@defai.digital/mcp-server 13.0.3

package/dist/tools/file-system.js

@@ -0,0 +1,513 @@
+/**
+ * File System MCP Tools
+ *
+ * Provides secure file and directory operations for scaffold tools.
+ * Implements security invariants from INV-FS-* series.
+ *
+ * @module mcp-server/tools/file-system
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { FileSystemErrorCode, validateFileWriteRequest, validateDirectoryCreateRequest, isPathSafe, } from '@defai.digital/contracts';
+// ============================================================================
+// Tool Definitions
+// ============================================================================
+/**
+ * File write tool definition
+ *
+ * Invariants:
+ * - INV-FS-001: No path traversal
+ * - INV-FS-002: No silent overwrites
+ * - INV-FS-003: Atomic writes
+ * - INV-FS-004: UTF-8 default
+ */
+export const fileWriteTool = {
+    name: 'file_write',
+    description: 'Write content to a file. Requires explicit overwrite flag for existing files. SIDE EFFECTS: Creates/modifies file on disk. Idempotent with same content.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            path: {
+                type: 'string',
+                description: 'File path relative to workspace root',
+            },
+            content: {
+                type: 'string',
+                description: 'File content to write',
+            },
+            createDirectories: {
+                type: 'boolean',
+                description: 'Create parent directories if they don\'t exist',
+                default: true,
+            },
+            overwrite: {
+                type: 'boolean',
+                description: 'Allow overwriting existing files',
+                default: false,
+            },
+            encoding: {
+                type: 'string',
+                enum: ['utf-8', 'ascii', 'base64', 'binary'],
+                description: 'File encoding',
+                default: 'utf-8',
+            },
+            backup: {
+                type: 'boolean',
+                description: 'Create backup before overwriting',
+                default: false,
+            },
+        },
+        required: ['path', 'content'],
+    },
+    idempotent: true, // Same content = same result
+    retryableErrors: ['WRITE_FAILED'],
+};
+/**
+ * Directory create tool definition
+ *
+ * Invariants:
+ * - INV-FS-001: No path traversal
+ * - INV-FS-102: Idempotent operation
+ */
+export const directoryCreateTool = {
+    name: 'directory_create',
+    description: 'Create a directory. SIDE EFFECTS: Creates directory on disk. Idempotent - existing directory returns success.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            path: {
+                type: 'string',
+                description: 'Directory path relative to workspace root',
+            },
+            recursive: {
+                type: 'boolean',
+                description: 'Create parent directories if they don\'t exist',
+                default: true,
+            },
+        },
+        required: ['path'],
+    },
+    idempotent: true,
+};
+/**
+ * File exists tool definition
+ *
+ * INV-MCP-004: Idempotent - read-only operation
+ */
+export const fileExistsTool = {
+    name: 'file_exists',
+    description: 'Check if a file or directory exists. Read-only, no side effects.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            path: {
+                type: 'string',
+                description: 'Path to check relative to workspace root',
+            },
+        },
+        required: ['path'],
+    },
+    idempotent: true,
+};
+// ============================================================================
+// Helper Functions
+// ============================================================================
+/**
+ * Get workspace root from context or use current working directory
+ */
+function getWorkspaceRoot() {
+    return process.cwd();
+}
+/**
+ * Validate and resolve a path within workspace
+ *
+ * INV-FS-001: Prevents path traversal
+ * INV-FS-006: Ensures path stays within workspace
+ */
+function resolveSafePath(filePath, workspaceRoot) {
+    // INV-FS-001: Check for path traversal in input
+    if (!isPathSafe(filePath)) {
+        return {
+            valid: false,
+            error: {
+                code: FileSystemErrorCode.PATH_TRAVERSAL,
+                message: 'Path contains invalid characters or traversal sequences',
+            },
+        };
+    }
+    // Resolve to absolute path
+    const resolved = path.resolve(workspaceRoot, filePath);
+    // INV-FS-006: Verify path is within workspace
