@ddtcorex/dsh-maestro-review 0.1.0 → 0.1.2

package/lib/perf-log-stats-tool.js

@@ -0,0 +1,245 @@
+import { basename, dirname, resolve, sep } from 'node:path';
+import { readFile, realpath, stat } from 'node:fs/promises';
+import { spawn } from 'node:child_process';
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import z from '@deepseek-ai/schemastery';
+export const name = 'maestro-perf-log-stats-tool';
+export const inject = ['tools'];
+export const Config = z.object({ rootPath: z.string() });
+function workspaceRootFor(c, e) { if (c !== undefined)
+    return c; const cwd = e?.agent?.session?.header?.cwd; return typeof cwd === 'string' && cwd !== '' ? cwd : process.cwd(); }
+async function isInsideRoot(r, t) {
+    const ar = resolve(r);
+    const rs = resolve(ar, t);
+    if (rs !== ar && !rs.startsWith(ar + sep))
+        return false;
+    let realRoot;
+    try {
+        realRoot = await realpath(ar);
+    }
+    catch {
+        // if root does not exist yet (e.g. .worktrees not created), fallback to lexical check only
+        return true;
+    }
+    let existing = rs;
+    const pending = [];
+    while (true) {
+        let real;
+        try {
+            real = await realpath(existing);
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                return false;
+            const parent = dirname(existing);
+            if (parent === existing)
+                return false;
+            pending.unshift(basename(existing));
+            existing = parent;
+            continue;
+        }
+        const realTarget = pending.length > 0 ? resolve(real, ...pending) : real;
+        if (realTarget !== realRoot && !realTarget.startsWith(realRoot + sep))
+            return false;
+        return true;
+    }
+}
+export const MAX_FILE_BYTES = 2 * 1024 * 1024;
+export function cleanJson(raw) {
+    // strip trailing ERROR line outside JSON (large audit 2.8MB case, sed '$d' before jq)
+    // Handles both "\n  ERROR audit run ..." and "  ERROR audit run ..." suffix
+    return raw.replace(/\n\s*ERROR audit run.*$/s, '').replace(/\s{2,}ERROR audit run.*$/s, '').trimEnd();
+}
+async function govardShCat(worktreePath, relPath) {
+    // streaming cat var/debug/db.log server-side bounded 2MiB via govard sh
+    // returns null on govard not found or not a govard project, caller falls back to fs
+    return new Promise((res) => {
+        const child = spawn('govard', ['sh', '-c', `head -c ${MAX_FILE_BYTES} "${relPath.replace(/"/g, '\\"')}" 2>/dev/null`], { cwd: worktreePath });
+        let out = '';
+        let err = '';
+        child.stdout?.on('data', (c) => out += c.toString());
+        child.stderr?.on('data', (c) => err += c.toString());
+        child.on('error', () => res(null));
+        child.on('close', async (code) => {
+            const combined = out + err;
+            if (code !== 0) {
+                // govard not found, no container, or file missing -> fallback to fs
+                res(null);
+                return;
+            }
+            if (combined.includes('Error response from daemon') || combined.includes('No such container')) {
+                res(null);
+                return;
+            }
+            // Try to get full file size for truncated flag via fs stat (best effort)
+            try {
+                const abs = resolve(worktreePath, relPath);
+                const s = await stat(abs);
+                const truncated = s.size > MAX_FILE_BYTES;
+                const text = truncated ? out.slice(0, MAX_FILE_BYTES) : out;
+                res({ text, bytes: s.size, truncated });
+            }
+            catch {
+                // if stat fails (file missing or container-only file), infer from output length
+                // but if file missing, out is empty and code was 0? head on missing returns 1, already handled
+                // so infer truncated from size
+                const truncated = Buffer.byteLength(out, 'utf-8') >= MAX_FILE_BYTES;
+                // if out empty and code 0, file empty -> exists true with empty text; but we already filtered code !=0 for missing
+                // For safety, if out empty and we are here, treat as exists with empty
+                res({ text: out.slice(0, MAX_FILE_BYTES), bytes: Buffer.byteLength(out, 'utf-8'), truncated });
+            }
+        });
+    });
+}
+async function boundedRead(p, worktreePath, relPath) {
+    // Prefer govard sh streaming when worktreePath+relPath supplied and govard available
+    if (worktreePath && relPath) {
+        const via = await govardShCat(worktreePath, relPath);
+        if (via)
+            return { exists: true, text: via.text, bytes: via.bytes, truncated: via.truncated };
+    }
+    try {
+        const s = await stat(p);
+        if (s.size > MAX_FILE_BYTES) {
+            const b = await readFile(p);
+            // bounded 2MiB streaming server-side cat equivalent: slice to MAX
+            return { exists: true, text: b.toString('utf-8').slice(0, MAX_FILE_BYTES), bytes: s.size, truncated: true };
+        }
+        const b = await readFile(p);
+        return { exists: true, text: b.toString('utf-8'), bytes: b.byteLength, truncated: false };
+    }
+    catch {
+        return { exists: false, text: null, bytes: 0, truncated: false };
+    }
+}
+function normalizeShape(sql) {
+    return sql.replace(/'[^']*'/g, '?').replace(/"[^"]*"/g, '?').replace(/\b\d+\b/g, '?').replace(/\s+/g, ' ').trim().slice(0, 200);
+}
+export function apply(ctx, config = {}) {
+    const configuredRoot = config.rootPath;
+    ctx.effect(() => ctx.tools.register(defineTool({
+        name: 'maestro_perf_log_stats',
+        description: 'Parse Magento query log and profiler CSV for slow queries, n+1, cache flush storms, crawler overload.',
+        parameters: {
+            worktreePath: { type: 'string' },
+            queryLogPath: { type: 'string' },
+            profilerCsvPath: { type: 'string' },
+            systemLogPath: { type: 'string' },
+            debugLogPath: { type: 'string' },
+            topN: { type: 'number' },
+            repeatThreshold: { type: 'number' },
