noumen 0.6.0 → 0.8.0

package/dist/index.js

@@ -1,3 +1,29 @@
+import {
+  FileMemoryProvider,
+  InProcessBackend,
+  Mailbox,
+  OTelTracer,
+  SwarmManager,
+  applyPermissionUpdate,
+  applyPermissionUpdates,
+  codingAgent,
+  planningAgent,
+  reviewAgent,
+  truncateIndex
+} from "./chunk-PDEAJ272.js";
+import {
+  AiSdkProvider,
+  DEFAULT_MODELS,
+  SUPPORTED_PROVIDERS,
+  detectProvider,
+  resolveProvider
+} from "./chunk-XZPAA5TO.js";
+import {
+  buildMcpToolName,
+  getMcpPrefix,
+  normalizeNameForMCP,
+  parseMcpToolName
+} from "./chunk-4SQA2UCV.js";
 import {
   Agent,
   CLEARED_PLACEHOLDER,
@@ -10,32 +36,20 @@ import {
   DEFAULT_RETRY_CONFIG,
   DenialTracker,
   FileCheckpointManager,
-  FileMemoryProvider,
   FileStateCache,
-  InProcessBackend,
   InvariantViolation,
-  LocalComputer,
-  LocalFs,
-  LocalSandbox,
-  Mailbox,
   NoopSpan,
   NoopTracer,
-  OTelTracer,
   STRUCTURED_OUTPUT_TOOL_NAME,
-  SandboxedLocalComputer,
   SessionStorage,
   SpanStatusCode,
   StreamingToolExecutor,
-  SwarmManager,
   TaskStore,
   Thread,
-  UnsandboxedLocal,
   activateContextForPaths,
   activateSkillsForPaths,
   agentTool,
   all,
-  applyPermissionUpdate,
-  applyPermissionUpdates,
   applyPersistedReplacements,
   assertValidMessageSequence,
   buildExtractionPrompt,
@@ -45,7 +59,6 @@ import {
   calculateCost,
   canAutoCompact,
   classifyError,
-  codingAgent,
   compactConversation,
   createAutoCompactConfig,
   createAutoCompactTracking,
@@ -79,6 +92,9 @@ import {
   generateAutoTitle,
   generateMissingToolResults,
   getActiveSkills,
+  getAutoCompactThreshold,
+  getContextWindowForModel,
+  getEffectiveContextWindow,
   getLastCacheSafeParams,
   getRetryDelay,
   getWorktreeChanges,
@@ -95,13 +111,12 @@ import {
   parsePaths,
   partitionToolCalls,
   persistToolResult,
-  planningAgent,
   reconstructContentReplacementState,
   recordAutoCompactFailure,
   recordAutoCompactSuccess,
+  registerContextWindows,
   removeWorktree,
   restoreSession,
-  reviewAgent,
   runNotificationHooks,
   runPostToolUseFailureHooks,
   runPostToolUseHooks,
@@ -117,22 +132,21 @@ import {
   taskUpdateTool,
   tokenCountWithEstimation,
   truncateHeadForPTLRetry,
-  truncateIndex,
   tryReactiveCompact,
   webSearchToolPlaceholder,
   withRetry
-} from "./chunk-6MMYCGJQ.js";
-import {
-  DEFAULT_MODELS,
-  SUPPORTED_PROVIDERS,
-  detectProvider,
-  resolveProvider
-} from "./chunk-7IQCQI2G.js";
+} from "./chunk-5HY4IYNT.js";
 import {
   applySnipRemovals,
   projectSnippedView,
   snipMessagesByUuids
 } from "./chunk-42PHHZUA.js";
+import {
+  ChatStreamError,
+  getMessageCacheBreakpointIndex,
+  sortToolDefinitionsForCache
+} from "./chunk-OPFFLQZL.js";
+import "./chunk-3HEYCV26.js";
 import {
   RULE_SOURCE_PRECEDENCE,
   TOOL_SEARCH_NAME,
@@ -170,50 +184,36 @@ import {
   toolMatchesRule,
   webFetchTool,
   writeFileTool
-} from "./chunk-XZN4QZLK.js";
+} from "./chunk-CX4BL6PC.js";
+import {
+  formatZodValidationError,
+  registerZodToJsonSchema,
+  zodToJsonSchema
+} from "./chunk-3SK5GCI6.js";
 import {
   API_IMAGE_MAX_BASE64_SIZE,
+  DEFAULT_DOT_DIRS,
   IMAGE_EXTENSIONS,
   IMAGE_MAX_HEIGHT,
   IMAGE_MAX_WIDTH,
   compressImageBufferWithTokenLimit,
+  createDotDirResolver,
   createImageMetadataText,
   maybeResizeAndDownsampleImageBlock,
-  maybeResizeAndDownsampleImageBuffer
-} from "./chunk-5GEX6ZSB.js";
-import {
-  buildMcpToolName,
-  getMcpPrefix,
-  normalizeNameForMCP,
-  parseMcpToolName
-} from "./chunk-4SQA2UCV.js";
-import {
-  formatZodValidationError,
-  registerZodToJsonSchema,
-  zodToJsonSchema
-} from "./chunk-3SK5GCI6.js";
-import {
-  getAutoCompactThreshold,
-  getContextWindowForModel,
-  getEffectiveContextWindow,
-  getMessageCacheBreakpointIndex,
-  registerContextWindows,
-  sortToolDefinitionsForCache
-} from "./chunk-HEQQQGK5.js";
-import {
-  ChatStreamError
-} from "./chunk-CCM2AXZG.js";
-import "./chunk-3HEYCV26.js";
+  maybeResizeAndDownsampleImageBuffer,
+  readAllDotDirs,
+  readFirstDotDir
+} from "./chunk-HQISH4D7.js";
 import {
   contentToString,
   hasImageContent,
   normalizeContent,
   stripImageContent
 } from "./chunk-JACGEMTF.js";
-import "./chunk-DGUM43GV.js";
 export {
   API_IMAGE_MAX_BASE64_SIZE,
   Agent,
+  AiSdkProvider,
   CLEARED_PLACEHOLDER,
   COMPACTABLE_TOOLS,
   CannotRetryError,
@@ -221,6 +221,7 @@ export {
   CostTracker,
   DEFAULT_AUTO_TITLE_MAX_INPUT_CHARS,
   DEFAULT_AUTO_TITLE_SYSTEM_PROMPT,
+  DEFAULT_DOT_DIRS,
   DEFAULT_MODELS,
   DEFAULT_PRICING,
   DEFAULT_RETRY_CONFIG,
@@ -233,9 +234,6 @@ export {
   IMAGE_MAX_WIDTH,
   InProcessBackend,
   InvariantViolation,
-  LocalComputer,
-  LocalFs,
-  LocalSandbox,
   Mailbox,
   NoopSpan,
   NoopTracer,
@@ -243,7 +241,6 @@ export {
   RULE_SOURCE_PRECEDENCE,
   STRUCTURED_OUTPUT_TOOL_NAME,
   SUPPORTED_PROVIDERS,
-  SandboxedLocalComputer,
   SessionStorage,
   SpanStatusCode,
   StreamingToolExecutor,
@@ -252,7 +249,6 @@ export {
   TaskStore,
   Thread,
   ToolRegistry,
-  UnsandboxedLocal,
   activateContextForPaths,
   activateSkillsForPaths,
   agentTool,
@@ -287,6 +283,7 @@ export {
   createCacheSafeParams,
   createCheckpointState,
   createContentReplacementState,
+  createDotDirResolver,
   createImageMetadataText,
   createSkillTool,
   createStructuredOutputTool,
@@ -363,7 +360,9 @@ export {
   planningAgent,
   preserveQuoteStyle,
   projectSnippedView,
+  readAllDotDirs,
   readFileTool,
+  readFirstDotDir,
   reconstructContentReplacementState,
   recordAutoCompactFailure,
   recordAutoCompactSuccess,

