synartesis 0.1.0 → 0.2.0

package/dist/cli.js

@@ -23,7 +23,7 @@ import {
   toPayload,
   verifyAgainstServers,
   wasRefused
-} from "./chunk-X4VQNEP5.js";
+} from "./chunk-7AUGXEWC.js";
 import {
   DriftConflict,
   ManifestError,
@@ -34,11 +34,105 @@ import {
 } from "./chunk-K3QIPVBY.js";
 
 // src/cli.ts
-import { existsSync as existsSync3, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { existsSync as existsSync4, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
 import { dirname, resolve } from "path";
 
 // src/init/draft.ts
 import { z } from "zod";
+
+// src/init/known.ts
+import { existsSync, readFileSync } from "fs";
+import { fileURLToPath } from "url";
+var KNOWN = [
+  { marker: "server-filesystem", manifest: "filesystem" },
+  { marker: "server-github", manifest: "github" },
+  { marker: "github-mcp-server", manifest: "github" },
+  { marker: "server-memory", manifest: "memory" },
+  { marker: "mcp-server-git", manifest: "git" },
+  { marker: "server-git", manifest: "git" }
+];
+function manifestsDir() {
+  for (const up of ["../manifests/", "../../manifests/"]) {
+    const candidate = fileURLToPath(new URL(up, import.meta.url));
+    if (existsSync(candidate)) {
+      return candidate;
+    }
+  }
+  return void 0;
+}
+function knownPolicyFor(command, args) {
+  const line2 = [command, ...args].join(" ");
+  const hit = KNOWN.find((entry) => line2.includes(entry.marker));
+  const dir = manifestsDir();
+  if (hit === void 0 || dir === void 0) {
+    return void 0;
+  }
+  const path = `${dir}${hit.manifest}.yaml`;
+  if (!existsSync(path)) {
+    return void 0;
+  }
+  try {
+    const text = readFileSync(path, "utf8");
+    const source = toolsBlock(text);
+    const key = serverKey(text);
+    if (source === void 0 || key === void 0) {
+      return void 0;
+    }
+    const rules = parseManifest(
+      `version: 1
+servers:
+  ${key}:
+    command: "true"
+tools:
+${source}
+`,
+      path
+    ).tools;
+    return { key, rules, name: hit.manifest, source };
+  } catch {
+    return void 0;
+  }
+}
+function toolsBlock(text) {
+  const at = text.search(/^tools:[ \t]*$/m);
+  if (at === -1) {
+    return void 0;
+  }
+  const body = text.slice(text.indexOf("\n", at) + 1);
+  const lines = [];
+  for (const line2 of body.split("\n")) {
+    if (/^[^\s#]/.test(line2)) {
+      break;
+    }
+    lines.push(line2);
+  }
+  return lines.join("\n").replace(/\s+$/, "");
+}
+function serverKey(text) {
+  const at = text.search(/^servers:[ \t]*$/m);
+  if (at === -1) {
+    return void 0;
+  }
+  const body = text.slice(text.indexOf("\n", at) + 1);
+  for (const line2 of body.split("\n")) {
+    if (/^[^\s#]/.test(line2)) {
+      return void 0;
+    }
+    const named = /^ {2}([A-Za-z0-9_-]+):[ \t]*$/.exec(line2);
+    if (named?.[1] !== void 0) {
+      return named[1];
+    }
+  }
+  return void 0;
+}
+function toolsReferencedBy(rule2, key) {
+  const local = (qualified) => qualified === void 0 || !qualified.startsWith(`${key}.`) ? void 0 : qualified.slice(key.length + 1);
+  return [local(rule2.snapshot?.tool), local(rule2.inverse?.tool)].filter(
+    (name) => name !== void 0
+  );
+}
+
+// src/init/draft.ts
 var toolSchema = z.looseObject({
   name: z.string(),
   description: z.string().optional(),
@@ -84,6 +178,38 @@ function draftTool(server, tool) {
   lines.push(`    gate: always`);
   return lines.join("\n");
 }
+function patternFor(match) {
+  const source = match.split("*").map((literal) => literal.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[^.]*");
+  return new RegExp(`^${source}$`);
+}
+function adopt(known, name, tools) {
+  const advertised = new Set(tools.map((tool) => tool.name));
+  const covered = /* @__PURE__ */ new Set();
+  for (const rule2 of known.rules) {
+    for (const needed of toolsReferencedBy(rule2, known.key)) {
+      if (!advertised.has(needed)) {
+        return void 0;
+      }
+    }
+    const test = patternFor(rule2.match);
+    for (const tool of tools) {
