@provartesting/provardx-cli 1.5.0-beta → 1.5.0-beta.10

package/lib/mcp/security/pathPolicy.d.ts

@@ -10,5 +10,10 @@ export declare class PathPolicyError extends Error {
  * - PATH_NOT_ALLOWED — resolved path is outside all allowed roots
  *
  * When allowedPaths is empty, all paths are permitted (unrestricted mode).
+ *
+ * Symlinks are resolved via fs.realpathSync so that a symlink inside an allowed
+ * directory pointing to a location outside it cannot bypass containment.
+ * If the path does not yet exist (e.g. an output file to be created), the parent
+ * directory is resolved instead and the basename re-attached.
  */
 export declare function assertPathAllowed(filePath: string, allowedPaths: string[]): void;

package/lib/mcp/security/pathPolicy.js

@@ -4,6 +4,7 @@
  * Licensed under the BSD 3-Clause license.
  * For full license text, see LICENSE.md file in the repo root or https://opensource.org/licenses/BSD-3-Clause
  */
+import fs from 'node:fs';
 import path from 'node:path';
 export class PathPolicyError extends Error {
     code;
@@ -21,6 +22,11 @@ export class PathPolicyError extends Error {
  * - PATH_NOT_ALLOWED — resolved path is outside all allowed roots
  *
  * When allowedPaths is empty, all paths are permitted (unrestricted mode).
+ *
+ * Symlinks are resolved via fs.realpathSync so that a symlink inside an allowed
+ * directory pointing to a location outside it cannot bypass containment.
+ * If the path does not yet exist (e.g. an output file to be created), the parent
+ * directory is resolved instead and the basename re-attached.
  */
 export function assertPathAllowed(filePath, allowedPaths) {
     // Check the original path for `..` segments before any normalization resolves them away
@@ -28,8 +34,30 @@ export function assertPathAllowed(filePath, allowedPaths) {
     if (rawSegments.some((s) => s === '..')) {
         throw new PathPolicyError('PATH_TRAVERSAL', `Path traversal detected: ${filePath}`);
     }
-    const resolved = path.resolve(filePath);
-    const resolvedAllowed = allowedPaths.map((p) => path.resolve(path.normalize(p)));
+    // Resolve symlinks so a symlink inside an allowed dir that points outside cannot bypass
+    // the containment check. Fall back to lexical resolution when the path doesn't exist yet.
+    let resolved;
+    try {
+        resolved = fs.realpathSync(filePath);
+    }
+    catch {
+        // Path doesn't exist — resolve the parent (which should exist) to catch symlinks there
+        const parent = path.dirname(path.resolve(filePath));
+        try {
+            resolved = path.join(fs.realpathSync(parent), path.basename(filePath));
+        }
+        catch {
+            resolved = path.resolve(filePath);
+        }
+    }
+    const resolvedAllowed = allowedPaths.map((p) => {
+        try {
+            return fs.realpathSync(p);
+        }
+        catch {
+            return path.resolve(path.normalize(p));
+        }
+    });
     if (resolvedAllowed.length > 0 &&
         !resolvedAllowed.some((base) => resolved === base || resolved.startsWith(base + path.sep))) {
         throw new PathPolicyError('PATH_NOT_ALLOWED', `Path "${resolved}" is not within allowed paths: [${resolvedAllowed.join(', ')}]`);

package/lib/mcp/security/pathPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"pathPolicy.js","sourceRoot":"","sources":["../../../src/mcp/security/pathPolicy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxB,IAAI,CAAS;IAC7B,YAAmB,IAAY,EAAE,OAAe;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAAsB;IACxE,wFAAwF;IACxF,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,4BAA4B,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,IACE,eAAe,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAC1F,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,SAAS,QAAQ,mCAAmC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"pathPolicy.js","sourceRoot":"","sources":["../../../src/mcp/security/pathPolicy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxB,IAAI,CAAS;IAC7B,YAAmB,IAAY,EAAE,OAAe;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAAsB;IACxE,wFAAwF;IACxF,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,4BAA4B,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,wFAAwF;IACxF,0FAA0F;IAC1F,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,uFAAuF;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IACE,eAAe,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAC1F,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,SAAS,QAAQ,mCAAmC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/lib/mcp/server.js

@@ -4,9 +4,15 @@
  * Licensed under the BSD 3-Clause license.
