@maxisoft/instantcms-mcp 1.2.3

package/dist/__tests__/project-patch.test.js

@@ -0,0 +1,144 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fc = __importStar(require("fast-check"));
+const project_patch_tool_js_1 = require("../tools/project-patch-tool.js");
+describe('createProjectPatch', () => {
+    test('идентичные file-maps → пустой patch', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'a.txt': 'hello' }, { 'a.txt': 'hello' });
+        expect(result.patch).toBe('');
+        expect(result.is_empty).toBe(true);
+        expect(result.changed_files).toBe(0);
+    });
+    test('пустые file-maps → пустой patch', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({}, {});
+        expect(result.patch).toBe('');
+        expect(result.is_empty).toBe(true);
+    });
+    test('изменён один файл → patch содержит этот файл', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'a.txt': 'hello' }, { 'a.txt': 'world' });
+        expect(result.patch).toContain('diff --git a/a.txt b/a.txt');
+        expect(result.patch).toContain('-hello');
+        expect(result.patch).toContain('+world');
+        expect(result.changed_files).toBe(1);
+        expect(result.is_empty).toBe(false);
+    });
+    test('удалён файл → patch содержит "deleted file mode" и весь контент с -', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'remove.txt': 'gone' }, {});
+        expect(result.patch).toContain('deleted file mode 100644');
+        expect(result.patch).toContain('--- a/remove.txt');
+        expect(result.patch).toContain('+++ /dev/null');
+        expect(result.patch).toContain('-gone');
+    });
+    test('добавлен файл → patch содержит "new file mode" и контент с +', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({}, { 'new.txt': 'fresh' });
+        expect(result.patch).toContain('new file mode 100644');
+        expect(result.patch).toContain('--- /dev/null');
+        expect(result.patch).toContain('+++ b/new.txt');
+        expect(result.patch).toContain('+fresh');
+    });
+    test('identical content, different path → registered as rename с similarity 100%', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'old/name.txt': 'unchanged' }, { 'new/name.txt': 'unchanged' });
+        expect(result.patch).toContain('rename from old/name.txt');
+        expect(result.patch).toContain('rename to new/name.txt');
+        expect(result.patch).toContain('similarity index 100%');
+        expect(result.renames).toEqual({ 'old/name.txt': 'new/name.txt' });
+    });
+    test('path traversal в path → throws "Unsafe project path"', () => {
+        expect(() => (0, project_patch_tool_js_1.createProjectPatch)({}, { '../escape.txt': 'pwn' })).toThrow(/Unsafe project path/);
+        expect(() => (0, project_patch_tool_js_1.createProjectPatch)({}, { '/abs/path': 'pwn' })).toThrow(/Unsafe project path/);
+        expect(() => (0, project_patch_tool_js_1.createProjectPatch)({}, { 'with\nnewline.txt': 'pwn' })).toThrow(/Unsafe project path/);
+    });
+    test('multi-file: deletes, additions, edits, renames в одном patch', () => {
+        const before = {
+            'keep.txt': 'k',
+            'edit.txt': 'old',
+            'gone.txt': 'g',
+        };
+        const after = {
+            'keep.txt': 'k',
+            'edit.txt': 'new',
+            'added.txt': 'a',
+            'moved.txt': 'g', // rename of gone.txt
+        };
+        const result = (0, project_patch_tool_js_1.createProjectPatch)(before, after);
+        expect(result.patch).toContain('rename from gone.txt');
+        expect(result.patch).toContain('rename to moved.txt');
+        expect(result.patch).toContain('-old'); // from edit.txt
+        expect(result.patch).toContain('+new');
+        expect(result.patch).toContain('+a'); // added.txt
