codesift-mcp 0.3.0 → 0.5.0

package/dist/utils/react-alias.js

@@ -0,0 +1,31 @@
+/**
+ * React/Vite/Next.js path alias resolver — heuristic.
+ *
+ * Resolves `@/components/Foo` to a real file path within the repo without
+ * parsing tsconfig.json. Tries common conventions: src/, lib/, then root.
+ *
+ * Returns null for non-aliased imports (anything not starting with "@/").
+ *
+ * Used by trace_component_tree and React-aware analysis to bridge the gap
+ * between import statements and actual file locations.
+ */
+const TS_EXTENSIONS = [".tsx", ".jsx", ".ts", ".js", "/index.tsx", "/index.jsx", "/index.ts", "/index.js"];
+const ROOT_CANDIDATES = ["src", "lib"];
+export function resolveAlias(importPath, files) {
+    if (!importPath.startsWith("@/"))
+        return null;
+    const rest = importPath.slice(2);
+    // Try src/, lib/, then root (no prefix)
+    const bases = [...ROOT_CANDIDATES.map((r) => `${r}/${rest}`), rest];
+    // Build a Set for O(1) lookup — files list can be large
+    const fileSet = new Set(files.map((f) => f.path));
+    for (const base of bases) {
+        for (const ext of TS_EXTENSIONS) {
+            const target = base + ext;
+            if (fileSet.has(target))
+                return target;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=react-alias.js.map

package/dist/utils/react-alias.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-alias.js","sourceRoot":"","sources":["../../src/utils/react-alias.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAC3G,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAEvC,MAAM,UAAU,YAAY,CAC1B,UAAkB,EAClB,KAAyB;IAEzB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjC,wCAAwC;IACxC,MAAM,KAAK,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAEpE,wDAAwD;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC;YAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/test-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-file.d.ts","sourceRoot":"","sources":["../../src/utils/test-file.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D"}
+{"version":3,"file":"test-file.d.ts","sourceRoot":"","sources":["../../src/utils/test-file.ts"],"names":[],"mappings":"AAsBA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D"}

package/dist/utils/test-file.js

@@ -1,6 +1,7 @@
 /** Test file patterns — shared between BM25 scoring and call graph filtering */
 const TEST_FILE_PATTERNS = [
     ".test.", ".spec.", "__tests__/", "test/mocks", "test-utils", "test-helpers",
+    "Test.kt", "Tests.kt", "Spec.kt",
 ];
 /** Regex-based test file patterns for stricter matching (e.g., call graph filtering) */
 const TEST_FILE_REGEX_PATTERNS = [
@@ -10,6 +11,12 @@ const TEST_FILE_REGEX_PATTERNS = [
     /\/__tests__\//,
     /\/test\//,
     /\/tests\//,
+    // Kotlin test conventions
+    /Test\.kts?$/, // UserTest.kt, LoginTest.kts
+    /Tests\.kts?$/, // UserTests.kt
+    /Spec\.kts?$/, // Kotest: UserSpec.kt
+    /\/androidTest\//, // Android instrumented tests
+    /\/commonTest\//, // Kotlin Multiplatform common tests
 ];
 /**
  * Check if a file path looks like a test file using substring matching.

package/dist/utils/test-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-file.js","sourceRoot":"","sources":["../../src/utils/test-file.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc;CAC7E,CAAC;AAEF,wFAAwF;AACxF,MAAM,wBAAwB,GAAG;IAC/B,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,WAAW;CACZ,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"test-file.js","sourceRoot":"","sources":["../../src/utils/test-file.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc;IAC5E,SAAS,EAAE,UAAU,EAAE,SAAS;CACjC,CAAC;AAEF,wFAAwF;AACxF,MAAM,wBAAwB,GAAG;IAC/B,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,WAAW;IACX,0BAA0B;IAC1B,aAAa,EAAY,6BAA6B;IACtD,cAAc,EAAW,eAAe;IACxC,aAAa,EAAY,sBAAsB;IAC/C,iBAAiB,EAAQ,6BAA6B;IACtD,gBAAgB,EAAS,oCAAoC;CAC9D,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/utils/walk.d.ts

