@unbrained/pm-cli 2026.9.7 → 2026.9.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agents/skills/pm-developer/SKILL.md +12 -4
- package/.agents/skills/pm-developer/references/MULTI_AGENT_MERGE.md +19 -10
- package/.agents/skills/pm-extensions/SKILL.md +6 -0
- package/.agents/skills/pm-sdk/SKILL.md +11 -2
- package/.agents/skills/pm-user/SKILL.md +5 -0
- package/.agents/skills/pm-user/references/ECOSYSTEM_PLANNING.md +95 -0
- package/.claude-plugin/marketplace.json +2 -2
- package/CHANGELOG.md +211 -181
- package/dist/cli/after-command-context-usage.js +1 -48
- package/dist/cli/argv-utils.js +1 -40
- package/dist/cli/bootstrap-args.js +1 -9
- package/dist/cli/bundle-integrity.js +2 -110
- package/dist/cli/commander-usage.js +11 -771
- package/dist/cli/commands/activity.js +1 -9
- package/dist/cli/commands/aggregate.js +1 -5
- package/dist/cli/commands/append.js +1 -5
- package/dist/cli/commands/claim.js +1 -5
- package/dist/cli/commands/close-many.js +1 -5
- package/dist/cli/commands/close.js +1 -9
- package/dist/cli/commands/comments.js +1 -5
- package/dist/cli/commands/config.js +1 -9
- package/dist/cli/commands/context.js +1 -9
- package/dist/cli/commands/contracts.js +1 -5
- package/dist/cli/commands/copy.js +1 -9
- package/dist/cli/commands/create.js +1 -9
- package/dist/cli/commands/delete.js +1 -9
- package/dist/cli/commands/deps.js +1 -9
- package/dist/cli/commands/docs.js +1 -9
- package/dist/cli/commands/duplicates.js +1 -9
- package/dist/cli/commands/eval.js +1 -9
- package/dist/cli/commands/extension/describe.js +1 -5
- package/dist/cli/commands/extension/scaffold.js +1 -5
- package/dist/cli/commands/extension/shared.js +1 -5
- package/dist/cli/commands/extension.js +1 -9
- package/dist/cli/commands/files.js +1 -9
- package/dist/cli/commands/focus.js +1 -9
- package/dist/cli/commands/gc.js +1 -9
- package/dist/cli/commands/get.js +1 -9
- package/dist/cli/commands/graph.js +1 -10
- package/dist/cli/commands/health.js +1 -9
- package/dist/cli/commands/history-compact.js +1 -10
- package/dist/cli/commands/history-redact.js +1 -11
- package/dist/cli/commands/history-repair.js +1 -10
- package/dist/cli/commands/history.js +1 -5
- package/dist/cli/commands/index.js +1 -58
- package/dist/cli/commands/init-agent-guidance.js +1 -9
- package/dist/cli/commands/init.js +1 -9
- package/dist/cli/commands/learnings.js +1 -5
- package/dist/cli/commands/lifecycle-transitions.js +1 -5
- package/dist/cli/commands/list.js +1 -9
- package/dist/cli/commands/merge.js +1 -11
- package/dist/cli/commands/next.js +1 -9
- package/dist/cli/commands/notes.js +1 -5
- package/dist/cli/commands/plan.js +1 -9
- package/dist/cli/commands/profile.js +1 -9
- package/dist/cli/commands/restore.js +1 -9
- package/dist/cli/commands/scheduling-shortcuts.js +1 -9
- package/dist/cli/commands/schema.js +1 -10
- package/dist/cli/commands/search.js +1 -9
- package/dist/cli/commands/stats.js +1 -9
- package/dist/cli/commands/telemetry.js +1 -9
- package/dist/cli/commands/test-all.js +1 -9
- package/dist/cli/commands/test-runs.js +1 -9
- package/dist/cli/commands/test.js +1 -9
- package/dist/cli/commands/update-many.js +1 -5
- package/dist/cli/commands/update.js +1 -9
- package/dist/cli/commands/upgrade.js +1 -5
- package/dist/cli/commands/validate.js +1 -15
- package/dist/cli/context-intent-invocation.js +1 -20
- package/dist/cli/description-stdin.js +1 -17
- package/dist/cli/error-guidance.js +1 -1353
- package/dist/cli/extension-command-help.js +5 -636
- package/dist/cli/extension-command-options.js +1 -427
- package/dist/cli/extension-recovery.js +1 -126
- package/dist/cli/help-content.js +2 -1001
- package/dist/cli/help-json-payload.js +4 -570
- package/dist/cli/main.d.ts +4 -0
- package/dist/cli/main.js +5 -2573
- package/dist/cli/migration-gates.js +1 -289
- package/dist/cli/public.js +1 -20
- package/dist/cli/register-annotations.js +1 -270
- package/dist/cli/register-assurance.js +1 -62
- package/dist/cli/register-files-lookup.js +1 -56
- package/dist/cli/register-history-activity.d.ts +8 -0
- package/dist/cli/register-history-activity.js +2 -0
- package/dist/cli/register-history-author.js +1 -38
- package/dist/cli/register-history-maintenance.d.ts +9 -0
- package/dist/cli/register-history-maintenance.js +2 -0
- package/dist/cli/register-list-query.js +10 -943
- package/dist/cli/register-mutation-options.js +1 -9
- package/dist/cli/register-mutation.js +19 -1893
- package/dist/cli/register-operations.js +1 -920
- package/dist/cli/register-setup.js +1 -716
- package/dist/cli/register-structured-mutation.js +1 -196
- package/dist/cli/registration-helpers.js +1 -5
- package/dist/cli/runtime-compatibility-boundary.js +4 -42
- package/dist/cli/schema-registration-helpers.js +1 -73
- package/dist/cli/search-refresh.js +1 -13
- package/dist/cli/stats-analytics-json.js +1 -68
- package/dist/cli/telemetry-flush.js +1 -10
- package/dist/cli-bundle/bundle-manifest.json +164 -156
- package/dist/cli-bundle/chunks/chunk-3BZZA6A3.js +5 -0
- package/dist/cli-bundle/chunks/chunk-AMRDVX36.js +235 -0
- package/dist/cli-bundle/chunks/chunk-DAM4CBBR.js +2202 -0
- package/dist/cli-bundle/chunks/{chunk-WYRZZ5ZE.js → chunk-DEZPZOQ7.js} +2 -2
- package/dist/cli-bundle/chunks/chunk-FLDWYEND.js +77 -0
- package/dist/cli-bundle/chunks/{chunk-NPN5I67J.js → chunk-G5ADGQ2D.js} +3 -3
- package/dist/cli-bundle/chunks/chunk-JAAEYHUA.js +2 -0
- package/dist/cli-bundle/chunks/{chunk-JX4DH4WC.js → chunk-KR3RP4FH.js} +3 -3
- package/dist/cli-bundle/chunks/chunk-LEZOUXG6.js +2 -0
- package/dist/cli-bundle/chunks/chunk-NSAPNEYH.js +2 -0
- package/dist/cli-bundle/chunks/chunk-QOEKOECV.js +29 -0
- package/dist/cli-bundle/chunks/chunk-RHSFOMHU.js +2 -0
- package/dist/cli-bundle/chunks/chunk-XOD2PCB6.js +20 -0
- package/dist/cli-bundle/chunks/{chunk-JT6XF6GE.js → chunk-YVEQ2AMO.js} +4 -4
- package/dist/cli-bundle/chunks/register-list-query-KSK3R63M.js +11 -0
- package/dist/cli-bundle/chunks/register-mutation-IQ5C7U6O.js +20 -0
- package/dist/cli-bundle/chunks/{register-operations-I5W3KMGB.js → register-operations-DWVHR2NC.js} +2 -2
- package/dist/cli-bundle/chunks/register-setup-BQ5SVD4B.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-3WRPWLA7.js +3 -0
- package/dist/cli-bundle/focused-chunks/chunk-7MBUII7U.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-COPBO5HW.js +8 -0
- package/dist/cli-bundle/focused-chunks/chunk-DUN4IXYN.js +20 -0
- package/dist/cli-bundle/focused-chunks/{chunk-LIJIA4TY.js → chunk-EE5QSM4Z.js} +3 -3
- package/dist/cli-bundle/focused-chunks/chunk-HJVARYM3.js +6 -0
- package/dist/cli-bundle/focused-chunks/chunk-IAUOUGVR.js +177 -0
- package/dist/cli-bundle/focused-chunks/chunk-KOOMJ54F.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-MZDXX7JY.js +56 -0
- package/dist/cli-bundle/focused-chunks/{chunk-M6PBRFSH.js → chunk-OPFHFGDD.js} +2 -2
- package/dist/cli-bundle/focused-chunks/chunk-QHNETP77.js +9 -0
- package/dist/cli-bundle/focused-chunks/{chunk-3BZEOXLT.js → chunk-RMWES4M6.js} +2 -2
- package/dist/cli-bundle/focused-chunks/chunk-RXT4P5QH.js +10 -0
- package/dist/cli-bundle/focused-chunks/chunk-SDOL6FM2.js +12 -0
- package/dist/cli-bundle/focused-chunks/chunk-SQV4AAUC.js +2 -0
- package/dist/cli-bundle/focused-chunks/{chunk-PEFABF7E.js → chunk-WE3IUNIW.js} +3 -3
- package/dist/cli-bundle/focused-chunks/chunk-YALOUBWJ.js +2 -0
- package/dist/cli-bundle/main.js +20 -20
- package/dist/cli-bundle/sdk-authoring.js +1 -1
- package/dist/cli-bundle/sdk-contracts.js +2 -2
- package/dist/cli-bundle/sdk-core.js +29 -29
- package/dist/cli-bundle/sdk-governance.js +1 -1
- package/dist/cli-bundle/sdk-graph.js +1 -1
- package/dist/cli-bundle/sdk-merge.js +42 -42
- package/dist/cli-bundle/sdk-query.js +1 -1
- package/dist/cli-bundle/sdk-runtime.js +1 -1
- package/dist/cli-bundle/sdk-testing.js +1 -1
- package/dist/cli-bundle/sdk.js +11 -11
- package/dist/cli.js +1 -104
- package/dist/core/checkpoint/checkpoint-gc.js +1 -169
- package/dist/core/checkpoint/mutation-checkpoint.js +2 -133
- package/dist/core/config/nested-settings.js +1 -534
- package/dist/core/config/positional-value.js +1 -109
- package/dist/core/diagnostics/remediation.js +1 -506
- package/dist/core/extensions/activation-summary-markdown.js +2 -145
- package/dist/core/extensions/activation-summary.js +1 -92
- package/dist/core/extensions/activation-transaction.js +1 -46
- package/dist/core/extensions/capability-usage.js +1 -173
- package/dist/core/extensions/command-hook-context.js +1 -13
- package/dist/core/extensions/command-metadata-contract.js +1 -22
- package/dist/core/extensions/command-visibility-tier.js +1 -29
- package/dist/core/extensions/contribution-inventory.js +1 -173
- package/dist/core/extensions/exporter-output-contract.js +1 -66
- package/dist/core/extensions/extension-candidate.js +1 -18
- package/dist/core/extensions/extension-capability-aliases.js +1 -158
- package/dist/core/extensions/extension-hook-runtime.js +1 -699
- package/dist/core/extensions/extension-policy.js +1 -599
- package/dist/core/extensions/extension-registries.js +1 -62
- package/dist/core/extensions/extension-runtime-helpers.js +1 -33
- package/dist/core/extensions/extension-types.js +1 -102
- package/dist/core/extensions/flag-definition-validation.js +1 -52
- package/dist/core/extensions/flag-value-types.js +1 -64
- package/dist/core/extensions/index.js +1 -526
- package/dist/core/extensions/item-field-types.js +1 -39
- package/dist/core/extensions/item-fields.js +1 -261
- package/dist/core/extensions/loader.js +1 -2223
- package/dist/core/extensions/manifest-schema.js +1 -69
- package/dist/core/extensions/module-graph-snapshot.js +1 -33
- package/dist/core/extensions/preflight-ownership.js +1 -41
- package/dist/core/extensions/registration-validation.js +1 -82
- package/dist/core/extensions/registration-values.js +1 -209
- package/dist/core/extensions/reserved-host-flags.js +1 -36
- package/dist/core/extensions/runtime-registrations.js +1 -67
- package/dist/core/extensions/service-ownership.js +1 -19
- package/dist/core/extensions/version-compat.js +1 -216
- package/dist/core/fs/fs-utils.js +2 -158
- package/dist/core/fs/host-environment-errors.js +1 -141
- package/dist/core/fs/index.js +1 -9
- package/dist/core/fs/path-utils.js +1 -17
- package/dist/core/governance/content-fields.js +1 -160
- package/dist/core/governance/issue-codes.js +1 -151
- package/dist/core/governance/metadata-coverage.js +1 -358
- package/dist/core/history/drift-cache.js +3 -72
- package/dist/core/history/drift-scan.js +1 -342
- package/dist/core/history/event-classification.js +1 -109
- package/dist/core/history/event-index.js +8 -784
- package/dist/core/history/history-compact-bulk.js +1 -104
- package/dist/core/history/history-diff.js +1 -158
- package/dist/core/history/history-rewrite.d.ts +6 -1
- package/dist/core/history/history-rewrite.js +1 -107
- package/dist/core/history/history-storage-stats.js +1 -102
- package/dist/core/history/history-stream-policy.js +1 -62
- package/dist/core/history/history.js +2 -617
- package/dist/core/history/identity.js +1 -30
- package/dist/core/history/index.js +1 -9
- package/dist/core/history/projection.js +1 -196
- package/dist/core/history/read.d.ts +9 -0
- package/dist/core/history/read.js +1 -57
- package/dist/core/history/replay.js +2 -439
- package/dist/core/history/version-address.js +1 -32
- package/dist/core/history/workspace-history.js +2 -433
- package/dist/core/io/body-file.js +1 -62
- package/dist/core/io/bulk-ids-input.js +1 -112
- package/dist/core/item/actionability.js +1 -327
- package/dist/core/item/dependency-reference.js +1 -20
- package/dist/core/item/id.js +1 -112
- package/dist/core/item/index.js +1 -12
- package/dist/core/item/item-format-version.js +1 -78
- package/dist/core/item/item-format.js +5 -1473
- package/dist/core/item/item-record.js +1 -23
- package/dist/core/item/item-type-definition.js +1 -133
- package/dist/core/item/parent-reference-policy.js +1 -57
- package/dist/core/item/parse.js +2 -603
- package/dist/core/item/plan-lifecycle.js +1 -19
- package/dist/core/item/priority.js +1 -61
- package/dist/core/item/sprint-release-format.js +1 -38
- package/dist/core/item/status-filter.js +1 -115
- package/dist/core/item/status.js +1 -43
- package/dist/core/item/toon-decode.js +1 -29
- package/dist/core/item/type-registry.js +1 -715
- package/dist/core/item/type-synonyms.js +1 -38
- package/dist/core/lock/index.js +1 -9
- package/dist/core/lock/lock-gc.js +1 -240
- package/dist/core/lock/lock.js +3 -590
- package/dist/core/output/mutation-projection.js +1 -217
- package/dist/core/output/output-control.js +1 -25
- package/dist/core/output/output.js +11 -494
- package/dist/core/output/query-summary.js +1 -58
- package/dist/core/output/tabular.js +1 -77
- package/dist/core/packages/manifest.js +1 -244
- package/dist/core/packages/root.js +1 -84
- package/dist/core/profile/profile-describe.js +1 -83
- package/dist/core/profile/profile-lint.js +1 -415
- package/dist/core/profile/profile-plan.js +0 -0
- package/dist/core/profile/profile-presets.js +1 -370
- package/dist/core/reproducibility/context.js +1 -82
- package/dist/core/schema/fields-file.js +2 -288
- package/dist/core/schema/item-types-file.js +2 -296
- package/dist/core/schema/runtime-field-filters.js +1 -49
- package/dist/core/schema/runtime-field-values.js +1 -313
- package/dist/core/schema/runtime-schema.js +2 -826
- package/dist/core/schema/status-defs-file.js +2 -227
- package/dist/core/schema/status-token.js +1 -31
- package/dist/core/schema/type-inference.js +1 -95
- package/dist/core/schema/type-presets.js +1 -87
- package/dist/core/schema/type-workflows.js +1 -104
- package/dist/core/search/background-refresh.js +2 -286
- package/dist/core/search/bm25.js +1 -146
- package/dist/core/search/cache.js +2 -534
- package/dist/core/search/corpus.js +1 -311
- package/dist/core/search/embedding-batches.js +1 -163
- package/dist/core/search/eval.js +1 -225
- package/dist/core/search/http-client.js +1 -75
- package/dist/core/search/providers.js +1 -242
- package/dist/core/search/relevance.js +1 -244
- package/dist/core/search/semantic-defaults.js +1 -199
- package/dist/core/search/staleness.js +1 -30
- package/dist/core/search/vector-stores.js +2 -664
- package/dist/core/search/vectorization-metadata.js +1 -81
- package/dist/core/sentry/helpers.js +1 -272
- package/dist/core/sentry/instrument.js +1 -387
- package/dist/core/session/session-state.js +1 -260
- package/dist/core/shared/agent-session-context.js +1 -133
- package/dist/core/shared/author.js +1 -1172
- package/dist/core/shared/command-types.js +1 -4
- package/dist/core/shared/conflict-markers.js +1 -31
- package/dist/core/shared/constants.js +1 -405
- package/dist/core/shared/errors.js +1 -20
- package/dist/core/shared/html-entity-decode.js +1 -131
- package/dist/core/shared/index.js +1 -12
- package/dist/core/shared/item-metadata-contract.js +1 -89
- package/dist/core/shared/lazy-module.js +1 -16
- package/dist/core/shared/levenshtein.js +1 -61
- package/dist/core/shared/memo.js +1 -19
- package/dist/core/shared/numeric-parsers.js +1 -20
- package/dist/core/shared/option-alias-visibility.js +1 -67
- package/dist/core/shared/primitives.js +1 -127
- package/dist/core/shared/serial-queue.js +1 -79
- package/dist/core/shared/serialization.js +1 -210
- package/dist/core/shared/split-comma-list.js +1 -30
- package/dist/core/shared/text-normalization.js +1 -38
- package/dist/core/shared/time.js +1 -306
- package/dist/core/store/index.js +1 -12
- package/dist/core/store/item-format-migration.js +1 -125