+        // changed_files = adds - renames + edits = (1 added + 1 deleted) - 1 rename + 1 edited = 2
+        expect(result.changed_files).toBeGreaterThan(0);
+    });
+    test('content без trailing newline → "No newline at end of file"', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'n.txt': 'no-nl' }, { 'n.txt': 'with-nl' });
+        expect(result.patch).toContain('\');
+    });
+    test('property-based: patch никогда не throws на корректных путях', () => {
+        const safePath = fc
+            .stringMatching(/^[a-z][a-z0-9_]{0,20}(\/[a-z0-9_]{0,20})*$/)
+            .filter(s => s.length > 0);
+        fc.assert(fc.property(fc.dictionary(safePath, fc.string({ maxLength: 200 }), { maxKeys: 10 }), fc.dictionary(safePath, fc.string({ maxLength: 200 }), { maxKeys: 10 }), (before, after) => {
+            const result = (0, project_patch_tool_js_1.createProjectPatch)(before, after);
+            expect(typeof result.patch).toBe('string');
+            return true;
+        }), { numRuns: 30 });
+    });
+    test('property-based: changed_files >= 0 всегда', () => {
+        const safePath = fc
+            .stringMatching(/^[a-z][a-z0-9_]{0,15}(\/[a-z0-9_]{0,15})*$/)
+            .filter(s => s.length > 0);
+        fc.assert(fc.property(fc.dictionary(safePath, fc.string({ maxLength: 100 }), { maxKeys: 8 }), fc.dictionary(safePath, fc.string({ maxLength: 100 }), { maxKeys: 8 }), (before, after) => {
+            const result = (0, project_patch_tool_js_1.createProjectPatch)(before, after);
+            expect(result.changed_files).toBeGreaterThanOrEqual(0);
+            return true;
+        }), { numRuns: 30 });
+    });
+    test('patch валиден как string даже на пустых maps (не null/undefined)', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({}, {});
+        expect(typeof result.patch).toBe('string');
+        expect(result.patch).toBe('');
+    });
+    test('rename detection: одинаковый content по новому пути + нет других совпадений → rename', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'a.txt': 'one' }, { 'b.txt': 'one' });
+        expect(result.renames['a.txt']).toBe('b.txt');
+        expect(result.patch).toContain('rename from a.txt');
+    });
+    test('content без неломающих символов (null-byte и \\r остаются в patch как есть — backend отвечает за экранирование)', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'a.php': '<?php\n/*\u0000bad*/' }, { 'a.php': '<?php\n/*fixed*/' });
+        expect(result.patch).toContain('+<?php');
+        expect(result.patch).toContain('+/*fixed*/');
+    });
+});

package/dist/__tests__/project-source.test.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const fflate_1 = require("fflate");
+const project_source_tool_js_1 = require("../tools/project-source-tool.js");
+describe('project sources', () => {
+    test('loads local text files while ignoring dependencies and symlinks', async () => {
+        const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'instantcms-mcp-'));
+        try {
+            await (0, promises_1.mkdir)((0, node_path_1.join)(root, 'system/controllers/demo'), { recursive: true });
+            await (0, promises_1.mkdir)((0, node_path_1.join)(root, 'node_modules/pkg'), { recursive: true });
+            await (0, promises_1.writeFile)((0, node_path_1.join)(root, 'system/controllers/demo/frontend.php'), '<?php');
+            await (0, promises_1.writeFile)((0, node_path_1.join)(root, 'node_modules/pkg/index.js'), 'ignored');
+            await (0, promises_1.symlink)((0, node_path_1.join)(root, 'system/controllers/demo/frontend.php'), (0, node_path_1.join)(root, 'linked.php'));
+            const result = await (0, project_source_tool_js_1.loadLocalProject)(root);
+            expect(result.files).toEqual({ 'system/controllers/demo/frontend.php': '<?php' });
