wingfoil 0.2.1 → 0.3.0

package/dist/mcp/registrar.js

@@ -3,7 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.deriveMcpToolName = deriveMcpToolName;
 exports.deriveMcpResourceUri = deriveMcpResourceUri;
 exports.registerCoreModules = registerCoreModules;
+const error_details_1 = require("../core/error-details");
 const registry_1 = require("../core/registry");
+const read_only_1 = require("./read-only");
 /**
  * `{module}.{verb}` — spec-004 §4.1's Tool naming convention (mechanical transform of the CLI verb).
  * An empty `verb` (`deriveVerb`'s flat/no-verb form, task-028-implement-paths-category) collapses to
@@ -27,14 +29,27 @@ function deriveMcpResourceUri(moduleName, verb) {
  * response (spec-004 §4.3's "rejected identically to the CLI path") or, for a Resource read (which
  * has no `isError` flag in the MCP protocol), a thrown error surfaced as a protocol-level read
  * failure (spec-004 §2.2's "resource not found"-style refusal, generalized to any read failure).
+ * Either way the error's operator-facing details (`../core/error-details.ts`) travel with it — as the
+ * read error's JSON-RPC `error.data.details`, or as the tool result's `structuredContent` (task-130).
+ * A successful Tool result carries the operation's `CoreResult.warnings`, when it has any, as
+ * `structuredContent: {value, warnings}` (task-169). A successful Resource read carries them as a
+ * top-level `warnings` array beside `contents` (task-195, `bug-231`: since task-171 a read-only scan does
+ * report the documents it left out). Note that the shipped
+ * `wingfoil mcp` server (`./server.ts`) does not call this function and registers no Tools (P5.2.3,
+ * v0.4), so the Tool warning field is reachable only where this registrar is used; when Tools ship,
+ * `directive.assign` and the four `dna` write Tools (task-193) also need `force` as a Tool input
+ * (`spec-004` §4.3).
  */
 function registerCoreModules(server, modules, options) {
-    // Always advertise both channels (spec-004 §1: Resources and Tools are fixed channel types of
-    // the MCP surface), even when `modules` currently has zero operations of one kind — as is the
-    // case for the real production registry today (0 mutating ops; see task-006 Execution Notes).
-    // Without this, a client's `tools/list` call on a server with zero registered Tools fails at the
-    // protocol level ("Method not found") because the SDK only auto-declares a capability the first
-    // time something is registered under it.
+    // Declare both channels (spec-004 §1: Resources and Tools are fixed channel types of the MCP
+    // surface), even when `modules` has zero operations of one kind. Declaring a capability installs no
+    // request handler, though: the SDK installs `tools/list` / `tools/call` on the first `registerTool`
+    // (and the Resources handlers on the first `registerResource`). So with zero `mutates: true`
+    // operations in the `modules` passed (as in the parity test's read-only fixtures), `initialize`
+    // advertises `tools` while `tools/list` still answers JSON-RPC -32601 "Method not found" (task-174
+    // corrected this comment, which claimed the opposite; `test/core/parity.test.ts` documents the same
+    // and skips the call). The production server does not use this registrar; it answers `tools/list`
+    // with an empty list itself (`./server.ts`, `bug-151`).
     server.server.registerCapabilities({ tools: {}, resources: {} });
     for (const { module, operation } of (0, registry_1.enumerateOperations)(modules)) {
         const verb = (0, registry_1.deriveVerb)(module.name, operation.name);
@@ -45,15 +60,32 @@ function registerCoreModules(server, modules, options) {
                 root: options.resolveRoot(),
             });
             const result = await operation.fn(params);
-            return result.ok ? { ok: true, text: JSON.stringify(result.value) } : { ok: false, message: result.error.message };
+            return result.ok
+                ? { ok: true, value: result.value, text: JSON.stringify(result.value), warnings: result.warnings ?? [] }
+                : { ok: false, message: result.error.message, details: (0, error_details_1.errorDetails)(result.error) };
         };
         if (operation.mutates) {
             const toolName = deriveMcpToolName(module.name, verb);
             server.registerTool(toolName, { description: `${module.name} ${verb} (mutating)` }, async () => {
                 const outcome = await callCore();
-                return outcome.ok
-                    ? { content: [{ type: 'text', text: outcome.text }] }
-                    : { content: [{ type: 'text', text: outcome.message }], isError: true };
+                if (outcome.ok) {
+                    // The success-warning channel (task-169, `dl-062`): a Tool has no stderr, so the warnings ride
+                    // as `structuredContent: {value, warnings}` — the success twin of the refusal's `{error,
+                    // details}` below. The text stays the payload's JSON, so a client reading only `content` sees
+                    // what it always saw. No warnings, no `structuredContent`.
+                    return {
+                        content: [{ type: 'text', text: outcome.text }],
+                        ...(outcome.warnings.length > 0 ? { structuredContent: { value: outcome.value, warnings: outcome.warnings } } : {}),
+                    };
+                }
+                // A tool error is a RESULT, not a JSON-RPC error, so it has no `error.data`: the details ride as
+                // `structuredContent`, in the CLI's `--format json` error shape (task-130, `dl-055` option 1).
+                // The text stays the bare reason, identical to the CLI's (spec-004 §4.3).
+                return {
+                    content: [{ type: 'text', text: outcome.message }],
+                    isError: true,
+                    ...(outcome.details.length > 0 ? { structuredContent: { error: outcome.message, details: outcome.details } } : {}),
+                };
             });
         }
         else {
@@ -62,9 +94,13 @@ function registerCoreModules(server, modules, options) {
             server.registerResource(resourceName, uri, { description: `${module.name} ${verb} (read-only)` }, async (readUri) => {
                 const outcome = await callCore();
                 if (outcome.ok) {
-                    return { contents: [{ uri: readUri.toString(), mimeType: 'application/json', text: outcome.text }] };
+                    // Its warnings ride beside `contents` (task-195, same class as `bug-231`): `memorySearch`
+                    // reports the documents its scan left out (task-171), which a client must not lose.
+                    return (0, read_only_1.withWarnings)({ contents: [{ uri: readUri.toString(), mimeType: 'application/json', text: outcome.text }] }, outcome.warnings);
                 }
-                throw new Error(outcome.message);
+                // A failed read IS a JSON-RPC error; the SDK forwards an `Error`'s `data` as `error.data`
+                // (task-130, `dl-055` option 1). No details, no `data` — the shape it always had.
+                throw (0, read_only_1.readRefusalError)(outcome.message, outcome.details);
             });
         }
     }

