codesift-mcp 0.3.0 → 0.5.0

package/dist/tools/hono-conditional-middleware.js

@@ -0,0 +1,62 @@
+/**
+ * trace_conditional_middleware — lists middleware that is applied under a
+ * runtime condition (e.g., basicAuth only for non-GET methods). Consumes
+ * the applied_when data populated by HonoExtractor Phase 2 T4.
+ *
+ * Use case: audit_hono_security was producing false positives on conditional
+ * auth wrappers in inline middleware arrows. This tool surfaces the gated
+ * middleware so operators can verify the gating is correct.
+ *
+ * Spec: docs/specs/2026-04-11-hono-phase-2-plan.md (T7)
+ */
+import { getCodeIndex } from "./index-tools.js";
+import { honoCache } from "../cache/hono-cache.js";
+import { HonoExtractor } from "../parser/extractors/hono.js";
+import { detectFrameworks } from "../utils/framework-detect.js";
+import { join } from "node:path";
+export async function traceConditionalMiddleware(repo, scopeFilter) {
+    const index = await getCodeIndex(repo);
+    if (!index)
+        return { error: `Repository "${repo}" not found` };
+    const frameworks = detectFrameworks(index);
+    if (!frameworks.has("hono"))
+        return { error: "No Hono app detected" };
+    const entryFile = resolveHonoEntryFile(index);
+    if (!entryFile)
+        return { error: "No Hono app entry file found" };
+    let model;
+    try {
+        model = await honoCache.get(repo, entryFile, new HonoExtractor());
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { error: `Failed to parse: ${msg}` };
+    }
+    const entries = [];
+    for (const chain of model.middleware_chains) {
+        if (scopeFilter && chain.scope !== scopeFilter)
+            continue;
+        for (const entry of chain.entries) {
+            if (!entry.applied_when)
+                continue;
+            entries.push({
+                scope: chain.scope,
+                middleware_name: entry.name,
+                condition_type: entry.applied_when.condition_type,
+                condition_text: entry.applied_when.condition_text,
+                file: entry.file,
+                line: entry.line,
+            });
+        }
+    }
+    return { entries, total: entries.length };
+}
+function resolveHonoEntryFile(index) {
+    for (const sym of index.symbols) {
+        if (sym.source && /new\s+(?:Hono|OpenAPIHono)\s*(?:<[^>]*>)?\s*\(/.test(sym.source)) {
+            return join(index.root, sym.file);
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=hono-conditional-middleware.js.map

package/dist/tools/hono-conditional-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-conditional-middleware.js","sourceRoot":"","sources":["../../src/tools/hono-conditional-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkBjC,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAY,EACZ,WAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC;IAE/D,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAEtE,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAEjE,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5C,IAAI,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;YAAE,SAAS;QACzD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,YAAY;gBAAE,SAAS;YAClC,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,eAAe,EAAE,KAAK,CAAC,IAAI;gBAC3B,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBACjD,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;gBACjD,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAG7B;IACC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,IAAI,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tools/hono-context-flow.d.ts

@@ -0,0 +1,24 @@
+/**
+ * trace_context_flow — tracks c.set/c.get/c.var/c.env flow through Hono app.
+ *
+ * Identifies MISSING_CONTEXT_VARIABLE when a route accesses a var that no
+ * middleware in its scope sets.
+ *
+ * Spec: docs/specs/2026-04-10-hono-framework-intelligence-spec.md (Task 18)
+ */
+import type { ContextVariable } from "../parser/extractors/hono-model.js";
+export interface ContextFlowResult {
+    context_vars?: ContextVariable[];
+    findings?: Array<{
+        type: "MISSING_CONTEXT_VARIABLE";
+        variable: string;
+        route: string;
+        get_point: {
+            file: string;
+            line: number;
+        };
+    }>;
+    error?: string;
+}
+export declare function traceContextFlow(repo: string, variable?: string): Promise<ContextFlowResult>;
+//# sourceMappingURL=hono-context-flow.d.ts.map

