@unbrained/pm-cli 2026.9.7 → 2026.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (746) hide show
  1. package/.agents/skills/pm-developer/SKILL.md +12 -4
  2. package/.agents/skills/pm-developer/references/MULTI_AGENT_MERGE.md +19 -10
  3. package/.agents/skills/pm-extensions/SKILL.md +6 -0
  4. package/.agents/skills/pm-sdk/SKILL.md +11 -2
  5. package/.agents/skills/pm-user/SKILL.md +7 -2
  6. package/.agents/skills/pm-user/references/ECOSYSTEM_PLANNING.md +95 -0
  7. package/.claude-plugin/marketplace.json +2 -2
  8. package/CHANGELOG.md +231 -182
  9. package/dist/cli/after-command-context-usage.js +1 -48
  10. package/dist/cli/argv-utils.js +1 -40
  11. package/dist/cli/bootstrap-args.js +1 -9
  12. package/dist/cli/bundle-integrity.js +2 -110
  13. package/dist/cli/commander-usage.js +11 -771
  14. package/dist/cli/commands/activity.js +1 -9
  15. package/dist/cli/commands/aggregate.js +1 -5
  16. package/dist/cli/commands/append.js +1 -5
  17. package/dist/cli/commands/claim.js +1 -5
  18. package/dist/cli/commands/close-many.js +1 -5
  19. package/dist/cli/commands/close.js +1 -9
  20. package/dist/cli/commands/comments.js +1 -5
  21. package/dist/cli/commands/config.js +1 -9
  22. package/dist/cli/commands/context.js +1 -9
  23. package/dist/cli/commands/contracts.js +1 -5
  24. package/dist/cli/commands/copy.js +1 -9
  25. package/dist/cli/commands/create.js +1 -9
  26. package/dist/cli/commands/delete.js +1 -9
  27. package/dist/cli/commands/deps.js +1 -9
  28. package/dist/cli/commands/docs.js +1 -9
  29. package/dist/cli/commands/duplicates.js +1 -9
  30. package/dist/cli/commands/eval.js +1 -9
  31. package/dist/cli/commands/extension/describe.js +1 -5
  32. package/dist/cli/commands/extension/scaffold.js +1 -5
  33. package/dist/cli/commands/extension/shared.js +1 -5
  34. package/dist/cli/commands/extension.js +1 -9
  35. package/dist/cli/commands/files.js +1 -9
  36. package/dist/cli/commands/focus.js +1 -9
  37. package/dist/cli/commands/gc.js +1 -9
  38. package/dist/cli/commands/get.js +1 -9
  39. package/dist/cli/commands/graph.js +1 -10
  40. package/dist/cli/commands/health.js +1 -9
  41. package/dist/cli/commands/history-compact.js +1 -10
  42. package/dist/cli/commands/history-redact.js +1 -11
  43. package/dist/cli/commands/history-repair.js +1 -10
  44. package/dist/cli/commands/history.js +1 -5
  45. package/dist/cli/commands/index.js +1 -58
  46. package/dist/cli/commands/init-agent-guidance.js +1 -9
  47. package/dist/cli/commands/init.js +1 -9
  48. package/dist/cli/commands/learnings.js +1 -5
  49. package/dist/cli/commands/lifecycle-transitions.js +1 -5
  50. package/dist/cli/commands/list.js +1 -9
  51. package/dist/cli/commands/merge.js +1 -11
  52. package/dist/cli/commands/next.js +1 -9
  53. package/dist/cli/commands/notes.js +1 -5
  54. package/dist/cli/commands/plan.js +1 -9
  55. package/dist/cli/commands/profile.js +1 -9
  56. package/dist/cli/commands/restore.js +1 -9
  57. package/dist/cli/commands/scheduling-shortcuts.js +1 -9
  58. package/dist/cli/commands/schema.js +1 -10
  59. package/dist/cli/commands/search.js +1 -9
  60. package/dist/cli/commands/stats.js +1 -9
  61. package/dist/cli/commands/telemetry.js +1 -9
  62. package/dist/cli/commands/test-all.js +1 -9
  63. package/dist/cli/commands/test-runs.js +1 -9
  64. package/dist/cli/commands/test.js +1 -9
  65. package/dist/cli/commands/update-many.js +1 -5
  66. package/dist/cli/commands/update.js +1 -9
  67. package/dist/cli/commands/upgrade.js +1 -5
  68. package/dist/cli/commands/validate.js +1 -15
  69. package/dist/cli/context-intent-invocation.js +1 -20
  70. package/dist/cli/description-stdin.js +1 -17
  71. package/dist/cli/error-guidance.js +1 -1353
  72. package/dist/cli/extension-command-help.js +5 -636
  73. package/dist/cli/extension-command-options.js +1 -427
  74. package/dist/cli/extension-recovery.js +1 -126
  75. package/dist/cli/help-content.js +2 -1001
  76. package/dist/cli/help-json-payload.js +4 -570
  77. package/dist/cli/main.d.ts +4 -0
  78. package/dist/cli/main.js +5 -2573
  79. package/dist/cli/migration-gates.js +1 -289
  80. package/dist/cli/public.js +1 -20
  81. package/dist/cli/register-annotations.js +1 -270
  82. package/dist/cli/register-assurance.js +1 -62
  83. package/dist/cli/register-files-lookup.js +1 -56
  84. package/dist/cli/register-history-activity.d.ts +8 -0
  85. package/dist/cli/register-history-activity.js +2 -0
  86. package/dist/cli/register-history-author.js +1 -38
  87. package/dist/cli/register-history-maintenance.d.ts +9 -0
  88. package/dist/cli/register-history-maintenance.js +2 -0
  89. package/dist/cli/register-list-query.js +10 -943
  90. package/dist/cli/register-mutation-options.js +1 -9
  91. package/dist/cli/register-mutation.d.ts +0 -5
  92. package/dist/cli/register-mutation.js +19 -1893
  93. package/dist/cli/register-operations.js +1 -920
  94. package/dist/cli/register-setup.js +1 -716
  95. package/dist/cli/register-structured-mutation.js +1 -196
  96. package/dist/cli/registration-helpers.js +1 -5
  97. package/dist/cli/runtime-compatibility-boundary.js +4 -42
  98. package/dist/cli/schema-registration-helpers.js +1 -73
  99. package/dist/cli/search-refresh.js +1 -13
  100. package/dist/cli/stats-analytics-json.js +1 -68
  101. package/dist/cli/telemetry-flush.js +1 -10
  102. package/dist/cli-bundle/bundle-manifest.json +164 -156
  103. package/dist/cli-bundle/chunks/{chunk-NPN5I67J.js → chunk-3IPRM75M.js} +3 -3
  104. package/dist/cli-bundle/chunks/chunk-4VL5P22L.js +2 -0
  105. package/dist/cli-bundle/chunks/chunk-AAFBV3U3.js +29 -0
  106. package/dist/cli-bundle/chunks/chunk-D3YVILJJ.js +20 -0
  107. package/dist/cli-bundle/chunks/{chunk-WYRZZ5ZE.js → chunk-DEZPZOQ7.js} +2 -2
  108. package/dist/cli-bundle/chunks/chunk-ECBLPN7B.js +3 -0
  109. package/dist/cli-bundle/chunks/chunk-J6ERHBV2.js +235 -0
  110. package/dist/cli-bundle/chunks/chunk-JUNJ5EKI.js +2 -0
  111. package/dist/cli-bundle/chunks/chunk-L5RCDKQ2.js +2 -0
  112. package/dist/cli-bundle/chunks/chunk-NSAPNEYH.js +2 -0
  113. package/dist/cli-bundle/chunks/chunk-OHNLSGGV.js +79 -0
  114. package/dist/cli-bundle/chunks/chunk-WQKMSFBV.js +5 -0
  115. package/dist/cli-bundle/chunks/{chunk-BAX2BYUW.js → chunk-XZ6T7YPP.js} +256 -150
  116. package/dist/cli-bundle/chunks/{chunk-JT6XF6GE.js → chunk-Z3XVXUVF.js} +4 -4
  117. package/dist/cli-bundle/chunks/register-list-query-UIHRCS6D.js +11 -0
  118. package/dist/cli-bundle/chunks/register-mutation-WHWMGRVX.js +20 -0
  119. package/dist/cli-bundle/chunks/register-operations-64YZYTC5.js +2 -0
  120. package/dist/cli-bundle/chunks/register-setup-PERI45EM.js +2 -0
  121. package/dist/cli-bundle/focused-chunks/chunk-2W4XIYOB.js +2 -0
  122. package/dist/cli-bundle/focused-chunks/chunk-2WSBXIGF.js +12 -0
  123. package/dist/cli-bundle/focused-chunks/chunk-5FHTCOHS.js +3 -0
  124. package/dist/cli-bundle/focused-chunks/chunk-7N6DOREF.js +26 -0
  125. package/dist/cli-bundle/focused-chunks/{chunk-3BZEOXLT.js → chunk-7PC4R5QB.js} +2 -2
  126. package/dist/cli-bundle/focused-chunks/chunk-BUCJUZVG.js +6 -0
  127. package/dist/cli-bundle/focused-chunks/chunk-FE3BABLJ.js +2 -0
  128. package/dist/cli-bundle/focused-chunks/chunk-IWITF53W.js +2 -0
  129. package/dist/cli-bundle/focused-chunks/chunk-OQUGRHKV.js +10 -0
  130. package/dist/cli-bundle/focused-chunks/{chunk-M6PBRFSH.js → chunk-PNKIANFZ.js} +2 -2
  131. package/dist/cli-bundle/focused-chunks/{chunk-LIJIA4TY.js → chunk-QQQ4SAUO.js} +3 -3
  132. package/dist/cli-bundle/focused-chunks/chunk-TTYXF5YD.js +177 -0
  133. package/dist/cli-bundle/focused-chunks/chunk-XNR3DM6J.js +2 -0
  134. package/dist/cli-bundle/focused-chunks/chunk-XSS3APUF.js +9 -0
  135. package/dist/cli-bundle/focused-chunks/chunk-YCDQ2N23.js +8 -0
  136. package/dist/cli-bundle/focused-chunks/chunk-YJUXGS57.js +20 -0
  137. package/dist/cli-bundle/focused-chunks/chunk-ZTCE4UO6.js +58 -0
  138. package/dist/cli-bundle/main.js +20 -20
  139. package/dist/cli-bundle/sdk-authoring.js +1 -1
  140. package/dist/cli-bundle/sdk-contracts.js +2 -2
  141. package/dist/cli-bundle/sdk-core.js +37 -37
  142. package/dist/cli-bundle/sdk-governance.js +1 -1
  143. package/dist/cli-bundle/sdk-graph.js +1 -1
  144. package/dist/cli-bundle/sdk-merge.js +42 -42
  145. package/dist/cli-bundle/sdk-query.js +1 -1
  146. package/dist/cli-bundle/sdk-runtime.js +1 -1
  147. package/dist/cli-bundle/sdk-testing.js +1 -1
  148. package/dist/cli-bundle/sdk.js +11 -11
  149. package/dist/cli.js +1 -104
  150. package/dist/core/checkpoint/checkpoint-gc.js +1 -169
  151. package/dist/core/checkpoint/mutation-checkpoint.js +2 -133
  152. package/dist/core/config/nested-settings.js +1 -534
  153. package/dist/core/config/positional-value.js +1 -109
  154. package/dist/core/diagnostics/remediation.js +1 -506
  155. package/dist/core/extensions/activation-summary-markdown.js +2 -145
  156. package/dist/core/extensions/activation-summary.js +1 -92
  157. package/dist/core/extensions/activation-transaction.js +1 -46
  158. package/dist/core/extensions/capability-usage.js +1 -173
  159. package/dist/core/extensions/command-hook-context.js +1 -13
  160. package/dist/core/extensions/command-metadata-contract.js +1 -22
  161. package/dist/core/extensions/command-visibility-tier.js +1 -29
  162. package/dist/core/extensions/contribution-inventory.js +1 -173
  163. package/dist/core/extensions/exporter-output-contract.js +1 -66
  164. package/dist/core/extensions/extension-candidate.js +1 -18
  165. package/dist/core/extensions/extension-capability-aliases.js +1 -158
  166. package/dist/core/extensions/extension-hook-runtime.js +1 -699
  167. package/dist/core/extensions/extension-policy.js +1 -599
  168. package/dist/core/extensions/extension-registries.js +1 -62
  169. package/dist/core/extensions/extension-runtime-helpers.js +1 -33
  170. package/dist/core/extensions/extension-types.js +1 -102
  171. package/dist/core/extensions/flag-definition-validation.js +1 -52
  172. package/dist/core/extensions/flag-value-types.js +1 -64
  173. package/dist/core/extensions/index.js +1 -526
  174. package/dist/core/extensions/item-field-types.js +1 -39
  175. package/dist/core/extensions/item-fields.js +1 -261
  176. package/dist/core/extensions/loader.js +1 -2223
  177. package/dist/core/extensions/manifest-schema.js +1 -69
  178. package/dist/core/extensions/module-graph-snapshot.js +1 -33
  179. package/dist/core/extensions/preflight-ownership.js +1 -41
  180. package/dist/core/extensions/registration-validation.js +1 -82
  181. package/dist/core/extensions/registration-values.js +1 -209
