@zhuixin/mcp 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { CoreConfig } from '@zhuixin/metadata';
+import { McpServer } from '@modelcontextprotocol/server';
+
+declare function startMcpServer(config?: CoreConfig): Promise<McpServer>;
+
+export { startMcpServer };

package/dist/index.js

@@ -0,0 +1,489 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import {
+  AppAnalysisService,
+  CoreFailure,
+  CoreServer,
+  VersionComparisonService,
+  loadConfig
+} from "@zhuixin/metadata";
+import { CHANNELS } from "@zhuixin/shared";
+import { McpServer } from "@modelcontextprotocol/server";
+import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
+import { realpathSync } from "fs";
+import { fileURLToPath } from "url";
+import { randomUUID } from "crypto";
+import { z } from "zod";
+var GOALS = [
+  "tech_stack",
+  "feature_map",
+  "network",
+  "native_risk",
+  "report"
+];
+function errorResult(error) {
+  const failure = error instanceof CoreFailure ? error : new CoreFailure(
+    "INTERNAL_ERROR",
+    error instanceof Error ? error.message : String(error)
+  );
+  const nextAction = failure.code === "AUTH_REQUIRED" || failure.code === "KEYCHAIN_LOCKED" ? "\u8FD0\u884C apptrace auth login\uFF0C\u7136\u540E\u91CD\u8BD5\u3002" : failure.code === "LICENSE_REQUIRED" ? "\u8BF7\u5148\u5728\u540C\u4E00 Apple \u8D26\u53F7\u7684 App Store \u83B7\u53D6\u8BE5\u5E94\u7528\u3002" : void 0;
+  return {
+    isError: true,
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(
+          {
+            code: failure.code,
+            message: failure.message,
+            details: failure.details,
+            nextAction
+          },
+          null,
+          2
+        )
+      }
+    ]
+  };
+}
+function textResult(value) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(value, null, 2)
+      }
+    ],
+    structuredContent: value
+  };
+}
+function jobResult(job) {
+  return {
+    jobId: job.id,
+    capabilityId: job.capabilityId,
+    status: job.status,
+    result: job.result,
+    errorCode: job.errorCode,
+    errorMessage: job.errorMessage
+  };
+}
+async function startMcpServer(config = loadConfig()) {
+  const core = new CoreServer({ config, emit: () => {
+  } });
+  core.store.interruptRunningAnalysisRuns();
+  const analysis = new AppAnalysisService(core);
+  const runs = /* @__PURE__ */ new Map();
+  const mcp = new McpServer({
+    name: "apptrace",
+    version: "0.1.0"
+  });
+  mcp.registerTool(
+    "analyze_app",
+    {
+      title: "Analyze an application",
+      description: "Resolve, acquire, inspect, extract and statically analyze an authorized app. Returns a compact evidence summary.",
+      inputSchema: z.object({
+        source: z.string().optional().describe("App Store URL or numeric App Store ID"),
+        target_id: z.string().uuid().optional().describe("Existing AppTrace target ID"),
+        goals: z.array(z.enum(GOALS)).optional().describe("Analysis goals; defaults to tech stack, feature map and report"),
+        force: z.boolean().optional().describe("Re-run analyses even when matching evidence already exists"),
+        wait_seconds: z.number().int().min(0).max(60).optional().describe("Seconds to wait before returning a running run_id"),
+        timeout_seconds: z.number().int().min(30).max(1800).optional()
+      })
+    },
+    async (input) => {
+      if (!input.source && !input.target_id) {
+        return errorResult(
+          new CoreFailure("SOURCE_REQUIRED", "\u8BF7\u63D0\u4F9B source \u6216 target_id\u3002")
+        );
+      }
+      try {
+        const runId = randomUUID();
+        const run = {
+          id: runId,
+          status: "running",
+          startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+          promise: Promise.resolve()
+        };
+        run.promise = analysis.analyzeApp({
+          source: input.source,
+          targetId: input.target_id,
+          goals: input.goals,
+          force: input.force,
+          timeoutMs: (input.timeout_seconds ?? 1200) * 1e3
+        }).then((result) => {
+          run.status = "completed";
+          run.result = result;
+          run.finishedAt = (/* @__PURE__ */ new Date()).toISOString();
+          core.store.upsertAnalysisRun({
+            id: run.id,
+            targetId: input.target_id,
+            status: "completed",
+            startedAt: run.startedAt,
+            finishedAt: run.finishedAt,
+            result: run.result,
+            updatedAt: run.finishedAt
+          });
+        }).catch((error) => {
+          const failure = error instanceof CoreFailure ? error : new CoreFailure(
+            "INTERNAL_ERROR",
+            error instanceof Error ? error.message : String(error)
