kemdicode-mcp 1.15.0

package/dist/tools/system/shell-exec.tool.js

@@ -0,0 +1,293 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Shell Exec Tool
+ *
+ * Executes shell commands safely with timeout support,
+ * streaming output, and comprehensive security validation.
+ *
+ * @module tools/system/shell-exec
+ */
+import { z } from 'zod';
+import { existsSync } from 'fs';
+import { spawn } from 'child_process';
+import { FileNotFoundError, DangerousOperationError, TimeoutError, CommandError, } from '../registry.js';
+import { Logger } from '../../utils/logger.js';
+import { validatePath, sanitizeEnvVars, ValidationError, checkRateLimit, } from '../../utils/validation.js';
+/**
+ * List of dangerous commands that should be blocked
+ */
+const DANGEROUS_PATTERNS = [
+    /^rm\s+-rf\s+\/(?!\w)/, // rm -rf /
+    /^rm\s+-rf\s+~/, // rm -rf ~
+    /^dd\s+if=.+of=\/dev\/(?:sd|hd|nvme)/, // dd to disk
+    /^mkfs\./, // Format filesystem
+    /^:?\(\)\s*\{\s*:?\|:?\s*&\s*\}\s*;?\s*:/, // Fork bomb
+    />\s*\/dev\/sd[a-z]/, // Write to raw disk
+    />\s*\/etc\/passwd/, // Overwrite passwd
+    />\s*\/etc\/shadow/, // Overwrite shadow
+    /chmod\s+-R\s+777\s+\//, // chmod 777 /
+    /chown\s+-R\s+.+\s+\/(?!\w)/, // chown /
+    // Additional security patterns for command injection and shells
+    /curl\s+.*\|\s*(?:ba)?sh/, // Pipe curl to shell
+    /wget\s+.*\|\s*(?:ba)?sh/, // Pipe wget to shell
+    /curl\s+.*\|\s*python/, // Pipe curl to python
+    /wget\s+.*\|\s*python/, // Pipe wget to python
+    />\s*\/boot\//, // Write to boot
+    />\s*\/usr\//, // Write to system directories
+    />\s*\/bin\//, // Write to binaries
+    />\s*\/sbin\//, // Write to system binaries
+    />\s*\/lib\//, // Write to libraries
+    />\s*\/var\/log\//, // Write to logs
+    /eval\s*\(?\s*\$/, // Eval with variable
+    /\$\([^)]+\)\s*\|\s*sh/, // Command substitution piped to shell
+    /`[^`]+`\s*\|\s*sh/, // Backtick command piped to shell
+    /base64\s+-d.*\|\s*(?:ba)?sh/, // Base64 decode piped to shell
+    /nc\s+.+\s+-e\s+(?:\/bin\/)?(?:ba)?sh/, // Netcat reverse shell
+    /python\s+-c\s+['"]import\s+socket/, // Python reverse shell
+    /perl\s+-e\s+['"]use\s+Socket/, // Perl reverse shell
+    // eslint-disable-next-line no-control-regex
+    /\x00/, // Null byte injection
+];
+/**
+ * Suspicious patterns that warrant a warning but not blocking
+ */
+const SUSPICIOUS_PATTERNS = [
+    /curl\s+.*-o\s+.*&&/, // Download and execute pattern
+    /wget\s+.*-O\s+.*&&/, // Download and execute pattern
+    /chmod\s+\+x\s+.*&&/, // Make executable and run
+    /sudo\s+/, // Sudo usage
+    /su\s+-/, // Switch user
+    /ssh\s+/, // SSH connection
+    /scp\s+/, // SCP transfer
+];
+/**
+ * Commands that need confirmation
+ */
+const REQUIRES_CONFIRMATION = [
+    /^rm\s+-rf/,
+    /^rm\s+-r/,
+    /^git\s+push\s+.*--force/,
+    /^git\s+reset\s+--hard/,
+    /^npm\s+publish/,
+    /^docker\s+rm/,
+    /^docker\s+system\s+prune/,
+];
+const schema = z.object({
+    command: z.string().min(1).describe('Shell command to execute'),
+    cwd: z.string().optional().describe('Working directory (defaults to current directory)'),
+    timeout: z.number().default(60000).describe('Timeout in milliseconds (default: 60 seconds)'),
+    shell: z
+        .enum(['bash', 'sh', 'zsh', 'fish', 'powershell'])
+        .default('bash')
+        .describe('Shell to use'),
+    env: z.record(z.string(), z.string()).optional().describe('Additional environment variables'),
+    allowDangerous: z.boolean().default(false).describe('Allow potentially dangerous commands'),
+});
+/**
+ * Check if command is dangerous
+ */
+function isDangerous(command) {
+    return DANGEROUS_PATTERNS.some((pattern) => pattern.test(command));
