saasgadget 0.1.0

package/dist/mcp/tools/compute-risk-score.js

@@ -0,0 +1,171 @@
+/**
+ * compute_risk_score MCP tool — blended scoring from deterministic rules + agent analysis.
+ * @module mcp/tools/compute-risk-score
+ */
+import { z } from 'zod';
+import { SignalSchema } from '../../schemas/common.js';
+// --- Input / Output schemas ---
+export const ComputeRiskScoreInputSchema = z.object({
+    domain: z.enum(['tech', 'security', 'code-health', 'business', 'finance']),
+    signals: z.array(SignalSchema),
+    rulesBaseline: z.object({
+        score: z.enum(['green', 'yellow', 'red']),
+        rulesFired: z.array(z.string()),
+    }),
+});
+export const ComputeRiskScoreOutputSchema = z.object({
+    domain: z.string(),
+    finalRisk: z.enum(['green', 'yellow', 'red']),
+    confidence: z.number().min(0).max(1),
+    baselineSource: z.literal('rules'),
+    agentAdjustmentSource: z.literal('agent'),
+    citedSignals: z.array(z.string()),
+    summary: z.string(),
+});
+export const BASELINE_RULES = [
+    {
+        id: 'no-auth-middleware',
+        domain: 'security',
+        rating: 'red',
+        condition: 'No authentication middleware detected',
+        check: (signals) => !signals.some((s) => s.category === 'auth' && s.agentConfidence >= 0.5),
+    },
+    {
+        id: 'no-https-enforcement',
+        domain: 'security',
+        rating: 'red',
+        condition: 'No HTTPS enforcement',
+        check: (signals) => !signals.some((s) => s.finding.toLowerCase().includes('https') ||
+            s.finding.toLowerCase().includes('tls') ||
+            s.finding.toLowerCase().includes('ssl')),
+    },
+    {
+        id: 'known-vulnerable-dep',
+        domain: 'security',
+        rating: 'red',
+        condition: 'Known vulnerable dependency (critical CVE)',
+        check: (signals) => signals.some((s) => s.category === 'security' &&
+            s.severity === 'critical' &&
+            (s.finding.toLowerCase().includes('cve') || s.finding.toLowerCase().includes('vulnerability'))),
+    },
+    {
+        id: 'no-billing-integration',
+        domain: 'business',
+        rating: 'yellow',
+        condition: 'No billing/payment integration',
+        check: (signals) => !signals.some((s) => s.category === 'billing' && s.agentConfidence >= 0.5),
+    },
+    {
+        id: 'no-multi-tenancy',
+        domain: 'tech',
+        rating: 'yellow',
+        condition: 'No multi-tenancy pattern',
+        check: (signals) => !signals.some((s) => s.category === 'tenancy' && s.agentConfidence >= 0.5),
+    },
+    {
+        id: 'no-error-monitoring',
+        domain: 'code-health',
+        rating: 'yellow',
+        condition: 'No error monitoring/logging',
+        check: (signals) => !signals.some((s) => s.finding.toLowerCase().includes('logging') ||
+            s.finding.toLowerCase().includes('sentry') ||
+            s.finding.toLowerCase().includes('datadog') ||
+            s.finding.toLowerCase().includes('winston') ||
+            s.finding.toLowerCase().includes('pino')),
+    },
+    {
+        id: 'no-ci-cd',
+        domain: 'code-health',
+        rating: 'yellow',
+        condition: 'No CI/CD pipeline',
+        check: (signals) => !signals.some((s) => s.finding.toLowerCase().includes('ci') ||
+            s.finding.toLowerCase().includes('github/workflows') ||
+            s.finding.toLowerCase().includes('jenkins') ||
+            s.finding.toLowerCase().includes('gitlab-ci')),
+    },
+    {
+        id: 'no-test-files',
+        domain: 'code-health',
+        rating: 'yellow',
+        condition: 'No test files detected',
+        check: (signals) => !signals.some((s) => s.category === 'code-health' &&
+            (s.finding.toLowerCase().includes('test') || s.finding.toLowerCase().includes('spec'))),
+    },
+    {
+        id: 'outdated-major-dep',
+        domain: 'code-health',
+        rating: 'yellow',
+        condition: 'Outdated major dependency (>2 major versions behind)',
+        check: (signals) => signals.some((s) => s.finding.toLowerCase().includes('outdated') ||
+            s.finding.toLowerCase().includes('deprecated')),
+    },
+    {
+        id: 'hardcoded-secrets',
+        domain: 'security',
+        rating: 'red',
+        condition: 'Hardcoded secrets in source',
+        check: (signals) => signals.some((s) => s.category === 'security' &&
+            s.severity === 'critical' &&
+            s.finding.toLowerCase().includes('hardcoded')),
+    },
+];
+/**
+ * Apply baseline rules to determine the deterministic risk score for a domain.
