleteResult(withMcpCachePolicy({tools:hasCompatiblePmMcpAppsCapability(requestContext)?decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools)):deterministicMcpTools(listedTools)},PM_MCP_CACHE_POLICIES.tools),PM_MCP_SERVER_INFO)}if(validateMcpToolArguments(request.params?.arguments),shouldCreateMcpTask(request.params,requestContext))return createMcpTaskForToolCall(request.params,requestContext);try{return buildMcpCompleteResult(await handleToolCall(request.params,clientInfo,hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmMcpInputRequiredError))throw error;return buildMcpInputRequiredResult({requestContext,serverInfo:PM_MCP_SERVER_INFO,inputRequests:error.inputRequests,requestState:error.requestState})}}async function dispatchModernResourceMethod(request,requestContext){if(request.method==="resources/list"){const resources=[...PM_MCP_RESOURCE_CONTRACTS,...hasCompatiblePmMcpAppsCapability(requestContext)?PM_MCP_APP_CONTRACTS.map(contract=>({uri:contract.uri,name:contract.name,description:contract.description,mimeType:PM_MCP_APP_MIME_TYPE,_meta:{ui:contract.resourceMeta}})):[]].sort((left,right)=>left.uri.localeCompare(right.uri));return buildMcpCompleteResult(withMcpCachePolicy({resources},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}if(request.method==="resources/templates/list")return buildMcpCompleteResult(withMcpCachePolicy({resourceTemplates:[]},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO);try{const uri=readRequiredString(asRecordClone(request.params),"uri"),app=findPmMcpAppByUri(uri);let resource;if(app){if(!hasPmMcpAppsCapability(requestContext))throw new PmMcpProtocolError("MCP App resource requires negotiated client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY}}});resource={contents:[{uri,mimeType:PM_MCP_APP_MIME_TYPE,text:renderPmMcpAppHtml(app),_meta:{ui:app.resourceMeta}}]}}else uri.startsWith("skill://")?(assertPmMcpSkillsCapability(requestContext),resource={...(await loadRequestSkillRegistry(request.params)).read(uri)}):resource=await readWorkspaceResource(uri,request.params);return buildMcpCompleteResult(withMcpCachePolicy(resource,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}catch(error){throw!(error instanceof PmCliError)||!error.message.startsWith("Unknown pm MCP resource:")?error:new PmMcpProtocolError(error.message,PM_MCP_ERROR_CODES.invalidParams,{field:"uri"})}}function hasCompatiblePmMcpAppsCapability(requestContext){try{return hasPmMcpAppsCapability(requestContext)}catch(error){if(error instanceof PmMcpProtocolError)return!1;throw error}}function readSkillPageOptions(params){if(params.cursor!==void 0&&typeof params.cursor!="string")throw new PmMcpProtocolError("Skills cursor must be a string",PM_MCP_ERROR_CODES.invalidParams,{field:"cursor"});if(params.limit!==void 0&&typeof params.limit!="number")throw new PmMcpProtocolError("Skills limit must be a number",PM_MCP_ERROR_CODES.invalidParams,{field:"limit"});return{...typeof params.cursor=="string"?{cursor:params.cursor}:{},...typeof params.limit=="number"?{limit:params.limit}:{}}}async function dispatchModernSkillMethod(request,requestContext){const directoryRead=request.method==="resources/directory/read";assertPmMcpSkillsCapability(requestContext,directoryRead);const params=asRecordClone(request.params),registry=await loadRequestSkillRegistry(request.params);let result;return request.method==="skills/list"?result={...registry.list(readSkillPageOptions(params))}:request.method==="skills/get"?result={skill:registry.get(readRequiredString(params,"uri"))}:result={...registry.readDirectory(readRequiredString(params,"uri"),readSkillPageOptions(params))},buildMcpCompleteResult(withMcpCachePolicy(result,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}function dispatchModernPromptMethod(request){const result=request.method==="prompts/list"?withMcpCachePolicy({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments})).sort((left,right)=>left.name.localeCompare(right.name))},PM_MCP_CACHE_POLICIES.prompts):renderWorkflowPrompt(request.params);return buildMcpCompleteResult(result,PM_MCP_SERVER_INFO)}async function dispatchModernMcpRequest(request,meta){const requestContext=resolveMcpRequestContext(request.params),clientInfo=readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);if(request.method==="server/discover")return buildMcpDiscoverResult({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS});if(request.method==="ping")throw new PmMcpProtocolError("MCP method not found: ping",-32601,{removedIn:PM_MCP_PROTOCOL_VERSION});if(PM_MCP_SKILL_METHODS.has(request.method??""))return dispatchModernSkillMethod(request,requestContext);if(request.method==="tasks/get"||request.method==="tasks/update"||request.method==="tasks/cancel")return dispatchMcpTaskMethod(request,requestContext);if(request.method==="tools/list"||request.method==="tools/call")return dispatchModernToolMethod(request,requestContext,clientInfo);if(request.method==="resources/list"||request.method==="resources/templates/list"||request.method==="resources/read")return dispatchModernResourceMethod(request,requestContext);if(request.method==="prompts/list"||request.method==="prompts/get")return dispatchModernPromptMethod(request);throw new PmMcpProtocolError(`MCP method not found: ${request.method??"(missing)"}`,-32601)}async function handleRequestInReproducibleContext(request){if(!(!request.id&&request.method?.startsWith("notifications/"))){if(hasMcpProtocolVersionMetadata(request)){const allowlist=(process.env.PM_MCP_BAGGAGE_ALLOWLIST??"").split(",").map(entry=>entry.trim()).filter(Boolean);return runWithMcpTraceContext(extractMcpTraceContext(request.params,{baggageAllowlist:allowlist}),()=>dispatchModernMcpRequest(request,request.params._meta))}return request.method==="initialize"?LEGACY_MCP_ADAPTER.initialize(request.params):LEGACY_MCP_ADAPTER.dispatch(request)}}function hasMcpProtocolVersionMetadata(request){const meta=isMcpRecord(request.params)?request.params._meta:void 0;return isMcpRecord(meta)&&Object.prototype.hasOwnProperty.call(meta,PM_MCP_META_KEYS.protocolVersion)}async function handleRequest(request){return runWithReproducibleProcessEnvironment(process.env,()=>handleRequestInReproducibleContext(request))}function writeResponse(id,payload){process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,result:payload})}
+`)}function writeError(id,error){const code=error instanceof PmMcpProtocolError?error.code:error instanceof PmCliError?error.exitCode:-32603,message=error instanceof Error?error.message:String(error),data=error instanceof PmMcpProtocolError?error.data:error instanceof PmCliError?error.context:void 0;process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,error:{code,message,data}})}
+`)}function writeToolCallErrorResponse(request,error){return request.method!=="tools/call"||error instanceof PmMcpProtocolError?!1:(writeResponse(request.id,buildMcpToolCallErrorResult(request,error)),!0)}async function handleStdioTransportControl(request){if(request.method==="subscriptions/listen")return await openMcpSubscription({request,sink:notification=>{process.stdout.write(`${JSON.stringify(notification)}
+`)}}),!0;if(request.method!=="notifications/cancelled")return!1;const requestId=request.params?.requestId;if(typeof requestId=="string"||typeof requestId=="number"){const result=closeMcpSubscription(requestId);result&&writeResponse(requestId,result)}return!0}async function processRpcLineWithHandler(line,requestHandler){if(line.trim().length===0)return;let request;try{request=JSON.parse(line)}catch(error){const message=error instanceof Error?error.message:String(error);writeError(null,new PmCliError(`Parse error: ${message}`,-32700));return}if(typeof request!="object"||request===null||Array.isArray(request)){writeError(null,new PmCliError("Invalid JSON-RPC request: expected an object",-32600));return}const shouldRespond=Object.prototype.hasOwnProperty.call(request,"id");try{if(await handleStdioTransportControl(request))return;const result=await requestHandler(request);shouldRespond&&result!==void 0&&writeResponse(request.id,result)}catch(error){if(!shouldRespond)return;writeToolCallErrorResponse(request,error)||writeError(request.id,error)}}async function processRpcLine(line){await processRpcLineWithHandler(line,handleRequest)}function startMcpServer(){const rl=readline.createInterface({input:process.stdin,crlfDelay:1/0}),queue=createSerialQueue();let processLine;try{const runInProcessContext=createReproducibleProcessRunner(process.env);processLine=line=>runInProcessContext(()=>processRpcLineWithHandler(line,handleRequestInReproducibleContext))}catch{processLine=processRpcLine}rl.on("line",line=>{queue.enqueue(()=>processLine(line))}),rl.on("close",()=>{queue.enqueue(()=>{for(const closed of closeStdioMcpSubscriptions())writeResponse(closed.id,closed.result)})})}function isInvokedAsMcpMainModule(argvPath,moduleUrl){if(!argvPath)return!1;const selfPath=fileURLToPath(moduleUrl);if(argvPath===selfPath)return!0;try{return realpathSync(argvPath)===realpathSync(selfPath)}catch{return!1}}function readRuntimeTestHook(key){const runtimeTestHooks=globalThis.__pmCliActionRunnerTestHooks;if(runtimeTestHooks===void 0)throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`,64);return runtimeTestHooks[key]}const _testOnly={boundMcpClientProvenance,createMcpInputRequiredError:input=>new PmMcpInputRequiredError(input),createMcpProtocolError:(...input)=>new PmMcpProtocolError(...input),get closeManyOptionsFromFlat(){return readRuntimeTestHook("closeManyOptionsFromFlat")},detectUnexpectedOptionKeys,detectUnexpectedTopLevelKeys,collectMutationGuardWarnings,closeStdioMcpSubscriptions,errorContent,emitMcpChangeNotifications,expireMcpSubscriptionRecord:(id,key=id)=>PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),getMcpClientInfo:()=>LEGACY_MCP_ADAPTER.getClientInfo(),get extensionOptionsFromArgs(){return readRuntimeTestHook("extensionOptionsFromArgs")},get globalOptions(){return readRuntimeTestHook("globalOptions")},get mutationListOptions(){return readRuntimeTestHook("mutationListOptions")},nearestDeclaredKey,mcpTaskPrincipal,resultContent,resolveMcpRequestContext,shouldCreateMcpTask,settleMcpTaskExecution,subscriptionCount:()=>PM_MCP_SUBSCRIPTIONS.size,get normalizeActionName(){return readRuntimeTestHook("normalizeActionName")},get normalizeCommandPath(){return readRuntimeTestHook("normalizeCommandPath")},get normalizeMcpOptionsArrays(){return readRuntimeTestHook("normalizeMcpOptionsArrays")},get normalizeMcpUpdateOptions(){return readRuntimeTestHook("normalizeMcpUpdateOptions")},get optionsWithAuthor(){return readRuntimeTestHook("optionsWithAuthor")},get readRequiredString(){return readRuntimeTestHook("readRequiredString")},get readScalarString(){return readRuntimeTestHook("readScalarString")},get readScalarStringAllowBlank(){return readRuntimeTestHook("readScalarStringAllowBlank")},get readStringArray(){return readRuntimeTestHook("readStringArray")},runAction:runMcpAction,get updateManyOptionsFromFlat(){return readRuntimeTestHook("updateManyOptionsFromFlat")},get withAddNoteOption(){return readRuntimeTestHook("withAddNoteOption")},get withFilesDiscoveryOptions(){return readRuntimeTestHook("withFilesDiscoveryOptions")},get withMutationCompaction(){return readRuntimeTestHook("withMutationCompaction")},writeError};isInvokedAsMcpMainModule(process.argv[1],import.meta.url)&&startMcpServer();export{_testOnly,buildMcpToolCallErrorResult,closeMcpSubscription,handleRequest,isInvokedAsMcpMainModule,openMcpSubscription,processRpcLine,resolveMcpToolSchemaForRequest,startMcpServer};
