@unbrained/pm-cli 2026.9.7 → 2026.9.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (718) hide show
  1. package/.agents/skills/pm-developer/SKILL.md +12 -4
  2. package/.agents/skills/pm-developer/references/MULTI_AGENT_MERGE.md +19 -10
  3. package/.agents/skills/pm-extensions/SKILL.md +6 -0
  4. package/.agents/skills/pm-sdk/SKILL.md +11 -2
  5. package/.agents/skills/pm-user/SKILL.md +5 -0
  6. package/.agents/skills/pm-user/references/ECOSYSTEM_PLANNING.md +95 -0
  7. package/.claude-plugin/marketplace.json +2 -2
  8. package/CHANGELOG.md +211 -181
  9. package/dist/cli/after-command-context-usage.js +1 -48
  10. package/dist/cli/argv-utils.js +1 -40
  11. package/dist/cli/bootstrap-args.js +1 -9
  12. package/dist/cli/bundle-integrity.js +2 -110
  13. package/dist/cli/commander-usage.js +11 -771
  14. package/dist/cli/commands/activity.js +1 -9
  15. package/dist/cli/commands/aggregate.js +1 -5
  16. package/dist/cli/commands/append.js +1 -5
  17. package/dist/cli/commands/claim.js +1 -5
  18. package/dist/cli/commands/close-many.js +1 -5
  19. package/dist/cli/commands/close.js +1 -9
  20. package/dist/cli/commands/comments.js +1 -5
  21. package/dist/cli/commands/config.js +1 -9
  22. package/dist/cli/commands/context.js +1 -9
  23. package/dist/cli/commands/contracts.js +1 -5
  24. package/dist/cli/commands/copy.js +1 -9
  25. package/dist/cli/commands/create.js +1 -9
  26. package/dist/cli/commands/delete.js +1 -9
  27. package/dist/cli/commands/deps.js +1 -9
  28. package/dist/cli/commands/docs.js +1 -9
  29. package/dist/cli/commands/duplicates.js +1 -9
  30. package/dist/cli/commands/eval.js +1 -9
  31. package/dist/cli/commands/extension/describe.js +1 -5
  32. package/dist/cli/commands/extension/scaffold.js +1 -5
  33. package/dist/cli/commands/extension/shared.js +1 -5
  34. package/dist/cli/commands/extension.js +1 -9
  35. package/dist/cli/commands/files.js +1 -9
  36. package/dist/cli/commands/focus.js +1 -9
  37. package/dist/cli/commands/gc.js +1 -9
  38. package/dist/cli/commands/get.js +1 -9
  39. package/dist/cli/commands/graph.js +1 -10
  40. package/dist/cli/commands/health.js +1 -9
  41. package/dist/cli/commands/history-compact.js +1 -10
  42. package/dist/cli/commands/history-redact.js +1 -11
  43. package/dist/cli/commands/history-repair.js +1 -10
  44. package/dist/cli/commands/history.js +1 -5
  45. package/dist/cli/commands/index.js +1 -58
  46. package/dist/cli/commands/init-agent-guidance.js +1 -9
  47. package/dist/cli/commands/init.js +1 -9
  48. package/dist/cli/commands/learnings.js +1 -5
  49. package/dist/cli/commands/lifecycle-transitions.js +1 -5
  50. package/dist/cli/commands/list.js +1 -9
  51. package/dist/cli/commands/merge.js +1 -11
  52. package/dist/cli/commands/next.js +1 -9
  53. package/dist/cli/commands/notes.js +1 -5
  54. package/dist/cli/commands/plan.js +1 -9
  55. package/dist/cli/commands/profile.js +1 -9
  56. package/dist/cli/commands/restore.js +1 -9
  57. package/dist/cli/commands/scheduling-shortcuts.js +1 -9
  58. package/dist/cli/commands/schema.js +1 -10
  59. package/dist/cli/commands/search.js +1 -9
  60. package/dist/cli/commands/stats.js +1 -9
  61. package/dist/cli/commands/telemetry.js +1 -9
  62. package/dist/cli/commands/test-all.js +1 -9
  63. package/dist/cli/commands/test-runs.js +1 -9
  64. package/dist/cli/commands/test.js +1 -9
  65. package/dist/cli/commands/update-many.js +1 -5
  66. package/dist/cli/commands/update.js +1 -9
  67. package/dist/cli/commands/upgrade.js +1 -5
  68. package/dist/cli/commands/validate.js +1 -15
  69. package/dist/cli/context-intent-invocation.js +1 -20
  70. package/dist/cli/description-stdin.js +1 -17
  71. package/dist/cli/error-guidance.js +1 -1353
  72. package/dist/cli/extension-command-help.js +5 -636
  73. package/dist/cli/extension-command-options.js +1 -427
  74. package/dist/cli/extension-recovery.js +1 -126
  75. package/dist/cli/help-content.js +2 -1001
  76. package/dist/cli/help-json-payload.js +4 -570
  77. package/dist/cli/main.d.ts +4 -0
  78. package/dist/cli/main.js +5 -2573
  79. package/dist/cli/migration-gates.js +1 -289
  80. package/dist/cli/public.js +1 -20
  81. package/dist/cli/register-annotations.js +1 -270
  82. package/dist/cli/register-assurance.js +1 -62
  83. package/dist/cli/register-files-lookup.js +1 -56
  84. package/dist/cli/register-history-activity.d.ts +8 -0
  85. package/dist/cli/register-history-activity.js +2 -0
  86. package/dist/cli/register-history-author.js +1 -38
  87. package/dist/cli/register-history-maintenance.d.ts +9 -0
  88. package/dist/cli/register-history-maintenance.js +2 -0
  89. package/dist/cli/register-list-query.js +10 -943
  90. package/dist/cli/register-mutation-options.js +1 -9
  91. package/dist/cli/register-mutation.js +19 -1893
  92. package/dist/cli/register-operations.js +1 -920
  93. package/dist/cli/register-setup.js +1 -716
  94. package/dist/cli/register-structured-mutation.js +1 -196
  95. package/dist/cli/registration-helpers.js +1 -5
  96. package/dist/cli/runtime-compatibility-boundary.js +4 -42
  97. package/dist/cli/schema-registration-helpers.js +1 -73
  98. package/dist/cli/search-refresh.js +1 -13
  99. package/dist/cli/stats-analytics-json.js +1 -68
  100. package/dist/cli/telemetry-flush.js +1 -10
  101. package/dist/cli-bundle/bundle-manifest.json +164 -156
  102. package/dist/cli-bundle/chunks/chunk-3BZZA6A3.js +5 -0
  103. package/dist/cli-bundle/chunks/chunk-AMRDVX36.js +235 -0
  104. package/dist/cli-bundle/chunks/chunk-DAM4CBBR.js +2202 -0
  105. package/dist/cli-bundle/chunks/{chunk-WYRZZ5ZE.js → chunk-DEZPZOQ7.js} +2 -2
  106. package/dist/cli-bundle/chunks/chunk-FLDWYEND.js +77 -0
  107. package/dist/cli-bundle/chunks/{chunk-NPN5I67J.js → chunk-G5ADGQ2D.js} +3 -3
  108. package/dist/cli-bundle/chunks/chunk-JAAEYHUA.js +2 -0
  109. package/dist/cli-bundle/chunks/{chunk-JX4DH4WC.js → chunk-KR3RP4FH.js} +3 -3
  110. package/dist/cli-bundle/chunks/chunk-LEZOUXG6.js +2 -0
  111. package/dist/cli-bundle/chunks/chunk-NSAPNEYH.js +2 -0
  112. package/dist/cli-bundle/chunks/chunk-QOEKOECV.js +29 -0
  113. package/dist/cli-bundle/chunks/chunk-RHSFOMHU.js +2 -0
  114. package/dist/cli-bundle/chunks/chunk-XOD2PCB6.js +20 -0
  115. package/dist/cli-bundle/chunks/{chunk-JT6XF6GE.js → chunk-YVEQ2AMO.js} +4 -4
  116. package/dist/cli-bundle/chunks/register-list-query-KSK3R63M.js +11 -0
  117. package/dist/cli-bundle/chunks/register-mutation-IQ5C7U6O.js +20 -0
  118. package/dist/cli-bundle/chunks/{register-operations-I5W3KMGB.js → register-operations-DWVHR2NC.js} +2 -2
  119. package/dist/cli-bundle/chunks/register-setup-BQ5SVD4B.js +2 -0
  120. package/dist/cli-bundle/focused-chunks/chunk-3WRPWLA7.js +3 -0
  121. package/dist/cli-bundle/focused-chunks/chunk-7MBUII7U.js +2 -0
  122. package/dist/cli-bundle/focused-chunks/chunk-COPBO5HW.js +8 -0
  123. package/dist/cli-bundle/focused-chunks/chunk-DUN4IXYN.js +20 -0
  124. package/dist/cli-bundle/focused-chunks/{chunk-LIJIA4TY.js → chunk-EE5QSM4Z.js} +3 -3
  125. package/dist/cli-bundle/focused-chunks/chunk-HJVARYM3.js +6 -0
  126. package/dist/cli-bundle/focused-chunks/chunk-IAUOUGVR.js +177 -0
  127. package/dist/cli-bundle/focused-chunks/chunk-KOOMJ54F.js +2 -0
  128. package/dist/cli-bundle/focused-chunks/chunk-MZDXX7JY.js +56 -0
  129. package/dist/cli-bundle/focused-chunks/{chunk-M6PBRFSH.js → chunk-OPFHFGDD.js} +2 -2
  130. package/dist/cli-bundle/focused-chunks/chunk-QHNETP77.js +9 -0
  131. package/dist/cli-bundle/focused-chunks/{chunk-3BZEOXLT.js → chunk-RMWES4M6.js} +2 -2
  132. package/dist/cli-bundle/focused-chunks/chunk-RXT4P5QH.js +10 -0
  133. package/dist/cli-bundle/focused-chunks/chunk-SDOL6FM2.js +12 -0
  134. package/dist/cli-bundle/focused-chunks/chunk-SQV4AAUC.js +2 -0
  135. package/dist/cli-bundle/focused-chunks/{chunk-PEFABF7E.js → chunk-WE3IUNIW.js} +3 -3
  136. package/dist/cli-bundle/focused-chunks/chunk-YALOUBWJ.js +2 -0
  137. package/dist/cli-bundle/main.js +20 -20
  138. package/dist/cli-bundle/sdk-authoring.js +1 -1
  139. package/dist/cli-bundle/sdk-contracts.js +2 -2
  140. package/dist/cli-bundle/sdk-core.js +29 -29
  141. package/dist/cli-bundle/sdk-governance.js +1 -1
  142. package/dist/cli-bundle/sdk-graph.js +1 -1
  143. package/dist/cli-bundle/sdk-merge.js +42 -42
  144. package/dist/cli-bundle/sdk-query.js +1 -1
  145. package/dist/cli-bundle/sdk-runtime.js +1 -1
  146. package/dist/cli-bundle/sdk-testing.js +1 -1
  147. package/dist/cli-bundle/sdk.js +11 -11
  148. package/dist/cli.js +1 -104
  149. package/dist/core/checkpoint/checkpoint-gc.js +1 -169
  150. package/dist/core/checkpoint/mutation-checkpoint.js +2 -133
  151. package/dist/core/config/nested-settings.js +1 -534
  152. package/dist/core/config/positional-value.js +1 -109
  153. package/dist/core/diagnostics/remediation.js +1 -506
  154. package/dist/core/extensions/activation-summary-markdown.js +2 -145
  155. package/dist/core/extensions/activation-summary.js +1 -92
  156. package/dist/core/extensions/activation-transaction.js +1 -46
  157. package/dist/core/extensions/capability-usage.js +1 -173
  158. package/dist/core/extensions/command-hook-context.js +1 -13
  159. package/dist/core/extensions/command-metadata-contract.js +1 -22
  160. package/dist/core/extensions/command-visibility-tier.js +1 -29
  161. package/dist/core/extensions/contribution-inventory.js +1 -173
  162. package/dist/core/extensions/exporter-output-contract.js +1 -66
  163. package/dist/core/extensions/extension-candidate.js +1 -18
  164. package/dist/core/extensions/extension-capability-aliases.js +1 -158
  165. package/dist/core/extensions/extension-hook-runtime.js +1 -699
  166. package/dist/core/extensions/extension-policy.js +1 -599
  167. package/dist/core/extensions/extension-registries.js +1 -62
  168. package/dist/core/extensions/extension-runtime-helpers.js +1 -33
  169. package/dist/core/extensions/extension-types.js +1 -102
  170. package/dist/core/extensions/flag-definition-validation.js +1 -52
  171. package/dist/core/extensions/flag-value-types.js +1 -64
  172. package/dist/core/extensions/index.js +1 -526
  173. package/dist/core/extensions/item-field-types.js +1 -39
  174. package/dist/core/extensions/item-fields.js +1 -261
  175. package/dist/core/extensions/loader.js +1 -2223
  176. package/dist/core/extensions/manifest-schema.js +1 -69
  177. package/dist/core/extensions/module-graph-snapshot.js +1 -33
  178. package/dist/core/extensions/preflight-ownership.js +1 -41
  179. package/dist/core/extensions/registration-validation.js +1 -82
  180. package/dist/core/extensions/registration-values.js +1 -209
  181. package/dist/core/extensions/reserved-host-flags.js +1 -36
  182. package/dist/core/extensions/runtime-registrations.js +1 -67
  183. package/dist/core/extensions/service-ownership.js +1 -19
  184. package/dist/core/extensions/version-compat.js +1 -216
  185. package/dist/core/fs/fs-utils.js +2 -158
  186. package/dist/core/fs/host-environment-errors.js +1 -141
  187. package/dist/core/fs/index.js +1 -9
  188. package/dist/core/fs/path-utils.js +1 -17
  189. package/dist/core/governance/content-fields.js +1 -160
  190. package/dist/core/governance/issue-codes.js +1 -151
  191. package/dist/core/governance/metadata-coverage.js +1 -358
  192. package/dist/core/history/drift-cache.js +3 -72
  193. package/dist/core/history/drift-scan.js +1 -342
  194. package/dist/core/history/event-classification.js +1 -109
  195. package/dist/core/history/event-index.js +8 -784
  196. package/dist/core/history/history-compact-bulk.js +1 -104
  197. package/dist/core/history/history-diff.js +1 -158
  198. package/dist/core/history/history-rewrite.d.ts +6 -1
  199. package/dist/core/history/history-rewrite.js +1 -107
  200. package/dist/core/history/history-storage-stats.js +1 -102
  201. package/dist/core/history/history-stream-policy.js +1 -62
  202. package/dist/core/history/history.js +2 -617
  203. package/dist/core/history/identity.js +1 -30
  204. package/dist/core/history/index.js +1 -9
  205. package/dist/core/history/projection.js +1 -196
  206. package/dist/core/history/read.d.ts +9 -0
  207. package/dist/core/history/read.js +1 -57
  208. package/dist/core/history/replay.js +2 -439
  209. package/dist/core/history/version-address.js +1 -32
  210. package/dist/core/history/workspace-history.js +2 -433
  211. package/dist/core/io/body-file.js +1 -62
  212. package/dist/core/io/bulk-ids-input.js +1 -112
  213. package/dist/core/item/actionability.js +1 -327
  214. package/dist/core/item/dependency-reference.js +1 -20
  215. package/dist/core/item/id.js +1 -112
  216. package/dist/core/item/index.js +1 -12
  217. package/dist/core/item/item-format-version.js +1 -78
  218. package/dist/core/item/item-format.js +5 -1473
  219. package/dist/core/item/item-record.js +1 -23
  220. package/dist/core/item/item-type-definition.js +1 -133
  221. package/dist/core/item/parent-reference-policy.js +1 -57
  222. package/dist/core/item/parse.js +2 -603
  223. package/dist/core/item/plan-lifecycle.js +1 -19
  224. package/dist/core/item/priority.js +1 -61
  225. package/dist/core/item/sprint-release-format.js +1 -38
  226. package/dist/core/item/status-filter.js +1 -115
  227. package/dist/core/item/status.js +1 -43
  228. package/dist/core/item/toon-decode.js +1 -29
  229. package/dist/core/item/type-registry.js +1 -715
  230. package/dist/core/item/type-synonyms.js +1 -38
  231. package/dist/core/lock/index.js +1 -9
  232. package/dist/core/lock/lock-gc.js +1 -240
  233. package/dist/core/lock/lock.js +3 -590
  234. package/dist/core/output/mutation-projection.js +1 -217
  235. package/dist/core/output/output-control.js +1 -25
  236. package/dist/core/output/output.js +11 -494
  237. package/dist/core/output/query-summary.js +1 -58
  238. package/dist/core/output/tabular.js +1 -77
  239. package/dist/core/packages/manifest.js +1 -244
  240. package/dist/core/packages/root.js +1 -84
  241. package/dist/core/profile/profile-describe.js +1 -83
  242. package/dist/core/profile/profile-lint.js +1 -415
  243. package/dist/core/profile/profile-plan.js +0 -0
  244. package/dist/core/profile/profile-presets.js +1 -370
  245. package/dist/core/reproducibility/context.js +1 -82
  246. package/dist/core/schema/fields-file.js +2 -288
  247. package/dist/core/schema/item-types-file.js +2 -296
  248. package/dist/core/schema/runtime-field-filters.js +1 -49
  249. package/dist/core/schema/runtime-field-values.js +1 -313
  250. package/dist/core/schema/runtime-schema.js +2 -826
  251. package/dist/core/schema/status-defs-file.js +2 -227
  252. package/dist/core/schema/status-token.js +1 -31
  253. package/dist/core/schema/type-inference.js +1 -95
  254. package/dist/core/schema/type-presets.js +1 -87
  255. package/dist/core/schema/type-workflows.js +1 -104
  256. package/dist/core/search/background-refresh.js +2 -286