  182. package/dist/core/extensions/reserved-host-flags.js +1 -36
  183. package/dist/core/extensions/runtime-registrations.js +1 -67
  184. package/dist/core/extensions/service-ownership.js +1 -19
  185. package/dist/core/extensions/version-compat.js +1 -216
  186. package/dist/core/fs/fs-utils.js +2 -158
  187. package/dist/core/fs/host-environment-errors.js +1 -141
  188. package/dist/core/fs/index.js +1 -9
  189. package/dist/core/fs/path-utils.js +1 -17
  190. package/dist/core/governance/content-fields.js +1 -160
  191. package/dist/core/governance/issue-codes.js +1 -151
  192. package/dist/core/governance/metadata-coverage.js +1 -358
  193. package/dist/core/history/drift-cache.js +3 -72
  194. package/dist/core/history/drift-scan.js +1 -342
  195. package/dist/core/history/event-classification.js +1 -109
  196. package/dist/core/history/event-index.js +8 -784
  197. package/dist/core/history/history-compact-bulk.js +1 -104
  198. package/dist/core/history/history-diff.js +1 -158
  199. package/dist/core/history/history-rewrite.d.ts +6 -1
  200. package/dist/core/history/history-rewrite.js +1 -107
  201. package/dist/core/history/history-storage-stats.js +1 -102
  202. package/dist/core/history/history-stream-policy.js +1 -62
  203. package/dist/core/history/history.js +2 -617
  204. package/dist/core/history/identity.js +1 -30
  205. package/dist/core/history/index.js +1 -9
  206. package/dist/core/history/projection.js +1 -196
  207. package/dist/core/history/read.d.ts +9 -0
  208. package/dist/core/history/read.js +1 -57
  209. package/dist/core/history/replay.js +2 -439
  210. package/dist/core/history/version-address.js +1 -32
  211. package/dist/core/history/workspace-history.js +2 -433
  212. package/dist/core/io/body-file.js +1 -62
  213. package/dist/core/io/bulk-ids-input.js +1 -112
  214. package/dist/core/item/actionability.js +1 -327
  215. package/dist/core/item/dependency-reference.js +1 -20
  216. package/dist/core/item/id.js +1 -112
  217. package/dist/core/item/index.js +1 -12
  218. package/dist/core/item/item-format-version.js +1 -78
  219. package/dist/core/item/item-format.js +5 -1473
  220. package/dist/core/item/item-record.js +1 -23
  221. package/dist/core/item/item-type-definition.js +1 -133
  222. package/dist/core/item/parent-reference-policy.js +1 -57
  223. package/dist/core/item/parse.js +2 -603
  224. package/dist/core/item/plan-lifecycle.js +1 -19
  225. package/dist/core/item/priority.js +1 -61
  226. package/dist/core/item/sprint-release-format.js +1 -38
  227. package/dist/core/item/status-filter.js +1 -115
  228. package/dist/core/item/status.js +1 -43
  229. package/dist/core/item/toon-decode.js +1 -29
  230. package/dist/core/item/type-registry.js +1 -715
  231. package/dist/core/item/type-synonyms.js +1 -38
  232. package/dist/core/lock/index.js +1 -9
  233. package/dist/core/lock/lock-gc.js +1 -240
  234. package/dist/core/lock/lock.js +3 -590
  235. package/dist/core/output/mutation-projection.js +1 -217
  236. package/dist/core/output/output-control.js +1 -25
  237. package/dist/core/output/output.js +11 -494
  238. package/dist/core/output/query-summary.js +1 -58
  239. package/dist/core/output/tabular.js +1 -77
  240. package/dist/core/packages/manifest.js +1 -244
  241. package/dist/core/packages/root.js +1 -84
  242. package/dist/core/policy/workflow-policy-schema.d.ts +312 -0
  243. package/dist/core/policy/workflow-policy-schema.js +2 -0
  244. package/dist/core/policy/workflow-policy-store.d.ts +24 -0
  245. package/dist/core/policy/workflow-policy-store.js +2 -0
  246. package/dist/core/policy/workflow-policy.d.ts +139 -0
  247. package/dist/core/policy/workflow-policy.js +2 -0
  248. package/dist/core/profile/profile-describe.js +1 -83
  249. package/dist/core/profile/profile-lint.js +1 -415
  250. package/dist/core/profile/profile-plan.js +0 -0
  251. package/dist/core/profile/profile-presets.js +1 -370
  252. package/dist/core/reproducibility/context.js +1 -82
  253. package/dist/core/schema/fields-file.js +2 -288
  254. package/dist/core/schema/item-types-file.js +2 -296
  255. package/dist/core/schema/runtime-field-filters.js +1 -49
  256. package/dist/core/schema/runtime-field-values.js +1 -313
  257. package/dist/core/schema/runtime-schema.js +2 -826
  258. package/dist/core/schema/status-defs-file.js +2 -227
  259. package/dist/core/schema/status-token.js +1 -31
  260. package/dist/core/schema/type-inference.js +1 -95
  261. package/dist/core/schema/type-presets.js +1 -87
  262. package/dist/core/schema/type-workflows.js +1 -104
  263. package/dist/core/search/background-refresh.js +2 -286
  264. package/dist/core/search/bm25.js +1 -146
  265. package/dist/core/search/cache.js +2 -534
  266. package/dist/core/search/corpus.js +1 -311
  267. package/dist/core/search/embedding-batches.js +1 -163
  268. package/dist/core/search/eval.js +1 -225
  269. package/dist/core/search/http-client.js +1 -75
  270. package/dist/core/search/providers.js +1 -242
  271. package/dist/core/search/relevance.js +1 -244
  272. package/dist/core/search/semantic-defaults.js +1 -199
  273. package/dist/core/search/staleness.js +1 -30
  274. package/dist/core/search/vector-stores.js +2 -664
  275. package/dist/core/search/vectorization-metadata.js +1 -81
  276. package/dist/core/sentry/helpers.js +1 -272
  277. package/dist/core/sentry/instrument.js +1 -387
  278. package/dist/core/session/session-state.js +1 -260
  279. package/dist/core/shared/agent-session-context.js +1 -133
  280. package/dist/core/shared/author.js +1 -1172
  281. package/dist/core/shared/command-types.js +1 -4
  282. package/dist/core/shared/conflict-markers.js +1 -31
  283. package/dist/core/shared/constants.js +1 -405
  284. package/dist/core/shared/errors.js +1 -20
  285. package/dist/core/shared/html-entity-decode.js +1 -131
  286. package/dist/core/shared/index.js +1 -12
  287. package/dist/core/shared/item-metadata-contract.js +1 -89
  288. package/dist/core/shared/lazy-module.js +1 -16
  289. package/dist/core/shared/levenshtein.js +1 -61
  290. package/dist/core/shared/memo.js +1 -19
  291. package/dist/core/shared/numeric-parsers.js +1 -20
  292. package/dist/core/shared/option-alias-visibility.js +1 -67
  293. package/dist/core/shared/primitives.js +1 -127
  294. package/dist/core/shared/serial-queue.js +1 -79
  295. package/dist/core/shared/serialization.js +1 -210
  296. package/dist/core/shared/split-comma-list.js +1 -30
  297. package/dist/core/shared/text-normalization.js +1 -38
  298. package/dist/core/shared/time.js +1 -306
  299. package/dist/core/store/index.js +1 -12
  300. package/dist/core/store/item-format-migration.js +1 -125
  301. package/dist/core/store/item-metadata-cache.js +1 -1116
  302. package/dist/core/store/item-metadata-query-index.js +9 -394
  303. package/dist/core/store/item-metadata-read-work.js +1 -43
  304. package/dist/core/store/item-store.js +1 -693
  305. package/dist/core/store/paths.d.ts +1 -1
  306. package/dist/core/store/paths.js +1 -214
  307. package/dist/core/store/settings-read-cache.js +1 -85
  308. package/dist/core/store/settings-validator.d.ts +1 -0
  309. package/dist/core/store/settings-validator.js +1 -421
  310. package/dist/core/store/settings.js +3 -1309
  311. package/dist/core/store/tracker-preflight.js +1 -141
  312. package/dist/core/telemetry/consent.js +5 -108
  313. package/dist/core/telemetry/observability.js +1 -246
  314. package/dist/core/telemetry/runtime.js +4 -1988
  315. package/dist/core/test/background-runs.js +4 -945
  316. package/dist/core/test/item-test-run-tracking.js +1 -63
  317. package/dist/core/test/run-selectors.js +1 -120
  318. package/dist/core/validate/estimate-defaults.js +1 -89
  319. package/dist/core/validate/fix-planning.js +1 -189
  320. package/dist/core/validate/linked-artifact-reference.js +1 -36
  321. package/dist/core/validate/missing-by-type.js +1 -34
  322. package/dist/core/validate/missing-link-owners.js +1 -95
  323. package/dist/core/validate/stale-file-classification.js +1 -82
  324. package/dist/mcp/http-server.js +5 -448
  325. package/dist/mcp/legacy-adapter.js +1 -77
  326. package/dist/mcp/runtime-capabilities.js +1 -200
  327. package/dist/mcp/server.js +4 -1233
  328. package/dist/mcp/tool-definitions.js +1 -804
  329. package/dist/sdk/actionability.js +1 -13
  330. package/dist/sdk/agent/closed-domain-contracts.js +1 -161
  331. package/dist/sdk/agent/command-recovery.js +1 -59
  332. package/dist/sdk/agent/command-suggestions.js +1 -66
  333. package/dist/sdk/agent/create-option-policy.js +1 -31
  334. package/dist/sdk/agent/identity-config.js +1 -106
  335. package/dist/sdk/agent/item-addressing.js +1 -207
  336. package/dist/sdk/agent/refusal-closure-census.js +1 -151
  337. package/dist/sdk/agent/refusal-closure.js +1 -133
  338. package/dist/sdk/agent/refusal-corpus-contracts.js +1 -193
  339. package/dist/sdk/agent/refusal-reachability.js +1 -593
  340. package/dist/sdk/agent/subcommand-recovery.js +1 -83
  341. package/dist/sdk/agent/task-transcript-contracts.js +1 -197
  342. package/dist/sdk/agent/tracker-preflight-contracts.js +1 -126
  343. package/dist/sdk/agent-capability-contracts.js +1 -428
  344. package/dist/sdk/agent-session-context.js +1 -9
  345. package/dist/sdk/annotations.js +1 -448
  346. package/dist/sdk/author-attribution.js +1 -468
  347. package/dist/sdk/authoring.js +1 -20
  348. package/dist/sdk/cli-bootstrap.js +1 -838
  349. package/dist/sdk/cli-contracts/agent-output-contracts.d.ts +1 -1
  350. package/dist/sdk/cli-contracts/agent-output-contracts.js +4 -476
  351. package/dist/sdk/cli-contracts/bootstrap-command-scanner.js +1 -79
  352. package/dist/sdk/cli-contracts/command-aliases.d.ts +4 -0
  353. package/dist/sdk/cli-contracts/command-aliases.js +1 -107
  354. package/dist/sdk/cli-contracts/command-exit-contracts.js +1 -151
  355. package/dist/sdk/cli-contracts/commander-mutation-options.js +1 -1081
  356. package/dist/sdk/cli-contracts/commander-types.js +1 -159
  357. package/dist/sdk/cli-contracts/completeness.js +1 -393
  358. package/dist/sdk/cli-contracts/enum-contracts.d.ts +1 -1
  359. package/dist/sdk/cli-contracts/enum-contracts.js +1 -222
  360. package/dist/sdk/cli-contracts/flag-contracts.js +1 -1947
  361. package/dist/sdk/cli-contracts/flag-lexicon-contracts.js +1 -347
  362. package/dist/sdk/cli-contracts/grammar-contracts.js +1 -986
  363. package/dist/sdk/cli-contracts/registration-helpers.js +7 -990
  364. package/dist/sdk/cli-contracts/runtime-contracts.d.ts +5 -0
  365. package/dist/sdk/cli-contracts/runtime-contracts.js +1 -2090
