agentic-flow 2.0.13 → 2.0.14

package/dist/mcp/fastmcp/tools/hooks/pretrain.js.map

@@ -1 +1 @@
-{"version":3,"file":"pretrain.js","sourceRoot":"","sources":["../../../../../src/mcp/fastmcp/tools/hooks/pretrain.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,WAAW,EAEZ,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,wDAAwD;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACvE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACvG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACpF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACzF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;KAClF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACrF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAEjE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAExE,kCAAkC;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAExE,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,QAAQ,CAC1B,oIAAoI,EACpI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CACnD,CAAC;gBAEF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAE5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;oBAEpC,4BAA4B;oBAC5B,MAAM,KAAK,GAAG,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;oBACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBAC7B,CAAC;oBACD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;oBACzE,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAEjB,2BAA2B;oBAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAChC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnD,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;oBACzC,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,iCAAiC;YACnC,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAErE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,QAAQ,CACrB,sDAAsD,KAAK,cAAc,EACzE,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CACnD,CAAC;gBAEF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,MAAM,SAAS,GAA2B,EAAE,CAAC;gBAE7C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBACrF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAE1C,iBAAiB;oBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACtC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;4BAC1C,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;4BAClD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBAC7C,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,gCAAgC;gBAChC,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;qBAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC;qBACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;oBACxD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACtC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC5B,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBAC9B,CAAC;oBAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;oBACpE,IAAI,QAAQ,EAAE,CAAC;wBACb,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC7D,CAAC;oBACD,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,CAAC,MAAM,mBAAmB,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAEhF,MAAM,cAAc,GAAG;YACrB,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY;YACtD,gBAAgB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,eAAe;SACrE,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAClE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAClB,OAAO,EAAE,IAAI,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;wBACrE,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACjC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;qBAChC,CAAC,CAAC;oBACH,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CACnB,sGAAsG,EACtG,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAErB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;qBACvE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC;qBACpG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC;qBAClG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC;qBAClF,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;qBACnG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC;qBAC/F,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC;YAC5G,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sCAAsC;QACxC,CAAC;QAED,yBAAyB;QACzB,KAAK,CAAC,UAAU,GAAG;YACjB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK;SACN,CAAC;QAEF,oBAAoB;QACpB,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAExB,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEvC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,KAAK,CAAC,KAAK;YAC1B,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,YAAY,EAAE,KAAK,CAAC,OAAO;YAC3B,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM;YACxD,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;CACF,CAAC","sourcesContent":["/**\n * Pretrain Hook - Analyze repository and bootstrap intelligence\n * Swarm-distributed when available, falls back to sequential\n */\n\nimport { z } from 'zod';\nimport * as path from 'path';\nimport * as fs from 'fs';\nimport { execSync } from 'child_process';\nimport type { ToolDefinition } from '../../types/index.js';\nimport {\n  loadIntelligence,\n  saveIntelligence,\n  getAgentForFile,\n  simpleEmbed,\n  agentMapping\n} from './shared.js';\n\nexport const hookPretrainTool: ToolDefinition = {\n  name: 'hook_pretrain',\n  description: 'Analyze repository with swarm for intelligent patterns',\n  parameters: z.object({\n    depth: z.number().optional().default(100).describe('Git history depth'),\n    incremental: z.boolean().optional().default(false).describe('Only analyze changes since last pretrain'),\n    skipGit: z.boolean().optional().default(false).describe('Skip git history analysis'),\n    skipFiles: z.boolean().optional().default(false).describe('Skip file structure analysis'),\n    verbose: z.boolean().optional().default(false).describe('Show detailed progress')\n  }),\n  execute: async ({ depth, incremental, skipGit, skipFiles, verbose }, { onProgress }) => {\n    const startTime = Date.now();\n    const intel = loadIntelligence();\n    const stats = { files: 0, patterns: 0, memories: 0, coedits: 0 };\n\n    onProgress?.