atabey 0.0.15 → 0.0.17

package/framework-mcp/dist/framework-mcp/src/utils/memory.js

@@ -1,74 +0,0 @@
-import fs from "fs";
-import os from "os";
-import path from "path";
-const CWD = process.cwd();
-const HOME = os.homedir();
-const FRAMEWORK = {
-    CORE_DIR: ".atabey",
-};
-const FRAMEWORK_DIR_CANDIDATES = [
-    ".atabey",
-    ".agents",
-    ".claude",
-    ".gemini",
-    ".grok",
-    ".cursor",
-];
-const MCP = {
-    TEST_DIR_ENV: "ATABEY_TEST_DIR",
-};
-function findFrameworkDir(basePath) {
-    try {
-        const pkgPath = path.join(basePath, "package.json");
-        if (fs.existsSync(pkgPath)) {
-            const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
-            if (pkg.atabey && typeof pkg.atabey.frameworkDir === "string") {
-                const customDir = path.join(basePath, pkg.atabey.frameworkDir);
-                if (fs.existsSync(customDir))
-                    return customDir;
-            }
-        }
-    }
-    catch {
-        // ignore
-    }
-    return null;
-}
-export function isFrameworkDevelopmentRepo() {
-    try {
-        const pkgPath = path.join(CWD, "package.json");
-        if (fs.existsSync(pkgPath)) {
-            const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
-            if (pkg.name === "atabey") {
-                return true;
-            }
-        }
-    }
-    catch {
-        // ignore
-    }
-    return false;
-}
-export function getConfigDir() {
-    const localDir = findFrameworkDir(CWD);
-    if (localDir)
-        return localDir;
-    // Check for standard local directories if package.json doesn't specify
-    const localCandidates = [...FRAMEWORK_DIR_CANDIDATES, ".agent"];
-    for (const cand of localCandidates) {
-        const p = path.join(CWD, cand);
-        if (fs.existsSync(p))
-            return p;
-    }
-    // In dev repo, don't fall back to global dir. Point to local default.
-    if (isFrameworkDevelopmentRepo()) {
-        return path.join(CWD, FRAMEWORK.CORE_DIR);
-    }
-    return path.join(HOME, FRAMEWORK.CORE_DIR);
-}
-export function getFrameworkDir() {
-    const testDir = process.env[MCP.TEST_DIR_ENV];
-    if (testDir)
-        return testDir;
-    return getConfigDir();
-}

package/framework-mcp/dist/framework-mcp/src/utils/metrics.js

@@ -1,56 +0,0 @@
-import fs from "fs";
-import path from "path";
-import { resolveFrameworkDir } from "./security.js";
-export const Metrics = {
-    /**
-     * Estimates tokens based on character count (rough heuristic: 1 token ~= 4 chars).
-     */
-    estimateTokens: (text) => {
-        return Math.ceil(text.length / 4);
-    },
-    /**
-     * Logs the token usage and action to the observability metrics file.
-     */
-    logUsage: (projectRoot, agent, action, tokens) => {
-        Metrics.saveMetric(projectRoot, {
-            timestamp: new Date().toISOString(),
-            agent,
-            action,
-            estimatedTokens: tokens
-        });
-    },
-    /**
-     * Logs an error occurrence to the observability metrics file.
-     */
-    logError: (projectRoot, agent, action, error) => {
-        Metrics.saveMetric(projectRoot, {
-            timestamp: new Date().toISOString(),
-            agent,
-            action: `ERROR: ${action}`,
-            estimatedTokens: 0,
-            error
-        });
-    },
-    /**
-     * Internal helper to save metric entries.
-     */
-    saveMetric: (projectRoot, entry) => {
-        const frameworkDir = resolveFrameworkDir(projectRoot);
-        const metricsPath = path.join(projectRoot, frameworkDir, "observability/metrics.json");
-        try {
-            const metricsDir = path.dirname(metricsPath);
-            if (!fs.existsSync(metricsDir))
-                fs.mkdirSync(metricsDir, { recursive: true });
-            let currentMetrics = [];
-            if (fs.existsSync(metricsPath)) {
-                currentMetrics = JSON.parse(fs.readFileSync(metricsPath, "utf8"));
-            }
-            currentMetrics.push(entry);
-            // Keep only last 100 entries to save space
-            if (currentMetrics.length > 100)
-                currentMetrics.shift();
-            fs.writeFileSync(metricsPath, JSON.stringify(currentMetrics, null, 2));
-        }
-        catch { /* ignore: metrics should not block the main process */ }
-    }
-};

