@stackguide/mcp-server 3.3.0 → 3.8.2

package/dist/utils/logger.d.ts

@@ -14,9 +14,18 @@ declare class Logger {
     warn(message: string, context?: Record<string, unknown>): void;
     error(message: string, context?: Record<string, unknown>): void;
     /**
-     * Log tool execution with timing
-     */
+   * Log tool execution with timing
+   */
     tool(toolName: string, args: Record<string, unknown>, startTime?: number): void;
+    /**
+     * Security audit logging - always logged regardless of level
+     * Use for security-relevant events like SSRF blocks, rate limits, auth failures
+     */
+    audit(event: string, context: Record<string, unknown>): void;
+    /**
+     * Performance metric logging
+     */
+    metric(name: string, value: number, unit: string, context?: Record<string, unknown>): void;
 }
 export declare const logger: Logger;
 export {};

package/dist/utils/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAS3D,cAAM,MAAM;IACV,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAK5B;IAEF,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI;IAI/B,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,GAAG;IAcX,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;CAIhF;AAGD,eAAO,MAAM,MAAM,QAAe,CAAC"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAS3D,cAAM,MAAM;IACV,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAK5B;IAEF,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI;IAI/B,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,GAAG;IAcX,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D;;KAEC;IACD,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAK/E;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAe5D;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;CAO3F;AAGD,eAAO,MAAM,MAAM,QAAe,CAAC"}

package/dist/utils/logger.js

@@ -44,12 +44,40 @@ class Logger {
         this.log('error', message, context);
     }
     /**
-     * Log tool execution with timing
-     */
+   * Log tool execution with timing
+   */
     tool(toolName, args, startTime) {
         const duration = startTime ? `${Date.now() - startTime}ms` : undefined;
         this.info(`Tool: ${toolName}`, { args, duration });
     }
+    /**
+     * Security audit logging - always logged regardless of level
+     * Use for security-relevant events like SSRF blocks, rate limits, auth failures
+     */
+    audit(event, context) {
+        const entry = {
+            timestamp: new Date().toISOString(),
+            level: 'warn',
+            message: `[AUDIT] ${event}`,
+            context: {
+                ...context,
+                auditType: 'security',
+                pid: process.pid
+            }
+        };
+        // Security audits always log regardless of level
+        console.error(this.formatEntry(entry));
+    }
+    /**
+     * Performance metric logging
+     */
+    metric(name, value, unit, context) {
+        this.debug(`Metric: ${name}`, {
+            value,
+            unit,
+            ...context
+        });
+    }
 }
 // Singleton instance
 export const logger = new Logger();

package/dist/utils/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,MAAM,MAAM;IACF,KAAK,GAAa,MAAM,CAAC;IAChB,aAAa,GAA6B;QACzD,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC;KACT,CAAC;IAEF,QAAQ,CAAC,KAAe;QACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEO,SAAS,CAAC,KAAe;QAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAEO,WAAW,CAAC,KAAe;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,KAAK,CAAC,SAAS,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7F,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,OAAiC;QAC7E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO;QAEnC,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,OAAO;SACR,CAAC;QAEF,qEAAqE;QACrE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgB,EAAE,IAA6B,EAAE,SAAkB;QACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,SAAS,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;CACF;AAED,qBAAqB;AACrB,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;AAEnC,iCAAiC;AACjC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,WAAW,EAAc,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,MAAM,MAAM;IACF,KAAK,GAAa,MAAM,CAAC;IAChB,aAAa,GAA6B;QACzD,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC;KACT,CAAC;IAEF,QAAQ,CAAC,KAAe;QACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEO,SAAS,CAAC,KAAe;QAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAEO,WAAW,CAAC,KAAe;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,KAAK,CAAC,SAAS,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7F,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,OAAiC;QAC7E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO;QAEnC,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,OAAO;SACR,CAAC;QAEF,qEAAqE;QACrE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;KAEC;IACD,IAAI,CAAC,QAAgB,EAAE,IAA6B,EAAE,SAAkB;QACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,SAAS,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAa,EAAE,OAAgC;QACnD,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,WAAW,KAAK,EAAE;YAC3B,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,SAAS,EAAE,UAAU;gBACrB,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB;SACF,CAAC;QACF,iDAAiD;QACjD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY,EAAE,OAAiC;QACjF,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE;YAC5B,KAAK;YACL,IAAI;YACJ,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAED,qBAAqB;AACrB,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;AAEnC,iCAAiC;AACjC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,WAAW,EAAc,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/utils/safeFetch.d.ts

