@brutalist/mcp 0.5.1 → 0.6.1

package/dist/utils/response-cache.js

@@ -0,0 +1,371 @@
+import { createHash, randomUUID } from 'crypto';
+import { gzip, gunzip } from 'zlib';
+import { promisify } from 'util';
+import { logger } from '../logger.js';
+const gzipAsync = promisify(gzip);
+const gunzipAsync = promisify(gunzip);
+/**
+ * LRU Response Cache with TTL and memory management
+ */
+export class ResponseCache {
+    entries = new Map();
+    analysisIdMap = new Map(); // NEW: ID to cache mapping
+    accessOrder = [];
+    stats = {
+        entries: 0,
+        totalSize: 0,
+        hits: 0,
+        misses: 0,
+        evictions: 0
+    };
+    // Configuration
+    maxEntries;
+    ttlMs;
+    maxTotalSizeMB;
+    maxEntrySizeMB;
+    compressionThresholdMB;
+    cleanupTimer;
+    constructor(options = {}) {
+        this.maxEntries = options.maxEntries || 50;
+        this.ttlMs = (options.ttlHours || 2) * 60 * 60 * 1000; // Convert hours to ms
+        this.maxTotalSizeMB = options.maxTotalSizeMB || 500;
+        this.maxEntrySizeMB = options.maxEntrySizeMB || 10;
+        this.compressionThresholdMB = options.compressionThresholdMB || 1;
+        // Log configuration
+        logger.info(`📦 ResponseCache initialized:`, {
+            maxEntries: this.maxEntries,
+            ttlHours: this.ttlMs / (1000 * 60 * 60),
+            maxTotalSizeMB: this.maxTotalSizeMB,
+            maxEntrySizeMB: this.maxEntrySizeMB,
+            compressionThresholdMB: this.compressionThresholdMB
+        });
+        // Periodic cleanup
+        this.cleanupTimer = setInterval(() => this.cleanupExpired(), 5 * 60 * 1000); // Every 5 minutes
+        // Allow Node to exit even if timer is active
+        this.cleanupTimer.unref();
+    }
+    /**
+     * Generate cache key from request parameters
+     */
+    generateCacheKey(params) {
+        // Create deterministic string from params
+        const sortedParams = Object.keys(params)
+            .sort()
+            .reduce((acc, key) => {
+            if (params[key] !== undefined && key !== 'analysis_id' && key !== 'offset' && key !== 'limit' && key !== 'cursor' && key !== 'force_refresh') {
+                acc[key] = params[key];
+            }
+            return acc;
+        }, {});
+        const paramString = JSON.stringify(sortedParams);
+        const hash = createHash('sha256').update(paramString).digest('hex');
+        return hash;
+    }
+    /**
+     * Generate secure analysis ID (UUID instead of 8-char hash)
+     */
+    generateAnalysisId(cacheKey) {
+        return randomUUID(); // Full UUID for security
+    }
+    /**
+     * Store response with session binding
+     */
+    async set(data, content, cacheKey, sessionId, requestId) {
+        const finalCacheKey = cacheKey || this.generateCacheKey(data);
+        const analysisId = this.generateAnalysisId(finalCacheKey);
+        // Check size limits before compression
+        const sizeInMB = Buffer.byteLength(content, 'utf8') / (1024 * 1024);
+        if (sizeInMB > this.maxEntrySizeMB) {
+            throw new Error(`Response too large: ${sizeInMB.toFixed(2)}MB > ${this.maxEntrySizeMB}MB limit`);
+        }
+        // Compress if needed
+        let finalContent = content;
+        let compressed = false;
+        if (sizeInMB > this.compressionThresholdMB) {
+            try {
+                const compressedBuffer = await gzipAsync(Buffer.from(content, 'utf8'));
+                finalContent = compressedBuffer.toString('base64');
+                compressed = true;
+                logger.debug(`📦 Compressed cache entry: ${sizeInMB.toFixed(2)}MB -> ${(compressedBuffer.length / (1024 * 1024)).toFixed(2)}MB`);
+            }
+            catch (error) {
+                logger.warn("Failed to compress cache entry, storing uncompressed", error);
+            }
+        }
+        // Create cache entry with session binding
+        const entry = {
+            content: finalContent,
+            metadata: {
+                ...data,
+                sessionId,
+                requestId,
+                originalSize: sizeInMB
