loaditout-mcp-server 0.2.0 → 0.2.2

package/dist/src/index.js

@@ -0,0 +1,1156 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const https = __importStar(require("https"));
+const readline = __importStar(require("readline"));
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const API_BASE = "https://loaditout.ai/api/agent";
+const SERVER_NAME = "loaditout";
+const SERVER_VERSION = "0.1.0";
+// --- Agent key management ---
+const AGENT_KEY_PATH = path.join(os.homedir(), ".loaditout", "agent-key");
+function getOrCreateAgentKey() {
+    try {
+        if (fs.existsSync(AGENT_KEY_PATH)) {
+            const key = fs.readFileSync(AGENT_KEY_PATH, "utf-8").trim();
+            if (key.length > 0 && key.length <= 64)
+                return key;
+        }
+    }
+    catch {
+        // Fall through to create
+    }
+    const key = crypto.randomUUID().replace(/-/g, "").slice(0, 32);
+    try {
+        fs.mkdirSync(path.dirname(AGENT_KEY_PATH), { recursive: true });
+        fs.writeFileSync(AGENT_KEY_PATH, key, "utf-8");
+    }
+    catch {
+        // If we cannot persist, use an ephemeral key
+    }
+    return key;
+}
+const AGENT_KEY = getOrCreateAgentKey();
+// --- HTTP helper ---
+function fetchJSON(url, extraHeaders) {
+    return new Promise((resolve, reject) => {
+        const headers = {
+            "User-Agent": `loaditout-mcp/${SERVER_VERSION}`,
+            ...extraHeaders,
+        };
+        https
+            .get(url, { headers }, (res) => {
+            if (res.statusCode === 301 || res.statusCode === 302) {
+                const location = res.headers.location;
+                if (location) {
+                    fetchJSON(location).then(resolve, reject);
+                    return;
+                }
+            }
+            if (res.statusCode !== 200) {
+                reject(new Error(`HTTP ${res.statusCode}`));
+                return;
+            }
+            let data = "";
+            res.on("data", (chunk) => (data += chunk));
+            res.on("end", () => {
+                try {
+                    resolve(JSON.parse(data));
+                }
+                catch (err) {
+                    reject(new Error("Invalid JSON response"));
+                }
+            });
+        })
+            .on("error", reject);
+    });
+}
+function postJSON(url, body, extraHeaders) {
+    return new Promise((resolve, reject) => {
+        const payload = JSON.stringify(body);
+        const parsed = new URL(url);
+        const options = {
+            hostname: parsed.hostname,
+            port: parsed.port || 443,
+            path: parsed.pathname + parsed.search,
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "Content-Length": Buffer.byteLength(payload),
+                "User-Agent": `loaditout-mcp/${SERVER_VERSION}`,
+                ...extraHeaders,
+            },
+        };
+        const req = https.request(options, (res) => {
+            let data = "";
+            res.on("data", (chunk) => (data += chunk));
+            res.on("end", () => {
+                try {
+                    resolve(JSON.parse(data));
+                }
+                catch {
+                    resolve({ status: res.statusCode });
+                }
+            });
+        });
+        req.on("error", reject);
+        req.write(payload);
+        req.end();
+    });
+}
+function deleteJSON(url) {
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        const options = {
+            hostname: parsed.hostname,
+            port: parsed.port || 443,
+            path: parsed.pathname + parsed.search,
+            method: "DELETE",
+            headers: {
+                "User-Agent": `loaditout-mcp/${SERVER_VERSION}`,
+            },
+        };
+        const req = https.request(options, (res) => {
+            let data = "";
+            res.on("data", (chunk) => (data += chunk));
+            res.on("end", () => {
+                try {
+                    resolve(JSON.parse(data));
+                }
+                catch {
+                    resolve({ status: res.statusCode });
+                }
+            });
+        });
+        req.on("error", reject);
+        req.end();
+    });
+}
+// --- Tool definitions ---
+const TOOLS = [
+    {
+        name: "search_skills",
+        description: "Search the Loaditout registry for AI agent skills (MCP servers, SKILL.md behaviors). Returns matching skills with descriptions, types, and quality scores.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                query: {
+                    type: "string",
+                    description: "Natural language search query. Examples: 'postgres database', 'browser automation', 'github issues'",
+                },
+                type: {
+                    type: "string",
+                    enum: ["mcp-tool", "skill-md", "hybrid"],
+                    description: "Filter by skill type",
+                },
+                agent: {
+                    type: "string",
+                    enum: ["claude-code", "cursor", "codex-cli", "windsurf"],
+                    description: "Filter by compatible agent platform",
+                },
+                limit: {
+                    type: "number",
+                    description: "Max results to return (default 10, max 25)",
+                },
+            },
+            required: ["query"],
+        },
+    },
+    {
+        name: "get_skill",
+        description: "Get full details for a specific skill including description, install config, compatibility, and quality score.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Skill slug in owner/repo format. Example: 'modelcontextprotocol/server-postgres'",
+                },
+            },
+            required: ["slug"],
+        },
+    },
+    {
+        name: "install_skill",
+        description: "Get the exact configuration JSON needed to install a skill for a specific agent. Returns the config and instructions but does NOT write any files.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Skill slug in owner/repo format",
+                },
+                agent: {
