@wrongstack/cli 1.1.4 → 1.1.6

package/dist/mcp-W7A5HUXV.js

@@ -1,560 +0,0 @@
-import {
-  activeProfileConfigPath
-} from "./chunk-SPSHEZ46.js";
-import {
-  restoreFlags
-} from "./chunk-QC6CLAK7.js";
-import "./chunk-W23PY4IJ.js";
-
-// src/subcommands/handlers/mcp.ts
-import { allServers, resolveMcpServerConfig } from "@wrongstack/core/infrastructure";
-import {
-  expectDefined,
-  jsonObjectFileExists,
-  readJsonObjectFile,
-  removeJsonPath,
-  setJsonPath,
-  updateJsonObjectFile
-} from "@wrongstack/core/utils";
-
-// src/mcp-serve.ts
-import * as fs from "node:fs/promises";
-import * as path from "node:path";
-import { pathToFileURL } from "node:url";
-import { Context } from "@wrongstack/core/agent";
-import { ToolExecutor } from "@wrongstack/core/execution";
-import { ToolRegistry } from "@wrongstack/core/registry";
-import {
-  AutoApprovePermissionPolicy,
-  DefaultSecretScrubber,
-  ToolCapabilities
-} from "@wrongstack/core/security";
-import { normalizeTokenSavingTier } from "@wrongstack/core/types";
-import {
-  DEFAULT_MCP_INSERTION_MAX_BYTES,
-  MCPServer,
-  serveHttp,
-  serveStdio
-} from "@wrongstack/mcp";
-import { registerBuiltinToolTier } from "@wrongstack/tools/tool-tier";
-import { wireKanbanPorts } from "@wrongstack/runtime";
-function yoloServePolicy() {
-  return new AutoApprovePermissionPolicy(Object.values(ToolCapabilities));
-}
-function parseToolsFlag(flags, positional) {
-  const raw = flags["tools"];
-  const csv = typeof raw === "string" ? raw : raw === true ? positional?.[0] ?? "" : "";
-  if (!csv) return null;
-  const set = new Set(
-    csv.split(",").map((s) => s.trim()).filter(Boolean)
-  );
-  return set.size > 0 ? set : null;
-}
-function resolveServeHttpPort(flags) {
-  const raw = typeof flags["port"] === "string" ? flags["port"] : typeof flags["http"] === "string" ? flags["http"] : void 0;
-  if (raw === void 0 || raw.trim() === "") return 0;
-  const port = Number(raw);
-  if (!Number.isInteger(port) || port < 0 || port > 65535) {
-    throw new Error(`invalid --port "${raw}" \u2014 expected an integer between 0 and 65535`);
-  }
-  return port;
-}
-async function loadSelectedMcpServeContent(flags, cwd) {
-  const resources = [];
-  const prompts = [];
-  const resourceUris = /* @__PURE__ */ new Set();
-  const promptNames = /* @__PURE__ */ new Set();
-  for (const selected of commaSeparatedFlag(flags, "resources")) {
-    const file = path.resolve(cwd, selected);
-    const data = await readSelectedFile(file);
-    const uri = pathToFileURL(file).toString();
-    if (resourceUris.has(uri)) throw new Error(`Duplicate MCP resource selection: ${selected}`);
-    resourceUris.add(uri);
-    const mimeType = mimeTypeFor(file);
-    resources.push({
-      uri,
-      name: path.basename(file),
-      mimeType,
-      size: data.byteLength,
-      contents: [
-        isTextMime(mimeType) ? { uri, mimeType, text: data.toString("utf8") } : { uri, mimeType, blob: data.toString("base64") }
-      ]
-    });
-  }
-  for (const selected of commaSeparatedFlag(flags, "prompts")) {
-    const file = path.resolve(cwd, selected);
-    const data = await readSelectedFile(file);
-    const name = path.basename(file, path.extname(file)).replace(/[^A-Za-z0-9_.-]+/g, "-").replace(/^-+|-+$/g, "");
-    if (!name) throw new Error(`Cannot derive an MCP prompt name from: ${selected}`);
-    if (promptNames.has(name)) throw new Error(`Duplicate MCP prompt name: ${name}`);
-    promptNames.add(name);
-    const template = data.toString("utf8");
-    const argumentNames = Array.from(
-      template.matchAll(/\{\{([A-Za-z_][A-Za-z0-9_.-]*)\}\}/g),
-      (match) => match[1]
-    ).filter((value, index, all) => !!value && all.indexOf(value) === index);
-    prompts.push({
-      name,
-      description: `Explicitly selected local prompt: ${path.basename(file)}`,
-      arguments: argumentNames.map((argument) => ({ name: argument, required: true })),
-      template
-    });
-  }
-  return { resources, prompts };
-}
-function commaSeparatedFlag(flags, name) {
-  const value = flags[name];
-  if (value === void 0) return [];
-  if (typeof value !== "string" || value.trim() === "") {
-    throw new Error(`--${name} requires a comma-separated file list`);
-  }
