@agent-workspace/mcp-server 0.4.0 → 0.5.0

package/dist/tools/task.js

@@ -0,0 +1,347 @@
+import { readFile, writeFile, readdir, mkdir, access } from "node:fs/promises";
+import { join } from "node:path";
+import matter from "gray-matter";
+import * as z from "zod";
+import { AWP_VERSION, CDP_VERSION, PROJECTS_DIR } from "@agent-workspace/core";
+import { getWorkspaceRoot, getAgentDid, analyzeGraph, getTaskSlug, } from "@agent-workspace/utils";
+/**
+ * Check if a file exists at the given path.
+ */
+async function fileExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Register task-related tools: create, update, list
+ */
+export function registerTaskTools(server) {
+    // --- Tool: awp_task_create ---
+    server.registerTool("awp_task_create", {
+        title: "Create Task",
+        description: "Create a new task within a project.",
+        inputSchema: {
+            projectSlug: z.string().describe("Project slug"),
+            taskSlug: z.string().describe("Task slug"),
+            title: z.string().optional().describe("Task title"),
+            assignee: z.string().optional().describe("Assignee agent DID"),
+            assigneeSlug: z.string().optional().describe("Assignee reputation profile slug"),
+            priority: z.string().optional().describe("Priority (low, medium, high, critical)"),
+            deadline: z.string().optional().describe("Deadline (ISO 8601 or YYYY-MM-DD)"),
+            blockedBy: z.array(z.string()).optional().describe("Task IDs that block this task"),
+            outputArtifact: z.string().optional().describe("Output artifact slug"),
+            contractSlug: z.string().optional().describe("Associated contract slug"),
+            tags: z.array(z.string()).optional().describe("Tags"),
+        },
+    }, async ({ projectSlug, taskSlug, title, assignee, assigneeSlug, priority, deadline, blockedBy, outputArtifact, contractSlug, tags, }) => {
+        const root = getWorkspaceRoot();
+        // Check project exists
+        const projPath = join(root, PROJECTS_DIR, `${projectSlug}.md`);
+        let projData;
+        try {
+            const raw = await readFile(projPath, "utf-8");
+            projData = matter(raw);
+        }
+        catch {
+            return {
+                content: [{ type: "text", text: `Project "${projectSlug}" not found.` }],
+                isError: true,
+            };
+        }
+        const taskDir = join(root, PROJECTS_DIR, projectSlug, "tasks");
+        await mkdir(taskDir, { recursive: true });
+        const taskPath = join(taskDir, `${taskSlug}.md`);
+        if (await fileExists(taskPath)) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Task "${taskSlug}" already exists in project "${projectSlug}".`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const did = await getAgentDid(root);
+        const now = new Date().toISOString();
+        const taskTitle = title ||
+            taskSlug
+                .split("-")
+                .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+                .join(" ");
+        const data = {
+            awp: AWP_VERSION,
+            cdp: CDP_VERSION,
+            type: "task",
+            id: `task:${projectSlug}/${taskSlug}`,
+            projectId: `project:${projectSlug}`,
+            title: taskTitle,
+            status: "pending",
+            priority: priority || "medium",
+            created: now,
+            blockedBy: blockedBy || [],
+            blocks: [],
+            lastModified: now,
+            modifiedBy: did,
+        };
+        if (assignee)
+            data.assignee = assignee;
+        if (assigneeSlug)
+            data.assigneeSlug = assigneeSlug;
+        if (deadline)
+            data.deadline = deadline;
+        if (outputArtifact)
+            data.outputArtifact = outputArtifact;
+        if (contractSlug)
+            data.contractSlug = contractSlug;
+        if (tags?.length)
+            data.tags = tags;
+        const body = `\n# ${taskTitle}\n\n`;
+        const output = matter.stringify(body, data);
+        await writeFile(taskPath, output, "utf-8");
+        // Update project counts
+        projData.data.taskCount = (projData.data.taskCount || 0) + 1;
+        const projOutput = matter.stringify(projData.content, projData.data);
+        await writeFile(projPath, projOutput, "utf-8");
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Created task "${taskSlug}" in project "${projectSlug}" (status: pending)`,
+                },
+            ],
+        };
+    });
+    // --- Tool: awp_task_update ---
+    server.registerTool("awp_task_update", {
+        title: "Update Task",
+        description: "Update a task's status, assignee, or other fields.",
+        inputSchema: {
+            projectSlug: z.string().describe("Project slug"),
+            taskSlug: z.string().describe("Task slug"),
+            status: z
+                .string()
