mcp-adr-analysis-server 2.0.21 → 2.1.0

package/dist/src/tools/smart-git-push-tool-v2.js

@@ -23,24 +23,27 @@
 import { McpAdrError } from '../types/index.js';
 import { execSync } from 'child_process';
 import { readFileSync, writeFileSync, existsSync, statSync, mkdirSync } from 'fs';
-import { join, extname } from 'path';
+import { join, extname, basename } from 'path';
+import * as os from 'os';
 import { jsonSafeFilePath, jsonSafeError, jsonSafeUserInput } from '../utils/json-safe.js';
 import { validateMcpResponse } from '../utils/mcp-response-validator.js';
 /**
  * Main smart git push function - Security and Metrics Focused
  */
-async function smartGitPushV2(args) {
-    const { branch, message, testResults, skipSecurity = false, dryRun = false, projectPath = process.cwd(), forceUnsafe = false, humanOverrides = [], requestHumanConfirmation = false, checkDeploymentReadiness = false, targetEnvironment = 'production', enforceDeploymentReadiness = false, strictDeploymentMode = true } = args;
+export async function smartGitPushV2(args) {
+    const { branch, message, testResults, skipSecurity = false, dryRun = false, projectPath = process.cwd(), forceUnsafe = false, humanOverrides = [], requestHumanConfirmation = false, checkDeploymentReadiness = false, targetEnvironment = 'production', enforceDeploymentReadiness = false, strictDeploymentMode = true, } = args;
     try {
         // Step 1: Get staged files
         const stagedFiles = await getStagedFiles(projectPath);
         if (stagedFiles.length === 0) {
             const metricsText = await getDeploymentMetricsSummary(projectPath);
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: createNoChangesResponse(metricsText)
-                    }]
+                        text: createNoChangesResponse(metricsText),
+                    },
+                ],
             };
         }
         // Step 2: Security scan (unless skipped)
@@ -55,10 +58,12 @@ async function smartGitPushV2(args) {
         // Step 5: Check for confirmation requests
         if (confirmationRequests.length > 0 && requestHumanConfirmation) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: generateConfirmationRequestResponse(confirmationRequests, stagedFiles)
-                    }]
+                        text: generateConfirmationRequestResponse(confirmationRequests, stagedFiles),
+                    },
+                ],
             };
         }
         // Step 5.5: Deployment Readiness Check (NEW)
@@ -80,19 +85,24 @@ async function smartGitPushV2(args) {
                 rollbackFrequencyThreshold: 20,
                 // Integration with existing systems
                 integrateTodoTasks: true,
-                updateHealthScoring: true
+                updateHealthScoring: true,
             });
             // Hard block if deployment is not ready and enforcement is enabled
-            if (!readinessCheck.isDeploymentReady && (enforceDeploymentReadiness || strictDeploymentMode)) {
+            if (!readinessCheck.isDeploymentReady &&
+                (enforceDeploymentReadiness || strictDeploymentMode)) {
                 return {
-                    content: [{
+                    content: [
+                        {
                             type: 'text',
-                            text: generateDeploymentReadinessBlockResponse(readinessCheck, stagedFiles, targetEnvironment)
-                        }]
+                            text: generateDeploymentReadinessBlockResponse(readinessCheck, stagedFiles, targetEnvironment),
+                        },
+                    ],
                 };
             }
             // Soft warning if just checking but not enforcing
-            if (!readinessCheck.isDeploymentReady && checkDeploymentReadiness && !enforceDeploymentReadiness) {
+            if (!readinessCheck.isDeploymentReady &&
+                checkDeploymentReadiness &&
+                !enforceDeploymentReadiness) {
                 // Continue with push but include warning in success response
             }
         }
@@ -102,10 +112,12 @@ async function smartGitPushV2(args) {
         const shouldBlock = (hasCriticalSecurity || hasFailedTests) && !forceUnsafe;
         if (shouldBlock) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: generateBlockedResponse(filteredSecurityIssues, filteredIrrelevantFiles, testResults, humanOverrides)
-                    }]
+                        text: generateBlockedResponse(filteredSecurityIssues, filteredIrrelevantFiles, testResults, humanOverrides),
+                    },
+                ],
             };
         }
         // Step 5: Execute push if not dry run
@@ -115,22 +127,26 @@ async function smartGitPushV2(args) {
             await updateDeploymentHistory(projectPath, {
                 success: true,
                 ...(testResults && { testResults }),
-                filesChanged: stagedFiles.length
+                filesChanged: stagedFiles.length,
             });
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: generateSuccessResponse(stagedFiles, filteredSecurityIssues, filteredIrrelevantFiles, testResults, pushResult, branch, humanOverrides)
-                    }]
+                        text: generateSuccessResponse(stagedFiles, filteredSecurityIssues, filteredIrrelevantFiles, testResults, pushResult, branch, humanOverrides),
+                    },
+                ],
             };
         }
         else {
             // Dry run response
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: generateDryRunResponse(stagedFiles, filteredSecurityIssues, filteredIrrelevantFiles, testResults, branch)
-                    }]
+                        text: generateDryRunResponse(stagedFiles, filteredSecurityIssues, filteredIrrelevantFiles, testResults, branch),
+                    },
+                ],
             };
         }
     }
@@ -139,7 +155,7 @@ async function smartGitPushV2(args) {
         await updateDeploymentHistory(projectPath, {
             success: false,
             testResults: testResults || { success: false, testsRun: 0, testsPassed: 0, testsFailed: 0 },
-            filesChanged: 0
+            filesChanged: 0,