- package/dist/core/store/item-metadata-cache.js +1 -1116
- package/dist/core/store/item-metadata-query-index.js +9 -394
- package/dist/core/store/item-metadata-read-work.js +1 -43
- package/dist/core/store/item-store.js +1 -693
- package/dist/core/store/paths.d.ts +1 -1
- package/dist/core/store/paths.js +1 -214
- package/dist/core/store/settings-read-cache.js +1 -85
- package/dist/core/store/settings-validator.js +1 -421
- package/dist/core/store/settings.js +3 -1309
- package/dist/core/store/tracker-preflight.js +1 -141
- package/dist/core/telemetry/consent.js +5 -108
- package/dist/core/telemetry/observability.js +1 -246
- package/dist/core/telemetry/runtime.js +4 -1988
- package/dist/core/test/background-runs.js +4 -945
- package/dist/core/test/item-test-run-tracking.js +1 -63
- package/dist/core/test/run-selectors.js +1 -120
- package/dist/core/validate/estimate-defaults.js +1 -89
- package/dist/core/validate/fix-planning.js +1 -189
- package/dist/core/validate/linked-artifact-reference.js +1 -36
- package/dist/core/validate/missing-by-type.js +1 -34
- package/dist/core/validate/missing-link-owners.js +1 -95
- package/dist/core/validate/stale-file-classification.js +1 -82
- package/dist/mcp/http-server.js +5 -448
- package/dist/mcp/legacy-adapter.js +1 -77
- package/dist/mcp/runtime-capabilities.js +1 -200
- package/dist/mcp/server.js +4 -1233
- package/dist/mcp/tool-definitions.js +1 -804
- package/dist/sdk/actionability.js +1 -13
- package/dist/sdk/agent/closed-domain-contracts.js +1 -161
- package/dist/sdk/agent/command-recovery.js +1 -59
- package/dist/sdk/agent/command-suggestions.js +1 -66
- package/dist/sdk/agent/create-option-policy.js +1 -31
- package/dist/sdk/agent/identity-config.js +1 -106
- package/dist/sdk/agent/item-addressing.js +1 -207
- package/dist/sdk/agent/refusal-closure-census.js +1 -151
- package/dist/sdk/agent/refusal-closure.js +1 -133
- package/dist/sdk/agent/refusal-corpus-contracts.js +1 -193
- package/dist/sdk/agent/refusal-reachability.js +1 -593
- package/dist/sdk/agent/subcommand-recovery.js +1 -83
- package/dist/sdk/agent/task-transcript-contracts.js +1 -197
- package/dist/sdk/agent/tracker-preflight-contracts.js +1 -126
- package/dist/sdk/agent-capability-contracts.js +1 -428
- package/dist/sdk/agent-session-context.js +1 -9
- package/dist/sdk/annotations.js +1 -448
- package/dist/sdk/author-attribution.js +1 -468
- package/dist/sdk/authoring.js +1 -20
- package/dist/sdk/cli-bootstrap.js +1 -838
- package/dist/sdk/cli-contracts/agent-output-contracts.d.ts +1 -1
- package/dist/sdk/cli-contracts/agent-output-contracts.js +4 -476
- package/dist/sdk/cli-contracts/bootstrap-command-scanner.js +1 -79
- package/dist/sdk/cli-contracts/command-aliases.d.ts +4 -0
- package/dist/sdk/cli-contracts/command-aliases.js +1 -107
- package/dist/sdk/cli-contracts/command-exit-contracts.js +1 -151
- package/dist/sdk/cli-contracts/commander-mutation-options.js +1 -1081
- package/dist/sdk/cli-contracts/commander-types.js +1 -159
- package/dist/sdk/cli-contracts/completeness.js +1 -393
- package/dist/sdk/cli-contracts/enum-contracts.js +1 -222
- package/dist/sdk/cli-contracts/flag-contracts.js +1 -1947
- package/dist/sdk/cli-contracts/flag-lexicon-contracts.js +1 -347
- package/dist/sdk/cli-contracts/grammar-contracts.js +1 -986
- package/dist/sdk/cli-contracts/registration-helpers.js +7 -990
- package/dist/sdk/cli-contracts/runtime-contracts.d.ts +5 -0
- package/dist/sdk/cli-contracts/runtime-contracts.js +1 -2090
- package/dist/sdk/cli-contracts/schemas/assurance-definition.js +1 -324
- package/dist/sdk/cli-contracts/string-lists.js +1 -16
- package/dist/sdk/cli-contracts/tool-option-contracts.js +1 -461
- package/dist/sdk/cli-contracts/tool-parameter-tables.js +1 -2167
- package/dist/sdk/cli-contracts/tool-schema.d.ts +3 -1
- package/dist/sdk/cli-contracts/tool-schema.js +1 -1664
- package/dist/sdk/cli-contracts/typed-action-inputs.js +1 -4
- package/dist/sdk/cli-contracts.d.ts +1 -1
- package/dist/sdk/cli-contracts.js +1 -17
- package/dist/sdk/cli-program.js +1 -49
- package/dist/sdk/command-line.d.ts +2 -5
- package/dist/sdk/command-line.js +1 -78
- package/dist/sdk/comments.js +1 -133
- package/dist/sdk/compile-cache.js +1 -73
- package/dist/sdk/completion.js +157 -837
- package/dist/sdk/compose.js +1 -1090
- package/dist/sdk/config.js +1 -1204
- package/dist/sdk/context/recency.js +1 -33
- package/dist/sdk/context/semantic-session-attribution.js +1 -82
- package/dist/sdk/context/usage-egress.js +1 -29
- package/dist/sdk/context/usage-ledger.js +3 -185
- package/dist/sdk/context-intent-contracts.js +1 -709
- package/dist/sdk/context-intent-runtime.js +1 -115
- package/dist/sdk/context-packing.js +1 -218
- package/dist/sdk/context-relevance.js +1 -503
- package/dist/sdk/context-signal-store.js +2 -426
- package/dist/sdk/context-usage.js +1 -367
- package/dist/sdk/contracts.js +1 -23
- package/dist/sdk/core-governance.js +1 -14
- package/dist/sdk/core.js +1 -14
- package/dist/sdk/corpus-shape.js +1 -401
- package/dist/sdk/define.js +1 -220
- package/dist/sdk/dependencies.js +1 -718
- package/dist/sdk/dependency-flag-validation.js +1 -156
- package/dist/sdk/dependency-provenance.js +1 -135
- package/dist/sdk/docs.js +1 -14
- package/dist/sdk/duplicates.js +1 -40
- package/dist/sdk/environment/agent-environment.js +1 -466
- package/dist/sdk/environment/host-environment-errors.js +1 -8
- package/dist/sdk/environment/project-runtime-compatibility.js +1 -481
- package/dist/sdk/environment/source-context.js +1 -28
- package/dist/sdk/environment/tracker-preflight.js +1 -9
- package/dist/sdk/error-code-catalog.js +1 -153
- package/dist/sdk/error-runtime.js +1 -58
- package/dist/sdk/errors.js +1 -58
- package/dist/sdk/eval.js +1 -190
- package/dist/sdk/extension/author-manifest.js +1 -92
- package/dist/sdk/extension/bundled-catalog.js +1 -332
- package/dist/sdk/extension/concurrency.js +1 -25
- package/dist/sdk/extension/copy-scope.d.ts +2 -0
- package/dist/sdk/extension/copy-scope.js +2 -0
- package/dist/sdk/extension/custom-field-collisions.js +1 -30
- package/dist/sdk/extension/describe.js +3 -189
- package/dist/sdk/extension/doctor.js +1 -606
- package/dist/sdk/extension/install-plan.d.ts +69 -0
- package/dist/sdk/extension/install-plan.js +2 -0
- package/dist/sdk/extension/install-receipts.d.ts +7 -0
- package/dist/sdk/extension/install-receipts.js +2 -0
- package/dist/sdk/extension/install-runtime.js +3 -313
- package/dist/sdk/extension/install-snapshot.js +1 -66
- package/dist/sdk/extension/install-sources.js +5 -1057
- package/dist/sdk/extension/managed-state.js +2 -252
- package/dist/sdk/extension/migrations.js +2 -174
- package/dist/sdk/extension/output-ownership.js +1 -25
- package/dist/sdk/extension/runtime-summary.js +1 -18
- package/dist/sdk/extension/scaffold.js +4 -2308
- package/dist/sdk/extension/shared.js +1 -147
- package/dist/sdk/extension/source-resolution.js +1 -65
- package/dist/sdk/extension/update-check.js +1 -67
- package/dist/sdk/extension-command-context.js +1 -44
- package/dist/sdk/extension-contracts.js +1 -73
- package/dist/sdk/extension.d.ts +7 -2
- package/dist/sdk/extension.js +1 -2196
- package/dist/sdk/files.js +1 -535
- package/dist/sdk/flag-invocation-contracts.d.ts +0 -5
- package/dist/sdk/flag-invocation-contracts.js +1 -344
- package/dist/sdk/generated/generated-error-code-catalog-part-1.js +1 -2224
- package/dist/sdk/generated/generated-error-code-catalog-part-2.js +1 -2236
- package/dist/sdk/generated-error-code-catalog.js +1 -16
- package/dist/sdk/governance/assurance-action-contracts.js +1 -4
- package/dist/sdk/governance/assurance-action.js +1 -411
- package/dist/sdk/governance/assurance-limits.js +1 -10
- package/dist/sdk/governance/assurance-mutation-error.js +1 -81
- package/dist/sdk/governance/assurance-presets.js +1 -135
- package/dist/sdk/governance/assurance-runtime.js +1 -238
- package/dist/sdk/governance/assurance.js +4 -1182
- package/dist/sdk/governance/boundary-fixtures.js +1 -200
- package/dist/sdk/governance/coverage-assurance.js +1 -60
- package/dist/sdk/governance/defect-recurrence-coverage.js +1 -188
- package/dist/sdk/governance/defect-recurrence-graph.js +1 -120
- package/dist/sdk/governance/defect-recurrence-signals.js +1 -24
- package/dist/sdk/governance/defect-recurrence.js +1 -623
- package/dist/sdk/governance/extension-host-version.js +1 -115
- package/dist/sdk/governance/gc.js +1 -368
- package/dist/sdk/governance/health.js +1 -2367
- package/dist/sdk/governance/hierarchy-validation.js +1 -108
- package/dist/sdk/governance/linked-file-report.js +1 -71
- package/dist/sdk/governance/merge-receipt-history.js +1 -206
- package/dist/sdk/governance/provenance-health.js +1 -282
- package/dist/sdk/governance/reindex.js +4 -761
- package/dist/sdk/governance/stale-work.js +1 -82
- package/dist/sdk/governance/status-role-diagnostics.js +1 -35
- package/dist/sdk/governance/storage-integrity.js +1 -280
- package/dist/sdk/governance/tracked-runtime-cache.js +1 -106
- package/dist/sdk/governance/upgrade.js +2 -327
- package/dist/sdk/governance/validate-history-drift.js +1 -81
- package/dist/sdk/governance/validate-item-reader.js +1 -17
- package/dist/sdk/governance/validate-normalization.js +1 -36
- package/dist/sdk/governance/validate.js +1 -2261
- package/dist/sdk/governance/workspace-position.js +1 -163
- package/dist/sdk/governance.d.ts +1 -0
- package/dist/sdk/governance.js +1 -31
- package/dist/sdk/graph/adapter.js +1 -181
- package/dist/sdk/graph/analytics.js +1 -474
- package/dist/sdk/graph/assembly.js +1 -377
- package/dist/sdk/graph/cache.js +1 -160
- package/dist/sdk/graph/centrality.js +1 -258
- package/dist/sdk/graph/conformance.js +1 -130
- package/dist/sdk/graph/deadline-scheduling.d.ts +90 -0
- package/dist/sdk/graph/deadline-scheduling.js +2 -0
- package/dist/sdk/graph/durable-cache.d.ts +1 -1
- package/dist/sdk/graph/durable-cache.js +1 -361
- package/dist/sdk/graph/governance-contracts.js +1 -34
- package/dist/sdk/graph/governance.d.ts +13 -1
- package/dist/sdk/graph/governance.js +1 -735
- package/dist/sdk/graph/hierarchy-integrity.js +1 -310
- package/dist/sdk/graph/index.d.ts +3 -2
- package/dist/sdk/graph/index.js +1 -26
- package/dist/sdk/graph/lifecycle-coverage.d.ts +32 -0
- package/dist/sdk/graph/lifecycle-coverage.js +2 -0
- package/dist/sdk/graph/mutation-advisory.js +1 -176
- package/dist/sdk/graph/remediation.js +1 -197
- package/dist/sdk/graph/run.d.ts +15 -1
- package/dist/sdk/graph/run.js +1 -768
- package/dist/sdk/graph/scheduling.js +1 -124
- package/dist/sdk/graph/traversal.js +1 -284
- package/dist/sdk/graph/workspace-relationship-kind-registry.js +1 -27
- package/dist/sdk/graph.js +1 -15
- package/dist/sdk/guide-topics.js +1 -707
- package/dist/sdk/guide.js +1 -279
- package/dist/sdk/history/maintenance.d.ts +71 -0
- package/dist/sdk/history/maintenance.js +2 -0
- package/dist/sdk/history/salvage.js +2 -247
- package/dist/sdk/history/subject.d.ts +19 -0
- package/dist/sdk/history/subject.js +2 -0
- package/dist/sdk/history-analytics.js +1 -282
- package/dist/sdk/history-compact.js +1 -527
- package/dist/sdk/history-mcp.js +1 -68
- package/dist/sdk/history-provenance.js +1 -182
- package/dist/sdk/history-read.js +1 -96
- package/dist/sdk/history-redact.d.ts +1 -14
- package/dist/sdk/history-redact.js +1 -643
- package/dist/sdk/history-repair.d.ts +5 -0
- package/dist/sdk/history-repair.js +1 -657
- package/dist/sdk/improvement-ledger-validation.js +1 -62
- package/dist/sdk/improvement-ledger.js +2 -257
- package/dist/sdk/index.d.ts +4 -0
- package/dist/sdk/index.js +1 -183
- package/dist/sdk/init-agent-guidance.js +2 -496
- package/dist/sdk/init.js +2 -820
- package/dist/sdk/invocation-author.js +1 -39
- package/dist/sdk/item-children.js +1 -90
- package/dist/sdk/item-metadata-index.js +1 -15
- package/dist/sdk/item-schedule.js +1 -27
- package/dist/sdk/item-transaction.js +1 -396
- package/dist/sdk/learnings.js +1 -29
- package/dist/sdk/lifecycle/append.js +2 -53
- package/dist/sdk/lifecycle/claim.d.ts +2 -0
- package/dist/sdk/lifecycle/claim.js +1 -242
- package/dist/sdk/lifecycle/close-many.js +1 -438
- package/dist/sdk/lifecycle/close.js +1 -468
- package/dist/sdk/lifecycle/copy.js +1 -212
- package/dist/sdk/lifecycle/create.js +1 -1949
- package/dist/sdk/lifecycle/delete.js +1 -45
- package/dist/sdk/lifecycle/event-validation-messages.js +1 -91
- package/dist/sdk/lifecycle/focus.js +1 -91
- package/dist/sdk/lifecycle/hierarchy-mutation-lock.js +1 -24
- package/dist/sdk/lifecycle/legacy-none-tokens.js +1 -149
- package/dist/sdk/lifecycle/lifecycle-transitions.js +1 -40
- package/dist/sdk/lifecycle/mcp-actions.d.ts +2 -0
- package/dist/sdk/lifecycle/mcp-actions.js +1 -51
- package/dist/sdk/lifecycle/metadata-normalizers.js +1 -46
- package/dist/sdk/lifecycle/mutation-command-options.js +1 -9
- package/dist/sdk/lifecycle/plan.js +1 -1606
- package/dist/sdk/lifecycle/recurrence-parsers.js +1 -147
- package/dist/sdk/lifecycle/reopen.js +1 -68
- package/dist/sdk/lifecycle/repeatable-metadata-parsers.js +1 -143
- package/dist/sdk/lifecycle/restore.d.ts +1 -0
- package/dist/sdk/lifecycle/restore.js +1 -330
- package/dist/sdk/lifecycle/shared-unset-fields.js +1 -295
- package/dist/sdk/lifecycle/update-many.js +1 -861
- package/dist/sdk/lifecycle/update.js +1 -2136
- package/dist/sdk/lifecycle-completion.js +1 -92
- package/dist/sdk/lifecycle-policy.js +1 -120
- package/dist/sdk/linked-artifacts.js +1 -530
- package/dist/sdk/mcp/apps.js +4 -133
- package/dist/sdk/mcp/authorization.js +1 -404
- package/dist/sdk/mcp/discovery.js +1 -494
- package/dist/sdk/mcp/interactions.js +1 -336
- package/dist/sdk/mcp/protocol.d.ts +7 -0
- package/dist/sdk/mcp/protocol.js +1 -184
- package/dist/sdk/mcp/skills.js +1 -389
- package/dist/sdk/mcp/subscriptions.js +1 -211
- package/dist/sdk/mcp/tasks.js +2 -430
- package/dist/sdk/mcp/transport.js +1 -260
- package/dist/sdk/merge/abandoned-receipts.js +1 -46
- package/dist/sdk/merge/driver.js +1 -212
- package/dist/sdk/merge/index.js +1 -16
- package/dist/sdk/merge/install.js +3 -561
- package/dist/sdk/merge/receipt-file-boundary.js +1 -46
- package/dist/sdk/merge/receipt-operation.js +1 -96
- package/dist/sdk/merge/receipt-schema.js +1 -397
- package/dist/sdk/merge/receipts.js +4 -525
- package/dist/sdk/merge/reconcile.js +1 -352
- package/dist/sdk/merge/three-way.js +3 -775
- package/dist/sdk/merge.js +1 -10
- package/dist/sdk/mutation-events.js +1 -292
- package/dist/sdk/mutation-guard.js +1 -216
- package/dist/sdk/notes.js +1 -139
- package/dist/sdk/output-contracts.js +1 -172
- package/dist/sdk/output-projection.js +1 -430
- package/dist/sdk/output-token-accounting.js +1 -140
- package/dist/sdk/output.js +1 -64
- package/dist/sdk/ownership-source.js +1 -21
- package/dist/sdk/package-import-adapters.js +1 -442
- package/dist/sdk/package-migrations.js +1 -20
- package/dist/sdk/package-runtime-options.js +1 -80
- package/dist/sdk/pagination.js +1 -162
- package/dist/sdk/profile.js +1 -454
- package/dist/sdk/provenance.js +1 -258
- package/dist/sdk/public-surface.json +1 -1
- package/dist/sdk/query/activity.js +1 -401
- package/dist/sdk/query/aggregate.d.ts +16 -0
- package/dist/sdk/query/aggregate.js +1 -390
- package/dist/sdk/query/calendar.js +1 -964
- package/dist/sdk/query/complete-list.js +1 -215
- package/dist/sdk/query/context.js +1 -1702
- package/dist/sdk/query/duplicate-candidates.js +1 -70
- package/dist/sdk/query/get.js +1 -450
- package/dist/sdk/query/history.js +1 -186
