@claude-flow/cli 3.32.2 → 3.32.3

package/dist/src/mcp-tools/analyze-tools.js

@@ -1,346 +0,0 @@
-/**
- * Analyze MCP Tools
- * Provides diff analysis and classification via MCP protocol
- */
-import { validateGitRef, validatePath } from './validate-input.js';
-import { analyzeDiff, assessFileRisk, assessOverallRisk, classifyDiff, suggestReviewers, getGitDiffNumstat, } from '../ruvector/diff-classifier.js';
-/**
- * Diff Analysis Tool
- * Analyzes git diffs for change risk assessment and classification
- */
-export const analyzeDiffTool = {
-    name: 'analyze_diff',
-    description: 'Analyze git diff for change risk assessment and classification Use when native `git diff` / `grep` / static analysis is wrong because you want LLM-graded change classification, reviewer recommendations, or risk scoring. For literal-text inspection, native tools are fine.',
-    category: 'analyze',
-    tags: ['diff', 'risk', 'classification', 'git'],
-    inputSchema: {
-        type: 'object',
-        properties: {
-            ref: {
-                type: 'string',
-                description: 'Git ref to compare against (e.g., HEAD~1, main..feature, commit hash)',
-                default: 'HEAD',
-            },
-            includeFileRisks: {
-                type: 'boolean',
-                description: 'Include detailed file-level risk analysis',
-                default: false,
-            },
-            includeReviewers: {
-                type: 'boolean',
-                description: 'Include recommended reviewers',
-                default: true,
-            },
-            useRuVector: {
-                type: 'boolean',
-                description: 'Attempt to use ruvector for analysis (graceful fallback if unavailable)',
-                default: true,
-            },
-        },
-    },
-    handler: async (params) => {
-        if (params.ref) {
-            const vRef = validateGitRef(params.ref, 'ref');
-            if (!vRef.valid)
-                return { error: true, message: vRef.error, ref: params.ref };
-        }
-        const ref = params.ref || 'HEAD';
-        const includeFileRisks = params.includeFileRisks !== false;
-        const includeReviewers = params.includeReviewers !== false;
-        const useRuVector = params.useRuVector !== false;
-        try {
-            const result = await analyzeDiff({
-                ref,
-                useRuVector,
-            });
-            // Build response
-            const response = {
-                ref: result.ref,
-                timestamp: result.timestamp,
-                files: result.files,
-                risk: result.risk,
-                classification: result.classification,
-                summary: result.summary,
-            };
-            if (includeFileRisks) {
-                response.fileRisks = result.fileRisks;
-            }
-            if (includeReviewers) {
-                response.recommendedReviewers = result.recommendedReviewers;
-            }
-            return response;
-        }
-        catch (error) {
-            return {
-                error: true,
-                message: error instanceof Error ? error.message : String(error),
-                ref,
-            };
-        }
-    },
-};
-/**
- * Diff Risk Assessment Tool
- * Focused risk assessment without full analysis
- */
-export const diffRiskTool = {
-    name: 'analyze_diff-risk',
-    description: 'Quick risk assessment for git diff Use when native `git diff` / `grep` / static analysis is wrong because you want LLM-graded change classification, reviewer recommendations, or risk scoring. For literal-text inspection, native tools are fine.',
-    category: 'analyze',
-    tags: ['diff', 'risk', 'git'],
-    inputSchema: {
-        type: 'object',
-        properties: {
-            ref: {
-                type: 'string',
-                description: 'Git ref to compare against',
-                default: 'HEAD',
-            },
-        },
-    },
-    handler: async (params) => {
-        if (params.ref) {
-            const vRef = validateGitRef(params.ref, 'ref');
-            if (!vRef.valid)
-                return { error: true, message: vRef.error, ref: params.ref };
-        }
-        const ref = params.ref || 'HEAD';
-        try {
-            const files = getGitDiffNumstat(ref);
-            const fileRisks = files.map(assessFileRisk);
-            const risk = assessOverallRisk(files, fileRisks);
-            return {
-                ref,
-                risk,
-                summary: `${risk.overall} risk (score: ${risk.score}/100) - ${files.length} files changed`,
-            };
-        }
-        catch (error) {
-            return {
-                error: true,
-                message: error instanceof Error ? error.message : String(error),
-                ref,
-            };
-        }
-    },
-};
-/**
- * Diff Classification Tool
- * Classify change type without full analysis
- */
-export const diffClassifyTool = {
-    name: 'analyze_diff-classify',
-    description: 'Classify git diff change type Use when native `git diff` / `grep` / static analysis is wrong because you want LLM-graded change classification, reviewer recommendations, or risk scoring. For literal-text inspection, native tools are fine.',
-    category: 'analyze',
-    tags: ['diff', 'classification', 'git'],
-    inputSchema: {
-        type: 'object',
-        properties: {
-            ref: {
-                type: 'string',
-                description: 'Git ref to compare against',
-                default: 'HEAD',
-            },
-        },
-    },
-    handler: async (params) => {
-        if (params.ref) {
-            const vRef = validateGitRef(params.ref, 'ref');
-            if (!vRef.valid)
-                return { error: true, message: vRef.error, ref: params.ref };
-        }
-        const ref = params.ref || 'HEAD';
-        try {
-            const files = getGitDiffNumstat(ref);
-            const classification = classifyDiff(files);
-            return {
-                ref,
-                classification,
-                files: files.length,
-            };
-        }
-        catch (error) {
-            return {
-                error: true,
-                message: error instanceof Error ? error.message : String(error),
-                ref,
