@opencodehub/mcp 0.1.0

package/dist/tools/group-status.js

@@ -0,0 +1,121 @@
+/**
+ * `group_status` — per-repo index freshness within a named group.
+ *
+ * For each repo referenced by the group we emit:
+ *   - name, path
+ *   - nodeCount / edgeCount from the registry at group-create time
+ *   - indexedAt from the registry (ISO8601)
+ *   - staleness envelope via @opencodehub/analysis.computeStaleness when
+ *     the on-disk meta.json is readable
+ *   - `inRegistry: false` for orphan references (repo was removed but the
+ *     group still points at it)
+ */
+// biome-ignore-all lint/complexity/useLiteralKeys: dot-access disallowed on Record index signatures
+import { readStoreMeta } from "@opencodehub/storage";
+import { z } from "zod";
+import { toolError, toolErrorFromUnknown } from "../error-envelope.js";
+import { readGroup } from "../group-resolver.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { deriveRepoUri, readRegistry } from "../repo-resolver.js";
+import { repoUriForEntry } from "../repo-uri-for-entry.js";
+import { stalenessFor } from "../staleness.js";
+import { fromToolResult, toToolResult } from "./shared.js";
+const GroupStatusInput = {
+    groupName: z.string().min(1).describe("Name of the group to inspect."),
+};
+export async function runGroupStatus(ctx, args) {
+    try {
+        const opts = ctx.home !== undefined ? { home: ctx.home } : {};
+        const group = await readGroup(args.groupName, opts);
+        if (!group) {
+            return toToolResult(toolError("NOT_FOUND", `Group ${args.groupName} is not defined.`, "Run `codehub group list` to see defined groups."));
+        }
+        const registry = await readRegistry(opts);
+        const rows = [];
+        // Alphabetical iteration keeps output deterministic.
+        const sorted = [...group.repos].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+        for (const repo of sorted) {
+            const hit = registry[repo.name];
+            if (!hit) {
+                // Orphan reference — still emit a deterministic repo_uri so
+                // consumers always receive the additive `repo_uri` field.
+                const orphanUri = deriveRepoUri({
+                    name: repo.name,
+                    path: repo.path,
+                    indexedAt: "",
+                    nodeCount: 0,
+                    edgeCount: 0,
+                });
+                rows.push({
+                    name: repo.name,
+                    repo_uri: orphanUri,
+                    path: repo.path,
+                    inRegistry: false,
+                    indexedAt: null,
+                    nodeCount: null,
+                    edgeCount: null,
+                    lastCommit: null,
+                });
+                continue;
+            }
+            const meta = await readStoreMeta(hit.path).catch(() => undefined);
+            const staleness = meta
+                ? await stalenessFor(hit.path, meta).catch(() => undefined)
+                : undefined;
+            const repoUri = await repoUriForEntry(hit, ctx.pool);
+            rows.push({
+                name: hit.name,
+                repo_uri: repoUri,
+                path: hit.path,
+                inRegistry: true,
+                indexedAt: hit.indexedAt,
+                nodeCount: hit.nodeCount,
+                edgeCount: hit.edgeCount,
+                lastCommit: hit.lastCommit ?? null,
+                ...(staleness ? { staleness } : {}),
+            });
+        }
+        const header = `Group ${group.name} (${rows.length} repo${rows.length === 1 ? "" : "s"}):`;
+        const body = rows
+            .map((r) => {
+            if (!r.inRegistry)
+                return `- ${r.name}  [orphan — run \`codehub analyze ${r.path}\`]`;
+            const staleBadge = r.staleness?.isStale ? "  [stale]" : "";
+            return (`- ${r.name}${staleBadge}\n` +
+                `    path: ${r.path}\n` +
+                `    nodes: ${r.nodeCount ?? "?"}, edges: ${r.edgeCount ?? "?"}\n` +
+                `    indexedAt: ${r.indexedAt ?? "?"}, lastCommit: ${r.lastCommit ?? "-"}`);
+        })
+            .join("\n");
+        const staleRepos = rows.filter((r) => r.staleness?.isStale).map((r) => r.name);
+        const orphans = rows.filter((r) => !r.inRegistry).map((r) => r.name);
+        const next = [];
+        if (orphans.length > 0) {
+            next.push(`re-run \`codehub analyze\` for orphaned repo(s): ${orphans.join(", ")}`);
+        }
+        if (staleRepos.length > 0) {
+            next.push(`re-run \`codehub analyze\` to refresh: ${staleRepos.join(", ")}`);
+        }
+        if (next.length === 0) {
+            next.push(`call \`group_query\` with groupName="${group.name}" and a search phrase to explore`);
+        }
+        return toToolResult(withNextSteps(`${header}\n${body}`, { groupName: group.name, repos: rows }, next));
+    }
+    catch (err) {
+        return toToolResult(toolErrorFromUnknown(err));
