atabey 0.0.13 → 0.0.15

package/dist/framework-mcp/src/tools/messaging/ask_human.js

@@ -1,30 +1,99 @@
-import chalk from "chalk";
+import fs from "fs";
+import path from "path";
+/**
+ * ─── ASK HUMAN — File Bridge ─────────────────────────────────────────
+ *
+ * AI CLIs (Claude Code, Gemini CLI) start the MCP server as a stdio subprocess.
+ * In this subprocess, stdin is isTTY=false (used for MCP JSON-RPC).
+ *
+ * Solution: File-based Q&A bridge.
+ * 1. Question → written to .atabey/hitl/question.txt
+ * 2. Developer answers via `atabey hitl` command
+ * 3. Answer → written to .atabey/hitl/answer.txt
+ * 4. This handler reads the answer and returns it to the AI
+ *
+ * Dashboard: Can also be answered via /api/approvals endpoint on the web dashboard.
+ */
 export async function handleAskHuman(root, args) {
-    if (process.env.ATABEY_TEST_DIR || !process.stdin.isTTY) {
-        return { content: [{ type: "text", text: "[SKIPPED] Non-interactive environment. Cannot ask human." }] };
-    }
+    const timeoutSeconds = args.timeoutSeconds ?? 120;
+    const hitlDir = path.join(root, ".atabey", "hitl");
+    const questionFile = path.join(hitlDir, "question.txt");
+    const answerFile = path.join(hitlDir, "answer.txt");
     try {
-        const readline = await import("readline");
-        const rl = readline.createInterface({
-            input: process.stdin,
-            output: process.stdout
-        });
-        return new Promise((resolve) => {
-            process.stdout.write("\n" + chalk.bgMagenta.white.bold(" [HUMAN-IN-THE-LOOP REQUIRED] ") + "\n");
-            process.stdout.write(chalk.magenta("An agent has paused execution to ask you a question:\n"));
-            rl.question(`\n${chalk.bold(args.question)}\n${chalk.gray("> ")}`, (answer) => {
-                rl.close();
-                resolve({
-                    content: [{ type: "text", text: `[HUMAN RESPONSE] ${answer}` }]
-                });
-            });
-        });
+        // Ensure hitl directory exists
+        fs.mkdirSync(hitlDir, { recursive: true });
+        // Clear any stale answer file
+        if (fs.existsSync(answerFile)) {
+            fs.unlinkSync(answerFile);
+        }
+        // Write the question with metadata
+        const questionPayload = JSON.stringify({
+            timestamp: new Date().toISOString(),
+            question: args.question,
+            timeoutAt: new Date(Date.now() + timeoutSeconds * 1000).toISOString(),
+        }, null, 2);
+        fs.writeFileSync(questionFile, questionPayload);
+        // Write human-readable prompt file alongside
+        fs.writeFileSync(path.join(hitlDir, "PENDING.txt"), [
+            "═══════════════════════════════════════════════════",
+            " [ATABEY] AGENT WAITING FOR YOUR ANSWER",
+            "═══════════════════════════════════════════════════",
+            "",
+            `QUESTION: ${args.question}`,
+            "",
+            "To answer, run in your terminal:",
+            "  atabey hitl answer \"your answer here\"",
+            "",
+            "Or use the dashboard: http://localhost:5858",
+            "═══════════════════════════════════════════════════",
+        ].join("\n"));
+        process.stderr.write(`[HITL] Question written to ${questionFile}\n`);
+        process.stderr.write("[HITL] Run: atabey hitl answer \"your answer\"\n");
+        // Poll for answer file
+        const pollIntervalMs = 1000;
+        const maxAttempts = timeoutSeconds;
+        for (let attempt = 0; attempt < maxAttempts; attempt++) {
+            await new Promise(resolve => setTimeout(resolve, pollIntervalMs));
+            if (fs.existsSync(answerFile)) {
+                const answer = fs.readFileSync(answerFile, "utf8").trim();
+                // Clean up
+                try {
+                    fs.unlinkSync(questionFile);
+                    fs.unlinkSync(answerFile);
+                    const pendingFile = path.join(hitlDir, "PENDING.txt");
+                    if (fs.existsSync(pendingFile))
+                        fs.unlinkSync(pendingFile);
+                }
+                catch { /* cleanup is best-effort */ }
+                process.stderr.write("[HITL] Answer received.\n");
+                return {
+                    content: [{ type: "text", text: `[HUMAN RESPONSE] ${answer}` }],
+                };
+            }
+        }
+        // Timeout — clean up question file
+        try {
+            if (fs.existsSync(questionFile))
+                fs.unlinkSync(questionFile);
+            const pendingFile = path.join(hitlDir, "PENDING.txt");
+            if (fs.existsSync(pendingFile))
+                fs.unlinkSync(pendingFile);
+        }
+        catch { /* cleanup is best-effort */ }
+        return {
+            content: [{
+                    type: "text",
+                    text: `[HITL TIMEOUT] No answer received within ${timeoutSeconds}s.\n` +
+                        `Question was: "${args.question}"\n` +
+                        "To answer pending questions, run: atabey hitl answer \"your answer\"",
+                }],
+        };
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
         return {
             isError: true,
-            content: [{ type: "text", text: `[ERROR] Failed to ask human: ${message}` }]
+            content: [{ type: "text", text: `[ERROR] ask_human failed: ${message}` }],
         };
     }
 }