+            expect(result.skipped).toContainEqual({ path: 'linked.php', reason: 'symbolic_link' });
+        }
+        finally {
+            await (0, promises_1.rm)(root, { recursive: true, force: true });
+        }
+    });
+    test('loads a selected directory from a GitHub archive', async () => {
+        const archive = (0, fflate_1.zipSync)({
+            'repo-main/addons/demo/manifest.xml': new TextEncoder().encode('<component/>'),
+            'repo-main/README.md': new TextEncoder().encode('ignored'),
+        });
+        const originalFetch = global.fetch;
+        global.fetch = jest.fn(async () => new Response(archive, { status: 200 }));
+        try {
+            const result = await (0, project_source_tool_js_1.loadGithubProject)('owner/repo', 'main', 'addons/demo');
+            expect(result.files).toEqual({ 'manifest.xml': '<component/>' });
+            expect(global.fetch).toHaveBeenCalledWith('https://codeload.github.com/owner/repo/zip/main', expect.objectContaining({ redirect: 'error' }));
+        }
+        finally {
+            global.fetch = originalFetch;
+        }
+    });
+    test('rejects invalid GitHub repository input', async () => {
+        await expect((0, project_source_tool_js_1.loadGithubProject)('https://example.com/owner/repo')).rejects.toThrow('Repository must be owner/name');
+    });
+});

package/dist/__tests__/project-workflows-extra.test.js

@@ -0,0 +1,165 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fc = __importStar(require("fast-check"));
+const project_workflow_tool_js_1 = require("../tools/project-workflow-tool.js");
+const scaffold_tool_js_1 = require("../tools/scaffold-tool.js");
+function validAddonFiles() {
+    return (0, scaffold_tool_js_1.scaffoldAddon)({ name: 'wfextest', title: 'WF', type: 'basic' }).files;
+}
+describe('project workflows (extended)', () => {
+    test('audit: пустой file-map → is_valid=true, 0 errors', () => {
+        const audit = (0, project_workflow_tool_js_1.auditInstantCmsProject)({});
+        expect(audit.is_valid).toBe(true);
+        expect(audit.summary.errors).toBe(0);
+    });
+    test('audit: scaffoldAddon basic → is_valid=true', () => {
+        const audit = (0, project_workflow_tool_js_1.auditInstantCmsProject)(validAddonFiles());
+        expect(audit.kind).toBe('addon');
+        expect(audit.is_valid).toBe(true);
+    });
+    test('audit: cmsGrid (legacy class) → LEGACY_CMSGRID_CLASS error', () => {
+        const files = {
+            'package/system/controllers/wfextest/manifest.xml': '<addon/>',
+            'package/system/controllers/wfextest/grids/old.php': '<?php class custom extends cmsGrid {}',
+        };
+        const audit = (0, project_workflow_tool_js_1.auditInstantCmsProject)(files);
+        const legacy = audit.diagnostics.filter(d => d.code === 'LEGACY_CMSGRID_CLASS');
+        expect(legacy.length).toBe(1);
+        expect(legacy[0].severity).toBe('error');
+    });
+    test('audit: PHP with ->query($var) → POSSIBLE_SQL_INTERPOLATION warning', () => {
+        const sql = ['<?php ', '$db->query("SELECT * FROM x WHERE id = ', '$id");'].join('$');
+        const files = {
+            'src/danger.php': sql,
+        };
+        const audit = (0, project_workflow_tool_js_1.auditInstantCmsProject)(files);
+        const found = audit.diagnostics.filter(d => d.code === 'POSSIBLE_SQL_INTERPOLATION');
+        expect(found.length).toBeGreaterThanOrEqual(1);
+        expect(found[0].severity).toBe('warning');
+    });
+    test('audit: echo $_GET → POSSIBLE_UNESCAPED_OUTPUT warning (просто $var; форма)', () => {
+        // Текущий регексп ловит только echo $VAR; без обращения к элементам массива.
+        // Это известное ограничение детектора — фиксируем, чтобы регрессия была видна.
