@dewtech/dare-cli 3.4.0 → 3.6.0

package/dist/hooks/telemetry.js

@@ -0,0 +1,66 @@
+import pino from 'pino';
+const logger = pino({ level: process.env.DARE_HOOKS_LOG_LEVEL ?? 'info' });
+function hookNodeId(event, action, triggeredAt) {
+    return `concept:hook:${event}:${action}:${triggeredAt}`;
+}
+function eventNodeId(event) {
+    return `concept:event:${event}`;
+}
+function verdictNodeId(verdict) {
+    return `concept:verdict:${verdict}`;
+}
+export function recordHookTrigger(graph, record) {
+    const hookId = hookNodeId(record.event, record.action, record.triggeredAt);
+    const eventId = eventNodeId(record.event);
+    graph.addNode({
+        id: hookId,
+        type: 'concept',
+        label: `hook:${record.event}:${record.action}`,
+        metadata: {
+            kind: 'hook',
+            event: record.event,
+            action: record.action,
+            verdict: record.verdict,
+            exitCode: record.exitCode,
+            skipped: record.skipped,
+            triggeredAt: record.triggeredAt,
+        },
+    });
+    graph.addNode({
+        id: eventId,
+        type: 'concept',
+        label: record.event,
+        metadata: { kind: 'hook_event', event: record.event },
+    });
+    graph.addEdge({
+        id: `references:${hookId}->${eventId}`,
+        sourceId: hookId,
+        targetId: eventId,
+        type: 'references',
+        metadata: { relation: 'triggered_by' },
+    });
+    if (record.verdict) {
+        const verdictId = verdictNodeId(record.verdict);
+        graph.addNode({
+            id: verdictId,
+            type: 'concept',
+            label: record.verdict,
+            metadata: { kind: 'hook_verdict', verdict: record.verdict },
+        });
+        graph.addEdge({
+            id: `related_to:${hookId}->${verdictId}`,
+            sourceId: hookId,
+            targetId: verdictId,
+            type: 'related_to',
+            metadata: { relation: 'produced' },
+        });
+    }
+    logger.info({
+        event: record.event,
+        action: record.action,
+        exitCode: record.exitCode,
+        skipped: record.skipped,
+        verdict: record.verdict,
+    }, 'hook telemetry recorded');
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/hooks/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/hooks/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,EAAE,CAAC,CAAC;AAW3E,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,WAAmB;IACpE,OAAO,gBAAgB,KAAK,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,iBAAiB,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB;IAC7C,OAAO,mBAAmB,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAqB,EAAE,MAA2B;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE1C,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,QAAQ,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;QAC9C,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;KACtD,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,cAAc,MAAM,KAAK,OAAO,EAAE;QACtC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;KACvC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,CAAC,OAAO,CAAC;YACZ,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;SAC5D,CAAC,CAAC;QACH,KAAK,CAAC,OAAO,CAAC;YACZ,EAAE,EAAE,cAAc,MAAM,KAAK,SAAS,EAAE;YACxC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAI,CACT;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,EACD,yBAAyB,CAC1B,CAAC;AACJ,CAAC"}

package/dist/hooks/types.d.ts

@@ -0,0 +1,36 @@
+import type { AllowedActionKey } from './allowlist.js';
+/** Conjunto FECHADO de eventos na v1 (A-2 / RF-02). Eventos fora disto são rejeitados. */
+export type HookEvent = 'on-save' | 'on-file-create' | 'on-task-complete' | 'pre-commit';
+export declare const HOOK_EVENTS: readonly HookEvent[];
+/** Ação resolvida — sempre um item da allowlist canônica (RS-01). Nunca string de shell. */
+export interface HookAction {
+    readonly action: AllowedActionKey;
+    /** Args adicionais; concatenados como argv, NUNCA interpolados em shell (RS-02). */
+    readonly args?: readonly string[];
+}
+export interface HookConfig {
+    /** Eventos → lista de ações. Ausente ⇒ zero hooks (RNF-03 / opt-in). */
+    readonly on: Partial<Record<HookEvent, readonly HookAction[]>>;
+    /**
+     * Confiança explícita (RS-05). false (default) ⇒ hooks NÃO auto-executam;
+     * `dare hooks run` falha com TRUST_REQUIRED até trusted:true ou --trust.
+     */
+    readonly trusted: boolean;
+}
+/** Payload passado ao dispatcher por evento. Validado antes do spawn. */
+export interface HookEventPayload {
+    readonly event: HookEvent;
+    /** Arquivo relativo (on-save/on-file-create); validado com assertRelativeSafe. */
+    readonly file?: string;
+    /** Task id (on-task-complete); valida contra /^task-[0-9a-z-]+$/. */
+    readonly taskId?: string;
+}
+export interface HookResult {
+    readonly event: HookEvent;
+    readonly action: AllowedActionKey;
+    readonly exitCode: number;
+    readonly skipped: boolean;
+    readonly verdict?: 'pass' | 'fail';
+    readonly durationMs: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/hooks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,gBAAgB,GAChB,kBAAkB,GAClB,YAAY,CAAC;AAEjB,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAKlC,CAAC;AAEX,4FAA4F;AAC5F,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,oFAAoF;IACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,UAAU;IACzB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B"}

