@unbrained/pm-cli 2026.9.7 → 2026.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (746) hide show
  1. package/.agents/skills/pm-developer/SKILL.md +12 -4
  2. package/.agents/skills/pm-developer/references/MULTI_AGENT_MERGE.md +19 -10
  3. package/.agents/skills/pm-extensions/SKILL.md +6 -0
  4. package/.agents/skills/pm-sdk/SKILL.md +11 -2
  5. package/.agents/skills/pm-user/SKILL.md +7 -2
  6. package/.agents/skills/pm-user/references/ECOSYSTEM_PLANNING.md +95 -0
  7. package/.claude-plugin/marketplace.json +2 -2
  8. package/CHANGELOG.md +231 -182
  9. package/dist/cli/after-command-context-usage.js +1 -48
  10. package/dist/cli/argv-utils.js +1 -40
  11. package/dist/cli/bootstrap-args.js +1 -9
  12. package/dist/cli/bundle-integrity.js +2 -110
  13. package/dist/cli/commander-usage.js +11 -771
  14. package/dist/cli/commands/activity.js +1 -9
  15. package/dist/cli/commands/aggregate.js +1 -5
  16. package/dist/cli/commands/append.js +1 -5
  17. package/dist/cli/commands/claim.js +1 -5
  18. package/dist/cli/commands/close-many.js +1 -5
  19. package/dist/cli/commands/close.js +1 -9
  20. package/dist/cli/commands/comments.js +1 -5
  21. package/dist/cli/commands/config.js +1 -9
  22. package/dist/cli/commands/context.js +1 -9
  23. package/dist/cli/commands/contracts.js +1 -5
  24. package/dist/cli/commands/copy.js +1 -9
  25. package/dist/cli/commands/create.js +1 -9
  26. package/dist/cli/commands/delete.js +1 -9
  27. package/dist/cli/commands/deps.js +1 -9
  28. package/dist/cli/commands/docs.js +1 -9
  29. package/dist/cli/commands/duplicates.js +1 -9
  30. package/dist/cli/commands/eval.js +1 -9
  31. package/dist/cli/commands/extension/describe.js +1 -5
  32. package/dist/cli/commands/extension/scaffold.js +1 -5
  33. package/dist/cli/commands/extension/shared.js +1 -5
  34. package/dist/cli/commands/extension.js +1 -9
  35. package/dist/cli/commands/files.js +1 -9
  36. package/dist/cli/commands/focus.js +1 -9
  37. package/dist/cli/commands/gc.js +1 -9
  38. package/dist/cli/commands/get.js +1 -9
  39. package/dist/cli/commands/graph.js +1 -10
  40. package/dist/cli/commands/health.js +1 -9
  41. package/dist/cli/commands/history-compact.js +1 -10
  42. package/dist/cli/commands/history-redact.js +1 -11
  43. package/dist/cli/commands/history-repair.js +1 -10
  44. package/dist/cli/commands/history.js +1 -5
  45. package/dist/cli/commands/index.js +1 -58
  46. package/dist/cli/commands/init-agent-guidance.js +1 -9
  47. package/dist/cli/commands/init.js +1 -9
  48. package/dist/cli/commands/learnings.js +1 -5
  49. package/dist/cli/commands/lifecycle-transitions.js +1 -5
  50. package/dist/cli/commands/list.js +1 -9
  51. package/dist/cli/commands/merge.js +1 -11
  52. package/dist/cli/commands/next.js +1 -9
  53. package/dist/cli/commands/notes.js +1 -5
  54. package/dist/cli/commands/plan.js +1 -9
  55. package/dist/cli/commands/profile.js +1 -9
  56. package/dist/cli/commands/restore.js +1 -9
  57. package/dist/cli/commands/scheduling-shortcuts.js +1 -9
  58. package/dist/cli/commands/schema.js +1 -10
  59. package/dist/cli/commands/search.js +1 -9
  60. package/dist/cli/commands/stats.js +1 -9
  61. package/dist/cli/commands/telemetry.js +1 -9
  62. package/dist/cli/commands/test-all.js +1 -9
  63. package/dist/cli/commands/test-runs.js +1 -9
  64. package/dist/cli/commands/test.js +1 -9
  65. package/dist/cli/commands/update-many.js +1 -5
  66. package/dist/cli/commands/update.js +1 -9
  67. package/dist/cli/commands/upgrade.js +1 -5
  68. package/dist/cli/commands/validate.js +1 -15
  69. package/dist/cli/context-intent-invocation.js +1 -20
  70. package/dist/cli/description-stdin.js +1 -17
  71. package/dist/cli/error-guidance.js +1 -1353
  72. package/dist/cli/extension-command-help.js +5 -636
  73. package/dist/cli/extension-command-options.js +1 -427
  74. package/dist/cli/extension-recovery.js +1 -126
  75. package/dist/cli/help-content.js +2 -1001
  76. package/dist/cli/help-json-payload.js +4 -570
  77. package/dist/cli/main.d.ts +4 -0
  78. package/dist/cli/main.js +5 -2573
  79. package/dist/cli/migration-gates.js +1 -289
  80. package/dist/cli/public.js +1 -20
  81. package/dist/cli/register-annotations.js +1 -270
  82. package/dist/cli/register-assurance.js +1 -62
  83. package/dist/cli/register-files-lookup.js +1 -56
  84. package/dist/cli/register-history-activity.d.ts +8 -0
  85. package/dist/cli/register-history-activity.js +2 -0
  86. package/dist/cli/register-history-author.js +1 -38
  87. package/dist/cli/register-history-maintenance.d.ts +9 -0
  88. package/dist/cli/register-history-maintenance.js +2 -0
  89. package/dist/cli/register-list-query.js +10 -943
  90. package/dist/cli/register-mutation-options.js +1 -9
  91. package/dist/cli/register-mutation.d.ts +0 -5
  92. package/dist/cli/register-mutation.js +19 -1893
  93. package/dist/cli/register-operations.js +1 -920
  94. package/dist/cli/register-setup.js +1 -716
  95. package/dist/cli/register-structured-mutation.js +1 -196
  96. package/dist/cli/registration-helpers.js +1 -5
  97. package/dist/cli/runtime-compatibility-boundary.js +4 -42
  98. package/dist/cli/schema-registration-helpers.js +1 -73
  99. package/dist/cli/search-refresh.js +1 -13
  100. package/dist/cli/stats-analytics-json.js +1 -68
  101. package/dist/cli/telemetry-flush.js +1 -10
  102. package/dist/cli-bundle/bundle-manifest.json +164 -156
  103. package/dist/cli-bundle/chunks/{chunk-NPN5I67J.js → chunk-3IPRM75M.js} +3 -3
  104. package/dist/cli-bundle/chunks/chunk-4VL5P22L.js +2 -0
  105. package/dist/cli-bundle/chunks/chunk-AAFBV3U3.js +29 -0
  106. package/dist/cli-bundle/chunks/chunk-D3YVILJJ.js +20 -0
  107. package/dist/cli-bundle/chunks/{chunk-WYRZZ5ZE.js → chunk-DEZPZOQ7.js} +2 -2
  108. package/dist/cli-bundle/chunks/chunk-ECBLPN7B.js +3 -0
  109. package/dist/cli-bundle/chunks/chunk-J6ERHBV2.js +235 -0
  110. package/dist/cli-bundle/chunks/chunk-JUNJ5EKI.js +2 -0
  111. package/dist/cli-bundle/chunks/chunk-L5RCDKQ2.js +2 -0
  112. package/dist/cli-bundle/chunks/chunk-NSAPNEYH.js +2 -0
  113. package/dist/cli-bundle/chunks/chunk-OHNLSGGV.js +79 -0
  114. package/dist/cli-bundle/chunks/chunk-WQKMSFBV.js +5 -0
  115. package/dist/cli-bundle/chunks/{chunk-BAX2BYUW.js → chunk-XZ6T7YPP.js} +256 -150
  116. package/dist/cli-bundle/chunks/{chunk-JT6XF6GE.js → chunk-Z3XVXUVF.js} +4 -4
  117. package/dist/cli-bundle/chunks/register-list-query-UIHRCS6D.js +11 -0
  118. package/dist/cli-bundle/chunks/register-mutation-WHWMGRVX.js +20 -0
  119. package/dist/cli-bundle/chunks/register-operations-64YZYTC5.js +2 -0
  120. package/dist/cli-bundle/chunks/register-setup-PERI45EM.js +2 -0
  121. package/dist/cli-bundle/focused-chunks/chunk-2W4XIYOB.js +2 -0
  122. package/dist/cli-bundle/focused-chunks/chunk-2WSBXIGF.js +12 -0
  123. package/dist/cli-bundle/focused-chunks/chunk-5FHTCOHS.js +3 -0
  124. package/dist/cli-bundle/focused-chunks/chunk-7N6DOREF.js +26 -0
  125. package/dist/cli-bundle/focused-chunks/{chunk-3BZEOXLT.js → chunk-7PC4R5QB.js} +2 -2
  126. package/dist/cli-bundle/focused-chunks/chunk-BUCJUZVG.js +6 -0
  127. package/dist/cli-bundle/focused-chunks/chunk-FE3BABLJ.js +2 -0
  128. package/dist/cli-bundle/focused-chunks/chunk-IWITF53W.js +2 -0
  129. package/dist/cli-bundle/focused-chunks/chunk-OQUGRHKV.js +10 -0
  130. package/dist/cli-bundle/focused-chunks/{chunk-M6PBRFSH.js → chunk-PNKIANFZ.js} +2 -2
  131. package/dist/cli-bundle/focused-chunks/{chunk-LIJIA4TY.js → chunk-QQQ4SAUO.js} +3 -3
  132. package/dist/cli-bundle/focused-chunks/chunk-TTYXF5YD.js +177 -0
  133. package/dist/cli-bundle/focused-chunks/chunk-XNR3DM6J.js +2 -0
  134. package/dist/cli-bundle/focused-chunks/chunk-XSS3APUF.js +9 -0
  135. package/dist/cli-bundle/focused-chunks/chunk-YCDQ2N23.js +8 -0
  136. package/dist/cli-bundle/focused-chunks/chunk-YJUXGS57.js +20 -0
  137. package/dist/cli-bundle/focused-chunks/chunk-ZTCE4UO6.js +58 -0
  138. package/dist/cli-bundle/main.js +20 -20
  139. package/dist/cli-bundle/sdk-authoring.js +1 -1
  140. package/dist/cli-bundle/sdk-contracts.js +2 -2
  141. package/dist/cli-bundle/sdk-core.js +37 -37
  142. package/dist/cli-bundle/sdk-governance.js +1 -1
  143. package/dist/cli-bundle/sdk-graph.js +1 -1
  144. package/dist/cli-bundle/sdk-merge.js +42 -42
  145. package/dist/cli-bundle/sdk-query.js +1 -1
  146. package/dist/cli-bundle/sdk-runtime.js +1 -1
  147. package/dist/cli-bundle/sdk-testing.js +1 -1
  148. package/dist/cli-bundle/sdk.js +11 -11
  149. package/dist/cli.js +1 -104
  150. package/dist/core/checkpoint/checkpoint-gc.js +1 -169
  151. package/dist/core/checkpoint/mutation-checkpoint.js +2 -133
  152. package/dist/core/config/nested-settings.js +1 -534
  153. package/dist/core/config/positional-value.js +1 -109
  154. package/dist/core/diagnostics/remediation.js +1 -506
  155. package/dist/core/extensions/activation-summary-markdown.js +2 -145
  156. package/dist/core/extensions/activation-summary.js +1 -92
  157. package/dist/core/extensions/activation-transaction.js +1 -46
  158. package/dist/core/extensions/capability-usage.js +1 -173
  159. package/dist/core/extensions/command-hook-context.js +1 -13
  160. package/dist/core/extensions/command-metadata-contract.js +1 -22
  161. package/dist/core/extensions/command-visibility-tier.js +1 -29
  162. package/dist/core/extensions/contribution-inventory.js +1 -173
  163. package/dist/core/extensions/exporter-output-contract.js +1 -66
  164. package/dist/core/extensions/extension-candidate.js +1 -18
  165. package/dist/core/extensions/extension-capability-aliases.js +1 -158
  166. package/dist/core/extensions/extension-hook-runtime.js +1 -699
  167. package/dist/core/extensions/extension-policy.js +1 -599
  168. package/dist/core/extensions/extension-registries.js +1 -62
  169. package/dist/core/extensions/extension-runtime-helpers.js +1 -33
  170. package/dist/core/extensions/extension-types.js +1 -102
  171. package/dist/core/extensions/flag-definition-validation.js +1 -52
  172. package/dist/core/extensions/flag-value-types.js +1 -64
  173. package/dist/core/extensions/index.js +1 -526
  174. package/dist/core/extensions/item-field-types.js +1 -39
  175. package/dist/core/extensions/item-fields.js +1 -261
  176. package/dist/core/extensions/loader.js +1 -2223
  177. package/dist/core/extensions/manifest-schema.js +1 -69
  178. package/dist/core/extensions/module-graph-snapshot.js +1 -33
  179. package/dist/core/extensions/preflight-ownership.js +1 -41
  180. package/dist/core/extensions/registration-validation.js +1 -82
  181. package/dist/core/extensions/registration-values.js +1 -209
  182. package/dist/core/extensions/reserved-host-flags.js +1 -36
  183. package/dist/core/extensions/runtime-registrations.js +1 -67
  184. package/dist/core/extensions/service-ownership.js +1 -19
  185. package/dist/core/extensions/version-compat.js +1 -216
  186. package/dist/core/fs/fs-utils.js +2 -158
  187. package/dist/core/fs/host-environment-errors.js +1 -141
  188. package/dist/core/fs/index.js +1 -9
  189. package/dist/core/fs/path-utils.js +1 -17
  190. package/dist/core/governance/content-fields.js +1 -160
  191. package/dist/core/governance/issue-codes.js +1 -151
  192. package/dist/core/governance/metadata-coverage.js +1 -358
  193. package/dist/core/history/drift-cache.js +3 -72
  194. package/dist/core/history/drift-scan.js +1 -342
  195. package/dist/core/history/event-classification.js +1 -109
  196. package/dist/core/history/event-index.js +8 -784
  197. package/dist/core/history/history-compact-bulk.js +1 -104
  198. package/dist/core/history/history-diff.js +1 -158
  199. package/dist/core/history/history-rewrite.d.ts +6 -1
  200. package/dist/core/history/history-rewrite.js +1 -107
  201. package/dist/core/history/history-storage-stats.js +1 -102
  202. package/dist/core/history/history-stream-policy.js +1 -62
  203. package/dist/core/history/history.js +2 -617
  204. package/dist/core/history/identity.js +1 -30
  205. package/dist/core/history/index.js +1 -9
  206. package/dist/core/history/projection.js +1 -196
  207. package/dist/core/history/read.d.ts +9 -0
  208. package/dist/core/history/read.js +1 -57
  209. package/dist/core/history/replay.js +2 -439
  210. package/dist/core/history/version-address.js +1 -32
  211. package/dist/core/history/workspace-history.js +2 -433
  212. package/dist/core/io/body-file.js +1 -62
  213. package/dist/core/io/bulk-ids-input.js +1 -112
  214. package/dist/core/item/actionability.js +1 -327
  215. package/dist/core/item/dependency-reference.js +1 -20
  216. package/dist/core/item/id.js +1 -112
  217. package/dist/core/item/index.js +1 -12
  218. package/dist/core/item/item-format-version.js +1 -78
  219. package/dist/core/item/item-format.js +5 -1473
  220. package/dist/core/item/item-record.js +1 -23
  221. package/dist/core/item/item-type-definition.js +1 -133
  222. package/dist/core/item/parent-reference-policy.js +1 -57
  223. package/dist/core/item/parse.js +2 -603
  224. package/dist/core/item/plan-lifecycle.js +1 -19
  225. package/dist/core/item/priority.js +1 -61
  226. package/dist/core/item/sprint-release-format.js +1 -38
  227. package/dist/core/item/status-filter.js +1 -115
  228. package/dist/core/item/status.js +1 -43
  229. package/dist/core/item/toon-decode.js +1 -29
  230. package/dist/core/item/type-registry.js +1 -715
  231. package/dist/core/item/type-synonyms.js +1 -38
  232. package/dist/core/lock/index.js +1 -9
  233. package/dist/core/lock/lock-gc.js +1 -240
  234. package/dist/core/lock/lock.js +3 -590
  235. package/dist/core/output/mutation-projection.js +1 -217
  236. package/dist/core/output/output-control.js +1 -25
  237. package/dist/core/output/output.js +11 -494
  238. package/dist/core/output/query-summary.js +1 -58
  239. package/dist/core/output/tabular.js +1 -77
  240. package/dist/core/packages/manifest.js +1 -244
  241. package/dist/core/packages/root.js +1 -84
  242. package/dist/core/policy/workflow-policy-schema.d.ts +312 -0
  243. package/dist/core/policy/workflow-policy-schema.js +2 -0
  244. package/dist/core/policy/workflow-policy-store.d.ts +24 -0
  245. package/dist/core/policy/workflow-policy-store.js +2 -0
  246. package/dist/core/policy/workflow-policy.d.ts +139 -0
  247. package/dist/core/policy/workflow-policy.js +2 -0
  248. package/dist/core/profile/profile-describe.js +1 -83
  249. package/dist/core/profile/profile-lint.js +1 -415
  250. package/dist/core/profile/profile-plan.js +0 -0
  251. package/dist/core/profile/profile-presets.js +1 -370
  252. package/dist/core/reproducibility/context.js +1 -82
  253. package/dist/core/schema/fields-file.js +2 -288
  254. package/dist/core/schema/item-types-file.js +2 -296
  255. package/dist/core/schema/runtime-field-filters.js +1 -49
  256. package/dist/core/schema/runtime-field-values.js +1 -313
  257. package/dist/core/schema/runtime-schema.js +2 -826
  258. package/dist/core/schema/status-defs-file.js +2 -227
  259. package/dist/core/schema/status-token.js +1 -31
  260. package/dist/core/schema/type-inference.js +1 -95
  261. package/dist/core/schema/type-presets.js +1 -87
  262. package/dist/core/schema/type-workflows.js +1 -104
  263. package/dist/core/search/background-refresh.js +2 -286
  264. package/dist/core/search/bm25.js +1 -146
  265. package/dist/core/search/cache.js +2 -534
  266. package/dist/core/search/corpus.js +1 -311