+            },
+            timestamp: Date.now(),
+            accessCount: 1,
+            size: Buffer.byteLength(finalContent, 'utf8'),
+            compressed,
+            sessionId,
+            requestId
+        };
+        // Store in cache
+        this.entries.set(finalCacheKey, entry);
+        // Map analysis ID to cache key with session binding
+        this.analysisIdMap.set(analysisId, {
+            cacheKey: finalCacheKey,
+            sessionId: sessionId || 'anonymous',
+            created: Date.now()
+        });
+        // Update access order for LRU
+        this.updateAccessOrder(finalCacheKey);
+        // Update stats
+        this.stats.entries = this.entries.size;
+        this.stats.totalSize = Array.from(this.entries.values()).reduce((sum, e) => sum + e.size, 0);
+        // Ensure capacity limits
+        await this.ensureCapacity();
+        logger.debug(`✅ Cached response with analysis_id: ${analysisId} for session: ${sessionId?.substring(0, 8)}...`);
+        return { analysisId, cacheKey: finalCacheKey };
+    }
+    /**
+     * Retrieve response with session validation
+     */
+    async get(analysisIdOrCacheKey, sessionId) {
+        let cacheKey;
+        let requiredSessionId;
+        // Check if it's an analysis ID first
+        const mapping = this.analysisIdMap.get(analysisIdOrCacheKey);
+        if (mapping) {
+            cacheKey = mapping.cacheKey;
+            requiredSessionId = mapping.sessionId;
+            // Validate session access
+            if (requiredSessionId !== 'anonymous') {
+                if (!sessionId || sessionId !== requiredSessionId) {
+                    logger.warn(`🚫 Session mismatch for analysis ${analysisIdOrCacheKey}: ${sessionId?.substring(0, 8) || 'none'} != ${requiredSessionId?.substring(0, 8)}`);
+                    this.stats.misses++;
+                    return null; // Block cross-session access
+                }
+            }
+        }
+        else {
+            // Direct cache key access (legacy support)
+            cacheKey = analysisIdOrCacheKey;
+        }
+        const entry = this.entries.get(cacheKey);
+        if (!entry) {
+            this.stats.misses++;
+            return null;
+        }
+        // Check TTL
+        if (Date.now() - entry.timestamp > this.ttlMs) {
+            logger.debug(`⏰ Cache entry expired: ${cacheKey.substring(0, 8)}...`);
+            this.entries.delete(cacheKey);
+            // Also clean up analysis ID mapping
+            if (mapping) {
+                this.analysisIdMap.delete(analysisIdOrCacheKey);
+            }
+            this.stats.misses++;
+            this.stats.evictions++;
+            return null;
+        }
+        // Additional session validation on the entry itself
+        if (sessionId && entry.sessionId && entry.sessionId !== sessionId && entry.sessionId !== 'anonymous') {
+            logger.warn(`🚫 Entry session mismatch for ${cacheKey.substring(0, 8)}: ${sessionId?.substring(0, 8)} != ${entry.sessionId?.substring(0, 8)}`);
+            this.stats.misses++;
+            return null;
+        }
+        // Update access tracking
+        entry.accessCount++;
+        this.updateAccessOrder(cacheKey);
+        this.stats.hits++;
+        // Decompress if needed
+        let content = entry.content;
+        if (entry.compressed) {
+            try {
+                const compressedBuffer = Buffer.from(content, 'base64');
+                const decompressedBuffer = await gunzipAsync(compressedBuffer);
+                content = decompressedBuffer.toString('utf8');
+            }
+            catch (error) {
+                logger.error("Failed to decompress cache entry", error);
+                return null;
+            }
+        }
+        logger.debug(`🎯 Cache hit for session ${sessionId?.substring(0, 8)}...: ${cacheKey.substring(0, 8)}...`);
+        return content;
+    }
+    /**
+     * Check if key exists in cache
+     */
+    has(keyOrId) {
+        // Check analysis ID mapping first
+        const mapping = this.analysisIdMap.get(keyOrId);
+        const cacheKey = mapping ? mapping.cacheKey : keyOrId;