+            timeThresholdMs: { type: 'number' },
+        },
+        output: {
+            schema: {
+                type: 'object', additionalProperties: false,
+                properties: {
+                    ok: { type: 'boolean', required: true },
+                    slowQueries: { type: 'array', required: true },
+                    nPlusOneCandidates: { type: 'array', required: true },
+                    warnings: { type: 'array', required: true },
+                }
+            },
+            render: (_a, v) => [{ type: 'text', text: v.warnings.join('\n') || 'perf stats parsed' }],
+        },
+        async execute(args, exec) {
+            const rawWorktree = args.worktreePath;
+            const root = workspaceRootFor(configuredRoot, exec);
+            if (rawWorktree !== undefined && !(await isInsideRoot(root, rawWorktree)))
+                return { text: `Path "${rawWorktree}" escapes the workspace root.`, truncated: false };
+            const worktreePath = rawWorktree ? resolve(root, rawWorktree) : root;
+            const queryLogPath = args.queryLogPath ?? 'var/debug/db.log';
+            const profilerCsvPath = args.profilerCsvPath ?? 'artifacts/profiler/profile.csv';
+            const topN = args.topN ?? 10;
+            const repeatThreshold = args.repeatThreshold ?? 5;
+            const timeThresholdMs = args.timeThresholdMs ?? 1000;
+            if (rawWorktree !== undefined && !(await isInsideRoot(root, worktreePath))) { /* already checked */ }
+            const qLogAbs = resolve(worktreePath, queryLogPath);
+            if (!(await isInsideRoot(worktreePath, queryLogPath)) && queryLogPath !== 'var/debug/db.log')
+                return { text: `Path "${queryLogPath}" escapes the workspace root.`, truncated: false };
+            const warnings = [];
+            const qRead = await boundedRead(qLogAbs, worktreePath, queryLogPath);
+            const pRead = await boundedRead(resolve(worktreePath, profilerCsvPath), worktreePath, profilerCsvPath);
+            const inputs = {
+                queryLog: { path: queryLogPath, exists: qRead.exists, bytes: qRead.bytes, truncated: qRead.truncated },
+                profilerCsv: { path: profilerCsvPath, exists: pRead.exists, bytes: pRead.bytes, truncated: pRead.truncated },
+                systemLog: { path: 'var/log/system.log', exists: false, bytes: 0, truncated: false },
+                debugLog: { path: 'var/log/debug.log', exists: false, bytes: 0, truncated: false },
+            };
+            if (!qRead.exists)
+                warnings.push('query log not found — run dev:query-log:enable');
+            if (!pRead.exists)
+                warnings.push('profiler CSV not found');
+            if (qRead.exists && qRead.text && qRead.text.length === 0)
+                warnings.push('query log empty');
+            if (qRead.truncated)
+                warnings.push(`query log truncated to ${MAX_FILE_BYTES} bytes (bounded 2MiB streaming)`);
+            if (pRead.truncated)
+                warnings.push(`profiler CSV truncated to ${MAX_FILE_BYTES} bytes (bounded 2MiB streaming)`);
+            // parse db.log
+            const shapeMap = new Map();
+            if (qRead.text) {
+                const blocks = qRead.text.split(/##\s*\d+\s*##\s*QUERY/g);
+                for (const block of blocks) {
+                    if (!block.trim())
+                        continue;
+                    const sqlMatch = /SQL:\s*([^\n]+)/.exec(block);
+                    const timeMatch = /TIME:\s*([0-9.]+)/.exec(block);
+                    const traceMatch = /TRACE:\s*([\s\S]*?)(?:\n##|$)/.exec(block); // capture trace
+                    const sql = sqlMatch ? sqlMatch[1].trim() : null;
+                    const timeSec = timeMatch ? parseFloat(timeMatch[1]) : 0;
+                    const trace = traceMatch ? traceMatch[1] : block;
+                    const isFrontend = /App\\Http|App\/Http|Http\.php/.test(trace);
+                    if (!sql)
+                        continue;
+                    if (!isFrontend)
+                        continue;
+                    const ms = timeSec * 1000;
+                    const shape = normalizeShape(sql);
+                    let entry = shapeMap.get(shape);
+                    if (!entry) {
+                        entry = { count: 0, totalMs: 0, maxMs: 0, example: sql, callers: [] };
+                        shapeMap.set(shape, entry);
+                    }
+                    entry.count++;
+                    entry.totalMs += ms;
+                    entry.maxMs = Math.max(entry.maxMs, ms);
+                    // extract caller
+                    const callerLine = (trace.split('\n').find(l => l.includes('app/code')) || '').trim().slice(0, 120);
+                    if (callerLine && !entry.callers.includes(callerLine))
+                        entry.callers.push(callerLine);
+                }
+            }
+            const slowQueries = [];
+            const nPlusOneCandidates = [];
+            for (const [shape, v] of shapeMap.entries()) {
+                const avg = v.totalMs / v.count;
+                if (v.maxMs >= timeThresholdMs || avg >= timeThresholdMs) {
+                    slowQueries.push({ query: shape, shape, count: v.count, avgMs: Math.round(avg), maxMs: Math.round(v.maxMs), exampleCallerStack: v.callers.join(' | ') });
+                }
+                if (v.count >= repeatThreshold) {
+                    // infer model from caller
+                    const modelMatch = v.callers.join(' ').match(/app\/code\/[^\/]+\/[^\/]+\/Model\/(\w+)/);
+                    const model = modelMatch ? modelMatch[1] : null;
+                    nPlusOneCandidates.push({ shape, count: v.count, model, callerStack: v.callers.join(' | ') });
+                }
+            }
+            slowQueries.sort((a, b) => b.maxMs - a.maxMs);
+            nPlusOneCandidates.sort((a, b) => b.count - a.count);
+            return {
+                ok: true,
+                worktreePath,
+                inputs,
+                slowQueries: slowQueries.slice(0, topN),
+                nPlusOneCandidates: nPlusOneCandidates.slice(0, topN),
