zam-core 0.12.0 → 0.13.0

package/dist/cli/commands/mcp.js

@@ -9165,12 +9165,21 @@ var init_bundle = __esm({
 var io_exports = {};
 __export(io_exports, {
   DEFAULT_BUNDLE_DIR: () => DEFAULT_BUNDLE_DIR,
+  findRepoRoot: () => findRepoRoot,
   loadBundle: () => loadBundle,
   resolveArticlePath: () => resolveArticlePath,
+  resolveCitationPath: () => resolveCitationPath,
   upsertArticle: () => upsertArticle
 });
-import { mkdirSync as mkdirSync16, readdirSync as readdirSync3, readFileSync as readFileSync18, writeFileSync as writeFileSync13 } from "fs";
-import { join as join24, resolve as resolve7 } from "path";
+import {
+  existsSync as existsSync21,
+  mkdirSync as mkdirSync16,
+  readdirSync as readdirSync3,
+  readFileSync as readFileSync18,
+  realpathSync as realpathSync2,
+  writeFileSync as writeFileSync13
+} from "fs";
+import { dirname as dirname11, isAbsolute as isAbsolute2, join as join24, relative, resolve as resolve7, sep } from "path";
 function resolveArticlePath(dir, file) {
   if (file.includes("/") || file.includes("\\") || file.includes("..")) {
     throw new Error(`invalid article file name: ${file}`);
@@ -9180,6 +9189,42 @@ function resolveArticlePath(dir, file) {
   }
   return join24(resolve7(dir), file);
 }
+function findRepoRoot(startDir) {
+  let dir = resolve7(startDir);
+  for (; ; ) {
+    if (existsSync21(join24(dir, ".git"))) return dir;
+    const parent = dirname11(dir);
+    if (parent === dir) return resolve7(startDir, "..");
+    dir = parent;
+  }
+}
+function resolveCitationPath(bundleDir, target) {
+  if (isAbsolute2(target)) {
+    throw new Error(
+      `invalid citation target: absolute paths are not allowed (${target})`
+    );
+  }
+  if (!target.endsWith(".md")) {
+    throw new Error(
+      `invalid citation target: only .md files are readable (${target})`
+    );
+  }
+  const root = findRepoRoot(bundleDir);
+  const resolved = resolve7(bundleDir, target);
+  assertContained(root, resolved, target);
+  if (existsSync21(resolved)) {
+    assertContained(realpathSync2(root), realpathSync2(resolved), target);
+  }
+  return resolved;
+}
+function assertContained(root, candidate, target) {
+  const rel = relative(root, candidate);
+  if (rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute2(rel)) {
+    throw new Error(
+      `invalid citation target: resolves outside the repository root (${target})`
+    );
+  }
+}
 function loadBundle(dir) {
   const root = resolve7(dir);
   let entries;
@@ -9253,8 +9298,8 @@ var init_io = __esm({
 
 // src/cli/commands/mcp.ts
 init_kernel();
-import { existsSync as existsSync21, readFileSync as readFileSync19 } from "fs";
-import { dirname as dirname11, join as join25 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync19 } from "fs";
+import { dirname as dirname12, join as join25 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 import {
   RESOURCE_MIME_TYPE,
@@ -9347,7 +9392,8 @@ var COMPANION_SURFACES = [
   "recall",
   "graph",
   "settings",
-  "studio"
+  "studio",
+  "okf"
 ];
 function isCompanionSurface(value) {
   return typeof value === "string" && COMPANION_SURFACES.includes(value);
@@ -11898,7 +11944,7 @@ async function readWebLink(url) {
         redirect: "manual",
         signal: controller.signal,
         headers: {
-          "User-Agent": "ZAM-Content-Studio/0.12.0"
+          "User-Agent": "ZAM-Content-Studio/0.13.0"
         }
       });
       if (res.status >= 300 && res.status < 400) {
@@ -31063,8 +31109,8 @@ bridgeCommand.command("start-recording").description("Start screen recording in
   const statePath = join22(tmpdir3(), `zam-recording-${sessionId}.json`);
   const defaultExt = platform === "win32" ? ".mkv" : ".mov";
   const outputPath = opts.output ?? join22(tmpdir3(), `zam-recording-${sessionId}${defaultExt}`);
-  const { existsSync: existsSync22, writeFileSync: writeFileSync14, openSync, closeSync } = await import("fs");
-  if (existsSync22(statePath)) {
+  const { existsSync: existsSync23, writeFileSync: writeFileSync14, openSync, closeSync } = await import("fs");
+  if (existsSync23(statePath)) {
     jsonOut({
