@4da/mcp-server 5.0.4 → 6.0.1

package/dist/types.d.ts

@@ -119,37 +119,6 @@ export interface UserContext {
         anti_topics: AntiTopic[];
     };
 }
-/**
- * Score breakdown for explain_relevance
- */
-export interface ScoreBreakdown {
-    embedding_similarity: number | null;
-    static_match_score: number;
-    ace_match_score: number;
-    learned_affinity_score: number;
-    anti_penalty: number;
-    final_score: number;
-}
-/**
- * Matching context elements
- */
-export interface MatchingContext {
-    matching_interests: string[];
-    matching_tech: string[];
-    matching_topics: string[];
-    matching_affinities: string[];
-}
-/**
- * Full relevance explanation
- */
-export interface RelevanceExplanation {
-    item_id: number;
-    source_type: string;
-    title: string;
-    score_breakdown: ScoreBreakdown;
-    matching_context: MatchingContext;
-    explanation: string;
-}
 /**
  * Valid feedback action types
  */
@@ -161,6 +130,8 @@ export interface FeedbackResult {
     success: boolean;
     message: string;
     interaction_id?: number;
+    /** The relevance label written to `feedback`: true (save), false (mark_irrelevant), null (no label: click/dismiss). */
+    relevance_label?: boolean | null;
 }
 export interface GetRelevantContentParams {
     min_score?: number;
@@ -178,7 +149,8 @@ export interface ExplainRelevanceParams {
 }
 export interface RecordFeedbackParams {
     item_id: number;
-    source_type: string;
+    /** Optional; when given it must match the item's source type. */
+    source_type?: string;
     action: FeedbackAction;
 }
 /** Row from: SELECT si.source_type, COUNT(*) as interactions FROM interactions ... GROUP BY si.source_type */
@@ -290,107 +262,3 @@ export interface SignalEventRow {
     data: string;
     created_at: string;
 }
-/**
- * Valid agent feedback outcome types
- */
-export type AgentFeedbackOutcome = "used" | "rejected" | "partially_used";
-/**
- * Parameters for recording agent feedback
- */
-export interface RecordAgentFeedbackParams {
-    item_ids: string[];
-    outcome: AgentFeedbackOutcome;
-    context?: string;
-    session_task?: string;
-}
-/**
- * Result from recording agent feedback
- */
-export interface AgentFeedbackResult {
-    success: boolean;
-    message: string;
-    recorded_count: number;
-}
-/**
- * Parameters for getting agent feedback stats
- */
-export interface GetAgentFeedbackStatsParams {
-    days?: number;
-}
-/**
- * Outcome breakdown in agent feedback stats
- */
-export interface AgentFeedbackOutcomeStats {
-    used: number;
-    rejected: number;
-    partially_used: number;
-    total: number;
-}
-/**
- * Per-source feedback stats
- */
-export interface AgentFeedbackSourceStats {
-    source_type: string;
-    used: number;
-    rejected: number;
-    partially_used: number;
-    total: number;
-    usefulness_rate: number;
-}
-/**
- * A frequently used item
- */
-export interface AgentFeedbackTopItem {
-    item_id: string;
-    title: string | null;
-    source_type: string | null;
-    used_count: number;
-    rejected_count: number;
-}
-/**
- * A recent feedback entry
- */
-export interface AgentFeedbackRecentEntry {
-    item_id: string;
-    outcome: string;
-    context: string | null;
-    session_task: string | null;
-    recorded_at: string;
-}
-/**
- * Full agent feedback stats response
- */
-export interface AgentFeedbackStats {
-    period_days: number;
-    outcomes: AgentFeedbackOutcomeStats;
-    by_source: AgentFeedbackSourceStats[];
-    top_used_items: AgentFeedbackTopItem[];
-    recent_feedback: AgentFeedbackRecentEntry[];
-}
-/** Row from agent_feedback table */
-export interface AgentFeedbackRow {
-    item_id: string;
-    outcome: string;
-    context: string | null;
-    session_task: string | null;
-    recorded_at: string;
-}
-/** Row from agent_feedback stats query — outcome counts */
-export interface AgentFeedbackOutcomeRow {
-    outcome: string;
-    cnt: number;
-}
-/** Row from agent_feedback stats query — source breakdown */
-export interface AgentFeedbackSourceRow {
-    source_type: string;
-    outcome: string;
-    cnt: number;
-}
-/** Row from agent_feedback stats query — top items */
-export interface AgentFeedbackTopItemRow {
