@datafrog-io/n2n-nexus 0.1.8 → 0.2.0

package/build/tools/schemas.js

@@ -0,0 +1,275 @@
+import { z } from "zod";
+/**
+ * Project ID validation regex based on Nexus conventions.
+ */
+export const ProjectIdSchema = z.string()
+    .describe("Strict flat identifier. MUST start with a type-prefix followed by an underscore.")
+    .refine(val => {
+    const validPrefixes = ["web_", "api_", "chrome_", "vscode_", "mcp_", "android_", "ios_", "flutter_", "desktop_", "lib_", "bot_", "infra_", "doc_"];
+    return validPrefixes.some(p => val.startsWith(p));
+}, "Project ID must start with a valid prefix (e.g., 'web_', 'api_')")
+    .refine(val => !val.includes("..") && !val.includes("/") && !val.includes("\\"), "Project ID cannot contain '..' or slashes.");
+/**
+ * 1. register_session_context
+ */
+export const RegisterSessionSchema = z.object({
+    projectId: ProjectIdSchema
+});
+/**
+ * 2. sync_project_assets
+ */
+export const SyncProjectAssetsSchema = z.object({
+    manifest: z.object({
+        id: ProjectIdSchema,
+        name: z.string(),
+        description: z.string(),
+        techStack: z.array(z.string()),
+        relations: z.array(z.object({
+            targetId: z.string(),
+            type: z.enum(["dependency", "parent", "child", "related"])
+        })),
+        lastUpdated: z.string().describe("ISO timestamp"),
+        repositoryUrl: z.string(),
+        localPath: z.string().describe("Physical disk path"),
+        endpoints: z.array(z.object({
+            name: z.string(),
+            url: z.string(),
+            description: z.string()
+        })),
+        apiSpec: z.array(z.object({
+            method: z.string(),
+            path: z.string(),
+            summary: z.string()
+        }))
+    }),
+    internalDocs: z.string().describe("Mandatory technical implementation guide (Markdown)")
+});
+/**
+ * Safe file name validation (no path traversal)
+ */
+export const FileNameSchema = z.string()
+    .min(1, "File name cannot be empty")
+    .max(255, "File name too long")
+    .refine(val => !val.includes("/") && !val.includes("\\"), "File name cannot contain slashes")
+    .refine(val => !val.includes(".."), "File name cannot contain '..'")
+    .refine(val => !val.startsWith("."), "File name cannot start with '.'")
+    .describe("Safe file name without path components");
+/**
+ * 3. upload_project_asset
+ */
+export const UploadAssetSchema = z.object({
+    fileName: FileNameSchema,
+    base64Content: z.string()
+});
+/**
+ * 4. get_global_topology (No arguments)
+ */
+export const EmptySchema = z.object({});
+/**
+ * 7. send_message
+ */
+export const SendMessageSchema = z.object({
+    message: z.string().min(1, "Message cannot be empty"),
+    category: z.enum(["MEETING_START", "PROPOSAL", "DECISION", "UPDATE", "CHAT"]).optional()
+});
+/**
+ * 8. read_messages
+ */
+export const ReadMessagesSchema = z.object({
+    count: z.number().int().positive().optional().default(10),
+    meetingId: z.string().optional()
+});
+/**
+ * 9. update_global_strategy
+ */
+export const UpdateStrategySchema = z.object({
+    content: z.string().min(1, "Strategy content cannot be empty")
+});
+/**
+ * 10. sync_global_doc
+ */
+export const SyncGlobalDocSchema = z.object({
+    docId: z.string(),
+    title: z.string(),
+    content: z.string()
+});
+/**
+ * 13. update_project
+ */
+export const UpdateProjectSchema = z.object({
+    projectId: ProjectIdSchema,
+    patch: z.object({}).passthrough().describe("Fields to update (e.g., description, techStack)")
+});
+/**
+ * 14. rename_project
+ */
+export const RenameProjectSchema = z.object({
+    oldId: ProjectIdSchema,
+    newId: ProjectIdSchema
+});
+/**
+ * 15. moderator_maintenance
+ */
+export const ModeratorMaintenanceSchema = z.object({
+    action: z.enum(["prune", "clear"]),
+    count: z.number().int().min(0)
+});
+/**
+ * 16. moderator_delete_project
+ */
+export const ModeratorDeleteSchema = z.object({
+    projectId: ProjectIdSchema
+});
+/**
+ * 17. start_meeting
+ */
+export const StartMeetingSchema = z.object({
+    topic: z.string().min(1, "Topic is required")
+});
+/**
+ * 18. end_meeting
+ */
+export const EndMeetingSchema = z.object({
+    meetingId: z.string().optional(),
+    summary: z.string().optional()
+});
+/**
+ * 21. archive_meeting
+ */
+export const ArchiveMeetingSchema = z.object({
+    meetingId: z.string()
+});
+/**
+ * 22. reopen_meeting
+ */
+export const ReopenMeetingSchema = z.object({
+    meetingId: z.string()
+});
+// ============ Phase 2: Task Management Schemas ============
+/**
+ * 22. create_task
+ */
+export const CreateTaskSchema = z.object({
+    source_meeting_id: z.string().optional().describe("Link task to a meeting for traceability"),
+    metadata: z.object({}).passthrough().optional().describe("Custom task parameters"),
+    ttl: z.number().int().positive().optional().describe("Time-to-live in milliseconds")
+});
+/**
+ * 23. get_task
+ */
+export const GetTaskSchema = z.object({
+    taskId: z.string()
+});
+/**
+ * 24. list_tasks
+ */
