@agent-lint/mcp 0.3.0 → 0.3.4

package/dist/{chunk-ZYDIOQXE.js → chunk-GNY7X6J5.js}

@@ -17304,19 +17304,6 @@ var artifactTypeValues = [
   "plans"
 ];
 var artifactTypeSchema = external_exports.enum(artifactTypeValues);
-var contextDocumentSchema = external_exports.object({
-  label: external_exports.string().min(1).max(120),
-  content: external_exports.string().min(1).max(2e5),
-  path: external_exports.string().min(1).max(512).optional(),
-  type: artifactTypeSchema.optional(),
-  priority: external_exports.number().int().min(0).max(10).optional()
-});
-var artifactSubmissionSchema = external_exports.object({
-  type: artifactTypeSchema,
-  content: external_exports.string().min(1).max(1e6),
-  contextDocuments: external_exports.array(contextDocumentSchema).max(20).optional(),
-  userId: external_exports.string().min(1).max(128).optional()
-});
 var qualityMetricIds = [
   "clarity",
   "specificity",
@@ -17356,71 +17343,112 @@ var AGENT_HINTS = [
     ecosystem: "Root docs",
     patterns: ["AGENTS.md", "CLAUDE.md"],
     examples: ["AGENTS.md", "CLAUDE.md"],
+    discoveryTier: "canonical",
     notes: "Prefer root-level files when available."
   },
   {
     ecosystem: "Nested policy docs",
-    patterns: ["**/.agents/**/*.md", "docs/**/agents*.md"],
-    examples: [".agents/AGENTS.md", "docs/agent_guide.md"]
+    patterns: [
+      ".agents/AGENTS.md",
+      ".agents/**/AGENTS.md",
+      ".agents/CLAUDE.md",
+      ".agents/**/CLAUDE.md"
+    ],
+    examples: [".agents/AGENTS.md", ".agents/team/CLAUDE.md"],
+    discoveryTier: "canonical"
+  },
+  {
+    ecosystem: "Fallback docs",
+    patterns: ["docs/**/agents*.md"],
+    examples: ["docs/agent_guide.md"],
+    discoveryTier: "fallback"
   }
 ];
 var SKILL_HINTS = [
   {
     ecosystem: "Windsurf",
-    patterns: [".windsurf/skills/**/SKILL.md", ".windsurf/skills/**/*.md"],
-    examples: [".windsurf/skills/frontend/SKILL.md"]
+    patterns: [".windsurf/skills/**/SKILL.md"],
+    examples: [".windsurf/skills/frontend/SKILL.md"],
+    discoveryTier: "canonical"
   },
   {
     ecosystem: "Claude/Cline style",
     patterns: [".claude/skills/**/SKILL.md", ".skills/**/SKILL.md", "skills/**/SKILL.md"],
-    examples: ["skills/release/SKILL.md", ".claude/skills/testing/SKILL.md"]
+    examples: ["skills/release/SKILL.md", ".claude/skills/testing/SKILL.md"],
+    discoveryTier: "canonical"
   },
   {
     ecosystem: "Agent Skills standard",
     patterns: [".agents/skills/**/SKILL.md", ".github/skills/**/SKILL.md"],
-    examples: [".agents/skills/release/SKILL.md", ".github/skills/security-review/SKILL.md"]
+    examples: [".agents/skills/release/SKILL.md", ".github/skills/security-review/SKILL.md"],
+    discoveryTier: "canonical"
   },
   {
     ecosystem: "Generic",
     patterns: ["**/*skill*.md", "**/SKILL.md"],
     examples: ["docs/skills/code-review-skill.md"],
+    discoveryTier: "fallback",
     notes: "Use content heuristics when naming is inconsistent."
