autoremediator 0.21.2 → 0.22.0

package/dist/mcp/resources.d.ts

@@ -0,0 +1,58 @@
+export interface ResourceContext {
+    /** The project whose runs are exposed (the client's first root, or the server's directory). */
+    projectDir: string;
+}
+export declare const RESOURCE_TEMPLATES: readonly [{
+    readonly uriTemplate: "autoremediator://runs/{runId}";
+    readonly name: "run";
+    readonly title: "Run";
+    readonly description: "A run: its record, plan, item outcomes, attempts and ledger check.";
+    readonly mimeType: "application/json";
+}, {
+    readonly uriTemplate: "autoremediator://runs/{runId}/plan";
+    readonly name: "run-plan";
+    readonly title: "Run plan";
+    readonly description: "The plan a run was made from: changes to make and findings it cannot act on.";
+    readonly mimeType: "application/json";
+}, {
+    readonly uriTemplate: "autoremediator://runs/{runId}/steps";
+    readonly name: "run-steps";
+    readonly title: "Run ledger";
+    readonly description: "The run's hash-chained step ledger.";
+    readonly mimeType: "application/json";
+}, {
+    readonly uriTemplate: "autoremediator://runs/{runId}/attempts/{attemptId}/diff";
+    readonly name: "attempt-diff";
+    readonly title: "Attempt patch";
+    readonly description: "The patch an attempt produced.";
+    readonly mimeType: "text/x-diff";
+}, {
+    readonly uriTemplate: "autoremediator://runs/{runId}/attempts/{attemptId}/verification";
+    readonly name: "attempt-verification";
+    readonly title: "Attempt verification";
+    readonly description: "What the verifier made of an attempt.";
+    readonly mimeType: "application/json";
+}, {
+    readonly uriTemplate: "autoremediator://runs/{runId}/attempts/{attemptId}/transcript";
+    readonly name: "attempt-transcript";
+    readonly title: "Attempt transcript";
+    readonly description: "What the agent said and did during an attempt.";
+    readonly mimeType: "application/jsonl";
+}];
+export declare function listResources(context: ResourceContext): {
+    resources: {
+        uri: string;
+        name: string;
+        title: string;
+        description: string;
+        mimeType: string;
+    }[];
+};
+export declare function readResource(uri: string, context: ResourceContext): {
+    contents: {
+        uri: string;
+        mimeType: string;
+        text: string;
+    }[];
+};
+//# sourceMappingURL=resources.d.ts.map

package/dist/mcp/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../src/mcp/resources.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,eAAe;IAC9B,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,eAAO,MAAM,kBAAkB;aAE3B,WAAW,EAAE,+BAA+B;aAC5C,IAAI,EAAE,KAAK;aACX,KAAK,EAAE,KAAK;aACZ,WAAW,EAAE,oEAAoE;aACjF,QAAQ,EAAE,kBAAkB;;aAG5B,WAAW,EAAE,oCAAoC;aACjD,IAAI,EAAE,UAAU;aAChB,KAAK,EAAE,UAAU;aACjB,WAAW,EAAE,8EAA8E;aAC3F,QAAQ,EAAE,kBAAkB;;aAG5B,WAAW,EAAE,qCAAqC;aAClD,IAAI,EAAE,WAAW;aACjB,KAAK,EAAE,YAAY;aACnB,WAAW,EAAE,qCAAqC;aAClD,QAAQ,EAAE,kBAAkB;;aAG5B,WAAW,EAAE,yDAAyD;aACtE,IAAI,EAAE,cAAc;aACpB,KAAK,EAAE,eAAe;aACtB,WAAW,EAAE,gCAAgC;aAC7C,QAAQ,EAAE,aAAa;;aAGvB,WAAW,EAAE,iEAAiE;aAC9E,IAAI,EAAE,sBAAsB;aAC5B,KAAK,EAAE,sBAAsB;aAC7B,WAAW,EAAE,uCAAuC;aACpD,QAAQ,EAAE,kBAAkB;;aAG5B,WAAW,EAAE,+DAA+D;aAC5E,IAAI,EAAE,oBAAoB;aAC1B,KAAK,EAAE,oBAAoB;aAC3B,WAAW,EAAE,gDAAgD;aAC7D,QAAQ,EAAE,mBAAmB;EAEvB,CAAC;AAEX,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe;;;;;;;;EAmCrD;AASD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe;;;;;;EAiDjE"}

package/dist/mcp/resources.js

@@ -0,0 +1,131 @@
+/**
+ * MCP resources: a host can read a run, its plan, its ledger and an attempt's patch and
+ * verification as documents, without a tool call. Everything is read-only and addressed by ids
+ * that are validated before they reach the filesystem.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { getRun, listRuns, memoryForHost, readAttemptArtifact } from "../api/index.js";
+const RUN = "run_[0-9a-z]{20}";
+const ATTEMPT = "attempt_[0-9a-z]{12}";
+const MAX_LISTED_RUNS = 20;