- package/dist/sdk/query/item-filter-options.js +1 -9
- package/dist/sdk/query/light-metadata.js +1 -18
- package/dist/sdk/query/list-filter-shared.js +1 -81
- package/dist/sdk/query/list.js +1 -1304
- package/dist/sdk/query/multi-value-filters.js +1 -78
- package/dist/sdk/query/next.js +1 -513
- package/dist/sdk/query/parsers.js +1 -44
- package/dist/sdk/query/projection-contracts.js +1 -184
- package/dist/sdk/query/search-contracts.js +1 -230
- package/dist/sdk/query/search-pagination.js +1 -35
- package/dist/sdk/query/search-rendering.js +1 -105
- package/dist/sdk/query/search.js +2 -1987
- package/dist/sdk/query.js +1 -35
- package/dist/sdk/read-output/continuation.js +1 -194
- package/dist/sdk/read-output-budget.js +1 -135
- package/dist/sdk/read-output-contracts.js +1 -1225
- package/dist/sdk/read-output-rows.js +1 -186
- package/dist/sdk/read-output-session.js +1 -208
- package/dist/sdk/relationship-analytics.js +1 -410
- package/dist/sdk/relationship-context.js +1 -284
- package/dist/sdk/relationship-history.js +4 -519
- package/dist/sdk/relationship-kinds/contract.js +1 -22
- package/dist/sdk/relationship-migration.js +1 -77
- package/dist/sdk/relationships.js +1 -579
- package/dist/sdk/reproducibility/process.js +1 -87
- package/dist/sdk/runtime-action-aliases.js +1 -59
- package/dist/sdk/runtime-extended-actions.js +1 -177
- package/dist/sdk/runtime-input.js +1 -614
- package/dist/sdk/runtime-primitives.js +1 -84
- package/dist/sdk/runtime-public-contracts.js +1 -4
- package/dist/sdk/runtime-stats-options.js +1 -38
- package/dist/sdk/runtime.js +1 -1928
- package/dist/sdk/scheduling-shortcuts.js +1 -63
- package/dist/sdk/schema-migration.js +3 -856
- package/dist/sdk/schema.js +1 -1376
- package/dist/sdk/search-refresh-worker.js +1 -18
- package/dist/sdk/similarity-scoring.js +1 -53
- package/dist/sdk/similarity.js +1 -326
- package/dist/sdk/start-task-status.js +1 -14
- package/dist/sdk/stats.js +1 -270
- package/dist/sdk/structured-mutations.js +1 -580
- package/dist/sdk/telemetry-flush.js +1 -13
- package/dist/sdk/telemetry.js +1 -405
- package/dist/sdk/templates.js +2 -292
- package/dist/sdk/test/batch.js +2 -509
- package/dist/sdk/test/entry.js +1 -70
- package/dist/sdk/test/execution.js +6 -2211
- package/dist/sdk/test/linked-command-detection.js +1 -546
- package/dist/sdk/test/measurements.js +1 -91
- package/dist/sdk/test/parsers.js +1 -545
- package/dist/sdk/test/runs.js +1 -193
- package/dist/sdk/test/trust.js +2 -206
- package/dist/sdk/testing.js +4 -1391
- package/dist/sdk/traceability/runtime-files-lookup.js +1 -32
- package/dist/sdk/traceability/source-traceability.js +1 -292
- package/dist/sdk/tracker-root-discovery.js +1 -9
- package/dist/sdk/workspace-contracts-cache.js +1 -28
- package/dist/sdk/workspace-contracts.js +1 -33
- package/dist/sdk/workspace-memory.js +2 -318
- package/dist/sdk/workspace-recipe.js +1 -71
- package/dist/sdk/workspace-snapshot.js +4 -613
- package/dist/sdk/workspace-transaction-gc.js +1 -149
- package/dist/sdk/workspace-transaction.js +2 -363
- package/dist/sdk/workspace.js +3 -127
- package/dist/types/index.js +1 -9
- package/dist/types.js +1 -245
- package/docs/AGENT_GUIDE.md +1 -1
- package/docs/CONTEXT_ALGORITHM_PORTFOLIO.md +167 -0
- package/docs/DIAGNOSTIC_OUTPUT_CONTRACTS.md +9 -3
- package/docs/EXTENSIONS.md +1 -0
- package/docs/HISTORY_MAINTENANCE.md +125 -0
- package/docs/MCP_2026_07_28_CONFORMANCE.md +20 -10
- package/docs/PACKAGE_EVIDENCE.md +92 -0
- package/docs/PLANNING_MEASUREMENTS.md +183 -0
- package/docs/README.md +3 -0
- package/docs/SCRIPTING.md +21 -0
- package/docs/TESTING.md +23 -0
- package/docs/generated/FLAG_LEXICON_BUDGETS.md +5 -5
- package/docs/generated/REFUSAL_CLOSURE_CENSUS.md +2 -2
- package/marketplace.json +2 -2
- package/package.json +1 -1
- package/packages/pm-beads/package.json +1 -1
- package/packages/pm-calendar/package.json +1 -1
- package/packages/pm-command-kit/package.json +1 -1
- package/packages/pm-digital-twin/package.json +1 -1
- package/packages/pm-governance-audit/package.json +1 -1
- package/packages/pm-guide-shell/package.json +1 -1
- package/packages/pm-kanban/package.json +1 -1
- package/packages/pm-lifecycle-hooks/package.json +1 -1
- package/packages/pm-linked-test-adapters/package.json +1 -1
- package/packages/pm-search-advanced/package.json +1 -1
- package/packages/pm-templates/package.json +1 -1
- package/packages/pm-todos/package.json +1 -1
- package/packages/pm-vcs/package.json +1 -1
- package/plugins/pm-claude/.claude-plugin/plugin.json +1 -1
- package/plugins/pm-codex/.codex-plugin/plugin.json +1 -1
- package/scripts/finalize-build.mjs +45 -3
- package/dist/cli-bundle/chunks/chunk-AZDFJGH6.js +0 -9
- package/dist/cli-bundle/chunks/chunk-BAX2BYUW.js +0 -2111
- package/dist/cli-bundle/chunks/chunk-CKOL5U7J.js +0 -77
- package/dist/cli-bundle/chunks/chunk-OF76PSDQ.js +0 -5
- package/dist/cli-bundle/chunks/chunk-QUWFABDM.js +0 -232
- package/dist/cli-bundle/chunks/chunk-QWRRFYK3.js +0 -2
- package/dist/cli-bundle/chunks/chunk-RWWBOWJ5.js +0 -2
- package/dist/cli-bundle/chunks/chunk-WGAOYSYH.js +0 -40
- package/dist/cli-bundle/chunks/chunk-WI2AYPA7.js +0 -2
- package/dist/cli-bundle/chunks/register-list-query-5JL52D33.js +0 -11
- package/dist/cli-bundle/chunks/register-mutation-ZPG7KMVP.js +0 -20
- package/dist/cli-bundle/chunks/register-setup-H4SVAVX7.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-AL5ON6K6.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-CHC2IDXA.js +0 -6
- package/dist/cli-bundle/focused-chunks/chunk-CK6QFAPZ.js +0 -20
- package/dist/cli-bundle/focused-chunks/chunk-EZR3GHFE.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-H2WJWK7L.js +0 -56
- package/dist/cli-bundle/focused-chunks/chunk-NTPY5GSO.js +0 -3
- package/dist/cli-bundle/focused-chunks/chunk-P5O7MP5Y.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-PDMW2E36.js +0 -177
- package/dist/cli-bundle/focused-chunks/chunk-QTVCLMSZ.js +0 -6
- package/dist/cli-bundle/focused-chunks/chunk-QTZRBUYA.js +0 -8
- package/dist/cli-bundle/focused-chunks/chunk-SGQST3PQ.js +0 -12
- package/dist/cli-bundle/focused-chunks/chunk-UKHASMMP.js +0 -10
- package/dist/cli-bundle/focused-chunks/chunk-ZPEKQHOC.js +0 -2
package/dist/mcp/server.js
CHANGED
|
@@ -1,1235 +1,6 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
/**
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1950da06-8c27-5506-bc64-4bf51c1a3f1c")}catch(e){}}();
|
|
9
|
-
import { realpathSync } from "node:fs";
|
|
10
|
-
import { readFile } from "node:fs/promises";
|
|
11
|
-
import path from "node:path";
|
|
12
|
-
import readline from "node:readline";
|
|
13
|
-
import { fileURLToPath } from "node:url";
|
|
14
|
-
import { resolvePmCliVersion, PmCliError, decodeHtmlEntitiesInOptions, levenshteinDistanceWithinLimit, asRecordClone, createSerialQueue, evaluateMutationGuard, getSettingsPath, isMutationAction, pathExists, readSettings, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, boundAgentEpisodeIdentity, } from "../sdk/runtime-primitives.js";
|
|
15
|
-
import { pmToolActionNestedOptionKeys } from "../sdk/cli-contracts/tool-schema.js";
|
|
16
|
-
import { readRequiredString, runAction, runWithActiveExtensions, } from "../sdk/runtime.js";
|
|
17
|
-
import { NARROW_TOOL_ACTIONS, TOOLS } from "./tool-definitions.js";
|
|
18
|
-
import { normalizeWorkspaceToolArguments, resolveMcpToolAccess, resolveMcpToolSurface, } from "./runtime-capabilities.js";
|
|
19
|
-
import { PM_MCP_PROMPT_CONTRACTS, PM_MCP_RESOURCE_CONTRACTS, } from "../sdk/agent-capability-contracts.js";
|
|
20
|
-
import { PM_MCP_ENTRY_TOOL_NAMES, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION, PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY, discoverPmTools, parsePmToolDiscoveryOptions, } from "../sdk/mcp/discovery.js";
|
|
21
|
-
import { commitItemMutations } from "../sdk/item-transaction.js";
|
|
22
|
-
import { isRuntimeRecord, markMcpMutationTransportInput, } from "../sdk/runtime-input.js";
|
|
23
|
-
import { attachOutputTokenAccounting } from "../sdk/output-token-accounting.js";
|
|
24
|
-
import { createReproducibleProcessRunner, runWithReproducibleProcessEnvironment, } from "../sdk/reproducibility/process.js";
|
|
25
|
-
import { parseAtomicMutationControls, resolveItemMutationDocument, } from "../sdk/structured-mutations.js";
|
|
26
|
-
import { resolveAuthor, resolvePmRoot, resolveWorkspaceRoot, } from "../sdk/runtime-primitives.js";
|
|
27
|
-
import { PM_MCP_ERROR_CODES, PM_MCP_META_KEYS, PM_MCP_PROTOCOL_VERSION, PmMcpProtocolError, attachMcpServerInfo, buildMcpCompleteResult, buildMcpDiscoverResult, hasMcpClientExtension, isMcpRecord, resolveMcpRequestContext, } from "../sdk/mcp/protocol.js";
|
|
28
|
-
import { PmMcpInputRequiredError, buildMcpInputRequiredResult, parseMcpInputResponses, validateMcpJsonSchema, withMcpCachePolicy, } from "../sdk/mcp/interactions.js";
|
|
29
|
-
import { PM_MCP_TASKS_EXTENSION, createMcpTaskStore, } from "../sdk/mcp/tasks.js";
|
|
30
|
-
import { PmMcpSubscriptionRegistry, } from "../sdk/mcp/subscriptions.js";
|
|
31
|
-
import { extractMcpTraceContext, runWithMcpTraceContext, } from "../sdk/mcp/authorization.js";
|
|
32
|
-
import { LegacyMcpAdapter } from "./legacy-adapter.js";
|
|
33
|
-
import { PM_MCP_APP_CONTRACTS, PM_MCP_APP_MIME_TYPE, PM_MCP_APPS_EXTENSION, PM_MCP_APPS_SERVER_CAPABILITY, decoratePmMcpToolsWithApps, findPmMcpAppByUri, hasPmMcpAppsCapability, renderPmMcpAppHtml, } from "../sdk/mcp/apps.js";
|
|
34
|
-
import { PM_MCP_SKILLS_EXTENSION, PM_MCP_SKILLS_SERVER_CAPABILITY, PmMcpSkillRegistry, assertPmMcpSkillsCapability, } from "../sdk/mcp/skills.js";
|
|
35
|
-
function runMcpAction(args) {
|
|
36
|
-
return runAction(markMcpMutationTransportInput(args));
|
|
37
|
-
}
|
|
38
|
-
const PM_PACKAGE_ROOT_ENV = "PM_CLI_PACKAGE_ROOT";
|
|
39
|
-
function resolvePmPackageRoot() {
|
|
40
|
-
return fileURLToPath(new URL("../..", import.meta.url));
|
|
41
|
-
}
|
|
42
|
-
if (typeof process.env[PM_PACKAGE_ROOT_ENV] !== "string" ||
|
|
43
|
-
process.env[PM_PACKAGE_ROOT_ENV]?.trim().length === 0) {
|
|
44
|
-
process.env[PM_PACKAGE_ROOT_ENV] = resolvePmPackageRoot();
|
|
45
|
-
}
|
|
46
|
-
// Reflect the real package.json version so agents/telemetry can identify the
|
|
47
|
-
// build serving requests (was hard-coded "1.0.0"; see pm-2nvw).
|
|
48
|
-
const PM_MCP_SERVER_VERSION = resolvePmCliVersion(import.meta.url, ["../.."]) ?? "0.0.0";
|
|
49
|
-
const PM_MCP_SERVER_INFO = {
|
|
50
|
-
name: "pm-mcp",
|
|
51
|
-
version: PM_MCP_SERVER_VERSION,
|
|
52
|
-
description: "Stateless project-context management through pm SDK contracts.",
|
|
53
|
-
websiteUrl: "https://github.com/unbraind/pm-cli",
|
|
54
|
-
};
|
|
55
|
-
const PM_MCP_SERVER_CAPABILITIES = {
|
|
56
|
-
prompts: { listChanged: true },
|
|
57
|
-
resources: { listChanged: true, subscribe: true },
|
|
58
|
-
tools: { listChanged: true },
|
|
59
|
-
extensions: {
|
|
60
|
-
[PM_MCP_TASKS_EXTENSION]: {},
|
|
61
|
-
[PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY,
|
|
62
|
-
[PM_MCP_SKILLS_EXTENSION]: PM_MCP_SKILLS_SERVER_CAPABILITY,
|
|
63
|
-
[PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]: PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,
|
|
64
|
-
},
|
|
65
|
-
};
|
|
66
|
-
const PM_MCP_SUBSCRIPTIONS = new Map();
|
|
67
|
-
function createMcpSubscriptionRegistry() {
|
|
68
|
-
return new PmMcpSubscriptionRegistry({
|
|
69
|
-
capabilities: PM_MCP_SERVER_CAPABILITIES,
|
|
70
|
-
serverInfo: PM_MCP_SERVER_INFO,
|
|
71
|
-
});
|
|
72
|
-
}
|
|
73
|
-
function pruneClosedMcpSubscriptionRegistries() {
|
|
74
|
-
for (const [key, subscription] of PM_MCP_SUBSCRIPTIONS) {
|
|
75
|
-
if (subscription.registry.size === 0)
|
|
76
|
-
PM_MCP_SUBSCRIPTIONS.delete(key);
|
|
77
|
-
}
|
|
78
|
-
}
|
|
79
|
-
const PM_MCP_CACHE_POLICIES = {
|
|
80
|
-
prompts: { ttlMs: 60_000, cacheScope: "public" },
|
|
81
|
-
resource: { ttlMs: 0, cacheScope: "private" },
|
|
82
|
-
resources: { ttlMs: 60_000, cacheScope: "public" },
|
|
83
|
-
tools: { ttlMs: 30_000, cacheScope: "private" },
|
|
84
|
-
};
|
|
85
|
-
const PM_MCP_DIRECT_TASK_TOOLS = new Set([
|
|
86
|
-
"pm_graph",
|
|
87
|
-
"pm_health",
|
|
88
|
-
"pm_validate",
|
|
89
|
-
]);
|
|
90
|
-
const PM_MCP_RUN_TASK_ACTIONS = new Set([
|
|
91
|
-
"graph",
|
|
92
|
-
"health",
|
|
93
|
-
"import",
|
|
94
|
-
"reindex",
|
|
95
|
-
"test-all",
|
|
96
|
-
"validate",
|
|
97
|
-
]);
|
|
98
|
-
const PM_MCP_SKILL_METHODS = new Set([
|
|
99
|
-
"skills/list",
|
|
100
|
-
"skills/get",
|
|
101
|
-
"resources/directory/read",
|
|
102
|
-
]);
|
|
103
|
-
const PM_MCP_INSTRUCTIONS = "You have access to native pm CLI tools for git-based project management. " +
|
|
104
|
-
"When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. " +
|
|
105
|
-
"Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. " +
|
|
106
|
-
"Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. " +
|
|
107
|
-
"Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. " +
|
|
108
|
-
"Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. " +
|
|
109
|
-
"Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. " +
|
|
110
|
-
"Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. " +
|
|
111
|
-
"Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. " +
|
|
112
|
-
"Do not pass path during real repository tracking — only pass path for sandbox or test runs.";
|
|
113
|
-
// Tool definitions (TOOLS) live in ./tool-definitions.ts so the `pm contracts`
|
|
114
|
-
// golden-file snapshot can import the surface without loading the server
|
|
115
|
-
// runtime (pm-4os2). This file owns dispatch, normalization, and transport.
|
|
116
|
-
// pm-qxwu: TOOL_SCHEMA_BASE keeps additionalProperties:true so legitimate
|
|
117
|
-
// passthrough keeps working, which means a typo'd top-level arg (e.g.
|
|
118
|
-
// "fullChangedField" missing the trailing "s") is silently swallowed and the
|
|
119
|
-
// agent gets default behavior with no signal. We precompute the declared
|
|
120
|
-
// top-level property keys for each tool and, on every tools/call, warn (without
|
|
121
|
-
// rejecting) when an unexpected top-level key appears. The warning is surfaced
|
|
122
|
-
// to stderr and additively in structuredContent.warnings.
|
|
123
|
-
function declaredToolKeys(tools = TOOLS) {
|
|
124
|
-
return new Map(tools.map((tool) => {
|
|
125
|
-
const schema = tool.inputSchema;
|
|
126
|
-
const properties = schema.properties ?? {};
|
|
127
|
-
return [tool.name, Object.keys(properties)];
|
|
128
|
-
}));
|
|
129
|
-
}
|
|
130
|
-
function nearestDeclaredKey(unexpected, declared) {
|
|
131
|
-
// Cheap did-you-mean: budget grows with key length but stays small so we only
|
|
132
|
-
// suggest genuine near-misses (a single typo / transposition for short keys).
|
|
133
|
-
const limit = Math.max(1, Math.min(3, Math.floor(unexpected.length / 4) + 1));
|
|
134
|
-
let best;
|
|
135
|
-
for (const candidate of declared) {
|
|
136
|
-
const distance = levenshteinDistanceWithinLimit(unexpected, candidate, limit);
|
|
137
|
-
if (distance === null) {
|
|
138
|
-
continue;
|
|
139
|
-
}
|
|
140
|
-
if (best === undefined || distance < best.distance) {
|
|
141
|
-
best = { key: candidate, distance };
|
|
142
|
-
}
|
|
143
|
-
}
|
|
144
|
-
return best?.key;
|
|
145
|
-
}
|
|
146
|
-
// pm_run is the explicit catch-all passthrough tool: extension/package actions
|
|
147
|
-
// accept arbitrary top-level keys (see extensionOptionsFromArgs), so unexpected
|
|
148
|
-
// keys there are by-design rather than typos and must not be flagged.
