mcp-garry-codes 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 M A R W A N
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,133 @@
+# `mcp-garry-codes` — The Principal Garry's Mod Protocol Server
+
+[![npm version](https://img.shields.io/npm/v/mcp-garry-codes.svg?style=flat-square&color=blue)](https://www.npmjs.com/package/mcp-garry-codes)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=flat-square)](https://opensource.org/licenses/MIT)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.7-blue?style=flat-square&logo=typescript)](https://www.typescriptlang.org/)
+[![Model Context Protocol](https://img.shields.io/badge/MCP-Standard-purple?style=flat-square)](https://modelcontextprotocol.io)
+[![Author](https://img.shields.io/badge/Author-M%20A%20R%20W%20A%20N-success?style=flat-square)](https://github.com/MarwanDevSpace)
+
+> **`mcp-garry-codes`** is a specialized, production-grade [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server engineered specifically for the Garry's Mod (GLua) ecosystem. It bridges AI coding agents with deep Source Engine awareness, static verification, net-security vulnerability auditing, zero-GC performance profiling, and headless testing.
+
+**Created & Maintained by:** **M A R W A N**
+
+---
+
+## ⚡ The Garry's Mod Engineering Dilemma
+
+Garry's Mod development represents a notoriously hostile coding environment:
+- **Three Rigid Execution Realms** (`SERVER`, `CLIENT`, and `MENU`) with strict serialization and transmission rules.
+- **Micro-Allocation Garbage Collection Traps** inside high-frequency rendering and simulation hooks (`RenderScreenspaceEffects`, `HUDPaint`, `Think`, `Move`) triggering severe client FPS drops.
+- **Pervasive Network Vulnerabilities** stemming from unvalidated client-authoritative net messages, rate-limit exploitation, SQL injections, and command execution backdoors.
+- **Source Engine VGUI & Prediction Peculiarities** where standard desktop GUI mental models fail.
+
+`mcp-garry-codes` equips LLMs and autonomous coding assistants with the deep domain knowledge and verification tools necessary to produce bulletproof GLua code.
+
+---
+
+## 🛠️ Tool Suite (9 Core Tools)
+
+| Tool Name | Realm Mode | Primary Function | Side Effects |
+|---|---|---|---|
+| `search_gmod_wiki` | Read-only | Query Facepunch Garry's Mod Wiki and indexed documentation filtered by realm and category. | Cached disk/memory |
+| `get_gmod_symbol` | Read-only | Retrieve exact parameter signatures, return values, caveats, and official examples. | Cached |
+| `web_search_glua` | Read-only | Targeted search across GitHub GLua repositories, Facepunch archives, and developer discussions. | HTTPS query |
+| `lint_glua` | Read-only / Pure | Static analysis parsing GMod C-style syntax (`//`, `/* */`, `&&`, `||`, `!=`), realm mismatches, and global pollution. | None |
+| `audit_net_security` | Read-only / Audit | Scan addon message graphs for unauthenticated receivers, SQL injections, and missing `util.AddNetworkString`. | None |
+| `analyze_performance` | Read-only / Audit | Profile GLua code for Zero-GC hot-path violations (allocations in `HUDPaint`, `Think`, uncached fonts). | None |
+| `scaffold_gmod_component` | Creation | Scaffold idiomatic, realm-separated SWEPs, SENTs, Derma VGUI panels, HUDs, or gamemodes. | File creation (Workspace only) |
+| `run_glua_test` | Execution / Sandbox | Run headless GLua unit tests using the embedded Source Engine mock runtime via LuaJIT / Python. | Sandboxed subprocess |
