@stackwright-pro/mcp 0.2.0-alpha.17 → 0.2.0-alpha.19

package/dist/server.mjs

@@ -1110,7 +1110,8 @@ function setupPackages(opts) {
 }
 
 // src/tools/questions.ts
-import { readFile } from "fs/promises";
+import { readFile, writeFile } from "fs/promises";
+import { existsSync as existsSync2, lstatSync as lstatSync2, mkdirSync, renameSync } from "fs";
 import { join } from "path";
 import { z as z8 } from "zod";
 
@@ -1409,11 +1410,149 @@ function registerQuestionTools(server2) {
       };
     }
   );
+  server2.tool(
+    "stackwright_pro_get_next_question",
+    "Returns the next unanswered question for a phase as a plain JSON object \u2014 one question at a time. Returns { done: true } when all questions are answered or the phase has no questions. Call this in a loop: present the question in plain chat, get user reply, call record_answer, repeat.",
+    { phase: z8.string().describe('Phase name e.g. "designer", "api", "auth"') },
+    async ({ phase }) => {
+      const SAFE_PHASE = /^[a-z][a-z0-9-]{0,30}$/;
+      if (!SAFE_PHASE.test(phase)) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({ error: `Invalid phase name: "${phase.slice(0, 50)}"` })
+            }
+          ],
+          isError: true
+        };
+      }
+      const cwd = process.cwd();
+      const questionsPath = join(cwd, ".stackwright", "questions", `${phase}.json`);
+      let questions = [];
+      try {
+        const raw = await readFile(questionsPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        questions = parsed.questions ?? [];
+      } catch {
+        return { content: [{ type: "text", text: JSON.stringify({ done: true }) }] };
+      }
+      if (questions.length === 0) {
+        return { content: [{ type: "text", text: JSON.stringify({ done: true }) }] };
+      }
+      const answersPath = join(cwd, ".stackwright", "answers", `${phase}.json`);
+      let answeredIds = /* @__PURE__ */ new Set();
+      try {
+        const raw = await readFile(answersPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        answeredIds = new Set(Object.keys(parsed.answers ?? {}));
+      } catch {
+      }
+      const next = questions.find((q) => !answeredIds.has(q.id));
+      if (!next) {
+        return { content: [{ type: "text", text: JSON.stringify({ done: true }) }] };
+      }
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify({
+              done: false,
+              questionId: next.id,
+              question: next.question,
+              type: next.type,
+              options: next.options ?? null,
+              help: next.help ?? null,
+              index: questions.indexOf(next) + 1,
+              total: questions.length
+            })
+          }
+        ]
+      };
+    }
+  );
+  server2.tool(
+    "stackwright_pro_record_answer",
+    "Records a single answer to a phase question. Appends to .stackwright/answers/{phase}.json incrementally. Idempotent \u2014 calling twice for the same questionId overwrites. Call after receiving each user reply in the conversational question loop.",
+    {
+      phase: z8.string().describe('Phase name e.g. "designer"'),
+      questionId: z8.string().describe('The question ID from get_next_question, e.g. "designer-1"'),
+      answer: z8.string().describe("The user's free-text answer")
+    },
+    async ({ phase, questionId, answer }) => {
+      const SAFE_PHASE = /^[a-z][a-z0-9-]{0,30}$/;
+      if (!SAFE_PHASE.test(phase)) {
+        return {
+          content: [
+            { type: "text", text: JSON.stringify({ error: "Invalid phase name" }) }
+          ],
+          isError: true
+        };
+      }
+      if (!/^[a-z0-9][a-z0-9-]{0,63}$/i.test(questionId)) {
