mcp-code-context 2.2.0 → 2.4.0

package/dist/src/utils/normalization.js

@@ -0,0 +1,173 @@
+/**
+ * normalization.ts — Code Normalization Utilities
+ *
+ * Centralizes line ending normalization and indentation logic
+ * to eliminate duplication across writer modules.
+ */
+import { TS_INDENT, PHP_INDENT, PYTHON_INDENT } from "./constants.js";
+// ─── Line Ending Normalization ──────────────────────────────────────
+/**
+ * Normalize line endings to LF (\n) for consistent processing.
+ * Handles CRLF (\r\n), CR (\r), and mixed line endings.
+ *
+ * Why: Windows files use CRLF, which breaks brace-counting and line-based
+ * operations. Normalizing to LF ensures consistent behavior across platforms.
+ */
+export function normalizeLineEndings(content) {
+    return content.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+// ─── Indentation Detection ──────────────────────────────────────────
+/**
+ * Extract the leading whitespace from a line.
+ */
+export function getIndent(line) {
+    const match = line.match(/^(\s*)/);
+    return match ? match[1] : "";
+}
+/**
+ * Measure the indentation level of a line (number of spaces/tabs).
+ */
+export function measureIndent(line) {
+    const indent = getIndent(line);
+    // Convert tabs to 4 spaces for measurement
+    return indent.replace(/\t/g, "    ").length;
+}
+/**
+ * Detect the predominant indentation style in a file.
+ * Returns the most common indentation string (e.g., "  ", "    ", "\t").
+ */
+export function detectIndentStyle(content) {
+    const lines = content.split("\n");
+    const indents = new Map();
+    for (const line of lines) {
+        if (line.trim() === "")
+            continue;
+        const indent = getIndent(line);
+        if (indent.length === 0)
+            continue;
+        // Extract the base indent unit (first level of indentation)
+        const match = indent.match(/^(\s+)/);
+        if (match) {
+            const unit = match[1];
+            indents.set(unit, (indents.get(unit) || 0) + 1);
+        }
+    }
+    if (indents.size === 0)
+        return "  "; // Default to 2 spaces
+    // Return the most common indent
+    let maxCount = 0;
+    let commonIndent = "  ";
+    for (const [indent, count] of indents.entries()) {
+        if (count > maxCount) {
+            maxCount = count;
+            commonIndent = indent;
+        }
+    }
+    return commonIndent;
+}
+// ─── Code Reindentation ─────────────────────────────────────────────
+/**
+ * Reindent code to match a target indentation level.
+ * Preserves relative indentation between lines.
+ *
+ * @param code - The code to reindent
+ * @param targetIndent - The base indentation to apply
+ * @param language - Optional language hint for default indent style
+ */
+export function reindentCode(code, targetIndent, language) {
+    // Normalize line endings first
+    code = normalizeLineEndings(code);
+    const lines = code.split("\n");
+    if (lines.length === 0)
+        return code;
+    // Find minimum indentation (excluding empty lines)
+    let minIndent = Infinity;
+    for (const line of lines) {
+        if (line.trim() === "")
+            continue;
+        const indent = measureIndent(line);
+        if (indent < minIndent)
+            minIndent = indent;
+    }
+    if (minIndent === Infinity)
+        minIndent = 0;
+    // Apply target indentation while preserving relative indentation
+    return lines
+        .map((line) => {
+        if (line.trim() === "")
+            return "";
+        const currentIndent = measureIndent(line);
+        const relativeIndent = currentIndent - minIndent;
+        // Calculate how many indent units are needed
+        const indentUnit = getIndentUnit(language);
+        const indentUnitSize = indentUnit.length;
+        const numUnits = Math.floor(relativeIndent / indentUnitSize);
+        return targetIndent + indentUnit.repeat(numUnits) + line.trimStart();
+    })
+        .join("\n");
+}
+/**
+ * Get the standard indentation unit for a language.
+ */
+function getIndentUnit(language) {
+    switch (language) {
+        case "dart":
+        case "typescript":
+            return TS_INDENT;
+        case "php":
+            return PHP_INDENT;
+        case "python":
+            return PYTHON_INDENT;
+        default:
+            return "  "; // Default to 2 spaces
+    }
+}
+/**
+ * Reindent code for Python (indentation-aware language).
+ * Handles Python's strict indentation requirements.
+ */
+export function reindentPython(code, targetIndent) {
+    code = normalizeLineEndings(code);
+    const lines = code.split("\n");
+    if (lines.length === 0)
+        return code;
+    let minIndent = Infinity;
+    for (const line of lines) {
+        if (line.trim() === "")
+            continue;
+        const indent = measureIndent(line);
+        if (indent < minIndent)
+            minIndent = indent;
+    }
+    if (minIndent === Infinity)
+        minIndent = 0;
+    return lines
+        .map((line) => {
+        if (line.trim() === "")
+            return "";
+        const currentIndent = measureIndent(line);
+        const relativeIndent = currentIndent - minIndent;
+        // Python uses 4-space indentation by convention
+        const numLevels = Math.floor(relativeIndent / 4);
+        return targetIndent + PYTHON_INDENT.repeat(numLevels) + line.trimStart();
+    })
+        .join("\n");
+}
+// ─── Whitespace Cleanup ─────────────────────────────────────────────
+/**
+ * Remove excessive blank lines (more than 2 consecutive).
+ */
+export function normalizeBlankLines(content) {
+    return content.replace(/\n{3,}/g, "\n\n");
+}
+/**
+ * Ensure file ends with a single newline (POSIX standard).
+ */
+export function ensureTrailingNewline(content) {
+    if (!content.endsWith("\n")) {
+        return content + "\n";
+    }
+    // Remove multiple trailing newlines
+    return content.replace(/\n+$/, "\n");
+}
+//# sourceMappingURL=normalization.js.map