+                .optional()
+                .describe("New status (pending, in-progress, blocked, review, completed, cancelled)"),
+            assignee: z.string().optional().describe("New assignee DID"),
+            assigneeSlug: z.string().optional().describe("New assignee reputation slug"),
+        },
+    }, async ({ projectSlug, taskSlug, status: newStatus, assignee, assigneeSlug }) => {
+        const root = getWorkspaceRoot();
+        const taskPath = join(root, PROJECTS_DIR, projectSlug, "tasks", `${taskSlug}.md`);
+        let taskData;
+        try {
+            const raw = await readFile(taskPath, "utf-8");
+            taskData = matter(raw);
+        }
+        catch {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Task "${taskSlug}" not found in project "${projectSlug}".`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const did = await getAgentDid(root);
+        const now = new Date().toISOString();
+        const changes = [];
+        if (newStatus) {
+            taskData.data.status = newStatus;
+            changes.push(`status → ${newStatus}`);
+        }
+        if (assignee) {
+            taskData.data.assignee = assignee;
+            changes.push(`assignee → ${assignee}`);
+        }
+        if (assigneeSlug) {
+            taskData.data.assigneeSlug = assigneeSlug;
+            changes.push(`assigneeSlug → ${assigneeSlug}`);
+        }
+        taskData.data.lastModified = now;
+        taskData.data.modifiedBy = did;
+        const output = matter.stringify(taskData.content, taskData.data);
+        await writeFile(taskPath, output, "utf-8");
+        // Update project counts if status changed
+        if (newStatus) {
+            const projPath = join(root, PROJECTS_DIR, `${projectSlug}.md`);
+            try {
+                const projRaw = await readFile(projPath, "utf-8");
+                const projData = matter(projRaw);
+                // Recount completed tasks
+                const taskDir = join(root, PROJECTS_DIR, projectSlug, "tasks");
+                let taskCount = 0;
+                let completedCount = 0;
+                try {
+                    const taskFiles = await readdir(taskDir);
+                    for (const tf of taskFiles.filter((t) => t.endsWith(".md"))) {
+                        try {
+                            const tRaw = await readFile(join(taskDir, tf), "utf-8");
+                            const { data: tData } = matter(tRaw);
+                            if (tData.type === "task") {
+                                taskCount++;
+                                if (tData.status === "completed")
+                                    completedCount++;
+                            }
+                        }
+                        catch {
+                            /* skip */
+                        }
+                    }
+                }
+                catch {
+                    /* no tasks */
+                }
+                projData.data.taskCount = taskCount;
+                projData.data.completedCount = completedCount;
+                const projOutput = matter.stringify(projData.content, projData.data);
+                await writeFile(projPath, projOutput, "utf-8");
+            }
+            catch {
+                /* project not found */
+            }
+        }
+        return {
+            content: [
+                { type: "text", text: `Updated task "${taskSlug}": ${changes.join(", ")}` },
+            ],
+        };
+    });
+    // --- Tool: awp_task_list ---
+    server.registerTool("awp_task_list", {
+        title: "List Tasks",
+        description: "List all tasks for a project with optional status and assignee filters.",
+        inputSchema: {
+            projectSlug: z.string().describe("Project slug"),
+            status: z.string().optional().describe("Filter by status"),
+            assigneeSlug: z.string().optional().describe("Filter by assignee slug"),
+        },
+    }, async ({ projectSlug, status: statusFilter, assigneeSlug }) => {
+        const root = getWorkspaceRoot();
+        const taskDir = join(root, PROJECTS_DIR, projectSlug, "tasks");
+        let files;
+        try {
+            files = await readdir(taskDir);
+        }
+        catch {
+            return {
+                content: [{ type: "text", text: JSON.stringify({ tasks: [] }, null, 2) }],
+            };
+        }
+        const tasks = [];
+        for (const f of files.filter((f) => f.endsWith(".md")).sort()) {
+            try {
+                const raw = await readFile(join(taskDir, f), "utf-8");
+                const { data } = matter(raw);
+                if (data.type !== "task")
+                    continue;
+                if (statusFilter && data.status !== statusFilter)
+                    continue;
+                if (assigneeSlug && data.assigneeSlug !== assigneeSlug)
+                    continue;
