blun-king-cli 9.1.624 → 9.1.625

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (142) hide show
  1. package/CHANGELOG.md +62 -213
  2. package/LIESMICH.txt +57 -74
  3. package/README.md +76 -119
  4. package/agent-spine-plugin/scripts/check-install.js +4 -4
  5. package/agent-spine-plugin/src/hook.js +0 -4
  6. package/agent-spine-plugin/src/lib/documents.js +1 -1
  7. package/agent-spine-plugin/src/lib/hook-context.js +0 -1
  8. package/agent-spine-plugin/src/lib/host-instruction-budget.js +2 -1
  9. package/agent-spine-plugin/src/lib/preflight.js +9 -38
  10. package/agent-spine-plugin/src/lib/source-roots.js +1 -1
  11. package/bin/agentspine-king-goal-inbox.mjs +127 -127
  12. package/bin/agentspine-king-goal-intake.mjs +106 -106
  13. package/bin/agentspine-king-host-runner.mjs +109 -109
  14. package/bin/agentspine-king-snapshot-policy.cjs +80 -80
  15. package/bin/agentspine-king-status-policy.mjs +226 -226
  16. package/bin/agentspine-king-worker-host.mjs +160 -160
  17. package/bin/core-bootstrap.js +71 -100
  18. package/bin/launcher-mode.js +93 -93
  19. package/bin/launcher-restart-policy.cjs +131 -131
  20. package/bin/launcher-runtime.js +89 -254
  21. package/bin/managed-node.js +186 -186
  22. package/bin/managed-plugin-selection.cjs +109 -116
  23. package/bin/native-module-repair.js +201 -201
  24. package/bin/node-runtime.js +34 -34
  25. package/bin/node-version.js +49 -49
  26. package/bin/plugin-bootstrap.js +149 -172
  27. package/bin/private-paths.js +1578 -1624
  28. package/bin/runtime-exit-ledger.cjs +144 -144
  29. package/bin/runtime-exit-ledger.d.cts +23 -23
  30. package/bin/standard-tools-bootstrap.js +277 -272
  31. package/bin/turn-thinking-policy.cjs +82 -82
  32. package/bin/update-copy.js +200 -200
  33. package/bin/update-lease.js +597 -599
  34. package/bin/update-notice.js +1568 -1568
  35. package/bin/verify-agent-behavior.cjs +122 -122
  36. package/bin/verify-agent-components.cjs +104 -104
  37. package/bin/verify-bundled-agent-sources.cjs +91 -96
  38. package/bin/windows-node-crash-dump.cjs +289 -289
  39. package/blun.mjs +187640 -180475
  40. package/bundled-agent-sources.json +26 -30
  41. package/codebase-index/codebase_index.py +462 -470
  42. package/dist-web/assets/{CodeBlockNode-TKKkJX8L.js → CodeBlockNode-BMbuG85x.js} +1 -1
  43. package/dist-web/assets/{CodeBlockShell.vue_vue_type_style_index_0_lang-CUj2Ds5x.js → CodeBlockShell.vue_vue_type_style_index_0_lang-C1fv7l_Z.js} +1 -1
  44. package/dist-web/assets/DesignSystemView-6HgAUEmC.css +1 -0
  45. package/dist-web/assets/DesignSystemView-CEEBqXSX.js +12 -0
  46. package/dist-web/assets/{Tooltip-CTWv7WCU.js → Tooltip--YoauJ24.js} +1 -1
  47. package/dist-web/assets/{abnfDiagram-N423BO3Z-DA8V8Zjh.js → abnfDiagram-N423BO3Z-DZvBWkRg.js} +1 -1
  48. package/dist-web/assets/{arc-YtddKbdY.js → arc-B04JATeX.js} +1 -1
  49. package/dist-web/assets/{architectureDiagram-T3A2C74G-CGEiObmo.js → architectureDiagram-T3A2C74G-DmYnMep2.js} +1 -1
  50. package/dist-web/assets/{blockDiagram-VBNYF7ZC-Bd5Vt50e.js → blockDiagram-VBNYF7ZC-DJ1gPS1C.js} +1 -1
  51. package/dist-web/assets/{c4Diagram-5PPSVZJV-D2ApPM54.js → c4Diagram-5PPSVZJV-DmjxvUbd.js} +1 -1
  52. package/dist-web/assets/channel-472fcEvw.js +1 -0
  53. package/dist-web/assets/{chunk-2GRJ4B5K-BDcIEZSl.js → chunk-2GRJ4B5K-AB0raj3I.js} +1 -1
  54. package/dist-web/assets/{chunk-2Q5K7J3B-6aSabCX7.js → chunk-2Q5K7J3B-Drf039vM.js} +1 -1
  55. package/dist-web/assets/{chunk-5RXB4S5H-BFRQvIJS.js → chunk-5RXB4S5H-D5ILttmz.js} +1 -1
  56. package/dist-web/assets/{chunk-5VM5RSS4-ChAa-DNY.js → chunk-5VM5RSS4-DrLSdi8y.js} +1 -1
  57. package/dist-web/assets/{chunk-6Q2QTUOP-BIfrb2Jc.js → chunk-6Q2QTUOP-LiaqdEOQ.js} +1 -1
  58. package/dist-web/assets/{chunk-GF5L2VYU-BR0gvtWI.js → chunk-GF5L2VYU-AIYkb--o.js} +1 -1
