@vectle/cli 1.0.0 → 1.1.1

package/dist/lifecycle.js

@@ -0,0 +1,146 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { consentPolicyDigest, renderAgentPolicy } from './agent-policy.js';
+import { defaultDeliveryBinding } from './delivery.js';
+import { loadIntegrationManifest, validateAdapterEntryId } from './integrations.js';
+import { defaultConfig, loadBoundConfig } from './store.js';
+import { atomicWriteJson, ensureStateRoot, withStateLock, issueLocalId } from './state.js';
+import { canonicalStateRoot, readActiveRoot, validateStateRoot } from './locator.js';
+function hookStatePath(root, adapterEntryId) {
+    if (!validateAdapterEntryId(adapterEntryId))
+        throw new Error('invalid_adapter_entry_id');
+    return join(root, 'hook-state', `${adapterEntryId}.json`);
+}
+function validHookState(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    return Object.keys(item).length === 8
+        && item.schema_version === 'hook-state-v1'
+        && typeof item.client_family === 'string' && ['codex', 'claude_code', 'cursor', 'vscode'].includes(item.client_family)
+        && validateAdapterEntryId(item.adapter_entry_id)
+        && item.policy_version === 'agent-policy-v1'
+        && ['lookup_auto_gate__sharing_auto_gate', 'lookup_auto_gate__sharing_explicit', 'lookup_auto_gate__sharing_off', 'lookup_on_demand__sharing_explicit', 'paused'].includes(String(item.policy_variant))
+        && /^sha256:[0-9a-f]{64}$/u.test(String(item.policy_checksum))
+        && /^sha256:[0-9a-f]{64}$/u.test(String(item.integration_manifest_digest))
+        && typeof item.executed_at === 'string' && /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/u.test(item.executed_at) && Number.isFinite(Date.parse(item.executed_at));
+}
+export function readHookState(root, adapterEntryId) {
+    try {
+        const value = JSON.parse(readFileSync(hookStatePath(root, adapterEntryId), 'utf8'));
+        return validHookState(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function matchingEntry(options) {
+    const manifest = loadIntegrationManifest(options.stateRoot);
+    if (!validateAdapterEntryId(options.adapterEntryId))
+        throw new Error('invalid_adapter_entry_id');
+    const entry = manifest.entries.find(item => item.adapter_entry_id === options.adapterEntryId);
+    if (!entry || entry.client_family !== options.client || entry.integration_binding_digest !== options.integrationManifestDigest)
+        throw new Error('integration_binding_mismatch');
+    return entry;
+}
+function configIsBound(config, options) {
+    if (config.stateRoot && canonicalStateRoot(config.stateRoot) !== canonicalStateRoot(options.stateRoot))
+        throw new Error('state_root_mismatch');
+    if (config.schema_version !== 'vectle-config-v2' || !config.installation || config.installation.consent_policy_digest !== consentPolicyDigest())
+        throw new Error('consent_contract_mismatch');
+    if (config.installation.approved_api_origin !== config.endpoint.replace(/\/$/u, ''))
+        throw new Error('endpoint_mismatch');
+    if (config.mode === 'off' || config.mode === 'revocation_pending' || config.mode === 'unconfigured')
+        throw new Error('local_mode_blocked');
+    if (config.installation.automatic_lookup !== true)
+        throw new Error('automatic_lookup_not_authorized');
+    if (options.policyChecksum !== config.policyChecksum && config.policyChecksum)
+        throw new Error('policy_binding_mismatch');
+}
+function policyFor(config, client, capability) {
+    return renderAgentPolicy({
+        mode: config.mode ?? 'paused',
+        clientFamily: client,
+        integrationCapability: capability,
+        approvedBehaviorCeiling: capability === 'full_lifecycle' && config.installation
+            ? { consentVersion: 2, startupPulse: config.installation.automatic_lookup ? 'automatic' : 'on_demand', sharingAndCorrection: config.installation.automatic_sharing ? 'automatic' : 'explicit_only' }
+            : null,
+        approvalPersistence: { read: capability === 'full_lifecycle' ? 'promptless' : 'unsupported', write: capability === 'full_lifecycle' ? 'promptless' : 'unsupported' },