|
|
149
|
-
const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS = new Set(["pm_run"]);
|
|
150
|
-
const MCP_RETRY_ARGUMENT_KEYS = new Set(["inputResponses", "requestState"]);
|
|
151
|
-
/** Resolve the optional shared cursor key without exposing it to tool input. */
|
|
152
|
-
function resolveMcpDiscoveryCursorIntegrityKey() {
|
|
153
|
-
const configuredKey = process.env.PM_MCP_DISCOVERY_CURSOR_KEY;
|
|
154
|
-
if (configuredKey === undefined)
|
|
155
|
-
return undefined;
|
|
156
|
-
const key = Buffer.from(configuredKey, "utf8");
|
|
157
|
-
if (key.byteLength < 32) {
|
|
158
|
-
throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.", 64);
|
|
159
|
-
}
|
|
160
|
-
return key;
|
|
161
|
-
}
|
|
162
|
-
function detectUnexpectedTopLevelKeys(toolName, args, toolDeclaredKeys = declaredToolKeys()) {
|
|
163
|
-
if (typeof args !== "object" || args === null || Array.isArray(args)) {
|
|
164
|
-
return [];
|
|
165
|
-
}
|
|
166
|
-
if (UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName)) {
|
|
167
|
-
return [];
|
|
168
|
-
}
|
|
169
|
-
const declared = toolDeclaredKeys.get(toolName);
|
|
170
|
-
if (declared === undefined) {
|
|
171
|
-
return [];
|
|
172
|
-
}
|
|
173
|
-
const declaredSet = new Set([...declared, ...MCP_RETRY_ARGUMENT_KEYS]);
|
|
174
|
-
const warnings = [];
|
|
175
|
-
for (const key of Object.keys(args)) {
|
|
176
|
-
if (declaredSet.has(key)) {
|
|
177
|
-
continue;
|
|
178
|
-
}
|
|
179
|
-
const suggestion = nearestDeclaredKey(key, declared);
|
|
180
|
-
warnings.push(suggestion !== undefined
|
|
181
|
-
? `Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`
|
|
182
|
-
: `Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`);
|
|
183
|
-
}
|
|
184
|
-
return warnings;
|
|
185
|
-
}
|
|
186
|
-
const HANDLERS = {
|
|
187
|
-
pm_run: (args) => runMcpAction(args),
|
|
188
|
-
pm_discover: async (args) => {
|
|
189
|
-
const surface = await resolveMcpToolSurface(TOOLS, args);
|
|
190
|
-
const cursorIntegrityKey = resolveMcpDiscoveryCursorIntegrityKey();
|
|
191
|
-
const discoveryOptions = parsePmToolDiscoveryOptions(args);
|
|
192
|
-
return discoverPmTools(surface.tools.map((tool) => ({
|
|
193
|
-
name: tool.name,
|
|
194
|
-
description: tool.description,
|
|
195
|
-
inputSchema: tool.inputSchema,
|
|
196
|
-
authorized: true,
|
|
197
|
-
signals: {
|
|
198
|
-
freshness: 1,
|
|
199
|
-
usage: PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name) ? 1 : 0,
|
|
200
|
-
},
|
|
201
|
-
})), {
|
|
202
|
-
...discoveryOptions,
|
|
203
|
-
profile: surface.profile,
|
|
204
|
-
...(cursorIntegrityKey === undefined
|
|
205
|
-
? {}
|
|
206
|
-
: {
|
|
207
|
-
cursorIntegrityKey,
|
|
208
|
-
}),
|
|
209
|
-
});
|
|
210
|
-
},
|
|
211
|
-
pm_mutate: async (args) => {
|
|
212
|
-
const transactionId = readRequiredString(args, "transactionId");
|
|
213
|
-
const controls = parseAtomicMutationControls(args);
|
|
214
|
-
const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
|
|
215
|
-
const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
|
|
216
|
-
const resolved = resolveItemMutationDocument(JSON.stringify({ schema_version: 1, mutations: args.mutations }), {
|
|
217
|
-
transactionId,
|
|
218
|
-
idPrefix: (await readSettings(pmRoot)).id_prefix,
|
|
219
|
-
});
|
|
220
|
-
const { mutations, references } = resolved;
|
|
221
|
-
if (args.dryRun === true) {
|
|
222
|
-
return {
|
|
223
|
-
transaction_id: transactionId,
|
|
224
|
-
dry_run: true,
|
|
225
|
-
mutation_count: mutations.length,
|
|
226
|
-
mutations,
|
|
227
|
-
references,
|
|
228
|
-
};
|
|
229
|
-
}
|
|
230
|
-
const result = await runWithActiveExtensions({
|
|
231
|
-
cwd: typeof args.cwd === "string" ? args.cwd : undefined,
|
|
232
|
-
path: typeof args.path === "string" ? args.path : undefined,
|
|
233
|
-
noExtensions: args.noExtensions === true,
|
|
234
|
-
}, () => commitItemMutations({
|
|
235
|
-
pmRoot,
|
|
236
|
-
transactionId,
|
|
237
|
-
author: resolveAuthor(typeof args.author === "string" ? args.author : undefined, "unknown"),
|
|
238
|
-
mutations,
|
|
239
|
-
...controls,
|
|
240
|
-
}));
|
|
241
|
-
const { transactionId: committedTransactionId, ...commitResult } = result;
|
|
242
|
-
return {
|
|
243
|
-
...commitResult,
|
|
244
|
-
transaction_id: committedTransactionId,
|
|
245
|
-
mutation_count: mutations.length,
|
|
246
|
-
references,
|
|
247
|
-
};
|
|
248
|
-
},
|
|
249
|
-
...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool, action]) => [
|
|
250
|
-
tool,
|
|
251
|
-
(args) => runMcpAction({ ...args, action }),
|
|
252
|
-
])),
|
|
253
|
-
};
|
|
254
|
-
/** Resolve the pm action a tools/call invocation will dispatch, when knowable. */
|
|
255
|
-
function resolveInvokedAction(toolName, args) {
|
|
256
|
-
if (toolName === "pm_run") {
|
|
257
|
-
return typeof args.action === "string" ? args.action : undefined;
|
|
258
|
-
}
|
|
259
|
-
return NARROW_TOOL_ACTIONS[toolName];
|
|
260
|
-
}
|
|
261
|
-
async function collectMutationGuardWarnings(toolName, action, args) {
|
|
262
|
-
if (toolName !== "pm_mutate" && !isMutationAction(action ?? "")) {
|
|
263
|
-
return [];
|
|
264
|
-
}
|
|
265
|
-
const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
|
|
266
|
-
const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
|
|
267
|
-
if (!(await pathExists(getSettingsPath(pmRoot)))) {
|
|
268
|
-
return [];
|
|
269
|
-
}
|
|
270
|
-
const settings = await readSettings(pmRoot);
|
|
271
|
-
const nestedOptions = typeof args.options === "object" &&
|
|
272
|
-
args.options !== null &&
|
|
273
|
-
!Array.isArray(args.options)
|
|
274
|
-
? args.options
|
|
275
|
-
: {};
|
|
276
|
-
const result = evaluateMutationGuard({
|
|
277
|
-
author: resolveAuthor(typeof args.author === "string"
|
|
278
|
-
? args.author
|
|
279
|
-
: typeof nestedOptions.author === "string"
|
|
280
|
-
? nestedOptions.author
|
|
281
|
-
: undefined, settings.author_default),
|
|
282
|
-
payload: args,
|
|
283
|
-
settings: settings.mutation_guard,
|
|
284
|
-
force: args.force === true || nestedOptions.force === true,
|
|
285
|
-
});
|
|
286
|
-
return result.warnings;
|
|
287
|
-
}
|
|
288
|
-
// pm-upi0: the pm-qxwu top-level detection cannot see inside the `options`
|
|
289
|
-
// object, so a mutation-shaped key on a read tool (pm_deps options.dep) is
|
|
290
|
-
// silently dropped before dispatch and the agent builds on state it never
|
|
291
|
-
// created. Warn (without rejecting) on every options key absent from the
|
|
292
|
-
// invoked action's contract; extension- and package-owned actions have no
|
|
293
|
-
// contract table and keep arbitrary passthrough options.
|
|
294
|
-
function detectUnexpectedOptionKeys(toolName, action, args) {
|
|
295
|
-
const options = args.options;
|
|
296
|
-
if (action === undefined ||
|
|
297
|
-
typeof options !== "object" ||
|
|
298
|
-
options === null ||
|
|
299
|
-
Array.isArray(options)) {
|
|
300
|
-
return [];
|
|
301
|
-
}
|
|
302
|
-
const declared = pmToolActionNestedOptionKeys(action);
|
|
303
|
-
if (declared === undefined) {
|
|
304
|
-
return [];
|
|
305
|
-
}
|
|
306
|
-
const declaredSet = new Set(declared);
|
|
307
|
-
const warnings = [];
|
|
308
|
-
for (const key of Object.keys(options)) {
|
|
309
|
-
if (declaredSet.has(key)) {
|
|
310
|
-
continue;
|
|
311
|
-
}
|
|
312
|
-
const suggestion = nearestDeclaredKey(key, declared);
|
|
313
|
-
warnings.push(suggestion !== undefined
|
|
314
|
-
? `Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`
|
|
315
|
-
: `Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`);
|
|
316
|
-
}
|
|
317
|
-
return warnings;
|
|
318
|
-
}
|
|
319
|
-
function resultContent(result, warnings, tokenAccounting = false, canonicalStructuredResult = false) {
|
|
320
|
-
const effectiveResult = tokenAccounting
|
|
321
|
-
? attachOutputTokenAccounting(result, (value) => JSON.stringify(value, null, 2))
|
|
322
|
-
: result;
|
|
323
|
-
// pm-qxwu: warnings is additive — existing fields (content, structuredContent.result)
|
|
324
|
-
// are never removed or renamed. The warnings array only appears when non-empty.
|
|
325
|
-
const structuredContent = warnings !== undefined && warnings.length > 0
|
|
326
|
-
? { result: effectiveResult, warnings }
|
|
327
|
-
: { result: effectiveResult };
|
|
328
|
-
return {
|
|
329
|
-
content: [
|
|
330
|
-
{
|
|
331
|
-
type: "text",
|
|
332
|
-
text: canonicalStructuredResult
|
|
333
|
-
? "Canonical result: structuredContent.result"
|
|
334
|
-
: JSON.stringify(effectiveResult, null, 2),
|
|
335
|
-
},
|
|
336
|
-
],
|
|
337
|
-
structuredContent,
|
|
338
|
-
};
|
|
339
|
-
}
|
|
340
|
-
function errorContent(error, canonicalStructuredResult = false) {
|
|
341
|
-
const code = error instanceof PmCliError ? error.exitCode : 1;
|
|
342
|
-
const message = error instanceof Error ? error.message : String(error);
|
|
343
|
-
const details = error instanceof PmCliError ? error.context : undefined;
|
|
344
|
-
return {
|
|
345
|
-
isError: true,
|
|
346
|
-
content: [
|
|
347
|
-
{
|
|
348
|
-
type: "text",
|
|
349
|
-
text: canonicalStructuredResult
|
|
350
|
-
? "Canonical error: structuredContent"
|
|
351
|
-
: JSON.stringify({ error: message, code, details }, null, 2),
|
|
352
|
-
},
|
|
353
|
-
],
|
|
354
|
-
// Keep `result` present on the error envelope so consumers can read
|
|
355
|
-
// `structuredContent.result` uniformly across success and failure (pm-l40h).
|
|
356
|
-
structuredContent: { result: null, error: message, code, details },
|
|
357
|
-
};
|
|
358
|
-
}
|
|
359
|
-
/** Retain at most 32 own, valid provenance values without cloning unbounded input. */
|
|
360
|
-
function boundMcpClientProvenance(value) {
|
|
361
|
-
const provenance = isRuntimeRecord(value) ? value : {};
|
|
362
|
-
const bounded = {};
|
|
363
|
-
let acceptedCount = 0;
|
|
364
|
-
for (const key in provenance) {
|
|
365
|
-
if (acceptedCount >= 32)
|
|
366
|
-
break;
|
|
367
|
-
if (!Object.prototype.hasOwnProperty.call(provenance, key))
|
|
368
|
-
continue;
|
|
369
|
-
const entry = provenance[key];
|
|
370
|
-
if (/^[a-z][a-z0-9_-]{0,63}$/u.test(key) &&
|
|
371
|
-
typeof entry === "string" &&
|
|
372
|
-
entry.trim().length > 0) {
|
|
373
|
-
bounded[key] = entry.trim().slice(0, 256);
|
|
374
|
-
acceptedCount += 1;
|
|
375
|
-
}
|
|
376
|
-
}
|
|
377
|
-
return bounded;
|
|
378
|
-
}
|
|
379
|
-
function readMcpClientInfo(value) {
|
|
380
|
-
const clientInfo = isRuntimeRecord(value) ? value : {};
|
|
381
|
-
const clientName = typeof clientInfo.name === "string" ? clientInfo.name.trim() : "";
|
|
382
|
-
if (clientName.length === 0)
|
|
383
|
-
return undefined;
|
|
384
|
-
const optionalValues = [
|
|
385
|
-
["version", clientInfo.version, 128],
|
|
386
|
-
["model", clientInfo.model, 256],
|
|
387
|
-
["session", clientInfo.session, 256],
|
|
388
|
-
];
|
|
389
|
-
const result = { name: clientName.slice(0, 128) };
|
|
390
|
-
for (const [key, value, limit] of optionalValues) {
|
|
391
|
-
if (typeof value === "string" && value.trim().length > 0) {
|
|
392
|
-
result[key] = value.trim().slice(0, limit);
|
|
393
|
-
}
|
|
394
|
-
}
|
|
395
|
-
const boundedProvenance = boundMcpClientProvenance(clientInfo.provenance);
|
|
396
|
-
if (Object.keys(boundedProvenance).length > 0) {
|
|
397
|
-
result.provenance = boundedProvenance;
|
|
398
|
-
}
|
|
399
|
-
const episode = boundAgentEpisodeIdentity(clientInfo.episode, false);
|
|
400
|
-
if (episode !== undefined)
|
|
401
|
-
result.episode = episode;
|
|
402
|
-
return result;
|
|
403
|
-
}
|
|
404
|
-
async function emitMcpChangeNotifications(action) {
|
|
405
|
-
if (isMutationAction(action ?? "")) {
|
|
406
|
-
await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({ registry }) => PM_MCP_RESOURCE_CONTRACTS.map((resource) => registry.emitResourceUpdated(resource.uri))));
|
|
407
|
-
}
|
|
408
|
-
if (["extension", "install", "package", "uninstall"].includes(action ?? "")) {
|
|
409
|
-
await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({ registry }) => registry.emitListChanged("tools")));
|
|
410
|
-
}
|
|
411
|
-
pruneClosedMcpSubscriptionRegistries();
|
|
412
|
-
}
|
|
413
|
-
/** Resolve one tool's workspace and scope SDK attribution to that request without changing process environment. */
|
|
414
|
-
async function handleToolCall(paramsInput, clientInfo, progressiveDiscoveryNegotiated = false) {
|
|
415
|
-
const clientSignals = clientInfo ? { client_info: clientInfo } : {};
|
|
416
|
-
return runWithHarnessDetectionSignals({
|
|
417
|
-
env: process.env,
|
|
418
|
-
argv: process.argv,
|
|
419
|
-
...clientSignals,
|
|
420
|
-
}, async () => {
|
|
421
|
-
const params = asRecordClone(paramsInput);
|
|
422
|
-
const name = readRequiredString(params, "name");
|
|
423
|
-
const handler = Object.prototype.hasOwnProperty.call(HANDLERS, name)
|
|
424
|
-
? HANDLERS[name]
|
|
425
|
-
: undefined;
|
|
426
|
-
if (!handler) {
|
|
427
|
-
throw new PmCliError(`Unknown pm MCP tool: ${name}`, 64);
|
|
428
|
-
}
|
|
429
|
-
const inputResponses = params.inputResponses === undefined
|
|
430
|
-
? undefined
|
|
431
|
-
: parseMcpInputResponses(params.inputResponses);
|
|
432
|
-
validateMcpToolArguments(params.arguments);
|
|
433
|
-
const requestedArgs = {
|
|
434
|
-
...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),
|
|
435
|
-
...(inputResponses ? { inputResponses } : {}),
|
|
436
|
-
...(typeof params.requestState === "string"
|
|
437
|
-
? { requestState: params.requestState }
|
|
438
|
-
: {}),
|
|
439
|
-
};
|
|
440
|
-
const access = await resolveMcpToolAccess(TOOLS, name, requestedArgs);
|
|
441
|
-
const requiredCustomDiscoveryEntry = progressiveDiscoveryNegotiated &&
|
|
442
|
-
access.profile === "custom" &&
|
|
443
|
-
name === "pm_discover";
|
|
444
|
-
if (!access.available && !requiredCustomDiscoveryEntry) {
|
|
445
|
-
throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`, 64);
|
|
446
|
-
}
|
|
447
|
-
// pm-ydkl: defensive HTML-entity decode for free-text fields. Claude / the
|
|
448
|
-
// Anthropic MCP SDK HTML-encodes `<` / `>` (and friends) in tool arguments
|
|
449
|
-
// before they reach pm-cli, which would otherwise leak `<type>` into
|
|
450
|
-
// stored pm comments / notes / item bodies. Direct CLI calls are not
|
|
451
|
-
// affected; decoding at the MCP boundary normalizes the agent path while
|
|
452
|
-
// leaving normal text untouched.
|
|
453
|
-
const args = await normalizeWorkspaceToolArguments(name, requestedArgs);
|
|
454
|
-
const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
|
|
455
|
-
const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
|
|
456
|
-
const workspaceIdentity = (await pathExists(getSettingsPath(pmRoot)))
|
|
457
|
-
? (await readSettings(pmRoot)).agent_identity
|
|
458
|
-
: undefined;
|
|
459
|
-
return runWithHarnessDetectionSignals({
|
|
460
|
-
env: { ...process.env, PM_PATH: pmRoot },
|
|
461
|
-
argv: process.argv,
|
|
462
|
-
cwd,
|
|
463
|
-
...clientSignals,
|
|
464
|
-
}, () => runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals ?? [], async () => {
|
|
465
|
-
// pm-qxwu: non-breaking detection of typo'd / unexpected top-level keys.
|
|
466
|
-
// additionalProperties stays true so passthrough still works; we only warn.
|
|
467
|
-
// pm-upi0 extends the same mechanism into the nested options object.
|
|
468
|
-
const action = resolveInvokedAction(name, args);
|
|
469
|
-
const warnings = [
|
|
470
|
-
...detectUnexpectedTopLevelKeys(name, args, declaredToolKeys()),
|
|
471
|
-
...detectUnexpectedOptionKeys(name, action, args),
|
|
472
|
-
...(await collectMutationGuardWarnings(name, action, args)),
|
|
473
|
-
];
|
|
474
|
-
for (const warning of warnings) {
|
|
475
|
-
console.error(`[pm-mcp] ${warning}`);
|
|
476
|
-
}
|
|
477
|
-
// cwd is applied inside the serialized activation cycle (see withActiveExtensions),
|
|
478
|
-
// so the chdir/restore is exclusive per request and cannot race a concurrent caller.