@@ -8,6 +8,16 @@ export declare const IGNORE_DIRS: Set<string>;
  * e.g., "node_modules" -> "**\/node_modules/**"
  */
 export declare function toIgnorePatterns(): string[];
+/**
+ * Backup and editor-generated files to exclude by default.
+ * These patterns commonly appear in working directories and cause:
+ * - Index duplication (e.g. Mobi2 had Survey.php + Survey copy.php)
+ * - False references pointing at backup files
+ * - Wasted parser time on abandoned code
+ *
+ * Disabled with env var CODESIFT_INCLUDE_BACKUPS=1.
+ */
+export declare const BACKUP_FILE_PATTERNS: RegExp[];
 export interface WalkOptions {
     /**
      * When provided, only files whose relative path starts with one of these
@@ -36,6 +46,18 @@ export interface WalkOptions {
      * When `false` (default) the returned paths are absolute.
      */
     relative?: boolean | undefined;
+    /**
+     * When `true`, follow symlinks and walk their targets.
+     * Cycle detection via inode tracking prevents infinite loops.
+     * Defaults to `false`.
+     */
+    followSymlinks?: boolean | undefined;
+    /**
+     * Glob patterns to exclude (like .gitignore syntax).
+     * Matched against relative paths using picomatch.
+     * Example: ["dist/**", "*.generated.ts"]
+     */
+    excludePatterns?: string[] | undefined;
 }
 /**
  * Walk a directory tree collecting files.

package/dist/utils/walk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../../src/utils/walk.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,eAAO,MAAM,WAAW,aAMtB,CAAC;AAEH;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAID,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAEpC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEjC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IAEnE;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAgEnB"}
+{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../../src/utils/walk.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,eAAO,MAAM,WAAW,aAMtB,CAAC;AAEH;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAQxC,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAEpC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEjC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IAEnE;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE/B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAErC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACxC;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAiHnB"}

package/dist/utils/walk.js

@@ -1,5 +1,6 @@
 import { readdir, stat } from "node:fs/promises";
 import { join, relative, extname } from "node:path";
+import picomatch from "picomatch";
 /**
  * Directories to skip during filesystem walks.
  * Shared by index-tools, search-tools, and (via toIgnorePatterns) watcher.
@@ -19,6 +20,24 @@ export function toIgnorePatterns() {
     return [...IGNORE_DIRS].map((dir) => `**/${dir}/**`);
 }
 const DEFAULT_MAX_FILE_SIZE = 1_000_000; // 1MB
+/**
+ * Backup and editor-generated files to exclude by default.
+ * These patterns commonly appear in working directories and cause:
+ * - Index duplication (e.g. Mobi2 had Survey.php + Survey copy.php)
+ * - False references pointing at backup files
+ * - Wasted parser time on abandoned code
+ *
+ * Disabled with env var CODESIFT_INCLUDE_BACKUPS=1.
+ */
+export const BACKUP_FILE_PATTERNS = [
+    /copy\.php$/i, // macOS Finder "Duplicate" output
+    /\.bak$/i, // generic backup
+    /\.orig$/i, // merge conflict leftover
+    /~$/, // emacs/joe backup
+    /\.swp$/i, // vim swap
+    /\.swo$/i, // vim swap
+    /\.DS_Store$/, // macOS finder metadata
+];
 /**
  * Walk a directory tree collecting files.
  * Skips directories listed in IGNORE_DIRS and hidden directories (dot-prefixed).
@@ -30,7 +49,20 @@ export async function walkDirectory(rootPath, options) {
     const fileFilter = options?.fileFilter;
     const includePaths = options?.includePaths;
     const useRelative = options?.relative ?? false;
+    const followSymlinks = options?.followSymlinks ?? false;
+    const visitedInodes = new Set();
     let limitReached = false;
+    // Compile exclude patterns once (picomatch)
+    let isExcluded = null;
+    if (options?.excludePatterns && options.excludePatterns.length > 0) {
+        try {
+            isExcluded = picomatch(options.excludePatterns, { dot: true });
+        }
+        catch {
+            // Malformed patterns — warn and skip filtering
+            console.warn("[codesift] walkDirectory: invalid excludePatterns, ignoring");
+        }
+    }
     async function walk(dirPath) {
         if (limitReached)
             return;
@@ -45,14 +77,44 @@ export async function walkDirectory(rootPath, options) {
             if (limitReached)
                 return;
             const fullPath = join(dirPath, entry.name);
-            if (entry.isDirectory()) {
+            const isSymlink = entry.isSymbolicLink();
+            let isDir = entry.isDirectory();
+            let isFile = entry.isFile();
+            // Resolve symlinks when followSymlinks is enabled
+            if (isSymlink && followSymlinks) {
+                try {
+                    const resolved = await stat(fullPath);
+                    const ino = resolved.ino;
+                    if (visitedInodes.has(ino)) {
+                        // Cycle detected — skip
+                        continue;
+                    }
+                    visitedInodes.add(ino);
+                    isDir = resolved.isDirectory();
+                    isFile = resolved.isFile();
+                }
+                catch {
+                    // Broken symlink — skip silently
+                    continue;
+                }
+            }
+            else if (isSymlink) {
+                // Not following symlinks — skip
+                continue;
+            }
+            if (isDir) {
                 if (IGNORE_DIRS.has(entry.name) || entry.name.startsWith(".")) {
                     continue;
                 }
                 await walk(fullPath);
             }
-            else if (entry.isFile()) {
+            else if (isFile) {
                 const ext = extname(entry.name);
+                // Exclude backup / editor-generated files unless env var opts out.
+                // Checked before file filter so the noise never reaches the caller.
+                if (process.env.CODESIFT_INCLUDE_BACKUPS !== "1" &&
+                    BACKUP_FILE_PATTERNS.some((re) => re.test(entry.name)))
+                    continue;
                 // Apply caller's file filter (e.g. language check, binary exclusion)
                 if (fileFilter && !fileFilter(ext, entry.name))
                     continue;
@@ -63,6 +125,12 @@ export async function walkDirectory(rootPath, options) {
                     if (!matches)
                         continue;
                 }
+                // Apply exclude patterns
+                if (isExcluded) {
+                    const relPath = relative(rootPath, fullPath);
+                    if (isExcluded(relPath))
+                        continue;
+                }
                 // Skip files that are too large
                 try {
                     const fileStat = await stat(fullPath);

