auden 0.1.0-alpha.2

package/dist/mcp/server.js

@@ -0,0 +1,427 @@
+/**
+ * The Auden MCP server. Exposes the context layer (`/api/v1/context/*`) to any
+ * agent as a small set of tools over stdio (`list_bundles`, `pull_context`,
+ * `push_context`, `list_inbox`, `pull_inbox`, `archive_inbox`), so an agent
+ * configures it once (in `.mcp.json` / Claude Code / Cursor) instead of wiring
+ * each source. The server name (`auden`) namespaces them, so tool names stay
+ * bare underscores — dots are outside the Anthropic/Claude Code tool-name charset.
+ *
+ * Every tool maps 1:1 to a REST route on the dashboard via `ContextClient`. The
+ * server acts as the user (it reuses the CLI token) and constrains exposure
+ * locally: `readOnly` refuses mutating tools, and `bundles` (an allowlist)
+ * limits which bundles are reachable — the "wire once, still scoped" answer.
+ *
+ * Argument validation is Valibot (never Zod) per repo convention; the low-level
+ * `Server` is used precisely so tool input schemas are plain JSON Schema and
+ * incoming arguments are validated by our own Valibot schemas rather than the
+ * SDK's Zod shapes.
+ */
+import { ContextItemTypeSchema, MAX_TRANSFORM_SOURCE_IDS, PushContentTypeSchema, SourceItemIdsSchema, } from '@auden.to/protocol';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import * as v from 'valibot';
+import { isBundleAllowed, resolveSince } from './scope.js';
+import { writeItemsToDir } from './write-items.js';
+const SERVER_NAME = 'auden';
+const SERVER_VERSION = '1';
+function ok(data) {
+    return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+}
+function fail(message) {
+    return { content: [{ type: 'text', text: message }], isError: true };
+}
+function valiMessage(err) {
+    return err instanceof v.ValiError
+        ? err.issues.map((issue) => issue.message).join('; ')
+        : 'invalid arguments';
+}
+// Arguments arrive as `request.params.arguments`, which the MCP spec allows to
+// be omitted; treat a missing value as an empty object before validating.
+function parseArgs(schema, args) {
+    return v.parse(schema, args ?? {});
+}
+const BundleArg = v.pipe(v.string(), v.minLength(1));
+// Constrain `types` to the real item-type enum so a typo (e.g. "note") is
+// rejected client-side instead of silently widening the result set — the REST
+// endpoint drops unknown types and, when all are dropped, applies no filter.
+const TypeArrayArg = v.array(ContextItemTypeSchema);
+// Mirror the server's 200-char cap so oversized names fail with a clear
+// client-side message rather than an opaque 400.
+const NameArg = v.pipe(v.string(), v.minLength(1), v.maxLength(200));
+// Mirror the REST endpoint's MAX_LIMIT so an over-large `limit` fails with a
+// clear client-side message instead of being silently clamped server-side.
+const MAX_LIMIT = 500;
+const PullContextArgs = v.object({
+    bundle: BundleArg,
+    query: v.optional(v.string()),
+    types: v.optional(TypeArrayArg),
+    limit: v.optional(v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(MAX_LIMIT))),
+    writeToDir: v.optional(v.string()),
+});
+const PushContextArgs = v.object({
+    bundle: BundleArg,
+    name: NameArg,
+    contentType: v.optional(PushContentTypeSchema),
+    content: v.pipe(v.string(), v.minLength(1)),
+    // A present `itemId` routes to the update path — reject an empty string so a
+    // caller can't accidentally issue a PUT with a blank id.
+    itemId: v.optional(v.pipe(v.string(), v.minLength(1))),
+    origin: v.optional(v.string()),
+    // Optimistic-concurrency precondition on the update path: the `version` the
+    // agent last read. On mismatch the server returns 409 rather than clobbering a
+    // concurrent edit. Update only — ignored on create.
+    expectedVersion: v.optional(v.pipe(v.number(), v.integer(), v.minValue(1))),
+    // The protocol's own schema, so an invalid citation list fails with a clear
+    // client-side message and can't drift from the server contract.
