@nxuss/lemma 1.17.0 → 1.18.0

package/dist/esm/mcp/tools.js

@@ -5,50 +5,51 @@ import { execSync, execFileSync, spawn } from "child_process";
 import os from "os";
 import axios from "axios";
 import * as ts from "typescript";
-import { SemanticScrubber } from "../security/SemanticScrubber.js";
-import { ComplexityRouter } from "../proxy/ComplexityRouter.js";
-import { squeezeCode, squeezePrompt, pruneHistoryMessages, generateAstDiff } from "../utils/ContextSqueezer.js";
-import { reportSavings, reportCost } from "../utils/reportSavings.js";
-import { getProxyPort, safeResolvePath, logError, logWarn, estimateTokensFromResult, isCommandAllowed, loadAllowedCommands } from "./utils.js";
-import { computeFingerprint } from "../utils/FileFingerprint.js";
-import { analyzeBlameHeat } from "../utils/GitBlameHeat.js";
-import { analyzeTypeCoverage } from "../utils/TypeCoverage.js";
-import { buildImportTree } from "../utils/ImportTreeContext.js";
-import { readTokenBudgeted } from "../utils/TokenBudgetedReader.js";
-import { bulkFileDigest } from "../utils/BulkFileDigest.js";
-import { autoContextBundle } from "../utils/AutoContextBundle.js";
-import { checkRepeat, recordOutput } from "../utils/RepeatGuard.js";
-import { saveCheckpoint, loadLatestCheckpoint, loadRecentCheckpoints, buildCheckpointSummary } from "../utils/ConversationCheckpoint.js";
-import { runTestAutofix } from "../utils/TestAutofixInterceptor.js";
-import { findPattern, storePattern, getPatternStats } from "../utils/PromptPatternCache.js";
-import { runAnalysis, parseDiff } from "../pr-review/PRReviewEngine.js";
-import { ReviewStore } from "../pr-review/ReviewStore.js";
-import { runPRReview } from "../pr-review/reviewRunner.js";
-import { getBrain, deriveProjectId, currentGitContext } from "../subconscious/TheBrainV2.js";
-import { collapseContext } from "../utils/ContextCollapser.js";
-import { getSymbolSurgicalContext } from "../utils/SymbolSurgicalContext.js";
-import { compressWormhole } from "../utils/WormholeCompressor.js";
-import { generateExecutiveReport } from "../utils/ExecutiveReport.js";
-import { surgicalASTInsert } from "../utils/SurgicalASTInsert.js";
-import { getInfraToolDefinitions, getInfraToolHandlers, INFRA_TOOL_NAMES } from "../infra/mcp-tools.js";
-import { resolveToolSurface, buildToolboxCatalog } from "./tool-profiles.js";
-import { lookupStateHash, storeStateHash } from "../utils/StateHashCache.js";
-import { recordReceiptEvent, getReceiptSummary, getLedgerLength } from "../utils/TokenReceipt.js";
-import { distillCommandOutput, buildDistillFooter, readRegion } from "../utils/CommandOutputDistiller.js";
-import { findMatch, reindentReplacement } from "../utils/PatchMatcher.js";
-import { registerTaskHandlers, runAsTask, TASK_CAPABLE_TOOLS } from "./tasks.js";
-import { searchWorkspace, groupSearchResults, parseExtensionFilter } from "../utils/WorkspaceSearch.js";
-import { rankCandidates } from "../utils/LocalPrefilter.js";
-import { checkAlreadySent, recordSent, getLastEmitted } from "../utils/ReadWorkspaceCache.js";
-import { shouldEmitDelta } from "../utils/OutputDelta.js";
-import { ledgerKey, checkOutput, recordOutput as recordLedgerOutput } from "../utils/OutputLedger.js";
-import { buildDepGraphMap, bfsDepGraph } from "../utils/DepGraph.js";
-import { getOrExtractSymbols } from "../utils/AstSymbolCache.js";
-import { warmNeighbors, registerSymbolExtractor } from "../utils/SpeculativeWarmer.js";
-import { findAffectedTests, formatAffectedTests, changedFilesFromGit } from "../utils/AffectedTests.js";
-import { mapSqueezedToOriginal, withLineNumbers, sequentialNumbers } from "../utils/LineNumberMap.js";
-import { fileOutline, formatOutline } from "../utils/FileOutline.js";
-import { getCachedSearch, setCachedSearch } from "../utils/SearchCache.js";
+import { SemanticScrubber } from "../security/SemanticScrubber";
+import { ComplexityRouter } from "../proxy/ComplexityRouter";
+import { squeezeCode, squeezePrompt, pruneHistoryMessages, generateAstDiff, stripComments, stripImports, compactWhitespace } from "../utils/ContextSqueezer";
+import { reportSavings, reportCost } from "../utils/reportSavings";
+import { getProxyPort, safeResolvePath, logError, logWarn, estimateTokensFromResult, isCommandAllowed, loadAllowedCommands } from "./utils";
+import { computeFingerprint } from "../utils/FileFingerprint";
+import { detectProjectName } from "../utils/ProjectIdentity";
+import { analyzeBlameHeat } from "../utils/GitBlameHeat";
+import { analyzeTypeCoverage } from "../utils/TypeCoverage";
+import { buildImportTree } from "../utils/ImportTreeContext";
+import { readTokenBudgeted } from "../utils/TokenBudgetedReader";
+import { bulkFileDigest } from "../utils/BulkFileDigest";
