openkitt 0.1.2

package/dist/manifest/writer.js

@@ -0,0 +1,142 @@
+import { chmodSync, existsSync, mkdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { platform } from "node:os";
+import { dirname, join } from "node:path";
+import { getManifestPath } from "./reader.js";
+const DIR_MODE = 0o700;
+const FILE_MODE = 0o600;
+const MANIFEST_VERSION = "0.1.0";
+function isWindows() {
+    return platform() === "win32";
+}
+function ensureKittDir(manifestPath) {
+    const kittDir = dirname(manifestPath);
+    if (!existsSync(kittDir)) {
+        mkdirSync(kittDir, { recursive: true, mode: DIR_MODE });
+    }
+    if (!isWindows()) {
+        chmodSync(kittDir, DIR_MODE);
+    }
+}
+export function writeManifest(workspaceDir, manifest) {
+    const manifestPath = getManifestPath(workspaceDir);
+    const manifestDir = dirname(manifestPath);
+    const tempFile = join(manifestDir, `manifest.json.tmp-${process.pid}-${Date.now()}`);
+    const payload = `${JSON.stringify(manifest, null, 2)}\n`;
+    ensureKittDir(manifestPath);
+    try {
+        writeFileSync(tempFile, payload, { encoding: "utf-8", mode: FILE_MODE });
+        if (!isWindows()) {
+            chmodSync(tempFile, FILE_MODE);
+        }
+        renameSync(tempFile, manifestPath);
+        if (!isWindows()) {
+            chmodSync(manifestPath, FILE_MODE);
+        }
+    }
+    catch (error) {
+        if (existsSync(tempFile)) {
+            unlinkSync(tempFile);
+        }
+        throw error;
+    }
+}
+export function createInitialManifest(workspaceName, packageManager, railway) {
+    return {
+        version: MANIFEST_VERSION,
+        workspace: {
+            name: workspaceName,
+            packageManager,
+            ...(railway ? { railway } : {}),
+        },
+        settings: {},
+        apps: {},
+        packages: {},
+    };
+}
+export function addApp(manifest, name, app) {
+    return {
+        ...manifest,
+        apps: {
+            ...manifest.apps,
+            [name]: app,
+        },
+    };
+}
+export function removeApp(manifest, name) {
+    const nextApps = { ...manifest.apps };
+    delete nextApps[name];
+    const nextPackages = {};
+    for (const [packageName, pkg] of Object.entries(manifest.packages)) {
+        nextPackages[packageName] = {
+            ...pkg,
+            consumers: pkg.consumers.filter((consumer) => consumer !== name),
+        };
+    }
+    return {
+        ...manifest,
+        apps: nextApps,
+        packages: nextPackages,
+    };
+}
+export function addPackage(manifest, name, pkg) {
+    return {
+        ...manifest,
+        packages: {
+            ...manifest.packages,
+            [name]: pkg,
+        },
+    };
+}
+export function addConsumer(manifest, packageName, appName) {
+    const pkg = manifest.packages[packageName];
+    if (!pkg) {
+        return {
+            ...manifest,
+            packages: {
+                ...manifest.packages,
+            },
+        };
+    }
+    const consumers = pkg.consumers.includes(appName) ? [...pkg.consumers] : [...pkg.consumers, appName];
+    return {
+        ...manifest,
+        packages: {
+            ...manifest.packages,
+            [packageName]: {
+                ...pkg,
+                consumers,
+            },
+        },
+    };
+}
+export function removeConsumer(manifest, packageName, appName) {
+    const pkg = manifest.packages[packageName];
+    if (!pkg) {
+        return {
+            ...manifest,
+            packages: {
+                ...manifest.packages,
+            },
+        };
+    }
+    return {
+        ...manifest,
+        packages: {
+            ...manifest.packages,
+            [packageName]: {
+                ...pkg,
+                consumers: pkg.consumers.filter((consumer) => consumer !== appName),
+            },
+        },
+    };
+}
+export function updateSettings(manifest, key, value) {
+    return {
+        ...manifest,
+        settings: {
+            ...manifest.settings,
+            [key]: value,
+        },
+    };
+}
+//# sourceMappingURL=writer.js.map

