@zhuixin/mcp 0.2.3 → 0.2.4

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // package.json
-var version = "0.2.3";
+var version = "0.2.4";
 
 // src/index.ts
 import {
@@ -9,18 +9,21 @@ import {
   CoreFailure,
   CoreServer,
   VersionComparisonService,
-  loadConfig,
-  OnboardingService
+  loadConfig as loadConfig2,
+  OnboardingService as OnboardingService2,
+  AnalysisTasks as AnalysisTasks2,
+  startAnalysisWorker,
+  recoverAnalysisTasks as recoverAnalysisTasks2
 } from "@zhuixin/metadata";
 import { CHANNELS } from "@zhuixin/shared";
 import { McpServer } from "@modelcontextprotocol/server";
 import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
 import { realpathSync } from "fs";
 import { fileURLToPath } from "url";
-import { randomUUID } from "crypto";
 import { z as z2 } from "zod";
 
 // src/onboarding.ts
+import { recoverAnalysisTasks, loadConfig } from "@zhuixin/metadata";
 import { z } from "zod";
 function result(status) {
   return { content: [{ type: "text", text: JSON.stringify(status) }], structuredContent: { ...status } };
@@ -50,17 +53,42 @@ function registerOnboarding(mcp, service) {
     title: "Open local Apple sign-in window",
     description: "Open a visible Windows sign-in terminal for the user. Reuses an active sign-in window. Credentials and terminal output never enter MCP. Poll get_setup_status afterwards, then resume the original analysis. Other hosts return a local-terminal fallback.",
     inputSchema: z.object({})
-  }, async () => result(await service.openLogin()));
+  }, async () => {
+    const status = await service.openLogin();
+    await recoverAnalysisTasks(loadConfig());
+    return result(status);
+  });
 }
-function setupResponse(status, input) {
+
+// src/tasks.ts
+import { terminalTask } from "@zhuixin/metadata";
+function taskResponse(task) {
   return {
-    status: "awaiting_setup",
-    setup: status,
-    next_tool: status.next_tool,
-    resume: { tool: "analyze_app", arguments: input },
-    nextAction: "Follow next_tool to finish setup; once ready, resend analyze_app with resume.arguments. Do not ask the user to repeat the request or for credentials."
+    runId: task.id,
+    status: task.status,
+    stage: task.stage,
+    targetId: task.targetId,
+    startedAt: task.startedAt,
+    updatedAt: task.updatedAt,
+    finishedAt: task.finishedAt,
+    setup: task.setup,
+    result: task.result,
+    error: task.error,
+    next_tool: terminalTask(task) ? void 0 : "get_analysis_run",
+    nextAction: terminalTask(task) ? void 0 : task.stage === "login_cancelled" ? "Sign-in was cancelled or failed. The task is saved; wait for an explicit retry before calling open_login." : "The local worker continues automatically. Keep runId and wait with get_analysis_run; do not ask for sign-in confirmation or resend analyze_app."
   };
 }
+async function waitForTask(tasks, id, seconds) {
+  const deadline = Date.now() + seconds * 1e3;
+  let task = tasks.get(id);
+  const stage = task.stage;
+  while (!terminalTask(task) && task.stage !== "login_cancelled" && Date.now() < deadline) {
+    await new Promise((resolve) => setTimeout(resolve, Math.min(500, deadline - Date.now())));
+    task = tasks.get(id);
+    if (task.stage !== stage) break;
+  }
+  return taskResponse(task);
+}
 
 // src/index.ts
 var GOALS = [
@@ -116,23 +144,23 @@ function jobResult(job) {
     errorMessage: job.errorMessage
   };
 }
-async function startMcpServer(config = loadConfig()) {
+async function startMcpServer(config = loadConfig2()) {
   const core = new CoreServer({ config, emit: () => {
   } });
-  core.store.interruptRunningAnalysisRuns();
   const analysis = new AppAnalysisService(core);
-  const runs = /* @__PURE__ */ new Map();
+  const tasks = new AnalysisTasks2(config.workspaceRoot);
+  await recoverAnalysisTasks2(config);
   const mcp = new McpServer({
     name: "apptrace",
     version
   });
-  const onboarding = new OnboardingService(config);
+  const onboarding = new OnboardingService2(config);
   registerOnboarding(mcp, onboarding);
   mcp.registerTool(
     "analyze_app",
     {
       title: "Analyze an application",
-      description: "Analyze an authorized app. Automatically prepares missing tools and opens a local Windows login window when needed. awaiting_setup preserves resume.arguments: follow next_tool and retry when ready. Never request credentials in chat.",
+      description: "Create a persistent application analysis task. A local worker prepares tools, opens sign-in once and automatically continues after background authentication succeeds, even if MCP disconnects. Always retain runId and poll get_analysis_run while preparing/awaiting_auth/running. Never request credentials in chat.",
       inputSchema: z2.object({
         source: z2.string().optional().describe("App Store URL or numeric App Store ID"),
         target_id: z2.string().uuid().optional().describe("Existing AppTrace target ID"),
@@ -149,86 +177,9 @@ async function startMcpServer(config = loadConfig()) {
         );
       }
       try {
-        const tools = await onboarding.status(false);
-        if (tools.state !== "ready") {
-          return textResult(setupResponse(tools.state === "tools_missing" ? await onboarding.prepare() : tools, input));
-        }
-        const prepared = await analysis.prepareTarget({ source: input.source, targetId: input.target_id });
-        if (prepared.requiresAccount) {
-          const status = await onboarding.status();
-          if (status.state !== "ready") {
-            const next = ["login_required", "keychain_locked"].includes(status.state) ? await onboarding.openLogin() : status;
-            return textResult(setupResponse(next, input));
-          }
-        }
-        const runId = randomUUID();
-        const run = {
-          id: runId,
-          status: "running",
-          startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-          promise: Promise.resolve()
-        };
-        run.promise = analysis.analyzeApp({
-          source: input.source,
-          targetId: prepared.targetId,
-          goals: input.goals,
-          force: input.force,
-          timeoutMs: (input.timeout_seconds ?? 1200) * 1e3
-        }).then((result2) => {
-          run.status = "completed";
-          run.result = result2;
-          run.finishedAt = (/* @__PURE__ */ new Date()).toISOString();
-          core.store.upsertAnalysisRun({
-            id: run.id,
-            targetId: prepared.targetId,
-            status: "completed",
-            startedAt: run.startedAt,
-            finishedAt: run.finishedAt,
-            result: run.result,
-            updatedAt: run.finishedAt
-          });
-        }).catch((error) => {
-          const failure = error instanceof CoreFailure ? error : new CoreFailure(
-            "INTERNAL_ERROR",
-            error instanceof Error ? error.message : String(error)
-          );
-          run.status = "failed";
-          run.error = {
-            code: failure.code,
-            message: failure.message,
-            details: failure.details
-          };
-          run.finishedAt = (/* @__PURE__ */ new Date()).toISOString();
-          core.store.upsertAnalysisRun({
-            id: run.id,
-            targetId: prepared.targetId,
-            status: "failed",
-            startedAt: run.startedAt,
-            finishedAt: run.finishedAt,
-            error: run.error,
-            updatedAt: run.finishedAt
-          });
-        });
-        runs.set(runId, run);
-        core.store.upsertAnalysisRun({
-          id: runId,
-          targetId: prepared.targetId,
-          status: "running",
-          startedAt: run.startedAt,
-          updatedAt: run.startedAt
-        });
-        const waitSeconds = Math.max(0, input.wait_seconds ?? 10);
-        await Promise.race([
-          run.promise,
-          new Promise((resolve) => setTimeout(resolve, waitSeconds * 1e3))
-        ]);
-        return textResult({
-          runId,
-          status: run.status,
-          result: run.result,
-          error: run.error,
-          nextAction: run.status === "running" ? "Call get_analysis_run to wait or read the result." : void 0
-        });
+        const task = tasks.create(input);
+        await startAnalysisWorker(config, task.id);
+        return textResult(await waitForTask(tasks, task.id, input.wait_seconds ?? 10));
       } catch (error) {
         return errorResult(error);
       }
@@ -241,31 +192,25 @@ async function startMcpServer(config = loadConfig()) {
       description: "Wait for or retrieve the result of an analyze_app run.",
       inputSchema: z2.object({
         run_id: z2.string().uuid(),
-        wait_seconds: z2.number().int().min(0).max(1800).optional()
+        wait_seconds: z2.number().int().min(0).max(30).optional()
       })
     },
     async ({ run_id, wait_seconds }) => {
-      const run = runs.get(run_id);
-      if (!run) {
-        const stored = core.store.getAnalysisRun(run_id);
-        return stored ? textResult(stored) : errorResult(
-          new CoreFailure("ANALYSIS_RUN_NOT_FOUND", "Analysis run not found or timed out.")