+    sourceItemIds: v.optional(SourceItemIdsSchema),
+});
+const ListInboxArgs = v.object({
+    since: v.optional(v.string()),
+    types: v.optional(TypeArrayArg),
+});
+const PullInboxArgs = v.object({
+    since: v.optional(v.string()),
+    types: v.optional(TypeArrayArg),
+    writeToDir: v.optional(v.string()),
+});
+const ArchiveInboxArgs = v.object({
+    ids: v.pipe(v.array(v.pipe(v.string(), v.minLength(1))), v.minLength(1)),
+});
+/**
+ * Build the tool definitions (name, JSON-Schema input, handler). Exposed
+ * separately from `createMcpServer` so handlers unit-test directly against a
+ * mocked client without a transport.
+ */
+export function buildTools(deps) {
+    const now = deps.now ?? (() => new Date());
+    const denyBundle = (slug) => isBundleAllowed(slug, deps.bundles)
+        ? null
+        : fail(`Bundle "${slug}" is not in this server's allowlist.`);
+    // read-only guards writes to the *context layer* (push/update/archive on the
+    // server). It does not gate a local `writeToDir` on a pull — that materializes
+    // already-readable context to a directory the caller named, not a server write.
+    const denyWrite = () => deps.readOnly
+        ? fail('This Auden MCP server is read-only; context-layer writes are refused.')
+        : null;
+    return [
+        {
+            name: 'list_bundles',
+            description: 'List the context bundles available to you (id, slug, name, kind). Use this to discover where to pull from or push to.',
+            inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+            async handler() {
+                try {
+                    const { bundles } = await deps.client.listBundles();
+                    const visible = bundles.filter((b) => isBundleAllowed(b.slug, deps.bundles));
+                    return ok({ bundles: visible });
+                }
+                catch (err) {
+                    return fail(err instanceof Error ? err.message : String(err));
+                }
+            },
+        },
+        {
+            name: 'pull_context',
+            description: 'Pull scoped items from a bundle. Filter with `types` (guide|document|reference|asset), a `query` substring, and `limit` (default 100, max 500 — pass a higher `limit` to retrieve more). Pass `writeToDir` to also write each item to disk in the current environment.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    bundle: { type: 'string', description: 'Bundle slug to pull from.' },
+                    query: { type: 'string', description: 'Substring filter over name + content.' },
+                    types: {
+                        type: 'array',
+                        items: { type: 'string' },
+                        description: 'Restrict to these item types.',
+                    },
+                    limit: {
+                        type: 'integer',
+                        minimum: 1,
+                        maximum: MAX_LIMIT,
+                        description: 'Max items to return (default 100, max 500).',
+                    },
+                    writeToDir: {
+                        type: 'string',
+                        description: 'If set, also write each item to this directory as Markdown.',
+                    },
+                },
+                required: ['bundle'],
+                additionalProperties: false,
+            },
+            async handler(rawArgs) {
+                let args;
+                try {
+                    args = parseArgs(PullContextArgs, rawArgs);
+                }
+                catch (err) {
+                    return fail(valiMessage(err));
+                }
+                const denied = denyBundle(args.bundle);
+                if (denied)
+                    return denied;
+                try {
+                    const { items } = await deps.client.pullContext({
+                        bundle: args.bundle,
+                        query: args.query,
+                        types: args.types,
+                        limit: args.limit,
+                    });
+                    if (args.writeToDir) {
+                        const written = await writeItemsToDir(items, args.writeToDir, deps.writeDeps);
+                        return ok({ items, written });
+                    }
+                    return ok({ items });
+                }
+                catch (err) {
+                    return fail(err instanceof Error ? err.message : String(err));
+                }
+            },
+        },
+        {
+            name: 'push_context',