package/dist/manifest/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../src/manifest/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,SAAS,SAAS;IAChB,OAAO,QAAQ,EAAE,KAAK,OAAO,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,QAA2B;IAC7E,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,qBAAqB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAEzD,aAAa,CAAC,YAAY,CAAC,CAAC;IAE5B,IAAI,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,aAAqB,EACrB,cAA+C,EAC/C,OAAqB;IAErB,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE;YACT,IAAI,EAAE,aAAa;YACnB,cAAc;YACd,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC;QACD,QAAQ,EAAE,EAAE;QACZ,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,QAA2B,EAAE,IAAY,EAAE,GAAa;IAC7E,OAAO;QACL,GAAG,QAAQ;QACX,IAAI,EAAE;YACJ,GAAG,QAAQ,CAAC,IAAI;YAChB,CAAC,IAAI,CAAC,EAAE,GAAG;SACZ;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAA2B,EAAE,IAAY;IACjE,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEtB,MAAM,YAAY,GAAiC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,YAAY,CAAC,WAAW,CAAC,GAAG;YAC1B,GAAG,GAAG;YACN,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,YAAY;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAA2B,EAAE,IAAY,EAAE,GAAiB;IACrF,OAAO;QACL,GAAG,QAAQ;QACX,QAAQ,EAAE;YACR,GAAG,QAAQ,CAAC,QAAQ;YACpB,CAAC,IAAI,CAAC,EAAE,GAAG;SACZ;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAA2B,EAAE,WAAmB,EAAE,OAAe;IAC3F,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE;gBACR,GAAG,QAAQ,CAAC,QAAQ;aACrB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAErG,OAAO;QACL,GAAG,QAAQ;QACX,QAAQ,EAAE;YACR,GAAG,QAAQ,CAAC,QAAQ;YACpB,CAAC,WAAW,CAAC,EAAE;gBACb,GAAG,GAAG;gBACN,SAAS;aACV;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAA2B,EAAE,WAAmB,EAAE,OAAe;IAC9F,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE;gBACR,GAAG,QAAQ,CAAC,QAAQ;aACrB;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,QAAQ,EAAE;YACR,GAAG,QAAQ,CAAC,QAAQ;YACpB,CAAC,WAAW,CAAC,EAAE;gBACb,GAAG,GAAG;gBACN,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC;aACpE;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAA2B,EAAE,GAAW,EAAE,KAAc;IACrF,OAAO;QACL,GAAG,QAAQ;QACX,QAAQ,EAAE;YACR,GAAG,QAAQ,CAAC,QAAQ;YACpB,CAAC,GAAG,CAAC,EAAE,KAAK;SACb;KACF,CAAC;AACJ,CAAC"}

package/dist/mcp/client.d.ts

@@ -0,0 +1,21 @@
+import type { McpServerProcess } from './lifecycle.js';
+export interface McpTool {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+}
+export interface McpToolResult {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    isError?: boolean;
+}
+export interface McpClient {
+    initialize(): Promise<void>;
+    listTools(): Promise<McpTool[]>;
+    callTool(name: string, args: Record<string, unknown>): Promise<McpToolResult>;
+    close(): void;
+    isReady(): boolean;
+}
+export declare function createMcpClient(server: McpServerProcess): Promise<McpClient>;

