@reposkein/mcp 0.4.0 → 0.5.0

package/dist/indexer/runIndexer.d.ts

@@ -3,6 +3,14 @@ export interface SpawnResult {
     stdout: string;
     stderr: string;
 }
+/** Runs the indexer binary, capped and timed out.
+ *
+ *  Serialized process-wide by `withIndexLock`: every invocation writes into
+ *  the target checkout's `.reposkein/`, and since REP-17 two callers (a
+ *  write-capable tool call on one connection, the HEAD watcher on another) can
+ *  arrive concurrently with no shared call stack to order them. The lock lives
+ *  HERE rather than at each call site so a new call site cannot forget it —
+ *  see `indexLock.ts`. */
 export declare function spawnIndexer(bin: string, args: string[]): Promise<SpawnResult>;
 export interface IndexJsonStats {
     repo_id: string;

package/dist/indexer/runIndexer.js

@@ -1,4 +1,5 @@
 import { spawn } from "node:child_process";
+import { withIndexLock } from "./indexLock.js";
 const ALLOWED_KEYS = new Set(["PATH", "HOME", "TMPDIR", "LANG", "LC_ALL", "NEO4J_URI", "NEO4J_USER", "NEO4J_PASSWORD"]);
 /** Indexer spawn timeout (~10 minutes). Large repos can be slow but shouldn't hang forever. */
 const INDEXER_TIMEOUT_MS = 600_000;
@@ -21,7 +22,18 @@ function buildChildEnv() {
 // sourced from mcp/src/store/repoSession.ts. Don't reintroduce an
 // env/cwd-based resolver here — see mcp/src/store/resolveRepoPath.ts for the
 // one central resolution algorithm.
+/** Runs the indexer binary, capped and timed out.
+ *
+ *  Serialized process-wide by `withIndexLock`: every invocation writes into
+ *  the target checkout's `.reposkein/`, and since REP-17 two callers (a
+ *  write-capable tool call on one connection, the HEAD watcher on another) can
+ *  arrive concurrently with no shared call stack to order them. The lock lives
+ *  HERE rather than at each call site so a new call site cannot forget it —
+ *  see `indexLock.ts`. */
 export function spawnIndexer(bin, args) {
+    return withIndexLock(() => spawnIndexerUnlocked(bin, args));
+}
+function spawnIndexerUnlocked(bin, args) {
     return new Promise((resolve, reject) => {
         const child = spawn(bin, args, { env: buildChildEnv() });
         let stdout = "";

package/dist/indexer/runIndexer.js.map

@@ -1 +1 @@
-{"version":3,"file":"runIndexer.js","sourceRoot":"","sources":["../../src/indexer/runIndexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExH,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,sEAAsE;AACtE,kEAAkE;AAClE,6EAA6E;AAC7E,oCAAoC;AAEpC,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAc;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,6EAA6E;QAC7E,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;YAC9C,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,kBAAkB,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,MAAwB,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;yDAEyD;AACzD,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AACtC,CAAC"}
+{"version":3,"file":"runIndexer.js","sourceRoot":"","sources":["../../src/indexer/runIndexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExH,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,sEAAsE;AACtE,kEAAkE;AAClE,6EAA6E;AAC7E,oCAAoC;AAEpC;;;;;;;0BAO0B;AAC1B,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAc;IACtD,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,IAAc;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,6EAA6E;QAC7E,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;YAC9C,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,kBAAkB,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,MAAwB,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;yDAEyD;AACzD,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AACtC,CAAC"}