+            description: 'Push a canonical item into a bundle. Omit `itemId` to create; pass `itemId` to update in place (the edit propagates to every bundle the item belongs to). On update only `name` and `content` change — `contentType` and `origin` are ignored. `contentType` defaults to "document". Optionally pass `expectedVersion` (the `version` you last read for the item) on an update: the server rejects the write with 409 if the item has changed since, so a stale edit surfaces as a conflict instead of silently clobbering a concurrent write. When creating a document produced from other context items (inbox captures, bundle items), cite their ids as `sourceItemIds` — if one of the user\'s guides covers the transform, Auden grades it against that guide\'s criteria and returns the verdict.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    bundle: { type: 'string', description: 'Bundle slug to push into.' },
+                    name: { type: 'string', description: 'Human-readable item name.' },
+                    contentType: {
+                        type: 'string',
+                        enum: ['document', 'reference', 'asset'],
+                        description: 'Item content type (default "document").',
+                    },
+                    content: { type: 'string', description: 'The item body (Markdown/text).' },
+                    itemId: {
+                        type: 'string',
+                        description: 'Existing item id to update in place; omit to create.',
+                    },
+                    origin: { type: 'string', description: 'Optional provenance string.' },
+                    expectedVersion: {
+                        type: 'integer',
+                        minimum: 1,
+                        description: 'Optimistic-concurrency precondition (update only): the version you last read. The server returns 409 if the item changed since, instead of clobbering a concurrent edit.',
+                    },
+                    sourceItemIds: {
+                        type: 'array',
+                        items: { type: 'string' },
+                        minItems: 1,
+                        maxItems: MAX_TRANSFORM_SOURCE_IDS,
+                        description: "Ids of the context items this document was produced from (create only). Graded against the user's own guidance when a guide covers the transform; ungraded pushes are fine — the citation is optional provenance.",
+                    },
+                },
+                required: ['bundle', 'name', 'content'],
+                additionalProperties: false,
+            },
+            async handler(rawArgs) {
+                const readOnly = denyWrite();
+                if (readOnly)
+                    return readOnly;
+                let args;
+                try {
+                    args = parseArgs(PushContextArgs, rawArgs);
+                }
+                catch (err) {
+                    return fail(valiMessage(err));
+                }
+                const denied = denyBundle(args.bundle);
+                if (denied)
+                    return denied;
+                // Grading only applies to a create — the server rejects sourceItemIds
+                // on the update path, so fail fast with a clearer message here.
+                if (args.itemId && args.sourceItemIds) {
+                    return fail('sourceItemIds applies to newly created items — omit itemId, or push without sourceItemIds.');
+                }
+                // Citations are NOT gated by the bundle allowlist: they return no item
+                // content to the agent (only a verdict), the server validates ownership,
+                // and the client cannot know which bundle an arbitrary id belongs to.
+                // The allowlist keeps governing what this server can pull and push.
+                try {
+                    const result = await deps.client.pushContext({
+                        bundle: args.bundle,
+                        name: args.name,
+                        contentType: args.contentType ?? 'document',
+                        content: args.content,
+                        itemId: args.itemId,
+                        origin: args.origin,
+                        expectedVersion: args.expectedVersion,
+                        sourceItemIds: args.sourceItemIds,
+                    });
+                    return ok(result);
+                }
+                catch (err) {
+                    return fail(err instanceof Error ? err.message : String(err));
+                }
+            },
+        },
+        {
+            name: 'list_inbox',
+            description: 'List unarchived inbox items. `since` accepts an ISO timestamp or a relative window like "24h", "7d", or "30m".',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    since: {
+                        type: 'string',
+                        description: 'ISO timestamp or relative window ("24h", "7d", "30m").',
+                    },
+                    types: {
+                        type: 'array',
