code-sentinel-mcp 0.1.0

package/build/index.js

@@ -0,0 +1,366 @@
+#!/usr/bin/env node
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { analyzeSecurityIssues } from './analyzers/security.js';
+import { analyzeDeceptivePatterns } from './analyzers/deceptive.js';
+import { analyzePlaceholders } from './analyzers/placeholders.js';
+import { analyzeErrors } from './analyzers/errors.js';
+import { analyzeStrengths } from './analyzers/strengths.js';
+import { analyzePatterns, inferLevelFromQuery } from './analyzers/patterns.js';
+import { analyzeDesignPatterns, formatDesignAnalysis } from './analyzers/patterns.js';
+import { generateHtmlReport } from './report.js';
+// Detect language from filename
+function detectLanguage(filename) {
+    const ext = filename.split('.').pop()?.toLowerCase() || '';
+    const langMap = {
+        'ts': 'TypeScript',
+        'tsx': 'TypeScript React',
+        'js': 'JavaScript',
+        'jsx': 'JavaScript React',
+        'py': 'Python',
+        'rb': 'Ruby',
+        'go': 'Go',
+        'rs': 'Rust',
+        'java': 'Java',
+        'kt': 'Kotlin',
+        'swift': 'Swift',
+        'cs': 'C#',
+        'cpp': 'C++',
+        'c': 'C',
+        'php': 'PHP',
+        'vue': 'Vue',
+        'svelte': 'Svelte'
+    };
+    return langMap[ext] || 'Unknown';
+}
+// Main analysis function
+function analyzeCode(code, filename) {
+    const language = detectLanguage(filename);
+    // Run all analyzers
+    const securityIssues = analyzeSecurityIssues(code, filename);
+    const deceptiveIssues = analyzeDeceptivePatterns(code, filename);
+    const placeholderIssues = analyzePlaceholders(code, filename);
+    const errorIssues = analyzeErrors(code, filename);
+    const strengths = analyzeStrengths(code, filename);
+    // Combine all issues
+    const allIssues = [
+        ...securityIssues,
+        ...deceptiveIssues,
+        ...placeholderIssues,
+        ...errorIssues
+    ];
+    // Sort by severity
+    const severityOrder = {
+        critical: 0,
+        high: 1,
+        medium: 2,
+        low: 3,
+        info: 4
+    };
+    allIssues.sort((a, b) => severityOrder[a.severity] - severityOrder[b.severity]);
+    // Calculate summary
+    const summary = {
+        totalIssues: allIssues.length,
+        critical: allIssues.filter(i => i.severity === 'critical').length,
+        high: allIssues.filter(i => i.severity === 'high').length,
+        medium: allIssues.filter(i => i.severity === 'medium').length,
+        low: allIssues.filter(i => i.severity === 'low').length,
+        strengths: strengths.length
+    };
+    return {
+        filename,
+        language,
+        timestamp: new Date().toISOString(),
+        summary,
+        issues: allIssues,
+        strengths
+    };
+}
+// Create the MCP server
+const server = new Server({
+    name: "code-sentinel",
+    version: "0.1.0",
+}, {
+    capabilities: {
+        tools: {},
+    },
+});
+// List available tools
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+    return {
+        tools: [
+            {
+                name: "analyze_code",
+                description: "Analyze code for security issues, errors, deceptive patterns, and placeholders. Returns a structured analysis with issues and strengths.",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        code: {
+                            type: "string",
+                            description: "The source code to analyze"
+                        },
+                        filename: {
+                            type: "string",
+                            description: "The filename (used to detect language). Example: 'app.ts'"
+                        }
+                    },
+                    required: ["code", "filename"]
+                }
+            },
+            {
+                name: "generate_report",
+                description: "Analyze code and generate a detailed HTML report with visual indicators for issues and strengths.",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        code: {
+                            type: "string",
+                            description: "The source code to analyze"
+                        },
+                        filename: {
+                            type: "string",
+                            description: "The filename (used to detect language). Example: 'app.ts'"
+                        }
+                    },
+                    required: ["code", "filename"]
+                }
+            },
+            {
+                name: "check_security",
+                description: "Check code for security vulnerabilities only (hardcoded secrets, SQL injection, XSS, etc.)",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        code: {
+                            type: "string",
+                            description: "The source code to check"
+                        },
+                        filename: {
+                            type: "string",
+                            description: "The filename"
+                        }
+                    },
+                    required: ["code", "filename"]
+                }
+            },
+            {
+                name: "check_deceptive_patterns",
+                description: "Check for code patterns that hide errors or create false confidence (empty catches, silent failures, etc.)",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        code: {
+                            type: "string",
+                            description: "The source code to check"
+                        },
+                        filename: {
+                            type: "string",
+                            description: "The filename"
+                        }
+                    },
+                    required: ["code", "filename"]
+                }
+            },
+            {
+                name: "check_placeholders",
+                description: "Check for placeholder code, dummy data, TODO/FIXME comments, and incomplete implementations",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        code: {
+                            type: "string",
+                            description: "The source code to check"
+                        },
+                        filename: {
+                            type: "string",
+                            description: "The filename"
+                        }
+                    },
+                    required: ["code", "filename"]
+                }
