@aquex/cmos-mcp 1.0.0

package/dist/loaders/yaml-loader.js

@@ -0,0 +1,236 @@
+"use strict";
+/**
+ * Secure YAML Loader with Three-Layer Defense
+ *
+ * Layer 1: Path Sanitization - Prevents directory traversal attacks
+ * Layer 2: Safe Parsing - Prevents code execution via YAML tags
+ * Layer 3: Schema Validation - Ensures structural integrity
+ *
+ * @module loaders/yaml-loader
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecureYAMLLoader = void 0;
+const fs_1 = require("fs");
+const path = __importStar(require("path"));
+const YAML = __importStar(require("yaml"));
+const ajv_1 = __importDefault(require("ajv"));
+const errors_1 = require("../types/errors");
+const io_error_1 = require("../errors/io-error");
+const fs_2 = require("../utils/fs");
+/**
+ * SecureYAMLLoader provides defense-in-depth for loading YAML files
+ */
+class SecureYAMLLoader {
+    constructor(options) {
+        // Normalize and resolve base directory
+        this.baseDir = path.resolve(options.baseDir);
+        this.followSymlinks = options.followSymlinks ?? false;
+        this.maxFileSize = options.maxFileSize ?? 10 * 1024 * 1024; // 10MB default
+        // Ajv is created lazily only when schema validation is requested to avoid per-call overhead
+        this.schemaValidatorCache = new WeakMap();
+    }
+    /**
+     * Layer 1: Path Sanitization
+     * Prevents directory traversal attacks by ensuring the resolved path
+     * is within the base directory
+     *
+     * @param filePath - Relative or absolute file path
+     * @returns Sanitized absolute path
+     * @throws PathTraversalError if path escapes base directory
+     */
+    sanitizePath(filePath) {
+        // Resolve the path relative to base directory
+        const resolvedPath = path.resolve(this.baseDir, filePath);
+        // Get the relative path from base to resolved
+        const relativePath = path.relative(this.baseDir, resolvedPath);
+        // Check if path escapes base directory
+        // If it starts with '..' or is absolute, it's outside baseDir
+        if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {
+            throw new errors_1.PathTraversalError(filePath);
+        }
+        // Additional check: ensure resolved path starts with baseDir
+        if (!resolvedPath.startsWith(this.baseDir + path.sep) && resolvedPath !== this.baseDir) {
+            throw new errors_1.PathTraversalError(filePath);
+        }
+        return resolvedPath;
+    }
+    /**
+     * Layer 2: Safe YAML Parsing
+     * Uses YAML.parse which is safe by default (no custom tags)
+     * Prevents code execution via malicious YAML constructs
+     *
+     * @param content - YAML string content
+     * @returns Parsed object
+     * @throws UnsafeYAMLError if parsing fails or detects unsafe content
+     */
+    safeParse(content) {
+        try {
+            // YAML.parse is safe - it doesn't evaluate custom tags
+            // Unlike js-yaml's load(), it won't execute code
+            const parsed = YAML.parse(content);
+            // Additional safety check: ensure no functions in parsed data
+            this.validateNoFunctions(parsed);
+            return parsed;
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                throw new errors_1.UnsafeYAMLError(error.message);
+            }
+            throw new errors_1.UnsafeYAMLError('Unknown parsing error');
+        }
+    }
+    /**
+     * Recursively check for function objects in parsed data
+     * This prevents any executable code from being loaded
+     */
+    validateNoFunctions(obj, path = 'root') {
+        if (typeof obj === 'function') {
+            throw new errors_1.UnsafeYAMLError(`Function detected at ${path}`);
+        }
+        if (obj && typeof obj === 'object') {
+            for (const [key, value] of Object.entries(obj)) {
+                this.validateNoFunctions(value, `${path}.${key}`);
