@gemini-designer/mcp-server 0.1.0

package/dist/context/builder.js

@@ -0,0 +1,194 @@
+/**
+ * Context Builder
+ *
+ * Builds token-optimized context from specified files.
+ * Filters out sensitive content and optimizes for relevance.
+ * Includes token counting for quota management.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { isPathAllowed, isSensitiveFile, sanitizeContent } from './filter.js';
+// Token estimation: ~4 characters per token for English text/code
+const CHARS_PER_TOKEN = 4;
+const MAX_CONTEXT_TOKENS = 12500; // ~50k chars
+const MAX_FILE_TOKENS = 2500; // ~10k chars per file
+/**
+ * Estimate token count from text
+ */
+export function estimateTokens(text) {
+    return Math.ceil(text.length / CHARS_PER_TOKEN);
+}
+/**
+ * Build context from specified file paths with token optimization
+ */
+export async function buildContext(paths, config) {
+    const result = await buildContextWithMetadata(paths, config);
+    return result.content;
+}
+/**
+ * Build context with full metadata (tokens, files included, etc.)
+ */
+export async function buildContextWithMetadata(paths, config) {
+    const contents = [];
+    const filesIncluded = [];
+    const filesSkipped = [];
+    let totalTokens = 0;
+    let truncated = false;
+    // Sort paths by likely relevance (design tokens first, then components)
+    const sortedPaths = sortByRelevance(paths);
+    for (const filePath of sortedPaths) {
+        // Resolve to absolute path
+        const absPath = path.isAbsolute(filePath) ? filePath : path.resolve(process.cwd(), filePath);
+        // Security check: path must be in allowed paths
+        if (!isPathAllowed(absPath, config.allowedPaths)) {
+            if (config.debug) {
+                console.error(`[context] Skipping ${filePath}: outside allowed paths`);
+            }
+            filesSkipped.push(`${filePath} (outside allowed paths)`);
+            continue;
+        }
+        // Security check: not a sensitive file
+        if (isSensitiveFile(absPath)) {
+            if (config.debug) {
+                console.error(`[context] Skipping ${filePath}: sensitive file`);
+            }
+            filesSkipped.push(`${filePath} (sensitive)`);
+            continue;
+        }
+        // Check if file exists and is a file
+        if (!fs.existsSync(absPath)) {
+            filesSkipped.push(`${filePath} (not found)`);
+            continue;
+        }
+        const stat = fs.statSync(absPath);
+        if (!stat.isFile()) {
+            filesSkipped.push(`${filePath} (not a file)`);
+            continue;
+        }
+        try {
+            let content = fs.readFileSync(absPath, 'utf-8');
+            // Sanitize content to remove any secrets
+            content = sanitizeContent(content);
+            // Calculate tokens for this file
+            let fileTokens = estimateTokens(content);
+            const maxFileChars = MAX_FILE_TOKENS * CHARS_PER_TOKEN;
+            // Truncate large files
+            if (fileTokens > MAX_FILE_TOKENS) {
+                content = smartTruncate(content, maxFileChars);
+                fileTokens = MAX_FILE_TOKENS;
+            }
+            // Check if adding this would exceed total limit
+            if (totalTokens + fileTokens > MAX_CONTEXT_TOKENS) {
+                if (config.debug) {
+                    console.error(`[context] Stopping: token limit reached`);
+                }
+                truncated = true;
+                break;
+            }
+            const ext = path.extname(absPath);