  366. package/dist/sdk/cli-contracts/schemas/assurance-definition.js +1 -324
  367. package/dist/sdk/cli-contracts/string-lists.js +1 -16
  368. package/dist/sdk/cli-contracts/tool-option-contracts.js +1 -461
  369. package/dist/sdk/cli-contracts/tool-parameter-tables.js +1 -2167
  370. package/dist/sdk/cli-contracts/tool-schema.d.ts +3 -1
  371. package/dist/sdk/cli-contracts/tool-schema.js +1 -1664
  372. package/dist/sdk/cli-contracts/typed-action-inputs.js +1 -4
  373. package/dist/sdk/cli-contracts.d.ts +1 -1
  374. package/dist/sdk/cli-contracts.js +1 -17
  375. package/dist/sdk/cli-program.js +1 -49
  376. package/dist/sdk/command-line.d.ts +2 -5
  377. package/dist/sdk/command-line.js +1 -78
  378. package/dist/sdk/comments.js +1 -133
  379. package/dist/sdk/compile-cache.js +1 -73
  380. package/dist/sdk/completion.js +174 -839
  381. package/dist/sdk/compose.js +1 -1090
  382. package/dist/sdk/config.js +1 -1204
  383. package/dist/sdk/context/recency.js +1 -33
  384. package/dist/sdk/context/semantic-session-attribution.js +1 -82
  385. package/dist/sdk/context/usage-egress.js +1 -29
  386. package/dist/sdk/context/usage-ledger.js +3 -185
  387. package/dist/sdk/context-intent-contracts.js +1 -709
  388. package/dist/sdk/context-intent-runtime.js +1 -115
  389. package/dist/sdk/context-packing.js +1 -218
  390. package/dist/sdk/context-relevance.js +1 -503
  391. package/dist/sdk/context-signal-store.js +2 -426
  392. package/dist/sdk/context-usage.js +1 -367
  393. package/dist/sdk/contracts.js +1 -23
  394. package/dist/sdk/core-governance.js +1 -14
  395. package/dist/sdk/core.js +1 -14
  396. package/dist/sdk/corpus-shape.js +1 -401
  397. package/dist/sdk/define.js +1 -220
  398. package/dist/sdk/dependencies.js +1 -718
  399. package/dist/sdk/dependency-flag-validation.js +1 -156
  400. package/dist/sdk/dependency-provenance.js +1 -135
  401. package/dist/sdk/docs.js +1 -14
  402. package/dist/sdk/duplicates.js +1 -40
  403. package/dist/sdk/environment/agent-environment.js +1 -466
  404. package/dist/sdk/environment/host-environment-errors.js +1 -8
  405. package/dist/sdk/environment/project-runtime-compatibility.js +1 -481
  406. package/dist/sdk/environment/source-context.js +1 -28
  407. package/dist/sdk/environment/tracker-preflight.js +1 -9
  408. package/dist/sdk/error-code-catalog.js +1 -153
  409. package/dist/sdk/error-runtime.js +1 -58
  410. package/dist/sdk/errors.js +1 -58
  411. package/dist/sdk/eval.js +1 -190
  412. package/dist/sdk/extension/author-manifest.js +1 -92
  413. package/dist/sdk/extension/bundled-catalog.js +1 -332
  414. package/dist/sdk/extension/concurrency.js +1 -25
  415. package/dist/sdk/extension/copy-scope.d.ts +2 -0
  416. package/dist/sdk/extension/copy-scope.js +2 -0
  417. package/dist/sdk/extension/custom-field-collisions.js +1 -30
  418. package/dist/sdk/extension/describe.js +3 -189
  419. package/dist/sdk/extension/doctor.js +1 -606
  420. package/dist/sdk/extension/install-plan.d.ts +69 -0
  421. package/dist/sdk/extension/install-plan.js +2 -0
  422. package/dist/sdk/extension/install-receipts.d.ts +7 -0
  423. package/dist/sdk/extension/install-receipts.js +2 -0
  424. package/dist/sdk/extension/install-runtime.js +3 -313
  425. package/dist/sdk/extension/install-snapshot.js +1 -66
  426. package/dist/sdk/extension/install-sources.js +5 -1057
  427. package/dist/sdk/extension/managed-state.js +2 -252
  428. package/dist/sdk/extension/migrations.js +2 -174
  429. package/dist/sdk/extension/output-ownership.js +1 -25
  430. package/dist/sdk/extension/runtime-summary.js +1 -18
  431. package/dist/sdk/extension/scaffold.js +4 -2308
  432. package/dist/sdk/extension/shared.js +1 -147
  433. package/dist/sdk/extension/source-resolution.js +1 -65
  434. package/dist/sdk/extension/update-check.js +1 -67
  435. package/dist/sdk/extension-command-context.js +1 -44
  436. package/dist/sdk/extension-contracts.js +1 -73
  437. package/dist/sdk/extension.d.ts +7 -2
  438. package/dist/sdk/extension.js +1 -2196
  439. package/dist/sdk/files.js +1 -535
  440. package/dist/sdk/flag-invocation-contracts.d.ts +0 -5
  441. package/dist/sdk/flag-invocation-contracts.js +1 -344
  442. package/dist/sdk/generated/generated-error-code-catalog-part-1.js +1 -2224
  443. package/dist/sdk/generated/generated-error-code-catalog-part-2.js +1 -2236
  444. package/dist/sdk/generated-error-code-catalog.js +1 -16
  445. package/dist/sdk/governance/assurance-action-contracts.js +1 -4
  446. package/dist/sdk/governance/assurance-action.js +1 -411
  447. package/dist/sdk/governance/assurance-limits.js +1 -10
  448. package/dist/sdk/governance/assurance-mutation-error.js +1 -81
  449. package/dist/sdk/governance/assurance-presets.js +1 -135
  450. package/dist/sdk/governance/assurance-runtime.js +1 -238
  451. package/dist/sdk/governance/assurance.js +4 -1182
  452. package/dist/sdk/governance/boundary-fixtures.js +1 -200
  453. package/dist/sdk/governance/coverage-assurance.js +1 -60
  454. package/dist/sdk/governance/defect-recurrence-coverage.js +1 -188
  455. package/dist/sdk/governance/defect-recurrence-graph.js +1 -120
  456. package/dist/sdk/governance/defect-recurrence-signals.js +1 -24
  457. package/dist/sdk/governance/defect-recurrence.js +1 -623
  458. package/dist/sdk/governance/extension-host-version.js +1 -115
  459. package/dist/sdk/governance/gc.js +1 -368
  460. package/dist/sdk/governance/health.js +1 -2367
  461. package/dist/sdk/governance/hierarchy-validation.js +1 -108
  462. package/dist/sdk/governance/linked-file-report.js +1 -71
  463. package/dist/sdk/governance/merge-receipt-history.js +1 -206
  464. package/dist/sdk/governance/provenance-health.js +1 -282
  465. package/dist/sdk/governance/reindex.js +4 -761
  466. package/dist/sdk/governance/stale-work.js +1 -82
  467. package/dist/sdk/governance/status-role-diagnostics.js +1 -35
  468. package/dist/sdk/governance/storage-integrity.js +1 -280
  469. package/dist/sdk/governance/tracked-runtime-cache.js +1 -106
  470. package/dist/sdk/governance/upgrade.js +2 -327
  471. package/dist/sdk/governance/validate-history-drift.js +1 -81
  472. package/dist/sdk/governance/validate-item-reader.js +1 -17
  473. package/dist/sdk/governance/validate-normalization.js +1 -36
  474. package/dist/sdk/governance/validate.d.ts +3 -1
  475. package/dist/sdk/governance/validate.js +1 -2261
  476. package/dist/sdk/governance/workflow-completeness.d.ts +32 -0
  477. package/dist/sdk/governance/workflow-completeness.js +2 -0
  478. package/dist/sdk/governance/workflow-policy.d.ts +47 -0
  479. package/dist/sdk/governance/workflow-policy.js +4 -0
  480. package/dist/sdk/governance/workspace-position.js +1 -163
  481. package/dist/sdk/governance.d.ts +2 -0
  482. package/dist/sdk/governance.js +1 -31
  483. package/dist/sdk/graph/adapter.js +1 -181
  484. package/dist/sdk/graph/analytics.js +1 -474
  485. package/dist/sdk/graph/assembly.js +1 -377
  486. package/dist/sdk/graph/cache.js +1 -160
  487. package/dist/sdk/graph/centrality.js +1 -258
  488. package/dist/sdk/graph/conformance.js +1 -130
  489. package/dist/sdk/graph/deadline-scheduling.d.ts +90 -0
  490. package/dist/sdk/graph/deadline-scheduling.js +2 -0
  491. package/dist/sdk/graph/durable-cache.d.ts +1 -1
  492. package/dist/sdk/graph/durable-cache.js +1 -361
  493. package/dist/sdk/graph/governance-contracts.js +1 -34
  494. package/dist/sdk/graph/governance.d.ts +13 -1
  495. package/dist/sdk/graph/governance.js +1 -735
  496. package/dist/sdk/graph/hierarchy-integrity.js +1 -310
  497. package/dist/sdk/graph/index.d.ts +3 -2
  498. package/dist/sdk/graph/index.js +1 -26
  499. package/dist/sdk/graph/lifecycle-coverage.d.ts +32 -0
  500. package/dist/sdk/graph/lifecycle-coverage.js +2 -0
  501. package/dist/sdk/graph/mutation-advisory.js +1 -176
  502. package/dist/sdk/graph/remediation.js +1 -197
  503. package/dist/sdk/graph/run.d.ts +15 -1
  504. package/dist/sdk/graph/run.js +1 -768
  505. package/dist/sdk/graph/scheduling.js +1 -124
  506. package/dist/sdk/graph/traversal.js +1 -284
  507. package/dist/sdk/graph/workspace-relationship-kind-registry.js +1 -27
  508. package/dist/sdk/graph.js +1 -15
  509. package/dist/sdk/guide-topics.js +1 -707
  510. package/dist/sdk/guide.js +1 -279
  511. package/dist/sdk/history/maintenance.d.ts +71 -0
  512. package/dist/sdk/history/maintenance.js +2 -0
  513. package/dist/sdk/history/salvage.js +2 -247
  514. package/dist/sdk/history/subject.d.ts +19 -0
  515. package/dist/sdk/history/subject.js +2 -0
  516. package/dist/sdk/history-analytics.js +1 -282
  517. package/dist/sdk/history-compact.js +1 -527
  518. package/dist/sdk/history-mcp.js +1 -68
  519. package/dist/sdk/history-provenance.js +1 -182
  520. package/dist/sdk/history-read.js +1 -96
  521. package/dist/sdk/history-redact.d.ts +1 -14
  522. package/dist/sdk/history-redact.js +1 -643
  523. package/dist/sdk/history-repair.d.ts +5 -0
  524. package/dist/sdk/history-repair.js +1 -657
  525. package/dist/sdk/improvement-ledger-validation.js +1 -62
  526. package/dist/sdk/improvement-ledger.js +2 -257
  527. package/dist/sdk/index.d.ts +4 -1
  528. package/dist/sdk/index.js +1 -183
  529. package/dist/sdk/init-agent-guidance.js +2 -496
  530. package/dist/sdk/init.js +2 -820
  531. package/dist/sdk/invocation-author.js +1 -39
  532. package/dist/sdk/item-children.js +1 -90
  533. package/dist/sdk/item-metadata-index.js +1 -15
  534. package/dist/sdk/item-schedule.js +1 -27
  535. package/dist/sdk/item-transaction.js +1 -396
  536. package/dist/sdk/learnings.js +1 -29
  537. package/dist/sdk/lifecycle/append.js +2 -53
  538. package/dist/sdk/lifecycle/claim.d.ts +2 -0
  539. package/dist/sdk/lifecycle/claim.js +1 -242
  540. package/dist/sdk/lifecycle/close-many.js +1 -438
  541. package/dist/sdk/lifecycle/close.js +1 -468
  542. package/dist/sdk/lifecycle/copy.js +1 -212
  543. package/dist/sdk/lifecycle/create.js +1 -1949
  544. package/dist/sdk/lifecycle/delete.js +1 -45
  545. package/dist/sdk/lifecycle/event-validation-messages.js +1 -91
  546. package/dist/sdk/lifecycle/focus.js +1 -91
  547. package/dist/sdk/lifecycle/hierarchy-mutation-lock.js +1 -24
  548. package/dist/sdk/lifecycle/legacy-none-tokens.js +1 -149
  549. package/dist/sdk/lifecycle/lifecycle-transitions.js +1 -40
  550. package/dist/sdk/lifecycle/mcp-actions.d.ts +2 -0
  551. package/dist/sdk/lifecycle/mcp-actions.js +1 -51
  552. package/dist/sdk/lifecycle/metadata-normalizers.js +1 -46
  553. package/dist/sdk/lifecycle/mutation-command-options.js +1 -9
  554. package/dist/sdk/lifecycle/plan.js +1 -1606
  555. package/dist/sdk/lifecycle/recurrence-parsers.d.ts +1 -1
