@swarmdo/cli 1.4.8

package/vendor/cli-core/dist/src/index.d.ts

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+/**
+ * @swarmdo/cli-core entry point — alpha.1 surface.
+ *
+ * Status: alpha (ADR-100). alpha.1 lands the MemoryBackend abstraction +
+ * a working `memory` command surface backed by JsonMemoryBackend.
+ *
+ * Stable exports:
+ *   - types: CommandContext, Command, CommandResult, ParsedFlags
+ *   - output: terminal printing + tables + spinners + progress
+ *   - mcp-tools/types: MCPTool, MCPToolInputSchema, MCPToolResult
+ *   - mcp-tools/validate-input: input bounds and shape validators
+ *   - memory: MemoryBackend, MemoryEntry, MemorySearchResult, JsonMemoryBackend
+ *
+ * Working CLI surface (alpha.1):
+ *   memory store <key> <value> [--namespace] [--tags] [--ttl] [--upsert] [--format=json]
+ *   memory retrieve <key>      [--namespace] [--format=json]
+ *   memory list                [--namespace] [--limit] [--tags] [--format=json]
+ *   memory search <query>      [--namespace] [--limit] [--threshold] [--format=json]
+ *   memory delete <key>        [--namespace] [--format=json]
+ *   memory stats               [--format=json]
+ *
+ * Coming in alpha.2 (ADR-100 §Discovery):
+ *   - mcp-tools/memory: memory_* MCPTool definitions wired to the backend
+ *   - mcp-tools/hooks:  hooks_* MCPTool definitions (def-only — handlers
+ *                       stay in @swarmdo/cli, dynamic-imported)
+ *   - hooks command surface (the second half of the lite path)
+ */
+export * from './types.js';
+export * as output from './output.js';
+export type { MCPTool, MCPToolInputSchema, MCPToolResult } from './mcp-tools/types.js';
+export type { MCPToolDef } from './mcp-tools/memory-defs.js';
+export * as validateInput from './mcp-tools/validate-input.js';
+export { memoryToolDefs } from './mcp-tools/memory-defs.js';
+export { hooksToolDefs } from './mcp-tools/hooks-defs.js';
+export { allToolDefs } from './mcp-tools/index.js';
+export type { MemoryBackend, MemoryEntry, MemorySearchResult, MemoryStats, StoreOptions, SearchOptions, ListOptions, } from './memory/backend.js';
+export { JsonMemoryBackend } from './memory/json-backend.js';
+export { runMemoryCommand } from './commands/memory.js';
+//# sourceMappingURL=index.d.ts.map

package/vendor/cli-core/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,cAAc,YAAY,CAAC;AAC3B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvF,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAC;AAG/D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,YAAY,EACV,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC"}

