@cleocode/mcp-server 0.86.0

package/dist/lib/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/lib/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,KAAK,CAMX;IACF,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,YAAY,CAA+C;gBAEvD,KAAK,GAAE,MAAc,EAAE,OAAO,GAAE,OAAc;IAc1D;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAOrF;;OAEG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS;IA0BpG;;OAEG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAyBhH;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAmBxC;;OAEG;IACH,KAAK,IAAI,IAAI;IASb;;OAEG;IACH,QAAQ,IAAI,UAAU;IAItB;;OAEG;IACH,UAAU,IAAI,IAAI;IAMlB;;OAEG;IACH,YAAY,IAAI,MAAM;IAoBtB;;OAEG;IACH,OAAO,IAAI,IAAI;IAQf;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;OAEG;IACH,OAAO,CAAC,MAAM;CASf"}

package/dist/lib/cache.js

@@ -0,0 +1,204 @@
+/**
+ * In-memory query cache for CLEO MCP Server
+ *
+ * Caches cleo_query responses with configurable TTL.
+ * Cache key = domain + operation + hash(params).
+ * Invalidated on any cleo_mutate operation for the relevant domain.
+ *
+ * @task T3145
+ */
+import { createHash } from 'crypto';
+/**
+ * Query cache with per-domain invalidation
+ */
+export class QueryCache {
+    store = new Map();
+    domainKeys = new Map();
+    stats = {
+        hits: 0,
+        misses: 0,
+        evictions: 0,
+        size: 0,
+        domains: {},
+    };
+    ttl;
+    enabled;
+    cleanupTimer = null;
+    constructor(ttlMs = 30000, enabled = true) {
+        this.ttl = ttlMs;
+        this.enabled = enabled;
+        // Periodic cleanup of expired entries every TTL interval
+        if (enabled && ttlMs > 0) {
+            this.cleanupTimer = setInterval(() => this.evictExpired(), ttlMs);
+            // Allow Node to exit even if timer is running
+            if (this.cleanupTimer.unref) {
+                this.cleanupTimer.unref();
+            }
+        }
+    }
+    /**
+     * Build cache key from domain, operation, and params
+     */
+    buildKey(domain, operation, params) {
+        const paramsHash = params
+            ? createHash('md5').update(JSON.stringify(sortObject(params))).digest('hex').slice(0, 12)
+            : 'no-params';
+        return `${domain}:${operation}:${paramsHash}`;
+    }
+    /**
+     * Get cached value, or undefined if not found/expired
+     */
+    get(domain, operation, params) {
+        if (!this.enabled) {
+            this.stats.misses++;
+            return undefined;
+        }
+        const key = this.buildKey(domain, operation, params);
+        const entry = this.store.get(key);
+        if (!entry) {
+            this.stats.misses++;
+            return undefined;
+        }
+        // Check TTL expiration
+        if (Date.now() > entry.expiresAt) {
+            this.delete(key, domain);
+            this.stats.misses++;
+            this.stats.evictions++;
+            return undefined;
+        }
+        this.stats.hits++;
+        return entry.value;
+    }
+    /**
+     * Store a value in the cache
+     */
+    set(domain, operation, params, value) {
+        if (!this.enabled || this.ttl <= 0) {
+            return;
+        }
+        const key = this.buildKey(domain, operation, params);
+        const now = Date.now();
+        this.store.set(key, {
+            value,
+            expiresAt: now + this.ttl,
+            createdAt: now,
+        });
+        // Track key under its domain for bulk invalidation
+        if (!this.domainKeys.has(domain)) {
+            this.domainKeys.set(domain, new Set());
+        }
+        this.domainKeys.get(domain).add(key);
+        // Update stats
+        this.stats.size = this.store.size;
+        this.stats.domains[domain] = this.domainKeys.get(domain).size;
+    }
+    /**
+     * Invalidate all cached entries for a domain
+     *
+     * Called on any cleo_mutate operation to ensure consistency.