+            }
+        }
+    }
+    /**
+     * Layer 3: Schema Validation
+     * Validates parsed data against a JSON Schema
+     *
+     * @param data - Parsed data to validate
+     * @param schema - JSON Schema for validation
+     * @returns Validated and typed data
+     * @throws SchemaValidationError if validation fails
+     */
+    validateSchema(data, schema) {
+        const ajv = this.getAjv();
+        const validate = this.getValidator(schema);
+        const valid = validate(data);
+        if (!valid) {
+            throw new errors_1.SchemaValidationError(ajv.errorsText(validate.errors), validate.errors || []);
+        }
+        return data;
+    }
+    /**
+     * Load and parse a YAML file with all security layers
+     *
+     * @param filePath - Path to YAML file (relative to baseDir)
+     * @param schema - Optional JSON Schema for validation
+     * @returns Parsed and validated data
+     * @throws PathTraversalError, UnsafeYAMLError, SchemaValidationError
+     */
+    async load(filePath, schema) {
+        // Layer 1: Sanitize path
+        const sanitizedPath = this.sanitizePath(filePath);
+        // Check file exists and get stats
+        if (!(await (0, fs_2.pathExists)(sanitizedPath))) {
+            throw new io_error_1.IOError(`File not found: ${filePath}`, {
+                code: 'IO_NOT_FOUND',
+                context: {
+                    requestedPath: filePath,
+                    resolvedPath: sanitizedPath,
+                },
+            });
+        }
+        // Use lstatSync to detect symlinks (statSync follows them)
+        const stats = await fs_1.promises.lstat(sanitizedPath);
+        // Check if symlink when not allowed
+        if (stats.isSymbolicLink() && !this.followSymlinks) {
+            throw new errors_1.PathTraversalError(`Symbolic links not allowed: ${filePath}`);
+        }
+        // Check file size
+        if (stats.size > this.maxFileSize) {
+            throw new io_error_1.IOError(`File too large: ${stats.size} bytes (max: ${this.maxFileSize})`, {
+                code: 'IO_SIZE_LIMIT',
+                context: {
+                    resolvedPath: sanitizedPath,
+                    fileSize: stats.size,
+                    maxSize: this.maxFileSize,
+                },
+            });
+        }
+        // Read file content
+        const content = await fs_1.promises.readFile(sanitizedPath, 'utf-8');
+        // Layer 2: Safe parse
+        const parsed = this.safeParse(content);
+        // Layer 3: Schema validation (if provided)
+        if (schema) {
+            return this.validateSchema(parsed, schema);
+        }
+        return parsed;
+    }
+    /**
+     * Retrieve (or compile) a validator for the supplied schema.
+     * WeakMap cache ensures we only compile static schemas once.
+     */
+    getAjv() {
+        if (!this.ajv) {
+            this.ajv = new ajv_1.default({ allErrors: true, strict: false });
+        }
+        return this.ajv;
+    }
+    getValidator(schema) {
+        const cached = this.schemaValidatorCache.get(schema);
+        if (cached) {
+            return cached;
+        }
+        const ajv = this.getAjv();
+        const validator = ajv.compile(schema);
+        this.schemaValidatorCache.set(schema, validator);
+        return validator;
+    }
+    /**
+     * Load multiple YAML files
+     *
+     * @param filePaths - Array of file paths
+     * @param schema - Optional schema to validate each file
+     * @returns Array of parsed data
+     */
+    async loadMultiple(filePaths, schema) {
+        return Promise.all(filePaths.map((filePath) => this.load(filePath, schema)));
+    }
+    /**
+     * Get the base directory
+     */
+    getBaseDir() {
+        return this.baseDir;
+    }
+}
+exports.SecureYAMLLoader = SecureYAMLLoader;
+//# sourceMappingURL=yaml-loader.js.map

