@arimakouyou/spec-workflow-mcp 2.2.7

package/dist/__tests__/config.test.js

@@ -0,0 +1,264 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { promises as fs } from 'fs';
+import { join } from 'path';
+import { tmpdir } from 'os';
+import { loadConfigFromPath, loadConfigFile, mergeConfigs } from '../config.js';
+describe('config', () => {
+    let testDir;
+    beforeEach(async () => {
+        testDir = join(tmpdir(), `spec-workflow-config-test-${Date.now()}`);
+        await fs.mkdir(testDir, { recursive: true });
+    });
+    afterEach(async () => {
+        try {
+            await fs.rm(testDir, { recursive: true, force: true });
+        }
+        catch {
+            // Ignore cleanup errors
+        }
+    });
+    describe('loadConfigFromPath', () => {
+        it('should load basic config successfully', async () => {
+            const configPath = join(testDir, 'config.toml');
+            const configContent = `
+port = 8080
+dashboardOnly = true
+lang = "ja"
+`;
+            await fs.writeFile(configPath, configContent);
+            const result = loadConfigFromPath(configPath);
+            expect(result.error).toBeUndefined();
+            expect(result.config).not.toBeNull();
+            expect(result.config?.port).toBe(8080);
+            expect(result.config?.dashboardOnly).toBe(true);
+            expect(result.config?.lang).toBe('ja');
+        });
+        it('should load network configuration (bindAddress, allowExternalAccess)', async () => {
+            const configPath = join(testDir, 'config.toml');
+            const configContent = `
+port = 5000
+bindAddress = "0.0.0.0"
+allowExternalAccess = true
+`;
+            await fs.writeFile(configPath, configContent);
+            const result = loadConfigFromPath(configPath);
+            expect(result.error).toBeUndefined();
+            expect(result.config).not.toBeNull();
+            expect(result.config?.bindAddress).toBe('0.0.0.0');
+            expect(result.config?.allowExternalAccess).toBe(true);
+        });
+        it('should load security features configuration', async () => {
+            const configPath = join(testDir, 'config.toml');
+            const configContent = `
+port = 5000
+
+[security]
+rateLimitEnabled = true
+rateLimitPerMinute = 100
+auditLogEnabled = false
+`;
+            await fs.writeFile(configPath, configContent);
+            const result = loadConfigFromPath(configPath);
+            expect(result.error).toBeUndefined();
+            expect(result.config).not.toBeNull();
+            expect(result.config?.security?.rateLimitEnabled).toBe(true);
+            expect(result.config?.security?.rateLimitPerMinute).toBe(100);
+            expect(result.config?.security?.auditLogEnabled).toBe(false);
+        });
+        it('should error if config file not found', () => {
+            const result = loadConfigFromPath(join(testDir, 'nonexistent.toml'));
+            expect(result.config).toBeNull();
+            expect(result.error).toContain('not found');
+        });
+        it('should error on invalid port (below 1024)', async () => {
+            const configPath = join(testDir, 'config.toml');
+            await fs.writeFile(configPath, 'port = 80');
+            const result = loadConfigFromPath(configPath);
+            expect(result.config).toBeNull();
+            expect(result.error).toContain('Invalid port');
+        });
+        it('should error on invalid port (above 65535)', async () => {
+            const configPath = join(testDir, 'config.toml');
+            await fs.writeFile(configPath, 'port = 70000');
+            const result = loadConfigFromPath(configPath);
+            expect(result.config).toBeNull();
+            expect(result.error).toContain('Invalid port');
+        });
+        describe('network security validation', () => {
+            it('should allow localhost binding without explicit allowExternalAccess', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "127.0.0.1"
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.error).toBeUndefined();
+                expect(result.config?.bindAddress).toBe('127.0.0.1');
+            });
+            it('should allow "localhost" binding without explicit allowExternalAccess', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "localhost"
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.error).toBeUndefined();
+                expect(result.config?.bindAddress).toBe('localhost');
+            });
+            it('should allow IPv6 localhost "::1" without explicit allowExternalAccess', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "::1"
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.error).toBeUndefined();
+                expect(result.config?.bindAddress).toBe('::1');
+            });
+            it('should allow any 127.x.x.x address without explicit allowExternalAccess', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "127.0.0.2"
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.error).toBeUndefined();
+                expect(result.config?.bindAddress).toBe('127.0.0.2');
+            });
+            it('should error on non-localhost binding without allowExternalAccess', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "0.0.0.0"