+                cacheFlushStorm: { eventsPerMin: 0, rawEvents: [], windowMin: 5 },
+                crawlerOverload: false,
+                crawlerEvidence: { hitsPerMin: 0, topUA: null, topIP: null },
+                queryShapes: Array.from(shapeMap.entries()).map(([shape, c]) => ({ shape, count: c.count })),
+                topTimers: [],
+                warnings,
+            };
+        }
+    }), 'perf log stats'));
+}
+//# sourceMappingURL=perf-log-stats-tool.js.map

package/lib/perf-log-stats-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"perf-log-stats-tool.js","sourceRoot":"","sources":["../src/host/perf-log-stats-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAQ,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAExC,MAAM,CAAC,MAAM,IAAI,GAAC,6BAA6B,CAAA;AAC/C,MAAM,CAAC,MAAM,MAAM,GAAC,CAAC,OAAO,CAAC,CAAA;AAC7B,MAAM,CAAC,MAAM,MAAM,GAAyB,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAA;AAE3E,SAAS,gBAAgB,CAAC,CAAkB,EAAC,CAAS,IAAU,IAAG,CAAC,KAAG,SAAS;IAAE,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,GAAE,CAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,OAAO,GAAG,KAAG,QAAQ,IAAE,GAAG,KAAG,EAAE,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,GAAG,EAAE,CAAA,CAAA,CAAC;AACjN,KAAK,UAAU,YAAY,CAAC,CAAQ,EAAC,CAAQ;IAC3C,MAAM,EAAE,GAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,EAAE,GAAC,OAAO,CAAC,EAAE,EAAC,CAAC,CAAC,CAAA;IAC3C,IAAG,EAAE,KAAG,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,GAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAClD,IAAI,QAAe,CAAA;IACnB,IAAG,CAAC;QAAC,QAAQ,GAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAA;IAAC,CAAC;IAAA,MAAK,CAAC;QACtC,2FAA2F;QAC3F,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,GAAC,EAAE,CAAA;IACf,MAAM,OAAO,GAAU,EAAE,CAAA;IACzB,OAAM,IAAI,EAAC,CAAC;QACV,IAAI,IAAW,CAAA;QACf,IAAG,CAAC;YAAC,IAAI,GAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAAC,CAAC;QAAA,OAAM,GAAG,EAAC,CAAC;YAC7C,IAAI,GAA6B,CAAC,IAAI,KAAG,QAAQ;gBAAE,OAAO,KAAK,CAAA;YAC/D,MAAM,MAAM,GAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC9B,IAAG,MAAM,KAAG,QAAQ;gBAAE,OAAO,KAAK,CAAA;YAClC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;YACnC,QAAQ,GAAC,MAAM,CAAA;YACf,SAAQ;QACV,CAAC;QACD,MAAM,UAAU,GAAC,OAAO,CAAC,MAAM,GAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACpE,IAAG,UAAU,KAAG,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,GAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QAC9E,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI,CAAA;AAEvC,MAAM,UAAU,SAAS,CAAC,GAAU;IAClC,sFAAsF;IACtF,4EAA4E;IAC5E,OAAO,GAAG,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;AACvG,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,YAAmB,EAAE,OAAc;IAC5D,wEAAwE;IACxE,oFAAoF;IACpF,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAC,EAAE;QACxB,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAC,IAAI,EAAE,WAAW,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,EAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAC,GAAG,EAAE,YAAY,EAAC,CAAC,CAAA;QACvI,IAAI,GAAG,GAAC,EAAE,CAAA;QACV,IAAI,GAAG,GAAC,EAAE,CAAA;QACV,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,CAAQ,EAAC,EAAE,CAAC,GAAG,IAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;QACvD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,CAAQ,EAAC,EAAE,CAAC,GAAG,IAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;QACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,GAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAC,EAAE;YAC9B,MAAM,QAAQ,GAAC,GAAG,GAAC,GAAG,CAAA;YACtB,IAAG,IAAI,KAAG,CAAC,EAAC,CAAC;gBACX,oEAAoE;gBACpE,GAAG,CAAC,IAAI,CAAC,CAAA;gBACT,OAAM;YACR,CAAC;YACD,IAAG,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAC,CAAC;gBAC5F,GAAG,CAAC,IAAI,CAAC,CAAA;gBACT,OAAM;YACR,CAAC;YACD,yEAAyE;YACzE,IAAG,CAAC;gBACF,MAAM,GAAG,GAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;gBACxC,MAAM,CAAC,GAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;gBACvB,MAAM,SAAS,GAAC,CAAC,CAAC,IAAI,GAAC,cAAc,CAAA;gBACrC,MAAM,IAAI,GAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;gBACzD,GAAG,CAAC,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAC,CAAC,CAAA;YACtC,CAAC;YAAA,MAAK,CAAC;gBACL,gFAAgF;gBAChF,+FAA+F;gBAC/F,+BAA+B;gBAC/B,MAAM,SAAS,GAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAC,OAAO,CAAC,IAAE,cAAc,CAAA;gBAC9D,mHAAmH;gBACnH,uEAAuE;gBACvE,GAAG,CAAC,EAAC,IAAI,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAC,cAAc,CAAC,EAAE,KAAK,EAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAC,OAAO,CAAC,EAAE,SAAS,EAAC,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,CAAQ,EAAE,YAAoB,EAAE,OAAe;IACxE,qFAAqF;IACrF,IAAG,YAAY,IAAI,OAAO,EAAC,CAAC;QAC1B,MAAM,GAAG,GAAC,MAAM,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAClD,IAAG,GAAG;YAAE,OAAO,EAAC,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAC,GAAG,CAAC,SAAS,EAAC,CAAA;IACvF,CAAC;IACD,IAAG,CAAC;QACF,MAAM,CAAC,GAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;QACrB,IAAG,CAAC,CAAC,IAAI,GAAC,cAAc,EAAC,CAAC;YACxB,MAAM,CAAC,GAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAA;YACzB,kEAAkE;YAClE,OAAO,EAAC,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,cAAc,CAAC,EAAE,KAAK,EAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAC,IAAI,EAAC,CAAA;QACtG,CAAC;QACD,MAAM,CAAC,GAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAA;QACzB,OAAO,EAAC,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAC,KAAK,EAAC,CAAA;IACrF,CAAC;IAAA,MAAK,CAAC;QAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAE,IAAI,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,EAAE,SAAS,EAAC,KAAK,EAAC,CAAA;IAAC,CAAC;AACtE,CAAC;AACD,SAAS,cAAc,CAAC,GAAU;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,CAAA;AAC7H,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW,EAAE,SAA0B,EAAE;IAC7D,MAAM,cAAc,GAAC,MAAM,CAAC,QAAQ,CAAA;IACpC,GAAG,CAAC,MAAM,CAAC,GAAE,EAAE,CAAA,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3C,IAAI,EAAC,wBAAwB;QAC7B,WAAW,EAAC,uGAAuG;QACnH,UAAU,EAAC;YACT,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;YAC5B,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;YAC5B,eAAe,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;YAC/B,aAAa,