package/dist/framework-mcp/src/tools/messaging/ask_human.js.map

@@ -1 +1 @@
-{"version":3,"file":"ask_human.js","sourceRoot":"","sources":["../../../../../framework-mcp/src/tools/messaging/ask_human.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,IAAkB;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0DAA0D,EAAE,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACzB,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC;YACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC,CAAC;YAE9F,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC1E,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC;oBACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,EAAE,EAAE,CAAC;iBAClE,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,OAAO,EAAE,EAAE,CAAC;SAC/E,CAAC;IACN,CAAC;AACL,CAAC"}
+{"version":3,"file":"ask_human.js","sourceRoot":"","sources":["../../../../../framework-mcp/src/tools/messaging/ask_human.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,IAAkB;IACjE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC;QACD,+BAA+B;QAC/B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3C,8BAA8B;QAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,mCAAmC;QACnC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACxE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEZ,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAEhD,6CAA6C;QAC7C,EAAE,CAAC,aAAa,CACZ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EACjC;YACI,qDAAqD;YACrD,yCAAyC;YACzC,qDAAqD;YACrD,EAAE;YACF,aAAa,IAAI,CAAC,QAAQ,EAAE;YAC5B,EAAE;YACF,kCAAkC;YAClC,2CAA2C;YAC3C,EAAE;YACF,6CAA6C;YAC7C,qDAAqD;SACxD,CAAC,IAAI,CAAC,IAAI,CAAC,CACf,CAAC;QAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,YAAY,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAEzE,uBAAuB;QACvB,MAAM,cAAc,GAAG,IAAI,CAAC;QAC5B,MAAM,WAAW,GAAG,cAAc,CAAC;QAEnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;YAElE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAE1D,WAAW;gBACX,IAAI,CAAC;oBACD,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;oBAC5B,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;oBACtD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;wBAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;gBAExC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAClD,OAAO;oBACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,EAAE,EAAE,CAAC;iBAClE,CAAC;YACN,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACtD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAExC,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,4CAA4C,cAAc,MAAM;wBAClE,kBAAkB,IAAI,CAAC,QAAQ,KAAK;wBACpC,sEAAsE;iBAC7E,CAAC;SACL,CAAC;IAEN,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,OAAO,EAAE,EAAE,CAAC;SAC5E,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/framework-mcp/src/tools/observability/check_ports.d.ts

@@ -1,5 +1,6 @@
 import { CheckActivePortsArgs, ToolResult } from "../types.js";
 /**
  * Checks for active network ports and their status.
+ * Uses spawnSync instead of execSync to prevent shell injection.
  */
 export declare function handleCheckPorts(projectRoot: string, args: CheckActivePortsArgs): ToolResult;