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.config).toBeNull();
+                expect(result.error).toContain('non-localhost');
+                expect(result.error).toContain('allowExternalAccess');
+            });
+            it('should error on external IP binding without allowExternalAccess', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "192.168.1.100"
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.config).toBeNull();
+                expect(result.error).toContain('non-localhost');
+            });
+            it('should allow non-localhost binding with explicit allowExternalAccess = true', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "0.0.0.0"
+allowExternalAccess = true
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.error).toBeUndefined();
+                expect(result.config?.bindAddress).toBe('0.0.0.0');
+                expect(result.config?.allowExternalAccess).toBe(true);
+            });
+            it('should error on non-localhost binding with allowExternalAccess = false', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+bindAddress = "0.0.0.0"
+allowExternalAccess = false
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.config).toBeNull();
+                expect(result.error).toContain('non-localhost');
+            });
+        });
+        describe('security features validation', () => {
+            it('should error on invalid rateLimitPerMinute (not positive)', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+[security]
+rateLimitPerMinute = 0
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.config).toBeNull();
+                expect(result.error).toContain('rateLimitPerMinute');
+            });
+            it('should error on invalid auditLogRetentionDays (not positive)', async () => {
+                const configPath = join(testDir, 'config.toml');
+                const configContent = `
+[security]
+auditLogRetentionDays = -5
+`;
+                await fs.writeFile(configPath, configContent);
+                const result = loadConfigFromPath(configPath);
+                expect(result.config).toBeNull();
+                expect(result.error).toContain('auditLogRetentionDays');
+            });
+        });
+    });
+    describe('loadConfigFile', () => {
+        it('should return null config when no config file exists', async () => {
+            const result = loadConfigFile(testDir);
+            expect(result.config).toBeNull();
+            expect(result.configPath).toBeNull();
+            expect(result.error).toBeUndefined();
+        });
+        it('should load config from .spec-workflow/config.toml', async () => {
+            const configDir = join(testDir, '.spec-workflow');
+            await fs.mkdir(configDir, { recursive: true });
+            await fs.writeFile(join(configDir, 'config.toml'), 'port = 9000');
+            const result = loadConfigFile(testDir);
+            expect(result.error).toBeUndefined();
+            expect(result.config?.port).toBe(9000);
+        });
+        it('should use custom config path when provided', async () => {
+            const customPath = join(testDir, 'custom-config.toml');
+            await fs.writeFile(customPath, 'port = 7777');
+            const result = loadConfigFile(testDir, customPath);
+            expect(result.error).toBeUndefined();
+            expect(result.config?.port).toBe(7777);
+        });
+    });
+    describe('mergeConfigs', () => {
+        it('should return CLI args when file config is null', () => {
+            const cliArgs = { port: 5000 };
+            const merged = mergeConfigs(null, cliArgs);
+            expect(merged.port).toBe(5000);
+        });
+        it('should use file config when CLI args are empty', () => {
+            const fileConfig = {
+                port: 8080,
+                lang: 'en'
+            };
+            const merged = mergeConfigs(fileConfig, {});
+            expect(merged.port).toBe(8080);
+            expect(merged.lang).toBe('en');
+        });
+        it('should override file config with CLI args', () => {
+            const fileConfig = {
+                port: 8080,
+                lang: 'en',
+                bindAddress: '127.0.0.1'
+            };
+            const cliArgs = {
+                port: 5000
+            };
+            const merged = mergeConfigs(fileConfig, cliArgs);
+            expect(merged.port).toBe(5000); // CLI override
+            expect(merged.lang).toBe('en'); // File config preserved
+            expect(merged.bindAddress).toBe('127.0.0.1'); // File config preserved
+        });
+        it('should not override with undefined CLI args', () => {
+            const fileConfig = {
+                port: 8080
+            };
+            const cliArgs = {
+                port: undefined,
+                lang: 'ja'
+            };
+            const merged = mergeConfigs(fileConfig, cliArgs);
+            expect(merged.port).toBe(8080); // Not overridden by undefined
+            expect(merged.lang).toBe('ja');
+        });
+    });
+});
+//# sourceMappingURL=config.test.js.map