package/dist/serve/serve.d.ts

@@ -0,0 +1,95 @@
+import { type IncomingMessage, type ServerResponse } from "node:http";
+import { type CreateMcpServerOptions } from "../server/createMcpServer.js";
+import { type ServeToken } from "./tokens.js";
+/** The one path the MCP Streamable HTTP transport answers on. Everything else
+ *  is the viewer + `/api/*`, served by view.ts's own handler. */
+export declare const MCP_PATH = "/mcp";
+export interface ServeOptions {
+    port: number;
+    host: string;
+    /** `git rev-parse HEAD` poll interval. 0 disables the watcher. */
+    watchIntervalMs: number;
+}
+/** Default bind host. NOT 0.0.0.0: even in the mode that exists to be
+ *  reachable, exposure is an explicit `--host` decision by the operator. */
+export declare const DEFAULT_SERVE_HOST = "127.0.0.1";
+export declare const DEFAULT_SERVE_PORT = 4318;
+export declare const DEFAULT_WATCH_INTERVAL_MS = 30000;
+export declare function parseServeArgs(argv: string[]): {
+    repoPath: string;
+    opts: ServeOptions;
+    http: boolean;
+};
+type NodeHandler = (req: IncomingMessage, res: ServerResponse) => void;
+export interface CreateServeAppOptions {
+    repoPath: string;
+    repoId: string;
+    tokens: readonly ServeToken[];
+    log?: (message: string) => void;
+    /** Test seam: replaces `makeViewHandler` (which reads the repo's JSONL and
+     *  shells out to git at construction time). */
+    viewHandlerFactory?: (repoPath: string, repoId: string) => NodeHandler;
+    /** Test seam: passed through to every per-connection `createMcpServer`. */
+    ensureGraph?: CreateMcpServerOptions["ensureGraph"];
+    /** Concurrent-session cap. Defaults to `MAX_SESSIONS` (64); lowered in
+     *  tests so the cap and the reaper-then-retry path are cheap to exercise. */
+    maxSessions?: number;
+    /** Idle-session reap threshold. Defaults to `SESSION_IDLE_MS` (5 min). */
+    idleMs?: number;
+    /** Clock. Injectable so the reaper can be tested without waiting minutes. */
+    now?: () => number;
+}
+export interface ServeApp {
+    handler: NodeHandler;
+    /** Rebuilds the `/api/*` handler. The view handler snapshots node/edge
+     *  counts and git metadata once per construction, so after a re-index the
+     *  hosted viewer would otherwise keep reporting the old graph — this is the
+     *  watcher's `onReindexed` hook, and it is why the MCP tools and the viewer
+     *  cannot drift apart: they are refreshed by the same event. */
+    refresh: () => void;
+    /** Closes every session idle past `idleMs` with no request in flight, and
+     *  returns how many it closed. Called automatically before each new-session
+     *  attempt (so a server wedged at the cap by dead clients frees itself on
+     *  the next connect); exposed for tests. */
+    sweepIdleSessions: () => number;
+    close: () => Promise<void>;
+    sessionCount: () => number;
+}
+/** Builds the one request handler that answers both the MCP endpoint and the
+ *  viewer/`/api/*` surface (REP-17 requirement: one process, one graph).
+ *
+ *  URL layout:
+ *    POST/GET/DELETE `/mcp`  — MCP Streamable HTTP transport
+ *    GET `/api/graph`, `/api/jsonl/*`, `/api/source`, `/api/temporal`
+ *                            — byte-identical to `reposkein-mcp view`, because
+ *                              it IS view.ts's handler, not a copy
+ *    GET everything else     — the prebuilt viewer SPA
+ *
+ *  Auth applies to every route. `/mcp` accepts ONLY
+ *  `Authorization: Bearer <token>`; the viewer routes additionally accept
+ *  `?token=` (which is immediately traded for an HttpOnly cookie and
+ *  redirected away, so it appears once) because a static SPA in a browser
+ *  cannot attach an Authorization header to its own page load. */
+export declare function createServeApp(opts: CreateServeAppOptions): ServeApp;
+/** `git status --porcelain` for the served checkout, or null when git is
+ *  unavailable / the path isn't a repo. Never throws. */
+export declare function gitPorcelainStatus(repoPath: string): string[] | null;
+/** The startup warning for serving a checkout with local modifications, or
+ *  null when the tree is clean (or git can't tell us).
+ *
+ *  Serving a dirty checkout is legal and sometimes exactly what an operator
+ *  wants, so this WARNS and never refuses. But it is worth saying loudly:
+ *  `serve`'s own re-index writes into `.reposkein/` (the committed summary
+ *  shards absorb every `local/summaries-*.jsonl` sidecar), so a checkout that
+ *  someone also works in will accumulate diffs that look like the server's
+ *  fault — and a re-index landing on top of half-finished local edits indexes
+ *  those edits. A dedicated deploy clone has neither problem. */
+export declare function dirtyCheckoutWarning(repoPath: string, statusFn?: (p: string) => string[] | null): string | null;
+/** `reposkein-mcp serve --http [path] [--port N] [--host H] [--watch-interval S]`.
+ *
+ *  Strictly optional (REP-17 / adr:2026-08-21-optional-shared-remote-mcp-server-…):
+ *  stdio is still the default transport and nothing binds a socket unless this
+ *  runs. Refuses to start without at least one configured token — an
+ *  unauthenticated remote MCP server would hand write access to the network. */
+export declare function runServe(repoPath: string, repoId: string, opts: ServeOptions): Promise<number>;
+export {};