+import { autoContextBundle } from "../utils/AutoContextBundle";
+import { checkRepeat, recordOutput } from "../utils/RepeatGuard";
+import { saveCheckpoint, loadLatestCheckpoint, loadRecentCheckpoints, buildCheckpointSummary } from "../utils/ConversationCheckpoint";
+import { runTestAutofix } from "../utils/TestAutofixInterceptor";
+import { findPattern, storePattern, getPatternStats } from "../utils/PromptPatternCache";
+import { runAnalysis, parseDiff } from "../pr-review/PRReviewEngine";
+import { ReviewStore } from "../pr-review/ReviewStore";
+import { runPRReview } from "../pr-review/reviewRunner";
+import { getBrain, deriveProjectId, currentGitContext } from "../subconscious/TheBrainV2";
+import { collapseContext } from "../utils/ContextCollapser";
+import { getSymbolSurgicalContext } from "../utils/SymbolSurgicalContext";
+import { compressWormhole } from "../utils/WormholeCompressor";
+import { generateExecutiveReport } from "../utils/ExecutiveReport";
+import { surgicalASTInsert } from "../utils/SurgicalASTInsert";
+import { getInfraToolDefinitions, getInfraToolHandlers, INFRA_TOOL_NAMES } from "../infra/mcp-tools";
+import { resolveToolSurface, buildToolboxCatalog } from "./tool-profiles";
+import { lookupStateHash, storeStateHash } from "../utils/StateHashCache";
+import { recordReceiptEvent, getReceiptSummary, getLedgerLength } from "../utils/TokenReceipt";
+import { distillCommandOutput, buildDistillFooter, readRegion } from "../utils/CommandOutputDistiller";
+import { findMatch, reindentReplacement } from "../utils/PatchMatcher";
+import { registerTaskHandlers, runAsTask, TASK_CAPABLE_TOOLS } from "./tasks";
+import { searchWorkspace, groupSearchResults, parseExtensionFilter } from "../utils/WorkspaceSearch";
+import { rankCandidates } from "../utils/LocalPrefilter";
+import { checkAlreadySent, recordSent, getLastEmitted } from "../utils/ReadWorkspaceCache";
+import { shouldEmitDelta } from "../utils/OutputDelta";
+import { ledgerKey, checkOutput, recordOutput as recordLedgerOutput } from "../utils/OutputLedger";
+import { buildDepGraphMap, bfsDepGraph } from "../utils/DepGraph";
+import { getOrExtractSymbols } from "../utils/AstSymbolCache";
+import { warmNeighbors, registerSymbolExtractor } from "../utils/SpeculativeWarmer";
+import { findAffectedTests, formatAffectedTests, changedFilesFromGit } from "../utils/AffectedTests";
+import { mapSqueezedToOriginal, withLineNumbers, sequentialNumbers } from "../utils/LineNumberMap";
+import { fileOutline, formatOutline } from "../utils/FileOutline";
+import { getCachedSearch, setCachedSearch } from "../utils/SearchCache";
 // ── Pro License Gate ──────────────────────────────────────────────────────────
 const LICENSE_FILE = path.join(os.homedir(), '.lemma-cache', 'license.json');
 let _proStatusCache = null;
@@ -2134,7 +2135,7 @@ async function handleGetRoutingAdvice(args) {
 async function handleAutoHeal(args) {
     const apply = !!args?.apply;
     try {
-        const { performAutoHeal: heal } = await import("../cli/lemma-proxy.js");
+        const { performAutoHeal: heal } = await import("../cli/lemma-proxy");
         const res = await heal(apply);
         return { content: [{ type: "text", text: JSON.stringify(res, null, 2) }] };
     }
@@ -2964,11 +2965,27 @@ function buildLocalOnboarding(cwd) {
     catch { /* brain unavailable */ }
     return lines.join("\n");
 }
+// Re-exported for callers/tests that already import detectExpectedProjectName from here —
+// the actual implementation lives in ../utils/ProjectIdentity, shared with the proxy daemon
+// (src/cli/lemma-proxy.ts) so both sides compute "project name" exactly one way.
+export const detectExpectedProjectName = detectProjectName;
 async function handleGetProjectOnboarding(_args) {
     const cwd = process.cwd();
     try {
         const port = getProxyPort();
-        const response = await axios.get(`http://localhost:${port}/api/project/onboarding`, { timeout: 2000 });
+        // The proxy daemon is one global process per machine, tracked by a single shared
+        // ~/.lemma-cache/proxy.port file — every MCP client on the box points at whichever
+        // daemon happens to be listening there, regardless of which project it's actually
+        // running in. Its project identity is fixed to whatever cwd IT was started from, not
+        // ours. Without expectedProject, a daemon started for a different project answers with
+        // THAT project's stack/files/memories — a real cross-project data leak, not a cosmetic
+        // bug. The route only returns `markdown` when this matches; otherwise we fall through
+        // to the local (always correctly-scoped) generator below.