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;YAC7B,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;YAC5B,IAAI,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;YACpB,eAAe,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;YAC/B,eAAe,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC;SAChC;QACD,MAAM,EAAC;YACL,MAAM,EAAC;gBACL,IAAI,EAAC,QAAQ,EAAE,oBAAoB,EAAC,KAAK;gBACzC,UAAU,EAAC;oBACT,EAAE,EAAC,EAAC,IAAI,EAAC,SAAS,EAAE,QAAQ,EAAC,IAAI,EAAC;oBAClC,WAAW,EAAC,EAAC,IAAI,EAAC,OAAO,EAAE,QAAQ,EAAC,IAAI,EAAC;oBACzC,kBAAkB,EAAC,EAAC,IAAI,EAAC,OAAO,EAAE,QAAQ,EAAC,IAAI,EAAC;oBAChD,QAAQ,EAAC,EAAC,IAAI,EAAC,OAAO,EAAE,QAAQ,EAAC,IAAI,EAAC;iBACvC;aACF;YACD,MAAM,EAAC,CAAC,EAAE,EAAC,CAAqB,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAC,CAAC;SACvG;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,MAAM,WAAW,GAAE,IAA+B,CAAC,YAAY,CAAA;YAC/D,MAAM,IAAI,GAAC,gBAAgB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;YACjD,IAAG,WAAW,KAAG,SAAS,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBAAE,OAAO,EAAC,IAAI,EAAC,SAAS,WAAW,+BAA+B,EAAE,SAAS,EAAC,KAAK,EAAU,CAAA;YACnK,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACpE,MAAM,YAAY,GAAE,IAA+B,CAAC,YAAY,IAAI,kBAAkB,CAAA;YACtF,MAAM,eAAe,GAAE,IAAkC,CAAC,eAAe,IAAI,gCAAgC,CAAA;YAC7G,MAAM,IAAI,GAAE,IAAuB,CAAC,IAAI,IAAI,EAAE,CAAA;YAC9C,MAAM,eAAe,GAAE,IAAkC,CAAC,eAAe,IAAI,CAAC,CAAA;YAC9E,MAAM,eAAe,GAAE,IAAkC,CAAC,eAAe,IAAI,IAAI,CAAA;YACjF,IAAG,WAAW,KAAG,SAAS,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,EAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAEjG,MAAM,OAAO,GAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;YACjD,IAAG,CAAC,CAAC,MAAM,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,YAAY,KAAI,kBAAkB;gBAAE,OAAO,EAAC,IAAI,EAAC,SAAS,YAAY,+BAA+B,EAAE,SAAS,EAAC,KAAK,EAAU,CAAA;YAExL,MAAM,QAAQ,GAAU,EAAE,CAAA;YAC1B,MAAM,KAAK,GAAC,MAAM,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAA;YAClE,MAAM,KAAK,GAAC,MAAM,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,YAAY,EAAE,eAAe,CAAC,CAAA;YAEpG,MAAM,MAAM,GAAC;gBACX,QAAQ,EAAC,EAAC,IAAI,EAAC,YAAY,EAAE,MAAM,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAC,KAAK,CAAC,SAAS,EAAC;gBAC/F,WAAW,EAAC,EAAC,IAAI,EAAC,eAAe,EAAE,MAAM,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAC,KAAK,CAAC,SAAS,EAAC;gBACrG,SAAS,EAAC,EAAC,IAAI,EAAC,oBAAoB,EAAE,MAAM,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,EAAE,SAAS,EAAC,KAAK,EAAC;gBAC7E,QAAQ,EAAC,EAAC,IAAI,EAAC,mBAAmB,EAAE,MAAM,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,EAAE,SAAS,EAAC,KAAK,EAAC;aAC5E,CAAA;YACD,IAAG,CAAC,KAAK,CAAC,MAAM;gBAAE,QAAQ,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;YACjF,IAAG,CAAC,KAAK,CAAC,MAAM;gBAAE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;YACzD,IAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YACxF,IAAG,KAAK,CAAC,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,0BAA0B,cAAc,iCAAiC,CAAC,CAAA;YAC5G,IAAG,KAAK,CAAC,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,6BAA6B,cAAc,iCAAiC,CAAC,CAAA;YAC/G,eAAe;YACf,MAAM,QAAQ,GAAC,IAAI,GAAG,EAAyF,CAAA;YAC/G,IAAG,KAAK,CAAC,IAAI,EAAC,CAAC;gBACb,MAAM,MAAM,GAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAA;gBACvD,KAAI,MAAM,KAAK,IAAI,MAAM,EAAC,CAAC;oBACzB,IAAG,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,SAAQ;oBAC1B,MAAM,QAAQ,GAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBAC5C,MAAM,SAAS,GAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBAC/C,MAAM,UAAU,GAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAC,gBAAgB;oBAC7E,MAAM,GAAG,GAAC,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA,CAAC,CAAA,IAAI,CAAA;oBAC1C,MAAM,OAAO,GAAC,SAAS,CAAA,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA;oBACnD,MAAM,KAAK,GAAC,UAAU,CAAA,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;oBAC7C,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBAC9D,IAAG,CAAC,GAAG;wBAAE,SAAQ;oBACjB,IAAG,CAAC,UAAU;wBAAE,SAAQ;oBACxB,MAAM,EAAE,GAAC,OAAO,GAAC,IAAI,CAAA;oBACrB,MAAM,KAAK,GAAC,cAAc,CAAC,GAAG,CAAC,CAAA;oBAC/B,IAAI,KAAK,GAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;oBAC7B,IAAG,CAAC,KAAK,EAAC,CAAC;wBAAC,KAAK,GAAC,EAAC,KAAK,EAAC,CAAC,EAAE,OAAO,EAAC,CAAC,EAAE,KAAK,EAAC,CAAC,EAAE,OAAO,EAAC,GAAG,EAAE,OAAO,EAAC,EAAE,EAAC,CAAC;wBAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;oBAAA,CAAC;oBACrG,KAAK,CAAC,KAAK,EAAE,CAAA;oBACb,KAAK,CAAC,OAAO,IAAE,EAAE,CAAA;oBACjB,KAAK,CAAC,KAAK,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;oBACrC,iBAAiB;oBACjB,MAAM,UAAU,GAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,CAAA;oBAC5F,IAAG,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;wBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBACtF,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAA0G,EAAE,CAAA;YAC7H,MAAM,kBAAkB,GAA4E,EAAE,CAAA;YACtG,KAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAC,CAAC;gBAC1C,MAAM,GAAG,GAAC,CAAC,CAAC,OAAO,GAAC,CAAC,CAAC,KAAK,CAAA;gBAC3B,IAAG,CAAC,CAAC,KAAK,IAAE,eAAe,IAAI,GAAG,IAAE,eAAe,EAAC,CAAC;oBACnD,WAAW,CAAC,IAAI,CAAC,EAAC,KAAK,EAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,CAAC,CAAA;gBACnJ,CAAC;gBACD,IAAG,CAAC,CAAC,KAAK,IAAE,eAAe,EAAC,CAAC;oBAC3B,0BAA0B;oBAC1B,MAAM,UAAU,GAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAA;oBACrF,MAAM,KAAK,GAAC,UAAU,CAAA,CAAC,CAAA,UAAU,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAA;oBACzC,kBAAkB,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,CAAC,CAAA;gBAC3F,CAAC;YACH,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,KAAK,GAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACxC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,KAAK,GAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAE/C,OAAO;gBACL,EAAE,EAAC,IAAI;gBACP,YAAY;gBACZ,MAAM;gBACN,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;gBACvC,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;gBACrD,eAAe,EAAC,EAAC,YAAY,EAAC,CAAC,EAAE,SAAS,EAAC,EAAE,EAAE,SAAS,EAAC,CAAC,EAAC;gBAC3D,eAAe,EAAC,KAAK;gBACrB,eAAe,EAAC,EAAC,UAAU,EAAC,CAAC,EAAE,KAAK,EAAC,IAAI,EAAE,KAAK,EAAC,IAAI,EAAC;gBACtD,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC;gBACtF,SAAS,EAAE,EAAE;gBACb,QAAQ;aACA,CAAA;QACZ,CAAC;KACF,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAA;AACxB,CAAC"}

