@datasynx/agentic-ai-cartography 2.2.0 → 2.4.0

package/dist/mcp-bin.js

@@ -2,8 +2,9 @@
 import {
   parseMcpArgs,
   startMcp
-} from "./chunk-BNDCY2RI.js";
-import "./chunk-WCR47QA2.js";
+} from "./chunk-B4QWX7CP.js";
+import "./chunk-X5JA2UDT.js";
+import "./chunk-QQOQBE2A.js";
 import "./chunk-2SZ5QHGH.js";
 
 // src/mcp-bin.ts

package/dist/mcp-bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/mcp-bin.ts"],"sourcesContent":["/**\n * `cartography-mcp` — dedicated binary that launches the MCP server.\n *\n * Minimal arg parsing (no commander) keeps stdout clean for the stdio protocol.\n * Usage:\n *   cartography-mcp                  # stdio (default)\n *   cartography-mcp --http --port N  # Streamable HTTP\n *   cartography-mcp --http --host 0.0.0.0 --allowed-hosts h:port --token SECRET\n *   cartography-mcp --db <path> --session <id|latest> --tenant <id> --no-semantic\n */\n\nimport { startMcp, parseMcpArgs } from './mcp/start.js';\n\nconst USAGE =\n  'Usage: cartography-mcp [--http] [--port N] [--host H] [--allowed-hosts h1,h2] ' +\n  '[--token SECRET] [--db PATH] [--session ID] [--tenant ID|--org ID] [--no-semantic]\\n';\n\nconst parsed = parseMcpArgs(process.argv.slice(2));\nif (parsed.help) {\n  process.stderr.write(USAGE);\n  process.exitCode = 0;\n} else {\n  const { help: _help, ...opts } = parsed;\n  startMcp(opts).catch((err) => {\n    process.stderr.write(`cartography-mcp failed: ${err instanceof Error ? err.message : String(err)}\\n`);\n    process.exitCode = 1;\n  });\n}\n"],"mappings":";;;;;;;;;AAaA,IAAM,QACJ;AAGF,IAAM,SAAS,aAAa,QAAQ,KAAK,MAAM,CAAC,CAAC;AACjD,IAAI,OAAO,MAAM;AACf,UAAQ,OAAO,MAAM,KAAK;AAC1B,UAAQ,WAAW;AACrB,OAAO;AACL,QAAM,EAAE,MAAM,OAAO,GAAG,KAAK,IAAI;AACjC,WAAS,IAAI,EAAE,MAAM,CAAC,QAAQ;AAC5B,YAAQ,OAAO,MAAM,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACpG,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../src/mcp-bin.ts"],"sourcesContent":["/**\n * `cartography-mcp` — dedicated binary that launches the MCP server.\n *\n * Minimal arg parsing (no commander) keeps stdout clean for the stdio protocol.\n * Usage:\n *   cartography-mcp                  # stdio (default)\n *   cartography-mcp --http --port N  # Streamable HTTP\n *   cartography-mcp --http --host 0.0.0.0 --allowed-hosts h:port --token SECRET\n *   cartography-mcp --db <path> --session <id|latest> --tenant <id> --no-semantic\n */\n\nimport { startMcp, parseMcpArgs } from './mcp/start.js';\n\nconst USAGE =\n  'Usage: cartography-mcp [--http] [--port N] [--host H] [--allowed-hosts h1,h2] ' +\n  '[--token SECRET] [--db PATH] [--session ID] [--tenant ID|--org ID] [--no-semantic]\\n';\n\nconst parsed = parseMcpArgs(process.argv.slice(2));\nif (parsed.help) {\n  process.stderr.write(USAGE);\n  process.exitCode = 0;\n} else {\n  const { help: _help, ...opts } = parsed;\n  startMcp(opts).catch((err) => {\n    process.stderr.write(`cartography-mcp failed: ${err instanceof Error ? err.message : String(err)}\\n`);\n    process.exitCode = 1;\n  });\n}\n"],"mappings":";;;;;;;;;;AAaA,IAAM,QACJ;AAGF,IAAM,SAAS,aAAa,QAAQ,KAAK,MAAM,CAAC,CAAC;AACjD,IAAI,OAAO,MAAM;AACf,UAAQ,OAAO,MAAM,KAAK;AAC1B,UAAQ,WAAW;AACrB,OAAO;AACL,QAAM,EAAE,MAAM,OAAO,GAAG,KAAK,IAAI;AACjC,WAAS,IAAI,EAAE,MAAM,CAAC,QAAQ;AAC5B,YAAQ,OAAO,MAAM,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACpG,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":[]}