-            };
-        }
-    },
-};
-/**
- * Diff Reviewers Tool
- * Suggest reviewers for changes
- */
-export const diffReviewersTool = {
-    name: 'analyze_diff-reviewers',
-    description: 'Suggest reviewers for git diff changes Use when native `git diff` / `grep` / static analysis is wrong because you want LLM-graded change classification, reviewer recommendations, or risk scoring. For literal-text inspection, native tools are fine.',
-    category: 'analyze',
-    tags: ['diff', 'reviewers', 'git'],
-    inputSchema: {
-        type: 'object',
-        properties: {
-            ref: {
-                type: 'string',
-                description: 'Git ref to compare against',
-                default: 'HEAD',
-            },
-            limit: {
-                type: 'number',
-                description: 'Maximum number of reviewers to suggest',
-                default: 5,
-            },
-        },
-    },
-    handler: async (params) => {
-        if (params.ref) {
-            const vRef = validateGitRef(params.ref, 'ref');
-            if (!vRef.valid)
-                return { error: true, message: vRef.error, ref: params.ref };
-        }
-        const ref = params.ref || 'HEAD';
-        const limit = params.limit || 5;
-        try {
-            const files = getGitDiffNumstat(ref);
-            const fileRisks = files.map(assessFileRisk);
-            const reviewers = suggestReviewers(files, fileRisks);
-            return {
-                ref,
-                recommendedReviewers: reviewers.slice(0, limit),
-                filesAnalyzed: files.length,
-            };
-        }
-        catch (error) {
-            return {
-                error: true,
-                message: error instanceof Error ? error.message : String(error),
-                ref,
-            };
-        }
-    },
-};
-/**
- * File Risk Tool
- * Assess risk for a specific file path
- */
-export const fileRiskTool = {
-    name: 'analyze_file-risk',
-    description: 'Assess risk for a specific file change Use when native `git diff` / `grep` / static analysis is wrong because you want LLM-graded change classification, reviewer recommendations, or risk scoring. For literal-text inspection, native tools are fine.',
-    category: 'analyze',
-    tags: ['file', 'risk'],
-    inputSchema: {
-        type: 'object',
-        properties: {
-            path: {
-                type: 'string',
-                description: 'File path to assess',
-            },
-            additions: {
-                type: 'number',
-                description: 'Number of lines added',
-                default: 0,
-            },
-            deletions: {
-                type: 'number',
-                description: 'Number of lines deleted',
-                default: 0,
-            },
-            status: {
-                type: 'string',
-                description: 'File status: added, modified, deleted, renamed',
-                default: 'modified',
-            },
-        },
-        required: ['path'],
-    },
-    handler: async (params) => {
-        const vPath = validatePath(params.path, 'path');
-        if (!vPath.valid)
-            return { file: params.path, risk: 'unknown', score: 0, reasons: [vPath.error] };
-        const file = {
-            path: params.path,
-            status: params.status || 'modified',
-            additions: params.additions || 0,
-            deletions: params.deletions || 0,
-            hunks: 1,
-            binary: false,
-        };
-        const risk = assessFileRisk(file);
-        return {
-            file: file.path,
-            risk: risk.risk,
-            score: risk.score,
-            reasons: risk.reasons,
-        };
-    },
-};
-/**
- * Diff Stats Tool
- * Get quick diff statistics
- */
-export const diffStatsTool = {
-    name: 'analyze_diff-stats',
-    description: 'Get quick statistics for git diff Use when native `git diff` / `grep` / static analysis is wrong because you want LLM-graded change classification, reviewer recommendations, or risk scoring. For literal-text inspection, native tools are fine.',
-    category: 'analyze',
-    tags: ['diff', 'stats', 'git'],
-    inputSchema: {
-        type: 'object',
-        properties: {
-            ref: {
-                type: 'string',
-                description: 'Git ref to compare against',
-                default: 'HEAD',
-            },
-        },
-    },
-    handler: async (params) => {
-        if (params.ref) {
-            const vRef = validateGitRef(params.ref, 'ref');
-            if (!vRef.valid)
-                return { error: true, message: vRef.error, ref: params.ref };
-        }
-        const ref = params.ref || 'HEAD';
-        try {
-            const files = getGitDiffNumstat(ref);
-            const totalAdditions = files.reduce((sum, f) => sum + f.additions, 0);
-            const totalDeletions = files.reduce((sum, f) => sum + f.deletions, 0);
-            const addedFiles = files.filter(f => f.status === 'added').length;
-            const modifiedFiles = files.filter(f => f.status === 'modified').length;
-            const deletedFiles = files.filter(f => f.status === 'deleted').length;
-            const renamedFiles = files.filter(f => f.status === 'renamed').length;
-            const binaryFiles = files.filter(f => f.binary).length;
-            return {
-                ref,
-                totalFiles: files.length,
-                totalAdditions,
-                totalDeletions,
-                totalChanges: totalAdditions + totalDeletions,
-                byStatus: {
-                    added: addedFiles,
-                    modified: modifiedFiles,
-                    deleted: deletedFiles,
-                    renamed: renamedFiles,
-                },
-                binaryFiles,
-            };
-        }
-        catch (error) {
-            return {
-                error: true,
-                message: error instanceof Error ? error.message : String(error),
-                ref,
-            };
-        }
-    },
-};
-// Export all analyze tools
-export const analyzeTools = [
-    analyzeDiffTool,
-    diffRiskTool,
-    diffClassifyTool,
-    diffReviewersTool,
-    fileRiskTool,
-    diffStatsTool,
-];
-export default analyzeTools;
-//# sourceMappingURL=analyze-tools.js.map