+export const RESOURCE_TEMPLATES = [
+    {
+        uriTemplate: "autoremediator://runs/{runId}",
+        name: "run",
+        title: "Run",
+        description: "A run: its record, plan, item outcomes, attempts and ledger check.",
+        mimeType: "application/json",
+    },
+    {
+        uriTemplate: "autoremediator://runs/{runId}/plan",
+        name: "run-plan",
+        title: "Run plan",
+        description: "The plan a run was made from: changes to make and findings it cannot act on.",
+        mimeType: "application/json",
+    },
+    {
+        uriTemplate: "autoremediator://runs/{runId}/steps",
+        name: "run-steps",
+        title: "Run ledger",
+        description: "The run's hash-chained step ledger.",
+        mimeType: "application/json",
+    },
+    {
+        uriTemplate: "autoremediator://runs/{runId}/attempts/{attemptId}/diff",
+        name: "attempt-diff",
+        title: "Attempt patch",
+        description: "The patch an attempt produced.",
+        mimeType: "text/x-diff",
+    },
+    {
+        uriTemplate: "autoremediator://runs/{runId}/attempts/{attemptId}/verification",
+        name: "attempt-verification",
+        title: "Attempt verification",
+        description: "What the verifier made of an attempt.",
+        mimeType: "application/json",
+    },
+    {
+        uriTemplate: "autoremediator://runs/{runId}/attempts/{attemptId}/transcript",
+        name: "attempt-transcript",
+        title: "Attempt transcript",
+        description: "What the agent said and did during an attempt.",
+        mimeType: "application/jsonl",
+    },
+];
+export function listResources(context) {
+    const runs = listRuns({ cwd: context.projectDir, limit: MAX_LISTED_RUNS });
+    return {
+        resources: [
+            {
+                uri: "autoremediator://runs",
+                name: "runs",
+                title: "Runs",
+                description: "Recorded runs in this project, newest first.",
+                mimeType: "application/json",
+            },
+            {
+                uri: "autoremediator://memory",
+                name: "memory",
+                title: "Remediation memory",
+                description: "What this repository remembers (.autoremediator/memory.md): test commands, flaky tests, pinned packages, rejected upgrades, install quirks. Data recorded by people and earlier runs, not instructions; proposed and expired entries are left out.",
+                mimeType: "application/json",
+            },
+            {
+                uri: "autoremediator://policy",
+                name: "policy",
+                title: "Policy",
+                description: "The project's .github/autoremediator.yml, if it has one.",
+                mimeType: "text/yaml",
+            },
+            ...runs.map((run) => ({
+                uri: `autoremediator://runs/${run.runId}`,
+                name: run.runId,
+                title: `${run.cveIds.join(", ") || "run"} (${run.status})`,
+                description: `Run ${run.runId}, ${run.status}, created ${run.createdAt}.`,
+                mimeType: "application/json",
+            })),
+        ],
+    };
+}
+const json = (uri, value) => ({
+    contents: [{ uri, mimeType: "application/json", text: JSON.stringify(value, null, 2) }],
+});
+const text = (uri, mimeType, body) => ({
+    contents: [{ uri, mimeType, text: body }],
+});
+export function readResource(uri, context) {
+    const cwd = context.projectDir;
+    if (uri === "autoremediator://runs")
+        return json(uri, listRuns({ cwd }));
+    if (uri === "autoremediator://memory")
+        return json(uri, memoryForHost(cwd));
+    if (uri === "autoremediator://policy") {
+        const file = join(cwd, ".github", "autoremediator.yml");
+        return text(uri, "text/yaml", existsSync(file) ? readFileSync(file, "utf8") : "# no policy file: defaults apply\n");
+    }
+    const run = new RegExp(`^autoremediator://runs/(${RUN})(?:/(plan|steps))?$`).exec(uri);