   }
 ];
 var RULE_HINTS = [
   {
     ecosystem: "Root/docs",
-    patterns: ["rules.md", "docs/rules.md", "docs/**/*rule*.md"],
-    examples: ["docs/rules.md", "rules.md"]
+    patterns: ["rules.md", "docs/rules.md"],
+    examples: ["docs/rules.md", "rules.md"],
+    discoveryTier: "canonical"
   },
   {
     ecosystem: "Editor-specific",
     patterns: [".cursor/rules/**/*.md", ".cursor/rules/**/*.mdc", ".windsurf/rules/**/*.md"],
-    examples: [".cursor/rules/typescript.mdc"]
+    examples: [".cursor/rules/typescript.mdc"],
+    discoveryTier: "canonical"
+  },
+  {
+    ecosystem: "Fallback docs",
+    patterns: ["docs/**/*rule*.md"],
+    examples: ["docs/backend-rule-overrides.md"],
+    discoveryTier: "fallback"
   }
 ];
 var WORKFLOW_HINTS = [
   {
     ecosystem: "Slash-command docs",
-    patterns: ["docs/workflows/**/*.md", "docs/commands/**/*.md", "**/*workflow*.md"],
-    examples: ["docs/workflows/release.md", "docs/commands/fix.md"]
+    patterns: ["docs/workflows/**/*.md", "docs/commands/**/*.md"],
+    examples: ["docs/workflows/release.md", "docs/commands/fix.md"],
+    discoveryTier: "canonical"
   },
   {
     ecosystem: "Client command folders",
     patterns: [".claude/commands/**/*.md", ".windsurf/workflows/**/*.md"],
-    examples: [".claude/commands/review.md"]
+    examples: [".claude/commands/review.md"],
+    discoveryTier: "canonical"
+  },
+  {
+    ecosystem: "Fallback docs",
+    patterns: ["**/*workflow*.md"],
+    examples: ["docs/deploy-workflow.md"],
+    discoveryTier: "fallback"
   }
 ];
 var PLAN_HINTS = [
   {
     ecosystem: "Roadmap/plan docs",
-    patterns: ["docs/**/*plan*.md", "docs/**/*roadmap*.md", "docs/**/*backlog*.md"],
-    examples: ["docs/phased_implementation_plan.md", "docs/roadmap_master.md"]
+    patterns: ["docs/plans/**/*.md", "docs/backlog/**/*.md"],
+    examples: ["docs/plans/auth-and-billing-rollout.md", "docs/backlog/q2.md"],
+    discoveryTier: "canonical"
   },
   {
     ecosystem: "Top-level planning",
     patterns: ["PLAN.md", "great_plan.md", "PRD.md"],
-    examples: ["docs/great_plan.md", "docs/PRD.md"]
+    examples: ["PLAN.md", "PRD.md"],
+    discoveryTier: "canonical"
+  },
+  {
+    ecosystem: "Fallback docs",
+    patterns: ["docs/**/*plan*.md", "docs/**/*roadmap*.md", "docs/**/*backlog*.md"],
+    examples: ["docs/phased_implementation_plan.md", "docs/roadmap_master.md"],
+    discoveryTier: "fallback"
   }
 ];
 function getArtifactPathHints(type) {
@@ -17438,6 +17466,9 @@ function getArtifactPathHints(type) {
   }
   return PLAN_HINTS;
 }
+function getArtifactDiscoveryPatterns(type, tier = "canonical") {
+  return getArtifactPathHints(type).filter((hint) => hint.discoveryTier === tier).flatMap((hint) => hint.patterns);
+}
 function buildArtifactPathHintsMarkdown(type) {
   const hints = getArtifactPathHints(type);
   const lines = [
@@ -17450,6 +17481,8 @@ function buildArtifactPathHintsMarkdown(type) {
   for (const hint of hints) {
     lines.push(`## ${hint.ecosystem}`);
     lines.push("");
+    lines.push(`Discovery tier: ${hint.discoveryTier}`);
+    lines.push("");
     lines.push("Patterns:");
     for (const pattern of hint.patterns) {
       lines.push(`- ${pattern}`);
@@ -18197,11 +18230,17 @@ function buildTemplateMarkdown(type) {
     "```"
   ].join("\n");
 }
+function normalizePath(filePath) {
+  return filePath.replace(/\\/g, "/");
+}
 var SKIP_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
   ".next",
   ".nuxt",
+  ".turbo",
+  ".idea",
+  ".vscode",
   "dist",
   "build",
   "out",
@@ -18212,51 +18251,18 @@ var SKIP_DIRS = /* @__PURE__ */ new Set([