  556. package/dist/sdk/lifecycle/recurrence-parsers.js +1 -147
  557. package/dist/sdk/lifecycle/reopen.js +1 -68
  558. package/dist/sdk/lifecycle/repeatable-metadata-parsers.js +1 -143
  559. package/dist/sdk/lifecycle/restore.d.ts +1 -0
  560. package/dist/sdk/lifecycle/restore.js +1 -330
  561. package/dist/sdk/lifecycle/shared-unset-fields.js +1 -295
  562. package/dist/sdk/lifecycle/update-many.js +1 -861
  563. package/dist/sdk/lifecycle/update.js +1 -2136
  564. package/dist/sdk/lifecycle-completion.js +1 -92
  565. package/dist/sdk/lifecycle-policy.js +1 -120
  566. package/dist/sdk/linked-artifacts.js +1 -530
  567. package/dist/sdk/mcp/apps.js +4 -133
  568. package/dist/sdk/mcp/authorization.js +1 -404
  569. package/dist/sdk/mcp/discovery.js +1 -494
  570. package/dist/sdk/mcp/interactions.js +1 -336
  571. package/dist/sdk/mcp/protocol.d.ts +7 -0
  572. package/dist/sdk/mcp/protocol.js +1 -184
  573. package/dist/sdk/mcp/skills.js +1 -389
  574. package/dist/sdk/mcp/subscriptions.js +1 -211
  575. package/dist/sdk/mcp/tasks.js +2 -430
  576. package/dist/sdk/mcp/transport.js +1 -260
  577. package/dist/sdk/merge/abandoned-receipts.js +1 -46
  578. package/dist/sdk/merge/driver.js +1 -212
  579. package/dist/sdk/merge/index.js +1 -16
  580. package/dist/sdk/merge/install.js +3 -561
  581. package/dist/sdk/merge/receipt-file-boundary.js +1 -46
  582. package/dist/sdk/merge/receipt-operation.js +1 -96
  583. package/dist/sdk/merge/receipt-schema.js +1 -397
  584. package/dist/sdk/merge/receipts.js +4 -525
  585. package/dist/sdk/merge/reconcile.js +1 -352
  586. package/dist/sdk/merge/three-way.js +3 -775
  587. package/dist/sdk/merge.js +1 -10
  588. package/dist/sdk/mutation-events.js +1 -292
  589. package/dist/sdk/mutation-guard.js +1 -216
  590. package/dist/sdk/notes.js +1 -139
  591. package/dist/sdk/output-contracts.js +1 -172
  592. package/dist/sdk/output-projection.js +1 -430
  593. package/dist/sdk/output-token-accounting.js +1 -140
  594. package/dist/sdk/output.js +1 -64
  595. package/dist/sdk/ownership-source.js +1 -21
  596. package/dist/sdk/package-import-adapters.js +1 -442
  597. package/dist/sdk/package-migrations.js +1 -20
  598. package/dist/sdk/package-runtime-options.js +1 -80
  599. package/dist/sdk/pagination.js +1 -162
  600. package/dist/sdk/profile.js +1 -454
  601. package/dist/sdk/provenance.js +1 -258
  602. package/dist/sdk/public-surface.json +1 -1
  603. package/dist/sdk/query/activity.js +1 -401
  604. package/dist/sdk/query/aggregate.d.ts +16 -0
  605. package/dist/sdk/query/aggregate.js +1 -390
  606. package/dist/sdk/query/calendar.js +1 -964
  607. package/dist/sdk/query/complete-list.js +1 -215
  608. package/dist/sdk/query/context.js +1 -1702
  609. package/dist/sdk/query/duplicate-candidates.js +1 -70
  610. package/dist/sdk/query/get.js +1 -450
  611. package/dist/sdk/query/history.js +1 -186
  612. package/dist/sdk/query/item-filter-options.js +1 -9
  613. package/dist/sdk/query/light-metadata.js +1 -18
  614. package/dist/sdk/query/list-filter-shared.js +1 -81
  615. package/dist/sdk/query/list.js +1 -1304
  616. package/dist/sdk/query/multi-value-filters.js +1 -78
  617. package/dist/sdk/query/next.js +1 -513
  618. package/dist/sdk/query/parsers.js +1 -44
  619. package/dist/sdk/query/projection-contracts.js +1 -184
  620. package/dist/sdk/query/search-contracts.d.ts +27 -0
  621. package/dist/sdk/query/search-contracts.js +1 -230
  622. package/dist/sdk/query/search-pagination.js +1 -35
  623. package/dist/sdk/query/search-rendering.js +1 -105
  624. package/dist/sdk/query/search.d.ts +6 -4
  625. package/dist/sdk/query/search.js +2 -1987
  626. package/dist/sdk/query.js +1 -35
  627. package/dist/sdk/read-output/continuation.js +1 -194
  628. package/dist/sdk/read-output-budget.js +1 -135
  629. package/dist/sdk/read-output-contracts.d.ts +1 -1
  630. package/dist/sdk/read-output-contracts.js +1 -1225
  631. package/dist/sdk/read-output-rows.js +1 -186
  632. package/dist/sdk/read-output-session.js +1 -208
  633. package/dist/sdk/relationship-analytics.js +1 -410
  634. package/dist/sdk/relationship-context.js +1 -284
  635. package/dist/sdk/relationship-history.js +4 -519
  636. package/dist/sdk/relationship-kinds/contract.js +1 -22
  637. package/dist/sdk/relationship-migration.js +1 -77
  638. package/dist/sdk/relationships.js +1 -579
  639. package/dist/sdk/reproducibility/process.js +1 -87
  640. package/dist/sdk/runtime-action-aliases.js +1 -59
  641. package/dist/sdk/runtime-extended-actions.js +1 -177
  642. package/dist/sdk/runtime-input.js +1 -614
  643. package/dist/sdk/runtime-primitives.js +1 -84
  644. package/dist/sdk/runtime-public-contracts.d.ts +2 -1
  645. package/dist/sdk/runtime-public-contracts.js +1 -4
  646. package/dist/sdk/runtime-stats-options.js +1 -38
  647. package/dist/sdk/runtime.d.ts +4 -0
  648. package/dist/sdk/runtime.js +1 -1928
  649. package/dist/sdk/scheduling-shortcuts.js +1 -63
  650. package/dist/sdk/schema-migration.js +3 -856
  651. package/dist/sdk/schema.d.ts +2 -1
  652. package/dist/sdk/schema.js +1 -1376
  653. package/dist/sdk/search-refresh-worker.js +1 -18
  654. package/dist/sdk/similarity-scoring.js +1 -53
  655. package/dist/sdk/similarity.js +1 -326
  656. package/dist/sdk/start-task-status.js +1 -14
  657. package/dist/sdk/stats.js +1 -270
  658. package/dist/sdk/structured-mutations.js +1 -580
  659. package/dist/sdk/telemetry-flush.js +1 -13
  660. package/dist/sdk/telemetry.js +1 -405
  661. package/dist/sdk/templates.js +2 -292
  662. package/dist/sdk/test/batch.js +2 -509
  663. package/dist/sdk/test/entry.js +1 -70
  664. package/dist/sdk/test/execution.js +6 -2211
  665. package/dist/sdk/test/linked-command-detection.js +1 -546
  666. package/dist/sdk/test/measurements.js +1 -91
  667. package/dist/sdk/test/parsers.js +1 -545
  668. package/dist/sdk/test/runs.js +1 -193
  669. package/dist/sdk/test/trust.js +2 -206
  670. package/dist/sdk/testing.js +4 -1391
  671. package/dist/sdk/traceability/runtime-files-lookup.js +1 -32
  672. package/dist/sdk/traceability/source-traceability.js +1 -292
  673. package/dist/sdk/tracker-root-discovery.js +1 -9
  674. package/dist/sdk/workspace-contracts-cache.js +1 -28
  675. package/dist/sdk/workspace-contracts.js +1 -33
  676. package/dist/sdk/workspace-memory.js +2 -318
  677. package/dist/sdk/workspace-recipe.js +1 -71
  678. package/dist/sdk/workspace-snapshot.js +4 -613
  679. package/dist/sdk/workspace-transaction-gc.js +1 -149
  680. package/dist/sdk/workspace-transaction.js +2 -363
  681. package/dist/sdk/workspace.js +3 -127
  682. package/dist/types/index.js +1 -9
  683. package/dist/types.d.ts +4 -0
  684. package/dist/types.js +1 -245
  685. package/docs/AGENT_GUIDE.md +1 -1
  686. package/docs/COMMANDS.md +10 -0
  687. package/docs/CONFIGURATION.md +12 -1
  688. package/docs/CONTEXT_ALGORITHM_PORTFOLIO.md +167 -0
  689. package/docs/DIAGNOSTIC_OUTPUT_CONTRACTS.md +9 -3
  690. package/docs/EXTENSIONS.md +1 -0
  691. package/docs/HISTORY_MAINTENANCE.md +125 -0
  692. package/docs/MCP_2026_07_28_CONFORMANCE.md +20 -10
  693. package/docs/PACKAGE_EVIDENCE.md +92 -0
  694. package/docs/PLANNING_MEASUREMENTS.md +183 -0
  695. package/docs/README.md +4 -0
  696. package/docs/READ_OUTPUT_CONTRACTS.md +5 -0
  697. package/docs/SCRIPTING.md +21 -0
  698. package/docs/TESTING.md +33 -0
  699. package/docs/WORKFLOW_POLICIES.md +129 -0
  700. package/docs/generated/FLAG_LEXICON_BUDGETS.md +7 -7
  701. package/docs/generated/REFUSAL_CLOSURE_CENSUS.md +11 -5
  702. package/marketplace.json +2 -2
  703. package/package.json +5 -5
  704. package/packages/pm-beads/package.json +1 -1
  705. package/packages/pm-calendar/package.json +1 -1
  706. package/packages/pm-command-kit/package.json +1 -1
  707. package/packages/pm-digital-twin/package.json +1 -1
  708. package/packages/pm-governance-audit/package.json +1 -1
  709. package/packages/pm-guide-shell/package.json +1 -1
  710. package/packages/pm-kanban/package.json +1 -1
  711. package/packages/pm-lifecycle-hooks/package.json +1 -1
  712. package/packages/pm-linked-test-adapters/package.json +1 -1
  713. package/packages/pm-search-advanced/package.json +1 -1
  714. package/packages/pm-templates/package.json +1 -1
  715. package/packages/pm-todos/package.json +1 -1
  716. package/packages/pm-vcs/package.json +1 -1
  717. package/plugins/pm-claude/.claude-plugin/plugin.json +1 -1
  718. package/plugins/pm-codex/.codex-plugin/plugin.json +1 -1
  719. package/scripts/finalize-build.mjs +45 -3
  720. package/dist/cli-bundle/chunks/chunk-AZDFJGH6.js +0 -9
  721. package/dist/cli-bundle/chunks/chunk-CKOL5U7J.js +0 -77
  722. package/dist/cli-bundle/chunks/chunk-JX4DH4WC.js +0 -3
  723. package/dist/cli-bundle/chunks/chunk-OF76PSDQ.js +0 -5
  724. package/dist/cli-bundle/chunks/chunk-QUWFABDM.js +0 -232
  725. package/dist/cli-bundle/chunks/chunk-QWRRFYK3.js +0 -2
  726. package/dist/cli-bundle/chunks/chunk-RWWBOWJ5.js +0 -2
  727. package/dist/cli-bundle/chunks/chunk-WGAOYSYH.js +0 -40
  728. package/dist/cli-bundle/chunks/chunk-WI2AYPA7.js +0 -2
  729. package/dist/cli-bundle/chunks/register-list-query-5JL52D33.js +0 -11
  730. package/dist/cli-bundle/chunks/register-mutation-ZPG7KMVP.js +0 -20
  731. package/dist/cli-bundle/chunks/register-operations-I5W3KMGB.js +0 -2
  732. package/dist/cli-bundle/chunks/register-setup-H4SVAVX7.js +0 -2
  733. package/dist/cli-bundle/focused-chunks/chunk-AL5ON6K6.js +0 -2
  734. package/dist/cli-bundle/focused-chunks/chunk-CHC2IDXA.js +0 -6
  735. package/dist/cli-bundle/focused-chunks/chunk-CK6QFAPZ.js +0 -20
  736. package/dist/cli-bundle/focused-chunks/chunk-EZR3GHFE.js +0 -2
  737. package/dist/cli-bundle/focused-chunks/chunk-H2WJWK7L.js +0 -56
  738. package/dist/cli-bundle/focused-chunks/chunk-NTPY5GSO.js +0 -3
  739. package/dist/cli-bundle/focused-chunks/chunk-P5O7MP5Y.js +0 -2
  740. package/dist/cli-bundle/focused-chunks/chunk-PDMW2E36.js +0 -177
  741. package/dist/cli-bundle/focused-chunks/chunk-PEFABF7E.js +0 -26
  742. package/dist/cli-bundle/focused-chunks/chunk-QTVCLMSZ.js +0 -6
  743. package/dist/cli-bundle/focused-chunks/chunk-QTZRBUYA.js +0 -8
  744. package/dist/cli-bundle/focused-chunks/chunk-SGQST3PQ.js +0 -12
  745. package/dist/cli-bundle/focused-chunks/chunk-UKHASMMP.js +0 -10
  746. package/dist/cli-bundle/focused-chunks/chunk-ZPEKQHOC.js +0 -2
@@ -1,337 +1,2 @@
1
- /**
2
- * @module sdk/mcp/interactions
3
- *
4
- * Implements bounded MCP 2026-07-28 multi round-trip request, cache, and JSON
5
- * Schema contracts without coupling protocol policy to a transport adapter.
