agentic-flow 3.0.0-alpha.2 → 3.1.0

package/dist/agentic-flow/src/mcp/fastmcp/types/index.d.ts

@@ -1,33 +0,0 @@
-export interface AuthContext {
-    userId: string;
-    tier: 'free' | 'pro' | 'enterprise';
-    role: 'user' | 'admin';
-    permissions: string[];
-}
-export interface TransportConfig {
-    type: 'stdio' | 'http';
-    port?: number;
-    host?: string;
-    enableAuth?: boolean;
-    enableCORS?: boolean;
-}
-export interface ToolContext {
-    auth?: AuthContext;
-    onProgress?: (update: ProgressUpdate) => void;
-}
-export interface ProgressUpdate {
-    progress: number;
-    message: string;
-}
-export interface ToolResult {
-    success: boolean;
-    [key: string]: any;
-}
-export interface ToolDefinition {
-    name: string;
-    description: string;
-    parameters: any;
-    canAccess?: (auth: AuthContext) => boolean;
-    execute: (args: any, context: ToolContext) => Promise<any>;
-}
-//# sourceMappingURL=index.d.ts.map

package/dist/agentic-flow/src/mcp/fastmcp/types/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/mcp/fastmcp/types/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;IACpC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CAC5D"}

package/dist/agentic-flow/src/mcp/fastmcp/types/index.js

@@ -1,3 +0,0 @@
-// Type definitions for FastMCP implementation
-export {};
-//# sourceMappingURL=index.js.map

package/dist/agentic-flow/src/mcp/fastmcp/types/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/mcp/fastmcp/types/index.ts"],"names":[],"mappings":"AAAA,8CAA8C","sourcesContent":["// Type definitions for FastMCP implementation\n\nexport interface AuthContext {\n  userId: string;\n  tier: 'free' | 'pro' | 'enterprise';\n  role: 'user' | 'admin';\n  permissions: string[];\n}\n\nexport interface TransportConfig {\n  type: 'stdio' | 'http';\n  port?: number;\n  host?: string;\n  enableAuth?: boolean;\n  enableCORS?: boolean;\n}\n\nexport interface ToolContext {\n  auth?: AuthContext;\n  onProgress?: (update: ProgressUpdate) => void;\n}\n\nexport interface ProgressUpdate {\n  progress: number; // 0-1\n  message: string;\n}\n\nexport interface ToolResult {\n  success: boolean;\n  [key: string]: any;\n}\n\nexport interface ToolDefinition {\n  name: string;\n  description: string;\n  parameters: any; // Zod schema\n  canAccess?: (auth: AuthContext) => boolean;\n  execute: (args: any, context: ToolContext) => Promise<any>;\n}\n"]}

package/dist/agentic-flow/src/mcp/fastmcp-fixes.d.ts

@@ -1,13 +0,0 @@
-/**
- * FastMCP Fixes - Compatibility layer for FastMCP 3.x
- *
- * Provides utilities for working with FastMCP schema format changes.
- */
-/**
- * Placeholder for FastMCP fixes
- * TODO: Implement actual fixes when needed
- */
-export declare const fastmcpFixes: {
-    version: string;
-};
-//# sourceMappingURL=fastmcp-fixes.d.ts.map

package/dist/agentic-flow/src/mcp/fastmcp-fixes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fastmcp-fixes.d.ts","sourceRoot":"","sources":["../../../../src/mcp/fastmcp-fixes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY;;CAGxB,CAAC"}

package/dist/agentic-flow/src/mcp/fastmcp-fixes.js

@@ -1,14 +0,0 @@
-/**
- * FastMCP Fixes - Compatibility layer for FastMCP 3.x
- *
- * Provides utilities for working with FastMCP schema format changes.
- */
-/**
- * Placeholder for FastMCP fixes
- * TODO: Implement actual fixes when needed
- */
-export const fastmcpFixes = {
-    version: '3.0.0',
-    // Add compatibility helpers here as needed
-};
-//# sourceMappingURL=fastmcp-fixes.js.map

package/dist/agentic-flow/src/mcp/fastmcp-fixes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fastmcp-fixes.js","sourceRoot":"","sources":["../../../../src/mcp/fastmcp-fixes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,OAAO,EAAE,OAAO;IAChB,2CAA2C;CAC5C,CAAC","sourcesContent":["/**\n * FastMCP Fixes - Compatibility layer for FastMCP 3.x\n *\n * Provides utilities for working with FastMCP schema format changes.\n */\n\n/**\n * Placeholder for FastMCP fixes\n * TODO: Implement actual fixes when needed\n */\nexport const fastmcpFixes = {\n  version: '3.0.0',\n  // Add compatibility helpers here as needed\n};\n"]}

