@4da/mcp-server 4.3.0 → 4.5.0

package/dist/schemas/dependency-health.json

@@ -0,0 +1,27 @@
+{
+  "name": "dependency_health",
+  "description": "Assess health of project dependencies — version freshness, deprecation status, known CVEs across npm, Rust, Python, and Go. Auto-detects from lock files.\n\nReturns a health score (0-100), outdated/deprecated/vulnerable counts, and per-dependency details including semver distance and registry metadata.\n\nPrivacy: sends only package names (public manifest data). No code or personal data transmitted.",
+  "inputSchema": {
+    "type": "object",
+    "properties": {
+      "include_dev": {
+        "type": "boolean",
+        "description": "Include devDependencies in health check. Default: false."
+      },
+      "ecosystem_filter": {
+        "type": "string",
+        "enum": ["npm", "crates.io", "PyPI", "Go"],
+        "description": "Only show dependencies from this ecosystem."
+      },
+      "sort_by": {
+        "type": "string",
+        "enum": ["risk", "name", "outdated"],
+        "description": "Sort order. 'risk' prioritizes vulnerable+deprecated+outdated. Default: risk."
+      },
+      "limit": {
+        "type": "number",
+        "description": "Maximum dependencies to return. Default: 50."
+      }
+    }
+  }
+}

package/dist/schemas/upgrade-planner.json

@@ -0,0 +1,22 @@
+{
+  "name": "upgrade_planner",
+  "description": "Ranked upgrade recommendations for project dependencies. Combines vulnerability severity, deprecation status, and version distance to produce a prioritized upgrade plan.\n\nShows quick wins (safe patch/minor upgrades) separately from breaking changes (major version bumps). Use this after dependency_health to plan your upgrade strategy.\n\nPrivacy: uses cached registry data. No additional network calls beyond what dependency_health already fetched.",
+  "inputSchema": {
+    "type": "object",
+    "properties": {
+      "include_dev": {
+        "type": "boolean",
+        "description": "Include devDependencies. Default: false."
+      },
+      "max_recommendations": {
+        "type": "number",
+        "description": "Maximum recommendations to return. Default: 20."
+      },
+      "risk_threshold": {
+        "type": "string",
+        "enum": ["all", "low", "medium", "high", "critical"],
+        "description": "Only show upgrades at or above this risk level. Default: all."
+      }
+    }
+  }
+}

package/dist/tool-dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-dispatch.d.ts","sourceRoot":"","sources":["../src/tool-dispatch.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA4C9C;;;;;;;GAOG;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAqE3F;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACxC,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAU7D;AAED,iDAAiD;AACjD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,6CAA6C;AAC7C,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}
+{"version":3,"file":"tool-dispatch.d.ts","sourceRoot":"","sources":["../src/tool-dispatch.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA8C9C;;;;;;;GAOG;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAuE3F;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACxC,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAU7D;AAED,iDAAiD;AACjD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,6CAA6C;AAC7C,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}

package/dist/tool-dispatch.js

@@ -7,7 +7,7 @@
  *
  * Adding a new tool = add to this map + schema-registry + barrel export.
  */
-import { executeGetRelevantContent, executeGetContext, executeExplainRelevance, executeRecordFeedback, executeScoreAutopsy, executeTrendAnalysis, executeDailyBriefing, executeContextAnalysis, executeSourceHealth, executeTopicConnections, executeConfigValidator, executeLLMStatus, executeGetActionableSignals, executeExportContextPacket, executeKnowledgeGaps, executeSignalChains, executeSemanticShifts, executeReverseMentions, executeAttentionReport, executeProjectHealth, executeDecisionMemory, executeTechRadar, executeCheckDecisionAlignment, executeAgentMemory, executeAgentSessionBrief, executeDelegationScore, executeDeveloperDna, executeAutophagyStatus, executeDecisionWindows, executeCompoundAdvantage, executeRecordAgentFeedback, executeGetAgentFeedbackStats, executeWhatShouldIKnow, executeTrustSummary, executePreemptionFeed, executeVulnerabilityScan, executeEcosystemPulse, } from "./tools/index.js";
+import { executeGetRelevantContent, executeGetContext, executeExplainRelevance, executeRecordFeedback, executeScoreAutopsy, executeTrendAnalysis, executeDailyBriefing, executeContextAnalysis, executeSourceHealth, executeTopicConnections, executeConfigValidator, executeLLMStatus, executeGetActionableSignals, executeExportContextPacket, executeKnowledgeGaps, executeSignalChains, executeSemanticShifts, executeReverseMentions, executeAttentionReport, executeProjectHealth, executeDecisionMemory, executeTechRadar, executeCheckDecisionAlignment, executeAgentMemory, executeAgentSessionBrief, executeDelegationScore, executeDeveloperDna, executeAutophagyStatus, executeDecisionWindows, executeCompoundAdvantage, executeRecordAgentFeedback, executeGetAgentFeedbackStats, executeWhatShouldIKnow, executeTrustSummary, executePreemptionFeed, executeVulnerabilityScan, executeEcosystemPulse, executeDependencyHealth, executeUpgradePlanner, } from "./tools/index.js";
 import { getLiveIntelligence } from "./live-singleton.js";
 /**
  * Dispatch map — tool name → execute function
@@ -62,6 +62,8 @@ const DISPATCH_MAP = {
     // Live Intelligence
     vulnerability_scan: (db, params) => executeVulnerabilityScan(db, params, getLiveIntelligence()),
     ecosystem_pulse: (db, params) => executeEcosystemPulse(db, params, getLiveIntelligence()),
+    dependency_health: (db, params) => executeDependencyHealth(db, params, getLiveIntelligence()),
+    upgrade_planner: (db, params) => executeUpgradePlanner(db, params, getLiveIntelligence()),
 };
 /**
  * Dispatch a tool call by name. Awaits uniformly (no-op for sync executors).

