@papyruslabsai/seshat-mcp 0.13.3 → 0.13.4

package/dist/index.js

@@ -25,6 +25,7 @@ Use Seshat tools instead of grep/Read when you need to understand code structure
 - "What breaks if I change this?" → get_blast_radius
 - "What data does this read/write/mutate?" → get_data_flow
 - "Which functions touch the DB / require auth / throw?" → find_by_constraint
+- "What reads or writes the 'users' table?" → find_by_constraint(table="users")
 - "Which endpoints require auth and which don't?" → get_auth_matrix
 - "Where is sensitive data exposed without protection?" → find_exposure_leaks
 - "What should I read before modifying X?" → get_optimal_context
@@ -33,7 +34,7 @@ Use Seshat tools instead of grep/Read when you need to understand code structure
 All tools are read-only and safe to call speculatively — there is no cost to trying them.
 
 get_blast_radius and get_optimal_context are designed to be called iteratively. Start with any entity, then feed discovered entities back in to expand your understanding. Each round reveals new structure that informs where to look next. When answering "what does this system do?" questions, a few rounds of blast_radius → get_entity → blast_radius on the newly discovered symbols will build a complete picture faster than reading files.`;
-const TIER_ORDER = ['cartographer', 'analyst', 'architect', 'founder'];
+const TIER_ORDER = ['cartographer', 'pro', 'analyst', 'architect', 'founder'];
 const TOOL_TIERS = {
     // Cartographer (free) — explore, navigate, and assess security surface
     list_projects: 'cartographer',
@@ -68,8 +69,9 @@ const TOOL_TIERS = {
 };
 const TIER_LABELS = {
     cartographer: 'Cartographer (Free)',
-    analyst: 'Analyst (Tier 2)',
-    architect: 'Architect (Tier 3)',
+    pro: 'Seshat Pro',
+    analyst: 'Seshat Shield',
+    architect: 'Architect',
     founder: 'Founder (All Access)',
 };
 function tierAtLeast(userTier, requiredTier) {
@@ -119,7 +121,7 @@ const TOOLS = [
     },
     {
         name: 'get_entity',
-        description: 'Get everything about one function or class — its signature, callers, callees, data flow, constraints, and source location. Use this when you need to deeply understand a single symbol before modifying it. Returns more than reading the source file because it includes the dependency context.',
+        description: 'Get everything about one function or class — its signature, callers, callees, data flow, constraints, source location, and database operations (which tables it reads/writes). Use this when you need to deeply understand a single symbol before modifying it. Returns more than reading the source file because it includes the dependency context.',
         inputSchema: {
             type: 'object',
             properties: {
@@ -160,12 +162,13 @@ const TOOLS = [
     },
     {
         name: 'find_by_constraint',
-        description: 'Find every function with a specific syntactic constraint tag — AUTH (requires authentication), DB_ACCESS (touches database), THROWS (explicit throw statement), PURE (no side effects), NETWORK_IO (makes HTTP calls), VALIDATED (has input validation). Constraints are extracted from source syntax, not inferred. Use this when you need to answer "which functions write to the database?" or "what endpoints lack auth?" For semantic/behavioral properties (e.g., "can fail transitively"), use query_traits instead.',
+        description: 'Find every function with a specific syntactic constraint tag — AUTH (requires authentication), DB_ACCESS (touches database), THROWS (explicit throw statement), PURE (no side effects), NETWORK_IO (makes HTTP calls), VALIDATED (has input validation). Also supports table-level queries: pass table="walks" to find every function that reads or writes the walks table (answers "what touches this table?" for schema migrations). Constraints are extracted from source syntax, not inferred. For semantic/behavioral properties (e.g., "can fail transitively"), use query_traits instead.',
         inputSchema: {
             type: 'object',
             properties: {
                 project: projectParam,
                 constraint: { type: 'string', description: 'Constraint tag to search for: AUTH, VALIDATED, PURE, THROWS, DB_ACCESS, NETWORK_IO, IMP, etc.' },
+                table: { type: 'string', description: 'Optional: filter to functions that touch a specific database table (e.g., "walks", "users"). Returns structured db_operations showing read/write/mutate per function.' },
             },
             required: ['constraint'],
         },
@@ -470,7 +473,7 @@ function getCloudUrl(path) {
 async function main() {
     const server = new Server({
         name: 'seshat',
-        version: '0.13.3',
+        version: '0.13.4',
     }, {
         capabilities: { tools: {} },
         instructions: SERVER_INSTRUCTIONS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papyruslabsai/seshat-mcp",
-  "version": "0.13.3",
+  "version": "0.13.4",
   "description": "Semantic MCP server — exposes a codebase's structure, dependencies, and constraints as queryable tools",
   "type": "module",
   "bin": {