package/dist/mcp/client.js

@@ -0,0 +1,213 @@
+import { createAuditLogger } from '../audit/logger.js';
+const JSON_RPC_VERSION = '2.0';
+const MCP_PROTOCOL_VERSION = '2025-11-25';
+const CLIENT_INFO = {
+    name: 'openkitt',
+    version: '0.1.0',
+};
+const auditLogger = createAuditLogger('.');
+function createJsonRpcError(code, message) {
+    const error = new Error(message);
+    error.code = code;
+    return error;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function isJsonRpcResponse(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    return value.jsonrpc === JSON_RPC_VERSION && typeof value.id === 'number';
+}
+function isInitializeResult(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    return (typeof value.protocolVersion === 'string'
+        && isRecord(value.capabilities)
+        && isRecord(value.serverInfo)
+        && typeof value.serverInfo.name === 'string'
+        && typeof value.serverInfo.version === 'string');
+}
+function isToolsListResult(value) {
+    if (!isRecord(value) || !Array.isArray(value.tools)) {
+        return false;
+    }
+    return value.tools.every((tool) => {
+        if (!isRecord(tool)) {
+            return false;
+        }
+        return (typeof tool.name === 'string'
+            && typeof tool.description === 'string'
+            && isRecord(tool.inputSchema));
+    });
+}
+function isToolsCallResult(value) {
+    if (!isRecord(value) || !Array.isArray(value.content)) {
+        return false;
+    }
+    const hasValidContent = value.content.every((item) => {
+        if (!isRecord(item)) {
+            return false;
+        }
+        return typeof item.type === 'string' && typeof item.text === 'string';
+    });
+    if (!hasValidContent) {
+        return false;
+    }
+    if (value.isError !== undefined && typeof value.isError !== 'boolean') {
+        return false;
+    }
+    return true;
+}
+export async function createMcpClient(server) {
+    let ready = false;
+    let closed = false;
+    let nextRequestId = 1;
+    let stdoutBuffer = '';
+    const pendingRequests = new Map();
+    const rejectPending = (error) => {
+        for (const pending of pendingRequests.values()) {
+            pending.reject(error);
+        }
+        pendingRequests.clear();
+    };
+    const handleStdoutData = (chunk) => {
+        stdoutBuffer += String(chunk);
+        let newlineIndex = stdoutBuffer.indexOf('\n');
+        while (newlineIndex >= 0) {
+            const line = stdoutBuffer.slice(0, newlineIndex).trim();
+            stdoutBuffer = stdoutBuffer.slice(newlineIndex + 1);
+            if (line) {
+                let message;
+                try {
+                    message = JSON.parse(line);
+                }
+                catch {
+                    newlineIndex = stdoutBuffer.indexOf('\n');
+                    continue;
+                }
+                if (isJsonRpcResponse(message)) {
+                    const pending = pendingRequests.get(message.id);
+                    if (pending) {
+                        pendingRequests.delete(message.id);
+                        if (message.error) {
+                            pending.reject(createJsonRpcError(message.error.code, message.error.message));
+                        }
+                        else {
+                            pending.resolve(message.result);
+                        }
+                    }
+                }
+            }
+            newlineIndex = stdoutBuffer.indexOf('\n');
+        }
+    };
+    const handleServerExit = () => {
+        if (closed) {
+            return;
+        }
+        ready = false;
+        rejectPending(new Error('MCP server connection closed'));
+    };
+    server.stdout.on('data', handleStdoutData);
+    server.process.on('exit', handleServerExit);
+    server.process.on('error', handleServerExit);
+    const writeMessage = (message) => {
+        if (closed) {
+            throw new Error('MCP client is closed');
+        }
+        server.stdin.write(`${JSON.stringify(message)}\n`);
+    };
+    const request = async (method, params) => {
+        if (closed) {
+            throw new Error('MCP client is closed');
+        }
+        const id = nextRequestId;
+        nextRequestId += 1;
+        const message = {
+            jsonrpc: JSON_RPC_VERSION,
+            id,
+            method,
+            ...(params ? { params } : {}),
+        };
+        return new Promise((resolve, reject) => {
+            pendingRequests.set(id, { resolve, reject });
+            writeMessage(message);
+        });
+    };
+    const notify = (method, params) => {
+        writeMessage({
+            jsonrpc: JSON_RPC_VERSION,
+            method,
+            ...(params ? { params } : {}),
+        });
+    };
+    const close = () => {
+        if (closed) {
+            return;
+        }
+        closed = true;
+        ready = false;
+        server.stdout.off('data', handleStdoutData);
+        server.process.off('exit', handleServerExit);
+        server.process.off('error', handleServerExit);
+        rejectPending(new Error('MCP client closed'));
+    };
+    return {
+        async initialize() {
+            if (ready) {
+                return;
+            }
+            const result = await request('initialize', {
+                protocolVersion: MCP_PROTOCOL_VERSION,
+                capabilities: {},
+                clientInfo: CLIENT_INFO,
+            });
+            if (!isInitializeResult(result)) {
