@latentforce/shift 1.0.11 → 1.0.13

package/README.md

@@ -10,71 +10,45 @@ Shift indexes your codebase, builds a dependency relationship graph (DRG), and p
 npm install -g @latentforce/shift
 ```
 
-Requires Node.js >= 18.
+## Getting an API Key
 
-## Quick Start
+1. Go to **https://dev-shift-lite.latentforce.ai/auth**
+2. **Sign up** for an account
+3. **Sign in** to your dashboard
+4. Copy your **API key** from the dashboard
 
-### Guest mode (zero-config)
+From the dashboard you can also **create a project** and **select a migration template** — or you can do both directly from the CLI (see below).
 
-```bash
-cd /path/to/your/project
-shift-cli init --guest        # Auto-creates guest key + project, scans, and indexes
-```
+## Quick Start
 
-### With an API key
+All commands **must be run** from your project's root directory:
 
 ```bash
-# Create a new project and index it (prompts for template selection)
-shift-cli init --api-key YOUR_KEY --project-name "My App"
-
-# Fully non-interactive (CI/CD friendly)
-shift-cli init --api-key YOUR_KEY --project-name "My App" --template TEMPLATE_ID
+cd /path/to/your/project
 ```
 
-### Interactive (original behavior)
+### Option A: Interactive (recommended)
 
 ```bash
-shift-cli start    # Configure API key and project interactively
-shift-cli init     # Index project files
+shift-cli start    # Step 1: Configure API key and project, launch daemon
+shift-cli init     # Step 2: Scan and index project files
+shift-cli status   # Step 3: Verify everything is connected
 ```
 
-## MCP Integration
+When you run `shift-cli start` interactively, it will:
+1. **Ask for your API key** — paste the key from your dashboard (or choose guest mode)
+2. **Ask to create or select a project** — you can either:
+   - **Select an existing project** from your account (if you created one on the dashboard)
+   - **Create a new project** from the CLI — it will prompt for a name (defaults to your directory name) and let you select a migration template
 
-After initializing your project, use `shift-cli add` to configure Shift's MCP server in your AI coding tool:
+### Option B: Non-interactive (CI/CD friendly)
 
 ```bash
-shift-cli add <tool>
+shift-cli init --api-key YOUR_KEY --project-name "My App"
 ```
 
-### Supported tools
-
-| Tool | Command | Config method |
-|------|---------|---------------|
-| Claude Code | `shift-cli add claude-code` | Runs `claude mcp add-json` |
-| Opencode | `shift-cli add opencode` | Writes `opencode.json` |
-| Codex | `shift-cli add codex` | Runs `codex mcp add` |
-| GitHub Copilot | `shift-cli add copilot` | Writes `.vscode/mcp.json` |
-| Factory Droid | `shift-cli add droid` | Runs `droid mcp add` |
-
-For CLI-based tools, if the CLI is not installed, the command will print manual setup instructions.
-
-### Claude Desktop (manual)
+If a project named "My App" already exists in your account, it will be reused. Otherwise a new one is created with the specified template.
 
-Add to your config file (`%APPDATA%\Claude\claude_desktop_config.json` on Windows, `~/Library/Application Support/Claude/claude_desktop_config.json` on macOS):
-
-```json
-{
-  "mcpServers": {
-    "shift": {
-      "command": "shift-cli",
-      "args": ["mcp"],
-      "env": {
-        "SHIFT_PROJECT_ID": "YOUR_PROJECT_ID"
-      }
-    }
-  }
-}
-```
 
 ## CLI Commands
 
@@ -82,12 +56,39 @@ Add to your config file (`%APPDATA%\Claude\claude_desktop_config.json` on Window
 |---------|-------------|
 | `shift-cli start` | Start the daemon and configure the project |
 | `shift-cli init` | Scan and index project files |
+| `shift-cli status` | Show current status |
 | `shift-cli update-drg` | Update the dependency relationship graph |
-| `shift-cli add <tool>` | Add Shift MCP server to an AI coding tool |
 | `shift-cli stop` | Stop the daemon |
-| `shift-cli status` | Show current status |
+| `shift-cli add <tool>` | Add Shift MCP server to an AI coding tool |
 | `shift-cli config` | Manage configuration |
 
+### `shift-cli start`
+
+Resolves authentication, configures the project, and launches a background daemon that maintains a WebSocket connection to the Shift backend.
+
+**When run interactively (no flags):**
+1. Prompts you to enter your API key or choose guest mode
+2. Prompts you to **select an existing project** or **create a new one**
+   - If creating: asks for a project name and lets you pick a migration template
+3. Saves config to `.shift/config.json`
+4. Launches the background daemon
+
+If you already created a project on the dashboard (https://dev-shift-lite.latentforce.ai), you can select it from the list. Otherwise, create one directly from the CLI.
+
+| Flag | Description |
+|------|-------------|
+| `--guest` | Use guest authentication (auto-creates a temporary project) |
+| `--api-key <key>` | Provide API key directly (skips the key prompt) |
+| `--project-name <name>` | Create new project or match existing by name (skips project prompt) |
+| `--project-id <id>` | Use existing project UUID (skips project prompt) |
+| `--template <id>` | Migration template ID for project creation |
+
+```bash
+shift-cli start                                     # Interactive setup (prompts for key + project)
+shift-cli start --guest                              # Quick start without API key
+shift-cli start --api-key <key> --project-name "My App"  # Non-interactive
+```
+
 ### `shift-cli init`
 
 Performs a full project scan — collects the file tree, categorizes files (source, config, assets), gathers git info, and sends everything to the Shift backend for indexing. Automatically starts the daemon if not running.
@@ -106,30 +107,28 @@ If the project is already indexed, you will be prompted to re-index. Use `--forc
 ```bash
 shift-cli init                     # Interactive initialization
 shift-cli init --force             # Force re-index without prompt
-shift-cli init --guest             # Quick init with guest auth
 ```
 
-### `shift-cli start`
+### `shift-cli status`
 
-Resolves authentication, configures the project, and launches a background daemon that maintains a WebSocket connection to the Shift backend.
-
-| Flag | Description |
-|------|-------------|
-| `--guest` | Use guest authentication (auto-creates a temporary project) |
-| `--api-key <key>` | Provide API key directly |
-| `--project-name <name>` | Create new project or match existing by name |
-| `--project-id <id>` | Use existing project UUID |
-| `--template <id>` | Migration template ID for project creation |
+Displays comprehensive information about the current Shift setup — API key status, project details, backend indexing state, and daemon health.
 
 ```bash
-shift-cli start                                     # Interactive setup
-shift-cli start --guest                              # Quick start without API key
-shift-cli start --api-key <key> --project-name "My App"
+shift-cli status
 ```
 
 ### `shift-cli update-drg`
 
-Scans JavaScript/TypeScript files (`.js`, `.jsx`, `.ts`, `.tsx`, `.mjs`, `.cjs`), detects git changes, and sends file contents to the backend for dependency analysis.
+Scans source files across all supported languages, detects git changes, and sends file contents to the backend for dependency analysis.
+
+**Supported languages and extensions:**
+
+| Language | Extensions |
+|----------|------------|
+| JavaScript / TypeScript | `.js`, `.jsx`, `.ts`, `.tsx`, `.mjs`, `.cjs` |
+| Python | `.py` |
+| C# | `.cs` |
+| C/C++ | `.cpp`, `.cc`, `.cxx`, `.h`, `.hpp`, `.c` |
 
 | Flag | Description |
 |------|-------------|
@@ -137,23 +136,19 @@ Scans JavaScript/TypeScript files (`.js`, `.jsx`, `.ts`, `.tsx`, `.mjs`, `.cjs`)
 
 **Modes:**
 - **incremental** (default) — sends only git-changed files for faster updates
-- **baseline** — sends all JS/TS files for a full re-analysis
+- **baseline** — sends all source files for a full re-analysis
 
 ```bash
 shift-cli update-drg                       # Incremental update (default)
 shift-cli update-drg -m baseline           # Full re-analysis
 ```
 
-### `shift-cli add <tool>`
+### `shift-cli stop`
 
-Configures Shift's MCP server in the specified AI coding tool. Reads `project_id` from `.shift/config.json` (run `shift-cli init` first).
+Stops the background daemon process.
 
 ```bash
-shift-cli add claude-code      # Configure via Claude Code CLI
-shift-cli add opencode         # Write to opencode.json
-shift-cli add codex            # Configure via Codex CLI
-shift-cli add copilot          # Write to .vscode/mcp.json
-shift-cli add droid    # Configure via Droid CLI
+shift-cli stop
 ```
 
 ### `shift-cli config`
@@ -166,92 +161,141 @@ Manage Shift configuration (URLs, API key).
 | `set <key> <value>` | Set a configuration value |
 | `clear [key]` | Clear a specific key or all configuration |
 
-**Configurable keys:** `api-key`, `api-url`, `orch-url`, `ws-url`
-
-URLs can also be set via environment variables: `SHIFT_API_URL`, `SHIFT_ORCH_URL`, `SHIFT_WS_URL`.
+**Configurable key:** `api-key`
 
 ```bash
 shift-cli config                                      # Show config
 shift-cli config set api-key sk-abc123                 # Set API key
-shift-cli config set api-url https://api.shift.ai      # Set API URL
 shift-cli config clear api-key                         # Clear API key
 shift-cli config clear                                 # Clear all config
 ```
+## MCP Integration
 
-## `.shiftignore`
+After initializing your project, use `shift-cli add` to configure Shift's MCP server in your AI coding tool:
 
-Shift uses a `.shiftignore` file to control which files and directories are excluded from indexing and dependency analysis. It follows the same syntax as `.gitignore`.
+```bash
+shift-cli add <tool>
+```
 
-A default `.shiftignore` is **automatically created** the first time you run `shift-cli init` or `shift-cli start`. You can edit it to customize which files are excluded.
+### Supported tools
 
-### Syntax
+| Tool | Command | Config method |
+|------|---------|---------------|
+| Claude Code | `shift-cli add claude-code` | Runs `claude mcp add-json` |
+| Opencode | `shift-cli add opencode` | Writes `opencode.json` |
+| Codex | `shift-cli add codex` | Runs `codex mcp add` |
+| GitHub Copilot | `shift-cli add copilot` | Writes `.vscode/mcp.json` |
+| Factory Droid | `shift-cli add droid` | Runs `droid mcp add` |
 
-- Blank lines are ignored
-- Lines starting with `#` are comments
-- Standard glob patterns (`*`, `**`, `?`)
-- Trailing `/` matches directories only
-- Leading `/` anchors to the project root
-- `!` negates a pattern (re-includes a previously ignored path)
+For CLI-based tools, if the CLI is not installed, the command will print manual setup instructions.
 
-### Default `.shiftignore`
+### Claude Desktop (manual)
 
-The auto-generated file excludes common non-source directories and files:
+Add to your config file (`%APPDATA%\Claude\claude_desktop_config.json` on Windows, `~/Library/Application Support/Claude/claude_desktop_config.json` on macOS):
 
-```gitignore
-# Dependencies
-node_modules/
-vendor/
-bower_components/
+```json
+{
+  "mcpServers": {
+    "shift": {
+      "command": "shift-cli",
+      "args": ["mcp"],
+      "env": {
+        "SHIFT_PROJECT_ID": "YOUR_PROJECT_ID"
+      }
+    }
+  }
+}
+```
+## `.shift/scan_target.json`
+
+Shift uses a `scan_target.json` file inside the `.shift/` directory to let you specify which parts of your codebase to scan and in which language. This is especially useful for monorepos or projects with multiple languages.
 
-# Build output
-dist/
-build/
-out/
-.next/
+A default template is **automatically created** the first time you run `shift-cli init` or `shift-cli start`. By default, it is unconfigured and the server will auto-detect scan targets. Edit the file to manually specify targets.
 
-# Test & coverage
-coverage/
-.nyc_output/
+### Valid Languages
 
-# Environment & secrets
-.env
-.env.*
-*.pem
-*.key
+```
+javascript, typescript, python, cpp, csharp
+```
 
-# Logs
-*.log
-logs/
+### Format
 
-# OS files
-.DS_Store
-Thumbs.db
+The file is a JSON array of objects, each with:
 
-# IDE
-.vscode/
-.idea/
-*.swp
-*.swo
+| Field | Type | Description |
+|-------|------|-------------|
+| `language` | `string \| null` | One of the valid languages above, or `null` for auto-detect |
+| `path` | `string` | Relative path from project root (empty string `""` for root) |
 
-# Python
-__pycache__/
-*.pyc
-venv/
-.venv/
+### Default Template (auto-generated)
 
-# Misc
-*.min.js
-*.min.css
-*.map
+```json
+[
+  {
+    "language": null,
+    "path": ""
+  }
+]
 ```
 
-### Bypassing `.shiftignore`
+When left as-is (single entry with `language: null` and `path: ""`), the server auto-detects scan targets.