+        tools: { startupPulse: capability === 'full_lifecycle' && Boolean(config.installation), shareFinding: capability === 'full_lifecycle' && Boolean(config.installation), correctFinding: capability === 'full_lifecycle' && Boolean(config.installation) },
+    });
+}
+function closedFallback(options, reason, config) {
+    const policy = policyFor(config, options.client, 'authorized_only');
+    return {
+        schema_version: 'lifecycle-gate-v1',
+        status: 'blocked',
+        client_family: options.client,
+        adapter_entry_id: null,
+        policy_variant: policy.variant,
+        policy_checksum: policy.checksum,
+        hook_state: null,
+        reason_code: /^[A-Za-z0-9_.-]{1,80}$/u.test(reason) ? reason : 'lifecycle_unavailable',
+        instructions: policy.text,
+    };
+}
+async function ensureCompletionNotice(root, config, entry, policy, now) {
+    const binding = defaultDeliveryBinding(config, root);
+    await withStateLock(root, state => {
+        if (state.adapter_entry_id !== binding.adapterEntryId && state.generation === 0)
+            state.adapter_entry_id = binding.adapterEntryId;
+        if (state.integration_binding_digest !== binding.integrationBindingDigest && state.generation === 0)
+            state.integration_binding_digest = binding.integrationBindingDigest;
+        if (state.policy_checksum !== binding.policyChecksum && state.generation === 0)
+            state.policy_checksum = binding.policyChecksum;
+        if (state.adapter_entry_id !== entry.adapter_entry_id || state.integration_binding_digest !== entry.integration_binding_digest || state.policy_checksum !== policy.checksum)
+            throw new Error('delivery_binding_mismatch');
+        const alreadyKnown = state.pending_notices.some(notice => notice.schema_version === 'completion-notice-v1' && notice.adapter_entry_id === entry.adapter_entry_id && notice.integration_binding_digest === entry.integration_binding_digest && notice.policy_checksum === policy.checksum);
+        if (!alreadyKnown) {
+            state.pending_notices.push({ schema_version: 'completion-notice-v1', notice_id: issueLocalId('vwn'), adapter_entry_id: entry.adapter_entry_id, integration_binding_digest: entry.integration_binding_digest, policy_checksum: policy.checksum, copy_variant: 'integration_verified', status: 'pending', created_at: new Date(now()).toISOString(), lease_expires_at: null, acknowledged_at: null });
+            state.pending_notices = state.pending_notices.slice(-100);
+        }
+    }, { ...binding, adapterEntryId: entry.adapter_entry_id, integrationBindingDigest: entry.integration_binding_digest, policyChecksum: policy.checksum });
+}
+export async function runLifecycle(options) {
+    if (!/^sha256:[0-9a-f]{64}$/u.test(options.integrationManifestDigest) || options.policyChecksum !== undefined && !/^sha256:[0-9a-f]{64}$/u.test(options.policyChecksum))
+        throw new Error('invalid_integration_binding');
+    const config = options.config ?? loadBoundConfig(options.stateRoot) ?? { ...defaultConfig(), endpoint: 'https://vectle.com', clientFamily: options.client, mode: 'off', installation: null };
+    try {
+        validateStateRoot(options.stateRoot, { allowCreate: false });
+        ensureStateRoot(options.stateRoot);
+        const entry = matchingEntry(options);
+        const policyChecksum = options.policyChecksum ?? entry.policy_checksum;
+        configIsBound(config, { ...options, policyChecksum });
+        const policy = policyFor(config, options.client, 'full_lifecycle');
+        if (policy.checksum !== policyChecksum || entry.policy_checksum !== policyChecksum)
+            throw new Error('policy_binding_mismatch');
+        const marker = { schema_version: 'hook-state-v1', client_family: options.client, adapter_entry_id: entry.adapter_entry_id, policy_version: 'agent-policy-v1', policy_variant: policy.variant, policy_checksum: policy.checksum, integration_manifest_digest: entry.integration_binding_digest, executed_at: new Date((options.now ?? Date.now)()).toISOString() };
+        const operationalRoot = options.stateRoot;
+        await ensureCompletionNotice(operationalRoot, { ...config, stateRoot: operationalRoot, adapterEntryId: entry.adapter_entry_id, integrationBindingDigest: entry.integration_binding_digest, policyChecksum: policy.checksum }, entry, policy, options.now ?? Date.now);