  59. package/dist-web/assets/{chunk-JWPE2WC7-BgXKsx5E.js → chunk-JWPE2WC7-CogdNl0i.js} +1 -1
  60. package/dist-web/assets/{chunk-KBJHAD2P-I8mrZhpz.js → chunk-KBJHAD2P-DHjpNtZv.js} +1 -1
  61. package/dist-web/assets/{chunk-RYQCIY6F-BMPaem92.js → chunk-RYQCIY6F-BUSOqH2X.js} +1 -1
  62. package/dist-web/assets/{chunk-XXDRQBXY-COy0J-0j.js → chunk-XXDRQBXY-BpoMV0bh.js} +1 -1
  63. package/dist-web/assets/classDiagram-JCYQIIEL-BTZeLngj.js +1 -0
  64. package/dist-web/assets/classDiagram-v2-OCEON4UE-BTZeLngj.js +1 -0
  65. package/dist-web/assets/{cose-bilkent-JH36ORCC-MosTTRdo.js → cose-bilkent-JH36ORCC-BJr2I61o.js} +1 -1
  66. package/dist-web/assets/{cynefin-VYW2F7L2-5tjPgrkP.js → cynefin-VYW2F7L2-HtysQZ4A.js} +1 -1
  67. package/dist-web/assets/{cynefinDiagram-MW4NZA55-CbDcdInR.js → cynefinDiagram-MW4NZA55-CcpC_2uv.js} +1 -1
  68. package/dist-web/assets/{dagre-VZM6K2ZE-YaBom1ZH.js → dagre-VZM6K2ZE-D8Ao0LUg.js} +1 -1
  69. package/dist-web/assets/{diagram-7IWD3JNH-Da4m-Hgz.js → diagram-7IWD3JNH-BITiLhjX.js} +1 -1
  70. package/dist-web/assets/{diagram-B4RE2ZJO-CAUUegxg.js → diagram-B4RE2ZJO-CJtwfy9f.js} +1 -1
  71. package/dist-web/assets/{diagram-LBJQPF4R-o21mWKG4.js → diagram-LBJQPF4R-BsVTh6w8.js} +1 -1
  72. package/dist-web/assets/{diagram-Q27KOJAE-BA3z3sXf.js → diagram-Q27KOJAE-pA_MUCUf.js} +1 -1
  73. package/dist-web/assets/{diagram-UB23O5K3-CGRdSSDK.js → diagram-UB23O5K3-CIY8z7vu.js} +1 -1
  74. package/dist-web/assets/{ebnfDiagram-BXEA7PRR-Bw-iU9FP.js → ebnfDiagram-BXEA7PRR-C3FMioqp.js} +1 -1
  75. package/dist-web/assets/{erDiagram-JOGREHBK-BwM1yiR0.js → erDiagram-JOGREHBK-CzoyKmKc.js} +1 -1
  76. package/dist-web/assets/{flowDiagram-UKHOOZJN-z05eOR1Q.js → flowDiagram-UKHOOZJN-DOqfushy.js} +1 -1
  77. package/dist-web/assets/{ganttDiagram-PKOTCBZU-BMUubNTl.js → ganttDiagram-PKOTCBZU-Cf9XQSWl.js} +1 -1
  78. package/dist-web/assets/{gitGraphDiagram-DS77QQ5N-Dccbi1wU.js → gitGraphDiagram-DS77QQ5N-DHUDofE5.js} +1 -1
  79. package/dist-web/assets/{index-h0KEOmkU.js → index-B6qEMQMx.js} +14 -14
  80. package/dist-web/assets/{index-C9eDH3u-.css → index-BmKj7CB1.css} +1 -1
  81. package/dist-web/assets/{index-BBbC5LRF.js → index-DokxDX1w.js} +1 -1
  82. package/dist-web/assets/{index-D48p0M2S.js → index-auojtiAA.js} +2 -2
  83. package/dist-web/assets/{index10-Qbuw1N6u.js → index10-Drb2n5e5.js} +1 -1
  84. package/dist-web/assets/{index11-g8v025wN.js → index11-Cx-aV4G2.js} +1 -1
  85. package/dist-web/assets/{index5-BYNcV8BY.js → index5-Dg3qGTyH.js} +1 -1
  86. package/dist-web/assets/{index6-BetANtnV.js → index6-BgvtIICP.js} +1 -1
  87. package/dist-web/assets/{index7-BcPbgCKN.js → index7-uEnniPQG.js} +1 -1
  88. package/dist-web/assets/{index8-B1lp-RvF.js → index8-h4IKc0ek.js} +2 -2
  89. package/dist-web/assets/{infoDiagram-6WML65LV-BF_pbUnN.js → infoDiagram-6WML65LV-D-3tvEiJ.js} +1 -1
  90. package/dist-web/assets/{ishikawaDiagram-WSZJBQD7-Dedv4urS.js → ishikawaDiagram-WSZJBQD7-DIIBNv7a.js} +1 -1
  91. package/dist-web/assets/{journeyDiagram-NVQOT4AX-B1Ex3b6o.js → journeyDiagram-NVQOT4AX-DP4r1Vlx.js} +1 -1
  92. package/dist-web/assets/{kanban-definition-27J2QSJJ-BtCGliBH.js → kanban-definition-27J2QSJJ-C3_Ztgxv.js} +1 -1
  93. package/dist-web/assets/{linear-ByItc8Qr.js → linear-DnqhIw-y.js} +1 -1
  94. package/dist-web/assets/{mermaid.core-B1M2O7nN.js → mermaid.core-xYUgBa3T.js} +4 -4
  95. package/dist-web/assets/{mindmap-definition-FAOFIHXS-D0UHKUyj.js → mindmap-definition-FAOFIHXS-l-dq-zfr.js} +1 -1
  96. package/dist-web/assets/{pegDiagram-VL7TDLO6-D7zYCVmG.js → pegDiagram-VL7TDLO6-C8vXQiaJ.js} +1 -1
  97. package/dist-web/assets/{pieDiagram-7S7Q4E2Y-Bd0i9CHa.js → pieDiagram-7S7Q4E2Y-CyNRSsI6.js} +1 -1
  98. package/dist-web/assets/{quadrantDiagram-CIZ2JOQS-MG-Ug47d.js → quadrantDiagram-CIZ2JOQS-D-w8AD_g.js} +1 -1
  99. package/dist-web/assets/{railroadDiagram-AXF67PYL-AZdl90Gj.js → railroadDiagram-AXF67PYL-BLkyQCWy.js} +1 -1