-    item_id: string;
-    title: string | null;
-    source_type: string | null;
-    used_count: number;
-    rejected_count: number;
-}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@4da/mcp-server",
-  "version": "5.0.4",
+  "version": "6.0.1",
   "mcpName": "io.github.4DA-Systems/4da-mcp-server",
-  "description": "Dependency intelligence for AI coding agents. Live CVE scanning, dependency health, upgrade planning, ecosystem news, decision memory — zero config, privacy-first. 9 tools standalone, 14 total with desktop app.",
+  "description": "Upgrade intelligence for AI coding agents: what changes between your installed and target version (changelog, breaking changes, the files you import it from), a pre-install verdict on each bump, vulnerability scanning at osv-scanner parity across npm/pnpm/yarn, Cargo, Python and Go lockfiles, ranked upgrade plans, task-scoped briefings, decision memory. Local, no account; works standalone, and reads the 4DA desktop app's scored feed when it is installed.",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
@@ -16,19 +16,22 @@
     "!dist/test-setup.*",
     "!dist/**/*.map",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "scripts": {
     "clean": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true})\"",
-    "build": "pnpm run clean && tsc && pnpm run copy-schemas",
-    "copy-schemas": "node -e \"const fs=require('fs');const path=require('path');const src='src/schemas';const dst='dist/schemas';if(!fs.existsSync(dst))fs.mkdirSync(dst,{recursive:true});fs.readdirSync(src).filter(f=>f.endsWith('.json')).forEach(f=>fs.copyFileSync(path.join(src,f),path.join(dst,f)))\"",
+    "build": "pnpm run clean && tsc",
     "dev": "tsc --watch",
     "start": "node dist/index.js",
     "inspect": "npx @modelcontextprotocol/inspector node dist/index.js",
     "setup": "node dist/setup.js",
     "test": "vitest run",
     "test:watch": "vitest",
-    "prepublishOnly": "pnpm run build"
+    "prepublishOnly": "pnpm run build",
+    "check": "node scripts/check-repo.mjs",
+    "contract": "node scripts/app-schema-contract.mjs",
+    "contract:sync": "node scripts/sync-app-schema.mjs"
   },
   "keywords": [
     "mcp",
@@ -41,61 +44,58 @@
     "windsurf",
     "copilot",
     "vscode",
-    "ai-tools",
     "ai-agent",
     "ai-coding",
     "developer-tools",
-    "developer-intelligence",
-    "developer-productivity",
-    "developer-context",
-    "codebase-awareness",
-    "codebase-context",
-    "code-context",
-    "code-intelligence",
-    "content-scoring",
-    "relevance-scoring",
-    "privacy-first",
-    "local-first",
-    "offline",
-    "hacker-news",
-    "arxiv",
-    "reddit",
-    "github",
-    "knowledge-gaps",
-    "tech-radar",
+    "dependencies",
+    "dependency-upgrade",
+    "upgrade",
+    "changelog",
+    "breaking-changes",
+    "vulnerability",
+    "vulnerability-scanner",
+    "security",
+    "cve",
+    "osv",
+    "supply-chain",
+    "lockfile",
+    "npm",
+    "cargo",
+    "pypi",
+    "go-modules",
     "decision-memory",
-    "dependency-tracking",
-    "security-advisories",
     "agent-memory",
-    "sqlite"
+    "privacy-first",
+    "local-first",
+    "offline"
   ],
   "author": "4DA",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/4DA-Systems/4DA.git",
-    "directory": "mcp-4da-server"
+    "url": "git+https://github.com/4DA-Systems/4da-mcp-server.git"
   },
-  "homepage": "https://4da.ai",
+  "homepage": "https://4da.ai/mcp/",
   "bugs": {
-    "url": "https://github.com/4DA-Systems/4DA/issues"
+    "url": "https://github.com/4DA-Systems/4da-mcp-server/issues"
   },
   "dependencies": {
-    "better-sqlite3": "^12.9.0",
     "@modelcontextprotocol/node": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
+    "better-sqlite3": "^12.9.0",
     "hono": "^4.12.34"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.11",
     "@types/node": "^26.0.1",
-    "typescript": "^5.3.0",
+    "typescript": "^7.0.2",
     "vite": "~7.3.5",
-    "vitest": "^4.1.5"
+    "vitest": "^5.0.1"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   },
+  "packageManager": "pnpm@10.34.6",
   "pnpm": {
     "onlyBuiltDependencies": [
       "better-sqlite3",

