@monoes/monograph 1.5.6 → 1.5.7

package/src/web/mcp-http.ts

@@ -1,227 +0,0 @@
-import { createServer } from 'http';
-import type { Server, IncomingMessage, ServerResponse } from 'http';
-
-// ── Types ─────────────────────────────────────────────────────────────────────
-
-export interface McpTool {
-  name: string;
-  description: string;
-  handler: (args: Record<string, unknown>) => Promise<unknown>;
-}
-
-export interface McpHttpConfig {
-  port?: number;
-  host?: string;
-  path?: string;
-  corsOrigin?: string;
-  tools?: McpTool[];
-}
-
-export interface McpHttpServer {
-  start(): Promise<void>;
-  stop(): Promise<void>;
-  readonly port: number;
-  readonly url: string;
-}
-
-// ── Helpers ───────────────────────────────────────────────────────────────────
-
-function setCorsHeaders(res: ServerResponse, corsOrigin: string): void {
-  res.setHeader('Access-Control-Allow-Origin', corsOrigin);
-  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
-  res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
-}
-
-function sendJson(res: ServerResponse, status: number, data: unknown, corsOrigin: string): void {
-  const body = JSON.stringify(data);
-  setCorsHeaders(res, corsOrigin);
-  res.setHeader('Content-Type', 'application/json');
-  res.writeHead(status);
-  res.end(body);
-}
-
-function readBody(req: IncomingMessage): Promise<string> {
-  return new Promise((resolve, reject) => {
-    const chunks: Buffer[] = [];
-    req.on('data', (chunk: Buffer) => chunks.push(chunk));
-    req.on('end', () => resolve(Buffer.concat(chunks).toString()));
-    req.on('error', reject);
-  });
-}
-
-function parseQueryParams(url: string): Record<string, string> {
-  const idx = url.indexOf('?');
-  if (idx === -1) return {};
-  const params: Record<string, string> = {};
-  for (const part of url.slice(idx + 1).split('&')) {
-    const eqIdx = part.indexOf('=');
-    if (eqIdx !== -1) {
-      params[decodeURIComponent(part.slice(0, eqIdx))] = decodeURIComponent(part.slice(eqIdx + 1));
-    }
-  }
-  return params;
-}
-
-// ── createMcpHttpServer ───────────────────────────────────────────────────────
-
-/**
- * Create an HTTP server that handles MCP-style JSON-RPC requests.
- * POST {path}/call   — invoke a tool, return JSON result
- * GET  {path}/stream — SSE stream; client sends tool name+args via query params
- * GET  {path}/tools  — list available tools (name + description)
- */
-const ALLOWED_HOSTS = new Set(['127.0.0.1', '::1', 'localhost']);
-
-export function createMcpHttpServer(config?: McpHttpConfig): McpHttpServer {
-  const port = config?.port ?? 3001;
-  const requestedHost = config?.host ?? '127.0.0.1';
-  // Restrict to loopback to prevent accidental external exposure
-  if (!ALLOWED_HOSTS.has(requestedHost)) {
-    throw new Error(`createMcpHttpServer: host must be 127.0.0.1, ::1, or localhost — got "${requestedHost}"`);
-  }
-  const host = requestedHost;
-  const pathPrefix = config?.path ?? '/mcp';
-  // Default to restrictive CORS; wildcard is a footgun for a localhost-only server
-  const corsOrigin = config?.corsOrigin ?? '127.0.0.1';
-  const tools = config?.tools ?? [];
-
-  // Build lookup map
-  const toolMap = new Map<string, McpTool>();
-  for (const tool of tools) {
-    toolMap.set(tool.name, tool);
-  }
-
-  let httpServer: Server | null = null;
-  let actualPort = port;
-
-  function handleRequest(req: IncomingMessage, res: ServerResponse): void {
-    const url = req.url ?? '/';
-    const method = req.method ?? 'GET';
-
-    // OPTIONS preflight
-    if (method === 'OPTIONS') {
-      setCorsHeaders(res, corsOrigin);
-      res.writeHead(204);
-      res.end();
-      return;
-    }
-
-    // Strip query string for routing
-    const pathname = url.split('?')[0] ?? '';
-
-    // GET {pathPrefix}/tools
-    if (method === 'GET' && pathname === `${pathPrefix}/tools`) {
-      const toolList = tools.map((t) => ({ name: t.name, description: t.description }));
