@cognium/mcp-server 0.1.0

package/dist/tools/refresh.js

@@ -0,0 +1,39 @@
+/**
+ * `refresh` tool — manual cache invalidation. The server auto-invalidates
+ * on file mtime change, but callers may want to force a re-scan (e.g.
+ * after a git checkout or when developing analyzer rules).
+ */
+import { z } from 'zod';
+import { resolve } from 'path';
+import { textResult } from './types.js';
+export const refreshInputShape = {
+    project_root: z.string().optional()
+        .describe('Absolute path to the project root to invalidate. If omitted, every cached project is cleared.'),
+};
+export const refreshConfig = {
+    title: 'Refresh analysis cache',
+    description: 'Invalidate cached analysis for one project (when `project_root` is provided) or every cached project ' +
+        '(when omitted). The next tool call that needs analysis will re-run `analyzeProject`. Use after a git ' +
+        'checkout, dependency change, or when authoring / testing analyzer rules.',
+    inputSchema: refreshInputShape,
+};
+export function makeRefreshHandler(ctx) {
+    return async (args) => {
+        if (args.project_root) {
+            const abs = resolve(args.project_root);
+            const removed = ctx.cache.invalidate(abs);
+            return textResult({
+                projectRoot: abs,
+                entriesRemoved: removed,
+                cacheSizeAfter: ctx.cache.size(),
+            });
+        }
+        const removed = ctx.cache.clear();
+        return textResult({
+            cleared: 'all',
+            entriesRemoved: removed,
+            cacheSizeAfter: ctx.cache.size(),
+        });
+    };
+}
+//# sourceMappingURL=refresh.js.map

package/dist/tools/refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.js","sourceRoot":"","sources":["../../src/tools/refresh.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAChC,QAAQ,CAAC,+FAA+F,CAAC;CACpG,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,uGAAuG;QACvG,uGAAuG;QACvG,0EAA0E;IAC5E,WAAW,EAAE,iBAAiB;CACtB,CAAC;AAEX,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,OAAO,KAAK,EAAE,IAA+B,EAAuB,EAAE;QACpE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,UAAU,CAAC;gBAChB,WAAW,EAAE,GAAG;gBAChB,cAAc,EAAE,OAAO;gBACvB,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,OAAO;YACvB,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;SACjC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/scan.d.ts

@@ -0,0 +1,42 @@
+/**
+ * `scan` tool — run circle-ir on a file or directory.
+ *
+ * The workhorse tool. Every other tool that needs analysis data pulls
+ * from the same `ProjectCache`, so calling `scan` first is the fastest
+ * path for a session (subsequent tool calls are cache hits).
+ */
+import { z } from 'zod';
+import type { SupportedLanguage } from 'circle-ir';
+import type { ToolContext, ToolResult } from './types.js';
+export declare const scanInputShape: {
+    readonly path: z.ZodString;
+    readonly language: z.ZodOptional<z.ZodEnum<["java", "javascript", "typescript", "python", "go", "rust", "bash", "html"]>>;
+    readonly severity: z.ZodOptional<z.ZodArray<z.ZodEnum<["critical", "high", "medium", "low"]>, "many">>;
+    readonly categories: z.ZodOptional<z.ZodArray<z.ZodEnum<["security", "reliability", "performance", "maintainability", "architecture"]>, "many">>;
+    readonly disabledPasses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    readonly forceRefresh: z.ZodOptional<z.ZodBoolean>;
+    readonly crossFileBudgetMs: z.ZodOptional<z.ZodNumber>;
+};
+export declare const scanConfig: {
+    readonly title: "Scan project";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly path: z.ZodString;
+        readonly language: z.ZodOptional<z.ZodEnum<["java", "javascript", "typescript", "python", "go", "rust", "bash", "html"]>>;
+        readonly severity: z.ZodOptional<z.ZodArray<z.ZodEnum<["critical", "high", "medium", "low"]>, "many">>;
+        readonly categories: z.ZodOptional<z.ZodArray<z.ZodEnum<["security", "reliability", "performance", "maintainability", "architecture"]>, "many">>;
+        readonly disabledPasses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        readonly forceRefresh: z.ZodOptional<z.ZodBoolean>;
+        readonly crossFileBudgetMs: z.ZodOptional<z.ZodNumber>;
+    };
+};
+export declare function makeScanHandler(ctx: ToolContext): (args: {
+    path: string;
+    language?: SupportedLanguage;
+    severity?: Array<"critical" | "high" | "medium" | "low">;
+    categories?: Array<"security" | "reliability" | "performance" | "maintainability" | "architecture">;
+    disabledPasses?: string[];
+    forceRefresh?: boolean;
+    crossFileBudgetMs?: number;
+}) => Promise<ToolResult>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/tools/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/tools/scan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACc,iBAAiB,EAC1C,MAAM,WAAW,CAAC;AAkBnB,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM1D,eAAO,MAAM,cAAc;;;;;;;;CAoBjB,CAAC;AAEX,eAAO,MAAM,UAAU;;;;;;;;;;;;CAQb,CAAC;AAgEX,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,IAChC,MAAM;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC;IACzD,UAAU,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,aAAa,GAAG,aAAa,GAAG,iBAAiB,GAAG,cAAc,CAAC,CAAC;IACpG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,KAAG,OAAO,CAAC,UAAU,CAAC,CA0FxB"}

