kemdicode-mcp 1.15.0

package/dist/tools/specialized/auto-fix-agent.tool.d.ts

@@ -0,0 +1,12 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ */
+import { UnifiedTool } from '../registry.js';
+export declare const autoFixAgentTool: UnifiedTool;
+//# sourceMappingURL=auto-fix-agent.tool.d.ts.map

package/dist/tools/specialized/auto-fix-agent.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix-agent.tool.d.ts","sourceRoot":"","sources":["../../../src/tools/specialized/auto-fix-agent.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AA4B7C,eAAO,MAAM,gBAAgB,EAAE,WAgI9B,CAAC"}

package/dist/tools/specialized/auto-fix-agent.tool.js

@@ -0,0 +1,154 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ */
+/**
+ * Auto-Fix Agent Tool
+ *
+ * Multi-agent code fixing using OpenAI Agents SDK.
+ * Uses applyPatchTool with WorkspaceEditor for reliable file modifications.
+ *
+ * @module tools/specialized/auto-fix-agent
+ */
+import { z } from 'zod';
+import { Agent, run, applyPatchTool } from '@openai/agents';
+import { createWorkspaceEditor } from '../../ai/workspace-editor.js';
+import { parseFiles } from '../../ai/index.js';
+import { getEnhancedContextString } from '../../utils/projectContext.enhanced.js';
+import { Logger } from '../../utils/logger.js';
+import { config } from '../../config/index.js';
+import { readFile } from 'node:fs/promises';
+const FOCUS_MAP = {
+    security: 'SECURITY: SQL injection, XSS, CSRF, auth bypass, hardcoded secrets',
+    performance: 'PERFORMANCE: N+1 queries, missing cache, inefficient loops, memory leaks',
+    quality: 'QUALITY: SOLID violations, code duplication, missing error handling, type safety',
+    all: 'ALL: Security + Performance + Quality + Best practices',
+};
+const schema = z.object({
+    files: z.string().describe('Files to fix (use @path/file.ts syntax)'),
+    focus: z.enum(['security', 'performance', 'quality', 'all']).default('all'),
+    severity: z
+        .enum(['critical', 'all'])
+        .default('critical')
+        .describe('critical = only urgent fixes'),
+    dryRun: z.boolean().default(false).describe('true = show changes without applying'),
+    approve: z.boolean().default(true).describe('Auto-approve all patches (set false for manual)'),
+});
+export const autoFixAgentTool = {
+    name: 'auto-fix-agent',
+    description: 'Multi-agent code fixing using OpenAI Agents SDK. Analyzes code and applies patches with diff-based editing.',
+    zodSchema: schema,
+    execute: async (args, onProgress) => {
+        const input = args;
+        const { files, focus = 'all', severity = 'critical', dryRun = false, approve = true } = input;
+        if (!files?.toString().trim()) {
+            throw new Error('Files required. Use @path/file.ts syntax.');
+        }
+        const filesStr = String(files);
+        onProgress?.(`Auto-fix agent (${focus}, ${dryRun ? 'dry-run' : 'apply'}): ${filesStr}`);
+        // Parse and read files
+        const parsedFiles = parseFiles(filesStr);
+        let fileContents = '';
+        for (const filePath of parsedFiles) {
+            try {
+                const content = await readFile(filePath, 'utf8');
+                fileContents += `\n### File: ${filePath}\n\`\`\`\n${content}\n\`\`\`\n`;
+            }
+            catch (error) {
+                fileContents += `\n### File: ${filePath}\nError reading file: ${error}\n`;
+            }
+        }
+        // Get model from config
+        const serverConfig = config.get('server');
+        const model = serverConfig?.primaryModel || 'gpt-4o';
+        // Create workspace editor for file operations
+        const editor = createWorkspaceEditor({
+            root: process.cwd(),
+            createBackups: true,
+        });
+        // Create the fixer agent with applyPatchTool
+        const fixerAgent = new Agent({
+            name: 'CodeFixer',
+            instructions: `${getEnhancedContextString()}
+
+You are an expert code analyzer and fixer. Your job is to analyze code, identify issues, and fix them.
+
+## Mode: ${dryRun ? 'DRY-RUN (describe what you would change, do NOT use tools)' : 'APPLY (use apply_patch tool to fix issues)'}
+
+## Focus: ${FOCUS_MAP[focus]}
+${severity === 'critical' ? '**CRITICAL ONLY** - Only fix issues requiring immediate attention.' : ''}
+
+## Code to Analyze:
+${fileContents}
+
+## Your Task:
+1. Analyze the code thoroughly for issues in the focus area
+2. For each issue found:
+   - Explain what the problem is
+   - Why it's a problem
+   - ${dryRun ? 'Describe the fix you would apply' : 'Use apply_patch tool to fix it'}
+3. ${dryRun ? 'Summarize all proposed changes' : 'Report what was fixed'}
+
+## Rules for Patches:
+- Make minimal, targeted changes
+- Preserve existing code style
+- Each patch should be atomic and safe
+- Use proper diff format for patches`,
+            model,
+            tools: dryRun
+                ? [] // No tools in dry-run mode
+                : [
+                    applyPatchTool({
+                        editor,
+                        needsApproval: !approve,
+                        onApproval: async (_ctx, approvalItem) => {
+                            if (approve) {
+                                return { approve: true };
+                            }
+                            const op = approvalItem.rawItem.type === 'apply_patch_call'
+                                ? approvalItem.rawItem
+                                    .operation
+                                : undefined;
+                            Logger.info(`auto-fix-agent: Patch requires approval: ${op?.type} ${op?.path}`);
+                            return { approve: true };
+                        },
+                    }),
+                ],
+        });
+        try {
+            onProgress?.('Running code fixer agent...');
+            // Run the agent
+            const result = await run(fixerAgent, `Analyze the code and ${dryRun ? 'describe fixes' : 'apply fixes'}. Focus: ${focus}, Severity: ${severity}`);
+            onProgress?.('Analysis and fixes complete.');
+            // Extract results
+            const output = result.finalOutput || 'No output from agent';
+            return JSON.stringify({
+                success: true,
+                mode: dryRun ? 'dry-run' : 'apply',
+                focus,
+                severity,
+                filesAnalyzed: parsedFiles.length,
+                model,
+                agentOutput: output,
+                message: dryRun
+                    ? 'Dry-run complete. No changes were made.'
+                    : 'Fixes applied using OpenAI Agents SDK.',
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            Logger.error(`auto-fix-agent: Error: ${message}`);
+            return JSON.stringify({
+                success: false,
+                error: message,
+                mode: dryRun ? 'dry-run' : 'apply',
+            });
+        }
+    },
+};
+//# sourceMappingURL=auto-fix-agent.tool.js.map