-      sendJson(res, 200, { tools: toolList }, corsOrigin);
-      return;
-    }
-
-    // POST {pathPrefix}/call
-    if (method === 'POST' && pathname === `${pathPrefix}/call`) {
-      readBody(req)
-        .then((body) => {
-          let parsed: { name: string; arguments: Record<string, unknown> };
-          try {
-            parsed = JSON.parse(body) as typeof parsed;
-          } catch {
-            sendJson(res, 400, { error: 'Invalid JSON body' }, corsOrigin);
-            return;
-          }
-
-          const { name, arguments: args = {} } = parsed;
-          const tool = toolMap.get(name);
-          if (!tool) {
-            sendJson(res, 404, { error: `Tool not found: ${name}` }, corsOrigin);
-            return;
-          }
-
-          tool
-            .handler(args)
-            .then((result) => sendJson(res, 200, result, corsOrigin))
-            .catch((err: unknown) =>
-              sendJson(res, 500, { error: String(err) }, corsOrigin),
-            );
-        })
-        .catch((err: unknown) => sendJson(res, 500, { error: String(err) }, corsOrigin));
-      return;
-    }
-
-    // GET {pathPrefix}/stream
-    if (method === 'GET' && pathname === `${pathPrefix}/stream`) {
-      const params = parseQueryParams(url);
-      const name = params['name'] ?? '';
-      let args: Record<string, unknown> = {};
-      try {
-        args = params['args'] ? (JSON.parse(params['args']) as Record<string, unknown>) : {};
-      } catch {
-        // ignore parse errors, use empty args
-      }
-
-      const tool = toolMap.get(name);
-
-      setCorsHeaders(res, corsOrigin);
-      res.setHeader('Content-Type', 'text/event-stream');
-      res.setHeader('Cache-Control', 'no-cache');
-      res.setHeader('Connection', 'keep-alive');
-      res.writeHead(200);
-
-      if (!tool) {
-        res.write(`data: ${JSON.stringify({ error: `Tool not found: ${name}` })}\n\n`);
-        res.write('data: [DONE]\n\n');
-        res.end();
-        return;
-      }
-
-      tool
-        .handler(args)
-        .then((result) => {
-          res.write(`data: ${JSON.stringify(result)}\n\n`);
-          res.write('data: [DONE]\n\n');
-          res.end();
-        })
-        .catch((err: unknown) => {
-          res.write(`data: ${JSON.stringify({ error: String(err) })}\n\n`);
-          res.write('data: [DONE]\n\n');
-          res.end();
-        });
-      return;
-    }
-
-    // 404 for unrecognised routes
-    sendJson(res, 404, { error: 'Not found' }, corsOrigin);
-  }
-
-  const server: McpHttpServer = {
-    get port() {
-      return actualPort;
-    },
-    get url() {
-      return `http://${host}:${actualPort}`;
-    },
-    start(): Promise<void> {
-      return new Promise((resolve, reject) => {
-        httpServer = createServer(handleRequest);
-        httpServer.on('error', reject);
-        httpServer.listen(port, host, () => {
-          const addr = httpServer!.address();
-          if (typeof addr === 'object' && addr) {
-            actualPort = addr.port;
-          }
-          resolve();
-        });
-      });
-    },
-    stop(): Promise<void> {
-      return new Promise((resolve) => {
-        if (!httpServer) {
-          resolve();
-          return;
-        }
-        httpServer.close(() => resolve());
-        httpServer = null;
-      });
-    },
-  };
-
-  return server;
-}

package/src/web/react-ui.ts

@@ -1,78 +0,0 @@
-export function getReactUiHtml(): string {
-  return `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Monograph</title>
-  <script src="https://unpkg.com/react@18/umd/react.production.min.js"></script>
-  <script src="https://unpkg.com/react-dom@18/umd/react-dom.production.min.js"></script>
-  <script src="https://unpkg.com/@babel/standalone/babel.min.js"></script>
-  <style>
-    body { font-family: system-ui, sans-serif; max-width: 900px; margin: 0 auto; padding: 2rem; background: #0d1117; color: #e6edf3; }