         });
         throw new McpAdrError('Smart git push failed: ' + jsonSafeError(error), 'GIT_PUSH_ERROR');
     }
@@ -151,7 +167,7 @@ async function getStagedFiles(projectPath) {
     try {
         const gitOutput = execSync('git diff --cached --name-status', {
             cwd: projectPath,
-            encoding: 'utf8'
+            encoding: 'utf8',
         });
         if (!gitOutput.trim()) {
             return [];
@@ -173,7 +189,7 @@ async function getStagedFiles(projectPath) {
                         content = readFileSync(fullPath, 'utf8');
                     }
                 }
-                catch (err) {
+                catch {
                     // Ignore read errors
                 }
             }
@@ -181,7 +197,7 @@ async function getStagedFiles(projectPath) {
                 path,
                 status: mapGitStatus(status || 'M'),
                 content: content || '',
-                size
+                size,
             });
         }
         return files;
@@ -196,22 +212,25 @@ async function getStagedFiles(projectPath) {
 async function scanForSecurityIssues(files, _projectPath) {
     const issues = [];
     try {
-        const { analyzeSensitiveContent } = await import('../utils/enhanced-sensitive-detector.js');
+        const { analyzeSensitiveContent } = await import('../utils/gitleaks-detector.js');
         for (const file of files) {
             if (file.status === 'deleted' || !file.content)
                 continue;
             const result = await analyzeSensitiveContent(file.path, file.content);
             for (const match of result.matches) {
                 // Map to our simplified security issue format
-                const severity = match.pattern.severity === 'critical' ? 'critical' :
-                    match.pattern.severity === 'high' ? 'high' : 'medium';
+                const severity = match.pattern.severity === 'critical'
+                    ? 'critical'
+                    : match.pattern.severity === 'high'
+                        ? 'high'
+                        : 'medium';
                 issues.push({
                     type: mapPatternToType(match.pattern.name),
                     severity,
                     file: file.path,
                     line: match.line,
                     pattern: match.pattern.name,
-                    recommendation: getSecurityRecommendation(match.pattern.name)
+                    recommendation: getSecurityRecommendation(match.pattern.name),
                 });
             }
         }
@@ -231,7 +250,7 @@ async function checkIrrelevantFiles(files) {
         'build-artifact': /^(dist|build|out|target|bin|obj)\//,
         'ide-config': /^\.(vscode|idea|eclipse|sublime-|atom|brackets)\//,
         'log-file': /\.(log|logs)$/i,
-        'cache-file': /^(\.(cache|npm|yarn|pnpm)|node_modules|__pycache__|\.pytest_cache)\//
+        'cache-file': /^(\.(cache|npm|yarn|pnpm)|node_modules|__pycache__|\.pytest_cache)\//,
     };
     for (const file of files) {
         if (file.status === 'deleted')
@@ -241,7 +260,7 @@ async function checkIrrelevantFiles(files) {
                 irrelevant.push({
                     path: file.path,
                     reason: reason,
-                    recommendation: getIrrelevantFileRecommendation(reason)
+                    recommendation: getIrrelevantFileRecommendation(reason),
                 });
                 break;
             }
@@ -251,7 +270,7 @@ async function checkIrrelevantFiles(files) {
             irrelevant.push({
                 path: file.path,
                 reason: 'build-artifact',
-                recommendation: 'Large file (' + Math.round(file.size / 1024 / 1024) + 'MB) - consider using Git LFS'
+                recommendation: 'Large file (' + Math.round(file.size / 1024 / 1024) + 'MB) - consider using Git LFS',
             });
         }
     }
@@ -261,7 +280,8 @@ async function checkIrrelevantFiles(files) {
  * Update deployment history
  */
 async function updateDeploymentHistory(projectPath, result) {
-    const cacheDir = join(projectPath, '.mcp-adr-cache');
+    const projectName = basename(projectPath);
+    const cacheDir = join(os.tmpdir(), projectName, 'cache');
     const historyFile = join(cacheDir, 'deploy-history.json');
     // Ensure cache directory exists
     if (!existsSync(cacheDir)) {
@@ -276,16 +296,16 @@ async function updateDeploymentHistory(projectPath, result) {
             totalTestsPassed: 0,
             totalTestsFailed: 0,
             averageDuration: 0,
-            testTypes: {}
+            testTypes: {},
         },
         successRate: 0,
-        testPassRate: 0
+        testPassRate: 0,
     };
     if (existsSync(historyFile)) {
         try {
             history = JSON.parse(readFileSync(historyFile, 'utf8'));
         }
-        catch (error) {
+        catch {
             // Ignore parse errors
         }
     }
@@ -322,7 +342,9 @@ async function updateDeploymentHistory(projectPath, result) {
             const currentAvg = history.testResults.averageDuration || 0;
             const totalRuns = history.successful + history.failed;
             history.testResults.averageDuration =
-                totalRuns > 1 ? (currentAvg * (totalRuns - 1) + result.testResults.duration) / totalRuns : result.testResults.duration;
+                totalRuns > 1
+                    ? (currentAvg * (totalRuns - 1) + result.testResults.duration) / totalRuns
+                    : result.testResults.duration;
         }
         // Set last test suite if command provided
         if (result.testResults.command) {
@@ -331,11 +353,11 @@ async function updateDeploymentHistory(projectPath, result) {
     }
     // Calculate rates
     const totalDeploys = history.successful + history.failed;
-    history.successRate = totalDeploys > 0 ?
-        Math.round((history.successful / totalDeploys) * 100) : 0;
+    history.successRate =
+        totalDeploys > 0 ? Math.round((history.successful / totalDeploys) * 100) : 0;
     const totalTests = history.testResults.totalTestsPassed + history.testResults.totalTestsFailed;
-    history.testPassRate = totalTests > 0 ?