({ progress: 0, message: 'Starting pretrain analysis...' });\n\n    // Phase 1: Analyze file structure\n    if (!skipFiles) {\n      onProgress?.({ progress: 0.1, message: 'Analyzing file structure...' });\n\n      try {\n        const filesOutput = execSync(\n          'git ls-files 2>/dev/null || find . -type f -not -path \"./.git/*\" -not -path \"./node_modules/*\" -not -path \"./target/*\" 2>/dev/null',\n          { encoding: 'utf-8', maxBuffer: 50 * 1024 * 1024 }\n        );\n\n        const files = filesOutput.trim().split('\\n').filter(f => f);\n\n        for (const file of files) {\n          stats.files++;\n          const ext = path.extname(file);\n          const agent = getAgentForFile(file);\n\n          // Create Q-learning pattern\n          const state = `edit:${ext || 'unknown'}`;\n          if (!intel.patterns[state]) {\n            intel.patterns[state] = {};\n          }\n          intel.patterns[state][agent] = (intel.patterns[state][agent] || 0) + 0.3;\n          stats.patterns++;\n\n          // Track directory patterns\n          const dir = path.dirname(file);\n          const dirParts = dir.split('/');\n          if (dirParts[0] && !intel.dirPatterns[dirParts[0]]) {\n            intel.dirPatterns[dirParts[0]] = agent;\n          }\n        }\n\n        if (verbose) {\n          console.log(`[Pretrain] Analyzed ${stats.files} files`);\n        }\n      } catch (e) {\n        // Continue without file analysis\n      }\n    }\n\n    // Phase 2: Analyze git history for co-edit patterns\n    if (!skipGit) {\n      onProgress?.({ progress: 0.4, message: 'Analyzing git history...' });\n\n      try {\n        const gitLog = execSync(\n          `git log --name-only --pretty=format:\"COMMIT:%H\" -n ${depth} 2>/dev/null`,\n          { encoding: 'utf-8', maxBuffer: 50 * 1024 * 1024 }\n        );\n\n        const commits = gitLog.split('COMMIT:').filter(c => c.trim());\n        const coEditMap: Record<string, number> = {};\n\n        for (const commit of commits) {\n          const lines = commit.trim().split('\\n').filter(l => l && !l.match(/^[a-f0-9]{40}$/));\n          const files = lines.filter(f => f.trim());\n\n          // Track co-edits\n          for (let i = 0; i < files.length; i++) {\n            for (let j = i + 1; j < files.length; j++) {\n              const key = [files[i], files[j]].sort().join('|');\n              coEditMap[key] = (coEditMap[key] || 0) + 1;\n            }\n          }\n        }\n\n        // Store strong co-edit patterns\n        const strongPatterns = Object.entries(coEditMap)\n          .filter(([, count]) => count >= 3)\n          .sort((a, b) => b[1] - a[1]);\n\n        for (const [key, count] of strongPatterns.slice(0, 100)) {\n          const [file1, file2] = key.split('|');\n          if (!intel.sequences[file1]) {\n            intel.sequences[file1] = [];\n          }\n\n          const existing = intel.sequences[file1].find(s => s.file === file2);\n          if (existing) {\n            existing.score += count;\n          } else {\n            intel.sequences[file1].push({ file: file2, score: count });\n          }\n          stats.coedits++;\n        }\n\n        if (verbose) {\n          console.log(`[Pretrain] Found ${strongPatterns.length} co-edit patterns`);\n        }\n      } catch (e) {\n        // Continue without git analysis\n      }\n    }\n\n    // Phase 3: Create memories from important files\n    onProgress?.({ progress: 0.7, message: 'Creating memories from key files...' });\n\n    const importantFiles = [\n      'README.md', 'CLAUDE.md', 'package.json', 'Cargo.toml',\n      'pyproject.toml', 'go.mod', '.claude/settings.json', 'tsconfig.json'\n    ];\n\n    for (const filename of importantFiles) {\n      const filePath = path.join(process.cwd(), filename);\n      if (fs.existsSync(filePath)) {\n        try {\n          const content = fs.readFileSync(filePath, 'utf-8').slice(0, 2000);\n          intel.memories.push({\n            content: `[${filename}] ${content.replace(/\\n/g, ' ').slice(0, 500)}`,\n            type: 'project',\n            created: new Date().toISOString(),\n            embedding: simpleEmbed(content)\n          });\n          stats.memories++;\n        } catch (e) {\n          // Skip unreadable files\n        }\n      }\n    }\n\n    // Phase 4: Build directory-agent mappings\n    onProgress?.({ progress: 0.85, message: 'Building directory mappings...' });\n\n    try {\n      const dirs = execSync(\n        'find . -type d -maxdepth 2 -not -path \"./.git*\" -not -path \"./node_modules*\" 2>/dev/null || echo \".\"',\n        { encoding: 'utf-8' }\n      ).trim().split('\\n');\n\n      for (const dir of dirs) {\n        const name = path.basename(dir);\n        if (['src', 'lib', 'core'].includes(name)) intel.dirPatterns[dir] = 'coder';\n        else if (['test', 'tests', '__tests__', 'spec'].includes(name)) intel.dirPatterns[dir] = 'test-engineer';\n        else if (['docs', 'documentation'].includes(name)) intel.dirPatterns[dir] = 'documentation-specialist';\n        else if (['scripts', 'bin'].includes(name)) intel.dirPatterns[dir] = 'devops-engineer';\n        else if (['components', 'views', 'pages'].includes(name)) intel.dirPatterns[dir] = 'frontend-developer';\n        else if (['api', 'routes', 'handlers'].includes(name)) intel.dirPatterns[dir] = 'backend-developer';\n        else if (['models', 'entities', 'schemas'].includes(name)) intel.dirPatterns[dir] = 'database-specialist';\n      }\n    } catch (e) {\n      // Continue without directory analysis\n    }\n\n    // Save pretrain metadata\n    intel.pretrained = {\n      date: new Date().toISOString(),\n      stats\n    };\n\n    // Save intelligence\n    saveIntelligence(intel);\n\n    onProgress?.