+                        items: { type: 'string' },
+                        description: 'Restrict to these item types.',
+                    },
+                },
+                additionalProperties: false,
+            },
+            async handler(rawArgs) {
+                return listInbox(deps, now, rawArgs);
+            },
+        },
+        {
+            name: 'pull_inbox',
+            description: 'Pull recent inbox items for a round-trip (e.g. "notes from the last 24h"). Like list_inbox (supports `since` and `types`) but also supports `writeToDir` to materialize them to disk.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    since: {
+                        type: 'string',
+                        description: 'ISO timestamp or relative window ("24h", "7d", "30m").',
+                    },
+                    types: {
+                        type: 'array',
+                        items: { type: 'string' },
+                        description: 'Restrict to these item types.',
+                    },
+                    writeToDir: {
+                        type: 'string',
+                        description: 'If set, also write each item to this directory as Markdown.',
+                    },
+                },
+                additionalProperties: false,
+            },
+            async handler(rawArgs) {
+                return pullInbox(deps, now, rawArgs);
+            },
+        },
+        {
+            name: 'archive_inbox',
+            description: 'Archive inbox items by id once consumed, so they drop out of future inbox pulls. Reversible on the dashboard.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    ids: {
+                        type: 'array',
+                        items: { type: 'string' },
+                        minItems: 1,
+                        description: 'Inbox item ids to archive.',
+                    },
+                },
+                required: ['ids'],
+                additionalProperties: false,
+            },
+            async handler(rawArgs) {
+                const readOnly = denyWrite();
+                if (readOnly)
+                    return readOnly;
+                // Archive touches the reserved `inbox` bundle — honor the allowlist.
+                const denied = denyBundle('inbox');
+                if (denied)
+                    return denied;
+                let args;
+                try {
+                    args = parseArgs(ArchiveInboxArgs, rawArgs);
+                }
+                catch (err) {
+                    return fail(valiMessage(err));
+                }
+                try {
+                    return ok(await deps.client.archiveInbox(args.ids));
+                }
+                catch (err) {
+                    return fail(err instanceof Error ? err.message : String(err));
+                }
+            },
+        },
+    ];
+}
+async function listInbox(deps, now, rawArgs) {
+    const denied = denyInbox(deps);
+    if (denied)
+        return denied;
+    let args;
+    try {
+        args = parseArgs(ListInboxArgs, rawArgs);
+    }
+    catch (err) {
+        return fail(valiMessage(err));
+    }
+    let since;
+    try {
+        since = args.since ? resolveSince(args.since, now()) : undefined;
+    }
+    catch (err) {
+        return fail(err instanceof Error ? err.message : String(err));
+    }
+    try {
+        return ok(await deps.client.listInbox({ since, types: args.types }));
+    }
+    catch (err) {
+        return fail(err instanceof Error ? err.message : String(err));
+    }
+}
+async function pullInbox(deps, now, rawArgs) {
+    const denied = denyInbox(deps);
+    if (denied)
+        return denied;
+    let args;
+    try {
+        args = parseArgs(PullInboxArgs, rawArgs);
+    }
+    catch (err) {
+        return fail(valiMessage(err));
+    }
+    let since;
+    try {
+        since = args.since ? resolveSince(args.since, now()) : undefined;
+    }
+    catch (err) {
+        return fail(err instanceof Error ? err.message : String(err));
+    }
+    try {
+        const { items } = await deps.client.listInbox({ since, types: args.types });
+        if (args.writeToDir) {
+            const written = await writeItemsToDir(items, args.writeToDir, deps.writeDeps);
+            return ok({ items, written });
+        }
+        return ok({ items });
+    }
+    catch (err) {
+        return fail(err instanceof Error ? err.message : String(err));
+    }
+}
+function denyInbox(deps) {
+    return isBundleAllowed('inbox', deps.bundles)
+        ? null
+        : fail("The inbox bundle is not in this server's allowlist.");
+}
+/**
+ * Wire the tools into an MCP `Server` with stdio-ready request handlers. The
+ * caller connects a transport (`await server.connect(new StdioServerTransport())`).