package/dist/tools/specialized/auto-fix-agent.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix-agent.tool.js","sourceRoot":"","sources":["../../../src/tools/specialized/auto-fix-agent.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,SAAS,GAA2B;IACxC,QAAQ,EAAE,oEAAoE;IAC9E,WAAW,EAAE,0EAA0E;IACvF,OAAO,EAAE,kFAAkF;IAC3F,GAAG,EAAE,wDAAwD;CAC9D,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACrE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3E,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;SACzB,OAAO,CAAC,UAAU,CAAC;SACnB,QAAQ,CAAC,8BAA8B,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACnF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CAC/F,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gBAAgB,GAAgB;IAC3C,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,6GAA6G;IAC/G,SAAS,EAAE,MAAM;IAEjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,IAAmC,CAAC;QAClD,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,QAAQ,GAAG,UAAU,EAAE,MAAM,GAAG,KAAK,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAE9F,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,UAAU,EAAE,CAAC,mBAAmB,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,QAAQ,EAAE,CAAC,CAAC;QAExF,uBAAuB;QACvB,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACjD,YAAY,IAAI,eAAe,QAAQ,aAAa,OAAO,YAAY,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,IAAI,eAAe,QAAQ,yBAAyB,KAAK,IAAI,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,YAAY,EAAE,YAAY,IAAI,QAAQ,CAAC;QAErD,8CAA8C;QAC9C,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;YACnB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QAEH,6CAA6C;QAC7C,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC;YAC3B,IAAI,EAAE,WAAW;YACjB,YAAY,EAAE,GAAG,wBAAwB,EAAE;;;;WAItC,MAAM,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,4CAA4C;;YAEnH,SAAS,CAAC,KAAK,CAAC;EAC1B,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,oEAAoE,CAAC,CAAC,CAAC,EAAE;;;EAGnG,YAAY;;;;;;;OAOP,MAAM,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,gCAAgC;KAChF,MAAM,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,uBAAuB;;;;;;qCAMnC;YAC/B,KAAK;YACL,KAAK,EAAE,MAAM;gBACX,CAAC,CAAC,EAAE,CAAC,2BAA2B;gBAChC,CAAC,CAAC;oBACE,cAAc,CAAC;wBACb,MAAM;wBACN,aAAa,EAAE,CAAC,OAAO;wBACvB,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;4BACvC,IAAI,OAAO,EAAE,CAAC;gCACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;4BAC3B,CAAC;4BACD,MAAM,EAAE,GACN,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB;gCAC9C,CAAC,CAAE,YAAY,CAAC,OAA4D;qCACvE,SAAS;gCACd,CAAC,CAAC,SAAS,CAAC;4BAChB,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;4BAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;wBAC3B,CAAC;qBACF,CAAC;iBACH;SACN,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,UAAU,EAAE,CAAC,6BAA6B,CAAC,CAAC;YAE5C,gBAAgB;YAChB,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,UAAU,EACV,wBAAwB,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,YAAY,KAAK,eAAe,QAAQ,EAAE,CAC5G,CAAC;YAEF,UAAU,EAAE,CAAC,8BAA8B,CAAC,CAAC;YAE7C,kBAAkB;YAClB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,IAAI,sBAAsB,CAAC;YAE5D,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBAClC,KAAK;gBACL,QAAQ;gBACR,aAAa,EAAE,WAAW,CAAC,MAAM;gBACjC,KAAK;gBACL,WAAW,EAAE,MAAM;gBACnB,OAAO,EAAE,MAAM;oBACb,CAAC,CAAC,yCAAyC;oBAC3C,CAAC,CAAC,wCAAwC;aAC7C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;YAElD,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/specialized/auto-fix.tool.d.ts