-  return value.split(",").map((item) => item.trim()).filter(Boolean);
-}
-async function readSelectedFile(file) {
-  const stat2 = await fs.stat(file);
-  if (!stat2.isFile()) throw new Error(`Selected MCP content is not a regular file: ${file}`);
-  if (stat2.size > DEFAULT_MCP_INSERTION_MAX_BYTES) {
-    throw new Error(
-      `Selected MCP content exceeds ${DEFAULT_MCP_INSERTION_MAX_BYTES} bytes: ${file}`
-    );
-  }
-  return fs.readFile(file);
-}
-function mimeTypeFor(file) {
-  switch (path.extname(file).toLowerCase()) {
-    case ".md":
-    case ".mdx":
-      return "text/markdown";
-    case ".json":
-      return "application/json";
-    case ".yaml":
-    case ".yml":
-      return "application/yaml";
-    case ".html":
-      return "text/html";
-    case ".css":
-      return "text/css";
-    case ".js":
-    case ".mjs":
-      return "text/javascript";
-    case ".ts":
-    case ".tsx":
-      return "text/typescript";
-    case ".txt":
-    case ".log":
-      return "text/plain";
-    case ".png":
-      return "image/png";
-    case ".jpg":
-    case ".jpeg":
-      return "image/jpeg";
-    case ".gif":
-      return "image/gif";
-    case ".webp":
-      return "image/webp";
-    default:
-      return "application/octet-stream";
-  }
-}
-function isTextMime(mimeType) {
-  return mimeType.startsWith("text/") || mimeType === "application/json" || mimeType === "application/yaml";
-}
-function resolveServeFsRestriction(config) {
-  return config.tools?.restrictToProjectRoot ?? true;
-}
-function makeServeContext(cwd, projectRoot, signal, restrictFsToRoot = true) {
-  const provider = {
-    id: "mcp-serve",
-    capabilities: { maxContext: 0 },
-    complete: async () => {
-      throw new Error("no model provider in `mcp serve` mode");
-    },
-    stream: () => {
-      throw new Error("no model provider in `mcp serve` mode");
-    }
-  };
-  const session = { append: async () => {
-  } };
-  const tokenCounter = {
-    account: () => {
-    },
-    total: () => ({ input: 0, output: 0 }),
-    estimateCost: () => ({ total: 0 })
-  };
-  return new Context({
-    systemPrompt: [],
-    provider,
-    session,
-    signal,
-    tokenCounter,
-    cwd,
-    projectRoot,
-    allowOutsideProjectRoot: !restrictFsToRoot,
-    model: "mcp-serve",
-    tools: []
-  });
-}
-async function selectExposedTools(registry, ctx, policy, whitelist) {
-  const allowed = [];
-  for (const tool of registry.list()) {
-    if (whitelist && !whitelist.has(tool.name)) continue;
-    const decision = await policy.evaluate(tool, {}, ctx);
-    if (decision.permission === "auto") allowed.push(tool);
-  }
-  return allowed;
-}
-async function serveMcpStdio(deps, positional) {
-  const flags = deps.flags ?? {};
-  const yolo = flags["yolo"] === true || flags["allow-all"] === true;
-  const whitelist = parseToolsFlag(flags, positional);
-  if (flags["tools"] !== void 0 && whitelist === null) {
-    process.stderr.write(
-      "wrongstack MCP server: --tools requires a comma-separated tool list (e.g. `--tools read,grep` or `--tools=read,grep`)\n"
-    );
-    return 1;
-  }
-  const log = (m) => process.stderr.write(`${m}
-`);
-  let selectedContent;
-  try {
-    selectedContent = await loadSelectedMcpServeContent(flags, deps.cwd);
-  } catch (err) {
-    log(`wrongstack MCP server: ${err instanceof Error ? err.message : String(err)}`);
-    return 1;
-  }
-  wireKanbanPorts();
-  let registry = deps.toolRegistry;
-  if (!registry) {
-    registry = new ToolRegistry();
-    registerBuiltinToolTier({
-      registry,
-      tier: normalizeTokenSavingTier(deps.config.features.tokenSavingMode)
-    });
-  }
-  const controller = new AbortController();
-  const selectionCtx = makeServeContext(
-    deps.cwd,
-    deps.projectRoot,
-    controller.signal,
-    resolveServeFsRestriction(deps.config)
-  );
-  const permissionPolicy = yolo ? yoloServePolicy() : new AutoApprovePermissionPolicy();
-  const executor = new ToolExecutor(registry, {
-    permissionPolicy,
-    secretScrubber: new DefaultSecretScrubber(),
-    maxToolTimeoutMs: deps.config.tools?.maxToolTimeoutMs ?? 3e5,
-    perIterationOutputCapBytes: 1e6,
-    // Kanban tracks work; it does not gate it. Off unless the operator opts in.
