@subseam/mcp 0.4.60 → 0.4.62

package/dist/main.js

@@ -12090,6 +12090,9 @@ init_esm_shims();
 // ../execution-contract/src/unit/build-report.ts
 init_esm_shims();
 
+// ../execution-contract/src/unit/service-report.ts
+init_esm_shims();
+
 // ../execution-contract/src/dispatchable-packages.ts
 init_esm_shims();
 
@@ -12821,7 +12824,7 @@ init_esm_shims();
 
 // ../channel-sdk/src/capability-type.ts
 init_esm_shims();
-var CAPABILITY_TYPES = ["analyze", "build", "capture", "decision", "define", "execute", "search", "secure", "tension", "verify", "work", "write"];
+var CAPABILITY_TYPES = ["build", "capture", "decision", "define", "execute", "search", "verify", "work", "write"];
 
 // ../channel-sdk/src/validate.ts
 function assertToolProvider(value, source) {
@@ -16932,26 +16935,6 @@ function parseRemoteSlug(url2) {
   if (segments.length < 2) return null;
   return `${segments[segments.length - 2]}/${segments[segments.length - 1]}`;
 }
-async function requireRepo(env, readOrigin2) {
-  const envRepo = env["SUBSEAM_REPO"];
-  if (envRepo !== void 0 && envRepo !== "") {
-    return envRepo;
-  }
-  let seen;
-  try {
-    seen = await readOrigin2();
-  } catch (err) {
-    throw new Error(`SUBSEAM_REPO unset; git remote origin = unreadable (${err instanceof Error ? err.message : String(err)}) did not parse as owner/name`);
-  }
-  if (seen === null) {
-    throw new Error(`SUBSEAM_REPO unset; git remote origin = none did not parse as owner/name`);
-  }
-  const slug = parseRemoteSlug(seen);
-  if (slug !== null) {
-    return slug;
-  }
-  throw new Error(`SUBSEAM_REPO unset; git remote origin = ${seen} did not parse as owner/name`);
-}
 
 // src/account.ts
 init_esm_shims();
@@ -18514,158 +18497,24 @@ function mountProviders(server, providers, ctx) {
 // src/registry.ts
 init_esm_shims();
 