package/dist/src/mcp-tools/auto-install.d.ts

@@ -1,83 +0,0 @@
-/**
- * Auto-install utility for optional MCP tool dependencies
- *
- * When an MCP tool requires an optional package that isn't installed,
- * this utility attempts to install it automatically on first use.
- */
-export interface AutoInstallOptions {
-    /**
-     * Timeout in milliseconds for npm install (default: 60000)
-     */
-    timeout?: number;
-    /**
-     * Whether to save to package.json (default: false)
-     */
-    save?: boolean;
-    /**
-     * Silent install (no console output)
-     */
-    silent?: boolean;
-}
-/**
- * Auto-install a package if not available
- *
- * @param packageName - npm package name to install
- * @param options - Installation options
- * @returns true if installed successfully or already attempted
- */
-export declare function autoInstallPackage(packageName: string, options?: AutoInstallOptions): Promise<boolean>;
-/**
- * Try to import a package, auto-install if not found, and retry
- *
- * @param packageName - npm package name
- * @param options - Installation options
- * @returns The imported module or null if failed
- */
-export declare function tryImportOrInstall<T = unknown>(packageName: string, options?: AutoInstallOptions): Promise<T | null>;
-/**
- * Check if a package is available without installing
- */
-export declare function isPackageAvailable(packageName: string): Promise<boolean>;
-/**
- * Reset install attempts (useful for testing)
- */
-export declare function resetInstallAttempts(): void;
-/**
- * Optional package dependencies and their purposes
- */
-export declare const OPTIONAL_PACKAGES: {
-    readonly '@claude-flow/aidefence': {
-        readonly description: "AI manipulation defense (prompt injection, PII detection)";
-        readonly tools: readonly ["aidefence_scan", "aidefence_analyze", "aidefence_stats", "aidefence_learn"];
-    };
-    readonly '@claude-flow/embeddings': {
-        readonly description: "Vector embeddings with ONNX support";
-        readonly tools: readonly ["embeddings_generate", "embeddings_search", "embeddings_batch"];
-    };
-    readonly 'onnxruntime-node': {
-        readonly description: "ONNX runtime for neural network inference";
-        readonly tools: readonly ["neural_*"];
-    };
-};
-declare const _default: {
-    autoInstallPackage: typeof autoInstallPackage;
-    tryImportOrInstall: typeof tryImportOrInstall;
-    isPackageAvailable: typeof isPackageAvailable;
-    resetInstallAttempts: typeof resetInstallAttempts;
-    OPTIONAL_PACKAGES: {
-        readonly '@claude-flow/aidefence': {
-            readonly description: "AI manipulation defense (prompt injection, PII detection)";
-            readonly tools: readonly ["aidefence_scan", "aidefence_analyze", "aidefence_stats", "aidefence_learn"];
-        };
-        readonly '@claude-flow/embeddings': {
-            readonly description: "Vector embeddings with ONNX support";
-            readonly tools: readonly ["embeddings_generate", "embeddings_search", "embeddings_batch"];
-        };
-        readonly 'onnxruntime-node': {
-            readonly description: "ONNX runtime for neural network inference";
-            readonly tools: readonly ["neural_*"];
-        };
-    };
-};
-export default _default;
-//# sourceMappingURL=auto-install.d.ts.map

