devchain-cli 0.12.4 → 0.13.1

package/dist/server/modules/providers/services/mcp-registration/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/modules/providers/services/mcp-registration/index.ts"],"names":[],"mappings":";;;AAAA,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAS5B,+EAA2E;AAAlE,yIAAA,yBAAyB,OAAA;AAElC,+FAA0F;AAAjF,wJAAA,gCAAgC,OAAA"}

package/dist/server/modules/providers/services/mcp-registration/mcp-registration.port.d.ts

@@ -0,0 +1,20 @@
+import type { Provider } from '../../../storage/models/domain.models';
+import { ProviderAdapterFactory } from '../../adapters';
+import { CliMcpRegistrationAdapter } from './cli-mcp-registration.adapter';
+import { ConfigFileMcpRegistrationAdapter } from './config-file-mcp-registration.adapter';
+import type { McpExecOptions, McpRegisterOptions, McpCommandResult, McpListResult, EnsureRegistrationResult } from './mcp-registration.types';
+export type { McpExecOptions, McpRegisterOptions, McpCommandResult, McpListResult, EnsureRegistrationResult, McpRegistrationAdapter, } from './mcp-registration.types';
+export declare class McpRegistrationPort {
+    private readonly cli;
+    private readonly configFile;
+    private readonly adapterFactory;
+    constructor(cli: CliMcpRegistrationAdapter, configFile: ConfigFileMcpRegistrationAdapter, adapterFactory: ProviderAdapterFactory);
+    register(provider: Provider, options: McpRegisterOptions, execOptions?: McpExecOptions): Promise<McpCommandResult>;
+    list(provider: Provider, execOptions?: McpExecOptions): Promise<McpListResult>;
+    remove(provider: Provider, alias: string, execOptions?: McpExecOptions): Promise<McpCommandResult>;
+    ensure(provider: Provider, options: {
+        endpoint: string;
+        alias: string;
+    }, execOptions?: McpExecOptions): Promise<EnsureRegistrationResult>;
+    private resolveAdapter;
+}

package/dist/server/modules/providers/services/mcp-registration/mcp-registration.port.js

@@ -0,0 +1,47 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpRegistrationPort = void 0;
+const common_1 = require("@nestjs/common");
+const adapters_1 = require("../../adapters");
+const cli_mcp_registration_adapter_1 = require("./cli-mcp-registration.adapter");
+const config_file_mcp_registration_adapter_1 = require("./config-file-mcp-registration.adapter");
+let McpRegistrationPort = class McpRegistrationPort {
+    constructor(cli, configFile, adapterFactory) {
+        this.cli = cli;
+        this.configFile = configFile;
+        this.adapterFactory = adapterFactory;
+    }
+    async register(provider, options, execOptions) {
+        return this.resolveAdapter(provider).register(provider, options, execOptions);
+    }
+    async list(provider, execOptions) {
+        return this.resolveAdapter(provider).list(provider, execOptions);
+    }
+    async remove(provider, alias, execOptions) {
+        return this.resolveAdapter(provider).remove(provider, alias, execOptions);
+    }
+    async ensure(provider, options, execOptions) {
+        return this.resolveAdapter(provider).ensure(provider, options, execOptions);
+    }
+    resolveAdapter(provider) {
+        const adapter = this.adapterFactory.getAdapter(provider.name);
+        return (0, adapters_1.isMcpCli)(adapter) ? this.cli : this.configFile;
+    }
+};
+exports.McpRegistrationPort = McpRegistrationPort;
+exports.McpRegistrationPort = McpRegistrationPort = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [cli_mcp_registration_adapter_1.CliMcpRegistrationAdapter,
+        config_file_mcp_registration_adapter_1.ConfigFileMcpRegistrationAdapter,
+        adapters_1.ProviderAdapterFactory])
+], McpRegistrationPort);
+//# sourceMappingURL=mcp-registration.port.js.map