  100. package/dist-web/assets/{requirementDiagram-LRYGKXZP-DjplF9kt.js → requirementDiagram-LRYGKXZP-CEWO7XfT.js} +1 -1
  101. package/dist-web/assets/{sankeyDiagram-W5VNT64P-Bi9Zgfjs.js → sankeyDiagram-W5VNT64P-ByGoAaGj.js} +1 -1
  102. package/dist-web/assets/{sequenceDiagram-SI44F4Z6-ChEpdCvb.js → sequenceDiagram-SI44F4Z6-Bhn9GQtd.js} +1 -1
  103. package/dist-web/assets/{sizeCapture-X5ZJPWSS-B5RFUdaa.js → sizeCapture-X5ZJPWSS-jVKR9CTu.js} +1 -1
  104. package/dist-web/assets/{stateDiagram-OKZ733FA-BkRblSKp.js → stateDiagram-OKZ733FA-wW3XbegA.js} +1 -1
  105. package/dist-web/assets/stateDiagram-v2-UEYNNEHI-B8aids-Z.js +1 -0
  106. package/dist-web/assets/{swimlanes-SLNWSIFB-DLXH6Zhc.js → swimlanes-SLNWSIFB-B8QyFS7G.js} +2 -2
  107. package/dist-web/assets/swimlanesDiagram-ULZ7WXOC-B8XAkdSm.js +8 -0
  108. package/dist-web/assets/{timeline-definition-Z64GVDOM-C_N88siO.js → timeline-definition-Z64GVDOM-DpvxS-1A.js} +1 -1
  109. package/dist-web/assets/{vennDiagram-T6HMQDX7-DMsnvDt0.js → vennDiagram-T6HMQDX7-BzGM0ihY.js} +1 -1
  110. package/dist-web/assets/{vue.runtime.esm-bundler-B-3uIy85.js → vue.runtime.esm-bundler-BOcpwIX1.js} +1 -1
  111. package/dist-web/assets/{wardleyDiagram-T6FBY63Y-C9SJIPzq.js → wardleyDiagram-T6FBY63Y-2DKAOs5e.js} +1 -1
  112. package/dist-web/assets/{xychartDiagram-ELKLHX3M-DZLWA6Go.js → xychartDiagram-ELKLHX3M-B0SP0TXd.js} +1 -1
  113. package/dist-web/index.html +32 -32
  114. package/dist-web/vis/index.html.gz +0 -0
  115. package/package.json +1 -1
  116. package/scripts/fix-node-pty-perms.js +53 -53
  117. package/standard-skills/blun-app-design-system/SKILL.md +30 -30
  118. package/standard-skills/blun-app-design-system/provenance.json +17 -17
  119. package/standard-skills/blun-app-design-system/references/tokens.md +48 -48
  120. package/standard-skills/blun-app-design-system/scripts/check-blun-design.mjs +49 -49
  121. package/standard-skills/translate-native/README.md +1 -1
  122. package/standard-skills/translate-native/scripts/blun_language_guard.py +2 -0
  123. package/standard-skills/translate-native/scripts/language_gateway.py +2 -0
  124. package/standard-skills/translate-native/scripts/pre_output_guard.py +2 -0
  125. package/standard-tools/language-guard/blun_language_guard.py +2 -0
  126. package/standard-tools/language-guard/language_gateway.py +2 -0
  127. package/standard-tools/language-guard/pre_output_guard.py +2 -0
  128. package/telegram-plugin/blun.plugin.json +20 -20
  129. package/telegram-plugin/commands/access.md +37 -37
  130. package/telegram-plugin/dist/bridge.mjs +310 -187
  131. package/telegram-plugin/dist/mcp-server.mjs +174 -261
  132. package/telegram-plugin/dist/noise.mjs +1 -19
  133. package/worker-host.mjs +13747 -16824
  134. package/bin/profile-handoff.cjs +0 -152
  135. package/bin/profile-launch.cjs +0 -120
  136. package/dist-web/assets/DesignSystemView-DwK1aQMo.js +0 -12
  137. package/dist-web/assets/DesignSystemView-szjTj7ns.css +0 -1
  138. package/dist-web/assets/channel-BnluexuN.js +0 -1
  139. package/dist-web/assets/classDiagram-JCYQIIEL-BliFdSD9.js +0 -1
  140. package/dist-web/assets/classDiagram-v2-OCEON4UE-BliFdSD9.js +0 -1
  141. package/dist-web/assets/stateDiagram-v2-UEYNNEHI-fVkQcACW.js +0 -1
  142. package/dist-web/assets/swimlanesDiagram-ULZ7WXOC-Bg-BiZJQ.js +0 -8
@@ -1,272 +1,277 @@
1
- 'use strict';
2
-
3
- const { randomUUID } = require('node:crypto');
4
- const fs = require('node:fs');
5
- const path = require('node:path');
6
-
7
- const {
8
- ensurePrivateDirectory,
9
- securePrivateFile,
10
- securePrivateTree,
11
- writePrivateFile,
12
- } = require('./private-paths');
13
-
14
- function isObject(value) {
15
- return typeof value === 'object' && value !== null && !Array.isArray(value);
16
- }
17
-
18
- function readCatalogue(packageRoot) {
19
