@cognium-ai/mcp-server 4.16.4 → 4.17.0

package/dist/tools/find-excessive-permissions.js

@@ -1,144 +0,0 @@
-/**
- * find_excessive_permissions MCP tool (Pillar I, Batch 2).
- *
- * Analyzes MCP server configurations for overly broad or dangerous permissions.
- * Supports: skill bundle (mcp.json), Claude Desktop, Cursor configs.
- *
- * Auto-detection heuristic:
- * - Files named mcp.json, .mcp.json, mcp-config.json → skill bundle format
- * - claude_desktop_config.json → Claude Desktop format
- * - .cursor/mcp.json → Cursor format
- *
- * @see https://github.com/cogniumhq/cognium-ai/issues/80
- */
-import { z } from 'zod';
-import { excessivePermissionsPass } from 'circle-ir-ai';
-import { loadCircleIR } from '../analysis.js';
-const MAX_FINDINGS = 500;
-const SEVERITY_ORDER = {
-    info: 0,
-    low: 1,
-    medium: 2,
-    high: 3,
-    critical: 4,
-};
-const inputSchema = {
-    code_root: z.string().describe('Absolute path to the code root to scan'),
-    severity_floor: z.enum(['info', 'low', 'medium', 'high', 'critical']).optional().default('low').describe('Minimum severity to report (default: low)'),
-    deep_analysis: z.boolean().optional().default(true).describe('Run CircleIR analysis to detect undisclosed capabilities (default: true)'),
-};
-const outputSchema = {
-    findings: z.array(z.object({
-        kind: z.literal('EXCESSIVE_PERMISSION'),
-        severity: z.enum(['low', 'medium', 'high', 'critical']),
-        location: z.object({
-            file: z.string(),
-            span: z.tuple([z.number(), z.number()]),
-        }),
-        evidence: z.object({
-            rule_id: z.string(),
-            config_file: z.string(),
-            permission_type: z.string(),
-            value: z.string(),
-        }),
-        suggested_action: z.string(),
-    })),
-    summary: z.object({
-        total: z.number(),
-        by_severity: z.object({
-            critical: z.number(),
-            high: z.number(),
-            medium: z.number(),
-            low: z.number(),
-        }),
-        truncated: z.boolean(),
-    }),
-    detection_info: z.object({
-        config_files_checked: z.array(z.string()),
-        auto_detection_heuristic: z.string(),
-        deep_analysis_performed: z.boolean(),
-        files_analyzed: z.number().optional(),
-    }),
-};
-const SUGGESTED_ACTIONS = {
-    'perm-broad-filesystem': 'Restrict filesystem access to specific directories needed by the tool. Avoid /home, /Users, or ~ wildcards.',
-    'perm-secret-env-exposure': 'Remove sensitive environment variables from MCP config. Use secrets management instead.',
-    'perm-unrestricted-network': 'Restrict network access to specific hosts/ports needed by the tool.',
-    'perm-dangerous-command': 'Review and restrict allowed commands. Avoid shell interpreters and system utilities.',
-    'perm-write-sensitive-path': 'Restrict write access to user-specific directories. Avoid system paths.',
-};
-function trustFindingToMcp(f) {
-    const meta = f.meta;
-    return {
-        kind: 'EXCESSIVE_PERMISSION',
-        severity: f.severity === 'info' ? 'low' : f.severity,
-        location: {
-            file: f.location?.file ?? 'mcp.json',
-            span: [f.location?.line ?? 1, f.location?.line ?? 1],