package/dist/__tests__/config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../src/__tests__/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAM,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAEpG,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG;;;;CAI3B,CAAC;YACI,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG;;;;CAI3B,CAAC;YACI,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG;;;;;;;CAO3B,CAAC;YACI,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAErE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAE5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;YAC3C,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;gBACnF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;CAE7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;gBACrF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;CAE7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;gBACtF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;CAE7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;gBACvF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;CAE7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;gBACjF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;CAE7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;gBAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;gBAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;CAE7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;gBAC3F,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;;CAG7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;gBACtF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;;CAG7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;YAC5C,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;gBACzE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;;CAG7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChD,MAAM,aAAa,GAAG;;;CAG7B,CAAC;gBACM,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;gBAE9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAClD,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;YAElE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACvD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAE9C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAEnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,OAAO,GAAgC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,UAAU,GAAuB;gBACrC,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAE5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,UAAU,GAAuB;gBACrC,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,WAAW;aACzB,CAAC;YACF,MAAM,OAAO,GAAgC;gBAC3C,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAEjD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe;YAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB;YACxD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,UAAU,GAAuB;gBACrC,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM,OAAO,GAAgC;gBAC3C,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAEjD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B;YAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/index-args.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index-args.test.d.ts.map

package/dist/__tests__/index-args.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-args.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/index-args.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/index-args.test.js

@@ -0,0 +1,43 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+vi.mock('../core/git-utils.js', () => ({
+    resolveGitWorkspaceRoot: vi.fn((path) => `/workspace${path}`),
+    resolveGitRoot: vi.fn((path) => `/shared${path}`)
+}));
+import { parseArguments } from '../index.js';
+import { resolveGitRoot, resolveGitWorkspaceRoot } from '../core/git-utils.js';
+const mockedResolveGitWorkspaceRoot = vi.mocked(resolveGitWorkspaceRoot);
+const mockedResolveGitRoot = vi.mocked(resolveGitRoot);
+describe('index argument parsing (worktree/shared root)', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it('uses workspace path as workflow root when --no-shared-worktree-specs is enabled', () => {
+        mockedResolveGitWorkspaceRoot.mockReturnValue('/tmp/specwf-wt-a');
+        mockedResolveGitRoot.mockReturnValue('/repo/main');
+        const parsed = parseArguments(['/tmp/specwf-wt-a', '--no-shared-worktree-specs']);
+        expect(parsed.workspacePath).toBe('/tmp/specwf-wt-a');
+        expect(parsed.workflowRootPath).toBe('/tmp/specwf-wt-a');
+        expect(parsed.noSharedWorktreeSpecs).toBe(true);
+        expect(mockedResolveGitWorkspaceRoot).toHaveBeenCalledWith('/tmp/specwf-wt-a');
+        expect(mockedResolveGitRoot).not.toHaveBeenCalled();
+    });
+    it('uses shared git root by default when no flag is provided', () => {
+        mockedResolveGitWorkspaceRoot.mockReturnValue('/tmp/specwf-wt-b');
+        mockedResolveGitRoot.mockReturnValue('/Users/lucas/dev/projects/spec-workflow-mcp');
+        const parsed = parseArguments(['/tmp/specwf-wt-b']);
+        expect(parsed.workspacePath).toBe('/tmp/specwf-wt-b');
+        expect(parsed.workflowRootPath).toBe('/Users/lucas/dev/projects/spec-workflow-mcp');
+        expect(parsed.noSharedWorktreeSpecs).toBe(false);
+        expect(mockedResolveGitRoot).toHaveBeenCalledWith('/tmp/specwf-wt-b');
+    });
+    it('accepts --no-shared-worktree-specs in dashboard mode without treating it as project path', () => {
+        mockedResolveGitWorkspaceRoot.mockReturnValue('/tmp/specwf-wt-dashboard');
+        const parsed = parseArguments(['--dashboard', '--port', '6001', '--no-shared-worktree-specs']);
+        expect(parsed.isDashboardMode).toBe(true);
+        expect(parsed.port).toBe(6001);
+        expect(parsed.noSharedWorktreeSpecs).toBe(true);
+        expect(parsed.workspacePath).toBe('/tmp/specwf-wt-dashboard');
+        expect(parsed.workflowRootPath).toBe('/tmp/specwf-wt-dashboard');
+    });
+});
+//# sourceMappingURL=index-args.test.js.map