package/dist/tool-dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-dispatch.js","sourceRoot":"","sources":["../src/tool-dispatch.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAIH,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,EAC3B,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAa1D;;GAEG;AACH,MAAM,YAAY,GAAiC;IACjD,OAAO;IACP,oBAAoB,EAAE,yBAAyB;IAC/C,WAAW,EAAE,iBAAiB;IAC9B,iBAAiB,EAAE,uBAAuB;IAC1C,eAAe,EAAE,qBAAqB;IAEtC,eAAe;IACf,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,sBAAsB;IACxC,iBAAiB,EAAE,uBAAuB;IAC1C,sBAAsB,EAAE,2BAA2B;IACnD,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,sBAAsB;IAExC,aAAa;IACb,aAAa,EAAE,mBAAmB;IAClC,gBAAgB,EAAE,sBAAsB;IACxC,UAAU,EAAE,gBAAgB;IAE5B,qBAAqB;IACrB,qBAAqB,EAAE,0BAA0B;IACjD,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,sBAAsB;IACxC,cAAc,EAAE,oBAAoB;IAEpC,wBAAwB;IACxB,eAAe,EAAE,qBAAqB;IACtC,UAAU,EAAE,gBAAgB;IAC5B,wBAAwB,EAAE,6BAA6B;IAEvD,iBAAiB;IACjB,YAAY,EAAE,kBAAkB;IAChC,mBAAmB,EAAE,wBAAwB;IAC7C,gBAAgB,EAAE,sBAAsB;IAExC,gBAAgB;IAChB,aAAa,EAAE,mBAAmB;IAElC,0BAA0B;IAC1B,gBAAgB,EAAE,sBAAsB;IACxC,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,wBAAwB;IAE5C,iBAAiB;IACjB,qBAAqB,EAAE,0BAA0B;IACjD,wBAAwB,EAAE,4BAA4B;IAEtD,YAAY;IACZ,kBAAkB,EAAE,sBAAsB;IAE1C,qBAAqB;IACrB,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,qBAAqB;IAEtC,oBAAoB;IACpB,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC/F,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;CAE1F,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,EAAkB,EAClB,IAAyC;IAEzC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,IAAI,YAAY,CAAC;AAC9B,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"tool-dispatch.js","sourceRoot":"","sources":["../src/tool-dispatch.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAIH,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,EAC3B,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAa1D;;GAEG;AACH,MAAM,YAAY,GAAiC;IACjD,OAAO;IACP,oBAAoB,EAAE,yBAAyB;IAC/C,WAAW,EAAE,iBAAiB;IAC9B,iBAAiB,EAAE,uBAAuB;IAC1C,eAAe,EAAE,qBAAqB;IAEtC,eAAe;IACf,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,sBAAsB;IACxC,iBAAiB,EAAE,uBAAuB;IAC1C,sBAAsB,EAAE,2BAA2B;IACnD,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,sBAAsB;IAExC,aAAa;IACb,aAAa,EAAE,mBAAmB;IAClC,gBAAgB,EAAE,sBAAsB;IACxC,UAAU,EAAE,gBAAgB;IAE5B,qBAAqB;IACrB,qBAAqB,EAAE,0BAA0B;IACjD,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,sBAAsB;IACxC,cAAc,EAAE,oBAAoB;IAEpC,wBAAwB;IACxB,eAAe,EAAE,qBAAqB;IACtC,UAAU,EAAE,gBAAgB;IAC5B,wBAAwB,EAAE,6BAA6B;IAEvD,iBAAiB;IACjB,YAAY,EAAE,kBAAkB;IAChC,mBAAmB,EAAE,wBAAwB;IAC7C,gBAAgB,EAAE,sBAAsB;IAExC,gBAAgB;IAChB,aAAa,EAAE,mBAAmB;IAElC,0BAA0B;IAC1B,gBAAgB,EAAE,sBAAsB;IACxC,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,wBAAwB;IAE5C,iBAAiB;IACjB,qBAAqB,EAAE,0BAA0B;IACjD,wBAAwB,EAAE,4BAA4B;IAEtD,YAAY;IACZ,kBAAkB,EAAE,sBAAsB;IAE1C,qBAAqB;IACrB,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,qBAAqB;IAEtC,oBAAoB;IACpB,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC/F,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzF,iBAAiB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC7F,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;CAE1F,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,EAAkB,EAClB,IAAyC;IAEzC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,IAAI,YAAY,CAAC;AAC9B,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC"}

