@opencodehub/mcp 0.1.0

package/dist/tools/list-findings.js

@@ -0,0 +1,129 @@
+/**
+ * `list_findings` — enumerate Finding nodes for an indexed repo.
+ *
+ * Finding nodes are produced by `codehub ingest-sarif` (or `codehub scan`
+ * via its built-in ingestion step). Every node carries `scanner_id`,
+ * `rule_id`, `severity`, and `message` plus a flat `properties_bag`
+ * JSON string for the scanner's custom properties.
+ *
+ * Filters (all optional):
+ *   - `severity`  — restrict to one SARIF level.
+ *   - `scanner`   — restrict to a single scanner id.
+ *   - `ruleId`    — restrict to a single rule id.
+ *   - `filePath`  — substring match against `file_path`.
+ *   - `limit`     — row cap (default 500, max 10_000).
+ */
+// biome-ignore-all lint/complexity/useLiteralKeys: dot-access disallowed on Record index signatures
+import { z } from "zod";
+import { toolErrorFromUnknown } from "../error-envelope.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { stalenessFromMeta } from "../staleness.js";
+import { fromToolResult, repoArgShape, toToolResult, withStore, } from "./shared.js";
+const ListFindingsInput = {
+    ...repoArgShape,
+    severity: z
+        .enum(["error", "warning", "note", "none"])
+        .optional()
+        .describe("Restrict results to a single SARIF severity level."),
+    scanner: z
+        .string()
+        .optional()
+        .describe("Restrict results to a single scanner id (e.g. 'semgrep', 'osv-scanner')."),
+    ruleId: z.string().optional().describe("Restrict results to a single rule id."),
+    filePath: z
+        .string()
+        .optional()
+        .describe("Substring filter on the source file path of the finding."),
+    limit: z
+        .number()
+        .int()
+        .positive()
+        .max(10_000)
+        .optional()
+        .describe("Maximum number of findings to return (default 500, max 10000)."),
+};
+export async function runListFindings(ctx, args) {
+    const limit = args.limit ?? 500;
+    const call = await withStore(ctx, args, async (store, resolved) => {
+        try {
+            // listFindings narrows by severity / ruleId at the storage tier.
+            // scanner / filePath substring are applied in TS post-finder.
+            const findingsOpts = { limit };
+            if (args.severity !== undefined &&
+                (args.severity === "note" || args.severity === "warning" || args.severity === "error")) {
+                findingsOpts.severity = [args.severity];
+            }
+            if (args.ruleId !== undefined)
+                findingsOpts.ruleId = args.ruleId;
+            const all = await store.graph.listFindings(findingsOpts);
+            const filtered = all.filter((f) => {
+                if (args.severity === "none" && f.severity !== "none")
+                    return false;
+                if (args.scanner !== undefined && f.scannerId !== args.scanner)
+                    return false;
+                if (args.filePath !== undefined && !f.filePath.includes(args.filePath))
+                    return false;
+                return true;
+            });
+            const rows = filtered.map((f) => {
+                const base = {
+                    id: f.id,
+                    scanner: stringOr(f.scannerId, "unknown"),
+                    ruleId: stringOr(f.ruleId, ""),
+                    severity: stringOr(f.severity, "note"),
+                    message: stringOr(f.message, ""),
+                    filePath: stringOr(f.filePath, ""),
+                    properties: f.propertiesBag,
+                    ...(typeof f.startLine === "number" && Number.isFinite(f.startLine)
+                        ? { startLine: f.startLine }
+                        : {}),
+                    ...(typeof f.endLine === "number" && Number.isFinite(f.endLine)
+                        ? { endLine: f.endLine }
+                        : {}),
+                };
+                return base;
+            });
+            const header = `Findings (${rows.length}) for ${resolved.name}${args.severity ? ` · severity=${args.severity}` : ""}${args.scanner ? ` · scanner=${args.scanner}` : ""}${args.ruleId ? ` · rule=${args.ruleId}` : ""}${args.filePath ? ` · filePath~${args.filePath}` : ""}:`;
+            const body = rows.length === 0
+                ? "(no findings matched — run `codehub scan` or `codehub ingest-sarif <log>` to populate Finding nodes)"
+                : rows
+                    .map((f) => `- [${f.severity}] ${f.scanner}:${f.ruleId} at ${f.filePath}${f.startLine !== undefined ? `:${f.startLine}` : ""}${f.message ? ` — ${f.message}` : ""}`)
+                    .join("\n");
+            const next = rows.length === 0
+                ? [
+                    "run `codehub scan` in the target repo to generate findings",
+                    "call `list_repos` to confirm the repo is indexed",
+                ]
+                : [
+                    "call `context` with a finding's file path for caller/callee neighbours",
+                    "call `sql` with 'SELECT * FROM relations WHERE type = ''FOUND_IN''' for raw edges",
+                ];
+            return withNextSteps(`${header}\n${body}`, { findings: rows, total: rows.length }, next, stalenessFromMeta(resolved.meta));
+        }
+        catch (err) {
+            return toolErrorFromUnknown(err);
+        }
+    });
+    return toToolResult(call);
+}
+export function registerListFindingsTool(server, ctx) {
+    server.registerTool("list_findings", {
+        title: "List SARIF findings",
+        description: "Enumerate static-analysis findings stored as Finding nodes, filtered by severity, scanner, rule id, or file path substring. Findings are populated by `codehub ingest-sarif` or `codehub scan`.",
+        inputSchema: ListFindingsInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            openWorldHint: false,
+            idempotentHint: true,
+        },
+    }, async (args) => fromToolResult(await runListFindings(ctx, args)));
+}
+function stringOr(v, fallback) {
+    if (typeof v === "string")
+        return v;
+    if (typeof v === "number" || typeof v === "boolean")
+        return String(v);
+    return fallback;
+}
+//# sourceMappingURL=list-findings.js.map