+ */
+export function applyBaselineRules(domain, signals) {
+    const domainRules = BASELINE_RULES.filter((r) => r.domain === domain);
+    const fired = [];
+    let score = 'green';
+    for (const rule of domainRules) {
+        if (rule.check(signals)) {
+            fired.push(rule.id);
+            if (rule.rating === 'red')
+                score = 'red';
+            else if (rule.rating === 'yellow' && score !== 'red')
+                score = 'yellow';
+        }
+    }
+    return { score, rulesFired: fired };
+}
+/**
+ * Compute the blended risk score from rules baseline + signal analysis.
+ * Agent analysis can elevate but NOT lower a rule-anchored baseline rating.
+ */
+export function computeRiskScore(input) {
+    const { domain, signals, rulesBaseline } = input;
+    // Agent-derived severity from signals
+    let agentRisk = 'green';
+    const hasCritical = signals.some((s) => s.severity === 'critical' || s.severity === 'high');
+    const hasMedium = signals.some((s) => s.severity === 'medium');
+    if (hasCritical)
+        agentRisk = 'red';
+    else if (hasMedium)
+        agentRisk = 'yellow';
+    // Blended: agent can elevate but not lower baseline
+    const riskOrder = { green: 0, yellow: 1, red: 2 };
+    const finalRisk = (riskOrder[agentRisk] ?? 0) > (riskOrder[rulesBaseline.score] ?? 0)
+        ? agentRisk
+        : rulesBaseline.score;
+    // Confidence: higher when more signals confirm the rating
+    const relevantSignals = signals.filter((s) => s.agentConfidence >= 0.5);
+    const avgConfidence = relevantSignals.length > 0
+        ? relevantSignals.reduce((sum, s) => sum + s.agentConfidence, 0) / relevantSignals.length
+        : 0.5;
+    const citedSignals = signals.map((s) => s.id);
+    const summaryParts = [];
+    if (rulesBaseline.rulesFired.length > 0) {
+        summaryParts.push(`Baseline rules fired: ${rulesBaseline.rulesFired.join(', ')}`);
+    }
+    summaryParts.push(`${signals.length} signal(s) analyzed`);
+    summaryParts.push(`Final risk: ${finalRisk}`);
+    return {
+        domain,
+        finalRisk,
+        confidence: Math.round(avgConfidence * 100) / 100,
+        baselineSource: 'rules',
+        agentAdjustmentSource: 'agent',
+        citedSignals,
+        summary: summaryParts.join('. ') + '.',
+    };
+}
+//# sourceMappingURL=compute-risk-score.js.map

package/dist/mcp/tools/compute-risk-score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-risk-score.js","sourceRoot":"","sources":["../../../src/mcp/tools/compute-risk-score.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAe,MAAM,yBAAyB,CAAC;AAEpE,iCAAiC;AAEjC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAClC,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACzC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAcH,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C;QACE,EAAE,EAAE,oBAAoB;QACxB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,uCAAuC;QAClD,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,eAAe,IAAI,GAAG,CAClD;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,sBAAsB;QACjC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CACxC;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,4CAA4C;QACvD,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,CAAC,QAAQ,KAAK,UAAU;YACzB,CAAC,CAAC,QAAQ,KAAK,UAAU;YACzB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAC/F;KACF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,gCAAgC;QAC3C,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,IAAI,GAAG,CACrD;KACF;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,0BAA0B;QACrC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,IAAI,GAAG,CACrD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,6BAA6B;QACxC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CACzC;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,mBAAmB;QAC9B,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACpD,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC9C;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,wBAAwB;QACnC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,QAAQ,KAAK,aAAa;YAC5B,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACvF;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,sDAAsD;QACjE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC5C,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC/C;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,6BAA6B;QACxC