alchemylab 2.0.2 → 2.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alchemylab",
-  "version": "2.0.2",
+  "version": "2.1.0",
   "private": false,
   "description": "AlchemyLab: the agentic workbench. Work is a request, with criteria, gates and a receipt.",
   "author": "Testfire Software",
@@ -45,16 +45,19 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.7.0",
-    "alchemylab-opencode": "^1.0.20",
+    "alchemylab-opencode": "^1.0.22",
     "chalk": "^4.1.2",
     "compression": "^1.8.1",
     "cors": "^2.8.5",
     "express": "^4.18.2",
+    "js-yaml": "^3.14.2",
     "jszip": "^3.10.2",
     "micromatch": "^4.0.5",
     "pdf-lib": "^1.17.1",
     "playwright-core": "^1.61.1",
     "simple-git": "^3.36.0",
+    "ulid": "^3.0.1",
+    "undici": "^7.25.0",
     "unpdf": "^1.8.1",
     "winston": "^3.8.2",
     "ws": "^8.14.2",

package/dist/796.js

@@ -1,47 +0,0 @@
-"use strict"
-exports.id=796,exports.ids=[796],exports.modules={68796:(e,exports,t)=>{async function n(e){if(p&&Date.now()-p.at<d)return p.servers
-try{const t=await e.apiClient.get(`/api/projects/${e.projectId}/mcp-servers`),n=t?.data??t??[]
-if(Array.isArray(n))return p={at:Date.now(),servers:n},n}catch(t){e.logger.warn("MCP gate: could not read the registry",{error:(0,c.getErrorMessage)(t)})}return p?.servers??[]}function r(e){return e.filter((e=>e.enabled)).map((e=>e.name))}function o(e,t){const n=[...t].sort(((e,t)=>t.length-e.length))
-for(const t of n){const n=`${t}_`
-if(e.startsWith(n)&&e.length>n.length)return{server:t,tool:e.slice(n.length)}}return null}function s(e,t=200){if(!e||"object"!=typeof e||Array.isArray(e))return""
-const n=Object.entries(e)
-if(0===n.length)return""
-const r=e=>{const t=u.indexOf(e)
-return-1===t?u.length:t}
-n.sort(((e,t)=>r(e[0])-r(t[0])))
-const o=[]
-for(const[e,t]of n){if(o.length>=4)break
-let n
-if("string"==typeof t)n=t.length>80?`${t.length} characters`:t
-else if("number"==typeof t||"boolean"==typeof t)n=String(t)
-else if(Array.isArray(t)){const e=t.filter((e=>"string"==typeof e))
-n=e.length===t.length&&e.join(", ").length<=80?e.join(", "):`${t.length} items`}else{if(null==t)continue
-n="an object"}o.push(`${e}: ${n}`)}const s=o.join(", ")
-return s.length>t?`${s.slice(0,t-1)}\u2026`:s}function i(e,t,n,r){const o=[`Let an agent run ${t} on "${e}", an MCP server this project is connected to?`],i=function(e){if(!e||"object"!=typeof e||Array.isArray(e))return""
-const t=s(e,400).split(", ").map((e=>{const t=e.indexOf(": ")
-return-1===t?null:[e.slice(0,t),e.slice(t+2)]})).filter(Boolean)
-if(0===t.length)return""
-const n=Math.max(...t.map((([e])=>e.length)))
-return t.map((([e,t])=>`    ${e.padEnd(n)}   ${t}`)).join("\n")}(r)
-i&&o.push(i)
-const a=n?`This runs inside "${e}", not in this project. The server's own note on ${t}: ${function(e,t=220){const n=e.trim().replace(/\s+/g," ")
-if(n.length<=t)return n
-const r=n.slice(0,t),o=Math.max(r.lastIndexOf(". "),r.lastIndexOf("! "),r.lastIndexOf("? "))
-if(o>.4*t)return r.slice(0,o+1)
-const s=r.lastIndexOf(" ")
-return`${r.slice(0,s>0?s:t)}\u2026`}(n)}`:`This runs inside "${e}", not in this project, and the server does not say what ${t} does.`
-return o.push(a),o.join("\n\n")}exports.invalidateMcpRegistry=function(){p=null},exports.getRegisteredMcpServers=n,exports.gatedNamespaces=r,exports.splitToolKey=o,exports.summariseArgs=s,exports.gateMcpCall=async function(e,c){const d=await n(e),p=o(c.toolName,r(d))
-if(!p)return{allow:!0,verdict:"not-external",reason:"Not a registered MCP connection tool"}
-const u=d.find((e=>e.name===p.server))
-if(!u||!u.enabled)return{allow:!1,verdict:"unknown-connection",reason:`the MCP server "${p.server}" is not enabled for this project`}
-if(function(e,t){const n=e?.find((e=>e.name===t))
-return!0===n?.readOnly}(u.toolManifest,p.tool))return{allow:!0,verdict:"read-only",reason:`the ${p.server} MCP server marks ${p.tool} read-only`}
-const{requestForSession:f}=await t.e(674).then(t.bind(t,75674)),h=c.sessionId?await f(e,c.sessionId):void 0,g=h??c.sessionId,v=g?`mcp:${p.server}:${g}`:`mcp:${p.server}`,y=s(c.args),$=y?`MCP ${p.server} \xb7 ${p.tool} (${y})`:`MCP ${p.server} \xb7 ${p.tool}`,m=u.toolManifest?.find((e=>e.name===p.tool))?.description
-if((0,a.isSessionAllowed)(v))return{allow:!0,verdict:"session-allowed",reason:h?`already allowed for ${h}`:"already allowed for this run"}
-const{id:w,promise:b,created:j}=(0,a.createApproval)(v,$)
-w&&j&&c.sessionId&&(0,l.bridgeApprovalToNotification)(e.apiClient,e.projectId,{approvalId:w,approvalKey:v,sessionId:c.sessionId,command:$,question:i(p.server,p.tool,m,c.args),approveOption:{description:`Run it once, in "${p.server}"`},denyOption:{description:"Do not run it; the agent is told it was declined"},allowSessionOption:h?{label:`Allow for the rest of ${h}`,description:`Run it, and stop asking about "${p.server}" for the rest of this request`}:{label:"Allow while this agent keeps working",description:`Run it, and stop asking about "${p.server}" until this agent finishes`}})
-const M=await b
-return"deny"===M?{allow:!1,verdict:"denied",reason:"a person declined it"}:"timeout"===M?{allow:!1,verdict:"timeout",reason:"nobody answered the approval in time"}:{allow:!0,verdict:"approved",reason:"a person approved it"}}
-const a=t(70799),l=t(36993),c=t(21319),d=3e4
-let p=null
-const u=["path","file","filename","file_path","filePath","paths","url","uri","endpoint","repo","repository","branch","id","key","name","title","query","q","command","sql","table"]}}