musubix2 0.5.6 → 0.5.7

package/.claude/.musubix-managed

@@ -1 +1 @@
-{"generator":"musubix2","version":"0.5.6","timestamp":"2026-07-09T09:46:29.695Z"}
+{"generator":"musubix2","version":"0.5.7","timestamp":"2026-07-09T10:10:51.798Z"}

package/dist/assets/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "version": "1.0",
-  "generatedAt": "2026-07-09T09:46:29.725Z",
+  "generatedAt": "2026-07-09T10:10:51.826Z",
   "entries": [
     {
       "platform": "copilot",

package/dist/cli.js

@@ -12124,6 +12124,19 @@ var init_transport = __esm({
           this.rl = null;
         }
       }
+      /**
+       * Resolve once the input stream closes (client disconnect / stdin EOF).
+       * Used by the CLI launcher to keep the process alive for the lifetime of
+       * the connection — `start()` intentionally resolves immediately so callers
+       * can begin writing, so a separate wait hook is needed to block on.
+       */
+      async waitForClose() {
+        if (!this.rl)
+          return;
+        await new Promise((resolve9) => {
+          this.rl.once("close", () => resolve9());
+        });
+      }
       send(message) {
         this.output.write(JSON.stringify(message) + "\n");
       }
@@ -13989,7 +14002,7 @@ function knowledgeTools() {
         const { createKnowledgeStore: createKnowledgeStore2 } = await Promise.resolve().then(() => (init_dist8(), dist_exports8));
         const store = createKnowledgeStore2(params["basePath"] ?? ".knowledge");
         await store.load();
-        const entity = store.getEntity(params["id"]);
+        const entity = await store.getEntity(params["id"]);
         return entity ? ok(entity) : fail("Entity not found");
       } catch {
         return fail("Knowledge package not available");
@@ -14062,7 +14075,7 @@ function knowledgeTools() {
         const { createKnowledgeStore: createKnowledgeStore2 } = await Promise.resolve().then(() => (init_dist8(), dist_exports8));
         const store = createKnowledgeStore2(params["basePath"] ?? ".knowledge");
         await store.load();
-        const results = store.search(params["query"], { limit: params["limit"] ?? 10 });
+        const results = await store.search(params["query"], { limit: params["limit"] ?? 10 });
         return ok(results);
       } catch {
         return fail("Knowledge package not available");
@@ -14077,7 +14090,7 @@ function knowledgeTools() {
         const { createKnowledgeStore: createKnowledgeStore2 } = await Promise.resolve().then(() => (init_dist8(), dist_exports8));
         const store = createKnowledgeStore2(params["basePath"] ?? ".knowledge");
         await store.load();
-        const result = store.traverse(params["startId"], { depth: params["depth"] ?? 2 });
+        const result = await store.traverse(params["startId"], { depth: params["depth"] ?? 2 });
         return ok(result);
       } catch {
         return fail("Knowledge package not available");
@@ -14249,52 +14262,64 @@ function codeAnalysisTools() {
     })
   ];
 }
+function sourceOf(params) {
+  return params["code"] ?? params["source"] ?? params["target"] ?? "";
+}
+function severityOf(findings) {
+  const order = ["critical", "high", "medium", "low", "info"];
+  for (const s of order)
+    if (findings.some((f) => f.severity === s))
+      return s;
+  return "none";
+}
 function securityTools() {
   return [
     tool("security.scan", "Run a security scan on source code", "security", [
-      param("target", "string", "File or directory path to scan"),
-      param("rules", "array", "Specific rules to apply", false)
+      param("code", "string", "Source code to scan"),
+      param("filePath", "string", "File path for the source (for reporting)", false, "inline")
     ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.scan?.(params["target"], params["rules"]);
-        return ok(result ?? { findings: [], severity: "none" });
+        const { createSecurityScanner: createSecurityScanner2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const result = createSecurityScanner2().scan(sourceOf(params), params["filePath"] ?? "inline");
+        return ok({ findings: result.findings, severity: severityOf(result.findings) });
       } catch {
-        return ok({ findings: [], severity: "none" });
+        return fail("Security package not available");
       }
     }),
-    tool("security.secrets.detect", "Detect secrets and credentials in source code", "security", [param("target", "string", "File or directory path to scan")], async (params) => {
+    tool("security.secrets.detect", "Detect secrets and credentials in source code", "security", [
+      param("code", "string", "Source code to scan"),
+      param("filePath", "string", "File path for the source", false, "inline")
+    ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.detectSecrets?.(params["target"]);
-        return ok(result ?? { secrets: [], count: 0 });
+        const { createSecretDetector: createSecretDetector2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const secrets = createSecretDetector2().scan(sourceOf(params), params["filePath"] ?? "inline");
+        return ok({ secrets, count: secrets.length });
       } catch {
-        return ok({ secrets: [], count: 0 });
+        return fail("Security package not available");
       }
     }),
     tool("security.taint.analyze", "Perform taint analysis to track untrusted data flow", "security", [
-      param("source", "string", "Source code to analyze"),
-      param("sources", "array", "Taint sources", false),
-      param("sinks", "array", "Taint sinks", false)
+      param("code", "string", "Source code to analyze"),
+      param("filePath", "string", "File path for the source", false, "inline")
     ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.taintAnalysis?.(params["source"], params["sources"], params["sinks"]);
-        return ok(result ?? { tainted: [], paths: [] });
+        const { TaintAnalyzer: TaintAnalyzer2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const tainted = new TaintAnalyzer2().analyze(sourceOf(params), params["filePath"] ?? "inline");
+        return ok({ tainted, count: tainted.length });
       } catch {
-        return ok({ tainted: [], paths: [] });
+        return fail("Security package not available");
       }
     }),
-    tool("security.compliance.check", "Check code compliance against security standards", "security", [
-      param("target", "string", "File or directory path"),
-      param("standard", "string", "Compliance standard: owasp | cwe | sans", false, "owasp")
+    tool("security.compliance.check", "Check code compliance against registered security policies", "security", [
+      param("code", "string", "Source code to check"),
+      param("filePath", "string", "File path for the source", false, "inline")
     ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.complianceCheck?.(params["target"], params["standard"] ?? "owasp");
-        return ok(result ?? { compliant: true, issues: [] });
+        const { createComplianceChecker: createComplianceChecker2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const result = createComplianceChecker2().check(sourceOf(params), params["filePath"] ?? "inline", []);
+        return ok(result);
       } catch {
-        return ok({ compliant: true, issues: [] });
+        return fail("Security package not available");
       }
     })
   ];
@@ -15307,6 +15332,7 @@ var init_mcp_cli_launcher = __esm({
         } else {
           const transport = new StdioTransport2();
           await server.start(transport);
+          await transport.waitForClose();
         }
       }
     };