 //# sourceMappingURL=server.js.map

package/dist/mcp/tool-definitions.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1979adcd-4a7f-5dc7-b5dd-6bfc15eed1af")}catch(e2){}})();import{WORKFLOW_POLICY_ACTIONS,GRAPH_SUBCOMMAND_VALUES,PM_DISCOVERABLE_TOOL_ACTIONS}from"../sdk/cli-contracts/enum-contracts.js";import{buildPmActionToolInputSchema}from"../sdk/cli-contracts/tool-schema.js";import{RUNTIME_STATUS_ROLE_VALUES}from"../types.js";const CANONICAL_OUTPUT_SESSION_TOOL_PROPERTY=buildPmActionToolInputSchema("list").properties.outputSession;const READ_OUTPUT_TOOL_PROPERTIES={outputInclude:{type:"string",minLength:1,description:"Comma-separated fields or sections retained by any built-in read action."},outputLimit:{anyOf:[{type:"integer",minimum:1},{const:"unbounded"}],description:"Universal read row ceiling, or unbounded to disable the shared ceiling."},outputBudget:{anyOf:[{type:"integer",minimum:1},{const:"unbounded"}],description:"Universal estimated-token ceiling, or unbounded to return the complete read result."},outputFormat:{type:"string",enum:["json","toon"],description:"Universal read-result encoding selector."},outputSession:{...CANONICAL_OUTPUT_SESSION_TOOL_PROPERTY},outputCursor:{type:"string",minLength:1,description:"Opaque continuation cursor returned after budget compaction of a declared row collection."}};const workflowPolicyOptionProperties={definition:{anyOf:[{type:"object"},{type:"string"}],description:"Policy declaration for policy-put, or proposed metadata for policy-check; structured JSON or JSON text."},policy:{type:"string",description:"Approval policy id for policy-approve."},message:{type:"string",description:"History explanation for policy mutations and approvals."},dryRun:{type:"boolean",description:"Preview registry changes without writing; policy-approve rejects previews."}};const TOOL_SCHEMA_BASE={type:"object",properties:{cwd:{type:"string",description:"Workspace directory to run the native pm operation in. Defaults to the MCP server process cwd."},path:{type:"string",description:"Optional pm data root, equivalent to PM_PATH/global --path. Leave unset for real repository tracking."},author:{type:"string",description:"Optional mutation author override. Otherwise pm uses PM_AUTHOR, project settings, or detected harness identity."},tokenAccounting:{type:"boolean",description:"Attach the same bounded per-section token-cost receipt emitted by CLI --token-accounting."}},additionalProperties:true};const idSchema={type:"string",description:"pm item id, for example pm-abc1."};const PM_RUN_ACTION_DESCRIPTION=`Operation name (one of): ${PM_DISCOVERABLE_TOOL_ACTIONS.join(", ")}. Package-owned actions are available dynamically when their provider package is installed.`;const LIST_TOP_LEVEL_OPTION_PROPERTIES={status:{type:"string",description:"Alias for options.status."},type:{type:"string",description:"Alias for options.type."},tag:{type:"string",description:"Alias for options.tag."},priority:{type:"string",description:"Alias for options.priority."},limit:{type:["string","number"],description:"Alias for options.limit."},offset:{type:["string","number"],description:"Alias for options.offset."}};const SEARCH_TOP_LEVEL_OPTION_PROPERTIES={mode:{type:"string",description:"Alias for options.mode."},status:{type:"string",description:"Alias for options.status."},type:{type:"string",description:"Alias for options.type."},tag:{type:"string",description:"Alias for options.tag."},priority:{type:"string",description:"Alias for options.priority."},limit:{type:["string","number"],description:"Alias for options.limit."}};function objectSchema(properties,required=[]){return{...TOOL_SCHEMA_BASE,properties:{...TOOL_SCHEMA_BASE.properties,...properties},required}}const RAW_TOOLS=[{name:"pm_run",description:"Run any supported pm operation natively through the pm library. Use this for commands not covered by narrower pm_* tools.",inputSchema:objectSchema({action:{type:"string",enum:[...PM_DISCOVERABLE_TOOL_ACTIONS],description:PM_RUN_ACTION_DESCRIPTION},id:idSchema,query:{type:"string",description:"Search query for action=search."},reason:{type:"string",description:"Close reason for action=close."},force:{type:"boolean",description:"Force ownership/terminal-state override when supported."},subcommand:{type:"string",description:"Subcommand selector for actions that take one (for example telemetry, or schema \u2014 prefer the dedicated pm_schema tool for schema operations)."},options:{type:"object",description:"Underlying pm command options using camelCase keys."},fullChangedFields:{type:"boolean",description:"For mutation actions, return the full changed_fields array instead of the default changed_field_count."},idOnly:{type:"boolean",description:"For single-item mutation actions, return only id and status."},...READ_OUTPUT_TOOL_PROPERTIES},["action"])},{name:"pm_discover",description:"Discover the smallest relevant authorized pm tool catalog under an explicit token budget. Ranking is deterministic and returns public lexical, semantic, graph, permission, freshness, and usage signal explanations. Continue with next_cursor; set includeSchema=true only when complete input schemas are needed.",inputSchema:objectSchema({query:{type:"string",maxLength:4096,description:"Free-text capability intent. Empty text lists by stable policy order."},family:{type:"string",enum:["workspace","intake","context","lifecycle","evidence","graph","quality","automation","extensions","internal"],description:"Optional stable capability-family filter."},tier:{type:"string",enum:["core","standard","full"],description:"Maximum command visibility tier included in results."},limit:{type:"integer",minimum:1,maximum:100,description:"Maximum result rows; defaults to 10."},cursor:{type:"string",minLength:1,maxLength:4096,description:"Opaque next_cursor from an equivalent discovery request."},includeSchema:{type:"boolean",description:"Include complete tool input schemas; false by default."},outputBudget:{anyOf:[{type:"integer",minimum:128},{const:"unbounded"}],description:"Estimated-token ceiling; defaults to 1200."}})},{name:"pm_context",description:"Return the agent-oriented project context snapshot. Pass options.depth=brief|standard|deep|full (full = every section with no per-section row cap), options.parent='<id>' to scope the snapshot to one item's subtree (the item plus all descendants), options.fields='id,title,priority' to project focus rows to a field subset for low-token reads, or options.section=['hierarchy','progress',...] to pick sections.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_next",description:"Recommend the next actionable work item: the single highest-priority READY item (active status, no open blockers, no open children; completed containers surface only when no concrete leaf work is ready) plus the ranked ready and blocked queues. The recommended item carries a rationale and each blocked item lists the open blockers gating it. Pass options.parent='<id>' to scope to one subtree, options.limit=N to cap ready rows, options.readyOnly=true to omit the blocked list, or filters (options.type/tag/priority/assignee/sprint/release). The most token-efficient 'what should I do now?' read for agents.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_search",description:"Search pm items with keyword, semantic, or hybrid search. Defaults to a compact projection for token efficiency. Pass options.mode=keyword|semantic|hybrid (default follows search.default_mode: auto runs hybrid when semantic search is configured and runnable, else keyword; the result reports mode_source), options.limit=N to cap hits, options.status='all' for no lifecycle restriction, options.fields='id,title,score' for a custom projection, or options.full=true for full item bodies (can be large). The result echoes the applied filters and projection mode in query_summary.",inputSchema:objectSchema({query:{type:"string"},options:{type:"object"},...SEARCH_TOP_LEVEL_OPTION_PROPERTIES},["query"])},{name:"pm_list",description:"List pm items with status/type/tag/priority filters. Defaults to compact projection for token efficiency. options.status accepts CSV (all,open,in_progress). Pass options.compact=false or options.includeBody=true for full bodies/comments. Pass options.brief=true for ultra-terse (id/status/type/title only). Pass options.fields='id,title,priority' for custom projection. Pass options.limit=N to cap row count. The result echoes the applied filters and projection mode in query_summary.",inputSchema:objectSchema({options:{type:"object"},...LIST_TOP_LEVEL_OPTION_PROPERTIES})},{name:"pm_get",description:"Read one pm item with shared SDK projections. Pass options.depth='brief' or options.fields='id,title,status' for low-token inspection, options.fields='id,schedule.start_at' for schedule context, or options.at='7' / an ISO timestamp for a verified mutation-free historical read. Parent results include bounded child counts, samples, and continuation metadata.",inputSchema:objectSchema({id:idSchema,options:{type:"object",description:"Get options such as depth=brief|standard|deep|full, fields=id,title,status, or at=<version|ISO timestamp>."}},["id"])},{name:"pm_events",description:"Read a bounded, cursor-resumable page of committed mutation events across item history streams. Batch cursors are the token-efficient default; pass cursorMode=row for per-event checkpoints.",inputSchema:objectSchema({since:{type:"string",description:"Durable event cursor or ISO timestamp lower bound."