maestro-flow 0.1.0

package/dist/tools/write-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.js","sourceRoot":"","sources":["../../src/tools/write-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAc,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAc,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAClG,CAAC,CAAC;AAUH,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI,SAAS,MAAM,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA6B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,QAAwB;IACxF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,oDAAoD,QAAQ,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,OAAO,qDAAqD,aAAa,aAAa,KAAK,CAAC,IAAI,IAAI,CAAC;QACvG,CAAC;QAED,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO,wEAAwE,aAAa,WAAW,WAAW,IAAI,CAAC;QACzH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,6BAA8B,KAAe,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAe;IAChC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE;;;+DAGgD;IAC7D,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yCAAyC;aACvD;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,8BAA8B;aAC5C;YACD,iBAAiB,EAAE;gBACjB,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,gEAAgE;gBAC7E,OAAO,EAAE,IAAI;aACd;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,oEAAoE;gBACjF,OAAO,EAAE,KAAK;aACf;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+BAA+B;gBAC5C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC;aACtE;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;KAC9B;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAA+B;IAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,EACJ,IAAI,EAAE,QAAQ,EACd,OAAO,EACP,iBAAiB,EACjB,MAAM,EACN,QAAQ,GACT,GAAG,MAAM,CAAC,IAAI,CAAC;IAEhB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAE5C,IAAI,iBAAiB,EAAE,CAAC;QACtB,SAAS,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,oCAAoC,OAAO,CAAC,YAAY,CAAC,EAAE;SACnE,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEnD,MAAM,iBAAiB,GAAG,eAAe,CAAC,YAAY,EAAE,KAAK,EAAE,QAA0B,CAAC,CAAC;QAC3F,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,iBAAiB;aACzB,CAAC;QACJ,CAAC;QAED,IAAI,OAAe,CAAC;QACpB,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,UAAU;gBAClB,CAAC,CAAC,cAAc,KAAK,cAAc,QAAQ,CAAC,UAAU,CAAC,cAAc;gBACrE,CAAC,CAAC,cAAc,KAAK,eAAe,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,YAAY,KAAK,eAAe,CAAC;QAC7C,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE;gBACN,IAAI,EAAE,YAAY;gBAClB,KAAK;gBACL,OAAO;aACR;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,yBAA0B,KAAe,CAAC,OAAO,EAAE;SAC3D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,47 @@
+export interface MaestroConfig {
+    version: string;
+    extensions: ExtensionConfig[];
+    mcp: McpConfig;
+    workflows: WorkflowConfig;
+}
+export interface ExtensionConfig {
+    name: string;
+    enabled: boolean;
+    path: string;
+    config?: Record<string, unknown>;
+}
+export interface McpConfig {
+    port: number;
+    host: string;
+    enabledTools: string[];
+}
+export interface WorkflowConfig {
+    templatesDir: string;
+    workflowsDir: string;
+}
+export interface Tool {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    handler: (input: Record<string, unknown>) => Promise<ToolResult>;
+}
+export interface ToolResult {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    isError?: boolean;
+}
+export interface Extension {
+    name: string;
+    version: string;
+    tools?: Tool[];
+    activate: (ctx: ExtensionContext) => Promise<void>;
+    deactivate?: () => Promise<void>;
+}
+export interface ExtensionContext {
+    registerTool: (tool: Tool) => void;
+    config: Record<string, unknown>;
+    log: (msg: string) => void;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,GAAG,EAAE,SAAS,CAAC;IACf,SAAS,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,QAAQ,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/dist/types/tool-schema.d.ts