@@ -0,0 +1,12 @@
+export interface SafeFetchOptions {
+    /** Hosts explicitly allowed. If empty, no host is allowed. */
+    allowedHosts: string[];
+    /** Request timeout in milliseconds. Default: 8000. */
+    timeoutMs?: number;
+    /** Maximum response size in bytes. Default: 2 MB. */
+    maxBytes?: number;
+    /** Additional fetch init options. */
+    fetchOptions?: RequestInit;
+}
+export declare function safeFetch(urlString: string, options: SafeFetchOptions): Promise<Response>;
+//# sourceMappingURL=safeFetch.d.ts.map

package/dist/utils/safeFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeFetch.d.ts","sourceRoot":"","sources":["../../src/utils/safeFetch.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,YAAY,CAAC,EAAE,WAAW,CAAC;CAC5B;AA4CD,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwE/F"}

package/dist/utils/safeFetch.js

@@ -0,0 +1,107 @@
+import dns from 'dns';
+import { URL } from 'url';
+const PRIVATE_HOSTS = new Set([
+    'localhost',
+    '127.0.0.1',
+    '0.0.0.0',
+    '::1'
+]);
+const PRIVATE_IP_PATTERNS = [
+    /^10\./,
+    /^172\.(1[6-9]|2\d|3[0-1])\./,
+    /^192\.168\./,
+    /^127\./,
+    /^169\.254\./,
+    /^0\./,
+    /^::1$/,
+    /^fc00:/i,
+    /^fe80:/i
+];
+function isPrivateIp(host) {
+    if (PRIVATE_HOSTS.has(host))
+        return true;
+    return PRIVATE_IP_PATTERNS.some((rx) => rx.test(host));
+}
+function hostAllowed(host, allowedHosts) {
+    if (allowedHosts.length === 0)
+        return false;
+    const lower = host.toLowerCase();
+    return allowedHosts.some((h) => {
+        const target = h.toLowerCase();
+        return lower === target || lower.endsWith(`.${target}`);
+    });
+}
+async function resolveAll(host) {
+    try {
+        const records = await dns.promises.lookup(host, { all: true });
+        return records.map((r) => r.address);
+    }
+    catch {
+        return [];
+    }
+}
+export async function safeFetch(urlString, options) {
+    const { allowedHosts, timeoutMs = 8000, maxBytes = 2 * 1024 * 1024, fetchOptions = {} } = options;
+    let parsed;
+    try {
+        parsed = new URL(urlString);
+    }
+    catch {
+        throw new Error('Invalid URL');
+    }
+    if (!['http:', 'https:'].includes(parsed.protocol)) {
+        throw new Error(`Protocol not allowed: ${parsed.protocol}`);
+    }
+    if (!hostAllowed(parsed.hostname, allowedHosts)) {
+        throw new Error(`Host not in allowlist: ${parsed.hostname}`);
+    }
+    const addresses = await resolveAll(parsed.hostname);
+    if (addresses.length === 0) {
+        throw new Error('Could not resolve host');
+    }
+    for (const addr of addresses) {
+        if (isPrivateIp(addr)) {
+            throw new Error('Target resolves to private or loopback address');
+        }
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    const response = await fetch(urlString, {
+        redirect: 'manual',
+        ...fetchOptions,
+        signal: controller.signal,
+    }).finally(() => clearTimeout(timer));
+    // Reject redirects to avoid SSRF via Location
+    if (response.status >= 300 && response.status < 400) {
+        const location = response.headers.get('location') || 'unknown';
+        throw new Error(`Redirects are blocked (got ${location})`);
+    }
+    // Enforce size limit by reading stream manually
+    const reader = response.body?.getReader();
+    if (!reader) {
+        return response;
+    }
+    let bytesRead = 0;
+    const chunks = [];
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (value) {
+            bytesRead += value.byteLength;
+            if (bytesRead > maxBytes) {
+                reader.cancel();
+                throw new Error(`Response exceeds limit (${maxBytes} bytes)`);
+            }
+            chunks.push(value);
+        }
+    }
+    const body = Buffer.concat(chunks);
+    const res = new Response(body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers: response.headers,
+    });
+    return res;
+}
+//# sourceMappingURL=safeFetch.js.map

