@opencodehub/mcp 0.1.0

package/dist/tools/sql.js

@@ -0,0 +1,222 @@
+/**
+ * `sql` — raw read-only SQL / Cypher over the local graph store.
+ *
+ * The tool accepts either `sql` (DuckDB backend) or `cypher` (graph-db
+ * backend, `CODEHUB_STORE=lbug`) — exactly one per call. The read-only
+ * guards (`assertReadOnlySql` / `assertReadOnlyCypher`) reject any write
+ * verb before the statement reaches the underlying engine.
+ *
+ * - SQL path: `SqlGuardError` on violation → INVALID_INPUT envelope.
+ * - Cypher path: `CypherGuardError` on violation → INVALID_INPUT envelope.
+ * - Cypher path without `CODEHUB_STORE=lbug` → INVALID_INPUT with a
+ *   "cypher unavailable" hint.
+ * - Both `sql` and `cypher` supplied → INVALID_INPUT "choose one".
+ *
+ * A default 5 s timeout caps runaway queries (DuckDB itself has no SQL
+ * timeout — the adapter interrupts via a JS timer; the graph-db adapter
+ * honours `timeoutMs` through its pool).
+ *
+ * The tool description embeds the node-kind and relation-type vocabulary
+ * so agents can author correct queries without a separate schema probe.
+ */
+import { NODE_KINDS, RELATION_TYPES } from "@opencodehub/core-types";
+import { CypherGuardError, SqlGuardError } from "@opencodehub/storage";
+import { z } from "zod";
+import { toolError, toolErrorFromUnknown } from "../error-envelope.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { stalenessFromMeta } from "../staleness.js";
+import { fromToolResult, repoArgShape, toToolResult, withStore, } from "./shared.js";
+const SqlInput = {
+    sql: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Read-only SQL statement (DuckDB backend). INSERT/UPDATE/DELETE/DDL are rejected by the guard. Provide exactly one of `sql` or `cypher`."),
+    cypher: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Read-only Cypher statement (graph-db backend; requires `CODEHUB_STORE=lbug`). CREATE/DELETE/SET/MERGE/REMOVE/DROP are rejected by the guard. Provide exactly one of `sql` or `cypher`."),
+    ...repoArgShape,
+    timeout_ms: z
+        .number()
+        .int()
+        .min(100)
+        .max(60_000)
+        .optional()
+        .describe("Per-statement timeout in milliseconds. Default 5000, max 60000."),
+};
+const SCHEMA_HINT = [
+    "Tables: nodes(id, kind, name, file_path, start_line, end_line, is_exported, signature, parameter_count, return_type, declared_type, owner, url, method, tool_name, content, content_hash, inferred_label, symbol_count, cohesion, keywords, entry_point_id, step_count, level, response_keys, description), relations(id, from_id, to_id, type, confidence, reason, step), embeddings(id, node_id, chunk_index, start_line, end_line, vector, content_hash), store_meta(id, schema_version, last_commit, indexed_at, node_count, edge_count, stats_json).",
+    `NodeKind values: ${NODE_KINDS.join(", ")}.`,
+    `RelationType values: ${RELATION_TYPES.join(", ")}.`,
+].join("\n");
+/**
+ * Determine the configured backend from the environment. Exposed as a
+ * thin indirection so tests can flip the env var mid-run without touching
+ * the tool surface.
+ */
+function isGraphDbBackend(env = process.env) {
+    return env["CODEHUB_STORE"] === "lbug";
+}
+export async function runSql(ctx, args) {
+    // Exactly-one-of input guard. The Zod schema marks both fields optional
+    // so we can emit a targeted error envelope rather than a schema-level
+    // rejection that might get aliased to a generic "invalid input" string.