package/dist/mcp/registrar.js.map

@@ -1 +1 @@
-{"version":3,"file":"registrar.js","sourceRoot":"","sources":["../../src/mcp/registrar.ts"],"names":[],"mappings":";;AAyCA,8CAEC;AAOD,oDAEC;AAUD,kDAmDC;AAvFD,+CAAmE;AAUnE;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,UAAkB,EAAE,IAAY;IAChE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,UAAkB,EAAE,IAAY;IACnE,OAAO,IAAI,CAAC,CAAC,CAAC,cAAc,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,UAAU,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CACjC,MAAiB,EACjB,OAA8B,EAC9B,OAAmC;IAEnC,8FAA8F;IAC9F,8FAA8F;IAC9F,8FAA8F;IAC9F,iGAAiG;IACjG,gGAAgG;IAChG,yCAAyC;IACzC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjE,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAA,8BAAmB,EAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAA,qBAAU,EAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,KAAK,IAA0E,EAAE;YAChG,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;gBACjC,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;aAC5B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrH,CAAC,CAAC;QAEF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,aAAa,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC7F,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;gBACjC,OAAO,OAAO,CAAC,EAAE;oBACf,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;oBACrD,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5E,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1D,MAAM,CAAC,gBAAgB,CACrB,YAAY,EACZ,GAAG,EACH,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,cAAc,EAAE,EACrD,KAAK,EAAE,OAAO,EAAE,EAAE;gBAChB,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvG,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"registrar.js","sourceRoot":"","sources":["../../src/mcp/registrar.ts"],"names":[],"mappings":";;AA6CA,8CAEC;AAOD,oDAEC;AAoBD,kDA8EC;AAhID,yDAAqD;AAErD,+CAAmE;AAEnE,2CAA6D;AAU7D;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,UAAkB,EAAE,IAAY;IAChE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,UAAkB,EAAE,IAAY;IACnE,OAAO,IAAI,CAAC,CAAC,CAAC,cAAc,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,UAAU,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,mBAAmB,CACjC,MAAiB,EACjB,OAA8B,EAC9B,OAAmC;IAEnC,6FAA6F;IAC7F,oGAAoG;IACpG,oGAAoG;IACpG,6FAA6F;IAC7F,gGAAgG;IAChG,mGAAmG;IACnG,oGAAoG;IACpG,kGAAkG;IAClG,wDAAwD;IACxD,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjE,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAA,8BAAmB,EAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAA,qBAAU,EAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,KAAK,IAGpB,EAAE;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;gBACjC,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;aAC5B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,EAAE;gBACd,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE;gBACxG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAA,4BAAY,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,CAAC,CAAC;QAEF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,aAAa,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC7F,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBACf,+FAA+F;oBAC/F,yFAAyF;oBACzF,8FAA8F;oBAC9F,2DAA2D;oBAC3D,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;wBAC/C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpH,CAAC;gBACJ,CAAC;gBACD,iGAAiG;gBACjG,+FAA+F;gBAC/F,0EAA0E;gBAC1E,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;oBAClD,OAAO,EAAE,IAAI;oBACb,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1D,MAAM,CAAC,gBAAgB,CACrB,YAAY,EACZ,GAAG,EACH,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,cAAc,EAAE,EACrD,KAAK,EAAE,OAAO,EAAE,EAAE;gBAChB,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBACf,0FAA0F;oBAC1F,oFAAoF;oBACpF,OAAO,IAAA,wBAAY,EAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACvI,CAAC;gBACD,0FAA0F;gBAC1F,kFAAkF;gBAClF,MAAM,IAAA,4BAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/mcp/server.d.ts