+        atomicWriteJson(hookStatePath(options.stateRoot, entry.adapter_entry_id), marker);
+        return { schema_version: 'lifecycle-gate-v1', status: 'invoked', client_family: options.client, adapter_entry_id: entry.adapter_entry_id, policy_variant: policy.variant, policy_checksum: policy.checksum, hook_state: marker, instructions: policy.text };
+    }
+    catch (error) {
+        if (error instanceof Error && error.message === 'invalid_adapter_entry_id')
+            throw error;
+        return closedFallback(options, error instanceof Error ? error.message : 'lifecycle_unavailable', config);
+    }
+}
+export function validateManagedMcpBinding(options) {
+    if (!validateAdapterEntryId(options.adapterEntryId) || !/^sha256:[0-9a-f]{64}$/u.test(options.integrationManifestDigest))
+        throw new Error('invalid_integration_binding');
+    const root = validateStateRoot(options.stateRoot, { allowCreate: false });
+    if (options.config.stateRoot && canonicalStateRoot(options.config.stateRoot) !== canonicalStateRoot(root))
+        throw new Error('state_root_mismatch');
+    const activeRoot = readActiveRoot();
+    if (activeRoot && activeRoot.state_root !== root)
+        throw new Error('state_root_mismatch');
+    const manifest = loadIntegrationManifest(root);
+    const entry = manifest.entries.find(candidate => candidate.adapter_entry_id === options.adapterEntryId);
+    if (!entry || entry.client_family !== options.client || entry.integration_binding_digest !== options.integrationManifestDigest)
+        throw new Error('integration_binding_mismatch');
+    if (options.config.schema_version !== 'vectle-config-v2' || !options.config.installation || options.config.installation.approved_api_origin !== options.config.endpoint.replace(/\/$/u, ''))
+        throw new Error('integration_binding_mismatch');
+    return entry;
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../src/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAA6D,MAAM,mBAAmB,CAAC;AAC/I,OAAO,EAAE,aAAa,EAAE,eAAe,EAAqB,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAuBrF,SAAS,aAAa,CAAC,IAAY,EAAE,cAAsB;IACzD,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,cAAc,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;WAChC,IAAI,CAAC,cAAc,KAAK,eAAe;WACvC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;WACnH,sBAAsB,CAAC,IAAI,CAAC,gBAAgB,CAAC;WAC7C,IAAI,CAAC,cAAc,KAAK,iBAAiB;WACzC,CAAC,qCAAqC,EAAE,oCAAoC,EAAE,+BAA+B,EAAE,oCAAoC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;WACpM,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;WAC3D,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;WACvE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AAC7K,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,cAAsB;IAChE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;QAC/F,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,OAAyB;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,OAAO,CAAC,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAChL,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB,EAAE,OAAyB;IACpE,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/I,IAAI,MAAM,CAAC,cAAc,KAAK,kBAAkB,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,qBAAqB,KAAK,mBAAmB,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9L,IAAI,MAAM,CAAC,YAAY,CAAC,mBAAmB,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC1H,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC3I,IAAI,MAAM,CAAC,YAAY,CAAC,gBAAgB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACtG,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,MAA6B,EAAE,UAAgD;IACtH,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ;QAC7B,YAAY,EAAE,MAAM;QACpB,qBAAqB,EAAE,UAAU;QACjC,uBAAuB,EAAE,UAAU,KAAK,gBAAgB,IAAI,MAAM,CAAC,YAAY;YAC7E,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,oBAAoB,EAAE,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,EAAE;YACpM,CAAC,CAAC,IAAI;QACR,mBAAmB,EAAE,EAAE,IAAI,EAAE,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,KAAK,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE;QACpK,KAAK,EAAE,EAAE,YAAY,EAAE,UAAU,KAAK,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,UAAU,KAAK,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