package/vendor/cli-core/dist/src/index.js

@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+/**
+ * @swarmdo/cli-core entry point — alpha.1 surface.
+ *
+ * Status: alpha (ADR-100). alpha.1 lands the MemoryBackend abstraction +
+ * a working `memory` command surface backed by JsonMemoryBackend.
+ *
+ * Stable exports:
+ *   - types: CommandContext, Command, CommandResult, ParsedFlags
+ *   - output: terminal printing + tables + spinners + progress
+ *   - mcp-tools/types: MCPTool, MCPToolInputSchema, MCPToolResult
+ *   - mcp-tools/validate-input: input bounds and shape validators
+ *   - memory: MemoryBackend, MemoryEntry, MemorySearchResult, JsonMemoryBackend
+ *
+ * Working CLI surface (alpha.1):
+ *   memory store <key> <value> [--namespace] [--tags] [--ttl] [--upsert] [--format=json]
+ *   memory retrieve <key>      [--namespace] [--format=json]
+ *   memory list                [--namespace] [--limit] [--tags] [--format=json]
+ *   memory search <query>      [--namespace] [--limit] [--threshold] [--format=json]
+ *   memory delete <key>        [--namespace] [--format=json]
+ *   memory stats               [--format=json]
+ *
+ * Coming in alpha.2 (ADR-100 §Discovery):
+ *   - mcp-tools/memory: memory_* MCPTool definitions wired to the backend
+ *   - mcp-tools/hooks:  hooks_* MCPTool definitions (def-only — handlers
+ *                       stay in @swarmdo/cli, dynamic-imported)
+ *   - hooks command surface (the second half of the lite path)
+ */
+import { fileURLToPath } from 'node:url';
+import { runMemoryCommand } from './commands/memory.js';
+// Re-export foundation surface so plugin authors can pin to cli-core.
+export * from './types.js';
+export * as output from './output.js';
+export * as validateInput from './mcp-tools/validate-input.js';
+// MCP tool *definitions* (alpha.2) — pure data, no handlers.
+export { memoryToolDefs } from './mcp-tools/memory-defs.js';
+export { hooksToolDefs } from './mcp-tools/hooks-defs.js';
+export { allToolDefs } from './mcp-tools/index.js';
+export { JsonMemoryBackend } from './memory/json-backend.js';
+export { runMemoryCommand } from './commands/memory.js';
+// Bin entry — runs when invoked as `swarmdo-core <command>`.
+// Standard ESM main detection: realpath the script path and compare.
+// Earlier alpha tags used a fragile endsWith check that failed when
+// invoked via the npm bin shim (process.argv[1] points at the .bin
+// wrapper, not the underlying dist/src/index.js). Published binaries
+// were silently no-op; this fix makes them work.
+const isMain = (() => {
+    if (!process.argv[1])
+        return false;
+    try {
+        // Re-import to avoid top-level await in the conditional path
+        const fileURL = `file://${process.argv[1]}`;
+        if (import.meta.url === fileURL)
+            return true;
+        // npm bin-shim case: argv[1] is the .bin/swarmdo-core symlink.
+        // Resolve real path and compare.
+        const { realpathSync } = require('node:fs');
+        const { fileURLToPath } = require('node:url');
+        const argvReal = realpathSync(process.argv[1]);
+        const moduleReal = realpathSync(fileURLToPath(import.meta.url));
+        return argvReal === moduleReal;
+    }
+    catch {
+        // Fallback heuristic — if argv[1] mentions swarmdo-core or our
+        // dist path, assume we're the binary. Better to over-trigger and
+        // serve a usage screen than under-trigger and silently no-op.
+        return /swarmdo-core|cli-core\/dist\//.test(process.argv[1]);
+    }
+})();
+if (isMain) {
+    const args = process.argv.slice(2);
+    if (args[0] === '--version' || args[0] === '-v') {
+        const url = new URL('../../package.json', import.meta.url);
+        const fs = await import('node:fs/promises');
+        const pkg = JSON.parse(await fs.readFile(fileURLToPath(url), 'utf-8'));
+        console.log(pkg.version);
+        process.exit(0);
+    }
+    if (args[0] === 'memory') {
+        const code = await runMemoryCommand(args.slice(1));
+        process.exit(code);
+    }
+    if (args[0] === '--help' || args[0] === '-h' || args.length === 0) {
+        console.log(`@swarmdo/cli-core — alpha.1 (ADR-100)
+
+Lite core surface: <250 KB packed, <1s cold-cache. Memory + (coming) hooks only.
+
+Working subcommands:
+  memory store <key> <value> [--namespace] [--tags] [--ttl] [--upsert]
+  memory retrieve <key>      [--namespace]
+  memory list                [--namespace] [--limit] [--tags]
+  memory search <query>      [--namespace] [--limit] [--threshold]
+  memory delete <key>        [--namespace]
+  memory stats
+
+  All subcommands accept --format=json for machine-readable output.
+
+Storage:
+  JsonMemoryBackend writes to .swarm/memory.json by default. Override with
+  SWARMDO_MEMORY_PATH or --path. Search is substring-only — for semantic
+  vector search, install the heavy @swarmdo/cli@alpha.
+
+Programmatic use:
+  import { JsonMemoryBackend, runMemoryCommand } from '@swarmdo/cli-core';
+
+Track progress: https://github.com/ruvnet/swarmdo/issues/1760`);
+        process.exit(0);
+    }
+    console.error(`@swarmdo/cli-core: command "${args[0]}" not yet wired into cli-core.
+For now, use the full CLI:  npx @swarmdo/cli@alpha ${args.join(' ')}`);
+    process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/vendor/cli-core/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,sEAAsE;AACtE,cAAc,YAAY,CAAC;AAC3B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAGtC,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAC;AAE/D,6DAA6D;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAYnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,6DAA6D;AAC7D,qEAAqE;AACrE,oEAAoE;AACpE,mEAAmE;AACnE,qEAAqE;AACrE,iDAAiD;AACjD,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;IACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC;QACH,6DAA6D;QAC7D,MAAM,OAAO,GAAG,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC7C,+DAA+D;QAC/D,iCAAiC;QACjC,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,QAAQ,KAAK,UAAU,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,iEAAiE;QACjE,8DAA8D;QAC9D,OAAO,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,IAAI,MAAM,EAAE,CAAC;IACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;8DAsB8C,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,+BAA+B,IAAI,CAAC,CAAC,CAAC;qDACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/hooks-defs.d.ts