package/dist/index.js

@@ -12124,6 +12124,19 @@ var init_transport = __esm({
           this.rl = null;
         }
       }
+      /**
+       * Resolve once the input stream closes (client disconnect / stdin EOF).
+       * Used by the CLI launcher to keep the process alive for the lifetime of
+       * the connection — `start()` intentionally resolves immediately so callers
+       * can begin writing, so a separate wait hook is needed to block on.
+       */
+      async waitForClose() {
+        if (!this.rl)
+          return;
+        await new Promise((resolve9) => {
+          this.rl.once("close", () => resolve9());
+        });
+      }
       send(message) {
         this.output.write(JSON.stringify(message) + "\n");
       }
@@ -13989,7 +14002,7 @@ function knowledgeTools() {
         const { createKnowledgeStore: createKnowledgeStore2 } = await Promise.resolve().then(() => (init_dist8(), dist_exports8));
         const store = createKnowledgeStore2(params["basePath"] ?? ".knowledge");
         await store.load();
-        const entity = store.getEntity(params["id"]);
+        const entity = await store.getEntity(params["id"]);
         return entity ? ok(entity) : fail("Entity not found");
       } catch {
         return fail("Knowledge package not available");
@@ -14062,7 +14075,7 @@ function knowledgeTools() {
         const { createKnowledgeStore: createKnowledgeStore2 } = await Promise.resolve().then(() => (init_dist8(), dist_exports8));
         const store = createKnowledgeStore2(params["basePath"] ?? ".knowledge");
         await store.load();
-        const results = store.search(params["query"], { limit: params["limit"] ?? 10 });
+        const results = await store.search(params["query"], { limit: params["limit"] ?? 10 });
         return ok(results);
       } catch {
         return fail("Knowledge package not available");
@@ -14077,7 +14090,7 @@ function knowledgeTools() {
         const { createKnowledgeStore: createKnowledgeStore2 } = await Promise.resolve().then(() => (init_dist8(), dist_exports8));
         const store = createKnowledgeStore2(params["basePath"] ?? ".knowledge");
         await store.load();
-        const result = store.traverse(params["startId"], { depth: params["depth"] ?? 2 });
+        const result = await store.traverse(params["startId"], { depth: params["depth"] ?? 2 });
         return ok(result);
       } catch {
         return fail("Knowledge package not available");
@@ -14249,52 +14262,64 @@ function codeAnalysisTools() {
     })
   ];
 }
+function sourceOf(params) {
+  return params["code"] ?? params["source"] ?? params["target"] ?? "";
+}
+function severityOf(findings) {
+  const order = ["critical", "high", "medium", "low", "info"];
+  for (const s of order)
+    if (findings.some((f) => f.severity === s))
+      return s;
+  return "none";
+}
 function securityTools() {
   return [
     tool("security.scan", "Run a security scan on source code", "security", [
-      param("target", "string", "File or directory path to scan"),
-      param("rules", "array", "Specific rules to apply", false)
+      param("code", "string", "Source code to scan"),
+      param("filePath", "string", "File path for the source (for reporting)", false, "inline")
     ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.scan?.(params["target"], params["rules"]);
-        return ok(result ?? { findings: [], severity: "none" });
+        const { createSecurityScanner: createSecurityScanner2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const result = createSecurityScanner2().scan(sourceOf(params), params["filePath"] ?? "inline");
+        return ok({ findings: result.findings, severity: severityOf(result.findings) });
       } catch {
-        return ok({ findings: [], severity: "none" });
+        return fail("Security package not available");
       }
     }),
-    tool("security.secrets.detect", "Detect secrets and credentials in source code", "security", [param("target", "string", "File or directory path to scan")], async (params) => {
+    tool("security.secrets.detect", "Detect secrets and credentials in source code", "security", [
+      param("code", "string", "Source code to scan"),
+      param("filePath", "string", "File path for the source", false, "inline")
+    ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.detectSecrets?.(params["target"]);
-        return ok(result ?? { secrets: [], count: 0 });
+        const { createSecretDetector: createSecretDetector2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const secrets = createSecretDetector2().scan(sourceOf(params), params["filePath"] ?? "inline");
+        return ok({ secrets, count: secrets.length });
       } catch {
-        return ok({ secrets: [], count: 0 });
+        return fail("Security package not available");
       }
     }),
     tool("security.taint.analyze", "Perform taint analysis to track untrusted data flow", "security", [
-      param("source", "string", "Source code to analyze"),
-      param("sources", "array", "Taint sources", false),
-      param("sinks", "array", "Taint sinks", false)
+      param("code", "string", "Source code to analyze"),
+      param("filePath", "string", "File path for the source", false, "inline")
     ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.taintAnalysis?.(params["source"], params["sources"], params["sinks"]);
-        return ok(result ?? { tainted: [], paths: [] });
+        const { TaintAnalyzer: TaintAnalyzer2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const tainted = new TaintAnalyzer2().analyze(sourceOf(params), params["filePath"] ?? "inline");
+        return ok({ tainted, count: tainted.length });
       } catch {
-        return ok({ tainted: [], paths: [] });
+        return fail("Security package not available");
       }
     }),
-    tool("security.compliance.check", "Check code compliance against security standards", "security", [
-      param("target", "string", "File or directory path"),
-      param("standard", "string", "Compliance standard: owasp | cwe | sans", false, "owasp")
+    tool("security.compliance.check", "Check code compliance against registered security policies", "security", [
+      param("code", "string", "Source code to check"),
+      param("filePath", "string", "File path for the source", false, "inline")
     ], async (params) => {
       try {
-        const sec = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
-        const result = sec.complianceCheck?.(params["target"], params["standard"] ?? "owasp");
-        return ok(result ?? { compliant: true, issues: [] });
+        const { createComplianceChecker: createComplianceChecker2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports5));
+        const result = createComplianceChecker2().check(sourceOf(params), params["filePath"] ?? "inline", []);
+        return ok(result);
       } catch {
-        return ok({ compliant: true, issues: [] });
+        return fail("Security package not available");
       }
     })
   ];
@@ -15307,6 +15332,7 @@ var init_mcp_cli_launcher = __esm({
         } else {
           const transport = new StdioTransport2();
           await server.start(transport);
+          await transport.waitForClose();
         }
       }
     };

