rebar-mcp 2.0.0

package/ROADMAP.md

@@ -0,0 +1,526 @@
+# rebar-mcp-server Roadmap & Specification
+
+**Version:** 1.0.0 → 2.0.0
+**Last Updated:** 2026-03-08
+**Status:** Active Development
+
+---
+
+## Current State (v1.0.0)
+
+### Completed Features
+
+| Category | Item | Status |
+|----------|------|--------|
+| **Core Tools (6)** | rebar_init_project | Done |
+| | rebar_generate_claudemd | Done |
+| | rebar_create_skill | Done |
+| | rebar_create_agent | Done |
+| | rebar_create_hook | Done |
+| | rebar_create_command | Done |
+| **Knowledge Tools (2)** | rebar_create_knowledge | Done |
+| | rebar_create_adr | Done |
+| **Management Tools (3)** | rebar_list_artifacts | Done |
+| | rebar_validate_config | Done |
+| | rebar_audit_context | Done |
+| **Enterprise Tools (4)** | rebar_apply_compliance | Done |
+| | rebar_create_ci_workflow | Done |
+| | rebar_create_security_hook | Done |
+| | rebar_generate_mcp_config | Done |
+| **Templates** | 5 CLAUDE.md templates | Done |
+| | 5 Skill templates | Done |
+| | 4 Agent templates | Done |
+| | 4 Hook templates | Done |
+| | 5 Knowledge templates | Done |
+| **Compliance Packs** | HIPAA | Done |
+| | SOC2 | Done |
+| | PCI-DSS | Done |
+| | SOX | Done |
+| **Hook Events** | 18 lifecycle events | Done |
+| **Documentation** | README.md | Done |
+| | CLAUDE.md | Done |
+
+---
+
+## Phase 1: v1.1.0 — Polish & Distribution
+
+**Target:** 2 weeks
+**Theme:** Code quality, output modes, ecosystem visibility
+
+### 1.1 Code Quality Fixes
+
+- [x] **Fix implicit `any` types in tool handlers**
+  - Files: `src/tools/*.ts`
+  - Add explicit types: `async (args: z.infer<typeof Schema>) => {}`
+  - Priority: High
+  - Effort: 2 hours
+  - **COMPLETED: 2026-03-08**
+
+- [x] **Add explicit return types to all async functions**
+  - Ensure all functions have `Promise<ToolResult>` or equivalent
+  - Priority: Medium
+  - Effort: 1 hour
+  - **COMPLETED: 2026-03-08**
+
+### 1.2 Output Mode Enhancements
+
+- [x] **Add `--json` output mode**
+  - All 15 tools support `output_format: "json" | "markdown"` parameter
+  - JSON mode returns structured data with `success`, `operation`, `data`, `message`, `warnings`, `errors`, `next_steps`
+  - Shared utility: `src/services/output-formatter.ts`
+  - Priority: High
+  - Effort: 4 hours
+  - **COMPLETED: 2026-03-08**
+
+- [x] **Add `--dry-run` mode**
+  - 12 write-operation tools support `dry_run: boolean` parameter
+  - Returns `would_create`, `would_update`, `would_skip` arrays without writing files
+  - 3 read-only tools (list_artifacts, validate_config, audit_context) excluded
+  - Priority: Medium
+  - Effort: 3 hours
+  - **COMPLETED: 2026-03-08**
+
+- [x] **Add `--ci` mode for validate_config**
+  - New parameter: `ci_mode: boolean`
+  - Forces JSON output for machine readability
+  - Returns `isError: true` on validation failures (exit code 1 in CLI)
+  - Priority: Medium
+  - Effort: 2 hours
+  - **COMPLETED: 2026-03-08**
+
+### 1.3 Distribution
+
+- [x] **Publish to npm**
+  - Package: `rebar-mcp-server` (https://www.npmjs.com/package/rebar-mcp-server)
+  - Install: `npm install -g rebar-mcp-server`
+  - Priority: High
+  - Effort: 1 hour
+  - **COMPLETED: 2026-03-08**
+
+- [x] **Register with MCP servers registry**
+  - Registry: https://registry.modelcontextprotocol.io/
+  - Name: `io.github.RCOLKITT/rebar-mcp-server`
+  - Published via `mcp-publisher publish`
+  - Priority: High
+  - Effort: 2 hours
+  - **COMPLETED: 2026-03-08**
+
+- [x] **Add to Claude Code MCP directory**
+  - Auto-discoverable via MCP Server Registry