package/dist/utils/safeFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeFetch.js","sourceRoot":"","sources":["../../src/utils/safeFetch.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAa1B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,WAAW;IACX,WAAW;IACX,SAAS;IACT,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAa;IACpC,OAAO;IACP,6BAA6B;IAC7B,aAAa;IACb,QAAQ;IACR,aAAa;IACb,MAAM;IACN,OAAO;IACP,SAAS;IACT,SAAS;CACV,CAAC;AAEF,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,YAAsB;IACvD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAyB;IAC1E,MAAM,EAAE,YAAY,EAAE,SAAS,GAAG,IAAI,EAAE,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,YAAY,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAElG,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACtC,QAAQ,EAAE,QAAQ;QAClB,GAAG,YAAY;QACf,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtC,8CAA8C;IAC9C,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,gDAAgD;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACzB,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,SAAS,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/utils/validation.d.ts

@@ -91,8 +91,8 @@ export declare const DocsInputSchema: z.ZodObject<{
     query?: string | undefined;
     urls?: string[] | undefined;
 }, {
-    url?: string | undefined;
     action?: "search" | "list" | "get" | "fetch" | "remove" | "suggest" | undefined;
+    url?: string | undefined;
     query?: string | undefined;
     urls?: string[] | undefined;
 }>;

package/dist/validation/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Validation Module
+ * Centralized input validation for MCP handlers
+ * @version 3.6.0
+ */
+export { ProjectTypeSchema, SeveritySchema, FilePathSchema, UrlSchema, SafeStringSchema, IdentifierSchema, SetupInputSchema, RulesInputSchema, KnowledgeInputSchema, ReviewInputSchema, ContextInputSchema, DocsInputSchema, CursorInputSchema, ConfigInputSchema, CustomRuleInputSchema, GenerateInputSchema, HealthInputSchema, AnalyzeCodeInputSchema, GetRulesInputSchema, validate, validateOrThrow, withValidation, validateHandlerInput, sanitizeForDisplay, sanitizeForPrompt, sanitizePath, sanitizeIdentifier, HANDLER_SCHEMAS } from './schemas.js';
+export type { ProjectType, Severity, SetupInput, RulesInput, KnowledgeInput, ReviewInput, ContextInput, DocsInput, CursorInput, ConfigInput, CustomRuleInput, GenerateInput, HealthInput, AnalyzeCodeInput, GetRulesInput, ValidationResult } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAGhB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EAGjB,sBAAsB,EACtB,mBAAmB,EAGnB,QAAQ,EACR,eAAe,EACf,cAAc,EACd,oBAAoB,EAGpB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAGlB,eAAe,EAChB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAEV,WAAW,EACX,QAAQ,EACR,UAAU,EACV,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,WAAW,EACX,eAAe,EACf,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EACjB,MAAM,cAAc,CAAC"}

package/dist/validation/index.js

@@ -0,0 +1,19 @@
+/**
+ * Validation Module
+ * Centralized input validation for MCP handlers
+ * @version 3.6.0
+ */
+export { 
+// Common schemas
+ProjectTypeSchema, SeveritySchema, FilePathSchema, UrlSchema, SafeStringSchema, IdentifierSchema, 
+// Handler input schemas
+SetupInputSchema, RulesInputSchema, KnowledgeInputSchema, ReviewInputSchema, ContextInputSchema, DocsInputSchema, CursorInputSchema, ConfigInputSchema, CustomRuleInputSchema, GenerateInputSchema, HealthInputSchema, 
+// Tool input schemas
+AnalyzeCodeInputSchema, GetRulesInputSchema, 
+// Validation utilities
+validate, validateOrThrow, withValidation, validateHandlerInput, 
+// Sanitization utilities
+sanitizeForDisplay, sanitizeForPrompt, sanitizePath, sanitizeIdentifier, 
+// Schema registry
+HANDLER_SCHEMAS } from './schemas.js';
+//# sourceMappingURL=index.js.map

package/dist/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO;AACL,iBAAiB;AACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,gBAAgB;AAEhB,wBAAwB;AACxB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB;AAEjB,qBAAqB;AACrB,sBAAsB,EACtB,mBAAmB;AAEnB,uBAAuB;AACvB,QAAQ,EACR,eAAe,EACf,cAAc,EACd,oBAAoB;AAEpB,yBAAyB;AACzB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB;AAElB,kBAAkB;AAClB,eAAe,EAChB,MAAM,cAAc,CAAC"}