package/dist/agentic-flow/src/mcp/middleware/apply-rate-limit.js

@@ -1,88 +0,0 @@
-/**
- * Rate Limiting Middleware Integration for FastMCP
- *
- * Wraps tool execution with rate limiting to prevent DoS attacks
- */
-import { defaultRateLimiter, criticalRateLimiter, getClientId } from './rate-limiter.js';
-/**
- * Critical tools that need stricter rate limiting (10 req/min)
- */
-const CRITICAL_TOOLS = new Set([
-    'agent_spawn',
-    'swarm_init',
-    'task_orchestrate',
-    'neural_train',
-    'workflow_execute'
-]);
-/**
- * Apply rate limiting to a tool execution function
- * @param toolName Name of the tool
- * @param executeFn Original execute function
- * @returns Wrapped execute function with rate limiting
- */
-export function withRateLimit(toolName, executeFn) {
-    return (async (...args) => {
-        // Extract context from FastMCP (last argument usually has auth/context)
-        const context = args[args.length - 1];
-        const auth = context?.auth;
-        const ip = context?.ip ?? context?.remoteAddress;
-        // Get client ID
-        const clientId = getClientId(auth, ip);
-        // Choose rate limiter based on tool criticality
-        const limiter = CRITICAL_TOOLS.has(toolName)
-            ? criticalRateLimiter
-            : defaultRateLimiter;
-        try {
-            // Check rate limit
-            const { remaining, resetAt } = await limiter.middleware(clientId, toolName);
-            // Log rate limit status
-            console.error(`[RateLimit] ${toolName} - Client: ${clientId}, Remaining: ${remaining}`);
-            // Execute original function
-            const result = await executeFn(...args);
-            // Add rate limit headers to response if possible
-            if (typeof result === 'object' && result !== null) {
-                return {
-                    ...result,
-                    _rateLimit: {
-                        remaining,
-                        resetAt: new Date(resetAt).toISOString()
-                    }
-                };
-            }
-            return result;
-        }
-        catch (error) {
-            // Handle rate limit exceeded error
-            if (error.code === 'RATE_LIMIT_EXCEEDED') {
-                const resetDate = new Date(error.resetAt).toISOString();
-                throw new Error(`Rate limit exceeded for ${toolName}. ` +
-                    `Limit will reset at ${resetDate}. ` +
-                    `Please try again later.`);
-            }
-            // Re-throw other errors
-            throw error;
-        }
-    });
-}
-/**
- * Bulk apply rate limiting to multiple tool definitions
- * @param tools Array of tool definitions
- * @returns Tools with rate limiting applied
- */
-export function applyRateLimitToTools(tools) {
-    return tools.map(tool => ({
-        ...tool,
-        execute: withRateLimit(tool.name, tool.execute)
-    }));
-}
-/**
- * Get rate limit stats for monitoring
- */
-export function getRateLimitStats() {
-    return {
-        default: defaultRateLimiter.getStats(),
-        critical: criticalRateLimiter.getStats(),
-        timestamp: new Date().toISOString()
-    };
-}
-//# sourceMappingURL=apply-rate-limit.js.map