@@ -0,0 +1,37 @@
+/**
+ * CCW-style Tool Schema & Result types
+ *
+ * Used by ported CCW tools that follow the { schema, handler } export pattern.
+ * The adapter function converts CCW ToolResult → maestro ToolResult.
+ */
+export interface ToolSchema {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: 'object';
+        properties: Record<string, unknown>;
+        required?: string[];
+    };
+}
+export interface CcwToolResult<T = unknown> {
+    success: boolean;
+    result?: T;
+    error?: string;
+}
+export type CcwToolHandler<TParams = Record<string, unknown>, TResult = unknown> = (params: TParams) => Promise<CcwToolResult<TResult>>;
+export interface CcwToolRegistration<TParams = Record<string, unknown>> {
+    schema: ToolSchema;
+    handler: CcwToolHandler<TParams>;
+}
+export interface McpToolResult {
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    isError?: boolean;
+}
+/**
+ * Convert CCW-style ToolResult to maestro MCP ToolResult
+ */
+export declare function ccwResultToMcp(ccwResult: CcwToolResult): McpToolResult;
+//# sourceMappingURL=tool-schema.d.ts.map

package/dist/types/tool-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-schema.d.ts","sourceRoot":"","sources":["../../src/types/tool-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAGD,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAGD,MAAM,MAAM,cAAc,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,IAC7E,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;AAGvD,MAAM,WAAW,mBAAmB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACpE,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;CAClC;AAGD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,aAAa,GAAG,aAAa,CAYtE"}

package/dist/types/tool-schema.js

@@ -0,0 +1,24 @@
+/**
+ * CCW-style Tool Schema & Result types
+ *
+ * Used by ported CCW tools that follow the { schema, handler } export pattern.
+ * The adapter function converts CCW ToolResult → maestro ToolResult.
+ */
+/**
+ * Convert CCW-style ToolResult to maestro MCP ToolResult
+ */
+export function ccwResultToMcp(ccwResult) {
+    if (ccwResult.success) {
+        const text = typeof ccwResult.result === 'string'
+            ? ccwResult.result
+            : JSON.stringify(ccwResult.result, null, 2);
+        return { content: [{ type: 'text', text }] };
+    }
+    else {
+        return {
+            content: [{ type: 'text', text: ccwResult.error || 'Unknown error' }],
+            isError: true,
+        };
+    }
+}
+//# sourceMappingURL=tool-schema.js.map

package/dist/types/tool-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-schema.js","sourceRoot":"","sources":["../../src/types/tool-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoCH;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAwB;IACrD,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;YAC/C,CAAC,CAAC,SAAS,CAAC,MAAM;YAClB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/utils/file-reader.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Shared file reading utilities
+ *
+ * Extracted from read-file.ts for reuse across read_file and read_many_files tools.
+ */
+export declare const MAX_CONTENT_LENGTH = 5000;
+export declare const MAX_FILES = 50;
+export declare const MAX_TOTAL_CONTENT = 50000;
+export declare const BINARY_EXTENSIONS: Set<string>;
+export interface FileEntry {
+    path: string;
+    size: number;
+    content?: string;
+    truncated?: boolean;
+    matches?: string[];
+    totalLines?: number;
+    lineRange?: {
+        start: number;
+        end: number;
+    };
+}
+export interface ReadContentOptions {
+    maxLength: number;
+    offset?: number;
+    limit?: number;
+}
+export interface ReadContentResult {
+    content: string;
+    truncated: boolean;
+    totalLines?: number;
+    lineRange?: {
+        start: number;
+        end: number;
+    };
+}
+export interface ReadResult {
+    files: FileEntry[];
+    totalFiles: number;
+    message: string;
+}
+/**
+ * Check if file is likely binary
+ */
+export declare function isBinaryFile(filePath: string): boolean;
+/**
+ * Convert glob pattern to regex
+ * Supports: *, ?, and brace expansion {a,b,c}
+ */
+export declare function globToRegex(pattern: string): RegExp;
+/**
+ * Check if filename matches glob pattern
+ */
+export declare function matchesPattern(filename: string, pattern: string): boolean;
+/**
+ * Recursively collect files from directory
+ */
+export declare function collectFiles(dir: string, pattern: string | undefined, maxDepth: number, currentDepth?: number): string[];
+/**
+ * Read file content with truncation and optional line-based pagination
+ */
+export declare function readFileContent(filePath: string, options: ReadContentOptions): ReadContentResult;
+/**
+ * Find regex matches in content with safety protections
+ * - Empty string pattern = "match all" (no filtering) - returns null
+ * - Dangerous patterns (zero-width matches) = "match all" for safety - returns null
+ * - Validates pattern to prevent infinite loops
+ * - Limits iterations to prevent ReDoS attacks
+ * - Deduplicates results to prevent duplicates
+ * - Reports errors instead of silent failure
+ *
+ * @returns Array of matching lines, null to match all content (empty string or dangerous pattern), empty array for no matches
+ */
+export declare function findMatches(content: string, pattern: string): string[] | null;
+//# sourceMappingURL=file-reader.d.ts.map