package/dist/tools/list-findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-findings.js","sourceRoot":"","sources":["../../src/tools/list-findings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,oGAAoG;AAGpG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,YAAY,EAGZ,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,MAAM,iBAAiB,GAAG;IACxB,GAAG,YAAY;IACf,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;SAC1C,QAAQ,EAAE;SACV,QAAQ,CAAC,oDAAoD,CAAC;IACjE,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0EAA0E,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC/E,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;IACvE,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,MAAM,CAAC;SACX,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;CAC9E,CAAC;AAwBF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAgB,EAChB,IAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,iEAAiE;YACjE,8DAA8D;YAC9D,MAAM,YAAY,GAId,EAAE,KAAK,EAAE,CAAC;YACd,IACE,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,EACtF,CAAC;gBACD,YAAY,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAEzD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;oBAAE,OAAO,KAAK,CAAC;gBACpE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO;oBAAE,OAAO,KAAK,CAAC;gBAC7E,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACrF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,GAAiB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5C,MAAM,IAAI,GAAe;oBACvB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC;oBACzC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC9B,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC;oBACtC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;oBAChC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAClC,UAAU,EAAE,CAAC,CAAC,aAAa;oBAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;wBACjE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;wBAC5B,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;wBAC7D,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;wBACxB,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,aAAa,IAAI,CAAC,MAAM,SAAS,QAAQ,CAAC,IAAI,GAC3D,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EACnD,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GACjD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAC3C,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1D,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,CAAC;gBACf,CAAC,CAAC,sGAAsG;gBACxG,CAAC,CAAC,IAAI;qBACD,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,QAAQ,GACzD,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAClD,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C;qBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YAEpB,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,CAAC;gBACf,CAAC,CAAC;oBACE,4DAA4D;oBAC5D,kDAAkD;iBACnD;gBACH,CAAC,CAAC;oBACE,wEAAwE;oBACxE,mFAAmF;iBACpF,CAAC;YAER,OAAO,aAAa,CAClB,GAAG,MAAM,KAAK,IAAI,EAAE,EACpB,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EACtC,IAAI,EACJ,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAiB,EAAE,GAAgB;IAC1E,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,iMAAiM;QACnM,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/tools/list-repos.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `list_repos` — enumerate every repo registered under
+ * `~/.codehub/registry.json` with the stats recorded at index time.
+ *
+ * This is the discovery entry point: agents unfamiliar with the user's
+ * environment should call this first and then route every subsequent
+ * tool call through one of the returned `name` values.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext, type ToolResult } from "./shared.js";
+/**
+ * Transport-agnostic implementation. The MCP-registered handler adapts
+ * the return value into the SDK's `CallToolResult`.
+ */
+export declare function runListRepos(ctx: ToolContext): Promise<ToolResult>;
+export declare function registerListReposTool(server: McpServer, ctx: ToolContext): void;
+//# sourceMappingURL=list-repos.d.ts.map