|
|
479
|
-
const result = await handler(args);
|
|
480
|
-
void emitMcpChangeNotifications(action);
|
|
481
|
-
return resultContent(result, warnings, args.tokenAccounting === true, progressiveDiscoveryNegotiated);
|
|
482
|
-
}, { probesEnabled: workspaceIdentity?.probes_enabled }));
|
|
483
|
-
});
|
|
484
|
-
}
|
|
485
|
-
/** Open one modern subscription through a concrete transport-owned sink. */
|
|
486
|
-
export async function openMcpSubscription(input) {
|
|
487
|
-
if ((typeof input.request.id !== "string" &&
|
|
488
|
-
typeof input.request.id !== "number") ||
|
|
489
|
-
input.request.method !== "subscriptions/listen") {
|
|
490
|
-
throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request", PM_MCP_ERROR_CODES.invalidParams, { required: ["id", "method", "params.notifications"] });
|
|
491
|
-
}
|
|
492
|
-
resolveMcpRequestContext(input.request.params);
|
|
493
|
-
const key = input.key ?? input.request.id;
|
|
494
|
-
if (PM_MCP_SUBSCRIPTIONS.has(key)) {
|
|
495
|
-
throw new PmMcpProtocolError("MCP subscription id is already active", PM_MCP_ERROR_CODES.invalidParams, { subscriptionId: input.request.id });
|
|
496
|
-
}
|
|
497
|
-
const registry = createMcpSubscriptionRegistry();
|
|
498
|
-
await registry.open({
|
|
499
|
-
id: input.request.id,
|
|
500
|
-
notifications: input.request.params?.notifications,
|
|
501
|
-
sink: input.sink,
|
|
502
|
-
});
|
|
503
|
-
PM_MCP_SUBSCRIPTIONS.set(key, { id: input.request.id, registry });
|
|
504
|
-
}
|
|
505
|
-
/** Gracefully close one active subscription by its request identifier. */
|
|
506
|
-
export function closeMcpSubscription(id, key = id) {
|
|
507
|
-
const subscription = PM_MCP_SUBSCRIPTIONS.get(key);
|
|
508
|
-
if (!subscription || subscription.id !== id)
|
|
509
|
-
return undefined;
|
|
510
|
-
PM_MCP_SUBSCRIPTIONS.delete(key);
|
|
511
|
-
return subscription.registry.close(id);
|
|
512
|
-
}
|
|
513
|
-
function closeStdioMcpSubscriptions() {
|
|
514
|
-
const closed = [];
|
|
515
|
-
for (const [key, subscription] of PM_MCP_SUBSCRIPTIONS) {
|
|
516
|
-
if (key !== subscription.id)
|
|
517
|
-
continue;
|
|
518
|
-
const result = closeMcpSubscription(subscription.id, key);
|
|
519
|
-
if (result)
|
|
520
|
-
closed.push({ id: subscription.id, result });
|
|
521
|
-
}
|
|
522
|
-
return closed;
|
|
523
|
-
}
|
|
524
|
-
/** Resolve the current workspace-enriched tool schema for HTTP header checks. */
|
|
525
|
-
export async function resolveMcpToolSchemaForRequest(request) {
|
|
526
|
-
if (request.method !== "tools/call")
|
|
527
|
-
return undefined;
|
|
528
|
-
const name = request.params?.name;
|
|
529
|
-
if (typeof name !== "string")
|
|
530
|
-
return undefined;
|
|
531
|
-
const surface = await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(request.params));
|
|
532
|
-
return surface.tools.find((tool) => tool.name === name)?.inputSchema;
|
|
533
|
-
}
|
|
534
|
-
/** Preserve MCP tool-result error semantics for non-protocol adapter failures. */
|
|
535
|
-
export function buildMcpToolCallErrorResult(request, error) {
|
|
536
|
-
if (request.method !== "tools/call" || error instanceof PmMcpProtocolError) {
|
|
537
|
-
return undefined;
|
|
538
|
-
}
|
|
539
|
-
const content = errorContent(error, hasMcpProtocolVersionMetadata(request) &&
|
|
540
|
-
hasMcpClientExtension(resolveMcpRequestContext(request.params), PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));
|
|
541
|
-
return hasMcpProtocolVersionMetadata(request)
|
|
542
|
-
? buildMcpCompleteResult(content, PM_MCP_SERVER_INFO)
|
|
543
|
-
: content;
|
|
544
|
-
}
|
|
545
|
-
function requestWorkspaceArgs(params) {
|
|
546
|
-
const paramsRecord = asRecordClone(params);
|
|
547
|
-
return asRecordClone(paramsRecord.arguments ?? paramsRecord);
|
|
548
|
-
}
|
|
549
|
-
async function readWorkspaceResource(uri, params) {
|
|
550
|
-
const args = requestWorkspaceArgs(params);
|
|
551
|
-
const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
|
|
552
|
-
const contract = PM_MCP_RESOURCE_CONTRACTS.find((resource) => resource.uri === uri);
|
|
553
|
-
if (!contract) {
|
|
554
|
-
throw new PmCliError(`Unknown pm MCP resource: ${uri}`, 64);
|
|
555
|
-
}
|
|
556
|
-
let value;
|
|
557
|
-
if (uri === "pm://workspace/context") {
|
|
558
|
-
value = await runMcpAction({ ...args, action: "context", limit: 10 });
|
|
559
|
-
}
|
|
560
|
-
else if (uri === "pm://workspace/claims") {
|
|
561
|
-
value = await runMcpAction({
|
|
562
|
-
...args,
|
|
563
|
-
action: "list",
|
|
564
|
-
status: "in_progress",
|
|
565
|
-
limit: 20,
|
|
566
|
-
});
|
|
567
|
-
}
|
|
568
|
-
else if (uri === "pm://workspace/focus") {
|
|
569
|
-
value = await runMcpAction({
|
|
570
|
-
...args,
|
|
571
|
-
action: "focus",
|
|
572
|
-
subcommand: "show",
|
|
573
|
-
});
|
|
574
|
-
}
|
|
575
|
-
else {
|
|
576
|
-
const guidePath = path.join(cwd, "AGENTS.md");
|
|
577
|
-
value = (await pathExists(guidePath))
|
|
578
|
-
? (await readFile(guidePath, "utf8")).slice(0, 32_000)
|
|
579
|
-
: "No repository-local AGENTS.md was found.";
|
|
580
|
-
}
|
|
581
|
-
return {
|
|
582
|
-
contents: [
|
|
583
|
-
{
|
|
584
|
-
uri,
|
|
585
|
-
mimeType: contract.mimeType,
|
|
586
|
-
text: typeof value === "string" ? value : JSON.stringify(value, null, 2),
|
|
587
|
-
},
|
|
588
|
-
],
|
|
589
|
-
};
|
|
590
|
-
}
|
|
591
|
-
async function loadRequestSkillRegistry(params) {
|
|
592
|
-
const args = requestWorkspaceArgs(params);
|
|
593
|
-
const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
|
|
594
|
-
const workspaceRoot = resolveWorkspaceRoot(resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined));
|
|
595
|
-
return PmMcpSkillRegistry.load({
|
|
596
|
-
packageRoot: resolvePmPackageRoot(),
|
|
597
|
-
workspaceRoot,
|
|
598
|
-
packageVersion: PM_MCP_SERVER_VERSION,
|
|
599
|
-
});
|
|
600
|
-
}
|
|
601
|
-
function renderWorkflowPrompt(params) {
|
|
602
|
-
const paramsRecord = asRecordClone(params);
|
|
603
|
-
const name = readRequiredString(paramsRecord, "name");
|
|
604
|
-
const prompt = PM_MCP_PROMPT_CONTRACTS.find((candidate) => candidate.name === name);
|
|
605
|
-
if (!prompt) {
|
|
606
|
-
throw new PmCliError(`Unknown pm MCP prompt: ${name}`, 64);
|
|
607
|
-
}
|
|
608
|
-
const argumentsRecord = asRecordClone(paramsRecord.arguments);
|
|
609
|
-
let text = prompt.template;
|
|
610
|
-
for (const argument of prompt.arguments) {
|
|
611
|
-
const value = argumentsRecord[argument.name];
|
|
612
|
-
if (argument.required &&
|
|
613
|
-
(typeof value !== "string" || value.trim().length === 0)) {
|
|
614
|
-
throw new PmCliError(`Missing required prompt argument: ${argument.name}`, 64);
|
|
615
|
-
}
|
|
616
|
-
text = text.replaceAll(`{{${argument.name}}}`, typeof value === "string" ? value : "");
|
|
617
|
-
}
|
|
618
|
-
return {
|
|
619
|
-
description: prompt.description,
|
|
620
|
-
messages: [{ role: "user", content: { type: "text", text } }],
|
|
621
|
-
};
|
|
622
|
-
}
|
|
623
|
-
const LEGACY_MCP_ADAPTER = new LegacyMcpAdapter({
|
|
624
|
-
serverInfo: PM_MCP_SERVER_INFO,
|
|
625
|
-
capabilities: PM_MCP_SERVER_CAPABILITIES,
|
|
626
|
-
instructions: PM_MCP_INSTRUCTIONS,
|
|
627
|
-
parseClientInfo: readMcpClientInfo,
|
|
628
|
-
listTools: async (params) => ({
|
|
629
|
-
tools: (await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(params)))
|
|
630
|
-
.tools,
|
|
631
|
-
}),
|
|
632
|
-
callTool: handleToolCall,
|
|
633
|
-
listResources: () => ({ resources: PM_MCP_RESOURCE_CONTRACTS }),
|
|
634
|
-
readResource: (params) => readWorkspaceResource(readRequiredString(asRecordClone(params), "uri"), params),
|
|
635
|
-
listPrompts: () => ({
|
|
636
|
-
prompts: PM_MCP_PROMPT_CONTRACTS.map((prompt) => ({
|
|
637
|
-
name: prompt.name,
|
|
638
|
-
description: prompt.description,
|
|
639
|
-
arguments: prompt.arguments,
|
|
640
|
-
})),
|
|
641
|
-
}),
|
|
642
|
-
getPrompt: renderWorkflowPrompt,
|
|
643
|
-
});
|
|
644
|
-
function deterministicMcpTools(tools) {
|
|
645
|
-
return tools
|
|
646
|
-
.map((tool) => ({
|
|
647
|
-
...tool,
|
|
648
|
-
inputSchema: validateMcpJsonSchema(tool.inputSchema),
|
|
649
|
-
}))
|
|
650
|
-
.sort((left, right) => left.name.localeCompare(right.name));
|
|
651
|
-
}
|
|
652
|
-
function mcpTaskPrincipal(requestContext) {
|
|
653
|
-
return requestContext.clientInfo
|
|
654
|
-
? `${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`
|
|
655
|
-
: "anonymous-stdio";
|
|
656
|
-
}
|
|
657
|
-
function mcpTaskStore() {
|
|
658
|
-
return createMcpTaskStore({
|
|
659
|
-
pmRoot: resolvePmRoot(process.cwd()),
|
|
660
|
-
owner: "pm-mcp-task-provider",
|
|
661
|
-
});
|
|
662
|
-
}
|
|
663
|
-
/** Rejects malformed MCP tool argument containers before dispatch. */
|
|
664
|
-
function validateMcpToolArguments(value) {
|
|
665
|
-
if (value !== undefined && !isMcpRecord(value)) {
|
|
666
|
-
throw new PmCliError("pm MCP tool arguments must be an object.", 64);
|
|
667
|
-
}
|
|
668
|
-
}
|
|
669
|
-
function shouldCreateMcpTask(params, requestContext) {
|
|
670
|
-
if (!hasMcpClientExtension(requestContext, PM_MCP_TASKS_EXTENSION)) {
|
|
671
|
-
return false;
|
|
672
|
-
}
|
|
673
|
-
const requestParams = asRecordClone(params);
|
|
674
|
-
const name = requestParams.name;
|
|
675
|
-
const args = asRecordClone(requestParams.arguments);
|
|
676
|
-
if (PM_MCP_DIRECT_TASK_TOOLS.has(name))
|
|
677
|
-
return true;
|
|
678
|
-
if (name === "pm_test" &&
|
|
679
|
-
(args.subcommand === "run" ||
|
|
680
|
-
(isMcpRecord(args.options) && args.options.subcommand === "run"))) {
|
|
681
|
-
return true;
|
|
682
|
-
}
|
|
683
|
-
if (name !== "pm_run")
|
|
684
|
-
return false;
|
|
685
|
-
return (typeof args.action === "string" && PM_MCP_RUN_TASK_ACTIONS.has(args.action));
|
|
686
|
-
}
|
|
687
|
-
const PENDING_MCP_TASKS = new Map();
|
|
688
|
-
async function executeMcpTask(execution, inputResponses) {
|
|
689
|
-
const params = {
|
|
690
|
-
...execution.params,
|
|
691
|
-
...(inputResponses ? { inputResponses } : {}),
|
|
692
|
-
...(execution.requestState ? { requestState: execution.requestState } : {}),
|
|
693
|
-
};
|
|
694
|
-
try {
|
|
695
|
-
const result = await handleToolCall(params, execution.context.clientInfo, hasMcpClientExtension(execution.context, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));
|
|
696
|
-
await execution.store.complete(execution.taskId, execution.principal, buildMcpCompleteResult(result, PM_MCP_SERVER_INFO));
|
|
697
|
-
PENDING_MCP_TASKS.delete(execution.taskId);
|
|
698
|
-
}
|
|
699
|
-
catch (error) {
|
|
700
|
-
if (error instanceof PmMcpInputRequiredError) {
|
|
701
|
-
execution.requestState = error.requestState;
|
|
702
|
-
await execution.store.requireInput({
|
|
703
|
-
taskId: execution.taskId,
|
|
704
|
-
principal: execution.principal,
|
|
705
|
-
requestContext: execution.context,
|
|
706
|
-
inputRequests: error.inputRequests,
|
|
707
|
-
statusMessage: "Task requires additional client input.",
|
|
708
|
-
});
|
|
709
|
-
return;
|
|
710
|
-
}
|
|
711
|
-
if (error instanceof PmMcpProtocolError) {
|
|
712
|
-
await execution.store.fail(execution.taskId, execution.principal, {
|
|
713
|
-
code: error.code,
|
|
714
|
-
message: error.message,
|
|
715
|
-
data: error.data,
|
|
716
|
-
});
|
|
717
|
-
}
|
|
718
|
-
else {
|
|
719
|
-
await execution.store.complete(execution.taskId, execution.principal, buildMcpCompleteResult(errorContent(error, hasMcpClientExtension(execution.context, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)), PM_MCP_SERVER_INFO));
|
|
720
|
-
}
|
|
721
|
-
PENDING_MCP_TASKS.delete(execution.taskId);
|
|
722
|
-
}
|
|
723
|
-
}
|
|
724
|
-
async function settleMcpTaskExecution(taskId, execution) {
|
|
725
|
-
try {
|
|
726
|
-
await execution;
|
|
727
|
-
}
|
|
728
|
-
catch {
|
|
729
|
-
// Persistence failures can outlive the request that created the detached
|
|
730
|
-
// execution. Keep them from becoming process-level unhandled rejections;
|
|
731
|
-
// the durable task record remains available for TTL-based recovery.
|
|
732
|
-
PENDING_MCP_TASKS.delete(taskId);
|
|
733
|
-
}
|
|
734
|
-
}
|
|
735
|
-
function scheduleMcpTaskExecution(execution, inputResponses) {
|
|
736
|
-
void settleMcpTaskExecution(execution.taskId, executeMcpTask(execution, inputResponses));
|
|
737
|
-
}
|
|
738
|
-
async function createMcpTaskForToolCall(params, requestContext) {
|
|
739
|
-
const store = mcpTaskStore();
|
|
740
|
-
const principal = mcpTaskPrincipal(requestContext);
|
|
741
|
-
const task = await store.create({
|
|
742
|
-
principal,
|
|
743
|
-
statusMessage: "pm operation accepted for asynchronous execution.",
|
|
744
|
-
});
|
|
745
|
-
const execution = {
|
|
746
|
-
context: requestContext,
|
|
747
|
-
params: asRecordClone(params),
|
|
748
|
-
principal,
|
|
749
|
-
store,
|
|
750
|
-
taskId: task.taskId,
|
|
751
|
-
};
|
|
752
|
-
PENDING_MCP_TASKS.set(task.taskId, execution);
|
|
753
|
-
scheduleMcpTaskExecution(execution);
|
|
754
|
-
return attachMcpServerInfo(task, PM_MCP_SERVER_INFO);
|
|
755
|
-
}
|
|
756
|
-
async function dispatchMcpTaskMethod(request, requestContext) {
|
|
757
|
-
if (!hasMcpClientExtension(requestContext, PM_MCP_TASKS_EXTENSION)) {
|
|
758
|
-
throw new PmMcpProtocolError("Missing required client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
|
|
759
|
-
requiredCapabilities: {
|
|
760
|
-
extensions: { [PM_MCP_TASKS_EXTENSION]: {} },
|
|
761
|
-
},
|
|
762
|
-
});
|
|
763
|
-
}
|
|
764
|
-
const params = asRecordClone(request.params);
|
|
765
|
-
const taskId = readRequiredString(params, "taskId");
|
|
766
|
-
const principal = mcpTaskPrincipal(requestContext);
|
|
767
|
-
const store = mcpTaskStore();
|
|
768
|
-
if (request.method === "tasks/get") {
|
|
769
|
-
return buildMcpCompleteResult(await store.get(taskId, principal), PM_MCP_SERVER_INFO);
|
|
770
|
-
}
|
|
771
|
-
if (request.method === "tasks/update") {
|
|
772
|
-
const update = await store.update(taskId, principal, params.inputResponses);
|
|
773
|
-
const execution = PENDING_MCP_TASKS.get(taskId);
|
|
774
|
-
if (execution &&
|
|
775
|
-
update.acceptedKeys.length > 0 &&
|
|
776
|
-
update.remainingKeys.length === 0) {
|
|
777
|
-
scheduleMcpTaskExecution(execution, await store.takeInputResponses(taskId, principal));
|
|
778
|
-
}
|
|
779
|
-
return buildMcpCompleteResult({}, PM_MCP_SERVER_INFO);
|
|
780
|
-
}
|
|
781
|
-
await store.cancel(taskId, principal);
|
|
782
|
-
PENDING_MCP_TASKS.delete(taskId);
|
|
783
|
-
return buildMcpCompleteResult({}, PM_MCP_SERVER_INFO);
|
|
784
|
-
}
|
|
785
|
-
async function dispatchModernToolMethod(request, requestContext, clientInfo) {
|
|
786
|
-
if (request.method === "tools/list") {
|
|
787
|
-
const surface = await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(request.params));
|
|
788
|
-
const progressiveDiscovery = hasMcpClientExtension(requestContext, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION);
|
|
789
|
-
const listedTools = progressiveDiscovery
|
|
790
|
-
? [
|
|
791
|
-
...surface.tools.filter((tool) => PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),
|
|
792
|
-
...(surface.profile === "custom" &&
|
|
793
|
-
!surface.tools.some((tool) => tool.name === "pm_discover")
|
|
794
|
-
? TOOLS.filter((tool) => tool.name === "pm_discover")
|
|
795
|
-
: []),
|
|
796
|
-
]
|
|
797
|
-
: surface.tools;
|
|
798
|
-
return buildMcpCompleteResult(withMcpCachePolicy({
|
|
799
|
-
tools: hasCompatiblePmMcpAppsCapability(requestContext)
|
|
800
|
-
? decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools))
|
|
801
|
-
: deterministicMcpTools(listedTools),
|
|
802
|
-
}, PM_MCP_CACHE_POLICIES.tools), PM_MCP_SERVER_INFO);
|
|
803
|
-
}
|
|
804
|
-
validateMcpToolArguments(request.params?.arguments);
|
|
805
|
-
if (shouldCreateMcpTask(request.params, requestContext)) {
|
|