package/dist/utils/file-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-reader.d.ts","sourceRoot":"","sources":["../../src/utils/file-reader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAGvC,eAAO,MAAM,iBAAiB,aAQ5B,CAAC;AAEH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGtD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAsBnD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAGzE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,EAChB,YAAY,GAAE,MAAU,GACvB,MAAM,EAAE,CA2BV;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,CAkDhG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAyE7E"}

package/dist/utils/file-reader.js

@@ -0,0 +1,217 @@
+/**
+ * Shared file reading utilities
+ *
+ * Extracted from read-file.ts for reuse across read_file and read_many_files tools.
+ */
+import { readFileSync, readdirSync } from 'fs';
+import { join, extname } from 'path';
+// Max content per file (truncate if larger)
+export const MAX_CONTENT_LENGTH = 5000;
+// Max files to return
+export const MAX_FILES = 50;
+// Max total content length
+export const MAX_TOTAL_CONTENT = 50000;
+// Common binary extensions to skip
+export const BINARY_EXTENSIONS = new Set([
+    '.png', '.jpg', '.jpeg', '.gif', '.bmp', '.ico', '.webp', '.svg',
+    '.pdf', '.doc', '.docx', '.xls', '.xlsx', '.ppt', '.pptx',
+    '.zip', '.tar', '.gz', '.rar', '.7z',
+    '.exe', '.dll', '.so', '.dylib',
+    '.mp3', '.mp4', '.wav', '.avi', '.mov',
+    '.woff', '.woff2', '.ttf', '.eot', '.otf',
+    '.pyc', '.class', '.o', '.obj',
+]);
+/**
+ * Check if file is likely binary
+ */
+export function isBinaryFile(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    return BINARY_EXTENSIONS.has(ext);
+}
+/**
+ * Convert glob pattern to regex
+ * Supports: *, ?, and brace expansion {a,b,c}
+ */
+export function globToRegex(pattern) {
+    // Handle brace expansion: *.{md,json,ts} -> (?:.*\.md|.*\.json|.*\.ts)
+    const braceMatch = pattern.match(/^(.*)\{([^}]+)\}(.*)$/);
+    if (braceMatch) {
+        const [, prefix, options, suffix] = braceMatch;
+        const optionList = options.split(',').map(opt => `${prefix}${opt}${suffix}`);
+        // Create a regex that matches any of the expanded patterns
+        const expandedPatterns = optionList.map(opt => {
+            return opt
+                .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+                .replace(/\*/g, '.*')
+                .replace(/\?/g, '.');
+        });
+        return new RegExp(`^(?:${expandedPatterns.join('|')})$`, 'i');
+    }
+    // Standard glob conversion
+    const escaped = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*/g, '.*')
+        .replace(/\?/g, '.');
+    return new RegExp(`^${escaped}$`, 'i');
+}
+/**
+ * Check if filename matches glob pattern
+ */
+export function matchesPattern(filename, pattern) {
+    const regex = globToRegex(pattern);
+    return regex.test(filename);
+}
+/**
+ * Recursively collect files from directory
+ */
+export function collectFiles(dir, pattern, maxDepth, currentDepth = 0) {
+    if (currentDepth > maxDepth)
+        return [];
+    const files = [];
+    try {
+        const entries = readdirSync(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            // Skip hidden files/dirs and node_modules
+            if (entry.name.startsWith('.') || entry.name === 'node_modules')
+                continue;
+            const fullPath = join(dir, entry.name);
+            if (entry.isDirectory()) {
+                files.push(...collectFiles(fullPath, pattern, maxDepth, currentDepth + 1));
+            }
+            else if (entry.isFile()) {
+                if (!pattern || matchesPattern(entry.name, pattern)) {
+                    files.push(fullPath);
+                }
+            }
+        }
+    }
+    catch {
+        // Skip directories we can't read
+    }
+    return files;
+}
+/**
+ * Read file content with truncation and optional line-based pagination
+ */
+export function readFileContent(filePath, options) {
+    const { maxLength, offset, limit } = options;
+    if (isBinaryFile(filePath)) {
+        return { content: '[Binary file]', truncated: false };
+    }
+    try {
+        const content = readFileSync(filePath, 'utf8');
+        const lines = content.split('\n');
+        const totalLines = lines.length;
+        // If offset/limit specified, use line-based pagination
+        if (offset !== undefined || limit !== undefined) {
+            const startLine = Math.min(offset ?? 0, totalLines);
+            const endLine = limit !== undefined ? Math.min(startLine + limit, totalLines) : totalLines;
