codedev-mcp 3.2.0

package/dist/tools/search.js

@@ -0,0 +1,308 @@
+import { z } from 'zod';
+import path from 'node:path';
+import { searchCode, listFiles } from '../search/fast-search.js';
+import { semanticSearch } from '../search/semantic.js';
+import { detectLanguage } from '../utils/languages.js';
+import { mapSymbols } from '../analyzers/codebase.js';
+import { outputSchemas } from '../schemas/output-schemas.js';
+import { CWD, ROOTS, IS_MULTI_ROOT, safePath } from '../config.js';
+/**
+ * Registers search tools for text/regex search, symbol finding, reference lookup, and semantic search.
+ * @param server - The MCP server instance to register tools on.
+ */
+export function registerSearchTools(server) {
+    // ═══════════════════════════════════════════════════════════════════════
+    // TOOL 1: search_code — Fast text/regex search across the codebase
+    // ═══════════════════════════════════════════════════════════════════════
+    server.registerTool('search_code', {
+        description: 'Fast text or regex search across the entire codebase. Uses ripgrep for speed. Returns file paths, line numbers, and matched content. Works with any programming language.',
+        inputSchema: {
+            pattern: z.string().describe('Search pattern (text or regex)'),
+            is_regex: z.boolean().optional().describe('Treat pattern as regex (default: false)'),
+            file_glob: z.string().optional().describe('Filter by file pattern, e.g. "*.py", "*.ts", "*.java"'),
+            case_sensitive: z.boolean().optional().describe('Case-sensitive search (default: false)'),
+            whole_word: z.boolean().optional().describe('Match whole words only (default: false)'),
+            max_results: z.number().optional().describe('Maximum results to return (default: 50)'),
+            context_lines: z.number().optional().describe('Lines of context before/after each match (default: 0)'),
+            directory: z.string().optional().describe('Subdirectory to search within'),
+        },
+        outputSchema: outputSchemas.search_code,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+    }, async (params) => {
+        try {
+            const searchCwd = params.directory ? safePath(params.directory) : CWD;
+            // In multi-root mode without a specific directory, search all roots
+            const cwdsToSearch = !params.directory && IS_MULTI_ROOT ? ROOTS : [searchCwd];
+            const allResults = [];
+            for (const cwd of cwdsToSearch) {
+                const results = await searchCode({
+                    cwd,
+                    pattern: params.pattern,
+                    isRegex: params.is_regex,
+                    fileGlob: params.file_glob,
+                    caseSensitive: params.case_sensitive,
+                    wholeWord: params.whole_word,
+                    maxResults: params.max_results || 50,
+                    contextLines: params.context_lines,
+                });
+                allResults.push(...results.map((r) => (IS_MULTI_ROOT ? { ...r, file: path.join(path.basename(cwd), r.file) } : r)));
+            }
+            if (allResults.length === 0) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `No matches found for "${params.pattern}". Try broadening the search: use a shorter pattern, remove file_glob filter, or set case_sensitive=false.`,
+                        },
+                    ],
+                    structuredContent: { matches: [], total: 0 },
+                };
+            }
+            const output = allResults
+                .slice(0, params.max_results || 50)
+                .map((r) => `${r.file}:${r.line}${r.column !== undefined ? ':' + r.column : ''} │ ${r.text}`)
+                .join('\n');
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Found ${allResults.length} matches${IS_MULTI_ROOT ? ` across ${cwdsToSearch.length} roots` : ''}:\n\n${output}`,
+                    },
+                ],
+                structuredContent: {
+                    matches: allResults
+                        .slice(0, params.max_results || 50)
+                        .map((r) => ({ file: r.file, line: r.line, column: r.column, text: r.text })),
+                    total: allResults.length,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `search_code failed: ${error.message}. Verify the directory exists and the pattern is valid. For regex, ensure proper escaping.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    // ═══════════════════════════════════════════════════════════════════════
+    // TOOL 2: search_symbols — Find functions, classes, types across codebase
+    // ═══════════════════════════════════════════════════════════════════════
+    server.registerTool('search_symbols', {
+        description: 'Find functions, classes, interfaces, types, and constants across the codebase. Supports 40+ languages. Returns symbol name, kind, file, and line number.',
+        inputSchema: {
+            name: z.string().optional().describe('Symbol name to search for (partial match)'),
+            kind: z
+                .enum(['function', 'class', 'interface', 'type', 'constant', 'export', 'all'])
+                .optional()