+     */
+    invalidateDomain(domain) {
+        const keys = this.domainKeys.get(domain);
+        if (!keys || keys.size === 0) {
+            return 0;
+        }
+        const count = keys.size;
+        for (const key of keys) {
+            this.store.delete(key);
+        }
+        keys.clear();
+        this.stats.evictions += count;
+        this.stats.size = this.store.size;
+        this.stats.domains[domain] = 0;
+        return count;
+    }
+    /**
+     * Clear entire cache
+     */
+    clear() {
+        const count = this.store.size;
+        this.store.clear();
+        this.domainKeys.clear();
+        this.stats.evictions += count;
+        this.stats.size = 0;
+        this.stats.domains = {};
+    }
+    /**
+     * Get cache statistics
+     */
+    getStats() {
+        return { ...this.stats, size: this.store.size };
+    }
+    /**
+     * Reset statistics counters
+     */
+    resetStats() {
+        this.stats.hits = 0;
+        this.stats.misses = 0;
+        this.stats.evictions = 0;
+    }
+    /**
+     * Evict all expired entries
+     */
+    evictExpired() {
+        const now = Date.now();
+        let count = 0;
+        for (const [key, entry] of this.store) {
+            if (now > entry.expiresAt) {
+                // Find the domain for this key
+                const domain = key.split(':')[0];
+                this.delete(key, domain);
+                count++;
+            }
+        }
+        if (count > 0) {
+            this.stats.evictions += count;
+        }
+        return count;
+    }
+    /**
+     * Stop the cleanup timer (call on shutdown)
+     */
+    destroy() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+        this.clear();
+    }
+    /**
+     * Check if cache is enabled
+     */
+    isEnabled() {
+        return this.enabled;
+    }
+    /**
+     * Delete a single key and update domain tracking
+     */
+    delete(key, domain) {
+        this.store.delete(key);
+        const keys = this.domainKeys.get(domain);
+        if (keys) {
+            keys.delete(key);
+            this.stats.domains[domain] = keys.size;
+        }
+        this.stats.size = this.store.size;
+    }
+}
+/**
+ * Sort object keys recursively for deterministic hashing
+ */
+function sortObject(obj) {
+    const sorted = {};
+    for (const key of Object.keys(obj).sort()) {
+        const val = obj[key];
+        if (val !== null && typeof val === 'object' && !Array.isArray(val)) {
+            sorted[key] = sortObject(val);
+        }
+        else {
+            sorted[key] = val;
+        }
+    }
+    return sorted;
+}
+//# sourceMappingURL=cache.js.map

package/dist/lib/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/lib/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAsBpC;;GAEG;AACH,MAAM,OAAO,UAAU;IACb,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC3C,UAAU,GAA6B,IAAI,GAAG,EAAE,CAAC;IACjD,KAAK,GAAe;QAC1B,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,EAAE;KACZ,CAAC;IACM,GAAG,CAAS;IACZ,OAAO,CAAU;IACjB,YAAY,GAA0C,IAAI,CAAC;IAEnE,YAAY,QAAgB,KAAK,EAAE,UAAmB,IAAI;QACxD,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,yDAAyD;QACzD,IAAI,OAAO,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;YAClE,8CAA8C;YAC9C,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,MAAgC;QAC1E,MAAM,UAAU,GAAG,MAAM;YACvB,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACzF,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,GAAG,MAAM,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,GAAG,CAAc,MAAc,EAAE,SAAiB,EAAE,MAAgC;QAClF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC,KAAU,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,GAAG,CAAc,MAAc,EAAE,SAAiB,EAAE,MAA2C,EAAE,KAAQ;QACvG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,KAAK;YACL,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG;YACzB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtC,eAAe;QACf,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,MAAc;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QAEb,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC1B,+BAA+B;gBAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzB,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;QAChC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,GAAW,EAAE,MAAc;QACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAA4B;IAC9C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAA8B,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/command-builder.d.ts

@@ -0,0 +1,52 @@
+/**
+ * CLI Command Builder
+ *
+ * Constructs safe CLI commands with proper argument escaping and flag formatting.
+ * Prevents shell injection attacks by properly escaping all arguments.
+ *
+ * @task T2914
+ */
+/**
+ * Escape shell argument to prevent injection
+ *
+ * Wraps argument in single quotes and escapes any embedded single quotes.
+ * This is safe for all shell interpreters (bash, sh, zsh).