+            const selectedLines = lines.slice(startLine, endLine);
+            const selectedContent = selectedLines.join('\n');
+            const actualEnd = endLine;
+            const hasMore = actualEnd < totalLines;
+            let finalContent = selectedContent;
+            if (selectedContent.length > maxLength) {
+                finalContent = selectedContent.substring(0, maxLength) + `\n... (+${selectedContent.length - maxLength} chars)`;
+            }
+            // Calculate actual line range (handle empty selection)
+            const actualLineEnd = selectedLines.length > 0 ? startLine + selectedLines.length - 1 : startLine;
+            return {
+                content: finalContent,
+                truncated: hasMore || selectedContent.length > maxLength,
+                totalLines,
+                lineRange: { start: startLine, end: actualLineEnd },
+            };
+        }
+        // Default behavior: truncate by character length
+        if (content.length > maxLength) {
+            return {
+                content: content.substring(0, maxLength) + `\n... (+${content.length - maxLength} chars)`,
+                truncated: true,
+                totalLines,
+            };
+        }
+        return { content, truncated: false, totalLines };
+    }
+    catch (error) {
+        return { content: `[Error: ${error.message}]`, truncated: false };
+    }
+}
+/**
+ * Find regex matches in content with safety protections
+ * - Empty string pattern = "match all" (no filtering) - returns null
+ * - Dangerous patterns (zero-width matches) = "match all" for safety - returns null
+ * - Validates pattern to prevent infinite loops
+ * - Limits iterations to prevent ReDoS attacks
+ * - Deduplicates results to prevent duplicates
+ * - Reports errors instead of silent failure
+ *
+ * @returns Array of matching lines, null to match all content (empty string or dangerous pattern), empty array for no matches
+ */
+export function findMatches(content, pattern) {
+    // 1. Empty string pattern = "match all" (no filtering)
+    if (!pattern || pattern.length === 0) {
+        return null;
+    }
+    // 2. Pattern length limit
+    if (pattern.length > 1000) {
+        console.error('[read_file] contentPattern error: Pattern too long (max 1000 characters), returning all content');
+        return null;
+    }
+    // 3. Dangerous pattern detection
+    try {
+        const testRegex = new RegExp(pattern, 'gm');
+        const emptyTest = testRegex.exec('');
+        if (emptyTest && emptyTest[0] === '' && emptyTest.index === 0) {
+            const secondMatch = testRegex.exec('');
+            if (secondMatch && secondMatch.index === 0) {
+                console.warn(`[read_file] contentPattern: Dangerous pattern "${pattern.substring(0, 50)}" detected, returning all content`);
+                return null;
+            }
+        }
+    }
+    catch (e) {
+        console.error(`[read_file] contentPattern: Invalid regex pattern: ${e.message}, returning all content`);
+        return null;
+    }
+    try {
+        const regex = new RegExp(pattern, 'gm');
+        const matches = [];
+        const seen = new Set();
+        let match;
+        let iterations = 0;
+        let lastIndex = -1;
+        const MAX_ITERATIONS = 1000;
+        const MAX_MATCHES = 50;
+        while ((match = regex.exec(content)) !== null && matches.length < MAX_MATCHES) {
+            iterations++;
+            if (iterations > MAX_ITERATIONS) {
+                console.error(`[read_file] contentPattern warning: Exceeded ${MAX_ITERATIONS} iterations for pattern "${pattern.substring(0, 50)}"`);
+                break;
+            }
+            if (match.index === lastIndex) {
+                regex.lastIndex = match.index + 1;
+                continue;
+            }
+            lastIndex = match.index;
+            const lineStart = content.lastIndexOf('\n', match.index) + 1;
+            const lineEnd = content.indexOf('\n', match.index);
+            const line = content.substring(lineStart, lineEnd === -1 ? undefined : lineEnd).trim();
+            if (!line)
+                continue;
+            if (!seen.has(line)) {
+                seen.add(line);
+                matches.push(line.substring(0, 200));
+            }
+            if (matches.length >= 10)
+                break;
+        }
+        return matches;
+    }
+    catch (error) {
+        const errorMsg = error.message;
+        console.error(`[read_file] contentPattern error: ${errorMsg}`);
+        return [];
+    }
+}
+//# sourceMappingURL=file-reader.js.map