  * For full license text, see LICENSE.md file in the repo root or https://opensource.org/licenses/BSD-3-Clause
  */
+import { createRequire } from 'node:module';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
 import { log } from './logging/logger.js';
+const requireJson = createRequire(import.meta.url);
+const SERVER_VERSION = requireJson('../../package.json').version;
 import { registerProjectInspect } from './tools/projectInspect.js';
 import { registerPageObjectGenerate } from './tools/pageObjectGenerate.js';
 import { registerPageObjectValidate } from './tools/pageObjectValidate.js';
@@ -17,22 +23,27 @@ import { registerTestPlanValidate } from './tools/testPlanValidate.js';
 import { registerProjectValidateFromPath } from './tools/projectValidateFromPath.js';
 import { registerAllPropertiesTools } from './tools/propertiesTools.js';
 import { registerAllQualityHubTools } from './tools/qualityHubTools.js';
+import { registerAllQualityHubApiTools } from './tools/qualityHubApiTools.js';
 import { registerAllAutomationTools } from './tools/automationTools.js';
 import { registerAllDefectTools } from './tools/defectTools.js';
 import { registerAllAntTools } from './tools/antTools.js';
 import { registerAllRcaTools } from './tools/rcaTools.js';
 import { registerAllTestPlanTools } from './tools/testPlanTools.js';
+import { registerAllNitroXTools } from './tools/nitroXTools.js';
+import { registerAllTestCaseStepTools } from './tools/testCaseStepTools.js';
+import { registerAllConnectionTools } from './tools/connectionTools.js';
+import { registerAllPrompts } from './prompts/index.js';
 export function createProvarMcpServer(config) {
     log('info', 'Creating Provar MCP server', { allowedPaths: config.allowedPaths });
     const server = new McpServer({
         name: 'provar-mcp',
-        version: '1.0.0',
+        version: SERVER_VERSION,
     });
     // ── Sanity-check tool ────────────────────────────────────────────────────────
     server.tool('provardx.ping', 'Sanity-check tool. Echoes back a message with a timestamp. Use this to verify the MCP server is reachable before calling other tools.', {
         message: z.string().optional().default('ping').describe('Optional message to echo back'),
     }, ({ message }) => {
-        const result = { pong: message, ts: new Date().toISOString(), server: 'provar-mcp@1.0.0' };
+        const result = { pong: message, ts: new Date().toISOString(), server: `provar-mcp@${SERVER_VERSION}` };
         return {
             content: [{ type: 'text', text: JSON.stringify(result) }],
             structuredContent: result,
@@ -49,11 +60,47 @@ export function createProvarMcpServer(config) {
     registerProjectValidateFromPath(server, config);
     registerAllPropertiesTools(server, config);
     registerAllQualityHubTools(server);
-    registerAllAutomationTools(server);
+    registerAllQualityHubApiTools(server);
+    registerAllAutomationTools(server, config);
     registerAllDefectTools(server);
     registerAllAntTools(server, config);
-    registerAllRcaTools(server);
+    registerAllRcaTools(server, config);
     registerAllTestPlanTools(server, config);
+    registerAllNitroXTools(server, config);
+    registerAllTestCaseStepTools(server, config);
+    registerAllConnectionTools(server, config);
+    // ── Provar prompts ───────────────────────────────────────────────────────────
+    registerAllPrompts(server);
+    // ── Documentation resources ──────────────────────────────────────────────────
+    const docsDir = join(dirname(fileURLToPath(import.meta.url)), 'docs');
+    server.resource('provar-step-reference', 'provar://docs/step-reference', {
+        description: 'Canonical reference for all Provar XML test step API IDs, argument formats, validation rules, and corpus-verified examples. Use this to understand correct step structure when generating or reviewing test cases.',
+        mimeType: 'text/markdown',
+    }, () => {
+        try {
+            const content = readFileSync(join(docsDir, 'PROVAR_TEST_STEP_REFERENCE.md'), 'utf-8');
+            return {
+                contents: [
+                    {
+                        uri: 'provar://docs/step-reference',
+                        mimeType: 'text/markdown',
+                        text: content,
+                    },
+                ],
+            };
+        }
+        catch {
+            return {
+                contents: [
+                    {
+                        uri: 'provar://docs/step-reference',