+| `package_and_validate` | Verification / Build | Validate `addon.json` and verify file structures against Steam Workshop & GMA packaging rules. | Optional `.gma` compilation |
+
+---
+
+## 📦 Addressable MCP Resources
+
+Connect to rich contextual resources using standard MCP URIs:
+- `gmod://wiki/hooks` — Authoritative list of Garry's Mod hooks across all realms.
+- `gmod://wiki/libraries` — Core functions and libraries available in GLua.
+- `gmod://realms/matrix` — Execution realm boundaries, powers, and restrictions.
+- `gmod://schemas/addon_json` — Steam Workshop `addon.json` schema specification.
+
+---
+
+## 🧭 Guided Workflow Prompts
+
+- `audit_addon` — Comprehensive security and performance review of an addon folder.
+- `fix_net_exploit` — Guided repair workflow for net message vulnerabilities and authorization checks.
+- `scaffold_swep` — Interactive creation of a predicted, zero-latency weapon.
+- `build_derma_menu` — Responsive, DPI-scaled VGUI Derma interface builder.
+
+---
+
+## 🚀 Quick Start & Installation
+
+### Option 1: Run instantly with `npx` (Recommended)
+```bash
+npx -y mcp-garry-codes
+```
+
+### Option 2: Global installation via `npm`
+```bash
+npm install -g mcp-garry-codes
+mcp-garry-codes
+```
+
+---
+
+## 💻 Client Configuration
+
+### 1. Antigravity IDE & Cursor (`mcp_config.json`)
+Add the server definition to your `mcp_config.json`:
+```json
+{
+  "mcpServers": {
+    "mcp-garry-codes": {
+      "command": "npx",
+      "args": ["-y", "mcp-garry-codes"],
+      "env": {
+        "WORKSPACE_ROOT": "${workspaceFolder}",
+        "PYTHON_PATH": "python"
+      }
+    }
+  }
+}
+```
+
+### 2. Claude Desktop (`claude_desktop_config.json`)
+```json
+{
+  "mcpServers": {
+    "garrys-mod": {
+      "command": "npx",
+      "args": ["-y", "mcp-garry-codes"]
+    }
+  }
+}
+```
+
+---
+
+## 🛡️ Security Architecture & Threat Model
+
+1. **Workspace Path Jail**: All file queries, linter checks, and scaffolding operations are verified with `PathGuard` and strictly quarantined within the user's configured workspace.
+2. **Subprocess Isolation**: External processes (`python`, `glualint`, `luajit`) execute via `child_process.execFile` with explicit argument arrays—no shell interpolation (`shell: false`) and strict execution timeouts (5,000ms default).
+3. **Automated Credential Redaction**: Result envelopes pass through sanitization regexes that scrub Steam API keys, MySQL connection strings, and RCON passwords.
+4. **Net Message Auditing**: Receivers executing mutations without checking `ply:IsAdmin()` or access privileges are flagged as critical vulnerabilities.
+
+---
+
+## 🧪 Headless GLua Simulation Engine
+
+`mcp-garry-codes` includes an embedded Source Engine mock runtime (`src/test_harness/lua/glua_mock.lua`) and Python test orchestrator (`src/test_harness/python/gmod_tester.py`). It enables running headless unit tests without launching the Garry's Mod 32-bit or 64-bit client executable:
+- Full 3D `Vector` and `Angle` metatables (`Distance`, `Dot`, `Cross`, `Length2D`, `RotateAroundAxis`).
+- Mock `Entity` and `Player` objects with health, inventory, and trace methods.
+- In-memory FIFO bitstream queue verifying `net.Write*` and `net.Read*` alignment.
+- Event bus verifying `hook.Add` and `hook.Run`.
+
+---
+
+## 📄 License
+
+This project is licensed under the [MIT License](LICENSE).
+
+**Author:** [M A R W A N](https://github.com/MarwanDevSpace)