package/dist/tools/scan.js

@@ -0,0 +1,197 @@
+/**
+ * `scan` tool — run circle-ir on a file or directory.
+ *
+ * The workhorse tool. Every other tool that needs analysis data pulls
+ * from the same `ProjectCache`, so calling `scan` first is the fastest
+ * path for a session (subsequent tool calls are cache hits).
+ */
+import { z } from 'zod';
+import { RULE_DEFINITIONS } from 'circle-ir';
+import { resolve } from 'path';
+import { existsSync, statSync } from 'fs';
+import { textResult, errorResult } from './types.js';
+import { truncateArray, truncateString, MAX_FINDINGS, MAX_TAINT_PATHS, MAX_STRING_LEN, } from '../util/serialize.js';
+export const scanInputShape = {
+    path: z.string().describe('Absolute path to a file or directory to scan.'),
+    language: z.enum(['java', 'javascript', 'typescript', 'python', 'go', 'rust', 'bash', 'html'])
+        .optional()
+        .describe('Restrict analysis to a single language.'),
+    severity: z.array(z.enum(['critical', 'high', 'medium', 'low']))
+        .optional()
+        .describe('Filter findings to these severity levels.'),
+    categories: z.array(z.enum(['security', 'reliability', 'performance', 'maintainability', 'architecture']))
+        .optional()
+        .describe('Filter findings to these ISO-25010 categories.'),
+    disabledPasses: z.array(z.string())
+        .optional()
+        .describe('circle-ir rule_ids to disable, e.g. ["naming-convention", "todo-in-prod"].'),
+    forceRefresh: z.boolean()
+        .optional()
+        .describe('Skip the cache and re-analyze from disk.'),
+    crossFileBudgetMs: z.number().int().min(0)
+        .optional()
+        .describe('Wall-time cap for the cross-file phase in ms. 0 = unlimited.'),
+};
+export const scanConfig = {
+    title: 'Scan project',
+    description: 'Run circle-ir static analysis (polyglot SAST pipeline) on a file or directory. ' +
+        'Returns SastFindings covering security, reliability, performance, maintainability, and architecture, ' +
+        'plus per-file taint flows and (for directory scans) cross-file taint paths. Results are cached per ' +
+        'project + option-set and invalidated by file mtime, so subsequent tool calls are effectively free.',
+    inputSchema: scanInputShape,
+};
+function compactFinding(f) {
+    return {
+        id: f.id,
+        rule_id: f.rule_id,
+        category: f.category,
+        severity: f.severity,
+        level: f.level,
+        cwe: f.cwe,
+        message: truncateString(f.message),
+        file: f.file,
+        line: f.line,
+        end_line: f.end_line,
+        column: f.column,
+        snippet: truncateString(f.snippet),
+        fix: truncateString(f.fix),
+        confidence: f.confidence,
+    };
+}
+function compactFlow(file, flow) {
+    const rule = RULE_DEFINITIONS[flow.sink_type];
+    return {
+        file,
+        source_type: flow.source_type,
+        source_line: flow.source_line,
+        sink_type: flow.sink_type,
+        sink_line: flow.sink_line,
+        cwe: rule?.cwe,
+        severity: rule?.severityLevel ?? 'high',
+        confidence: flow.confidence,
+        sanitized: flow.sanitized,
+        tags: flow.tags,
+    };
+}
+function compactTaintPath(p) {
+    return {
+        id: p.id,
+        source: {
+            file: p.source.file,
+            line: p.source.line,
+            type: p.source.type,
+            code: truncateString(p.source.code, 512),
+        },
+        sink: {
+            file: p.sink.file,
+            line: p.sink.line,
+            type: p.sink.type,
+            cwe: p.sink.cwe,
+            code: truncateString(p.sink.code, 512),
+        },
+        hops: p.hops.map(h => ({
+            file: h.file,
+            line: h.line,
+            variable: h.variable,
+            code: truncateString(h.code, 256),
+        })),
+        sanitizers_in_path: p.sanitizers_in_path,
+        confidence: p.confidence,
+    };
+}
+export function makeScanHandler(ctx) {
+    return async (args) => {
+        const absPath = resolve(args.path);
+        if (!existsSync(absPath)) {
+            return errorResult(`Path not found: ${absPath}`);
+        }
+        const isDir = statSync(absPath).isDirectory();
+        const projectRoot = isDir ? absPath : resolve(absPath, '..');