@@ -0,0 +1,21 @@
+/**
+ * MCPTool *definitions* for the hooks_* family (alpha.2 — ADR-100 §Discovery).
+ *
+ * Pure data — name, description, inputSchema only. No handler functions.
+ *
+ * Subset shipped: the most-used hooks that plugin skills actually invoke
+ * across the cost-tracker, intelligence, and SPARC plugins. Rationale:
+ * the full hooks-tools.ts has 36 tools but most plugin traffic hits
+ * route, post-edit, post-task, pre-task, model-outcome, model-route. The
+ * remaining 30 stay in @swarmdo/cli for now (they pull in heavy ML
+ * deps — sona-optimizer, ewc-consolidation, swarmvector/*).
+ *
+ * If a session needs a hooks_* not in this list, it falls through to
+ * @swarmdo/cli@alpha at the cost of one extra cold-cache hit.
+ *
+ * Description framing matches the 3.6.30 sharpening: lead with "Use when
+ * native X is wrong because Y" or "Native tools have no equivalent".
+ */
+import type { MCPToolDef } from './memory-defs.js';
+export declare const hooksToolDefs: MCPToolDef[];
+//# sourceMappingURL=hooks-defs.d.ts.map

package/vendor/cli-core/dist/src/mcp-tools/hooks-defs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-defs.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/hooks-defs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,eAAO,MAAM,aAAa,EAAE,UAAU,EA0GrC,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/hooks-defs.js