+    }
+}
+export function registerGroupStatusTool(server, ctx) {
+    server.registerTool("group_status", {
+        title: "Cross-repo group status",
+        description: "Report per-repo index freshness for every repo in a named group. Returns node/edge counts, last-indexed timestamp, last commit, and a best-effort staleness envelope so the agent can decide whether to re-analyze before querying.",
+        inputSchema: GroupStatusInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async (args) => fromToolResult(await runGroupStatus(ctx, args)));
+}
+//# sourceMappingURL=group-status.js.map

package/dist/tools/group-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-status.js","sourceRoot":"","sources":["../../src/tools/group-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,oGAAoG;AAIpG,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAqC,YAAY,EAAE,MAAM,aAAa,CAAC;AAE9F,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CACvE,CAAC;AAwBF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAgB,EAAE,IAAqB;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CACjB,SAAS,CACP,WAAW,EACX,SAAS,IAAI,CAAC,SAAS,kBAAkB,EACzC,iDAAiD,CAClD,CACF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAoB,EAAE,CAAC;QACjC,qDAAqD;QACrD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,4DAA4D;gBAC5D,0DAA0D;gBAC1D,MAAM,SAAS,GAAG,aAAa,CAAC;oBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,CAAC;iBACb,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,UAAU,EAAE,KAAK;oBACjB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,IAAI;gBACpB,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;gBAC3D,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;gBAClC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC3F,MAAM,IAAI,GAAG,IAAI;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC,CAAC,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC,IAAI,KAAK,CAAC;YACtF,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,CACL,KAAK,CAAC,CAAC,IAAI,GAAG,UAAU,IAAI;gBAC5B,aAAa,CAAC,CAAC,IAAI,IAAI;gBACvB,cAAc,CAAC,CAAC,SAAS,IAAI,GAAG,YAAY,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI;gBAClE,kBAAkB,CAAC,CAAC,SAAS,IAAI,GAAG,iBAAiB,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAC3E,CAAC;QACJ,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,oDAAoD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,0CAA0C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CACP,wCAAwC,KAAK,CAAC,IAAI,kCAAkC,CACrF,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CACjB,aAAa,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAClF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,YAAY,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,GAAgB;IACzE,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,qOAAqO;QACvO,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC"}

package/dist/tools/group-sync.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `group_sync` — rebuild the cross-repo contract registry for a named
+ * group. Walks each registered repo, runs the HTTP / gRPC / topic
+ * extractors, and writes the result to
+ * `<home>/.codehub/groups/<name>/contracts.json`. The tool returns a
+ * compact summary so agents can reason about pairing density before
+ * jumping into the richer `group_contracts` tool.
+ *
+ * Annotations: writes a single file under the home directory — not
+ * `readOnlyHint`. `openWorldHint: false` because the scan stays within
+ * the registry.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext, type ToolResult } from "./shared.js";
+interface GroupSyncArgs {
+    readonly groupName: string;
+}
+/** Absolute path of `<home>/.codehub/groups/<name>/contracts.json`. */
+export declare function resolveGroupContractsPath(groupName: string, home?: string): string;
+export declare function runGroupSyncTool(ctx: ToolContext, args: GroupSyncArgs): Promise<ToolResult>;
+export declare function registerGroupSyncTool(server: McpServer, ctx: ToolContext): void;
+export {};
+//# sourceMappingURL=group-sync.d.ts.map

package/dist/tools/group-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-sync.d.ts","sourceRoot":"","sources":["../../src/tools/group-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASzE,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAgB,MAAM,aAAa,CAAC;AAM9F,UAAU,aAAa;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAID,uEAAuE;AACvE,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlF;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAiFjG;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAiB/E"}

package/dist/tools/group-sync.js

@@ -0,0 +1,112 @@
+/**
+ * `group_sync` — rebuild the cross-repo contract registry for a named
+ * group. Walks each registered repo, runs the HTTP / gRPC / topic
+ * extractors, and writes the result to
+ * `<home>/.codehub/groups/<name>/contracts.json`. The tool returns a
+ * compact summary so agents can reason about pairing density before
+ * jumping into the richer `group_contracts` tool.
