motionmcp 1.0.2 → 2.1.0

package/dist/utils/responseWrapper.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Motion API Response Wrapper Utility
+ *
+ * Handles the inconsistent response patterns across Motion API endpoints:
+ * - Some return wrapped responses: { meta: {...}, [resource]: [...] }
+ * - Others return direct arrays: [...]
+ *
+ * This utility provides type-safe unwrapping with proper pagination support.
+ */
+import { MotionPaginationMeta } from '../types/motion';
+/**
+ * Standard unwrapped response structure for consistent internal handling
+ */
+export interface UnwrappedResponse<T> {
+    data: T[];
+    meta?: MotionPaginationMeta;
+}
+/**
+ * Unwraps a Motion API response based on the known patterns
+ *
+ * @param response - The raw API response data
+ * @param apiEndpoint - The API endpoint name (e.g., 'tasks', 'projects', 'comments')
+ * @returns Standardized unwrapped response with data array and optional meta
+ */
+export declare function unwrapApiResponse<T = unknown>(response: unknown, apiEndpoint: string): UnwrappedResponse<T>;
+/**
+ * Checks if an API endpoint supports pagination based on known patterns
+ */
+export declare function supportsPagination(apiEndpoint: string): boolean;
+/**
+ * Gets the expected resource key for a wrapped API response
+ */
+export declare function getResourceKey(apiEndpoint: string): string | undefined;
+/**
+ * Updates the known pattern for an API endpoint (for runtime discovery)
+ */
+export declare function updateApiPattern(apiEndpoint: string, isWrapped: boolean, resourceKey?: string): void;
+//# sourceMappingURL=responseWrapper.d.ts.map

package/dist/utils/responseWrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responseWrapper.d.ts","sourceRoot":"","sources":["../../src/utils/responseWrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAIvD;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,CAAC,EAAE,oBAAoB,CAAC;CAC7B;AA6DD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EAC3C,QAAQ,EAAE,OAAO,EACjB,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAAC,CAAC,CAAC,CAiBtB;AAyGD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAG/D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGtE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,OAAO,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI,CAYN"}