package/dist/framework-mcp/src/tools/observability/check_ports.js

@@ -1,16 +1,32 @@
-import { execSync } from "child_process";
+import { spawnSync } from "child_process";
 /**
  * Checks for active network ports and their status.
+ * Uses spawnSync instead of execSync to prevent shell injection.
  */
 export function handleCheckPorts(projectRoot, args) {
-    const filter = args.filter || ""; // Optional filter (e.g., ":3000")
+    const rawFilter = args.filter || "";
+    // Sanitize filter to prevent command injection (allow only alphanumeric, dots, colons, dashes, underscores)
+    const filter = rawFilter.replace(/[^a-zA-Z0-9.:_-]/g, "");
     try {
-        // Using 'lsof -i -P -n' to list open files and network connections
-        // Note: may require permissions or behave differently on non-Unix systems
-        const command = process.platform === "win32"
-            ? `netstat -ano | findstr LISTENING ${filter ? `| findstr ${filter}` : ""}`
-            : `lsof -i -P -n | grep LISTEN ${filter ? `| grep ${filter}` : ""}`;
-        const output = execSync(command, { encoding: "utf8" });
+        let output;
+        if (process.platform === "win32") {
+            const result = spawnSync("netstat", ["-ano"], { encoding: "utf8" });
+            if (result.error)
+                throw result.error;
+            const lines = (result.stdout || "").split("\n").filter(l => l.includes("LISTENING"));
+            output = filter
+                ? lines.filter(l => l.includes(filter)).join("\n")
+                : lines.join("\n");
+        }
+        else {
+            const result = spawnSync("lsof", ["-i", "-P", "-n"], { encoding: "utf8" });
+            if (result.error)
+                throw result.error;
+            const lines = (result.stdout || "").split("\n").filter(l => l.includes("LISTEN"));
+            output = filter
+                ? lines.filter(l => l.includes(filter)).join("\n")
+                : lines.join("\n");
+        }
         return {
             content: [{
                     type: "text",

package/dist/framework-mcp/src/tools/observability/check_ports.js.map

@@ -1 +1 @@
-{"version":3,"file":"check_ports.js","sourceRoot":"","sources":["../../../../../framework-mcp/src/tools/observability/check_ports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,IAA0B;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,kCAAkC;IAEpE,IAAI,CAAC;QACD,mEAAmE;QACnE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACxC,CAAC,CAAC,oCAAoC,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3E,CAAC,CAAC,+BAA+B,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAExE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvD,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,2CAA2C,MAAM,IAAI,kDAAkD,EAAE;iBAClH,CAAC;SACL,CAAC;IACN,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC;QACV,OAAO;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0FAA0F,EAAE,CAAC;SAChI,CAAC;IACN,CAAC;AACL,CAAC"}
+{"version":3,"file":"check_ports.js","sourceRoot":"","sources":["../../../../../framework-mcp/src/tools/observability/check_ports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,IAA0B;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,4GAA4G;IAC5G,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC;QACD,IAAI,MAAc,CAAC;QAEnB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YACrF,MAAM,GAAG,MAAM;gBACX,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClF,MAAM,GAAG,MAAM;gBACX,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO;YACH,OAAO,EAAE,CAAC;oBACN,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,2CAA2C,MAAM,IAAI,kDAAkD,EAAE;iBAClH,CAAC;SACL,CAAC;IACN,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC;QACV,OAAO;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0FAA0F,EAAE,CAAC;SAChI,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/framework-mcp/src/tools/quality/analyze_code_quality.js