6
- */
7
-
8
- !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="469f704b-12eb-524d-bcc8-fb8f9f1775f2")}catch(e){}}();
9
- import { createHash, createHmac, timingSafeEqual } from "node:crypto";
10
- import { PM_MCP_ERROR_CODES, PM_MCP_META_KEYS, PmMcpProtocolError, isMcpRecord, } from "./protocol.js";
11
- /** Methods permitted inside a 2026-07-28 MRTR input request map. */
12
- export const PM_MCP_INPUT_REQUEST_METHODS = [
13
- "elicitation/create",
14
- "roots/list",
15
- "sampling/createMessage",
16
- ];
17
- /**
18
- * Transport-neutral control signal used by SDK handlers to request an MRTR
19
- * response without constructing or serializing JSON-RPC in domain code.
20
- */
21
- export class PmMcpInputRequiredError extends Error {
22
- /** Server-authored input requests validated by the adapter. */
23
- inputRequests;
24
- /** Optional opaque continuation state echoed on retry. */
25
- requestState;
26
- /** Create an input-required control signal. */
27
- constructor(input) {
28
- super("MCP operation requires additional input");
29
- this.name = "PmMcpInputRequiredError";
30
- this.inputRequests = input.inputRequests;
31
- this.requestState = input.requestState;
32
- }
33
- }
34
- const INPUT_KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9_.-]{0,63}$/u;
35
- const MAX_INPUT_REQUESTS = 32;
36
- const MAX_INPUT_PAYLOAD_BYTES = 64 * 1024;
37
- const MAX_REQUEST_STATE_BYTES = 16 * 1024;
38
- const DEFAULT_SCHEMA_BOUNDS = {
39
- maxBytes: 256 * 1024,
40
- maxDepth: 32,
41
- maxNodes: 4096,
42
- };
43
- function inputCapability(method) {
44
- if (method === "elicitation/create")
45
- return "elicitation";
46
- if (method === "sampling/createMessage")
47
- return "sampling";
48
- return "roots";
49
- }
50
- function assertBoundedJson(value, maximumBytes, field) {
51
- let serialized;
52
- try {
53
- serialized = JSON.stringify(value);
54
- }
55
- catch {
56
- throw new PmMcpProtocolError(`Invalid ${field}: value is not JSON serializable`, PM_MCP_ERROR_CODES.invalidParams, { field });
57
- }
58
- if (Buffer.byteLength(serialized, "utf8") > maximumBytes) {
59
- throw new PmMcpProtocolError(`Invalid ${field}: payload exceeds the protocol bound`, PM_MCP_ERROR_CODES.invalidParams, { field, maximumBytes });
60
- }
61
- }
62
- /** Validate and clone a server-authored MRTR request map. */
63
- export function parseMcpInputRequests(value, requestContext) {
64
- if (!isMcpRecord(value)) {
65
- throw new PmMcpProtocolError("Invalid MCP inputRequests", PM_MCP_ERROR_CODES.invalidParams, { field: "inputRequests", expected: "object" });
66
- }
67
- const entries = Object.entries(value);
68
- if (entries.length === 0 || entries.length > MAX_INPUT_REQUESTS) {
69
- throw new PmMcpProtocolError("Invalid MCP inputRequests count", PM_MCP_ERROR_CODES.invalidParams, { minimum: 1, maximum: MAX_INPUT_REQUESTS, observed: entries.length });
70
- }
71
- const parsed = {};
72
- for (const [key, request] of entries) {
73
- if (!INPUT_KEY_PATTERN.test(key) || !isMcpRecord(request)) {
74
- throw new PmMcpProtocolError("Invalid MCP input request entry", PM_MCP_ERROR_CODES.invalidParams, { field: `inputRequests.${key}` });
75
- }
76
- const method = request.method;
77
- if (typeof method !== "string" ||
78
- !PM_MCP_INPUT_REQUEST_METHODS.includes(method)) {
79
- throw new PmMcpProtocolError("Unsupported MCP input request method", PM_MCP_ERROR_CODES.invalidParams, { field: `inputRequests.${key}.method`, method: method ?? null });
80
- }
81
- const capability = inputCapability(method);
82
- if (!Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities, capability)) {
83
- throw new PmMcpProtocolError("Missing required client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, { requiredCapabilities: { [capability]: {} } });
84
- }
85
- if (!isMcpRecord(request.params)) {
86
- throw new PmMcpProtocolError("Invalid MCP input request parameters", PM_MCP_ERROR_CODES.invalidParams, { field: `inputRequests.${key}.params`, expected: "object" });
87
- }
88
- parsed[key] = {
89
- method: method,
90
- params: structuredClone(request.params),
91
- };
92
- }
93
- assertBoundedJson(parsed, MAX_INPUT_PAYLOAD_BYTES, "inputRequests");
94
- return parsed;
95
- }
96
- /** Validate and clone client-supplied input responses from an MRTR retry. */
97
- export function parseMcpInputResponses(value) {
98
- if (!isMcpRecord(value)) {
99
- throw new PmMcpProtocolError("Invalid MCP inputResponses", PM_MCP_ERROR_CODES.invalidParams, { field: "inputResponses", expected: "object" });
100
- }
101
- const entries = Object.entries(value);
102
- if (entries.length > MAX_INPUT_REQUESTS) {
103
- throw new PmMcpProtocolError("Invalid MCP inputResponses count", PM_MCP_ERROR_CODES.invalidParams, { maximum: MAX_INPUT_REQUESTS, observed: entries.length });
104
- }
105
- const parsed = {};
106
- for (const [key, response] of entries) {
107
- if (!INPUT_KEY_PATTERN.test(key) || !isMcpRecord(response)) {
108
- throw new PmMcpProtocolError("Invalid MCP input response entry", PM_MCP_ERROR_CODES.invalidParams, { field: `inputResponses.${key}` });
109
- }
110
- parsed[key] = structuredClone(response);
111
- }
112
- assertBoundedJson(parsed, MAX_INPUT_PAYLOAD_BYTES, "inputResponses");
113
- return parsed;
114
- }
115
- /** Build a modern input-required result after validating capability and size bounds. */
116
- export function buildMcpInputRequiredResult(input) {
117
- const requestState = input.requestState?.trim();
118
- if (requestState &&
119
- Buffer.byteLength(requestState, "utf8") > MAX_REQUEST_STATE_BYTES) {
120
- throw new PmMcpProtocolError("Invalid MCP requestState: payload exceeds the protocol bound", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState", maximumBytes: MAX_REQUEST_STATE_BYTES });
121
- }
122
- const inputRequests = input.inputRequests === undefined
123
- ? undefined
124
- : parseMcpInputRequests(input.inputRequests, input.requestContext);
125
- if (inputRequests === undefined && !requestState) {
126
- throw new PmMcpProtocolError("InputRequiredResult requires inputRequests or requestState", PM_MCP_ERROR_CODES.invalidParams, { requiredAnyOf: ["inputRequests", "requestState"] });
127
- }
128
- return {
129
- resultType: "input_required",
130
- ...(inputRequests ? { inputRequests } : {}),
131
- ...(requestState ? { requestState } : {}),
132
- _meta: {
133
- [PM_MCP_META_KEYS.serverInfo]: { ...input.serverInfo },
134
- },
135
- };
136
- }
137
- function requestStateSecret(secret) {
138
- const bytes = Buffer.from(secret);
139
- if (bytes.byteLength < 32) {
140
- throw new PmMcpProtocolError("MCP requestState signing key must contain at least 32 bytes", PM_MCP_ERROR_CODES.invalidParams, { minimumBytes: 32 });
141
- }
142
- return bytes;
143
- }
144
- /** Seal integrity-protected continuation state for an MRTR retry. */
145
- export function sealMcpRequestState(payload, secret) {
146
- if (!Number.isSafeInteger(payload.expiresAt) ||
147
- payload.expiresAt <= 0 ||
148
- payload.method.trim().length === 0 ||
149
- payload.parameterDigest.trim().length === 0 ||
150
- payload.principal.trim().length === 0) {
151
- throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams);
152
- }
153
- const encoded = Buffer.from(JSON.stringify({ version: 1, ...payload }), "utf8");
154
- if (encoded.byteLength > MAX_REQUEST_STATE_BYTES / 2) {
155
- throw new PmMcpProtocolError("MCP requestState payload exceeds the protocol bound", PM_MCP_ERROR_CODES.invalidParams, { maximumBytes: MAX_REQUEST_STATE_BYTES / 2 });
156
- }
157
- const body = encoded.toString("base64url");
158
- const signature = createHmac("sha256", requestStateSecret(secret))
159
- .update(body)
160
- .digest("base64url");
161
- return `${body}.${signature}`;
162
- }
163
- function parseMcpRequestStatePayload(decoded) {
164
- if (!isMcpRecord(decoded) || decoded.version !== 1) {
165
- throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
166
- }
167
- const { expiresAt, method, parameterDigest, principal, state } = decoded;
168
- if (typeof expiresAt !== "number" || !Number.isSafeInteger(expiresAt)) {
169
- throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
170
- }
171
- if (typeof method !== "string" ||
172
- typeof parameterDigest !== "string" ||
173
- typeof principal !== "string") {
174
- throw new PmMcpProtocolError("Invalid MCP requestState payload", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
175
- }
176
- return { expiresAt, method, parameterDigest, principal, state };
177
- }
178
- /** Verify an MRTR requestState value against method, principal, digest, and expiry. */
179
- export function openMcpRequestState(value, secret, expected) {
180
- const [body, signature, extra] = value.split(".");
181
- if (!body || !signature || extra !== undefined) {
182
- throw new PmMcpProtocolError("Invalid MCP requestState encoding", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
183
- }
184
- const observed = Buffer.from(signature, "base64url");
185
- const calculated = createHmac("sha256", requestStateSecret(secret))
186
- .update(body)
187
- .digest();
188
- if (observed.byteLength !== calculated.byteLength ||
189
- !timingSafeEqual(observed, calculated)) {
190
- throw new PmMcpProtocolError("Invalid MCP requestState signature", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
191
- }
192
- let decoded;
193
- try {
194
- decoded = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
195
- }
196
- catch {
197
- decoded = null;
198
- }
199
- const payload = parseMcpRequestStatePayload(decoded);
200
- const { expiresAt, method, parameterDigest, principal } = payload;
201
- if (expiresAt < (expected.nowMs ?? Date.now())) {
202
- throw new PmMcpProtocolError("Expired MCP requestState", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState", expiredAt: expiresAt });
203
- }
204
- if (method !== expected.method ||
205
- parameterDigest !== expected.parameterDigest ||
206
- principal !== expected.principal) {
207
- throw new PmMcpProtocolError("MCP requestState binding mismatch", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
208
- }
209
- return payload;
210
- }
211
- /** Compute a stable-sized digest for application-selected salient request data. */
212
- export function digestMcpRequestParameters(value) {
213
- assertBoundedJson(value, MAX_INPUT_PAYLOAD_BYTES, "request parameters");
214
- return createHash("sha256").update(JSON.stringify(value)).digest("hex");
215
- }
216
- /**
217
- * Bound single-use MRTR state consumption within one server process. Callers
218
- * requiring cross-process one-time semantics should persist the resulting hash.