@@ -0,0 +1,20 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { UnifiedTool } from '../registry.js';
+export declare const autoFixTool: UnifiedTool;
+//# sourceMappingURL=auto-fix.tool.d.ts.map

package/dist/tools/specialized/auto-fix.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix.tool.d.ts","sourceRoot":"","sources":["../../../src/tools/specialized/auto-fix.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAkG7C,eAAO,MAAM,WAAW,EAAE,WAoLzB,CAAC"}

package/dist/tools/specialized/auto-fix.tool.js

@@ -0,0 +1,264 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { z } from 'zod';
+import { promises as fs } from 'fs';
+import * as path from 'path';
+import { executeAI, parseFiles } from '../../ai/index.js';
+import { getEnhancedContextString } from '../../utils/projectContext.enhanced.js';
+import { Logger } from '../../utils/logger.js';
+import { validatePath } from '../../utils/validation.js';
+const FOCUS_MAP = {
+    security: 'SECURITY: SQL injection, XSS, CSRF, auth bypass, hardcoded secrets',
+    performance: 'PERFORMANCE: N+1 queries, missing cache, inefficient loops, memory leaks',
+    quality: 'QUALITY: SOLID violations, code duplication, missing error handling, magic values',
+    all: 'ALL: Security + Performance + Quality + Best practices',
+};
+const schema = z.object({
+    files: z.string().describe('Files to fix (use @path/file.php syntax)'),
+    focus: z.enum(['security', 'performance', 'quality', 'all']).default('all'),
+    severity: z
+        .enum(['critical', 'all'])
+        .default('critical')
+        .describe('critical = only urgent fixes'),
+    dryRun: z.boolean().default(false).describe('true = show changes without applying'),
+});
+/**
+ * Parse AI response to extract structured edits
+ * Expects JSON block with array of edits
+ */
+function parseAIEdits(response) {
+    const edits = [];
+    // Try to find JSON block in response
+    const jsonMatch = response.match(/```json\s*([\s\S]*?)\s*```/);
+    if (jsonMatch) {
+        try {
+            const parsed = JSON.parse(jsonMatch[1]);
+            if (Array.isArray(parsed)) {
+                for (const edit of parsed) {
+                    if (edit.file && edit.search && edit.replace !== undefined) {
+                        edits.push({
+                            file: edit.file,
+                            search: edit.search,
+                            replace: edit.replace,
+                            description: edit.description || 'No description',
+                            severity: edit.severity || 'medium',
+                        });
+                    }
+                }
+            }
+        }
+        catch (e) {
+            Logger.warn(`auto-fix: Failed to parse JSON edits: ${e}`);
+        }
+    }
+    // Fallback: try to find raw JSON array
+    if (edits.length === 0) {
+        const rawJsonMatch = response.match(/\[\s*\{[\s\S]*?\}\s*\]/);
+        if (rawJsonMatch) {
+            try {
+                const parsed = JSON.parse(rawJsonMatch[0]);
+                if (Array.isArray(parsed)) {
+                    for (const edit of parsed) {
+                        if (edit.file && edit.search && edit.replace !== undefined) {
+                            edits.push({
+                                file: edit.file,
+                                search: edit.search,
+                                replace: edit.replace,
+                                description: edit.description || 'No description',
+                                severity: edit.severity || 'medium',
+                            });
+                        }
+                    }
+                }
+            }
+            catch (e) {
+                Logger.warn(`auto-fix: Failed to parse raw JSON: ${e}`);
+            }
+        }
+    }
+    return edits;
+}
+export const autoFixTool = {
+    name: 'auto-fix',
+    description: 'Automatic code fixes - security, performance, quality. Can apply changes or show dry-run.',
+    zodSchema: schema,
+    prompt: { description: 'Auto-fix code issues' },
+    execute: async (args, onProgress) => {
+        const { files, focus = 'all', severity = 'critical', dryRun } = args;
+        if (!files?.toString().trim())
+            throw new Error('Files required. Use @path/file.php syntax.');
+        const filesStr = String(files);
+        const isDryRun = Boolean(dryRun);
+        const agent = 'plan'; // Always use plan to get structured analysis
+        const prompt = `${getEnhancedContextString()}
+# Auto-Fix Request
+
+## Mode: ${isDryRun ? 'DRY-RUN (analysis only)' : 'AUTO-FIX (will apply changes)'}
+
+## Focus: ${FOCUS_MAP[focus]}
+${severity === 'critical' ? '**CRITICAL ONLY** - Fix only issues requiring immediate attention.' : ''}
+
+## Files
+${filesStr}
+
+## CRITICAL INSTRUCTIONS
+
+You MUST output fixes in the following JSON format. This is REQUIRED for the fixes to be applied.
+
+\`\`\`json
+[
+  {
+    "file": "path/to/file.ts",
+    "search": "exact code to find and replace",
+    "replace": "new code to replace it with",
+    "description": "Brief description of the fix",
+    "severity": "critical|high|medium|low"
+  }
+]
+\`\`\`
+
+## Rules for edits:
+1. The "search" field must be an EXACT match of existing code (including whitespace)
+2. Keep search strings short enough to be unique but include enough context
+3. The "replace" field should contain the fixed code