package/dist/{types-TJWXAQ2L.js → types-5L3AGZLG.js}

@@ -30,7 +30,7 @@ import {
   SharingLevelSchema,
   centralDbFromEnv,
   defaultConfig
-} from "./chunk-WCR47QA2.js";
+} from "./chunk-QQOQBE2A.js";
 export {
   ANOMALY_KINDS,
   ANOMALY_SEVERITIES,
@@ -63,4 +63,4 @@ export {
   centralDbFromEnv,
   defaultConfig
 };
-//# sourceMappingURL=types-TJWXAQ2L.js.map
+//# sourceMappingURL=types-5L3AGZLG.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@datasynx/agentic-ai-cartography",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "MCP-first infrastructure & agentic-AI cartography — install once, every AI agent knows your system landscape. Read-only discovery exposed over the Model Context Protocol.",
   "type": "module",
   "sideEffects": false,
@@ -10,7 +10,8 @@
   "types": "./dist/index.d.ts",
   "bin": {
     "datasynx-cartography": "./dist/cli.js",
-    "cartography-mcp": "./dist/mcp-bin.js"
+    "cartography-mcp": "./dist/mcp-bin.js",
+    "cartography-api": "./dist/api-bin.js"
   },
   "exports": {
     ".": {
@@ -44,7 +45,8 @@
     "test:coverage": "vitest run --coverage",
     "docs:llms": "node scripts/build-llms.mjs",
     "docs:tables": "tsx scripts/gen-docs.ts",
-    "docs:build": "npm run docs:tables && npm run docs:llms",
+    "docs:api": "tsx scripts/gen-api-schemas.ts",
+    "docs:build": "npm run docs:tables && npm run docs:llms && npm run docs:api",
     "lint": "tsc --noEmit",
     "typecheck": "tsc --noEmit",
     "release": "semantic-release",
@@ -103,20 +105,21 @@
     "@anthropic-ai/claude-agent-sdk": ">=0.2.70 <0.4.0",
     "@anthropic-ai/sdk": "^0.104.0",
     "@huggingface/transformers": "^4.2.0",
-    "openai": "^4.104.0",
+    "openai": "^6.44.0",
     "sqlite-vec": "^0.1.9"
   },
   "devDependencies": {
     "@anthropic-ai/mcpb": "^2.1.2",
     "@arethetypeswrong/cli": "^0.18.2",
-    "ajv": "^8.20.0",
     "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/github": "^11.0.1",
     "@semantic-release/npm": "^12.0.1",
     "@types/better-sqlite3": "^7.6.12",
     "@types/node": "^22.10.0",
     "@vitest/coverage-v8": "^4.1.0",
+    "ajv": "^8.20.0",
     "license-checker": "^25.0.1",
     "publint": "^0.3.0",
     "semantic-release": "^24.2.0",