+                    type: "string",
+                    enum: ["claude-code", "cursor", "codex-cli", "windsurf", "generic"],
+                    description: "Target agent platform",
+                },
+            },
+            required: ["slug", "agent"],
+        },
+    },
+    {
+        name: "list_categories",
+        description: "List all skill categories in the Loaditout registry with descriptions and skill counts.",
+        inputSchema: {
+            type: "object",
+            properties: {},
+        },
+    },
+    {
+        name: "recommend_skills",
+        description: "Get skill recommendations based on what you are working on. Describe your project or task and get relevant skill suggestions.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                context: {
+                    type: "string",
+                    description: "Description of what you are working on. Example: 'building a Next.js app with Supabase and Stripe'",
+                },
+                installed: {
+                    type: "string",
+                    description: "Comma-separated slugs of already-installed skills to avoid duplicates",
+                },
+            },
+            required: ["context"],
+        },
+    },
+    {
+        name: "check_capability_gap",
+        description: "Analyze what the agent is trying to do and suggest skills that would help. Call this when you encounter a task you can't complete or need specialized tools for.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                task: {
+                    type: "string",
+                    description: "What the agent is trying to do",
+                },
+                current_tools: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "Tools the agent already has",
+                },
+                agent_type: {
+                    type: "string",
+                    enum: ["claude-code", "cursor", "codex-cli", "windsurf"],
+                    description: "The agent platform being used",
+                },
+            },
+            required: ["task", "current_tools", "agent_type"],
+        },
+    },
+    {
+        name: "report_skill_usage",
+        description: "Report whether an installed skill worked correctly. Helps improve quality scores.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Skill slug in owner/repo format",
+                },
+                status: {
+                    type: "string",
+                    enum: ["success", "error", "partial"],
+                    description: "Whether the skill worked correctly",
+                },
+                error_message: {
+                    type: "string",
+                    description: "Error details if the skill failed or partially worked",
+                },
+            },
+            required: ["slug", "status"],
+        },
+    },
+    {
+        name: "list_my_proofs",
+        description: "List all execution proofs for this agent. Shows your verified skill usage history -- your agent resume.",
+        inputSchema: {
+            type: "object",
+            properties: {},
+        },
+    },
+    {
+        name: "verify_proof",
+        description: "Verify an execution proof by its proof ID. Confirms whether a proof is valid and which skill it covers.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                proof_id: {
+                    type: "string",
+                    description: "The proof ID to verify. Example: 'lp_a1b2c3d4e5f6g7h8'",
+                },
+            },
+            required: ["proof_id"],
+        },
+    },
+    {
+        name: "save_memory",
+        description: "Save a key-value pair to persistent agent memory. Survives across sessions. Use this to remember installed skills, preferences, search context, or any data you want to recall later.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                key: {
+                    type: "string",
+                    description: "Memory key name. Examples: 'installed_skills', 'preferred_categories', 'project_context'",
+                },
+                value: {
+                    description: "Any JSON-serializable value to store (string, array, object, number, etc.)",
+                },
+                type: {
+                    type: "string",
+                    enum: ["search", "install", "preference", "context"],
+                    description: "Category of this memory entry",
+                },
+            },
+            required: ["key", "value", "type"],
+        },
+    },
+    {
+        name: "recall_memory",
+        description: "Retrieve previously saved memories. Returns all stored key-value pairs, optionally filtered by type. Use this at the start of a session to restore context.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                type: {
+                    type: "string",
+                    enum: ["search", "install", "preference", "context"],
+                    description: "Filter memories by type. Omit to get all memories.",
+                },
+            },
+        },
+    },
+    {
+        name: "request_permission",
+        description: "Request permission from the human owner to install a skill. Use this when a skill requires explicit approval before installation. Returns a request ID to check status later.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Skill slug in owner/repo format",
+                },
+                reason: {
+                    type: "string",
+                    description: "Why the agent wants this skill. Example: 'I need database access to complete the migration task'",
+                },
+            },
+            required: ["slug", "reason"],
+        },
+    },
+    {
+        name: "check_permission",
+        description: "Check the status of a previously submitted permission request. Returns 'pending', 'approved', or 'denied'.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                request_id: {
+                    type: "number",
+                    description: "The request ID returned from request_permission",