package/dist/utils/file-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-reader.js","sourceRoot":"","sources":["../../src/utils/file-reader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAY,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC,sBAAsB;AACtB,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,2BAA2B;AAC3B,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,mCAAmC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAChE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;IACzD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IACpC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ;IAC/B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACzC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM;CAC/B,CAAC,CAAC;AA+BH;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,uEAAuE;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC;QAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;QAC7E,2DAA2D;QAC3D,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC5C,OAAO,GAAG;iBACP,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;iBACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;iBACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAe;IAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,OAA2B,EAC3B,QAAgB,EAChB,eAAuB,CAAC;IAExB,IAAI,YAAY,GAAG,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,0CAA0C;YAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAE1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7E,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;oBACpD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAA2B;IAC3E,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAE7C,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QAEhC,uDAAuD;QACvD,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YAC3F,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjD,MAAM,SAAS,GAAG,OAAO,CAAC;YAC1B,MAAM,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;YAEvC,IAAI,YAAY,GAAG,eAAe,CAAC;YACnC,IAAI,eAAe,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBACvC,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,WAAW,eAAe,CAAC,MAAM,GAAG,SAAS,SAAS,CAAC;YAClH,CAAC;YAED,uDAAuD;YACvD,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAElG,OAAO;gBACL,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE,OAAO,IAAI,eAAe,CAAC,MAAM,GAAG,SAAS;gBACxD,UAAU;gBACV,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE;aACpD,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,WAAW,OAAO,CAAC,MAAM,GAAG,SAAS,SAAS;gBACzF,SAAS,EAAE,IAAI;gBACf,UAAU;aACX,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,WAAY,KAAe,CAAC,OAAO,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAe;IAC1D,uDAAuD;IACvD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0BAA0B;IAC1B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;QACjH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAErC,IAAI,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,kDAAkD,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,CAAC,CAAC;gBAC5H,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,sDAAuD,CAAW,CAAC,OAAO,yBAAyB,CAAC,CAAC;QACnH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,KAAK,CAAC;QACV,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;QACnB,MAAM,cAAc,GAAG,IAAI,CAAC;QAC5B,MAAM,WAAW,GAAG,EAAE,CAAC;QAEvB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAC9E,UAAU,EAAE,CAAC;YAEb,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;gBAChC,OAAO,CAAC,KAAK,CAAC,gDAAgD,cAAc,4BAA4B,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACrI,MAAM;YACR,CAAC;YAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9B,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;YAExB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAEvF,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE;gBAAE,MAAM;QAClC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAI,KAAe,CAAC,OAAO,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/utils/path-validator.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Centralized Path Validation Utility
+ *
+ * Provides secure path validation and resolution for MCP tools.
+ * Prevents path traversal attacks and ensures operations stay within allowed directories.
+ */
+/**
+ * Check if sandbox mode is enabled
+ * When enabled, path validation restricts access to allowed directories only
+ */
+export declare function isSandboxEnabled(): boolean;
+/**
+ * Get project root directory
+ * Priority: MAESTRO_PROJECT_ROOT > process.cwd()
+ */
+export declare function getProjectRoot(): string;
+/**
+ * Get allowed directories list
+ * Priority: MAESTRO_ALLOWED_DIRS > [getProjectRoot()]
+ */
+export declare function getAllowedDirectories(): string[];
+/**
+ * Normalize path (unify separators to forward slash)
+ */
+export declare function normalizePath(p: string): string;
+/**
+ * Check if path is within allowed directories
+ */
+export declare function isPathWithinAllowedDirectories(targetPath: string, allowedDirectories: string[]): boolean;
+/**
+ * Validate and resolve path (core function)
+ *
+ * Security model:
+ * 1. Resolve to absolute path
+ * 2. Check against allowed directories
+ * 3. Resolve symlinks and re-verify
+ *
+ * @param filePath - Path to validate
+ * @param options - Validation options
+ * @returns Validated absolute path
+ * @throws Error if path is outside allowed directories or validation fails
+ */
+export declare function validatePath(filePath: string, options?: {
+    allowedDirectories?: string[];
+    mustExist?: boolean;
+}): Promise<string>;
+/**
+ * Resolve project-relative path (simplified, no strict validation)
+ * Use for cases where strict security validation is not needed
+ */
+export declare function resolveProjectPath(...pathSegments: string[]): string;
+//# sourceMappingURL=path-validator.d.ts.map