package/dist/jsonrpc/index.js

@@ -14,7 +14,6 @@ import {
   isResponse,
   parseMessage
 } from "../chunk-AMYIJSAZ.js";
-import "../chunk-DGUM43GV.js";
 export {
   INTERNAL_ERROR,
   INVALID_PARAMS,

package/dist/local.d.ts

@@ -0,0 +1,168 @@
+import { A as AgentOptions, a as Agent } from './agent-D0gl-qYi.js';
+import { a as VirtualComputer, E as ExecOptions, C as CommandResult, V as VirtualFs, R as ReadOptions, F as FileEntry, b as FileStat } from './computer-DzMR92tK.js';
+import { S as Sandbox } from './sandbox-DAqQo0Tj.js';
+import './types-DLZNyF5t.js';
+import './types-BX4ALqoN.js';
+import './types-2kTLUCnD.js';
+import '@modelcontextprotocol/sdk/client/index.js';
+import '@modelcontextprotocol/sdk/client/auth.js';
+import '@modelcontextprotocol/sdk/shared/auth.js';
+
+/**
+ * Filesystem and network restriction config passed to `@anthropic-ai/sandbox-runtime`.
+ */
+interface SandboxConfig {
+    filesystem?: {
+        /** Paths the agent may write to (default: `[cwd]`). Write is denied everywhere else. */
+        allowWrite?: string[];
+        /** Paths to explicitly deny writes within allowed regions. */
+        denyWrite?: string[];
+        /** Paths to deny reading. By default everything is readable. */
+        denyRead?: string[];
+        /** Paths to re-allow reading within denyRead regions. Takes precedence over denyRead. */
+        allowRead?: string[];
+    };
+    network?: {
+        /** Domains the agent may reach via HTTP/HTTPS/SOCKS. */
+        allowedDomains?: string[];
+        /** Domains to explicitly block. */
+        deniedDomains?: string[];
+    };
+}
+interface SandboxedLocalComputerOptions {
+    defaultCwd?: string;
+    defaultTimeout?: number;
+    sandbox?: SandboxConfig;
+}
+/**
+ * `VirtualComputer` that wraps every command with OS-level sandboxing via
+ * `@anthropic-ai/sandbox-runtime`. Uses macOS Seatbelt (`sandbox-exec`) or
+ * Linux bubblewrap (`bwrap`) under the hood.
+ */
+declare class SandboxedLocalComputer implements VirtualComputer {
+    private defaultCwd;
+    private defaultTimeout;
+    private sandboxConfig;
+    private initPromise;
+    private initialized;
+    constructor(opts?: SandboxedLocalComputerOptions);
+    private buildRuntimeConfig;
+    private ensureInitialized;
+    executeCommand(command: string, opts?: ExecOptions): Promise<CommandResult>;
+    /**
+     * Tear down the sandbox runtime. Call when the agent is done.
+     */
+    dispose(): Promise<void>;
+}
+
+interface LocalSandboxOptions {
+    /** Working directory for both file resolution and command execution. */
+    cwd?: string;
+    /** Default timeout (ms) for shell commands. */
+    defaultTimeout?: number;
+    /**
+     * Sandbox restrictions. Defaults: writes allowed only in `cwd`,
+     * reads allowed everywhere, network unrestricted.
+     */
+    sandbox?: SandboxConfig;
+}
+/**
+ * Create a `Sandbox` with OS-level isolation via `@anthropic-ai/sandbox-runtime`.
+ *
+ * - **macOS**: Seatbelt (`sandbox-exec`) profiles restrict filesystem and network.
+ * - **Linux**: bubblewrap (`bwrap`) + socat for namespace-based isolation.
+ *
+ * Filesystem operations (`VirtualFs`) use the host `node:fs` — the sandbox
+ * boundary is enforced on shell commands (`VirtualComputer`), which is where
+ * the agent executes arbitrary code.
+ *
+ * Requires `@anthropic-ai/sandbox-runtime` as a peer dependency.
+ */
+declare function LocalSandbox(opts?: LocalSandboxOptions): Sandbox;
+
+interface LocalFsOptions {
+    basePath?: string;
+}
+/**
+ * Unsandboxed VirtualFs backed by `node:fs/promises` on the host machine.
+ * Paths resolve relative to `basePath`. Suitable for local development and
+ * trusted environments. For production or untrusted agents, use a sandboxed
+ * implementation like `SpritesFs` (remote container) or a custom
+ * Docker/E2B adapter instead.
+ */
+declare class LocalFs implements VirtualFs {
+    private basePath;
+    private resolvedBasePath;
+    private realBasePathPromise;
+    constructor(opts?: LocalFsOptions);
+    private getRealBasePath;
+    private resolve;
+    readFile(filePath: string, opts?: ReadOptions): Promise<string>;
+    readFileBytes(filePath: string, maxBytes?: number): Promise<Buffer>;
+    writeFile(filePath: string, content: string): Promise<void>;
+    appendFile(filePath: string, content: string): Promise<void>;
+    deleteFile(filePath: string, opts?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    mkdir(dirPath: string, opts?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    readdir(dirPath: string, opts?: {
+        recursive?: boolean;
+    }): Promise<FileEntry[]>;
+    exists(filePath: string): Promise<boolean>;
+    stat(filePath: string): Promise<FileStat>;
+}
+
+interface LocalComputerOptions {
+    defaultCwd?: string;
+    defaultTimeout?: number;
+}
+/**
+ * Unsandboxed VirtualComputer that runs commands directly on the host via
+ * `node:child_process`. Suitable for local development and trusted
+ * environments. For production or untrusted agents, use a sandboxed
+ * implementation like `SpritesComputer` (remote container) or a custom
+ * Docker/E2B adapter instead.
+ */
+declare class LocalComputer implements VirtualComputer {
+    private defaultCwd;
+    private defaultTimeout;
+    constructor(opts?: LocalComputerOptions);
+    executeCommand(command: string, opts?: ExecOptions): Promise<CommandResult>;
+}
+
+/**
+ * Options for {@link LocalAgent} — the full `AgentOptions` surface minus
+ * `sandbox`, plus an optional `localSandbox` block for tuning the
+ * default-created {@link LocalSandbox} (filesystem / network restrictions,
+ * command timeouts).
+ */
+interface LocalAgentOptions extends Omit<AgentOptions, "sandbox"> {
+    /**
+     * Forwarded to {@link LocalSandbox}. If `cwd` is omitted here it
+     * defaults to `opts.cwd` / `opts.options.cwd` / `process.cwd()`.
+     */
+    localSandbox?: Omit<LocalSandboxOptions, "cwd"> & {
+        cwd?: string;
+    };
+}
+/**
+ * Convenience factory that constructs an {@link Agent} backed by a
+ * {@link LocalSandbox} (OS-level sandboxing via
+ * `@anthropic-ai/sandbox-runtime`). Equivalent to:
+ *
+ * ```ts
+ * new Agent({ ...opts, sandbox: LocalSandbox({ cwd }) })
+ * ```
+ *
+ * Lives on the `noumen/local` subpath rather than the root barrel so that
+ * `import { Agent } from "noumen"` never transitively pulls the local
+ * computer adapter (and `node:child_process`) into the module graph.
+ *
+ * Defaults: writes allowed only in `cwd`, reads allowed everywhere,
+ * network unrestricted. Pass `localSandbox.sandbox` to tighten.
+ */
+declare function LocalAgent(opts: LocalAgentOptions): Agent;
+
+export { LocalAgent, type LocalAgentOptions, LocalComputer, type LocalComputerOptions, LocalFs, type LocalFsOptions, LocalSandbox, type LocalSandboxOptions, type SandboxConfig, SandboxedLocalComputer, type SandboxedLocalComputerOptions };