  267. package/dist/core/search/embedding-batches.js +1 -163
  268. package/dist/core/search/eval.js +1 -225
  269. package/dist/core/search/http-client.js +1 -75
  270. package/dist/core/search/providers.js +1 -242
  271. package/dist/core/search/relevance.js +1 -244
  272. package/dist/core/search/semantic-defaults.js +1 -199
  273. package/dist/core/search/staleness.js +1 -30
  274. package/dist/core/search/vector-stores.js +2 -664
  275. package/dist/core/search/vectorization-metadata.js +1 -81
  276. package/dist/core/sentry/helpers.js +1 -272
  277. package/dist/core/sentry/instrument.js +1 -387
  278. package/dist/core/session/session-state.js +1 -260
  279. package/dist/core/shared/agent-session-context.js +1 -133
  280. package/dist/core/shared/author.js +1 -1172
  281. package/dist/core/shared/command-types.js +1 -4
  282. package/dist/core/shared/conflict-markers.js +1 -31
  283. package/dist/core/shared/constants.js +1 -405
  284. package/dist/core/shared/errors.js +1 -20
  285. package/dist/core/shared/html-entity-decode.js +1 -131
  286. package/dist/core/shared/index.js +1 -12
  287. package/dist/core/shared/item-metadata-contract.js +1 -89
  288. package/dist/core/shared/lazy-module.js +1 -16
  289. package/dist/core/shared/levenshtein.js +1 -61
  290. package/dist/core/shared/memo.js +1 -19
  291. package/dist/core/shared/numeric-parsers.js +1 -20
  292. package/dist/core/shared/option-alias-visibility.js +1 -67
  293. package/dist/core/shared/primitives.js +1 -127
  294. package/dist/core/shared/serial-queue.js +1 -79
  295. package/dist/core/shared/serialization.js +1 -210
  296. package/dist/core/shared/split-comma-list.js +1 -30
  297. package/dist/core/shared/text-normalization.js +1 -38
  298. package/dist/core/shared/time.js +1 -306
  299. package/dist/core/store/index.js +1 -12
  300. package/dist/core/store/item-format-migration.js +1 -125
  301. package/dist/core/store/item-metadata-cache.js +1 -1116
  302. package/dist/core/store/item-metadata-query-index.js +9 -394
  303. package/dist/core/store/item-metadata-read-work.js +1 -43
  304. package/dist/core/store/item-store.js +1 -693
  305. package/dist/core/store/paths.d.ts +1 -1
  306. package/dist/core/store/paths.js +1 -214
  307. package/dist/core/store/settings-read-cache.js +1 -85
  308. package/dist/core/store/settings-validator.d.ts +1 -0
  309. package/dist/core/store/settings-validator.js +1 -421
  310. package/dist/core/store/settings.js +3 -1309
  311. package/dist/core/store/tracker-preflight.js +1 -141
  312. package/dist/core/telemetry/consent.js +5 -108
  313. package/dist/core/telemetry/observability.js +1 -246
  314. package/dist/core/telemetry/runtime.js +4 -1988
  315. package/dist/core/test/background-runs.js +4 -945
  316. package/dist/core/test/item-test-run-tracking.js +1 -63
  317. package/dist/core/test/run-selectors.js +1 -120
  318. package/dist/core/validate/estimate-defaults.js +1 -89
  319. package/dist/core/validate/fix-planning.js +1 -189
  320. package/dist/core/validate/linked-artifact-reference.js +1 -36
  321. package/dist/core/validate/missing-by-type.js +1 -34
  322. package/dist/core/validate/missing-link-owners.js +1 -95
  323. package/dist/core/validate/stale-file-classification.js +1 -82
  324. package/dist/mcp/http-server.js +5 -448
  325. package/dist/mcp/legacy-adapter.js +1 -77
  326. package/dist/mcp/runtime-capabilities.js +1 -200
  327. package/dist/mcp/server.js +4 -1233
  328. package/dist/mcp/tool-definitions.js +1 -804
  329. package/dist/sdk/actionability.js +1 -13
  330. package/dist/sdk/agent/closed-domain-contracts.js +1 -161
  331. package/dist/sdk/agent/command-recovery.js +1 -59
  332. package/dist/sdk/agent/command-suggestions.js +1 -66
  333. package/dist/sdk/agent/create-option-policy.js +1 -31
  334. package/dist/sdk/agent/identity-config.js +1 -106
  335. package/dist/sdk/agent/item-addressing.js +1 -207
  336. package/dist/sdk/agent/refusal-closure-census.js +1 -151
  337. package/dist/sdk/agent/refusal-closure.js +1 -133
  338. package/dist/sdk/agent/refusal-corpus-contracts.js +1 -193
  339. package/dist/sdk/agent/refusal-reachability.js +1 -593
  340. package/dist/sdk/agent/subcommand-recovery.js +1 -83
  341. package/dist/sdk/agent/task-transcript-contracts.js +1 -197
  342. package/dist/sdk/agent/tracker-preflight-contracts.js +1 -126
  343. package/dist/sdk/agent-capability-contracts.js +1 -428
  344. package/dist/sdk/agent-session-context.js +1 -9
  345. package/dist/sdk/annotations.js +1 -448
  346. package/dist/sdk/author-attribution.js +1 -468
  347. package/dist/sdk/authoring.js +1 -20
  348. package/dist/sdk/cli-bootstrap.js +1 -838
  349. package/dist/sdk/cli-contracts/agent-output-contracts.d.ts +1 -1
  350. package/dist/sdk/cli-contracts/agent-output-contracts.js +4 -476
  351. package/dist/sdk/cli-contracts/bootstrap-command-scanner.js +1 -79
  352. package/dist/sdk/cli-contracts/command-aliases.d.ts +4 -0
  353. package/dist/sdk/cli-contracts/command-aliases.js +1 -107
  354. package/dist/sdk/cli-contracts/command-exit-contracts.js +1 -151
  355. package/dist/sdk/cli-contracts/commander-mutation-options.js +1 -1081
  356. package/dist/sdk/cli-contracts/commander-types.js +1 -159
  357. package/dist/sdk/cli-contracts/completeness.js +1 -393
  358. package/dist/sdk/cli-contracts/enum-contracts.d.ts +1 -1
  359. package/dist/sdk/cli-contracts/enum-contracts.js +1 -222
  360. package/dist/sdk/cli-contracts/flag-contracts.js +1 -1947
  361. package/dist/sdk/cli-contracts/flag-lexicon-contracts.js +1 -347
  362. package/dist/sdk/cli-contracts/grammar-contracts.js +1 -986
  363. package/dist/sdk/cli-contracts/registration-helpers.js +7 -990
  364. package/dist/sdk/cli-contracts/runtime-contracts.d.ts +5 -0
  365. package/dist/sdk/cli-contracts/runtime-contracts.js +1 -2090
  366. package/dist/sdk/cli-contracts/schemas/assurance-definition.js +1 -324
  367. package/dist/sdk/cli-contracts/string-lists.js +1 -16
  368. package/dist/sdk/cli-contracts/tool-option-contracts.js +1 -461
  369. package/dist/sdk/cli-contracts/tool-parameter-tables.js +1 -2167
  370. package/dist/sdk/cli-contracts/tool-schema.d.ts +3 -1
  371. package/dist/sdk/cli-contracts/tool-schema.js +1 -1664
  372. package/dist/sdk/cli-contracts/typed-action-inputs.js +1 -4
  373. package/dist/sdk/cli-contracts.d.ts +1 -1
  374. package/dist/sdk/cli-contracts.js +1 -17
  375. package/dist/sdk/cli-program.js +1 -49
  376. package/dist/sdk/command-line.d.ts +2 -5
  377. package/dist/sdk/command-line.js +1 -78
  378. package/dist/sdk/comments.js +1 -133
  379. package/dist/sdk/compile-cache.js +1 -73
  380. package/dist/sdk/completion.js +174 -839
  381. package/dist/sdk/compose.js +1 -1090
  382. package/dist/sdk/config.js +1 -1204
  383. package/dist/sdk/context/recency.js +1 -33
  384. package/dist/sdk/context/semantic-session-attribution.js +1 -82
  385. package/dist/sdk/context/usage-egress.js +1 -29
  386. package/dist/sdk/context/usage-ledger.js +3 -185
  387. package/dist/sdk/context-intent-contracts.js +1 -709
  388. package/dist/sdk/context-intent-runtime.js +1 -115
  389. package/dist/sdk/context-packing.js +1 -218
  390. package/dist/sdk/context-relevance.js +1 -503
  391. package/dist/sdk/context-signal-store.js +2 -426
  392. package/dist/sdk/context-usage.js +1 -367
  393. package/dist/sdk/contracts.js +1 -23
  394. package/dist/sdk/core-governance.js +1 -14
  395. package/dist/sdk/core.js +1 -14
  396. package/dist/sdk/corpus-shape.js +1 -401
  397. package/dist/sdk/define.js +1 -220
  398. package/dist/sdk/dependencies.js +1 -718
  399. package/dist/sdk/dependency-flag-validation.js +1 -156
  400. package/dist/sdk/dependency-provenance.js +1 -135
  401. package/dist/sdk/docs.js +1 -14
  402. package/dist/sdk/duplicates.js +1 -40
  403. package/dist/sdk/environment/agent-environment.js +1 -466
  404. package/dist/sdk/environment/host-environment-errors.js +1 -8
  405. package/dist/sdk/environment/project-runtime-compatibility.js +1 -481
  406. package/dist/sdk/environment/source-context.js +1 -28
  407. package/dist/sdk/environment/tracker-preflight.js +1 -9
  408. package/dist/sdk/error-code-catalog.js +1 -153
  409. package/dist/sdk/error-runtime.js +1 -58
  410. package/dist/sdk/errors.js +1 -58
  411. package/dist/sdk/eval.js +1 -190
  412. package/dist/sdk/extension/author-manifest.js +1 -92
  413. package/dist/sdk/extension/bundled-catalog.js +1 -332
  414. package/dist/sdk/extension/concurrency.js +1 -25
  415. package/dist/sdk/extension/copy-scope.d.ts +2 -0
  416. package/dist/sdk/extension/copy-scope.js +2 -0
  417. package/dist/sdk/extension/custom-field-collisions.js +1 -30
  418. package/dist/sdk/extension/describe.js +3 -189
  419. package/dist/sdk/extension/doctor.js +1 -606
  420. package/dist/sdk/extension/install-plan.d.ts +69 -0
  421. package/dist/sdk/extension/install-plan.js +2 -0
  422. package/dist/sdk/extension/install-receipts.d.ts +7 -0
  423. package/dist/sdk/extension/install-receipts.js +2 -0
  424. package/dist/sdk/extension/install-runtime.js +3 -313
  425. package/dist/sdk/extension/install-snapshot.js +1 -66
  426. package/dist/sdk/extension/install-sources.js +5 -1057
  427. package/dist/sdk/extension/managed-state.js +2 -252
  428. package/dist/sdk/extension/migrations.js +2 -174
  429. package/dist/sdk/extension/output-ownership.js +1 -25
  430. package/dist/sdk/extension/runtime-summary.js +1 -18
  431. package/dist/sdk/extension/scaffold.js +4 -2308
  432. package/dist/sdk/extension/shared.js +1 -147
  433. package/dist/sdk/extension/source-resolution.js +1 -65
  434. package/dist/sdk/extension/update-check.js +1 -67
  435. package/dist/sdk/extension-command-context.js +1 -44
  436. package/dist/sdk/extension-contracts.js +1 -73
  437. package/dist/sdk/extension.d.ts +7 -2
  438. package/dist/sdk/extension.js +1 -2196
  439. package/dist/sdk/files.js +1 -535
  440. package/dist/sdk/flag-invocation-contracts.d.ts +0 -5
  441. package/dist/sdk/flag-invocation-contracts.js +1 -344
  442. package/dist/sdk/generated/generated-error-code-catalog-part-1.js +1 -2224
  443. package/dist/sdk/generated/generated-error-code-catalog-part-2.js +1 -2236
  444. package/dist/sdk/generated-error-code-catalog.js +1 -16
  445. package/dist/sdk/governance/assurance-action-contracts.js +1 -4
  446. package/dist/sdk/governance/assurance-action.js +1 -411
  447. package/dist/sdk/governance/assurance-limits.js +1 -10
  448. package/dist/sdk/governance/assurance-mutation-error.js +1 -81
  449. package/dist/sdk/governance/assurance-presets.js +1 -135
  450. package/dist/sdk/governance/assurance-runtime.js +1 -238
  451. package/dist/sdk/governance/assurance.js +4 -1182
  452. package/dist/sdk/governance/boundary-fixtures.js +1 -200
  453. package/dist/sdk/governance/coverage-assurance.js +1 -60
  454. package/dist/sdk/governance/defect-recurrence-coverage.js +1 -188
  455. package/dist/sdk/governance/defect-recurrence-graph.js +1 -120
  456. package/dist/sdk/governance/defect-recurrence-signals.js +1 -24
  457. package/dist/sdk/governance/defect-recurrence.js +1 -623
  458. package/dist/sdk/governance/extension-host-version.js +1 -115
  459. package/dist/sdk/governance/gc.js +1 -368
  460. package/dist/sdk/governance/health.js +1 -2367
  461. package/dist/sdk/governance/hierarchy-validation.js +1 -108
  462. package/dist/sdk/governance/linked-file-report.js +1 -71
  463. package/dist/sdk/governance/merge-receipt-history.js +1 -206
  464. package/dist/sdk/governance/provenance-health.js +1 -282
  465. package/dist/sdk/governance/reindex.js +4 -761
  466. package/dist/sdk/governance/stale-work.js +1 -82
  467. package/dist/sdk/governance/status-role-diagnostics.js +1 -35
  468. package/dist/sdk/governance/storage-integrity.js +1 -280
  469. package/dist/sdk/governance/tracked-runtime-cache.js +1 -106
  470. package/dist/sdk/governance/upgrade.js +2 -327
  471. package/dist/sdk/governance/validate-history-drift.js +1 -81
  472. package/dist/sdk/governance/validate-item-reader.js +1 -17
  473. package/dist/sdk/governance/validate-normalization.js +1 -36
  474. package/dist/sdk/governance/validate.d.ts +3 -1
  475. package/dist/sdk/governance/validate.js +1 -2261
  476. package/dist/sdk/governance/workflow-completeness.d.ts +32 -0
  477. package/dist/sdk/governance/workflow-completeness.js +2 -0
  478. package/dist/sdk/governance/workflow-policy.d.ts +47 -0
  479. package/dist/sdk/governance/workflow-policy.js +4 -0
  480. package/dist/sdk/governance/workspace-position.js +1 -163
  481. package/dist/sdk/governance.d.ts +2 -0
  482. package/dist/sdk/governance.js +1 -31
  483. package/dist/sdk/graph/adapter.js +1 -181
  484. package/dist/sdk/graph/analytics.js +1 -474
  485. package/dist/sdk/graph/assembly.js +1 -377
  486. package/dist/sdk/graph/cache.js +1 -160
  487. package/dist/sdk/graph/centrality.js +1 -258
  488. package/dist/sdk/graph/conformance.js +1 -130
  489. package/dist/sdk/graph/deadline-scheduling.d.ts +90 -0
  490. package/dist/sdk/graph/deadline-scheduling.js +2 -0
  491. package/dist/sdk/graph/durable-cache.d.ts +1 -1
  492. package/dist/sdk/graph/durable-cache.js +1 -361
  493. package/dist/sdk/graph/governance-contracts.js +1 -34
  494. package/dist/sdk/graph/governance.d.ts +13 -1
  495. package/dist/sdk/graph/governance.js +1 -735
  496. package/dist/sdk/graph/hierarchy-integrity.js +1 -310
  497. package/dist/sdk/graph/index.d.ts +3 -2
  498. package/dist/sdk/graph/index.js +1 -26
  499. package/dist/sdk/graph/lifecycle-coverage.d.ts +32 -0
  500. package/dist/sdk/graph/lifecycle-coverage.js +2 -0
  501. package/dist/sdk/graph/mutation-advisory.js +1 -176
  502. package/dist/sdk/graph/remediation.js +1 -197
  503. package/dist/sdk/graph/run.d.ts +15 -1
  504. package/dist/sdk/graph/run.js +1 -768
  505. package/dist/sdk/graph/scheduling.js +1 -124
  506. package/dist/sdk/graph/traversal.js +1 -284
  507. package/dist/sdk/graph/workspace-relationship-kind-registry.js +1 -27
  508. package/dist/sdk/graph.js +1 -15
  509. package/dist/sdk/guide-topics.js +1 -707
  510. package/dist/sdk/guide.js +1 -279
  511. package/dist/sdk/history/maintenance.d.ts +71 -0
  512. package/dist/sdk/history/maintenance.js +2 -0
  513. package/dist/sdk/history/salvage.js +2 -247
  514. package/dist/sdk/history/subject.d.ts +19 -0
  515. package/dist/sdk/history/subject.js +2 -0
  516. package/dist/sdk/history-analytics.js +1 -282
  517. package/dist/sdk/history-compact.js +1 -527
  518. package/dist/sdk/history-mcp.js +1 -68
  519. package/dist/sdk/history-provenance.js +1 -182
  520. package/dist/sdk/history-read.js +1 -96
  521. package/dist/sdk/history-redact.d.ts +1 -14
  522. package/dist/sdk/history-redact.js +1 -643
  523. package/dist/sdk/history-repair.d.ts +5 -0
  524. package/dist/sdk/history-repair.js +1 -657
  525. package/dist/sdk/improvement-ledger-validation.js +1 -62
  526. package/dist/sdk/improvement-ledger.js +2 -257
  527. package/dist/sdk/index.d.ts +4 -1
  528. package/dist/sdk/index.js +1 -183
  529. package/dist/sdk/init-agent-guidance.js +2 -496
  530. package/dist/sdk/init.js +2 -820
  531. package/dist/sdk/invocation-author.js +1 -39
  532. package/dist/sdk/item-children.js +1 -90
  533. package/dist/sdk/item-metadata-index.js +1 -15
  534. package/dist/sdk/item-schedule.js +1 -27
  535. package/dist/sdk/item-transaction.js +1 -396
  536. package/dist/sdk/learnings.js +1 -29
  537. package/dist/sdk/lifecycle/append.js +2 -53