package/dist/tools/list-repos.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-repos.d.ts","sourceRoot":"","sources":["../../src/tools/list-repos.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAgB,MAAM,aAAa,CAAC;AAW9F;;;GAGG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAuCxE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAgB/E"}

package/dist/tools/list-repos.js

@@ -0,0 +1,63 @@
+/**
+ * `list_repos` — enumerate every repo registered under
+ * `~/.codehub/registry.json` with the stats recorded at index time.
+ *
+ * This is the discovery entry point: agents unfamiliar with the user's
+ * environment should call this first and then route every subsequent
+ * tool call through one of the returned `name` values.
+ */
+import { toolErrorFromUnknown } from "../error-envelope.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { readRegistry } from "../repo-resolver.js";
+import { fromToolResult, toToolResult } from "./shared.js";
+/**
+ * Transport-agnostic implementation. The MCP-registered handler adapts
+ * the return value into the SDK's `CallToolResult`.
+ */
+export async function runListRepos(ctx) {
+    try {
+        const opts = ctx.home !== undefined ? { home: ctx.home } : {};
+        const reg = await readRegistry(opts);
+        const repos = Object.keys(reg)
+            .sort()
+            .map((name) => {
+            const e = reg[name];
+            if (!e)
+                throw new Error(`missing entry for ${name}`);
+            return {
+                name: e.name,
+                path: e.path,
+                lastCommit: e.lastCommit ?? null,
+                indexedAt: e.indexedAt,
+                nodeCount: e.nodeCount,
+                edgeCount: e.edgeCount,
+            };
+        });
+        const header = `Indexed repos (${repos.length}):`;
+        const body = repos.length === 0
+            ? "(none — run `codehub analyze` in a repo root to create an index)"
+            : repos
+                .map((r) => `- ${r.name}\n  path: ${r.path}\n  indexedAt: ${r.indexedAt}\n  nodes: ${r.nodeCount}, edges: ${r.edgeCount}`)
+                .join("\n");
+        const next = repos.length === 0
+            ? ["run `codehub analyze` on a git repo to index it"]
+            : [`call \`query\` with a search phrase (repo="${repos[0]?.name ?? ""}") to explore`];
+        return toToolResult(withNextSteps(`${header}\n${body}`, { repos }, next));
+    }
+    catch (err) {
+        return toToolResult(toolErrorFromUnknown(err));
+    }
+}
+export function registerListReposTool(server, ctx) {
+    server.registerTool("list_repos", {
+        title: "List indexed repos",
+        description: "Enumerate every repo that has been indexed by codehub on this machine. Returns name, on-disk path, last-seen commit, index timestamp, and node/edge counts per repo. Call this before any repo-scoped tool when you do not already know the repo name.",
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async () => fromToolResult(await runListRepos(ctx)));
+}
+//# sourceMappingURL=list-repos.js.map