+ *
+ * Annotations: writes a single file under the home directory — not
+ * `readOnlyHint`. `openWorldHint: false` because the scan stays within
+ * the registry.
+ */
+// biome-ignore-all lint/complexity/useLiteralKeys: dot-access disallowed on Record index signatures
+import { mkdir, rename, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, resolve } from "node:path";
+import { runGroupSync } from "@opencodehub/analysis";
+import { z } from "zod";
+import { toolError, toolErrorFromUnknown } from "../error-envelope.js";
+import { readGroup } from "../group-resolver.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { readRegistry } from "../repo-resolver.js";
+import { repoUriForEntry } from "../repo-uri-for-entry.js";
+import { fromToolResult, toToolResult } from "./shared.js";
+const GroupSyncInput = {
+    groupName: z.string().min(1).describe("Name of the group to sync."),
+};
+const CODEHUB_HOME_DIR = ".codehub";
+/** Absolute path of `<home>/.codehub/groups/<name>/contracts.json`. */
+export function resolveGroupContractsPath(groupName, home) {
+    const root = home ?? homedir();
+    return resolve(root, CODEHUB_HOME_DIR, "groups", groupName, "contracts.json");
+}
+export async function runGroupSyncTool(ctx, args) {
+    try {
+        const opts = ctx.home !== undefined ? { home: ctx.home } : {};
+        const group = await readGroup(args.groupName, opts);
+        if (!group) {
+            return toToolResult(toolError("NOT_FOUND", `Group ${args.groupName} is not defined.`, "Run `codehub group list` to see defined groups."));
+        }
+        const registry = await readRegistry(opts);
+        const sortedRepos = [...group.repos].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+        const inputs = [];
+        const missing = [];
+        // Additive per-repo `{name, repo_uri}` rows surfaced in the
+        // structured response so agents that consume `group_sync` can key
+        // on the new handle without re-running `group_list`. Legacy top-
+        // level `repos: string[]` (from `ContractRegistry`) stays intact.
+        const reposWithUri = [];
+        for (const repo of sortedRepos) {
+            const hit = registry[repo.name];
+            if (!hit) {
+                missing.push(repo.name);
+                continue;
+            }
+            inputs.push({ name: repo.name, path: resolve(hit.path) });
+            reposWithUri.push({
+                name: repo.name,
+                repo_uri: await repoUriForEntry(hit, ctx.pool),
+            });
+        }
+        const registryResult = await runGroupSync({ repos: inputs });
+        const outPath = resolveGroupContractsPath(group.name, ctx.home);
+        await mkdir(dirname(outPath), { recursive: true });
+        const payload = `${JSON.stringify(registryResult, null, 2)}\n`;
+        // Atomic write: stage at `.tmp` sibling, rename into place. Keeps
+        // concurrent readers from seeing a torn write mid-flight.
+        const tmp = `${outPath}.tmp`;
+        await writeFile(tmp, payload, "utf8");
+        await rename(tmp, outPath);
+        const header = `group_sync: wrote ${registryResult.contracts.length} contract(s) and ${registryResult.crossLinks.length} cross-link(s) for ${group.name}.`;
+        const body = [`Registry → ${outPath}`];
+        if (missing.length > 0) {
+            body.push(`Skipped ${missing.length} unregistered repo(s): ${missing.join(", ")}`);
+        }
+        const next = registryResult.crossLinks.length === 0
+            ? [
+                `call \`group_contracts\` with groupName="${group.name}" to inspect extracted contracts`,
+                `confirm repos are freshly analyzed with \`group_status\` for ${group.name}`,
+            ]
+            : [
+                `call \`group_contracts\` with groupName="${group.name}" to browse producer↔consumer pairs`,
+            ];
+        return toToolResult(withNextSteps([header, ...body].join("\n"), {
+            groupName: group.name,
+            registryPath: outPath,
+            contractCount: registryResult.contracts.length,
+            crossLinkCount: registryResult.crossLinks.length,
+            missingRepos: missing,
+            repos: registryResult.repos,
+            // Additive field — per-repo `{name, repo_uri}` rows.
