@duckmind/dm-linux-x64 0.65.4 → 0.65.6

package/extensions/dm-lens/mcp/analyze-cli.js

@@ -30,8 +30,8 @@ function formatReport(result, cwd) {
   if (result.diagnostics.length > 30) {
     lines.push(`  … ${result.diagnostics.length - 30} more`);
   }
-  if (result.lsp && result.lsp.status === "skipped") {
-    lines.push("  (LSP type-check skipped — run dmlens_analyze on the warm MCP server for type errors)");
+  if (result.lsp && (result.lsp.status === "skipped" || result.lsp.status === "deferred")) {
+    lines.push("  (LSP diagnostics were skipped or deferred — run dmlens_analyze on the warm MCP server for type errors)");
   }
   return lines.join(`
 `);
@@ -99,6 +99,7 @@ ${sections.join(`
 }
 const TURN_END_SKIP_REASONS = {
   "ipc-error": "no warm dm-lens MCP server answered for this workspace, or its build is stale — start the MCP server, or run `npm run build` if you have edited dm-lens sources",
+  "no-listener": "nothing is listening on this workspace's warm endpoint — start the MCP server; if dm-lens was upgraded while a server was running, that server still owns the endpoint name of the previous build, so restart it",
   timeout: "the warm dm-lens MCP server did not finish the pass within the hook budget — the turn-end findings are kept and will be delivered on a later Stop",
   "schema-mismatch": "the warm dm-lens MCP server speaks a different turn-end schema than this hook binary — rebuild and restart the server so both halves match",
   "stale-answer": "the warm dm-lens MCP server replied about a superseded state — the findings are kept for a later Stop"

package/extensions/dm-lens/mcp/build-staleness.js

@@ -1,5 +1,5 @@
 import * as fs from "node:fs";
-export const realStat = (targetPath) => {
+const realStat = (targetPath) => {
   try {
     return fs.statSync(targetPath);
   } catch {