,UAAU,KAAK,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;KACzP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,OAAyB,EAAE,MAAc,EAAE,MAAoB;IACrF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACpE,OAAO;QACL,cAAc,EAAE,mBAA4B;QAC5C,MAAM,EAAE,SAAkB;QAC1B,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,MAAM,CAAC,OAAO;QAC9B,eAAe,EAAE,MAAM,CAAC,QAAQ;QAChC,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB;QACtF,YAAY,EAAE,MAAM,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,MAAoB,EAAE,KAA+B,EAAE,MAA4C,EAAE,GAAiB;IACxK,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;QAChC,IAAI,KAAK,CAAC,gBAAgB,KAAK,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,KAAK,CAAC,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;QACjI,IAAI,KAAK,CAAC,0BAA0B,KAAK,OAAO,CAAC,wBAAwB,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,KAAK,CAAC,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;QACzK,IAAI,KAAK,CAAC,eAAe,KAAK,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,KAAK,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAC/H,IAAI,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,0BAA0B,KAAK,KAAK,CAAC,0BAA0B,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC1N,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,sBAAsB,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC,0BAA0B,KAAK,KAAK,CAAC,0BAA0B,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1R,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,sBAAsB,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YACpY,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,CAAC,0BAA0B,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1J,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxN,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,aAAa,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAc,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACtM,IAAI,CAAC;QACH,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,eAAe,CAAC;QACvE,aAAa,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC/H,MAAM,MAAM,GAAc,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,2BAA2B,EAAE,KAAK,CAAC,0BAA0B,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7W,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC;QAC1C,MAAM,sBAAsB,CAAC,eAAe,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,CAAC,0BAA0B,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QACtQ,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;QAClF,OAAO,EAAE,cAAc,EAAE,mBAA4B,EAAE,MAAM,EAAE,SAAkB,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAChR,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,0BAA0B;YAAE,MAAM,KAAK,CAAC;QACxF,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA8I;IACtL,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACzK,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClJ,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACxG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,OAAO,CAAC,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAChL,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,kBAAkB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,mBAAmB,KAAK,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC7O,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/locator.d.ts

@@ -0,0 +1,58 @@
+export declare const ACTIVE_ROOT_SCHEMA: "active-root-v1";
+export declare const ACTIVE_ROOT_LOCATOR_DIR = "locator";
+export type ActiveRootLocator = {
+    schema_version: typeof ACTIVE_ROOT_SCHEMA;
+    state_root: string;
+    locator_digest: `sha256:${string}`;
+};
+export declare class LocatorError extends Error {
+    readonly code: 'state_root_mismatch' | 'state_root_conflict' | 'unsafe_state_root' | 'native_identity_unavailable';
+    constructor(code: 'state_root_mismatch' | 'state_root_conflict' | 'unsafe_state_root' | 'native_identity_unavailable', message?: string);
+}
+export declare function canonicalLocatorPreimage(stateRoot: string): string;
+export declare function locatorDigest(stateRoot: string): `sha256:${string}`;
+/**
+ * Resolve the native per-user anchor. The optional arguments make platform
+ * fixtures deterministic; production callers use the current OS and account
+ * database home. Environment-selected config roots are intentionally absent.