package/dist/hooks/types.js

@@ -0,0 +1,7 @@
+export const HOOK_EVENTS = [
+    'on-save',
+    'on-file-create',
+    'on-task-complete',
+    'pre-commit',
+];
+//# sourceMappingURL=types.js.map

package/dist/hooks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,SAAS;IACT,gBAAgB;IAChB,kBAAkB;IAClB,YAAY;CACJ,CAAC"}

package/dist/index.d.ts

@@ -15,6 +15,8 @@ export { designCommand } from './commands/design.js';
 export { blueprintCommand } from './commands/blueprint.js';
 export { executeCommand } from './commands/execute.js';
 export { graphCommand } from './commands/graph.js';
+export { steeringCommand } from './commands/steering.js';
+export { hooksCommand } from './commands/hooks.js';
 export { dagCommand, renderDagMermaid, renderDagDot } from './commands/dag.js';
 export { validateCommand } from './commands/validate.js';
 export { infoCommand } from './commands/info.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,QAAQ,EACR,aAAa,EACb,eAAe,EACf,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,GAAG,EACH,OAAO,EACP,SAAS,EACT,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,UAAU,IAAI,aAAa,EAC3B,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxF,YAAY,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,QAAQ,EACR,aAAa,EACb,eAAe,EACf,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,GAAG,EACH,OAAO,EACP,SAAS,EACT,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,UAAU,IAAI,aAAa,EAC3B,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxF,YAAY,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -16,6 +16,8 @@ export { designCommand } from './commands/design.js';
 export { blueprintCommand } from './commands/blueprint.js';
 export { executeCommand } from './commands/execute.js';
 export { graphCommand } from './commands/graph.js';
+export { steeringCommand } from './commands/steering.js';
+export { hooksCommand } from './commands/hooks.js';
 export { dagCommand, renderDagMermaid, renderDagDot } from './commands/dag.js';
 export { validateCommand } from './commands/validate.js';
 export { infoCommand } from './commands/info.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,WAAW;AACX,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAQpC,6BAA6B;AAC7B,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAYjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE9E,qBAAqB;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGxE,yBAAyB;AACzB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkBxF,aAAa;AACb,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,WAAW;AACX,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAQpC,6BAA6B;AAC7B,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAYjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE9E,qBAAqB;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGxE,yBAAyB;AACzB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkBxF,aAAa;AACb,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/mcp-server/__tests__/mcp-graph.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp-graph.test.d.ts.map

package/dist/mcp-server/__tests__/mcp-graph.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-graph.test.d.ts","sourceRoot":"","sources":["../../../src/mcp-server/__tests__/mcp-graph.test.ts"],"names":[],"mappings":""}