-        Math.round((history.testResults.totalTestsPassed / totalTests) * 100) : 0;
+    history.testPassRate =
+        totalTests > 0 ? Math.round((history.testResults.totalTestsPassed / totalTests) * 100) : 0;
     // Save updated history
     writeFileSync(historyFile, JSON.stringify(history, null, 2));
 }
@@ -343,23 +365,48 @@ async function updateDeploymentHistory(projectPath, result) {
  * Get deployment metrics summary
  */
 async function getDeploymentMetricsSummary(projectPath) {
-    const historyFile = join(projectPath, '.mcp-adr-cache', 'deploy-history.json');
+    const projectName = basename(projectPath);
+    const cacheDir = join(os.tmpdir(), projectName, 'cache');
+    const historyFile = join(cacheDir, 'deploy-history.json');
     if (!existsSync(historyFile)) {
         return '- No deployment history available';
     }
     try {
         const history = JSON.parse(readFileSync(historyFile, 'utf8'));
         const lines = [
-            '- **Deploy Success Rate**: ' + history.successRate + '% (' + history.successful + '/' + (history.successful + history.failed) + ')',
-            '- **Test Pass Rate**: ' + history.testPassRate + '% (' + history.testResults.totalTestsPassed + '/' + (history.testResults.totalTestsPassed + history.testResults.totalTestsFailed) + ')',
-            '- **Last Deploy**: ' + (history.lastDeploy ? new Date(history.lastDeploy).toLocaleString() : 'Never') + ' ' + (history.lastDeploySuccess ? '✅' : '❌'),
-            '- **Last Test Run**: ' + (history.testResults.lastRun ? new Date(history.testResults.lastRun).toLocaleString() : 'Never') + ' ' + (history.testResults.lastRunSuccess ? '✅' : '❌'),
+            '- **Deploy Success Rate**: ' +
+                history.successRate +
+                '% (' +
+                history.successful +
+                '/' +
+                (history.successful + history.failed) +
+                ')',
+            '- **Test Pass Rate**: ' +
+                history.testPassRate +
+                '% (' +
+                history.testResults.totalTestsPassed +
+                '/' +
+                (history.testResults.totalTestsPassed + history.testResults.totalTestsFailed) +
+                ')',
+            '- **Last Deploy**: ' +
+                (history.lastDeploy ? new Date(history.lastDeploy).toLocaleString() : 'Never') +
+                ' ' +
+                (history.lastDeploySuccess ? '✅' : '❌'),
+            '- **Last Test Run**: ' +
+                (history.testResults.lastRun
+                    ? new Date(history.testResults.lastRun).toLocaleString()
+                    : 'Never') +
+                ' ' +
+                (history.testResults.lastRunSuccess ? '✅' : '❌'),
             '- **Total Tests Executed**: ' + history.testResults.totalTestsRun,
-            '- **Avg Test Duration**: ' + (history.testResults.averageDuration ? Math.round(history.testResults.averageDuration) + 's' : 'N/A')
+            '- **Avg Test Duration**: ' +
+                (history.testResults.averageDuration
+                    ? Math.round(history.testResults.averageDuration) + 's'
+                    : 'N/A'),
         ];
         return lines.join('\n');
     }
-    catch (error) {
+    catch {
         return '- Error reading deployment history';
     }
 }
@@ -372,7 +419,7 @@ async function executePush(projectPath, branch, message) {
         if (message) {
             const commitOutput = execSync('git commit -m "' + message + '"', {
                 cwd: projectPath,
-                encoding: 'utf8'
+                encoding: 'utf8',
             });
             output += 'Commit:\n' + commitOutput + '\n\n';
         }
@@ -380,7 +427,7 @@ async function executePush(projectPath, branch, message) {
         const pushOutput = execSync(pushCommand, {
             cwd: projectPath,
             encoding: 'utf8',
-            stdio: ['pipe', 'pipe', 'pipe']
+            stdio: ['pipe', 'pipe', 'pipe'],
         });
         output += 'Push:\n' + pushOutput;
         return { output, success: true };
@@ -392,18 +439,47 @@ async function executePush(projectPath, branch, message) {
 // Helper functions
 function mapGitStatus(status) {
     switch (status) {
-        case 'A': return 'added';
-        case 'M': return 'modified';
-        case 'D': return 'deleted';
-        case 'R': return 'renamed';
-        default: return 'modified';
+        case 'A':
+            return 'added';
+        case 'M':
+            return 'modified';
+        case 'D':
+            return 'deleted';
+        case 'R':
+            return 'renamed';
+        default:
+            return 'modified';
     }
 }
 function isTextFile(path) {
     const textExtensions = [
-        '.js', '.ts', '.jsx', '.tsx', '.json', '.md', '.txt', '.yml', '.yaml',
-        '.py', '.rb', '.java', '.cs', '.go', '.rs', '.cpp', '.c', '.h', '.hpp',
-        '.php', '.html', '.css', '.scss', '.sass', '.less', '.vue', '.svelte'
+        '.js',
+        '.ts',
+        '.jsx',
+        '.tsx',
+        '.json',
+        '.md',
+        '.txt',
+        '.yml',
+        '.yaml',
+        '.py',
+        '.rb',
+        '.java',
+        '.cs',
+        '.go',
+        '.rs',
+        '.cpp',
+        '.c',
+        '.h',
+        '.hpp',
+        '.php',
+        '.html',
+        '.css',
+        '.scss',
+        '.sass',
+        '.less',
+        '.vue',
+        '.svelte',
     ];
     return textExtensions.includes(extname(path).toLowerCase());
 }
@@ -431,12 +507,18 @@ function getSecurityRecommendation(pattern) {
 }
 function getIrrelevantFileRecommendation(reason) {
     switch (reason) {
-        case 'temp-file': return 'Add to .gitignore - temporary files should not be committed';
-        case 'build-artifact': return 'Add to .gitignore - build outputs should not be in source control';
-        case 'ide-config': return 'Add to .gitignore - IDE configurations are user-specific';
-        case 'log-file': return 'Add to .gitignore - log files should not be committed';