 
-Use the `--no-ignore` flag to skip `.shiftignore` rules for a single run:
+### Examples
 
-```bash
-shift-cli init --no-ignore         # Index all files
-shift-cli update-drg --no-ignore   # Include ignored files in DRG update
+**Single-language project (TypeScript at root):**
+
+```json
+[
+  {
+    "language": "typescript",
+    "path": ""
+  }
+]
+```
+
+**Monorepo with multiple languages:**
+
+```json
+[
+  {
+    "language": "typescript",
+    "path": "frontend"
+  },
+  {
+    "language": "python",
+    "path": "backend"
+  },
+  {
+    "language": "csharp",
+    "path": "services/auth"
+  }
+]
+```
+
+**C++ project in a subdirectory:**
+
+```json
+[
+  {
+    "language": "cpp",
+    "path": "engine/src"
+  }
+]
+```
+
+**Mixed JavaScript and Python at root:**
+
+```json
+[
+  {
+    "language": "javascript",
+    "path": ""
+  },
+  {
+    "language": "python",
+    "path": ""
+  }
+]
 ```
 
 ## MCP Tools
@@ -270,4 +314,4 @@ Each tool accepts an optional `project_id` parameter. If not provided, it falls
 |------|----------|-------------|
 | Global config | `~/.shift/config.json` | API key and server URLs |
 | Project config | `.shift/config.json` | Project ID, name, and agent info |
-| Ignore rules | `.shiftignore` | Files/directories to exclude (auto-created) |
+| Scan targets | `.shift/scan_target.json` | Language and path targets for scanning (auto-created) |

package/build/cli/commands/add.js

@@ -26,7 +26,119 @@ function getMcpConfig(projectId) {
         env: { SHIFT_PROJECT_ID: projectId },
     };
 }
-async function addClaudeCode(projectId) {
+const CLAUDE_MD_SECTION_MARKER = '<!-- shift-mcp-instructions -->';
+const CLAUDE_MD_CONTENT = `${CLAUDE_MD_SECTION_MARKER}
+## Shift MCP Tools — MANDATORY USAGE RULES
+
+This project has the **Shift MCP server** (\`shift\`) configured with a pre-built knowledge graph of the entire codebase. You MUST use its tools as the primary way to understand code. Do NOT rely solely on reading raw files.
+
+### Tools
+
+| Tool | Purpose |
+|------|---------|
+| \`file_summary\` | Get an summary of any file |
+| \`dependencies\` | List every file that a given file imports/depends on |
+| \`blast_radius\` | List every file that would be affected if a given file changed |
+
+### Supported file types
+
+The knowledge graph is built **only** from source files. The tools will return an error for any other file type.
+
+**Indexed (use MCP tools):**
+\`.js\` \`.jsx\` \`.ts\` \`.tsx\` \`.py\` \`.java\` \`.cpp\` \`.cs\` \`.go\` \`.c\` \`.h\` \`.css\` \`.scss\` \`.html\`
+
+**NOT indexed (read directly with normal file tools):**
+\`.json\` \`.yaml\` \`.yml\` \`.toml\` \`.env\` \`.md\` \`.txt\` \`.pdf\` \`.png\` \`.lock\` \`.xml\` \`.csv\` and any other non-source format.
+
+Do NOT call \`file_summary\`, \`dependencies\`, or \`blast_radius\` on non-indexed files — it will fail. Read those files directly instead.
+
+---
+
+### RULE 1 — Codebase exploration (e.g. "explain the codebase", "how does this project work")
+
+You MUST call \`file_summary\` on **multiple key files** to build a complete picture. Do not stop after one call.
+
+Follow this protocol:
+1. Identify the likely entry points (e.g. \`main.ts\`, \`index.ts\`, \`app.py\`, \`server.ts\`, \`main.py\`, route files, CLI entry files).
+2. Call \`file_summary\` on each entry point (run calls in parallel where possible).
+3. Call \`dependencies\` on the most central files to discover the module graph.