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,CAAC,QAAQ,KAAK,UAAU;YACzB,CAAC,CAAC,QAAQ,KAAK,UAAU;YACzB,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC9C;KACF;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAuC,EACvC,OAAiB;IAEjB,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAA+B,OAAO,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;gBAAE,KAAK,GAAG,KAAK,CAAC;iBACpC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK;gBAAE,KAAK,GAAG,QAAQ,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAEjD,sCAAsC;IACtC,IAAI,SAAS,GAA+B,OAAO,CAAC;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC/D,IAAI,WAAW;QAAE,SAAS,GAAG,KAAK,CAAC;SAC9B,IAAI,SAAS;QAAE,SAAS,GAAG,QAAQ,CAAC;IAEzC,oDAAoD;IACpD,MAAM,SAAS,GAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;IAExB,0DAA0D;IAC1D,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;QAC9C,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,MAAM;QACzF,CAAC,CAAC,GAAG,CAAC;IAER,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,aAAa,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,YAAY,CAAC,IAAI,CAAC,yBAAyB,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAC1D,YAAY,CAAC,IAAI,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;IAE9C,OAAO;QACL,MAAM;QACN,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,GAAG,GAAG;QACjD,cAAc,EAAE,OAAO;QACvB,qBAAqB,EAAE,OAAO;QAC9B,YAAY;QACZ,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG;KACvC,CAAC;AACJ,CAAC"}

package/dist/mcp/tools/generate-plan.d.ts

@@ -0,0 +1,99 @@
+/**
+ * generate_plan MCP tool — remediation step decomposition.
+ * @module mcp/tools/generate-plan
+ */
+import { z } from 'zod';
+import type { IAgentInvoker } from '../../contracts/agent-invoker.js';
+export declare const GeneratePlanInputSchema: z.ZodObject<{
+    request: z.ZodString;
+    repo: z.ZodString;
+    ref: z.ZodDefault<z.ZodString>;
+    scanResult: z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    detail: z.ZodDefault<z.ZodEnum<{
+        concise: "concise";
+        balanced: "balanced";
+        exhaustive: "exhaustive";
+    }>>;
+}, z.core.$strip>;
+export type GeneratePlanInput = z.infer<typeof GeneratePlanInputSchema>;
+export declare const GeneratePlanOutputSchema: z.ZodObject<{
+    id: z.ZodString;
+    request: z.ZodString;
+    repo: z.ZodString;
+    generatedAt: z.ZodString;
+    steps: z.ZodArray<z.ZodObject<{
+        order: z.ZodNumber;
+        action: z.ZodString;
+        filePath: z.ZodString;
+        lineRange: z.ZodNullable<z.ZodObject<{
+            start: z.ZodNumber;
+            end: z.ZodNumber;
+        }, z.core.$strip>>;
+        codeLocation: z.ZodString;
+        rationale: z.ZodString;
+        doNothingTradeoff: z.ZodString;
+        riskTier: z.ZodEnum<{
+            safe: "safe";
+            moderate: "moderate";
+            advanced: "advanced";
+        }>;
+        confidence: z.ZodNumber;
+    }, z.core.$strip>>;
+    riskItems: z.ZodArray<z.ZodObject<{
+        description: z.ZodString;
+        confidence: z.ZodNumber;
+        suggestedValidation: z.ZodString;
+    }, z.core.$strip>>;
+    affectedFiles: z.ZodArray<z.ZodString>;
+    estimatedComplexity: z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>;
+    status: z.ZodEnum<{
+        draft: "draft";
+        approved: "approved";
+        executing: "executing";
+        completed: "completed";
+        aborted: "aborted";
+    }>;
+    promptVersions: z.ZodRecord<z.ZodString, z.ZodString>;
+    nextActions: z.ZodArray<z.ZodObject<{
+        rank: z.ZodNumber;
+        action: z.ZodString;
+        impact: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
+        file: z.ZodNullable<z.ZodString>;
+        lineRef: z.ZodNullable<z.ZodString>;
+        doNothingTradeoff: z.ZodString;
+    }, z.core.$strip>>;
+    sevenDayTimeline: z.ZodArray<z.ZodObject<{
+        day: z.ZodNumber;
+        action: z.ZodString;
+        priority: z.ZodEnum<{
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>;
+    }, z.core.$strip>>;
+    assumptions: z.ZodArray<z.ZodObject<{
+        statement: z.ZodString;
+        confidence: z.ZodNumber;
+        source: z.ZodEnum<{
+            rule: "rule";
+            agent: "agent";
+            profile: "profile";
+            inferred: "inferred";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type GeneratePlanOutput = z.infer<typeof GeneratePlanOutputSchema>;
+/**
+ * Execute the generate_plan tool.