package/framework-mcp/dist/framework-mcp/src/utils/permissions.js

@@ -1,71 +0,0 @@
-import fs from "fs";
-import path from "path";
-import { resolveFrameworkDir } from "./security.js";
-function globToRegex(glob) {
-    const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&");
-    const step1 = escaped.replace(/\*\*/g, "__DBL_STR__");
-    const step2 = step1.replace(/\*/g, "[^/]*");
-    const regexStr = "^" + step2.replace(/__DBL_STR__/g, ".*") + "$";
-    return new RegExp(regexStr);
-}
-/**
- * Validates if the active agent has write permission for the target file.
- * Automatically identifies the active agent by checking the status.json store
- * for the agent in the "EXECUTING" state.
- */
-export function verifyWritePermission(projectRoot, targetFilePath) {
-    const frameworkDir = resolveFrameworkDir(projectRoot);
-    const absoluteFrameworkPath = path.isAbsolute(frameworkDir)
-        ? frameworkDir
-        : path.resolve(projectRoot, frameworkDir);
-    const matrixPath = path.join(absoluteFrameworkPath, "permission-matrix.json");
-    // If no permission matrix exists, skip enforcement (default allow)
-    if (!fs.existsSync(matrixPath)) {
-        return;
-    }
-    let matrix;
-    try {
-        matrix = JSON.parse(fs.readFileSync(matrixPath, "utf8"));
-    }
-    catch (e) {
-        throw new Error(`Failed to parse permission-matrix.json: ${String(e)}`, { cause: e });
-    }
-    // Determine the active agent from status.json
-    const statusPath = path.join(absoluteFrameworkPath, "memory", "status.json");
-    let activeAgent = null;
-    if (fs.existsSync(statusPath)) {
-        try {
-            const status = JSON.parse(fs.readFileSync(statusPath, "utf8"));
-            // Find an agent that is currently in the EXECUTING state
-            for (const [agentName, info] of Object.entries(status)) {
-                const data = info;
-                if (data.state === "EXECUTING") {
-                    activeAgent = agentName.startsWith("@") ? agentName : `@${agentName}`;
-                    break;
-                }
-            }
-        }
-        catch (e) {
-            // Log warning but don't crash, default to allowing if status can't be parsed
-            process.stderr.write(`[Permissions] Warning: Failed to read status.json: ${String(e)}\n`);
-        }
-    }
-    // If no active executing agent is found, default to allowing
-    if (!activeAgent) {
-        return;
-    }
-    const agentRules = matrix[activeAgent];
-    // If no rules defined for the agent, default to allowing
-    if (!agentRules || !agentRules.write) {
-        return;
-    }
-    // Resolve target path relative to project root for glob matching
-    const relativeTargetPath = path.relative(projectRoot, path.resolve(projectRoot, targetFilePath));
-    const allowed = agentRules.write.some(glob => {
-        const regex = globToRegex(glob);
-        return regex.test(relativeTargetPath);
-    });
-    if (!allowed) {
-        throw new Error(`Permission Denied: Agent ${activeAgent} is not authorized to write to "${relativeTargetPath}". Matrix rules restrict writes to: [${agentRules.write.join(", ")}].`);
-    }
-}