219
- */
220
- export class PmMcpRequestStateReplayGuard {
221
- #consumed = new Set();
222
- #maximumEntries;
223
- /** Create a bounded in-process replay guard. */
224
- constructor(maximumEntries = 4096) {
225
- if (!Number.isSafeInteger(maximumEntries) || maximumEntries < 1) {
226
- throw new PmMcpProtocolError("Invalid MCP replay guard capacity", PM_MCP_ERROR_CODES.invalidParams, { maximumEntries });
227
- }
228
- this.#maximumEntries = maximumEntries;
229
- }
230
- /** Consume one opaque requestState value exactly once in this process. */
231
- consume(value) {
232
- const digest = createHash("sha256").update(value).digest("hex");
233
- if (this.#consumed.has(digest)) {
234
- throw new PmMcpProtocolError("MCP requestState replay detected", PM_MCP_ERROR_CODES.invalidParams, { field: "requestState" });
235
- }
236
- if (this.#consumed.size >= this.#maximumEntries) {
237
- const oldest = this.#consumed.values().next().value;
238
- this.#consumed.delete(oldest);
239
- }
240
- this.#consumed.add(digest);
241
- }
242
- }
243
- /** Validate and clone a required MCP cache policy. */
244
- export function parseMcpCachePolicy(value) {
245
- if (!Number.isSafeInteger(value.ttlMs) ||
246
- value.ttlMs < 0 ||
247
- (value.cacheScope !== "public" && value.cacheScope !== "private")) {
248
- throw new PmMcpProtocolError("Invalid MCP cache policy", PM_MCP_ERROR_CODES.invalidParams, { ttlMs: value.ttlMs, cacheScope: value.cacheScope });
249
- }
250
- return { ttlMs: value.ttlMs, cacheScope: value.cacheScope };
251
- }
252
- /** Attach required cache fields without mutating a method-specific payload. */
253
- export function withMcpCachePolicy(payload, policy) {
254
- return { ...payload, ...parseMcpCachePolicy(policy) };
255
- }
256
- function decodeJsonPointerToken(value) {
257
- return value.replaceAll("~1", "/").replaceAll("~0", "~");
258
- }
259
- function resolveLocalJsonSchemaReference(root, reference) {
260
- if (reference === "#")
261
- return root;
262
- if (!reference.startsWith("#/"))
263
- return undefined;
264
- let current = root;
265
- for (const token of reference
266
- .slice(2)
267
- .split("/")
268
- .map(decodeJsonPointerToken)) {
269
- if (!isMcpRecord(current) && !Array.isArray(current))
270
- return undefined;
271
- if (!Object.prototype.hasOwnProperty.call(current, token))
272
- return undefined;
273
- current = current[token];
274
- }
275
- return current;
276
- }
277
- function resolveMcpJsonSchemaBounds(bounds) {
278
- const maximumBytes = bounds.maxBytes ?? DEFAULT_SCHEMA_BOUNDS.maxBytes;
279
- const maximumDepth = bounds.maxDepth ?? DEFAULT_SCHEMA_BOUNDS.maxDepth;
280
- const maximumNodes = bounds.maxNodes ?? DEFAULT_SCHEMA_BOUNDS.maxNodes;
281
- if (!Number.isSafeInteger(maximumBytes) || maximumBytes < 2) {
282
- throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds", PM_MCP_ERROR_CODES.invalidParams);
283
- }
284
- if (!Number.isSafeInteger(maximumDepth) || maximumDepth < 1) {
285
- throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds", PM_MCP_ERROR_CODES.invalidParams);
286
- }
287
- if (!Number.isSafeInteger(maximumNodes) || maximumNodes < 1) {
288
- throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds", PM_MCP_ERROR_CODES.invalidParams);
289
- }
290
- return { maximumBytes, maximumDepth, maximumNodes };
291
- }
292
- function enqueueMcpJsonSchemaChildren(current, pending) {
293
- const entries = Array.isArray(current.value)
294
- ? current.value
295
- : isMcpRecord(current.value)
296
- ? Object.values(current.value)
297
- : [];
298
- for (const entry of entries) {
299
- pending.push({ value: entry, depth: current.depth + 1 });
300
- }
301
- }
302
- function assertMcpJsonSchemaReference(root, value) {
303
- if (!isMcpRecord(value) || typeof value.$ref !== "string")
304
- return;
305
- const reference = value.$ref;
306
- if (reference.startsWith("#") &&
307
- resolveLocalJsonSchemaReference(root, reference) === undefined) {
308
- throw new PmMcpProtocolError("MCP JSON Schema contains an unresolved local reference", PM_MCP_ERROR_CODES.invalidParams, { reference });
309
- }
310
- }
311
- /**
312
- * Validate JSON Schema 2020-12 structure under explicit byte, depth, node, and
313
- * local-reference work bounds while allowing the complete keyword vocabulary.
314
- */
315
- export function validateMcpJsonSchema(schema, bounds = {}) {
316
- const { maximumBytes, maximumDepth, maximumNodes } = resolveMcpJsonSchemaBounds(bounds);
317
- if (typeof schema !== "boolean" && !isMcpRecord(schema)) {
318
- throw new PmMcpProtocolError("Invalid MCP JSON Schema root", PM_MCP_ERROR_CODES.invalidParams, { expected: "object or boolean" });
319
- }
320
- assertBoundedJson(schema, maximumBytes, "JSON Schema");
321
- const pending = [
322
- { value: schema, depth: 0 },
323
- ];
324
- let visited = 0;
325
- while (pending.length > 0) {
326
- const current = pending.pop();
327
- visited += 1;
328
- if (visited > maximumNodes || current.depth > maximumDepth) {
329
- throw new PmMcpProtocolError("MCP JSON Schema exceeds validation work bounds", PM_MCP_ERROR_CODES.invalidParams, { maximumDepth, maximumNodes });
330
- }
331
- assertMcpJsonSchemaReference(schema, current.value);
332
- enqueueMcpJsonSchemaChildren(current, pending);
333
- }
334
- return structuredClone(schema);
335
- }
1
+ !(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6505e714-d1f3-5794-88c8-51c1644acec9")}catch(e2){}})();import{createHash,createHmac,timingSafeEqual}from"node:crypto";import{PM_MCP_ERROR_CODES,PM_MCP_META_KEYS,PmMcpProtocolError,isMcpRecord}from"./protocol.js";const PM_MCP_INPUT_REQUEST_METHODS=["elicitation/create","roots/list","sampling/createMessage"];class PmMcpInputRequiredError extends Error{inputRequests;requestState;constructor(input){super("MCP operation requires additional input");this.name="PmMcpInputRequiredError";this.inputRequests=input.inputRequests;this.requestState=input.requestState}}const INPUT_KEY_PATTERN=/^[a-zA-Z][a-zA-Z0-9_.-]{0,63}$/u;const MAX_INPUT_REQUESTS=32;const MAX_INPUT_PAYLOAD_BYTES=64*1024;const MAX_REQUEST_STATE_BYTES=16*1024;const DEFAULT_SCHEMA_BOUNDS={maxBytes:256*1024,maxDepth:32,maxNodes:4096};function inputCapability(method){if(method==="elicitation/create")return"elicitation";if(method==="sampling/createMessage")return"sampling";return"roots"}function assertBoundedJson(value,maximumBytes,field){let serialized;try{serialized=JSON.stringify(value)}catch{throw new PmMcpProtocolError(`Invalid ${field}: value is not JSON serializable`,PM_MCP_ERROR_CODES.invalidParams,{field})}if(Buffer.byteLength(serialized,"utf8")>maximumBytes){throw new PmMcpProtocolError(`Invalid ${field}: payload exceeds the protocol bound`,PM_MCP_ERROR_CODES.invalidParams,{field,maximumBytes})}}function parseMcpInputRequests(value,requestContext){if(!isMcpRecord(value)){throw new PmMcpProtocolError("Invalid MCP inputRequests",PM_MCP_ERROR_CODES.invalidParams,{field:"inputRequests",expected:"object"})}const entries=Object.entries(value);if(entries.length===0||entries.length>MAX_INPUT_REQUESTS){throw new PmMcpProtocolError("Invalid MCP inputRequests count",PM_MCP_ERROR_CODES.invalidParams,{minimum:1,maximum:MAX_INPUT_REQUESTS,observed:entries.length})}const parsed={};for(const[key,request]of entries){if(!INPUT_KEY_PATTERN.test(key)||!isMcpRecord(request)){throw new PmMcpProtocolError("Invalid MCP input request entry",PM_MCP_ERROR_CODES.invalidParams,{field:`inputRequests.${key}`})}const method=request.method;if(typeof method!=="string"||!PM_MCP_INPUT_REQUEST_METHODS.includes(method)){throw new PmMcpProtocolError("Unsupported MCP input request method",PM_MCP_ERROR_CODES.invalidParams,{field:`inputRequests.${key}.method`,method:method??null})}const capability=inputCapability(method);if(!Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities,capability)){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{[capability]:{}}})}if(!isMcpRecord(request.params)){throw new PmMcpProtocolError("Invalid MCP input request parameters",PM_MCP_ERROR_CODES.invalidParams,{field:`inputRequests.${key}.params`,expected:"object"})}parsed[key]={method,params:structuredClone(request.params)}}assertBoundedJson(parsed,MAX_INPUT_PAYLOAD_BYTES,"inputRequests");return parsed}function parseMcpInputResponses(value){if(!isMcpRecord(value)){throw new PmMcpProtocolError("Invalid MCP inputResponses",PM_MCP_ERROR_CODES.invalidParams,{field:"inputResponses",expected:"object"})}const entries=Object.entries(value);if(entries.length>MAX_INPUT_REQUESTS){throw new PmMcpProtocolError("Invalid MCP inputResponses count",PM_MCP_ERROR_CODES.invalidParams,{maximum:MAX_INPUT_REQUESTS,observed:entries.length})}const parsed={};for(const[key,response]of entries){if(!INPUT_KEY_PATTERN.test(key)||!isMcpRecord(response)){throw new PmMcpProtocolError("Invalid MCP input response entry",PM_MCP_ERROR_CODES.invalidParams,{field:`inputResponses.${key}`})}parsed[key]=structuredClone(response)}assertBoundedJson(parsed,MAX_INPUT_PAYLOAD_BYTES,"inputResponses");return parsed}function buildMcpInputRequiredResult(input){const requestState=input.requestState?.trim();if(requestState&&Buffer.byteLength(requestState,"utf8")>MAX_REQUEST_STATE_BYTES){throw new PmMcpProtocolError("Invalid MCP requestState: payload exceeds the protocol bound",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState",maximumBytes:MAX_REQUEST_STATE_BYTES})}const inputRequests=input.inputRequests===void 0?void 0:parseMcpInputRequests(input.inputRequests,input.requestContext);if(inputRequests===void 0&&!requestState){throw new PmMcpProtocolError("InputRequiredResult requires inputRequests or requestState",PM_MCP_ERROR_CODES.invalidParams,{requiredAnyOf:["inputRequests","requestState"]})}return{resultType:"input_required",...inputRequests?