@@ -9,8 +9,8 @@
  * pattern `src/cli/program.ts`'s `commander` wiring and `src/cli/init-command.ts`'s `createReadlinePrompt`
  * already use, and for the same reason:
  *
- *  - {@link createMcpServer} does all the wiring (construct the `McpServer`, register the v0.1 channel
- *    set) and performs NO transport / stdio / process I/O, so it is exercised end-to-end over the SDK's
+ *  - {@link createMcpServer} does all the wiring (construct the `McpServer`, register its channel set)
+ *    and performs NO transport / stdio / process I/O, so it is exercised end-to-end over the SDK's
  *    in-memory transport + a real `Client` in `test/mcp/server.test.ts` (the three P5.2.1 acceptance
  *    criteria + the read-only-only scope assertion).
  *  - {@link startMcpServer} adds the single line that cannot be unit-tested without opening a real
@@ -18,12 +18,13 @@
  *    never by an automated test (a test must never open a real stdio server against a repo).
  *
  * Channel scope (spec-014 §3): `createMcpServer` registers the read-only Resources channel
- * (`registerReadOnlyResources` — spec-004 §2, P5.2.1) and, since task-058-mcp-prompts-role-based
- * (P5.2.2, v0.2), the read-only role Prompts channel (`registerRolePrompts` — spec-004 §3). It
- * deliberately does NOT call `registerCoreModules`, which would advertise a mutating Tool for every
- * `mutates: true` CoreOperation (as of task-025, `dnaSet` -> the `dna.set` Tool) — Tools are P5.2.3
- * (v0.4) scope and will extend the channel set here later; the entry point (`wingfoil mcp` + this
- * transport wiring) is unchanged by those additions.
+ * (`registerReadOnlyResources` — spec-004 §2, P5.2.1), the read-only role Prompts channel
+ * (`registerRolePrompts` — spec-004 §3, P5.2.2, since task-058-mcp-prompts-role-based), and an **empty
+ * Tools channel** ({@link registerEmptyToolsChannel}, task-174, `bug-151`). It deliberately does NOT
+ * call `registerCoreModules`, which would advertise a mutating Tool for every `mutates: true`
+ * CoreOperation (as of task-025, `dnaSet` -> the `dna.set` Tool) — Tools are P5.2.3 (v0.4) scope and
+ * will replace the empty channel here later; the entry point (`wingfoil mcp` + this transport wiring)
+ * is unchanged by those additions.
  */
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 /** Construction/connection options for the production MCP server. */
@@ -34,18 +35,24 @@ export interface McpServerOptions {
      * resolves the root once up front and passes a closure returning that value (spec-014 §1).
      */
     readonly resolveRoot: () => string;
+    /**
+     * The DNA role set the Prompts channel serves, one `{role}-session` Prompt each, fixed for the
+     * server's life (spec-004 §3.1, `dl-049` (b)). `wingfoil mcp` reads it in its pre-flight
+     * (`loadDnaRoleSet`), so construction itself reads nothing (spec-014 §2).
+     */
+    readonly roles: readonly string[];
     /** Server identity `name`; defaults to `wingfoil`. */
     readonly name?: string;
     /** Server identity `version`; defaults to `0.0.0` (the `wingfoil mcp` command passes the real package version). */
     readonly version?: string;
 }
 /**
- * Construct the production `McpServer` and register the read-only Resources and role Prompts channels
- * on it (spec-014 §3). Pure and synchronous — no transport, no stdio, no filesystem read, no process
- * side effects (spec-014 §2: "no I/O at construction time beyond wiring handlers"); every handler
- * resolves the root and reads the project per request. So a test can connect it over the SDK's
- * in-memory transport and drive it with a real `Client`, and `wingfoil mcp` never fails to start
- * because of the project's content.
+ * Construct the production `McpServer` and register its channel set on it (spec-014 §3): the read-only
+ * Resources, the role Prompts over the given role set, and the empty Tools channel. Pure and
+ * synchronous — no transport, no stdio, no filesystem read, no process side effects (spec-014 §2: "no
+ * I/O at construction time beyond wiring handlers"); the role set arrives already read, and every
+ * handler resolves the root and reads the project per request. So a test can connect it over the SDK's
+ * in-memory transport and drive it with a real `Client`.
  */
 export declare function createMcpServer(options: McpServerOptions): McpServer;
 /**

package/dist/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKpE,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;IACnC,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mHAAmH;IACnH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAQpE;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAKlF"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOpE,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mHAAmH;IACnH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AA4BD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAUpE;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAKlF"}