-        },
-        evidence: {
-            rule_id: f.ruleId,
-            config_file: f.location?.file ?? 'mcp.json',
-            permission_type: meta.permissionType ?? 'unknown',
-            value: meta.value ?? '',
-        },
-        suggested_action: SUGGESTED_ACTIONS[f.ruleId] ?? 'Review this permission for security risks and apply least-privilege principle.',
-    };
-}
-export function registerFindExcessivePermissions(server) {
-    server.registerTool('find_excessive_permissions', {
-        title: 'Find Excessive Permissions',
-        description: 'Analyze MCP server configurations for overly broad permissions. ' +
-            'Detects: broad filesystem paths (/home, /Users, ~), secret env var exposure, ' +
-            'unrestricted network access, dangerous command allowlisting. ' +
-            'Auto-detects config format (skill bundle, Claude Desktop, Cursor).',
-        inputSchema,
-        outputSchema,
-    }, async ({ code_root, severity_floor, deep_analysis }) => {
-        // Run CircleIR analysis for deep capability detection
-        let circleIRResults;
-        if (deep_analysis !== false) {
-            try {
-                const { results } = await loadCircleIR(code_root);
-                circleIRResults = results;
-            }
-            catch {
-                // CircleIR analysis failed, continue with static-only analysis
-            }
-        }
-        const result = await excessivePermissionsPass(code_root, { circleIRResults });
-        const floorValue = SEVERITY_ORDER[severity_floor ?? 'low'];
-        const filtered = result.findings.filter((f) => SEVERITY_ORDER[f.severity] >= floorValue);
-        const truncated = filtered.length > MAX_FINDINGS;
-        const findings = filtered.slice(0, MAX_FINDINGS).map(trustFindingToMcp);
-        const output = {
-            findings,
-            summary: {
-                total: filtered.length,
-                by_severity: {
-                    critical: filtered.filter((f) => f.severity === 'critical').length,
-                    high: filtered.filter((f) => f.severity === 'high').length,
-                    medium: filtered.filter((f) => f.severity === 'medium').length,
-                    low: filtered.filter((f) => f.severity === 'low').length,
-                },
-                truncated,
-            },
-            detection_info: {
-                config_files_checked: [
-                    'mcp.json', '.mcp.json', 'mcp-config.json',
-                    'claude_desktop_config.json', '.cursor/mcp.json',
-                ],
-                auto_detection_heuristic: 'Files named mcp.json/.mcp.json/mcp-config.json use skill bundle format. ' +
-                    'claude_desktop_config.json uses Claude Desktop format. ' +
-                    '.cursor/mcp.json uses Cursor format.',
-                deep_analysis_performed: !!circleIRResults,
-                files_analyzed: circleIRResults?.length,
-            },
-        };
-        return {
-            content: [{ type: 'text', text: JSON.stringify(output) }],
-            structuredContent: output,
-        };
-    });
-}
-//# sourceMappingURL=find-excessive-permissions.js.map