+          );
+          run.status = "failed";
+          run.error = {
+            code: failure.code,
+            message: failure.message,
+            details: failure.details
+          };
+          run.finishedAt = (/* @__PURE__ */ new Date()).toISOString();
+          core.store.upsertAnalysisRun({
+            id: run.id,
+            targetId: input.target_id,
+            status: "failed",
+            startedAt: run.startedAt,
+            finishedAt: run.finishedAt,
+            error: run.error,
+            updatedAt: run.finishedAt
+          });
+        });
+        runs.set(runId, run);
+        core.store.upsertAnalysisRun({
+          id: runId,
+          targetId: input.target_id,
+          status: "running",
+          startedAt: run.startedAt,
+          updatedAt: run.startedAt
+        });
+        const waitSeconds = Math.max(0, input.wait_seconds ?? 10);
+        await Promise.race([
+          run.promise,
+          new Promise((resolve) => setTimeout(resolve, waitSeconds * 1e3))
+        ]);
+        return textResult({
+          runId,
+          status: run.status,
+          result: run.result,
+          error: run.error,
+          nextAction: run.status === "running" ? "\u8C03\u7528 get_analysis_run \u7EE7\u7EED\u7B49\u5F85\u6216\u8BFB\u53D6\u7ED3\u679C\u3002" : void 0
+        });
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "get_analysis_run",
+    {
+      title: "Get asynchronous analysis run",
+      description: "Wait for or retrieve the result of an analyze_app run.",
+      inputSchema: z.object({
+        run_id: z.string().uuid(),
+        wait_seconds: z.number().int().min(0).max(1800).optional()
+      })
+    },
+    async ({ run_id, wait_seconds }) => {
+      const run = runs.get(run_id);
+      if (!run) {
+        const stored = core.store.getAnalysisRun(run_id);
+        return stored ? textResult(stored) : errorResult(
+          new CoreFailure("ANALYSIS_RUN_NOT_FOUND", "\u5206\u6790\u8FD0\u884C\u4E0D\u5B58\u5728\u6216\u5DF2\u7ECF\u8D85\u65F6\u3002")
+        );
+      }
+      await Promise.race([
+        run.promise,
+        new Promise(
+          (resolve) => setTimeout(resolve, Math.max(0, wait_seconds ?? 10) * 1e3)
+        )
+      ]);
+      return textResult({
+        runId: run.id,
+        status: run.status,
+        startedAt: run.startedAt,
+        finishedAt: run.finishedAt,
+        result: run.result,
+        error: run.error
+      });
+    }
+  );
+  mcp.registerTool(
+    "list_targets",
+    {
+      title: "List application targets",
+      description: "List all locally registered AppTrace targets.",
+      inputSchema: z.object({})
+    },
+    async () => {
+      try {
+        const targets = await core.handle(CHANNELS.targetsList, {});
+        return textResult(targets);
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "auth_status",
+    {
+      title: "Apple account status",
+      description: "Read the local App Store login state. Never returns passwords, 2FA codes or keychain secrets.",
+      inputSchema: z.object({})
+    },
+    async () => {
+      try {
+        const status = await core.handle(CHANNELS.accountStatus, {
+          force: true
+        });
+        return textResult(status);
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "get_job",
+    {
+      title: "Get job status",
+      description: "Return a job, its recent events and result.",
+      inputSchema: z.object({
+        job_id: z.string().uuid()
+      })
+    },
+    async ({ job_id }) => {
+      try {
+        const result = await core.handle(CHANNELS.jobsGet, {
+          jobId: job_id
+        });
+        return textResult({
+          ...result,
+          events: result.events.slice(-50)
+        });
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "search_findings",
+    {
+      title: "Search structured findings",
+      description: "Search persisted routes, modules, assets, endpoints, storage and native findings for a target.",
+      inputSchema: z.object({
+        target_id: z.string().uuid(),
+        query: z.string().trim().max(512).optional(),
+        types: z.array(
+          z.enum([
+            "technology",
+            "route",
+            "network_endpoint",
+            "module",
+            "asset",
+            "storage",
+            "native_procedure",
+            "native_string",
+            "risk",
+            "limitation"
+          ])
+        ).optional(),
+        limit: z.number().int().min(1).max(1e3).optional(),
+        offset: z.number().int().min(0).optional()
+      })
+    },
+    async (input) => {
+      try {
+        return textResult(
+          await core.handle(CHANNELS.findingsSearch, {
