codebase-analyzer-mcp 2.1.0 → 2.1.1

package/.claude-plugin/marketplace.json

@@ -6,13 +6,13 @@
   },
   "metadata": {
     "description": "Multi-layer codebase analysis tools",
-    "version": "2.1.0"
+    "version": "2.1.1"
   },
   "plugins": [
     {
       "name": "codebase-analyzer",
       "description": "Multi-layer codebase analysis with Gemini AI. 4 agents, 1 command, 1 skill for architecture analysis, pattern detection, and dataflow tracing.",
-      "version": "2.1.0",
+      "version": "2.1.1",
       "author": {
         "name": "Jake Correa",
         "url": "https://github.com/jaykaycodes"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codebase-analyzer",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Multi-layer codebase analysis with Gemini AI. 4 agents, 1 command, 1 skill for architecture analysis, pattern detection, and dataflow tracing.",
   "author": {
     "name": "Jake Correa",

package/dist/cli/index.js

@@ -42998,11 +42998,39 @@ var init_node = __esm(() => {
 });
 
 // src/core/gemini.ts
+import { readFileSync } from "fs";
+import { join as join2 } from "path";
+import { homedir } from "os";
+function resolveApiKey() {
+  if (process.env.GEMINI_API_KEY) {
+    return process.env.GEMINI_API_KEY;
+  }
+  try {
+    const configPath = join2(homedir(), ".config", "codebase-analyzer", "config.json");
+    const config = JSON.parse(readFileSync(configPath, "utf-8"));
+    if (config.geminiApiKey) {
+      return config.geminiApiKey;
+    }
+  } catch {}
+  return;
+}
+function hasGeminiKey() {
+  return !!resolveApiKey();
+}
 function getClient() {
   if (!client) {
-    const apiKey = process.env.GEMINI_API_KEY;
+    const apiKey = resolveApiKey();
     if (!apiKey) {
-      throw new Error("GEMINI_API_KEY environment variable is required. Get one at https://aistudio.google.com/apikey");
+      throw new Error(`GEMINI_API_KEY not found. Set it up using one of these methods:
+
+` + `Option 1: Config file (recommended for plugin installs):
+` + `  mkdir -p ~/.config/codebase-analyzer
+` + `  echo '{"geminiApiKey":"your_key"}' > ~/.config/codebase-analyzer/config.json
+
+` + `Option 2: MCP server env (for ~/.mcp.json installs):
+` + `  "env": { "GEMINI_API_KEY": "your_key" }
+
+` + "Get a free key at https://aistudio.google.com/apikey");
     }
     client = new GoogleGenAI({ apiKey });
   }
@@ -43104,6 +43132,21 @@ var init_gemini = __esm(() => {
 
 // src/core/layers/semantic.ts
 async function semanticAnalysis(surface, structural, options = {}) {
+  if (!hasGeminiKey()) {
+    throw new Error(`Semantic analysis (deep depth) requires GEMINI_API_KEY.
+
+` + `To set it up, add the env var to your MCP server config in ~/.mcp.json:
+
+` + `  "codebase-analyzer": {
+` + `    "command": "npx",
+` + `    "args": ["-y", "codebase-analyzer-mcp"],
+` + `    "env": { "GEMINI_API_KEY": "your_key" }
+` + `  }
+
+` + `Get a free key at https://aistudio.google.com/apikey
+
+` + "Use --depth surface or --depth standard for free analysis without an API key.");
+  }
   const repoName = surface.repositoryMap.name;
   const languages = surface.repositoryMap.languages.slice(0, 5).map((l) => `${l.language} (${l.percentage}%)`).join(", ");
   const fileCount = surface.repositoryMap.fileCount;
@@ -43881,7 +43924,7 @@ var init_logger = __esm(() => {
 });
 