package/dist/tools/dependency-health.d.ts

@@ -0,0 +1,45 @@
+/**
+ * dependency_health tool
+ *
+ * Assesses health of project dependencies by checking version freshness,
+ * deprecation status, and known vulnerabilities across npm, crates.io,
+ * PyPI, and Go ecosystems. Zero config — auto-detects from lock files.
+ */
+import type { FourDADatabase } from "../db.js";
+import type { LiveIntelligence } from "../live/index.js";
+import type { DependencyHealthResult } from "../live/types.js";
+export interface DependencyHealthParams {
+    include_dev?: boolean;
+    ecosystem_filter?: string;
+    sort_by?: "risk" | "name" | "outdated";
+    limit?: number;
+}
+export declare const dependencyHealthTool: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            include_dev: {
+                type: string;
+                description: string;
+            };
+            ecosystem_filter: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            sort_by: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            limit: {
+                type: string;
+                description: string;
+            };
+        };
+    };
+};
+export declare function executeDependencyHealth(_db: FourDADatabase, params: DependencyHealthParams, liveIntel: LiveIntelligence | null): Promise<DependencyHealthResult>;
+//# sourceMappingURL=dependency-health.d.ts.map

package/dist/tools/dependency-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-health.d.ts","sourceRoot":"","sources":["../../src/tools/dependency-health.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAuB,MAAM,kBAAkB,CAAC;AAEpF,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BhC,CAAC;AAEF,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,sBAAsB,EAC9B,SAAS,EAAE,gBAAgB,GAAG,IAAI,GACjC,OAAO,CAAC,sBAAsB,CAAC,CAsHjC"}

