@glwhappen/web-code 1.32.0

package/dist-server/server/utils/commandParser.js

@@ -0,0 +1,255 @@
+import { execFile } from 'child_process';
+import { promises as fs } from 'fs';
+import path from 'path';
+import { promisify } from 'util';
+import { parse as parseShellCommand } from 'shell-quote';
+import { parseFrontMatter } from '../shared/frontmatter.js';
+const execFileAsync = promisify(execFile);
+// Configuration
+const MAX_INCLUDE_DEPTH = 3;
+const BASH_TIMEOUT = 30000; // 30 seconds
+const BASH_COMMAND_ALLOWLIST = [
+    'echo',
+    'ls',
+    'pwd',
+    'date',
+    'whoami',
+    'git',
+    'npm',
+    'node',
+    'cat',
+    'grep',
+    'find',
+    'task-master'
+];
+/**
+ * Parse a markdown command file and extract frontmatter and content
+ * @param {string} content - Raw markdown content
+ * @returns {object} Parsed command with data (frontmatter) and content
+ */
+export function parseCommand(content) {
+    try {
+        const parsed = parseFrontMatter(content);
+        return {
+            data: parsed.data || {},
+            content: parsed.content || '',
+            raw: content
+        };
+    }
+    catch (error) {
+        throw new Error(`Failed to parse command: ${error.message}`);
+    }
+}
+/**
+ * Replace argument placeholders in content
+ * @param {string} content - Content with placeholders
+ * @param {string|array} args - Arguments to replace (string or array)
+ * @returns {string} Content with replaced arguments
+ */
+export function replaceArguments(content, args) {
+    if (!content)
+        return content;
+    let result = content;
+    // Convert args to array if it's a string
+    const argsArray = Array.isArray(args) ? args : (args ? [args] : []);
+    // Replace $ARGUMENTS with all arguments joined by space
+    const allArgs = argsArray.join(' ');
+    result = result.replace(/\$ARGUMENTS/g, allArgs);
+    // Replace positional arguments $1-$9
+    for (let i = 1; i <= 9; i++) {
+        const regex = new RegExp(`\\$${i}`, 'g');
+        const value = argsArray[i - 1] || '';
+        result = result.replace(regex, value);
+    }
+    return result;
+}
+/**
+ * Validate file path to prevent directory traversal
+ * @param {string} filePath - Path to validate
+ * @param {string} basePath - Base directory path
+ * @returns {boolean} True if path is safe
+ */
+export function isPathSafe(filePath, basePath) {
+    const resolvedPath = path.resolve(basePath, filePath);
+    const resolvedBase = path.resolve(basePath);
+    const relative = path.relative(resolvedBase, resolvedPath);
+    return (relative !== '' &&
+        !relative.startsWith('..') &&
+        !path.isAbsolute(relative));
+}
+/**
+ * Process file includes in content (@filename syntax)
+ * @param {string} content - Content with @filename includes
+ * @param {string} basePath - Base directory for resolving file paths
+ * @param {number} depth - Current recursion depth
+ * @returns {Promise<string>} Content with includes resolved
+ */
+export async function processFileIncludes(content, basePath, depth = 0) {
+    if (!content)
+        return content;
+    // Prevent infinite recursion
+    if (depth >= MAX_INCLUDE_DEPTH) {
+        throw new Error(`Maximum include depth (${MAX_INCLUDE_DEPTH}) exceeded`);
+    }
+    // Match @filename patterns (at start of line or after whitespace)
+    const includePattern = /(?:^|\s)@([^\s]+)/gm;
+    const matches = [...content.matchAll(includePattern)];
+    if (matches.length === 0) {
+        return content;
+    }
+    let result = content;
+    for (const match of matches) {
+        const fullMatch = match[0];
+        const filename = match[1];
+        // Security: prevent directory traversal
+        if (!isPathSafe(filename, basePath)) {
+            throw new Error(`Invalid file path (directory traversal detected): ${filename}`);
+        }
+        try {
+            const filePath = path.resolve(basePath, filename);
+            const fileContent = await fs.readFile(filePath, 'utf-8');
+            // Recursively process includes in the included file
+            const processedContent = await processFileIncludes(fileContent, basePath, depth + 1);
+            // Replace the @filename with the file content
+            result = result.replace(fullMatch, fullMatch.startsWith(' ') ? ' ' + processedContent : processedContent);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                throw new Error(`File not found: ${filename}`);
+            }
+            throw error;
+        }
+    }
+    return result;
+}
+/**
+ * Validate that a command and its arguments are safe
+ * @param {string} commandString - Command string to validate
+ * @returns {{ allowed: boolean, command: string, args: string[], error?: string }} Validation result
+ */
+export function validateCommand(commandString) {
+    const trimmedCommand = commandString.trim();
+    if (!trimmedCommand) {
+        return { allowed: false, command: '', args: [], error: 'Empty command' };
+    }
+    // Parse the command using shell-quote to handle quotes properly
+    const parsed = parseShellCommand(trimmedCommand);
+    // Check for shell operators or control structures