  257. package/dist/core/search/bm25.js +1 -146
  258. package/dist/core/search/cache.js +2 -534
  259. package/dist/core/search/corpus.js +1 -311
  260. package/dist/core/search/embedding-batches.js +1 -163
  261. package/dist/core/search/eval.js +1 -225
  262. package/dist/core/search/http-client.js +1 -75
  263. package/dist/core/search/providers.js +1 -242
  264. package/dist/core/search/relevance.js +1 -244
  265. package/dist/core/search/semantic-defaults.js +1 -199
  266. package/dist/core/search/staleness.js +1 -30
  267. package/dist/core/search/vector-stores.js +2 -664
  268. package/dist/core/search/vectorization-metadata.js +1 -81
  269. package/dist/core/sentry/helpers.js +1 -272
  270. package/dist/core/sentry/instrument.js +1 -387
  271. package/dist/core/session/session-state.js +1 -260
  272. package/dist/core/shared/agent-session-context.js +1 -133
  273. package/dist/core/shared/author.js +1 -1172
  274. package/dist/core/shared/command-types.js +1 -4
  275. package/dist/core/shared/conflict-markers.js +1 -31
  276. package/dist/core/shared/constants.js +1 -405
  277. package/dist/core/shared/errors.js +1 -20
  278. package/dist/core/shared/html-entity-decode.js +1 -131
  279. package/dist/core/shared/index.js +1 -12
  280. package/dist/core/shared/item-metadata-contract.js +1 -89
  281. package/dist/core/shared/lazy-module.js +1 -16
  282. package/dist/core/shared/levenshtein.js +1 -61
  283. package/dist/core/shared/memo.js +1 -19
  284. package/dist/core/shared/numeric-parsers.js +1 -20
  285. package/dist/core/shared/option-alias-visibility.js +1 -67
  286. package/dist/core/shared/primitives.js +1 -127
  287. package/dist/core/shared/serial-queue.js +1 -79
  288. package/dist/core/shared/serialization.js +1 -210
  289. package/dist/core/shared/split-comma-list.js +1 -30
  290. package/dist/core/shared/text-normalization.js +1 -38
  291. package/dist/core/shared/time.js +1 -306
  292. package/dist/core/store/index.js +1 -12
  293. package/dist/core/store/item-format-migration.js +1 -125
  294. package/dist/core/store/item-metadata-cache.js +1 -1116
  295. package/dist/core/store/item-metadata-query-index.js +9 -394
  296. package/dist/core/store/item-metadata-read-work.js +1 -43
  297. package/dist/core/store/item-store.js +1 -693
  298. package/dist/core/store/paths.d.ts +1 -1
  299. package/dist/core/store/paths.js +1 -214
  300. package/dist/core/store/settings-read-cache.js +1 -85
  301. package/dist/core/store/settings-validator.js +1 -421
  302. package/dist/core/store/settings.js +3 -1309
  303. package/dist/core/store/tracker-preflight.js +1 -141
  304. package/dist/core/telemetry/consent.js +5 -108
  305. package/dist/core/telemetry/observability.js +1 -246
  306. package/dist/core/telemetry/runtime.js +4 -1988
  307. package/dist/core/test/background-runs.js +4 -945
  308. package/dist/core/test/item-test-run-tracking.js +1 -63
  309. package/dist/core/test/run-selectors.js +1 -120
  310. package/dist/core/validate/estimate-defaults.js +1 -89
  311. package/dist/core/validate/fix-planning.js +1 -189
  312. package/dist/core/validate/linked-artifact-reference.js +1 -36
  313. package/dist/core/validate/missing-by-type.js +1 -34
  314. package/dist/core/validate/missing-link-owners.js +1 -95
  315. package/dist/core/validate/stale-file-classification.js +1 -82
  316. package/dist/mcp/http-server.js +5 -448
  317. package/dist/mcp/legacy-adapter.js +1 -77
  318. package/dist/mcp/runtime-capabilities.js +1 -200
  319. package/dist/mcp/server.js +4 -1233
  320. package/dist/mcp/tool-definitions.js +1 -804
  321. package/dist/sdk/actionability.js +1 -13
  322. package/dist/sdk/agent/closed-domain-contracts.js +1 -161
  323. package/dist/sdk/agent/command-recovery.js +1 -59
  324. package/dist/sdk/agent/command-suggestions.js +1 -66
  325. package/dist/sdk/agent/create-option-policy.js +1 -31
  326. package/dist/sdk/agent/identity-config.js +1 -106
  327. package/dist/sdk/agent/item-addressing.js +1 -207
  328. package/dist/sdk/agent/refusal-closure-census.js +1 -151
  329. package/dist/sdk/agent/refusal-closure.js +1 -133
  330. package/dist/sdk/agent/refusal-corpus-contracts.js +1 -193
  331. package/dist/sdk/agent/refusal-reachability.js +1 -593
  332. package/dist/sdk/agent/subcommand-recovery.js +1 -83
  333. package/dist/sdk/agent/task-transcript-contracts.js +1 -197
  334. package/dist/sdk/agent/tracker-preflight-contracts.js +1 -126
  335. package/dist/sdk/agent-capability-contracts.js +1 -428
  336. package/dist/sdk/agent-session-context.js +1 -9
  337. package/dist/sdk/annotations.js +1 -448
  338. package/dist/sdk/author-attribution.js +1 -468
  339. package/dist/sdk/authoring.js +1 -20
  340. package/dist/sdk/cli-bootstrap.js +1 -838
  341. package/dist/sdk/cli-contracts/agent-output-contracts.d.ts +1 -1
  342. package/dist/sdk/cli-contracts/agent-output-contracts.js +4 -476
  343. package/dist/sdk/cli-contracts/bootstrap-command-scanner.js +1 -79
  344. package/dist/sdk/cli-contracts/command-aliases.d.ts +4 -0
  345. package/dist/sdk/cli-contracts/command-aliases.js +1 -107
  346. package/dist/sdk/cli-contracts/command-exit-contracts.js +1 -151
  347. package/dist/sdk/cli-contracts/commander-mutation-options.js +1 -1081
  348. package/dist/sdk/cli-contracts/commander-types.js +1 -159
  349. package/dist/sdk/cli-contracts/completeness.js +1 -393
  350. package/dist/sdk/cli-contracts/enum-contracts.js +1 -222
  351. package/dist/sdk/cli-contracts/flag-contracts.js +1 -1947
  352. package/dist/sdk/cli-contracts/flag-lexicon-contracts.js +1 -347
  353. package/dist/sdk/cli-contracts/grammar-contracts.js +1 -986
  354. package/dist/sdk/cli-contracts/registration-helpers.js +7 -990
  355. package/dist/sdk/cli-contracts/runtime-contracts.d.ts +5 -0
  356. package/dist/sdk/cli-contracts/runtime-contracts.js +1 -2090
  357. package/dist/sdk/cli-contracts/schemas/assurance-definition.js +1 -324
  358. package/dist/sdk/cli-contracts/string-lists.js +1 -16
  359. package/dist/sdk/cli-contracts/tool-option-contracts.js +1 -461
  360. package/dist/sdk/cli-contracts/tool-parameter-tables.js +1 -2167
  361. package/dist/sdk/cli-contracts/tool-schema.d.ts +3 -1
  362. package/dist/sdk/cli-contracts/tool-schema.js +1 -1664
  363. package/dist/sdk/cli-contracts/typed-action-inputs.js +1 -4
  364. package/dist/sdk/cli-contracts.d.ts +1 -1
  365. package/dist/sdk/cli-contracts.js +1 -17
  366. package/dist/sdk/cli-program.js +1 -49
  367. package/dist/sdk/command-line.d.ts +2 -5
  368. package/dist/sdk/command-line.js +1 -78
  369. package/dist/sdk/comments.js +1 -133
  370. package/dist/sdk/compile-cache.js +1 -73
  371. package/dist/sdk/completion.js +157 -837
  372. package/dist/sdk/compose.js +1 -1090
  373. package/dist/sdk/config.js +1 -1204
  374. package/dist/sdk/context/recency.js +1 -33
  375. package/dist/sdk/context/semantic-session-attribution.js +1 -82
  376. package/dist/sdk/context/usage-egress.js +1 -29
  377. package/dist/sdk/context/usage-ledger.js +3 -185
  378. package/dist/sdk/context-intent-contracts.js +1 -709
  379. package/dist/sdk/context-intent-runtime.js +1 -115
  380. package/dist/sdk/context-packing.js +1 -218
  381. package/dist/sdk/context-relevance.js +1 -503
  382. package/dist/sdk/context-signal-store.js +2 -426
  383. package/dist/sdk/context-usage.js +1 -367
  384. package/dist/sdk/contracts.js +1 -23
  385. package/dist/sdk/core-governance.js +1 -14
  386. package/dist/sdk/core.js +1 -14
  387. package/dist/sdk/corpus-shape.js +1 -401
  388. package/dist/sdk/define.js +1 -220
  389. package/dist/sdk/dependencies.js +1 -718
  390. package/dist/sdk/dependency-flag-validation.js +1 -156
  391. package/dist/sdk/dependency-provenance.js +1 -135
  392. package/dist/sdk/docs.js +1 -14
  393. package/dist/sdk/duplicates.js +1 -40
  394. package/dist/sdk/environment/agent-environment.js +1 -466
  395. package/dist/sdk/environment/host-environment-errors.js +1 -8
  396. package/dist/sdk/environment/project-runtime-compatibility.js +1 -481
  397. package/dist/sdk/environment/source-context.js +1 -28
  398. package/dist/sdk/environment/tracker-preflight.js +1 -9
  399. package/dist/sdk/error-code-catalog.js +1 -153
  400. package/dist/sdk/error-runtime.js +1 -58
  401. package/dist/sdk/errors.js +1 -58
  402. package/dist/sdk/eval.js +1 -190
  403. package/dist/sdk/extension/author-manifest.js +1 -92
  404. package/dist/sdk/extension/bundled-catalog.js +1 -332
  405. package/dist/sdk/extension/concurrency.js +1 -25
  406. package/dist/sdk/extension/copy-scope.d.ts +2 -0
  407. package/dist/sdk/extension/copy-scope.js +2 -0
  408. package/dist/sdk/extension/custom-field-collisions.js +1 -30
  409. package/dist/sdk/extension/describe.js +3 -189
  410. package/dist/sdk/extension/doctor.js +1 -606
  411. package/dist/sdk/extension/install-plan.d.ts +69 -0
  412. package/dist/sdk/extension/install-plan.js +2 -0
  413. package/dist/sdk/extension/install-receipts.d.ts +7 -0
  414. package/dist/sdk/extension/install-receipts.js +2 -0
  415. package/dist/sdk/extension/install-runtime.js +3 -313
  416. package/dist/sdk/extension/install-snapshot.js +1 -66
  417. package/dist/sdk/extension/install-sources.js +5 -1057
  418. package/dist/sdk/extension/managed-state.js +2 -252
  419. package/dist/sdk/extension/migrations.js +2 -174
  420. package/dist/sdk/extension/output-ownership.js +1 -25
  421. package/dist/sdk/extension/runtime-summary.js +1 -18
  422. package/dist/sdk/extension/scaffold.js +4 -2308
  423. package/dist/sdk/extension/shared.js +1 -147
  424. package/dist/sdk/extension/source-resolution.js +1 -65
  425. package/dist/sdk/extension/update-check.js +1 -67
  426. package/dist/sdk/extension-command-context.js +1 -44
  427. package/dist/sdk/extension-contracts.js +1 -73
  428. package/dist/sdk/extension.d.ts +7 -2
  429. package/dist/sdk/extension.js +1 -2196
  430. package/dist/sdk/files.js +1 -535
  431. package/dist/sdk/flag-invocation-contracts.d.ts +0 -5
  432. package/dist/sdk/flag-invocation-contracts.js +1 -344
  433. package/dist/sdk/generated/generated-error-code-catalog-part-1.js +1 -2224
  434. package/dist/sdk/generated/generated-error-code-catalog-part-2.js +1 -2236
  435. package/dist/sdk/generated-error-code-catalog.js +1 -16
  436. package/dist/sdk/governance/assurance-action-contracts.js +1 -4
  437. package/dist/sdk/governance/assurance-action.js +1 -411
  438. package/dist/sdk/governance/assurance-limits.js +1 -10
  439. package/dist/sdk/governance/assurance-mutation-error.js +1 -81
  440. package/dist/sdk/governance/assurance-presets.js +1 -135
  441. package/dist/sdk/governance/assurance-runtime.js +1 -238
  442. package/dist/sdk/governance/assurance.js +4 -1182
  443. package/dist/sdk/governance/boundary-fixtures.js +1 -200
  444. package/dist/sdk/governance/coverage-assurance.js +1 -60
  445. package/dist/sdk/governance/defect-recurrence-coverage.js +1 -188
  446. package/dist/sdk/governance/defect-recurrence-graph.js +1 -120
  447. package/dist/sdk/governance/defect-recurrence-signals.js +1 -24
  448. package/dist/sdk/governance/defect-recurrence.js +1 -623
  449. package/dist/sdk/governance/extension-host-version.js +1 -115
  450. package/dist/sdk/governance/gc.js +1 -368
  451. package/dist/sdk/governance/health.js +1 -2367
  452. package/dist/sdk/governance/hierarchy-validation.js +1 -108
  453. package/dist/sdk/governance/linked-file-report.js +1 -71
  454. package/dist/sdk/governance/merge-receipt-history.js +1 -206
  455. package/dist/sdk/governance/provenance-health.js +1 -282
  456. package/dist/sdk/governance/reindex.js +4 -761
  457. package/dist/sdk/governance/stale-work.js +1 -82
  458. package/dist/sdk/governance/status-role-diagnostics.js +1 -35
  459. package/dist/sdk/governance/storage-integrity.js +1 -280
  460. package/dist/sdk/governance/tracked-runtime-cache.js +1 -106
  461. package/dist/sdk/governance/upgrade.js +2 -327
  462. package/dist/sdk/governance/validate-history-drift.js +1 -81
  463. package/dist/sdk/governance/validate-item-reader.js +1 -17
  464. package/dist/sdk/governance/validate-normalization.js +1 -36
  465. package/dist/sdk/governance/validate.js +1 -2261
  466. package/dist/sdk/governance/workspace-position.js +1 -163
  467. package/dist/sdk/governance.d.ts +1 -0
  468. package/dist/sdk/governance.js +1 -31
  469. package/dist/sdk/graph/adapter.js +1 -181
  470. package/dist/sdk/graph/analytics.js +1 -474
  471. package/dist/sdk/graph/assembly.js +1 -377
  472. package/dist/sdk/graph/cache.js +1 -160
  473. package/dist/sdk/graph/centrality.js +1 -258
  474. package/dist/sdk/graph/conformance.js +1 -130
  475. package/dist/sdk/graph/deadline-scheduling.d.ts +90 -0
  476. package/dist/sdk/graph/deadline-scheduling.js +2 -0
  477. package/dist/sdk/graph/durable-cache.d.ts +1 -1
  478. package/dist/sdk/graph/durable-cache.js +1 -361
  479. package/dist/sdk/graph/governance-contracts.js +1 -34
  480. package/dist/sdk/graph/governance.d.ts +13 -1
  481. package/dist/sdk/graph/governance.js +1 -735
  482. package/dist/sdk/graph/hierarchy-integrity.js +1 -310
  483. package/dist/sdk/graph/index.d.ts +3 -2
  484. package/dist/sdk/graph/index.js +1 -26
  485. package/dist/sdk/graph/lifecycle-coverage.d.ts +32 -0
  486. package/dist/sdk/graph/lifecycle-coverage.js +2 -0
  487. package/dist/sdk/graph/mutation-advisory.js +1 -176
  488. package/dist/sdk/graph/remediation.js +1 -197
  489. package/dist/sdk/graph/run.d.ts +15 -1
  490. package/dist/sdk/graph/run.js +1 -768
  491. package/dist/sdk/graph/scheduling.js +1 -124
  492. package/dist/sdk/graph/traversal.js +1 -284
  493. package/dist/sdk/graph/workspace-relationship-kind-registry.js +1 -27
  494. package/dist/sdk/graph.js +1 -15
  495. package/dist/sdk/guide-topics.js +1 -707
  496. package/dist/sdk/guide.js +1 -279
  497. package/dist/sdk/history/maintenance.d.ts +71 -0
  498. package/dist/sdk/history/maintenance.js +2 -0
  499. package/dist/sdk/history/salvage.js +2 -247
  500. package/dist/sdk/history/subject.d.ts +19 -0
  501. package/dist/sdk/history/subject.js +2 -0
  502. package/dist/sdk/history-analytics.js +1 -282
  503. package/dist/sdk/history-compact.js +1 -527
  504. package/dist/sdk/history-mcp.js +1 -68
  505. package/dist/sdk/history-provenance.js +1 -182
  506. package/dist/sdk/history-read.js +1 -96
  507. package/dist/sdk/history-redact.d.ts +1 -14
  508. package/dist/sdk/history-redact.js +1 -643
  509. package/dist/sdk/history-repair.d.ts +5 -0
  510. package/dist/sdk/history-repair.js +1 -657
  511. package/dist/sdk/improvement-ledger-validation.js +1 -62
  512. package/dist/sdk/improvement-ledger.js +2 -257
  513. package/dist/sdk/index.d.ts +4 -0
  514. package/dist/sdk/index.js +1 -183
  515. package/dist/sdk/init-agent-guidance.js +2 -496
  516. package/dist/sdk/init.js +2 -820
  517. package/dist/sdk/invocation-author.js +1 -39
  518. package/dist/sdk/item-children.js +1 -90