package/framework-mcp/dist/framework-mcp/src/utils/quality.js

@@ -1,124 +0,0 @@
-import fs from "fs";
-import path from "path";
-/**
- * Shared Code Quality Heuristic Scanner
- * Evaluates functions lengths, nesting depth, and usage of the forbidden 'any' type.
- */
-export function analyzePathQuality(projectRoot, targetPath) {
-    const absolutePath = path.resolve(projectRoot, targetPath);
-    const files = [];
-    function collectFilesSync(dir, exts) {
-        if (!fs.existsSync(dir))
-            return;
-        try {
-            const stat = fs.statSync(dir);
-            if (stat.isFile()) {
-                if (exts.some(ext => dir.endsWith(ext))) {
-                    files.push(dir);
-                }
-                return;
-            }
-            const entries = fs.readdirSync(dir, { withFileTypes: true });
-            for (const entry of entries) {
-                const fullPath = path.join(dir, entry.name);
-                if (entry.isDirectory() && !entry.name.startsWith("node_modules") && !entry.name.startsWith(".")) {
-                    collectFilesSync(fullPath, exts);
-                }
-                else if (entry.isFile() && exts.some(ext => entry.name.endsWith(ext))) {
-                    files.push(fullPath);
-                }
-            }
-        }
-        catch {
-            // Ignore errors reading files/dirs
-        }
-    }
-    collectFilesSync(absolutePath, [".ts", ".tsx"]);
-    const issues = [];
-    let longFunctions = 0;
-    let deepNesting = 0;
-    let anyTypes = 0;
-    files.forEach((f) => {
-        try {
-            const content = fs.readFileSync(f, "utf8");
-            const lines = content.split("\n");
-            const relativePath = path.relative(projectRoot, f);
-            // Check for `any` type
-            lines.forEach((line, idx) => {
-                if (line.trim().startsWith("//") || line.trim().startsWith("/*"))
-                    return;
-                if (line.match(/\bany\b/) && !line.includes("// eslint-disable") && !line.includes("as any")) {
-                    anyTypes++;
-                    issues.push({
-                        file: relativePath,
-                        line: idx + 1,
-                        type: "any-type",
-                        message: `Line ${idx + 1}: Usage of 'any' type`
-                    });
-                }
-            });
-            // Check for long functions
-            let inFunction = false;
-            let funcLines = 0;
-            let startLine = 0;
-            let funcName = "anonymous";
-            for (let i = 0; i < lines.length; i++) {
-                const line = lines[i];
-                // Detect function/method starts using regex
-                const funcMatch = line.match(/(?:public|private|protected|static\s+)?(?:async\s+)?(?:function\s+)?(\w+)\s*\([^)]*\)\s*{/);
-                const methodMatch = !funcMatch ? line.match(/^\s*(?:public|private|protected|static\s+)?(\w+)\s*\([^)]*\)\s*{/) : null;
-                const arrowMatch = !funcMatch && !methodMatch ? line.match(/(?:const|let|var)?\s*(\w+)?\s*=\s*(?:async\s*)?\([^)]*\)\s*=>\s*{/) : null;
-                if (funcMatch || methodMatch || arrowMatch) {
-                    inFunction = true;
-                    funcLines = 1;
-                    startLine = i + 1;
-                    funcName = (funcMatch?.[1] || methodMatch?.[1] || arrowMatch?.[1] || "anonymous").trim();
-                    continue;
-                }
-                if (inFunction) {
-                    funcLines++;
-                    if (line.includes("}")) {
-                        if (funcLines > 50) {
-                            longFunctions++;
-                            issues.push({
-                                file: relativePath,
-                                line: startLine,
-                                type: "complexity",
-                                message: `Function '${funcName}' is ${funcLines} lines long (max: 50)`
-                            });
-                        }
-                        inFunction = false;
-                    }
-                }
-            }
-            // Check nesting depth
-            lines.forEach((line, idx) => {
-                const leadingSpaces = line.match(/^(\s*)/)?.[0].length || 0;
-                if (leadingSpaces >= 10 && !line.trim().startsWith("//") && !line.trim().startsWith("*")) {
-                    const indentSize = (leadingSpaces % 4 === 0) ? 4 : 2;
-                    const depth = Math.floor(leadingSpaces / indentSize);
-                    if (depth > 4) {
-                        deepNesting++;
-                        issues.push({
-                            file: relativePath,
-                            line: idx + 1,
-                            type: "complexity",
-                            message: `Line ${idx + 1}: Nesting depth ${depth}`
-                        });
-                    }
-                }
-            });
-        }
-        catch {
-            // Ignore files that can't be read
-        }
-    });
-    return {
-        totalFiles: files.length,
-        totalIssues: issues.length,
-        longFunctions,
-        deepNesting,
-        anyTypes,
-        issues
-    };
-}