+4. Only include fixes that are necessary and safe
+5. Each fix should be atomic and self-contained
+
+## Output Format
+
+First, briefly describe what issues you found.
+Then output the JSON block with all fixes.
+Finally, summarize what was fixed.
+
+Begin analysis:`;
+        onProgress?.(`Auto-fix (${focus}, ${isDryRun ? 'dry-run' : 'apply'}): ${filesStr}`);
+        // Get AI analysis with structured edits
+        const aiResponse = await executeAI({ prompt, agent, files: parseFiles(filesStr), onProgress });
+        // Parse edits from AI response
+        const edits = parseAIEdits(aiResponse);
+        if (edits.length === 0) {
+            return JSON.stringify({
+                success: true,
+                mode: isDryRun ? 'dry-run' : 'apply',
+                message: 'No actionable fixes found or AI did not provide structured edits',
+                aiResponse: aiResponse.slice(0, 2000), // Include truncated AI response for context
+                editsFound: 0,
+                editsApplied: 0,
+            });
+        }
+        // In dry-run mode, just show what would be done
+        if (isDryRun) {
+            return JSON.stringify({
+                success: true,
+                mode: 'dry-run',
+                message: `Found ${edits.length} fixes (not applied)`,
+                edits: edits.map((e) => ({
+                    file: e.file,
+                    description: e.description,
+                    severity: e.severity,
+                    searchPreview: e.search.slice(0, 100) + (e.search.length > 100 ? '...' : ''),
+                    replacePreview: e.replace.slice(0, 100) + (e.replace.length > 100 ? '...' : ''),
+                })),
+                editsFound: edits.length,
+                editsApplied: 0,
+            });
+        }
+        // Group edits by file to apply atomically
+        const editsByFile = new Map();
+        for (const edit of edits) {
+            const filePath = path.isAbsolute(edit.file)
+                ? edit.file
+                : path.resolve(process.cwd(), edit.file);
+            // Validate path to prevent path traversal from AI-generated edits
+            try {
+                await validatePath(filePath, { allowSymlinks: false, operation: 'write', requireWithinProject: false });
+            }
+            catch {
+                Logger.warn(`auto-fix: Skipping unsafe path: ${filePath}`);
+                continue;
+            }
+            const existing = editsByFile.get(filePath) || [];
+            existing.push({ ...edit, file: filePath });
+            editsByFile.set(filePath, existing);
+        }
+        // Apply all edits to each file atomically
+        const results = [];
+        for (const [filePath, fileEdits] of editsByFile) {
+            try {
+                // Read file once
+                let content = await fs.readFile(filePath, 'utf8');
+                // Create backup before any changes
+                const backupPath = `${filePath}.bak`;
+                await fs.copyFile(filePath, backupPath);
+                // Apply all edits to this file
+                for (const edit of fileEdits) {
+                    if (content.includes(edit.search)) {
+                        content = content.replace(edit.search, edit.replace);
+                        results.push({
+                            file: edit.file,
+                            description: edit.description,
+                            severity: edit.severity,
+                            success: true,
+                            backup: backupPath,
+                        });
+                    }
+                    else {
+                        results.push({
+                            file: edit.file,
+                            description: edit.description,
+                            severity: edit.severity,
+                            success: false,
+                            error: 'Search string not found in file',
+                        });
+                    }
+                }
+                // Write file once with all changes
+                await fs.writeFile(filePath, content, 'utf8');
+                Logger.info(`auto-fix: Applied ${fileEdits.length} fixes to ${filePath}`);
+            }
+            catch (error) {
+                // Mark all edits for this file as failed
+                for (const edit of fileEdits) {
+                    results.push({
+                        file: edit.file,
+                        description: edit.description,
+                        severity: edit.severity,
+                        success: false,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
+            }
+        }
+        const successful = results.filter((r) => r.success);
+        const failed = results.filter((r) => !r.success);
+        return JSON.stringify({
+            success: failed.length === 0,
+            mode: 'apply',
+            message: `Applied ${successful.length}/${edits.length} fixes`,
+            results,
+            editsFound: edits.length,
+            editsApplied: successful.length,
+            editsFailed: failed.length,
+            summary: {
+                successful: successful.map((r) => `${r.file}: ${r.description}`),
+                failed: failed.map((r) => `${r.file}: ${r.error}`),
+            },
+        });
+    },
+};
+//# sourceMappingURL=auto-fix.tool.js.map

