vikunja-mcp-ng 0.4.0

package/dist/utils/read-only.js

@@ -0,0 +1,503 @@
+"use strict";
+/**
+ * Global Read-Only Safety Mode + MCP Tool Annotations
+ *
+ * Single source of truth for two related things, per
+ * docs/ENDPOINT-PLAYBOOK.md's "one classification table per tool" guidance:
+ *
+ *  1. **Read-only gating.** When the server's `readOnly` config flag is
+ *     active (`vikunja-mcp.config.json`'s `readOnly`, or the
+ *     `VIKUNJA_MCP_READ_ONLY` env var — env always wins, see
+ *     docs/CONFIGURATION.md), every write/destructive subcommand across
+ *     every tool is rejected at dispatch with a clear, consistent error.
+ *     Read subcommands continue to work normally. Each tool dispatcher
+ *     calls `assertWriteAllowed(toolName, subcommand)` exactly once, right
+ *     after its existing auth check — a single shared guard, not 24
+ *     copy-pasted `if (readOnly) throw` checks.
+ *
+ *  2. **MCP tool annotations.** `readOnlyHint` / `destructiveHint` /
+ *     `idempotentHint` (see the SDK's `ToolAnnotations`) are derived from
+ *     the same per-subcommand classification tables via
+ *     `getToolAnnotations(toolName)`, so the two features can never drift
+ *     out of sync with each other.
+ *
+ * Classification rubric (`SubcommandClassification`):
+ *  - 'read':        never mutates Vikunja server state. Always allowed;
+ *                    never contributes to `destructiveHint`.
+ *  - 'write':        creates or updates state (create, update, set-*,
+ *                    archive, move, duplicate, subscribe, ...). Rejected
+ *                    when `readOnly` is active.
+ *  - 'destructive':  removes/deletes a resource or relationship (delete,
+ *                    remove-*, unassign, unrelate, unsubscribe,
+ *                    bulk-delete, ...). Rejected when `readOnly` is
+ *                    active; any 'destructive' entry makes the whole tool's
+ *                    `destructiveHint` true.
+ *
+ * Annotation mapping rationale: annotations are per-TOOL, but our tools
+ * mix read/write/destructive subcommands behind one MCP tool name, so:
+ *  - `readOnlyHint` is true only for a tool whose *entire* subcommand
+ *    surface is 'read' (e.g. `vikunja_auth` — see below).
+ *  - `destructiveHint` is true if *any* subcommand is 'destructive'.
+ *  - `idempotentHint` is only ever set true via the explicit
+ *    `IDEMPOTENT_TOOLS` allowlist below, and only when every write
+ *    subcommand on that tool is genuinely idempotent — see its comment.
+ *
+ * `vikunja_auth` special case: connect/status/refresh/disconnect/info only
+ * manage the MCP server's local in-memory session — none of them mutate a
+ * Vikunja resource — so every subcommand is classified 'read' and
+ * read-only mode never blocks it (and `readOnlyHint` is honestly true).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_CLASSIFICATIONS = void 0;
+exports.classifySubcommand = classifySubcommand;
+exports.isToolReadOnly = isToolReadOnly;
+exports.isToolDestructive = isToolDestructive;
+exports.getToolAnnotations = getToolAnnotations;
+exports.isReadOnlyModeActive = isReadOnlyModeActive;
+exports.assertWriteAllowed = assertWriteAllowed;
+exports.withReadOnlyNote = withReadOnlyNote;
+const types_1 = require("../types");
+const ConfigurationManager_1 = require("../config/ConfigurationManager");
+const logger_1 = require("./logger");
+// ---------------------------------------------------------------------------
+// Per-tool classification tables
+// ---------------------------------------------------------------------------
+const AUTH = {
+    connect: 'read',
+    status: 'read',
+    refresh: 'read',
+    disconnect: 'read',
+    info: 'read',
+};
+const TASKS = {
+    create: 'write',
+    get: 'read',
+    update: 'write',
+    delete: 'destructive',
+    list: 'read',
+    assign: 'write',
+    unassign: 'destructive',
+    'list-assignees': 'read',
+    attach: 'write',
+    'list-attachments': 'read',
+    'get-attachment-info': 'read',
+    'delete-attachment': 'destructive',
+    'download-attachment': 'read',
+    // Dual-purpose: creates a comment when `comment` text is supplied,
+    // otherwise falls back to listing comments (see
+    // src/tools/tasks/comments/index.ts handleComment). Dispatchers pass a
+    // dynamic override computed from `args.comment` instead of relying on
+    // this static default.