package/dist/config/env.d.ts

@@ -0,0 +1,4 @@
+import { type ServerConfig } from "./schema.js";
+export declare function loadConfig(overrides?: Partial<ServerConfig>): ServerConfig;
+export declare function getConfig(): ServerConfig;
+//# sourceMappingURL=env.d.ts.map

package/dist/config/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAI9D,wBAAgB,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAmB1E;AAED,wBAAgB,SAAS,IAAI,YAAY,CAKxC"}

package/dist/config/env.js

@@ -0,0 +1,27 @@
+import { ConfigSchema } from "./schema.js";
+let currentConfig = null;
+export function loadConfig(overrides) {
+    const raw = {
+        WORKSPACE_ROOT: overrides?.WORKSPACE_ROOT ?? process.env.WORKSPACE_ROOT ?? process.cwd(),
+        GLUALINT_PATH: overrides?.GLUALINT_PATH ?? process.env.GLUALINT_PATH,
+        LUAJIT_PATH: overrides?.LUAJIT_PATH ?? process.env.LUAJIT_PATH,
+        PYTHON_PATH: overrides?.PYTHON_PATH ?? process.env.PYTHON_PATH ?? "python",
+        GMAD_PATH: overrides?.GMAD_PATH ?? process.env.GMAD_PATH,
+        WIKI_CACHE_DIR: overrides?.WIKI_CACHE_DIR ?? process.env.WIKI_CACHE_DIR,
+        LOG_LEVEL: overrides?.LOG_LEVEL ?? process.env.LOG_LEVEL ?? "info"
+    };
+    const parsed = ConfigSchema.safeParse(raw);
+    if (!parsed.success) {
+        const errorMsg = parsed.error.errors.map(e => `${e.path.join(".")}: ${e.message}`).join(", ");
+        throw new Error(`Failed to load server configuration: ${errorMsg}`);
+    }
+    currentConfig = parsed.data;
+    return currentConfig;
+}
+export function getConfig() {
+    if (!currentConfig) {
+        return loadConfig();
+    }
+    return currentConfig;
+}
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAE9D,IAAI,aAAa,GAAwB,IAAI,CAAC;AAE9C,MAAM,UAAU,UAAU,CAAC,SAAiC;IAC1D,MAAM,GAAG,GAAG;QACV,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE;QACxF,aAAa,EAAE,SAAS,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;QACpE,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;QAC9D,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,QAAQ;QAC1E,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QACxD,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QACvE,SAAS,EAAE,SAAS,EAAE,SAAS,IAAK,OAAO,CAAC,GAAG,CAAC,SAA6D,IAAI,MAAM;KACxH,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,28 @@
+import { z } from "zod";
+export declare const ConfigSchema: z.ZodObject<{
+    WORKSPACE_ROOT: z.ZodDefault<z.ZodString>;
+    GLUALINT_PATH: z.ZodOptional<z.ZodString>;
+    LUAJIT_PATH: z.ZodOptional<z.ZodString>;
+    PYTHON_PATH: z.ZodDefault<z.ZodString>;
+    GMAD_PATH: z.ZodOptional<z.ZodString>;
+    WIKI_CACHE_DIR: z.ZodDefault<z.ZodString>;
+    LOG_LEVEL: z.ZodDefault<z.ZodEnum<["debug", "info", "warn", "error"]>>;
+}, "strip", z.ZodTypeAny, {
+    WORKSPACE_ROOT: string;
+    PYTHON_PATH: string;
+    WIKI_CACHE_DIR: string;
+    LOG_LEVEL: "debug" | "info" | "warn" | "error";
+    GLUALINT_PATH?: string | undefined;
+    LUAJIT_PATH?: string | undefined;
+    GMAD_PATH?: string | undefined;
+}, {
+    WORKSPACE_ROOT?: string | undefined;
+    GLUALINT_PATH?: string | undefined;
+    LUAJIT_PATH?: string | undefined;
+    PYTHON_PATH?: string | undefined;
+    GMAD_PATH?: string | undefined;
+    WIKI_CACHE_DIR?: string | undefined;
+    LOG_LEVEL?: "debug" | "info" | "warn" | "error" | undefined;
+}>;
+export type ServerConfig = z.infer<typeof ConfigSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;EAQvB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/config/schema.js

@@ -0,0 +1,12 @@
+import { z } from "zod";
+import path from "node:path";
+export const ConfigSchema = z.object({
+    WORKSPACE_ROOT: z.string().default(process.cwd()),
+    GLUALINT_PATH: z.string().optional(),
+    LUAJIT_PATH: z.string().optional(),
+    PYTHON_PATH: z.string().default("python"),
+    GMAD_PATH: z.string().optional(),
+    WIKI_CACHE_DIR: z.string().default(path.join(process.cwd(), ".cache", "wiki")),
+    LOG_LEVEL: z.enum(["debug", "info", "warn", "error"]).default("info")
+});
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACtE,CAAC,CAAC"}