package/dist/utils/walk.js.map

@@ -1 +1 @@
-{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../src/utils/walk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU;IACnD,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe;IACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ;IAChD,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc;IACvD,kBAAkB,EAAE,SAAS;CAC9B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,qBAAqB,GAAG,SAAS,CAAC,CAAC,MAAM;AAoC/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAqB;IAErB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,qBAAqB,CAAC;IAClE,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;IACvC,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC;IAC/C,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,UAAU,IAAI,CAAC,OAAe;QACjC,IAAI,YAAY;YAAE,OAAO;QAEzB,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,0BAA0B;QACpC,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,YAAY;gBAAE,OAAO;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9D,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAEhC,qEAAqE;gBACrE,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAEzD,uCAAuC;gBACvC,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChE,IAAI,CAAC,OAAO;wBAAE,SAAS;gBACzB,CAAC;gBAED,gCAAgC;gBAChC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,QAAQ,CAAC,IAAI,GAAG,WAAW;wBAAE,SAAS;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAElE,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CACV,qCAAqC,QAAQ,wCAAwC,CACtF,CAAC;oBACF,YAAY,GAAG,IAAI,CAAC;oBACpB,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../src/utils/walk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU;IACnD,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe;IACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ;IAChD,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc;IACvD,kBAAkB,EAAE,SAAS;CAC9B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,qBAAqB,GAAG,SAAS,CAAC,CAAC,MAAM;AAE/C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC5C,aAAa,EAAQ,kCAAkC;IACvD,SAAS,EAAY,iBAAiB;IACtC,UAAU,EAAW,0BAA0B;IAC/C,IAAI,EAAiB,mBAAmB;IACxC,SAAS,EAAY,WAAW;IAChC,SAAS,EAAY,WAAW;IAChC,aAAa,EAAQ,wBAAwB;CAC9C,CAAC;AAkDF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAqB;IAErB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,qBAAqB,CAAC;IAClE,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;IACvC,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC;IAC/C,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,4CAA4C;IAC5C,IAAI,UAAU,GAAuC,IAAI,CAAC;IAC1D,IAAI,OAAO,EAAE,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,OAAO,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,OAAe;QACjC,IAAI,YAAY;YAAE,OAAO;QAEzB,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,0BAA0B;QACpC,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,YAAY;gBAAE,OAAO;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3C,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;YACzC,IAAI,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAChC,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAE5B,kDAAkD;YAClD,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;oBACzB,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC3B,wBAAwB;wBACxB,SAAS;oBACX,CAAC;oBACD,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvB,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC/B,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;oBACjC,SAAS;gBACX,CAAC;YACH,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,gCAAgC;gBAChC,SAAS;YACX,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9D,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAEhC,mEAAmE;gBACnE,oEAAoE;gBACpE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG;oBAC5C,oBAAoB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAErE,qEAAqE;gBACrE,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAEzD,uCAAuC;gBACvC,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChE,IAAI,CAAC,OAAO;wBAAE,SAAS;gBACzB,CAAC;gBAED,yBAAyB;gBACzB,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC7C,IAAI,UAAU,CAAC,OAAO,CAAC;wBAAE,SAAS;gBACpC,CAAC;gBAED,gCAAgC;gBAChC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,QAAQ,CAAC,IAAI,GAAG,WAAW;wBAAE,SAAS;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAElE,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CACV,qCAAqC,QAAQ,wCAAwC,CACtF,CAAC;oBACF,YAAY,GAAG,IAAI,CAAC;oBACpB,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "codesift-mcp",
-  "version": "0.3.0",
-  "description": "MCP server for code intelligence — 66 tools for symbol search, call graph, semantic search, route tracing, community detection, LSP bridge, secret detection, and conversation search",
+  "version": "0.5.0",
+  "description": "MCP server for code intelligence — 106 tools for symbol search, call graph, semantic search, route tracing, community detection, LSP bridge, secret detection, conversation search, and Hono framework intelligence",
   "license": "BSL-1.1",
   "author": "Greg Laskowski",
   "type": "module",
@@ -27,10 +27,11 @@
     "lint": "tsc --noEmit",
     "download-wasm": "tsx scripts/download-wasm.ts",
     "prepublishOnly": "npm run build && npm test",
-    "postinstall": "echo '\n  ✨ CodeSift MCP installed. Run setup for your platform:\n\n     codesift setup claude    # Claude Code\n     codesift setup cursor    # Cursor\n     codesift setup codex     # Codex CLI\n     codesift setup gemini    # Gemini CLI\n     codesift setup all       # All platforms\n'"
+    "postinstall": "echo '\n  ✨ CodeSift MCP installed. Run setup for your platform:\n\n     codesift setup claude       # Claude Code\n     codesift setup cursor       # Cursor\n     codesift setup codex        # Codex CLI\n     codesift setup gemini       # Gemini CLI\n     codesift setup antigravity  # Google Antigravity\n     codesift setup all          # All platforms\n'"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
+    "@mrleebo/prisma-ast": "^0.15.0",
     "@sanity-labs/secret-scan": "^1.1.0",
     "chokidar": "^4.0.0",
     "ignore": "^6.0.0",