- const manifestPath = path.join(packageRoot, 'standard-tools', 'manifest.json');
20
- const parsed = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
21
- if (!isObject(parsed) || parsed.version !== 1 || !isObject(parsed.tools)) {
22
- throw new Error(`Ungueltiger Standard-Tools-Katalog: ${manifestPath}`);
23
- }
24
- for (const [name, tool] of Object.entries(parsed.tools)) {
25
- if (!isObject(tool) || !Array.isArray(tool.detectTokens)
26
- || !tool.detectTokens.every((token) => typeof token === 'string' && token.length > 0)) {
27
- throw new Error(`Ungueltiger Standard-Tool-Eintrag: ${name}`);
28
- }
29
- if (tool.platforms !== undefined
30
- && (!Array.isArray(tool.platforms)
31
- || !tool.platforms.every((platform) => platform === 'darwin' || platform === 'win32'))) {
32
- throw new Error(`Ungueltige Standard-Tool-Plattform: ${name}`);
33
- }
34
- if (tool.owner === 'user-mcp'
35
- && (!isObject(tool.config) || typeof tool.config.enabled !== 'boolean')) {
36
- throw new Error(`Standard-Tool braucht einen Aktivierungszustand: ${name}`);
37
- }
38
- }
39
- return parsed;
40
- }
41
-
42
- function readMcpDocument(configPath) {
43
- if (!fs.existsSync(configPath)) return { mcpServers: {} };
44
- let parsed;
45
- try {
46
- parsed = JSON.parse(fs.readFileSync(configPath, 'utf8'));
47
- } catch (error) {
48
- throw new Error(`Ungueltige MCP-Konfiguration (JSON): ${configPath}`, { cause: error });
49
- }
50
- if (!isObject(parsed) || (parsed.mcpServers !== undefined && !isObject(parsed.mcpServers))) {
51
- throw new Error(`Ungueltige MCP-Konfiguration: ${configPath}`);
52
- }
53
- return parsed.mcpServers === undefined ? { ...parsed, mcpServers: {} } : parsed;
54
- }
55
-
56
- function serverSearchText(name, config) {
57
- const values = [name];
58
- if (isObject(config)) {
59
- if (typeof config.command === 'string') values.push(config.command);
60
- if (Array.isArray(config.args)) {
61
- values.push(...config.args.filter((value) => typeof value === 'string'));
62
- }
63
- if (typeof config.url === 'string') values.push(config.url);
64
- }
65
- return values.join('\n').toLowerCase();
66
- }
67
-
68
- function hasEquivalentServer(servers, name, tool) {
69
- if (Object.hasOwn(servers, name)) return true;
70
- const tokens = tool.detectTokens.map((token) => token.toLowerCase());
71
- return Object.entries(servers).some(([serverName, config]) => {
72
- const searchText = serverSearchText(serverName, config);
73
- return tokens.some((token) => searchText.includes(token));
74
- });
75
- }
76
-
77
- function sameStringArray(left, right) {
78
- return Array.isArray(left)
79
- && Array.isArray(right)
80
- && left.length === right.length
81
- && left.every((value, index) => value === right[index]);
82
- }
83
-
84
- function recognizedBundledServer(name, current, expected) {
85
- if (!isObject(current)) return false;
86
- const exact = current.transport === expected.transport
87
- && current.command === expected.command
88
- && sameStringArray(current.args, expected.args);
89
- if (exact) return true;
90
- return name === 'context7'
91
- && current.transport === 'stdio'
92
- && current.command === 'npx'
93
- && Array.isArray(current.args)
94
- && current.args[0] === '-y'
95
- && /^@upstash\/context7-mcp(?:@[^\s]+)?$/u.test(current.args[1] ?? '');
96
- }
97
-
98
- function migrateBundledTool(name, current, expected) {
99
- if (!recognizedBundledServer(name, current, expected)) return false;
100
- let changed = false;
101
- if (current.enabled === false && name !== 'blun-language-guard') {
102
- current.enabled = true;
103
- changed = true;
104
- }
105
- if (name === 'agent-browser') {
106
- if (current.startupTimeoutMs === 30_000) {
107
- current.startupTimeoutMs = expected.startupTimeoutMs;
108
- changed = true;
109
- }
110
- if (current.toolTimeoutMs === 60_000) {
111
- current.toolTimeoutMs = expected.toolTimeoutMs;