package/dist/tools/find-excessive-permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-excessive-permissions.js","sourceRoot":"","sources":["../../src/tools/find-excessive-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAyC,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,YAAY,GAAG,GAAG,CAAC;AAIzB,MAAM,cAAc,GAAkC;IACpD,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACxE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACrJ,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,0EAA0E,CAAC;CACzI,CAAC;AAEF,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;QACvC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACxC,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;YAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;SAClB,CAAC;QACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC7B,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;SAChB,CAAC;QACF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;KACvB,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACzC,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE;QACpC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE;QACpC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;CACH,CAAC;AAeF,MAAM,iBAAiB,GAA2B;IAChD,uBAAuB,EAAE,6GAA6G;IACtI,0BAA0B,EAAE,yFAAyF;IACrH,2BAA2B,EAAE,qEAAqE;IAClG,wBAAwB,EAAE,sFAAsF;IAChH,2BAA2B,EAAE,yEAAyE;CACvG,CAAC;AAEF,SAAS,iBAAiB,CAAC,CAAe;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA+B,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAkD;QAC9F,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,UAAU;YACpC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;SACrD;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,MAAM;YACjB,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,UAAU;YAC3C,eAAe,EAAG,IAAI,CAAC,cAAyB,IAAI,SAAS;YAC7D,KAAK,EAAG,IAAI,CAAC,KAAgB,IAAI,EAAE;SACpC;QACD,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,gFAAgF;KAClI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAiB;IAChE,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,kEAAkE;YAClE,+EAA+E;YAC/E,+DAA+D;YAC/D,oEAAoE;QACtE,WAAW;QACX,YAAY;KACb,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,EAAE;QACrD,sDAAsD;QACtD,IAAI,eAA2D,CAAC;QAChE,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;gBAClD,eAAe,GAAG,OAAO,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;QAE9E,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAyB,CAAC,IAAI,UAAU,CACjE,CAAC;QAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC;QACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG;YACb,QAAQ;YACR,OAAO,EAAE;gBACP,KAAK,EAAE,QAAQ,CAAC,MAAM;gBACtB,WAAW,EAAE;oBACX,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;oBAClE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;oBAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;oBAC9D,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;iBACzD;gBACD,SAAS;aACV;YACD,cAAc,EAAE;gBACd,oBAAoB,EAAE;oBACpB,UAAU,EAAE,WAAW,EAAE,iBAAiB;oBAC1C,4BAA4B,EAAE,kBAAkB;iBACjD;gBACD,wBAAwB,EACtB,0EAA0E;oBAC1E,yDAAyD;oBACzD,sCAAsC;gBACxC,uBAAuB,EAAE,CAAC,CAAC,eAAe;gBAC1C,cAAc,EAAE,eAAe,EAAE,MAAM;aACxC;SACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,iBAAiB,EAAE,MAA4C;SAChE,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/find-install-script-risk.d.ts