package/dist/utils/path-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validator.d.ts","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAMhD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAuBD;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,MAAM,EAAE,GAC3B,OAAO,CAST;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IACP,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;CAChB,GACL,OAAO,CAAC,MAAM,CAAC,CAmEjB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAEpE"}

package/dist/utils/path-validator.js

@@ -0,0 +1,151 @@
+/**
+ * Centralized Path Validation Utility
+ *
+ * Provides secure path validation and resolution for MCP tools.
+ * Prevents path traversal attacks and ensures operations stay within allowed directories.
+ */
+import { resolve, isAbsolute, normalize, sep } from 'path';
+import { realpath } from 'fs/promises';
+// Environment variable configuration
+const ENV_PROJECT_ROOT = 'MAESTRO_PROJECT_ROOT';
+const ENV_ALLOWED_DIRS = 'MAESTRO_ALLOWED_DIRS';
+const ENV_ENABLE_SANDBOX = 'MAESTRO_ENABLE_SANDBOX';
+/**
+ * Check if sandbox mode is enabled
+ * When enabled, path validation restricts access to allowed directories only
+ */
+export function isSandboxEnabled() {
+    const value = process.env[ENV_ENABLE_SANDBOX];
+    return value === '1' || value?.toLowerCase() === 'true';
+}
+/**
+ * Get project root directory
+ * Priority: MAESTRO_PROJECT_ROOT > process.cwd()
+ */
+export function getProjectRoot() {
+    return process.env[ENV_PROJECT_ROOT] || process.cwd();
+}
+/**
+ * Get allowed directories list
+ * Priority: MAESTRO_ALLOWED_DIRS > [getProjectRoot()]
+ */
+export function getAllowedDirectories() {
+    const envDirs = process.env[ENV_ALLOWED_DIRS];
+    if (envDirs) {
+        return envDirs.split(',').map(d => d.trim()).filter(Boolean);
+    }
+    return [getProjectRoot()];
+}
+/**
+ * Normalize path (unify separators to forward slash)
+ */
+export function normalizePath(p) {
+    return normalize(p).replace(/\\/g, '/');
+}
+function canonicalizeForComparison(p) {
+    const base = getProjectRoot();
+    const absolute = isAbsolute(p) ? p : resolve(base, p);
+    let canonical = normalize(absolute);
+    // Remove trailing separators (except drive roots like C:\ and posix root /)
+    canonical = canonical.replace(/[\\/]+$/, '');
+    if (/^[a-zA-Z]:$/.test(canonical)) {
+        canonical += sep;
+    }
+    else if (canonical === '') {
+        canonical = sep;
+    }
+    // Windows paths are case-insensitive.
+    if (process.platform === 'win32') {
+        canonical = canonical.toLowerCase();
+    }
+    return canonical;
+}
+/**
+ * Check if path is within allowed directories
+ */
+export function isPathWithinAllowedDirectories(targetPath, allowedDirectories) {
+    const canonicalTarget = canonicalizeForComparison(targetPath);
+    return allowedDirectories.some(dir => {
+        const canonicalDir = canonicalizeForComparison(dir);
+        if (canonicalTarget === canonicalDir)
+            return true;
+        const boundary = canonicalDir.endsWith(sep) ? canonicalDir : canonicalDir + sep;
+        return canonicalTarget.startsWith(boundary);
+    });
+}
+/**
+ * Validate and resolve path (core function)
