mcp-code-context 2.1.3 → 2.3.1

package/dist/src/utils/constants.js

@@ -0,0 +1,112 @@
+/**
+ * constants.ts — Centralized Configuration Constants
+ *
+ * All magic numbers, file extensions, and configuration values
+ * are defined here to eliminate hardcoding throughout the codebase.
+ */
+// ─── File Extensions ────────────────────────────────────────────────
+/** Extensions considered source code for semantic analysis */
+export const SOURCE_EXTENSIONS = new Set([
+    ".ts", ".tsx", ".js", ".jsx", ".mts", ".mjs", ".cts", ".cjs",
+    ".py", ".pyi",
+    ".json", ".yaml", ".yml", ".toml",
+    ".md", ".txt",
+    ".css", ".scss", ".less",
+    ".html", ".vue", ".svelte",
+    ".rs", ".go", ".java", ".kt", ".dart",
+    ".c", ".cpp", ".h", ".hpp",
+    ".rb", ".php", ".swift",
+    ".sh", ".bash", ".zsh",
+    ".sql",
+    ".graphql", ".gql",
+    ".proto",
+    ".dockerfile",
+]);
+/** Extensions eligible for import/dependency analysis */
+export const IMPORTABLE_EXTENSIONS = new Set([
+    ".ts", ".tsx", ".js", ".jsx", ".mts", ".mjs", ".cts", ".cjs",
+    ".py", ".pyi",
+    ".php", ".phtml",
+    ".dart",
+    ".vue", ".svelte",
+]);
+/** Extensions that support surgical AST-based editing */
+export const WRITABLE_EXTENSIONS = new Set([
+    ".ts", ".tsx", ".js", ".jsx", ".mts", ".mjs", ".cts", ".cjs",
+    ".php", ".phtml",
+    ".dart",
+    ".py", ".pyi",
+]);
+// ─── Resource Limits ────────────────────────────────────────────────
+/** Maximum files to process in get_semantic_repo_map to prevent timeout */
+export const MAX_FILES_FOR_REPO_MAP = 500;
+/** Maximum file size in bytes (10MB) to prevent memory issues */
+export const MAX_FILE_SIZE_BYTES = 10 * 1024 * 1024;
+/** Maximum symbol name length for fuzzy matching (prevent ReDoS) */
+export const MAX_SYMBOL_NAME_LENGTH = 1000;
+/** Maximum number of backups to keep per file */
+export const MAX_BACKUP_VERSIONS = 5;
+/** Confirmation token TTL in milliseconds (5 minutes) */
+export const CONFIRMATION_TOKEN_TTL_MS = 5 * 60 * 1000;
+/** Maximum entries in confirmation cache before cleanup */
+export const MAX_CONFIRMATION_CACHE_SIZE = 100;
+/** Maximum results to return from code pattern search */
+export const MAX_SEARCH_RESULTS = 50;
+/** Default context lines for code search */
+export const DEFAULT_CONTEXT_LINES = 3;
+// ─── Indentation ────────────────────────────────────────────────────
+/** Default indentation for Dart (2 spaces per Dart style guide) */
+export const DART_INDENT = "  ";
+/** Default indentation for TypeScript/JavaScript */
+export const TS_INDENT = "  ";
+/** Default indentation for PHP (4 spaces per PSR-12) */
+export const PHP_INDENT = "    ";
+/** Default indentation for Python (4 spaces per PEP 8) */
+export const PYTHON_INDENT = "    ";
+// ─── Project Root Markers ───────────────────────────────────────────
+/** Files/directories that indicate a project root */
+export const PROJECT_ROOT_MARKERS = [
+    "package.json",
+    ".git",
+    "pyproject.toml",
+    "setup.py",
+    "Cargo.toml",
+    "go.mod",
+    "pom.xml",
+    "build.gradle",
+    "CMakeLists.txt",
+    ".gitignore",
+    "Gemfile",
+    "composer.json",
+    "pubspec.yaml",
+];
+// ─── Directories to Always Ignore ───────────────────────────────────
+/** Directories that should always be excluded from analysis */
+export const ALWAYS_IGNORE_DIRS = [
+    "node_modules",
+    "dist",
+    "build",
+    "out",
+    "vendor",
+    ".git",
+    ".svn",
+    ".hg",
+    "__pycache__",
+    ".pytest_cache",
+    ".mypy_cache",
+    "coverage",
+    ".next",
+    ".nuxt",
+    "target",
+    "bin",
+    "obj",
+];
+// ─── Server Metadata ────────────────────────────────────────────────
+export const SERVER_NAME = "mcp-code-context";
+export const SERVER_VERSION = "2.3.1"; // Bumped for fix
+// ─── Validation Patterns ────────────────────────────────────────────
+/** Regex to detect potentially dangerous patterns in user input */
+export const DANGEROUS_PATTERN_REGEX = /(\.\.|\/etc\/|\/root\/|C:\\Windows|%SYSTEMROOT%)/i;
+/** Maximum regex pattern length to prevent ReDoS */
+export const MAX_REGEX_PATTERN_LENGTH = 500;
+//# sourceMappingURL=constants.js.map