package/extensions/dm-lens/mcp/server.js

@@ -2,10 +2,17 @@ import * as fs from "node:fs";
 import * as net from "node:net";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
+import {
+  finalizeToolResult,
+  finalizeToolResultWithDelivery,
+  renderToolText as toolText,
+  stripResultDetails
+} from "../tools/render-compact.js";
 import { AstGrepClient } from "../clients/ast-grep-client.js";
 import { CacheManager } from "../clients/cache-manager.js";
 import {
   getDegradationSummary,
+  recordDegradationOnce,
   renderDegradationLines
 } from "../clients/degradation-ledger.js";
 import {
@@ -46,10 +53,24 @@ import {
   WARM_TURN_END_SCHEMA_VERSION
 } from "../clients/lens-engine.js";
 import { createAstGrepReplaceTool } from "../tools/ast-grep-replace.js";
-import { createAstGrepSearchTool } from "../tools/ast-grep-search.js";
+import {
+  astGrepDumpCompatibilityResult,
+  createAstGrepSearchTool
+} from "../tools/ast-grep-search.js";
 import { createLensDiagnosticsTool } from "../tools/lens-diagnostics.js";
 import { peekMcpSessionRuntime } from "../clients/mcp/session.js";
-import { createLspDiagnosticsTool } from "../tools/lsp-diagnostics.js";
+import { loadDmLensGlobalConfig } from "../clients/lens-config.js";
+import { loadDmLensProjectConfig } from "../clients/project-lens-config.js";
+import {
+  resolveLensToolEnabled,
+  toolRegistryEntryForMcp
+} from "../clients/tool-config.js";
+import {
+  endSituationalToolTelemetry,
+  observeSituationalToolCall,
+  startSituationalToolTelemetrySession
+} from "../clients/situational-tool-telemetry.js";
+import { flushExtensionLog } from "../clients/extension-log.js";
 import { createLspNavigationTool } from "../tools/lsp-navigation.js";
 import { shouldInitializeSessionRoot } from "../clients/lsp/session-roots.js";
 import {
@@ -252,8 +273,12 @@ function startIpcServer() {
 `);
         }
       });
+    }, {
+      label: "mcp-warm-server",
+      onOverflow: () => socket.end(`${JSON.stringify({ error: "warm request line exceeded the framing limit" })}
+`)
     }));
-    socket.on("error", () => socket.destroy());
+    socket.on("error", () => {});
   });
   ipc.on("error", (err) => {
     console.error(`[dm-lens-mcp] IPC listener unavailable: ${err}`);
@@ -283,14 +308,6 @@ function sendResult(id, result) {
 function sendError(id, code, message) {
   send({ jsonrpc: "2.0", id, error: { code, message } });
 }
-function toolText(summary, structured, compact = false) {
-  const text = structured === undefined ? summary : `${summary}
-
-\`\`\`json
-${JSON.stringify(structured, compact ? undefined : null, compact ? undefined : 2)}
-\`\`\``;
-  return { content: [{ type: "text", text }] };
-}
 const GRAPH_STALENESS_THRESHOLD_MS = 10 * 60000;
 function formatRelativeAge(ms) {
   if (ms < 60000)
@@ -313,12 +330,12 @@ function graphStalenessNote(builtAtIso, label) {
   return `${label} last updated ${formatRelativeAge(ageMs)}; run dmlens_analyze ` + "on recently-changed files, dmlens_session_start, or dmlens_rebuild to refresh it.";
 }
 const cacheManager = new CacheManager;
-const lensDiagnosticsTool = createLensDiagnosticsTool(cacheManager, () => DEFAULT_CWD, undefined, undefined, undefined, undefined, () => peekMcpSessionRuntime());
+const isLensGuardEnabled = () => Boolean(createMcpHost(undefined, DEFAULT_CWD).getFlag("lens-guard"));
+const lensDiagnosticsTool = createLensDiagnosticsTool(cacheManager, () => DEFAULT_CWD, undefined, undefined, undefined, undefined, () => peekMcpSessionRuntime(), () => isLensGuardEnabled());
 const astGrepClient = new AstGrepClient;
 const astGrepSearchTool = createAstGrepSearchTool(astGrepClient);
 const astGrepReplaceTool = createAstGrepReplaceTool(astGrepClient);
 const lspNavigationTool = createLspNavigationTool((name, cwd) => createMcpHost(undefined, cwd ?? DEFAULT_CWD).getFlag(name));
-const lspDiagnosticsTool = createLspDiagnosticsTool();
 function schemaWithCwd(parameters) {
   const p = parameters;
   return {
@@ -336,7 +353,7 @@ function schemaWithCwd(parameters) {
 const ALL_TOOLS = [
   {
     name: "dmlens_analyze",
-    description: "Run dm-lens's per-edit dispatch pipeline (LSP + linters + structural " + "rules) on a single file and return its diagnostics plus the latency " + "record for that dispatch (same schema as latency.log). The core review " + "probe: shows a change's real behavioral + perf impact on a real file.",