-    input { background: #161b22; color: #e6edf3; border: 1px solid #30363d; padding: .5rem 1rem; border-radius: 6px; width: 300px; }
-    button { background: #238636; color: white; border: none; padding: .5rem 1rem; border-radius: 6px; cursor: pointer; margin-left: .5rem; }
-    pre { background: #161b22; padding: 1rem; border-radius: 6px; overflow: auto; font-size: .85rem; }
-    .result { padding: .5rem; border-bottom: 1px solid #30363d; }
-    h1 { color: #58a6ff; }
-  </style>
-</head>
-<body>
-  <div id="root"></div>
-  <script type="text/babel">
-    const { useState } = React;
-
-    function App() {
-      const [query, setQuery] = useState('');
-      const [results, setResults] = useState([]);
-      const [progress, setProgress] = useState('');
-
-      async function search() {
-        if (!query.trim()) return;
-        const res = await fetch('/api/search?q=' + encodeURIComponent(query));
-        const data = await res.json();
-        setResults(Array.isArray(data) ? data : data.results ?? []);
-      }
-
-      async function analyze() {
-        setProgress('Connecting...\\n');
-        const repoPath = encodeURIComponent(window.location.pathname === '/' ? '.' : window.location.pathname);
-        const es = new EventSource('/api/analyze?repoPath=' + repoPath);
-        es.onmessage = (e) => {
-          try {
-            const ev = JSON.parse(e.data);
-            if (ev.type === 'complete') {
-              setProgress(p => p + 'Done: ' + ev.nodeCount + ' nodes, ' + ev.edgeCount + ' edges\\n');
-              es.close();
-            } else if (ev.type === 'error') {
-              setProgress(p => p + 'Error: ' + ev.error + '\\n');
-              es.close();
-            } else {
-              setProgress(p => p + '[' + (ev.phase ?? '?') + '] ' + (ev.message ?? '') + '\\n');
-            }
-          } catch {}
-        };
-        es.onerror = () => { setProgress(p => p + 'Connection error\\n'); es.close(); };
-      }
-
-      return (
-        <div>
-          <h1>Monograph</h1>
-          <div>
-            <input id="search-input" value={query} onChange={e => setQuery(e.target.value)} placeholder="Search nodes..." onKeyDown={e => e.key === 'Enter' && search()} />
-            <button id="search-btn" onClick={search}>Search</button>
-            <button id="analyze-btn" onClick={analyze} style={{background:'#1f6feb'}}>Analyze</button>
-          </div>
-          <div id="results">
-            {results.map((r, i) => <div key={i} className="result">{JSON.stringify(r)}</div>)}
-          </div>
-          <pre id="progress">{progress}</pre>
-        </div>
-      );
-    }
-
-    ReactDOM.createRoot(document.getElementById('root')).render(<App />);
-  </script>
-</body>
-</html>`;
-}

package/src/web/server.ts

@@ -1,90 +0,0 @@
-import { createServer } from 'http';
-import type { Server } from 'http';
-import type Database from 'better-sqlite3';
-import { setupApiRoutes } from './api.js';
-import { getReactUiHtml } from './react-ui.js';
-
-// ── Types ─────────────────────────────────────────────────────────────────────
-
-export interface ServerOptions {
-  port?: number;
-  db: Database.Database;
-}
-
-export interface ServerHandle {
-  url: string;
-  stop: () => Promise<void>;
-}
-
-// ── Singleton tracking ────────────────────────────────────────────────────────
-
-let activeServer: Server | null = null;
-let activeUrl: string | null = null;
-
-export function isServerRunning(): boolean {
-  return activeServer !== null;
-}
-
-// ── startServer ───────────────────────────────────────────────────────────────
-
-export async function startServer(options: ServerOptions): Promise<ServerHandle> {
-  const { db, port = 7374 } = options;
-
-  // Dynamically import express to keep it optional at module load time
-  const { default: express } = await import('express');
-
-  const app = express();
-  app.use(express.json());