@@ -1,11 +0,0 @@
-/**
- * find_install_script_risk MCP tool (Pillar I, Batch 2).
- *
- * Analyzes npm package.json lifecycle scripts for suspicious patterns.
- * Scope: npm lifecycle scripts only (preinstall, install, postinstall, prepare, etc.)
- *
- * @see https://github.com/cogniumhq/cognium-ai/issues/80
- */
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerFindInstallScriptRisk(server: McpServer): void;
-//# sourceMappingURL=find-install-script-risk.d.ts.map

package/dist/tools/find-install-script-risk.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-install-script-risk.d.ts","sourceRoot":"","sources":["../../src/tools/find-install-script-risk.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgGzE,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA2CrE"}

package/dist/tools/find-install-script-risk.js

@@ -1,115 +0,0 @@
-/**
- * find_install_script_risk MCP tool (Pillar I, Batch 2).
- *
- * Analyzes npm package.json lifecycle scripts for suspicious patterns.
- * Scope: npm lifecycle scripts only (preinstall, install, postinstall, prepare, etc.)
- *
- * @see https://github.com/cogniumhq/cognium-ai/issues/80
- */
-import { z } from 'zod';
-import { maliciousInstallScriptPass } from 'circle-ir-ai';
-const MAX_FINDINGS = 500;
-const MAX_SNIPPET_LENGTH = 200;
-const SEVERITY_ORDER = {
-    info: 0,
-    low: 1,
-    medium: 2,
-    high: 3,
-    critical: 4,
-};
-const inputSchema = {
-    code_root: z.string().describe('Absolute path to the code root to scan'),
-    severity_floor: z.enum(['info', 'low', 'medium', 'high', 'critical']).optional().default('low').describe('Minimum severity to report (default: low)'),
-};
-const outputSchema = {
-    findings: z.array(z.object({
-        kind: z.literal('MALICIOUS_INSTALL_SCRIPT'),
-        severity: z.enum(['low', 'medium', 'high', 'critical']),
-        location: z.object({
-            file: z.string(),
-            span: z.tuple([z.number(), z.number()]),
-        }),
-        evidence: z.object({
-            rule_id: z.string(),
-            script_name: z.string(),
-            script_content: z.string(),
-            pattern_matched: z.string(),
-        }),
-        suggested_action: z.string(),
-    })),
-    summary: z.object({
-        total: z.number(),
-        by_severity: z.object({
-            critical: z.number(),
-            high: z.number(),
-            medium: z.number(),
-            low: z.number(),
-        }),
-        truncated: z.boolean(),
-    }),
-};
-const SUGGESTED_ACTIONS = {
-    'install-script-piped-download': 'Remove piped download execution. If external resources are needed, download explicitly and verify checksums.',
-    'install-script-eval-exec': 'Remove dynamic code execution. Use static scripts instead of eval/exec patterns.',
-    'install-script-base64-decode': 'Remove base64 obfuscation. Install scripts should be readable and auditable.',
-    'install-script-env-exfil': 'Remove environment variable access that could leak secrets. Document required env vars instead.',
-    'install-script-network-download': 'Avoid network downloads in install scripts. Bundle dependencies or use npm dependencies.',
-    'install-script-hidden-file-write': 'Avoid writing to hidden files/directories. Use explicit, documented paths.',
-};
-function truncate(str, max) {
-    if (str.length <= max)
-        return str;
-    return str.slice(0, max - 3) + '...';
-}
-function trustFindingToMcp(f) {
-    const meta = f.meta;
-    return {
-        kind: 'MALICIOUS_INSTALL_SCRIPT',
-        severity: f.severity === 'info' ? 'low' : f.severity,
-        location: {
-            file: f.location?.file ?? 'package.json',
-            span: [f.location?.line ?? 1, f.location?.line ?? 1],
-        },
-        evidence: {
-            rule_id: f.ruleId,
-            script_name: meta.scriptName ?? 'unknown',
-            script_content: truncate(meta.scriptContent ?? '', MAX_SNIPPET_LENGTH),
-            pattern_matched: f.ruleId,
-        },
-        suggested_action: SUGGESTED_ACTIONS[f.ruleId] ?? 'Review this install script for security risks.',
-    };
-}
-export function registerFindInstallScriptRisk(server) {
-    server.registerTool('find_install_script_risk', {
-        title: 'Find Install Script Risk',
-        description: 'Analyze npm package.json lifecycle scripts (preinstall, install, postinstall, prepare) ' +
-            'for suspicious patterns: piped downloads, eval/exec, base64 decoding, env exfiltration, ' +
-            'network downloads, hidden file writes. npm lifecycle scripts only.',
-        inputSchema,
-        outputSchema,
-    }, async ({ code_root, severity_floor }) => {
-        const result = await maliciousInstallScriptPass(code_root, {});
-        const floorValue = SEVERITY_ORDER[severity_floor ?? 'low'];
-        const filtered = result.findings.filter((f) => SEVERITY_ORDER[f.severity] >= floorValue);
-        const truncated = filtered.length > MAX_FINDINGS;
-        const findings = filtered.slice(0, MAX_FINDINGS).map(trustFindingToMcp);
-        const output = {
-            findings,
-            summary: {
-                total: filtered.length,
-                by_severity: {
-                    critical: filtered.filter((f) => f.severity === 'critical').length,
-                    high: filtered.filter((f) => f.severity === 'high').length,
-                    medium: filtered.filter((f) => f.severity === 'medium').length,
-                    low: filtered.filter((f) => f.severity === 'low').length,
-                },
-                truncated,
-            },
-        };
-        return {
-            content: [{ type: 'text', text: JSON.stringify(output) }],
-            structuredContent: output,
-        };
-    });
-}
-//# sourceMappingURL=find-install-script-risk.js.map