+    description: "Run dm-lens's per-edit dispatch pipeline on one file. Example: analyze `src/app.ts` after an edit.",
     inputSchema: {
       type: "object",
       properties: {
@@ -363,12 +380,12 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_diagnostics",
-    description: "Query dm-lens's diagnostic state across ALL runners (not just LSP). " + "mode=delta (current turn, instant), mode=all (every dispatched file this " + "session), mode=full (expensive project-wide active scan).",
+    description: lensDiagnosticsTool.description,
     inputSchema: schemaWithCwd(lensDiagnosticsTool.parameters)
   },
   {
     name: "dmlens_latency",
-    description: "Return recent dispatch latency reports (latency.log schema: per-file " + "total duration + per-runner timings). The review-loop measurement surface.",
+    description: "Return recent dispatch latency reports. Example: limit results to 5.",
     inputSchema: {
       type: "object",
       properties: {
@@ -385,12 +402,12 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_rebuild",
-    description: "Rebuild dm-lens so subsequent `dmlens_analyze mode=fresh` runs reflect " + "the latest commit. Runs `npm run build` (in-place dev layout) or " + "`npm run build:dist` (precompiled dist layout), matching how this server " + "was launched. The missing link that makes the review loop honest: " + "commit → dmlens_rebuild → dmlens_analyze mode=fresh.",
+    description: "Rebuild dm-lens so later fresh analyses use the latest commit. Example: rebuild after changing a tool.",
     inputSchema: { type: "object", properties: {} }
   },
   {
     name: "dmlens_project_scan",
-    description: "Cheap project-wide scan (tree-sitter + fact rules) across source files, " + "returning structural/quality diagnostics. Complements dmlens_diagnostics " + "mode=full (which adds active LSP).",
+    description: "Scan project files for structural and quality diagnostics. Example: cap the scan with `maxFiles: 20`.",
     inputSchema: {
       type: "object",
       properties: {
@@ -405,7 +422,7 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_symbol_search",
-    description: "Ranked identifier search over the persisted word index (BM25 + priors " + "that demote tests/vendor and doc files). Answers 'which files are most " + "relevant to <query>' by identifier — first step of the discovery funnel: " + "symbol_search finds candidate files, dmlens_module_report explains one, " + "dmlens_read_symbol reads a body. Complements grep (raw substrings) and " + "LSP (exact symbols). Each hit's `startLine`/`endLine` mark its best-matching " + "line (offset=startLine, limit=endLine-startLine+1 for a one-line peek) — " + "use dmlens_module_report on `file` for the real outline. Returns " + "`available: false` with a retry hint if the index isn't built yet for this " + "workspace (dmlens_session_start builds it, or it self-builds in the background " + "on first query).",
+    description: "Find relevant files by ranked identifier search. On a cold cache, project_report and symbol_search return available: false with a retry hint and start a non-blocking background build; module_report degrades to outline-only with cache freshness explicit. Example: search `authenticate user` before dmlens_module_report.",
     inputSchema: {
       type: "object",
       properties: {
@@ -433,7 +450,7 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_module_report",
-    description: "Structured, navigable overview of a source module — a token-efficient " + "substitute for reading the whole file. Returns each symbol's " + "name/kind/signature/line-range (plus a first-line `doc` summary when a " + "doc comment is attached), plus who-uses-this, risk flags, and ranked " + "recommendedReads. To read a symbol's body: call dmlens_read_symbol (or " + "read) with offset=startLine, limit=endLine-startLine+1 on THIS report's " + "`file` — those aren't repeated per symbol. Prefer this before a full " + "read; then use dmlens_read_symbol for the exact body. Single mode: " + "tree-sitter outline + review-graph who-uses-this + inline executable " + "extraction; degrades to outline-only when no cached graph is available " + "(this path never calls LSP). `semantic.source` reports whether graph " + "data was used. Pass `blastRadius: true` for the cross-file blast radius " + "(transitive dependents as ranked file reads, read-only over the cached " + "graph). Pass `callGraph: true` for bounded derived callers/callees; a " + "cold or stale call-graph cache is reported explicitly, never as zero calls. " + '`view: "compact"` returns a line-oriented text rendering ' + "(cheapest option) instead of JSON. An outline shows shape, not bodies.",