+        return {
+          content: [
+            { type: "text", text: JSON.stringify({ error: "Invalid questionId" }) }
+          ],
+          isError: true
+        };
+      }
+      const safeAnswer = answer.slice(0, 2e3);
+      const cwd = process.cwd();
+      const answersDir = join(cwd, ".stackwright", "answers");
+      const answersPath = join(answersDir, `${phase}.json`);
+      if (existsSync2(answersDir) && lstatSync2(answersDir).isSymbolicLink()) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({ error: "answers dir is a symlink \u2014 refusing to write" })
+            }
+          ],
+          isError: true
+        };
+      }
+      mkdirSync(answersDir, { recursive: true });
+      let existing = {
+        version: "1.0",
+        phase,
+        answers: {}
+      };
+      try {
+        if (existsSync2(answersPath)) {
+          if (lstatSync2(answersPath).isSymbolicLink()) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: JSON.stringify({ error: "answers file is a symlink \u2014 refusing to write" })
+                }
+              ],
+              isError: true
+            };
+          }
+          const raw = await readFile(answersPath, "utf-8");
+          existing = JSON.parse(raw);
+        }
+      } catch {
+      }
+      existing.answers[questionId] = safeAnswer;
+      existing.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+      const tmp = `${answersPath}.tmp`;
+      await writeFile(tmp, JSON.stringify(existing, null, 2), "utf-8");
+      renameSync(tmp, answersPath);
+      return {
+        content: [
+          { type: "text", text: JSON.stringify({ recorded: true, phase, questionId }) }
+        ]
+      };
+    }
+  );
 }
 
 // src/tools/orchestration.ts
 import { z as z9 } from "zod";
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync, lstatSync as lstatSync2 } from "fs";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync3, mkdirSync as mkdirSync2, lstatSync as lstatSync3 } from "fs";
 import { join as join2 } from "path";
 var OTTER_NAME_TO_PHASE = [
   ["designer", "designer"],
@@ -1469,9 +1608,9 @@ function handleSaveManifest(input) {
   const dir = join2(cwd, ".stackwright");
   const filePath = join2(dir, "question-manifest.json");
   try {
-    mkdirSync(dir, { recursive: true });
-    if (existsSync2(filePath)) {
-      const stat = lstatSync2(filePath);
+    mkdirSync2(dir, { recursive: true });
+    if (existsSync3(filePath)) {
+      const stat = lstatSync3(filePath);
       if (stat.isSymbolicLink()) {
         const message = `Refusing to write to symlink: ${filePath}`;
         return {
@@ -1503,7 +1642,7 @@ function handleSavePhaseAnswers(input) {
   const dir = join2(cwd, ".stackwright", "answers");
   const filePath = join2(dir, `${input.phase}.json`);
   try {
-    mkdirSync(dir, { recursive: true });
+    mkdirSync2(dir, { recursive: true });
     let answers;
     if (input.questions && input.questions.length > 0) {
       answers = answersToManifestFormat(input.rawAnswers, input.questions);
@@ -1518,8 +1657,8 @@ function handleSavePhaseAnswers(input) {
       completedAt: (/* @__PURE__ */ new Date()).toISOString(),
       answers
     };
-    if (existsSync2(filePath)) {
-      const stat = lstatSync2(filePath);
+    if (existsSync3(filePath)) {
+      const stat = lstatSync3(filePath);
       if (stat.isSymbolicLink()) {
         const message = `Refusing to write to symlink: ${filePath}`;
         return {
@@ -1548,7 +1687,7 @@ function handleSavePhaseAnswers(input) {
 function handleReadPhaseAnswers(input) {
   const cwd = input._cwd ?? process.cwd();
   const filePath = join2(cwd, ".stackwright", "answers", `${input.phase}.json`);