   "vendor",
   "target"
 ]);
+var ALLOWED_HIDDEN_DIRS = /* @__PURE__ */ new Set([
+  ".agents",
+  ".claude",
+  ".cursor",
+  ".github",
+  ".skills",
+  ".windsurf"
+]);
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Set([".md", ".mdc", ".yaml", ".yml", ".txt"]);
 var MAX_FILES = 200;
 var MAX_DEPTH = 6;
 var MAX_FILE_SIZE = 5e5;
-function shouldSkipDir(name) {
-  return SKIP_DIRS.has(name) || name.startsWith(".");
-}
-function isArtifactExtension(filePath) {
-  return ARTIFACT_EXTENSIONS.has(path.extname(filePath).toLowerCase());
-}
-function inferArtifactType(filePath, content) {
-  const normalized = filePath.replace(/\\/g, "/").toLowerCase();
-  const lowerContent = content.substring(0, 2e3).toLowerCase();
-  if (/agents\.md$/i.test(normalized) || /claude\.md$/i.test(normalized)) {
-    return "agents";
-  }
-  if (normalized.includes("skill")) {
-    return "skills";
-  }
-  if (normalized.includes("rule")) {
-    return "rules";
-  }
-  if (normalized.includes("workflow") || normalized.includes("command")) {
-    return "workflows";
-  }
-  if (normalized.includes("plan") || normalized.includes("roadmap") || normalized.includes("backlog")) {
-    return "plans";
-  }
-  if (lowerContent.includes("agents.md") || lowerContent.includes("claude.md")) {
-    return "agents";
-  }
-  if (lowerContent.includes("disable-model-invocation") || lowerContent.includes("required frontmatter")) {
-    return "skills";
-  }
-  if (lowerContent.includes("activation mode") || lowerContent.includes("do block")) {
-    return "rules";
-  }
-  if (lowerContent.includes("ordered steps") || lowerContent.includes("preconditions")) {
-    return "workflows";
-  }
-  if (lowerContent.includes("acceptance criteria") || lowerContent.includes("## phases")) {
-    return "plans";
-  }
-  return null;
-}
 var REQUIRED_SECTIONS = {
   agents: [
     "quick commands",
@@ -18298,70 +18304,143 @@ var REQUIRED_SECTIONS = {
     "evidence"
   ]
 };
+var CANONICAL_MATCHERS = artifactTypeValues.flatMap(
+  (type) => getArtifactDiscoveryPatterns(type, "canonical").map((pattern) => ({
+    type,
+    regex: globToRegExp(pattern)
+  }))
+);
+function escapeRegExp(value) {
+  return value.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
+}
+function globToRegExp(pattern) {
+  const normalizedPattern = normalizePath(pattern);
+  let source = "^";
+  for (let i = 0; i < normalizedPattern.length; i++) {
+    const char = normalizedPattern[i];
+    if (char === "*") {
+      const next = normalizedPattern[i + 1];
+      const afterNext = normalizedPattern[i + 2];
+      if (next === "*" && afterNext === "/") {
+        source += "(?:.*/)?";
+        i += 2;
+        continue;
+      }
+      if (next === "*") {
+        source += ".*";
+        i += 1;
+        continue;
+      }
+      source += "[^/]*";
+      continue;
+    }
+    if (char === "?") {
+      source += "[^/]";
+      continue;
+    }
+    source += escapeRegExp(char);
+  }
+  source += "$";
+  return new RegExp(source, "i");
+}
+function shouldSkipDir(name) {
+  return SKIP_DIRS.has(name) || name.startsWith(".") && !ALLOWED_HIDDEN_DIRS.has(name);
+}
+function isArtifactExtension(filePath) {
+  return ARTIFACT_EXTENSIONS.has(path.extname(filePath).toLowerCase());
+}
+function matchArtifactType(relativePath) {
+  for (const matcher of CANONICAL_MATCHERS) {
+    if (matcher.regex.test(relativePath)) {
+      return matcher.type;
+    }
+  }
+  return null;
+}
 function findMissingSections(content, type) {
   const lowerContent = content.toLowerCase();
   const required2 = REQUIRED_SECTIONS[type];