package/dist/tools/dependency-health.js

@@ -0,0 +1,152 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * dependency_health tool
+ *
+ * Assesses health of project dependencies by checking version freshness,
+ * deprecation status, and known vulnerabilities across npm, crates.io,
+ * PyPI, and Go ecosystems. Zero config — auto-detects from lock files.
+ */
+export const dependencyHealthTool = {
+    name: "dependency_health",
+    description: "Assess health of project dependencies — version freshness, deprecation status, known CVEs. Auto-detects stack from lock files. Covers npm, Rust, Python, and Go.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            include_dev: {
+                type: "boolean",
+                description: "Include devDependencies. Default: false",
+            },
+            ecosystem_filter: {
+                type: "string",
+                enum: ["npm", "crates.io", "PyPI", "Go"],
+                description: "Only show deps from this ecosystem. Default: all detected.",
+            },
+            sort_by: {
+                type: "string",
+                enum: ["risk", "name", "outdated"],
+                description: "Sort order. 'risk' prioritizes vulnerable+deprecated+outdated. Default: risk",
+            },
+            limit: {
+                type: "number",
+                description: "Max dependencies to return. Default: 50",
+            },
+        },
+    },
+};
+export async function executeDependencyHealth(_db, params, liveIntel) {
+    const start = Date.now();
+    if (!liveIntel || !liveIntel.isInitialized()) {
+        return {
+            scannedAt: new Date().toISOString(),
+            projectPath: process.cwd(),
+            ecosystemsScanned: [],
+            totalDeps: 0,
+            outdatedCount: 0,
+            deprecatedCount: 0,
+            vulnerableCount: 0,
+            healthScore: 0,
+            dependencies: [],
+            vulnerabilitySummary: null,
+            summary: "Live intelligence not initialized. No project manifests detected.",
+            scanDurationMs: Date.now() - start,
+            cached: false,
+        };
+    }
+    // Get resolved deps
+    const includeDev = params.include_dev ?? false;
+    let deps = liveIntel.getResolvedDeps();
+    if (!includeDev) {
+        deps = deps.filter((d) => !d.isDev);
+    }
+    if (params.ecosystem_filter) {
+        deps = deps.filter((d) => d.ecosystem === params.ecosystem_filter);
+    }
+    const ecosystems = [...new Set(deps.map((d) => d.ecosystem))];
+    // Fetch registry health for all deps
+    const registryData = await liveIntel.fetchRegistryHealth(deps);
+    // Merge vulnerability data
+    const vulnResult = liveIntel.getVulnerabilities();
+    const vulnMap = new Map();
+    if (vulnResult) {
+        for (const v of vulnResult.vulnerabilities) {
+            vulnMap.set(v.package, (vulnMap.get(v.package) || 0) + 1);
+        }
+    }
+    // Compute stats
+    let outdated = 0;
+    let deprecated = 0;
+    let vulnerable = 0;
+    for (const dep of registryData) {
+        if (dep.versionsBehind && dep.versionsBehind.label !== "up-to-date")
+            outdated++;
+        if (dep.deprecated)
+            deprecated++;
+        if (vulnMap.has(dep.name))
+            vulnerable++;
+    }
+    // Sort
+    const sortBy = params.sort_by ?? "risk";
+    const sorted = [...registryData].sort((a, b) => {
+        if (sortBy === "name")
+            return a.name.localeCompare(b.name);
+        if (sortBy === "outdated") {
+            const aD = a.versionsBehind ? a.versionsBehind.major * 100 + a.versionsBehind.minor * 10 + a.versionsBehind.patch : 0;
+            const bD = b.versionsBehind ? b.versionsBehind.major * 100 + b.versionsBehind.minor * 10 + b.versionsBehind.patch : 0;
+            return bD - aD;
+        }
+        // risk: vulnerable > deprecated > major outdated > minor > patch > current
+        const riskScore = (dep) => {
+            let score = 0;
+            if (vulnMap.has(dep.name))
+                score += 1000;
+            if (dep.deprecated)
+                score += 500;
+            if (dep.versionsBehind) {
+                score += dep.versionsBehind.major * 100 + dep.versionsBehind.minor * 10 + dep.versionsBehind.patch;
+            }
+            return score;
+        };
+        return riskScore(b) - riskScore(a);
+    });
+    const limit = params.limit ?? 50;
+    const limited = sorted.slice(0, limit);
+    // Health score: 100 = perfect, 0 = everything is on fire
+    const total = registryData.length || 1;
+    const vulnPenalty = Math.min(vulnerable * 15, 50);
+    const deprecatedPenalty = Math.min(deprecated * 10, 30);
+    const outdatedPenalty = Math.min(outdated * 2, 40);
+    const healthScore = Math.max(0, 100 - vulnPenalty - deprecatedPenalty - outdatedPenalty);
+    const vulnSummary = vulnResult ? {
+        critical: vulnResult.bySeverity.critical,
+        high: vulnResult.bySeverity.high,
+        medium: vulnResult.bySeverity.medium,
+        low: vulnResult.bySeverity.low,
+    } : null;
+    // Summary
+    const parts = [];
+    parts.push(`${total} dependenc${total !== 1 ? "ies" : "y"} scanned`);
+    if (vulnerable > 0)
+        parts.push(`${vulnerable} vulnerable`);
+    if (deprecated > 0)
+        parts.push(`${deprecated} deprecated`);
+    if (outdated > 0)
+        parts.push(`${outdated} outdated`);
+    if (vulnerable === 0 && deprecated === 0 && outdated === 0)
+        parts.push("all healthy");
+    return {
+        scannedAt: new Date().toISOString(),
+        projectPath: process.cwd(),
+        ecosystemsScanned: ecosystems,
+        totalDeps: total,
+        outdatedCount: outdated,
+        deprecatedCount: deprecated,
+        vulnerableCount: vulnerable,
+        healthScore,
+        dependencies: limited,
+        vulnerabilitySummary: vulnSummary,
+        summary: `Health: ${healthScore}/100. ${parts.join(", ")}.`,
+        scanDurationMs: Date.now() - start,
+        cached: false,
+    };
+}
+//# sourceMappingURL=dependency-health.js.map

