@task-mcp/shared 1.0.4 → 1.0.6

package/src/utils/id.ts

@@ -1,10 +1,12 @@
 /**
- * Generate a unique ID with optional prefix
+ * Generate a unique ID with optional prefix.
+ * Uses crypto.randomUUID for secure, collision-resistant ID generation.
  */
 export function generateId(prefix: string = ""): string {
-  const timestamp = Date.now().toString(36);
-  const random = Math.random().toString(36).substring(2, 8);
-  return prefix ? `${prefix}_${timestamp}${random}` : `${timestamp}${random}`;
+  // Use crypto.randomUUID for better randomness and collision resistance
+  // Format: prefix_xxxxxxxx (8 chars from UUID, sufficient for local uniqueness)
+  const uuid = crypto.randomUUID().replace(/-/g, "").slice(0, 12);
+  return prefix ? `${prefix}_${uuid}` : uuid;
 }
 
 /**
@@ -43,3 +45,136 @@ export function isValidProjectId(id: string): boolean {
 export function isValidTaskId(id: string): boolean {
   return /^task_[a-z0-9]+$/.test(id);
 }
+
+/**
+ * Generate an inbox item ID
+ */
+export function generateInboxId(): string {
+  return generateId("inbox");
+}
+
+/**
+ * Validate an inbox ID format
+ * @returns true if valid format (inbox_[alphanumeric])
+ */
+export function isValidInboxId(id: string): boolean {
+  return /^inbox_[a-z0-9]+$/.test(id);
+}
+
+/**
+ * ID validation error with detailed context
+ */
+export class InvalidIdError extends Error {
+  constructor(
+    public readonly idType: "task" | "project" | "inbox" | "view",
+    public readonly invalidValue: unknown,
+    public readonly reason: string
+  ) {
+    super(`Invalid ${idType} ID: ${reason}`);
+    this.name = "InvalidIdError";
+  }
+}
+
+/**
+ * Validation result with reason if invalid
+ */
+export interface IdValidationResult {
+  valid: boolean;
+  reason?: string;
+}
+
+/**
+ * Validate task ID with detailed error information
+ */
+export function validateTaskId(id: unknown): IdValidationResult {
+  if (id === null || id === undefined) {
+    return { valid: false, reason: "Task ID is required" };
+  }
+  if (typeof id !== "string") {
+    return { valid: false, reason: `Task ID must be a string (received ${typeof id})` };
+  }
+  if (id.length === 0) {
+    return { valid: false, reason: "Task ID cannot be empty" };
+  }
+  if (!id.startsWith("task_")) {
+    return { valid: false, reason: "Task ID must start with 'task_' prefix" };
+  }
+  if (!/^task_[a-z0-9]+$/.test(id)) {
+    return { valid: false, reason: "Task ID contains invalid characters" };
+  }
+  return { valid: true };
+}
+
+/**
+ * Validate project ID with detailed error information
+ */
+export function validateProjectId(id: unknown): IdValidationResult {
+  if (id === null || id === undefined) {
+    return { valid: false, reason: "Project ID is required" };
+  }
+  if (typeof id !== "string") {
+    return { valid: false, reason: `Project ID must be a string (received ${typeof id})` };
+  }
+  if (id.length === 0) {
+    return { valid: false, reason: "Project ID cannot be empty" };
+  }
+  if (!id.startsWith("proj_")) {
+    return { valid: false, reason: "Project ID must start with 'proj_' prefix" };
+  }
+  if (!/^proj_[a-z0-9]+$/.test(id)) {
+    return { valid: false, reason: "Project ID contains invalid characters" };
+  }
+  return { valid: true };
+}
+
+/**
+ * Validate inbox ID with detailed error information
+ */
+export function validateInboxId(id: unknown): IdValidationResult {
+  if (id === null || id === undefined) {
+    return { valid: false, reason: "Inbox ID is required" };
+  }
+  if (typeof id !== "string") {
+    return { valid: false, reason: `Inbox ID must be a string (received ${typeof id})` };
+  }
+  if (id.length === 0) {
+    return { valid: false, reason: "Inbox ID cannot be empty" };
+  }
+  if (!id.startsWith("inbox_")) {
+    return { valid: false, reason: "Inbox ID must start with 'inbox_' prefix" };
+  }
+  if (!/^inbox_[a-z0-9]+$/.test(id)) {
+    return { valid: false, reason: "Inbox ID contains invalid characters" };
+  }
+  return { valid: true };
+}
+
+/**
+ * Assert valid task ID, throw if invalid
+ */
+export function assertValidTaskId(id: unknown): asserts id is string {
+  const result = validateTaskId(id);
+  if (!result.valid) {
+    throw new InvalidIdError("task", id, result.reason!);
+  }
+}
+
+/**
+ * Assert valid project ID, throw if invalid
+ */
+export function assertValidProjectId(id: unknown): asserts id is string {
+  const result = validateProjectId(id);
+  if (!result.valid) {
+    throw new InvalidIdError("project", id, result.reason!);
+  }
+}
+
+/**
+ * Assert valid inbox ID, throw if invalid
+ */
+export function assertValidInboxId(id: unknown): asserts id is string {
+  const result = validateInboxId(id);
+  if (!result.valid) {
+    throw new InvalidIdError("inbox", id, result.reason!);
+  }
+}