   return required2.filter((section) => !lowerContent.includes(section));
 }
-function collectCandidateFiles(rootPath, currentDepth, results) {
+function collectCandidateFiles(rootPath, currentPath, currentDepth, results) {
   if (currentDepth > MAX_DEPTH || results.length >= MAX_FILES) {
     return;
   }
   let entries;
   try {
-    entries = fs.readdirSync(rootPath, { withFileTypes: true });
+    entries = fs.readdirSync(currentPath, { withFileTypes: true });
   } catch {
     return;
   }
+  entries.sort((a, b) => a.name.localeCompare(b.name));
   for (const entry of entries) {
     if (results.length >= MAX_FILES) {
       break;
     }
-    const fullPath = path.join(rootPath, entry.name);
+    const fullPath = path.join(currentPath, entry.name);
     if (entry.isDirectory()) {
-      if (!shouldSkipDir(entry.name) || entry.name === ".cursor" || entry.name === ".windsurf" || entry.name === ".claude" || entry.name === ".agents") {
-        collectCandidateFiles(fullPath, currentDepth + 1, results);
+      if (!shouldSkipDir(entry.name)) {
+        collectCandidateFiles(rootPath, fullPath, currentDepth + 1, results);
       }
-    } else if (entry.isFile() && isArtifactExtension(entry.name)) {
-      results.push(fullPath);
+      continue;
+    }
+    if (!entry.isFile() || !isArtifactExtension(entry.name)) {
+      continue;
     }
+    const relativePath = normalizePath(path.relative(rootPath, fullPath));
+    const type = matchArtifactType(relativePath);
+    if (!type) {
+      continue;
+    }
+    results.push({
+      filePath: fullPath,
+      relativePath,
+      type
+    });
   }
 }
 function findSuggestedPath(type, rootPath) {
-  const hints = getArtifactPathHints(type);
-  if (hints.length > 0 && hints[0].examples.length > 0) {
-    return path.join(rootPath, hints[0].examples[0]);
+  const canonicalHints = getArtifactPathHints(type).filter(
+    (hint) => hint.discoveryTier === "canonical"
+  );
+  for (const hint of canonicalHints) {
+    if (hint.examples.length > 0) {
+      return path.join(rootPath, hint.examples[0]);
+    }
+  }
+  const allHints = getArtifactPathHints(type);
+  for (const hint of allHints) {
+    if (hint.examples.length > 0) {
+      return path.join(rootPath, hint.examples[0]);
+    }
   }
   return path.join(rootPath, `${type.toUpperCase()}.md`);
 }
 function discoverWorkspaceArtifacts(rootPath) {
   const resolvedRoot = path.resolve(rootPath);
-  const candidatePaths = [];
-  collectCandidateFiles(resolvedRoot, 0, candidatePaths);
+  const candidateFiles = [];
+  collectCandidateFiles(resolvedRoot, resolvedRoot, 0, candidateFiles);
+  candidateFiles.sort((a, b) => a.relativePath.localeCompare(b.relativePath));
   const discovered = [];
   const foundTypes = /* @__PURE__ */ new Set();
-  for (const filePath of candidatePaths) {
+  for (const candidate of candidateFiles) {
     let content;
     let stats;
     try {
-      stats = fs.statSync(filePath);
+      stats = fs.statSync(candidate.filePath);
       if (stats.size > MAX_FILE_SIZE) {
         continue;
       }
-      content = fs.readFileSync(filePath, "utf-8");
+      content = fs.readFileSync(candidate.filePath, "utf-8");
     } catch {
       continue;
     }
-    const type = inferArtifactType(filePath, content);
-    if (!type) {
-      continue;
-    }
-    foundTypes.add(type);
-    const missingSections = findMissingSections(content, type);
+    foundTypes.add(candidate.type);
+    const missingSections = findMissingSections(content, candidate.type);
     discovered.push({
-      filePath,
-      relativePath: path.relative(resolvedRoot, filePath),
-      type,