+    description: "Return a navigable source-module outline with references and read handles. An outline shows shape, not bodies, and does not satisfy read-before-edit; `read_symbol` and `read_enclosing` return body text and record read coverage. On a cold cache, project_report and symbol_search return available: false with a retry hint and start a non-blocking background build; module_report degrades to outline-only with cache freshness explicit. Example: use dmlens_module_report on `src/app.ts` before dmlens_read_symbol.",
     inputSchema: {
       type: "object",
       properties: {
@@ -477,7 +494,7 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_project_report",
-    description: "Project-level orientation from the review graph — 'orient me in this " + "project' before drilling into any one file. First step of a wider " + "discovery funnel: dmlens_project_report orients, dmlens_module_report " + "explains a file, dmlens_read_symbol reads a body. Six capped, ranked " + "sections: a trust header (graph freshness, file coverage, " + "edge-resolution-quality mix), hubs (top fan-in files — the repo's " + "contract surface), entry points (near-zero fan-in / high fan-out files " + "— activation/CLI/mains), a directory-level subsystem map (import " + "cycles + layering violations, e.g. a forbidden clients/ -> tools/ " + "edge), risk hotspots (fan-in × max per-symbol cyclomatic complexity), " + "and suspected dead weight (zero-importer files, shipped with a " + "low-confidence disclaimer). Every file line carries a `suggestedNext` " + "module_report call. No per-symbol detail and no prose summary — " + "structural facts only. Read-only over the cached graph: returns " + "`available: false` with a retry hint on a cold cache and kicks off a " + 'background build (never blocks this call). `view: "compact"` returns ' + "a line-oriented text rendering instead of JSON. Pass `focus` to " + "re-rank every section toward a task hint.",
+    description: "Orient in a project from its review graph. On a cold cache, project_report and symbol_search return available: false with a retry hint and start a non-blocking background build; module_report degrades to outline-only with cache freshness explicit. Example: use dmlens_project_report before choosing a file.",
     inputSchema: {
       type: "object",
       properties: {
@@ -500,7 +517,7 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_read_symbol",
-    description: "Return the verbatim source of a single named symbol " + "(function/class/method/interface/type) in a file — a targeted, cheap " + "alternative to reading the whole file. Pair with dmlens_module_report: it " + "finds the symbol, this shows its body. Includes an attached doc comment " + "when one exists. Accepts a dotted `Class.method` name to resolve a " + "member, falling back to a plain lookup when the qualifier doesn't " + "resolve. A miss embeds the ~3 nearest symbol names in the file. When " + "multiple same-file symbols share a name, the first is returned with an " + "ambiguity note; pass `kind` to pick a specific one.",
+    description: "Return one symbol's verbatim source. An outline shows shape, not bodies, and does not satisfy read-before-edit; `read_symbol` and `read_enclosing` return body text and record read coverage. Example: use dmlens_read_symbol after dmlens_module_report identifies `parseConfig`.",
     inputSchema: {
       type: "object",
       properties: {
@@ -520,7 +537,7 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_read_enclosing",
-    description: "Return the verbatim source for the smallest useful symbol/callback " + "enclosing a line in a file. Use after dmlens_ast_grep_search, " + "dmlens_diagnostics, or dmlens_lsp_navigation locations when you need " + "exact body text without reading the whole file. Uses tree-sitter only — " + "no LSP or graph build. MCP has no read-guard, so unlike the pi tool this " + "does not record edit-coverage.",