  538. package/dist/sdk/lifecycle/claim.d.ts +2 -0
  539. package/dist/sdk/lifecycle/claim.js +1 -242
  540. package/dist/sdk/lifecycle/close-many.js +1 -438
  541. package/dist/sdk/lifecycle/close.js +1 -468
  542. package/dist/sdk/lifecycle/copy.js +1 -212
  543. package/dist/sdk/lifecycle/create.js +1 -1949
  544. package/dist/sdk/lifecycle/delete.js +1 -45
  545. package/dist/sdk/lifecycle/event-validation-messages.js +1 -91
  546. package/dist/sdk/lifecycle/focus.js +1 -91
  547. package/dist/sdk/lifecycle/hierarchy-mutation-lock.js +1 -24
  548. package/dist/sdk/lifecycle/legacy-none-tokens.js +1 -149
  549. package/dist/sdk/lifecycle/lifecycle-transitions.js +1 -40
  550. package/dist/sdk/lifecycle/mcp-actions.d.ts +2 -0
  551. package/dist/sdk/lifecycle/mcp-actions.js +1 -51
  552. package/dist/sdk/lifecycle/metadata-normalizers.js +1 -46
  553. package/dist/sdk/lifecycle/mutation-command-options.js +1 -9
  554. package/dist/sdk/lifecycle/plan.js +1 -1606
  555. package/dist/sdk/lifecycle/recurrence-parsers.d.ts +1 -1
  556. package/dist/sdk/lifecycle/recurrence-parsers.js +1 -147
  557. package/dist/sdk/lifecycle/reopen.js +1 -68
  558. package/dist/sdk/lifecycle/repeatable-metadata-parsers.js +1 -143
  559. package/dist/sdk/lifecycle/restore.d.ts +1 -0
  560. package/dist/sdk/lifecycle/restore.js +1 -330
  561. package/dist/sdk/lifecycle/shared-unset-fields.js +1 -295
  562. package/dist/sdk/lifecycle/update-many.js +1 -861
  563. package/dist/sdk/lifecycle/update.js +1 -2136
  564. package/dist/sdk/lifecycle-completion.js +1 -92
  565. package/dist/sdk/lifecycle-policy.js +1 -120
  566. package/dist/sdk/linked-artifacts.js +1 -530
  567. package/dist/sdk/mcp/apps.js +4 -133
  568. package/dist/sdk/mcp/authorization.js +1 -404
  569. package/dist/sdk/mcp/discovery.js +1 -494
  570. package/dist/sdk/mcp/interactions.js +1 -336
  571. package/dist/sdk/mcp/protocol.d.ts +7 -0
  572. package/dist/sdk/mcp/protocol.js +1 -184
  573. package/dist/sdk/mcp/skills.js +1 -389
  574. package/dist/sdk/mcp/subscriptions.js +1 -211
  575. package/dist/sdk/mcp/tasks.js +2 -430
  576. package/dist/sdk/mcp/transport.js +1 -260
  577. package/dist/sdk/merge/abandoned-receipts.js +1 -46
  578. package/dist/sdk/merge/driver.js +1 -212
  579. package/dist/sdk/merge/index.js +1 -16
  580. package/dist/sdk/merge/install.js +3 -561
  581. package/dist/sdk/merge/receipt-file-boundary.js +1 -46
  582. package/dist/sdk/merge/receipt-operation.js +1 -96
  583. package/dist/sdk/merge/receipt-schema.js +1 -397
  584. package/dist/sdk/merge/receipts.js +4 -525
  585. package/dist/sdk/merge/reconcile.js +1 -352
  586. package/dist/sdk/merge/three-way.js +3 -775
  587. package/dist/sdk/merge.js +1 -10
  588. package/dist/sdk/mutation-events.js +1 -292
  589. package/dist/sdk/mutation-guard.js +1 -216
  590. package/dist/sdk/notes.js +1 -139
  591. package/dist/sdk/output-contracts.js +1 -172
  592. package/dist/sdk/output-projection.js +1 -430
  593. package/dist/sdk/output-token-accounting.js +1 -140
  594. package/dist/sdk/output.js +1 -64
  595. package/dist/sdk/ownership-source.js +1 -21
  596. package/dist/sdk/package-import-adapters.js +1 -442
  597. package/dist/sdk/package-migrations.js +1 -20
  598. package/dist/sdk/package-runtime-options.js +1 -80
  599. package/dist/sdk/pagination.js +1 -162
  600. package/dist/sdk/profile.js +1 -454
  601. package/dist/sdk/provenance.js +1 -258
  602. package/dist/sdk/public-surface.json +1 -1
  603. package/dist/sdk/query/activity.js +1 -401
  604. package/dist/sdk/query/aggregate.d.ts +16 -0
  605. package/dist/sdk/query/aggregate.js +1 -390
  606. package/dist/sdk/query/calendar.js +1 -964
  607. package/dist/sdk/query/complete-list.js +1 -215
  608. package/dist/sdk/query/context.js +1 -1702
  609. package/dist/sdk/query/duplicate-candidates.js +1 -70
  610. package/dist/sdk/query/get.js +1 -450
  611. package/dist/sdk/query/history.js +1 -186
  612. package/dist/sdk/query/item-filter-options.js +1 -9
  613. package/dist/sdk/query/light-metadata.js +1 -18
  614. package/dist/sdk/query/list-filter-shared.js +1 -81
  615. package/dist/sdk/query/list.js +1 -1304
  616. package/dist/sdk/query/multi-value-filters.js +1 -78
  617. package/dist/sdk/query/next.js +1 -513
  618. package/dist/sdk/query/parsers.js +1 -44
  619. package/dist/sdk/query/projection-contracts.js +1 -184
  620. package/dist/sdk/query/search-contracts.d.ts +27 -0
  621. package/dist/sdk/query/search-contracts.js +1 -230
  622. package/dist/sdk/query/search-pagination.js +1 -35
  623. package/dist/sdk/query/search-rendering.js +1 -105
  624. package/dist/sdk/query/search.d.ts +6 -4
  625. package/dist/sdk/query/search.js +2 -1987
  626. package/dist/sdk/query.js +1 -35
  627. package/dist/sdk/read-output/continuation.js +1 -194
  628. package/dist/sdk/read-output-budget.js +1 -135
  629. package/dist/sdk/read-output-contracts.d.ts +1 -1
  630. package/dist/sdk/read-output-contracts.js +1 -1225
  631. package/dist/sdk/read-output-rows.js +1 -186
  632. package/dist/sdk/read-output-session.js +1 -208
  633. package/dist/sdk/relationship-analytics.js +1 -410
  634. package/dist/sdk/relationship-context.js +1 -284
  635. package/dist/sdk/relationship-history.js +4 -519
  636. package/dist/sdk/relationship-kinds/contract.js +1 -22
  637. package/dist/sdk/relationship-migration.js +1 -77
  638. package/dist/sdk/relationships.js +1 -579
  639. package/dist/sdk/reproducibility/process.js +1 -87
  640. package/dist/sdk/runtime-action-aliases.js +1 -59
  641. package/dist/sdk/runtime-extended-actions.js +1 -177
  642. package/dist/sdk/runtime-input.js +1 -614
  643. package/dist/sdk/runtime-primitives.js +1 -84
  644. package/dist/sdk/runtime-public-contracts.d.ts +2 -1
  645. package/dist/sdk/runtime-public-contracts.js +1 -4
  646. package/dist/sdk/runtime-stats-options.js +1 -38
  647. package/dist/sdk/runtime.d.ts +4 -0
  648. package/dist/sdk/runtime.js +1 -1928
  649. package/dist/sdk/scheduling-shortcuts.js +1 -63
  650. package/dist/sdk/schema-migration.js +3 -856
  651. package/dist/sdk/schema.d.ts +2 -1
  652. package/dist/sdk/schema.js +1 -1376
  653. package/dist/sdk/search-refresh-worker.js +1 -18
  654. package/dist/sdk/similarity-scoring.js +1 -53
  655. package/dist/sdk/similarity.js +1 -326
  656. package/dist/sdk/start-task-status.js +1 -14
  657. package/dist/sdk/stats.js +1 -270
  658. package/dist/sdk/structured-mutations.js +1 -580
  659. package/dist/sdk/telemetry-flush.js +1 -13
  660. package/dist/sdk/telemetry.js +1 -405
  661. package/dist/sdk/templates.js +2 -292
  662. package/dist/sdk/test/batch.js +2 -509
  663. package/dist/sdk/test/entry.js +1 -70
  664. package/dist/sdk/test/execution.js +6 -2211
  665. package/dist/sdk/test/linked-command-detection.js +1 -546
  666. package/dist/sdk/test/measurements.js +1 -91
  667. package/dist/sdk/test/parsers.js +1 -545
  668. package/dist/sdk/test/runs.js +1 -193
  669. package/dist/sdk/test/trust.js +2 -206
  670. package/dist/sdk/testing.js +4 -1391
  671. package/dist/sdk/traceability/runtime-files-lookup.js +1 -32
  672. package/dist/sdk/traceability/source-traceability.js +1 -292
  673. package/dist/sdk/tracker-root-discovery.js +1 -9
  674. package/dist/sdk/workspace-contracts-cache.js +1 -28
  675. package/dist/sdk/workspace-contracts.js +1 -33
  676. package/dist/sdk/workspace-memory.js +2 -318
  677. package/dist/sdk/workspace-recipe.js +1 -71
  678. package/dist/sdk/workspace-snapshot.js +4 -613
  679. package/dist/sdk/workspace-transaction-gc.js +1 -149
  680. package/dist/sdk/workspace-transaction.js +2 -363
  681. package/dist/sdk/workspace.js +3 -127
  682. package/dist/types/index.js +1 -9
  683. package/dist/types.d.ts +4 -0
  684. package/dist/types.js +1 -245
  685. package/docs/AGENT_GUIDE.md +1 -1
  686. package/docs/COMMANDS.md +10 -0
  687. package/docs/CONFIGURATION.md +12 -1
  688. package/docs/CONTEXT_ALGORITHM_PORTFOLIO.md +167 -0
  689. package/docs/DIAGNOSTIC_OUTPUT_CONTRACTS.md +9 -3
  690. package/docs/EXTENSIONS.md +1 -0
  691. package/docs/HISTORY_MAINTENANCE.md +125 -0
  692. package/docs/MCP_2026_07_28_CONFORMANCE.md +20 -10
  693. package/docs/PACKAGE_EVIDENCE.md +92 -0
  694. package/docs/PLANNING_MEASUREMENTS.md +183 -0
  695. package/docs/README.md +4 -0
  696. package/docs/READ_OUTPUT_CONTRACTS.md +5 -0
  697. package/docs/SCRIPTING.md +21 -0
  698. package/docs/TESTING.md +33 -0
  699. package/docs/WORKFLOW_POLICIES.md +129 -0
  700. package/docs/generated/FLAG_LEXICON_BUDGETS.md +7 -7
  701. package/docs/generated/REFUSAL_CLOSURE_CENSUS.md +11 -5
  702. package/marketplace.json +2 -2
  703. package/package.json +5 -5
  704. package/packages/pm-beads/package.json +1 -1
  705. package/packages/pm-calendar/package.json +1 -1
  706. package/packages/pm-command-kit/package.json +1 -1
  707. package/packages/pm-digital-twin/package.json +1 -1
  708. package/packages/pm-governance-audit/package.json +1 -1
  709. package/packages/pm-guide-shell/package.json +1 -1
  710. package/packages/pm-kanban/package.json +1 -1
  711. package/packages/pm-lifecycle-hooks/package.json +1 -1
  712. package/packages/pm-linked-test-adapters/package.json +1 -1
  713. package/packages/pm-search-advanced/package.json +1 -1
  714. package/packages/pm-templates/package.json +1 -1
  715. package/packages/pm-todos/package.json +1 -1
  716. package/packages/pm-vcs/package.json +1 -1
  717. package/plugins/pm-claude/.claude-plugin/plugin.json +1 -1
  718. package/plugins/pm-codex/.codex-plugin/plugin.json +1 -1
  719. package/scripts/finalize-build.mjs +45 -3
  720. package/dist/cli-bundle/chunks/chunk-AZDFJGH6.js +0 -9
  721. package/dist/cli-bundle/chunks/chunk-CKOL5U7J.js +0 -77
  722. package/dist/cli-bundle/chunks/chunk-JX4DH4WC.js +0 -3
  723. package/dist/cli-bundle/chunks/chunk-OF76PSDQ.js +0 -5
  724. package/dist/cli-bundle/chunks/chunk-QUWFABDM.js +0 -232
  725. package/dist/cli-bundle/chunks/chunk-QWRRFYK3.js +0 -2
  726. package/dist/cli-bundle/chunks/chunk-RWWBOWJ5.js +0 -2
  727. package/dist/cli-bundle/chunks/chunk-WGAOYSYH.js +0 -40
  728. package/dist/cli-bundle/chunks/chunk-WI2AYPA7.js +0 -2
  729. package/dist/cli-bundle/chunks/register-list-query-5JL52D33.js +0 -11
  730. package/dist/cli-bundle/chunks/register-mutation-ZPG7KMVP.js +0 -20
  731. package/dist/cli-bundle/chunks/register-operations-I5W3KMGB.js +0 -2
  732. package/dist/cli-bundle/chunks/register-setup-H4SVAVX7.js +0 -2
  733. package/dist/cli-bundle/focused-chunks/chunk-AL5ON6K6.js +0 -2
  734. package/dist/cli-bundle/focused-chunks/chunk-CHC2IDXA.js +0 -6
  735. package/dist/cli-bundle/focused-chunks/chunk-CK6QFAPZ.js +0 -20
  736. package/dist/cli-bundle/focused-chunks/chunk-EZR3GHFE.js +0 -2
  737. package/dist/cli-bundle/focused-chunks/chunk-H2WJWK7L.js +0 -56
  738. package/dist/cli-bundle/focused-chunks/chunk-NTPY5GSO.js +0 -3
  739. package/dist/cli-bundle/focused-chunks/chunk-P5O7MP5Y.js +0 -2
  740. package/dist/cli-bundle/focused-chunks/chunk-PDMW2E36.js +0 -177
  741. package/dist/cli-bundle/focused-chunks/chunk-PEFABF7E.js +0 -26
  742. package/dist/cli-bundle/focused-chunks/chunk-QTVCLMSZ.js +0 -6
  743. package/dist/cli-bundle/focused-chunks/chunk-QTZRBUYA.js +0 -8
  744. package/dist/cli-bundle/focused-chunks/chunk-SGQST3PQ.js +0 -12
  745. package/dist/cli-bundle/focused-chunks/chunk-UKHASMMP.js +0 -10
  746. package/dist/cli-bundle/focused-chunks/chunk-ZPEKQHOC.js +0 -2
@@ -1,1235 +1,6 @@
1
1
  #!/usr/bin/env node
2
- /**
3
- * @module mcp/server
4
- *
5
- * Runs the MCP server adapter that exposes pm actions and contracts to external agents.
6
- */
7
-
8
- !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1950da06-8c27-5506-bc64-4bf51c1a3f1c")}catch(e){}}();
9
- import { realpathSync } from "node:fs";
10
- import { readFile } from "node:fs/promises";
11
- import path from "node:path";
12
- import readline from "node:readline";
13
- import { fileURLToPath } from "node:url";
14
- import { resolvePmCliVersion, PmCliError, decodeHtmlEntitiesInOptions, levenshteinDistanceWithinLimit, asRecordClone, createSerialQueue, evaluateMutationGuard, getSettingsPath, isMutationAction, pathExists, readSettings, runWithHarnessDetectionSignals, runWithWorkspaceHarnessSignalDescriptors, boundAgentEpisodeIdentity, } from "../sdk/runtime-primitives.js";
15
- import { pmToolActionNestedOptionKeys } from "../sdk/cli-contracts/tool-schema.js";
16
- import { readRequiredString, runAction, runWithActiveExtensions, } from "../sdk/runtime.js";
17
- import { NARROW_TOOL_ACTIONS, TOOLS } from "./tool-definitions.js";
18
- import { normalizeWorkspaceToolArguments, resolveMcpToolAccess, resolveMcpToolSurface, } from "./runtime-capabilities.js";
19
- import { PM_MCP_PROMPT_CONTRACTS, PM_MCP_RESOURCE_CONTRACTS, } from "../sdk/agent-capability-contracts.js";
20
- import { PM_MCP_ENTRY_TOOL_NAMES, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION, PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY, discoverPmTools, parsePmToolDiscoveryOptions, } from "../sdk/mcp/discovery.js";
21
- import { commitItemMutations } from "../sdk/item-transaction.js";
22
- import { isRuntimeRecord, markMcpMutationTransportInput, } from "../sdk/runtime-input.js";
23
- import { attachOutputTokenAccounting } from "../sdk/output-token-accounting.js";
24
- import { createReproducibleProcessRunner, runWithReproducibleProcessEnvironment, } from "../sdk/reproducibility/process.js";
25
- import { parseAtomicMutationControls, resolveItemMutationDocument, } from "../sdk/structured-mutations.js";
26
- import { resolveAuthor, resolvePmRoot, resolveWorkspaceRoot, } from "../sdk/runtime-primitives.js";
27
- import { PM_MCP_ERROR_CODES, PM_MCP_META_KEYS, PM_MCP_PROTOCOL_VERSION, PmMcpProtocolError, attachMcpServerInfo, buildMcpCompleteResult, buildMcpDiscoverResult, hasMcpClientExtension, isMcpRecord, resolveMcpRequestContext, } from "../sdk/mcp/protocol.js";
28
- import { PmMcpInputRequiredError, buildMcpInputRequiredResult, parseMcpInputResponses, validateMcpJsonSchema, withMcpCachePolicy, } from "../sdk/mcp/interactions.js";
29
- import { PM_MCP_TASKS_EXTENSION, createMcpTaskStore, } from "../sdk/mcp/tasks.js";
30
- import { PmMcpSubscriptionRegistry, } from "../sdk/mcp/subscriptions.js";
31
- import { extractMcpTraceContext, runWithMcpTraceContext, } from "../sdk/mcp/authorization.js";
32
- import { LegacyMcpAdapter } from "./legacy-adapter.js";
33
- import { PM_MCP_APP_CONTRACTS, PM_MCP_APP_MIME_TYPE, PM_MCP_APPS_EXTENSION, PM_MCP_APPS_SERVER_CAPABILITY, decoratePmMcpToolsWithApps, findPmMcpAppByUri, hasPmMcpAppsCapability, renderPmMcpAppHtml, } from "../sdk/mcp/apps.js";
34
- import { PM_MCP_SKILLS_EXTENSION, PM_MCP_SKILLS_SERVER_CAPABILITY, PmMcpSkillRegistry, assertPmMcpSkillsCapability, } from "../sdk/mcp/skills.js";
35
- function runMcpAction(args) {
36
- return runAction(markMcpMutationTransportInput(args));
37
- }
38
- const PM_PACKAGE_ROOT_ENV = "PM_CLI_PACKAGE_ROOT";
39
- function resolvePmPackageRoot() {
40
- return fileURLToPath(new URL("../..", import.meta.url));
41
- }
42
- if (typeof process.env[PM_PACKAGE_ROOT_ENV] !== "string" ||
43
- process.env[PM_PACKAGE_ROOT_ENV]?.trim().length === 0) {
44
- process.env[PM_PACKAGE_ROOT_ENV] = resolvePmPackageRoot();
45
- }
46
- // Reflect the real package.json version so agents/telemetry can identify the
47
- // build serving requests (was hard-coded "1.0.0"; see pm-2nvw).
