arcagent-mcp 0.1.0

package/dist/tools/workspaceBatchWrite.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkspaceBatchWrite = registerWorkspaceBatchWrite;
+const zod_1 = require("zod");
+const context_1 = require("../lib/context");
+const cache_1 = require("../workspace/cache");
+const client_1 = require("../worker/client");
+const toolHelper_1 = require("../lib/toolHelper");
+function registerWorkspaceBatchWrite(server) {
+    (0, toolHelper_1.registerTool)(server, "workspace_batch_write", "Write or create multiple files in your workspace in a single request. " +
+        "Max 10 files, 1MB total content. Paths relative to /workspace.", {
+        bountyId: zod_1.z.string().describe("The bounty ID you have claimed"),
+        files: zod_1.z
+            .array(zod_1.z.object({
+            path: zod_1.z.string().describe("File path relative to /workspace"),
+            content: zod_1.z.string().describe("File content"),
+        }))
+            .min(1)
+            .max(10)
+            .describe("Array of files to write (max 10)"),
+    }, async (args) => {
+        // SECURITY (H4): Scope enforcement
+        (0, context_1.requireScope)("workspace:write");
+        // SECURITY (C1): Identity from auth context
+        const user = (0, context_1.requireAuthUser)();
+        const ws = await (0, cache_1.getWorkspaceForAgent)(user.userId, args.bountyId);
+        if (!ws.found || ws.status !== "ready") {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: ws.found
+                            ? `Workspace is not ready (status: ${ws.status}).`
+                            : "No workspace found. Claim the bounty first.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // SECURITY (W3): Defense-in-depth path traversal check on each path
+        for (const f of args.files) {
+            const norm = f.path.replace(/\\/g, "/");
+            if (norm.includes("..") && !norm.startsWith("/workspace/")) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "Path traversal not allowed. Paths must resolve within /workspace/.",
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        }
+        // Check total content size at MCP layer
+        const totalBytes = args.files.reduce((acc, f) => acc + Buffer.byteLength(f.content, "utf-8"), 0);
+        if (totalBytes > 1024 * 1024) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Total content too large (${(totalBytes / 1024).toFixed(0)}KB > 1024KB max).`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            const result = await (0, client_1.callWorker)(ws.workerHost, "/api/workspace/batch-write", {
+                workspaceId: ws.workspaceId,
+                files: args.files,
+            });
+            const lines = result.results.map((r) => r.error
+                ? `- \`${r.path}\` — ERROR: ${r.error}`
+                : `- \`${r.path}\` — ${r.bytesWritten} bytes written`);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Batch write complete:\n${lines.join("\n")}`,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Batch write failed";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=workspaceBatchWrite.js.map

package/dist/tools/workspaceBatchWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceBatchWrite.js","sourceRoot":"","sources":["../../src/tools/workspaceBatchWrite.ts"],"names":[],"mappings":";;AAOA,kEA8GC;AApHD,6BAAwB;AACxB,4CAA+D;AAC/D,8CAA0D;AAC1D,6CAA8C;AAC9C,kDAAiD;AAEjD,SAAgB,2BAA2B,CAAC,MAAiB;IAC3D,IAAA,yBAAY,EACV,MAAM,EACN,uBAAuB,EACvB,wEAAwE;QACtE,gEAAgE,EAClE;QACE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAC/D,KAAK,EAAE,OAAC;aACL,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YAC7D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SAC7C,CAAC,CACH;aACA,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,CAAC,kCAAkC,CAAC;KAChD,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,mCAAmC;QACnC,IAAA,sBAAY,EAAC,iBAAiB,CAAC,CAAC;QAChC,4CAA4C;QAC5C,MAAM,IAAI,GAAG,IAAA,yBAAe,GAAE,CAAC;QAE/B,MAAM,EAAE,GAAG,MAAM,IAAA,4BAAoB,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,EAAE,CAAC,KAAK;4BACZ,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,IAAI;4BAClD,CAAC,CAAC,6CAA6C;qBAClD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,oEAAoE;yBAC3E;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAClC,CAAC,GAAW,EAAE,CAAsB,EAAE,EAAE,CACtC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAC7C,CAAC,CACF,CAAC;QACF,IAAI,UAAU,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,4BAA4B,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;qBACpF;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAU,EAM5B,EAAE,CAAC,UAAU,EAAE,4BAA4B,EAAE;gBAC9C,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,CAAC,KAAK;gBACL,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,KAAK,EAAE;gBACvC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,YAAY,gBAAgB,CACxD,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACnD;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/workspaceCrashReports.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerWorkspaceCrashReports(server: McpServer): void;
+//# sourceMappingURL=workspaceCrashReports.d.ts.map