+ * Decomposes a change request into ordered remediation steps with risk tiers.
+ */
+export declare function executeGeneratePlan(args: GeneratePlanInput, invoker: IAgentInvoker, log: (level: string, msg: string) => Promise<void>): Promise<GeneratePlanOutput>;
+//# sourceMappingURL=generate-plan.d.ts.map

package/dist/mcp/tools/generate-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-plan.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/generate-plan.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAOtE,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAMlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAcnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GACjD,OAAO,CAAC,kBAAkB,CAAC,CAmE7B"}

package/dist/mcp/tools/generate-plan.js

@@ -0,0 +1,200 @@
+/**
+ * generate_plan MCP tool — remediation step decomposition.
+ * @module mcp/tools/generate-plan
+ */
+import { z } from 'zod';
+import { NextActionSchema, TimelineItemSchema, AssumptionSchema } from '../../schemas/common.js';
+import { PlanStepSchema, RiskItemSchema } from '../../schemas/plan.v1.js';
+// --- Input / Output schemas ---
+export const GeneratePlanInputSchema = z.object({
+    request: z.string(),
+    repo: z.string(),
+    ref: z.string().default('main'),
+    scanResult: z.record(z.string(), z.unknown()).nullable().default(null),
+    detail: z.enum(['concise', 'balanced', 'exhaustive']).default('balanced'),
+});
+export const GeneratePlanOutputSchema = z.object({
+    id: z.string(),
+    request: z.string(),
+    repo: z.string(),
+    generatedAt: z.string(),
+    steps: z.array(PlanStepSchema),
+    riskItems: z.array(RiskItemSchema),
+    affectedFiles: z.array(z.string()),
+    estimatedComplexity: z.enum(['low', 'medium', 'high']),
+    status: z.enum(['draft', 'approved', 'executing', 'completed', 'aborted']),
+    promptVersions: z.record(z.string(), z.string()),
+    nextActions: z.array(NextActionSchema),
+    sevenDayTimeline: z.array(TimelineItemSchema),
+    assumptions: z.array(AssumptionSchema),
+});
+/**
+ * Execute the generate_plan tool.
+ * Decomposes a change request into ordered remediation steps with risk tiers.
+ */
+export async function executeGeneratePlan(args, invoker, log) {
+    await log('info', `Generating plan for: ${args.request.slice(0, 80)}`);
+    // Parse repo owner/name
+    const repoParts = args.repo.split('/');
+    const owner = repoParts.length > 1 ? (repoParts[0] ?? '') : '';
+    const name = repoParts.length > 1 ? (repoParts[1] ?? args.repo) : args.repo;
+    const context = {
+        repo: { owner, name, ref: args.ref },
+        scanResult: args.scanResult,
+        founderProfile: null,
+        toolProfile: {
+            name: 'plan',
+            allowedTools: ['grep', 'glob', 'view'],
+            requireApproval: [],
+            description: 'Plan generation (read-only)',
+        },
+        sessionId: '',
+        detail: args.detail,
+        tokenBudget: 1_000_000,
+    };
+    // Invoke the agent for plan generation
+    const agentResult = await invoker.invoke('plan', context, {
+        request: args.request,
+    });
+    await log('info', `Agent returned ${agentResult.findings.length} findings`);
+    // Build plan steps from agent findings
+    const steps = buildPlanSteps(agentResult, args.request);
+    // Identify affected files from steps
+    const affectedFiles = [...new Set(steps.map((s) => s.filePath))];
+    // Assess risk items
+    const riskItems = buildRiskItems(agentResult);
+    // Determine complexity
+    const estimatedComplexity = assessComplexity(steps, riskItems);
+    // Generate next actions
+    const nextActions = buildPlanNextActions(steps);
+    // Generate timeline
+    const sevenDayTimeline = buildPlanTimeline(steps, estimatedComplexity);
+    const planId = `plan-${Date.now().toString(36)}`;
+    return {
+        id: planId,
+        request: args.request,
+        repo: args.repo,
+        generatedAt: new Date().toISOString(),
+        steps,
+        riskItems,
+        affectedFiles,
+        estimatedComplexity,
+        status: 'draft',
+        promptVersions: {
+            'fix.sprint.plan': '1.0.0',
+        },
+        nextActions,
+        sevenDayTimeline,
+        assumptions: agentResult.assumptions,
+    };
+}
+// --- Helper functions ---
+function buildPlanSteps(result, request) {
+    if (result.findings.length === 0) {
+        // No findings — create a single investigation step
