spec-gen-cli 1.0.0

package/dist/core/services/mcp-handlers/semantic.js

@@ -0,0 +1,172 @@
+/**
+ * MCP tool handlers for semantic search and feature insertion:
+ * search_code, suggest_insertion_points.
+ */
+import { join } from 'node:path';
+import { validateDirectory } from './utils.js';
+import { readSpecGenConfig } from '../config-manager.js';
+export function classifyRole(fanIn, fanOut, isHub, isEntryPoint) {
+    if (isEntryPoint)
+        return 'entry_point';
+    if (isHub)
+        return 'hub';
+    if (fanOut >= 5)
+        return 'orchestrator';
+    if (fanIn <= 1)
+        return 'utility';
+    return 'internal';
+}
+export function deriveStrategy(role) {
+    switch (role) {
+        case 'entry_point': return 'extend_entry_point';
+        case 'orchestrator': return 'add_orchestration_step';
+        case 'hub': return 'cross_cutting_hook';
+        case 'utility': return 'extract_shared_logic';
+        default: return 'call_alongside';
+    }
+}
+export function buildReason(name, role, strategy, fanIn, fanOut) {
+    switch (strategy) {
+        case 'extend_entry_point':
+            return `${name} is an entry point (no internal callers). Add your feature here or create a sibling entry point that delegates to it.`;
+        case 'add_orchestration_step':
+            return `${name} orchestrates ${fanOut} downstream calls. Insert your feature as a new step in this pipeline.`;
+        case 'cross_cutting_hook':
+            return `${name} is called by ${fanIn} functions — adding logic here affects the entire callsite surface.`;
+        case 'extract_shared_logic':
+            return `${name} is a low-traffic utility. Shared logic for your feature can live here or be extracted alongside it.`;
+        default:
+            return `${name} is semantically close to your feature and operates in the same domain. Extend or call alongside it.`;
+    }
+}
+/** Composite score = (1 - semanticDistance) * 0.6 + structuralBonus * 0.4 */
+export function compositeScore(semanticDistance, role) {
+    const semantic = Math.max(0, 1 - semanticDistance);
+    const structuralBonus = {
+        entry_point: 1.0,
+        orchestrator: 0.8,
+        hub: 0.6,
+        internal: 0.4,
+        utility: 0.3,
+    };
+    return semantic * 0.6 + structuralBonus[role] * 0.4;
+}
+// ============================================================================
+// HANDLERS
+// ============================================================================
+/**
+ * Semantic search over the vector index built by "spec-gen analyze --embed".
+ */
+export async function handleSearchCode(directory, query, limit = 10, language, minFanIn) {
+    const absDir = await validateDirectory(directory);
+    const outputDir = join(absDir, '.spec-gen', 'analysis');
+    const { VectorIndex } = await import('../../analyzer/vector-index.js');
+    const { EmbeddingService } = await import('../../analyzer/embedding-service.js');
+    if (!VectorIndex.exists(outputDir)) {
+        return {
+            error: 'No vector index found. Run "spec-gen analyze --embed" first, ' +
+                'then configure EMBED_BASE_URL and EMBED_MODEL.',
+        };
+    }
+    let embedSvc;
+    try {
+        embedSvc = EmbeddingService.fromEnv();
+    }
+    catch {
+        const cfg = await readSpecGenConfig(absDir);
+        if (!cfg) {
+            return { error: 'No embedding configuration found. Set EMBED_BASE_URL and EMBED_MODEL env vars, or add an "embedding" section to .spec-gen/config.json.' };
+        }
+        const svcFromConfig = EmbeddingService.fromConfig(cfg);
+        if (!svcFromConfig) {
+            return { error: 'No embedding configuration found. Set EMBED_BASE_URL and EMBED_MODEL env vars, or add an "embedding" section to .spec-gen/config.json.' };
+        }
+        embedSvc = svcFromConfig;
+    }
+    limit = Math.max(1, Math.min(limit, 100));