package/dist/validation/schemas.d.ts

@@ -0,0 +1,346 @@
+/**
+ * Zod Validation Schemas
+ * Centralized input validation for all MCP handlers
+ * @version 3.6.0
+ */
+import { z } from 'zod';
+/** Project type enum */
+export declare const ProjectTypeSchema: z.ZodEnum<["react-typescript", "react-node", "vue-node", "nextjs", "nestjs", "express", "rails", "laravel", "golang", "rust", "python-fastapi", "python-django", "python-flask", "custom"]>;
+export type ProjectType = z.infer<typeof ProjectTypeSchema>;
+/** Severity level enum */
+export declare const SeveritySchema: z.ZodEnum<["error", "warning", "info", "suggestion"]>;
+export type Severity = z.infer<typeof SeveritySchema>;
+/** File path validation */
+export declare const FilePathSchema: z.ZodEffects<z.ZodString, string, string>;
+/** URL validation */
+export declare const UrlSchema: z.ZodString;
+/** Safe string (no special chars that could cause issues) */
+export declare const SafeStringSchema: z.ZodEffects<z.ZodString, string, string>;
+/** Identifier (alphanumeric + dash/underscore) */
+export declare const IdentifierSchema: z.ZodString;
+/** setup handler input */
+export declare const SetupInputSchema: z.ZodObject<{
+    type: z.ZodOptional<z.ZodEnum<["react-typescript", "react-node", "vue-node", "nextjs", "nestjs", "express", "rails", "laravel", "golang", "rust", "python-fastapi", "python-django", "python-flask", "custom"]>>;
+    path: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    type: z.ZodOptional<z.ZodEnum<["react-typescript", "react-node", "vue-node", "nextjs", "nestjs", "express", "rails", "laravel", "golang", "rust", "python-fastapi", "python-django", "python-flask", "custom"]>>;
+    path: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    type: z.ZodOptional<z.ZodEnum<["react-typescript", "react-node", "vue-node", "nextjs", "nestjs", "express", "rails", "laravel", "golang", "rust", "python-fastapi", "python-django", "python-flask", "custom"]>>;
+    path: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type SetupInput = z.infer<typeof SetupInputSchema>;
+/** rules handler input */
+export declare const RulesInputSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["list", "search", "get", "select"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    ids: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    category: z.ZodOptional<z.ZodEnum<["security", "performance", "best-practices", "coding-standards", "architecture", "testing"]>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["list", "search", "get", "select"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    ids: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    category: z.ZodOptional<z.ZodEnum<["security", "performance", "best-practices", "coding-standards", "architecture", "testing"]>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["list", "search", "get", "select"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    ids: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    category: z.ZodOptional<z.ZodEnum<["security", "performance", "best-practices", "coding-standards", "architecture", "testing"]>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type RulesInput = z.infer<typeof RulesInputSchema>;
+/** knowledge handler input */
+export declare const KnowledgeInputSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["list", "search", "get"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    category: z.ZodOptional<z.ZodEnum<["patterns", "common-issues", "architecture", "workflows"]>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["list", "search", "get"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    category: z.ZodOptional<z.ZodEnum<["patterns", "common-issues", "architecture", "workflows"]>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["list", "search", "get"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    category: z.ZodOptional<z.ZodEnum<["patterns", "common-issues", "architecture", "workflows"]>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type KnowledgeInput = z.infer<typeof KnowledgeInputSchema>;
+/** review handler input */
+export declare const ReviewInputSchema: z.ZodObject<{
+    file: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    url: z.ZodOptional<z.ZodString>;
+    project: z.ZodOptional<z.ZodBoolean>;
+    focus: z.ZodDefault<z.ZodOptional<z.ZodEnum<["all", "security", "performance", "architecture", "coding-standards"]>>>;
+    incremental: z.ZodOptional<z.ZodBoolean>;
+    maxDepth: z.ZodOptional<z.ZodNumber>;
+    maxFiles: z.ZodOptional<z.ZodNumber>;
+    useCache: z.ZodOptional<z.ZodBoolean>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    file: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    url: z.ZodOptional<z.ZodString>;
+    project: z.ZodOptional<z.ZodBoolean>;
+    focus: z.ZodDefault<z.ZodOptional<z.ZodEnum<["all", "security", "performance", "architecture", "coding-standards"]>>>;
+    incremental: z.ZodOptional<z.ZodBoolean>;
+    maxDepth: z.ZodOptional<z.ZodNumber>;