package/dist/contracts/common.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Standard Result Envelope and Common Interfaces for mcp-garry-codes.
+ */
+export interface GModToolResult<T = unknown> {
+    status: "success" | "partial" | "blocked" | "failed";
+    summary: string;
+    data: T;
+    warnings: string[];
+    evidence: {
+        inputsDigest?: string;
+        sources?: Array<{
+            label: string;
+            uri?: string;
+            retrievedAt?: string;
+        }>;
+        artifacts?: Array<{
+            label: string;
+            uri?: string;
+            sha256?: string;
+        }>;
+    };
+    nextActions?: string[];
+}
+export declare function createSuccessEnvelope<T>(summary: string, data: T, options?: {
+    warnings?: string[];
+    sources?: Array<{
+        label: string;
+        uri?: string;
+        retrievedAt?: string;
+    }>;
+    artifacts?: Array<{
+        label: string;
+        uri?: string;
+        sha256?: string;
+    }>;
+    nextActions?: string[];
+}): GModToolResult<T>;
+export declare function createErrorEnvelope<T = null>(summary: string, errorData?: T, options?: {
+    warnings?: string[];
+    sources?: Array<{
+        label: string;
+        uri?: string;
+        retrievedAt?: string;
+    }>;
+    artifacts?: Array<{
+        label: string;
+        uri?: string;
+        sha256?: string;
+    }>;
+    nextActions?: string[];
+    status?: "partial" | "blocked" | "failed";
+}): GModToolResult<T | null>;
+//# sourceMappingURL=common.d.ts.map

package/dist/contracts/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/contracts/common.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IACzC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC;IACR,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE;QACR,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACvE,SAAS,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACrE,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,CAAC,EACP,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB,GACA,cAAc,CAAC,CAAC,CAAC,CAYnB;AAED,wBAAgB,mBAAmB,CAAC,CAAC,GAAG,IAAI,EAC1C,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,CAAC,EACb,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;CAC3C,GACA,cAAc,CAAC,CAAC,GAAG,IAAI,CAAC,CAY1B"}

package/dist/contracts/common.js

@@ -0,0 +1,30 @@
+/**
+ * Standard Result Envelope and Common Interfaces for mcp-garry-codes.
+ */
+export function createSuccessEnvelope(summary, data, options) {
+    return {
+        status: "success",
+        summary,
+        data,
+        warnings: options?.warnings ?? [],
+        evidence: {
+            sources: options?.sources ?? [],
+            artifacts: options?.artifacts ?? []
+        },
+        nextActions: options?.nextActions ?? []
+    };
+}
+export function createErrorEnvelope(summary, errorData, options) {
+    return {
+        status: options?.status ?? "failed",
+        summary,
+        data: errorData ?? null,
+        warnings: options?.warnings ?? [],
+        evidence: {
+            sources: options?.sources ?? [],
+            artifacts: options?.artifacts ?? []
+        },
+        nextActions: options?.nextActions ?? []
+    };
+}
+//# sourceMappingURL=common.js.map

package/dist/contracts/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/contracts/common.ts"],"names":[],"mappings":"AAAA;;GAEG;AAeH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,IAAO,EACP,OAKC;IAED,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,OAAO;QACP,IAAI;QACJ,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE;QACjC,QAAQ,EAAE;YACR,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE;YAC/B,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;SACpC;QACD,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,SAAa,EACb,OAMC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,QAAQ;QACnC,OAAO;QACP,IAAI,EAAE,SAAS,IAAI,IAAI;QACvB,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE;QACjC,QAAQ,EAAE;YACR,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE;YAC/B,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;SACpC;QACD,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC"}

