codesift-mcp 0.5.28 → 0.7.0

package/dist/register-tools.js

@@ -1,3 +1,4 @@
+import * as pathModule from "node:path";
 import { z } from "zod";
 /** Boolean that also accepts "true"/"false" strings (LLMs often send strings instead of booleans) */
 const zBool = () => z.union([z.boolean(), z.string().transform((s) => s === "true")]).optional();
@@ -5,7 +6,7 @@ import { wrapTool, registerShortener } from "./server-helpers.js";
 import { detectProjectLanguagesSync } from "./utils/language-detect.js";
 import { STUB_LANGUAGES } from "./parser/stub-languages.js";
 import { getUsageStats, formatUsageReport } from "./storage/usage-stats.js";
-import { indexFolder, indexFile, indexRepo, listAllRepos, invalidateCache, getCodeIndex, searchSymbols, searchText, semanticSearch, getFileTree, getFileOutline, getRepoOutline, suggestQueries, getSymbol, getSymbols, findAndShow, findReferences, findReferencesBatch, findDeadCode, getContextBundle, formatRefsCompact, formatSymbolCompact, formatSymbolsCompact, formatBundleCompact, traceCallChain, traceComponentTree, analyzeHooks, analyzeRenders, buildContextGraph, auditCompilerReadiness, reactQuickstart, impactAnalysis, traceRoute, detectCommunities, assembleContext, getKnowledgeMap, diffOutline, changedSymbols, generateClaudeMd, codebaseRetrieval, analyzeComplexity, findClones, analyzeHotspots, crossRepoSearchSymbols, crossRepoFindReferences, searchPatterns, listPatterns, generateReport, goToDefinition, getTypeInfo, renameSymbol, getCallHierarchy, indexConversations, searchConversations, searchAllConversations, findConversationsForSymbol, scanSecrets, resolvePhpNamespace, tracePhpEvent, findPhpViews, resolvePhpService, phpSecurityScan, phpProjectAudit, consolidateMemories, readMemory, createAnalysisPlan, writeScratchpad, readScratchpad, listScratchpad, updateStepStatus, getPlan, listPlans, frequencyAnalysis, findExtensionFunctions, analyzeSealedHierarchy, traceSuspendChain, analyzeKmpDeclarations, traceFlowChain, traceHiltGraph, traceComposeTree, analyzeComposeRecomposition, traceRoomSchema, extractKotlinSerializationContract, astroAnalyzeIslands, astroHydrationAudit, astroRouteMap, astroActionsAudit, astroAudit, nextjsRouteMap, nextjsMetadataAudit, frameworkAudit, astroConfigAnalyze, astroContentCollections, analyzeProject, getExtractorVersions, getModelGraph, getTestFixtures, findFrameworkWiring, runRuff, parsePyproject, resolveConstantValue, effectiveDjangoViewSecurity, findPythonCallers, taintTrace, analyzeDjangoSettings, runMypy, runPyright, analyzePythonDeps, pythonAudit, traceFastAPIDepends, analyzeAsyncCorrectness, getPydanticModels, reviewDiff, auditScan, indexStatus, auditAgentConfig, testImpactAnalysis, dependencyAudit, migrationLint, planTurn, formatPlanTurnResult, astroMigrationCheck, analyzePrismaSchema, findPerfHotspots, fanInFanOut, coChangeAnalysis, architectureSummary, nestAudit, explainQuery, generateWiki, } from "./register-tool-loaders.js";
+import { indexFolder, indexFile, indexRepo, listAllRepos, invalidateCache, getCodeIndex, searchSymbols, searchText, semanticSearch, getFileTree, getFileOutline, getRepoOutline, suggestQueries, getSymbol, getSymbols, findAndShow, findReferences, findReferencesBatch, findDeadCode, getContextBundle, formatRefsCompact, formatSymbolCompact, formatSymbolsCompact, formatBundleCompact, traceCallChain, traceComponentTree, analyzeHooks, analyzeRenders, buildContextGraph, auditCompilerReadiness, reactQuickstart, impactAnalysis, traceRoute, detectCommunities, assembleContext, getKnowledgeMap, diffOutline, changedSymbols, generateClaudeMd, codebaseRetrieval, analyzeComplexity, findClones, analyzeHotspots, crossRepoSearchSymbols, crossRepoFindReferences, searchPatterns, listPatterns, generateReport, goToDefinition, getTypeInfo, renameSymbol, getCallHierarchy, indexConversations, searchConversations, searchAllConversations, findConversationsForSymbol, scanSecrets, resolvePhpNamespace, tracePhpEvent, findPhpViews, resolvePhpService, phpSecurityScan, phpProjectAudit, consolidateMemories, readMemory, createAnalysisPlan, writeScratchpad, readScratchpad, listScratchpad, updateStepStatus, getPlan, listPlans, frequencyAnalysis, findExtensionFunctions, analyzeSealedHierarchy, traceSuspendChain, analyzeKmpDeclarations, traceFlowChain, traceHiltGraph, traceComposeTree, analyzeComposeRecomposition, traceRoomSchema, extractKotlinSerializationContract, astroAnalyzeIslands, astroHydrationAudit, astroRouteMap, astroActionsAudit, astroAudit, nextjsRouteMap, nextjsMetadataAudit, frameworkAudit, astroConfigAnalyze, astroContentCollections, astroMiddlewareAudit, astroSessionsAudit, astroDbAudit, astroEnvValidator, astroImageAudit, astroSvgComponents, analyzeProject, getExtractorVersions, getModelGraph, getTestFixtures, findFrameworkWiring, runRuff, parsePyproject, resolveConstantValue, effectiveDjangoViewSecurity, findPythonCallers, taintTrace, analyzeDjangoSettings, runMypy, runPyright, analyzePythonDeps, pythonAudit, traceFastAPIDepends, analyzeAsyncCorrectness, getPydanticModels, reviewDiff, auditScan, indexStatus, auditAgentConfig, testImpactAnalysis, dependencyAudit, migrationLint, planTurn, formatPlanTurnResult, astroMigrationCheck, analyzePrismaSchema, findPerfHotspots, fanInFanOut, coChangeAnalysis, architectureSummary, nestAudit, explainQuery, generateWiki, } from "./register-tool-loaders.js";
 import { formatSnapshot, getContext, getSessionState } from "./storage/session-state.js";
 import { formatComplexityCompact, formatComplexityCounts, formatClonesCompact, formatClonesCounts, formatHotspotsCompact, formatHotspotsCounts, formatTraceRouteCompact, formatTraceRouteCounts } from "./formatters-shortening.js";
 import { formatSearchSymbols, formatFileTree, formatFileOutline, formatSearchPatterns, formatDeadCode, formatComplexity, formatClones, formatHotspots, formatRepoOutline, formatSuggestQueries, formatSecrets, formatConversations, formatRoles, formatAssembleContext, formatCommunities, formatCallTree, formatTraceRoute, formatKnowledgeMap, formatImpactAnalysis, formatDiffOutline, formatChangedSymbols, formatReviewDiff, formatPerfHotspots, formatFanInFanOut, formatCoChange, formatArchitectureSummary, formatNextjsRouteMap, formatNextjsMetadataAudit, formatFrameworkAudit } from "./formatters.js";
@@ -207,6 +208,16 @@ const FRAMEWORK_TOOL_GROUPS = {
         "resolve_php_service",
         "php_security_scan",
         "php_project_audit",
+        // PHP stacks (Yii2/Laravel/Symfony) overwhelmingly run on MySQL/Postgres with
+        // raw .sql migrations and ActiveRecord models. The SQL toolchain is the
+        // missing entry-point for schema/drift/lint/dml work — auto-revealing it
+        // here closes the gap that 0 SQL tools have ever been called from PHP repos.
+        "analyze_schema",
+        "trace_query",
+        "sql_audit",
+        "diff_migrations",
+        "search_columns",
+        "migration_lint",
     ],
     // Kotlin / Android / Gradle — detected by build.gradle.kts or settings.gradle.kts
     "build.gradle.kts": [
@@ -311,6 +322,70 @@ const FRAMEWORK_TOOL_GROUPS = {
         "analyze_prisma_schema",
         "migration_lint",
     ],
+    // Astro — detected by astro.config.{mjs,ts,cjs,js}. Auto-loads the full
+    // 13-tool Astro toolkit (7 core + 6 Astro 5 sub-tools from Tasks 2-7).
+    // astro_audit is the meta-tool entry point; sub-tools are listed for
+    // direct invocation via describe_tools.