package/dist/server/modules/providers/services/mcp-registration/mcp-registration.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-registration.port.js","sourceRoot":"","sources":["../../../../../src/modules/providers/services/mcp-registration/mcp-registration.port.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAE5C,6CAAkE;AAClE,iFAA2E;AAC3E,iGAA0F;AAmBnF,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,GAA8B,EAC9B,UAA4C,EAC5C,cAAsC;QAFtC,QAAG,GAAH,GAAG,CAA2B;QAC9B,eAAU,GAAV,UAAU,CAAkC;QAC5C,mBAAc,GAAd,cAAc,CAAwB;IACtD,CAAC;IAEJ,KAAK,CAAC,QAAQ,CACZ,QAAkB,EAClB,OAA2B,EAC3B,WAA4B;QAE5B,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkB,EAAE,WAA4B;QACzD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAkB,EAClB,KAAa,EACb,WAA4B;QAE5B,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAkB,EAClB,OAA4C,EAC5C,WAA4B;QAE5B,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9E,CAAC;IAEO,cAAc,CAAC,QAAkB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAA,mBAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACxD,CAAC;CACF,CAAA;AAvCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAGa,wDAAyB;QAClB,uEAAgC;QAC5B,iCAAsB;GAJ9C,mBAAmB,CAuC/B"}

package/dist/server/modules/providers/services/mcp-registration/mcp-registration.types.d.ts

@@ -0,0 +1,43 @@
+import type { Provider } from '../../../storage/models/domain.models';
+import type { McpServerEntry } from '../../adapters/provider-adapter.interface';
+export interface McpExecOptions {
+    cwd?: string;
+    timeoutMs?: number;
+}
+export interface McpRegisterOptions {
+    endpoint: string;
+    alias?: string;
+    extraArgs?: string[];
+}
+export interface McpCommandResult {
+    success: boolean;
+    message: string;
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+    binaryPath?: string;
+}
+export interface McpListResult {
+    success: boolean;
+    message: string;
+    entries: McpServerEntry[];
+    binaryPath?: string;
+    stdout?: string;
+    stderr?: string;
+}
+export interface EnsureRegistrationResult {
+    success: boolean;
+    action: 'already_configured' | 'fixed_mismatch' | 'added' | 'error';
+    message?: string;
+    endpoint?: string;
+    alias?: string;
+}
+export interface McpRegistrationAdapter {
+    register(provider: Provider, options: McpRegisterOptions, execOptions?: McpExecOptions): Promise<McpCommandResult>;
+    list(provider: Provider, execOptions?: McpExecOptions): Promise<McpListResult>;
+    remove(provider: Provider, alias: string, execOptions?: McpExecOptions): Promise<McpCommandResult>;
+    ensure(provider: Provider, options: {
+        endpoint: string;
+        alias: string;
+    }, execOptions?: McpExecOptions): Promise<EnsureRegistrationResult>;
+}

package/dist/server/modules/providers/services/mcp-registration/mcp-registration.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=mcp-registration.types.js.map

package/dist/server/modules/providers/services/mcp-registration/mcp-registration.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-registration.types.js","sourceRoot":"","sources":["../../../../../src/modules/providers/services/mcp-registration/mcp-registration.types.ts"],"names":[],"mappings":""}

package/dist/server/modules/providers/services/probe-proof.service.d.ts

@@ -1,5 +1,7 @@
+import type { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
 export declare class ProbeProofService {
-    private readonly proofs;
+    private readonly sqlite;
+    constructor(db: BetterSQLite3Database);
     recordProof(providerId: string, binPath: string): void;
     hasValidProof(providerId: string, binPath: string): boolean;
     clearProof(providerId: string): void;

package/dist/server/modules/providers/services/probe-proof.service.js

@@ -5,31 +5,45 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProbeProofService = void 0;
 const common_1 = require("@nestjs/common");
+const db_provider_1 = require("../../storage/db/db.provider");
+const sqlite_raw_1 = require("../../storage/db/sqlite-raw");
 const logger_1 = require("../../../common/logging/logger");
 const logger = (0, logger_1.createLogger)('ProbeProofService');
 let ProbeProofService = class ProbeProofService {
-    constructor() {
-        this.proofs = new Map();
+    constructor(db) {
+        this.sqlite = (0, sqlite_raw_1.getRawSqliteClient)(db);
     }
     recordProof(providerId, binPath) {
-        this.proofs.set(providerId, { binPath, timestamp: Date.now() });
+        this.sqlite
+            .prepare(`INSERT INTO provider_probe_proofs (provider_id, bin_path, recorded_at)
+         VALUES (?, ?, ?)
+         ON CONFLICT(provider_id) DO UPDATE SET bin_path = excluded.bin_path, recorded_at = excluded.recorded_at`)
+            .run(providerId, binPath, Date.now());
         logger.info({ providerId, binPath }, 'Recorded 1M probe proof');
     }
     hasValidProof(providerId, binPath) {
-        const proof = this.proofs.get(providerId);
-        if (!proof)
-            return false;
-        return proof.binPath === binPath;
+        const row = this.sqlite
+            .prepare('SELECT bin_path FROM provider_probe_proofs WHERE provider_id = ?')
+            .get(providerId);
+        return row !== undefined && row.bin_path === binPath;
     }
     clearProof(providerId) {
-        this.proofs.delete(providerId);
+        this.sqlite.prepare('DELETE FROM provider_probe_proofs WHERE provider_id = ?').run(providerId);
     }
 };
 exports.ProbeProofService = ProbeProofService;
 exports.ProbeProofService = ProbeProofService = __decorate([
-    (0, common_1.Injectable)()
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(db_provider_1.DB_CONNECTION)),
+    __metadata("design:paramtypes", [Function])
 ], ProbeProofService);
 //# sourceMappingURL=probe-proof.service.js.map