package/dist/contracts/linter_contracts.d.ts

@@ -0,0 +1,79 @@
+import { z } from "zod";
+export declare const LintGLuaInputSchema: z.ZodEffects<z.ZodObject<{
+    file_path: z.ZodOptional<z.ZodString>;
+    code_content: z.ZodOptional<z.ZodString>;
+    target_realm: z.ZodDefault<z.ZodEnum<["server", "client", "shared", "menu", "auto"]>>;
+    fix_formatting: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    target_realm: "server" | "client" | "shared" | "menu" | "auto";
+    fix_formatting: boolean;
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+}, {
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+    target_realm?: "server" | "client" | "shared" | "menu" | "auto" | undefined;
+    fix_formatting?: boolean | undefined;
+}>, {
+    target_realm: "server" | "client" | "shared" | "menu" | "auto";
+    fix_formatting: boolean;
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+}, {
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+    target_realm?: "server" | "client" | "shared" | "menu" | "auto" | undefined;
+    fix_formatting?: boolean | undefined;
+}>;
+export type LintGLuaInput = z.infer<typeof LintGLuaInputSchema>;
+export interface GLuaDiagnostic {
+    line: number;
+    column: number;
+    severity: "error" | "warning" | "info";
+    code: string;
+    message: string;
+    suggestion?: string;
+}
+export interface LintGLuaOutput {
+    valid: boolean;
+    error_count: number;
+    warning_count: number;
+    realm_detected: "server" | "client" | "shared" | "menu";
+    diagnostics: GLuaDiagnostic[];
+    formatted_code?: string;
+}
+export declare const AnalyzePerformanceInputSchema: z.ZodEffects<z.ZodObject<{
+    file_path: z.ZodOptional<z.ZodString>;
+    code_content: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+}, {
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+}>, {
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+}, {
+    file_path?: string | undefined;
+    code_content?: string | undefined;
+}>;
+export type AnalyzePerformanceInput = z.infer<typeof AnalyzePerformanceInputSchema>;
+export interface PerformanceIssue {
+    hook_name: string;
+    line: number;
+    severity: "critical" | "high" | "medium";
+    category: "allocation_in_render_hook" | "uncached_material" | "uncached_font" | "unlocalized_globals" | "expensive_entity_iteration";
+    description: string;
+    recommended_code: string;
+}
+export interface AnalyzePerformanceOutput {
+    performance_score: number;
+    issues: PerformanceIssue[];
+    metrics: {
+        allocations_in_hot_path: number;
+        global_calls_in_hot_path: number;
+        dynamic_draw_calls: number;
+    };
+}
+//# sourceMappingURL=linter_contracts.d.ts.map

package/dist/contracts/linter_contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linter_contracts.d.ts","sourceRoot":"","sources":["../../src/contracts/linter_contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;EAO9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACxD,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;EAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IACzC,QAAQ,EAAE,2BAA2B,GAAG,mBAAmB,GAAG,eAAe,GAAG,qBAAqB,GAAG,4BAA4B,CAAC;IACrI,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE;QACP,uBAAuB,EAAE,MAAM,CAAC;QAChC,wBAAwB,EAAE,MAAM,CAAC;QACjC,kBAAkB,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH"}

package/dist/contracts/linter_contracts.js

@@ -0,0 +1,16 @@
+import { z } from "zod";
+export const LintGLuaInputSchema = z.object({
+    file_path: z.string().optional().describe("Workspace-relative or absolute path to .lua file"),
+    code_content: z.string().optional().describe("Direct Lua code string to analyze (if file_path omitted)"),
+    target_realm: z.enum(["server", "client", "shared", "menu", "auto"]).default("auto").describe("Target realm context for analysis"),
+    fix_formatting: z.boolean().default(false).describe("Return pretty-printed or auto-fixed code if possible")
+}).refine(data => data.file_path || data.code_content, {
+    message: "Either file_path or code_content must be provided."
+});
+export const AnalyzePerformanceInputSchema = z.object({
+    file_path: z.string().optional().describe("Workspace-relative or absolute path to .lua file"),
+    code_content: z.string().optional().describe("Direct Lua code snippet to analyze")
+}).refine(data => data.file_path || data.code_content, {
+    message: "Either file_path or code_content must be provided."
+});
+//# sourceMappingURL=linter_contracts.js.map

package/dist/contracts/linter_contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linter_contracts.js","sourceRoot":"","sources":["../../src/contracts/linter_contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAC7F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACxG,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAClI,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;CAC5G,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE;IACrD,OAAO,EAAE,oDAAoD;CAC9D,CAAC,CAAC;AAsBH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAC7F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;CACnF,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE;IACrD,OAAO,EAAE,oDAAoD;CAC9D,CAAC,CAAC"}