+    comment: 'write',
+    'bulk-create': 'write',
+    'bulk-update': 'write',
+    'bulk-delete': 'destructive',
+    relate: 'write',
+    unrelate: 'destructive',
+    relations: 'read',
+    'add-reminder': 'write',
+    'remove-reminder': 'destructive',
+    'list-reminders': 'read',
+    'apply-label': 'write',
+    'remove-label': 'destructive',
+    'list-labels': 'read',
+    'set-bucket': 'write',
+    'set-position': 'write',
+    'get-by-index': 'read',
+    // Subtask composites (PR #77). create-subtask performs a real task
+    // creation + relation write; list-subtasks is a pure read.
+    'create-subtask': 'write',
+    'list-subtasks': 'read',
+    // duplicate copies a task (labels, assignees, attachments, reminders)
+    // into a brand-new task — a genuine write, direct parallel to
+    // vikunja_projects' duplicate below.
+    duplicate: 'write',
+    // mark-read mutates state (deletes the unread-status row for the current
+    // user) even though the task's own fields are unchanged — a write-ish
+    // state change, not a pure read. Classified 'write' (not 'destructive':
+    // no resource/relationship is removed from the caller's perspective).
+    'mark-read': 'write',
+};
+const TASK_BULK = {
+    'bulk-create': 'write',
+    'bulk-update': 'write',
+    'bulk-delete': 'destructive',
+};
+const TASK_ASSIGNEES = {
+    assign: 'write',
+    unassign: 'destructive',
+    'list-assignees': 'read',
+};
+const TASK_COMMENTS = {
+    // See TASKS.comment above — same dual-purpose create-or-list behavior.
+    comment: 'write',
+    list: 'read',
+    get: 'read',
+    update: 'write',
+    delete: 'destructive',
+};
+const TASK_REMINDERS = {
+    'add-reminder': 'write',
+    'remove-reminder': 'destructive',
+    'list-reminders': 'read',
+};
+const TASK_LABELS = {
+    'apply-label': 'write',
+    'remove-label': 'destructive',
+    'list-labels': 'read',
+};
+const TASK_RELATIONS = {
+    relate: 'write',
+    unrelate: 'destructive',
+    relations: 'read',
+};
+const PROJECTS = {
+    list: 'read',
+    get: 'read',
+    create: 'write',
+    update: 'write',
+    delete: 'destructive',
+    archive: 'write',
+    unarchive: 'write',
+    'get-children': 'read',
+    'get-tree': 'read',
+    'get-breadcrumb': 'read',
+    move: 'write',
+    'create-share': 'write',
+    'list-shares': 'read',
+    'get-share': 'read',
+    'delete-share': 'destructive',
+    // Authenticates against a share link/password — reads project data
+    // through the share, does not mutate it.
+    'auth-share': 'read',
+    'list-project-users': 'read',
+    'search-project-users': 'read',
+    'add-project-user': 'write',
+    'update-project-user-permission': 'write',
+    'remove-project-user': 'destructive',
+    'list-project-teams': 'read',
+    'add-project-team': 'write',
+    'update-project-team-permission': 'write',
+    'remove-project-team': 'destructive',
+    'share-with-user': 'write',
+    'share-with-team': 'write',
+    'list-members': 'read',
+    'list-buckets': 'read',
+    'create-bucket': 'write',
+    'update-bucket': 'write',
+    'delete-bucket': 'destructive',
+    'list-view-tasks': 'read',
+    'list-views': 'read',
+    'get-view': 'read',
+    'create-view': 'write',
+    'update-view': 'write',
+    'delete-view': 'destructive',
+    'set-done-bucket': 'write',
+    duplicate: 'write',
+    // Project backgrounds (G7, opt-in `backgrounds` module — see
+    // src/tools/projects/backgrounds.ts). remove-background deletes the
+    // currently-set background (destructive); set-unsplash-background writes
+    // a new one; search-unsplash is a pure read (queries unsplash, never
+    // touches a project).
+    'remove-background': 'destructive',
+    'set-unsplash-background': 'write',
+    'search-unsplash': 'read',
+};
+const LABELS = {
+    list: 'read',
+    get: 'read',
+    create: 'write',
+    update: 'write',
+    delete: 'destructive',
+};
+// vikunja_teams' 'members' subcommand fans out to a second enum
+// (`memberSubcommand`). Dispatchers pass a composite key
+// (`members:${memberSubcommand}`) to `assertWriteAllowed` for that case.