+            }
+        ]
+    };
+});
+// Handle tool calls
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    if (!args || typeof args.code !== 'string' || typeof args.filename !== 'string') {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: "Error: 'code' and 'filename' are required string parameters"
+                }
+            ]
+        };
+    }
+    const { code, filename } = args;
+    try {
+        switch (name) {
+            case "analyze_code": {
+                const result = analyzeCode(code, filename);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify(result, null, 2)
+                        }
+                    ]
+                };
+            }
+            case "generate_report": {
+                const result = analyzeCode(code, filename);
+                const html = generateHtmlReport(result);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `## Analysis Summary for ${filename}\n\n` +
+                                `**Score:** ${Math.max(0, 100 - (result.summary.critical * 25 + result.summary.high * 15 + result.summary.medium * 5 + result.summary.low))}%\n\n` +
+                                `- 🔴 Critical: ${result.summary.critical}\n` +
+                                `- 🟠 High: ${result.summary.high}\n` +
+                                `- 🟡 Medium: ${result.summary.medium}\n` +
+                                `- 🔵 Low: ${result.summary.low}\n` +
+                                `- 💪 Strengths: ${result.summary.strengths}\n\n` +
+                                `---\n\n` +
+                                `\`\`\`html\n${html}\n\`\`\``
+                        }
+                    ]
+                };
+            }
+            case "check_security": {
+                const issues = analyzeSecurityIssues(code, filename);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: issues.length === 0
+                                ? "✅ No security issues detected."
+                                : `Found ${issues.length} security issue(s):\n\n${JSON.stringify(issues, null, 2)}`
+                        }
+                    ]
+                };
+            }
+            case "check_deceptive_patterns": {
+                const issues = analyzeDeceptivePatterns(code, filename);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: issues.length === 0
+                                ? "✅ No deceptive patterns detected."
+                                : `Found ${issues.length} deceptive pattern(s):\n\n${JSON.stringify(issues, null, 2)}`
+                        }
+                    ]
+                };
+            }
+            case "check_placeholders": {
+                const issues = analyzePlaceholders(code, filename);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: issues.length === 0
+                                ? "✅ No placeholders or incomplete code detected."
+                                : `Found ${issues.length} placeholder(s):\n\n${JSON.stringify(issues, null, 2)}`
+                        }
+                    ]
+                };
+            }
+            case "analyze_patterns": {
+                // Determine level from explicit param or infer from query
+                let level = 'all';
+                if (args.level && ['architectural', 'design', 'code', 'all'].includes(args.level)) {
+                    level = args.level;
+                }
+                else if (args.query && typeof args.query === 'string') {
+                    const inferred = inferLevelFromQuery(args.query);
+                    if (inferred)
+                        level = inferred;
+                }
+                const patternResult = analyzePatterns(code, filename, level);
+                // Format output optimized for LLM action
+                const output = {
+                    // Summary for quick understanding
+                    summary: patternResult.summary,
+                    // What patterns were detected
+                    detectedPatterns: patternResult.detectedPatterns.map(p => ({
+                        pattern: p.name,
+                        level: p.level,
+                        confidence: p.confidence,
+                        description: p.description,
+                        foundAt: p.locations.map(l => `Line ${l.line}`)
+                    })),
+                    // Inconsistencies that should be fixed
+                    inconsistencies: patternResult.inconsistencies.map(i => ({
+                        issue: i.title,
+                        severity: i.severity,
+                        variants: i.variants.map(v => `${v.approach}: ${v.count} occurrences`),
+                        recommendation: i.recommendation
+                    })),
+                    // Suggestions for improvement
+                    suggestions: patternResult.suggestions.map(s => ({
+                        title: s.title,
+                        priority: s.priority,
+                        currentApproach: s.currentApproach.name,
+                        suggestedPattern: s.suggestedApproach.name,
+                        why: s.suggestedApproach.why,
+                        benefits: s.suggestedApproach.benefits,
+                        tradeoffs: s.suggestedApproach.tradeoffs,
+                        example: s.suggestedApproach.example
+                    })),
+                    // Ready-to-execute action items for LLM
+                    actionItems: patternResult.actionItems
+                };
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify(output, null, 2)
+                        }
+                    ]
+                };
+            }
+            case "analyze_design_patterns": {
+                const result = analyzeDesignPatterns(code, filename);
+                const formatted = formatDesignAnalysis(result);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: formatted
+                        }
+                    ]
+                };
+            }
+            default:
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `Unknown tool: ${name}`
+                        }
+                    ]
+                };
+        }
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Error analyzing code: ${error instanceof Error ? error.message : String(error)}`
+                }
+            ]
+        };
+    }
+});
+// Start the server
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("CodeSentinel MCP Server running on stdio");
+}
+main().catch(console.error);