package/rules/codesift.md

@@ -21,15 +21,16 @@ The `repo` param is optional — it auto-resolves from CWD. Just call CodeSift t
 
 ## Tool Discovery
 
-**66 MCP tools total** (35 core visible + 31 discoverable).
+**146 MCP tools total** (51 core visible + 95 discoverable).
 
-35 core tools appear in ListTools. Remaining 31 niche tools are discovered on demand:
+51 core tools appear in ListTools. The remaining 95 niche tools are discovered on demand:
 
-- `discover_tools(query="dead code")` — keyword search across all 66 tools
+- `plan_turn(query="find dead code in auth")` — natural-language router: ranked tool/symbol/file recommendations with auto-reveal of hidden tools (preferred entry point at start of a task)
+- `discover_tools(query="dead code")` — keyword search across all 146 tools
 - `describe_tools(names=["find_dead_code"])` — get full parameter schema
 - `describe_tools(names=["find_dead_code"], reveal=true)` — also reveal in ListTools
 
-Core tools (35) always visible — includes search, symbols, context, analysis, architecture, conversations, and meta tools. Use `discover_tools` for niche tools like `classify_roles`, `find_unused_imports`, `rename_symbol`, `ast_query`, etc.
+Core tools (51) always visible — includes search, symbols, context, analysis, architecture, conversations, meta, and `plan_turn`. Use `plan_turn` when you don't know which tool fits the task. Use `discover_tools` for direct keyword search over niche tools like `classify_roles`, `find_unused_imports`, `rename_symbol`, `ast_query`, `find_perf_hotspots`, `fan_in_fan_out`, `architecture_summary`, `explain_query`, etc.
 