+      if (test.test(`${known.key}.${tool.name}`)) {
+        covered.add(tool.name);
+      }
+    }
+  }
+  if (covered.size === 0) {
+    return void 0;
+  }
+  const renamed = known.source.replaceAll(`"${known.key}.`, `"${name}.`);
+  const missing = tools.filter((tool) => !covered.has(tool.name));
+  const extra = missing.length === 0 ? "" : [
+    "",
+    `  # Not mentioned by the bundled ${known.name} policy, so gated until you say otherwise.`,
+    ...missing.map((tool) => draftTool(name, tool))
+  ].join("\n");
+  return { source: `${renamed}${extra}`, covered: covered.size };
+}
 async function draftManifest(options) {
   const upstream = await connectStdioUpstream({
     name: options.name,
@@ -126,12 +252,21 @@ async function draftManifest(options) {
     `    command: ${quote(options.command)}`,
     `    args: [${options.args.map(quote).join(", ")}]`
   ].join("\n");
-  const policies = tools.map((tool) => draftTool(options.name, tool)).join("\n\n");
+  const known = knownPolicyFor(options.command, options.args);
+  const adopted = known === void 0 ? void 0 : adopt(known, options.name, tools);
+  const policies = adopted?.source ?? tools.map((tool) => draftTool(options.name, tool)).join("\n\n");
   if (existing === void 0) {
-    return [
+    const yaml = [
       `# Generated by synartesis init from ${options.name}'s tools/list.`,
-      `# Every tool starts gated. Working through the TODOs is the whole job:`,
-      `# a tool with no inverse is one an agent cannot use unsupervised.`,
+      ...adopted === void 0 ? [
+        `# Every tool starts gated. Working through the TODOs is the whole job:`,
+        `# a tool with no inverse is one an agent cannot use unsupervised.`
+      ] : [
+        `# ${String(adopted.covered)} of its tools were recognised, so the policy that ships`,
+        `# with Synartesis for ${known?.name ?? "this server"} was used and checked against what this`,
+        `# server actually advertises. Read it before trusting it: it is a starting`,
+        `# point that happens to be finished, not a promise about your setup.`
+      ],
       ``,
       `version: 1`,
       ``,
@@ -142,8 +277,10 @@ async function draftManifest(options) {
       policies,
       ``
     ].join("\n");
+    return adopted === void 0 || known === void 0 ? { yaml } : { yaml, adopted: { server: known.name, tools: adopted.covered } };
   }
-  return mergeInto(existing, server, policies, options.name);
+  const merged = mergeInto(existing, server, policies, options.name);
+  return adopted === void 0 || known === void 0 ? { yaml: merged } : { yaml: merged, adopted: { server: known.name, tools: adopted.covered } };
 }
 function mergeInto(existing, server, policies, name) {
   const serversAt = existing.indexOf("\nservers:");
@@ -234,8 +371,12 @@ async function rollback(options) {
     }
   };
   const all = journal.getActions(runId);
-  const inScope = [...all].filter((action) => options.toSeq === void 0 || action.seq >= options.toSeq).sort((a, b) => b.seq - a.seq);
+  const floor = options.toSeq;
+  const inScope = [...all].filter((action) => floor === void 0 || action.seq >= floor).sort((a, b) => b.seq - a.seq);
   const steps = [];
+  const kept = (floor === void 0 ? [] : [...all].filter((action) => action.seq < floor)).sort(
+    (a, b) => b.seq - a.seq
+  );
   let halted;
   let leftInPlace = false;
   for (const action of inScope) {
@@ -367,6 +508,14 @@ Resolve the conflict, then run undo --replan to check it against the world as it
     };
     break;
   }
+  for (const action of kept) {
+    steps.push({
+      ...describeStep(action),
+      kind: "kept",
+      reason: `below --to ${String(floor ?? 0)}, so it is left as it is`,
+      verified: true
+    });
+  }
   const completedWholeRun = halted === void 0 && !leftInPlace && options.toSeq === void 0;
   const status = completedWholeRun ? "rolled_back" : "partial";
   if (!dryRun) {
@@ -423,7 +572,7 @@ async function executeInverse(router, plan, idempotencyKey, signal) {
 }
 