+    const results = await VectorIndex.search(outputDir, query, embedSvc, { limit, language, minFanIn });
+    return {
+        query,
+        count: results.length,
+        results: results.map(r => ({
+            score: r.score,
+            name: r.record.name,
+            filePath: r.record.filePath,
+            className: r.record.className || undefined,
+            language: r.record.language,
+            signature: r.record.signature || undefined,
+            docstring: r.record.docstring || undefined,
+            fanIn: r.record.fanIn,
+            fanOut: r.record.fanOut,
+            isHub: r.record.isHub,
+            isEntryPoint: r.record.isEntryPoint,
+        })),
+    };
+}
+/**
+ * Find the best places in the codebase to implement a new feature.
+ */
+export async function handleSuggestInsertionPoints(directory, description, limit = 5, language) {
+    const absDir = await validateDirectory(directory);
+    const outputDir = join(absDir, '.spec-gen', 'analysis');
+    const { VectorIndex } = await import('../../analyzer/vector-index.js');
+    const { EmbeddingService } = await import('../../analyzer/embedding-service.js');
+    if (!VectorIndex.exists(outputDir)) {
+        return {
+            error: 'No vector index found. Run "spec-gen analyze --embed" first, ' +
+                'then configure EMBED_BASE_URL and EMBED_MODEL.',
+        };
+    }
+    let embedSvc;
+    try {
+        embedSvc = EmbeddingService.fromEnv();
+    }
+    catch {
+        const cfg = await readSpecGenConfig(absDir);
+        if (!cfg) {
+            return { error: 'No embedding configuration found. Set EMBED_BASE_URL and EMBED_MODEL env vars, or add an "embedding" section to .spec-gen/config.json.' };
+        }
+        const svcFromConfig = EmbeddingService.fromConfig(cfg);
+        if (!svcFromConfig) {
+            return { error: 'No embedding configuration found. Set EMBED_BASE_URL and EMBED_MODEL env vars, or add an "embedding" section to .spec-gen/config.json.' };
+        }
+        embedSvc = svcFromConfig;
+    }
+    limit = Math.max(1, Math.min(limit, 20));
+    const rawResults = await VectorIndex.search(outputDir, description, embedSvc, { limit: limit * 4, language });
+    const candidates = rawResults.map(r => {
+        const role = classifyRole(r.record.fanIn, r.record.fanOut, r.record.isHub, r.record.isEntryPoint);
+        const strategy = deriveStrategy(role);
+        const score = compositeScore(r.score, role);
+        return {
+            rank: 0,
+            score,
+            semanticDistance: r.score,
+            name: r.record.name,
+            filePath: r.record.filePath,
+            className: r.record.className || undefined,
+            language: r.record.language,
+            signature: r.record.signature || undefined,
+            docstring: r.record.docstring || undefined,
+            role, insertionStrategy: strategy,
+            reason: buildReason(r.record.name, role, strategy, r.record.fanIn, r.record.fanOut),
+            fanIn: r.record.fanIn, fanOut: r.record.fanOut,
+            isHub: r.record.isHub, isEntryPoint: r.record.isEntryPoint,
+        };
+    });
+    candidates.sort((a, b) => b.score - a.score);
+    const top = candidates.slice(0, limit).map((c, i) => ({ ...c, rank: i + 1 }));
+    return {
+        description,
+        count: top.length,
+        candidates: top,
+        nextSteps: top.length > 0
+            ? [
+                `Run get_function_skeleton on "${top[0].filePath}" to see the internal structure of ${top[0].name}`,
+                `Run get_subgraph on "${top[0].name}" to understand its call neighborhood`,
+                `After implementing, run check_spec_drift to verify the code matches the spec`,
+            ]
+            : ['No candidates found. Try a broader description or run "spec-gen analyze --embed" to build the index.'],
+    };
+}
+//# sourceMappingURL=semantic.js.map