806
|
-
return createMcpTaskForToolCall(request.params, requestContext);
|
|
807
|
-
}
|
|
808
|
-
try {
|
|
809
|
-
return buildMcpCompleteResult(await handleToolCall(request.params, clientInfo, hasMcpClientExtension(requestContext, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)), PM_MCP_SERVER_INFO);
|
|
810
|
-
}
|
|
811
|
-
catch (error) {
|
|
812
|
-
if (!(error instanceof PmMcpInputRequiredError))
|
|
813
|
-
throw error;
|
|
814
|
-
return buildMcpInputRequiredResult({
|
|
815
|
-
requestContext,
|
|
816
|
-
serverInfo: PM_MCP_SERVER_INFO,
|
|
817
|
-
inputRequests: error.inputRequests,
|
|
818
|
-
requestState: error.requestState,
|
|
819
|
-
});
|
|
820
|
-
}
|
|
821
|
-
}
|
|
822
|
-
async function dispatchModernResourceMethod(request, requestContext) {
|
|
823
|
-
if (request.method === "resources/list") {
|
|
824
|
-
const resources = [
|
|
825
|
-
...PM_MCP_RESOURCE_CONTRACTS,
|
|
826
|
-
...(hasCompatiblePmMcpAppsCapability(requestContext)
|
|
827
|
-
? PM_MCP_APP_CONTRACTS.map((contract) => ({
|
|
828
|
-
uri: contract.uri,
|
|
829
|
-
name: contract.name,
|
|
830
|
-
description: contract.description,
|
|
831
|
-
mimeType: PM_MCP_APP_MIME_TYPE,
|
|
832
|
-
_meta: { ui: contract.resourceMeta },
|
|
833
|
-
}))
|
|
834
|
-
: []),
|
|
835
|
-
].sort((left, right) => left.uri.localeCompare(right.uri));
|
|
836
|
-
return buildMcpCompleteResult(withMcpCachePolicy({ resources }, PM_MCP_CACHE_POLICIES.resources), PM_MCP_SERVER_INFO);
|
|
837
|
-
}
|
|
838
|
-
if (request.method === "resources/templates/list") {
|
|
839
|
-
return buildMcpCompleteResult(withMcpCachePolicy({ resourceTemplates: [] }, PM_MCP_CACHE_POLICIES.resources), PM_MCP_SERVER_INFO);
|
|
840
|
-
}
|
|
841
|
-
try {
|
|
842
|
-
const uri = readRequiredString(asRecordClone(request.params), "uri");
|
|
843
|
-
const app = findPmMcpAppByUri(uri);
|
|
844
|
-
let resource;
|
|
845
|
-
if (app) {
|
|
846
|
-
if (!hasPmMcpAppsCapability(requestContext)) {
|
|
847
|
-
throw new PmMcpProtocolError("MCP App resource requires negotiated client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
|
|
848
|
-
requiredCapabilities: {
|
|
849
|
-
extensions: {
|
|
850
|
-
[PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY,
|
|
851
|
-
},
|
|
852
|
-
},
|
|
853
|
-
});
|
|
854
|
-
}
|
|
855
|
-
resource = {
|
|
856
|
-
contents: [
|
|
857
|
-
{
|
|
858
|
-
uri,
|
|
859
|
-
mimeType: PM_MCP_APP_MIME_TYPE,
|
|
860
|
-
text: renderPmMcpAppHtml(app),
|
|
861
|
-
_meta: { ui: app.resourceMeta },
|
|
862
|
-
},
|
|
863
|
-
],
|
|
864
|
-
};
|
|
865
|
-
}
|
|
866
|
-
else if (uri.startsWith("skill://")) {
|
|
867
|
-
assertPmMcpSkillsCapability(requestContext);
|
|
868
|
-
resource = {
|
|
869
|
-
...(await loadRequestSkillRegistry(request.params)).read(uri),
|
|
870
|
-
};
|
|
871
|
-
}
|
|
872
|
-
else {
|
|
873
|
-
resource = await readWorkspaceResource(uri, request.params);
|
|
874
|
-
}
|
|
875
|
-
return buildMcpCompleteResult(withMcpCachePolicy(resource, PM_MCP_CACHE_POLICIES.resource), PM_MCP_SERVER_INFO);
|
|
876
|
-
}
|
|
877
|
-
catch (error) {
|
|
878
|
-
if (!(error instanceof PmCliError) ||
|
|
879
|
-
!error.message.startsWith("Unknown pm MCP resource:")) {
|
|
880
|
-
throw error;
|
|
881
|
-
}
|
|
882
|
-
throw new PmMcpProtocolError(error.message, PM_MCP_ERROR_CODES.invalidParams, { field: "uri" });
|
|
883
|
-
}
|
|
884
|
-
}
|
|
885
|
-
/** Treat an incompatible optional Apps declaration as absent during discovery. */
|
|
886
|
-
function hasCompatiblePmMcpAppsCapability(requestContext) {
|
|
887
|
-
try {
|
|
888
|
-
return hasPmMcpAppsCapability(requestContext);
|
|
889
|
-
}
|
|
890
|
-
catch (error) {
|
|
891
|
-
if (error instanceof PmMcpProtocolError)
|
|
892
|
-
return false;
|
|
893
|
-
throw error;
|
|
894
|
-
}
|
|
895
|
-
}
|
|
896
|
-
/** Validate Skills pagination inputs before handing them to the SDK registry. */
|
|
897
|
-
function readSkillPageOptions(params) {
|
|
898
|
-
if (params.cursor !== undefined && typeof params.cursor !== "string") {
|
|
899
|
-
throw new PmMcpProtocolError("Skills cursor must be a string", PM_MCP_ERROR_CODES.invalidParams, { field: "cursor" });
|
|
900
|
-
}
|
|
901
|
-
if (params.limit !== undefined && typeof params.limit !== "number") {
|
|
902
|
-
throw new PmMcpProtocolError("Skills limit must be a number", PM_MCP_ERROR_CODES.invalidParams, { field: "limit" });
|
|
903
|
-
}
|
|
904
|
-
return {
|
|
905
|
-
...(typeof params.cursor === "string" ? { cursor: params.cursor } : {}),
|
|
906
|
-
...(typeof params.limit === "number" ? { limit: params.limit } : {}),
|
|
907
|
-
};
|
|
908
|
-
}
|
|
909
|
-
async function dispatchModernSkillMethod(request, requestContext) {
|
|
910
|
-
const directoryRead = request.method === "resources/directory/read";
|
|
911
|
-
assertPmMcpSkillsCapability(requestContext, directoryRead);
|
|
912
|
-
const params = asRecordClone(request.params);
|
|
913
|
-
const registry = await loadRequestSkillRegistry(request.params);
|
|
914
|
-
let result;
|
|
915
|
-
if (request.method === "skills/list") {
|
|
916
|
-
result = { ...registry.list(readSkillPageOptions(params)) };
|
|
917
|
-
}
|
|
918
|
-
else if (request.method === "skills/get") {
|
|
919
|
-
result = { skill: registry.get(readRequiredString(params, "uri")) };
|
|
920
|
-
}
|
|
921
|
-
else {
|
|
922
|
-
result = {
|
|
923
|
-
...registry.readDirectory(readRequiredString(params, "uri"), readSkillPageOptions(params)),
|
|
924
|
-
};
|
|
925
|
-
}
|
|
926
|
-
return buildMcpCompleteResult(withMcpCachePolicy(result, PM_MCP_CACHE_POLICIES.resource), PM_MCP_SERVER_INFO);
|
|
927
|
-
}
|
|
928
|
-
function dispatchModernPromptMethod(request) {
|
|
929
|
-
const result = request.method === "prompts/list"
|
|
930
|
-
? withMcpCachePolicy({
|
|
931
|
-
prompts: PM_MCP_PROMPT_CONTRACTS.map((prompt) => ({
|
|
932
|
-
name: prompt.name,
|
|
933
|
-
description: prompt.description,
|
|
934
|
-
arguments: prompt.arguments,
|
|
935
|
-
})).sort((left, right) => left.name.localeCompare(right.name)),
|
|
936
|
-
}, PM_MCP_CACHE_POLICIES.prompts)
|
|
937
|
-
: renderWorkflowPrompt(request.params);
|
|
938
|
-
return buildMcpCompleteResult(result, PM_MCP_SERVER_INFO);
|
|
939
|
-
}
|
|
940
|
-
/** Dispatch one validated stateless request through the modern surface. */
|
|
941
|
-
async function dispatchModernMcpRequest(request, meta) {
|
|
942
|
-
const requestContext = resolveMcpRequestContext(request.params);
|
|
943
|
-
const clientInfo = readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);
|
|
944
|
-
if (request.method === "server/discover") {
|
|
945
|
-
return buildMcpDiscoverResult({
|
|
946
|
-
serverInfo: PM_MCP_SERVER_INFO,
|
|
947
|
-
capabilities: PM_MCP_SERVER_CAPABILITIES,
|
|
948
|
-
instructions: PM_MCP_INSTRUCTIONS,
|
|
949
|
-
});
|
|
950
|
-
}
|
|
951
|
-
if (request.method === "ping") {
|
|
952
|
-
// The preceding match is an mcp-deprecation-negative-control for modern callers.
|
|
953
|
-
throw new PmMcpProtocolError("MCP method not found: ping", -32601, {
|
|
954
|
-
removedIn: PM_MCP_PROTOCOL_VERSION,
|
|
955
|
-
});
|
|
956
|
-
}
|
|
957
|
-
if (PM_MCP_SKILL_METHODS.has(request.method ?? "")) {
|
|
958
|
-
return dispatchModernSkillMethod(request, requestContext);
|
|
959
|
-
}
|
|
960
|
-
if (request.method === "tasks/get" ||
|
|
961
|
-
request.method === "tasks/update" ||
|
|
962
|
-
request.method === "tasks/cancel") {
|
|
963
|
-
return dispatchMcpTaskMethod(request, requestContext);
|
|
964
|
-
}
|
|
965
|
-
if (request.method === "tools/list" || request.method === "tools/call") {
|
|
966
|
-
return dispatchModernToolMethod(request, requestContext, clientInfo);
|
|
967
|
-
}
|
|
968
|
-
if (request.method === "resources/list" ||
|
|
969
|
-
request.method === "resources/templates/list" ||
|
|
970
|
-
request.method === "resources/read") {
|
|
971
|
-
return dispatchModernResourceMethod(request, requestContext);
|
|
972
|
-
}
|
|
973
|
-
if (request.method === "prompts/list" || request.method === "prompts/get") {
|
|
974
|
-
return dispatchModernPromptMethod(request);
|
|
975
|
-
}
|
|
976
|
-
throw new PmMcpProtocolError(`MCP method not found: ${request.method ?? "(missing)"}`, -32601);
|
|
977
|
-
}
|
|
978
|
-
/** Implements handle request for the public runtime surface of this module. */
|
|
979
|
-
async function handleRequestInReproducibleContext(request) {
|
|
980
|
-
if (!request.id && request.method?.startsWith("notifications/")) {
|
|
981
|
-
return undefined;
|
|
982
|
-
}
|
|
983
|
-
if (hasMcpProtocolVersionMetadata(request)) {
|
|
984
|
-
const allowlist = (process.env.PM_MCP_BAGGAGE_ALLOWLIST ?? "")
|
|
985
|
-
.split(",")
|
|
986
|
-
.map((entry) => entry.trim())
|
|
987
|
-
.filter(Boolean);
|
|
988
|
-
return runWithMcpTraceContext(extractMcpTraceContext(request.params, { baggageAllowlist: allowlist }), () => dispatchModernMcpRequest(request, request.params._meta));
|
|
989
|
-
}
|
|
990
|
-
if (request.method === "initialize") {
|
|
991
|
-
// The preceding match is an mcp-legacy-boundary delegated to the isolated adapter.
|
|
992
|
-
return LEGACY_MCP_ADAPTER.initialize(request.params);
|
|
993
|
-
}
|
|
994
|
-
return LEGACY_MCP_ADAPTER.dispatch(request);
|
|
995
|
-
}
|
|
996
|
-
/** Return whether a request explicitly supplies the modern version metadata key. */
|
|
997
|
-
function hasMcpProtocolVersionMetadata(request) {
|
|
998
|
-
const meta = isMcpRecord(request.params) ? request.params._meta : undefined;
|
|
999
|
-
return (isMcpRecord(meta) &&
|
|
1000
|
-
Object.prototype.hasOwnProperty.call(meta, PM_MCP_META_KEYS.protocolVersion));
|
|
1001
|
-
}
|
|
1002
|
-
/** Dispatch one MCP request under supported process-level reproducibility settings. */
|
|
1003
|
-
export async function handleRequest(request) {
|
|
1004
|
-
return runWithReproducibleProcessEnvironment(process.env, () => handleRequestInReproducibleContext(request));
|
|
1005
|
-
}
|
|
1006
|
-
function writeResponse(id, payload) {
|
|
1007
|
-
process.stdout.write(`${JSON.stringify({ jsonrpc: "2.0", id, result: payload })}\n`);
|
|
1008
|
-
}
|
|
1009
|
-
function writeError(id, error) {
|
|
1010
|
-
const code = error instanceof PmMcpProtocolError
|
|
1011
|
-
? error.code
|
|
1012
|
-
: error instanceof PmCliError
|
|
1013
|
-
? error.exitCode
|
|
1014
|
-
: -32603;
|
|
1015
|
-
const message = error instanceof Error ? error.message : String(error);
|
|
1016
|
-
const data = error instanceof PmMcpProtocolError
|
|
1017
|
-
? error.data
|
|
1018
|
-
: error instanceof PmCliError
|
|
1019
|
-
? error.context
|
|
1020
|
-
: undefined;
|
|
1021
|
-
process.stdout.write(`${JSON.stringify({ jsonrpc: "2.0", id, error: { code, message, data } })}\n`);
|
|
1022
|
-
}
|
|
1023
|
-
/** Write an MCP tool execution failure as a successful tool result envelope. */
|
|
1024
|
-
function writeToolCallErrorResponse(request, error) {
|
|
1025
|
-
if (request.method !== "tools/call" || error instanceof PmMcpProtocolError) {
|
|
1026
|
-
return false;
|
|
1027
|
-
}
|
|
1028
|
-
writeResponse(request.id, buildMcpToolCallErrorResult(request, error));
|
|
1029
|
-
return true;
|
|
1030
|
-
}
|
|
1031
|
-
async function handleStdioTransportControl(request) {
|
|
1032
|
-
if (request.method === "subscriptions/listen") {
|
|
1033
|
-
await openMcpSubscription({
|
|
1034
|
-
request,
|
|
1035
|
-
sink: (notification) => {
|
|
1036
|
-
process.stdout.write(`${JSON.stringify(notification)}\n`);
|
|
1037
|
-
},
|
|
1038
|
-
});
|
|
1039
|
-
return true;
|
|
1040
|
-
}
|
|
1041
|
-
if (request.method !== "notifications/cancelled")
|
|
1042
|
-
return false;
|
|
1043
|
-
const requestId = request.params?.requestId;
|
|
1044
|
-
if (typeof requestId === "string" || typeof requestId === "number") {
|
|
1045
|
-
const result = closeMcpSubscription(requestId);
|
|
1046
|
-
if (result)
|
|
1047
|
-
writeResponse(requestId, result);
|
|
1048
|
-
}
|
|
1049
|
-
return true;
|
|
1050
|
-
}
|
|
1051
|
-
// pm-3puw: parse one JSON-RPC line, dispatch it, and write the response. Kept
|
|
1052
|
-
// as a standalone async unit so the stdio loop can enqueue it onto a serial
|
|
1053
|
-
// queue (process lines in arrival order) and tests can drive it directly.
|
|
1054
|
-
/** Implements process rpc line for the public runtime surface of this module. */
|
|
1055
|
-
async function processRpcLineWithHandler(line, requestHandler) {
|
|
1056
|
-
if (line.trim().length === 0) {
|
|
1057
|
-
return;
|
|
1058
|
-
}
|
|
1059
|
-
let request;
|
|
1060
|
-
try {
|
|
1061
|
-
request = JSON.parse(line);
|
|
1062
|
-
}
|
|
1063
|
-
catch (error) {
|
|
1064
|
-
const message = error instanceof Error ? error.message : String(error);
|
|
1065
|
-
writeError(null, new PmCliError(`Parse error: ${message}`, -32700));
|
|
1066
|
-
return;
|
|
1067
|
-
}
|
|
1068
|
-
if (typeof request !== "object" ||
|
|
1069
|
-
request === null ||
|
|
1070
|
-
Array.isArray(request)) {
|
|
1071
|
-
writeError(null, new PmCliError("Invalid JSON-RPC request: expected an object", -32600));
|
|
1072
|
-
return;
|
|
1073
|
-
}
|
|
1074
|
-
const shouldRespond = Object.prototype.hasOwnProperty.call(request, "id");
|
|
1075
|
-
try {
|
|
1076
|
-
if (await handleStdioTransportControl(request))
|
|
1077
|
-
return;
|
|
1078
|
-
const result = await requestHandler(request);
|
|
1079
|
-
if (shouldRespond && result !== undefined) {
|
|
1080
|
-
writeResponse(request.id, result);
|
|
1081
|
-
}
|
|
1082
|
-
}
|
|
1083
|
-
catch (error) {
|
|
1084
|
-
if (!shouldRespond) {
|
|
1085
|
-
return;
|
|
1086
|
-
}
|
|
1087
|
-
if (!writeToolCallErrorResponse(request, error)) {
|
|
1088
|
-
writeError(request.id, error);
|
|
1089
|
-
}
|
|
1090
|
-
}
|
|
1091
|
-
}
|
|
1092
|
-
/** Implements process rpc line for the public runtime surface of this module. */
|
|
1093
|
-
export async function processRpcLine(line) {
|
|
1094
|
-
await processRpcLineWithHandler(line, handleRequest);
|
|
1095
|
-
}
|
|
1096
|
-
/** Implements start mcp server for the public runtime surface of this module. */
|
|
1097
|
-
export function startMcpServer() {
|
|
1098
|
-
const rl = readline.createInterface({
|
|
1099
|
-
input: process.stdin,
|
|
1100
|
-
crlfDelay: Infinity,
|
|
1101
|
-
});
|
|
1102
|
-
// pm-3puw: serialize line handling so pipelined requests are processed in
|
|
1103
|
-
// arrival order. The previous fire-and-forget handler ran requests
|
|
1104
|
-
// concurrently, so a client that pipelined two mutations on the same item
|
|
1105
|
-
// (without awaiting the first response) hit a lock conflict on the second.
|
|
1106
|
-
const queue = createSerialQueue();
|
|
1107
|
-
let processLine;
|
|
1108
|
-
try {
|
|
1109
|
-
const runInProcessContext = createReproducibleProcessRunner(process.env);
|
|
1110
|
-
processLine = (line) => runInProcessContext(() => processRpcLineWithHandler(line, handleRequestInReproducibleContext));
|
|
1111
|
-
}
|
|
1112
|
-
catch {
|
|
1113
|
-
// Preserve one typed JSON-RPC error per request when process configuration
|
|
1114
|
-
// is invalid; processRpcLine resolves the same configuration fail-closed.
|
|
1115
|
-
processLine = processRpcLine;
|
|
1116
|
-
}
|
|
1117
|
-
rl.on("line", (line) => {
|
|
1118
|
-
void queue.enqueue(() => processLine(line));
|
|
1119
|
-
});
|
|
1120
|
-
rl.on("close", () => {
|
|
1121
|
-
void queue.enqueue(() => {
|
|
1122
|
-
for (const closed of closeStdioMcpSubscriptions()) {
|
|
1123
|
-
writeResponse(closed.id, closed.result);
|
|
1124
|
-
}
|
|
1125
|
-
});
|
|
1126
|
-
});
|
|
1127
|
-
}
|
|
1128
|
-
// npm bin entries are symlinks (node_modules/.bin/pm-mcp -> dist/mcp/server.js),
|
|
1129
|
-
// so argv[1] must be realpath-resolved before comparing against this module's
|
|
1130
|
-
// path — a plain equality check made the published `pm-mcp` bin exit 0 without
|
|
1131
|
-
// ever starting the server (pm-qtbc).