package/scripts/gen-api-schemas.ts

@@ -0,0 +1,29 @@
+#!/usr/bin/env tsx
+/**
+ * Regenerate the committed API contract artifacts from the zod schemas / SDL:
+ *   - docs/api/openapi.json  (OpenAPI 3.1, from src/api/openapi.ts)
+ *   - docs/api/schema.graphql (GraphQL SDL, from src/api/graphql.ts)
+ *
+ * Run via `npm run docs:api`. A test (`test/openapi.test.ts` / `test/api-graphql.test.ts`)
+ * asserts the in-memory build deep-equals these files, so they can never drift from
+ * what the server serves. The embedded OpenAPI `info.version` is kept in lockstep with
+ * package.json by scripts/sync-version.mjs on release.
+ */
+
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+import { buildOpenApiDocument } from '../src/api/openapi.js';
+import { SDL } from '../src/api/graphql.js';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const version = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8')).version as string;
+
+const outDir = resolve(root, 'docs/api');
+mkdirSync(outDir, { recursive: true });
+
+const openapi = buildOpenApiDocument({ version });
+writeFileSync(resolve(outDir, 'openapi.json'), JSON.stringify(openapi, null, 2) + '\n');
+writeFileSync(resolve(outDir, 'schema.graphql'), SDL.endsWith('\n') ? SDL : SDL + '\n');
+
+console.error(`gen-api-schemas: wrote docs/api/openapi.json (v${version}) + docs/api/schema.graphql`);

package/scripts/sync-version.mjs

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+// Propagate a release version to every non-package.json site that carries it.
+// @semantic-release/npm already bumps package.json + package-lock.json; this
+// script keeps the MCP registry manifest, the .mcpb manifest, the Claude Code
+// plugin manifest, and the hard-coded MCP SERVER_VERSION in lockstep. Run by
+// the @semantic-release/exec prepare step as: node scripts/sync-version.mjs <version>
+// Falls back to package.json's version when no argument is given (manual use).
+//
+// Edits are raw-text regex replacements (not JSON re-serialization) so the
+// existing hand-authored formatting of server.json / manifest.json is preserved
+// byte-for-byte except the version literals.
+import { readFileSync, writeFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const version =
+  process.argv[2] ?? JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8')).version;
+
+if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {
+  console.error(`sync-version: refusing to write invalid version "${version}"`);
+  throw new Error(`invalid version: ${version}`);
+}
+
+/** Replace every match of `pattern` in `relPath` with `replacement`; require ≥1 hit. */
+const editFile = (relPath, pattern, replacement) => {
+  const path = resolve(root, relPath);
+  const before = readFileSync(path, 'utf8');
+  let hits = 0;
+  const after = before.replace(pattern, (m) => {
+    hits += 1;
+    return replacement(m);
+  });
+  if (hits === 0) {
+    throw new Error(`sync-version: no version marker matched in ${relPath}`);
+  }
+  if (after !== before) writeFileSync(path, after);
+  console.error(`sync-version: ${relPath} -> ${version} (${hits} site${hits === 1 ? '' : 's'})`);
+};
+
+// `"version": "..."` — leading quote excludes `"manifest_version"`. Matches both
+// the top-level and packages[].version in server.json (intentionally kept equal).
+const jsonVersion = /"version":(\s*)"[^"]*"/g;
+const toJson = (m) => m.replace(/"[^"]*"$/, `"${version}"`);
+
+editFile('server.json', jsonVersion, toJson);
+editFile('mcpb/manifest.json', jsonVersion, toJson);
+editFile('plugin/.claude-plugin/plugin.json', jsonVersion, toJson);
+editFile('src/mcp/server.ts', /const SERVER_VERSION = '[^']*';/, () => `const SERVER_VERSION = '${version}';`);
+// API server (4.2): the only `"version"` site in the generated OpenAPI doc is info.version.
+editFile('docs/api/openapi.json', jsonVersion, toJson);

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.datasynx/cartography",
   "description": "MCP-first read-only discovery of your infra & SaaS landscape as MCP resources, tools and prompts.",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "repository": {
     "url": "https://github.com/datasynx/agentic-ai-cartography",
     "source": "github"
@@ -12,7 +12,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@datasynx/agentic-ai-cartography",
-      "version": "2.2.0",
+      "version": "2.4.0",
       "runtimeHint": "npx",
       "transport": { "type": "stdio" },
       "runtimeArguments": [