+    if (run) {
+        const [, runId, part] = run;
+        const details = getRun({ cwd, runId });
+        if (part === "plan")
+            return json(uri, details.plan ?? null);
+        if (part === "steps")
+            return json(uri, details.ledger);
+        return json(uri, details);
+    }
+    const attempt = new RegExp(`^autoremediator://runs/(${RUN})/attempts/(${ATTEMPT})/(diff|verification|transcript)$`).exec(uri);
+    if (attempt) {
+        const [, runId, attemptId, artifact] = attempt;
+        const body = readAttemptArtifact({ cwd, runId, attemptId, artifact });
+        if (body === undefined)
+            throw new Error(`Attempt ${attemptId} has no ${artifact}.`);
+        return text(uri, artifact === "diff"
+            ? "text/x-diff"
+            : artifact === "transcript"
+                ? "application/jsonl"
+                : "application/json", body);
+    }
+    throw new Error(`Unknown resource: ${uri}`);
+}
+//# sourceMappingURL=resources.js.map

package/dist/mcp/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../src/mcp/resources.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAOvF,MAAM,GAAG,GAAG,kBAAkB,CAAC;AAC/B,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;QACE,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,oEAAoE;QACjF,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,8EAA8E;QAC3F,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,WAAW,EAAE,qCAAqC;QAClD,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,aAAa;KACxB;IACD;QACE,WAAW,EAAE,iEAAiE;QAC9E,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,mBAAmB;KAC9B;CACO,CAAC;AAEX,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3E,OAAO;QACL,SAAS,EAAE;YACT;gBACE,GAAG,EAAE,uBAAuB;gBAC5B,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,MAAM;gBACb,WAAW,EAAE,8CAA8C;gBAC3D,QAAQ,EAAE,kBAAkB;aAC7B;YACD;gBACE,GAAG,EAAE,yBAAyB;gBAC9B,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EACT,oPAAoP;gBACtP,QAAQ,EAAE,kBAAkB;aAC7B;YACD;gBACE,GAAG,EAAE,yBAAyB;gBAC9B,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,0DAA0D;gBACvE,QAAQ,EAAE,WAAW;aACtB;YACD,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,EAAE,yBAAyB,GAAG,CAAC,KAAK,EAAE;gBACzC,IAAI,EAAE,GAAG,CAAC,KAAK;gBACf,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC,MAAM,GAAG;gBAC1D,WAAW,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,GAAG;gBACzE,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAC;SACJ;KACF,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC;IAC7C,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;CACxF,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC;IAC7D,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,OAAwB;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC;IAE/B,IAAI,GAAG,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAEzE,IAAI,GAAG,KAAK,yBAAyB;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5E,IAAI,GAAG,KAAK,yBAAyB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACxD,OAAO,IAAI,CACT,GAAG,EACH,WAAW,EACX,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,oCAAoC,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,2BAA2B,GAAG,sBAAsB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvF,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,GAAsD,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,2BAA2B,GAAG,eAAe,OAAO,mCAAmC,CACxF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,OAKtC,CAAC;QACF,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,WAAW,QAAQ,GAAG,CAAC,CAAC;QACpF,OAAO,IAAI,CACT,GAAG,EACH,QAAQ,KAAK,MAAM;YACjB,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,QAAQ,KAAK,YAAY;gBACzB,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,kBAAkB,EACxB,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;AAC9C,CAAC"}

package/dist/mcp/server.d.ts

@@ -1,354 +1,23 @@
 #!/usr/bin/env node
-/**
- * autoremediator MCP server
- *
- * Exposes all autoremediator tools via the Model Context Protocol so LLM hosts
- * and compatible agent hosts can invoke them directly.