package/dist/tools/workspaceCrashReports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceCrashReports.d.ts","sourceRoot":"","sources":["../../src/tools/workspaceCrashReports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiBpE,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAmFrE"}

package/dist/tools/workspaceCrashReports.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkspaceCrashReports = registerWorkspaceCrashReports;
+const zod_1 = require("zod");
+const context_1 = require("../lib/context");
+const client_1 = require("../convex/client");
+const toolHelper_1 = require("../lib/toolHelper");
+function registerWorkspaceCrashReports(server) {
+    (0, toolHelper_1.registerTool)(server, "workspace_crash_reports", "Retrieve crash reports for your workspace. Shows commands that failed with non-zero exit codes " +
+        "or signals during verification or development. Useful for debugging build failures, test crashes, " +
+        "and OOM kills.", {
+        bountyId: zod_1.z.string().describe("The bounty ID you have claimed"),
+    }, async (args) => {
+        // SECURITY (H4): Scope enforcement
+        (0, context_1.requireScope)("workspace:read");
+        // SECURITY (C1): Identity from auth context
+        const user = (0, context_1.requireAuthUser)();
+        try {
+            const result = await (0, client_1.callConvex)("/api/mcp/workspace/crash-reports", {
+                bountyId: args.bountyId,
+                userId: user.userId,
+            });
+            if (!result.reports || result.reports.length === 0) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "No crash reports found for this workspace.",
+                        },
+                    ],
+                };
+            }
+            const parts = [];
+            parts.push(`**${result.reports.length} crash report${result.reports.length > 1 ? "s" : ""} found:**\n`);
+            for (const report of result.reports) {
+                const timestamp = new Date(report.timestamp).toISOString();
+                const lines = [];
+                lines.push(`### Crash at ${timestamp}`);
+                if (report.command) {
+                    lines.push(`- **Command:** \`${report.command}\``);
+                }
+                if (report.gate) {
+                    lines.push(`- **Gate:** ${report.gate}`);
+                }
+                lines.push(`- **Exit code:** ${report.exitCode}`);
+                if (report.signal) {
+                    lines.push(`- **Signal:** ${report.signal}`);
+                }
+                if (report.stderr) {
+                    // Cap stderr to avoid massive output
+                    const stderr = report.stderr.length > 2000
+                        ? report.stderr.slice(-2000) + "\n... [truncated]"
+                        : report.stderr;
+                    lines.push(`- **stderr:**\n\`\`\`\n${stderr}\n\`\`\``);
+                }
+                parts.push(lines.join("\n"));
+            }
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: parts.join("\n\n---\n\n"),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Failed to fetch crash reports";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=workspaceCrashReports.js.map

package/dist/tools/workspaceCrashReports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceCrashReports.js","sourceRoot":"","sources":["../../src/tools/workspaceCrashReports.ts"],"names":[],"mappings":";;AAiBA,sEAmFC;AAnGD,6BAAwB;AACxB,4CAA+D;AAC/D,6CAA8C;AAC9C,kDAAiD;AAajD,SAAgB,6BAA6B,CAAC,MAAiB;IAC7D,IAAA,yBAAY,EACV,MAAM,EACN,yBAAyB,EACzB,iGAAiG;QAC/F,oGAAoG;QACpG,gBAAgB,EAClB;QACE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;KAChE,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,mCAAmC;QACnC,IAAA,sBAAY,EAAC,gBAAgB,CAAC,CAAC;QAC/B,4CAA4C;QAC5C,MAAM,IAAI,GAAG,IAAA,yBAAe,GAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAU,EAE5B,kCAAkC,EAAE;gBACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnD,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,4CAA4C;yBACnD;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,gBAAgB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YAExG,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;gBAExC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACrD,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3C,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAClD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,qCAAqC;oBACrC,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI;wBACzB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,mBAAmB;wBAClD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBACpB,KAAK,CAAC,IAAI,CAAC,0BAA0B,MAAM,UAAU,CAAC,CAAC;gBACzD,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;qBAChC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;YACvE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/workspaceEditFile.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerWorkspaceEditFile(server: McpServer): void;
+//# sourceMappingURL=workspaceEditFile.d.ts.map