+                        mimeType: 'text/markdown',
+                        text: '# Provar Test Step Reference\n\nReference doc not found. If you are developing from source, rebuild the package. Otherwise, reinstall or upgrade the plugin/package and try again.',
+                    },
+                ],
+            };
+        }
+    });
     return server;
 }
 //# sourceMappingURL=server.js.map

package/lib/mcp/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAMpE,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,GAAG,CAAC,MAAM,EAAE,4BAA4B,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAEjF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,gFAAgF;IAChF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,uIAAuI,EACvI;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;KACzF,EACD,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC3F,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,gFAAgF;IAChF,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAClC,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,+BAA+B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAE1C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,cAAc,GAAY,WAAW,CAAC,oBAAoB,CAAyB,CAAC,OAAO,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAMxD,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,GAAG,CAAC,MAAM,EAAE,4BAA4B,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAEjF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,gFAAgF;IAChF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,uIAAuI,EACvI;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;KACzF,EACD,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,cAAc,EAAE,EAAE,CAAC;QACvG,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,gFAAgF;IAChF,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAClC,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,+BAA+B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnC,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACtC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3C,gFAAgF;IAChF,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3B,gFAAgF;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,CAAC,QAAQ,CACb,uBAAuB,EACvB,8BAA8B,EAC9B;QACE,WAAW,EACT,oNAAoN;QACtN,QAAQ,EAAE,eAAe;KAC1B,EACD,GAAG,EAAE;QACH,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,+BAA+B,CAAC,EAAE,OAAO,CAAC,CAAC;YACtF,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,8BAA8B;wBACnC,QAAQ,EAAE,eAAe;wBACzB,IAAI,EAAE,OAAO;qBACd;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,8BAA8B;wBACnC,QAAQ,EAAE,eAAe;wBACzB,IAAI,EAAE,oLAAoL;qBAC3L;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/mcp/tools/antTools.d.ts

@@ -18,4 +18,19 @@ export interface AntValidationResult {
 }
 /** Pure function — exported for unit testing */
 export declare function validateAntXml(xmlContent: string): AntValidationResult;
+export interface JUnitStepResult {
+    testItemId: string;
+    title: string;
+    status: 'pass' | 'fail' | 'skip';
+    errorMessage?: string;
+}
+export interface JUnitParseResult {
+    steps: JUnitStepResult[];
+    warning?: string;
+}
+/**
+ * Scan a Provar results directory for JUnit XML files and return structured step results.
+ * Returns an empty steps array (+ optional warning) when no XML is found or parsing fails.
+ */
+export declare function parseJUnitResults(resultsDir: string): JUnitParseResult;
 export declare function registerAllAntTools(server: McpServer, config: ServerConfig): void;

package/lib/mcp/tools/antTools.js

@@ -25,9 +25,7 @@ const FilesetSchema = z.object({
         .describe('Specific .testcase or .testplan file names to include (e.g. ["Login.testcase"]). Omit to run everything in dir.'),
 });
 const PlanFeatureSchema = z.object({
-    name: z
-        .enum(['PDF', 'PIECHART', 'EMAIL', 'JUNIT'])
-        .describe('Feature name (PDF, PIECHART, EMAIL, JUNIT)'),
+    name: z.enum(['PDF', 'PIECHART', 'EMAIL', 'JUNIT']).describe('Feature name (PDF, PIECHART, EMAIL, JUNIT)'),
     type: z.enum(['OUTPUT', 'NOTIFICATION']).describe('Feature type'),
     enabled: z.boolean().describe('Whether this feature is enabled'),
 });
@@ -103,14 +101,8 @@ export function registerAntGenerate(server, config) {
             .string()
             .default('Full Screen')
             .describe('Browser window configuration (e.g. "Full Screen").'),
-        web_browser_provider_name: z
-            .string()
-            .default('Desktop')
-            .describe('Browser provider name (e.g. "Desktop").'),
-        web_browser_device_name: z