@@ -0,0 +1,119 @@
+/**
+ * MCPTool *definitions* for the hooks_* family (alpha.2 — ADR-100 §Discovery).
+ *
+ * Pure data — name, description, inputSchema only. No handler functions.
+ *
+ * Subset shipped: the most-used hooks that plugin skills actually invoke
+ * across the cost-tracker, intelligence, and SPARC plugins. Rationale:
+ * the full hooks-tools.ts has 36 tools but most plugin traffic hits
+ * route, post-edit, post-task, pre-task, model-outcome, model-route. The
+ * remaining 30 stay in @swarmdo/cli for now (they pull in heavy ML
+ * deps — sona-optimizer, ewc-consolidation, swarmvector/*).
+ *
+ * If a session needs a hooks_* not in this list, it falls through to
+ * @swarmdo/cli@alpha at the cost of one extra cold-cache hit.
+ *
+ * Description framing matches the 3.6.30 sharpening: lead with "Use when
+ * native X is wrong because Y" or "Native tools have no equivalent".
+ */
+export const hooksToolDefs = [
+    {
+        name: 'hooks_route',
+        description: 'Get a 3-tier routing recommendation for a task: Tier 1 (Agent Booster, 0ms / $0 — for var-to-const, add-types, etc.), Tier 2 (Haiku — simple), Tier 3 (Sonnet/Opus — complex). Use this BEFORE spawning an agent to avoid sending simple transforms to Sonnet. Native tools have no equivalent — Claude Code does not introspect its own model-selection cost. Returns the recommended model + a `[AGENT_BOOSTER_AVAILABLE]` literal when the WASM bypass applies.',
+        category: 'hooks',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                task: { type: 'string', description: 'Task description' },
+                context: { type: 'string', description: 'Additional context (optional)' },
+                useSemanticRouter: { type: 'boolean', description: 'Use semantic similarity routing (default: true; no-op in cli-core lite path)' },
+            },
+            required: ['task'],
+        },
+    },
+    {
+        name: 'hooks_pre-task',
+        description: 'Record task start + return optimal-agent suggestions, model-routing recommendations, and any cached optimization patterns for similar past tasks. Use BEFORE invoking the Task tool when you want the pre-flight insight. Output includes `[AGENT_BOOSTER_AVAILABLE]` and `[TASK_MODEL_RECOMMENDATION]` literals where applicable.',
+        category: 'hooks',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                description: { type: 'string', description: 'Task description (will be classified for tier routing)' },
+                coordinateSwarm: { type: 'boolean', description: 'If true, also coordinate via swarm topology (default: false)' },
+            },
+            required: ['description'],
+        },
+    },
+    {
+        name: 'hooks_post-task',
+        description: 'Record task completion outcome — success/failure flag, optional results — so future routing decisions learn from this trajectory. Pair with hooks_pre-task: the (start, end) pair feeds the SONA neural router so subsequent similar tasks pick a better tier next time. No native equivalent — Claude Code does not have a learning loop.',
+        category: 'hooks',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                taskId: { type: 'string', description: 'Task ID (from hooks_pre-task)' },
+                success: { type: 'boolean', description: 'Did the task succeed?' },
+                storeResults: { type: 'boolean', description: 'Persist to learning bank (default: true)' },
+            },
+            required: ['taskId', 'success'],
+        },
+    },
+    {
+        name: 'hooks_post-edit',
+        description: 'Record an Edit/Write/MultiEdit outcome — file path, success flag — so the system can train neural patterns on what worked. Use AFTER each Edit to feed the auto-routing learning loop. The trained patterns let future similar edits route through the cheaper tier.',
+        category: 'hooks',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                file: { type: 'string', description: 'File path edited' },
+                success: { type: 'boolean', description: 'Was the edit successful?' },
+                trainNeural: { type: 'boolean', description: 'Train neural patterns from this outcome (default: true)' },
+            },
+            required: ['file'],
+        },
+    },
+    {
+        name: 'hooks_model-outcome',
+        description: 'Record the outcome of a model selection (success / escalated / failure) so the router learns which tier handled the task best. Typed equivalent of the legacy routing-outcomes namespace. Use after an applied cost-optimize recommendation closes the loop on whether the downgrade worked.',
+        category: 'hooks',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                task: { type: 'string', description: 'Task description (matched against router patterns)' },
+                model: { type: 'string', description: 'Model used (haiku, sonnet, opus, ...)' },
+                outcome: {
+                    type: 'string',
+                    enum: ['success', 'escalated', 'failure'],
+                    description: 'success = handled fine; escalated = had to upgrade tier; failure = errored',
+                },
+            },
+            required: ['task', 'model', 'outcome'],
+        },
+    },
+    {
+        name: 'hooks_model-route',
+        description: 'Recommend a model (haiku / sonnet / opus) for a given task description based on past routing-outcomes. Use when you have a task and want the router\'s opinion before paying for Sonnet. Returns null if no learned signal exists yet — fall back to your default model.',
+        category: 'hooks',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                task: { type: 'string', description: 'Task description' },
+            },
+            required: ['task'],
+        },
+    },
+    {
+        name: 'hooks_explain',
+        description: 'Why did the router pick what it picked? Returns a human-readable explanation of the most recent routing decision for a topic — which past trajectories matched, what tier was selected, what the confidence was. Useful when an agent picks Sonnet for something you expected to route to Haiku.',
+        category: 'hooks',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                topic: { type: 'string', description: 'Topic/task to explain routing for' },
+                detailed: { type: 'boolean', description: 'Include full trajectory matches (default: false)' },
+            },
+            required: ['topic'],
+        },
+    },
+];
+//# sourceMappingURL=hooks-defs.js.map

