@papyruslabsai/seshat-mcp 0.13.0 → 0.13.2

package/dist/index.js

@@ -13,20 +13,29 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 // ─── Server Instructions ─────────────────────────────────────────
 // Sent to the LLM at connection time. This is the "first contact" pitch.
-const SERVER_INSTRUCTIONS = `Seshat provides structural code analysis backed by a compiled intermediate representation — not heuristic guesses or text search. Every function, class, and route in the synced codebase has been extracted into a typed symbol graph with dependency edges, data flow, constraints, and architectural layer tags.
+const SERVER_INSTRUCTIONS = `Seshat provides structural code analysis backed by a compiled intermediate representation — not heuristic guesses or text search. Every function, class, and route in the synced codebase has been extracted into a typed symbol graph with dependency edges, data flow, constraints, and architectural layer tags. Results are precise and complete — if Seshat says a function has 3 callers, it has exactly 3 callers.
 
-Use these tools instead of grep/Read when you need to understand code structure:
-- "Who calls this function?" → get_dependencies (not grep for the function name)
-- "What breaks if I change this?" → get_blast_radius (not guessing from imports)
-- "Which functions touch the database?" → find_by_constraint with DB_ACCESS
-- "How is this codebase organized?" → list_modules or get_topology
+Use Seshat tools instead of grep/Read when you need to understand code structure. Each tool maps to a question you're already asking:
+- "What projects are loaded?" → list_projects
+- "How is the codebase organized?" → list_modules
+- "What's the full API surface?" → get_topology
+- "Find functions by name or layer" → query_entities
+- "Deep-dive a single function" → get_entity
+- "Who calls this / what does it call?" → get_dependencies
+- "What breaks if I change this?" → get_blast_radius
+- "What data does this read/write/mutate?" → get_data_flow
+- "Which functions touch the DB / require auth / throw?" → find_by_constraint
+- "Which endpoints require auth and which don't?" → get_auth_matrix
+- "Where is sensitive data exposed without protection?" → find_exposure_leaks
+- "What should I read before modifying X?" → get_optimal_context
+- "What tier am I on / what tools are available?" → get_account_status
 
-Start with list_projects to see what's loaded. All tools are read-only and safe to call speculatively.
+All tools are read-only and safe to call speculatively — there is no cost to trying them.
 
-get_blast_radius and get_optimal_context are designed for iterative use. As you learn more about the codebase from other tools, call them again with new targets — each call refines your understanding. When answering "what does this system do?" questions, a few rounds of blast_radius → get_entity → blast_radius on the newly discovered symbols will build a complete picture faster than reading files.`;
+get_blast_radius and get_optimal_context are designed to be called iteratively. Start with any entity, then feed discovered entities back in to expand your understanding. Each round reveals new structure that informs where to look next. When answering "what does this system do?" questions, a few rounds of blast_radius → get_entity → blast_radius on the newly discovered symbols will build a complete picture faster than reading files.`;
 const TIER_ORDER = ['cartographer', 'analyst', 'architect'];
 const TOOL_TIERS = {
-    // Cartographer (free) — explore and navigate
+    // Cartographer (free) — explore, navigate, and assess security surface
     list_projects: 'cartographer',
     query_entities: 'cartographer',
     get_entity: 'cartographer',
@@ -37,17 +46,17 @@ const TOOL_TIERS = {
     list_modules: 'cartographer',
     get_topology: 'cartographer',
     get_optimal_context: 'cartographer',
-    // Analyst (tier 2) — audit and analyze
+    get_auth_matrix: 'cartographer',
+    find_exposure_leaks: 'cartographer',
+    // Analyst (tier 2) — audit and diagnose
     find_dead_code: 'analyst',
     find_layer_violations: 'analyst',
     get_coupling_metrics: 'analyst',
-    get_auth_matrix: 'analyst',
     find_error_gaps: 'analyst',
     get_test_coverage: 'analyst',
     find_runtime_violations: 'analyst',
     find_ownership_violations: 'analyst',
     query_traits: 'analyst',
-    find_exposure_leaks: 'analyst',
     find_semantic_clones: 'analyst',
     // Architect (tier 3) — simulate, estimate, and act
     estimate_task_cost: 'architect',
@@ -460,7 +469,7 @@ function getCloudUrl(path) {
 async function main() {
     const server = new Server({
         name: 'seshat',
-        version: '0.13.0',
+        version: '0.13.2',
     }, {
         capabilities: { tools: {} },
         instructions: SERVER_INSTRUCTIONS,
@@ -521,24 +530,37 @@ async function main() {
                 const account = await res.json();
                 const userTier = account.tier || 'cartographer';
                 const credits = account.credits || 0;
-                // Build tool availability breakdown
-                const toolsByTier = {
-                    cartographer: { available: [], locked: [] },
-                    analyst: { available: [], locked: [] },
-                    architect: { available: [], locked: [] },
-                };
+                // Build response: lead with what you CAN do, not what you can't
+                const availableTools = [];
+                const upgradeTeaser = {};
                 for (const [toolName, requiredTier] of Object.entries(TOOL_TIERS)) {
-                    const bucket = tierAtLeast(userTier, requiredTier) ? 'available' : 'locked';
-                    toolsByTier[requiredTier][bucket].push(toolName);
+                    if (tierAtLeast(userTier, requiredTier)) {
+                        availableTools.push(toolName);
+                    }
+                    else {
+                        if (!upgradeTeaser[TIER_LABELS[requiredTier]]) {
+                            upgradeTeaser[TIER_LABELS[requiredTier]] = [];
+                        }
+                        upgradeTeaser[TIER_LABELS[requiredTier]].push(toolName);
+                    }
+                }
+                const response = {
+                    tier: userTier,
+                    tier_label: TIER_LABELS[userTier],
+                    ptah_credits: credits,
+                    your_tools: availableTools,
+                    tool_count: `${availableTools.length} tools available`,
+                };
+                // Only mention upgrades if there are locked tools, and frame positively
+                if (Object.keys(upgradeTeaser).length > 0) {
+                    const totalLocked = Object.values(upgradeTeaser).reduce((sum, t) => sum + t.length, 0);
+                    response.upgrades_available = {
+                        summary: `${totalLocked} additional diagnostic and simulation tools available with a tier upgrade — find dead code, coupling hotspots, test gaps, layer violations, and simulate changes before making them.`,
+                        url: 'https://ptah.papyruslabs.ai/settings/billing',
+                    };
                 }
                 return {
-                    content: [{ type: 'text', text: JSON.stringify({
-                                tier: userTier,
-                                tier_label: TIER_LABELS[userTier],
-                                ptah_credits: credits,
-                                tools: toolsByTier,
-                                upgrade_url: 'https://ptah.papyruslabs.ai/settings/billing',
-                            }, null, 2) }],
+                    content: [{ type: 'text', text: JSON.stringify(response, null, 2) }],
                 };
             }
             catch (err) {
@@ -599,7 +621,7 @@ async function main() {
     });
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    process.stderr.write(`Seshat MCP v0.13.0 connected. Structural code analysis ready.\n`);
+    process.stderr.write(`Seshat MCP v0.13.1 connected. Structural code analysis ready.\n`);
 }
 main().catch((err) => {
     process.stderr.write(`Fatal: ${err.message}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papyruslabsai/seshat-mcp",
-  "version": "0.13.0",
+  "version": "0.13.2",
   "description": "Semantic MCP server — exposes a codebase's structure, dependencies, and constraints as queryable tools",
   "type": "module",
   "bin": {