+ */
+export declare function escapeArg(arg: string | number | boolean): string;
+/**
+ * Format CLI flags from key-value object
+ *
+ * Converts {json: true, parent: "T001"} to ["--json", "--parent", "T001"]
+ */
+export declare function formatFlags(flags: Record<string, unknown>): string[];
+/**
+ * Map domain+operation to CLI command
+ *
+ * Maps MCP domain/operation pairs to the actual CLI command structure.
+ * For example: domain='tasks', operation='add' -> command='add', addOperationAsSubcommand=false
+ */
+export declare function mapDomainToCommand(domain: string, operation: string): {
+    command: string;
+    addOperationAsSubcommand: boolean;
+};
+/**
+ * Build complete CLI command
+ *
+ * @param cliPath - Path to CLEO CLI executable
+ * @param domain - Domain name (e.g., 'tasks', 'session') OR direct command (e.g., 'show', 'add')
+ * @param operation - Operation name (e.g., 'show', 'list') OR first argument
+ * @param args - Positional arguments
+ * @param flags - Named flags/options
+ * @returns Complete command string ready for execution
+ *
+ * @example
+ * ```typescript
+ * buildCLICommand('cleo', 'tasks', 'show', ['T2914'], {json: true})
+ * // Returns: "cleo show 'T2914' --json"
+ *
+ * buildCLICommand('cleo', 'show', 'T2914', [], {json: true})
+ * // Returns: "cleo show 'T2914' --json"
+ * ```
+ */
+export declare function buildCLICommand(cliPath: string, domain: string, operation: string, args?: Array<string | number>, flags?: Record<string, unknown>): string;
+//# sourceMappingURL=command-builder.d.ts.map

package/dist/lib/command-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-builder.d.ts","sourceRoot":"","sources":["../../src/lib/command-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAUhE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAqCpE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,wBAAwB,EAAE,OAAO,CAAA;CAAE,CA2J5H;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAM,EACjC,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAClC,MAAM,CA+CR"}

package/dist/lib/command-builder.js

@@ -0,0 +1,280 @@
+/**
+ * CLI Command Builder
+ *
+ * Constructs safe CLI commands with proper argument escaping and flag formatting.
+ * Prevents shell injection attacks by properly escaping all arguments.
+ *
+ * @task T2914
+ */
+/**
+ * Escape shell argument to prevent injection
+ *
+ * Wraps argument in single quotes and escapes any embedded single quotes.
+ * This is safe for all shell interpreters (bash, sh, zsh).
+ */
+export function escapeArg(arg) {
+    // Convert to string
+    const str = String(arg);
+    // Escape single quotes by replacing ' with '\''
+    // This closes the quote, adds an escaped quote, and reopens the quote
+    const escaped = str.replace(/'/g, "'\\''");
+    // Wrap in single quotes
+    return `'${escaped}'`;
+}
+/**
+ * Format CLI flags from key-value object
+ *
+ * Converts {json: true, parent: "T001"} to ["--json", "--parent", "T001"]
+ */
+export function formatFlags(flags) {
+    const result = [];
+    for (const [key, value] of Object.entries(flags)) {
+        // Skip undefined/null values
+        if (value === undefined || value === null) {
+            continue;
+        }
+        // Boolean flags
+        if (typeof value === 'boolean') {
+            if (value === true) {
+                result.push(`--${key}`);
+            }
+            // Skip false boolean flags (don't add anything)
+            continue;
+        }
+        // Array flags (multiple values)
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                result.push(`--${key}`, escapeArg(item));
+            }
+            continue;
+        }
+        // Object flags (JSON stringify)
+        if (typeof value === 'object') {
+            result.push(`--${key}`, escapeArg(JSON.stringify(value)));
+            continue;
+        }
+        // Regular flags (string/number)
+        result.push(`--${key}`, escapeArg(value));
+    }
+    return result;
+}
+/**
+ * Map domain+operation to CLI command
+ *
+ * Maps MCP domain/operation pairs to the actual CLI command structure.