package/dist/tools/find-install-script-risk.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-install-script-risk.js","sourceRoot":"","sources":["../../src/tools/find-install-script-risk.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,0BAA0B,EAAyC,MAAM,cAAc,CAAC;AAEjG,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAI/B,MAAM,cAAc,GAAkC;IACpD,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACxE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACtJ,CAAC;AAEF,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;QAC3C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACxC,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;YAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;SAC5B,CAAC;QACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC7B,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;SAChB,CAAC;QACF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;KACvB,CAAC;CACH,CAAC;AAeF,MAAM,iBAAiB,GAA2B;IAChD,+BAA+B,EAAE,8GAA8G;IAC/I,0BAA0B,EAAE,kFAAkF;IAC9G,8BAA8B,EAAE,8EAA8E;IAC9G,0BAA0B,EAAE,iGAAiG;IAC7H,iCAAiC,EAAE,0FAA0F;IAC7H,kCAAkC,EAAE,4EAA4E;CACjH,CAAC;AAEF,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAW;IACxC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AACvC,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAe;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA+B,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAkD;QAC9F,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,cAAc;YACxC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;SACrD;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,MAAM;YACjB,WAAW,EAAG,IAAI,CAAC,UAAqB,IAAI,SAAS;YACrD,cAAc,EAAE,QAAQ,CAAE,IAAI,CAAC,aAAwB,IAAI,EAAE,EAAE,kBAAkB,CAAC;YAClF,eAAe,EAAE,CAAC,CAAC,MAAM;SAC1B;QACD,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,gDAAgD;KAClG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAiB;IAC7D,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,yFAAyF;YACzF,0FAA0F;YAC1F,oEAAoE;QACtE,WAAW;QACX,YAAY;KACb,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAyB,CAAC,IAAI,UAAU,CACjE,CAAC;QAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC;QACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG;YACb,QAAQ;YACR,OAAO,EAAE;gBACP,KAAK,EAAE,QAAQ,CAAC,MAAM;gBACtB,WAAW,EAAE;oBACX,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;oBAClE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;oBAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;oBAC9D,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;iBACzD;gBACD,SAAS;aACV;SACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,iBAAiB,EAAE,MAA4C;SAChE,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/find-pattern.d.ts

@@ -1,13 +0,0 @@
-/**
- * `find_pattern` MCP tool (stretch).
- *
- * Runs a JavaScript regular expression over the text contents of files under
- * a code root and returns the matches with a line-based span and a snippet.
- *
- * NOTE: `span` is `[startLine, endLine]` (1-based, line-based — NOT character
- * offsets). Documented in README; adaptable to char offsets additively if a
- * consumer needs them.
- */
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerFindPattern(server: McpServer): void;
-//# sourceMappingURL=find-pattern.d.ts.map

package/dist/tools/find-pattern.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-pattern.d.ts","sourceRoot":"","sources":["../../src/tools/find-pattern.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAqDzE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAsE3D"}