package/dist/utils/responseWrapper.js

@@ -0,0 +1,201 @@
+"use strict";
+/**
+ * Motion API Response Wrapper Utility
+ *
+ * Handles the inconsistent response patterns across Motion API endpoints:
+ * - Some return wrapped responses: { meta: {...}, [resource]: [...] }
+ * - Others return direct arrays: [...]
+ *
+ * This utility provides type-safe unwrapping with proper pagination support.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unwrapApiResponse = unwrapApiResponse;
+exports.supportsPagination = supportsPagination;
+exports.getResourceKey = getResourceKey;
+exports.updateApiPattern = updateApiPattern;
+const logger_1 = require("./logger");
+const constants_1 = require("./constants");
+/**
+ * Known API response patterns based on current codebase evidence and task documentation
+ */
+const API_RESPONSE_PATTERNS = {
+    // Wrapped responses (with meta pagination)
+    tasks: {
+        isWrapped: true,
+        resourceKey: 'tasks',
+        apiName: 'Tasks'
+    },
+    projects: {
+        isWrapped: true,
+        resourceKey: 'projects',
+        apiName: 'Projects'
+    },
+    comments: {
+        isWrapped: true,
+        resourceKey: 'comments',
+        apiName: 'Comments'
+    },
+    'recurring-tasks': {
+        isWrapped: true,
+        resourceKey: 'tasks', // Note: recurring tasks API returns { meta, tasks } not { meta, recurringTasks }
+        apiName: 'Recurring Tasks'
+    },
+    'custom-fields': {
+        isWrapped: true,
+        resourceKey: 'customFields',
+        apiName: 'Custom Fields'
+    },
+    // Direct array responses (no wrapper)
+    schedules: {
+        isWrapped: false,
+        apiName: 'Schedules'
+    },
+    statuses: {
+        isWrapped: false,
+        apiName: 'Statuses'
+    },
+    workspaces: {
+        isWrapped: false,
+        apiName: 'Workspaces'
+    },
+    users: {
+        isWrapped: false, // TODO: Verify this - may be wrapped with 'users' key
+        apiName: 'Users'
+    }
+};
+/**
+ * Unwraps a Motion API response based on the known patterns
+ *
+ * @param response - The raw API response data
+ * @param apiEndpoint - The API endpoint name (e.g., 'tasks', 'projects', 'comments')
+ * @returns Standardized unwrapped response with data array and optional meta
+ */
+function unwrapApiResponse(response, apiEndpoint) {
+    const config = API_RESPONSE_PATTERNS[apiEndpoint];
+    if (!config) {
+        (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.WARN, `Unknown API endpoint pattern: ${apiEndpoint}`, {
+            endpoint: apiEndpoint,
+            availablePatterns: Object.keys(API_RESPONSE_PATTERNS)
+        });
+        // Fallback: try to extract array from common patterns
+        return fallbackUnwrap(response, apiEndpoint);
+    }
+    if (config.isWrapped) {
+        return unwrapWrappedResponse(response, config);
+    }
+    else {
+        return unwrapDirectResponse(response, config);
+    }
+}
+/**
+ * Unwraps a wrapped response: { meta: {...}, [resourceKey]: [...] }
+ */
+function unwrapWrappedResponse(response, config) {
+    if (!response || typeof response !== 'object') {
+        (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.WARN, `Expected wrapped response object for ${config.apiName}`, {
+            receivedType: typeof response,
+            response
+        });
+        return { data: [] };
+    }
+    const responseObj = response;
+    const resourceKey = config.resourceKey;
+    const data = responseObj[resourceKey];
+    const meta = responseObj.meta;
+    if (!Array.isArray(data)) {