+  - Install: `npm install -g rebar-mcp-server && claude mcp add --transport stdio rebar -- rebar-mcp-server`
+  - Priority: Medium
+  - Effort: 1 hour
+  - **COMPLETED: 2026-03-08**
+
+### 1.4 Testing
+
+- [x] **Add integration tests for all 15 tools**
+  - Uses Node.js built-in test runner
+  - Test files: `src/tests/*.test.ts`
+  - Utilities: `src/tests/test-utils.ts`, `src/tests/tool-harness.ts`
+  - Coverage: scaffolding (6), knowledge (2), management (3), enterprise (4)
+  - Tests dry_run, JSON output, error cases for each tool
+  - Priority: High
+  - Effort: 8 hours
+  - **COMPLETED: 2026-03-08**
+
+- [x] **Add input fuzzing tests**
+  - Test file: `src/tests/fuzzing.test.ts`
+  - Tests: path traversal, empty/null values, boundary lengths, special characters, invalid enums, type coercion, missing fields, large inputs, concurrent operations, JSON injection, null bytes
+  - Priority: Medium
+  - Effort: 4 hours
+  - **COMPLETED: 2026-03-08**
+
+---
+
+## Phase 2: v1.2.0 — New Tools & Integrations
+
+**Target:** 4 weeks
+**Theme:** Ecosystem integration, advanced hooks, CI/CD expansion
+
+### 2.1 New Tools
+
+- [ ] **`rebar_import_skill`**
+  ```typescript
+  // Import community skills from skills.sh or GitHub
+  rebar_import_skill({
+    source: "skills.sh" | "github" | "url",
+    identifier: string,  // e.g., "find-skills" or "user/repo/skill"
+    target_path?: string,
+    resolve_dependencies?: boolean
+  })
+  ```
+  - Validate skill structure before import
+  - Check for conflicts with existing skills
+  - Priority: High
+  - Effort: 8 hours
+
+- [ ] **`rebar_create_prompt_hook`**
+  ```typescript
+  // Create LLM-based validation hooks
+  rebar_create_prompt_hook({
+    event: HookEvent,
+    prompt: string,  // LLM evaluation prompt
+    model?: string,
+    timeout?: number,
+    description: string
+  })
+  ```
+  - Generate `type: "prompt"` hook configuration
+  - Include example prompts for common validations
+  - Priority: High
+  - Effort: 4 hours
+
+- [ ] **`rebar_create_agent_hook`**
+  ```typescript
+  // Create multi-turn agent verification hooks
+  rebar_create_agent_hook({
+    event: HookEvent,
+    agent_prompt: string,
+    max_turns?: number,
+    timeout?: number,
+    description: string
+  })
+  ```
+  - Generate `type: "agent"` hook configuration
+  - Priority: Medium
+  - Effort: 4 hours
+
+- [ ] **`rebar_sync_config`**
+  ```typescript
+  // Sync user and project configs
+  rebar_sync_config({
+    direction: "user_to_project" | "project_to_user" | "merge",
+    conflict_resolution: "prefer_user" | "prefer_project" | "manual",
+    dry_run?: boolean
+  })
+  ```
+  - Priority: Medium
+  - Effort: 6 hours
+
+- [ ] **`rebar_migrate_config`**
+  ```typescript
+  // Migrate configs to new schema versions
+  rebar_migrate_config({
+    project_path: string,
+    target_version?: string,  // defaults to latest
+    dry_run?: boolean
+  })
+  ```
+  - Priority: Low
+  - Effort: 8 hours
+
+### 2.2 CI/CD Expansion
+
+- [ ] **`rebar_create_gitlab_ci`**
+  ```typescript
+  rebar_create_gitlab_ci({
+    repo_path: string,
+    review_focus: ReviewFocus[],
+    branch_pattern?: string,
+    stages?: string[]
+  })
+  ```
+  - Generate `.gitlab-ci.yml` with Claude Code integration
+  - Priority: High
+  - Effort: 4 hours
+
+- [ ] **`rebar_create_azure_pipeline`**
+  ```typescript
+  rebar_create_azure_pipeline({
+    repo_path: string,
+    review_focus: ReviewFocus[],
+    branch_pattern?: string
+  })
+  ```
+  - Generate `azure-pipelines.yml`