package/dist/interface/cli/mcp-cli-launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-cli-launcher.d.ts","sourceRoot":"","sources":["../../../src/interface/cli/mcp-cli-launcher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEnE,qBAAa,cAAc;IACnB,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBnD"}
+{"version":3,"file":"mcp-cli-launcher.d.ts","sourceRoot":"","sources":["../../../src/interface/cli/mcp-cli-launcher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEnE,qBAAa,cAAc;IACnB,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;CAqBnD"}

package/dist/interface/cli/mcp-cli-launcher.js

@@ -14,6 +14,10 @@ export class McpCliLauncher {
         else {
             const transport = new StdioTransport();
             await server.start(transport);
+            // StdioTransport.start() resolves immediately; without this the CLI's
+            // top-level `process.exit()` would kill the server before it handles any
+            // request. Block until the client disconnects (stdin EOF).
+            await transport.waitForClose();
         }
     }
 }

package/dist/interface/cli/mcp-cli-launcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-cli-launcher.js","sourceRoot":"","sources":["../../../src/interface/cli/mcp-cli-launcher.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,KAAK,CAAC,OAAsB;QAChC,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/E,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAChC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;gBAC1B,YAAY,EAAE,MAAM;gBACpB,WAAW,EAAE,WAAW;aACzB,EAAE,MAAqE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,cAAc,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"mcp-cli-launcher.js","sourceRoot":"","sources":["../../../src/interface/cli/mcp-cli-launcher.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,KAAK,CAAC,OAAsB;QAChC,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/E,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAChC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;gBAC1B,YAAY,EAAE,MAAM;gBACpB,WAAW,EAAE,WAAW;aACzB,EAAE,MAAqE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,cAAc,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9B,sEAAsE;YACtE,yEAAyE;YACzE,2DAA2D;YAC3D,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "musubix2",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "description": "MUSUBIX2 — Specification Driven Development System",
   "type": "module",
   "main": "./dist/index.js",