package/dist/local.js

@@ -0,0 +1,40 @@
+import {
+  LocalSandbox,
+  SandboxedLocalComputer
+} from "./chunk-PKHLGGEC.js";
+import {
+  LocalComputer,
+  LocalFs
+} from "./chunk-XQTNXRE7.js";
+import {
+  Agent
+} from "./chunk-5HY4IYNT.js";
+import "./chunk-42PHHZUA.js";
+import "./chunk-OPFFLQZL.js";
+import "./chunk-3HEYCV26.js";
+import "./chunk-CX4BL6PC.js";
+import "./chunk-3SK5GCI6.js";
+import "./chunk-HQISH4D7.js";
+import "./chunk-JACGEMTF.js";
+
+// src/local.ts
+function LocalAgent(opts) {
+  const cwd = opts.localSandbox?.cwd ?? opts.cwd ?? opts.options?.cwd ?? process.cwd();
+  const { localSandbox, ...rest } = opts;
+  return new Agent({
+    ...rest,
+    sandbox: LocalSandbox({
+      cwd,
+      defaultTimeout: localSandbox?.defaultTimeout,
+      sandbox: localSandbox?.sandbox
+    })
+  });
+}
+export {
+  LocalAgent,
+  LocalComputer,
+  LocalFs,
+  LocalSandbox,
+  SandboxedLocalComputer
+};
+//# sourceMappingURL=local.js.map

package/dist/local.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/local.ts"],"sourcesContent":["// Local sandbox binding (OS-level isolation via @anthropic-ai/sandbox-runtime).\n//\n// Importing this subpath pulls in the local sandbox factory and its adapter\n// primitives. The root barrel (`noumen`) intentionally does not re-export\n// this module so that `import { Agent } from \"noumen\"` stays structurally\n// lightweight and every sandbox is opted into by import.\n//\n//   import { LocalSandbox } from \"noumen/local\";\n\nimport { Agent, type AgentOptions } from \"./agent.js\";\nimport { LocalSandbox, type LocalSandboxOptions } from \"./virtual/local-sandbox.js\";\n\nexport {\n  LocalSandbox,\n  type LocalSandboxOptions,\n  type SandboxConfig,\n} from \"./virtual/local-sandbox.js\";\nexport { LocalFs, type LocalFsOptions } from \"./virtual/local-fs.js\";\nexport {\n  LocalComputer,\n  type LocalComputerOptions,\n} from \"./virtual/local-computer.js\";\nexport {\n  SandboxedLocalComputer,\n  type SandboxedLocalComputerOptions,\n} from \"./virtual/sandboxed-local-computer.js\";\n\n/**\n * Options for {@link LocalAgent} — the full `AgentOptions` surface minus\n * `sandbox`, plus an optional `localSandbox` block for tuning the\n * default-created {@link LocalSandbox} (filesystem / network restrictions,\n * command timeouts).\n */\nexport interface LocalAgentOptions extends Omit<AgentOptions, \"sandbox\"> {\n  /**\n   * Forwarded to {@link LocalSandbox}. If `cwd` is omitted here it\n   * defaults to `opts.cwd` / `opts.options.cwd` / `process.cwd()`.\n   */\n  localSandbox?: Omit<LocalSandboxOptions, \"cwd\"> & { cwd?: string };\n}\n\n/**\n * Convenience factory that constructs an {@link Agent} backed by a\n * {@link LocalSandbox} (OS-level sandboxing via\n * `@anthropic-ai/sandbox-runtime`). Equivalent to:\n *\n * ```ts\n * new Agent({ ...opts, sandbox: LocalSandbox({ cwd }) })\n * ```\n *\n * Lives on the `noumen/local` subpath rather than the root barrel so that\n * `import { Agent } from \"noumen\"` never transitively pulls the local\n * computer adapter (and `node:child_process`) into the module graph.\n *\n * Defaults: writes allowed only in `cwd`, reads allowed everywhere,\n * network unrestricted. Pass `localSandbox.sandbox` to tighten.\n */\nexport function LocalAgent(opts: LocalAgentOptions): Agent {\n  const cwd = opts.localSandbox?.cwd ?? opts.cwd ?? opts.options?.cwd ?? process.cwd();\n  const { localSandbox, ...rest } = opts;\n  return new Agent({\n    ...rest,\n    sandbox: LocalSandbox({\n      cwd,\n      defaultTimeout: localSandbox?.defaultTimeout,\n      sandbox: localSandbox?.sandbox,\n    }),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAyDO,SAAS,WAAW,MAAgC;AACzD,QAAM,MAAM,KAAK,cAAc,OAAO,KAAK,OAAO,KAAK,SAAS,OAAO,QAAQ,IAAI;AACnF,QAAM,EAAE,cAAc,GAAG,KAAK,IAAI;AAClC,SAAO,IAAI,MAAM;AAAA,IACf,GAAG;AAAA,IACH,SAAS,aAAa;AAAA,MACpB;AAAA,MACA,gBAAgB,cAAc;AAAA,MAC9B,SAAS,cAAc;AAAA,IACzB,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}

