@unbrained/pm-cli 2026.9.7 → 2026.9.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agents/skills/pm-developer/SKILL.md +12 -4
- package/.agents/skills/pm-developer/references/MULTI_AGENT_MERGE.md +19 -10
- package/.agents/skills/pm-extensions/SKILL.md +6 -0
- package/.agents/skills/pm-sdk/SKILL.md +11 -2
- package/.agents/skills/pm-user/SKILL.md +7 -2
- package/.agents/skills/pm-user/references/ECOSYSTEM_PLANNING.md +95 -0
- package/.claude-plugin/marketplace.json +2 -2
- package/CHANGELOG.md +231 -182
- package/dist/cli/after-command-context-usage.js +1 -48
- package/dist/cli/argv-utils.js +1 -40
- package/dist/cli/bootstrap-args.js +1 -9
- package/dist/cli/bundle-integrity.js +2 -110
- package/dist/cli/commander-usage.js +11 -771
- package/dist/cli/commands/activity.js +1 -9
- package/dist/cli/commands/aggregate.js +1 -5
- package/dist/cli/commands/append.js +1 -5
- package/dist/cli/commands/claim.js +1 -5
- package/dist/cli/commands/close-many.js +1 -5
- package/dist/cli/commands/close.js +1 -9
- package/dist/cli/commands/comments.js +1 -5
- package/dist/cli/commands/config.js +1 -9
- package/dist/cli/commands/context.js +1 -9
- package/dist/cli/commands/contracts.js +1 -5
- package/dist/cli/commands/copy.js +1 -9
- package/dist/cli/commands/create.js +1 -9
- package/dist/cli/commands/delete.js +1 -9
- package/dist/cli/commands/deps.js +1 -9
- package/dist/cli/commands/docs.js +1 -9
- package/dist/cli/commands/duplicates.js +1 -9
- package/dist/cli/commands/eval.js +1 -9
- package/dist/cli/commands/extension/describe.js +1 -5
- package/dist/cli/commands/extension/scaffold.js +1 -5
- package/dist/cli/commands/extension/shared.js +1 -5
- package/dist/cli/commands/extension.js +1 -9
- package/dist/cli/commands/files.js +1 -9
- package/dist/cli/commands/focus.js +1 -9
- package/dist/cli/commands/gc.js +1 -9
- package/dist/cli/commands/get.js +1 -9
- package/dist/cli/commands/graph.js +1 -10
- package/dist/cli/commands/health.js +1 -9
- package/dist/cli/commands/history-compact.js +1 -10
- package/dist/cli/commands/history-redact.js +1 -11
- package/dist/cli/commands/history-repair.js +1 -10
- package/dist/cli/commands/history.js +1 -5
- package/dist/cli/commands/index.js +1 -58
- package/dist/cli/commands/init-agent-guidance.js +1 -9
- package/dist/cli/commands/init.js +1 -9
- package/dist/cli/commands/learnings.js +1 -5
- package/dist/cli/commands/lifecycle-transitions.js +1 -5
- package/dist/cli/commands/list.js +1 -9
- package/dist/cli/commands/merge.js +1 -11
- package/dist/cli/commands/next.js +1 -9
- package/dist/cli/commands/notes.js +1 -5
- package/dist/cli/commands/plan.js +1 -9
- package/dist/cli/commands/profile.js +1 -9
- package/dist/cli/commands/restore.js +1 -9
- package/dist/cli/commands/scheduling-shortcuts.js +1 -9
- package/dist/cli/commands/schema.js +1 -10
- package/dist/cli/commands/search.js +1 -9
- package/dist/cli/commands/stats.js +1 -9
- package/dist/cli/commands/telemetry.js +1 -9
- package/dist/cli/commands/test-all.js +1 -9
- package/dist/cli/commands/test-runs.js +1 -9
- package/dist/cli/commands/test.js +1 -9
- package/dist/cli/commands/update-many.js +1 -5
- package/dist/cli/commands/update.js +1 -9
- package/dist/cli/commands/upgrade.js +1 -5
- package/dist/cli/commands/validate.js +1 -15
- package/dist/cli/context-intent-invocation.js +1 -20
- package/dist/cli/description-stdin.js +1 -17
- package/dist/cli/error-guidance.js +1 -1353
- package/dist/cli/extension-command-help.js +5 -636
- package/dist/cli/extension-command-options.js +1 -427
- package/dist/cli/extension-recovery.js +1 -126
- package/dist/cli/help-content.js +2 -1001
- package/dist/cli/help-json-payload.js +4 -570
- package/dist/cli/main.d.ts +4 -0
- package/dist/cli/main.js +5 -2573
- package/dist/cli/migration-gates.js +1 -289
- package/dist/cli/public.js +1 -20
- package/dist/cli/register-annotations.js +1 -270
- package/dist/cli/register-assurance.js +1 -62
- package/dist/cli/register-files-lookup.js +1 -56
- package/dist/cli/register-history-activity.d.ts +8 -0
- package/dist/cli/register-history-activity.js +2 -0
- package/dist/cli/register-history-author.js +1 -38
- package/dist/cli/register-history-maintenance.d.ts +9 -0
- package/dist/cli/register-history-maintenance.js +2 -0
- package/dist/cli/register-list-query.js +10 -943
- package/dist/cli/register-mutation-options.js +1 -9
- package/dist/cli/register-mutation.d.ts +0 -5
- package/dist/cli/register-mutation.js +19 -1893
- package/dist/cli/register-operations.js +1 -920
- package/dist/cli/register-setup.js +1 -716
- package/dist/cli/register-structured-mutation.js +1 -196
- package/dist/cli/registration-helpers.js +1 -5
- package/dist/cli/runtime-compatibility-boundary.js +4 -42
- package/dist/cli/schema-registration-helpers.js +1 -73
- package/dist/cli/search-refresh.js +1 -13
- package/dist/cli/stats-analytics-json.js +1 -68
- package/dist/cli/telemetry-flush.js +1 -10
- package/dist/cli-bundle/bundle-manifest.json +164 -156
- package/dist/cli-bundle/chunks/{chunk-NPN5I67J.js → chunk-3IPRM75M.js} +3 -3
- package/dist/cli-bundle/chunks/chunk-4VL5P22L.js +2 -0
- package/dist/cli-bundle/chunks/chunk-AAFBV3U3.js +29 -0
- package/dist/cli-bundle/chunks/chunk-D3YVILJJ.js +20 -0
- package/dist/cli-bundle/chunks/{chunk-WYRZZ5ZE.js → chunk-DEZPZOQ7.js} +2 -2
- package/dist/cli-bundle/chunks/chunk-ECBLPN7B.js +3 -0
- package/dist/cli-bundle/chunks/chunk-J6ERHBV2.js +235 -0
- package/dist/cli-bundle/chunks/chunk-JUNJ5EKI.js +2 -0
- package/dist/cli-bundle/chunks/chunk-L5RCDKQ2.js +2 -0
- package/dist/cli-bundle/chunks/chunk-NSAPNEYH.js +2 -0
- package/dist/cli-bundle/chunks/chunk-OHNLSGGV.js +79 -0
- package/dist/cli-bundle/chunks/chunk-WQKMSFBV.js +5 -0
- package/dist/cli-bundle/chunks/{chunk-BAX2BYUW.js → chunk-XZ6T7YPP.js} +256 -150
- package/dist/cli-bundle/chunks/{chunk-JT6XF6GE.js → chunk-Z3XVXUVF.js} +4 -4
- package/dist/cli-bundle/chunks/register-list-query-UIHRCS6D.js +11 -0
- package/dist/cli-bundle/chunks/register-mutation-WHWMGRVX.js +20 -0
- package/dist/cli-bundle/chunks/register-operations-64YZYTC5.js +2 -0
- package/dist/cli-bundle/chunks/register-setup-PERI45EM.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-2W4XIYOB.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-2WSBXIGF.js +12 -0
- package/dist/cli-bundle/focused-chunks/chunk-5FHTCOHS.js +3 -0
- package/dist/cli-bundle/focused-chunks/chunk-7N6DOREF.js +26 -0
- package/dist/cli-bundle/focused-chunks/{chunk-3BZEOXLT.js → chunk-7PC4R5QB.js} +2 -2
- package/dist/cli-bundle/focused-chunks/chunk-BUCJUZVG.js +6 -0
- package/dist/cli-bundle/focused-chunks/chunk-FE3BABLJ.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-IWITF53W.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-OQUGRHKV.js +10 -0
- package/dist/cli-bundle/focused-chunks/{chunk-M6PBRFSH.js → chunk-PNKIANFZ.js} +2 -2
- package/dist/cli-bundle/focused-chunks/{chunk-LIJIA4TY.js → chunk-QQQ4SAUO.js} +3 -3
- package/dist/cli-bundle/focused-chunks/chunk-TTYXF5YD.js +177 -0
- package/dist/cli-bundle/focused-chunks/chunk-XNR3DM6J.js +2 -0
- package/dist/cli-bundle/focused-chunks/chunk-XSS3APUF.js +9 -0
- package/dist/cli-bundle/focused-chunks/chunk-YCDQ2N23.js +8 -0
- package/dist/cli-bundle/focused-chunks/chunk-YJUXGS57.js +20 -0
- package/dist/cli-bundle/focused-chunks/chunk-ZTCE4UO6.js +58 -0
- package/dist/cli-bundle/main.js +20 -20
- package/dist/cli-bundle/sdk-authoring.js +1 -1
- package/dist/cli-bundle/sdk-contracts.js +2 -2
- package/dist/cli-bundle/sdk-core.js +37 -37
- package/dist/cli-bundle/sdk-governance.js +1 -1
- package/dist/cli-bundle/sdk-graph.js +1 -1
- package/dist/cli-bundle/sdk-merge.js +42 -42
- package/dist/cli-bundle/sdk-query.js +1 -1
- package/dist/cli-bundle/sdk-runtime.js +1 -1
- package/dist/cli-bundle/sdk-testing.js +1 -1
- package/dist/cli-bundle/sdk.js +11 -11
- package/dist/cli.js +1 -104
- package/dist/core/checkpoint/checkpoint-gc.js +1 -169
- package/dist/core/checkpoint/mutation-checkpoint.js +2 -133
- package/dist/core/config/nested-settings.js +1 -534
- package/dist/core/config/positional-value.js +1 -109
- package/dist/core/diagnostics/remediation.js +1 -506
- package/dist/core/extensions/activation-summary-markdown.js +2 -145
- package/dist/core/extensions/activation-summary.js +1 -92
- package/dist/core/extensions/activation-transaction.js +1 -46
- package/dist/core/extensions/capability-usage.js +1 -173
- package/dist/core/extensions/command-hook-context.js +1 -13
- package/dist/core/extensions/command-metadata-contract.js +1 -22
- package/dist/core/extensions/command-visibility-tier.js +1 -29
- package/dist/core/extensions/contribution-inventory.js +1 -173
- package/dist/core/extensions/exporter-output-contract.js +1 -66
- package/dist/core/extensions/extension-candidate.js +1 -18
- package/dist/core/extensions/extension-capability-aliases.js +1 -158
- package/dist/core/extensions/extension-hook-runtime.js +1 -699
- package/dist/core/extensions/extension-policy.js +1 -599
- package/dist/core/extensions/extension-registries.js +1 -62
- package/dist/core/extensions/extension-runtime-helpers.js +1 -33
- package/dist/core/extensions/extension-types.js +1 -102
- package/dist/core/extensions/flag-definition-validation.js +1 -52
- package/dist/core/extensions/flag-value-types.js +1 -64
- package/dist/core/extensions/index.js +1 -526
- package/dist/core/extensions/item-field-types.js +1 -39
- package/dist/core/extensions/item-fields.js +1 -261
- package/dist/core/extensions/loader.js +1 -2223
- package/dist/core/extensions/manifest-schema.js +1 -69
- package/dist/core/extensions/module-graph-snapshot.js +1 -33
- package/dist/core/extensions/preflight-ownership.js +1 -41
- package/dist/core/extensions/registration-validation.js +1 -82
- package/dist/core/extensions/registration-values.js +1 -209
- package/dist/core/extensions/reserved-host-flags.js +1 -36
- package/dist/core/extensions/runtime-registrations.js +1 -67