+    maxFiles: z.ZodOptional<z.ZodNumber>;
+    useCache: z.ZodOptional<z.ZodBoolean>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    file: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    url: z.ZodOptional<z.ZodString>;
+    project: z.ZodOptional<z.ZodBoolean>;
+    focus: z.ZodDefault<z.ZodOptional<z.ZodEnum<["all", "security", "performance", "architecture", "coding-standards"]>>>;
+    incremental: z.ZodOptional<z.ZodBoolean>;
+    maxDepth: z.ZodOptional<z.ZodNumber>;
+    maxFiles: z.ZodOptional<z.ZodNumber>;
+    useCache: z.ZodOptional<z.ZodBoolean>;
+}, z.ZodTypeAny, "passthrough">>;
+export type ReviewInput = z.infer<typeof ReviewInputSchema>;
+/** context handler input */
+export declare const ContextInputSchema: z.ZodObject<{
+    full: z.ZodOptional<z.ZodBoolean>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    full: z.ZodOptional<z.ZodBoolean>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    full: z.ZodOptional<z.ZodBoolean>;
+}, z.ZodTypeAny, "passthrough">>;
+export type ContextInput = z.infer<typeof ContextInputSchema>;
+/** docs handler input */
+export declare const DocsInputSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["fetch", "search", "list", "get", "remove", "suggest"]>>>;
+    url: z.ZodOptional<z.ZodString>;
+    urls: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["fetch", "search", "list", "get", "remove", "suggest"]>>>;
+    url: z.ZodOptional<z.ZodString>;
+    urls: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["fetch", "search", "list", "get", "remove", "suggest"]>>>;
+    url: z.ZodOptional<z.ZodString>;
+    urls: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type DocsInput = z.infer<typeof DocsInputSchema>;
+/** cursor handler input */
+export declare const CursorInputSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["browse", "search", "popular", "import", "categories"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    slug: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["browse", "search", "popular", "import", "categories"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    slug: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["browse", "search", "popular", "import", "categories"]>>>;
+    query: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    slug: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type CursorInput = z.infer<typeof CursorInputSchema>;
+/** config handler input */
+export declare const ConfigInputSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["save", "load", "list", "delete", "export", "import"]>>>;
+    name: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    id: z.ZodOptional<z.ZodString>;
+    json: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["save", "load", "list", "delete", "export", "import"]>>>;
+    name: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    id: z.ZodOptional<z.ZodString>;
+    json: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["save", "load", "list", "delete", "export", "import"]>>>;
+    name: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    id: z.ZodOptional<z.ZodString>;
+    json: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type ConfigInput = z.infer<typeof ConfigInputSchema>;
+/** custom-rule handler input */
+export declare const CustomRuleInputSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["create", "update", "delete", "list", "export", "import"]>>>;
+    name: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    content: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodEnum<["security", "performance", "best-practices", "coding-standards", "architecture"]>>;
+    id: z.ZodOptional<z.ZodString>;
+    json: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["create", "update", "delete", "list", "export", "import"]>>>;
+    name: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    content: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodEnum<["security", "performance", "best-practices", "coding-standards", "architecture"]>>;
+    id: z.ZodOptional<z.ZodString>;
+    json: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    action: z.ZodDefault<z.ZodOptional<z.ZodEnum<["create", "update", "delete", "list", "export", "import"]>>>;
+    name: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    content: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodEnum<["security", "performance", "best-practices", "coding-standards", "architecture"]>>;
+    id: z.ZodOptional<z.ZodString>;
+    json: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type CustomRuleInput = z.infer<typeof CustomRuleInputSchema>;
+/** generate handler input */
+export declare const GenerateInputSchema: z.ZodObject<{
+    type: z.ZodEnum<["component", "hook", "service", "test", "api", "model", "util"]>;
+    name: z.ZodString;
+    options: z.ZodOptional<z.ZodObject<{
+        typescript: z.ZodOptional<z.ZodBoolean>;
+        withTests: z.ZodOptional<z.ZodBoolean>;
+        withStyles: z.ZodOptional<z.ZodBoolean>;