48
- const PM_MCP_SERVER_VERSION = resolvePmCliVersion(import.meta.url, ["../.."]) ?? "0.0.0";
49
- const PM_MCP_SERVER_INFO = {
50
- name: "pm-mcp",
51
- version: PM_MCP_SERVER_VERSION,
52
- description: "Stateless project-context management through pm SDK contracts.",
53
- websiteUrl: "https://github.com/unbraind/pm-cli",
54
- };
55
- const PM_MCP_SERVER_CAPABILITIES = {
56
- prompts: { listChanged: true },
57
- resources: { listChanged: true, subscribe: true },
58
- tools: { listChanged: true },
59
- extensions: {
60
- [PM_MCP_TASKS_EXTENSION]: {},
61
- [PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY,
62
- [PM_MCP_SKILLS_EXTENSION]: PM_MCP_SKILLS_SERVER_CAPABILITY,
63
- [PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]: PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,
64
- },
65
- };
66
- const PM_MCP_SUBSCRIPTIONS = new Map();
67
- function createMcpSubscriptionRegistry() {
68
- return new PmMcpSubscriptionRegistry({
69
- capabilities: PM_MCP_SERVER_CAPABILITIES,
70
- serverInfo: PM_MCP_SERVER_INFO,
71
- });
72
- }
73
- function pruneClosedMcpSubscriptionRegistries() {
74
- for (const [key, subscription] of PM_MCP_SUBSCRIPTIONS) {
75
- if (subscription.registry.size === 0)
76
- PM_MCP_SUBSCRIPTIONS.delete(key);
77
- }
78
- }
79
- const PM_MCP_CACHE_POLICIES = {
80
- prompts: { ttlMs: 60_000, cacheScope: "public" },
81
- resource: { ttlMs: 0, cacheScope: "private" },
82
- resources: { ttlMs: 60_000, cacheScope: "public" },
83
- tools: { ttlMs: 30_000, cacheScope: "private" },
84
- };
85
- const PM_MCP_DIRECT_TASK_TOOLS = new Set([
86
- "pm_graph",
87
- "pm_health",
88
- "pm_validate",
89
- ]);
90
- const PM_MCP_RUN_TASK_ACTIONS = new Set([
91
- "graph",
92
- "health",
93
- "import",
94
- "reindex",
95
- "test-all",
96
- "validate",
97
- ]);
98
- const PM_MCP_SKILL_METHODS = new Set([
99
- "skills/list",
100
- "skills/get",
101
- "resources/directory/read",
102
- ]);
103
- const PM_MCP_INSTRUCTIONS = "You have access to native pm CLI tools for git-based project management. " +
104
- "When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. " +
105
- "Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. " +
106
- "Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. " +
107
- "Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. " +
108
- "Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. " +
109
- "Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. " +
110
- "Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. " +
111
- "Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. " +
112
- "Do not pass path during real repository tracking — only pass path for sandbox or test runs.";
113
- // Tool definitions (TOOLS) live in ./tool-definitions.ts so the `pm contracts`
114
- // golden-file snapshot can import the surface without loading the server
115
- // runtime (pm-4os2). This file owns dispatch, normalization, and transport.
116
- // pm-qxwu: TOOL_SCHEMA_BASE keeps additionalProperties:true so legitimate
117
- // passthrough keeps working, which means a typo'd top-level arg (e.g.
118
- // "fullChangedField" missing the trailing "s") is silently swallowed and the
119
- // agent gets default behavior with no signal. We precompute the declared
120
- // top-level property keys for each tool and, on every tools/call, warn (without
121
- // rejecting) when an unexpected top-level key appears. The warning is surfaced
122
- // to stderr and additively in structuredContent.warnings.
123
- function declaredToolKeys(tools = TOOLS) {
124
- return new Map(tools.map((tool) => {
125
- const schema = tool.inputSchema;
126
- const properties = schema.properties ?? {};
127
- return [tool.name, Object.keys(properties)];
128
- }));
129
- }
130
- function nearestDeclaredKey(unexpected, declared) {
131
- // Cheap did-you-mean: budget grows with key length but stays small so we only
132
- // suggest genuine near-misses (a single typo / transposition for short keys).
133
- const limit = Math.max(1, Math.min(3, Math.floor(unexpected.length / 4) + 1));
134
- let best;
135
- for (const candidate of declared) {
136
- const distance = levenshteinDistanceWithinLimit(unexpected, candidate, limit);
137
- if (distance === null) {
138
- continue;
139
- }
140
- if (best === undefined || distance < best.distance) {
141
- best = { key: candidate, distance };
142
- }
143
- }
144
- return best?.key;
145
- }
146
- // pm_run is the explicit catch-all passthrough tool: extension/package actions
147
- // accept arbitrary top-level keys (see extensionOptionsFromArgs), so unexpected
148
- // keys there are by-design rather than typos and must not be flagged.
149
- const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS = new Set(["pm_run"]);
150
- const MCP_RETRY_ARGUMENT_KEYS = new Set(["inputResponses", "requestState"]);
151
- /** Resolve the optional shared cursor key without exposing it to tool input. */
152
- function resolveMcpDiscoveryCursorIntegrityKey() {
153
- const configuredKey = process.env.PM_MCP_DISCOVERY_CURSOR_KEY;
154
- if (configuredKey === undefined)
155
- return undefined;
156
- const key = Buffer.from(configuredKey, "utf8");
157
- if (key.byteLength < 32) {
158
- throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.", 64);
159
- }
160
- return key;
161
- }
162
- function detectUnexpectedTopLevelKeys(toolName, args, toolDeclaredKeys = declaredToolKeys()) {
163
- if (typeof args !== "object" || args === null || Array.isArray(args)) {
164
- return [];
165
- }
166
- if (UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName)) {
167
- return [];
168
- }
169
- const declared = toolDeclaredKeys.get(toolName);
170
- if (declared === undefined) {
171
- return [];
172
- }
173
- const declaredSet = new Set([...declared, ...MCP_RETRY_ARGUMENT_KEYS]);
174
- const warnings = [];
175
- for (const key of Object.keys(args)) {
176
- if (declaredSet.has(key)) {
177
- continue;
178
- }
179
- const suggestion = nearestDeclaredKey(key, declared);
180
- warnings.push(suggestion !== undefined
181
- ? `Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`
182
- : `Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`);
183
- }
184
- return warnings;
185
- }
186
- const HANDLERS = {
187
- pm_run: (args) => runMcpAction(args),
188
- pm_discover: async (args) => {
189
- const surface = await resolveMcpToolSurface(TOOLS, args);
190
- const cursorIntegrityKey = resolveMcpDiscoveryCursorIntegrityKey();
191
- const discoveryOptions = parsePmToolDiscoveryOptions(args);
192
- return discoverPmTools(surface.tools.map((tool) => ({
193
- name: tool.name,
194
- description: tool.description,
195
- inputSchema: tool.inputSchema,
196
- authorized: true,
197
- signals: {
198
- freshness: 1,
199
- usage: PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name) ? 1 : 0,
200
- },
201
- })), {
202
- ...discoveryOptions,
203
- profile: surface.profile,
204
- ...(cursorIntegrityKey === undefined
205
- ? {}
206
- : {
207
- cursorIntegrityKey,
208
- }),
209
- });
210
- },
211
- pm_mutate: async (args) => {
212
- const transactionId = readRequiredString(args, "transactionId");
213
- const controls = parseAtomicMutationControls(args);
214
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
215
- const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
216
- const resolved = resolveItemMutationDocument(JSON.stringify({ schema_version: 1, mutations: args.mutations }), {
217
- transactionId,
218
- idPrefix: (await readSettings(pmRoot)).id_prefix,
219
- });
220
- const { mutations, references } = resolved;
221
- if (args.dryRun === true) {
222
- return {
223
- transaction_id: transactionId,
224
- dry_run: true,
225
- mutation_count: mutations.length,
226
- mutations,
227
- references,
228
- };
229
- }
230
- const result = await runWithActiveExtensions({
231
- cwd: typeof args.cwd === "string" ? args.cwd : undefined,
232
- path: typeof args.path === "string" ? args.path : undefined,
233
- noExtensions: args.noExtensions === true,
234
- }, () => commitItemMutations({
235
- pmRoot,
236
- transactionId,
237
- author: resolveAuthor(typeof args.author === "string" ? args.author : undefined, "unknown"),
238
- mutations,
239
- ...controls,
240
- }));
241
- const { transactionId: committedTransactionId, ...commitResult } = result;
242
- return {
243
- ...commitResult,
244
- transaction_id: committedTransactionId,
245
- mutation_count: mutations.length,
246
- references,
247
- };
248
- },
249
- ...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool, action]) => [
250
- tool,
251
- (args) => runMcpAction({ ...args, action }),
252
- ])),
253
- };
254
- /** Resolve the pm action a tools/call invocation will dispatch, when knowable. */
255
- function resolveInvokedAction(toolName, args) {
256
- if (toolName === "pm_run") {
257
- return typeof args.action === "string" ? args.action : undefined;
258
- }
259
- return NARROW_TOOL_ACTIONS[toolName];
260
- }
261
- async function collectMutationGuardWarnings(toolName, action, args) {
262
- if (toolName !== "pm_mutate" && !isMutationAction(action ?? "")) {
263
- return [];
264
- }
265
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
266
- const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
267
- if (!(await pathExists(getSettingsPath(pmRoot)))) {
268
- return [];
269
- }
270
- const settings = await readSettings(pmRoot);
271
- const nestedOptions = typeof args.options === "object" &&
272
- args.options !== null &&
273
- !Array.isArray(args.options)
274
- ? args.options
275
- : {};
276
- const result = evaluateMutationGuard({
277
- author: resolveAuthor(typeof args.author === "string"
278
- ? args.author
279
- : typeof nestedOptions.author === "string"
280
- ? nestedOptions.author
281
- : undefined, settings.author_default),
282
- payload: args,
283
- settings: settings.mutation_guard,
284
- force: args.force === true || nestedOptions.force === true,
285
- });
286
- return result.warnings;
287
- }
288
- // pm-upi0: the pm-qxwu top-level detection cannot see inside the `options`
289
- // object, so a mutation-shaped key on a read tool (pm_deps options.dep) is
290
- // silently dropped before dispatch and the agent builds on state it never
291
- // created. Warn (without rejecting) on every options key absent from the
292
- // invoked action's contract; extension- and package-owned actions have no
293
- // contract table and keep arbitrary passthrough options.
294
- function detectUnexpectedOptionKeys(toolName, action, args) {
295
- const options = args.options;
296
- if (action === undefined ||
297
- typeof options !== "object" ||
298
- options === null ||
299
- Array.isArray(options)) {
300
- return [];
301
- }
302
- const declared = pmToolActionNestedOptionKeys(action);
303
- if (declared === undefined) {
304
- return [];
305
- }
306
- const declaredSet = new Set(declared);
307
- const warnings = [];
308
- for (const key of Object.keys(options)) {
309
- if (declaredSet.has(key)) {
310
- continue;
311
- }
312
- const suggestion = nearestDeclaredKey(key, declared);
313
- warnings.push(suggestion !== undefined
314
- ? `Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`
315
- : `Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`);
316
- }
317
- return warnings;
318
- }
319
- function resultContent(result, warnings, tokenAccounting = false, canonicalStructuredResult = false) {
320
- const effectiveResult = tokenAccounting
321
- ? attachOutputTokenAccounting(result, (value) => JSON.stringify(value, null, 2))
322
- : result;
323
- // pm-qxwu: warnings is additive — existing fields (content, structuredContent.result)
324
- // are never removed or renamed. The warnings array only appears when non-empty.
325
- const structuredContent = warnings !== undefined && warnings.length > 0
326
- ? { result: effectiveResult, warnings }
327
- : { result: effectiveResult };
328
- return {
329
- content: [
330
- {
331
- type: "text",
332
- text: canonicalStructuredResult
333
- ? "Canonical result: structuredContent.result"
334
- : JSON.stringify(effectiveResult, null, 2),
335
- },
336
- ],
337
- structuredContent,
338
- };
339
- }
340
- function errorContent(error, canonicalStructuredResult = false) {
341
- const code = error instanceof PmCliError ? error.exitCode : 1;
342
- const message = error instanceof Error ? error.message : String(error);
343
- const details = error instanceof PmCliError ? error.context : undefined;
344
- return {
345
- isError: true,
346
- content: [
347
- {
348
- type: "text",
349
- text: canonicalStructuredResult
350
- ? "Canonical error: structuredContent"
351
- : JSON.stringify({ error: message, code, details }, null, 2),
352
- },
353
- ],
354
- // Keep `result` present on the error envelope so consumers can read
355
- // `structuredContent.result` uniformly across success and failure (pm-l40h).
356
- structuredContent: { result: null, error: message, code, details },
357
- };
358
- }
359
- /** Retain at most 32 own, valid provenance values without cloning unbounded input. */
360
- function boundMcpClientProvenance(value) {
361
- const provenance = isRuntimeRecord(value) ? value : {};
362
- const bounded = {};
363
- let acceptedCount = 0;
364
- for (const key in provenance) {
365
- if (acceptedCount >= 32)
366
- break;
367
- if (!Object.prototype.hasOwnProperty.call(provenance, key))
368
- continue;
369
- const entry = provenance[key];
370
- if (/^[a-z][a-z0-9_-]{0,63}$/u.test(key) &&
371
- typeof entry === "string" &&
372
- entry.trim().length > 0) {
373
- bounded[key] = entry.trim().slice(0, 256);
374
- acceptedCount += 1;
375
- }
376
- }
377
- return bounded;
378
- }
379
- function readMcpClientInfo(value) {
380
- const clientInfo = isRuntimeRecord(value) ? value : {};
381
- const clientName = typeof clientInfo.name === "string" ? clientInfo.name.trim() : "";
382
- if (clientName.length === 0)
383
- return undefined;
384
- const optionalValues = [
385
- ["version", clientInfo.version, 128],
386
- ["model", clientInfo.model, 256],
387
- ["session", clientInfo.session, 256],
388
- ];
389
- const result = { name: clientName.slice(0, 128) };
390
- for (const [key, value, limit] of optionalValues) {
391
- if (typeof value === "string" && value.trim().length > 0) {
392
- result[key] = value.trim().slice(0, limit);
393
- }
394
- }
395
- const boundedProvenance = boundMcpClientProvenance(clientInfo.provenance);
396
- if (Object.keys(boundedProvenance).length > 0) {
397
- result.provenance = boundedProvenance;
398
- }
399
- const episode = boundAgentEpisodeIdentity(clientInfo.episode, false);
400
- if (episode !== undefined)
401
- result.episode = episode;
402
- return result;
403
- }
404
- async function emitMcpChangeNotifications(action) {
405
- if (isMutationAction(action ?? "")) {
406
- await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({ registry }) => PM_MCP_RESOURCE_CONTRACTS.map((resource) => registry.emitResourceUpdated(resource.uri))));
407
- }
408
- if (["extension", "install", "package", "uninstall"].includes(action ?? "")) {
409
- await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({ registry }) => registry.emitListChanged("tools")));
410
- }
411
- pruneClosedMcpSubscriptionRegistries();
412
- }
413
- /** Resolve one tool's workspace and scope SDK attribution to that request without changing process environment. */
414
- async function handleToolCall(paramsInput, clientInfo, progressiveDiscoveryNegotiated = false) {
415
- const clientSignals = clientInfo ? { client_info: clientInfo } : {};
416
- return runWithHarnessDetectionSignals({
417
- env: process.env,
418
- argv: process.argv,
419
- ...clientSignals,
420
- }, async () => {
421
- const params = asRecordClone(paramsInput);
422
- const name = readRequiredString(params, "name");
423
- const handler = Object.prototype.hasOwnProperty.call(HANDLERS, name)
424
- ? HANDLERS[name]
425
- : undefined;
426
- if (!handler) {
427
- throw new PmCliError(`Unknown pm MCP tool: ${name}`, 64);
428
- }
429
- const inputResponses = params.inputResponses === undefined
430
- ? undefined
431
- : parseMcpInputResponses(params.inputResponses);
432
- validateMcpToolArguments(params.arguments);
433
- const requestedArgs = {
434
- ...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),
435
- ...(inputResponses ? { inputResponses } : {}),
436
- ...(typeof params.requestState === "string"
437
- ? { requestState: params.requestState }
438
- : {}),
439
- };
440
- const access = await resolveMcpToolAccess(TOOLS, name, requestedArgs);
441
- const requiredCustomDiscoveryEntry = progressiveDiscoveryNegotiated &&
442
- access.profile === "custom" &&
443
- name === "pm_discover";
444
- if (!access.available && !requiredCustomDiscoveryEntry) {
445
- throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`, 64);
446
- }
447
- // pm-ydkl: defensive HTML-entity decode for free-text fields. Claude / the
448
- // Anthropic MCP SDK HTML-encodes `<` / `>` (and friends) in tool arguments
449
- // before they reach pm-cli, which would otherwise leak `&lt;type&gt;` into
450
- // stored pm comments / notes / item bodies. Direct CLI calls are not
451
- // affected; decoding at the MCP boundary normalizes the agent path while
452
- // leaving normal text untouched.
453
- const args = await normalizeWorkspaceToolArguments(name, requestedArgs);
454
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
455
- const pmRoot = resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined);
456
- const workspaceIdentity = (await pathExists(getSettingsPath(pmRoot)))
457
- ? (await readSettings(pmRoot)).agent_identity
458
- : undefined;
459
- return runWithHarnessDetectionSignals({
460
- env: { ...process.env, PM_PATH: pmRoot },
461
- argv: process.argv,
462
- cwd,
463
- ...clientSignals,
464
- }, () => runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals ?? [], async () => {
465
- // pm-qxwu: non-breaking detection of typo'd / unexpected top-level keys.
466
- // additionalProperties stays true so passthrough still works; we only warn.