+            reposWithUri,
+        }, next));
+    }
+    catch (err) {
+        return toToolResult(toolErrorFromUnknown(err));
+    }
+}
+export function registerGroupSyncTool(server, ctx) {
+    server.registerTool("group_sync", {
+        title: "Rebuild cross-repo contract registry",
+        description: "Walk every repo in a named group, run HTTP / gRPC / topic contract extractors, and write `<home>/.codehub/groups/<name>/contracts.json`. Returns a summary of extracted contracts + cross-links. Use this before calling `group_contracts` when you want the registry to reflect the current working tree.",
+        inputSchema: GroupSyncInput,
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async (args) => fromToolResult(await runGroupSyncTool(ctx, args)));
+}
+//# sourceMappingURL=group-sync.js.map

package/dist/tools/group-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-sync.js","sourceRoot":"","sources":["../../src/tools/group-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,oGAAoG;AAEpG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAqC,YAAY,EAAE,MAAM,aAAa,CAAC;AAE9F,MAAM,cAAc,GAAG;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CACpE,CAAC;AAMF,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAEpC,uEAAuE;AACvE,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,IAAa;IACxE,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;IAC/B,OAAO,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAgB,EAAE,IAAmB;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CACjB,SAAS,CACP,WAAW,EACX,SAAS,IAAI,CAAC,SAAS,kBAAkB,EACzC,iDAAiD,CAClD,CACF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjD,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;QACF,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,4DAA4D;QAC5D,kEAAkE;QAClE,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,YAAY,GAA2D,EAAE,CAAC;QAChF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1D,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAqB,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAC/D,kEAAkE;QAClE,0DAA0D;QAC1D,MAAM,GAAG,GAAG,GAAG,OAAO,MAAM,CAAC;QAC7B,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE3B,MAAM,MAAM,GAAG,qBAAqB,cAAc,CAAC,SAAS,CAAC,MAAM,oBAAoB,cAAc,CAAC,UAAU,CAAC,MAAM,sBAAsB,KAAK,CAAC,IAAI,GAAG,CAAC;QAC3J,MAAM,IAAI,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GACR,cAAc,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YACpC,CAAC,CAAC;gBACE,4CAA4C,KAAK,CAAC,IAAI,kCAAkC;gBACxF,gEAAgE,KAAK,CAAC,IAAI,EAAE;aAC7E;YACH,CAAC,CAAC;gBACE,4CAA4C,KAAK,CAAC,IAAI,qCAAqC;aAC5F,CAAC;QAER,OAAO,YAAY,CACjB,aAAa,CACX,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B;YACE,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,YAAY,EAAE,OAAO;YACrB,aAAa,EAAE,cAAc,CAAC,SAAS,CAAC,MAAM;YAC9C,cAAc,EAAE,cAAc,CAAC,UAAU,CAAC,MAAM;YAChD,YAAY,EAAE,OAAO;YACrB,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,qDAAqD;YACrD,YAAY;SACb,EACD,IAAI,CACL,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,YAAY,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,GAAgB;IACvE,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,4SAA4S;QAC9S,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC"}

package/dist/tools/impact.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `impact` — blast-radius analysis for a symbol.
+ *
+ * Delegates to `@opencodehub/analysis.runImpact`. Surfaces:
+ *   - `target_uid` for zero-ambiguity lookup by node id,
+ *   - `file_path` + `kind` filters to disambiguate same-named symbols,
+ *   - `relationTypes` to widen/narrow the traversal edge set
+ *     (default: CALLS, IMPORTS, EXTENDS, IMPLEMENTS, METHOD_OVERRIDES,
+ *     METHOD_IMPLEMENTS, HAS_METHOD, HAS_PROPERTY),
+ *   - `includeTests` to opt into test-file dependents (default: false),
+ *   - `minConfidence` to filter heuristic edges (default: 0.7).
+ *
+ * When the analysis layer reports `ambiguous: true` we surface the candidate
+ * list as an INVALID_INPUT error envelope with a ranked list so the caller
+ * can re-invoke with `target_uid`, `file_path`, or `kind` — mirroring the
+ * same EC-04 disambiguation pattern used by `context`.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext, type ToolResult } from "./shared.js";
+interface ImpactArgs {
+    readonly target: string;
+    readonly target_uid?: string | undefined;
+    readonly file_path?: string | undefined;
+    readonly kind?: string | undefined;
+    readonly direction?: "upstream" | "downstream" | "both" | undefined;
+    readonly maxDepth?: number | undefined;
+    readonly minConfidence?: number | undefined;
+    readonly relationTypes?: readonly string[] | undefined;
+    readonly includeTests?: boolean | undefined;
+    readonly repo?: string | undefined;
+    readonly repo_uri?: string | undefined;
+}
+export declare function runImpact(ctx: ToolContext, args: ImpactArgs): Promise<ToolResult>;
+export declare function registerImpactTool(server: McpServer, ctx: ToolContext): void;
+export {};
+//# sourceMappingURL=impact.d.ts.map

package/dist/tools/impact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact.d.ts","sourceRoot":"","sources":["../../src/tools/impact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASzE,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,aAAa,CAAC;AAwDrB,UAAU,UAAU;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAoJvF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAiB5E"}

package/dist/tools/impact.js

@@ -0,0 +1,232 @@
+/**
+ * `impact` — blast-radius analysis for a symbol.