@@ -1,6 +1,7 @@
 import { execSync } from "child_process";
 import fs from "fs";
 import path from "path";
+import { analyzePathQuality } from "../../utils/quality.js";
 /**
  * Code quality analysis tool for Atabey MCP.
  *
@@ -10,6 +11,13 @@ import path from "path";
  * - Code complexity analysis (checkComplexity)
  */
 export function handleAnalyzeCodeQuality(projectRoot, args) {
+    // Validate path parameter to prevent command injection
+    if (!/^[a-zA-Z0-9_./-]+$/.test(args.path)) {
+        return {
+            isError: true,
+            content: [{ type: "text", text: `[ERROR] Invalid path characters detected: ${args.path}` }]
+        };
+    }
     const targetPath = path.resolve(projectRoot, args.path);
     if (!fs.existsSync(targetPath)) {
         return {
@@ -81,73 +89,14 @@ export function handleAnalyzeCodeQuality(projectRoot, args) {
     }
     // 3. Code Complexity Check (basic heuristic)
     if (args.checkComplexity !== false) {
-        const complexityIssues = [];
-        function scanDirectory(dir) {
-            if (!fs.existsSync(dir))
-                return;
-            const entries = fs.readdirSync(dir, { withFileTypes: true });
-            for (const entry of entries) {
-                const fullPath = path.join(dir, entry.name);
-                if (entry.isDirectory() && !entry.name.startsWith("node_modules") && !entry.name.startsWith(".")) {
-                    scanDirectory(fullPath);
-                }
-                else if (entry.isFile() && (entry.name.endsWith(".ts") || entry.name.endsWith(".tsx"))) {
-                    try {
-                        const content = fs.readFileSync(fullPath, "utf8");
-                        const lines = content.split("\n");
-                        // Check for long functions (>50 lines)
-                        let inFunction = false;
-                        let funcLines = 0;
-                        let funcName = "";
-                        const relativePath = path.relative(projectRoot, fullPath);
-                        for (let i = 0; i < lines.length; i++) {
-                            const line = lines[i];
-                            // Detect function start
-                            const funcMatch = line.match(/(?:public|private|protected|static\s+)?(?:async\s+)?(?:function\s+)?(\w+)\s*\([^)]*\)\s*{/);
-                            if (funcMatch) {
-                                inFunction = true;
-                                funcLines = 1;
-                                funcName = funcMatch[1];
-                                continue;
-                            }
-                            // Detect method in class
-                            const methodMatch = line.match(/^\s*(?:public|private|protected|static\s+)?(\w+)\s*\([^)]*\)\s*{/);
-                            if (methodMatch && !line.includes("function")) {
-                                inFunction = true;
-                                funcLines = 1;
-                                funcName = methodMatch[1];
-                                continue;
-                            }
-                            if (inFunction) {
-                                if (line.includes("}")) {
-                                    if (funcLines > 50) {
-                                        complexityIssues.push(`- ${relativePath}:${i + 1} — Function \`${funcName}\` is ${funcLines} lines long (max: 50)`);
-                                    }
-                                    inFunction = false;
-                                }
-                                funcLines++;
-                            }
-                            // Check nesting depth (>4 levels)
-                            const indentMatch = line.match(/^(?:\s{2}){5,}/);
-                            if (indentMatch && !line.trim().startsWith("//") && !line.trim().startsWith("*")) {
-                                const depth = Math.floor(indentMatch[0].length / 2);
-                                if (depth > 4) {
-                                    complexityIssues.push(`- ${relativePath}:${i + 1} — Nesting depth ${depth} (max: 4)`);
-                                }
-                            }
-                        }
-                    }
-                    catch {
-                        // Skip files that can't be read
-                    }
-                }
-            }
-        }
-        scanDirectory(targetPath);
+        const qualityResult = analyzePathQuality(projectRoot, args.path);
+        const complexityIssues = qualityResult.issues.filter(issue => issue.type === "complexity");
         if (complexityIssues.length > 0) {
             hasErrors = true;
             results.push(`## ⚠️ Code Complexity Issues (${complexityIssues.length})`);
-            results.push(...complexityIssues);
+            complexityIssues.forEach(issue => {
+                results.push(`- ${issue.file}:${issue.line} — ${issue.message}`);
+            });
         }
         else {
             results.push("## ✅ Code Complexity: OK");