+ */
+export function createMcpServer(deps) {
+    const tools = buildTools(deps);
+    const byName = new Map(tools.map((t) => [t.name, t]));
+    const server = new Server({ name: SERVER_NAME, version: SERVER_VERSION }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: tools.map((t) => ({
+            name: t.name,
+            description: t.description,
+            inputSchema: t.inputSchema,
+        })),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const tool = byName.get(request.params.name);
+        if (!tool) {
+            return fail(`Unknown tool: ${request.params.name}`);
+        }
+        return tool.handler(request.params.arguments);
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AA6BlD,MAAM,WAAW,GAAG,OAAO,CAAA;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,SAAS,EAAE,CAAC,IAAa;IACvB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AAC7E,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,GAAG,YAAY,CAAC,CAAC,SAAS;QAC/B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACrD,CAAC,CAAC,mBAAmB,CAAA;AACzB,CAAC;AAED,+EAA+E;AAC/E,0EAA0E;AAC1E,SAAS,SAAS,CAChB,MAAe,EACf,IAAa;IAEb,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AACpD,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;AACnD,wEAAwE;AACxE,iDAAiD;AACjD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;AAEpE,6EAA6E;AAC7E,2EAA2E;AAC3E,MAAM,SAAS,GAAG,GAAG,CAAA;AAErB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CACf,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACtE;IACD,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACnC,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3C,6EAA6E;IAC7E,yDAAyD;IACzD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,4EAA4E;IAC5E,+EAA+E;IAC/E,oDAAoD;IACpD,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,4EAA4E;IAC5E,gEAAgE;IAChE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;CAC/C,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;CAChC,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACnC,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CACzE,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAmB;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAE1C,MAAM,UAAU,GAAG,CAAC,IAAY,EAAqB,EAAE,CACrD,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,sCAAsC,CAAC,CAAA;IAEjE,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,SAAS,GAAG,GAAsB,EAAE,CACxC,IAAI,CAAC,QAAQ;QACX,CAAC,CAAC,IAAI,CAAC,uEAAuE,CAAC;QAC/E,CAAC,CAAC,IAAI,CAAA;IAEV,OAAO;QACL;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,uHAAuH;YACzH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;YAC5E,KAAK,CAAC,OAAO;gBACX,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;oBACnD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;oBAC5E,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;gBACjC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/D,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,wQAAwQ;YAC1Q,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBACpE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;oBAC/E,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,WAAW,EAAE,+BAA+B;qBAC7C;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,SAAS;wBAClB,WAAW,EAAE,6CAA6C;qBAC3D;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,6DAA6D;qBAC3E;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,oBAAoB,EAAE,KAAK;aAC5B;YACD,KAAK,CAAC,OAAO,CAAC,OAAO;gBACnB,IAAI,IAA2C,CAAA;gBAC/C,IAAI,CAAC;oBACH,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;gBAC5C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/B,CAAC;gBACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACtC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAA;gBACzB,IAAI,CAAC;oBACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;wBAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;qBAClB,CAAC,CAAA;oBACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;wBACpB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;wBAC7E,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;oBAC/B,CAAC;oBACD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;gBACtB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/D,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,0wBAA0wB;YAC5wB,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBACpE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBAClE,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;wBACxC,WAAW,EAAE,yCAAyC;qBACvD;oBACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBAC1E,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,sDAAsD;qBACpE;oBACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;oBACtE,eAAe,EAAE;wBACf,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,WAAW,EACT,0KAA0K;qBAC7K;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,QAAQ,EAAE,CAAC;wBACX,QAAQ,EAAE,wBAAwB;wBAClC,WAAW,EACT,mNAAmN;qBACtN;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC;gBACvC,oBAAoB,EAAE,KAAK;aAC5B;YACD,KAAK,CAAC,OAAO,CAAC,OAAO;gBACnB,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAA;gBAC5B,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,IAAI,IAA2C,CAAA;gBAC/C,IAAI,CAAC;oBACH,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;gBAC5C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/B,CAAC;gBACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACtC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAA;gBACzB,sEAAsE;gBACtE,gEAAgE;gBAChE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;oBACtC,OAAO,IAAI,CACT,4FAA4F,CAC7F,CAAA;gBACH,CAAC;gBACD,uEAAuE;gBACvE,yEAAyE;gBACzE,sEAAsE;gBACtE,oEAAoE;gBACpE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;wBAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,UAAU;wBAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,eAAe,EAAE,IAAI,CAAC,eAAe;wBACrC,aAAa,EAAE,IAAI,CAAC,aAAa;qBAClC,CAAC,CAAA;oBACF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAA;gBACnB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/D,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EACT,gHAAgH;YAClH,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,wDAAwD;qBACtE;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,WAAW,EAAE,+BAA+B;qBAC7C;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;YACD,KAAK,CAAC,OAAO,CAAC,OAAO;gBACnB,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;YACtC,CAAC;SACF;QACD;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EACT,uLAAuL;YACzL,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,wDAAwD;qBACtE;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,WAAW,EAAE,+BAA+B;qBAC7C;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,6DAA6D;qBAC3E;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;YACD,KAAK,CAAC,OAAO,CAAC,OAAO;gBACnB,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;YACtC,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EACT,+GAA+G;YACjH,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE;wBACH,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,QAAQ,EAAE,CAAC;wBACX,WAAW,EAAE,4BAA4B;qBAC1C;iBACF;gBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;gBACjB,oBAAoB,EAAE,KAAK;aAC5B;YACD,KAAK,CAAC,OAAO,CAAC,OAAO;gBACnB,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAA;gBAC5B,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,qEAAqE;gBACrE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;gBAClC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAA;gBACzB,IAAI,IAA4C,CAAA;gBAChD,IAAI,CAAC;oBACH,IAAI,GAAG,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;gBAC7C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/B,CAAC;gBACD,IAAI,CAAC;oBACH,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;gBACrD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/D,CAAC;YACH,CAAC;SACF;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAmB,EACnB,GAAe,EACf,OAAgB;IAEhB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,IAAI,IAAyC,CAAA;IAC7C,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,KAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAmB,EACnB,GAAe,EACf,OAAgB;IAEhB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,IAAI,IAAyC,CAAA;IAC7C,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,KAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QAC3E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YAC7E,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/B,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAmB;IACpC,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAErD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAA;IAED,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;KACJ,CAAC,CAAC,CAAA;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/mcp/write-items.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Materialize pulled context items to a local directory, mirroring the
+ * write-to-disk pattern in `rules/pull-bundle.ts`. Used by the `pull_context` /
+ * `pull_inbox` MCP tools when the agent passes a `writeToDir` -- it lets a coding
+ * agent drop scoped context straight into its working tree.
+ */
+import { mkdir, writeFile } from 'node:fs/promises';
+type WritableItem = {
+    id: string;
+    name: string;
+    content: string | null;
+};
+/**
+ * Turn an item's display name into a safe single-segment `.md` filename.
+ * Strips path separators and leading dots so a crafted item name cannot escape
+ * the target directory, replaces characters that are invalid in Windows
+ * filenames (`< > : " | ? *`) so writes don't fail on the cross-platform
+ * machines coding agents run on, and falls back to the item id when the name
+ * reduces to nothing.
+ */
+export declare function safeItemFileName(name: string, id: string): string;
+export type WriteItemsDeps = {
+    mkdirFn?: typeof mkdir;
+    writeFileFn?: typeof writeFile;
+};
+/**
+ * Write each item's `content` to `dir` as `<safe-name>.md`, creating the
+ * directory if needed. Items with `null` content (e.g. assets, whose bytes live
+ * in object storage) are skipped. Filename collisions are disambiguated by
+ * appending the item id. Returns the absolute-ish paths written, in order.
+ */
+export declare function writeItemsToDir(items: readonly WritableItem[], dir: string, deps?: WriteItemsDeps): Promise<string[]>;
+export {};
+//# sourceMappingURL=write-items.d.ts.map

package/dist/mcp/write-items.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-items.d.ts","sourceRoot":"","sources":["../../src/mcp/write-items.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAGnD,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CASjE;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,OAAO,SAAS,CAAA;CAC/B,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC,CA8BnB"}

package/dist/mcp/write-items.js

@@ -0,0 +1,59 @@
+/**
+ * Materialize pulled context items to a local directory, mirroring the
+ * write-to-disk pattern in `rules/pull-bundle.ts`. Used by the `pull_context` /
+ * `pull_inbox` MCP tools when the agent passes a `writeToDir` -- it lets a coding
+ * agent drop scoped context straight into its working tree.