package/dist/loaders/yaml-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-loader.js","sourceRoot":"","sources":["../../src/loaders/yaml-loader.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2BAAoC;AACpC,2CAA6B;AAC7B,2CAA6B;AAC7B,8CAA4C;AAC5C,4CAA6F;AAC7F,iDAA6C;AAE7C,oCAAyC;AAoBzC;;GAEG;AACH,MAAa,gBAAgB;IAO3B,YAAY,OAAgC;QAC1C,uCAAuC;QACvC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,eAAe;QAE3E,4FAA4F;QAC5F,IAAI,CAAC,oBAAoB,GAAG,IAAI,OAAO,EAAE,CAAC;IAC5C,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,QAAgB;QAC3B,8CAA8C;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1D,8CAA8C;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE/D,uCAAuC;QACvC,8DAA8D;QAC9D,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,2BAAkB,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,6DAA6D;QAC7D,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACvF,MAAM,IAAI,2BAAkB,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;OAQG;IACK,SAAS,CAAC,OAAe;QAC/B,IAAI,CAAC;YACH,uDAAuD;YACvD,iDAAiD;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnC,8DAA8D;YAC9D,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAEjC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,wBAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,IAAI,wBAAe,CAAC,uBAAuB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,mBAAmB,CAAC,GAAY,EAAE,OAAe,MAAM;QAC7D,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,wBAAe,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc,CAAI,IAAa,EAAE,MAAkB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,IAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAc,QAAgB,EAAE,MAAmB;QAC3D,yBAAyB;QACzB,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAElD,kCAAkC;QAClC,IAAI,CAAC,CAAC,MAAM,IAAA,eAAU,EAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAO,CAAC,mBAAmB,QAAQ,EAAE,EAAE;gBAC/C,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE;oBACP,aAAa,EAAE,QAAQ;oBACvB,YAAY,EAAE,aAAa;iBAC5B;aACF,CAAC,CAAC;QACL,CAAC;QAED,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,aAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAE5C,oCAAoC;QACpC,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,IAAI,2BAAkB,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,kBAAkB;QAClB,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAO,CAAC,mBAAmB,KAAK,CAAC,IAAI,gBAAgB,IAAI,CAAC,WAAW,GAAG,EAAE;gBAClF,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;oBACP,YAAY,EAAE,aAAa;oBAC3B,QAAQ,EAAE,KAAK,CAAC,IAAI;oBACpB,OAAO,EAAE,IAAI,CAAC,WAAW;iBAC1B;aACF,CAAC,CAAC;QACL,CAAC;QAED,oBAAoB;QACpB,MAAM,OAAO,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAE1D,sBAAsB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEvC,2CAA2C;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,cAAc,CAAI,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACK,MAAM;QACZ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,GAAG,IAAI,aAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,MAAkB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAc,SAAmB,EAAE,MAAmB;QACtE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAI,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAhND,4CAgNC"}