package/dist/framework-mcp/src/tools/quality/analyze_code_quality.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyze_code_quality.js","sourceRoot":"","sources":["../../../../../framework-mcp/src/tools/quality/analyze_code_quality.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,IAA4B;IACtF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SACjF,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAAa,CAAC,gCAAgC,EAAE,EAAE,EAAE,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/I,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,2BAA2B;IAC3B,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC;YACD,QAAQ,CAAC,kBAAkB,EAAE;gBACzB,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,KAAK,GAAG,GAA6D,CAAC;YAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,gBAAgB;IAChB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,QAAQ,CAAC,8BAA8B,GAAG,IAAI,CAAC,IAAI,EAAE;gBACpE,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,GAA6D,CAAC;YAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC;YAChF,0DAA0D;YAC1D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC/D,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,SAAS,aAAa,CAAC,GAAW;YAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO;YAChC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/F,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBACvF,IAAI,CAAC;wBACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAElC,uCAAuC;wBACvC,IAAI,UAAU,GAAG,KAAK,CAAC;wBACvB,IAAI,SAAS,GAAG,CAAC,CAAC;wBAClB,IAAI,QAAQ,GAAG,EAAE,CAAC;wBAClB,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;wBAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;4BACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;4BAEtB,wBAAwB;4BACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,2FAA2F,CAAC,CAAC;4BAC1H,IAAI,SAAS,EAAE,CAAC;gCACZ,UAAU,GAAG,IAAI,CAAC;gCAClB,SAAS,GAAG,CAAC,CAAC;gCACd,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gCACxB,SAAS;4BACb,CAAC;4BAED,yBAAyB;4BACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;4BACnG,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gCAC5C,UAAU,GAAG,IAAI,CAAC;gCAClB,SAAS,GAAG,CAAC,CAAC;gCACd,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gCAC1B,SAAS;4BACb,CAAC;4BAED,IAAI,UAAU,EAAE,CAAC;gCACb,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oCACrB,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;wCACjB,gBAAgB,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,CAAC,iBAAiB,QAAQ,SAAS,SAAS,uBAAuB,CAAC,CAAC;oCACxH,CAAC;oCACD,UAAU,GAAG,KAAK,CAAC;gCACvB,CAAC;gCACD,SAAS,EAAE,CAAC;4BAChB,CAAC;4BAED,kCAAkC;4BAClC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;4BACjD,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gCAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gCACpD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oCACZ,gBAAgB,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,CAAC,oBAAoB,KAAK,WAAW,CAAC,CAAC;gCAC1F,CAAC;4BACL,CAAC;wBACL,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACL,gCAAgC;oBACpC,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,aAAa,CAAC,UAAU,CAAC,CAAC;QAE1B,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,iCAAiC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,UAAU;IACV,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAE7F,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,SAAS;KACrB,CAAC;AACN,CAAC"}
+{"version":3,"file":"analyze_code_quality.js","sourceRoot":"","sources":["../../../../../framework-mcp/src/tools/quality/analyze_code_quality.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,IAA4B;IACtF,uDAAuD;IACvD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6CAA6C,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9F,CAAC;IACN,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SACjF,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAAa,CAAC,gCAAgC,EAAE,EAAE,EAAE,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/I,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,2BAA2B;IAC3B,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC;YACD,QAAQ,CAAC,kBAAkB,EAAE;gBACzB,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,KAAK,GAAG,GAA6D,CAAC;YAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,gBAAgB;IAChB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,QAAQ,CAAC,8BAA8B,GAAG,IAAI,CAAC,IAAI,EAAE;gBACpE,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,GAA6D,CAAC;YAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC;YAChF,0DAA0D;YAC1D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC/D,CAAC;QACL,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QAE3F,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,iCAAiC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1E,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,UAAU;IACV,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAE7F,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,SAAS;KACrB,CAAC;AACN,CAAC"}