{inputRequests}:{},...requestState?{requestState}:{},_meta:{[PM_MCP_META_KEYS.serverInfo]:{...input.serverInfo}}}}function requestStateSecret(secret){const bytes=Buffer.from(secret);if(bytes.byteLength<32){throw new PmMcpProtocolError("MCP requestState signing key must contain at least 32 bytes",PM_MCP_ERROR_CODES.invalidParams,{minimumBytes:32})}return bytes}function sealMcpRequestState(payload,secret){if(!Number.isSafeInteger(payload.expiresAt)||payload.expiresAt<=0||payload.method.trim().length===0||payload.parameterDigest.trim().length===0||payload.principal.trim().length===0){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams)}const encoded=Buffer.from(JSON.stringify({version:1,...payload}),"utf8");if(encoded.byteLength>MAX_REQUEST_STATE_BYTES/2){throw new PmMcpProtocolError("MCP requestState payload exceeds the protocol bound",PM_MCP_ERROR_CODES.invalidParams,{maximumBytes:MAX_REQUEST_STATE_BYTES/2})}const body=encoded.toString("base64url");const signature=createHmac("sha256",requestStateSecret(secret)).update(body).digest("base64url");return`${body}.${signature}`}function parseMcpRequestStatePayload(decoded){if(!isMcpRecord(decoded)||decoded.version!==1){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}const{expiresAt,method,parameterDigest,principal,state}=decoded;if(typeof expiresAt!=="number"||!Number.isSafeInteger(expiresAt)){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}if(typeof method!=="string"||typeof parameterDigest!=="string"||typeof principal!=="string"){throw new PmMcpProtocolError("Invalid MCP requestState payload",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}return{expiresAt,method,parameterDigest,principal,state}}function openMcpRequestState(value,secret,expected){const[body,signature,extra]=value.split(".");if(!body||!signature||extra!==void 0){throw new PmMcpProtocolError("Invalid MCP requestState encoding",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}const observed=Buffer.from(signature,"base64url");const calculated=createHmac("sha256",requestStateSecret(secret)).update(body).digest();if(observed.byteLength!==calculated.byteLength||!timingSafeEqual(observed,calculated)){throw new PmMcpProtocolError("Invalid MCP requestState signature",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}let decoded;try{decoded=JSON.parse(Buffer.from(body,"base64url").toString("utf8"))}catch{decoded=null}const payload=parseMcpRequestStatePayload(decoded);const{expiresAt,method,parameterDigest,principal}=payload;if(expiresAt<(expected.nowMs??Date.now())){throw new PmMcpProtocolError("Expired MCP requestState",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState",expiredAt:expiresAt})}if(method!==expected.method||parameterDigest!==expected.parameterDigest||principal!==expected.principal){throw new PmMcpProtocolError("MCP requestState binding mismatch",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}return payload}function digestMcpRequestParameters(value){assertBoundedJson(value,MAX_INPUT_PAYLOAD_BYTES,"request parameters");return createHash("sha256").update(JSON.stringify(value)).digest("hex")}class PmMcpRequestStateReplayGuard{#consumed=new Set;#maximumEntries;constructor(maximumEntries=4096){if(!Number.isSafeInteger(maximumEntries)||maximumEntries<1){throw new PmMcpProtocolError("Invalid MCP replay guard capacity",PM_MCP_ERROR_CODES.invalidParams,{maximumEntries})}this.#maximumEntries=maximumEntries}consume(value){const digest=createHash("sha256").update(value).digest("hex");if(this.#consumed.has(digest)){throw new PmMcpProtocolError("MCP requestState replay detected",PM_MCP_ERROR_CODES.invalidParams,{field:"requestState"})}if(this.#consumed.size>=this.#maximumEntries){const oldest=this.#consumed.values().next().value;this.#consumed.delete(oldest)}this.#consumed.add(digest)}}function parseMcpCachePolicy(value){if(!Number.isSafeInteger(value.ttlMs)||value.ttlMs<0||value.cacheScope!=="public"&&value.cacheScope!=="private"){throw new PmMcpProtocolError("Invalid MCP cache policy",PM_MCP_ERROR_CODES.invalidParams,{ttlMs:value.ttlMs,cacheScope:value.cacheScope})}return{ttlMs:value.ttlMs,cacheScope:value.cacheScope}}function withMcpCachePolicy(payload,policy){return{...payload,...parseMcpCachePolicy(policy)}}function decodeJsonPointerToken(value){return value.replaceAll("~1","/").replaceAll("~0","~")}function resolveLocalJsonSchemaReference(root,reference){if(reference==="#")return root;if(!reference.startsWith("#/"))return void 0;let current=root;for(const token of reference.slice(2).split("/").map(decodeJsonPointerToken)){if(!isMcpRecord(current)&&!Array.isArray(current))return void 0;if(!Object.prototype.hasOwnProperty.call(current,token))return void 0;current=current[token]}return current}function resolveMcpJsonSchemaBounds(bounds){const maximumBytes=bounds.maxBytes??DEFAULT_SCHEMA_BOUNDS.maxBytes;const maximumDepth=bounds.maxDepth??DEFAULT_SCHEMA_BOUNDS.maxDepth;const maximumNodes=bounds.maxNodes??DEFAULT_SCHEMA_BOUNDS.maxNodes;if(!Number.isSafeInteger(maximumBytes)||maximumBytes<2){throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds",PM_MCP_ERROR_CODES.invalidParams)}if(!Number.isSafeInteger(maximumDepth)||maximumDepth<1){throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds",PM_MCP_ERROR_CODES.invalidParams)}if(!Number.isSafeInteger(maximumNodes)||maximumNodes<1){throw new PmMcpProtocolError("Invalid MCP JSON Schema work bounds",PM_MCP_ERROR_CODES.invalidParams)}return{maximumBytes,maximumDepth,maximumNodes}}function enqueueMcpJsonSchemaChildren(current,pending){const entries=Array.isArray(current.value)?current.value:isMcpRecord(current.value)?Object.values(current.value):[];for(const entry of entries){pending.push({value:entry,depth:current.depth+1})}}function assertMcpJsonSchemaReference(root,value){if(!isMcpRecord(value)||typeof value.$ref!=="string")return;const reference=value.$ref;if(reference.startsWith("#")&&resolveLocalJsonSchemaReference(root,reference)===void 0){throw new PmMcpProtocolError("MCP JSON Schema contains an unresolved local reference",PM_MCP_ERROR_CODES.invalidParams,{reference})}}function validateMcpJsonSchema(schema,bounds={}){const{maximumBytes,maximumDepth,maximumNodes}=resolveMcpJsonSchemaBounds(bounds);if(typeof schema!=="boolean"&&!isMcpRecord(schema)){throw new PmMcpProtocolError("Invalid MCP JSON Schema root",PM_MCP_ERROR_CODES.invalidParams,{expected:"object or boolean"})}assertBoundedJson(schema,maximumBytes,"JSON Schema");const pending=[{value:schema,depth:0}];let visited=0;while(pending.length>0){const current=pending.pop();visited+=1;if(visited>maximumNodes||current.depth>maximumDepth){throw new PmMcpProtocolError("MCP JSON Schema exceeds validation work bounds",PM_MCP_ERROR_CODES.invalidParams,{maximumDepth,maximumNodes})}assertMcpJsonSchemaReference(schema,current.value);enqueueMcpJsonSchemaChildren(current,pending)}return structuredClone(schema)}export{PM_MCP_INPUT_REQUEST_METHODS,PmMcpInputRequiredError,PmMcpRequestStateReplayGuard,buildMcpInputRequiredResult,digestMcpRequestParameters,openMcpRequestState,parseMcpCachePolicy,parseMcpInputRequests,parseMcpInputResponses,sealMcpRequestState,validateMcpJsonSchema,withMcpCachePolicy};
336
2
  //# sourceMappingURL=interactions.js.map
337
- //# debugId=469f704b-12eb-524d-bcc8-fb8f9f1775f2
@@ -29,9 +29,14 @@ export declare const PM_MCP_ERROR_CODES: {
29
29
  export declare const PM_MCP_META_KEYS: {
30
30
  readonly clientCapabilities: "io.modelcontextprotocol/clientCapabilities";
31
31
  readonly clientInfo: "io.modelcontextprotocol/clientInfo";
32
+ readonly logLevel: "io.modelcontextprotocol/logLevel";
32
33
  readonly protocolVersion: "io.modelcontextprotocol/protocolVersion";
33
34
  readonly serverInfo: "io.modelcontextprotocol/serverInfo";
34
35
  };
36
+ /** Request-local severity vocabulary retained by the deprecated logging contract. */
37
+ export declare const PM_MCP_LOG_LEVELS: readonly ["debug", "info", "notice", "warning", "error", "critical", "alert", "emergency"];
38
+ /** An explicit logging opt-in applies only to the request carrying it. */
39
+ export type PmMcpLogLevel = (typeof PM_MCP_LOG_LEVELS)[number];
35
40
  /** MCP implementation identity carried in request and result metadata. */
36
41
  export interface PmMcpImplementation {
37
42
  /** Stable implementation name. */
@@ -73,6 +78,8 @@ export interface PmMcpRequestContext {
73
78
  clientCapabilities: PmMcpClientCapabilities;
74
79
  /** Optional bounded client identity used only for diagnostics/provenance. */
75
80
  clientInfo?: PmMcpImplementation;
81
+ /** Optional request-local logging threshold; absence forbids protocol log notifications. */
82
+ logLevel?: PmMcpLogLevel;
76
83
  }
77
84
  /** Required fields attached to every modern successful result. */
78
85
  export interface PmMcpResultEnvelope {
@@ -1,185 +1,2 @@
1
- /**
2
- * @module sdk/mcp/protocol
3
- *
4
- * Defines transport-neutral MCP 2026-07-28 negotiation, request metadata,
5
- * discovery, result-envelope, and bounded legacy-compatibility contracts.
6
- */
7
- /** Canonical stateless MCP revision implemented by pm. */
8
-
9
- !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0ec82581-c626-544c-9deb-ec5e810fd7e9")}catch(e){}}();
10
- export const PM_MCP_PROTOCOL_VERSION = "2026-07-28";
11
- /**
12
- * Legacy initialize-era revisions accepted only by the bounded stdio adapter.
13
- *
14
- * The canonical revision defines legacy as every version that establishes a
15
- * session with the handshake method, which is `2025-11-25` and earlier, so this
16
- * set tracks that boundary rather than a single historical revision.
17
- * Ordered newest first: element zero is the revision offered to a client that
18
- * omits `protocolVersion`.