-
-  // DNS rebinding protection: reject requests with a Host header that isn't localhost
-  app.use((req, res, next) => {
-    const host = (req.headers['host'] ?? '').split(':')[0].toLowerCase();
-    if (host !== 'localhost' && host !== '127.0.0.1' && host !== '::1' && host !== '') {
-      res.status(403).json({ error: 'Forbidden' });
-      return;
-    }
-    next();
-  });
-
-  // Mount API routes
-  setupApiRoutes(app, db);
-
-  // Serve React SPA
-  const reactHtml = getReactUiHtml();
-  app.get('/', (_req, res) => {
-    res.setHeader('Content-Type', 'text/html; charset=utf-8');
-    res.send(reactHtml);
-  });
-  app.get('/index.html', (_req, res) => {
-    res.setHeader('Content-Type', 'text/html; charset=utf-8');
-    res.send(reactHtml);
-  });
-
-  const server = createServer(app);
-
-  return new Promise((resolve, reject) => {
-    server.on('error', reject);
-    server.listen(port, '127.0.0.1', () => {
-      const addr = server.address();
-      const actualPort = typeof addr === 'object' && addr ? addr.port : port;
-      const url = `http://localhost:${actualPort}`;
-      activeServer = server;
-      activeUrl = url;
-
-      resolve({
-        url,
-        stop: () => new Promise<void>((res) => {
-          server.close(() => res());
-          if (activeServer === server) {
-            activeServer = null;
-            activeUrl = null;
-          }
-        }),
-      });
-    });
-  });
-}
-
-export function getActiveUrl(): string | null {
-  return activeUrl;
-}

package/src/web/ui/index.html

@@ -1,204 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Monograph Graph Explorer</title>
-  <script src="https://cdn.jsdelivr.net/npm/graphology@0.25.4/dist/graphology.umd.min.js"></script>
-  <script src="https://cdn.jsdelivr.net/npm/sigma@2.4.0/build/sigma.min.js"></script>
-  <style>
-    * { box-sizing: border-box; }
-    body { margin: 0; font-family: monospace; display: flex; height: 100vh; overflow: hidden; background: #1a1a2e; color: #e0e0e0; }
-    #sidebar { width: 280px; min-width: 280px; overflow-y: auto; padding: 12px; border-right: 1px solid #333; background: #16213e; }
-    #sidebar h2 { margin: 0 0 10px; font-size: 14px; color: #4cc9f0; text-transform: uppercase; letter-spacing: 1px; }
-    #search { width: 100%; padding: 8px; background: #0f3460; border: 1px solid #4cc9f0; color: #e0e0e0; font-family: monospace; font-size: 13px; border-radius: 4px; }
-    #search::placeholder { color: #888; }
-    #results { margin-top: 8px; }
-    .result-item { padding: 6px 8px; cursor: pointer; border-radius: 3px; font-size: 12px; border-left: 3px solid transparent; margin-bottom: 2px; }
-    .result-item:hover { background: #0f3460; border-left-color: #4cc9f0; }
-    .result-label { font-size: 10px; color: #888; }
-    #graph-container { flex: 1; position: relative; }
-    #loading { position: absolute; top: 50%; left: 50%; transform: translate(-50%,-50%); color: #4cc9f0; font-size: 14px; }
-    #stats { position: absolute; bottom: 10px; left: 10px; font-size: 11px; color: #666; }
-    #detail { display: none; position: fixed; right: 0; top: 0; width: 300px; height: 100vh; background: #16213e; border-left: 1px solid #333; padding: 12px; overflow-y: auto; z-index: 10; }
-    #detail h3 { margin: 0 0 8px; color: #4cc9f0; font-size: 14px; }
-    #detail-close { float: right; cursor: pointer; color: #888; font-size: 16px; line-height: 1; }
-    #detail-close:hover { color: #e0e0e0; }
-    .detail-section { margin-top: 12px; }
-    .detail-section h4 { margin: 0 0 4px; font-size: 12px; color: #888; text-transform: uppercase; }
-    .detail-item { font-size: 12px; padding: 3px 0; cursor: pointer; color: #4cc9f0; }
-    .detail-item:hover { text-decoration: underline; }
-    .detail-meta { font-size: 11px; color: #666; margin-bottom: 6px; }
-  </style>
-</head>
-<body>
-  <div id="sidebar">
-    <h2>Monograph</h2>