+export const ListTasksSchema = z.object({
+    status: z.enum(["pending", "running", "completed", "failed", "cancelled"]).optional(),
+    limit: z.number().int().positive().optional().default(50)
+});
+/**
+ * 25. update_task
+ */
+export const UpdateTaskSchema = z.object({
+    taskId: z.string(),
+    status: z.enum(["pending", "running", "completed", "failed", "cancelled"]).optional(),
+    progress: z.number().min(0).max(1).optional(),
+    result_uri: z.string().optional(),
+    error_message: z.string().optional()
+});
+/**
+ * 26. cancel_task
+ */
+export const CancelTaskSchema = z.object({
+    taskId: z.string()
+});
+/**
+ * Tool Registry with descriptions and schemas
+ */
+export const TOOL_REGISTRY = {
+    register_session_context: {
+        description: "[IDENTITY] Declare the PROJECT identity. Format: [prefix]_[technical-identifier]. (e.g., 'web_datafrog.io', 'mcp_nexus-core').",
+        schema: RegisterSessionSchema
+    },
+    sync_project_assets: {
+        description: "CRITICAL: [PREREQUISITE: register_session_context] Sync full project state. Both manifest and documentation are MANDATORY.",
+        schema: SyncProjectAssetsSchema
+    },
+    upload_project_asset: {
+        description: "Upload a binary file (images, PDFs, etc.) to the current project's asset folder. Requires active session (call register_session_context first). Returns the relative path of the saved file.",
+        schema: UploadAssetSchema
+    },
+    get_global_topology: {
+        description: "Retrieve complete project relationship graph. Returns { nodes: [{ id, name }], edges: [{ from, to, type }] }. Use this to visualize dependencies.",
+        schema: EmptySchema
+    },
+    send_message: {
+        description: "Post a message to the Nexus collaboration space. If an active meeting exists, the message is automatically routed to that meeting. Otherwise, it goes to the global discussion log. Use this for proposals, decisions, or general coordination.",
+        schema: SendMessageSchema
+    },
+    read_messages: {
+        description: "Read recent messages. Automatically reads from the active meeting if one exists, otherwise reads from global logs.",
+        schema: ReadMessagesSchema
+    },
+    update_global_strategy: {
+        description: "Overwrite master strategy. Content is MANDATORY.",
+        schema: UpdateStrategySchema
+    },
+    sync_global_doc: {
+        description: "Create or update a global document. Returns the document ID.",
+        schema: SyncGlobalDocSchema
+    },
+    update_project: {
+        description: "Partially update a project's manifest. Only provided fields will be updated.",
+        schema: UpdateProjectSchema
+    },
+    rename_project: {
+        description: "[ASYNC] Rename a project ID with automatic cascading updates to all relation references. Returns task ID.",
+        schema: RenameProjectSchema
+    },
+    moderator_maintenance: {
+        description: "[ADMIN ONLY] Manage global discussion logs. 'prune' removes the oldest N entries (keeps newest). 'clear' wipes all logs (use count=0). Returns summary of removed entries. Irreversible.",
+        schema: ModeratorMaintenanceSchema
+    },
+    moderator_delete_project: {
+        description: "[ASYNC][ADMIN ONLY] Completely remove a project, its manifest, and all its assets from Nexus Hub. Returns task ID. Irreversible.",
+        schema: ModeratorDeleteSchema
+    },
+    start_meeting: {
+        description: "Start a new meeting session. Creates a dedicated file for the meeting. Returns the meeting ID and details.",
+        schema: StartMeetingSchema
+    },
+    end_meeting: {
+        description: "End an active meeting. Locks the session for further messages. [RESTRICTED: Only moderator can end].",
+        schema: EndMeetingSchema
+    },
+    archive_meeting: {
+        description: "Archive a closed meeting. Archived meetings are read-only and excluded from active queries. [RESTRICTED: Only moderator can archive].",
+        schema: ArchiveMeetingSchema
+    },
+    reopen_meeting: {
+        description: "Reopen a closed or archived meeting. [Open to all participants].",
+        schema: ReopenMeetingSchema
+    },
+    // --- Phase 2: Task Management ---
+    create_task: {
+        description: "[ASYNC] Create a new background task. Returns task ID for polling. Link to meeting for traceability.",
+        schema: CreateTaskSchema
+    },
+    get_task: {
+        description: "[ASYNC] Get the status and progress of a task by ID.",
+        schema: GetTaskSchema
+    },
+    list_tasks: {
+        description: "[ASYNC] List all tasks with optional status filter.",
+        schema: ListTasksSchema
+    },
+    update_task: {
+        description: "[ASYNC][INTERNAL] Update task status, progress, or result. Intended for background workers only - do not call directly from user-facing tools.",
+        schema: UpdateTaskSchema
+    },
+    cancel_task: {
+        description: "[ASYNC] Cancel a pending or running task.",
+        schema: CancelTaskSchema
+    },
+};