-// ../analyze-tool/src/index.ts
-init_esm_shims();
-
-// ../analyze-tool/src/run.ts
-init_esm_shims();
-
-// ../analyze-tool/src/proposed-commit.ts
-init_esm_shims();
-import { execFile as execFile4 } from "child_process";
-import { promisify as promisify4 } from "util";
-import { mkdtemp, readFile as readFile4, rm as rm3 } from "fs/promises";
-import { tmpdir as tmpdir3 } from "os";
-import { join as join8 } from "path";
-var execFileP = promisify4(execFile4);
-var PROPOSED_REF = "refs/subseam/proposed";
-async function git(cwd, args, env) {
-  const options = env === void 0 ? { cwd } : { cwd, env: { ...process.env, ...env } };
-  const { stdout } = await execFileP("git", args, options);
-  return stdout.trim();
-}
-async function buildProposedCommit(cwd, scope, file2) {
-  const scratch = await mkdtemp(join8(tmpdir3(), "subseam-mcp-"));
-  try {
-    const tree = scope === "index" ? await git(cwd, ["write-tree"]) : file2 !== void 0 ? await treeOfWorktreeFile(cwd, scratch, file2) : await treeOfWorktreeAll(cwd, scratch);
-    const commit = await git(cwd, ["commit-tree", tree, "-p", "HEAD", "-m", "subseam-proposed"]);
-    await git(cwd, ["update-ref", PROPOSED_REF, commit]);
-    const bundlePath = join8(scratch, "proposed.bundle");
-    try {
-      await git(cwd, ["bundle", "create", bundlePath, PROPOSED_REF, "--not", "HEAD"]);
-    } finally {
-      await git(cwd, ["update-ref", "-d", PROPOSED_REF]).catch(() => {
-      });
-    }
-    return { bundle: (await readFile4(bundlePath)).toString("base64"), commit };
-  } finally {
-    await rm3(scratch, { recursive: true, force: true });
-  }
-}
-async function treeOfWorktreeFile(cwd, scratch, file2) {
-  const env = { GIT_INDEX_FILE: join8(scratch, "index") };
-  await git(cwd, ["read-tree", "HEAD"], env);
-  await git(cwd, ["add", "--", file2], env);
-  return git(cwd, ["write-tree"], env);
-}
-async function treeOfWorktreeAll(cwd, scratch) {
-  const env = { GIT_INDEX_FILE: join8(scratch, "index") };
-  await git(cwd, ["read-tree", "HEAD"], env);
-  await git(cwd, ["add", "-A"], env);
-  return git(cwd, ["write-tree"], env);
-}
-
-// ../analyze-tool/src/run.ts
-function targetOf(input12) {
-  if (input12.symbol !== void 0) return { path: input12.path, symbol: input12.symbol };
-  if (input12.line !== void 0) return { path: input12.path, line: input12.line };
-  throw new Error("Provide either `symbol` or `line` to address the seam to analyze.");
-}
-async function buildTip(cwd, input12) {
-  switch (input12.mode) {
-    case "head":
-      return { mode: "head" };
-    case "commit":
-      if (input12.commit === void 0 || input12.commit === "") {
-        throw new Error("Mode `commit` needs a `commit` sha to analyze.");
-      }
-      return { mode: "commit", commit: input12.commit };
-    case "staged":
-      return { mode: "staged", proposed: await buildProposedCommit(cwd, "index", input12.path) };
-    case "working":
-      return { mode: "working", proposed: await buildProposedCommit(cwd, "worktree", input12.path) };
-  }
-}
-async function runAnalyze(repo2, ctx, input12) {
-  const target = targetOf(input12);
-  const tip = await buildTip(ctx.cwd, input12);
-  const request = { repo: repo2, target, tip };
-  const { histories } = await ctx.gateway.invoke("analyze", request);
-  return histories;
-}
-
-// ../analyze-tool/src/format.ts
-init_esm_shims();
-function formatHistories(histories) {
-  if (histories.length === 0) {
-    return "No seam resolves at that location \u2014 nothing alive sits there.";
-  }
-  return histories.map(formatOne).join("\n\n");
-}
-function formatOne(h) {
-  const lines = [`${h.label} \u2014 ${h.target.path}:${h.target.startLine} (${h.timeline.length} point${h.timeline.length === 1 ? "" : "s"})`];
-  for (const c of h.timeline) {
-    const marker = c.isTip ? "\u25B6 TIP " : "      ";
-    lines.push(`  ${marker}${c.commit.slice(0, 8)}  ${c.verdict.padEnd(10)} ${c.presentation.headline}`);
-    if (c.presentation.detail !== void 0) {
-      lines.push(`              ${c.presentation.detail}`);
-    }
-  }
-  return lines.join("\n");
-}
-
-// ../analyze-tool/src/read-origin.ts
-init_esm_shims();
-import { execFile as execFile5 } from "child_process";
-import { promisify as promisify5 } from "util";
-var execFileP2 = promisify5(execFile5);
-async function readOrigin(root) {
-  try {
-    const { stdout } = await execFileP2("git", ["-C", root, "remote", "get-url", "origin"]);
-    return stdout.trim();
-  } catch {
-    return null;
-  }
-}
-
-// ../analyze-tool/src/index.ts
-var DESCRIPTION = "Deterministic behavioral history of the seam(s) at a code location, optionally extended through your uncommitted change as the focal tip. You know what you MEANT; this tells you what your change DID behaviorally. Call it after an edit, before declaring done, or when reasoning about an area \u2014 then reconcile it against your intent.";
-var analyzeTool = {
-  name: "analyze",
-  capability: "analyze",
-  description: DESCRIPTION,
-  inputSchema: {
-    path: external_exports.string().describe("Repo-relative file path you are working in."),
-    symbol: external_exports.string().optional().describe("Symbol name at that path (a function name). Address by this OR line."),
-    line: external_exports.number().int().positive().optional().describe("1-based line at that path. Address by this OR symbol."),
-    mode: external_exports.enum(["head", "working", "staged", "commit"]).default("working").describe("Tip source: head = committed history; working = your unsaved edit; staged = git index; commit = a real commit."),
-    commit: external_exports.string().optional().describe("Commit sha \u2014 required when mode is `commit`.")
-  },
-  async handler(input12, ctx) {
-    const histories = await runAnalyze(await requireRepo(process.env, () => readOrigin(ctx.cwd)), ctx, input12);
-    return { text: formatHistories(histories) };
-  }
-};
-var src_default = analyzeTool;
-
 // ../explore-tool/src/index.ts
 init_esm_shims();
 
 // ../explore-tool/src/enumerate.ts
 init_esm_shims();
-import { execFile as execFile6 } from "child_process";
-import { promisify as promisify6 } from "util";
+import { execFile as execFile4 } from "child_process";
+import { promisify as promisify4 } from "util";
 import { readdir as readdir3, realpath as realpath2 } from "fs/promises";
-import { basename as basename3, dirname as dirname4, join as join9 } from "path";
+import { basename as basename3, dirname as dirname4, join as join8 } from "path";
 
 // ../explore-tool/src/remote-slug.ts
 init_esm_shims();
 
 // ../explore-tool/src/enumerate.ts
-var execFileP3 = promisify6(execFile6);
+var execFileP = promisify4(execFile4);
 async function originSlug(root) {
   try {
-    const { stdout } = await execFileP3("git", ["-C", root, "remote", "get-url", "origin"]);
+    const { stdout } = await execFileP("git", ["-C", root, "remote", "get-url", "origin"]);
     return parseRemoteSlug(stdout);
   } catch {
     return null;
@@ -18673,7 +18522,7 @@ async function originSlug(root) {
 }
 async function gitToplevel(dir) {
   try {
-    const { stdout } = await execFileP3("git", ["-C", dir, "rev-parse", "--show-toplevel"]);
+    const { stdout } = await execFileP("git", ["-C", dir, "rev-parse", "--show-toplevel"]);
     return await realpath2(stdout.trim());
   } catch {
     return null;
@@ -18687,7 +18536,7 @@ async function discoverRepos(cwd) {
   const repos = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const childPath = join9(namespaceRoot, entry.name);
+    const childPath = join8(namespaceRoot, entry.name);
     const child = await realpath2(childPath).catch(() => null);
     if (child === null) continue;
     const toplevel = await gitToplevel(child);
@@ -18735,7 +18584,7 @@ function preferenceSorted(name, group) {
 
 // ../explore-tool/src/rg.ts
 init_esm_shims();
-import { execFile as execFile7, execFileSync } from "child_process";
+import { execFile as execFile5, execFileSync } from "child_process";
 var TREE_EXCLUDES = ["--glob", "!node_modules", "--glob", "!dist", "--glob", "!.git"];
 var DTS_EXCLUDE = ["--glob", "!*.d.ts"];
 var LOCKFILE_EXCLUDES = [
@@ -18771,7 +18620,7 @@ function isRgAvailable() {
 }
 function rgText(args) {
   return new Promise((resolve4) => {
-    execFile7("rg", args, { maxBuffer: 8 * 1024 * 1024 }, (_err, stdout) => {
+    execFile5("rg", args, { maxBuffer: 8 * 1024 * 1024 }, (_err, stdout) => {
       resolve4(stdout);
     });
   });
@@ -18833,11 +18682,11 @@ function rgParse(output) {
 
 // ../explore-tool/src/stamp.ts
 init_esm_shims();
-import { execFile as execFile8 } from "child_process";
-import { promisify as promisify7 } from "util";
-var execFileP4 = promisify7(execFile8);
-async function git2(root, args) {
-  const { stdout } = await execFileP4("git", ["-C", root, ...args]);
+import { execFile as execFile6 } from "child_process";
+import { promisify as promisify5 } from "util";
+var execFileP2 = promisify5(execFile6);
+async function git(root, args) {
+  const { stdout } = await execFileP2("git", ["-C", root, ...args]);
   return stdout.trim();
 }
 async function stampRepo(root) {
@@ -18845,9 +18694,9 @@ async function stampRepo(root) {
   let sha = "unknown";
   const modified = /* @__PURE__ */ new Set();
   try {
-    branch = await git2(root, ["rev-parse", "--abbrev-ref", "HEAD"]);
-    sha = await git2(root, ["rev-parse", "--short", "HEAD"]);
-    const status = await git2(root, ["status", "--porcelain"]);
+    branch = await git(root, ["rev-parse", "--abbrev-ref", "HEAD"]);
+    sha = await git(root, ["rev-parse", "--short", "HEAD"]);
+    const status = await git(root, ["status", "--porcelain"]);
     for (const line of status.split("\n")) {
       const path6 = line.slice(3).trim();
       if (path6 !== "") modified.add(path6);
@@ -19121,7 +18970,7 @@ function groupBy(items, key) {
 }
 
 // ../explore-tool/src/index.ts
-var DESCRIPTION2 = "Search code across every repo your org owns, ranked and enriched by the subseam code graph. Ripgrep finds the text in your live trees; the seam-concept graph reorders the hits by what matters (call-degree, churn) and annotates each with its concept, kind, behavioral history, and seam verdict. Hits in repos the graph has not acquired still come back as plain text \u2014 augmentation is additive.";
+var DESCRIPTION = "Search code across every repo your org owns, ranked and enriched by the subseam code graph. Ripgrep finds the text in your live trees; the seam-concept graph reorders the hits by what matters (call-degree, churn) and annotates each with its concept, kind, behavioral history, and seam verdict. Hits in repos the graph has not acquired still come back as plain text \u2014 augmentation is additive.";
 async function runSearch(pattern, verbose, ctx) {
   if (!isRgAvailable()) {
     throw new Error(
@@ -19157,7 +19006,7 @@ async function runSearch(pattern, verbose, ctx) {
 var searchTool = {
   name: "search",
   capability: "search",
-  description: DESCRIPTION2,
+  description: DESCRIPTION,
   inputSchema: {
     pattern: external_exports.string().describe("The text/regex pattern to search for (ripgrep syntax, case-insensitive)."),
     verbose: external_exports.boolean().optional().describe(
@@ -19169,69 +19018,7 @@ var searchTool = {
     return { text: await runSearch(pattern, verbose ?? false, ctx) };
   }
 };
-var src_default2 = searchTool;
-
-// ../analyze-tool/src/tension.ts
-init_esm_shims();
-
-// ../analyze-tool/src/tension-format.ts
-init_esm_shims();
-function formatTension(a) {
-  if (a.seams.length === 0) {
-    return `No seams disturbed at ${a.commit.slice(0, 8)} \u2014 nothing to review.`;
-  }
-  const head = `Tension @ ${a.commit.slice(0, 8)} \u2014 ${a.verdict.toUpperCase()} (${a.seams.length} seam${a.seams.length === 1 ? "" : "s"})`;
-  return [head, ...a.seams.map(formatSeam)].join("\n\n");
-}
-function formatFinding(f) {
-  const mark = f.severity === "warn" ? "\u26A0" : "\u2139";
-  const detail = f.presentation.detail !== void 0 ? `
-        ${f.presentation.detail}` : "";
-  return `    ${mark} [${f.detector}] ${f.presentation.headline}${detail}`;
-}
-function formatSeam(s) {
-  const lines = [`  ${s.label} \u2014 ${s.target.path}:${s.target.startLine}`];
-  for (const st of s.stitches) {
-    for (const f of st.findings) lines.push(formatFinding(f));
-  }
-  for (const f of s.findings) lines.push(formatFinding(f));
-  if (lines.length === 1) lines.push("    (no findings \u2014 clean)");
-  return lines.join("\n");
-}
-
-// ../analyze-tool/src/tension.ts
-var DESCRIPTION3 = "Deterministic behavioral review of a commit: the seams it disturbed, and what the WAY it changed them across history looks like \u2014 reintroduced behavior, broken invariants, scar tissue, thrashing, forgotten co-movers. A clean verdict (no findings) is a real answer. Call it on a commit to review before you trust it; the findings are deterministic ground-truth you reconcile against intent.";
-async function buildCommit(cwd, input12) {
-  switch (input12.mode) {
-    case "head":
-      return { mode: "head" };
-    case "commit":
-      if (input12.commit === void 0 || input12.commit === "") throw new Error("Mode `commit` needs a `commit` sha to review.");
-      return { mode: "commit", commit: input12.commit };
-    case "staged":
-      return { mode: "staged", proposed: await buildProposedCommit(cwd, "index") };
-    case "working":
-      return { mode: "working", proposed: await buildProposedCommit(cwd, "worktree") };
-  }
-}
-var tensionTool = {
-  name: "tension",
-  capability: "tension",
-  description: DESCRIPTION3,
-  inputSchema: {
-    mode: external_exports.enum(["head", "working", "staged", "commit"]).default("working").describe("What to review: working = your uncommitted change; staged = the index; head = the latest acquired commit; commit = a real sha."),
-    commit: external_exports.string().optional().describe("Commit sha \u2014 required when mode is `commit`.")
-  },
-  async handler(input12, ctx) {
-    const request = {
-      repo: await requireRepo(process.env, () => readOrigin(ctx.cwd)),
-      commit: await buildCommit(ctx.cwd, input12)
-    };
-    const analysis = await ctx.gateway.invoke("tension", request);
-    return { text: formatTension(analysis) };
-  }
-};
-var tension_default = tensionTool;
+var src_default = searchTool;
 
 // ../define/src/index.ts
 init_esm_shims();
@@ -35813,7 +35600,7 @@ var ContributionSeveritySchema = external_exports2.enum(["danger", "warn", "noti
 // ../contracts-api/src/v1/contribution.ts
 init_esm_shims();
 var ContributionSchema = contractObject({
-  /** The owning capability (a CapabilityType value, e.g. 'analyze'). */
+  /** The owning capability (a CapabilityType value, e.g. 'verify'). */
   capability: external_exports2.string(),
   /** The density this contribution was produced for. */
   density: DensitySchema,
@@ -37112,73 +36899,13 @@ var buildTools = [
   configTool
 ];
 
-// ../secure/src/index.ts
-init_esm_shims();
-
-// ../secure/src/tool/secure-tool.ts
-init_esm_shims();
-
-// ../secure/src/tool/format.ts
-init_esm_shims();
-function formatFindings(result) {
-  const escapes = formatEscapes(result);
-  const at = result.resolvedCommit === void 0 ? "" : `
-  at commit ${result.resolvedCommit}`;
-  if (result.status === "pending") {
-    const reason = result.gated?.reason ?? "analysis not available";
-    return `secure: PENDING \u2014 ${reason}${at}${escapes}`;
-  }
-  if (result.findings.length === 0) {
-    return `secure: analyzed \u2014 no taint paths on the seams this change touched.${at}${escapes}`;
-  }
-  const lines = result.findings.map(
-    (f) => `  [${f.sinkClass}] ${f.source.label} \u2192 ${f.sink.label}
-      from ${f.source.location.path}:${f.source.location.symbol}
-        to ${f.sink.location.path}:${f.sink.location.symbol}
-      id ${f.id}`
-  );
-  return `secure: ${result.findings.length} taint finding(s) on the seams this change touched:
-${lines.join("\n")}${at}${escapes}`;
-}
-function formatEscapes(result) {
-  if (result.escapes.length === 0) return "";
-  return `
-  ${result.escapes.length} unresolved crossing(s) \u2014 a taint path may exist through these that is NOT listed above:
-` + result.escapes.map((e) => `      ${e.at} (${e.reason}; could reach ${e.classes.join(", ") || "any sink class"})`).join("\n");
-}
-
-// ../secure/src/tool/secure-tool.ts
-var DESCRIPTION4 = "Deterministic taint / reachability over the named repo's code graph on the subseam platform \u2014 not a local scan: can untrusted input reach a sensitive operation (SQL, command, eval, path, template) on this change, and was it sanitized on the way? Differential \u2014 it reports source\u2192sink paths only on the seams your change touches, anchored to concept identity so a finding survives a refactor. Call it after an edit that moves data toward a sink, before declaring done.";
-var secureTool = {
-  name: "taint",
-  capability: "secure",
-  description: DESCRIPTION4,
-  inputSchema: {
-    repo: external_exports.string().min(1).describe("The repo name this analysis targets in the subseam graph (the name the checkout maps to)."),
-    mode: external_exports.enum(["head", "working", "staged", "commit"]).default("head").describe("Tip source: head = the latest committed tip (default); commit = a specific sha. Uncommitted modes (working, staged) cannot be addressed yet and answer pending."),
-    commit: external_exports.string().optional().describe("Commit sha \u2014 required when mode is `commit`.")
-  },
-  async handler(input12, ctx) {
-    const asked = input12;
-    if (asked.mode === "commit" && (asked.commit === void 0 || asked.commit === "")) {
-      throw new Error("Mode `commit` needs a `commit` sha to analyze.");
-    }
-    const result = await ctx.gateway.invoke("secure", {
-      repo: asked.repo,
-      mode: asked.mode,
-      ...asked.commit !== void 0 ? { commit: asked.commit } : {}
-    });
-    return { text: formatFindings(result) };
-  }
-};
-
 // src/registry.ts
 var workTools = createPullToolProviders({ capability: "work" });
 var workReadTools = createWorkReadToolProviders({ capability: "work" });
-var bundledProviders = [src_default2, src_default, tension_default, ...defineTools, ...decisionTools, ...captureTools, ...buildTools, secureTool, ...workTools, ...workReadTools];
+var bundledProviders = [src_default, ...defineTools, ...decisionTools, ...captureTools, ...buildTools, ...workTools, ...workReadTools];
 
 // package.json
-var version2 = "0.4.60";
+var version2 = "0.4.62";
 
 // src/server.ts
 var SERVER_VERSION = version2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@subseam/mcp",
-  "version": "0.4.60",
+  "version": "0.4.62",
   "private": false,
   "type": "module",
   "bin": {