package/dist/tools/workspaceEditFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceEditFile.d.ts","sourceRoot":"","sources":["../../src/tools/workspaceEditFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOpE,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAkGjE"}

package/dist/tools/workspaceEditFile.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkspaceEditFile = registerWorkspaceEditFile;
+const zod_1 = require("zod");
+const context_1 = require("../lib/context");
+const cache_1 = require("../workspace/cache");
+const client_1 = require("../worker/client");
+const toolHelper_1 = require("../lib/toolHelper");
+function registerWorkspaceEditFile(server) {
+    (0, toolHelper_1.registerTool)(server, "workspace_edit_file", "Perform a surgical text replacement in a file. Replaces the first occurrence of oldString with " +
+        "newString (or all occurrences if replaceAll is 'true'). This is safer than rewriting the entire file " +
+        "because it only touches the specific text you want to change. The oldString must match exactly " +
+        "(including whitespace and indentation). Paths relative to /workspace.", {
+        bountyId: zod_1.z.string().describe("The bounty ID you have claimed"),
+        path: zod_1.z.string().describe("File path relative to /workspace"),
+        oldString: zod_1.z.string().describe("The exact text to find and replace"),
+        newString: zod_1.z.string().describe("The replacement text"),
+        replaceAll: zod_1.z
+            .string()
+            .optional()
+            .describe("Replace all occurrences: 'true' or 'false' (default 'false')"),
+    }, async (args) => {
+        // SECURITY (H4): Scope enforcement
+        (0, context_1.requireScope)("workspace:write");
+        // SECURITY (C1): Identity from auth context
+        const user = (0, context_1.requireAuthUser)();
+        const ws = await (0, cache_1.getWorkspaceForAgent)(user.userId, args.bountyId);
+        if (!ws.found || ws.status !== "ready") {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: ws.found
+                            ? `Workspace is not ready (status: ${ws.status}).`
+                            : "No workspace found. Claim the bounty first.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // SECURITY (W3): Defense-in-depth path validation at MCP layer
+        const normalizedPath = args.path.replace(/\\/g, "/");
+        if (normalizedPath.includes("..") && !normalizedPath.startsWith("/workspace/")) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "Path traversal not allowed. Paths must resolve within /workspace/.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (args.oldString === args.newString) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "oldString and newString are identical. No changes needed.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            const result = await (0, client_1.callWorker)(ws.workerHost, "/api/workspace/edit-file", {
+                workspaceId: ws.workspaceId,
+                path: args.path,
+                oldString: args.oldString,
+                newString: args.newString,
+                replaceAll: args.replaceAll === "true",
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: result.replacements === 0
+                            ? `No matches found for the specified text in \`${result.path}\`. Verify the oldString matches exactly (including whitespace).`
+                            : `Replaced ${result.replacements} occurrence${result.replacements > 1 ? "s" : ""} in \`${result.path}\``,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "File edit failed";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=workspaceEditFile.js.map