package/vendor/cli-core/dist/src/mcp-tools/hooks-defs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-defs.js","sourceRoot":"","sources":["../../../src/mcp-tools/hooks-defs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,ocAAoc;QACtc,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;gBACzD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;gBACzE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8EAA8E,EAAE;aACpI;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,oUAAoU;QACtU,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;gBACtG,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8DAA8D,EAAE;aAClH;YACD,QAAQ,EAAE,CAAC,aAAa,CAAC;SAC1B;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,4UAA4U;QAC9U,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;gBACxE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBAClE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE;aAC3F;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;SAChC;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,sQAAsQ;QACxQ,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;gBACzD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACrE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yDAAyD,EAAE;aACzG;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,8RAA8R;QAChS,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oDAAoD,EAAE;gBAC3F,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;gBAC/E,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC;oBACzC,WAAW,EAAE,4EAA4E;iBAC1F;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;SACvC;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,0QAA0Q;QAC5Q,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;aAC1D;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,kSAAkS;QACpS,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;gBAC3E,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kDAAkD,EAAE;aAC/F;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF;CACF,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * MCP tool definitions exposed by cli-core (alpha.2).
+ *
+ * These are pure data — name, description, inputSchema only. No handlers.
+ *
+ * Consumer pattern: an MCP server backed by cli-core registers these
+ * definitions with `tools/list`; when the model invokes one, the server
+ * dynamic-imports the handler from @swarmdo/cli (or wires its own
+ * cli-core-local handler). cli-core stays small because it never imports
+ * the heavy handler chain unless the user asks for it.
+ */
+export type { MCPToolDef } from './memory-defs.js';
+export { memoryToolDefs } from './memory-defs.js';
+export { hooksToolDefs } from './hooks-defs.js';
+export type { MCPTool, MCPToolInputSchema, MCPToolResult } from './types.js';
+export * as validateInput from './validate-input.js';
+/**
+ * Convenience: every MCPTool definition cli-core ships, in one array.
+ * Suitable for direct registration with an MCP `tools/list` response.
+ */
+export declare const allToolDefs: import("./memory-defs.js").MCPToolDef[];
+//# sourceMappingURL=index.d.ts.map

package/vendor/cli-core/dist/src/mcp-tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AAKrD;;;GAGG;AACH,eAAO,MAAM,WAAW,yCAAwC,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/index.js

@@ -0,0 +1,22 @@
+/**
+ * MCP tool definitions exposed by cli-core (alpha.2).
+ *
+ * These are pure data — name, description, inputSchema only. No handlers.
+ *
+ * Consumer pattern: an MCP server backed by cli-core registers these
+ * definitions with `tools/list`; when the model invokes one, the server
+ * dynamic-imports the handler from @swarmdo/cli (or wires its own
+ * cli-core-local handler). cli-core stays small because it never imports
+ * the heavy handler chain unless the user asks for it.
+ */
+export { memoryToolDefs } from './memory-defs.js';
+export { hooksToolDefs } from './hooks-defs.js';
+export * as validateInput from './validate-input.js';
+import { memoryToolDefs } from './memory-defs.js';
+import { hooksToolDefs } from './hooks-defs.js';
+/**
+ * Convenience: every MCPTool definition cli-core ships, in one array.
+ * Suitable for direct registration with an MCP `tools/list` response.
+ */
+export const allToolDefs = [...memoryToolDefs, ...hooksToolDefs];
+//# sourceMappingURL=index.js.map

package/vendor/cli-core/dist/src/mcp-tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp-tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,aAAa,CAAC,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/memory-defs.d.ts