+                const blockedBy = data.blockedBy;
+                const blocks = data.blocks;
+                tasks.push({
+                    slug: f.replace(/\.md$/, ""),
+                    title: data.title,
+                    status: data.status,
+                    assigneeSlug: data.assigneeSlug,
+                    priority: data.priority,
+                    deadline: data.deadline,
+                    blockedBy: blockedBy || [],
+                    blocks: blocks || [],
+                });
+            }
+            catch {
+                /* skip */
+            }
+        }
+        return {
+            content: [{ type: "text", text: JSON.stringify({ tasks }, null, 2) }],
+        };
+    });
+    // --- Tool: awp_task_graph ---
+    server.registerTool("awp_task_graph", {
+        title: "Analyze Task Dependencies",
+        description: "Analyze task dependency graph: topological order, cycles, critical path, blocked tasks",
+        inputSchema: {
+            projectSlug: z.string().describe("Project slug"),
+        },
+    }, async ({ projectSlug }) => {
+        const root = getWorkspaceRoot();
+        const taskDir = join(root, PROJECTS_DIR, projectSlug, "tasks");
+        // Load all tasks
+        let files;
+        try {
+            files = await readdir(taskDir);
+        }
+        catch {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            error: `No tasks found for project "${projectSlug}"`,
+                            isValid: true,
+                            sorted: [],
+                            cycles: [],
+                            criticalPath: [],
+                            blocked: {},
+                        }, null, 2),
+                    },
+                ],
+            };
+        }
+        const taskNodes = [];
+        for (const f of files.filter((f) => f.endsWith(".md")).sort()) {
+            try {
+                const raw = await readFile(join(taskDir, f), "utf-8");
+                const { data } = matter(raw);
+                if (data.type !== "task")
+                    continue;
+                const blockedBy = data.blockedBy;
+                const blocks = data.blocks;
+                taskNodes.push({
+                    id: data.id,
+                    blockedBy: blockedBy || [],
+                    blocks: blocks || [],
+                    status: data.status,
+                });
+            }
+            catch {
+                /* skip */
+            }
+        }
+        // Run graph analysis
+        const analysis = analyzeGraph(taskNodes);
+        // Format output
+        const result = {
+            projectSlug,
+            taskCount: taskNodes.length,
+            isValid: analysis.isValid,
+            sorted: analysis.sorted?.map((id) => ({
+                id,
+                slug: getTaskSlug(id),
+            })),
+            cycles: analysis.cycles.map((cycle) => cycle.map((id) => getTaskSlug(id))),
+            criticalPath: analysis.criticalPath.map((id) => ({
+                id,
+                slug: getTaskSlug(id),
+            })),
+            blocked: Object.fromEntries(Array.from(analysis.blocked.entries()).map(([taskId, blockers]) => [
+                getTaskSlug(taskId),
+                blockers.map((b) => getTaskSlug(b)),
+            ])),
+        };
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    });
+}
+//# sourceMappingURL=task.js.map

package/dist/tools/task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../../src/tools/task.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,WAAW,GAEZ,MAAM,wBAAwB,CAAC;AAEhC;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,gCAAgC;IAChC,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAC9D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YAChF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAClF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAC7E,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YACnF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YACtE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YACxE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;SACtD;KACF,EACD,KAAK,EAAE,EACL,WAAW,EACX,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,cAAc,EACd,YAAY,EACZ,IAAI,GACL,EAAE,EAAE;QACH,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAEhC,uBAAuB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,WAAW,KAAK,CAAC,CAAC;QAC/D,IAAI,QAA4D,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,YAAY,WAAW,cAAc,EAAE,CAAC;gBACjF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,SAAS,QAAQ,gCAAgC,WAAW,IAAI;qBACvE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GACb,KAAK;YACL,QAAQ;iBACL,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;iBAC1D,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,MAAM,IAAI,GAA4B;YACpC,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,WAAW;YAChB,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