|
|
1132
|
-
/** Implements check whether invoked as mcp main module for the public runtime surface of this module. */
|
|
1133
|
-
export function isInvokedAsMcpMainModule(argvPath, moduleUrl) {
|
|
1134
|
-
if (!argvPath) {
|
|
1135
|
-
return false;
|
|
1136
|
-
}
|
|
1137
|
-
const selfPath = fileURLToPath(moduleUrl);
|
|
1138
|
-
if (argvPath === selfPath) {
|
|
1139
|
-
return true;
|
|
1140
|
-
}
|
|
1141
|
-
try {
|
|
1142
|
-
return realpathSync(argvPath) === realpathSync(selfPath);
|
|
1143
|
-
}
|
|
1144
|
-
catch {
|
|
1145
|
-
return false;
|
|
1146
|
-
}
|
|
1147
|
-
}
|
|
1148
|
-
function readRuntimeTestHook(key) {
|
|
1149
|
-
const runtimeTestHooks = globalThis.__pmCliActionRunnerTestHooks;
|
|
1150
|
-
if (runtimeTestHooks === undefined) {
|
|
1151
|
-
throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`, 64);
|
|
1152
|
-
}
|
|
1153
|
-
return runtimeTestHooks[key];
|
|
1154
|
-
}
|
|
1155
|
-
/** Public contract for test only, shared by SDK and presentation-layer consumers. */
|
|
1156
|
-
export const _testOnly = {
|
|
1157
|
-
boundMcpClientProvenance,
|
|
1158
|
-
createMcpInputRequiredError: (input) => new PmMcpInputRequiredError(input),
|
|
1159
|
-
createMcpProtocolError: (...input) => new PmMcpProtocolError(...input),
|
|
1160
|
-
get closeManyOptionsFromFlat() {
|
|
1161
|
-
return readRuntimeTestHook("closeManyOptionsFromFlat");
|
|
1162
|
-
},
|
|
1163
|
-
detectUnexpectedOptionKeys,
|
|
1164
|
-
detectUnexpectedTopLevelKeys,
|
|
1165
|
-
collectMutationGuardWarnings,
|
|
1166
|
-
closeStdioMcpSubscriptions,
|
|
1167
|
-
errorContent,
|
|
1168
|
-
emitMcpChangeNotifications,
|
|
1169
|
-
expireMcpSubscriptionRecord: (id, key = id) => PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),
|
|
1170
|
-
getMcpClientInfo: () => LEGACY_MCP_ADAPTER.getClientInfo(),
|
|
1171
|
-
get extensionOptionsFromArgs() {
|
|
1172
|
-
return readRuntimeTestHook("extensionOptionsFromArgs");
|
|
1173
|
-
},
|
|
1174
|
-
get globalOptions() {
|
|
1175
|
-
return readRuntimeTestHook("globalOptions");
|
|
1176
|
-
},
|
|
1177
|
-
get mutationListOptions() {
|
|
1178
|
-
return readRuntimeTestHook("mutationListOptions");
|
|
1179
|
-
},
|
|
1180
|
-
nearestDeclaredKey,
|
|
1181
|
-
mcpTaskPrincipal,
|
|
1182
|
-
resultContent,
|
|
1183
|
-
resolveMcpRequestContext,
|
|
1184
|
-
shouldCreateMcpTask,
|
|
1185
|
-
settleMcpTaskExecution,
|
|
1186
|
-
subscriptionCount: () => PM_MCP_SUBSCRIPTIONS.size,
|
|
1187
|
-
get normalizeActionName() {
|
|
1188
|
-
return readRuntimeTestHook("normalizeActionName");
|
|
1189
|
-
},
|
|
1190
|
-
get normalizeCommandPath() {
|
|
1191
|
-
return readRuntimeTestHook("normalizeCommandPath");
|
|
1192
|
-
},
|
|
1193
|
-
get normalizeMcpOptionsArrays() {
|
|
1194
|
-
return readRuntimeTestHook("normalizeMcpOptionsArrays");
|
|
1195
|
-
},
|
|
1196
|
-
get normalizeMcpUpdateOptions() {
|
|
1197
|
-
return readRuntimeTestHook("normalizeMcpUpdateOptions");
|
|
1198
|
-
},
|
|
1199
|
-
get optionsWithAuthor() {
|
|
1200
|
-
return readRuntimeTestHook("optionsWithAuthor");
|
|
1201
|
-
},
|
|
1202
|
-
get readRequiredString() {
|
|
1203
|
-
return readRuntimeTestHook("readRequiredString");
|
|
1204
|
-
},
|
|
1205
|
-
get readScalarString() {
|
|
1206
|
-
return readRuntimeTestHook("readScalarString");
|
|
1207
|
-
},
|
|
1208
|
-
get readScalarStringAllowBlank() {
|
|
1209
|
-
return readRuntimeTestHook("readScalarStringAllowBlank");
|
|
1210
|
-
},
|
|
1211
|
-
get readStringArray() {
|
|
1212
|
-
return readRuntimeTestHook("readStringArray");
|
|
1213
|
-
},
|
|
1214
|
-
runAction: runMcpAction,
|
|
1215
|
-
get updateManyOptionsFromFlat() {
|
|
1216
|
-
return readRuntimeTestHook("updateManyOptionsFromFlat");
|
|
1217
|
-
},
|
|
1218
|
-
get withAddNoteOption() {
|
|
1219
|
-
return readRuntimeTestHook("withAddNoteOption");
|
|
1220
|
-
},
|
|
1221
|
-
get withFilesDiscoveryOptions() {
|
|
1222
|
-
return readRuntimeTestHook("withFilesDiscoveryOptions");
|
|
1223
|
-
},
|
|
1224
|
-
get withMutationCompaction() {
|
|
1225
|
-
return readRuntimeTestHook("withMutationCompaction");
|
|
1226
|
-
},
|
|
1227
|
-
writeError,
|
|
1228
|
-
};
|
|
1229
|
-
/* c8 ignore start */
|
|
1230
|
-
if (isInvokedAsMcpMainModule(process.argv[1], import.meta.url)) {
|
|
1231
|
-
startMcpServer();
|
|
1232
|
-
}
|
|
1233
|
-
/* c8 ignore stop */
|
|
2
|
+
!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="845e245a-00f7-5ae5-85b1-c628768346de")}catch(e2){}})();import{realpathSync}from"node:fs";import{readFile}from"node:fs/promises";import path from"node:path";import readline from"node:readline";import{fileURLToPath}from"node:url";import{resolvePmCliVersion,PmCliError,decodeHtmlEntitiesInOptions,levenshteinDistanceWithinLimit,asRecordClone,createSerialQueue,evaluateMutationGuard,getSettingsPath,isMutationAction,pathExists,readSettings,runWithHarnessDetectionSignals,runWithWorkspaceHarnessSignalDescriptors,boundAgentEpisodeIdentity}from"../sdk/runtime-primitives.js";import{pmToolActionNestedOptionKeys}from"../sdk/cli-contracts/tool-schema.js";import{readRequiredString,runAction,runWithActiveExtensions}from"../sdk/runtime.js";import{NARROW_TOOL_ACTIONS,TOOLS}from"./tool-definitions.js";import{normalizeWorkspaceToolArguments,resolveMcpToolAccess,resolveMcpToolSurface}from"./runtime-capabilities.js";import{PM_MCP_PROMPT_CONTRACTS,PM_MCP_RESOURCE_CONTRACTS}from"../sdk/agent-capability-contracts.js";import{PM_MCP_ENTRY_TOOL_NAMES,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION,PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,discoverPmTools,parsePmToolDiscoveryOptions}from"../sdk/mcp/discovery.js";import{commitItemMutations}from"../sdk/item-transaction.js";import{isRuntimeRecord,markMcpMutationTransportInput}from"../sdk/runtime-input.js";import{attachOutputTokenAccounting}from"../sdk/output-token-accounting.js";import{createReproducibleProcessRunner,runWithReproducibleProcessEnvironment}from"../sdk/reproducibility/process.js";import{parseAtomicMutationControls,resolveItemMutationDocument}from"../sdk/structured-mutations.js";import{resolveAuthor,resolvePmRoot,resolveWorkspaceRoot}from"../sdk/runtime-primitives.js";import{PM_MCP_ERROR_CODES,PM_MCP_META_KEYS,PM_MCP_PROTOCOL_VERSION,PmMcpProtocolError,attachMcpServerInfo,buildMcpCompleteResult,buildMcpDiscoverResult,hasMcpClientExtension,isMcpRecord,resolveMcpRequestContext}from"../sdk/mcp/protocol.js";import{PmMcpInputRequiredError,buildMcpInputRequiredResult,parseMcpInputResponses,validateMcpJsonSchema,withMcpCachePolicy}from"../sdk/mcp/interactions.js";import{PM_MCP_TASKS_EXTENSION,createMcpTaskStore}from"../sdk/mcp/tasks.js";import{PmMcpSubscriptionRegistry}from"../sdk/mcp/subscriptions.js";import{extractMcpTraceContext,runWithMcpTraceContext}from"../sdk/mcp/authorization.js";import{LegacyMcpAdapter}from"./legacy-adapter.js";import{PM_MCP_APP_CONTRACTS,PM_MCP_APP_MIME_TYPE,PM_MCP_APPS_EXTENSION,PM_MCP_APPS_SERVER_CAPABILITY,decoratePmMcpToolsWithApps,findPmMcpAppByUri,hasPmMcpAppsCapability,renderPmMcpAppHtml}from"../sdk/mcp/apps.js";import{PM_MCP_SKILLS_EXTENSION,PM_MCP_SKILLS_SERVER_CAPABILITY,PmMcpSkillRegistry,assertPmMcpSkillsCapability}from"../sdk/mcp/skills.js";function runMcpAction(args){return runAction(markMcpMutationTransportInput(args))}const PM_PACKAGE_ROOT_ENV="PM_CLI_PACKAGE_ROOT";function resolvePmPackageRoot(){return fileURLToPath(new URL("../..",import.meta.url))}if(typeof process.env[PM_PACKAGE_ROOT_ENV]!=="string"||process.env[PM_PACKAGE_ROOT_ENV]?.trim().length===0){process.env[PM_PACKAGE_ROOT_ENV]=resolvePmPackageRoot()}const PM_MCP_SERVER_VERSION=resolvePmCliVersion(import.meta.url,["../.."])??"0.0.0";const PM_MCP_SERVER_INFO={name:"pm-mcp",version:PM_MCP_SERVER_VERSION,description:"Stateless project-context management through pm SDK contracts.",websiteUrl:"https://github.com/unbraind/pm-cli"};const PM_MCP_SERVER_CAPABILITIES={prompts:{listChanged:true},resources:{listChanged:true,subscribe:true},tools:{listChanged:true},extensions:{[PM_MCP_TASKS_EXTENSION]:{},[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY,[PM_MCP_SKILLS_EXTENSION]:PM_MCP_SKILLS_SERVER_CAPABILITY,[PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]:PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY}};const PM_MCP_SUBSCRIPTIONS=new Map;function createMcpSubscriptionRegistry(){return new PmMcpSubscriptionRegistry({capabilities:PM_MCP_SERVER_CAPABILITIES,serverInfo:PM_MCP_SERVER_INFO})}function pruneClosedMcpSubscriptionRegistries(){for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(subscription.registry.size===0)PM_MCP_SUBSCRIPTIONS.delete(key)}}const PM_MCP_CACHE_POLICIES={prompts:{ttlMs:6e4,cacheScope:"public"},resource:{ttlMs:0,cacheScope:"private"},resources:{ttlMs:6e4,cacheScope:"public"},tools:{ttlMs:3e4,cacheScope:"private"}};const PM_MCP_DIRECT_TASK_TOOLS=new Set(["pm_graph","pm_health","pm_validate"]);const PM_MCP_RUN_TASK_ACTIONS=new Set(["graph","health","import","reindex","test-all","validate"]);const PM_MCP_SKILL_METHODS=new Set(["skills/list","skills/get","resources/directory/read"]);const PM_MCP_INSTRUCTIONS="You have access to native pm CLI tools for git-based project management. When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. Do not pass path during real repository tracking \u2014 only pass path for sandbox or test runs.";function declaredToolKeys(tools=TOOLS){return new Map(tools.map(tool=>{const schema=tool.inputSchema;const properties=schema.properties??{};return[tool.name,Object.keys(properties)]}))}function nearestDeclaredKey(unexpected,declared){const limit=Math.max(1,Math.min(3,Math.floor(unexpected.length/4)+1));let best;for(const candidate of declared){const distance=levenshteinDistanceWithinLimit(unexpected,candidate,limit);if(distance===null){continue}if(best===void 0||distance<best.distance){best={key:candidate,distance}}}return best?.key}const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS=new Set(["pm_run"]);const MCP_RETRY_ARGUMENT_KEYS=new Set(["inputResponses","requestState"]);function resolveMcpDiscoveryCursorIntegrityKey(){const configuredKey=process.env.PM_MCP_DISCOVERY_CURSOR_KEY;if(configuredKey===void 0)return void 0;const key=Buffer.from(configuredKey,"utf8");if(key.byteLength<32){throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.",64)}return key}function detectUnexpectedTopLevelKeys(toolName,args,toolDeclaredKeys=declaredToolKeys()){if(typeof args!=="object"||args===null||Array.isArray(args)){return[]}if(UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName)){return[]}const declared=toolDeclaredKeys.get(toolName);if(declared===void 0){return[]}const declaredSet=new Set([...declared,...MCP_RETRY_ARGUMENT_KEYS]);const warnings=[];for(const key of Object.keys(args)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`:`Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`)}return warnings}const HANDLERS={pm_run:args=>runMcpAction(args),pm_discover:async args=>{const surface=await resolveMcpToolSurface(TOOLS,args);const cursorIntegrityKey=resolveMcpDiscoveryCursorIntegrityKey();const discoveryOptions=parsePmToolDiscoveryOptions(args);return discoverPmTools(surface.tools.map(tool=>({name:tool.name,description:tool.description,inputSchema:tool.inputSchema,authorized:true,signals:{freshness:1,usage:PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)?1:0}})),{...discoveryOptions,profile:surface.profile,...cursorIntegrityKey===void 0?{}:{cursorIntegrityKey}})},pm_mutate:async args=>{const transactionId=readRequiredString(args,"transactionId");const controls=parseAtomicMutationControls(args);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const resolved=resolveItemMutationDocument(JSON.stringify({schema_version:1,mutations:args.mutations}),{transactionId,idPrefix:(await readSettings(pmRoot)).id_prefix});const{mutations,references}=resolved;if(args.dryRun===true){return{transaction_id:transactionId,dry_run:true,mutation_count:mutations.length,mutations,references}}const result=await runWithActiveExtensions({cwd:typeof args.cwd==="string"?args.cwd:void 0,path:typeof args.path==="string"?args.path:void 0,noExtensions:args.noExtensions===true},()=>commitItemMutations({pmRoot,transactionId,author:resolveAuthor(typeof args.author==="string"?args.author:void 0,"unknown"),mutations,...controls}));const{transactionId:committedTransactionId,...commitResult}=result;return{...commitResult,transaction_id:committedTransactionId,mutation_count:mutations.length,references}},...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool,action])=>[tool,args=>runMcpAction({...args,action})]))};function resolveInvokedAction(toolName,args){if(toolName==="pm_run"){return typeof args.action==="string"?args.action:void 0}return NARROW_TOOL_ACTIONS[toolName]}async function collectMutationGuardWarnings(toolName,action,args){if(toolName!=="pm_mutate"&&!isMutationAction(action??"")){return[]}const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot))){return[]}const settings=await readSettings(pmRoot);const nestedOptions=typeof args.options==="object"&&args.options!==null&&!Array.isArray(args.options)?args.options:{};const result=evaluateMutationGuard({author:resolveAuthor(typeof args.author==="string"?args.author:typeof nestedOptions.author==="string"?nestedOptions.author:void 0,settings.author_default),payload:args,settings:settings.mutation_guard,force:args.force===true||nestedOptions.force===true});return result.warnings}function detectUnexpectedOptionKeys(toolName,action,args){const options=args.options;if(action===void 0||typeof options!=="object"||options===null||Array.isArray(options)){return[]}const declared=pmToolActionNestedOptionKeys(action);if(declared===void 0){return[]}const declaredSet=new Set(declared);const warnings=[];for(const key of Object.keys(options)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`:`Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`)}return warnings}function resultContent(result,warnings,tokenAccounting=false,canonicalStructuredResult=false){const effectiveResult=tokenAccounting?attachOutputTokenAccounting(result,value=>JSON.stringify(value,null,2)):result;const structuredContent=warnings!==void 0&&warnings.length>0?{result:effectiveResult,warnings}:{result:effectiveResult};return{content:[{type:"text",text:canonicalStructuredResult?"Canonical result: structuredContent.result":JSON.stringify(effectiveResult,null,2)}],structuredContent}}function errorContent(error,canonicalStructuredResult=false){const code=error instanceof PmCliError?error.exitCode:1;const message=error instanceof Error?error.message:String(error);const details=error instanceof PmCliError?error.context:void 0;return{isError:true,content:[{type:"text",text:canonicalStructuredResult?"Canonical error: structuredContent":JSON.stringify({error:message,code,details},null,2)}],structuredContent:{result:null,error:message,code,details}}}function boundMcpClientProvenance(value){const provenance=isRuntimeRecord(value)?value:{};const bounded={};let acceptedCount=0;for(const key in provenance){if(acceptedCount>=32)break;if(!Object.prototype.hasOwnProperty.call(provenance,key))continue;const entry=provenance[key];if(/^[a-z][a-z0-9_-]{0,63}$/u.test(key)&&typeof entry==="string"&&entry.trim().length>0){bounded[key]=entry.trim().slice(0,256);acceptedCount+=1}}return bounded}function readMcpClientInfo(value){const clientInfo=isRuntimeRecord(value)?value:{};const clientName=typeof clientInfo.name==="string"?clientInfo.name.trim():"";if(clientName.length===0)return void 0;const optionalValues=[["version",clientInfo.version,128],["model",clientInfo.model,256],["session",clientInfo.session,256]];const result={name:clientName.slice(0,128)};for(const[key,value2,limit]of optionalValues){if(typeof value2==="string"&&value2.trim().length>0){result[key]=value2.trim().slice(0,limit)}}const boundedProvenance=boundMcpClientProvenance(clientInfo.provenance);if(Object.keys(boundedProvenance).length>0){result.provenance=boundedProvenance}const episode=boundAgentEpisodeIdentity(clientInfo.episode,false);if(episode!==void 0)result.episode=episode;return result}async function emitMcpChangeNotifications(action){if(isMutationAction(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({registry})=>PM_MCP_RESOURCE_CONTRACTS.map(resource=>registry.emitResourceUpdated(resource.uri))))}if(["extension","install","package","uninstall"].includes(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({registry})=>registry.emitListChanged("tools")))}pruneClosedMcpSubscriptionRegistries()}async function handleToolCall(paramsInput,clientInfo,progressiveDiscoveryNegotiated=false){const clientSignals=clientInfo?{client_info:clientInfo}:{};return runWithHarnessDetectionSignals({env:process.env,argv:process.argv,...clientSignals},async()=>{const params=asRecordClone(paramsInput);const name=readRequiredString(params,"name");const handler=Object.prototype.hasOwnProperty.call(HANDLERS,name)?HANDLERS[name]:void 0;if(!handler){throw new PmCliError(`Unknown pm MCP tool: ${name}`,64)}const inputResponses=params.inputResponses===void 0?void 0:parseMcpInputResponses(params.inputResponses);validateMcpToolArguments(params.arguments);const requestedArgs={...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),...inputResponses?{inputResponses}:{},...typeof params.requestState==="string"?{requestState:params.requestState}:{}};const access=await resolveMcpToolAccess(TOOLS,name,requestedArgs);const requiredCustomDiscoveryEntry=progressiveDiscoveryNegotiated&&access.profile==="custom"&&name==="pm_discover";if(!access.available&&!requiredCustomDiscoveryEntry){throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`,64)}const args=await normalizeWorkspaceToolArguments(name,requestedArgs);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const workspaceIdentity=await pathExists(getSettingsPath(pmRoot))?(await readSettings(pmRoot)).agent_identity:void 0;return runWithHarnessDetectionSignals({env:{...process.env,PM_PATH:pmRoot},argv:process.argv,cwd,...clientSignals},()=>runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals??[],async()=>{const action=resolveInvokedAction(name,args);const warnings=[...detectUnexpectedTopLevelKeys(name,args,declaredToolKeys()),...detectUnexpectedOptionKeys(name,action,args),...await collectMutationGuardWarnings(name,action,args)];for(const warning of warnings){console.error(`[pm-mcp] ${warning}`)}const result=await handler(args);void emitMcpChangeNotifications(action);return resultContent(result,warnings,args.tokenAccounting===true,progressiveDiscoveryNegotiated)},{probesEnabled:workspaceIdentity?.probes_enabled}))})}async function openMcpSubscription(input){if(typeof input.request.id!=="string"&&typeof input.request.id!=="number"||input.request.method!=="subscriptions/listen"){throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request",PM_MCP_ERROR_CODES.invalidParams,{required:["id","method","params.notifications"]})}resolveMcpRequestContext(input.request.params);const key=input.key??input.request.id;if(PM_MCP_SUBSCRIPTIONS.has(key)){throw new PmMcpProtocolError("MCP subscription id is already active",PM_MCP_ERROR_CODES.invalidParams,{subscriptionId:input.request.id})}const registry=createMcpSubscriptionRegistry();await registry.open({id:input.request.id,notifications:input.request.params?.notifications,sink:input.sink});PM_MCP_SUBSCRIPTIONS.set(key,{id:input.request.id,registry})}function closeMcpSubscription(id,key=id){const subscription=PM_MCP_SUBSCRIPTIONS.get(key);if(!subscription||subscription.id!==id)return void 0;PM_MCP_SUBSCRIPTIONS.delete(key);return subscription.registry.close(id)}function closeStdioMcpSubscriptions(){const closed=[];for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(key!