       sessionId,
       started: false,
@@ -31155,8 +31201,8 @@ bridgeCommand.command("stop-recording").description(
   }
   const sessionId = opts.session;
   const statePath = join22(tmpdir3(), `zam-recording-${sessionId}.json`);
-  const { existsSync: existsSync22, readFileSync: readFileSync20, rmSync: rmSync4 } = await import("fs");
-  if (!existsSync22(statePath)) {
+  const { existsSync: existsSync23, readFileSync: readFileSync20, rmSync: rmSync4 } = await import("fs");
+  if (!existsSync23(statePath)) {
     jsonOut({
       sessionId,
       stopped: false,
@@ -31193,7 +31239,7 @@ bridgeCommand.command("stop-recording").description(
     rmSync4(statePath, { force: true });
   } catch {
   }
-  if (!existsSync22(outputPath)) {
+  if (!existsSync23(outputPath)) {
     jsonOut({
       sessionId,
       stopped: false,
@@ -33817,9 +33863,9 @@ async function publishUiIntent(app, input = {}, opts = {}) {
 }
 
 // src/cli/commands/mcp.ts
-var __dirname = dirname11(fileURLToPath6(import.meta.url));
+var __dirname = dirname12(fileURLToPath6(import.meta.url));
 var pkgPath = join25(__dirname, "..", "..", "package.json");
-if (!existsSync21(pkgPath)) {
+if (!existsSync22(pkgPath)) {
   pkgPath = join25(__dirname, "..", "..", "..", "package.json");
 }
 var pkg = JSON.parse(readFileSync19(pkgPath, "utf-8"));
@@ -33827,6 +33873,7 @@ var STUDIO_RESOURCE_URI = "ui://zam/studio";
 var RECALL_RESOURCE_URI = "ui://zam/recall";
 var GRAPH_RESOURCE_URI = "ui://zam/graph";
 var SETTINGS_RESOURCE_URI = "ui://zam/settings";
+var OKF_RESOURCE_URI = "ui://zam/okf";
 var STUDIO_BRIDGE_ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
   "list-tokens",
   "personal-card-list",
@@ -33854,7 +33901,7 @@ function loadPanelHtml(fileName, placeholderTitle) {
     join25(__dirname, "..", "..", "..", "dist", "ui", fileName)
   ];
   for (const candidate of candidates) {
-    if (existsSync21(candidate)) {
+    if (existsSync22(candidate)) {
       return readFileSync19(candidate, "utf-8");
     }
   }
@@ -34626,22 +34673,37 @@ function createMcpServer(db) {
     {
       description: "List the OKF knowledge-base articles (type, title, description, tags, resource URL) plus conformance problems, if any",
       inputSchema: {
-        bundle_dir: okfBundleDirSchema
+        bundle_dir: okfBundleDirSchema,
+        include_log: z.boolean().optional().describe(
+          "Also return the raw log.md text (empty string if missing)"
+        )
       },
       annotations: {
         ...commonAnnotations,
         readOnlyHint: true
       }
     },
-    wrapHandler(async (params) => {
-      const { DEFAULT_BUNDLE_DIR: DEFAULT_BUNDLE_DIR2, loadBundle: loadBundle2 } = await Promise.resolve().then(() => (init_io(), io_exports));
-      const bundle = loadBundle2(params.bundle_dir ?? DEFAULT_BUNDLE_DIR2);
-      return {
-        dir: bundle.dir,
-        articles: bundle.catalog,
-        problems: bundle.problems
-      };
-    })
+    wrapHandler(
+      async (params) => {
+        const { DEFAULT_BUNDLE_DIR: DEFAULT_BUNDLE_DIR2, loadBundle: loadBundle2 } = await Promise.resolve().then(() => (init_io(), io_exports));
+        const bundle = loadBundle2(params.bundle_dir ?? DEFAULT_BUNDLE_DIR2);
+        let log;
+        if (params.include_log) {
+          const { readFileSync: readFileSync20 } = await import("fs");
+          try {
+            log = readFileSync20(join25(bundle.dir, "log.md"), "utf8");
+          } catch {
+            log = "";
+          }
+        }
+        return {
+          dir: bundle.dir,
+          articles: bundle.catalog,
+          problems: bundle.problems,
+          ...params.include_log ? { log } : {}
+        };
+      }
+    )
   );
   server.registerTool(
     "zam_okf_read",
@@ -34701,6 +34763,118 @@ function createMcpServer(db) {
       }
     )
   );
+  server.registerTool(
+    "zam_okf_read_citation",
+    {
+      description: "Read a citation target referenced by an OKF article (e.g. an ADR): read-only, restricted to .md files that resolve inside the repository root \u2014 the target may be outside the bundle but never outside the repo",