+ *
+ * Delegates to `@opencodehub/analysis.runImpact`. Surfaces:
+ *   - `target_uid` for zero-ambiguity lookup by node id,
+ *   - `file_path` + `kind` filters to disambiguate same-named symbols,
+ *   - `relationTypes` to widen/narrow the traversal edge set
+ *     (default: CALLS, IMPORTS, EXTENDS, IMPLEMENTS, METHOD_OVERRIDES,
+ *     METHOD_IMPLEMENTS, HAS_METHOD, HAS_PROPERTY),
+ *   - `includeTests` to opt into test-file dependents (default: false),
+ *   - `minConfidence` to filter heuristic edges (default: 0.7).
+ *
+ * When the analysis layer reports `ambiguous: true` we surface the candidate
+ * list as an INVALID_INPUT error envelope with a ranked list so the caller
+ * can re-invoke with `target_uid`, `file_path`, or `kind` — mirroring the
+ * same EC-04 disambiguation pattern used by `context`.
+ */
+import { z } from "zod";
+import { callRunImpact } from "../analysis-bridge.js";
+import { toolError, toolErrorFromUnknown } from "../error-envelope.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { stalenessFromMeta } from "../staleness.js";
+import { computeConfidenceBreakdown } from "./confidence.js";
+import { fromToolResult, repoArgShape, toToolResult, withStore, } from "./shared.js";
+const ImpactInput = {
+    target: z
+        .string()
+        .min(1)
+        .describe("Symbol name OR node id of the change target. Node id gives an exact match."),
+    target_uid: z
+        .string()
+        .optional()
+        .describe("Exact node id (UID) from a prior tool result. Skips name disambiguation entirely."),
+    file_path: z
+        .string()
+        .optional()
+        .describe("File path (or suffix) to disambiguate when multiple symbols share a name."),
+    kind: z
+        .string()
+        .optional()
+        .describe("Kind filter to disambiguate same-named symbols (e.g. Function, Method, Class, Interface)."),
+    direction: z
+        .enum(["upstream", "downstream", "both"])
+        .optional()
+        .describe("upstream = dependents (who breaks if this changes), downstream = dependencies, both = transitive both ways. Default: upstream."),
+    maxDepth: z.number().int().min(1).max(6).optional().describe("Traversal depth cap. Default 3."),
+    minConfidence: z
+        .number()
+        .min(0)
+        .max(1)
+        .optional()
+        .describe("Drop edges below this confidence. Default 0.7."),
+    relationTypes: z
+        .array(z.string())
+        .optional()
+        .describe("Filter: CALLS, IMPORTS, EXTENDS, IMPLEMENTS, METHOD_OVERRIDES, METHOD_IMPLEMENTS, HAS_METHOD, HAS_PROPERTY, ACCESSES. Default: the first 8."),
+    includeTests: z
+        .boolean()
+        .optional()
+        .describe("When true, test-file dependents are counted. Default false — test nodes are filtered out."),
+    ...repoArgShape,
+};
+export async function runImpact(ctx, args) {
+    const call = await withStore(ctx, args, async (store, resolved) => {
+        try {
+            const direction = args.direction ?? "upstream";
+            const q = {
+                target: args.target,
+                direction,
+            };
+            if (args.maxDepth !== undefined)
+                q.maxDepth = args.maxDepth;
+            if (args.minConfidence !== undefined)
+                q.minConfidence = args.minConfidence;
+            if (args.relationTypes && args.relationTypes.length > 0) {
+                q.relationTypes = args.relationTypes;
+            }
+            if (args.target_uid !== undefined && args.target_uid.length > 0) {
+                q.targetUid = args.target_uid;
+            }
+            if (args.file_path !== undefined && args.file_path.length > 0) {
+                q.filePath = args.file_path;
+            }
+            if (args.kind !== undefined && args.kind.length > 0)
+                q.kind = args.kind;
+            if (args.includeTests !== undefined)
+                q.includeTests = args.includeTests;
+            const result = await callRunImpact(store.graph, q);
+            if (result.ambiguous) {
+                const candidates = result.targetCandidates.slice(0, 10).map((c) => ({
+                    uid: c.id,
+                    name: c.name,
+                    filePath: c.filePath,
+                    kind: c.kind,
+                }));
+                const list = candidates
+                    .map((c, i) => `${i + 1}. [${c.kind}] ${c.name} — ${c.filePath}  (${c.uid})`)
+                    .join("\n");
+                return toolError("INVALID_INPUT", `Target "${args.target}" matched ${result.targetCandidates.length} symbols. Re-call with target_uid, file_path, or kind.\n${list}`, "pass target_uid from one of the listed candidates, or narrow with file_path/kind");