+}
+/**
+ * Check if command requires confirmation
+ */
+function requiresConfirmation(command) {
+    return REQUIRES_CONFIRMATION.some((pattern) => pattern.test(command));
+}
+/**
+ * Check if command is suspicious (warrant a warning)
+ */
+function isSuspicious(command) {
+    return SUSPICIOUS_PATTERNS.some((pattern) => pattern.test(command));
+}
+/**
+ * Log security-relevant events
+ */
+function logSecurityEvent(eventType, details) {
+    Logger.warn(`SECURITY [shell-exec]: ${eventType}`, details);
+}
+/**
+ * Execute shell command
+ */
+async function executeShellCommand(command, cwd, timeout, shell, envVars, onProgress) {
+    return new Promise((resolve, reject) => {
+        const start = Date.now();
+        // Get shell command
+        const shellCmd = shell === 'powershell' ? 'powershell' : shell;
+        const shellArgs = shell === 'powershell' ? ['-Command', command] : ['-c', command];
+        Logger.debug(`Executing: ${shellCmd} ${shellArgs.join(' ')} in ${cwd}`);
+        onProgress?.(`$ ${command}\n\n`);
+        const proc = spawn(shellCmd, shellArgs, {
+            cwd,
+            shell: false,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: {
+                ...process.env,
+                ...envVars,
+            },
+        });
+        let stdout = '';
+        let stderr = '';
+        let done = false;
+        const timer = setTimeout(() => {
+            if (done)
+                return;
+            done = true;
+            try {
+                proc.kill('SIGTERM');
+                setTimeout(() => {
+                    try {
+                        proc.kill('SIGKILL');
+                    }
+                    catch {
+                        // Process may have already exited
+                    }
+                }, 5000);
+            }
+            catch {
+                // Process may have already exited
+            }
+            const output = stdout.trim();
+            if (output) {
+                // Return partial output with timeout notice
+                resolve(output + `\n\n[TIMEOUT: Command exceeded ${timeout / 1000}s limit]`);
+            }
+            else {
+                // No output captured, throw TimeoutError
+                reject(new TimeoutError(command, timeout, undefined, { cwd, shell }));
+            }
+        }, timeout);
+        proc.stdout.on('data', (data) => {
+            const chunk = data.toString();
+            stdout += chunk;
+            onProgress?.(chunk);
+        });
+        proc.stderr.on('data', (data) => {
+            const chunk = data.toString();
+            stderr += chunk;
+            onProgress?.(chunk);
+        });
+        proc.on('error', (err) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            reject(new CommandError(command, `Failed to execute command: ${err.message}`, undefined, undefined, { cwd, shell }));
+        });
+        proc.on('close', (code) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            const duration = ((Date.now() - start) / 1000).toFixed(2);
+            const output = stdout + (stderr ? `\nSTDERR:\n${stderr}` : '');
+            if (code === 0) {
+                resolve(output.trim() + `\n\n[Exit: 0, Duration: ${duration}s]`);
+            }
+            else {
+                resolve(output.trim() + `\n\n[Exit: ${code}, Duration: ${duration}s]`);
+            }
+        });
+    });
+}
+export const shellExecTool = {
+    name: 'shell-exec',
+    description: 'Execute shell command safely with timeout and streaming output',
+    zodSchema: schema,
+    execute: async (args, onProgress) => {
+        const command = String(args.command);
+        const inputCwd = args.cwd || process.cwd();