package/dist/tools/list-repos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-repos.js","sourceRoot":"","sources":["../../src/tools/list-repos.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAqC,YAAY,EAAE,MAAM,aAAa,CAAC;AAW9F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAgB;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,KAAK,GAAkB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAC1C,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;gBAChC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,kBAAkB,KAAK,CAAC,MAAM,IAAI,CAAC;QAClD,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,CAAC;YAChB,CAAC,CAAC,kEAAkE;YACpE,CAAC,CAAC,KAAK;iBACF,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC,SAAS,YAAY,CAAC,CAAC,SAAS,EAAE,CAChH;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpB,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,CAAC;YAChB,CAAC,CAAC,CAAC,iDAAiD,CAAC;YACrD,CAAC,CAAC,CAAC,8CAA8C,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,eAAe,CAAC,CAAC;QAE1F,OAAO,YAAY,CAAC,aAAa,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,YAAY,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,GAAgB;IACvE,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,wPAAwP;QAC1P,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;AACJ,CAAC"}

package/dist/tools/owners.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `owners` MCP tool — return ranked `OWNED_BY` contributors for a node.
+ *
+ * Accepts any node id (File, Symbol, Community) and walks the outgoing
+ * `OWNED_BY` edges in confidence-descending order. Each row includes the
+ * contributor's email hash, display name, the raw line share (`weight`),
+ * and, when present in the graph, the plain email (opt-in; hashed by
+ * default per the ownership phase's privacy rules).
+ *
+ * Read-only, idempotent, closed-world.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext, type ToolResult } from "./shared.js";
+interface OwnersArgs {
+    readonly target: string;
+    readonly repo?: string | undefined;
+    readonly repo_uri?: string | undefined;
+    readonly limit?: number | undefined;
+}
+export declare function runOwners(ctx: ToolContext, args: OwnersArgs): Promise<ToolResult>;
+export declare function registerOwnersTool(server: McpServer, ctx: ToolContext): void;
+export {};
+//# sourceMappingURL=owners.d.ts.map

package/dist/tools/owners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owners.d.ts","sourceRoot":"","sources":["../../src/tools/owners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,aAAa,CAAC;AA0BrB,UAAU,UAAU;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAgEvF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAiB5E"}