package/dist/tools/workspaceEditFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceEditFile.js","sourceRoot":"","sources":["../../src/tools/workspaceEditFile.ts"],"names":[],"mappings":";;AAOA,8DAkGC;AAxGD,6BAAwB;AACxB,4CAA+D;AAC/D,8CAA0D;AAC1D,6CAA8C;AAC9C,kDAAiD;AAEjD,SAAgB,yBAAyB,CAAC,MAAiB;IACzD,IAAA,yBAAY,EACV,MAAM,EACN,qBAAqB,EACrB,iGAAiG;QAC/F,uGAAuG;QACvG,iGAAiG;QACjG,uEAAuE,EACzE;QACE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAC/D,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC7D,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACpE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACtD,UAAU,EAAE,OAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,8DAA8D,CAAC;KAC5E,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,mCAAmC;QACnC,IAAA,sBAAY,EAAC,iBAAiB,CAAC,CAAC;QAChC,4CAA4C;QAC5C,MAAM,IAAI,GAAG,IAAA,yBAAe,GAAE,CAAC;QAE/B,MAAM,EAAE,GAAG,MAAM,IAAA,4BAAoB,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,EAAE,CAAC,KAAK;4BACZ,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,IAAI;4BAClD,CAAC,CAAC,6CAA6C;qBAClD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,oEAAoE;qBAC3E;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,2DAA2D;qBAClE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAU,EAG5B,EAAE,CAAC,UAAU,EAAE,0BAA0B,EAAE;gBAC5C,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,MAAM;aACvC,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EACF,MAAM,CAAC,YAAY,KAAK,CAAC;4BACvB,CAAC,CAAC,gDAAgD,MAAM,CAAC,IAAI,kEAAkE;4BAC/H,CAAC,CAAC,YAAY,MAAM,CAAC,YAAY,cAAc,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,MAAM,CAAC,IAAI,IAAI;qBAC9G;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/workspaceExec.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerWorkspaceExec(server: McpServer): void;
+//# sourceMappingURL=workspaceExec.d.ts.map

package/dist/tools/workspaceExec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceExec.d.ts","sourceRoot":"","sources":["../../src/tools/workspaceExec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOpE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAsE7D"}

package/dist/tools/workspaceExec.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkspaceExec = registerWorkspaceExec;
+const zod_1 = require("zod");
+const context_1 = require("../lib/context");
+const cache_1 = require("../workspace/cache");
+const client_1 = require("../worker/client");
+const toolHelper_1 = require("../lib/toolHelper");
+function registerWorkspaceExec(server) {
+    (0, toolHelper_1.registerTool)(server, "workspace_exec", "Run a shell command in your development workspace. The repository is at /workspace. " +
+        "Commands run as non-root user. Use for building, testing, installing packages, running scripts.", {
+        bountyId: zod_1.z.string().describe("The bounty ID you have claimed"),
+        command: zod_1.z.string().describe("Shell command to execute"),
+        timeoutMs: zod_1.z
+            .string()
+            .optional()
+            .describe("Timeout in ms (default 120000, max 300000)"),
+    }, async (args) => {
+        (0, context_1.requireScope)("workspace:exec");
+        const user = (0, context_1.requireAuthUser)();
+        const ws = await (0, cache_1.getWorkspaceForAgent)(user.userId, args.bountyId);
+        if (!ws.found || ws.status !== "ready") {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: ws.found
+                            ? `Workspace is not ready (status: ${ws.status}). Use \`workspace_status\` to check.`
+                            : "No workspace found for this bounty. Claim the bounty first with `claim_bounty`.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            const timeout = args.timeoutMs
+                ? Math.min(parseInt(args.timeoutMs, 10), 300000)
+                : 120000;
+            const result = await (0, client_1.callWorker)(ws.workerHost, "/api/workspace/exec", {
+                workspaceId: ws.workspaceId,
+                command: args.command,
+                timeoutMs: timeout,
+            }, timeout + 10_000);
+            const parts = [];
+            if (result.stdout) {
+                parts.push("**stdout:**\n```\n" + result.stdout + "\n```");
+            }
+            if (result.stderr) {
+                parts.push("**stderr:**\n```\n" + result.stderr + "\n```");
+            }
+            parts.push(`**exit code:** ${result.exitCode}`);
+            return {
+                content: [{ type: "text", text: parts.join("\n\n") }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Command execution failed";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=workspaceExec.js.map