+ *
+ * Security model:
+ * 1. Resolve to absolute path
+ * 2. Check against allowed directories
+ * 3. Resolve symlinks and re-verify
+ *
+ * @param filePath - Path to validate
+ * @param options - Validation options
+ * @returns Validated absolute path
+ * @throws Error if path is outside allowed directories or validation fails
+ */
+export async function validatePath(filePath, options = {}) {
+    const sandboxEnabled = isSandboxEnabled();
+    const allowedDirs = options.allowedDirectories || getAllowedDirectories();
+    // 1. Resolve to absolute path
+    const absolutePath = isAbsolute(filePath)
+        ? filePath
+        : resolve(getProjectRoot(), filePath);
+    const normalizedPath = normalizePath(absolutePath);
+    // 2. Initial sandbox check (only if sandbox is enabled)
+    if (sandboxEnabled && !isPathWithinAllowedDirectories(normalizedPath, allowedDirs)) {
+        throw new Error(`Access denied: path "${normalizedPath}" is outside allowed directories. ` +
+            `Allowed: [${allowedDirs.join(', ')}]`);
+    }
+    // 3. Try to resolve symlinks and re-verify
+    try {
+        const realPath = await realpath(absolutePath);
+        const normalizedReal = normalizePath(realPath);
+        // Only check symlink target if sandbox is enabled
+        if (sandboxEnabled && !isPathWithinAllowedDirectories(normalizedReal, allowedDirs)) {
+            throw new Error(`Access denied: symlink target "${normalizedReal}" is outside allowed directories`);
+        }
+        return normalizedReal;
+    }
+    catch (error) {
+        // File doesn't exist - validate parent directory
+        if (error.code === 'ENOENT') {
+            if (options.mustExist) {
+                throw new Error(`File not found: ${absolutePath}`);
+            }
+            // Validate parent directory's real path (only if sandbox is enabled)
+            const parentDir = resolve(absolutePath, '..');
+            try {
+                const realParent = await realpath(parentDir);
+                const normalizedParent = normalizePath(realParent);
+                if (sandboxEnabled && !isPathWithinAllowedDirectories(normalizedParent, allowedDirs)) {
+                    throw new Error(`Access denied: parent directory "${normalizedParent}" is outside allowed directories`);
+                }
+            }
+            catch (parentError) {
+                if (parentError.code === 'ENOENT') {
+                    // Parent directory doesn't exist either - return original absolute path
+                    // Let the caller create it if needed
+                    return absolutePath;
+                }
+                throw parentError;
+            }
+            return absolutePath;
+        }
+        // Re-throw access denied errors
+        if (error.message?.includes('Access denied')) {
+            throw error;
+        }
+        throw error;
+    }
+}
+/**
+ * Resolve project-relative path (simplified, no strict validation)
+ * Use for cases where strict security validation is not needed
+ */
+export function resolveProjectPath(...pathSegments) {
+    return resolve(getProjectRoot(), ...pathSegments);
+}
+//# sourceMappingURL=path-validator.js.map