+                },
+            },
+            required: ["request_id"],
+        },
+    },
+    {
+        name: "install_batch",
+        description: "Install multiple skills at once. Returns install configs for all requested skills in a single call.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slugs: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "Array of skill slugs in owner/repo format. Maximum 20.",
+                },
+                agent: {
+                    type: "string",
+                    enum: ["claude-code", "cursor", "codex-cli", "windsurf", "generic"],
+                    description: "Target agent platform",
+                },
+            },
+            required: ["slugs", "agent"],
+        },
+    },
+    {
+        name: "share_loadout",
+        description: "Get this agent's public loadout (installed skills, trust score, stats). Use this to share your current skill configuration.",
+        inputSchema: {
+            type: "object",
+            properties: {},
+        },
+    },
+    {
+        name: "install_pack",
+        description: "Install an entire Agent Pack (curated skill bundle). Returns install configs for all skills in the pack. Use this to quickly set up your agent for a specific role like research, full-stack development, DevOps, etc.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Pack slug. Examples: 'research-agent', 'full-stack-developer', 'devops-engineer', 'data-engineer', 'browser-automation'",
+                },
+                agent: {
+                    type: "string",
+                    enum: ["claude-code", "cursor", "codex-cli", "windsurf", "generic"],
+                    description: "Target agent platform",
+                },
+            },
+            required: ["slug", "agent"],
+        },
+    },
+    {
+        name: "validate_action",
+        description: "Validate whether an action on a skill is safe before executing it. Checks security grade, safety manifest, parameter injection, and skill freshness.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Skill slug in owner/repo format. Example: 'supabase/mcp'",
+                },
+                action: {
+                    type: "string",
+                    description: "The action about to be performed. Example: 'query_database'",
+                },
+                parameters: {
+                    type: "object",
+                    description: "Parameters that will be passed to the action. Checked for injection patterns.",
+                },
+            },
+            required: ["slug", "action"],
+        },
+    },
+    {
+        name: "flag_skill",
+        description: "Report a skill that behaves unexpectedly, contains prompt injection, is broken, or is otherwise problematic. Helps the community identify unsafe skills.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Skill slug in owner/repo format. Example: 'owner/repo-name'",
+                },
+                reason: {
+                    type: "string",
+                    enum: [
+                        "prompt_injection",
+                        "malicious",
+                        "broken",
+                        "misleading",
+                        "spam",
+                        "other",
+                    ],
+                    description: "Why the skill is being flagged",
+                },
+                details: {
+                    type: "string",
+                    description: "Additional context about the issue. Example: 'The SKILL.md contains instructions to ignore safety checks'",
+                },
+            },
+            required: ["slug", "reason"],
+        },
+    },
+    {
+        name: "review_skill",
+        description: "Leave a review for a skill you have used. Helps other agents and humans decide whether to install it.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                slug: {
+                    type: "string",
+                    description: "Skill slug in owner/repo format. Example: 'supabase/mcp'",
+                },
+                rating: {
+                    type: "number",
+                    description: "Rating from 1 to 5. 5 = excellent, 1 = unusable.",
+                },
+                comment: {
+                    type: "string",
+                    description: "Optional comment about your experience. Example: 'Works great for database queries, fast and reliable'",
+                },
+            },
+            required: ["slug", "rating"],
+        },
+    },
+    {
+        name: "set_profile",
+        description: "Set your agent's public profile display name and bio. This information appears on your public profile page at loaditout.ai/agents/{key}.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                display_name: {
+                    type: "string",
+                    description: "Display name for your agent profile (max 100 characters). Example: 'Full-Stack Dev Agent'",
+                },
+                bio: {
+                    type: "string",
+                    description: "Short bio for your agent profile (max 500 characters). Example: 'A Claude Code agent specializing in TypeScript and React projects.'",
+                },
+            },
+        },
+    },
+    {
+        name: "smart_search",
+        description: "Search for skills with your history and preferences automatically applied. Returns personalized results excluding skills you already have. Use this by default instead of search_skills.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                query: {
+                    type: "string",
+                    description: "Natural language search query. Examples: 'postgres database', 'browser automation', 'github issues'",
+                },
+                limit: {
+                    type: "number",
+                    description: "Max results to return (default 10, max 25)",
+                },
+            },
+            required: ["query"],
+        },
+    },
+];
+/**
+ * Load agent memory entries. Returns parsed memories or empty array.