+ */
+export declare function locatorAnchor(platform?: NodeJS.Platform, accountHome?: string): string;
+/** The pre-1.1 data root. This is only for the finite legacy migration set. */
+export declare function legacyDefaultRoot(platform?: NodeJS.Platform, environment?: NodeJS.ProcessEnv, accountHome?: string): string;
+export declare function standardDataRoot(platform?: NodeJS.Platform, environment?: NodeJS.ProcessEnv, accountHome?: string): string;
+export declare function locatorPath(platform?: NodeJS.Platform, accountHome?: string): string;
+export declare function canonicalStateRoot(input: string, options?: {
+    platform?: NodeJS.Platform;
+    mustExist?: boolean;
+}): string;
+export declare function validateStateRoot(input: string, options?: {
+    allowCreate?: boolean;
+    platform?: NodeJS.Platform;
+}): string;
+export declare function readActiveRoot(options?: {
+    platform?: NodeJS.Platform;
+    accountHome?: string;
+}): ActiveRootLocator | null;
+export declare function writeActiveRoot(stateRoot: string, options?: {
+    platform?: NodeJS.Platform;
+    accountHome?: string;
+}): ActiveRootLocator;
+export declare function removeActiveRootIfOwned(stateRoot: string, options?: {
+    platform?: NodeJS.Platform;
+    accountHome?: string;
+}): boolean;
+export type RootResolution = {
+    stateRoot: string;
+    source: 'requested' | 'locator' | 'default' | 'legacy';
+    anchored: boolean;
+};
+export declare function resolveSetupRoot(options?: {
+    requestedRoot?: string;
+    allowCustomStateRoot?: boolean;
+    platform?: NodeJS.Platform;
+    accountHome?: string;
+    legacyRoot?: string;
+}): RootResolution;
+export declare function setupCommitPath(stateRoot: string): string;
+export declare function setupStatePath(stateRoot: string): string;
+export declare function setupLockPath(stateRoot: string): string;

package/dist/locator.js

@@ -0,0 +1,233 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { chmodSync, closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, fsyncSync } from 'node:fs';
+import { homedir, userInfo } from 'node:os';
+import { dirname, isAbsolute, join, normalize, resolve } from 'node:path';
+export const ACTIVE_ROOT_SCHEMA = 'active-root-v1';
+export const ACTIVE_ROOT_LOCATOR_DIR = 'locator';
+export class LocatorError extends Error {
+    code;
+    constructor(code, message = code) {
+        super(message);
+        this.code = code;
+        this.name = 'LocatorError';
+    }
+}
+function digest(value) {
+    return `sha256:${createHash('sha256').update(value, 'utf8').digest('hex')}`;
+}
+export function canonicalLocatorPreimage(stateRoot) {
+    return JSON.stringify({ schema_version: ACTIVE_ROOT_SCHEMA, state_root: stateRoot });
+}
+export function locatorDigest(stateRoot) {
+    return digest(canonicalLocatorPreimage(stateRoot));
+}
+/**
+ * Resolve the native per-user anchor. The optional arguments make platform
+ * fixtures deterministic; production callers use the current OS and account
+ * database home. Environment-selected config roots are intentionally absent.
+ */
+export function locatorAnchor(platform = process.platform, accountHome = homedir()) {
+    if (!accountHome || !isAbsolute(accountHome))
+        throw new LocatorError('native_identity_unavailable', 'The native user identity could not be resolved safely.');
+    if (platform === 'darwin')
+        return join(accountHome, 'Library', 'Application Support', 'Vectle', ACTIVE_ROOT_LOCATOR_DIR);
+    if (platform === 'win32')
+        return join(accountHome, 'AppData', 'Local', 'Vectle', 'Locator');
+    return join(accountHome, '.local', 'state', 'vectle-locator');
+}
+function legacyAccountHome() {
+    try {
+        const nativeHome = userInfo().homedir;
+        if (nativeHome && isAbsolute(nativeHome))
+            return nativeHome;
+    }
+    catch { /* fall back to Node's legacy home resolution */ }
+    return homedir();
+}
+/** The pre-1.1 data root. This is only for the finite legacy migration set. */
+export function legacyDefaultRoot(platform = process.platform, environment = process.env, accountHome = legacyAccountHome()) {
+    if (!accountHome || !isAbsolute(accountHome))
+        throw new LocatorError('native_identity_unavailable', 'The native user identity could not be resolved safely.');
+    if (environment.VECTLE_CONFIG_DIR?.trim())
+        return environment.VECTLE_CONFIG_DIR.trim();
+    if (platform === 'win32')
+        return join(environment.APPDATA?.trim() || accountHome, 'Vectle');
+    return join(environment.XDG_CONFIG_HOME?.trim() || join(accountHome, '.config'), 'vectle');
+}