467
- // pm-upi0 extends the same mechanism into the nested options object.
468
- const action = resolveInvokedAction(name, args);
469
- const warnings = [
470
- ...detectUnexpectedTopLevelKeys(name, args, declaredToolKeys()),
471
- ...detectUnexpectedOptionKeys(name, action, args),
472
- ...(await collectMutationGuardWarnings(name, action, args)),
473
- ];
474
- for (const warning of warnings) {
475
- console.error(`[pm-mcp] ${warning}`);
476
- }
477
- // cwd is applied inside the serialized activation cycle (see withActiveExtensions),
478
- // so the chdir/restore is exclusive per request and cannot race a concurrent caller.
479
- const result = await handler(args);
480
- void emitMcpChangeNotifications(action);
481
- return resultContent(result, warnings, args.tokenAccounting === true, progressiveDiscoveryNegotiated);
482
- }, { probesEnabled: workspaceIdentity?.probes_enabled }));
483
- });
484
- }
485
- /** Open one modern subscription through a concrete transport-owned sink. */
486
- export async function openMcpSubscription(input) {
487
- if ((typeof input.request.id !== "string" &&
488
- typeof input.request.id !== "number") ||
489
- input.request.method !== "subscriptions/listen") {
490
- throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request", PM_MCP_ERROR_CODES.invalidParams, { required: ["id", "method", "params.notifications"] });
491
- }
492
- resolveMcpRequestContext(input.request.params);
493
- const key = input.key ?? input.request.id;
494
- if (PM_MCP_SUBSCRIPTIONS.has(key)) {
495
- throw new PmMcpProtocolError("MCP subscription id is already active", PM_MCP_ERROR_CODES.invalidParams, { subscriptionId: input.request.id });
496
- }
497
- const registry = createMcpSubscriptionRegistry();
498
- await registry.open({
499
- id: input.request.id,
500
- notifications: input.request.params?.notifications,
501
- sink: input.sink,
502
- });
503
- PM_MCP_SUBSCRIPTIONS.set(key, { id: input.request.id, registry });
504
- }
505
- /** Gracefully close one active subscription by its request identifier. */
506
- export function closeMcpSubscription(id, key = id) {
507
- const subscription = PM_MCP_SUBSCRIPTIONS.get(key);
508
- if (!subscription || subscription.id !== id)
509
- return undefined;
510
- PM_MCP_SUBSCRIPTIONS.delete(key);
511
- return subscription.registry.close(id);
512
- }
513
- function closeStdioMcpSubscriptions() {
514
- const closed = [];
515
- for (const [key, subscription] of PM_MCP_SUBSCRIPTIONS) {
516
- if (key !== subscription.id)
517
- continue;
518
- const result = closeMcpSubscription(subscription.id, key);
519
- if (result)
520
- closed.push({ id: subscription.id, result });
521
- }
522
- return closed;
523
- }
524
- /** Resolve the current workspace-enriched tool schema for HTTP header checks. */
525
- export async function resolveMcpToolSchemaForRequest(request) {
526
- if (request.method !== "tools/call")
527
- return undefined;
528
- const name = request.params?.name;
529
- if (typeof name !== "string")
530
- return undefined;
531
- const surface = await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(request.params));
532
- return surface.tools.find((tool) => tool.name === name)?.inputSchema;
533
- }
534
- /** Preserve MCP tool-result error semantics for non-protocol adapter failures. */
535
- export function buildMcpToolCallErrorResult(request, error) {
536
- if (request.method !== "tools/call" || error instanceof PmMcpProtocolError) {
537
- return undefined;
538
- }
539
- const content = errorContent(error, hasMcpProtocolVersionMetadata(request) &&
540
- hasMcpClientExtension(resolveMcpRequestContext(request.params), PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));
541
- return hasMcpProtocolVersionMetadata(request)
542
- ? buildMcpCompleteResult(content, PM_MCP_SERVER_INFO)
543
- : content;
544
- }
545
- function requestWorkspaceArgs(params) {
546
- const paramsRecord = asRecordClone(params);
547
- return asRecordClone(paramsRecord.arguments ?? paramsRecord);
548
- }
549
- async function readWorkspaceResource(uri, params) {
550
- const args = requestWorkspaceArgs(params);
551
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
552
- const contract = PM_MCP_RESOURCE_CONTRACTS.find((resource) => resource.uri === uri);
553
- if (!contract) {
554
- throw new PmCliError(`Unknown pm MCP resource: ${uri}`, 64);
555
- }
556
- let value;
557
- if (uri === "pm://workspace/context") {
558
- value = await runMcpAction({ ...args, action: "context", limit: 10 });
559
- }
560
- else if (uri === "pm://workspace/claims") {
561
- value = await runMcpAction({
562
- ...args,
563
- action: "list",
564
- status: "in_progress",
565
- limit: 20,
566
- });
567
- }
568
- else if (uri === "pm://workspace/focus") {
569
- value = await runMcpAction({
570
- ...args,
571
- action: "focus",
572
- subcommand: "show",
573
- });
574
- }
575
- else {
576
- const guidePath = path.join(cwd, "AGENTS.md");
577
- value = (await pathExists(guidePath))
578
- ? (await readFile(guidePath, "utf8")).slice(0, 32_000)
579
- : "No repository-local AGENTS.md was found.";
580
- }
581
- return {
582
- contents: [
583
- {
584
- uri,
585
- mimeType: contract.mimeType,
586
- text: typeof value === "string" ? value : JSON.stringify(value, null, 2),
587
- },
588
- ],
589
- };
590
- }
591
- async function loadRequestSkillRegistry(params) {
592
- const args = requestWorkspaceArgs(params);
593
- const cwd = typeof args.cwd === "string" ? args.cwd : process.cwd();
594
- const workspaceRoot = resolveWorkspaceRoot(resolvePmRoot(cwd, typeof args.path === "string" ? args.path : undefined));
595
- return PmMcpSkillRegistry.load({
596
- packageRoot: resolvePmPackageRoot(),
597
- workspaceRoot,
598
- packageVersion: PM_MCP_SERVER_VERSION,
599
- });
600
- }
601
- function renderWorkflowPrompt(params) {
602
- const paramsRecord = asRecordClone(params);
603
- const name = readRequiredString(paramsRecord, "name");
604
- const prompt = PM_MCP_PROMPT_CONTRACTS.find((candidate) => candidate.name === name);
605
- if (!prompt) {
606
- throw new PmCliError(`Unknown pm MCP prompt: ${name}`, 64);
607
- }
608
- const argumentsRecord = asRecordClone(paramsRecord.arguments);
609
- let text = prompt.template;
610
- for (const argument of prompt.arguments) {
611
- const value = argumentsRecord[argument.name];
612
- if (argument.required &&
613
- (typeof value !== "string" || value.trim().length === 0)) {
614
- throw new PmCliError(`Missing required prompt argument: ${argument.name}`, 64);
615
- }
616
- text = text.replaceAll(`{{${argument.name}}}`, typeof value === "string" ? value : "");
617
- }
618
- return {
619
- description: prompt.description,
620
- messages: [{ role: "user", content: { type: "text", text } }],
621
- };
622
- }
623
- const LEGACY_MCP_ADAPTER = new LegacyMcpAdapter({
624
- serverInfo: PM_MCP_SERVER_INFO,
625
- capabilities: PM_MCP_SERVER_CAPABILITIES,
626
- instructions: PM_MCP_INSTRUCTIONS,
627
- parseClientInfo: readMcpClientInfo,
628
- listTools: async (params) => ({
629
- tools: (await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(params)))
630
- .tools,
631
- }),
632
- callTool: handleToolCall,
633
- listResources: () => ({ resources: PM_MCP_RESOURCE_CONTRACTS }),
634
- readResource: (params) => readWorkspaceResource(readRequiredString(asRecordClone(params), "uri"), params),
635
- listPrompts: () => ({
636
- prompts: PM_MCP_PROMPT_CONTRACTS.map((prompt) => ({
637
- name: prompt.name,
638
- description: prompt.description,
639
- arguments: prompt.arguments,
640
- })),
641
- }),
642
- getPrompt: renderWorkflowPrompt,
643
- });
644
- function deterministicMcpTools(tools) {
645
- return tools
646
- .map((tool) => ({
647
- ...tool,
648
- inputSchema: validateMcpJsonSchema(tool.inputSchema),
649
- }))
650
- .sort((left, right) => left.name.localeCompare(right.name));
651
- }
652
- function mcpTaskPrincipal(requestContext) {
653
- return requestContext.clientInfo
654
- ? `${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`
655
- : "anonymous-stdio";
656
- }
657
- function mcpTaskStore() {
658
- return createMcpTaskStore({
659
- pmRoot: resolvePmRoot(process.cwd()),
660
- owner: "pm-mcp-task-provider",
661
- });
662
- }
663
- /** Rejects malformed MCP tool argument containers before dispatch. */
664
- function validateMcpToolArguments(value) {
665
- if (value !== undefined && !isMcpRecord(value)) {
666
- throw new PmCliError("pm MCP tool arguments must be an object.", 64);
667
- }
668
- }
669
- function shouldCreateMcpTask(params, requestContext) {
670
- if (!hasMcpClientExtension(requestContext, PM_MCP_TASKS_EXTENSION)) {
671
- return false;
672
- }
673
- const requestParams = asRecordClone(params);
674
- const name = requestParams.name;
675
- const args = asRecordClone(requestParams.arguments);
676
- if (PM_MCP_DIRECT_TASK_TOOLS.has(name))
677
- return true;
678
- if (name === "pm_test" &&
679
- (args.subcommand === "run" ||
680
- (isMcpRecord(args.options) && args.options.subcommand === "run"))) {
681
- return true;
682
- }
683
- if (name !== "pm_run")
684
- return false;
685
- return (typeof args.action === "string" && PM_MCP_RUN_TASK_ACTIONS.has(args.action));
686
- }
687
- const PENDING_MCP_TASKS = new Map();
688
- async function executeMcpTask(execution, inputResponses) {
689
- const params = {
690
- ...execution.params,
691
- ...(inputResponses ? { inputResponses } : {}),
692
- ...(execution.requestState ? { requestState: execution.requestState } : {}),
693
- };
694
- try {
695
- const result = await handleToolCall(params, execution.context.clientInfo, hasMcpClientExtension(execution.context, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));
696
- await execution.store.complete(execution.taskId, execution.principal, buildMcpCompleteResult(result, PM_MCP_SERVER_INFO));
697
- PENDING_MCP_TASKS.delete(execution.taskId);
698
- }
699
- catch (error) {
700
- if (error instanceof PmMcpInputRequiredError) {
701
- execution.requestState = error.requestState;
702
- await execution.store.requireInput({
703
- taskId: execution.taskId,
704
- principal: execution.principal,
705
- requestContext: execution.context,
706
- inputRequests: error.inputRequests,
707
- statusMessage: "Task requires additional client input.",
708
- });
709
- return;
710
- }
711
- if (error instanceof PmMcpProtocolError) {
712
- await execution.store.fail(execution.taskId, execution.principal, {
713
- code: error.code,
714
- message: error.message,
715
- data: error.data,
716
- });
717
- }
718
- else {
719
- await execution.store.complete(execution.taskId, execution.principal, buildMcpCompleteResult(errorContent(error, hasMcpClientExtension(execution.context, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)), PM_MCP_SERVER_INFO));
720
- }
721
- PENDING_MCP_TASKS.delete(execution.taskId);
722
- }
723
- }
724
- async function settleMcpTaskExecution(taskId, execution) {
725
- try {
726
- await execution;
727
- }
728
- catch {
729
- // Persistence failures can outlive the request that created the detached
730
- // execution. Keep them from becoming process-level unhandled rejections;
731
- // the durable task record remains available for TTL-based recovery.
732
- PENDING_MCP_TASKS.delete(taskId);
733
- }
734
- }
735
- function scheduleMcpTaskExecution(execution, inputResponses) {
736
- void settleMcpTaskExecution(execution.taskId, executeMcpTask(execution, inputResponses));
737
- }
738
- async function createMcpTaskForToolCall(params, requestContext) {
739
- const store = mcpTaskStore();
740
- const principal = mcpTaskPrincipal(requestContext);
741
- const task = await store.create({
742
- principal,
743
- statusMessage: "pm operation accepted for asynchronous execution.",
744
- });
745
- const execution = {
746
- context: requestContext,
747
- params: asRecordClone(params),
748
- principal,
749
- store,
750
- taskId: task.taskId,
751
- };
752
- PENDING_MCP_TASKS.set(task.taskId, execution);
753
- scheduleMcpTaskExecution(execution);
754
- return attachMcpServerInfo(task, PM_MCP_SERVER_INFO);
755
- }
756
- async function dispatchMcpTaskMethod(request, requestContext) {
757
- if (!hasMcpClientExtension(requestContext, PM_MCP_TASKS_EXTENSION)) {
758
- throw new PmMcpProtocolError("Missing required client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
759
- requiredCapabilities: {
760
- extensions: { [PM_MCP_TASKS_EXTENSION]: {} },
761
- },
762
- });
763
- }
764
- const params = asRecordClone(request.params);
765
- const taskId = readRequiredString(params, "taskId");
766
- const principal = mcpTaskPrincipal(requestContext);
767
- const store = mcpTaskStore();
768
- if (request.method === "tasks/get") {
769
- return buildMcpCompleteResult(await store.get(taskId, principal), PM_MCP_SERVER_INFO);
770
- }
771
- if (request.method === "tasks/update") {
772
- const update = await store.update(taskId, principal, params.inputResponses);
773
- const execution = PENDING_MCP_TASKS.get(taskId);
774
- if (execution &&
775
- update.acceptedKeys.length > 0 &&
776
- update.remainingKeys.length === 0) {
777
- scheduleMcpTaskExecution(execution, await store.takeInputResponses(taskId, principal));
778
- }
779
- return buildMcpCompleteResult({}, PM_MCP_SERVER_INFO);
780
- }
781
- await store.cancel(taskId, principal);
782
- PENDING_MCP_TASKS.delete(taskId);
783
- return buildMcpCompleteResult({}, PM_MCP_SERVER_INFO);
784
- }
785
- async function dispatchModernToolMethod(request, requestContext, clientInfo) {
786
- if (request.method === "tools/list") {
787
- const surface = await resolveMcpToolSurface(TOOLS, requestWorkspaceArgs(request.params));
788
- const progressiveDiscovery = hasMcpClientExtension(requestContext, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION);
789
- const listedTools = progressiveDiscovery
790
- ? [
791
- ...surface.tools.filter((tool) => PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),
792
- ...(surface.profile === "custom" &&
793
- !surface.tools.some((tool) => tool.name === "pm_discover")
794
- ? TOOLS.filter((tool) => tool.name === "pm_discover")
795
- : []),
796
- ]
797
- : surface.tools;
798
- return buildMcpCompleteResult(withMcpCachePolicy({
799
- tools: hasCompatiblePmMcpAppsCapability(requestContext)
800
- ? decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools))
801
- : deterministicMcpTools(listedTools),
802
- }, PM_MCP_CACHE_POLICIES.tools), PM_MCP_SERVER_INFO);
803
- }
804
- validateMcpToolArguments(request.params?.arguments);
805
- if (shouldCreateMcpTask(request.params, requestContext)) {
806
- return createMcpTaskForToolCall(request.params, requestContext);
807
- }
808
- try {
809
- return buildMcpCompleteResult(await handleToolCall(request.params, clientInfo, hasMcpClientExtension(requestContext, PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)), PM_MCP_SERVER_INFO);
810
- }
811
- catch (error) {
812
- if (!(error instanceof PmMcpInputRequiredError))
813
- throw error;
814
- return buildMcpInputRequiredResult({
815
- requestContext,
816
- serverInfo: PM_MCP_SERVER_INFO,
817
- inputRequests: error.inputRequests,
818
- requestState: error.requestState,
819
- });
820
- }
821
- }
822
- async function dispatchModernResourceMethod(request, requestContext) {
823
- if (request.method === "resources/list") {
824
- const resources = [
825
- ...PM_MCP_RESOURCE_CONTRACTS,
826
- ...(hasCompatiblePmMcpAppsCapability(requestContext)
827
- ? PM_MCP_APP_CONTRACTS.map((contract) => ({
828
- uri: contract.uri,
829
- name: contract.name,
830
- description: contract.description,
831
- mimeType: PM_MCP_APP_MIME_TYPE,
832
- _meta: { ui: contract.resourceMeta },
833
- }))
834
- : []),
835
- ].sort((left, right) => left.uri.localeCompare(right.uri));
836
- return buildMcpCompleteResult(withMcpCachePolicy({ resources }, PM_MCP_CACHE_POLICIES.resources), PM_MCP_SERVER_INFO);
837
- }
838
- if (request.method === "resources/templates/list") {
839
- return buildMcpCompleteResult(withMcpCachePolicy({ resourceTemplates: [] }, PM_MCP_CACHE_POLICIES.resources), PM_MCP_SERVER_INFO);
840
- }
841
- try {
842
- const uri = readRequiredString(asRecordClone(request.params), "uri");
843
- const app = findPmMcpAppByUri(uri);
844
- let resource;
845
- if (app) {
846
- if (!hasPmMcpAppsCapability(requestContext)) {
847
- throw new PmMcpProtocolError("MCP App resource requires negotiated client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
848
- requiredCapabilities: {
849
- extensions: {
850
- [PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY,
851
- },
852
- },
853
- });
854
- }
855
- resource = {
856
- contents: [
857
- {
858
- uri,
859
- mimeType: PM_MCP_APP_MIME_TYPE,
860
- text: renderPmMcpAppHtml(app),
861
- _meta: { ui: app.resourceMeta },
862
- },
863
- ],
864
- };
865
- }
866
- else if (uri.startsWith("skill://")) {
867
- assertPmMcpSkillsCapability(requestContext);
868
- resource = {
869
- ...(await loadRequestSkillRegistry(request.params)).read(uri),
870
- };
871
- }
872
- else {
873
- resource = await readWorkspaceResource(uri, request.params);
874
- }
875
- return buildMcpCompleteResult(withMcpCachePolicy(resource, PM_MCP_CACHE_POLICIES.resource), PM_MCP_SERVER_INFO);
876
- }
877
- catch (error) {
878
- if (!(error instanceof PmCliError) ||
879
- !error.message.startsWith("Unknown pm MCP resource:")) {
880
- throw error;
881
- }
882
- throw new PmMcpProtocolError(error.message, PM_MCP_ERROR_CODES.invalidParams, { field: "uri" });
883
- }
884
- }
885
- /** Treat an incompatible optional Apps declaration as absent during discovery. */
886
- function hasCompatiblePmMcpAppsCapability(requestContext) {
887
- try {
888
- return hasPmMcpAppsCapability(requestContext);
889
- }
890
- catch (error) {
891
- if (error instanceof PmMcpProtocolError)
892
- return false;
893
- throw error;
894
- }
895
- }
896
- /** Validate Skills pagination inputs before handing them to the SDK registry. */
897
- function readSkillPageOptions(params) {
898
- if (params.cursor !== undefined && typeof params.cursor !== "string") {
899
- throw new PmMcpProtocolError("Skills cursor must be a string", PM_MCP_ERROR_CODES.invalidParams, { field: "cursor" });
900
- }
901
- if (params.limit !== undefined && typeof params.limit !== "number") {
902
- throw new PmMcpProtocolError("Skills limit must be a number", PM_MCP_ERROR_CODES.invalidParams, { field: "limit" });
903
- }
904
- return {
905
- ...(typeof params.cursor === "string" ? { cursor: params.cursor } : {}),
906
- ...(typeof params.limit === "number" ? { limit: params.limit } : {}),
907
- };
908
- }
909
- async function dispatchModernSkillMethod(request, requestContext) {
910
- const directoryRead = request.method === "resources/directory/read";
911
- assertPmMcpSkillsCapability(requestContext, directoryRead);
912
- const params = asRecordClone(request.params);
913
- const registry = await loadRequestSkillRegistry(request.params);
914
- let result;
915
- if (request.method === "skills/list") {
916
- result = { ...registry.list(readSkillPageOptions(params)) };
917
- }
918
- else if (request.method === "skills/get") {
919
- result = { skill: registry.get(readRequiredString(params, "uri")) };
920
- }
921
- else {
922
- result = {
923
- ...registry.readDirectory(readRequiredString(params, "uri"), readSkillPageOptions(params)),
924
- };
925
- }
926
- return buildMcpCompleteResult(withMcpCachePolicy(result, PM_MCP_CACHE_POLICIES.resource), PM_MCP_SERVER_INFO);
927
- }
928
- function dispatchModernPromptMethod(request) {
929
- const result = request.method === "prompts/list"
930
- ? withMcpCachePolicy({
931
- prompts: PM_MCP_PROMPT_CONTRACTS.map((prompt) => ({
932
- name: prompt.name,
933
- description: prompt.description,
934
- arguments: prompt.arguments,
935
- })).sort((left, right) => left.name.localeCompare(right.name)),
936
- }, PM_MCP_CACHE_POLICIES.prompts)
937
- : renderWorkflowPrompt(request.params);
938
- return buildMcpCompleteResult(result, PM_MCP_SERVER_INFO);
939
- }
940
- /** Dispatch one validated stateless request through the modern surface. */
941
- async function dispatchModernMcpRequest(request, meta) {
942
- const requestContext = resolveMcpRequestContext(request.params);
943
- const clientInfo = readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);
944
- if (request.method === "server/discover") {
945
- return buildMcpDiscoverResult({
946
- serverInfo: PM_MCP_SERVER_INFO,
947
- capabilities: PM_MCP_SERVER_CAPABILITIES,
948
- instructions: PM_MCP_INSTRUCTIONS,
949
- });
950
- }
951
- if (request.method === "ping") {
952
- // The preceding match is an mcp-deprecation-negative-control for modern callers.