package/dist/tools/workspaceExec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceExec.js","sourceRoot":"","sources":["../../src/tools/workspaceExec.ts"],"names":[],"mappings":";;AAOA,sDAsEC;AA5ED,6BAAwB;AACxB,4CAA+D;AAC/D,8CAA0D;AAC1D,6CAA8C;AAC9C,kDAAiD;AAEjD,SAAgB,qBAAqB,CAAC,MAAiB;IACrD,IAAA,yBAAY,EACV,MAAM,EACN,gBAAgB,EAChB,sFAAsF;QACpF,iGAAiG,EACnG;QACE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAC/D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACxD,SAAS,EAAE,OAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAA,sBAAY,EAAC,gBAAgB,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAA,yBAAe,GAAE,CAAC;QAE/B,MAAM,EAAE,GAAG,MAAM,IAAA,4BAAoB,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,EAAE,CAAC,KAAK;4BACZ,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,uCAAuC;4BACrF,CAAC,CAAC,iFAAiF;qBACtF;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;gBAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBAChD,CAAC,CAAC,MAAM,CAAC;YAEX,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAU,EAI5B,EAAE,CAAC,UAAU,EAAE,qBAAqB,EAAE;gBACvC,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,OAAO;aACnB,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;YAErB,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEhD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;aAC/D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/workspaceExecStream.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerWorkspaceExecStream(server: McpServer): void;
+//# sourceMappingURL=workspaceExecStream.d.ts.map

package/dist/tools/workspaceExecStream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceExecStream.d.ts","sourceRoot":"","sources":["../../src/tools/workspaceExecStream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASpE,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA8HnE"}

package/dist/tools/workspaceExecStream.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkspaceExecStream = registerWorkspaceExecStream;
+const zod_1 = require("zod");
+const context_1 = require("../lib/context");
+const cache_1 = require("../workspace/cache");
+const client_1 = require("../worker/client");
+const toolHelper_1 = require("../lib/toolHelper");
+const MAX_STREAM_OUTPUT = 500 * 1024; // 500 KB
+function registerWorkspaceExecStream(server) {
+    (0, toolHelper_1.registerTool)(server, "workspace_exec_stream", "Run a long-running command (e.g. npm test, cargo build) with streaming output. " +
+        "Unlike workspace_exec, this starts the command in the background and polls for output, " +
+        "so you get the full build log even for commands that take minutes. " +
+        "Max 5 minutes timeout. Use workspace_exec for quick commands (<30s).", {
+        bountyId: zod_1.z.string().describe("The bounty ID you have claimed"),
+        command: zod_1.z.string().describe("Shell command to execute"),
+        timeoutMs: zod_1.z
+            .string()
+            .optional()
+            .describe("Timeout in ms (default 300000, max 300000)"),
+    }, async (args) => {
+        // SECURITY (H4): Scope enforcement
+        (0, context_1.requireScope)("workspace:exec");
+        // SECURITY (C1): Identity from auth context
+        const user = (0, context_1.requireAuthUser)();
+        const ws = await (0, cache_1.getWorkspaceForAgent)(user.userId, args.bountyId);
+        if (!ws.found || ws.status !== "ready") {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: ws.found
+                            ? `Workspace is not ready (status: ${ws.status}).`
+                            : "No workspace found. Claim the bounty first.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            const timeout = args.timeoutMs
+                ? Math.min(parseInt(args.timeoutMs, 10), 300000)
+                : 300000;
+            // Start the streaming job
+            const startResult = await (0, client_1.callWorker)(ws.workerHost, "/api/workspace/exec-stream", {
+                workspaceId: ws.workspaceId,
+                command: args.command,
+                timeoutMs: timeout,
+            });
+            const jobId = startResult.jobId;
+            // Poll for output until done
+            let allStdout = "";
+            let allStderr = "";
+            let offset = 0;
+            let done = false;
+            let exitCode;
+            let pollCount = 0;
+            // Poll interval: 2s for first 5 polls, then 5s
+            while (!done) {
+                const delay = pollCount < 5 ? 2000 : 5000;
+                await new Promise((r) => setTimeout(r, delay));
+                pollCount++;
+                const pollResult = await (0, client_1.callWorker)(ws.workerHost, "/api/workspace/exec-output", {
+                    workspaceId: ws.workspaceId,
+                    jobId,
+                    offset,
+                });
+                allStdout += pollResult.stdout;
+                allStderr = pollResult.stderr; // stderr is always full (not offset-based)
+                offset = pollResult.offset;
+                done = pollResult.done;
+                exitCode = pollResult.exitCode;
+                // Cap total output
+                if (Buffer.byteLength(allStdout, "utf-8") > MAX_STREAM_OUTPUT) {
+                    allStdout = allStdout.slice(-MAX_STREAM_OUTPUT) +
+                        "\n... [earlier output truncated]";
+                    break;
+                }
+                // Safety: don't poll forever
+                if (pollCount > 300) {
+                    break;
+                }
+            }
+            const parts = [];
+            if (allStdout) {
+                parts.push("**stdout:**\n```\n" + allStdout + "\n```");
+            }
+            if (allStderr) {
+                parts.push("**stderr:**\n```\n" + allStderr + "\n```");
+            }
+            if (exitCode !== undefined) {
+                parts.push(`**exit code:** ${exitCode}`);
+            }
+            else {
+                parts.push("**status:** command may still be running (polling stopped)");
+            }
+            return {
+                content: [{ type: "text", text: parts.join("\n\n") }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Streaming exec failed";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=workspaceExecStream.js.map