-        case 'cache-file': return 'Add to .gitignore - cache files are generated';
-        default: return 'Consider adding to .gitignore';
+        case 'temp-file':
+            return 'Add to .gitignore - temporary files should not be committed';
+        case 'build-artifact':
+            return 'Add to .gitignore - build outputs should not be in source control';
+        case 'ide-config':
+            return 'Add to .gitignore - IDE configurations are user-specific';
+        case 'log-file':
+            return 'Add to .gitignore - log files should not be committed';
+        case 'cache-file':
+            return 'Add to .gitignore - cache files are generated';
+        default:
+            return 'Consider adding to .gitignore';
     }
 }
 // Human Override Functions
@@ -458,7 +540,7 @@ async function applyHumanOverrides(securityIssues, irrelevantFiles, humanOverrid
                 detectedIssue: issue,
                 suggestedPurpose: analyzeFilePurpose(issue.file),
                 riskLevel: issue.severity,
-                alternatives: generateAlternatives(issue)
+                alternatives: generateAlternatives(issue),
             });
         }
         return true; // Keep issue if no override
@@ -476,7 +558,7 @@ async function applyHumanOverrides(securityIssues, irrelevantFiles, humanOverrid
                 detectedIssue: file,
                 suggestedPurpose: analyzeFilePurpose(file.path),
                 riskLevel: 'medium',
-                alternatives: generateAlternatives(file)
+                alternatives: generateAlternatives(file),
             });
         }
         return true; // Keep file if no override
@@ -484,7 +566,7 @@ async function applyHumanOverrides(securityIssues, irrelevantFiles, humanOverrid
     return {
         filteredSecurityIssues,
         filteredIrrelevantFiles,
-        confirmationRequests
+        confirmationRequests,
     };
 }
 /**
@@ -493,7 +575,9 @@ async function applyHumanOverrides(securityIssues, irrelevantFiles, humanOverrid
 function analyzeFilePurpose(filePath) {
     const fileName = filePath.toLowerCase();
     // Configuration files
-    if (fileName.includes('config') || fileName.endsWith('.config.js') || fileName.endsWith('.config.ts')) {
+    if (fileName.includes('config') ||
+        fileName.endsWith('.config.js') ||
+        fileName.endsWith('.config.ts')) {
         return 'Configuration file - may contain environment-specific settings';
     }
     // Build/deployment files
@@ -505,7 +589,9 @@ function analyzeFilePurpose(filePath) {
         return 'Development or debugging file - may be temporary';
     }
     // IDE/editor files
-    if (fileName.includes('.vscode') || fileName.includes('.idea') || fileName.includes('.settings')) {
+    if (fileName.includes('.vscode') ||
+        fileName.includes('.idea') ||
+        fileName.includes('.settings')) {
         return 'IDE/editor configuration - user-specific preferences';
     }
     // Log files
@@ -517,7 +603,9 @@ function analyzeFilePurpose(filePath) {
         return 'Security-sensitive file - may contain credentials or keys';
     }
     // Cache/temporary
-    if (fileName.includes('cache') || fileName.includes('node_modules') || fileName.includes('.cache')) {
+    if (fileName.includes('cache') ||
+        fileName.includes('node_modules') ||
+        fileName.includes('.cache')) {
         return 'Cache or temporary data - generated content';
     }
     return 'Unknown purpose - manual review recommended';
@@ -577,11 +665,12 @@ function generateAlternatives(issue) {
 }
 // Response generators
 function createNoChangesResponse(metricsText) {
-    return '# Smart Git Push - No Changes\n\n' +
+    return ('# Smart Git Push - No Changes\n\n' +
         '## Status\n' +
         'No staged files found. Use git add to stage files before pushing.\n\n' +
         '## Deployment Metrics\n' +
-        metricsText + '\n\n' +
+        metricsText +
+        '\n\n' +
         '## ⚠️ IMPORTANT: Selective File Staging\n' +
         '**DO NOT USE:** `git add .` or `git add -A` (stages everything including unintended files)\n\n' +
         '**RECOMMENDED APPROACH:**\n' +
@@ -599,7 +688,7 @@ function createNoChangesResponse(metricsText) {
         '- [ ] Code reviewed and approved\n' +
         '- [ ] No sensitive data in changes\n' +
         '- [ ] Documentation updated if needed\n' +
-        '- [ ] Deployment strategy confirmed';
+        '- [ ] Deployment strategy confirmed');
 }
 /**
  * Generate confirmation request response for human override
@@ -610,141 +699,198 @@ function generateConfirmationRequestResponse(confirmationRequests, stagedFiles)
         `The LLM has detected ${confirmationRequests.length} files that need your confirmation before proceeding.\n\n`;
     confirmationRequests.forEach((request, index) => {
         const isSecurityIssue = 'severity' in request.detectedIssue;
-        const riskEmoji = request.riskLevel === 'critical' ? '🔴' :
-            request.riskLevel === 'high' ? '🟠' :
-                request.riskLevel === 'medium' ? '🟡' : '🟢';
-        response += `### ${index + 1}. ${jsonSafeFilePath(request.path)} ${riskEmoji}\n\n` +
-            `**Detected Issue**: ${isSecurityIssue ? 'Security Risk' : 'Irrelevant File'}\n` +
-            `**Risk Level**: ${request.riskLevel.toUpperCase()}\n` +
-            `**LLM Analysis**: ${request.suggestedPurpose}\n\n` +
-            `**Recommended Alternatives**:\n${request.alternatives.map(alt => `- ${alt}`).join('\n')}\n\n` +
-            `**To Override**: Confirm this file's purpose and business justification.\n\n`;
+        const riskEmoji = request.riskLevel === 'critical'
+            ? '🔴'
+            : request.riskLevel === 'high'
+                ? '🟠'
+                : request.riskLevel === 'medium'
+                    ? '🟡'
+                    : '🟢';
+        response +=
+            `### ${index + 1}. ${jsonSafeFilePath(request.path)} ${riskEmoji}\n\n` +
+                `**Detected Issue**: ${isSecurityIssue ? 'Security Risk' : 'Irrelevant File'}\n` +
