mcp-coordinator 0.6.0 → 0.6.1

package/dist/src/http/handle-rest.js

@@ -3,6 +3,7 @@ import { getDb } from "../database.js";
 import { runCommonAnnounceFlow } from "../announce-workflow.js";
 import { canResetDb } from "../reset-guard.js";
 import { parseBody, json } from "./utils.js";
+import { normalizePath } from "../path-normalize.js";
 export async function handleRest(req, res, ctx) {
     const { services, httpLog, authEnabled, getRunConfig, setRunConfig } = ctx;
     const url = req.url || "";
@@ -378,6 +379,15 @@ export async function handleRest(req, res, ctx) {
             json(res, { error: "agent_name must be string when present" }, 400);
             return;
         }
+        const repoRoot = process.env.COORDINATOR_REPO_ROOT || null;
+        let filePath;
+        try {
+            filePath = normalizePath(repoRoot, body.file_path);
+        }
+        catch (err) {
+            json(res, { error: `invalid file_path: ${err.message}` }, 400);
+            return;
+        }
         const MAX_CONTENT = 262144;
         let symbols = null;
         let contentHash = null;
@@ -387,14 +397,14 @@ export async function handleRest(req, res, ctx) {
                 return;
             }
             contentHash = createHash("sha256").update(body.content).digest("hex");
-            symbols = ctx.services.treeSitter.extract(body.file_path, body.content, null);
+            symbols = ctx.services.treeSitter.extract(filePath, body.content, null);
         }
         ctx.services.fileTracker.log({
             session_id: body.session_id,
             agent_id: body.agent_id,
             agent_name: body.agent_name,
             tool_name: body.tool_name,
-            file_path: body.file_path,
+            file_path: filePath,
             content_hash: contentHash,
             symbols_touched: symbols,
         });
@@ -405,8 +415,17 @@ export async function handleRest(req, res, ctx) {
             json(res, { error: "agent_id and file_path required" }, 400);
             return;
         }
+        const repoRoot = process.env.COORDINATOR_REPO_ROOT || null;
+        let filePath;
+        try {
+            filePath = normalizePath(repoRoot, body.file_path);
+        }
+        catch (err) {
+            json(res, { error: `invalid file_path: ${err.message}` }, 400);
+            return;
+        }
         const ttl = parseInt(process.env.COORDINATOR_WORKING_FILES_TTL_MIN || "30", 10);
-        services.workingFiles.start(body.agent_id, body.file_path, ttl);
+        services.workingFiles.start(body.agent_id, filePath, ttl);
         json(res, { ok: true });
     }
     else if (url === "/api/working-files/stop" && req.method === "POST") {
@@ -414,7 +433,16 @@ export async function handleRest(req, res, ctx) {
             json(res, { error: "agent_id and file_path required" }, 400);
             return;
         }
-        services.workingFiles.stop(body.agent_id, body.file_path);
+        const repoRoot = process.env.COORDINATOR_REPO_ROOT || null;
+        let filePath;
+        try {
+            filePath = normalizePath(repoRoot, body.file_path);
+        }
+        catch (err) {
+            json(res, { error: `invalid file_path: ${err.message}` }, 400);
+            return;
+        }
+        services.workingFiles.stop(body.agent_id, filePath);
         json(res, { ok: true });
     }
     else if (url?.startsWith("/api/scoring-stats") && req.method === "GET") {

package/dist/src/tools/consultation-tools.js

@@ -25,9 +25,9 @@ export function registerConsultationTools(server, services, mcpLog) {
         subject: z.string(),
         plan: z.string().optional(),
         target_modules: z.array(z.string()),
-        target_files: z.array(z.string()),
-        depends_on_files: z.array(z.string()).optional(),
-        exports_affected: z.array(z.string()).optional(),
+        target_files: z.array(z.string()).describe("Repo-relative file paths (forward-slash, e.g. 'src/foo.ts'). Absolute paths are not accepted in team-mode."),
+        depends_on_files: z.array(z.string()).optional().describe("Repo-relative file paths your work depends on."),
+        exports_affected: z.array(z.string()).optional().describe("Repo-relative file paths whose exports your work modifies."),
         keep_open: z.boolean().optional().describe("Keep thread open even if no agents are concerned (for manual coordination like games or debates)"),
         assigned_to: z.string().optional().describe("Directed-dispatch: only this agent_id will be allowed to claim the thread. Use for lead→worker handoffs in maitre/chaine/relais presets. Implies keep_open=true."),
         target_symbols: z.array(z.string().max(256)).max(200).optional()
@@ -162,7 +162,7 @@ export function registerConsultationTools(server, services, mcpLog) {
     server.tool("log_action_summary", "Log a one-liner summary of an action", {
         session_id: z.string(),
         agent_id: z.string(),
-        file_path: z.string().optional(),
+        file_path: z.string().optional().describe("Repo-relative file path."),
         summary: z.string(),
     }, async ({ session_id, agent_id, file_path, summary }) => {
         const result = consultation.logActionSummary({ session_id, agent_id, file_path, summary });

package/dist/src/tools/files-tools.js

@@ -18,7 +18,7 @@ export function registerFilesTools(server, services, _mcpLog) {
         return { content: [{ type: "text", text: JSON.stringify(files) }] };
     });
     server.tool("check_file_conflict", "Check if another agent is editing a file", {
-        file_path: z.string(),
+        file_path: z.string().describe("Repo-relative file path."),
         agent_id: z.string(),
         within_minutes: z.number().optional(),
     }, async ({ file_path, agent_id, within_minutes }) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-coordinator",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "mcpName": "io.github.swoofer/mcp-coordinator",
   "description": "Embedded MQTT broker + MCP server for multi-agent coordination",
   "type": "module",
@@ -94,6 +94,9 @@
     "tree-sitter-swift": "^0.6.0",
     "tree-sitter-bash": "^0.21.0"
   },
+  "overrides": {
+    "ip-address": "^10.2.0"
+  },
   "engines": {
     "node": ">=20"
   }