  519. package/dist/sdk/item-metadata-index.js +1 -15
  520. package/dist/sdk/item-schedule.js +1 -27
  521. package/dist/sdk/item-transaction.js +1 -396
  522. package/dist/sdk/learnings.js +1 -29
  523. package/dist/sdk/lifecycle/append.js +2 -53
  524. package/dist/sdk/lifecycle/claim.d.ts +2 -0
  525. package/dist/sdk/lifecycle/claim.js +1 -242
  526. package/dist/sdk/lifecycle/close-many.js +1 -438
  527. package/dist/sdk/lifecycle/close.js +1 -468
  528. package/dist/sdk/lifecycle/copy.js +1 -212
  529. package/dist/sdk/lifecycle/create.js +1 -1949
  530. package/dist/sdk/lifecycle/delete.js +1 -45
  531. package/dist/sdk/lifecycle/event-validation-messages.js +1 -91
  532. package/dist/sdk/lifecycle/focus.js +1 -91
  533. package/dist/sdk/lifecycle/hierarchy-mutation-lock.js +1 -24
  534. package/dist/sdk/lifecycle/legacy-none-tokens.js +1 -149
  535. package/dist/sdk/lifecycle/lifecycle-transitions.js +1 -40
  536. package/dist/sdk/lifecycle/mcp-actions.d.ts +2 -0
  537. package/dist/sdk/lifecycle/mcp-actions.js +1 -51
  538. package/dist/sdk/lifecycle/metadata-normalizers.js +1 -46
  539. package/dist/sdk/lifecycle/mutation-command-options.js +1 -9
  540. package/dist/sdk/lifecycle/plan.js +1 -1606
  541. package/dist/sdk/lifecycle/recurrence-parsers.js +1 -147
  542. package/dist/sdk/lifecycle/reopen.js +1 -68
  543. package/dist/sdk/lifecycle/repeatable-metadata-parsers.js +1 -143
  544. package/dist/sdk/lifecycle/restore.d.ts +1 -0
  545. package/dist/sdk/lifecycle/restore.js +1 -330
  546. package/dist/sdk/lifecycle/shared-unset-fields.js +1 -295
  547. package/dist/sdk/lifecycle/update-many.js +1 -861
  548. package/dist/sdk/lifecycle/update.js +1 -2136
  549. package/dist/sdk/lifecycle-completion.js +1 -92
  550. package/dist/sdk/lifecycle-policy.js +1 -120
  551. package/dist/sdk/linked-artifacts.js +1 -530
  552. package/dist/sdk/mcp/apps.js +4 -133
  553. package/dist/sdk/mcp/authorization.js +1 -404
  554. package/dist/sdk/mcp/discovery.js +1 -494
  555. package/dist/sdk/mcp/interactions.js +1 -336
  556. package/dist/sdk/mcp/protocol.d.ts +7 -0
  557. package/dist/sdk/mcp/protocol.js +1 -184
  558. package/dist/sdk/mcp/skills.js +1 -389
  559. package/dist/sdk/mcp/subscriptions.js +1 -211
  560. package/dist/sdk/mcp/tasks.js +2 -430
  561. package/dist/sdk/mcp/transport.js +1 -260
  562. package/dist/sdk/merge/abandoned-receipts.js +1 -46
  563. package/dist/sdk/merge/driver.js +1 -212
  564. package/dist/sdk/merge/index.js +1 -16
  565. package/dist/sdk/merge/install.js +3 -561
  566. package/dist/sdk/merge/receipt-file-boundary.js +1 -46
  567. package/dist/sdk/merge/receipt-operation.js +1 -96
  568. package/dist/sdk/merge/receipt-schema.js +1 -397
  569. package/dist/sdk/merge/receipts.js +4 -525
  570. package/dist/sdk/merge/reconcile.js +1 -352
  571. package/dist/sdk/merge/three-way.js +3 -775
  572. package/dist/sdk/merge.js +1 -10
  573. package/dist/sdk/mutation-events.js +1 -292
  574. package/dist/sdk/mutation-guard.js +1 -216
  575. package/dist/sdk/notes.js +1 -139
  576. package/dist/sdk/output-contracts.js +1 -172
  577. package/dist/sdk/output-projection.js +1 -430
  578. package/dist/sdk/output-token-accounting.js +1 -140
  579. package/dist/sdk/output.js +1 -64
  580. package/dist/sdk/ownership-source.js +1 -21
  581. package/dist/sdk/package-import-adapters.js +1 -442
  582. package/dist/sdk/package-migrations.js +1 -20
  583. package/dist/sdk/package-runtime-options.js +1 -80
  584. package/dist/sdk/pagination.js +1 -162
  585. package/dist/sdk/profile.js +1 -454
  586. package/dist/sdk/provenance.js +1 -258
  587. package/dist/sdk/public-surface.json +1 -1
  588. package/dist/sdk/query/activity.js +1 -401
  589. package/dist/sdk/query/aggregate.d.ts +16 -0
  590. package/dist/sdk/query/aggregate.js +1 -390
  591. package/dist/sdk/query/calendar.js +1 -964
  592. package/dist/sdk/query/complete-list.js +1 -215
  593. package/dist/sdk/query/context.js +1 -1702
  594. package/dist/sdk/query/duplicate-candidates.js +1 -70
  595. package/dist/sdk/query/get.js +1 -450
  596. package/dist/sdk/query/history.js +1 -186
  597. package/dist/sdk/query/item-filter-options.js +1 -9
  598. package/dist/sdk/query/light-metadata.js +1 -18
  599. package/dist/sdk/query/list-filter-shared.js +1 -81
  600. package/dist/sdk/query/list.js +1 -1304
  601. package/dist/sdk/query/multi-value-filters.js +1 -78
  602. package/dist/sdk/query/next.js +1 -513
  603. package/dist/sdk/query/parsers.js +1 -44
  604. package/dist/sdk/query/projection-contracts.js +1 -184
  605. package/dist/sdk/query/search-contracts.js +1 -230
  606. package/dist/sdk/query/search-pagination.js +1 -35
  607. package/dist/sdk/query/search-rendering.js +1 -105
  608. package/dist/sdk/query/search.js +2 -1987
  609. package/dist/sdk/query.js +1 -35
  610. package/dist/sdk/read-output/continuation.js +1 -194
  611. package/dist/sdk/read-output-budget.js +1 -135
  612. package/dist/sdk/read-output-contracts.js +1 -1225
  613. package/dist/sdk/read-output-rows.js +1 -186
  614. package/dist/sdk/read-output-session.js +1 -208
  615. package/dist/sdk/relationship-analytics.js +1 -410
  616. package/dist/sdk/relationship-context.js +1 -284
  617. package/dist/sdk/relationship-history.js +4 -519
  618. package/dist/sdk/relationship-kinds/contract.js +1 -22
  619. package/dist/sdk/relationship-migration.js +1 -77
  620. package/dist/sdk/relationships.js +1 -579
  621. package/dist/sdk/reproducibility/process.js +1 -87
  622. package/dist/sdk/runtime-action-aliases.js +1 -59
  623. package/dist/sdk/runtime-extended-actions.js +1 -177
  624. package/dist/sdk/runtime-input.js +1 -614
  625. package/dist/sdk/runtime-primitives.js +1 -84
  626. package/dist/sdk/runtime-public-contracts.js +1 -4
  627. package/dist/sdk/runtime-stats-options.js +1 -38
  628. package/dist/sdk/runtime.js +1 -1928
  629. package/dist/sdk/scheduling-shortcuts.js +1 -63
  630. package/dist/sdk/schema-migration.js +3 -856
  631. package/dist/sdk/schema.js +1 -1376
  632. package/dist/sdk/search-refresh-worker.js +1 -18
  633. package/dist/sdk/similarity-scoring.js +1 -53
  634. package/dist/sdk/similarity.js +1 -326
  635. package/dist/sdk/start-task-status.js +1 -14
  636. package/dist/sdk/stats.js +1 -270
  637. package/dist/sdk/structured-mutations.js +1 -580
  638. package/dist/sdk/telemetry-flush.js +1 -13
  639. package/dist/sdk/telemetry.js +1 -405
  640. package/dist/sdk/templates.js +2 -292
  641. package/dist/sdk/test/batch.js +2 -509
  642. package/dist/sdk/test/entry.js +1 -70
  643. package/dist/sdk/test/execution.js +6 -2211
  644. package/dist/sdk/test/linked-command-detection.js +1 -546
  645. package/dist/sdk/test/measurements.js +1 -91
  646. package/dist/sdk/test/parsers.js +1 -545
  647. package/dist/sdk/test/runs.js +1 -193
  648. package/dist/sdk/test/trust.js +2 -206
  649. package/dist/sdk/testing.js +4 -1391
  650. package/dist/sdk/traceability/runtime-files-lookup.js +1 -32
  651. package/dist/sdk/traceability/source-traceability.js +1 -292
  652. package/dist/sdk/tracker-root-discovery.js +1 -9
  653. package/dist/sdk/workspace-contracts-cache.js +1 -28
  654. package/dist/sdk/workspace-contracts.js +1 -33
  655. package/dist/sdk/workspace-memory.js +2 -318
  656. package/dist/sdk/workspace-recipe.js +1 -71
  657. package/dist/sdk/workspace-snapshot.js +4 -613
  658. package/dist/sdk/workspace-transaction-gc.js +1 -149
  659. package/dist/sdk/workspace-transaction.js +2 -363
  660. package/dist/sdk/workspace.js +3 -127
  661. package/dist/types/index.js +1 -9
  662. package/dist/types.js +1 -245
  663. package/docs/AGENT_GUIDE.md +1 -1
  664. package/docs/CONTEXT_ALGORITHM_PORTFOLIO.md +167 -0
  665. package/docs/DIAGNOSTIC_OUTPUT_CONTRACTS.md +9 -3
  666. package/docs/EXTENSIONS.md +1 -0
  667. package/docs/HISTORY_MAINTENANCE.md +125 -0
  668. package/docs/MCP_2026_07_28_CONFORMANCE.md +20 -10
  669. package/docs/PACKAGE_EVIDENCE.md +92 -0
  670. package/docs/PLANNING_MEASUREMENTS.md +183 -0
  671. package/docs/README.md +3 -0
  672. package/docs/SCRIPTING.md +21 -0
  673. package/docs/TESTING.md +23 -0
  674. package/docs/generated/FLAG_LEXICON_BUDGETS.md +5 -5
  675. package/docs/generated/REFUSAL_CLOSURE_CENSUS.md +2 -2
  676. package/marketplace.json +2 -2
  677. package/package.json +1 -1
  678. package/packages/pm-beads/package.json +1 -1
  679. package/packages/pm-calendar/package.json +1 -1
  680. package/packages/pm-command-kit/package.json +1 -1
  681. package/packages/pm-digital-twin/package.json +1 -1
  682. package/packages/pm-governance-audit/package.json +1 -1
  683. package/packages/pm-guide-shell/package.json +1 -1
  684. package/packages/pm-kanban/package.json +1 -1
  685. package/packages/pm-lifecycle-hooks/package.json +1 -1
  686. package/packages/pm-linked-test-adapters/package.json +1 -1
  687. package/packages/pm-search-advanced/package.json +1 -1
  688. package/packages/pm-templates/package.json +1 -1
  689. package/packages/pm-todos/package.json +1 -1
  690. package/packages/pm-vcs/package.json +1 -1
  691. package/plugins/pm-claude/.claude-plugin/plugin.json +1 -1
  692. package/plugins/pm-codex/.codex-plugin/plugin.json +1 -1
  693. package/scripts/finalize-build.mjs +45 -3
  694. package/dist/cli-bundle/chunks/chunk-AZDFJGH6.js +0 -9
  695. package/dist/cli-bundle/chunks/chunk-BAX2BYUW.js +0 -2111
  696. package/dist/cli-bundle/chunks/chunk-CKOL5U7J.js +0 -77
  697. package/dist/cli-bundle/chunks/chunk-OF76PSDQ.js +0 -5
  698. package/dist/cli-bundle/chunks/chunk-QUWFABDM.js +0 -232
  699. package/dist/cli-bundle/chunks/chunk-QWRRFYK3.js +0 -2
  700. package/dist/cli-bundle/chunks/chunk-RWWBOWJ5.js +0 -2
  701. package/dist/cli-bundle/chunks/chunk-WGAOYSYH.js +0 -40
  702. package/dist/cli-bundle/chunks/chunk-WI2AYPA7.js +0 -2
  703. package/dist/cli-bundle/chunks/register-list-query-5JL52D33.js +0 -11
  704. package/dist/cli-bundle/chunks/register-mutation-ZPG7KMVP.js +0 -20
  705. package/dist/cli-bundle/chunks/register-setup-H4SVAVX7.js +0 -2
  706. package/dist/cli-bundle/focused-chunks/chunk-AL5ON6K6.js +0 -2
  707. package/dist/cli-bundle/focused-chunks/chunk-CHC2IDXA.js +0 -6
  708. package/dist/cli-bundle/focused-chunks/chunk-CK6QFAPZ.js +0 -20
  709. package/dist/cli-bundle/focused-chunks/chunk-EZR3GHFE.js +0 -2
  710. package/dist/cli-bundle/focused-chunks/chunk-H2WJWK7L.js +0 -56
  711. package/dist/cli-bundle/focused-chunks/chunk-NTPY5GSO.js +0 -3
  712. package/dist/cli-bundle/focused-chunks/chunk-P5O7MP5Y.js +0 -2
  713. package/dist/cli-bundle/focused-chunks/chunk-PDMW2E36.js +0 -177
  714. package/dist/cli-bundle/focused-chunks/chunk-QTVCLMSZ.js +0 -6
  715. package/dist/cli-bundle/focused-chunks/chunk-QTZRBUYA.js +0 -8
  716. package/dist/cli-bundle/focused-chunks/chunk-SGQST3PQ.js +0 -12
  717. package/dist/cli-bundle/focused-chunks/chunk-UKHASMMP.js +0 -10
  718. package/dist/cli-bundle/focused-chunks/chunk-ZPEKQHOC.js +0 -2
@@ -1,1235 +1,6 @@
1
1
  #!/usr/bin/env node
2
- /**
3
- * @module mcp/server
4
- *
5
- * Runs the MCP server adapter that exposes pm actions and contracts to external agents.
6
- */
7
-
8
- !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1950da06-8c27-5506-bc64-4bf51c1a3f1c")}catch(e){}}();
9
- import { realpathSync } from "node:fs";
10
- import { readFile } from "node:fs/promises";
11
- import path from "node:path";
12
- import readline from "node:readline";
13
- import { fileURLToPath } from "node:url";
14
- import { resolvePmCliVersion, PmCliError, decodeHtmlEntitiesInOptions, levenshteinDistanceWithinLimit, asRecordClone, createSerialQueue, evaluateMutationGuard, getSettingsPath, isMutationAction, pathExists, readSettings, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, boundAgentEpisodeIdentity, } from "../sdk/runtime-primitives.js";
15
- import { pmToolActionNestedOptionKeys } from "../sdk/cli-contracts/tool-schema.js";
16
- import { readRequiredString, runAction, runWithActiveExtensions, } from "../sdk/runtime.js";
17
- import { NARROW_TOOL_ACTIONS, TOOLS } from "./tool-definitions.js";
18
- import { normalizeWorkspaceToolArguments, resolveMcpToolAccess, resolveMcpToolSurface, } from "./runtime-capabilities.js";
19
- import { PM_MCP_PROMPT_CONTRACTS, PM_MCP_RESOURCE_CONTRACTS, } from "../sdk/agent-capability-contracts.js";
20
- import { PM_MCP_ENTRY_TOOL_NAMES, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION, PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY, discoverPmTools, parsePmToolDiscoveryOptions, } from "../sdk/mcp/discovery.js";
21
- import { commitItemMutations } from "../sdk/item-transaction.js";
22
- import { isRuntimeRecord, markMcpMutationTransportInput, } from "../sdk/runtime-input.js";
23
- import { attachOutputTokenAccounting } from "../sdk/output-token-accounting.js";
24
- import { createReproducibleProcessRunner, runWithReproducibleProcessEnvironment, } from "../sdk/reproducibility/process.js";
25
- import { parseAtomicMutationControls, resolveItemMutationDocument, } from "../sdk/structured-mutations.js";
26
- import { resolveAuthor, resolvePmRoot, resolveWorkspaceRoot, } from "../sdk/runtime-primitives.js";
27
- import { PM_MCP_ERROR_CODES, PM_MCP_META_KEYS, PM_MCP_PROTOCOL_VERSION, PmMcpProtocolError, attachMcpServerInfo, buildMcpCompleteResult, buildMcpDiscoverResult, hasMcpClientExtension, isMcpRecord, resolveMcpRequestContext, } from "../sdk/mcp/protocol.js";
28
- import { PmMcpInputRequiredError, buildMcpInputRequiredResult, parseMcpInputResponses, validateMcpJsonSchema, withMcpCachePolicy, } from "../sdk/mcp/interactions.js";
29
- import { PM_MCP_TASKS_EXTENSION, createMcpTaskStore, } from "../sdk/mcp/tasks.js";
30
- import { PmMcpSubscriptionRegistry, } from "../sdk/mcp/subscriptions.js";
31
- import { extractMcpTraceContext, runWithMcpTraceContext, } from "../sdk/mcp/authorization.js";
32
- import { LegacyMcpAdapter } from "./legacy-adapter.js";
33
- import { PM_MCP_APP_CONTRACTS, PM_MCP_APP_MIME_TYPE, PM_MCP_APPS_EXTENSION, PM_MCP_APPS_SERVER_CAPABILITY, decoratePmMcpToolsWithApps, findPmMcpAppByUri, hasPmMcpAppsCapability, renderPmMcpAppHtml, } from "../sdk/mcp/apps.js";
34
- import { PM_MCP_SKILLS_EXTENSION, PM_MCP_SKILLS_SERVER_CAPABILITY, PmMcpSkillRegistry, assertPmMcpSkillsCapability, } from "../sdk/mcp/skills.js";
35
- function runMcpAction(args) {
36
- return runAction(markMcpMutationTransportInput(args));
37
- }
38
- const PM_PACKAGE_ROOT_ENV = "PM_CLI_PACKAGE_ROOT";
39
- function resolvePmPackageRoot() {
40
- return fileURLToPath(new URL("../..", import.meta.url));
41
- }
42
- if (typeof process.env[PM_PACKAGE_ROOT_ENV] !== "string" ||
43
- process.env[PM_PACKAGE_ROOT_ENV]?.trim().length === 0) {
44
- process.env[PM_PACKAGE_ROOT_ENV] = resolvePmPackageRoot();
45
- }
46
- // Reflect the real package.json version so agents/telemetry can identify the
47
- // build serving requests (was hard-coded "1.0.0"; see pm-2nvw).
