git-doc-mcp 0.1.0

package/dist/worker/process.js

@@ -0,0 +1,222 @@
+/**
+ * Worker process manager.
+ * @module worker/process
+ */
+import * as childProcess from 'node:child_process';
+import * as url from 'node:url';
+import * as path from 'node:path';
+import * as crypto from 'node:crypto';
+// ESM-compatible __dirname
+const __filename = url.fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+/**
+ * Sanitized environment variables to pass to worker.
+ * Only allow specific, safe environment variables.
+ */
+const ALLOWED_ENV_VARS = [
+    'NODE_ENV',
+    'HOME',
+    'USER',
+    'LANG',
+    'LC_ALL',
+    'PATH',
+];
+/**
+ * Default worker options.
+ */
+const DEFAULT_WORKER_OPTIONS = {
+    timeout: 60000,
+    maxRestarts: 2,
+    logger: console.error,
+};
+/**
+ * Worker process manager.
+ * Handles spawning, communication, and lifecycle of worker processes.
+ */
+export class WorkerManager {
+    worker = null;
+    isHealthy = false;
+    pendingRequests = new Map();
+    buffer = '';
+    options;
+    constructor(options = {}) {
+        const { auditLogger, ...rest } = options;
+        this.options = { ...DEFAULT_WORKER_OPTIONS, ...rest, auditLogger };
+    }
+    /**
+   * Spawn a new worker process.
+     */
+    async spawnWorker() {
+        const workerPath = path.join(__dirname, 'worker-entry.js');
+        // Create sanitized environment
+        const sanitizedEnv = {
+            NODE_ENV: 'production',
+        };
+        // Only copy allowed environment variables
+        for (const key of ALLOWED_ENV_VARS) {
+            if (process.env[key] !== undefined) {
+                sanitizedEnv[key] = process.env[key];
+            }
+        }
+        this.worker = childProcess.fork(workerPath, [], {
+            stdio: ['pipe', 'pipe', 'pipe', 'ipc'],
+            env: sanitizedEnv,
+        });
+        this.isHealthy = true;
+        this.buffer = '';
+        // Handle stdout (JSON responses)
+        this.worker.stdout?.on('data', (data) => {
+            this.handleStdout(data);
+        });
+        // Handle stderr (logs)
+        this.worker.stderr?.on('data', (data) => {
+            this.options.logger('info', data.toString());
+        });
+        // Handle process exit
+        this.worker.on('exit', (code, signal) => {
+            this.isHealthy = false;
+            this.options.logger('warn', `Worker exited: code=${code}, signal=${signal}`);
+            // Reject all pending requests
+            for (const pending of this.pendingRequests.values()) {
+                clearTimeout(pending.timeoutId);
+                pending.reject(new Error('Worker process crashed'));
+            }
+            this.pendingRequests.clear();
+        });
+        // Handle errors
+        this.worker.on('error', (error) => {
+            this.isHealthy = false;
+            this.options.logger('error', `Worker error: ${error.message}`);
+        });
+        // Wait for worker to be ready
+        await this.pingWorker();
+    }
+    /**
+     * Handle stdout data from worker.
+     */
+    handleStdout(data) {
+        this.buffer += data.toString();
+        // Process complete lines (newline-delimited JSON)
+        const lines = this.buffer.split('\n');
+        this.buffer = lines.pop() ?? '';
+        for (const line of lines) {
+            if (line.trim()) {
+                this.handleResponse(line);
+            }
+        }
+    }
+    /**
+     * Handle a response from the worker.
+     */
+    handleResponse(line) {
+        try {
+            const parsed = JSON.parse(line);
+            // Handle audit messages from worker (forwarded via WorkerAuditProxy)
+            if (parsed.type === 'audit' && parsed.event && this.options.auditLogger) {
+                this.options.auditLogger.log(parsed.event);
+                return;
+            }
+            const response = parsed;
+            const pending = this.pendingRequests.get(response.id);
+            if (pending) {
+                clearTimeout(pending.timeoutId);
+                this.pendingRequests.delete(response.id);
+                pending.resolve(response);
+            }
+        }
+        catch (error) {
+            this.options.logger('error', `Failed to parse response: ${line}`);
+        }
+    }
+    /**
+     * Send a request to the worker.
+     */
+    sendRequest(request) {
+        return new Promise((resolve, reject) => {
+            if (!this.worker || !this.isHealthy) {
+                reject(new Error('Worker not available'));
+                return;
+            }
+            const timeoutId = setTimeout(() => {
+                this.pendingRequests.delete(request.id);
+                // Kill the worker on timeout
+                this.options.logger('warn', `Request ${request.id} timed out, killing worker`);
+                this.killWorker();
+                reject(new Error('Request timeout'));
+            }, this.options.timeout);
+            this.pendingRequests.set(request.id, { resolve, reject, timeoutId });
+            // Send request via stdin
+            const json = JSON.stringify(request) + '\n';
+            this.worker.stdin?.write(json);
+        });
+    }
+    /**
+     * Kill the worker process.
+     */
+    killWorker() {
+        if (this.worker) {
+            this.isHealthy = false;
+            this.worker.kill('SIGKILL');
+            this.worker = null;
+        }
+    }
+    /**
+     * Ping the worker to check if it's alive.
+     */
+    async pingWorker() {
+        const request = {
+            id: crypto.randomUUID(),
+            type: 'ping',
+        };
+        const response = await this.sendRequest(request);
+        if (response.type !== 'pong') {
+            throw new Error('Worker ping failed');
+        }
+    }
+    /**
+     * Execute an action in the worker.
+     */
+    async executeAction(request) {
+        let attempts = 0;
+        const maxAttempts = this.options.maxRestarts + 1;
+        while (attempts < maxAttempts) {
+            try {
+                // Ensure worker is running
+                if (!this.worker || !this.isHealthy) {
+                    await this.spawnWorker();
+                }
+                return await this.sendRequest(request);
+            }
+            catch (error) {
+                attempts++;
+                this.isHealthy = false;
+                if (attempts >= maxAttempts) {
+                    throw error;
+                }
+                this.options.logger('warn', `Worker failed, restarting... (attempt ${attempts})`);
+            }
+        }
+        throw new Error('Worker failed after maximum restarts');
+    }
+    /**
+     * Shutdown the worker.
+     */
+    async shutdown() {
+        if (this.worker) {
+            const request = {
+                id: crypto.randomUUID(),
+                type: 'shutdown',
+            };
+            try {
+                await this.sendRequest(request);
+            }
+            catch {
+                // Ignore shutdown errors
+            }
+            this.worker.kill();
+            this.worker = null;
+            this.isHealthy = false;
+        }
+    }
+}
+//# sourceMappingURL=process.js.map