+            }
+            const chosen = result.chosenTarget;
+            const chosenLabel = chosen ? `${chosen.name} [${chosen.kind}]` : args.target;
+            const confidenceBreakdown = computeConfidenceBreakdown(result.traversedEdges);
+            const cochanges = chosen ? await fetchCochangesForFile(store.temporal, chosen.filePath) : [];
+            const byDepthMap = buildByDepthMap(result.byDepth);
+            const affectedProcesses = mapProcesses(result.affectedProcesses);
+            const affectedModules = mapModules(result.affectedModules);
+            const impactedCount = result.totalAffected;
+            const lines = [];
+            lines.push(`Impact for ${chosenLabel} (${direction}, depth≤${q.maxDepth ?? 3})`);
+            lines.push(`Risk: ${result.risk} (${impactedCount} impacted)`);
+            lines.push(`Summary: ${byDepthMap[1]?.length ?? 0} direct, ${affectedProcesses.length} process(es), ${affectedModules.length} module(s)`);
+            lines.push(`Confidence: ${confidenceBreakdown.confirmed} confirmed, ` +
+                `${confidenceBreakdown.heuristic} heuristic, ` +
+                `${confidenceBreakdown.unknown} unknown`);
+            for (const bucket of result.byDepth) {
+                lines.push(`d=${bucket.depth} (${bucket.nodes.length}):`);
+                for (const n of bucket.nodes.slice(0, 20)) {
+                    lines.push(`  • ${n.name} [${n.kind}] via ${n.viaRelation} — ${n.filePath || "(no file)"}`);
+                }
+                if (bucket.nodes.length > 20) {
+                    lines.push(`  … ${bucket.nodes.length - 20} more`);
+                }
+            }
+            if (affectedProcesses.length > 0) {
+                lines.push(`Affected processes (${affectedProcesses.length}):`);
+                for (const p of affectedProcesses) {
+                    lines.push(`  ⊿ ${p.label} — ${p.entryPointFile}`);
+                }
+            }
+            if (affectedModules.length > 0) {
+                lines.push(`Affected modules (${affectedModules.length}):`);
+                for (const m of affectedModules) {
+                    lines.push(`  ⊡ ${m.name} [${m.impact}] — ${m.hits} hit(s)`);
+                }
+            }
+            if (cochanges.length > 0) {
+                lines.push(`Files often edited together with this one (by lift) — git history, NOT call dependencies (${cochanges.length}):`);
+                for (const p of cochanges) {
+                    lines.push(`  ⇌ ${p.file} [lift=${p.lift.toFixed(2)}, co-commits=${p.cocommitCount}, last=${p.lastCocommitAt}]`);
+                }
+            }
+            if (result.hint)
+                lines.push(`Hint: ${result.hint}`);
+            const next = [];
+            const d1 = byDepthMap[1]?.length ?? 0;
+            if (d1 > 0) {
+                next.push("review d=1 nodes first — they will definitely break");
+                next.push("call `context` on each d=1 node to craft targeted tests");
+            }
+            else {
+                next.push("no direct dependents — this change looks safe");
+            }
+            if (confidenceBreakdown.heuristic + confidenceBreakdown.unknown >
+                confidenceBreakdown.confirmed) {
+                next.push("blast radius rests mostly on unconfirmed edges — treat the risk band as a lower bound and probe heuristic callers manually");
+            }
+            return withNextSteps(lines.join("\n"), {
+                target: chosen
+                    ? { id: chosen.id, name: chosen.name, kind: chosen.kind, filePath: chosen.filePath }
+                    : null,
+                direction,
+                risk: result.risk,
+                impactedCount,
+                byDepth: byDepthMap,
+                affected_processes: affectedProcesses,
+                affected_modules: affectedModules,
+                confidenceBreakdown,
+                traversedEdges: result.traversedEdges,
+                cochanges,
+                ambiguous: false,
+            }, next, stalenessFromMeta(resolved.meta));
+        }
+        catch (err) {
+            return toolErrorFromUnknown(err);
+        }
+    });
+    return toToolResult(call);
+}
+export function registerImpactTool(server, ctx) {
+    server.registerTool("impact", {
+        title: "Change-impact blast radius",