-  if (!existsSync2(filePath)) {
+  if (!existsSync3(filePath)) {
     return {
       text: JSON.stringify({ missing: true, phase: input.phase }),
       isError: false
@@ -1585,9 +1724,9 @@ function handleSaveBuildContext(input) {
   const dir = join2(cwd, ".stackwright");
   const filePath = join2(dir, "build-context.json");
   try {
-    mkdirSync(dir, { recursive: true });
-    if (existsSync2(filePath)) {
-      const stat = lstatSync2(filePath);
+    mkdirSync2(dir, { recursive: true });
+    if (existsSync3(filePath)) {
+      const stat = lstatSync3(filePath);
       if (stat.isSymbolicLink()) {
         return {
           text: JSON.stringify({
@@ -1736,7 +1875,7 @@ function registerOrchestrationTools(server2) {
 
 // src/tools/pipeline.ts
 import { z as z10 } from "zod";
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, existsSync as existsSync3, mkdirSync as mkdirSync2, lstatSync as lstatSync3 } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, existsSync as existsSync4, mkdirSync as mkdirSync3, lstatSync as lstatSync4 } from "fs";
 import { join as join3 } from "path";
 var PHASE_ORDER = [
   "designer",
@@ -1810,7 +1949,7 @@ function statePath(cwd) {
 }
 function readState(cwd) {
   const p = statePath(cwd);
-  if (!existsSync3(p)) return createDefaultState();
+  if (!existsSync4(p)) return createDefaultState();
   const raw = JSON.parse(safeReadSync(p));
   if (typeof raw !== "object" || raw === null || raw.version !== "1.0") {
     return createDefaultState();
@@ -1818,8 +1957,8 @@ function readState(cwd) {
   return raw;
 }
 function safeWriteSync(filePath, content) {
-  if (existsSync3(filePath)) {
-    const stat = lstatSync3(filePath);
+  if (existsSync4(filePath)) {
+    const stat = lstatSync4(filePath);
     if (stat.isSymbolicLink()) {
       throw new Error(`Refusing to write to symlink: ${filePath}`);
     }
@@ -1827,8 +1966,8 @@ function safeWriteSync(filePath, content) {
   writeFileSync3(filePath, content);
 }
 function safeReadSync(filePath) {
-  if (existsSync3(filePath)) {
-    const stat = lstatSync3(filePath);
+  if (existsSync4(filePath)) {
+    const stat = lstatSync4(filePath);
     if (stat.isSymbolicLink()) {
       throw new Error(`Refusing to read symlink: ${filePath}`);
     }
@@ -1837,7 +1976,7 @@ function safeReadSync(filePath) {
 }
 function writeState(cwd, state) {
   const dir = join3(cwd, ".stackwright");
-  mkdirSync2(dir, { recursive: true });
+  mkdirSync3(dir, { recursive: true });
   state.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
   safeWriteSync(statePath(cwd), JSON.stringify(state, null, 2) + "\n");
 }
@@ -1922,7 +2061,7 @@ function handleCheckExecutionReady(_cwd, phase) {
       };
     }
     const answerFile = join3(cwd, ".stackwright", "answers", `${phase}.json`);
-    if (!existsSync3(answerFile)) {
+    if (!existsSync4(answerFile)) {
       return {
         text: JSON.stringify({ ready: false, phase, reason: "Answer file not found" }),
         isError: false
@@ -1951,7 +2090,7 @@ function handleCheckExecutionReady(_cwd, phase) {
     const missingPhases = [];
     for (const phase2 of PHASE_ORDER) {
       const answerFile = join3(answersDir, `${phase2}.json`);
-      if (existsSync3(answerFile)) {
+      if (existsSync4(answerFile)) {
         try {
           const raw = safeReadSync(answerFile);
           const parsed = JSON.parse(raw);
@@ -1989,7 +2128,7 @@ function handleListArtifacts(_cwd) {
     for (const phase of PHASE_ORDER) {
       const expectedFile = PHASE_ARTIFACT[phase];
       const fullPath = join3(artifactsDir, expectedFile);
-      const exists = existsSync3(fullPath);
+      const exists = existsSync4(fullPath);