package/dist/schemas/agent-memory.json

@@ -1,49 +0,0 @@
-{
-  "name": "agent_memory",
-  "description": "Cross-agent persistent memory — store and recall discoveries, decisions, context, and warnings across sessions and tools.\n\nEnables AI agents to build institutional knowledge that persists beyond individual conversations. Supports storing, recalling by topic, filtering by tags, and retrieving recent entries. Call to store a discovery, decision, or warning worth keeping, or to recall prior context before starting work.",
-  "inputSchema": {
-    "type": "object",
-    "properties": {
-      "action": {
-        "type": "string",
-        "enum": ["store", "recall", "recall_by_tags", "get_recent"],
-        "description": "Action to perform"
-      },
-      "session_id": {
-        "type": "string",
-        "description": "Session identifier (for store)"
-      },
-      "agent_type": {
-        "type": "string",
-        "description": "Agent identifier, e.g. claude_code, cursor, windsurf (for store)"
-      },
-      "memory_type": {
-        "type": "string",
-        "enum": ["discovery", "decision", "context", "warning", "preference"],
-        "description": "Type of memory (for store). Default: context"
-      },
-      "content": {
-        "type": "string",
-        "description": "Memory content text (for store)"
-      },
-      "tags": {
-        "type": "array",
-        "items": { "type": "string" },
-        "description": "Tags for categorization and retrieval"
-      },
-      "confidence": {
-        "type": "number",
-        "description": "Confidence level 0.0-1.0 (for store)"
-      },
-      "topic": {
-        "type": "string",
-        "description": "Topic to recall memories about (for recall)"
-      },
-      "limit": {
-        "type": "number",
-        "description": "Maximum memories to return (for recall/get_recent). Default: 10"
-      }
-    },
-    "required": ["action"]
-  }
-}

package/dist/schemas/decision-enforcement.json

@@ -1,22 +0,0 @@
-{
-  "name": "check_decision_alignment",
-  "description": "Check if a technology or pattern aligns with active decisions before suggesting changes.\n\nPrevents AI agents from recommending technologies or patterns that contradict settled developer decisions. Returns alignment status and relevant decisions. Call BEFORE suggesting a major tech change, new library, or architecture shift, to avoid contradicting settled decisions.",
-  "inputSchema": {
-    "type": "object",
-    "properties": {
-      "technology": {
-        "type": "string",
-        "description": "Technology name to check (e.g., 'postgresql', 'redis', 'graphql')"
-      },
-      "pattern": {
-        "type": "string",
-        "description": "Architecture pattern to check (e.g., 'microservices', 'event-driven')"
-      },
-      "context": {
-        "type": "string",
-        "description": "Additional context about the proposed change"
-      }
-    },
-    "required": ["technology"]
-  }
-}