package/dist/server/modules/providers/services/probe-proof.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"probe-proof.service.js","sourceRoot":"","sources":["../../../../src/modules/providers/services/probe-proof.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAC5C,2DAA8D;AAE9D,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,mBAAmB,CAAC,CAAC;AAe1C,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAAvB;QACY,WAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAsB1D,CAAC;IAnBC,WAAW,CAAC,UAAkB,EAAE,OAAe;QAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAClE,CAAC;IAMD,aAAa,CAAC,UAAkB,EAAE,OAAe;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;IACnC,CAAC;IAGD,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;CACF,CAAA;AAvBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;GACA,iBAAiB,CAuB7B"}
+{"version":3,"file":"probe-proof.service.js","sourceRoot":"","sources":["../../../../src/modules/providers/services/probe-proof.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AAGpD,8DAA6D;AAC7D,4DAAiE;AACjE,2DAA8D;AAE9D,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,mBAAmB,CAAC,CAAC;AAO1C,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAG5B,YAAmC,EAAyB;QAC1D,IAAI,CAAC,MAAM,GAAG,IAAA,+BAAkB,EAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,WAAW,CAAC,UAAkB,EAAE,OAAe;QAC7C,IAAI,CAAC,MAAM;aACR,OAAO,CACN;;iHAEyG,CAC1G;aACA,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAClE,CAAC;IAED,aAAa,CAAC,UAAkB,EAAE,OAAe;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;aACpB,OAAO,CAAC,kEAAkE,CAAC;aAC3E,GAAG,CAAC,UAAU,CAAyB,CAAC;QAC3C,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IACvD,CAAC;IAED,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACjG,CAAC;CACF,CAAA;AA5BY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAIE,WAAA,IAAA,eAAM,EAAC,2BAAa,CAAC,CAAA;;GAHvB,iBAAiB,CA4B7B"}

package/dist/server/modules/{core → providers}/services/provider-mcp-ensure.service.d.ts

@@ -1,12 +1,10 @@
-import { McpProviderRegistrationService } from '../../mcp/services/mcp-provider-registration.service';
+import { McpProviderRegistrationService } from '../../providers/services/mcp-provider-registration.service';
 import { ProviderAdapterFactory } from '../../providers/adapters';
-import { PreflightService } from './preflight.service';
-import { GeminiTrustedFoldersService } from './gemini-trusted-folders.service';
 import type { StorageService } from '../../storage/interfaces/storage.interface';
 import type { Provider } from '../../storage/models/domain.models';
 export type EnsureMcpAction = 'already_configured' | 'fixed_mismatch' | 'added' | 'error';
 export type EnsureMcpWarning = {
-    source: 'trusted_folders' | 'mcp_register' | 'claude_settings' | 'other';
+    source: 'trusted_folders' | 'mcp_register' | 'claude_settings' | 'provisioning' | 'other';
     level: 'info' | 'warn';
     message: string;
     code?: string;
@@ -23,13 +21,10 @@ export declare class ProviderMcpEnsureService {
     private readonly storage;
     private readonly mcpRegistration;
     private readonly adapterFactory;
-    private readonly preflight;
-    private readonly geminiTrustedFolders;
     private ensureLocks;
-    constructor(storage: StorageService, mcpRegistration: McpProviderRegistrationService, adapterFactory: ProviderAdapterFactory, preflight: PreflightService, geminiTrustedFolders: GeminiTrustedFoldersService);
+    constructor(storage: StorageService, mcpRegistration: McpProviderRegistrationService, adapterFactory: ProviderAdapterFactory);
     ensureMcp(provider: Provider, projectPath?: string): Promise<EnsureMcpResult>;
     private doEnsureMcp;
     private doEnsureMcpInternal;
-    private ensureClaudeProjectSettings;
     private validateProjectPath;
 }