+        description: "Walk the graph from a target symbol and group dependents by traversal depth. Depth-1 nodes will definitely break if the target's contract changes; depth-2 very likely; depth-3+ transitive. Returns a risk band (LOW/MEDIUM/HIGH/CRITICAL) derived from impactedCount + process count, plus `byDepth` groups, `affected_processes`, `affected_modules`, and a `confidenceBreakdown` (confirmed / heuristic / unknown) tallying the provenance tier of every edge traversed — low-risk verdicts are only trustworthy when `heuristic` and `unknown` are small relative to `confirmed`. Ambiguous names return an INVALID_INPUT error with a candidate list so the caller can re-invoke with `target_uid`, `file_path`, or `kind`. A side-section `cochanges` field lists files historically co-edited with the target's enclosing file, ranked by lift. These come from git history, not the call graph, and MUST NOT be mixed into the impactedNodes list.",
+        inputSchema: ImpactInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async (args) => fromToolResult(await runImpact(ctx, args)));
+}
+/**
+ * Re-shape the analysis-layer `byDepth` array into the `{1: [...], 2: [...]}`
+ * map the MCP contract exposes. The array form is kept for text rendering;
+ * the map form is what agents consume programmatically.
+ */
+function buildByDepthMap(buckets) {
+    const out = {};
+    for (const b of buckets) {
+        out[b.depth] = [...b.nodes];
+    }
+    return out;
+}
+function mapProcesses(procs) {
+    return procs.map((p) => ({ id: p.id, label: p.name, entryPointFile: p.entryPointFile }));
+}
+function mapModules(mods) {
+    return mods.map((m) => ({ name: m.name, hits: m.hits, impact: m.impact }));
+}
+/**
+ * Side-channel lookup for the `cochanges` section of the impact response.
+ * Cochange is a git-history signal and must not be mixed into the call-graph
+ * blast radius — we fetch it independently and surface it as its own field.
+ */
+async function fetchCochangesForFile(temporal, file) {
+    if (file.length === 0)
+        return [];
+    const rows = await temporal.lookupCochangesForFile(file, { limit: 10 });
+    const out = [];
+    for (const r of rows) {
+        const partner = r.sourceFile === file ? r.targetFile : r.sourceFile;
+        out.push({
+            file: partner,
+            cocommitCount: r.cocommitCount,
+            lift: r.lift,
+            lastCocommitAt: r.lastCocommitAt,
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=impact.js.map

package/dist/tools/impact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact.js","sourceRoot":"","sources":["../../src/tools/impact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,YAAY,EAGZ,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AASrB,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,4EAA4E,CAAC;IACzF,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,mFAAmF,CAAC;IAChG,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;IACxF,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,2FAA2F,CAC5F;IACH,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;SACxC,QAAQ,EAAE;SACV,QAAQ,CACP,gIAAgI,CACjI;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC/F,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,6IAA6I,CAC9I;IACH,YAAY,EAAE,CAAC;SACZ,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,2FAA2F,CAC5F;IACH,GAAG,YAAY;CAChB,CAAC;AAgBF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAgB,EAAE,IAAgB;IAChE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC;YAC/C,MAAM,CAAC,GAUH;gBACF,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS;aACV,CAAC;YACF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAAE,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC5D,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;gBAAE,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YAC3E,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YACvC,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;YAChC,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;YAC9B,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACxE,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;gBAAE,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YAExE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAEnD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClE,GAAG,EAAE,CAAC,CAAC,EAAE;oBACT,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC,CAAC;gBACJ,MAAM,IAAI,GAAG,UAAU;qBACpB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC;qBAC5E,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,SAAS,CACd,eAAe,EACf,WAAW,IAAI,CAAC,MAAM,aAAa,MAAM,CAAC,gBAAgB,CAAC,MAAM,2DAA2D,IAAI,EAAE,EAClI,kFAAkF,CACnF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;YACnC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