package/dist/src/utils/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/utils/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,uEAAuE;AAEvE,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5D,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;IACjC,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,OAAO,EAAE,OAAO;IACxB,OAAO,EAAE,MAAM,EAAE,SAAS;IAC1B,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;IACrC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAC1B,KAAK,EAAE,MAAM,EAAE,QAAQ;IACvB,KAAK,EAAE,OAAO,EAAE,MAAM;IACtB,MAAM;IACN,UAAU,EAAE,MAAM;IAClB,QAAQ;IACR,aAAa;CACd,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAC3C,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5D,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,QAAQ;IAChB,OAAO;IACP,MAAM,EAAE,SAAS;CAClB,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACzC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5D,MAAM,EAAE,QAAQ;IAChB,OAAO;IACP,KAAK,EAAE,MAAM;CACd,CAAC,CAAC;AAEH,uEAAuE;AAEvE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,yDAAyD;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAE/C,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,uEAAuE;AAEvE,mEAAmE;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC;AAEhC,oDAAoD;AACpD,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAE9B,wDAAwD;AACxD,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AAEjC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC,uEAAuE;AAEvE,qDAAqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,cAAc;IACd,MAAM;IACN,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,SAAS;IACT,eAAe;IACf,cAAc;CACf,CAAC;AAEF,uEAAuE;AAEvE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,cAAc;IACd,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,KAAK;IACL,aAAa;IACb,eAAe;IACf,aAAa;IACb,UAAU;IACV,OAAO;IACP,OAAO;IACP,QAAQ;IACR,KAAK;IACL,KAAK;CACN,CAAC;AAEF,uEAAuE;AAEvE,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,iBAAiB;AAExD,uEAAuE;AAEvE,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,mDAAmD,CAAC;AAE3F,oDAAoD;AACpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC"}

package/dist/src/utils/ignoreManager.d.ts

@@ -18,5 +18,13 @@ export declare class IgnoreManager {
      * non-ignored files.
      */
     walkDirectory(dir?: string): string[];
+    /**
+       * Async version of walkDirectory - non-blocking for large repos
+       */
+    walkDirectoryAsync(dir?: string): Promise<string[]>;
+    /**
+     * Async recursive walk implementation
+     */
+    private walkAsync;
     private walk;
 }

package/dist/src/utils/ignoreManager.js

@@ -94,6 +94,55 @@ export class IgnoreManager {
         this.walk(baseDir, files);
         return files;
     }
+    /**
+       * Async version of walkDirectory - non-blocking for large repos
+       */
+    async walkDirectoryAsync(dir) {
+        const baseDir = dir ? path.resolve(dir) : this.rootDir;
+        const files = [];
+        await this.walkAsync(baseDir, files);
+        return files;
+    }
+    /**
+     * Async recursive walk implementation
+     */
+    async walkAsync(currentDir, collected) {
+        let entries;
+        try {
+            entries = await fs.promises.readdir(currentDir, { withFileTypes: true });
+        }
+        catch {
+            return; // Permission denied, broken symlink, etc.
+        }
+        for (const entry of entries) {
+            const fullPath = path.join(currentDir, entry.name);
+            const relativePath = path
+                .relative(this.rootDir, fullPath)
+                .replace(/\\/g, "/");
+            // Check ignore rules
+            if (this.isIgnored(relativePath))
+                continue;
+            if (entry.isDirectory()) {
+                // Also test with trailing slash for directory-level patterns
+                if (this.isIgnored(relativePath + "/"))
+                    continue;
+                await this.walkAsync(fullPath, collected);
+            }
+            else if (entry.isFile()) {
+                // Skip files that are too large
+                try {
+                    const stat = await fs.promises.stat(fullPath);
+                    if (stat.size > MAX_FILE_SIZE_BYTES)
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+                collected.push(fullPath);
+            }
+            // Symlinks and other entries are silently skipped
+        }
+    }
     walk(currentDir, collected) {
         let entries;
         try {

