butler-mcp 0.1.0

package/README.md

@@ -0,0 +1,159 @@
+# butler-mcp
+
+MCP server for **Butler**: Google Drive / Google Sheets 連携でタスク台帳と執事設定を扱う。  
+Cursor 等の MCP クライアントから `npx butler-mcp` で起動する。
+
+## セットアップ
+
+1. **依存のインストール**
+   ```bash
+   npm install
+   ```
+
+2. **必須**
+   - **driveRootId** … Butler 用ルートフォルダの Google Drive フォルダ ID（必須）
+   - **spreadsheetId** … 省略可。省略時は Drive 内で名前 `"Tasks"` のスプレッドシートを検索し、なければ自動作成
+   - **credentialsPath** … サービスアカウント JSON のパス（任意。未指定時は環境変数 `GOOGLE_APPLICATION_CREDENTIALS` を参照）
+
+3. **設定ファイル**（任意）
+   ```bash
+   npx butler-mcp --config ./butler.config.json
+   ```
+   JSON 例: `{ "driveRootId": "...", "credentialsPath": "/path/to/key.json" }`（spreadsheetId は任意）
+
+## Google Drive / Sheets の認証（サービスアカウント）
+
+butler-mcp は **サービスアカウント** で Google API にアクセスする。手順は次のとおり。
+
+### 1. Google Cloud でプロジェクトを作る
+
+1. [Google Cloud Console](https://console.cloud.google.com/) にログイン
+2. 画面上部のプロジェクト選択 → **新しいプロジェクト** で作成（例: `butler-mcp`）
+
+### 2. API を有効にする
+
+1. **API とサービス** → **ライブラリ**
+2. **Google Drive API** を検索 → **有効にする**
+3. 同様に **Google Sheets API** を検索 → **有効にする**
+
+### 3. サービスアカウントとキーを作る
+
+1. **API とサービス** → **認証情報** → **認証情報を作成** → **サービスアカウント**
+2. 名前（例: `butler-mcp`）を入れて **作成**
+3. ロールは省略で OK → **完了**
+4. 一覧で作ったサービスアカウントをクリック → **キー** タブ
+5. **鍵を追加** → **新しい鍵を作成** → **JSON** を選んで **作成**
+6. ダウンロードされた JSON ファイルを安全な場所に保存（例: `~/butler-service-account.json`）
+
+この JSON が **秘密鍵**。Git にコミットしたり公開しないこと。
+
+### 4. Drive のフォルダをサービスアカウントに共有する
+
+サービスアカウントは「別の Google アカウント」なので、**あなたの Drive のフォルダを共有しないとアクセスできない**。
+
+1. Google Drive で Butler 用のルートフォルダ（例: `Butler`）を作成
+2. フォルダを右クリック → **共有**
+3. **ユーザーやグループを追加** に、サービスアカウントの **メールアドレス** を入力  
+   （JSON 内の `client_email` の値。例: `butler-mcp@your-project.iam.gserviceaccount.com`）
+4. 権限を **編集者** にして **送信**
+5. フォルダの URL から **フォルダ ID** を取得  
+   例: `https://drive.google.com/drive/folders/1ABC...xyz` → `1ABC...xyz` が `driveRootId`
+
+### 5. butler-mcp に渡す
+
+- **環境変数**: `GOOGLE_APPLICATION_CREDENTIALS=/path/to/サービスアカウント.json`
+- **または args**: `--credentialsPath` に上記 JSON の絶対パスを指定（MCP 設定で渡す）
+
+これで Drive / Sheets への認証が通る。
+
+### このリポジトリで `googleCloudKey.json` を使う場合
+
+キーをリポジトリ直下の `googleCloudKey.json` に置いた場合の例（パスは環境に合わせて書き換えてね）:
+
+**ターミナルで起動する場合**