({ progress: 1.0, message: 'Pretrain complete!' });\n\n    const latency = Date.now() - startTime;\n\n    return {\n      success: true,\n      filesAnalyzed: stats.files,\n      patternsCreated: stats.patterns,\n      memoriesStored: stats.memories,\n      coEditsFound: stats.coedits,\n      directoryMappings: Object.keys(intel.dirPatterns).length,\n      latencyMs: latency,\n      timestamp: new Date().toISOString()\n    };\n  }\n};\n"]}
+{"version":3,"file":"pretrain.js","sourceRoot":"","sources":["../../../../../src/mcp/fastmcp/tools/hooks/pretrain.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACZ,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,wDAAwD;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACvE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACvG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACpF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACzF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;KAClF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACnG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAEjE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAExE,kCAAkC;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAExE,IAAI,CAAC;gBACH,0EAA0E;gBAC1E,oDAAoD;gBACpD,MAAM,WAAW,GAAG,QAAQ,CAC1B,oIAAoI,EACpI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CACnD,CAAC;gBAEF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAE5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;oBAEpC,4BAA4B;oBAC5B,MAAM,KAAK,GAAG,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;oBACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBAC7B,CAAC;oBACD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;oBACzE,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAEjB,2BAA2B;oBAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAChC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnD,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;oBACzC,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,iCAAiC;YACnC,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAErE,IAAI,CAAC;gBACH,yEAAyE;gBACzE,uEAAuE;gBACvE,8DAA8D;gBAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,YAAY,CACzB,KAAK,EACL,CAAC,KAAK,EAAE,aAAa,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAC5E,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CACpG,CAAC;gBAEF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,MAAM,SAAS,GAA2B,EAAE,CAAC;gBAE7C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBACrF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAE1C,iBAAiB;oBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACtC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;4BAC1C,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;4BAClD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBAC7C,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,gCAAgC;gBAChC,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;qBAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC;qBACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;oBACxD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACtC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC5B,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBAC9B,CAAC;oBAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;oBACpE,IAAI,QAAQ,EAAE,CAAC;wBACb,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC7D,CAAC;oBACD,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,CAAC,MAAM,mBAAmB,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAEhF,MAAM,cAAc,GAAG;YACrB,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY;YACtD,gBAAgB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,eAAe;SACrE,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAClE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAClB,OAAO,EAAE,IAAI,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;wBACrE,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACjC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;qBAChC,CAAC,CAAC;oBACH,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,4EAA4E;YAC5E,qBAAqB;YACrB,MAAM,IAAI,GAAG,QAAQ,CACnB,sGAAsG,EACtG,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAErB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;qBACvE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC;qBACpG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC;qBAClG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC;qBAClF,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;qBACnG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC;qBAC/F,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC;YAC5G,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sCAAsC;QACxC,CAAC;QAED,yBAAyB;QACzB,KAAK,CAAC,UAAU,GAAG;YACjB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK;SACN,CAAC;QAEF,oBAAoB;QACpB,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAExB,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEvC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,KAAK,CAAC,KAAK;YAC1B,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,YAAY,EAAE,KAAK,CAAC,OAAO;YAC3B,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM;YACxD,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;CACF,CAAC","sourcesContent":["/**\n * Pretrain Hook - Analyze repository and bootstrap intelligence\n * Swarm-distributed when available, falls back to sequential\n */\n\nimport { z } from 'zod';\nimport * as path from 'path';\nimport * as fs from 'fs';\nimport { execSync, execFileSync } from 'child_process';\nimport type { ToolDefinition } from '../../types/index.js';\nimport {\n  loadIntelligence,\n  saveIntelligence,\n  getAgentForFile,\n  simpleEmbed\n} from './shared.js';\n\nexport const hookPretrainTool: ToolDefinition = {\n  name: 'hook_pretrain',\n  description: 'Analyze repository with swarm for intelligent patterns',\n  parameters: z.object({\n    depth: z.number().optional().default(100).describe('Git history depth'),\n    incremental: z.boolean().optional().default(false).describe('Only analyze changes since last pretrain'),\n    skipGit: z.boolean().optional().default(false).describe('Skip git history analysis'),\n    skipFiles: z.boolean().optional().default(false).describe('Skip file structure analysis'),\n    verbose: z.boolean().optional().default(false).describe('Show detailed progress')\n  }),\n  execute: async ({ depth, incremental: _incremental, skipGit, skipFiles, verbose }, { onProgress }) => {\n    const startTime = Date.now();\n    const intel = loadIntelligence();\n    const stats = { files: 0, patterns: 0, memories: 0, coedits: 0 };\n\n    onProgress?.({ progress: 0, message: 'Starting pretrain analysis...' });\n\n    // Phase 1: Analyze file structure\n    if (!skipFiles) {\n      onProgress?.({ progress: 0.1, message: 'Analyzing file structure...' });\n\n      try {\n        // Static command, no user input — shell is required for the `||` fallback\n        // and `2>/dev/null` redirection. NOT a CWE-78 sink.\n        const filesOutput = execSync(\n          'git ls-files 2>/dev/null || find . -type f -not -path \"./.git/*\" -not -path \"./node_modules/*\" -not -path \"./target/*\" 2>/dev/null',\n          { encoding: 'utf-8', maxBuffer: 50 * 1024 * 1024 }\n        );\n\n        const files = filesOutput.trim().split('\\n').filter(f => f);\n\n        for (const file of files) {\n          stats.files++;\n          const ext = path.extname(file);\n          const agent = getAgentForFile(file);\n\n          // Create Q-learning pattern\n          const state = `edit:${ext || 'unknown'}`;\n          if (!intel.patterns[state]) {\n            intel.patterns[state] = {};\n          }\n          intel.patterns[state][agent] = (intel.patterns[state][agent] || 0) + 0.3;\n          stats.patterns++;\n\n          // Track directory patterns\n          const dir = path.dirname(file);\n          const dirParts = dir.split('/');\n          if (dirParts[0] && !intel.dirPatterns[dirParts[0]]) {\n            intel.dirPatterns[dirParts[0]] = agent;\n          }\n        }\n\n        if (verbose) {\n          console.log(`[Pretrain] Analyzed ${stats.files} files`);\n        }\n      } catch (e) {\n        // Continue without file analysis\n      }\n    }\n\n    // Phase 2: Analyze git history for co-edit patterns\n    if (!skipGit) {\n      onProgress?.({ progress: 0.4, message: 'Analyzing git history...' });\n\n      try {\n        // Security (CWE-78): depth is z.number() validated, but use execFileSync\n        // with argv to hard-prevent any future schema relaxation from becoming\n        // an injection sink. Coerce to a positive integer explicitly.\n        const safeDepth = Math.max(1, Math.floor(Number(depth) || 100));\n        const gitLog = execFileSync(\n          'git',\n          ['log', '--name-only', '--pretty=format:COMMIT:%H', '-n', String(safeDepth)],\n          { shell: false, encoding: 'utf-8', maxBuffer: 50 * 1024 * 1024, stdio: ['pipe', 'pipe', 'ignore'] }\n        );\n\n        const commits = gitLog.split('COMMIT:').filter(c => c.trim());\n        const coEditMap: Record<string, number> = {};\n\n        for (const commit of commits) {\n          const lines = commit.trim().split('\\n').filter(l => l && !l.match(/^[a-f0-9]{40}$/));\n          const files = lines.filter(f => f.trim());\n\n          // Track co-edits\n          for (let i = 0; i < files.length; i++) {\n            for (let j = i + 1; j < files.length; j++) {\n              const key = [files[i], files[j]].sort().join('|');\n              coEditMap[key] = (coEditMap[key] || 0) + 1;\n            }\n          }\n        }\n\n        // Store strong co-edit patterns\n        const strongPatterns = Object.entries(coEditMap)\n          .filter(([, count]) => count >= 3)\n          .sort((a, b) => b[1] - a[1]);\n\n        for (const [key, count] of strongPatterns.slice(0, 100)) {\n          const [file1, file2] = key.split('|');\n          if (!intel.sequences[file1]) {\n            intel.sequences[file1] = [];\n          }\n\n          const existing = intel.sequences[file1].find(s => s.file === file2);\n          if (existing) {\n            existing.score += count;\n          } else {\n            intel.sequences[file1].push({ file: file2, score: count });\n          }\n          stats.coedits++;\n        }\n\n        if (verbose) {\n          console.log(`[Pretrain] Found ${strongPatterns.length} co-edit patterns`);\n        }\n      } catch (e) {\n        // Continue without git analysis\n      }\n    }\n\n    // Phase 3: Create memories from important files\n    onProgress?.