glasspane-mcp 1.16.4 → 1.19.0

package/README.md

@@ -36,9 +36,13 @@ MCP 客户端配置：
 
 ## What ships in this package / 包里有什么
 
-`dist/index.js` 是 esbuild 单文件产物：`@iterate/kernel`（schema 真源）在发布时
-已捆绑内联，包内不存在指向源码仓库的 `file:` 依赖；`schemas/` 是 kernel schema
-的发布副本，每次 `npm run bundle` 重新同步。
+`dist/index.js` 是 esbuild 单文件产物：已发布的 `iterate-kernel`（schema 真源，devDependency，
+只按 `iterate-kernel/<module>` 子路径引入）在发布时已捆绑内联，包内不存在指向源码仓库的
+`file:` 依赖，也不残留一个裸的 `import "iterate-kernel"`——后者会让装到本机的产物去解析一份
+没人拿这份产物对照过的内核，比 `ERR_MODULE_NOT_FOUND` 安静，但不更安全；发布档的
+bundle-shape 闸专拒这一条。`schemas/` 是内核契约的发布副本，每次 `npm run bundle` 由
+`scripts/bundle-kernel-schemas.mjs` 从**装好的那一份包**重新同步，并核
+manifest 声明 = 装到的 = fork 的 pin 三者同号。
 
 两个入口，各自是什么就按什么用 / two entries, each with one job：
 

package/dist/dispatch.d.ts

@@ -26,7 +26,7 @@ export declare const MCP_PROTOCOL_VERSION: "2025-06-18";
 export declare const SUPPORTED_PROTOCOL_VERSIONS: readonly string[];
 export declare const SERVER_INFO: {
     readonly name: "glasspane-mcp";
-    readonly version: "1.16.4";
+    readonly version: "1.19.0";
 };
 export declare const PARSE_ERROR = -32700;
 export declare const INVALID_REQUEST = -32600;
@@ -92,6 +92,22 @@ export declare class McpServer {
     private asParams;
     private isRequestBody;
     private result;
+    /**
+     * The example for the two `tools/call` **shape** refusals, taken from the list this server
+     * actually answers. A JSON-RPC reader cannot open a source symbol, and an example naming a
+     * tool this surface does not publish would be a second refusal waiting to happen — so the
+     * preference is a published tool that is legal to call with an empty `arguments`.
+     * `test/dispatch.test.mjs` checks every name in this sentence against `tools/list`, and
+     * checks it again on a server deliberately built with a one-tool list.
+     */
+    private callShapeRemedy;
+    /**
+     * The names this server actually answers with, nearest the caller's guess first. Every
+     * name offered here is one `tools/list` just advertised: a suggestion the caller cannot
+     * call is worse than no suggestion, and the point of the sentence is to end the guessing
+     * loop a bare `Unknown tool: gp_acti` left the caller in.
+     */
+    private publishedNamesNear;
     private error;
 }
 /**

package/dist/engine-client.d.ts

@@ -184,6 +184,28 @@ export declare const RESTORE_BASE_DEADLINE_MS = 30000;
 export declare function isReplayUnsafeMethod(method: string): boolean;
 /** The non-replayable methods, for gates that must see the set change on purpose. */
 export declare const REPLAY_UNSAFE_METHOD_NAMES: readonly string[];
+/**
+ * The answer this shell gives when the daemon's error frame carries no remedy at all.
+ *
+ * It used to be one sentence for every method — "check the daemon log (stderr) and retry" —
+ * which made the transport order by words the re-send it refuses by behaviour: `act`,
+ * `restore` and `attach` are the methods {@link REPLAY_UNSAFE_REASONS} exists to keep off
+ * the wire a second time, `slowEngineRemedy` says *do NOT re-issue* for them, and
+ * `writeBacklogRemedy` refuses even to name a probe while one is outstanding. An error
+ * frame is the daemon's answer to *this* request, so the request did reach the service —
+ * and whether the change took effect before the error was raised is a thing no error frame
+ * says, which is exactly why the sentence may not spend that unknown on a second copy.
+ * `snapshot` is the third case and the one a blanket "retry" also got wrong: nothing is
+ * pressed twice, but every accepted copy writes another entry into the daemon's bounded
+ * ring and can evict the baseline an earlier snapshot returned — the one a later restore
+ * still needs. Membership comes from the two lists this file already keeps, so a method
+ * moving between them moves this answer with it.
+ *
+ * `null` is the unattributed case: an id-less frame this client could not tie to a request
+ * it still tracks, where naming a method would be a guess and authorising a re-send on top
+ * of the guess would be worse.
+ */
+export declare function noRemedyFallback(method: string | null): string;
 /**
  * `hello.capabilities` 的第一个读者（2026-10-11）。
  *
@@ -410,6 +432,26 @@ export declare class EngineJsonRpcClient {
      * unexposed; `index.ts` supplies the real list.
      */
     expectedDaemonMethods?: readonly string[]);
+    /**
+     * The state root the daemon named in its own `hello` (additive since 1.15.0), or null
+     * when no handshake answered that key. `null` means "this daemon does not report it" —
+     * never "therefore it is the home default"; callers say which of the two they used.
+     */
+    private helloStateRoot;
+    get reportedStateRoot(): string | null;
+    /**
+     * The version the daemon named in its own `hello`, or null when no handshake on this
+     * connection has reported one.
+     *
+     * This is the *producer's* measurement, and it is what the provider attribution line
+     * states (`providers.ts`'s `attributeCapability`): the verdict an agent is being told
+     * about came out of the daemon's build, not this package's. Read rather than assumed —
+     * `null` means "not measured on this connection", never "therefore it is the shell's
+     * own version", which is the mistake that made an app bundle older than the shell
+     * report a verdict from a build that did not produce it.
+     */
+    private helloVersion;
+    get reportedEngineVersion(): string | null;
     /**
      * Sink for facts that cannot be attached to any request of the caller: a
      * late reply, a frame with an id this client never issued, a daemon that

package/dist/errors.d.ts

@@ -81,4 +81,5 @@ export interface ToolErrorText {
  */
 export declare function formatToolError(code: string, message: string, remedy: string): string;
 export declare function formatToolErrorShape(error: ToolErrorText): string;
+export declare function quoteShellArg(value: string): string;
 //# sourceMappingURL=errors.d.ts.map

package/dist/evidence-report.d.ts

@@ -1,4 +1,4 @@
-import type { EvidencePack } from "@iterate/kernel";
+import type { EvidencePack } from "iterate-kernel/evidence-pack";
 /**
  * What a report may be handed: a validated pack, or the same structure with
  * `schemaVersion` widened so it can carry provenance text