@4da/mcp-server 4.0.0 → 4.1.0

package/dist/tools/trust-summary.js

@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * trust_summary tool
+ *
+ * Returns intelligence quality metrics from the trust ledger —
+ * precision, action rate, false positive rate, preemption wins.
+ * Helps agents assess how reliable 4DA's intelligence is.
+ */
+export const trustSummaryTool = {
+    name: "trust_summary",
+    description: "Get intelligence quality metrics — precision, action conversion rate, false positive rate, and preemption wins. Use this to assess how reliable 4DA's signals are before acting on them.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            days: {
+                type: "number",
+                description: "Number of days to analyze. Default: 30",
+                default: 30,
+            },
+        },
+    },
+};
+export function executeTrustSummary(db, params) {
+    const rawDb = db.getRawDb();
+    const days = params.days ?? 30;
+    const offset = `-${days} days`;
+    // Count events by type
+    let counts = [];
+    try {
+        counts = rawDb
+            .prepare(`SELECT event_type, COUNT(*) as cnt
+       FROM trust_events
+       WHERE created_at >= datetime('now', ?)
+       GROUP BY event_type`)
+            .all(offset);
+    }
+    catch {
+        /* trust_events table may not exist yet */
+    }
+    const getCount = (type) => counts.find((c) => c.event_type === type)?.cnt ?? 0;
+    const surfaced = getCount("surfaced");
+    const acted_on = getCount("acted_on");
+    const dismissed = getCount("dismissed");
+    const false_positives = getCount("false_positive");
+    const validated = getCount("validated");
+    const true_positives = acted_on + validated;
+    const precision = true_positives + false_positives > 0
+        ? true_positives / (true_positives + false_positives)
+        : 1.0;
+    const action_rate = surfaced > 0 ? acted_on / surfaced : 0;
+    // Preemption wins
+    let preemption_wins = 0;
+    let avg_lead_time_hours = null;
+    try {
+        const winRow = rawDb
+            .prepare(`SELECT COUNT(*) as wins, AVG(lead_time_hours) as avg_lead
+       FROM preemption_wins
+       WHERE verified = 1 AND created_at >= datetime('now', ?)`)
+            .get(offset);
+        if (winRow) {
+            preemption_wins = winRow.wins;
+            avg_lead_time_hours = winRow.avg_lead;
+        }
+    }
+    catch {
+        /* table may not exist yet */
+    }
+    return {
+        period_days: days,
+        total_surfaced: surfaced,
+        acted_on,
+        dismissed,
+        false_positives,
+        precision: Math.round(precision * 1000) / 1000,
+        action_conversion_rate: Math.round(action_rate * 1000) / 1000,
+        preemption_wins,
+        avg_lead_time_hours: avg_lead_time_hours
+            ? Math.round(avg_lead_time_hours * 10) / 10
+            : null,
+        reliability_assessment: precision >= 0.8
+            ? "high"
+            : precision >= 0.6
+                ? "moderate"
+                : precision >= 0.3
+                    ? "developing"
+                    : "insufficient_data",
+    };
+}
+//# sourceMappingURL=trust-summary.js.map

package/dist/tools/trust-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-summary.js","sourceRoot":"","sources":["../../src/tools/trust-summary.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;GAMG;AAQH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,0LAA0L;IAC5L,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,wCAAwC;gBACrD,OAAO,EAAE,EAAE;aACZ;SACF;KACF;CACF,CAAC;AAEF,MAAM,UAAU,mBAAmB,CACjC,EAAkB,EAClB,MAA0B;IAE1B,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,CAAC;IAE/B,uBAAuB;IACvB,IAAI,MAAM,GAA+C,EAAE,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,KAAK;aACX,OAAO,CACN;;;2BAGmB,CACpB;aACA,GAAG,CAAC,MAAM,CAA+C,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAChC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAExC,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5C,MAAM,SAAS,GACb,cAAc,GAAG,eAAe,GAAG,CAAC;QAClC,CAAC,CAAC,cAAc,GAAG,CAAC,cAAc,GAAG,eAAe,CAAC;QACrD,CAAC,CAAC,GAAG,CAAC;IAEV,MAAM,WAAW,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,kBAAkB;IAClB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,mBAAmB,GAAkB,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK;aACjB,OAAO,CACN;;+DAEuD,CACxD;aACA,GAAG,CAAC,MAAM,CAA0D,CAAC;QACxE,IAAI,MAAM,EAAE,CAAC;YACX,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC;YAC9B,mBAAmB,GAAG,MAAM,CAAC,QAAQ,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,QAAQ;QACxB,QAAQ;QACR,SAAS;QACT,eAAe;QACf,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI;QAC9C,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,IAAI;QAC7D,eAAe;QACf,mBAAmB,EAAE,mBAAmB;YACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,GAAG,EAAE;YAC3C,CAAC,CAAC,IAAI;QACR,sBAAsB,EACpB,SAAS,IAAI,GAAG;YACd,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,SAAS,IAAI,GAAG;gBAChB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS,IAAI,GAAG;oBAChB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,mBAAmB;KAC9B,CAAC;AACJ,CAAC"}