+        const expectedProject = detectExpectedProjectName(cwd);
+        const response = await axios.get(`http://localhost:${port}/api/project/onboarding`, {
+            timeout: 2000,
+            params: { expectedProject },
+        });
         if (response.data?.markdown) {
             return { content: [{ type: "text", text: response.data.markdown }] };
         }
@@ -3493,30 +3510,31 @@ async function handleBatchToolCalls(args) {
 // ── TurboSqueeze ─────────────────────────────────────────────────
 async function handleTurboSqueeze(args) {
     const text = args?.text;
-    const stripComments = args?.stripComments !== false;
-    const stripImports = args?.stripImports !== false;
+    const wantStripComments = args?.stripComments !== false;
+    const wantStripImports = args?.stripImports !== false;
     const compactJson = args?.compactJson !== false;
     if (!text)
         throw new Error("text is required");
+    // Delegates to the same stripComments/stripImports/compactWhitespace primitives
+    // squeeze_prompt and the proxy's own cache-miss path use — this used to be a second,
+    // independent regex implementation of the same job that had drifted out of sync: its
+    // naive `//.*$` comment strip mangled any line containing a URL (http://, https://),
+    // a case the shared stripComments already guards against. One implementation now.
     let squeezed = text;
-    // Strip multi-line comments
-    if (stripComments) {
-        squeezed = squeezed.replace(/\/\*[\s\S]*?\*\//g, '');
-        squeezed = squeezed.replace(/\/\/.*$/gm, '');
-    }
-    // Remove empty lines and trim whitespace
-    squeezed = squeezed.replace(/^\s*[\r\n]/gm, '\n');
-    squeezed = squeezed.replace(/^[ \t]+/gm, ' ');
-    squeezed = squeezed.replace(/[ \t]+$/gm, '');
-    // Strip imports
-    if (stripImports) {
-        squeezed = squeezed.replace(/^import\s+[\s\S]*?from\s+['"][\w@\/\.-]+['"];?\s*$/gm, '');
-        squeezed = squeezed.replace(/^import\s+['"][\w@\/\.-]+['"];?\s*$/gm, '');
-        squeezed = squeezed.replace(/^const\s+\w+\s*=\s*require\(['"][\w@\/\.-]+['"]\);?\s*$/gm, '');
-        squeezed = squeezed.replace(/^require\(['"][\w@\/\.-]+['"]\);?\s*$/gm, '');
-    }
-    // Compact JSON
-    if (compactJson) {
+    if (wantStripComments)
+        squeezed = stripComments(squeezed);
+    if (wantStripImports)
+        squeezed = stripImports(squeezed);
+    squeezed = compactWhitespace(squeezed);
+    // Compact JSON — the one genuinely turbosqueeze-specific step, kept as-is, but only when
+    // the input actually looks like JSON. Pre-existing bug found while consolidating this
+    // function: these regexes ran unconditionally whenever compactJson wasn't explicitly
+    // false, so ordinary code went through them too — `{ foo }` in an import statement came
+    // out as `{foo}`, and the same regexes would just as happily squash braces in real
+    // control-flow code. Gate on the input's own shape instead of trusting the caller only
+    // ever sets compactJson for genuine JSON.
+    const looksLikeJson = /^\s*[[{]/.test(squeezed);
+    if (compactJson && looksLikeJson) {
         squeezed = squeezed.replace(/"\s*:\s*/g, '":');
         squeezed = squeezed.replace(/,\s*"/g, ',"');
         squeezed = squeezed.replace(/\[\s+/g, '[');
@@ -3529,7 +3547,7 @@ async function handleTurboSqueeze(args) {
     const ratio = text.length > 0 ? ((1 - squeezed.length / text.length) * 100).toFixed(1) : "0";
     const saved = Math.max(0, text.length - squeezed.length);
     try {
-        const { reportSavings } = await import("../utils/reportSavings.js");
+        const { reportSavings } = await import("../utils/reportSavings");
         reportSavings({ source: "contextSqueeze", charsBefore: text.length, charsAfter: squeezed.length, toolName: "turbosqueeze" });
     }
     catch { }
@@ -3574,7 +3592,7 @@ async function handleCompressContext(args) {
         ...recent,
     ];
     try {
-        const { reportSavings } = await import("../utils/reportSavings.js");
+        const { reportSavings } = await import("../utils/reportSavings");
         reportSavings({ source: "historyPrune", tokens: tokensSaved, toolName: "compress_context" });
     }
     catch { }
@@ -3601,7 +3619,7 @@ async function handleSmarterCache(args) {
             const responseText = topHit.response;
             const tokensSaved = Math.floor(responseText.length / 4);
             try {
-                const { reportSavings } = await import("../utils/reportSavings.js");
+                const { reportSavings } = await import("../utils/reportSavings");
                 reportSavings({ source: "cache", tokens: tokensSaved, toolName: "smarter_cache", query: query.substring(0, 100) });
             }
             catch { }