({ progress: 0.7, message: 'Creating memories from key files...' });\n\n    const importantFiles = [\n      'README.md', 'CLAUDE.md', 'package.json', 'Cargo.toml',\n      'pyproject.toml', 'go.mod', '.claude/settings.json', 'tsconfig.json'\n    ];\n\n    for (const filename of importantFiles) {\n      const filePath = path.join(process.cwd(), filename);\n      if (fs.existsSync(filePath)) {\n        try {\n          const content = fs.readFileSync(filePath, 'utf-8').slice(0, 2000);\n          intel.memories.push({\n            content: `[${filename}] ${content.replace(/\\n/g, ' ').slice(0, 500)}`,\n            type: 'project',\n            created: new Date().toISOString(),\n            embedding: simpleEmbed(content)\n          });\n          stats.memories++;\n        } catch (e) {\n          // Skip unreadable files\n        }\n      }\n    }\n\n    // Phase 4: Build directory-agent mappings\n    onProgress?.({ progress: 0.85, message: 'Building directory mappings...' });\n\n    try {\n      // Static command, no user input — shell required for `2>/dev/null || echo`.\n      // NOT a CWE-78 sink.\n      const dirs = execSync(\n        'find . -type d -maxdepth 2 -not -path \"./.git*\" -not -path \"./node_modules*\" 2>/dev/null || echo \".\"',\n        { encoding: 'utf-8' }\n      ).trim().split('\\n');\n\n      for (const dir of dirs) {\n        const name = path.basename(dir);\n        if (['src', 'lib', 'core'].includes(name)) intel.dirPatterns[dir] = 'coder';\n        else if (['test', 'tests', '__tests__', 'spec'].includes(name)) intel.dirPatterns[dir] = 'test-engineer';\n        else if (['docs', 'documentation'].includes(name)) intel.dirPatterns[dir] = 'documentation-specialist';\n        else if (['scripts', 'bin'].includes(name)) intel.dirPatterns[dir] = 'devops-engineer';\n        else if (['components', 'views', 'pages'].includes(name)) intel.dirPatterns[dir] = 'frontend-developer';\n        else if (['api', 'routes', 'handlers'].includes(name)) intel.dirPatterns[dir] = 'backend-developer';\n        else if (['models', 'entities', 'schemas'].includes(name)) intel.dirPatterns[dir] = 'database-specialist';\n      }\n    } catch (e) {\n      // Continue without directory analysis\n    }\n\n    // Save pretrain metadata\n    intel.pretrained = {\n      date: new Date().toISOString(),\n      stats\n    };\n\n    // Save intelligence\n    saveIntelligence(intel);\n\n    onProgress?.({ progress: 1.0, message: 'Pretrain complete!' });\n\n    const latency = Date.now() - startTime;\n\n    return {\n      success: true,\n      filesAnalyzed: stats.files,\n      patternsCreated: stats.patterns,\n      memoriesStored: stats.memories,\n      coEditsFound: stats.coedits,\n      directoryMappings: Object.keys(intel.dirPatterns).length,\n      latencyMs: latency,\n      timestamp: new Date().toISOString()\n    };\n  }\n};\n"]}

package/dist/mcp/fastmcp/tools/swarm/orchestrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrate.d.ts","sourceRoot":"","sources":["../../../../../src/mcp/fastmcp/tools/swarm/orchestrate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,eAAO,MAAM,mBAAmB,EAAE,cA4CjC,CAAC"}
+{"version":3,"file":"orchestrate.d.ts","sourceRoot":"","sources":["../../../../../src/mcp/fastmcp/tools/swarm/orchestrate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,eAAO,MAAM,mBAAmB,EAAE,cA8CjC,CAAC"}

package/dist/mcp/fastmcp/tools/swarm/orchestrate.js

@@ -1,6 +1,7 @@
+/* eslint-disable @typescript-eslint/no-explicit-any -- pre-existing catch(error: any) handlers; outside scope of CWE-78 fix */
 // Task orchestration tool implementation using FastMCP
 import { z } from 'zod';
-import { execSync } from 'child_process';
+import { execFileSync } from 'child_process';
 export const taskOrchestrateTool = {
     name: 'task_orchestrate',
     description: 'Orchestrate a complex task across the swarm',
@@ -21,11 +22,14 @@ export const taskOrchestrateTool = {
             .optional()
             .describe('Maximum agents to use for this task')
     }),
-    execute: async ({ task, strategy, priority, maxAgents }, { onProgress, auth }) => {
+    execute: async ({ task, strategy, priority, maxAgents }, { onProgress: _onProgress, auth }) => {
         try {
-            const maxStr = maxAgents ? ` --max-agents ${maxAgents}` : '';
-            const cmd = `npx claude-flow@alpha task orchestrate "${task}" --strategy ${strategy} --priority ${priority}${maxStr}`;
-            const result = execSync(cmd, {
+            // Security (CWE-78): use execFileSync with argv array; `task` is attacker-influenceable.
+            const args = ['claude-flow@alpha', 'task', 'orchestrate', task, '--strategy', strategy, '--priority', priority];
+            if (maxAgents)
+                args.push('--max-agents', String(maxAgents));
+            const result = execFileSync('npx', args, {
+                shell: false,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024
             });

package/dist/mcp/fastmcp/tools/swarm/orchestrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrate.js","sourceRoot":"","sources":["../../../../../src/mcp/fastmcp/tools/swarm/orchestrate.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,6CAA6C;IAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;aACb,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kCAAkC,CAAC;QAC/C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;aACrD,QAAQ,EAAE;aACV,OAAO,CAAC,UAAU,CAAC;aACnB,QAAQ,CAAC,oBAAoB,CAAC;QACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;aACpD,QAAQ,EAAE;aACV,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CAAC,eAAe,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;aAClB,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,qCAAqC,CAAC;KACnD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,2CAA2C,IAAI,gBAAgB,QAAQ,eAAe,QAAQ,GAAG,MAAM,EAAE,CAAC;YAEtH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI;gBACJ,QAAQ;gBACR,QAAQ;gBACR,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,IAAI,EAAE,MAAM;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;CACF,CAAC","sourcesContent":["// Task