+        const timeout = args.timeout || 60000;
+        const shell = args.shell || 'bash';
+        const envVars = args.env;
+        const allowDangerous = Boolean(args.allowDangerous);
+        // Rate limit check for shell commands (stricter limit)
+        if (!checkRateLimit('shell-exec', { maxRequests: 30, windowMs: 60000 })) {
+            logSecurityEvent('RATE_LIMIT_EXCEEDED', { command: command.substring(0, 100) });
+            throw new Error('Rate limit exceeded for shell-exec operations. Please wait before executing more commands.');
+        }
+        // Validate and sanitize the working directory
+        let validatedCwd;
+        try {
+            validatedCwd = await validatePath(inputCwd, {
+                allowSymlinks: true, // Allow symlinks for cwd since it's a directory
+                requireWithinProject: false, // Allow execution in any accessible directory
+                allowReadFromBlocked: true,
+                operation: 'execute',
+            });
+        }
+        catch (validationError) {
+            if (validationError instanceof ValidationError) {
+                logSecurityEvent('CWD_VALIDATION_FAILED', {
+                    cwd: inputCwd,
+                    error: validationError.message,
+                });
+                throw new FileNotFoundError(inputCwd, 'directory', {
+                    operation: 'shell-exec',
+                    error: validationError.message,
+                });
+            }
+            throw validationError;
+        }
+        // Validate CWD exists
+        if (!existsSync(validatedCwd)) {
+            throw new FileNotFoundError(validatedCwd, 'directory', { operation: 'shell-exec' });
+        }
+        // Sanitize environment variables
+        const sanitizedEnvVars = sanitizeEnvVars(envVars);
+        if (envVars &&
+            sanitizedEnvVars &&
+            Object.keys(envVars).length !== Object.keys(sanitizedEnvVars).length) {
+            logSecurityEvent('ENV_VARS_SANITIZED', {
+                originalCount: Object.keys(envVars).length,
+                sanitizedCount: Object.keys(sanitizedEnvVars).length,
+            });
+            onProgress?.(`NOTE: Some environment variables were filtered for security.\n\n`);
+        }
+        // Check for dangerous commands
+        if (isDangerous(command)) {
+            logSecurityEvent('DANGEROUS_COMMAND_ATTEMPT', {
+                command: command.substring(0, 200),
+                cwd: validatedCwd,
+                allowDangerous,
+            });
+            if (!allowDangerous) {
+                throw new DangerousOperationError(command, 'This command is potentially dangerous and could cause system damage', { cwd: validatedCwd, shell });
+            }
+            onProgress?.(`WARNING: Running potentially dangerous command...\n\n`);
+        }
+        // Check for suspicious commands
+        if (isSuspicious(command)) {
+            logSecurityEvent('SUSPICIOUS_COMMAND', {
+                command: command.substring(0, 200),
+                cwd: validatedCwd,
+            });
+            onProgress?.(`CAUTION: This command pattern is flagged as potentially risky.\n\n`);
+        }
+        // Warn about commands that typically require confirmation
+        if (requiresConfirmation(command) && !allowDangerous) {
+            onProgress?.(`NOTE: This command typically requires confirmation in interactive mode.\n\n`);
+        }
+        // Log the execution for audit trail
+        Logger.debug(`shell-exec: executing command in ${validatedCwd}`);
+        return executeShellCommand(command, validatedCwd, timeout, shell, sanitizedEnvVars, onProgress);
+    },
+};
+//# sourceMappingURL=shell-exec.tool.js.map