package/dist/src/utils/ignoreManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"ignoreManager.js","sourceRoot":"","sources":["../../../src/utils/ignoreManager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,kEAAkE;AAClE,+DAA+D;AAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,MAAM,GAA+C,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE7E,iFAAiF;AACjF,MAAM,aAAa,GAAa;IAC9B,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,aAAa;IACb,eAAe;IACf,UAAU;IACV,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,OAAO;IACP,MAAM;IACN,KAAK;IACL,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,mBAAmB;IACnB,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,WAAW;IACX,OAAO;IACP,YAAY;IACZ,aAAa;CACd,CAAC;AAEF,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEvC,MAAM,OAAO,aAAa;IAChB,EAAE,CAAS;IACX,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;QAEnB,+BAA+B;QAC/B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE3B,kBAAkB;QAClB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAE3D,gDAAgD;QAChD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,QAAgB;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAErC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,OAAO;iBACrB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAE9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,kDAAkD;IAC3C,SAAS,CAAC,YAAoB;QACnC,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACI,aAAa,CAAC,GAAY;QAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,IAAI,CAAC,UAAkB,EAAE,SAAmB;QAClD,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,0CAA0C;QACpD,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,IAAI;iBACtB,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;iBAChC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAEvB,qBAAqB;YACrB,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAAE,SAAS;YAE3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,6DAA6D;gBAC7D,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,GAAG,CAAC;oBAAE,SAAS;gBACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,gCAAgC;gBAChC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB;wBAAE,SAAS;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YACD,kDAAkD;QACpD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"ignoreManager.js","sourceRoot":"","sources":["../../../src/utils/ignoreManager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,kEAAkE;AAClE,+DAA+D;AAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,MAAM,GAA+C,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE7E,iFAAiF;AACjF,MAAM,aAAa,GAAa;IAC9B,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,aAAa;IACb,eAAe;IACf,UAAU;IACV,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,OAAO;IACP,MAAM;IACN,KAAK;IACL,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,mBAAmB;IACnB,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,WAAW;IACX,OAAO;IACP,YAAY;IACZ,aAAa;CACd,CAAC;AAEF,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEvC,MAAM,OAAO,aAAa;IAChB,EAAE,CAAS;IACX,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;QAEnB,+BAA+B;QAC/B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE3B,kBAAkB;QAClB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAE3D,gDAAgD;QAChD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,QAAgB;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAErC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,OAAO;iBACrB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAE9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,kDAAkD;IAC3C,SAAS,CAAC,YAAoB;QACnC,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACI,aAAa,CAAC,GAAY;QAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAEH;;SAEK;IACI,KAAK,CAAC,kBAAkB,CAAC,GAAY;QAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,SAAmB;QAC7D,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,0CAA0C;QACpD,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,IAAI;iBACtB,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;iBAChC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAEvB,qBAAqB;YACrB,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAAE,SAAS;YAE3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,6DAA6D;gBAC7D,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,GAAG,CAAC;oBAAE,SAAS;gBACjD,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,gCAAgC;gBAChC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC9C,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB;wBAAE,SAAS;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YACD,kDAAkD;QACpD,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,UAAkB,EAAE,SAAmB;QAClD,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,0CAA0C;QACpD,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,IAAI;iBACtB,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;iBAChC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAEvB,qBAAqB;YACrB,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAAE,SAAS;YAE3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,6DAA6D;gBAC7D,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,GAAG,CAAC;oBAAE,SAAS;gBACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,gCAAgC;gBAChC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB;wBAAE,SAAS;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YACD,kDAAkD;QACpD,CAAC;IACH,CAAC;CACF"}