+        return [{
+                order: 1,
+                action: `Investigate: ${request}`,
+                filePath: '.',
+                lineRange: null,
+                codeLocation: 'project root',
+                rationale: 'No specific signals detected — manual investigation recommended',
+                doNothingTradeoff: 'Change request remains unaddressed',
+                riskTier: 'safe',
+                confidence: 0.5,
+            }];
+    }
+    return result.findings
+        .sort((a, b) => severityRank(b.severity) - severityRank(a.severity))
+        .slice(0, 20) // Max 20 steps per contract
+        .map((signal, i) => {
+        const filePath = signal.evidence[0]?.filePath ?? '.';
+        const lineRange = signal.evidence[0]?.lineRange ?? null;
+        return {
+            order: i + 1,
+            action: signal.finding,
+            filePath,
+            lineRange,
+            codeLocation: `${filePath}${lineRange ? `:${lineRange.start}-${lineRange.end}` : ''}`,
+            rationale: `${signal.severity} severity ${signal.category} finding`,
+            doNothingTradeoff: signal.severity === 'critical'
+                ? 'Critical risk remains — potential security or stability issue'
+                : signal.severity === 'high'
+                    ? 'High-priority issue persists — may compound over time'
+                    : 'Minor improvement deferred — low impact',
+            riskTier: classifyRiskTier(signal),
+            confidence: signal.agentConfidence,
+        };
+    });
+}
+function classifyRiskTier(signal) {
+    if (signal.severity === 'info' || signal.severity === 'low')
+        return 'safe';
+    if (signal.severity === 'medium')
+        return 'moderate';
+    return 'advanced';
+}
+function buildRiskItems(result) {
+    const highSeverity = result.findings.filter((s) => s.severity === 'critical' || s.severity === 'high');
+    return highSeverity.slice(0, 5).map((s) => ({
+        description: s.finding,
+        confidence: s.agentConfidence,
+        suggestedValidation: `Verify ${s.category} finding in ${s.evidence[0]?.filePath ?? 'affected files'}`,
+    }));
+}
+function assessComplexity(steps, risks) {
+    const advancedCount = steps.filter((s) => s.riskTier === 'advanced').length;
+    const highRiskCount = risks.length;
+    if (advancedCount > 3 || highRiskCount > 3 || steps.length > 10)
+        return 'high';
+    if (advancedCount > 0 || highRiskCount > 1 || steps.length > 5)
+        return 'medium';
+    return 'low';
+}
+function buildPlanNextActions(steps) {
+    return steps.slice(0, 3).map((step, i) => ({
+        rank: i + 1,
+        action: step.action,
+        impact: step.riskTier === 'advanced' ? 'high' : step.riskTier === 'moderate' ? 'medium' : 'low',
+        file: step.filePath,
+        lineRef: step.lineRange ? `L${step.lineRange.start}` : null,
+        doNothingTradeoff: step.doNothingTradeoff,
+    }));
+}
+function buildPlanTimeline(steps, complexity) {
+    const safeSteps = steps.filter((s) => s.riskTier === 'safe');
+    const moderateSteps = steps.filter((s) => s.riskTier === 'moderate');
+    const advancedSteps = steps.filter((s) => s.riskTier === 'advanced');
+    const timeline = [];
+    if (safeSteps.length > 0) {
+        timeline.push({
+            day: 1,
+            action: `Apply ${safeSteps.length} safe change(s)`,
+            priority: 'critical',
+        });
+    }
+    if (moderateSteps.length > 0) {
+        timeline.push({
+            day: complexity === 'low' ? 2 : 3,
+            action: `Review and apply ${moderateSteps.length} moderate change(s)`,
+            priority: 'high',
+        });
+    }
+    if (advancedSteps.length > 0) {
+        timeline.push({
+            day: 5,
+            action: `Plan and execute ${advancedSteps.length} advanced change(s)`,
+            priority: 'high',
+        });
+    }
+    timeline.push({
+        day: 7,
+        action: 'Validate all changes — re-scan repository',
+        priority: 'medium',
+    });
+    return timeline;
+}
+function severityRank(sev) {
+    return { info: 0, low: 1, medium: 2, high: 3, critical: 4 }[sev];
+}
+//# sourceMappingURL=generate-plan.js.map