- package/dist/core/extensions/service-ownership.js +1 -19
- package/dist/core/extensions/version-compat.js +1 -216
- package/dist/core/fs/fs-utils.js +2 -158
- package/dist/core/fs/host-environment-errors.js +1 -141
- package/dist/core/fs/index.js +1 -9
- package/dist/core/fs/path-utils.js +1 -17
- package/dist/core/governance/content-fields.js +1 -160
- package/dist/core/governance/issue-codes.js +1 -151
- package/dist/core/governance/metadata-coverage.js +1 -358
- package/dist/core/history/drift-cache.js +3 -72
- package/dist/core/history/drift-scan.js +1 -342
- package/dist/core/history/event-classification.js +1 -109
- package/dist/core/history/event-index.js +8 -784
- package/dist/core/history/history-compact-bulk.js +1 -104
- package/dist/core/history/history-diff.js +1 -158
- package/dist/core/history/history-rewrite.d.ts +6 -1
- package/dist/core/history/history-rewrite.js +1 -107
- package/dist/core/history/history-storage-stats.js +1 -102
- package/dist/core/history/history-stream-policy.js +1 -62
- package/dist/core/history/history.js +2 -617
- package/dist/core/history/identity.js +1 -30
- package/dist/core/history/index.js +1 -9
- package/dist/core/history/projection.js +1 -196
- package/dist/core/history/read.d.ts +9 -0
- package/dist/core/history/read.js +1 -57
- package/dist/core/history/replay.js +2 -439
- package/dist/core/history/version-address.js +1 -32
- package/dist/core/history/workspace-history.js +2 -433
- package/dist/core/io/body-file.js +1 -62
- package/dist/core/io/bulk-ids-input.js +1 -112
- package/dist/core/item/actionability.js +1 -327
- package/dist/core/item/dependency-reference.js +1 -20
- package/dist/core/item/id.js +1 -112
- package/dist/core/item/index.js +1 -12
- package/dist/core/item/item-format-version.js +1 -78
- package/dist/core/item/item-format.js +5 -1473
- package/dist/core/item/item-record.js +1 -23
- package/dist/core/item/item-type-definition.js +1 -133
- package/dist/core/item/parent-reference-policy.js +1 -57
- package/dist/core/item/parse.js +2 -603
- package/dist/core/item/plan-lifecycle.js +1 -19
- package/dist/core/item/priority.js +1 -61
- package/dist/core/item/sprint-release-format.js +1 -38
- package/dist/core/item/status-filter.js +1 -115
- package/dist/core/item/status.js +1 -43
- package/dist/core/item/toon-decode.js +1 -29
- package/dist/core/item/type-registry.js +1 -715
- package/dist/core/item/type-synonyms.js +1 -38
- package/dist/core/lock/index.js +1 -9
- package/dist/core/lock/lock-gc.js +1 -240
- package/dist/core/lock/lock.js +3 -590
- package/dist/core/output/mutation-projection.js +1 -217
- package/dist/core/output/output-control.js +1 -25
- package/dist/core/output/output.js +11 -494
- package/dist/core/output/query-summary.js +1 -58
- package/dist/core/output/tabular.js +1 -77
- package/dist/core/packages/manifest.js +1 -244
- package/dist/core/packages/root.js +1 -84
- package/dist/core/policy/workflow-policy-schema.d.ts +312 -0
- package/dist/core/policy/workflow-policy-schema.js +2 -0
- package/dist/core/policy/workflow-policy-store.d.ts +24 -0
- package/dist/core/policy/workflow-policy-store.js +2 -0
- package/dist/core/policy/workflow-policy.d.ts +139 -0
- package/dist/core/policy/workflow-policy.js +2 -0
- package/dist/core/profile/profile-describe.js +1 -83
- package/dist/core/profile/profile-lint.js +1 -415
- package/dist/core/profile/profile-plan.js +0 -0
- package/dist/core/profile/profile-presets.js +1 -370
- package/dist/core/reproducibility/context.js +1 -82
- package/dist/core/schema/fields-file.js +2 -288
- package/dist/core/schema/item-types-file.js +2 -296
- package/dist/core/schema/runtime-field-filters.js +1 -49
- package/dist/core/schema/runtime-field-values.js +1 -313
- package/dist/core/schema/runtime-schema.js +2 -826
- package/dist/core/schema/status-defs-file.js +2 -227
- package/dist/core/schema/status-token.js +1 -31
- package/dist/core/schema/type-inference.js +1 -95
- package/dist/core/schema/type-presets.js +1 -87
- package/dist/core/schema/type-workflows.js +1 -104
- package/dist/core/search/background-refresh.js +2 -286
- package/dist/core/search/bm25.js +1 -146
- package/dist/core/search/cache.js +2 -534
- package/dist/core/search/corpus.js +1 -311
- package/dist/core/search/embedding-batches.js +1 -163
- package/dist/core/search/eval.js +1 -225
- package/dist/core/search/http-client.js +1 -75
- package/dist/core/search/providers.js +1 -242
- package/dist/core/search/relevance.js +1 -244
- package/dist/core/search/semantic-defaults.js +1 -199
- package/dist/core/search/staleness.js +1 -30
- package/dist/core/search/vector-stores.js +2 -664
- package/dist/core/search/vectorization-metadata.js +1 -81
- package/dist/core/sentry/helpers.js +1 -272
- package/dist/core/sentry/instrument.js +1 -387
- package/dist/core/session/session-state.js +1 -260
- package/dist/core/shared/agent-session-context.js +1 -133
- package/dist/core/shared/author.js +1 -1172
- package/dist/core/shared/command-types.js +1 -4
- package/dist/core/shared/conflict-markers.js +1 -31
- package/dist/core/shared/constants.js +1 -405
- package/dist/core/shared/errors.js +1 -20
- package/dist/core/shared/html-entity-decode.js +1 -131
- package/dist/core/shared/index.js +1 -12
- package/dist/core/shared/item-metadata-contract.js +1 -89
- package/dist/core/shared/lazy-module.js +1 -16
- package/dist/core/shared/levenshtein.js +1 -61
- package/dist/core/shared/memo.js +1 -19
- package/dist/core/shared/numeric-parsers.js +1 -20
- package/dist/core/shared/option-alias-visibility.js +1 -67
- package/dist/core/shared/primitives.js +1 -127
- package/dist/core/shared/serial-queue.js +1 -79
- package/dist/core/shared/serialization.js +1 -210
- package/dist/core/shared/split-comma-list.js +1 -30
- package/dist/core/shared/text-normalization.js +1 -38
- package/dist/core/shared/time.js +1 -306
- package/dist/core/store/index.js +1 -12
- package/dist/core/store/item-format-migration.js +1 -125
- package/dist/core/store/item-metadata-cache.js +1 -1116
- package/dist/core/store/item-metadata-query-index.js +9 -394
- package/dist/core/store/item-metadata-read-work.js +1 -43
- package/dist/core/store/item-store.js +1 -693
- package/dist/core/store/paths.d.ts +1 -1
- package/dist/core/store/paths.js +1 -214
- package/dist/core/store/settings-read-cache.js +1 -85
- package/dist/core/store/settings-validator.d.ts +1 -0
- package/dist/core/store/settings-validator.js +1 -421
- package/dist/core/store/settings.js +3 -1309
- package/dist/core/store/tracker-preflight.js +1 -141
- package/dist/core/telemetry/consent.js +5 -108
- package/dist/core/telemetry/observability.js +1 -246
- package/dist/core/telemetry/runtime.js +4 -1988
- package/dist/core/test/background-runs.js +4 -945
- package/dist/core/test/item-test-run-tracking.js +1 -63
- package/dist/core/test/run-selectors.js +1 -120
- package/dist/core/validate/estimate-defaults.js +1 -89
- package/dist/core/validate/fix-planning.js +1 -189
- package/dist/core/validate/linked-artifact-reference.js +1 -36
- package/dist/core/validate/missing-by-type.js +1 -34
- package/dist/core/validate/missing-link-owners.js +1 -95
- package/dist/core/validate/stale-file-classification.js +1 -82
- package/dist/mcp/http-server.js +5 -448
- package/dist/mcp/legacy-adapter.js +1 -77
- package/dist/mcp/runtime-capabilities.js +1 -200
- package/dist/mcp/server.js +4 -1233
- package/dist/mcp/tool-definitions.js +1 -804
- package/dist/sdk/actionability.js +1 -13
- package/dist/sdk/agent/closed-domain-contracts.js +1 -161
- package/dist/sdk/agent/command-recovery.js +1 -59
- package/dist/sdk/agent/command-suggestions.js +1 -66
- package/dist/sdk/agent/create-option-policy.js +1 -31
- package/dist/sdk/agent/identity-config.js +1 -106
- package/dist/sdk/agent/item-addressing.js +1 -207
- package/dist/sdk/agent/refusal-closure-census.js +1 -151
- package/dist/sdk/agent/refusal-closure.js +1 -133
- package/dist/sdk/agent/refusal-corpus-contracts.js +1 -193
- package/dist/sdk/agent/refusal-reachability.js +1 -593
- package/dist/sdk/agent/subcommand-recovery.js +1 -83
- package/dist/sdk/agent/task-transcript-contracts.js +1 -197
- package/dist/sdk/agent/tracker-preflight-contracts.js +1 -126
- package/dist/sdk/agent-capability-contracts.js +1 -428
- package/dist/sdk/agent-session-context.js +1 -9
- package/dist/sdk/annotations.js +1 -448
- package/dist/sdk/author-attribution.js +1 -468
- package/dist/sdk/authoring.js +1 -20
- package/dist/sdk/cli-bootstrap.js +1 -838
- package/dist/sdk/cli-contracts/agent-output-contracts.d.ts +1 -1
- package/dist/sdk/cli-contracts/agent-output-contracts.js +4 -476
- package/dist/sdk/cli-contracts/bootstrap-command-scanner.js +1 -79
- package/dist/sdk/cli-contracts/command-aliases.d.ts +4 -0
- package/dist/sdk/cli-contracts/command-aliases.js +1 -107
- package/dist/sdk/cli-contracts/command-exit-contracts.js +1 -151
- package/dist/sdk/cli-contracts/commander-mutation-options.js +1 -1081
- package/dist/sdk/cli-contracts/commander-types.js +1 -159
- package/dist/sdk/cli-contracts/completeness.js +1 -393
- package/dist/sdk/cli-contracts/enum-contracts.d.ts +1 -1
- package/dist/sdk/cli-contracts/enum-contracts.js +1 -222
- package/dist/sdk/cli-contracts/flag-contracts.js +1 -1947
- package/dist/sdk/cli-contracts/flag-lexicon-contracts.js +1 -347
- package/dist/sdk/cli-contracts/grammar-contracts.js +1 -986
- package/dist/sdk/cli-contracts/registration-helpers.js +7 -990
- package/dist/sdk/cli-contracts/runtime-contracts.d.ts +5 -0
- package/dist/sdk/cli-contracts/runtime-contracts.js +1 -2090
- package/dist/sdk/cli-contracts/schemas/assurance-definition.js +1 -324
- package/dist/sdk/cli-contracts/string-lists.js +1 -16
- package/dist/sdk/cli-contracts/tool-option-contracts.js +1 -461
- package/dist/sdk/cli-contracts/tool-parameter-tables.js +1 -2167
- package/dist/sdk/cli-contracts/tool-schema.d.ts +3 -1
- package/dist/sdk/cli-contracts/tool-schema.js +1 -1664