+```bash
+# リポジトリルート（TAISHO）で
+export GOOGLE_APPLICATION_CREDENTIALS="$(pwd)/googleCloudKey.json"
+cd butler-mcp && npx butler-mcp --driveRootId "あなたのDriveルートフォルダID"
+```
+
+**Cursor の MCP 設定（args で渡す）**
+
+`googleCloudKey.json` をリポジトリルートに置いているとき、`--credentialsPath` に **絶対パス** を指定する:
+
+```json
+"args": [
+  "butler-mcp",
+  "--driveRootId",
+  "あなたのDriveルートフォルダID",
+  "--credentialsPath",
+  "/Users/charu/Library/CloudStorage/Dropbox/mac_setting/work/private/TAISHO/googleCloudKey.json"
+]
+```
+
+※ `googleCloudKey.json` は `.gitignore` に入れてあるので Git にはコミットされない。
+
+## Cursor など MCP クライアントでの設定
+
+`args` に **キーと値を並べて** 渡す（フラットな羅列）:
+
+```json
+{
+  "mcpServers": {
+    "butler-mcp": {
+      "command": "npx",
+      "args": [
+        "butler-mcp",
+        "--driveRootId",
+        "YOUR_DRIVE_ROOT_FOLDER_ID",
+        "--credentialsPath",
+        "/absolute/path/to/service-account.json"
+      ]
+    }
+  }
+}
+```
+
+- **--driveRootId** … Butler 用 Drive ルートフォルダ ID（必須）
+- **--spreadsheetId** … タスク台帳のスプレッドシート ID（任意。省略時は Drive 内で `"Tasks"` を検索 or 作成）
+- **--credentialsPath** … 秘密鍵（サービスアカウント JSON）の絶対パス（任意。未指定時は環境変数 `GOOGLE_APPLICATION_CREDENTIALS`）
+
+設定ファイルでまとめて渡す場合:
+
+```json
+"args": ["butler-mcp", "--config", "/absolute/path/to/butler.config.json"]
+```
+
+## ビルド・実行
+
+```bash
+npm run build
+npm start
+# または
+npx butler-mcp
+```
+
+## 提供ツール（MCP）
+
+- **sheets.queryTasks** … タスク一覧を条件付きで取得（status, due_date_before, priority, limit）
+- **sheets.addTask** … タスク 1 件追加（title 必須）。成功時に監査ログへ追記
+- **sheets.updateTask** … タスク更新（id, dryRun, patch）。dryRun=true で diff のみ返却。適用時に監査ログへ追記
+- **drive.search** … Butler ルート配下のファイル検索（query オプション）
+- **drive.readFile** … fileId または path（例: `config/persona.yml`）でファイル内容取得
+- **drive.writeFile** … path, content, mode（create|replace|append）で書き込み。成功時に監査ログへ追記
+- **drive.getConfigBundle** … persona / policies / templates を Drive から取得（執事名は persona.name）
+- **drive.updateConfig** … target=persona|policies, patch, dryRun 必須で設定更新。適用時に監査ログへ追記
+
+監査ログは `Butler/history/audit-log.ndjson` に NDJSON で追記される。
+
+## テスト
+
+```bash
+npm test
+```
+（スコープガード・Diff・Persona/Policies スキーマ検証の単体テスト）
+
+## 仕様・設計
+
+- 要件・設計・タスク: リポジトリルートの `.spec-workflow/specs/butler-mcp/` を参照
+- 開発は TDD（テスト先行）。スコープガード・Diff は単体テストあり