+                throw new Error('Invalid initialize response from MCP server');
+            }
+            notify('notifications/initialized');
+            ready = true;
+        },
+        async listTools() {
+            if (!ready) {
+                throw new Error('MCP client is not initialized');
+            }
+            const result = await request('tools/list');
+            if (!isToolsListResult(result)) {
+                throw new Error('Invalid tools/list response from MCP server');
+            }
+            auditLogger.mcp('tools/list', '{}', 'SUCCESS');
+            return result.tools;
+        },
+        async callTool(name, args) {
+            if (!ready) {
+                throw new Error('MCP client is not initialized');
+            }
+            const params = { name, arguments: args };
+            const paramsText = JSON.stringify(params);
+            try {
+                const result = await request('tools/call', params);
+                if (!isToolsCallResult(result)) {
+                    throw new Error('Invalid tools/call response from MCP server');
+                }
+                const status = result.isError ? 'FAILED' : 'SUCCESS';
+                auditLogger.mcp(name, paramsText, status, result.isError ? 'tool returned isError=true' : undefined);
+                return result;
+            }
+            catch (requestError) {
+                const error = requestError instanceof Error ? requestError : new Error(String(requestError));
+                const detail = 'code' in error ? `${String(error.code)}: ${error.message}` : error.message;
+                auditLogger.mcp(name, paramsText, 'FAILED', detail);
+                throw error;
+            }
+        },
+        close,
+        isReady() {
+            return ready;
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/mcp/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/mcp/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,MAAM,gBAAgB,GAAG,KAAc,CAAC;AACxC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAC1C,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;CACR,CAAC;AAqEX,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAE3C,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAiB,CAAC;IACjD,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CACL,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;WACtC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;WAC5B,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;WAC1B,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ;WACzC,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,KAAK,QAAQ,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CACL,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;eAC1B,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;eACpC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACnD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAwB;IAC5D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE1D,MAAM,aAAa,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,eAAe,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,KAAsB,EAAQ,EAAE;QACxD,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9B,IAAI,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,YAAY,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;YAEpD,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,OAAgB,CAAC;gBACrB,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC1C,SAAS;gBACX,CAAC;gBAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAChD,IAAI,OAAO,EAAE,CAAC;wBACZ,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBACnC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;4BAClB,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;wBAChF,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBAClC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,GAAS,EAAE;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,KAAK,GAAG,KAAK,CAAC;QACd,aAAa,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAE7C,MAAM,YAAY,GAAG,CAAC,OAA6C,EAAQ,EAAE;QAC3E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,MAAgC,EAAoB,EAAE;QAC3F,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,CAAC;QACzB,aAAa,IAAI,CAAC,CAAC;QAEnB,MAAM,OAAO,GAAmB;YAC9B,OAAO,EAAE,gBAAgB;YACzB,EAAE;YACF,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC;QAEF,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7C,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,MAAgC,EAAQ,EAAE;QACxE,YAAY,CAAC;YACX,OAAO,EAAE,gBAAgB;YACzB,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,GAAG,IAAI,CAAC;QACd,KAAK,GAAG,KAAK,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,UAAU;YACd,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE;gBACzC,eAAe,EAAE,oBAAoB;gBACrC,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,WAAW;aACxB,CAAC,CAAC;YAEH,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACpC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,KAAK,CAAC,SAAS;YACb,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;YAC3C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YAED,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;YACxD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAE1C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrD,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACrG,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAE,KAAsB,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC7G,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACpD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK;QAEL,OAAO;YACL,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/mcp/lifecycle.d.ts