+                `**Risk Level**: ${request.riskLevel.toUpperCase()}\n` +
+                `**LLM Analysis**: ${request.suggestedPurpose}\n\n` +
+                `**Recommended Alternatives**:\n${request.alternatives.map(alt => `- ${alt}`).join('\n')}\n\n` +
+                `**To Override**: Confirm this file's purpose and business justification.\n\n`;
     });
-    response += '## Override Instructions\n\n' +
-        'To proceed with these files, rerun the command with human overrides:\n\n' +
-        '```json\n' +
-        '{\n' +
-        '  "operation": "smart_git_push",\n' +
-        '  "humanOverrides": [\n' +
-        confirmationRequests.map(req => '    {\n' +
-            `      "path": "${req.path}",\n` +
-            `      "purpose": "YOUR_BUSINESS_JUSTIFICATION_HERE",\n` +
-            '      "userConfirmed": true,\n' +
-            `      "timestamp": "${new Date().toISOString()}",\n` +
-            '      "overrideReason": "business-requirement", // or security-exception, deployment-necessity, etc.\n' +
-            '      "additionalContext": "EXPLAIN_WHY_THIS_IS_NECESSARY"\n' +
-            '    }').join(',\n') + '\n' +
-        '  ]\n' +
-        '}\n' +
-        '```\n\n' +
-        '## ⚠️ Important Reminders\n' +
-        '- **Only override if you understand the business need**\n' +
-        '- **Document the purpose clearly**\n' +
-        '- **Consider the security implications**\n' +
-        '- **Review alternatives before overriding**\n\n' +
-        `**Total staged files**: ${stagedFiles.length} | **Files needing confirmation**: ${confirmationRequests.length}`;
+    response +=
+        '## Override Instructions\n\n' +
+            'To proceed with these files, rerun the command with human overrides:\n\n' +
+            '```json\n' +
+            '{\n' +
+            '  "operation": "smart_git_push",\n' +
+            '  "humanOverrides": [\n' +
+            confirmationRequests
+                .map(req => '    {\n' +
+                `      "path": "${req.path}",\n` +
+                `      "purpose": "YOUR_BUSINESS_JUSTIFICATION_HERE",\n` +
+                '      "userConfirmed": true,\n' +
+                `      "timestamp": "${new Date().toISOString()}",\n` +
+                '      "overrideReason": "business-requirement", // or security-exception, deployment-necessity, etc.\n' +
+                '      "additionalContext": "EXPLAIN_WHY_THIS_IS_NECESSARY"\n' +
+                '    }')
+                .join(',\n') +
+            '\n' +
+            '  ]\n' +
+            '}\n' +
+            '```\n\n' +
+            '## ⚠️ Important Reminders\n' +
+            '- **Only override if you understand the business need**\n' +
+            '- **Document the purpose clearly**\n' +
+            '- **Consider the security implications**\n' +
+            '- **Review alternatives before overriding**\n\n' +
+            `**Total staged files**: ${stagedFiles.length} | **Files needing confirmation**: ${confirmationRequests.length}`;
     return response;
 }
 function generateBlockedResponse(securityIssues, _irrelevantFiles, testResults, humanOverrides) {
     let response = '# Smart Git Push - Blocked 🚫\n\n## Push Blocked Due to Critical Issues\n\n';
     if (securityIssues.some(i => i.severity === 'critical')) {
-        const criticalIssues = securityIssues.filter(i => i.severity === 'critical').map(issue => '- **' + issue.type + '** in ' + jsonSafeFilePath(issue.file) + (issue.line ? ' (line ' + issue.line + ')' : '') + '\n' +
-            '  Pattern: ' + issue.pattern + '\n' +
-            '  Fix: ' + issue.recommendation).join('\n\n');
+        const criticalIssues = securityIssues
+            .filter(i => i.severity === 'critical')
+            .map(issue => '- **' +
+            issue.type +
+            '** in ' +
+            jsonSafeFilePath(issue.file) +
+            (issue.line ? ' (line ' + issue.line + ')' : '') +
+            '\n' +
+            '  Pattern: ' +
+            issue.pattern +
+            '\n' +
+            '  Fix: ' +
+            issue.recommendation)
+            .join('\n\n');
         response += '### 🔐 Critical Security Issues Found\n' + criticalIssues + '\n\n';
     }
     if (testResults && !testResults.success) {
-        response += '### 🧪 Tests Failed\n' +
-            '- **Command**: ' + testResults.command + '\n' +
-            '- **Output**:\n' +
-            '-------\n' +
-            jsonSafeUserInput(testResults.output) + '\n' +
-            '-------\n\n';
+        response +=
+            '### 🧪 Tests Failed\n' +
+                '- **Command**: ' +
+                testResults.command +
+                '\n' +
+                '- **Output**:\n' +
+                '-------\n' +
+                jsonSafeUserInput(testResults.output) +
+                '\n' +
+                '-------\n\n';
     }
     // Show human override status if provided
     if (humanOverrides && humanOverrides.length > 0) {
         response += '## Human Overrides Applied\n';
         humanOverrides.forEach(override => {
-            response += `- **${jsonSafeFilePath(override.path)}**: ${override.purpose}\n` +
-                `  Reason: ${override.overrideReason} | Confirmed: ${override.userConfirmed ? '✅' : '❌'}\n`;
+            response +=
+                `- **${jsonSafeFilePath(override.path)}**: ${override.purpose}\n` +
+                    `  Reason: ${override.overrideReason} | Confirmed: ${override.userConfirmed ? '✅' : '❌'}\n`;
         });
         response += '\n';
     }
-    response += '## Required Actions\n' +
-        '1. Fix all critical security issues\n' +
-        '2. Ensure all tests pass\n' +
-        '3. Review and fix any warnings\n' +
-        '4. OR use human overrides with proper justification\n\n' +
-        '## ⚠️ IMPORTANT: File Staging Best Practices\n' +
-        '**NEVER USE:** `git add .` or `git add -A` when fixing issues\n' +
-        '**RECOMMENDED:**\n' +
-        '1. Fix specific issues in specific files\n' +