+        (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.WARN, `Expected array for ${resourceKey} in ${config.apiName} response`, {
+            resourceKey,
+            receivedType: typeof data,
+            hasMetaField: !!meta,
+            responseKeys: Object.keys(responseObj)
+        });
+        return { data: [] };
+    }
+    return {
+        data,
+        meta: meta && typeof meta === 'object' ? meta : undefined
+    };
+}
+/**
+ * Unwraps a direct array response: [...]
+ */
+function unwrapDirectResponse(response, config) {
+    if (!Array.isArray(response)) {
+        (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.WARN, `Expected direct array response for ${config.apiName}`, {
+            receivedType: typeof response,
+            response
+        });
+        return { data: [] };
+    }
+    return { data: response };
+}
+/**
+ * Fallback unwrapping logic for unknown endpoints
+ * Attempts to handle both wrapped and direct patterns
+ */
+function fallbackUnwrap(response, apiEndpoint) {
+    // Case 1: Direct array
+    if (Array.isArray(response)) {
+        (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.DEBUG, `Fallback: treating ${apiEndpoint} as direct array`, {
+            itemCount: response.length
+        });
+        return { data: response };
+    }
+    // Case 2: Wrapped response - try common resource keys
+    if (response && typeof response === 'object') {
+        const responseObj = response;
+        const possibleKeys = ['items', 'tasks', 'projects', 'comments', 'users', 'workspaces', 'schedules', 'statuses', 'customFields'];
+        for (const key of possibleKeys) {
+            if (Array.isArray(responseObj[key])) {
+                (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.DEBUG, `Fallback: found array at ${key} for ${apiEndpoint}`, {
+                    key,
+                    itemCount: responseObj[key].length,
+                    hasMeta: !!responseObj.meta
+                });
+                return {
+                    data: responseObj[key],
+                    meta: responseObj.meta
+                };
+            }
+        }
+        (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.WARN, `Fallback: no array found in object response for ${apiEndpoint}`, {
+            responseKeys: Object.keys(responseObj)
+        });
+    }
+    // Case 3: Unexpected response
+    (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.ERROR, `Fallback: unexpected response format for ${apiEndpoint}`, {
+        responseType: typeof response,
+        response
+    });
+    return { data: [] };
+}
+/**
+ * Checks if an API endpoint supports pagination based on known patterns
+ */
+function supportsPagination(apiEndpoint) {
+    const config = API_RESPONSE_PATTERNS[apiEndpoint];
+    return config?.isWrapped || false;
+}
+/**
+ * Gets the expected resource key for a wrapped API response
+ */
+function getResourceKey(apiEndpoint) {
+    const config = API_RESPONSE_PATTERNS[apiEndpoint];
+    return config?.resourceKey;
+}
+/**
+ * Updates the known pattern for an API endpoint (for runtime discovery)
+ */
+function updateApiPattern(apiEndpoint, isWrapped, resourceKey) {
+    API_RESPONSE_PATTERNS[apiEndpoint] = {
+        isWrapped,
+        resourceKey,
+        apiName: apiEndpoint
+    };
+    (0, logger_1.mcpLog)(constants_1.LOG_LEVELS.INFO, `Updated API pattern for ${apiEndpoint}`, {
+        endpoint: apiEndpoint,
+        isWrapped,
+        resourceKey
+    });
+}
+//# sourceMappingURL=responseWrapper.js.map