package/dist/tools/hono-context-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-context-flow.d.ts","sourceRoot":"","sources":["../../src/tools/hono-context-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,IAAI,EAAE,0BAA0B,CAAC;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3C,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CA4D5B"}

package/dist/tools/hono-context-flow.js

@@ -0,0 +1,70 @@
+/**
+ * trace_context_flow — tracks c.set/c.get/c.var/c.env flow through Hono app.
+ *
+ * Identifies MISSING_CONTEXT_VARIABLE when a route accesses a var that no
+ * middleware in its scope sets.
+ *
+ * Spec: docs/specs/2026-04-10-hono-framework-intelligence-spec.md (Task 18)
+ */
+import { getCodeIndex } from "./index-tools.js";
+import { honoCache } from "../cache/hono-cache.js";
+import { HonoExtractor } from "../parser/extractors/hono.js";
+import { resolveHonoEntryFile } from "./hono-entry-resolver.js";
+import { detectFrameworks } from "../utils/framework-detect.js";
+export async function traceContextFlow(repo, variable) {
+    const index = await getCodeIndex(repo);
+    if (!index)
+        return { error: `Repository "${repo}" not found` };
+    const frameworks = detectFrameworks(index);
+    if (!frameworks.has("hono"))
+        return { error: "No Hono app detected" };
+    const entryFile = resolveHonoEntryFile(index);
+    if (!entryFile)
+        return { error: "No Hono app entry file found" };
+    let model;
+    try {
+        model = await honoCache.get(repo, entryFile, new HonoExtractor());
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { error: `Failed to parse: ${msg}` };
+    }
+    const vars = variable
+        ? model.context_vars.filter((cv) => cv.name === variable)
+        : model.context_vars;
+    const findings = [];
+    // MISSING_CONTEXT_VARIABLE detection: variable accessed in route whose
+    // middleware scope doesn't include a setter
+    for (const cv of vars) {
+        if (cv.is_env_binding)
+            continue; // c.env.* always available
+        if (cv.set_points.length === 0)
+            continue;
+        for (const getPoint of cv.get_points) {
+            // Find route containing this get point
+            const route = model.routes.find((r) => r.file === getPoint.file &&
+                Math.abs(r.line - getPoint.line) <= 50);
+            if (!route)
+                continue;
+            // Check if any middleware chain matching the route has a file that
+            // contains a set_point for this variable
+            const activeScopes = model.middleware_chains.filter((mc) => {
+                if (mc.scope === "*")
+                    return true;
+                const pattern = mc.scope.replace(/\*/g, ".*");
+                return new RegExp(`^${pattern}$`).test(route.path);
+            });
+            const setInScope = cv.set_points.some((sp) => activeScopes.some((s) => s.entries.some((e) => e.file === sp.file)));
+            if (!setInScope) {
+                findings.push({
+                    type: "MISSING_CONTEXT_VARIABLE",
+                    variable: cv.name,
+                    route: route.path,
+                    get_point: { file: getPoint.file, line: getPoint.line },
+                });
+            }
+        }
+    }
+    return { context_vars: vars, findings };
+}
+//# sourceMappingURL=hono-context-flow.js.map

package/dist/tools/hono-context-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-context-flow.js","sourceRoot":"","sources":["../../src/tools/hono-context-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAchE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,QAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC;IAE/D,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAEtE,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAEjE,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ;QACnB,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAEvB,MAAM,QAAQ,GAAkC,EAAE,CAAC;IAEnD,uEAAuE;IACvE,4CAA4C;IAC5C,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC,cAAc;YAAE,SAAS,CAAC,2BAA2B;QAC5D,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACzC,KAAK,MAAM,QAAQ,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;YACrC,uCAAuC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;gBACxB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CACzC,CAAC;YACF,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,mEAAmE;YACnE,yCAAyC;YACzC,MAAM,YAAY,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;gBACzD,IAAI,EAAE,CAAC,KAAK,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAClC,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC9C,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC3C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;YACF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,0BAA0B;oBAChC,QAAQ,EAAE,EAAE,CAAC,IAAI;oBACjB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC"}