package/dist/auth.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Google Auth: Sheets + Drive API 用の認証済みクライアント取得
+ */
+import { google } from "googleapis";
+import type { ButlerConfig } from "./config.js";
+export type AuthClients = {
+    sheets: ReturnType<typeof google.sheets>;
+    drive: ReturnType<typeof google.drive>;
+};
+/**
+ * Returns authenticated Google API clients for Sheets and Drive.
+ * Uses GOOGLE_APPLICATION_CREDENTIALS (or config.credentialsPath) for Service Account.
+ */
+export declare function getAuthClients(config: ButlerConfig): Promise<AuthClients>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAa/E"}

package/dist/auth.js

@@ -0,0 +1,23 @@
+/**
+ * Google Auth: Sheets + Drive API 用の認証済みクライアント取得
+ */
+import { google } from "googleapis";
+/**
+ * Returns authenticated Google API clients for Sheets and Drive.
+ * Uses GOOGLE_APPLICATION_CREDENTIALS (or config.credentialsPath) for Service Account.
+ */
+export async function getAuthClients(config) {
+    const auth = new google.auth.GoogleAuth({
+        keyFile: config.credentialsPath ?? process.env.GOOGLE_APPLICATION_CREDENTIALS,
+        scopes: [
+            "https://www.googleapis.com/auth/spreadsheets",
+            "https://www.googleapis.com/auth/drive",
+            "https://www.googleapis.com/auth/drive.file",
+        ],
+    });
+    const client = await auth.getClient();
+    const sheets = google.sheets({ version: "v4", auth: client });
+    const drive = google.drive({ version: "v3", auth: client });
+    return { sheets, drive };
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAQpC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAoB;IACvD,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,8BAA8B;QAC7E,MAAM,EAAE;YACN,8CAA8C;YAC9C,uCAAuC;YACvC,4CAA4C;SAC7C;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;IACrE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+/**
+ * CLI entry for npx butler-mcp
+ */
+import { loadConfig } from "./config.js";
+import { runServer } from "./server.js";
+function parseArgs() {
+    const args = process.argv.slice(2);
+    const out = {};
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === "--config" && args[i + 1]) {
+            out.configFilePath = args[++i];
+            continue;
+        }
+        if (a === "--driveRootId" && args[i + 1]) {
+            out.driveRootId = args[++i];
+            continue;
+        }
+        if (a === "--spreadsheetId" && args[i + 1]) {
+            out.spreadsheetId = args[++i];
+            continue;
+        }
+        if (a === "--credentialsPath" && args[i + 1]) {
+            out.credentialsPath = args[++i];
+            continue;
+        }
+    }
+    return out;
+}
+async function main() {
+    const opts = parseArgs();
+    const config = loadConfig(opts);
+    await runServer(config);
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,SAAS,SAAS;IAMhB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,EAAE,CAAC,CAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,iBAAiB,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,CAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,mBAAmB,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,CAAE,CAAC;YACjC,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,13 @@
+export interface ButlerConfig {
+    driveRootId: string;
+    spreadsheetId?: string;
+    credentialsPath?: string;
+}
+export interface LoadConfigOptions {
+    driveRootId?: string;
+    spreadsheetId?: string;
+    credentialsPath?: string;
+    configFilePath?: string;
+}
+export declare function loadConfig(options?: LoadConfigOptions): ButlerConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAkBD,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,YAAY,CA6BxE"}