+    description: "Return the smallest symbol or callback enclosing a line. An outline shows shape, not bodies, and does not satisfy read-before-edit; `read_symbol` and `read_enclosing` return body text and record read coverage. Example: use dmlens_read_enclosing after a diagnostic points to line 42.",
     inputSchema: {
       type: "object",
       properties: {
@@ -557,12 +574,12 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_health",
-    description: "dm-lens runtime health for THIS server: alive LSP servers, last dispatch " + "summary, session diagnostic counts, how many resolved config leaves each " + "source tier decided, and the total CPU/RAM footprint attributable to " + "dm-lens across every process it owns (host + LSP children) machine-wide, " + "from the shared instance registry.",
+    description: "Return dm-lens runtime health for this server. Example: call it after a slow analysis.",
     inputSchema: { type: "object", properties: {} }
   },
   {
     name: "dmlens_effective_config",
-    description: "The resolved dm-lens configuration with the provenance of every " + "decision: which file and source tier each setting came from, the trust " + "decision that applied, and which config files contributed. Pass `file` " + "to also get, for that path, its canonical language, EVERY LSP server " + "with the reason it was selected or denied — including which tier's " + "config denied it, which a nearer file cannot lift — and the lint/format " + "runners that would dispatch. This is the answer to 'why is X running / " + "why is X not running' without reading logs. Redacted by construction: " + "it reports sources, never values — no environment values, no command " + "arguments beyond the binary itself, and config paths are home-relative.",
+    description: "Explain resolved configuration and provenance. Response is redacted by construction: it contains no environment values, no command arguments beyond the binary, and home-relative paths; a tier-denied LSP decision cannot be lifted by a nearer config. Example: pass `file` to explain one selection.",
     inputSchema: {
       type: "object",
       properties: {
@@ -576,7 +593,7 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_session_start",
-    description: "Run dm-lens's real session_start lifecycle: warm the dominant-language " + "LSP (so subsequent dmlens_analyze is LSP-complete), establish the " + "error-debt baseline (tests/build pass-state) + complexity baselines, and " + "kick off knip/jscpd/type-coverage/dep/secrets project scans. Returns " + "project guidance + baseline; scan results land in caches (query via " + "dmlens_diagnostics afterwards). Run once per workspace before reviewing.",
+    description: "Initialize dm-lens for a workspace. Example: run once before reviewing a project.",
     inputSchema: {
       type: "object",
       properties: { cwd: { type: "string" } }
@@ -584,7 +601,7 @@ const ALL_TOOLS = [
   },
   {
     name: "dmlens_turn_end",
-    description: "Run dm-lens's real turn_end lifecycle over the files changed this turn: " + "knip dead-code + jscpd duplication (incremental), circular-dep checks, " + "tests on affected targets, cascade to dependents, and the actionable/" + "code-quality warning aggregation. Returns the turn-end advisory + test " + "findings. `files` is OPTIONAL — dmlens_analyze (and the PostToolUse hook) " + "auto-register edited files into turn-state, so you can call this with no " + "args after a series of edits; pass `files` to add any not analyzed.",
+    description: "Summarize checks for files changed this turn. Example: pass `files` for an unanalysed file.",
     inputSchema: {
       type: "object",
       properties: {
@@ -597,28 +614,39 @@ const ALL_TOOLS = [
       }
     }
   },
+  {
+    name: "dmlens_session_end",
+    description: "End the MCP connection's telemetry session and write its bounded situational-tool telemetry line. This is terminal for the connection.",
+    inputSchema: {
+      type: "object",
+      properties: {}
+    }
+  },
   {
     name: "dmlens_ast_grep_search",
-    description: "Structural (AST) code search via ast-grep — match by code structure, not " + "text. Use complete patterns with arguments (e.g. 'console.log($MSG)', " + "'function $NAME($$$ARGS) { $$$BODY }'), or use nodeKind to find every " + "node of a known grammar kind. Metavariables do not match text inside " + "quoted string literals; use an exact string or grep for wildcard text. " + "This is the same schema and synthesis path as the pi tool.",