orchestration tool implementation using FastMCP\nimport { z } from 'zod';\nimport { execSync } from 'child_process';\nimport type { ToolDefinition } from '../../types/index.js';\n\nexport const taskOrchestrateTool: ToolDefinition = {\n  name: 'task_orchestrate',\n  description: 'Orchestrate a complex task across the swarm',\n  parameters: z.object({\n    task: z.string()\n      .min(1)\n      .describe('Task description or instructions'),\n    strategy: z.enum(['parallel', 'sequential', 'adaptive'])\n      .optional()\n      .default('adaptive')\n      .describe('Execution strategy'),\n    priority: z.enum(['low', 'medium', 'high', 'critical'])\n      .optional()\n      .default('medium')\n      .describe('Task priority'),\n    maxAgents: z.number()\n      .positive()\n      .optional()\n      .describe('Maximum agents to use for this task')\n  }),\n  execute: async ({ task, strategy, priority, maxAgents }, { onProgress, auth }) => {\n    try {\n      const maxStr = maxAgents ? ` --max-agents ${maxAgents}` : '';\n      const cmd = `npx claude-flow@alpha task orchestrate \"${task}\" --strategy ${strategy} --priority ${priority}${maxStr}`;\n\n      const result = execSync(cmd, {\n        encoding: 'utf-8',\n        maxBuffer: 10 * 1024 * 1024\n      });\n\n      return {\n        success: true,\n        task,\n        strategy,\n        priority,\n        maxAgents,\n        result: result.trim(),\n        userId: auth?.userId,\n        timestamp: new Date().toISOString()\n      };\n    } catch (error: any) {\n      throw new Error(`Failed to orchestrate task: ${error.message}`);\n    }\n  }\n};\n"]}
+{"version":3,"file":"orchestrate.js","sourceRoot":"","sources":["../../../../../src/mcp/fastmcp/tools/swarm/orchestrate.ts"],"names":[],"mappings":"AAAA,+HAA+H;AAC/H,uDAAuD;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,6CAA6C;IAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;aACb,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,kCAAkC,CAAC;QAC/C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;aACrD,QAAQ,EAAE;aACV,OAAO,CAAC,UAAU,CAAC;aACnB,QAAQ,CAAC,oBAAoB,CAAC;QACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;aACpD,QAAQ,EAAE;aACV,OAAO,CAAC,QAAQ,CAAC;aACjB,QAAQ,CAAC,eAAe,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;aAClB,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,qCAAqC,CAAC;KACnD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;QAC5F,IAAI,CAAC;YACH,yFAAyF;YACzF,MAAM,IAAI,GAAa,CAAC,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC1H,IAAI,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAE5D,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;gBACvC,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI;gBACJ,QAAQ;gBACR,QAAQ;gBACR,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,IAAI,EAAE,MAAM;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;CACF,CAAC","sourcesContent":["/* eslint-disable @typescript-eslint/no-explicit-any -- pre-existing catch(error: any) handlers; outside scope of CWE-78 fix */\n// Task orchestration tool implementation using FastMCP\nimport { z } from 'zod';\nimport { execFileSync } from 'child_process';\nimport type { ToolDefinition } from '../../types/index.js';\n\nexport const taskOrchestrateTool: ToolDefinition = {\n  name: 'task_orchestrate',\n  description: 'Orchestrate a complex task across the swarm',\n  parameters: z.object({\n    task: z.string()\n      .min(1)\n      .describe('Task description or instructions'),\n    strategy: z.enum(['parallel', 'sequential', 'adaptive'])\n      .optional()\n      .default('adaptive')\n      .describe('Execution strategy'),\n    priority: z.enum(['low', 'medium', 'high', 'critical'])\n      .optional()\n      .default('medium')\n      .describe('Task priority'),\n    maxAgents: z.number()\n      .positive()\n      .optional()\n      .describe('Maximum agents to use for this task')\n  }),\n  execute: async ({ task, strategy, priority, maxAgents }, { onProgress: _onProgress, auth }) => {\n    try {\n      // Security (CWE-78): use execFileSync with argv array; `task` is attacker-influenceable.\n      const args: string[] = ['claude-flow@alpha', 'task', 'orchestrate', task, '--strategy', strategy, '--priority', priority];\n      if (maxAgents) args.push('--max-agents', String(maxAgents));\n\n      const result = execFileSync('npx', args, {\n        shell: false,\n        encoding: 'utf-8',\n        maxBuffer: 10 * 1024 * 1024\n      });\n\n      return {\n        success: true,\n        task,\n        strategy,\n        priority,\n        maxAgents,\n        result: result.trim(),\n        userId: auth?.userId,\n        timestamp: new Date().toISOString()\n      };\n    } catch (error: any) {\n      throw new Error(`Failed to orchestrate task: ${error.message}`);\n    }\n  }\n};\n"]}

package/dist/mcp/standalone-stdio.js

@@ -1,8 +1,14 @@
 #!/usr/bin/env node
+/* eslint-disable @typescript-eslint/no-explicit-any -- pre-existing catch(error: any) handlers; outside scope of CWE-78 fix */
 // Standalone agentic-flow MCP server - runs directly via stdio without spawning subprocesses
 import { FastMCP } from 'fastmcp';
 import { z } from 'zod';
-import { execSync } from 'child_process';
+import { execFileSync } from 'child_process';
+// Security: All shell-outs use execFileSync with argv arrays (shell: false) to
+// prevent OS command injection via tool parameters (CWE-78). Do NOT reintroduce
+// execSync with template-string interpolation here — every prior occurrence in
+// this file was an injection sink reachable through MCP tool arguments.
