@descryy/mcp 0.5.0 → 0.7.0

package/dist/transport.js

@@ -1,34 +1,11 @@
-/**
- * stdio transport: newline-delimited JSON over stdin/stdout.
- *
- * ## The one rule that breaks everything when broken
- *
- * **stdout is the protocol channel and nothing else may write to it.** A single
- * `console.log` anywhere in the process — in the engine, in a loaded adapter, in
- * a dependency — emits a line the client tries to parse as a frame, and the
- * session dies with an error that names the parser rather than the culprit.
- *
- * This is not a comment asking people to be careful. `guardStdout()` replaces
- * `console.log` and friends with writers onto **stderr**, which the MCP host
- * shows as server logs, so a stray print stays visible and stops being fatal.
- * The transport keeps the one real handle to stdout for itself.
- *
- * ## Framing
- *
- * MCP's stdio transport is one JSON object per line, UTF-8, with no embedded
- * newlines. `JSON.stringify` never emits a raw newline, so writing is a
- * stringify plus `"\n"`. Reading needs a buffer because a chunk boundary can
- * land anywhere, including mid-multibyte-character — hence `StringDecoder`
- * rather than `chunk.toString()`, which would corrupt any non-ASCII payload
- * split across two chunks.
- */
+/** stdio transport: newline-delimited JSON over stdin/stdout. Stdout is the protocol
+ *  channel and nothing else may write to it — a stray `console.log` anywhere (engine,
+ *  adapter, dependency) corrupts a frame and kills the session with a misleading error;
+ *  `guardStdout()` redirects console.* to stderr instead. Framing: one JSON object per
+ *  line, UTF-8, no embedded newlines; reads use `StringDecoder` since a chunk boundary can split a multibyte character. */
 import { StringDecoder } from "node:string_decoder";
-/**
- * Redirect every console channel to stderr and return the real stdout writer.
- *
- * Called once, by the stdio runner, before any handler can run. The returned
- * function is the only sanctioned path to stdout in the process.
- */
+/** Redirects every console channel to stderr and returns the real stdout writer. Called
+ *  once, before any handler runs — the returned function is the only sanctioned path to stdout. */
 export function guardStdout(stdout, stderr) {
     const toStderr = (...args) => {
         stderr.write(`${args
@@ -54,12 +31,8 @@ function inspectish(value) {
         return String(value);
     }
 }
-/**
- * Split a byte stream into lines, decoding correctly across chunk boundaries.
- *
- * Returned as a function rather than a class because the buffer is the entire
- * state and there is nothing else to hang on an object.
- */
+/** Splits a byte stream into lines, decoding correctly across chunk boundaries. Returned as
+ *  a function, not a class — the buffer is the entire state, nothing else to hang on an object. */
 export function createLineReader(onLine) {
     const decoder = new StringDecoder("utf8");
     let buffer = "";
@@ -82,38 +55,21 @@ export function serveStdio(options, dispatch, serveOptions = {}) {
             write(`${JSON.stringify(frame)}\n`);
         },
     };
-    // Frames are handled strictly in arrival order. Concurrency here would let a
-    // fast `tools/list` overtake a slow `analyze`, and while JSON-RPC permits
-    // out-of-order responses, an `analyze` that has not finished writing the graph
-    // must not be overtaken by a `scope` that would then read a half-built one.
-    //
-    // **One frame is exempt, and the exemption is narrow on purpose.**
-    // `notifications/cancelled` is the one message whose entire value is that it
-    // arrives *during* the call it names. Queued behind that call it is not late,
-    // it is useless: by the time it is read, the work it was sent to stop has
-    // already finished. The invariant above is untouched by letting it through,
-    // because it defends a read from overtaking a half-finished write and a
-    // cancellation does no graph work at all — it aborts a signal and returns.
-    //
-    // The predicate is supplied and answers for cancellation alone rather than
-    // for notifications in general, so that adding a notification later does not
-    // silently inherit an unordered path nobody chose for it.
+    // Frames handled strictly in order — concurrency would let a fast `tools/list` overtake a
+    // slow `analyze` and read a half-built graph. Exempt: `notifications/cancelled` alone (useless
+    // if queued, does no graph work) — narrowly scoped so a future notification doesn't inherit this silently.
     const isOutOfBand = serveOptions.isOutOfBand ?? (() => false);
     let chain = Promise.resolve();
     return new Promise((resolve, reject) => {
         const onError = (error) => {
-            // A dispatcher that throws is a bug in this package: `dispatch` is
-            // supposed to turn every failure into an error frame. Report it on
-            // stderr and keep the session alive rather than killing a developer's
-            // editor integration over one bad request.
+            // A dispatcher that throws is a bug here — `dispatch` should turn every failure into
+            // an error frame. Report on stderr and keep the session alive rather than killing the editor integration.
             options.stderr.write(`descry-mcp: dispatch failed: ${inspectish(error)}\n`);
         };
         const feed = createLineReader((line) => {
             if (isOutOfBand(line)) {
-                // Deliberately not joined to `chain`, and deliberately not awaited by
-                // anything: an out-of-band frame must not be able to delay the ordered
-                // work either. Its rejection is still handled, so it cannot surface as
-                // an unhandled rejection and take the process down.
+                // Deliberately not joined to `chain` or awaited — an out-of-band frame must not
+                // delay ordered work; its rejection is still handled so it can't surface as unhandled and crash the process.
                 void dispatch(line, transport).catch(onError);
                 return;
             }