+    const hasSql = typeof args.sql === "string" && args.sql.length > 0;
+    const hasCypher = typeof args.cypher === "string" && args.cypher.length > 0;
+    if (hasSql && hasCypher) {
+        return toToolResult(toolError("INVALID_INPUT", "provide exactly one of `sql` or `cypher`", "The sql tool accepts either a SQL statement (DuckDB backend) or a Cypher statement (graph-db backend), not both."));
+    }
+    if (!hasSql && !hasCypher) {
+        return toToolResult(toolError("INVALID_INPUT", "provide one of `sql` or `cypher`", "The sql tool requires exactly one of the two input fields."));
+    }
+    if (hasCypher && !isGraphDbBackend()) {
+        return toToolResult(toolError("INVALID_INPUT", "cypher unavailable without `CODEHUB_STORE=lbug`", "Set `CODEHUB_STORE=lbug` in the MCP server's environment to enable the graph-db backend. The default DuckDB backend only speaks SQL."));
+    }
+    const timeoutMs = args.timeout_ms ?? 5000;
+    // Exactly one of these is defined at this point; TypeScript cannot
+    // narrow the union through the `hasSql/hasCypher` booleans so we branch
+    // on `hasCypher` and assert the narrowed type locally.
+    const statement = hasCypher ? args.cypher : args.sql;
+    const isCypher = hasCypher;
+    const call = await withStore(ctx, args, async (store, resolved) => {
+        try {
+            // Apply the guard BEFORE the store call so the rejection message
+            // carries the guard's own context (SqlGuardError / CypherGuardError),
+            // and so the store never sees a write verb. The store's own readonly
+            // mode would also reject writes, but the guard produces a cleaner
+            // user-facing error.
+            //
+            // Routing: SQL → `temporal.exec()` (the `--sql` escape hatch on
+            // ITemporalStore); Cypher → `graph.execCypher` (the graph-only
+            // adapter's escape hatch). Tools that don't have the
+            // corresponding capability surface a clear error envelope.
+            let rawRows;
+            if (isCypher) {
+                const exec = store.graph.execCypher;
+                if (typeof exec !== "function") {
+                    return toolError("INVALID_INPUT", "cypher unavailable: graph adapter does not expose execCypher", "Set `CODEHUB_STORE=lbug` to enable the graph-db backend that exposes the Cypher escape hatch.");
+                }
+                rawRows = await exec.call(store.graph, statement);
+            }
+            else {
+                rawRows = await store.temporal.exec(statement, [], { timeoutMs });
+            }
+            // MCP serialises structuredContent via JSON, which cannot handle
+            // bigint values (DuckDB returns COUNT(*) etc. as bigint). Coerce
+            // every bigint to a plain number or string before handing the
+            // rows up the transport.
+            const rows = rawRows.map(sanitizeRowForJson);
+            const table = renderMarkdownTable(rows);
+            const lines = [
+                `Query returned ${rows.length} row(s).`,
+                rows.length === 0 ? "(no rows)" : table,
+            ];
+            return withNextSteps(lines.join("\n"), {
+                row_count: rows.length,
+                rows,
+                columns: rows.length > 0 ? Object.keys(rows[0]) : [],
+                dialect: isCypher ? "cypher" : "sql",
+            }, rows.length > 0
+                ? ["call `context` on a row's id column to drill into the graph"]
+                : ["broaden the WHERE clause or verify the NodeKind/RelationType filters"], stalenessFromMeta(resolved.meta));
+        }
+        catch (err) {
+            if (err instanceof SqlGuardError) {
+                return toolError("INVALID_INPUT", err.message, "Only SELECT-style queries are allowed. Remove DDL/DML keywords.");
+            }
+            if (err instanceof CypherGuardError) {
+                return toolError("INVALID_INPUT", err.message, "Only MATCH/RETURN/WITH/WHERE/ORDER BY/LIMIT/SKIP/UNWIND (and the QUERY_FTS_INDEX / QUERY_VECTOR_INDEX procedures) are allowed. Remove any CREATE/DELETE/SET/MERGE/REMOVE/DROP keywords.");
+            }
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes("timeout")) {
+                return toolError("RATE_LIMITED", msg, "Add a tighter WHERE clause or raise timeout_ms (max 60000).");