package/dist/tools/specialized/auto-fix.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix.tool.js","sourceRoot":"","sources":["../../../src/tools/specialized/auto-fix.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAkB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,MAAM,SAAS,GAA2B;IACxC,QAAQ,EAAE,oEAAoE;IAC9E,WAAW,EAAE,0EAA0E;IACvF,OAAO,EAAE,mFAAmF;IAC5F,GAAG,EAAE,wDAAwD;CAC9D,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3E,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;SACzB,OAAO,CAAC,UAAU,CAAC;SACnB,QAAQ,CAAC,8BAA8B,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CACpF,CAAC,CAAC;AAmBH;;;GAGG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,KAAK,GAAc,EAAE,CAAC;IAE5B,qCAAqC;IACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/D,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;oBAC1B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC3D,KAAK,CAAC,IAAI,CAAC;4BACT,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,gBAAgB;4BACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ;yBACpC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;wBAC1B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;4BAC3D,KAAK,CAAC,IAAI,CAAC;gCACT,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,MAAM,EAAE,IAAI,CAAC,MAAM;gCACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gCACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,gBAAgB;gCACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ;6BACpC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,2FAA2F;IAC7F,SAAS,EAAE,MAAM;IACjB,MAAM,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC/C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAClC,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,QAAQ,GAAG,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAE7F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAc,MAAM,CAAC,CAAC,6CAA6C;QAE9E,MAAM,MAAM,GAAG,GAAG,wBAAwB,EAAE;;;WAGrC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,+BAA+B;;YAErE,SAAS,CAAC,KAAe,CAAC;EACpC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,oEAAoE,CAAC,CAAC,CAAC,EAAE;;;EAGnG,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+BM,CAAC;QAEb,UAAU,EAAE,CAAC,aAAa,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,QAAQ,EAAE,CAAC,CAAC;QAEpF,wCAAwC;QACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAE/F,+BAA+B;QAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACpC,OAAO,EAAE,kEAAkE;gBAC3E,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,4CAA4C;gBACnF,UAAU,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;QACL,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,SAAS,KAAK,CAAC,MAAM,sBAAsB;gBACpD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACvB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF,CAAC,CAAC;gBACH,UAAU,EAAE,KAAK,CAAC,MAAM;gBACxB,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqB,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBACzC,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAE3C,kEAAkE;YAClE,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1G,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;gBAC3D,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3C,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,iBAAiB;gBACjB,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAElD,mCAAmC;gBACnC,MAAM,UAAU,GAAG,GAAG,QAAQ,MAAM,CAAC;gBACrC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAExC,+BAA+B;gBAC/B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;wBAClC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrD,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,OAAO,EAAE,IAAI;4BACb,MAAM,EAAE,UAAU;yBACnB,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,iCAAiC;yBACzC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,mCAAmC;gBACnC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,qBAAqB,SAAS,CAAC,MAAM,aAAa,QAAQ,EAAE,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,yCAAyC;gBACzC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,WAAW,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,QAAQ;YAC7D,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,OAAO,EAAE;gBACP,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAChE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;aACnD;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/tools/specialized/code-review.tool.d.ts