},type:{anyOf:[{type:"string"},{type:"array",items:{type:"string"}}]},author:{anyOf:[{type:"string"},{type:"array",items:{type:"string"}}]},item:{anyOf:[{type:"string"},{type:"array",items:{type:"string"}}]},limit:{type:"integer",minimum:0,maximum:1e3},full:{type:"boolean"},cursorMode:{type:"string",enum:["batch","row"],description:"Cursor framing: batch returns one terminal next_cursor (default); row also adds a cursor to every event."}})},{name:"pm_create",description:"Create a pm item natively and write pm history. Output is compact by default (changed_fields replaced with changed_field_count for token efficiency); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},allowMissingParent:{type:"boolean",description:"Allow unresolved parent references and emit a validation warning."},allowDuplicate:{type:"boolean",description:"Explicitly create when strict similarity governance finds likely duplicates."},options:{type:"object",description:"Create options. title and description are required."}},["options"])},{name:"pm_mutate",description:"Apply an ordered create/update/close/release batch atomically through the public pm SDK. Create rows may declare ref and omit id; @ref forward references resolve deterministically from the stable transactionId. Set dryRun=true to validate and preview without writes.",inputSchema:objectSchema({transactionId:{type:"string",description:"Stable idempotency key for this atomic mutation batch."},mutations:{type:"array",minItems:1,description:"Ordered rows shaped as {op:create|update|close|release,id?,ref?,options?,reason?}.",items:{type:"object",properties:{op:{type:"string",enum:["create","update","close","release"]},id:idSchema,ref:{type:"string",description:"Batch-local create alias; its deterministic id can be referenced as @alias by any row."},reason:{type:"string"},options:{type:"object"}},required:["op"],additionalProperties:false}},dryRun:{type:"boolean",description:"Validate and preview without writing."},createCompensation:{type:"string",enum:["close","delete"],description:"How a failed batch compensates created items; defaults to close."},lockTtlSeconds:{type:"number"},lockWaitMs:{type:"number"}},["transactionId","mutations"])},{name:"pm_copy",description:"Copy an existing pm item into a new id while resetting lifecycle fields. Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({id:idSchema,fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},idOnly:{type:"boolean",description:"Return only id and status."},options:{type:"object",description:"Copy options such as title override, author, and message."}},["id"])},{name:"pm_focus",description:"Set, clear, or show the session focused item. When focused, pm_create defaults its parent to the focused item (an explicit parent still overrides). Pass id to focus an item, options.clear=true to clear, or neither to show current focus.",inputSchema:objectSchema({id:idSchema,clear:{type:"boolean",description:"Clear the focused item (cannot be combined with id)."},options:{type:"object",description:"Focus options such as clear (boolean)."}},[])},{name:"pm_update",description:"Update pm item metadata/body/dependencies/log seeds natively. Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields delta.",inputSchema:objectSchema({id:idSchema,fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},options:{type:"object"}},["id","options"])},{name:"pm_append",description:"Append markdown text to a pm item body and write pm history. Useful for seeding evidence/log entries before close. Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({id:idSchema,body:{type:"string",description:"Markdown text to append to the item body. Required here or as options.body."},fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},options:{type:"object",description:"Append options such as body, author, and message."}},["id"])},{name:"pm_claim",description:"Claim a pm item.",inputSchema:objectSchema({id:idSchema,force:{type:"boolean"},options:{type:"object"}},["id"])},{name:"pm_release",description:"Release a pm item claim.",inputSchema:objectSchema({id:idSchema,force:{type:"boolean"},options:{type:"object"}},["id"])},{name:"pm_close",description:"Close a pm item with optional close reason and optional close validation (reason requirement follows governance settings). Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({id:idSchema,reason:{type:"string",description:"Close reason text when provided or required by governance settings."},duplicateOf:{type:"string",description:"Canonical item id when closing this item as a duplicate."},fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},idOnly:{type:"boolean",description:"Return only id and status."},options:{type:"object"}},["id"])},{name:"pm_comments",description:"List, add, edit, or delete comments on a pm item. Use options.add to append, options.edit=<1-based index> with replacement text to fix a comment, or options.delete=<1-based index> to remove one. options.ifAbsent applies only to options.add for retry-safe author-and-text deduplication and cannot combine with options.edit or options.delete. List calls default to the most recent 20 comments with total_count/has_more metadata for token efficiency. Pass options.limit=N to choose a page size, options.limit=0 for summary-only metadata, or options.full=true for full history.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_files",description:"List, add, remove, or validate linked files for a pm item.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_docs",description:"List, add, or remove linked docs for a pm item.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_notes",description:"List, add, edit, or delete structured notes on a pm item. options.ifAbsent applies only to options.add for retry-safe author-and-text deduplication and cannot combine with options.edit or options.delete. Omit mutation options to list existing notes.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_learnings",description:"List, add, edit, or delete learnings on a pm item. options.ifAbsent applies only to options.add for retry-safe author-and-text deduplication and cannot combine with options.edit or options.delete. Omit mutation options to list existing learnings.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_deps",description:"Read dependency trees/graphs or one bounded explainable relationship context packet. Use options.format=context with direction, kind, depth, node, edge, token, and cursor bounds; context returns a counts-first summary, per-node roles/reasons, root evidence pointers, and enumerated missing references.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_graph",description:"Run bounded workspace relationship-graph queries: ancestors/descendants (hierarchy), predecessors/successors (ordering), paths, impact (blast radius), analyze (execution + knowledge analytics), audit (governance findings with change-since-baseline deltas), communities (label-propagation clusters), redundancy (transitively implied edges), dominators (structural bottlenecks), slack (critical-path method float per task), centrality (betweenness/closeness/degree with directed fan-in/out), articulation (cut points and bridges \u2014 single points of failure), plan (dry-run remediation proposals derived from the audit), and index (durable cross-process graph index status/rebuild/clear). Traversals, paths, impact, and dominators require id; paths also requires target. Options support kind, maxDepth, limit, after, direction, maxPaths, sample, exemptIsolate, exemptIsolateType, saveBaseline (audit), rebuild/clear (index), and counts-first summary.",inputSchema:objectSchema({subcommand:{type:"string",enum:[...GRAPH_SUBCOMMAND_VALUES]},id:idSchema,target:idSchema,options:{type:"object"}},["subcommand"])},{name:"pm_test",description:"List, add, remove, or run linked tests for a pm item.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_validate",description:"Run pm validation checks.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_health",description:"Run pm health diagnostics. Pass options.brief=true for compact low-token details, options.skipIntegrity=true, options.skipDrift=true, options.skipVectors=true for a fast status-only check, or options.full=true for the complete deep check.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_contracts",description:"Inspect pm command, flag, schema, and availability contracts.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_schema",description:"Inspect or modify the workspace item-type/status/field schema (pm schema). subcommand selects the operation; name carries the item type name (show/add-type/remove-type), status id (show-status/add-status/remove-status), or field key (show-field/add-field/remove-field). apply-preset adopts a domain type preset; add-type with infer=true derives types from title-prefix conventions. Policy verbs author declarations, preview changes, set enforcement, and record content-bound approvals. Registry mutations write workspace history; approvals write item history.",inputSchema:objectSchema({...workflowPolicyOptionProperties,subcommand:{type:"string",enum:["list","show","show-status","add-type","remove-type","add-status","remove-status","add-field","remove-field","list-fields","show-field","apply-preset",...WORKFLOW_POLICY_ACTIONS],description:"Schema subcommand to run."},name:{type:"string",description:"Item type name, status id, field key, policy id, or item id for the selected schema verb; policy-mode requires advise|refuse."},description:{type:"string",description:"Custom item type, status, or field description for add-type/add-status/add-field."},defaultStatus:{type:"string",description:"Default status for add-type."},folder:{type:"string",description:"Storage folder for add-type."},alias:{type:"array",items:{type:"string"},description:"Aliases for add-type/add-status, or extra CLI flag aliases for add-field."},role:{type:"array",items:{type:"string",enum:[...RUNTIME_STATUS_ROLE_VALUES]},description:`Lifecycle roles for add-status: ${RUNTIME_STATUS_ROLE_VALUES.join(", ")}.`},order:{type:"number",description:"Display/sort order for add-status."},fieldType:{type:"string",enum:["string","number","boolean","string_array"],description:"Value type for a custom field (add-field)."