+            }
+            return toolErrorFromUnknown(err);
+        }
+    });
+    return toToolResult(call);
+}
+export function registerSqlTool(server, ctx) {
+    server.registerTool("sql", {
+        title: "Read-only SQL / Cypher over the code graph",
+        description: [
+            "Execute a read-only query against the local graph store. Supply EXACTLY ONE of `sql` (DuckDB backend, default) or `cypher` (graph-db backend, requires `CODEHUB_STORE=lbug`). Results are returned as a markdown table plus raw row objects. Use this for one-off questions that the higher-level tools don't cover — e.g. 'find every exported function in src/auth/'.",
+            "",
+            SCHEMA_HINT,
+        ].join("\n"),
+        inputSchema: SqlInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async (args) => fromToolResult(await runSql(ctx, args)));
+}
+function renderMarkdownTable(rows) {
+    const first = rows[0];
+    if (!first)
+        return "";
+    const cols = Object.keys(first);
+    const header = `| ${cols.join(" | ")} |`;
+    const divider = `| ${cols.map(() => "---").join(" | ")} |`;
+    const body = rows
+        .slice(0, 100)
+        .map((row) => `| ${cols.map((c) => formatCell(row[c])).join(" | ")} |`)
+        .join("\n");
+    const footer = rows.length > 100 ? `\n_(truncated — showing first 100 of ${rows.length} rows)_` : "";
+    return `${header}\n${divider}\n${body}${footer}`;
+}
+function formatCell(v) {
+    if (v === null || v === undefined)
+        return "";
+    if (typeof v === "string") {
+        // Escape pipes so the markdown table renders. Escape `\` first so a
+        // pre-existing `\` in the value cannot pair with the appended `\|` to
+        // form `\\|` (which renders as `\` + literal pipe instead of an
+        // escaped pipe — js/incomplete-sanitization).
+        return v.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\n/g, " ");
+    }
+    if (typeof v === "number" || typeof v === "boolean" || typeof v === "bigint") {
+        return String(v);
+    }
+    try {
+        return JSON.stringify(v);
+    }
+    catch {
+        return String(v);
+    }
+}
+/**
+ * Coerce BigInt values to numbers (when they fit) or decimal strings, so
+ * the row objects can round-trip through JSON for MCP transport.
+ */
+function sanitizeRowForJson(row) {
+    const out = {};
+    for (const [k, v] of Object.entries(row)) {
+        out[k] = sanitizeValueForJson(v);
+    }
+    return out;
+}
+function sanitizeValueForJson(v) {
+    if (typeof v === "bigint") {
+        // Safe number range → plain number; otherwise preserve as string.
+        if (v >= BigInt(Number.MIN_SAFE_INTEGER) && v <= BigInt(Number.MAX_SAFE_INTEGER)) {
+            return Number(v);
+        }
+        return v.toString();
+    }
+    if (Array.isArray(v))
+        return v.map(sanitizeValueForJson);
+    if (v !== null && typeof v === "object") {
+        const out = {};
+        for (const [k, val] of Object.entries(v)) {
+            out[k] = sanitizeValueForJson(val);
+        }
+        return out;
+    }
+    return v;
+}
+//# sourceMappingURL=sql.js.map

package/dist/tools/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../../src/tools/sql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,YAAY,EAGZ,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,MAAM,QAAQ,GAAG;IACf,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,yIAAyI,CAC1I;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,wLAAwL,CACzL;IACH,GAAG,YAAY;IACf,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,GAAG,CAAC;SACR,GAAG,CAAC,MAAM,CAAC;SACX,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,2hBAA2hB;IAC3hB,oBAAoB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;IAC5C,wBAAwB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;CACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAUb;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5D,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAgB,EAAE,IAAa;IAC1D,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5E,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;QACxB,OAAO,YAAY,CACjB,SAAS,CACP,eAAe,EACf,0CAA0C,EAC1C,kHAAkH,CACnH,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,YAAY,CACjB,SAAS,CACP,eAAe,EACf,kCAAkC,EAClC,4DAA4D,CAC7D,CACF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACrC,OAAO,YAAY,CACjB,SAAS,CACP,eAAe,EACf,iDAAiD,EACjD,sIAAsI,CACvI,CACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC1C,mEAAmE;IACnE,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,MAAiB,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc,CAAC;IAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC;IAE3B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,iEAAiE;YACjE,sEAAsE;YACtE,qEAAqE;YACrE,kEAAkE;YAClE,qBAAqB;YACrB,EAAE;YACF,gEAAgE;YAChE,+DAA+D;YAC/D,qDAAqD;YACrD,2DAA2D;YAC3D,IAAI,OAA2C,CAAC;YAChD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;gBACpC,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,OAAO,SAAS,CACd,eAAe,EACf,8DAA8D,EAC9D,+FAA+F,CAChG,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,iEAAiE;YACjE,iEAAiE;YACjE,8DAA8D;YAC9D,yBAAyB;YACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG;gBACZ,kBAAkB,IAAI,CAAC,MAAM,UAAU;gBACvC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK;aACxC,CAAC;YACF,OAAO,aAAa,CAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAChB;gBACE,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC9D,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;aACrC,EACD,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC,CAAC,6DAA6D,CAAC;gBACjE,CAAC,CAAC,CAAC,sEAAsE,CAAC,EAC5E,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,SAAS,CACd,eAAe,EACf,GAAG,CAAC,OAAO,EACX,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gBACpC,OAAO,SAAS,CACd,eAAe,EACf,GAAG,CAAC,OAAO,EACX,yLAAyL,CAC1L,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5B,OAAO,SAAS,CACd,cAAc,EACd,GAAG,EACH,6DAA6D,CAC9D,CAAC;YACJ,CAAC;YACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB,EAAE,GAAgB;IACjE,MAAM,CAAC,YAAY,CACjB,KAAK,EACL;QACE,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE;YACX,yWAAyW;YACzW,EAAE;YACF,WAAW;SACZ,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAwC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI;SACd,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACb,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,wCAAwC,IAAI,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,OAAO,GAAG,MAAM,KAAK,OAAO,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,oEAAoE;QACpE,sEAAsE;QACtE,gEAAgE;QAChE,8CAA8C;QAC9C,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAA4B;IACtD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAU;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,kEAAkE;QAClE,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACjF,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/tools/tool-map.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `tool_map` — enumerate `Tool` nodes (MCP-style tool definitions).
+ *
+ * Returns one row per Tool node matching the optional `tool` name
+ * substring. Each row carries the tool's file_path, description, and
+ * parsed inputSchema (when the ingestion phase populated one).
+ *
+ * The storage schema stores the tool's input schema as a JSON string in
+ * the `properties_bag` column under the key `inputSchemaJson` (written
+ * by the tools ingestion phase). When the column is absent or the JSON
+ * is malformed we fall back to the raw string so callers still see the
+ * data unredacted.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext, type ToolResult } from "./shared.js";
+interface ToolMapArgs {
+    readonly repo?: string | undefined;
+    readonly repo_uri?: string | undefined;
+    readonly tool?: string | undefined;
+}
+export declare function runToolMap(ctx: ToolContext, args: ToolMapArgs): Promise<ToolResult>;
+export declare function registerToolMapTool(server: McpServer, ctx: ToolContext): void;
+export {};
+//# sourceMappingURL=tool-map.d.ts.map

package/dist/tools/tool-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-map.d.ts","sourceRoot":"","sources":["../../src/tools/tool-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,aAAa,CAAC;AAcrB,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAuDzF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAiB7E"}

package/dist/tools/tool-map.js

@@ -0,0 +1,97 @@
+/**
+ * `tool_map` — enumerate `Tool` nodes (MCP-style tool definitions).
+ *
+ * Returns one row per Tool node matching the optional `tool` name
+ * substring. Each row carries the tool's file_path, description, and
+ * parsed inputSchema (when the ingestion phase populated one).
