@skaleagents/swarm 0.6.18 → 0.6.20

package/README.md

@@ -113,9 +113,10 @@ in every result. An empty finding list is not proof that a system is secure.
 The web app hosts `https://skaleagents.com/mcp` using `handleMcpRequest` from
 `@skaleagents/swarm/http`. Audit workers import `scanIac` from
 `@skaleagents/swarm/scan`. It validates each bearer credential with the API's
-`/api/oauth/mcp-token` endpoint before running a tool. Tokens are bound to the
-MCP resource and cannot access unrelated API routes. Credentials are not
-forwarded to the public bot directory.
+`/api/oauth/mcp-token` endpoint before running a tool. A successful check is
+reused for up to 60 seconds, so a revoked token can run tools for up to a
+minute. Tokens are bound to the MCP resource and cannot access unrelated API
+routes. Credentials are not forwarded to the public bot directory.
 
 `protectedResourceMetadata` exports the discovery response for
 `/.well-known/oauth-protected-resource/mcp`.

package/dist/application/tools.js

@@ -3,14 +3,16 @@ import { requireApiAuth, unauthorizedContent } from "../auth.js";
 import { ScanInputError } from "../iac/parse.js";
 import { contextSchema, fileSchema, planReview, consultationInstructions, } from "./intake.js";
 import { reviewApplication } from "./review.js";
-async function run(remote, compute) {
+import { applicationTargetSchema, withSavedReview } from "../saved-review.js";
+async function run(remote, compute, save) {
     if (!remote) {
         const auth = await requireApiAuth();
         if (!auth.ok)
             return unauthorizedContent(auth);
     }
     try {
-        const output = compute();
+        const computed = compute();
+        const output = save ? await withSavedReview(computed, save) : computed;
         return {
             content: [
                 { type: "text", text: JSON.stringify(output, null, 2) },
@@ -58,7 +60,8 @@ export function registerConsultation(server, remote) {
     server.registerTool("review_application_architecture", {
         title: "Review whole-application architecture",
         description: "Review related source files as an application. Builds a JS/TS import graph, checks Next.js server/client and runtime boundaries, maps routes and mutations, and returns evidence-backed findings plus questions covering data, auth, reliability, tests, deployment and product fit. Pass answers in context on subsequent calls. No repository fetch or execution; the connected assistant reasons about system-level tradeoffs using the returned evidence.",
-        annotations,
+        // Saves a review to the account when authorized, so it is not read-only.
+        annotations: { ...annotations, readOnlyHint: false },
         _meta: security,
         inputSchema: {
             files: z
@@ -67,8 +70,13 @@ export function registerConsultation(server, remote) {
                 .max(80)
                 .describe("Related source/config/test files with repository-relative paths; include package.json and tsconfig.json. At most 500,000 combined content characters"),
             context: contextSchema,
+            target: applicationTargetSchema,
         },
-    }, ({ files, context }) => run(remote, () => reviewApplication(files, context)));
+    }, ({ files, context, target }) => run(remote, () => reviewApplication(files, context), {
+        tool: "review_application_architecture",
+        target: target ?? null,
+        submittedPaths: files.map((file) => file.path),
+    }));
     server.registerPrompt("architecture_consultation", {
         title: "Independent application architecture consultation",
         description: "Guide a multi-turn whole-application review with source evidence, follow-up questions, and design tradeoffs.",