package/dist/contracts/scaffold_contracts.d.ts

@@ -0,0 +1,84 @@
+import { z } from "zod";
+export declare const ScaffoldGModComponentInputSchema: z.ZodObject<{
+    component_type: z.ZodEnum<["swep", "sent", "vgui_panel", "custom_tool", "hud", "gamemode", "addon_skeleton"]>;
+    name: z.ZodString;
+    output_dir: z.ZodOptional<z.ZodString>;
+    options: z.ZodOptional<z.ZodObject<{
+        category: z.ZodOptional<z.ZodString>;
+        base: z.ZodOptional<z.ZodString>;
+        author: z.ZodOptional<z.ZodString>;
+        printable_name: z.ZodOptional<z.ZodString>;
+        vgui_type: z.ZodOptional<z.ZodEnum<["frame", "button", "scroll", "custom"]>>;
+    }, "strip", z.ZodTypeAny, {
+        category?: string | undefined;
+        base?: string | undefined;
+        author?: string | undefined;
+        printable_name?: string | undefined;
+        vgui_type?: "frame" | "button" | "scroll" | "custom" | undefined;
+    }, {
+        category?: string | undefined;
+        base?: string | undefined;
+        author?: string | undefined;
+        printable_name?: string | undefined;
+        vgui_type?: "frame" | "button" | "scroll" | "custom" | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    component_type: "swep" | "sent" | "vgui_panel" | "custom_tool" | "hud" | "gamemode" | "addon_skeleton";
+    options?: {
+        category?: string | undefined;
+        base?: string | undefined;
+        author?: string | undefined;
+        printable_name?: string | undefined;
+        vgui_type?: "frame" | "button" | "scroll" | "custom" | undefined;
+    } | undefined;
+    output_dir?: string | undefined;
+}, {
+    name: string;
+    component_type: "swep" | "sent" | "vgui_panel" | "custom_tool" | "hud" | "gamemode" | "addon_skeleton";
+    options?: {
+        category?: string | undefined;
+        base?: string | undefined;
+        author?: string | undefined;
+        printable_name?: string | undefined;
+        vgui_type?: "frame" | "button" | "scroll" | "custom" | undefined;
+    } | undefined;
+    output_dir?: string | undefined;
+}>;
+export type ScaffoldGModComponentInput = z.infer<typeof ScaffoldGModComponentInputSchema>;
+export interface ScaffoldGModComponentOutput {
+    component_type: string;
+    files_created: Array<{
+        path: string;
+        purpose: string;
+    }>;
+    code_manifest: Record<string, string>;
+}
+export declare const PackageAndValidateInputSchema: z.ZodObject<{
+    addon_dir: z.ZodOptional<z.ZodString>;
+    build_gma: z.ZodDefault<z.ZodBoolean>;
+    output_gma_path: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    build_gma: boolean;
+    addon_dir?: string | undefined;
+    output_gma_path?: string | undefined;
+}, {
+    addon_dir?: string | undefined;
+    build_gma?: boolean | undefined;
+    output_gma_path?: string | undefined;
+}>;
+export type PackageAndValidateInput = z.infer<typeof PackageAndValidateInputSchema>;
+export interface IllegalFileWarning {
+    path: string;
+    reason: string;
+}
+export interface PackageAndValidateOutput {
+    valid: boolean;
+    addon_json_valid: boolean;
+    total_files: number;
+    total_size_bytes: number;
+    illegal_files: IllegalFileWarning[];
+    warnings: string[];
+    gma_path?: string;
+}
+//# sourceMappingURL=scaffold_contracts.d.ts.map

package/dist/contracts/scaffold_contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold_contracts.d.ts","sourceRoot":"","sources":["../../src/contracts/scaffold_contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;EAIxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/contracts/scaffold_contracts.js