package/dist/__tests__/index-args.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-args.test.js","sourceRoot":"","sources":["../../src/__tests__/index-args.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,uBAAuB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC;IACrE,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;CAC1D,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,MAAM,6BAA6B,GAAG,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;AACzE,MAAM,oBAAoB,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAEvD,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,6BAA6B,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAClE,oBAAoB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC,CAAC;QAElF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,6BAA6B,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,6BAA6B,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAClE,oBAAoB,CAAC,eAAe,CAAC,6CAA6C,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAEpD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,6BAA6B,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC;QAE/F,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/index-entrypoint.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index-entrypoint.test.d.ts.map

package/dist/__tests__/index-entrypoint.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-entrypoint.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/index-entrypoint.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/index-entrypoint.test.js

@@ -0,0 +1,23 @@
+import { describe, expect, it } from 'vitest';
+import { mkdtempSync, realpathSync, symlinkSync, writeFileSync } from 'fs';
+import { join, resolve } from 'path';
+import { tmpdir } from 'os';
+import { resolveEntrypoint } from '../index.js';
+describe('resolveEntrypoint', () => {
+    it('returns undefined for undefined input', () => {
+        expect(resolveEntrypoint(undefined)).toBeUndefined();
+    });
+    it('falls back to path.resolve when path does not exist', () => {
+        const missing = './definitely-missing-entrypoint.js';
+        expect(resolveEntrypoint(missing)).toBe(resolve(missing));
+    });
+    it('resolves symlinks to their real path', () => {
+        const dir = mkdtempSync(join(tmpdir(), 'specwf-entrypoint-'));
+        const target = join(dir, 'target.js');
+        const link = join(dir, 'link.js');
+        writeFileSync(target, 'console.log("ok");', 'utf-8');
+        symlinkSync(target, link);
+        expect(resolveEntrypoint(link)).toBe(realpathSync(target));
+    });
+});
+//# sourceMappingURL=index-entrypoint.test.js.map

package/dist/__tests__/index-entrypoint.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-entrypoint.test.js","sourceRoot":"","sources":["../../src/__tests__/index-entrypoint.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,oCAAoC,CAAC;QACrD,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,aAAa,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACrD,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE1B,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,26 @@
+export interface SpecWorkflowConfig {
+    projectDir?: string;
+    port?: number;
+    bindAddress?: string;
+    allowExternalAccess?: boolean;
+    dashboardOnly?: boolean;
+    lang?: string;
+    security?: {
+        rateLimitEnabled?: boolean;
+        rateLimitPerMinute?: number;
+        auditLogEnabled?: boolean;
+        auditLogPath?: string;
+        auditLogRetentionDays?: number;
+        corsEnabled?: boolean;
+        allowedOrigins?: string[];
+    };
+}
+export interface ConfigLoadResult {
+    config: SpecWorkflowConfig | null;
+    configPath: string | null;
+    error?: string;
+}
+export declare function loadConfigFromPath(configPath: string): ConfigLoadResult;
+export declare function loadConfigFile(projectDir: string, customConfigPath?: string): ConfigLoadResult;
+export declare function mergeConfigs(fileConfig: SpecWorkflowConfig | null, cliArgs: Partial<SpecWorkflowConfig>): SpecWorkflowConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IAGd,QAAQ,CAAC,EAAE;QACT,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyFD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,CAwEvE;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAkC9F;AAED,wBAAgB,YAAY,CAC1B,UAAU,EAAE,kBAAkB,GAAG,IAAI,EACrC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACnC,kBAAkB,CAepB"}