-            .string()
-            .default('Full Screen')
-            .describe('Browser device name (e.g. "Full Screen").'),
+        web_browser_provider_name: z.string().default('Desktop').describe('Browser provider name (e.g. "Desktop").'),
+        web_browser_device_name: z.string().default('Full Screen').describe('Browser device name (e.g. "Full Screen").'),
         test_environment: z
             .string()
             .default('')
@@ -146,24 +138,18 @@ export function registerAntGenerate(server, config) {
             .boolean()
             .optional()
             .describe('When true, the ANT build does not fail even if tests fail. Useful for CI pipelines that collect results separately.'),
-        invoke_test_run_monitor: z
-            .boolean()
-            .default(true)
-            .describe('Enable the Provar test run monitor.'),
+        invoke_test_run_monitor: z.boolean().default(true).describe('Enable the Provar test run monitor.'),
         // ── Secrets / security ──────────────────────────────────────────────────
         secrets_password: z
             .string()
             .default('${env.ProvarSecretsPassword}')
-            .describe('Password for the Provar secrets store. Defaults to reading from the ProvarSecretsPassword environment variable.'),
+            .describe('Encryption key used to decrypt the Provar .secrets file (the password string itself, not a file path). Defaults to reading from the ProvarSecretsPassword environment variable.'),
         test_environment_secrets_password: z
             .string()
             .optional()
             .describe('Per-environment secrets password. Defaults to reading from the ProvarSecretsPassword_EnvName environment variable.'),
         // ── Test Cycle ──────────────────────────────────────────────────────────
-        test_cycle_path: z
-            .string()
-            .optional()
-            .describe('Path to a TestCycle folder (used with test cycle reporting).'),
+        test_cycle_path: z.string().optional().describe('Path to a TestCycle folder (used with test cycle reporting).'),
         test_cycle_run_type: z
             .enum(['ALL', 'FAILED', 'NEW'])
             .optional()
@@ -182,14 +168,8 @@ export function registerAntGenerate(server, config) {
             .string()
             .optional()
             .describe('Where to write the build.xml file (returned in response). Required when dry_run=false.'),
-        overwrite: z
-            .boolean()
-            .default(false)
-            .describe('Overwrite output_path if the file already exists.'),
-        dry_run: z
-            .boolean()
-            .default(true)
-            .describe('true = return XML only (default); false = write to output_path.'),
+        overwrite: z.boolean().default(false).describe('Overwrite output_path if the file already exists.'),
+        dry_run: z.boolean().default(true).describe('true = return XML only (default); false = write to output_path.'),
     }, (input) => {
         const requestId = makeRequestId();
         log('info', 'provar.ant.generate', {
@@ -198,6 +178,17 @@ export function registerAntGenerate(server, config) {
             dry_run: input.dry_run,
         });
         try {
+            // Validate all path inputs before writing anything — these get embedded in the
+            // generated ANT build.xml and would be accessed by ANT at execution time.
+            assertPathAllowed(input.provar_home, config.allowedPaths);
+            assertPathAllowed(input.project_path, config.allowedPaths);
+            assertPathAllowed(input.results_path, config.allowedPaths);
+            if (input.license_path)
+                assertPathAllowed(input.license_path, config.allowedPaths);
+            if (input.smtp_path)
+                assertPathAllowed(input.smtp_path, config.allowedPaths);
+            if (input.project_cache_path)
+                assertPathAllowed(input.project_cache_path, config.allowedPaths);
             const xmlContent = buildAntXml(input);
             const filePath = input.output_path ? path.resolve(input.output_path) : undefined;
             let written = false;
@@ -226,7 +217,7 @@ export function registerAntGenerate(server, config) {
         }
         catch (err) {
             const error = err;
-            const errResult = makeError(error instanceof PathPolicyError ? error.code : (error.code ?? 'GENERATE_ERROR'), error.message, requestId, false);