+            const header = `/* File: ${path.basename(absPath)} (${ext}) - ~${fileTokens} tokens */`;
+            contents.push(`${header}\n${content}`);
+            filesIncluded.push(filePath);
+            totalTokens += fileTokens;
+        }
+        catch (error) {
+            if (config.debug) {
+                console.error(`[context] Error reading ${filePath}:`, error);
+            }
+            filesSkipped.push(`${filePath} (read error)`);
+        }
+    }
+    return {
+        content: contents.length > 0 ? contents.join('\n\n---\n\n') : '',
+        estimatedTokens: totalTokens,
+        filesIncluded,
+        filesSkipped,
+        truncated,
+    };
+}
+/**
+ * Sort paths by relevance (design tokens and variables first)
+ */
+function sortByRelevance(paths) {
+    const priority = {
+        tokens: 0,
+        variables: 0,
+        theme: 1,
+        design: 1,
+        colors: 2,
+        typography: 2,
+        styles: 3,
+        css: 4,
+    };
+    return [...paths].sort((a, b) => {
+        const aName = path.basename(a).toLowerCase();
+        const bName = path.basename(b).toLowerCase();
+        let aPriority = 10;
+        let bPriority = 10;
+        for (const [key, value] of Object.entries(priority)) {
+            if (aName.includes(key))
+                aPriority = Math.min(aPriority, value);
+            if (bName.includes(key))
+                bPriority = Math.min(bPriority, value);
+        }
+        return aPriority - bPriority;
+    });
+}
+/**
+ * Smart truncate: keep beginning and end, with clear indicator
+ */
+function smartTruncate(content, maxChars) {
+    if (content.length <= maxChars)
+        return content;
+    const keepStart = Math.floor(maxChars * 0.7);
+    const keepEnd = Math.floor(maxChars * 0.2);
+    const start = content.slice(0, keepStart);
+    const end = content.slice(-keepEnd);
+    return `${start}\n\n/* ... [${Math.round((content.length - maxChars) / 1000)}k chars truncated] ... */\n\n${end}`;
+}
+/**
+ * Automatically discover relevant UI files in a directory
+ */
+export async function discoverUIFiles(directory, config) {
+    const uiPatterns = [
+        /\.(css|scss|less|sass)$/,
+        /\.(tsx|jsx)$/,
+        /\.(vue|svelte)$/,
+        /theme\./,
+        /design[-_]?tokens?\./,
+        /tailwind\.config\./,
+    ];
+    const files = [];
+    function scan(dir, depth = 0) {
+        if (depth > 3)
+            return; // Max depth
+        try {
+            const entries = fs.readdirSync(dir, { withFileTypes: true });
+            for (const entry of entries) {
+                const fullPath = path.join(dir, entry.name);
+                // Skip node_modules, .git, etc.
+                if (entry.isDirectory()) {
+                    if (['node_modules', '.git', 'dist', 'build', '.next', '.nuxt'].includes(entry.name)) {
+                        continue;
+                    }
+                    scan(fullPath, depth + 1);
+                }
+                else if (entry.isFile()) {
+                    // Check if matches UI patterns
+                    if (uiPatterns.some((pattern) => pattern.test(entry.name))) {
+                        if (isPathAllowed(fullPath, config.allowedPaths) && !isSensitiveFile(fullPath)) {
+                            files.push(fullPath);
+                        }
+                    }
+                }
+            }
+        }
+        catch {
+            // Skip directories we can't read
+        }
+    }
+    scan(directory);
+    // Sort by relevance
+    return sortByRelevance(files);
+}
+//# sourceMappingURL=builder.js.map