package/dist/tools/vulnerability-scan.d.ts

@@ -0,0 +1,89 @@
+/**
+ * vulnerability_scan tool
+ *
+ * Scans project dependencies for known vulnerabilities using OSV.dev.
+ * Zero configuration — auto-detects stack from manifest files.
+ * Returns CVEs, severity, fix versions across npm, Rust, Python, Go.
+ */
+import type { FourDADatabase } from "../db.js";
+import type { LiveIntelligence } from "../live/index.js";
+export interface VulnerabilityScanParams {
+    project_path?: string;
+    severity_filter?: "critical" | "high" | "medium" | "low";
+    include_dev?: boolean;
+    force_refresh?: boolean;
+}
+export declare const vulnerabilityScanTool: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            project_path: {
+                type: string;
+                description: string;
+            };
+            severity_filter: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            include_dev: {
+                type: string;
+                description: string;
+            };
+            force_refresh: {
+                type: string;
+                description: string;
+            };
+        };
+    };
+};
+export declare function executeVulnerabilityScan(db: FourDADatabase, params: VulnerabilityScanParams, liveIntelligence: LiveIntelligence | null): Promise<{
+    scan_time: string;
+    project: string;
+    ecosystems_scanned: string[];
+    total_dependencies_scanned: number;
+    total_vulnerable_packages: number;
+    by_severity: {
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        unknown: number;
+    };
+    vulnerabilities: {
+        package: string;
+        current_version: string;
+        ecosystem: import("../live/types.js").OsvEcosystem;
+        is_dev: boolean;
+        vuln_id: string;
+        aliases: string[];
+        severity: "unknown" | "critical" | "high" | "medium" | "low";
+        cvss_score: number | null;
+        summary: string;
+        fixed_version: string | null;
+        published: string;
+        references: string[];
+    }[];
+    recommendations: string[];
+    clean_dependencies: number;
+    scan_duration_ms: number;
+    _meta: {
+        source: string;
+        cached: boolean;
+        offline: boolean;
+        privacy: string;
+    };
+} | {
+    error: null;
+    offline: boolean;
+    message: string;
+    hint: string;
+} | {
+    error: null;
+    offline: boolean;
+    message: string;
+    hint?: undefined;
+}>;
+//# sourceMappingURL=vulnerability-scan.d.ts.map

package/dist/tools/vulnerability-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerability-scan.d.ts","sourceRoot":"","sources":["../../src/tools/vulnerability-scan.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAA2B,MAAM,kBAAkB,CAAC;AAElF,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACzD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;CA6BjC,CAAC;AAUF,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,cAAc,EAClB,MAAM,EAAE,uBAAuB,EAC/B,gBAAgB,EAAE,gBAAgB,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2B1C"}