+const TEAMS = {
+    list: 'read',
+    create: 'write',
+    get: 'read',
+    update: 'write',
+    delete: 'destructive',
+    'members:list': 'read',
+    'members:add': 'write',
+    'members:remove': 'destructive',
+    // Flips the member's admin flag (POST .../admin takes no body) rather
+    // than setting it to a caller-supplied value — explicitly NOT idempotent
+    // (calling it twice toggles back). Still a 'write' (not 'destructive'):
+    // no resource or relationship is removed.
+    'members:toggleAdmin': 'write',
+};
+const USERS = {
+    current: 'read',
+    search: 'read',
+    settings: 'read',
+    'update-settings': 'write',
+    timezones: 'read',
+    'get-avatar': 'read',
+    'set-avatar': 'write',
+    'upload-avatar': 'write',
+};
+const FILTERS = {
+    list: 'read',
+    get: 'read',
+    create: 'write',
+    update: 'write',
+    delete: 'destructive',
+    // Pure local utilities — construct/check a filter query string without
+    // contacting the server or touching any saved filter.
+    build: 'read',
+    validate: 'read',
+};
+const TEMPLATES = {
+    create: 'write',
+    list: 'read',
+    get: 'read',
+    update: 'write',
+    delete: 'destructive',
+    // Creates a new project/tasks from the template.
+    instantiate: 'write',
+};
+// G4 (docs/ENDPOINT-TAIL-RETRIAGE.md): vikunja_webhooks also takes a
+// `scope: 'user' | 'project'` argument selecting /user/settings/webhooks*
+// vs /projects/{id}/webhooks*. Scope never changes a subcommand's
+// read/write/destructive nature (both scopes' `list`/`get`/`list-events`
+// are pure reads, `create`/`update` are writes, `delete` is destructive),
+// so one table covers every subcommand x scope combination - no
+// scope-suffixed keys needed here.
+const WEBHOOKS = {
+    list: 'read',
+    get: 'read',
+    create: 'write',
+    update: 'write',
+    delete: 'destructive',
+    'list-events': 'read',
+};
+// vikunja_batch_import has no subcommand field (single-purpose tool).
+// Dispatchers use the fixed key 'import' and pass a dynamic override:
+// `dryRun: true` never writes, so it is classified 'read' for that call.
+const BATCH_IMPORT = {
+    import: 'write',
+};
+// vikunja_export_project / vikunja_request_user_export /
+// vikunja_download_user_export / vikunja_user_export_status have no
+// subcommand field either — each is registered as its own single-purpose
+// tool. Fixed keys below.
+const EXPORT_PROJECT = {
+    // GET-only recursive walk of project/task/label data — never mutates.
+    export: 'read',
+};
+const REQUEST_USER_EXPORT = {
+    // POST /user/export/request asks the server to start preparing an
+    // export — a genuine write (triggers server-side work), even though the
+    // response is just a confirmation message.
+    request: 'write',
+};
+const DOWNLOAD_USER_EXPORT = {
+    // POST /user/export/download only confirms readiness (returns
+    // models.Message, never the archive) — no new state is created by this
+    // call, so it is classified as a read for read-only-mode purposes.
+    download: 'read',
+};
+const USER_EXPORT_STATUS = {
+    // GET /user/export returns models.UserExportStatus (id/created/expires/
+    // size) — a pure read, never mutates server state.
+    status: 'read',
+};
+const NOTIFICATIONS = {
+    list: 'read',
+    'mark-read': 'write',
+    'mark-all-read': 'write',
+};
+const SUBSCRIPTIONS = {
+    subscribe: 'write',
+    unsubscribe: 'destructive',
+};
+const REACTIONS = {
+    list: 'read',
+    add: 'write',
+    remove: 'destructive',
+};
+const TOKENS = {
+    list: 'read',
+    create: 'write',
+    delete: 'destructive',
+};
+const CALDAV_TOKENS = {
+    list: 'read',
+    create: 'write',
+    delete: 'destructive',
+};
+const ADMIN = {
+    overview: 'read',
+    'list-projects': 'read',
+    'set-project-owner': 'write',
+    'list-users': 'read',
+    'create-user': 'write',
+    'delete-user': 'destructive',
+    'set-user-admin': 'write',
+    'set-user-status': 'write',
+};
+// vikunja_user_deletion: request/confirm move the current account
+// irreversibly closer to deletion (destructiveHint applies to both, per the
+// tool's design). cancel is the safe "undo" leg — classified 'write' (it
+// mutates server state by aborting the pending request) but deliberately
+// NOT 'destructive', since it removes nothing.