,QAAQ,WAAW,IAAI,QAAQ,EAAE;YACrC,SAAS,EAAE,WAAW,WAAW,EAAE;YACnC,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,QAAQ,IAAI,QAAQ;YAC9B,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,SAAS,IAAI,EAAE;YAC1B,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,GAAG;SAChB,CAAC;QACF,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACvC,IAAI,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACnD,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACvC,IAAI,cAAc;YAAE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACzD,IAAI,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACnD,IAAI,IAAI,EAAE,MAAM;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEnC,MAAM,IAAI,GAAG,OAAO,SAAS,MAAM,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAE3C,wBAAwB;QACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,CAAE,QAAQ,CAAC,IAAI,CAAC,SAAoB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAE/C,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,iBAAiB,QAAQ,iBAAiB,WAAW,qBAAqB;iBACjF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,gCAAgC;IAChC,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1C,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,0EAA0E,CAAC;YACvF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC5D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;SAC7E;KACF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QAC7E,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;QAElF,IAAI,QAA4D,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,SAAS,QAAQ,2BAA2B,WAAW,IAAI;qBAClE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,SAAS,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,kBAAkB,YAAY,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAE3C,0CAA0C;QAC1C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,WAAW,KAAK,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEjC,0BAA0B;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;gBAC/D,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,IAAI,cAAc,GAAG,CAAC,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;oBACzC,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBACpE,IAAI,CAAC;4BACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;4BACxD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;4BACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gCAC1B,SAAS,EAAE,CAAC;gCACZ,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;oCAAE,cAAc,EAAE,CAAC;4BACrD,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,UAAU;wBACZ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;gBAED,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACrE,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,QAAQ,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;aACrF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,8BAA8B;IAC9B,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;SACxE;KACF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAE/D,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aACnF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAA8B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACnC,IAAI,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;oBAAE,SAAS;gBAC3D,IAAI,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY;oBAAE,SAAS;gBACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAiC,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAA8B,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS,EAAE,SAAS,IAAI,EAAE;oBAC1B,MAAM,EAAE,MAAM,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,+BAA+B;IAC/B,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,wFAAwF;QAC1F,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SACjD;KACF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAE/D,iBAAiB;QACjB,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,KAAK,EAAE,+BAA+B,WAAW,GAAG;4BACpD,OAAO,EAAE,IAAI;4BACb,MAAM,EAAE,EAAE;4BACV,MAAM,EAAE,EAAE;4BACV,YAAY,EAAE,EAAE;4BAChB,OAAO,EAAE,EAAE;yBACZ,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAe,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAiC,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAA8B,CAAC;gBACnD,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,IAAI,CAAC,EAAY;oBACrB,SAAS,EAAE,SAAS,IAAI,EAAE;oBAC1B,MAAM,EAAE,MAAM,IAAI,EAAE;oBACpB,MAAM,EAAE,IAAI,CAAC,MAAgB;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAEzC,gBAAgB;QAChB,MAAM,MAAM,GAAG;YACb,WAAW;YACX,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpC,EAAE;gBACF,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;aACtB,CAAC,CAAC;YACH,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1E,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC/C,EAAE;gBACF,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjE,WAAW,CAAC,MAAM,CAAC;gBACnB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;aACpC,CAAC,CACH;SACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/utils.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Security and validation utilities for the AWP MCP server.