package/build/utils/auth.js

@@ -0,0 +1,11 @@
+import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
+import { CONFIG } from "../config.js";
+/**
+ * Validates moderator permissions for admin tools.
+ * @throws McpError if current session is not in Moderator mode.
+ */
+export function checkModeratorPermission(toolName) {
+    if (!CONFIG.isModerator) {
+        throw new McpError(ErrorCode.InvalidRequest, `Forbidden: ${toolName} requires Moderator rights.`);
+    }
+}

package/build/utils/error.js

@@ -0,0 +1,15 @@
+/**
+ * Error utility functions for path sanitization and reporting.
+ */
+/**
+ * Strips internal file paths from error messages to prevent sensitive path exposure.
+ */
+export function sanitizeErrorMessage(msg) {
+    // Mask Windows paths (e.g. C:\Users\...)
+    let sanitized = msg.replace(/[A-Za-z]:\\[^\s:]+/g, "[internal-path]");
+    // Mask Unix paths (e.g. /home/user/...)
+    sanitized = sanitized.replace(/\/[^\s:]+\/[^\s:]*/g, "[internal-path]");
+    // Mask relative parent paths
+    sanitized = sanitized.replace(/\.\.[\\/][^\s]*/g, "[internal-path]");
+    return sanitized;
+}