 ## Tool Mapping
 
@@ -73,6 +74,56 @@ Use this table to pick the right tool for each task:
 | index conversations | `index_conversations` |
 | structural diff | `diff_outline(since=)` |
 | what changed | `changed_symbols(since=)` |
+| start of task / unclear where to begin | `plan_turn(query=...)` |
+| React component tree | `trace_component_tree` |
+| React hook analysis | `analyze_hooks` |
+| React re-render analysis | `analyze_renders` |
+| React context graph | `analyze_context_graph` |
+| find components | `search_symbols(kind="component")` |
+| find hooks | `search_symbols(kind="hook")` |
+| Astro islands/hydration | `astro_analyze_islands` |
+| Astro hydration audit | `astro_hydration_audit` |
+| Astro route map | `astro_route_map` |
+| Astro config analysis | `astro_config_analyze` |
+| Next.js full audit | `framework_audit` |
+| route map + rendering | `nextjs_route_map` |
+| SEO / metadata gaps | `nextjs_metadata_audit` |
+| server actions security | `framework_audit(checks=["server-actions"])` |
+| API contract extraction | `framework_audit(checks=["api-contract"])` |
+| client boundary / bundle | `framework_audit(checks=["boundary"])` |
+| broken internal links | `framework_audit(checks=["link-integrity"])` |
+| data fetch waterfalls | `framework_audit(checks=["data-flow"])` |
+| middleware coverage gaps | `framework_audit(checks=["middleware"])` |
+| server vs client classify | `framework_audit(checks=["components"])` |
+| Python project health audit | `python_audit` (compound: 8 checks, health score) |
+| Django/Flask/FastAPI routes | `trace_route(path="/api/users")` |
+| Python anti-patterns | `search_patterns("mutable-default"\|"bare-except"\|"eval-exec"\|"shell-true"\|"pickle-load"\|"n-plus-one-django")` |
+| async/await pitfalls | `analyze_async_correctness` (blocking requests/sleep, sync ORM in async) |
+| FastAPI Depends() graph | `trace_fastapi_depends` (Security, scopes, yield deps) |
+| Pydantic model schemas | `get_pydantic_models(output_format="mermaid")` |
+| Django/SQLAlchemy ORM graph | `get_model_graph` |
+| Django settings security audit | `analyze_django_settings` (15 checks) |
+| pytest fixture graph | `get_test_fixtures` (conftest hierarchy, scope, autouse) |
+| Celery task + canvas tracing | `python_audit(checks=["celery"])` |
+| Django signals / Celery / middleware | `find_framework_wiring` |
+| Python cross-module callers | `find_python_callers(target_name=)` |
+| Python circular imports | `python_audit(checks=["circular-imports"])` |
+| run Ruff on Python | `run_ruff(categories=["B","PERF","SIM","S"])` |
+| run mypy / pyright | `run_mypy` or `run_pyright` |
+| parse pyproject.toml | `parse_pyproject` |
+| Python dep freshness + CVEs | `analyze_python_deps(check_pypi=true, check_vulns=true)` |
+| Hono full overview | `analyze_hono_app` |
+| Hono middleware chain (route/scope/app-wide modes) | `trace_middleware_chain` |
+| Hono conditional middleware (applied_when) | `trace_middleware_chain(only_conditional=true)` |
+| Hono inline handler analysis | `analyze_inline_handler` |
+| Hono context variables | `trace_context_flow` |
+| Hono API contract / OpenAPI | `extract_api_contract` |
+| Hono response types (Issue #4270) | `extract_response_types` |
+| Hono RPC types / Issue #3869 | `trace_rpc_types` |
+| Hono security + env-regression audit / #3587 | `audit_hono_security` |
+| Hono architecture modules / #4121 | `detect_hono_modules` |
+| Hono dead routes | `find_dead_hono_routes` |
+| Hono route visualization | `visualize_hono_routes` |
 
 ## When to Use (Situational Triggers)
 
@@ -103,6 +154,21 @@ Use this table to pick the right tool for each task:
 | security audit | `scan_secrets(min_confidence="high")` |
 | code audit | `search_patterns("empty-catch")` |
 | past decisions | `find_conversations_for_symbol` |
+| starting a task, want tool recommendations | `plan_turn(query=...)` |
+| React codebase | `trace_component_tree("App")` + `analyze_hooks` |
+| React anti-patterns | `search_patterns("hook-in-condition")` |
+| React call graph (clean) | `trace_call_chain(filter_react_hooks=true)` |
+| new Next.js project (first look) | `framework_audit` |
+| SEO audit / metadata review | `nextjs_metadata_audit` |
+| security review (Next.js) | `framework_audit(checks=["server-actions"])` |
+| rendering strategy check | `nextjs_route_map` |
+| bundle size concerns | `framework_audit(checks=["boundary"])` |
+| new Hono project (first look) | `analyze_hono_app` |
+| Hono middleware order bug | `trace_middleware_chain` |
+| Hono auth false positive (blog pattern) | `trace_middleware_chain(only_conditional=true)` |
+| Hono handler introspection | `analyze_inline_handler` |
+| Hono RPC compile time slow | `trace_rpc_types` (flags Issue #3869 slow pattern) |
+| Hono enterprise architecture | `detect_hono_modules` (Issue #4121) |
 
 ## Key Parameters
 
@@ -110,7 +176,7 @@ Use this table to pick the right tool for each task:
 - `detail_level="compact"` — locations only (~15 tok/result vs ~150 default)
 - `token_budget=N` — cap output instead of guessing `top_k`
 - `file_pattern=` — always pass when scope is known (e.g. `"*.ts"`, `"src/tools/"`)
-- `kind=` — filter by type: `function`, `class`, `type`, `interface`
+- `kind=` — filter by type: `function`, `class`, `type`, `interface`, `component`, `hook`
 - `include_source=true` — include source code in results
 
 ### search_text

package/rules/codesift.mdc

@@ -15,15 +15,16 @@ For multi-repo sessions, call `list_repos()` to discover available repos.
 
 ## Tool Discovery
 
-**66 MCP tools total** (35 core visible + 31 discoverable).
+**146 MCP tools total** (51 core visible + 95 discoverable).
 
