@memnexus-ai/cli 1.7.223 → 1.7.225

package/dist/lib/setup/verifier.js

@@ -39,21 +39,66 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.displayPath = displayPath;
 exports.verifyAgent = verifyAgent;
 exports.verifyAll = verifyAll;
 const node_fs_1 = require("node:fs");
 const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
 const registry_js_1 = require("./registry.js");
 const detector_js_1 = require("./detector.js");
 const rules_writer_js_1 = require("./rules-writer.js");
 const rules_templates_js_1 = require("./rules-templates.js");
 const promises_1 = require("node:fs/promises");
+/**
+ * Largest steering file the verifier will read. The CLI's own steering output is
+ * a few KB; this is roughly 50x that, so it bounds attacker-chosen work without
+ * rejecting anything we produce or a user plausibly hand-writes.
+ */
+const MAX_STEERING_FILE_BYTES = 256 * 1024;
 const config_js_1 = require("../config.js");
 const package_json_1 = __importDefault(require("../../../package.json"));
+/**
+ * Resolve an agent's project-scoped MCP config path, or undefined when the agent
+ * has no project form (registry uses '' for global-only agents) or we are not
+ * inside a project.
+ *
+ * Read-only mirror of the path `mx setup` writes at project scope. This file must
+ * never import from config-writer.ts — verification is a read path (#4919).
+ */
+function resolveProjectConfigPath(agent, projectDir) {
+    if (!projectDir)
+        return undefined;
+    if (!agent.mcp.projectConfigPath)
+        return undefined;
+    return node_path_1.default.join(projectDir, agent.mcp.projectConfigPath);
+}
+/**
+ * Render a path for display without leaking the user's home directory or
+ * username. `mx mcp doctor --json` gets pasted into issue reports and into agent
+ * context, and global paths are already shown `~`-relative, so an absolute
+ * project path would be the only place identifying the machine.
+ */
+function displayPath(absolute, projectDir) {
+    if (projectDir && (absolute === projectDir || absolute.startsWith(projectDir + node_path_1.default.sep))) {
+        const relative = node_path_1.default.relative(projectDir, absolute);
+        return relative === '' ? '.' : `./${relative}`;
+    }
+    const home = node_os_1.default.homedir();
+    if (home && (absolute === home || absolute.startsWith(home + node_path_1.default.sep))) {
+        return `~${absolute.slice(home.length)}`;
+    }
+    return absolute;
+}
 /**
  * Verify a single agent's setup.
+ *
+ * @param projectDir When set, project-scoped config and steering files are checked
+ *   IN ADDITION TO the global ones. `mx setup` defaults to project scope inside a
+ *   git project (setup.ts:203-207), so a global-only check reported working
+ *   project installs as broken (#4919). Either location passing is a pass.
  */
-async function verifyAgent(agent) {
+async function verifyAgent(agent, projectDir) {
     const checks = [];
     const platform = node_os_1.default.platform();
     // Manual config format (e.g., ChatGPT Desktop) — skip file checks,
@@ -91,15 +136,26 @@ async function verifyAgent(agent) {
         }
     }
     else {
-        // 1. Check config file exists
+        // 1. Check config file exists — global OR project scope
         const globalPath = agent.mcp.globalConfigPath[platform];
-        const configExists = globalPath !== undefined && globalPath !== '' && (0, node_fs_1.existsSync)((0, detector_js_1.resolvePath)(globalPath));
+        const globalExists = globalPath !== undefined && globalPath !== '' && (0, node_fs_1.existsSync)((0, detector_js_1.resolvePath)(globalPath));
+        const projectPath = resolveProjectConfigPath(agent, projectDir);
+        const projectExists = projectPath !== undefined && (0, node_fs_1.existsSync)(projectPath);
+        const foundPaths = [];
+        if (globalExists && globalPath)
+            foundPaths.push(`${globalPath} (global)`);
+        if (projectExists && projectPath)
+            foundPaths.push(`${displayPath(projectPath, projectDir)} (project)`);
+        const searched = [globalPath || '(no global path for this platform)'];
+        if (projectPath)
+            searched.push(displayPath(projectPath, projectDir));
+        const configExists = globalExists || projectExists;
         checks.push({
             name: 'Config file exists',
