aontu 0.52.0 → 0.53.0

package/dist/mcp-server.js

@@ -0,0 +1,147 @@
+"use strict";
+/* Copyright (c) 2025 Richard Rodger, MIT License */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LineCodec = void 0;
+exports.parseArgs = parseArgs;
+exports.main = main;
+// Aontu MCP server (stdio).
+//
+//   aontu-mcp [--root <dir>]
+//
+// Speaks the Model Context Protocol over stdio: newline-delimited
+// JSON-RPC 2.0, one message per line. This binary is intentionally
+// thin — every tool and every protocol decision lives in the reusable
+// library ./mcp, the same three-layer split the language server uses
+// (docs/lsp.md).
+//
+// NDJSON, not the LSP's Content-Length framing: MCP stdio transport
+// is line-delimited, and a server that invented its own framing would
+// not be reachable by any client.
+//
+// The one startup decision is the PATH CAPABILITY: `--root <dir>`
+// grants the served evaluation the CLI's `--trust root:<dir>` posture
+// — includes resolve confined below the root, and every tool's
+// document arguments accept `<name>Path` file alternatives, confined
+// the same way. Without it the server denies all includes and refuses
+// path arguments (./mcp). The root is realpath'd HERE, once, so the
+// confinement prefix the library compares against is the real
+// directory, not a spelling of it.
+const node_fs_1 = require("node:fs");
+const mcp_1 = require("./mcp");
+const aontu_1 = require("./aontu");
+const USAGE = 'aontu-mcp - Aontu MCP server (stdio, NDJSON JSON-RPC)\n' +
+    '\n' +
+    '  aontu-mcp [--root <dir>]\n' +
+    '\n' +
+    '  --root <dir>  Serve <name>Path file arguments and resolve\n' +
+    '                @"..." includes, confined below <dir>\n' +
+    '                (realpath-checked). Without it, served evaluation\n' +
+    '                denies every include and refuses path arguments.\n';
+function parseArgs(argv) {
+    let root;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if ('-h' === arg || '--help' === arg) {
+            return { help: true };
+        }
+        if ('--root' === arg) {
+            const dir = argv[++i];
+            if (null == dir) {
+                return { err: 'aontu-mcp: --root needs a directory' };
+            }
+            root = dir;
+        }
+        else {
+            return { err: `aontu-mcp: unknown option ${arg} (try --help)` };
+        }
+    }
+    return { root };
+}
+// A line-oriented JSON-RPC codec: feed it incoming chunks, and it
+// splits lines, dispatches them, and writes replies. Kept
+// transport-injectable (write/onExit) so the wiring is unit-testable
+// without real stdio, exactly as the LSP's FrameCodec is.
+class LineCodec {
+    constructor(write, onExit, version, root) {
+        this.write = write;
+        this.onExit = onExit;
+        this.version = version;
+        this.root = root;
+        this.buffer = '';
+    }
+    push(chunk) {
+        this.buffer += chunk.toString();
+        for (;;) {
+            const nl = this.buffer.indexOf('\n');
+            if (nl < 0) {
+                return;
+            }
+            const line = this.buffer.slice(0, nl).trim();
+            this.buffer = this.buffer.slice(nl + 1);
+            if ('' !== line) {
+                this.line(line);
+            }
+        }
+    }
+    end() {
+        this.onExit(0);
+    }
+    line(line) {
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch {
+            this.send((0, mcp_1.parseError)());
+            return;
+        }
+        const out = (0, mcp_1.handle)(msg, this.version, this.root);
+        if (null != out) {
+            this.send(out);
+        }
+    }
+    send(out) {
+        this.write(JSON.stringify(out) + '\n');
+    }
+}
+exports.LineCodec = LineCodec;
+// The streams and exit are injectable (defaulting to real stdio) so
+// the full wiring is unit-testable. Returns undefined when the
+// arguments end the run before a codec exists (--help, a bad option,
+// a --root that is not a directory).
+function main(stdin = process.stdin, write = (line) => void process.stdout.write(line), exit = (code) => process.exit(code), version = aontu_1.VERSION, argv = process.argv.slice(2), errwrite = (line) => void process.stderr.write(line)) {
+    const args = parseArgs(argv);
+    if (true === args.help) {
+        write(USAGE);
+        exit(0);
+        return undefined;
+    }
+    if (null != args.err) {
+        errwrite(args.err + '\n');
+        exit(2);
+        return undefined;
+    }
+    // FAIL FAST on a root that is not a real directory: every later
+    // call would refuse anyway, but a misconfigured server that answers
+    // a thousand confusing refusals is worse than one that says so at
+    // startup.
+    let root;
+    if (null != args.root) {
+        try {
+            root = (0, node_fs_1.realpathSync)(args.root);
+            if (!(0, node_fs_1.statSync)(root).isDirectory()) {
+                throw new Error('not a directory');
+            }
+        }
+        catch {
+            errwrite(`aontu-mcp: --root ${args.root} is not a directory\n`);
+            exit(2);
+            return undefined;
+        }
+    }
+    const codec = new LineCodec(write, exit, version, root);
+    stdin.on('data', (chunk) => codec.push(chunk));
+    stdin.on('end', () => codec.end());
+    return codec;
+} /* node:coverage ignore next 11 */
+//# sourceMappingURL=mcp-server.js.map