+            targetId: input.target_id,
+            query: input.query,
+            types: input.types,
+            limit: input.limit,
+            offset: input.offset
+          })
+        );
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "search_native",
+    {
+      title: "Search native symbols",
+      description: "Search native procedure names or strings. Use a returned procedure name with decompile_function.",
+      inputSchema: z.object({
+        target_id: z.string().uuid(),
+        query: z.string().trim().min(1).max(512),
+        kind: z.enum(["procedures", "strings"]).optional(),
+        mode: z.enum(["literal", "regex"]).optional()
+      })
+    },
+    async ({ target_id, query, kind, mode }) => {
+      try {
+        return textResult(
+          jobResult(
+            await analysis.runCapability(target_id, "native:search", {
+              query,
+              kind: kind ?? "procedures",
+              mode: mode ?? "literal"
+            })
+          )
+        );
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "decompile_function",
+    {
+      title: "Decompile one native function",
+      description: "Decompile an exact function or symbol name returned by search_native. Encrypted targets are refused.",
+      inputSchema: z.object({
+        target_id: z.string().uuid(),
+        function_name: z.string().trim().min(1).max(256).regex(/^[A-Za-z_$][A-Za-z0-9_$.@:-]{0,255}$/)
+      })
+    },
+    async ({ target_id, function_name }) => {
+      try {
+        return textResult(
+          jobResult(
+            await analysis.runCapability(target_id, "native:decompile", {
+              functionName: function_name
+            })
+          )
+        );
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "list_evidence",
+    {
+      title: "List evidence",
+      description: "List stored evidence files and summaries for a target.",
+      inputSchema: z.object({
+        target_id: z.string().uuid()
+      })
+    },
+    async ({ target_id }) => {
+      try {
+        return textResult(
+          await core.handle(CHANNELS.evidenceList, {
+            targetId: target_id
+          })
+        );
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "generate_report",
+    {
+      title: "Generate evidence report",
+      description: "Generate a Markdown report for an existing target and its current artifact.",
+      inputSchema: z.object({
+        target_id: z.string().uuid()
+      })
+    },
+    async ({ target_id }) => {
+      try {
+        return textResult(
+          jobResult(
+            await analysis.runCapability(
+              target_id,
+              "generate:report"
+            )
+          )
+        );
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "compare_versions",
+    {
+      title: "Compare two artifact versions",
+      description: "Compare routes, modules, assets, network candidates and technology hints between two analyzed artifacts of the same target.",
+      inputSchema: z.object({
+        target_id: z.string().uuid(),
+        left_artifact_id: z.string().uuid(),
+        right_artifact_id: z.string().uuid(),
+        force: z.boolean().optional()
+      })
+    },
+    async ({
+      target_id,
+      left_artifact_id,
+      right_artifact_id,
+      force
+    }) => {
+      try {
+        return textResult(
+          await new VersionComparisonService(core).compare(
+            target_id,
+            left_artifact_id,
+            right_artifact_id,
+            { force }
+          )
+        );
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  mcp.registerTool(
+    "list_capabilities",
+    {
+      title: "List capabilities",
+      description: "List analysis capabilities available for the host and an optional target.",
+      inputSchema: z.object({
+        target_id: z.string().uuid().optional()
+      })
+    },
+    async ({ target_id }) => {
+      try {
+        return textResult(
+          await core.handle(CHANNELS.capabilitiesList, {
+            ...target_id ? { targetId: target_id } : {}
+          })
+        );
+      } catch (error) {
+        return errorResult(error);
+      }
+    }
+  );
+  const transport = new StdioServerTransport();
+  await mcp.connect(transport);
+  const close = async () => {
+    await mcp.close().catch(() => {
+    });
+    core.close();
+  };
+  process.once("SIGINT", () => void close().finally(() => process.exit(0)));
+  process.once("SIGTERM", () => void close().finally(() => process.exit(0)));
+  return mcp;
+}
+var invokedDirectly = isEntryPoint();
+function isEntryPoint() {
+  if (!process.argv[1]) return false;
+  try {
+    return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+if (invokedDirectly) {
+  void startMcpServer().catch((error) => {
+    console.error(
+      `[apptrace-mcp] ${error instanceof Error ? error.stack ?? error.message : String(error)}`
+    );
+    process.exitCode = 1;
+  });
+}
+export {
+  startMcpServer
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\nimport {\n  AppAnalysisService,\n  CoreFailure,\n  CoreServer,\n  VersionComparisonService,\n  loadConfig,\n  type AnalysisGoal,\n  type CoreConfig\n} from \"@zhuixin/metadata\";\nimport { CHANNELS } from \"@zhuixin/shared\";\nimport { McpServer } from \"@modelcontextprotocol/server\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/server/stdio\";\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { randomUUID } from \"node:crypto\";\nimport { z } from \"zod\";\n\nconst GOALS = [\n  \"tech_stack\",\n  \"feature_map\",\n  \"network\",\n  \"native_risk\",\n  \"report\"\n] as const satisfies readonly AnalysisGoal[];\n\nfunction errorResult(error: unknown) {\n  const failure =\n    error instanceof CoreFailure\n      ? error\n      : new CoreFailure(\n          \"INTERNAL_ERROR\",\n          error instanceof Error ? error.message : String(error)\n        );\n  const nextAction =\n    failure.code === \"AUTH_REQUIRED\" || failure.code === \"KEYCHAIN_LOCKED\"\n      ? \"运行 apptrace auth login，然后重试。\"\n      : failure.code === \"LICENSE_REQUIRED\"\n        ? \"请先在同一 Apple 账号的 App Store 获取该应用。\"\n        : undefined;\n  return {\n    isError: true,\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(\n          {\n            code: failure.code,\n            message: failure.message,\n            details: failure.details,\n            nextAction\n          },\n          null,\n          2\n        )\n      }\n    ]\n  };\n}\n\nfunction textResult(value: unknown) {\n  return {\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(value, null, 2)\n      }\n    ],\n    structuredContent: value as Record<string, unknown>\n  };\n}\n\nfunction jobResult(job: Record<string, unknown>) {\n  return {\n    jobId: job.id,\n    capabilityId: job.capabilityId,\n    status: job.status,\n    result: job.result,\n    errorCode: job.errorCode,\n    errorMessage: job.errorMessage\n  };\n}\n\nexport async function startMcpServer(\n  config: CoreConfig = loadConfig()\n): Promise<McpServer> {\n  const core = new CoreServer({ config, emit: () => {} });\n  core.store.interruptRunningAnalysisRuns();\n  const analysis = new AppAnalysisService(core);\n  const runs = new Map<\n    string,\n    {\n      id: string;\n      status: \"running\" | \"completed\" | \"failed\";\n      startedAt: string;\n      finishedAt?: string;\n      result?: Record<string, unknown>;\n      error?: { code: string; message: string; details?: unknown };\n      promise: Promise<void>;\n    }\n  >();\n  const mcp = new McpServer({\n    name: \"apptrace\",\n    version: \"0.1.0\"\n  });\n\n  mcp.registerTool(\n    \"analyze_app\",\n    {\n      title: \"Analyze an application\",\n      description:\n        \"Resolve, acquire, inspect, extract and statically analyze an authorized app. Returns a compact evidence summary.\",\n      inputSchema: z.object({\n        source: z\n          .string()\n          .optional()\n          .describe(\"App Store URL or numeric App Store ID\"),\n        target_id: z\n          .string()\n          .uuid()\n          .optional()\n          .describe(\"Existing AppTrace target ID\"),\n        goals: z\n          .array(z.enum(GOALS))\n          .optional()\n          .describe(\"Analysis goals; defaults to tech stack, feature map and report\"),\n        force: z\n          .boolean()\n          .optional()\n          .describe(\"Re-run analyses even when matching evidence already exists\"),\n        wait_seconds: z\n          .number()\n          .int()\n          .min(0)\n          .max(60)\n          .optional()\n          .describe(\"Seconds to wait before returning a running run_id\"),\n        timeout_seconds: z.number().int().min(30).max(1800).optional()\n      })\n    },\n    async (input) => {\n      if (!input.source && !input.target_id) {\n        return errorResult(\n          new CoreFailure(\"SOURCE_REQUIRED\", \"请提供 source 或 target_id。\")\n        );\n      }\n      try {\n        const runId = randomUUID();\n        const run: {\n          id: string;\n          status: \"running\" | \"completed\" | \"failed\";\n          startedAt: string;\n          finishedAt?: string;\n          result?: Record<string, unknown>;\n          error?: { code: string; message: string; details?: unknown };\n          promise: Promise<void>;\n        } = {\n          id: runId,\n          status: \"running\",\n          startedAt: new Date().toISOString(),\n          promise: Promise.resolve()\n        };\n        run.promise = analysis\n          .analyzeApp({\n            source: input.source,\n            targetId: input.target_id,\n            goals: input.goals,\n            force: input.force,\n            timeoutMs: (input.timeout_seconds ?? 1_200) * 1_000\n          })\n          .then((result) => {\n            run.status = \"completed\";\n            run.result = result as unknown as Record<string, unknown>;\n            run.finishedAt = new Date().toISOString();\n            core.store.upsertAnalysisRun({\n              id: run.id,\n              targetId: input.target_id,\n              status: \"completed\",\n              startedAt: run.startedAt,\n              finishedAt: run.finishedAt,\n              result: run.result,\n              updatedAt: run.finishedAt\n            });\n          })\n          .catch((error: unknown) => {\n            const failure =\n              error instanceof CoreFailure\n                ? error\n                : new CoreFailure(\n                    \"INTERNAL_ERROR\",\n                    error instanceof Error ? error.message : String(error)\n                  );\n            run.status = \"failed\";\n            run.error = {\n              code: failure.code,\n              message: failure.message,\n              details: failure.details\n            };\n            run.finishedAt = new Date().toISOString();\n            core.store.upsertAnalysisRun({\n              id: run.id,\n              targetId: input.target_id,\n              status: \"failed\",\n              startedAt: run.startedAt,\n              finishedAt: run.finishedAt,\n              error: run.error,\n              updatedAt: run.finishedAt\n            });\n          });\n        runs.set(runId, run);\n        core.store.upsertAnalysisRun({\n          id: runId,\n          targetId: input.target_id,\n          status: \"running\",\n          startedAt: run.startedAt,\n          updatedAt: run.startedAt\n        });\n        const waitSeconds = Math.max(0, input.wait_seconds ?? 10);\n        await Promise.race([\n          run.promise,\n          new Promise((resolve) => setTimeout(resolve, waitSeconds * 1_000))\n        ]);\n        return textResult({\n          runId,\n          status: run.status,\n          result: run.result,\n          error: run.error,\n          nextAction:\n            run.status === \"running\"\n              ? \"调用 get_analysis_run 继续等待或读取结果。\"\n              : undefined\n        });\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"get_analysis_run\",\n    {\n      title: \"Get asynchronous analysis run\",\n      description:\n        \"Wait for or retrieve the result of an analyze_app run.\",\n      inputSchema: z.object({\n        run_id: z.string().uuid(),\n        wait_seconds: z.number().int().min(0).max(1800).optional()\n      })\n    },\n    async ({ run_id, wait_seconds }) => {\n      const run = runs.get(run_id);\n      if (!run) {\n        const stored = core.store.getAnalysisRun(run_id);\n        return stored\n          ? textResult(stored)\n          : errorResult(\n              new CoreFailure(\"ANALYSIS_RUN_NOT_FOUND\", \"分析运行不存在或已经超时。\")\n            );\n      }\n      await Promise.race([\n        run.promise,\n        new Promise((resolve) =>\n          setTimeout(resolve, Math.max(0, wait_seconds ?? 10) * 1_000)\n        )\n      ]);\n      return textResult({\n        runId: run.id,\n        status: run.status,\n        startedAt: run.startedAt,\n        finishedAt: run.finishedAt,\n        result: run.result,\n        error: run.error\n      });\n    }\n  );\n\n  mcp.registerTool(\n    \"list_targets\",\n    {\n      title: \"List application targets\",\n      description: \"List all locally registered AppTrace targets.\",\n      inputSchema: z.object({})\n    },\n    async () => {\n      try {\n        const targets = await core.handle(CHANNELS.targetsList, {});\n        return textResult(targets);\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"auth_status\",\n    {\n      title: \"Apple account status\",\n      description:\n        \"Read the local App Store login state. Never returns passwords, 2FA codes or keychain secrets.\",\n      inputSchema: z.object({})\n    },\n    async () => {\n      try {\n        const status = await core.handle(CHANNELS.accountStatus, {\n          force: true\n        });\n        return textResult(status);\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"get_job\",\n    {\n      title: \"Get job status\",\n      description: \"Return a job, its recent events and result.\",\n      inputSchema: z.object({\n        job_id: z.string().uuid()\n      })\n    },\n    async ({ job_id }) => {\n      try {\n        const result = (await core.handle(CHANNELS.jobsGet, {\n          jobId: job_id\n        })) as {\n          job: Record<string, unknown>;\n          events: Array<Record<string, unknown>>;\n        };\n        return textResult({\n          ...result,\n          events: result.events.slice(-50)\n        });\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"search_findings\",\n    {\n      title: \"Search structured findings\",\n      description:\n        \"Search persisted routes, modules, assets, endpoints, storage and native findings for a target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        query: z.string().trim().max(512).optional(),\n        types: z\n          .array(\n            z.enum([\n              \"technology\",\n              \"route\",\n              \"network_endpoint\",\n              \"module\",\n              \"asset\",\n              \"storage\",\n              \"native_procedure\",\n              \"native_string\",\n              \"risk\",\n              \"limitation\"\n            ])\n          )\n          .optional(),\n        limit: z.number().int().min(1).max(1000).optional(),\n        offset: z.number().int().min(0).optional()\n      })\n    },\n    async (input) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.findingsSearch, {\n            targetId: input.target_id,\n            query: input.query,\n            types: input.types,\n            limit: input.limit,\n            offset: input.offset\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"search_native\",\n    {\n      title: \"Search native symbols\",\n      description:\n        \"Search native procedure names or strings. Use a returned procedure name with decompile_function.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        query: z.string().trim().min(1).max(512),\n        kind: z.enum([\"procedures\", \"strings\"]).optional(),\n        mode: z.enum([\"literal\", \"regex\"]).optional()\n      })\n    },\n    async ({ target_id, query, kind, mode }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(target_id, \"native:search\", {\n              query,\n              kind: kind ?? \"procedures\",\n              mode: mode ?? \"literal\"\n            })) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"decompile_function\",\n    {\n      title: \"Decompile one native function\",\n      description:\n        \"Decompile an exact function or symbol name returned by search_native. Encrypted targets are refused.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        function_name: z\n          .string()\n          .trim()\n          .min(1)\n          .max(256)\n          .regex(/^[A-Za-z_$][A-Za-z0-9_$.@:-]{0,255}$/)\n      })\n    },\n    async ({ target_id, function_name }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(target_id, \"native:decompile\", {\n              functionName: function_name\n            })) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"list_evidence\",\n    {\n      title: \"List evidence\",\n      description: \"List stored evidence files and summaries for a target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.evidenceList, {\n            targetId: target_id\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"generate_report\",\n    {\n      title: \"Generate evidence report\",\n      description:\n        \"Generate a Markdown report for an existing target and its current artifact.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(\n              target_id,\n              \"generate:report\"\n            )) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"compare_versions\",\n    {\n      title: \"Compare two artifact versions\",\n      description:\n        \"Compare routes, modules, assets, network candidates and technology hints between two analyzed artifacts of the same target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        left_artifact_id: z.string().uuid(),\n        right_artifact_id: z.string().uuid(),\n        force: z.boolean().optional()\n      })\n    },\n    async ({\n      target_id,\n      left_artifact_id,\n      right_artifact_id,\n      force\n    }) => {\n      try {\n        return textResult(\n          await new VersionComparisonService(core).compare(\n            target_id,\n            left_artifact_id,\n            right_artifact_id,\n            { force }\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"list_capabilities\",\n    {\n      title: \"List capabilities\",\n      description:\n        \"List analysis capabilities available for the host and an optional target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid().optional()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.capabilitiesList, {\n            ...(target_id ? { targetId: target_id } : {})\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  const transport = new StdioServerTransport();\n  await mcp.connect(transport);\n\n  const close = async () => {\n    await mcp.close().catch(() => {});\n    core.close();\n  };\n  process.once(\"SIGINT\", () => void close().finally(() => process.exit(0)));\n  process.once(\"SIGTERM\", () => void close().finally(() => process.exit(0)));\n\n  return mcp;\n}\n\nconst invokedDirectly = isEntryPoint();\n\nfunction isEntryPoint(): boolean {\n  if (!process.argv[1]) return false;\n  try {\n    // Compare real paths: /tmp and npm bin shims are symlinked on macOS/Linux,\n    // and a string comparison silently prevents the server from starting.\n    return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));\n  } catch {\n    return false;\n  }\n}\nif (invokedDirectly) {\n  void startMcpServer().catch((error) => {\n    console.error(\n      `[apptrace-mcp] ${\n        error instanceof Error ? error.stack ?? error.message : String(error)\n      }`\n    );\n    process.exitCode = 1;\n  });\n}\n"],"mappings":";;;AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAElB,IAAM,QAAQ;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,YAAY,OAAgB;AACnC,QAAM,UACJ,iBAAiB,cACb,QACA,IAAI;AAAA,IACF;AAAA,IACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,EACvD;AACN,QAAM,aACJ,QAAQ,SAAS,mBAAmB,QAAQ,SAAS,oBACjD,yEACA,QAAQ,SAAS,qBACf,2GACA;AACR,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,KAAK;AAAA,UACT;AAAA,YACE,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,YACjB,SAAS,QAAQ;AAAA,YACjB;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WAAW,OAAgB;AAClC,SAAO;AAAA,IACL,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,IACA,mBAAmB;AAAA,EACrB;AACF;AAEA,SAAS,UAAU,KAA8B;AAC/C,SAAO;AAAA,IACL,OAAO,IAAI;AAAA,IACX,cAAc,IAAI;AAAA,IAClB,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,IACZ,WAAW,IAAI;AAAA,IACf,cAAc,IAAI;AAAA,EACpB;AACF;AAEA,eAAsB,eACpB,SAAqB,WAAW,GACZ;AACpB,QAAM,OAAO,IAAI,WAAW,EAAE,QAAQ,MAAM,MAAM;AAAA,EAAC,EAAE,CAAC;AACtD,OAAK,MAAM,6BAA6B;AACxC,QAAM,WAAW,IAAI,mBAAmB,IAAI;AAC5C,QAAM,OAAO,oBAAI,IAWf;AACF,QAAM,MAAM,IAAI,UAAU;AAAA,IACxB,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAED,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,QAAQ,EACL,OAAO,EACP,SAAS,EACT,SAAS,uCAAuC;AAAA,QACnD,WAAW,EACR,OAAO,EACP,KAAK,EACL,SAAS,EACT,SAAS,6BAA6B;AAAA,QACzC,OAAO,EACJ,MAAM,EAAE,KAAK,KAAK,CAAC,EACnB,SAAS,EACT,SAAS,gEAAgE;AAAA,QAC5E,OAAO,EACJ,QAAQ,EACR,SAAS,EACT,SAAS,4DAA4D;AAAA,QACxE,cAAc,EACX,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,EAAE,EACN,SAAS,EACT,SAAS,mDAAmD;AAAA,QAC/D,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MAC/D,CAAC;AAAA,IACH;AAAA,IACA,OAAO,UAAU;AACf,UAAI,CAAC,MAAM,UAAU,CAAC,MAAM,WAAW;AACrC,eAAO;AAAA,UACL,IAAI,YAAY,mBAAmB,kDAAyB;AAAA,QAC9D;AAAA,MACF;AACA,UAAI;AACF,cAAM,QAAQ,WAAW;AACzB,cAAM,MAQF;AAAA,UACF,IAAI;AAAA,UACJ,QAAQ;AAAA,UACR,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,SAAS,QAAQ,QAAQ;AAAA,QAC3B;AACA,YAAI,UAAU,SACX,WAAW;AAAA,UACV,QAAQ,MAAM;AAAA,UACd,UAAU,MAAM;AAAA,UAChB,OAAO,MAAM;AAAA,UACb,OAAO,MAAM;AAAA,UACb,YAAY,MAAM,mBAAmB,QAAS;AAAA,QAChD,CAAC,EACA,KAAK,CAAC,WAAW;AAChB,cAAI,SAAS;AACb,cAAI,SAAS;AACb,cAAI,cAAa,oBAAI,KAAK,GAAE,YAAY;AACxC,eAAK,MAAM,kBAAkB;AAAA,YAC3B,IAAI,IAAI;AAAA,YACR,UAAU,MAAM;AAAA,YAChB,QAAQ;AAAA,YACR,WAAW,IAAI;AAAA,YACf,YAAY,IAAI;AAAA,YAChB,QAAQ,IAAI;AAAA,YACZ,WAAW,IAAI;AAAA,UACjB,CAAC;AAAA,QACH,CAAC,EACA,MAAM,CAAC,UAAmB;AACzB,gBAAM,UACJ,iBAAiB,cACb,QACA,IAAI;AAAA,YACF;AAAA,YACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,UACvD;AACN,cAAI,SAAS;AACb,cAAI,QAAQ;AAAA,YACV,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,YACjB,SAAS,QAAQ;AAAA,UACnB;AACA,cAAI,cAAa,oBAAI,KAAK,GAAE,YAAY;AACxC,eAAK,MAAM,kBAAkB;AAAA,YAC3B,IAAI,IAAI;AAAA,YACR,UAAU,MAAM;AAAA,YAChB,QAAQ;AAAA,YACR,WAAW,IAAI;AAAA,YACf,YAAY,IAAI;AAAA,YAChB,OAAO,IAAI;AAAA,YACX,WAAW,IAAI;AAAA,UACjB,CAAC;AAAA,QACH,CAAC;AACH,aAAK,IAAI,OAAO,GAAG;AACnB,aAAK,MAAM,kBAAkB;AAAA,UAC3B,IAAI;AAAA,UACJ,UAAU,MAAM;AAAA,UAChB,QAAQ;AAAA,UACR,WAAW,IAAI;AAAA,UACf,WAAW,IAAI;AAAA,QACjB,CAAC;AACD,cAAM,cAAc,KAAK,IAAI,GAAG,MAAM,gBAAgB,EAAE;AACxD,cAAM,QAAQ,KAAK;AAAA,UACjB,IAAI;AAAA,UACJ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,cAAc,GAAK,CAAC;AAAA,QACnE,CAAC;AACD,eAAO,WAAW;AAAA,UAChB;AAAA,UACA,QAAQ,IAAI;AAAA,UACZ,QAAQ,IAAI;AAAA,UACZ,OAAO,IAAI;AAAA,UACX,YACE,IAAI,WAAW,YACX,+FACA;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,QACxB,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MAC3D,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,QAAQ,aAAa,MAAM;AAClC,YAAM,MAAM,KAAK,IAAI,MAAM;AAC3B,UAAI,CAAC,KAAK;AACR,cAAM,SAAS,KAAK,MAAM,eAAe,MAAM;AAC/C,eAAO,SACH,WAAW,MAAM,IACjB;AAAA,UACE,IAAI,YAAY,0BAA0B,gFAAe;AAAA,QAC3D;AAAA,MACN;AACA,YAAM,QAAQ,KAAK;AAAA,QACjB,IAAI;AAAA,QACJ,IAAI;AAAA,UAAQ,CAAC,YACX,WAAW,SAAS,KAAK,IAAI,GAAG,gBAAgB,EAAE,IAAI,GAAK;AAAA,QAC7D;AAAA,MACF,CAAC;AACD,aAAO,WAAW;AAAA,QAChB,OAAO,IAAI;AAAA,QACX,QAAQ,IAAI;AAAA,QACZ,WAAW,IAAI;AAAA,QACf,YAAY,IAAI;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,OAAO,IAAI;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,OAAO,CAAC,CAAC;AAAA,IAC1B;AAAA,IACA,YAAY;AACV,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,OAAO,SAAS,aAAa,CAAC,CAAC;AAC1D,eAAO,WAAW,OAAO;AAAA,MAC3B,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO,CAAC,CAAC;AAAA,IAC1B;AAAA,IACA,YAAY;AACV,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,OAAO,SAAS,eAAe;AAAA,UACvD,OAAO;AAAA,QACT,CAAC;AACD,eAAO,WAAW,MAAM;AAAA,MAC1B,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,OAAO;AAAA,QACpB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,OAAO,MAAM;AACpB,UAAI;AACF,cAAM,SAAU,MAAM,KAAK,OAAO,SAAS,SAAS;AAAA,UAClD,OAAO;AAAA,QACT,CAAC;AAID,eAAO,WAAW;AAAA,UAChB,GAAG;AAAA,UACH,QAAQ,OAAO,OAAO,MAAM,GAAG;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,QAC3C,OAAO,EACJ;AAAA,UACC,EAAE,KAAK;AAAA,YACL;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH,EACC,SAAS;AAAA,QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,QAClD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,UAAU;AACf,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,gBAAgB;AAAA,YACzC,UAAU,MAAM;AAAA,YAChB,OAAO,MAAM;AAAA,YACb,OAAO,MAAM;AAAA,YACb,OAAO,MAAM;AAAA,YACb,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,QACvC,MAAM,EAAE,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,SAAS;AAAA,QACjD,MAAM,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC,EAAE,SAAS;AAAA,MAC9C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,WAAW,OAAO,MAAM,KAAK,MAAM;AAC1C,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS,cAAc,WAAW,iBAAiB;AAAA,cACxD;AAAA,cACA,MAAM,QAAQ;AAAA,cACd,MAAM,QAAQ;AAAA,YAChB,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,eAAe,EACZ,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,sCAAsC;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,WAAW,cAAc,MAAM;AACtC,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS,cAAc,WAAW,oBAAoB;AAAA,cAC3D,cAAc;AAAA,YAChB,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,OAAO;AAAA,QACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,cAAc;AAAA,YACvC,UAAU;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS;AAAA,cACd;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,QAClC,mBAAmB,EAAE,OAAO,EAAE,KAAK;AAAA,QACnC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAAM;AACJ,UAAI;AACF,eAAO;AAAA,UACL,MAAM,IAAI,yBAAyB,IAAI,EAAE;AAAA,YACvC;AAAA,YACA;AAAA,YACA;AAAA,YACA,EAAE,MAAM;AAAA,UACV;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa,EAAE,OAAO;AAAA,QACpB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,kBAAkB;AAAA,YAC3C,GAAI,YAAY,EAAE,UAAU,UAAU,IAAI,CAAC;AAAA,UAC7C,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,IAAI,QAAQ,SAAS;AAE3B,QAAM,QAAQ,YAAY;AACxB,UAAM,IAAI,MAAM,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAChC,SAAK,MAAM;AAAA,EACb;AACA,UAAQ,KAAK,UAAU,MAAM,KAAK,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC,CAAC;AACxE,UAAQ,KAAK,WAAW,MAAM,KAAK,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC,CAAC;AAEzE,SAAO;AACT;AAEA,IAAM,kBAAkB,aAAa;AAErC,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,MAAI;AAGF,WAAO,aAAa,QAAQ,KAAK,CAAC,CAAC,MAAM,aAAa,cAAc,YAAY,GAAG,CAAC;AAAA,EACtF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,IAAI,iBAAiB;AACnB,OAAK,eAAe,EAAE,MAAM,CAAC,UAAU;AACrC,YAAQ;AAAA,MACN,kBACE,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK,CACtE;AAAA,IACF;AACA,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":[]}

package/package.json

@@ -1,6 +1,55 @@
 {
   "name": "@zhuixin/mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1",
+  "license": "Apache-2.0",
+  "description": "AppTrace MCP server for evidence-backed application analysis",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zhuixin-labs/app-evidence.git",
+    "directory": "packages/mcp"
+  },
+  "homepage": "https://github.com/zhuixin-labs/app-evidence",
+  "bugs": {
+    "url": "https://github.com/zhuixin-labs/app-evidence/issues"
+  },
+  "keywords": [
+    "mcp",
+    "ai-agents",
+    "app-analysis",
+    "model-context-protocol"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22.19"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "apptrace-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/server": "^2.3.1",
+    "zod": "^4.2.0",
+    "@zhuixin/shared": "0.1.1",
+    "@zhuixin/metadata": "0.1.1"
+  },
+  "devDependencies": {
+    "tsup": "^8.5.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.