- package/dist/sdk/cli-contracts/typed-action-inputs.js +1 -4
- package/dist/sdk/cli-contracts.d.ts +1 -1
- package/dist/sdk/cli-contracts.js +1 -17
- package/dist/sdk/cli-program.js +1 -49
- package/dist/sdk/command-line.d.ts +2 -5
- package/dist/sdk/command-line.js +1 -78
- package/dist/sdk/comments.js +1 -133
- package/dist/sdk/compile-cache.js +1 -73
- package/dist/sdk/completion.js +174 -839
- package/dist/sdk/compose.js +1 -1090
- package/dist/sdk/config.js +1 -1204
- package/dist/sdk/context/recency.js +1 -33
- package/dist/sdk/context/semantic-session-attribution.js +1 -82
- package/dist/sdk/context/usage-egress.js +1 -29
- package/dist/sdk/context/usage-ledger.js +3 -185
- package/dist/sdk/context-intent-contracts.js +1 -709
- package/dist/sdk/context-intent-runtime.js +1 -115
- package/dist/sdk/context-packing.js +1 -218
- package/dist/sdk/context-relevance.js +1 -503
- package/dist/sdk/context-signal-store.js +2 -426
- package/dist/sdk/context-usage.js +1 -367
- package/dist/sdk/contracts.js +1 -23
- package/dist/sdk/core-governance.js +1 -14
- package/dist/sdk/core.js +1 -14
- package/dist/sdk/corpus-shape.js +1 -401
- package/dist/sdk/define.js +1 -220
- package/dist/sdk/dependencies.js +1 -718
- package/dist/sdk/dependency-flag-validation.js +1 -156
- package/dist/sdk/dependency-provenance.js +1 -135
- package/dist/sdk/docs.js +1 -14
- package/dist/sdk/duplicates.js +1 -40
- package/dist/sdk/environment/agent-environment.js +1 -466
- package/dist/sdk/environment/host-environment-errors.js +1 -8
- package/dist/sdk/environment/project-runtime-compatibility.js +1 -481
- package/dist/sdk/environment/source-context.js +1 -28
- package/dist/sdk/environment/tracker-preflight.js +1 -9
- package/dist/sdk/error-code-catalog.js +1 -153
- package/dist/sdk/error-runtime.js +1 -58
- package/dist/sdk/errors.js +1 -58
- package/dist/sdk/eval.js +1 -190
- package/dist/sdk/extension/author-manifest.js +1 -92
- package/dist/sdk/extension/bundled-catalog.js +1 -332
- package/dist/sdk/extension/concurrency.js +1 -25
- package/dist/sdk/extension/copy-scope.d.ts +2 -0
- package/dist/sdk/extension/copy-scope.js +2 -0
- package/dist/sdk/extension/custom-field-collisions.js +1 -30
- package/dist/sdk/extension/describe.js +3 -189
- package/dist/sdk/extension/doctor.js +1 -606
- package/dist/sdk/extension/install-plan.d.ts +69 -0
- package/dist/sdk/extension/install-plan.js +2 -0
- package/dist/sdk/extension/install-receipts.d.ts +7 -0
- package/dist/sdk/extension/install-receipts.js +2 -0
- package/dist/sdk/extension/install-runtime.js +3 -313
- package/dist/sdk/extension/install-snapshot.js +1 -66
- package/dist/sdk/extension/install-sources.js +5 -1057
- package/dist/sdk/extension/managed-state.js +2 -252
- package/dist/sdk/extension/migrations.js +2 -174
- package/dist/sdk/extension/output-ownership.js +1 -25
- package/dist/sdk/extension/runtime-summary.js +1 -18
- package/dist/sdk/extension/scaffold.js +4 -2308
- package/dist/sdk/extension/shared.js +1 -147
- package/dist/sdk/extension/source-resolution.js +1 -65
- package/dist/sdk/extension/update-check.js +1 -67
- package/dist/sdk/extension-command-context.js +1 -44
- package/dist/sdk/extension-contracts.js +1 -73
- package/dist/sdk/extension.d.ts +7 -2
- package/dist/sdk/extension.js +1 -2196
- package/dist/sdk/files.js +1 -535
- package/dist/sdk/flag-invocation-contracts.d.ts +0 -5
- package/dist/sdk/flag-invocation-contracts.js +1 -344
- package/dist/sdk/generated/generated-error-code-catalog-part-1.js +1 -2224
- package/dist/sdk/generated/generated-error-code-catalog-part-2.js +1 -2236
- package/dist/sdk/generated-error-code-catalog.js +1 -16
- package/dist/sdk/governance/assurance-action-contracts.js +1 -4
- package/dist/sdk/governance/assurance-action.js +1 -411
- package/dist/sdk/governance/assurance-limits.js +1 -10
- package/dist/sdk/governance/assurance-mutation-error.js +1 -81
- package/dist/sdk/governance/assurance-presets.js +1 -135
- package/dist/sdk/governance/assurance-runtime.js +1 -238
- package/dist/sdk/governance/assurance.js +4 -1182
- package/dist/sdk/governance/boundary-fixtures.js +1 -200
- package/dist/sdk/governance/coverage-assurance.js +1 -60
- package/dist/sdk/governance/defect-recurrence-coverage.js +1 -188
- package/dist/sdk/governance/defect-recurrence-graph.js +1 -120
- package/dist/sdk/governance/defect-recurrence-signals.js +1 -24
- package/dist/sdk/governance/defect-recurrence.js +1 -623
- package/dist/sdk/governance/extension-host-version.js +1 -115
- package/dist/sdk/governance/gc.js +1 -368
- package/dist/sdk/governance/health.js +1 -2367
- package/dist/sdk/governance/hierarchy-validation.js +1 -108
- package/dist/sdk/governance/linked-file-report.js +1 -71
- package/dist/sdk/governance/merge-receipt-history.js +1 -206
- package/dist/sdk/governance/provenance-health.js +1 -282
- package/dist/sdk/governance/reindex.js +4 -761
- package/dist/sdk/governance/stale-work.js +1 -82
- package/dist/sdk/governance/status-role-diagnostics.js +1 -35
- package/dist/sdk/governance/storage-integrity.js +1 -280
- package/dist/sdk/governance/tracked-runtime-cache.js +1 -106
- package/dist/sdk/governance/upgrade.js +2 -327
- package/dist/sdk/governance/validate-history-drift.js +1 -81
- package/dist/sdk/governance/validate-item-reader.js +1 -17
- package/dist/sdk/governance/validate-normalization.js +1 -36
- package/dist/sdk/governance/validate.d.ts +3 -1
- package/dist/sdk/governance/validate.js +1 -2261
- package/dist/sdk/governance/workflow-completeness.d.ts +32 -0
- package/dist/sdk/governance/workflow-completeness.js +2 -0
- package/dist/sdk/governance/workflow-policy.d.ts +47 -0
- package/dist/sdk/governance/workflow-policy.js +4 -0
- package/dist/sdk/governance/workspace-position.js +1 -163
- package/dist/sdk/governance.d.ts +2 -0
- package/dist/sdk/governance.js +1 -31
- package/dist/sdk/graph/adapter.js +1 -181
- package/dist/sdk/graph/analytics.js +1 -474
- package/dist/sdk/graph/assembly.js +1 -377
- package/dist/sdk/graph/cache.js +1 -160
- package/dist/sdk/graph/centrality.js +1 -258
- package/dist/sdk/graph/conformance.js +1 -130
- package/dist/sdk/graph/deadline-scheduling.d.ts +90 -0
- package/dist/sdk/graph/deadline-scheduling.js +2 -0
- package/dist/sdk/graph/durable-cache.d.ts +1 -1
- package/dist/sdk/graph/durable-cache.js +1 -361
- package/dist/sdk/graph/governance-contracts.js +1 -34
- package/dist/sdk/graph/governance.d.ts +13 -1
- package/dist/sdk/graph/governance.js +1 -735
- package/dist/sdk/graph/hierarchy-integrity.js +1 -310
- package/dist/sdk/graph/index.d.ts +3 -2
- package/dist/sdk/graph/index.js +1 -26
- package/dist/sdk/graph/lifecycle-coverage.d.ts +32 -0
- package/dist/sdk/graph/lifecycle-coverage.js +2 -0
- package/dist/sdk/graph/mutation-advisory.js +1 -176
- package/dist/sdk/graph/remediation.js +1 -197
- package/dist/sdk/graph/run.d.ts +15 -1
- package/dist/sdk/graph/run.js +1 -768
- package/dist/sdk/graph/scheduling.js +1 -124
- package/dist/sdk/graph/traversal.js +1 -284
- package/dist/sdk/graph/workspace-relationship-kind-registry.js +1 -27
- package/dist/sdk/graph.js +1 -15
- package/dist/sdk/guide-topics.js +1 -707
- package/dist/sdk/guide.js +1 -279
- package/dist/sdk/history/maintenance.d.ts +71 -0
- package/dist/sdk/history/maintenance.js +2 -0
- package/dist/sdk/history/salvage.js +2 -247
- package/dist/sdk/history/subject.d.ts +19 -0
- package/dist/sdk/history/subject.js +2 -0
- package/dist/sdk/history-analytics.js +1 -282
- package/dist/sdk/history-compact.js +1 -527
- package/dist/sdk/history-mcp.js +1 -68
- package/dist/sdk/history-provenance.js +1 -182
- package/dist/sdk/history-read.js +1 -96
- package/dist/sdk/history-redact.d.ts +1 -14
- package/dist/sdk/history-redact.js +1 -643
- package/dist/sdk/history-repair.d.ts +5 -0
- package/dist/sdk/history-repair.js +1 -657
- package/dist/sdk/improvement-ledger-validation.js +1 -62
- package/dist/sdk/improvement-ledger.js +2 -257
- package/dist/sdk/index.d.ts +4 -1
- package/dist/sdk/index.js +1 -183
- package/dist/sdk/init-agent-guidance.js +2 -496
- package/dist/sdk/init.js +2 -820
- package/dist/sdk/invocation-author.js +1 -39
- package/dist/sdk/item-children.js +1 -90
- package/dist/sdk/item-metadata-index.js +1 -15
- package/dist/sdk/item-schedule.js +1 -27
- package/dist/sdk/item-transaction.js +1 -396
- package/dist/sdk/learnings.js +1 -29
- package/dist/sdk/lifecycle/append.js +2 -53
- package/dist/sdk/lifecycle/claim.d.ts +2 -0
- package/dist/sdk/lifecycle/claim.js +1 -242
- package/dist/sdk/lifecycle/close-many.js +1 -438
- package/dist/sdk/lifecycle/close.js +1 -468
- package/dist/sdk/lifecycle/copy.js +1 -212
- package/dist/sdk/lifecycle/create.js +1 -1949
- package/dist/sdk/lifecycle/delete.js +1 -45
- package/dist/sdk/lifecycle/event-validation-messages.js +1 -91
- package/dist/sdk/lifecycle/focus.js +1 -91
- package/dist/sdk/lifecycle/hierarchy-mutation-lock.js +1 -24
- package/dist/sdk/lifecycle/legacy-none-tokens.js +1 -149
- package/dist/sdk/lifecycle/lifecycle-transitions.js +1 -40
- package/dist/sdk/lifecycle/mcp-actions.d.ts +2 -0
- package/dist/sdk/lifecycle/mcp-actions.js +1 -51
- package/dist/sdk/lifecycle/metadata-normalizers.js +1 -46
- package/dist/sdk/lifecycle/mutation-command-options.js +1 -9
- package/dist/sdk/lifecycle/plan.js +1 -1606
- package/dist/sdk/lifecycle/recurrence-parsers.d.ts +1 -1
- package/dist/sdk/lifecycle/recurrence-parsers.js +1 -147
- package/dist/sdk/lifecycle/reopen.js +1 -68
- package/dist/sdk/lifecycle/repeatable-metadata-parsers.js +1 -143
- package/dist/sdk/lifecycle/restore.d.ts +1 -0
- package/dist/sdk/lifecycle/restore.js +1 -330
- package/dist/sdk/lifecycle/shared-unset-fields.js +1 -295
- package/dist/sdk/lifecycle/update-many.js +1 -861
- package/dist/sdk/lifecycle/update.js +1 -2136
- package/dist/sdk/lifecycle-completion.js +1 -92
- package/dist/sdk/lifecycle-policy.js +1 -120