       if (exists) completedCount++;
       artifacts.push({ phase, expectedFile, exists, path: fullPath });
     }
@@ -2028,7 +2167,7 @@ function handleWritePhaseQuestions(input) {
     } catch {
     }
     const questionsDir = join3(cwd, ".stackwright", "questions");
-    mkdirSync2(questionsDir, { recursive: true });
+    mkdirSync3(questionsDir, { recursive: true });
     const filePath = join3(questionsDir, `${phase}.json`);
     const payload = {
       version: "1.0",
@@ -2071,12 +2210,12 @@ function handleBuildSpecialistPrompt(input) {
   try {
     const answersPath = join3(cwd, ".stackwright", "answers", `${phase}.json`);
     let answers = {};
-    if (existsSync3(answersPath)) {
+    if (existsSync4(answersPath)) {
       answers = JSON.parse(safeReadSync(answersPath));
     }
     let buildContextText = "";
     const buildContextPath = join3(cwd, ".stackwright", "build-context.json");
-    if (existsSync3(buildContextPath)) {
+    if (existsSync4(buildContextPath)) {
       try {
         const bcRaw = JSON.parse(safeReadSync(buildContextPath));
         if (typeof bcRaw.buildContext === "string" && bcRaw.buildContext.trim().length > 0) {
@@ -2091,7 +2230,7 @@ function handleBuildSpecialistPrompt(input) {
     for (const dep of deps) {
       const artifactFile = PHASE_ARTIFACT[dep];
       const artifactPath = join3(cwd, ".stackwright", "artifacts", artifactFile);
-      if (existsSync3(artifactPath)) {
+      if (existsSync4(artifactPath)) {
         const content = JSON.parse(safeReadSync(artifactPath));
         const expectedOtter = PHASE_TO_OTTER2[dep];
         const artifactOtter = content["generatedBy"];
@@ -2220,7 +2359,7 @@ function handleValidateArtifact(input) {
   }
   try {
     const artifactsDir = join3(cwd, ".stackwright", "artifacts");
-    mkdirSync2(artifactsDir, { recursive: true });
+    mkdirSync3(artifactsDir, { recursive: true });
     const artifactFile = PHASE_ARTIFACT[phase];
     const artifactPath = join3(artifactsDir, artifactFile);
     safeWriteSync(artifactPath, JSON.stringify(artifact, null, 2) + "\n");
@@ -2294,12 +2433,49 @@ function registerPipelineTools(server2) {
   );
   server2.tool(
     "stackwright_pro_write_phase_questions",
-    `Parse otter question-collection response \u2192 .stackwright/questions/{phase}.json. ${DESC}`,
+    `Parse otter question-collection response \u2192 .stackwright/questions/{phase}.json. Specialists may also call this directly with a parsed questions array. ${DESC}`,
     {
-      phase: z10.string().describe('Phase name, e.g. "designer"'),
-      responseText: z10.string().describe("Raw LLM response from QUESTION_COLLECTION_MODE")
+      phase: z10.string().optional().describe('Phase name, e.g. "designer" (required for direct write)'),
+      responseText: z10.string().optional().describe("Raw LLM response from QUESTION_COLLECTION_MODE"),
+      questions: jsonCoerce(z10.array(z10.any()).optional()).describe(
+        "Questions array for direct specialist write"
+      )
     },
-    async ({ phase, responseText }) => res(handleWritePhaseQuestions({ phase, responseText }))
+    async ({ phase, responseText, questions }) => {
+      if (phase && questions && Array.isArray(questions)) {
+        const SAFE_PHASE = /^[a-z][a-z0-9-]{0,30}$/;
+        if (!SAFE_PHASE.test(phase)) {
+          return {
+            content: [
+              { type: "text", text: JSON.stringify({ error: `Invalid phase name` }) }
+            ],
+            isError: true
+          };
+        }
+        const questionsDir = join3(process.cwd(), ".stackwright", "questions");
+        mkdirSync3(questionsDir, { recursive: true });