+ * For example: domain='tasks', operation='add' -> command='add', addOperationAsSubcommand=false
+ */
+export function mapDomainToCommand(domain, operation) {
+    // For tasks domain, the operation IS the command
+    // For session/lifecycle domains, we need both (e.g., 'session start')
+    const domainOperationMap = {
+        tasks: {
+            show: { command: 'show', addOperationAsSubcommand: false },
+            list: { command: 'list', addOperationAsSubcommand: false },
+            find: { command: 'find', addOperationAsSubcommand: false },
+            add: { command: 'add', addOperationAsSubcommand: false },
+            update: { command: 'update', addOperationAsSubcommand: false },
+            complete: { command: 'complete', addOperationAsSubcommand: false },
+            delete: { command: 'delete', addOperationAsSubcommand: false },
+            archive: { command: 'archive', addOperationAsSubcommand: false },
+            unarchive: { command: 'unarchive', addOperationAsSubcommand: false },
+            restore: { command: 'restore', addOperationAsSubcommand: false },
+            reopen: { command: 'reopen', addOperationAsSubcommand: false },
+            exists: { command: 'exists', addOperationAsSubcommand: false },
+            next: { command: 'next', addOperationAsSubcommand: false },
+            deps: { command: 'deps', addOperationAsSubcommand: false },
+            blockers: { command: 'blockers', addOperationAsSubcommand: false },
+            tree: { command: 'tree', addOperationAsSubcommand: false },
+            analyze: { command: 'analyze', addOperationAsSubcommand: false },
+        },
+        session: {
+            start: { command: 'session', addOperationAsSubcommand: true },
+            end: { command: 'session', addOperationAsSubcommand: true },
+            status: { command: 'session', addOperationAsSubcommand: true },
+            list: { command: 'session', addOperationAsSubcommand: true },
+            show: { command: 'session', addOperationAsSubcommand: true },
+            focus: { command: 'focus', addOperationAsSubcommand: false },
+            suspend: { command: 'session', addOperationAsSubcommand: true },
+            resume: { command: 'session', addOperationAsSubcommand: true },
+            history: { command: 'session', addOperationAsSubcommand: true },
+            archive: { command: 'session', addOperationAsSubcommand: true },
+            cleanup: { command: 'session', addOperationAsSubcommand: true },
+            doctor: { command: 'session', addOperationAsSubcommand: true },
+            switch: { command: 'session', addOperationAsSubcommand: true },
+            // Compound focus operations from MCP (session.focus.set → cleo focus set)
+            'focus.set': { command: 'focus set', addOperationAsSubcommand: false },
+            'focus.clear': { command: 'focus clear', addOperationAsSubcommand: false },
+            'focus.get': { command: 'focus show', addOperationAsSubcommand: false },
+            'focus.show': { command: 'focus show', addOperationAsSubcommand: false },
+            'focus.note': { command: 'focus note', addOperationAsSubcommand: false },
+            'focus.next': { command: 'focus next', addOperationAsSubcommand: false },
+        },
+        // Focus operations mapped to 'cleo focus <subcommand>'
+        // These handle 'focus.set' / 'focus.clear' / 'focus.get' operations
+        // from the session domain in MCP
+        focus: {
+            set: { command: 'focus', addOperationAsSubcommand: true },
+            clear: { command: 'focus', addOperationAsSubcommand: true },
+            show: { command: 'focus', addOperationAsSubcommand: true },
+            get: { command: 'focus show', addOperationAsSubcommand: false },
+            note: { command: 'focus', addOperationAsSubcommand: true },
+            next: { command: 'focus', addOperationAsSubcommand: true },
+        },
+        lifecycle: {
+            status: { command: 'lifecycle', addOperationAsSubcommand: true },
+            stages: { command: 'lifecycle', addOperationAsSubcommand: true },
+            validate: { command: 'lifecycle', addOperationAsSubcommand: true },
+            record: { command: 'lifecycle', addOperationAsSubcommand: true },
+            enforce: { command: 'lifecycle', addOperationAsSubcommand: true },
+            skip: { command: 'lifecycle', addOperationAsSubcommand: true },
+            unskip: { command: 'lifecycle', addOperationAsSubcommand: true },
+            report: { command: 'lifecycle', addOperationAsSubcommand: true },
+            export: { command: 'lifecycle', addOperationAsSubcommand: true },
+            import: { command: 'lifecycle', addOperationAsSubcommand: true },
+            // Map MCP operation aliases to CLI equivalents
+            progress: { command: 'lifecycle record', addOperationAsSubcommand: false },
+            check: { command: 'lifecycle validate', addOperationAsSubcommand: false },
+            gate: { command: 'lifecycle enforce', addOperationAsSubcommand: false },
+            gates: { command: 'lifecycle stages', addOperationAsSubcommand: false },
+            prerequisites: { command: 'lifecycle stages', addOperationAsSubcommand: false },
+            history: { command: 'lifecycle export', addOperationAsSubcommand: false },
+            reset: { command: 'lifecycle record', addOperationAsSubcommand: false },