+        framework: z.ZodOptional<z.ZodString>;
+        scanProject: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        typescript?: boolean | undefined;
+        withTests?: boolean | undefined;
+        withStyles?: boolean | undefined;
+        framework?: string | undefined;
+        scanProject?: boolean | undefined;
+    }, {
+        typescript?: boolean | undefined;
+        withTests?: boolean | undefined;
+        withStyles?: boolean | undefined;
+        framework?: string | undefined;
+        scanProject?: boolean | undefined;
+    }>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    type: z.ZodEnum<["component", "hook", "service", "test", "api", "model", "util"]>;
+    name: z.ZodString;
+    options: z.ZodOptional<z.ZodObject<{
+        typescript: z.ZodOptional<z.ZodBoolean>;
+        withTests: z.ZodOptional<z.ZodBoolean>;
+        withStyles: z.ZodOptional<z.ZodBoolean>;
+        framework: z.ZodOptional<z.ZodString>;
+        scanProject: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        typescript?: boolean | undefined;
+        withTests?: boolean | undefined;
+        withStyles?: boolean | undefined;
+        framework?: string | undefined;
+        scanProject?: boolean | undefined;
+    }, {
+        typescript?: boolean | undefined;
+        withTests?: boolean | undefined;
+        withStyles?: boolean | undefined;
+        framework?: string | undefined;
+        scanProject?: boolean | undefined;
+    }>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    type: z.ZodEnum<["component", "hook", "service", "test", "api", "model", "util"]>;
+    name: z.ZodString;
+    options: z.ZodOptional<z.ZodObject<{
+        typescript: z.ZodOptional<z.ZodBoolean>;
+        withTests: z.ZodOptional<z.ZodBoolean>;
+        withStyles: z.ZodOptional<z.ZodBoolean>;
+        framework: z.ZodOptional<z.ZodString>;
+        scanProject: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        typescript?: boolean | undefined;
+        withTests?: boolean | undefined;
+        withStyles?: boolean | undefined;
+        framework?: string | undefined;
+        scanProject?: boolean | undefined;
+    }, {
+        typescript?: boolean | undefined;
+        withTests?: boolean | undefined;
+        withStyles?: boolean | undefined;
+        framework?: string | undefined;
+        scanProject?: boolean | undefined;
+    }>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type GenerateInput = z.infer<typeof GenerateInputSchema>;
+/** health handler input */
+export declare const HealthInputSchema: z.ZodObject<{
+    detailed: z.ZodOptional<z.ZodBoolean>;
+    path: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    detailed: z.ZodOptional<z.ZodBoolean>;
+    path: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    detailed: z.ZodOptional<z.ZodBoolean>;
+    path: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type HealthInput = z.infer<typeof HealthInputSchema>;
+/** help handler input */
+export declare const HelpInputSchema: z.ZodObject<{
+    topic: z.ZodDefault<z.ZodOptional<z.ZodEnum<["setup", "rules", "review", "cursor", "docs", "config", "generate", "health", "all"]>>>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    topic: z.ZodDefault<z.ZodOptional<z.ZodEnum<["setup", "rules", "review", "cursor", "docs", "config", "generate", "health", "all"]>>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    topic: z.ZodDefault<z.ZodOptional<z.ZodEnum<["setup", "rules", "review", "cursor", "docs", "config", "generate", "health", "all"]>>>;
+}, z.ZodTypeAny, "passthrough">>;
+export type HelpInput = z.infer<typeof HelpInputSchema>;
+/** analyze_code tool input */
+export declare const AnalyzeCodeInputSchema: z.ZodObject<{
+    code: z.ZodString;
+    language: z.ZodOptional<z.ZodString>;
+    filePath: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    categories: z.ZodOptional<z.ZodArray<z.ZodEnum<["security", "performance", "best-practices", "maintainability", "architecture"]>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    code: string;
+    categories?: ("best-practices" | "security" | "performance" | "architecture" | "maintainability")[] | undefined;
+    language?: string | undefined;
+    filePath?: string | undefined;
+}, {
+    code: string;
+    categories?: ("best-practices" | "security" | "performance" | "architecture" | "maintainability")[] | undefined;
+    language?: string | undefined;
+    filePath?: string | undefined;
+}>;
+export type AnalyzeCodeInput = z.infer<typeof AnalyzeCodeInputSchema>;
+/** get_rules tool input */
+export declare const GetRulesInputSchema: z.ZodObject<{
+    language: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodEnum<["security", "performance", "best-practices", "maintainability", "architecture"]>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    category?: "best-practices" | "security" | "performance" | "architecture" | "maintainability" | undefined;
+    enabled?: boolean | undefined;
+    language?: string | undefined;