package/dist/tools/system/shell-exec.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-exec.tool.js","sourceRoot":"","sources":["../../../src/tools/system/shell-exec.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAEL,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACZ,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,GACf,MAAM,2BAA2B,CAAC;AAEnC;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,sBAAsB,EAAE,WAAW;IACnC,eAAe,EAAE,WAAW;IAC5B,qCAAqC,EAAE,aAAa;IACpD,SAAS,EAAE,oBAAoB;IAC/B,yCAAyC,EAAE,YAAY;IACvD,oBAAoB,EAAE,oBAAoB;IAC1C,mBAAmB,EAAE,mBAAmB;IACxC,mBAAmB,EAAE,mBAAmB;IACxC,uBAAuB,EAAE,cAAc;IACvC,4BAA4B,EAAE,UAAU;IACxC,gEAAgE;IAChE,yBAAyB,EAAE,qBAAqB;IAChD,yBAAyB,EAAE,qBAAqB;IAChD,sBAAsB,EAAE,sBAAsB;IAC9C,sBAAsB,EAAE,sBAAsB;IAC9C,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,8BAA8B;IAC7C,aAAa,EAAE,oBAAoB;IACnC,cAAc,EAAE,2BAA2B;IAC3C,aAAa,EAAE,qBAAqB;IACpC,kBAAkB,EAAE,gBAAgB;IACpC,iBAAiB,EAAE,qBAAqB;IACxC,uBAAuB,EAAE,sCAAsC;IAC/D,mBAAmB,EAAE,kCAAkC;IACvD,6BAA6B,EAAE,+BAA+B;IAC9D,sCAAsC,EAAE,uBAAuB;IAC/D,mCAAmC,EAAE,uBAAuB;IAC5D,8BAA8B,EAAE,qBAAqB;IACrD,4CAA4C;IAC5C,MAAM,EAAE,sBAAsB;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAG;IAC1B,oBAAoB,EAAE,+BAA+B;IACrD,oBAAoB,EAAE,+BAA+B;IACrD,oBAAoB,EAAE,0BAA0B;IAChD,SAAS,EAAE,aAAa;IACxB,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,UAAU;IACV,yBAAyB;IACzB,uBAAuB;IACvB,gBAAgB;IAChB,cAAc;IACd,0BAA0B;CAC3B,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC/D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IACxF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC5F,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;SACjD,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,cAAc,CAAC;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC7F,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CAC5F,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,SAAiB,EAAE,OAAgC;IAC3E,MAAM,CAAC,IAAI,CAAC,0BAA0B,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAAe,EACf,GAAW,EACX,OAAe,EACf,KAAa,EACb,OAA2C,EAC3C,UAAqC;IAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,oBAAoB;QACpB,MAAM,QAAQ,GAAG,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/D,MAAM,SAAS,GAAG,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEnF,MAAM,CAAC,KAAK,CAAC,cAAc,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QACxE,UAAU,EAAE,CAAC,KAAK,OAAO,MAAM,CAAC,CAAC;QAEjC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE;YACtC,GAAG;YACH,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,OAAO;aACX;SACF,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC;QAEjB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC;wBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACvB,CAAC;oBAAC,MAAM,CAAC;wBACP,kCAAkC;oBACpC,CAAC;gBACH,CAAC,EAAE,IAAI,CAAC,CAAC;YACX,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,MAAM,EAAE,CAAC;gBACX,4CAA4C;gBAC5C,OAAO,CAAC,MAAM,GAAG,kCAAkC,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,yCAAyC;gBACzC,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC;YAChB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC;YAChB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CACJ,IAAI,YAAY,CACd,OAAO,EACP,8BAA8B,GAAG,CAAC,OAAO,EAAE,EAC3C,SAAS,EACT,SAAS,EACT,EAAE,GAAG,EAAE,KAAK,EAAE,CACf,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAE/D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,2BAA2B,QAAQ,IAAI,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,cAAc,IAAI,eAAe,QAAQ,IAAI,CAAC,CAAC;YACzE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,gEAAgE;IAC7E,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAI,IAAI,CAAC,GAAc,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,MAAM,OAAO,GAAI,IAAI,CAAC,OAAkB,IAAI,KAAK,CAAC;QAClD,MAAM,KAAK,GAAI,IAAI,CAAC,KAAgB,IAAI,MAAM,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAyC,CAAC;QAC/D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEpD,uDAAuD;QACvD,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxE,gBAAgB,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE;gBAC1C,aAAa,EAAE,IAAI,EAAE,gDAAgD;gBACrE,oBAAoB,EAAE,KAAK,EAAE,8CAA8C;gBAC3E,oBAAoB,EAAE,IAAI;gBAC1B,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,IAAI,eAAe,YAAY,eAAe,EAAE,CAAC;gBAC/C,gBAAgB,CAAC,uBAAuB,EAAE;oBACxC,GAAG,EAAE,QAAQ;oBACb,KAAK,EAAE,eAAe,CAAC,OAAO;iBAC/B,CAAC,CAAC;gBACH,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE;oBACjD,SAAS,EAAE,YAAY;oBACvB,KAAK,EAAE,eAAe,CAAC,OAAO;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,eAAe,CAAC;QACxB,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,iBAAiB,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,iCAAiC;QACjC,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAClD,IACE,OAAO;YACP,gBAAgB;YAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,EACpE,CAAC;YACD,gBAAgB,CAAC,oBAAoB,EAAE;gBACrC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;gBAC1C,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM;aACrD,CAAC,CAAC;YACH,UAAU,EAAE,CAAC,kEAAkE,CAAC,CAAC;QACnF,CAAC;QAED,+BAA+B;QAC/B,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,gBAAgB,CAAC,2BAA2B,EAAE;gBAC5C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,GAAG,EAAE,YAAY;gBACjB,cAAc;aACf,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,uBAAuB,CAC/B,OAAO,EACP,qEAAqE,EACrE,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAC7B,CAAC;YACJ,CAAC;YACD,UAAU,EAAE,CAAC,uDAAuD,CAAC,CAAC;QACxE,CAAC;QAED,gCAAgC;QAChC,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,gBAAgB,CAAC,oBAAoB,EAAE;gBACrC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,GAAG,EAAE,YAAY;aAClB,CAAC,CAAC;YACH,UAAU,EAAE,CAAC,oEAAoE,CAAC,CAAC;QACrF,CAAC;QAED,0DAA0D;QAC1D,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,UAAU,EAAE,CAAC,6EAA6E,CAAC,CAAC;QAC9F,CAAC;QAED,oCAAoC;QACpC,MAAM,CAAC,KAAK,CAAC,oCAAoC,YAAY,EAAE,CAAC,CAAC;QAEjE,OAAO,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;IAClG,CAAC;CACF,CAAC"}