package/dist/agentic-flow/src/mcp/middleware/apply-rate-limit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"apply-rate-limit.js","sourceRoot":"","sources":["../../../../../src/mcp/middleware/apply-rate-limit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEzF;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,aAAa;IACb,YAAY;IACZ,kBAAkB;IAClB,cAAc;IACd,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,SAAY;IAEZ,OAAO,CAAC,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE;QAC/B,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;QAC3B,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,aAAa,CAAC;QAEjD,gBAAgB;QAChB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAEvC,gDAAgD;QAChD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC1C,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,kBAAkB,CAAC;QAEvB,IAAI,CAAC;YACH,mBAAmB;YACnB,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAE5E,wBAAwB;YACxB,OAAO,CAAC,KAAK,CAAC,eAAe,QAAQ,cAAc,QAAQ,gBAAgB,SAAS,EAAE,CAAC,CAAC;YAExF,4BAA4B;YAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YAExC,iDAAiD;YACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO;oBACL,GAAG,MAAM;oBACT,UAAU,EAAE;wBACV,SAAS;wBACT,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;qBACzC;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,mCAAmC;YACnC,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACzC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CACb,2BAA2B,QAAQ,IAAI;oBACvC,uBAAuB,SAAS,IAAI;oBACpC,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YAED,wBAAwB;YACxB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAM,CAAC;AACV,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAY;IAChD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,GAAG,IAAI;QACP,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;KAChD,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACxC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Rate Limiting Middleware Integration for FastMCP\n *\n * Wraps tool execution with rate limiting to prevent DoS attacks\n */\n\nimport { defaultRateLimiter, criticalRateLimiter, getClientId } from './rate-limiter.js';\n\n/**\n * Critical tools that need stricter rate limiting (10 req/min)\n */\nconst CRITICAL_TOOLS = new Set([\n  'agent_spawn',\n  'swarm_init',\n  'task_orchestrate',\n  'neural_train',\n  'workflow_execute'\n]);\n\n/**\n * Apply rate limiting to a tool execution function\n * @param toolName Name of the tool\n * @param executeFn Original execute function\n * @returns Wrapped execute function with rate limiting\n */\nexport function withRateLimit<T extends (...args: any[]) => any>(\n  toolName: string,\n  executeFn: T\n): T {\n  return (async (...args: any[]) => {\n    // Extract context from FastMCP (last argument usually has auth/context)\n    const context = args[args.length - 1];\n    const auth = context?.auth;\n    const ip = context?.ip ?? context?.remoteAddress;\n\n    // Get client ID\n    const clientId = getClientId(auth, ip);\n\n    // Choose rate limiter based on tool criticality\n    const limiter = CRITICAL_TOOLS.has(toolName)\n      ? criticalRateLimiter\n      : defaultRateLimiter;\n\n    try {\n      // Check rate limit\n      const { remaining, resetAt } = await limiter.middleware(clientId, toolName);\n\n      // Log rate limit status\n      console.error(`[RateLimit] ${toolName} - Client: ${clientId}, Remaining: ${remaining}`);\n\n      // Execute original function\n      const result = await executeFn(...args);\n\n      // Add rate limit headers to response if possible\n      if (typeof result === 'object' && result !== null) {\n        return {\n          ...result,\n          _rateLimit: {\n            remaining,\n            resetAt: new Date(resetAt).toISOString()\n          }\n        };\n      }\n\n      return result;\n    } catch (error: any) {\n      // Handle rate limit exceeded error\n      if (error.code === 'RATE_LIMIT_EXCEEDED') {\n        const resetDate = new Date(error.resetAt).toISOString();\n        throw new Error(\n          `Rate limit exceeded for ${toolName}. ` +\n          `Limit will reset at ${resetDate}. ` +\n          `Please try again later.`\n        );\n      }\n\n      // Re-throw other errors\n      throw error;\n    }\n  }) as T;\n}\n\n/**\n * Bulk apply rate limiting to multiple tool definitions\n * @param tools Array of tool definitions\n * @returns Tools with rate limiting applied\n */\nexport function applyRateLimitToTools(tools: any[]): any[] {\n  return tools.map(tool => ({\n    ...tool,\n    execute: withRateLimit(tool.name, tool.execute)\n  }));\n}\n\n/**\n * Get rate limit stats for monitoring\n */\nexport function getRateLimitStats() {\n  return {\n    default: defaultRateLimiter.getStats(),\n    critical: criticalRateLimiter.getStats(),\n    timestamp: new Date().toISOString()\n  };\n}\n"]}