+}, {
+    category?: "best-practices" | "security" | "performance" | "architecture" | "maintainability" | undefined;
+    enabled?: boolean | undefined;
+    language?: string | undefined;
+}>;
+export type GetRulesInput = z.infer<typeof GetRulesInputSchema>;
+/** Result type for validation */
+export type ValidationResult<T> = {
+    success: true;
+    data: T;
+} | {
+    success: false;
+    error: string;
+    details?: z.ZodIssue[];
+};
+/**
+ * Validate input against a schema
+ */
+export declare function validate<T>(schema: z.ZodSchema<T>, input: unknown): ValidationResult<T>;
+/**
+ * Validate and throw on failure
+ */
+export declare function validateOrThrow<T>(schema: z.ZodSchema<T>, input: unknown, context?: string): T;
+/**
+ * Create a validated handler wrapper
+ */
+export declare function withValidation<TInput, TOutput>(schema: z.ZodSchema<TInput>, handler: (input: TInput) => Promise<TOutput>): (input: unknown) => Promise<TOutput>;
+/**
+ * Sanitize string for safe display
+ */
+export declare function sanitizeForDisplay(input: string, maxLength?: number): string;
+/**
+ * Sanitize arbitrary content before sending to a prompt/LLM.
+ * Removes control/directional chars and script/style blocks, and enforces length.
+ */
+export declare function sanitizeForPrompt(input: string, maxLength?: number): string;
+/**
+ * Sanitize file path
+ */
+export declare function sanitizePath(input: string): string;
+/**
+ * Sanitize identifier
+ */
+export declare function sanitizeIdentifier(input: string): string;
+export declare const HANDLER_SCHEMAS: Record<string, z.ZodSchema>;
+/**
+ * Validate handler input by handler name
+ */
+export declare function validateHandlerInput(handlerName: string, input: unknown): ValidationResult<unknown>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/validation/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/validation/schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,wBAAwB;AACxB,eAAO,MAAM,iBAAiB,6LAe5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,0BAA0B;AAC1B,eAAO,MAAM,cAAc,uDAAqD,CAAC;AAEjF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,2BAA2B;AAC3B,eAAO,MAAM,cAAc,2CAMxB,CAAC;AAEJ,qBAAqB;AACrB,eAAO,MAAM,SAAS,aAEM,CAAC;AAE7B,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,2CAEF,CAAC;AAE5B,kDAAkD;AAClD,eAAO,MAAM,gBAAgB,aAGoC,CAAC;AAMlE,0BAA0B;AAC1B,eAAO,MAAM,gBAAgB;;;;;;;;;gCAGb,CAAC;AAEjB,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,0BAA0B;AAC1B,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;gCAKb,CAAC;AAEjB,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,8BAA8B;AAC9B,eAAO,MAAM,oBAAoB;;;;;;;;;;;;gCAIjB,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,2BAA2B;AAC3B,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;gCASd,CAAC;AAEjB,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,4BAA4B;AAC5B,eAAO,MAAM,kBAAkB;;;;;;gCAEf,CAAC;AAEjB,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,yBAAyB;AACzB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;gCAKZ,CAAC;AAEjB,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,2BAA2B;AAC3B,eAAO,MAAM,iBAAiB;;;;;;;;;;;;gCAId,CAAC;AAEjB,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,2BAA2B;AAC3B,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;gCAKd,CAAC;AAEjB,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,gCAAgC;AAChC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;gCAOlB,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,6BAA6B;AAC7B,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAUhB,CAAC;AAEjB,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,2BAA2B;AAC3B,eAAO,MAAM,iBAAiB;;;;;;;;;gCAGd,CAAC;AAEjB,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,yBAAyB;AACzB,eAAO,MAAM,eAAe;;;;;;gCAEZ,CAAC;AAEjB,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD,8BAA8B;AAC9B,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;EAKxB,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,2BAA2B;AAC3B,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAIrB,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMhE,iCAAiC;AACjC,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAC1B;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;CAAE,CAAC;AAE9D;;GAEG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACtB,KAAK,EAAE,OAAO,GACb,gBAAgB,CAAC,CAAC,CAAC,CAiBrB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAC/B,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACtB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,MAAM,GACf,CAAC,CASH;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAC5C,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC3C,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAKtC;AAMD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,MAAM,CAK1E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,MAAM,CASzE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxD;AAMD,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAavD,CAAC;AAEF;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,GACb,gBAAgB,CAAC,OAAO,CAAC,CAQ3B"}