+  - Priority: Medium
+  - Effort: 4 hours
+
+- [ ] **`rebar_create_bitbucket_pipeline`**
+  ```typescript
+  rebar_create_bitbucket_pipeline({
+    repo_path: string,
+    review_focus: ReviewFocus[],
+    branch_pattern?: string
+  })
+  ```
+  - Generate `bitbucket-pipelines.yml`
+  - Priority: Low
+  - Effort: 4 hours
+
+### 2.3 MCP Config Expansion
+
+- [ ] **Add new MCP service configs**
+  - Linear (issue tracking)
+  - Notion (documentation)
+  - Figma (design)
+  - Datadog (monitoring)
+  - LaunchDarkly (feature flags)
+  - Stripe (payments)
+  - Twilio (communications)
+  - Priority: Medium
+  - Effort: 4 hours
+
+### 2.4 New Templates
+
+- [ ] **SvelteKit CLAUDE.md template**
+  - Priority: Medium
+  - Effort: 2 hours
+
+- [ ] **Remix CLAUDE.md template**
+  - Priority: Medium
+  - Effort: 2 hours
+
+- [ ] **NestJS CLAUDE.md template**
+  - Priority: Medium
+  - Effort: 2 hours
+
+- [ ] **Deno CLAUDE.md template**
+  - Priority: Low
+  - Effort: 2 hours
+
+- [ ] **Bun CLAUDE.md template**
+  - Priority: Low
+  - Effort: 2 hours
+
+---
+
+## Phase 3: v1.3.0 — Enterprise & Compliance
+
+**Target:** 6 weeks
+**Theme:** Advanced compliance, audit capabilities, data protection
+
+### 3.1 New Compliance Packs
+
+- [ ] **ISO 42001 (AI Management Systems)**
+  ```typescript
+  rebar_apply_compliance({
+    standard: "iso-42001",
+    scope: "full" | "hooks_only" | "skills_only"
+  })
+  ```
+  - AI governance policies
+  - Model documentation requirements
+  - Risk assessment hooks
+  - Priority: High
+  - Effort: 8 hours
+
+- [ ] **FedRAMP**
+  - Federal risk authorization
+  - NIST 800-53 controls
+  - Priority: Medium
+  - Effort: 8 hours
+
+- [ ] **NIST 800-171**
+  - CUI protection
+  - DoD contractor requirements
+  - Priority: Medium
+  - Effort: 6 hours
+
+- [ ] **GDPR**
+  - EU data protection
+  - Data subject rights hooks
+  - Priority: High
+  - Effort: 6 hours
+
+- [ ] **CCPA**
+  - California privacy
+  - Priority: Medium
+  - Effort: 4 hours
+
+### 3.2 Audit & Logging
+
+- [ ] **`rebar_create_audit_hook`**
+  ```typescript
+  rebar_create_audit_hook({
+    project_path: string,
+    log_format: "jsonl" | "syslog" | "cloudwatch" | "datadog",
+    log_destination: string,  // file path or endpoint
+    events_to_log: HookEvent[],
+    include_content?: boolean,  // log actual file changes
+    pii_redaction?: boolean
+  })
+  ```
+  - SIEM-compatible logging
+  - Configurable verbosity
+  - PII redaction option
+  - Priority: High
+  - Effort: 8 hours
+
+- [ ] **`rebar_create_data_classifier`**
+  ```typescript
+  rebar_create_data_classifier({
+    project_path: string,
+    classification_levels: string[],  // e.g., ["public", "internal", "confidential", "restricted"]
+    auto_detect: boolean,  // scan for PII/PHI/PCI patterns
+    generate_claudeignore?: boolean,
+    generate_hooks?: boolean
+  })
+  ```
+  - Scan codebase for sensitive data patterns
+  - Auto-generate .claudeignore entries
+  - Create protective hooks
+  - Priority: High
+  - Effort: 10 hours
+
+### 3.3 Security Enhancements
+
+- [ ] **Signed templates**
+  - Add cryptographic signatures to all templates
+  - Verify signatures before applying
+  - Prevent supply chain attacks
+  - Priority: Medium
+  - Effort: 6 hours
+
+- [ ] **OAuth 2.1 for HTTP transport**
+  - Implement proper auth for remote MCP connections
+  - Token refresh, scope enforcement
+  - Priority: Medium
+  - Effort: 8 hours
+
+- [ ] **Rate limiting**
+  - Add rate limiting for HTTP transport
+  - Configurable limits per client