@@ -0,0 +1,12 @@
+import { type ChildProcess } from 'node:child_process';
+import type { Readable, Writable } from 'node:stream';
+export interface McpServerProcess {
+    process: ChildProcess;
+    stdin: Writable;
+    stdout: Readable;
+    pid: number;
+}
+export declare function spawnMcpServer(): Promise<McpServerProcess>;
+export declare function getMcpServerProcess(): McpServerProcess | null;
+export declare function isMcpServerRunning(): boolean;
+export declare function shutdownMcpServer(): Promise<void>;

package/dist/mcp/lifecycle.js

@@ -0,0 +1,149 @@
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { createAuditLogger } from '../audit/logger.js';
+import { error } from '../utils/display.js';
+const MCP_ENTRY_POINT = join(dirname(fileURLToPath(import.meta.url)), '..', '..', 'node_modules', '@railway', 'mcp-server', 'dist', 'index.js');
+const MCP_START_FAILURE_MESSAGE = 'Railway MCP Server failed to start. Try reinstalling: npm install -g openkitt@latest';
+const SHUTDOWN_TIMEOUT_MS = 5000;
+const auditLogger = createAuditLogger('.');
+let activeServer = null;
+let pendingSpawn = null;
+let shouldLogRespawn = false;
+const intentionallyShuttingDown = new WeakSet();
+function formatExitDetail(code, signal) {
+    const codeLabel = code === null ? 'null' : String(code);
+    const signalLabel = signal ?? 'null';
+    return `code=${codeLabel}, signal=${signalLabel}`;
+}
+function isChildRunning(child) {
+    return child.exitCode === null && !child.killed;
+}
+function buildServerProcess(child) {
+    if (!child.stdin || !child.stdout) {
+        throw new Error('MCP server stdio was not created');
+    }
+    return {
+        process: child,
+        stdin: child.stdin,
+        stdout: child.stdout,
+        pid: child.pid ?? -1,
+    };
+}
+function attachLifecycleListeners(child) {
+    child.stderr?.on('data', (chunk) => {
+        const message = String(chunk).trim();
+        if (!message) {
+            return;
+        }
+        auditLogger.mcp('server-lifecycle', 'stderr', 'FAILED', message);
+    });
+    child.on('exit', (code, signal) => {
+        const detail = formatExitDetail(code, signal);
+        if (activeServer?.process === child) {
+            activeServer = null;
+        }
+        if (intentionallyShuttingDown.has(child)) {
+            return;
+        }
+        shouldLogRespawn = true;
+        auditLogger.mcp('server-lifecycle', 'crash', 'FAILED', detail);
+    });
+}
+function displaySpawnFailure(reason) {
+    error(MCP_START_FAILURE_MESSAGE);
+    auditLogger.mcp('server-lifecycle', 'spawn', 'FAILED', reason);
+}
+export async function spawnMcpServer() {
+    if (activeServer && isChildRunning(activeServer.process)) {
+        return activeServer;
+    }
+    if (pendingSpawn) {
+        return pendingSpawn;
+    }
+    const respawn = shouldLogRespawn;
+    const child = spawn('node', [MCP_ENTRY_POINT], {
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    attachLifecycleListeners(child);
+    pendingSpawn = new Promise((resolve, reject) => {
+        const handleError = (spawnError) => {
+            child.off('spawn', handleSpawn);
+            if (activeServer?.process === child) {
+                activeServer = null;
+            }
+            displaySpawnFailure(spawnError.message);
+            reject(spawnError);
+        };
+        const handleSpawn = () => {
+            child.off('error', handleError);
+            let serverProcess;
+            try {
+                serverProcess = buildServerProcess(child);
+            }
+            catch (buildError) {
+                const err = buildError instanceof Error ? buildError : new Error(String(buildError));
+                displaySpawnFailure(err.message);
+                reject(err);
+                return;
+            }
+            activeServer = serverProcess;
+            shouldLogRespawn = false;
+            if (respawn) {
+                auditLogger.mcp('server-lifecycle', 'respawn', 'SUCCESS', `pid=${serverProcess.pid}`);
+            }
+            else {
+                auditLogger.mcp('server-lifecycle', 'spawn', 'SUCCESS', `pid=${serverProcess.pid}`);
+            }
+            resolve(serverProcess);
+        };