-        );
+      const task = tasks.get(run_id);
+      if (task) {
+        await startAnalysisWorker(config, task.id);
+        return textResult(await waitForTask(tasks, task.id, wait_seconds ?? 10));
       }
-      await Promise.race([
-        run.promise,
-        new Promise(
-          (resolve) => setTimeout(resolve, Math.max(0, wait_seconds ?? 10) * 1e3)
-        )
-      ]);
-      return textResult({
-        runId: run.id,
-        status: run.status,
-        startedAt: run.startedAt,
-        finishedAt: run.finishedAt,
-        result: run.result,
-        error: run.error
-      });
+      const stored = core.store.getAnalysisRun(run_id);
+      return stored ? textResult(stored) : errorResult(new CoreFailure("ANALYSIS_RUN_NOT_FOUND", "Analysis run not found."));
+    }
+  );
+  mcp.registerTool(
+    "cancel_analysis_run",
+    { title: "Cancel saved analysis task", description: "Cancel a queued, waiting or running analysis task. Already registered artifacts and evidence are retained.", inputSchema: z2.object({ run_id: z2.string().uuid() }) },
+    async ({ run_id }) => {
+      const task = tasks.cancel(run_id);
+      return task ? textResult(await waitForTask(tasks, task.id, 0)) : errorResult(new CoreFailure("ANALYSIS_RUN_NOT_FOUND", "Analysis run not found."));
     }
   );
   mcp.registerTool(

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/index.ts","../src/onboarding.ts"],"sourcesContent":["{\n  \"name\": \"@zhuixin/mcp\",\n  \"version\": \"0.2.3\",\n  \"license\": \"Apache-2.0\",\n  \"description\": \"AppTrace MCP server for evidence-backed application analysis\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/zhuixin-labs/app-evidence.git\",\n    \"directory\": \"packages/mcp\"\n  },\n  \"homepage\": \"https://github.com/zhuixin-labs/app-evidence\",\n  \"bugs\": {\"url\": \"https://github.com/zhuixin-labs/app-evidence/issues\"},\n  \"keywords\": [\"mcp\", \"ai-agents\", \"app-analysis\", \"model-context-protocol\"],\n  \"publishConfig\": {\"access\": \"public\"},\n  \"engines\": {\"node\": \">=22.19\"},\n  \"type\": \"module\",\n  \"main\": \"dist/index.js\",\n  \"types\": \"dist/index.d.ts\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"default\": \"./dist/index.js\"\n    }\n  },\n  \"bin\": {\n    \"apptrace-mcp\": \"dist/index.js\"\n  },\n  \"files\": [\"dist\"],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"typecheck\": \"tsc --noEmit -p tsconfig.json\"\n  },\n  \"dependencies\": {\n    \"@zhuixin/metadata\": \"workspace:*\",\n    \"@zhuixin/shared\": \"workspace:*\",\n    \"@modelcontextprotocol/server\": \"^2.3.1\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"devDependencies\": {\n    \"tsup\": \"^8.5.0\"\n  }\n}\n","#!/usr/bin/env node\nimport { version } from \"../package.json\";\nimport {\n  AppAnalysisService,\n  CoreFailure,\n  CoreServer,\n  VersionComparisonService,\n  loadConfig,\n  OnboardingService,\n  type AnalysisGoal,\n  type CoreConfig\n} from \"@zhuixin/metadata\";\nimport { CHANNELS } from \"@zhuixin/shared\";\nimport { McpServer } from \"@modelcontextprotocol/server\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/server/stdio\";\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { randomUUID } from \"node:crypto\";\nimport { z } from \"zod\";\nimport { registerOnboarding, setupResponse } from \"./onboarding.js\";\n\nconst GOALS = [\n  \"tech_stack\",\n  \"feature_map\",\n  \"network\",\n  \"native_risk\",\n  \"report\"\n] as const satisfies readonly AnalysisGoal[];\n\nfunction errorResult(error: unknown) {\n  const failure =\n    error instanceof CoreFailure\n      ? error\n      : new CoreFailure(\n          \"INTERNAL_ERROR\",\n          error instanceof Error ? error.message : String(error)\n        );\n  const nextAction =\n    failure.code === \"AUTH_REQUIRED\" || failure.code === \"KEYCHAIN_LOCKED\"\n      ? \"Call open_login, poll get_setup_status, then resume the original request.\"\n      : failure.code === \"LICENSE_REQUIRED\"\n        ? \"Get the app from the App Store with the same Apple account first.\"\n        : undefined;\n  return {\n    isError: true,\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(\n          {\n            code: failure.code,\n            message: failure.message,\n            details: failure.details,\n            nextAction\n          },\n          null,\n          2\n        )\n      }\n    ]\n  };\n}\n\nfunction textResult(value: unknown) {\n  return {\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(value, null, 2)\n      }\n    ],\n    structuredContent: value as Record<string, unknown>\n  };\n}\n\nfunction jobResult(job: Record<string, unknown>) {\n  return {\n    jobId: job.id,\n    capabilityId: job.capabilityId,\n    status: job.status,\n    result: job.result,\n    errorCode: job.errorCode,\n    errorMessage: job.errorMessage\n  };\n}\n\nexport async function startMcpServer(\n  config: CoreConfig = loadConfig()\n): Promise<McpServer> {\n  const core = new CoreServer({ config, emit: () => {} });\n  core.store.interruptRunningAnalysisRuns();\n  const analysis = new AppAnalysisService(core);\n  const runs = new Map<\n    string,\n    {\n      id: string;\n      status: \"running\" | \"completed\" | \"failed\";\n      startedAt: string;\n      finishedAt?: string;\n      result?: Record<string, unknown>;\n      error?: { code: string; message: string; details?: unknown };\n      promise: Promise<void>;\n    }\n  >();\n  const mcp = new McpServer({\n    name: \"apptrace\",\n    version\n  });\n  const onboarding = new OnboardingService(config);\n  registerOnboarding(mcp, onboarding);\n\n  mcp.registerTool(\n    \"analyze_app\",\n    {\n      title: \"Analyze an application\",\n      description:\n        \"Analyze an authorized app. Automatically prepares missing tools and opens a local Windows login window when needed. awaiting_setup preserves resume.arguments: follow next_tool and retry when ready. Never request credentials in chat.\",\n      inputSchema: z.object({\n        source: z\n          .string()\n          .optional()\n          .describe(\"App Store URL or numeric App Store ID\"),\n        target_id: z\n          .string()\n          .uuid()\n          .optional()\n          .describe(\"Existing AppTrace target ID\"),\n        goals: z\n          .array(z.enum(GOALS))\n          .optional()\n          .describe(\"Analysis goals; defaults to tech stack, feature map and report\"),\n        force: z\n          .boolean()\n          .optional()\n          .describe(\"Re-run analyses even when matching evidence already exists\"),\n        wait_seconds: z\n          .number()\n          .int()\n          .min(0)\n          .max(60)\n          .optional()\n          .describe(\"Seconds to wait before returning a running run_id\"),\n        timeout_seconds: z.number().int().min(30).max(1800).optional()\n      })\n    },\n    async (input) => {\n      if (!input.source && !input.target_id) {\n        return errorResult(\n          new CoreFailure(\"SOURCE_REQUIRED\", \"Provide source or target_id.\")\n        );\n      }\n      try {\n        const tools = await onboarding.status(false);\n        if (tools.state !== \"ready\") {\n          return textResult(setupResponse(tools.state === \"tools_missing\" ? await onboarding.prepare() : tools, input));\n        }\n        const prepared = await analysis.prepareTarget({ source: input.source, targetId: input.target_id });\n        if (prepared.requiresAccount) {\n          const status = await onboarding.status();\n          if (status.state !== \"ready\") {\n            const next = [\"login_required\", \"keychain_locked\"].includes(status.state) ? await onboarding.openLogin() : status;\n            return textResult(setupResponse(next, input));\n          }\n        }\n        const runId = randomUUID();\n        const run: {\n          id: string;\n          status: \"running\" | \"completed\" | \"failed\";\n          startedAt: string;\n          finishedAt?: string;\n          result?: Record<string, unknown>;\n          error?: { code: string; message: string; details?: unknown };\n          promise: Promise<void>;\n        } = {\n          id: runId,\n          status: \"running\",\n          startedAt: new Date().toISOString(),\n          promise: Promise.resolve()\n        };\n        run.promise = analysis\n          .analyzeApp({\n            source: input.source,\n            targetId: prepared.targetId,\n            goals: input.goals,\n            force: input.force,\n            timeoutMs: (input.timeout_seconds ?? 