 // src/core/orchestrator.ts
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 import { readFile as readFile2 } from "fs/promises";
 async function orchestrateAnalysis(repoPath, options = {}) {
   const startTime = Date.now();
@@ -43962,7 +44005,7 @@ async function orchestrateAnalysis(repoPath, options = {}) {
     });
     const allFiles = [];
     for (const module of modulesToAnalyze) {
-      const moduleDir = join2(repoPath, module.path);
+      const moduleDir = join3(repoPath, module.path);
     }
     structural = await analyzeModulesInParallel(repoPath, modulesToAnalyze, state);
     logger.stopSpinner(`Structural: ${structural.length} modules analyzed`);
@@ -44053,7 +44096,7 @@ async function analyzeModulesInParallel(repoPath, modules, state) {
     state.tasks.push(...batchTasks);
     const fileContents = new Map;
     await Promise.all(batch.map(async (module) => {
-      const modulePath = join2(repoPath, module.path);
+      const modulePath = join3(repoPath, module.path);
       try {
         const { glob: glob2 } = await Promise.resolve().then(() => (init_esm6(), exports_esm));
         const files = await glob2("**/*", {
@@ -44063,8 +44106,8 @@ async function analyzeModulesInParallel(repoPath, modules, state) {
           ignore: ["**/node_modules/**", "**/.git/**"]
         });
         for (const file of files.slice(0, 50)) {
-          const filePath = join2(module.path, file);
-          const fullPath = join2(repoPath, filePath);
+          const filePath = join3(module.path, file);
+          const fullPath = join3(repoPath, filePath);
           try {
             const content = await readFile2(fullPath, "utf-8");
             if (content.length < 1e5) {
@@ -44158,7 +44201,7 @@ var init_orchestrator = __esm(() => {
 