- package/dist/sdk/linked-artifacts.js +1 -530
- package/dist/sdk/mcp/apps.js +4 -133
- package/dist/sdk/mcp/authorization.js +1 -404
- package/dist/sdk/mcp/discovery.js +1 -494
- package/dist/sdk/mcp/interactions.js +1 -336
- package/dist/sdk/mcp/protocol.d.ts +7 -0
- package/dist/sdk/mcp/protocol.js +1 -184
- package/dist/sdk/mcp/skills.js +1 -389
- package/dist/sdk/mcp/subscriptions.js +1 -211
- package/dist/sdk/mcp/tasks.js +2 -430
- package/dist/sdk/mcp/transport.js +1 -260
- package/dist/sdk/merge/abandoned-receipts.js +1 -46
- package/dist/sdk/merge/driver.js +1 -212
- package/dist/sdk/merge/index.js +1 -16
- package/dist/sdk/merge/install.js +3 -561
- package/dist/sdk/merge/receipt-file-boundary.js +1 -46
- package/dist/sdk/merge/receipt-operation.js +1 -96
- package/dist/sdk/merge/receipt-schema.js +1 -397
- package/dist/sdk/merge/receipts.js +4 -525
- package/dist/sdk/merge/reconcile.js +1 -352
- package/dist/sdk/merge/three-way.js +3 -775
- package/dist/sdk/merge.js +1 -10
- package/dist/sdk/mutation-events.js +1 -292
- package/dist/sdk/mutation-guard.js +1 -216
- package/dist/sdk/notes.js +1 -139
- package/dist/sdk/output-contracts.js +1 -172
- package/dist/sdk/output-projection.js +1 -430
- package/dist/sdk/output-token-accounting.js +1 -140
- package/dist/sdk/output.js +1 -64
- package/dist/sdk/ownership-source.js +1 -21
- package/dist/sdk/package-import-adapters.js +1 -442
- package/dist/sdk/package-migrations.js +1 -20
- package/dist/sdk/package-runtime-options.js +1 -80
- package/dist/sdk/pagination.js +1 -162
- package/dist/sdk/profile.js +1 -454
- package/dist/sdk/provenance.js +1 -258
- package/dist/sdk/public-surface.json +1 -1
- package/dist/sdk/query/activity.js +1 -401
- package/dist/sdk/query/aggregate.d.ts +16 -0
- package/dist/sdk/query/aggregate.js +1 -390
- package/dist/sdk/query/calendar.js +1 -964
- package/dist/sdk/query/complete-list.js +1 -215
- package/dist/sdk/query/context.js +1 -1702
- package/dist/sdk/query/duplicate-candidates.js +1 -70
- package/dist/sdk/query/get.js +1 -450
- package/dist/sdk/query/history.js +1 -186
- package/dist/sdk/query/item-filter-options.js +1 -9
- package/dist/sdk/query/light-metadata.js +1 -18
- package/dist/sdk/query/list-filter-shared.js +1 -81
- package/dist/sdk/query/list.js +1 -1304
- package/dist/sdk/query/multi-value-filters.js +1 -78
- package/dist/sdk/query/next.js +1 -513
- package/dist/sdk/query/parsers.js +1 -44
- package/dist/sdk/query/projection-contracts.js +1 -184
- package/dist/sdk/query/search-contracts.d.ts +27 -0
- package/dist/sdk/query/search-contracts.js +1 -230
- package/dist/sdk/query/search-pagination.js +1 -35
- package/dist/sdk/query/search-rendering.js +1 -105
- package/dist/sdk/query/search.d.ts +6 -4
- package/dist/sdk/query/search.js +2 -1987
- package/dist/sdk/query.js +1 -35
- package/dist/sdk/read-output/continuation.js +1 -194
- package/dist/sdk/read-output-budget.js +1 -135
- package/dist/sdk/read-output-contracts.d.ts +1 -1
- package/dist/sdk/read-output-contracts.js +1 -1225
- package/dist/sdk/read-output-rows.js +1 -186
- package/dist/sdk/read-output-session.js +1 -208
- package/dist/sdk/relationship-analytics.js +1 -410
- package/dist/sdk/relationship-context.js +1 -284
- package/dist/sdk/relationship-history.js +4 -519
- package/dist/sdk/relationship-kinds/contract.js +1 -22
- package/dist/sdk/relationship-migration.js +1 -77
- package/dist/sdk/relationships.js +1 -579
- package/dist/sdk/reproducibility/process.js +1 -87
- package/dist/sdk/runtime-action-aliases.js +1 -59
- package/dist/sdk/runtime-extended-actions.js +1 -177
- package/dist/sdk/runtime-input.js +1 -614
- package/dist/sdk/runtime-primitives.js +1 -84
- package/dist/sdk/runtime-public-contracts.d.ts +2 -1
- package/dist/sdk/runtime-public-contracts.js +1 -4
- package/dist/sdk/runtime-stats-options.js +1 -38
- package/dist/sdk/runtime.d.ts +4 -0
- package/dist/sdk/runtime.js +1 -1928
- package/dist/sdk/scheduling-shortcuts.js +1 -63
- package/dist/sdk/schema-migration.js +3 -856
- package/dist/sdk/schema.d.ts +2 -1
- package/dist/sdk/schema.js +1 -1376
- package/dist/sdk/search-refresh-worker.js +1 -18
- package/dist/sdk/similarity-scoring.js +1 -53
- package/dist/sdk/similarity.js +1 -326
- package/dist/sdk/start-task-status.js +1 -14
- package/dist/sdk/stats.js +1 -270
- package/dist/sdk/structured-mutations.js +1 -580
- package/dist/sdk/telemetry-flush.js +1 -13
- package/dist/sdk/telemetry.js +1 -405
- package/dist/sdk/templates.js +2 -292
- package/dist/sdk/test/batch.js +2 -509
- package/dist/sdk/test/entry.js +1 -70
- package/dist/sdk/test/execution.js +6 -2211
- package/dist/sdk/test/linked-command-detection.js +1 -546
- package/dist/sdk/test/measurements.js +1 -91
- package/dist/sdk/test/parsers.js +1 -545
- package/dist/sdk/test/runs.js +1 -193
- package/dist/sdk/test/trust.js +2 -206
- package/dist/sdk/testing.js +4 -1391
- package/dist/sdk/traceability/runtime-files-lookup.js +1 -32
- package/dist/sdk/traceability/source-traceability.js +1 -292
- package/dist/sdk/tracker-root-discovery.js +1 -9
- package/dist/sdk/workspace-contracts-cache.js +1 -28
- package/dist/sdk/workspace-contracts.js +1 -33
- package/dist/sdk/workspace-memory.js +2 -318
- package/dist/sdk/workspace-recipe.js +1 -71
- package/dist/sdk/workspace-snapshot.js +4 -613
- package/dist/sdk/workspace-transaction-gc.js +1 -149
- package/dist/sdk/workspace-transaction.js +2 -363
- package/dist/sdk/workspace.js +3 -127
- package/dist/types/index.js +1 -9
- package/dist/types.d.ts +4 -0
- package/dist/types.js +1 -245
- package/docs/AGENT_GUIDE.md +1 -1
- package/docs/COMMANDS.md +10 -0
- package/docs/CONFIGURATION.md +12 -1
- package/docs/CONTEXT_ALGORITHM_PORTFOLIO.md +167 -0
- package/docs/DIAGNOSTIC_OUTPUT_CONTRACTS.md +9 -3
- package/docs/EXTENSIONS.md +1 -0
- package/docs/HISTORY_MAINTENANCE.md +125 -0
- package/docs/MCP_2026_07_28_CONFORMANCE.md +20 -10
- package/docs/PACKAGE_EVIDENCE.md +92 -0
- package/docs/PLANNING_MEASUREMENTS.md +183 -0
- package/docs/README.md +4 -0
- package/docs/READ_OUTPUT_CONTRACTS.md +5 -0
- package/docs/SCRIPTING.md +21 -0
- package/docs/TESTING.md +33 -0
- package/docs/WORKFLOW_POLICIES.md +129 -0
- package/docs/generated/FLAG_LEXICON_BUDGETS.md +7 -7
- package/docs/generated/REFUSAL_CLOSURE_CENSUS.md +11 -5
- package/marketplace.json +2 -2
- package/package.json +5 -5
- package/packages/pm-beads/package.json +1 -1
- package/packages/pm-calendar/package.json +1 -1
- package/packages/pm-command-kit/package.json +1 -1
- package/packages/pm-digital-twin/package.json +1 -1
- package/packages/pm-governance-audit/package.json +1 -1
- package/packages/pm-guide-shell/package.json +1 -1
- package/packages/pm-kanban/package.json +1 -1
- package/packages/pm-lifecycle-hooks/package.json +1 -1
- package/packages/pm-linked-test-adapters/package.json +1 -1
- package/packages/pm-search-advanced/package.json +1 -1
- package/packages/pm-templates/package.json +1 -1
- package/packages/pm-todos/package.json +1 -1
- package/packages/pm-vcs/package.json +1 -1
- package/plugins/pm-claude/.claude-plugin/plugin.json +1 -1
- package/plugins/pm-codex/.codex-plugin/plugin.json +1 -1
- package/scripts/finalize-build.mjs +45 -3
- package/dist/cli-bundle/chunks/chunk-AZDFJGH6.js +0 -9
- package/dist/cli-bundle/chunks/chunk-CKOL5U7J.js +0 -77
- package/dist/cli-bundle/chunks/chunk-JX4DH4WC.js +0 -3
- package/dist/cli-bundle/chunks/chunk-OF76PSDQ.js +0 -5
- package/dist/cli-bundle/chunks/chunk-QUWFABDM.js +0 -232
- package/dist/cli-bundle/chunks/chunk-QWRRFYK3.js +0 -2
- package/dist/cli-bundle/chunks/chunk-RWWBOWJ5.js +0 -2
- package/dist/cli-bundle/chunks/chunk-WGAOYSYH.js +0 -40
- package/dist/cli-bundle/chunks/chunk-WI2AYPA7.js +0 -2
- package/dist/cli-bundle/chunks/register-list-query-5JL52D33.js +0 -11
- package/dist/cli-bundle/chunks/register-mutation-ZPG7KMVP.js +0 -20
- package/dist/cli-bundle/chunks/register-operations-I5W3KMGB.js +0 -2
- package/dist/cli-bundle/chunks/register-setup-H4SVAVX7.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-AL5ON6K6.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-CHC2IDXA.js +0 -6
- package/dist/cli-bundle/focused-chunks/chunk-CK6QFAPZ.js +0 -20
- package/dist/cli-bundle/focused-chunks/chunk-EZR3GHFE.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-H2WJWK7L.js +0 -56
- package/dist/cli-bundle/focused-chunks/chunk-NTPY5GSO.js +0 -3
- package/dist/cli-bundle/focused-chunks/chunk-P5O7MP5Y.js +0 -2
- package/dist/cli-bundle/focused-chunks/chunk-PDMW2E36.js +0 -177
- package/dist/cli-bundle/focused-chunks/chunk-PEFABF7E.js +0 -26
- package/dist/cli-bundle/focused-chunks/chunk-QTVCLMSZ.js +0 -6
- package/dist/cli-bundle/focused-chunks/chunk-QTZRBUYA.js +0 -8
- package/dist/cli-bundle/focused-chunks/chunk-SGQST3PQ.js +0 -12
- package/dist/cli-bundle/focused-chunks/chunk-UKHASMMP.js +0 -10
- package/dist/cli-bundle/focused-chunks/chunk-ZPEKQHOC.js +0 -2
|
@@ -1,337 +1,2 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* @module sdk/mcp/interactions
|
|
3
|
-
*
|
|
4
|
-
* Implements bounded MCP 2026-07-28 multi round-trip request, cache, and JSON
|
|
5
|
-
* Schema contracts without coupling protocol policy to a transport adapter.
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="469f704b-12eb-524d-bcc8-fb8f9f1775f2")}catch(e){}}();
|
|
9
|
-
import { createHash, createHmac, timingSafeEqual } from "node:crypto";
|
|
10
|
-
import { PM_MCP_ERROR_CODES, PM_MCP_META_KEYS, PmMcpProtocolError, isMcpRecord, } from "./protocol.js";
|
|
11
|
-
/** Methods permitted inside a 2026-07-28 MRTR input request map. */
|
|
12
|
-
export const PM_MCP_INPUT_REQUEST_METHODS = [
|
|
13
|
-
"elicitation/create",
|
|
14
|
-
"roots/list",
|
|
15
|
-
"sampling/createMessage",
|
|
16
|
-
];
|
|
17
|
-
/**
|
|
18
|
-
* Transport-neutral control signal used by SDK handlers to request an MRTR
|
|
19
|
-
* response without constructing or serializing JSON-RPC in domain code.