package/dist/config.js

@@ -0,0 +1,47 @@
+/**
+ * Config loader: args (--driveRootId, --spreadsheetId, --credentialsPath) + optional --config file + env
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { resolve } from "node:path";
+import yaml from "js-yaml";
+const ENV_SPREADSHEET_ID = "BUTLER_SPREADSHEET_ID";
+const ENV_DRIVE_ROOT_ID = "BUTLER_DRIVE_ROOT_ID";
+const ENV_CREDENTIALS = "GOOGLE_APPLICATION_CREDENTIALS";
+function loadFromFile(path) {
+    const abs = resolve(path);
+    if (!existsSync(abs)) {
+        throw new Error(`Config file not found: ${path}`);
+    }
+    const raw = readFileSync(abs, "utf-8");
+    const ext = abs.split(".").pop()?.toLowerCase();
+    if (ext === "yaml" || ext === "yml") {
+        return yaml.load(raw) ?? {};
+    }
+    if (ext === "json") {
+        return JSON.parse(raw);
+    }
+    throw new Error(`Unsupported config format: ${ext}. Use .json or .yaml`);
+}
+export function loadConfig(options = {}) {
+    const fromFile = options.configFilePath
+        ? loadFromFile(options.configFilePath)
+        : {};
+    const driveRootId = options.driveRootId ??
+        fromFile.driveRootId ??
+        process.env[ENV_DRIVE_ROOT_ID];
+    const spreadsheetId = options.spreadsheetId ??
+        fromFile.spreadsheetId ??
+        process.env[ENV_SPREADSHEET_ID];
+    const credentialsPath = options.credentialsPath ??
+        fromFile.credentialsPath ??
+        process.env[ENV_CREDENTIALS];
+    if (!driveRootId) {
+        throw new Error(`Missing required: driveRootId. Set --driveRootId in args, or ${ENV_DRIVE_ROOT_ID}, or config file.`);
+    }
+    return {
+        driveRootId,
+        spreadsheetId: spreadsheetId ?? undefined,
+        credentialsPath: credentialsPath ?? undefined,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,SAAS,CAAC;AAQ3B,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AACnD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,eAAe,GAAG,gCAAgC,CAAC;AASzD,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC;IAChD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACpC,OAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAA2B,IAAI,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,sBAAsB,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc;QACrC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,QAAQ,CAAC,WAAW;QACpB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACjC,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa;QACrB,QAAQ,CAAC,aAAa;QACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAClC,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe;QACvB,QAAQ,CAAC,eAAe;QACxB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE/B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,gEAAgE,iBAAiB,mBAAmB,CACrG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa,EAAE,aAAa,IAAI,SAAS;QACzC,eAAe,EAAE,eAAe,IAAI,SAAS;KAC9C,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Butler MCP - Entry for programmatic use
+ */
+export { runServer } from "./server.js";
+export type { ButlerConfig } from "./config.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+/**
+ * Butler MCP - Entry for programmatic use
+ */
+export { runServer } from "./server.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/scope-guard.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Scope Guard: ensure Drive write targets are under Butler root only
+ */
+export declare class ScopeError extends Error {
+    constructor(message: string);
+}
+/**
+ * Asserts that the given path or fileId is under the Butler root.
+ * - Path: relative path only, no "..", no leading slash.
+ * - fileId: allowed if it equals rootFolderId (same folder).
+ * @throws ScopeError if path escapes or is invalid
+ */
+export declare function assertPathUnderButler(pathOrFileId: string, rootFolderId: string): void;
+//# sourceMappingURL=scope-guard.d.ts.map

package/dist/scope-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-guard.d.ts","sourceRoot":"","sources":["../src/scope-guard.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;gBACvB,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,GACnB,IAAI,CAoBN"}

package/dist/scope-guard.js

@@ -0,0 +1,33 @@
+/**
+ * Scope Guard: ensure Drive write targets are under Butler root only
+ */
+export class ScopeError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ScopeError";
+    }
+}
+/**
+ * Asserts that the given path or fileId is under the Butler root.
+ * - Path: relative path only, no "..", no leading slash.
+ * - fileId: allowed if it equals rootFolderId (same folder).
+ * @throws ScopeError if path escapes or is invalid
+ */
+export function assertPathUnderButler(pathOrFileId, rootFolderId) {
+    if (!pathOrFileId || !pathOrFileId.trim()) {
+        throw new ScopeError("Path or fileId must not be empty (Butler scope).");
+    }
+    // fileId: allow only if it's the root folder itself
+    if (pathOrFileId === rootFolderId) {
+        return;
+    }
+    // Path: must be relative, no ".."
+    const normalized = pathOrFileId.replace(/\\/g, "/").trim();
+    if (normalized.startsWith("/")) {
+        throw new ScopeError("指定されたパスは Butler 配下ではありません（絶対パスは不可）。");
+    }
+    if (normalized.includes("..")) {
+        throw new ScopeError("指定されたパスは Butler 配下ではありません（.. による上位参照は不可）。");
+    }
+}
+//# sourceMappingURL=scope-guard.js.map