- *
- * Start: autoremediator-mcp   (stdio transport)
- */
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { checkReachability, evaluatePackage, inspectPatchArtifact, listPatchArtifacts, planRemediation, pollJob, remediate, remediatePortfolio, remediateFromScan, scanDelta, submitPortfolioJob, submitRemediateJob, submitScanJob, toCycloneDxVex, updateOutdated, validatePatchArtifact } from "../api/index.js";
-interface McpApiDeps {
-    remediateFn: typeof remediate;
-    planRemediationFn: typeof planRemediation;
-    remediateFromScanFn: typeof remediateFromScan;
-    remediatePortfolioFn: typeof remediatePortfolio;
-    updateOutdatedFn: typeof updateOutdated;
-    checkReachabilityFn: typeof checkReachability;
-    evaluatePackageFn: typeof evaluatePackage;
-    scanDeltaFn: typeof scanDelta;
-    healthFn: () => Promise<{
-        status: "ok";
-    }>;
-    listPatchArtifactsFn: typeof listPatchArtifacts;
-    inspectPatchArtifactFn: typeof inspectPatchArtifact;
-    validatePatchArtifactFn: typeof validatePatchArtifact;
-    toVexFn: typeof toCycloneDxVex;
-    submitRemediateJobFn: typeof submitRemediateJob;
-    submitScanJobFn: typeof submitScanJob;
-    submitPortfolioJobFn: typeof submitPortfolioJob;
-    pollJobFn: typeof pollJob;
+import { type ApiDeps, type CallOptions, type McpToolResult } from "../catalog/index.js";
+/** The SDK functions the tools call; replaceable in tests. */
+export type McpApiDeps = ApiDeps;
+/** Tool definitions, generated from the operation catalog. */
+export declare const TOOLS: import("../catalog/index.js").McpTool[];
+export declare function handleToolCall(name: string, args?: Record<string, unknown>, deps?: McpApiDeps, options?: CallOptions): Promise<McpToolResult>;
+export interface McpServerOptions {
+    /** The SDK functions the tools call (default: the real ones). */
+    deps?: ApiDeps;
+    /**
+     * `mutating`: before a tool that changes the project runs, ask the user to confirm through the
+     * client (MCP elicitation). A client that cannot ask is refused rather than trusted, so only set
+     * this for clients that support it. Default: `AUTOREMEDIATOR_MCP_CONFIRM`, else `off` (hosts
+     * already ask about tools annotated as destructive).
+     */
+    confirm?: "off" | "mutating";
+    /** The project whose runs resources expose (default: the client's first root, else the working directory). */
+    projectDir?: string;
 }
-export declare const TOOLS: ({
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            cveId: {
-                type: string;
-                description: "CVE ID, e.g. CVE-2021-23337";
-            };
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId?: undefined;
-            cwd?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            packageManager?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            inputPath: {
-                type: string;
-                description: "Absolute path to the scanner output file";
-            };
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId?: undefined;
-            cwd?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            packageManager?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            targets: {
-                type: string;
-                items: {
-                    type: string;
-                    required: string[];
-                    properties: {
-                        cwd: {
-                            type: string;
-                            description: "Absolute path to the project root (default: process.cwd())";
-                        };
-                        label: {
-                            type: string;
-                        };
-                        cveId: {
-                            type: string;
-                            description: "CVE ID, e.g. CVE-2021-23337";
-                        };
-                        inputPath: {
-                            type: string;
-                            description: "Absolute path to the scanner output file";
-                        };
-                        format: {
-                            type: string;
-                            enum: string[];
-                        };
-                        audit: {
-                            type: string;
-                            description: "Run package-manager-native audit command instead of reading a scan file";
-                        };