+ *
+ * The storage schema stores the tool's input schema as a JSON string in
+ * the `properties_bag` column under the key `inputSchemaJson` (written
+ * by the tools ingestion phase). When the column is absent or the JSON
+ * is malformed we fall back to the raw string so callers still see the
+ * data unredacted.
+ */
+// biome-ignore-all lint/complexity/useLiteralKeys: dot-access disallowed on Record index signatures
+import { z } from "zod";
+import { toolErrorFromUnknown } from "../error-envelope.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { stalenessFromMeta } from "../staleness.js";
+import { fromToolResult, repoArgShape, toToolResult, withStore, } from "./shared.js";
+const ToolMapInput = {
+    ...repoArgShape,
+    tool: z.string().optional().describe("Substring match against tool name."),
+};
+export async function runToolMap(ctx, args) {
+    const call = await withStore(ctx, args, async (store, resolved) => {
+        try {
+            let listed = await store.graph.listNodesByKind("Tool", { limit: 500 });
+            if (args.tool !== undefined && args.tool.length > 0) {
+                const sub = args.tool;
+                listed = listed.filter((n) => n.name.includes(sub));
+            }
+            const sorted = [...listed].sort((a, b) => {
+                if (a.name !== b.name)
+                    return a.name < b.name ? -1 : 1;
+                return a.filePath < b.filePath ? -1 : a.filePath > b.filePath ? 1 : 0;
+            });
+            const tools = sorted.map((t) => ({
+                name: t.name,
+                filePath: t.filePath,
+                description: t.description ?? "",
+                inputSchema: t.inputSchemaJson ? parseInputSchema(t.inputSchemaJson) : null,
+            }));
+            const header = `Tools (${tools.length}) for ${resolved.name}${args.tool ? ` · name~${args.tool}` : ""}:`;
+            const body = tools.length === 0
+                ? "(no Tool nodes — the `tools` ingestion phase found no MCP tool literals)"
+                : tools
+                    .map((t) => {
+                    const desc = t.description.length > 0 ? ` — ${t.description}` : "";
+                    const schema = t.inputSchema === null ? "" : " [schema]";
+                    return `- ${t.name}${schema} @ ${t.filePath}${desc}`;
+                })
+                    .join("\n");
+            const next = tools.length === 0
+                ? [
+                    "call `list_repos` to confirm the repo is indexed",
+                    "re-index with `codehub analyze` to refresh Tool nodes",
+                ]
+                : [
+                    `call \`context\` with symbol="${tools[0]?.name ?? ""}" to see callers/callees`,
+                    "call `query` with a tool concept to locate related symbols",
+                ];
+            return withNextSteps(`${header}\n${body}`, { tools, total: tools.length }, next, stalenessFromMeta(resolved.meta));
+        }
+        catch (err) {
+            return toolErrorFromUnknown(err);
+        }
+    });
+    return toToolResult(call);
+}
+export function registerToolMapTool(server, ctx) {
+    server.registerTool("tool_map", {
+        title: "Map MCP Tool definitions",
+        description: "Enumerate Tool nodes detected by the tools ingestion phase, optionally filtered by name substring. Returns name, file_path, description, and the parsed input schema (JSON-decoded when available, raw string when unparseable, null when unset). Read-only.",
+        inputSchema: ToolMapInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    }, async (args) => fromToolResult(await runToolMap(ctx, args)));
+}
+/**
+ * Parse the embedded JSON string. Returns the parsed value on success,
+ * the raw string on parse failure, or null when no schema was present.