@@ -0,0 +1,23 @@
+/**
+ * MCPTool *definitions* for the memory_* family (alpha.2 — ADR-100 §Discovery).
+ *
+ * Pure data — name, description, inputSchema only. No handler functions.
+ *
+ * The handler implementations stay in @swarmdo/cli (they need the heavy
+ * SqliteHnswMemoryBackend for semantic search) OR can be wired against
+ * cli-core's own JsonMemoryBackend for the lite path.
+ *
+ * cli-core ships these definitions so an MCP server can advertise the
+ * memory_* tools to a Claude session without paying the cold-cache cost
+ * of pulling the full handler tree. The handler is dynamic-imported only
+ * at request time.
+ *
+ * Descriptions match the 3.6.30 sharpening (#1748 Issue 4 — "Use when
+ * native X is wrong because Y" framing).
+ */
+import type { MCPTool } from './types.js';
+export type MCPToolDef = Pick<MCPTool, 'name' | 'description' | 'inputSchema'> & {
+    category?: string;
+};
+export declare const memoryToolDefs: MCPToolDef[];
+//# sourceMappingURL=memory-defs.d.ts.map

package/vendor/cli-core/dist/src/mcp-tools/memory-defs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-defs.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/memory-defs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAI1C,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,GAAG;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,UAAU,EAqFtC,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/memory-defs.js

@@ -0,0 +1,98 @@
+/**
+ * MCPTool *definitions* for the memory_* family (alpha.2 — ADR-100 §Discovery).
+ *
+ * Pure data — name, description, inputSchema only. No handler functions.
+ *
+ * The handler implementations stay in @swarmdo/cli (they need the heavy
+ * SqliteHnswMemoryBackend for semantic search) OR can be wired against
+ * cli-core's own JsonMemoryBackend for the lite path.
+ *
+ * cli-core ships these definitions so an MCP server can advertise the
+ * memory_* tools to a Claude session without paying the cold-cache cost
+ * of pulling the full handler tree. The handler is dynamic-imported only
+ * at request time.
+ *
+ * Descriptions match the 3.6.30 sharpening (#1748 Issue 4 — "Use when
+ * native X is wrong because Y" framing).
+ */
+export const memoryToolDefs = [
+    {
+        name: 'memory_store',
+        description: 'Persistent key-value store with vector embedding — survives across sessions and is searchable by meaning, not just by file path. Use when native Write is wrong because the data is not a file (e.g. a learned pattern, a decision, a budget config) AND you need to recall it later by semantic query, not by path. Defaults to namespace="default"; pass --upsert=true to update an existing key.',
+        category: 'memory',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                key: { type: 'string', description: 'Memory key (unique within namespace)' },
+                value: { description: 'Value to store (string or object)' },
+                namespace: { type: 'string', description: 'Namespace for organization (default: "default")' },
+                tags: { type: 'array', items: { type: 'string' }, description: 'Optional tags for filtering' },
+                ttl: { type: 'number', description: 'Time-to-live in seconds (optional)' },
+                upsert: { type: 'boolean', description: 'If true, update existing key instead of failing (default: false)' },
+            },
+            required: ['key', 'value'],
+        },
+    },
+    {
+        name: 'memory_retrieve',
+        description: 'Read back a value previously stored via memory_store, by exact (namespace, key) — lossless, includes metadata. Use when native Read is wrong because the value is not a file (it lives in the .swarm/memory.db SQLite store) AND you know the exact key. For semantic lookup by meaning, use memory_search.',
+        category: 'memory',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                key: { type: 'string', description: 'Memory key' },
+                namespace: { type: 'string', description: 'Namespace (default: "default")' },
+            },
+            required: ['key'],
+        },
+    },
+    {
+        name: 'memory_search',
+        description: 'Find stored memories by meaning (vector similarity), not by literal text — finds "JWT auth pattern" when you query "token-based login flow". Use when native Grep is wrong because Grep matches characters and you need to find conceptually-related entries across past sessions. Backed by HNSW index over ONNX embeddings (heavy backend) or substring fallback (lite cli-core JSON backend); returns top-k with similarity scores.',
+        category: 'memory',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                query: { type: 'string', description: 'Search query (semantic similarity)' },
+                namespace: { type: 'string', description: 'Namespace to search (default: "default")' },
+                limit: { type: 'number', description: 'Maximum results (default: 10)' },
+                threshold: { type: 'number', description: 'Minimum similarity threshold 0-1 (default: 0.3)' },
+                smart: { type: 'boolean', description: 'Enable SmartRetrieval pipeline — query expansion, RRF fusion, recency boost, MMR diversity (default: false). No-op in cli-core lite backend.' },
+            },
+            required: ['query'],
+        },
+    },
+    {
+        name: 'memory_delete',
+        description: 'Remove a stored memory entry by exact (namespace, key). Use when a previously stored decision is invalidated or contains stale data. No native equivalent — Write to a file does not affect the .swarm/memory.db SQLite store.',
+        category: 'memory',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                key: { type: 'string', description: 'Memory key' },
+                namespace: { type: 'string', description: 'Namespace (default: "default")' },
+            },
+            required: ['key'],
+        },
+    },
+    {
+        name: 'memory_list',
+        description: 'Enumerate stored memory entries (optionally filtered by namespace/tags) without semantic search. Use when native Glob is wrong because the entries are not files (they live in .swarm/memory.db). For inspection / audit / "what is in my memory" — pair with memory_search for retrieval-by-meaning.',
+        category: 'memory',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                namespace: { type: 'string', description: 'Namespace filter (optional)' },
+                limit: { type: 'number', description: 'Maximum entries (default: 100)' },
+                tags: { type: 'array', items: { type: 'string' }, description: 'Tag filter (intersection)' },
+            },
+        },
+    },
+    {
+        name: 'memory_stats',
+        description: 'Backend health and size summary — total entries, namespaces in use, on-disk size in bytes, backend identifier (json or sqlite-hnsw). Useful for "what does this project have stored?" diagnostics.',
+        category: 'memory',
+        inputSchema: { type: 'object', properties: {} },
+    },
+];
+//# sourceMappingURL=memory-defs.js.map