package/dist/utils/responseWrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responseWrapper.js","sourceRoot":"","sources":["../../src/utils/responseWrapper.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAgFH,8CAoBC;AA4GD,gDAGC;AAKD,wCAGC;AAKD,4CAgBC;AA7OD,qCAAkC;AAClC,2CAAyC;AAmBzC;;GAEG;AACH,MAAM,qBAAqB,GAAsC;IAC/D,2CAA2C;IAC3C,KAAK,EAAE;QACL,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,OAAO;KACjB;IACD,QAAQ,EAAE;QACR,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,UAAU;KACpB;IACD,QAAQ,EAAE;QACR,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,UAAU;KACpB;IACD,iBAAiB,EAAE;QACjB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,OAAO,EAAE,iFAAiF;QACvG,OAAO,EAAE,iBAAiB;KAC3B;IACD,eAAe,EAAE;QACf,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,eAAe;KACzB;IAED,sCAAsC;IACtC,SAAS,EAAE;QACT,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,WAAW;KACrB;IACD,QAAQ,EAAE;QACR,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,UAAU;KACpB;IACD,UAAU,EAAE;QACV,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,YAAY;KACtB;IACD,KAAK,EAAE;QACL,SAAS,EAAE,KAAK,EAAE,sDAAsD;QACxE,OAAO,EAAE,OAAO;KACjB;CACF,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAC/B,QAAiB,EACjB,WAAmB;IAEnB,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAA,eAAM,EAAC,sBAAU,CAAC,IAAI,EAAE,iCAAiC,WAAW,EAAE,EAAE;YACtE,QAAQ,EAAE,WAAW;YACrB,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC;SACtD,CAAC,CAAC;QACH,sDAAsD;QACtD,OAAO,cAAc,CAAI,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,qBAAqB,CAAI,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,OAAO,oBAAoB,CAAI,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAC5B,QAAiB,EACjB,MAAyB;IAEzB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,IAAA,eAAM,EAAC,sBAAU,CAAC,IAAI,EAAE,wCAAwC,MAAM,CAAC,OAAO,EAAE,EAAE;YAChF,YAAY,EAAE,OAAO,QAAQ;YAC7B,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,WAAW,GAAG,QAAmC,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAY,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;IAE9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAA,eAAM,EAAC,sBAAU,CAAC,IAAI,EAAE,sBAAsB,WAAW,OAAO,MAAM,CAAC,OAAO,WAAW,EAAE;YACzF,WAAW;YACX,YAAY,EAAE,OAAO,IAAI;YACzB,YAAY,EAAE,CAAC,CAAC,IAAI;YACpB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAA4B,CAAC,CAAC,CAAC,SAAS;KAClF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,QAAiB,EACjB,MAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,IAAA,eAAM,EAAC,sBAAU,CAAC,IAAI,EAAE,sCAAsC,MAAM,CAAC,OAAO,EAAE,EAAE;YAC9E,YAAY,EAAE,OAAO,QAAQ;YAC7B,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACrB,QAAiB,EACjB,WAAmB;IAEnB,uBAAuB;IACvB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAA,eAAM,EAAC,sBAAU,CAAC,KAAK,EAAE,sBAAsB,WAAW,kBAAkB,EAAE;YAC5E,SAAS,EAAE,QAAQ,CAAC,MAAM;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,sDAAsD;IACtD,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,QAAmC,CAAC;QACxD,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAEhI,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACpC,IAAA,eAAM,EAAC,sBAAU,CAAC,KAAK,EAAE,4BAA4B,GAAG,QAAQ,WAAW,EAAE,EAAE;oBAC7E,GAAG;oBACH,SAAS,EAAG,WAAW,CAAC,GAAG,CAAe,CAAC,MAAM;oBACjD,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI;iBAC5B,CAAC,CAAC;gBACH,OAAO;oBACL,IAAI,EAAE,WAAW,CAAC,GAAG,CAAQ;oBAC7B,IAAI,EAAE,WAAW,CAAC,IAAwC;iBAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAA,eAAM,EAAC,sBAAU,CAAC,IAAI,EAAE,mDAAmD,WAAW,EAAE,EAAE;YACxF,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,IAAA,eAAM,EAAC,sBAAU,CAAC,KAAK,EAAE,4CAA4C,WAAW,EAAE,EAAE;QAClF,YAAY,EAAE,OAAO,QAAQ;QAC7B,QAAQ;KACT,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,WAAmB;IACpD,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,WAAmB;IAChD,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,MAAM,EAAE,WAAW,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAC9B,WAAmB,EACnB,SAAkB,EAClB,WAAoB;IAEpB,qBAAqB,CAAC,WAAW,CAAC,GAAG;QACnC,SAAS;QACT,WAAW;QACX,OAAO,EAAE,WAAW;KACrB,CAAC;IAEF,IAAA,eAAM,EAAC,sBAAU,CAAC,IAAI,EAAE,2BAA2B,WAAW,EAAE,EAAE;QAChE,QAAQ,EAAE,WAAW;QACrB,SAAS;QACT,WAAW;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/sanitize.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Input Sanitization Utilities
+ *
+ * Provides secure sanitization functions for user-provided content
+ * to prevent injection attacks and ensure data integrity.
+ */
+/**
+ * Sanitize user-provided text content for safe storage and transmission
+ * Removes dangerous HTML tags, script content, and other potentially harmful input
+ *
+ * @param input - The user input to sanitize
+ * @returns Sanitized string safe for storage/transmission
+ */
+export declare function sanitizeTextContent(input: string | undefined | null): string;
+/**
+ * Validate that sanitized content is not empty after sanitization
+ *
+ * @param original - Original user input
+ * @param sanitized - Sanitized version
+ * @returns True if content is valid after sanitization
+ */
+export declare function isValidSanitizedContent(original: string | undefined | null, sanitized: string): boolean;
+/**
+ * Sanitize and validate comment content
+ *
+ * @param content - Comment content to sanitize
+ * @returns Object with sanitized content and validation result
+ */
+export declare function sanitizeCommentContent(content: string | undefined | null): {
+    sanitized: string;
+    isValid: boolean;
+    error?: string;
+};
+/**
+ * Sanitize task/project description content
+ * Similar to comment content but allows empty descriptions
+ *
+ * @param description - Task or project description to sanitize
+ * @returns Sanitized description or undefined if empty/invalid
+ */
+export declare function sanitizeDescription(description: string | undefined | null): string | undefined;
+/**
+ * Sanitize task/project name content
+ * Names are required and must be non-empty after sanitization
+ *
+ * @param name - Task or project name to sanitize
+ * @returns Sanitized name
+ * @throws Error if name is empty or contains invalid content
+ */
+export declare function sanitizeName(name: string | undefined | null): string;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/utils/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAmC5E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAQvG;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAwBA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAgB9F;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAgBpE"}