package/build/report.d.ts

@@ -0,0 +1,2 @@
+import { AnalysisResult } from './types.js';
+export declare function generateHtmlReport(result: AnalysisResult): string;

package/build/report.js

@@ -0,0 +1,228 @@
+const severityColors = {
+    critical: '#dc2626',
+    high: '#ea580c',
+    medium: '#ca8a04',
+    low: '#2563eb',
+    info: '#6b7280'
+};
+const severityBg = {
+    critical: '#fef2f2',
+    high: '#fff7ed',
+    medium: '#fefce8',
+    low: '#eff6ff',
+    info: '#f9fafb'
+};
+function escapeHtml(text) {
+    return text
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#039;');
+}
+function renderIssue(issue) {
+    return `
+    <div class="issue" style="background: ${severityBg[issue.severity]}; border-left: 4px solid ${severityColors[issue.severity]}; padding: 16px; margin: 12px 0; border-radius: 8px;">
+      <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 8px;">
+        <span class="badge" style="background: ${severityColors[issue.severity]}; color: white; padding: 4px 12px; border-radius: 4px; font-size: 12px; font-weight: 600; text-transform: uppercase;">
+          ${issue.severity}
+        </span>
+        <span style="color: #6b7280; font-size: 12px;">${issue.id}${issue.line ? ` • Line ${issue.line}` : ''}</span>
+      </div>
+      <h4 style="margin: 0 0 8px 0; color: #1f2937; font-size: 16px;">${escapeHtml(issue.title)}</h4>
+      <p style="margin: 0 0 8px 0; color: #4b5563; font-size: 14px;">${escapeHtml(issue.description)}</p>
+      ${issue.code ? `
+        <pre style="background: #1f2937; color: #e5e7eb; padding: 12px; border-radius: 6px; overflow-x: auto; font-size: 13px; margin: 8px 0;"><code>${escapeHtml(issue.code)}</code></pre>
+      ` : ''}
+      ${issue.suggestion ? `
+        <div style="background: #f0fdf4; border: 1px solid #86efac; padding: 12px; border-radius: 6px; margin-top: 8px;">
+          <strong style="color: #166534; font-size: 12px;">💡 Suggestion:</strong>
+          <p style="margin: 4px 0 0 0; color: #166534; font-size: 13px;">${escapeHtml(issue.suggestion)}</p>
+        </div>
+      ` : ''}
+    </div>
+  `;
+}
+function renderStrength(strength) {
+    return `
+    <div class="strength" style="background: #f0fdf4; border-left: 4px solid #22c55e; padding: 16px; margin: 12px 0; border-radius: 8px;">
+      <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 8px;">
+        <span class="badge" style="background: #22c55e; color: white; padding: 4px 12px; border-radius: 4px; font-size: 12px; font-weight: 600;">
+          ✓ GOOD PRACTICE
+        </span>
+        <span style="color: #6b7280; font-size: 12px;">${strength.id}</span>
+      </div>
+      <h4 style="margin: 0 0 8px 0; color: #166534; font-size: 16px;">${escapeHtml(strength.title)}</h4>
+      <p style="margin: 0; color: #15803d; font-size: 14px;">${escapeHtml(strength.description)}</p>
+      ${strength.examples && strength.examples.length > 0 ? `
+        <div style="margin-top: 8px;">
+          <span style="color: #166534; font-size: 12px; font-weight: 600;">Found ${strength.examples.length}+ instances</span>
+        </div>
+      ` : ''}
+    </div>
+  `;
+}
+function renderSummaryCard(label, count, color, bgColor) {
+    return `
+    <div style="background: ${bgColor}; border: 2px solid ${color}; border-radius: 12px; padding: 20px; text-align: center; min-width: 120px;">
+      <div style="font-size: 32px; font-weight: 700; color: ${color};">${count}</div>
+      <div style="font-size: 14px; color: ${color}; text-transform: uppercase; letter-spacing: 0.5px;">${label}</div>
+    </div>
+  `;
+}
+export function generateHtmlReport(result) {
+    const { summary, issues, strengths, filename, language, timestamp } = result;
+    // Group issues by category
+    const securityIssues = issues.filter(i => i.category === 'security');
+    const errorIssues = issues.filter(i => i.category === 'error');
+    const deceptiveIssues = issues.filter(i => i.category === 'deceptive');
+    const placeholderIssues = issues.filter(i => i.category === 'placeholder');
+    // Calculate score (0-100)
+    const maxPenalty = 100;
+    const penalty = summary.critical * 25 +
+        summary.high * 15 +
+        summary.medium * 5 +
+        summary.low * 1;
+    const score = Math.max(0, Math.min(100, maxPenalty - penalty + (summary.strengths * 2)));
+    const scoreColor = score >= 80 ? '#22c55e' : score >= 60 ? '#ca8a04' : score >= 40 ? '#ea580c' : '#dc2626';
+    return `
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>CodeSentinel Report - ${escapeHtml(filename)}</title>
+  <style>
+    * { box-sizing: border-box; }
+    body { 
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+      line-height: 1.6;
+      color: #1f2937;
+      background: #f9fafb;
+      margin: 0;
+      padding: 20px;
+    }
+    .container { max-width: 1000px; margin: 0 auto; }
+    .header {
+      background: linear-gradient(135deg, #1e3a5f 0%, #2d5a87 100%);
+      color: white;
+      padding: 32px;
+      border-radius: 16px;
+      margin-bottom: 24px;
+    }
+    .score-circle {
+      width: 100px;
+      height: 100px;
+      border-radius: 50%;
+      background: white;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      font-size: 28px;
+      font-weight: 700;
+    }
+    .section {
+      background: white;
+      border-radius: 12px;
+      padding: 24px;
+      margin-bottom: 20px;
+      box-shadow: 0 1px 3px rgba(0,0,0,0.1);
+    }
+    .section h2 {
+      margin: 0 0 16px 0;
+      padding-bottom: 12px;
+      border-bottom: 2px solid #e5e7eb;
+      display: flex;
+      align-items: center;
+      gap: 8px;
+    }
+    .count-badge {
+      background: #e5e7eb;
+      color: #4b5563;
+      padding: 2px 10px;
+      border-radius: 12px;
+      font-size: 14px;
+    }
+    @media (max-width: 600px) {
+      .summary-grid { flex-direction: column; }
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <header class="header">
+      <div style="display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 20px;">
+        <div>
+          <h1 style="margin: 0 0 8px 0; font-size: 28px;">🛡️ CodeSentinel Report</h1>
+          <p style="margin: 0; opacity: 0.9; font-size: 14px;">
+            <strong>${escapeHtml(filename)}</strong> • ${language} • ${timestamp}
+          </p>
+        </div>
+        <div class="score-circle" style="color: ${scoreColor}">
+          ${score}
+        </div>
+      </div>
+    </header>
+
+    <div class="section">
+      <h2>📊 Summary</h2>
+      <div class="summary-grid" style="display: flex; gap: 16px; flex-wrap: wrap; justify-content: center;">
+        ${renderSummaryCard('Critical', summary.critical, severityColors.critical, severityBg.critical)}
+        ${renderSummaryCard('High', summary.high, severityColors.high, severityBg.high)}
+        ${renderSummaryCard('Medium', summary.medium, severityColors.medium, severityBg.medium)}
+        ${renderSummaryCard('Low', summary.low, severityColors.low, severityBg.low)}
+        ${renderSummaryCard('Strengths', summary.strengths, '#22c55e', '#f0fdf4')}
+      </div>
+    </div>
+
+    ${securityIssues.length > 0 ? `
+    <div class="section">
+      <h2>🔒 Security Issues <span class="count-badge">${securityIssues.length}</span></h2>
+      ${securityIssues.map(renderIssue).join('')}
+    </div>
+    ` : ''}
+
+    ${deceptiveIssues.length > 0 ? `
+    <div class="section">
+      <h2>🎭 Deceptive Patterns <span class="count-badge">${deceptiveIssues.length}</span></h2>
+      <p style="color: #6b7280; margin-top: 0;">Code that hides errors or creates false confidence</p>
+      ${deceptiveIssues.map(renderIssue).join('')}
+    </div>
+    ` : ''}
+
+    ${errorIssues.length > 0 ? `
+    <div class="section">
+      <h2>⚠️ Errors & Code Smells <span class="count-badge">${errorIssues.length}</span></h2>
+      ${errorIssues.map(renderIssue).join('')}
+    </div>
+    ` : ''}
+
+    ${placeholderIssues.length > 0 ? `
+    <div class="section">
+      <h2>📝 Placeholders & Incomplete Code <span class="count-badge">${placeholderIssues.length}</span></h2>
+      ${placeholderIssues.map(renderIssue).join('')}
+    </div>
+    ` : ''}
+
+    ${strengths.length > 0 ? `
+    <div class="section">
+      <h2>💪 Code Strengths <span class="count-badge">${strengths.length}</span></h2>
+      ${strengths.map(renderStrength).join('')}
+    </div>
+    ` : ''}
+
+    ${summary.totalIssues === 0 && strengths.length > 0 ? `
+    <div class="section" style="background: linear-gradient(135deg, #f0fdf4 0%, #dcfce7 100%); border: 2px solid #22c55e;">
+      <h2 style="color: #166534; border: none;">🎉 Excellent Code Quality!</h2>
+      <p style="color: #15803d; margin: 0;">No issues detected. This code demonstrates good practices.</p>
+    </div>
+    ` : ''}
+
+    <footer style="text-align: center; padding: 20px; color: #6b7280; font-size: 13px;">
+      Generated by CodeSentinel MCP Server • ${new Date().toISOString()}
+    </footer>
+  </div>
+</body>
+</html>
+  `.trim();
+}