+    const relative = path.relative(workspaceRoot, resolved);
+    if (relative.startsWith('..') || path.isAbsolute(relative)) {
+        return {
+            valid: false,
+            error: {
+                code: FileSystemErrorCode.OUTSIDE_WORKSPACE,
+                message: 'Path resolves outside workspace root',
+            },
+        };
+    }
+    // INV-FS-005: Check for symlinks
+    try {
+        // Check each path component for symlinks
+        let currentPath = workspaceRoot;
+        const parts = relative.split(path.sep);
+        for (const part of parts) {
+            currentPath = path.join(currentPath, part);
+            if (fs.existsSync(currentPath)) {
+                const stat = fs.lstatSync(currentPath);
+                if (stat.isSymbolicLink()) {
+                    return {
+                        valid: false,
+                        error: {
+                            code: FileSystemErrorCode.SYMLINK_NOT_ALLOWED,
+                            message: 'Symlinks are not allowed in path',
+                        },
+                    };
+                }
+            }
+        }
+    }
+    catch {
+        // Path component doesn't exist yet, which is fine
+    }
+    return { valid: true, resolved };
+}
+// ============================================================================
+// Tool Handlers
+// ============================================================================
+/**
+ * Handle file_write tool
+ *
+ * Invariants enforced:
+ * - INV-FS-001: Path traversal prevention
+ * - INV-FS-002: No silent overwrites
+ * - INV-FS-003: Atomic writes
+ * - INV-FS-005: No symlink following
+ * - INV-FS-006: Workspace boundary
+ */
+export const handleFileWrite = async (args) => {
+    const workspaceRoot = getWorkspaceRoot();
+    try {
+        // Validate input against schema
+        const request = validateFileWriteRequest(args);
+        // INV-FS-001, INV-FS-005, INV-FS-006: Validate and resolve path
+        const pathResult = resolveSafePath(request.path, workspaceRoot);
+        if (!pathResult.valid) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            success: false,
+                            path: request.path,
+                            bytesWritten: 0,
+                            created: false,
+                            overwritten: false,
+                            error: pathResult.error,
+                        }),
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const resolvedPath = pathResult.resolved;
+        const fileExists = fs.existsSync(resolvedPath);
+        // INV-FS-002: No silent overwrites
+        if (fileExists && !request.overwrite) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            success: false,
+                            path: request.path,
+                            bytesWritten: 0,
+                            created: false,
+                            overwritten: false,
+                            error: {
+                                code: FileSystemErrorCode.FILE_EXISTS,
+                                message: 'File exists. Set overwrite=true to replace.',
+                            },
+                        }),
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // INV-FS-101: Create parent directories if needed
+        if (request.createDirectories) {
+            const dir = path.dirname(resolvedPath);
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+        }
+        // Create backup if requested
+        let backupPath;
+        if (fileExists && request.backup) {
+            backupPath = `${resolvedPath}.backup.${Date.now()}`;
+            fs.copyFileSync(resolvedPath, backupPath);
+        }
+        // INV-FS-003: Atomic write (write to temp, then rename)
+        const tempPath = `${resolvedPath}.tmp.${Date.now()}.${process.pid}`;
+        try {
+            // Write to temp file
+            fs.writeFileSync(tempPath, request.content, {
+                encoding: request.encoding,
+            });
+            // Atomic rename
+            fs.renameSync(tempPath, resolvedPath);
+        }
+        catch (writeError) {
+            // Clean up temp file if it exists
+            try {
+                if (fs.existsSync(tempPath)) {
+                    fs.unlinkSync(tempPath);
+                }
+            }
+            catch {
+                // Ignore cleanup errors
+            }
+            throw writeError;
+        }
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        success: true,
+                        path: request.path,
+                        bytesWritten: Buffer.byteLength(request.content, request.encoding),