package/dist/tools/vulnerability-scan.js

@@ -0,0 +1,127 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * vulnerability_scan tool
+ *
+ * Scans project dependencies for known vulnerabilities using OSV.dev.
+ * Zero configuration — auto-detects stack from manifest files.
+ * Returns CVEs, severity, fix versions across npm, Rust, Python, Go.
+ */
+export const vulnerabilityScanTool = {
+    name: "vulnerability_scan",
+    description: "Scan project dependencies for known vulnerabilities (CVEs) using OSV.dev. " +
+        "Returns severity, fix versions, and upgrade recommendations for npm, Rust, Python, and Go. " +
+        "Zero config — automatically detects your stack from manifest/lock files. " +
+        "Privacy: only sends package names and versions (public manifest data).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            project_path: {
+                type: "string",
+                description: "Project directory to scan. Default: current working directory.",
+            },
+            severity_filter: {
+                type: "string",
+                enum: ["critical", "high", "medium", "low"],
+                description: "Only show vulnerabilities at or above this severity level.",
+            },
+            include_dev: {
+                type: "boolean",
+                description: "Include devDependencies in scan. Default: false.",
+            },
+            force_refresh: {
+                type: "boolean",
+                description: "Ignore cache and fetch fresh data from OSV.dev. Default: false.",
+            },
+        },
+    },
+};
+const SEVERITY_ORDER = {
+    critical: 4,
+    high: 3,
+    medium: 2,
+    low: 1,
+    unknown: 0,
+};
+export async function executeVulnerabilityScan(db, params, liveIntelligence) {
+    if (!liveIntelligence || !liveIntelligence.isEnabled()) {
+        return {
+            error: null,
+            offline: true,
+            message: "Live intelligence disabled. Set FOURDA_OFFLINE=false or remove the env var to enable vulnerability scanning.",
+            hint: "4DA queries OSV.dev with your dependency names and versions (public manifest data). No personal data is transmitted.",
+        };
+    }
+    if (!liveIntelligence.isInitialized()) {
+        return {
+            error: null,
+            offline: false,
+            message: "No project dependencies detected. Ensure manifest files (package.json, Cargo.toml, etc.) exist in your project.",
+        };
+    }
+    const projectPath = params.project_path || process.cwd();
+    const result = await liveIntelligence.scanVulnerabilities(projectPath, {
+        includeDev: params.include_dev || false,
+        forceRefresh: params.force_refresh || false,
+    });
+    return formatResult(result, params.severity_filter);
+}
+function formatResult(result, severityFilter) {
+    let vulns = result.vulnerabilities;
+    // Apply severity filter
+    if (severityFilter) {
+        const minOrder = SEVERITY_ORDER[severityFilter] || 0;
+        vulns = vulns.filter((v) => (SEVERITY_ORDER[v.severity] || 0) >= minOrder);
+    }
+    // Sort: critical first, then high, etc.
+    vulns.sort((a, b) => (SEVERITY_ORDER[b.severity] || 0) - (SEVERITY_ORDER[a.severity] || 0));
+    // Generate recommendations
+    const recommendations = [];
+    const byPackage = new Map();
+    for (const v of vulns) {
+        if (!byPackage.has(v.package))
+            byPackage.set(v.package, []);
+        byPackage.get(v.package).push(v);
+    }
+    for (const [pkg, pkgVulns] of byPackage) {
+        const highest = pkgVulns[0];
+        const fixVersion = pkgVulns.find((v) => v.fixedVersion)?.fixedVersion;
+        if (fixVersion) {
+            recommendations.push(`Upgrade ${pkg} ${highest.currentVersion} \u2192 ${fixVersion} (fixes ${pkgVulns.length} ${highest.severity} severity CVE${pkgVulns.length > 1 ? "s" : ""})`);
+        }
+        else {
+            recommendations.push(`Review ${pkg} ${highest.currentVersion} \u2014 ${pkgVulns.length} known vulnerabilit${pkgVulns.length > 1 ? "ies" : "y"}, no fix version published`);
+        }
+    }
+    return {
+        scan_time: result.scannedAt,
+        project: result.projectPath.split(/[/\\]/).pop() || result.projectPath,
+        ecosystems_scanned: result.ecosystemsScanned,
+        total_dependencies_scanned: result.totalScanned,
+        total_vulnerable_packages: result.totalVulnerable,
+        by_severity: result.bySeverity,
+        vulnerabilities: vulns.map((v) => ({
+            package: v.package,
+            current_version: v.currentVersion,
+            ecosystem: v.ecosystem,
+            is_dev: v.isDev,
+            vuln_id: v.vulnId,
+            aliases: v.aliases,
+            severity: v.severity,
+            cvss_score: v.cvssScore,
+            summary: v.summary,
+            fixed_version: v.fixedVersion,
+            published: v.published,
+            references: v.references,
+        })),
+        recommendations,
+        clean_dependencies: result.cleanCount,
+        scan_duration_ms: result.scanDurationMs,
+        _meta: {
+            source: "osv.dev",
+            cached: result.cached,
+            offline: result.offline,
+            privacy: "Only package names and versions were sent (public manifest data)",
+        },
+    };
+}
+//# sourceMappingURL=vulnerability-scan.js.map