-        '2. Stage only the fixed files: `git add <fixed-file>`\n' +
-        '3. Verify changes: `git diff --cached`\n' +
-        '4. Re-run smart git push\n\n' +
-        '## Human Override Option\n' +
-        'If these issues are expected and have business justification:\n' +
-        '1. Use `requestHumanConfirmation: true` to get guided override instructions\n' +
-        '2. Provide detailed justification for each file\n' +
-        '3. Consider security implications carefully\n\n' +
-        '🚫 Use --forceUnsafe to override (NOT RECOMMENDED)';
+    response +=
+        '## Required Actions\n' +
+            '1. Fix all critical security issues\n' +
+            '2. Ensure all tests pass\n' +
+            '3. Review and fix any warnings\n' +
+            '4. OR use human overrides with proper justification\n\n' +
+            '## ⚠️ IMPORTANT: File Staging Best Practices\n' +
+            '**NEVER USE:** `git add .` or `git add -A` when fixing issues\n' +
+            '**RECOMMENDED:**\n' +
+            '1. Fix specific issues in specific files\n' +
+            '2. Stage only the fixed files: `git add <fixed-file>`\n' +
+            '3. Verify changes: `git diff --cached`\n' +
+            '4. Re-run smart git push\n\n' +
+            '## Human Override Option\n' +
+            'If these issues are expected and have business justification:\n' +
+            '1. Use `requestHumanConfirmation: true` to get guided override instructions\n' +
+            '2. Provide detailed justification for each file\n' +
+            '3. Consider security implications carefully\n\n' +
+            '🚫 Use --forceUnsafe to override (NOT RECOMMENDED)';
     return response;
 }
 function generateSuccessResponse(stagedFiles, securityIssues, irrelevantFiles, testResults, pushResult, branch, humanOverrides) {
     let response = '# Smart Git Push - Success ✅\n\n' +
         '## Push Summary\n' +
-        '- **Branch**: ' + (branch || 'current') + '\n' +
-        '- **Files**: ' + stagedFiles.length + ' staged files\n' +
-        '- **Security Issues**: ' + securityIssues.length + ' (' + securityIssues.filter(i => i.severity === 'critical').length + ' critical)\n' +
-        '- **Irrelevant Files**: ' + irrelevantFiles.length + '\n' +
-        '- **Tests**: ' + (testResults ? (testResults.success ? '✅ Passed' : '❌ Failed') : 'Skipped') + '\n\n' +
+        '- **Branch**: ' +
+        (branch || 'current') +
+        '\n' +
+        '- **Files**: ' +
+        stagedFiles.length +
+        ' staged files\n' +
+        '- **Security Issues**: ' +
+        securityIssues.length +
+        ' (' +
+        securityIssues.filter(i => i.severity === 'critical').length +
+        ' critical)\n' +
+        '- **Irrelevant Files**: ' +
+        irrelevantFiles.length +
+        '\n' +
+        '- **Tests**: ' +
+        (testResults ? (testResults.success ? '✅ Passed' : '❌ Failed') : 'Skipped') +
+        '\n\n' +
         '## Deployment Metrics Updated\n' +
-        getDeploymentMetricsUpdate() + '\n\n' +
+        getDeploymentMetricsUpdate() +
+        '\n\n' +
         '## Files Pushed\n' +
         stagedFiles.map(f => '- ' + jsonSafeFilePath(f.path) + ' (' + f.status + ')').join('\n');
     if (securityIssues.length > 0) {
         const nonCriticalIssues = securityIssues.filter(i => i.severity !== 'critical');
         if (nonCriticalIssues.length > 0) {
-            response += '\n\n## Security Warnings (Non-Critical)\n' +
-                nonCriticalIssues.map(issue => '- **' + issue.type + '** in ' + jsonSafeFilePath(issue.file) + ': ' + issue.recommendation).join('\n');
+            response +=
+                '\n\n## Security Warnings (Non-Critical)\n' +
+                    nonCriticalIssues
+                        .map(issue => '- **' +
+                        issue.type +
+                        '** in ' +
+                        jsonSafeFilePath(issue.file) +
+                        ': ' +
+                        issue.recommendation)
+                        .join('\n');
         }
     }
     if (irrelevantFiles.length > 0) {
-        response += '\n\n## Irrelevant Files (Consider .gitignore)\n' +
-            irrelevantFiles.map(f => '- ' + jsonSafeFilePath(f.path) + ' (' + f.reason + '): ' + f.recommendation).join('\n');
+        response +=
+            '\n\n## Irrelevant Files (Consider .gitignore)\n' +
+                irrelevantFiles
+                    .map(f => '- ' + jsonSafeFilePath(f.path) + ' (' + f.reason + '): ' + f.recommendation)
+                    .join('\n');
     }
     // Show human overrides if any were applied
     if (humanOverrides && humanOverrides.length > 0) {
-        response += '\n\n## ✅ Human Overrides Applied\n' +
-            'The following files were explicitly approved by human override:\n' +
-            humanOverrides.filter(o => o.userConfirmed).map(override => `- **${jsonSafeFilePath(override.path)}**: ${override.purpose}\n` +
-                `  Justification: ${override.additionalContext || 'No additional context'}\n` +
-                `  Override Reason: ${override.overrideReason}\n` +
-                `  Timestamp: ${new Date(override.timestamp).toLocaleString()}`).join('\n\n') + '\n\n' +
-            '📝 **Note**: These overrides have been logged for audit purposes.';
-    }
-    response += '\n\n## Git Output\n' +
-        '-------\n' +
-        jsonSafeUserInput(pushResult.output) + '\n' +
-        '-------\n\n' +
-        '## 🚀 Post-Push Deployment Checklist\n' +
-        '### Immediate Actions (Next 5 minutes)\n' +
-        '- [ ] Monitor CI/CD pipeline status\n' +
-        '- [ ] Check automated test results\n' +
-        '- [ ] Verify build completion\n' +
-        '- [ ] Review any deployment warnings\n\n' +
-        '### Deployment Completion (Next 15 minutes)\n' +
-        '- [ ] Confirm deployment to staging/production\n' +
-        '- [ ] Verify application health checks\n' +
-        '- [ ] Test key functionality post-deployment\n' +
-        '- [ ] Monitor error rates and performance metrics\n' +