package/dist/worker/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/worker/process.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAItC,2BAA2B;AAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C;;;GAGG;AACH,MAAM,gBAAgB,GAAG;IACvB,UAAU;IACV,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;CACP,CAAC;AAgBF;;GAEG;AACH,MAAM,sBAAsB,GAAiD;IAC3E,OAAO,EAAE,KAAK;IACd,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,KAAK;CACtB,CAAC;AAWF;;;GAGG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,GAAqC,IAAI,CAAC;IAChD,SAAS,GAAG,KAAK,CAAC;IAClB,eAAe,GAAgC,IAAI,GAAG,EAAE,CAAC;IACzD,MAAM,GAAG,EAAE,CAAC;IACZ,OAAO,CAA+E;IAE9F,YAAY,UAAyB,EAAE;QACrC,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAE3D,+BAA+B;QAC/B,MAAM,YAAY,GAA2B;YAC3C,QAAQ,EAAE,YAAY;SACvB,CAAC;QAEF,0CAA0C;QAC1C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBACnC,YAAY,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAW,CAAC;YACjD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE;YAC9C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;YACtC,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QAEjB,iCAAiC;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC9C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,sBAAsB;QACtB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC;YAE7E,8BAA8B;YAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpD,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,gBAAgB;QAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,8BAA8B;QAC9B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAE/B,kDAAkD;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,IAAY;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEhC,qEAAqE;YACrE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAwB,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAEtD,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACzC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAsB;QACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAExC,6BAA6B;gBAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC,EAAE,4BAA4B,CAAC,CAAC;gBAC/E,IAAI,CAAC,UAAU,EAAE,CAAC;gBAElB,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAErE,yBAAyB;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,OAAO,GAAkB;YAC7B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,IAAI,EAAE,MAAM;SACb,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAsB;QACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QAEjD,OAAO,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,2BAA2B;gBAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACpC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,EAAE,CAAC;gBACX,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBAEvB,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;oBAC5B,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,yCAAyC,QAAQ,GAAG,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAkB;gBAC7B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,IAAI,EAAE,UAAU;aACjB,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;CACF"}