+            'gate.pass': { command: 'lifecycle enforce', addOperationAsSubcommand: false },
+            'gate.fail': { command: 'lifecycle enforce', addOperationAsSubcommand: false },
+        },
+        // Orchestrate domain maps to 'cleo orchestrator <subcommand>'
+        orchestrate: {
+            analyze: { command: 'orchestrator', addOperationAsSubcommand: true },
+            start: { command: 'orchestrator', addOperationAsSubcommand: true },
+            startup: { command: 'orchestrator', addOperationAsSubcommand: true },
+            status: { command: 'orchestrator', addOperationAsSubcommand: true },
+            next: { command: 'orchestrator', addOperationAsSubcommand: true },
+            ready: { command: 'orchestrator', addOperationAsSubcommand: true },
+            spawn: { command: 'orchestrator', addOperationAsSubcommand: true },
+            waves: { command: 'orchestrator', addOperationAsSubcommand: true },
+            parallel: { command: 'orchestrator', addOperationAsSubcommand: true },
+            check: { command: 'orchestrator', addOperationAsSubcommand: true },
+            validate: { command: 'orchestrator', addOperationAsSubcommand: true },
+            context: { command: 'orchestrator', addOperationAsSubcommand: true },
+            skill: { command: 'orchestrator', addOperationAsSubcommand: true },
+        },
+        // Research domain maps to 'cleo research <subcommand>'
+        research: {
+            link: { command: 'research', addOperationAsSubcommand: true },
+            links: { command: 'research', addOperationAsSubcommand: true },
+            unlink: { command: 'research', addOperationAsSubcommand: true },
+            list: { command: 'research', addOperationAsSubcommand: true },
+            show: { command: 'research', addOperationAsSubcommand: true },
+            get: { command: 'research', addOperationAsSubcommand: true },
+            add: { command: 'research', addOperationAsSubcommand: true },
+            query: { command: 'research', addOperationAsSubcommand: false },
+            stats: { command: 'research', addOperationAsSubcommand: true },
+            pending: { command: 'research', addOperationAsSubcommand: true },
+            inject: { command: 'research', addOperationAsSubcommand: true },
+            archive: { command: 'research', addOperationAsSubcommand: true },
+            'archive-list': { command: 'research', addOperationAsSubcommand: true },
+            status: { command: 'research', addOperationAsSubcommand: true },
+            compact: { command: 'research', addOperationAsSubcommand: true },
+            validate: { command: 'research', addOperationAsSubcommand: true },
+            // Manifest sub-operations map to actual CLI subcommands
+            'manifest.append': { command: 'research add', addOperationAsSubcommand: false },
+            'manifest.read': { command: 'research list', addOperationAsSubcommand: false },
+            'manifest.archive': { command: 'research archive', addOperationAsSubcommand: false },
+        },
+        system: {
+            version: { command: 'version', addOperationAsSubcommand: false },
+            config: { command: 'config', addOperationAsSubcommand: false },
+            backup: { command: 'backup', addOperationAsSubcommand: false },
+            cleanup: { command: 'cleanup', addOperationAsSubcommand: false },
+            doctor: { command: 'doctor', addOperationAsSubcommand: false },
+            stats: { command: 'stats', addOperationAsSubcommand: false },
+            context: { command: 'context', addOperationAsSubcommand: false },
+        },
+        validate: {
+            schema: { command: 'validate', addOperationAsSubcommand: false },
+            task: { command: 'validate', addOperationAsSubcommand: false },
+            compliance: { command: 'compliance', addOperationAsSubcommand: false },
+            test: { command: 'test', addOperationAsSubcommand: false },
+        },
+    };
+    const mapping = domainOperationMap[domain]?.[operation];
+    if (mapping) {
+        return mapping;
+    }
+    // Handle compound operations (e.g., 'focus.set' in 'session' domain)
+    // Split on first dot and try to resolve via a sub-domain
+    if (operation.includes('.')) {
+        const dotIndex = operation.indexOf('.');
+        const subDomain = operation.substring(0, dotIndex);
+        const subOp = operation.substring(dotIndex + 1);
+        // Check if there's a dedicated domain for the sub-operation
+        const subMapping = domainOperationMap[subDomain]?.[subOp];
+        if (subMapping) {
+            return subMapping;
+        }
+    }
+    // Default: use domain as command, operation as subcommand
+    return { command: domain, addOperationAsSubcommand: true };
+}
+/**
+ * Build complete CLI command
+ *
+ * @param cliPath - Path to CLEO CLI executable
+ * @param domain - Domain name (e.g., 'tasks', 'session') OR direct command (e.g., 'show', 'add')
+ * @param operation - Operation name (e.g., 'show', 'list') OR first argument
+ * @param args - Positional arguments
+ * @param flags - Named flags/options
+ * @returns Complete command string ready for execution
+ *
+ * @example
+ * ```typescript
+ * buildCLICommand('cleo', 'tasks', 'show', ['T2914'], {json: true})
+ * // Returns: "cleo show 'T2914' --json"
+ *
+ * buildCLICommand('cleo', 'show', 'T2914', [], {json: true})
