github · korean-law-mcpHEAD

Evidence

})

  // 서버 시작 (0.0.0.0으로 바인딩하여 외부 접속 허용)

  const expressServer = app.listen(port, "0.0.0.0", () => {

    console.error(`✓ Korean Law MCP server (HTTP stateless) listening on port ${port}`)

    console.error(`✓ MCP endpoint: http://0.0.0.0:${port}/mcp`)

    console.error(`✓ Health check: http://0.0.0.0:${port}/health`)

Remediation

Bind to 127.0.0.1 for local-only access. If cross-host access is truly required, put the service behind an authenticated reverse proxy rather than exposing it on 0.0.0.0.

Evidence

.description("자연어 질의의 라우팅 경로 확인 (실행하지 않음)")

    .action((words: string[]) => {

      const query = words.join(" ")

      console.log(explainRoute(query))

    })

  // ── list 명령 ──

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

try {

          input = JSON.parse(cmdOpts.jsonInput)

        } catch {

          console.error(fmt.red("--json-input 파싱 실패: 유효한 JSON을 입력하세요."))

          process.exit(1)

        }

      } else {

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

isError: result.isError || false,

    }, null, 2))

  } catch (error) {

    console.log(JSON.stringify({

      query,

      route: { tool: route.tool, reason: route.reason },

      error: error instanceof Error ? error.message : String(error),

    }, null, 2))

    process.exit(1)

  }

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

const route = routeQuery(query)

  if (verbose) {

    console.log(fmt.dim(explainRoute(query)))

  } else {

    printRouteInfo(route.tool, route.reason)

  }

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

printBanner()

      printToolList()

      console.log(fmt.dim("  사용법: korean-law <도구명> [옵션]"))

      console.log(fmt.dim("  자연어: korean-law query \"민법 제1조\""))

      console.log(fmt.dim("  대화형: korean-law interactive"))

      console.log()

    })

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

}

    }

    console.log(JSON.stringify({

      query,

      route: { tool: route.tool, reason: route.reason, params: route.params },

      result: result.content.map(c => c.text).join("\n"),

      pipelineResult,

      isError: result.isError || false,

    }, null, 2))

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

// ========================================

export const chainDisputePrepSchema = z.object({

  query: z.string().describe("분쟁 키워드 (예: '건축허가 취소 행정심판', '징계처분 감경')"),

  domain: z.enum(["tax", "labor", "privacy", "competition", "general"]).optional()

    .describe("전문 분야 (tax=조세심판, labor=노동위, privacy=개인정보위, competition=공정위). 미지정 시 쿼리에서 자동 감지"),

  apiKey: z.string().optional(),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

const baseSearchSchema = {

  query: z.string().optional().describe("검색 키워드"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본값: 1)"),

  sort: z.enum(["lasc", "ldes", "dasc", "ddes", "nasc", "ndes"]).optional()

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// English law search tool - Search for English translations of Korean laws

export const searchEnglishLawSchema = z.object({

  query: z.string().optional().describe("법령명 검색어 (영문 또는 한글, 예: 'Customs Act', '관세법')"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본값: 1)"),

  sort: z.enum(["lasc", "ldes", "dasc", "ddes"]).optional()

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// 1. 법령용어 지식베이스 조회 (lstrmAI)

export const getLegalTermKBSchema = z.object({

  query: z.string().describe("검색할 법령용어"),

  display: z.number().min(1).max(100).default(20).describe("결과 수 (기본:20)"),

  page: z.number().min(1).default(1).describe("페이지 (기본:1)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

export const searchAcrSpecialAppealsSchema = z.object({

  ...baseSearchSchema,

  query: z.string().optional().describe("검색 키워드 (예: '국민권익', '행정심판', '고충')"),

});

export type SearchAcrSpecialAppealsInput = z.infer<typeof searchAcrSpecialAppealsSchema>;

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// Legal terms search tool - Search for legal terminology definitions

export const searchLegalTermsSchema = z.object({

  query: z.string().describe("검색할 법령용어 (예: '선의', '악의', '하자', '채권')"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본값: 1)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

export const chainAmendmentTrackSchema = z.object({

  query: z.string().describe("법령명 (예: '관세법', '지방세특례제한법')"),

  mst: z.string().optional().describe("법령일련번호 (알고 있으면)"),

  lawId: z.string().optional().describe("법령ID (알고 있으면)"),

  scenario: z.enum(["timeline"]).optional()

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

query: z.string().describe("부처명 (예: '보건복지부')")

})

export const LinkedLawsFromOrdinanceSchema = baseLinkageSchema.extend({

  query: z.string().describe("자치법규명 (예: '서울특별시 주차장 설치 및 관리 조례')")

})

// === 범용 XML 파서 (응답 구조 미확정 대응) ===

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

export const searchAcrDecisionsSchema = z.object({

  ...baseSearchSchemaOptionalQuery,

  query: z.string().optional().describe("검색 키워드 (예: '행정심판', '고충민원', '부패행위')"),

});

export type SearchAcrDecisionsInput = z.infer<typeof searchAcrDecisionsSchema>;

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

const searchSchema = {

  query: z.string().describe("검색 키워드"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본값: 1)"),

  sort: z.enum(["lasc", "ldes", "dasc", "ddes"]).optional()

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

query: z.string().describe("법령명 (예: '국민건강보험법')")

})

export const DelegatedLawsSchema = baseLinkageSchema.extend({

  query: z.string().describe("부처명 (예: '보건복지부')")

})

export const LinkedLawsFromOrdinanceSchema = baseLinkageSchema.extend({

  query: z.string().describe("자치법규명 (예: '서울특별시 주차장 설치 및 관리 조례')")

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// Customs legal interpretation search tool - Search for customs law interpretations

export const searchCustomsInterpretationsSchema = z.object({

  query: z.string().optional().describe("Search keyword (e.g., '거래명세서', '세금')"),

  display: z.number().min(1).max(100).default(20).describe("Results per page (default: 20, max: 100)"),

  page: z.number().min(1).default(1).describe("Page number (default: 1)"),

  inq: z.number().optional().describe("Inquiry organization code (질의기관코드)"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

export const chainProcedureDetailSchema = z.object({

  query: z.string().describe("절차/비용 관련 질문 (예: '여권발급 절차 수수료', '건축허가 신청 방법')"),

  scenario: z.enum(["manual"]).optional()

    .describe("확장 시나리오. manual=공무원 처리 매뉴얼 (행정규칙 + 자치법규 특칙 + 해석례 추가). 미지정 시 쿼리에서 자동 감지."),

  apiKey: z.string().optional(),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// Administrative appeal decision search tool - Search for administrative tribunal rulings

export const searchAdminAppealsSchema = z.object({

  query: z.string().optional().describe("검색 키워드 (예: '취소처분', '영업정지', '과태료')"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본값: 1)"),

  sort: z.enum(["lasc", "ldes", "dasc", "ddes", "nasc", "ndes"]).optional()

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

export const searchAppealReviewDecisionsSchema = z.object({

  ...baseSearchSchema,

  query: z.string().optional().describe("검색 키워드 (예: '파면', '해임', '징계', '감봉')"),

});

export type SearchAppealReviewDecisionsInput = z.infer<typeof searchAppealReviewDecisionsSchema>;

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

export const chainFullResearchSchema = z.object({

  query: z.string().describe("자연어 질문 (예: '기간제 근로자 2년 초과 사용', '음주운전 처벌 기준')"),

  scenario: z.enum(["customs"]).optional()

    .describe("확장 시나리오. customs=관세·통관 종합 (관세3법 + 해석례 + FTA조약 + 세율표 + 조세심판). 미지정 시 쿼리에서 자동 감지."),

  apiKey: z.string().optional(),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

query: z.string().describe("법령명 (예: '국민건강보험법')")

})

export const LinkedOrdinanceArticlesSchema = baseLinkageSchema.extend({

  query: z.string().describe("법령명 (예: '국민건강보험법')")

})

export const DelegatedLawsSchema = baseLinkageSchema.extend({

  query: z.string().describe("부처명 (예: '보건복지부')")

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

export const searchPipcDecisionsSchema = z.object({

  ...baseSearchSchemaRequiredQuery,

  query: z.string().describe("검색 키워드 (필수, 예: '개인정보', '유출', '과징금')"),

});

export type SearchPipcDecisionsInput = z.infer<typeof searchPipcDecisionsSchema>;

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// compare_admin_rule_old_new 스키마

export const CompareAdminRuleOldNewSchema = z.object({

  query: z.string().optional().describe("행정규칙명 키워드 (검색용)"),

  id: z.string().optional().describe("행정규칙ID (본문 조회용, search_admin_rule에서 획득)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달")

}).refine(data => data.query || data.id, {

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

import { formatToolError } from "../lib/errors.js"

export const SearchOrdinanceSchema = z.object({

  query: z.string().describe("검색할 자치법규명 (예: '서울', '환경')"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달")

})