112
- changed = true;
113
- }
114
- }
115
- if (name === 'blun-language-guard'
116
- && (current.toolTimeoutMs === 30_000 || current.toolTimeoutMs === 60_000)) {
117
- current.toolTimeoutMs = expected.toolTimeoutMs;
118
- changed = true;
119
- }
120
- return changed;
121
- }
122
-
123
- function writeMcpDocument(configPath, document) {
124
- const temporaryPath = path.join(
125
- path.dirname(configPath),
126
- `.${path.basename(configPath)}.${process.pid}.${randomUUID()}.tmp`,
127
- );
128
- try {
129
- writePrivateFile(temporaryPath, `${JSON.stringify(document, null, 2)}\n`);
130
- fs.renameSync(temporaryPath, configPath);
131
- } catch (error) {
132
- fs.rmSync(temporaryPath, { force: true });
133
- throw error;
134
- }
135
- }
136
-
137
- function bundledToolConfig(name, tool, { packageRoot, blunDir, platform, env }) {
138
- const config = structuredClone(tool.config);
139
- config.enabled = true;
140
- if (name === 'blun-language-guard') {
141
- config.command = platform === 'win32' ? 'python' : 'python3';
142
- config.args = [
143
- path.join(
144
- packageRoot,
145
- 'standard-tools',
146
- 'language-guard',
147
- 'blun_language_guard.py',
148
- ),
149
- 'serve',
150
- ];
151
- config.env = {
152
- ...(isObject(config.env) ? config.env : {}),
153
- PYTHONDONTWRITEBYTECODE: '1',
154
- PYTHONUTF8: '1',
155
- BLUN_LANGUAGE_GUARD_KEY_FILE: path.join(
156
- blunDir,
157
- 'secrets',
158
- 'blun-language-guard-signing.key',
159
- ),
160
- };
161
- }
162
- if (name === 'windows-mcp' && platform === 'win32') {
163
- const localUvx = typeof env.USERPROFILE === 'string'
164
- ? path.join(env.USERPROFILE, '.local', 'bin', 'uvx.exe')
165
- : undefined;
166
- config.command = localUvx !== undefined && fs.existsSync(localUvx) ? localUvx : 'uvx';
167
- }
168
- return config;
169
- }
170
-
171
- function availableStandardToolNames({
172
- packageRoot,
173
- platform = process.platform,
174
- }) {
175
- const catalogue = readCatalogue(packageRoot);
176
- return Object.entries(catalogue.tools)
177
- .filter(([, tool]) => tool.owner === 'user-mcp' || tool.owner === 'managed-plugin')
178
- .filter(([, tool]) => !Array.isArray(tool.platforms) || tool.platforms.includes(platform))
179
- .map(([name]) => name);
180
- }
181
-
182
- function seedStandardTools({
183
- packageRoot,
184
- blunDir,
185
- names,
186
- platform = process.platform,
187
- env = process.env,
188
- }) {
189
- const catalogue = readCatalogue(packageRoot);
190
- if (!Array.isArray(names) || names.length === 0) {
191
- throw new Error('Mindestens ein Standard-Tool muss ausdruecklich ausgewaehlt werden.');
192
- }
193
- const selectedNames = [...new Set(names)];
194
- for (const name of selectedNames) {
195
- const tool = catalogue.tools[name];
196
- if (!isObject(tool) || tool.owner !== 'user-mcp') {
197
- throw new Error(`Unbekanntes Standard-Tool: ${name}`);
198
- }
199
- if (Array.isArray(tool.platforms) && !tool.platforms.includes(platform)) {
200
- throw new Error(`Standard-Tool ist auf dieser Plattform nicht verfuegbar: ${name}`);
201
- }
202
- }
203
- const configPath = path.join(blunDir, 'mcp.json');
204
- ensurePrivateDirectory(blunDir);
205
- if (fs.existsSync(configPath)) securePrivateFile(configPath);
206
- const document = readMcpDocument(configPath);
207
- const servers = { ...document.mcpServers };
208
- const added = [];
209
- const updated = [];
210
-
211
- for (const name of selectedNames) {
212
- const tool = catalogue.tools[name];
213
- const expected = bundledToolConfig(name, tool, {
214
- packageRoot,
215
- blunDir,
216
- platform,
217
- env,
218
- });
219
- if (Object.hasOwn(servers, name)) {
220
- if (migrateBundledTool(name, servers[name], expected)) updated.push(name);
221
- continue;
222
- }
223
- if (hasEquivalentServer(servers, name, tool)) continue;
224
- servers[name] = expected;
225
- added.push(name);