+                .describe('Type of symbol to find (default: all)'),
+            language: z.string().optional().describe('Filter by language, e.g. "python", "typescript", "java"'),
+            directory: z.string().optional().describe('Subdirectory to search within'),
+            max_files: z.number().optional().describe('Max files to scan (default: 200, increase for large codebases)'),
+        },
+        outputSchema: outputSchemas.search_symbols,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+    }, async (params) => {
+        try {
+            const symbolDir = params.directory ? safePath(params.directory) : undefined;
+            // Optimization: mapSymbols already filters by directory and language
+            const symbolMap = await mapSymbols(CWD, {
+                maxFiles: params.max_files || 200,
+                language: params.language,
+                directory: symbolDir ? path.relative(CWD, symbolDir) : undefined,
+            });
+            let allSymbols = symbolMap.flatMap(({ file, symbols }) => symbols.map((s) => ({ ...s, file })));
+            // Filter by name
+            if (params.name) {
+                const lower = params.name.toLowerCase();
+                allSymbols = allSymbols.filter((s) => s.name.toLowerCase().includes(lower));
+            }
+            // Filter by kind
+            if (params.kind && params.kind !== 'all') {
+                allSymbols = allSymbols.filter((s) => s.kind === params.kind);
+            }
+            if (allSymbols.length === 0) {
+                return {
+                    content: [{ type: 'text', text: 'No symbols found matching criteria.' }],
+                    structuredContent: { symbols: [], total: 0 },
+                };
+            }
+            // Group by kind for display
+            const grouped = {};
+            for (const s of allSymbols) {
+                if (!grouped[s.kind])
+                    grouped[s.kind] = [];
+                grouped[s.kind].push(s);
+            }
+            const output = Object.entries(grouped)
+                .map(([kind, syms]) => {
+                const header = `### ${kind}s (${syms.length})`;
+                const list = syms
+                    .slice(0, 100)
+                    .map((s) => `  ${s.name.padEnd(35)} ${s.file}:${s.line}  [${s.language}]`)
+                    .join('\n');
+                return `${header}\n${list}`;
+            })
+                .join('\n\n');
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Found ${allSymbols.length} symbols:\n\n${output}`,
+                    },
+                ],
+                structuredContent: {
+                    symbols: allSymbols.slice(0, 200).map((s) => ({ name: s.name, type: s.kind, file: s.file, line: s.line })),
+                    total: allSymbols.length,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `search_symbols failed: ${error.message}. Try increasing max_files for large codebases, or narrow with language/directory filters.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    // ═══════════════════════════════════════════════════════════════════════
+    // TOOL 3: find_references — Find all references to a symbol
+    // ═══════════════════════════════════════════════════════════════════════
+    server.registerTool('find_references', {
+        description: 'Find all references to a symbol (function, class, variable) across the codebase. Shows every file and line where the symbol is used.',
+        inputSchema: {
+            symbol: z.string().describe('Symbol name to find references for'),
+            file_glob: z.string().optional().describe('Filter by file pattern, e.g. "*.py"'),
+            whole_word: z.boolean().optional().describe('Match whole word only (default: true)'),
+            context_lines: z.number().optional().describe('Lines of context around each reference (default: 1)'),
+        },
+        outputSchema: outputSchemas.find_references,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+    }, async (params) => {
+        try {
+            const results = await searchCode({
+                cwd: CWD,
+                pattern: params.symbol,
+                wholeWord: params.whole_word !== false,
+                fileGlob: params.file_glob,
+                contextLines: params.context_lines || 1,
+                maxResults: 100,
+            });
+            if (results.length === 0) {
+                return {
+                    content: [{ type: 'text', text: `No references found for "${params.symbol}"` }],
+                    structuredContent: { symbol: params.symbol, references: [], total: 0 },
+                };
+            }
+            // Group by file
+            const byFile = {};
+            for (const r of results) {
+                if (!byFile[r.file])
+                    byFile[r.file] = [];
+                byFile[r.file].push(r);
+            }
+            const output = Object.entries(byFile)
+                .map(([file, refs]) => {
+                const lines = refs.map((r) => `  L${r.line}: ${r.text}`).join('\n');
+                return `📄 ${file} (${refs.length} references)\n${lines}`;
+            })
+                .join('\n\n');
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Found ${results.length} references to "${params.symbol}" in ${Object.keys(byFile).length} files:\n\n${output}`,
+                    },
+                ],
+                structuredContent: {
+                    symbol: params.symbol,
+                    references: results.map((r) => ({ file: r.file, line: r.line, context: r.text })),
+                    total: results.length,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `find_references failed: ${error.message}. Verify the symbol name is correct. Try search_code with a broader pattern.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    // ═══════════════════════════════════════════════════════════════════════
+    // TOOL 4: semantic_search — Concept-based code search
+    // ═══════════════════════════════════════════════════════════════════════
+    server.registerTool('semantic_search', {
+        description: 'Search code by concept, not just text. Finds "authentication logic" or "error handling code" without needing exact strings. Uses TF-IDF with synonym expansion.',
+        inputSchema: {
+            query: z
+                .string()
+                .describe('Natural language query, e.g. "authentication flow" or "database connection handling"'),
+            file_glob: z.string().optional().describe('Filter by file pattern, e.g. "*.py"'),
+            max_results: z.number().optional().describe('Max results (default: 15)'),
+        },
+        outputSchema: outputSchemas.semantic_search,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+    }, async (params) => {
+        try {
+            let files = await listFiles(CWD, { type: 'file' });
+            // Filter by language (exclude unknown)
+            files = files.filter((f) => detectLanguage(f) !== 'unknown');
+            if (params.file_glob) {
+                const pattern = new RegExp(params.file_glob.replace(/\*/g, '.*').replace(/\?/g, '.'));
+                files = files.filter((f) => pattern.test(f));
+            }
+            const results = await semanticSearch(files, params.query, CWD, params.max_results || 15);
+            if (results.length === 0) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `No semantic matches for "${params.query}". Try broader terms or use search_code for exact text search.`,
+                        },
+                    ],
+                    structuredContent: { matches: [], total: 0 },
+                };
+            }
+            const output = results
+                .map((r, i) => `${i + 1}. ${r.file}:${r.startLine}-${r.endLine} (score: ${r.score.toFixed(2)}, terms: ${r.matchedTerms.join(', ')})\n${r.snippet
+                .split('\n')
+                .map((l) => '   ' + l)
+                .join('\n')}`)
+                .join('\n\n');
+            return {
+                content: [
+                    { type: 'text', text: `Semantic search: "${params.query}" — ${results.length} results\n\n${output}` },
+                ],
+                structuredContent: {
+                    matches: results.map((r) => ({ file: r.file, score: r.score, snippet: r.snippet })),
+                    total: results.length,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `semantic_search failed: ${error.message}. Try search_code for exact text matching.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=search.js.map

package/dist/tools/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,0EAA0E;IAC1E,mEAAmE;IACnE,0EAA0E;IAC1E,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EACT,2KAA2K;QAC7K,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAC9D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACpF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;YAClG,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YACzF,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACtF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACtF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;YACtG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;SAC3E;QACD,YAAY,EAAE,aAAa,CAAC,WAAW;QACvC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KAChF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACtE,oEAAoE;YACpE,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9E,MAAM,UAAU,GAAoE,EAAE,CAAC;YAEvF,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;oBAC/B,GAAG;oBACH,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,MAAM,CAAC,QAAQ;oBACxB,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,aAAa,EAAE,MAAM,CAAC,cAAc;oBACpC,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,UAAU,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;oBACpC,YAAY,EAAE,MAAM,CAAC,aAAa;iBACnC,CAAC,CAAC;gBACH,UAAU,CAAC,IAAI,CACb,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACnG,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,yBAAyB,MAAM,CAAC,OAAO,4GAA4G;yBAC1J;qBACF;oBACD,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;iBAC7C,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,UAAU;iBACtB,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;iBAC5F,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,SAAS,UAAU,CAAC,MAAM,WAAW,aAAa,CAAC,CAAC,CAAC,WAAW,YAAY,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,MAAM,EAAE;qBACvH;iBACF;gBACD,iBAAiB,EAAE;oBACjB,OAAO,EAAE,UAAU;yBAChB,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;yBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC/E,KAAK,EAAE,UAAU,CAAC,MAAM;iBACzB;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,uBAAwB,KAAe,CAAC,OAAO,4FAA4F;qBAClJ;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,0JAA0J;QAC5J,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACjF,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;iBAC7E,QAAQ,EAAE;iBACV,QAAQ,CAAC,uCAAuC,CAAC;YACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;YACnG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;SAC5G;QACD,YAAY,EAAE,aAAa,CAAC,cAAc;QAC1C,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KAChF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,qEAAqE;YACrE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE;gBACtC,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC,CAAC;YAEH,IAAI,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAEhG,iBAAiB;YACjB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,CAAC;YAED,iBAAiB;YACjB,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACzC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC;oBACxE,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;iBAC7C,CAAC;YACJ,CAAC;YAED,4BAA4B;YAC5B,MAAM,OAAO,GAAsC,EAAE,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;gBACpB,MAAM,MAAM,GAAG,OAAO,IAAI,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC;gBAC/C,MAAM,IAAI,GAAG,IAAI;qBACd,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBACb,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,GAAG,CAAC;qBACzE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9B,CAAC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,CAAC;YAEhB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,SAAS,UAAU,CAAC,MAAM,gBAAgB,MAAM,EAAE;qBACzD;iBACF;gBACD,iBAAiB,EAAE;oBACjB,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC1G,KAAK,EAAE,UAAU,CAAC,MAAM;iBACzB;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,0BAA2B,KAAe,CAAC,OAAO,4FAA4F;qBACrJ;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IACF,0EAA0E;IAC1E,4DAA4D;IAC5D,0EAA0E;IAC1E,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,sIAAsI;QACxI,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YACjE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YAChF,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;YACpF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;SACrG;QACD,YAAY,EAAE,aAAa,CAAC,eAAe;QAC3C,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KAChF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;gBAC/B,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,MAAM,CAAC,MAAM;gBACtB,SAAS,EAAE,MAAM,CAAC,UAAU,KAAK,KAAK;gBACtC,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;gBACvC,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;oBAC/E,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;iBACvE,CAAC;YACJ,CAAC;YAED,gBAAgB;YAChB,MAAM,MAAM,GAAmC,EAAE,CAAC;YAClD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpE,OAAO,MAAM,IAAI,KAAK,IAAI,CAAC,MAAM,iBAAiB,KAAK,EAAE,CAAC;YAC5D,CAAC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,CAAC;YAEhB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,mBAAmB,MAAM,CAAC,MAAM,QAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,cAAc,MAAM,EAAE;qBACtH;iBACF;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACjF,KAAK,EAAE,OAAO,CAAC,MAAM;iBACtB;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,2BAA4B,KAAe,CAAC,OAAO,8EAA8E;qBACxI;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IACF,0EAA0E;IAC1E,sDAAsD;IACtD,0EAA0E;IAC1E,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,iKAAiK;QACnK,WAAW,EAAE;YACX,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,CAAC,sFAAsF,CAAC;YACnG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YAChF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACzE;QACD,YAAY,EAAE,aAAa,CAAC,eAAe;QAC3C,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KAChF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,IAAI,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,uCAAuC;YACvC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtF,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,4BAA4B,MAAM,CAAC,KAAK,gEAAgE;yBAC/G;qBACF;oBACD,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;iBAC7C,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,OAAO;iBACnB,GAAG,CACF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO;iBAC9H,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC;iBACrB,IAAI,CAAC,IAAI,CAAC,EAAE,CAClB;iBACA,IAAI,CAAC,MAAM,CAAC,CAAC;YAEhB,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,MAAM,CAAC,KAAK,OAAO,OAAO,CAAC,MAAM,eAAe,MAAM,EAAE,EAAE;iBACtG;gBACD,iBAAiB,EAAE;oBACjB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;oBACnF,KAAK,EAAE,OAAO,CAAC,MAAM;iBACtB;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,2BAA4B,KAAe,CAAC,OAAO,4CAA4C;qBACtG;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/security.d.ts

@@ -0,0 +1,7 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/**
+ * Registers security tools for vulnerability scanning and dependency vulnerability detection.