package/dist/agentic-flow/src/mcp/middleware/rate-limiter.d.ts

@@ -1,97 +0,0 @@
-/**
- * Rate Limiter Middleware for MCP Tools
- *
- * Implements token bucket algorithm to prevent DoS attacks on MCP endpoints.
- * Default: 100 requests per minute per client (identified by auth.userId or IP)
- *
- * Security Fix: Addresses HIGH-003 (Rate Limiting & DoS - INSUFFICIENT)
- */
-interface RateLimitConfig {
-    /**
-     * Maximum number of requests allowed in the time window
-     * @default 100
-     */
-    maxRequests: number;
-    /**
-     * Time window in milliseconds
-     * @default 60000 (1 minute)
-     */
-    windowMs: number;
-    /**
-     * Whether to block or just warn on rate limit exceeded
-     * @default true
-     */
-    blockOnExceed: boolean;
-    /**
-     * Custom message when rate limit is exceeded
-     * @default "Rate limit exceeded. Please try again later."
-     */
-    message?: string;
-}
-export declare class RateLimiter {
-    private config;
-    private buckets;
-    private readonly refillRate;
-    constructor(config?: Partial<RateLimitConfig>);
-    /**
-     * Check if a request should be allowed
-     * @param clientId Unique identifier for the client (userId or IP)
-     * @returns Object with allowed status and remaining tokens
-     */
-    checkLimit(clientId: string): {
-        allowed: boolean;
-        remaining: number;
-        resetAt: number;
-    };
-    /**
-     * Middleware function for MCP tool execution
-     * @param clientId Unique identifier for the client
-     * @param toolName Name of the tool being executed
-     * @returns Promise that resolves if allowed, rejects if rate limited
-     */
-    middleware(clientId: string, toolName: string): Promise<{
-        remaining: number;
-        resetAt: number;
-    }>;
-    /**
-     * Get current rate limit status for a client
-     * @param clientId Unique identifier for the client
-     * @returns Current bucket state
-     */
-    getStatus(clientId: string): {
-        tokens: number;
-        maxTokens: number;
-        resetAt: number;
-    };
-    /**
-     * Reset rate limit for a specific client
-     * @param clientId Unique identifier for the client
-     */
-    reset(clientId: string): void;
-    /**
-     * Reset all rate limits (admin function)
-     */
-    resetAll(): void;
-    /**
-     * Cleanup old buckets that haven't been used in 10 minutes
-     */
-    private cleanup;
-    /**
-     * Get statistics about rate limiter usage
-     */
-    getStats(): {
-        activeClients: number;
-        totalBuckets: number;
-        config: Required<RateLimitConfig>;
-    };
-}
-export declare const defaultRateLimiter: RateLimiter;
-export declare const criticalRateLimiter: RateLimiter;
-/**
- * Helper to get client ID from auth context or IP
- */
-export declare function getClientId(auth?: {
-    userId?: string;
-}, ip?: string): string;
-export {};
-//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/agentic-flow/src/mcp/middleware/rate-limiter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../../../src/mcp/middleware/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,UAAU,eAAe;IACvB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAOD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAe7C;;;;OAIG;IACI,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAsC7F;;;;;OAKG;IACU,UAAU,CACrB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmBlD;;;;OAIG;IACI,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAwB1F;;;OAGG;IACI,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIpC;;OAEG;IACI,QAAQ,IAAI,IAAI;IAIvB;;OAEG;IACH,OAAO,CAAC,OAAO;IAWf;;OAEG;IACI,QAAQ,IAAI;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;KACnC;CAOF;AAGD,eAAO,MAAM,kBAAkB,aAK7B,CAAC;AAGH,eAAO,MAAM,mBAAmB,aAK9B,CAAC;AAEH;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3E"}