package/dist/mcp-server/__tests__/mcp-graph.test.js

@@ -0,0 +1,85 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import fs from 'fs-extra';
+import os from 'node:os';
+import path from 'node:path';
+import request from 'supertest';
+import { createMcpServer } from '../server.js';
+import { buildGraphFromFixture, loadFixture } from '../../__tests__/graphrag/fixtures/dual-graph/build-fixture-graph.js';
+import { JsonGraph } from '../../graphrag/json-graph.js';
+describe('MCP graph tools', () => {
+    let projectRoot;
+    beforeEach(async () => {
+        projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'mcp-graph-'));
+        await fs.ensureDir(path.join(projectRoot, 'DARE'));
+        await fs.writeJson(path.join(projectRoot, 'dare.config.json'), { name: 'mcp-graph-test' });
+        await fs.writeFile(path.join(projectRoot, 'dare-graph.yml'), 'backend: json\njson:\n  path: .dare/graph.json\n');
+        const graphPath = path.join(projectRoot, '.dare', 'graph.json');
+        const graph = new JsonGraph(graphPath);
+        await graph.init();
+        buildGraphFromFixture(graph, loadFixture('impact-chain'));
+        graph.close();
+    });
+    afterEach(async () => {
+        await fs.remove(projectRoot).catch(() => undefined);
+    });
+    function app() {
+        return createMcpServer(projectRoot, { allowLoopbackWithoutToken: true });
+    }
+    it('lists graph tools in GET /tools', async () => {
+        const res = await request(app()).get('/tools');
+        const names = res.body.tools.map((t) => t.name);
+        expect(names).toContain('graph_locate');
+        expect(names).toContain('graph_map_requirement');
+        expect(names).toContain('graph_traverse');
+    });
+    it('POST /graph/locate returns candidates', async () => {
+        const res = await request(app())
+            .post('/graph/locate')
+            .send({ seed: 'math', hops: 3, limit: 5 });
+        expect(res.status).toBe(200);
+        expect(res.body.success).toBe(true);
+        expect(res.body.candidates.length).toBeGreaterThan(0);
+    });
+    it('POST /graph/locate rejects missing seed', async () => {
+        const res = await request(app()).post('/graph/locate').send({});
+        expect(res.status).toBe(400);
+        expect(res.body.error).toBe('seed is required');
+    });
+    it('POST /graph/locate rejects path escape', async () => {
+        const res = await request(app()).post('/graph/locate').send({ seed: '../etc/passwd' });
+        expect(res.status).toBe(403);
+    });
+    it('POST /graph/map-requirement maps RF-03', async () => {
+        const res = await request(app()).post('/graph/map-requirement').send({ reqId: 'RF-03' });
+        expect(res.status).toBe(200);
+        expect(res.body.success).toBe(true);
+        expect(res.body.symbols).toContain('src/math.ts::add');
+        expect(res.body.tasks).toContain('task-201');
+    });
+    it('POST /graph/map-requirement rejects invalid reqId', async () => {
+        const res = await request(app()).post('/graph/map-requirement').send({ reqId: 'BAD' });
+        expect(res.status).toBe(400);
+        expect(res.body.error).toBe('invalid reqId');
+    });
+    it('POST /graph/traverse returns nodes and edges', async () => {
+        const res = await request(app()).post('/graph/traverse').send({
+            seedNodeIds: ['requirement:RF-03'],
+            maxHops: 3,
+            edgeTypes: ['depends_on', 'implements', 'affects'],
+        });
+        expect(res.status).toBe(200);
+        expect(res.body.success).toBe(true);
+        expect(res.body.nodes.length).toBeGreaterThan(0);
+    });
+    it('POST /graph/traverse requires seedNodeIds', async () => {
+        const res = await request(app()).post('/graph/traverse').send({});
+        expect(res.status).toBe(400);
+        expect(res.body.error).toBe('seedNodeIds is required');
+    });
+    it('deterministic locate responses', async () => {
+        const a = await request(app()).post('/graph/locate').send({ seed: 'math' });
+        const b = await request(app()).post('/graph/locate').send({ seed: 'math' });
+        expect(a.body).toEqual(b.body);
+    });
+});
+//# sourceMappingURL=mcp-graph.test.js.map

package/dist/mcp-server/__tests__/mcp-graph.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-graph.test.js","sourceRoot":"","sources":["../../../src/mcp-server/__tests__/mcp-graph.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,qEAAqE,CAAC;AACzH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3F,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EACxC,kDAAkD,CACnD,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,GAAG;QACV,OAAO,eAAe,CAAC,WAAW,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,CAAC,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;aAC7B,IAAI,CAAC,eAAe,CAAC;aACrB,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC;YAC5D,WAAW,EAAE,CAAC,mBAAmB,CAAC;YAClC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp-server/__tests__/mcp-steering.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp-steering.test.d.ts.map

package/dist/mcp-server/__tests__/mcp-steering.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-steering.test.d.ts","sourceRoot":"","sources":["../../../src/mcp-server/__tests__/mcp-steering.test.ts"],"names":[],"mappings":""}