package/dist/framework-mcp/src/tools/schemas.d.ts

@@ -42,7 +42,7 @@ export declare const ReplaceTextSchema: z.ZodObject<{
     path: z.ZodString;
     oldText: z.ZodString;
     newText: z.ZodString;
-    allowMultiple: z.ZodDefault<z.ZodBoolean>;
+    allowMultiple: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 }, "strict", z.ZodTypeAny, {
     path: string;
     oldText: string;
@@ -96,7 +96,7 @@ export declare const BatchSurgicalEditSchema: z.ZodObject<{
         path: z.ZodString;
         oldText: z.ZodString;
         newText: z.ZodString;
-        allowMultiple: z.ZodDefault<z.ZodBoolean>;
+        allowMultiple: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     }, "strip", z.ZodTypeAny, {
         path: string;
         oldText: string;
@@ -210,7 +210,7 @@ export declare const SubmitPlanSchema: z.ZodObject<{
 export declare const AcquireLockSchema: z.ZodObject<{
     resource: z.ZodString;
     agent: z.ZodString;
-    ttl: z.ZodDefault<z.ZodNumber>;
+    ttl: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strict", z.ZodTypeAny, {
     agent: string;
     resource: string;
@@ -233,7 +233,7 @@ export declare const ReleaseLockSchema: z.ZodObject<{
 export declare const RegisterAgentSchema: z.ZodObject<{
     agent: z.ZodString;
     role: z.ZodString;
-    capability: z.ZodDefault<z.ZodNumber>;
+    capability: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     specialties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
 }, "strict", z.ZodTypeAny, {
     agent: string;
@@ -271,7 +271,7 @@ export declare const StoreKnowledgeSchema: z.ZodObject<{
 export declare const SearchKnowledgeSchema: z.ZodObject<{
     query: z.ZodString;
     category: z.ZodOptional<z.ZodEnum<["ARCHITECTURE", "DECISION", "CODE_SNIPPET", "RULE", "TASK_HISTORY"]>>;
-    limit: z.ZodDefault<z.ZodNumber>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strict", z.ZodTypeAny, {
     query: string;
     limit: number;
@@ -298,8 +298,8 @@ export declare const SendAgentMessageSchema: z.ZodObject<{
     content: z.ZodString;
     traceId: z.ZodString;
     parentId: z.ZodOptional<z.ZodString>;
-    priority: z.ZodDefault<z.ZodEnum<["HIGH", "NORMAL", "LOW"]>>;
-    requiresApproval: z.ZodDefault<z.ZodBoolean>;
+    priority: z.ZodDefault<z.ZodOptional<z.ZodEnum<["HIGH", "NORMAL", "LOW"]>>>;
+    requiresApproval: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 }, "strict", z.ZodTypeAny, {
     traceId: string;
     from: string;
@@ -343,60 +343,26 @@ export declare const LogAgentActionSchema: z.ZodObject<{
 }>;
 export declare const AskHumanSchema: z.ZodObject<{
     question: z.ZodString;
+    timeoutSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strict", z.ZodTypeAny, {
     question: string;
+    timeoutSeconds: number;
 }, {
     question: string;
+    timeoutSeconds?: number | undefined;
 }>;
-export declare const LLMGatewayQuerySchema: z.ZodObject<{
-    messages: z.ZodArray<z.ZodObject<{
-        role: z.ZodEnum<["system", "user", "assistant", "tool"]>;
-        content: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        content: string;
-        role: "system" | "user" | "assistant" | "tool";
-    }, {
-        content: string;
-        role: "system" | "user" | "assistant" | "tool";
-    }>, "many">;
-    system: z.ZodOptional<z.ZodString>;
-    model: z.ZodOptional<z.ZodString>;
-    provider: z.ZodOptional<z.ZodEnum<["openai", "anthropic", "google", "grok", "ollama"]>>;
-    strategy: z.ZodOptional<z.ZodEnum<["round-robin", "least-latency", "cost-optimized", "failover", "priority-based", "model-based"]>>;
-    temperature: z.ZodOptional<z.ZodNumber>;
-    maxTokens: z.ZodOptional<z.ZodNumber>;
+export declare const ApproveOperationSchema: z.ZodObject<{
+    action: z.ZodEnum<["approve", "reject", "list"]>;
     traceId: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
-    messages: {
-        content: string;
-        role: "system" | "user" | "assistant" | "tool";
-    }[];
+    action: "approve" | "reject" | "list";