+4. Call \`file_summary\` on the key modules discovered in step 3.
+5. Synthesise all results into a coherent explanation.
+
+Never answer a "explain the whole project" question from a single \`file_summary\` call.
+
+---
+
+### RULE 2 — Before reading any file
+
+ALWAYS call \`file_summary\` first. Only open the raw file if you need implementation details that the summary does not cover.
+
+---
+
+### RULE 3 — Before editing any file
+
+ALWAYS call \`blast_radius\` on that file first. List the affected files in your plan before making any changes.
+
+---
+
+### RULE 4 — When tracing a bug or data flow
+
+Use \`dependencies\` to follow the chain rather than grepping manually. Start from the file where the symptom appears and walk the dependency graph.
+
+---
+
+### Usage reference
+
+\`\`\`
+# Understand a file
+file_summary(file_path="src/server.ts")
+
+# Understand with folder context (level = number of parent dirs to include)
+file_summary(file_path="src/server.ts", level=1)
+
+# See what a file imports
+dependencies(file_path="src/server.ts")
+
+# See what breaks if this file changes
+blast_radius(file_path="src/server.ts")
+\`\`\`
+
+> Run \`shift-cli update-drg\` after significant code changes to keep the knowledge graph current.
+<!-- end-shift-mcp-instructions -->
+`;
+const CLAUDE_MD_END_MARKER = '<!-- end-shift-mcp-instructions -->';
+function createClaudeMd(projectRoot) {
+    const claudeMdPath = path.join(projectRoot, 'CLAUDE.md');
+    if (fs.existsSync(claudeMdPath)) {
+        const existing = fs.readFileSync(claudeMdPath, 'utf-8');
+        if (existing.includes(CLAUDE_MD_SECTION_MARKER)) {
+            // Replace the existing section (start marker to end marker inclusive)
+            const start = existing.indexOf(CLAUDE_MD_SECTION_MARKER);
+            const end = existing.indexOf(CLAUDE_MD_END_MARKER);
+            if (end !== -1) {
+                const before = existing.slice(0, start).trimEnd();
+                const after = existing.slice(end + CLAUDE_MD_END_MARKER.length).trimStart();
+                const updated = (before ? before + '\n\n' : '') + CLAUDE_MD_CONTENT + (after ? '\n\n' + after : '');
+                fs.writeFileSync(claudeMdPath, updated);
+            }
+            else {
+                // Malformed — just overwrite from the marker onwards
+                const before = existing.slice(0, existing.indexOf(CLAUDE_MD_SECTION_MARKER)).trimEnd();
+                fs.writeFileSync(claudeMdPath, (before ? before + '\n\n' : '') + CLAUDE_MD_CONTENT);
+            }
+            console.log('  Updated Shift MCP instructions in CLAUDE.md.');
+            return;
+        }
+        // Append section to existing file
+        fs.writeFileSync(claudeMdPath, existing.trimEnd() + '\n\n' + CLAUDE_MD_CONTENT);
+        console.log('  Updated CLAUDE.md with Shift MCP instructions.');
+    }
+    else {
+        fs.writeFileSync(claudeMdPath, CLAUDE_MD_CONTENT);
+        console.log('  Created CLAUDE.md with Shift MCP instructions.');
+    }
+}
+async function addClaudeCode(projectId, projectRoot) {
     const jsonPayload = JSON.stringify({
         type: 'stdio',
         command: 'shift-cli',
@@ -55,6 +167,7 @@ async function addClaudeCode(projectId) {
             console.log(`  claude mcp add-json shift '${jsonPayload}'`);
         }
     }
+    createClaudeMd(projectRoot);
 }
 async function addCodex(projectId) {
     const config = getMcpConfig(projectId);
@@ -190,7 +303,7 @@ export async function addCommand(tool) {
     console.log(`\n  Configuring Shift MCP for ${tool}...\n`);
     switch (tool) {
         case 'claude-code':
-            await addClaudeCode(projectId);
+            await addClaudeCode(projectId, projectRoot);
             break;
         case 'opencode':
             addOpencode(projectId, projectRoot);

package/build/cli/commands/config.js

@@ -13,7 +13,7 @@ export async function configCommand(action, key, value) {