+        const php = '<?php echo $_GET;';
+        const files = {
+            'src/danger.php': php,
+        };
+        const audit = (0, project_workflow_tool_js_1.auditInstantCmsProject)(files);
+        const out = audit.diagnostics.filter(d => d.code === 'POSSIBLE_UNESCAPED_OUTPUT');
+        expect(out.length).toBeGreaterThanOrEqual(1);
+        expect(out[0].severity).toBe('warning');
+    });
+    test('repair: MISPLACED_LANGUAGE_FILE перемещается на правильный путь', () => {
+        const files = validAddonFiles();
+        files['package/system/controllers/wfextest/languages/ru/lang.php'] = '<?php // misplaced';
+        const result = (0, project_workflow_tool_js_1.repairInstantCmsProject)(files);
+        expect(result.applied).toHaveLength(1);
+        expect(result.applied[0].kind).toBe('move');
+        expect(result.applied[0].target).toBe('package/system/languages/ru/controllers/wfextest/lang.php');
+        expect(result.files['package/system/languages/ru/controllers/wfextest/lang.php']).toBeDefined();
+        expect(result.files['package/system/controllers/wfextest/languages/ru/lang.php']).toBeUndefined();
+        expect(result.patch.patch).toContain('rename from');
+        const remaining = result.remaining.diagnostics.filter(d => d.code === 'MISPLACED_LANGUAGE_FILE');
+        expect(remaining).toHaveLength(0);
+    });
+    test('repair идемпотентен: повторный вызов не меняет files', () => {
+        const files = validAddonFiles();
+        files['package/system/controllers/wfextest/languages/ru/lang.php'] = '<?php // misplaced';
+        const first = (0, project_workflow_tool_js_1.repairInstantCmsProject)(files);
+        const second = (0, project_workflow_tool_js_1.repairInstantCmsProject)(first.files);
+        expect(second.applied).toHaveLength(0);
+        expect(Object.keys(second.files).sort()).toEqual(Object.keys(first.files).sort());
+    });
+    test('repair не применяет UNSAFE операции (cmsGrid class, SQL interpolation)', () => {
+        const files = {
+            'package/system/controllers/demo/grids/old.php': '<?php class custom extends cmsGrid {}',
+            'src/danger.php': '<?php $db->query("...$id");',
+        };
+        const result = (0, project_workflow_tool_js_1.repairInstantCmsProject)(files);
+        expect(result.applied).toHaveLength(0);
+    });
+    test('explain: считает controllers, hooks, actions, forms', () => {
+        const files = validAddonFiles();
+        files['package/system/controllers/wfextest/hooks/sample.php'] = '<?php';
+        files['package/system/controllers/wfextest/actions/test.php'] = '<?php';
+        files['package/system/controllers/wfextest/forms/sample.php'] = '<?php';
+        const explanation = (0, project_workflow_tool_js_1.explainInstantCmsProject)(files);
+        expect(explanation.controllers).toContain('wfextest');
+        expect(explanation.hooks.length).toBeGreaterThanOrEqual(1);
+        expect(explanation.actions.length).toBeGreaterThanOrEqual(1);
+        expect(explanation.forms.length).toBeGreaterThanOrEqual(1);
+    });
+    test('plan: возвращает операции с правильными kind', () => {
+        const files = {
+            'package/system/controllers/foo/languages/ru/lang.php': '<?php',
+        };
+        const plan = (0, project_workflow_tool_js_1.planProjectChanges)(files);
+        expect(plan.operations.length).toBe(1);
+        expect(plan.operations[0].kind).toBe('move');
+        expect(plan.operations[0].safe).toBe(true);
+        expect(plan.operations[0].target).toBe('package/system/languages/ru/controllers/foo/lang.php');
+    });
+    test('upgrade: known версии (2.17 → 2.18.2) — checklist не пустой', () => {
+        const result = (0, project_workflow_tool_js_1.planInstantCmsUpgrade)({}, '2.17', '2.18.2');
+        expect(result.checklist.length).toBeGreaterThan(0);
+        expect(result.from).toBe('2.17');
+        expect(result.to).toBe('2.18.2');
+    });
+    test('upgrade: unknown версия → warnings присутствуют', () => {
+        const result = (0, project_workflow_tool_js_1.planInstantCmsUpgrade)({}, '99.99.99', '2.18.2');
+        expect(result.comparison.warnings).toBeDefined();
+    });
+    test('property-based: для произвольного набора PHP files → diagnostics всегда массив', () => {