+        child.once('error', handleError);
+        child.once('spawn', handleSpawn);
+    }).finally(() => {
+        pendingSpawn = null;
+    });
+    return pendingSpawn;
+}
+export function getMcpServerProcess() {
+    if (!activeServer) {
+        return null;
+    }
+    if (!isChildRunning(activeServer.process)) {
+        activeServer = null;
+        return null;
+    }
+    return activeServer;
+}
+export function isMcpServerRunning() {
+    return getMcpServerProcess() !== null;
+}
+export async function shutdownMcpServer() {
+    if (!activeServer) {
+        return;
+    }
+    const child = activeServer.process;
+    intentionallyShuttingDown.add(child);
+    if (!isChildRunning(child)) {
+        activeServer = null;
+        return;
+    }
+    const exitPromise = new Promise((resolve) => {
+        child.once('exit', (code, signal) => {
+            resolve({ code, signal });
+        });
+    });
+    child.kill('SIGTERM');
+    let forcedKill = false;
+    const timeoutHandle = setTimeout(() => {
+        forcedKill = true;
+        child.kill('SIGKILL');
+    }, SHUTDOWN_TIMEOUT_MS);
+    const exitResult = await exitPromise;
+    clearTimeout(timeoutHandle);
+    activeServer = null;
+    const detail = forcedKill
+        ? `forced after timeout (${formatExitDetail(exitResult.code, exitResult.signal)})`
+        : formatExitDetail(exitResult.code, exitResult.signal);
+    auditLogger.mcp('server-lifecycle', 'shutdown', 'SUCCESS', detail);
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/mcp/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/mcp/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAE5C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAChJ,MAAM,yBAAyB,GAAG,sFAAsF,CAAC;AACzH,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAS3C,IAAI,YAAY,GAA4B,IAAI,CAAC;AACjD,IAAI,YAAY,GAAqC,IAAI,CAAC;AAC1D,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAC7B,MAAM,yBAAyB,GAAG,IAAI,OAAO,EAAgB,CAAC;AAE9D,SAAS,gBAAgB,CAAC,IAAmB,EAAE,MAA6B;IAC1E,MAAM,SAAS,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,CAAC;IACrC,OAAO,QAAQ,SAAS,YAAY,WAAW,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB;IACzC,OAAO,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAmB;IAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAmB;IACnD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE9C,IAAI,YAAY,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACpC,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAED,gBAAgB,GAAG,IAAI,CAAC;QACxB,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACjC,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,YAAY,IAAI,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE;QAC7C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAEhC,YAAY,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC/D,MAAM,WAAW,GAAG,CAAC,UAAiB,EAAQ,EAAE;YAC9C,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAChC,IAAI,YAAY,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;gBACpC,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;YACD,mBAAmB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,GAAS,EAAE;YAC7B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAEhC,IAAI,aAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBACrF,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,YAAY,GAAG,aAAa,CAAC;YAC7B,gBAAgB,GAAG,KAAK,CAAC;YAEzB,IAAI,OAAO,EAAE,CAAC;gBACZ,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,OAAO,CAAC,aAAa,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACd,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,mBAAmB,EAAE,KAAK,IAAI,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC;IACnC,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAErC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,OAAO,CAAyD,CAAC,OAAO,EAAE,EAAE;QAClG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;QACpC,UAAU,GAAG,IAAI,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAExB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC;IACrC,YAAY,CAAC,aAAa,CAAC,CAAC;IAE5B,YAAY,GAAG,IAAI,CAAC;IACpB,MAAM,MAAM,GAAG,UAAU;QACvB,CAAC,CAAC,yBAAyB,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG;QAClF,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACzD,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC"}

