@aroman22/codegraph-vba 1.7.3 → 1.9.0

package/dist/mcp/tools.d.ts

@@ -6,6 +6,11 @@
 import type CodeGraph from '../index';
 import type { QueryPool } from './query-pool';
 import type { PendingFile } from '../sync';
+import { spawnSync } from 'child_process';
+/** Narrow subprocess seam for testing CLI-only MCP wrappers. */
+export declare const cliProcess: {
+    spawnSync: typeof spawnSync;
+};
 /**
  * An expected, recoverable "codegraph can't serve this" condition — most
  * importantly a project with no index. The dispatch catch converts these to
@@ -167,6 +172,9 @@ export interface ToolAnnotations {
 interface PropertySchema {
     type: string;
     description: string;
+    items?: {
+        type: string;
+    };
     enum?: string[];
     default?: unknown;
 }
@@ -252,7 +260,8 @@ export declare class ToolHandler {
     /**
      * Optional allowlist of exposed tools, parsed from the CODEGRAPH_MCP_TOOLS
      * env var (comma-separated short names, e.g. "trace,search,node,context").
-     * Unset/empty → every tool is exposed. Lets an operator (or an A/B harness)
+     * Unset/empty → legacy direct calls to read-only tools are allowed, while
+     * mutating lifecycle tools remain opt-in. Lets an operator (or an A/B harness)
      * trim the tool surface without rebuilding the client config; the ablated
      * tool is then truly absent from ListTools rather than merely denied on call.
      * Matching is on the short form, so "node" and "codegraph_node" both work.
@@ -344,6 +353,14 @@ export declare class ToolHandler {
      * Execute a tool by name
      */
     execute(toolName: string, args: Record<string, unknown>): Promise<ToolResult>;
+    /** Run the CLI sync command and preserve its complete process output. */
+    private handleSync;
+    /** Run the CLI-only affected command and preserve its complete process output. */
+    private handleAffected;
+    /** Resolve symlinks/junctions and enforce mutation-root boundaries. */
+    private validateMutationTarget;
+    /** Execute a mutating CodeGraph CLI command after enforcing its path allowlist. */
+    private executeMutatingTool;
     /**
      * Run a single read tool to completion and return its raw {@link ToolResult},
      * classifying expected failures the same way {@link execute}'s catch does so
@@ -365,6 +382,8 @@ export declare class ToolHandler {
      * NotIndexed/PathRefusal, which {@link executeReadTool} classifies.
      */
     private dispatchTool;
+    /** Run the CLI-only query command and preserve its JSON stdout verbatim. */
+    private handleQuery;
     /**
      * Handle codegraph_search
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aroman22/codegraph-vba",
-  "version": "1.7.3",
+  "version": "1.9.0",
   "description": "Local-first code intelligence for AI agents (MCP). Self-contained — bundles its own runtime.",
   "bin": {
     "codegraph-vba": "npm-shim.js"
@@ -15,12 +15,12 @@
     "./package.json": "./package.json"
   },
   "optionalDependencies": {
-    "@aroman22/codegraph-vba-darwin-arm64": "1.7.3",
-    "@aroman22/codegraph-vba-darwin-x64": "1.7.3",
-    "@aroman22/codegraph-vba-linux-arm64": "1.7.3",
-    "@aroman22/codegraph-vba-linux-x64": "1.7.3",
-    "@aroman22/codegraph-vba-win32-arm64": "1.7.3",
-    "@aroman22/codegraph-vba-win32-x64": "1.7.3"
+    "@aroman22/codegraph-vba-darwin-arm64": "1.9.0",
+    "@aroman22/codegraph-vba-darwin-x64": "1.9.0",
+    "@aroman22/codegraph-vba-linux-arm64": "1.9.0",
+    "@aroman22/codegraph-vba-linux-x64": "1.9.0",
+    "@aroman22/codegraph-vba-win32-arm64": "1.9.0",
+    "@aroman22/codegraph-vba-win32-x64": "1.9.0"
   },
   "files": [
     "npm-shim.js",