package/dist/tools/dependency-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-health.js","sourceRoot":"","sources":["../../src/tools/dependency-health.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;GAMG;AAaH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,kKAAkK;IACpK,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,WAAW,EAAE;gBACX,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,yCAAyC;aACvD;YACD,gBAAgB,EAAE;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC;gBACxC,WAAW,EAAE,4DAA4D;aAC1E;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;gBAClC,WAAW,EAAE,8EAA8E;aAC5F;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yCAAyC;aACvD;SACF;KACF;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,MAA8B,EAC9B,SAAkC;IAElC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;QAC7C,OAAO;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE;YAC1B,iBAAiB,EAAE,EAAE;YACrB,SAAS,EAAE,CAAC;YACZ,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,eAAe,EAAE,CAAC;YAClB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,EAAE;YAChB,oBAAoB,EAAE,IAAI;YAC1B,OAAO,EAAE,mEAAmE;YAC5E,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAClC,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC;IAC/C,IAAI,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC;IACvC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAE9D,qCAAqC;IACrC,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE/D,2BAA2B;IAC3B,MAAM,UAAU,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,YAAY;YAAE,QAAQ,EAAE,CAAC;QAChF,IAAI,GAAG,CAAC,UAAU;YAAE,UAAU,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO;IACP,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7C,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtH,MAAM,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtH,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,2EAA2E;QAC3E,MAAM,SAAS,GAAG,CAAC,GAAwB,EAAE,EAAE;YAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,IAAI,IAAI,CAAC;YACzC,IAAI,GAAG,CAAC,UAAU;gBAAE,KAAK,IAAI,GAAG,CAAC;YACjC,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,KAAK,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC;YACrG,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEvC,yDAAyD;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,WAAW,GAAG,iBAAiB,GAAG,eAAe,CAAC,CAAC;IAEzF,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC;QAC/B,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,QAAQ;QACxC,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;QAChC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM;QACpC,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG;KAC/B,CAAC,CAAC,CAAC,IAAI,CAAC;IAET,UAAU;IACV,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IACrE,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,aAAa,CAAC,CAAC;IAC3D,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,aAAa,CAAC,CAAC;IAC3D,IAAI,QAAQ,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,CAAC;IACrD,IAAI,UAAU,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEtF,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE;QAC1B,iBAAiB,EAAE,UAAU;QAC7B,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,QAAQ;QACvB,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,UAAU;QAC3B,WAAW;QACX,YAAY,EAAE,OAAO;QACrB,oBAAoB,EAAE,WAAW;QACjC,OAAO,EAAE,WAAW,WAAW,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC3D,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAClC,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -48,4 +48,6 @@ export { trustSummaryTool, executeTrustSummary, } from "./trust-summary.js";
 export { preemptionFeedTool, executePreemptionFeed, } from "./preemption-feed.js";
 export { vulnerabilityScanTool, executeVulnerabilityScan, } from "./vulnerability-scan.js";
 export { ecosystemPulseTool, executeEcosystemPulse, } from "./ecosystem-pulse.js";
+export { dependencyHealthTool, executeDependencyHealth, } from "./dependency-health.js";
+export { upgradePlannerTool, executeUpgradePlanner, } from "./upgrade-planner.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAGH,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErE,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAGH,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErE,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC"}

package/dist/tools/index.js

@@ -61,4 +61,6 @@ export { preemptionFeedTool, executePreemptionFeed, } from "./preemption-feed.js
 // Live Intelligence Tools
 export { vulnerabilityScanTool, executeVulnerabilityScan, } from "./vulnerability-scan.js";
 export { ecosystemPulseTool, executeEcosystemPulse, } from "./ecosystem-pulse.js";
+export { dependencyHealthTool, executeDependencyHealth, } from "./dependency-health.js";
+export { upgradePlannerTool, executeUpgradePlanner, } from "./upgrade-planner.js";
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;;;;;;GAYG;AAEH,aAAa;AACb,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErE,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,mBAAmB;AACnB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,oBAAoB;AACpB,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAErC,2BAA2B;AAC3B,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,8BAA8B;AAC9B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAEnC,uBAAuB;AACvB,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,gBAAgB;AAChB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,gCAAgC;AAChC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,uBAAuB;AACvB,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC,kBAAkB;AAClB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,2BAA2B;AAC3B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,0BAA0B;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;;;;;;GAYG;AAEH,aAAa;AACb,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErE,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,mBAAmB;AACnB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,oBAAoB;AACpB,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAErC,2BAA2B;AAC3B,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,8BAA8B;AAC9B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAEnC,uBAAuB;AACvB,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,gBAAgB;AAChB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,gCAAgC;AAChC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,uBAAuB;AACvB,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC,kBAAkB;AAClB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,2BAA2B;AAC3B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,0BAA0B;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC"}