1_200) * 1_000\n          })\n          .then((result) => {\n            run.status = \"completed\";\n            run.result = result as unknown as Record<string, unknown>;\n            run.finishedAt = new Date().toISOString();\n            core.store.upsertAnalysisRun({\n              id: run.id,\n              targetId: prepared.targetId,\n              status: \"completed\",\n              startedAt: run.startedAt,\n              finishedAt: run.finishedAt,\n              result: run.result,\n              updatedAt: run.finishedAt\n            });\n          })\n          .catch((error: unknown) => {\n            const failure =\n              error instanceof CoreFailure\n                ? error\n                : new CoreFailure(\n                    \"INTERNAL_ERROR\",\n                    error instanceof Error ? error.message : String(error)\n                  );\n            run.status = \"failed\";\n            run.error = {\n              code: failure.code,\n              message: failure.message,\n              details: failure.details\n            };\n            run.finishedAt = new Date().toISOString();\n            core.store.upsertAnalysisRun({\n              id: run.id,\n              targetId: prepared.targetId,\n              status: \"failed\",\n              startedAt: run.startedAt,\n              finishedAt: run.finishedAt,\n              error: run.error,\n              updatedAt: run.finishedAt\n            });\n          });\n        runs.set(runId, run);\n        core.store.upsertAnalysisRun({\n          id: runId,\n          targetId: prepared.targetId,\n          status: \"running\",\n          startedAt: run.startedAt,\n          updatedAt: run.startedAt\n        });\n        const waitSeconds = Math.max(0, input.wait_seconds ?? 10);\n        await Promise.race([\n          run.promise,\n          new Promise((resolve) => setTimeout(resolve, waitSeconds * 1_000))\n        ]);\n        return textResult({\n          runId,\n          status: run.status,\n          result: run.result,\n          error: run.error,\n          nextAction:\n            run.status === \"running\"\n              ? \"Call get_analysis_run to wait or read the result.\"\n              : undefined\n        });\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"get_analysis_run\",\n    {\n      title: \"Get asynchronous analysis run\",\n      description:\n        \"Wait for or retrieve the result of an analyze_app run.\",\n      inputSchema: z.object({\n        run_id: z.string().uuid(),\n        wait_seconds: z.number().int().min(0).max(1800).optional()\n      })\n    },\n    async ({ run_id, wait_seconds }) => {\n      const run = runs.get(run_id);\n      if (!run) {\n        const stored = core.store.getAnalysisRun(run_id);\n        return stored\n          ? textResult(stored)\n          : errorResult(\n              new CoreFailure(\"ANALYSIS_RUN_NOT_FOUND\", \"Analysis run not found or timed out.\")\n            );\n      }\n      await Promise.race([\n        run.promise,\n        new Promise((resolve) =>\n          setTimeout(resolve, Math.max(0, wait_seconds ?? 10) * 1_000)\n        )\n      ]);\n      return textResult({\n        runId: run.id,\n        status: run.status,\n        startedAt: run.startedAt,\n        finishedAt: run.finishedAt,\n        result: run.result,\n        error: run.error\n      });\n    }\n  );\n\n  mcp.registerTool(\n    \"list_targets\",\n    {\n      title: \"List application targets\",\n      description: \"List all locally registered AppTrace targets.\",\n      inputSchema: z.object({})\n    },\n    async () => {\n      try {\n        const targets = await core.handle(CHANNELS.targetsList, {});\n        return textResult(targets);\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"auth_status\",\n    {\n      title: \"Apple account status\",\n      description:\n        \"Read the local App Store login state. Never returns passwords, 2FA codes or keychain secrets.\",\n      inputSchema: z.object({})\n    },\n    async () => {\n      try {\n        const status = await core.handle(CHANNELS.accountStatus, {\n          force: true\n        });\n        return textResult(status);\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"get_job\",\n    {\n      title: \"Get job status\",\n      description: \"Return a job, its recent events and result.\",\n      inputSchema: z.object({\n        job_id: z.string().uuid()\n      })\n    },\n    async ({ job_id }) => {\n      try {\n        const result = (await core.handle(CHANNELS.jobsGet, {\n          jobId: job_id\n        })) as {\n          job: Record<string, unknown>;\n          events: Array<Record<string, unknown>>;\n        };\n        return textResult({\n          ...result,\n          events: result.events.slice(-50)\n        });\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"search_findings\",\n    {\n      title: \"Search structured findings\",\n      description:\n        \"Search persisted routes, modules, assets, endpoints, storage and native findings for a target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        query: z.string().trim().max(512).optional(),\n        types: z\n          .array(\n            z.enum([\n              \"technology\",\n              \"route\",\n              \"network_endpoint\",\n              \"module\",\n              \"asset\",\n              \"storage\",\n              \"native_procedure\",\n              \"native_string\",\n              \"risk\",\n              \"limitation\"\n            ])\n          )\n          .optional(),\n        limit: z.number().int().min(1).max(1000).optional(),\n        offset: z.number().int().min(0).optional()\n      })\n    },\n    async (input) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.findingsSearch, {\n            targetId: input.target_id,\n            query: input.query,\n            types: input.types,\n            limit: input.limit,\n            offset: input.offset\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"search_native\",\n    {\n      title: \"Search native symbols\",\n      description:\n        \"Search native procedure names or strings. Use a returned procedure name with decompile_function.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        query: z.string().trim().min(1).max(512),\n        kind: z.enum([\"procedures\", \"strings\"]).optional(),\n        mode: z.enum([\"literal\", \"regex\"]).optional()\n      })\n    },\n    async ({ target_id, query, kind, mode }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(target_id, \"native:search\", {\n              query,\n              kind: kind ?? \"procedures\",\n              mode: mode ?? \"literal\"\n            })) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"decompile_function\",\n    {\n      title: \"Decompile one native function\",\n      description:\n        \"Decompile an exact function or symbol name returned by search_native. Encrypted targets are refused.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        function_name: z\n          .string()\n          .trim()\n          .min(1)\n          .max(256)\n          .regex(/^[A-Za-z_$][A-Za-z0-9_$.@:-]{0,255}$/)\n      })\n    },\n    async ({ target_id, function_name }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(target_id, \"native:decompile\", {\n              functionName: function_name\n            })) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"list_evidence\",\n    {\n      title: \"List evidence\",\n      description: \"List stored evidence files and summaries for a target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.evidenceList, {\n            targetId: target_id\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"generate_report\",\n    {\n      title: \"Generate evidence report\",\n      description:\n        \"Generate a Markdown report for an existing target and its current artifact.