package/dist/core/services/mcp-handlers/semantic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic.js","sourceRoot":"","sources":["../../../../src/core/services/mcp-handlers/semantic.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAiCzD,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc,EAAE,KAAc,EAAE,YAAqB;IAC/F,IAAI,YAAY;QAAE,OAAO,aAAa,CAAC;IACvC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,cAAc,CAAC;IACvC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa,CAAC,CAAE,OAAO,oBAAoB,CAAC;QACjD,KAAK,cAAc,CAAC,CAAC,OAAO,wBAAwB,CAAC;QACrD,KAAK,KAAK,CAAC,CAAU,OAAO,oBAAoB,CAAC;QACjD,KAAK,SAAS,CAAC,CAAM,OAAO,sBAAsB,CAAC;QACnD,OAAO,CAAC,CAAa,OAAO,gBAAgB,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,IAAmB,EACnB,QAA2B,EAC3B,KAAa,EACb,MAAc;IAEd,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,oBAAoB;YACvB,OAAO,GAAG,IAAI,uHAAuH,CAAC;QACxI,KAAK,wBAAwB;YAC3B,OAAO,GAAG,IAAI,iBAAiB,MAAM,wEAAwE,CAAC;QAChH,KAAK,oBAAoB;YACvB,OAAO,GAAG,IAAI,iBAAiB,KAAK,qEAAqE,CAAC;QAC5G,KAAK,sBAAsB;YACzB,OAAO,GAAG,IAAI,sGAAsG,CAAC;QACvH;YACE,OAAO,GAAG,IAAI,sGAAsG,CAAC;IACzH,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,gBAAwB,EAAE,IAAmB;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC;IACnD,MAAM,eAAe,GAAkC;QACrD,WAAW,EAAG,GAAG;QACjB,YAAY,EAAE,GAAG;QACjB,GAAG,EAAW,GAAG;QACjB,QAAQ,EAAM,GAAG;QACjB,OAAO,EAAO,GAAG;KAClB,CAAC;IACF,OAAO,QAAQ,GAAG,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;AACtD,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,KAAa,EACb,KAAK,GAAG,EAAE,EACV,QAAiB,EACjB,QAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACvE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAEjF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,KAAK,EACH,+DAA+D;gBAC/D,gDAAgD;SACnD,CAAC;IACJ,CAAC;IAED,IAAI,QAA+C,CAAC;IACpD,IAAI,CAAC;QACH,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,wIAAwI,EAAE,CAAC;QAC7J,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,wIAAwI,EAAE,CAAC;QAC7J,CAAC;QACD,QAAQ,GAAG,aAAa,CAAC;IAC3B,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEpG,OAAO;QACL,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;YACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS;YAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS;YAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS;YAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK;YACrB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;YACvB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK;YACrB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;SACpC,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAAiB,EACjB,WAAmB,EACnB,KAAK,GAAG,CAAC,EACT,QAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACvE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAEjF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,KAAK,EACH,+DAA+D;gBAC/D,gDAAgD;SACnD,CAAC;IACJ,CAAC;IAED,IAAI,QAA+C,CAAC;IACpD,IAAI,CAAC;QACH,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,wIAAwI,EAAE,CAAC;QAC7J,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,wIAAwI,EAAE,CAAC;QAC7J,CAAC;QACD,QAAQ,GAAG,aAAa,CAAC;IAC3B,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE9G,MAAM,UAAU,GAAyB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC1D,MAAM,IAAI,GAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAM,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,CAAC;YACP,KAAK;YACL,gBAAgB,EAAE,CAAC,CAAC,KAAK;YACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;YACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS;YAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS;YAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS;YAC1C,IAAI,EAAE,iBAAiB,EAAE,QAAQ;YACjC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACnF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;YAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;SAC3D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE9E,OAAO;QACL,WAAW;QACX,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC;gBACE,iCAAiC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,sCAAsC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACnG,wBAAwB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,uCAAuC;gBAC1E,8EAA8E;aAC/E;YACH,CAAC,CAAC,CAAC,sGAAsG,CAAC;KAC7G,CAAC;AACJ,CAAC"}