package/docs/ASSISTANT_GUIDE.md

@@ -1,66 +1,56 @@
-# Nexus 助手协作指令
-
-你现在是 **n2ns Nexus** 协作网络的一员。该系统集成了实时通信与结构化资产管理，所有操作均落地在本地文件系统。
-
-## 🚦 你的标准动作集
-
-### 1. 启动即签到与角色发现
-在任何任务开始前，你**必须**了解自己的身份：
-- **查看身份与状态**：读取 `mcp://nexus/session` 查看个人标识，读取 `mcp://nexus/status` 查看系统版本、存储模式（SQLite/JSON）及活跃会议数。
-- **声明位置**：调用 `register_session_context(projectId)`。这会让 Nexus 知道你现在负责哪个项目，并解锁该项目的写权限。
-
-### 2. 信息归档与项目管理 (Project Hub)
-当你完成架构设计或技术选型后，请同步资产：
-
-*   **全量同步 (初始化/重构)**:
-    *   `sync_project_assets`：**强制要求**包含完整的 `manifest` 对象和 `internalDocs`。
-    *   务必准确填写 `relations`（依赖关系），这决定了全局拓扑图的形态。
-
-*   **增量维护 (日常开发)**:
-    *   `update_project`: 当只修改个别字段（如新增 API 端点、更新技术栈列表）时使用。不要每次都全量覆盖。
-    *   `rename_project`: 如果项目 ID 需要变更，**必须**使用此工具，系统会自动更新所有依赖该项目的 Manifest 引用，保持拓扑完整性。
-
-*   **素材上传**:
-    *   `upload_project_asset`: 将 UI 稿、架构图等转为 Base64 上传。
-
-### 3. 全局知识库 (Global Knowledge)
-除了项目私有文档，我们维护一套跨项目的通用知识库：
-- `list_global_docs`: 查找现有的通用规范（如“Coding Standards”, “Deployment Flow”）。
-- `read_global_doc`: 读取具体内容。
-- `sync_global_doc`: 创建或更新全局文档。适用于提炼通用的最佳实践。
-
-### 4. 即时同步 (Communication)
-- `post_global_discussion`：任何跨项目的冲突或依赖，必须在全局频道通报。
-- `update_global_strategy`：在达成共识后，更新最高层级的战略蓝图 (`Master Plan`)。
-
-### 5. 会议管理 (Meeting Management) 🆕
-当需要结构化的跨 Agent 讨论时，使用会议功能：
-
-*   **发起会议**:
-    *   `start_meeting(topic)`: 创建独立的会议文件，返回 `meetingId`。所有后续消息将自动路由到此会议。
-
-*   **参与讨论**:
-    *   `post_global_discussion`: 消息会自动关联到当前活跃会议（无需手动指定 `meetingId`）。
-
-*   **结束会议**:
-    *   `end_meeting(meetingId?, summary?)`: 锁定会议，禁止后续写入。返回 `suggestedSyncTargets`（基于参与者推断的项目列表）。
-
-*   **查阅历史**:
-    *   `list_meetings(status?)`: 查看 `active`、`closed` 或 `archived` 状态的会议列表。
-    *   **快速查阅**：直接读取 `mcp://nexus/active-meeting` 资源，获取当前默认活跃会议的完整 transcript。
-    *   `read_meeting(meetingId)`: 读取指定会议内容，包括 `messages` 和 `decisions`。
-
-*   **归档**:
-    *   `archive_meeting(meetingId)`: 将已关闭的会议归档，仅供只读查阅。
-
-### 6. 视角切换 (Discovery)
-- 读取 `mcp://hub/registry`：了解公司目前有哪些其他项目。
-- 调用 `get_global_topology`：可视化项目间的依赖关系，避免重复造轮子。
-- 调用 `read_project`：查阅其他项目的 API 定义 (`include: "api"`) 或技术文档 (`include: "docs"`)，以便对接。
+# Nexus 助手协作指令 (v0.2.0)
+
+你现在是 **n2ns Nexus** 协作网络的一员。该系统集成了实时通信、结构化资产管理以及 **异步任务流 (Task Primitives)**，所有操作均落地在本地文件系统。
+
+## 🚦 核心原则：资源读取，工具写入
+为了优化 Token 消耗，Nexus 将**只读信息**暴露为资源 (Resources)，将**执行操作**保留为工具 (Tools)。
+
+### 1. 状态发现 (Reading via Resources)
+在任何任务开始前，你**必须**了解环境状态。直接读取对应的 URI 即可，无需消耗工具调用额度：
+- **查看身份**：`mcp://nexus/session`（你的 ID 和活跃项目）。
+- **系统状态**：`mcp://nexus/status`（版本、存储模式、活跃会议数）。
+- **项目目录**：`mcp://nexus/hub/registry`（公司目前有哪些其他项目）。
+- **会议目录**：`mcp://nexus/meetings/list`（哪些会议正在进行或已结束）。
+- **任务列表**：`mcp://nexus/tasks/list` (TODO: 资源映射中) 或使用 `list_tasks`。
+- **全局文档列表**：`mcp://nexus/docs/list`（有哪些通用规范）。
+
+### 2. 深度查阅 (Deep Reading)
+- **查阅项目**: `mcp://nexus/projects/{id}/manifest` (API 定义/技术栈) 或 `mcp://nexus/projects/{id}/internal-docs` (详细实现文档)。
+- **查阅文档**: `mcp://nexus/docs/{id}`。
+- **查阅会议**: `mcp://nexus/active-meeting` (当前活跃会议全案) 或 `mcp://nexus/meetings/{id}` (指定会议)。
+- **查阅讨论**: `mcp://nexus/chat/global` (全局实时消息流)。
+
+### 3. 项目管理 (Writing via Tools)
+当你需要**改变**状态时，调用工具：
+- **声明位置**: `register_session_context(projectId)`。解锁项目写权限。
+- **资产同步**: `sync_project_assets`。
+- **项目维护**: `update_project` 或 `rename_project` (自动处理所有依赖引用)。
+- **素材上传**: `upload_project_asset` (架构图转 Base64)。
+
+### 4. 异步任务流 (Tasks - Phase 2)
+对于耗时较长或可能超时的操作（如大规模同步、重构），你**必须**使用任务原语：
+- **创建任务**: `create_task(source_meeting_id?, metadata?)`。返回 `taskId`。
+- **状态轮询**: `get_task(taskId)`。通过 `progress` (0.0-1.0) 了解任务进度。
+- **任务列表**: `list_tasks(status?)`。
+- **取消任务**: `cancel_task(taskId)`。
+
+### 5. 即时沟通 (Collaboration via Tools)
+- **发送消息**: `send_message(message, category?)`。
+- **获取上下文**: `read_messages`。虽然已有资源，但当你需要带参数（如 `count`）获取特定数量的历史记录时，此工具更合适。
+- **更新战略**: `update_global_strategy`（修改全球蓝图）。
+- **文档维护**: `sync_global_doc` (创建/更新通用知识库)。
+
+### 6. 战术会议 (Tactical Meetings)
+1. **发起**: `start_meeting(topic)`。
+2. **参与**: 发送 category 为 `DECISION` 的消息作为共识。
+3. **结束**: `end_meeting(summary?)`。锁定历史。
+4. **归档**: `archive_meeting(meetingId)`。
+
+---
 