+ */
+function parseInputSchema(raw) {
+    if (raw === null)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+//# sourceMappingURL=tool-map.js.map

package/dist/tools/tool-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-map.js","sourceRoot":"","sources":["../../src/tools/tool-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,oGAAoG;AAGpG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,YAAY,EAGZ,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,MAAM,YAAY,GAAG;IACnB,GAAG,YAAY;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;CAC3E,CAAC;AAeF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAgB,EAAE,IAAiB;IAClE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACvE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;gBACtB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACvC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;oBAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAc,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;gBAChC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;aAC5E,CAAC,CAAC,CAAC;YAEJ,MAAM,MAAM,GAAG,UAAU,KAAK,CAAC,MAAM,SAAS,QAAQ,CAAC,IAAI,GACzD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EACvC,GAAG,CAAC;YACJ,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,CAAC;gBAChB,CAAC,CAAC,0EAA0E;gBAC5E,CAAC,CAAC,KAAK;qBACF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;oBACzD,OAAO,KAAK,CAAC,CAAC,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;gBACvD,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEpB,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,CAAC;gBAChB,CAAC,CAAC;oBACE,kDAAkD;oBAClD,uDAAuD;iBACxD;gBACH,CAAC,CAAC;oBACE,iCAAiC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,0BAA0B;oBAC/E,4DAA4D;iBAC7D,CAAC;YAER,OAAO,aAAa,CAClB,GAAG,MAAM,KAAK,IAAI,EAAE,EACpB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAC9B,IAAI,EACJ,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,GAAgB;IACrE,MAAM,CAAC,YAAY,CACjB,UAAU,EACV;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,8PAA8P;QAChQ,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/tools/verdict.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `verdict` — 5-tier verdict composition MCP tool.
+ *
+ * Inputs: base ref (default "main"), head ref (default "HEAD"), optional
+ * repo and config overrides. Annotations: readOnly (we do shell out to
+ * git for the diff; that remains read-only), closedWorld (all data comes
+ * from the indexed graph), NOT idempotent (git state can change between
+ * calls).
+ *
+ * Output: the full {@link VerdictResponse} under `structuredContent`, plus
+ * the rendered markdown comment in `content`.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext, type ToolResult } from "./shared.js";
+interface VerdictConfigArgs {
+    readonly blockThreshold?: number | undefined;
+    readonly escalationThreshold?: number | undefined;
+    readonly warningThreshold?: number | undefined;
+    readonly communityBoundaryThreshold?: number | undefined;
+    readonly communityBoundaryEscalation?: boolean | undefined;
+    readonly fixFollowFeatThreshold?: number | undefined;
+}
+interface VerdictArgs {
+    readonly repo?: string | undefined;
+    readonly repo_uri?: string | undefined;
+    readonly base?: string | undefined;
+    readonly head?: string | undefined;
+    readonly config?: VerdictConfigArgs | undefined;
+}
+export declare function runVerdict(ctx: ToolContext, args: VerdictArgs): Promise<ToolResult>;
+export declare function registerVerdictTool(server: McpServer, ctx: ToolContext): void;
+export {};
+//# sourceMappingURL=verdict.d.ts.map

package/dist/tools/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../src/tools/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,aAAa,CAAC;AAqBrB,UAAU,iBAAiB;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtD;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACjD;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAkEzF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAiB7E"}

package/dist/tools/verdict.js

@@ -0,0 +1,102 @@
+/**
+ * `verdict` — 5-tier verdict composition MCP tool.
+ *
+ * Inputs: base ref (default "main"), head ref (default "HEAD"), optional
+ * repo and config overrides. Annotations: readOnly (we do shell out to
+ * git for the diff; that remains read-only), closedWorld (all data comes
+ * from the indexed graph), NOT idempotent (git state can change between
+ * calls).
+ *
+ * Output: the full {@link VerdictResponse} under `structuredContent`, plus
+ * the rendered markdown comment in `content`.