-        '- [ ] Update TODO list with deployment status\n\n' +
-        '### Documentation & Communication\n' +
-        '- [ ] Update deployment notes\n' +
-        '- [ ] Notify team of successful deployment\n' +
-        '- [ ] Close related tickets/issues\n' +
-        '- [ ] Schedule post-deployment review if needed\n\n' +
-        '💡 **Tip**: Use the TODO management tool to track deployment completion tasks!';
+        response +=
+            '\n\n## ✅ Human Overrides Applied\n' +
+                'The following files were explicitly approved by human override:\n' +
+                humanOverrides
+                    .filter(o => o.userConfirmed)
+                    .map(override => `- **${jsonSafeFilePath(override.path)}**: ${override.purpose}\n` +
+                    `  Justification: ${override.additionalContext || 'No additional context'}\n` +
+                    `  Override Reason: ${override.overrideReason}\n` +
+                    `  Timestamp: ${new Date(override.timestamp).toLocaleString()}`)
+                    .join('\n\n') +
+                '\n\n' +
+                '📝 **Note**: These overrides have been logged for audit purposes.';
+    }
+    response +=
+        '\n\n## Git Output\n' +
+            '-------\n' +
+            jsonSafeUserInput(pushResult.output) +
+            '\n' +
+            '-------\n\n' +
+            '## 🚀 Post-Push Deployment Checklist\n' +
+            '### Immediate Actions (Next 5 minutes)\n' +
+            '- [ ] Monitor CI/CD pipeline status\n' +
+            '- [ ] Check automated test results\n' +
+            '- [ ] Verify build completion\n' +
+            '- [ ] Review any deployment warnings\n\n' +
+            '### Deployment Completion (Next 15 minutes)\n' +
+            '- [ ] Confirm deployment to staging/production\n' +
+            '- [ ] Verify application health checks\n' +
+            '- [ ] Test key functionality post-deployment\n' +
+            '- [ ] Monitor error rates and performance metrics\n' +
+            '- [ ] Update TODO list with deployment status\n\n' +
+            '### Documentation & Communication\n' +
+            '- [ ] Update deployment notes\n' +
+            '- [ ] Notify team of successful deployment\n' +
+            '- [ ] Close related tickets/issues\n' +
+            '- [ ] Schedule post-deployment review if needed\n\n' +
+            '💡 **Tip**: Use the TODO management tool to track deployment completion tasks!';
     return response;
 }
 function generateDryRunResponse(stagedFiles, securityIssues, irrelevantFiles, testResults, branch) {
@@ -752,53 +898,82 @@ function generateDryRunResponse(stagedFiles, securityIssues, irrelevantFiles, te
     const wouldBlock = hasCritical || (testResults && !testResults.success);
     let response = '# Smart Git Push - Dry Run 🔍\n\n' +
         '## Analysis Results\n' +
-        '- **Files to Push**: ' + stagedFiles.length + '\n' +
-        '- **Security Issues**: ' + securityIssues.length + ' (' + securityIssues.filter(i => i.severity === 'critical').length + ' critical)\n' +
-        '- **Irrelevant Files**: ' + irrelevantFiles.length + '\n' +
-        '- **Would Block**: ' + (wouldBlock ? '❌ Yes' : '✅ No') + '\n\n' +
+        '- **Files to Push**: ' +
+        stagedFiles.length +
+        '\n' +
+        '- **Security Issues**: ' +
+        securityIssues.length +
+        ' (' +
+        securityIssues.filter(i => i.severity === 'critical').length +
+        ' critical)\n' +
+        '- **Irrelevant Files**: ' +
+        irrelevantFiles.length +
+        '\n' +
+        '- **Would Block**: ' +
+        (wouldBlock ? '❌ Yes' : '✅ No') +
+        '\n\n' +
         '## Staged Files\n' +
-        stagedFiles.map(f => '- ' + jsonSafeFilePath(f.path) + ' (' + f.status + ') - ' + f.size + ' bytes').join('\n');
+        stagedFiles
+            .map(f => '- ' + jsonSafeFilePath(f.path) + ' (' + f.status + ') - ' + f.size + ' bytes')
+            .join('\n');
     if (securityIssues.length > 0) {
-        response += '\n\n## Security Issues Found\n' +
-            securityIssues.map(issue => '- **' + issue.severity.toUpperCase() + '** ' + issue.type + ' in ' + jsonSafeFilePath(issue.file) + (issue.line ? ' (line ' + issue.line + ')' : '') + '\n' +
-                '  Fix: ' + issue.recommendation).join('\n');
+        response +=
+            '\n\n## Security Issues Found\n' +
+                securityIssues
+                    .map(issue => '- **' +
+                    issue.severity.toUpperCase() +
+                    '** ' +
+                    issue.type +
+                    ' in ' +
+                    jsonSafeFilePath(issue.file) +
+                    (issue.line ? ' (line ' + issue.line + ')' : '') +
+                    '\n' +
+                    '  Fix: ' +
+                    issue.recommendation)
+                    .join('\n');
     }
     else {
         response += '\n\n## ✅ No Security Issues Found';
     }
     if (irrelevantFiles.length > 0) {
-        response += '\n\n## Irrelevant Files Detected\n' +
-            irrelevantFiles.map(f => '- ' + jsonSafeFilePath(f.path) + ' (' + f.reason + ')\n' +
-                '  ' + f.recommendation).join('\n');
-    }
-    response += '\n\n## ⚠️ IMPORTANT: Pre-Push Staging Review\n' +
-        '**AVOID:** `git add .` or `git add -A` before this tool\n' +
-        '**RECOMMENDED:**\n' +
-        '1. Review each staged file individually\n' +
-        '2. Verify changes: `git diff --cached`\n' +
-        '3. Ensure only intended files are staged\n\n' +
-        '## Command to Execute\n' +
-        '-------\n' +
-        '# Run without dry run to actually push\n' +
-        'git push' + (branch ? ' origin ' + branch : '') + '\n' +
-        '-------\n\n' +
-        '**Note:** This was a dry run. No files were pushed.' +
-        (wouldBlock ? '\n⚠️ **Warning**: This push would be BLOCKED due to critical issues.' : '') + '\n\n' +
-        '## 🚀 Deployment Readiness Assessment\n' +
-        (wouldBlock ?
