@a-company/paradigm 5.6.0 → 5.6.1

package/dist/mcp.js

@@ -6074,8 +6074,15 @@ async function handleOrchestrateInline(args, ctx) {
   for (const stage of plan.stages) {
     const agentPrompts = [];
     for (const agentStep of stage.agents) {
-      const agentDef = manifest.agents[agentStep.name];
-      if (!agentDef) continue;
+      const agentDef = manifest.agents[agentStep.name] || {
+        name: agentStep.name,
+        role: ROLE_PROMPTS[agentStep.name] || `${agentStep.name} agent`,
+        focus: { reads: ["**/*"], writes: ["**/*"] },
+        defaultModel: DEFAULT_MODELS[agentStep.name] || "sonnet"
+      };
+      if (!agentDef.focus) {
+        agentDef.focus = { reads: ["**/*"], writes: ["**/*"] };
+      }
       const profileData = agentProfiles.get(agentStep.name);
       const promptResult = buildAgentPromptInternal({
         agent: agentDef,
@@ -6441,11 +6448,13 @@ function buildAgentPromptInternal(options) {
     parts.push(handoffContext);
     parts.push("");
   }
-  parts.push("## Focus Areas");
-  parts.push("");
-  parts.push(`**Read from:** ${agent.focus.reads.join(", ")}`);
-  parts.push(`**Write to:** ${agent.focus.writes.join(", ")}`);
-  parts.push("");
+  if (agent.focus?.reads || agent.focus?.writes) {
+    parts.push("## Focus Areas");
+    parts.push("");
+    parts.push(`**Read from:** ${agent.focus?.reads?.join(", ") || "**/*"}`);
+    parts.push(`**Write to:** ${agent.focus?.writes?.join(", ") || "**/*"}`);
+    parts.push("");
+  }
   parts.push(`## Output Format
 
 When you complete your task, end with a structured summary block:
@@ -6475,7 +6484,7 @@ This structured output helps track progress and pass context between agents.`);
     taskDescription: `${agent.name}: ${task.slice(0, 50)}${task.length > 50 ? "..." : ""}`,
     subagentType: "general-purpose",
     attribution,
-    focusAreas: agent.focus
+    focusAreas: agent.focus || { reads: ["**/*"], writes: ["**/*"] }
   };
 }
 function extractSymbols(text) {
@@ -6569,7 +6578,24 @@ var SECURITY_KEYWORDS = [
   "secret",
   "key",
   "encrypt",
-  "decrypt"
+  "decrypt",
+  "ownership",
+  "transfer",
+  "privilege",
+  "escalation",
+  "impersonation",
+  "takeover",
+  "rbac",
+  "acl",
+  "role",
+  "guard",
+  "middleware",
+  "session",
+  "cookie",
+  "csrf",
+  "xss",
+  "injection",
+  "sanitize"
 ];
 function classifyTaskLocal(task) {
   const taskLower = task.toLowerCase();
@@ -20152,10 +20178,27 @@ function calculateRouteSimilarity(route1, route2) {
   const r1 = normalize(route1);
   const r2 = normalize(route2);
   if (r1 === r2) return 1;
-  const seg1 = r1.split("/").filter(Boolean);
-  const seg2 = r2.split("/").filter(Boolean);
+  const isDotNotation = (r) => !r.includes("/") && r.includes(".");
+  const splitRoute = (r) => {
+    if (isDotNotation(r)) return r.split(".");
+    return r.split("/").filter(Boolean);
+  };
+  const seg1 = splitRoute(r1);
+  const seg2 = splitRoute(r2);
+  if (isDotNotation(r1) || isDotNotation(r2)) {
+    const s1 = isDotNotation(r1) ? r1.split(".") : r1.split("/").filter(Boolean);
+    const s2 = isDotNotation(r2) ? r2.split(".") : r2.split("/").filter(Boolean);
+    let shared = 0;
+    for (let i = 0; i < Math.min(s1.length, s2.length); i++) {
+      if (s1[i] === s2[i]) shared++;
+      else break;
+    }
+    if (shared > 0) {
+      return Math.min(1, 0.5 + shared / Math.max(s1.length, s2.length) * 0.5);
+    }
+    return 0;
+  }
   let matches = 0;
-  let paramMatches = 0;
   const maxLen = Math.max(seg1.length, seg2.length);
   for (let i = 0; i < maxLen; i++) {
     const s1 = seg1[i] || "";
@@ -20164,14 +20207,9 @@ function calculateRouteSimilarity(route1, route2) {
       matches++;
     } else if (s1.startsWith(":") && s2.startsWith(":")) {
       matches += 0.9;
-      paramMatches++;
     } else if (s1.startsWith(":") || s2.startsWith(":")) {
       matches += 0.7;
-      paramMatches++;
-    } else if (
-      // Check for resource plural/singular match (e.g., notes vs note)
-      s1.replace(/s$/, "") === s2.replace(/s$/, "") || s2.replace(/s$/, "") === s1.replace(/s$/, "")
-    ) {
+    } else if (s1.replace(/s$/, "") === s2.replace(/s$/, "") || s2.replace(/s$/, "") === s1.replace(/s$/, "")) {
       matches += 0.8;
     }
   }
@@ -20904,7 +20942,9 @@ function registerTools(server, getContext2, reloadContext2) {
             };
           }
           case "paradigm_gates_for_route": {
-            const { route, method = "GET", response_format: gatesResponseFormat } = args;
+            const { route, response_format: gatesResponseFormat } = args;
+            const isTrpc = typeof route === "string" && !route.includes("/") && route.includes(".");
+            const method = isTrpc ? "POST" : args.method || "GET";
             const gates = getSymbolsByType(ctx.index, "gate");
             const suggestions = [];
             const learnedPatterns = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@a-company/paradigm",
-  "version": "5.6.0",
+  "version": "5.6.1",
   "description": "Unified CLI for Paradigm developer tools",
   "type": "module",
   "main": "./dist/index.js",