package/dist/tools/hono-dead-routes.d.ts

@@ -0,0 +1,26 @@
+/**
+ * find_dead_hono_routes — heuristically flags server routes that are not
+ * called by any Hono RPC client (`hc<AppType>(...).segment.$method(...)`)
+ * in the repo. Useful in monorepos with colocated server + client code
+ * during refactors: you can delete server routes that no client touches.
+ *
+ * HEURISTIC — best-effort. Does not follow dynamic path construction,
+ * does not understand route aliases. Documented via `note` in the result;
+ * callers should review before deleting.
+ *
+ * Spec: docs/specs/2026-04-11-hono-phase-2-plan.md (T12)
+ */
+export interface DeadRouteFinding {
+    route: string;
+    file: string;
+    line: number;
+    reason: "no_rpc_client_caller_found";
+}
+export interface DeadRoutesResult {
+    findings?: DeadRouteFinding[];
+    total?: number;
+    note?: string;
+    error?: string;
+}
+export declare function findDeadHonoRoutes(repo: string): Promise<DeadRoutesResult>;
+//# sourceMappingURL=hono-dead-routes.d.ts.map

package/dist/tools/hono-dead-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-dead-routes.d.ts","sourceRoot":"","sources":["../../src/tools/hono-dead-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,4BAA4B,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,gBAAgB,CAAC,CAiF3B"}

package/dist/tools/hono-dead-routes.js

@@ -0,0 +1,102 @@
+/**
+ * find_dead_hono_routes — heuristically flags server routes that are not
+ * called by any Hono RPC client (`hc<AppType>(...).segment.$method(...)`)
+ * in the repo. Useful in monorepos with colocated server + client code
+ * during refactors: you can delete server routes that no client touches.
+ *
+ * HEURISTIC — best-effort. Does not follow dynamic path construction,
+ * does not understand route aliases. Documented via `note` in the result;
+ * callers should review before deleting.
+ *
+ * Spec: docs/specs/2026-04-11-hono-phase-2-plan.md (T12)
+ */
+import { getCodeIndex } from "./index-tools.js";
+import { honoCache } from "../cache/hono-cache.js";
+import { HonoExtractor } from "../parser/extractors/hono.js";
+import { resolveHonoEntryFile } from "./hono-entry-resolver.js";
+import { detectFrameworks } from "../utils/framework-detect.js";
+import { relative } from "node:path";
+import { readFile } from "node:fs/promises";
+import { realpathSync } from "node:fs";
+import { walkDirectory } from "../utils/walk.js";
+const HEURISTIC_NOTE = "Heuristic grep-based scan. Flags routes whose path segments do not appear in any non-server .ts/.tsx/.js/.jsx source. False negatives are possible for dynamically-constructed paths; false positives are possible when route segments appear in unrelated code. Review before deleting.";
+export async function findDeadHonoRoutes(repo) {
+    const index = await getCodeIndex(repo);
+    if (!index)
+        return { error: `Repository "${repo}" not found` };
+    const frameworks = detectFrameworks(index);
+    if (!frameworks.has("hono"))
+        return { error: "No Hono app detected" };
+    const entryFile = resolveHonoEntryFile(index);
+    if (!entryFile)
+        return { error: "No Hono app entry file found" };
+    let model;
+    try {
+        model = await honoCache.get(repo, entryFile, new HonoExtractor());
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { error: `Failed to parse: ${msg}` };
+    }
+    // Candidate client files: every .ts/.tsx/.js/.jsx in the repo that the
+    // server parse didn't touch. Walk the filesystem directly — the symbol
+    // index may not include every TS file (e.g., client-only stubs), and
+    // we want full coverage of user code. Both sides are canonicalized via
+    // realpath because model.files_used comes from HonoExtractor.canonicalize
+    // while walkDirectory returns the raw path (mismatched on macOS where
+    // /tmp is a symlink to /private/tmp).
+    const canon = (p) => {
+        try {
+            return realpathSync(p);
+        }
+        catch {
+            return p;
+        }
+    };
+    const serverFiles = new Set(model.files_used.map(canon));
+    const allTsFiles = await walkDirectory(index.root, {
+        fileFilter: (ext) => /\.(tsx?|jsx?)$/.test(ext),
+    });
+    const candidateFiles = allTsFiles
+        .map(canon)
+        .filter((f) => !serverFiles.has(f));
+    const clientContents = [];
+    for (const file of candidateFiles) {
+        try {
+            clientContents.push(await readFile(file, "utf-8"));
+        }
+        catch {
+            // skip unreadable
+        }
+    }
+    const joined = clientContents.join("\n");
+    const findings = [];
+    for (const route of model.routes) {
+        // Extract significant segments (non-parameter, non-empty) from the path.
+        // `/api/users/:id` → ["api", "users"]
+        // `/:id` → []  (fully-dynamic path — can't reliably detect usage, skip)
+        const significantSegments = route.path
+            .split("/")
+            .filter((s) => s.length > 0 && !s.startsWith(":"));
+        if (significantSegments.length === 0)
+            continue;
+        // "Used" = every significant segment appears somewhere in the joined
+        // candidate source. Loose on purpose — we want high recall (fewer false
+        // positives of "this is dead") at the cost of false negatives.
+        const allSegmentsPresent = significantSegments.every((seg) => joined.includes(seg));
+        if (allSegmentsPresent)
+            continue;
+        findings.push({
+            route: `${route.method} ${route.path}`,
+            file: relative(index.root, route.file),
+            line: route.line,
+            reason: "no_rpc_client_caller_found",
+        });
+    }
+    return {
+        findings,
+        total: findings.length,
+        note: HEURISTIC_NOTE,
+    };
+}
+//# sourceMappingURL=hono-dead-routes.js.map