package/dist/context/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/context/builder.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9E,kEAAkE;AAClE,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,aAAa;AAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,CAAC,sBAAsB;AAUpD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAe,EAAE,MAAc;IAC9D,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,KAAe,EACf,MAAc;IAEd,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,wEAAwE;IACxE,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAE3C,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;QACjC,2BAA2B;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE7F,gDAAgD;QAChD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,yBAAyB,CAAC,CAAC;YAC3E,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,0BAA0B,CAAC,CAAC;YACzD,SAAS;QACb,CAAC;QAED,uCAAuC;QACvC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,kBAAkB,CAAC,CAAC;YACpE,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,cAAc,CAAC,CAAC;YAC7C,SAAS;QACb,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,cAAc,CAAC,CAAC;YAC7C,SAAS;QACb,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACjB,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,CAAC,CAAC;YAC9C,SAAS;QACb,CAAC;QAED,IAAI,CAAC;YACD,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEhD,yCAAyC;YACzC,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAEnC,iCAAiC;YACjC,IAAI,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,YAAY,GAAG,eAAe,GAAG,eAAe,CAAC;YAEvD,uBAAuB;YACvB,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;gBAC/B,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC/C,UAAU,GAAG,eAAe,CAAC;YACjC,CAAC;YAED,gDAAgD;YAChD,IAAI,WAAW,GAAG,UAAU,GAAG,kBAAkB,EAAE,CAAC;gBAChD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAC7D,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACV,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,YAAY,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,GAAG,QAAQ,UAAU,YAAY,CAAC;YACxF,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;YACvC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,WAAW,IAAI,UAAU,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;IAED,OAAO;QACH,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;QAChE,eAAe,EAAE,WAAW;QAC5B,aAAa;QACb,YAAY;QACZ,SAAS;KACZ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAe;IACpC,MAAM,QAAQ,GAA2B;QACrC,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC;QACT,UAAU,EAAE,CAAC;QACb,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;KACT,CAAC;IAEF,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAE7C,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,SAAS,GAAG,SAAS,CAAC;IACjC,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,QAAgB;IACpD,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,OAAO,CAAC;IAE/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;IAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;IAEpC,OAAO,GAAG,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,gCAAgC,GAAG,EAAE,CAAC;AACtH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAc;IACnE,MAAM,UAAU,GAAG;QACf,yBAAyB;QACzB,cAAc;QACd,iBAAiB;QACjB,SAAS;QACT,sBAAsB;QACtB,oBAAoB;KACvB,CAAC;IAEF,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS,IAAI,CAAC,GAAW,EAAE,QAAgB,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY;QAEnC,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAE7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAE5C,gCAAgC;gBAChC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACtB,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACnF,SAAS;oBACb,CAAC;oBACD,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC9B,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxB,+BAA+B;oBAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;wBACzD,IAAI,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC7E,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBACzB,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,iCAAiC;QACrC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,CAAC;IAEhB,oBAAoB;IACpB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC"}

package/dist/context/filter.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Context Filter
+ *
+ * Security patterns to prevent sensitive data from being shared.
+ * Ensures only UI-relevant files are included in context.
+ */
+/**
+ * UI-relevant file patterns (for auto-discovery)
+ */
+export declare const UI_INCLUDE_PATTERNS: RegExp[];
+/**
+ * Check if a file path matches sensitive patterns
+ */
+export declare function isSensitiveFile(filePath: string): boolean;
+/**
+ * Check if a file path is within allowed paths
+ */
+export declare function isPathAllowed(filePath: string, allowedPaths: string[]): boolean;
+/**
+ * Check if a file is UI-relevant
+ */
+export declare function isUIRelevant(filePath: string): boolean;
+/**
+ * Sanitize file content to remove potential secrets
+ * This is a best-effort filter for dynamic content
+ */
+export declare function sanitizeContent(content: string): string;
+//# sourceMappingURL=filter.d.ts.map

package/dist/context/filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../src/context/filter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2DH;;GAEG;AACH,eAAO,MAAM,mBAAmB,UAkB/B,CAAC;AAEF;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUzD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAW/E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUtD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA0BvD"}

package/dist/context/filter.js

@@ -0,0 +1,136 @@
+/**
+ * Context Filter
+ *
+ * Security patterns to prevent sensitive data from being shared.
+ * Ensures only UI-relevant files are included in context.
+ */
+import * as path from 'node:path';
+/**
+ * Files/directories that should NEVER be included in context
+ */
+const SENSITIVE_PATTERNS = [
+    // Environment and secrets
+    /\.env/i,
+    /secrets?\./i,
+    /\.pem$/i,
+    /\.key$/i,
+    /\.crt$/i,
+    /credentials/i,
+    /\.htpasswd/i,
+    // Private keys and certificates
+    /id_rsa/i,
+    /id_ed25519/i,
+    /\.p12$/i,
+    /\.pfx$/i,
+    // Config with potential secrets
+    /\.npmrc$/i,
+    /\.pypirc$/i,
+    /kubeconfig/i,
+    /\.docker\/config\.json$/i,
+    // Database
+    /\.sqlite$/i,
+    /\.db$/i,
+    /migrations?\//i,
+    /seeds?\//i,
+    // Backend/server code (when isolating UI)
+    /\/api\//i,
+    /\/server\//i,
+    /\/backend\//i,
+    /\/functions\//i, // Serverless
+    /\/lambda\//i,
+    /\/middleware\//i,
+    // Auth-related
+    /\/auth\//i,
+    /passport/i,
+    /jwt/i,
+    // System and dependencies
+    /node_modules\//i,
+    /\.git\//i,
+    /vendor\//i,
+    /\.cache\//i,
+    /\.next\//i,
+    /\.nuxt\//i,
+    /dist\//i,
+    /build\//i,
+];
+/**
+ * UI-relevant file patterns (for auto-discovery)
+ */
+export const UI_INCLUDE_PATTERNS = [
+    // Stylesheets
+    /\.(css|scss|less|sass|styl)$/i,
+    // Components
+    /\.(tsx|jsx)$/i,
+    /\.(vue|svelte)$/i,
+    // Design tokens
+    /theme\./i,
+    /tokens?\./i,
+    /variables\./i,
+    /design[-_]?system/i,
+    // Config files for styling
+    /tailwind\.config/i,
+    /postcss\.config/i,
+    /styled-components/i,
+];
+/**
+ * Check if a file path matches sensitive patterns
+ */
+export function isSensitiveFile(filePath) {
+    const normalized = filePath.replace(/\\/g, '/');
+    for (const pattern of SENSITIVE_PATTERNS) {
+        if (pattern.test(normalized)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if a file path is within allowed paths
+ */
+export function isPathAllowed(filePath, allowedPaths) {
+    const absPath = path.resolve(filePath);
+    for (const allowed of allowedPaths) {
+        const absAllowed = path.resolve(allowed);
+        if (absPath.startsWith(absAllowed)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if a file is UI-relevant
+ */
+export function isUIRelevant(filePath) {
+    const normalized = filePath.replace(/\\/g, '/');
+    for (const pattern of UI_INCLUDE_PATTERNS) {
+        if (pattern.test(normalized)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Sanitize file content to remove potential secrets
+ * This is a best-effort filter for dynamic content
+ */
+export function sanitizeContent(content) {
+    // Remove common secret patterns
+    const patterns = [
+        // API keys (generic patterns)
+        /(['"`])?(api[_-]?key|apikey|secret|password|token|auth)(['"`])?[\s]*[:=][\s]*['"`][^'"`]+['"`]/gi,
+        // Bearer tokens
+        /Bearer\s+[A-Za-z0-9\-_=]+\.[A-Za-z0-9\-_=]+\.?[A-Za-z0-9\-_.+/=]*/gi,
+        // AWS keys
+        /AKIA[0-9A-Z]{16}/g,
+        // Private keys
+        /-----BEGIN[\s\w]+PRIVATE KEY-----[\s\S]+?-----END[\s\w]+PRIVATE KEY-----/g,
+        // Connection strings
+        /(mongodb|postgresql|mysql|redis):\/\/[^\s'"]+/gi,
+    ];
+    let result = content;
+    for (const pattern of patterns) {
+        result = result.replace(pattern, '[REDACTED]');
+    }
+    return result;
+}
+//# sourceMappingURL=filter.js.map

package/dist/context/filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.js","sourceRoot":"","sources":["../../src/context/filter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACvB,0BAA0B;IAC1B,QAAQ;IACR,aAAa;IACb,SAAS;IACT,SAAS;IACT,SAAS;IACT,cAAc;IACd,aAAa;IAEb,gCAAgC;IAChC,SAAS;IACT,aAAa;IACb,SAAS;IACT,SAAS;IAET,gCAAgC;IAChC,WAAW;IACX,YAAY;IACZ,aAAa;IACb,0BAA0B;IAE1B,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,gBAAgB;IAChB,WAAW;IAEX,0CAA0C;IAC1C,UAAU;IACV,aAAa;IACb,cAAc;IACd,gBAAgB,EAAE,aAAa;IAC/B,aAAa;IACb,iBAAiB;IAEjB,eAAe;IACf,WAAW;IACX,WAAW;IACX,MAAM;IAEN,0BAA0B;IAC1B,iBAAiB;IACjB,UAAU;IACV,WAAW;IACX,YAAY;IACZ,WAAW;IACX,WAAW;IACX,SAAS;IACT,UAAU;CACb,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAC/B,cAAc;IACd,+BAA+B;IAE/B,aAAa;IACb,eAAe;IACf,kBAAkB;IAElB,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,oBAAoB;IAEpB,2BAA2B;IAC3B,mBAAmB;IACnB,kBAAkB;IAClB,oBAAoB;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEhD,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,YAAsB;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEvC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEhD,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC3C,gCAAgC;IAChC,MAAM,QAAQ,GAAG;QACb,8BAA8B;QAC9B,kGAAkG;QAElG,gBAAgB;QAChB,qEAAqE;QAErE,WAAW;QACX,mBAAmB;QAEnB,eAAe;QACf,2EAA2E;QAE3E,qBAAqB;QACrB,iDAAiD;KACpD,CAAC;IAEF,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/context/grounding.d.ts

@@ -0,0 +1,27 @@
+/**
+ * grounding.ts
+ *
+ * Deterministic “repo grounding” injected into prompts to improve output quality
+ * without burning large context windows.
+ *
+ * This module is used internally by tools like modify_ui and
+ * generate_component_variants to:
+ * - auto-detect the UI stack (framework/styling/libs)
+ * - catalog available components for reuse
+ *
+ * The output is intentionally concise and stable.
+ */
+import { Config } from '../config/index.js';
+export interface RepoGroundingOptions {
+    focusFileAbs?: string;
+    instruction?: string;
+    maxComponents?: number;
+}
+/**
+ * Build a concise deterministic “grounding” string.
+ *
+ * This is safe to include in prompts because it contains only local, deterministic
+ * project metadata (no secrets).
+ */
+export declare function buildRepoGrounding(config: Config, options?: RepoGroundingOptions): Promise<string>;
+//# sourceMappingURL=grounding.d.ts.map

package/dist/context/grounding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grounding.d.ts","sourceRoot":"","sources":["../../src/context/grounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AA+H5C,MAAM,WAAW,oBAAoB;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoC5G"}