package/dist/tools/timeout-test.tool.d.ts

@@ -0,0 +1,20 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { UnifiedTool } from './registry.js';
+export declare const timeoutTestTool: UnifiedTool;
+//# sourceMappingURL=timeout-test.tool.d.ts.map

package/dist/tools/timeout-test.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout-test.tool.d.ts","sourceRoot":"","sources":["../../src/tools/timeout-test.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAM5C,eAAO,MAAM,eAAe,EAAE,WA2B7B,CAAC"}

package/dist/tools/timeout-test.tool.js

@@ -0,0 +1,46 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { z } from 'zod';
+const timeoutTestArgsSchema = z.object({
+    duration: z.number().min(10).describe('Duration in milliseconds (minimum 10ms)'),
+});
+export const timeoutTestTool = {
+    name: 'timeout-test',
+    description: 'Test timeout prevention by running for a specified duration',
+    zodSchema: timeoutTestArgsSchema,
+    prompt: { description: 'Test timeout prevention system' },
+    execute: async (args) => {
+        const duration = args.duration;
+        const steps = Math.ceil(duration / 5000); // Progress every 5 seconds
+        const stepDuration = duration / steps;
+        const startTime = Date.now();
+        const results = [];
+        results.push(`Starting timeout test for ${duration}ms (${duration / 1000}s)`);
+        for (let i = 1; i <= steps; i++) {
+            await new Promise((resolve) => setTimeout(resolve, stepDuration));
+            const elapsed = Date.now() - startTime;
+            results.push(`Step ${i}/${steps} completed - Elapsed: ${Math.round(elapsed / 1000)}s`);
+        }
+        const totalElapsed = Date.now() - startTime;
+        results.push(`\nTimeout test completed successfully!`);
+        results.push(`Target duration: ${duration}ms`);
+        results.push(`Actual duration: ${totalElapsed}ms`);
+        return results.join('\n');
+    },
+};
+//# sourceMappingURL=timeout-test.tool.js.map

package/dist/tools/timeout-test.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout-test.tool.js","sourceRoot":"","sources":["../../src/tools/timeout-test.tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAgB;IAC1C,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,6DAA6D;IAC1E,SAAS,EAAE,qBAAqB;IAChC,MAAM,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE;IACzD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAkB,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,2BAA2B;QACrE,MAAM,YAAY,GAAG,QAAQ,GAAG,KAAK,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,6BAA6B,QAAQ,OAAO,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;QAE9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,yBAAyB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,oBAAoB,QAAQ,IAAI,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,oBAAoB,YAAY,IAAI,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF,CAAC"}

package/dist/tree-sitter/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Tree-sitter Module
+ *
+ * Provides AST-based code analysis using tree-sitter parsers.
+ *
+ * @module tree-sitter
+ */
+export * from './types.js';
+export * from './parser-manager.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tree-sitter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tree-sitter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/tree-sitter/index.js