+    const hasOperators = parsed.some(token => typeof token === 'object' && token.op);
+    if (hasOperators) {
+        return {
+            allowed: false,
+            command: '',
+            args: [],
+            error: 'Shell operators (&&, ||, |, ;, etc.) are not allowed'
+        };
+    }
+    // Extract command and args (all should be strings after validation)
+    const tokens = parsed.filter(token => typeof token === 'string');
+    if (tokens.length === 0) {
+        return { allowed: false, command: '', args: [], error: 'No valid command found' };
+    }
+    const [command, ...args] = tokens;
+    // Extract just the command name (remove path if present)
+    const commandName = path.basename(command);
+    // Check if command exactly matches allowlist (no prefix matching)
+    const isAllowed = BASH_COMMAND_ALLOWLIST.includes(commandName);
+    if (!isAllowed) {
+        return {
+            allowed: false,
+            command: commandName,
+            args,
+            error: `Command '${commandName}' is not in the allowlist`
+        };
+    }
+    // Validate arguments don't contain dangerous metacharacters
+    const dangerousPattern = /[;&|`$()<>{}[\]\\]/;
+    for (const arg of args) {
+        if (dangerousPattern.test(arg)) {
+            return {
+                allowed: false,
+                command: commandName,
+                args,
+                error: `Argument contains dangerous characters: ${arg}`
+            };
+        }
+    }
+    return { allowed: true, command: commandName, args };
+}
+/**
+ * Backward compatibility: Check if command is allowed (deprecated)
+ * @deprecated Use validateCommand() instead for better security
+ * @param {string} command - Command to validate
+ * @returns {boolean} True if command is allowed
+ */
+export function isBashCommandAllowed(command) {
+    const result = validateCommand(command);
+    return result.allowed;
+}
+/**
+ * Sanitize bash command output
+ * @param {string} output - Raw command output
+ * @returns {string} Sanitized output
+ */
+export function sanitizeOutput(output) {
+    if (!output)
+        return '';
+    // Remove control characters except \t, \n, \r
+    return [...output]
+        .filter(ch => {
+        const code = ch.charCodeAt(0);
+        return code === 9 // \t
+            || code === 10 // \n
+            || code === 13 // \r
+            || (code >= 32 && code !== 127);
+    })
+        .join('');
+}
+/**
+ * Process bash commands in content (!command syntax)
+ * @param {string} content - Content with !command syntax
+ * @param {object} options - Options for bash execution
+ * @returns {Promise<string>} Content with bash commands executed and replaced
+ */
+export async function processBashCommands(content, options = {}) {
+    if (!content)
+        return content;
+    const { cwd = process.cwd(), timeout = BASH_TIMEOUT } = options;
+    // Match !command patterns (at start of line or after whitespace)
+    const commandPattern = /(?:^|\n)!(.+?)(?=\n|$)/g;
+    const matches = [...content.matchAll(commandPattern)];
+    if (matches.length === 0) {
+        return content;
+    }
+    let result = content;
+    for (const match of matches) {
+        const fullMatch = match[0];
+        const commandString = match[1].trim();
+        // Security: validate command and parse args
+        const validation = validateCommand(commandString);
+        if (!validation.allowed) {
+            throw new Error(`Command not allowed: ${commandString} - ${validation.error}`);
+        }
+        try {
+            // Execute without shell using execFile with parsed args
+            const { stdout, stderr } = await execFileAsync(validation.command, validation.args, {
+                cwd,
+                timeout,
+                maxBuffer: 1024 * 1024, // 1MB max output
+                shell: false, // IMPORTANT: No shell interpretation
+                env: { ...process.env, PATH: process.env.PATH } // Inherit PATH for finding commands
+            });
+            const output = sanitizeOutput(stdout || stderr || '');
+            // Replace the !command with the output
+            result = result.replace(fullMatch, fullMatch.startsWith('\n') ? '\n' + output : output);
+        }
+        catch (error) {
+            if (error.killed) {
+                throw new Error(`Command timeout: ${commandString}`);
+            }
+            throw new Error(`Command failed: ${commandString} - ${error.message}`);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=commandParser.js.map