package/dist/tools/hono-dead-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-dead-routes.js","sourceRoot":"","sources":["../../src/tools/hono-dead-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAgBjD,MAAM,cAAc,GAClB,0RAA0R,CAAC;AAE7R,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC;IAE/D,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAEtE,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAEjE,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,0EAA0E;IAC1E,sEAAsE;IACtE,sCAAsC;IACtC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE;QACjD,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,UAAU;SAC9B,GAAG,CAAC,KAAK,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,cAAc,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,yEAAyE;QACzE,sCAAsC;QACtC,wEAAwE;QACxE,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI;aACnC,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE/C,qEAAqE;QACrE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3D,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CACrB,CAAC;QACF,IAAI,kBAAkB;YAAE,SAAS;QAEjC,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;YACtC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;YACtC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,4BAA4B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,IAAI,EAAE,cAAc;KACrB,CAAC;AACJ,CAAC"}

package/dist/tools/hono-entry-resolver.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Shared Hono entry-file resolution. Used by all 13 Hono tools to locate the
+ * `new Hono()` or `new OpenAPIHono()` instantiation in the indexed symbols.
+ *
+ * Previously this helper was copy-pasted into every tool file, violating DRY.
+ * A single bug in entry detection would have required 13 fixes; a single
+ * improvement required 13 edits.
+ */
+interface IndexSymbol {
+    source?: string | undefined;
+    file: string;
+}
+interface IndexLike {
+    symbols: IndexSymbol[];
+    root: string;
+}
+/**
+ * Resolve the entry file for a Hono app by scanning indexed symbol sources
+ * for `new Hono(...)` / `new OpenAPIHono(...)`. Returns the absolute path
+ * joined from index.root, or null if no such symbol exists.
+ *
+ * Uses first-match semantics. In a monorepo with multiple Hono apps, the
+ * caller is responsible for disambiguation (e.g. via workspace filter).
+ */
+export declare function resolveHonoEntryFile(index: IndexLike): string | null;
+export {};
+//# sourceMappingURL=hono-entry-resolver.d.ts.map

package/dist/tools/hono-entry-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-entry-resolver.d.ts","sourceRoot":"","sources":["../../src/tools/hono-entry-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,UAAU,WAAW;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,SAAS;IACjB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAQD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAOpE"}