package/dist/mcp/project-guard.d.ts

@@ -0,0 +1,14 @@
+import type { McpClient, McpTool, McpToolResult } from './client.js';
+export interface GuardedMcpClient {
+    initialize(): Promise<void>;
+    listTools(): Promise<McpTool[]>;
+    callTool(name: string, args: Record<string, unknown>): Promise<McpToolResult>;
+    close(): void;
+    isReady(): boolean;
+}
+export interface ProjectGuard {
+    guardedCallTool(client: McpClient, name: string, args: Record<string, unknown>): Promise<McpToolResult>;
+    validateProjectId(args: Record<string, unknown>): boolean;
+    getProjectId(): string;
+}
+export declare function createProjectGuard(projectId: string): ProjectGuard;

package/dist/mcp/project-guard.js

@@ -0,0 +1,27 @@
+import { createAuditLogger } from '../audit/logger.js';
+export function createProjectGuard(projectId) {
+    const auditLogger = createAuditLogger('.');
+    const validateProjectId = (args) => {
+        if (!Object.prototype.hasOwnProperty.call(args, 'projectId')) {
+            return true;
+        }
+        return args.projectId === projectId;
+    };
+    const guardedCallTool = async (client, name, args) => {
+        if (!validateProjectId(args)) {
+            const providedProjectId = String(args.projectId);
+            const message = `MCP call blocked: tool "${name}" targets project "${providedProjectId}" but workspace is linked to "${projectId}"`;
+            auditLogger.mcp(name, JSON.stringify(args), 'BLOCKED', 'cross-project call rejected');
+            throw new Error(message);
+        }
+        return client.callTool(name, args);
+    };
+    return {
+        guardedCallTool,
+        validateProjectId,
+        getProjectId() {
+            return projectId;
+        },
+    };
+}
+//# sourceMappingURL=project-guard.js.map

package/dist/mcp/project-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-guard.js","sourceRoot":"","sources":["../../src/mcp/project-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAqBvD,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAA8B,CAAC;IAExE,MAAM,iBAAiB,GAAG,CAAC,IAA6B,EAAW,EAAE;QACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAC3B,MAAiB,EACjB,IAAY,EACZ,IAA6B,EACL,EAAE;QAC1B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,2BAA2B,IAAI,sBAAsB,iBAAiB,iCAAiC,SAAS,GAAG,CAAC;YACpI,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,6BAA6B,CAAC,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,OAAO;QACL,eAAe;QACf,iBAAiB;QACjB,YAAY;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/prompts/operations.d.ts