226
- }
227
-
228
- if (added.length > 0 || updated.length > 0) {
229
- writeMcpDocument(configPath, { ...document, mcpServers: servers });
230
- }
231
- return { added, updated, configPath };
232
- }
233
-
234
- function seedStandardDesignSkill({ packageRoot, blunDir }) {
235
- const sourcePath = path.join(
236
- packageRoot,
237
- 'standard-skills',
238
- 'blun-app-design-system',
239
- );
240
- const sourceStat = fs.lstatSync(sourcePath);
241
- if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
242
- throw new Error(`Ungueltiger BLUN-Standard-Skill: ${sourcePath}`);
243
- }
244
-
245
- const skillsDir = path.join(blunDir, 'skills');
246
- ensurePrivateDirectory(skillsDir);
247
- const destinationPath = path.join(skillsDir, 'blun-app-design-system');
248
- const installed = !fs.existsSync(destinationPath);
249
- if (!installed) {
250
- const destinationStat = fs.lstatSync(destinationPath);
251
- if (!destinationStat.isDirectory() || destinationStat.isSymbolicLink()) {
252
- throw new Error(`Ungueltiges Ziel fuer BLUN-Standard-Skill: ${destinationPath}`);
253
- }
254
- } else {
255
- ensurePrivateDirectory(destinationPath);
256
- }
257
-
258
- fs.cpSync(sourcePath, destinationPath, {
259
- recursive: true,
260
- force: true,
261
- errorOnExist: false,
262
- });
263
- securePrivateTree(destinationPath);
264
- return { installed, updated: !installed, destinationPath };
265
- }
266
-
267
- module.exports = {
268
- availableStandardToolNames,
269
- readCatalogue,
270
- seedStandardDesignSkill,
271
- seedStandardTools,
272
- };
1
+ 'use strict';
2
+
3
+ const { randomUUID } = require('node:crypto');
4
+ const fs = require('node:fs');
5
+ const path = require('node:path');
6
+
7
+ const {
8
+ ensurePrivateDirectory,
9
+ securePrivateFile,
10
+ securePrivateTree,
11
+ writePrivateFile,
12
+ } = require('./private-paths');
13
+
14
+ function isObject(value) {
15
+ return typeof value === 'object' && value !== null && !Array.isArray(value);
16
+ }
17
+
18
+ function readCatalogue(packageRoot) {
19
+ const manifestPath = path.join(packageRoot, 'standard-tools', 'manifest.json');
20
+ const parsed = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
21
+ if (!isObject(parsed) || parsed.version !== 1 || !isObject(parsed.tools)) {
22
+ throw new Error(`Ungueltiger Standard-Tools-Katalog: ${manifestPath}`);
23
+ }
24
+ for (const [name, tool] of Object.entries(parsed.tools)) {
25
+ if (!isObject(tool) || !Array.isArray(tool.detectTokens)
26
+ || !tool.detectTokens.every((token) => typeof token === 'string' && token.length > 0)) {
27
+ throw new Error(`Ungueltiger Standard-Tool-Eintrag: ${name}`);
28
+ }
29
+ if (tool.platforms !== undefined
30
+ && (!Array.isArray(tool.platforms)
31
+ || !tool.platforms.every((platform) => platform === 'darwin' || platform === 'win32'))) {
32
+ throw new Error(`Ungueltige Standard-Tool-Plattform: ${name}`);
33
+ }
34
+ if (tool.owner === 'user-mcp'
35
+ && (!isObject(tool.config) || typeof tool.config.enabled !== 'boolean')) {
36
+ throw new Error(`Standard-Tool braucht einen Aktivierungszustand: ${name}`);
37
+ }
38
+ }
39
+ return parsed;
40
+ }
41
+
42
+ function readMcpDocument(configPath) {
43
+ if (!fs.existsSync(configPath)) return { mcpServers: {} };
44
+ let parsed;
45
+ try {
46
+ parsed = JSON.parse(fs.readFileSync(configPath, 'utf8'));
47
+ } catch (error) {
48
+ throw new Error(`Ungueltige MCP-Konfiguration (JSON): ${configPath}`, { cause: error });
49
+ }
50
+ if (!isObject(parsed) || (parsed.mcpServers !== undefined && !isObject(parsed.mcpServers))) {
51
+ throw new Error(`Ungueltige MCP-Konfiguration: ${configPath}`);
52
+ }
53
+ return parsed.mcpServers === undefined ? { ...parsed, mcpServers: {} } : parsed;
54
+ }
55
+
56
+ function serverSearchText(name, config) {
57
+ const values = [name];
58
+ if (isObject(config)) {
59