package/dist/merge/deep-merge.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Deep Merge Logic for Mission Template Composition
+ *
+ * Deterministic algorithm that merges generic mission templates with
+ * domain-specific fields. Ensures same inputs always produce same output.
+ *
+ * Merge Rules:
+ * 1. Dictionaries: recursive merge, domain overrides generic
+ * 2. Lists: concatenate (generic first, then domain)
+ * 3. Scalars: domain value replaces generic value
+ * 4. Null handling: domain null removes generic field
+ *
+ * @version 1.0
+ */
+/**
+ * Merge strategy options for handling different data types
+ */
+export type MergeStrategy = 'append' | 'override' | 'unique';
+/**
+ * Configuration options for the merge algorithm
+ */
+export interface MergeOptions {
+    /** Strategy for merging arrays/lists (default: 'concat') */
+    arrayStrategy?: 'concat' | 'replace';
+    /** Strategy for list merging (default: 'append') */
+    listStrategy?: MergeStrategy;
+}
+/**
+ * MissionMerger class - Deterministic deep merge for template composition
+ *
+ * @example
+ * ```typescript
+ * const merger = new MissionMerger();
+ * const generic = { objective: "Build feature", domainFields: {} };
+ * const domain = { domainFields: { techStack: "TypeScript" } };
+ * const result = merger.merge(generic, domain);
+ * ```
+ */
+export declare class MissionMerger {
+    /**
+     * Merge base object with extension object, creating a new merged object
+     *
+     * @param base - The base object (generic template)
+     * @param extension - The extension object (domain-specific fields)
+     * @param options - Optional merge configuration
+     * @returns New merged object (does not mutate inputs)
+     */
+    merge<T>(base: T, extension: unknown, options?: MergeOptions): T;
+    /**
+     * Merge two objects recursively
+     *
+     * @param base - Base object
+     * @param extension - Extension object
+     * @param options - Merge options
+     * @returns New merged object
+     */
+    private mergeObjects;
+    /**
+     * Merge two arrays/lists
+     *
+     * @param base - Base array
+     * @param extension - Extension array
+     * @param options - Merge options
+     * @returns New merged array
+     */
+    private mergeLists;
+    /**
+     * Merge individual values based on their types
+     *
+     * @param baseValue - Value from base object
+     * @param extensionValue - Value from extension object
+     * @param options - Merge options
+     * @returns Merged value
+     */
+    private mergeValue;
+    /**
+     * Type guard to check if a value is a plain object (not array, not null)
+     *
+     * @param value - Value to check
+     * @returns True if value is a plain object
+     */
+    private isObject;
+}
+/**
+ * Convenience function for one-off merges
+ *
+ * @param base - Base object
+ * @param extension - Extension object
+ * @param options - Optional merge configuration
+ * @returns New merged object
+ */
+export declare function deepMerge<T>(base: T, extension: unknown, options?: MergeOptions): T;
+//# sourceMappingURL=deep-merge.d.ts.map