953
- throw new PmMcpProtocolError("MCP method not found: ping", -32601, {
954
- removedIn: PM_MCP_PROTOCOL_VERSION,
955
- });
956
- }
957
- if (PM_MCP_SKILL_METHODS.has(request.method ?? "")) {
958
- return dispatchModernSkillMethod(request, requestContext);
959
- }
960
- if (request.method === "tasks/get" ||
961
- request.method === "tasks/update" ||
962
- request.method === "tasks/cancel") {
963
- return dispatchMcpTaskMethod(request, requestContext);
964
- }
965
- if (request.method === "tools/list" || request.method === "tools/call") {
966
- return dispatchModernToolMethod(request, requestContext, clientInfo);
967
- }
968
- if (request.method === "resources/list" ||
969
- request.method === "resources/templates/list" ||
970
- request.method === "resources/read") {
971
- return dispatchModernResourceMethod(request, requestContext);
972
- }
973
- if (request.method === "prompts/list" || request.method === "prompts/get") {
974
- return dispatchModernPromptMethod(request);
975
- }
976
- throw new PmMcpProtocolError(`MCP method not found: ${request.method ?? "(missing)"}`, -32601);
977
- }
978
- /** Implements handle request for the public runtime surface of this module. */
979
- async function handleRequestInReproducibleContext(request) {
980
- if (!request.id && request.method?.startsWith("notifications/")) {
981
- return undefined;
982
- }
983
- if (hasMcpProtocolVersionMetadata(request)) {
984
- const allowlist = (process.env.PM_MCP_BAGGAGE_ALLOWLIST ?? "")
985
- .split(",")
986
- .map((entry) => entry.trim())
987
- .filter(Boolean);
988
- return runWithMcpTraceContext(extractMcpTraceContext(request.params, { baggageAllowlist: allowlist }), () => dispatchModernMcpRequest(request, request.params._meta));
989
- }
990
- if (request.method === "initialize") {
991
- // The preceding match is an mcp-legacy-boundary delegated to the isolated adapter.
992
- return LEGACY_MCP_ADAPTER.initialize(request.params);
993
- }
994
- return LEGACY_MCP_ADAPTER.dispatch(request);
995
- }
996
- /** Return whether a request explicitly supplies the modern version metadata key. */
997
- function hasMcpProtocolVersionMetadata(request) {
998
- const meta = isMcpRecord(request.params) ? request.params._meta : undefined;
999
- return (isMcpRecord(meta) &&
1000
- Object.prototype.hasOwnProperty.call(meta, PM_MCP_META_KEYS.protocolVersion));
1001
- }
1002
- /** Dispatch one MCP request under supported process-level reproducibility settings. */
1003
- export async function handleRequest(request) {
1004
- return runWithReproducibleProcessEnvironment(process.env, () => handleRequestInReproducibleContext(request));
1005
- }
1006
- function writeResponse(id, payload) {
1007
- process.stdout.write(`${JSON.stringify({ jsonrpc: "2.0", id, result: payload })}\n`);
1008
- }
1009
- function writeError(id, error) {
1010
- const code = error instanceof PmMcpProtocolError
1011
- ? error.code
1012
- : error instanceof PmCliError
1013
- ? error.exitCode
1014
- : -32603;
1015
- const message = error instanceof Error ? error.message : String(error);
1016
- const data = error instanceof PmMcpProtocolError
1017
- ? error.data
1018
- : error instanceof PmCliError
1019
- ? error.context
1020
- : undefined;
1021
- process.stdout.write(`${JSON.stringify({ jsonrpc: "2.0", id, error: { code, message, data } })}\n`);
1022
- }
1023
- /** Write an MCP tool execution failure as a successful tool result envelope. */
1024
- function writeToolCallErrorResponse(request, error) {
1025
- if (request.method !== "tools/call" || error instanceof PmMcpProtocolError) {
1026
- return false;
1027
- }
1028
- writeResponse(request.id, buildMcpToolCallErrorResult(request, error));
1029
- return true;
1030
- }
1031
- async function handleStdioTransportControl(request) {
1032
- if (request.method === "subscriptions/listen") {
1033
- await openMcpSubscription({
1034
- request,
1035
- sink: (notification) => {
1036
- process.stdout.write(`${JSON.stringify(notification)}\n`);
1037
- },
1038
- });
1039
- return true;
1040
- }
1041
- if (request.method !== "notifications/cancelled")
1042
- return false;
1043
- const requestId = request.params?.requestId;
1044
- if (typeof requestId === "string" || typeof requestId === "number") {
1045
- const result = closeMcpSubscription(requestId);
1046
- if (result)
1047
- writeResponse(requestId, result);
1048
- }
1049
- return true;
1050
- }
1051
- // pm-3puw: parse one JSON-RPC line, dispatch it, and write the response. Kept
1052
- // as a standalone async unit so the stdio loop can enqueue it onto a serial
1053
- // queue (process lines in arrival order) and tests can drive it directly.
1054
- /** Implements process rpc line for the public runtime surface of this module. */
1055
- async function processRpcLineWithHandler(line, requestHandler) {
1056
- if (line.trim().length === 0) {
1057
- return;
1058
- }
1059
- let request;
1060
- try {
1061
- request = JSON.parse(line);
1062
- }
1063
- catch (error) {
1064
- const message = error instanceof Error ? error.message : String(error);
1065
- writeError(null, new PmCliError(`Parse error: ${message}`, -32700));
1066
- return;
1067
- }
1068
- if (typeof request !== "object" ||
1069
- request === null ||
1070
- Array.isArray(request)) {
1071
- writeError(null, new PmCliError("Invalid JSON-RPC request: expected an object", -32600));
1072
- return;
1073
- }
1074
- const shouldRespond = Object.prototype.hasOwnProperty.call(request, "id");
1075
- try {
1076
- if (await handleStdioTransportControl(request))
1077
- return;
1078
- const result = await requestHandler(request);
1079
- if (shouldRespond && result !== undefined) {
1080
- writeResponse(request.id, result);
1081
- }
1082
- }
1083
- catch (error) {
1084
- if (!shouldRespond) {
1085
- return;
1086
- }
1087
- if (!writeToolCallErrorResponse(request, error)) {
1088
- writeError(request.id, error);
1089
- }
1090
- }
1091
- }
1092
- /** Implements process rpc line for the public runtime surface of this module. */
1093
- export async function processRpcLine(line) {
1094
- await processRpcLineWithHandler(line, handleRequest);
1095
- }
1096
- /** Implements start mcp server for the public runtime surface of this module. */
1097
- export function startMcpServer() {
1098
- const rl = readline.createInterface({
1099
- input: process.stdin,
1100
- crlfDelay: Infinity,
1101
- });
1102
- // pm-3puw: serialize line handling so pipelined requests are processed in
1103
- // arrival order. The previous fire-and-forget handler ran requests
1104
- // concurrently, so a client that pipelined two mutations on the same item
1105
- // (without awaiting the first response) hit a lock conflict on the second.
1106
- const queue = createSerialQueue();
1107
- let processLine;
1108
- try {
1109
- const runInProcessContext = createReproducibleProcessRunner(process.env);
1110
- processLine = (line) => runInProcessContext(() => processRpcLineWithHandler(line, handleRequestInReproducibleContext));
1111
- }
1112
- catch {
1113
- // Preserve one typed JSON-RPC error per request when process configuration
1114
- // is invalid; processRpcLine resolves the same configuration fail-closed.
1115
- processLine = processRpcLine;
1116
- }
1117
- rl.on("line", (line) => {
1118
- void queue.enqueue(() => processLine(line));
1119
- });
1120
- rl.on("close", () => {
1121
- void queue.enqueue(() => {
1122
- for (const closed of closeStdioMcpSubscriptions()) {
1123
- writeResponse(closed.id, closed.result);
1124
- }
1125
- });
1126
- });
1127
- }
1128
- // npm bin entries are symlinks (node_modules/.bin/pm-mcp -> dist/mcp/server.js),
1129
- // so argv[1] must be realpath-resolved before comparing against this module's
1130
- // path — a plain equality check made the published `pm-mcp` bin exit 0 without
1131
- // ever starting the server (pm-qtbc).
1132
- /** Implements check whether invoked as mcp main module for the public runtime surface of this module. */
1133
- export function isInvokedAsMcpMainModule(argvPath, moduleUrl) {
1134
- if (!argvPath) {
1135
- return false;
1136
- }
1137
- const selfPath = fileURLToPath(moduleUrl);
1138
- if (argvPath === selfPath) {
1139
- return true;
1140
- }
1141
- try {
1142
- return realpathSync(argvPath) === realpathSync(selfPath);
1143
- }
1144
- catch {
1145
- return false;
1146
- }
1147
- }
1148
- function readRuntimeTestHook(key) {
1149
- const runtimeTestHooks = globalThis.__pmCliActionRunnerTestHooks;
1150
- if (runtimeTestHooks === undefined) {
1151
- throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`, 64);
1152
- }
1153
- return runtimeTestHooks[key];
1154
- }
1155
- /** Public contract for test only, shared by SDK and presentation-layer consumers. */
1156
- export const _testOnly = {
1157
- boundMcpClientProvenance,
1158
- createMcpInputRequiredError: (input) => new PmMcpInputRequiredError(input),
1159
- createMcpProtocolError: (...input) => new PmMcpProtocolError(...input),
1160
- get closeManyOptionsFromFlat() {
1161
- return readRuntimeTestHook("closeManyOptionsFromFlat");
1162
- },
1163
- detectUnexpectedOptionKeys,
1164
- detectUnexpectedTopLevelKeys,
1165
- collectMutationGuardWarnings,
1166
- closeStdioMcpSubscriptions,
1167
- errorContent,
1168
- emitMcpChangeNotifications,
1169
- expireMcpSubscriptionRecord: (id, key = id) => PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),
1170
- getMcpClientInfo: () => LEGACY_MCP_ADAPTER.getClientInfo(),
1171
- get extensionOptionsFromArgs() {
1172
- return readRuntimeTestHook("extensionOptionsFromArgs");
1173
- },
1174
- get globalOptions() {
1175
- return readRuntimeTestHook("globalOptions");
1176
- },
1177
- get mutationListOptions() {
1178
- return readRuntimeTestHook("mutationListOptions");
1179
- },
1180
- nearestDeclaredKey,
1181
- mcpTaskPrincipal,
1182
- resultContent,
1183
- resolveMcpRequestContext,
1184
- shouldCreateMcpTask,
1185
- settleMcpTaskExecution,
1186
- subscriptionCount: () => PM_MCP_SUBSCRIPTIONS.size,
1187
- get normalizeActionName() {
1188
- return readRuntimeTestHook("normalizeActionName");
1189
- },
1190
- get normalizeCommandPath() {
1191
- return readRuntimeTestHook("normalizeCommandPath");
1192
- },
1193
- get normalizeMcpOptionsArrays() {
1194
- return readRuntimeTestHook("normalizeMcpOptionsArrays");
1195
- },
1196
- get normalizeMcpUpdateOptions() {
1197
- return readRuntimeTestHook("normalizeMcpUpdateOptions");
1198
- },
1199
- get optionsWithAuthor() {
1200
- return readRuntimeTestHook("optionsWithAuthor");
1201
- },
1202
- get readRequiredString() {
1203
- return readRuntimeTestHook("readRequiredString");
1204
- },
1205
- get readScalarString() {
1206
- return readRuntimeTestHook("readScalarString");
1207
- },
1208
- get readScalarStringAllowBlank() {
1209
- return readRuntimeTestHook("readScalarStringAllowBlank");
1210
- },
1211
- get readStringArray() {
1212
- return readRuntimeTestHook("readStringArray");
1213
- },
1214
- runAction: runMcpAction,
1215
- get updateManyOptionsFromFlat() {
1216
- return readRuntimeTestHook("updateManyOptionsFromFlat");
1217
- },
1218
- get withAddNoteOption() {
1219
- return readRuntimeTestHook("withAddNoteOption");
1220
- },
1221
- get withFilesDiscoveryOptions() {
1222
- return readRuntimeTestHook("withFilesDiscoveryOptions");
1223
- },
1224
- get withMutationCompaction() {
1225
- return readRuntimeTestHook("withMutationCompaction");
1226
- },
1227
- writeError,
1228
- };
1229
- /* c8 ignore start */
1230
- if (isInvokedAsMcpMainModule(process.argv[1], import.meta.url)) {
1231
- startMcpServer();
1232
- }
1233
- /* c8 ignore stop */
2
+ !(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="845e245a-00f7-5ae5-85b1-c628768346de")}catch(e2){}})();import{realpathSync}from"node:fs";import{readFile}from"node:fs/promises";import path from"node:path";import readline from"node:readline";import{fileURLToPath}from"node:url";import{resolvePmCliVersion,PmCliError,decodeHtmlEntitiesInOptions,levenshteinDistanceWithinLimit,asRecordClone,createSerialQueue,evaluateMutationGuard,getSettingsPath,isMutationAction,pathExists,readSettings,runWithHarnessDetectionSignals,runWithWorkspaceHarnessSignalDescriptors,boundAgentEpisodeIdentity}from"../sdk/runtime-primitives.js";import{pmToolActionNestedOptionKeys}from"../sdk/cli-contracts/tool-schema.js";import{readRequiredString,runAction,runWithActiveExtensions}from"../sdk/runtime.js";import{NARROW_TOOL_ACTIONS,TOOLS}from"./tool-definitions.js";import{normalizeWorkspaceToolArguments,resolveMcpToolAccess,resolveMcpToolSurface}from"./runtime-capabilities.js";import{PM_MCP_PROMPT_CONTRACTS,PM_MCP_RESOURCE_CONTRACTS}from"../sdk/agent-capability-contracts.js";import{PM_MCP_ENTRY_TOOL_NAMES,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION,PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY,discoverPmTools,parsePmToolDiscoveryOptions}from"../sdk/mcp/discovery.js";import{commitItemMutations}from"../sdk/item-transaction.js";import{isRuntimeRecord,markMcpMutationTransportInput}from"../sdk/runtime-input.js";import{attachOutputTokenAccounting}from"../sdk/output-token-accounting.js";import{createReproducibleProcessRunner,runWithReproducibleProcessEnvironment}from"../sdk/reproducibility/process.js";import{parseAtomicMutationControls,resolveItemMutationDocument}from"../sdk/structured-mutations.js";import{resolveAuthor,resolvePmRoot,resolveWorkspaceRoot}from"../sdk/runtime-primitives.js";import{PM_MCP_ERROR_CODES,PM_MCP_META_KEYS,PM_MCP_PROTOCOL_VERSION,PmMcpProtocolError,attachMcpServerInfo,buildMcpCompleteResult,buildMcpDiscoverResult,hasMcpClientExtension,isMcpRecord,resolveMcpRequestContext}from"../sdk/mcp/protocol.js";import{PmMcpInputRequiredError,buildMcpInputRequiredResult,parseMcpInputResponses,validateMcpJsonSchema,withMcpCachePolicy}from"../sdk/mcp/interactions.js";import{PM_MCP_TASKS_EXTENSION,createMcpTaskStore}from"../sdk/mcp/tasks.js";import{PmMcpSubscriptionRegistry}from"../sdk/mcp/subscriptions.js";import{extractMcpTraceContext,runWithMcpTraceContext}from"../sdk/mcp/authorization.js";import{LegacyMcpAdapter}from"./legacy-adapter.js";import{PM_MCP_APP_CONTRACTS,PM_MCP_APP_MIME_TYPE,PM_MCP_APPS_EXTENSION,PM_MCP_APPS_SERVER_CAPABILITY,decoratePmMcpToolsWithApps,findPmMcpAppByUri,hasPmMcpAppsCapability,renderPmMcpAppHtml}from"../sdk/mcp/apps.js";import{PM_MCP_SKILLS_EXTENSION,PM_MCP_SKILLS_SERVER_CAPABILITY,PmMcpSkillRegistry,assertPmMcpSkillsCapability}from"../sdk/mcp/skills.js";function runMcpAction(args){return runAction(markMcpMutationTransportInput(args))}const PM_PACKAGE_ROOT_ENV="PM_CLI_PACKAGE_ROOT";function resolvePmPackageRoot(){return fileURLToPath(new URL("../..",import.meta.url))}if(typeof process.env[PM_PACKAGE_ROOT_ENV]!=="string"||process.env[PM_PACKAGE_ROOT_ENV]?.trim().length===0){process.env[PM_PACKAGE_ROOT_ENV]=resolvePmPackageRoot()}const PM_MCP_SERVER_VERSION=resolvePmCliVersion(import.meta.url,["../.."])??"0.0.0";const PM_MCP_SERVER_INFO={name:"pm-mcp",version:PM_MCP_SERVER_VERSION,description:"Stateless project-context management through pm SDK contracts.",websiteUrl:"https://github.com/unbraind/pm-cli"};const PM_MCP_SERVER_CAPABILITIES={prompts:{listChanged:true},resources:{listChanged:true,subscribe:true},tools:{listChanged:true},extensions:{[PM_MCP_TASKS_EXTENSION]:{},[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY,[PM_MCP_SKILLS_EXTENSION]:PM_MCP_SKILLS_SERVER_CAPABILITY,[PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION]:PM_MCP_PROGRESSIVE_DISCOVERY_SERVER_CAPABILITY}};const PM_MCP_SUBSCRIPTIONS=new Map;function createMcpSubscriptionRegistry(){return new PmMcpSubscriptionRegistry({capabilities:PM_MCP_SERVER_CAPABILITIES,serverInfo:PM_MCP_SERVER_INFO})}function pruneClosedMcpSubscriptionRegistries(){for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(subscription.registry.size===0)PM_MCP_SUBSCRIPTIONS.delete(key)}}const PM_MCP_CACHE_POLICIES={prompts:{ttlMs:6e4,cacheScope:"public"},resource:{ttlMs:0,cacheScope:"private"},resources:{ttlMs:6e4,cacheScope:"public"},tools:{ttlMs:3e4,cacheScope:"private"}};const PM_MCP_DIRECT_TASK_TOOLS=new Set(["pm_graph","pm_health","pm_validate"]);const PM_MCP_RUN_TASK_ACTIONS=new Set(["graph","health","import","reindex","test-all","validate"]);const PM_MCP_SKILL_METHODS=new Set(["skills/list","skills/get","resources/directory/read"]);const PM_MCP_INSTRUCTIONS="You have access to native pm CLI tools for git-based project management. When progressive discovery is negotiated, use pm_discover to expand the small entry catalog by intent and request schemas only when needed. Use pm_next to pick the next actionable item, or pm_context or pm_search before creating new work. Prefer narrow tools (pm_next, pm_context, pm_list, pm_get, pm_search, pm_events, pm_create, pm_mutate, pm_copy, pm_focus, pm_update, pm_append, pm_claim, pm_release, pm_close, pm_comments, pm_files, pm_docs, pm_notes, pm_learnings, pm_deps, pm_graph, pm_test, pm_validate, pm_health, pm_contracts, pm_schema, pm_profile, pm_config, pm_plan) over pm_run when they cover the operation. Use pm_plan for agent harness Plan workflows: it provides Codex/Claude/Cursor-style planning with durable steps, dependencies, decisions, discoveries, validation, and materialization. Use pm_schema and pm_config for workspace configuration: pm_schema manages custom item types/statuses and pm_config reads or writes settings keys. Use pm_run with an explicit action for active package-owned operations, plus activity, aggregate, history, stats, test-all, and gc. Use history-redact for audited history-stream redaction workflows, history-repair to re-anchor a drifted history chain, and history-compact to checkpoint/prune long history streams while preserving replay integrity. Agent harness and model provenance are detected automatically; pass author only for an intentional identity override. Do not pass path during real repository tracking \u2014 only pass path for sandbox or test runs.";function declaredToolKeys(tools=TOOLS){return new Map(tools.map(tool=>{const schema=tool.inputSchema;const properties=schema.properties??