+const USER_DELETION = {
+    request: 'destructive',
+    confirm: 'destructive',
+    cancel: 'write',
+};
+/** Tool name -> subcommand classification table. */
+exports.TOOL_CLASSIFICATIONS = {
+    vikunja_auth: AUTH,
+    vikunja_tasks: TASKS,
+    vikunja_task_bulk: TASK_BULK,
+    vikunja_task_assignees: TASK_ASSIGNEES,
+    vikunja_task_comments: TASK_COMMENTS,
+    vikunja_task_reminders: TASK_REMINDERS,
+    vikunja_task_labels: TASK_LABELS,
+    vikunja_task_relations: TASK_RELATIONS,
+    vikunja_projects: PROJECTS,
+    vikunja_labels: LABELS,
+    vikunja_teams: TEAMS,
+    vikunja_users: USERS,
+    vikunja_filters: FILTERS,
+    vikunja_templates: TEMPLATES,
+    vikunja_webhooks: WEBHOOKS,
+    vikunja_batch_import: BATCH_IMPORT,
+    vikunja_export_project: EXPORT_PROJECT,
+    vikunja_request_user_export: REQUEST_USER_EXPORT,
+    vikunja_download_user_export: DOWNLOAD_USER_EXPORT,
+    vikunja_user_export_status: USER_EXPORT_STATUS,
+    vikunja_notifications: NOTIFICATIONS,
+    vikunja_subscriptions: SUBSCRIPTIONS,
+    vikunja_reactions: REACTIONS,
+    vikunja_tokens: TOKENS,
+    vikunja_caldav_tokens: CALDAV_TOKENS,
+    vikunja_admin: ADMIN,
+    vikunja_user_deletion: USER_DELETION,
+};
+// ---------------------------------------------------------------------------
+// Classification lookups
+// ---------------------------------------------------------------------------
+/**
+ * Classify a subcommand for a given tool. Unrecognized tool/subcommand
+ * pairs fail closed as 'write' (rather than 'read') so an entry missing
+ * from the table above is blocked while read-only mode is active instead
+ * of silently slipping through — a table-maintenance bug should surface as
+ * an over-eager rejection, never as a read-only bypass.
+ */
+function classifySubcommand(toolName, subcommand) {
+    return exports.TOOL_CLASSIFICATIONS[toolName]?.[subcommand] ?? 'write';
+}
+/** True if every subcommand on this tool is classified 'read'. */
+function isToolReadOnly(toolName) {
+    const table = exports.TOOL_CLASSIFICATIONS[toolName];
+    if (!table) {
+        return false;
+    }
+    return Object.values(table).every((classification) => classification === 'read');
+}
+/** True if any subcommand on this tool is classified 'destructive'. */
+function isToolDestructive(toolName) {
+    const table = exports.TOOL_CLASSIFICATIONS[toolName];
+    if (!table) {
+        // Unknown tool: no recorded opinion, assume the worst for the hint too.
+        return true;
+    }
+    return Object.values(table).some((classification) => classification === 'destructive');
+}
+// Tools whose entire non-read subcommand surface is genuinely idempotent
+// (repeating the same call has no additional effect after the first). This
+// is an explicit opt-in allowlist rather than something inferred from the
+// read/write/destructive table, since idempotency is a per-operation
+// semantic judgment call that the three-way classification above doesn't
+// capture on its own.
+const IDEMPOTENT_TOOLS = new Set([
+    // mark-read / mark-all-read: marking an already-read notification as
+    // read again is a no-op server-side. `list` is the only other
+    // subcommand and is read-only.
+    'vikunja_notifications',
+]);
+/**
+ * Derive this tool's MCP `ToolAnnotations` from its classification table —
+ * see the module doc comment for the readOnlyHint/destructiveHint/
+ * idempotentHint mapping rationale.
+ */
+function getToolAnnotations(toolName) {
+    const annotations = {
+        readOnlyHint: isToolReadOnly(toolName),
+        destructiveHint: isToolDestructive(toolName),
+    };
+    if (IDEMPOTENT_TOOLS.has(toolName)) {
+        annotations.idempotentHint = true;
+    }
+    return annotations;
+}
+// ---------------------------------------------------------------------------
+// Read-only mode guard
+// ---------------------------------------------------------------------------
+/**
+ * Whether the server's global read-only safety mode is currently active.