package/dist/config.js

@@ -0,0 +1,188 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import * as toml from 'toml';
+import { homedir } from 'os';
+import { isLocalhostAddress } from './core/security-utils.js';
+function expandTilde(filepath) {
+    if (filepath.startsWith('~')) {
+        return path.join(homedir(), filepath.slice(1));
+    }
+    return filepath;
+}
+function validatePort(port) {
+    return Number.isInteger(port) && port >= 1024 && port <= 65535;
+}
+function validateConfig(config) {
+    if (config.port !== undefined) {
+        if (!validatePort(config.port)) {
+            return {
+                valid: false,
+                error: `Invalid port: ${config.port}. Port must be between 1024 and 65535.`
+            };
+        }
+    }
+    if (config.projectDir !== undefined && typeof config.projectDir !== 'string') {
+        return {
+            valid: false,
+            error: `Invalid projectDir: must be a string.`
+        };
+    }
+    if (config.dashboardOnly !== undefined && typeof config.dashboardOnly !== 'boolean') {
+        return {
+            valid: false,
+            error: `Invalid dashboardOnly: must be a boolean.`
+        };
+    }
+    if (config.lang !== undefined && typeof config.lang !== 'string') {
+        return {
+            valid: false,
+            error: `Invalid lang: must be a string.`
+        };
+    }
+    // Validate network configuration
+    if (config.bindAddress !== undefined && typeof config.bindAddress !== 'string') {
+        return {
+            valid: false,
+            error: `Invalid bindAddress: must be a valid IP address string.`
+        };
+    }
+    if (config.allowExternalAccess !== undefined && typeof config.allowExternalAccess !== 'boolean') {
+        return {
+            valid: false,
+            error: `Invalid allowExternalAccess: must be a boolean.`
+        };
+    }
+    // Network security validation: if binding to non-localhost address, require explicit allowExternalAccess
+    if (config.bindAddress !== undefined && !isLocalhostAddress(config.bindAddress) && !config.allowExternalAccess) {
+        return {
+            valid: false,
+            error: `Network security: binding to '${config.bindAddress}' (non-localhost) requires explicit allowExternalAccess = true. This exposes your dashboard to network access.`
+        };
+    }
+    // Validate security features
+    if (config.security !== undefined) {
+        const sec = config.security;
+        if (sec.rateLimitPerMinute !== undefined && (typeof sec.rateLimitPerMinute !== 'number' || sec.rateLimitPerMinute < 1)) {
+            return {
+                valid: false,
+                error: `Invalid security.rateLimitPerMinute: must be a positive number.`
+            };
+        }
+        if (sec.auditLogRetentionDays !== undefined && (typeof sec.auditLogRetentionDays !== 'number' || sec.auditLogRetentionDays < 1)) {
+            return {
+                valid: false,
+                error: `Invalid security.auditLogRetentionDays: must be a positive number.`
+            };
+        }
+    }
+    return { valid: true };
+}
+export function loadConfigFromPath(configPath) {
+    try {
+        const expandedPath = expandTilde(configPath);
+        if (!fs.existsSync(expandedPath)) {
+            return {
+                config: null,
+                configPath: expandedPath,
+                error: `Config file not found: ${expandedPath}`
+            };
+        }
+        const configContent = fs.readFileSync(expandedPath, 'utf-8');
+        const parsedConfig = toml.parse(configContent);
+        const validation = validateConfig(parsedConfig);
+        if (!validation.valid) {
+            return {
+                config: null,
+                configPath: expandedPath,
+                error: validation.error
+            };
+        }
+        const config = {};
+        if (parsedConfig.projectDir !== undefined) {
+            config.projectDir = expandTilde(parsedConfig.projectDir);
+        }
+        if (parsedConfig.port !== undefined) {
+            config.port = parsedConfig.port;
+        }
+        if (parsedConfig.bindAddress !== undefined) {
+            config.bindAddress = parsedConfig.bindAddress;
+        }
+        if (parsedConfig.allowExternalAccess !== undefined) {
+            config.allowExternalAccess = parsedConfig.allowExternalAccess;
+        }
+        if (parsedConfig.dashboardOnly !== undefined) {
+            config.dashboardOnly = parsedConfig.dashboardOnly;
+        }
+        if (parsedConfig.lang !== undefined) {
+            config.lang = parsedConfig.lang;
+        }
+        if (parsedConfig.security !== undefined) {
+            config.security = parsedConfig.security;
+        }
+        return {
+            config,
+            configPath: expandedPath
+        };
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            return {