package/dist/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":";AAAA,oDAAoD;;;;QAyLlD,IAAI;AAvLN,4BAA4B;AAC5B,EAAE;AACF,6BAA6B;AAC7B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,sEAAsE;AACtE,qEAAqE;AACrE,iBAAiB;AACjB,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,kCAAkC;AAClC,EAAE;AACF,kEAAkE;AAClE,sEAAsE;AACtE,+DAA+D;AAC/D,qEAAqE;AACrE,sEAAsE;AACtE,oEAAoE;AACpE,8DAA8D;AAC9D,mCAAmC;AAEnC,qCAAgD;AAEhD,+BAA0C;AAE1C,mCAAiC;AAGjC,MAAM,KAAK,GAAG,yDAAyD;IACrE,IAAI;IACJ,8BAA8B;IAC9B,IAAI;IACJ,+DAA+D;IAC/D,yDAAyD;IACzD,qEAAqE;IACrE,oEAAoE,CAAA;AAatE,mBAA0B,IAAc;IACtC,IAAI,IAAwB,CAAA;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,IAAI,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACvB,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YACrB,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;gBAChB,OAAO,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAA;YACvD,CAAC;YACD,IAAI,GAAG,GAAG,CAAA;QACZ,CAAC;aACI,CAAC;YACJ,OAAO,EAAE,GAAG,EAAE,6BAA6B,GAAG,eAAe,EAAE,CAAA;QACjE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAGD,kEAAkE;AAClE,0DAA0D;AAC1D,qEAAqE;AACrE,0DAA0D;AAC1D,MAAM,SAAS;IAGb,YACU,KAA6B,EAC7B,MAA8B,EAC9B,OAAe,EACf,IAAa;QAHb,UAAK,GAAL,KAAK,CAAwB;QAC7B,WAAM,GAAN,MAAM,CAAwB;QAC9B,YAAO,GAAP,OAAO,CAAQ;QACf,SAAI,GAAJ,IAAI,CAAS;QANf,WAAM,GAAG,EAAE,CAAA;IAOf,CAAC;IAEL,IAAI,CAAC,KAAsB;QACzB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC/B,SAAU,CAAC;YACT,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACX,OAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YACvC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG;QACD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAChB,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,IAAI,GAAe,CAAA;QACnB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;QACD,MAAM,CAAC;YACL,IAAI,CAAC,IAAI,CAAC,IAAA,gBAAU,GAAE,CAAC,CAAA;YACvB,OAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,YAAM,EAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,GAAgB;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IACxC,CAAC;CACF;QA2DC,SAAS;AAxDX,oEAAoE;AACpE,+DAA+D;AAC/D,qEAAqE;AACrE,qCAAqC;AACrC,SAAS,IAAI,CACX,KAAK,GAA0B,OAAO,CAAC,KAAK,EAC5C,KAAK,GAA2B,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EACzE,IAAI,GAA2B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3D,OAAO,GAAW,eAAO,EACzB,IAAI,GAAa,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACtC,QAAQ,GACN,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAE3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,KAAK,CAAC,CAAA;QACZ,IAAI,CAAC,CAAC,CAAC,CAAA;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,CAAC,CAAA;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,gEAAgE;IAChE,oEAAoE;IACpE,kEAAkE;IAClE,WAAW;IACX,IAAI,IAAwB,CAAA;IAC5B,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,CAAC,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QACD,MAAM,CAAC;YACL,QAAQ,CAAC,qBAAqB,IAAI,CAAC,IAAI,uBAAuB,CAAC,CAAA;YAC/D,IAAI,CAAC,CAAC,CAAC,CAAA;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;IACvD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACtD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IAClC,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,kCAAkC"}

package/dist/mcp.d.ts

@@ -0,0 +1,42 @@
+import type { TrustOptions } from './type';
+import type { VetFinding } from './vet';
+export declare const MCP_PROTOCOL = "2024-11-05";
+export type McpRequest = {
+    id?: number | string | null;
+    jsonrpc?: string;
+    method?: string;
+    params?: any;
+};
+export type McpResponse = {
+    error?: {
+        code: number;
+        message: string;
+    };
+    id: number | string | null;
+    jsonrpc: '2.0';
+    result?: any;
+};
+export type ToolDef = {
+    name: string;
+    description: string;
+    properties: Record<string, {
+        type: string;
+        description: string;
+        items?: any;
+    }>;
+    required: string[];
+    docs?: string[];
+    check?: (a: any) => string | undefined;
+    refuse?: (a: any, finding: VetFinding, trust: TrustOptions, paths: Record<string, string>) => any;
+    run: (a: any, trust: TrustOptions, paths: Record<string, string>) => any;
+};
+export declare function servedTrust(root?: string): TrustOptions;
+export declare function confinedParseFailure(src: string, trust: TrustOptions, path?: string): VetFinding | undefined;
+export declare function toolList(root?: string): any[];
+export declare function callTool(name: string, args: any, opts?: {
+    root?: string;
+    tools?: ToolDef[];
+}): any;
+export declare function serverInstructions(root?: string): string;
+export declare function handle(msg: McpRequest, version: string, root?: string): McpResponse | undefined;
+export declare function parseError(): McpResponse;