|
|
20
|
-
*/
|
|
21
|
-
export class PmMcpInputRequiredError extends Error {
|
|
22
|
-
/** Server-authored input requests validated by the adapter. */
|
|
23
|
-
inputRequests;
|
|
24
|
-
/** Optional opaque continuation state echoed on retry. */
|
|
25
|
-
requestState;
|
|
26
|
-
/** Create an input-required control signal. */
|
|
27
|
-
constructor(input) {
|
|
28
|
-
super("MCP operation requires additional input");
|
|
29
|
-
this.name = "PmMcpInputRequiredError";
|
|
30
|
-
this.inputRequests = input.inputRequests;
|
|
31
|
-
this.requestState = input.requestState;
|
|
32
|
-
}
|
|
33
|
-
}
|
|
34
|
-
const INPUT_KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9_.-]{0,63}$/u;
|
|
35
|
-
const MAX_INPUT_REQUESTS = 32;
|
|
36
|
-
const MAX_INPUT_PAYLOAD_BYTES = 64 * 1024;
|
|
37
|
-
const MAX_REQUEST_STATE_BYTES = 16 * 1024;
|
|
38
|
-
const DEFAULT_SCHEMA_BOUNDS = {
|
|
39
|
-
maxBytes: 256 * 1024,
|
|
40
|
-
maxDepth: 32,
|
|
41
|
-
maxNodes: 4096,
|
|
42
|
-
};
|
|
43
|
-
function inputCapability(method) {
|
|
44
|
-
if (method === "elicitation/create")
|
|
45
|
-
return "elicitation";
|
|
46
|
-
if (method === "sampling/createMessage")
|
|
47
|
-
return "sampling";
|
|
48
|
-
return "roots";
|
|
49
|
-
}
|
|
50
|
-
function assertBoundedJson(value, maximumBytes, field) {
|
|
51
|
-
let serialized;
|
|
52
|
-
try {
|
|
53
|
-
serialized = JSON.stringify(value);
|
|
54
|
-
}
|
|
55
|
-
catch {
|
|
56
|
-
throw new PmMcpProtocolError(`Invalid ${field}: value is not JSON serializable`, PM_MCP_ERROR_CODES.invalidParams, { field });
|
|
57
|
-
}
|
|
58
|
-
if (Buffer.byteLength(serialized, "utf8") > maximumBytes) {
|
|
59
|
-
throw new PmMcpProtocolError(`Invalid ${field}: payload exceeds the protocol bound`, PM_MCP_ERROR_CODES.invalidParams, { field, maximumBytes });
|
|
60
|
-
}
|
|
61
|
-
}
|
|
62
|
-
/** Validate and clone a server-authored MRTR request map. */
|
|
63
|
-
export function parseMcpInputRequests(value, requestContext) {
|
|
64
|
-
if (!isMcpRecord(value)) {
|
|
65
|
-
throw new PmMcpProtocolError("Invalid MCP inputRequests", PM_MCP_ERROR_CODES.invalidParams, { field: "inputRequests", expected: "object" });
|
|
66
|
-
}
|
|
67
|
-
const entries = Object.entries(value);
|
|
68
|
-
if (entries.length === 0 || entries.length > MAX_INPUT_REQUESTS) {
|
|
69
|
-
throw new PmMcpProtocolError("Invalid MCP inputRequests count", PM_MCP_ERROR_CODES.invalidParams, { minimum: 1, maximum: MAX_INPUT_REQUESTS, observed: entries.length });
|
|
70
|
-
}
|
|
71
|
-
const parsed = {};
|
|
72
|
-
for (const [key, request] of entries) {
|
|
73
|
-
if (!INPUT_KEY_PATTERN.test(key) || !isMcpRecord(request)) {
|
|
74
|
-
throw new PmMcpProtocolError("Invalid MCP input request entry", PM_MCP_ERROR_CODES.invalidParams, { field: `inputRequests.${key}` });
|
|
75
|
-
}
|
|
76
|
-
const method = request.method;
|
|
77
|
-
if (typeof method !== "string" ||
|
|
78
|
-
!PM_MCP_INPUT_REQUEST_METHODS.includes(method)) {
|
|
79
|
-
throw new PmMcpProtocolError("Unsupported MCP input request method", PM_MCP_ERROR_CODES.invalidParams, { field: `inputRequests.${key}.method`, method: method ?? null });
|
|
80
|
-
}
|
|
81
|
-
const capability = inputCapability(method);
|
|
82
|
-
if (!Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities, capability)) {
|
|
83
|
-
throw new PmMcpProtocolError("Missing required client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, { requiredCapabilities: { [capability]: {} } });
|
|
84
|
-
}
|
|
85
|
-
if (!isMcpRecord(request.params)) {
|
|
86
|
-
throw new PmMcpProtocolError("Invalid MCP input request parameters", PM_MCP_ERROR_CODES.invalidParams, { field: `inputRequests.${key}.params`, expected: "object" });
|
|
87
|
-
}
|
|
88
|
-
parsed[key] = {
|
|
89
|
-
method: method,
|
|
90
|
-
params: structuredClone(request.params),
|
|
91
|
-
};
|
|
92
|
-
}
|
|
93
|
-
assertBoundedJson(parsed, MAX_INPUT_PAYLOAD_BYTES, "inputRequests");
|
|
94
|
-
return parsed;
|
|
95
|
-
}
|
|
96
|
-
/** Validate and clone client-supplied input responses from an MRTR retry. */
|
|
97
|
-
export function parseMcpInputResponses(value) {
|
|
98
|
-
if (!isMcpRecord(value)) {
|
|
99
|
-
throw new PmMcpProtocolError("Invalid MCP inputResponses", PM_MCP_ERROR_CODES.invalidParams, { field: "inputResponses", expected: "object" });
|
|
100
|
-
}
|
|
101
|
-
const entries = Object.entries(value);
|
|
102
|
-
if (entries.length > MAX_INPUT_REQUESTS) {
|
|
103
|
-
throw new PmMcpProtocolError("Invalid MCP inputResponses count", PM_MCP_ERROR_CODES.invalidParams, { maximum: MAX_INPUT_REQUESTS, observed: entries.length });
|
|
104
|
-
}
|
|
105
|
-
const parsed = {};
|
|
106
|
-
for (const [key, response] of entries) {
|
|
107
|
-
if (!INPUT_KEY_PATTERN.test(key) || !isMcpRecord(response)) {
|
|
108
|
-
throw new PmMcpProtocolError("Invalid MCP input response entry", PM_MCP_ERROR_CODES.invalidParams, { field: `inputResponses.${key}` });
|
|
109
|
-
}
|
|
110
|
-
parsed[key] = structuredClone(response);
|
|
111
|
-
}
|
|
112
|
-
assertBoundedJson(parsed, MAX_INPUT_PAYLOAD_BYTES, "inputResponses");
|
|
113
|
-
return parsed;
|
|
114
|
-
}
|
|
115
|
-
/** Build a modern input-required result after validating capability and size bounds. */
|
|
116
|
-
export function buildMcpInputRequiredResult(input) {
|
|
117
|
-
const requestState = input.requestState?.trim();
|
|
118
|
-
if (requestState &&
|
|
119
|
-
Buffer.byteLength(requestState, "utf8") > MAX_REQUEST_STATE_BYTES) {
|
|
120
|
-
throw new PmMcpProtocolError("Invalid MCP requestState: payload exceeds the protocol bound", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState", maximumBytes: MAX_REQUEST_STATE_BYTES });
|
|
121
|
-
}
|
|
122
|
-
const inputRequests = input.inputRequests === undefined
|
|
123
|
-
? undefined
|
|
124
|
-
: parseMcpInputRequests(input.inputRequests, input.requestContext);
|
|
125
|
-
if (inputRequests === undefined && !requestState) {
|
|
126
|
-
throw new PmMcpProtocolError("InputRequiredResult requires inputRequests or requestState", PM_MCP_ERROR_CODES.invalidParams, { requiredAnyOf: ["inputRequests", "requestState"] });
|
|
127
|
-
}
|
|
128
|
-
return {
|
|
129
|
-
resultType: "input_required",
|
|
130
|
-
...(inputRequests ? { inputRequests } : {}),
|
|
131
|
-
...(requestState ? { requestState } : {}),
|
|
132
|
-
_meta: {
|
|
133
|
-
[PM_MCP_META_KEYS.serverInfo]: { ...input.serverInfo },
|
|
134
|
-
},
|
|
135
|
-
};
|
|
136
|
-
}
|
|
137
|
-
function requestStateSecret(secret) {
|
|
138
|
-
const bytes = Buffer.from(secret);
|
|
139
|
-
if (bytes.byteLength < 32) {
|
|
140
|
-
throw new PmMcpProtocolError("MCP requestState signing key must contain at least 32 bytes", PM_MCP_ERROR_CODES.invalidParams, { minimumBytes: 32 });
|
|
141
|
-
}
|
|
142
|
-
return bytes;
|
|
143
|
-
}
|
|
144
|
-
/** Seal integrity-protected continuation state for an MRTR retry. */
|
|
145
|
-
export function sealMcpRequestState(payload, secret) {
|
|
146
|
-
if (!Number.isSafeInteger(payload.expiresAt) ||
|
|
147
|
-
payload.expiresAt <= 0 ||
|
|
148
|
-
payload.method.trim().length === 0 ||
|
|
149
|
-
payload.parameterDigest.trim().length === 0 ||
|
|
150
|
-
payload.principal.trim().length === 0) {
|
|
151
|
-
throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams);
|
|
152
|
-
}
|
|
153
|
-
const encoded = Buffer.from(JSON.stringify({ version: 1, ...payload }), "utf8");
|
|
154
|
-
if (encoded.byteLength > MAX_REQUEST_STATE_BYTES / 2) {
|
|
155
|
-
throw new PmMcpProtocolError("MCP requestState payload exceeds the protocol bound", PM_MCP_ERROR_CODES.invalidParams, { maximumBytes: MAX_REQUEST_STATE_BYTES / 2 });
|
|
156
|
-
}
|
|
157
|
-
const body = encoded.toString("base64url");
|
|
158
|
-
const signature = createHmac("sha256", requestStateSecret(secret))
|
|
159
|
-
.update(body)
|
|
160
|
-
.digest("base64url");
|
|
161
|
-
return `${body}.${signature}`;
|
|
162
|
-
}
|
|
163
|
-
function parseMcpRequestStatePayload(decoded) {
|
|
164
|
-
if (!isMcpRecord(decoded) || decoded.version !== 1) {
|
|
165
|
-
throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
|
|
166
|
-
}
|
|
167
|
-
const { expiresAt, method, parameterDigest, principal, state } = decoded;
|
|
168
|
-
if (typeof expiresAt !== "number" || !Number.isSafeInteger(expiresAt)) {
|
|
169
|
-
throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
|
|
170
|
-
}
|
|
171
|
-
if (typeof method !== "string" ||
|
|
172
|
-
typeof parameterDigest !== "string" ||
|
|
173
|
-
typeof principal !== "string") {
|
|
174
|
-
throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
|
|
175
|
-
}
|
|
176
|
-
return { expiresAt, method, parameterDigest, principal, state };
|
|
177
|
-
}
|
|
178
|
-
/** Verify an MRTR requestState value against method, principal, digest, and expiry. */
|
|
179
|
-
export function openMcpRequestState(value, secret, expected) {
|
|
180
|
-
const [body, signature, extra] = value.split(".");
|
|
181
|
-
if (!body || !signature || extra !== undefined) {
|
|
182
|
-
throw new PmMcpProtocolError("Invalid MCP requestState encoding", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
|
|
183
|
-
}
|
|
184
|
-
const observed = Buffer.from(signature, "base64url");
|
|
185
|
-
const calculated = createHmac("sha256", requestStateSecret(secret))
|
|
186
|
-
.update(body)
|
|
187
|
-
.digest();
|
|
188
|
-
if (observed.byteLength !== calculated.byteLength ||
|
|
189
|
-
!timingSafeEqual(observed, calculated)) {
|
|
190
|
-
throw new PmMcpProtocolError("Invalid MCP requestState signature", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
|
|
191
|
-
}
|
|
192
|
-
let decoded;
|
|
193
|
-
try {
|
|
194
|
-
decoded = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
|
|
195
|
-
}
|
|
196
|
-
catch {
|
|
197
|
-
decoded = null;
|
|
198
|
-
}
|
|
199
|
-
const payload = parseMcpRequestStatePayload(decoded);
|
|
200
|
-
const { expiresAt, method, parameterDigest, principal } = payload;
|
|
201
|
-
if (expiresAt < (expected.nowMs ?? Date.now())) {
|
|
202
|
-
throw new PmMcpProtocolError("Expired MCP requestState", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState", expiredAt: expiresAt });
|
|
203
|
-
}
|
|
204
|
-
if (method !== expected.method ||
|
|
205
|
-
parameterDigest !== expected.parameterDigest ||
|
|
206
|
-
principal !== expected.principal) {
|
|
207
|
-
throw new PmMcpProtocolError("MCP requestState binding mismatch", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
|
|
208
|
-
}
|
|
209
|
-
return payload;
|
|
210
|
-
}
|
|
211
|
-
/** Compute a stable-sized digest for application-selected salient request data. */
|
|
212
|
-
export function digestMcpRequestParameters(value) {
|
|
213
|
-
assertBoundedJson(value, MAX_INPUT_PAYLOAD_BYTES, "request parameters");
|
|
214
|
-
return createHash("sha256").update(JSON.stringify(value)).digest("hex");
|
|
215
|
-
}
|
|
216
|
-
/**
|
|
217
|
-
* Bound single-use MRTR state consumption within one server process. Callers
|
|
218
|
-
* requiring cross-process one-time semantics should persist the resulting hash.