package/dist/merge/deep-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-merge.d.ts","sourceRoot":"","sources":["../../src/merge/deep-merge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,aAAa,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAErC,oDAAoD;IACpD,YAAY,CAAC,EAAE,aAAa,CAAC;CAC9B;AAUD;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;IACxB;;;;;;;OAOG;IACH,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,CAAC;IAyBhE;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAwBpB;;;;;;;OAOG;IACH,OAAO,CAAC,UAAU;IAsBlB;;;;;;;OAOG;IACH,OAAO,CAAC,UAAU;IA6BlB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;CASjB;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,CAAC,CAGnF"}

package/dist/merge/deep-merge.js

@@ -0,0 +1,168 @@
+"use strict";
+/**
+ * Deep Merge Logic for Mission Template Composition
+ *
+ * Deterministic algorithm that merges generic mission templates with
+ * domain-specific fields. Ensures same inputs always produce same output.
+ *
+ * Merge Rules:
+ * 1. Dictionaries: recursive merge, domain overrides generic
+ * 2. Lists: concatenate (generic first, then domain)
+ * 3. Scalars: domain value replaces generic value
+ * 4. Null handling: domain null removes generic field
+ *
+ * @version 1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MissionMerger = void 0;
+exports.deepMerge = deepMerge;
+/**
+ * Default merge options
+ */
+const DEFAULT_OPTIONS = {
+    arrayStrategy: 'concat',
+    listStrategy: 'append',
+};
+/**
+ * MissionMerger class - Deterministic deep merge for template composition
+ *
+ * @example
+ * ```typescript
+ * const merger = new MissionMerger();
+ * const generic = { objective: "Build feature", domainFields: {} };
+ * const domain = { domainFields: { techStack: "TypeScript" } };
+ * const result = merger.merge(generic, domain);
+ * ```
+ */
+class MissionMerger {
+    /**
+     * Merge base object with extension object, creating a new merged object
+     *
+     * @param base - The base object (generic template)
+     * @param extension - The extension object (domain-specific fields)
+     * @param options - Optional merge configuration
+     * @returns New merged object (does not mutate inputs)
+     */
+    merge(base, extension, options) {
+        const mergeOpts = { ...DEFAULT_OPTIONS, ...options };
+        // Handle null/undefined cases
+        if (base === null || base === undefined) {
+            return extension;
+        }
+        if (extension === null || extension === undefined) {
+            return base;
+        }
+        // Handle arrays
+        if (Array.isArray(base) && Array.isArray(extension)) {
+            return this.mergeLists(base, extension, mergeOpts);
+        }
+        // Handle objects
+        if (this.isObject(base) && this.isObject(extension)) {
+            return this.mergeObjects(base, extension, mergeOpts);
+        }
+        // Scalars: extension replaces base
+        return extension;
+    }
+    /**
+     * Merge two objects recursively
+     *
+     * @param base - Base object
+     * @param extension - Extension object
+     * @param options - Merge options
+     * @returns New merged object
+     */
+    mergeObjects(base, extension, options) {
+        const result = { ...base };
+        for (const [key, extensionValue] of Object.entries(extension)) {
+            const baseValue = base[key];
+            // Skip undefined values (they don't override)
+            if (extensionValue === undefined) {
+                continue;
+            }
+            // Domain null removes field
+            if (extensionValue === null) {
+                delete result[key];
+                continue;
+            }
+            // Merge the value
+            result[key] = this.mergeValue(baseValue, extensionValue, options);
+        }
+        return result;
+    }
+    /**
+     * Merge two arrays/lists
+     *
+     * @param base - Base array
+     * @param extension - Extension array
+     * @param options - Merge options
+     * @returns New merged array
+     */
+    mergeLists(base, extension, options) {
+        if (options.arrayStrategy === 'replace') {
+            return [...extension];
+        }
+        // Default: concat (generic first, then domain)
+        if (options.listStrategy === 'unique') {
+            // Remove duplicates while preserving order
+            const combined = [...base, ...extension];
+            return Array.from(new Set(combined.map((item) => JSON.stringify(item)))).map((item) => JSON.parse(item));
+        }
+        // Default append strategy
+        return [...base, ...extension];
+    }
+    /**
+     * Merge individual values based on their types
+     *
+     * @param baseValue - Value from base object
+     * @param extensionValue - Value from extension object
+     * @param options - Merge options
+     * @returns Merged value
+     */
+    mergeValue(baseValue, extensionValue, options) {
+        // Extension null removes the field
+        if (extensionValue === null) {
+            return undefined;
+        }
+        // If base doesn't exist, use extension
+        if (baseValue === undefined || baseValue === null) {
+            return extensionValue;
+        }
+        // Arrays
+        if (Array.isArray(baseValue) && Array.isArray(extensionValue)) {
+            return this.mergeLists(baseValue, extensionValue, options);
+        }
+        // Objects
+        if (this.isObject(baseValue) && this.isObject(extensionValue)) {
+            return this.mergeObjects(baseValue, extensionValue, options);
+        }
+        // Scalars: extension wins
+        return extensionValue;
+    }
+    /**
+     * Type guard to check if a value is a plain object (not array, not null)
+     *
+     * @param value - Value to check
+     * @returns True if value is a plain object
+     */
+    isObject(value) {
+        return (typeof value === 'object' &&
+            value !== null &&
+            !Array.isArray(value) &&
+            !(value instanceof Date) &&
+            !(value instanceof RegExp));
+    }
+}
+exports.MissionMerger = MissionMerger;
+/**
+ * Convenience function for one-off merges
+ *
+ * @param base - Base object
+ * @param extension - Extension object
+ * @param options - Optional merge configuration
+ * @returns New merged object
+ */
+function deepMerge(base, extension, options) {
+    const merger = new MissionMerger();
+    return merger.merge(base, extension, options);
+}
+//# sourceMappingURL=deep-merge.js.map