             passed: configExists,
             message: configExists
-                ? `Found: ${globalPath}`
-                : `Not found: ${globalPath || '(no path for this platform)'}`,
+                ? `Found: ${foundPaths.join(', ')}`
+                : `Not found: ${searched.join(', ')}`,
         });
     }
     // 2. Check MCP bridge availability
@@ -113,44 +169,73 @@ async function verifyAgent(agent) {
     }
     // 4. Check steering file (if agent supports it)
     if (agent.steering) {
-        const steeringPath = (0, rules_writer_js_1.resolveSteeringPath)(agent, 'global');
-        if (steeringPath) {
-            const steeringExists = (0, node_fs_1.existsSync)(steeringPath);
-            if (steeringExists) {
+        // Decided on CONTENT, not file existence. `CLAUDE.md` and `AGENTS.md` are
+        // ordinary project files that many repositories have for their own reasons —
+        // this repository has both. Selecting the project file merely because it
+        // exists would fail a perfectly good global install for anyone who runs
+        // `mx mcp doctor` inside such a repo: the same false-failure #4919 exists to
+        // remove, aimed at a different group. Project is preferred only when it
+        // actually carries MemNexus rules, because that is what a project-scoped
+        // install writes (setup.ts:396-408).
+        const candidates = [
+            projectDir ? (0, rules_writer_js_1.resolveSteeringPath)(agent, 'project', projectDir) : null,
+            (0, rules_writer_js_1.resolveSteeringPath)(agent, 'global'),
+        ].filter((p) => p !== null);
+        if (candidates.length > 0) {
+            let version = null;
+            let versionPath;
+            let anyExists = false;
+            let anyUnreadable = false;
+            for (const candidate of candidates) {
+                if (!(0, node_fs_1.existsSync)(candidate))
+                    continue;
+                anyExists = true;
                 try {
-                    const steeringContent = await (0, promises_1.readFile)(steeringPath, 'utf-8');
-                    const version = (0, rules_templates_js_1.parseSteeringVersion)(steeringContent);
-                    if (version) {
-                        const isCurrent = version === package_json_1.default.version;
-                        checks.push({
-                            name: 'Steering rules',
-                            passed: true,
-                            message: isCurrent
-                                ? `Found (v${version}, current)`
-                                : `Found (v${version}, CLI is v${package_json_1.default.version} — run \`mx setup rules --agent ${agent.id}\` to update)`,
-                        });
+                    // Bound the read before doing it. Content checking means we now read a
+                    // file a cloned repository controls the size of, on a command users run
+                    // casually. Unbounded, a 64 MB CLAUDE.md costs ~133 MB of heap and a
+                    // symlink to /dev/zero reaches ~721 MB RSS — an out-of-memory kill on a
+                    // constrained runner. `stat` (not `lstat`) resolves symlinks on purpose:
+                    // we want the size of what we would actually read. Rejecting anything
+                    // that is not a regular file removes the character-device case entirely.
+                    // 256 KB is ~50x the largest steering file the CLI itself writes. The
+                    // same bounding exists for the bridge log at mcp.ts (KI-SEC-007).
+                    const stats = await (0, promises_1.stat)(candidate);
+                    if (!stats.isFile() || stats.size > MAX_STEERING_FILE_BYTES) {
+                        anyUnreadable = true;
+                        continue;
                     }
-                    else {
-                        checks.push({
-                            name: 'Steering rules',
-                            passed: false,
-                            message: `File exists but no MemNexus section found: ${steeringPath}`,
-                        });
+                    const parsed = (0, rules_templates_js_1.parseSteeringVersion)(await (0, promises_1.readFile)(candidate, 'utf-8'));
+                    // First candidate wins — the array is already in preference order.