+                config: null,
+                configPath: null,
+                error: `Failed to load config file: ${error.message}`
+            };
+        }
+        return {
+            config: null,
+            configPath: null,
+            error: 'Failed to load config file: Unknown error'
+        };
+    }
+}
+export function loadConfigFile(projectDir, customConfigPath) {
+    // If custom config path is provided, use it
+    if (customConfigPath) {
+        return loadConfigFromPath(customConfigPath);
+    }
+    // Otherwise, look for default config in project directory
+    try {
+        const expandedDir = expandTilde(projectDir);
+        const configDir = path.join(expandedDir, '.spec-workflow');
+        const configPath = path.join(configDir, 'config.toml');
+        if (!fs.existsSync(configPath)) {
+            return {
+                config: null,
+                configPath: null
+            };
+        }
+        return loadConfigFromPath(configPath);
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            return {
+                config: null,
+                configPath: null,
+                error: `Failed to load config file: ${error.message}`
+            };
+        }
+        return {
+            config: null,
+            configPath: null,
+            error: 'Failed to load config file: Unknown error'
+        };
+    }
+}
+export function mergeConfigs(fileConfig, cliArgs) {
+    const merged = {};
+    if (fileConfig) {
+        Object.assign(merged, fileConfig);
+    }
+    Object.keys(cliArgs).forEach(key => {
+        const value = cliArgs[key];
+        if (value !== undefined) {
+            merged[key] = value;
+        }
+    });
+    return merged;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA4B9D,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,MAAW;IACjC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,iBAAiB,MAAM,CAAC,IAAI,wCAAwC;aAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,uCAAuC;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpF,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,2CAA2C;SACnD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,iCAAiC;SACzC,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC/E,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,yDAAyD;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAChG,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,iDAAiD;SACzD,CAAC;IACJ,CAAC;IAED,yGAAyG;IACzG,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/G,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,iCAAiC,MAAM,CAAC,WAAW,gHAAgH;SAC3K,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;QAE5B,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,IAAI,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC;YACvH,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,iEAAiE;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,qBAAqB,KAAK,QAAQ,IAAI,GAAG,CAAC,qBAAqB,GAAG,CAAC,CAAC,EAAE,CAAC;YAChI,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oEAAoE;aAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAE7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,YAAY;gBACxB,KAAK,EAAE,0BAA0B,YAAY,EAAE;aAChD,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,YAAY;gBACxB,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAuB,EAAE,CAAC;QAEtC,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;QAClC,CAAC;QAED,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;QAChD,CAAC;QAED,IAAI,YAAY,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,CAAC,mBAAmB,GAAG,YAAY,CAAC,mBAAmB,CAAC;QAChE,CAAC;QAED,IAAI,YAAY,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,CAAC,aAAa,GAAG,YAAY,CAAC,aAAa,CAAC;QACpD,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;QAClC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,CAAC,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;QAC1C,CAAC;QAED,OAAO;YACL,MAAM;YACN,UAAU,EAAE,YAAY;SACzB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE;aACtD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,2CAA2C;SACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,gBAAyB;IAC1E,4CAA4C;IAC5C,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IAED,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,IAAI;aACjB,CAAC;QACJ,CAAC;QAED,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE;aACtD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,2CAA2C;SACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,UAAqC,EACrC,OAAoC;IAEpC,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAA+B,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACvB,MAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/__tests__/git-utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=git-utils.test.d.ts.map

package/dist/core/__tests__/git-utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-utils.test.d.ts","sourceRoot":"","sources":["../../../src/core/__tests__/git-utils.test.ts"],"names":[],"mappings":""}