 ## 🛡️ 角色说明
-- **Regular**: 拥有注册、同步资产、讨论和更新各类文档的完整权限。
-- **Moderator**: 额外拥有清理历史记录（`moderator_maintenance`）及物理删除项目资产（`moderator_delete_project`）的权限。启动时需添加 `--moderator` 参数。
+- **Regular**: 拥有注册、同步、讨论和维护文档的完整权限。
+- **Moderator**: 额外拥有清理记录（`moderator_maintenance`）及物理删除（`moderator_delete_project`）的权限。
 
 ## ❌ 退出机制
-本系统不依赖 GitHub，你的所有 `sync` 操作都是对本地磁盘的原子写入。请确保在同步时提供清晰的 `internalDocs`。
+本系统是对本地磁盘的原子写入。请确保同步时提供清晰的 `internalDocs`，以便其他 Assistant 能够无缝接手。

package/docs/CHANGELOG.md

@@ -2,6 +2,35 @@
 
 All notable changes to this project will be documented in this file.
 
+## [v0.2.0] - 2025-12-31
+
+### 🚀 Task Primitive System (Phase 2 & 3)
+- **Async Deepening**: Critical blocking operations (`rename_project`, `moderator_delete_project`) migrated to the Task primitive with background cascading updates.
+- **Traceability**: All tasks now support `source_meeting_id` to link execution back to meeting decisions.
+- **Progressive UI**: Added `progress` tracking (0.0-1.0) and `result_uri` for structured task output.
+- **Lifecycle Tools**: Added `create_task`, `get_task`, `list_tasks`, `update_task`, and `cancel_task`.
+
+### 🛡️ Type Safety & Security
+- **Defense-in-Depth**: Implemented secondary permission gates inside `handleRemoveProject` and `handleModeratorMaintenance` for maximum project isolation.
+- **Meeting Hardening**: `end_meeting` and `archive_meeting` are now strictly **Moderator-only**.
+- **Zod integration**: All tool definitions migrated to strictly-typed Zod schemas with regex path-traversal protection.
+- **Infrastructure**: Modernized toolchain to **TypeScript 5.9.3**, **Vitest 4.0.16**, and **ESLint 9.39.2**.
+
+### ✂️ Code Diet (Architectural Cleanliness)
+- **The Great Purge**: Removed 6 redundant tools (`list_projects`, `read_project`, `list_global_docs`, `read_global_doc`, `list_meetings`, `read_meeting`) in favor of Resource URIs.
+- **Native Zod 4 Schemas**: Removed `zod-to-json-schema` dependency; now using native Zod 4 `toJSONSchema()` generation.
+
+## [v0.1.9] - 2025-12-30
+
+### 🛡️ Collaboration & Security
+- **Initiator-only Permissions**: Implemented restricted access for `end_meeting` and `archive_meeting`.
+- **Session Presence Awareness**: Automated `[ONLINE/OFFLINE]` status messages in global logs.
+- **Clean Tool Naming**: Finalized transition to `send_message` and `read_messages`.
+
+### 🌐 Resource Namespacing (MCP 2025 Standard)
+- **Unified Authority**: All core resource URIs migrated to `mcp://nexus/`.
+- **New Resources**: Added `mcp://nexus/status` and `mcp://nexus/active-meeting`.
+
 ## [v0.1.8] - 2025-12-30
 