+                    if (parsed && version === null) {
+                        version = parsed;
+                        versionPath = candidate;
                     }
                 }
                 catch {
-                    checks.push({
-                        name: 'Steering rules',
-                        passed: false,
-                        message: `Failed to read: ${steeringPath}`,
-                    });
+                    anyUnreadable = true;
                 }
             }
+            if (version) {
+                const isCurrent = version === package_json_1.default.version;
+                checks.push({
+                    name: 'Steering rules',
+                    passed: true,
+                    message: isCurrent
+                        ? `Found (v${version}, current): ${displayPath(versionPath, projectDir)}`
+                        : `Found (v${version}, CLI is v${package_json_1.default.version} — run \`mx setup rules --agent ${agent.id}\` to update): ${displayPath(versionPath, projectDir)}`,
+                });
+            }
             else {
+                const where = candidates.map((c) => displayPath(c, projectDir)).join(', ');
                 checks.push({
                     name: 'Steering rules',
                     passed: false,
-                    message: `Not found: ${steeringPath}. Run: mx setup rules --agent ${agent.id}`,
+                    message: anyUnreadable
+                        ? `Failed to read: ${where}. Run: mx setup rules --agent ${agent.id}`
+                        : anyExists
+                            ? `No MemNexus section found in: ${where}. Run: mx setup rules --agent ${agent.id}`
+                            : `Not found: ${where}. Run: mx setup rules --agent ${agent.id}`,
                 });
             }
         }
@@ -193,8 +278,13 @@ async function verifyAgent(agent) {
 }
 /**
  * Verify all configured agents.
+ *
+ * @param projectDir When set (callers pass the detected git project root), agents
+ *   configured at project scope are verified too. Without it this only ever saw
+ *   global installs, so the onboarding flow's project-scoped install was reported
+ *   as missing (#4919).
  */
-async function verifyAll() {
+async function verifyAll(projectDir) {
     const agents = (0, registry_js_1.getSortedAgents)();
     const platform = node_os_1.default.platform();
     const results = [];
@@ -205,10 +295,13 @@ async function verifyAll() {
         if (agent.mcp.configFormat === 'manual') {
             continue;
         }
-        // Only verify agents that have a config file present
+        // Only verify agents that have a config file present — in either scope
         const globalPath = agent.mcp.globalConfigPath[platform];
-        if (globalPath && (0, node_fs_1.existsSync)((0, detector_js_1.resolvePath)(globalPath))) {
-            results.push(await verifyAgent(agent));
+        const globalExists = !!globalPath && (0, node_fs_1.existsSync)((0, detector_js_1.resolvePath)(globalPath));
+        const projectPath = resolveProjectConfigPath(agent, projectDir);
+        const projectExists = !!projectPath && (0, node_fs_1.existsSync)(projectPath);
+        if (globalExists || projectExists) {
+            results.push(await verifyAgent(agent, projectDir));
         }
     }
     return results;

package/dist/lib/setup/verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/lib/setup/verifier.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBH,kCA2IC;AAKD,8BAoBC;AAlLD,qCAAqC;AACrC,sDAAyB;AAEzB,+CAAgD;AAChD,+CAA4C;AAC5C,uDAAwD;AACxD,6DAA4D;AAC5D,+CAA4C;AAC5C,4CAAsC;AACtC,yEAAgD;AAEhD;;GAEG;AACI,KAAK,UAAU,WAAW,CAAC,KAAsB;IACtD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAE3C,mEAAmE;IACnE,+CAA+C;IAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,8BAA8B,KAAK,CAAC,IAAI,WAAW;SAC1E,CAAC,CAAC;QAEH,qCAAqC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;oBACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,oDAAoD;gBACpD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,QAAQ,