+        const outPath = join3(questionsDir, `${phase}.json`);
+        writeFileSync3(
+          outPath,
+          JSON.stringify({ phase, questions, writtenAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)
+        );
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                written: true,
+                phase,
+                count: questions.length
+              })
+            }
+          ]
+        };
+      }
+      return res(
+        handleWritePhaseQuestions({ phase: phase ?? "", responseText: responseText ?? "" })
+      );
+    }
   );
   server2.tool(
     "stackwright_pro_build_specialist_prompt",
@@ -2320,7 +2496,7 @@ function registerPipelineTools(server2) {
 
 // src/tools/safe-write.ts
 import { z as z11 } from "zod";
-import { writeFileSync as writeFileSync4, existsSync as existsSync4, mkdirSync as mkdirSync3, lstatSync as lstatSync4 } from "fs";
+import { writeFileSync as writeFileSync4, existsSync as existsSync5, mkdirSync as mkdirSync4, lstatSync as lstatSync5 } from "fs";
 import { normalize, isAbsolute, dirname, join as join4 } from "path";
 var OTTER_WRITE_ALLOWLISTS = {
   "stackwright-pro-designer-otter": [
@@ -2494,9 +2670,9 @@ function handleSafeWrite(input) {
   }
   const normalized = normalize(filePath);
   const fullPath = join4(cwd, normalized);
-  if (existsSync4(fullPath)) {
+  if (existsSync5(fullPath)) {
     try {
-      const stat = lstatSync4(fullPath);
+      const stat = lstatSync5(fullPath);
       if (stat.isSymbolicLink()) {
         const result = {
           success: false,
@@ -2523,7 +2699,7 @@ function handleSafeWrite(input) {
   }
   try {
     if (createDirectories) {
-      mkdirSync3(dirname(fullPath), { recursive: true });
+      mkdirSync4(dirname(fullPath), { recursive: true });
     }
     writeFileSync4(fullPath, content, { encoding: "utf-8" });
     const result = {
@@ -2570,7 +2746,7 @@ function registerSafeWriteTools(server2) {
 
 // src/tools/auth.ts
 import { z as z12 } from "zod";
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync5 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync6 } from "fs";
 import { join as join5 } from "path";
 function buildHierarchy(roles) {
   const h = {};
@@ -2850,7 +3026,7 @@ async function configureAuthHandler(params, cwd) {
   try {
     const envBlock = generateEnvBlock(method, params);
     const envPath = join5(cwd, ".env.example");
-    if (existsSync5(envPath)) {
+    if (existsSync6(envPath)) {
       const existing = readFileSync4(envPath, "utf8");
       writeFileSync5(envPath, existing.trimEnd() + "\n\n" + envBlock, "utf8");
     } else {
@@ -2881,7 +3057,7 @@ async function configureAuthHandler(params, cwd) {
       protectedRoutes
     );
     const ymlPath = join5(cwd, "stackwright.yml");
-    if (!existsSync5(ymlPath)) {
+    if (!existsSync6(ymlPath)) {
       writeFileSync5(ymlPath, authYaml, "utf8");
     } else {
       const existing = readFileSync4(ymlPath, "utf8");
@@ -2963,36 +3139,36 @@ function registerAuthTools(server2) {
 
 // src/integrity.ts
 import { createHash as createHash2, timingSafeEqual } from "crypto";
-import { readFileSync as readFileSync5, readdirSync, lstatSync as lstatSync5 } from "fs";
+import { readFileSync as readFileSync5, readdirSync, lstatSync as lstatSync6 } from "fs";
 import { join as join6, basename } from "path";
 var _checksums = /* @__PURE__ */ new Map([
   [
     "stackwright-pro-api-otter.json",
-    "d72f365d7eb16f6195148d09f8d42249cc1b01fab21e769d991533a31b0b588a"
+    "0ac26d85a5ad35b072a58965e1d5e090dd5c5f16dc14e68c452c3e99fcbb5510"
   ],
   [
     "stackwright-pro-auth-otter.json",
-    "6610a5a4e1f981a00771494832a5dbf2e7897f993ed2cfad388528578d15955c"