+export function standardDataRoot(platform = process.platform, environment = process.env, accountHome = legacyAccountHome()) {
+    if (!accountHome || !isAbsolute(accountHome))
+        throw new LocatorError('native_identity_unavailable', 'The native user identity could not be resolved safely.');
+    if (platform === 'win32')
+        return join(environment.APPDATA?.trim() || accountHome, 'Vectle');
+    return join(environment.XDG_CONFIG_HOME?.trim() || join(accountHome, '.config'), 'vectle');
+}
+export function locatorPath(platform = process.platform, accountHome = homedir()) {
+    return join(locatorAnchor(platform, accountHome), 'active-root.json');
+}
+function stripTrailingSeparator(value) {
+    const normalized = value.replace(/[\\/]+$/u, '');
+    return normalized || value.slice(0, 1);
+}
+export function canonicalStateRoot(input, options = {}) {
+    if (typeof input !== 'string' || !isAbsolute(input))
+        throw new LocatorError('unsafe_state_root', 'The Vectle state root must be an absolute path.');
+    const platform = options.platform ?? process.platform;
+    const normalizedInput = normalize(input).normalize('NFC');
+    if (normalizedInput === dirname(normalizedInput))
+        throw new LocatorError('unsafe_state_root', 'The filesystem root is not a Vectle state root.');
+    if (options.mustExist === false && !existsSync(normalizedInput))
+        return stripTrailingSeparator(normalizedInput);
+    if (!existsSync(normalizedInput))
+        throw new LocatorError('unsafe_state_root', 'The Vectle state root does not exist.');
+    let stats;
+    try {
+        stats = lstatSync(normalizedInput);
+    }
+    catch {
+        throw new LocatorError('unsafe_state_root', 'The Vectle state root cannot be inspected.');
+    }
+    if (stats.isSymbolicLink() || !stats.isDirectory())
+        throw new LocatorError('unsafe_state_root', 'The Vectle state root must be a real directory.');
+    let finalPath;
+    try {
+        finalPath = realpathSync(normalizedInput).normalize('NFC');
+    }
+    catch {
+        throw new LocatorError('unsafe_state_root', 'The Vectle state root cannot be canonicalized.');
+    }
+    if (platform === 'win32') {
+        finalPath = finalPath.replace(/^\\\\\?\\/u, '').replaceAll('\\', '/');
+        if (/^[a-z]:/u.test(finalPath))
+            finalPath = finalPath[0].toUpperCase() + finalPath.slice(1);
+    }
+    return stripTrailingSeparator(finalPath);
+}
+function assertPrivateDirectory(path) {
+    try {
+        const stats = statSync(path);
+        if (!stats.isDirectory())
+            throw new LocatorError('unsafe_state_root', 'The Vectle state root is not a directory.');
+        if (process.platform !== 'win32' && typeof process.getuid === 'function' && stats.uid !== process.getuid())
+            throw new LocatorError('unsafe_state_root', 'The Vectle state root is not owned by the current user.');
+        if (process.platform !== 'win32' && (stats.mode & 0o077) !== 0)
+            throw new LocatorError('unsafe_state_root', 'The Vectle state root is not private.');
+    }
+    catch (error) {
+        if (error instanceof LocatorError)
+            throw error;
+        throw new LocatorError('unsafe_state_root', 'The Vectle state root cannot be verified.');
+    }
+}
+export function validateStateRoot(input, options = {}) {
+    const preliminary = canonicalStateRoot(input, { platform: options.platform, mustExist: options.allowCreate !== true });
+    if (options.allowCreate === true && !existsSync(preliminary))
+        mkdirSync(preliminary, { recursive: true, mode: 0o700 });
+    const root = canonicalStateRoot(preliminary, { platform: options.platform });
+    assertPrivateDirectory(root);
+    const userHome = resolve(homedir());
+    if (root === userHome || root === dirname(userHome))
+        throw new LocatorError('unsafe_state_root', 'The Vectle state root is too broad.');
+    return root;
+}
+function readJson(path) {
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function validLocator(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const record = value;
+    return Object.keys(record).length === 3
+        && record.schema_version === ACTIVE_ROOT_SCHEMA
+        && typeof record.state_root === 'string'
+        && isAbsolute(record.state_root)
+        && /^sha256:[0-9a-f]{64}$/u.test(String(record.locator_digest));
+}
+export function readActiveRoot(options = {}) {
+    const path = locatorPath(options.platform, options.accountHome);
+    if (!existsSync(path))
+        return null;
+    const value = readJson(path);
+    if (!validLocator(value))
+        throw new LocatorError('state_root_mismatch', 'The active Vectle root locator is invalid.');