package/dist/tools/find-pattern.js

@@ -1,114 +0,0 @@
-/**
- * `find_pattern` MCP tool (stretch).
- *
- * Runs a JavaScript regular expression over the text contents of files under
- * a code root and returns the matches with a line-based span and a snippet.
- *
- * NOTE: `span` is `[startLine, endLine]` (1-based, line-based — NOT character
- * offsets). Documented in README; adaptable to char offsets additively if a
- * consumer needs them.
- */
-import * as fs from 'fs';
-import { z } from 'zod';
-import { walkFiles } from '../walk.js';
-/** Hard cap on total matches returned across all files. */
-const MAX_MATCHES = 1000;
-/**
- * Wall-clock budget for the whole search, checked between regex `exec` calls
- * (i.e. between matches and between files). A caller/LLM-supplied regex can
- * trigger catastrophic backtracking; this bounds how long we keep scanning.
- *
- * It does NOT interrupt a single `exec` mid-flight — JS regex is synchronous
- * and uninterruptible — so the per-file 1 MiB size cap in `walk.ts` is the
- * real bound on the worst-case cost of one match attempt.
- */
-const TIME_BUDGET_MS = 2000;
-const inputSchema = {
-    pattern: z.string().describe('JavaScript regular expression (applied with the global flag)'),
-    code_root: z.string().describe('Path to the code root to search'),
-};
-const outputSchema = {
-    matches: z.array(z.object({
-        file: z.string(),
-        span: z.tuple([z.number(), z.number()]),
-        snippet: z.string(),
-    })),
-};
-/** Count newlines in `text` before byte index `end`. */
-function lineAt(text, end) {
-    let line = 1;
-    for (let i = 0; i < end && i < text.length; i++) {
-        if (text[i] === '\n')
-            line++;
-    }
-    return line;
-}
-/** Heuristic binary detection: a NUL byte in the leading window. */
-function looksBinary(content) {
-    const window = content.length < 8192 ? content : content.slice(0, 8192);
-    return window.includes('\u0000');
-}
-export function registerFindPattern(server) {
-    server.registerTool('find_pattern', {
-        title: 'Find Pattern',
-        description: 'Search file contents under a code root with a JavaScript regular ' +
-            'expression. Returns matches with a 1-based line span [start, end] and ' +
-            'a trimmed snippet. Skips binary/large files and common excludes.',
-        inputSchema,
-        outputSchema,
-    }, async ({ pattern, code_root }) => {
-        // Validate the pattern once, up front — fail fast even when the code
-        // root contains no files (the old per-file compile silently returned
-        // an empty result for an invalid regex over an empty tree).
-        try {
-            new RegExp(pattern, 'g');
-        }
-        catch (err) {
-            throw new Error(`Invalid regular expression: ${err.message}`);
-        }
-        const matches = [];
-        const files = walkFiles(code_root);
-        const deadline = Date.now() + TIME_BUDGET_MS;
-        for (const file of files) {
-            if (matches.length >= MAX_MATCHES || Date.now() > deadline)
-                break;
-            let content;
-            try {
-                content = fs.readFileSync(file.absolutePath, 'utf-8');
-            }
-            catch {
-                continue;
-            }
-            // Skip binaries: the size cap alone lets sub-1-MiB binaries through,
-            // and reading them as UTF-8 yields garbage matches.
-            if (looksBinary(content))
-                continue;
-            // Fresh regex per file so lastIndex state never leaks across files.
-            const re = new RegExp(pattern, 'g');
-            let m;
-            while ((m = re.exec(content)) !== null) {
-                const startLine = lineAt(content, m.index);
-                const matched = m[0];
-                const newlines = (matched.match(/\n/g) ?? []).length;
-                const endLine = startLine + newlines;
-                const snippet = matched.split('\n')[0].trim();
-                matches.push({
-                    file: file.relativePath,
-                    span: [startLine, endLine],
-                    snippet,
-                });
-                if (matches.length >= MAX_MATCHES || Date.now() > deadline)
-                    break;
-                // Guard against zero-width matches looping forever.
-                if (m.index === re.lastIndex)
-                    re.lastIndex++;
-            }
-        }
-        const payload = { matches };
-        return {
-            content: [{ type: 'text', text: JSON.stringify(payload) }],
-            structuredContent: payload,
-        };
-    });
-}
-//# sourceMappingURL=find-pattern.js.map

package/dist/tools/find-pattern.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-pattern.js","sourceRoot":"","sources":["../../src/tools/find-pattern.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,2DAA2D;AAC3D,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;IAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CAClE,CAAC;AAEF,MAAM,YAAY,GAAG;IACnB,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CACH;CACF,CAAC;AAQF,wDAAwD;AACxD,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,mEAAmE;YACnE,wEAAwE;YACxE,kEAAkE;QACpE,WAAW;QACX,YAAY;KACb,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/B,qEAAqE;QACrE,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,+BAAgC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;QAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM;YAElE,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,qEAAqE;YACrE,oDAAoD;YACpD,IAAI,WAAW,CAAC,OAAO,CAAC;gBAAE,SAAS;YAEnC,oEAAoE;YACpE,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAEpC,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrB,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACrD,MAAM,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;gBACrC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;gBAE/C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,YAAY;oBACvB,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;oBAC1B,OAAO;iBACR,CAAC,CAAC;gBAEH,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;oBAAE,MAAM;gBAClE,oDAAoD;gBACpD,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;oBAAE,EAAE,CAAC,SAAS,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,iBAAiB,EAAE,OAA6C;SACjE,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/find-spec-drift.d.ts

