agent-enderun 0.9.4 → 0.9.5

package/framework-mcp/src/tools/messaging/log_action.ts

@@ -0,0 +1,28 @@
+import fs from "fs";
+import path from "path";
+import { resolveFrameworkDir } from "../../utils/security.js";
+import { ToolArgs, ToolResult } from "../types.js";
+
+export function handleLogAgentAction(projectRoot: string, args: ToolArgs): ToolResult {
+    const { agent, action, traceId, status, summary } = args as Required<Pick<ToolArgs, "agent" | "action" | "traceId" | "status" | "summary">>;
+    const findings = args.findings ? args.findings.split(",").map(f => f.trim()) : [];
+
+    const frameworkDir = resolveFrameworkDir(projectRoot);
+    const agentName = (agent as string).replace("@", "");
+    const logPath = path.join(projectRoot, frameworkDir, "logs", `${agentName}.json`);
+
+    const logEntry = {
+        timestamp: new Date().toISOString(),
+        agent,
+        action,
+        requestId: traceId,
+        status,
+        summary,
+        findings
+    };
+
+    fs.mkdirSync(path.dirname(logPath), { recursive: true });
+    fs.appendFileSync(logPath, JSON.stringify(logEntry) + "\n");
+
+    return { content: [{ type: "text", text: `✅ Action logged for ${agent} to ${path.join(frameworkDir, "logs", `${agentName}.json`)}` }] };
+}

package/framework-mcp/src/tools/messaging/send_message.ts

@@ -0,0 +1,26 @@
+import fs from "fs";
+import path from "path";
+import { resolveFrameworkDir } from "../../utils/security.js";
+import { ToolArgs, ToolResult } from "../types.js";
+
+export function handleSendAgentMessage(projectRoot: string, args: ToolArgs): ToolResult {
+    const { to, category, content, traceId } = args as Required<Pick<ToolArgs, "to" | "category" | "content" | "traceId">>;
+    const frameworkDir = resolveFrameworkDir(projectRoot);
+    const agentName = to.replace("@", "");
+    const messagePath = path.join(projectRoot, frameworkDir, "messages", `${agentName}.json`);
+
+    const message = {
+        timestamp: new Date().toISOString(),
+        from: "@mcp",
+        to,
+        category,
+        traceId,
+        content,
+        status: "PENDING"
+    };
+
+    fs.mkdirSync(path.dirname(messagePath), { recursive: true });
+    fs.appendFileSync(messagePath, JSON.stringify(message) + "\n");
+
+    return { content: [{ type: "text", text: `✅ Message sent to ${to}` }] };
+}

package/framework-mcp/src/tools/types.ts

@@ -0,0 +1,40 @@
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: Record<string, { type: string; description?: string; enum?: string[] }>;
+        required?: string[];
+    };
+}
+
+export interface CallToolRequest {
+    params: {
+        name: string;
+        arguments?: ToolArgs;
+    };
+}
+
+export interface ToolArgs {
+    path?: string;
+    content?: string;
+    oldText?: string;
+    newText?: string;
+    startLine?: number;
+    endLine?: number;
+    newContent?: string;
+    section?: string;
+    to?: string;
+    category?: "ACTION" | "DELEGATION" | "INFO" | "ALERT";
+    traceId?: string;
+    agent?: string;
+    action?: string;
+    status?: "SUCCESS" | "FAILURE";
+    summary?: string;
+    findings?: string;
+}
+
+export interface ToolResult {
+    isError?: boolean;
+    content: Array<{ type: "text"; text: string }>;
+}

package/framework-mcp/src/utils/cli.ts

@@ -0,0 +1,20 @@
+import { execFileSync } from "child_process";
+
+/**
+ * Executes a CLI command safely using execFileSync (no shell injection risk).
+ * Captures stderr gracefully to prevent stream crashes.
+ */
+export function safeExec(command: string, args: string[], cwd: string): string {
+    try {
+        return execFileSync(command, args, {
+            cwd,
+            encoding: "utf8",
+            timeout: 30000,
+            maxBuffer: 1024 * 1024,
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+    } catch (error: unknown) {
+        const err = error as { stderr?: string; message?: string };
+        throw new Error(err.stderr || err.message || "Command execution failed");
+    }
+}

package/framework-mcp/src/utils/security.ts

@@ -0,0 +1,41 @@
+import path from "path";
+import fs from "fs";
+
+/**
+ * Validates and resolves a user-provided path to prevent path traversal attacks.
+ * Ensures the resolved path stays within the project root boundary.
+ */
+export function safePath(projectRoot: string, userPath: string): string {
+    const resolved = path.resolve(projectRoot, userPath);
+    const normalizedRoot = path.resolve(projectRoot);
+
+    if (!resolved.startsWith(normalizedRoot + path.sep) && resolved !== normalizedRoot) {
+        throw new Error(`Access denied: path "${userPath}" escapes project root.`);
+    }
+
+    return resolved;
+}
+
+/**
+ * Resolves the active framework directory by scanning known candidates.
+ */
+export function resolveFrameworkDir(projectRoot: string): string {
+    const candidates = [
+        ".gemini/antigravity",
+        ".gemini/antigravity-cli",
+        ".gemini",
+        ".claude",
+        ".grok",
+        ".agent",
+        ".enderun",
+    ];
+
+    for (const candidate of candidates) {
+        const candidatePath = path.join(projectRoot, candidate);
+        if (fs.existsSync(candidatePath)) {
+            return candidate;
+        }
+    }
+
+    return ".enderun";
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-enderun",
-  "version": "0.9.4",
+  "version": "0.9.5",
   "description": "The Supreme AI Governance & Orchestration Framework for Enterprise Development",
   "author": "Yusuf BEKAR",
   "license": "MIT",
@@ -85,4 +85,4 @@
     "version": "0.9.0",
     "initializedAt": "2026-05-29T13:21:18.516Z"
   }
-}
+}