package/dist/worker/protocol.d.ts

@@ -0,0 +1,83 @@
+/**
+ * IPC protocol for worker process communication.
+ * @module worker/protocol
+ */
+/**
+ * Tool result type.
+ */
+export interface CallToolResult {
+    content: Array<{
+        type: 'text';
+        text: string;
+    } | {
+        type: 'image';
+        data: string;
+        mimeType: string;
+    }>;
+    isError?: boolean;
+}
+/**
+ * Worker request from main process.
+ */
+export interface WorkerRequest {
+    /** UUID for correlation */
+    id: string;
+    /** Request type */
+    type: 'execute' | 'ping' | 'shutdown';
+    /** Execute payload */
+    payload?: {
+        actionUrl: string;
+        actionCode: string;
+        input: unknown;
+        secrets: Record<string, string>;
+        timeout: number;
+        manifest: {
+            name: string;
+            version: string;
+        };
+        secretScopes: Record<string, string[]>;
+        /** Memory limit in bytes for sandbox isolate. Optional for backward compat. */
+        memoryLimit?: number;
+    };
+}
+/**
+ * Worker response to main process.
+ */
+export interface WorkerResponse {
+    /** Matches request ID */
+    id: string;
+    /** Response type */
+    type: 'result' | 'error' | 'pong';
+    /** Tool result (if successful) */
+    result?: CallToolResult;
+    /** Error details (if failed) */
+    error?: {
+        code: 'TIMEOUT' | 'MEMORY' | 'VALIDATION' | 'EXECUTION' | 'UNKNOWN';
+        message: string;
+    };
+}
+/**
+ * Error codes for worker errors.
+ */
+export type WorkerErrorCode = 'TIMEOUT' | 'MEMORY' | 'VALIDATION' | 'EXECUTION' | 'UNKNOWN';
+/**
+ * Create a worker error response.
+ */
+export declare function createErrorResponse(id: string, code: WorkerErrorCode, message: string): WorkerResponse;
+/**
+ * Create a worker success response.
+ */
+export declare function createSuccessResponse(id: string, result: CallToolResult): WorkerResponse;
+/**
+ * Create a pong response.
+ */
+export declare function createPongResponse(id: string): WorkerResponse;
+/**
+ * Parse a worker request from JSON.
+ */
+export declare function parseWorkerRequest(data: string): WorkerRequest | null;
+/**
+ * Serialize a worker response to JSON.
+ */
+export declare function serializeWorkerResponse(response: WorkerResponse): string;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/worker/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/worker/protocol.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnG,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IACtC,sBAAsB;IACtB,OAAO,CAAC,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,OAAO,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,+EAA+E;QAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;IAClC,kCAAkC;IAClC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,gCAAgC;IAChC,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;QACpE,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5F;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM,GACd,cAAc,CAMhB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,GACrB,cAAc,CAMhB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,CAK7D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAUrE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAExE"}

package/dist/worker/protocol.js

@@ -0,0 +1,55 @@
+/**
+ * IPC protocol for worker process communication.
+ * @module worker/protocol
+ */
+/**
+ * Create a worker error response.
+ */
+export function createErrorResponse(id, code, message) {
+    return {
+        id,
+        type: 'error',
+        error: { code, message },
+    };
+}
+/**
+ * Create a worker success response.
+ */
+export function createSuccessResponse(id, result) {
+    return {
+        id,
+        type: 'result',
+        result,
+    };
+}
+/**
+ * Create a pong response.
+ */
+export function createPongResponse(id) {
+    return {
+        id,
+        type: 'pong',
+    };
+}
+/**
+ * Parse a worker request from JSON.
+ */
+export function parseWorkerRequest(data) {
+    try {
+        const parsed = JSON.parse(data);
+        if (typeof parsed.id === 'string' && typeof parsed.type === 'string') {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Serialize a worker response to JSON.
+ */
+export function serializeWorkerResponse(response) {
+    return JSON.stringify(response);
+}
+//# sourceMappingURL=protocol.js.map