package/dist/agentic-flow/src/mcp/middleware/rate-limiter.js

@@ -1,166 +0,0 @@
-/**
- * Rate Limiter Middleware for MCP Tools
- *
- * Implements token bucket algorithm to prevent DoS attacks on MCP endpoints.
- * Default: 100 requests per minute per client (identified by auth.userId or IP)
- *
- * Security Fix: Addresses HIGH-003 (Rate Limiting & DoS - INSUFFICIENT)
- */
-export class RateLimiter {
-    config;
-    buckets;
-    refillRate; // tokens per ms
-    constructor(config) {
-        this.config = {
-            maxRequests: config?.maxRequests ?? 100,
-            windowMs: config?.windowMs ?? 60000,
-            blockOnExceed: config?.blockOnExceed ?? true,
-            message: config?.message ?? 'Rate limit exceeded. Please try again later.'
-        };
-        this.buckets = new Map();
-        this.refillRate = this.config.maxRequests / this.config.windowMs;
-        // Cleanup old buckets every 5 minutes
-        setInterval(() => this.cleanup(), 5 * 60 * 1000);
-    }
-    /**
-     * Check if a request should be allowed
-     * @param clientId Unique identifier for the client (userId or IP)
-     * @returns Object with allowed status and remaining tokens
-     */
-    checkLimit(clientId) {
-        const now = Date.now();
-        let bucket = this.buckets.get(clientId);
-        if (!bucket) {
-            // New client - create bucket with full capacity
-            bucket = {
-                tokens: this.config.maxRequests,
-                lastRefill: now
-            };
-            this.buckets.set(clientId, bucket);
-        }
-        // Refill tokens based on time elapsed
-        const elapsed = now - bucket.lastRefill;
-        const tokensToAdd = elapsed * this.refillRate;
-        bucket.tokens = Math.min(this.config.maxRequests, bucket.tokens + tokensToAdd);
-        bucket.lastRefill = now;
-        // Check if request can proceed
-        if (bucket.tokens >= 1) {
-            bucket.tokens -= 1;
-            return {
-                allowed: true,
-                remaining: Math.floor(bucket.tokens),
-                resetAt: now + ((this.config.maxRequests - bucket.tokens) / this.refillRate)
-            };
-        }
-        // Rate limit exceeded
-        const resetAt = now + ((1 - bucket.tokens) / this.refillRate);
-        return {
-            allowed: false,
-            remaining: 0,
-            resetAt: Math.ceil(resetAt)
-        };
-    }
-    /**
-     * Middleware function for MCP tool execution
-     * @param clientId Unique identifier for the client
-     * @param toolName Name of the tool being executed
-     * @returns Promise that resolves if allowed, rejects if rate limited
-     */
-    async middleware(clientId, toolName) {
-        const result = this.checkLimit(clientId);
-        if (!result.allowed && this.config.blockOnExceed) {
-            const error = new Error(this.config.message);
-            error.code = 'RATE_LIMIT_EXCEEDED';
-            error.remaining = result.remaining;
-            error.resetAt = result.resetAt;
-            error.toolName = toolName;
-            error.clientId = clientId;
-            throw error;
-        }
-        return {
-            remaining: result.remaining,
-            resetAt: result.resetAt
-        };
-    }
-    /**
-     * Get current rate limit status for a client
-     * @param clientId Unique identifier for the client
-     * @returns Current bucket state
-     */
-    getStatus(clientId) {
-        const now = Date.now();
-        const bucket = this.buckets.get(clientId);
-        if (!bucket) {
-            return {
-                tokens: this.config.maxRequests,
-                maxTokens: this.config.maxRequests,
-                resetAt: now
-            };
-        }
-        // Calculate current tokens with refill
-        const elapsed = now - bucket.lastRefill;
-        const tokensToAdd = elapsed * this.refillRate;
-        const currentTokens = Math.min(this.config.maxRequests, bucket.tokens + tokensToAdd);
-        return {
-            tokens: Math.floor(currentTokens),
-            maxTokens: this.config.maxRequests,
-            resetAt: now + ((this.config.maxRequests - currentTokens) / this.refillRate)
-        };
-    }
-    /**
-     * Reset rate limit for a specific client
-     * @param clientId Unique identifier for the client
-     */
-    reset(clientId) {
-        this.buckets.delete(clientId);
-    }
-    /**
-     * Reset all rate limits (admin function)
-     */
-    resetAll() {
-        this.buckets.clear();
-    }
-    /**
-     * Cleanup old buckets that haven't been used in 10 minutes
-     */
-    cleanup() {
-        const now = Date.now();
-        const maxAge = 10 * 60 * 1000; // 10 minutes
-        for (const [clientId, bucket] of this.buckets.entries()) {
-            if (now - bucket.lastRefill > maxAge) {
-                this.buckets.delete(clientId);
-            }
-        }
-    }
-    /**
-     * Get statistics about rate limiter usage
-     */
-    getStats() {
-        return {
-            activeClients: this.buckets.size,
-            totalBuckets: this.buckets.size,
-            config: this.config
-        };
-    }
-}
-// Export singleton instance with default config
-export const defaultRateLimiter = new RateLimiter({
-    maxRequests: 100,
-    windowMs: 60000,
-    blockOnExceed: true,
-    message: 'Rate limit exceeded. Please try again later.'
-});
-// Export per-tool rate limiters for critical operations
-export const criticalRateLimiter = new RateLimiter({
-    maxRequests: 10,
-    windowMs: 60000,
-    blockOnExceed: true,
-    message: 'Rate limit exceeded for critical operation. Please try again later.'
-});
-/**
- * Helper to get client ID from auth context or IP
- */
-export function getClientId(auth, ip) {
-    return auth?.userId ?? ip ?? 'anonymous';
-}
-//# sourceMappingURL=rate-limiter.js.map