package/dist/tools/hono-entry-resolver.js

@@ -0,0 +1,31 @@
+/**
+ * Shared Hono entry-file resolution. Used by all 13 Hono tools to locate the
+ * `new Hono()` or `new OpenAPIHono()` instantiation in the indexed symbols.
+ *
+ * Previously this helper was copy-pasted into every tool file, violating DRY.
+ * A single bug in entry detection would have required 13 fixes; a single
+ * improvement required 13 edits.
+ */
+import { join } from "node:path";
+/**
+ * Regex matches `new Hono()`, `new Hono<...>()`, `new OpenAPIHono()`, and
+ * `new OpenAPIHono<...>()` — all covered by an optional generic-arg block.
+ */
+const HONO_INSTANTIATION = /new\s+(?:Hono|OpenAPIHono)\s*(?:<[^>]*>)?\s*\(/;
+/**
+ * Resolve the entry file for a Hono app by scanning indexed symbol sources
+ * for `new Hono(...)` / `new OpenAPIHono(...)`. Returns the absolute path
+ * joined from index.root, or null if no such symbol exists.
+ *
+ * Uses first-match semantics. In a monorepo with multiple Hono apps, the
+ * caller is responsible for disambiguation (e.g. via workspace filter).
+ */
+export function resolveHonoEntryFile(index) {
+    for (const sym of index.symbols) {
+        if (sym.source && HONO_INSTANTIATION.test(sym.source)) {
+            return join(index.root, sym.file);
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=hono-entry-resolver.js.map

package/dist/tools/hono-entry-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-entry-resolver.js","sourceRoot":"","sources":["../../src/tools/hono-entry-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAYjC;;;GAGG;AACH,MAAM,kBAAkB,GAAG,gDAAgD,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tools/hono-env-regression.d.ts

@@ -0,0 +1,29 @@
+/**
+ * detect_middleware_env_regression — static check for the Issue #3587 pattern:
+ * in a chain of 3+ middleware, intermediate entries declared with plain
+ * `createMiddleware(...)` (no Env generic) reset the accumulated Env type
+ * back to BlankEnv. Downstream middleware then can't see the custom bindings.
+ *
+ * Best-effort heuristic — regex over middleware declaration files, not a
+ * real type checker. Flags candidates for manual review rather than hard
+ * assertions, and documents this in the result `note` field.
+ *
+ * Spec: docs/specs/2026-04-11-hono-phase-2-plan.md (T10)
+ */
+export interface EnvRegressionFinding {
+    chain_scope: string;
+    chain_length: number;
+    middleware_name: string;
+    file: string;
+    /** First line in the file where the plain createMiddleware( call occurs. */
+    line: number;
+    reason: "plain_createMiddleware_no_generic";
+}
+export interface EnvRegressionResult {
+    findings?: EnvRegressionFinding[];
+    total?: number;
+    note?: string;
+    error?: string;
+}
+export declare function detectMiddlewareEnvRegression(repo: string): Promise<EnvRegressionResult>;
+//# sourceMappingURL=hono-env-regression.d.ts.map

package/dist/tools/hono-env-regression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-env-regression.d.ts","sourceRoot":"","sources":["../../src/tools/hono-env-regression.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mCAAmC,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAkBD,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CA6D9B"}