 // src/core/repo-loader.ts
 import { readFile as readFile3, stat as stat4 } from "node:fs/promises";
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 async function resolveSource(source) {
   if (await isGitHubUrl(source)) {
     const repoPath = await cloneGitHubRepo(source);
@@ -44185,7 +44228,7 @@ async function cloneGitHubRepo(url) {
   const { execSync } = await import("node:child_process");
   const { mkdtemp } = await import("node:fs/promises");
   const { tmpdir } = await import("node:os");
-  const tempDir = await mkdtemp(join3(tmpdir(), "cba-"));
+  const tempDir = await mkdtemp(join4(tmpdir(), "cba-"));
   const normalizedUrl = url.replace(/\.git$/, "").replace(/\/$/, "");
   try {
     execSync(`git clone --depth 1 ${normalizedUrl}.git ${tempDir}`, {
@@ -44208,7 +44251,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "codebase-analyzer-mcp",
-    version: "2.1.0",
+    version: "2.1.1",
     description: "Multi-layer codebase analysis with Gemini AI. MCP server + Claude plugin with progressive disclosure.",
     type: "module",
     main: "dist/mcp/server.js",
@@ -58152,9 +58195,24 @@ __export(exports_patterns, {
   executeFindPatterns: () => executeFindPatterns,
   DETECTABLE_PATTERNS: () => DETECTABLE_PATTERNS
 });
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 import { readFile as readFile4 } from "fs/promises";
 async function executeFindPatterns(input) {
+  if (!hasGeminiKey()) {
+    throw new Error(`find_patterns requires GEMINI_API_KEY for AI-powered pattern detection.
+
+` + `To set it up, add the env var to your MCP server config in ~/.mcp.json:
+
+` + `  "codebase-analyzer": {
+` + `    "command": "npx",
+` + `    "args": ["-y", "codebase-analyzer-mcp"],
+` + `    "env": { "GEMINI_API_KEY": "your_key" }
+` + `  }
+
+` + `Get a free key at https://aistudio.google.com/apikey
+
+` + "Alternatively, use analyze_repo (free, no API key needed) or query_repo (degrades gracefully without Gemini).");
+  }
   const { source, patternTypes } = input;
   const { repoPath, cleanup } = await resolveSource(source);
   try {
@@ -58166,7 +58224,7 @@ async function executeFindPatterns(input) {
       ignore: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/build/**"]
     });
     for (const file2 of keyFiles.slice(0, 50)) {
-      const fullPath = join4(repoPath, file2);
+      const fullPath = join5(repoPath, file2);
       try {
         const content = await readFile4(fullPath, "utf-8");
         if (content.length < 50000) {
@@ -58264,9 +58322,24 @@ __export(exports_dataflow, {
   traceDataflowSchema: () => traceDataflowSchema,
   executeTraceDataflow: () => executeTraceDataflow
 });
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import { readFile as readFile5 } from "fs/promises";
 async function executeTraceDataflow(input) {
+  if (!hasGeminiKey()) {
+    throw new Error(`trace_dataflow requires GEMINI_API_KEY for AI-powered dataflow analysis.
+
+` + `To set it up, add the env var to your MCP server config in ~/.mcp.json:
+
+` + `  "codebase-analyzer": {
+` + `    "command": "npx",
+` + `    "args": ["-y", "codebase-analyzer-mcp"],
+` + `    "env": { "GEMINI_API_KEY": "your_key" }
+` + `  }
+
+` + `Get a free key at https://aistudio.google.com/apikey
+
+` + "Alternatively, use query_repo which degrades gracefully without Gemini.");
+  }
   const { source, from, to } = input;
   const { repoPath, cleanup } = await resolveSource(source);
   try {
@@ -58278,7 +58351,7 @@ async function executeTraceDataflow(input) {
       ignore: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/build/**", "**/*.test.*", "**/*.spec.*"]
     });
     for (const file2 of codeFiles.slice(0, 60)) {
-      const fullPath = join5(repoPath, file2);
+      const fullPath = join6(repoPath, file2);
       try {
         const content = await readFile5(fullPath, "utf-8");
         if (content.length < 50000) {
@@ -58377,7 +58450,7 @@ __export(exports_query, {
   queryRepoSchema: () => queryRepoSchema,
   executeQueryRepo: () => executeQueryRepo
 });
-import { basename as basename4, join as join6 } from "path";
+import { basename as basename4, join as join7 } from "path";
 import { readFile as readFile6 } from "fs/promises";
 function extractSourceName(source) {
   const githubMatch = source.match(/github\.com\/([^\/]+\/[^\/]+)/);
@@ -58470,7 +58543,7 @@ async function executeQueryRepo(input) {
     for (const filePath of filesToRead) {
       if (totalChars >= MAX_TOTAL_CHARS)
         break;
-      const fullPath = join6(repoPath, filePath);
+      const fullPath = join7(repoPath, filePath);
       try {
         const content = await readFile6(fullPath, "utf-8");
         const truncated = content.length > MAX_PER_FILE ? content.slice(0, MAX_PER_FILE) + `
@@ -73713,7 +73786,7 @@ var init_expand = __esm(() => {
 
 // src/mcp/tools/read-files.ts
 import { readFile as readFile7, stat as stat5 } from "fs/promises";
-import { join as join7, resolve, normalize as normalize2 } from "path";
+import { join as join8, resolve, normalize as normalize2 } from "path";
 async function executeReadFiles(input) {
   const { analysisId, paths, maxLines = 500 } = input;
   const cached2 = analysisCache.getByAnalysisId(analysisId);
@@ -73742,7 +73815,7 @@ async function executeReadFiles(input) {
     if (normalized.startsWith("..") || normalized.startsWith("/")) {
       return { path: filePath, error: "Invalid path: must be relative and within the repository" };
     }
-    const fullPath = resolve(join7(resolvedRepoPath, normalized));
+    const fullPath = resolve(join8(resolvedRepoPath, normalized));
     if (!fullPath.startsWith(resolvedRepoPath)) {
       return { path: filePath, error: "Invalid path: traversal outside repository" };
     }

package/dist/mcp/server.js

@@ -53283,7 +53283,7 @@ class StdioServerTransport {
 }
 
 // src/core/orchestrator.ts
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 import { readFile as readFile2 } from "fs/promises";
 