48
- const PM_MCP_SERVER_VERSION = resolvePmCliVersion(import.meta.url, ["../.."]) ?? "0.0.0";
49
- const PM_MCP_SERVER_INFO = {
50
- name: "pm-mcp",
51
- version: PM_MCP_SERVER_VERSION,
52
- description: "Stateless project-context management through pm SDK contracts.",
53
- websiteUrl: "https://github.com/unbraind/pm-cli",
54
- };
55
- const PM_MCP_SERVER_CAPABILITIES = {
56
- prompts: { listChanged: true },
57
- resources: { listChanged: true, subscribe: true },
58
- tools: { listChanged: true },
59
- extensions: {
60
- [PM_MCP_TASKS_EXTENSION]: {},
61
- [PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY,
62
- [PM_MCP_SKILLS_EXTENSION]: PM_MCP_SKILLS_SERVER_CAPABILITY,
63
- [PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]: PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,
64
- },
65
- };
66
- const PM_MCP_SUBSCRIPTIONS = new Map();
67
- function createMcpSubscriptionRegistry() {
68
- return new PmMcpSubscriptionRegistry({
69
- capabilities: PM_MCP_SERVER_CAPABILITIES,
70
- serverInfo: PM_MCP_SERVER_INFO,
71
- });
72
- }
73
- function pruneClosedMcpSubscriptionRegistries() {
74
- for (const [key, subscription] of PM_MCP_SUBSCRIPTIONS) {
75
- if (subscription.registry.size === 0)
76
- PM_MCP_SUBSCRIPTIONS.delete(key);
77
- }
78
- }
79
- const PM_MCP_CACHE_POLICIES = {
80
- prompts: { ttlMs: 60_000, cacheScope: "public" },
81
- resource: { ttlMs: 0, cacheScope: "private" },
82
- resources: { ttlMs: 60_000, cacheScope: "public" },
83
- tools: { ttlMs: 30_000, cacheScope: "private" },
84
- };
85
- const PM_MCP_DIRECT_TASK_TOOLS = new Set([
86
- "pm_graph",
87
- "pm_health",
88
- "pm_validate",
89
- ]);
90
- const PM_MCP_RUN_TASK_ACTIONS = new Set([
91
- "graph",
92
- "health",
93
- "import",
94
- "reindex",
95
- "test-all",
96
- "validate",
97
- ]);
98
- const PM_MCP_SKILL_METHODS = new Set([
99
- "skills/list",
100
- "skills/get",
101
- "resources/directory/read",
102
- ]);
103
- const PM_MCP_INSTRUCTIONS = "You have access to native pm CLI tools for git-based project management. " +
104
- "When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. " +
105
- "Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. " +
106
- "Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. " +
107
- "Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. " +
108
- "Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. " +
109
- "Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. " +
110
- "Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. " +
111
- "Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. " +
112
- "Do not pass path during real repository tracking — only pass path for sandbox or test runs.";
113
- // Tool definitions (TOOLS) live in ./tool-definitions.ts so the `pm contracts`
114
- // golden-file snapshot can import the surface without loading the server
115
- // runtime (pm-4os2). This file owns dispatch, normalization, and transport.
116
- // pm-qxwu: TOOL_SCHEMA_BASE keeps additionalProperties:true so legitimate
117
- // passthrough keeps working, which means a typo'd top-level arg (e.g.
118
- // "fullChangedField" missing the trailing "s") is silently swallowed and the
119
- // agent gets default behavior with no signal. We precompute the declared
120
- // top-level property keys for each tool and, on every tools/call, warn (without
121
- // rejecting) when an unexpected top-level key appears. The warning is surfaced
122
- // to stderr and additively in structuredContent.warnings.
123
- function declaredToolKeys(tools = TOOLS) {
124
- return new Map(tools.map((tool) => {
125
- const schema = tool.inputSchema;
126
- const properties = schema.properties ?? {};
127
- return [tool.name, Object.keys(properties)];
128
- }));
129
- }
130
- function nearestDeclaredKey(unexpected, declared) {
131
- // Cheap did-you-mean: budget grows with key length but stays small so we only
132
- // suggest genuine near-misses (a single typo / transposition for short keys).
133
- const limit = Math.max(1, Math.min(3, Math.floor(unexpected.length / 4) + 1));
134
- let best;
135
- for (const candidate of declared) {
136
- const distance = levenshteinDistanceWithinLimit(unexpected, candidate, limit);
137
- if (distance === null) {
138
- continue;
139
- }
140
- if (best === undefined || distance < best.distance) {
141
- best = { key: candidate, distance };
142
- }
143
- }
144
- return best?.key;
145
- }
146
- // pm_run is the explicit catch-all passthrough tool: extension/package actions
147
- // accept arbitrary top-level keys (see extensionOptionsFromArgs), so unexpected
148
- // keys there are by-design rather than typos and must not be flagged.
149
- const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS = new Set(["pm_run"]);
150
- const MCP_RETRY_ARGUMENT_KEYS = new Set(["inputResponses", "requestState"]);
151
- /** Resolve the optional shared cursor key without exposing it to tool input. */
152
- function resolveMcpDiscoveryCursorIntegrityKey() {
153
- const configuredKey = process.env.PM_MCP_DISCOVERY_CURSOR_KEY;
154
- if (configuredKey === undefined)
155
- return undefined;
156
- const key = Buffer.from(configuredKey, "utf8");
157
- if (key.byteLength < 32) {
158
- throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.", 64);
159
- }
160
- return key;
161
- }
162
- function detectUnexpectedTopLevelKeys(toolName, args, toolDeclaredKeys = declaredToolKeys()) {
163
- if (typeof args !== "object" || args === null || Array.isArray(args)) {
164
- return [];
165
- }
166
- if (UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName)) {
167
- return [];
168
- }
169
- const declared = toolDeclaredKeys.get(toolName);
170
- if (declared === undefined) {
171
- return [];
172
- }
173
- const declaredSet = new Set([...declared, ...MCP_RETRY_ARGUMENT_KEYS]);
174
- const warnings = [];
175
- for (const key of Object.keys(args)) {
176
- if (declaredSet.has(key)) {
177
- continue;
178
- }
179
- const suggestion = nearestDeclaredKey(key, declared);
180
- warnings.push(suggestion !== undefined
181
- ? `Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`
182
- : `Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`);
183
- }
184
- return warnings;
185
- }
186
- const HANDLERS = {
187
- pm_run: (args) => runMcpAction(args),
188
- pm_discover: async (args) => {
189
- const surface = await resolveMcpToolSurface(TOOLS, args);
190
- const cursorIntegrityKey = resolveMcpDiscoveryCursorIntegrityKey();
191
- const discoveryOptions = parsePmToolDiscoveryOptions(args);
192
- return discoverPmTools(surface.tools.map((tool) => ({
193
- name: tool.name,
194
- description: tool.description,
195
- inputSchema: tool.inputSchema,
196
- authorized: true,
197
- signals: {
198
- freshness: 1,
199
- usage: PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name) ? 1 : 0,
200
- },
201
- })), {
202
- ...discoveryOptions,
203
- profile: surface.profile,
204
- ...(cursorIntegrityKey === undefined
205
- ? {}
206
- : {
207
- cursorIntegrityKey,
208
- }),
209
- });
210
- },
211
- pm_mutate: async (args) => {
212
- const transactionId = readRequiredString(args, "transactionId");
213
- const controls = parseAtomicMutationControls(args);
214
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
215
- const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
216
- const resolved = resolveItemMutationDocument(JSON.stringify({ schema_version: 1, mutations: args.mutations }), {
217
- transactionId,
218
- idPrefix: (await readSettings(pmRoot)).id_prefix,
219
- });
220
- const { mutations, references } = resolved;
221
- if (args.dryRun === true) {
222
- return {
223
- transaction_id: transactionId,
224
- dry_run: true,
225
- mutation_count: mutations.length,
226
- mutations,
227
- references,
228
- };
229
- }
230
- const result = await runWithActiveExtensions({
231
- cwd: typeof args.cwd === "string" ? args.cwd : undefined,
232
- path: typeof args.path === "string" ? args.path : undefined,
233
- noExtensions: args.noExtensions === true,
234
- }, () => commitItemMutations({
235
- pmRoot,
236
- transactionId,
237
- author: resolveAuthor(typeof args.author === "string" ? args.author : undefined, "unknown"),
238
- mutations,
239
- ...controls,
240
- }));
241
- const { transactionId: committedTransactionId, ...commitResult } = result;
242
- return {
243
- ...commitResult,
244
- transaction_id: committedTransactionId,
245
- mutation_count: mutations.length,
246
- references,
247
- };
248
- },
249
- ...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool, action]) => [
250
- tool,
251
- (args) => runMcpAction({ ...args, action }),
252
- ])),
253
- };
254
- /** Resolve the pm action a tools/call invocation will dispatch, when knowable. */
255
- function resolveInvokedAction(toolName, args) {
256
- if (toolName === "pm_run") {
257
- return typeof args.action === "string" ? args.action : undefined;
258
- }
259
- return NARROW_TOOL_ACTIONS[toolName];
260
- }
261
- async function collectMutationGuardWarnings(toolName, action, args) {
262
- if (toolName !== "pm_mutate" && !isMutationAction(action ?? "")) {
263
- return [];
264
- }
265
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
266
- const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
267
- if (!(await pathExists(getSettingsPath(pmRoot)))) {
268
- return [];
269
- }
270
- const settings = await readSettings(pmRoot);
271
- const nestedOptions = typeof args.options === "object" &&
272
- args.options !== null &&
273
- !Array.isArray(args.options)
274
- ? args.options
275
- : {};
276
- const result = evaluateMutationGuard({
277
- author: resolveAuthor(typeof args.author === "string"
278
- ? args.author
279
- : typeof nestedOptions.author === "string"
280
- ? nestedOptions.author
281
- : undefined, settings.author_default),
282
- payload: args,
283
- settings: settings.mutation_guard,
284
- force: args.force === true || nestedOptions.force === true,
285
- });
286
- return result.warnings;
287
- }
288
- // pm-upi0: the pm-qxwu top-level detection cannot see inside the `options`
289
- // object, so a mutation-shaped key on a read tool (pm_deps options.dep) is
290
- // silently dropped before dispatch and the agent builds on state it never
291
- // created. Warn (without rejecting) on every options key absent from the
292
- // invoked action's contract; extension- and package-owned actions have no
293
- // contract table and keep arbitrary passthrough options.
294
- function detectUnexpectedOptionKeys(toolName, action, args) {
295
- const options = args.options;
296
- if (action === undefined ||
297
- typeof options !== "object" ||
298
- options === null ||
299
- Array.isArray(options)) {
300
- return [];
301
- }
302
- const declared = pmToolActionNestedOptionKeys(action);
303
- if (declared === undefined) {
304
- return [];
305
- }
306
- const declaredSet = new Set(declared);
307
- const warnings = [];
308
- for (const key of Object.keys(options)) {
309
- if (declaredSet.has(key)) {
310
- continue;
311
- }
312
- const suggestion = nearestDeclaredKey(key, declared);
313
- warnings.push(suggestion !== undefined
314
- ? `Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`
315
- : `Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`);
316
- }
317
- return warnings;
318
- }
319
- function resultContent(result, warnings, tokenAccounting = false, canonicalStructuredResult = false) {
320
- const effectiveResult = tokenAccounting
321
- ? attachOutputTokenAccounting(result, (value) => JSON.stringify(value, null, 2))
322
- : result;
323
- // pm-qxwu: warnings is additive — existing fields (content, structuredContent.result)
324
- // are never removed or renamed. The warnings array only appears when non-empty.
325
- const structuredContent = warnings !== undefined && warnings.length > 0
326
- ? { result: effectiveResult, warnings }
327
- : { result: effectiveResult };
328
- return {
329
- content: [
330
- {
331
- type: "text",
332
- text: canonicalStructuredResult
333
- ? "Canonical result: structuredContent.result"
334
- : JSON.stringify(effectiveResult, null, 2),
335
- },
336
- ],
337
- structuredContent,
338
- };
339
- }
340
- function errorContent(error, canonicalStructuredResult = false) {
341
- const code = error instanceof PmCliError ? error.exitCode : 1;
342
- const message = error instanceof Error ? error.message : String(error);
343
- const details = error instanceof PmCliError ? error.context : undefined;
344
- return {
345
- isError: true,
346
- content: [
347
- {
348
- type: "text",
349
- text: canonicalStructuredResult
350
- ? "Canonical error: structuredContent"
351
- : JSON.stringify({ error: message, code, details }, null, 2),
352
- },
353
- ],
354
- // Keep `result` present on the error envelope so consumers can read
355
- // `structuredContent.result` uniformly across success and failure (pm-l40h).
356
- structuredContent: { result: null, error: message, code, details },
357
- };
358
- }
359
- /** Retain at most 32 own, valid provenance values without cloning unbounded input. */
360
- function boundMcpClientProvenance(value) {
361
- const provenance = isRuntimeRecord(value) ? value : {};
362
- const bounded = {};
363
- let acceptedCount = 0;
364
- for (const key in provenance) {
365
- if (acceptedCount >= 32)
366
- break;
367
- if (!Object.prototype.hasOwnProperty.call(provenance, key))
368
- continue;
369
- const entry = provenance[key];
370
- if (/^[a-z][a-z0-9_-]{0,63}$/u.test(key) &&
371
- typeof entry === "string" &&
372
- entry.trim().length > 0) {
373
- bounded[key] = entry.trim().slice(0, 256);
374
- acceptedCount += 1;
375
- }
376
- }
377
- return bounded;
378
- }
379
- function readMcpClientInfo(value) {
380
- const clientInfo = isRuntimeRecord(value) ? value : {};
381
- const clientName = typeof clientInfo.name === "string" ? clientInfo.name.trim() : "";
382
- if (clientName.length === 0)
383
- return undefined;
384
- const optionalValues = [
385
- ["version", clientInfo.version, 128],
386
- ["model", clientInfo.model, 256],
387
- ["session", clientInfo.session, 256],
388
- ];
389
- const result = { name: clientName.slice(0, 128) };
390
- for (const [key, value, limit] of optionalValues) {
391
- if (typeof value === "string" && value.trim().length > 0) {
392
- result[key] = value.trim().slice(0, limit);
393
- }
394
- }
395
- const boundedProvenance = boundMcpClientProvenance(clientInfo.provenance);
396
- if (Object.keys(boundedProvenance).length > 0) {
397
- result.provenance = boundedProvenance;
398
- }
399
- const episode = boundAgentEpisodeIdentity(clientInfo.episode, false);
400
- if (episode !== undefined)
401
- result.episode = episode;
402
- return result;
403
- }
404
- async function emitMcpChangeNotifications(action) {
405
- if (isMutationAction(action ?? "")) {
406
- await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({ registry }) => PM_MCP_RESOURCE_CONTRACTS.map((resource) => registry.emitResourceUpdated(resource.uri))));
407
- }
408
- if (["extension", "install", "package", "uninstall"].includes(action ?? "")) {
409
- await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({ registry }) => registry.emitListChanged("tools")));
410
- }
411
- pruneClosedMcpSubscriptionRegistries();
412
- }
413
- /** Resolve one tool's workspace and scope SDK attribution to that request without changing process environment. */
414
- async function handleToolCall(paramsInput, clientInfo, progressiveDiscoveryNegotiated = false) {
415
- const clientSignals = clientInfo ? { client_info: clientInfo } : {};
416
- return runWithHarnessDetectionSignals({
417
- env: process.env,
418
- argv: process.argv,
419
- ...clientSignals,
420
- }, async () => {
421
- const params = asRecordClone(paramsInput);
422
- const name = readRequiredString(params, "name");
423
- const handler = Object.prototype.hasOwnProperty.call(HANDLERS, name)
424
- ? HANDLERS[name]
425
- : undefined;
426
- if (!handler) {
427
- throw new PmCliError(`Unknown pm MCP tool: ${name}`, 64);
428
- }
429
- const inputResponses = params.inputResponses === undefined
430
- ? undefined
431
- : parseMcpInputResponses(params.inputResponses);
432
- validateMcpToolArguments(params.arguments);
433
- const requestedArgs = {
434
- ...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),
435
- ...(inputResponses ? { inputResponses } : {}),
436
- ...(typeof params.requestState === "string"
437
- ? { requestState: params.requestState }
438
- : {}),
439
- };
440
- const access = await resolveMcpToolAccess(TOOLS, name, requestedArgs);
441
- const requiredCustomDiscoveryEntry = progressiveDiscoveryNegotiated &&
442
- access.profile === "custom" &&
443
- name === "pm_discover";
444
- if (!access.available && !requiredCustomDiscoveryEntry) {
445
- throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`, 64);
446
- }
447
- // pm-ydkl: defensive HTML-entity decode for free-text fields. Claude / the
448
- // Anthropic MCP SDK HTML-encodes `<` / `>` (and friends) in tool arguments
449
- // before they reach pm-cli, which would otherwise leak `&lt;type&gt;` into
450
- // stored pm comments / notes / item bodies. Direct CLI calls are not
451
- // affected; decoding at the MCP boundary normalizes the agent path while
452
- // leaving normal text untouched.
