@jigyasudham/veto 2.0.1 → 2.1.0

package/dist/server/scan-core.js

@@ -0,0 +1,82 @@
+// Reusable handler logic shared across the review / agentic-worker MCP tools.
+//
+// Extracted from server.ts so it can be unit-tested: server.ts connects stdio at
+// import time, so anything defined there is untestable. These helpers depend only
+// on the agent layer and the router — no server-local state — so they live here.
+import { execSync as execSyncTop } from 'node:child_process';
+import { executeOne } from '../agents/executor.js';
+import { buildAgenticAgentPrompt, parseAgenticAgentResponses } from '../agents/llm-runner.js';
+import { recordOutcome } from '../router/index.js';
+/**
+ * Reads a git diff for the review tools. Default: working-tree vs HEAD, falling
+ * back to staged changes. With stagedOnly=true (pre-commit / commit-message
+ * semantics) it returns staged changes only. Returns '' on any failure or when
+ * there are no changes — callers decide how to report "nothing to review".
+ */
+export function readGitDiff(projectDir, stagedOnly = false) {
+    if (!projectDir)
+        return '';
+    const run = (cmd) => execSyncTop(cmd, { cwd: projectDir, timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] }).toString().trim();
+    try {
+        if (stagedOnly)
+            return run('git diff --cached --no-color');
+        const head = run('git diff HEAD --no-color');
+        return head || run('git diff --cached --no-color');
+    }
+    catch {
+        return '';
+    }
+}
+export async function runTripleScan(diff, context, llm_backed = true, agent_outputs) {
+    const tasks = [
+        { id: 'scan-review', agent: 'reviewer', task: 'Review this git diff for code quality issues', code: diff, context, llm_backed },
+        { id: 'scan-sec', agent: 'security-scanner', task: 'Scan this git diff for security vulnerabilities', code: diff, context, llm_backed },
+        { id: 'scan-secrets', agent: 'secrets', task: 'Scan this git diff for exposed secrets or credentials', code: diff, llm_backed },
+    ];
+    if (llm_backed && !agent_outputs) {
+        const results = await Promise.all(tasks.map(t => executeOne(t)));
+        const allLlm = results.every(r => r.llm_backed && !r.error);
+        if (allLlm)
+            return finalizeTripleScan(results[0], results[1], results[2]);
+        const prompts = tasks.map(t => buildAgenticAgentPrompt(t)).filter((p) => p !== null);
+        return {
+            mode: 'agentic_loop',
+            instruction: 'Reason as each agent below using their provided roles and schemas. Return a JSON object mapping task IDs to agent responses.',
+            prompts,
+        };
+    }
+    const results = (llm_backed && agent_outputs) ? parseAgenticAgentResponses(tasks, agent_outputs) : await Promise.all(tasks.map(t => executeOne(t)));
+    return finalizeTripleScan(results[0], results[1], results[2]);
+}
+export function finalizeTripleScan(reviewResult, secResult, secretsResult) {
+    const hasBlocking = (reviewResult.analysis?.critical_count ?? 0) > 0 || (secResult.analysis?.critical_count ?? 0) > 0 || (secretsResult.analysis?.critical_count ?? 0) > 0;
+    const hasWarnings = (reviewResult.analysis?.high_count ?? 0) > 0 || (secResult.analysis?.high_count ?? 0) > 0;
+    const verdict = hasBlocking ? 'fail' : hasWarnings ? 'warn' : 'pass';
+    recordOutcome('scan', 50, 2, 'reviewer', reviewResult.analysis?.score ?? Math.round(reviewResult.output.confidence * 100));
+    recordOutcome('scan', 50, 2, 'security-scanner', secResult.analysis?.score ?? Math.round(secResult.output.confidence * 100));
+    recordOutcome('scan', 50, 2, 'secrets', (secretsResult.analysis?.findings?.length ?? 0) === 0 ? 100 : secretsResult.analysis?.score ?? Math.round(secretsResult.output.confidence * 100));
+    return { reviewResult, secResult, secretsResult, verdict };
+}
+/** Handles the 2-phase agentic loop for single worker-agent tools. */
+export async function handleAgenticWorker(name, args, agentType, defaultTask) {
+    const llmResponse = args?.agent_response;
+    const projectDir = args?.project_dir ? String(args.project_dir) : undefined;
+    const task = { id: name + '-1', agent: agentType, task: args?.task ? String(args.task) : defaultTask, code: args?.code ? String(args.code) : undefined, context: args?.context ? String(args.context) : undefined, project_dir: projectDir, llm_backed: true };
+    if (llmResponse && typeof llmResponse === 'object') {
+        const results = parseAgenticAgentResponses([task], { [task.id]: llmResponse });
+        const r = results[0];
+        const payload = r.analysis || r.plan || r.output;
+        return { content: [{ type: 'text', text: JSON.stringify({ mode: 'agentic_fallback', llm_backed: true, ...payload }, null, 2) }] };
+    }
+    try {
+        const result = await executeOne(task);
+        if (result.llm_backed && !result.error) {
+            const payload = result.analysis || result.plan || result.output;
+            return { content: [{ type: 'text', text: JSON.stringify({ mode: 'sampling', llm_backed: true, ...payload }, null, 2) }] };
+        }
+    }
+    catch { /* fallback */ }
+    const prompt = buildAgenticAgentPrompt(task);
+    return { content: [{ type: 'text', text: JSON.stringify({ mode: 'agentic_fallback', llm_backed: false, llm_upgrade: { available: true, instruction: `MCP Sampling is unavailable on this client. Reason as the ${agentType} specialist, produce the output yourself, then call this tool again with your JSON in the agent_response field.`, prompt } }, null, 2) }] };
+}
+//# sourceMappingURL=scan-core.js.map

package/dist/server/scan-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-core.js","sourceRoot":"","sources":["../../src/server/scan-core.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AAEjF,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE,UAAU,GAAG,KAAK;IAC5E,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IACrI,IAAI,CAAC;QACH,IAAI,UAAU;YAAE,OAAO,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC7C,OAAO,IAAI,IAAI,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe,EAAE,UAAU,GAAG,IAAI,EAAE,aAAuC;IAC3H,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,EAAE,aAAa,EAAG,KAAK,EAAE,UAAU,EAAU,IAAI,EAAE,8CAA8C,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;QACxI,EAAE,EAAE,EAAE,UAAU,EAAM,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,iDAAiD,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;QAC3I,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAW,IAAI,EAAE,uDAAuD,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;KACzI,CAAC;IAEF,IAAI,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC9G,OAAO;YACL,IAAI,EAAE,cAAuB;YAC7B,WAAW,EAAE,8HAA8H;YAC3I,OAAO;SACR,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpJ,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAAyB,EAAE,SAAsB,EAAE,aAA0B;IAC9G,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3K,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACrE,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC;IAC3H,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,kBAAkB,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC;IAC7H,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1L,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAS,EAAE,SAA0B,EAAE,WAAmB;IAChH,MAAM,WAAW,GAAG,IAAI,EAAE,cAAc,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,IAAI,GAAc,EAAE,EAAE,EAAE,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAE1Q,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,0BAA0B,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpI,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5H,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAE1B,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,6DAA6D,SAAS,iHAAiH,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzW,CAAC"}

package/dist/server.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export {};
+export declare function callTool(request: any): Promise<any>;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":""}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AAwJA,wBAAsB,QAAQ,CAAC,OAAO,EAAE,GAAG,gBA0C1C"}