package/dist/merge/deep-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-merge.js","sourceRoot":"","sources":["../../src/merge/deep-merge.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAmMH,8BAGC;AApLD;;GAEG;AACH,MAAM,eAAe,GAA2B;IAC9C,aAAa,EAAE,QAAQ;IACvB,YAAY,EAAE,QAAQ;CACvB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAa,aAAa;IACxB;;;;;;;OAOG;IACH,KAAK,CAAI,IAAO,EAAE,SAAkB,EAAE,OAAsB;QAC1D,MAAM,SAAS,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;QAErD,8BAA8B;QAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,SAAc,CAAC;QACxB,CAAC;QACD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gBAAgB;QAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAM,CAAC;QAC1D,CAAC;QAED,iBAAiB;QACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAM,CAAC;QAC5D,CAAC;QAED,mCAAmC;QACnC,OAAO,SAAc,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACK,YAAY,CAAC,IAAY,EAAE,SAAiB,EAAE,OAA+B;QACnF,MAAM,MAAM,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;QAEpD,KAAK,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,SAAS,GAAI,IAAgC,CAAC,GAAG,CAAC,CAAC;YAEzD,8CAA8C;YAC9C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,4BAA4B;YAC5B,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YAED,kBAAkB;YAClB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,UAAU,CAChB,IAAe,EACf,SAAoB,EACpB,OAA+B;QAE/B,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;QACxB,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtC,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACpF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CACjB,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;OAOG;IACK,UAAU,CAChB,SAAkB,EAClB,cAAuB,EACvB,OAA+B;QAE/B,mCAAmC;QACnC,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,uCAAuC;QACvC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,SAAS;QACT,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,UAAU;QACV,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;QAED,0BAA0B;QAC1B,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CAAC,KAAc;QAC7B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC;YACxB,CAAC,CAAC,KAAK,YAAY,MAAM,CAAC,CAC3B,CAAC;IACJ,CAAC;CACF;AApJD,sCAoJC;AAED;;;;;;;GAOG;AACH,SAAgB,SAAS,CAAI,IAAO,EAAE,SAAkB,EAAE,OAAsB;IAC9E,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC"}

package/dist/quality/analyzers/ai-readiness-analyzer.d.ts

@@ -0,0 +1,35 @@
+/**
+ * AI-Readiness Dimension Analyzer
+ * Implements: Syntactic Validity, Instruction Specificity, Structural Consistency
+ */
+import { DimensionScore, AIReadinessMetrics, MissionContent } from '../types';
+export declare class AIReadinessAnalyzer {
+    private weights;
+    private readonly WEAK_PHRASES;
+    constructor(customWeights?: Partial<Record<keyof AIReadinessMetrics, number>>);
+    analyze(mission: MissionContent): Promise<DimensionScore>;
+    /**
+     * Check syntactic validity
+     * Hard gate: mission must be valid structure
+     */
+    private checkSyntacticValidity;
+    /**
+     * Calculate instruction specificity
+     * Based on prompt engineering best practices checklist
+     */
+    private calculateInstructionSpecificity;
+    /**
+     * Calculate linting score
+     * Checks for structural consistency and best practices
+     */
+    private calculateLintingScore;
+    private hasExplicitGoal;
+    private hasDefinedScope;
+    private hasFormatSpecification;
+    private hasConstraints;
+    private hasWellDefinedSuccessCriteria;
+    private findEmptyFields;
+    private getSpecificityDetails;
+    private getLintingDetails;
+}
+//# sourceMappingURL=ai-readiness-analyzer.d.ts.map

package/dist/quality/analyzers/ai-readiness-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-readiness-analyzer.d.ts","sourceRoot":"","sources":["../../../src/quality/analyzers/ai-readiness-analyzer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,cAAc,EAEd,kBAAkB,EAClB,cAAc,EAEf,MAAM,UAAU,CAAC;AAElB,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAA2C;IAG1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CA+B3B;gBAEU,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAIvE,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAuD/D;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAmB9B;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAgDvC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAyD7B,OAAO,CAAC,eAAe;IA8BvB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,sBAAsB;IAoB9B,OAAO,CAAC,cAAc;IA0CtB,OAAO,CAAC,6BAA6B;IAyBrC,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,iBAAiB;CAY1B"}