+            const errResult = makeError(error instanceof PathPolicyError ? error.code : error.code ?? 'GENERATE_ERROR', error.message, requestId, false);
             log('error', 'provar.ant.generate failed', { requestId, error: error.message });
             return { isError: true, content: [{ type: 'text', text: JSON.stringify(errResult) }] };
         }
@@ -240,14 +231,8 @@ export function registerAntValidate(server, config) {
         '<Run-Test-Case> with required attributes (provarHome, projectPath, resultsPath),',
         'and at least one <fileset> child. Returns is_valid, issues list, and a validity_score.',
     ].join(' '), {
-        content: z
-            .string()
-            .optional()
-            .describe('XML content to validate directly'),
-        file_path: z
-            .string()
-            .optional()
-            .describe('Path to the build.xml file to validate'),
+        content: z.string().optional().describe('XML content to validate directly'),
+        file_path: z.string().optional().describe('Path to the build.xml file to validate'),
     }, ({ content, file_path }) => {
         const requestId = makeRequestId();
         log('info', 'provar.ant.validate', { requestId, has_content: !!content, file_path });
@@ -393,13 +378,11 @@ function escapeXmlAttr(value) {
     return value
         .replace(/&/g, '&amp;')
         .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;')
         .replace(/</g, '&lt;')
         .replace(/>/g, '&gt;');
 }
-const REQUIRED_TASKDEF_CLASSNAMES = [
-    'com.provar.testrunner.ant.CompileTask',
-    'com.provar.testrunner.ant.RunnerTask',
-];
+const REQUIRED_TASKDEF_CLASSNAMES = ['com.provar.testrunner.ant.CompileTask', 'com.provar.testrunner.ant.RunnerTask'];
 const VALID_BROWSERS = ['Chrome', 'Chrome_Headless', 'Firefox', 'Edge', 'Edge_Legacy', 'Safari', 'IE'];
 const VALID_CACHE = ['Reuse', 'Refresh', 'Reload'];
 const VALID_OUTPUT_LEVELS = ['BASIC', 'WARNING', 'DEBUG'];
@@ -456,19 +439,43 @@ function validateProjectStructure(project, defaultTarget, issues) {
 }
 function validateRtcEnumAttrs(rtc, webBrowser, issues) {
     if (webBrowser && !VALID_BROWSERS.includes(webBrowser)) {
-        issues.push({ rule_id: 'ANT_030', severity: 'WARNING', message: `webBrowser "${webBrowser}" is not a recognised value. Expected one of: ${VALID_BROWSERS.join(', ')}.`, applies_to: 'Run-Test-Case', suggestion: `Use one of the supported browser values: ${VALID_BROWSERS.join(', ')}.` });
+        issues.push({
+            rule_id: 'ANT_030',
+            severity: 'WARNING',
+            message: `webBrowser "${webBrowser}" is not a recognised value. Expected one of: ${VALID_BROWSERS.join(', ')}.`,
+            applies_to: 'Run-Test-Case',
+            suggestion: `Use one of the supported browser values: ${VALID_BROWSERS.join(', ')}.`,
+        });
     }
     const metadataCache = rtc['@_salesforceMetadataCache'];
     if (metadataCache && !VALID_CACHE.includes(metadataCache)) {
-        issues.push({ rule_id: 'ANT_031', severity: 'WARNING', message: `salesforceMetadataCache "${metadataCache}" is not a recognised value. Expected one of: ${VALID_CACHE.join(', ')}.`, applies_to: 'Run-Test-Case', suggestion: `Use one of: ${VALID_CACHE.join(', ')}.` });
+        issues.push({
+            rule_id: 'ANT_031',
+            severity: 'WARNING',
+            message: `salesforceMetadataCache "${metadataCache}" is not a recognised value. Expected one of: ${VALID_CACHE.join(', ')}.`,
+            applies_to: 'Run-Test-Case',
+            suggestion: `Use one of: ${VALID_CACHE.join(', ')}.`,
+        });
     }
     const testOutputLevel = rtc['@_testOutputlevel'];
     if (testOutputLevel && !VALID_OUTPUT_LEVELS.includes(testOutputLevel)) {
-        issues.push({ rule_id: 'ANT_032', severity: 'WARNING', message: `testOutputlevel "${testOutputLevel}" is not a recognised value. Expected one of: ${VALID_OUTPUT_LEVELS.join(', ')}.`, applies_to: 'Run-Test-Case', suggestion: `Use one of: ${VALID_OUTPUT_LEVELS.join(', ')}.` });
+        issues.push({
+            rule_id: 'ANT_032',
+            severity: 'WARNING',
+            message: `testOutputlevel "${testOutputLevel}" is not a recognised value. Expected one of: ${VALID_OUTPUT_LEVELS.join(', ')}.`,
+            applies_to: 'Run-Test-Case',
+            suggestion: `Use one of: ${VALID_OUTPUT_LEVELS.join(', ')}.`,
+        });
     }
     const disposition = rtc['@_resultsPathDisposition'];
     if (disposition && !VALID_DISPOSITIONS.includes(disposition)) {