package/vendor/cli-core/dist/src/mcp-tools/memory-defs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-defs.js","sourceRoot":"","sources":["../../../src/mcp-tools/memory-defs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAUH,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,qYAAqY;QACvY,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;gBAC5E,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;gBAC3D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE;gBAC7F,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,6BAA6B,EAAE;gBAC9F,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;gBAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kEAAkE,EAAE;aAC7G;YACD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;SAC3B;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,6SAA6S;QAC/S,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE;gBAClD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;aAC7E;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SAClB;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,waAAwa;QAC1a,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;gBAC5E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;gBACtF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;gBACvE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE;gBAC7F,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8IAA8I,EAAE;aACxL;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,gOAAgO;QAClO,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE;gBAClD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;aAC7E;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SAClB;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,uSAAuS;QACzS,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;gBACzE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;gBACxE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;aAC7F;SACF;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,oMAAoM;QACtM,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;KAChD;CACF,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/types.d.ts

@@ -0,0 +1,37 @@
+/**
+ * MCP Tool Types for CLI
+ *
+ * Local type definitions to avoid external imports outside package boundary.
+ */
+export interface MCPToolInputSchema {
+    type: 'object';
+    properties: Record<string, unknown>;
+    required?: string[];
+}
+export interface MCPToolResult {
+    content: Array<{
+        type: 'text' | 'image' | 'resource';
+        text?: string;
+        data?: string;
+        mimeType?: string;
+    }>;
+    isError?: boolean;
+}
+/**
+ * Returns the effective project working directory.
+ * Prefers SWARMDO_CWD (set by the install script for global/MCP installs
+ * where process.cwd() may resolve to '/') over the real process.cwd().
+ */
+export declare function getProjectCwd(): string;
+export interface MCPTool {
+    name: string;
+    description: string;
+    inputSchema: MCPToolInputSchema;
+    category?: string;
+    tags?: string[];
+    version?: string;
+    cacheable?: boolean;
+    cacheTTL?: number;
+    handler: (input: Record<string, unknown>, context?: Record<string, unknown>) => Promise<MCPToolResult | unknown>;
+}
+//# sourceMappingURL=types.d.ts.map