-            '❌ **NOT READY** - Fix issues above before deployment' :
-            '✅ **READY** - This push appears safe for deployment\n\n' +
-                '### Post-Push Checklist\n' +
-                '- [ ] Monitor CI/CD pipeline\n' +
-                '- [ ] Verify deployment health\n' +
-                '- [ ] Update TODO tasks\n' +
-                '- [ ] Document deployment notes');
+        response +=
+            '\n\n## Irrelevant Files Detected\n' +
+                irrelevantFiles
+                    .map(f => '- ' + jsonSafeFilePath(f.path) + ' (' + f.reason + ')\n' + '  ' + f.recommendation)
+                    .join('\n');
+    }
+    response +=
+        '\n\n## ⚠️ IMPORTANT: Pre-Push Staging Review\n' +
+            '**AVOID:** `git add .` or `git add -A` before this tool\n' +
+            '**RECOMMENDED:**\n' +
+            '1. Review each staged file individually\n' +
+            '2. Verify changes: `git diff --cached`\n' +
+            '3. Ensure only intended files are staged\n\n' +
+            '## Command to Execute\n' +
+            '-------\n' +
+            '# Run without dry run to actually push\n' +
+            'git push' +
+            (branch ? ' origin ' + branch : '') +
+            '\n' +
+            '-------\n\n' +
+            '**Note:** This was a dry run. No files were pushed.' +
+            (wouldBlock ? '\n⚠️ **Warning**: This push would be BLOCKED due to critical issues.' : '') +
+            '\n\n' +
+            '## 🚀 Deployment Readiness Assessment\n' +
+            (wouldBlock
+                ? '❌ **NOT READY** - Fix issues above before deployment'
+                : '✅ **READY** - This push appears safe for deployment\n\n' +
+                    '### Post-Push Checklist\n' +
+                    '- [ ] Monitor CI/CD pipeline\n' +
+                    '- [ ] Verify deployment health\n' +
+                    '- [ ] Update TODO tasks\n' +
+                    '- [ ] Document deployment notes');
     return response;
 }
 function getDeploymentMetricsUpdate() {
-    return '- Deploy success rate updated\n' +
+    return ('- Deploy success rate updated\n' +
         '- Test results recorded\n' +
-        '- Metrics available in .mcp-adr-cache/deploy-history.json';
+        '- Metrics available in .mcp-adr-cache/deploy-history.json');
 }
 /**
  * Generate deployment readiness block response
@@ -813,33 +988,46 @@ function generateDeploymentReadinessBlockResponse(readinessResult, stagedFiles,
 - **Confidence Level**: ${readinessResult.confidence || 0}%
 
 ## 🧪 Test Validation Issues
-${readinessResult.testFailureBlockers?.length > 0 ? `
+${readinessResult.testFailureBlockers?.length > 0
+        ? `
 **Test Failures**: ${readinessResult.testValidationResult?.failureCount || 0} failures detected
 **Test Coverage**: ${readinessResult.testValidationResult?.coveragePercentage || 0}% (Required: 80%)
 
 ### Critical Test Failures:
-${readinessResult.testValidationResult?.criticalTestFailures?.map((f) => `- ❌ ${f.testSuite}: ${f.testName}`).join('\n') || 'No critical test failures'}
-` : '✅ All tests passing'}
+${readinessResult.testValidationResult?.criticalTestFailures
+            ?.map((f) => `- ❌ ${f.testSuite}: ${f.testName}`)
+            .join('\n') || 'No critical test failures'}
+`
+        : '✅ All tests passing'}
 
 ## 📊 Deployment History Issues
-${readinessResult.deploymentHistoryBlockers?.length > 0 ? `
+${readinessResult.deploymentHistoryBlockers?.length > 0
+        ? `
 **Success Rate**: ${readinessResult.deploymentHistoryAnalysis?.successRate || 0}% (Required: 80%)
 **Rollback Rate**: ${readinessResult.deploymentHistoryAnalysis?.rollbackRate || 0}% (Threshold: 20%)
 
 ### Recent Failure Patterns:
-${readinessResult.deploymentHistoryAnalysis?.failurePatterns?.map((p) => `- **${p.pattern}**: ${p.frequency} occurrences`).join('\n') || 'No failure patterns detected'}
-` : '✅ Deployment history stable'}
+${readinessResult.deploymentHistoryAnalysis?.failurePatterns
+            ?.map((p) => `- **${p.pattern}**: ${p.frequency} occurrences`)
+            .join('\n') || 'No failure patterns detected'}
+`
+        : '✅ Deployment history stable'}
 
 ## 🚨 Critical Blockers (Must Fix Before Push)
-${readinessResult.criticalBlockers?.map((blocker) => `
+${readinessResult.criticalBlockers
+        ?.map((blocker) => `
 ### ${blocker.category.toUpperCase()}: ${blocker.title}
 - **Impact**: ${blocker.impact}
 - **Resolution Steps**: ${blocker.resolutionSteps?.join(' → ') || 'See deployment readiness tool for details'}
 - **Estimated Time**: ${blocker.estimatedResolutionTime || 'Unknown'}
-`).join('\n') || 'No critical blockers found'}
+`)
+        .join('\n') || 'No critical blockers found'}
 
 ## 📁 Staged Files (${stagedFiles.length} files ready to push)
-${stagedFiles.slice(0, 10).map(file => `- ${file.status}: ${file.path}`).join('\n')}
+${stagedFiles
+        .slice(0, 10)
+        .map(file => `- ${file.status}: ${file.path}`)
+        .join('\n')}
 ${stagedFiles.length > 10 ? `\n... and ${stagedFiles.length - 10} more files` : ''}
 
 ## 🛠️ Required Actions Before Git Push
@@ -885,10 +1073,12 @@ smart_git_push --force-unsafe
 \`\`\`
 
 ## 📋 Deployment Checklist Integration
-${readinessResult.todoTasksCreated?.length > 0 ? `
+${readinessResult.todoTasksCreated?.length > 0
+        ? `
 **Auto-Generated Tasks**: ${readinessResult.todoTasksCreated.length} tasks created
 Use \`manage_todo_v2 --operation get_tasks\` to view blocking tasks.
-` : 'No automatic tasks created'}
+`
+        : 'No automatic tasks created'}
 
 **❌ GIT PUSH BLOCKED UNTIL ALL CRITICAL ISSUES ARE RESOLVED**
 
@@ -910,11 +1100,15 @@ export async function smartGitPushMcpSafe(args) {
     }
     catch (error) {
         const errorResponse = {
-            content: [{
+            content: [
+                {
                     type: 'text',
-                    text: '# Smart Git Push - Error\n\n**Error**: ' + jsonSafeError(error) + '\n\nPlease check your git configuration and try again.'
-                }],
-            isError: true
+                    text: '# Smart Git Push - Error\n\n**Error**: ' +
+                        jsonSafeError(error) +
+                        '\n\nPlease check your git configuration and try again.',
+                },
+            ],
+            isError: true,
         };
         return validateMcpResponse(errorResponse);
     }