agent-enderun 0.9.3 → 0.9.5

package/framework-mcp/src/tools/types.ts

@@ -0,0 +1,40 @@
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: Record<string, { type: string; description?: string; enum?: string[] }>;
+        required?: string[];
+    };
+}
+
+export interface CallToolRequest {
+    params: {
+        name: string;
+        arguments?: ToolArgs;
+    };
+}
+
+export interface ToolArgs {
+    path?: string;
+    content?: string;
+    oldText?: string;
+    newText?: string;
+    startLine?: number;
+    endLine?: number;
+    newContent?: string;
+    section?: string;
+    to?: string;
+    category?: "ACTION" | "DELEGATION" | "INFO" | "ALERT";
+    traceId?: string;
+    agent?: string;
+    action?: string;
+    status?: "SUCCESS" | "FAILURE";
+    summary?: string;
+    findings?: string;
+}
+
+export interface ToolResult {
+    isError?: boolean;
+    content: Array<{ type: "text"; text: string }>;
+}

package/framework-mcp/src/utils/cli.ts

@@ -0,0 +1,20 @@
+import { execFileSync } from "child_process";
+
+/**
+ * Executes a CLI command safely using execFileSync (no shell injection risk).
+ * Captures stderr gracefully to prevent stream crashes.
+ */
+export function safeExec(command: string, args: string[], cwd: string): string {
+    try {
+        return execFileSync(command, args, {
+            cwd,
+            encoding: "utf8",
+            timeout: 30000,
+            maxBuffer: 1024 * 1024,
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+    } catch (error: unknown) {
+        const err = error as { stderr?: string; message?: string };
+        throw new Error(err.stderr || err.message || "Command execution failed");
+    }
+}

package/framework-mcp/src/utils/security.ts

@@ -0,0 +1,41 @@
+import path from "path";
+import fs from "fs";
+
+/**
+ * Validates and resolves a user-provided path to prevent path traversal attacks.
+ * Ensures the resolved path stays within the project root boundary.
+ */
+export function safePath(projectRoot: string, userPath: string): string {
+    const resolved = path.resolve(projectRoot, userPath);
+    const normalizedRoot = path.resolve(projectRoot);
+
+    if (!resolved.startsWith(normalizedRoot + path.sep) && resolved !== normalizedRoot) {
+        throw new Error(`Access denied: path "${userPath}" escapes project root.`);
+    }
+
+    return resolved;
+}
+
+/**
+ * Resolves the active framework directory by scanning known candidates.
+ */
+export function resolveFrameworkDir(projectRoot: string): string {
+    const candidates = [
+        ".gemini/antigravity",
+        ".gemini/antigravity-cli",
+        ".gemini",
+        ".claude",
+        ".grok",
+        ".agent",
+        ".enderun",
+    ];
+
+    for (const candidate of candidates) {
+        const candidatePath = path.join(projectRoot, candidate);
+        if (fs.existsSync(candidatePath)) {
+            return candidate;
+        }
+    }
+
+    return ".enderun";
+}

package/mcp.json

@@ -2,8 +2,10 @@
   "mcpServers": {
     "agent-enderun": {
       "command": "node",
-      "args": ["framework-mcp/dist/index.js"],
+      "args": [
+        "framework-mcp/dist/index.js"
+      ],
       "env": {}
     }
   }
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-enderun",
-  "version": "0.9.3",
+  "version": "0.9.5",
   "description": "The Supreme AI Governance & Orchestration Framework for Enterprise Development",
   "author": "Yusuf BEKAR",
   "license": "MIT",
@@ -85,4 +85,4 @@
     "version": "0.9.0",
     "initializedAt": "2026-05-29T13:21:18.516Z"
   }
-}
+}

package/src/cli/adapters.ts

@@ -35,7 +35,7 @@ export const ADAPTERS: Record<AdapterId, AdapterConfig> = {
     },
     grok: {
         id: "grok",
-        frameworkDir: ".agent", // Future-proof agent-centric directory for Grok/X.ai
+        frameworkDir: ".grok", // Standard config directory for Grok/X.ai agent
         shimFile: "grok.md",
         templateDir: ".enderun",
     },
@@ -63,6 +63,7 @@ export const FRAMEWORK_DIR_CANDIDATES = [
     ".gemini/antigravity-cli",
     ".gemini",
     ".claude",
+    ".grok",
     ".agent",
     ".enderun",
 ] as const;
@@ -196,6 +197,8 @@ export function runAdapterPostInit(adapter: AdapterConfig, projectRoot: string):
             console.warn("⚠️  Claude config not found. Add MCP manually (see README).");
         }
         writeJsonFile(path.join(projectRoot, adapter.frameworkDir, "mcp_config.json"), mcpBlock);
+        writeJsonFile(path.join(projectRoot, ".mcp.json"), mcpBlock);
+        console.warn("✅ Claude Code Project MCP → .mcp.json");
         break;
     }
     default:

package/src/cli/utils/app.ts

@@ -4,7 +4,7 @@ import crypto from "crypto";
 import { ensureDir, writeTextFile, writeJsonFile } from "../utils/fs.js";
 import { updateProjectMemoryCommand } from "../commands/memory.js"; 
 import { slugifyName, titleCase } from "../utils/string.js";
-import { getConfiguredPaths } from "./memory.js";
+import { getConfiguredPaths, getFrameworkDir, getMemoryPath } from "./memory.js";
 
 
 const targetDir = process.cwd(); // Assuming targetDir is process.cwd() in the CLI context
@@ -752,13 +752,4 @@ export async function collectCreateAppDescription(args: string[]) {
     }
 }
 
-function getFrameworkDir(): string {
-    for (const dir of [".gemini", ".claude", ".agent", ".enderun"]) {
-        if (fs.existsSync(path.join(process.cwd(), dir))) return dir;
-    }
-    return ".gemini";
-}
 
-function getMemoryPath(): string {
-    return path.join(process.cwd(), getFrameworkDir(), "PROJECT_MEMORY.md");
-}

package/src/cli/utils/claude.ts

@@ -9,11 +9,16 @@ export function findClaudeConfigPath(): string | null {
     if (!home) return null;
 
     const possiblePaths = [
+        // Claude Desktop
+        path.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"), // macOS Claude Desktop
+        path.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json"), // Windows Claude Desktop
+        // Claude Code CLI
+        path.join(home, ".claude.json"), // Global Claude Code CLI MCP config
+        // Legacy or system-specific paths
         path.join(home, ".config", "claude", "config.json"),
         path.join(home, ".claude", "config.json"),
-        path.join(home, "Library", "Application Support", "Claude", "config.json"), // macOS Claude Desktop
-        path.join(home, "Library", "Application Support", "Claude Code", "config.json"), // macOS Claude Code
-        path.join(home, ".config", "Claude", "config.json"), // some Linux setups
+        path.join(home, "Library", "Application Support", "Claude Code", "config.json"),
+        path.join(home, ".config", "Claude", "config.json"),
     ];
 
     for (const p of possiblePaths) {