@@ -0,0 +1 @@
+export declare const OPERATIONS_SYSTEM_PROMPT: "You are KITT's operations engine. Your job is to execute Railway infrastructure commands by calling MCP tools on behalf of the user. You receive a command context describing what the user wants to do and the current workspace state. You respond by calling the appropriate MCP tools.\n\n<rules>\n1. You may ONLY call MCP tools from the set provided to you. Do not suggest CLI commands, code, file changes, or any action outside MCP tool calls.\n2. Every MCP tool call that targets a Railway project MUST use the projectId from context.workspace.railway.projectId. Never target a different project.\n3. You NEVER see or handle actual secret values. Environment variable values matching secret patterns (SECRET, KEY, TOKEN, PASSWORD, CREDENTIAL, PRIVATE, API_KEY, DATABASE_URL, REDIS_URL, DSN, CONNECTION_STRING) are masked as \"****\" in your context. Do not attempt to guess, infer, or fabricate secret values.\n4. When setting environment variables via set-variables, only set non-secret values directly. For secret values, output a placeholder instruction that KITT will intercept and prompt the user to fill in securely.\n5. For state-changing operations (deploy, set-variables, create-environment, deploy-template), include a \"confirmation\" field in your response summary so KITT knows to prompt the user before executing.\n6. Keep your final text responses concise and structured. Report what you did, what succeeded, and what failed. Do not provide lengthy explanations.\n7. For deploy-template, you may ONLY deploy these approved templates: PostgreSQL, MySQL, Redis, MinIO. Reject any other template request.\n8. When multiple services need the same action (e.g., deploy all apps), call the tool once per service in sequence.\n</rules>\n\n<available_tools>\nYou have access to these Railway MCP tools. They are provided as callable functions via the standard tool-use protocol:\n\ncheck-railway-status\n  - Parameters: none\n  - Returns: Railway CLI installation status, authentication status, linked account info.\n\nlist-projects\n  - Parameters: none\n  - Returns: Array of Railway projects with IDs and names.\n\ncreate-project-and-link\n  - Parameters: { name: string }\n  - Returns: New project ID and link confirmation.\n  - Note: State-changing. Requires user confirmation.\n\nlist-services\n  - Parameters: { projectId: string }\n  - Returns: Array of services with IDs, names, deployment status, and domains.\n\nlink-service\n  - Parameters: { serviceId: string }\n  - Returns: Link confirmation.\n\ndeploy\n  - Parameters: { serviceId: string, environmentId?: string }\n  - Returns: Deployment status, URL.\n  - Note: State-changing. Requires user confirmation.\n\ndeploy-template\n  - Parameters: { templateName: string, projectId: string }\n  - Returns: New service info (ID, name, connection URL).\n  - Note: State-changing. Requires user confirmation. ONLY these templates are allowed: PostgreSQL, MySQL, Redis, MinIO.\n\ncreate-environment\n  - Parameters: { projectId: string, name: string }\n  - Returns: New environment ID and name.\n  - Note: State-changing. Requires user confirmation.\n\nlink-environment\n  - Parameters: { environmentId: string }\n  - Returns: Link confirmation.\n\nlist-variables\n  - Parameters: { serviceId: string, environmentId?: string }\n  - Returns: Object of { variableName: value }. Secret values are masked as \"****\".\n\nset-variables\n  - Parameters: { serviceId: string, variables: { [key]: value }, environmentId?: string }\n  - Returns: Confirmation of variables set.\n  - Note: State-changing. Requires user confirmation.\n\ngenerate-domain\n  - Parameters: { serviceId: string }\n  - Returns: Generated domain URL.\n  - Note: State-changing. Requires user confirmation.\n\nget-logs\n  - Parameters: { serviceId: string, lines?: number }\n  - Returns: Recent log lines for the service.\n</available_tools>\n\n<command_behaviors>\nBased on context.command, here is how you should orchestrate tool calls:\n\n/init\n  1. Call create-project-and-link with the workspace name.\n  2. Return the project ID for KITT to store in the manifest.\n\n/delete <appName>\n  1. Look up the app's serviceId from context.workspace.apps[appName].railway.serviceId.\n  2. Note: The MCP server does not expose a delete-service tool (destructive operations are excluded). Report to the user that the Railway service must be deleted manually via the Railway dashboard. Provide the service ID.\n\n/deploy\n  1. Call list-services to get current state.\n  2. For each app the user selected, call link-environment if a specific environment was chosen, then call deploy with the app's serviceId.\n  3. After deployment, report the deployment URL for each app.\n\n/deploy:template <templateName>\n  1. Verify the template is in the approved list (PostgreSQL, MySQL, Redis, MinIO).\n  2. Call deploy-template with the template name and project ID.\n  3. Return the new service info (name, connection URL).\n\n/env:create <environmentName>\n  1. Call create-environment with the project ID and name.\n  2. Call link-environment with the new environment ID.\n  3. Call list-variables on the production environment to get existing variables.\n  4. Report the variables available for copying (secrets masked). KITT handles the copy confirmation UX.\n\n/env:vars [serviceName]\n  1. Look up the service ID from the manifest.\n  2. Call list-variables for that service.\n  3. Return the variables (secrets will already be masked).\n\n/env:vars set <serviceName> <key> <value>\n  1. Look up the service ID from the manifest.\n  2. Call set-variables with the key-value pair.\n  3. Confirm the variable was set.\n\n/domain <appName>\n  1. Look up the service ID from the manifest.\n  2. Call generate-domain for that service.\n  3. Return the generated domain.\n\n/logs <appName>\n  1. Look up the service ID from the manifest.\n  2. Call get-logs for that service.\n  3. Return the log output.\n\n/status\n  1. Call check-railway-status.\n  2. Call list-projects.\n  3. Call list-services for the linked project.\n  4. Return a summary: auth status, project info, each service with deployment status and domains.\n</command_behaviors>\n\n<infrastructure_provisioning>\nWhen called during /create to provision infrastructure for a new app, follow these rules:\n\n1. Check context.command.infrastructureNeeded for what to provision.\n2. Call list-services to check if the required infrastructure already exists (e.g., a PostgreSQL service from a previous app).\n3. If the service exists, DO NOT provision a duplicate. Instead, retrieve its connection URL via list-variables and use set-variables to add the connection URL to the new app's service.\n4. If the service does not exist, call deploy-template to provision it, then use set-variables to wire the connection URL to the app's service.\n\nInfrastructure \u2192 environment variable mapping:\n  PostgreSQL \u2192 DATABASE_URL\n  MySQL \u2192 DATABASE_URL\n  Redis \u2192 REDIS_URL\n  SQLite \u2192 DATABASE_PATH (no Railway service; volume mounting is handled by KITT outside the LLM)\n</infrastructure_provisioning>\n\n<response_format>\nAfter completing your tool calls, provide a brief text summary structured as:\n\n**Completed:**\n- [what succeeded]\n\n**Warnings:** (if any)\n- [non-fatal issues]\n\n**Failed:** (if any)\n- [what failed and why]\n\n**Action required:** (if any)\n- [things the user needs to do manually]\n</response_format>";