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export const ScaffoldGModComponentInputSchema = z.object({
+    component_type: z.enum([
+        "swep",
+        "sent",
+        "vgui_panel",
+        "custom_tool",
+        "hud",
+        "gamemode",
+        "addon_skeleton"
+    ]).describe("Type of Garry's Mod component to scaffold"),
+    name: z.string().min(1).regex(/^[a-zA-Z0-9_-]+$/, "Identifier must be alphanumeric with underscores or dashes").describe("Component identifier (e.g. 'weapon_plasma_rifle', 'ent_crate', 'DPlayerRadial')"),
+    output_dir: z.string().optional().describe("Workspace folder to write generated files to (if omitted, files are returned in manifest only)"),
+    options: z.object({
+        category: z.string().optional().describe("Spawnmenu category (e.g. 'Custom Weapons')"),
+        base: z.string().optional().describe("Base class (e.g. 'weapon_base', 'base_anim')"),
+        author: z.string().optional().describe("Addon author name"),
+        printable_name: z.string().optional().describe("User-facing UI name"),
+        vgui_type: z.enum(["frame", "button", "scroll", "custom"]).optional().describe("Derma panel type")
+    }).optional()
+});
+export const PackageAndValidateInputSchema = z.object({
+    addon_dir: z.string().optional().describe("Root directory of addon (defaults to workspace root)"),
+    build_gma: z.boolean().default(false).describe("Compile .gma package if gmad is available"),
+    output_gma_path: z.string().optional().describe("Custom output path for compiled .gma file")
+});
+//# sourceMappingURL=scaffold_contracts.js.map

package/dist/contracts/scaffold_contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold_contracts.js","sourceRoot":"","sources":["../../src/contracts/scaffold_contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;QACrB,MAAM;QACN,MAAM;QACN,YAAY;QACZ,aAAa;QACb,KAAK;QACL,UAAU;QACV,gBAAgB;KACjB,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,4DAA4D,CAAC,CAAC,QAAQ,CAAC,iFAAiF,CAAC;IAC3M,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gGAAgG,CAAC;IAC5I,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;QACtF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC3D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KACnG,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAUH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IACjG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC3F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CAC7F,CAAC,CAAC"}

package/dist/contracts/security_contracts.d.ts

@@ -0,0 +1,37 @@
+import { z } from "zod";
+export declare const AuditNetSecurityInputSchema: z.ZodObject<{
+    addon_dir: z.ZodOptional<z.ZodString>;
+    file_paths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    addon_dir?: string | undefined;
+    file_paths?: string[] | undefined;
+}, {
+    addon_dir?: string | undefined;
+    file_paths?: string[] | undefined;
+}>;
+export type AuditNetSecurityInput = z.infer<typeof AuditNetSecurityInputSchema>;
+export interface NetVulnerability {
+    severity: "critical" | "high" | "medium" | "low";
+    type: "unauthenticated_net_receiver" | "missing_network_string" | "sql_injection" | "runstring_exposure" | "bitstream_mismatch" | "unbounded_payload";
+    message_name: string;
+    file: string;
+    line: number;
+    description: string;
+    recommended_fix: string;
+    vulnerable_code: string;
+}
+export interface NetworkMessageGraphNode {
+    message: string;
+    sent_from: "client" | "server" | "unknown";
+    received_in: "client" | "server" | "unknown";
+    has_auth_check: boolean;
+    registered_on_server: boolean;
+    data_types: string[];
+}
+export interface AuditNetSecurityOutput {
+    messages_found: number;
+    registered_strings: string[];
+    vulnerabilities: NetVulnerability[];
+    network_graph: NetworkMessageGraphNode[];
+}
+//# sourceMappingURL=security_contracts.d.ts.map

package/dist/contracts/security_contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_contracts.d.ts","sourceRoot":"","sources":["../../src/contracts/security_contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,2BAA2B;;;;;;;;;EAGtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,IAAI,EACA,8BAA8B,GAC9B,wBAAwB,GACxB,eAAe,GACf,oBAAoB,GACpB,oBAAoB,GACpB,mBAAmB,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,WAAW,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC7C,cAAc,EAAE,OAAO,CAAC;IACxB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,gBAAgB,EAAE,CAAC;IACpC,aAAa,EAAE,uBAAuB,EAAE,CAAC;CAC1C"}

package/dist/contracts/security_contracts.js

@@ -0,0 +1,6 @@
+import { z } from "zod";
+export const AuditNetSecurityInputSchema = z.object({
+    addon_dir: z.string().optional().describe("Root directory of addon to audit (defaults to workspace root)"),
+    file_paths: z.array(z.string()).optional().describe("Specific files to scan if targeting a slice")
+});
+//# sourceMappingURL=security_contracts.js.map

package/dist/contracts/security_contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_contracts.js","sourceRoot":"","sources":["../../src/contracts/security_contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;IAC1G,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CACnG,CAAC,CAAC"}