package/dist/core/services/mcp-handlers/utils.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared utilities for MCP tool handlers.
+ */
+import type { LLMContext } from '../../analyzer/artifact-generator.js';
+/**
+ * Resolve and validate a user-supplied directory path.
+ *
+ * Ensures the path resolves to an existing directory, which prevents path
+ * traversal attacks where a client supplies `"../../../../etc"` or a plain
+ * file path instead of a project directory.
+ */
+export declare function validateDirectory(directory: string): Promise<string>;
+/**
+ * Strip common API key and token patterns from an error message before
+ * returning it to MCP clients, to prevent secret leakage via error responses.
+ */
+export declare function sanitizeMcpError(err: unknown): string;
+export declare function readCachedContext(directory: string): Promise<LLMContext | null>;
+/** Returns true if the cached analysis is present and less than 1 hour old. */
+export declare function isCacheFresh(directory: string): Promise<boolean>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/core/services/mcp-handlers/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/core/services/mcp-handlers/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAEvE;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAe1E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAQrD;AAED,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAUrF;AAED,+EAA+E;AAC/E,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOtE"}

package/dist/core/services/mcp-handlers/utils.js

@@ -0,0 +1,62 @@
+/**
+ * Shared utilities for MCP tool handlers.
+ */
+import { readFile, stat } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+/**
+ * Resolve and validate a user-supplied directory path.
+ *
+ * Ensures the path resolves to an existing directory, which prevents path
+ * traversal attacks where a client supplies `"../../../../etc"` or a plain
+ * file path instead of a project directory.
+ */
+export async function validateDirectory(directory) {
+    if (!directory || typeof directory !== 'string') {
+        throw new Error('directory parameter is required and must be a string');
+    }
+    const absDir = resolve(directory);
+    let s;
+    try {
+        s = await stat(absDir);
+    }
+    catch {
+        throw new Error(`Directory not found: ${absDir}`);
+    }
+    if (!s.isDirectory()) {
+        throw new Error(`Not a directory: ${absDir}`);
+    }
+    return absDir;
+}
+/**
+ * Strip common API key and token patterns from an error message before
+ * returning it to MCP clients, to prevent secret leakage via error responses.
+ */
+export function sanitizeMcpError(err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return msg
+        .replace(/sk-ant-[A-Za-z0-9\-_]{10,}/g, '[REDACTED]')
+        .replace(/sk-[A-Za-z0-9\-_]{20,}/g, '[REDACTED]')
+        .replace(/Bearer\s+\S{10,}/g, 'Bearer [REDACTED]')
+        .replace(/Authorization:\s*\S+/gi, 'Authorization: [REDACTED]')
+        .replace(/api[_-]?key[=:]\s*\S{8,}/gi, 'api_key=[REDACTED]');
+}
+export async function readCachedContext(directory) {
+    try {
+        const raw = await readFile(join(directory, '.spec-gen', 'analysis', 'llm-context.json'), 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/** Returns true if the cached analysis is present and less than 1 hour old. */
+export async function isCacheFresh(directory) {
+    try {
+        const s = await stat(join(directory, '.spec-gen', 'analysis', 'llm-context.json'));
+        return Date.now() - s.mtimeMs < 60 * 60 * 1000;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=utils.js.map

package/dist/core/services/mcp-handlers/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../src/core/services/mcp-handlers/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAmC,CAAC;IACxC,IAAI,CAAC;QACH,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG;SACP,OAAO,CAAC,6BAA6B,EAAE,YAAY,CAAC;SACpD,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC;SAChD,OAAO,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SACjD,OAAO,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;SAC9D,OAAO,CAAC,4BAA4B,EAAE,oBAAoB,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,CAAC,EAC5D,OAAO,CACR,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/core/services/project-detector.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Project type detection service
+ *
+ * Detects the project type by checking for language-specific manifest files.
+ */
+import type { ProjectType } from '../../types/index.js';
+/**
+ * Project detection result
+ */
+export interface ProjectDetectionResult {
+    projectType: ProjectType;
+    manifestFile: string | null;
+    hasGit: boolean;
+    confidence: 'high' | 'medium' | 'low';
+}
+/**
+ * Detect if the directory is a git repository
+ */
+export declare function detectGitRepository(rootPath: string): Promise<boolean>;
+/**
+ * Detect the project type based on manifest files
+ */
+export declare function detectProjectType(rootPath: string): Promise<ProjectDetectionResult>;
+/**
+ * Get a human-readable project type name
+ */
+export declare function getProjectTypeName(type: ProjectType): string;
+/**
+ * Read and parse package.json if it exists
+ */
+export declare function readPackageJson(rootPath: string): Promise<Record<string, unknown> | null>;
+//# sourceMappingURL=project-detector.d.ts.map

package/dist/core/services/project-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-detector.d.ts","sourceRoot":"","sources":["../../../src/core/services/project-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACvC;AA+BD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE5E;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA0CzF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAY5D;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAQzC"}