package/dist/scope-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-guard.js","sourceRoot":"","sources":["../src/scope-guard.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,YAAoB;IAEpB,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAAC,kDAAkD,CAAC,CAAC;IAC3E,CAAC;IACD,oDAAoD;IACpD,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IACD,kCAAkC;IAClC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAClB,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,2CAA2C,CAC5C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,3 @@
+import type { ButlerConfig } from "./config.js";
+export declare function runServer(config: ButlerConfig): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAShD,wBAAsB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCnE"}

package/dist/server.js

@@ -0,0 +1,40 @@
+/**
+ * MCP Server: stdio transport + tool registration
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { getAuthClients } from "./auth.js";
+import { registerSheetsTools } from "./tools/sheets.js";
+import { registerDriveTools } from "./tools/drive.js";
+import { registerConfigTools } from "./tools/config.js";
+import * as auditService from "./services/audit.js";
+import { findOrCreateTaskSpreadsheet } from "./services/sheets.js";
+export async function runServer(config) {
+    const server = new McpServer({ name: "butler-mcp", version: "0.1.0" }, {});
+    let clientsCache = null;
+    const getClients = () => {
+        if (!clientsCache)
+            clientsCache = getAuthClients(config);
+        return clientsCache;
+    };
+    if (!config.spreadsheetId) {
+        const clients = await getClients();
+        config.spreadsheetId = await findOrCreateTaskSpreadsheet(clients, config.driveRootId);
+    }
+    const auditAppend = async (tool, target, diffSummary, success = true) => {
+        try {
+            const clients = await getClients();
+            await auditService.append(clients, config.driveRootId, tool, target, diffSummary, success);
+        }
+        catch (_) {
+            // audit failure should not break the tool response
+        }
+    };
+    registerSheetsTools(server, config, getClients, auditAppend);
+    registerDriveTools(server, config, getClients, auditAppend);
+    registerConfigTools(server, config, getClients, auditAppend);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    await new Promise(() => { });
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAGjF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAoB;IAClD,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,EACxC,EAAE,CACH,CAAC;IAEF,IAAI,YAAY,GAAgC,IAAI,CAAC;IACrD,MAAM,UAAU,GAAG,GAAyB,EAAE;QAC5C,IAAI,CAAC,YAAY;YAAE,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,aAAa,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,EACvB,IAAY,EACZ,MAAc,EACd,WAAoB,EACpB,OAAO,GAAG,IAAI,EACd,EAAE;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;YACnC,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mDAAmD;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,mBAAmB,CAAC,MAAe,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACtE,kBAAkB,CAAC,MAAe,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACrE,mBAAmB,CAAC,MAAe,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAEtE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/services/audit.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Audit Service: append one line to Butler/history/audit-log.ndjson
+ */
+import type { AuthClients } from "../auth.js";
+export interface AuditEntry {
+    timestamp: string;
+    tool: string;
+    target: string;
+    diffSummary?: string;
+    success: boolean;
+}
+export declare function append(clients: AuthClients, driveRootId: string, tool: string, target: string, diffSummary: string | undefined, success: boolean): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/services/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/services/audit.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9C,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB;AAMD,wBAAsB,MAAM,CAC1B,OAAO,EAAE,WAAW,EACpB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAef"}

package/dist/services/audit.js

@@ -0,0 +1,16 @@
+import { writeFile } from "./drive.js";
+const AUDIT_LOG_PATH = "history/audit-log.ndjson";
+function formatEntry(entry) {
+    return JSON.stringify(entry) + "\n";
+}
+export async function append(clients, driveRootId, tool, target, diffSummary, success) {
+    const entry = {
+        timestamp: new Date().toISOString(),
+        tool,
+        target,
+        diffSummary,
+        success,
+    };
+    await writeFile(clients, driveRootId, AUDIT_LOG_PATH, formatEntry(entry), "append");
+}
+//# sourceMappingURL=audit.js.map