package/dist/tools/upgrade-planner.d.ts

@@ -0,0 +1,59 @@
+/**
+ * upgrade_planner tool
+ *
+ * Ranked upgrade recommendations for project dependencies.
+ * Combines version freshness, vulnerability data, and deprecation status
+ * to produce a prioritized upgrade plan.
+ */
+import type { FourDADatabase } from "../db.js";
+import type { LiveIntelligence } from "../live/index.js";
+export interface UpgradePlannerParams {
+    include_dev?: boolean;
+    max_recommendations?: number;
+    risk_threshold?: "all" | "low" | "medium" | "high" | "critical";
+}
+interface UpgradeRecommendation {
+    package: string;
+    ecosystem: string;
+    currentVersion: string | null;
+    targetVersion: string | null;
+    upgradeType: "patch" | "minor" | "major" | "unknown";
+    risk: "low" | "medium" | "high" | "critical";
+    reasons: string[];
+    breaking: boolean;
+    isDev: boolean;
+}
+interface UpgradePlanResult {
+    generatedAt: string;
+    projectPath: string;
+    totalDeps: number;
+    recommendations: UpgradeRecommendation[];
+    summary: string;
+    quickWins: number;
+    breakingChanges: number;
+}
+export declare const upgradePlannerTool: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            include_dev: {
+                type: string;
+                description: string;
+            };
+            max_recommendations: {
+                type: string;
+                description: string;
+            };
+            risk_threshold: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+        };
+    };
+};
+export declare function executeUpgradePlanner(_db: FourDADatabase, params: UpgradePlannerParams, liveIntel: LiveIntelligence | null): Promise<UpgradePlanResult>;
+export {};
+//# sourceMappingURL=upgrade-planner.d.ts.map

package/dist/tools/upgrade-planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-planner.d.ts","sourceRoot":"","sources":["../../src/tools/upgrade-planner.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACjE;AAED,UAAU,qBAAqB;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IACrD,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,UAAU,iBAAiB;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,qBAAqB,EAAE,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;CAsB9B,CAAC;AAEF,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,gBAAgB,GAAG,IAAI,GACjC,OAAO,CAAC,iBAAiB,CAAC,CA0I5B"}