 // src/core/layers/surface.ts
@@ -69556,12 +69556,40 @@ function getApiKeyFromEnv() {
 }
 
 // src/core/gemini.ts
+import { readFileSync } from "fs";
+import { join as join2 } from "path";
+import { homedir } from "os";
 var client = null;
+function resolveApiKey() {
+  if (process.env.GEMINI_API_KEY) {
+    return process.env.GEMINI_API_KEY;
+  }
+  try {
+    const configPath = join2(homedir(), ".config", "codebase-analyzer", "config.json");
+    const config2 = JSON.parse(readFileSync(configPath, "utf-8"));
+    if (config2.geminiApiKey) {
+      return config2.geminiApiKey;
+    }
+  } catch {}
+  return;
+}
+function hasGeminiKey() {
+  return !!resolveApiKey();
+}
 function getClient() {
   if (!client) {
-    const apiKey = process.env.GEMINI_API_KEY;
+    const apiKey = resolveApiKey();
     if (!apiKey) {
-      throw new Error("GEMINI_API_KEY environment variable is required. Get one at https://aistudio.google.com/apikey");
+      throw new Error(`GEMINI_API_KEY not found. Set it up using one of these methods:
+
+` + `Option 1: Config file (recommended for plugin installs):
+` + `  mkdir -p ~/.config/codebase-analyzer
+` + `  echo '{"geminiApiKey":"your_key"}' > ~/.config/codebase-analyzer/config.json
+
+` + `Option 2: MCP server env (for ~/.mcp.json installs):
+` + `  "env": { "GEMINI_API_KEY": "your_key" }
+
+` + "Get a free key at https://aistudio.google.com/apikey");
     }
     client = new GoogleGenAI({ apiKey });
   }
@@ -69731,6 +69759,21 @@ Focus on:
 