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

import { expandLawQuery } from "../lib/search-normalizer.js"

export const SearchLawSchema = z.object({

  query: z.string().describe("검색할 법령명 (예: '관세법', 'fta특례법', '화관법')"),

  display: z.number().optional().default(20).describe("최대 결과 개수"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달")

})

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

import { formatToolError } from "../lib/errors.js"

export const FindSimilarPrecedentsSchema = z.object({

  query: z.string().describe("검색 키워드 또는 판례 내용"),

  display: z.number().optional().default(5).describe("최대 결과 개수 (기본값: 5)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달")

})

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

import { formatToolError } from "../lib/errors.js"

export const searchTreatiesSchema = z.object({

  query: z.string().optional().describe("검색 키워드 (예: '투자보장', '범죄인인도')"),

  cls: z.enum(["1", "2"]).optional().describe("조약구분 (1=양자조약, 2=다자조약)"),

  natCd: z.string().optional().describe("국가코드 (예: 'US', 'JP')"),

  eftYd: z.string().optional().describe("발효일 (YYYYMMDD)"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// 3. 일상용어 조회

export const getDailyTermSchema = z.object({

  query: z.string().describe("검색할 일상용어 (예: '월세', '전세', '뺑소니')"),

  display: z.number().min(1).max(100).default(20).describe("결과 수 (기본:20)"),

  page: z.number().min(1).default(1).describe("페이지 (기본:1)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

export const searchFtcDecisionsSchema = z.object({

  ...baseSearchSchemaRequiredQuery,

  query: z.string().describe("검색 키워드 (필수, 예: '담합', '불공정거래', '시정명령')"),

});

export type SearchFtcDecisionsInput = z.infer<typeof searchFtcDecisionsSchema>;

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// Tax tribunal decision search tool - Search for special administrative appeals decisions

export const searchTaxTribunalDecisionsSchema = z.object({

  query: z.string().optional().describe("Search keyword (e.g., '자동차', '부가가치세')"),

  display: z.number().min(1).max(100).default(20).describe("Results per page (default: 20, max: 100)"),

  page: z.number().min(1).default(1).describe("Page number (default: 1)"),

  cls: z.string().optional().describe("Decision type code (재결구분코드)"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// AI-powered intelligent law search tool

// 이름은 searchAiLaw가 더 정확하지만, 호환성을 위해 searchLifeLaw alias 유지

export const searchAiLawSchema = z.object({

  query: z.string().describe("자연어 질문 또는 일상 상황 (예: '음주운전 처벌', '임대차 보증금 반환', '퇴직금 계산')"),

  search: z.enum(["0", "1", "2", "3"]).default("0").describe(

    "검색범위: 0=법령조문(기본), 1=법령 별표·서식, 2=행정규칙 조문, 3=행정규칙 별표·서식"

  ),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

domain: z.enum(DOMAINS).describe(

    "도메인 선택 (enum 값 참조)"

  ),

  query: z.string().optional().describe("검색 키워드"),

  display: z.number().min(1).max(100).default(20).optional().describe("결과 수 (기본20)"),

  page: z.number().min(1).default(1).optional().describe("페이지 (기본1)"),

  sort: z.string().optional().describe("정렬: lasc/ldes/dasc/ddes/nasc/ndes"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// === 스키마 ===

const baseLinkageSchema = z.object({

  query: z.string().describe("검색 키워드"),

  display: z.number().min(1).max(100).default(20).describe("결과 개수 (기본:20, 최대:100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본:1)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC)")

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

import { formatToolError } from "../lib/errors.js"

export const AdvancedSearchSchema = z.object({

  query: z.string().describe("검색 키워드"),

  searchType: z.enum(["law", "admin_rule", "ordinance", "all"]).optional().default("law").describe(

    "검색 대상: law (법령), admin_rule (행정규칙), ordinance (자치법규), all (전체)"

  ),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

})

export const LinkedOrdinancesSchema = baseLinkageSchema.extend({

  query: z.string().describe("법령명 (예: '국민건강보험법')")

})

export const LinkedOrdinanceArticlesSchema = baseLinkageSchema.extend({

  query: z.string().describe("법령명 (예: '국민건강보험법')")

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

import { formatToolError, noResultHint } from "../lib/errors.js"

export const searchInterpretationsSchema = z.object({

  query: z.string().describe("Search keyword (e.g., '자동차', '근로기준법')"),

  display: z.number().min(1).max(100).default(20).describe("Results per page (default: 20, max: 100)"),

  page: z.number().min(1).default(1).describe("Page number (default: 1)"),

  sort: z.enum(["lasc", "ldes", "dasc", "ddes", "nasc", "ndes"]).optional()