package/dist/mcp/server.js

@@ -13,8 +13,8 @@ exports.startMcpServer = startMcpServer;
  * pattern `src/cli/program.ts`'s `commander` wiring and `src/cli/init-command.ts`'s `createReadlinePrompt`
  * already use, and for the same reason:
  *
- *  - {@link createMcpServer} does all the wiring (construct the `McpServer`, register the v0.1 channel
- *    set) and performs NO transport / stdio / process I/O, so it is exercised end-to-end over the SDK's
+ *  - {@link createMcpServer} does all the wiring (construct the `McpServer`, register its channel set)
+ *    and performs NO transport / stdio / process I/O, so it is exercised end-to-end over the SDK's
  *    in-memory transport + a real `Client` in `test/mcp/server.test.ts` (the three P5.2.1 acceptance
  *    criteria + the read-only-only scope assertion).
  *  - {@link startMcpServer} adds the single line that cannot be unit-tested without opening a real
@@ -22,23 +22,47 @@ exports.startMcpServer = startMcpServer;
  *    never by an automated test (a test must never open a real stdio server against a repo).
  *
  * Channel scope (spec-014 §3): `createMcpServer` registers the read-only Resources channel
- * (`registerReadOnlyResources` — spec-004 §2, P5.2.1) and, since task-058-mcp-prompts-role-based
- * (P5.2.2, v0.2), the read-only role Prompts channel (`registerRolePrompts` — spec-004 §3). It
- * deliberately does NOT call `registerCoreModules`, which would advertise a mutating Tool for every
- * `mutates: true` CoreOperation (as of task-025, `dnaSet` -> the `dna.set` Tool) — Tools are P5.2.3
- * (v0.4) scope and will extend the channel set here later; the entry point (`wingfoil mcp` + this
- * transport wiring) is unchanged by those additions.
+ * (`registerReadOnlyResources` — spec-004 §2, P5.2.1), the read-only role Prompts channel
+ * (`registerRolePrompts` — spec-004 §3, P5.2.2, since task-058-mcp-prompts-role-based), and an **empty
+ * Tools channel** ({@link registerEmptyToolsChannel}, task-174, `bug-151`). It deliberately does NOT
+ * call `registerCoreModules`, which would advertise a mutating Tool for every `mutates: true`
+ * CoreOperation (as of task-025, `dnaSet` -> the `dna.set` Tool) — Tools are P5.2.3 (v0.4) scope and
+ * will replace the empty channel here later; the entry point (`wingfoil mcp` + this transport wiring)
+ * is unchanged by those additions.
  */
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
 const index_1 = require("./index");
 /**
- * Construct the production `McpServer` and register the read-only Resources and role Prompts channels
- * on it (spec-014 §3). Pure and synchronous — no transport, no stdio, no filesystem read, no process
- * side effects (spec-014 §2: "no I/O at construction time beyond wiring handlers"); every handler
- * resolves the root and reads the project per request. So a test can connect it over the SDK's
- * in-memory transport and drive it with a real `Client`, and `wingfoil mcp` never fails to start
- * because of the project's content.
+ * Declare the Tools channel and answer it with no Tools (task-174, `bug-151`), until P5.2.3 (v0.4)
+ * registers real ones. A client that probes `tools/list` gets `{tools: []}` rather than the JSON-RPC
+ * `-32601` it got while the channel was undeclared, and `initialize` advertises `tools: {}` — without
+ * `listChanged`, since the list cannot change during a session.
+ *
+ * A `tools/call` necessarily names a Tool that does not exist. It is answered the way spec-004 §4.3
+ * item 4 answers every Tool refusal — an `isError: true` result, not a JSON-RPC error — with the SDK's
+ * own wording for an unknown Tool, `Tool <name> not found`.
+ *
+ * Owned on the low-level server, like the Prompts handlers (`./prompt.ts`): the SDK installs its own
+ * Tools handlers only on the first `registerTool`, and a later `registerTool` on this server fails
+ * loudly ("A request handler for tools/list already exists") instead of being silently shadowed.
+ */
+function registerEmptyToolsChannel(server) {
+    server.server.registerCapabilities({ tools: {} });
+    server.server.setRequestHandler(types_js_1.ListToolsRequestSchema, () => ({ tools: [] }));
+    server.server.setRequestHandler(types_js_1.CallToolRequestSchema, (request) => ({
+        content: [{ type: 'text', text: `Tool ${request.params.name} not found` }],
+        isError: true,
+    }));
+}
+/**
+ * Construct the production `McpServer` and register its channel set on it (spec-014 §3): the read-only
+ * Resources, the role Prompts over the given role set, and the empty Tools channel. Pure and
+ * synchronous — no transport, no stdio, no filesystem read, no process side effects (spec-014 §2: "no
+ * I/O at construction time beyond wiring handlers"); the role set arrives already read, and every
+ * handler resolves the root and reads the project per request. So a test can connect it over the SDK's
+ * in-memory transport and drive it with a real `Client`.
  */
 function createMcpServer(options) {
     const server = new mcp_js_1.McpServer({
@@ -46,7 +70,9 @@ function createMcpServer(options) {
         version: options.version ?? '0.0.0',
     });
     (0, index_1.registerReadOnlyResources)(server, { resolveRoot: options.resolveRoot });
-    (0, index_1.registerRolePrompts)(server, { resolveRoot: options.resolveRoot });
+    (0, index_1.registerRolePrompts)(server, { resolveRoot: options.resolveRoot, roles: options.roles });
+    (0, index_1.registerSessionContextResource)(server, { resolveRoot: options.resolveRoot, roles: options.roles });
+    registerEmptyToolsChannel(server);
     return server;
 }
 /**

package/dist/mcp/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";;AAsDA,0CAQC;AAQD,wCAKC;AA3ED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,oEAAoE;AACpE,wEAAiF;AAEjF,mCAAyE;AAgBzE;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,OAAyB;IACvD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;KACpC,CAAC,CAAC;IACH,IAAA,iCAAyB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxE,IAAA,2BAAmB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,OAAyB;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";;AAyFA,0CAUC;AAQD,wCAKC;AAhHD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,oEAAoE;AACpE,wEAAiF;AACjF,iEAAmG;AAGnG,mCAAyG;AAsBzG;;;;;;;;;;;;;GAaG;AACH,SAAS,yBAAyB,CAAC,MAAiB;IAClD,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAC7B,gCAAqB,EACrB,CAAC,OAAO,EAAkB,EAAE,CAAC,CAAC;QAC5B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI;KACd,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,OAAyB;IACvD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;QAC3B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;KACpC,CAAC,CAAC;IACH,IAAA,iCAAyB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxE,IAAA,2BAAmB,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,IAAA,sCAA8B,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACnG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,OAAyB;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/mcp/session-resource.d.ts