package/dist/server/modules/providers/services/provider-mcp-ensure.service.js

@@ -0,0 +1,175 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderMcpEnsureService = void 0;
+const common_1 = require("@nestjs/common");
+const path_1 = require("path");
+const logger_1 = require("../../../common/logging/logger");
+const env_config_1 = require("../../../common/config/env.config");
+const shared_1 = require("@devchain/shared");
+const mcp_provider_registration_service_1 = require("../../providers/services/mcp-provider-registration.service");
+const adapters_1 = require("../../providers/adapters");
+const logger = (0, logger_1.createLogger)('ProviderMcpEnsureService');
+let ProviderMcpEnsureService = class ProviderMcpEnsureService {
+    constructor(storage, mcpRegistration, adapterFactory) {
+        this.storage = storage;
+        this.mcpRegistration = mcpRegistration;
+        this.adapterFactory = adapterFactory;
+        this.ensureLocks = new Map();
+    }
+    async ensureMcp(provider, projectPath) {
+        if (!this.adapterFactory.isSupported(provider.name)) {
+            return {
+                success: false,
+                action: 'error',
+                message: `MCP ensure not supported for provider: ${provider.name}`,
+            };
+        }
+        if (projectPath) {
+            const validationResult = await this.validateProjectPath(projectPath);
+            if (!validationResult.valid) {
+                return {
+                    success: false,
+                    action: 'error',
+                    message: validationResult.message,
+                };
+            }
+        }
+        const lockKey = `${provider.id}:${projectPath ?? 'global'}`;
+        const existingLock = this.ensureLocks.get(lockKey);
+        if (existingLock) {
+            logger.debug({ providerId: provider.id, projectPath, lockKey }, 'Awaiting existing ensure lock');
+            return existingLock;
+        }
+        const promise = this.doEnsureMcp(provider, projectPath);
+        this.ensureLocks.set(lockKey, promise);
+        try {
+            return await promise;
+        }
+        finally {
+            this.ensureLocks.delete(lockKey);
+        }
+    }
+    async doEnsureMcp(provider, projectPath) {
+        try {
+            return await this.doEnsureMcpInternal(provider, projectPath);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error during MCP ensure';
+            logger.error({ error, providerId: provider.id, projectPath }, 'MCP ensure failed with exception');
+            return { success: false, action: 'error', message };
+        }
+    }
+    async doEnsureMcpInternal(provider, projectPath) {
+        const adapter = this.adapterFactory.getAdapter(provider.name);
+        if (!(0, adapters_1.isMcpCli)(adapter) && !projectPath) {
+            return {
+                success: false,
+                action: 'error',
+                message: `Provider ${provider.name} requires a project path for MCP configuration (uses project config file)`,
+            };
+        }
+        const env = (0, env_config_1.getEnvConfig)();
+        const expectedEndpoint = `${shared_1.HostResolver.buildInternalBaseUrl({ host: env.HOST, port: env.PORT })}/mcp`;
+        const expectedAlias = 'devchain';
+        const warnings = [];
+        logger.info({ providerId: provider.id, providerName: provider.name, projectPath }, 'Ensuring MCP configuration');
+        if (projectPath) {
+            const settingsAdapter = this.adapterFactory.getAdapter(provider.name);
+            if ((0, adapters_1.isProjectMcpSettingsCapable)(settingsAdapter)) {
+                try {
+                    await settingsAdapter.ensureProjectSettings(projectPath);
+                }
+                catch (error) {
+                    const msg = error instanceof Error ? error.message : 'Unknown error';
+                    logger.warn({ error, projectPath }, 'Failed to update project settings (non-fatal)');
+                    warnings.push({ source: 'claude_settings', level: 'warn', message: msg });
+                }
+            }
+        }
+        if (projectPath) {
+            try {
+                const provAdapter = this.adapterFactory.getAdapter(provider.name);
+                if ((0, adapters_1.isProjectProvisioningCapable)(provAdapter)) {
+                    const provResult = await provAdapter.provisionProjectPath(projectPath);
+                    for (const w of provResult.warnings) {
+                        warnings.push({ ...w, source: w.source });
+                    }
+                }
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : 'Unknown error';
+                logger.warn({ error, projectPath, providerName: provider.name }, 'Provisioning failed (non-fatal)');
+                warnings.push({ source: 'provisioning', level: 'warn', message: msg });
+            }
+        }
+        const ensureResult = await this.mcpRegistration.ensureRegistration(provider, { endpoint: expectedEndpoint, alias: expectedAlias }, { cwd: projectPath });
+        if (!ensureResult.success) {
+            return {
+                success: false,
+                action: 'error',
+                message: ensureResult.message ?? 'MCP ensure failed',
+                warnings: warnings.length > 0 ? warnings : undefined,
+            };
+        }
+        if (ensureResult.action !== 'already_configured') {
+            const metadata = {
+                mcpConfigured: true,
+                mcpEndpoint: expectedEndpoint,
+                mcpRegisteredAt: new Date().toISOString(),
+            };
+            try {
+                await this.storage.updateProviderMcpMetadata(provider.id, metadata);
+            }
+            catch (error) {
+                logger.warn({ error, providerId: provider.id }, 'Failed to update MCP metadata (non-fatal)');
+            }
+        }
+        return {
+            success: true,
+            action: ensureResult.action,
+            endpoint: expectedEndpoint,
+            alias: expectedAlias,
+            warnings: warnings.length > 0 ? warnings : undefined,
+        };
+    }
+    async validateProjectPath(projectPath) {
+        if (!(0, path_1.isAbsolute)(projectPath)) {
+            logger.warn({ projectPath }, 'Rejected relative project path');
+            return { valid: false, message: 'Project path must be an absolute path' };
+        }
+        const normalized = (0, path_1.normalize)(projectPath);
+        const segments = normalized.split(path_1.sep);
+        if (segments.some((segment) => segment === '..')) {
+            logger.warn({ projectPath, normalized }, 'Rejected path traversal attempt');
+            return { valid: false, message: 'Project path cannot contain path traversal sequences' };
+        }
+        const projects = await this.storage.listProjects({ limit: 1000 });
+        const matchingProject = projects.items.find((p) => p.rootPath === normalized);
+        if (!matchingProject) {
+            logger.warn({ projectPath, normalized }, 'Rejected unregistered project path');
+            return { valid: false, message: 'Project path is not a registered project' };
+        }
+        logger.debug({ projectPath, projectId: matchingProject.id, projectName: matchingProject.name }, 'Project path validated successfully');
+        return { valid: true };
+    }
+};
+exports.ProviderMcpEnsureService = ProviderMcpEnsureService;
+exports.ProviderMcpEnsureService = ProviderMcpEnsureService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)('STORAGE_SERVICE')),
+    __metadata("design:paramtypes", [Object, mcp_provider_registration_service_1.McpProviderRegistrationService,
+        adapters_1.ProviderAdapterFactory])
+], ProviderMcpEnsureService);
+//# sourceMappingURL=provider-mcp-ensure.service.js.map