package/dist/context/grounding.js

@@ -0,0 +1,162 @@
+/**
+ * grounding.ts
+ *
+ * Deterministic “repo grounding” injected into prompts to improve output quality
+ * without burning large context windows.
+ *
+ * This module is used internally by tools like modify_ui and
+ * generate_component_variants to:
+ * - auto-detect the UI stack (framework/styling/libs)
+ * - catalog available components for reuse
+ *
+ * The output is intentionally concise and stable.
+ */
+import * as path from 'node:path';
+import { detectUiStack } from '../stack/detect.js';
+import { walkFiles, toPosixPath } from '../utils/walk.js';
+import { buildComponentCatalog } from '../components/catalog.js';
+const CACHE_TTL_MS = 60_000;
+const cache = new Map();
+function resolveRootForFile(absFile, config) {
+    const allowed = (config.allowedPaths || []).map((p) => path.resolve(p));
+    const fallback = allowed[0] || process.cwd();
+    if (!absFile)
+        return fallback;
+    const abs = path.resolve(absFile);
+    // pick the deepest allowed root that contains the file
+    const matches = allowed
+        .filter((root) => abs === root || abs.startsWith(root + path.sep))
+        .sort((a, b) => b.length - a.length);
+    return matches[0] || fallback;
+}
+function summarizeStack(stack) {
+    const summary = {
+        framework: stack.framework,
+        typescript: stack.language.typescript,
+        styling: stack.styling,
+        uiLibraries: stack.uiLibraries,
+        iconLibraries: stack.iconLibraries,
+        tooling: stack.tooling,
+        conventions: {
+            srcDir: stack.conventions.srcDir,
+            hasAppDir: stack.conventions.hasAppDir,
+            hasPagesDir: stack.conventions.hasPagesDir,
+            tsconfigPaths: stack.conventions.tsconfigPaths ? Object.keys(stack.conventions.tsconfigPaths) : undefined,
+        },
+        files: {
+            tailwindConfig: stack.files.tailwindConfig,
+            componentsJson: stack.files.componentsJson,
+            storybookDir: stack.files.storybookDir,
+        },
+        warnings: stack.warnings,
+    };
+    return JSON.stringify(summary, null, 2);
+}
+function tokenizeInstruction(instruction) {
+    const set = new Set();
+    if (!instruction)
+        return set;
+    const tokens = instruction.match(/[A-Za-z_][A-Za-z0-9_]*/g) || [];
+    for (const t of tokens)
+        set.add(t.toLowerCase());
+    return set;
+}
+function scoreComponent(c, focusDirRel, instructionTokens) {
+    let score = 0;
+    // Mentioned explicitly in instruction
+    if (instructionTokens.has(c.name.toLowerCase()))
+        score += 8;
+    // Same directory as focused file
+    if (focusDirRel && c.file.startsWith(focusDirRel + '/'))
+        score += 6;
+    // Common reusable directories
+    if (c.file.includes('/components/') ||
+        c.file.startsWith('components/') ||
+        c.file.includes('/ui/') ||
+        c.file.includes('/shared/')) {
+        score += 3;
+    }
+    // Prefer TSX
+    if (c.file.endsWith('.tsx'))
+        score += 1;
+    return score;
+}
+function formatCatalogSubset(catalog, subset) {
+    const lines = [];
+    const header = `scanned_files=${catalog.filesScanned}, total_exports=${catalog.components.length}`;
+    lines.push(header);
+    if (catalog.warnings.length) {
+        lines.push(`warnings: ${catalog.warnings.join(' | ')}`);
+    }
+    lines.push('');
+    lines.push('components:');
+    for (const c of subset) {
+        const extras = [];
+        if (c.exportType)
+            extras.push(c.exportType);
+        if (c.propsType)
+            extras.push(`props: ${c.propsType}`);
+        if (c.jsDoc)
+            extras.push(`doc: ${c.jsDoc}`);
+        const extra = extras.length ? ` (${extras.join(', ')})` : '';
+        lines.push(`- ${c.name} — ${c.file}${extra}`);
+    }
+    return lines.join('\n');
+}
+async function getOrBuildRepoData(root) {
+    const now = Date.now();
+    const hit = cache.get(root);
+    if (hit && now - hit.ts < CACHE_TTL_MS)
+        return hit;
+    const stack = detectUiStack(root);
+    const files = walkFiles(root, {
+        includeExtensions: ['.tsx', '.jsx'],
+        maxFiles: 5000,
+    });
+    const catalog = await buildComponentCatalog(root, files);
+    const fresh = { ts: now, stack, catalog };
+    cache.set(root, fresh);
+    return fresh;
+}
+/**
+ * Build a concise deterministic “grounding” string.
+ *
+ * This is safe to include in prompts because it contains only local, deterministic
+ * project metadata (no secrets).
+ */
+export async function buildRepoGrounding(config, options = {}) {
+    const maxComponents = typeof options.maxComponents === 'number' ? options.maxComponents : 120;
+    const root = resolveRootForFile(options.focusFileAbs ? path.resolve(options.focusFileAbs) : null, config);
+    const data = await getOrBuildRepoData(root);
+    const focusRel = options.focusFileAbs ? toPosixPath(path.relative(root, path.resolve(options.focusFileAbs))) : null;
+    const focusDirRel = focusRel ? toPosixPath(path.posix.dirname(focusRel)) : null;
+    const instructionTokens = tokenizeInstruction(options.instruction);
+    // Score and select a small subset for reuse.
+    const scored = data.catalog.components
+        .map((c) => ({ c, s: scoreComponent(c, focusDirRel, instructionTokens) }))
+        .sort((a, b) => b.s - a.s);
+    const subset = [];
+    const seen = new Set();
+    for (const item of scored) {
+        if (subset.length >= maxComponents)
+            break;
+        const key = `${item.c.name}|${item.c.file}|${item.c.exportType}`;
+        if (seen.has(key))
+            continue;
+        // Skip ultra-low relevance if we already have enough
+        if (subset.length > 30 && item.s <= 0)
+            break;
+        subset.push(item.c);
+        seen.add(key);
+    }
+    return [
+        'AUTO PROJECT CONTEXT (deterministic):',
+        '',
+        'STACK (json):',
+        summarizeStack(data.stack),
+        '',
+        'COMPONENT CATALOG (subset for reuse):',
+        formatCatalogSubset(data.catalog, subset),
+    ].join('\n');
+}
+//# sourceMappingURL=grounding.js.map