             await clearConfig(key);
             break;
         default:
-            console.log('Usage: shift config [show|set|clear] [key] [value]');
+            console.log('Usage: shift-cli config [show|set|clear] [key] [value]');
             console.log('');
             console.log('Commands:');
             console.log('  show                    Show current configuration');
@@ -22,16 +22,16 @@ export async function configCommand(action, key, value) {
             console.log('');
             console.log('Keys:');
             console.log('  api-key                 Your Shift API key');
-            console.log('  api-url                 SHIFT_API_URL (default: http://localhost:9000)');
-            console.log('  orch-url                SHIFT_ORCH_URL (default: http://localhost:9999)');
-            console.log('  ws-url                  SHIFT_WS_URL (default: ws://localhost:9999)');
+            console.log('  api-url                 SHIFT_API_URL');
+            console.log('  orch-url                SHIFT_ORCH_URL');
+            console.log('  ws-url                  SHIFT_WS_URL');
             console.log('');
             console.log('Examples:');
-            console.log('  shift config');
-            console.log('  shift config set api-url https://api.latentforce.ai');
-            console.log('  shift config set orch-url https://orch.latentforce.ai');
-            console.log('  shift config set ws-url wss://ws.latentforce.ai');
-            console.log('  shift config clear urls');
+            console.log('  shift-cli config');
+            console.log('  shift-cli config set api-url http://localhost:9000');
+            console.log('  shift-cli config set orch-url http://localhost:9999');
+            console.log('  shift-cli config set ws-url ws://localhost:9999');
+            console.log('  shift-cli config clear urls');
             break;
     }
 }
@@ -66,7 +66,13 @@ function showConfig() {
 }
 async function setConfigValue(key, value) {
     if (!key) {
-        console.error('Error: Key is required. Run "shift config" to see available keys.');
+        console.error('Error: Key is required. Run "shift-cli config" to see available keys.');
+        process.exit(1);
+    }
+    const validKeys = ['api-key', 'api-url', 'orch-url', 'ws-url'];
+    if (!validKeys.includes(key)) {
+        console.error(`Unknown key: ${key}`);
+        console.log(`Available keys: ${validKeys.join(', ')}`);
         process.exit(1);
     }
     // If no value provided, prompt for it
@@ -126,7 +132,7 @@ async function clearConfig(key) {
         case 'api-url':
         case 'orch-url':
         case 'ws-url':
-            console.log('Use "shift config clear urls" to clear all URLs');
+            console.log('Use "shift-cli config clear urls" to clear all URLs');
             break;
         default:
             console.error(`Unknown key: ${key}`);

package/build/cli/commands/init.js

@@ -226,8 +226,7 @@ export async function initCommand(options = {}) {
     try {
         const response = await sendInitScan(apiKey, project.projectId, payload);
         console.log('[Init] ✓ Backend initialization completed');
-        console.log(`[Init]   Files read: ${response.files_read}`);
-        console.log(`[Init]   Files failed: ${response.files_failed}`);
+        console.log(`[Init]   Source files queued: ${response.source_files_count ?? response.files_read}`);
         // Update local config with agent info (matching extension)
         if (response.agents_created?.theme_planner) {
             const agentInfo = {

package/build/index.js

@@ -137,8 +137,8 @@ const updateDrgCmd = program
 });
 updateDrgCmd.addHelpText('after', `
 Details:
-  Scans JavaScript/TypeScript files (.js, .jsx, .ts, .tsx, .mjs, .cjs),
-  detects git changes, and sends file contents to the backend for
+  Scans files, detects git changes, 
+  and sends file contents to the backend for
   dependency analysis.