package/dist/http.js

@@ -1,6 +1,8 @@
+import { createHash } from "node:crypto";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { createServer } from "./server.js";
 import { getApiUrl } from "./config.js";
+import { requestAuthorization } from "./saved-review.js";
 const resource = process.env.MCP_RESOURCE_URL ?? "https://skaleagents.com/mcp";
 const metadataUrl = `${new URL(resource).origin}/.well-known/oauth-protected-resource/mcp`;
 const allowedOrigins = new Set([
@@ -36,6 +38,16 @@ export function protectedResourceMetadata() {
         resource_documentation: "https://skaleagents.com/mcp-config",
     });
 }
+// Revocation can take up to one TTL to take effect for an already-validated token.
+const validationTtlMs = 60_000;
+const validationCacheLimit = 10_000;
+const validatedUntil = new Map();
+function rememberValidation(key, until) {
+    // Map keeps insertion order, so the first key is the oldest entry to evict.
+    if (!validatedUntil.has(key) && validatedUntil.size >= validationCacheLimit)
+        validatedUntil.delete(validatedUntil.keys().next().value);
+    validatedUntil.set(key, until);
+}
 export async function handleMcpRequest(request) {
     const origin = request.headers.get("origin");
     if (origin && !allowedOrigins.has(origin))
@@ -45,30 +57,35 @@ export async function handleMcpRequest(request) {
     const authorization = request.headers.get("authorization");
     if (!authorization || !/^Bearer [^\s]+$/i.test(authorization))
         return challenge();
-    try {
-        // Validate the opaque token with its issuer, including the MCP audience.
-        const validation = await fetch(`${getApiUrl()}/api/oauth/mcp-token`, {
-            headers: { Authorization: authorization, Accept: "application/json" },
-            signal: AbortSignal.timeout(10_000),
-            redirect: "error",
-            cache: "no-store",
-        });
-        if (validation.status === 401 || validation.status === 403)
-            return challenge();
-        if (!validation.ok)
+    // Cache only successful validations, keyed by a digest so raw tokens are not kept.
+    const tokenKey = createHash("sha256").update(authorization.slice(7)).digest("hex");
+    if ((validatedUntil.get(tokenKey) ?? 0) <= Date.now()) {
+        try {
+            // Validate the opaque token with its issuer, including the MCP audience.
+            const validation = await fetch(`${getApiUrl()}/api/oauth/mcp-token`, {
+                headers: { Authorization: authorization, Accept: "application/json" },
+                signal: AbortSignal.timeout(10_000),
+                redirect: "error",
+                cache: "no-store",
+            });
+            if (validation.status === 401 || validation.status === 403)
+                return challenge();
+            if (!validation.ok)
+                return json(503, { error: "authorization_unavailable" });
+            const token = (await validation.json());
+            if (!token.active ||
+                token.resource !== resource ||
+                token.scope !== "mcp" ||
+                !token.expiresAt ||
+                token.expiresAt * 1000 <= Date.now()) {
+                return challenge();
+            }
+            rememberValidation(tokenKey, Math.min(Date.now() + validationTtlMs, token.expiresAt * 1000));
+        }
+        catch {
             return json(503, { error: "authorization_unavailable" });
-        const token = (await validation.json());
-        if (!token.active ||
-            token.resource !== resource ||
-            token.scope !== "mcp" ||
-            !token.expiresAt ||
-            token.expiresAt * 1000 <= Date.now()) {
-            return challenge();
         }
     }
-    catch {
-        return json(503, { error: "authorization_unavailable" });
-    }
     if (request.method !== "POST")
         return json(405, { error: "method_not_allowed" }, { Allow: "POST, OPTIONS" });
     if (!request.headers.get("content-type")?.startsWith("application/json"))
@@ -105,30 +122,32 @@ export async function handleMcpRequest(request) {
             error: { code: -32700, message: "Invalid JSON" },
         });
     }
-    const server = createServer(true);
-    const transport = new WebStandardStreamableHTTPServerTransport({
-        sessionIdGenerator: undefined,
-        enableJsonResponse: true,
-    });
-    try {
-        await server.connect(transport);
-        const response = await transport.handleRequest(request, {
-            parsedBody: body,
-        });
-        // Finish the JSON response before closing this request-scoped transport.
-        const responseBody = await response.arrayBuffer();
-        const responseHeaders = new Headers(response.headers);
-        for (const [key, value] of Object.entries(headers))
-            responseHeaders.set(key, value);
-        return new Response(responseBody.byteLength ? responseBody : null, {
-            status: response.status,
-            headers: responseHeaders,
+    return requestAuthorization.run(authorization, async () => {
+        const server = createServer(true);
+        const transport = new WebStandardStreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            enableJsonResponse: true,
         });
-    }
-    catch {
-        return json(500, { error: "mcp_request_failed" });
-    }
-    finally {
-        await server.close();
-    }
+        try {
+            await server.connect(transport);
+            const response = await transport.handleRequest(request, {
+                parsedBody: body,
+            });
+            // Finish the JSON response before closing this request-scoped transport.
+            const responseBody = await response.arrayBuffer();
+            const responseHeaders = new Headers(response.headers);
+            for (const [key, value] of Object.entries(headers))
+                responseHeaders.set(key, value);
+            return new Response(responseBody.byteLength ? responseBody : null, {
+                status: response.status,
+                headers: responseHeaders,
+            });
+        }
+        catch {
+            return json(500, { error: "mcp_request_failed" });
+        }
+        finally {
+            await server.close();
+        }
+    });
 }

package/dist/iac/parse.js

@@ -39,8 +39,8 @@ export function looksLikeIac(content) {
             /* Other format detection still applies to incomplete input. */
         }
     }
-    return (/^\s*(?:resource|module|terraform|variable|provider)\s+["{]/m.test(content) ||
-        /^\s*(?:["']?Resources["']?\s*:|apiVersion\s*:)/m.test(content) ||
+    return (/^[^\S\n]*(?:resource|module|terraform|variable|provider)\s+["{]/m.test(content) ||
+        /^[^\S\n]*(?:["']?Resources["']?\s*:|apiVersion\s*:)/m.test(content) ||
         /^\s*\{\s*"(?:resource|Resources|apiVersion|AWSTemplateFormatVersion)"\s*:/.test(content) ||
         looksLikePulumiYaml(content) ||
         looksLikePulumiProgram(content) ||
@@ -57,13 +57,13 @@ export function looksLikeIac(content) {
         looksLikeIamPolicy(content));
 }
 export function looksLikePulumiProgram(content) {
-    return /(?:^|\n)\s*(?:import\s+\*\s+as\s+pulumi\b|import\s+pulumi\b|from\s+["']@pulumi\/)/.test(content);
+    return /(?:^|\n)[^\S\n]*(?:import\s+\*\s+as\s+pulumi\b|import\s+pulumi\b|from\s+["']@pulumi\/)/.test(content);
 }
 export function looksLikeCompose(content) {
-    return /^\s*services\s*:/m.test(content) && /^\s+image\s*:/m.test(content);
+    return /^[^\S\n]*services\s*:/m.test(content) && /^[^\S\n]+image\s*:/m.test(content);
 }
 export function looksLikeDockerfile(content) {
-    return /^\s*FROM\s+\S+/m.test(content);
+    return /^[^\S\n]*FROM\s+\S+/m.test(content);
 }
 function topLevelKey(content, name) {
     return new RegExp(`^(?:"${name}"|'${name}'|${name})\\s*:`, "m").test(content);
@@ -71,7 +71,7 @@ function topLevelKey(content, name) {
 function playbookShape(content) {
     if (topLevelKey(content, "hosts") && topLevelKey(content, "tasks"))
         return true;
-    return /^\s*-\s+hosts\s*:/m.test(content) && /^\s*tasks\s*:/m.test(content);
+    return /^[^\S\n]*-\s+hosts\s*:/m.test(content) && /^[^\S\n]*tasks\s*:/m.test(content);
 }
 export function looksLikeAnsible(content) {
     if (looksLikeGithubWorkflow(content))
@@ -86,27 +86,27 @@ export function looksLikeHelm(content) {
     const visible = maskNonCode(content);
     if (!visible.includes("{{"))
         return false;
-    return /^\s*(?:apiVersion|kind)\s*:/m.test(visible);
+    return /^[^\S\n]*(?:apiVersion|kind)\s*:/m.test(visible);
 }
 export function looksLikeGithubWorkflow(content) {
     if (topLevelKey(content, "apiVersion") || topLevelKey(content, "kind"))
         return false;
     const topOn = topLevelKey(content, "on");
     const composeOnly = topLevelKey(content, "services") &&
-        /^\s+image\s*:/m.test(content) &&
+        /^[^\S\n]+image\s*:/m.test(content) &&
         !topOn;
     if (composeOnly)
         return false;
     return topOn && topLevelKey(content, "jobs");
 }
 export function looksLikeTerraformHcl(content) {
-    return /^\s*(?:(?:resource|module|variable|provider|data|output)\s+"|(?:terraform|locals)\s*\{)/m.test(content);
+    return /^[^\S\n]*(?:(?:resource|module|variable|provider|data|output)\s+"|(?:terraform|locals)\s*\{)/m.test(content);
 }
 export function looksLikeBicep(content) {
     const visible = maskIaCComments(content);
     if (looksLikeTerraformHcl(visible))
         return false;
-    return /^\s*resource\s+[A-Za-z_][A-Za-z0-9_]*\s+['"]Microsoft\./m.test(visible);
+    return /^[^\S\n]*resource\s+[A-Za-z_][A-Za-z0-9_]*\s+['"]Microsoft\./m.test(visible);
 }
 export function looksLikeArm(content) {
     const visible = maskIaCComments(content).trim();
@@ -138,8 +138,8 @@ export function looksLikeArm(content) {
     return root.resources.some((item) => String(object(item).type ?? "").startsWith("Microsoft."));
 }
 export function looksLikePulumiYaml(content) {
-    return (/^\s*resources\s*:/m.test(content) &&
-        /^\s+type\s*:\s*[A-Za-z0-9_.-]+:\S+/m.test(content));
+    return (/^[^\S\n]*resources\s*:/m.test(content) &&
+        /^[^\S\n]+type\s*:\s*[A-Za-z0-9_.-]+:\S+/m.test(content));
 }
 const terraformExpressionWarning = "Variable and local literals from the submitted files are resolved. A string of those references, format of known literals, and join of known literals are resolved. Other functions and expressions are not evaluated.";
 export function parseIac(content, requested = "auto", shared) {
@@ -221,7 +221,7 @@ export function parseIac(content, requested = "auto", shared) {
         checkShape(data);
         // The HCL parser preserves expressions but does not expose source ranges.
         // Report the resource declaration line and the exact parsed property path.
-        const searchable = content.replace(/\/\*[\s\S]*?\*\/|(?:#|\/\/)[^\n]*/g, (match) => match.replace(/[^\n]/g, " "));
+        const searchable = blankComments(content, /(?:#|\/\/)[^\n]*/.source);
         for (const [type, instances] of Object.entries(object(object(data).resource))) {
             for (const [name, blocks] of Object.entries(object(instances))) {
                 const declaration = new RegExp(`\\bresource\\s+"${escapeRegex(type)}"\\s+"${escapeRegex(name)}"`).exec(searchable);
@@ -503,11 +503,35 @@ function programLocation(content, offset, path) {
         path,
     };
 }
+// One left-to-right pass that blanks block comments and, when given, line comments
+// (newlines kept). A lazy /\*[\s\S]*?\*\// rescans to the end for every unclosed opener,
+// which is quadratic on hostile input. An unclosed "/*" stays code, as before.
+function blankComments(text, lineSource) {
+    const pattern = new RegExp(lineSource ? `\\/\\*|${lineSource}` : "\\/\\*", "g");
+    let out = "";
+    let last = 0;
+    let closable = true;
+    for (let match = pattern.exec(text); match; match = pattern.exec(text)) {
+        let end = pattern.lastIndex;
+        if (match[0] === "/*") {
+            // No "*/" after one opener means none after any later opener either.
+            const close = closable ? text.indexOf("*/", end) : -1;
+            if (close < 0) {
+                closable = false;
+                continue;
+            }
+            end = close + 2;
+            pattern.lastIndex = end;
+        }
+        out += text.slice(last, match.index) + text.slice(match.index, end).replace(/[^\n]/g, " ");
+        last = end;
+    }
+    return out + text.slice(last);
+}
 function stripProgramComments(content) {
-    return content
-        .replace(/\/\*[\s\S]*?\*\//g, (match) => match.replace(/[^\n]/g, " "))
+    return blankComments(content)
         .replace(/(^|[^:])\/\/[^\n]*/g, (match) => match.replace(/[^\n]/g, " "))
-        .replace(/(^|\n)\s*#[^\n]*/g, (match) => match.replace(/[^\n]/g, " "));
+        .replace(/(^|\n)[^\S\n]*#[^\n]*/g, (match) => match.replace(/[^\n]/g, " "));
 }
 function parsePulumiProgram(content) {
     const searchable = stripProgramComments(content);
@@ -741,14 +765,14 @@ function gitlabShape(content) {
         return false;
     if (topLevelKey(content, "stages"))
         return true;
-    return /^\s*script\s*:/m.test(content);
+    return /^[^\S\n]*script\s*:/m.test(content);
 }
 function cloudBuildShape(content) {
     if (!topLevelKey(content, "steps"))
         return false;
     if (topLevelKey(content, "on") && topLevelKey(content, "jobs"))
         return false;
-    return /^\s*-\s*name\s*:/m.test(content);
+    return /^[^\S\n]*-\s*name\s*:/m.test(content);
 }
 function looksLikePipeline(content) {
     if (stolenPipelineInput(content) || looksLikeServerless(content))
@@ -918,11 +942,11 @@ function parsePipeline(content, format) {
 }
 function looksLikeTfvars(content) {
     const visible = maskIaCComments(content);
-    if (/^\s*(?:resource|module|provider)\s+["']/m.test(visible))
+    if (/^[^\S\n]*(?:resource|module|provider)\s+["']/m.test(visible))
         return false;
-    if (/^\s*(?:terraform|provider|module)\s*\{/m.test(visible))
+    if (/^[^\S\n]*(?:terraform|provider|module)\s*\{/m.test(visible))
         return false;
-    return /^\s*[A-Za-z_][A-Za-z0-9_]*\s*=\s*\S/m.test(visible);
+    return /^[^\S\n]*[A-Za-z_][A-Za-z0-9_]*\s*=\s*\S/m.test(visible);
 }
 function parseTfvars(content) {
     let data;
@@ -1235,8 +1259,8 @@ function escapeRegex(value) {
 }
 function maskNonCode(content) {
     const withoutBlockComments = content
-        .replace(/\{\{-?\s*\/\*[\s\S]*?\*\/\s*-?\}\}/g, (match) => match.replace(/[^\n]/g, " "))
-        .replace(/\{#[\s\S]*?#\}/g, (match) => match.replace(/[^\n]/g, " "));
+        .replace(/\{\{-?\s*\/\*[\s\S]{0,4096}?\*\/\s*-?\}\}/g, (match) => match.replace(/[^\n]/g, " "))
+        .replace(/\{#[\s\S]{0,4096}?#\}/g, (match) => match.replace(/[^\n]/g, " "));
     return withoutBlockComments
         .split("\n")
         .map((line) => {
@@ -1314,7 +1338,7 @@ function parseHelm(content) {
 }
 function parseAnsible(content) {
     const visible = maskNonCode(content);
-    const become = firstLiteral(visible, /(?:^|\n)\s*(?:-\s+)?become\s*:\s*["']?(?:true|yes)["']?(?=\s|$)/);
+    const become = firstLiteral(visible, /(?:^|\n)[^\S\n]*(?:-\s+)?become\s*:\s*["']?(?:true|yes)["']?(?=\s|$)/);
     const cidr = firstLiteral(visible, /(?:cidr|source)\s*:\s*(?:\|\s*)?(?:\n\s*-\s*)?["']?0\.0\.0\.0\/0\b/);
     return {
         format: "ansible",
@@ -1532,7 +1556,7 @@ function substituteKnownParameters(template, parameters) {
     let unresolved = false;
     let secret = false;
     const names = [];
-    const text = template.replace(/\$\{(!?)([^}]*)\}/g, (full, literalMark, rawName) => {
+    const text = template.replace(/\$\{(!?)([^}]{0,200})\}/g, (full, literalMark, rawName) => {
         if (literalMark === "!")
             return `\${${rawName}}`;
         const name = rawName.trim();
@@ -1726,7 +1750,9 @@ export function looksLikePackage(content) {
         plainObject(root.scripts));
 }
 function scriptPipesDownload(command) {
-    return /\b(?:curl|wget)\b[\s\S]*\|\s*(?:ba)?sh\b/.test(command);
+    // Search only after the first download word. A [\s\S]* prefix rescans per download word.
+    const start = command.search(/\b(?:curl|wget)\b/);
+    return start >= 0 && /\|\s*(?:ba)?sh\b/.test(command.slice(start));
 }
 function jsonKeyLine(content, key) {
     const match = new RegExp(`"${escapeRegex(key)}"\\s*:`).exec(content);

package/dist/review.js

@@ -148,7 +148,7 @@ export function architectureFindings(content, focus) {
         });
     }
     if (shouldInclude(focusValue, "security") &&
-        /^\s*USER\s+root\s*$/im.test(content)) {
+        /^[^\S\n]*USER\s+root\s*$/im.test(content)) {
         findings.push({
             severity: "medium",
             title: "Container runs as root",
@@ -175,7 +175,7 @@ export function architectureFindings(content, focus) {
             "Retry limit is unbounded": /(?:max_?retries|retry_?count|retries)\s*[:=]\s*(?:-1|Infinity)\b/i,
             "Database connection limit is unlimited": /(?:max_?open_?conns|maxOpenConns|SetMaxOpenConns)\s*(?:[:=]|\()\s*0\b/,
             "Memory limit is disabled": /(?:mem_limit|memory_limit)\s*[:=]\s*["']?0\b/i,
-            "Container runs as root": /^\s*USER\s+root\s*$/im,
+            "Container runs as root": /^[^\S\n]*USER\s+root\s*$/im,
         };
         const pattern = matchers[finding.title];
         const matches = pattern

package/dist/saved-review.d.ts

@@ -0,0 +1,36 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { z } from "zod";
+export declare const savedTargetSchema: z.ZodOptional<z.ZodObject<{
+    repository: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    revision: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>>;
+export declare const applicationTargetSchema: z.ZodOptional<z.ZodObject<{
+    repository: z.ZodOptional<z.ZodString>;
+    revision: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>>;
+export declare const requestAuthorization: AsyncLocalStorage<string>;
+export declare const ASSISTANT_INSTRUCTION = "Report the headline and the one recommended change. Include the share link. If the headline says the finding is gone, say that. If there are no findings, say that this does not prove the system is secure. Do not paste source, diffs, or account details. Do not invent a link when the share link is missing.";
+type Target = {
+    repository?: string;
+    path?: string;
+    revision?: string;
+};
+type SaveInput = {
+    tool: string;
+    target?: Target | null;
+    submittedPaths: string[];
+};
+export declare function buildProjection(input: SaveInput, output: Record<string, unknown>): {
+    tool: string;
+    engineVersion: string;
+    target: Target | null;
+    riskSentence: unknown;
+    findings: Record<string, unknown>[];
+    truncated: boolean;
+    checked: string[];
+    skipped: string[];
+    submittedPaths: string[];
+};
+export declare function withSavedReview(output: Record<string, unknown>, input: SaveInput): Promise<Record<string, unknown>>;
+export {};

package/dist/saved-review.js

@@ -0,0 +1,177 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { z } from "zod";
+import { getApiAccessToken } from "./auth.js";
+import { getApiUrl } from "./config.js";
+import { VERSION } from "./version.js";
+const repositoryLabel = z
+    .string()
+    .regex(/^[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)?$/)
+    .max(200);
+const relativePath = z
+    .string()
+    .min(1)
+    .max(500)
+    .refine((path) => !path.startsWith("/") && !path.includes("..") && !path.includes("\\"));
+const revision = z.string().regex(/^[A-Za-z0-9._-]{1,64}$/);
+export const savedTargetSchema = z
+    .object({
+    repository: repositoryLabel.optional(),
+    path: relativePath.optional(),
+    revision: revision.optional(),
+})
+    .strict()
+    .optional()
+    .describe("Repository label for the next comparison. The server does not fetch it.");
+export const applicationTargetSchema = z
+    .object({
+    repository: repositoryLabel.optional(),
+    revision: revision.optional(),
+})
+    .strict()
+    .optional()
+    .describe("Repository label for the next comparison. Send paths on each file.");
+export const requestAuthorization = new AsyncLocalStorage();
+export const ASSISTANT_INSTRUCTION = "Report the headline and the one recommended change. Include the share link. If the headline says the finding is gone, say that. If there are no findings, say that this does not prove the system is secure. Do not paste source, diffs, or account details. Do not invent a link when the share link is missing.";
+const refused = {
+    saved: false,
+    id: null,
+    ownerUrl: null,
+    shareUrl: null,
+    shareExpiresAt: null,
+    comparison: null,
+    headline: null,
+    assistantInstruction: ASSISTANT_INSTRUCTION,
+};
+function clip(value, max = 200) {
+    if (typeof value !== "string")
+        return null;
+    const text = value.replaceAll("\n", " ").trim();
+    if (!text || text.length > max)
+        return null;
+    return text;
+}
+function findingPath(finding, fallback) {
+    const location = finding.location;
+    if (location && typeof location === "object" && "path" in location && fallback) {
+        return fallback;
+    }
+    const evidence = finding.evidence;
+    if (Array.isArray(evidence) && evidence[0] && typeof evidence[0] === "object" && "file" in evidence[0]) {
+        const file = clip(evidence[0].file, 500);
+        if (file)
+            return file;
+    }
+    return fallback;
+}
+export function buildProjection(input, output) {
+    const findings = Array.isArray(output.findings) ? output.findings : [];
+    const fallbackPath = input.target?.path ?? "";
+    const projected = findings.slice(0, 100).flatMap((item) => {
+        if (!item || typeof item !== "object")
+            return [];
+        const finding = item;
+        const title = clip(finding.title);
+        const severity = clip(finding.severity, 16);
+        if (!title || !severity)
+            return [];
+        const row = { title, severity };
+        const ruleId = clip(finding.ruleId, 64);
+        if (ruleId)
+            row.ruleId = ruleId;
+        for (const field of ["detail", "resource", "remediation"]) {
+            const text = clip(finding[field]);
+            if (text)
+                row[field] = text;
+        }
+        const path = findingPath(finding, fallbackPath);
+        if (path)
+            row.path = path;
+        const line = finding.location && typeof finding.location === "object" && "line" in finding.location
+            ? finding.location.line
+            : Array.isArray(finding.evidence) && finding.evidence[0] && typeof finding.evidence[0] === "object"
+                ? finding.evidence[0].line
+                : null;
+        if (typeof line === "number" && Number.isInteger(line) && line > 0)
+            row.line = line;
+        return [row];
+    });
+    const checked = Array.isArray(output.rulesEvaluated)
+        ? output.rulesEvaluated.flatMap((rule) => {
+            const text = clip(rule, 64);
+            return text ? [text] : [];
+        })
+        : [];
+    if (input.tool === "review_application_architecture") {
+        checked.unshift(`Reviewed ${input.submittedPaths.length} files.`);
+        checked.push(...input.submittedPaths);
+    }
+    const skipped = [];
+    if (Array.isArray(output.warnings) && output.warnings.length > 0) {
+        const count = output.warnings.length;
+        skipped.push(`The scanner reported ${count} ${count === 1 ? "warning" : "warnings"}.`);
+    }
+    for (const field of ["evidenceGaps", "limitations"]) {
+        if (!Array.isArray(output[field]))
+            continue;
+        for (const entry of output[field]) {
+            const text = clip(entry);
+            if (text)
+                skipped.push(text);
+            if (skipped.length >= 20)
+                break;
+        }
+    }
+    const summary = clip(output.summary);
+    const riskSentence = summary
+        ?? (projected.length === 0
+            ? "No findings. That does not prove the system is secure."
+            : projected[0].title);
+    return {
+        tool: input.tool,
+        engineVersion: VERSION,
+        target: input.target ?? null,
+        riskSentence,
+        findings: projected,
+        truncated: output.truncated === true || findings.length > 100,
+        checked: checked.length > 0 ? checked.slice(0, 20) : ["Individual checks were not recorded."],
+        skipped: skipped.length > 0 ? skipped.slice(0, 20) : ["Nothing was recorded as skipped."],
+        submittedPaths: input.submittedPaths.length > 0 ? input.submittedPaths : [fallbackPath],
+    };
+}
+async function authorizationHeader() {
+    const fromRequest = requestAuthorization.getStore();
+    if (fromRequest)
+        return fromRequest;
+    const token = await getApiAccessToken();
+    return token ? `Bearer ${token}` : null;
+}
+export async function withSavedReview(output, input) {
+    const projection = buildProjection(input, output);
+    let savedReview = refused;
+    const authorization = await authorizationHeader();
+    if (authorization) {
+        try {
+            const response = await fetch(`${getApiUrl()}/api/mcp/reviews`, {
+                method: "POST",
+                headers: {
+                    Authorization: authorization,
+                    Accept: "application/json",
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify(projection),
+                signal: AbortSignal.timeout(10_000),
+                redirect: "error",
+                cache: "no-store",
+            });
+            if (response.ok) {
+                const body = await response.json();
+                if (body.savedReview)
+                    savedReview = body.savedReview;
+            }
+        }
+        catch {
+            savedReview = refused;
+        }
+    }
+    return { ...output, savedReview };
+}

package/dist/server.js

@@ -6,6 +6,7 @@ import { looksLikeIac, ScanInputError } from "./iac/parse.js";
 import { filterFindings, scanIac, summarize } from "./iac/scan.js";
 import { registerConsultation } from "./application/tools.js";
 import { presentReview } from "./review-edits.js";
+import { savedTargetSchema, withSavedReview } from "./saved-review.js";
 import { VERSION } from "./version.js";
 const contentSchema = z
     .string()
@@ -59,7 +60,7 @@ export function createServer(remote = false) {
         title: "Review architecture",
         description: "Review individual source snippets or parsed infrastructure for security, reliability, and cost risks. Application checks include infrastructure bottlenecks: a disabled timeout, a one-connection pool, and an unbounded retry limit. For a whole application or Next.js architecture consultation, use plan_architecture_review and review_application_architecture instead.",
         annotations: {
-            readOnlyHint: true,
+            readOnlyHint: false,
             destructiveHint: false,
             openWorldHint: false,
         },
@@ -93,8 +94,9 @@ export function createServer(remote = false) {
                 .optional()
                 .default("auto")
                 .describe("Content format: terraform, cloudformation, kubernetes, pulumi, compose, dockerfile, github, helm, ansible, bicep, arm, gitlab, azure-pipelines, cloudbuild, tfvars, serverless, iam, package, application, auto."),
+            target: savedTargetSchema,
         },
-    }, async ({ content, focus, format, minSeverity, maxFindings }) => {
+    }, async ({ content, focus, format, minSeverity, maxFindings, target }) => {
         const botHints = fetchPublicBotHints();
         if (!remote) {
             const auth = await requireApiAuth();
@@ -103,15 +105,20 @@ export function createServer(remote = false) {
         }
         try {
             const options = { focus, minSeverity, maxFindings };
+            const save = {
+                tool: "review_architecture",
+                target: target ?? null,
+                submittedPaths: [target?.path ?? ""],
+            };
             if (format !== "application" &&
                 (format !== "auto" || looksLikeIac(content))) {
-                return result(presentReview(content, {
+                return result(await withSavedReview(presentReview(content, {
                     ...scanIac(content, { ...options, format }),
                     botHints: await botHints,
-                }));
+                }), save));
             }
             const findings = filterFindings(architectureFindings(content, focus).slice(1), options);
-            return result(presentReview(content, {
+            return result(await withSavedReview(presentReview(content, {
                 status: "completed",
                 engineVersion: VERSION,
                 format: "application",
@@ -125,7 +132,7 @@ export function createServer(remote = false) {
                     "Infrastructure bottleneck checks cover a disabled timeout, a one-connection pool, and an unbounded retry limit.",
                 ],
                 botHints: await botHints,
-            }));
+            }), save));
         }
         catch (error) {
             return inputError(error);
@@ -141,7 +148,7 @@ export function createServer(remote = false) {
                 : "") +
                 "Parse Terraform HCL/JSON, CloudFormation YAML/JSON, Kubernetes manifests, Pulumi YAML, Pulumi programs, or Docker Compose. Includes Dockerfile, GitHub Actions, Helm templates, Ansible playbooks, Bicep files, ARM templates, GitLab CI, Azure Pipelines, Cloud Build, tfvars, Serverless Framework, a standalone IAM policy, and package.json. Helm templates, Ansible facts, Bicep modules, ARM expressions, pipelines, Serverless Framework config, and IAM policies are not executed. Conditions are not evaluated. Terraform module sources are not fetched. Check security, reliability and cost rules with resource locations and remediation. Pulumi programs are scanned as text.",
             annotations: {
-                readOnlyHint: true,
+                readOnlyHint: false,
                 destructiveHint: false,
                 openWorldHint: false,
             },
@@ -172,15 +179,20 @@ export function createServer(remote = false) {
                 ])
                     .default("auto"),
                 ...filters,
+                target: savedTargetSchema,
             },
-        }, async ({ content, format, focus, minSeverity, maxFindings }) => {
+        }, async ({ content, format, focus, minSeverity, maxFindings, target }) => {
             if (!remote) {
                 const auth = await requireApiAuth();
                 if (!auth.ok)
                     return unauthorizedContent(auth);
             }
             try {
-                return result(presentReview(content, scanIac(content, { format, focus, minSeverity, maxFindings })));
+                return result(await withSavedReview(presentReview(content, scanIac(content, { format, focus, minSeverity, maxFindings })), {
+                    tool: name,
+                    target: target ?? null,
+                    submittedPaths: [target?.path ?? ""],
+                }));
             }
             catch (error) {
                 return inputError(error);

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "0.6.18";
+export declare const VERSION = "0.6.20";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "0.6.18";
+export const VERSION = "0.6.20";

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@skaleagents/swarm",
-  "version": "0.6.18",
+  "version": "0.6.20",
   "private": false,
   "publishConfig": {
     "access": "public"
   },
   "type": "module",
   "description": "SkaleAgents review tools with OAuth for local and hosted MCP clients",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SkaleAgents/mcp-server.git"
+  },
   "exports": {
     "./http": {
       "types": "./dist/http.d.ts",