+ */
+import { computeVerdict } from "@opencodehub/analysis";
+import { z } from "zod";
+import { toolErrorFromUnknown } from "../error-envelope.js";
+import { withNextSteps } from "../next-step-hints.js";
+import { stalenessFromMeta } from "../staleness.js";
+import { fromToolResult, repoArgShape, toToolResult, withStore, } from "./shared.js";
+const VerdictInput = {
+    ...repoArgShape,
+    base: z.string().optional().describe("Base git ref (default 'main')."),
+    head: z.string().optional().describe("Head git ref (default 'HEAD')."),
+    config: z
+        .object({
+        blockThreshold: z.number().int().nonnegative().optional(),
+        escalationThreshold: z.number().int().nonnegative().optional(),
+        warningThreshold: z.number().int().nonnegative().optional(),
+        communityBoundaryThreshold: z.number().int().nonnegative().optional(),
+        communityBoundaryEscalation: z.boolean().optional(),
+        fixFollowFeatThreshold: z.number().min(0).max(1).optional(),
+    })
+        .optional()
+        .describe("Override the verdict thresholds. Values not supplied fall back to .codehub/config.toml or the PRD defaults."),
+};
+export async function runVerdict(ctx, args) {
+    const call = await withStore(ctx, args, async (store, resolved) => {
+        try {
+            const config = {};
+            if (args.config) {
+                if (args.config.blockThreshold !== undefined)
+                    config["blockThreshold"] = args.config.blockThreshold;
+                if (args.config.escalationThreshold !== undefined)
+                    config["escalationThreshold"] = args.config.escalationThreshold;
+                if (args.config.warningThreshold !== undefined)
+                    config["warningThreshold"] = args.config.warningThreshold;
+                if (args.config.communityBoundaryThreshold !== undefined)
+                    config["communityBoundaryThreshold"] = args.config.communityBoundaryThreshold;
+                if (args.config.communityBoundaryEscalation !== undefined)
+                    config["communityBoundaryEscalation"] = args.config.communityBoundaryEscalation;
+                if (args.config.fixFollowFeatThreshold !== undefined)
+                    config["fixFollowFeatThreshold"] = args.config.fixFollowFeatThreshold;
+            }
+            const verdict = await computeVerdict(store.graph, {
+                repoPath: resolved.repoPath,
+                ...(args.base !== undefined ? { base: args.base } : {}),
+                ...(args.head !== undefined ? { head: args.head } : {}),
+                ...(Object.keys(config).length > 0 ? { config } : {}),
+            });
+            const next = [];
+            if (verdict.verdict === "block" || verdict.verdict === "expert_review") {
+                next.push("call `impact` on each affected symbol to identify reducible scope", "call `owners` on the touched files to loop in the top contributor");
+            }
+            else if (verdict.verdict === "dual_review") {
+                next.push("call `detect_changes` to confirm the full set of affected processes", "call `list_findings` filtered by the changed files to spot latent warnings");
+            }
+            else {
+                next.push("call `list_findings` to confirm the scanner run is clean", "commit with the suggested reviewer(s) to de-escalate");
+            }
+            return withNextSteps(verdict.reviewCommentMarkdown, {
+                verdict: verdict.verdict,
+                confidence: verdict.confidence,
+                exit_code: verdict.exitCode,
+                blast_radius: verdict.blastRadius,
+                changed_file_count: verdict.changedFileCount,
+                affected_symbol_count: verdict.affectedSymbolCount,
+                communities_touched: verdict.communitiesTouched,
+                decision_boundary: verdict.decisionBoundary,
+                reasoning_chain: verdict.reasoningChain,
+                recommended_reviewers: verdict.recommendedReviewers,
+                github_labels: verdict.githubLabels,
+            }, next, stalenessFromMeta(resolved.meta));
+        }
+        catch (err) {
+            return toolErrorFromUnknown(err);
+        }
+    });
+    return toToolResult(call);
+}
+export function registerVerdictTool(server, ctx) {
+    server.registerTool("verdict", {
+        title: "5-tier PR verdict",
+        description: "Composite diff verdict: auto_merge | single_review | dual_review | expert_review | block. Aggregates blast radius, community boundaries, findings, orphan grade, fix-follow-feat density, and ownership into a single decision with confidence, reasoning chain, decision-boundary distance, recommended reviewers, GitHub labels, and a PR-comment markdown string. Exit codes: 0/1/2 mapped per PRD.",