package/dist/src/utils/normalization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalization.js","sourceRoot":"","sources":["../../../src/utils/normalization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAe,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnF,uEAAuE;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,uEAAuE;AAEvE;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,2CAA2C;IAC3C,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAElC,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IAE3D,gCAAgC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,KAAK,CAAC;YACjB,YAAY,GAAG,MAAM,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,YAAoB,EACpB,QAAmD;IAEnD,+BAA+B;IAC/B,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,mDAAmD;IACnD,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,SAAS;YAAE,SAAS,GAAG,MAAM,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ;QAAE,SAAS,GAAG,CAAC,CAAC;IAE1C,iEAAiE;IACjE,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,CAAC;QAEjD,6CAA6C;QAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC,CAAC;QAE7D,OAAO,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACvE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,QAAmD;IACxE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK;YACR,OAAO,UAAU,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC;QACvB;YACE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IACvC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,YAAoB;IAC/D,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,SAAS;YAAE,SAAS,GAAG,MAAM,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ;QAAE,SAAS,GAAG,CAAC,CAAC;IAE1C,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,CAAC;QAEjD,gDAAgD;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QACjD,OAAO,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3E,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,uEAAuE;AAEvE;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,oCAAoC;IACpC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/src/utils/projectRoot.d.ts

@@ -1,10 +1,17 @@
 /**
- * projectRoot.ts — Project Root Discovery Utility
- *
- * Finds the root directory of a project by looking for common markers.
+ * Secure Project Root Detection
+ * Ensures all file operations are contained within project boundaries
  */
 /**
- * Find the project root by walking up from a file path.
- * Returns undefined if no root marker is found.
+ * Find project root by walking up from a file path
+ * Returns undefined if no root marker found
  */
 export declare function findProjectRoot(filePath: string): string | undefined;
+/**
+ * Validate that a file path is within project boundaries
+ * MANDATORY for all write operations
+ */
+export declare function enforceProjectBoundary(filePath: string, projectRoot: string): {
+    valid: boolean;
+    error?: string;
+};