package/dist/src/utils/normalization.d.ts

@@ -0,0 +1,49 @@
+/**
+ * normalization.ts — Code Normalization Utilities
+ *
+ * Centralizes line ending normalization and indentation logic
+ * to eliminate duplication across writer modules.
+ */
+/**
+ * Normalize line endings to LF (\n) for consistent processing.
+ * Handles CRLF (\r\n), CR (\r), and mixed line endings.
+ *
+ * Why: Windows files use CRLF, which breaks brace-counting and line-based
+ * operations. Normalizing to LF ensures consistent behavior across platforms.
+ */
+export declare function normalizeLineEndings(content: string): string;
+/**
+ * Extract the leading whitespace from a line.
+ */
+export declare function getIndent(line: string): string;
+/**
+ * Measure the indentation level of a line (number of spaces/tabs).
+ */
+export declare function measureIndent(line: string): number;
+/**
+ * Detect the predominant indentation style in a file.
+ * Returns the most common indentation string (e.g., "  ", "    ", "\t").
+ */
+export declare function detectIndentStyle(content: string): string;
+/**
+ * Reindent code to match a target indentation level.
+ * Preserves relative indentation between lines.
+ *
+ * @param code - The code to reindent
+ * @param targetIndent - The base indentation to apply
+ * @param language - Optional language hint for default indent style
+ */
+export declare function reindentCode(code: string, targetIndent: string, language?: "dart" | "typescript" | "php" | "python"): string;
+/**
+ * Reindent code for Python (indentation-aware language).
+ * Handles Python's strict indentation requirements.
+ */
+export declare function reindentPython(code: string, targetIndent: string): string;
+/**
+ * Remove excessive blank lines (more than 2 consecutive).
+ */
+export declare function normalizeBlankLines(content: string): string;
+/**
+ * Ensure file ends with a single newline (POSIX standard).
+ */
+export declare function ensureTrailingNewline(content: string): string;

package/dist/src/utils/normalization.js

@@ -0,0 +1,173 @@
+/**
+ * normalization.ts — Code Normalization Utilities
+ *
+ * Centralizes line ending normalization and indentation logic
+ * to eliminate duplication across writer modules.
+ */
+import { TS_INDENT, PHP_INDENT, PYTHON_INDENT } from "./constants.js";
+// ─── Line Ending Normalization ──────────────────────────────────────
+/**
+ * Normalize line endings to LF (\n) for consistent processing.
+ * Handles CRLF (\r\n), CR (\r), and mixed line endings.
+ *
+ * Why: Windows files use CRLF, which breaks brace-counting and line-based
+ * operations. Normalizing to LF ensures consistent behavior across platforms.
+ */
+export function normalizeLineEndings(content) {
+    return content.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+// ─── Indentation Detection ──────────────────────────────────────────
+/**
+ * Extract the leading whitespace from a line.
+ */
+export function getIndent(line) {
+    const match = line.match(/^(\s*)/);
+    return match ? match[1] : "";
+}
+/**
+ * Measure the indentation level of a line (number of spaces/tabs).
+ */
+export function measureIndent(line) {
+    const indent = getIndent(line);
+    // Convert tabs to 4 spaces for measurement
+    return indent.replace(/\t/g, "    ").length;
+}
+/**
+ * Detect the predominant indentation style in a file.
+ * Returns the most common indentation string (e.g., "  ", "    ", "\t").
+ */
+export function detectIndentStyle(content) {
+    const lines = content.split("\n");
+    const indents = new Map();
+    for (const line of lines) {
+        if (line.trim() === "")
+            continue;
+        const indent = getIndent(line);
+        if (indent.length === 0)
+            continue;
+        // Extract the base indent unit (first level of indentation)
+        const match = indent.match(/^(\s+)/);
+        if (match) {
+            const unit = match[1];
+            indents.set(unit, (indents.get(unit) || 0) + 1);
+        }
+    }
+    if (indents.size === 0)
+        return "  "; // Default to 2 spaces
+    // Return the most common indent
+    let maxCount = 0;
+    let commonIndent = "  ";
+    for (const [indent, count] of indents.entries()) {
+        if (count > maxCount) {
+            maxCount = count;
+            commonIndent = indent;
+        }
+    }
+    return commonIndent;
+}
+// ─── Code Reindentation ─────────────────────────────────────────────
+/**
+ * Reindent code to match a target indentation level.
+ * Preserves relative indentation between lines.
+ *
+ * @param code - The code to reindent
+ * @param targetIndent - The base indentation to apply
+ * @param language - Optional language hint for default indent style
+ */
+export function reindentCode(code, targetIndent, language) {
+    // Normalize line endings first
+    code = normalizeLineEndings(code);
+    const lines = code.split("\n");
+    if (lines.length === 0)
+        return code;
+    // Find minimum indentation (excluding empty lines)
+    let minIndent = Infinity;
+    for (const line of lines) {
+        if (line.trim() === "")
+            continue;
+        const indent = measureIndent(line);
+        if (indent < minIndent)
+            minIndent = indent;
+    }
+    if (minIndent === Infinity)
+        minIndent = 0;
+    // Apply target indentation while preserving relative indentation
+    return lines
+        .map((line) => {
+        if (line.trim() === "")
+            return "";
+        const currentIndent = measureIndent(line);
+        const relativeIndent = currentIndent - minIndent;
+        // Calculate how many indent units are needed
+        const indentUnit = getIndentUnit(language);
+        const indentUnitSize = indentUnit.length;
+        const numUnits = Math.floor(relativeIndent / indentUnitSize);
+        return targetIndent + indentUnit.repeat(numUnits) + line.trimStart();
+    })
+        .join("\n");
+}
+/**
+ * Get the standard indentation unit for a language.
+ */
+function getIndentUnit(language) {
+    switch (language) {
+        case "dart":
+        case "typescript":
+            return TS_INDENT;
+        case "php":
+            return PHP_INDENT;
+        case "python":
+            return PYTHON_INDENT;
+        default:
+            return "  "; // Default to 2 spaces
+    }
+}
+/**
+ * Reindent code for Python (indentation-aware language).
+ * Handles Python's strict indentation requirements.
+ */
+export function reindentPython(code, targetIndent) {
+    code = normalizeLineEndings(code);
+    const lines = code.split("\n");
+    if (lines.length === 0)
+        return code;
+    let minIndent = Infinity;
+    for (const line of lines) {
+        if (line.trim() === "")
+            continue;
+        const indent = measureIndent(line);
+        if (indent < minIndent)
+            minIndent = indent;
+    }
+    if (minIndent === Infinity)
+        minIndent = 0;
+    return lines
+        .map((line) => {
+        if (line.trim() === "")
+            return "";
+        const currentIndent = measureIndent(line);
+        const relativeIndent = currentIndent - minIndent;
+        // Python uses 4-space indentation by convention
+        const numLevels = Math.floor(relativeIndent / 4);
+        return targetIndent + PYTHON_INDENT.repeat(numLevels) + line.trimStart();
+    })
+        .join("\n");
+}
+// ─── Whitespace Cleanup ─────────────────────────────────────────────
+/**
+ * Remove excessive blank lines (more than 2 consecutive).
+ */
+export function normalizeBlankLines(content) {
+    return content.replace(/\n{3,}/g, "\n\n");
+}
+/**
+ * Ensure file ends with a single newline (POSIX standard).
+ */
+export function ensureTrailingNewline(content) {
+    if (!content.endsWith("\n")) {
+        return content + "\n";
+    }
+    // Remove multiple trailing newlines
+    return content.replace(/\n+$/, "\n");
+}
+//# sourceMappingURL=normalization.js.map