-        issues.push({ rule_id: 'ANT_033', severity: 'WARNING', message: `resultsPathDisposition "${disposition}" is not a recognised value. Expected one of: ${VALID_DISPOSITIONS.join(', ')}.`, applies_to: 'Run-Test-Case', suggestion: `Use one of: ${VALID_DISPOSITIONS.join(', ')}.` });
+        issues.push({
+            rule_id: 'ANT_033',
+            severity: 'WARNING',
+            message: `resultsPathDisposition "${disposition}" is not a recognised value. Expected one of: ${VALID_DISPOSITIONS.join(', ')}.`,
+            applies_to: 'Run-Test-Case',
+            suggestion: `Use one of: ${VALID_DISPOSITIONS.join(', ')}.`,
+        });
     }
 }
 function validateRunTestCase(rtc, issues) {
@@ -478,22 +485,52 @@ function validateRunTestCase(rtc, issues) {
     const webBrowser = rtc['@_webBrowser'] ?? null;
     const testEnvironment = rtc['@_testEnvironment'] ?? null;
     if (!provarHome) {
-        issues.push({ rule_id: 'ANT_021', severity: 'ERROR', message: '<Run-Test-Case> missing required "provarHome" attribute.', applies_to: 'Run-Test-Case', suggestion: 'Add provarHome="${provar.home}" to <Run-Test-Case>.' });
+        issues.push({
+            rule_id: 'ANT_021',
+            severity: 'ERROR',
+            message: '<Run-Test-Case> missing required "provarHome" attribute.',
+            applies_to: 'Run-Test-Case',
+            suggestion: 'Add provarHome="${provar.home}" to <Run-Test-Case>.',
+        });
     }
     if (!projectPath) {
-        issues.push({ rule_id: 'ANT_022', severity: 'ERROR', message: '<Run-Test-Case> missing required "projectPath" attribute.', applies_to: 'Run-Test-Case', suggestion: 'Add projectPath="${testproject.home}" to <Run-Test-Case>.' });
+        issues.push({
+            rule_id: 'ANT_022',
+            severity: 'ERROR',
+            message: '<Run-Test-Case> missing required "projectPath" attribute.',
+            applies_to: 'Run-Test-Case',
+            suggestion: 'Add projectPath="${testproject.home}" to <Run-Test-Case>.',
+        });
     }
     if (!resultsPath) {
-        issues.push({ rule_id: 'ANT_023', severity: 'ERROR', message: '<Run-Test-Case> missing required "resultsPath" attribute.', applies_to: 'Run-Test-Case', suggestion: 'Add resultsPath="${testproject.results}" to <Run-Test-Case>.' });
+        issues.push({
+            rule_id: 'ANT_023',
+            severity: 'ERROR',
+            message: '<Run-Test-Case> missing required "resultsPath" attribute.',
+            applies_to: 'Run-Test-Case',
+            suggestion: 'Add resultsPath="${testproject.results}" to <Run-Test-Case>.',
+        });
     }
     validateRtcEnumAttrs(rtc, webBrowser, issues);
     const filesets = rtc['fileset'] ?? [];
     if (filesets.length === 0) {
-        issues.push({ rule_id: 'ANT_040', severity: 'ERROR', message: '<Run-Test-Case> has no <fileset> children — no tests will be selected.', applies_to: 'Run-Test-Case', suggestion: 'Add at least one <fileset dir="..."/> pointing to your tests or plans folder.' });
+        issues.push({
+            rule_id: 'ANT_040',
+            severity: 'ERROR',
+            message: '<Run-Test-Case> has no <fileset> children — no tests will be selected.',
+            applies_to: 'Run-Test-Case',
+            suggestion: 'Add at least one <fileset dir="..."/> pointing to your tests or plans folder.',
+        });
     }
     for (const [i, fsEntry] of filesets.entries()) {
         if (!fsEntry['@_dir']) {
-            issues.push({ rule_id: 'ANT_041', severity: 'ERROR', message: `<fileset> at index ${i} is missing required "dir" attribute.`, applies_to: 'fileset', suggestion: 'Add dir="..." to each <fileset> element.' });
+            issues.push({
+                rule_id: 'ANT_041',
+                severity: 'ERROR',
+                message: `<fileset> at index ${i} is missing required "dir" attribute.`,
+                applies_to: 'fileset',
+                suggestion: 'Add dir="..." to each <fileset> element.',
+            });
         }
     }
     return { provarHome, projectPath, resultsPath, webBrowser, testEnvironment, filesetCount: filesets.length };
@@ -594,6 +631,135 @@ function finalizeAnt(issues, provarHome, projectPath, resultsPath, webBrowser, t
         issues,
     };
 }
+function extractFailureText(el) {
+    if (!el)
+        return undefined;
+    if (typeof el === 'string')
+        return el.trim() || undefined;
+    if (typeof el === 'object') {
+        const obj = el;
+        // Prefer CDATA body ('#text') — it has the specific error. Fall back to 'message' attribute.
