codesift-mcp 0.1.0

package/dist/utils/git-validation.js

@@ -0,0 +1,19 @@
+/**
+ * Git ref/URL validation utilities — shared across tools that invoke git.
+ * Prevents command injection when refs/URLs are passed to execFileSync.
+ */
+/** Allows alphanumeric, `/`, `.`, `-`, `_`, `~`, `^`, `@`, `{`, `}`. */
+export const GIT_REF_PATTERN = /^[a-zA-Z0-9_./\-~^@{}]+$/;
+export function validateGitRef(ref) {
+    if (!ref || !GIT_REF_PATTERN.test(ref)) {
+        throw new Error(`Invalid git ref: "${ref}"`);
+    }
+}
+/** Allows HTTPS, SSH, git://, and file:// protocols. */
+export const GIT_URL_PATTERN = /^(https?:\/\/|git@|git:\/\/|ssh:\/\/|file:\/\/)[^\s]+$/;
+export function validateGitUrl(url) {
+    if (!url || !GIT_URL_PATTERN.test(url)) {
+        throw new Error(`Invalid git URL: ${url}`);
+    }
+}
+//# sourceMappingURL=git-validation.js.map

package/dist/utils/git-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-validation.js","sourceRoot":"","sources":["../../src/utils/git-validation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAE1D,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,wDAAwD,CAAC;AAExF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/utils/test-file.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Check if a file path looks like a test file using substring matching.
+ * Used by BM25 scoring to demote test files.
+ */
+export declare function isTestFile(filePath: string): boolean;
+/**
+ * Check if a file path looks like a test file using regex patterns.
+ * Stricter than isTestFile — used by call graph to exclude test files.
+ */
+export declare function isTestFileStrict(filePath: string): boolean;
+//# sourceMappingURL=test-file.d.ts.map

package/dist/utils/test-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-file.d.ts","sourceRoot":"","sources":["../../src/utils/test-file.ts"],"names":[],"mappings":"AAcA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D"}

package/dist/utils/test-file.js

@@ -0,0 +1,27 @@
+/** Test file patterns — shared between BM25 scoring and call graph filtering */
+const TEST_FILE_PATTERNS = [
+    ".test.", ".spec.", "__tests__/", "test/mocks", "test-utils", "test-helpers",
+];
+/** Regex-based test file patterns for stricter matching (e.g., call graph filtering) */
+const TEST_FILE_REGEX_PATTERNS = [
+    /\.test\.[jt]sx?$/,
+    /\.spec\.[jt]sx?$/,
+    /\/__tests__\//,
+    /\/test\//,
+    /\/tests\//,
+];
+/**
+ * Check if a file path looks like a test file using substring matching.
+ * Used by BM25 scoring to demote test files.
+ */
+export function isTestFile(filePath) {
+    return TEST_FILE_PATTERNS.some((pattern) => filePath.includes(pattern));
+}
+/**
+ * Check if a file path looks like a test file using regex patterns.
+ * Stricter than isTestFile — used by call graph to exclude test files.
+ */
+export function isTestFileStrict(filePath) {
+    return TEST_FILE_REGEX_PATTERNS.some((p) => p.test(filePath));
+}
+//# sourceMappingURL=test-file.js.map

package/dist/utils/test-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-file.js","sourceRoot":"","sources":["../../src/utils/test-file.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc;CAC7E,CAAC;AAEF,wFAAwF;AACxF,MAAM,wBAAwB,GAAG;IAC/B,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,UAAU;IACV,WAAW;CACZ,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "codesift-mcp",
+  "version": "0.1.0",
+  "description": "MCP server for code intelligence — 21 tools for symbol search, call graph analysis, and semantic code retrieval",
+  "license": "MIT",
+  "author": "Greg Laskowski",
+  "type": "module",
+  "bin": {
+    "codesift-mcp": "./dist/server.js",
+    "codesift": "./dist/cli.js"
+  },
+  "main": "./dist/server.js",
+  "files": [
+    "dist",
+    "src/parser/languages",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc && cp -r src/parser/languages dist/parser/",
+    "dev": "tsx src/server.ts",
+    "start": "node dist/server.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "lint": "tsc --noEmit",
+    "download-wasm": "tsx scripts/download-wasm.ts",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "chokidar": "^4.0.0",
+    "ignore": "^6.0.0",
+    "web-tree-sitter": "^0.24.0"
+  },
+  "optionalDependencies": {
+    "openai": "^4.0.0",
+    "voyageai": "^0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^3.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "mcp",
+    "code-search",
+    "tree-sitter",
+    "semantic-search",
+    "claude",
+    "anthropic"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/greglas/codesift-mcp"
+  }
+}