},commands:{type:"array",items:{type:"string"},description:"Commands a custom field is wired onto (add-field): create, update, update_many, list, search, calendar, context."},cliFlag:{type:"string",description:"Override the auto-derived CLI flag for a custom field (add-field)."},required:{type:"boolean",description:"Mark a custom field as always required (add-field)."},requiredOnCreate:{type:"boolean",description:"Mark a custom field as required at create time (add-field)."},allowUnset:{type:"boolean",description:"Whether a custom field may be cleared via --unset (add-field); defaults to true."},requiredTypes:{type:"array",items:{type:"string"},description:"Restrict a custom field's requirement to specific item types (add-field)."},typePreset:{type:"string",enum:["agile","ops","research"],description:"Domain type preset to adopt (apply-preset)."},infer:{type:"boolean",description:"Infer item types from title-prefix conventions (add-type); previews unless apply is true."},minCount:{type:"number",description:"Minimum items sharing a prefix for add-type inference (default 10)."},apply:{type:"boolean",description:"Register inferred types (add-type infer); without it the call previews only."},force:{type:"boolean",description:"Override removal guardrails for destructive schema changes when supported."},options:{type:"object",description:"Additional schema options using camelCase keys.",properties:workflowPolicyOptionProperties}},["subcommand"])},{name:"pm_profile",description:"List, show, apply, or lint project profiles (pm profile) \u2014 archetype bundles that stage item types, statuses, fields, per-type workflows, config knobs, create templates, and recommended packages. subcommand selects the operation; name carries the profile name (agile, ops, research) for show/apply/lint. apply stages every dimension idempotently; dryRun previews the diff without writing; lint reports author-time consistency findings (graded error/warning) without touching the tracker. Profile staging writes workspace config/schema files, not item history.",inputSchema:objectSchema({subcommand:{type:"string",enum:["list","show","apply","lint"],description:"Profile subcommand to run."},name:{type:"string",description:"Profile name for show/apply/lint. Required for those subcommands. Built-ins are agile, ops, and research; an active extension can contribute additional archetype names that resolve here too."},dryRun:{type:"boolean",description:"Preview the apply diff without writing any files (apply)."},author:{type:"string",description:"Mutation author for apply."},force:{type:"boolean",description:"Force ownership/lock override for apply."},options:{type:"object",description:"Additional profile options using camelCase keys."}},["subcommand"])},{name:"pm_config",description:"Read or write pm workspace configuration (pm config). configAction selects get/set/list/export; key/value address a single setting for get/set. scope chooses the project (default) or global settings file.",inputSchema:objectSchema({configAction:{type:"string",enum:["get","set","list","export"],description:"Config operation to perform. get/set require key; list/export dump the resolved settings surface."},key:{type:"string",description:"Settings key for get/set, for example governance-require-close-reason, telemetry-tracking, or a nested leaf such as search_provider (dash and underscore variants accepted; configAction=get without a key lists supported keys in the error)."},value:{type:"string",description:"New value for configAction=set."},scope:{type:"string",enum:["project","global"],description:"Settings scope to read or write. Defaults to project."},options:{type:"object",description:"Additional config options such as criterion, clearCriteria, format, or policy."}},["configAction"])},{name:"pm_plan",description:"Run agent-optimized Plan workflows. options.subcommand selects: create|show|add-step|update-step|complete-step|block-step|reorder-step|remove-step|link|unlink|decision|discovery|validation|resume|approve|materialize. Provide id for all non-create subcommands; provide stepRef for step lifecycle subcommands. Plans store agent-readable steps with dependencies, decisions, discoveries, validation, and resume context.",inputSchema:objectSchema({id:{type:"string",description:"Plan id (required for all subcommands except create)."},stepRef:{type:"string",description:"Step id or order for step lifecycle subcommands."},options:{type:"object",description:"Plan options including subcommand, stepRef, stepStatus, link, depth, etc."}})}];const NARROW_TOOL_ACTIONS={pm_append:"append",pm_claim:"claim",pm_close:"close",pm_comments:"comments",pm_config:"config",pm_context:"context",pm_contracts:"contracts",pm_copy:"copy",pm_create:"create",pm_deps:"deps",pm_docs:"docs",pm_events:"events",pm_files:"files",pm_focus:"focus",pm_get:"get",pm_graph:"graph",pm_health:"health",pm_learnings:"learnings",pm_list:"list",pm_next:"next",pm_notes:"notes",pm_plan:"plan",pm_profile:"profile",pm_release:"release",pm_schema:"schema",pm_search:"search",pm_test:"test",pm_update:"update",pm_validate:"validate"};const TOOLS=RAW_TOOLS.map(tool=>{const action=NARROW_TOOL_ACTIONS[tool.name];if(!action)return tool;const properties=tool.inputSchema.properties;const required=tool.inputSchema.required.map(String);return{...tool,inputSchema:buildPmActionToolInputSchema(action,{properties,required})}});function buildMcpToolContracts(){return TOOLS.map(tool=>{const schemaRequired=tool.inputSchema["required"];const required=Array.isArray(schemaRequired)?schemaRequired.map(entry=>String(entry)).sort((left,right)=>left.localeCompare(right)):[];return{name:tool.name,description:tool.description,required,input_schema:tool.inputSchema}}).sort((left,right)=>left.name.localeCompare(right.name))}export{NARROW_TOOL_ACTIONS,TOOLS,TOOL_SCHEMA_BASE,buildMcpToolContracts};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="73dbe40e-f7a2-5aca-85aa-a5775e5e981a")}catch{}})();import{WORKFLOW_POLICY_ACTIONS,GRAPH_SUBCOMMAND_VALUES,PM_DISCOVERABLE_TOOL_ACTIONS}from"../sdk/cli-contracts/enum-contracts.js";import{buildPmActionToolInputSchema}from"../sdk/cli-contracts/tool-schema.js";import{RUNTIME_STATUS_ROLE_VALUES}from"../types.js";const CANONICAL_OUTPUT_SESSION_TOOL_PROPERTY=buildPmActionToolInputSchema("list").properties.outputSession,READ_OUTPUT_TOOL_PROPERTIES={outputInclude:{type:"string",minLength:1,description:"Comma-separated fields or sections retained by any built-in read action."},outputLimit:{anyOf:[{type:"integer",minimum:1},{const:"unbounded"}],description:"Universal read row ceiling, or unbounded to disable the shared ceiling."},outputBudget:{anyOf:[{type:"integer",minimum:1},{const:"unbounded"}],description:"Universal estimated-token ceiling, or unbounded to return the complete read result."},outputFormat:{type:"string",enum:["json","toon"],description:"Universal read-result encoding selector."},outputSession:{...CANONICAL_OUTPUT_SESSION_TOOL_PROPERTY},outputCursor:{type:"string",minLength:1,description:"Opaque continuation cursor returned after budget compaction of a declared row collection."}},workflowPolicyOptionProperties={definition:{anyOf:[{type:"object"},{type:"string"}],description:"Policy declaration for policy-put, or proposed metadata for policy-check; structured JSON or JSON text."},policy:{type:"string",description:"Approval policy id for policy-approve."},message:{type:"string",description:"History explanation for policy mutations and approvals."},dryRun:{type:"boolean",description:"Preview registry changes without writing; policy-approve rejects previews."}},TOOL_SCHEMA_BASE={type:"object",properties:{cwd:{type:"string",description:"Workspace directory to run the native pm operation in. Defaults to the MCP server process cwd."},path:{type:"string",description:"Optional pm data root, equivalent to PM_PATH/global --path. Leave unset for real repository tracking."},author:{type:"string",description:"Optional mutation author override. Otherwise pm uses PM_AUTHOR, project settings, or detected harness identity."},tokenAccounting:{type:"boolean",description:"Attach the same bounded per-section token-cost receipt emitted by CLI --token-accounting."}},additionalProperties:!0},idSchema={type:"string",description:"pm item id, for example pm-abc1."},PM_RUN_ACTION_DESCRIPTION=`Operation name (one of): ${PM_DISCOVERABLE_TOOL_ACTIONS.join(", ")}. Package-owned actions are available dynamically when their provider package is installed.`,LIST_TOP_LEVEL_OPTION_PROPERTIES={status:{type:"string",description:"Alias for options.status."},type:{type:"string",description:"Alias for options.type."},tag:{type:"string",description:"Alias for options.tag."},priority:{type:"string",description:"Alias for options.priority."},limit:{type:["string","number"],description:"Alias for options.limit."},offset:{type:["string","number"],description:"Alias for options.offset."}},SEARCH_TOP_LEVEL_OPTION_PROPERTIES={mode:{type:"string",description:"Alias for options.mode."},status:{type:"string",description:"Alias for options.status."},type:{type:"string",description:"Alias for options.type."},tag:{type:"string",description:"Alias for options.tag."},priority:{type:"string",description:"Alias for options.priority."},limit:{type:["string","number"],description:"Alias for options.limit."}};function objectSchema(properties,required=[]){return{...TOOL_SCHEMA_BASE,properties:{...TOOL_SCHEMA_BASE.properties,...properties},required}}const RAW_TOOLS=[{name:"pm_run",description:"Run any supported pm operation natively through the pm library. Use this for commands not covered by narrower pm_* tools.",inputSchema:objectSchema({action:{type:"string",enum:[...PM_DISCOVERABLE_TOOL_ACTIONS],description:PM_RUN_ACTION_DESCRIPTION},id:idSchema,query:{type:"string",description:"Search query for action=search."},reason:{type:"string",description:"Close reason for action=close."},force:{type:"boolean",description:"Force ownership/terminal-state override when supported."},subcommand:{type:"string",description:"Subcommand selector for actions that take one (for example telemetry, or schema \u2014 prefer the dedicated pm_schema tool for schema operations)."},options:{type:"object",description:"Underlying pm command options using camelCase keys."},fullChangedFields:{type:"boolean",description:"For mutation actions, return the full changed_fields array instead of the default changed_field_count."