package/dist/tools/vulnerability-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerability-scan.js","sourceRoot":"","sources":["../../src/tools/vulnerability-scan.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;GAMG;AAYH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,4EAA4E;QAC5E,6FAA6F;QAC7F,2EAA2E;QAC3E,wEAAwE;IAC1E,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gEAAgE;aAC9E;YACD,eAAe,EAAE;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;gBAC3C,WAAW,EAAE,4DAA4D;aAC1E;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,kDAAkD;aAChE;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,iEAAiE;aAC/E;SACF;KACF;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAkB,EAClB,MAA+B,EAC/B,gBAAyC;IAEzC,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC;QACvD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,8GAA8G;YACvH,IAAI,EAAE,sHAAsH;SAC7H,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,iHAAiH;SAC3H,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,EAAE;QACrE,UAAU,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;QACvC,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,KAAK;KAC5C,CAAC,CAAC;IAEH,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CACnB,MAA+B,EAC/B,cAAuB;IAEvB,IAAI,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC;IAEnC,wBAAwB;IACxB,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC7E,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5F,2BAA2B;IAC3B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,eAAe,CAAC,IAAI,CAClB,WAAW,GAAG,IAAI,OAAO,CAAC,cAAc,WAAW,UAAU,WAAW,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,gBAAgB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAC7J,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAClB,UAAU,GAAG,IAAI,OAAO,CAAC,cAAc,WAAW,QAAQ,CAAC,MAAM,sBAAsB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,4BAA4B,CACrJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW;QACtE,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,0BAA0B,EAAE,MAAM,CAAC,YAAY;QAC/C,yBAAyB,EAAE,MAAM,CAAC,eAAe;QACjD,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,eAAe,EAAE,CAAC,CAAC,cAAc;YACjC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,KAAK;YACf,OAAO,EAAE,CAAC,CAAC,MAAM;YACjB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,SAAS;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,aAAa,EAAE,CAAC,CAAC,YAAY;YAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC;QACH,eAAe;QACf,kBAAkB,EAAE,MAAM,CAAC,UAAU;QACrC,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,KAAK,EAAE;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,kEAAkE;SAC5E;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/what-should-i-know.d.ts

@@ -0,0 +1,79 @@
+/**
+ * what_should_i_know tool
+ *
+ * Single entry point for external AI agents to get task-relevant intelligence
+ * before starting work. Synthesizes multiple intelligence layers:
+ * - Actionable signals (security alerts, breaking changes)
+ * - Decision windows (time-bounded opportunities)
+ * - Signal chains (escalating causal narratives)
+ * - Session brief (decisions, concerns, memories)
+ *
+ * Filters everything for relevance to the described task and involved files.
+ */
+import type { FourDADatabase } from "../db.js";
+export interface WhatShouldIKnowParams {
+    task: string;
+    files?: string[];
+}
+interface Advisory {
+    title: string;
+    signal_type: string;
+    priority: string;
+    action: string;
+    url: string | null;
+}
+interface DecisionWindow {
+    id: number;
+    title: string;
+    description: string | null;
+    urgency: number;
+}
+interface ActiveSignal {
+    chain_name: string;
+    priority: string;
+    suggested_action: string;
+    link_count: number;
+}
+interface WisdomEntry {
+    type: string;
+    subject: string;
+    detail: string;
+}
+type DelegationLevel = "safe_to_delegate" | "review_needed" | "human_only";
+interface WhatShouldIKnowResult {
+    task: string;
+    files: string[];
+    advisories: Advisory[];
+    decision_windows: DecisionWindow[];
+    active_signals: ActiveSignal[];
+    relevant_wisdom: WisdomEntry[];
+    delegation_assessment: {
+        level: DelegationLevel;
+        reason: string;
+    };
+    summary: string;
+}
+export declare const whatShouldIKnowTool: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            task: {
+                type: string;
+                description: string;
+            };
+            files: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};
+export declare function executeWhatShouldIKnow(db: FourDADatabase, params: WhatShouldIKnowParams): WhatShouldIKnowResult;
+export {};
+//# sourceMappingURL=what-should-i-know.d.ts.map

package/dist/tools/what-should-i-know.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"what-should-i-know.d.ts","sourceRoot":"","sources":["../../src/tools/what-should-i-know.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAY/C,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,UAAU,QAAQ;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,YAAY;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,eAAe,GAAG,kBAAkB,GAAG,eAAe,GAAG,YAAY,CAAC;AAE3E,UAAU,qBAAqB;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACnC,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,eAAe,EAAE,WAAW,EAAE,CAAC;IAC/B,qBAAqB,EAAE;QACrB,KAAK,EAAE,eAAe,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;CAqB/B,CAAC;AA0IF,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,cAAc,EAClB,MAAM,EAAE,qBAAqB,GAC5B,qBAAqB,CAkPvB"}