package/dist/lsp/index.d.ts

@@ -1,8 +1,7 @@
-import { L as LspServerConfig, a as LspServerState, b as LspDiagnostic, T as Tool } from '../types-DhXwOQwD.js';
-export { D as DiagnosticRegistry, c as LspLocation, d as LspOperation, e as LspServerManager, f as LspSymbol } from '../types-DhXwOQwD.js';
-import '../types-kiGBF35b.js';
-import '../computer-BPdxSo6X.js';
-import '../types-CD0rUKKT.js';
+import { L as LspServerConfig, a as LspServerState, b as LspDiagnostic, T as Tool } from '../types-BX4ALqoN.js';
+export { D as DiagnosticRegistry, c as LspLocation, d as LspOperation, e as LspServerManager, f as LspSymbol } from '../types-BX4ALqoN.js';
+import '../computer-DzMR92tK.js';
+import '../types-DLZNyF5t.js';
 
 interface ServerCapabilities {
     definitionProvider?: boolean;

package/dist/lsp/index.js

@@ -6,7 +6,6 @@ import {
 import {
   lspTool
 } from "../chunk-UVSSQBDY.js";
-import "../chunk-DGUM43GV.js";
 export {
   DiagnosticRegistry,
   LspClient,

package/dist/{lsp-PS3BWIHC.js → lsp-3APWNKB2.js}

@@ -1,8 +1,7 @@
 import {
   lspTool
 } from "./chunk-UVSSQBDY.js";
-import "./chunk-DGUM43GV.js";
 export {
   lspTool
 };
-//# sourceMappingURL=lsp-PS3BWIHC.js.map
+//# sourceMappingURL=lsp-3APWNKB2.js.map

package/dist/{manager-DLXK63XC.js → manager-Z5EQ7YYV.js}

@@ -1,8 +1,7 @@
 import {
   LspServerManager
 } from "./chunk-D43BWEZA.js";
-import "./chunk-DGUM43GV.js";
 export {
   LspServerManager
 };
-//# sourceMappingURL=manager-DLXK63XC.js.map
+//# sourceMappingURL=manager-Z5EQ7YYV.js.map