+    description: "Search code by AST structure rather than text. Example: find calls with `console.log($MSG)`.",
     inputSchema: schemaWithCwd(astGrepSearchTool.parameters)
   },
   {
     name: "dmlens_ast_grep_replace",
-    description: "Structural (AST) find-and-rewrite via ast-grep, e.g. pattern='var $X' " + "rewrite='let $X'. DRY-RUN by default (apply=false shows the diff); set " + "apply=true to write the changes to disk.",
+    description: "Find and rewrite code by AST structure; preview by default. Example: set `apply: false` to inspect a diff.",
     inputSchema: schemaWithCwd(astGrepReplaceTool.parameters)
   },
   {
     name: "dmlens_lsp_navigation",
-    description: "LSP code navigation: definition, typeDefinition, declaration, " + "references, hover, documentSymbol, " + "workspaceSymbol, implementation, call hierarchy (prepareCallHierarchy/" + "incomingCalls/outgoingCalls), rename, codeAction, executeCommand " + "(allowlisted, dry-run by default) — exact + type-aware, " + "~50ms. Use before changing a signature to see every caller.",
+    description: 'Navigate source with language-server operations. Example: use `{operation: "references", path: "src/app.ts", line: 12}`.',
     inputSchema: schemaWithCwd(lspNavigationTool.parameters)
-  },
-  {
-    name: "dmlens_lsp_diagnostics",
-    description: "Pure LSP diagnostics for a file, directory, or batch of files (type " + "errors only — narrower than dmlens_diagnostics, which spans all runners).",
-    inputSchema: schemaWithCwd(lspDiagnosticsTool.parameters)
   }
 ];
 const TOOLS = canRebuildDmLens(REPO_ROOT) ? ALL_TOOLS : ALL_TOOLS.filter((tool) => tool.name !== "dmlens_rebuild");
+function enabledToolsForCwd(cwd) {
+  const global = loadDmLensGlobalConfig();
+  const project = loadDmLensProjectConfig(cwd);
+  return TOOLS.filter((tool) => {
+    const entry = toolRegistryEntryForMcp(tool.name);
+    return entry !== undefined && resolveLensToolEnabled(entry.name, global, project.raw);
+  });
+}
 function formatAnalyze(result, cwd, mode, servedBy) {
   const lspNote = result.lsp ? ` · lsp ${result.lsp.diagnosticCount} (${result.lsp.status}, ${result.lsp.durationMs}ms)` : "";
   const summary = `${path.relative(cwd, result.filePath) || result.filePath} [${mode}] — ` + `${result.counts.blockers} blocking, ${result.counts.warnings} warning(s), ` + `${result.counts.advisories} advisory(ies), ` + `${result.counts.diagnostics} total` + (result.latency ? ` · ${result.latency.totalDurationMs}ms` : "") + lspNote + (result.counts.fixed > 0 ? ` · ${result.counts.fixed} auto-fixed` : "") + (servedBy ? `
@@ -654,6 +682,27 @@ function effectiveDocumentLine(document) {
   return `  ${document.tier}: ${document.file}${legacy}`;
 }
 async function callTool(name, args) {
+  if (name === "dmlens_lsp_diagnostics") {
+    recordDegradationOnce({
+      kind: "lsp-diagnostics-compatibility",
+      subject: "lsp_diagnostics",
+      reason: "retired tool name redirected to dmlens_diagnostics source=lsp"
+    });
+    name = "dmlens_diagnostics";
+    args = {
+      ...args,
+      source: "lsp",
+      scope: "paths"
+    };
+  }
+  if (name === "dmlens_ast_grep_dump") {
+    recordDegradationOnce({
+      kind: "ast-grep-dump-compatibility",
+      subject: "ast_grep_dump",
+      reason: "retired tool name redirected to ast_grep_search dump mode"
+    });
+    return astGrepDumpCompatibilityResult(args, "mcp");
+  }
   if (name === "dmlens_analyze") {
     const file = args.file;
     if (typeof file !== "string" || file.length === 0) {
@@ -731,7 +780,7 @@ ${outcome.output}`, {
     const truncationNotice = scanTruncationNotice(snapshot);
     if (truncationNotice)
       summaryLines.push(truncationNotice);
-    const skipNotice = generatedSkipNotice(snapshot);
+    const skipNotice = generatedSkipNotice(snapshot, "mcp");
     if (skipNotice)
       summaryLines.push(skipNotice);
     return toolText(summaryLines.join(`
@@ -910,9 +959,12 @@ ${graphStaleness}` : "");
     const header = `${result.kind} ${result.name}${ambiguityNote}${sigSuffix}  ${path.relative(cwd, result.path)}:${result.startLine}-${result.endLine}`;
     return {
       content: [
-        { type: "text", text: `${header}
+        {
+          type: "text",
+          text: `${header}
 