-35 core tools appear in ListTools. Remaining 31 niche tools are discovered on demand:
+51 core tools appear in ListTools. The remaining 95 niche tools are discovered on demand:
 
-- `discover_tools(query="dead code")` — keyword search across all 66 tools
+- `plan_turn(query="...")` — natural-language router with auto-reveal (preferred start-of-task entry point)
+- `discover_tools(query="dead code")` — keyword search across all 146 tools
 - `describe_tools(names=["find_dead_code"])` — get full parameter schema
 - `describe_tools(names=["find_dead_code"], reveal=true)` — also reveal in ListTools
 
-Core tools (35) always visible — includes search, symbols, context, analysis, architecture, conversations, and meta tools. Use `discover_tools` for niche tools like `classify_roles`, `find_unused_imports`, `rename_symbol`, `ast_query`, etc.
+Core tools (51) always visible — includes search, symbols, context, analysis, architecture, conversations, meta, and `plan_turn`. Use `discover_tools` for niche tools like `classify_roles`, `find_unused_imports`, `rename_symbol`, `ast_query`, etc.
 
 ## Tool Mapping
 
@@ -67,6 +68,56 @@ Use this table to pick the right tool for each task:
 | index conversations | `index_conversations` |
 | structural diff | `diff_outline(since=)` |
 | what changed | `changed_symbols(since=)` |
+| start of task / unclear where to begin | `plan_turn(query=...)` |
+| React component tree | `trace_component_tree` |
+| React hook analysis | `analyze_hooks` |
+| React re-render analysis | `analyze_renders` |
+| React context graph | `analyze_context_graph` |
+| find components | `search_symbols(kind="component")` |
+| find hooks | `search_symbols(kind="hook")` |
+| Astro islands/hydration | `astro_analyze_islands` |
+| Astro hydration audit | `astro_hydration_audit` |
+| Astro route map | `astro_route_map` |
+| Astro config analysis | `astro_config_analyze` |
+| Next.js full audit | `framework_audit` |
+| route map + rendering | `nextjs_route_map` |
+| SEO / metadata gaps | `nextjs_metadata_audit` |
+| server actions security | `framework_audit(checks=["server-actions"])` |
+| API contract extraction | `framework_audit(checks=["api-contract"])` |
+| client boundary / bundle | `framework_audit(checks=["boundary"])` |
+| broken internal links | `framework_audit(checks=["link-integrity"])` |
+| data fetch waterfalls | `framework_audit(checks=["data-flow"])` |
+| middleware coverage gaps | `framework_audit(checks=["middleware"])` |
+| server vs client classify | `framework_audit(checks=["components"])` |
+| Python project health audit | `python_audit` (compound: 8 checks, health score) |
+| Django/Flask/FastAPI routes | `trace_route(path="/api/users")` |
+| Python anti-patterns | `search_patterns("mutable-default"\|"bare-except"\|"eval-exec"\|"shell-true"\|"pickle-load"\|"n-plus-one-django")` |
+| async/await pitfalls | `analyze_async_correctness` (blocking requests/sleep, sync ORM in async) |
+| FastAPI Depends() graph | `trace_fastapi_depends` (Security, scopes, yield deps) |
+| Pydantic model schemas | `get_pydantic_models(output_format="mermaid")` |
+| Django/SQLAlchemy ORM graph | `get_model_graph` |
+| Django settings security audit | `analyze_django_settings` (15 checks) |
+| pytest fixture graph | `get_test_fixtures` (conftest hierarchy, scope, autouse) |
+| Celery task + canvas tracing | `python_audit(checks=["celery"])` |
+| Django signals / Celery / middleware | `find_framework_wiring` |
+| Python cross-module callers | `find_python_callers(target_name=)` |
+| Python circular imports | `python_audit(checks=["circular-imports"])` |
+| run Ruff on Python | `run_ruff(categories=["B","PERF","SIM","S"])` |
+| run mypy / pyright | `run_mypy` or `run_pyright` |
+| parse pyproject.toml | `parse_pyproject` |
+| Python dep freshness + CVEs | `analyze_python_deps(check_pypi=true, check_vulns=true)` |
+| Hono full overview | `analyze_hono_app` |
+| Hono middleware chain (route/scope/app-wide modes) | `trace_middleware_chain` |
+| Hono conditional middleware (applied_when) | `trace_middleware_chain(only_conditional=true)` |
+| Hono inline handler analysis | `analyze_inline_handler` |
+| Hono context variables | `trace_context_flow` |
+| Hono API contract / OpenAPI | `extract_api_contract` |
+| Hono response types (Issue #4270) | `extract_response_types` |
+| Hono RPC types / Issue #3869 | `trace_rpc_types` |
+| Hono security + env-regression audit / #3587 | `audit_hono_security` |
+| Hono architecture modules / #4121 | `detect_hono_modules` |
+| Hono dead routes | `find_dead_hono_routes` |
+| Hono route visualization | `visualize_hono_routes` |
 