@@ -0,0 +1,13 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/** `spec-004` §2.1 — the execution context of `role` on `element` at the commit `state` (task-236). */
+export declare const SESSION_CONTEXT_URI_TEMPLATE = "wingfoil://session/{role}/{element}/{state}";
+/** Options for {@link registerSessionContextResource}. */
+export interface RegisterSessionContextResourceOptions {
+    /** Resolves the project root each read is served from. */
+    readonly resolveRoot: () => string;
+    /** The DNA role set, fixed at server start (`spec-004` §3.1), the same set the Prompts are registered for. */
+    readonly roles: readonly string[];
+}
+/** Register the session Resource template on `server` (task-236). */
+export declare function registerSessionContextResource(server: McpServer, options: RegisterSessionContextResourceOptions): void;
+//# sourceMappingURL=session-resource.d.ts.map

package/dist/mcp/session-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-resource.d.ts","sourceRoot":"","sources":["../../src/mcp/session-resource.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOzE,uGAAuG;AACvG,eAAO,MAAM,4BAA4B,gDAAgD,CAAC;AAE1F,0DAA0D;AAC1D,MAAM,WAAW,qCAAqC;IACpD,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;IACnC,8GAA8G;IAC9G,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAgBD,qEAAqE;AACrE,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,qCAAqC,GAAG,IAAI,CAoBtH"}

package/dist/mcp/session-resource.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_CONTEXT_URI_TEMPLATE = void 0;
+exports.registerSessionContextResource = registerSessionContextResource;
+/**
+ * The session Resource `wingfoil://session/{role}/{element}/{state}` (task-236; approver ruling (a) of
+ * 2026-10-13 and D-E…D-G of 2026-10-14; `spec-016` §2.4, `spec-004` §2.1/§3.4): the execution context of the
+ * `{role}-session` Prompt for `(role, element, state)`, served also as a read-only Resource, byte for byte.
+ *
+ * **Why both.** An agent CLI may let its model read MCP Resources but not get MCP Prompts: the by-hand pass of
+ * the `claude-code` built-in found Claude Code 2.1.296's model has `ListMcpResourcesTool` and
+ * `ReadMcpResourceTool` and no way to get a Prompt, which Claude Code offers only as a command the user types.
+ * `agent execute`'s bootstrap therefore names this Resource; the Prompt stays served, unchanged.
+ *
+ * **Never listed.** `state` is any commit, so the template has no `list` callback: `resources/list` names no
+ * `wingfoil://session/` URI and `resources/templates/list` declares the template. A client reads it by the full
+ * URI the bootstrap gives; the SDK matches a read against every registered template.
+ *
+ * **The variables.** `{element}` is the Prompt's `element` argument, `<type>:<id>` (`spec-008` §7), in one
+ * segment (`:` is a legal path character; no id holds `/` or `,`). Each variable is percent-decoded before it
+ * is checked, so `task%3Atask-042-foo` reads as `task:task-042-foo`.
+ *
+ * **Refusals**, in order: a write intent (`spec-004` §2.3), before anything is read; a role outside the role set
+ * fixed at server start (`spec-004` §3.1) → `no session context for undefined role '<role>'`; then the
+ * Prompt's own (§3.4): a malformed element-ref, a malformed revision, a revision naming no commit and an element
+ * the commit does not hold are `-32602`; a context the repository refuses is a failed read.
+ */
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const core_1 = require("../core");
+const prompt_1 = require("./prompt");
+const read_only_1 = require("./read-only");
+/** `spec-004` §2.1 — the execution context of `role` on `element` at the commit `state` (task-236). */
+exports.SESSION_CONTEXT_URI_TEMPLATE = 'wingfoil://session/{role}/{element}/{state}';
+/**
+ * A URI variable, percent-decoded; left as sent when it is not valid percent-encoding (the check then refuses
+ * it). The SDK types a variable `string | string[]`; none of this template's variables has the explode
+ * modifier, so it is always one string (as `memory-resource.ts` notes for its own).
+ */
+function decoded(value) {
+    const text = value;
+    try {
+        return decodeURIComponent(text);
+    }
+    catch {
+        return text;
+    }
+}
+/** Register the session Resource template on `server` (task-236). */
+function registerSessionContextResource(server, options) {
+    server.registerResource('session.context', new mcp_js_1.ResourceTemplate(exports.SESSION_CONTEXT_URI_TEMPLATE, { list: undefined }), {
+        description: "the execution context of a role on a Memory element at a commit, as the '{role}-session' prompt returns it with element and state (read-only)",
+        mimeType: 'text/markdown',
+    }, (uri, variables, extra) => (0, read_only_1.withRefusalDetails)(() => {
+        (0, read_only_1.refuseIfWriteIntent)(extra._meta);
+        const role = decoded(variables.role);
+        if (!options.roles.includes(role))
+            throw (0, prompt_1.promptRequestError)(`no session context for undefined role '${role}'`);
+        const element = (0, core_1.parseElementRef)(decoded(variables.element));
+        if (!element.ok)
+            throw (0, prompt_1.promptRequestError)(element.error.message);
+        const { text, warnings } = (0, prompt_1.buildSessionContext)(options.resolveRoot(), role, element.value, decoded(variables.state));
+        return (0, read_only_1.withWarnings)({ contents: [{ uri: uri.toString(), mimeType: 'text/markdown', text }] }, warnings);
+    }));
+}
+//# sourceMappingURL=session-resource.js.map