package/dist/utils/sanitize.js

@@ -0,0 +1,138 @@
+"use strict";
+/**
+ * Input Sanitization Utilities
+ *
+ * Provides secure sanitization functions for user-provided content
+ * to prevent injection attacks and ensure data integrity.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeTextContent = sanitizeTextContent;
+exports.isValidSanitizedContent = isValidSanitizedContent;
+exports.sanitizeCommentContent = sanitizeCommentContent;
+exports.sanitizeDescription = sanitizeDescription;
+exports.sanitizeName = sanitizeName;
+const constants_1 = require("./constants");
+/**
+ * Sanitize user-provided text content for safe storage and transmission
+ * Removes dangerous HTML tags, script content, and other potentially harmful input
+ *
+ * @param input - The user input to sanitize
+ * @returns Sanitized string safe for storage/transmission
+ */
+function sanitizeTextContent(input) {
+    if (!input || typeof input !== 'string') {
+        return '';
+    }
+    // Trim whitespace
+    const trimmed = input.trim();
+    if (trimmed.length === 0) {
+        return '';
+    }
+    // Remove or escape potentially dangerous characters and patterns
+    let sanitized = trimmed
+        // Remove script tags and their content entirely
+        .replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, '')
+        // Remove any remaining HTML tags but keep inner text
+        .replace(/<[^>]*>/g, '')
+        // Normalize unicode non-breaking spaces
+        .replace(/\u00a0/g, ' ');
+    // Normalize whitespace introduced by stripping tags while preserving newlines
+    sanitized = sanitized
+        .replace(/\r\n/g, '\n')
+        .replace(/[ \t]{2,}/g, ' ')
+        .replace(/[ \t]+\n/g, '\n')
+        .replace(/\n{3,}/g, '\n\n')
+        .trim();
+    // Limit length to prevent abuse - use consistent limit from constants
+    if (sanitized.length > constants_1.LIMITS.COMMENT_MAX_LENGTH) {
+        sanitized = sanitized.substring(0, constants_1.LIMITS.COMMENT_MAX_LENGTH);
+    }
+    return sanitized;
+}
+/**
+ * Validate that sanitized content is not empty after sanitization
+ *
+ * @param original - Original user input
+ * @param sanitized - Sanitized version
+ * @returns True if content is valid after sanitization
+ */
+function isValidSanitizedContent(original, sanitized) {
+    // If original had content but sanitized is empty, it was likely malicious
+    if (original && original.trim().length > 0 && sanitized.length === 0) {
+        return false;
+    }
+    // Must have some actual content
+    return sanitized.length > 0;
+}
+/**
+ * Sanitize and validate comment content
+ *
+ * @param content - Comment content to sanitize
+ * @returns Object with sanitized content and validation result
+ */
+function sanitizeCommentContent(content) {
+    const sanitized = sanitizeTextContent(content);
+    const isValid = isValidSanitizedContent(content, sanitized);
+    if (!isValid && content && content.trim().length > 0) {
+        return {
+            sanitized: '',
+            isValid: false,
+            error: 'Comment content contains invalid or potentially harmful content'
+        };
+    }
+    if (!isValid) {
+        return {
+            sanitized: '',
+            isValid: false,
+            error: 'Comment content cannot be empty'
+        };
+    }
+    return {
+        sanitized,
+        isValid: true
+    };
+}
+/**
+ * Sanitize task/project description content
+ * Similar to comment content but allows empty descriptions
+ *
+ * @param description - Task or project description to sanitize
+ * @returns Sanitized description or undefined if empty/invalid
+ */
+function sanitizeDescription(description) {
+    if (!description || typeof description !== 'string') {
+        return undefined;
+    }
+    const sanitized = sanitizeTextContent(description);
+    if (sanitized === '') {
+        return undefined;
+    }
+    // Check if sanitization removed significant content (potential attack)
+    if (description.trim().length > 0 && !isValidSanitizedContent(description, sanitized)) {
+        throw new Error('Description contains invalid or potentially harmful content');