+ if (typeof config.command === 'string') values.push(config.command);
60
+ if (Array.isArray(config.args)) {
61
+ values.push(...config.args.filter((value) => typeof value === 'string'));
62
+ }
63
+ if (typeof config.url === 'string') values.push(config.url);
64
+ }
65
+ return values.join('\n').toLowerCase();
66
+ }
67
+
68
+ function hasEquivalentServer(servers, name, tool) {
69
+ if (Object.hasOwn(servers, name)) return true;
70
+ const tokens = tool.detectTokens.map((token) => token.toLowerCase());
71
+ return Object.entries(servers).some(([serverName, config]) => {
72
+ const searchText = serverSearchText(serverName, config);
73
+ return tokens.some((token) => searchText.includes(token));
74
+ });
75
+ }
76
+
77
+ function sameStringArray(left, right) {
78
+ return Array.isArray(left)
79
+ && Array.isArray(right)
80
+ && left.length === right.length
81
+ && left.every((value, index) => value === right[index]);
82
+ }
83
+
84
+ function recognizedBundledServer(name, current, expected) {
85
+ if (!isObject(current)) return false;
86
+ const exact = current.transport === expected.transport
87
+ && current.command === expected.command
88
+ && sameStringArray(current.args, expected.args);
89
+ if (exact) return true;
90
+ return name === 'context7'
91
+ && current.transport === 'stdio'
92
+ && current.command === 'npx'
93
+ && Array.isArray(current.args)
94
+ && current.args[0] === '-y'
95
+ && /^@upstash\/context7-mcp(?:@[^\s]+)?$/u.test(current.args[1] ?? '');
96
+ }
97
+
98
+ function migrateBundledTool(name, current, expected) {
99
+ if (!recognizedBundledServer(name, current, expected)) return false;
100
+ let changed = false;
101
+ if (current.enabled === false && name !== 'blun-language-guard') {
102
+ current.enabled = true;
103
+ changed = true;
104
+ }
105
+ if (name === 'agent-browser') {
106
+ if (current.startupTimeoutMs === 30_000) {
107
+ current.startupTimeoutMs = expected.startupTimeoutMs;
108
+ changed = true;
109
+ }
110
+ if (current.toolTimeoutMs === 60_000) {
111
+ current.toolTimeoutMs = expected.toolTimeoutMs;
112
+ changed = true;
113
+ }
114
+ }
115
+ if (name === 'blun-language-guard'
116
+ && (current.toolTimeoutMs === 30_000 || current.toolTimeoutMs === 60_000)) {
117
+ current.toolTimeoutMs = expected.toolTimeoutMs;
118
+ changed = true;
119
+ }
120
+ if (name === 'blun-language-guard'
121
+ && (!isObject(current.env) || current.env.PYTHONDONTWRITEBYTECODE !== '1')) {
122
+ current.env = { ...(isObject(current.env) ? current.env : {}), PYTHONDONTWRITEBYTECODE: '1' };
123
+ changed = true;
124
+ }
125
+ return changed;
126
+ }
127
+
128
+ function writeMcpDocument(configPath, document) {
129
+ const temporaryPath = path.join(
130
+ path.dirname(configPath),
131
+ `.${path.basename(configPath)}.${process.pid}.${randomUUID()}.tmp`,
132
+ );
133
+ try {
134
+ writePrivateFile(temporaryPath, `${JSON.stringify(document, null, 2)}\n`);
135
+ fs.renameSync(temporaryPath, configPath);
136
+ } catch (error) {
137
+ fs.rmSync(temporaryPath, { force: true });
138
+ throw error;
139
+ }
140
+ }
141
+
142
+ function bundledToolConfig(name, tool, { packageRoot, blunDir, platform, env }) {
143
+ const config = structuredClone(tool.config);
144
+ config.enabled = true;
145
+ if (name === 'blun-language-guard') {
146
+ config.command = platform === 'win32' ? 'python' : 'python3';
147
+ config.args = [
148
+ path.join(
149
+ packageRoot,
150
+ 'standard-tools',
151
+ 'language-guard',
152
+ 'blun_language_guard.py',
153
+ ),
154
+ 'serve',
155
+ ];
156
+ config.env = {
157
+ ...(isObject(config.env) ? config.env : {}),
158
+ PYTHONDONTWRITEBYTECODE: '1',
159
+ PYTHONUTF8: '1',
160
+ BLUN_LANGUAGE_GUARD_KEY_FILE: path.join(
161
+ blunDir,
162
+ 'secrets',
163
+ 'blun-language-guard-signing.key',
164
+ ),
165
+ };
166
+ }
167
+ if (name === 'windows-mcp' && platform === 'win32') {
168