CAAC,EAAE;oBACnB,OAAO,EAAE,QAAQ,CAAC,EAAE;wBAClB,CAAC,CAAC,cAAc,SAAS,EAAE;wBAC3B,CAAC,CAAC,wBAAwB,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE;iBAC5D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,gBAAgB,SAAS,KAAK,CAAC,CAAC,OAAO,EAAE;iBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8BAA8B;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,YAAY,GAChB,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,IAAI,IAAA,oBAAU,EAAC,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,YAAY;gBACnB,CAAC,CAAC,UAAU,UAAU,EAAE;gBACxB,CAAC,CAAC,cAAc,UAAU,IAAI,6BAA6B,EAAE;SAChE,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QAC3C,0EAA0E;QAC1E,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,IAAA,qCAAmB,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,cAAc,GAAG,IAAA,oBAAU,EAAC,YAAY,CAAC,CAAC;YAChD,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,eAAe,GAAG,MAAM,IAAA,mBAAQ,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBAC9D,MAAM,OAAO,GAAG,IAAA,yCAAoB,EAAC,eAAe,CAAC,CAAC;oBACtD,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,SAAS,GAAG,OAAO,KAAK,sBAAW,CAAC,OAAO,CAAC;wBAClD,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,gBAAgB;4BACtB,MAAM,EAAE,IAAI;4BACZ,OAAO,EAAE,SAAS;gCAChB,CAAC,CAAC,WAAW,OAAO,YAAY;gCAChC,CAAC,CAAC,WAAW,OAAO,aAAa,sBAAW,CAAC,OAAO,mCAAmC,KAAK,CAAC,EAAE,eAAe;yBACjH,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,gBAAgB;4BACtB,MAAM,EAAE,KAAK;4BACb,OAAO,EAAE,8CAA8C,YAAY,EAAE;yBACtE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE,mBAAmB,YAAY,EAAE;qBAC3C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,cAAc,YAAY,iCAAiC,KAAK,CAAC,EAAE,EAAE;iBAC/E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,MAAM,GAAG,kBAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,uBAAuB,kBAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG;YACtE,CAAC,CAAC,oCAAoC;KACzC,CAAC,CAAC;IAEH,mDAAmD;IACnD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,sBAAsB,CAAC,CAAC,OAAO,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,SAAS;IAC7B,MAAM,MAAM,GAAG,IAAA,6BAAe,GAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAC3C,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,gFAAgF;QAChF,gFAAgF;QAChF,4EAA4E;QAC5E,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,qDAAqD;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,UAAU,IAAI,IAAA,oBAAU,EAAC,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/lib/setup/verifier.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCH,kCAUC;AAUD,kCA2LC;AAUD,8BAuBC;AAvRD,qCAAqC;AACrC,sDAAyB;AACzB,0DAA6B;AAE7B,+CAAgD;AAChD,+CAA4C;AAC5C,uDAAwD;AACxD,6DAA4D;AAC5D,+CAAkD;AAElD;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC3C,4CAAsC;AACtC,yEAAgD;AAEhD;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,KAAsB,EAAE,UAAmB;IAC3E,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,QAAgB,EAAE,UAAmB;IAC/D,IAAI,UAAU,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,GAAG,mBAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,QAAQ,GAAG,mBAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACrD,OAAO,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,iBAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,mBAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,WAAW,CAC/B,KAAsB,EACtB,UAAmB;IAEnB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAE3C,mEAAmE;IACnE,+CAA+C;IAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,8BAA8B,KAAK,CAAC,IAAI,WAAW;SAC1E,CAAC,CAAC;QAEH,qCAAqC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;oBACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,oDAAoD;gBACpD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,QAAQ,CAAC,EAAE;oBACnB,OAAO,EAAE,QAAQ,CAAC,EAAE;wBAClB,CAAC,CAAC,cAAc,SAAS,EAAE;wBAC3B,CAAC,CAAC,wBAAwB,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE;iBAC5D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,gBAAgB,SAAS,KAAK,CAAC,CAAC,OAAO,EAAE;iBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,wDAAwD;QACxD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,YAAY,GAChB,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,IAAI,IAAA,oBAAU,