+const NPX_EXEC_OPTS = { shell: false };
 // Suppress FastMCP internal warnings for cleaner output
 const originalConsoleWarn = console.warn;
 console.warn = (...args) => {
@@ -49,13 +55,14 @@ server.addTool({
     }),
     execute: async ({ agent, task, model, provider, anthropicApiKey, openrouterApiKey, stream, temperature, maxTokens, agentsDir, outputFormat, verbose, timeout, retryOnError }) => {
         try {
-            // Build command with all parameters
-            let cmd = `npx --yes agentic-flow --agent "${agent}" --task "${task}"`;
+            // Build argv (NOT a shell string) — every user-supplied value stays a
+            // separate argv element and cannot be reinterpreted by the shell.
+            const args = ['--yes', 'agentic-flow', '--agent', agent, '--task', task];
             // Provider & Model
             if (model)
-                cmd += ` --model "${model}"`;
+                args.push('--model', model);
             if (provider)
-                cmd += ` --provider ${provider}`;
+                args.push('--provider', provider);
             // API Keys (set as env vars)
             const env = { ...process.env };
             if (anthropicApiKey)
@@ -64,23 +71,24 @@ server.addTool({
                 env.OPENROUTER_API_KEY = openrouterApiKey;
             // Agent Behavior
             if (stream)
-                cmd += ' --stream';
+                args.push('--stream');
             if (temperature !== undefined)
-                cmd += ` --temperature ${temperature}`;
+                args.push('--temperature', String(temperature));
             if (maxTokens)
-                cmd += ` --max-tokens ${maxTokens}`;
+                args.push('--max-tokens', String(maxTokens));
             // Directories
             if (agentsDir)
-                cmd += ` --agents-dir "${agentsDir}"`;
+                args.push('--agents-dir', agentsDir);
             // Output
             if (outputFormat)
-                cmd += ` --output ${outputFormat}`;
+                args.push('--output', outputFormat);
             if (verbose)
-                cmd += ' --verbose';
+                args.push('--verbose');
             // Execution
             if (retryOnError)
-                cmd += ' --retry';
-            const result = execSync(cmd, {
+                args.push('--retry');
+            const result = execFileSync('npx', args, {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: timeout || 300000,
@@ -107,9 +115,8 @@ server.addTool({
     parameters: z.object({}),
     execute: async () => {
         try {
-            // Use npx to run agentic-flow from npm registry
-            const cmd = `npx --yes agentic-flow --list`;
-            const result = execSync(cmd, {
+            const result = execFileSync('npx', ['--yes', 'agentic-flow', '--list'], {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 5 * 1024 * 1024,
                 timeout: 30000
@@ -137,12 +144,18 @@ server.addTool({
     }),
     execute: async ({ name, description, systemPrompt, category, tools }) => {
         try {
-            let cmd = `npx --yes agentic-flow agent create --name "${name}" --description "${description}" --prompt "${systemPrompt}"`;
+            const args = [
+                '--yes', 'agentic-flow', 'agent', 'create',
+                '--name', name,
+                '--description', description,
+                '--prompt', systemPrompt
+            ];
             if (category && category !== 'custom')
-                cmd += ` --category "${category}"`;
+                args.push('--category', category);
             if (tools && tools.length > 0)
-                cmd += ` --tools "${tools.join(',')}"`;
-            const result = execSync(cmd, {
+                args.push('--tools', tools.join(','));
+            const result = execFileSync('npx', args, {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 60000,
@@ -171,8 +184,8 @@ server.addTool({
     }),
     execute: async ({ format, filterSource }) => {
         try {
-            const cmd = `npx --yes agentic-flow agent list ${format || 'summary'}`;
-            const result = execSync(cmd, {
+            const result = execFileSync('npx', ['--yes', 'agentic-flow', 'agent', 'list', format || 'summary'], {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 30000
@@ -209,8 +222,8 @@ server.addTool({
     }),
     execute: async ({ name }) => {
         try {
-            const cmd = `npx --yes agentic-flow agent info "${name}"`;
-            const result = execSync(cmd, {
+            const result = execFileSync('npx', ['--yes', 'agentic-flow', 'agent', 'info', name], {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 30000
@@ -233,8 +246,8 @@ server.addTool({
     parameters: z.object({}),
     execute: async () => {
         try {
-            const cmd = `npx --yes agentic-flow agent conflicts`;
-            const result = execSync(cmd, {
+            const result = execFileSync('npx', ['--yes', 'agentic-flow', 'agent', 'conflicts'], {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 30000
@@ -261,16 +274,17 @@ server.addTool({
     }),
     execute: async ({ agent, task, priority, max_cost }) => {
         try {
-            let cmd = `npx --yes agentic-flow --agent "${agent}" --task "${task}" --optimize`;
+            const args = ['--yes', 'agentic-flow', '--agent', agent, '--task', task, '--optimize'];
             if (priority && priority !== 'balanced') {
-                cmd += ` --priority ${priority}`;
+                args.push('--priority', priority);
             }
             if (max_cost) {
-                cmd += ` --max-cost ${max_cost}`;
+                args.push('--max-cost', String(max_cost));
             }
             // Add dry-run to just get recommendation without execution