|
|
219
|
-
*/
|
|
220
|
-
export class PmMcpRequestStateReplayGuard {
|
|
221
|
-
#consumed = new Set();
|
|
222
|
-
#maximumEntries;
|
|
223
|
-
/** Create a bounded in-process replay guard. */
|
|
224
|
-
constructor(maximumEntries = 4096) {
|
|
225
|
-
if (!Number.isSafeInteger(maximumEntries) || maximumEntries < 1) {
|
|
226
|
-
throw new PmMcpProtocolError("Invalid MCP replay guard capacity", PM_MCP_ERROR_CODES.invalidParams, { maximumEntries });
|
|
227
|
-
}
|
|
228
|
-
this.#maximumEntries = maximumEntries;
|
|
229
|
-
}
|
|
230
|
-
/** Consume one opaque requestState value exactly once in this process. */
|
|
231
|
-
consume(value) {
|
|
232
|
-
const digest = createHash("sha256").update(value).digest("hex");
|
|
233
|
-
if (this.#consumed.has(digest)) {
|
|
234
|
-
throw new PmMcpProtocolError("MCP requestState replay detected", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
|
|
235
|
-
}
|
|
236
|
-
if (this.#consumed.size >= this.#maximumEntries) {
|
|
237
|
-
const oldest = this.#consumed.values().next().value;
|
|
238
|
-
this.#consumed.delete(oldest);
|
|
239
|
-
}
|
|
240
|
-
this.#consumed.add(digest);
|
|
241
|
-
}
|
|
242
|
-
}
|
|
243
|
-
/** Validate and clone a required MCP cache policy. */
|
|
244
|
-
export function parseMcpCachePolicy(value) {
|
|
245
|
-
if (!Number.isSafeInteger(value.ttlMs) ||
|
|
246
|
-
value.ttlMs < 0 ||
|
|
247
|
-
(value.cacheScope !== "public" && value.cacheScope !== "private")) {
|
|
248
|
-
throw new PmMcpProtocolError("Invalid MCP cache policy", PM_MCP_ERROR_CODES.invalidParams, { ttlMs: value.ttlMs, cacheScope: value.cacheScope });
|
|
249
|
-
}
|
|
250
|
-
return { ttlMs: value.ttlMs, cacheScope: value.cacheScope };
|
|
251
|
-
}
|
|
252
|
-
/** Attach required cache fields without mutating a method-specific payload. */
|
|
253
|
-
export function withMcpCachePolicy(payload, policy) {
|
|
254
|
-
return { ...payload, ...parseMcpCachePolicy(policy) };
|
|
255
|
-
}
|
|
256
|
-
function decodeJsonPointerToken(value) {
|
|
257
|
-
return value.replaceAll("~1", "/").replaceAll("~0", "~");
|
|
258
|
-
}
|
|
259
|
-
function resolveLocalJsonSchemaReference(root, reference) {
|
|
260
|
-
if (reference === "#")
|
|
261
|
-
return root;
|
|
262
|
-
if (!reference.startsWith("#/"))
|
|
263
|
-
return undefined;
|
|
264
|
-
let current = root;
|
|
265
|
-
for (const token of reference
|
|
266
|
-
.slice(2)
|
|
267
|
-
.split("/")
|
|
268
|
-
.map(decodeJsonPointerToken)) {
|
|
269
|
-
if (!isMcpRecord(current) && !Array.isArray(current))
|
|
270
|
-
return undefined;
|
|
271
|
-
if (!Object.prototype.hasOwnProperty.call(current, token))
|
|
272
|
-
return undefined;
|
|
273
|
-
current = current[token];
|
|
274
|
-
}
|
|
275
|
-
return current;
|
|
276
|
-
}
|
|
277
|
-
function resolveMcpJsonSchemaBounds(bounds) {
|
|
278
|
-
const maximumBytes = bounds.maxBytes ?? DEFAULT_SCHEMA_BOUNDS.maxBytes;
|
|
279
|
-
const maximumDepth = bounds.maxDepth ?? DEFAULT_SCHEMA_BOUNDS.maxDepth;
|
|
280
|
-
const maximumNodes = bounds.maxNodes ?? DEFAULT_SCHEMA_BOUNDS.maxNodes;
|
|
281
|
-
if (!Number.isSafeInteger(maximumBytes) || maximumBytes < 2) {
|
|
282
|
-
throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds", PM_MCP_ERROR_CODES.invalidParams);
|
|
283
|
-
}
|
|
284
|
-
if (!Number.isSafeInteger(maximumDepth) || maximumDepth < 1) {
|
|
285
|
-
throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds", PM_MCP_ERROR_CODES.invalidParams);
|
|
286
|
-
}
|
|
287
|
-
if (!Number.isSafeInteger(maximumNodes) || maximumNodes < 1) {
|
|
288
|
-
throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds", PM_MCP_ERROR_CODES.invalidParams);
|
|
289
|
-
}
|
|
290
|
-
return { maximumBytes, maximumDepth, maximumNodes };
|
|
291
|
-
}
|
|
292
|
-
function enqueueMcpJsonSchemaChildren(current, pending) {
|
|
293
|
-
const entries = Array.isArray(current.value)
|
|
294
|
-
? current.value
|
|
295
|
-
: isMcpRecord(current.value)
|
|
296
|
-
? Object.values(current.value)
|
|
297
|
-
: [];
|
|
298
|
-
for (const entry of entries) {
|
|
299
|
-
pending.push({ value: entry, depth: current.depth + 1 });
|
|
300
|
-
}
|
|
301
|
-
}
|
|
302
|
-
function assertMcpJsonSchemaReference(root, value) {
|
|
303
|
-
if (!isMcpRecord(value) || typeof value.$ref !== "string")
|
|
304
|
-
return;
|
|
305
|
-
const reference = value.$ref;
|
|
306
|
-
if (reference.startsWith("#") &&
|
|
307
|
-
resolveLocalJsonSchemaReference(root, reference) === undefined) {
|
|
308
|
-
throw new PmMcpProtocolError("MCP JSON Schema contains an unresolved local reference", PM_MCP_ERROR_CODES.invalidParams, { reference });
|
|
309
|
-
}
|
|
310
|
-
}
|
|
311
|
-
/**
|
|
312
|
-
* Validate JSON Schema 2020-12 structure under explicit byte, depth, node, and
|
|
313
|
-
* local-reference work bounds while allowing the complete keyword vocabulary.
|
|
314
|
-
*/
|
|
315
|
-
export function validateMcpJsonSchema(schema, bounds = {}) {
|
|
316
|
-
const { maximumBytes, maximumDepth, maximumNodes } = resolveMcpJsonSchemaBounds(bounds);
|
|
317
|
-
if (typeof schema !== "boolean" && !isMcpRecord(schema)) {
|
|
318
|
-
throw new PmMcpProtocolError("Invalid MCP JSON Schema root", PM_MCP_ERROR_CODES.invalidParams, { expected: "object or boolean" });
|
|
319
|
-
}
|
|
320
|
-
assertBoundedJson(schema, maximumBytes, "JSON Schema");
|
|
321
|
-
const pending = [
|
|
322
|
-
{ value: schema, depth: 0 },
|
|
323
|
-
];
|
|
324
|
-
let visited = 0;
|
|
325
|
-
while (pending.length > 0) {
|
|
326
|
-
const current = pending.pop();
|
|
327
|
-
visited += 1;
|
|
328
|
-
if (visited > maximumNodes || current.depth > maximumDepth) {
|
|
329
|
-
throw new PmMcpProtocolError("MCP JSON Schema exceeds validation work bounds", PM_MCP_ERROR_CODES.invalidParams, { maximumDepth, maximumNodes });
|
|
330
|
-
}
|
|
331
|
-
assertMcpJsonSchemaReference(schema, current.value);
|
|
332
|
-
enqueueMcpJsonSchemaChildren(current, pending);
|
|
333
|
-
}
|
|
334
|
-
return structuredClone(schema);
|
|
335
|
-
}
|
|
1
|
+
!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6505e714-d1f3-5794-88c8-51c1644acec9")}catch(e2){}})();import{createHash,createHmac,timingSafeEqual}from"node:crypto";import{PM_MCP_ERROR_CODES,PM_MCP_META_KEYS,PmMcpProtocolError,isMcpRecord}from"./protocol.js";const PM_MCP_INPUT_REQUEST_METHODS=["elicitation/create","roots/list","sampling/createMessage"];class PmMcpInputRequiredError extends Error{inputRequests;requestState;constructor(input){super("MCP operation requires additional input");this.name="PmMcpInputRequiredError";this.inputRequests=input.inputRequests;this.requestState=input.requestState}}const INPUT_KEY_PATTERN=/^[a-zA-Z][a-zA-Z0-9_.-]{0,63}$/u;const MAX_INPUT_REQUESTS=32;const MAX_INPUT_PAYLOAD_BYTES=64*1024;const MAX_REQUEST_STATE_BYTES=16*1024;const DEFAULT_SCHEMA_BOUNDS={maxBytes:256*1024,maxDepth:32,maxNodes:4096};function inputCapability(method){if(method==="elicitation/create")return"elicitation";if(method==="sampling/createMessage")return"sampling";return"roots"}function assertBoundedJson(value,maximumBytes,field){let serialized;try{serialized=JSON.stringify(value)}catch{throw new PmMcpProtocolError(`Invalid ${field}: value is not JSON serializable`,PM_MCP_ERROR_CODES.invalidParams,{field})}if(Buffer.byteLength(serialized,"utf8")>maximumBytes){throw new PmMcpProtocolError(`Invalid ${field}: payload exceeds the protocol bound`,PM_MCP_ERROR_CODES.invalidParams,{field,maximumBytes})}}function parseMcpInputRequests(value,requestContext){if(!isMcpRecord(value)){throw new PmMcpProtocolError("Invalid MCP inputRequests",PM_MCP_ERROR_CODES.invalidParams,{field:"inputRequests",expected:"object"})}const entries=Object.entries(value);if(entries.length===0||entries.length>MAX_INPUT_REQUESTS){throw new PmMcpProtocolError("Invalid MCP inputRequests count",PM_MCP_ERROR_CODES.invalidParams,{minimum:1,maximum:MAX_INPUT_REQUESTS,observed:entries.length})}const parsed={};for(const[key,request]of entries){if(!INPUT_KEY_PATTERN.test(key)||!isMcpRecord(request)){throw new PmMcpProtocolError("Invalid MCP input request entry",PM_MCP_ERROR_CODES.invalidParams,{field:`inputRequests.${key}`})}const method=request.method;if(typeof method!=="string"||!PM_MCP_INPUT_REQUEST_METHODS.includes(method)){throw new PmMcpProtocolError("Unsupported MCP input request method",PM_MCP_ERROR_CODES.invalidParams,{field:`inputRequests.${key}.method`,method:method??null})}const capability=inputCapability(method);if(!Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities,capability)){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{[capability]:{}}})}if(!isMcpRecord(request.params)){throw new PmMcpProtocolError("Invalid MCP input request parameters",PM_MCP_ERROR_CODES.invalidParams,{field:`inputRequests.${key}.params`,expected:"object"})}parsed[key]={method,params:structuredClone(request.params)}}assertBoundedJson(parsed,MAX_INPUT_PAYLOAD_BYTES,"inputRequests");return parsed}function parseMcpInputResponses(value){if(!isMcpRecord(value)){throw new PmMcpProtocolError("Invalid MCP inputResponses",PM_MCP_ERROR_CODES.invalidParams,{field:"inputResponses",expected:"object"})}const entries=Object.entries(value);if(entries.length>MAX_INPUT_REQUESTS){throw new PmMcpProtocolError("Invalid MCP inputResponses count",PM_MCP_ERROR_CODES.invalidParams,{maximum:MAX_INPUT_REQUESTS,observed:entries.length})}const parsed={};for(const[key,response]of entries){if(!INPUT_KEY_PATTERN.test(key)||!isMcpRecord(response)){throw new PmMcpProtocolError("Invalid MCP input response entry",PM_MCP_ERROR_CODES.invalidParams,{field:`inputResponses.${key}`})}parsed[key]=structuredClone(response)}assertBoundedJson(parsed,MAX_INPUT_PAYLOAD_BYTES,"inputResponses");return parsed}function buildMcpInputRequiredResult(input){const requestState=input.requestState?.trim();if(requestState&&Buffer.byteLength(requestState,"utf8")>MAX_REQUEST_STATE_BYTES){throw new PmMcpProtocolError("Invalid MCP requestState: payload exceeds the protocol bound",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState",maximumBytes:MAX_REQUEST_STATE_BYTES})}const inputRequests=input.inputRequests===void 0?void 0:parseMcpInputRequests(input.inputRequests,input.requestContext);if(inputRequests===void 0&&!requestState){throw new PmMcpProtocolError("InputRequiredResult requires inputRequests or requestState",PM_MCP_ERROR_CODES.invalidParams,{requiredAnyOf:["inputRequests","requestState"]})}return{resultType:"input_required",...inputRequests?{inputRequests}:{},...requestState?{requestState}:{},_meta:{[PM_MCP_META_KEYS.serverInfo]:{...input.serverInfo}}}}function requestStateSecret(secret){const bytes=Buffer.from(secret);if(bytes.byteLength<32){throw new PmMcpProtocolError("MCP requestState signing key must contain at least 32 bytes",PM_MCP_ERROR_CODES.invalidParams,{minimumBytes:32})}return bytes}function sealMcpRequestState(payload,secret){if(!Number.isSafeInteger(payload.expiresAt)||payload.expiresAt<=0||payload.method.trim().length===0||payload.parameterDigest.trim().length===0||payload.principal.trim().length===0){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams)}const encoded=Buffer.from(JSON.stringify({version:1,...payload}),"utf8");if(encoded.byteLength>MAX_REQUEST_STATE_BYTES/2){throw new PmMcpProtocolError("MCP requestState payload exceeds the protocol bound",PM_MCP_ERROR_CODES.invalidParams,{maximumBytes:MAX_REQUEST_STATE_BYTES/2})}const body=encoded.toString("base64url");const signature=createHmac("sha256",requestStateSecret(secret)).update(body).digest("base64url");return`${body}.