+    "astro.config.mjs": [
+        "astro_route_map",
+        "astro_config_analyze",
+        "astro_content_collections",
+        "astro_actions_audit",
+        "astro_migration_check",
+        "astro_analyze_islands",
+        "astro_audit",
+        "astro_middleware",
+        "astro_sessions",
+        "astro_db_audit",
+        "astro_env_validator",
+        "astro_image_audit",
+        "astro_svg_components",
+    ],
+    "astro.config.ts": [
+        "astro_route_map",
+        "astro_config_analyze",
+        "astro_content_collections",
+        "astro_actions_audit",
+        "astro_migration_check",
+        "astro_analyze_islands",
+        "astro_audit",
+        "astro_middleware",
+        "astro_sessions",
+        "astro_db_audit",
+        "astro_env_validator",
+        "astro_image_audit",
+        "astro_svg_components",
+    ],
+    "astro.config.cjs": [
+        "astro_route_map",
+        "astro_config_analyze",
+        "astro_content_collections",
+        "astro_actions_audit",
+        "astro_migration_check",
+        "astro_analyze_islands",
+        "astro_audit",
+        "astro_middleware",
+        "astro_sessions",
+        "astro_db_audit",
+        "astro_env_validator",
+        "astro_image_audit",
+        "astro_svg_components",
+    ],
+    "astro.config.js": [
+        "astro_route_map",
+        "astro_config_analyze",
+        "astro_content_collections",
+        "astro_actions_audit",
+        "astro_migration_check",
+        "astro_analyze_islands",
+        "astro_audit",
+        "astro_middleware",
+        "astro_sessions",
+        "astro_db_audit",
+        "astro_env_validator",
+        "astro_image_audit",
+        "astro_svg_components",
+    ],
 };
 /**
  * React-specific tools — auto-enabled when a React project is detected.
@@ -363,6 +438,20 @@ const PRISMA_TOOLS = [
     "analyze_prisma_schema",
     "migration_lint",
 ];
+/**
+ * Raw-SQL toolchain — auto-enabled when a project has loose `*.sql` files
+ * (migrations, seeds, mysqldump). Independent of any ORM. Targets the
+ * "PHP/Yii2 + MySQL legacy" segment that historically called 0 of these
+ * tools because they were hidden behind discover_tools.
+ */
+const SQL_TOOLS = [
+    "analyze_schema",
+    "trace_query",
+    "sql_audit",
+    "diff_migrations",
+    "search_columns",
+    "migration_lint",
+];
 const AUTO_LOAD_CACHE_TTL_MS = 5_000;
 const autoLoadToolsCache = new Map();
 /**
@@ -386,14 +475,36 @@ export async function detectAutoLoadTools(cwd) {
     if (existsSync(join(cwd, "prisma", "schema.prisma"))) {
         toEnable.push(...PRISMA_TOOLS);
     }
+    // Raw SQL detection — fires on any project with loose `*.sql` files in
+    // common schema/migration dirs. Catches mysqldump/pg_dump artifacts and
+    // hand-written migrations across PHP/Python/Go/Java stacks regardless of
+    // ORM. Composer-based PHP repos already pull SQL_TOOLS via FRAMEWORK_TOOL_GROUPS;
+    // this branch covers everything else (e.g. Django + raw migrations,
+    // standalone schema repos).
+    if (hasSqlFilesShallow(cwd, readdirSync)) {
+        toEnable.push(...SQL_TOOLS);
+    }
     const detectFromPackageJson = (pkgRoot) => {
         const enabled = [];
         const pkgPath = join(pkgRoot, "package.json");
         if (!existsSync(pkgPath))
             return enabled;
+        let pkg;
         try {
-            const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
-            const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+            pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+        }
+        catch {
+            /* malformed or unreadable package.json — omit silently */
+            return enabled;
+        }
+        if (!pkg || typeof pkg !== "object" || Array.isArray(pkg))
+            return enabled;
+        try {
+            const manifest = pkg;
+            const allDeps = {
+                ...manifest.dependencies,
+                ...manifest.devDependencies,
+            };
             const hasReact = !!(allDeps["react"] ||
                 allDeps["next"] ||
                 allDeps["@remix-run/react"] ||
@@ -422,14 +533,18 @@ export async function detectAutoLoadTools(cwd) {
             // npm/yarn/pnpm workspaces field — content-based monorepo signal.
             // Complements the file-based signals (pnpm-workspace.yaml, lerna.json,
             // nx.json, turbo.json) so plain `"workspaces": [...]` setups also fire.