-            cmd += ' --help'; // This will show the optimization without running
-            const result = execSync(cmd, {
+            args.push('--help'); // This will show the optimization without running
+            execFileSync('npx', args, {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 10000
@@ -323,8 +337,8 @@ server.addTool({
                 language = langMap[ext] || 'javascript';
             }
             // Apply edit using agent-booster@0.2.2 CLI (automatically installs from npm if not available)
-            const cmd = `npx --yes agent-booster@0.2.2 apply --language ${language}`;
-            const result = execSync(cmd, {
+            const result = execFileSync('npx', ['--yes', 'agent-booster@0.2.2', 'apply', '--language', language], {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 input: JSON.stringify({ code: originalCode, edit: code_edit }),
                 maxBuffer: 10 * 1024 * 1024,
@@ -404,8 +418,8 @@ server.addTool({
                     language = langMap[ext] || 'javascript';
                 }
                 // Apply edit
-                const cmd = `npx --yes agent-booster@0.2.2 apply --language ${language}`;
-                const result = execSync(cmd, {
+                const result = execFileSync('npx', ['--yes', 'agent-booster@0.2.2', 'apply', '--language', language], {
+                    ...NPX_EXEC_OPTS,
                     encoding: 'utf-8',
                     input: JSON.stringify({ code: originalCode, edit: edit.code_edit }),
                     maxBuffer: 10 * 1024 * 1024,
@@ -464,7 +478,7 @@ server.addTool({
             const edits = [];
             let match;
             while ((match = regex.exec(markdown)) !== null) {
-                const [_, language, filepath, instruction, code_edit] = match;
+                const [, language, filepath, instruction, code_edit] = match;
                 edits.push({
                     target_filepath: filepath.trim(),
                     instructions: instruction.trim(),
@@ -492,8 +506,8 @@ server.addTool({
                     };
                     language = langMap[ext] || 'javascript';
                 }
-                const cmd = `npx --yes agent-booster@0.2.2 apply --language ${language}`;
-                const result = execSync(cmd, {
+                const result = execFileSync('npx', ['--yes', 'agent-booster@0.2.2', 'apply', '--language', language], {
+                    ...NPX_EXEC_OPTS,
                     encoding: 'utf-8',
                     input: JSON.stringify({ code: originalCode, edit: edit.code_edit }),
                     maxBuffer: 10 * 1024 * 1024,
@@ -543,8 +557,8 @@ server.addTool({
     parameters: z.object({}),
     execute: async () => {
         try {
-            const cmd = `npx agentdb db stats`;
-            const result = execSync(cmd, {
+            const result = execFileSync('npx', ['agentdb', 'db', 'stats'], {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 5 * 1024 * 1024,
                 timeout: 10000
@@ -577,24 +591,25 @@ server.addTool({
     }),
     execute: async ({ sessionId, task, reward, success, critique, input, output, latencyMs, tokensUsed }) => {
         try {
-            const args = [
+            const cliArgs = [
+                'agentdb', 'reflexion', 'store',
                 sessionId,
-                `"${task}"`,
+                task,
                 reward.toString(),
                 success.toString()
             ];
             if (critique)
-                args.push(`"${critique}"`);
+                cliArgs.push(critique);
             if (input)
-                args.push(`"${input}"`);
+                cliArgs.push(input);
             if (output)
-                args.push(`"${output}"`);
+                cliArgs.push(output);
             if (latencyMs !== undefined)
-                args.push(latencyMs.toString());
+                cliArgs.push(latencyMs.toString());
             if (tokensUsed !== undefined)
-                args.push(tokensUsed.toString());
-            const cmd = `npx agentdb reflexion store ${args.join(' ')}`;
-            const result = execSync(cmd, {
+                cliArgs.push(tokensUsed.toString());
+            const result = execFileSync('npx', cliArgs, {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 30000
@@ -627,15 +642,15 @@ server.addTool({
     }),
     execute: async ({ task, k, minReward, onlySuccesses, onlyFailures }) => {
         try {
-            const args = [`"${task}"`, (k || 5).toString()];
+            const cliArgs = ['agentdb', 'reflexion', 'retrieve', task, (k || 5).toString()];
             if (minReward !== undefined)
-                args.push(minReward.toString());
+                cliArgs.push(minReward.toString());
             if (onlyFailures)
-                args.push('true', 'false');
+                cliArgs.push('true', 'false');
             else if (onlySuccesses)
-                args.push('false', 'true');
-            const cmd = `npx agentdb reflexion retrieve ${args.join(' ')}`;
-            const result = execSync(cmd, {
+                cliArgs.push('false', 'true');
+            const result = execFileSync('npx', cliArgs, {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 30000
@@ -668,8 +683,8 @@ server.addTool({
     }),
     execute: async ({ task, k }) => {
         try {
-            const cmd = `npx agentdb reflexion critique-summary "${task}" ${k || 5}`;
-            const result = execSync(cmd, {
+            const result = execFileSync('npx', ['agentdb', 'reflexion', 'critique-summary', task, String(k || 5)], {
+                ...NPX_EXEC_OPTS,
                 encoding: 'utf-8',
                 maxBuffer: 10 * 1024 * 1024,
                 timeout: 30000