package/dist/src/mcp-tools/auto-install.js

@@ -1,131 +0,0 @@
-/**
- * Auto-install utility for optional MCP tool dependencies
- *
- * When an MCP tool requires an optional package that isn't installed,
- * this utility attempts to install it automatically on first use.
- */
-import { spawnSync } from 'child_process';
-// Track which packages we've attempted to install this session
-const installAttempts = new Set();
-/**
- * Auto-install a package if not available
- *
- * @param packageName - npm package name to install
- * @param options - Installation options
- * @returns true if installed successfully or already attempted
- */
-export async function autoInstallPackage(packageName, options = {}) {
-    const { timeout = 60000, save = false, silent = false } = options;
-    // Validate package name to prevent command injection (CVE fix)
-    // Valid npm package names: @scope/name or name, alphanumeric with - . _ ~
-    const validPackageName = /^(@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*(@[a-z0-9-._~]+)?$/i;
-    if (!validPackageName.test(packageName)) {
-        if (!silent) {
-            console.error(`[claude-flow] Invalid package name: ${packageName}`);
-        }
-        return false;
-    }
-    // Only attempt once per session
-    if (installAttempts.has(packageName)) {
-        return false;
-    }
-    installAttempts.add(packageName);
-    try {
-        if (!silent) {
-            console.error(`[claude-flow] Auto-installing ${packageName}...`);
-        }
-        // Use spawn with array args to prevent shell injection
-        const args = ['install', packageName, save ? '--save' : '--no-save'];
-        const result = spawnSync('npm', args, {
-            stdio: silent ? 'pipe' : ['pipe', 'pipe', 'pipe'],
-            timeout,
-            shell: false, // Explicitly disable shell
-        });
-        if (result.status !== 0) {
-            throw new Error(result.stderr?.toString() || 'Installation failed');
-        }
-        if (!silent) {
-            console.error(`[claude-flow] Successfully installed ${packageName}`);
-        }
-        return true;
-    }
-    catch (error) {
-        if (!silent) {
-            console.error(`[claude-flow] Failed to auto-install ${packageName}: ${error}`);
-        }
-        return false;
-    }
-}
-/**
- * Try to import a package, auto-install if not found, and retry
- *
- * @param packageName - npm package name
- * @param options - Installation options
- * @returns The imported module or null if failed
- */
-export async function tryImportOrInstall(packageName, options = {}) {
-    try {
-        // First try to import
-        return await import(packageName);
-    }
-    catch {
-        // Package not found, try to install
-        const installed = await autoInstallPackage(packageName, options);
-        if (installed) {
-            try {
-                // ESM caches failed imports, so we need to bust the cache
-                // Add a timestamp query parameter to force a fresh import
-                const cacheBuster = `?t=${Date.now()}`;
-                return await import(`${packageName}${cacheBuster}`);
-            }
-            catch {
-                console.error(`[claude-flow] ${packageName} installed but failed to load. Restart MCP server.`);
-                return null;
-            }
-        }
-        return null;
-    }
-}
-/**
- * Check if a package is available without installing
- */
-export async function isPackageAvailable(packageName) {
-    try {
-        await import(packageName);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Reset install attempts (useful for testing)
- */
-export function resetInstallAttempts() {
-    installAttempts.clear();
-}
-/**
- * Optional package dependencies and their purposes
- */
-export const OPTIONAL_PACKAGES = {
-    '@claude-flow/aidefence': {
-        description: 'AI manipulation defense (prompt injection, PII detection)',
-        tools: ['aidefence_scan', 'aidefence_analyze', 'aidefence_stats', 'aidefence_learn'],
-    },
-    '@claude-flow/embeddings': {
-        description: 'Vector embeddings with ONNX support',
-        tools: ['embeddings_generate', 'embeddings_search', 'embeddings_batch'],
-    },
-    'onnxruntime-node': {
-        description: 'ONNX runtime for neural network inference',
-        tools: ['neural_*'],
-    },
-};
-export default {
-    autoInstallPackage,
-    tryImportOrInstall,
-    isPackageAvailable,
-    resetInstallAttempts,
-    OPTIONAL_PACKAGES,
-};
-//# sourceMappingURL=auto-install.js.map

package/dist/src/mcp-tools/autopilot-tools.d.ts

@@ -1,12 +0,0 @@
-/**
- * Autopilot MCP Tools
- *
- * 10 MCP tools for persistent swarm completion management.
- * Allows programmatic control of the autopilot loop via MCP.
- *
- * ADR-072: Autopilot Integration
- * @module @claude-flow/cli/mcp-tools/autopilot
- */
-import type { MCPTool } from './types.js';
-export declare const autopilotTools: MCPTool[];
-//# sourceMappingURL=autopilot-tools.d.ts.map