},idOnly:{type:"boolean",description:"For single-item mutation actions, return only id and status."},...READ_OUTPUT_TOOL_PROPERTIES},["action"])},{name:"pm_discover",description:"Discover the smallest relevant authorized pm tool catalog under an explicit token budget. Ranking is deterministic and returns public lexical, semantic, graph, permission, freshness, and usage signal explanations. Continue with next_cursor; set includeSchema=true only when complete input schemas are needed.",inputSchema:objectSchema({query:{type:"string",maxLength:4096,description:"Free-text capability intent. Empty text lists by stable policy order."},family:{type:"string",enum:["workspace","intake","context","lifecycle","evidence","graph","quality","automation","extensions","internal"],description:"Optional stable capability-family filter."},tier:{type:"string",enum:["core","standard","full"],description:"Maximum command visibility tier included in results."},limit:{type:"integer",minimum:1,maximum:100,description:"Maximum result rows; defaults to 10."},cursor:{type:"string",minLength:1,maxLength:4096,description:"Opaque next_cursor from an equivalent discovery request."},includeSchema:{type:"boolean",description:"Include complete tool input schemas; false by default."},outputBudget:{anyOf:[{type:"integer",minimum:128},{const:"unbounded"}],description:"Estimated-token ceiling; defaults to 1200."}})},{name:"pm_context",description:"Return the agent-oriented project context snapshot. Pass options.depth=brief|standard|deep|full (full = every section with no per-section row cap), options.parent='<id>' to scope the snapshot to one item's subtree (the item plus all descendants), options.fields='id,title,priority' to project focus rows to a field subset for low-token reads, or options.section=['hierarchy','progress',...] to pick sections.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_next",description:"Recommend the next actionable work item: the single highest-priority READY item (active status, no open blockers, no open children; completed containers surface only when no concrete leaf work is ready) plus the ranked ready and blocked queues. The recommended item carries a rationale and each blocked item lists the open blockers gating it. Pass options.parent='<id>' to scope to one subtree, options.limit=N to cap ready rows, options.readyOnly=true to omit the blocked list, or filters (options.type/tag/priority/assignee/sprint/release). The most token-efficient 'what should I do now?' read for agents.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_search",description:"Search pm items with keyword, semantic, or hybrid search. Defaults to a compact projection for token efficiency. Pass options.mode=keyword|semantic|hybrid (default follows search.default_mode: auto runs hybrid when semantic search is configured and runnable, else keyword; the result reports mode_source), options.limit=N to cap hits, options.status='all' for no lifecycle restriction, options.fields='id,title,score' for a custom projection, or options.full=true for full item bodies (can be large). The result echoes the applied filters and projection mode in query_summary.",inputSchema:objectSchema({query:{type:"string"},options:{type:"object"},...SEARCH_TOP_LEVEL_OPTION_PROPERTIES},["query"])},{name:"pm_list",description:"List pm items with status/type/tag/priority filters. Defaults to compact projection for token efficiency. options.status accepts CSV (all,open,in_progress). Pass options.compact=false or options.includeBody=true for full bodies/comments. Pass options.brief=true for ultra-terse (id/status/type/title only). Pass options.fields='id,title,priority' for custom projection. Pass options.limit=N to cap row count. The result echoes the applied filters and projection mode in query_summary.",inputSchema:objectSchema({options:{type:"object"},...LIST_TOP_LEVEL_OPTION_PROPERTIES})},{name:"pm_get",description:"Read one pm item with shared SDK projections. Pass options.depth='brief' or options.fields='id,title,status' for low-token inspection, options.fields='id,schedule.start_at' for schedule context, or options.at='7' / an ISO timestamp for a verified mutation-free historical read. Parent results include bounded child counts, samples, and continuation metadata.",inputSchema:objectSchema({id:idSchema,options:{type:"object",description:"Get options such as depth=brief|standard|deep|full, fields=id,title,status, or at=<version|ISO timestamp>."}},["id"])},{name:"pm_events",description:"Read a bounded, cursor-resumable page of committed mutation events across item history streams. Batch cursors are the token-efficient default; pass cursorMode=row for per-event checkpoints.",inputSchema:objectSchema({since:{type:"string",description:"Durable event cursor or ISO timestamp lower bound."},type:{anyOf:[{type:"string"},{type:"array",items:{type:"string"}}]},author:{anyOf:[{type:"string"},{type:"array",items:{type:"string"}}]},item:{anyOf:[{type:"string"},{type:"array",items:{type:"string"}}]},limit:{type:"integer",minimum:0,maximum:1e3},full:{type:"boolean"},cursorMode:{type:"string",enum:["batch","row"],description:"Cursor framing: batch returns one terminal next_cursor (default); row also adds a cursor to every event."}})},{name:"pm_create",description:"Create a pm item natively and write pm history. Output is compact by default (changed_fields replaced with changed_field_count for token efficiency); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},allowMissingParent:{type:"boolean",description:"Allow unresolved parent references and emit a validation warning."},allowDuplicate:{type:"boolean",description:"Explicitly create when strict similarity governance finds likely duplicates."},options:{type:"object",description:"Create options. title and description are required."}},["options"])},{name:"pm_mutate",description:"Apply an ordered create/update/close/release batch atomically through the public pm SDK. Create rows may declare ref and omit id; @ref forward references resolve deterministically from the stable transactionId. Set dryRun=true to validate and preview without writes.",inputSchema:objectSchema({transactionId:{type:"string",description:"Stable idempotency key for this atomic mutation batch."},mutations:{type:"array",minItems:1,description:"Ordered rows shaped as {op:create|update|close|release,id?,ref?,options?,reason?}.",items:{type:"object",properties:{op:{type:"string",enum:["create","update","close","release"]},id:idSchema,ref:{type:"string",description:"Batch-local create alias; its deterministic id can be referenced as @alias by any row."},reason:{type:"string"},options:{type:"object"}},required:["op"],additionalProperties:!1}},dryRun:{type:"boolean",description:"Validate and preview without writing."},createCompensation:{type:"string",enum:["close","delete"],description:"How a failed batch compensates created items; defaults to close."},lockTtlSeconds:{type:"number"},lockWaitMs:{type:"number"}},["transactionId","mutations"])},{name:"pm_copy",description:"Copy an existing pm item into a new id while resetting lifecycle fields. Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({id:idSchema,fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},idOnly:{type:"boolean",description:"Return only id and status."},options:{type:"object",description:"Copy options such as title override, author, and message."}},["id"])},{name:"pm_focus",description:"Set, clear, or show the session focused item. When focused, pm_create defaults its parent to the focused item (an explicit parent still overrides). Pass id to focus an item, options.clear=true to clear, or neither to show current focus.",inputSchema:objectSchema({id:idSchema,clear:{type:"boolean",description:"Clear the focused item (cannot be combined with id)."},options:{type:"object",description:"Focus options such as clear (boolean)."}},[])},{name:"pm_update",description:"Update pm item metadata/body/dependencies/log seeds natively. Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields delta.",inputSchema:objectSchema({id:idSchema,fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},options:{type:"object"}},["id","options"])},{name:"pm_append",description:"Append markdown text to a pm item body and write pm history. Useful for seeding evidence/log entries before close. Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({id:idSchema,body:{type:"string",description:"Markdown text to append to the item body. Required here or as options.body."},fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},options:{type:"object",description:"Append options such as body, author, and message."}},["id"])},{name:"pm_claim",description:"Claim a pm item.",inputSchema:objectSchema({id:idSchema,force:{type:"boolean"},options:{type:"object"}},["id"])},{name:"pm_release",description:"Release a pm item claim.",inputSchema:objectSchema({id:idSchema,force:{type:"boolean"},options:{type:"object"}},["id"])},{name:"pm_close",description:"Close a pm item with optional close reason and optional close validation (reason requirement follows governance settings). Output is compact by default (changed_fields replaced with changed_field_count); pass fullChangedFields=true for the full changed_fields array.",inputSchema:objectSchema({id:idSchema,reason:{type:"string",description:"Close reason text when provided or required by governance settings."},duplicateOf:{type:"string",description:"Canonical item id when closing this item as a duplicate."},fullChangedFields:{type:"boolean",description:"Return full changed_fields instead of changed_field_count."},idOnly:{type:"boolean",description:"Return only id and status."},options:{type:"object"}},["id"])},{name:"pm_comments",description:"List, add, edit, or delete comments on a pm item. Use options.add to append, options.edit=<1-based index> with replacement text to fix a comment, or options.delete=<1-based index> to remove one. options.ifAbsent applies only to options.add for retry-safe author-and-text deduplication and cannot combine with options.edit or options.delete. List calls default to the most recent 20 comments with total_count/has_more metadata for token efficiency. Pass options.limit=N to choose a page size, options.limit=0 for summary-only metadata, or options.full=true for full history.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_files",description:"List, add, remove, or validate linked files for a pm item.