+        if (args.forceRefresh) {
+            ctx.cache.invalidate(projectRoot);
+        }
+        const scanOpts = {
+            ...(args.language ? { language: args.language } : {}),
+            ...(args.disabledPasses ? { disabledPasses: args.disabledPasses } : {}),
+            ...(args.crossFileBudgetMs !== undefined ? { crossFileBudgetMs: args.crossFileBudgetMs } : {}),
+        };
+        const { analysis, cacheHit, analysisMs, fileCount } = await ctx.cache.getOrCompute(projectRoot, scanOpts);
+        const findings = [];
+        const flows = [];
+        for (const fa of analysis.files) {
+            if (!isDir && fa.file !== absPath)
+                continue;
+            for (const f of fa.analysis.findings ?? [])
+                findings.push(f);
+            for (const fl of fa.analysis.taint.flows ?? [])
+                flows.push({ file: fa.file, flow: fl });
+        }
+        // Filter findings.
+        let filteredFindings = findings;
+        if (args.severity && args.severity.length > 0) {
+            const set = new Set(args.severity);
+            filteredFindings = filteredFindings.filter(f => set.has(f.severity));
+        }
+        if (args.categories && args.categories.length > 0) {
+            const set = new Set(args.categories);
+            filteredFindings = filteredFindings.filter(f => set.has(f.category));
+        }
+        // Filter flows: flows are always 'security'; drop if categories filter excludes 'security'.
+        let filteredFlows = flows;
+        if (args.categories && !args.categories.includes('security')) {
+            filteredFlows = [];
+        }
+        if (args.severity && args.severity.length > 0) {
+            const set = new Set(args.severity);
+            filteredFlows = filteredFlows.filter(({ flow }) => {
+                const sev = RULE_DEFINITIONS[flow.sink_type]?.severityLevel ?? 'high';
+                return set.has(sev);
+            });
+        }
+        const taintPaths = isDir ? analysis.taint_paths : [];
+        const { items: findingsSlice, truncated: fTrunc, totalCount: fTotal } = truncateArray(filteredFindings.map(compactFinding), MAX_FINDINGS);
+        const { items: flowsSlice, truncated: flTrunc, totalCount: flTotal } = truncateArray(filteredFlows.map(({ file, flow }) => compactFlow(file, flow)), MAX_FINDINGS);
+        const { items: pathsSlice, truncated: pTrunc, totalCount: pTotal } = truncateArray(taintPaths.map(compactTaintPath), MAX_TAINT_PATHS);
+        const summary = {
+            totalFindings: fTotal,
+            totalTaintFlows: flTotal,
+            totalCrossFileTaintPaths: pTotal,
+            byCategory: countBy(filteredFindings, f => f.category),
+            bySeverity: countBy(filteredFindings, f => f.severity),
+            byRuleId: topN(countBy(filteredFindings, f => f.rule_id), 10),
+            byTaintSinkType: countBy(filteredFlows.map(x => x.flow), f => f.sink_type),
+        };
+        return textResult({
+            projectRoot,
+            scannedPath: absPath,
+            fileCount,
+            cacheHit,
+            analysisMs,
+            crossFileBudgetExceeded: analysis.cross_file_budget_exceeded === true,
+            summary,
+            findings: findingsSlice,
+            findingsTruncated: fTrunc,
+            taintFlows: flowsSlice,
+            taintFlowsTruncated: flTrunc,
+            crossFileTaintPaths: pathsSlice,
+            crossFileTaintPathsTruncated: pTrunc,
+            note: (fTrunc || flTrunc || pTrunc)
+                ? `Response truncated (${MAX_FINDINGS} findings / ${MAX_FINDINGS} flows / ${MAX_TAINT_PATHS} paths max). Narrow via 'severity' / 'categories' or query 'find_similar' / 'list_reachable_sinks'.`
+                : undefined,
+            _limits: { maxStringLen: MAX_STRING_LEN, maxFindings: MAX_FINDINGS, maxTaintPaths: MAX_TAINT_PATHS },
+        });
+    };
+}
+function countBy(items, key) {
+    const out = {};
+    for (const i of items) {
+        const k = key(i);
+        out[k] = (out[k] ?? 0) + 1;
+    }
+    return out;
+}
+function topN(map, n) {
+    const entries = Object.entries(map).sort((a, b) => b[1] - a[1]).slice(0, n);
+    return Object.fromEntries(entries);
+}
+//# sourceMappingURL=scan.js.map