+      filePath: candidate.filePath,
+      relativePath: candidate.relativePath,
+      type: candidate.type,
       exists: true,
       sizeBytes: stats.size,
       isEmpty: content.trim().length === 0,
@@ -18374,7 +18453,7 @@ function discoverWorkspaceArtifacts(rootPath) {
       missing.push({
         type,
         suggestedPath: findSuggestedPath(type, resolvedRoot),
-        reason: `No ${type} artifact found in the workspace.`
+        reason: `No canonical ${type} artifact found in the workspace.`
       });
     }
   }
@@ -18915,6 +18994,115 @@ function registerAgentLintResources(server) {
   );
 }
 
+// src/logger.ts
+function logMcp(level, event, fields = {}) {
+  const payload = {
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    level,
+    event,
+    ...fields
+  };
+  console.error(JSON.stringify(payload));
+}
+
+// src/catalog.ts
+var CURRENT_TOOL_TIMEOUTS = {
+  agentlint_get_guidelines: 3e4,
+  agentlint_plan_workspace_autofix: 6e4,
+  agentlint_quick_check: 3e4,
+  agentlint_emit_maintenance_snippet: 1e4
+};
+var LEGACY_TOOL_TIMEOUT_ALIASES = {
+  analyze_artifact: 3e4,
+  analyze_workspace_artifacts: 6e4,
+  analyze_context_bundle: 3e4,
+  prepare_artifact_fix_context: 3e4,
+  submit_client_assessment: 3e4,
+  suggest_patch: 3e4,
+  quality_gate_artifact: 3e4,
+  apply_patches: 15e3,
+  validate_export: 1e4
+};
+
+// src/transport-security.ts
+var MAX_JSONRPC_MESSAGE_BYTES = 10 * 1024 * 1024;
+var TOOL_TIMEOUTS = {
+  ...CURRENT_TOOL_TIMEOUTS,
+  ...LEGACY_TOOL_TIMEOUT_ALIASES
+};
+var DEFAULT_TOOL_TIMEOUT_MS = 3e4;
+function applyMessageSizeGuard(transport, maxBytes = MAX_JSONRPC_MESSAGE_BYTES) {
+  const originalStart = transport.start.bind(transport);
+  transport.start = async function() {
+    await originalStart();
+    const downstream = transport.onmessage;
+    if (!downstream) {
+      return;
+    }
+    transport.onmessage = (message, extra) => {
+      const serialized = JSON.stringify(message);
+      const byteLength = Buffer.byteLength(serialized, "utf8");
+      if (byteLength > maxBytes) {
+        logMcp("warn", "transport.message_too_large", {
+          byteLength,
+          maxBytes,
+          preview: serialized.slice(0, 200)
+        });
+        if (transport.onerror) {
+          transport.onerror(
+            new Error(`JSON-RPC message too large: ${byteLength} bytes (limit: ${maxBytes} bytes)`)
+          );
+        }
+        return;
+      }
+      downstream(message, extra);
+    };
+  };
+  return transport;
+}
+var ToolTimeoutError = class extends Error {
+  toolName;
+  timeoutMs;
+  constructor(toolName, timeoutMs) {
+    super(`Tool "${toolName}" timed out after ${timeoutMs}ms`);
+    this.name = "ToolTimeoutError";
+    this.toolName = toolName;
+    this.timeoutMs = timeoutMs;
+  }
+};
+function getToolTimeout(toolName) {
+  return TOOL_TIMEOUTS[toolName] ?? DEFAULT_TOOL_TIMEOUT_MS;
+}
+async function withToolTimeout(toolName, fn, timeoutMs) {
+  const ms = timeoutMs ?? getToolTimeout(toolName);
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const timer = setTimeout(() => {
+      if (!settled) {
+        settled = true;
+        logMcp("warn", "tool.timeout", { toolName, timeoutMs: ms });
+        reject(new ToolTimeoutError(toolName, ms));
+      }
+    }, ms);
+    fn().then(
+      (result) => {
+        if (!settled) {
+          settled = true;
+          clearTimeout(timer);
+          resolve(result);
+        }
+      },
+      (error48) => {
+        if (!settled) {
+          settled = true;
+          clearTimeout(timer);
+          reject(error48);
+        }
+      }
+    );