package/dist/agentic-flow/src/mcp/middleware/rate-limiter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../../../src/mcp/middleware/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiCH,MAAM,OAAO,WAAW;IACd,MAAM,CAA4B;IAClC,OAAO,CAA4B;IAC1B,UAAU,CAAS,CAAC,gBAAgB;IAErD,YAAY,MAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,GAAG;YACvC,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,KAAK;YACnC,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,IAAI;YAC5C,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,8CAA8C;SAC3E,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAEjE,sCAAsC;QACtC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACI,UAAU,CAAC,QAAgB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gDAAgD;YAChD,MAAM,GAAG;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,GAAG;aAChB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QAC/E,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QAExB,+BAA+B;QAC/B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpC,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,UAAU,CACrB,QAAgB,EAChB,QAAgB;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACjD,MAAM,KAAK,GAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,GAAG,qBAAqB,CAAC;YACnC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC1B,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,SAAS,CAAC,QAAgB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBAClC,OAAO,EAAE,GAAG;aACb,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QAErF,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YAClC,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;SAC7E,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,QAAgB;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACI,QAAQ;QACb,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;QAE5C,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACI,QAAQ;QAKb,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAChC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;CACF;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,WAAW,CAAC;IAChD,WAAW,EAAE,GAAG;IAChB,QAAQ,EAAE,KAAK;IACf,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,8CAA8C;CACxD,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,WAAW,CAAC;IACjD,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,KAAK;IACf,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,qEAAqE;CAC/E,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAA0B,EAAE,EAAW;IACjE,OAAO,IAAI,EAAE,MAAM,IAAI,EAAE,IAAI,WAAW,CAAC;AAC3C,CAAC","sourcesContent":["/**\n * Rate Limiter Middleware for MCP Tools\n *\n * Implements token bucket algorithm to prevent DoS attacks on MCP endpoints.\n * Default: 100 requests per minute per client (identified by auth.userId or IP)\n *\n * Security Fix: Addresses HIGH-003 (Rate Limiting & DoS - INSUFFICIENT)\n */\n\ninterface RateLimitConfig {\n  /**\n   * Maximum number of requests allowed in the time window\n   * @default 100\n   */\n  maxRequests: number;\n\n  /**\n   * Time window in milliseconds\n   * @default 60000 (1 minute)\n   */\n  windowMs: number;\n\n  /**\n   * Whether to block or just warn on rate limit exceeded\n   * @default true\n   */\n  blockOnExceed: boolean;\n\n  /**\n   * Custom message when rate limit is exceeded\n   * @default \"Rate limit exceeded. Please try again later.\"\n   */\n  message?: string;\n}\n\ninterface ClientBucket {\n  tokens: number;\n  lastRefill: number;\n}\n\nexport class RateLimiter {\n  private config: Required<RateLimitConfig>;\n  private buckets: Map<string, ClientBucket>;\n  private readonly refillRate: number; // tokens per ms\n\n  constructor(config?: Partial<RateLimitConfig>) {\n    this.config = {\n      maxRequests: config?.maxRequests ?? 100,\n      windowMs: config?.windowMs ?? 60000,\n      blockOnExceed: config?.blockOnExceed ?? true,\n      message: config?.message ?? 'Rate limit exceeded. Please try again later.'