@@ -0,0 +1,27 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Tree-sitter Module
+ *
+ * Provides AST-based code analysis using tree-sitter parsers.
+ *
+ * @module tree-sitter
+ */
+export * from './types.js';
+export * from './parser-manager.js';
+//# sourceMappingURL=index.js.map

package/dist/tree-sitter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tree-sitter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/tree-sitter/parser-manager.d.ts

@@ -0,0 +1,83 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Tree-sitter Parser Manager
+ *
+ * Manages tree-sitter parser instances for multiple languages.
+ * Uses web-tree-sitter (WASM) for cross-platform compatibility.
+ *
+ * @module tree-sitter/parser-manager
+ */
+import { Language, type Tree } from 'web-tree-sitter';
+import { TreeSitterLanguage, type ParsedSymbol, type SymbolType } from './types.js';
+/**
+ * Initialize the tree-sitter parser
+ */
+export declare function initParser(): Promise<void>;
+/**
+ * Load a language grammar
+ */
+export declare function loadLanguage(language: TreeSitterLanguage): Promise<Language>;
+export declare function parseCode(code: string, language: TreeSitterLanguage): Promise<Tree>;
+/**
+ * Parse a file
+ */
+export declare function parseFile(filePath: string): Promise<{
+    tree: Tree;
+    language: TreeSitterLanguage;
+}>;
+/**
+ * Find all symbols in a tree
+ */
+export declare function findSymbols(tree: Tree, language: TreeSitterLanguage, types?: SymbolType[]): ParsedSymbol[];
+/**
+ * Find a symbol by name
+ */
+export declare function findSymbolByName(tree: Tree, language: TreeSitterLanguage, name: string, type?: SymbolType): ParsedSymbol | null;
+/**
+ * Find all references to a name in the tree
+ */
+export declare function findReferences(tree: Tree, name: string): Array<{
+    line: number;
+    column: number;
+    context: string;
+}>;
+/**
+ * Find the block containing a position
+ */
+export declare function findBlockAtPosition(tree: Tree, line: number, column: number): {
+    startLine: number;
+    endLine: number;
+    type: string;
+} | null;
+/**
+ * Find the end of a symbol's block
+ */
+export declare function findSymbolBlockEnd(tree: Tree, language: TreeSitterLanguage, symbolName: string): number | null;
+/**
+ * Get parser status
+ */
+export declare function getParserStatus(): {
+    initialized: boolean;
+    loadedLanguages: TreeSitterLanguage[];
+};
+/**
+ * Cleanup parser resources
+ */
+export declare function cleanup(): void;
+//# sourceMappingURL=parser-manager.d.ts.map

package/dist/tree-sitter/parser-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser-manager.d.ts","sourceRoot":"","sources":["../../src/tree-sitter/parser-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;GAOG;AAEH,OAAO,EAAU,QAAQ,EAAE,KAAK,IAAI,EAAmB,MAAM,iBAAiB,CAAC;AAO/E,OAAO,EACL,kBAAkB,EAGlB,KAAK,YAAY,EACjB,KAAK,UAAU,EAEhB,MAAM,YAAY,CAAC;AAqEpB;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAYhD;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwBlF;AAQD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAezF;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAUvD;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,CAAC,EAAE,UAAU,EAAE,GACnB,YAAY,EAAE,CAmChB;AAmFD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,UAAU,GAChB,YAAY,GAAG,IAAI,CAGrB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,MAAM,GACX,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAoC1D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAsD7D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,kBAAkB,EAC5B,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAwDf;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI;IACjC,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,kBAAkB,EAAE,CAAC;CACvC,CAKA;AAED;;GAEG;AACH,wBAAgB,OAAO,IAAI,IAAI,CAK9B"}