==subscription.id)continue;const result=closeMcpSubscription(subscription.id,key);if(result)closed.push({id:subscription.id,result})}return closed}async function resolveMcpToolSchemaForRequest(request){if(request.method!=="tools/call")return void 0;const name=request.params?.name;if(typeof name!=="string")return void 0;const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));return surface.tools.find(tool=>tool.name===name)?.inputSchema}function buildMcpToolCallErrorResult(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return void 0}const content=errorContent(error,hasMcpProtocolVersionMetadata(request)&&hasMcpClientExtension(resolveMcpRequestContext(request.params),PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));return hasMcpProtocolVersionMetadata(request)?buildMcpCompleteResult(content,PM_MCP_SERVER_INFO):content}function requestWorkspaceArgs(params){const paramsRecord=asRecordClone(params);return asRecordClone(paramsRecord.arguments??paramsRecord)}async function readWorkspaceResource(uri,params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const contract=PM_MCP_RESOURCE_CONTRACTS.find(resource=>resource.uri===uri);if(!contract){throw new PmCliError(`Unknown pm MCP resource: ${uri}`,64)}let value;if(uri==="pm://workspace/context"){value=await runMcpAction({...args,action:"context",limit:10})}else if(uri==="pm://workspace/claims"){value=await runMcpAction({...args,action:"list",status:"in_progress",limit:20})}else if(uri==="pm://workspace/focus"){value=await runMcpAction({...args,action:"focus",subcommand:"show"})}else{const guidePath=path.join(cwd,"AGENTS.md");value=await pathExists(guidePath)?(await readFile(guidePath,"utf8")).slice(0,32e3):"No repository-local AGENTS.md was found."}return{contents:[{uri,mimeType:contract.mimeType,text:typeof value==="string"?value:JSON.stringify(value,null,2)}]}}async function loadRequestSkillRegistry(params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const workspaceRoot=resolveWorkspaceRoot(resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0));return PmMcpSkillRegistry.load({packageRoot:resolvePmPackageRoot(),workspaceRoot,packageVersion:PM_MCP_SERVER_VERSION})}function renderWorkflowPrompt(params){const paramsRecord=asRecordClone(params);const name=readRequiredString(paramsRecord,"name");const prompt=PM_MCP_PROMPT_CONTRACTS.find(candidate=>candidate.name===name);if(!prompt){throw new PmCliError(`Unknown pm MCP prompt: ${name}`,64)}const argumentsRecord=asRecordClone(paramsRecord.arguments);let text=prompt.template;for(const argument of prompt.arguments){const value=argumentsRecord[argument.name];if(argument.required&&(typeof value!=="string"||value.trim().length===0)){throw new PmCliError(`Missing required prompt argument: ${argument.name}`,64)}text=text.replaceAll(`{{${argument.name}}}`,typeof value==="string"?value:"")}return{description:prompt.description,messages:[{role:"user",content:{type:"text",text}}]}}const LEGACY_MCP_ADAPTER=new LegacyMcpAdapter({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS,parseClientInfo:readMcpClientInfo,listTools:async params=>({tools:(await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(params))).tools}),callTool:handleToolCall,listResources:()=>({resources:PM_MCP_RESOURCE_CONTRACTS}),readResource:params=>readWorkspaceResource(readRequiredString(asRecordClone(params),"uri"),params),listPrompts:()=>({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments}))}),getPrompt:renderWorkflowPrompt});function deterministicMcpTools(tools){return tools.map(tool=>({...tool,inputSchema:validateMcpJsonSchema(tool.inputSchema)})).sort((left,right)=>left.name.localeCompare(right.name))}function mcpTaskPrincipal(requestContext){return requestContext.clientInfo?`${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`:"anonymous-stdio"}function mcpTaskStore(){return createMcpTaskStore({pmRoot:resolvePmRoot(process.cwd()),owner:"pm-mcp-task-provider"})}function validateMcpToolArguments(value){if(value!==void 0&&!isMcpRecord(value)){throw new PmCliError("pm MCP tool arguments must be an object.",64)}}function shouldCreateMcpTask(params,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){return false}const requestParams=asRecordClone(params);const name=requestParams.name;const args=asRecordClone(requestParams.arguments);if(PM_MCP_DIRECT_TASK_TOOLS.has(name))return true;if(name==="pm_test"&&(args.subcommand==="run"||isMcpRecord(args.options)&&args.options.subcommand==="run")){return true}if(name!=="pm_run")return false;return typeof args.action==="string"&&PM_MCP_RUN_TASK_ACTIONS.has(args.action)}const PENDING_MCP_TASKS=new Map;async function executeMcpTask(execution,inputResponses){const params={...execution.params,...inputResponses?{inputResponses}:{},...execution.requestState?{requestState:execution.requestState}:{}};try{const result=await handleToolCall(params,execution.context.clientInfo,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(result,PM_MCP_SERVER_INFO));PENDING_MCP_TASKS.delete(execution.taskId)}catch(error){if(error instanceof PmMcpInputRequiredError){execution.requestState=error.requestState;await execution.store.requireInput({taskId:execution.taskId,principal:execution.principal,requestContext:execution.context,inputRequests:error.inputRequests,statusMessage:"Task requires additional client input."});return}if(error instanceof PmMcpProtocolError){await execution.store.fail(execution.taskId,execution.principal,{code:error.code,message:error.message,data:error.data})}else{await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(errorContent(error,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO))}PENDING_MCP_TASKS.delete(execution.taskId)}}async function settleMcpTaskExecution(taskId,execution){try{await execution}catch{PENDING_MCP_TASKS.delete(taskId)}}function scheduleMcpTaskExecution(execution,inputResponses){void settleMcpTaskExecution(execution.taskId,executeMcpTask(execution,inputResponses))}async function createMcpTaskForToolCall(params,requestContext){const store=mcpTaskStore();const principal=mcpTaskPrincipal(requestContext);const task=await store.create({principal,statusMessage:"pm operation accepted for asynchronous execution."});const execution={context:requestContext,params:asRecordClone(params),principal,store,taskId:task.taskId};PENDING_MCP_TASKS.set(task.taskId,execution);scheduleMcpTaskExecution(execution);return attachMcpServerInfo(task,PM_MCP_SERVER_INFO)}async function dispatchMcpTaskMethod(request,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_TASKS_EXTENSION]:{}}}})}const params=asRecordClone(request.params);const taskId=readRequiredString(params,"taskId");const principal=mcpTaskPrincipal(requestContext);const store=mcpTaskStore();if(request.method==="tasks/get"){return buildMcpCompleteResult(await store.get(taskId,principal),PM_MCP_SERVER_INFO)}if(request.method==="tasks/update"){const update=await store.update(taskId,principal,params.inputResponses);const execution=PENDING_MCP_TASKS.get(taskId);if(execution&&update.acceptedKeys.length>0&&update.remainingKeys.length===0){scheduleMcpTaskExecution(execution,await store.takeInputResponses(taskId,principal))}return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}await store.cancel(taskId,principal);PENDING_MCP_TASKS.delete(taskId);return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}async function dispatchModernToolMethod(request,requestContext,clientInfo){if(request.method==="tools/list"){const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));const progressiveDiscovery=hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION);const listedTools=progressiveDiscovery?[...surface.tools.filter(tool=>PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),...surface.profile==="custom"&&!surface.tools.some(tool=>tool.name==="pm_discover")?TOOLS.filter(tool=>tool.name==="pm_discover"):[]]:surface.tools;return buildMcpCompleteResult(withMcpCachePolicy({tools:hasCompatiblePmMcpAppsCapability(requestContext)?decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools)):deterministicMcpTools(listedTools)},PM_MCP_CACHE_POLICIES.tools),PM_MCP_SERVER_INFO)}validateMcpToolArguments(request.params?.arguments);if(shouldCreateMcpTask(request.params,requestContext)){return createMcpTaskForToolCall(request.params,requestContext)}try{return buildMcpCompleteResult(await handleToolCall(request.params,clientInfo,hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmMcpInputRequiredError))throw error;return buildMcpInputRequiredResult({requestContext,serverInfo:PM_MCP_SERVER_INFO,inputRequests:error.inputRequests,requestState:error.requestState})}}async function dispatchModernResourceMethod(request,requestContext){if(request.method==="resources/list"){const resources=[...PM_MCP_RESOURCE_CONTRACTS,...hasCompatiblePmMcpAppsCapability(requestContext)?PM_MCP_APP_CONTRACTS.map(contract=>({uri:contract.uri,name:contract.name,description:contract.description,mimeType:PM_MCP_APP_MIME_TYPE,_meta:{ui:contract.resourceMeta}})):[]].sort((left,right)=>left.uri.localeCompare(right.uri));return buildMcpCompleteResult(withMcpCachePolicy({resources},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}if(request.method==="resources/templates/list"){return buildMcpCompleteResult(withMcpCachePolicy({resourceTemplates:[]},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}try{const uri=readRequiredString(asRecordClone(request.params),"uri");const app=findPmMcpAppByUri(uri);let resource;if(app){if(!hasPmMcpAppsCapability(requestContext)){throw new PmMcpProtocolError("MCP App resource requires negotiated client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY}}})}resource={contents:[{uri,mimeType:PM_MCP_APP_MIME_TYPE,text:renderPmMcpAppHtml(app),_meta:{ui:app.resourceMeta}}]}}else if(uri.startsWith("skill://")){assertPmMcpSkillsCapability(requestContext);resource={...(await loadRequestSkillRegistry(request.params)).read(uri)}}else{resource=await readWorkspaceResource(uri,request.params)}return buildMcpCompleteResult(withMcpCachePolicy(resource,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmCliError)||!error.message.startsWith("Unknown pm MCP resource:")){throw error}throw new PmMcpProtocolError(error.message,PM_MCP_ERROR_CODES.invalidParams,{field:"uri"})}}function hasCompatiblePmMcpAppsCapability(requestContext){try{return hasPmMcpAppsCapability(requestContext)}catch(error){if(error instanceof PmMcpProtocolError)return false;throw error}}function readSkillPageOptions(params){if(params.cursor!==void 0&&typeof params.cursor!=="string"){throw new PmMcpProtocolError("Skills cursor must be a string",PM_MCP_ERROR_CODES.invalidParams,{field:"cursor"})}if(params.limit!==void 0&&typeof params.limit!=="number"){throw new PmMcpProtocolError("Skills limit must be a number",PM_MCP_ERROR_CODES.invalidParams,{field:"limit"})}return{...typeof params.cursor==="string"?{cursor:params.cursor}:{},...typeof params.limit==="number"?{limit:params.limit}:{}}}async function dispatchModernSkillMethod(request,requestContext){const directoryRead=request.method==="resources/directory/read";assertPmMcpSkillsCapability(requestContext,directoryRead);const params=asRecordClone(request.params);const registry=await loadRequestSkillRegistry(request.params);let result;if(request.method==="skills/list"){result={...registry.list(readSkillPageOptions(params))}}else if(request.method==="skills/get"){result={skill:registry.get(readRequiredString(params,"uri"))}}else{result={...registry.readDirectory(readRequiredString(params,"uri"),readSkillPageOptions(params))}}return buildMcpCompleteResult(withMcpCachePolicy(result,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}function dispatchModernPromptMethod(request){const result=request.method==="prompts/list"?withMcpCachePolicy({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments})).sort((left,right)=>left.name.localeCompare(right.name))},PM_MCP_CACHE_POLICIES.prompts):renderWorkflowPrompt(request.params);return buildMcpCompleteResult(result,PM_MCP_SERVER_INFO)}async function dispatchModernMcpRequest(request,meta){const requestContext=resolveMcpRequestContext(request.params);const clientInfo=readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);if(request.method==="server/discover"){return buildMcpDiscoverResult({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS})}if(request.method==="ping"){throw new PmMcpProtocolError("MCP method not found: ping",-32601,{removedIn:PM_MCP_PROTOCOL_VERSION})}if(PM_MCP_SKILL_METHODS.has(request.method??"")){return dispatchModernSkillMethod(request,requestContext)}if(request.method==="tasks/get"||request.method==="tasks/update"||request.method==="tasks/cancel"){return dispatchMcpTaskMethod(request,requestContext)}if(request.method==="tools/list"||request.method==="tools/call"){return dispatchModernToolMethod(request,requestContext,clientInfo)}if(request.method==="resources/list"||request.method==="resources/templates/list"||request.method==="resources/read"){return dispatchModernResourceMethod(request,requestContext)}if(request.method==="prompts/list"||request.method==="prompts/get"){return dispatchModernPromptMethod(request)}throw new PmMcpProtocolError(`MCP method not found: ${request.method??"(missing)"}`,-32601)}async function handleRequestInReproducibleContext(request){if(!request.id&&request.method?.startsWith("notifications/")){return void 0}if(hasMcpProtocolVersionMetadata(request)){const allowlist=(process.env.PM_MCP_BAGGAGE_ALLOWLIST??"").split(",").map(entry=>entry.trim()).filter(Boolean);return runWithMcpTraceContext(extractMcpTraceContext(request.params,{baggageAllowlist:allowlist}),()=>dispatchModernMcpRequest(request,request.params._meta))}if(request.method==="initialize"){return LEGACY_MCP_ADAPTER.initialize(request.params)}return LEGACY_MCP_ADAPTER.dispatch(request)}function hasMcpProtocolVersionMetadata(request){const meta=isMcpRecord(request.params)?request.params._meta:void 0;return isMcpRecord(meta)&&Object.prototype.hasOwnProperty.call(meta,PM_MCP_META_KEYS.protocolVersion)}async function handleRequest(request){return runWithReproducibleProcessEnvironment(process.env,()=>handleRequestInReproducibleContext(request))}function writeResponse(id,payload){process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,result:payload})}
|
|
3
|
+
`)}function writeError(id,error){const code=error instanceof PmMcpProtocolError?error.code:error instanceof PmCliError?error.exitCode:-32603;const message=error instanceof Error?error.message:String(error);const data=error instanceof PmMcpProtocolError?error.data:error instanceof PmCliError?error.context:void 0;process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,error:{code,message,data}})}
|
|
4
|
+
`)}function writeToolCallErrorResponse(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return false}writeResponse(request.id,buildMcpToolCallErrorResult(request,error));return true}async function handleStdioTransportControl(request){if(request.method==="subscriptions/listen"){await openMcpSubscription({request,sink:notification=>{process.stdout.write(`${JSON.stringify(notification)}
|
|
5
|
+
`)}});return true}if(request.method!=="notifications/cancelled")return false;const requestId=request.params?.requestId;if(typeof requestId==="string"||typeof requestId==="number"){const result=closeMcpSubscription(requestId);if(result)writeResponse(requestId,result)}return true}async function processRpcLineWithHandler(line,requestHandler){if(line.trim().length===0){return}let request;try{request=JSON.parse(line)}catch(error){const message=error instanceof Error?error.message:String(error);writeError(null,new PmCliError(`Parse error: ${message}`,-32700));return}if(typeof request!=="object"||request===null||Array.isArray(request)){writeError(null,new PmCliError("Invalid JSON-RPC request: expected an object",-32600));return}const shouldRespond=Object.prototype.hasOwnProperty.call(request,"id");try{if(await handleStdioTransportControl(request))return;const result=await requestHandler(request);if(shouldRespond&&result!==void 0){writeResponse(request.id,result)}}catch(error){if(!shouldRespond){return}if(!writeToolCallErrorResponse(request,error)){writeError(request.id,error)}}}async function processRpcLine(line){await processRpcLineWithHandler(line,handleRequest)}function startMcpServer(){const rl=readline.createInterface({input:process.stdin,crlfDelay:Infinity});const queue=createSerialQueue();let processLine;try{const runInProcessContext=createReproducibleProcessRunner(process.env);processLine=line=>runInProcessContext(()=>processRpcLineWithHandler(line,handleRequestInReproducibleContext))}catch{processLine=processRpcLine}rl.on("line",line=>{void queue.enqueue(()=>processLine(line))});rl.on("close",()=>{void queue.enqueue(()=>{for(const closed of closeStdioMcpSubscriptions()){writeResponse(closed.id,closed.result)}})})}function isInvokedAsMcpMainModule(argvPath,moduleUrl){if(!argvPath){return false}const selfPath=fileURLToPath(moduleUrl);if(argvPath===selfPath){return true}try{return realpathSync(argvPath)===realpathSync(selfPath)}catch{return false}}function readRuntimeTestHook(key){const runtimeTestHooks=globalThis.__pmCliActionRunnerTestHooks;if(runtimeTestHooks===void 0){throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`,64)}return runtimeTestHooks[key]}const _testOnly={boundMcpClientProvenance,createMcpInputRequiredError:input=>new PmMcpInputRequiredError(input),createMcpProtocolError:(...input)=>new PmMcpProtocolError(...input),get closeManyOptionsFromFlat(){return readRuntimeTestHook("closeManyOptionsFromFlat")},detectUnexpectedOptionKeys,detectUnexpectedTopLevelKeys,collectMutationGuardWarnings,closeStdioMcpSubscriptions,errorContent,emitMcpChangeNotifications,expireMcpSubscriptionRecord:(id,key=id)=>PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),getMcpClientInfo:()=>LEGACY_MCP_ADAPTER.getClientInfo(),get extensionOptionsFromArgs(){return readRuntimeTestHook("extensionOptionsFromArgs")},get globalOptions(){return readRuntimeTestHook("globalOptions")},get mutationListOptions(){return readRuntimeTestHook("mutationListOptions")},nearestDeclaredKey,mcpTaskPrincipal,resultContent,resolveMcpRequestContext,shouldCreateMcpTask,settleMcpTaskExecution,subscriptionCount:()=>PM_MCP_SUBSCRIPTIONS.size,get normalizeActionName(){return readRuntimeTestHook("normalizeActionName")},get normalizeCommandPath(){return readRuntimeTestHook("normalizeCommandPath")},get normalizeMcpOptionsArrays(){return readRuntimeTestHook("normalizeMcpOptionsArrays")},get normalizeMcpUpdateOptions(){return readRuntimeTestHook("normalizeMcpUpdateOptions")},get optionsWithAuthor(){return readRuntimeTestHook("optionsWithAuthor")},get readRequiredString(){return readRuntimeTestHook("readRequiredString")},get readScalarString(){return readRuntimeTestHook("readScalarString")},get readScalarStringAllowBlank(){return readRuntimeTestHook("readScalarStringAllowBlank")},get readStringArray(){return readRuntimeTestHook("readStringArray")},runAction:runMcpAction,get updateManyOptionsFromFlat(){return readRuntimeTestHook("updateManyOptionsFromFlat")},get withAddNoteOption(){return readRuntimeTestHook("withAddNoteOption")},get withFilesDiscoveryOptions(){return readRuntimeTestHook("withFilesDiscoveryOptions")},get withMutationCompaction(){return readRuntimeTestHook("withMutationCompaction")},writeError};if(isInvokedAsMcpMainModule(process.argv[1],import.meta.url)){startMcpServer()}export{_testOnly,buildMcpToolCallErrorResult,closeMcpSubscription,handleRequest,isInvokedAsMcpMainModule,openMcpSubscription,processRpcLine,resolveMcpToolSchemaForRequest,startMcpServer};
|
|
1234
6
|
//# sourceMappingURL=server.js.map
|
|
1235
|
-
//# debugId=1950da06-8c27-5506-bc64-4bf51c1a3f1c
|