package/dist/schemas/decision-memory.json

@@ -1,54 +0,0 @@
-{
-  "name": "decision_memory",
-  "description": "Manage developer decisions — record, list, check alignment, update, or supersede.\n\nPersistent decision memory that tracks technology choices, architecture patterns, and workflow preferences. Prevents re-litigation of settled decisions across sessions. Call when the user makes, changes, or asks about a settled decision, choice, or convention.",
-  "inputSchema": {
-    "type": "object",
-    "properties": {
-      "action": {
-        "type": "string",
-        "enum": ["record", "list", "check_alignment", "update", "supersede"],
-        "description": "Action to perform"
-      },
-      "decision_type": {
-        "type": "string",
-        "enum": ["tech_choice", "architecture", "workflow", "pattern", "dependency"],
-        "description": "Type of decision (for record)"
-      },
-      "subject": {
-        "type": "string",
-        "description": "Subject of the decision (e.g., 'database', 'auth-strategy')"
-      },
-      "decision": {
-        "type": "string",
-        "description": "The decision made (for record)"
-      },
-      "rationale": {
-        "type": "string",
-        "description": "Why this decision was made (for record)"
-      },
-      "alternatives_rejected": {
-        "type": "array",
-        "items": { "type": "string" },
-        "description": "Alternatives that were considered and rejected"
-      },
-      "context_tags": {
-        "type": "array",
-        "items": { "type": "string" },
-        "description": "Tags for filtering and retrieval"
-      },
-      "confidence": {
-        "type": "number",
-        "description": "Confidence level 0.0-1.0 (for record)"
-      },
-      "id": {
-        "type": "number",
-        "description": "Decision ID (for update/supersede)"
-      },
-      "technology": {
-        "type": "string",
-        "description": "Technology to check alignment for (check_alignment action)"
-      }
-    },
-    "required": ["action"]
-  }
-}

package/dist/schemas/dependency-health.json

@@ -1,27 +0,0 @@
-{
-  "name": "dependency_health",
-  "description": "Assess health of project dependencies — version freshness, deprecation status, known CVEs across npm, Rust, Python, and Go. Auto-detects from lock files.\n\nReturns a health score (0-100), outdated/deprecated/vulnerable counts, and per-dependency details including semver distance and registry metadata.\n\nPrivacy: sends only package names (public manifest data). No code or personal data transmitted. Call when the user asks whether their dependencies are outdated, stale, deprecated, or need updating.",
-  "inputSchema": {
-    "type": "object",
-    "properties": {
-      "include_dev": {
-        "type": "boolean",
-        "description": "Include devDependencies in health check. Default: false."
-      },
-      "ecosystem_filter": {
-        "type": "string",
-        "enum": ["npm", "crates.io", "PyPI", "Go"],
-        "description": "Only show dependencies from this ecosystem."
-      },
-      "sort_by": {
-        "type": "string",
-        "enum": ["risk", "name", "outdated"],
-        "description": "Sort order. 'risk' prioritizes vulnerable+deprecated+outdated. Default: risk."
-      },
-      "limit": {
-        "type": "number",
-        "description": "Maximum dependencies to return. Default: 50."
-      }
-    }
-  }
-}