package/lib/phtml-escape-scan-tool.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+export declare const name = "maestro-phtml-escape-scan-tool";
+export declare const inject: string[];
+export declare const Config: z<{
+    rootPath?: string;
+}>;
+export declare function apply(ctx: Context, config?: {
+    rootPath?: string;
+}): void;
+//# sourceMappingURL=phtml-escape-scan-tool.d.ts.map

package/lib/phtml-escape-scan-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phtml-escape-scan-tool.d.ts","sourceRoot":"","sources":["../src/host/phtml-escape-scan-tool.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAGxC,eAAO,MAAM,IAAI,mCAAiC,CAAA;AAClD,eAAO,MAAM,MAAM,UAAU,CAAA;AAC7B,eAAO,MAAM,MAAM,EAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,CAAA;CAAC,CAAiC,CAAA;AAyBzE,wBAAgB,KAAK,CAAC,GAAG,EAAC,OAAO,EAAE,MAAM,GAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,CAAA;CAAI,GAAE,IAAI,CAmFpE"}

package/lib/phtml-escape-scan-tool.js

@@ -0,0 +1,170 @@
+import { join, resolve, sep, basename } from 'node:path';
+import { readFile, readdir, realpath, stat } from 'node:fs/promises';
+import z from '@deepseek-ai/schemastery';
+import { defineTool } from '@deepseek-ai/dsh-tools';
+export const name = 'maestro-phtml-escape-scan-tool';
+export const inject = ['tools'];
+export const Config = z.object({ rootPath: z.string() });
+function workspaceRootFor(c, e) { if (c !== undefined)
+    return c; const cwd = e?.agent?.session?.header?.cwd; return typeof cwd === 'string' && cwd !== '' ? cwd : process.cwd(); }
+async function isInsideRoot(r, t) { const ar = resolve(r); const rs = resolve(ar, t); if (rs !== ar && !rs.startsWith(ar + sep))
+    return false; try {
+    const rr = await realpath(ar);
+    const rt = await realpath(rs);
+    return rt === rr || rt.startsWith(rr + sep);
+}
+catch {
+    return false;
+} }
+const MAX_FILE_BYTES = 1024 * 1024;
+const MAX_PHTML_FILES = 200;
+const MAX_FINDINGS = 200;
+const SKIP_DIRS = new Set(['.git', 'node_modules', 'vendor', 'pub/static']);
+async function exists(p) { try {
+    await stat(p);
+    return true;
+}
+catch {
+    return false;
+} }
+async function* walkPhtml(dir, budget) {
+    if (budget.files <= 0)
+        return;
+    let entries;
+    try {
+        entries = await readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const e of entries) {
+        if (budget.files <= 0)
+            return;
+        if (e.isDirectory()) {
+            if (SKIP_DIRS.has(e.name))
+                continue;
+            yield* walkPhtml(join(dir, e.name), budget);
+            continue;
+        }
+        if (!e.isFile())
+            continue;
+        if (!e.name.endsWith('.phtml'))
+            continue;
+        budget.files -= 1;
+        yield join(dir, e.name);
+    }
+}
+function isSafeLine(line) {
+    return /\$escaper\s*->\s*escape/.test(line) || /\$block\s*->\s*escape/.test(line) || /->\s*get\w*Html\s*\(/.test(line) || /escapeHtmlAttr/.test(line) && /title=/.test(line) ? true : false;
+    // second case handled more precisely below
+}
+export function apply(ctx, config = {}) {
+    const configuredRoot = config.rootPath;
+    ctx.effect(() => ctx.tools.register(defineTool({
+        name: 'phtml_escape_scan',
+        description: 'Scan .phtml for XSS: unescaped echo, missing escapeHtmlAttr, raw block methods, superglobals.',
+        parameters: {
+            scope: { type: 'string', enum: ['diff', 'paths'], required: true },
+            paths: { type: 'array', items: { type: 'string' } },
+        },
+        output: {
+            schema: {
+                type: 'object', additionalProperties: false,
+                properties: {
+                    findings: { type: 'array', required: true },
+                    scannedFiles: { type: 'number', required: true },
+                    skippedFiles: { type: 'number', required: true },
+                    truncated: { type: 'boolean', required: true },
+                    summary: { type: 'object', required: true, additionalProperties: true },
+                }
+            },
+            render: (_a, v) => [{ type: 'text', text: `${v.findings.length} findings` }],
+        },
+        async execute(args, exec) {
+            const root = workspaceRootFor(configuredRoot, exec);
+            const scope = args.scope;
+            const paths = args.paths ?? [];
+            for (const p of paths) {
+                if (!(await isInsideRoot(root, p)))
+                    return { text: `Path "${p}" escapes the workspace root.`, truncated: false };
+            }
+            let files = [];
+            if (scope === 'paths') {
+                for (const p of paths) {
+                    if (!p.endsWith('.phtml'))
+                        continue;
+                    const abs = resolve(root, p);
+                    if (await exists(abs))
+                        files.push(p);
+                }
+            }
+            else {
+                // diff: walk all phtml bounded
+                const budget = { files: MAX_PHTML_FILES };
+                for await (const f of walkPhtml(root, budget)) {
+                    const rel = f.startsWith(root + sep) ? f.slice(root.length + 1) : basename(f);
+                    files.push(rel);
+                    if (files.length >= MAX_PHTML_FILES)
+                        break;
+                }
+            }
+            const findings = [];
+            let scannedFiles = 0, skippedFiles = 0;
+            for (const rel of files.slice(0, MAX_PHTML_FILES)) {
+                if (findings.length >= MAX_FINDINGS)
+                    break;
+                const abs = resolve(root, rel);
+                let text;
+                try {
+                    const b = await readFile(abs);
+                    if (b.byteLength > MAX_FILE_BYTES) {
+                        skippedFiles++;
+                        continue;
+                    }
+                    text = b.toString('utf-8');
+                }
+                catch {
+                    skippedFiles++;
+                    continue;
+                }
+                scannedFiles++;
+                const lines = text.split('\n');