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(\n              target_id,\n              \"generate:report\"\n            )) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"compare_versions\",\n    {\n      title: \"Compare two artifact versions\",\n      description:\n        \"Compare routes, modules, assets, network candidates and technology hints between two analyzed artifacts of the same target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        left_artifact_id: z.string().uuid(),\n        right_artifact_id: z.string().uuid(),\n        force: z.boolean().optional()\n      })\n    },\n    async ({\n      target_id,\n      left_artifact_id,\n      right_artifact_id,\n      force\n    }) => {\n      try {\n        return textResult(\n          await new VersionComparisonService(core).compare(\n            target_id,\n            left_artifact_id,\n            right_artifact_id,\n            { force }\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"list_capabilities\",\n    {\n      title: \"List capabilities\",\n      description:\n        \"List analysis capabilities available for the host and an optional target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid().optional()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.capabilitiesList, {\n            ...(target_id ? { targetId: target_id } : {})\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  const transport = new StdioServerTransport();\n  await mcp.connect(transport);\n\n  const close = async () => {\n    await mcp.close().catch(() => {});\n    core.close();\n  };\n  process.once(\"SIGINT\", () => void close().finally(() => process.exit(0)));\n  process.once(\"SIGTERM\", () => void close().finally(() => process.exit(0)));\n\n  return mcp;\n}\n\nconst invokedDirectly = isEntryPoint();\n\nfunction isEntryPoint(): boolean {\n  if (!process.argv[1]) return false;\n  try {\n    // Compare real paths: /tmp and npm bin shims are symlinked on macOS/Linux,\n    // and a string comparison silently prevents the server from starting.\n    return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));\n  } catch {\n    return false;\n  }\n}\nif (invokedDirectly) {\n  void startMcpServer().catch((error) => {\n    console.error(\n      `[apptrace-mcp] ${\n        error instanceof Error ? error.stack ?? error.message : String(error)\n      }`\n    );\n    process.exitCode = 1;\n  });\n}\n","import { OnboardingService, type SetupStatus } from \"@zhuixin/metadata\";\nimport type { McpServer } from \"@modelcontextprotocol/server\";\nimport { z } from \"zod\";\n\nfunction result(status: SetupStatus) {\n  return { content: [{ type: \"text\" as const, text: JSON.stringify(status) }], structuredContent: { ...status } };\n}\n\nexport function registerOnboarding(mcp: McpServer, service: OnboardingService): void {\n  mcp.registerTool(\"prepare_environment\", {\n    title: \"Prepare AppTrace automatically\",\n    description: \"Install missing local analysis tools using the bundled installer. Returns promptly; poll get_setup_status. No Apple credentials are accepted. Retry only after diagnosing a previous failure.\",\n    inputSchema: z.object({ retry: z.boolean().optional() })\n  }, async ({ retry }) => result(await service.prepare(retry)));\n  mcp.registerTool(\"get_setup_status\", {\n    title: \"Wait for environment and login readiness\",\n    description: \"Read persistent installation progress and safe Apple login status. Follow next_tool; when ready, resume the original analyze_app arguments without asking the user to repeat them.\",\n    inputSchema: z.object({ wait_seconds: z.number().int().min(0).max(30).optional(), require_account: z.boolean().default(false).describe(\"Set true when waiting for Apple sign-in; local artifact analysis needs no account.\") })\n  }, async ({ wait_seconds, require_account }) => {\n    const deadline = Date.now() + (wait_seconds ?? 0) * 1000;\n    const check = () => service.status(require_account, (wait_seconds ?? 0) > 0\n      ? Math.max(1, Math.min(5000, deadline - Date.now())) : 5000);\n    let status = await check();\n    while ([\"installing\", \"login_pending\"].includes(status.state) && Date.now() < deadline) {\n      await new Promise(resolve => setTimeout(resolve, Math.min(2000, deadline - Date.now())));\n      if (Date.now() >= deadline) break;\n      status = await check();\n    }\n    return result(status);\n  });\n  mcp.registerTool(\"open_login\", {\n    title: \"Open local Apple sign-in window\",\n    description: \"Open a visible Windows sign-in terminal for the user. Reuses an active sign-in window. Credentials and terminal output never enter MCP. Poll get_setup_status afterwards, then resume the original analysis. Other hosts return a local-terminal fallback.\",\n    inputSchema: z.object({})\n  }, async () => result(await service.openLogin()));\n}\n\nexport function setupResponse(status: SetupStatus, input: Record<string, unknown>) {\n  return {\n    status: \"awaiting_setup\",\n    setup: status,\n    next_tool: status.next_tool,\n    resume: { tool: \"analyze_app\", arguments: input },\n    nextAction: \"Follow next_tool to finish setup; once ready, resend analyze_app with resume.arguments. Do not ask the user to repeat the request or for credentials.\"\n  };\n}\n"],"mappings":";;;AAEE,cAAW;;;ACAb;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,KAAAA,UAAS;;;AChBlB,SAAS,SAAS;AAElB,SAAS,OAAO,QAAqB;AACnC,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC,GAAG,mBAAmB,EAAE,GAAG,OAAO,EAAE;AAChH;AAEO,SAAS,mBAAmB,KAAgB,SAAkC;AACnF,MAAI,aAAa,uBAAuB;AAAA,IACtC,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAAA,EACzD,GAAG,OAAO,EAAE,MAAM,MAAM,OAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,CAAC;AAC5D,MAAI,aAAa,oBAAoB;AAAA,IACnC,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,GAAG,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,KAAK,EAAE,SAAS,oFAAoF,EAAE,CAAC;AAAA,EAChO,GAAG,OAAO,EAAE,cAAc,gBAAgB,MAAM;AAC9C,UAAM,WAAW,KAAK,IAAI,KAAK,gBAAgB,KAAK;AACpD,UAAM,QAAQ,MAAM,QAAQ,OAAO,kBAAkB,gBAAgB,KAAK,IACtE,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,WAAW,KAAK,IAAI,CAAC,CAAC,IAAI,GAAI;AAC7D,QAAI,SAAS,MAAM,MAAM;AACzB,WAAO,CAAC,cAAc,eAAe,EAAE,SAAS,OAAO,KAAK,KAAK,KAAK,IAAI,IAAI,UAAU;AACtF,YAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,KAAK,IAAI,KAAM,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC;AACvF,UAAI,KAAK,IAAI,KAAK,SAAU;AAC5B,eAAS,MAAM,MAAM;AAAA,IACvB;AACA,WAAO,OAAO,MAAM;AAAA,EACtB,CAAC;AACD,MAAI,aAAa,cAAc;AAAA,IAC7B,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,CAAC,CAAC;AAAA,EAC1B,GAAG,YAAY,OAAO,MAAM,QAAQ,UAAU,CAAC,CAAC;AAClD;AAEO,SAAS,cAAc,QAAqB,OAAgC;AACjF,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,WAAW,OAAO;AAAA,IAClB,QAAQ,EAAE,MAAM,eAAe,WAAW,MAAM;AAAA,IAChD,YAAY;AAAA,EACd;AACF;;;ADxBA,IAAM,QAAQ;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,YAAY,OAAgB;AACnC,QAAM,UACJ,iBAAiB,cACb,QACA,IAAI;AAAA,IACF;AAAA,IACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,EACvD;AACN,QAAM,aACJ,QAAQ,SAAS,mBAAmB,QAAQ,SAAS,oBACjD,8EACA,QAAQ,SAAS,qBACf,sEACA;AACR,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,KAAK;AAAA,UACT;AAAA,YACE,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,YACjB,SAAS,QAAQ;AAAA,YACjB;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WAAW,OAAgB;AAClC,SAAO;AAAA,IACL,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,IACA,mBAAmB;AAAA,EACrB;AACF;AAEA,SAAS,UAAU,KAA8B;AAC/C,SAAO;AAAA,IACL,OAAO,IAAI;AAAA,IACX,cAAc,IAAI;AAAA,IAClB,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,IACZ,WAAW,IAAI;AAAA,IACf,cAAc,IAAI;AAAA,EACpB;AACF;AAEA,eAAsB,eACpB,SAAqB,WAAW,GACZ;AACpB,QAAM,OAAO,IAAI,WAAW,EAAE,QAAQ,MAAM,MAAM;AAAA,EAAC,EAAE,CAAC;AACtD,OAAK,MAAM,6BAA6B;AACxC,QAAM,WAAW,IAAI,mBAAmB,IAAI;AAC5C,QAAM,OAAO,oBAAI,IAWf;AACF,QAAM,MAAM,IAAI,UAAU;AAAA,IACxB,MAAM;AAAA,IACN;AAAA,EACF,CAAC;AACD,QAAM,aAAa,IAAI,kBAAkB,MAAM;AAC/C,qBAAmB,KAAK,UAAU;AAElC,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaC,GAAE,OAAO;AAAA,QACpB,QAAQA,GACL,OAAO,EACP,SAAS,EACT,SAAS,uCAAuC;AAAA,QACnD,WAAWA,GACR,OAAO,EACP,KAAK,EACL,SAAS,EACT,SAAS,6BAA6B;AAAA,QACzC,OAAOA,GACJ,MAAMA,GAAE,KAAK,KAAK,CAAC,EACnB,SAAS,EACT,SAAS,gEAAgE;AAAA,QAC5E,OAAOA,GACJ,QAAQ,EACR,SAAS,EACT,SAAS,4DAA4D;AAAA,QACxE,cAAcA,GACX,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,EAAE,EACN,SAAS,EACT,SAAS,mDAAmD;AAAA,QAC/D,iBAAiBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MAC/D,CAAC;AAAA,IACH;AAAA,IACA,OAAO,UAAU;AACf,UAAI,CAAC,MAAM,UAAU,CAAC,MAAM,WAAW;AACrC,eAAO;AAAA,UACL,IAAI,YAAY,mBAAmB,8BAA8B;AAAA,QACnE;AAAA,MACF;AACA,UAAI;AACF,cAAM,QAAQ,MAAM,WAAW,OAAO,KAAK;AAC3C,YAAI,MAAM,UAAU,SAAS;AAC3B,iBAAO,WAAW,cAAc,MAAM,UAAU,kBAAkB,MAAM,WAAW,QAAQ,IAAI,OAAO,KAAK,CAAC;AAAA,QAC9G;AACA,cAAM,WAAW,MAAM,SAAS,cAAc,EAAE,QAAQ,MAAM,QAAQ,UAAU,MAAM,UAAU,CAAC;AACjG,YAAI,SAAS,iBAAiB;AAC5B,gBAAM,SAAS,MAAM,WAAW,OAAO;AACvC,cAAI,OAAO,UAAU,SAAS;AAC5B,kBAAM,OAAO,CAAC,kBAAkB,iBAAiB