package/framework-mcp/dist/framework-mcp/src/utils/rules-engine.js

@@ -1,231 +0,0 @@
-/**
- * ─── RULES ENGINE (Prompt Conflict Resolution) ────────────────────
- *
- * Resolves conflicts between AI CLI built-in prompts and Atabey governance rules.
- * Ensures Atabey's critical rules ALWAYS override CLI-level instructions.
- *
- * Priority System:
- * - CRITICAL (P0): Non-bypassable rules (zero any, no console.log, PII masking)
- * - HIGH (P1): Important rules that should not be violated
- * - MEDIUM (P2): Standard best practices
- * - LOW (P3): Recommendations only
- *
- * Enforcement Mechanisms:
- * 1. Pre-execution: Rule validation BEFORE tool runs
- * 2. Post-execution: Scan changed files for violations → auto-rollback
- * 3. CLI System Prompt Override: Inject critical rules at MCP initialization
- */
-import path from "path";
-// ─── Built-in Governance Rules ────────────────────────────────────
-const GOVERNANCE_RULES = [
-    // ── CRITICAL (P0) Rules ────────────────────────────────────
-    {
-        id: "no-any-types",
-        name: "Zero Any Type Policy",
-        description: "TypeScript 'any' type is strictly forbidden",
-        priority: "CRITICAL",
-        detectPattern: /:\s*any\b/g,
-        appliesToExtensions: [".ts", ".tsx"],
-        errorMessage: "CRITICAL: 'any' type is forbidden. Use 'unknown' with proper type guards instead.",
-        bypassable: false,
-    },
-    {
-        id: "no-console-log",
-        name: "No Console Log",
-        description: "console.log/error/warn is forbidden (use logger instead)",
-        priority: "CRITICAL",
-        detectPattern: /console\.(log|error|warn|debug|info)\s*\(/g,
-        appliesToExtensions: [".ts", ".tsx", ".js", ".jsx"],
-        errorMessage: "CRITICAL: console.log/error/warn is forbidden. Use the project's logger instead.",
-        bypassable: false,
-    },
-    {
-        id: "pii-masking",
-        name: "PII Masking Required",
-        description: "Sensitive data must be masked before logging or storing",
-        priority: "CRITICAL",
-        errorMessage: "CRITICAL: Detected potential PII in unmasked form. Use maskText() / maskObject() from pii.ts.",
-        bypassable: false,
-    },
-    // ── HIGH (P1) Rules ────────────────────────────────────────
-    {
-        id: "no-hardcoded-secrets",
-        name: "No Hardcoded Secrets",
-        description: "API keys, tokens, passwords must use environment variables",
-        priority: "HIGH",
-        detectPattern: /(['"])sk-[a-zA-Z0-9]{20,}['"]|(['"])ghp_[a-zA-Z0-9]{36,}['"]|(['"])AIza[0-9A-Za-z_-]{35}['"]/g,
-        appliesToExtensions: [".ts", ".tsx", ".js", ".jsx", ".py", ".go", ".java", ".yaml", ".yml", ".env.example"],
-        errorMessage: "HIGH: Hardcoded API keys/tokens detected. Use environment variables (process.env.*).",
-        bypassable: false,
-    },
-    {
-        id: "no-commented-code",
-        name: "No Commented-Out Code",
-        description: "Dead code should be removed, not commented out",
-        priority: "HIGH",
-        detectPattern: /\/\/\s*.{10,}/g,
-        appliesToExtensions: [".ts", ".tsx", ".js", ".jsx"],
-        errorMessage: "HIGH: Commented-out code detected. Remove dead code instead of commenting.",
-        bypassable: true,
-    },
-    // ── MEDIUM (P2) Rules ──────────────────────────────────────
-    {
-        id: "no-console-in-jsx",
-        name: "No Console in JSX",
-        description: "Avoid console statements inside JSX/TSX components",
-        priority: "MEDIUM",
-        detectPattern: /{.*console\.(log|error|warn)\(.*}/g,
-        appliesToExtensions: [".tsx", ".jsx"],
-        errorMessage: "MEDIUM: Console statement inside JSX detected. Move to event handler or useEffect.",
-        bypassable: true,
-    },
-    {
-        id: "i18n-usage",
-        name: "Internationalization Required",
-        description: "Use i18n for user-facing strings",
-        priority: "MEDIUM",
-        detectPattern: /(['"])([A-Z][a-z]+ [a-z]+ [a-z]+)['"]/g,
-        appliesToExtensions: [".tsx", ".jsx"],
-        errorMessage: "MEDIUM: User-facing string detected. Use i18n translation function instead.",
-        bypassable: true,
-    },
-];
-// ─── Rule Engine ──────────────────────────────────────────────────
-let rulesMap = null;
-function getRulesMap() {
-    if (!rulesMap) {
-        rulesMap = new Map();
-        for (const rule of GOVERNANCE_RULES) {
-            rulesMap.set(rule.id, rule);
-        }
-    }
-    return rulesMap;
-}
-/**
- * Get all governance rules.
- */