{};return[tool.name,Object.keys(properties)]}))}function nearestDeclaredKey(unexpected,declared){const limit=Math.max(1,Math.min(3,Math.floor(unexpected.length/4)+1));let best;for(const candidate of declared){const distance=levenshteinDistanceWithinLimit(unexpected,candidate,limit);if(distance===null){continue}if(best===void 0||distance<best.distance){best={key:candidate,distance}}}return best?.key}const UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS=new Set(["pm_run"]);const MCP_RETRY_ARGUMENT_KEYS=new Set(["inputResponses","requestState"]);function resolveMcpDiscoveryCursorIntegrityKey(){const configuredKey=process.env.PM_MCP_DISCOVERY_CURSOR_KEY;if(configuredKey===void 0)return void 0;const key=Buffer.from(configuredKey,"utf8");if(key.byteLength<32){throw new PmCliError("PM_MCP_DISCOVERY_CURSOR_KEY must contain at least 32 UTF-8 bytes.",64)}return key}function detectUnexpectedTopLevelKeys(toolName,args,toolDeclaredKeys=declaredToolKeys()){if(typeof args!=="object"||args===null||Array.isArray(args)){return[]}if(UNEXPECTED_KEY_WARNING_EXEMPT_TOOLS.has(toolName)){return[]}const declared=toolDeclaredKeys.get(toolName);if(declared===void 0){return[]}const declaredSet=new Set([...declared,...MCP_RETRY_ARGUMENT_KEYS]);const warnings=[];for(const key of Object.keys(args)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unexpected top-level argument "${key}" for ${toolName} (did you mean "${suggestion}"?). It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`:`Unexpected top-level argument "${key}" for ${toolName}. It is not declared and may be ignored; declared arguments are: ${declared.join(", ")}.`)}return warnings}const HANDLERS={pm_run:args=>runMcpAction(args),pm_discover:async args=>{const surface=await resolveMcpToolSurface(TOOLS,args);const cursorIntegrityKey=resolveMcpDiscoveryCursorIntegrityKey();const discoveryOptions=parsePmToolDiscoveryOptions(args);return discoverPmTools(surface.tools.map(tool=>({name:tool.name,description:tool.description,inputSchema:tool.inputSchema,authorized:true,signals:{freshness:1,usage:PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)?1:0}})),{...discoveryOptions,profile:surface.profile,...cursorIntegrityKey===void 0?{}:{cursorIntegrityKey}})},pm_mutate:async args=>{const transactionId=readRequiredString(args,"transactionId");const controls=parseAtomicMutationControls(args);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const resolved=resolveItemMutationDocument(JSON.stringify({schema_version:1,mutations:args.mutations}),{transactionId,idPrefix:(await readSettings(pmRoot)).id_prefix});const{mutations,references}=resolved;if(args.dryRun===true){return{transaction_id:transactionId,dry_run:true,mutation_count:mutations.length,mutations,references}}const result=await runWithActiveExtensions({cwd:typeof args.cwd==="string"?args.cwd:void 0,path:typeof args.path==="string"?args.path:void 0,noExtensions:args.noExtensions===true},()=>commitItemMutations({pmRoot,transactionId,author:resolveAuthor(typeof args.author==="string"?args.author:void 0,"unknown"),mutations,...controls}));const{transactionId:committedTransactionId,...commitResult}=result;return{...commitResult,transaction_id:committedTransactionId,mutation_count:mutations.length,references}},...Object.fromEntries(Object.entries(NARROW_TOOL_ACTIONS).map(([tool,action])=>[tool,args=>runMcpAction({...args,action})]))};function resolveInvokedAction(toolName,args){if(toolName==="pm_run"){return typeof args.action==="string"?args.action:void 0}return NARROW_TOOL_ACTIONS[toolName]}async function collectMutationGuardWarnings(toolName,action,args){if(toolName!=="pm_mutate"&&!isMutationAction(action??"")){return[]}const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);if(!await pathExists(getSettingsPath(pmRoot))){return[]}const settings=await readSettings(pmRoot);const nestedOptions=typeof args.options==="object"&&args.options!==null&&!Array.isArray(args.options)?args.options:{};const result=evaluateMutationGuard({author:resolveAuthor(typeof args.author==="string"?args.author:typeof nestedOptions.author==="string"?nestedOptions.author:void 0,settings.author_default),payload:args,settings:settings.mutation_guard,force:args.force===true||nestedOptions.force===true});return result.warnings}function detectUnexpectedOptionKeys(toolName,action,args){const options=args.options;if(action===void 0||typeof options!=="object"||options===null||Array.isArray(options)){return[]}const declared=pmToolActionNestedOptionKeys(action);if(declared===void 0){return[]}const declaredSet=new Set(declared);const warnings=[];for(const key of Object.keys(options)){if(declaredSet.has(key)){continue}const suggestion=nearestDeclaredKey(key,declared);warnings.push(suggestion!==void 0?`Unknown option "${key}" for ${toolName} action "${action}" (did you mean "${suggestion}"?). The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`:`Unknown option "${key}" for ${toolName} action "${action}". The ${action} contract does not read it, so it has no effect; declared keys are: ${declared.join(", ")}.`)}return warnings}function resultContent(result,warnings,tokenAccounting=false,canonicalStructuredResult=false){const effectiveResult=tokenAccounting?attachOutputTokenAccounting(result,value=>JSON.stringify(value,null,2)):result;const structuredContent=warnings!==void 0&&warnings.length>0?{result:effectiveResult,warnings}:{result:effectiveResult};return{content:[{type:"text",text:canonicalStructuredResult?"Canonical result: structuredContent.result":JSON.stringify(effectiveResult,null,2)}],structuredContent}}function errorContent(error,canonicalStructuredResult=false){const code=error instanceof PmCliError?error.exitCode:1;const message=error instanceof Error?error.message:String(error);const details=error instanceof PmCliError?error.context:void 0;return{isError:true,content:[{type:"text",text:canonicalStructuredResult?"Canonical error: structuredContent":JSON.stringify({error:message,code,details},null,2)}],structuredContent:{result:null,error:message,code,details}}}function boundMcpClientProvenance(value){const provenance=isRuntimeRecord(value)?value:{};const bounded={};let acceptedCount=0;for(const key in provenance){if(acceptedCount>=32)break;if(!Object.prototype.hasOwnProperty.call(provenance,key))continue;const entry=provenance[key];if(/^[a-z][a-z0-9_-]{0,63}$/u.test(key)&&typeof entry==="string"&&entry.trim().length>0){bounded[key]=entry.trim().slice(0,256);acceptedCount+=1}}return bounded}function readMcpClientInfo(value){const clientInfo=isRuntimeRecord(value)?value:{};const clientName=typeof clientInfo.name==="string"?clientInfo.name.trim():"";if(clientName.length===0)return void 0;const optionalValues=[["version",clientInfo.version,128],["model",clientInfo.model,256],["session",clientInfo.session,256]];const result={name:clientName.slice(0,128)};for(const[key,value2,limit]of optionalValues){if(typeof value2==="string"&&value2.trim().length>0){result[key]=value2.trim().slice(0,limit)}}const boundedProvenance=boundMcpClientProvenance(clientInfo.provenance);if(Object.keys(boundedProvenance).length>0){result.provenance=boundedProvenance}const episode=boundAgentEpisodeIdentity(clientInfo.episode,false);if(episode!==void 0)result.episode=episode;return result}async function emitMcpChangeNotifications(action){if(isMutationAction(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].flatMap(({registry})=>PM_MCP_RESOURCE_CONTRACTS.map(resource=>registry.emitResourceUpdated(resource.uri))))}if(["extension","install","package","uninstall"].includes(action??"")){await Promise.all([...PM_MCP_SUBSCRIPTIONS.values()].map(({registry})=>registry.emitListChanged("tools")))}pruneClosedMcpSubscriptionRegistries()}async function handleToolCall(paramsInput,clientInfo,progressiveDiscoveryNegotiated=false){const clientSignals=clientInfo?{client_info:clientInfo}:{};return runWithHarnessDetectionSignals({env:process.env,argv:process.argv,...clientSignals},async()=>{const params=asRecordClone(paramsInput);const name=readRequiredString(params,"name");const handler=Object.prototype.hasOwnProperty.call(HANDLERS,name)?HANDLERS[name]:void 0;if(!handler){throw new PmCliError(`Unknown pm MCP tool: ${name}`,64)}const inputResponses=params.inputResponses===void 0?void 0:parseMcpInputResponses(params.inputResponses);validateMcpToolArguments(params.arguments);const requestedArgs={...decodeHtmlEntitiesInOptions(asRecordClone(params.arguments)),...inputResponses?{inputResponses}:{},...typeof params.requestState==="string"?{requestState:params.requestState}:{}};const access=await resolveMcpToolAccess(TOOLS,name,requestedArgs);const requiredCustomDiscoveryEntry=progressiveDiscoveryNegotiated&&access.profile==="custom"&&name==="pm_discover";if(!access.available&&!requiredCustomDiscoveryEntry){throw new PmCliError(`pm MCP tool "${name}" is unavailable in the ${access.profile} profile.`,64)}const args=await normalizeWorkspaceToolArguments(name,requestedArgs);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const pmRoot=resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0);const workspaceIdentity=await pathExists(getSettingsPath(pmRoot))?(await readSettings(pmRoot)).agent_identity:void 0;return runWithHarnessDetectionSignals({env:{...process.env,PM_PATH:pmRoot},argv:process.argv,cwd,...clientSignals},()=>runWithWorkspaceHarnessSignalDescriptors(workspaceIdentity?.harness_signals??[],async()=>{const action=resolveInvokedAction(name,args);const warnings=[...detectUnexpectedTopLevelKeys(name,args,declaredToolKeys()),...detectUnexpectedOptionKeys(name,action,args),...await collectMutationGuardWarnings(name,action,args)];for(const warning of warnings){console.error(`[pm-mcp] ${warning}`)}const result=await handler(args);void emitMcpChangeNotifications(action);return resultContent(result,warnings,args.tokenAccounting===true,progressiveDiscoveryNegotiated)},{probesEnabled:workspaceIdentity?.probes_enabled}))})}async function openMcpSubscription(input){if(typeof input.request.id!=="string"&&typeof input.request.id!=="number"||input.request.method!=="subscriptions/listen"){throw new PmMcpProtocolError("Invalid MCP subscriptions/listen request",PM_MCP_ERROR_CODES.invalidParams,{required:["id","method","params.notifications"]})}resolveMcpRequestContext(input.request.params);const key=input.key??input.request.id;if(PM_MCP_SUBSCRIPTIONS.has(key)){throw new PmMcpProtocolError("MCP subscription id is already active",PM_MCP_ERROR_CODES.invalidParams,{subscriptionId:input.request.id})}const registry=createMcpSubscriptionRegistry();await registry.open({id:input.request.id,notifications:input.request.params?.notifications,sink:input.sink});PM_MCP_SUBSCRIPTIONS.set(key,{id:input.request.id,registry})}function closeMcpSubscription(id,key=id){const subscription=PM_MCP_SUBSCRIPTIONS.get(key);if(!subscription||subscription.id!==id)return void 0;PM_MCP_SUBSCRIPTIONS.delete(key);return subscription.registry.close(id)}function closeStdioMcpSubscriptions(){const closed=[];for(const[key,subscription]of PM_MCP_SUBSCRIPTIONS){if(key!==subscription.id)continue;const result=closeMcpSubscription(subscription.id,key);if(result)closed.push({id:subscription.id,result})}return closed}async function resolveMcpToolSchemaForRequest(request){if(request.method!=="tools/call")return void 0;const name=request.params?.name;if(typeof name!=="string")return void 0;const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));return surface.tools.find(tool=>tool.name===name)?.inputSchema}function buildMcpToolCallErrorResult(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return void 0}const content=errorContent(error,hasMcpProtocolVersionMetadata(request)&&hasMcpClientExtension(resolveMcpRequestContext(request.params),PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));return hasMcpProtocolVersionMetadata(request)?buildMcpCompleteResult(content,PM_MCP_SERVER_INFO):content}function requestWorkspaceArgs(params){const paramsRecord=asRecordClone(params);return asRecordClone(paramsRecord.arguments??paramsRecord)}async function readWorkspaceResource(uri,params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const contract=PM_MCP_RESOURCE_CONTRACTS.find(resource=>resource.uri===uri);if(!contract){throw new PmCliError(`Unknown pm MCP resource: ${uri}`,64)}let value;if(uri==="pm://workspace/context"){value=await runMcpAction({...args,action:"context",limit:10})}else if(uri==="pm://workspace/claims"){value=await runMcpAction({...args,action:"list",status:"in_progress",limit:20})}else if(uri==="pm://workspace/focus"){value=await runMcpAction({...args,action:"focus",subcommand:"show"})}else{const guidePath=path.join(cwd,"AGENTS.md");value=await pathExists(guidePath)?(await readFile(guidePath,"utf8")).slice(0,32e3):"No repository-local AGENTS.md was found."}return{contents:[{uri,mimeType:contract.mimeType,text:typeof value==="string"?value:JSON.stringify(value,null,2)}]}}async function loadRequestSkillRegistry(params){const args=requestWorkspaceArgs(params);const cwd=typeof args.cwd==="string"?args.cwd:process.cwd();const workspaceRoot=resolveWorkspaceRoot(resolvePmRoot(cwd,typeof args.path==="string"?args.path:void 0));return PmMcpSkillRegistry.load({packageRoot:resolvePmPackageRoot(),workspaceRoot,packageVersion:PM_MCP_SERVER_VERSION})}function renderWorkflowPrompt(params){const paramsRecord=asRecordClone(params);const name=readRequiredString(paramsRecord,"name");const prompt=PM_MCP_PROMPT_CONTRACTS.find(candidate=>candidate.name===name);if(!prompt){throw new PmCliError(`Unknown pm MCP prompt: ${name}`,64)}const argumentsRecord=asRecordClone(paramsRecord.arguments);let text=prompt.template;for(const argument of prompt.arguments){const value=argumentsRecord[argument.name];if(argument.required&&(typeof value!=="string"||value.trim().length===0)){throw new PmCliError(`Missing required prompt argument: ${argument.name}`,64)}text=text.replaceAll(`{{${argument.name}}}`,typeof value==="string"?value:"")}return{description:prompt.description,messages:[{role:"user",content:{type:"text",text}}]}}const LEGACY_MCP_ADAPTER=new LegacyMcpAdapter({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS,parseClientInfo:readMcpClientInfo,listTools:async params=>({tools:(await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(params))).tools}),callTool:handleToolCall,listResources:()=>({resources:PM_MCP_RESOURCE_CONTRACTS}),readResource:params=>readWorkspaceResource(readRequiredString(asRecordClone(params),"uri"),params),listPrompts:()=>({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments}))}),getPrompt:renderWorkflowPrompt});function deterministicMcpTools(tools){return tools.map(tool=>({...tool,inputSchema:validateMcpJsonSchema(tool.inputSchema)})).sort((left,right)=>left.name.localeCompare(right.name))}function mcpTaskPrincipal(requestContext){return requestContext.clientInfo?