+        const entry = this.entries.get(cacheKey);
+        if (!entry)
+            return false;
+        // Check if expired
+        const age = Date.now() - entry.timestamp;
+        if (age > this.ttlMs) {
+            this.delete(keyOrId);
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Delete entry from cache
+     */
+    delete(keyOrId) {
+        // Check analysis ID mapping first
+        const mapping = this.analysisIdMap.get(keyOrId);
+        const cacheKey = mapping ? mapping.cacheKey : keyOrId;
+        const entry = this.entries.get(cacheKey);
+        if (entry) {
+            this.stats.totalSize -= entry.size;
+            // Delete from entries
+            this.entries.delete(cacheKey);
+            // Remove from analysis ID mapping if it exists
+            if (mapping) {
+                this.analysisIdMap.delete(keyOrId);
+            }
+            // Remove cache key from access order
+            this.accessOrder = this.accessOrder.filter(k => k !== cacheKey);
+            this.stats.entries = this.entries.size;
+        }
+    }
+    /**
+     * Update LRU access order
+     */
+    updateAccessOrder(key) {
+        this.accessOrder = this.accessOrder.filter(k => k !== key);
+        this.accessOrder.push(key);
+    }
+    /**
+     * Ensure cache has capacity for new entry
+     */
+    async ensureCapacity() {
+        const maxTotalSize = this.maxTotalSizeMB * 1024 * 1024;
+        // Check total size limit
+        while (this.stats.totalSize > maxTotalSize && this.accessOrder.length > 0) {
+            const oldestKey = this.accessOrder[0];
+            logger.info(`🗑️ Evicting for size limit: ${oldestKey}`);
+            this.delete(oldestKey);
+            this.stats.evictions++;
+        }
+        // Check entry count limit
+        while (this.entries.size >= this.maxEntries && this.accessOrder.length > 0) {
+            const oldestKey = this.accessOrder[0];
+            logger.info(`🗑️ Evicting for entry limit: ${oldestKey}`);
+            this.delete(oldestKey);
+            this.stats.evictions++;
+        }
+    }
+    /**
+     * Clean up expired entries
+     */
+    cleanupExpired() {
+        const now = Date.now();
+        let cleaned = 0;
+        for (const [key, entry] of this.entries.entries()) {
+            if (now - entry.timestamp > this.ttlMs) {
+                this.delete(key);
+                cleaned++;
+            }
+        }
+        if (cleaned > 0) {
+            logger.info(`🧹 Cleaned ${cleaned} expired cache entries`);
+        }
+    }
+    /**
+     * Get cache statistics
+     */
+    getStats() {
+        return { ...this.stats };
+    }
+    /**
+     * Retrieve response by analysis ID, returning full cached response object
+     */
+    async getByAnalysisId(analysisId, sessionId) {
+        const mapping = this.analysisIdMap.get(analysisId);
+        if (!mapping) {
+            this.stats.misses++;
+            logger.debug(`❌ Cache miss by analysis ID: ${analysisId}`);
+            return null;
+        }
+        // Validate session access
+        if (sessionId && mapping.sessionId !== sessionId && mapping.sessionId !== 'anonymous') {
+            logger.warn(`🚫 Session mismatch for analysis ${analysisId}: ${sessionId?.substring(0, 8)} != ${mapping.sessionId?.substring(0, 8)}`);
+            this.stats.misses++;
+            return null;
+        }
+        const entry = this.entries.get(mapping.cacheKey);
+        if (!entry) {
+            this.stats.misses++;
+            return null;
+        }
+        // Check TTL
+        const age = Date.now() - entry.timestamp;
+        if (age > this.ttlMs) {
+            logger.info(`⏰ Cache expired: ${analysisId} (age: ${(age / 1000 / 60).toFixed(0)} minutes)`);
+            this.delete(analysisId);
+            this.stats.misses++;
+            return null;
+        }
+        // Update access order
+        this.updateAccessOrder(mapping.cacheKey);
+        this.stats.hits++;
+        logger.info(`✅ Cache hit by analysis ID: ${analysisId} (age: ${(age / 1000 / 60).toFixed(0)} minutes)`);