@@ -1,10 +0,0 @@
-/**
- * `find_spec_drift` MCP tool.
- *
- * Reports drift between code and spec: code paths with no matching
- * requirement (code_without_spec) and requirements with no matching code
- * (spec_without_code), each with a suggested remediation.
- */
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerFindSpecDrift(server: McpServer): void;
-//# sourceMappingURL=find-spec-drift.d.ts.map

package/dist/tools/find-spec-drift.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-spec-drift.d.ts","sourceRoot":"","sources":["../../src/tools/find-spec-drift.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAoBzE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAsB7D"}

package/dist/tools/find-spec-drift.js

@@ -1,41 +0,0 @@
-/**
- * `find_spec_drift` MCP tool.
- *
- * Reports drift between code and spec: code paths with no matching
- * requirement (code_without_spec) and requirements with no matching code
- * (spec_without_code), each with a suggested remediation.
- */
-import { z } from 'zod';
-import { analyzeSpecGap } from 'circle-ir-ai';
-import { loadCircleIR } from '../analysis.js';
-import { toSpecDrift } from '../mappers.js';
-const inputSchema = {
-    spec_dir: z.string().describe('Path to the .specifica/ directory containing spec.md'),
-    code_root: z.string().describe('Path to the code root to analyze'),
-};
-const outputSchema = {
-    drifts: z.array(z.object({
-        kind: z.enum(['code_without_spec', 'spec_without_code']),
-        location: z.string(),
-        suggested_action: z.string(),
-    })),
-};
-export function registerFindSpecDrift(server) {
-    server.registerTool('find_spec_drift', {
-        title: 'Find Spec Drift',
-        description: 'Find drift between code and spec: undocumented behaviors ' +
-            '(code_without_spec) and unimplemented requirements ' +
-            '(spec_without_code), each with a suggested action.',
-        inputSchema,
-        outputSchema,
-    }, async ({ spec_dir, code_root }) => {
-        const { codePath, results } = await loadCircleIR(code_root);
-        const specGap = await analyzeSpecGap(codePath, results, { specDir: spec_dir });
-        const payload = toSpecDrift(specGap);
-        return {
-            content: [{ type: 'text', text: JSON.stringify(payload) }],
-            structuredContent: payload,
-        };
-    });
-}
-//# sourceMappingURL=find-spec-drift.js.map

package/dist/tools/find-spec-drift.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-spec-drift.js","sourceRoot":"","sources":["../../src/tools/find-spec-drift.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IACrF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CACnE,CAAC;AAEF,MAAM,YAAY,GAAG;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC7B,CAAC,CACH;CACF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,2DAA2D;YAC3D,qDAAqD;YACrD,oDAAoD;QACtD,WAAW;QACX,YAAY;KACb,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;QAChC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,iBAAiB,EAAE,OAA6C;SACjE,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/find-stale-dependencies.d.ts

@@ -1,14 +0,0 @@
-/**
- * find_stale_dependencies MCP tool (Pillar I, Batch 2).
- *
- * Checks npm dependencies for:
- * 1. Staleness: last publish date via npm registry
- * 2. Known vulnerabilities: via OSV (Open Source Vulnerabilities) API
- *
- * npm package.json only (pypi/cargo/go deferred).
- *
- * @see https://github.com/cogniumhq/cognium-ai/issues/80
- */
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerFindStaleDependencies(server: McpServer): void;
-//# sourceMappingURL=find-stale-dependencies.d.ts.map

package/dist/tools/find-stale-dependencies.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"find-stale-dependencies.d.ts","sourceRoot":"","sources":["../../src/tools/find-stale-dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAoJzE,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA+DrE"}