package/dist/server/modules/providers/services/provider-mcp-ensure.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-mcp-ensure.service.js","sourceRoot":"","sources":["../../../../src/modules/providers/services/provider-mcp-ensure.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+BAAkD;AAClD,2DAA8D;AAC9D,kEAAiE;AACjE,6CAAgD;AAChD,kHAA4G;AAC5G,uDAKkC;AAIlC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,0BAA0B,CAAC,CAAC;AA0BjD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAGnC,YAC6B,OAAwC,EAClD,eAA+C,EAC/C,cAAsC;QAFX,YAAO,GAAP,OAAO,CAAgB;QAClD,oBAAe,GAAf,eAAe,CAAgC;QAC/C,mBAAc,GAAd,cAAc,CAAwB;QALjD,gBAAW,GAAG,IAAI,GAAG,EAAoC,CAAC;IAM/D,CAAC;IAMJ,KAAK,CAAC,SAAS,CAAC,QAAkB,EAAE,WAAoB;QAEtD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,0CAA0C,QAAQ,CAAC,IAAI,EAAE;aACnE,CAAC;QACJ,CAAC;QAGD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACrE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC5B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,gBAAgB,CAAC,OAAO;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAGD,MAAM,OAAO,GAAG,GAAG,QAAQ,CAAC,EAAE,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;QAG5D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CACV,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EACjD,+BAA+B,CAChC,CAAC;YACF,OAAO,YAAY,CAAC;QACtB,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAMO,KAAK,CAAC,WAAW,CAAC,QAAkB,EAAE,WAAoB;QAChE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YAC3F,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,EAC/C,kCAAkC,CACnC,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAKO,KAAK,CAAC,mBAAmB,CAC/B,QAAkB,EAClB,WAAoB;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAA,mBAAQ,EAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,YAAY,QAAQ,CAAC,IAAI,2EAA2E;aAC9G,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAA,yBAAY,GAAE,CAAC;QAC3B,MAAM,gBAAgB,GAAG,GAAG,qBAAY,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QACxG,MAAM,aAAa,GAAG,UAAU,CAAC;QACjC,MAAM,QAAQ,GAAuB,EAAE,CAAC;QAExC,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,EACrE,4BAA4B,CAC7B,CAAC;QAGF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,IAAA,sCAA2B,EAAC,eAAe,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,+CAA+C,CAAC,CAAC;oBACrF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,IAAA,uCAA4B,EAAC,WAAW,CAAC,EAAE,CAAC;oBAC9C,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;oBACvE,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;wBACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAoC,EAAE,CAAC,CAAC;oBAC1E,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACrE,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,EACnD,iCAAiC,CAClC,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAChE,QAAQ,EACR,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE,EACpD,EAAE,GAAG,EAAE,WAAW,EAAE,CACrB,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,mBAAmB;gBACpD,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACjD,MAAM,QAAQ,GAA8B;gBAC1C,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,gBAAgB;gBAC7B,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC1C,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,EAClC,2CAA2C,CAC5C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;IASO,KAAK,CAAC,mBAAmB,CAC/B,WAAmB;QAGnB,IAAI,CAAC,IAAA,iBAAU,EAAC,WAAW,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC/D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QAC5E,CAAC;QAGD,MAAM,UAAU,GAAG,IAAA,gBAAS,EAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,UAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC;QAC3F,CAAC;QAGD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QAE9E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,oCAAoC,CAAC,CAAC;YAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,IAAI,EAAE,EACjF,qCAAqC,CACtC,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF,CAAA;AAtNY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACQ,kEAA8B;QAC/B,iCAAsB;GAN9C,wBAAwB,CAsNpC"}