+    "d789b71f196659d5745ebfca87a7bda60a1bb63cfeccd17b4a273ac1e29bb08d"
   ],
   [
     "stackwright-pro-dashboard-otter.json",
-    "f0316349b38e0923c2fa5385e24c4393511c61cea410a2b080a5ece14ace4801"
+    "600e8597429c353e5b886f316731be84a86cd8b93617bf046e3cbf390b31a431"
   ],
   [
     "stackwright-pro-data-otter.json",
-    "bd85c01c352630088c3f27110bcd23b6f8f7d2eb72d62a324214ac405a4c1c65"
+    "b2946e3da3b53282c122d150e6db86b0cb89d2edba2a94a7666b26d27051be96"
   ],
   [
     "stackwright-pro-designer-otter.json",
-    "aadac659f170c24a3921fe0940464b5dd22db290fb2d7340647c3c4795cfe246"
+    "f4dbff5149051c77be1645de5ee12c0bd7d590c687a0b2d86737b915a5a6d5f0"
   ],
   [
     "stackwright-pro-foreman-otter.json",
-    "5bb8eca6d24efa970acc24974d3789a1ce48ead42624236bb7211c1c881b2584"
+    "7464523d7288374dc6efa5c213c825ec0616e00cf4f739d8039eb41df812cbc5"
   ],
   [
     "stackwright-pro-page-otter.json",
-    "c5ad7b312e1c4f83183c489291233adfb5466050d6db44b8816817ac601faca8"
+    "d75a71afa489478a6874abfbaa05baa46dcb2c16e4a5108f50f8187c9f67da60"
   ],
   [
     "stackwright-pro-theme-otter.json",
@@ -3000,7 +3176,7 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-workflow-otter.json",
-    "2b2d132c536148bcd1fa5598d575f2a40b572c050e1cfe17a387d306b62fd855"
+    "16da6c109d0b5ee60d0a14e009dbeab02a7bbac3b0947795769da053565b9821"
   ]
 ]);
 Object.freeze(_checksums);
@@ -3029,7 +3205,7 @@ function verifyOtterFile(filePath) {
   }
   let stat;
   try {
-    stat = lstatSync5(filePath);
+    stat = lstatSync6(filePath);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     return { verified: false, filename, error: `Cannot stat file: ${msg}` };
@@ -3098,7 +3274,7 @@ function verifyAllOtters(otterDir) {
   for (const filename of otterFiles) {
     const filePath = join6(otterDir, filename);
     try {
-      if (lstatSync5(filePath).isSymbolicLink()) {
+      if (lstatSync6(filePath).isSymbolicLink()) {
         failed.push({ filename, error: "Skipped: symlink" });
         continue;
       }
@@ -3126,7 +3302,7 @@ function resolveOtterDir() {
   for (const relative of DEFAULT_SEARCH_PATHS) {
     const candidate = join6(cwd, relative);
     try {
-      lstatSync5(candidate);
+      lstatSync6(candidate);
       return candidate;
     } catch {
     }
@@ -3181,7 +3357,7 @@ function registerIntegrityTools(server2) {
 
 // src/tools/domain.ts
 import { z as z13 } from "zod";
-import { readFileSync as readFileSync6, existsSync as existsSync6 } from "fs";
+import { readFileSync as readFileSync6, existsSync as existsSync7 } from "fs";
 import { join as join7 } from "path";
 function handleListCollections(input) {
   const cwd = input._cwd ?? process.cwd();
@@ -3204,7 +3380,7 @@ function handleListCollections(input) {
     }
   ];
   for (const { path: path3, source, parse } of sources) {
-    if (!existsSync6(path3)) continue;
+    if (!existsSync7(path3)) continue;
     try {
       const collections = parse(readFileSync6(path3, "utf8"));
       return {
@@ -3358,7 +3534,7 @@ function handleValidateWorkflow(input) {
     raw = input.workflow;
   } else {
     const artifactPath = join7(cwd, ".stackwright", "artifacts", "workflow-config.json");
-    if (!existsSync6(artifactPath)) {
+    if (!existsSync7(artifactPath)) {
       return fail([
         {
           code: "NO_WORKFLOW",
@@ -3606,7 +3782,7 @@ var package_default = {
     "test:coverage": "vitest run --coverage"
   },
   name: "@stackwright-pro/mcp",
-  version: "0.2.0-alpha.17",
+  version: "0.2.0-alpha.19",
   description: "MCP tools for Stackwright Pro - Data Explorer, Security, ISR, and Dashboard generation",
   license: "PROPRIETARY",
   main: "./dist/server.js",