package/dist-server/server/utils/commandParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandParser.js","sourceRoot":"","sources":["../../../server/utils/commandParser.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,KAAK,IAAI,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,gBAAgB;AAChB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,aAAa;AACzC,MAAM,sBAAsB,GAAG;IAC7B,MAAM;IACN,IAAI;IACJ,KAAK;IACL,MAAM;IACN,QAAQ;IACR,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,aAAa;CACd,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAO;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,GAAG,EAAE,OAAO;SACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAO,EAAE,IAAI;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,yCAAyC;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEpE,wDAAwD;IACxD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAEjD,qCAAqC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,QAAQ,EAAE,QAAQ;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC3D,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,6BAA6B;IAC7B,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,iBAAiB,YAAY,CAAC,CAAC;IAC3E,CAAC;IAED,kEAAkE;IAClE,MAAM,cAAc,GAAG,qBAAqB,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAE1B,wCAAwC;QACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAEzD,oDAAoD;YACpD,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAErF,8CAA8C;YAC9C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,aAAa;IAC3C,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAC3E,CAAC;IAED,gEAAgE;IAChE,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAEjD,kDAAkD;IAClD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACvC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CACtC,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,sDAAsD;SAC9D,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAEjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;IAElC,yDAAyD;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE3C,kEAAkE;IAClE,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE/D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,WAAW;YACpB,IAAI;YACJ,KAAK,EAAE,YAAY,WAAW,2BAA2B;SAC1D,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,WAAW;gBACpB,IAAI;gBACJ,KAAK,EAAE,2CAA2C,GAAG,EAAE;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAO;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAM;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,8CAA8C;IAC9C,OAAO,CAAC,GAAG,MAAM,CAAC;SACf,MAAM,CAAC,EAAE,CAAC,EAAE;QACX,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO,IAAI,KAAK,CAAC,CAAE,KAAK;eACjB,IAAI,KAAK,EAAE,CAAC,KAAK;eACjB,IAAI,KAAK,EAAE,CAAC,KAAK;eACjB,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,EAAE;IAC7D,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IAEhE,iEAAiE;IACjE,MAAM,cAAc,GAAG,yBAAyB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtC,4CAA4C;QAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;QAElD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,aAAa,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC;YACH,wDAAwD;YACxD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5C,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,IAAI,EACf;gBACE,GAAG;gBACH,OAAO;gBACP,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,iBAAiB;gBACzC,KAAK,EAAE,KAAK,EAAE,qCAAqC;gBACnD,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,oCAAoC;aACrF,CACF,CAAC;YAEF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC;YAEtD,uCAAuC;YACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,aAAa,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,aAAa,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist-server/server/utils/gitConfig.js

@@ -0,0 +1,36 @@
+import { spawn } from 'child_process';
+function spawnAsync(command, args) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, { shell: false });
+        let stdout = '';
+        child.stdout.on('data', (data) => { stdout += data.toString(); });
+        child.on('error', (error) => { reject(error); });
+        child.on('close', (code) => {
+            if (code === 0) {
+                resolve({ stdout });
+                return;
+            }
+            reject(new Error(`Command failed with code ${code}`));
+        });
+    });
+}
+/**
+ * Read git configuration from system's global git config
+ * @returns {Promise<{git_name: string|null, git_email: string|null}>}
+ */
+export async function getSystemGitConfig() {
+    try {
+        const [nameResult, emailResult] = await Promise.all([
+            spawnAsync('git', ['config', '--global', 'user.name']).catch(() => ({ stdout: '' })),
+            spawnAsync('git', ['config', '--global', 'user.email']).catch(() => ({ stdout: '' }))
+        ]);
+        return {
+            git_name: nameResult.stdout.trim() || null,
+            git_email: emailResult.stdout.trim() || null
+        };
+    }
+    catch (error) {
+        return { git_name: null, git_email: null };
+    }
+}
+//# sourceMappingURL=gitConfig.js.map

package/dist-server/server/utils/gitConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitConfig.js","sourceRoot":"","sources":["../../../server/utils/gitConfig.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,SAAS,UAAU,CAAC,OAAO,EAAE,IAAI;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChD,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,UAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACpF,UAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;SACtF,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI;YAC1C,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI;SAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist-server/server/utils/mcp-detector.js

@@ -0,0 +1,134 @@
+/**
+ * MCP SERVER DETECTION UTILITY
+ * ============================
+ *
+ * Centralized utility for detecting MCP server configurations.