package/src/utils/index.ts

@@ -1,3 +1,47 @@
-export { generateId, generateTaskId, generateProjectId, generateViewId, isValidProjectId, isValidTaskId } from "./id.js";
+export {
+  generateId,
+  generateTaskId,
+  generateProjectId,
+  generateViewId,
+  isValidProjectId,
+  isValidTaskId,
+  generateInboxId,
+  isValidInboxId,
+  // Validation utilities with detailed error information
+  InvalidIdError,
+  type IdValidationResult,
+  validateTaskId,
+  validateProjectId,
+  validateInboxId,
+  assertValidTaskId,
+  assertValidProjectId,
+  assertValidInboxId,
+} from "./id.js";
 export { now, parseRelativeDate, formatDate, formatDisplayDate, isToday, isPastDue, isWithinDays } from "./date.js";
-export { parseTaskInput } from "./natural-language.js";
+export { parseTaskInput, parseInboxInput, parseInput, type ParseTarget, type ParsedInput } from "./natural-language.js";
+export {
+  MAX_HIERARCHY_DEPTH,
+  getTaskLevel,
+  validateHierarchyDepth,
+  getAncestorIds,
+  getDescendantIds,
+  getChildTasks,
+  getRootTask,
+  buildTaskTree,
+  type TaskTreeNode,
+} from "./hierarchy.js";
+
+// Projection utilities (token optimization)
+export {
+  projectTask,
+  projectTasks,
+  projectTasksPaginated,
+  projectProject,
+  projectProjects,
+  projectInboxItem,
+  projectInboxItems,
+  formatResponse,
+  applyPagination,
+  truncate,
+  summarizeList,
+} from "./projection.js";

package/src/utils/natural-language.ts

@@ -1,6 +1,118 @@
 import type { Priority, TaskCreateInput } from "../schemas/task.js";
+import type { InboxCreateInput } from "../schemas/inbox.js";
 import { parseRelativeDate, formatDate } from "./date.js";
 
+/**
+ * Maximum allowed input length for natural language parsing.
+ * Prevents DoS attacks from extremely long input strings.
+ */
+export const MAX_INPUT_LENGTH = 1000;
+
+/**
+ * Error thrown when input validation fails
+ */
+export class InputValidationError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "InputValidationError";
+  }
+}
+
+/**
+ * Validates input string length
+ * @throws {InputValidationError} if input exceeds MAX_INPUT_LENGTH
+ */
+function validateInputLength(input: string): void {
+  if (input.length > MAX_INPUT_LENGTH) {
+    throw new InputValidationError(
+      `Input exceeds maximum length of ${MAX_INPUT_LENGTH} characters (received ${input.length})`
+    );
+  }
+}
+
+/**
+ * Target type for parsed input
+ */
+export type ParseTarget = "task" | "inbox";
+
+/**
+ * Extended parse result with target information
+ */
+export interface ParsedInput {
+  target: ParseTarget;
+  task?: TaskCreateInput;
+  inbox?: InboxCreateInput;
+}
+
+/**
+ * Parse natural language input with target detection
+ *
+ * Target keywords:
+ * - >>inbox, >>메모, >>아이디어 → capture to inbox
+ * - >>task, >>태스크 (default) → create task
+ *
+ * Examples:
+ * - "API 리팩토링 아이디어 >>inbox #backend"
+ * - "Review PR tomorrow #dev !high" (default: task)
+ * - "새 기능 구상 >>메모"
+ */
+export function parseInput(input: string): ParsedInput {
+  validateInputLength(input);
+  let remaining = input.trim();
+  let target: ParseTarget = "task";
+
+  // Detect target keywords (>>inbox, >>task, >>메모, >>아이디어, >>태스크)
+  const targetMatch = remaining.match(/>>(inbox|task|메모|아이디어|태스크)/i);
+  if (targetMatch) {
+    const keyword = targetMatch[1]!.toLowerCase();
+    if (keyword === "inbox" || keyword === "메모" || keyword === "아이디어") {
+      target = "inbox";
+    } else {
+      target = "task";
+    }
+    remaining = remaining.replace(targetMatch[0], "").trim();
+  }
+
+  if (target === "inbox") {
+    return {
+      target: "inbox",
+      inbox: parseInboxInput(remaining),
+    };
+  }
+
+  return {
+    target: "task",
+    task: parseTaskInput(remaining),
+  };
+}
+
+/**
+ * Parse natural language inbox input
+ *
+ * Examples:
+ * - "GraphQL 도입 검토 #backend #연구"
+ * - "성능 개선 아이디어 #performance"
+ */
+export function parseInboxInput(input: string): InboxCreateInput {
+  validateInputLength(input);
+  let remaining = input.trim();
+  const result: InboxCreateInput = { content: "" };
+
+  // Extract tags (#dev, #backend, #개발)
+  const tagMatches = remaining.match(/#([\p{L}\p{N}_]+)/gu);
+  if (tagMatches) {
+    result.tags = tagMatches.map((m) => m.slice(1));
+    for (const match of tagMatches) {
+      remaining = remaining.replace(match, "").trim();
+    }
+  }
+
+  // Clean up and set content
+  result.content = remaining.replace(/\s+/g, " ").trim();
+
+  return result;
+}
+
 /**
  * Parse natural language task input
  *
@@ -11,6 +123,7 @@ import { parseRelativeDate, formatDate } from "./date.js";
  * - "Write tests every Monday #testing"
  */
 export function parseTaskInput(input: string): TaskCreateInput {
+  validateInputLength(input);
   let remaining = input.trim();
   const result: TaskCreateInput = { title: "" };