@massu/core 1.10.7 → 1.10.8

package/dist/cli.js

@@ -27717,6 +27717,44 @@ var init_python_tools = __esm({
   }
 });
 
+// src/lib/framework-supports.ts
+function getAllRouterValues() {
+  const config = getConfig();
+  const values = [];
+  if (config.framework.router) values.push(config.framework.router);
+  const langs = config.framework.languages;
+  if (langs) {
+    for (const entry of Object.values(langs)) {
+      if (entry?.router) values.push(entry.router);
+    }
+  }
+  return values;
+}
+function getAllOrmValues() {
+  const config = getConfig();
+  const values = [];
+  if (config.framework.orm) values.push(config.framework.orm);
+  const langs = config.framework.languages;
+  if (langs) {
+    for (const entry of Object.values(langs)) {
+      if (entry?.orm) values.push(entry.orm);
+    }
+  }
+  return values;
+}
+function supportsRouter(name) {
+  return getAllRouterValues().includes(name);
+}
+function supportsOrm(name) {
+  return getAllOrmValues().includes(name);
+}
+var init_framework_supports = __esm({
+  "src/lib/framework-supports.ts"() {
+    "use strict";
+    init_config();
+  }
+});
+
 // src/tools.ts
 import { readFileSync as readFileSync41, existsSync as existsSync42 } from "fs";
 import { resolve as resolve36, basename as basename10 } from "path";
@@ -27739,7 +27777,7 @@ function ensureIndexes(dataDb, codegraphDb, force = false) {
   if (codegraphDb !== void 0 && (force || isDataStale(dataDb, codegraphDb))) {
     const importCount = buildImportIndex(dataDb, codegraphDb);
     results.push(`Import edges: ${importCount}`);
-    if (config.framework.router === "trpc") {
+    if (supportsRouter("trpc")) {
       const trpcStats = buildTrpcIndex(dataDb);
       results.push(`tRPC procedures: ${trpcStats.totalProcedures} (${trpcStats.withCallers} with UI, ${trpcStats.withoutCallers} without)`);
     }
@@ -27827,7 +27865,7 @@ function getToolDefinitions() {
         required: ["file"]
       }
     },
-    ...config.framework.router === "trpc" ? [
+    ...supportsRouter("trpc") ? [
       {
         name: p18("trpc_map"),
         description: "Map tRPC procedures to their UI call sites. Find which components call a router, which procedures have no UI callers, or list all procedures for a router.",
@@ -27881,7 +27919,7 @@ function getToolDefinitions() {
         required: []
       }
     }] : [],
-    ...config.framework.orm === "prisma" ? [{
+    ...supportsOrm("prisma") ? [{
       name: p18("schema"),
       description: "Prisma schema cross-reference. Show columns for a table, detect mismatches between code and schema, or verify column references in a file.",
       inputSchema: {
@@ -28704,6 +28742,7 @@ var init_tools = __esm({
     init_knowledge_db();
     init_python_tools();
     init_config();
+    init_framework_supports();
     init_license();
     init_sql_table_names();
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "1.10.7",
+  "version": "1.10.8",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 59 workflow commands, 11 agents, 20+ patterns",
   "main": "src/server.ts",

package/src/lib/framework-supports.ts

@@ -0,0 +1,85 @@
+// Copyright (c) 2026 Massu. All rights reserved.
+// Licensed under BSL 1.1 - see LICENSE file for details.
+
+/**
+ * P-H033 (plan-stage-c-high-batch / 1.10.8): adapter-pattern tool gating.
+ *
+ * **Bug class closed**: `tools.ts:102,206,260` (pre-1.10.8) did direct
+ * `config.framework.router === 'trpc'` / `config.framework.orm === 'prisma'`
+ * comparisons. The adapter pattern exists for repo-detection (Plan 3c —
+ * `@massu/adapter-*` packages provide `matches(signals)` + `introspect()`)
+ * but does NOT extend to tool-definition gating. Result: adding a new
+ * adapter (e.g. `@massu/adapter-fastify`) can't activate or de-activate
+ * tools — its tool surface is invisible to the dispatcher until tools.ts
+ * is hand-edited.
+ *
+ * **Structural fix**: every tool-gating decision now goes through this
+ * module's `supportsRouter(name)` / `supportsOrm(name)` helpers. The
+ * helpers consult BOTH the legacy top-level `framework.router/.orm`
+ * field AND the per-language v2 schema `framework.languages.<lang>.router/.orm`
+ * entries. Future framework adapters can register support via the
+ * registration hooks (deferred to plan-adapter-tool-registration when
+ * the first cross-adapter tool ships).
+ *
+ * **Drift-guard**: `__tests__/framework-supports-no-direct-comparison.test.ts`
+ * scans `packages/core/src/**` and asserts zero `config.framework.router ===`
+ * or `config.framework.orm ===` literal comparisons outside this module
+ * itself.
+ *
+ * For default installs:
+ *   - tRPC repo (router='trpc'): supportsRouter('trpc') → true (preserves
+ *     current behavior — trpc_map tool gated on)
+ *   - Prisma repo (orm='prisma'): supportsOrm('prisma') → true (schema tool on)
+ *   - Custom adapter with router='fastify': supportsRouter('fastify') → true
+ *     once the adapter's per-language entry sets framework.languages.typescript.router
+ *     OR the legacy field — single check at the gate.
+ */
+
+import { getConfig } from '../config.ts';
+
+interface LanguageEntry {
+  router?: string;
+  orm?: string;
+}
+
+function getAllRouterValues(): string[] {
+  const config = getConfig();
+  const values: string[] = [];
+  if (config.framework.router) values.push(config.framework.router);
+  const langs = config.framework.languages as Record<string, LanguageEntry> | undefined;
+  if (langs) {
+    for (const entry of Object.values(langs)) {
+      if (entry?.router) values.push(entry.router);
+    }
+  }
+  return values;
+}
+
+function getAllOrmValues(): string[] {
+  const config = getConfig();
+  const values: string[] = [];
+  if (config.framework.orm) values.push(config.framework.orm);
+  const langs = config.framework.languages as Record<string, LanguageEntry> | undefined;
+  if (langs) {
+    for (const entry of Object.values(langs)) {
+      if (entry?.orm) values.push(entry.orm);
+    }
+  }
+  return values;
+}
+
+/**
+ * Returns true if any detected language in the config declares this router.
+ * Used to gate tool definitions (e.g. trpc_map only when supportsRouter('trpc')).
+ */
+export function supportsRouter(name: string): boolean {
+  return getAllRouterValues().includes(name);
+}
+
+/**
+ * Returns true if any detected language in the config declares this ORM.
+ * Used to gate tool definitions (e.g. schema only when supportsOrm('prisma')).
+ */
+export function supportsOrm(name: string): boolean {
+  return getAllOrmValues().includes(name);
+}