453
- const args = await normalizeWorkspaceToolArguments(name, requestedArgs);
454
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
455
- const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
456
- const workspaceIdentity = (await pathExists(getSettingsPath(pmRoot)))
457
- ? (await readSettings(pmRoot)).agent_identity
458
- : undefined;
459
- return runWithHarnessDetectionSignals({
460
- env: { ...process.env, PM_PATH: pmRoot },
461
- argv: process.argv,
462
- cwd,
463
- ...clientSignals,
464
- }, () => runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals ?? [], async () => {
465
- // pm-qxwu: non-breaking detection of typo'd / unexpected top-level keys.
466
- // additionalProperties stays true so passthrough still works; we only warn.
467
- // pm-upi0 extends the same mechanism into the nested options object.
468
- const action = resolveInvokedAction(name, args);
469
- const warnings = [
470
- ...detectUnexpectedTopLevelKeys(name, args, declaredToolKeys()),
471
- ...detectUnexpectedOptionKeys(name, action, args),
472
- ...(await collectMutationGuardWarnings(name, action, args)),
473
- ];
474
- for (const warning of warnings) {
475
- console.error(`[pm-mcp] ${warning}`);
476
- }
477
- // cwd is applied inside the serialized activation cycle (see withActiveExtensions),
478
- // so the chdir/restore is exclusive per request and cannot race a concurrent caller.
479
- const result = await handler(args);
480
- void emitMcpChangeNotifications(action);
481
- return resultContent(result, warnings, args.tokenAccounting === true, progressiveDiscoveryNegotiated);
482
- }, { probesEnabled: workspaceIdentity?.probes_enabled }));
483
- });
484
- }
485
- /** Open one modern subscription through a concrete transport-owned sink. */
486
- export async function openMcpSubscription(input) {
487
- if ((typeof input.request.id !== "string" &&
488
- typeof input.request.id !== "number") ||
489
- input.request.method !== "subscriptions/listen") {
490
- throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request", PM_MCP_ERROR_CODES.invalidParams, { required: ["id", "method", "params.notifications"] });
491
- }
492
- resolveMcpRequestContext(input.request.params);
493
- const key = input.key ?? input.request.id;
494
- if (PM_MCP_SUBSCRIPTIONS.has(key)) {
495
- throw new PmMcpProtocolError("MCP subscription id is already active", PM_MCP_ERROR_CODES.invalidParams, { subscriptionId: input.request.id });
496
- }
497
- const registry = createMcpSubscriptionRegistry();
498
- await registry.open({
499
- id: input.request.id,
500
- notifications: input.request.params?.notifications,
501
- sink: input.sink,
502
- });
503
- PM_MCP_SUBSCRIPTIONS.set(key, { id: input.request.id, registry });
504
- }
505
- /** Gracefully close one active subscription by its request identifier. */
506
- export function closeMcpSubscription(id, key = id) {
507
- const subscription = PM_MCP_SUBSCRIPTIONS.get(key);
508
- if (!subscription || subscription.id !== id)
509
- return undefined;
510
- PM_MCP_SUBSCRIPTIONS.delete(key);
511
- return subscription.registry.close(id);
512
- }
513
- function closeStdioMcpSubscriptions() {
514
- const closed = [];
515
- for (const [key, subscription] of PM_MCP_SUBSCRIPTIONS) {
516
- if (key !== subscription.id)
517
- continue;
518
- const result = closeMcpSubscription(subscription.id, key);
519
- if (result)
520
- closed.push({ id: subscription.id, result });
521
- }
522
- return closed;
523
- }
524
- /** Resolve the current workspace-enriched tool schema for HTTP header checks. */
525
- export async function resolveMcpToolSchemaForRequest(request) {
526
- if (request.method !== "tools/call")
527
- return undefined;
528
- const name = request.params?.name;
529
- if (typeof name !== "string")
530
- return undefined;
531
- const surface = await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(request.params));
532
- return surface.tools.find((tool) => tool.name === name)?.inputSchema;
533
- }
534
- /** Preserve MCP tool-result error semantics for non-protocol adapter failures. */
535
- export function buildMcpToolCallErrorResult(request, error) {
536
- if (request.method !== "tools/call" || error instanceof PmMcpProtocolError) {
537
- return undefined;
538
- }
539
- const content = errorContent(error, hasMcpProtocolVersionMetadata(request) &&
540
- hasMcpClientExtension(resolveMcpRequestContext(request.params), PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));
541
- return hasMcpProtocolVersionMetadata(request)
542
- ? buildMcpCompleteResult(content, PM_MCP_SERVER_INFO)
543
- : content;
544
- }
545
- function requestWorkspaceArgs(params) {
546
- const paramsRecord = asRecordClone(params);
547
- return asRecordClone(paramsRecord.arguments ?? paramsRecord);
548
- }
549
- async function readWorkspaceResource(uri, params) {
550
- const args = requestWorkspaceArgs(params);
551
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
552
- const contract = PM_MCP_RESOURCE_CONTRACTS.find((resource) => resource.uri === uri);
553
- if (!contract) {
554
- throw new PmCliError(`Unknown pm MCP resource: ${uri}`, 64);
555
- }
556
- let value;
557
- if (uri === "pm://workspace/context") {
558
- value = await runMcpAction({ ...args, action: "context", limit: 10 });
559
- }
560
- else if (uri === "pm://workspace/claims") {
561
- value = await runMcpAction({
562
- ...args,
563
- action: "list",
564
- status: "in_progress",
565
- limit: 20,
566
- });
567
- }
568
- else if (uri === "pm://workspace/focus") {
569
- value = await runMcpAction({
570
- ...args,
571
- action: "focus",
572
- subcommand: "show",
573
- });
574
- }
575
- else {
576
- const guidePath = path.join(cwd, "AGENTS.md");
577
- value = (await pathExists(guidePath))
578
- ? (await readFile(guidePath, "utf8")).slice(0, 32_000)
579
- : "No repository-local AGENTS.md was found.";
580
- }
581
- return {
582
- contents: [
583
- {
584
- uri,
585
- mimeType: contract.mimeType,
586
- text: typeof value === "string" ? value : JSON.stringify(value, null, 2),
587
- },
588
- ],
589
- };
590
- }
591
- async function loadRequestSkillRegistry(params) {
592
- const args = requestWorkspaceArgs(params);
593
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
594
- const workspaceRoot = resolveWorkspaceRoot(resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined));
595
- return PmMcpSkillRegistry.load({
596
- packageRoot: resolvePmPackageRoot(),
597
- workspaceRoot,
598
- packageVersion: PM_MCP_SERVER_VERSION,
599
- });
600
- }
601
- function renderWorkflowPrompt(params) {
602
- const paramsRecord = asRecordClone(params);
603
- const name = readRequiredString(paramsRecord, "name");
604
- const prompt = PM_MCP_PROMPT_CONTRACTS.find((candidate) => candidate.name === name);
605
- if (!prompt) {
606
- throw new PmCliError(`Unknown pm MCP prompt: ${name}`, 64);
607
- }
608
- const argumentsRecord = asRecordClone(paramsRecord.arguments);
609
- let text = prompt.template;
610
- for (const argument of prompt.arguments) {
611
- const value = argumentsRecord[argument.name];
612
- if (argument.required &&
613
- (typeof value !== "string" || value.trim().length === 0)) {
614
- throw new PmCliError(`Missing required prompt argument: ${argument.name}`, 64);
615
- }
616
- text = text.replaceAll(`{{${argument.name}}}`, typeof value === "string" ? value : "");
617
- }
618
- return {
619
- description: prompt.description,
620
- messages: [{ role: "user", content: { type: "text", text } }],
621
- };
622
- }
623
- const LEGACY_MCP_ADAPTER = new LegacyMcpAdapter({
624
- serverInfo: PM_MCP_SERVER_INFO,
625
- capabilities: PM_MCP_SERVER_CAPABILITIES,
626
- instructions: PM_MCP_INSTRUCTIONS,
627
- parseClientInfo: readMcpClientInfo,
628
- listTools: async (params) => ({
629
- tools: (await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(params)))
630
- .tools,
631
- }),
632
- callTool: handleToolCall,
633
- listResources: () => ({ resources: PM_MCP_RESOURCE_CONTRACTS }),
634
- readResource: (params) => readWorkspaceResource(readRequiredString(asRecordClone(params), "uri"), params),
635
- listPrompts: () => ({
636
- prompts: PM_MCP_PROMPT_CONTRACTS.map((prompt) => ({
637
- name: prompt.name,
638
- description: prompt.description,
639
- arguments: prompt.arguments,
640
- })),
641
- }),
642
- getPrompt: renderWorkflowPrompt,
643
- });
644
- function deterministicMcpTools(tools) {
645
- return tools
646
- .map((tool) => ({
647
- ...tool,
648
- inputSchema: validateMcpJsonSchema(tool.inputSchema),
649
- }))
650
- .sort((left, right) => left.name.localeCompare(right.name));
651
- }
652
- function mcpTaskPrincipal(requestContext) {
653
- return requestContext.clientInfo
654
- ? `${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`
655
- : "anonymous-stdio";
656
- }
657
- function mcpTaskStore() {
658
- return createMcpTaskStore({
659
- pmRoot: resolvePmRoot(process.cwd()),
660
- owner: "pm-mcp-task-provider",
661
- });
662
- }
663
- /** Rejects malformed MCP tool argument containers before dispatch. */
664
- function validateMcpToolArguments(value) {
665
- if (value !== undefined && !isMcpRecord(value)) {
666
- throw new PmCliError("pm MCP tool arguments must be an object.", 64);
667
- }
668
- }
669
- function shouldCreateMcpTask(params, requestContext) {
670
- if (!hasMcpClientExtension(requestContext, PM_MCP_TASKS_EXTENSION)) {
671
- return false;
672
- }
673
- const requestParams = asRecordClone(params);
674
- const name = requestParams.name;
675
- const args = asRecordClone(requestParams.arguments);
676
- if (PM_MCP_DIRECT_TASK_TOOLS.has(name))
677
- return true;
678
- if (name === "pm_test" &&
679
- (args.subcommand === "run" ||
680
- (isMcpRecord(args.options) && args.options.subcommand === "run"))) {
681
- return true;
682
- }
683
- if (name !== "pm_run")
684
- return false;
685
- return (typeof args.action === "string" && PM_MCP_RUN_TASK_ACTIONS.has(args.action));
686
- }
687
- const PENDING_MCP_TASKS = new Map();
688
- async function executeMcpTask(execution, inputResponses) {
689
- const params = {
690
- ...execution.params,
691
- ...(inputResponses ? { inputResponses } : {}),
692
- ...(execution.requestState ? { requestState: execution.requestState } : {}),
693
- };
694
- try {
695
- const result = await handleToolCall(params, execution.context.clientInfo, hasMcpClientExtension(execution.context, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));
696
- await execution.store.complete(execution.taskId, execution.principal, buildMcpCompleteResult(result, PM_MCP_SERVER_INFO));
697
- PENDING_MCP_TASKS.delete(execution.taskId);
698
- }
699
- catch (error) {
700
- if (error instanceof PmMcpInputRequiredError) {
701
- execution.requestState = error.requestState;
702
- await execution.store.requireInput({
703
- taskId: execution.taskId,
704
- principal: execution.principal,
705
- requestContext: execution.context,
706
- inputRequests: error.inputRequests,
707
- statusMessage: "Task requires additional client input.",
708
- });
709
- return;
710
- }
711
- if (error instanceof PmMcpProtocolError) {
712
- await execution.store.fail(execution.taskId, execution.principal, {
713
- code: error.code,
714
- message: error.message,
715
- data: error.data,
716
- });
717
- }
718
- else {
719
- await execution.store.complete(execution.taskId, execution.principal, buildMcpCompleteResult(errorContent(error, hasMcpClientExtension(execution.context, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)), PM_MCP_SERVER_INFO));
720
- }
721
- PENDING_MCP_TASKS.delete(execution.taskId);
722
- }
723
- }
724
- async function settleMcpTaskExecution(taskId, execution) {
725
- try {
726
- await execution;
727
- }
728
- catch {
729
- // Persistence failures can outlive the request that created the detached
730
- // execution. Keep them from becoming process-level unhandled rejections;
731
- // the durable task record remains available for TTL-based recovery.