+    let canonical;
+    try {
+        canonical = canonicalStateRoot(value.state_root);
+    }
+    catch {
+        throw new LocatorError('state_root_mismatch', 'The active Vectle root locator does not match its target.');
+    }
+    if (canonical !== value.state_root || locatorDigest(canonical) !== value.locator_digest)
+        throw new LocatorError('state_root_mismatch', 'The active Vectle root locator does not match its target.');
+    assertPrivateDirectory(canonical);
+    return value;
+}
+function atomicWrite(path, value) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.tmp-${randomBytes(8).toString('hex')}`;
+    const fd = openSync(temporary, 'wx', 0o600);
+    try {
+        writeFileSync(fd, value, { encoding: 'utf8' });
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    renameSync(temporary, path);
+    chmodSync(path, 0o600);
+    try {
+        const directoryFd = openSync(dirname(path), 'r');
+        fsyncSync(directoryFd);
+        closeSync(directoryFd);
+    }
+    catch { /* Windows does not fsync directories. */ }
+}
+export function writeActiveRoot(stateRoot, options = {}) {
+    const canonical = validateStateRoot(stateRoot, { platform: options.platform, allowCreate: false });
+    const value = { schema_version: ACTIVE_ROOT_SCHEMA, state_root: canonical, locator_digest: locatorDigest(canonical) };
+    atomicWrite(locatorPath(options.platform, options.accountHome), `${JSON.stringify(value)}\n`);
+    return value;
+}
+export function removeActiveRootIfOwned(stateRoot, options = {}) {
+    const current = readActiveRoot(options);
+    if (!current)
+        return false;
+    const canonical = canonicalStateRoot(stateRoot);
+    if (canonical !== current.state_root)
+        return false;
+    try {
+        unlinkSync(locatorPath(options.platform, options.accountHome));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function resolveSetupRoot(options = {}) {
+    if (options.requestedRoot !== undefined) {
+        if (!options.allowCustomStateRoot)
+            throw new LocatorError('unsafe_state_root', 'A new custom state root requires --allow-custom-state-root.');
+        const stateRoot = validateStateRoot(options.requestedRoot, { allowCreate: true, platform: options.platform });
+        return { stateRoot, source: 'requested', anchored: false };
+    }
+    const current = readActiveRoot(options);
+    if (current)
+        return { stateRoot: current.state_root, source: 'locator', anchored: true };
+    const legacy = options.legacyRoot;
+    if (legacy && existsSync(legacy)) {
+        const stateRoot = validateStateRoot(legacy, { allowCreate: false, platform: options.platform });
+        return { stateRoot, source: 'legacy', anchored: false };
+    }
+    const standard = standardDataRoot(options.platform, process.env, legacyAccountHome());
+    mkdirSync(standard, { recursive: true, mode: 0o700 });
+    const stateRoot = validateStateRoot(standard, { allowCreate: false, platform: options.platform });
+    return { stateRoot, source: 'default', anchored: false };
+}
+export function setupCommitPath(stateRoot) { return join(stateRoot, 'setup-state.json.commit'); }
+export function setupStatePath(stateRoot) { return join(stateRoot, 'setup-state.json'); }
+export function setupLockPath(stateRoot) { return join(stateRoot, 'setup.lock'); }
+//# sourceMappingURL=locator.js.map

package/dist/locator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locator.js","sourceRoot":"","sources":["../src/locator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnL,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAyB,CAAC;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAQjD,MAAM,OAAO,YAAa,SAAQ,KAAK;IAChB;IAArB,YAAqB,IAAyG,EAAE,UAAkB,IAAI;QACpJ,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAqG;QAE5H,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAW,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,WAA4B,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,EAAE;IACjG,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wDAAwD,CAAC,CAAC;IAC9J,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzH,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC;QACtC,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;IAC5D,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,WAA4B,OAAO,CAAC,QAAQ,EAAE,cAAiC,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,iBAAiB,EAAE;IAC7J,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wDAAwD,CAAC,CAAC;IAC9J,IAAI,WAAW,CAAC,iBAAiB,EAAE,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IACvF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAA4B,OAAO,CAAC,QAAQ,EAAE,cAAiC,