${signature}`}function parseMcpRequestStatePayload(decoded){if(!isMcpRecord(decoded)||decoded.version!==1){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}const{expiresAt,method,parameterDigest,principal,state}=decoded;if(typeof expiresAt!=="number"||!Number.isSafeInteger(expiresAt)){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}if(typeof method!=="string"||typeof parameterDigest!=="string"||typeof principal!=="string"){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}return{expiresAt,method,parameterDigest,principal,state}}function openMcpRequestState(value,secret,expected){const[body,signature,extra]=value.split(".");if(!body||!signature||extra!==void 0){throw new PmMcpProtocolError("Invalid MCP requestState encoding",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}const observed=Buffer.from(signature,"base64url");const calculated=createHmac("sha256",requestStateSecret(secret)).update(body).digest();if(observed.byteLength!==calculated.byteLength||!timingSafeEqual(observed,calculated)){throw new PmMcpProtocolError("Invalid MCP requestState signature",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}let decoded;try{decoded=JSON.parse(Buffer.from(body,"base64url").toString("utf8"))}catch{decoded=null}const payload=parseMcpRequestStatePayload(decoded);const{expiresAt,method,parameterDigest,principal}=payload;if(expiresAt<(expected.nowMs??Date.now())){throw new PmMcpProtocolError("Expired MCP requestState",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState",expiredAt:expiresAt})}if(method!==expected.method||parameterDigest!==expected.parameterDigest||principal!==expected.principal){throw new PmMcpProtocolError("MCP requestState binding mismatch",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}return payload}function digestMcpRequestParameters(value){assertBoundedJson(value,MAX_INPUT_PAYLOAD_BYTES,"request parameters");return createHash("sha256").update(JSON.stringify(value)).digest("hex")}class PmMcpRequestStateReplayGuard{#consumed=new Set;#maximumEntries;constructor(maximumEntries=4096){if(!Number.isSafeInteger(maximumEntries)||maximumEntries<1){throw new PmMcpProtocolError("Invalid MCP replay guard capacity",PM_MCP_ERROR_CODES.invalidParams,{maximumEntries})}this.#maximumEntries=maximumEntries}consume(value){const digest=createHash("sha256").update(value).digest("hex");if(this.#consumed.has(digest)){throw new PmMcpProtocolError("MCP requestState replay detected",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}if(this.#consumed.size>=this.#maximumEntries){const oldest=this.#consumed.values().next().value;this.#consumed.delete(oldest)}this.#consumed.add(digest)}}function parseMcpCachePolicy(value){if(!Number.isSafeInteger(value.ttlMs)||value.ttlMs<0||value.cacheScope!=="public"&&value.cacheScope!=="private"){throw new PmMcpProtocolError("Invalid MCP cache policy",PM_MCP_ERROR_CODES.invalidParams,{ttlMs:value.ttlMs,cacheScope:value.cacheScope})}return{ttlMs:value.ttlMs,cacheScope:value.cacheScope}}function withMcpCachePolicy(payload,policy){return{...payload,...parseMcpCachePolicy(policy)}}function decodeJsonPointerToken(value){return value.replaceAll("~1","/").replaceAll("~0","~")}function resolveLocalJsonSchemaReference(root,reference){if(reference==="#")return root;if(!reference.startsWith("#/"))return void 0;let current=root;for(const token of reference.slice(2).split("/").map(decodeJsonPointerToken)){if(!isMcpRecord(current)&&!Array.isArray(current))return void 0;if(!Object.prototype.hasOwnProperty.call(current,token))return void 0;current=current[token]}return current}function resolveMcpJsonSchemaBounds(bounds){const maximumBytes=bounds.maxBytes??DEFAULT_SCHEMA_BOUNDS.maxBytes;const maximumDepth=bounds.maxDepth??DEFAULT_SCHEMA_BOUNDS.maxDepth;const maximumNodes=bounds.maxNodes??DEFAULT_SCHEMA_BOUNDS.maxNodes;if(!Number.isSafeInteger(maximumBytes)||maximumBytes<2){throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds",PM_MCP_ERROR_CODES.invalidParams)}if(!Number.isSafeInteger(maximumDepth)||maximumDepth<1){throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds",PM_MCP_ERROR_CODES.invalidParams)}if(!Number.isSafeInteger(maximumNodes)||maximumNodes<1){throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds",PM_MCP_ERROR_CODES.invalidParams)}return{maximumBytes,maximumDepth,maximumNodes}}function enqueueMcpJsonSchemaChildren(current,pending){const entries=Array.isArray(current.value)?current.value:isMcpRecord(current.value)?Object.values(current.value):[];for(const entry of entries){pending.push({value:entry,depth:current.depth+1})}}function assertMcpJsonSchemaReference(root,value){if(!isMcpRecord(value)||typeof value.$ref!=="string")return;const reference=value.$ref;if(reference.startsWith("#")&&resolveLocalJsonSchemaReference(root,reference)===void 0){throw new PmMcpProtocolError("MCP JSON Schema contains an unresolved local reference",PM_MCP_ERROR_CODES.invalidParams,{reference})}}function validateMcpJsonSchema(schema,bounds={}){const{maximumBytes,maximumDepth,maximumNodes}=resolveMcpJsonSchemaBounds(bounds);if(typeof schema!=="boolean"&&!isMcpRecord(schema)){throw new PmMcpProtocolError("Invalid MCP JSON Schema root",PM_MCP_ERROR_CODES.invalidParams,{expected:"object or boolean"})}assertBoundedJson(schema,maximumBytes,"JSON Schema");const pending=[{value:schema,depth:0}];let visited=0;while(pending.length>0){const current=pending.pop();visited+=1;if(visited>maximumNodes||current.depth>maximumDepth){throw new PmMcpProtocolError("MCP JSON Schema exceeds validation work bounds",PM_MCP_ERROR_CODES.invalidParams,{maximumDepth,maximumNodes})}assertMcpJsonSchemaReference(schema,current.value);enqueueMcpJsonSchemaChildren(current,pending)}return structuredClone(schema)}export{PM_MCP_INPUT_REQUEST_METHODS,PmMcpInputRequiredError,PmMcpRequestStateReplayGuard,buildMcpInputRequiredResult,digestMcpRequestParameters,openMcpRequestState,parseMcpCachePolicy,parseMcpInputRequests,parseMcpInputResponses,sealMcpRequestState,validateMcpJsonSchema,withMcpCachePolicy};
|
|
336
2
|
//# sourceMappingURL=interactions.js.map
|
|
337
|
-
//# debugId=469f704b-12eb-524d-bcc8-fb8f9f1775f2
|
|
@@ -29,9 +29,14 @@ export declare const PM_MCP_ERROR_CODES: {
|
|
|
29
29
|
export declare const PM_MCP_META_KEYS: {
|
|
30
30
|
readonly clientCapabilities: "io.modelcontextprotocol/clientCapabilities";
|
|
31
31
|
readonly clientInfo: "io.modelcontextprotocol/clientInfo";
|
|
32
|
+
readonly logLevel: "io.modelcontextprotocol/logLevel";
|
|
32
33
|
readonly protocolVersion: "io.modelcontextprotocol/protocolVersion";
|
|
33
34
|
readonly serverInfo: "io.modelcontextprotocol/serverInfo";
|
|
34
35
|
};
|
|
36
|
+
/** Request-local severity vocabulary retained by the deprecated logging contract. */
|
|
37
|
+
export declare const PM_MCP_LOG_LEVELS: readonly ["debug", "info", "notice", "warning", "error", "critical", "alert", "emergency"];
|
|
38
|
+
/** An explicit logging opt-in applies only to the request carrying it. */
|
|
39
|
+
export type PmMcpLogLevel = (typeof PM_MCP_LOG_LEVELS)[number];
|
|
35
40
|
/** MCP implementation identity carried in request and result metadata. */
|
|
36
41
|
export interface PmMcpImplementation {
|
|
37
42
|
/** Stable implementation name. */
|
|
@@ -73,6 +78,8 @@ export interface PmMcpRequestContext {
|
|
|
73
78
|
clientCapabilities: PmMcpClientCapabilities;
|
|
74
79
|
/** Optional bounded client identity used only for diagnostics/provenance. */
|
|
75
80
|
clientInfo?: PmMcpImplementation;
|
|
81
|
+
/** Optional request-local logging threshold; absence forbids protocol log notifications. */
|
|
82
|
+
logLevel?: PmMcpLogLevel;
|
|
76
83
|
}
|
|
77
84
|
/** Required fields attached to every modern successful result. */
|
|
78
85
|
export interface PmMcpResultEnvelope {
|
package/dist/sdk/mcp/protocol.js
CHANGED
|
@@ -1,185 +1,2 @@
|
|
|
1
|
-
|
|
2
|
-
* @module sdk/mcp/protocol
|
|
3
|
-
*
|
|
4
|
-
* Defines transport-neutral MCP 2026-07-28 negotiation, request metadata,
|
|
5
|
-
* discovery, result-envelope, and bounded legacy-compatibility contracts.
|
|
6
|
-
*/
|
|
7
|
-
/** Canonical stateless MCP revision implemented by pm. */
|
|
8
|
-
|
|
9
|
-
!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0ec82581-c626-544c-9deb-ec5e810fd7e9")}catch(e){}}();
|
|
10
|
-
export const PM_MCP_PROTOCOL_VERSION = "2026-07-28";
|
|
11
|
-
/**
|
|
12
|
-
* Legacy initialize-era revisions accepted only by the bounded stdio adapter.
|
|
13
|
-
*
|
|
14
|
-
* The canonical revision defines legacy as every version that establishes a
|
|
15
|
-
* session with the handshake method, which is `2025-11-25` and earlier, so this
|
|
16
|
-
* set tracks that boundary rather than a single historical revision.
|
|
17
|
-
* Ordered newest first: element zero is the revision offered to a client that
|
|
18
|
-
* omits `protocolVersion`.
|
|
19
|
-
*/
|
|
20
|
-
export const PM_MCP_LEGACY_PROTOCOL_VERSIONS = [
|
|
21
|
-
"2025-11-25",
|
|
22
|
-
"2025-06-18",
|
|
23
|
-
];
|
|
24
|
-
/** Modern per-request protocol versions accepted by the stateless core. */
|
|
25
|
-
export const PM_MCP_SUPPORTED_PROTOCOL_VERSIONS = [
|
|
26
|
-
PM_MCP_PROTOCOL_VERSION,
|
|
27
|
-
];
|
|
28
|
-
/** Allocated MCP 2026-07-28 protocol error codes. */
|
|
29
|
-
export const PM_MCP_ERROR_CODES = {
|
|
30
|
-
headerMismatch: -32020,
|
|
31
|
-
missingRequiredClientCapability: -32021,
|
|
32
|
-
unsupportedProtocolVersion: -32022,
|
|
33
|
-
invalidParams: -32602,
|
|
34
|
-
};
|
|
35
|
-
/** Namespaced metadata keys owned by the MCP specification. */
|
|
36
|
-
export const PM_MCP_META_KEYS = {
|
|
37
|
-
clientCapabilities: "io.modelcontextprotocol/clientCapabilities",
|
|
38
|
-
clientInfo: "io.modelcontextprotocol/clientInfo",
|
|
39
|
-
protocolVersion: "io.modelcontextprotocol/protocolVersion",
|
|
40
|
-
serverInfo: "io.modelcontextprotocol/serverInfo",
|
|
41
|
-
};
|
|
42
|
-
/** Structured MCP protocol error safe for JSON-RPC adapters. */
|
|
43
|
-
export class PmMcpProtocolError extends Error {
|
|
44
|
-
/** JSON-RPC/MCP error code. */
|
|
45
|
-
code;
|
|
46
|
-
/** Structured recovery or mismatch detail. */
|
|
47
|
-
data;
|
|
48
|
-
/** Create one typed protocol error. */
|
|
49
|
-
constructor(message, code, data = {}) {
|
|
50
|
-
super(message);
|
|
51
|
-
this.name = "PmMcpProtocolError";
|
|
52
|
-
this.code = code;
|
|
53
|
-
this.data = data;
|
|
54
|
-
}
|
|
55
|
-
}
|
|
56
|
-
/** Return whether an unknown value is a non-array object. */
|
|
57
|
-
export function isMcpRecord(value) {
|
|
58
|
-
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
59
|
-
}
|
|
60
|
-
/** Parse an optional MCP implementation identity without guessing missing fields. */
|
|
61
|
-
export function parseMcpImplementation(value) {
|
|
62
|
-
if (value === undefined)
|
|
63
|
-
return undefined;
|
|
64
|
-
if (!isMcpRecord(value)) {
|
|
65
|
-
throw new PmMcpProtocolError("Invalid MCP clientInfo metadata", PM_MCP_ERROR_CODES.invalidParams, { field: PM_MCP_META_KEYS.clientInfo, expected: "object" });
|
|
66
|
-
}
|
|
67
|
-
const name = typeof value.name === "string" ? value.name.trim() : "";
|
|
68
|
-
const version = typeof value.version === "string" ? value.version.trim() : "";
|
|
69
|
-
if (name.length === 0 || version.length === 0) {
|
|
70
|
-
throw new PmMcpProtocolError("Invalid MCP clientInfo metadata", PM_MCP_ERROR_CODES.invalidParams, {
|
|
71
|
-
field: PM_MCP_META_KEYS.clientInfo,
|
|
72
|
-
required: ["name", "version"],
|
|
73
|
-
});
|
|
74
|
-
}
|
|
75
|
-
const parsed = {
|
|
76
|
-
name: name.slice(0, 128),
|
|
77
|
-
version: version.slice(0, 128),