-export function getAllRules() {
-    return [...GOVERNANCE_RULES];
-}
-/**
- * Get rules by priority level.
- */
-export function getRulesByPriority(priority) {
-    return GOVERNANCE_RULES.filter(r => r.priority === priority);
-}
-/**
- * Get non-bypassable rules (CRITICAL + HIGH non-bypassable).
- */
-export function getNonBypassableRules() {
-    return GOVERNANCE_RULES.filter(r => !r.bypassable);
-}
-/**
- * Scan file content for rule violations.
- * Returns array of violations found.
- */
-export function scanFileForViolations(filePath, content) {
-    const ext = path.extname(filePath);
-    const violations = [];
-    const lines = content.split("\n");
-    for (const rule of GOVERNANCE_RULES) {
-        // Check if rule applies to this file extension
-        if (rule.appliesToExtensions && !rule.appliesToExtensions.includes(ext)) {
-            continue;
-        }
-        // Check if rule has a detect pattern
-        if (!rule.detectPattern)
-            continue;
-        // Scan each line
-        for (let i = 0; i < lines.length; i++) {
-            const match = lines[i].match(rule.detectPattern);
-            if (match) {
-                violations.push({
-                    rule,
-                    match: match[0],
-                    line: i + 1,
-                });
-            }
-        }
-    }
-    return violations;
-}
-/**
- * Validate tool arguments against governance rules.
- * Returns violation messages if any critical rule is violated.
- */
-export function validateArgsAgainstRules(toolName, args) {
-    const nonBypassable = getNonBypassableRules();
-    for (const rule of nonBypassable) {
-        // Check if rule applies to this tool
-        if (rule.appliesToTools && !rule.appliesToTools.includes(toolName)) {
-            continue;
-        }
-        // For write_file and replace_text, check content for violations
-        if ((toolName === "write_file" || toolName === "replace_text") && args.content) {
-            const content = args.content;
-            const filePath = args.path || "unknown.ts";
-            const violations = scanFileForViolations(filePath, content);
-            if (violations.length > 0) {
-                const details = violations.map(v => `  Line ${v.line}: ${v.match} (${v.rule.name} - ${v.rule.priority})`).join("\n");
-                return [
-                    `[GOVERNANCE] ${rule.priority} rule violation: ${rule.name}`,
-                    `${rule.errorMessage}`,
-                    "\nViolations:",
-                    details,
-                ].join("\n");
-            }
-        }
-    }
-    return null;
-}
-/**
- * Validate tool response for governance violations.
- * Returns violation messages if found.
- */
-export function validateResponseAgainstRules(toolName, responseText) {
-    // For file reads, check if the content contains PII or secrets
-    if (toolName === "read_file" && responseText.length > 0) {
-        const criticalRules = getNonBypassableRules();
-        for (const rule of criticalRules) {
-            if (rule.detectPattern && rule.detectPattern.test(responseText)) {
-                return `[GOVERNANCE] ${rule.priority} violation detected in response: ${rule.name}. ${rule.errorMessage}`;
-            }
-        }
-    }
-    return null;
-}
-/**
- * Build system prompt override block for CLI initialization.
- * This is injected into the AI's system prompt at MCP connect time.
- */
-export function buildSystemPromptOverride() {
-    const criticalRules = getRulesByPriority("CRITICAL");
-    const highRules = getRulesByPriority("HIGH");
-    return [
-        "## [ATABEY GOVERNANCE] Critical Rules — DO NOT OVERRIDE",
-        "",
-        "The following rules are ENFORCED by the Atabey Governance Layer.",
-        "They CANNOT be bypassed or disabled.",
-        "",
-        "### Critical Rules (Non-Bypassable)",
-        ...criticalRules.map(r => `- 🔴 ${r.name}: ${r.description}`),
-        "",
-        "### High Priority Rules",
-        ...highRules.map(r => `- 🟠 ${r.name}: ${r.description}`),
-        "",
-        "> These rules are injected at the MCP middleware layer and enforced",
-        "> at both pre-execution and post-execution stages.",
-        "",
-    ].join("\n");
-}
-/**
- * Add a custom governance rule at runtime.
- */
-export function addRule(rule) {
-    const map = getRulesMap();
-    if (!map.has(rule.id)) {
-        GOVERNANCE_RULES.push(rule);
-        map.set(rule.id, rule);
-    }
-}
-export { GOVERNANCE_RULES as DefaultGovernanceRules };