package/dist/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,MAAgB,EAChB,MAAgB;IAEhB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC5C,MAAM,CAAC,KAAK,CACV,GAAG,IAAI;aACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;aACvD,IAAI,CAAC,GAAG,CAAC,IAAI,CACjB,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC;IACvB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IACxB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IACxB,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;IACzB,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;IAEzB,OAAO,CAAC,IAAY,EAAQ,EAAE;QAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA8B;IAC7D,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,OAAO,CAAC,KAAa,EAAQ,EAAE;QAC7B,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AA4BD,MAAM,UAAU,UAAU,CACxB,OAAqB,EACrB,QAA+D,EAC/D,eAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAc;QAC3B,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACd,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;IAEF,6EAA6E;IAC7E,0EAA0E;IAC1E,+EAA+E;IAC/E,4EAA4E;IAC5E,EAAE;IACF,mEAAmE;IACnE,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,CAAC,KAAc,EAAQ,EAAE;YACvC,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,2CAA2C;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAE;YACrC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,sEAAsE;gBACtE,uEAAuE;gBACvE,uEAAuE;gBACvE,oDAAoD;gBACpD,KAAK,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;2HAI2H;AAE3H,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD;mGACmG;AACnG,MAAM,UAAU,WAAW,CACzB,MAAgB,EAChB,MAAgB;IAEhB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC5C,MAAM,CAAC,KAAK,CACV,GAAG,IAAI;aACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;aACvD,IAAI,CAAC,GAAG,CAAC,IAAI,CACjB,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC;IACvB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IACxB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IACxB,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;IACzB,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;IAEzB,OAAO,CAAC,IAAY,EAAQ,EAAE;QAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;mGACmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,MAA8B;IAC7D,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,OAAO,CAAC,KAAa,EAAQ,EAAE;QAC7B,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAkBD,MAAM,UAAU,UAAU,CACxB,OAAqB,EACrB,QAA+D,EAC/D,eAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAc;QAC3B,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACd,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;IAEF,0FAA0F;IAC1F,+FAA+F;IAC/F,2GAA2G;IAC3G,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,CAAC,KAAc,EAAQ,EAAE;YACvC,qFAAqF;YACrF,0GAA0G;YAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAE;YACrC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,gFAAgF;gBAChF,6GAA6G;gBAC7G,KAAK,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,9 +1,18 @@
 {
   "name": "@descryy/mcp",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "type": "module",
   "description": "Descry's MCP server: the agent-facing front door over the query layer. The stdio transport is JSON-RPC 2.0 by hand rather than seventeen packages of HTTP and OAuth. Thirty tools; most read the graph and nothing else. The @descryy dependencies are here for the three that do more: observe_runtime boots or attaches to a real application, observe_tests runs the project's own test suite, and the browser tools drive a real browser \u2014 each writing what it witnessed into the graph as R4 facts. @descryy/runtime-browser is declared below like the others. It is still imported by specifier at call time rather than statically \u2014 not because it is unpublished (it is not) but because that indirection is an injection seam real tests use to drive the settle logic against a fake module with no real browser involved; see playwright-driver.ts. A missing package, a missing Chromium binary, or an import failure each still returns a named, remediable refusal rather than a crash or an empty result.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/descryhq-wq/descry-core.git",
+    "directory": "packages/mcp"
+  },
+  "bugs": {
+    "url": "https://github.com/descryhq-wq/descry-core/issues"
+  },
+  "homepage": "https://github.com/descryhq-wq/descry-core#readme",
   "engines": {
     "node": ">=22.5"
   },
@@ -27,20 +36,28 @@
     "build": "tsc -b"
   },
   "dependencies": {
-    "@descryy/core": "0.3.0",
-    "@descryy/ir": "0.3.0",
-    "@descryy/runtime-backend-observation": "0.2.0",
-    "@descryy/runtime-browser": "0.2.0",
-    "@descryy/runtime-contracts": "0.2.0",
-    "@descryy/runtime-controller": "0.2.1",
-    "@descryy/runtime-environment-profile": "0.2.0",
-    "@descryy/runtime-evidence-correlation": "0.2.1",
-    "@descryy/runtime-evidence-store": "0.2.0",
-    "@descryy/runtime-graph-correlator": "0.2.0",
-    "@descryy/runtime-orchestrator": "0.2.1",
-    "@descryy/runtime-test-runner": "0.2.1"
-  },
-  "devDependencies": {
-    "@descryy/runtime-adapter-typescript": "0.1.0"
+    "@descryy/core": "0.5.0",
+    "@descryy/ir": "0.5.0",
+    "@descryy/runtime-backend-observation": "0.3.0",
+    "@descryy/runtime-browser": "0.4.0",
+    "@descryy/runtime-contracts": "0.3.0",
+    "@descryy/runtime-controller": "0.3.0",
+    "@descryy/runtime-environment-profile": "0.4.0",
+    "@descryy/runtime-evidence-correlation": "0.4.0",
+    "@descryy/runtime-evidence-store": "0.4.0",
+    "@descryy/runtime-graph-correlator": "0.4.0",
+    "@descryy/runtime-orchestrator": "0.4.0",
+    "@descryy/runtime-test-runner": "0.4.0"
+  },
+  "optionalDependencies": {
+    "@descryy/runtime-adapter-typescript": "0.3.0",
+    "@descryy/runtime-adapter-csharp": "0.1.0",
+    "@descryy/runtime-adapter-go": "0.1.0",
+    "@descryy/runtime-adapter-jvm": "0.1.0",
+    "@descryy/runtime-adapter-php": "0.1.0",
+    "@descryy/runtime-adapter-python": "0.4.0",
+    "@descryy/runtime-adapter-ruby": "0.0.0",
+    "@descryy/runtime-adapter-rust": "0.1.0",
+    "@descryy/runtime-adapter-swift": "0.1.0"
   }
 }