+ const localUvx = typeof env.USERPROFILE === 'string'
169
+ ? path.join(env.USERPROFILE, '.local', 'bin', 'uvx.exe')
170
+ : undefined;
171
+ config.command = localUvx !== undefined && fs.existsSync(localUvx) ? localUvx : 'uvx';
172
+ }
173
+ return config;
174
+ }
175
+
176
+ function availableStandardToolNames({
177
+ packageRoot,
178
+ platform = process.platform,
179
+ }) {
180
+ const catalogue = readCatalogue(packageRoot);
181
+ return Object.entries(catalogue.tools)
182
+ .filter(([, tool]) => tool.owner === 'user-mcp' || tool.owner === 'managed-plugin')
183
+ .filter(([, tool]) => !Array.isArray(tool.platforms) || tool.platforms.includes(platform))
184
+ .map(([name]) => name);
185
+ }
186
+
187
+ function seedStandardTools({
188
+ packageRoot,
189
+ blunDir,
190
+ names,
191
+ platform = process.platform,
192
+ env = process.env,
193
+ }) {
194
+ const catalogue = readCatalogue(packageRoot);
195
+ if (!Array.isArray(names) || names.length === 0) {
196
+ throw new Error('Mindestens ein Standard-Tool muss ausdruecklich ausgewaehlt werden.');
197
+ }
198
+ const selectedNames = [...new Set(names)];
199
+ for (const name of selectedNames) {
200
+ const tool = catalogue.tools[name];
201
+ if (!isObject(tool) || tool.owner !== 'user-mcp') {
202
+ throw new Error(`Unbekanntes Standard-Tool: ${name}`);
203
+ }
204
+ if (Array.isArray(tool.platforms) && !tool.platforms.includes(platform)) {
205
+ throw new Error(`Standard-Tool ist auf dieser Plattform nicht verfuegbar: ${name}`);
206
+ }
207
+ }
208
+ const configPath = path.join(blunDir, 'mcp.json');
209
+ ensurePrivateDirectory(blunDir);
210
+ if (fs.existsSync(configPath)) securePrivateFile(configPath);
211
+ const document = readMcpDocument(configPath);
212
+ const servers = { ...document.mcpServers };
213
+ const added = [];
214
+ const updated = [];
215
+
216
+ for (const name of selectedNames) {
217
+ const tool = catalogue.tools[name];
218
+ const expected = bundledToolConfig(name, tool, {
219
+ packageRoot,
220
+ blunDir,
221
+ platform,
222
+ env,
223
+ });
224
+ if (Object.hasOwn(servers, name)) {
225
+ if (migrateBundledTool(name, servers[name], expected)) updated.push(name);
226
+ continue;
227
+ }
228
+ if (hasEquivalentServer(servers, name, tool)) continue;
229
+ servers[name] = expected;
230
+ added.push(name);
231
+ }
232
+
233
+ if (added.length > 0 || updated.length > 0) {
234
+ writeMcpDocument(configPath, { ...document, mcpServers: servers });
235
+ }
236
+ return { added, updated, configPath };
237
+ }
238
+
239
+ function seedStandardDesignSkill({ packageRoot, blunDir }) {
240
+ const sourcePath = path.join(
241
+ packageRoot,
242
+ 'standard-skills',
243
+ 'blun-app-design-system',
244
+ );
245
+ const sourceStat = fs.lstatSync(sourcePath);
246
+ if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
247
+ throw new Error(`Ungueltiger BLUN-Standard-Skill: ${sourcePath}`);
248
+ }
249
+
250
+ const skillsDir = path.join(blunDir, 'skills');
251
+ ensurePrivateDirectory(skillsDir);
252
+ const destinationPath = path.join(skillsDir, 'blun-app-design-system');
253
+ const installed = !fs.existsSync(destinationPath);
254
+ if (!installed) {
255
+ const destinationStat = fs.lstatSync(destinationPath);
256
+ if (!destinationStat.isDirectory() || destinationStat.isSymbolicLink()) {
257
+ throw new Error(`Ungueltiges Ziel fuer BLUN-Standard-Skill: ${destinationPath}`);
258
+ }
259
+ } else {
260
+ ensurePrivateDirectory(destinationPath);
261
+ }
262
+
263
+ fs.cpSync(sourcePath, destinationPath, {
264
+ recursive: true,
265
+ force: true,
266
+ errorOnExist: false,
267
+ });
268
+ securePrivateTree(destinationPath);
269
+ return { installed, updated: !installed, destinationPath };
270
+ }
271
+
272
+ module.exports = {
273
+ availableStandardToolNames,
274
+ readCatalogue,
275
+ seedStandardDesignSkill,
276
+ seedStandardTools,
277
+ };