package/dist/worker/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/worker/protocol.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyDH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAU,EACV,IAAqB,EACrB,OAAe;IAEf,OAAO;QACL,EAAE;QACF,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAU,EACV,MAAsB;IAEtB,OAAO;QACL,EAAE;QACF,IAAI,EAAE,QAAQ;QACd,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO;QACL,EAAE;QACF,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrE,OAAO,MAAuB,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAwB;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/worker/worker-entry.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Worker process entry point.
+ * Handles action execution in an isolated process.
+ * @module worker/worker-entry
+ */
+import { WorkerRequest, WorkerResponse } from './protocol.js';
+import type { AuditEvent, AuditLogger } from '../audit/logger.js';
+/**
+ * Audit proxy that sends structured audit events to the main process via stdout.
+ * The main process's WorkerManager intercepts these messages (type: 'audit')
+ * and routes them to the single AuditLogger instance.
+ *
+ * This avoids file write race conditions - only the main process writes to disk.
+ */
+export declare class WorkerAuditProxy implements AuditLogger {
+    log(event: AuditEvent): void;
+    logFetch(url: string, status?: number, duration?: number, manifestName?: string): void;
+    logRedirect(from: string, to: string, manifestName?: string): void;
+    logSecretAccess(secretName: string, url: string, allowed: boolean, manifestName?: string): void;
+    logActionStart(actionName: string, manifestName?: string): void;
+    logActionEnd(actionName: string, status: string, duration_ms: number, manifestName?: string): void;
+    logActionLog(level: string, message: string, manifestName?: string): void;
+    logError(message: string, details?: Record<string, unknown>, manifestName?: string): void;
+    close(): Promise<void>;
+}
+/**
+ * Handle a worker request.
+ */
+export declare function handleRequest(request: WorkerRequest, auditLogger?: AuditLogger): Promise<WorkerResponse>;
+//# sourceMappingURL=worker-entry.d.ts.map

package/dist/worker/worker-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-entry.d.ts","sourceRoot":"","sources":["../../src/worker/worker-entry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,aAAa,EAAE,cAAc,EAAkE,MAAM,eAAe,CAAC;AAC9H,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUlE;;;;;;GAMG;AACH,qBAAa,gBAAiB,YAAW,WAAW;IAClD,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAI5B,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IAItF,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlE,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IAI/F,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IAI/D,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IAIzE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IAInF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAgDD;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAmD9G"}

package/dist/worker/worker-entry.js

@@ -0,0 +1,136 @@
+/**
+ * Worker process entry point.
+ * Handles action execution in an isolated process.
+ * @module worker/worker-entry
+ */
+import * as readline from 'node:readline';
+import { executeAction } from '../sandbox/executor.js';
+import { createPongResponse, createSuccessResponse, createErrorResponse } from './protocol.js';
+/**
+ * Audit proxy that sends structured audit events to the main process via stdout.
+ * The main process's WorkerManager intercepts these messages (type: 'audit')
+ * and routes them to the single AuditLogger instance.
+ *
+ * This avoids file write race conditions - only the main process writes to disk.
+ */
+export class WorkerAuditProxy {
+    log(event) {
+        console.log(JSON.stringify({ type: 'audit', event }));
+    }
+    logFetch(url, status, duration, manifestName) {
+        this.log({ timestamp: new Date().toISOString(), event: 'fetch', url, status: status?.toString(), duration_ms: duration, manifestName });
+    }
+    logRedirect(from, to, manifestName) {
+        this.log({ timestamp: new Date().toISOString(), event: 'redirect', url: to, details: { from }, manifestName });
+    }
+    logSecretAccess(secretName, url, allowed, manifestName) {
+        this.log({ timestamp: new Date().toISOString(), event: 'secret-access', secretName, url, status: allowed ? 'allowed' : 'denied', manifestName });
+    }
+    logActionStart(actionName, manifestName) {
+        this.log({ timestamp: new Date().toISOString(), event: 'action-start', actionName, manifestName });
+    }
+    logActionEnd(actionName, status, duration_ms, manifestName) {
+        this.log({ timestamp: new Date().toISOString(), event: 'action-end', actionName, status, duration_ms, manifestName });
+    }
+    logActionLog(level, message, manifestName) {
+        this.log({ timestamp: new Date().toISOString(), event: 'action-log', status: level, details: { message }, manifestName });
+    }
+    logError(message, details, manifestName) {
+        this.log({ timestamp: new Date().toISOString(), event: 'error', details: { message, ...details }, manifestName });
+    }
+    async close() {
+        // No-op: the worker proxy has no resources to clean up
+    }
+}
+/**
+ * Main worker loop.
+ * Reads JSON requests from stdin, executes actions, writes responses to stdout.
+ */
+async function main() {
+    const auditProxy = new WorkerAuditProxy();
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: false,
+    });
+    rl.on('line', async (line) => {
+        let request;
+        try {
+            request = JSON.parse(line);
+        }
+        catch {
+            auditProxy.logError('Invalid JSON from main process', { line: line.substring(0, 200) });
+            return;
+        }
+        try {
+            const response = await handleRequest(request, auditProxy);
+            console.log(JSON.stringify(response));
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            auditProxy.logError('Worker request failed', { error: message });
+            const response = createErrorResponse(request.id, 'EXECUTION', message);
+            console.log(JSON.stringify(response));
+        }
+    });
+    // Handle shutdown
+    process.on('SIGTERM', () => {
+        rl.close();
+        process.exit(0);
+    });
+    process.on('SIGINT', () => {
+        rl.close();
+        process.exit(0);
+    });
+}
+/**
+ * Handle a worker request.
+ */
+export async function handleRequest(request, auditLogger) {
+    switch (request.type) {
+        case 'ping':
+            return createPongResponse(request.id);
+        case 'shutdown':
+            // Exit after sending response
+            setTimeout(() => process.exit(0), 100);
+            return createSuccessResponse(request.id, { content: [{ type: 'text', text: 'Shutting down' }] });
+        case 'execute': {
+            const payload = request.payload;
+            if (!payload) {
+                return createErrorResponse(request.id, 'VALIDATION', 'Missing payload');
+            }
+            try {
+                const manifest = {
+                    name: payload.manifest.name,
+                    version: payload.manifest.version,
+                };
+                const memoryLimit = payload.memoryLimit ?? 128 * 1024 * 1024;
+                const result = await executeAction(payload.actionCode, payload.input, {
+                    manifest,
+                    secrets: payload.secrets ?? {},
+                    secretScopes: payload.secretScopes ?? {},
+                    timeout: payload.timeout ?? 60000,
+                    auditLogger,
+                }, {
+                    memoryLimit,
+                    cpuTimeLimit: 30000,
+                    wallTimeLimit: payload.timeout ?? 60000,
+                });
+                return createSuccessResponse(request.id, result);
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                auditLogger?.logError('Worker execution failed', { error: message });
+                return createErrorResponse(request.id, 'EXECUTION', message);
+            }
+        }
+        default:
+            return createErrorResponse(request.id, 'UNKNOWN', `Unknown request type: ${request.type}`);
+    }
+}
+// Start worker
+main().catch((error) => {
+    console.error('Worker error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=worker-entry.js.map