+  });
+}
+
 // src/tools/schema-compat.ts
 function asInputSchema(schema) {
   return schema;
@@ -18948,8 +19136,9 @@ function toErrorResult(message) {
 
 // src/tools/get-guidelines.ts
 function registerGetGuidelinesTool(server) {
+  const toolName = "agentlint_get_guidelines";
   server.registerTool(
-    "agentlint_get_guidelines",
+    toolName,
     {
       title: "Get Guidelines",
       description: "Returns comprehensive Markdown guidelines for creating or updating a context artifact (AGENTS.md, skills, rules, workflows, plans). Includes mandatory sections, do/don't lists, anti-patterns, quality checklist, template skeleton, and client-specific hints. Call this tool before creating or editing any AI agent context artifact file.",
@@ -18962,11 +19151,11 @@ function registerGetGuidelinesTool(server) {
     },
     asToolHandler(async (args) => {
       try {
-        const markdown = buildGuidelines(args.type, args.client ?? "generic");
+        const markdown = await withToolTimeout(toolName, async () => buildGuidelines(args.type, args.client ?? "generic"));
         return toMarkdownResult(markdown);
       } catch (error48) {
         const message = error48 instanceof Error ? error48.message : "Unknown error";
-        return toErrorResult(`agentlint_get_guidelines failed: ${message}`);
+        return toErrorResult(`${toolName} failed: ${message}`);
       }
     })
   );
@@ -18974,11 +19163,12 @@ function registerGetGuidelinesTool(server) {
 
 // src/tools/plan-workspace-autofix.ts
 function registerPlanWorkspaceAutofixTool(server, options2) {
+  const toolName = "agentlint_plan_workspace_autofix";
   if (!options2.enabled) {
     return;
   }
   server.registerTool(
-    "agentlint_plan_workspace_autofix",
+    toolName,
     {
       title: "Plan Workspace Autofix",
       description: "Scans the workspace for all AI agent context artifact files (AGENTS.md, CLAUDE.md, skills, rules, workflows, plans), identifies missing files and incomplete sections, and returns a step-by-step Markdown action plan. The LLM should execute the plan using its file reading and editing capabilities. Call this when the user asks to review, fix, or improve all context artifacts in a project.",
@@ -18992,11 +19182,11 @@ function registerPlanWorkspaceAutofixTool(server, options2) {
     asToolHandler(async (args) => {
       try {
         const rootPath = args.rootPath ?? process.cwd();
-        const plan = buildWorkspaceAutofixPlan(rootPath);
+        const plan = await withToolTimeout(toolName, async () => buildWorkspaceAutofixPlan(rootPath));
         return toMarkdownResult(plan.markdown);
       } catch (error48) {
         const message = error48 instanceof Error ? error48.message : "Unknown error";
-        return toErrorResult(`agentlint_plan_workspace_autofix failed: ${message}`);
+        return toErrorResult(`${toolName} failed: ${message}`);
       }
     })
   );
@@ -19004,8 +19194,9 @@ function registerPlanWorkspaceAutofixTool(server, options2) {
 
 // src/tools/quick-check.ts
 function registerQuickCheckTool(server) {
+  const toolName = "agentlint_quick_check";
   server.registerTool(
-    "agentlint_quick_check",
+    toolName,
     {
       title: "Quick Check",
       description: "Checks whether recent code changes require updates to AI agent context artifacts. Provide changed file paths and/or a description of what changed. Returns signals indicating which artifacts (AGENTS.md, rules, workflows, etc.) may need updating and what action to take. Call this after structural changes like adding modules, changing configs, or modifying dependencies.",