 
 Modes:
@@ -186,9 +186,9 @@ Actions:
 
 Configurable keys:
   api-key    Your Shift API key
-  api-url    Backend API URL       (default: http://localhost:9000)
-  orch-url   Orchestrator URL      (default: http://localhost:9999)
-  ws-url     WebSocket URL         (default: ws://localhost:9999)
+  api-url    Backend API URL
+  orch-url   Orchestrator URL
+  ws-url     WebSocket URL
 
 URLs can also be set via environment variables:
   SHIFT_API_URL, SHIFT_ORCH_URL, SHIFT_WS_URL
@@ -196,7 +196,7 @@ URLs can also be set via environment variables:
 Examples:
   shift-cli config                                    Show config
   shift-cli config set api-key sk-abc123              Set API key
-  shift-cli config set api-url https://api.shift.ai   Set API URL
+  shift-cli config set api-url http://localhost:9000   Set API URL
   shift-cli config clear api-key                      Clear API key
   shift-cli config clear                              Clear all config
 `);

package/build/mcp-server.js

@@ -2,9 +2,13 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from 'zod';
 import { createRequire } from 'module';
+import { getApiKey } from './utils/config.js';
 const require = createRequire(import.meta.url);
 const { version } = require('../package.json');
 const BASE_URL = process.env.SHIFT_BACKEND_URL || "https://dev-shift-lite.latentforce.ai";
+function getApiKeyFromEnv() {
+    return process.env.SHIFT_API_KEY?.trim() || getApiKey();
+}
 function getProjectIdFromEnv() {
     const projectId = process.env.SHIFT_PROJECT_ID;
     if (!projectId || projectId.trim() === "") {
@@ -30,11 +34,16 @@ function normalizePath(filePath) {
 // helper
 async function callBackendAPI(endpoint, data) {
     try {
+        const apiKey = getApiKeyFromEnv();
+        const headers = {
+            'Content-Type': 'application/json',
+        };
+        if (apiKey) {
+            headers['Authorization'] = `Bearer ${apiKey}`;
+        }
         const response = await fetch(`${BASE_URL}${endpoint}`, {
             method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
+            headers,
             body: JSON.stringify(data),
         });
         if (!response.ok) {
@@ -144,7 +153,7 @@ export async function startMcpServer() {
     // Tools:
     // Blast radius
     server.registerTool("blast_radius", {
-        description: "Analyzes the blast radius of a file or component - shows what would be affected if this file were modified or deleted",
+        description: "Use this BEFORE editing or refactoring any source file. Returns every file in the project that imports or depends on the given file, grouped by dependency depth (level 1 = direct importers, level 2 = their importers, etc.). Use this to understand the full impact of a change before making it. Only works on indexed source files: .js .jsx .ts .tsx .py .java .cpp .cs .go .c .h .css .scss .html — do not call for .json, .yaml, .md or other non-source files.",
         inputSchema: z.object({
             file_path: z.string().describe("Path to the file (relative to project root)"),
             project_id: z.string().optional().describe("Shift Lite project UUID; overrides SHIFT_PROJECT_ID if provided"),
@@ -168,7 +177,7 @@ export async function startMcpServer() {
     });
     // Dependencies
     server.registerTool("dependencies", {
-        description: "Retrieves all dependencies for a given file or component, including direct and transitive dependencies",
+        description: "Returns every file that the given source file imports or depends on, along with a short summary of why each dependency is used. Use this to trace data flow, understand module relationships, follow a bug through the call chain, or map out what a file relies on before modifying it. Only works on indexed source files: .js .jsx .ts .tsx .py .java .cpp .cs .go .c .h .css .scss .html — do not call for .json, .yaml, .md or other non-source files.",
         inputSchema: z.object({
             file_path: z.string().describe("Path to the file"),
             project_id: z.string().optional().describe("Shift Lite project UUID; overrides SHIFT_PROJECT_ID if provided"),
@@ -190,7 +199,7 @@ export async function startMcpServer() {
     });
     // File summary (maps to what-is-this-file)
     server.registerTool("file_summary", {
-        description: "Generates a comprehensive summary of a file including its purpose, exports, imports, and key functions, with optional parent directory context",
+        description: "Returns an AI-generated summary of a source file: what it does, its key exports and functions, its role in the project, and how it fits into the surrounding architecture. Always call this before reading a raw file — it gives you the essential context without having to parse the full source. Use the 'level' parameter to include summaries of parent directories for broader context. Only works on indexed source files: .js .jsx .ts .tsx .py .java .cpp .cs .go .c .h .css .scss .html — for .json, .yaml, .md, or other non-source files, read them directly instead.",
         inputSchema: z.object({
             file_path: z.string().describe("Path to the file to summarize"),
             project_id: z.string().optional().describe("Shift Lite project UUID; overrides SHIFT_PROJECT_ID if provided"),

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@latentforce/shift",
-    "version": "1.0.11",
+    "version": "1.0.13",
     "description": "Shift CLI - AI-powered code intelligence with MCP support",
     "type": "module",
     "main": "./build/index.js",