`${requestContext.clientInfo.name}@${requestContext.clientInfo.version}`:"anonymous-stdio"}function mcpTaskStore(){return createMcpTaskStore({pmRoot:resolvePmRoot(process.cwd()),owner:"pm-mcp-task-provider"})}function validateMcpToolArguments(value){if(value!==void 0&&!isMcpRecord(value)){throw new PmCliError("pm MCP tool arguments must be an object.",64)}}function shouldCreateMcpTask(params,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){return false}const requestParams=asRecordClone(params);const name=requestParams.name;const args=asRecordClone(requestParams.arguments);if(PM_MCP_DIRECT_TASK_TOOLS.has(name))return true;if(name==="pm_test"&&(args.subcommand==="run"||isMcpRecord(args.options)&&args.options.subcommand==="run")){return true}if(name!=="pm_run")return false;return typeof args.action==="string"&&PM_MCP_RUN_TASK_ACTIONS.has(args.action)}const PENDING_MCP_TASKS=new Map;async function executeMcpTask(execution,inputResponses){const params={...execution.params,...inputResponses?{inputResponses}:{},...execution.requestState?{requestState:execution.requestState}:{}};try{const result=await handleToolCall(params,execution.context.clientInfo,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION));await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(result,PM_MCP_SERVER_INFO));PENDING_MCP_TASKS.delete(execution.taskId)}catch(error){if(error instanceof PmMcpInputRequiredError){execution.requestState=error.requestState;await execution.store.requireInput({taskId:execution.taskId,principal:execution.principal,requestContext:execution.context,inputRequests:error.inputRequests,statusMessage:"Task requires additional client input."});return}if(error instanceof PmMcpProtocolError){await execution.store.fail(execution.taskId,execution.principal,{code:error.code,message:error.message,data:error.data})}else{await execution.store.complete(execution.taskId,execution.principal,buildMcpCompleteResult(errorContent(error,hasMcpClientExtension(execution.context,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO))}PENDING_MCP_TASKS.delete(execution.taskId)}}async function settleMcpTaskExecution(taskId,execution){try{await execution}catch{PENDING_MCP_TASKS.delete(taskId)}}function scheduleMcpTaskExecution(execution,inputResponses){void settleMcpTaskExecution(execution.taskId,executeMcpTask(execution,inputResponses))}async function createMcpTaskForToolCall(params,requestContext){const store=mcpTaskStore();const principal=mcpTaskPrincipal(requestContext);const task=await store.create({principal,statusMessage:"pm operation accepted for asynchronous execution."});const execution={context:requestContext,params:asRecordClone(params),principal,store,taskId:task.taskId};PENDING_MCP_TASKS.set(task.taskId,execution);scheduleMcpTaskExecution(execution);return attachMcpServerInfo(task,PM_MCP_SERVER_INFO)}async function dispatchMcpTaskMethod(request,requestContext){if(!hasMcpClientExtension(requestContext,PM_MCP_TASKS_EXTENSION)){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_TASKS_EXTENSION]:{}}}})}const params=asRecordClone(request.params);const taskId=readRequiredString(params,"taskId");const principal=mcpTaskPrincipal(requestContext);const store=mcpTaskStore();if(request.method==="tasks/get"){return buildMcpCompleteResult(await store.get(taskId,principal),PM_MCP_SERVER_INFO)}if(request.method==="tasks/update"){const update=await store.update(taskId,principal,params.inputResponses);const execution=PENDING_MCP_TASKS.get(taskId);if(execution&&update.acceptedKeys.length>0&&update.remainingKeys.length===0){scheduleMcpTaskExecution(execution,await store.takeInputResponses(taskId,principal))}return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}await store.cancel(taskId,principal);PENDING_MCP_TASKS.delete(taskId);return buildMcpCompleteResult({},PM_MCP_SERVER_INFO)}async function dispatchModernToolMethod(request,requestContext,clientInfo){if(request.method==="tools/list"){const surface=await resolveMcpToolSurface(TOOLS,requestWorkspaceArgs(request.params));const progressiveDiscovery=hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION);const listedTools=progressiveDiscovery?[...surface.tools.filter(tool=>PM_MCP_ENTRY_TOOL_NAMES.includes(tool.name)),...surface.profile==="custom"&&!surface.tools.some(tool=>tool.name==="pm_discover")?TOOLS.filter(tool=>tool.name==="pm_discover"):[]]:surface.tools;return buildMcpCompleteResult(withMcpCachePolicy({tools:hasCompatiblePmMcpAppsCapability(requestContext)?decoratePmMcpToolsWithApps(deterministicMcpTools(listedTools)):deterministicMcpTools(listedTools)},PM_MCP_CACHE_POLICIES.tools),PM_MCP_SERVER_INFO)}validateMcpToolArguments(request.params?.arguments);if(shouldCreateMcpTask(request.params,requestContext)){return createMcpTaskForToolCall(request.params,requestContext)}try{return buildMcpCompleteResult(await handleToolCall(request.params,clientInfo,hasMcpClientExtension(requestContext,PM_MCP_PROGRESSIVE_DISCOVERY_EXTENSION)),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmMcpInputRequiredError))throw error;return buildMcpInputRequiredResult({requestContext,serverInfo:PM_MCP_SERVER_INFO,inputRequests:error.inputRequests,requestState:error.requestState})}}async function dispatchModernResourceMethod(request,requestContext){if(request.method==="resources/list"){const resources=[...PM_MCP_RESOURCE_CONTRACTS,...hasCompatiblePmMcpAppsCapability(requestContext)?PM_MCP_APP_CONTRACTS.map(contract=>({uri:contract.uri,name:contract.name,description:contract.description,mimeType:PM_MCP_APP_MIME_TYPE,_meta:{ui:contract.resourceMeta}})):[]].sort((left,right)=>left.uri.localeCompare(right.uri));return buildMcpCompleteResult(withMcpCachePolicy({resources},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}if(request.method==="resources/templates/list"){return buildMcpCompleteResult(withMcpCachePolicy({resourceTemplates:[]},PM_MCP_CACHE_POLICIES.resources),PM_MCP_SERVER_INFO)}try{const uri=readRequiredString(asRecordClone(request.params),"uri");const app=findPmMcpAppByUri(uri);let resource;if(app){if(!hasPmMcpAppsCapability(requestContext)){throw new PmMcpProtocolError("MCP App resource requires negotiated client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY}}})}resource={contents:[{uri,mimeType:PM_MCP_APP_MIME_TYPE,text:renderPmMcpAppHtml(app),_meta:{ui:app.resourceMeta}}]}}else if(uri.startsWith("skill://")){assertPmMcpSkillsCapability(requestContext);resource={...(await loadRequestSkillRegistry(request.params)).read(uri)}}else{resource=await readWorkspaceResource(uri,request.params)}return buildMcpCompleteResult(withMcpCachePolicy(resource,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}catch(error){if(!(error instanceof PmCliError)||!error.message.startsWith("Unknown pm MCP resource:")){throw error}throw new PmMcpProtocolError(error.message,PM_MCP_ERROR_CODES.invalidParams,{field:"uri"})}}function hasCompatiblePmMcpAppsCapability(requestContext){try{return hasPmMcpAppsCapability(requestContext)}catch(error){if(error instanceof PmMcpProtocolError)return false;throw error}}function readSkillPageOptions(params){if(params.cursor!==void 0&&typeof params.cursor!=="string"){throw new PmMcpProtocolError("Skills cursor must be a string",PM_MCP_ERROR_CODES.invalidParams,{field:"cursor"})}if(params.limit!==void 0&&typeof params.limit!=="number"){throw new PmMcpProtocolError("Skills limit must be a number",PM_MCP_ERROR_CODES.invalidParams,{field:"limit"})}return{...typeof params.cursor==="string"?{cursor:params.cursor}:{},...typeof params.limit==="number"?{limit:params.limit}:{}}}async function dispatchModernSkillMethod(request,requestContext){const directoryRead=request.method==="resources/directory/read";assertPmMcpSkillsCapability(requestContext,directoryRead);const params=asRecordClone(request.params);const registry=await loadRequestSkillRegistry(request.params);let result;if(request.method==="skills/list"){result={...registry.list(readSkillPageOptions(params))}}else if(request.method==="skills/get"){result={skill:registry.get(readRequiredString(params,"uri"))}}else{result={...registry.readDirectory(readRequiredString(params,"uri"),readSkillPageOptions(params))}}return buildMcpCompleteResult(withMcpCachePolicy(result,PM_MCP_CACHE_POLICIES.resource),PM_MCP_SERVER_INFO)}function dispatchModernPromptMethod(request){const result=request.method==="prompts/list"?withMcpCachePolicy({prompts:PM_MCP_PROMPT_CONTRACTS.map(prompt=>({name:prompt.name,description:prompt.description,arguments:prompt.arguments})).sort((left,right)=>left.name.localeCompare(right.name))},PM_MCP_CACHE_POLICIES.prompts):renderWorkflowPrompt(request.params);return buildMcpCompleteResult(result,PM_MCP_SERVER_INFO)}async function dispatchModernMcpRequest(request,meta){const requestContext=resolveMcpRequestContext(request.params);const clientInfo=readMcpClientInfo(meta[PM_MCP_META_KEYS.clientInfo]);if(request.method==="server/discover"){return buildMcpDiscoverResult({serverInfo:PM_MCP_SERVER_INFO,capabilities:PM_MCP_SERVER_CAPABILITIES,instructions:PM_MCP_INSTRUCTIONS})}if(request.method==="ping"){throw new PmMcpProtocolError("MCP method not found: ping",-32601,{removedIn:PM_MCP_PROTOCOL_VERSION})}if(PM_MCP_SKILL_METHODS.has(request.method??"")){return dispatchModernSkillMethod(request,requestContext)}if(request.method==="tasks/get"||request.method==="tasks/update"||request.method==="tasks/cancel"){return dispatchMcpTaskMethod(request,requestContext)}if(request.method==="tools/list"||request.method==="tools/call"){return dispatchModernToolMethod(request,requestContext,clientInfo)}if(request.method==="resources/list"||request.method==="resources/templates/list"||request.method==="resources/read"){return dispatchModernResourceMethod(request,requestContext)}if(request.method==="prompts/list"||request.method==="prompts/get"){return dispatchModernPromptMethod(request)}throw new PmMcpProtocolError(`MCP method not found: ${request.method??"(missing)"}`,-32601)}async function handleRequestInReproducibleContext(request){if(!request.id&&request.method?.startsWith("notifications/")){return void 0}if(hasMcpProtocolVersionMetadata(request)){const allowlist=(process.env.PM_MCP_BAGGAGE_ALLOWLIST??"").split(",").map(entry=>entry.trim()).filter(Boolean);return runWithMcpTraceContext(extractMcpTraceContext(request.params,{baggageAllowlist:allowlist}),()=>dispatchModernMcpRequest(request,request.params._meta))}if(request.method==="initialize"){return LEGACY_MCP_ADAPTER.initialize(request.params)}return LEGACY_MCP_ADAPTER.dispatch(request)}function hasMcpProtocolVersionMetadata(request){const meta=isMcpRecord(request.params)?request.params._meta:void 0;return isMcpRecord(meta)&&Object.prototype.hasOwnProperty.call(meta,PM_MCP_META_KEYS.protocolVersion)}async function handleRequest(request){return runWithReproducibleProcessEnvironment(process.env,()=>handleRequestInReproducibleContext(request))}function writeResponse(id,payload){process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,result:payload})}
3
+ `)}function writeError(id,error){const code=error instanceof PmMcpProtocolError?error.code:error instanceof PmCliError?error.exitCode:-32603;const message=error instanceof Error?error.message:String(error);const data=error instanceof PmMcpProtocolError?error.data:error instanceof PmCliError?error.context:void 0;process.stdout.write(`${JSON.stringify({jsonrpc:"2.0",id,error:{code,message,data}})}
4
+ `)}function writeToolCallErrorResponse(request,error){if(request.method!=="tools/call"||error instanceof PmMcpProtocolError){return false}writeResponse(request.id,buildMcpToolCallErrorResult(request,error));return true}async function handleStdioTransportControl(request){if(request.method==="subscriptions/listen"){await openMcpSubscription({request,sink:notification=>{process.stdout.write(`${JSON.stringify(notification)}
5
+ `)}});return true}if(request.method!=="notifications/cancelled")return false;const requestId=request.params?.requestId;if(typeof requestId==="string"||typeof requestId==="number"){const result=closeMcpSubscription(requestId);if(result)writeResponse(requestId,result)}return true}async function processRpcLineWithHandler(line,requestHandler){if(line.trim().length===0){return}let request;try{request=JSON.parse(line)}catch(error){const message=error instanceof Error?error.message:String(error);writeError(null,new PmCliError(`Parse error: ${message}`,-32700));return}if(typeof request!=="object"||request===null||Array.isArray(request)){writeError(null,new PmCliError("Invalid JSON-RPC request: expected an object",-32600));return}const shouldRespond=Object.prototype.hasOwnProperty.call(request,"id");try{if(await handleStdioTransportControl(request))return;const result=await requestHandler(request);if(shouldRespond&&result!==void 0){writeResponse(request.id,result)}}catch(error){if(!shouldRespond){return}if(!writeToolCallErrorResponse(request,error)){writeError(request.id,error)}}}async function processRpcLine(line){await processRpcLineWithHandler(line,handleRequest)}function startMcpServer(){const rl=readline.createInterface({input:process.stdin,crlfDelay:Infinity});const queue=createSerialQueue();let processLine;try{const runInProcessContext=createReproducibleProcessRunner(process.env);processLine=line=>runInProcessContext(()=>processRpcLineWithHandler(line,handleRequestInReproducibleContext))}catch{processLine=processRpcLine}rl.on("line",line=>{void queue.enqueue(()=>processLine(line))});rl.on("close",()=>{void queue.enqueue(()=>{for(const closed of closeStdioMcpSubscriptions()){writeResponse(closed.id,closed.result)}})})}function isInvokedAsMcpMainModule(argvPath,moduleUrl){if(!argvPath){return false}const selfPath=fileURLToPath(moduleUrl);if(argvPath===selfPath){return true}try{return realpathSync(argvPath)===realpathSync(selfPath)}catch{return false}}function readRuntimeTestHook(key){const runtimeTestHooks=globalThis.__pmCliActionRunnerTestHooks;if(runtimeTestHooks===void 0){throw new PmCliError(`MCP runtime test hook "${String(key)}" is only available in test environments.`,64)}return runtimeTestHooks[key]}const _testOnly={boundMcpClientProvenance,createMcpInputRequiredError:input=>new PmMcpInputRequiredError(input),createMcpProtocolError:(...input)=>new PmMcpProtocolError(...input),get closeManyOptionsFromFlat(){return readRuntimeTestHook("closeManyOptionsFromFlat")},detectUnexpectedOptionKeys,detectUnexpectedTopLevelKeys,collectMutationGuardWarnings,closeStdioMcpSubscriptions,errorContent,emitMcpChangeNotifications,expireMcpSubscriptionRecord:(id,key=id)=>PM_MCP_SUBSCRIPTIONS.get(key).registry.close(id),getMcpClientInfo:()=>LEGACY_MCP_ADAPTER.getClientInfo(),get extensionOptionsFromArgs(){return readRuntimeTestHook("extensionOptionsFromArgs")},get globalOptions(){return readRuntimeTestHook("globalOptions")},get mutationListOptions(){return readRuntimeTestHook("mutationListOptions")},nearestDeclaredKey,mcpTaskPrincipal,resultContent,resolveMcpRequestContext,shouldCreateMcpTask,settleMcpTaskExecution,subscriptionCount:()=>PM_MCP_SUBSCRIPTIONS.size,get normalizeActionName(){return readRuntimeTestHook("normalizeActionName")},get normalizeCommandPath(){return readRuntimeTestHook("normalizeCommandPath")},get normalizeMcpOptionsArrays(){return readRuntimeTestHook("normalizeMcpOptionsArrays")},get normalizeMcpUpdateOptions(){return readRuntimeTestHook("normalizeMcpUpdateOptions")},get optionsWithAuthor(){return readRuntimeTestHook("optionsWithAuthor")},get readRequiredString(){return readRuntimeTestHook("readRequiredString")},get readScalarString(){return readRuntimeTestHook("readScalarString")},get readScalarStringAllowBlank(){return readRuntimeTestHook("readScalarStringAllowBlank")},get readStringArray(){return readRuntimeTestHook("readStringArray")},runAction:runMcpAction,get updateManyOptionsFromFlat(){return readRuntimeTestHook("updateManyOptionsFromFlat")},get withAddNoteOption(){return readRuntimeTestHook("withAddNoteOption")},get withFilesDiscoveryOptions(){return readRuntimeTestHook("withFilesDiscoveryOptions")},get withMutationCompaction(){return readRuntimeTestHook("withMutationCompaction")},writeError};if(isInvokedAsMcpMainModule(process.argv[1],import.meta.url)){startMcpServer()}export{_testOnly,buildMcpToolCallErrorResult,closeMcpSubscription,handleRequest,isInvokedAsMcpMainModule,openMcpSubscription,processRpcLine,resolveMcpToolSchemaForRequest,startMcpServer};
1234
6
  //# sourceMappingURL=server.js.map
1235
- //# debugId=1950da06-8c27-5506-bc64-4bf51c1a3f1c