package/dist/tools/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/tools/scan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAe7C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,GAC7E,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;SAC3F,QAAQ,EAAE;SACV,QAAQ,CAAC,yCAAyC,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;SAC7D,QAAQ,EAAE;SACV,QAAQ,CAAC,2CAA2C,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC;SACvG,QAAQ,EAAE;SACV,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAChC,QAAQ,EAAE;SACV,QAAQ,CAAC,4EAA4E,CAAC;IACzF,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;SACtB,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACvD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SACvC,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;CACnE,CAAC;AAEX,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,iFAAiF;QACjF,uGAAuG;QACvG,qGAAqG;QACrG,oGAAoG;IACtG,WAAW,EAAE,cAAc;CACnB,CAAC;AAEX,SAAS,cAAc,CAAC,CAAc;IACpC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAmB;IACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAqB,CAAC,CAAC;IAC1D,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,EAAE,GAAG;QACd,QAAQ,EAAE,IAAI,EAAE,aAAa,IAAI,MAAM;QACvC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAY;IACpC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;YACnB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;YACnB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;YACnB,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;SACzC;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;YACjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;YACjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;YACjB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG;YACf,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;SACvC;QACD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC;SAClC,CAAC,CAAC;QACH,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,OAAO,KAAK,EAAE,IAQb,EAAuB,EAAE;QACxB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAE7D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F,CAAC;QAEF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE1G,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAiD,EAAE,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7D,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,mBAAmB;QACnB,IAAI,gBAAgB,GAAG,QAAQ,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrC,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,4FAA4F;QAC5F,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,aAAa,GAAG,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;gBAChD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAqB,CAAC,EAAE,aAAa,IAAI,MAAM,CAAC;gBAClF,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAErD,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GACnE,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAClE,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAC9F,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAChE,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,MAAM;YACrB,eAAe,EAAE,OAAO;YACxB,wBAAwB,EAAE,MAAM;YAChC,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtD,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAC7D,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E,CAAC;QAEF,OAAO,UAAU,CAAC;YAChB,WAAW;YACX,WAAW,EAAE,OAAO;YACpB,SAAS;YACT,QAAQ;YACR,UAAU;YACV,uBAAuB,EAAE,QAAQ,CAAC,0BAA0B,KAAK,IAAI;YACrE,OAAO;YACP,QAAQ,EAAE,aAAa;YACvB,iBAAiB,EAAE,MAAM;YACzB,UAAU,EAAE,UAAU;YACtB,mBAAmB,EAAE,OAAO;YAC5B,mBAAmB,EAAE,UAAU;YAC/B,4BAA4B,EAAE,MAAM;YACpC,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,IAAI,MAAM,CAAC;gBACjC,CAAC,CAAC,uBAAuB,YAAY,eAAe,YAAY,YAAY,eAAe,qGAAqG;gBAChM,CAAC,CAAC,SAAS;YACb,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE;SACrG,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAI,KAAU,EAAE,GAAqB;IACnD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,GAA2B,EAAE,CAAS;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/tools/taint-paths.d.ts