-    // See wiring/pipeline.ts for why all four hosts must agree.
-    requireKanbanGovernance: deps.config.tools?.kanbanGovernance ?? false
-  });
-  const allowed = await selectExposedTools(registry, selectionCtx, permissionPolicy, whitelist);
-  const allowedNames = new Set(allowed.map((t) => t.name));
-  if (allowed.length === 0) {
-    log(
-      "wrongstack MCP server: no tools to expose (all withheld by policy or filtered out). Pass --yolo to expose write/exec tools, or --tools <names> to whitelist."
-    );
-  }
-  let counter = 0;
-  const host = {
-    listTools: () => allowed.map((t) => ({
-      name: t.name,
-      description: t.description,
-      inputSchema: t.inputSchema ?? { type: "object" }
-    })),
-    callTool: async (name, callArgs) => {
-      if (!allowedNames.has(name)) {
-        return { content: `Tool "${name}" is not exposed by this server`, isError: true };
-      }
-      const use = {
-        type: "tool_use",
-        id: `srv_${++counter}`,
-        name,
-        input: callArgs
-      };
-      const requestCtx = makeServeContext(
-        deps.cwd,
-        deps.projectRoot,
-        controller.signal,
-        resolveServeFsRestriction(deps.config)
-      );
-      const batch = await executor.executeBatch([use], requestCtx, "sequential");
-      const result = batch.outputs[0]?.result;
-      if (!result || result.type === "tool_confirm_pending") {
-        return {
-          content: `Tool "${name}" requires interactive confirmation, which is unavailable over MCP`,
-          isError: true
-        };
-      }
-      return { content: result.content, isError: Boolean(result.is_error) };
-    }
-  };
-  const server = new MCPServer({
-    host,
-    resources: selectedContent.resources,
-    prompts: selectedContent.prompts,
-    logger: { warn: (m) => log(`[mcp-serve] ${m}`) }
-  });
-  const mode = yolo ? "yolo: all tools" : "safe: read-only tools";
-  if (flags["http"] === true || typeof flags["http"] === "string" || flags["port"] || flags["host"]) {
-    let port;
-    try {
-      port = resolveServeHttpPort(flags);
-    } catch (err) {
-      log(`wrongstack MCP server: ${err instanceof Error ? err.message : String(err)}`);
-      return 1;
-    }
-    const httpHost = typeof flags["host"] === "string" ? flags["host"] : "127.0.0.1";
-    const tokenFromArg = typeof flags["token"] === "string" ? flags["token"] : void 0;
-    const token = tokenFromArg ?? process.env.WRONGSTACK_MCP_TOKEN?.trim() ?? void 0;
-    if (tokenFromArg) {
-      log(
-        "[mcp-serve] --token puts the auth token in this process command line, which other local processes can read. Prefer WRONGSTACK_MCP_TOKEN."