package/dist/tools/owners.js

@@ -0,0 +1,103 @@
+/**
+ * `owners` MCP tool — return ranked `OWNED_BY` contributors for a node.
+ *
+ * Accepts any node id (File, Symbol, Community) and walks the outgoing
+ * `OWNED_BY` edges in confidence-descending order. Each row includes the
+ * contributor's email hash, display name, the raw line share (`weight`),
+ * and, when present in the graph, the plain email (opt-in; hashed by
+ * default per the ownership phase's privacy rules).
+ *
+ * Read-only, idempotent, closed-world.
+ */
+// biome-ignore-all lint/complexity/useLiteralKeys: dot-access disallowed on Record index signatures
+import { z } from "zod";
+import { toolErrorFromUnknown } from "../error-envelope.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { stalenessFromMeta } from "../staleness.js";
+import { fromToolResult, repoArgShape, toToolResult, withStore, } from "./shared.js";
+const OwnersInput = {
+    target: z
+        .string()
+        .min(1)
+        .describe("Node id of a File, Symbol, or Community to query for ownership. Must be a fully-qualified node id (e.g. 'File:src/app.ts:src/app.ts')."),
+    ...repoArgShape,
+    limit: z
+        .number()
+        .int()
+        .positive()
+        .max(100)
+        .optional()
+        .describe("Maximum number of contributors to return (default 20, max 100)."),
+};
+export async function runOwners(ctx, args) {
+    const limit = args.limit ?? 20;
+    const call = await withStore(ctx, args, async (store, resolved) => {
+        try {
+            const graph = store.graph;
+            const ownedBy = await graph.listEdgesByType("OWNED_BY", { fromIds: [args.target] });
+            const sorted = [...ownedBy].sort((a, b) => {
+                const ac = a.confidence ?? 0;
+                const bc = b.confidence ?? 0;
+                if (ac !== bc)
+                    return bc - ac;
+                return a.to < b.to ? -1 : a.to > b.to ? 1 : 0;
+            });
+            const sliced = sorted.slice(0, limit);
+            const contributors = await graph.listNodesByKind("Contributor");
+            const contribById = new Map();
+            for (const c of contributors)
+                contribById.set(c.id, c);
+            const owners = [];
+            for (const edge of sliced) {
+                const c = contribById.get(edge.to);
+                if (c === undefined)
+                    continue;
+                const plain = typeof c.emailPlain === "string" ? c.emailPlain : "";
+                owners.push({
+                    email: plain,
+                    emailHash: c.emailHash,
+                    name: c.name,
+                    weight: edge.confidence ?? 0,
+                });
+            }
+            const header = `Owners for ${args.target} in ${resolved.name} (${owners.length}):`;
+            const body = owners.length === 0
+                ? "(no OWNED_BY edges for this target — either the target id is unknown or the ownership phase has not run. Re-index with `codehub analyze --force`.)"
+                : owners
+                    .map((o) => {
+                    const id = o.email.length > 0 ? o.email : `sha256:${o.emailHash.slice(0, 10)}…`;
+                    const name = o.name.length > 0 ? o.name : "unknown";
+                    return `- ${name} <${id}>  weight=${o.weight.toFixed(3)}`;
+                })
+                    .join("\n");
+            const next = owners.length === 0
+                ? [
+                    "call `query` with the target's name to check it is indexed",
+                    "re-index with `codehub analyze --force` to emit OWNED_BY edges",
+                ]
+                : [
+                    "call `context` on the top owner to see what else they maintain",
+                    "call `impact` on the target to correlate ownership with blast radius",
+                ];
+            return withNextSteps(`${header}\n${body}`, { owners, total: owners.length }, next, stalenessFromMeta(resolved.meta));
+        }
+        catch (err) {
+            return toolErrorFromUnknown(err);
+        }
+    });
+    return toToolResult(call);
+}
+export function registerOwnersTool(server, ctx) {
+    server.registerTool("owners", {
+        title: "List owners for a node",
+        description: "Enumerate the ranked set of Contributors linked to a node via OWNED_BY edges. Source is git blame; emails are SHA-256 hashed by default (plain emails only when ingestion ran with --plain-emails).",
+        inputSchema: OwnersInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            openWorldHint: false,
+            idempotentHint: true,
+        },
+    }, async (args) => fromToolResult(await runOwners(ctx, args)));
+}
+//# sourceMappingURL=owners.js.map

package/dist/tools/owners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owners.js","sourceRoot":"","sources":["../../src/tools/owners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,oGAAoG;AAGpG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,YAAY,EAGZ,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,wIAAwI,CACzI;IACH,GAAG,YAAY;IACf,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC;AAgBF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAgB,EAAE,IAAgB;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACxC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;gBAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;gBAC7B,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC9B,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YAChE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;YACrE,KAAK,MAAM,CAAC,IAAI,YAAY;gBAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAe,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,SAAS;oBAAE,SAAS;gBAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,KAAK;oBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,cAAc,IAAI,CAAC,MAAM,OAAO,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC;YACnF,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,oJAAoJ;gBACtJ,CAAC,CAAC,MAAM;qBACH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;oBAChF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;oBACpD,OAAO,KAAK,IAAI,KAAK,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEpB,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC;oBACE,4DAA4D;oBAC5D,gEAAgE;iBACjE;gBACH,CAAC,CAAC;oBACE,gEAAgE;oBAChE,sEAAsE;iBACvE,CAAC;YAER,OAAO,aAAa,CAClB,GAAG,MAAM,KAAK,IAAI,EAAE,EACpB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAChC,IAAI,EACJ,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,GAAgB;IACpE,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,qMAAqM;QACvM,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC"}