+ *
+ * Fails safe the same way `resolveModulesConfig` (src/tools/index.ts) does:
+ * a broken/unreadable config file must not crash tool registration or
+ * dispatch, so a `loadConfiguration()` failure here falls back to the
+ * schema default (`readOnly: false`) rather than propagating. This mirrors
+ * module gating's fail-safe precedent, not a "fail closed on ambiguity"
+ * choice — a config-loading error is an operator misconfiguration to
+ * surface via logs, not a signal about write intent.
+ */
+function isReadOnlyModeActive() {
+    try {
+        return ConfigurationManager_1.ConfigurationManager.getInstance().loadConfiguration().readOnly;
+    }
+    catch (error) {
+        logger_1.logger.error('Failed to load configuration while checking read-only mode; falling back to readOnly=false:', error);
+        return false;
+    }
+}
+/**
+ * The single shared guard every tool dispatcher calls once — right after
+ * its existing auth check, before routing to a subcommand handler — instead
+ * of duplicating a read-only check per subcommand.
+ *
+ * @param toolName - the registered MCP tool name (e.g. `vikunja_tasks`).
+ * @param subcommand - the dispatch key for this call. For tools without a
+ *   `subcommand`/`operation`/`action` field (batch-import, the three export
+ *   tools), dispatchers pass the tool's single fixed key from its
+ *   classification table above (e.g. `'import'`).
+ * @param classificationOverride - for the handful of subcommands whose
+ *   classification depends on the call's arguments rather than being
+ *   static (the comment-or-list dual-purpose `comment` subcommand;
+ *   batch-import's `dryRun`), dispatchers compute and pass the effective
+ *   classification directly instead of relying on the static table lookup.
+ */
+function assertWriteAllowed(toolName, subcommand, classificationOverride) {
+    const classification = classificationOverride ?? classifySubcommand(toolName, subcommand);
+    if (classification === 'read') {
+        return;
+    }
+    if (isReadOnlyModeActive()) {
+        throw new types_1.MCPError(types_1.ErrorCode.PERMISSION_DENIED, `server is in read-only mode: '${toolName}' subcommand '${subcommand}' is a ` +
+            `${classification} operation and is rejected. Set 'readOnly' to false in ` +
+            `vikunja-mcp.config.json (or unset VIKUNJA_MCP_READ_ONLY) to allow writes.`);
+    }
+}
+/**
+ * Appends a short read-only note to a tool's description, but only when
+ * read-only mode is active AND the tool actually has write/destructive
+ * subcommands to warn about (a fully-exempt tool like `vikunja_auth` never
+ * gets the note — it would be noise, not information). Called once at
+ * registration time — cheap, since `isReadOnlyModeActive()` just reads the
+ * already-loaded, cached configuration.
+ */
+function withReadOnlyNote(toolName, description) {
+    if (!isReadOnlyModeActive() || isToolReadOnly(toolName)) {
+        return description;
+    }
+    return (`${description} NOTE: the server is currently in read-only mode — ` +
+        `write/destructive subcommands on this tool will be rejected.`);
+}
+//# sourceMappingURL=read-only.js.map

package/dist/utils/read-only.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-only.js","sourceRoot":"","sources":["../../src/utils/read-only.