package/dist/src/utils/projectRoot.js

@@ -1,28 +1,13 @@
 /**
- * projectRoot.ts — Project Root Discovery Utility
- *
- * Finds the root directory of a project by looking for common markers.
+ * Secure Project Root Detection
+ * Ensures all file operations are contained within project boundaries
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-const ROOT_MARKERS = [
-    "package.json",
-    ".git",
-    "pyproject.toml",
-    "setup.py",
-    "Cargo.toml",
-    "go.mod",
-    "pom.xml",
-    "build.gradle",
-    "CMakeLists.txt",
-    ".gitignore",
-    "Gemfile",
-    "composer.json",
-    "pubspec.yaml",
-];
+const ROOT_MARKERS = ["package.json", ".git", "pubspec.yaml", "pyproject.toml", "Cargo.toml"];
 /**
- * Find the project root by walking up from a file path.
- * Returns undefined if no root marker is found.
+ * Find project root by walking up from a file path
+ * Returns undefined if no root marker found
  */
 export function findProjectRoot(filePath) {
     let current = path.dirname(path.resolve(filePath));
@@ -37,4 +22,21 @@ export function findProjectRoot(filePath) {
     }
     return undefined;
 }
+/**
+ * Validate that a file path is within project boundaries
+ * MANDATORY for all write operations
+ */
+export function enforceProjectBoundary(filePath, projectRoot) {
+    const normalized = path.resolve(filePath);
+    const normalizedRoot = path.resolve(projectRoot);
+    const relative = path.relative(normalizedRoot, normalized);
+    // If relative path starts with .., it's outside the project root
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        return {
+            valid: false,
+            error: `Security: Path outside project root. File: ${normalized}, Root: ${normalizedRoot}`
+        };
+    }
+    return { valid: true };
+}
 //# sourceMappingURL=projectRoot.js.map

package/dist/src/utils/projectRoot.js.map

@@ -1 +1 @@
-{"version":3,"file":"projectRoot.js","sourceRoot":"","sources":["../../../src/utils/projectRoot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,MAAM;IACN,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,SAAS;IACT,eAAe;IACf,cAAc;CACf,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IAEtC,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"projectRoot.js","sourceRoot":"","sources":["../../../src/utils/projectRoot.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,YAAY,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;AAE9F;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IAEtC,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,WAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAE3D,iEAAiE;IACjE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,8CAA8C,UAAU,WAAW,cAAc,EAAE;SAC3F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/src/utils/secureValidation.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Secure validation helper for write operations
+ * Enforces project boundary checks
+ */
+export interface SecureValidationResult {
+    valid: boolean;
+    resolvedPath?: string;
+    projectRoot?: string;
+    error?: string;
+}
+/**
+ * Validate file path with mandatory project boundary enforcement
+ * Use this for ALL write operations
+ */
+export declare function validateFilePathSecure(filePath: string): SecureValidationResult;

package/dist/src/utils/secureValidation.js

@@ -0,0 +1,41 @@
+/**
+ * Secure validation helper for write operations
+ * Enforces project boundary checks
+ */
+import { validateFilePath } from "./validation.js";
+import { findProjectRoot, enforceProjectBoundary } from "./projectRoot.js";
+/**
+ * Validate file path with mandatory project boundary enforcement
+ * Use this for ALL write operations
+ */
+export function validateFilePathSecure(filePath) {
+    const validation = validateFilePath(filePath);
+    if (!validation.valid) {
+        return {
+            valid: false,
+            error: validation.error
+        };
+    }
+    const resolvedPath = validation.normalizedPath;
+    // SECURITY: Enforce project boundary for write operations
+    const projectRoot = findProjectRoot(resolvedPath);
+    if (!projectRoot) {
+        return {
+            valid: false,
+            error: "Cannot determine project root. Ensure file is within a valid project."
+        };
+    }
+    const boundaryCheck = enforceProjectBoundary(resolvedPath, projectRoot);
+    if (!boundaryCheck.valid) {
+        return {
+            valid: false,
+            error: boundaryCheck.error
+        };
+    }
+    return {
+        valid: true,
+        resolvedPath,
+        projectRoot
+    };
+}
+//# sourceMappingURL=secureValidation.js.map