+                        created: !fileExists,
+                        overwritten: fileExists,
+                        ...(backupPath ? { backupPath: path.relative(workspaceRoot, backupPath) } : {}),
+                    }),
+                },
+            ],
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        success: false,
+                        path: typeof args.path === 'string' ? args.path : '',
+                        bytesWritten: 0,
+                        created: false,
+                        overwritten: false,
+                        error: {
+                            code: FileSystemErrorCode.WRITE_FAILED,
+                            message,
+                        },
+                    }),
+                },
+            ],
+            isError: true,
+        };
+    }
+};
+/**
+ * Handle directory_create tool
+ *
+ * Invariants enforced:
+ * - INV-FS-001: Path traversal prevention
+ * - INV-FS-005: No symlink following
+ * - INV-FS-006: Workspace boundary
+ * - INV-FS-102: Idempotent operation
+ */
+export const handleDirectoryCreate = async (args) => {
+    const workspaceRoot = getWorkspaceRoot();
+    try {
+        // Validate input against schema
+        const request = validateDirectoryCreateRequest(args);
+        // INV-FS-001, INV-FS-005, INV-FS-006: Validate and resolve path
+        const pathResult = resolveSafePath(request.path, workspaceRoot);
+        if (!pathResult.valid) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            success: false,
+                            path: request.path,
+                            created: false,
+                            existed: false,
+                            error: pathResult.error,
+                        }),
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const resolvedPath = pathResult.resolved;
+        const existed = fs.existsSync(resolvedPath);
+        // INV-FS-102: Idempotent - existing directory is success
+        if (existed) {
+            const stat = fs.statSync(resolvedPath);
+            if (!stat.isDirectory()) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: JSON.stringify({
+                                success: false,
+                                path: request.path,
+                                created: false,
+                                existed: true,
+                                error: {
+                                    code: FileSystemErrorCode.INVALID_PATH,
+                                    message: 'Path exists but is not a directory',
+                                },
+                            }),
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            success: true,
+                            path: request.path,
+                            created: false,
+                            existed: true,
+                        }),
+                    },
+                ],
+            };
+        }
+        // Create directory
+        fs.mkdirSync(resolvedPath, { recursive: request.recursive });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        success: true,
+                        path: request.path,
+                        created: true,
+                        existed: false,
+                    }),
+                },
+            ],
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        success: false,
+                        path: typeof args.path === 'string' ? args.path : '',
+                        created: false,
+                        existed: false,
+                        error: {
+                            code: FileSystemErrorCode.MKDIR_FAILED,
+                            message,
+                        },
+                    }),
+                },
+            ],
+            isError: true,
+        };
+    }
+};
+/**
+ * Handle file_exists tool
+ *
+ * Read-only operation - no side effects
+ */
+export const handleFileExists = async (args) => {
+    const workspaceRoot = getWorkspaceRoot();
+    try {
+        const filePath = args.path;
+        // Validate path
+        const pathResult = resolveSafePath(filePath, workspaceRoot);
+        if (!pathResult.valid) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            path: filePath,
+                            exists: false,
+                            error: pathResult.error,
+                        }),
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const resolvedPath = pathResult.resolved;
+        const exists = fs.existsSync(resolvedPath);
+        if (!exists) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            path: filePath,
+                            exists: false,