 ## When to Use (Situational Triggers)
 
@@ -97,6 +148,21 @@ Use this table to pick the right tool for each task:
 | security audit | `scan_secrets(min_confidence="high")` |
 | code audit | `search_patterns("empty-catch")` |
 | past decisions | `find_conversations_for_symbol` |
+| starting a task, want tool recommendations | `plan_turn(query=...)` |
+| React codebase | `trace_component_tree("App")` + `analyze_hooks` |
+| React anti-patterns | `search_patterns("hook-in-condition")` |
+| React call graph (clean) | `trace_call_chain(filter_react_hooks=true)` |
+| new Next.js project (first look) | `framework_audit` |
+| SEO audit / metadata review | `nextjs_metadata_audit` |
+| security review (Next.js) | `framework_audit(checks=["server-actions"])` |
+| rendering strategy check | `nextjs_route_map` |
+| bundle size concerns | `framework_audit(checks=["boundary"])` |
+| new Hono project (first look) | `analyze_hono_app` |
+| Hono middleware order bug | `trace_middleware_chain` |
+| Hono auth false positive (blog pattern) | `trace_middleware_chain(only_conditional=true)` |
+| Hono handler introspection | `analyze_inline_handler` |
+| Hono RPC compile time slow | `trace_rpc_types` (flags Issue #3869 slow pattern) |
+| Hono enterprise architecture | `detect_hono_modules` (Issue #4121) |
 
 ## Key Parameters
 
@@ -104,7 +170,7 @@ Use this table to pick the right tool for each task:
 - `detail_level="compact"` — locations only (~15 tok/result vs ~150 default)
 - `token_budget=N` — cap output instead of guessing `top_k`
 - `file_pattern=` — always pass when scope is known (e.g. `"*.ts"`, `"src/tools/"`)
-- `kind=` — filter by type: `function`, `class`, `type`, `interface`
+- `kind=` — filter by type: `function`, `class`, `type`, `interface`, `component`, `hook`
 - `include_source=true` — include source code in results
 
 ### search_text

package/rules/codex.md

@@ -10,15 +10,16 @@ For multi-repo sessions, call `list_repos()` to discover available repos.
 
 ## Tool Discovery
 
-**66 MCP tools total** (35 core visible + 31 discoverable).
+**146 MCP tools total** (51 core visible + 95 discoverable).
 
-35 core tools appear in ListTools. Remaining 31 niche tools are discovered on demand:
+51 core tools appear in ListTools. The remaining 95 niche tools are discovered on demand:
 
-- `discover_tools(query="dead code")` — keyword search across all 66 tools
+- `plan_turn(query="...")` — natural-language router with auto-reveal (preferred start-of-task entry point)
+- `discover_tools(query="dead code")` — keyword search across all 146 tools
 - `describe_tools(names=["find_dead_code"])` — get full parameter schema
 - `describe_tools(names=["find_dead_code"], reveal=true)` — also reveal in ListTools
 
-Core tools (35) always visible — includes search, symbols, context, analysis, architecture, conversations, and meta tools. Use `discover_tools` for niche tools like `classify_roles`, `find_unused_imports`, `rename_symbol`, `ast_query`, etc.
+Core tools (51) always visible — includes search, symbols, context, analysis, architecture, conversations, meta, and `plan_turn`. Use `discover_tools` for niche tools like `classify_roles`, `find_unused_imports`, `rename_symbol`, `ast_query`, etc.
 