+    }
+    return sanitized;
+}
+/**
+ * Sanitize task/project name content
+ * Names are required and must be non-empty after sanitization
+ *
+ * @param name - Task or project name to sanitize
+ * @returns Sanitized name
+ * @throws Error if name is empty or contains invalid content
+ */
+function sanitizeName(name) {
+    if (!name || typeof name !== 'string') {
+        throw new Error('Name is required');
+    }
+    const sanitized = sanitizeTextContent(name);
+    if (sanitized === '') {
+        throw new Error('Name cannot be empty');
+    }
+    // Check if sanitization removed significant content (potential attack)
+    if (!isValidSanitizedContent(name, sanitized)) {
+        throw new Error('Name contains invalid or potentially harmful content');
+    }
+    return sanitized;
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/utils/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAWH,kDAmCC;AASD,0DAQC;AAQD,wDA4BC;AASD,kDAgBC;AAUD,oCAgBC;AApJD,2CAAqC;AAErC;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,KAAgC;IAClE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iEAAiE;IACjE,IAAI,SAAS,GAAG,OAAO;QACrB,gDAAgD;SAC/C,OAAO,CAAC,qDAAqD,EAAE,EAAE,CAAC;QACnE,qDAAqD;SACpD,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QACxB,wCAAwC;SACvC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAE3B,8EAA8E;IAC9E,SAAS,GAAG,SAAS;SAClB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;SACtB,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;SAC1B,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,IAAI,EAAE,CAAC;IAEV,sEAAsE;IACtE,IAAI,SAAS,CAAC,MAAM,GAAG,kBAAM,CAAC,kBAAkB,EAAE,CAAC;QACjD,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,kBAAM,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,uBAAuB,CAAC,QAAmC,EAAE,SAAiB;IAC5F,0EAA0E;IAC1E,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC;IAChC,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,OAAkC;IAKvE,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAE5D,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iEAAiE;SACzE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iCAAiC;SACzC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,WAAsC;IACxE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uEAAuE;IACvE,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,IAA+B;IAC1D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/utils/validator.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Input Validation Service - Runtime validation for MCP requests
+ *
+ * This module provides runtime validation of incoming MCP requests
+ * against their defined schemas using AJV, ensuring type safety
+ * at runtime and preventing malformed inputs from causing errors.
+ */
+import { McpToolDefinition } from '../types/mcp';
+export declare class InputValidator {
+    private ajv;
+    private validators;
+    constructor();
+    /**
+     * Compile and cache validators for all tool definitions
+     */
+    initializeValidators(toolDefinitions: McpToolDefinition[]): void;
+    /**
+     * Validate input arguments against tool schema
+     */
+    validateInput(toolName: string, args: unknown): {
+        valid: boolean;
+        errors?: string;
+    };
+    /**
+     * Get detailed validation errors for debugging
+     */
+    getDetailedErrors(toolName: string): any[] | undefined;
+    /**
+     * Clear all cached validators
+     */
+    clearValidators(): void;
+    /**
+     * Check if a validator exists for a tool
+     */
+    hasValidator(toolName: string): boolean;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/utils/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/utils/validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,qBAAa,cAAc;IACzB,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,UAAU,CAAgC;;IAWlD;;OAEG;IACH,oBAAoB,CAAC,eAAe,EAAE,iBAAiB,EAAE,GAAG,IAAI;IAOhE;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAsBnF;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,EAAE,GAAG,SAAS;IAKtD;;OAEG;IACH,eAAe,IAAI,IAAI;IAIvB;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAGxC"}