 // src/watch.ts
-import { existsSync } from "fs";
+import { existsSync as existsSync2 } from "fs";
 
 // src/keys.ts
 var SEQUENCE = /^\u001b(\[[0-9;?]*[ -\/]*[@-~]|O[@-~])/;
@@ -552,7 +701,7 @@ async function* terminalKeys() {
 async function watch(options) {
   let journal;
   const open = () => {
-    if (journal === void 0 && existsSync(options.journalPath)) {
+    if (journal === void 0 && existsSync2(options.journalPath)) {
       journal = openJournal(options.journalPath, { mustExist: true });
     }
     return journal;
@@ -661,7 +810,7 @@ async function watch(options) {
 }
 
 // src/console.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 var FRAMES2 = [
   "\u280B",
   "\u2819",
@@ -867,7 +1016,7 @@ async function* terminalKeys2() {
 async function openConsole(options) {
   let journal;
   const open = () => {
-    if (journal === void 0 && existsSync2(options.journalPath)) {
+    if (journal === void 0 && existsSync3(options.journalPath)) {
       journal = openJournal(options.journalPath, { mustExist: true });
     }
     return journal;
@@ -1108,6 +1257,8 @@ var COMMANDS = `
   synartesis gates [--journal <path>]
   synartesis close [runId] [--journal <path>]
   synartesis proxy --manifest <path> [--journal <path>]   what your agent runs
+                  [--http <port> --token <secret>]      for a client that
+                                                        cannot start one
   synartesis watch [--by <name>] [--journal <path>]
   synartesis approve [actionId|--all] [--by <name>] [--journal <path>]
   synartesis deny [actionId|--all] [--by <name>] [--reason <text>] [--journal <path>]
@@ -1223,27 +1374,34 @@ async function runInit(argv) {
   }
   const path = findManifest(flag(argv, "--manifest"));
   const force = argv.includes("--force");
-  const present = existsSync3(path);
+  const present = existsSync4(path);
   if (present && force) {
     throw new UsageError(
       `--force would discard ${path}. Delete it yourself if that is what you want; init will otherwise add to it.`
     );
   }
-  const yaml = await draftManifest({
+  const draft = await draftManifest({
     name,
     command,
     args: argv.slice(separator + 2),
-    ...present ? { existing: readFileSync(path, "utf8") } : {}
+    ...present ? { existing: readFileSync2(path, "utf8") } : {}
   });
-  parseManifest(yaml, path);
+  parseManifest(draft.yaml, path);
   mkdirSync(dirname(resolve(path)), { recursive: true });
-  writeFileSync(path, yaml);
+  writeFileSync(path, draft.yaml);
   out("");
   out(`  ${style.label(present ? "extended" : "wrote")}  ${style.strong(path)}`);
   out(`  ${rule(54)}`);
   out("");
-  out(`  ${style.quiet("Every tool is guarded until you say how to undo it.")}`);
-  out(`  ${style.quiet("Work through the TODOs, then point your MCP client at:")}`);
+  if (draft.adopted === void 0) {
+    out(`  ${style.quiet("Every tool is guarded until you say how to undo it.")}`);
+    out(`  ${style.quiet("Work through the TODOs, then point your MCP client at:")}`);
+  } else {
+    out(
+      `  ${style.quiet(`Recognised ${String(draft.adopted.tools)} tools, so the policy that ships for`)} ${style.strong(draft.adopted.server)} ${style.quiet("was used.")}`
+    );
+    out(`  ${style.quiet("Read it before you trust it, then point your MCP client at:")}`);
+  }
   out("");
   out(`  ${style.accent(`${proxyCommand()} --manifest ${resolve(path)}`)}`);
   out("");
@@ -1518,7 +1676,13 @@ function report(result) {
   out(`  ${style.label(result.dryRun ? "dry run" : "undo")}  ${style.strong(result.runId)}`);
   out(`  ${rule(72)}`);
   out("");
+  let separated = false;
   for (const step of result.steps) {
+    if (step.kind === "kept" && !separated) {
+      separated = true;
+      out("");
+      out(`  ${style.quiet("left alone")}`);
+    }
     const unverified = step.kind === "revert" && !step.verified ? `  ${style.accent("[unverified]")}` : "";
     const kind = step.kind === "halt" || step.kind === "permanent" ? style.accent(step.kind.padEnd(16)) : step.kind.padEnd(16);
     out(