 ## Tool Mapping
 
@@ -62,6 +63,56 @@ Use this table to pick the right tool for each task:
 | index conversations | `index_conversations` |
 | structural diff | `diff_outline(since=)` |
 | what changed | `changed_symbols(since=)` |
+| start of task / unclear where to begin | `plan_turn(query=...)` |
+| React component tree | `trace_component_tree` |
+| React hook analysis | `analyze_hooks` |
+| React re-render analysis | `analyze_renders` |
+| React context graph | `analyze_context_graph` |
+| find components | `search_symbols(kind="component")` |
+| find hooks | `search_symbols(kind="hook")` |
+| Astro islands/hydration | `astro_analyze_islands` |
+| Astro hydration audit | `astro_hydration_audit` |
+| Astro route map | `astro_route_map` |
+| Astro config analysis | `astro_config_analyze` |
+| Next.js full audit | `framework_audit` |
+| route map + rendering | `nextjs_route_map` |
+| SEO / metadata gaps | `nextjs_metadata_audit` |
+| server actions security | `framework_audit(checks=["server-actions"])` |
+| API contract extraction | `framework_audit(checks=["api-contract"])` |
+| client boundary / bundle | `framework_audit(checks=["boundary"])` |
+| broken internal links | `framework_audit(checks=["link-integrity"])` |
+| data fetch waterfalls | `framework_audit(checks=["data-flow"])` |
+| middleware coverage gaps | `framework_audit(checks=["middleware"])` |
+| server vs client classify | `framework_audit(checks=["components"])` |
+| Python project health audit | `python_audit` (compound: 8 checks, health score) |
+| Django/Flask/FastAPI routes | `trace_route(path="/api/users")` |
+| Python anti-patterns | `search_patterns("mutable-default"\|"bare-except"\|"eval-exec"\|"shell-true"\|"pickle-load"\|"n-plus-one-django")` |
+| async/await pitfalls | `analyze_async_correctness` (blocking requests/sleep, sync ORM in async) |
+| FastAPI Depends() graph | `trace_fastapi_depends` (Security, scopes, yield deps) |
+| Pydantic model schemas | `get_pydantic_models(output_format="mermaid")` |
+| Django/SQLAlchemy ORM graph | `get_model_graph` |
+| Django settings security audit | `analyze_django_settings` (15 checks) |
+| pytest fixture graph | `get_test_fixtures` (conftest hierarchy, scope, autouse) |
+| Celery task + canvas tracing | `python_audit(checks=["celery"])` |
+| Django signals / Celery / middleware | `find_framework_wiring` |
+| Python cross-module callers | `find_python_callers(target_name=)` |
+| Python circular imports | `python_audit(checks=["circular-imports"])` |
+| run Ruff on Python | `run_ruff(categories=["B","PERF","SIM","S"])` |
+| run mypy / pyright | `run_mypy` or `run_pyright` |
+| parse pyproject.toml | `parse_pyproject` |
+| Python dep freshness + CVEs | `analyze_python_deps(check_pypi=true, check_vulns=true)` |
+| Hono full overview | `analyze_hono_app` |
+| Hono middleware chain (route/scope/app-wide modes) | `trace_middleware_chain` |
+| Hono conditional middleware (applied_when) | `trace_middleware_chain(only_conditional=true)` |
+| Hono inline handler analysis | `analyze_inline_handler` |
+| Hono context variables | `trace_context_flow` |
+| Hono API contract / OpenAPI | `extract_api_contract` |
+| Hono response types (Issue #4270) | `extract_response_types` |
+| Hono RPC types / Issue #3869 | `trace_rpc_types` |
+| Hono security + env-regression audit / #3587 | `audit_hono_security` |
+| Hono architecture modules / #4121 | `detect_hono_modules` |
+| Hono dead routes | `find_dead_hono_routes` |
+| Hono route visualization | `visualize_hono_routes` |
 
 ## When to Use (Situational Triggers)
 
@@ -92,6 +143,21 @@ Use this table to pick the right tool for each task:
 | security audit | `scan_secrets(min_confidence="high")` |
 | code audit | `search_patterns("empty-catch")` |
 | past decisions | `find_conversations_for_symbol` |
+| starting a task, want tool recommendations | `plan_turn(query=...)` |
+| React codebase | `trace_component_tree("App")` + `analyze_hooks` |
+| React anti-patterns | `search_patterns("hook-in-condition")` |
+| React call graph (clean) | `trace_call_chain(filter_react_hooks=true)` |
+| new Next.js project (first look) | `framework_audit` |
+| SEO audit / metadata review | `nextjs_metadata_audit` |
+| security review (Next.js) | `framework_audit(checks=["server-actions"])` |
+| rendering strategy check | `nextjs_route_map` |
+| bundle size concerns | `framework_audit(checks=["boundary"])` |
+| new Hono project (first look) | `analyze_hono_app` |
+| Hono middleware order bug | `trace_middleware_chain` |
+| Hono auth false positive (blog pattern) | `trace_middleware_chain(only_conditional=true)` |
+| Hono handler introspection | `analyze_inline_handler` |
+| Hono RPC compile time slow | `trace_rpc_types` (flags Issue #3869 slow pattern) |
+| Hono enterprise architecture | `detect_hono_modules` (Issue #4121) |
 
 ## Key Parameters
 
@@ -99,7 +165,7 @@ Use this table to pick the right tool for each task:
 - `detail_level="compact"` — locations only (~15 tok/result vs ~150 default)
 - `token_budget=N` — cap output instead of guessing `top_k`
 - `file_pattern=` — always pass when scope is known (e.g. `"*.ts"`, `"src/tools/"`)
-- `kind=` — filter by type: `function`, `class`, `type`, `interface`
+- `kind=` — filter by type: `function`, `class`, `type`, `interface`, `component`, `hook`
 - `include_source=true` — include source code in results
 
 ### search_text