+ * Used across TaskMaster integration and other MCP-dependent features.
+ */
+import { promises as fsPromises } from 'fs';
+import path from 'path';
+import os from 'os';
+/**
+ * Check if task-master-ai MCP server is configured
+ * Reads directly from Claude configuration files like claude-cli.js does
+ * @returns {Promise<Object>} MCP detection result
+ */
+export async function detectTaskMasterMCPServer() {
+    try {
+        // Read Claude configuration files directly (same logic as mcp.js)
+        const homeDir = os.homedir();
+        const configPaths = [
+            path.join(homeDir, '.claude.json'),
+            path.join(homeDir, '.claude', 'settings.json')
+        ];
+        let configData = null;
+        let configPath = null;
+        // Try to read from either config file
+        for (const filepath of configPaths) {
+            try {
+                const fileContent = await fsPromises.readFile(filepath, 'utf8');
+                configData = JSON.parse(fileContent);
+                configPath = filepath;
+                break;
+            }
+            catch (error) {
+                // File doesn't exist or is not valid JSON, try next
+                continue;
+            }
+        }
+        if (!configData) {
+            return {
+                hasMCPServer: false,
+                reason: 'No Claude configuration file found',
+                hasConfig: false
+            };
+        }
+        // Look for task-master-ai in user-scoped MCP servers
+        let taskMasterServer = null;
+        if (configData.mcpServers && typeof configData.mcpServers === 'object') {
+            const serverEntry = Object.entries(configData.mcpServers).find(([name, config]) => name === 'task-master-ai' ||
+                name.includes('task-master') ||
+                (config && config.command && config.command.includes('task-master')));
+            if (serverEntry) {
+                const [name, config] = serverEntry;
+                taskMasterServer = {
+                    name,
+                    scope: 'user',
+                    config,
+                    type: config.command ? 'stdio' : (config.url ? 'http' : 'unknown')
+                };
+            }
+        }
+        // Also check project-specific MCP servers if not found globally
+        if (!taskMasterServer && configData.projects) {
+            for (const [projectPath, projectConfig] of Object.entries(configData.projects)) {
+                if (projectConfig.mcpServers && typeof projectConfig.mcpServers === 'object') {
+                    const serverEntry = Object.entries(projectConfig.mcpServers).find(([name, config]) => name === 'task-master-ai' ||
+                        name.includes('task-master') ||
+                        (config && config.command && config.command.includes('task-master')));
+                    if (serverEntry) {
+                        const [name, config] = serverEntry;
+                        taskMasterServer = {
+                            name,
+                            scope: 'local',
+                            projectPath,
+                            config,
+                            type: config.command ? 'stdio' : (config.url ? 'http' : 'unknown')
+                        };
+                        break;
+                    }
+                }
+            }
+        }
+        if (taskMasterServer) {
+            const isValid = !!(taskMasterServer.config &&
+                (taskMasterServer.config.command || taskMasterServer.config.url));
+            const hasEnvVars = !!(taskMasterServer.config &&
+                taskMasterServer.config.env &&
+                Object.keys(taskMasterServer.config.env).length > 0);
+            return {
+                hasMCPServer: true,
+                isConfigured: isValid,
+                hasApiKeys: hasEnvVars,
+                scope: taskMasterServer.scope,
+                config: {
+                    command: taskMasterServer.config?.command,
+                    args: taskMasterServer.config?.args || [],
+                    url: taskMasterServer.config?.url,
+                    envVars: hasEnvVars ? Object.keys(taskMasterServer.config.env) : [],
+                    type: taskMasterServer.type
+                }
+            };
+        }
+        else {
+            // Get list of available servers for debugging
+            const availableServers = [];