+        const safePath = fc
+            .stringMatching(/^[a-z][a-z0-9_]{0,15}(\/[a-z0-9_]{0,15})*$/)
+            .filter(s => s.length > 0);
+        fc.assert(fc.property(fc.dictionary(safePath, fc.string({ maxLength: 500 }), { maxKeys: 5 }), files => {
+            const audit = (0, project_workflow_tool_js_1.auditInstantCmsProject)(files);
+            expect(Array.isArray(audit.diagnostics)).toBe(true);
+            return true;
+        }), { numRuns: 20 });
+    });
+    test('property-based: repair не выбрасывает на корректных путях', () => {
+        const safePath = fc
+            .stringMatching(/^[a-z][a-z0-9_]{0,15}(\/[a-z0-9_]{0,15})*$/)
+            .filter(s => s.length > 0);
+        fc.assert(fc.property(fc.dictionary(safePath, fc.string({ maxLength: 200 }), { maxKeys: 5 }), files => {
+            const result = (0, project_workflow_tool_js_1.repairInstantCmsProject)(files);
+            expect(typeof result.files).toBe('object');
+            return true;
+        }), { numRuns: 20 });
+    });
+});

package/dist/__tests__/project-workflows.test.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const project_workflow_tool_js_1 = require("../tools/project-workflow-tool.js");
+const project_patch_tool_js_1 = require("../tools/project-patch-tool.js");
+const node_child_process_1 = require("node:child_process");
+const files = {
+    'system/controllers/demo/manifest.xml': '<component><name>demo</name><title>Demo</title></component>',
+    'system/controllers/demo/frontend.php': '<?php class demo extends cmsFrontend {}',
+    'system/controllers/demo/languages/ru/demo.php': '<?php define("LANG_DEMO", "Demo");',
+    'system/controllers/demo/actions/index.php': '<?php echo $title;',
+};
+describe('project agent workflows', () => {
+    test('audits structure, syntax and suspicious output', () => {
+        const result = (0, project_workflow_tool_js_1.auditInstantCmsProject)(files);
+        expect(result.kind).toBe('addon');
+        expect(result.diagnostics.some(item => item.code === 'MISPLACED_LANGUAGE_FILE')).toBe(true);
+        expect(result.diagnostics.some(item => item.code === 'POSSIBLE_UNESCAPED_OUTPUT')).toBe(true);
+    });
+    test('plans before applying only safe repairs', () => {
+        const plan = (0, project_workflow_tool_js_1.planProjectChanges)(files);
+        expect(plan.safe_operations).toBe(1);
+        const repaired = (0, project_workflow_tool_js_1.repairInstantCmsProject)(files);
+        expect(repaired.applied).toHaveLength(1);
+        expect(repaired.files['system/languages/ru/controllers/demo/demo.php']).toBeDefined();
+        expect(repaired.files['system/controllers/demo/languages/ru/demo.php']).toBeUndefined();
+        expect(repaired.patch.patch).toContain('rename from system/controllers/demo/languages/ru/demo.php');
+    });
+    test('creates an applicable unified patch for edits and additions', () => {
+        const result = (0, project_patch_tool_js_1.createProjectPatch)({ 'a.php': '<?php echo 1;\n' }, { 'a.php': '<?php echo 2;\n', 'b.php': '<?php\n' });
+        expect(result.changed_files).toBe(2);
+        expect(result.patch).toContain('diff --git a/a.php b/a.php');
+        expect(result.patch).toContain('-<?php echo 1;');
+        expect(result.patch).toContain('+<?php echo 2;');
+        expect(result.patch).toContain('new file mode 100644');
+        const parsed = (0, node_child_process_1.spawnSync)('git', ['apply', '--numstat', '-'], {
+            input: result.patch,
+            encoding: 'utf8',
+        });
+        expect(parsed.status).toBe(0);
+        expect(parsed.stdout).toContain('a.php');
+    });
+    test('rejects unsafe patch paths', () => {
+        expect(() => (0, project_patch_tool_js_1.createProjectPatch)({ '../secret.php': 'secret' }, {})).toThrow('Unsafe project path');
+    });
+    test('explains project and creates an upgrade checklist', () => {
+        expect((0, project_workflow_tool_js_1.explainInstantCmsProject)(files).controllers).toContain('demo');
+        const upgrade = (0, project_workflow_tool_js_1.planInstantCmsUpgrade)(files, '2.17', '2.18.2');
+        expect(upgrade.comparison.to?.version).toBe('2.18.2');
+        expect(upgrade.checklist.length).toBeGreaterThan(2);
+    });
+});