@@ -19018,11 +19209,11 @@ function registerQuickCheckTool(server) {
     },
     asToolHandler(async (args) => {
       try {
-        const result = runQuickCheck(args.changedPaths, args.changeDescription);
+        const result = await withToolTimeout(toolName, async () => runQuickCheck(args.changedPaths, args.changeDescription));
         return toMarkdownResult(result.markdown);
       } catch (error48) {
         const message = error48 instanceof Error ? error48.message : "Unknown error";
-        return toErrorResult(`agentlint_quick_check failed: ${message}`);
+        return toErrorResult(`${toolName} failed: ${message}`);
       }
     })
   );
@@ -19030,8 +19221,9 @@ function registerQuickCheckTool(server) {
 
 // src/tools/emit-maintenance-snippet.ts
 function registerEmitMaintenanceSnippetTool(server) {
+  const toolName = "agentlint_emit_maintenance_snippet";
   server.registerTool(
-    "agentlint_emit_maintenance_snippet",
+    toolName,
     {
       title: "Emit Maintenance Snippet",
       description: "Returns a persistent rule snippet that you should add to the user's IDE rules file. Once added, these rules ensure the LLM agent automatically maintains context artifacts (AGENTS.md, skills, rules, workflows, plans) whenever structural changes happen. Supports Cursor, Windsurf, VS Code, Claude Code, and generic formats. Call this when the user asks to set up automatic context maintenance.",
@@ -19044,11 +19236,11 @@ function registerEmitMaintenanceSnippetTool(server) {
     },
     asToolHandler(async (args) => {
       try {
-        const result = buildMaintenanceSnippet(args.client ?? "generic");
+        const result = await withToolTimeout(toolName, async () => buildMaintenanceSnippet(args.client ?? "generic"));
         return toMarkdownResult(result.markdown);
       } catch (error48) {
         const message = error48 instanceof Error ? error48.message : "Unknown error";
-        return toErrorResult(`agentlint_emit_maintenance_snippet failed: ${message}`);
+        return toErrorResult(`${toolName} failed: ${message}`);
       }
     })
   );
@@ -19063,6 +19255,7 @@ function registerAgentLintTools(server, options2) {
 }
 
 // src/server.ts
+import { readFileSync } from "fs";
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
 var DEFAULT_MCP_SERVER_NAME = "agentlint";
 var DEFAULT_MCP_INSTRUCTIONS = [
@@ -19075,7 +19268,22 @@ var DEFAULT_MCP_INSTRUCTIONS = [
   "Apply recommended changes directly using your file editing capabilities."
 ].join(" ");
 function resolveServerVersion() {
-  return process.env.npm_package_version ?? "0.2.0";
+  if (process.env.npm_package_name === "@agent-lint/mcp" && process.env.npm_package_version) {
+    return process.env.npm_package_version;
+  }
+  if ("0.3.4".length > 0) {
+    return "0.3.4";
+  }
+  try {
+    const pkg = JSON.parse(
+      readFileSync(new URL("../package.json", import.meta.url), "utf-8")
+    );
+    if (typeof pkg.version === "string" && pkg.version.length > 0) {
+      return pkg.version;
+    }
+  } catch {
+  }
+  return "0.0.0-dev";
 }
 function resolveWorkspaceScanEnabled(options2) {
   if (typeof options2.enableWorkspaceScan === "boolean") {
@@ -19087,7 +19295,7 @@ function resolveWorkspaceScanEnabled(options2) {
   if (options2.transportMode === "http") {
     return process.env.MCP_ENABLE_WORKSPACE_SCAN === "true";
   }
-  return process.env.MCP_ENABLE_WORKSPACE_SCAN === "true";
+  return process.env.MCP_ENABLE_WORKSPACE_SCAN !== "false";
 }
 function resolveInstructions(options2, workspaceScanEnabled) {
   if (options2.instructions) {