package/dist/src/utils/normalization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalization.js","sourceRoot":"","sources":["../../../src/utils/normalization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAe,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnF,uEAAuE;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,uEAAuE;AAEvE;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,2CAA2C;IAC3C,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAElC,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IAE3D,gCAAgC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,KAAK,CAAC;YACjB,YAAY,GAAG,MAAM,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,YAAoB,EACpB,QAAmD;IAEnD,+BAA+B;IAC/B,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,mDAAmD;IACnD,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,SAAS;YAAE,SAAS,GAAG,MAAM,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ;QAAE,SAAS,GAAG,CAAC,CAAC;IAE1C,iEAAiE;IACjE,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,CAAC;QAEjD,6CAA6C;QAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC,CAAC;QAE7D,OAAO,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACvE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,QAAmD;IACxE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK;YACR,OAAO,UAAU,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC;QACvB;YACE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IACvC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,YAAoB;IAC/D,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,SAAS;YAAE,SAAS,GAAG,MAAM,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ;QAAE,SAAS,GAAG,CAAC,CAAC;IAE1C,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,CAAC;QAEjD,gDAAgD;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QACjD,OAAO,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3E,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,uEAAuE;AAEvE;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,oCAAoC;IACpC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/src/utils/projectRoot.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Secure Project Root Detection
+ * Ensures all file operations are contained within project boundaries
+ */
+/**
+ * Find project root by walking up from a file path
+ * Returns undefined if no root marker found
+ */
+export declare function findProjectRoot(filePath: string): string | undefined;
+/**
+ * Validate that a file path is within project boundaries
+ * MANDATORY for all write operations
+ */
+export declare function enforceProjectBoundary(filePath: string, projectRoot: string): {
+    valid: boolean;
+    error?: string;
+};