 Be specific and reference actual file paths when possible.`;
 async function semanticAnalysis(surface, structural, options = {}) {
+  if (!hasGeminiKey()) {
+    throw new Error(`Semantic analysis (deep depth) requires GEMINI_API_KEY.
+
+` + `To set it up, add the env var to your MCP server config in ~/.mcp.json:
+
+` + `  "codebase-analyzer": {
+` + `    "command": "npx",
+` + `    "args": ["-y", "codebase-analyzer-mcp"],
+` + `    "env": { "GEMINI_API_KEY": "your_key" }
+` + `  }
+
+` + `Get a free key at https://aistudio.google.com/apikey
+
+` + "Use --depth surface or --depth standard for free analysis without an API key.");
+  }
   const repoName = surface.repositoryMap.name;
   const languages = surface.repositoryMap.languages.slice(0, 5).map((l) => `${l.language} (${l.percentage}%)`).join(", ");
   const fileCount = surface.repositoryMap.fileCount;
@@ -70245,7 +70288,7 @@ async function orchestrateAnalysis(repoPath, options = {}) {
     });
     const allFiles = [];
     for (const module of modulesToAnalyze) {
-      const moduleDir = join2(repoPath, module.path);
+      const moduleDir = join3(repoPath, module.path);
     }
     structural = await analyzeModulesInParallel(repoPath, modulesToAnalyze, state);
     logger.stopSpinner(`Structural: ${structural.length} modules analyzed`);
@@ -70336,7 +70379,7 @@ async function analyzeModulesInParallel(repoPath, modules, state) {
     state.tasks.push(...batchTasks);
     const fileContents = new Map;
     await Promise.all(batch.map(async (module) => {
-      const modulePath = join2(repoPath, module.path);
+      const modulePath = join3(repoPath, module.path);
       try {
         const { glob: glob2 } = await Promise.resolve().then(() => (init_esm6(), exports_esm));
         const files = await glob2("**/*", {
@@ -70346,8 +70389,8 @@ async function analyzeModulesInParallel(repoPath, modules, state) {
           ignore: ["**/node_modules/**", "**/.git/**"]
         });
         for (const file2 of files.slice(0, 50)) {
-          const filePath = join2(module.path, file2);
-          const fullPath = join2(repoPath, filePath);
+          const filePath = join3(module.path, file2);
+          const fullPath = join3(repoPath, filePath);
           try {
             const content = await readFile2(fullPath, "utf-8");
             if (content.length < 1e5) {
@@ -70504,7 +70547,7 @@ import { basename as basename4 } from "path";
 // src/core/repo-loader.ts
 init_esm6();
 import { readFile as readFile3, stat as stat4 } from "node:fs/promises";
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 async function resolveSource(source) {
   if (await isGitHubUrl(source)) {
     const repoPath = await cloneGitHubRepo(source);
@@ -70531,7 +70574,7 @@ async function cloneGitHubRepo(url2) {
   const { execSync } = await import("node:child_process");
   const { mkdtemp } = await import("node:fs/promises");
   const { tmpdir } = await import("node:os");
-  const tempDir = await mkdtemp(join3(tmpdir(), "cba-"));
+  const tempDir = await mkdtemp(join4(tmpdir(), "cba-"));
   const normalizedUrl = url2.replace(/\.git$/, "").replace(/\/$/, "");
   try {
     execSync(`git clone --depth 1 ${normalizedUrl}.git ${tempDir}`, {
@@ -70614,7 +70657,7 @@ async function executeExpandSection(input) {
 }
 // src/mcp/tools/patterns.ts
 init_esm6();
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 import { readFile as readFile4 } from "fs/promises";
 var DETECTABLE_PATTERNS = [
   "singleton",
@@ -70641,6 +70684,21 @@ var findPatternsSchema = {
   patternTypes: exports_external.array(exports_external.string()).optional().describe(`Optional: specific patterns to look for. Available: ${DETECTABLE_PATTERNS.join(", ")}`)
 };
 async function executeFindPatterns(input) {
+  if (!hasGeminiKey()) {
+    throw new Error(`find_patterns requires GEMINI_API_KEY for AI-powered pattern detection.
+
+` + `To set it up, add the env var to your MCP server config in ~/.mcp.json:
+
+` + `  "codebase-analyzer": {
+` + `    "command": "npx",
+` + `    "args": ["-y", "codebase-analyzer-mcp"],
+` + `    "env": { "GEMINI_API_KEY": "your_key" }
+` + `  }
+
+` + `Get a free key at https://aistudio.google.com/apikey
+
+` + "Alternatively, use analyze_repo (free, no API key needed) or query_repo (degrades gracefully without Gemini).");
+  }
   const { source, patternTypes } = input;
   const { repoPath, cleanup } = await resolveSource(source);
   try {
@@ -70652,7 +70710,7 @@ async function executeFindPatterns(input) {
       ignore: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/build/**"]