+  - Priority: Low
+  - Effort: 4 hours
+
+---
+
+## Phase 4: v2.0.0 — Platform & UX
+
+**Target:** 3 months
+**Theme:** Interactive experience, VS Code integration, enterprise SaaS
+
+### 4.1 Interactive CLI
+
+- [ ] **`rebar init --interactive`**
+  - Guided project setup wizard
+  - Prompts for tech stack, compliance, team size
+  - Live preview of generated files
+  - Priority: High
+  - Effort: 12 hours
+
+- [ ] **Diff preview for merge operations**
+  - Show unified diff before applying changes
+  - User confirmation step
+  - Priority: Medium
+  - Effort: 6 hours
+
+### 4.2 VS Code Extension
+
+- [ ] **rebar-vscode extension**
+  - UI for all rebar tools
+  - Tree view of artifacts
+  - One-click skill/agent/hook creation
+  - Validation status indicators
+  - Priority: High
+  - Effort: 40 hours
+
+- [ ] **CodeLens integration**
+  - Show rebar actions inline in CLAUDE.md
+  - Quick edit for skills and hooks
+  - Priority: Medium
+  - Effort: 8 hours
+
+### 4.3 Enterprise SaaS (rebar Cloud)
+
+- [ ] **Team management dashboard**
+  - Centralized policy management
+  - Usage analytics per developer
+  - Compliance status overview
+  - Priority: High
+  - Effort: 80 hours
+
+- [ ] **Policy distribution**
+  - Push CLAUDE.md templates to all team projects
+  - Enforce compliance packs organization-wide
+  - Priority: High
+  - Effort: 20 hours
+
+- [ ] **Audit log aggregation**
+  - Centralized view of all Claude Code actions
+  - Search and filter capabilities
+  - Export for compliance reporting
+  - Priority: Medium
+  - Effort: 20 hours
+
+### 4.4 skills.sh Integration
+
+- [ ] **Publish generated skills to marketplace**
+  - One-command skill publishing
+  - Version management
+  - Priority: Medium
+  - Effort: 8 hours
+
+- [ ] **Skill analytics**
+  - Track installs of published skills
+  - Feedback and ratings
+  - Priority: Low
+  - Effort: 12 hours
+
+---
+
+## Backlog (Unscheduled)
+
+### Mobile Templates
+- [ ] React Native CLAUDE.md template
+- [ ] Flutter CLAUDE.md template
+- [ ] Swift/iOS CLAUDE.md template
+- [ ] Kotlin/Android CLAUDE.md template
+
+### Infrastructure Templates
+- [ ] Terraform hook validation
+- [ ] Pulumi hook validation
+- [ ] Kubernetes manifest validation
+- [ ] Docker security scanning
+
+### Language-Specific Agents
+- [ ] Rust security auditor (cargo-audit integration)
+- [ ] Python type checker agent (mypy/pyright)
+- [ ] Go linter agent (golangci-lint)
+- [ ] Java static analysis agent (SpotBugs)
+
+### Advanced Features
+- [ ] Multi-repo monorepo support
+- [ ] Git worktree integration
+- [ ] Remote development support (SSH, containers)
+- [ ] AI-powered CLAUDE.md optimization suggestions
+
+---
+
+## Success Metrics
+
+### v1.1.0
+- [x] Zero TypeScript errors with strict mode — **COMPLETED**
+- [x] Integration tests for all 15 tool handlers — **COMPLETED**
+- [ ] Listed in MCP servers registry
+- [ ] Published to npm with >100 weekly downloads
+
+### v1.2.0
+- [ ] 20+ MCP service configurations
+- [ ] Support for 3+ CI/CD platforms
+- [ ] 10+ CLAUDE.md templates
+- [ ] Community skill import working
+
+### v1.3.0
+- [ ] 8+ compliance packs
+- [ ] Audit logging to 4+ SIEM formats
+- [ ] Data classification with 95%+ accuracy on test set
+- [ ] Security audit passed
+
+### v2.0.0
+- [ ] VS Code extension with 1000+ installs
+- [ ] 10+ enterprise pilots
+- [ ] $50K ARR from cloud offering
+- [ ] Partnership with Anthropic
+
+---
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development guidelines.
+
+## License
+
+ISC — Vaspera Capital