+                        }),
+                    },
+                ],
+            };
+        }
+        const stat = fs.statSync(resolvedPath);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        path: filePath,
+                        exists: true,
+                        isFile: stat.isFile(),
+                        isDirectory: stat.isDirectory(),
+                        size: stat.isFile() ? stat.size : undefined,
+                    }),
+                },
+            ],
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        path: typeof args.path === 'string' ? args.path : '',
+                        exists: false,
+                        error: {
+                            code: 'CHECK_FAILED',
+                            message,
+                        },
+                    }),
+                },
+            ],
+            isError: true,
+        };
+    }
+};
+// ============================================================================
+// Exports
+// ============================================================================
+export const FILE_SYSTEM_TOOLS = [
+    fileWriteTool,
+    directoryCreateTool,
+    fileExistsTool,
+];
+export const FILE_SYSTEM_HANDLERS = {
+    file_write: handleFileWrite,
+    directory_create: handleDirectoryCreate,
+    file_exists: handleFileExists,
+};
+//# sourceMappingURL=file-system.js.map

package/dist/tools/file-system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-system.js","sourceRoot":"","sources":["../../src/tools/file-system.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,8BAA8B,EAC9B,UAAU,GACX,MAAM,0BAA0B,CAAC;AAElC,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAY;IACpC,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,0JAA0J;IAC5J,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sCAAsC;aACpD;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uBAAuB;aACrC;YACD,iBAAiB,EAAE;gBACjB,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,gDAAgD;gBAC7D,OAAO,EAAE,IAAI;aACd;YACD,SAAS,EAAE;gBACT,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,kCAAkC;gBAC/C,OAAO,EAAE,KAAK;aACf;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBAC5C,WAAW,EAAE,eAAe;gBAC5B,OAAO,EAAE,OAAO;aACjB;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,kCAAkC;gBAC/C,OAAO,EAAE,KAAK;aACf;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;KAC9B;IACD,UAAU,EAAE,IAAI,EAAE,6BAA6B;IAC/C,eAAe,EAAE,CAAC,cAAc,CAAC;CAClC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAY;IAC1C,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACT,+GAA+G;IACjH,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,2CAA2C;aACzD;YACD,SAAS,EAAE;gBACT,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,gDAAgD;gBAC7D,OAAO,EAAE,IAAI;aACd;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;KACnB;IACD,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAY;IACrC,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,kEAAkE;IACpE,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0CAA0C;aACxD;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;KACnB;IACD,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,QAAgB,EAChB,aAAqB;IAErB,gDAAgD;IAChD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB,CAAC,cAAc;gBACxC,OAAO,EAAE,yDAAyD;aACnE;SACF,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAEvD,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB,CAAC,iBAAiB;gBAC3C,OAAO,EAAE,sCAAsC;aAChD;SACF,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC;QACH,yCAAyC;QACzC,IAAI,WAAW,GAAG,aAAa,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBACvC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC1B,OAAO;wBACL,KAAK,EAAE,KAAK;wBACZ,KAAK,EAAE;4BACL,IAAI,EAAE,mBAAmB,CAAC,mBAAmB;4BAC7C,OAAO,EAAE,kCAAkC;yBAC5C;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAgB,KAAK,EAAE,IAAI,EAAE,EAAE;IACzD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,IAAI,CAAC;QACH,gCAAgC;QAChC,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAE/C,gEAAgE;QAChE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,KAAK;4BACd,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,YAAY,EAAE,CAAC;4BACf,OAAO,EAAE,KAAK;4BACd,WAAW,EAAE,KAAK;4BAClB,KAAK,EAAE,UAAU,CAAC,KAAK;yBACxB,CAAC;qBACH;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;QACzC,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE/C,mCAAmC;QACnC,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,KAAK;4BACd,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,YAAY,EAAE,CAAC;4BACf,OAAO,EAAE,KAAK;4BACd,WAAW,EAAE,KAAK;4BAClB,KAAK,EAAE;gCACL,IAAI,EAAE,mBAAmB,CAAC,WAAW;gCACrC,OAAO,EAAE,6CAA6C;6BACvD;yBACF,CAAC;qBACH;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