+ * // Returns: "cleo show 'T2914' --json"
+ * ```
+ */
+export function buildCLICommand(cliPath, domain, operation, args = [], flags = {}) {
+    const parts = [cliPath];
+    // Check if we need to map domain+operation to CLI command
+    // This handles E2E tests that use domain='tasks', operation='add'
+    // versus domain handlers that use domain='add', operation=title
+    // Valid CLI commands that can be used directly as the first command word.
+    // These are commands where domain IS the command itself (e.g., domain='add', operation='My Task Title').
+    // Do NOT include domain names that need mapDomainToCommand lookup (like 'session', 'lifecycle',
+    // 'orchestrate', 'research', 'tasks', 'focus', 'system', 'validate').
+    const validCliCommands = [
+        'add', 'list', 'show', 'find', 'update', 'complete', 'delete', 'archive',
+        'restore', 'exists', 'next', 'version', 'dash', 'analyze', 'config',
+        'backup', 'init', 'blockers', 'deps', 'tree',
+    ];
+    if (!validCliCommands.includes(domain)) {
+        // This looks like domain='tasks', operation='add' pattern from E2E tests
+        // Map it to the proper CLI command
+        const mapping = mapDomainToCommand(domain, operation);
+        parts.push(mapping.command);
+        // For commands that need the operation as a subcommand (session, lifecycle)
+        if (mapping.addOperationAsSubcommand) {
+            parts.push(escapeArg(operation));
+        }
+        // For tasks domain, the operation IS already the command, so don't add it again
+    }
+    else {
+        // This is already a direct CLI command (domain='add', operation=title)
+        parts.push(domain);
+        // Add operation (may be user-controlled, e.g., task title, so escape it)
+        if (operation) {
+            parts.push(escapeArg(operation));
+        }
+    }
+    // Add positional arguments (escaped)
+    for (const arg of args) {
+        parts.push(escapeArg(arg));
+    }
+    // Add flags (escaped)
+    const flagParts = formatFlags(flags);
+    parts.push(...flagParts);
+    return parts.join(' ');
+}
+//# sourceMappingURL=command-builder.js.map

package/dist/lib/command-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-builder.js","sourceRoot":"","sources":["../../src/lib/command-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAA8B;IACtD,oBAAoB;IACpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAExB,gDAAgD;IAChD,sEAAsE;IACtE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE3C,wBAAwB;IACxB,OAAO,IAAI,OAAO,GAAG,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAA8B;IACxD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,6BAA6B;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,gBAAgB;QAChB,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,gDAAgD;YAChD,SAAS;QACX,CAAC;QAED,gCAAgC;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE,SAAS,CAAC,IAAiC,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,SAAS;QACX,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,gCAAgC;QAChC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE,SAAS,CAAC,KAAkC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,SAAiB;IAClE,iDAAiD;IACjD,sEAAsE;IACtE,MAAM,kBAAkB,GAA2F;QACjH,KAAK,EAAE;YACL,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1D,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACxD,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAClE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAChE,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACpE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1D,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAClE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,KAAK,EAAE;SACjE;QACD,OAAO,EAAE;YACP,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC7D,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC3D,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC9D,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC5D,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC5D,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC/D,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC/D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC/D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC/D,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC9D,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC9D,0EAA0E;YAC1E,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACtE,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1E,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACvE,YAAY,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACxE,YAAY,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACxE,YAAY,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,EAAE;SACzE;QACD,uDAAuD;QACvD,oEAAoE;QACpE,iCAAiC;QACjC,KAAK,EAAE;YACL,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACzD,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC3D,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC1D,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC/D,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE;SAC3D;QACD,SAAS,EAAE;YACT,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAClE,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACjE,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC9D,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,+CAA+C;YAC/C,QAAQ,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC1E,KAAK,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACzE,IAAI,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACvE,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACvE,aAAa,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC/E,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACzE,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACvE,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9E,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,KAAK,EAAE;SAC/E;QACD,8DAA8D;QAC9D,WAAW,EAAE;YACX,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACpE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAClE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACpE,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACnE,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACjE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAClE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAClE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAClE,QAAQ,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACrE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAClE,QAAQ,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACrE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACpE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE;SACnE;QACD,uDAAuD;QACvD,QAAQ,EAAE;YACR,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC7D,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC9D,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC/D,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC7D,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC7D,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC5D,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC5D,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC/D,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC/D,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,cAAc,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACvE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAC/D,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YAChE,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACjE,wDAAwD;YACxD,iBAAiB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC/E,eAAe,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9E,kBAAkB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,KAAK,EAAE;SACrF;QACD,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAChE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,KAAK,EAAE;SACjE;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAChE,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,KAAK,EAAE;YAC9D,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,KAAK,EAAE;YACtE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;SAC3D;KACF,CAAC;IAEF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAExD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qEAAqE;IACrE,yDAAyD;IACzD,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAChD,4DAA4D;QAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,MAAc,EACd,SAAiB,EACjB,OAA+B,EAAE,EACjC,QAAiC,EAAE;IAEnC,MAAM,KAAK,GAAa,CAAC,OAAO,CAAC,CAAC;IAElC,0DAA0D;IAC1D,kEAAkE;IAClE,gEAAgE;IAChE,0EAA0E;IAC1E,yGAAyG;IACzG,gGAAgG;IAChG,sEAAsE;IACtE,MAAM,gBAAgB,GAAG;QACvB,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS;QACxE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ;QACnE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM;KAC7C,CAAC;IAEF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,yEAAyE;QACzE,mCAAmC;QACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE5B,4EAA4E;QAC5E,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,gFAAgF;IAClF,CAAC;SAAM,CAAC;QACN,uEAAuE;QACvE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnB,yEAAyE;QACzE,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,sBAAsB;IACtB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;IAEzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Configuration loader for CLEO MCP Server
+ *
+ * Loads configuration from:
+ * 1. Environment variables (CLEO_MCP_*)
+ * 2. Config file (.cleo/config.json)
+ * 3. Defaults (fallback values)
+ *
+ * @task T2928
+ */
+import { MCPConfig } from './defaults.js';
+/**
+ * Configuration validation error
+ */
+export declare class ConfigValidationError extends Error {
+    field: string;
+    value: unknown;
+    constraint: string;
+    constructor(field: string, value: unknown, constraint: string);
+}
+/**
+ * Validate complete configuration
+ */
+export declare function validateConfig(config: MCPConfig): void;
+/**
+ * Load configuration from all sources
+ *
+ * Priority order:
+ * 1. Environment variables (CLEO_MCP_*)
+ * 2. Config file (.cleo/config.json)
+ * 3. Defaults
+ */
+export declare function loadConfig(projectRoot?: string): MCPConfig;
+/**
+ * Get global configuration (singleton)
+ */
+export declare function getConfig(): MCPConfig;
+/**
+ * Reset global configuration (for testing)
+ */
+export declare function resetConfig(): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EACL,SAAS,EASV,MAAM,eAAe,CAAC;AAEvB;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAErC,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,MAAM;gBAFlB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,EACd,UAAU,EAAE,MAAM;CAK5B;AAuJD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAatD;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAuD1D;AAQD;;GAEG;AACH,wBAAgB,SAAS,IAAI,SAAS,CAKrC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC"}