package/vendor/cli-core/dist/src/mcp-tools/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;QACpC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAMtC;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,CAAC;CAClH"}

package/vendor/cli-core/dist/src/mcp-tools/types.js

@@ -0,0 +1,18 @@
+/**
+ * MCP Tool Types for CLI
+ *
+ * Local type definitions to avoid external imports outside package boundary.
+ */
+/**
+ * Returns the effective project working directory.
+ * Prefers SWARMDO_CWD (set by the install script for global/MCP installs
+ * where process.cwd() may resolve to '/') over the real process.cwd().
+ */
+export function getProjectCwd() {
+    const envCwd = process.env.SWARMDO_CWD;
+    if (envCwd && envCwd !== '/' && envCwd !== process.env.HOME) {
+        return envCwd;
+    }
+    return process.cwd();
+}
+//# sourceMappingURL=types.js.map

package/vendor/cli-core/dist/src/mcp-tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/mcp-tools/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACvC,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC"}

package/vendor/cli-core/dist/src/mcp-tools/validate-input.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Input Validation for MCP Tools
+ *
+ * Loads @swarmdo/security validators when available
+ * and provides lightweight fallback validation otherwise.
+ *
+ * Addresses #1425: security validators were implemented but never wired to runtime.
+ */
+export interface ValidationResult {
+    valid: boolean;
+    sanitized: string;
+    error?: string;
+}
+/**
+ * Validate an identifier (agent ID, agent type, namespace, key, etc.)
+ * Rejects shell metacharacters and path traversal.
+ */
+export declare function validateIdentifier(value: unknown, label: string): ValidationResult;
+/**
+ * Validate a git ref (HEAD~1, main..feature, commit hashes, etc.).
+ * Allows ~, ^, and / which are standard git revision selectors.
+ */
+export declare function validateGitRef(value: unknown, label: string): ValidationResult;
+/**
+ * Validate an npm package name (allows @scope/name format).
+ */
+export declare function validatePackageName(value: unknown, label: string): ValidationResult;
+/**
+ * Validate a file path (prevents traversal and shell injection).
+ */
+export declare function validatePath(value: unknown, label: string): ValidationResult;
+/**
+ * Validate a free-text string (description, value, etc.)
+ * Allows most characters but rejects shell metacharacters that could cause injection.
+ */
+export declare function validateText(value: unknown, label: string, maxLen?: number): ValidationResult;
+export interface EnvValidationResult {
+    valid: boolean;
+    sanitized: Record<string, string>;
+    error?: string;
+}
+/**
+ * Validate a Record<string,string> of environment variables: enforce POSIX
+ * names, reject hijack-prone names (LD_PRELOAD, NODE_OPTIONS, …), forbid null
+ * bytes in values, and cap value length so a malicious caller can't bloat the
+ * stored session past reasonable bounds.
+ */
+export declare function validateEnv(value: unknown, label?: string): EnvValidationResult;
+/**
+ * Assert validation or throw with a structured error.
+ */
+export declare function assertValid(result: ValidationResult): string;
+/**
+ * Enhanced validation using @swarmdo/security Zod schemas when available.
+ * Falls back to inline regex validation otherwise.
+ */
+export declare function validateAgentSpawn(input: Record<string, unknown>): Promise<{
+    valid: boolean;
+    errors: string[];
+}>;
+//# sourceMappingURL=validate-input.d.ts.map

package/vendor/cli-core/dist/src/mcp-tools/validate-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-input.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/validate-input.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAiBlF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAc9E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAcnF;AAWD;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAiB5E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,gBAAgB,CAU7F;AAyBD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAQ,GAAG,mBAAmB,CA2B9E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAK5D;AAmBD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAyCtH"}