package/dist/schemas/developer-dna.json

@@ -1,219 +0,0 @@
-{
-  "name": "developer_dna",
-  "description": "Export your Developer DNA — a comprehensive profile of your tech identity built from project scans, explicit interests, and local interaction history. Includes primary stack, adjacent tech, top dependencies, engaged topics, blind spots, source engagement rates, and aggregate stats. Call when the user asks for a summary of their developer profile, identity, or tech fingerprint.",
-  "inputSchema": {
-    "type": "object",
-    "properties": {
-      "include_blind_spots": {
-        "type": "boolean",
-        "description": "Include blind spot analysis (dependencies with stale engagement). Default: true",
-        "default": true
-      },
-      "max_dependencies": {
-        "type": "number",
-        "description": "Maximum dependencies to include. Default: 30",
-        "default": 30
-      },
-      "max_topics": {
-        "type": "number",
-        "description": "Maximum engaged topics to include. Default: 20",
-        "default": 20
-      }
-    }
-  },
-  "outputSchema": {
-    "$schema": "http://json-schema.org/draft-07/schema#",
-    "title": "DeveloperDna",
-    "description": "Comprehensive developer identity profile built from local project data and engagement signals.",
-    "type": "object",
-    "required": [
-      "generated_at",
-      "primary_stack",
-      "adjacent_tech",
-      "top_dependencies",
-      "interests",
-      "top_engaged_topics",
-      "blind_spots",
-      "source_engagement",
-      "stats",
-      "identity_summary"
-    ],
-    "properties": {
-      "generated_at": {
-        "type": "string",
-        "format": "date-time",
-        "description": "ISO 8601 timestamp when this DNA profile was generated."
-      },
-      "primary_stack": {
-        "type": "array",
-        "items": { "type": "string" },
-        "description": "Technologies from the user's declared tech stack (user_identity + tech_stack tables)."
-      },
-      "adjacent_tech": {
-        "type": "array",
-        "items": { "type": "string" },
-        "description": "Technologies detected by ACE in local projects but not in the declared stack."
-      },
-      "top_dependencies": {
-        "type": "array",
-        "items": { "$ref": "#/outputSchema/definitions/DependencyEntry" },
-        "description": "Most-used project dependencies across scanned projects."
-      },
-      "interests": {
-        "type": "array",
-        "items": { "type": "string" },
-        "description": "Explicit interest topics declared by the user."
-      },
-      "top_engaged_topics": {
-        "type": "array",
-        "items": { "$ref": "#/outputSchema/definitions/EngagedTopic" },
-        "description": "Topics with highest positive engagement from interaction data."
-      },
-      "blind_spots": {
-        "type": "array",
-        "items": { "$ref": "#/outputSchema/definitions/BlindSpotEntry" },
-        "description": "Dependencies in the codebase with stale or zero engagement."
-      },
-      "source_engagement": {
-        "type": "array",
-        "items": { "$ref": "#/outputSchema/definitions/SourceEngagement" },
-        "description": "Engagement rates broken down by content source type."
-      },
-      "stats": {
-        "$ref": "#/outputSchema/definitions/DnaStats",
-        "description": "Aggregate statistics about the developer's 4DA usage."
-      },
-      "identity_summary": {
-        "type": "string",
-        "description": "Human-readable one-paragraph summary of the developer's technical identity."
-      }
-    },
-    "definitions": {
-      "DependencyEntry": {
-        "type": "object",
-        "required": ["name", "project_path"],
-        "properties": {
-          "name": {
-            "type": "string",
-            "description": "Package or library name."
-          },
-          "project_path": {
-            "type": "string",
-            "description": "Path to the project that uses this dependency."
-          }
-        }
-      },
-      "EngagedTopic": {
-        "type": "object",
-        "required": ["topic", "interactions", "percent_of_total"],
-        "properties": {
-          "topic": {
-            "type": "string",
-            "description": "The topic name."
-          },
-          "interactions": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Total positive interaction count for this topic."
-          },
-          "percent_of_total": {
-            "type": "number",
-            "minimum": 0,
-            "maximum": 100,
-            "description": "Percentage of total interactions attributed to this topic."
-          }
-        }
-      },
-      "BlindSpotEntry": {
-        "type": "object",
-        "required": ["dependency", "severity", "days_stale"],
-        "properties": {
-          "dependency": {
-            "type": "string",
-            "description": "The dependency or technology name."
-          },
-          "severity": {
-            "type": "string",
-            "enum": ["critical", "high", "medium", "low"],
-            "description": "How urgent the knowledge gap is."
-          },
-          "days_stale": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Days since last engagement with content about this dependency."
-          }
-        }
-      },
-      "SourceEngagement": {
-        "type": "object",
-        "required": ["source_type", "items_seen", "items_saved", "engagement_rate"],
-        "properties": {
-          "source_type": {
-            "type": "string",
-            "description": "Content source identifier (e.g., hackernews, reddit, arxiv, rss)."
-          },
-          "items_seen": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Total items fetched from this source."
-          },
-          "items_saved": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Items the user explicitly saved from this source."
-          },
-          "engagement_rate": {
-            "type": "number",
-            "minimum": 0,
-            "maximum": 1,
-            "description": "Ratio of items_saved to items_seen (0..1)."
-          }
-        }
-      },
-      "DnaStats": {
-        "type": "object",
-        "required": [
-          "total_items_processed",
-          "total_relevant",
-          "rejection_rate",
-          "project_count",
-          "dependency_count",
-          "days_active"
-        ],
-        "properties": {
-          "total_items_processed": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Total content items ingested by 4DA."
-          },
-          "total_relevant": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Items that passed the relevance threshold."
-          },
-          "rejection_rate": {
-            "type": "number",
-            "minimum": 0,
-            "maximum": 1,
-            "description": "Fraction of items rejected as irrelevant (0..1)."
-          },
-          "project_count": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Number of distinct projects scanned by ACE."
-          },
-          "dependency_count": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Total unique dependencies across all projects."
-          },
-          "days_active": {
-            "type": "integer",
-            "minimum": 0,
-            "description": "Days since the earliest source item was ingested."
-          }
-        }
-      }
-    }
-  }
-}