-${result.source ?? ""}` }
+${result.source ?? ""}`
+        }
       ]
     };
   }
@@ -952,9 +1004,12 @@ ${JSON.stringify(result.outline)}` : "";
     const header = `${result.kind} ${result.name}  ${path.relative(cwd, result.path)}:${range}`;
     return {
       content: [
-        { type: "text", text: `${header}
+        {
+          type: "text",
+          text: `${header}
 
-${result.source ?? ""}` }
+${result.source ?? ""}`
+        }
       ]
     };
   }
@@ -1034,8 +1089,8 @@ ${result.source ?? ""}` }
   if (name === "dmlens_diagnostics") {
     const cwd = typeof args.cwd === "string" ? args.cwd : DEFAULT_CWD;
     await ensureReady(cwd);
-    const out = await lensDiagnosticsTool.execute("mcp", args, new AbortController().signal, undefined, { cwd });
-    return { content: out.content };
+    const out = await lensDiagnosticsTool.execute("mcp", args, new AbortController().signal, undefined, { cwd, host: "mcp" });
+    return out;
   }
   if (name === "dmlens_latency") {
     const limit = typeof args.limit === "number" && Number.isFinite(args.limit) ? Math.max(1, Math.floor(args.limit)) : 5;
@@ -1060,6 +1115,10 @@ ${outcome.guidance}` : ""
     return toolText(lines.filter(Boolean).join(`
 `), outcome);
   }
+  if (name === "dmlens_session_end") {
+    endSituationalToolTelemetry();
+    return toolText("Session ended.");
+  }
   if (name === "dmlens_turn_end") {
     const cwd = typeof args.cwd === "string" ? args.cwd : DEFAULT_CWD;
     await ensureReady(cwd);
@@ -1078,15 +1137,15 @@ ${outcome.tests}` : ""
   if (name === "dmlens_ast_grep_search" || name === "dmlens_ast_grep_replace") {
     const cwd = typeof args.cwd === "string" ? args.cwd : DEFAULT_CWD;
     const tool = name === "dmlens_ast_grep_search" ? astGrepSearchTool : astGrepReplaceTool;
-    const out = await tool.execute("mcp", args, new AbortController().signal, undefined, { cwd });
-    return { content: out.content };
+    const out = await tool.execute("mcp", args, new AbortController().signal, undefined, { cwd, resultMaxItems: Number.POSITIVE_INFINITY });
+    return out;
   }
-  if (name === "dmlens_lsp_navigation" || name === "dmlens_lsp_diagnostics") {
+  if (name === "dmlens_lsp_navigation") {
     const cwd = typeof args.cwd === "string" ? args.cwd : DEFAULT_CWD;
     await ensureReady(cwd);
-    const tool = name === "dmlens_lsp_navigation" ? lspNavigationTool : lspDiagnosticsTool;
+    const tool = lspNavigationTool;
     const out = await tool.execute("mcp", args, new AbortController().signal, undefined, { cwd });
-    return { content: out.content };
+    return out;
   }
   return { ...toolText(`Unknown tool: ${name}`), isError: true };
 }
@@ -1102,7 +1161,6 @@ const WARN_ONLY_STALE_TOOLS = new Set([
   "dmlens_ast_grep_search",
   "dmlens_ast_grep_replace",
   "dmlens_lsp_navigation",
-  "dmlens_lsp_diagnostics",
   "dmlens_read_symbol",
   "dmlens_read_enclosing",
   "dmlens_effective_config"
@@ -1130,6 +1188,7 @@ async function handleRequest(request) {
   const isNotification = id === undefined;
   switch (method) {
     case "initialize": {
+      startSituationalToolTelemetrySession("mcp");
       const requested = params?.protocolVersion;
       sendResult(id ?? null, {
         protocolVersion: typeof requested === "string" ? requested : FALLBACK_PROTOCOL_VERSION,
@@ -1147,7 +1206,7 @@ async function handleRequest(request) {
         sendResult(id ?? null, {});
       return;
     case "tools/list":
-      sendResult(id ?? null, { tools: TOOLS });
+      sendResult(id ?? null, { tools: enabledToolsForCwd(DEFAULT_CWD) });
       return;
     case "tools/call": {
       const name = params?.name;
@@ -1156,18 +1215,32 @@ async function handleRequest(request) {
         sendError(id ?? null, -32602, "tools/call requires a string 'name'");
         return;
       }
+      const enabledName = name === "dmlens_lsp_diagnostics" ? "dmlens_diagnostics" : name;
+      if (name !== "dmlens_ast_grep_dump" && name !== "dmlens_rebuild" && !enabledToolsForCwd(typeof args.cwd === "string" ? args.cwd : DEFAULT_CWD).some((tool) => tool.name === enabledName)) {
+        sendResult(id ?? null, stripResultDetails(finalizeToolResult({
+          ...toolText(`Unknown or disabled tool: ${name}`),
+          isError: true
+        })));
+        return;
+      }
+      const entry = toolRegistryEntryForMcp(name);
+      if (entry && "situational" in entry && entry.situational) {
+        startSituationalToolTelemetrySession("mcp");
+        observeSituationalToolCall(entry.name);
+      }
       maybeAutoSessionStart();
       try {
         let result = await callTool(name, args);
         if (WARN_ONLY_STALE_TOOLS.has(name) && !result.isError && isWarmBuildStale()) {
           result = withStaleWarning(result);
         }
-        sendResult(id ?? null, result);
+        const delivery = finalizeToolResultWithDelivery(result);
+        sendResult(id ?? null, stripResultDetails(delivery.result));
       } catch (err) {
-        sendResult(id ?? null, {
+        sendResult(id ?? null, stripResultDetails(finalizeToolResult({
           ...toolText(`dm-lens tool '${name}' failed: ${err.message}`),
           isError: true
-        });
+        })));
       }
       return;
     }
@@ -1177,29 +1250,27 @@ async function handleRequest(request) {
       return;
   }
 }
-let buffer = "";
 process.stdin.setEncoding("utf8");
-process.stdin.on("data", (chunk) => {
-  buffer += chunk;
-  let newlineIndex = buffer.indexOf(`
-`);
-  while (newlineIndex !== -1) {
-    const line = buffer.slice(0, newlineIndex).trim();
-    buffer = buffer.slice(newlineIndex + 1);
-    if (line.length > 0) {
-      let request;
-      try {
-        request = JSON.parse(line);
-      } catch {
-        sendError(null, -32700, "Parse error");
-      }
-      if (request)
-        handleRequest(request);
-    }
-    newlineIndex = buffer.indexOf(`
-`);
+process.stdin.on("data", createWarmIpcLineReader((raw) => {
+  const line = raw.trim();
+  if (line.length === 0)
+    return;
+  let request;
+  try {
+    request = JSON.parse(line);
+  } catch {
+    sendError(null, -32700, "Parse error");
   }
+  if (request)
+    handleRequest(request);
+}, {
+  label: "mcp-stdio",
+  continuous: true,
+  onOverflow: () => sendError(null, -32700, "Parse error: request line exceeded the framing limit")
+}));
+process.stdin.on("end", () => {
+  endSituationalToolTelemetry();
+  flushExtensionLog().finally(() => process.exit(0));
 });
-process.stdin.on("end", () => process.exit(0));
 startIpcServer();
 console.error(`[dm-lens-mcp] ready (cwd=${DEFAULT_CWD})`);