package/dist/src/utils/secureValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureValidation.js","sourceRoot":"","sources":["../../../src/utils/secureValidation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAS3E;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,cAAe,CAAC;IAEhD,0DAA0D;IAC1D,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,uEAAuE;SAC/E,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACxE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,aAAa,CAAC,KAAK;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,YAAY;QACZ,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/src/utils/transactionManager.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Transaction Manager - Atomic Multi-File Operations
+ * Ensures all-or-nothing writes with automatic rollback on failure
+ */
+export interface FileChange {
+    filePath: string;
+    newContent: string;
+}
+export declare class TransactionManager {
+    private staging;
+    private backedUpFiles;
+    /**
+     * Stage a file change for commit
+     */
+    stage(filePath: string, newContent: string): void;
+    /**
+     * Stage multiple file changes
+     */
+    stageMultiple(changes: FileChange[]): void;
+    /**
+     * Commit all staged changes atomically
+     * Creates backups first, then writes all files
+     * Rolls back automatically on any failure
+     */
+    commit(): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    /**
+     * Rollback all changes by restoring from backups
+     */
+    rollback(): Promise<void>;
+    /**
+     * Clear staging area and backup tracking
+     */
+    clear(): void;
+    /**
+     * Get number of staged changes
+     */
+    get stagedCount(): number;
+    /**
+     * Get list of staged file paths
+     */
+    getStagedFiles(): string[];
+}

package/dist/src/utils/transactionManager.js

@@ -0,0 +1,102 @@
+/**
+ * Transaction Manager - Atomic Multi-File Operations
+ * Ensures all-or-nothing writes with automatic rollback on failure
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { createBackup, restoreBackup } from "./backupManager.js";
+export class TransactionManager {
+    staging = new Map();
+    backedUpFiles = new Set();
+    /**
+     * Stage a file change for commit
+     */
+    stage(filePath, newContent) {
+        const resolved = path.resolve(filePath);
+        this.staging.set(resolved, newContent);
+    }
+    /**
+     * Stage multiple file changes
+     */
+    stageMultiple(changes) {
+        for (const change of changes) {
+            this.stage(change.filePath, change.newContent);
+        }
+    }
+    /**
+     * Commit all staged changes atomically
+     * Creates backups first, then writes all files
+     * Rolls back automatically on any failure
+     */
+    async commit() {
+        if (this.staging.size === 0) {
+            return { success: true };
+        }
+        // Phase 1: Create backups
+        try {
+            for (const [filePath] of this.staging) {
+                createBackup(filePath);
+                this.backedUpFiles.add(filePath);
+            }
+        }
+        catch (error) {
+            await this.rollback();
+            return {
+                success: false,
+                error: `Backup failed: ${error instanceof Error ? error.message : String(error)}`
+            };
+        }
+        // Phase 2: Write all files
+        try {
+            for (const [filePath, content] of this.staging) {
+                await fs.promises.writeFile(filePath, content, "utf-8");
+            }
+        }
+        catch (error) {
+            await this.rollback();
+            return {
+                success: false,
+                error: `Write failed: ${error instanceof Error ? error.message : String(error)}`
+            };
+        }
+        // Phase 3: Validate (optional syntax check could go here)
+        // For now, we trust the write succeeded
+        this.clear();
+        return { success: true };
+    }
+    /**
+     * Rollback all changes by restoring from backups
+     */
+    async rollback() {
+        for (const filePath of this.backedUpFiles) {
+            try {
+                restoreBackup(filePath);
+            }
+            catch (error) {
+                // Log but continue rolling back other files
+                console.error(`Failed to restore ${filePath}:`, error);
+            }
+        }
+        this.clear();
+    }
+    /**
+     * Clear staging area and backup tracking
+     */
+    clear() {
+        this.staging.clear();
+        this.backedUpFiles.clear();
+    }
+    /**
+     * Get number of staged changes
+     */
+    get stagedCount() {
+        return this.staging.size;
+    }
+    /**
+     * Get list of staged file paths
+     */
+    getStagedFiles() {
+        return Array.from(this.staging.keys());
+    }
+}
+//# sourceMappingURL=transactionManager.js.map