@@ -0,0 +1,20 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { UnifiedTool } from '../registry.js';
+export declare const codeReviewTool: UnifiedTool;
+//# sourceMappingURL=code-review.tool.d.ts.map

package/dist/tools/specialized/code-review.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-review.tool.d.ts","sourceRoot":"","sources":["../../../src/tools/specialized/code-review.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAqE7C,eAAO,MAAM,cAAc,EAAE,WAwE5B,CAAC"}

package/dist/tools/specialized/code-review.tool.js

@@ -0,0 +1,140 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { z } from 'zod';
+import { existsSync, readFileSync } from 'fs';
+import { executeAI, parseFiles } from '../../ai/index.js';
+import { getEnhancedContextString, getCurrentProjectRoot, } from '../../utils/projectContext.enhanced.js';
+import { detectLanguage, detectLanguageFromExtension } from '../../utils/languageDetection.js';
+import { recordSuggestion } from '../../context/feedback-loop.js';
+const FOCUS_PROMPTS = {
+    security: `**FOCUS: SECURITY** - SQL Injection, XSS, CSRF, auth bypass, hardcoded secrets, OWASP Top 10`,
+    performance: `**FOCUS: PERFORMANCE** - N+1 queries, missing cache, inefficient loops, memory leaks`,
+    quality: `**FOCUS: QUALITY** - SOLID violations, duplication, complex methods, missing error handling`,
+    all: `**COMPREHENSIVE** - Security + Performance + Quality + Best Practices`,
+};
+const schema = z.object({
+    files: z.string().describe('Files to review (use @path/file syntax)'),
+    focus: z.enum(['security', 'performance', 'quality', 'all']).default('all'),
+    severity: z.enum(['critical', 'all']).default('all').describe('critical = only urgent issues'),
+    concise: z.boolean().default(false).describe('Short descriptions, no verbose explanations'),
+    withDeps: z.boolean().default(false).describe('Analyze dependencies (imports, DI)'),
+    continueSession: z.boolean().default(false).describe('Continue last session'),
+});
+/**
+ * Extract the first file path from files string
+ */
+function extractFirstFile(filesStr) {
+    // Match @path/to/file.ext pattern
+    const match = filesStr.match(/@([^\s@]+)/);
+    if (match) {
+        return match[1];
+    }
+    // Try plain path
+    const parts = filesStr.trim().split(/\s+/);
+    return parts[0]?.replace('@', '') || null;
+}
+/**
+ * Detect language from files - uses extension first, then ML for content
+ */
+async function detectLanguageFromFiles(filesStr) {
+    const firstFile = extractFirstFile(filesStr);
+    if (!firstFile)
+        return 'text';
+    // Try extension-based detection first (fast)
+    const extResult = detectLanguageFromExtension(firstFile);
+    if (extResult) {
+        return extResult.syntaxHighlight;
+    }
+    // Try reading file content for ML detection
+    const projectRoot = getCurrentProjectRoot();
+    const fullPath = firstFile.startsWith('/') ? firstFile : `${projectRoot}/${firstFile}`;
+    if (existsSync(fullPath)) {
+        try {
+            const content = readFileSync(fullPath, 'utf-8').slice(0, 10000); // First 10KB
+            const result = await detectLanguage(firstFile, content);
+            return result.syntaxHighlight;
+        }
+        catch {
+            // Ignore read errors
+        }
+    }
+    return 'text';
+}
+export const codeReviewTool = {
+    name: 'code-review',
+    description: 'Security/performance/quality code review with optional dependency analysis',
+    zodSchema: schema,
+    prompt: { description: 'Code review for source files' },
+    execute: async (args, onProgress) => {
+        const { files, focus = 'all', severity = 'all', concise, withDeps, continueSession } = args;
+        if (!files?.toString().trim())
+            throw new Error('Files required. Use @path/file syntax.');
+        const filesStr = String(files);
+        // Auto-detect language using ML or extension
+        const codeBlockLang = await detectLanguageFromFiles(filesStr);
+        const prompt = `${getEnhancedContextString()}
+# Code Review Request
+
+${FOCUS_PROMPTS[focus]}
+${severity === 'critical' ? '\n**CRITICAL ONLY** - Report only issues requiring immediate fix.' : ''}
+${concise ? '\n**CONCISE MODE** - Short descriptions, direct fixes only.' : ''}
+${withDeps ? '\n**WITH DEPENDENCIES** - Analyze imported modules and their usage.' : ''}
+
+## Files
+${filesStr}
+
+## Output Format
+### [SEVERITY] Issue Title
+**File:** \`path:LINE\`
+**Category:** Security|Performance|Quality
+**Problem:** Brief description
+**Fix:**
+\`\`\`${codeBlockLang}
+// suggested fix
+\`\`\`
+
+---
+
+## Summary
+- Critical: X | Warning: Y | Info: Z
+
+## Priority Actions
+1. [action 1]
+2. [action 2]
+
+Begin review:`;
+        onProgress?.(`Code review (${focus}) for: ${filesStr}`);
+        const result = await executeAI({
+            prompt,
+            agent: 'plan',
+            files: parseFiles(filesStr),
+            continueSession: Boolean(continueSession),
+            onProgress,
+        });
+        // Record suggestions for feedback tracking
+        const parsedFiles = parseFiles(filesStr);
+        for (const file of parsedFiles) {
+            recordSuggestion('code-review', file, 'review', `Code review (${focus}) - ${severity === 'critical' ? 'critical issues' : 'all issues'}`, result.slice(0, 500) // First 500 chars as snippet
+            ).catch(() => {
+                /* ignore errors */
+            });
+        }
+        return result;
+    },
+};
+//# sourceMappingURL=code-review.tool.js.map