package/dist/context/grounding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grounding.js","sourceRoot":"","sources":["../../src/context/grounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAA6B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAA4C,MAAM,0BAA0B,CAAC;AAQ3G,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,SAAS,kBAAkB,CAAC,OAAsB,EAAE,MAAc;IAC9D,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7C,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAElC,uDAAuD;IACvD,MAAM,OAAO,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;SACjE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAEzC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAA2B;IAC/C,MAAM,OAAO,GAAG;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;QACrC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE;YACT,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;YAChC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW;YAC1C,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5G;QACD,KAAK,EAAE;YACH,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;YAC1C,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;YAC1C,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;SACzC;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;KAC3B,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAoB;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,WAAW;QAAE,OAAO,GAAG,CAAC;IAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACnB,CAAkB,EAClB,WAA0B,EAC1B,iBAA8B;IAE9B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,sCAAsC;IACtC,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAE5D,iCAAiC;IACjC,IAAI,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAEpE,8BAA8B;IAC9B,IACI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAChC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC7B,CAAC;QACC,KAAK,IAAI,CAAC,CAAC;IACf,CAAC;IAED,aAAa;IACb,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAExC,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAsB,EAAE,MAAyB;IAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,iBAAiB,OAAO,CAAC,YAAY,mBAAmB,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;IACnG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,YAAY;QAAE,OAAO,GAAG,CAAC;IAEnD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE;QAC1B,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;QACnC,QAAQ,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAW,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAClD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACjB,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,UAAgC,EAAE;IACvF,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;IAE9F,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpH,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEnE,6CAA6C;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;SACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC;SACzE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa;YAAE,MAAM;QAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACjE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,qDAAqD;QACrD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM;QAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;QACH,uCAAuC;QACvC,EAAE;QACF,eAAe;QACf,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,EAAE;QACF,uCAAuC;QACvC,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;KAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC"}

package/dist/context/guards.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Path Guards
+ *
+ * Centralized helpers to validate and resolve file paths for tools.
+ *
+ * Goals:
+ * - Prevent accidental reads/writes outside the workspace
+ * - Avoid including sensitive files (e.g. .env, private keys)
+ * - Provide consistent absolute-path resolution
+ */
+import { Config } from '../config/index.js';
+/**
+ * Resolve a path to an absolute path (relative paths are resolved from process.cwd()).
+ */
+export declare function resolveToAbs(filePath: string): string;
+/**
+ * Validate that a path is safe to read according to server config.
+ * Returns the resolved absolute path.
+ */
+export declare function assertReadablePath(filePath: string, config: Config): string;
+/**
+ * Validate that a path is safe to write according to server config.
+ * Returns the resolved absolute path.
+ */
+export declare function assertWritablePath(filePath: string, config: Config): string;
+/**
+ * Validate that a directory path is safe to read according to server config.
+ * Returns the resolved absolute path.
+ */
+export declare function assertReadableDir(dirPath: string, config: Config): string;
+//# sourceMappingURL=guards.d.ts.map

package/dist/context/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/context/guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAqB3E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAY3E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAqBzE"}