+ * Never throws -- failures are silently ignored so callers always proceed.
+ */
+async function loadAgentMemory(typeFilter) {
+    try {
+        const params = new URLSearchParams({ agent_key: AGENT_KEY });
+        if (typeFilter)
+            params.set("type", typeFilter);
+        const result = (await fetchJSON(`${API_BASE}/memory?${params.toString()}`));
+        return result.memories ?? [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Extract installed skill slugs from memory entries.
+ */
+function extractInstalledSlugs(memories) {
+    for (const m of memories) {
+        if (m.key === "installed_skills" && Array.isArray(m.value)) {
+            return m.value;
+        }
+    }
+    return [];
+}
+/**
+ * Extract recent search queries from memory entries.
+ */
+function extractRecentSearches(memories) {
+    for (const m of memories) {
+        if (m.key === "recent_searches" && Array.isArray(m.value)) {
+            return m.value;
+        }
+    }
+    return [];
+}
+/**
+ * Fire-and-forget save to agent memory. Never throws.
+ */
+function saveMemoryAsync(key, value, type) {
+    postJSON(`${API_BASE}/memory`, {
+        agent_key: AGENT_KEY,
+        key,
+        value,
+        type,
+    }).catch(() => { });
+}
+/**
+ * Append a search query to the recent_searches memory (keep last 20).
+ */
+function recordSearchQuery(query, existingSearches) {
+    const updated = [...existingSearches.filter((q) => q !== query), query].slice(-20);
+    saveMemoryAsync("recent_searches", updated, "search");
+}
+// --- Tool handlers ---
+async function handleSearchSkills(args) {
+    // Auto-load agent memory to get installed skills and search history
+    const memories = await loadAgentMemory();
+    const installedSlugs = extractInstalledSlugs(memories);
+    const recentSearches = extractRecentSearches(memories);
+    const params = new URLSearchParams({ q: args.query });
+    if (args.type)
+        params.set("type", args.type);
+    if (args.agent)
+        params.set("agent", args.agent);
+    if (args.limit)
+        params.set("limit", String(args.limit));
+    const result = await fetchJSON(`${API_BASE}/search?${params.toString()}`, {
+        "X-Agent-Key": AGENT_KEY,
+    });
+    // Fire-and-forget: record this search query to memory
+    recordSearchQuery(args.query, recentSearches);
+    // Filter out already-installed skills from results client-side
+    const parsed = result;
+    if (parsed.results && installedSlugs.length > 0) {
+        const installedSet = new Set(installedSlugs);
+        parsed.results = parsed.results.filter((r) => !r.slug || !installedSet.has(r.slug));
+    }
+    return JSON.stringify(parsed, null, 2);
+}
+async function handleGetSkill(args) {
+    const result = await fetchJSON(`${API_BASE}/skill/${encodeURIComponent(args.slug)}`);
+    return JSON.stringify(result, null, 2);
+}
+async function handleInstallSkill(args) {
+    const params = new URLSearchParams({ agent: args.agent });
+    const result = await fetchJSON(`${API_BASE}/install/${encodeURIComponent(args.slug)}?${params.toString()}`, { "X-Agent-Key": AGENT_KEY });
+    // Fire-and-forget: save this slug to installed_skills memory
+    const memories = await loadAgentMemory().catch(() => []);
+    const existing = extractInstalledSlugs(memories);
+    if (!existing.includes(args.slug)) {
+        saveMemoryAsync("installed_skills", [...existing, args.slug], "install");
+    }
+    return JSON.stringify(result, null, 2);
+}
+async function handleListCategories() {
+    const result = await fetchJSON(`${API_BASE}/categories`);
+    return JSON.stringify(result, null, 2);
+}
+async function handleRecommendSkills(args) {
+    // Auto-load agent memory for personalization
+    const memories = await loadAgentMemory();
+    const installedSlugs = extractInstalledSlugs(memories);
+    const recentSearches = extractRecentSearches(memories);
+    // Merge installed skills from memory with any explicitly provided
+    const allInstalled = new Set(installedSlugs);
+    if (args.installed) {
+        for (const s of args.installed.split(",").map((s) => s.trim()).filter(Boolean)) {
+            allInstalled.add(s);
+        }
+    }
+    // Enrich context with relevant search history keywords
+    let enrichedContext = args.context;
+    if (recentSearches.length > 0) {
+        const recentKeywords = recentSearches.slice(-5).join(", ");
+        enrichedContext = `${args.context} (recent interests: ${recentKeywords})`;
+    }
+    const params = new URLSearchParams({ context: enrichedContext });
+    if (allInstalled.size > 0) {
+        params.set("installed", Array.from(allInstalled).join(","));