package/dist/utils/validator.js

@@ -0,0 +1,74 @@
+"use strict";
+/**
+ * Input Validation Service - Runtime validation for MCP requests
+ *
+ * This module provides runtime validation of incoming MCP requests
+ * against their defined schemas using AJV, ensuring type safety
+ * at runtime and preventing malformed inputs from causing errors.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InputValidator = void 0;
+const ajv_1 = __importDefault(require("ajv"));
+class InputValidator {
+    constructor() {
+        this.ajv = new ajv_1.default({
+            allErrors: true,
+            coerceTypes: true, // Automatically coerce types when safe
+            allowUnionTypes: true // Allow union types in schemas
+        });
+        this.validators = new Map();
+    }
+    /**
+     * Compile and cache validators for all tool definitions
+     */
+    initializeValidators(toolDefinitions) {
+        for (const tool of toolDefinitions) {
+            const validator = this.ajv.compile(tool.inputSchema);
+            this.validators.set(tool.name, validator);
+        }
+    }
+    /**
+     * Validate input arguments against tool schema
+     */
+    validateInput(toolName, args) {
+        const validator = this.validators.get(toolName);
+        if (!validator) {
+            return {
+                valid: false,
+                errors: `No validator found for tool: ${toolName}`
+            };
+        }
+        const valid = validator(args);
+        if (!valid) {
+            return {
+                valid: false,
+                errors: this.ajv.errorsText(validator.errors)
+            };
+        }
+        return { valid: true };
+    }
+    /**
+     * Get detailed validation errors for debugging
+     */
+    getDetailedErrors(toolName) {
+        const validator = this.validators.get(toolName);
+        return validator?.errors || undefined;
+    }
+    /**
+     * Clear all cached validators
+     */
+    clearValidators() {
+        this.validators.clear();
+    }
+    /**
+     * Check if a validator exists for a tool
+     */
+    hasValidator(toolName) {
+        return this.validators.has(toolName);
+    }
+}
+exports.InputValidator = InputValidator;
+//# sourceMappingURL=validator.js.map

package/dist/utils/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/utils/validator.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;AAEH,8CAA4C;AAG5C,MAAa,cAAc;IAIzB;QACE,IAAI,CAAC,GAAG,GAAG,IAAI,aAAG,CAAC;YACjB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI,EAAG,uCAAuC;YAC3D,eAAe,EAAE,IAAI,CAAE,+BAA+B;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,eAAoC;QACvD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB,EAAE,IAAa;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEhD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,gCAAgC,QAAQ,EAAE;aACnD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAE9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;aAC9C,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAgB;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,SAAS,EAAE,MAAM,IAAI,SAAS,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB;QAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;CACF;AArED,wCAqEC"}

package/dist/utils/workspaceResolver.d.ts

@@ -0,0 +1,40 @@
+/**
+ * WorkspaceResolver - Centralized workspace resolution logic
+ *
+ * This class handles all workspace resolution patterns used throughout
+ * the Motion MCP Server, including ID resolution, name lookups, and
+ * fallback to default workspace behavior.
+ */
+import { MotionWorkspace } from '../types/motion';
+import { MotionApiService } from '../services/motionApi';
+interface WorkspaceResolverOptions {
+    fallbackToDefault?: boolean;
+    validateAccess?: boolean;
+    useCache?: boolean;
+}
+interface WorkspaceArgs {
+    workspaceId?: string;
+    workspaceName?: string;
+}
+export declare class WorkspaceResolver {
+    private motionService;
+    constructor(motionApiService: MotionApiService);
+    /**
+     * Main workspace resolution method - handles all workspace resolution patterns
+     */
+    resolveWorkspace(args?: WorkspaceArgs, options?: WorkspaceResolverOptions): Promise<MotionWorkspace>;
+    /**
+     * Resolve workspace by ID - validates the workspace exists
+     */
+    private resolveByWorkspaceId;
+    /**
+     * Resolve workspace by name - finds matching workspace
+     */
+    private resolveByWorkspaceName;
+    /**
+     * Resolve default workspace - gets the first available workspace
+     */
+    private resolveDefaultWorkspace;
+}
+export {};
+//# sourceMappingURL=workspaceResolver.d.ts.map

package/dist/utils/workspaceResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceResolver.d.ts","sourceRoot":"","sources":["../../src/utils/workspaceResolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,UAAU,wBAAwB;IAChC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,aAAa;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,aAAa,CAAmB;gBAE5B,gBAAgB,EAAE,gBAAgB;IAO9C;;OAEG;IACG,gBAAgB,CACpB,IAAI,GAAE,aAAkB,EACxB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,eAAe,CAAC;IAqF3B;;OAEG;YACW,oBAAoB;IA2ClC;;OAEG;YACW,sBAAsB;IA+DpC;;OAEG;YACW,uBAAuB;CAyCtC"}