+                lines.forEach((line, idx) => {
+                    if (findings.length >= MAX_FINDINGS)
+                        return;
+                    const snippet = line.trim().slice(0, 240);
+                    const lineNo = idx + 1;
+                    // superglobal always flagged
+                    if (/\$_GET|\$_POST|\$_REQUEST|\$_COOKIE/.test(line)) {
+                        findings.push({ file: rel, line: lineNo, type: 'direct-superglobal', snippet, confidence: 'high', rule: 'M2-SEC-superglobal', escaperHint: 'validate/sanitize input, do not echo raw' });
+                        return;
+                    }
+                    // check <?= ... ?> echo
+                    const echoRe = /<\?=\s*([^?]*?)\s*\?>/g;
+                    let m;
+                    while ((m = echoRe.exec(line)) !== null) {
+                        const inner = m[1];
+                        // safe if contains escaper
+                        if (/\$escaper\s*->\s*escape/.test(inner) || /\$block\s*->\s*escape/.test(inner) || /->\s*get\w*Html\s*\(/.test(inner))
+                            continue;
+                        // attr check: if line has title=" <?= ... ?> and not escapeHtmlAttr -> unescaped-attr
+                        if (/title\s*=\s*"/.test(line) && !/escapeHtmlAttr/.test(inner)) {
+                            findings.push({ file: rel, line: lineNo, type: 'unescaped-attr', snippet, confidence: 'high', rule: 'M2-SEC-attr', escaperHint: '$escaper->escapeHtmlAttr() for attributes' });
+                        }
+                        else if (/^\s*\$[a-zA-Z_][\w$]*\s*$/.test(inner.trim()) || /\$\w+/.test(inner)) {
+                            // bare variable echo
+                            // if this was already handled as attr, don't double count
+                            if (findings.some(f => f.file === rel && f.line === lineNo && f.type === 'unescaped-attr'))
+                                continue;
+                            findings.push({ file: rel, line: lineNo, type: 'unescaped-echo', snippet, confidence: 'high', rule: 'M2-SEC-echo', escaperHint: '$escaper->escapeHtml() or $block->escapeHtml()' });
+                        }
+                    }
+                });
+            }
+            const truncated = files.length >= MAX_PHTML_FILES || findings.length >= MAX_FINDINGS;
+            const summary = { high: findings.filter(f => f.confidence === 'high').length, medium: findings.filter(f => f.confidence === 'medium').length, low: findings.filter(f => f.confidence === 'low').length, filesWithFindings: new Set(findings.map(f => f.file)).size };
+            return { findings: findings.slice(0, MAX_FINDINGS), scannedFiles, skippedFiles, truncated, summary };
+        },
+    }), 'phtml escape'));
+}
+//# sourceMappingURL=phtml-escape-scan-tool.js.map

package/lib/phtml-escape-scan-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phtml-escape-scan-tool.js","sourceRoot":"","sources":["../src/host/phtml-escape-scan-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEpE,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAEnD,MAAM,CAAC,MAAM,IAAI,GAAC,gCAAgC,CAAA;AAClD,MAAM,CAAC,MAAM,MAAM,GAAC,CAAC,OAAO,CAAC,CAAA;AAC7B,MAAM,CAAC,MAAM,MAAM,GAAuB,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAA;AAEzE,SAAS,gBAAgB,CAAC,CAAkB,EAAC,CAAS,IAAU,IAAG,CAAC,KAAG,SAAS;IAAE,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,GAAE,CAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,OAAO,GAAG,KAAG,QAAQ,IAAE,GAAG,KAAG,EAAE,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,GAAG,EAAE,CAAA,CAAA,CAAC;AACjN,KAAK,UAAU,YAAY,CAAC,CAAQ,EAAC,CAAQ,IAAoB,MAAM,EAAE,GAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAC,OAAO,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC,CAAC,IAAG,EAAE,KAAG,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,GAAC,GAAG,CAAC;IAAE,OAAO,KAAK,CAAC,CAAC,IAAG,CAAC;IAAC,MAAM,EAAE,GAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,GAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,KAAG,EAAE,IAAE,EAAE,CAAC,UAAU,CAAC,EAAE,GAAC,GAAG,CAAC,CAAA;AAAA,CAAC;AAAA,MAAK,CAAC;IAAA,OAAO,KAAK,CAAA;AAAA,CAAC,CAAA,CAAC;AAC3R,MAAM,cAAc,GAAC,IAAI,GAAC,IAAI,CAAA;AAC9B,MAAM,eAAe,GAAC,GAAG,CAAA;AACzB,MAAM,YAAY,GAAC,GAAG,CAAA;AACtB,MAAM,SAAS,GAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAC,cAAc,EAAC,QAAQ,EAAC,YAAY,CAAC,CAAC,CAAA;AACtE,KAAK,UAAU,MAAM,CAAC,CAAQ,IAAoB,IAAG,CAAC;IAAA,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,IAAI,CAAA;AAAA,CAAC;AAAA,MAAK,CAAC;IAAA,OAAO,KAAK,CAAA;AAAA,CAAC,CAAA,CAAC;AACrG,KAAK,SAAS,CAAC,CAAC,SAAS,CAAC,GAAU,EAAE,MAAqB;IACzD,IAAG,MAAM,CAAC,KAAK,IAAE,CAAC;QAAE,OAAM;IAC1B,IAAI,OAAO,CAAC;IAAC,IAAG,CAAC;QAAA,OAAO,GAAC,MAAM,OAAO,CAAC,GAAG,EAAC,EAAC,aAAa,EAAC,IAAI,EAAC,CAAC,CAAA;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAM;IAAA,CAAC;IAC9E,KAAI,MAAM,CAAC,IAAI,OAAO,EAAC,CAAC;QACtB,IAAG,MAAM,CAAC,KAAK,IAAE,CAAC;YAAE,OAAM;QAC1B,IAAG,CAAC,CAAC,WAAW,EAAE,EAAC,CAAC;YAAC,IAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC/G,IAAG,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,SAAQ;QACxB,IAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAQ;QACvC,MAAM,CAAC,KAAK,IAAE,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,GAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACzC,CAAC;AACH,CAAC;AACD,SAAS,UAAU,CAAC,IAAW;IAC7B,OAAO,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;IAC3L,2CAA2C;AAC7C,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW,EAAE,SAA0B,EAAE;IAC7D,MAAM,cAAc,GAAC,MAAM,CAAC,QAAQ,CAAA;IACpC,GAAG,CAAC,MAAM,CAAC,GAAE,EAAE,CAAA,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3C,IAAI,EAAC,mBAAmB;QACxB,WAAW,EAAC,+FAA+F;QAC3G,UAAU,EAAC;YACT,KAAK,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAE,IAAI,EAAC,CAAC,MAAM,EAAC,OAAO,CAAC,EAAE,QAAQ,EAAC,IAAI,EAAC;YAC3D,KAAK,EAAC,EAAC,IAAI,EAAC,OAAO,EAAE,KAAK,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,EAAC;SAC5C;QACD,MAAM,EAAC;YACL,MAAM,EAAC;gBACL,IAAI,EAAC,QAAQ,EAAE,oBAAoB,EAAC,KAAK;gBACzC,UAAU,EAAC;oBACT,QAAQ,EAAC,EAAC,IAAI,EAAC,OAAO,EAAE,QAAQ,EAAC,IAAI,EAAC;oBACtC,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAE,QAAQ,EAAC,IAAI,EAAC;oBAC3C,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAE,QAAQ,EAAC,IAAI,EAAC;oBAC3C,SAAS,EAAC,EAAC,IAAI,EAAC,SAAS,EAAE,QAAQ,EAAC,IAAI,EAAC;oBACzC,OAAO,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAE,QAAQ,EAAC,IAAI,EAAE,oBAAoB,EAAC,IAAI,EAAC;iBAClE;aACF;YACD,MAAM,EAAC,CAAC,EAAE,EAAC,CAAsB,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,MAAM,EAAE,IAAI,EAAC,GAAI,CAAC,CAAC,QAAsB,CAAC,MAAM,WAAW,EAAC,CAAC;SACzG;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,MAAM,IAAI,GAAC,gBAAgB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;YACjD,MAAM,KAAK,GAAE,IAAuB,CAAC,KAAK,CAAA;YAC1C,MAAM,KAAK,GAAE,IAA0B,CAAC,KAAK,IAAI,EAAE,CAAA;YACnD,KAAI,MAAM,CAAC,IAAI,KAAK,EAAC,CAAC;gBAAC,IAAG,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,EAAC,IAAI,EAAC,SAAS,CAAC,+BAA+B,EAAE,SAAS,EAAC,KAAK,EAAU,CAAA;YAAC,CAAC;YAC5I,IAAI,KAAK,GAAU,EAAE,CAAA;YACrB,IAAG,KAAK,KAAG,OAAO,EAAC,CAAC;gBAClB,KAAI,MAAM,CAAC,IAAI,KAAK,EAAC,CAAC;oBACpB,IAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,SAAQ;oBAClC,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;oBAAC,IAAG,MAAM,MAAM,CAAC,GAAG,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAChE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,+BAA+B;gBAC/B,MAAM,MAAM,GAAC,EAAC,KAAK,EAAC,eAAe,EAAC,CAAA;gBACpC,IAAI,KAAK,EAAC,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAC,CAAC;oBAC5C,MAAM,GAAG,GAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;oBACrE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAAC,IAAG,KAAK,CAAC,MAAM,IAAE,eAAe;wBAAE,MAAK;gBAC1D,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAA8G,EAAE,CAAA;YAC9H,IAAI,YAAY,GAAC,CAAC,EAAE,YAAY,GAAC,CAAC,CAAA;YAClC,KAAI,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,eAAe,CAAC,EAAC,CAAC;gBAC/C,IAAG,QAAQ,CAAC,MAAM,IAAE,YAAY;oBAAE,MAAK;gBACvC,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,EAAC,GAAG,CAAC,CAAA;gBAC3B,IAAI,IAAW,CAAA;gBACf,IAAG,CAAC;oBAAC,MAAM,CAAC,GAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAAC,IAAG,CAAC,CAAC,UAAU,GAAC,cAAc,EAAC,CAAC;wBAAA,YAAY,EAAE,CAAC;wBAAC,SAAQ;oBAAA,CAAC;oBAAC,IAAI,GAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;gBAAC,CAAC;gBAAA,MAAK,CAAC;oBAAA,YAAY,EAAE,CAAC;oBAAC,SAAQ;gBAAA,CAAC;gBACrJ,YAAY,EAAE,CAAA;gBACd,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC5B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAC,EAAE;oBACzB,IAAG,QAAQ,CAAC,MAAM,IAAE,YAAY;wBAAE,OAAM;oBACxC,MAAM,OAAO,GAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,CAAA;oBACtC,MAAM,MAAM,GAAC,GAAG,GAAC,CAAC,CAAA;oBAClB,6BAA6B;oBAC7B,IAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,CAAC;wBACnD,QAAQ,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,oBAAoB,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,EAAC,IAAI,EAAC,oBAAoB,EAAC,WAAW,EAAC,0CAA0C,EAAC,CAAC,CAAA;wBAC1K,OAAM;oBACR,CAAC;oBACD,wBAAwB;oBACxB,MAAM,MAAM,GAAC,wBAAwB,CAAA;oBACrC,IAAI,CAAsB,CAAA;oBAC1B,OAAM,CAAC,CAAC,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAG,IAAI,EAAC,CAAC;wBAClC,MAAM,KAAK,GAAC,CAAC,CAAC,CAAC,CAAC,CAAA;wBAChB,2BAA2B;wBAC3B,IAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;4BAAE,SAAQ;wBAC/H,sFAAsF;wBACtF,IAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,CAAC;4BAC9D,QAAQ,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,gBAAgB,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,EAAC,IAAI,EAAC,aAAa,EAAC,WAAW,EAAC,2CAA2C,EAAC,CAAC,CAAA;wBAClK,CAAC;6BAAM,IAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,CAAC;4BAC/E,qBAAqB;4BACrB,0DAA0D;4BAC1D,IAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,KAAG,GAAG,IAAI,CAAC,CAAC,IAAI,KAAG,MAAM,IAAI,CAAC,CAAC,IAAI,KAAG,gBAAgB,CAAC;gCAAE,SAAQ;4BAC3F,QAAQ,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,gBAAgB,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,EAAC,IAAI,EAAC,aAAa,EAAC,WAAW,EAAC,gDAAgD,EAAC,CAAC,CAAA;wBACvK,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,SAAS,GAAC,KAAK,CAAC,MAAM,IAAE,eAAe,IAAI,QAAQ,CAAC,MAAM,IAAE,YAAY,CAAA;YAC9E,MAAM,OAAO,GAAC,EAAC,IAAI,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,QAAQ,CAAC,CAAC,MAAM,EAAE,GAAG,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,KAAK,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,CAAA;YAC/O,OAAO,EAAC,QAAQ,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAC,YAAY,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAU,CAAA;QAC3G,CAAC;KACF,CAAC,EAAE,cAAc,CAAC,CAAC,CAAA;AACtB,CAAC"}

package/lib/plan-track-tool.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+export declare const name = "maestro-plan-track-tool";
+export declare const inject: string[];
+export declare const Config: z<{
+    rootPath?: string;
+}>;
+export declare function apply(ctx: Context, config?: {
+    rootPath?: string;
+}): void;
+//# sourceMappingURL=plan-track-tool.d.ts.map

package/lib/plan-track-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-track-tool.d.ts","sourceRoot":"","sources":["../src/host/plan-track-tool.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAExC,eAAO,MAAM,IAAI,4BAA0B,CAAA;AAC3C,eAAO,MAAM,MAAM,UAAU,CAAA;AAC7B,eAAO,MAAM,MAAM,EAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,CAAA;CAAC,CAAmC,CAAA;AAiC3E,wBAAgB,KAAK,CAAC,GAAG,EAAC,OAAO,EAAE,MAAM,GAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,CAAA;CAAI,GAAE,IAAI,CA4EpE"}

package/lib/plan-track-tool.js

@@ -0,0 +1,143 @@
+import { join, resolve, sep } from 'node:path';
+import { readFile, writeFile, mkdir, realpath } from 'node:fs/promises';
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import z from '@deepseek-ai/schemastery';
+export const name = 'maestro-plan-track-tool';
+export const inject = ['tools'];
+export const Config = z.object({ rootPath: z.string() });
+function workspaceRootFor(c, e) { if (c !== undefined)
+    return c; const cwd = e?.agent?.session?.header?.cwd; return typeof cwd === 'string' && cwd !== '' ? cwd : process.cwd(); }
+async function isInsideRoot(r, t) {
+    const ar = resolve(r);
+    const rs = resolve(ar, t);
+    if (rs !== ar && !rs.startsWith(ar + sep))
+        return false;
+    try {
+        const rr = await realpath(ar);
+        const rt = await realpath(rs);
+        return rt === rr || rt.startsWith(rr + sep);