\n    };\n\n    this.buckets = new Map();\n    this.refillRate = this.config.maxRequests / this.config.windowMs;\n\n    // Cleanup old buckets every 5 minutes\n    setInterval(() => this.cleanup(), 5 * 60 * 1000);\n  }\n\n  /**\n   * Check if a request should be allowed\n   * @param clientId Unique identifier for the client (userId or IP)\n   * @returns Object with allowed status and remaining tokens\n   */\n  public checkLimit(clientId: string): { allowed: boolean; remaining: number; resetAt: number } {\n    const now = Date.now();\n    let bucket = this.buckets.get(clientId);\n\n    if (!bucket) {\n      // New client - create bucket with full capacity\n      bucket = {\n        tokens: this.config.maxRequests,\n        lastRefill: now\n      };\n      this.buckets.set(clientId, bucket);\n    }\n\n    // Refill tokens based on time elapsed\n    const elapsed = now - bucket.lastRefill;\n    const tokensToAdd = elapsed * this.refillRate;\n    bucket.tokens = Math.min(this.config.maxRequests, bucket.tokens + tokensToAdd);\n    bucket.lastRefill = now;\n\n    // Check if request can proceed\n    if (bucket.tokens >= 1) {\n      bucket.tokens -= 1;\n      return {\n        allowed: true,\n        remaining: Math.floor(bucket.tokens),\n        resetAt: now + ((this.config.maxRequests - bucket.tokens) / this.refillRate)\n      };\n    }\n\n    // Rate limit exceeded\n    const resetAt = now + ((1 - bucket.tokens) / this.refillRate);\n    return {\n      allowed: false,\n      remaining: 0,\n      resetAt: Math.ceil(resetAt)\n    };\n  }\n\n  /**\n   * Middleware function for MCP tool execution\n   * @param clientId Unique identifier for the client\n   * @param toolName Name of the tool being executed\n   * @returns Promise that resolves if allowed, rejects if rate limited\n   */\n  public async middleware(\n    clientId: string,\n    toolName: string\n  ): Promise<{ remaining: number; resetAt: number }> {\n    const result = this.checkLimit(clientId);\n\n    if (!result.allowed && this.config.blockOnExceed) {\n      const error: any = new Error(this.config.message);\n      error.code = 'RATE_LIMIT_EXCEEDED';\n      error.remaining = result.remaining;\n      error.resetAt = result.resetAt;\n      error.toolName = toolName;\n      error.clientId = clientId;\n      throw error;\n    }\n\n    return {\n      remaining: result.remaining,\n      resetAt: result.resetAt\n    };\n  }\n\n  /**\n   * Get current rate limit status for a client\n   * @param clientId Unique identifier for the client\n   * @returns Current bucket state\n   */\n  public getStatus(clientId: string): { tokens: number; maxTokens: number; resetAt: number } {\n    const now = Date.now();\n    const bucket = this.buckets.get(clientId);\n\n    if (!bucket) {\n      return {\n        tokens: this.config.maxRequests,\n        maxTokens: this.config.maxRequests,\n        resetAt: now\n      };\n    }\n\n    // Calculate current tokens with refill\n    const elapsed = now - bucket.lastRefill;\n    const tokensToAdd = elapsed * this.refillRate;\n    const currentTokens = Math.min(this.config.maxRequests, bucket.tokens + tokensToAdd);\n\n    return {\n      tokens: Math.floor(currentTokens),\n      maxTokens: this.config.maxRequests,\n      resetAt: now + ((this.config.maxRequests - currentTokens) / this.refillRate)\n    };\n  }\n\n  /**\n   * Reset rate limit for a specific client\n   * @param clientId Unique identifier for the client\n   */\n  public reset(clientId: string): void {\n    this.buckets.delete(clientId);\n  }\n\n  /**\n   * Reset all rate limits (admin function)\n   */\n  public resetAll(): void {\n    this.buckets.clear();\n  }\n\n  /**\n   * Cleanup old buckets that haven't been used in 10 minutes\n   */\n  private cleanup(): void {\n    const now = Date.now();\n    const maxAge = 10 * 60 * 1000; // 10 minutes\n\n    for (const [clientId, bucket] of this.buckets.entries()) {\n      if (now - bucket.lastRefill > maxAge) {\n        this.buckets.delete(clientId);\n      }\n    }\n  }\n\n  /**\n   * Get statistics about rate limiter usage\n   */\n  public getStats(): {\n    activeClients: number;\n    totalBuckets: number;\n    config: Required<RateLimitConfig>;\n  } {\n    return {\n      activeClients: this.buckets.size,\n      totalBuckets: this.buckets.size,\n      config: this.config\n    };\n  }\n}\n\n// Export singleton instance with default config\nexport const defaultRateLimiter = new RateLimiter({\n  maxRequests: 100,\n  windowMs: 60000,\n  blockOnExceed: true,\n  message: 'Rate limit exceeded. Please try again later.'\n});\n\n// Export per-tool rate limiters for critical operations\nexport const criticalRateLimiter = new RateLimiter({\n  maxRequests: 10,\n  windowMs: 60000,\n  blockOnExceed: true,\n  message: 'Rate limit exceeded for critical operation. Please try again later.'\n});\n\n/**\n * Helper to get client ID from auth context or IP\n */\nexport function getClientId(auth?: { userId?: string }, ip?: string): string {\n  return auth?.userId ?? ip ?? 'anonymous';\n}\n"]}