+ */
+import { mkdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * Turn an item's display name into a safe single-segment `.md` filename.
+ * Strips path separators and leading dots so a crafted item name cannot escape
+ * the target directory, replaces characters that are invalid in Windows
+ * filenames (`< > : " | ? *`) so writes don't fail on the cross-platform
+ * machines coding agents run on, and falls back to the item id when the name
+ * reduces to nothing.
+ */
+export function safeItemFileName(name, id) {
+    const base = name
+        .trim()
+        .replace(/[/\\]/g, '-') // no path separators: single segment, no traversal
+        .replace(/[<>:"|?*]/g, '-') // chars invalid in Windows filenames
+        .replace(/^[-.]+/, '') // no leading dots/dashes (., .., dotfiles-as-traversal)
+        .trim();
+    const cleaned = base || id;
+    return cleaned.toLowerCase().endsWith('.md') ? cleaned : `${cleaned}.md`;
+}
+/**
+ * Write each item's `content` to `dir` as `<safe-name>.md`, creating the
+ * directory if needed. Items with `null` content (e.g. assets, whose bytes live
+ * in object storage) are skipped. Filename collisions are disambiguated by
+ * appending the item id. Returns the absolute-ish paths written, in order.
+ */
+export async function writeItemsToDir(items, dir, deps = {}) {
+    const mkdirFn = deps.mkdirFn ?? mkdir;
+    const writeFileFn = deps.writeFileFn ?? writeFile;
+    await mkdirFn(dir, { recursive: true });
+    // Track used names case-insensitively: coding agents commonly run on
+    // case-insensitive filesystems (macOS, Windows), where "README.md" and
+    // "readme.md" are the same file -- a case-sensitive Set would miss the
+    // collision and the second write would silently clobber the first.
+    const used = new Set();
+    const written = [];
+    for (const item of items) {
+        if (item.content === null)
+            continue;
+        let fileName = safeItemFileName(item.name, item.id);
+        if (used.has(fileName.toLowerCase())) {
+            // Disambiguate a name collision with the stable item id.
+            fileName = safeItemFileName(`${item.name}-${item.id}`, item.id);
+        }
+        used.add(fileName.toLowerCase());
+        const path = join(dir, fileName);
+        const body = item.content.endsWith('\n') ? item.content : `${item.content}\n`;
+        await writeFileFn(path, body);
+        written.push(path);
+    }
+    return written;
+}
+//# sourceMappingURL=write-items.js.map

package/dist/mcp/write-items.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-items.js","sourceRoot":"","sources":["../../src/mcp/write-items.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAQhC;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU;IACvD,MAAM,IAAI,GAAG,IAAI;SACd,IAAI,EAAE;SACN,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,mDAAmD;SAC1E,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,qCAAqC;SAChE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,wDAAwD;SAC9E,IAAI,EAAE,CAAA;IACT,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAA;IAC1B,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,CAAA;AAC1E,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA8B,EAC9B,GAAW,EACX,OAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAA;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,SAAS,CAAA;IAEjD,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvC,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,SAAQ;QAEnC,IAAI,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QACnD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrC,yDAAyD;YACzD,QAAQ,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;QAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,CAAA;QAC7E,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/rules/deletions-client.d.ts

@@ -0,0 +1,16 @@
+import { type RawGuideFileDeletion, type RuleDeletionsResponse } from '@auden.to/protocol';
+export type DeleteRulesOptions = {
+    dashboardUrl: string;
+    token: string;
+    deletions: RawGuideFileDeletion[];
+    /** Override fetch for tests. Defaults to globalThis.fetch. */
+    fetchImpl?: typeof fetch;
+};
+/**
+ * POST deletions to the dashboard, chunked to stay under the server's
+ * `MAX_RULE_DELETIONS_BATCH` per-request cap, and sum the parsed results.