7E,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACjE,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YAE3C,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,cAAc,WAAW,KAAK,SAAS,WAAW,CAAC,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC;YACjF,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,KAAK,aAAa,YAAY,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,CACR,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,YAAY,iBAAiB,CAAC,MAAM,iBAAiB,eAAe,CAAC,MAAM,YAAY,CAC9H,CAAC;YACF,KAAK,CAAC,IAAI,CACR,eAAe,mBAAmB,CAAC,SAAS,cAAc;gBACxD,GAAG,mBAAmB,CAAC,SAAS,cAAc;gBAC9C,GAAG,mBAAmB,CAAC,OAAO,UAAU,CAC3C,CAAC;YACF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC1D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;oBAC1C,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,QAAQ,IAAI,WAAW,EAAE,CAChF,CAAC;gBACJ,CAAC;gBACD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,uBAAuB,iBAAiB,CAAC,MAAM,IAAI,CAAC,CAAC;gBAChE,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;oBAClC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,qBAAqB,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC5D,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CACR,6FAA6F,SAAS,CAAC,MAAM,IAAI,CAClH,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,aAAa,UAAU,CAAC,CAAC,cAAc,GAAG,CACrG,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAEpD,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;YACtC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBACjE,IAAI,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAC7D,CAAC;YACD,IACE,mBAAmB,CAAC,SAAS,GAAG,mBAAmB,CAAC,OAAO;gBAC3D,mBAAmB,CAAC,SAAS,EAC7B,CAAC;gBACD,IAAI,CAAC,IAAI,CACP,4HAA4H,CAC7H,CAAC;YACJ,CAAC;YAED,OAAO,aAAa,CAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAChB;gBACE,MAAM,EAAE,MAAM;oBACZ,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACpF,CAAC,CAAC,IAAI;gBACR,SAAS;gBACT,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,aAAa;gBACb,OAAO,EAAE,UAAU;gBACnB,kBAAkB,EAAE,iBAAiB;gBACrC,gBAAgB,EAAE,eAAe;gBACjC,mBAAmB;gBACnB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS;gBACT,SAAS,EAAE,KAAK;aACjB,EACD,IAAI,EACJ,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,GAAgB;IACpE,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,65BAA65B;QAC/5B,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,OAAqC;IAErC,MAAM,GAAG,GAAyD,EAAE,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,KAAiC;IAEjC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,UAAU,CAAC,IAA+B;IAKjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAAwB,EACxB,IAAY;IAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/license-audit.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `license_audit` — classify Dependency nodes by license risk tier.
+ *
+ * Walks every Dependency node the ingestion pipeline produced and sorts
+ * each one into three buckets:
+ *
+ *   - copyleft    — names matching GPL/AGPL/SSPL/EUPL/CPAL/OSL/RPL. These
+ *                   are redistribution-contagious licenses that the host
+ *                   project (Apache-2.0) cannot safely link against.
+ *   - proprietary — explicit "PROPRIETARY" declarations.
+ *   - unknown     — missing licenses or the `"UNKNOWN"` sentinel emitted
+ *                   by the dependency phase when a manifest parser could
+ *                   not recover a declared license. A later release will
+ *                   populate real licenses from ecosystem metadata;
+ *                   until then most audits WILL return tier=WARN.
+ *
+ * Tier assignment:
+ *   BLOCK  — any copyleft OR any proprietary dep.
+ *   WARN   — no copyleft/proprietary, at least one unknown.
+ *   OK     — nothing flagged.
+ *
+ * Annotations are {readOnly, closedWorld, idempotent} — the tool only
+ * queries the graph.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext, type ToolResult } from "./shared.js";
+interface LicenseAuditArgs {
+    readonly repo?: string | undefined;
+    readonly repo_uri?: string | undefined;
+}
+export declare function runLicenseAudit(ctx: ToolContext, args: LicenseAuditArgs): Promise<ToolResult>;
+export declare function registerLicenseAuditTool(server: McpServer, ctx: ToolContext): void;
+export {};
+//# sourceMappingURL=license-audit.d.ts.map

package/dist/tools/license-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-audit.d.ts","sourceRoot":"","sources":["../../src/tools/license-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,aAAa,CAAC;AAMrB,UAAU,gBAAgB;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,UAAU,CAAC,CAkFrB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAiBlF"}