EAAC,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAC,CAAC;QAEvF,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,WAAW,KAAK,SAAS,IAAI,IAAA,oBAAU,EAAC,WAAW,CAAC,CAAC;QAE3E,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,YAAY,IAAI,UAAU;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,WAAW,CAAC,CAAC;QAC1E,IAAI,aAAa,IAAI,WAAW;YAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,CAAC,UAAU,IAAI,oCAAoC,CAAC,CAAC;QACtE,IAAI,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QAErE,MAAM,YAAY,GAAG,YAAY,IAAI,aAAa,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,YAAY;gBACnB,CAAC,CAAC,UAAU,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACnC,CAAC,CAAC,cAAc,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QAC3C,0EAA0E;QAC1E,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,0EAA0E;QAC1E,6EAA6E;QAC7E,yEAAyE;QACzE,wEAAwE;QACxE,6EAA6E;QAC7E,wEAAwE;QACxE,yEAAyE;QACzE,qCAAqC;QACrC,MAAM,UAAU,GAAG;YACjB,UAAU,CAAC,CAAC,CAAC,IAAA,qCAAmB,EAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;YACrE,IAAA,qCAAmB,EAAC,KAAK,EAAE,QAAQ,CAAC;SACrC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAEzC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,OAAO,GAAkB,IAAI,CAAC;YAClC,IAAI,WAA+B,CAAC;YACpC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,aAAa,GAAG,KAAK,CAAC;YAE1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,SAAS,CAAC;oBAAE,SAAS;gBACrC,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC;oBACH,uEAAuE;oBACvE,wEAAwE;oBACxE,qEAAqE;oBACrE,wEAAwE;oBACxE,yEAAyE;oBACzE,sEAAsE;oBACtE,yEAAyE;oBACzE,sEAAsE;oBACtE,kEAAkE;oBAClE,MAAM,KAAK,GAAG,MAAM,IAAA,eAAI,EAAC,SAAS,CAAC,CAAC;oBACpC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,uBAAuB,EAAE,CAAC;wBAC5D,aAAa,GAAG,IAAI,CAAC;wBACrB,SAAS;oBACX,CAAC;oBACD,MAAM,MAAM,GAAG,IAAA,yCAAoB,EAAC,MAAM,IAAA,mBAAQ,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;oBACxE,mEAAmE;oBACnE,IAAI,MAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;wBAC/B,OAAO,GAAG,MAAM,CAAC;wBACjB,WAAW,GAAG,SAAS,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa,GAAG,IAAI,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,SAAS,GAAG,OAAO,KAAK,sBAAW,CAAC,OAAO,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,SAAS;wBAChB,CAAC,CAAC,WAAW,OAAO,eAAe,WAAW,CAAC,WAAY,EAAE,UAAU,CAAC,EAAE;wBAC1E,CAAC,CAAC,WAAW,OAAO,aAAa,sBAAW,CAAC,OAAO,mCAAmC,KAAK,CAAC,EAAE,kBAAkB,WAAW,CAAC,WAAY,EAAE,UAAU,CAAC,EAAE;iBAC3J,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3E,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,aAAa;wBACpB,CAAC,CAAC,mBAAmB,KAAK,iCAAiC,KAAK,CAAC,EAAE,EAAE;wBACrE,CAAC,CAAC,SAAS;4BACT,CAAC,CAAC,iCAAiC,KAAK,iCAAiC,KAAK,CAAC,EAAE,EAAE;4BACnF,CAAC,CAAC,cAAc,KAAK,iCAAiC,KAAK,CAAC,EAAE,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,MAAM,GAAG,kBAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,uBAAuB,kBAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG;YACtE,CAAC,CAAC,oCAAoC;KACzC,CAAC,CAAC;IAEH,mDAAmD;IACnD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,sBAAsB,CAAC,CAAC,OAAO,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,SAAS,CAAC,UAAmB;IACjD,MAAM,MAAM,GAAG,IAAA,6BAAe,GAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAC3C,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,gFAAgF;QAChF,gFAAgF;QAChF,4EAA4E;QAC5E,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,CAAC,CAAC,UAAU,IAAI,IAAA,oBAAU,EAAC,IAAA,yBAAW,EAAC,UAAU,CAAC,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,IAAI,IAAA,oBAAU,EAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/terminal-safe.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Terminal output sanitation (KI-SEC-007).
+ *
+ * Anything we print that originated in a file, a log line or a network response
+ * can carry ANSI/OSC control sequences. `ESC[2J ESC[1;1H` clears the screen and
+ * repositions the cursor, which lets attacker-controlled text scroll away real
+ * output and paint replacement text — in `mx mcp doctor`, whose entire job is to
+ * tell the user whether their setup is healthy. On terminals with OSC 52 the same
+ * class of sequence reaches the clipboard.