,EAAE,SAAS,OAAO,KAAK,IAAI,MAAM,WAAW,UAAU,IAAI;AAC3G,mBAAO,WAAW,cAAc,MAAM,KAAK,CAAC;AAAA,UAC9C;AAAA,QACF;AACA,cAAM,QAAQ,WAAW;AACzB,cAAM,MAQF;AAAA,UACF,IAAI;AAAA,UACJ,QAAQ;AAAA,UACR,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,SAAS,QAAQ,QAAQ;AAAA,QAC3B;AACA,YAAI,UAAU,SACX,WAAW;AAAA,UACV,QAAQ,MAAM;AAAA,UACd,UAAU,SAAS;AAAA,UACnB,OAAO,MAAM;AAAA,UACb,OAAO,MAAM;AAAA,UACb,YAAY,MAAM,mBAAmB,QAAS;AAAA,QAChD,CAAC,EACA,KAAK,CAACC,YAAW;AAChB,cAAI,SAAS;AACb,cAAI,SAASA;AACb,cAAI,cAAa,oBAAI,KAAK,GAAE,YAAY;AACxC,eAAK,MAAM,kBAAkB;AAAA,YAC3B,IAAI,IAAI;AAAA,YACR,UAAU,SAAS;AAAA,YACnB,QAAQ;AAAA,YACR,WAAW,IAAI;AAAA,YACf,YAAY,IAAI;AAAA,YAChB,QAAQ,IAAI;AAAA,YACZ,WAAW,IAAI;AAAA,UACjB,CAAC;AAAA,QACH,CAAC,EACA,MAAM,CAAC,UAAmB;AACzB,gBAAM,UACJ,iBAAiB,cACb,QACA,IAAI;AAAA,YACF;AAAA,YACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,UACvD;AACN,cAAI,SAAS;AACb,cAAI,QAAQ;AAAA,YACV,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,YACjB,SAAS,QAAQ;AAAA,UACnB;AACA,cAAI,cAAa,oBAAI,KAAK,GAAE,YAAY;AACxC,eAAK,MAAM,kBAAkB;AAAA,YAC3B,IAAI,IAAI;AAAA,YACR,UAAU,SAAS;AAAA,YACnB,QAAQ;AAAA,YACR,WAAW,IAAI;AAAA,YACf,YAAY,IAAI;AAAA,YAChB,OAAO,IAAI;AAAA,YACX,WAAW,IAAI;AAAA,UACjB,CAAC;AAAA,QACH,CAAC;AACH,aAAK,IAAI,OAAO,GAAG;AACnB,aAAK,MAAM,kBAAkB;AAAA,UAC3B,IAAI;AAAA,UACJ,UAAU,SAAS;AAAA,UACnB,QAAQ;AAAA,UACR,WAAW,IAAI;AAAA,UACf,WAAW,IAAI;AAAA,QACjB,CAAC;AACD,cAAM,cAAc,KAAK,IAAI,GAAG,MAAM,gBAAgB,EAAE;AACxD,cAAM,QAAQ,KAAK;AAAA,UACjB,IAAI;AAAA,UACJ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,cAAc,GAAK,CAAC;AAAA,QACnE,CAAC;AACD,eAAO,WAAW;AAAA,UAChB;AAAA,UACA,QAAQ,IAAI;AAAA,UACZ,QAAQ,IAAI;AAAA,UACZ,OAAO,IAAI;AAAA,UACX,YACE,IAAI,WAAW,YACX,sDACA;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaD,GAAE,OAAO;AAAA,QACpB,QAAQA,GAAE,OAAO,EAAE,KAAK;AAAA,QACxB,cAAcA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MAC3D,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,QAAQ,aAAa,MAAM;AAClC,YAAM,MAAM,KAAK,IAAI,MAAM;AAC3B,UAAI,CAAC,KAAK;AACR,cAAM,SAAS,KAAK,MAAM,eAAe,MAAM;AAC/C,eAAO,SACH,WAAW,MAAM,IACjB;AAAA,UACE,IAAI,YAAY,0BAA0B,sCAAsC;AAAA,QAClF;AAAA,MACN;AACA,YAAM,QAAQ,KAAK;AAAA,QACjB,IAAI;AAAA,QACJ,IAAI;AAAA,UAAQ,CAAC,YACX,WAAW,SAAS,KAAK,IAAI,GAAG,gBAAgB,EAAE,IAAI,GAAK;AAAA,QAC7D;AAAA,MACF,CAAC;AACD,aAAO,WAAW;AAAA,QAChB,OAAO,IAAI;AAAA,QACX,QAAQ,IAAI;AAAA,QACZ,WAAW,IAAI;AAAA,QACf,YAAY,IAAI;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,OAAO,IAAI;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAaA,GAAE,OAAO,CAAC,CAAC;AAAA,IAC1B;AAAA,IACA,YAAY;AACV,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,OAAO,SAAS,aAAa,CAAC,CAAC;AAC1D,eAAO,WAAW,OAAO;AAAA,MAC3B,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO,CAAC,CAAC;AAAA,IAC1B;AAAA,IACA,YAAY;AACV,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,OAAO,SAAS,eAAe;AAAA,UACvD,OAAO;AAAA,QACT,CAAC;AACD,eAAO,WAAW,MAAM;AAAA,MAC1B,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAaA,GAAE,OAAO;AAAA,QACpB,QAAQA,GAAE,OAAO,EAAE,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,OAAO,MAAM;AACpB,UAAI;AACF,cAAMC,UAAU,MAAM,KAAK,OAAO,SAAS,SAAS;AAAA,UAClD,OAAO;AAAA,QACT,CAAC;AAID,eAAO,WAAW;AAAA,UAChB,GAAGA;AAAA,UACH,QAAQA,QAAO,OAAO,MAAM,GAAG;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaD,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,OAAOA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,QAC3C,OAAOA,GACJ;AAAA,UACCA,GAAE,KAAK;AAAA,YACL;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH,EACC,SAAS;AAAA,QACZ,OAAOA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,QAClD,QAAQA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,UAAU;AACf,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,gBAAgB;AAAA,YACzC,UAAU,MAAM;AAAA,YAChB,OAAO,MAAM;AAAA,YACb,OAAO,MAAM;AAAA,YACb,OAAO,MAAM;AAAA,YACb,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,OAAOA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,QACvC,MAAMA,GAAE,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,SAAS;AAAA,QACjD,MAAMA,GAAE,KAAK,CAAC,WAAW,OAAO,CAAC,EAAE,SAAS;AAAA,MAC9C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,WAAW,OAAO,MAAM,KAAK,MAAM;AAC1C,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS,cAAc,WAAW,iBAAiB;AAAA,cACxD;AAAA,cACA,MAAM,QAAQ;AAAA,cACd,MAAM,QAAQ;AAAA,YAChB,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,eAAeA,GACZ,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,sCAAsC;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,WAAW,cAAc,MAAM;AACtC,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS,cAAc,WAAW,oBAAoB;AAAA,cAC3D,cAAc;AAAA,YAChB,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,cAAc;AAAA,YACvC,UAAU;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS;AAAA,cACd;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,kBAAkBA,GAAE,OAAO,EAAE,KAAK;AAAA,QAClC,mBAAmBA,GAAE,OAAO,EAAE,KAAK;AAAA,QACnC,OAAOA,GAAE,QAAQ,EAAE,SAAS;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAAM;AACJ,UAAI;AACF,eAAO;AAAA,UACL,MAAM,IAAI,yBAAyB,IAAI,EAAE;AAAA,YACvC;AAAA,YACA;AAAA,YACA;AAAA,YACA,EAAE,MAAM;AAAA,UACV;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,kBAAkB;AAAA,YAC3C,GAAI,YAAY,EAAE,UAAU,UAAU,IAAI,CAAC;AAAA,UAC7C,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,IAAI,QAAQ,SAAS;AAE3B,QAAM,QAAQ,YAAY;AACxB,UAAM,IAAI,MAAM,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAChC,SAAK,MAAM;AAAA,EACb;AACA,UAAQ,KAAK,UAAU,MAAM,KAAK,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC,CAAC;AACxE,UAAQ,KAAK,WAAW,MAAM,KAAK,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC,CAAC;AAEzE,SAAO;AACT;AAEA,IAAM,kBAAkB,aAAa;AAErC,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,MAAI;AAGF,WAAO,aAAa,QAAQ,KAAK,CAAC,CAAC,MAAM,aAAa,cAAc,YAAY,GAAG,CAAC;AAAA,EACtF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,IAAI,iBAAiB;AACnB,OAAK,eAAe,EAAE,MAAM,CAAC,UAAU;AACrC,YAAQ;AAAA,MACN,kBACE,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK,CACtE;AAAA,IACF;AACA,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":["z","z","result"]}
+{"version":3,"sources":["../package.json","../src/index.ts","../src/onboarding.ts","../src/tasks.ts"],"sourcesContent":["{\n  \"name\": \"@zhuixin/mcp\",\n  \"version\": \"0.2.4\",\n  \"license\": \"Apache-2.0\",\n  \"description\": \"AppTrace MCP server for evidence-backed application analysis\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/zhuixin-labs/app-evidence.git\",\n    \"directory\": \"packages/mcp\"\n  },\n  \"homepage\": \"https://github.com/zhuixin-labs/app-evidence\",\n  \"bugs\": {\"url\": \"https://github.com/zhuixin-labs/app-evidence/issues\"},\n  \"keywords\": [\"mcp\", \"ai-agents\", \"app-analysis\", \"model-context-protocol\"],\n  \"publishConfig\": {\"access\": \"public\"},\n  \"engines\": {\"node\": \">=22.19\"},\n  \"type\": \"module\",\n  \"main\": \"dist/index.js\",\n  \"types\": \"dist/index.d.ts\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"default\": \"./dist/index.js\"\n    }\n  },\n  \"bin\": {\n    \"apptrace-mcp\": \"dist/index.js\"\n  },\n  \"files\": [\"dist\"],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"typecheck\": \"tsc --noEmit -p tsconfig.json\"\n  },\n  \"dependencies\": {\n    \"@zhuixin/metadata\": \"workspace:*\",\n    \"@zhuixin/shared\": \"workspace:*\",\n    \"@modelcontextprotocol/server\": \"^2.3.1\",\n    \"zod\": \"^4.2.0\"\n  },\n  \"devDependencies\": {\n    \"tsup\": \"^8.5.0\"\n  }\n}\n","#!/usr/bin/env node\nimport { version } from \"../package.json\";\nimport {\n  AppAnalysisService,\n  CoreFailure,\n  CoreServer,\n  VersionComparisonService,\n  loadConfig,\n  OnboardingService,\n  AnalysisTasks,\n  startAnalysisWorker,\n  recoverAnalysisTasks,\n  type AnalysisGoal,\n  type CoreConfig\n} from \"@zhuixin/metadata\";\nimport { CHANNELS } from \"@zhuixin/shared\";\nimport { McpServer } from \"@modelcontextprotocol/server\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/server/stdio\";\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { z } from \"zod\";\nimport { registerOnboarding } from \"./onboarding.js\";\nimport { waitForTask } from \"./tasks.js\";\n\nconst GOALS = [\n  \"tech_stack\",\n  \"feature_map\",\n  \"network\",\n  \"native_risk\",\n  \"report\"\n] as const satisfies readonly AnalysisGoal[];\n\nfunction errorResult(error: unknown) {\n  const failure =\n    error instanceof CoreFailure\n      ? error\n      : new CoreFailure(\n          \"INTERNAL_ERROR\",\n          error instanceof Error ? error.message : String(error)\n        );\n  const nextAction =\n    failure.code === \"AUTH_REQUIRED\" || failure.code === \"KEYCHAIN_LOCKED\"\n      ? \"Call open_login, poll get_setup_status, then resume the original request.