+ * Empty input is rejected so the CLI never sends a useless request. Throws on
+ * transport, non-2xx, or malformed response bodies.
+ */
+export declare function deleteRules(options: DeleteRulesOptions): Promise<RuleDeletionsResponse>;
+//# sourceMappingURL=deletions-client.d.ts.map

package/dist/rules/deletions-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletions-client.d.ts","sourceRoot":"","sources":["../../src/rules/deletions-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAA;AAI3B,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,oBAAoB,EAAE,CAAA;IACjC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB,CAAA;AAMD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAmChC"}

package/dist/rules/deletions-client.js

@@ -0,0 +1,40 @@
+import { MAX_RULE_DELETIONS_BATCH, parseRuleDeletionsResponse, } from '@auden.to/protocol';
+import { chunkArray } from '../chunk.js';
+function trimTrailingSlashes(url) {
+    return url.replace(/\/+$/, '');
+}
+/**
+ * POST deletions to the dashboard, chunked to stay under the server's
+ * `MAX_RULE_DELETIONS_BATCH` per-request cap, and sum the parsed results.
+ * Empty input is rejected so the CLI never sends a useless request. Throws on
+ * transport, non-2xx, or malformed response bodies.
+ */
+export async function deleteRules(options) {
+    if (options.deletions.length === 0) {
+        throw new Error('deleteRules: deletions array must not be empty');
+    }
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const url = `${trimTrailingSlashes(options.dashboardUrl)}/api/rules/deletions`;
+    let disabled = 0;
+    let skipped = 0;
+    for (const batch of chunkArray(options.deletions, MAX_RULE_DELETIONS_BATCH)) {
+        const response = await fetchImpl(url, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${options.token}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({ deletions: batch }),
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            throw new Error(`Deletions failed with ${response.status}${text ? `: ${text}` : ''}`);
+        }
+        const json = (await response.json());
+        const result = parseRuleDeletionsResponse(json);
+        disabled += result.disabled;
+        skipped += result.skipped;
+    }
+    return { disabled, skipped };
+}
+//# sourceMappingURL=deletions-client.js.map

package/dist/rules/deletions-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletions-client.js","sourceRoot":"","sources":["../../src/rules/deletions-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAG3B,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAUxC,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B;IAE3B,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC5C,MAAM,GAAG,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAA;IAE9E,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,GAAG,CAAC,CAAA;IAEf,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC3C,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACrE,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAA;QAC/C,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAA;QAC/C,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAA;QAC3B,OAAO,IAAI,MAAM,CAAC,OAAO,CAAA;IAC3B,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAC9B,CAAC"}

package/dist/rules/diff.d.ts

@@ -0,0 +1,19 @@
+export type FormatUnifiedDiffOptions = {
+    /** Number of unchanged context lines around each hunk. */
+    context?: number;
+    /** ANSI-colorize +/-/header lines. Defaults to false. */
+    color?: boolean;
+    /** Header label for the on-disk version. */
+    oldHeader?: string;
+    /** Header label for the incoming version. */
+    newHeader?: string;
+};
+/**
+ * Render a unified diff between `oldContent` and `newContent` for `filePath`.
+ *
+ * Wraps `diff.createTwoFilesPatch` and optionally applies ANSI colors so the
+ * output matches what users expect from `git diff`. Trailing blank lines from
+ * `createTwoFilesPatch` are trimmed so callers can append directly.
+ */
+export declare function formatUnifiedDiff(oldContent: string, newContent: string, filePath: string, options?: FormatUnifiedDiffOptions): string;
+//# sourceMappingURL=diff.d.ts.map

package/dist/rules/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/rules/diff.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,wBAAwB,GAAG;IACrC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yDAAyD;IACzD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,wBAA6B,GACrC,MAAM,CAcR"}