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// Common schema for committee decision search (query optional)

const baseSearchSchemaOptionalQuery = {

  query: z.string().optional().describe("검색 키워드"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본값: 1)"),

  sort: z.enum(["lasc", "ldes", "dasc", "ddes"]).optional()

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// 2. 법령용어 상세 조회 (lstrm 본문)

export const getLegalTermDetailSchema = z.object({

  query: z.string().describe("조회할 법령용어명"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달"),

});

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

export const searchNlrcDecisionsSchema = z.object({

  ...baseSearchSchemaOptionalQuery,

  query: z.string().optional().describe("검색 키워드 (예: '부당해고', '노동쟁의', '조정')"),

});

export type SearchNlrcDecisionsInput = z.infer<typeof searchNlrcDecisionsSchema>;

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

export const chainOrdinanceCompareSchema = z.object({

  query: z.string().describe("조례 관련 키워드 (예: '주민자치회', '개발행위 허가 기준')"),

  parentLaw: z.string().optional().describe("상위 법령명 (예: '지방자치법'). 미지정 시 자동 검색."),

  scenario: z.enum(["compliance"]).optional()

    .describe("확장 시나리오. compliance=조례 상위법 적합성 검증 (헌재·행심 위법 판결 + 상위법 근거 분석). 미지정 시 쿼리에서 자동 감지."),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// search_admin_rule 스키마

export const SearchAdminRuleSchema = z.object({

  query: z.string().describe("검색할 행정규칙명"),

  knd: z.string().optional().describe("행정규칙 종류 (1=훈령, 2=예규, 3=고시, 4=공고, 5=일반)"),

  display: z.number().optional().default(20).describe("최대 결과 개수"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달")

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

export const chainActionBasisSchema = z.object({

  query: z.string().describe("처분 유형 + 키워드 (예: '건축허가 거부 근거', '보조금 환수')"),

  scenario: z.enum(["penalty"]).optional()

    .describe("확장 시나리오. penalty=처분·벌칙 기준 종합 (별표 처분기준표 + 감경 판례 + 개정이력). 미지정 시 쿼리에서 자동 감지."),

  apiKey: z.string().optional(),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

} from "../lib/decision-compact.js"

export const searchPrecedentsSchema = z.object({

  query: z.string().optional().describe("검색 키워드 (예: '자동차', '담보권')"),

  court: z.string().optional().describe("법원명 필터 (예: '대법원', '서울고등법원')"),

  caseNumber: z.string().optional().describe("사건번호 (예: '2009느합133')"),

  display: z.number().min(1).max(100).default(20).describe("결과 수 (기본:20, 최대:100)"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// ========================================

export const chainLawSystemSchema = z.object({

  query: z.string().describe("법령명 또는 키워드 (예: '관세법', '건축법 허가')"),

  articles: z.array(z.string()).optional().describe("조회할 조문 번호 (예: ['제38조', '제39조'])"),

  scenario: z.enum(["delegation", "impact"]).optional()

    .describe("확장 시나리오. delegation=위임입법 미이행 감시, impact=개정 영향도 분석. 미지정 시 쿼리에서 자동 감지."),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

import { searchOrdinance } from "./ordinance-search.js"

export const SearchAllSchema = z.object({

  query: z.string().describe("검색할 키워드"),

  display: z.number().min(1).max(50).default(10).describe("각 유형별 최대 결과 개수 (기본값: 10)"),

  apiKey: z.string().optional().describe("법제처 Open API 인증키(OC). 사용자가 제공한 경우 전달")

})

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

// Constitutional Court decision search tool - Search for Constitutional Court rulings

export const searchConstitutionalDecisionsSchema = z.object({

  query: z.string().optional().describe("검색 키워드 (예: '위헌', '기본권', '재산권')"),

  caseNumber: z.string().optional().describe("사건번호 (예: '2020헌바123')"),

  display: z.number().min(1).max(100).default(20).describe("페이지당 결과 개수 (기본값: 20, 최대: 100)"),

  page: z.number().min(1).default(1).describe("페이지 번호 (기본값: 1)"),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

- uses: actions/checkout@v4

      - name: Use Node.js ${{ matrix.node-version }}

        uses: actions/setup-node@v4

        with:

          node-version: ${{ matrix.node-version }}

          cache: npm

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

node-version: [20]

    steps:

      - uses: actions/checkout@v4

      - name: Use Node.js ${{ matrix.node-version }}

        uses: actions/setup-node@v4

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc