@securecode-ai/mcp 0.5.7 → 0.6.0

package/dist/tools/agentScanBatch.js

@@ -0,0 +1,178 @@
+"use strict";
+/**
+ * securecode.agent-scan-batch MCP tool — sequential batch agent scanning.
+ *
+ * Maps the project, runs architecture scout, selects the top N
+ * security-relevant files, and scans them ONE AT A TIME. Stops after
+ * the first incomplete or failed scan and reports remaining files
+ * as not-started.
+ *
+ * Rules:
+ *   - Scans are strictly sequential (for...of + await, never Promise.all).
+ *   - _skipFix is always true (no fix generation in batch mode).
+ *   - Stops on incomplete, failed, cancelled, or thrown errors.
+ *   - Does NOT stop merely because a completed scan has findings.
+ *   - Does NOT include full transcripts in batch output.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toolAgentScanBatch = toolAgentScanBatch;
+const map_1 = require("./map");
+const agentScan_1 = require("./agentScan");
+const client_1 = require("../api/client");
+const agentScanBatchSelection_1 = require("../attack/agentScanBatchSelection");
+const agentScanCreditPlan_1 = require("../attack/agentScanCreditPlan");
+const agentScanCoordinator_1 = require("../attack/agentScanCoordinator");
+const agentScanBatchProtocol_1 = require("../attack/agentScanBatchProtocol");
+async function toolAgentScanBatch(ctx, args) {
+    return agentScanCoordinator_1.globalScanCoordinator.runExclusive(ctx.workspaceRoot, () => toolAgentScanBatchInner(ctx, args), {
+        signal: args._signal,
+    });
+}
+async function toolAgentScanBatchInner(ctx, args) {
+    const progress = args._progress;
+    const signal = args._signal;
+    const topN = args.topN ?? 3;
+    const architectureDepth = args.architectureDepth ?? 'standard';
+    const fileSelection = args.fileSelection ?? 'recommendedScanOrder';
+    const noCache = !!args.noCache;
+    const stopOnIncomplete = args.stopOnIncomplete !== false;
+    const stopOnFailure = args.stopOnFailure !== false;
+    if (progress)
+        progress(0, 3, 'Mapping project + running architecture scout...');
+    let architecture = null;
+    let archCached = false;
+    try {
+        const archResult = await (0, map_1.toolMap)(ctx, {
+            action: 'architecture',
+            depth: architectureDepth,
+            _noCache: noCache,
+            _signal: signal,
+            _progress: progress ? (p, t, m) => {
+                progress(Math.min(p, 1), 3, `Architecture: ${m}`);
+            } : undefined,
+        });
+        architecture = archResult.architecture ?? null;
+        archCached = archResult.cached === true;
+        if (!architecture) {
+            return (0, agentScanBatchProtocol_1.aggregateBatchResult)('architecture-failed', topN, [], []);
+        }
+        if (architecture.completeness === 'failed') {
+            return (0, agentScanBatchProtocol_1.aggregateBatchResult)('architecture-incomplete', topN, [], []);
+        }
+    }
+    catch (err) {
+        return (0, agentScanBatchProtocol_1.aggregateBatchResult)('architecture-failed', topN, [], []);
+    }
+    if (signal?.aborted) {
+        return (0, agentScanBatchProtocol_1.aggregateBatchResult)('cancelled', topN, [], []);
+    }
+    if (progress)
+        progress(1, 3, 'Selecting files for sequential scanning...');
+    const selection = (0, agentScanBatchSelection_1.selectAgentScanBatchFiles)(ctx.workspaceRoot, architecture, {
+        topN,
+        fileSelection,
+    });
+    if (selection.selected.length === 0) {
+        return (0, agentScanBatchProtocol_1.aggregateBatchResult)('completed', topN, [], []);
+    }
+    const selectedFiles = selection.selected.map(f => f.filePath);
+    if (progress)
+        progress(2, 3, `Preflight credit check for ${selectedFiles.length} file(s)...`);
+    const creditPlan = (0, agentScanCreditPlan_1.calculateBatchCredits)({
+        depth: architectureDepth,
+        architectureCacheHit: archCached,
+        uncachedFileCount: selection.selected.length,
+        cachedFileCount: 0,
+    });
+    try {
+        const client = new client_1.ApiClient({ baseUrl: ctx.apiUrl, token: ctx.apiToken });
+        const balance = await client.getJson('/credits/balance', signal);
+        if (balance.scanCredits < creditPlan.total) {
+            if (progress)
+                progress(3, 3, `Insufficient credits: have ${balance.scanCredits}, need ${creditPlan.total}.`);
+            return (0, agentScanBatchProtocol_1.aggregateBatchResult)('insufficient-credits', topN, selectedFiles, selection.selected.map((f, i) => (0, agentScanBatchProtocol_1.buildNotStartedFileResult)(f.filePath, f.rank, f.role, f.importance)));
+        }
+    }
+    catch (err) {
+        if (signal?.aborted) {
+            return (0, agentScanBatchProtocol_1.aggregateBatchResult)('cancelled', topN, [], []);
+        }
+    }
+    const fileResults = [];
+    let stopReason = 'completed';
+    let shouldStop = false;
+    for (const file of selection.selected) {
+        if (shouldStop) {
+            fileResults.push((0, agentScanBatchProtocol_1.buildNotStartedFileResult)(file.filePath, file.rank, file.role, file.importance));
+            continue;
+        }
+        if (signal?.aborted) {
+            fileResults.push((0, agentScanBatchProtocol_1.buildNotStartedFileResult)(file.filePath, file.rank, file.role, file.importance));
+            stopReason = 'cancelled';
+            shouldStop = true;
+            continue;
+        }
+        if (progress) {
+            progress(file.rank, selection.selected.length, `Scanning ${file.filePath} (${file.rank}/${selection.selected.length})...`);
+        }
+        try {
+            const scanResult = await (0, agentScan_1.toolAgentScan)(ctx, {
+                filePath: file.filePath,
+                _skipFix: true,
+                _skipCoordinator: true,
+                _noCache: noCache,
+                _signal: signal,
+                _progress: progress ? (p, t, m) => {
+                    progress(file.rank, selection.selected.length, `${file.filePath}: ${m}`);
+                } : undefined,
+            });
+            const batchFile = (0, agentScanBatchProtocol_1.buildBatchFileResult)(file.filePath, file.rank, file.role, file.importance, {
+                status: scanResult.status,
+                findings: scanResult.agentFindings || [],
+                investigationNotes: scanResult.investigationNotes || [],
+                coverageGaps: scanResult.coverageGaps || [],
+                stepsUsed: scanResult.stepsUsed,
+                stepsGranted: 40,
+                extensionsGranted: 0,
+                costSpentUsd: scanResult.costSpentUsd,
+                transcript: [],
+                terminationReason: scanResult.terminationReason,
+                error: scanResult.error,
+            }, scanResult.cached);
+            fileResults.push(batchFile);
+            if (batchFile.status === 'incomplete' && stopOnIncomplete) {
+                stopReason = 'scan-incomplete';
+                shouldStop = true;
+            }
+            else if (batchFile.status === 'failed' && stopOnFailure) {
+                stopReason = 'scan-failed';
+                shouldStop = true;
+            }
+        }
+        catch (err) {
+            const batchFile = {
+                filePath: file.filePath,
+                rank: file.rank,
+                role: file.role,
+                importance: file.importance,
+                status: 'failed',
+                findings: [],
+                investigationNotes: [],
+                coverageGaps: [],
+                stepsUsed: 0,
+                costSpentUsd: 0,
+                error: { message: err?.message || String(err) },
+            };
+            fileResults.push(batchFile);
+            if (stopOnFailure) {
+                stopReason = 'scan-failed';
+                shouldStop = true;
+            }
+        }
+    }
+    if (progress && !shouldStop) {
+        progress(selection.selected.length, selection.selected.length, 'Batch complete.');
+    }
+    return (0, agentScanBatchProtocol_1.aggregateBatchResult)(stopReason, topN, selectedFiles, fileResults);
+}
+//# sourceMappingURL=agentScanBatch.js.map

package/dist/tools/agentScanBatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentScanBatch.js","sourceRoot":"","sources":["../../src/tools/agentScanBatch.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AA2CH,gDAWC;AAnDD,+BAAgC;AAChC,2CAA4C;AAC5C,0CAA0C;AAC1C,+EAA8E;AAC9E,uEAAuF;AACvF,yEAAuE;AAGvE,6EAS0C;AAuBnC,KAAK,UAAU,kBAAkB,CACpC,GAAkB,EAClB,IAA8C;IAE9C,OAAO,4CAAqB,CAAC,YAAY,CACrC,GAAG,CAAC,aAAa,EACjB,GAAG,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,EACxC;QACI,MAAM,EAAE,IAAI,CAAC,OAAkC;KAClD,CACJ,CAAC;AACN,CAAC;AAED,KAAK,UAAU,uBAAuB,CAClC,GAAkB,EAClB,IAA8C;IAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAoF,CAAC;IAC3G,MAAM,MAAM,GAAG,IAAI,CAAC,OAAkC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5B,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,UAAU,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAC/B,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC;IACzD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC;IAEnD,IAAI,QAAQ;QAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,iDAAiD,CAAC,CAAC;IAEhF,IAAI,YAAY,GAA+B,IAAI,CAAC;IACpD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAA,aAAO,EAAC,GAAG,EAAE;YAClC,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,EAAE;gBACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC,CAAC,SAAS;SAChB,CAA2B,CAAC;QAE7B,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,IAAI,CAAC;QAC/C,UAAU,GAAG,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC;QAExC,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO,IAAA,6CAAoB,EACvB,qBAAiD,EACjD,IAAI,EAAE,EAAE,EAAE,EAAE,CACf,CAAC;QACN,CAAC;QAED,IAAI,YAAY,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,IAAA,6CAAoB,EACvB,yBAAqD,EACrD,IAAI,EAAE,EAAE,EAAE,EAAE,CACf,CAAC;QACN,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,OAAO,IAAA,6CAAoB,EACvB,qBAAiD,EACjD,IAAI,EAAE,EAAE,EAAE,EAAE,CACf,CAAC;IACN,CAAC;IAED,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QAClB,OAAO,IAAA,6CAAoB,EAAC,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,QAAQ;QAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,4CAA4C,CAAC,CAAC;IAE3E,MAAM,SAAS,GAAG,IAAA,mDAAyB,EAAC,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE;QACzE,IAAI;QACJ,aAAa;KAChB,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAA,6CAAoB,EAAC,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAE9D,IAAI,QAAQ;QAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,8BAA8B,aAAa,CAAC,MAAM,aAAa,CAAC,CAAC;IAE9F,MAAM,UAAU,GAAG,IAAA,2CAAqB,EAAC;QACrC,KAAK,EAAE,iBAAiB;QACxB,oBAAoB,EAAE,UAAU;QAChC,iBAAiB,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;QAC5C,eAAe,EAAE,CAAC;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAwB,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAExF,IAAI,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;YACzC,IAAI,QAAQ;gBAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,8BAA8B,OAAO,CAAC,WAAW,UAAU,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC;YAC7G,OAAO,IAAA,6CAAoB,EACvB,sBAAkD,EAClD,IAAI,EAAE,aAAa,EACnB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5B,IAAA,kDAAyB,EAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CACtE,CACJ,CAAC;QACN,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YAClB,OAAO,IAAA,6CAAoB,EAAC,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAA+B,EAAE,CAAC;IACnD,IAAI,UAAU,GAA6B,WAAW,CAAC;IACvD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,UAAU,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,IAAA,kDAAyB,EACtC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CACvD,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,IAAA,kDAAyB,EACtC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CACvD,CAAC,CAAC;YACH,UAAU,GAAG,WAAW,CAAC;YACzB,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACb,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EACzC,YAAY,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,MAAM,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAa,EAAC,GAAG,EAAE;gBACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,EAAE;oBACtD,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EACzC,GAAG,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC,CAAC,CAAC,CAAC,SAAS;aAChB,CAAwB,CAAC;YAE1B,MAAM,SAAS,GAAG,IAAA,6CAAoB,EAClC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EACpD;gBACI,MAAM,EAAE,UAAU,CAAC,MAAa;gBAChC,QAAQ,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE;gBACxC,kBAAkB,EAAE,UAAU,CAAC,kBAAkB,IAAI,EAAE;gBACvD,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,EAAE;gBAC3C,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,YAAY,EAAE,EAAE;gBAChB,iBAAiB,EAAE,CAAC;gBACpB,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,UAAU,EAAE,EAAE;gBACd,iBAAiB,EAAE,UAAU,CAAC,iBAAwB;gBACtD,KAAK,EAAE,UAAU,CAAC,KAAK;aACnB,EACR,UAAU,CAAC,MAAM,CACpB,CAAC;YAEF,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5B,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY,IAAI,gBAAgB,EAAE,CAAC;gBACxD,UAAU,GAAG,iBAAiB,CAAC;gBAC/B,UAAU,GAAG,IAAI,CAAC;YACtB,CAAC;iBAAM,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,aAAa,EAAE,CAAC;gBACxD,UAAU,GAAG,aAAa,CAAC;gBAC3B,UAAU,GAAG,IAAI,CAAC;YACtB,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,SAAS,GAA6B;gBACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,EAAE;gBACZ,kBAAkB,EAAE,EAAE;gBACtB,YAAY,EAAE,EAAE;gBAChB,SAAS,EAAE,CAAC;gBACZ,YAAY,EAAE,CAAC;gBACf,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE;aAClD,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5B,IAAI,aAAa,EAAE,CAAC;gBAChB,UAAU,GAAG,aAAa,CAAC;gBAC3B,UAAU,GAAG,IAAI,CAAC;YACtB,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAA,6CAAoB,EAAC,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAC9E,CAAC"}

package/icon.svg

@@ -0,0 +1,6 @@
+<svg width="256" height="256" viewBox="0 0 256 256" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <rect width="256" height="256" rx="48" fill="#0F172A"/>
+  <path d="M128 48 L192 72 V128 C192 168 160 192 128 208 C96 192 64 168 64 128 V72 L128 48Z" fill="#3B82F6" fill-opacity="0.15" stroke="#3B82F6" stroke-width="4" stroke-linejoin="round"/>
+  <path d="M104 128 L120 144 L160 104" stroke="#3B82F6" stroke-width="8" stroke-linecap="round" stroke-linejoin="round"/>
+  <text x="128" y="240" text-anchor="middle" fill="#94A3B8" font-family="system-ui, sans-serif" font-size="24" font-weight="600">SecureCode</text>
+</svg>

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@securecode-ai/mcp",
-  "version": "0.5.7",
+  "version": "0.6.0",
   "description": "Standalone SecureCode MCP server — scan, map, fix, and attack tools for AI coding assistants. Works without the VS Code extension.",
   "main": "dist/index.js",
   "bin": {
     "securecode-mcp": "dist/index.js"
   },
+  "icon": "icon.svg",
   "scripts": {
     "build": "tsc -p ./",
     "start": "node dist/index.js serve",
@@ -16,7 +17,8 @@
   },
   "files": [
     "dist/",
-    "resources/tree-sitter/"
+    "resources/tree-sitter/",
+    "icon.svg"
   ],
   "keywords": [
     "mcp",