package/dist/core/services/project-detector.js

@@ -0,0 +1,111 @@
+/**
+ * Project type detection service
+ *
+ * Detects the project type by checking for language-specific manifest files.
+ */
+import { access, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * Manifest file to project type mapping
+ */
+const MANIFEST_MAP = [
+    { file: 'package.json', type: 'nodejs', priority: 1 },
+    { file: 'pyproject.toml', type: 'python', priority: 1 },
+    { file: 'setup.py', type: 'python', priority: 2 },
+    { file: 'requirements.txt', type: 'python', priority: 3 },
+    { file: 'Cargo.toml', type: 'rust', priority: 1 },
+    { file: 'go.mod', type: 'go', priority: 1 },
+    { file: 'pom.xml', type: 'java', priority: 1 },
+    { file: 'build.gradle', type: 'java', priority: 2 },
+    { file: 'build.gradle.kts', type: 'java', priority: 2 },
+    { file: 'Gemfile', type: 'ruby', priority: 1 },
+    { file: 'composer.json', type: 'php', priority: 1 },
+];
+/**
+ * Check if a file exists
+ */
+async function fileExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Detect if the directory is a git repository
+ */
+export async function detectGitRepository(rootPath) {
+    return fileExists(join(rootPath, '.git'));
+}
+/**
+ * Detect the project type based on manifest files
+ */
+export async function detectProjectType(rootPath) {
+    const hasGit = await detectGitRepository(rootPath);
+    // Check each manifest file
+    const detectedManifests = [];
+    for (const manifest of MANIFEST_MAP) {
+        if (await fileExists(join(rootPath, manifest.file))) {
+            detectedManifests.push(manifest);
+        }
+    }
+    // No manifests found
+    if (detectedManifests.length === 0) {
+        return {
+            projectType: 'unknown',
+            manifestFile: null,
+            hasGit,
+            confidence: 'low',
+        };
+    }
+    // Sort by priority (lower is better) and pick the first
+    detectedManifests.sort((a, b) => a.priority - b.priority);
+    const primary = detectedManifests[0];
+    // Determine confidence based on detection
+    let confidence = 'high';
+    if (detectedManifests.length > 1) {
+        // Multiple project types detected
+        const uniqueTypes = new Set(detectedManifests.map((m) => m.type));
+        if (uniqueTypes.size > 1) {
+            confidence = 'medium';
+        }
+    }
+    return {
+        projectType: primary.type,
+        manifestFile: primary.file,
+        hasGit,
+        confidence,
+    };
+}
+/**
+ * Get a human-readable project type name
+ */
+export function getProjectTypeName(type) {
+    const names = {
+        nodejs: 'Node.js/TypeScript',
+        python: 'Python',
+        rust: 'Rust',
+        go: 'Go',
+        java: 'Java',
+        ruby: 'Ruby',
+        php: 'PHP',
+        unknown: 'Unknown',
+    };
+    return names[type];
+}
+/**
+ * Read and parse package.json if it exists
+ */
+export async function readPackageJson(rootPath) {
+    const packagePath = join(rootPath, 'package.json');
+    try {
+        const content = await readFile(packagePath, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=project-detector.js.map

package/dist/core/services/project-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-detector.js","sourceRoot":"","sources":["../../../src/core/services/project-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC;;GAEG;AACH,MAAM,YAAY,GAA4D;IAC5E,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE;IACrD,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE;IACvD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE;IACjD,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE;IACzD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;IACjD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;IAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;IAC9C,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;IACnD,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;IACvD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;IAC9C,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE;CACpD,CAAC;AAEF;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAEnD,2BAA2B;IAC3B,MAAM,iBAAiB,GAA4D,EAAE,CAAC;IAEtF,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpD,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,WAAW,EAAE,SAAS;YACtB,YAAY,EAAE,IAAI;YAClB,MAAM;YACN,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAErC,0CAA0C;IAC1C,IAAI,UAAU,GAA8B,MAAM,CAAC;IACnD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,kCAAkC;QAClC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,GAAG,QAAQ,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,YAAY,EAAE,OAAO,CAAC,IAAI;QAC1B,MAAM;QACN,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAiB;IAClD,MAAM,KAAK,GAAgC;QACzC,MAAM,EAAE,oBAAoB;QAC5B,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,KAAK;QACV,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/verifier/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Verifier module index
+ */
+export * from './verification-engine.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/verifier/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/verifier/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,0BAA0B,CAAC"}

package/dist/core/verifier/index.js

@@ -0,0 +1,5 @@
+/**
+ * Verifier module index
+ */
+export * from './verification-engine.js';
+//# sourceMappingURL=index.js.map

package/dist/core/verifier/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/verifier/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,0BAA0B,CAAC"}