package/dist/tools/upgrade-planner.js

@@ -0,0 +1,167 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * upgrade_planner tool
+ *
+ * Ranked upgrade recommendations for project dependencies.
+ * Combines version freshness, vulnerability data, and deprecation status
+ * to produce a prioritized upgrade plan.
+ */
+export const upgradePlannerTool = {
+    name: "upgrade_planner",
+    description: "Ranked upgrade recommendations for dependencies. Prioritizes by vulnerability severity, deprecation, and version distance. Shows quick wins (patch/minor) vs breaking changes (major).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            include_dev: {
+                type: "boolean",
+                description: "Include devDependencies. Default: false",
+            },
+            max_recommendations: {
+                type: "number",
+                description: "Max recommendations to return. Default: 20",
+            },
+            risk_threshold: {
+                type: "string",
+                enum: ["all", "low", "medium", "high", "critical"],
+                description: "Only show upgrades at or above this risk level. Default: all",
+            },
+        },
+    },
+};
+export async function executeUpgradePlanner(_db, params, liveIntel) {
+    if (!liveIntel || !liveIntel.isInitialized()) {
+        return {
+            generatedAt: new Date().toISOString(),
+            projectPath: process.cwd(),
+            totalDeps: 0,
+            recommendations: [],
+            summary: "No project detected. Run from a directory with package.json, Cargo.toml, pyproject.toml, or go.mod.",
+            quickWins: 0,
+            breakingChanges: 0,
+        };
+    }
+    const includeDev = params.include_dev ?? false;
+    let deps = liveIntel.getResolvedDeps();
+    if (!includeDev)
+        deps = deps.filter((d) => !d.isDev);
+    // Fetch registry data
+    const registryData = await liveIntel.fetchRegistryHealth(deps);
+    // Get vulnerability data
+    const vulnResult = liveIntel.getVulnerabilities();
+    const vulnsByPackage = new Map();
+    if (vulnResult) {
+        for (const v of vulnResult.vulnerabilities) {
+            if (!vulnsByPackage.has(v.package))
+                vulnsByPackage.set(v.package, []);
+            vulnsByPackage.get(v.package).push({
+                severity: v.severity,
+                vulnId: v.vulnId,
+                summary: v.summary,
+                fixedVersion: v.fixedVersion,
+            });
+        }
+    }
+    // Build recommendations
+    const recommendations = [];
+    for (const dep of registryData) {
+        const reasons = [];
+        let risk = "low";
+        let targetVersion = dep.latestStableVersion || dep.latestVersion;
+        // Check vulnerabilities
+        const vulns = vulnsByPackage.get(dep.name);
+        if (vulns && vulns.length > 0) {
+            const hasCritical = vulns.some((v) => v.severity === "critical");
+            const hasHigh = vulns.some((v) => v.severity === "high");
+            if (hasCritical)
+                risk = "critical";
+            else if (hasHigh)
+                risk = "high";
+            else
+                risk = "medium";
+            reasons.push(`${vulns.length} known CVE${vulns.length !== 1 ? "s" : ""} (${vulns.map((v) => v.vulnId).join(", ")})`);
+            // Use fixed version as target if available
+            const fixedVersions = vulns.map((v) => v.fixedVersion).filter(Boolean);
+            if (fixedVersions.length > 0 && !targetVersion) {
+                targetVersion = fixedVersions[0];
+            }
+        }
+        // Check deprecation
+        if (dep.deprecated) {
+            if (risk === "low")
+                risk = "high";
+            reasons.push(dep.deprecationMessage ? `Deprecated: ${dep.deprecationMessage}` : "Package is deprecated");
+        }
+        // Check version distance
+        if (dep.versionsBehind) {
+            const d = dep.versionsBehind;
+            if (d.label === "major") {
+                reasons.push(`${d.major} major version${d.major !== 1 ? "s" : ""} behind`);
+                if (risk === "low")
+                    risk = "medium";
+            }
+            else if (d.label === "minor") {
+                reasons.push(`${d.minor} minor version${d.minor !== 1 ? "s" : ""} behind`);
+            }
+            else if (d.label === "patch") {
+                reasons.push(`${d.patch} patch${d.patch !== 1 ? "es" : ""} behind`);
+            }
+        }
+        // Skip if no upgrade needed
+        if (reasons.length === 0)
+            continue;
+        if (dep.versionsBehind?.label === "up-to-date" && !dep.deprecated && !vulns)
+            continue;
+        const label = dep.versionsBehind?.label;
+        const upgradeType = !label || label === "up-to-date" ? "patch" : label;
+        recommendations.push({
+            package: dep.name,
+            ecosystem: dep.ecosystem,
+            currentVersion: dep.currentVersion,
+            targetVersion,
+            upgradeType,
+            risk,
+            reasons,
+            breaking: dep.versionsBehind?.label === "major",
+            isDev: dep.isDev,
+        });
+    }
+    // Filter by risk threshold
+    const riskLevels = { low: 0, medium: 1, high: 2, critical: 3 };
+    const threshold = params.risk_threshold ?? "all";
+    const filtered = threshold === "all"
+        ? recommendations
+        : recommendations.filter((r) => riskLevels[r.risk] >= riskLevels[threshold]);
+    // Sort: critical > high > medium > low, then by breaking (non-breaking first for quick wins)
+    filtered.sort((a, b) => {
+        const riskDiff = riskLevels[b.risk] - riskLevels[a.risk];
+        if (riskDiff !== 0)
+            return riskDiff;
+        if (a.breaking !== b.breaking)
+            return a.breaking ? 1 : -1;
+        return 0;
+    });
+    const maxRecs = params.max_recommendations ?? 20;
+    const limited = filtered.slice(0, maxRecs);
+    const quickWins = limited.filter((r) => !r.breaking).length;
+    const breakingChanges = limited.filter((r) => r.breaking).length;
+    // Summary
+    const parts = [];
+    parts.push(`${limited.length} upgrade${limited.length !== 1 ? "s" : ""} recommended`);
+    if (quickWins > 0)
+        parts.push(`${quickWins} quick win${quickWins !== 1 ? "s" : ""} (patch/minor)`);
+    if (breakingChanges > 0)
+        parts.push(`${breakingChanges} breaking change${breakingChanges !== 1 ? "s" : ""} (major)`);
+    const criticalCount = limited.filter((r) => r.risk === "critical").length;
+    if (criticalCount > 0)
+        parts.push(`${criticalCount} critical`);
+    return {
+        generatedAt: new Date().toISOString(),
+        projectPath: process.cwd(),
+        totalDeps: deps.length,
+        recommendations: limited,
+        summary: parts.join(". ") + ".",
+        quickWins,
+        breakingChanges,
+    };
+}
+//# sourceMappingURL=upgrade-planner.js.map