package/dist/tools/hono-env-regression.js

@@ -0,0 +1,157 @@
+/**
+ * detect_middleware_env_regression — static check for the Issue #3587 pattern:
+ * in a chain of 3+ middleware, intermediate entries declared with plain
+ * `createMiddleware(...)` (no Env generic) reset the accumulated Env type
+ * back to BlankEnv. Downstream middleware then can't see the custom bindings.
+ *
+ * Best-effort heuristic — regex over middleware declaration files, not a
+ * real type checker. Flags candidates for manual review rather than hard
+ * assertions, and documents this in the result `note` field.
+ *
+ * Spec: docs/specs/2026-04-11-hono-phase-2-plan.md (T10)
+ */
+import { getCodeIndex } from "./index-tools.js";
+import { honoCache } from "../cache/hono-cache.js";
+import { HonoExtractor } from "../parser/extractors/hono.js";
+import { detectFrameworks } from "../utils/framework-detect.js";
+import { join, dirname, resolve as pathResolve } from "node:path";
+import { readFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+const HEURISTIC_NOTE = "Heuristic regex scan; false positives possible when middleware factories wrap createMiddleware or re-export it under a different name. Review each finding before typing changes.";
+/**
+ * Regex explanation:
+ *   \bcreateMiddleware   → word-boundary before the token
+ *   (?!\s*<)             → negative lookahead — NOT followed by `<` (generic arg)
+ *   \s*\(                → open paren of the call
+ *
+ * Matches:  createMiddleware(async (c, next) => ...)
+ *           createMiddleware  (async (c, next) => ...)
+ * Does not match:  createMiddleware<AppEnv>(...)
+ *                  createMiddleware< { Bindings: ... } >(...)
+ */
+const PLAIN_CREATE_MIDDLEWARE = /\bcreateMiddleware(?!\s*<)\s*\(/g;
+export async function detectMiddlewareEnvRegression(repo) {
+    const index = await getCodeIndex(repo);
+    if (!index)
+        return { error: `Repository "${repo}" not found` };
+    const frameworks = detectFrameworks(index);
+    if (!frameworks.has("hono"))
+        return { error: "No Hono app detected" };
+    const entryFile = resolveHonoEntryFile(index);
+    if (!entryFile)
+        return { error: "No Hono app entry file found" };
+    let model;
+    try {
+        model = await honoCache.get(repo, entryFile, new HonoExtractor());
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { error: `Failed to parse: ${msg}` };
+    }
+    const findings = [];
+    // Cache file scans so a middleware file shared across chains is only read once.
+    const fileScanCache = new Map();
+    for (const chain of model.middleware_chains) {
+        if (chain.entries.length < 3)
+            continue;
+        // Intermediate entries: exclude first + last (those are endpoints of the chain).
+        // We only suspect regression on entries that sit between custom-typed middleware.
+        const intermediates = chain.entries.slice(1, -1);
+        for (const entry of intermediates) {
+            if (entry.is_third_party)
+                continue;
+            if (entry.inline)
+                continue;
+            // Resolve the DEFINITION file — entry.file is the caller (app.use site).
+            // If the entry was imported from a relative path, resolve it; otherwise
+            // fall back to scanning the caller file (local definitions).
+            const definitionFile = resolveDefinitionFile(entry.file, entry.imported_from);
+            if (!definitionFile)
+                continue;
+            let hits = fileScanCache.get(definitionFile);
+            if (!hits) {
+                hits = await scanFileForPlainCreateMiddleware(definitionFile);
+                fileScanCache.set(definitionFile, hits);
+            }
+            if (hits.length === 0)
+                continue;
+            // Report the first hit — a file may contain many, but the chain-level
+            // signal is "this middleware file has at least one regression candidate".
+            const first = hits[0];
+            if (!first)
+                continue;
+            findings.push({
+                chain_scope: chain.scope,
+                chain_length: chain.entries.length,
+                middleware_name: entry.name,
+                file: definitionFile,
+                line: first.line,
+                reason: "plain_createMiddleware_no_generic",
+            });
+        }
+    }
+    return {
+        findings,
+        total: findings.length,
+        note: HEURISTIC_NOTE,
+    };
+}
+/**
+ * Resolve the file that defines a middleware based on the caller file and
+ * the optional import specifier. Returns the absolute path, or null if the
+ * import specifier is third-party (bare module) or can't be resolved on disk.
+ */
+function resolveDefinitionFile(callerFile, importSpec) {
+    if (!importSpec) {
+        // No import record — middleware is defined in the same file as the caller.
+        return existsSync(callerFile) ? callerFile : null;
+    }
+    if (!importSpec.startsWith(".")) {
+        // Bare module specifier — third-party, nothing to scan.
+        return null;
+    }
+    const base = pathResolve(dirname(callerFile), importSpec);
+    const candidates = [
+        base,
+        `${base}.ts`,
+        `${base}.tsx`,
+        `${base}.js`,
+        `${base}.jsx`,
+        join(base, "index.ts"),
+        join(base, "index.tsx"),
+        join(base, "index.js"),
+        join(base, "index.jsx"),
+    ];
+    for (const candidate of candidates) {
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+async function scanFileForPlainCreateMiddleware(file) {
+    let source;
+    try {
+        source = await readFile(file, "utf-8");
+    }
+    catch {
+        return [];
+    }
+    const hits = [];
+    // Reset regex state per scan (global flag retains lastIndex).
+    PLAIN_CREATE_MIDDLEWARE.lastIndex = 0;
+    let m;
+    while ((m = PLAIN_CREATE_MIDDLEWARE.exec(source)) !== null) {
+        const line = source.slice(0, m.index).split("\n").length;
+        hits.push({ line });
+    }
+    return hits;
+}
+function resolveHonoEntryFile(index) {
+    for (const sym of index.symbols) {
+        if (sym.source && /new\s+(?:Hono|OpenAPIHono)\s*(?:<[^>]*>)?\s*\(/.test(sym.source)) {
+            return join(index.root, sym.file);
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=hono-env-regression.js.map