 ### 🎯 Meeting Architecture (Phase 1 & 2)

package/docs/CHANGELOG_zh.md

@@ -2,6 +2,35 @@
 
 本项目的所有重要变更都将记录在此文件中。
 
+## [v0.2.0] - 2025-12-31
+
+### 🚀 任务原语系统 (Phase 2 & 3)
+- **深度异步化**: 关键阻塞操作（项目更名 `rename_project`、资产删除 `moderator_delete_project`）已迁移至异步 Task 模式，支持级联背景更新。
+- **执行溯源**: 所有任务均支持 `source_meeting_id` 字段，可直接追溯至最初的会议决策。
+- **进度追踪**: 增加了 `progress` (0.0-1.0) 进度播报机制及结构化结果 URI (`result_uri`)。
+- **生命周期工具**: 新增 `create_task`, `get_task`, `list_tasks`, `update_task` 与 `cancel_task`。
+
+### 🛡️ 安全加固与类型化
+- **深度防御 (Defense-in-Depth)**: 在 `handleRemoveProject` 和 `handleModeratorMaintenance` 内部实现了二次权限校验，提升系统隔离安全性。
+- **会议管理权限**: `end_meeting` 与 `archive_meeting` 现在严格限制为 **Moderator 专属**。
+- **Zod 校验引擎**: 全量迁移工具定义至 Zod 架构，支持正则校验和路径穿透防护。
+- **工具链现代化**: 升级至 **TypeScript 5.9.3**, **Vitest 4.0.16** 与 **ESLint 9.39.2**。
+
+### ✂️ 架构清理 (Code Diet)
+- **工具大清洗**: 删除了 6 个冗余读取工具（`read_project` 等），全面转向 **Resource-First** (MCP 资源优先) 模式。
+- **原生 Zod 4 支持**: 彻底移除了 `zod-to-json-schema` 依赖，采用 Zod 4 原生的 `toJSONSchema()` 生成逻辑。
+
+## [v0.1.9] - 2025-12-30
+
+### 🛡️ 协同与权限强化
+- **会议权限控制**: 实现了 **Initiator-only** 停机策略。只有会议发起者或系统管理员 (Moderator) 才能执行 `end_meeting` 和 `archive_meeting`。
+- **自动在线感知**: 实现了会话生命周期日志。AI 实例启动及关闭（IDE 关闭）时会自动发送 `[ONLINE/OFFLINE]` 状态报文，提升多 Agent 协作透明度。
+- **语义名统一**: 完成了工具命名的零别名集成。全面转向 `send_message` 和 `read_messages` 以获得更好的语义理解。
+
+### 🌐 资源命名空间隔离 (MCP 2025)
+- **统一 Authority**: 所有 MCP 资源 URI 已迁移至 `mcp://nexus/` 权威标识符下，防止与其他 MCP Server 发生命名冲突。
+- **状态资源**: 暴露了 `mcp://nexus/status` 和 `mcp://nexus/active-meeting` (当前活跃会议实录) 资源。
+
 ## [v0.1.8] - 2025-12-30
 
 ### 🎯 会议架构 (Phase 1 & 2)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@datafrog-io/n2n-nexus",
-    "version": "0.1.8",
+    "version": "0.2.0",
     "description": "Unified Project Asset & Collaboration Hub (MCP Server) designed for AI agent coordination, featuring structured metadata, real-time messaging, and dependency topology.",
     "main": "build/index.js",
     "type": "module",
@@ -46,15 +46,16 @@
     },
     "dependencies": {
         "@modelcontextprotocol/sdk": "1.25.1",
-        "better-sqlite3": "^12.5.0"
+        "better-sqlite3": "^12.5.0",
+        "zod": "^4.3.2"
     },
     "devDependencies": {
-        "@eslint/js": "^9.16.0",
+        "@eslint/js": "^9.39.2",
         "@types/better-sqlite3": "^7.6.13",
-        "@types/node": "^22.0.0",
-        "eslint": "^9.16.0",
-        "typescript": "^5.7.2",
-        "typescript-eslint": "^8.18.0",
-        "vitest": "^2.1.8"
+        "@types/node": "^25.0.3",
+        "eslint": "^9.39.2",
+        "typescript": "^5.9.3",
+        "typescript-eslint": "^8.51.0",
+        "vitest": "^4.0.16"
     }
-}
+}