package/dist/mcp/index.d.ts

@@ -1,16 +1,15 @@
-import { M as McpClientManager } from '../server-BzNGKTP6.js';
-export { a as McpClientManagerOptions, b as McpServerOptions, c as buildMcpToolName, d as createMcpServer, g as getMcpPrefix, n as normalizeNameForMCP, p as parseMcpToolName } from '../server-BzNGKTP6.js';
+import { M as McpClientManager } from '../server-DFXdlqyX.js';
+export { a as McpClientManagerOptions, b as McpServerOptions, c as buildMcpToolName, d as createMcpServer, g as getMcpPrefix, n as normalizeNameForMCP, p as parseMcpToolName } from '../server-DFXdlqyX.js';
 import { T as TokenStorage, O as OAuthTokenData, a as OAuthProviderOptions } from '../types-2kTLUCnD.js';
 export { b as McpConfig, c as McpConnection, d as McpHttpServerConfig, e as McpOAuthConfig, M as McpServerConfig, f as McpSseServerConfig, g as McpStdioServerConfig, h as McpToolInfo, i as McpWebSocketServerConfig } from '../types-2kTLUCnD.js';
+import { i as DotDirResolver, T as Tool } from '../types-BX4ALqoN.js';
 import { OAuthClientProvider, OAuthDiscoveryState } from '@modelcontextprotocol/sdk/client/auth.js';
 export { OAuthClientProvider, OAuthDiscoveryState } from '@modelcontextprotocol/sdk/client/auth.js';
 import { OAuthClientMetadata, OAuthClientInformationMixed, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
 export { OAuthClientInformation, OAuthClientInformationFull, OAuthClientInformationMixed, OAuthClientMetadata, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
-import { T as Tool } from '../types-DhXwOQwD.js';
 import '@modelcontextprotocol/sdk/client/index.js';
-import '../types-kiGBF35b.js';
-import '../computer-BPdxSo6X.js';
-import '../types-CD0rUKKT.js';
+import '../computer-DzMR92tK.js';
+import '../types-DLZNyF5t.js';
 
 /**
  * In-memory token storage. Suitable for tests, short-lived processes,
@@ -26,10 +25,19 @@ declare class InMemoryTokenStorage implements TokenStorage {
  * File-backed token storage. Persists all server tokens to a single JSON
  * file so they survive process restarts. Each server key maps to its own
  * entry in the file.
+ *
+ * Reads walk all candidate dot-dirs in preference order, so tokens written
+ * by an older install under `.claude/` keep working; writes always target
+ * the resolver's canonical write dir (default `.noumen/`).
  */
 declare class FileTokenStorage implements TokenStorage {
-    private filePath;
-    constructor(filePath?: string);
+    /** Explicit path override, if provided. */
+    private explicitPath?;
+    private resolver;
+    private homeBase;
+    constructor(filePath?: string, resolver?: DotDirResolver);
+    private get writePath();
+    private readCandidatePaths;
     load(serverKey: string): Promise<OAuthTokenData | undefined>;
     save(serverKey: string, data: OAuthTokenData): Promise<void>;
     delete(serverKey: string): Promise<void>;

package/dist/mcp/index.js

@@ -5,25 +5,24 @@ import {
   NoumenOAuthProvider,
   OAuthCallbackServer,
   findAvailablePort
-} from "../chunk-Y45R3PQL.js";
+} from "../chunk-NUCJXOUV.js";
 import {
   createMcpAuthTool
 } from "../chunk-BZSFUEWM.js";
-import {
-  ToolRegistry
-} from "../chunk-XZN4QZLK.js";
-import "../chunk-5GEX6ZSB.js";
 import {
   buildMcpToolName,
   getMcpPrefix,
   normalizeNameForMCP,
   parseMcpToolName
 } from "../chunk-4SQA2UCV.js";
+import {
+  ToolRegistry
+} from "../chunk-CX4BL6PC.js";
 import "../chunk-3SK5GCI6.js";
+import "../chunk-HQISH4D7.js";
 import {
   contentToString
 } from "../chunk-JACGEMTF.js";
-import "../chunk-DGUM43GV.js";
 
 // src/mcp/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";

package/dist/mcp/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/server.ts"],"sourcesContent":["import { Server } from \"@modelcontextprotocol/sdk/server/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport {\n  CallToolRequestSchema,\n  ListToolsRequestSchema,\n  type CallToolResult,\n  type ListToolsResult,\n  type Tool as McpSdkTool,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport type { Tool, ToolContext } from \"../tools/types.js\";\nimport { ToolRegistry } from \"../tools/registry.js\";\nimport { contentToString } from \"../utils/content.js\";\n\nexport interface McpServerOptions {\n  /** Additional tools beyond the 6 built-ins */\n  tools?: Tool[];\n  /** Context passed to tool.call() for all invocations */\n  toolContext: ToolContext;\n  /** Server name reported to clients */\n  name?: string;\n  /** Server version reported to clients */\n  version?: string;\n}\n\n/**\n * Start an MCP server over stdio that exposes noumen's tools.\n * This is the entry point for `noumen mcp` or similar CLI integrations.\n */\nexport async function createMcpServer(opts: McpServerOptions): Promise<void> {\n  const registry = new ToolRegistry(opts.tools);\n\n  const server = new Server(\n    { name: opts.name ?? \"noumen\", version: opts.version ?? \"0.1.0\" },\n    { capabilities: { tools: {} } },\n  );\n\n  server.setRequestHandler(\n    ListToolsRequestSchema,\n    async (): Promise<ListToolsResult> => {\n      const tools = registry.listTools();\n      return {\n        tools: tools.map(\n          (tool): McpSdkTool => ({\n            name: tool.name,\n            description: tool.description,\n            inputSchema: {\n              type: \"object\" as const,\n              properties: tool.parameters.properties as Record<string, object>,\n              ...(tool.parameters.required\n                ? { required: tool.parameters.required }\n                : {}),\n            },\n          }),\n        ),\n      };\n    },\n  );\n\n  server.setRequestHandler(\n    CallToolRequestSchema,\n    async ({ params: { name, arguments: args } }): Promise<CallToolResult> => {\n      const tool = registry.get(name);\n      if (!tool) {\n        return {\n          isError: true,\n          content: [{ type: \"text\", text: `Unknown tool: ${name}` }],\n        };\n      }\n\n      try {\n        const result = await tool.call(\n          (args as Record<string, unknown>) ?? {},\n          opts.toolContext,\n        );\n        return {\n          isError: result.isError,\n          content: [{ type: \"text\", text: contentToString(result.content) }],\n        };\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        return {\n          isError: true,\n          content: [{ type: \"text\", text: message }],\n        };\n      }\n    },\n  );\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AAoBP,eAAsB,gBAAgB,MAAuC;AAC3E,QAAM,WAAW,IAAI,aAAa,KAAK,KAAK;AAE5C,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,KAAK,QAAQ,UAAU,SAAS,KAAK,WAAW,QAAQ;AAAA,IAChE,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE;AAAA,EAChC;AAEA,SAAO;AAAA,IACL;AAAA,IACA,YAAsC;AACpC,YAAM,QAAQ,SAAS,UAAU;AACjC,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,UACX,CAAC,UAAsB;AAAA,YACrB,MAAM,KAAK;AAAA,YACX,aAAa,KAAK;AAAA,YAClB,aAAa;AAAA,cACX,MAAM;AAAA,cACN,YAAY,KAAK,WAAW;AAAA,cAC5B,GAAI,KAAK,WAAW,WAChB,EAAE,UAAU,KAAK,WAAW,SAAS,IACrC,CAAC;AAAA,YACP;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,KAAK,EAAE,MAA+B;AACxE,YAAM,OAAO,SAAS,IAAI,IAAI;AAC9B,UAAI,CAAC,MAAM;AACT,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,iBAAiB,IAAI,GAAG,CAAC;AAAA,QAC3D;AAAA,MACF;AAEA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK;AAAA,UACvB,QAAoC,CAAC;AAAA,UACtC,KAAK;AAAA,QACP;AACA,eAAO;AAAA,UACL,SAAS,OAAO;AAAA,UAChB,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,gBAAgB,OAAO,OAAO,EAAE,CAAC;AAAA,QACnE;AAAA,MACF,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,QAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAChC;","names":[]}