-    <input id="search" type="text" placeholder="Search nodes..." autocomplete="off">
-    <div id="results"></div>
-  </div>
-  <div id="graph-container">
-    <div id="loading">Loading graph...</div>
-    <div id="stats"></div>
-  </div>
-  <div id="detail">
-    <span id="detail-close" title="Close">&#x2715;</span>
-    <h3 id="detail-name"></h3>
-    <div id="detail-content"></div>
-  </div>
-
-  <script>
-    // ── Utilities ──────────────────────────────────────────────────────────────
-
-    function communityColor(communityId) {
-      if (communityId == null) return '#555555';
-      const hue = (communityId * 137.508) % 360;
-      return `hsl(${hue}, 60%, 55%)`;
-    }
-
-    function debounce(fn, delay) {
-      let timer;
-      return (...args) => { clearTimeout(timer); timer = setTimeout(() => fn(...args), delay); };
-    }
-
-    // ── Graph ──────────────────────────────────────────────────────────────────
-
-    let sigmaInstance = null;
-
-    async function loadGraph() {
-      const res = await fetch('/api/graph');
-      const data = await res.json();
-
-      document.getElementById('loading').style.display = 'none';
-
-      const graph = new graphology.Graph({ multi: false, allowSelfLoops: false });
-
-      for (const node of data.nodes) {
-        if (!graph.hasNode(node.id)) {
-          graph.addNode(node.id, {
-            label: node.name,
-            size: 5,
-            color: communityColor(node.communityId),
-            x: Math.random() * 100 - 50,
-            y: Math.random() * 100 - 50,
-            nodeData: node,
-          });
-        }
-      }
-
-      for (const edge of data.edges) {
-        if (graph.hasNode(edge.sourceId) && graph.hasNode(edge.targetId)) {
-          const edgeKey = `${edge.sourceId}--${edge.targetId}`;
-          if (!graph.hasEdge(edgeKey)) {
-            try {
-              graph.addEdgeWithKey(edgeKey, edge.sourceId, edge.targetId, {
-                size: 1,
-                color: '#333',
-              });
-            } catch (_) { /* skip duplicate */ }
-          }
-        }
-      }
-
-      const container = document.getElementById('graph-container');
-      sigmaInstance = new Sigma(graph, container, {
-        renderEdgeLabels: false,
-        defaultEdgeColor: '#333',
-        defaultNodeColor: '#4cc9f0',
-      });
-
-      sigmaInstance.on('clickNode', ({ node }) => {
-        showNodeDetail(node);
-      });
-
-      const statsRes = await fetch('/api/stats');
-      const stats = await statsRes.json();
-      document.getElementById('stats').textContent =
-        `${stats.nodeCount} nodes · ${stats.edgeCount} edges · ${stats.communityCount} communities`;
-    }
-
-    // ── Node detail panel ──────────────────────────────────────────────────────
-
-    async function showNodeDetail(nodeId) {
-      const res = await fetch(`/api/nodes/${encodeURIComponent(nodeId)}`);
-      if (!res.ok) return;
-      const data = await res.json();
-      if (!data.node) return;
-
-      const node = data.node;
-      document.getElementById('detail-name').textContent = node.name;
-
-      const meta = [
-        node.label,
-        node.filePath ? `${node.filePath}${node.startLine ? ':' + node.startLine : ''}` : '',
-      ].filter(Boolean).join(' — ');
-
-      let html = `<div class="detail-meta">${escapeHtml(meta)}</div>`;
-
-      if (data.callers.length > 0) {
-        html += `<div class="detail-section"><h4>Called by (${data.callers.length})</h4>`;
-        for (const c of data.callers) {
-          html += `<div class="detail-item" onclick="showNodeDetail('${escapeHtml(c.id)}')">${escapeHtml(c.name)}</div>`;
-        }
-        html += '</div>';
-      }
-
-      if (data.callees.length > 0) {
-        html += `<div class="detail-section"><h4>Calls (${data.callees.length})</h4>`;
-        for (const c of data.callees) {
-          html += `<div class="detail-item" onclick="showNodeDetail('${escapeHtml(c.id)}')">${escapeHtml(c.name)}</div>`;