package/dist/server/modules/providers/services/provider-state-manager.service.d.ts

@@ -0,0 +1,53 @@
+import { StorageService } from '../../storage/interfaces/storage.interface';
+import { Provider } from '../../storage/models/domain.models';
+import { ProbeProofService } from './probe-proof.service';
+import { ProviderProjectSyncService, type SyncResult } from './provider-project-sync.service';
+import { ProbeOutcome } from '../utils/probe-1m';
+import { ProcessExecutor } from '../../terminal/services/process-executor/process-executor.port';
+export type CreateProviderInput = {
+    name: string;
+    binPath?: string | null;
+    mcpEndpoint?: string | null;
+    mcpRegisteredAt?: string | null;
+    autoCompactThreshold?: number | null;
+    oneMillionContextEnabled?: boolean;
+    env: Record<string, string> | null;
+};
+export type AutoCompactResult = {
+    success: boolean;
+    error?: string;
+    errorType?: string;
+};
+export type UpdateProviderRequest = {
+    name?: string;
+    binPath?: string | null;
+    mcpConfigured?: boolean;
+    mcpEndpoint?: string | null;
+    mcpRegisteredAt?: string | null;
+    autoCompactThreshold?: number | null;
+    autoCompactThreshold1m?: number | null;
+    oneMillionContextEnabled?: boolean;
+    env?: Record<string, string> | null;
+};
+export declare class ProviderStateManager {
+    private readonly storage;
+    private readonly probeProofService;
+    private readonly providerProjectSync;
+    private readonly executor;
+    constructor(storage: StorageService, probeProofService: ProbeProofService, providerProjectSync: ProviderProjectSyncService, executor: ProcessExecutor);
+    update(providerId: string, partial: UpdateProviderRequest): Promise<{
+        provider: Provider;
+    }>;
+    enableOneMillion(providerId: string): Promise<Provider>;
+    disableOneMillion(providerId: string): Promise<Provider>;
+    create(input: CreateProviderInput): Promise<{
+        provider: Provider;
+        sync: SyncResult | null;
+        syncError?: string;
+    }>;
+    deleteProvider(id: string): Promise<void>;
+    disableAutoCompact(id: string): Promise<AutoCompactResult>;
+    enableAutoCompact(id: string): Promise<AutoCompactResult>;
+    normalizeBinPath(binPath: string | null | undefined): Promise<string | null>;
+    probe1m(providerId: string): Promise<ProbeOutcome>;
+}