+        const body = obj['#text']?.trim();
+        const msg = obj['message']?.trim();
+        if (body && msg && body !== msg)
+            return `${msg}: ${body}`;
+        return body ?? msg;
+    }
+    return undefined;
+}
+function extractStepsFromJUnit(parsed) {
+    const steps = [];
+    let idx = 0;
+    // Normalise to array of suites — handles both <testsuites> and bare <testsuite>
+    let suites = [];
+    if (parsed['testsuites']) {
+        const inner = parsed['testsuites']['testsuite'];
+        suites = Array.isArray(inner)
+            ? inner
+            : inner
+                ? [inner]
+                : [];
+    }
+    else if (parsed['testsuite']) {
+        const ts = parsed['testsuite'];
+        suites = Array.isArray(ts) ? ts : [ts];
+    }
+    for (const suite of suites) {
+        const rawTc = suite['testcase'];
+        if (!rawTc)
+            continue;
+        const testcases = Array.isArray(rawTc)
+            ? rawTc
+            : [rawTc];
+        for (const tc of testcases) {
+            idx++;
+            // Provar JUnit: name = test case file name (no attribute prefix since attributeNamePrefix: '')
+            const title = tc['name'] ?? `Test ${idx}`;
+            const hasFailure = 'failure' in tc || 'error' in tc;
+            const hasSkipped = 'skipped' in tc;
+            let status = 'pass';
+            if (hasFailure)
+                status = 'fail';
+            else if (hasSkipped)
+                status = 'skip';
+            const errorMessage = extractFailureText(tc['failure'] ?? tc['error']);
+            const step = { testItemId: String(idx), title, status };
+            if (errorMessage)
+                step.errorMessage = errorMessage;
+            steps.push(step);
+        }
+    }
+    return steps;
+}
+function findXmlFiles(dir) {
+    const results = [];
+    try {
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+            if (entry.isFile() && entry.name.endsWith('.xml') && !entry.name.startsWith('.')) {
+                results.push(path.join(dir, entry.name));
+            }
+        }
+    }
+    catch {
+        // ignore unreadable dirs
+    }
+    return results;
+}
+/**
+ * Scan a Provar results directory for JUnit XML files and return structured step results.
+ * Returns an empty steps array (+ optional warning) when no XML is found or parsing fails.
+ */
+export function parseJUnitResults(resultsDir) {
+    if (!fs.existsSync(resultsDir)) {
+        return { steps: [], warning: `Results directory not found: ${resultsDir}` };
+    }
+    const xmlFiles = findXmlFiles(resultsDir);
+    if (xmlFiles.length === 0) {
+        return {
+            steps: [],
+            warning: 'No JUnit XML files found in results directory — structured step output unavailable.',
+        };
+    }
+    const parser = new XMLParser({
+        ignoreAttributes: false,
+        attributeNamePrefix: '',
+        textNodeName: '#text',
+        allowBooleanAttributes: true,
+        parseAttributeValue: false,
+        isArray: (tagName) => ['testsuite', 'testcase'].includes(tagName),
+    });
+    const allSteps = [];
+    let parsedAny = false;
+    let parseFailures = 0;
+    for (const xmlFile of xmlFiles) {
+        try {
+            const content = fs.readFileSync(xmlFile, 'utf-8');
+            const parsed = parser.parse(content);
+            const steps = extractStepsFromJUnit(parsed);
+            allSteps.push(...steps);
+            parsedAny = true;
+        }
+        catch {
+            parseFailures++;
+        }
+    }
+    if (!parsedAny) {
+        return {
+            steps: [],
+            warning: 'JUnit XML files found but could not be parsed — structured step output unavailable.',
+        };
+    }
+    if (allSteps.length === 0) {
+        return {
+            steps: [],
+            warning: 'JUnit XML found but no test steps could be extracted — files may not be standard JUnit format.',
+        };
+    }
+    const warning = parseFailures > 0
+        ? `${parseFailures} JUnit XML file(s) could not be parsed — step data may be incomplete.`
+        : undefined;
+    return { steps: allSteps, warning };
+}
 // ── Registration ──────────────────────────────────────────────────────────────
 export function registerAllAntTools(server, config) {
     registerAntGenerate(server, config);