+ * @param server - The MCP server instance to register tools on.
+ */
+export declare function registerSecurityTools(server: McpServer): void;
+//# sourceMappingURL=security.d.ts.map

package/dist/tools/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/tools/security.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOpE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,QA4ItD"}

package/dist/tools/security.js

@@ -0,0 +1,138 @@
+import { z } from 'zod';
+import { outputSchemas } from '../schemas/output-schemas.js';
+import { CWD } from '../config.js';
+import { securityScan } from '../analyzers/security.js';
+import { scanDependencyVulns } from '../analyzers/dep-vuln.js';
+import { analytics } from '../utils/analytics.js';
+/**
+ * Registers security tools for vulnerability scanning and dependency vulnerability detection.
+ * @param server - The MCP server instance to register tools on.
+ */
+export function registerSecurityTools(server) {
+    // ═══════════════════════════════════════════════════════════════════════
+    // TOOL: security_scan — Security vulnerability detection
+    // ═══════════════════════════════════════════════════════════════════════
+    server.registerTool('security_scan', {
+        description: 'Scan codebase for security issues: hardcoded secrets, SQL injection, XSS, insecure crypto, eval usage, path traversal, and more. SAST-lite with no external dependencies.',
+        inputSchema: {
+            category: z
+                .string()
+                .optional()
+                .describe('Filter by category: injection, xss, secrets, crypto, config, auth, redirect, error-handling'),
+            severity: z.string().optional().describe('Filter by severity: critical, high, medium, low'),
+            file_glob: z.string().optional().describe('Filter by file pattern'),
+        },
+        outputSchema: outputSchemas.security_scan,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+    }, async (params) => {
+        try {
+            const report = await securityScan(CWD, {
+                category: params.category,
+                severity: params.severity,
+                fileGlob: params.file_glob,
+            });
+            let output = `## Security Scan Report\n\n`;
+            output += `Total findings: ${report.totalFindings}\n`;
+            output += `Severity breakdown: ${Object.entries(report.bySeverity)
+                .map(([k, v]) => `${k}: ${v}`)
+                .join(', ') || 'none'}\n`;
+            if (report.dependencyInfo) {
+                output += `\nDependencies: ${report.dependencyInfo.directDeps} direct, ${report.dependencyInfo.total} total`;
+                output += report.dependencyInfo.lockfileFound ? ' (lockfile ✅)' : ' (⚠️ no lockfile found)';
+                output += '\n';
+            }
+            if (report.findings.length > 0) {
+                output += '\n### Findings:\n\n';
+                output += report.findings
+                    .slice(0, 50)
+                    .map((f) => {
+                    const icon = f.severity === 'critical' ? '🔴' : f.severity === 'high' ? '🟠' : f.severity === 'medium' ? '🟡' : '🔵';
+                    let line = `${icon} [${f.severity.toUpperCase()}] ${f.message}\n`;
+                    line += `   ${f.file}${f.line ? `:${f.line}` : ''}\n`;
+                    if (f.snippet)
+                        line += `   ${f.snippet}\n`;
+                    line += `   💡 ${f.recommendation}\n`;
+                    return line;
+                })
+                    .join('\n');
+            }
+            return {
+                content: [{ type: 'text', text: output }],
+                structuredContent: {
+                    issues: report.findings.map((f) => ({
+                        file: f.file,
+                        line: f.line,
+                        category: f.category,
+                        severity: f.severity,
+                        message: f.message,
+                        recommendation: f.recommendation,
+                    })),
+                    total: report.totalFindings,
+                    severity: report.bySeverity,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `security_scan failed: ${error.message}. Verify the project directory is accessible.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    // ═══════════════════════════════════════════════════════════════════════
+    // TOOL: dep_vuln_scan — Dependency vulnerability scanning