+        inputSchema: VerdictInput,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            openWorldHint: false,
+            idempotentHint: false,
+        },
+    }, async (args) => fromToolResult(await runVerdict(ctx, args)));
+}
+//# sourceMappingURL=verdict.js.map

package/dist/tools/verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../../src/tools/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,YAAY,EAGZ,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,MAAM,YAAY,GAAG;IACnB,GAAG,YAAY;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACtE,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACzD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC9D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC3D,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACrE,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACnD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC5D,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CACP,6GAA6G,CAC9G;CACJ,CAAC;AAmBF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAgB,EAAE,IAAiB;IAClE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAqC,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;oBAC1C,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBACxD,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;oBAC/C,MAAM,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBAClE,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBAC5C,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC5D,IAAI,IAAI,CAAC,MAAM,CAAC,0BAA0B,KAAK,SAAS;oBACtD,MAAM,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC;gBAChF,IAAI,IAAI,CAAC,MAAM,CAAC,2BAA2B,KAAK,SAAS;oBACvD,MAAM,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC;gBAClF,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,KAAK,SAAS;oBAClD,MAAM,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;YAC1E,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE;gBAChD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YAEH,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACvE,IAAI,CAAC,IAAI,CACP,mEAAmE,EACnE,mEAAmE,CACpE,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CACP,qEAAqE,EACrE,4EAA4E,CAC7E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CACP,0DAA0D,EAC1D,sDAAsD,CACvD,CAAC;YACJ,CAAC;YAED,OAAO,aAAa,CAClB,OAAO,CAAC,qBAAqB,EAC7B;gBACE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,YAAY,EAAE,OAAO,CAAC,WAAW;gBACjC,kBAAkB,EAAE,OAAO,CAAC,gBAAgB;gBAC5C,qBAAqB,EAAE,OAAO,CAAC,mBAAmB;gBAClD,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;gBAC/C,iBAAiB,EAAE,OAAO,CAAC,gBAAgB;gBAC3C,eAAe,EAAE,OAAO,CAAC,cAAc;gBACvC,qBAAqB,EAAE,OAAO,CAAC,oBAAoB;gBACnD,aAAa,EAAE,OAAO,CAAC,YAAY;aACpC,EACD,IAAI,EACJ,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,GAAgB;IACrE,MAAM,CAAC,YAAY,CACjB,SAAS,EACT;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,wYAAwY;QAC1Y,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,KAAK;SACtB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "@opencodehub/mcp",
+  "version": "0.1.0",
+  "description": "OpenCodeHub — stdio MCP server exposing code-graph + group tools",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/theagenticguy/opencodehub.git",
+    "directory": "packages/mcp"
+  },
+  "homepage": "https://github.com/theagenticguy/opencodehub#readme",
+  "bugs": {
+    "url": "https://github.com/theagenticguy/opencodehub/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/**/*.js",
+    "!dist/**/*.test.js",
+    "dist/**/*.d.ts",
+    "!dist/**/*.test.d.ts",
+    "dist/**/*.js.map",
+    "!dist/**/*.test.js.map",
+    "dist/**/*.d.ts.map",
+    "!dist/**/*.test.d.ts.map"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "lru-cache": "11.3.6",
+    "zod": "4.4.3",
+    "@opencodehub/core-types": "0.1.0",
+    "@opencodehub/analysis": "0.1.0",
+    "@opencodehub/pack": "0.1.0",
+    "@opencodehub/embedder": "0.1.0",
+    "@opencodehub/sarif": "0.1.0",
+    "@opencodehub/storage": "0.1.0",
+    "@opencodehub/scanners": "0.1.0",
+    "@opencodehub/search": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "25.6.2",
+    "typescript": "6.0.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "opencodehub",
+    "code-intelligence",
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "code-graph",
+    "static-analysis",
+    "mcp-server",
+    "stdio",
+    "claude",
+    "cursor",
+    "coding-agent"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "test": "node --test ./dist/**/*.test.js",
+    "clean": "rm -rf dist *.tsbuildinfo"
+  }
+}