package/dist/tools/upgrade-planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-planner.js","sourceRoot":"","sources":["../../src/tools/upgrade-planner.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;GAMG;AAiCH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,wLAAwL;IAC1L,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,WAAW,EAAE;gBACX,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,yCAAyC;aACvD;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,4CAA4C;aAC1D;YACD,cAAc,EAAE;gBACd,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;gBAClD,WAAW,EAAE,8DAA8D;aAC5E;SACF;KACF;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAmB,EACnB,MAA4B,EAC5B,SAAkC;IAElC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;QAC7C,OAAO;YACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE;YAC1B,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,qGAAqG;YAC9G,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,CAAC;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC;IAC/C,IAAI,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC;IACvC,IAAI,CAAC,UAAU;QAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAErD,sBAAsB;IACtB,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE/D,yBAAyB;IACzB,MAAM,UAAU,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqG,CAAC;IACpI,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;YAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC;gBAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,CAAC,CAAC,YAAY;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,eAAe,GAA4B,EAAE,CAAC;IAEpD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,IAAI,GAAkC,KAAK,CAAC;QAChD,IAAI,aAAa,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,aAAa,CAAC;QAEjE,wBAAwB;QACxB,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;YACzD,IAAI,WAAW;gBAAE,IAAI,GAAG,UAAU,CAAC;iBAC9B,IAAI,OAAO;gBAAE,IAAI,GAAG,MAAM,CAAC;;gBAC3B,IAAI,GAAG,QAAQ,CAAC;YAErB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAErH,2CAA2C;YAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC/C,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,KAAK;gBAAE,IAAI,GAAG,MAAM,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QAC3G,CAAC;QAED,yBAAyB;QACzB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;YAC7B,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC3E,IAAI,IAAI,KAAK,KAAK;oBAAE,IAAI,GAAG,QAAQ,CAAC;YACtC,CAAC;iBAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC7E,CAAC;iBAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,IAAI,GAAG,CAAC,cAAc,EAAE,KAAK,KAAK,YAAY,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,KAAK;YAAE,SAAS;QAEtF,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC;QACxC,MAAM,WAAW,GACf,CAAC,KAAK,IAAI,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAErD,eAAe,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,aAAa;YACb,WAAW;YACX,IAAI;YACJ,OAAO;YACP,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE,KAAK,KAAK,OAAO;YAC/C,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAC3B,MAAM,UAAU,GAA2B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,IAAI,KAAK,CAAC;IACjD,MAAM,QAAQ,GAAG,SAAS,KAAK,KAAK;QAClC,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAE/E,6FAA6F;IAC7F,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,QAAQ,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAEjE,UAAU;IACV,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACtF,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,aAAa,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnG,IAAI,eAAe,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,mBAAmB,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACrH,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC1E,IAAI,aAAa,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,WAAW,CAAC,CAAC;IAE/D,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE;QAC1B,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,eAAe,EAAE,OAAO;QACxB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG;QAC/B,SAAS;QACT,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@4da/mcp-server",
-  "version": "4.3.0",
+  "version": "4.5.0",
   "mcpName": "io.github.runyourempire/4da-mcp-server",
-  "description": "Dependency intelligence for AI coding agents. Live CVE scanning (OSV.dev), ecosystem news, resolved versions, decision memory, and project context — zero config, privacy-first. 7 focused tools standalone, 37 with full desktop app.",
+  "description": "Dependency intelligence for AI coding agents. Live CVE scanning, dependency health (version freshness + deprecation), ecosystem news, decision memory — zero config, privacy-first. 8 focused tools standalone, 38 with desktop app.",
   "type": "module",
   "main": "dist/index.js",
   "bin": {