732
- PENDING_MCP_TASKS.delete(taskId);
733
- }
734
- }
735
- function scheduleMcpTaskExecution(execution, inputResponses) {
736
- void settleMcpTaskExecution(execution.taskId, executeMcpTask(execution, inputResponses));
737
- }
738
- async function createMcpTaskForToolCall(params, requestContext) {
739
- const store = mcpTaskStore();
740
- const principal = mcpTaskPrincipal(requestContext);
741
- const task = await store.create({
742
- principal,
743
- statusMessage: "pm operation accepted for asynchronous execution.",
744
- });
745
- const execution = {
746
- context: requestContext,
747
- params: asRecordClone(params),
748
- principal,
749
- store,
750
- taskId: task.taskId,
751
- };
752
- PENDING_MCP_TASKS.set(task.taskId, execution);
753
- scheduleMcpTaskExecution(execution);
754
- return attachMcpServerInfo(task, PM_MCP_SERVER_INFO);
755
- }
756
- async function dispatchMcpTaskMethod(request, requestContext) {
757
- if (!hasMcpClientExtension(requestContext, PM_MCP_TASKS_EXTENSION)) {
758
- throw new PmMcpProtocolError("Missing required client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
759
- requiredCapabilities: {
760
- extensions: { [PM_MCP_TASKS_EXTENSION]: {} },
761
- },
762
- });
763
- }
764
- const params = asRecordClone(request.params);
765
- const taskId = readRequiredString(params, "taskId");
766
- const principal = mcpTaskPrincipal(requestContext);
767
- const store = mcpTaskStore();
768
- if (request.method === "tasks/get") {
769
- return buildMcpCompleteResult(await store.get(taskId, principal), PM_MCP_SERVER_INFO);
770
- }
771
- if (request.method === "tasks/update") {
772
- const update = await store.update(taskId, principal, params.inputResponses);
773
- const execution = PENDING_MCP_TASKS.get(taskId);
774
- if (execution &&
775
- update.acceptedKeys.length > 0 &&
776
- update.remainingKeys.length === 0) {
777
- scheduleMcpTaskExecution(execution, await store.takeInputResponses(taskId, principal));
778
- }
779
- return buildMcpCompleteResult({}, PM_MCP_SERVER_INFO);
780
- }
781
- await store.cancel(taskId, principal);
782
- PENDING_MCP_TASKS.delete(taskId);
783
- return buildMcpCompleteResult({}, PM_MCP_SERVER_INFO);
784
- }
785
- async function dispatchModernToolMethod(request, requestContext, clientInfo) {
786
- if (request.method === "tools/list") {
787
- const surface = await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(request.params));
788
- const progressiveDiscovery = hasMcpClientExtension(requestContext, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION);
789
- const listedTools = progressiveDiscovery
790
- ? [
791
- ...surface.tools.filter((tool) => PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),
792
- ...(surface.profile === "custom" &&
793
- !surface.tools.some((tool) => tool.name === "pm_discover")
794
- ? TOOLS.filter((tool) => tool.name === "pm_discover")
795
- : []),
796
- ]
797
- : surface.tools;
798
- return buildMcpCompleteResult(withMcpCachePolicy({
799
- tools: hasCompatiblePmMcpAppsCapability(requestContext)
800
- ? decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools))
801
- : deterministicMcpTools(listedTools),
802
- }, PM_MCP_CACHE_POLICIES.tools), PM_MCP_SERVER_INFO);
803
- }
804
- validateMcpToolArguments(request.params?.arguments);
805
- if (shouldCreateMcpTask(request.params, requestContext)) {
806
- return createMcpTaskForToolCall(request.params, requestContext);
807
- }
808
- try {
809
- return buildMcpCompleteResult(await handleToolCall(request.params, clientInfo, hasMcpClientExtension(requestContext, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)), PM_MCP_SERVER_INFO);
810
- }
811
- catch (error) {
812
- if (!(error instanceof PmMcpInputRequiredError))
813
- throw error;
814
- return buildMcpInputRequiredResult({
815
- requestContext,
816
- serverInfo: PM_MCP_SERVER_INFO,
817
- inputRequests: error.inputRequests,
818
- requestState: error.requestState,
819
- });
820
- }
821
- }
822
- async function dispatchModernResourceMethod(request, requestContext) {
823
- if (request.method === "resources/list") {
824
- const resources = [
825
- ...PM_MCP_RESOURCE_CONTRACTS,
826
- ...(hasCompatiblePmMcpAppsCapability(requestContext)
827
- ? PM_MCP_APP_CONTRACTS.map((contract) => ({
828
- uri: contract.uri,
829
- name: contract.name,
830
- description: contract.description,
831
- mimeType: PM_MCP_APP_MIME_TYPE,
832
- _meta: { ui: contract.resourceMeta },
833
- }))
834
- : []),
835
- ].sort((left, right) => left.uri.localeCompare(right.uri));
836
- return buildMcpCompleteResult(withMcpCachePolicy({ resources }, PM_MCP_CACHE_POLICIES.resources), PM_MCP_SERVER_INFO);
837
- }
838
- if (request.method === "resources/templates/list") {
839
- return buildMcpCompleteResult(withMcpCachePolicy({ resourceTemplates: [] }, PM_MCP_CACHE_POLICIES.resources), PM_MCP_SERVER_INFO);
840
- }
841
- try {
842
- const uri = readRequiredString(asRecordClone(request.params), "uri");
843
- const app = findPmMcpAppByUri(uri);
844
- let resource;
845
- if (app) {
846
- if (!hasPmMcpAppsCapability(requestContext)) {
847
- throw new PmMcpProtocolError("MCP App resource requires negotiated client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
848
- requiredCapabilities: {
849
- extensions: {
850
- [PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY,
851
- },
852
- },
853
- });
854
- }
855
- resource = {
856
- contents: [
857
- {
858
- uri,
859
- mimeType: PM_MCP_APP_MIME_TYPE,
860
- text: renderPmMcpAppHtml(app),
861
- _meta: { ui: app.resourceMeta },
862
- },
863
- ],
864
- };
865
- }
866
- else if (uri.startsWith("skill://")) {
867
- assertPmMcpSkillsCapability(requestContext);
868
- resource = {
869
- ...(await loadRequestSkillRegistry(request.params)).read(uri),
870
- };
871
- }
872
- else {
873
- resource = await readWorkspaceResource(uri, request.params);
874
- }
875
- return buildMcpCompleteResult(withMcpCachePolicy(resource, PM_MCP_CACHE_POLICIES.resource), PM_MCP_SERVER_INFO);
876
- }
877
- catch (error) {
878
- if (!(error instanceof PmCliError) ||
879
- !error.message.startsWith("Unknown pm MCP resource:")) {
880
- throw error;
881
- }
882
- throw new PmMcpProtocolError(error.message, PM_MCP_ERROR_CODES.invalidParams, { field: "uri" });
883
- }
884
- }
885
- /** Treat an incompatible optional Apps declaration as absent during discovery. */
886
- function hasCompatiblePmMcpAppsCapability(requestContext) {
887
- try {
888
- return hasPmMcpAppsCapability(requestContext);
889
- }
890
- catch (error) {
891
- if (error instanceof PmMcpProtocolError)
892
- return false;
893
- throw error;
894
- }
895
- }
896
- /** Validate Skills pagination inputs before handing them to the SDK registry. */
897
- function readSkillPageOptions(params) {
898
- if (params.cursor !== undefined && typeof params.cursor !== "string") {
899
- throw new PmMcpProtocolError("Skills cursor must be a string", PM_MCP_ERROR_CODES.invalidParams, { field: "cursor" });
900
- }
901
- if (params.limit !== undefined && typeof params.limit !== "number") {
902
- throw new PmMcpProtocolError("Skills limit must be a number", PM_MCP_ERROR_CODES.invalidParams, { field: "limit" });
903
- }
904
- return {
905
- ...(typeof params.cursor === "string" ? { cursor: params.cursor } : {}),
906
- ...(typeof params.limit === "number" ? { limit: params.limit } : {}),
907
- };
908
- }
909
- async function dispatchModernSkillMethod(request, requestContext) {
910
- const directoryRead = request.method === "resources/directory/read";
911
- assertPmMcpSkillsCapability(requestContext, directoryRead);
912
- const params = asRecordClone(request.params);
913
- const registry = await loadRequestSkillRegistry(request.params);
914
- let result;
915
- if (request.method === "skills/list") {
916
- result = { ...registry.list(readSkillPageOptions(params)) };
917
- }
918
- else if (request.method === "skills/get") {
919
- result = { skill: registry.get(readRequiredString(params, "uri")) };
920
- }
921
- else {
922
- result = {
923
- ...registry.readDirectory(readRequiredString(params, "uri"), readSkillPageOptions(params)),
924
- };
925
- }
926
- return buildMcpCompleteResult(withMcpCachePolicy(result, PM_MCP_CACHE_POLICIES.resource), PM_MCP_SERVER_INFO);
927
- }
928
- function dispatchModernPromptMethod(request) {
929
- const result = request.method === "prompts/list"
930
- ? withMcpCachePolicy({
931
- prompts: PM_MCP_PROMPT_CONTRACTS.map((prompt) => ({
932
- name: prompt.name,
933
- description: prompt.description,
934
- arguments: prompt.arguments,
935
- })).sort((left, right) => left.name.localeCompare(right.name)),
936
- }, PM_MCP_CACHE_POLICIES.prompts)
937
- : renderWorkflowPrompt(request.params);
938
- return buildMcpCompleteResult(result, PM_MCP_SERVER_INFO);
939
- }
940
- /** Dispatch one validated stateless request through the modern surface. */
941
- async function dispatchModernMcpRequest(request, meta) {
942
- const requestContext = resolveMcpRequestContext(request.params);
943
- const clientInfo = readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);
944
- if (request.method === "server/discover") {
945
- return buildMcpDiscoverResult({
946
- serverInfo: PM_MCP_SERVER_INFO,
947
- capabilities: PM_MCP_SERVER_CAPABILITIES,
948
- instructions: PM_MCP_INSTRUCTIONS,
949
- });
950
- }
951
- if (request.method === "ping") {
952
- // The preceding match is an mcp-deprecation-negative-control for modern callers.
953
- throw new PmMcpProtocolError("MCP method not found: ping", -32601, {
954
- removedIn: PM_MCP_PROTOCOL_VERSION,
955
- });
956
- }
957
- if (PM_MCP_SKILL_METHODS.has(request.method ?? "")) {
958
- return dispatchModernSkillMethod(request, requestContext);
959
- }
960
- if (request.method === "tasks/get" ||
961
- request.method === "tasks/update" ||
962
- request.method === "tasks/cancel") {
963
- return dispatchMcpTaskMethod(request, requestContext);
964
- }
965
- if (request.method === "tools/list" || request.method === "tools/call") {
966
- return dispatchModernToolMethod(request, requestContext, clientInfo);
967
- }
968
- if (request.method === "resources/list" ||
969
- request.method === "resources/templates/list" ||
970
- request.method === "resources/read") {
971
- return dispatchModernResourceMethod(request, requestContext);
972
- }
973
- if (request.method === "prompts/list" || request.method === "prompts/get") {
974
- return dispatchModernPromptMethod(request);
975
- }
976
- throw new PmMcpProtocolError(`MCP method not found: ${request.method ?? "(missing)"}`, -32601);
977
- }
978
- /** Implements handle request for the public runtime surface of this module. */
979
- async function handleRequestInReproducibleContext(request) {
980
- if (!request.id && request.method?.startsWith("notifications/")) {
981
- return undefined;
982
- }
983
- if (hasMcpProtocolVersionMetadata(request)) {
984
- const allowlist = (process.env.PM_MCP_BAGGAGE_ALLOWLIST ?? "")
985
- .split(",")
986
- .map((entry) => entry.trim())
987
- .filter(Boolean);
988
- return runWithMcpTraceContext(extractMcpTraceContext(request.params, { baggageAllowlist: allowlist }), () => dispatchModernMcpRequest(request, request.params._meta));
989
- }
990
- if (request.method === "initialize") {
991
- // The preceding match is an mcp-legacy-boundary delegated to the isolated adapter.
992
- return LEGACY_MCP_ADAPTER.initialize(request.params);
993
- }
994
- return LEGACY_MCP_ADAPTER.dispatch(request);
995
- }
996
- /** Return whether a request explicitly supplies the modern version metadata key. */
997
- function hasMcpProtocolVersionMetadata(request) {
998
- const meta = isMcpRecord(request.params) ? request.params._meta : undefined;
999
- return (isMcpRecord(meta) &&
1000
- Object.prototype.hasOwnProperty.call(meta, PM_MCP_META_KEYS.protocolVersion));
1001
- }
1002
- /** Dispatch one MCP request under supported process-level reproducibility settings. */
1003
- export async function handleRequest(request) {
1004
- return runWithReproducibleProcessEnvironment(process.env, () => handleRequestInReproducibleContext(request));
1005
- }
1006
- function writeResponse(id, payload) {
1007
- process.stdout.write(`${JSON.stringify({ jsonrpc: "2.0", id, result: payload })}\n`);
1008
- }
1009
- function writeError(id, error) {
1010
- const code = error instanceof PmMcpProtocolError
1011
- ? error.code
1012
- : error instanceof PmCliError
1013
- ? error.exitCode
1014
- : -32603;
1015
- const message = error instanceof Error ? error.message : String(error);
1016
- const data = error instanceof PmMcpProtocolError
1017
- ? error.data
1018
- : error instanceof PmCliError
1019
- ? error.context
1020
- : undefined;
1021
- process.stdout.write(`${JSON.stringify({ jsonrpc: "2.0", id, error: { code, message, data } })}\n`);
1022
- }
1023
- /** Write an MCP tool execution failure as a successful tool result envelope. */
1024
- function writeToolCallErrorResponse(request, error) {
1025
- if (request.method !== "tools/call" || error instanceof PmMcpProtocolError) {
1026
- return false;
1027
- }
1028
- writeResponse(request.id, buildMcpToolCallErrorResult(request, error));
1029
- return true;
1030
- }
1031
- async function handleStdioTransportControl(request) {
1032
- if (request.method === "subscriptions/listen") {
1033
- await openMcpSubscription({
1034
- request,
1035
- sink: (notification) => {
1036
- process.stdout.write(`${JSON.stringify(notification)}\n`);
1037
- },
1038
- });
1039
- return true;
1040
- }
1041
- if (request.method !== "notifications/cancelled")
1042
- return false;
1043
- const requestId = request.params?.requestId;
1044
- if (typeof requestId === "string" || typeof requestId === "number") {
1045
- const result = closeMcpSubscription(requestId);
1046
- if (result)
1047
- writeResponse(requestId, result);
1048
- }
1049
- return true;
1050
- }
1051
- // pm-3puw: parse one JSON-RPC line, dispatch it, and write the response. Kept
1052
- // as a standalone async unit so the stdio loop can enqueue it onto a serial
1053
- // queue (process lines in arrival order) and tests can drive it directly.
1054
- /** Implements process rpc line for the public runtime surface of this module. */
1055
- async function processRpcLineWithHandler(line, requestHandler) {
1056
- if (line.trim().length === 0) {
1057
- return;
1058
- }
1059
- let request;
1060
- try {
1061
- request = JSON.parse(line);
1062
- }
1063
- catch (error) {
1064
- const message = error instanceof Error ? error.message : String(error);
1065
- writeError(null, new PmCliError(`Parse error: ${message}`, -32700));
1066
- return;
1067
- }
1068
- if (typeof request !== "object" ||
1069
- request === null ||
1070
- Array.isArray(request)) {
1071
- writeError(null, new PmCliError("Invalid JSON-RPC request: expected an object", -32600));
1072
- return;
1073
- }
1074
- const shouldRespond = Object.prototype.hasOwnProperty.call(request, "id");
1075
- try {
1076
- if (await handleStdioTransportControl(request))
1077
- return;
1078
- const result = await requestHandler(request);
1079
- if (shouldRespond && result !== undefined) {
1080
- writeResponse(request.id, result);
1081
- }
1082
- }
1083
- catch (error) {
1084
- if (!shouldRespond) {
1085
- return;
1086
- }
1087
- if (!writeToolCallErrorResponse(request, error)) {
1088
- writeError(request.id, error);
1089
- }
1090
- }
1091
- }
1092
- /** Implements process rpc line for the public runtime surface of this module. */
1093
- export async function processRpcLine(line) {
1094
- await processRpcLineWithHandler(line, handleRequest);
1095
- }
1096
- /** Implements start mcp server for the public runtime surface of this module. */
1097
- export function startMcpServer() {
1098
- const rl = readline.createInterface({
1099
- input: process.stdin,
1100
- crlfDelay: Infinity,
1101
- });
1102
- // pm-3puw: serialize line handling so pipelined requests are processed in
1103
- // arrival order. The previous fire-and-forget handler ran requests
1104
- // concurrently, so a client that pipelined two mutations on the same item
1105
- // (without awaiting the first response) hit a lock conflict on the second.
1106
- const queue = createSerialQueue();
1107
- let processLine;
1108
- try {
1109
- const runInProcessContext = createReproducibleProcessRunner(process.env);
1110
- processLine = (line) => runInProcessContext(() => processRpcLineWithHandler(line, handleRequestInReproducibleContext));
1111
- }
1112
- catch {
1113
- // Preserve one typed JSON-RPC error per request when process configuration
1114
- // is invalid; processRpcLine resolves the same configuration fail-closed.
1115
- processLine = processRpcLine;
1116
- }
1117
- rl.on("line", (line) => {
1118
- void queue.enqueue(() => processLine(line));
1119
- });
1120
- rl.on("close", () => {
1121
- void queue.enqueue(() => {
1122
- for (const closed of closeStdioMcpSubscriptions()) {
1123
- writeResponse(closed.id, closed.result);
1124
- }
1125
- });
1126
- });
1127
- }
1128
- // npm bin entries are symlinks (node_modules/.bin/pm-mcp -> dist/mcp/server.js),
1129
- // so argv[1] must be realpath-resolved before comparing against this module's
1130
- // path — a plain equality check made the published `pm-mcp` bin exit 0 without
1131
- // ever starting the server (pm-qtbc).
1132
- /** Implements check whether invoked as mcp main module for the public runtime surface of this module. */
1133
- export function isInvokedAsMcpMainModule(argvPath, moduleUrl) {
1134
- if (!argvPath) {
1135
- return false;
1136
- }
1137
- const selfPath = fileURLToPath(moduleUrl);
1138
- if (argvPath === selfPath) {
1139
- return true;
1140
- }
1141
- try {
1142
- return realpathSync(argvPath) === realpathSync(selfPath);
1143
- }
1144
- catch {
1145
- return false;
1146
- }
1147
- }
1148
- function readRuntimeTestHook(key) {
1149
- const runtimeTestHooks = globalThis.__pmCliActionRunnerTestHooks;
1150
- if (runtimeTestHooks === undefined) {
1151
- throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`, 64);
1152
- }
1153
- return runtimeTestHooks[key];
1154
- }
1155
- /** Public contract for test only, shared by SDK and presentation-layer consumers. */
1156
- export const _testOnly = {
1157
- boundMcpClientProvenance,
1158
- createMcpInputRequiredError: (input) => new PmMcpInputRequiredError(input),
1159
- createMcpProtocolError: (...input) => new PmMcpProtocolError(...input),
1160
- get closeManyOptionsFromFlat() {
1161
- return readRuntimeTestHook("closeManyOptionsFromFlat");
1162
- },
1163
- detectUnexpectedOptionKeys,
1164
- detectUnexpectedTopLevelKeys,
1165
- collectMutationGuardWarnings,
1166
- closeStdioMcpSubscriptions,
1167
- errorContent,
1168
- emitMcpChangeNotifications,
1169
- expireMcpSubscriptionRecord: (id, key = id) => PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),
1170
- getMcpClientInfo: () => LEGACY_MCP_ADAPTER.getClientInfo(),
1171
- get extensionOptionsFromArgs() {
1172
- return readRuntimeTestHook("extensionOptionsFromArgs");
1173
- },
1174
- get globalOptions() {
1175
- return readRuntimeTestHook("globalOptions");
1176
- },
1177
- get mutationListOptions() {
1178
- return readRuntimeTestHook("mutationListOptions");
1179
- },
1180
- nearestDeclaredKey,
1181
- mcpTaskPrincipal,
1182
- resultContent,
1183
- resolveMcpRequestContext,
1184
- shouldCreateMcpTask,
1185
- settleMcpTaskExecution,
1186
- subscriptionCount: () => PM_MCP_SUBSCRIPTIONS.size,
1187
- get normalizeActionName() {
1188
- return readRuntimeTestHook("normalizeActionName");
1189
- },
1190
- get normalizeCommandPath() {
1191
- return readRuntimeTestHook("normalizeCommandPath");
1192
- },
1193
- get normalizeMcpOptionsArrays() {
1194
- return readRuntimeTestHook("normalizeMcpOptionsArrays");
1195
- },
1196
- get normalizeMcpUpdateOptions() {
1197
- return readRuntimeTestHook("normalizeMcpUpdateOptions");
1198
- },
1199
- get optionsWithAuthor() {
1200
- return readRuntimeTestHook("optionsWithAuthor");
1201
- },
1202
- get readRequiredString() {
1203
- return readRuntimeTestHook("readRequiredString");
1204
- },
1205
- get readScalarString() {
1206
- return readRuntimeTestHook("readScalarString");
1207
- },
1208
- get readScalarStringAllowBlank() {
1209
- return readRuntimeTestHook("readScalarStringAllowBlank");
1210
- },
1211
- get readStringArray() {
1212
- return readRuntimeTestHook("readStringArray");
1213
- },
1214
- runAction: runMcpAction,
1215
- get updateManyOptionsFromFlat() {
1216
- return readRuntimeTestHook("updateManyOptionsFromFlat");
1217
- },
1218
- get withAddNoteOption() {
1219
- return readRuntimeTestHook("withAddNoteOption");
1220
- },
1221
- get withFilesDiscoveryOptions() {
1222
- return readRuntimeTestHook("withFilesDiscoveryOptions");
1223
- },
1224
- get withMutationCompaction() {
1225
- return readRuntimeTestHook("withMutationCompaction");
1226
- },
1227
- writeError,
1228
- };
1229
- /* c8 ignore start */
1230
- if (isInvokedAsMcpMainModule(process.argv[1], import.meta.url)) {
1231
- startMcpServer();
1232
- }
1233
- /* c8 ignore stop */
2
+ !(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="845e245a-00f7-5ae5-85b1-c628768346de")}catch(e2){}})();import{realpathSync}from"node:fs";import{readFile}from"node:fs/promises";import path from"node:path";import readline from"node:readline";import{fileURLToPath}from"node:url";import{resolvePmCliVersion,PmCliError,decodeHtmlEntitiesInOptions,levenshteinDistanceWithinLimit,asRecordClone,createSerialQueue,evaluateMutationGuard,getSettingsPath,isMutationAction,pathExists,readSettings,runWithHarnessDetectionSignals,runWithWorkspaceHarnessSignalDescriptors,boundAgentEpisodeIdentity}from"../sdk/runtime-primitives.js";import{pmToolActionNestedOptionKeys}from"../sdk/cli-contracts/tool-schema.js";import{readRequiredString,runAction,runWithActiveExtensions}from"../sdk/runtime.js";import{NARROW_TOOL_ACTIONS,TOOLS}from"./tool-definitions.js";import{normalizeWorkspaceToolArguments,resolveMcpToolAccess,resolveMcpToolSurface}from"./runtime-capabilities.js";import{PM_MCP_PROMPT_CONTRACTS,PM_MCP_RESOURCE_CONTRACTS}from"../sdk/agent-capability-contracts.js";import{PM_MCP_ENTRY_TOOL_NAMES,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION,PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,discoverPmTools,parsePmToolDiscoveryOptions}from"../sdk/mcp/discovery.js";import{commitItemMutations}from"../sdk/item-transaction.js";import{isRuntimeRecord,markMcpMutationTransportInput}from"../sdk/runtime-input.js";import{attachOutputTokenAccounting}from"../sdk/output-token-accounting.js";import{createReproducibleProcessRunner,runWithReproducibleProcessEnvironment}from"../sdk/reproducibility/process.js";import{parseAtomicMutationControls,resolveItemMutationDocument}from"../sdk/structured-mutations.js";import{resolveAuthor,resolvePmRoot,resolveWorkspaceRoot}from"../sdk/runtime-primitives.js";import{PM_MCP_ERROR_CODES,PM_MCP_META_KEYS,PM_MCP_PROTOCOL_VERSION,PmMcpProtocolError,attachMcpServerInfo,buildMcpCompleteResult,buildMcpDiscoverResult,hasMcpClientExtension,isMcpRecord,resolveMcpRequestContext}from"../sdk/mcp/protocol.js";import{PmMcpInputRequiredError,buildMcpInputRequiredResult,parseMcpInputResponses,validateMcpJsonSchema,withMcpCachePolicy}from"../sdk/mcp/interactions.js";import{PM_MCP_TASKS_EXTENSION,createMcpTaskStore}from"../sdk/mcp/tasks.js";import{PmMcpSubscriptionRegistry}from"../sdk/mcp/subscriptions.js";import{extractMcpTraceContext,runWithMcpTraceContext}from"../sdk/mcp/authorization.js";import{LegacyMcpAdapter}from"./legacy-adapter.js";import{PM_MCP_APP_CONTRACTS,PM_MCP_APP_MIME_TYPE,PM_MCP_APPS_EXTENSION,PM_MCP_APPS_SERVER_CAPABILITY,decoratePmMcpToolsWithApps,findPmMcpAppByUri,hasPmMcpAppsCapability,renderPmMcpAppHtml}from"../sdk/mcp/apps.js";import{PM_MCP_SKILLS_EXTENSION,PM_MCP_SKILLS_SERVER_CAPABILITY,PmMcpSkillRegistry,assertPmMcpSkillsCapability}from"../sdk/mcp/skills.js";function runMcpAction(args){return runAction(markMcpMutationTransportInput(args))}const PM_PACKAGE_ROOT_ENV="PM_CLI_PACKAGE_ROOT";function resolvePmPackageRoot(){return fileURLToPath(new URL("../..",import.meta.url))}if(typeof process.env[PM_PACKAGE_ROOT_ENV]!=="string"||process.env[PM_PACKAGE_ROOT_ENV]?.trim().length===0){process.env[PM_PACKAGE_ROOT_ENV]=resolvePmPackageRoot()}const PM_MCP_SERVER_VERSION=resolvePmCliVersion(import.meta.url,["../.."])??"0.0.0";const PM_MCP_SERVER_INFO={name:"pm-mcp",version:PM_MCP_SERVER_VERSION,description:"Stateless project-context management through pm SDK contracts.",websiteUrl:"https://github.com/unbraind/pm-cli"};const PM_MCP_SERVER_CAPABILITIES={prompts:{listChanged:true},resources:{listChanged:true,subscribe:true},tools:{listChanged:true},extensions:{[PM_MCP_TASKS_EXTENSION]:{},[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY,[PM_MCP_SKILLS_EXTENSION]:PM_MCP_SKILLS_SERVER_CAPABILITY,[PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]:PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY}};const PM_MCP_SUBSCRIPTIONS=new Map;function createMcpSubscriptionRegistry(){return new PmMcpSubscriptionRegistry({capabilities:PM_MCP_SERVER_CAPABILITIES,serverInfo:PM_MCP_SERVER_INFO})}function pruneClosedMcpSubscriptionRegistries(){for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(subscription.registry.size===0)PM_MCP_SUBSCRIPTIONS.delete(key)}}const PM_MCP_CACHE_POLICIES={prompts:{ttlMs:6e4,cacheScope:"public"},resource:{ttlMs:0,cacheScope:"private"},resources:{ttlMs:6e4,cacheScope:"public"},tools:{ttlMs:3e4,cacheScope:"private"}};const PM_MCP_DIRECT_TASK_TOOLS=new Set(["pm_graph","pm_health","pm_validate"]);const PM_MCP_RUN_TASK_ACTIONS=new Set(["graph","health","import","reindex","test-all","validate"]);const PM_MCP_SKILL_METHODS=new Set(["skills/list","skills/get","resources/directory/read"]);const PM_MCP_INSTRUCTIONS="You have access to native pm CLI tools for git-based project management. When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. Do not pass path during real repository tracking \u2014 only pass path for sandbox or test runs.";function declaredToolKeys(tools=TOOLS){return new Map(tools.map(tool=>{const schema=tool.inputSchema;const properties=schema.properties??{};return[tool.name,Object.keys(properties)]}))}function nearestDeclaredKey(unexpected,declared){const limit=Math.max(1,Math.min(3,Math.floor(unexpected.length/4)+1));let best;for(const candidate of declared){const distance=levenshteinDistanceWithinLimit(unexpected,candidate,limit);if(distance===null){continue}if(best===void 0||distance<best.distance){best={key:candidate,distance}}}return best?.key}const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS=new Set(["pm_run"]);const MCP_RETRY_ARGUMENT_KEYS=new Set(["inputResponses","requestState"]);function resolveMcpDiscoveryCursorIntegrityKey(){const configuredKey=process.env.PM_MCP_DISCOVERY_CURSOR_KEY;if(configuredKey===void 0)return void 0;const key=Buffer.from(configuredKey,"utf8");if(key.byteLength<32){throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.",64)}return key}function detectUnexpectedTopLevelKeys(toolName,args,toolDeclaredKeys=declaredToolKeys()){if(typeof args!=="object"||args===null||Array.isArray(args)){return[]}if(UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName)){return[]}const declared=toolDeclaredKeys.get(toolName);if(declared===void 0){return[]}const declaredSet=new Set([...declared,...MCP_RETRY_ARGUMENT_KEYS]);const warnings=[];for(const key of Object.keys(args)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`:`Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`)}return warnings}const HANDLERS={pm_run:args=>runMcpAction(args),pm_discover:async args=>{const surface=await resolveMcpToolSurface(TOOLS,args);const cursorIntegrityKey=resolveMcpDiscoveryCursorIntegrityKey();const discoveryOptions=parsePmToolDiscoveryOptions(args);return discoverPmTools(surface.tools.map(tool=>({name:tool.name,description:tool.description,inputSchema:tool.inputSchema,authorized:true,signals:{freshness:1,usage:PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)?1:0}})),{...discoveryOptions,profile:surface.profile,...cursorIntegrityKey===void 0?{}:{cursorIntegrityKey}})},pm_mutate:async args=>{const transactionId=readRequiredString(args,"transactionId");const controls=parseAtomicMutationControls(args);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const resolved=resolveItemMutationDocument(JSON.stringify({schema_version:1,mutations:args.mutations}),{transactionId,idPrefix:(await readSettings(pmRoot)).id_prefix});const{mutations,references}=resolved;if(args.dryRun===true){return{transaction_id:transactionId,dry_run:true,mutation_count:mutations.length,mutations,references}}const result=await runWithActiveExtensions({cwd:typeof args.cwd==="string"?args.cwd:void 0,path:typeof args.path==="string"?args.path:void 0,noExtensions:args.noExtensions===true},()=>commitItemMutations({pmRoot,transactionId,author:resolveAuthor(typeof args.author==="string"?args.author:void 0,"unknown"),mutations,...controls}));const{transactionId:committedTransactionId,...commitResult}=result;return{...commitResult,transaction_id:committedTransactionId,mutation_count:mutations.length,references}},...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool,action])=>[tool,args=>runMcpAction({...args,action})]))};function resolveInvokedAction(toolName,args){if(toolName==="pm_run"){return typeof args.action==="string"?args.action:void 0}return NARROW_TOOL_ACTIONS[toolName]}async function collectMutationGuardWarnings(toolName,action,args){if(toolName!=="pm_mutate"&&!isMutationAction(action??"")){return[]}const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot))){return[]}const settings=await readSettings(pmRoot);const nestedOptions=typeof args.options==="object"&&args.options!==null&&!Array.isArray(args.options)?args.options:{};const result=evaluateMutationGuard({author:resolveAuthor(typeof args.author==="string"?args.author:typeof nestedOptions.author==="string"?nestedOptions.author:void 0,settings.author_default),payload:args,settings:settings.mutation_guard,force:args.force===true||nestedOptions.force===true});return result.warnings}function detectUnexpectedOptionKeys(toolName,action,args){const options=args.options;if(action===void 0||typeof options!=="object"||options===null||Array.isArray(options)){return[]}const declared=pmToolActionNestedOptionKeys(action);if(declared===void 0){return[]}const declaredSet=new Set(declared);const warnings=[];for(const key of Object.keys(options)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`:`Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`)}return warnings}function resultContent(result,warnings,tokenAccounting=false,canonicalStructuredResult=false){const effectiveResult=tokenAccounting?attachOutputTokenAccounting(result,value=>JSON.stringify(value,null,2)):result;const structuredContent=warnings!==void 0&&warnings.length>0?{result:effectiveResult,warnings}:{result:effectiveResult};return{content:[{type:"text",text:canonicalStructuredResult?"Canonical result: structuredContent.result":JSON.stringify(effectiveResult,null,2)}],structuredContent}}function errorContent(error,canonicalStructuredResult=false){const code=error instanceof PmCliError?error.exitCode:1;const message=error instanceof Error?error.message:String(error);const details=error instanceof PmCliError?error.context:void 0;return{isError:true,content:[{type:"text",text:canonicalStructuredResult?"Canonical error: structuredContent":JSON.stringify({error:message,code,details},null,2)}],structuredContent:{result:null,error:message,code,details}}}function boundMcpClientProvenance(value){const provenance=isRuntimeRecord(value)?value:{};const bounded={};let acceptedCount=0;for(const key in provenance){if(acceptedCount>=32)break;if(!Object.prototype.hasOwnProperty.call(provenance,key))continue;const entry=provenance[key];if(/^[a-z][a-z0-9_-]{0,63}$/u.test(key)&&typeof entry==="string"&&entry.trim().length>0){bounded[key]=entry.trim().slice(0,256);acceptedCount+=1}}return bounded}function readMcpClientInfo(value){const clientInfo=isRuntimeRecord(value)?value:{};const clientName=typeof clientInfo.name==="string"?clientInfo.name.trim():"";if(clientName.length===0)return void 0;const optionalValues=[["version",clientInfo.version,128],["model",clientInfo.model,256],["session",clientInfo.session,256]];const result={name:clientName.slice(0,128)};for(const[key,value2,limit]of optionalValues){if(typeof value2==="string"&&value2.trim().length>0){result[key]=value2.trim().slice(0,limit)}}const boundedProvenance=boundMcpClientProvenance(clientInfo.provenance);if(Object.keys(boundedProvenance).length>0){result.provenance=boundedProvenance}const episode=boundAgentEpisodeIdentity(clientInfo.episode,false);if(episode!==void 0)result.episode=episode;return result}async function emitMcpChangeNotifications(action){if(isMutationAction(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({registry})=>PM_MCP_RESOURCE_CONTRACTS.map(resource=>registry.emitResourceUpdated(resource.uri))))}if(["extension","install","package","uninstall"].includes(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({registry})=>registry.emitListChanged("tools")))}pruneClosedMcpSubscriptionRegistries()}async function handleToolCall(paramsInput,clientInfo,progressiveDiscoveryNegotiated=false){const clientSignals=clientInfo?{client_info:clientInfo}:{};return runWithHarnessDetectionSignals({env:process.env,argv:process.argv,...clientSignals},async()=>{const params=asRecordClone(paramsInput);const name=readRequiredString(params,"name");const handler=Object.prototype.hasOwnProperty.call(HANDLERS,name)?HANDLERS[name]:void 0;if(!handler){throw new PmCliError(`Unknown pm MCP tool: ${name}`,64)}const inputResponses=params.inputResponses===void 0?void 0:parseMcpInputResponses(params.inputResponses);validateMcpToolArguments(params.arguments);const requestedArgs={...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),...inputResponses?{inputResponses}:{},...typeof params.requestState==="string"?{requestState:params.requestState}:{}};const access=await resolveMcpToolAccess(TOOLS,name,requestedArgs);const requiredCustomDiscoveryEntry=progressiveDiscoveryNegotiated&&access.profile==="custom"&&name==="pm_discover";if(!access.available&&!requiredCustomDiscoveryEntry){throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`,64)}const args=await normalizeWorkspaceToolArguments(name,requestedArgs);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const workspaceIdentity=await pathExists(getSettingsPath(pmRoot))?(await readSettings(pmRoot)).agent_identity:void 0;return runWithHarnessDetectionSignals({env:{...process.env,PM_PATH:pmRoot},argv:process.argv,cwd,...clientSignals},()=>runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals??[],async()=>{const action=resolveInvokedAction(name,args);const warnings=[...detectUnexpectedTopLevelKeys(name,args,declaredToolKeys()),...detectUnexpectedOptionKeys(name,action,args),...await collectMutationGuardWarnings(name,action,args)];for(const warning of warnings){console.error(`[pm-mcp] ${warning}`)}const result=await handler(args);void emitMcpChangeNotifications(action);return resultContent(result,warnings,args.tokenAccounting===true,progressiveDiscoveryNegotiated)},{probesEnabled:workspaceIdentity?.probes_enabled}))})}async function openMcpSubscription(input){if(typeof input.request.id!=="string"&&typeof input.request.id!=="number"||input.request.method!=="subscriptions/listen"){throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request",PM_MCP_ERROR_CODES.invalidParams,{required:["id","method","params.notifications"]})}resolveMcpRequestContext(input.request.params);const key=input.key??input.request.id;if(PM_MCP_SUBSCRIPTIONS.has(key)){throw new PmMcpProtocolError("MCP subscription id is already active",PM_MCP_ERROR_CODES.invalidParams,{subscriptionId:input.request.id})}const registry=createMcpSubscriptionRegistry();await registry.open({id:input.request.id,notifications:input.request.params?.notifications,sink:input.sink});PM_MCP_SUBSCRIPTIONS.set(key,{id:input.request.id,registry})}function closeMcpSubscription(id,key=id){const subscription=PM_MCP_SUBSCRIPTIONS.get(key);if(!subscription||subscription.id!==id)return void 0;PM_MCP_SUBSCRIPTIONS.delete(key);return subscription.registry.close(id)}function closeStdioMcpSubscriptions(){const closed=[];for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(key!==subscription.id)continue;const result=closeMcpSubscription(subscription.id,key);if(result)closed.push({id:subscription.id,result})}return closed}async function resolveMcpToolSchemaForRequest(request){if(request.method!=="tools/call")return void 0;const name=request.params?.name;if(typeof name!=="string")return void 0;const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));return surface.tools.find(tool=>tool.name===name)?.inputSchema}function buildMcpToolCallErrorResult(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return void 0}const content=errorContent(error,hasMcpProtocolVersionMetadata(request)&&hasMcpClientExtension(resolveMcpRequestContext(request.params),PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));return hasMcpProtocolVersionMetadata(request)?buildMcpCompleteResult(content,PM_MCP_SERVER_INFO):content}function requestWorkspaceArgs(params){const paramsRecord=asRecordClone(params);return asRecordClone(paramsRecord.arguments??paramsRecord)}async function readWorkspaceResource(uri,params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const contract=PM_MCP_RESOURCE_CONTRACTS.find(resource=>resource.uri===uri);if(!contract){throw new PmCliError(`Unknown pm MCP resource: ${uri}`,64)}let value;if(uri==="pm://workspace/context"){value=await runMcpAction({...args,action:"context",limit:10})}else if(uri==="pm://workspace/claims"){value=await runMcpAction({...args,action:"list",status:"in_progress",limit:20})}else if(uri==="pm://workspace/focus"){value=await runMcpAction({...args,action:"focus",subcommand:"show"})}else{const guidePath=path.join(cwd,"AGENTS.md");value=await pathExists(guidePath)?(await readFile(guidePath,"utf8")).slice(0,32e3):"No repository-local AGENTS.md was found."}return{contents:[{uri,mimeType:contract.mimeType,text:typeof value==="string"?value:JSON.stringify(value,null,2)}]}}async function loadRequestSkillRegistry(params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const workspaceRoot=resolveWorkspaceRoot(resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0));return PmMcpSkillRegistry.load({packageRoot:resolvePmPackageRoot(),workspaceRoot,packageVersion:PM_MCP_SERVER_VERSION})}function renderWorkflowPrompt(params){const paramsRecord=asRecordClone(params);const name=readRequiredString(paramsRecord,"name");const prompt=PM_MCP_PROMPT_CONTRACTS.find(candidate=>candidate.name===name);if(!prompt){throw new PmCliError(`Unknown pm MCP prompt: ${name}`,64)}const argumentsRecord=asRecordClone(paramsRecord.arguments);let text=prompt.template;for(const argument of prompt.arguments){const value=argumentsRecord[argument.name];if(argument.required&&(typeof value!=="string"||value.trim().length===0)){throw new PmCliError(`Missing required prompt argument: ${argument.name}`,64)}text=text.replaceAll(`{{${argument.name}}}`,typeof value==="string"?value:"")}return{description:prompt.description,messages:[{role:"user",content:{type:"text",text}}]}}const LEGACY_MCP_ADAPTER=new LegacyMcpAdapter({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS,parseClientInfo:readMcpClientInfo,listTools:async params=>({tools:(await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(params))).tools}),callTool:handleToolCall,listResources:()=>({resources:PM_MCP_RESOURCE_CONTRACTS}),readResource:params=>readWorkspaceResource(readRequiredString(asRecordClone(params),"uri"),params),listPrompts:()=>({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments}))}),getPrompt:renderWorkflowPrompt});function deterministicMcpTools(tools){return tools.map(tool=>({...tool,inputSchema:validateMcpJsonSchema(tool.inputSchema)})).sort((left,right)=>left.name.localeCompare(right.name))}function mcpTaskPrincipal(requestContext){return requestContext.clientInfo?`${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`:"anonymous-stdio"}function mcpTaskStore(){return createMcpTaskStore({pmRoot:resolvePmRoot(process.cwd()),owner:"pm-mcp-task-provider"})}function validateMcpToolArguments(value){if(value!==void 0&&!isMcpRecord(value)){throw new PmCliError("pm MCP tool arguments must be an object.",64)}}function shouldCreateMcpTask(params,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){return false}const requestParams=asRecordClone(params);const name=requestParams.name;const args=asRecordClone(requestParams.arguments);if(PM_MCP_DIRECT_TASK_TOOLS.has(name))return true;if(name==="pm_test"&&(args.subcommand==="run"||isMcpRecord(args.options)&&args.options.subcommand==="run")){return true}if(name!=="pm_run")return false;return typeof args.action==="string"&&PM_MCP_RUN_TASK_ACTIONS.has(args.action)}const PENDING_MCP_TASKS=new Map;async function executeMcpTask(execution,inputResponses){const params={...execution.params,...inputResponses?{inputResponses}:{},...execution.requestState?{requestState:execution.requestState}:{}};try{const result=await handleToolCall(params,execution.context.clientInfo,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(result,PM_MCP_SERVER_INFO));PENDING_MCP_TASKS.delete(execution.taskId)}catch(error){if(error instanceof PmMcpInputRequiredError){execution.requestState=error.requestState;await execution.store.requireInput({taskId:execution.taskId,principal:execution.principal,requestContext:execution.context,inputRequests:error.inputRequests,statusMessage:"Task requires additional client input."});return}if(error instanceof PmMcpProtocolError){await execution.store.fail(execution.taskId,execution.principal,{code:error.code,message:error.message,data:error.data})}else{await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(errorContent(error,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO))}PENDING_MCP_TASKS.delete(execution.taskId)}}async function settleMcpTaskExecution(taskId,execution){try{await execution}catch{PENDING_MCP_TASKS.delete(taskId)}}function scheduleMcpTaskExecution(execution,inputResponses){void settleMcpTaskExecution(execution.taskId,executeMcpTask(execution,inputResponses))}async function createMcpTaskForToolCall(params,requestContext){const store=mcpTaskStore();const principal=mcpTaskPrincipal(requestContext);const task=await store.create({principal,statusMessage:"pm operation accepted for asynchronous execution."});const execution={context:requestContext,params:asRecordClone(params),principal,store,taskId:task.taskId};PENDING_MCP_TASKS.set(task.taskId,execution);scheduleMcpTaskExecution(execution);return attachMcpServerInfo(task,PM_MCP_SERVER_INFO)}async function dispatchMcpTaskMethod(request,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_TASKS_EXTENSION]:{}}}})}const params=asRecordClone(request.params);const taskId=readRequiredString(params,"taskId");const principal=mcpTaskPrincipal(requestContext);const store=mcpTaskStore();if(request.method==="tasks/get"){return buildMcpCompleteResult(await store.get(taskId,principal),PM_MCP_SERVER_INFO)}if(request.method==="tasks/update"){const update=await store.update(taskId,principal,params.inputResponses);const execution=PENDING_MCP_TASKS.get(taskId);if(execution&&update.acceptedKeys.length>0&&update.remainingKeys.length===0){scheduleMcpTaskExecution(execution,await store.takeInputResponses(taskId,principal))}return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}await store.cancel(taskId,principal);PENDING_MCP_TASKS.delete(taskId);return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}async function dispatchModernToolMethod(request,requestContext,clientInfo){if(request.method==="tools/list"){const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));const progressiveDiscovery=hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION);const listedTools=progressiveDiscovery?[...surface.tools.filter(tool=>PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),...surface.profile==="custom"&&!surface.tools.some(tool=>tool.name==="pm_discover")?TOOLS.filter(tool=>tool.name==="pm_discover"):[]]:surface.tools;return buildMcpCompleteResult(withMcpCachePolicy({tools:hasCompatiblePmMcpAppsCapability(requestContext)?decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools)):deterministicMcpTools(listedTools)},PM_MCP_CACHE_POLICIES.tools),PM_MCP_SERVER_INFO)}validateMcpToolArguments(request.params?.arguments);if(shouldCreateMcpTask(request.params,requestContext)){return createMcpTaskForToolCall(request.params,requestContext)}try{return buildMcpCompleteResult(await handleToolCall(request.params,clientInfo,hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmMcpInputRequiredError))throw error;return buildMcpInputRequiredResult({requestContext,serverInfo:PM_MCP_SERVER_INFO,inputRequests:error.inputRequests,requestState:error.requestState})}}async function dispatchModernResourceMethod(request,requestContext){if(request.method==="resources/list"){const resources=[...PM_MCP_RESOURCE_CONTRACTS,...hasCompatiblePmMcpAppsCapability(requestContext)?PM_MCP_APP_CONTRACTS.map(contract=>({uri:contract.uri,name:contract.name,description:contract.description,mimeType:PM_MCP_APP_MIME_TYPE,_meta:{ui:contract.resourceMeta}})):[]].sort((left,right)=>left.uri.localeCompare(right.uri));return buildMcpCompleteResult(withMcpCachePolicy({resources},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}if(request.method==="resources/templates/list"){return buildMcpCompleteResult(withMcpCachePolicy({resourceTemplates:[]},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}try{const uri=readRequiredString(asRecordClone(request.params),"uri");const app=findPmMcpAppByUri(uri);let resource;if(app){if(!hasPmMcpAppsCapability(requestContext)){throw new PmMcpProtocolError("MCP App resource requires negotiated client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY}}})}resource={contents:[{uri,mimeType:PM_MCP_APP_MIME_TYPE,text:renderPmMcpAppHtml(app),_meta:{ui:app.resourceMeta}}]}}else if(uri.startsWith("skill://")){assertPmMcpSkillsCapability(requestContext);resource={...(await loadRequestSkillRegistry(request.params)).read(uri)}}else{resource=await readWorkspaceResource(uri,request.params)}return buildMcpCompleteResult(withMcpCachePolicy(resource,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmCliError)||!error.message.startsWith("Unknown pm MCP resource:")){throw error}throw new PmMcpProtocolError(error.message,PM_MCP_ERROR_CODES.invalidParams,{field:"uri"})}}function hasCompatiblePmMcpAppsCapability(requestContext){try{return hasPmMcpAppsCapability(requestContext)}catch(error){if(error instanceof PmMcpProtocolError)return false;throw error}}function readSkillPageOptions(params){if(params.cursor!==void 0&&typeof params.cursor!=="string"){throw new PmMcpProtocolError("Skills cursor must be a string",PM_MCP_ERROR_CODES.invalidParams,{field:"cursor"})}if(params.limit!==void 0&&typeof params.limit!=="number"){throw new PmMcpProtocolError("Skills limit must be a number",PM_MCP_ERROR_CODES.invalidParams,{field:"limit"})}return{...typeof params.cursor==="string"?{cursor:params.cursor}:{},...typeof params.limit==="number"?{limit:params.limit}:{}}}async function dispatchModernSkillMethod(request,requestContext){const directoryRead=request.method==="resources/directory/read";assertPmMcpSkillsCapability(requestContext,directoryRead);const params=asRecordClone(request.params);const registry=await loadRequestSkillRegistry(request.params);let result;if(request.method==="skills/list"){result={...registry.list(readSkillPageOptions(params))}}else if(request.method==="skills/get"){result={skill:registry.get(readRequiredString(params,"uri"))}}else{result={...registry.readDirectory(readRequiredString(params,"uri"),readSkillPageOptions(params))}}return buildMcpCompleteResult(withMcpCachePolicy(result,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}function dispatchModernPromptMethod(request){const result=request.method==="prompts/list"?withMcpCachePolicy({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments})).sort((left,right)=>left.name.localeCompare(right.name))},PM_MCP_CACHE_POLICIES.prompts):renderWorkflowPrompt(request.params);return buildMcpCompleteResult(result,PM_MCP_SERVER_INFO)}async function dispatchModernMcpRequest(request,meta){const requestContext=resolveMcpRequestContext(request.params);const clientInfo=readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);if(request.method==="server/discover"){return buildMcpDiscoverResult({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS})}if(request.method==="ping"){throw new PmMcpProtocolError("MCP method not found: ping",-32601,{removedIn:PM_MCP_PROTOCOL_VERSION})}if(PM_MCP_SKILL_METHODS.has(request.method??"")){return dispatchModernSkillMethod(request,requestContext)}if(request.method==="tasks/get"||request.method==="tasks/update"||request.method==="tasks/cancel"){return dispatchMcpTaskMethod(request,requestContext)}if(request.method==="tools/list"||request.method==="tools/call"){return dispatchModernToolMethod(request,requestContext,clientInfo)}if(request.method==="resources/list"||request.method==="resources/templates/list"||request.method==="resources/read"){return dispatchModernResourceMethod(request,requestContext)}if(request.method==="prompts/list"||request.method==="prompts/get"){return dispatchModernPromptMethod(request)}throw new PmMcpProtocolError(`MCP method not found: ${request.method??"(missing)"}`,-32601)}async function handleRequestInReproducibleContext(request){if(!request.id&&request.method?.startsWith("notifications/")){return void 0}if(hasMcpProtocolVersionMetadata(request)){const allowlist=(process.env.PM_MCP_BAGGAGE_ALLOWLIST??"").split(",").map(entry=>entry.trim()).filter(Boolean);return runWithMcpTraceContext(extractMcpTraceContext(request.params,{baggageAllowlist:allowlist}),()=>dispatchModernMcpRequest(request,request.params._meta))}if(request.method==="initialize"){return LEGACY_MCP_ADAPTER.initialize(request.params)}return LEGACY_MCP_ADAPTER.dispatch(request)}function hasMcpProtocolVersionMetadata(request){const meta=isMcpRecord(request.params)?request.params._meta:void 0;return isMcpRecord(meta)&&Object.prototype.hasOwnProperty.call(meta,PM_MCP_META_KEYS.protocolVersion)}async function handleRequest(request){return runWithReproducibleProcessEnvironment(process.env,()=>handleRequestInReproducibleContext(request))}function writeResponse(id,payload){process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,result:payload})}
3
+ `)}function writeError(id,error){const code=error instanceof PmMcpProtocolError?error.code:error instanceof PmCliError?error.exitCode:-32603;const message=error instanceof Error?error.message:String(error);const data=error instanceof PmMcpProtocolError?error.data:error instanceof PmCliError?error.context:void 0;process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,error:{code,message,data}})}
4
+ `)}function writeToolCallErrorResponse(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return false}writeResponse(request.id,buildMcpToolCallErrorResult(request,error));return true}async function handleStdioTransportControl(request){if(request.method==="subscriptions/listen"){await openMcpSubscription({request,sink:notification=>{process.stdout.write(`${JSON.stringify(notification)}
5
+ `)}});return true}if(request.method!=="notifications/cancelled")return false;const requestId=request.params?.requestId;if(typeof requestId==="string"||typeof requestId==="number"){const result=closeMcpSubscription(requestId);if(result)writeResponse(requestId,result)}return true}async function processRpcLineWithHandler(line,requestHandler){if(line.trim().length===0){return}let request;try{request=JSON.parse(line)}catch(error){const message=error instanceof Error?error.message:String(error);writeError(null,new PmCliError(`Parse error: ${message}`,-32700));return}if(typeof request!=="object"||request===null||Array.isArray(request)){writeError(null,new PmCliError("Invalid JSON-RPC request: expected an object",-32600));return}const shouldRespond=Object.prototype.hasOwnProperty.call(request,"id");try{if(await handleStdioTransportControl(request))return;const result=await requestHandler(request);if(shouldRespond&&result!==void 0){writeResponse(request.id,result)}}catch(error){if(!shouldRespond){return}if(!writeToolCallErrorResponse(request,error)){writeError(request.id,error)}}}async function processRpcLine(line){await processRpcLineWithHandler(line,handleRequest)}function startMcpServer(){const rl=readline.createInterface({input:process.stdin,crlfDelay:Infinity});const queue=createSerialQueue();let processLine;try{const runInProcessContext=createReproducibleProcessRunner(process.env);processLine=line=>runInProcessContext(()=>processRpcLineWithHandler(line,handleRequestInReproducibleContext))}catch{processLine=processRpcLine}rl.on("line",line=>{void queue.enqueue(()=>processLine(line))});rl.on("close",()=>{void queue.enqueue(()=>{for(const closed of closeStdioMcpSubscriptions()){writeResponse(closed.id,closed.result)}})})}function isInvokedAsMcpMainModule(argvPath,moduleUrl){if(!argvPath){return false}const selfPath=fileURLToPath(moduleUrl);if(argvPath===selfPath){return true}try{return realpathSync(argvPath)===realpathSync(selfPath)}catch{return false}}function readRuntimeTestHook(key){const runtimeTestHooks=globalThis.__pmCliActionRunnerTestHooks;if(runtimeTestHooks===void 0){throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`,64)}return runtimeTestHooks[key]}const _testOnly={boundMcpClientProvenance,createMcpInputRequiredError:input=>new PmMcpInputRequiredError(input),createMcpProtocolError:(...input)=>new PmMcpProtocolError(...input),get closeManyOptionsFromFlat(){return readRuntimeTestHook("closeManyOptionsFromFlat")},detectUnexpectedOptionKeys,detectUnexpectedTopLevelKeys,collectMutationGuardWarnings,closeStdioMcpSubscriptions,errorContent,emitMcpChangeNotifications,expireMcpSubscriptionRecord:(id,key=id)=>PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),getMcpClientInfo:()=>LEGACY_MCP_ADAPTER.getClientInfo(),get extensionOptionsFromArgs(){return readRuntimeTestHook("extensionOptionsFromArgs")},get globalOptions(){return readRuntimeTestHook("globalOptions")},get mutationListOptions(){return readRuntimeTestHook("mutationListOptions")},nearestDeclaredKey,mcpTaskPrincipal,resultContent,resolveMcpRequestContext,shouldCreateMcpTask,settleMcpTaskExecution,subscriptionCount:()=>PM_MCP_SUBSCRIPTIONS.size,get normalizeActionName(){return readRuntimeTestHook("normalizeActionName")},get normalizeCommandPath(){return readRuntimeTestHook("normalizeCommandPath")},get normalizeMcpOptionsArrays(){return readRuntimeTestHook("normalizeMcpOptionsArrays")},get normalizeMcpUpdateOptions(){return readRuntimeTestHook("normalizeMcpUpdateOptions")},get optionsWithAuthor(){return readRuntimeTestHook("optionsWithAuthor")},get readRequiredString(){return readRuntimeTestHook("readRequiredString")},get readScalarString(){return readRuntimeTestHook("readScalarString")},get readScalarStringAllowBlank(){return readRuntimeTestHook("readScalarStringAllowBlank")},get readStringArray(){return readRuntimeTestHook("readStringArray")},runAction:runMcpAction,get updateManyOptionsFromFlat(){return readRuntimeTestHook("updateManyOptionsFromFlat")},get withAddNoteOption(){return readRuntimeTestHook("withAddNoteOption")},get withFilesDiscoveryOptions(){return readRuntimeTestHook("withFilesDiscoveryOptions")},get withMutationCompaction(){return readRuntimeTestHook("withMutationCompaction")},writeError};if(isInvokedAsMcpMainModule(process.argv[1],import.meta.url)){startMcpServer()}export{_testOnly,buildMcpToolCallErrorResult,closeMcpSubscription,handleRequest,isInvokedAsMcpMainModule,openMcpSubscription,processRpcLine,resolveMcpToolSchemaForRequest,startMcpServer};
1234
6
  //# sourceMappingURL=server.js.map
1235
- //# debugId=1950da06-8c27-5506-bc64-4bf51c1a3f1c