|
|
78
|
-
};
|
|
79
|
-
if (typeof value.description === "string" && value.description.trim()) {
|
|
80
|
-
parsed.description = value.description.trim().slice(0, 1024);
|
|
81
|
-
}
|
|
82
|
-
if (typeof value.websiteUrl === "string" && value.websiteUrl.trim()) {
|
|
83
|
-
parsed.websiteUrl = value.websiteUrl.trim().slice(0, 2048);
|
|
84
|
-
}
|
|
85
|
-
return parsed;
|
|
86
|
-
}
|
|
87
|
-
/** Validate the stateless metadata required on every modern MCP request. */
|
|
88
|
-
export function resolveMcpRequestContext(params) {
|
|
89
|
-
const meta = isMcpRecord(params) ? params._meta : undefined;
|
|
90
|
-
if (!isMcpRecord(meta)) {
|
|
91
|
-
throw new PmMcpProtocolError("Missing required MCP request metadata", PM_MCP_ERROR_CODES.invalidParams, {
|
|
92
|
-
required: [
|
|
93
|
-
PM_MCP_META_KEYS.protocolVersion,
|
|
94
|
-
PM_MCP_META_KEYS.clientCapabilities,
|
|
95
|
-
],
|
|
96
|
-
});
|
|
97
|
-
}
|
|
98
|
-
const requested = meta[PM_MCP_META_KEYS.protocolVersion];
|
|
99
|
-
if (typeof requested !== "string" ||
|
|
100
|
-
!PM_MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(requested)) {
|
|
101
|
-
throw new PmMcpProtocolError("Unsupported protocol version", PM_MCP_ERROR_CODES.unsupportedProtocolVersion, {
|
|
102
|
-
supported: [...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],
|
|
103
|
-
requested: typeof requested === "string" ? requested : null,
|
|
104
|
-
});
|
|
105
|
-
}
|
|
106
|
-
const clientCapabilities = meta[PM_MCP_META_KEYS.clientCapabilities];
|
|
107
|
-
if (!isMcpRecord(clientCapabilities)) {
|
|
108
|
-
throw new PmMcpProtocolError("Invalid MCP client capabilities metadata", PM_MCP_ERROR_CODES.invalidParams, {
|
|
109
|
-
field: PM_MCP_META_KEYS.clientCapabilities,
|
|
110
|
-
expected: "object",
|
|
111
|
-
});
|
|
112
|
-
}
|
|
113
|
-
const clientInfo = parseMcpImplementation(meta[PM_MCP_META_KEYS.clientInfo]);
|
|
114
|
-
return {
|
|
115
|
-
protocolVersion: PM_MCP_PROTOCOL_VERSION,
|
|
116
|
-
clientCapabilities,
|
|
117
|
-
...(clientInfo ? { clientInfo } : {}),
|
|
118
|
-
};
|
|
119
|
-
}
|
|
120
|
-
/** Validate the HTTP protocol-version header against request-local metadata. */
|
|
121
|
-
export function assertMcpProtocolHeader(requestContext, headerValue) {
|
|
122
|
-
if (headerValue !== requestContext.protocolVersion) {
|
|
123
|
-
throw new PmMcpProtocolError("MCP protocol header does not match request metadata", PM_MCP_ERROR_CODES.headerMismatch, {
|
|
124
|
-
header: headerValue ?? null,
|
|
125
|
-
metadata: requestContext.protocolVersion,
|
|
126
|
-
});
|
|
127
|
-
}
|
|
128
|
-
}
|
|
129
|
-
/** Require named client capabilities without consulting prior requests. */
|
|
130
|
-
export function assertMcpClientCapabilities(requestContext, requiredCapabilities) {
|
|
131
|
-
const missing = requiredCapabilities.filter((capability) => !Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities, capability));
|
|
132
|
-
if (missing.length > 0) {
|
|
133
|
-
throw new PmMcpProtocolError("Missing required client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
|
|
134
|
-
requiredCapabilities: Object.fromEntries(missing.map((capability) => [capability, {}])),
|
|
135
|
-
});
|
|
136
|
-
}
|
|
137
|
-
}
|
|
138
|
-
/** Return whether this request independently negotiated one named extension. */
|
|
139
|
-
export function hasMcpClientExtension(requestContext, extension) {
|
|
140
|
-
const extensions = requestContext.clientCapabilities.extensions;
|
|
141
|
-
return isMcpRecord(extensions) && isMcpRecord(extensions[extension]);
|
|
142
|
-
}
|
|
143
|
-
/** Attach required server identity while preserving a non-complete result discriminator. */
|
|
144
|
-
export function attachMcpServerInfo(payload, serverInfo) {
|
|
145
|
-
const payloadMeta = isMcpRecord(payload._meta) ? payload._meta : {};
|
|
146
|
-
return {
|
|
147
|
-
...payload,
|
|
148
|
-
_meta: {
|
|
149
|
-
...payloadMeta,
|
|
150
|
-
[PM_MCP_META_KEYS.serverInfo]: { ...serverInfo },
|
|
151
|
-
},
|
|
152
|
-
};
|
|
153
|
-
}
|
|
154
|
-
/** Attach required modern result fields without mutating the caller payload. */
|
|
155
|
-
export function buildMcpCompleteResult(payload, serverInfo) {
|
|
156
|
-
return attachMcpServerInfo({ ...payload, resultType: "complete" }, serverInfo);
|
|
157
|
-
}
|
|
158
|
-
/** Build deterministic current-revision server discovery. */
|
|
159
|
-
export function buildMcpDiscoverResult(input) {
|
|
160
|
-
const ttlMs = input.ttlMs ?? 60_000;
|
|
161
|
-
if (!Number.isFinite(ttlMs) || ttlMs < 0) {
|
|
162
|
-
throw new PmMcpProtocolError("Invalid MCP discovery cache TTL", PM_MCP_ERROR_CODES.invalidParams, { ttlMs });
|
|
163
|
-
}
|
|
164
|
-
return buildMcpCompleteResult({
|
|
165
|
-
supportedVersions: [...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],
|
|
166
|
-
capabilities: structuredClone(input.capabilities),
|
|
167
|
-
ttlMs,
|
|
168
|
-
cacheScope: "public",
|
|
169
|
-
...(input.instructions ? { instructions: input.instructions } : {}),
|
|
170
|
-
}, input.serverInfo);
|
|
171
|
-
}
|
|
172
|
-
/**
|
|
173
|
-
* Interpret resultType only at an explicit protocol-era boundary. Legacy
|
|
174
|
-
* results may omit it; modern results fail closed when it is absent.
|
|
175
|
-
*/
|
|
176
|
-
export function interpretMcpResultType(result, era) {
|
|
177
|
-
if (isMcpRecord(result) && typeof result.resultType === "string") {
|
|
178
|
-
return result.resultType;
|
|
179
|
-
}
|
|
180
|
-
if (era === "legacy")
|
|
181
|
-
return "complete";
|
|
182
|
-
throw new PmMcpProtocolError("Modern MCP result is missing resultType", PM_MCP_ERROR_CODES.invalidParams, { required: "resultType" });
|
|
183
|
-
}
|
|
1
|
+
!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="08485124-a2f1-5bb5-9316-533a3f7888bc")}catch(e2){}})();const PM_MCP_PROTOCOL_VERSION="2026-07-28";const PM_MCP_LEGACY_PROTOCOL_VERSIONS=["2025-11-25","2025-06-18"];const PM_MCP_SUPPORTED_PROTOCOL_VERSIONS=[PM_MCP_PROTOCOL_VERSION];const PM_MCP_ERROR_CODES={headerMismatch:-32020,missingRequiredClientCapability:-32021,unsupportedProtocolVersion:-32022,invalidParams:-32602};const PM_MCP_META_KEYS={clientCapabilities:"io.modelcontextprotocol/clientCapabilities",clientInfo:"io.modelcontextprotocol/clientInfo",logLevel:"io.modelcontextprotocol/logLevel",protocolVersion:"io.modelcontextprotocol/protocolVersion",serverInfo:"io.modelcontextprotocol/serverInfo"};const PM_MCP_LOG_LEVELS=["debug","info","notice","warning","error","critical","alert","emergency"];class PmMcpProtocolError extends Error{code;data;constructor(message,code,data={}){super(message);this.name="PmMcpProtocolError";this.code=code;this.data=data}}function isMcpRecord(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}function parseMcpImplementation(value){if(value===void 0)return void 0;if(!isMcpRecord(value)){throw new PmMcpProtocolError("Invalid MCP clientInfo metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.clientInfo,expected:"object"})}const name=typeof value.name==="string"?value.name.trim():"";const version=typeof value.version==="string"?value.version.trim():"";if(name.length===0||version.length===0){throw new PmMcpProtocolError("Invalid MCP clientInfo metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.clientInfo,required:["name","version"]})}const parsed={name:name.slice(0,128),version:version.slice(0,128)};if(typeof value.description==="string"&&value.description.trim()){parsed.description=value.description.trim().slice(0,1024)}if(typeof value.websiteUrl==="string"&&value.websiteUrl.trim()){parsed.websiteUrl=value.websiteUrl.trim().slice(0,2048)}return parsed}function parseMcpLogLevel(value){if(value===void 0)return void 0;if(typeof value!=="string"||!PM_MCP_LOG_LEVELS.includes(value)){throw new PmMcpProtocolError("Invalid MCP logLevel metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.logLevel,allowed:[...PM_MCP_LOG_LEVELS]})}return value}function resolveMcpRequestContext(params){const meta=isMcpRecord(params)?params._meta:void 0;if(!isMcpRecord(meta)){throw new PmMcpProtocolError("Missing required MCP request metadata",PM_MCP_ERROR_CODES.invalidParams,{required:[PM_MCP_META_KEYS.protocolVersion,PM_MCP_META_KEYS.clientCapabilities]})}const requested=meta[PM_MCP_META_KEYS.protocolVersion];if(typeof requested!=="string"||!PM_MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(requested)){throw new PmMcpProtocolError("Unsupported protocol version",PM_MCP_ERROR_CODES.unsupportedProtocolVersion,{supported:[...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],requested:typeof requested==="string"?requested:null})}const clientCapabilities=meta[PM_MCP_META_KEYS.clientCapabilities];if(!isMcpRecord(clientCapabilities)){throw new PmMcpProtocolError("Invalid MCP client capabilities metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.clientCapabilities,expected:"object"})}const clientInfo=parseMcpImplementation(meta[PM_MCP_META_KEYS.clientInfo]);const logLevel=parseMcpLogLevel(meta[PM_MCP_META_KEYS.logLevel]);return{protocolVersion:PM_MCP_PROTOCOL_VERSION,clientCapabilities,...clientInfo?{clientInfo}:{},...logLevel?{logLevel}:{}}}function assertMcpProtocolHeader(requestContext,headerValue){if(headerValue!==requestContext.protocolVersion){throw new PmMcpProtocolError("MCP protocol header does not match request metadata",PM_MCP_ERROR_CODES.headerMismatch,{header:headerValue??null,metadata:requestContext.protocolVersion})}}function assertMcpClientCapabilities(requestContext,requiredCapabilities){const missing=requiredCapabilities.filter(capability=>!Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities,capability));if(missing.length>0){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:Object.fromEntries(missing.map(capability=>[capability,{}]))})}}function hasMcpClientExtension(requestContext,extension){const extensions=requestContext.clientCapabilities.extensions;return isMcpRecord(extensions)&&isMcpRecord(extensions[extension])}function attachMcpServerInfo(payload,serverInfo){const payloadMeta=isMcpRecord(payload._meta)?payload._meta:{};return{...payload,_meta:{...payloadMeta,[PM_MCP_META_KEYS.serverInfo]:{...serverInfo}}}}function buildMcpCompleteResult(payload,serverInfo){return attachMcpServerInfo({...payload,resultType:"complete"},serverInfo)}function buildMcpDiscoverResult(input){const ttlMs=input.ttlMs??6e4;if(!Number.isFinite(ttlMs)||ttlMs<0){throw new PmMcpProtocolError("Invalid MCP discovery cache TTL",PM_MCP_ERROR_CODES.invalidParams,{ttlMs})}return buildMcpCompleteResult({supportedVersions:[...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],capabilities:structuredClone(input.capabilities),ttlMs,cacheScope:"public",...input.instructions?{instructions:input.instructions}:{}},input.serverInfo)}function interpretMcpResultType(result,era){if(isMcpRecord(result)&&typeof result.resultType==="string"){return result.resultType}if(era==="legacy")return"complete";throw new PmMcpProtocolError("Modern MCP result is missing resultType",PM_MCP_ERROR_CODES.invalidParams,{required:"resultType"})}export{PM_MCP_ERROR_CODES,PM_MCP_LEGACY_PROTOCOL_VERSIONS,PM_MCP_LOG_LEVELS,PM_MCP_META_KEYS,PM_MCP_PROTOCOL_VERSION,PM_MCP_SUPPORTED_PROTOCOL_VERSIONS,PmMcpProtocolError,assertMcpClientCapabilities,assertMcpProtocolHeader,attachMcpServerInfo,buildMcpCompleteResult,buildMcpDiscoverResult,hasMcpClientExtension,interpretMcpResultType,isMcpRecord,parseMcpImplementation,resolveMcpRequestContext};
|
|
184
2
|
//# sourceMappingURL=protocol.js.map
|
|
185
|
-
//# debugId=0ec82581-c626-544c-9deb-ec5e810fd7e9
|