package/dist/tools/specialized/code-review.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-review.tool.js","sourceRoot":"","sources":["../../../src/tools/specialized/code-review.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,MAAM,aAAa,GAA2B;IAC5C,QAAQ,EAAE,8FAA8F;IACxG,WAAW,EAAE,sFAAsF;IACnG,OAAO,EAAE,6FAA6F;IACtG,GAAG,EAAE,uEAAuE;CAC7E,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACrE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3E,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC9F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3F,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACnF,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CAC9E,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,kCAAkC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,iBAAiB;IACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,uBAAuB,CAAC,QAAgB;IACrD,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC;IAE9B,6CAA6C;IAC7C,MAAM,SAAS,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,eAAe,CAAC;IACnC,CAAC;IAED,4CAA4C;IAC5C,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;IAEvF,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa;YAC9E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,eAAe,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,4EAA4E;IACzF,SAAS,EAAE,MAAM;IACjB,MAAM,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACvD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAClC,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;QAC5F,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/B,6CAA6C;QAC7C,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,GAAG,wBAAwB,EAAE;;;EAG9C,aAAa,CAAC,KAAe,CAAC;EAC9B,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,EAAE;EAClG,OAAO,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,EAAE;EAC5E,QAAQ,CAAC,CAAC,CAAC,qEAAqE,CAAC,CAAC,CAAC,EAAE;;;EAGrF,QAAQ;;;;;;;;QAQF,aAAa;;;;;;;;;;;;;cAaP,CAAC;QAEX,UAAU,EAAE,CAAC,gBAAgB,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,MAAM;YACN,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC;YAC3B,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC;YACzC,UAAU;SACX,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,gBAAgB,CACd,aAAa,EACb,IAAI,EACJ,QAAQ,EACR,gBAAgB,KAAK,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,EACxF,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,6BAA6B;aACnD,CAAC,KAAK,CAAC,GAAG,EAAE;gBACX,mBAAmB;YACrB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC"}