package/dist/src/utils/transactionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactionManager.js","sourceRoot":"","sources":["../../../src/utils/transactionManager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAOjE,MAAM,OAAO,kBAAkB;IACrB,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IACzC,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE/C;;OAEG;IACH,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAqB;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAClF,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACjF,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,wCAAwC;QAExC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4CAA4C;gBAC5C,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/src/utils/validation.d.ts

@@ -0,0 +1,87 @@
+/**
+ * validation.ts — Input Validation & Security
+ *
+ * Centralized validation logic to prevent security vulnerabilities:
+ * - Path traversal attacks
+ * - ReDoS (Regular Expression Denial of Service)
+ * - Injection attacks
+ * - Resource exhaustion
+ */
+export interface PathValidationResult {
+    valid: boolean;
+    error?: string;
+    normalizedPath?: string;
+}
+/**
+ * Validate that a file path is safe and within allowed boundaries.
+ * Prevents path traversal attacks and access to sensitive system files.
+ *
+ * @param filePath - The path to validate
+ * @param projectRoot - Optional project root to enforce containment
+ */
+export declare function validateFilePath(filePath: string, projectRoot?: string): PathValidationResult;
+/**
+ * Validate that a directory path is safe for operations.
+ */
+export declare function validateDirectoryPath(dirPath: string, projectRoot?: string): PathValidationResult;
+export interface SymbolValidationResult {
+    valid: boolean;
+    error?: string;
+}
+/**
+ * Validate a symbol name to prevent ReDoS and injection attacks.
+ *
+ * @param symbolName - The symbol name to validate
+ */
+export declare function validateSymbolName(symbolName: string): SymbolValidationResult;
+export interface RegexValidationResult {
+    valid: boolean;
+    error?: string;
+    safeRegex?: RegExp;
+}
+/**
+ * Validate and sanitize a regex pattern to prevent ReDoS attacks.
+ *
+ * @param pattern - The regex pattern to validate
+ * @param flags - Optional regex flags
+ */
+export declare function validateRegexPattern(pattern: string, flags?: string): RegexValidationResult;
+/**
+ * Create a safe regex with timeout protection.
+ * Uses a simple timeout mechanism to prevent long-running regex operations.
+ *
+ * @param pattern - The regex pattern
+ * @param flags - Optional regex flags
+ * @param timeoutMs - Timeout in milliseconds (default: 1000ms)
+ */
+export declare function createSafeRegex(pattern: string, flags?: string, timeoutMs?: number): RegExp;
+export interface FileSizeValidationResult {
+    valid: boolean;
+    error?: string;
+    size?: number;
+}
+/**
+ * Validate that a file is not too large to process safely.
+ *
+ * @param filePath - Path to the file
+ */
+export declare function validateFileSize(filePath: string): FileSizeValidationResult;
+/**
+ * Check if file content contains null bytes (likely binary).
+ */
+export declare function isBinaryContent(content: string): boolean;
+/**
+ * Validate that file content is safe to process.
+ */
+export declare function validateFileContent(content: string): SymbolValidationResult;
+/**
+ * Validate multiple file paths at once.
+ * Returns only valid paths and collects errors.
+ */
+export declare function validateFilePaths(filePaths: string[], projectRoot?: string): {
+    validPaths: string[];
+    errors: Array<{
+        path: string;
+        error: string;
+    }>;
+};