-                    };
-                };
-            };
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId?: undefined;
-            cwd?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            packageManager?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        properties: {
-            cwd: {
-                readonly type: "string";
-                readonly description: "Absolute path to the project root (default: process.cwd())";
-            };
-            patchesDir: {
-                readonly type: "string";
-                readonly description: "Directory to write .patch files (default: ./patches)";
-            };
-            packageManager: {
-                readonly type: "string";
-                readonly enum: readonly ["npm", "pnpm", "yarn", "bun", "deno"];
-                readonly description: "Package manager override (auto-detected by default)";
-            };
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            enrichIntelligence?: undefined;
-        };
-        required?: undefined;
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            cwd: {
-                readonly type: "string";
-                readonly description: "Absolute path to the project root (default: process.cwd())";
-            };
-            patchesDir: {
-                readonly type: "string";
-                readonly description: "Directory to write .patch files (default: ./patches)";
-            };
-            packageManager: {
-                readonly type: "string";
-                readonly enum: readonly ["npm", "pnpm", "yarn", "bun", "deno"];
-                readonly description: "Package manager override (auto-detected by default)";
-            };
-            patchFilePath: {
-                type: string;
-                description: string;
-            };
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        properties: Record<string, import("../api/options-schema.js").JsonSchemaProperty>;
-        required?: undefined;
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            report: {
-                type: string;
-                description: string;
-            };
-            toolVersion: {
-                type: string;
-                description: string;
-            };
-            jobId?: undefined;
-            cwd?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            packageManager?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            report?: undefined;
-            toolVersion?: undefined;
-            targets: {
-                type: string;
-                items: {
-                    type: string;
-                    required: string[];
-                    properties: {
-                        format?: undefined;
-                        audit?: undefined;
-                        cwd: {
-                            type: string;
-                            description: "Absolute path to the project root (default: process.cwd())";
-                        };
-                        label: {
-                            type: string;
-                        };
-                        cveId: {
-                            type: string;
-                            description: "CVE ID, e.g. CVE-2021-23337";
-                        };
-                        inputPath: {
-                            type: string;
-                            description: "Absolute path to the scanner output file";
-                        };
-                    };
-                };
-            };
-            jobId?: undefined;
-            cwd?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            packageManager?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId: {
-                type: string;
-                description: string;
-            };
-            cwd?: undefined;
-            symbol?: undefined;
-            packageName?: undefined;
-            version?: undefined;
-            packageManager?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId?: undefined;
-            packageName: {
-                type: string;
-                description: string;
-            };
-            cwd: {
-                type: string;
-                description: "Absolute path to the project root (default: process.cwd())";
-            };
-            symbol: {
-                type: string;
-                description: string;
-            };