-      );
-    }
-    let handle2;
-    try {
-      handle2 = await serveHttp(server, {
-        port,
-        host: httpHost,
-        token,
-        logger: { warn: (m) => log(`[mcp-serve] ${m}`) }
-      });
-    } catch (err) {
-      log(`wrongstack MCP server: ${err instanceof Error ? err.message : String(err)}`);
-      return 1;
-    }
-    log(
-      `wrongstack MCP server ready at ${handle2.url} \u2014 exposing ${allowed.length} tool(s), ${selectedContent.resources.length} resource(s), ${selectedContent.prompts.length} prompt(s) (${mode})${token ? " [token auth]" : ""}.`
-    );
-    await new Promise((resolve2) => {
-      const stop = () => resolve2();
-      process.once("SIGINT", stop);
-      process.once("SIGTERM", stop);
-    });
-    await handle2.close();
-    controller.abort();
-    return 0;
-  }
-  log(
-    `wrongstack MCP server ready on stdio \u2014 exposing ${allowed.length} tool(s), ${selectedContent.resources.length} resource(s), ${selectedContent.prompts.length} prompt(s) (${mode}).`
-  );
-  const handle = serveStdio(server);
-  await handle.done;
-  controller.abort();
-  return 0;
-}
-
-// src/mcp-serve-project.ts
-var PROJECT_MCP_SERVERS = [
-  "mailbox",
-  "kanban",
-  "codebase-index",
-  "requirement-intake",
-  "sage"
-];
-function isProjectMcpServer(value) {
-  return PROJECT_MCP_SERVERS.includes(value);
-}
-var SERVER_FLAGS = [
-  "project-root",
-  "actor",
-  "session-id",
-  "name",
-  "role",
-  "writable",
-  "admin",
-  "destructive",
-  "http",
-  "stdio",
-  "port",
-  "host",
-  "token",
-  "index-dir",
-  "origin",
-  "watch"
-];
-var SWITCHES = /* @__PURE__ */ new Set([
-  "--writable",
-  "--admin",
-  "--destructive",
-  "--http",
-  "--stdio",
-  "--watch"
-]);
-function normalizeSwitches(args) {
-  const out = [];
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    const eq = arg.indexOf("=");
-    const flag = eq === -1 ? arg : arg.slice(0, eq);
-    if (!SWITCHES.has(flag)) {
-      out.push(arg);
-      continue;
-    }
-    const value = eq === -1 ? void 0 : arg.slice(eq + 1);
-    if (value === "false") continue;
-    out.push(flag);
-    if (eq === -1 && args[i + 1] === "true") i++;
-  }
-  return out;
-}
-function optionValue(args, name) {
-  const flag = `--${name}`;
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    if (arg === flag) {
-      const next = args[i + 1];
-      return next !== void 0 && !next.startsWith("--") ? next : void 0;
-    }
-    if (arg.startsWith(`${flag}=`)) return arg.slice(flag.length + 1);
-  }
-  return void 0;
-}
-async function serveProjectMcp(server, rawArgs, deps) {
-  const args = normalizeSwitches(restoreFlags(rawArgs, deps, SERVER_FLAGS));
-  if (server === "sage") {
-    const { serveAttachedSageMcpStdio } = await import("@wrongstack/sage-mcp");
-    await serveAttachedSageMcpStdio({
-      // A client may start this server from any directory; an explicit root wins.
-      projectRoot: optionValue(args, "project-root") ?? deps.projectRoot,
-      directory: deps.config.Sage?.storage?.directory,
-      origin: optionValue(args, "origin")?.trim() || "mcp-client"
-    });
-    return 0;
-  }
-  const argv = optionValue(args, "project-root") === void 0 ? [...args, "--project-root", deps.projectRoot] : args;
-  if (server === "mailbox") {
-    const { runMailboxMcpServer } = await import("@wrongstack/mailbox-mcp");
-    return runMailboxMcpServer(argv);
-  }
-  if (server === "kanban") {
-    const { runKanbanMcpServer } = await import("@wrongstack/kanban-mcp");
-    return runKanbanMcpServer(argv);
-  }
-  if (server === "requirement-intake") {
-    const { runRequirementIntakeMcpServer } = await import("@wrongstack/requirement-intake-mcp");
-    return runRequirementIntakeMcpServer(argv);
-  }
-  const { runCodebaseIndexMcpServer } = await import("@wrongstack/codebase-index-mcp");
-  return runCodebaseIndexMcpServer(argv);
-}
-
-// src/subcommands/handlers/mcp.ts
-var BUILT_IN_MCP = allServers();
-var mcpCmd = async (args, deps) => {
-  args = restoreFlags(args, deps, ["enable", "e", "transport", "url", "command"]);
-  const sub = args[0];
-  if (sub === "serve") {
-    if (isProjectMcpServer(args[1])) return serveProjectMcp(args[1], args.slice(2), deps);
-    return serveMcpStdio(deps, args.slice(1));
-  }
-  if (!sub || sub === "list") {
-    const servers = deps.config.mcpServers ?? {};
-    if (Object.keys(servers).length === 0) {
-      deps.renderer.write("No MCP servers configured.\n");
-      deps.renderer.write("Use `wstack mcp add <name>` or set mcpServers in your config.\n");
-      return 0;
-    }
-    for (const [name, entry] of Object.entries(servers)) {
-      const cfg = resolveMcpServerConfig(name, entry);
-      const status = entry?.enabled === false ? "disabled" : "enabled";
-      const description = cfg?.description ?? entry?.description;
-      const desc = description ? `  # ${description}` : "";
-      const transport = cfg?.transport ?? "invalid (no transport)";
-      deps.renderer.write(`  ${name.padEnd(20)} ${transport.padEnd(16)} ${status}${desc}
-`);
-    }
-    return 0;
-  }
-  if (sub === "add") {
-    return addMcpServer(args, deps);
-  }
-  if (sub === "remove") {
-    const name = args[1];
-    if (!name) {
-      deps.renderer.writeError("Usage: wstack mcp remove <name>\n");
-      return 1;
-    }
-    return removeMcpServer(name, deps);
-  }
-  if (sub === "restart") {
-    deps.renderer.writeWarning(
-      "mcp restart is only available in REPL mode. Use /mcp restart instead."