@@ -19125,103 +19333,6 @@ function createAgentLintMcpServer(options2 = {}) {
   return server;
 }
 
-// src/logger.ts
-function logMcp(level, event, fields = {}) {
-  const payload = {
-    ts: (/* @__PURE__ */ new Date()).toISOString(),
-    level,
-    event,
-    ...fields
-  };
-  console.error(JSON.stringify(payload));
-}
-
-// src/transport-security.ts
-var MAX_JSONRPC_MESSAGE_BYTES = 10 * 1024 * 1024;
-var TOOL_TIMEOUTS = {
-  analyze_artifact: 3e4,
-  analyze_workspace_artifacts: 6e4,
-  analyze_context_bundle: 3e4,
-  prepare_artifact_fix_context: 3e4,
-  submit_client_assessment: 3e4,
-  suggest_patch: 3e4,
-  quality_gate_artifact: 3e4,
-  apply_patches: 15e3,
-  validate_export: 1e4
-};
-var DEFAULT_TOOL_TIMEOUT_MS = 3e4;
-function applyMessageSizeGuard(transport, maxBytes = MAX_JSONRPC_MESSAGE_BYTES) {
-  const originalStart = transport.start.bind(transport);
-  transport.start = async function() {
-    await originalStart();
-    const downstream = transport.onmessage;
-    if (!downstream) {
-      return;
-    }
-    transport.onmessage = (message, extra) => {
-      const serialized = JSON.stringify(message);
-      const byteLength = Buffer.byteLength(serialized, "utf8");
-      if (byteLength > maxBytes) {
-        logMcp("warn", "transport.message_too_large", {
-          byteLength,
-          maxBytes,
-          preview: serialized.slice(0, 200)
-        });
-        if (transport.onerror) {
-          transport.onerror(
-            new Error(`JSON-RPC message too large: ${byteLength} bytes (limit: ${maxBytes} bytes)`)
-          );
-        }
-        return;
-      }
-      downstream(message, extra);
-    };
-  };
-  return transport;
-}
-var ToolTimeoutError = class extends Error {
-  toolName;
-  timeoutMs;
-  constructor(toolName, timeoutMs) {
-    super(`Tool "${toolName}" timed out after ${timeoutMs}ms`);
-    this.name = "ToolTimeoutError";
-    this.toolName = toolName;
-    this.timeoutMs = timeoutMs;
-  }
-};
-function getToolTimeout(toolName) {
-  return TOOL_TIMEOUTS[toolName] ?? DEFAULT_TOOL_TIMEOUT_MS;
-}
-async function withToolTimeout(toolName, fn, timeoutMs) {
-  const ms = timeoutMs ?? getToolTimeout(toolName);
-  return new Promise((resolve, reject) => {
-    let settled = false;
-    const timer = setTimeout(() => {
-      if (!settled) {
-        settled = true;
-        logMcp("warn", "tool.timeout", { toolName, timeoutMs: ms });
-        reject(new ToolTimeoutError(toolName, ms));
-      }
-    }, ms);
-    fn().then(
-      (result) => {
-        if (!settled) {
-          settled = true;
-          clearTimeout(timer);
-          resolve(result);
-        }
-      },
-      (error48) => {
-        if (!settled) {
-          settled = true;
-          clearTimeout(timer);
-          reject(error48);
-        }
-      }
-    );
-  });
-}
-
 // src/stdio.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 async function runStdioServer() {
@@ -19601,9 +19712,6 @@ async function runHttpServer(options2 = {}) {
 export {
   registerAgentLintPrompts,
   registerAgentLintResources,
-  registerAgentLintTools,
-  DEFAULT_MCP_SERVER_NAME,
-  createAgentLintMcpServer,
   logMcp,
   MAX_JSONRPC_MESSAGE_BYTES,
   TOOL_TIMEOUTS,
@@ -19612,6 +19720,9 @@ export {
   ToolTimeoutError,
   getToolTimeout,
   withToolTimeout,
+  registerAgentLintTools,
+  DEFAULT_MCP_SERVER_NAME,
+  createAgentLintMcpServer,
   runStdioServer,
   startRateLimitCleanup,
   stopRateLimitCleanup,
@@ -19641,4 +19752,4 @@ strip-bom-string/index.js:
    * Released under the MIT License.
    *)
 */
-//# sourceMappingURL=chunk-ZYDIOQXE.js.map
+//# sourceMappingURL=chunk-GNY7X6J5.js.map