package/dist/services/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/services/audit.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAUlD,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAAoB,EACpB,WAAmB,EACnB,IAAY,EACZ,MAAc,EACd,WAA+B,EAC/B,OAAgB;IAEhB,MAAM,KAAK,GAAe;QACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI;QACJ,MAAM;QACN,WAAW;QACX,OAAO;KACR,CAAC;IACF,MAAM,SAAS,CACb,OAAO,EACP,WAAW,EACX,cAAc,EACd,WAAW,CAAC,KAAK,CAAC,EAClB,QAAQ,CACT,CAAC;AACJ,CAAC"}

package/dist/services/config.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Config Service: getConfigBundle (persona, policies, templates from Drive)
+ */
+import type { AuthClients } from "../auth.js";
+export interface ConfigBundle {
+    persona: Record<string, unknown> & {
+        name?: string;
+    };
+    policies: Record<string, unknown>;
+    templates: {
+        morning: string;
+        next: string;
+        review: string;
+    };
+}
+export declare function getConfigBundle(clients: AuthClients, driveRootId: string): Promise<ConfigBundle>;
+//# sourceMappingURL=config.d.ts.map

package/dist/services/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/services/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI9C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,WAAW,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,CAAC,CAgBvB"}

package/dist/services/config.js

@@ -0,0 +1,20 @@
+import { readFileByPath } from "./drive.js";
+import yaml from "js-yaml";
+export async function getConfigBundle(clients, driveRootId) {
+    const read = (path) => readFileByPath(clients, driveRootId, path);
+    const [personaRaw, policiesRaw, morning, next, review] = await Promise.all([
+        read("config/persona.yml"),
+        read("config/policies.yml"),
+        read("config/templates/morning.md"),
+        read("config/templates/next.md"),
+        read("config/templates/review.md"),
+    ]);
+    const persona = (personaRaw ? yaml.load(personaRaw) : {});
+    const policies = (policiesRaw ? yaml.load(policiesRaw) : {});
+    return {
+        persona: persona ?? {},
+        policies: policies ?? {},
+        templates: { morning: morning ?? "", next: next ?? "", review: review ?? "" },
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/services/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/services/config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,IAAI,MAAM,SAAS,CAAC;AAQ3B,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAoB,EACpB,WAAmB;IAEnB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzE,IAAI,CAAC,oBAAoB,CAAC;QAC1B,IAAI,CAAC,qBAAqB,CAAC;QAC3B,IAAI,CAAC,6BAA6B,CAAC;QACnC,IAAI,CAAC,0BAA0B,CAAC;QAChC,IAAI,CAAC,4BAA4B,CAAC;KACnC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAA6B,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IAClH,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAA6B,CAAC,CAAC,CAAC,EAAE,CAA6B,CAAC;IACtH,OAAO;QACL,OAAO,EAAE,OAAO,IAAI,EAAE;QACtB,QAAQ,EAAE,QAAQ,IAAI,EAAE;QACxB,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE;KAC9E,CAAC;AACJ,CAAC"}

package/dist/services/drive.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Drive Service: search, readFile, writeFile (scope guard enforced)
+ */
+import type { AuthClients } from "../auth.js";
+export declare function search(clients: AuthClients, rootFolderId: string, query?: string): Promise<{
+    id: string;
+    name: string;
+}[]>;
+export declare function readFile(clients: AuthClients, fileId: string): Promise<string>;
+/** Read file by path under root (e.g. "config/persona.yml"). Returns empty string if not found. */
+export declare function readFileByPath(clients: AuthClients, rootFolderId: string, path: string): Promise<string>;
+export type WriteMode = "create" | "replace" | "append";
+export declare function writeFile(clients: AuthClients, rootFolderId: string, path: string, content: string, mode: WriteMode): Promise<void>;
+//# sourceMappingURL=drive.d.ts.map

package/dist/services/drive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drive.d.ts","sourceRoot":"","sources":["../../src/services/drive.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAgB9C,wBAAsB,MAAM,CAC1B,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAUzC;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQpF;AAED,mGAAmG;AACnG,wBAAsB,cAAc,CAClC,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAKjB;AA6CD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAExD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,IAAI,CAAC,CAwBf"}