-            version?: undefined;
-            packageManager?: undefined;
-            enrichIntelligence?: undefined;
-        };
-    };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        required: string[];
-        properties: {
-            report?: undefined;
-            toolVersion?: undefined;
-            jobId?: undefined;
-            cwd?: undefined;
-            symbol?: undefined;
-            packageName: {
-                type: string;
-                description: string;
-            };
-            version: {
-                type: string;
-                description: string;
-            };
-            packageManager: {
-                type: string;
-                enum: string[];
-                description: "Package manager override (auto-detected by default)";
-            };
-            enrichIntelligence: {
-                type: string;
-                description: string;
-            };
-        };
-    };
-})[];
-export declare function handleToolCall(name: string, args?: Record<string, unknown>, deps?: McpApiDeps): Promise<{
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-    isError?: boolean;
-}>;
-export declare function createMcpServer(): Server;
-export {};
+export declare function createMcpServer(options?: McpServerOptions): Server;
 //# sourceMappingURL=server.d.ts.map

package/dist/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAKnE,OAAO,EACL,iBAAiB,EAIjB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAElB,eAAe,EACf,OAAO,EACP,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,cAAc,EACd,qBAAqB,EACtB,MAAM,iBAAiB,CAAC;AAczB,UAAU,UAAU;IAClB,WAAW,EAAE,OAAO,SAAS,CAAC;IAC9B,iBAAiB,EAAE,OAAO,eAAe,CAAC;IAC1C,mBAAmB,EAAE,OAAO,iBAAiB,CAAC;IAC9C,oBAAoB,EAAE,OAAO,kBAAkB,CAAC;IAChD,gBAAgB,EAAE,OAAO,cAAc,CAAC;IACxC,mBAAmB,EAAE,OAAO,iBAAiB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,eAAe,CAAC;IAC1C,WAAW,EAAE,OAAO,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;QAAE,MAAM,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC1C,oBAAoB,EAAE,OAAO,kBAAkB,CAAC;IAChD,sBAAsB,EAAE,OAAO,oBAAoB,CAAC;IACpD,uBAAuB,EAAE,OAAO,qBAAqB,CAAC;IACtD,OAAO,EAAE,OAAO,cAAc,CAAC;IAC/B,oBAAoB,EAAE,OAAO,kBAAkB,CAAC;IAChD,eAAe,EAAE,OAAO,aAAa,CAAC;IACtC,oBAAoB,EAAE,OAAO,kBAAkB,CAAC;IAChD,SAAS,EAAE,OAAO,OAAO,CAAC;CAC3B;AAiCD,eAAO,MAAM,KAAK;;;;;;;;gBAkBD,IAAI;gBAAY,WAAW;;;;;;;;;;;;;;;;;;;;;gBA8BvB,IAAI;gBAAY,WAAW;;;;;;;;;;;;;;;;;;;;;gBActC,IAAI;gBACJ,KAAK;oBACH,IAAI;oBACJ,QAAQ;oBACR,UAAU;wBACR,GAAG;4BAAI,IAAI;4BAAY,WAAW;;wBAClC,KAAK;4BAAI,IAAI;;wBACb,KAAK;4BAAI,IAAI;4BAAY,WAAW;;wBACpC,SAAS;4BAAI,IAAI;4BAAY,WAAW;;wBACxC,MAAM;4BAAI,IAAI;4BAAY,IAAI;;wBAC9B,KAAK;4BAAI,IAAI;4BAAa,WAAW;;;;;;;;;;;;;;;;;;;;;;;yBApI1C,IAAI,EAAE,QAAQ;yBAAE,WAAW;;;yBACpB,IAAI,EAAE,QAAQ;yBAAE,WAAW;;;yBAEvC,IAAI,EAAE,QAAQ;yBACd,IAAI,YAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;yBAC3C,WAAW;;;;;;;;;;;;;;;;;;;;yBALN,IAAI,EAAE,QAAQ;yBAAE,WAAW;;;yBACpB,IAAI,EAAE,QAAQ;yBAAE,WAAW;;;yBAEvC,IAAI,EAAE,QAAQ;yBACd,IAAI,YAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;yBAC3C,WAAW;;;gBAyJU,IAAI;gBAAY,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAoC1C,IAAI;gBACJ,WAAW;;;gBAIX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BA6CA,IAAI;4BAAY,WAAW;;;4BACzB,IAAI;;;4BACJ,IAAI;4BAAY,WAAW;;;4BACvB,IAAI;4BAAY,WAAW;;;;;;;;;;;;;;;;;;;;;;;;gBAiB5C,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;gBAeX,IAAI;gBACJ,WAAW;;;gBAEN,IAAI;gBAAY,WAAW;;;gBAEhC,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;gBAcE,IAAI;gBAAY,WAAW;;;gBAC/B,IAAI;gBAAY,WAAW;;;gBAEpC,IAAI;gBACJ,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;;IA0BpB,CAAC;AASF,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,IAAI,GAAE,UAAwB,GAC7B,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAmKhF;AAED,wBAAgB,eAAe,IAAI,MAAM,CAWxC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AAYA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAYnE,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,WAAW,EAGhB,KAAK,aAAa,EAGnB,MAAM,qBAAqB,CAAC;AAM7B,8DAA8D;AAC9D,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC;AAEjC,8DAA8D;AAC9D,eAAO,MAAM,KAAK,yCAAe,CAAC;AAElC,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,IAAI,GAAE,UAA2B,EACjC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,aAAa,CAAC,CAExB;AAmBD,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC;IAC7B,8GAA8G;IAC9G,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA+BD,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,MAAM,CA6CtE"}