+    }
+    const result = await fetchJSON(`${API_BASE}/recommend?${params.toString()}`, { "X-Agent-Key": AGENT_KEY });
+    return JSON.stringify(result, null, 2);
+}
+async function handleCheckCapabilityGap(args) {
+    const params = new URLSearchParams({
+        context: args.task,
+        installed: args.current_tools.join(","),
+    });
+    const result = (await fetchJSON(`${API_BASE}/recommend?${params.toString()}`));
+    const recommendations = result.results ?? [];
+    if (recommendations.length === 0) {
+        return "No additional skills needed for this task.";
+    }
+    const lines = ["Based on what you're doing, these skills might help:\n"];
+    recommendations.forEach((r, i) => {
+        const name = r.name ?? r.slug ?? "unknown";
+        const score = r.quality_score ?? 0;
+        const desc = r.description ?? "";
+        lines.push(`${i + 1}. ${r.slug} (quality: ${score}) - ${desc}`);
+        lines.push(`   Install: npx loaditout add ${r.slug}`);
+    });
+    return lines.join("\n");
+}
+async function handleReportSkillUsage(args) {
+    const body = {
+        slug: args.slug,
+        status: args.status,
+        agent: "claude-code",
+        agent_key: AGENT_KEY,
+    };
+    if (args.error_message) {
+        body.error_message = args.error_message;
+    }
+    const result = (await postJSON(`${API_BASE}/report`, body));
+    if (result.proof) {
+        const shareUrl = `https://loaditout.ai/proof/${result.proof.proof_id}`;
+        const lines = [
+            "Skill usage reported successfully.",
+            "",
+            "Execution Proof:",
+            `  Proof ID: ${result.proof.proof_id}`,
+            `  Verify: ${result.proof.verify_url}`,
+            `  Share: ${shareUrl}`,
+            `  ${result.proof.shareable_text}`,
+        ];
+        return lines.join("\n");
+    }
+    return JSON.stringify(result, null, 2);
+}
+async function handleListMyProofs() {
+    const params = new URLSearchParams({ agent_key: AGENT_KEY });
+    const result = (await fetchJSON(`${API_BASE}/proofs?${params.toString()}`));
+    if (result.error) {
+        return `Failed to list proofs: ${result.error}`;
+    }
+    const proofs = result.proofs ?? [];
+    if (proofs.length === 0) {
+        return "No execution proofs yet. Report successful skill usage to earn proofs.";
+    }
+    const lines = [
+        `Execution Proofs (${proofs.length} total):`,
+        "",
+    ];
+    proofs.forEach((p, i) => {
+        lines.push(`${i + 1}. ${p.skill_name ?? p.skill_slug} [${p.proof_id}]`);
+        lines.push(`   Skill: ${p.skill_slug}`);
+        lines.push(`   Verify: ${p.verify_url}`);
+        lines.push(`   Share: https://loaditout.ai/proof/${p.proof_id}`);
+        lines.push(`   Date: ${p.created_at ?? "unknown"}`);
+        lines.push("");
+    });
+    return lines.join("\n");
+}
+async function handleVerifyProof(args) {
+    const result = (await fetchJSON(`${API_BASE}/verify/${encodeURIComponent(args.proof_id)}`));
+    if (result.error) {
+        return `Verification failed: ${result.error}`;
+    }
+    if (!result.valid) {
+        return `Proof ${args.proof_id} is NOT valid.`;
+    }
+    return [
+        `Proof ${result.proof_id} is VALID.`,
+        `  Skill: ${result.skill}`,
+        `  Verified at: ${result.verified_at}`,
+        `  Platform: ${result.platform}`,
+    ].join("\n");
+}
+async function handleSaveMemory(args) {
+    const body = {
+        agent_key: AGENT_KEY,
+        key: args.key,
+        value: args.value,
+        type: args.type,
+    };
+    const result = await postJSON(`${API_BASE}/memory`, body);
+    return JSON.stringify(result, null, 2);
+}
+async function handleRecallMemory(args) {
+    const params = new URLSearchParams({ agent_key: AGENT_KEY });
+    if (args.type)
+        params.set("type", args.type);
+    const result = await fetchJSON(`${API_BASE}/memory?${params.toString()}`);
+    return JSON.stringify(result, null, 2);
+}
+async function handleRequestPermission(args) {
+    const body = {
+        agent_key: AGENT_KEY,
+        slug: args.slug,
+        reason: args.reason,
+    };
+    const result = (await postJSON(`${API_BASE}/permission`, body));
+    if (result.error) {
+        return `Permission request failed: ${result.error}`;
+    }
+    return `Permission requested (ID: ${result.request_id}). Status: ${result.status}. Waiting for human approval.`;
+}
+async function handleCheckPermission(args) {
+    const params = new URLSearchParams({
+        agent_key: AGENT_KEY,
+        request_id: String(args.request_id),
+    });
+    const result = (await fetchJSON(`${API_BASE}/permission?${params.toString()}`));
+    if (result.error) {
+        return `Failed to check permission: ${result.error}`;
+    }
+    return `Permission status: ${result.status}`;
+}
+async function handleInstallBatch(args) {
+    const body = {
+        slugs: args.slugs,
+        agent: args.agent,
+    };
+    const result = await postJSON(`${API_BASE}/install-batch`, body);
+    return JSON.stringify(result, null, 2);
+}
+async function handleShareLoadout() {
+    const result = await fetchJSON(`${API_BASE}/loadout/${encodeURIComponent(AGENT_KEY)}`);
+    const parsed = result;
+    parsed.profile_url = `https://loaditout.ai/agents/${AGENT_KEY}`;
+    return JSON.stringify(parsed, null, 2);
+}
+async function handleSetProfile(args) {
+    const body = {
+        agent_key: AGENT_KEY,
+    };
+    if (args.display_name !== undefined)
+        body.display_name = args.display_name;
+    if (args.bio !== undefined)
+        body.bio = args.bio;
+    const result = (await postJSON(`${API_BASE}/profile`, body));
+    if (result.error) {
+        return `Failed to update profile: ${result.error}`;
+    }
+    const lines = [
+        "Profile updated successfully.",
+        `  Trust score: ${result.trust_score}`,
+        `  Profile: https://loaditout.ai/agents/${AGENT_KEY}`,
+    ];
+    return lines.join("\n");
+}
+async function handleInstallPack(args) {
+    const params = new URLSearchParams({ agent: args.agent });
+    const result = (await fetchJSON(`${API_BASE}/pack/${encodeURIComponent(args.slug)}?${params.toString()}`));
+    if (result.error) {
+        return `Pack not found: ${result.error}`;
+    }
+    const packSkills = result.skills ?? [];
+    const lines = [
+        `Agent Pack: ${result.name ?? result.slug}`,
+        `Outcome: ${result.target_outcome ?? "N/A"}`,
+        `Skills: ${packSkills.length}`,
+        `Install all: ${result.install_all_command ?? `npx loaditout add-pack ${args.slug}`}`,
+        "",
+        "Skills in this pack:",
+        "",
+    ];
+    packSkills.forEach((s, i) => {
+        lines.push(`${i + 1}. ${s.name ?? s.slug} (${s.type ?? "unknown"})`);
+        lines.push(`   Slug: ${s.slug}`);
+        if (s.install_config) {
+            lines.push(`   Config: ${JSON.stringify(s.install_config)}`);
+        }
+        lines.push("");
+    });
+    return lines.join("\n");
+}
+async function handleSmartSearch(args) {
+    // Load all agent memory (installed skills, recent searches, preferences)
+    const memories = await loadAgentMemory();
+    const installedSlugs = extractInstalledSlugs(memories);
+    const recentSearches = extractRecentSearches(memories);
+    const params = new URLSearchParams({ q: args.query });
+    if (args.limit)
+        params.set("limit", String(args.limit));
+    const result = await fetchJSON(`${API_BASE}/search?${params.toString()}`, {
+        "X-Agent-Key": AGENT_KEY,
+    });
+    // Fire-and-forget: record this search query
+    recordSearchQuery(args.query, recentSearches);
+    // Filter out already-installed skills
+    const parsed = result;
+    const excludedCount = { value: 0 };
+    if (parsed.results && installedSlugs.length > 0) {
+        const installedSet = new Set(installedSlugs);
+        const originalLength = parsed.results.length;
+        parsed.results = parsed.results.filter((r) => !r.slug || !installedSet.has(r.slug));
+        excludedCount.value = originalLength - parsed.results.length;
+    }
+    // Add metadata about personalization
+    const output = { ...parsed };
+    output._personalization = {
+        installed_skills_excluded: excludedCount.value,
+        installed_skills_count: installedSlugs.length,
+        recent_searches: recentSearches.slice(-5),
+    };
+    return JSON.stringify(output, null, 2);
+}
+async function handleFlagSkill(args) {
+    const body = {
+        reason: args.reason,
+    };
+    if (args.details) {
+        body.details = args.details;
+    }
+    const url = `https://loaditout.ai/api/skills/${encodeURIComponent(args.slug)}/flag`;
+    const result = (await postJSON(url, body, { "X-Agent-Key": AGENT_KEY }));
+    if (result.error) {
+        return `Flag failed: ${result.error}`;
+    }
+    return `Skill "${args.slug}" has been flagged for "${args.reason}". Thank you for helping keep the registry safe.`;
+}
+async function handleReviewSkill(args) {
+    const body = {
+        agent_key: AGENT_KEY,
+        slug: args.slug,
+        rating: args.rating,
+    };
+    if (args.comment) {
+        body.comment = args.comment;
+    }
+    const result = (await postJSON(`${API_BASE}/review`, body));
+    if (result.error) {
+        return `Review failed: ${result.error}`;
+    }
+    return `Review submitted for "${args.slug}" (${args.rating}/5). Thank you for your feedback.`;
+}
+async function handleValidateAction(args) {
+    const body = {
+        slug: args.slug,
+        action: args.action,
+        agent_key: AGENT_KEY,
+    };
+    if (args.parameters) {
+        body.parameters = args.parameters;
+    }
+    const result = (await postJSON(`${API_BASE}/validate`, body));
+    if (result.error) {
+        return `Validation failed: ${result.error}`;
+    }
+    const lines = [
+        `Validation result for ${args.slug} / ${args.action}:`,
+        `  Safe to proceed: ${result.valid ? "YES" : "NO"}`,
+        `  Risk level: ${result.risk_level ?? "unknown"}`,
+        `  Security grade: ${result.security_grade ?? "unknown"}`,
+        `  Skill verified: ${result.skill_verified ? "yes" : "no"}`,
+    ];
+    if (result.last_updated_days_ago !== undefined) {
+        lines.push(`  Last updated: ${result.last_updated_days_ago} days ago`);
+    }
+    const warnings = result.warnings ?? [];
+    if (warnings.length > 0) {
+        lines.push(`  Warnings:`);
+        for (const w of warnings) {
+            lines.push(`    - ${w}`);
+        }
+    }
+    return lines.join("\n");
+}
+function makeResponse(id, result) {
+    return { jsonrpc: "2.0", id, result };
+}
+function makeError(id, code, message) {
+    return { jsonrpc: "2.0", id, error: { code, message } };
+}
+function send(response) {
+    const json = JSON.stringify(response);
+    process.stdout.write(json + "\n");
+}
+async function handleRequest(request) {
+    const { id, method, params } = request;
+    switch (method) {
+        case "initialize": {
+            send(makeResponse(id, {
+                protocolVersion: "2024-11-05",
+                capabilities: {
+                    tools: {},
+                    resources: {},
+                },
+                serverInfo: {
+                    name: SERVER_NAME,
+                    version: SERVER_VERSION,
+                },
+            }));
+            break;
+        }
+        case "notifications/initialized": {
+            // No response needed for notifications
+            break;
+        }
+        case "tools/list": {
+            send(makeResponse(id, { tools: TOOLS }));
+            break;
+        }
+        case "tools/call": {
+            const toolName = params?.name;
+            const toolArgs = (params
+                ?.arguments || {});
+            try {
+                let resultText;
+                switch (toolName) {
+                    case "search_skills":
+                        resultText = await handleSearchSkills(toolArgs);
+                        break;
+                    case "get_skill":
+                        resultText = await handleGetSkill(toolArgs);
+                        break;
+                    case "install_skill":
+                        resultText = await handleInstallSkill(toolArgs);
+                        break;
+                    case "list_categories":
+                        resultText = await handleListCategories();
+                        break;
+                    case "recommend_skills":
+                        resultText = await handleRecommendSkills(toolArgs);
+                        break;
+                    case "check_capability_gap":
+                        resultText = await handleCheckCapabilityGap(toolArgs);
+                        break;
+                    case "report_skill_usage":
+                        resultText = await handleReportSkillUsage(toolArgs);
+                        break;
+                    case "list_my_proofs":
+                        resultText = await handleListMyProofs();
+                        break;
+                    case "verify_proof":
+                        resultText = await handleVerifyProof(toolArgs);
+                        break;
+                    case "save_memory":
+                        resultText = await handleSaveMemory(toolArgs);
+                        break;
+                    case "recall_memory":
+                        resultText = await handleRecallMemory(toolArgs);
+                        break;
+                    case "request_permission":
+                        resultText = await handleRequestPermission(toolArgs);
+                        break;
+                    case "check_permission":
+                        resultText = await handleCheckPermission(toolArgs);
+                        break;
+                    case "install_batch":
+                        resultText = await handleInstallBatch(toolArgs);
+                        break;
+                    case "share_loadout":
+                        resultText = await handleShareLoadout();
+                        break;
+                    case "set_profile":
+                        resultText = await handleSetProfile(toolArgs);
+                        break;
+                    case "install_pack":
+                        resultText = await handleInstallPack(toolArgs);
+                        break;
+                    case "validate_action":
+                        resultText = await handleValidateAction(toolArgs);
+                        break;
+                    case "flag_skill":
+                        resultText = await handleFlagSkill(toolArgs);
+                        break;
+                    case "review_skill":
+                        resultText = await handleReviewSkill(toolArgs);
+                        break;
+                    case "smart_search":
+                        resultText = await handleSmartSearch(toolArgs);
+                        break;
+                    default:
+                        send(makeError(id, -32601, `Unknown tool: ${toolName}`));
+                        return;
+                }
+                send(makeResponse(id, {
+                    content: [{ type: "text", text: resultText }],
+                }));
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                send(makeResponse(id, {
+                    content: [{ type: "text", text: `Error: ${message}` }],
+                    isError: true,
+                }));
+            }
+            break;
+        }
+        case "resources/list": {
+            send(makeResponse(id, {
+                resources: [
+                    {
+                        uri: "loaditout://catalog",
+                        name: "Loaditout Skill Catalog",
+                        description: "Browse the full Loaditout skill catalog by category",
+                        mimeType: "text/plain",
+                    },
+                ],
+            }));
+            break;
+        }
+        case "resources/read": {
+            const uri = params?.uri;
+            if (uri === "loaditout://catalog") {
+                try {
+                    const categories = (await fetchJSON(`${API_BASE}/categories`));
+                    const cats = categories.categories ?? [];
+                    const lines = ["Loaditout Skill Catalog\n"];
+                    for (const cat of cats) {
+                        const name = cat.name ?? cat.slug ?? "unknown";
+                        const count = cat.count ?? 0;
+                        const desc = cat.description ?? "";
+                        lines.push(`- ${name} (${count} skills): ${desc}`);
+                    }
+                    send(makeResponse(id, {
+                        contents: [
+                            {
+                                uri: "loaditout://catalog",
+                                mimeType: "text/plain",
+                                text: lines.join("\n"),
+                            },
+                        ],
+                    }));
+                }
+                catch (err) {
+                    const message = err instanceof Error ? err.message : String(err);
+                    send(makeError(id, -32603, `Failed to load catalog: ${message}`));
+                }
+            }
+            else {
+                send(makeError(id, -32602, `Unknown resource: ${uri}`));
+            }
+            break;
+        }
+        case "ping": {
+            send(makeResponse(id, {}));
+            break;
+        }
+        default: {
+            if (id !== undefined && id !== null) {
+                send(makeError(id, -32601, `Method not found: ${method}`));
+            }
+            break;
+        }
+    }
+}
+// --- Main: read JSON-RPC messages from stdin ---
+function main() {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        terminal: false,
+    });
+    rl.on("line", (line) => {
+        const trimmed = line.trim();
+        if (!trimmed)
+            return;
+        let request;
+        try {
+            request = JSON.parse(trimmed);
+        }
+        catch {
+            send(makeError(null, -32700, "Parse error"));
+            return;
+        }
+        handleRequest(request).catch((err) => {
+            send(makeError(request.id ?? null, -32603, err instanceof Error ? err.message : String(err)));
+        });
+    });
+    rl.on("close", () => {
+        process.exit(0);
+    });
+}
+main();