+        // Decompress if needed
+        let content = entry.content;
+        if (entry.compressed) {
+            try {
+                const buffer = Buffer.from(entry.content, 'base64');
+                const decompressed = await gunzipAsync(buffer);
+                content = decompressed.toString('utf-8');
+            }
+            catch (error) {
+                logger.error('Decompression failed:', error);
+                this.delete(analysisId);
+                return null;
+            }
+        }
+        return {
+            content,
+            timestamp: entry.timestamp,
+            analysisId,
+            cacheKey: mapping.cacheKey,
+            requestParams: entry.metadata,
+            compressed: entry.compressed || false,
+            size: entry.size,
+            sessionId: entry.sessionId,
+            requestId: entry.requestId
+        };
+    }
+    /**
+     * Clear entire cache
+     */
+    clear() {
+        this.entries.clear();
+        this.analysisIdMap.clear();
+        this.accessOrder = [];
+        this.stats = {
+            entries: 0,
+            totalSize: 0,
+            hits: this.stats.hits,
+            misses: this.stats.misses,
+            evictions: this.stats.evictions
+        };
+        logger.info('🗑️ Cache cleared');
+    }
+    /**
+     * Destroy cache and cleanup resources
+     */
+    destroy() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = undefined;
+        }
+        this.clear();
+        logger.info('💀 Cache destroyed');
+    }
+}
+//# sourceMappingURL=response-cache.js.map

package/dist/utils/response-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-cache.js","sourceRoot":"","sources":["../../src/utils/response-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAClC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAyCtC;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IACjD,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC,CAAC,2BAA2B;IACjF,WAAW,GAAa,EAAE,CAAC;IAC3B,KAAK,GAAe;QAC1B,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;KACb,CAAC;IAEF,gBAAgB;IACC,UAAU,CAAS;IACnB,KAAK,CAAS;IACd,cAAc,CAAS;IACvB,cAAc,CAAS;IACvB,sBAAsB,CAAS;IACxC,YAAY,CAAkB;IAEtC,YAAY,UAMR,EAAE;QACJ,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,sBAAsB;QAC7E,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,CAAC,CAAC;QAElE,oBAAoB;QACpB,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;YAC3C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC;YACvC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;SACpD,CAAC,CAAC;QAEH,mBAAmB;QACnB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB;QAC/F,6CAA6C;QAC7C,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAA+B;QAC9C,0CAA0C;QAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aACrC,IAAI,EAAE;aACN,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnB,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;gBAC7I,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,EAAE,EAA6B,CAAC,CAAC;QAEpC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,QAAgB;QACjC,OAAO,UAAU,EAAE,CAAC,CAAC,yBAAyB;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,IAAyB,EACzB,OAAe,EACf,QAAiB,EACjB,SAAkB,EAClB,SAAkB;QAElB,MAAM,aAAa,GAAG,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAE1D,uCAAuC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACpE,IAAI,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,cAAc,UAAU,CAAC,CAAC;QACnG,CAAC;QAED,qBAAqB;QACrB,IAAI,YAAY,GAAG,OAAO,CAAC;QAC3B,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvE,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnD,UAAU,GAAG,IAAI,CAAC;gBAClB,MAAM,CAAC,KAAK,CAAC,8BAA8B,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnI,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAwB;YACjC,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE;gBACR,GAAG,IAAI;gBACP,SAAS;gBACT,SAAS;gBACT,YAAY,EAAE,QAAQ;aACvB;YACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,WAAW,EAAE,CAAC;YACd,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC;YAC7C,UAAU;YACV,SAAS;YACT,SAAS;SACV,CAAC;QAEF,iBAAiB;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAEvC,oDAAoD;QACpD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE;YACjC,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,SAAS,IAAI,WAAW;YACnC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;SACpB,CAAC,CAAC;QAEH,8BAA8B;QAC9B,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAEtC,eAAe;QACf,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAE7F,yBAAyB;QACzB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5B,MAAM,CAAC,KAAK,CAAC,uCAAuC,UAAU,iBAAiB,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAEhH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,oBAA4B,EAAE,SAAkB;QACxD,IAAI,QAAgB,CAAC;QACrB,IAAI,iBAAqC,CAAC;QAE1C,qCAAqC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5B,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;YAEtC,0BAA0B;YAC1B,IAAI,iBAAiB,KAAK,WAAW,EAAE,CAAC;gBACtC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;oBAClD,MAAM,CAAC,IAAI,CAAC,oCAAoC,oBAAoB,KAAK,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,OAAO,iBAAiB,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1J,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC,CAAC,6BAA6B;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,QAAQ,GAAG,oBAAoB,CAAC;QAClC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY;QACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,0BAA0B,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,oCAAoC;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oDAAoD;QACpD,IAAI,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACrG,MAAM,CAAC,IAAI,CAAC,iCAAiC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/I,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yBAAyB;QACzB,KAAK,CAAC,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAElB,uBAAuB;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACxD,MAAM,kBAAkB,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC;gBAC/D,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;gBACxD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,4BAA4B,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1G,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,OAAe;QACjB,kCAAkC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,mBAAmB;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QACzC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,OAAe;QAC5B,kCAAkC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC;YACnC,sBAAsB;YACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,+CAA+C;YAC/C,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,qCAAqC;YACrC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAW;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;QAEvD,yBAAyB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,YAAY,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC;QAED,0BAA0B;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,cAAc,OAAO,wBAAwB,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,SAAkB;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0BAA0B;QAC1B,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,oCAAoC,UAAU,KAAK,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACtI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QACzC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,oBAAoB,UAAU,UAAU,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7F,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAElB,MAAM,CAAC,IAAI,CAAC,+BAA+B,UAAU,UAAU,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAExG,uBAAuB;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACpD,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC/C,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,KAAK,CAAC,QAAQ;YAC7B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK;YACrC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG;YACX,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;SAChC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAe,GACzB,MAAM,CAeR"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,OAAe,GACzB,MAAM,CAsCR"}

package/dist/utils.js

@@ -10,14 +10,33 @@ import { realpathSync, existsSync } from 'fs';
  * @throws Error if the path is outside the project root or does not exist (if mustExist is true).