     traceId?: string | undefined;
-    strategy?: "round-robin" | "least-latency" | "cost-optimized" | "failover" | "priority-based" | "model-based" | undefined;
-    system?: string | undefined;
-    provider?: "grok" | "openai" | "anthropic" | "google" | "ollama" | undefined;
-    model?: string | undefined;
-    temperature?: number | undefined;
-    maxTokens?: number | undefined;
+    reason?: string | undefined;
 }, {
-    messages: {
-        content: string;
-        role: "system" | "user" | "assistant" | "tool";
-    }[];
+    action: "approve" | "reject" | "list";
     traceId?: string | undefined;
-    strategy?: "round-robin" | "least-latency" | "cost-optimized" | "failover" | "priority-based" | "model-based" | undefined;
-    system?: string | undefined;
-    provider?: "grok" | "openai" | "anthropic" | "google" | "ollama" | undefined;
-    model?: string | undefined;
-    temperature?: number | undefined;
-    maxTokens?: number | undefined;
-}>;
-export declare const LLMGatewayStatusSchema: z.ZodObject<{
-    detail: z.ZodDefault<z.ZodOptional<z.ZodEnum<["overview", "providers", "stats"]>>>;
-}, "strict", z.ZodTypeAny, {
-    detail: "providers" | "stats" | "overview";
-}, {
-    detail?: "providers" | "stats" | "overview" | undefined;
+    reason?: string | undefined;
 }>;
 export declare const AnalyzeCodeQualitySchema: z.ZodObject<{
     path: z.ZodString;
@@ -424,16 +390,45 @@ export declare const CheckArchitectureComplianceSchema: z.ZodObject<{
     path: string;
     rules?: string[] | undefined;
 }>;
+export declare const MaskPIISchema: z.ZodObject<{
+    text: z.ZodOptional<z.ZodString>;
+    data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["text", "object", "auto"]>>>;
+    strictMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strict", z.ZodTypeAny, {
+    mode: "object" | "text" | "auto";
+    strictMode: boolean;
+    text?: string | undefined;
+    data?: Record<string, unknown> | undefined;
+}, {
+    text?: string | undefined;
+    data?: Record<string, unknown> | undefined;
+    mode?: "object" | "text" | "auto" | undefined;
+    strictMode?: boolean | undefined;
+}>;
 /**
  * ─── TYPE INFERENCE ────────────────────────────────────────────────
  * Deriving types directly from schemas to ensure ZERO DRIFT.
+ * Every exported type below is used by types.ts' ToolArgs union.
  */
 export type ReadFileArgs = z.infer<typeof ReadFileSchema>;
 export type WriteFileArgs = z.infer<typeof WriteFileSchema>;
 export type ReplaceTextArgs = z.infer<typeof ReplaceTextSchema>;
+export type PatchFileArgs = z.infer<typeof PatchFileSchema>;
+export type BatchSurgicalEditArgs = z.infer<typeof BatchSurgicalEditSchema>;
+export type ListDirArgs = z.infer<typeof ListDirSchema>;
+export type GrepSearchArgs = z.infer<typeof GrepSearchSchema>;
+export type GetProjectMapArgs = z.infer<typeof GetProjectMapSchema>;
+export type GetProjectGapsArgs = z.infer<typeof GetProjectGapsSchema>;
 export type SendAgentMessageArgs = z.infer<typeof SendAgentMessageSchema>;
 export type LogAgentActionArgs = z.infer<typeof LogAgentActionSchema>;
+export type AcquireLockArgs = z.infer<typeof AcquireLockSchema>;
+export type ReleaseLockArgs = z.infer<typeof ReleaseLockSchema>;
+export type RegisterAgentArgs = z.infer<typeof RegisterAgentSchema>;
+export type CheckPortsArgs = z.infer<typeof CheckPortsSchema>;
+export type RunTestsArgs = z.infer<typeof RunTestsSchema>;
+export type UpdateProjectMemoryArgs = z.infer<typeof UpdateProjectMemorySchema>;
+export type RunShellCommandArgs = z.infer<typeof RunShellCommandSchema>;
 export type AnalyzeCodeQualityArgs = z.infer<typeof AnalyzeCodeQualitySchema>;
 export type CheckArchitectureComplianceArgs = z.infer<typeof CheckArchitectureComplianceSchema>;
-export type LLMGatewayQueryArgs = z.infer<typeof LLMGatewayQuerySchema>;
-export type LLMGatewayStatusArgs = z.infer<typeof LLMGatewayStatusSchema>;
+export type ApproveOperationArgs = z.infer<typeof ApproveOperationSchema>;