package/dist/mcp-server/__tests__/mcp-steering.test.js

@@ -0,0 +1,90 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import express from 'express';
+import fs from 'fs-extra';
+import os from 'node:os';
+import path from 'node:path';
+import request from 'supertest';
+import { createMcpServer } from '../server.js';
+import { createAuthMiddleware } from '../middleware/auth.js';
+const TOKEN = 'steering-test-token';
+describe('MCP GET /steering', () => {
+    let projectRoot;
+    beforeEach(async () => {
+        projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'mcp-steering-'));
+        await fs.ensureDir(path.join(projectRoot, 'DARE'));
+        await fs.writeFile(path.join(projectRoot, 'DARE', 'PROJECT-DNA.md'), '# DNA\nBase steering.');
+        await fs.writeJson(path.join(projectRoot, 'dare.config.json'), { name: 'steering-mcp' });
+        const dir = path.join(projectRoot, '.dare', 'steering');
+        await fs.ensureDir(dir);
+        await fs.writeFile(path.join(dir, 'auth.md'), `---
+scope: glob
+glob: src/auth/**
+priority: 5
+---
+# Auth
+`);
+    });
+    afterEach(async () => {
+        await fs.remove(projectRoot).catch(() => undefined);
+    });
+    function app() {
+        return createMcpServer(projectRoot, {
+            authToken: TOKEN,
+            allowLoopbackWithoutToken: true,
+        });
+    }
+    it('lists get_steering in GET /tools', async () => {
+        const res = await request(app()).get('/tools');
+        const names = res.body.tools.map((t) => t.name);
+        expect(names).toContain('get_steering');
+    });
+    it('returns resolved blocks for matching file', async () => {
+        const res = await request(app())
+            .get('/steering')
+            .query({ file: 'src/auth/login.ts' });
+        expect(res.status).toBe(200);
+        expect(res.body.success).toBe(true);
+        expect(res.body.file).toBe('src/auth/login.ts');
+        expect(res.body.blocks[0]?.isBase).toBe(true);
+        expect(res.body.blocks.some((b) => b.source.includes('auth.md'))).toBe(true);
+    });
+    it('rejects missing file param', async () => {
+        const res = await request(app()).get('/steering');
+        expect(res.status).toBe(400);
+        expect(res.body.error).toBe('file is required');
+    });
+    it('rejects file param over 200 chars', async () => {
+        const res = await request(app())
+            .get('/steering')
+            .query({ file: 'a'.repeat(201) });
+        expect(res.status).toBe(400);
+        expect(res.body.error).toBe('file too long');
+    });
+    it('rejects path escape with 403', async () => {
+        const res = await request(app())
+            .get('/steering')
+            .query({ file: '../etc/passwd' });
+        expect(res.status).toBe(403);
+        expect(res.body.error).toBe('Forbidden');
+    });
+    it('regression: non-loopback without token is unauthorized', async () => {
+        const base = express();
+        base.set('trust proxy', true);
+        base.use((req, _res, next) => {
+            Object.defineProperty(req, 'ip', { value: '203.0.113.1', configurable: true });
+            Object.defineProperty(req.socket, 'remoteAddress', {
+                value: '203.0.113.1',
+                configurable: true,
+            });
+            next();
+        });
+        base.use(createAuthMiddleware({ token: TOKEN, allowLoopbackWithoutToken: true }));
+        base.use(createMcpServer(projectRoot, { authToken: TOKEN, allowLoopbackWithoutToken: true }));
+        const res = await request(base)
+            .get('/steering')
+            .query({ file: 'src/foo.ts' });
+        expect(res.status).toBe(401);
+        expect(res.body.error).toBe('Unauthorized');
+    });
+});
+//# sourceMappingURL=mcp-steering.test.js.map