package/dist/worker/worker-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-entry.js","sourceRoot":"","sources":["../../src/worker/worker-entry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAiC,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAW9H;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IAC3B,GAAG,CAAC,KAAiB;QACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,MAAe,EAAE,QAAiB,EAAE,YAAqB;QAC7E,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1I,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,EAAU,EAAE,YAAqB;QACzD,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IACjH,CAAC;IAED,eAAe,CAAC,UAAkB,EAAE,GAAW,EAAE,OAAgB,EAAE,YAAqB;QACtF,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IACnJ,CAAC;IAED,cAAc,CAAC,UAAkB,EAAE,YAAqB;QACtD,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,YAAY,CAAC,UAAkB,EAAE,MAAc,EAAE,WAAmB,EAAE,YAAqB;QACzF,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,OAAe,EAAE,YAAqB;QAChE,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5H,CAAC;IAED,QAAQ,CAAC,OAAe,EAAE,OAAiC,EAAE,YAAqB;QAChF,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IACpH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,uDAAuD;IACzD,CAAC;CACF;AAED;;;GAGG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAE1C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;QACnC,IAAI,OAAsB,CAAC;QAE3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,QAAQ,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,UAAU,CAAC,QAAQ,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAmB,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB,EAAE,WAAyB;IACnF,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAExC,KAAK,UAAU;YACb,8BAA8B;YAC9B,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;QAEnG,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;YAC1E,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAuB;oBACnC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;oBAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;iBAClC,CAAC;gBAEF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;gBAC7D,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,KAAK,EACb;oBACE,QAAQ;oBACR,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;oBAC9B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;oBACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;oBACjC,WAAW;iBACZ,EACD;oBACE,WAAW;oBACX,YAAY,EAAE,KAAK;oBACnB,aAAa,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;iBACxC,CACF,CAAC;gBAEF,OAAO,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,WAAW,EAAE,QAAQ,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBACrE,OAAO,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED;YACE,OAAO,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,yBAA0B,OAA4B,CAAC,IAAI,EAAE,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED,eAAe;AACf,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "git-doc-mcp",
+  "version": "0.1.0",
+  "description": "Turn any manifest URL into a fully-functional MCP server",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "claude",
+    "llm"
+  ],
+  "author": "",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "bin": {
+    "git-doc-mcp": "./dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist",
+    "dev": "tsc --watch"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "commander": "^12.0.0",
+    "isolated-vm": "^5.0.0",
+    "js-yaml": "^4.1.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^2.1.9",
+    "typescript": "^5.7.0",
+    "vitest": "^2.0.0"
+  }
+}