-        }
-        html += '</div>';
-      }
-
-      document.getElementById('detail-content').innerHTML = html;
-      document.getElementById('detail').style.display = 'block';
-
-      // Highlight node in graph
-      if (sigmaInstance) {
-        sigmaInstance.getCamera().animatedReset();
-      }
-    }
-
-    document.getElementById('detail-close').onclick = () => {
-      document.getElementById('detail').style.display = 'none';
-    };
-
-    // ── Search ─────────────────────────────────────────────────────────────────
-
-    const searchInput = document.getElementById('search');
-    const resultsDiv = document.getElementById('results');
-
-    const doSearch = debounce(async (q) => {
-      if (!q.trim()) { resultsDiv.innerHTML = ''; return; }
-      const res = await fetch(`/api/search?q=${encodeURIComponent(q)}`);
-      const items = await res.json();
-      if (items.length === 0) {
-        resultsDiv.innerHTML = '<div style="font-size:12px;color:#666;padding:4px">No results</div>';
-        return;
-      }
-      resultsDiv.innerHTML = items.map(item => `
-        <div class="result-item" onclick="showNodeDetail('${escapeHtml(item.id)}')">
-          <div>${escapeHtml(item.name)}</div>
-          <div class="result-label">${escapeHtml(item.label)} ${item.filePath ? '· ' + escapeHtml(item.filePath) : ''}</div>
-        </div>
-      `).join('');
-    }, 300);
-
-    searchInput.addEventListener('input', (e) => doSearch(e.target.value));
-
-    // ── Helpers ────────────────────────────────────────────────────────────────
-
-    function escapeHtml(str) {
-      if (!str) return '';
-      return String(str).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');
-    }
-
-    // ── Init ───────────────────────────────────────────────────────────────────
-
-    loadGraph().catch(err => {
-      document.getElementById('loading').textContent = 'Failed to load graph: ' + err.message;
-    });
-  </script>
-</body>
-</html>

package/src/wiki/gist-publisher.ts

@@ -1,76 +0,0 @@
-export interface GistPublishConfig {
-  token: string;
-  gistId?: string;
-  description?: string;
-  public?: boolean;
-}
-
-export interface GistPublishResult {
-  gistId: string;
-  url: string;
-  filesPublished: number;
-}
-
-interface GistApiResponse {
-  id: string;
-  html_url: string;
-  files: Record<string, unknown>;
-}
-
-/**
- * Publishes a map of filename→content to GitHub Gist.
- * files: Record<filename, markdown content>
- */
-export async function publishToGist(
-  files: Record<string, string>,
-  config: GistPublishConfig,
-): Promise<GistPublishResult> {
-  const url = config.gistId
-    ? `https://api.github.com/gists/${config.gistId}`
-    : 'https://api.github.com/gists';
-
-  const method = config.gistId ? 'PATCH' : 'POST';
-
-  const gistFiles: Record<string, { content: string }> = {};
-  for (const [filename, content] of Object.entries(files)) {
-    gistFiles[filename] = { content };
-  }
-
-  const body = {
-    description: config.description ?? 'Monograph wiki',
-    public: config.public ?? false,
-    files: gistFiles,
-  };
-
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), 30_000);
-
-  let response: Response;
-  try {
-    response = await fetch(url, {
-      method,
-      headers: {
-        'Authorization': `Bearer ${config.token}`,
-        'Content-Type': 'application/json',
-        'Accept': 'application/vnd.github+json',
-        'X-GitHub-Api-Version': '2022-11-28',
-      },
-      body: JSON.stringify(body),
-      signal: controller.signal,
-    });
-  } finally {
-    clearTimeout(timer);
-  }
-
-  if (!response.ok) {
-    throw new Error(`Gist publish failed: ${response.status} ${response.statusText}`);
-  }
-
-  const data = (await response.json()) as GistApiResponse;
-
-  return {
-    gistId: data.id,
-    url: data.html_url,
-    filesPublished: Object.keys(data.files).length,
-  };
-}