package/dist/mcp/session-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-resource.js","sourceRoot":"","sources":["../../src/mcp/session-resource.ts"],"names":[],"mappings":";;;AAyDA,wEAoBC;AA7ED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,oEAA2E;AAG3E,kCAA0C;AAE1C,qCAAmE;AACnE,2CAAoF;AAEpF,uGAAuG;AAC1F,QAAA,4BAA4B,GAAG,6CAA6C,CAAC;AAU1F;;;;GAIG;AACH,SAAS,OAAO,CAAC,KAAoC;IACnD,MAAM,IAAI,GAAG,KAAe,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAgB,8BAA8B,CAAC,MAAiB,EAAE,OAA8C;IAC9G,MAAM,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,IAAI,yBAAgB,CAAC,oCAA4B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACvE;QACE,WAAW,EACT,+IAA+I;QACjJ,QAAQ,EAAE,eAAe;KAC1B,EACD,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CACxB,IAAA,8BAAkB,EAAC,GAAG,EAAE;QACtB,IAAA,+BAAmB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAA,2BAAkB,EAAC,0CAA0C,IAAI,GAAG,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAG,IAAA,sBAAe,EAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAA,2BAAkB,EAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAA,4BAAmB,EAAC,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACrH,OAAO,IAAA,wBAAY,EAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1G,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}

package/dist/mcp/workflow-resource.d.ts

@@ -14,4 +14,22 @@ export declare const WORKFLOW_DOCUMENT_URI_TEMPLATE = "wingfoil://workflows/{nam
  * task registers.
  */
 export declare function registerWorkflowResources(server: McpServer, options: RegisterWorkflowResourcesOptions): void;
+/** spec-017 §9 — the active instance's next step: `wingfoil workflow next --format json`'s `NextResult`, at `HEAD`. */
+export declare const WORKFLOW_NEXT_URI = "wingfoil://workflows/-/next";
+/** spec-017 §9 — every open instance: `wingfoil workflow status --format json`'s `StatusResult`, at `HEAD`. */
+export declare const WORKFLOW_STATUS_URI = "wingfoil://workflows/-/status";
+/**
+ * Register the two workflow-state Resources on `server` (task-239; `spec-017` §9, ruling R12; `spec-004` §2.1).
+ * They cannot collide with `wingfoil://workflows/{name}`: their second segment is `-`, which no workflow name
+ * can be (`spec-003` names start with a letter), and they have a third segment, which the single-segment
+ * `{name}` template never matches — so a workflow named `next` stays `wingfoil://workflows/next`. Each read runs the core
+ * function the CLI command runs with no operand — `workflowNextAtHead` / `workflowStatusAtHead`, the
+ * deduction at `HEAD` — and returns its value serialized as the CLI's `--format json` prints it (without the
+ * final newline). Nothing is cached: every read deduces again. A refusal is a failed read carrying the CLI's
+ * message and details (spec-004 §4.3 item 4), whether core returns it (`CoreResult.error`, through
+ * `coreResultResource`) or a loader throws it (`withRefusalDetails`); a read carrying a write intent is refused
+ * first (spec-004 §2.3). With no operand neither function returns a `CoreResult.error` today (only an
+ * unresolvable `<ref>` does, `spec-017` §10), so the first path is the shared helper's, tested on its own.
+ */
+export declare function registerWorkflowStateResources(server: McpServer, options: RegisterWorkflowResourcesOptions): void;
 //# sourceMappingURL=workflow-resource.d.ts.map

package/dist/mcp/workflow-resource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-resource.d.ts","sourceRoot":"","sources":["../../src/mcp/workflow-resource.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,qDAAqD;AACrD,MAAM,WAAW,gCAAgC;IAC/C,0HAA0H;IAC1H,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;CACpC;AAED,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAC/D,oFAAoF;AACpF,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gCAAgC,GAAG,IAAI,CAqC5G"}
+{"version":3,"file":"workflow-resource.d.ts","sourceRoot":"","sources":["../../src/mcp/workflow-resource.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,qDAAqD;AACrD,MAAM,WAAW,gCAAgC;IAC/C,0HAA0H;IAC1H,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;CACpC;AAED,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAC/D,oFAAoF;AACpF,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gCAAgC,GAAG,IAAI,CAuC5G;AAED,uHAAuH;AACvH,eAAO,MAAM,iBAAiB,gCAAgC,CAAC;AAC/D,+GAA+G;AAC/G,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gCAAgC,GAAG,IAAI,CAejH"}