package/dist/mcp/tools/generate-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-plan.js","sourceRoot":"","sources":["../../../src/mcp/tools/generate-plan.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAM1E,iCAAiC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC1E,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC1E,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACvC,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,OAAsB,EACtB,GAAkD;IAElD,MAAM,GAAG,CAAC,MAAM,EAAE,wBAAwB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvE,wBAAwB;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAE5E,MAAM,OAAO,GAAiB;QAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACpC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE;YACX,IAAI,EAAE,MAAM;YACZ,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YACtC,eAAe,EAAE,EAAE;YACnB,WAAW,EAAE,6BAA6B;SAC3C;QACD,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,SAAS;KACvB,CAAC;IAEF,uCAAuC;IACvC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE;QACxD,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IAEH,MAAM,GAAG,CAAC,MAAM,EAAE,kBAAkB,WAAW,CAAC,QAAQ,CAAC,MAAM,WAAW,CAAC,CAAC;IAE5E,uCAAuC;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAExD,qCAAqC;IACrC,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEjE,oBAAoB;IACpB,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAE9C,uBAAuB;IACvB,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAE/D,wBAAwB;IACxB,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAEhD,oBAAoB;IACpB,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAEjD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;QACL,SAAS;QACT,aAAa;QACb,mBAAmB;QACnB,MAAM,EAAE,OAAO;QACf,cAAc,EAAE;YACd,iBAAiB,EAAE,OAAO;SAC3B;QACD,WAAW;QACX,gBAAgB;QAChB,WAAW,EAAE,WAAW,CAAC,WAAW;KACrC,CAAC;AACJ,CAAC;AAED,2BAA2B;AAE3B,SAAS,cAAc,CAAC,MAAmB,EAAE,OAAe;IAC1D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,mDAAmD;QACnD,OAAO,CAAC;gBACN,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,gBAAgB,OAAO,EAAE;gBACjC,QAAQ,EAAE,GAAG;gBACb,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,cAAc;gBAC5B,SAAS,EAAE,iEAAiE;gBAC5E,iBAAiB,EAAE,oCAAoC;gBACvD,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ;SACnB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;SACnE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B;SACzC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,GAAG,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;QAExD,OAAO;YACL,KAAK,EAAE,CAAC,GAAG,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,QAAQ;YACR,SAAS;YACT,YAAY,EAAE,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACrF,SAAS,EAAE,GAAG,MAAM,CAAC,QAAQ,aAAa,MAAM,CAAC,QAAQ,UAAU;YACnE,iBAAiB,EAAE,MAAM,CAAC,QAAQ,KAAK,UAAU;gBAC/C,CAAC,CAAC,+DAA+D;gBACjE,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;oBAC1B,CAAC,CAAC,uDAAuD;oBACzD,CAAC,CAAC,yCAAyC;YAC/C,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,eAAe;SACnC,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IAC3E,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,MAAmB;IACzC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC;IAEF,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,WAAW,EAAE,CAAC,CAAC,OAAO;QACtB,UAAU,EAAE,CAAC,CAAC,eAAe;QAC7B,mBAAmB,EAAE,UAAU,CAAC,CAAC,QAAQ,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,gBAAgB,EAAE;KACtG,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAiB,EACjB,KAAiB;IAEjB,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;IAEnC,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/E,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAiB;IAC7C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC,GAAG,CAAC;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,KAAc;QAC1H,IAAI,EAAE,IAAI,CAAC,QAAQ;QACnB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI;QAC3D,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAiB,EACjB,UAAqC;IAErC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,CAAC;YACN,MAAM,EAAE,SAAS,SAAS,CAAC,MAAM,iBAAiB;YAClD,QAAQ,EAAE,UAAmB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,EAAE,oBAAoB,aAAa,CAAC,MAAM,qBAAqB;YACrE,QAAQ,EAAE,MAAe;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,CAAC;YACN,MAAM,EAAE,oBAAoB,aAAa,CAAC,MAAM,qBAAqB;YACrE,QAAQ,EAAE,MAAe;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC;QACZ,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,QAAiB;KAC5B,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,GAAuB;IAC3C,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC"}

package/dist/mcp/tools/generate-report-pack.d.ts

@@ -0,0 +1,119 @@
+/**
+ * generate_report_pack MCP tool — orchestrate specialist agents to produce a report pack.