package/dist/tools/hono-env-regression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-env-regression.js","sourceRoot":"","sources":["../../src/tools/hono-env-regression.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAmBrC,MAAM,cAAc,GAClB,mLAAmL,CAAC;AAEtL;;;;;;;;;;GAUG;AACH,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC;IAE/D,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAEtE,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAEjE,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,gFAAgF;IAChF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEjE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACvC,iFAAiF;QACjF,kFAAkF;QAClF,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,cAAc;gBAAE,SAAS;YACnC,IAAI,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC3B,yEAAyE;YACzE,wEAAwE;YACxE,6DAA6D;YAC7D,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9E,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IAAI,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,MAAM,gCAAgC,CAAC,cAAc,CAAC,CAAC;gBAC9D,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,sEAAsE;YACtE,0EAA0E;YAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,KAAK,CAAC,KAAK;gBACxB,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;gBAClC,eAAe,EAAE,KAAK,CAAC,IAAI;gBAC3B,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,mCAAmC;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,IAAI,EAAE,cAAc;KACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,UAAkB,EAClB,UAA8B;IAE9B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,2EAA2E;QAC3E,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,wDAAwD;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG;QACjB,IAAI;QACJ,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,MAAM;QACb,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,MAAM;QACb,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;KACxB,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,IAAY;IAEZ,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,8DAA8D;IAC9D,uBAAuB,CAAC,SAAS,GAAG,CAAC,CAAC;IACtC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAG7B;IACC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,IAAI,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tools/hono-inline-analyze.d.ts

@@ -0,0 +1,31 @@
+/**
+ * analyze_inline_handler — returns structured body analysis for a specific
+ * inline handler. Consumes HonoRoute.inline_analysis populated by T3.
+ *
+ * Closes blog API demo gap #1: all 7 blog routes are (c) => c.json(...) inline
+ * arrows, and Phase 1 reported them as opaque "<inline>" handlers with zero
+ * introspection. With this tool, callers can ask "what does GET /users/:id do?"
+ * and get responses, errors, DB calls, fetch calls, context access, and
+ * validators — all statically extracted.
+ *
+ * Spec: docs/specs/2026-04-11-hono-phase-2-plan.md (T8)
+ */
+import type { InlineHandlerAnalysis } from "../parser/extractors/hono-model.js";
+export interface InlineHandlerReport {
+    route: string;
+    file: string;
+    line: number;
+    analysis: InlineHandlerAnalysis;
+}
+export interface InlineHandlerResult {
+    reports?: InlineHandlerReport[];
+    total?: number;
+    error?: string;
+}
+/**
+ * @param repo repository identifier
+ * @param method optional HTTP method filter (e.g. "GET"); case-insensitive
+ * @param path optional path filter (e.g. "/users/:id"); exact match
+ */
+export declare function analyzeInlineHandler(repo: string, method?: string, routePath?: string): Promise<InlineHandlerResult>;
+//# sourceMappingURL=hono-inline-analyze.d.ts.map

package/dist/tools/hono-inline-analyze.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-inline-analyze.d.ts","sourceRoot":"","sources":["../../src/tools/hono-inline-analyze.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAEhF,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,mBAAmB,CAAC,CAiC9B"}