     });
     for (const file2 of keyFiles.slice(0, 50)) {
-      const fullPath = join4(repoPath, file2);
+      const fullPath = join5(repoPath, file2);
       try {
         const content = await readFile4(fullPath, "utf-8");
         if (content.length < 50000) {
@@ -70713,7 +70771,7 @@ Respond with this exact JSON structure:
 }
 // src/mcp/tools/dataflow.ts
 init_esm6();
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import { readFile as readFile5 } from "fs/promises";
 var traceDataflowSchema = {
   source: exports_external.string().describe("Local path or GitHub URL to the repository"),
@@ -70721,6 +70779,21 @@ var traceDataflowSchema = {
   to: exports_external.string().optional().describe("Optional: destination to trace to (if known)")
 };
 async function executeTraceDataflow(input) {
+  if (!hasGeminiKey()) {
+    throw new Error(`trace_dataflow requires GEMINI_API_KEY for AI-powered dataflow analysis.
+
+` + `To set it up, add the env var to your MCP server config in ~/.mcp.json:
+
+` + `  "codebase-analyzer": {
+` + `    "command": "npx",
+` + `    "args": ["-y", "codebase-analyzer-mcp"],
+` + `    "env": { "GEMINI_API_KEY": "your_key" }
+` + `  }
+
+` + `Get a free key at https://aistudio.google.com/apikey
+
+` + "Alternatively, use query_repo which degrades gracefully without Gemini.");
+  }
   const { source, from, to } = input;
   const { repoPath, cleanup } = await resolveSource(source);
   try {
@@ -70732,7 +70805,7 @@ async function executeTraceDataflow(input) {
       ignore: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/build/**", "**/*.test.*", "**/*.spec.*"]
     });
     for (const file2 of codeFiles.slice(0, 60)) {
-      const fullPath = join5(repoPath, file2);
+      const fullPath = join6(repoPath, file2);
       try {
         const content = await readFile5(fullPath, "utf-8");
         if (content.length < 50000) {
@@ -70813,7 +70886,7 @@ If you cannot find the entry point, explain what you looked for in the summary a
 }
 // src/mcp/tools/read-files.ts
 import { readFile as readFile6, stat as stat5 } from "fs/promises";
-import { join as join6, resolve, normalize as normalize2 } from "path";
+import { join as join7, resolve, normalize as normalize2 } from "path";
 var readFilesSchema = {
   analysisId: exports_external.string().describe("The analysisId from a previous analyze_repo result"),
   paths: exports_external.array(exports_external.string()).min(1).max(20).describe("Relative file paths from the repository (max 20)"),
@@ -70847,7 +70920,7 @@ async function executeReadFiles(input) {
     if (normalized.startsWith("..") || normalized.startsWith("/")) {
       return { path: filePath, error: "Invalid path: must be relative and within the repository" };
     }
-    const fullPath = resolve(join6(resolvedRepoPath, normalized));
+    const fullPath = resolve(join7(resolvedRepoPath, normalized));
     if (!fullPath.startsWith(resolvedRepoPath)) {
       return { path: filePath, error: "Invalid path: traversal outside repository" };
     }
@@ -70874,7 +70947,7 @@ async function executeReadFiles(input) {
   };
 }
 // src/mcp/tools/query.ts
-import { basename as basename5, join as join7 } from "path";
+import { basename as basename5, join as join8 } from "path";
 import { readFile as readFile7 } from "fs/promises";
 var queryRepoSchema = {
   source: exports_external.string().describe("Local path or GitHub URL to the repository"),
@@ -70971,7 +71044,7 @@ async function executeQueryRepo(input) {
     for (const filePath of filesToRead) {
       if (totalChars >= MAX_TOTAL_CHARS)
         break;
-      const fullPath = join7(repoPath, filePath);
+      const fullPath = join8(repoPath, filePath);
       try {
         const content = await readFile7(fullPath, "utf-8");
         const truncated = content.length > MAX_PER_FILE ? content.slice(0, MAX_PER_FILE) + `
@@ -71063,7 +71136,7 @@ function buildFallbackAnswer(question, analysisId, cached2, scored, fileContents
 // package.json
 var package_default = {
   name: "codebase-analyzer-mcp",
-  version: "2.1.0",
+  version: "2.1.1",
   description: "Multi-layer codebase analysis with Gemini AI. MCP server + Claude plugin with progressive disclosure.",
   type: "module",
   main: "dist/mcp/server.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebase-analyzer-mcp",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Multi-layer codebase analysis with Gemini AI. MCP server + Claude plugin with progressive disclosure.",
   "type": "module",
   "main": "dist/mcp/server.js",