package/dist/tools/pack-codebase.d.ts

@@ -0,0 +1,76 @@
+/**
+ * `pack_codebase` — produce a snapshot of a registered repo for an LLM
+ * to consume.
+ *
+ * Two engines are supported via the `engine` input field:
+ *   - `pack` (DEFAULT) — `@opencodehub/pack`'s deterministic 9-item BOM
+ *     written to `<repo>/.codehub/packs/<packHash>/`. The BOM is what
+ *     downstream agents should consume — it carries skeleton + file-tree
+ *     + deps + ast-chunks + xrefs + findings + licenses + readme +
+ *     optional embeddings.parquet, all bound by a manifest with a
+ *     content-addressed `pack_hash`.
+ *   - `repomix` — the legacy single-file XML/Markdown snapshot under
+ *     `<repo>/.codehub/pack/repo.<ext>`. Retained as an opt-in for one
+ *     milestone (drop deferred to M7 per spec 005 Q-DELTA-6). Operators
+ *     who relied on repomix for raw repo packing keep a stable path.
+ *
+ * For relational/structural questions about the repo, prefer
+ * `query`/`context`/`impact` — those are backed by the SCIP graph and
+ * give graph-aware answers without consuming context window.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { type ToolContext, type ToolResult } from "./shared.js";
+/** Default token budget passed to the pack engine when `budget` is omitted. */
+export declare const DEFAULT_PACK_BUDGET = 100000;
+/** Default tokenizer identifier when `tokenizer` is omitted. */
+export declare const DEFAULT_PACK_TOKENIZER = "openai:o200k_base@tiktoken-0.8.0";
+declare const PackInput: z.ZodObject<{
+    repo: z.ZodOptional<z.ZodString>;
+    repo_uri: z.ZodOptional<z.ZodString>;
+    engine: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        pack: "pack";
+        repomix: "repomix";
+    }>>>;
+    budget: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    tokenizer: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    style: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        xml: "xml";
+        markdown: "markdown";
+        json: "json";
+        plain: "plain";
+    }>>>;
+    compress: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    removeComments: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+type PackInput = z.infer<typeof PackInput>;
+/**
+ * Test seam — overrides for the engine implementations. Production
+ * callers leave these unset; tests inject `runCodePack` / `runRepomix`
+ * stubs to avoid native bindings + npx network calls.
+ */
+export interface PackCodebaseDeps {
+    readonly _runPackEngine?: (args: {
+        repo: string;
+        budget: number;
+        tokenizer: string;
+    }) => Promise<{
+        outDir: string;
+        packHash: string;
+        bomItemCount: number;
+    }>;
+    readonly _runRepomixEngine?: (args: {
+        repoPath: string;
+        style: "xml" | "markdown" | "json" | "plain";
+        compress: boolean;
+        removeComments: boolean;
+    }) => Promise<{
+        outputPath: string;
+        bytes: number;
+        durationMs: number;
+    }>;
+}
+export declare function runPackCodebase(ctx: ToolContext, input: PackInput, deps?: PackCodebaseDeps): Promise<ToolResult>;
+export declare function registerPackCodebaseTool(server: McpServer, ctx: ToolContext): void;
+export {};
+//# sourceMappingURL=pack-codebase.d.ts.map

package/dist/tools/pack-codebase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-codebase.d.ts","sourceRoot":"","sources":["../../src/tools/pack-codebase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAgB,MAAM,aAAa,CAAC;AAI9F,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,SAAU,CAAC;AAE3C,gEAAgE;AAChE,eAAO,MAAM,sBAAsB,qCAAqC,CAAC;AAEzE,QAAA,MAAM,SAAS;;;;;;;;;;;;;;;;;iBAoDb,CAAC;AACH,KAAK,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAE3C;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAC/F,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAClC,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;QAC7C,QAAQ,EAAE,OAAO,CAAC;QAClB,cAAc,EAAE,OAAO,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1E;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,WAAW,EAChB,KAAK,EAAE,SAAS,EAChB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAoBrB;AA6MD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAsBlF"}