+      inputSchema: {
+        bundle_dir: okfBundleDirSchema,
+        target: z.string().describe(
+          "Path to the citation target relative to bundle_dir, e.g. ../adr/2026-07-17-x.md"
+        )
+      },
+      annotations: {
+        ...commonAnnotations,
+        readOnlyHint: true
+      }
+    },
+    wrapHandler(async (params) => {
+      const { readFileSync: readFileSync20 } = await import("fs");
+      const { relative: relative2, sep: sep2 } = await import("path");
+      const { DEFAULT_BUNDLE_DIR: DEFAULT_BUNDLE_DIR2, findRepoRoot: findRepoRoot2, resolveCitationPath: resolveCitationPath2 } = await Promise.resolve().then(() => (init_io(), io_exports));
+      const bundleDir = params.bundle_dir ?? DEFAULT_BUNDLE_DIR2;
+      const path = resolveCitationPath2(bundleDir, params.target);
+      const content = readFileSync20(path, "utf8");
+      const root = findRepoRoot2(bundleDir);
+      const repoRelativePath = relative2(root, path).split(sep2).join("/");
+      return { target: params.target, path: repoRelativePath, content };
+    })
+  );
+  registerAppTool(
+    server,
+    "zam_okf_visualize",
+    {
+      title: "Open ZAM OKF visualizer",
+      description: "Open the ZAM OKF knowledge-base visualizer: articles by type with search, a markdown reader with inline-expandable cited ADRs, a link graph, and the log. Pass `bundle_dir` to browse a bundle other than the default (docs/okf under the server cwd).",
+      inputSchema: {
+        bundle_dir: okfBundleDirSchema
+      },
+      annotations: {
+        ...commonAnnotations,
+        readOnlyHint: true
+      },
+      _meta: {
+        ui: { resourceUri: OKF_RESOURCE_URI }
+      }
+    },
+    wrapHandler(async ({ bundle_dir }) => {
+      const opening = await resolveOpeningCompanionContextSafely(
+        db,
+        "okf",
+        void 0,
+        getNativeClientInfo(),
+        { clientSamplingCapable: getClientSamplingCapable() }
+      );
+      await publishUiIntent("okf", { bundle_dir });
+      const { DEFAULT_BUNDLE_DIR: DEFAULT_BUNDLE_DIR2, loadBundle: loadBundle2 } = await Promise.resolve().then(() => (init_io(), io_exports));
+      const { resolve: resolve8 } = await import("path");
+      const requestedDir = bundle_dir ?? DEFAULT_BUNDLE_DIR2;
+      let resolvedBundleDir = resolve8(requestedDir);
+      let catalog = [];
+      let problems = [];
+      let log = "";
+      let okfVersion = null;
+      try {
+        const bundle = loadBundle2(requestedDir);
+        resolvedBundleDir = bundle.dir;
+        catalog = bundle.catalog;
+        problems = bundle.problems;
+        const { readFileSync: readFileSync20 } = await import("fs");
+        try {
+          log = readFileSync20(join25(bundle.dir, "log.md"), "utf8");
+        } catch {
+          log = "";
+        }
+        try {
+          const { parseFrontmatter: parseFrontmatter2 } = await Promise.resolve().then(() => (init_bundle(), bundle_exports));
+          const indexRaw = readFileSync20(join25(bundle.dir, "index.md"), "utf8");
+          const { fields } = parseFrontmatter2(indexRaw);
+          okfVersion = typeof fields.okf_version === "string" ? fields.okf_version : null;
+        } catch {
+          okfVersion = null;
+        }
+      } catch (error) {
+        problems = [error instanceof Error ? error.message : String(error)];
+      }
+      return {
+        okf: "zam",
+        version: pkg.version,
+        user: opening.context.user.currentId ?? null,
+        bundleDir: resolvedBundleDir,
+        okfVersion,
+        catalog,
+        problems,
+        log,
+        companionContext: opening.context,
+        ...opening.degraded ? { companionContextDegraded: true } : {}
+      };
+    })
+  );
+  registerAppResource(
+    server,
+    "zam-okf",
+    OKF_RESOURCE_URI,
+    { mimeType: RESOURCE_MIME_TYPE },
+    async () => ({
+      contents: [
+        {
+          uri: OKF_RESOURCE_URI,
+          mimeType: RESOURCE_MIME_TYPE,
+          text: loadPanelHtml("okf-panel.html", "ZAM OKF")
+        }
+      ]
+    })
+  );
   return server;
 }
 async function runMcpServer() {