\"\n      : failure.code === \"LICENSE_REQUIRED\"\n        ? \"Get the app from the App Store with the same Apple account first.\"\n        : undefined;\n  return {\n    isError: true,\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(\n          {\n            code: failure.code,\n            message: failure.message,\n            details: failure.details,\n            nextAction\n          },\n          null,\n          2\n        )\n      }\n    ]\n  };\n}\n\nfunction textResult(value: unknown) {\n  return {\n    content: [\n      {\n        type: \"text\" as const,\n        text: JSON.stringify(value, null, 2)\n      }\n    ],\n    structuredContent: value as Record<string, unknown>\n  };\n}\n\nfunction jobResult(job: Record<string, unknown>) {\n  return {\n    jobId: job.id,\n    capabilityId: job.capabilityId,\n    status: job.status,\n    result: job.result,\n    errorCode: job.errorCode,\n    errorMessage: job.errorMessage\n  };\n}\n\nexport async function startMcpServer(\n  config: CoreConfig = loadConfig()\n): Promise<McpServer> {\n  const core = new CoreServer({ config, emit: () => {} });\n  const analysis = new AppAnalysisService(core);\n  const tasks = new AnalysisTasks(config.workspaceRoot);\n  await recoverAnalysisTasks(config);\n  const mcp = new McpServer({\n    name: \"apptrace\",\n    version\n  });\n  const onboarding = new OnboardingService(config);\n  registerOnboarding(mcp, onboarding);\n\n  mcp.registerTool(\n    \"analyze_app\",\n    {\n      title: \"Analyze an application\",\n      description:\n        \"Create a persistent application analysis task. A local worker prepares tools, opens sign-in once and automatically continues after background authentication succeeds, even if MCP disconnects. Always retain runId and poll get_analysis_run while preparing/awaiting_auth/running. Never request credentials in chat.\",\n      inputSchema: z.object({\n        source: z\n          .string()\n          .optional()\n          .describe(\"App Store URL or numeric App Store ID\"),\n        target_id: z\n          .string()\n          .uuid()\n          .optional()\n          .describe(\"Existing AppTrace target ID\"),\n        goals: z\n          .array(z.enum(GOALS))\n          .optional()\n          .describe(\"Analysis goals; defaults to tech stack, feature map and report\"),\n        force: z\n          .boolean()\n          .optional()\n          .describe(\"Re-run analyses even when matching evidence already exists\"),\n        wait_seconds: z\n          .number()\n          .int()\n          .min(0)\n          .max(60)\n          .optional()\n          .describe(\"Seconds to wait before returning a running run_id\"),\n        timeout_seconds: z.number().int().min(30).max(1800).optional()\n      })\n    },\n    async (input) => {\n      if (!input.source && !input.target_id) {\n        return errorResult(\n          new CoreFailure(\"SOURCE_REQUIRED\", \"Provide source or target_id.\")\n        );\n      }\n      try {\n        const task = tasks.create(input);\n        await startAnalysisWorker(config, task.id);\n        return textResult(await waitForTask(tasks, task.id, input.wait_seconds ?? 10));\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"get_analysis_run\",\n    {\n      title: \"Get asynchronous analysis run\",\n      description:\n        \"Wait for or retrieve the result of an analyze_app run.\",\n      inputSchema: z.object({\n        run_id: z.string().uuid(),\n        wait_seconds: z.number().int().min(0).max(30).optional()\n      })\n    },\n    async ({ run_id, wait_seconds }) => {\n      const task = tasks.get(run_id);\n      if (task) {\n        await startAnalysisWorker(config, task.id);\n        return textResult(await waitForTask(tasks, task.id, wait_seconds ?? 10));\n      }\n      const stored = core.store.getAnalysisRun(run_id);\n      return stored ? textResult(stored) : errorResult(new CoreFailure(\"ANALYSIS_RUN_NOT_FOUND\", \"Analysis run not found.\"));\n    }\n  );\n\n  mcp.registerTool(\n    \"cancel_analysis_run\",\n    { title: \"Cancel saved analysis task\", description: \"Cancel a queued, waiting or running analysis task. Already registered artifacts and evidence are retained.\", inputSchema: z.object({ run_id: z.string().uuid() }) },\n    async ({ run_id }) => {\n      const task = tasks.cancel(run_id);\n      return task ? textResult(await waitForTask(tasks, task.id, 0)) : errorResult(new CoreFailure(\"ANALYSIS_RUN_NOT_FOUND\", \"Analysis run not found.\"));\n    }\n  );\n\n  mcp.registerTool(\n    \"list_targets\",\n    {\n      title: \"List application targets\",\n      description: \"List all locally registered AppTrace targets.\",\n      inputSchema: z.object({})\n    },\n    async () => {\n      try {\n        const targets = await core.handle(CHANNELS.targetsList, {});\n        return textResult(targets);\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"auth_status\",\n    {\n      title: \"Apple account status\",\n      description:\n        \"Read the local App Store login state. Never returns passwords, 2FA codes or keychain secrets.\",\n      inputSchema: z.object({})\n    },\n    async () => {\n      try {\n        const status = await core.handle(CHANNELS.accountStatus, {\n          force: true\n        });\n        return textResult(status);\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"get_job\",\n    {\n      title: \"Get job status\",\n      description: \"Return a job, its recent events and result.\",\n      inputSchema: z.object({\n        job_id: z.string().uuid()\n      })\n    },\n    async ({ job_id }) => {\n      try {\n        const result = (await core.handle(CHANNELS.jobsGet, {\n          jobId: job_id\n        })) as {\n          job: Record<string, unknown>;\n          events: Array<Record<string, unknown>>;\n        };\n        return textResult({\n          ...result,\n          events: result.events.slice(-50)\n        });\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"search_findings\",\n    {\n      title: \"Search structured findings\",\n      description:\n        \"Search persisted routes, modules, assets, endpoints, storage and native findings for a target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        query: z.string().trim().max(512).optional(),\n        types: z\n          .array(\n            z.enum([\n              \"technology\",\n              \"route\",\n              \"network_endpoint\",\n              \"module\",\n              \"asset\",\n              \"storage\",\n              \"native_procedure\",\n              \"native_string\",\n              \"risk\",\n              \"limitation\"\n            ])\n          )\n          .optional(),\n        limit: z.number().int().min(1).max(1000).optional(),\n        offset: z.number().int().min(0).optional()\n      })\n    },\n    async (input) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.findingsSearch, {\n            targetId: input.target_id,\n            query: input.query,\n            types: input.types,\n            limit: input.limit,\n            offset: input.offset\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"search_native\",\n    {\n      title: \"Search native symbols\",\n      description:\n        \"Search native procedure names or strings. Use a returned procedure name with decompile_function.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        query: z.string().trim().min(1).max(512),\n        kind: z.enum([\"procedures\", \"strings\"]).optional(),\n        mode: z.enum([\"literal\", \"regex\"]).optional()\n      })\n    },\n    async ({ target_id, query, kind, mode }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(target_id, \"native:search\", {\n              query,\n              kind: kind ?? \"procedures\",\n              mode: mode ?? \"literal\"\n            })) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"decompile_function\",\n    {\n      title: \"Decompile one native function\",\n      description:\n        \"Decompile an exact function or symbol name returned by search_native. Encrypted targets are refused.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        function_name: z\n          .string()\n          .trim()\n          .min(1)\n          .max(256)\n          .regex(/^[A-Za-z_$][A-Za-z0-9_$.@:-]{0,255}$/)\n      })\n    },\n    async ({ target_id, function_name }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(target_id, \"native:decompile\", {\n              functionName: function_name\n            })) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"list_evidence\",\n    {\n      title: \"List evidence\",\n      description: \"List stored evidence files and summaries for a target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.evidenceList, {\n            targetId: target_id\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"generate_report\",\n    {\n      title: \"Generate evidence report\",\n      description:\n        \"Generate a Markdown report for an existing target and its current artifact.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          jobResult(\n            (await analysis.runCapability(\n              target_id,\n              \"generate:report\"\n            )) as unknown as Record<string, unknown>\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"compare_versions\",\n    {\n      title: \"Compare two artifact versions\",\n      description:\n        \"Compare routes, modules, assets, network candidates and technology hints between two analyzed artifacts of the same target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid(),\n        left_artifact_id: z.string().uuid(),\n        right_artifact_id: z.string().uuid(),\n        force: z.boolean().optional()\n      })\n    },\n    async ({\n      target_id,\n      left_artifact_id,\n      right_artifact_id,\n      force\n    }) => {\n      try {\n        return textResult(\n          await new VersionComparisonService(core).compare(\n            target_id,\n            left_artifact_id,\n            right_artifact_id,\n            { force }\n          )\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  mcp.registerTool(\n    \"list_capabilities\",\n    {\n      title: \"List capabilities\",\n      description:\n        \"List analysis capabilities available for the host and an optional target.\",\n      inputSchema: z.object({\n        target_id: z.string().uuid().optional()\n      })\n    },\n    async ({ target_id }) => {\n      try {\n        return textResult(\n          await core.handle(CHANNELS.capabilitiesList, {\n            ...(target_id ? { targetId: target_id } : {})\n          })\n        );\n      } catch (error) {\n        return errorResult(error);\n      }\n    }\n  );\n\n  const transport = new StdioServerTransport();\n  await mcp.connect(transport);\n\n  const close = async () => {\n    await mcp.close().catch(() => {});\n    core.close();\n  };\n  process.once(\"SIGINT\", () => void close().finally(() => process.exit(0)));\n  process.once(\"SIGTERM\", () => void close().finally(() => process.exit(0)));\n\n  return mcp;\n}\n\nconst invokedDirectly = isEntryPoint();\n\nfunction isEntryPoint(): boolean {\n  if (!process.argv[1]) return false;\n  try {\n    // Compare real paths: /tmp and npm bin shims are symlinked on macOS/Linux,\n    // and a string comparison silently prevents the server from starting.\n    return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));\n  } catch {\n    return false;\n  }\n}\nif (invokedDirectly) {\n  void startMcpServer().catch((error) => {\n    console.error(\n      `[apptrace-mcp] ${\n        error instanceof Error ? error.stack ?? error.message : String(error)\n      }`\n    );\n    process.exitCode = 1;\n  });\n}\n","import { OnboardingService, recoverAnalysisTasks, loadConfig, type SetupStatus } from \"@zhuixin/metadata\";\nimport type { McpServer } from \"@modelcontextprotocol/server\";\nimport { z } from \"zod\";\n\nfunction result(status: SetupStatus) {\n  return { content: [{ type: \"text\" as const, text: JSON.stringify(status) }], structuredContent: { ...status } };\n}\n\nexport function registerOnboarding(mcp: McpServer, service: OnboardingService): void {\n  mcp.registerTool(\"prepare_environment\", {\n    title: \"Prepare AppTrace automatically\",\n    description: \"Install missing local analysis tools using the bundled installer. Returns promptly; poll get_setup_status. No Apple credentials are accepted. Retry only after diagnosing a previous failure.\",\n    inputSchema: z.object({ retry: z.boolean().optional() })\n  }, async ({ retry }) => result(await service.prepare(retry)));\n  mcp.registerTool(\"get_setup_status\", {\n    title: \"Wait for environment and login readiness\",\n    description: \"Read persistent installation progress and safe Apple login status. Follow next_tool; when ready, resume the original analyze_app arguments without asking the user to repeat them.\",\n    inputSchema: z.object({ wait_seconds: z.number().int().min(0).max(30).optional(), require_account: z.boolean().default(false).describe(\"Set true when waiting for Apple sign-in; local artifact analysis needs no account.\") })\n  }, async ({ wait_seconds, require_account }) => {\n    const deadline = Date.now() + (wait_seconds ?? 0) * 1000;\n    const check = () => service.status(require_account, (wait_seconds ?? 0) > 0\n      ? Math.max(1, Math.min(5000, deadline - Date.now())) : 5000);\n    let status = await check();\n    while ([\"installing\", \"login_pending\"].includes(status.state) && Date.now() < deadline) {\n      await new Promise(resolve => setTimeout(resolve, Math.min(2000, deadline - Date.now())));\n      if (Date.now() >= deadline) break;\n      status = await check();\n    }\n    return result(status);\n  });\n  mcp.registerTool(\"open_login\", {\n    title: \"Open local Apple sign-in window\",\n    description: \"Open a visible Windows sign-in terminal for the user. Reuses an active sign-in window. Credentials and terminal output never enter MCP. Poll get_setup_status afterwards, then resume the original analysis. Other hosts return a local-terminal fallback.\",\n    inputSchema: z.object({})\n  }, async () => {\n    const status = await service.openLogin();\n    await recoverAnalysisTasks(loadConfig());\n    return result(status);\n  });\n}\n","import { AnalysisTasks, terminalTask, type AnalysisTask } from \"@zhuixin/metadata\";\n\nexport function taskResponse(task: AnalysisTask): Record<string, unknown> {\n  return {\n    runId: task.id, status: task.status, stage: task.stage, targetId: task.targetId,\n    startedAt: task.startedAt, updatedAt: task.updatedAt, finishedAt: task.finishedAt,\n    setup: task.setup, result: task.result, error: task.error,\n    next_tool: terminalTask(task) ? undefined : \"get_analysis_run\",\n    nextAction: terminalTask(task) ? undefined : task.stage === \"login_cancelled\"\n      ? \"Sign-in was cancelled or failed. The task is saved; wait for an explicit retry before calling open_login.\"\n      : \"The local worker continues automatically. Keep runId and wait with get_analysis_run; do not ask for sign-in confirmation or resend analyze_app.\"\n  };\n}\n\nexport async function waitForTask(tasks: AnalysisTasks, id: string, seconds: number): Promise<Record<string, unknown>> {\n  const deadline = Date.now() + seconds * 1000;\n  let task = tasks.get(id)!;\n  const stage = task.stage;\n  while (!terminalTask(task) && task.stage !== \"login_cancelled\" && Date.now() < deadline) {\n    await new Promise(resolve => setTimeout(resolve, Math.min(500, deadline - Date.now())));\n    task = tasks.get(id)!;\n    if (task.stage !== stage) break;\n  }\n  return taskResponse(task);\n}\n"],"mappings":";;;AAEE,cAAW;;;ACAb;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAAA;AAAA,EACA,qBAAAC;AAAA,EACA,iBAAAC;AAAA,EACA;AAAA,EACA,wBAAAC;AAAA,OAGK;AACP,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,KAAAC,UAAS;;;ACpBlB,SAA4B,sBAAsB,kBAAoC;AAEtF,SAAS,SAAS;AAElB,SAAS,OAAO,QAAqB;AACnC,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC,GAAG,mBAAmB,EAAE,GAAG,OAAO,EAAE;AAChH;AAEO,SAAS,mBAAmB,KAAgB,SAAkC;AACnF,MAAI,aAAa,uBAAuB;AAAA,IACtC,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAAA,EACzD,GAAG,OAAO,EAAE,MAAM,MAAM,OAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,CAAC;AAC5D,MAAI,aAAa,oBAAoB;AAAA,IACnC,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,GAAG,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,KAAK,EAAE,SAAS,oFAAoF,EAAE,CAAC;AAAA,EAChO,GAAG,OAAO,EAAE,cAAc,gBAAgB,MAAM;AAC9C,UAAM,WAAW,KAAK,IAAI,KAAK,gBAAgB,KAAK;AACpD,UAAM,QAAQ,MAAM,QAAQ,OAAO,kBAAkB,gBAAgB,KAAK,IACtE,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,WAAW,KAAK,IAAI,CAAC,CAAC,IAAI,GAAI;AAC7D,QAAI,SAAS,MAAM,MAAM;AACzB,WAAO,CAAC,cAAc,eAAe,EAAE,SAAS,OAAO,KAAK,KAAK,KAAK,IAAI,IAAI,UAAU;AACtF,YAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,KAAK,IAAI,KAAM,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC;AACvF,UAAI,KAAK,IAAI,KAAK,SAAU;AAC5B,eAAS,MAAM,MAAM;AAAA,IACvB;AACA,WAAO,OAAO,MAAM;AAAA,EACtB,CAAC;AACD,MAAI,aAAa,cAAc;AAAA,IAC7B,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,CAAC,CAAC;AAAA,EAC1B,GAAG,YAAY;AACb,UAAM,SAAS,MAAM,QAAQ,UAAU;AACvC,UAAM,qBAAqB,WAAW,CAAC;AACvC,WAAO,OAAO,MAAM;AAAA,EACtB,CAAC;AACH;;;ACvCA,SAAwB,oBAAuC;AAExD,SAAS,aAAa,MAA6C;AACxE,SAAO;AAAA,IACL,OAAO,KAAK;AAAA,IAAI,QAAQ,KAAK;AAAA,IAAQ,OAAO,KAAK;AAAA,IAAO,UAAU,KAAK;AAAA,IACvE,WAAW,KAAK;AAAA,IAAW,WAAW,KAAK;AAAA,IAAW,YAAY,KAAK;AAAA,IACvE,OAAO,KAAK;AAAA,IAAO,QAAQ,KAAK;AAAA,IAAQ,OAAO,KAAK;AAAA,IACpD,WAAW,aAAa,IAAI,IAAI,SAAY;AAAA,IAC5C,YAAY,aAAa,IAAI,IAAI,SAAY,KAAK,UAAU,oBACxD,8GACA;AAAA,EACN;AACF;AAEA,eAAsB,YAAY,OAAsB,IAAY,SAAmD;AACrH,QAAM,WAAW,KAAK,IAAI,IAAI,UAAU;AACxC,MAAI,OAAO,MAAM,IAAI,EAAE;AACvB,QAAM,QAAQ,KAAK;AACnB,SAAO,CAAC,aAAa,IAAI,KAAK,KAAK,UAAU,qBAAqB,KAAK,IAAI,IAAI,UAAU;AACvF,UAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,KAAK,IAAI,KAAK,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC;AACtF,WAAO,MAAM,IAAI,EAAE;AACnB,QAAI,KAAK,UAAU,MAAO;AAAA,EAC5B;AACA,SAAO,aAAa,IAAI;AAC1B;;;AFAA,IAAM,QAAQ;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,YAAY,OAAgB;AACnC,QAAM,UACJ,iBAAiB,cACb,QACA,IAAI;AAAA,IACF;AAAA,IACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,EACvD;AACN,QAAM,aACJ,QAAQ,SAAS,mBAAmB,QAAQ,SAAS,oBACjD,8EACA,QAAQ,SAAS,qBACf,sEACA;AACR,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,KAAK;AAAA,UACT;AAAA,YACE,MAAM,QAAQ;AAAA,YACd,SAAS,QAAQ;AAAA,YACjB,SAAS,QAAQ;AAAA,YACjB;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WAAW,OAAgB;AAClC,SAAO;AAAA,IACL,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,IACA,mBAAmB;AAAA,EACrB;AACF;AAEA,SAAS,UAAU,KAA8B;AAC/C,SAAO;AAAA,IACL,OAAO,IAAI;AAAA,IACX,cAAc,IAAI;AAAA,IAClB,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,IACZ,WAAW,IAAI;AAAA,IACf,cAAc,IAAI;AAAA,EACpB;AACF;AAEA,eAAsB,eACpB,SAAqBC,YAAW,GACZ;AACpB,QAAM,OAAO,IAAI,WAAW,EAAE,QAAQ,MAAM,MAAM;AAAA,EAAC,EAAE,CAAC;AACtD,QAAM,WAAW,IAAI,mBAAmB,IAAI;AAC5C,QAAM,QAAQ,IAAIC,eAAc,OAAO,aAAa;AACpD,QAAMC,sBAAqB,MAAM;AACjC,QAAM,MAAM,IAAI,UAAU;AAAA,IACxB,MAAM;AAAA,IACN;AAAA,EACF,CAAC;AACD,QAAM,aAAa,IAAIC,mBAAkB,MAAM;AAC/C,qBAAmB,KAAK,UAAU;AAElC,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaC,GAAE,OAAO;AAAA,QACpB,QAAQA,GACL,OAAO,EACP,SAAS,EACT,SAAS,uCAAuC;AAAA,QACnD,WAAWA,GACR,OAAO,EACP,KAAK,EACL,SAAS,EACT,SAAS,6BAA6B;AAAA,QACzC,OAAOA,GACJ,MAAMA,GAAE,KAAK,KAAK,CAAC,EACnB,SAAS,EACT,SAAS,gEAAgE;AAAA,QAC5E,OAAOA,GACJ,QAAQ,EACR,SAAS,EACT,SAAS,4DAA4D;AAAA,QACxE,cAAcA,GACX,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,EAAE,EACN,SAAS,EACT,SAAS,mDAAmD;AAAA,QAC/D,iBAAiBA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,MAC/D,CAAC;AAAA,IACH;AAAA,IACA,OAAO,UAAU;AACf,UAAI,CAAC,MAAM,UAAU,CAAC,MAAM,WAAW;AACrC,eAAO;AAAA,UACL,IAAI,YAAY,mBAAmB,8BAA8B;AAAA,QACnE;AAAA,MACF;AACA,UAAI;AACF,cAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,cAAM,oBAAoB,QAAQ,KAAK,EAAE;AACzC,eAAO,WAAW,MAAM,YAAY,OAAO,KAAK,IAAI,MAAM,gBAAgB,EAAE,CAAC;AAAA,MAC/E,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,QAAQA,GAAE,OAAO,EAAE,KAAK;AAAA,QACxB,cAAcA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,MACzD,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,QAAQ,aAAa,MAAM;AAClC,YAAM,OAAO,MAAM,IAAI,MAAM;AAC7B,UAAI,MAAM;AACR,cAAM,oBAAoB,QAAQ,KAAK,EAAE;AACzC,eAAO,WAAW,MAAM,YAAY,OAAO,KAAK,IAAI,gBAAgB,EAAE,CAAC;AAAA,MACzE;AACA,YAAM,SAAS,KAAK,MAAM,eAAe,MAAM;AAC/C,aAAO,SAAS,WAAW,MAAM,IAAI,YAAY,IAAI,YAAY,0BAA0B,yBAAyB,CAAC;AAAA,IACvH;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA,EAAE,OAAO,8BAA8B,aAAa,8GAA8G,aAAaA,GAAE,OAAO,EAAE,QAAQA,GAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE;AAAA,IACvN,OAAO,EAAE,OAAO,MAAM;AACpB,YAAM,OAAO,MAAM,OAAO,MAAM;AAChC,aAAO,OAAO,WAAW,MAAM,YAAY,OAAO,KAAK,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,YAAY,0BAA0B,yBAAyB,CAAC;AAAA,IACnJ;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAaA,GAAE,OAAO,CAAC,CAAC;AAAA,IAC1B;AAAA,IACA,YAAY;AACV,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,OAAO,SAAS,aAAa,CAAC,CAAC;AAC1D,eAAO,WAAW,OAAO;AAAA,MAC3B,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO,CAAC,CAAC;AAAA,IAC1B;AAAA,IACA,YAAY;AACV,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,OAAO,SAAS,eAAe;AAAA,UACvD,OAAO;AAAA,QACT,CAAC;AACD,eAAO,WAAW,MAAM;AAAA,MAC1B,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAaA,GAAE,OAAO;AAAA,QACpB,QAAQA,GAAE,OAAO,EAAE,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,OAAO,MAAM;AACpB,UAAI;AACF,cAAMC,UAAU,MAAM,KAAK,OAAO,SAAS,SAAS;AAAA,UAClD,OAAO;AAAA,QACT,CAAC;AAID,eAAO,WAAW;AAAA,UAChB,GAAGA;AAAA,UACH,QAAQA,QAAO,OAAO,MAAM,GAAG;AAAA,QACjC,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaD,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,OAAOA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,QAC3C,OAAOA,GACJ;AAAA,UACCA,GAAE,KAAK;AAAA,YACL;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH,EACC,SAAS;AAAA,QACZ,OAAOA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,QAClD,QAAQA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,UAAU;AACf,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,gBAAgB;AAAA,YACzC,UAAU,MAAM;AAAA,YAChB,OAAO,MAAM;AAAA,YACb,OAAO,MAAM;AAAA,YACb,OAAO,MAAM;AAAA,YACb,QAAQ,MAAM;AAAA,UAChB,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,OAAOA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,QACvC,MAAMA,GAAE,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,SAAS;AAAA,QACjD,MAAMA,GAAE,KAAK,CAAC,WAAW,OAAO,CAAC,EAAE,SAAS;AAAA,MAC9C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,WAAW,OAAO,MAAM,KAAK,MAAM;AAC1C,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS,cAAc,WAAW,iBAAiB;AAAA,cACxD;AAAA,cACA,MAAM,QAAQ;AAAA,cACd,MAAM,QAAQ;AAAA,YAChB,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,eAAeA,GACZ,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,sCAAsC;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,WAAW,cAAc,MAAM;AACtC,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS,cAAc,WAAW,oBAAoB;AAAA,cAC3D,cAAc;AAAA,YAChB,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,cAAc;AAAA,YACvC,UAAU;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL;AAAA,YACG,MAAM,SAAS;AAAA,cACd;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK;AAAA,QAC3B,kBAAkBA,GAAE,OAAO,EAAE,KAAK;AAAA,QAClC,mBAAmBA,GAAE,OAAO,EAAE,KAAK;AAAA,QACnC,OAAOA,GAAE,QAAQ,EAAE,SAAS;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAAM;AACJ,UAAI;AACF,eAAO;AAAA,UACL,MAAM,IAAI,yBAAyB,IAAI,EAAE;AAAA,YACvC;AAAA,YACA;AAAA,YACA;AAAA,YACA,EAAE,MAAM;AAAA,UACV;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAaA,GAAE,OAAO;AAAA,QACpB,WAAWA,GAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,UAAU,MAAM;AACvB,UAAI;AACF,eAAO;AAAA,UACL,MAAM,KAAK,OAAO,SAAS,kBAAkB;AAAA,YAC3C,GAAI,YAAY,EAAE,UAAU,UAAU,IAAI,CAAC;AAAA,UAC7C,CAAC;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,eAAO,YAAY,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,IAAI,QAAQ,SAAS;AAE3B,QAAM,QAAQ,YAAY;AACxB,UAAM,IAAI,MAAM,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAChC,SAAK,MAAM;AAAA,EACb;AACA,UAAQ,KAAK,UAAU,MAAM,KAAK,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC,CAAC;AACxE,UAAQ,KAAK,WAAW,MAAM,KAAK,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC,CAAC;AAEzE,SAAO;AACT;AAEA,IAAM,kBAAkB,aAAa;AAErC,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,MAAI;AAGF,WAAO,aAAa,QAAQ,KAAK,CAAC,CAAC,MAAM,aAAa,cAAc,YAAY,GAAG,CAAC;AAAA,EACtF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,IAAI,iBAAiB;AACnB,OAAK,eAAe,EAAE,MAAM,CAAC,UAAU;AACrC,YAAQ;AAAA,MACN,kBACE,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK,CACtE;AAAA,IACF;AACA,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":["loadConfig","OnboardingService","AnalysisTasks","recoverAnalysisTasks","z","loadConfig","AnalysisTasks","recoverAnalysisTasks","OnboardingService","z","result"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhuixin/mcp",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "license": "Apache-2.0",
   "description": "AppTrace MCP server for evidence-backed application analysis",
   "repository": {
@@ -42,8 +42,8 @@
   "dependencies": {
     "@modelcontextprotocol/server": "^2.3.1",
     "zod": "^4.2.0",
-    "@zhuixin/metadata": "0.2.3",
-    "@zhuixin/shared": "0.2.3"
+    "@zhuixin/shared": "0.2.4",
+    "@zhuixin/metadata": "0.2.4"
   },
   "devDependencies": {
     "tsup": "^8.5.0"