+{"version":3,"sources":["../../src/mcp/server.ts"],"sourcesContent":["import { Server } from \"@modelcontextprotocol/sdk/server/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport {\n  CallToolRequestSchema,\n  ListToolsRequestSchema,\n  type CallToolResult,\n  type ListToolsResult,\n  type Tool as McpSdkTool,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport type { Tool, ToolContext } from \"../tools/types.js\";\nimport { ToolRegistry } from \"../tools/registry.js\";\nimport { contentToString } from \"../utils/content.js\";\n\nexport interface McpServerOptions {\n  /** Additional tools beyond the 6 built-ins */\n  tools?: Tool[];\n  /** Context passed to tool.call() for all invocations */\n  toolContext: ToolContext;\n  /** Server name reported to clients */\n  name?: string;\n  /** Server version reported to clients */\n  version?: string;\n}\n\n/**\n * Start an MCP server over stdio that exposes noumen's tools.\n * This is the entry point for `noumen mcp` or similar CLI integrations.\n */\nexport async function createMcpServer(opts: McpServerOptions): Promise<void> {\n  const registry = new ToolRegistry(opts.tools);\n\n  const server = new Server(\n    { name: opts.name ?? \"noumen\", version: opts.version ?? \"0.1.0\" },\n    { capabilities: { tools: {} } },\n  );\n\n  server.setRequestHandler(\n    ListToolsRequestSchema,\n    async (): Promise<ListToolsResult> => {\n      const tools = registry.listTools();\n      return {\n        tools: tools.map(\n          (tool): McpSdkTool => ({\n            name: tool.name,\n            description: tool.description,\n            inputSchema: {\n              type: \"object\" as const,\n              properties: tool.parameters.properties as Record<string, object>,\n              ...(tool.parameters.required\n                ? { required: tool.parameters.required }\n                : {}),\n            },\n          }),\n        ),\n      };\n    },\n  );\n\n  server.setRequestHandler(\n    CallToolRequestSchema,\n    async ({ params: { name, arguments: args } }): Promise<CallToolResult> => {\n      const tool = registry.get(name);\n      if (!tool) {\n        return {\n          isError: true,\n          content: [{ type: \"text\", text: `Unknown tool: ${name}` }],\n        };\n      }\n\n      try {\n        const result = await tool.call(\n          (args as Record<string, unknown>) ?? {},\n          opts.toolContext,\n        );\n        return {\n          isError: result.isError,\n          content: [{ type: \"text\", text: contentToString(result.content) }],\n        };\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        return {\n          isError: true,\n          content: [{ type: \"text\", text: message }],\n        };\n      }\n    },\n  );\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AAoBP,eAAsB,gBAAgB,MAAuC;AAC3E,QAAM,WAAW,IAAI,aAAa,KAAK,KAAK;AAE5C,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,KAAK,QAAQ,UAAU,SAAS,KAAK,WAAW,QAAQ;AAAA,IAChE,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE;AAAA,EAChC;AAEA,SAAO;AAAA,IACL;AAAA,IACA,YAAsC;AACpC,YAAM,QAAQ,SAAS,UAAU;AACjC,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,UACX,CAAC,UAAsB;AAAA,YACrB,MAAM,KAAK;AAAA,YACX,aAAa,KAAK;AAAA,YAClB,aAAa;AAAA,cACX,MAAM;AAAA,cACN,YAAY,KAAK,WAAW;AAAA,cAC5B,GAAI,KAAK,WAAW,WAChB,EAAE,UAAU,KAAK,WAAW,SAAS,IACrC,CAAC;AAAA,YACP;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,KAAK,EAAE,MAA+B;AACxE,YAAM,OAAO,SAAS,IAAI,IAAI;AAC9B,UAAI,CAAC,MAAM;AACT,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,iBAAiB,IAAI,GAAG,CAAC;AAAA,QAC3D;AAAA,MACF;AAEA,UAAI;AACF,cAAM,SAAS,MAAM,KAAK;AAAA,UACvB,QAAoC,CAAC;AAAA,UACtC,KAAK;AAAA,QACP;AACA,eAAO;AAAA,UACL,SAAS,OAAO;AAAA,UAChB,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,gBAAgB,OAAO,OAAO,EAAE,CAAC;AAAA,QACnE;AAAA,MACF,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,QAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAChC;","names":[]}