package/dist/mcp/workflow-resource.js

@@ -1,10 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WORKFLOW_DOCUMENT_URI_TEMPLATE = exports.WORKFLOWS_COLLECTION_URI = void 0;
+exports.WORKFLOW_STATUS_URI = exports.WORKFLOW_NEXT_URI = exports.WORKFLOW_DOCUMENT_URI_TEMPLATE = exports.WORKFLOWS_COLLECTION_URI = void 0;
 exports.registerWorkflowResources = registerWorkflowResources;
+exports.registerWorkflowStateResources = registerWorkflowStateResources;
 /**
- * `wingfoil://workflows` (collection) and `wingfoil://workflows/{name}` (a single workflow
- * definition) Resources — task-011-mcp-resources-read-only, REQ-INT-01,
+ * `wingfoil://workflows` (collection), `wingfoil://workflows/{name}` (one workflow definition) and,
+ * since task-239, `wingfoil://workflows/-/next` and `-/status` Resources — task-011, REQ-INT-01,
  * spec-004-mcp-surface-contract §2.1. Distinct from `registerCoreModules`'s existing
  * `wingfoil://workflow/list` Resource (task-006-dual-interface-shared-core, the generic
  * `wingfoil://{module}/{verb}` transform of the `workflowList` `CoreOperation`) — both coexist; this
@@ -18,7 +19,8 @@ exports.registerWorkflowResources = registerWorkflowResources;
  * here distinguishes them beyond what each workflow's own `kind` field already reports.
  *
  * Registered directly via `McpServer.registerResource`, not through `registerCoreModules`'s
- * `CoreModule[]` registry — no `workflowShow` `CoreOperation` exists yet; same
+ * `CoreModule[]` registry — `workflowList` / `workflowShow` answer from `HEAD` with another payload, while
+ * the first two keep theirs and the working tree in v0.3, the state Resources answer at `HEAD` (spec-017 §9); same
  * spec-006-core-domain-api §4 parity deviation `memory-resource.ts`/`dna-resource.ts` document for
  * their own Resources, for the same reason (task-030-implement-mcp-resources' scope).
  */
@@ -35,7 +37,7 @@ exports.WORKFLOW_DOCUMENT_URI_TEMPLATE = 'wingfoil://workflows/{name}';
  * task registers.
  */
 function registerWorkflowResources(server, options) {
-    server.registerResource('workflows.list', exports.WORKFLOWS_COLLECTION_URI, { description: 'every loaded workflow definition, summary only (read-only)' }, async (uri, extra) => {
+    server.registerResource('workflows.list', exports.WORKFLOWS_COLLECTION_URI, { description: 'every loaded workflow definition, summary only (read-only)' }, (uri, extra) => (0, read_only_1.withRefusalDetails)(() => {
         (0, read_only_1.refuseIfWriteIntent)(extra._meta);
         const root = options.resolveRoot();
         const { workflows } = (0, core_1.loadWorkflowsYaml)(root);
@@ -44,9 +46,9 @@ function registerWorkflowResources(server, options) {
             .map(({ name, kind, description }) => ({ name, kind, description }))
             .sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
         return (0, read_only_1.jsonResourceResult)(uri, summaries);
-    });
+    }));
     const documentTemplate = new mcp_js_1.ResourceTemplate(exports.WORKFLOW_DOCUMENT_URI_TEMPLATE, { list: undefined });
-    server.registerResource('workflows.show', documentTemplate, { description: 'one workflow definition, full content (read-only)' }, async (uri, variables, extra) => {
+    server.registerResource('workflows.show', documentTemplate, { description: 'one workflow definition, full content (read-only)' }, (uri, variables, extra) => (0, read_only_1.withRefusalDetails)(() => {
         (0, read_only_1.refuseIfWriteIntent)(extra._meta);
         const root = options.resolveRoot();
         const { workflows } = (0, core_1.loadWorkflowsYaml)(root);
@@ -58,6 +60,33 @@ function registerWorkflowResources(server, options) {
         if (!workflow)
             throw (0, read_only_1.resourceNotFoundError)(`workflows/${name}`);
         return (0, read_only_1.jsonResourceResult)(uri, workflow);
-    });
+    }));
+}
+/** spec-017 §9 — the active instance's next step: `wingfoil workflow next --format json`'s `NextResult`, at `HEAD`. */
+exports.WORKFLOW_NEXT_URI = 'wingfoil://workflows/-/next';
+/** spec-017 §9 — every open instance: `wingfoil workflow status --format json`'s `StatusResult`, at `HEAD`. */
+exports.WORKFLOW_STATUS_URI = 'wingfoil://workflows/-/status';
+/**
+ * Register the two workflow-state Resources on `server` (task-239; `spec-017` §9, ruling R12; `spec-004` §2.1).
+ * They cannot collide with `wingfoil://workflows/{name}`: their second segment is `-`, which no workflow name
+ * can be (`spec-003` names start with a letter), and they have a third segment, which the single-segment
+ * `{name}` template never matches — so a workflow named `next` stays `wingfoil://workflows/next`. Each read runs the core
+ * function the CLI command runs with no operand — `workflowNextAtHead` / `workflowStatusAtHead`, the
+ * deduction at `HEAD` — and returns its value serialized as the CLI's `--format json` prints it (without the
+ * final newline). Nothing is cached: every read deduces again. A refusal is a failed read carrying the CLI's
+ * message and details (spec-004 §4.3 item 4), whether core returns it (`CoreResult.error`, through
+ * `coreResultResource`) or a loader throws it (`withRefusalDetails`); a read carrying a write intent is refused
+ * first (spec-004 §2.3). With no operand neither function returns a `CoreResult.error` today (only an
+ * unresolvable `<ref>` does, `spec-017` §10), so the first path is the shared helper's, tested on its own.
+ */
+function registerWorkflowStateResources(server, options) {
+    const register = (name, uri, description, read) => {
+        server.registerResource(name, uri, { description }, (readUri, extra) => (0, read_only_1.withRefusalDetails)(() => {
+            (0, read_only_1.refuseIfWriteIntent)(extra._meta);
+            return (0, read_only_1.coreResultResource)(readUri, read(options.resolveRoot()));
+        }));
+    };
+    register('workflows.next', exports.WORKFLOW_NEXT_URI, 'the next step of the active workflow instance, as committed at HEAD (read-only)', (root) => (0, core_1.workflowNextAtHead)(root));
+    register('workflows.status', exports.WORKFLOW_STATUS_URI, 'every open workflow instance, its pending approvals and the elements waiting at a gate, as committed at HEAD (read-only)', (root) => (0, core_1.workflowStatusAtHead)(root));
 }
 //# sourceMappingURL=workflow-resource.js.map