package/dist/tools/workspaceExecStream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceExecStream.js","sourceRoot":"","sources":["../../src/tools/workspaceExecStream.ts"],"names":[],"mappings":";;AASA,kEA8HC;AAtID,6BAAwB;AACxB,4CAA+D;AAC/D,8CAA0D;AAC1D,6CAA8C;AAC9C,kDAAiD;AAEjD,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,SAAS;AAE/C,SAAgB,2BAA2B,CAAC,MAAiB;IAC3D,IAAA,yBAAY,EACV,MAAM,EACN,uBAAuB,EACvB,iFAAiF;QAC/E,yFAAyF;QACzF,qEAAqE;QACrE,sEAAsE,EACxE;QACE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAC/D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACxD,SAAS,EAAE,OAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;KAC1D,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,mCAAmC;QACnC,IAAA,sBAAY,EAAC,gBAAgB,CAAC,CAAC;QAC/B,4CAA4C;QAC5C,MAAM,IAAI,GAAG,IAAA,yBAAe,GAAE,CAAC;QAE/B,MAAM,EAAE,GAAG,MAAM,IAAA,4BAAoB,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,EAAE,CAAC,KAAK;4BACZ,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,IAAI;4BAClD,CAAC,CAAC,6CAA6C;qBAClD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;gBAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBAChD,CAAC,CAAC,MAAM,CAAC;YAEX,0BAA0B;YAC1B,MAAM,WAAW,GAAG,MAAM,IAAA,mBAAU,EAClC,EAAE,CAAC,UAAU,EACb,4BAA4B,EAC5B;gBACE,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,OAAO;aACnB,CACF,CAAC;YAEF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YAEhC,6BAA6B;YAC7B,IAAI,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,IAAI,QAA4B,CAAC;YACjC,IAAI,SAAS,GAAG,CAAC,CAAC;YAElB,+CAA+C;YAC/C,OAAO,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC/C,SAAS,EAAE,CAAC;gBAEZ,MAAM,UAAU,GAAG,MAAM,IAAA,mBAAU,EAMhC,EAAE,CAAC,UAAU,EAAE,4BAA4B,EAAE;oBAC9C,WAAW,EAAE,EAAE,CAAC,WAAW;oBAC3B,KAAK;oBACL,MAAM;iBACP,CAAC,CAAC;gBAEH,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC;gBAC/B,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,2CAA2C;gBAC1E,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;gBAC3B,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;gBACvB,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAE/B,mBAAmB;gBACnB,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,iBAAiB,EAAE,CAAC;oBAC9D,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;wBAC7C,kCAAkC,CAAC;oBACrC,MAAM;gBACR,CAAC;gBAED,6BAA6B;gBAC7B,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;oBACpB,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC3E,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;aAC/D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/workspaceGlob.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerWorkspaceGlob(server: McpServer): void;
+//# sourceMappingURL=workspaceGlob.d.ts.map

package/dist/tools/workspaceGlob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceGlob.d.ts","sourceRoot":"","sources":["../../src/tools/workspaceGlob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOpE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAmF7D"}