package/framework-mcp/dist/framework-mcp/src/utils/security.js

@@ -1,60 +0,0 @@
-import path from "path";
-import fs from "fs";
-import { FRAMEWORK, MCP, UNIFIED_HUB_DIR } from "../constants.js"; // New import
-import os from "os"; // Need os.homedir()
-/**
- * Validates and resolves a user-provided path to prevent path traversal attacks.
- * Ensures the resolved path stays within the project root boundary.
- */
-export function safePath(projectRoot, userPath) {
-    const resolved = path.resolve(projectRoot, userPath);
-    const normalizedRoot = path.resolve(projectRoot);
-    if (!resolved.startsWith(normalizedRoot + path.sep) && resolved !== normalizedRoot) {
-        throw new Error(`Access denied: path "${userPath}" escapes project root.`);
-    }
-    return resolved;
-}
-/**
- * Resolves the active framework directory.
- * Priority: ATABEY_TEST_DIR (env) -> package.json `atabey.frameworkDir` -> `.atabey` -> other adapter dirs -> global HOME.
- */
-export function resolveFrameworkDir(projectRoot) {
-    // For test environments, use the explicitly set test directory.
-    const testDir = process.env[MCP.TEST_DIR_ENV];
-    if (testDir)
-        return testDir;
-    // 1. Authoritative source: read from package.json if present
-    try {
-        const pkgPath = path.join(projectRoot, "package.json");
-        if (fs.existsSync(pkgPath)) {
-            const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
-            const atabeyConfig = pkg["atabey"];
-            if (atabeyConfig && typeof atabeyConfig["frameworkDir"] === "string") {
-                // Ensure the path is relative if it's within the project, otherwise use as-is.
-                const resolvedDir = path.resolve(projectRoot, atabeyConfig["frameworkDir"]);
-                if (resolvedDir.startsWith(path.resolve(projectRoot))) {
-                    return path.relative(projectRoot, resolvedDir);
-                }
-                return atabeyConfig["frameworkDir"];
-            }
-        }
-    }
-    catch {
-        // ignore — fall through to filesystem scan
-    }
-    // 2. Filesystem scan in projectRoot for common framework directories
-    const localCandidates = [
-        FRAMEWORK.CORE_DIR, // .atabey
-        UNIFIED_HUB_DIR, // .agents
-        // Add other adapter specific directories if needed, or remove if unified is strictly enforced
-    ];
-    for (const candidate of localCandidates) {
-        const candidatePath = path.join(projectRoot, candidate);
-        if (fs.existsSync(candidatePath)) {
-            return candidate;
-        }
-    }
-    // 3. Fallback to global home directory.
-    const homeDir = os.homedir();
-    return path.join(homeDir, FRAMEWORK.CORE_DIR);
-}