+            if (configData.mcpServers) {
+                availableServers.push(...Object.keys(configData.mcpServers));
+            }
+            if (configData.projects) {
+                for (const projectConfig of Object.values(configData.projects)) {
+                    if (projectConfig.mcpServers) {
+                        availableServers.push(...Object.keys(projectConfig.mcpServers).map(name => `local:${name}`));
+                    }
+                }
+            }
+            return {
+                hasMCPServer: false,
+                reason: 'task-master-ai not found in configured MCP servers',
+                hasConfig: true,
+                configPath,
+                availableServers
+            };
+        }
+    }
+    catch (error) {
+        console.error('Error detecting MCP server config:', error);
+        return {
+            hasMCPServer: false,
+            reason: `Error checking MCP config: ${error.message}`,
+            hasConfig: false
+        };
+    }
+}
+//# sourceMappingURL=mcp-detector.js.map

package/dist-server/server/utils/mcp-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-detector.js","sourceRoot":"","sources":["../../../server/utils/mcp-detector.js"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,IAAI,CAAC;AAC5C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC3C,IAAI,CAAC;QACD,kEAAkE;QAClE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG;YAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC;SACjD,CAAC;QAEF,IAAI,UAAU,GAAG,IAAI,CAAC;QACtB,IAAI,UAAU,GAAG,IAAI,CAAC;QAEtB,sCAAsC;QACtC,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAChE,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACrC,UAAU,GAAG,QAAQ,CAAC;gBACtB,MAAM;YACV,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,oDAAoD;gBACpD,SAAS;YACb,CAAC;QACL,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,oCAAoC;gBAC5C,SAAS,EAAE,KAAK;aACnB,CAAC;QACN,CAAC;QAED,qDAAqD;QACrD,IAAI,gBAAgB,GAAG,IAAI,CAAC;QAC5B,IAAI,UAAU,CAAC,UAAU,IAAI,OAAO,UAAU,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAC9E,IAAI,KAAK,gBAAgB;gBACzB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC5B,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CACvE,CAAC;YAEF,IAAI,WAAW,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC;gBACnC,gBAAgB,GAAG;oBACf,IAAI;oBACJ,KAAK,EAAE,MAAM;oBACb,MAAM;oBACN,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;iBACrE,CAAC;YACN,CAAC;QACL,CAAC;QAED,gEAAgE;QAChE,IAAI,CAAC,gBAAgB,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7E,IAAI,aAAa,CAAC,UAAU,IAAI,OAAO,aAAa,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CACjF,IAAI,KAAK,gBAAgB;wBACzB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAC5B,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CACvE,CAAC;oBAEF,IAAI,WAAW,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC;wBACnC,gBAAgB,GAAG;4BACf,IAAI;4BACJ,KAAK,EAAE,OAAO;4BACd,WAAW;4BACX,MAAM;4BACN,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;yBACrE,CAAC;wBACF,MAAM;oBACV,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,gBAAgB,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM;gBACzB,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACnF,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM;gBACzB,gBAAgB,CAAC,MAAM,CAAC,GAAG;gBAC3B,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEzE,OAAO;gBACH,YAAY,EAAE,IAAI;gBAClB,YAAY,EAAE,OAAO;gBACrB,UAAU,EAAE,UAAU;gBACtB,KAAK,EAAE,gBAAgB,CAAC,KAAK;gBAC7B,MAAM,EAAE;oBACJ,OAAO,EAAE,gBAAgB,CAAC,MAAM,EAAE,OAAO;oBACzC,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE;oBACzC,GAAG,EAAE,gBAAgB,CAAC,MAAM,EAAE,GAAG;oBACjC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;oBACnE,IAAI,EAAE,gBAAgB,CAAC,IAAI;iBAC9B;aACJ,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,8CAA8C;YAC9C,MAAM,gBAAgB,GAAG,EAAE,CAAC;YAC5B,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;gBACxB,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7D,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;wBAC3B,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;oBACjG,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO;gBACH,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,oDAAoD;gBAC5D,SAAS,EAAE,IAAI;gBACf,UAAU;gBACV,gBAAgB;aACnB,CAAC;QACN,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO;YACH,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,8BAA8B,KAAK,CAAC,OAAO,EAAE;YACrD,SAAS,EAAE,KAAK;SACnB,CAAC;IACN,CAAC;AACL,CAAC"}