package/dist/{mcp-auth-AEI2R4ZC.js → mcp-auth-NOIQPF7W.js}

@@ -2,8 +2,7 @@ import {
   createMcpAuthTool
 } from "./chunk-BZSFUEWM.js";
 import "./chunk-4SQA2UCV.js";
-import "./chunk-DGUM43GV.js";
 export {
   createMcpAuthTool
 };
-//# sourceMappingURL=mcp-auth-AEI2R4ZC.js.map
+//# sourceMappingURL=mcp-auth-NOIQPF7W.js.map

package/dist/{provider-factory-TUHU3DIG.js → provider-factory-KNBSHXJ6.js}

@@ -7,8 +7,8 @@ import {
   SUPPORTED_PROVIDERS,
   detectProvider,
   resolveProvider
-} from "./chunk-7IQCQI2G.js";
-import "./chunk-DGUM43GV.js";
+} from "./chunk-XZPAA5TO.js";
+import "./chunk-OPFFLQZL.js";
 export {
   DEFAULT_MODELS,
   SUPPORTED_PROVIDERS,
@@ -17,4 +17,4 @@ export {
   isOllamaRunning,
   ollamaBaseURL
 };
-//# sourceMappingURL=provider-factory-TUHU3DIG.js.map
+//# sourceMappingURL=provider-factory-KNBSHXJ6.js.map

package/dist/{render-GRN4ZSSW.js → render-4VEODRK7.js}

@@ -4,11 +4,10 @@ import {
   promptPermission,
   renderEvent
 } from "./chunk-OGXNFXFA.js";
-import "./chunk-DGUM43GV.js";
 export {
   createRenderState,
   isVisibleEvent,
   promptPermission,
   renderEvent
 };
-//# sourceMappingURL=render-GRN4ZSSW.js.map
+//# sourceMappingURL=render-4VEODRK7.js.map

package/dist/{resolve-6KUZNEYW.js → resolve-AGQZFMKD.js}

@@ -3,12 +3,12 @@ import {
   SUPPORTED_PROVIDERS,
   detectProvider,
   resolveProvider
-} from "./chunk-7IQCQI2G.js";
-import "./chunk-DGUM43GV.js";
+} from "./chunk-XZPAA5TO.js";
+import "./chunk-OPFFLQZL.js";
 export {
   DEFAULT_MODELS,
   SUPPORTED_PROVIDERS,
   detectProvider,
   resolveProvider
 };
-//# sourceMappingURL=resolve-6KUZNEYW.js.map
+//# sourceMappingURL=resolve-AGQZFMKD.js.map