@@ -0,0 +1,31 @@
+/**
+ * `taint_paths` tool — list cross-file taint flows with optional filters.
+ */
+import { z } from 'zod';
+import type { ToolContext, ToolResult } from './types.js';
+export declare const taintPathsInputShape: {
+    readonly project_root: z.ZodString;
+    readonly source_file: z.ZodOptional<z.ZodString>;
+    readonly sink_file: z.ZodOptional<z.ZodString>;
+    readonly sink_type: z.ZodOptional<z.ZodString>;
+    readonly max_paths: z.ZodOptional<z.ZodNumber>;
+};
+export declare const taintPathsConfig: {
+    readonly title: "List cross-file taint paths";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly project_root: z.ZodString;
+        readonly source_file: z.ZodOptional<z.ZodString>;
+        readonly sink_file: z.ZodOptional<z.ZodString>;
+        readonly sink_type: z.ZodOptional<z.ZodString>;
+        readonly max_paths: z.ZodOptional<z.ZodNumber>;
+    };
+};
+export declare function makeTaintPathsHandler(ctx: ToolContext): (args: {
+    project_root: string;
+    source_file?: string;
+    sink_file?: string;
+    sink_type?: string;
+    max_paths?: number;
+}) => Promise<ToolResult>;
+//# sourceMappingURL=taint-paths.d.ts.map

package/dist/tools/taint-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-paths.d.ts","sourceRoot":"","sources":["../../src/tools/taint-paths.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAI1D,eAAO,MAAM,oBAAoB;;;;;;CAQvB,CAAC;AAEX,eAAO,MAAM,gBAAgB;;;;;;;;;;CAOnB,CAAC;AAEX,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,IACtC,MAAM;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,KAAG,OAAO,CAAC,UAAU,CAAC,CA6BxB"}

package/dist/tools/taint-paths.js

@@ -0,0 +1,55 @@
+/**
+ * `taint_paths` tool — list cross-file taint flows with optional filters.
+ */
+import { z } from 'zod';
+import { resolve } from 'path';
+import { textResult } from './types.js';
+import { truncateArray, truncateString, MAX_TAINT_PATHS } from '../util/serialize.js';
+export const taintPathsInputShape = {
+    project_root: z.string().describe('Absolute path to the project root.'),
+    source_file: z.string().optional().describe('Only paths whose source is in this file.'),
+    sink_file: z.string().optional().describe('Only paths whose sink is in this file.'),
+    sink_type: z.string().optional()
+        .describe('Only paths with this sink type (e.g. "sql_injection", "command_injection").'),
+    max_paths: z.number().int().min(1).max(500).optional()
+        .describe('Cap on returned paths. Defaults to 50.'),
+};
+export const taintPathsConfig = {
+    title: 'List cross-file taint paths',
+    description: 'List cross-file taint flows in a previously-scanned project, filtered by source file, sink file, or ' +
+        'sink type. Use to enumerate every attacker-reachable data flow between files. Requires that `scan` ' +
+        'has been called on the project root.',
+    inputSchema: taintPathsInputShape,
+};
+export function makeTaintPathsHandler(ctx) {
+    return async (args) => {
+        const root = resolve(args.project_root);
+        const { analysis, cacheHit, analysisMs } = await ctx.cache.getOrCompute(root, {});
+        const cap = args.max_paths ?? 50;
+        let paths = analysis.taint_paths;
+        if (args.source_file)
+            paths = paths.filter(p => p.source.file === args.source_file || p.source.file.endsWith(args.source_file));
+        if (args.sink_file)
+            paths = paths.filter(p => p.sink.file === args.sink_file || p.sink.file.endsWith(args.sink_file));
+        if (args.sink_type)
+            paths = paths.filter(p => p.sink.type === args.sink_type);
+        const { items, truncated, totalCount } = truncateArray(paths, Math.min(cap, MAX_TAINT_PATHS));
+        return textResult({
+            projectRoot: root,
+            cacheHit,
+            analysisMs,
+            crossFileBudgetExceeded: analysis.cross_file_budget_exceeded === true,
+            totalMatching: totalCount,
+            truncated,
+            paths: items.map(p => ({
+                id: p.id,
+                source: { ...p.source, code: truncateString(p.source.code, 512) },
+                sink: { ...p.sink, code: truncateString(p.sink.code, 512) },
+                hops: p.hops.map(h => ({ ...h, code: truncateString(h.code, 256) })),
+                sanitizers_in_path: p.sanitizers_in_path,
+                confidence: p.confidence,
+            })),
+        });
+    };
+}
+//# sourceMappingURL=taint-paths.js.map