-    );
-    return 0;
-  }
-  deps.renderer.writeError(`Unknown mcp subcommand: ${sub}`);
-  return 1;
-};
-async function addMcpServer(args, deps) {
-  const configPath = activeProfileConfigPath(deps.paths, deps.config);
-  const name = args[1];
-  const enable = args.includes("--enable") || args.includes("-e");
-  if (!name) {
-    deps.renderer.writeError("Usage: wstack mcp add <name>\n");
-    deps.renderer.write("Available servers:\n");
-    for (const [sname, scfg] of Object.entries(deps.config.mcpServers ?? {}))
-      deps.renderer.write(`  ${sname.padEnd(20)} ${scfg.description ?? scfg.transport}
-`);
-    if (Object.keys(deps.config.mcpServers ?? {}).length === 0)
-      for (const k of Object.keys(BUILT_IN_MCP)) {
-        const s = expectDefined(BUILT_IN_MCP[k]);
-        deps.renderer.write(`  ${k.padEnd(20)} ${s.description}
-`);
-      }
-    deps.renderer.write("\nRun `wstack mcp add <name> --enable` to enable immediately.\n");
-    return 1;
-  }
-  const factory = Object.hasOwn(BUILT_IN_MCP, name) ? BUILT_IN_MCP[name] : void 0;
-  if (!factory) {
-    deps.renderer.writeError(
-      `Unknown server "${name}". Run \`wstack mcp add\` without args to see available servers.
-`
-    );
-    return 1;
-  }
-  const serverCfg = { ...factory };
-  serverCfg.enabled = enable;
-  const existing = await readJsonObjectFile(configPath);
-  const mcpServers = isRecord(existing.mcpServers) ? existing.mcpServers : {};
-  if (Object.hasOwn(mcpServers, name))
-    deps.renderer.writeWarning(`Server "${name}" already in config. Updating.
-`);
-  await updateJsonObjectFile(configPath, (config) => {
-    setJsonPath(config, ["mcpServers", name], serverCfg);
-  });
-  const verb = enable ? "Enabled" : "Added (disabled \u2014 set enabled:true to activate)";
-  deps.renderer.writeInfo(
-    `${verb} "${name}" (${serverCfg.transport}). Config written to ${configPath}.
-`
-  );
-  return 0;
-}
-async function removeMcpServer(name, deps) {
-  const configPath = activeProfileConfigPath(deps.paths, deps.config);
-  if (!await jsonObjectFileExists(configPath)) {
-    deps.renderer.writeError("No config file found.\n");
-    return 1;
-  }
-  const existing = await readJsonObjectFile(configPath);
-  const mcpServers = isRecord(existing.mcpServers) ? existing.mcpServers : {};
-  if (!Object.hasOwn(mcpServers, name)) {
-    deps.renderer.writeError(`Server "${name}" not in config.
-`);
-    return 1;
-  }
-  await updateJsonObjectFile(configPath, (config) => {
-    removeJsonPath(config, ["mcpServers", name]);
-  });
-  deps.renderer.writeInfo(`Removed "${name}" from config.
-`);
-  return 0;
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-export {
-  mcpCmd
-};
-//# sourceMappingURL=mcp-W7A5HUXV.js.map

package/dist/short-circuit-flags-QEXUS3BY.js

@@ -1,11 +0,0 @@
-import {
-  handleHelpVersionShortCircuit
-} from "./chunk-TAE3EGBM.js";
-import "./chunk-75OLD563.js";
-import "./chunk-6VPWQ4TG.js";
-import "./chunk-HKMOIIPQ.js";
-import "./chunk-W23PY4IJ.js";
-export {
-  handleHelpVersionShortCircuit
-};
-//# sourceMappingURL=short-circuit-flags-QEXUS3BY.js.map