package/src/security/license-pubkey.generated.ts

@@ -1,4 +1,4 @@
-// AUTO-GENERATED by scripts/bundle-license-pubkey.mjs at 2026-05-17T15:51:32.373Z.
+// AUTO-GENERATED by scripts/bundle-license-pubkey.mjs at 2026-05-17T16:00:08.526Z.
 // Source pem: packages/core/security/license-pubkey.pem
 // RAW-bytes sha256: 18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475
 // DO NOT EDIT — regenerate via `node scripts/bundle-license-pubkey.mjs` or

package/src/security/registry-pubkey.generated.ts

@@ -1,4 +1,4 @@
-// AUTO-GENERATED by scripts/bundle-pubkey.mjs at 2026-05-17T15:51:32.309Z.
+// AUTO-GENERATED by scripts/bundle-pubkey.mjs at 2026-05-17T16:00:08.460Z.
 // Source pem: packages/core/security/registry-pubkey.pem
 // RAW-bytes sha256: 3b6226d036c472e533110d11a7d0cd2773ce1d7d4f1003517d5bd69c5418ed4c
 // DO NOT EDIT — regenerate via `node scripts/bundle-pubkey.mjs` or

package/src/tools.ts

@@ -38,6 +38,7 @@ import { getKnowledgeToolDefinitions, isKnowledgeTool, handleKnowledgeToolCall }
 import { getKnowledgeDb } from './knowledge-db.ts';
 import { getPythonToolDefinitions, isPythonTool, handlePythonToolCall } from './python-tools.ts';
 import { getConfig, getProjectRoot, getResolvedPaths } from './config.ts';
+import { supportsRouter, supportsOrm } from './lib/framework-supports.ts';
 import { getCurrentTier, getToolTier, isToolAllowed, annotateToolDefinitions, getLicenseToolDefinitions, isLicenseTool, handleLicenseToolCall, isCloudFeatureAvailable } from './license.ts';
 import { t } from './lib/sql-table-names.ts';
 
@@ -99,7 +100,7 @@ function ensureIndexes(dataDb: Database.Database, codegraphDb?: Database.Databas
     const importCount = buildImportIndex(dataDb, codegraphDb);
     results.push(`Import edges: ${importCount}`);
 
-    if (config.framework.router === 'trpc') {
+    if (supportsRouter('trpc')) {
       const trpcStats = buildTrpcIndex(dataDb);
       results.push(`tRPC procedures: ${trpcStats.totalProcedures} (${trpcStats.withCallers} with UI, ${trpcStats.withoutCallers} without)`);
     }
@@ -203,7 +204,7 @@ export function getToolDefinitions(): ToolDefinition[] {
         required: ['file'],
       },
     },
-    ...(config.framework.router === 'trpc' ? [
+    ...(supportsRouter('trpc') ? [
       {
         name: p('trpc_map'),
         description: 'Map tRPC procedures to their UI call sites. Find which components call a router, which procedures have no UI callers, or list all procedures for a router.',
@@ -257,7 +258,7 @@ export function getToolDefinitions(): ToolDefinition[] {
         required: [],
       },
     }] : []),
-    ...(config.framework.orm === 'prisma' ? [{
+    ...(supportsOrm('prisma') ? [{
       name: p('schema'),
       description: 'Prisma schema cross-reference. Show columns for a table, detect mismatches between code and schema, or verify column references in a file.',
       inputSchema: {