package/dist/src/utils/projectRoot.js

@@ -0,0 +1,42 @@
+/**
+ * Secure Project Root Detection
+ * Ensures all file operations are contained within project boundaries
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+const ROOT_MARKERS = ["package.json", ".git", "pubspec.yaml", "pyproject.toml", "Cargo.toml"];
+/**
+ * Find project root by walking up from a file path
+ * Returns undefined if no root marker found
+ */
+export function findProjectRoot(filePath) {
+    let current = path.dirname(path.resolve(filePath));
+    const root = path.parse(current).root;
+    while (current !== root) {
+        for (const marker of ROOT_MARKERS) {
+            if (fs.existsSync(path.join(current, marker))) {
+                return current;
+            }
+        }
+        current = path.dirname(current);
+    }
+    return undefined;
+}
+/**
+ * Validate that a file path is within project boundaries
+ * MANDATORY for all write operations
+ */
+export function enforceProjectBoundary(filePath, projectRoot) {
+    const normalized = path.resolve(filePath);
+    const normalizedRoot = path.resolve(projectRoot);
+    const relative = path.relative(normalizedRoot, normalized);
+    // If relative path starts with .., it's outside the project root
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        return {
+            valid: false,
+            error: `Security: Path outside project root. File: ${normalized}, Root: ${normalizedRoot}`
+        };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=projectRoot.js.map

package/dist/src/utils/projectRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectRoot.js","sourceRoot":"","sources":["../../../src/utils/projectRoot.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,YAAY,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;AAE9F;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IAEtC,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,WAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAE3D,iEAAiE;IACjE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,8CAA8C,UAAU,WAAW,cAAc,EAAE;SAC3F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/src/utils/secureValidation.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Secure validation helper for write operations
+ * Enforces project boundary checks
+ */
+export interface SecureValidationResult {
+    valid: boolean;
+    resolvedPath?: string;
+    projectRoot?: string;
+    error?: string;
+}
+/**
+ * Validate file path with mandatory project boundary enforcement
+ * Use this for ALL write operations
+ */
+export declare function validateFilePathSecure(filePath: string): SecureValidationResult;

package/dist/src/utils/secureValidation.js

@@ -0,0 +1,41 @@
+/**
+ * Secure validation helper for write operations
+ * Enforces project boundary checks
+ */
+import { validateFilePath } from "./validation.js";
+import { findProjectRoot, enforceProjectBoundary } from "./projectRoot.js";
+/**
+ * Validate file path with mandatory project boundary enforcement
+ * Use this for ALL write operations
+ */
+export function validateFilePathSecure(filePath) {
+    const validation = validateFilePath(filePath);
+    if (!validation.valid) {
+        return {
+            valid: false,
+            error: validation.error
+        };
+    }
+    const resolvedPath = validation.normalizedPath;
+    // SECURITY: Enforce project boundary for write operations
+    const projectRoot = findProjectRoot(resolvedPath);
+    if (!projectRoot) {
+        return {
+            valid: false,
+            error: "Cannot determine project root. Ensure file is within a valid project."
+        };
+    }
+    const boundaryCheck = enforceProjectBoundary(resolvedPath, projectRoot);
+    if (!boundaryCheck.valid) {
+        return {
+            valid: false,
+            error: boundaryCheck.error
+        };
+    }
+    return {
+        valid: true,
+        resolvedPath,
+        projectRoot
+    };
+}
+//# sourceMappingURL=secureValidation.js.map

package/dist/src/utils/secureValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureValidation.js","sourceRoot":"","sources":["../../../src/utils/secureValidation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAS3E;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,cAAe,CAAC;IAEhD,0DAA0D;IAC1D,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,uEAAuE;SAC/E,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACxE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,aAAa,CAAC,KAAK;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,YAAY;QACZ,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/src/utils/transactionManager.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Transaction Manager - Atomic Multi-File Operations
+ * Ensures all-or-nothing writes with automatic rollback on failure
+ */
+export interface FileChange {
+    filePath: string;
+    newContent: string;
+}
+export declare class TransactionManager {
+    private staging;
+    private backedUpFiles;
+    /**
+     * Stage a file change for commit
+     */
+    stage(filePath: string, newContent: string): void;
+    /**
+     * Stage multiple file changes
+     */
+    stageMultiple(changes: FileChange[]): void;
+    /**
+     * Commit all staged changes atomically
+     * Creates backups first, then writes all files
+     * Rolls back automatically on any failure
+     */
+    commit(): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    /**
+     * Rollback all changes by restoring from backups
+     */
+    rollback(): Promise<void>;
+    /**
+     * Clear staging area and backup tracking
+     */
+    clear(): void;
+    /**
+     * Get number of staged changes
+     */
+    get stagedCount(): number;
+    /**
+     * Get list of staged file paths
+     */
+    getStagedFiles(): string[];
+}