+ * Extracted to allow unit testing without server initialization side effects.
+ */
+/** Maximum file size allowed (1MB) */
+export declare const MAX_FILE_SIZE: number;
+/** Pattern for valid slugs */
+export declare const SLUG_PATTERN: RegExp;
+/**
+ * Validate that a path is within the workspace root (prevents directory traversal).
+ * Returns the normalized absolute path if valid, or throws an error.
+ */
+export declare function validatePath(root: string, targetPath: string): string;
+/**
+ * Validate and sanitize a slug.
+ * Slugs must be lowercase alphanumeric with hyphens, not starting with hyphen.
+ */
+export declare function validateSlug(slug: string): string;
+/**
+ * Read a file with size limit check.
+ */
+export declare function safeReadFile(path: string): Promise<string>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,sCAAsC;AACtC,eAAO,MAAM,aAAa,QAAc,CAAC;AAEzC,8BAA8B;AAC9B,eAAO,MAAM,YAAY,QAAyB,CAAC;AAMnD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAUrE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYjD;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMhE"}

package/dist/utils.js

@@ -0,0 +1,56 @@
+/**
+ * Security and validation utilities for the AWP MCP server.
+ * Extracted to allow unit testing without server initialization side effects.
+ */
+import { stat } from "node:fs/promises";
+import { readFile } from "node:fs/promises";
+import { resolve, relative, isAbsolute } from "node:path";
+// =============================================================================
+// Security Constants
+// =============================================================================
+/** Maximum file size allowed (1MB) */
+export const MAX_FILE_SIZE = 1024 * 1024;
+/** Pattern for valid slugs */
+export const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+// =============================================================================
+// Security Utilities
+// =============================================================================
+/**
+ * Validate that a path is within the workspace root (prevents directory traversal).
+ * Returns the normalized absolute path if valid, or throws an error.
+ */
+export function validatePath(root, targetPath) {
+    const normalized = resolve(root, targetPath);
+    const rel = relative(root, normalized);
+    // Prevent directory traversal
+    if (rel.startsWith("..") || isAbsolute(rel)) {
+        throw new Error(`Path traversal detected: ${targetPath}`);
+    }
+    return normalized;
+}
+/**
+ * Validate and sanitize a slug.
+ * Slugs must be lowercase alphanumeric with hyphens, not starting with hyphen.
+ */
+export function validateSlug(slug) {
+    const trimmed = slug.trim().toLowerCase();
+    if (!SLUG_PATTERN.test(trimmed)) {
+        throw new Error(`Invalid slug: "${slug}". Must be lowercase alphanumeric with hyphens, not starting with hyphen.`);
+    }
+    // Additional safety: limit length
+    if (trimmed.length > 100) {
+        throw new Error(`Slug too long: max 100 characters`);
+    }
+    return trimmed;
+}
+/**
+ * Read a file with size limit check.
+ */
+export async function safeReadFile(path) {
+    const stats = await stat(path);
+    if (stats.size > MAX_FILE_SIZE) {
+        throw new Error(`File too large: ${stats.size} bytes (max: ${MAX_FILE_SIZE})`);
+    }
+    return readFile(path, "utf-8");
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,sCAAsC;AACtC,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,8BAA8B;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAEnD,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,UAAkB;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEvC,8BAA8B;IAC9B,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,kBAAkB,IAAI,2EAA2E,CAClG,CAAC;IACJ,CAAC;IACD,kCAAkC;IAClC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,CAAC,IAAI,gBAAgB,aAAa,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-workspace/mcp-server",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "MCP server exposing Agent Workspace Protocol operations — plug any AWP workspace into any MCP client",
   "license": "Apache-2.0",
   "type": "module",
@@ -42,7 +42,8 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@agent-workspace/core": "0.4.0",
+    "@agent-workspace/core": "0.5.0",
+    "@agent-workspace/utils": "0.5.0",
     "@modelcontextprotocol/sdk": "^1.0.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",