package/dist/framework-mcp/src/tools/schemas.js

@@ -34,7 +34,7 @@ export const ReplaceTextSchema = z.object({
     path: z.string().min(1, "Path is required"),
     oldText: z.string().min(1, "oldText is required"),
     newText: z.string(),
-    allowMultiple: z.boolean().default(false),
+    allowMultiple: z.boolean().optional().default(false),
 }).strict();
 // ─── Search & Exploration
 export const ListDirSchema = z.object({
@@ -58,7 +58,7 @@ export const BatchSurgicalEditSchema = z.object({
         path: z.string().min(1),
         oldText: z.string().min(1),
         newText: z.string(),
-        allowMultiple: z.boolean().default(false),
+        allowMultiple: z.boolean().optional().default(false),
     })),
 }).strict();
 export const PatchFileSchema = z.object({
@@ -97,7 +97,7 @@ export const SubmitPlanSchema = z.object({
 export const AcquireLockSchema = z.object({
     resource: z.string().min(1),
     agent: AgentIDSchema,
-    ttl: z.number().int().positive().default(60),
+    ttl: z.number().int().positive().optional().default(60),
 }).strict();
 export const ReleaseLockSchema = z.object({
     resource: z.string().min(1),
@@ -106,7 +106,7 @@ export const ReleaseLockSchema = z.object({
 export const RegisterAgentSchema = z.object({
     agent: AgentIDSchema,
     role: z.string().min(1),
-    capability: z.number().int().min(1).max(10).default(5),
+    capability: z.number().int().min(1).max(10).optional().default(5),
     specialties: z.record(z.number()).optional(),
 }).strict();
 export const UpdateContractHashSchema = z.object({}).strict();
@@ -123,7 +123,7 @@ export const StoreKnowledgeSchema = z.object({
 export const SearchKnowledgeSchema = z.object({
     query: z.string().min(1, "Query is required"),
     category: z.enum(["ARCHITECTURE", "DECISION", "CODE_SNIPPET", "RULE", "TASK_HISTORY"]).optional(),
-    limit: z.number().int().positive().default(5),
+    limit: z.number().int().positive().optional().default(5),
 }).strict();
 export const DeleteKnowledgeSchema = z.object({
     id: z.string().optional(),
@@ -137,8 +137,8 @@ export const SendAgentMessageSchema = z.object({
     content: z.string().min(1, "Content cannot be empty"),
     traceId: TraceIDSchema,
     parentId: TaskIDSchema.optional(),
-    priority: z.enum(["HIGH", "NORMAL", "LOW"]).default("NORMAL"),
-    requiresApproval: z.boolean().default(false),
+    priority: z.enum(["HIGH", "NORMAL", "LOW"]).optional().default("NORMAL"),
+    requiresApproval: z.boolean().optional().default(false),
 }).strict();
 export const LogAgentActionSchema = z.object({
     agent: AgentIDSchema,
@@ -150,23 +150,12 @@ export const LogAgentActionSchema = z.object({
 }).strict();
 export const AskHumanSchema = z.object({
     question: z.string().min(10, "Question must be clear and detailed."),
+    timeoutSeconds: z.number().int().positive().optional().default(120),
 }).strict();
-// ─── LLM Gateway ────────────────────────────────────────────────────
-export const LLMGatewayQuerySchema = z.object({
-    messages: z.array(z.object({
-        role: z.enum(["system", "user", "assistant", "tool"]),
-        content: z.string().min(1),
-    })).min(1, "At least one message is required"),
-    system: z.string().optional(),
-    model: z.string().optional(),
-    provider: z.enum(["openai", "anthropic", "google", "grok", "ollama"]).optional(),
-    strategy: z.enum(["round-robin", "least-latency", "cost-optimized", "failover", "priority-based", "model-based"]).optional(),
-    temperature: z.number().min(0).max(2).optional(),
-    maxTokens: z.number().int().positive().optional(),
+export const ApproveOperationSchema = z.object({
+    action: z.enum(["approve", "reject", "list"]),
     traceId: z.string().optional(),
-}).strict();
-export const LLMGatewayStatusSchema = z.object({
-    detail: z.enum(["overview", "providers", "stats"]).optional().default("overview"),
+    reason: z.string().optional(),
 }).strict();
 // ─── Code Quality Analysis ──────────────────────────────────────────
 export const AnalyzeCodeQualitySchema = z.object({
@@ -180,4 +169,11 @@ export const CheckArchitectureComplianceSchema = z.object({
     path: z.string().min(1, "Path to check is required"),
     rules: z.array(z.string()).optional(),
 }).strict();
+// ─── PII / Compliance ───────────────────────────────────────────────
+export const MaskPIISchema = z.object({
+    text: z.string().optional(),
+    data: z.record(z.unknown()).optional(),
+    mode: z.enum(["text", "object", "auto"]).optional().default("auto"),
+    strictMode: z.boolean().optional().default(false),
+}).strict();
 //# sourceMappingURL=schemas.js.map