package/dist/tools/workspaceGlob.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkspaceGlob = registerWorkspaceGlob;
+const zod_1 = require("zod");
+const context_1 = require("../lib/context");
+const cache_1 = require("../workspace/cache");
+const client_1 = require("../worker/client");
+const toolHelper_1 = require("../lib/toolHelper");
+function registerWorkspaceGlob(server) {
+    (0, toolHelper_1.registerTool)(server, "workspace_glob", "Find files by glob pattern in your workspace. Returns matching file paths sorted by modification " +
+        "time (most recently modified first). Useful for discovering project structure, finding files by " +
+        "extension, or locating specific file names. Excludes .git and node_modules by default.", {
+        bountyId: zod_1.z.string().describe("The bounty ID you have claimed"),
+        pattern: zod_1.z
+            .string()
+            .describe("Glob pattern to match (e.g. '**/*.ts', 'src/**/*.test.*', '*.json')"),
+        path: zod_1.z
+            .string()
+            .optional()
+            .describe("Subdirectory to search in, relative to /workspace (default: workspace root)"),
+    }, async (args) => {
+        // SECURITY (H4): Scope enforcement
+        (0, context_1.requireScope)("workspace:read");
+        // SECURITY (C1): Identity from auth context
+        const user = (0, context_1.requireAuthUser)();
+        const ws = await (0, cache_1.getWorkspaceForAgent)(user.userId, args.bountyId);
+        if (!ws.found || ws.status !== "ready") {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: ws.found
+                            ? `Workspace is not ready (status: ${ws.status}).`
+                            : "No workspace found. Claim the bounty first.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        try {
+            const result = await (0, client_1.callWorker)(ws.workerHost, "/api/workspace/glob", {
+                workspaceId: ws.workspaceId,
+                pattern: args.pattern,
+                path: args.path,
+            });
+            if (result.files.length === 0) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `No files found matching pattern: ${args.pattern}`,
+                        },
+                    ],
+                };
+            }
+            const listing = result.files.map((f) => `  ${f}`).join("\n");
+            const footer = result.truncated
+                ? `\n\n(showing ${result.files.length} of ${result.totalCount}+ matches, sorted by mtime)`
+                : `\n\n(${result.totalCount} files, sorted by mtime)`;
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `**Matching files:**\n${listing}${footer}`,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Glob search failed";
+            return {
+                content: [{ type: "text", text: `Error: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=workspaceGlob.js.map

package/dist/tools/workspaceGlob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceGlob.js","sourceRoot":"","sources":["../../src/tools/workspaceGlob.ts"],"names":[],"mappings":";;AAOA,sDAmFC;AAzFD,6BAAwB;AACxB,4CAA+D;AAC/D,8CAA0D;AAC1D,6CAA8C;AAC9C,kDAAiD;AAEjD,SAAgB,qBAAqB,CAAC,MAAiB;IACrD,IAAA,yBAAY,EACV,MAAM,EACN,gBAAgB,EAChB,mGAAmG;QACjG,kGAAkG;QAClG,wFAAwF,EAC1F;QACE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAC/D,OAAO,EAAE,OAAC;aACP,MAAM,EAAE;aACR,QAAQ,CAAC,qEAAqE,CAAC;QAClF,IAAI,EAAE,OAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,6EAA6E,CAAC;KAC3F,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,mCAAmC;QACnC,IAAA,sBAAY,EAAC,gBAAgB,CAAC,CAAC;QAC/B,4CAA4C;QAC5C,MAAM,IAAI,GAAG,IAAA,yBAAe,GAAE,CAAC;QAE/B,MAAM,EAAE,GAAG,MAAM,IAAA,4BAAoB,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,EAAE,CAAC,KAAK;4BACZ,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,IAAI;4BAClD,CAAC,CAAC,6CAA6C;qBAClD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAU,EAI5B,EAAE,CAAC,UAAU,EAAE,qBAAqB,EAAE;gBACvC,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,oCAAoC,IAAI,CAAC,OAAO,EAAE;yBACzD;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS;gBAC7B,CAAC,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,MAAM,OAAO,MAAM,CAAC,UAAU,6BAA6B;gBAC1F,CAAC,CAAC,QAAQ,MAAM,CAAC,UAAU,0BAA0B,CAAC;YAExD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,wBAAwB,OAAO,GAAG,MAAM,EAAE;qBACjD;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;gBAC/D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/workspaceGrep.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerWorkspaceGrep(server: McpServer): void;
+//# sourceMappingURL=workspaceGrep.d.ts.map

package/dist/tools/workspaceGrep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceGrep.d.ts","sourceRoot":"","sources":["../../src/tools/workspaceGrep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOpE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAsN7D"}