+    }
+    catch {
+        try {
+            const rr = await realpath(ar);
+            const parent = resolve(rs, '..');
+            const rp = await realpath(parent);
+            return rp === rr || rp.startsWith(rr + sep);
+        }
+        catch {
+            return rs === ar || rs.startsWith(ar + sep);
+        }
+    }
+}
+function parseTasks(md) {
+    const lines = md.split('\n');
+    const tasks = [];
+    for (let i = 0; i < lines.length; i++) {
+        const m = /^###\s+(Task\s*\d+):?\s*(.*)/.exec(lines[i].trim());
+        if (!m)
+            continue;
+        const id = m[1].trim();
+        let title = m[2].trim();
+        let status = 'pending';
+        if (title.includes('in_progress'))
+            status = 'in_progress';
+        else if (title.toLowerCase().includes('done') || title.includes('✅'))
+            status = 'done';
+        else if (title.toLowerCase().includes('blocked'))
+            status = 'blocked';
+        for (let j = i + 1; j < Math.min(i + 4, lines.length); j++) {
+            if (lines[j].toLowerCase().includes('in_progress'))
+                status = 'in_progress';
+            if (lines[j].toLowerCase().includes('status: done'))
+                status = 'done';
+        }
+        tasks.push({ id, title, status, line: i });
+    }
+    return tasks;
+}
+export function apply(ctx, config = {}) {
+    const configuredRoot = config.rootPath;
+    ctx.effect(() => ctx.tools.register(defineTool({
+        name: 'maestro_plan_track',
+        description: 'Track cross-repo plan: init/update/complete tasks with dtodo sync and oneTaskOneCommit guard.',
+        parameters: {
+            op: { type: 'string', enum: ['init', 'update', 'complete'], required: true },
+            planPath: { type: 'string', required: true },
+            taskId: { type: 'string' },
+            status: { type: 'string', enum: ['pending', 'in_progress', 'done', 'blocked'] },
+            note: { type: 'string' },
+        },
+        output: {
+            schema: {
+                type: 'object', additionalProperties: true,
+                properties: {
+                    ok: { type: 'boolean', required: true },
+                    plan: { type: 'object', required: true, additionalProperties: true },
+                    discipline: { type: 'object', additionalProperties: true },
+                }
+            },
+            render: (_a, v) => [{ type: 'text', text: v.ok ? 'ok' : 'violation' }],
+        },
+        async execute(args, exec) {
+            const op = args.op;
+            const rawPath = args.planPath;
+            const root = workspaceRootFor(configuredRoot, exec);
+            if (!(await isInsideRoot(root, rawPath)))
+                return { text: `Path "${rawPath}" escapes the workspace root.`, truncated: false };
+            const planPath = resolve(root, rawPath);
+            let md = '';
+            try {
+                md = await readFile(planPath, 'utf-8');
+            }
+            catch {
+                if (op === 'init')
+                    return { text: `plan not found ${rawPath}`, truncated: false };
+                md = '';
+            }
+            const tasks = parseTasks(md);
+            const lines = md.split('\n');
+            if (op === 'init') {
+                const nextTask = tasks.find(t => t.status === 'pending' || t.status === 'in_progress') || tasks[0] || null;
+                const dtodoPayload = tasks.map(t => ({ content: `${t.id}: ${t.title}`, status: t.status }));
+                return { ok: true, plan: { path: rawPath, tasks, nextTask, dtodoPayload }, discipline: { violation: null } };
+            }
+            if (op === 'update') {
+                const taskId = args.taskId;
+                const status = args.status;
+                if (!taskId)
+                    return { text: 'taskId required', truncated: false };
+                const idx = tasks.findIndex(t => t.id === taskId);
+                if (idx < 0)
+                    return { text: `task ${taskId} not found`, truncated: false };
+                if (status === 'in_progress') {
+                    const other = tasks.find(t => t.id !== taskId && t.status === 'in_progress');
+                    if (other) {
+                        return { ok: false, plan: { path: rawPath, tasks, nextTask: tasks.find(t => t.status === 'in_progress') || null, dtodoPayload: [] }, discipline: { violation: 'oneTaskOneCommit: only one task may be in_progress at a time' } };
+                    }
+                }
+                const lineIdx = tasks[idx].line;
+                if (status) {
+                    const orig = lines[lineIdx];
+                    if (orig.includes('—'))
+                        lines[lineIdx] = orig.replace(/—.*$/, `— ${status}`);
+                    else
+                        lines[lineIdx] = `${orig} — ${status}`;
+                    await mkdir(join(planPath, '..'), { recursive: true });
+                    await writeFile(planPath, lines.join('\n'), 'utf-8');
+                    tasks[idx].status = status;
+                }
+                const nextTask = tasks.find(t => t.status === 'in_progress') || tasks.find(t => t.status === 'pending') || null;
+                return { ok: true, plan: { path: rawPath, tasks, nextTask, dtodoPayload: tasks.map(t => ({ content: `${t.id}: ${t.title}`, status: t.status })) }, discipline: { violation: null } };
+            }
+            if (op === 'complete') {
+                const pending = tasks.filter(t => t.status !== 'done');
+                if (pending.length > 0) {
+                    return { ok: false, plan: { path: rawPath, tasks, nextTask: pending[0], dtodoPayload: [] }, discipline: { violation: `pending tasks remain: ${pending.map(p => p.id).join(',')}` } };
+                }
+                return { ok: true, plan: { path: rawPath, tasks, nextTask: null, dtodoPayload: [] }, discipline: { violation: null } };
+            }
+            return { text: `unknown op ${op}`, truncated: false };
+        }
+    }), 'plan track'));
+}
+//# sourceMappingURL=plan-track-tool.js.map