package/extensions/dm-lens/package.json

@@ -1,13 +1,13 @@
 {
   "name": "dm-lens",
-  "version": "4.1.3",
+  "version": "4.3.0",
   "description": "Real-time code feedback for DM \u2014 LSP, linters, formatters, type-checking, and structural analysis.",
   "type": "module",
   "main": "./index.js",
   "bin": {
-    "dm-lens": "mcp/cli.js",
-    "dm-lens-mcp": "mcp/server.js",
-    "dm-lens-analyze": "mcp/analyze-cli.js"
+    "dm-lens": "dist/mcp/cli.js",
+    "dm-lens-mcp": "dist/mcp/server.js",
+    "dm-lens-analyze": "dist/mcp/analyze-cli.js"
   },
   "license": "MIT",
   "author": "Apostolos Mantzaris",

package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-assert-tuple-test.yml

@@ -4,9 +4,22 @@ valid:
   - 'assert x == 1'
   - 'assert x, "message"'
   - 'assert (x == 1), "message"'  # explicit grouping, not a tuple
+  - 'assert actual == (1, 2)'
+  - 'assert (actual == (1, 2))'
+  - 'assert (f((1, 2)))'
+  - 'assert (left, right) == expected'
+  - 'assert value in {(1, 2), (3, 4)}'
+  - 'assert {item for item in values if item != (1, 2)}'
+  - 'assert all(item in {(1, 2)} for item in values)'
+  - 'assert True, ("tuple", "message")'
+  - 'assert actual == (1, 2), ("tuple", "message")'
 invalid:
+  - 'assert ()'
   - 'assert (1, 2)'
   - 'assert (x, y)'
+  - 'assert ((x, y))'
+  - 'assert (((x, y)))'
+  - 'assert (x, y), ("tuple", "message")'
   - 'assert (1, 2, 3), "message"'
   - |
     def f():

package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-boolean-in-except-test.yml

@@ -15,6 +15,21 @@ valid:
         x()
     except:
         pass
+  - |
+    # #3211: body-only `or` must not be flagged — the handler condition
+    # itself is a plain exception type, only the return value uses `or`.
+    try:
+        x()
+    except Exception:
+        return 2 or 3
+  - |
+    # #3211: same shape one level deeper (an `if` inside the handler
+    # body) — still not a boolean-in-except-clause target.
+    try:
+        x()
+    except Exception:
+        if cond:
+            x = a or b
 invalid:
   - |
     try:
@@ -26,3 +41,14 @@ invalid:
         x()
     except ValueError and KeyError:
         pass
+  - |
+    # #3211: a nested try whose OWN except clause has the boolean
+    # condition must still be flagged, even though it sits inside an
+    # outer handler whose body also contains an `or`.
+    try:
+        outer()
+    except Exception:
+        try:
+            inner()
+        except (A or B):
+            return 3 or 4

package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-http-headers-bracket-access-test.yml

@@ -2,6 +2,16 @@ id: no-http-headers-bracket-access
 valid:
   - "auth = request.headers.get('Authorization')"
   - "auth = request.headers.get('Authorization', '')"
+  - |
+    # #3211: a plain assignment through the bracket sets the header —
+    # it cannot raise KeyError, so it is not a read-site false positive.
+    resp.headers["X"] = "v"
+  - |
+    # #3211: augmented assignment is still a write, not a read.
+    resp.headers["X"] += "b"
+  - |
+    # #3211: `del` removes the key; it never raises KeyError either.
+    del resp.headers["Y"]
 invalid:
   - 'auth = request.headers["Authorization"]'
   - 'auth = response.headers["X-Request-Id"]'

package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-numeric-parse-python-test.yml

@@ -0,0 +1,18 @@
+id: unchecked-numeric-parse-python
+valid:
+  - |
+    # #3211: already-converted-by-construction — Decimal raises
+    # decimal.InvalidOperation, not ValueError, and is excluded here.
+    x = float(Decimal("1.5"))
+  - |
+    # #3211: a numeric literal argument can never raise ValueError.
+    x = int(3.7)
+  - |
+    try:
+        g = int(s)
+    except ValueError:
+        pass
+invalid:
+  - 'int("42")'
+  - 'float("3.14")'
+  - 'int(user_input)'

package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-python-test.yml

@@ -12,12 +12,13 @@ valid:
     except OSError:
         return None
   - 'CONSTANT = 42'
+  - |
+    # #3211: int()/float() moved to unchecked-numeric-parse-python — this
+    # rule no longer fires on the numeric-parse shape.
+    x = int(s)
 invalid:
   - 'data = json.loads(raw)'
   - 'f = open(path)'
   - 'os.remove(path)'
   - 'os.stat(path)'
   - 'shutil.rmtree(path)'
-  - 'int("42")'
-  - 'float("3.14")'
-  - 'int(user_input)'