package/dist/mcp/workflow-resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-resource.js","sourceRoot":"","sources":["../../src/mcp/workflow-resource.ts"],"names":[],"mappings":";;;AA2CA,8DAqCC;AAhFD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,oEAA2E;AAG3E,kCAA4C;AAE5C,2CAA6F;AAQ7F,wEAAwE;AAC3D,QAAA,wBAAwB,GAAG,sBAAsB,CAAC;AAC/D,oFAAoF;AACvE,QAAA,8BAA8B,GAAG,6BAA6B,CAAC;AAE5E;;;;GAIG;AACH,SAAgB,yBAAyB,CAAC,MAAiB,EAAE,OAAyC;IACpG,MAAM,CAAC,gBAAgB,CACrB,gBAAgB,EAChB,gCAAwB,EACxB,EAAE,WAAW,EAAE,4DAA4D,EAAE,EAC7E,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAA,+BAAmB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAiB,EAAC,IAAI,CAAC,CAAC;QAC9C,2FAA2F;QAC3F,MAAM,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC;aAC7B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;aACnE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpE,OAAO,IAAA,8BAAkB,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC,CACF,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,yBAAgB,CAAC,sCAA8B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnG,MAAM,CAAC,gBAAgB,CACrB,gBAAgB,EAChB,gBAAgB,EAChB,EAAE,WAAW,EAAE,mDAAmD,EAAE,EACpE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAA,+BAAmB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAiB,EAAC,IAAI,CAAC,CAAC;QAC9C,8FAA8F;QAC9F,gGAAgG;QAChG,sBAAsB;QACtB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAc,CAAC;QACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAA,iCAAqB,EAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QAEhE,OAAO,IAAA,8BAAkB,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workflow-resource.js","sourceRoot":"","sources":["../../src/mcp/workflow-resource.ts"],"names":[],"mappings":";;;AA4CA,8DAuCC;AAoBD,wEAeC;AAtHD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,oEAA2E;AAG3E,kCAAuG;AAEvG,2CAAqI;AAQrI,wEAAwE;AAC3D,QAAA,wBAAwB,GAAG,sBAAsB,CAAC;AAC/D,oFAAoF;AACvE,QAAA,8BAA8B,GAAG,6BAA6B,CAAC;AAE5E;;;;GAIG;AACH,SAAgB,yBAAyB,CAAC,MAAiB,EAAE,OAAyC;IACpG,MAAM,CAAC,gBAAgB,CACrB,gBAAgB,EAChB,gCAAwB,EACxB,EAAE,WAAW,EAAE,4DAA4D,EAAE,EAC7E,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACb,IAAA,8BAAkB,EAAC,GAAG,EAAE;QACtB,IAAA,+BAAmB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAiB,EAAC,IAAI,CAAC,CAAC;QAC9C,2FAA2F;QAC3F,MAAM,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC;aAC7B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;aACnE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpE,OAAO,IAAA,8BAAkB,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,yBAAgB,CAAC,sCAA8B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnG,MAAM,CAAC,gBAAgB,CACrB,gBAAgB,EAChB,gBAAgB,EAChB,EAAE,WAAW,EAAE,mDAAmD,EAAE,EACpE,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CACxB,IAAA,8BAAkB,EAAC,GAAG,EAAE;QACtB,IAAA,+BAAmB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,wBAAiB,EAAC,IAAI,CAAC,CAAC;QAC9C,8FAA8F;QAC9F,gGAAgG;QAChG,sBAAsB;QACtB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAc,CAAC;QACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAA,iCAAqB,EAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QAEhE,OAAO,IAAA,8BAAkB,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED,uHAAuH;AAC1G,QAAA,iBAAiB,GAAG,6BAA6B,CAAC;AAC/D,+GAA+G;AAClG,QAAA,mBAAmB,GAAG,+BAA+B,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH,SAAgB,8BAA8B,CAAC,MAAiB,EAAE,OAAyC;IACzG,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,WAAmB,EAAE,IAA2C,EAAQ,EAAE;QACrH,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACrE,IAAA,8BAAkB,EAAC,GAAG,EAAE;YACtB,IAAA,+BAAmB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,IAAA,8BAAkB,EAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IACF,QAAQ,CAAC,gBAAgB,EAAE,yBAAiB,EAAE,iFAAiF,EAAE,CAAC,IAAI,EAAE,EAAE,CACxI,IAAA,yBAAkB,EAAC,IAAI,CAAC,CACzB,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,2BAAmB,EAAE,0HAA0H,EAAE,CAAC,IAAI,EAAE,EAAE,CACrL,IAAA,2BAAoB,EAAC,IAAI,CAAC,CAC3B,CAAC;AACJ,CAAC"}