+ * @module mcp/tools/generate-report-pack
+ */
+import { z } from 'zod';
+import type { IAgentInvoker } from '../../contracts/agent-invoker.js';
+export declare const GenerateReportPackInputSchema: z.ZodObject<{
+    packType: z.ZodEnum<{
+        "tech-audit": "tech-audit";
+        "business-viability": "business-viability";
+        "financial-audit": "financial-audit";
+        "pitch-deck": "pitch-deck";
+        "smm-gtm": "smm-gtm";
+        "competitor-intel": "competitor-intel";
+    }>;
+    repo: z.ZodString;
+    ref: z.ZodDefault<z.ZodString>;
+    detail: z.ZodDefault<z.ZodEnum<{
+        concise: "concise";
+        balanced: "balanced";
+        exhaustive: "exhaustive";
+    }>>;
+    investorReady: z.ZodDefault<z.ZodBoolean>;
+    maxCompetitors: z.ZodDefault<z.ZodNumber>;
+    scanResult: z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    founderProfile: z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+}, z.core.$strip>;
+export type GenerateReportPackInput = z.infer<typeof GenerateReportPackInputSchema>;
+export declare const GenerateReportPackOutputSchema: z.ZodObject<{
+    packType: z.ZodEnum<{
+        "tech-audit": "tech-audit";
+        "business-viability": "business-viability";
+        "financial-audit": "financial-audit";
+        "pitch-deck": "pitch-deck";
+        "smm-gtm": "smm-gtm";
+        "competitor-intel": "competitor-intel";
+    }>;
+    schemaVersion: z.ZodString;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    nextActions: z.ZodArray<z.ZodObject<{
+        rank: z.ZodNumber;
+        action: z.ZodString;
+        impact: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
+        file: z.ZodNullable<z.ZodString>;
+        lineRef: z.ZodNullable<z.ZodString>;
+        doNothingTradeoff: z.ZodString;
+    }, z.core.$strip>>;
+    sevenDayTimeline: z.ZodArray<z.ZodObject<{
+        day: z.ZodNumber;
+        action: z.ZodString;
+        priority: z.ZodEnum<{
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>;
+    }, z.core.$strip>>;
+    assumptions: z.ZodArray<z.ZodObject<{
+        statement: z.ZodString;
+        confidence: z.ZodNumber;
+        source: z.ZodEnum<{
+            rule: "rule";
+            agent: "agent";
+            profile: "profile";
+            inferred: "inferred";
+        }>;
+    }, z.core.$strip>>;
+    completeness: z.ZodEnum<{
+        complete: "complete";
+        partial: "partial";
+        "budget-limited": "budget-limited";
+    }>;
+    promptVersions: z.ZodRecord<z.ZodString, z.ZodString>;
+    roadmap: z.ZodNullable<z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodString;
+            description: z.ZodString;
+            priority: z.ZodEnum<{
+                now: "now";
+                next: "next";
+                later: "later";
+            }>;
+            effort: z.ZodEnum<{
+                small: "small";
+                medium: "medium";
+                large: "large";
+            }>;
+            dependencies: z.ZodArray<z.ZodString>;
+            sourceSignalId: z.ZodNullable<z.ZodString>;
+            category: z.ZodString;
+        }, z.core.$strip>>;
+        generatedFrom: z.ZodString;
+        totalDeferredCount: z.ZodNumber;
+    }, z.core.$strip>>;
+    investorReadiness: z.ZodNullable<z.ZodObject<{
+        summary: z.ZodString;
+        vcCritique: z.ZodString;
+        objections: z.ZodArray<z.ZodObject<{
+            objection: z.ZodString;
+            founderResponse: z.ZodString;
+        }, z.core.$strip>>;
+        riskLevel: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type GenerateReportPackOutput = z.infer<typeof GenerateReportPackOutputSchema>;
+/**
+ * Execute the generate_report_pack tool.
+ * Routes to specialist agents via IAgentInvoker, collects results, builds the pack.
+ */
+export declare function executeGenerateReportPack(args: GenerateReportPackInput, invoker: IAgentInvoker, log: (level: string, msg: string) => Promise<void>): Promise<GenerateReportPackOutput>;
+//# sourceMappingURL=generate-report-pack.d.ts.map

package/dist/mcp/tools/generate-report-pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-report-pack.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/generate-report-pack.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAiBtE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;iBASxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,uBAAuB,EAC7B,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GACjD,OAAO,CAAC,wBAAwB,CAAC,CAmEnC"}