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;;;AAkXH,gDAEC;AAGD,wCAMC;AAGD,8CAOC;AAoBD,gDASC;AAiBD,oDAUC;AAkBD,gDAiBC;AAUD,4CAQC;AAjfD,oCAA+C;AAC/C,yEAAsE;AACtE,qCAAkC;AAMlC,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,IAAI,GAAwB;IAChC,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,MAAM;IACf,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,MAAM,KAAK,GAAwB;IACjC,MAAM,EAAE,OAAO;IACf,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;IACrB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,aAAa;IACvB,gBAAgB,EAAE,MAAM;IACxB,MAAM,EAAE,OAAO;IACf,kBAAkB,EAAE,MAAM;IAC1B,qBAAqB,EAAE,MAAM;IAC7B,mBAAmB,EAAE,aAAa;IAClC,qBAAqB,EAAE,MAAM;IAC7B,mEAAmE;IACnE,gDAAgD;IAChD,uEAAuE;IACvE,sEAAsE;IACtE,uBAAuB;IACvB,OAAO,EAAE,OAAO;IAChB,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,aAAa;IAC5B,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,MAAM;IACjB,cAAc,EAAE,OAAO;IACvB,iBAAiB,EAAE,aAAa;IAChC,gBAAgB,EAAE,MAAM;IACxB,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,aAAa;IAC7B,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,OAAO;IACrB,cAAc,EAAE,OAAO;IACvB,cAAc,EAAE,MAAM;IACtB,mEAAmE;IACnE,2DAA2D;IAC3D,gBAAgB,EAAE,OAAO;IACzB,eAAe,EAAE,MAAM;IACvB,sEAAsE;IACtE,8DAA8D;IAC9D,qCAAqC;IACrC,SAAS,EAAE,OAAO;IAClB,yEAAyE;IACzE,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,WAAW,EAAE,OAAO;CACrB,CAAC;AAEF,MAAM,SAAS,GAAwB;IACrC,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,aAAa;CAC7B,CAAC;AAEF,MAAM,cAAc,GAAwB;IAC1C,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,aAAa;IACvB,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,uEAAuE;IACvE,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,MAAM,cAAc,GAAwB;IAC1C,cAAc,EAAE,OAAO;IACvB,iBAAiB,EAAE,aAAa;IAChC,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAEF,MAAM,WAAW,GAAwB;IACvC,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,aAAa;IAC7B,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF,MAAM,cAAc,GAAwB;IAC1C,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,MAAM;CAClB,CAAC;AAEF,MAAM,QAAQ,GAAwB;IACpC,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,OAAO;IAChB,SAAS,EAAE,OAAO;IAClB,cAAc,EAAE,MAAM;IACtB,UAAU,EAAE,MAAM;IAClB,gBAAgB,EAAE,MAAM;IACxB,IAAI,EAAE,OAAO;IACb,cAAc,EAAE,OAAO;IACvB,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,MAAM;IACnB,cAAc,EAAE,aAAa;IAC7B,mEAAmE;IACnE,yCAAyC;IACzC,YAAY,EAAE,MAAM;IACpB,oBAAoB,EAAE,MAAM;IAC5B,sBAAsB,EAAE,MAAM;IAC9B,kBAAkB,EAAE,OAAO;IAC3B,gCAAgC,EAAE,OAAO;IACzC,qBAAqB,EAAE,aAAa;IACpC,oBAAoB,EAAE,MAAM;IAC5B,kBAAkB,EAAE,OAAO;IAC3B,gCAAgC,EAAE,OAAO;IACzC,qBAAqB,EAAE,aAAa;IACpC,iBAAiB,EAAE,OAAO;IAC1B,iBAAiB,EAAE,OAAO;IAC1B,cAAc,EAAE,MAAM;IACtB,cAAc,EAAE,MAAM;IACtB,eAAe,EAAE,OAAO;IACxB,eAAe,EAAE,OAAO;IACxB,eAAe,EAAE,aAAa;IAC9B,iBAAiB,EAAE,MAAM;IACzB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,aAAa;IAC5B,iBAAiB,EAAE,OAAO;IAC1B,SAAS,EAAE,OAAO;IAClB,6DAA6D;IAC7D,oEAAoE;IACpE,yEAAyE;IACzE,qEAAqE;IACrE,sBAAsB;IACtB,mBAAmB,EAAE,aAAa;IAClC,yBAAyB,EAAE,OAAO;IAClC,iBAAiB,EAAE,MAAM;CAC1B,CAAC;AAEF,MAAM,MAAM,GAAwB;IAClC,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,gEAAgE;AAChE,yDAAyD;AACzD,yEAAyE;AACzE,MAAM,KAAK,GAAwB;IACjC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,OAAO;IACf,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;IACrB,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,OAAO;IACtB,gBAAgB,EAAE,aAAa;IAC/B,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,0CAA0C;IAC1C,qBAAqB,EAAE,OAAO;CAC/B,CAAC;AAEF,MAAM,KAAK,GAAwB;IACjC,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,MAAM;IAChB,iBAAiB,EAAE,OAAO;IAC1B,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,OAAO;IACrB,eAAe,EAAE,OAAO;CACzB,CAAC;AAEF,MAAM,OAAO,GAAwB;IACnC,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;IACrB,uEAAuE;IACvE,sDAAsD;IACtD,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,MAAM,SAAS,GAAwB;IACrC,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;IACrB,iDAAiD;IACjD,WAAW,EAAE,OAAO;CACrB,CAAC;AAEF,qEAAqE;AACrE,0EAA0E;AAC1E,kEAAkE;AAClE,yEAAyE;AACzE,0EAA0E;AAC1E,gEAAgE;AAChE,mCAAmC;AACnC,MAAM,QAAQ,GAAwB;IACpC,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;IACrB,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,MAAM,YAAY,GAAwB;IACxC,MAAM,EAAE,OAAO;CAChB,CAAC;AAEF,yDAAyD;AACzD,oEAAoE;AACpE,yEAAyE;AACzE,0BAA0B;AAC1B,MAAM,cAAc,GAAwB;IAC1C,sEAAsE;IACtE,MAAM,EAAE,MAAM;CACf,CAAC;AAEF,MAAM,mBAAmB,GAAwB;IAC/C,kEAAkE;IAClE,wEAAwE;IACxE,2CAA2C;IAC3C,OAAO,EAAE,OAAO;CACjB,CAAC;AAEF,MAAM,oBAAoB,GAAwB;IAChD,8DAA8D;IAC9D,uEAAuE;IACvE,mEAAmE;IACnE,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,MAAM,kBAAkB,GAAwB;IAC9C,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,EAAE,MAAM;CACf,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,OAAO;IACpB,eAAe,EAAE,OAAO;CACzB,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,SAAS,EAAE,OAAO;IAClB,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,MAAM,SAAS,GAAwB;IACrC,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,OAAO;IACZ,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,MAAM,MAAM,GAAwB;IAClC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,MAAM,KAAK,GAAwB;IACjC,QAAQ,EAAE,MAAM;IAChB,eAAe,EAAE,MAAM;IACvB,mBAAmB,EAAE,OAAO;IAC5B,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,aAAa;IAC5B,gBAAgB,EAAE,OAAO;IACzB,iBAAiB,EAAE,OAAO;CAC3B,CAAC;AAEF,kEAAkE;AAClE,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,+CAA+C;AAC/C,MAAM,aAAa,GAAwB;IACzC,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,OAAO;CAChB,CAAC;AAEF,oDAAoD;AACvC,QAAA,oBAAoB,GAAwC;IACvE,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,KAAK;IACpB,iBAAiB,EAAE,SAAS;IAC5B,sBAAsB,EAAE,cAAc;IACtC,qBAAqB,EAAE,aAAa;IACpC,sBAAsB,EAAE,cAAc;IACtC,mBAAmB,EAAE,WAAW;IAChC,sBAAsB,EAAE,cAAc;IACtC,gBAAgB,EAAE,QAAQ;IAC1B,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,KAAK;IACpB,aAAa,EAAE,KAAK;IACpB,eAAe,EAAE,OAAO;IACxB,iBAAiB,EAAE,SAAS;IAC5B,gBAAgB,EAAE,QAAQ;IAC1B,oBAAoB,EAAE,YAAY;IAClC,sBAAsB,EAAE,cAAc;IACtC,2BAA2B,EAAE,mBAAmB;IAChD,4BAA4B,EAAE,oBAAoB;IAClD,0BAA0B,EAAE,kBAAkB;IAC9C,qBAAqB,EAAE,aAAa;IACpC,qBAAqB,EAAE,aAAa;IACpC,iBAAiB,EAAE,SAAS;IAC5B,cAAc,EAAE,MAAM;IACtB,qBAAqB,EAAE,aAAa;IACpC,aAAa,EAAE,KAAK;IACpB,qBAAqB,EAAE,aAAa;CACrC,CAAC;AAEF,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;IACrE,OAAO,4BAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC;AACjE,CAAC;AAED,kEAAkE;AAClE,SAAgB,cAAc,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,4BAAoB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,uEAAuE;AACvE,SAAgB,iBAAiB,CAAC,QAAgB;IAChD,MAAM,KAAK,GAAG,4BAAoB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,wEAAwE;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,KAAK,aAAa,CAAC,CAAC;AACzF,CAAC;AAED,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,qEAAqE;AACrE,yEAAyE;AACzE,sBAAsB;AACtB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,qEAAqE;IACrE,8DAA8D;IAC9D,+BAA+B;IAC/B,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,QAAgB;IACjD,MAAM,WAAW,GAAoB;QACnC,YAAY,EAAE,cAAc,CAAC,QAAQ,CAAC;QACtC,eAAe,EAAE,iBAAiB,CAAC,QAAQ,CAAC;KAC7C,CAAC;IACF,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAgB,oBAAoB;IAClC,IAAI,CAAC;QACH,OAAO,2CAAoB,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CACV,6FAA6F,EAC7F,KAAK,CACN,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,kBAAkB,CAChC,QAAgB,EAChB,UAAkB,EAClB,sBAAiD;IAEjD,MAAM,cAAc,GAAG,sBAAsB,IAAI,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1F,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,IAAI,oBAAoB,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAQ,CAChB,iBAAS,CAAC,iBAAiB,EAC3B,iCAAiC,QAAQ,iBAAiB,UAAU,SAAS;YAC3E,GAAG,cAAc,yDAAyD;YAC1E,2EAA2E,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,WAAmB;IACpE,IAAI,CAAC,oBAAoB,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,CACL,GAAG,WAAW,qDAAqD;QACnE,8DAA8D,CAC/D,CAAC;AACJ,CAAC"}

package/dist/utils/response-factory.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Simple Response Factory
+ * Replaces 2,925-line AORP system with clean, direct response formatting
+ */
+import { type SimpleResponse } from './simple-response';
+import type { ResponseMetadata } from '../types/responses';
+import type { ResponseData } from '../types';
+/**
+ * Simple response metadata
+ */
+export interface SimpleResponseMetadata {
+    /** Processing information */
+    processing?: {
+        /** Processing time in ms */
+        processingTimeMs?: number;