19
- */
20
- export const PM_MCP_LEGACY_PROTOCOL_VERSIONS = [
21
- "2025-11-25",
22
- "2025-06-18",
23
- ];
24
- /** Modern per-request protocol versions accepted by the stateless core. */
25
- export const PM_MCP_SUPPORTED_PROTOCOL_VERSIONS = [
26
- PM_MCP_PROTOCOL_VERSION,
27
- ];
28
- /** Allocated MCP 2026-07-28 protocol error codes. */
29
- export const PM_MCP_ERROR_CODES = {
30
- headerMismatch: -32020,
31
- missingRequiredClientCapability: -32021,
32
- unsupportedProtocolVersion: -32022,
33
- invalidParams: -32602,
34
- };
35
- /** Namespaced metadata keys owned by the MCP specification. */
36
- export const PM_MCP_META_KEYS = {
37
- clientCapabilities: "io.modelcontextprotocol/clientCapabilities",
38
- clientInfo: "io.modelcontextprotocol/clientInfo",
39
- protocolVersion: "io.modelcontextprotocol/protocolVersion",
40
- serverInfo: "io.modelcontextprotocol/serverInfo",
41
- };
42
- /** Structured MCP protocol error safe for JSON-RPC adapters. */
43
- export class PmMcpProtocolError extends Error {
44
- /** JSON-RPC/MCP error code. */
45
- code;
46
- /** Structured recovery or mismatch detail. */
47
- data;
48
- /** Create one typed protocol error. */
49
- constructor(message, code, data = {}) {
50
- super(message);
51
- this.name = "PmMcpProtocolError";
52
- this.code = code;
53
- this.data = data;
54
- }
55
- }
56
- /** Return whether an unknown value is a non-array object. */
57
- export function isMcpRecord(value) {
58
- return typeof value === "object" && value !== null && !Array.isArray(value);
59
- }
60
- /** Parse an optional MCP implementation identity without guessing missing fields. */
61
- export function parseMcpImplementation(value) {
62
- if (value === undefined)
63
- return undefined;
64
- if (!isMcpRecord(value)) {
65
- throw new PmMcpProtocolError("Invalid MCP clientInfo metadata", PM_MCP_ERROR_CODES.invalidParams, { field: PM_MCP_META_KEYS.clientInfo, expected: "object" });
66
- }
67
- const name = typeof value.name === "string" ? value.name.trim() : "";
68
- const version = typeof value.version === "string" ? value.version.trim() : "";
69
- if (name.length === 0 || version.length === 0) {
70
- throw new PmMcpProtocolError("Invalid MCP clientInfo metadata", PM_MCP_ERROR_CODES.invalidParams, {
71
- field: PM_MCP_META_KEYS.clientInfo,
72
- required: ["name", "version"],
73
- });
74
- }
75
- const parsed = {
76
- name: name.slice(0, 128),
77
- version: version.slice(0, 128),
78
- };
79
- if (typeof value.description === "string" && value.description.trim()) {
80
- parsed.description = value.description.trim().slice(0, 1024);
81
- }
82
- if (typeof value.websiteUrl === "string" && value.websiteUrl.trim()) {
83
- parsed.websiteUrl = value.websiteUrl.trim().slice(0, 2048);
84
- }
85
- return parsed;
86
- }
87
- /** Validate the stateless metadata required on every modern MCP request. */
88
- export function resolveMcpRequestContext(params) {
89
- const meta = isMcpRecord(params) ? params._meta : undefined;
90
- if (!isMcpRecord(meta)) {
91
- throw new PmMcpProtocolError("Missing required MCP request metadata", PM_MCP_ERROR_CODES.invalidParams, {
92
- required: [
93
- PM_MCP_META_KEYS.protocolVersion,
94
- PM_MCP_META_KEYS.clientCapabilities,
95
- ],
96
- });
97
- }
98
- const requested = meta[PM_MCP_META_KEYS.protocolVersion];
99
- if (typeof requested !== "string" ||
100
- !PM_MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(requested)) {
101
- throw new PmMcpProtocolError("Unsupported protocol version", PM_MCP_ERROR_CODES.unsupportedProtocolVersion, {
102
- supported: [...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],
103
- requested: typeof requested === "string" ? requested : null,
104
- });
105
- }
106
- const clientCapabilities = meta[PM_MCP_META_KEYS.clientCapabilities];
107
- if (!isMcpRecord(clientCapabilities)) {
108
- throw new PmMcpProtocolError("Invalid MCP client capabilities metadata", PM_MCP_ERROR_CODES.invalidParams, {
109
- field: PM_MCP_META_KEYS.clientCapabilities,
110
- expected: "object",
111
- });
112
- }
113
- const clientInfo = parseMcpImplementation(meta[PM_MCP_META_KEYS.clientInfo]);
114
- return {
115
- protocolVersion: PM_MCP_PROTOCOL_VERSION,
116
- clientCapabilities,
117
- ...(clientInfo ? { clientInfo } : {}),
118
- };
119
- }
120
- /** Validate the HTTP protocol-version header against request-local metadata. */
121
- export function assertMcpProtocolHeader(requestContext, headerValue) {
122
- if (headerValue !== requestContext.protocolVersion) {
123
- throw new PmMcpProtocolError("MCP protocol header does not match request metadata", PM_MCP_ERROR_CODES.headerMismatch, {
124
- header: headerValue ?? null,
125
- metadata: requestContext.protocolVersion,
126
- });
127
- }
128
- }
129
- /** Require named client capabilities without consulting prior requests. */
130
- export function assertMcpClientCapabilities(requestContext, requiredCapabilities) {
131
- const missing = requiredCapabilities.filter((capability) => !Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities, capability));
132
- if (missing.length > 0) {
133
- throw new PmMcpProtocolError("Missing required client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, {
134
- requiredCapabilities: Object.fromEntries(missing.map((capability) => [capability, {}])),
135
- });
136
- }
137
- }
138
- /** Return whether this request independently negotiated one named extension. */
139
- export function hasMcpClientExtension(requestContext, extension) {
140
- const extensions = requestContext.clientCapabilities.extensions;
141
- return isMcpRecord(extensions) && isMcpRecord(extensions[extension]);
142
- }
143
- /** Attach required server identity while preserving a non-complete result discriminator. */
144
- export function attachMcpServerInfo(payload, serverInfo) {
145
- const payloadMeta = isMcpRecord(payload._meta) ? payload._meta : {};
146
- return {
147
- ...payload,
148
- _meta: {
149
- ...payloadMeta,
150
- [PM_MCP_META_KEYS.serverInfo]: { ...serverInfo },
151
- },
152
- };
153
- }
154
- /** Attach required modern result fields without mutating the caller payload. */
155
- export function buildMcpCompleteResult(payload, serverInfo) {
156
- return attachMcpServerInfo({ ...payload, resultType: "complete" }, serverInfo);
157
- }
158
- /** Build deterministic current-revision server discovery. */
159
- export function buildMcpDiscoverResult(input) {
160
- const ttlMs = input.ttlMs ?? 60_000;
161
- if (!Number.isFinite(ttlMs) || ttlMs < 0) {
162
- throw new PmMcpProtocolError("Invalid MCP discovery cache TTL", PM_MCP_ERROR_CODES.invalidParams, { ttlMs });
163
- }
164
- return buildMcpCompleteResult({
165
- supportedVersions: [...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],
166
- capabilities: structuredClone(input.capabilities),
167
- ttlMs,
168
- cacheScope: "public",
169
- ...(input.instructions ? { instructions: input.instructions } : {}),
170
- }, input.serverInfo);
171
- }
172
- /**
173
- * Interpret resultType only at an explicit protocol-era boundary. Legacy
174
- * results may omit it; modern results fail closed when it is absent.
175
- */
176
- export function interpretMcpResultType(result, era) {
177
- if (isMcpRecord(result) && typeof result.resultType === "string") {
178
- return result.resultType;
179
- }
180
- if (era === "legacy")
181
- return "complete";
182
- throw new PmMcpProtocolError("Modern MCP result is missing resultType", PM_MCP_ERROR_CODES.invalidParams, { required: "resultType" });
183
- }
1
+ !(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="08485124-a2f1-5bb5-9316-533a3f7888bc")}catch(e2){}})();const PM_MCP_PROTOCOL_VERSION="2026-07-28";const PM_MCP_LEGACY_PROTOCOL_VERSIONS=["2025-11-25","2025-06-18"];const PM_MCP_SUPPORTED_PROTOCOL_VERSIONS=[PM_MCP_PROTOCOL_VERSION];const PM_MCP_ERROR_CODES={headerMismatch:-32020,missingRequiredClientCapability:-32021,unsupportedProtocolVersion:-32022,invalidParams:-32602};const PM_MCP_META_KEYS={clientCapabilities:"io.modelcontextprotocol/clientCapabilities",clientInfo:"io.modelcontextprotocol/clientInfo",logLevel:"io.modelcontextprotocol/logLevel",protocolVersion:"io.modelcontextprotocol/protocolVersion",serverInfo:"io.modelcontextprotocol/serverInfo"};const PM_MCP_LOG_LEVELS=["debug","info","notice","warning","error","critical","alert","emergency"];class PmMcpProtocolError extends Error{code;data;constructor(message,code,data={}){super(message);this.name="PmMcpProtocolError";this.code=code;this.data=data}}function isMcpRecord(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}function parseMcpImplementation(value){if(value===void 0)return void 0;if(!isMcpRecord(value)){throw new PmMcpProtocolError("Invalid MCP clientInfo metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.clientInfo,expected:"object"})}const name=typeof value.name==="string"?value.name.trim():"";const version=typeof value.version==="string"?value.version.trim():"";if(name.length===0||version.length===0){throw new PmMcpProtocolError("Invalid MCP clientInfo metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.clientInfo,required:["name","version"]})}const parsed={name:name.slice(0,128),version:version.slice(0,128)};if(typeof value.description==="string"&&value.description.trim()){parsed.description=value.description.trim().slice(0,1024)}if(typeof value.websiteUrl==="string"&&value.websiteUrl.trim()){parsed.websiteUrl=value.websiteUrl.trim().slice(0,2048)}return parsed}function parseMcpLogLevel(value){if(value===void 0)return void 0;if(typeof value!=="string"||!PM_MCP_LOG_LEVELS.includes(value)){throw new PmMcpProtocolError("Invalid MCP logLevel metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.logLevel,allowed:[...PM_MCP_LOG_LEVELS]})}return value}function resolveMcpRequestContext(params){const meta=isMcpRecord(params)?params._meta:void 0;if(!isMcpRecord(meta)){throw new PmMcpProtocolError("Missing required MCP request metadata",PM_MCP_ERROR_CODES.invalidParams,{required:[PM_MCP_META_KEYS.protocolVersion,PM_MCP_META_KEYS.clientCapabilities]})}const requested=meta[PM_MCP_META_KEYS.protocolVersion];if(typeof requested!=="string"||!PM_MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(requested)){throw new PmMcpProtocolError("Unsupported protocol version",PM_MCP_ERROR_CODES.unsupportedProtocolVersion,{supported:[...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],requested:typeof requested==="string"?requested:null})}const clientCapabilities=meta[PM_MCP_META_KEYS.clientCapabilities];if(!isMcpRecord(clientCapabilities)){throw new PmMcpProtocolError("Invalid MCP client capabilities metadata",PM_MCP_ERROR_CODES.invalidParams,{field:PM_MCP_META_KEYS.clientCapabilities,expected:"object"})}const clientInfo=parseMcpImplementation(meta[PM_MCP_META_KEYS.clientInfo]);const logLevel=parseMcpLogLevel(meta[PM_MCP_META_KEYS.logLevel]);return{protocolVersion:PM_MCP_PROTOCOL_VERSION,clientCapabilities,...clientInfo?{clientInfo}:{},...logLevel?{logLevel}:{}}}function assertMcpProtocolHeader(requestContext,headerValue){if(headerValue!==requestContext.protocolVersion){throw new PmMcpProtocolError("MCP protocol header does not match request metadata",PM_MCP_ERROR_CODES.headerMismatch,{header:headerValue??null,metadata:requestContext.protocolVersion})}}function assertMcpClientCapabilities(requestContext,requiredCapabilities){const missing=requiredCapabilities.filter(capability=>!Object.prototype.hasOwnProperty.call(requestContext.clientCapabilities,capability));if(missing.length>0){throw new PmMcpProtocolError("Missing required client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:Object.fromEntries(missing.map(capability=>[capability,{}]))})}}function hasMcpClientExtension(requestContext,extension){const extensions=requestContext.clientCapabilities.extensions;return isMcpRecord(extensions)&&isMcpRecord(extensions[extension])}function attachMcpServerInfo(payload,serverInfo){const payloadMeta=isMcpRecord(payload._meta)?payload._meta:{};return{...payload,_meta:{...payloadMeta,[PM_MCP_META_KEYS.serverInfo]:{...serverInfo}}}}function buildMcpCompleteResult(payload,serverInfo){return attachMcpServerInfo({...payload,resultType:"complete"},serverInfo)}function buildMcpDiscoverResult(input){const ttlMs=input.ttlMs??6e4;if(!Number.isFinite(ttlMs)||ttlMs<0){throw new PmMcpProtocolError("Invalid MCP discovery cache TTL",PM_MCP_ERROR_CODES.invalidParams,{ttlMs})}return buildMcpCompleteResult({supportedVersions:[...PM_MCP_SUPPORTED_PROTOCOL_VERSIONS],capabilities:structuredClone(input.capabilities),ttlMs,cacheScope:"public",...input.instructions?{instructions:input.instructions}:{}},input.serverInfo)}function interpretMcpResultType(result,era){if(isMcpRecord(result)&&typeof result.resultType==="string"){return result.resultType}if(era==="legacy")return"complete";throw new PmMcpProtocolError("Modern MCP result is missing resultType",PM_MCP_ERROR_CODES.invalidParams,{required:"resultType"})}export{PM_MCP_ERROR_CODES,PM_MCP_LEGACY_PROTOCOL_VERSIONS,PM_MCP_LOG_LEVELS,PM_MCP_META_KEYS,PM_MCP_PROTOCOL_VERSION,PM_MCP_SUPPORTED_PROTOCOL_VERSIONS,PmMcpProtocolError,assertMcpClientCapabilities,assertMcpProtocolHeader,attachMcpServerInfo,buildMcpCompleteResult,buildMcpDiscoverResult,hasMcpClientExtension,interpretMcpResultType,isMcpRecord,parseMcpImplementation,resolveMcpRequestContext};
184
2
  //# sourceMappingURL=protocol.js.map
185
- //# debugId=0ec82581-c626-544c-9deb-ec5e810fd7e9