,UAA8B,CAAC;QACnC,IAAI,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjC,UAAU,GAAG,GAAG,YAAY,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpD,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;QAED,wDAAwD;QACxD,MAAM,QAAQ,GAAG,GAAG,YAAY,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAEpE,IAAI,CAAC;YACH,qBAAqB;YACrB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;gBAC1C,QAAQ,EAAE,OAAO,CAAC,QAA0B;aAC7C,CAAC,CAAC;YAEH,gBAAgB;YAChB,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,kCAAkC;YAClC,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YACD,MAAM,UAAU,CAAC;QACnB,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAA0B,CAAC;wBACpF,OAAO,EAAE,CAAC,UAAU;wBACpB,WAAW,EAAE,UAAU;wBACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChF,CAAC;iBACH;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;wBACpD,YAAY,EAAE,CAAC;wBACf,OAAO,EAAE,KAAK;wBACd,WAAW,EAAE,KAAK;wBAClB,KAAK,EAAE;4BACL,IAAI,EAAE,mBAAmB,CAAC,YAAY;4BACtC,OAAO;yBACR;qBACF,CAAC;iBACH;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgB,KAAK,EAAE,IAAI,EAAE,EAAE;IAC/D,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,IAAI,CAAC;QACH,gCAAgC;QAChC,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;QAErD,gEAAgE;QAChE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,KAAK;4BACd,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,OAAO,EAAE,KAAK;4BACd,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,UAAU,CAAC,KAAK;yBACxB,CAAC;qBACH;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;QACzC,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,yDAAyD;QACzD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,OAAO,EAAE,KAAK;gCACd,IAAI,EAAE,OAAO,CAAC,IAAI;gCAClB,OAAO,EAAE,KAAK;gCACd,OAAO,EAAE,IAAI;gCACb,KAAK,EAAE;oCACL,IAAI,EAAE,mBAAmB,CAAC,YAAY;oCACtC,OAAO,EAAE,oCAAoC;iCAC9C;6BACF,CAAC;yBACH;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,IAAI;4BACb,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,OAAO,EAAE,KAAK;4BACd,OAAO,EAAE,IAAI;yBACd,CAAC;qBACH;iBACF;aACF,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAE7D,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,KAAK;qBACf,CAAC;iBACH;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;wBACpD,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,mBAAmB,CAAC,YAAY;4BACtC,OAAO;yBACR;qBACF,CAAC;iBACH;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAgB,KAAK,EAAE,IAAI,EAAE,EAAE;IAC1D,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAc,CAAC;QAErC,gBAAgB;QAChB,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,IAAI,EAAE,QAAQ;4BACd,MAAM,EAAE,KAAK;4BACb,KAAK,EAAE,UAAU,CAAC,KAAK;yBACxB,CAAC;qBACH;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;QACzC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,IAAI,EAAE,QAAQ;4BACd,MAAM,EAAE,KAAK;yBACd,CAAC;qBACH;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;wBACrB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;wBAC/B,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC5C,CAAC;iBACH;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;wBACpD,MAAM,EAAE,KAAK;wBACb,KAAK,EAAE;4BACL,IAAI,EAAE,cAAc;4BACpB,OAAO;yBACR;qBACF,CAAC;iBACH;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,aAAa;IACb,mBAAmB;IACnB,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAC/D,UAAU,EAAE,eAAe;IAC3B,gBAAgB,EAAE,qBAAqB;IACvC,WAAW,EAAE,gBAAgB;CAC9B,CAAC"}

package/dist/tools/guard.d.ts

@@ -0,0 +1,29 @@
+import type { MCPTool, ToolHandler } from '../types.js';
+/**
+ * Guard check tool definition
+ */
+export declare const guardCheckTool: MCPTool;
+/**
+ * Guard list tool definition
+ */
+export declare const guardListTool: MCPTool;
+/**
+ * Guard apply tool definition
+ */
+export declare const guardApplyTool: MCPTool;
+/**
+ * Handler for guard_check tool
+ */
+export declare const handleGuardCheck: ToolHandler;
+/**
+ * Handler for guard_list tool
+ */
+export declare const handleGuardList: ToolHandler;
+/**
+ * Handler for guard_apply tool
+ *
+ * Applies a governance policy to a session, enabling policy-based
+ * validation of agent actions within that session.
+ */
+export declare const handleGuardApply: ToolHandler;
+//# sourceMappingURL=guard.d.ts.map

package/dist/tools/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/tools/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwBxD;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,OAuD5B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,OAmC3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,OA4B5B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAoC9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,WAyD7B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAyE9B,CAAC"}