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,iBAAiB,EAAE;IAC5J,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wDAAwD,CAAC,CAAC;IAC9J,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,WAA4B,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,EAAE;IAC/F,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,UAA+D,EAAE;IACjH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;IACpJ,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,eAAe,KAAK,OAAO,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;IACjJ,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,sBAAsB,CAAC,eAAe,CAAC,CAAC;IAChH,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;IACvH,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QAAC,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,4CAA4C,CAAC,CAAC;IAAC,CAAC;IAChJ,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;IACnJ,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,gDAAgD,CAAC,CAAC;IAAC,CAAC;IAC5K,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtE,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,sBAAsB,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,2CAA2C,CAAC,CAAC;QACnH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,yDAAyD,CAAC,CAAC;QACnN,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;IACvJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,2CAA2C,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,UAAiE,EAAE;IAClH,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC,CAAC;IACvH,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7E,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,qCAAqC,CAAC,CAAC;IACxI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1F,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;WAClC,MAAM,CAAC,cAAc,KAAK,kBAAkB;WAC5C,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;WACrC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;WAC7B,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAgE,EAAE;IAC/F,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,4CAA4C,CAAC,CAAC;IACtH,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,2DAA2D,CAAC,CAAC;IAAC,CAAC;IAC/K,IAAI,SAAS,KAAK,KAAK,CAAC,UAAU,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,2DAA2D,CAAC,CAAC;IACpM,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC5B,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC;QAAC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;AAC/J,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,UAAgE,EAAE;IACnH,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACnG,MAAM,KAAK,GAAsB,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IACzI,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,UAAgE,EAAE;IAC3H,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,OAAO,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,CAAC;QAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC9G,CAAC;AAID,MAAM,UAAU,gBAAgB,CAAC,UAA6I,EAAE;IAC9K,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,oBAAoB;YAAE,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,6DAA6D,CAAC,CAAC;QAC9I,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9G,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAClC,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACtF,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC;AACzG,MAAM,UAAU,cAAc,CAAC,SAAiB,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,UAAU,aAAa,CAAC,SAAiB,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC"}

package/dist/mcp.d.ts

@@ -1,11 +1,21 @@
 import { type VectleClient } from './client.js';
+import { type VectleConfig } from './store.js';
+import type { IntegrationManifestEntry } from './integrations.js';
 type ToolDefinition = {
     name: string;
     description: string;
     inputSchema: Record<string, unknown>;
+    annotations?: Record<string, boolean>;
 };
 export declare const mcpTools: ToolDefinition[];
-export declare function callTool(client: VectleClient, name: string, args: Record<string, unknown>): Promise<{
+type McpContext = {
+    managed: boolean;
+    entry?: IntegrationManifestEntry;
+};
+export declare function callTool(client: VectleClient, name: string, args: Record<string, unknown>, options?: {
+    config?: VectleConfig;
+    context?: McpContext;
+}): Promise<{
     content: {
         type: string;
         text: string;
@@ -13,5 +23,5 @@ export declare function callTool(client: VectleClient, name: string, args: Recor
     structuredContent: unknown;
     isError: boolean;
 }>;
-export declare function runMcp(client: VectleClient): Promise<void>;
+export declare function runMcp(client: VectleClient, suppliedConfig?: VectleConfig, managedEntry?: IntegrationManifestEntry): Promise<void>;
 export {};