package/dist/agentic-flow/src/mcp/standalone-stdio-fixed.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=standalone-stdio-fixed.d.ts.map

package/dist/agentic-flow/src/mcp/standalone-stdio-fixed.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"standalone-stdio-fixed.d.ts","sourceRoot":"","sources":["../../../../src/mcp/standalone-stdio-fixed.ts"],"names":[],"mappings":""}

package/dist/agentic-flow/src/mcp/standalone-stdio-fixed.js

@@ -1,27 +0,0 @@
-#!/usr/bin/env node
-import { spawnSync } from 'child_process';
-// [Previous code unchanged until agent_booster_edit_file tool - lines 1-363]
-// Helper function to safely execute agent-booster
-async function safeAgentBoosterApply(originalCode, codeEdit, language) {
-    // Validate language parameter
-    const allowedLanguages = ['typescript', 'javascript', 'python', 'rust', 'go', 'java', 'c', 'cpp'];
-    if (!allowedLanguages.includes(language)) {
-        throw new Error(`Invalid language: ${language}. Must be one of: ${allowedLanguages.join(', ')}`);
-    }
-    const result = spawnSync('npx', ['--yes', 'agent-booster@0.2.2', 'apply', '--language', language], {
-        encoding: 'utf-8',
-        input: JSON.stringify({ code: originalCode, edit: codeEdit }),
-        maxBuffer: 10 * 1024 * 1024,
-        timeout: 30000,
-        shell: false // CVE-2026-003: Prevent shell injection
-    });
-    if (result.error) {
-        return { stdout: '', stderr: result.stderr || '', error: result.error };
-    }
-    if (result.status !== 0) {
-        return { stdout: '', stderr: result.stderr || result.stdout || '', error: new Error('Agent Booster failed') };
-    }
-    return { stdout: result.stdout, stderr: result.stderr || '' };
-}
-// Note: The full file would need to be updated. Since it's 813 lines, I'll create a patch file instead.
-//# sourceMappingURL=standalone-stdio-fixed.js.map

package/dist/agentic-flow/src/mcp/standalone-stdio-fixed.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"standalone-stdio-fixed.js","sourceRoot":"","sources":["../../../../src/mcp/standalone-stdio-fixed.ts"],"names":[],"mappings":";AAKA,OAAO,EAAY,SAAS,EAAE,MAAM,eAAe,CAAC;AAIpD,6EAA6E;AAE7E,kDAAkD;AAClD,KAAK,UAAU,qBAAqB,CAAC,YAAoB,EAAE,QAAgB,EAAE,QAAgB;IAC3F,8BAA8B;IAC9B,MAAM,gBAAgB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAClG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,qBAAqB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE;QACjG,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7D,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK,CAAC,wCAAwC;KACtD,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;IAChH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAChE,CAAC;AAED,wGAAwG","sourcesContent":["#!/usr/bin/env node\n// Standalone agentic-flow MCP server - runs directly via stdio without spawning subprocesses\n// SECURITY: All CVE-2026-003 and CVE-2026-004 fixes applied\nimport { FastMCP } from 'fastmcp';\nimport { z } from 'zod';\nimport { execSync, spawnSync } from 'child_process';\nimport { resolve } from 'path';\nimport { validateReadPath, validateWritePath } from '../security/path-validator.js';\n\n// [Previous code unchanged until agent_booster_edit_file tool - lines 1-363]\n\n// Helper function to safely execute agent-booster\nasync function safeAgentBoosterApply(originalCode: string, codeEdit: string, language: string): Promise<{ stdout: string; stderr: string; error?: Error }> {\n  // Validate language parameter\n  const allowedLanguages = ['typescript', 'javascript', 'python', 'rust', 'go', 'java', 'c', 'cpp'];\n  if (!allowedLanguages.includes(language)) {\n    throw new Error(`Invalid language: ${language}. Must be one of: ${allowedLanguages.join(', ')}`);\n  }\n\n  const result = spawnSync('npx', ['--yes', 'agent-booster@0.2.2', 'apply', '--language', language], {\n    encoding: 'utf-8',\n    input: JSON.stringify({ code: originalCode, edit: codeEdit }),\n    maxBuffer: 10 * 1024 * 1024,\n    timeout: 30000,\n    shell: false // CVE-2026-003: Prevent shell injection\n  });\n\n  if (result.error) {\n    return { stdout: '', stderr: result.stderr || '', error: result.error };\n  }\n\n  if (result.status !== 0) {\n    return { stdout: '', stderr: result.stderr || result.stdout || '', error: new Error('Agent Booster failed') };\n  }\n\n  return { stdout: result.stdout, stderr: result.stderr || '' };\n}\n\n// Note: The full file would need to be updated. Since it's 813 lines, I'll create a patch file instead.\n"]}

package/dist/agentic-flow/src/mcp/standalone-stdio.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=standalone-stdio.d.ts.map

package/dist/agentic-flow/src/mcp/standalone-stdio.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"standalone-stdio.d.ts","sourceRoot":"","sources":["../../../../src/mcp/standalone-stdio.ts"],"names":[],"mappings":""}