package/dist/tools/taint-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-paths.js","sourceRoot":"","sources":["../../src/tools/taint-paths.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEtF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACvE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACvF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC7B,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;SACnD,QAAQ,CAAC,wCAAwC,CAAC;CAC7C,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,KAAK,EAAE,6BAA6B;IACpC,WAAW,EACT,sGAAsG;QACtG,qGAAqG;QACrG,sCAAsC;IACxC,WAAW,EAAE,oBAAoB;CACzB,CAAC;AAEX,MAAM,UAAU,qBAAqB,CAAC,GAAgB;IACpD,OAAO,KAAK,EAAE,IAMb,EAAuB,EAAE;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QAEjC,IAAI,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW;YAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAY,CAAC,CAAC,CAAC;QACjI,IAAI,IAAI,CAAC,SAAS;YAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC,CAAC;QACvH,IAAI,IAAI,CAAC,SAAS;YAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9E,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;QAE9F,OAAO,UAAU,CAAC;YAChB,WAAW,EAAE,IAAI;YACjB,QAAQ;YACR,UAAU;YACV,uBAAuB,EAAE,QAAQ,CAAC,0BAA0B,KAAK,IAAI;YACrE,aAAa,EAAE,UAAU;YACzB,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;gBACjE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;gBAC3D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;gBACxC,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/types.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Shared types for tool handlers.
+ */
+import type { ProjectCache } from '../cache.js';
+export interface ToolContext {
+    cache: ProjectCache;
+}
+/**
+ * MCP `CallToolResult`-compatible shape. We construct the JSON payload
+ * ourselves so tools have full control over serialization + truncation.
+ */
+export interface ToolResult {
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+    structuredContent?: Record<string, unknown>;
+    isError?: boolean;
+}
+export declare function textResult(payload: unknown, structured?: Record<string, unknown>): ToolResult;
+export declare function errorResult(message: string): ToolResult;
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,YAAY,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAK7F;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAKvD"}

package/dist/tools/types.js

@@ -0,0 +1,17 @@
+/**
+ * Shared types for tool handlers.
+ */
+export function textResult(payload, structured) {
+    const text = typeof payload === 'string' ? payload : JSON.stringify(payload, null, 2);
+    const result = { content: [{ type: 'text', text }] };
+    if (structured)
+        result.structuredContent = structured;
+    return result;
+}
+export function errorResult(message) {
+    return {
+        content: [{ type: 'text', text: `Error: ${message}` }],
+        isError: true,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkBH,MAAM,UAAU,UAAU,CAAC,OAAgB,EAAE,UAAoC;IAC/E,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACjE,IAAI,UAAU;QAAE,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/util/files.d.ts

@@ -0,0 +1,33 @@
+/**
+ * File collection + language detection utilities.
+ *
+ * A small standalone reimplementation so the MCP server does not depend on
+ * the CLI package. Mirrors the extension → language mapping from
+ * `packages/cli/src/cli.ts`.
+ */
+import type { SupportedLanguage } from 'circle-ir';
+export declare function detectLanguage(filePath: string): SupportedLanguage | null;
+export interface CollectedFile {
+    filePath: string;
+    language: SupportedLanguage;
+    code: string;
+    mtimeMs: number;
+}
+export interface CollectOptions {
+    /** Restrict to a single language, e.g. 'java'. */
+    language?: SupportedLanguage;
+    /** Absolute max number of files to collect (safety cap). */
+    maxFiles?: number;
+}
+/**
+ * Recursively collect source files under `root`. Skips hidden dirs,
+ * `node_modules`, build outputs, and language-mismatched files.
+ */
+export declare function collectFiles(root: string, opts?: CollectOptions): CollectedFile[];
+/**
+ * Cheap mtime index used for cache invalidation. Same walking logic as
+ * `collectFiles` but skips reading file contents.
+ */
+export declare function indexMtimes(root: string, opts?: CollectOptions): Map<string, number>;
+export declare function mtimesEqual(a: Map<string, number>, b: Map<string, number>): boolean;
+//# sourceMappingURL=files.d.ts.map

package/dist/util/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/util/files.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAoCnD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAGzE;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,aAAa,EAAE,CA2DrF;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CA8CxF;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAMnF"}