+        /** Operation context */
+        operation?: string;
+    };
+    /** Timestamp */
+    timestamp?: string;
+    /** Success flag */
+    success?: boolean;
+    /** Error information */
+    error?: {
+        code: string;
+        message: string;
+    };
+    /** Session ID */
+    sessionId?: string;
+    /** Additional metadata */
+    [key: string]: unknown;
+}
+/**
+ * Create a simple response (replaces createAorpResponse)
+ * Direct replacement for AORP factory functions
+ */
+export declare function createSimpleResponse(operation: string, message: string, data?: ResponseData, options?: {
+    success?: boolean;
+    metadata?: ResponseMetadata;
+    processingTimeMs?: number;
+}): SimpleResponse;
+/**
+ * Format response for MCP (replaces AORP formatting)
+ */
+export declare function formatResponseForMcp(response: SimpleResponse): string;
+/**
+ * Create task response (replaces createTaskResponse)
+ * Now handles flexible data for backward compatibility
+ */
+export declare function createTaskResponse(operation: string, message: string, data: {
+    tasks?: ResponseData[];
+} | ResponseData, metadata?: ResponseMetadata, sessionId?: string): SimpleResponse;
+/**
+ * Create error response (replaces createAorpErrorResponse)
+ */
+export declare function createSimpleErrorResponse(operation: string, message: string, errorCode?: string, metadata?: ResponseMetadata): SimpleResponse;
+export { createTaskResponse as createStandardResponse };
+export { createTaskResponse as createTaskAorpResponse };
+export { createSimpleErrorResponse as createAorpErrorResponse };
+export { formatResponseForMcp as formatAorpAsMarkdown };
+export { createSimpleResponse as createAorpResponse };
+export type { SimpleResponse } from './simple-response';
+/**
+ * Create AORP response from data (compatibility function)
+ * Simple replacement for createAorpFromData
+ */
+export declare function createAorpFromData(operation: string, message: string, success?: boolean, details?: string): SimpleResponse;
+export interface AorpBuilderConfig {
+    confidenceMethod?: string;
+    enableCaching?: boolean;
+    maxCacheSize?: number;
+    [key: string]: unknown;
+}
+export type AorpVerbosityLevel = 'minimal' | 'standard' | 'detailed';
+export interface ComplexityFactors {
+    dataComplexity: number;
+    nestingLevel: number;
+    itemCount: number;
+    hasNestedArrays: boolean;
+}
+//# sourceMappingURL=response-factory.d.ts.map

package/dist/utils/response-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-factory.d.ts","sourceRoot":"","sources":["../../src/utils/response-factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA8C,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACpG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,6BAA6B;IAC7B,UAAU,CAAC,EAAE;QACX,4BAA4B;QAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,wBAAwB;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,gBAAgB;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wBAAwB;IACxB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACA,cAAc,CAkBhB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAErE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,YAAY,EAAE,CAAA;CAAE,GAAG,YAAY,EAC/C,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,SAAS,CAAC,EAAE,MAAM,GACjB,cAAc,CAwBhB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,MAAwB,EACnC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,cAAc,CAEhB;AAGD,OAAO,EAAE,kBAAkB,IAAI,sBAAsB,EAAE,CAAC;AACxD,OAAO,EAAE,kBAAkB,IAAI,sBAAsB,EAAE,CAAC;AACxD,OAAO,EAAE,yBAAyB,IAAI,uBAAuB,EAAE,CAAC;AAChE,OAAO,EAAE,oBAAoB,IAAI,oBAAoB,EAAE,CAAC;AAGxD,OAAO,EAAE,oBAAoB,IAAI,kBAAkB,EAAE,CAAC;AAGtD,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,OAAc,EACvB,OAAO,CAAC,EAAE,MAAM,GACf,cAAc,CAEhB;AAGD,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;AAErE,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;CAC1B"}