package/dist/mcp-server/__tests__/mcp-steering.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-steering.test.js","sourceRoot":"","sources":["../../../src/mcp-server/__tests__/mcp-steering.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,KAAK,GAAG,qBAAqB,CAAC;AAEpC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAChD,uBAAuB,CACxB,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EACzB;;;;;;CAML,CACI,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,GAAG;QACV,OAAO,eAAe,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,KAAK;YAChB,yBAAyB,EAAE,IAAI;SAChC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,CAAC,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;aAC7B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CACxF,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;aAC7B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;aAC7B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;gBACjD,KAAK,EAAE,aAAa;gBACpB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE9F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;aAC5B,GAAG,CAAC,WAAW,CAAC;aAChB,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp-server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp-server/server.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,KAAK,OAAO,EAAkD,MAAM,SAAS,CAAC;AAchG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAqBD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AA4BD,wBAAgB,eAAe,CAC7B,WAAW,GAAE,MAAuD,EACpE,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAqQT"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp-server/server.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,KAAK,OAAO,EAAkD,MAAM,SAAS,CAAC;AAmBhG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAuBD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AA0DD,wBAAgB,eAAe,CAC7B,WAAW,GAAE,MAAuD,EACpE,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAgYT"}

package/dist/mcp-server/server.js

@@ -4,10 +4,13 @@ import express from 'express';
 import fs from 'fs-extra';
 import helmet from 'helmet';
 import pino from 'pino';
-import { PathEscapeError, resolveSafePath } from '../utils/path-safety.js';
+import { assertRelativeSafe, PathEscapeError, resolveSafePath } from '../utils/path-safety.js';
+import { createGraph, loadGraphConfig } from '../graphrag/index.js';
 import { createAuthMiddleware } from './middleware/auth.js';
 import { createCorsMiddleware } from './middleware/cors.js';
 import { createErrorHandler } from './middleware/error-handler.js';
+import { loadSteeringFiles } from '../steering/loader.js';
+import { resolveSteeringForFile } from '../steering/resolver.js';
 const require = createRequire(import.meta.url);
 const { version: pkgVersion } = require('../../package.json');
 const logger = pino({ transport: { target: 'pino-pretty' } });
@@ -27,6 +30,8 @@ const TASK_STATUSES = new Set([
     'SKIPPED',
 ]);
 const TASK_ID_RE = /^(task-[0-9]{3}|task-[0-9a-z-]+)$/;
+const GRAPH_REQ_ID_RE = /^(RF-\d+|O-\d+|task-[0-9a-z-]+)$/;
+const PATH_LIKE_SEED_RE = /^[\w./-]+$/;
 function dareFile(projectRoot, ...segments) {
     return resolveSafePath(projectRoot, 'DARE', ...segments);
 }
@@ -39,6 +44,35 @@ function isValidTaskId(taskId) {
 function sendPathEscape(res) {
     res.status(403).json({ error: 'Forbidden' });
 }
+async function withProjectGraph(projectRoot, fn) {
+    const config = await loadGraphConfig({ cwd: projectRoot });
+    const graph = await createGraph(config, { cwd: projectRoot });
+    try {
+        return await fn(graph);
+    }
+    finally {
+        await Promise.resolve(graph.close());
+    }
+}
+function validateGraphSeedPath(seed) {
+    if (!PATH_LIKE_SEED_RE.test(seed))
+        return;
+    if (!seed.includes('/') && !seed.includes('::'))
+        return;
+    const pathPart = seed.includes('::') ? seed.split('::')[0] : seed;
+    try {
+        assertRelativeSafe(pathPart);
+    }
+    catch {
+        throw new PathEscapeError();
+    }
+}
+function clampInt(value, min, max, fallback) {
+    const n = typeof value === 'number' ? value : typeof value === 'string' ? parseInt(value, 10) : NaN;
+    if (Number.isNaN(n))
+        return fallback;
+    return Math.min(max, Math.max(min, n));
+}
 function runSafe(res, next, fn) {
     fn().catch((err) => {
         if (err instanceof PathEscapeError) {
@@ -83,6 +117,10 @@ export function createMcpServer(projectRoot = process.env.DARE_PROJECT_PATH || p
                 { name: 'get_task_status', description: 'Get status of a specific task' },
                 { name: 'update_task_status', description: 'Update task status in TASKS.md' },
                 { name: 'get_project_context', description: 'Get dare.config.json' },
+                { name: 'graph_locate', description: 'Locate code symbols from a seed query' },
+                { name: 'graph_map_requirement', description: 'Map a requirement/task to symbols and tasks' },
+                { name: 'graph_traverse', description: 'Traverse the knowledge graph from seed nodes' },