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_docs",description:"List, add, or remove linked docs for a pm item.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_notes",description:"List, add, edit, or delete structured notes on a pm item. options.ifAbsent applies only to options.add for retry-safe author-and-text deduplication and cannot combine with options.edit or options.delete. Omit mutation options to list existing notes.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_learnings",description:"List, add, edit, or delete learnings on a pm item. options.ifAbsent applies only to options.add for retry-safe author-and-text deduplication and cannot combine with options.edit or options.delete. Omit mutation options to list existing learnings.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_deps",description:"Read dependency trees/graphs or one bounded explainable relationship context packet. Use options.format=context with direction, kind, depth, node, edge, token, and cursor bounds; context returns a counts-first summary, per-node roles/reasons, root evidence pointers, and enumerated missing references.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_graph",description:"Run bounded workspace relationship-graph queries: ancestors/descendants (hierarchy), predecessors/successors (ordering), paths, impact (blast radius), analyze (execution + knowledge analytics), audit (governance findings with change-since-baseline deltas), communities (label-propagation clusters), redundancy (transitively implied edges), dominators (structural bottlenecks), slack (critical-path method float per task), centrality (betweenness/closeness/degree with directed fan-in/out), articulation (cut points and bridges \u2014 single points of failure), plan (dry-run remediation proposals derived from the audit), and index (durable cross-process graph index status/rebuild/clear). Traversals, paths, impact, and dominators require id; paths also requires target. Options support kind, maxDepth, limit, after, direction, maxPaths, sample, exemptIsolate, exemptIsolateType, saveBaseline (audit), rebuild/clear (index), and counts-first summary.",inputSchema:objectSchema({subcommand:{type:"string",enum:[...GRAPH_SUBCOMMAND_VALUES]},id:idSchema,target:idSchema,options:{type:"object"}},["subcommand"])},{name:"pm_test",description:"List, add, remove, or run linked tests for a pm item.",inputSchema:objectSchema({id:idSchema,options:{type:"object"}},["id"])},{name:"pm_validate",description:"Run pm validation checks.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_health",description:"Run pm health diagnostics. Pass options.brief=true for compact low-token details, options.skipIntegrity=true, options.skipDrift=true, options.skipVectors=true for a fast status-only check, or options.full=true for the complete deep check.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_contracts",description:"Inspect pm command, flag, schema, and availability contracts.",inputSchema:objectSchema({options:{type:"object"}})},{name:"pm_schema",description:"Inspect or modify the workspace item-type/status/field schema (pm schema). subcommand selects the operation; name carries the item type name (show/add-type/remove-type), status id (show-status/add-status/remove-status), or field key (show-field/add-field/remove-field). apply-preset adopts a domain type preset; add-type with infer=true derives types from title-prefix conventions. Policy verbs author declarations, preview changes, set enforcement, and record content-bound approvals. Registry mutations write workspace history; approvals write item history.",inputSchema:objectSchema({...workflowPolicyOptionProperties,subcommand:{type:"string",enum:["list","show","show-status","add-type","remove-type","add-status","remove-status","add-field","remove-field","list-fields","show-field","apply-preset",...WORKFLOW_POLICY_ACTIONS],description:"Schema subcommand to run."},name:{type:"string",description:"Item type name, status id, field key, policy id, or item id for the selected schema verb; policy-mode requires advise|refuse."},description:{type:"string",description:"Custom item type, status, or field description for add-type/add-status/add-field."},defaultStatus:{type:"string",description:"Default status for add-type."},folder:{type:"string",description:"Storage folder for add-type."},alias:{type:"array",items:{type:"string"},description:"Aliases for add-type/add-status, or extra CLI flag aliases for add-field."},role:{type:"array",items:{type:"string",enum:[...RUNTIME_STATUS_ROLE_VALUES]},description:`Lifecycle roles for add-status: ${RUNTIME_STATUS_ROLE_VALUES.join(", ")}.`},order:{type:"number",description:"Display/sort order for add-status."},fieldType:{type:"string",enum:["string","number","boolean","string_array"],description:"Value type for a custom field (add-field)."},commands:{type:"array",items:{type:"string"},description:"Commands a custom field is wired onto (add-field): create, update, update_many, list, search, calendar, context."},cliFlag:{type:"string",description:"Override the auto-derived CLI flag for a custom field (add-field)."},required:{type:"boolean",description:"Mark a custom field as always required (add-field)."},requiredOnCreate:{type:"boolean",description:"Mark a custom field as required at create time (add-field)."},allowUnset:{type:"boolean",description:"Whether a custom field may be cleared via --unset (add-field); defaults to true."},requiredTypes:{type:"array",items:{type:"string"},description:"Restrict a custom field's requirement to specific item types (add-field)."},typePreset:{type:"string",enum:["agile","ops","research"],description:"Domain type preset to adopt (apply-preset)."},infer:{type:"boolean",description:"Infer item types from title-prefix conventions (add-type); previews unless apply is true."},minCount:{type:"number",description:"Minimum items sharing a prefix for add-type inference (default 10)."},apply:{type:"boolean",description:"Register inferred types (add-type infer); without it the call previews only."},force:{type:"boolean",description:"Override removal guardrails for destructive schema changes when supported."},options:{type:"object",description:"Additional schema options using camelCase keys.",properties:workflowPolicyOptionProperties}},["subcommand"])},{name:"pm_profile",description:"List, show, apply, or lint project profiles (pm profile) \u2014 archetype bundles that stage item types, statuses, fields, per-type workflows, config knobs, create templates, and recommended packages. subcommand selects the operation; name carries the profile name (agile, ops, research) for show/apply/lint. apply stages every dimension idempotently; dryRun previews the diff without writing; lint reports author-time consistency findings (graded error/warning) without touching the tracker. Profile staging writes workspace config/schema files, not item history.",inputSchema:objectSchema({subcommand:{type:"string",enum:["list","show","apply","lint"],description:"Profile subcommand to run."},name:{type:"string",description:"Profile name for show/apply/lint. Required for those subcommands. Built-ins are agile, ops, and research; an active extension can contribute additional archetype names that resolve here too."},dryRun:{type:"boolean",description:"Preview the apply diff without writing any files (apply)."},author:{type:"string",description:"Mutation author for apply."},force:{type:"boolean",description:"Force ownership/lock override for apply."},options:{type:"object",description:"Additional profile options using camelCase keys."}},["subcommand"])},{name:"pm_config",description:"Read or write pm workspace configuration (pm config). configAction selects get/set/list/export; key/value address a single setting for get/set. scope chooses the project (default) or global settings file.",inputSchema:objectSchema({configAction:{type:"string",enum:["get","set","list","export"],description:"Config operation to perform. get/set require key; list/export dump the resolved settings surface."},key:{type:"string",description:"Settings key for get/set, for example governance-require-close-reason, telemetry-tracking, or a nested leaf such as search_provider (dash and underscore variants accepted; configAction=get without a key lists supported keys in the error)."},value:{type:"string",description:"New value for configAction=set."},scope:{type:"string",enum:["project","global"],description:"Settings scope to read or write. Defaults to project."},options:{type:"object",description:"Additional config options such as criterion, clearCriteria, format, or policy."}},["configAction"])},{name:"pm_plan",description:"Run agent-optimized Plan workflows. options.subcommand selects: create|show|add-step|update-step|complete-step|block-step|reorder-step|remove-step|link|unlink|decision|discovery|validation|resume|approve|materialize. Provide id for all non-create subcommands; provide stepRef for step lifecycle subcommands. Plans store agent-readable steps with dependencies, decisions, discoveries, validation, and resume context.",inputSchema:objectSchema({id:{type:"string",description:"Plan id (required for all subcommands except create)."},stepRef:{type:"string",description:"Step id or order for step lifecycle subcommands."},options:{type:"object",description:"Plan options including subcommand, stepRef, stepStatus, link, depth, etc."}})}],NARROW_TOOL_ACTIONS={pm_append:"append",pm_claim:"claim",pm_close:"close",pm_comments:"comments",pm_config:"config",pm_context:"context",pm_contracts:"contracts",pm_copy:"copy",pm_create:"create",pm_deps:"deps",pm_docs:"docs",pm_events:"events",pm_files:"files",pm_focus:"focus",pm_get:"get",pm_graph:"graph",pm_health:"health",pm_learnings:"learnings",pm_list:"list",pm_next:"next",pm_notes:"notes",pm_plan:"plan",pm_profile:"profile",pm_release:"release",pm_schema:"schema",pm_search:"search",pm_test:"test",pm_update:"update",pm_validate:"validate"},TOOLS=RAW_TOOLS.map(tool=>{const action=NARROW_TOOL_ACTIONS[tool.name];if(!action)return tool;const properties=tool.inputSchema.properties,required=tool.inputSchema.required.map(String);return{...tool,inputSchema:buildPmActionToolInputSchema(action,{properties,required})}});function buildMcpToolContracts(){return TOOLS.map(tool=>{const schemaRequired=tool.inputSchema.required,required=Array.isArray(schemaRequired)?schemaRequired.map(entry=>String(entry)).sort((left,right)=>left.localeCompare(right)):[];return{name:tool.name,description:tool.description,required,input_schema:tool.inputSchema}}).sort((left,right)=>left.name.localeCompare(right.name))}export{NARROW_TOOL_ACTIONS,TOOLS,TOOL_SCHEMA_BASE,buildMcpToolContracts};
 //# sourceMappingURL=tool-definitions.js.map

package/dist/sdk/actionability.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ae1c56b3-148d-502d-9450-e807fdfab4da")}catch(e2){}})();import{ACTIONABILITY_ORDERING_KINDS,collectBlockedByIds,collectBlockedByIdsFromCorpus,collectDependencyBlockedIds,computeActionabilityReport,indexBlockedByIds,resolveItemBlockers,resolveItemExecutionRole,selectActionableEntries}from"../core/item/actionability.js";export{ACTIONABILITY_ORDERING_KINDS,collectBlockedByIds,collectBlockedByIdsFromCorpus,collectDependencyBlockedIds,computeActionabilityReport,indexBlockedByIds,resolveItemBlockers,resolveItemExecutionRole,selectActionableEntries};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ae1c56b3-148d-502d-9450-e807fdfab4da")}catch{}})();import{ACTIONABILITY_ORDERING_KINDS,collectBlockedByIds,collectBlockedByIdsFromCorpus,collectDependencyBlockedIds,computeActionabilityReport,indexBlockedByIds,resolveItemBlockers,resolveItemExecutionRole,selectActionableEntries}from"../core/item/actionability.js";export{ACTIONABILITY_ORDERING_KINDS,collectBlockedByIds,collectBlockedByIdsFromCorpus,collectDependencyBlockedIds,computeActionabilityReport,indexBlockedByIds,resolveItemBlockers,resolveItemExecutionRole,selectActionableEntries};
 //# sourceMappingURL=actionability.js.map

package/dist/sdk/agent/closed-domain-contracts.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d3714178-d64c-564c-a1bc-e5393fc57758")}catch(e2){}})();import{PM_CONTEXT_INTENT_CONTRACTS}from"../context-intent-contracts.js";import{LIST_COMMAND_DEFAULT_PROJECTIONS,listGetProjectionFields,listListProjectionFields,listSearchProjectionFields}from"../query/projection-contracts.js";const REJECTED_INTENT="not-a-declared-intent";const REJECTED_FIELD="not-a-declared-field";function listCoreClosedDomainContracts(){const positionalArguments={get:["pm-domain"],search:["Domain query"]};const intentContracts=[...new Set(PM_CONTEXT_INTENT_CONTRACTS.map(({command})=>command))].map(command=>{const commandContracts=PM_CONTEXT_INTENT_CONTRACTS.filter(candidate=>candidate.command===command);const contract=commandContracts[0];const positionals=positionalArguments[contract.command]??[];return{probe_id:`${contract.command}-invalid-intent`,command:contract.command,flag:"--for",rejected_value:REJECTED_INTENT,refusal_args:[contract.command,...positionals,"--for",REJECTED_INTENT],allowed_values:commandContracts.map(({intent})=>intent).sort(),suggested_retry_args:[contract.command,...positionals,"--for",contract.intent],error_code:"unknown_context_intent"}});const listFields=listListProjectionFields();const listFieldContracts=Object.keys(LIST_COMMAND_DEFAULT_PROJECTIONS).map(command=>({probe_id:`${command}-invalid-field`,command,flag:"--fields",rejected_value:REJECTED_FIELD,refusal_args:[command,"--fields",REJECTED_FIELD],allowed_values:listFields,suggested_retry_args:[command,"--fields","id,title,status"],error_code:"unknown_field_projection"}));const contracts=[...intentContracts,...listFieldContracts,{probe_id:"get-invalid-field",command:"get",flag:"--fields",rejected_value:REJECTED_FIELD,refusal_args:["get","pm-domain","--fields",REJECTED_FIELD],allowed_values:listGetProjectionFields(),suggested_retry_args:["get","pm-domain","--fields","id,title,status"],error_code:"unknown_field_projection"},{probe_id:"list-mutually-exclusive-projection",command:"list",flag:"--projection",rejected_value:"--brief+--full",refusal_args:["list","--brief","--full"],allowed_values:[],suggested_retry_args:["list","--brief"],error_code:"projection_options_mutually_exclusive",allowed_values_required:false},{probe_id:"get-mutually-exclusive-projection",command:"get",flag:"--projection",rejected_value:"--full+--fields",refusal_args:["get","pm-domain","--full","--fields","id"],allowed_values:[],suggested_retry_args:["get","pm-domain","--full"],error_code:"projection_options_mutually_exclusive",allowed_values_required:false},{probe_id:"search-mutually-exclusive-projection",command:"search",flag:"--projection",rejected_value:"--full+--fields",refusal_args:["search","Domain query","--full","--fields","id"],allowed_values:[],suggested_retry_args:["search","Domain query","--full"],error_code:"projection_options_mutually_exclusive",allowed_values_required:false},{probe_id:"package-upgrade-mutually-exclusive-modes",command:"package upgrade",flag:"--cli-only/--packages-only",rejected_value:"--cli-only+--packages-only",refusal_args:["package","upgrade","--cli-only","--packages-only","--dry-run"],allowed_values:[],suggested_retry_args:["package","upgrade","--packages-only","--dry-run"],error_code:"package_upgrade_modes_mutually_exclusive",allowed_values_required:false},{probe_id:"search-invalid-field",command:"search",flag:"--fields",rejected_value:REJECTED_FIELD,refusal_args:["search","Domain query","--fields",REJECTED_FIELD],allowed_values:listSearchProjectionFields(),suggested_retry_args:["search","Domain query","--fields","id,title,status,score"],error_code:"unknown_field_projection"}];return contracts.sort((left,right)=>left.probe_id.localeCompare(right.probe_id))}function renderPmClosedDomainHelp(command,flag){const contract=listCoreClosedDomainContracts().find(candidate=>candidate.command===command&&candidate.flag===flag);if(!contract)return"No stable core values are declared.";const canonicalValues=contract.allowed_values.filter(value=>!value.startsWith("item."));const runtimeSuffix=flag==="--fields"?" item.<field> aliases and configured runtime metadata fields are also accepted.":" Configured package and workspace intents may extend this domain.";return`Allowed core values: ${canonicalValues.join("|")}.${runtimeSuffix}`}export{listCoreClosedDomainContracts,renderPmClosedDomainHelp};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8467eccc-684d-56cc-8b18-5f2e940abb42")}catch{}})();import{PM_CONTEXT_INTENT_CONTRACTS}from"../context-intent-contracts.js";import{LIST_COMMAND_DEFAULT_PROJECTIONS,listGetProjectionFields,listListProjectionFields,listSearchProjectionFields}from"../query/projection-contracts.js";const REJECTED_INTENT="not-a-declared-intent",REJECTED_FIELD="not-a-declared-field";function listCoreClosedDomainContracts(){const positionalArguments={get:["pm-domain"],search:["Domain query"]},intentContracts=[...new Set(PM_CONTEXT_INTENT_CONTRACTS.map(({command})=>command))].map(command=>{const commandContracts=PM_CONTEXT_INTENT_CONTRACTS.filter(candidate=>candidate.command===command),contract=commandContracts[0],positionals=positionalArguments[contract.command]??[];return{probe_id:`${contract.command}-invalid-intent`,command:contract.command,flag:"--for",rejected_value:REJECTED_INTENT,refusal_args:[contract.command,...positionals,"--for",REJECTED_INTENT],allowed_values:commandContracts.map(({intent})=>intent).sort(),suggested_retry_args:[contract.command,...positionals,"--for",contract.intent],error_code:"unknown_context_intent"}}),listFields=listListProjectionFields(),listFieldContracts=Object.keys(LIST_COMMAND_DEFAULT_PROJECTIONS).map(command=>({probe_id:`${command}-invalid-field`,command,flag:"--fields",rejected_value:REJECTED_FIELD,refusal_args:[command,"--fields",REJECTED_FIELD],allowed_values:listFields,suggested_retry_args:[command,"--fields","id,title,status"],error_code:"unknown_field_projection"}));return[...intentContracts,...listFieldContracts,{probe_id:"get-invalid-field",command:"get",flag:"--fields",rejected_value:REJECTED_FIELD,refusal_args:["get","pm-domain","--fields",REJECTED_FIELD],allowed_values:listGetProjectionFields(),suggested_retry_args:["get","pm-domain","--fields","id,title,status"],error_code:"unknown_field_projection"},{probe_id:"list-mutually-exclusive-projection",command:"list",flag:"--projection",rejected_value:"--brief+--full",refusal_args:["list","--brief","--full"],allowed_values:[],suggested_retry_args:["list","--brief"],error_code:"projection_options_mutually_exclusive",allowed_values_required:!1},{probe_id:"get-mutually-exclusive-projection",command:"get",flag:"--projection",rejected_value:"--full+--fields",refusal_args:["get","pm-domain","--full","--fields","id"],allowed_values:[],suggested_retry_args:["get","pm-domain","--full"],error_code:"projection_options_mutually_exclusive",allowed_values_required:!1},{probe_id:"search-mutually-exclusive-projection",command:"search",flag:"--projection",rejected_value:"--full+--fields",refusal_args:["search","Domain query","--full","--fields","id"],allowed_values:[],suggested_retry_args:["search","Domain query","--full"],error_code:"projection_options_mutually_exclusive",allowed_values_required:!1},{probe_id:"package-upgrade-mutually-exclusive-modes",command:"package upgrade",flag:"--cli-only/--packages-only",rejected_value:"--cli-only+--packages-only",refusal_args:["package","upgrade","--cli-only","--packages-only","--dry-run"],allowed_values:[],suggested_retry_args:["package","upgrade","--packages-only","--dry-run"],error_code:"package_upgrade_modes_mutually_exclusive",allowed_values_required:!1},{probe_id:"search-invalid-field",command:"search",flag:"--fields",rejected_value:REJECTED_FIELD,refusal_args:["search","Domain query","--fields",REJECTED_FIELD],allowed_values:listSearchProjectionFields(),suggested_retry_args:["search","Domain query","--fields","id,title,status,score"],error_code:"unknown_field_projection"}].sort((left,right)=>left.probe_id.localeCompare(right.probe_id))}function renderPmClosedDomainHelp(command,flag){const contract=listCoreClosedDomainContracts().find(candidate=>candidate.command===command&&candidate.flag===flag);if(!contract)return"No stable core values are declared.";const canonicalValues=contract.allowed_values.filter(value=>!value.startsWith("item.")),runtimeSuffix=flag==="--fields"?" item.<field> aliases and configured runtime metadata fields are also accepted.":" Configured package and workspace intents may extend this domain.";return`Allowed core values: ${canonicalValues.join("|")}.${runtimeSuffix}`}export{listCoreClosedDomainContracts,renderPmClosedDomainHelp};
 //# sourceMappingURL=closed-domain-contracts.js.map

package/dist/sdk/agent/command-recovery.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4f7274c6-547e-5590-b7c9-a4d6418bf860")}catch(e2){}})();import{renderPmCommand}from"../command-line.js";import{resolveSubcommandFlagContractsForCommand}from"../cli-contracts/flag-contracts.js";import{parseBootstrapCommandName}from"../cli-contracts/bootstrap-command-scanner.js";function normalizeMissingFlag(label){const match=label.trim().match(/--[a-z0-9][a-z0-9_-]*/i);return match?.[0]?.replaceAll("_","-").toLowerCase()}function resolveRecoveryCommandName(invocationArgv){if(!Array.isArray(invocationArgv)||invocationArgv.length===0){return void 0}return parseBootstrapCommandName(invocationArgv)}function resolveMissingOptionPlaceholder(commandName,missingLabel){const flag=normalizeMissingFlag(missingLabel);if(!flag)return void 0;const contract=resolveSubcommandFlagContractsForCommand(commandName).find(entry=>entry.flag===flag||entry.aliases?.includes(flag));if(!contract)return"<value>";if(contract.value_type==="boolean"){return null}return`<${contract.value_name??"value"}>`}function renderMissingOptionRetry(invocationArgv,commandName,missingLabels){const retry=[...invocationArgv];const terminatorIndex=retry.indexOf("--");let insertionIndex=terminatorIndex<0?retry.length:terminatorIndex;for(const label of missingLabels){const flag=normalizeMissingFlag(label);if(!flag||retry.slice(0,insertionIndex).some(token=>token===flag||token.startsWith(`${flag}=`))){continue}const placeholder=resolveMissingOptionPlaceholder(commandName,flag);const recoveredOption=placeholder?[flag,placeholder]:[flag];retry.splice(insertionIndex,0,...recoveredOption);insertionIndex+=recoveredOption.length}return retry.length===invocationArgv.length?void 0:renderPmCommand(retry)}export{renderMissingOptionRetry,resolveMissingOptionPlaceholder,resolveRecoveryCommandName};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d5c48881-420f-5673-8696-e770db353cfc")}catch{}})();import{renderPmCommand}from"../command-line.js";import{resolveSubcommandFlagContractsForCommand}from"../cli-contracts/flag-contracts.js";import{parseBootstrapCommandName}from"../cli-contracts/bootstrap-command-scanner.js";function normalizeMissingFlag(label){return label.trim().match(/--[a-z0-9][a-z0-9_-]*/i)?.[0]?.replaceAll("_","-").toLowerCase()}function resolveRecoveryCommandName(invocationArgv){if(!(!Array.isArray(invocationArgv)||invocationArgv.length===0))return parseBootstrapCommandName(invocationArgv)}function resolveMissingOptionPlaceholder(commandName,missingLabel){const flag=normalizeMissingFlag(missingLabel);if(!flag)return;const contract=resolveSubcommandFlagContractsForCommand(commandName).find(entry=>entry.flag===flag||entry.aliases?.includes(flag));return contract?contract.value_type==="boolean"?null:`<${contract.value_name??"value"}>`:"<value>"}function renderMissingOptionRetry(invocationArgv,commandName,missingLabels){const retry=[...invocationArgv],terminatorIndex=retry.indexOf("--");let insertionIndex=terminatorIndex<0?retry.length:terminatorIndex;for(const label of missingLabels){const flag=normalizeMissingFlag(label);if(!flag||retry.slice(0,insertionIndex).some(token=>token===flag||token.startsWith(`${flag}=`)))continue;const placeholder=resolveMissingOptionPlaceholder(commandName,flag),recoveredOption=placeholder?[flag,placeholder]:[flag];retry.splice(insertionIndex,0,...recoveredOption),insertionIndex+=recoveredOption.length}return retry.length===invocationArgv.length?void 0:renderPmCommand(retry)}export{renderMissingOptionRetry,resolveMissingOptionPlaceholder,resolveRecoveryCommandName};
 //# sourceMappingURL=command-recovery.js.map

package/dist/sdk/agent/command-suggestions.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="925e5fec-4cc0-5315-a331-03cb128893f0")}catch(e2){}})();import{levenshteinDistanceWithinLimit}from"../../core/shared/levenshtein.js";import{PM_COMMAND_ALIAS_CONTRACTS,resolvePmCommandOperation}from"../cli-contracts/command-aliases.js";const COMMAND_SYNONYMS={add:["create","append"],fetch:["get"],inspect:["get","health"],log:["history","comments","notes"],ls:["list"],pause:["release"],read:["get"],remove:["delete"],rm:["delete"],show:["get"],start:["start-task"]};function scoreCommandPathMatch(commandPath,queryToken){const normalizedPath=commandPath.trim().toLowerCase();const normalizedToken=queryToken.trim().toLowerCase();if(normalizedToken.length===0)return Number.POSITIVE_INFINITY;const segments=normalizedPath.split(" ");const semanticIndex=COMMAND_SYNONYMS[normalizedToken]?.indexOf(resolvePmCommandOperation(normalizedPath));if(semanticIndex!==void 0&&semanticIndex>=0)return semanticIndex;if(normalizedPath===normalizedToken)return 10;if(segments.includes(normalizedToken))return 11;if(segments.some(segment=>segment.startsWith(normalizedToken)))return 12;const maxDistance=normalizedToken.length>=5?2:1;let bestDistance=Number.POSITIVE_INFINITY;for(const segment of segments){const distance=levenshteinDistanceWithinLimit(segment,normalizedToken,maxDistance);if(distance!==null)bestDistance=Math.min(bestDistance,distance)}if(Number.isFinite(bestDistance))return 20+bestDistance;if(normalizedPath.includes(normalizedToken))return 30;return Number.POSITIVE_INFINITY}function rankCommandPaths(commandPaths,queryToken){return commandPaths.map(path=>({path,score:scoreCommandPathMatch(path,queryToken)})).filter(entry=>Number.isFinite(entry.score)).sort((left,right)=>{if(left.score!==right.score)return left.score-right.score;if(left.path===right.path)return 0;return left.path<right.path?-1:1}).map(entry=>entry.path)}function canonicalizeCommandSuggestions(candidates,availablePaths,queryToken){const available=new Set(availablePaths);const aliases=PM_COMMAND_ALIAS_CONTRACTS.filter(alias=>alias.lifecycle==="deprecated").slice().sort((left,right)=>right.alias.length-left.alias.length);const preferred=[];const resolved=candidates.flatMap(candidate=>{const alias=aliases.find(entry=>candidate===entry.alias||candidate.startsWith(`${entry.alias} `));let canonical=candidate;if(alias){const suffix=candidate.slice(alias.alias.length);if(!available.has(`${alias.canonical}${suffix}`))return[];canonical=`${alias.canonical_argv.join(" ")}${suffix}`}if(queryToken!==void 0&&scoreCommandPathMatch(candidate,queryToken)<10)preferred.push(canonical);return[canonical]});return[...new Set(preferred.length>0?preferred:resolved)]}export{canonicalizeCommandSuggestions,rankCommandPaths,scoreCommandPathMatch};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a48c9a1f-b959-54a4-a27f-4f662ae7fd31")}catch{}})();import{levenshteinDistanceWithinLimit}from"../../core/shared/levenshtein.js";import{PM_COMMAND_ALIAS_CONTRACTS,resolvePmCommandOperation}from"../cli-contracts/command-aliases.js";const COMMAND_SYNONYMS={add:["create","append"],fetch:["get"],inspect:["get","health"],log:["history","comments","notes"],ls:["list"],pause:["release"],read:["get"],remove:["delete"],rm:["delete"],show:["get"],start:["start-task"]};function scoreCommandPathMatch(commandPath,queryToken){const normalizedPath=commandPath.trim().toLowerCase(),normalizedToken=queryToken.trim().toLowerCase();if(normalizedToken.length===0)return Number.POSITIVE_INFINITY;const segments=normalizedPath.split(" "),semanticIndex=COMMAND_SYNONYMS[normalizedToken]?.indexOf(resolvePmCommandOperation(normalizedPath));if(semanticIndex!==void 0&&semanticIndex>=0)return semanticIndex;if(normalizedPath===normalizedToken)return 10;if(segments.includes(normalizedToken))return 11;if(segments.some(segment=>segment.startsWith(normalizedToken)))return 12;const maxDistance=normalizedToken.length>=5?2:1;let bestDistance=Number.POSITIVE_INFINITY;for(const segment of segments){const distance=levenshteinDistanceWithinLimit(segment,normalizedToken,maxDistance);distance!==null&&(bestDistance=Math.min(bestDistance,distance))}return Number.isFinite(bestDistance)?20+bestDistance:normalizedPath.includes(normalizedToken)?30:Number.POSITIVE_INFINITY}function rankCommandPaths(commandPaths,queryToken){return commandPaths.map(path=>({path,score:scoreCommandPathMatch(path,queryToken)})).filter(entry=>Number.isFinite(entry.score)).sort((left,right)=>left.score!==right.score?left.score-right.score:left.path===right.path?0:left.path<right.path?-1:1).map(entry=>entry.path)}function canonicalizeCommandSuggestions(candidates,availablePaths,queryToken){const available=new Set(availablePaths),aliases=PM_COMMAND_ALIAS_CONTRACTS.filter(alias=>alias.lifecycle==="deprecated").slice().sort((left,right)=>right.alias.length-left.alias.length),preferred=[],resolved=candidates.flatMap(candidate=>{const alias=aliases.find(entry=>candidate===entry.alias||candidate.startsWith(`${entry.alias} `));let canonical=candidate;if(alias){const suffix=candidate.slice(alias.alias.length);if(!available.has(`${alias.canonical}${suffix}`))return[];canonical=`${alias.canonical_argv.join(" ")}${suffix}`}return queryToken!==void 0&&scoreCommandPathMatch(candidate,queryToken)<10&&preferred.push(canonical),[canonical]});return[...new Set(preferred.length>0?preferred:resolved)]}export{canonicalizeCommandSuggestions,rankCommandPaths,scoreCommandPathMatch};
 //# sourceMappingURL=command-suggestions.js.map

package/dist/sdk/agent/create-option-policy.js

@@ -1,2 +1,2 @@
-!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a9b9f4df-2129-5230-af20-16bef3754d39")}catch(e2){}})();const CREATE_REPEATABLE_CLEAR_FLAGS={comment:"--clear-comments",dep:"--clear-deps",doc:"--clear-docs",event:"--clear-events",file:"--clear-files",learning:"--clear-learnings",note:"--clear-notes",reminder:"--clear-reminders",test:"--clear-tests",typeOption:"--clear-type-options"};function resolveCreateExplicitEmptyFlag(optionKey){return CREATE_REPEATABLE_CLEAR_FLAGS[optionKey]}function supportsCreateExplicitEmpty(optionKey){return resolveCreateExplicitEmptyFlag(optionKey)!==void 0}export{resolveCreateExplicitEmptyFlag,supportsCreateExplicitEmpty};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a9b9f4df-2129-5230-af20-16bef3754d39")}catch{}})();const CREATE_REPEATABLE_CLEAR_FLAGS={comment:"--clear-comments",dep:"--clear-deps",doc:"--clear-docs",event:"--clear-events",file:"--clear-files",learning:"--clear-learnings",note:"--clear-notes",reminder:"--clear-reminders",test:"--clear-tests",typeOption:"--clear-type-options"};function resolveCreateExplicitEmptyFlag(optionKey){return CREATE_REPEATABLE_CLEAR_FLAGS[optionKey]}function supportsCreateExplicitEmpty(optionKey){return resolveCreateExplicitEmptyFlag(optionKey)!==void 0}export{resolveCreateExplicitEmptyFlag,supportsCreateExplicitEmpty};
 //# sourceMappingURL=create-option-policy.js.map