+ *
+ * `mx mcp doctor` printed bridge log lines through an inline copy of this filter
+ * (mcp.ts). Verification now also reads a PROJECT steering file, which can belong
+ * to a repository the user cloned but did not write, so the filter is shared here
+ * and applied at every render site rather than duplicated per call site.
+ */
+import type { VerifyResult } from './setup/types.js';
+/**
+ * Strip C0 control characters and DEL. Tab, newline and carriage return are
+ * removed too: these values are rendered inline in single-line status output, so
+ * a newline is layout forgery rather than formatting.
+ */
+export declare function sanitizeTerminalText(text: string): string;
+/**
+ * Sanitize every message in a set of verification results.
+ *
+ * Applied once, immediately after `verifyAll()` returns, so the human renderer,
+ * the `--json` output and any future consumer are all covered by construction.
+ * Deliberately NOT done inside the verifier: the verifier's job is to report what
+ * it found, and a value that is safe for a terminal is a property of rendering.
+ */
+export declare function sanitizeVerifyResults(results: VerifyResult[]): VerifyResult[];
+//# sourceMappingURL=terminal-safe.d.ts.map

package/dist/lib/terminal-safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-safe.d.ts","sourceRoot":"","sources":["../../src/lib/terminal-safe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAS7E"}

package/dist/lib/terminal-safe.js

@@ -0,0 +1,47 @@
+"use strict";
+/**
+ * Terminal output sanitation (KI-SEC-007).
+ *
+ * Anything we print that originated in a file, a log line or a network response
+ * can carry ANSI/OSC control sequences. `ESC[2J ESC[1;1H` clears the screen and
+ * repositions the cursor, which lets attacker-controlled text scroll away real
+ * output and paint replacement text — in `mx mcp doctor`, whose entire job is to
+ * tell the user whether their setup is healthy. On terminals with OSC 52 the same
+ * class of sequence reaches the clipboard.
+ *
+ * `mx mcp doctor` printed bridge log lines through an inline copy of this filter
+ * (mcp.ts). Verification now also reads a PROJECT steering file, which can belong
+ * to a repository the user cloned but did not write, so the filter is shared here
+ * and applied at every render site rather than duplicated per call site.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeTerminalText = sanitizeTerminalText;
+exports.sanitizeVerifyResults = sanitizeVerifyResults;
+/**
+ * Strip C0 control characters and DEL. Tab, newline and carriage return are
+ * removed too: these values are rendered inline in single-line status output, so
+ * a newline is layout forgery rather than formatting.
+ */
+function sanitizeTerminalText(text) {
+    // eslint-disable-next-line no-control-regex
+    return text.replace(/[\x00-\x1f\x7f]/g, '');
+}
+/**
+ * Sanitize every message in a set of verification results.
+ *
+ * Applied once, immediately after `verifyAll()` returns, so the human renderer,
+ * the `--json` output and any future consumer are all covered by construction.
+ * Deliberately NOT done inside the verifier: the verifier's job is to report what
+ * it found, and a value that is safe for a terminal is a property of rendering.
+ */
+function sanitizeVerifyResults(results) {
+    return results.map((result) => ({
+        ...result,
+        agentName: sanitizeTerminalText(result.agentName),
+        checks: result.checks.map((check) => ({
+            ...check,
+            message: sanitizeTerminalText(check.message),
+        })),
+    }));
+}
+//# sourceMappingURL=terminal-safe.js.map

package/dist/lib/terminal-safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-safe.js","sourceRoot":"","sources":["../../src/lib/terminal-safe.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AASH,oDAGC;AAUD,sDASC;AA3BD;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,4CAA4C;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,OAAuB;IAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,GAAG,MAAM;QACT,SAAS,EAAE,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,GAAG,KAAK;YACR,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;SAC7C,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memnexus-ai/cli",
-  "version": "1.7.223",
+  "version": "1.7.225",
   "description": "Command-line interface for MemNexus Core API",
   "main": "dist/index.js",
   "bin": {
@@ -34,7 +34,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@memnexus-ai/typescript-sdk": "^1.73.2",
+    "@memnexus-ai/typescript-sdk": "^1.73.3",
     "@modelcontextprotocol/sdk": "^1.27.1",
     "axios": "^1.13.6",
     "chalk": "^5.3.0",