+                { name: 'get_steering', description: 'Get resolved steering for a file' },
             ],
         });
     });
@@ -261,6 +299,76 @@ export function createMcpServer(projectRoot = process.env.DARE_PROJECT_PATH || p
             res.json({ success: true, id: taskId, status });
         });
     });
+    app.post('/graph/locate', (req, res, next) => {
+        runSafe(res, next, async () => {
+            const { seed, hops, limit } = req.body;
+            if (!seed || typeof seed !== 'string' || seed.trim() === '') {
+                res.status(400).json({ error: 'seed is required' });
+                return;
+            }
+            if (seed.length > 200) {
+                res.status(400).json({ error: 'seed too long' });
+                return;
+            }
+            validateGraphSeedPath(seed);
+            const h = clampInt(hops, 1, 5, 3);
+            const l = clampInt(limit, 1, 50, 10);
+            await withProjectGraph(projectRoot, async (graph) => {
+                const result = graph.locate(seed, { hops: h, limit: l });
+                res.json({ success: true, candidates: result.candidates });
+            });
+        });
+    });
+    app.post('/graph/map-requirement', (req, res, next) => {
+        runSafe(res, next, async () => {
+            const { reqId } = req.body;
+            if (!reqId || typeof reqId !== 'string' || !GRAPH_REQ_ID_RE.test(reqId)) {
+                res.status(400).json({ error: 'invalid reqId' });
+                return;
+            }
+            const seedId = reqId.startsWith('task-') ? `task:${reqId}` : `requirement:${reqId}`;
+            await withProjectGraph(projectRoot, async (graph) => {
+                if (!graph.getNode(seedId)) {
+                    res.status(404).json({ error: `requirement or task '${reqId}' not found` });
+                    return;
+                }
+                const walked = graph.traverse({
+                    seedNodeIds: [seedId],
+                    maxHops: 3,
+                    edgeTypes: ['derives_from', 'depends_on', 'implements'],
+                });
+                const symbols = walked.nodes
+                    .filter((n) => n.type === 'code_symbol')
+                    .map((n) => String(n.metadata?.qualifiedName ?? ''))
+                    .filter(Boolean)
+                    .sort();
+                const tasks = walked.nodes
+                    .filter((n) => n.type === 'task')
+                    .map((n) => (n.id.startsWith('task:') ? n.id.slice(5) : n.id))
+                    .sort();
+                res.json({ success: true, symbols, tasks });
+            });
+        });
+    });
+    app.post('/graph/traverse', (req, res, next) => {
+        runSafe(res, next, async () => {
+            const { seedNodeIds, maxHops, nodeTypes, edgeTypes } = req.body;
+            if (!Array.isArray(seedNodeIds) || seedNodeIds.length === 0) {
+                res.status(400).json({ error: 'seedNodeIds is required' });
+                return;
+            }
+            const hops = clampInt(maxHops, 1, 5, 3);
+            await withProjectGraph(projectRoot, async (graph) => {
+                const { nodes, edges } = graph.traverse({
+                    seedNodeIds,
+                    maxHops: hops,
+                    nodeTypes,
+                    edgeTypes,
+                });
+                res.json({ success: true, nodes, edges });
+            });
+        });
+    });
     app.get('/project', (req, res, next) => {
         runSafe(res, next, async () => {
             const configPath = projectConfigPath(projectRoot);
@@ -272,6 +380,33 @@ export function createMcpServer(projectRoot = process.env.DARE_PROJECT_PATH || p
             res.json(config);
         });
     });
+    app.get('/steering', (req, res, next) => {
+        runSafe(res, next, async () => {
+            const file = typeof req.query.file === 'string' ? req.query.file : '';
+            if (!file || file.trim() === '') {
+                res.status(400).json({ error: 'file is required' });
+                return;
+            }
+            if (file.length > 200) {
+                res.status(400).json({ error: 'file too long' });
+                return;
+            }
+            const files = loadSteeringFiles(projectRoot);
+            const resolution = resolveSteeringForFile(files, file);
+            res.json({
+                success: true,
+                file: resolution.file,
+                blocks: resolution.blocks.map((b) => ({
+                    source: b.path,
+                    scope: b.frontMatter.scope,
+                    priority: b.frontMatter.priority ?? 0,
+                    isBase: b.isBase,
+                    ...(b.frontMatter.glob ? { glob: b.frontMatter.glob } : {}),
+                    body: b.body,
+                })),
+            });
+        });
+    });
     app.use(createErrorHandler(logger));
     return app;
 }