  */
 export function resolveAndValidatePath(projectRoot, userPath, mustExist = false) {
+    // Check for null byte injection before any path operations
+    if (userPath.includes('\0')) {
+        throw new Error(`Path traversal detected`);
+    }
     const absoluteProjectRoot = realpathSync(projectRoot);
+    // For absolute paths, check if they start outside project root immediately
+    if (resolve(userPath) === userPath) { // userPath is absolute
+        if (!userPath.startsWith(absoluteProjectRoot + sep) && userPath !== absoluteProjectRoot) {
+            throw new Error(`Path traversal detected`);
+        }
+    }
     const resolvedPath = resolve(absoluteProjectRoot, userPath);
-    const absoluteResolvedPath = realpathSync(resolvedPath);
+    let absoluteResolvedPath;
+    const pathExists = existsSync(resolvedPath);
+    if (pathExists) {
+        // Use realpathSync to resolve symlinks and detect traversal for existing paths
+        absoluteResolvedPath = realpathSync(resolvedPath);
+    }
+    else {
+        // For non-existent paths, use logical resolution for traversal detection
+        absoluteResolvedPath = resolvedPath;
+    }
     // Ensure the resolved path is a sub-path of the project root
     if (!absoluteResolvedPath.startsWith(absoluteProjectRoot + sep) && absoluteResolvedPath !== absoluteProjectRoot) {
-        throw new Error(`Path traversal detected: ${userPath} resolves outside project root.`);
+        throw new Error(`Path traversal detected`);
     }
-    if (mustExist && !existsSync(absoluteResolvedPath)) {
+    if (mustExist && !pathExists) {
         throw new Error(`Path does not exist: ${userPath}`);
     }
     return absoluteResolvedPath;

package/dist/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,QAAgB,EAChB,YAAqB,KAAK;IAE1B,MAAM,mBAAmB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,oBAAoB,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAExD,6DAA6D;IAC7D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,IAAI,oBAAoB,KAAK,mBAAmB,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,iCAAiC,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,QAAgB,EAChB,YAAqB,KAAK;IAE1B,2DAA2D;IAC3D,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,mBAAmB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAEtD,2EAA2E;IAC3E,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,uBAAuB;QAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAE5D,IAAI,oBAA4B,CAAC;IACjC,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAE5C,IAAI,UAAU,EAAE,CAAC;QACf,+EAA+E;QAC/E,oBAAoB,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,yEAAyE;QACzE,oBAAoB,GAAG,YAAY,CAAC;IACtC,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,IAAI,oBAAoB,KAAK,mBAAmB,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brutalist/mcp",
-  "version": "0.5.1",
+  "version": "0.6.1",
   "description": "Deploy Claude, Codex & Gemini CLI agents to demolish your work before users do. Real file analysis. Brutal honesty. Now with intelligent pagination.",
   "type": "module",
   "main": "dist/index.js",
@@ -21,15 +21,20 @@
     "prebuild": "npm run clean",
     "build": "tsc && chmod +x dist/index.js",
     "prepare": "npm run build",
-    "prepublishOnly": "npm run test && npm audit --production && npm run build",
+    "prepublishOnly": "npm run test:unit && npm audit --production && npm run build",
     "watch": "tsc --watch",
     "start": "node dist/index.js",
     "dev": "npm run build && npm start",
     "debug": "DEBUG=true node --trace-warnings dist/index.js",
     "inspector": "npx @modelcontextprotocol/inspector dist/index.js",
     "test": "jest",
+    "test:unit": "jest --config jest.config.js",
     "test:watch": "jest --watch",
-    "test:coverage": "jest --coverage"
+    "test:coverage": "jest --coverage",
+    "test:integration": "jest --config jest.integration.config.js --detectOpenHandles",
+    "test:integration:watch": "jest --config jest.integration.config.js --watch",
+    "test:all": "npm run test:unit && npm run test:integration",
+    "test:fast": "npm run test:unit"
   },
   "keywords": [
     "brutalist",
@@ -75,17 +80,22 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.18.1",
+    "express": "^4.18.2",
     "zod": "^3.24.2"
   },
   "devDependencies": {
-    "@types/express": "^5.0.3",
+    "@types/eventsource": "^1.1.15",
+    "@types/express": "^4.17.21",
     "@types/jest": "^30.0.0",
     "@types/node": "^20.17.28",
     "@types/node-fetch": "^2.6.13",
+    "@types/supertest": "^6.0.3",
     "@types/ws": "^8.18.1",
     "dotenv": "^17.2.2",
+    "eventsource": "^4.0.0",
     "jest": "^30.1.3",
     "node-fetch": "^3.3.2",
+    "supertest": "^7.1.4",
     "ts-jest": "^29.4.2",
     "typescript": "^5.8.2",
     "ws": "^8.18.3"