package/build/types.d.ts

@@ -0,0 +1,54 @@
+export type Severity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+export type Category = 'security' | 'error' | 'deceptive' | 'placeholder' | 'strength';
+export type VerificationStatus = 'confirmed' | 'needs_verification';
+export interface Verification {
+    status: VerificationStatus;
+    commands?: string[];
+    assumption?: string;
+    instruction?: string;
+    confirmIf?: string;
+    falsePositiveIf?: string;
+}
+export interface Issue {
+    id: string;
+    category: Category;
+    severity: Severity;
+    title: string;
+    description: string;
+    line?: number;
+    column?: number;
+    code?: string;
+    suggestion?: string;
+    verification?: Verification;
+}
+export interface Strength {
+    id: string;
+    title: string;
+    description: string;
+    examples?: string[];
+}
+export interface AnalysisResult {
+    filename: string;
+    language: string;
+    timestamp: string;
+    summary: {
+        totalIssues: number;
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        strengths: number;
+    };
+    issues: Issue[];
+    strengths: Strength[];
+}
+export interface Pattern {
+    id: string;
+    pattern: RegExp;
+    title: string;
+    description: string;
+    severity: Severity;
+    category: Category;
+    suggestion?: string;
+    verification?: Verification;
+}

package/build/types.js

@@ -0,0 +1,2 @@
+// Types for CodeSentinel MCP Server
+export {};