+    // ═══════════════════════════════════════════════════════════════════════
+    server.registerTool('dep_vuln_scan', {
+        description: 'Scan dependencies for known vulnerabilities. Cross-references package lock files (npm, Cargo, pip, Go) against a database of known-vulnerable packages. Reports severity, CVEs, and recommended upgrades.',
+        outputSchema: outputSchemas.dep_vuln_scan,
+        annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+    }, async () => {
+        try {
+            return await analytics.track('dep_vuln_scan', async () => {
+                const result = await scanDependencyVulns(CWD);
+                const lines = [`## Dependency Vulnerability Scan\n`];
+                lines.push(`Dependencies scanned: ${result.totalDeps}`);
+                lines.push(`Ecosystems: ${result.ecosystems.join(', ') || 'none detected'}`);
+                lines.push(`Lock files: ${result.lockFiles.join(', ') || 'none found'}`);
+                const s = result.summary;
+                lines.push(`Findings: ${s.critical} critical, ${s.high} high, ${s.medium} medium, ${s.low} low\n`);
+                if (result.vulnerabilities.length === 0) {
+                    lines.push('✅ No known vulnerabilities detected in your dependencies!');
+                }
+                else {
+                    for (const v of result.vulnerabilities) {
+                        const icon = v.severity === 'critical' ? '🔴' : v.severity === 'high' ? '🟠' : v.severity === 'medium' ? '🟡' : '🔵';
+                        lines.push(`${icon} [${v.severity.toUpperCase()}] ${v.name} @${v.version} — ${v.reason}`);
+                        if (v.recommendation)
+                            lines.push(`   ↳ ${v.recommendation}`);
+                    }
+                }
+                return {
+                    content: [{ type: 'text', text: lines.join('\n') }],
+                    structuredContent: {
+                        vulnerabilities: (result.vulnerabilities || []).map((v) => ({
+                            package: v.name,
+                            severity: v.severity,
+                            description: v.reason,
+                        })),
+                        totalDeps: result.totalDeps || 0,
+                        outdatedCount: result.outdatedCount || 0,
+                        summary: result.summary || {},
+                    },
+                };
+            });
+        }
+        catch (error) {
+            return {
+                content: [{ type: 'text', text: `dep_vuln_scan failed: ${error.message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=security.js.map

package/dist/tools/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/tools/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,0EAA0E;IAC1E,yDAAyD;IACzD,0EAA0E;IAC1E,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,2KAA2K;QAC7K,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6FAA6F,CAAC;YAC1G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;YAC3F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;SACpE;QACD,YAAY,EAAE,aAAa,CAAC,aAAa;QACzC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KAChF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;gBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,SAAS;aAC3B,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,6BAA6B,CAAC;YAC3C,MAAM,IAAI,mBAAmB,MAAM,CAAC,aAAa,IAAI,CAAC;YACtD,MAAM,IAAI,uBACR,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;iBAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,MACnB,IAAI,CAAC;YAEL,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,IAAI,mBAAmB,MAAM,CAAC,cAAc,CAAC,UAAU,YAAY,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC;gBAC7G,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAC;gBAC5F,MAAM,IAAI,IAAI,CAAC;YACjB,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,qBAAqB,CAAC;gBAChC,MAAM,IAAI,MAAM,CAAC,QAAQ;qBACtB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;qBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,IAAI,GACR,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1G,IAAI,IAAI,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC;oBAClE,IAAI,IAAI,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;oBACtD,IAAI,CAAC,CAAC,OAAO;wBAAE,IAAI,IAAI,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC;oBAC3C,IAAI,IAAI,SAAS,CAAC,CAAC,cAAc,IAAI,CAAC;oBACtC,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACzC,iBAAiB,EAAE;oBACjB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAClC,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,cAAc,EAAE,CAAC,CAAC,cAAc;qBACjC,CAAC,CAAC;oBACH,KAAK,EAAE,MAAM,CAAC,aAAa;oBAC3B,QAAQ,EAAE,MAAM,CAAC,UAAU;iBAC5B;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,yBAA0B,KAAe,CAAC,OAAO,+CAA+C;qBACvG;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,0EAA0E;IAC1E,0DAA0D;IAC1D,0EAA0E;IAC1E,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,WAAW,EACT,2MAA2M;QAC7M,YAAY,EAAE,aAAa,CAAC,aAAa;QACzC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KAChF,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;gBACvD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAC9C,MAAM,KAAK,GAAa,CAAC,oCAAoC,CAAC,CAAC;gBAC/D,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;gBACxD,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;gBAC7E,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;gBACzE,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;gBACnG,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxC,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;gBAC1E,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;wBACvC,MAAM,IAAI,GACR,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;wBAC1G,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC1F,IAAI,CAAC,CAAC,cAAc;4BAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,iBAAiB,EAAE;wBACjB,eAAe,EAAE,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC1D,OAAO,EAAE,CAAC,CAAC,IAAI;4BACf,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,WAAW,EAAE,CAAC,CAAC,MAAM;yBACtB,CAAC,CAAC;wBACH,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC;wBAChC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;wBACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;qBAC9B;iBACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAA0B,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/utils/analytics.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Tool Usage Analytics
+ * Tracks which tools are called most, response times, cache hit rates.
+ * Exposed via server://stats resource.
+ */
+export interface ToolCall {
+    tool: string;
+    timestamp: number;
+    durationMs: number;
+    success: boolean;
+    cached: boolean;
+}
+export interface ToolStats {
+    tool: string;
+    callCount: number;
+    avgDurationMs: number;
+    maxDurationMs: number;
+    errorCount: number;
+    cacheHits: number;
+    lastCalled?: string;
+}
+export interface AnalyticsReport {
+    uptime: string;
+    totalCalls: number;
+    totalErrors: number;
+    avgResponseMs: number;
+    cacheHitRate: string;
+    toolStats: ToolStats[];
+    recentCalls: {
+        tool: string;
+        durationMs: number;
+        timestamp: string;
+    }[];
+}
+declare class Analytics {
+    private calls;
+    private startTime;
+    /** Keep last 5000 calls */
+    private maxHistory;
+    /**
+     * Record a tool call.
+     * @param tool - Tool name.
+     * @param durationMs - Duration in milliseconds.
+     * @param success - Whether the call succeeded.
+     * @param cached - Whether the result was from cache.
+     */
+    record(tool: string, durationMs: number, success: boolean, cached?: boolean): void;
+    /**
+     * Wrap an async tool handler with timing and recording.
+     * @param tool - Tool name.
+     * @param fn - The async function to wrap.
+     * @param cached - Whether the result is from cache.
+     * @returns The result of the wrapped function.
+     */
+    track<T>(tool: string, fn: () => Promise<T>, cached?: boolean): Promise<T>;
+    /**
+     * Get full analytics report.
+     * @returns The analytics report with uptime, totals, and per-tool stats.
+     */
+    getReport(): AnalyticsReport;
+    /**
+     * Get suggested actions based on analytics and codebase state.
+     * @returns A list of suggested actions.
+     */
+    getSuggestedActions(): string[];
+}
+export declare const analytics: Analytics;
+export {};
+//# sourceMappingURL=analytics.d.ts.map

package/dist/utils/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/utils/analytics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACxE;AAED,cAAM,SAAS;IACb,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,SAAS,CAAc;IAC/B,2BAA2B;IAC3B,OAAO,CAAC,UAAU,CAAQ;IAE1B;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAE,OAAe;IAqBlF;;;;;;OAMG;IACG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,GAAE,OAAe,GAAG,OAAO,CAAC,CAAC,CAAC;IAYvF;;;OAGG;IACH,SAAS,IAAI,eAAe;IAoD5B;;;OAGG;IACH,mBAAmB,IAAI,MAAM,EAAE;CAqChC;AAGD,eAAO,MAAM,SAAS,WAAkB,CAAC"}