-            const hasWorkspaces = Array.isArray(pkg.workspaces) ||
-                (pkg.workspaces && typeof pkg.workspaces === "object" &&
-                    Array.isArray(pkg.workspaces.packages));
+            const ws = manifest.workspaces;
+            const hasWorkspaces = Array.isArray(ws) ||
+                (ws !== null &&
+                    typeof ws === "object" &&
+                    !Array.isArray(ws) &&
+                    Array.isArray(ws.packages));
             if (hasWorkspaces)
                 enabled.push(...MONOREPO_TOOLS);
         }
-        catch {
-            /* malformed package.json */
+        catch (err) {
+            const detail = err instanceof Error ? err.stack ?? err.message : String(err);
+            console.warn(`[codesift-mcp] detectFromPackageJson(${pkgRoot}): ${detail}`);
         }
         return enabled;
     };
@@ -481,7 +596,8 @@ export function detectAutoLoadToolsCached(cwd) {
  * Skips node_modules, dist, build, .next, .astro, .git.
  */
 function hasJsxFilesShallow(cwd, readdirSyncFn) {
-    const { join } = require("node:path");
+    // ESM-safe path import (avoid `require("node:path")`, which throws under ESM).
+    const { join } = pathModule;
     const IGNORE = new Set([
         "node_modules", "dist", "build", ".next", ".astro", ".git",
         "out", "coverage", ".turbo", ".vercel", ".cache",
@@ -519,6 +635,65 @@ function hasJsxFilesShallow(cwd, readdirSyncFn) {
     }
     return false;
 }
+/**
+ * Quick scan for *.sql files in conventional schema/migration directories.
+ * Used to auto-enable the SQL toolchain on any project that ships raw SQL
+ * regardless of language stack. Stops on first hit; depth capped at 3 so
+ * nested package dirs (e.g. monorepo apps/*) are still reachable.
+ */
+function hasSqlFilesShallow(cwd, readdirSyncFn) {
+    const { join } = pathModule;
+    const IGNORE = new Set([
+        "node_modules", "dist", "build", ".next", ".astro", ".git",
+        "out", "coverage", ".turbo", ".vercel", ".cache", "vendor",
+    ]);
+    // SQL conventionally lives in dedicated dirs — scanning every src/ tree
+    // would trigger false positives on test fixtures and string-literal SQL.
+    const DEEP_ROOTS = [
+        "migrations", "migration", "db", "database", "schema", "schemas",
+        "sql", "ddl", "seeds", "seed", "supabase",
+        "prisma/migrations", "drizzle/migrations",
+    ];
+    function scanDeep(dir, depth) {
+        if (depth > 3)
+            return false;
+        let entries;
+        try {
+            entries = readdirSyncFn(dir, { withFileTypes: true });
+        }
+        catch {
+            return false;
+        }
+        for (const e of entries) {
+            if (e.isFile() && /\.sql$/i.test(e.name))
+                return true;
+        }
+        for (const e of entries) {
+            if (e.isDirectory() && !IGNORE.has(e.name) && !e.name.startsWith(".")) {
+                if (scanDeep(join(dir, e.name), depth + 1))
+                    return true;
+            }
+        }
+        return false;
+    }
+    // Top-level: dump files like `schema.sql` / `init.sql` / `database.sql`.
+    try {
+        const rootEntries = readdirSyncFn(cwd, { withFileTypes: true });
+        for (const e of rootEntries) {
+            if (e.isFile() && /\.sql$/i.test(e.name))
+                return true;
+        }
+    }
+    catch { /* skip */ }
+    for (const root of DEEP_ROOTS) {
+        try {
+            if (scanDeep(join(cwd, root), 0))
+                return true;
+        }
+        catch { /* skip */ }
+    }
+    return false;
+}
 // ---------------------------------------------------------------------------
 // Output schemas — typed results for structured validation & documentation
 // ---------------------------------------------------------------------------
@@ -3449,6 +3624,115 @@ const TOOL_DEFINITIONS = [
             return await astroAudit(opts);
         },
     },
+    // --- Astro 5 sub-tools (Task 12). Discoverable via describe_tools — NOT in CORE. ---
+    {
+        name: "astro_middleware",
+        category: "analysis",
+        searchHint: "astro middleware onRequest sequence guards routes protected auth flows",
+        description: "Parses src/middleware.ts (or .js) — detects onRequest exports, sequence(...) ordering, and guard if-blocks lacking redirect/throw/return Response. Issue codes MW00–MW03.",
+        schema: lazySchema(() => ({
+            project_root: z.string().optional().describe("Absolute path to project root (default: auto-detected)"),
+            repo: z.string().optional(),
+        })),
+        handler: async (args) => {
+            const opts = {};
+            if (args.project_root != null)
+                opts.project_root = args.project_root;
+            if (args.repo != null)
+                opts.repo = args.repo;
+            return await astroMiddlewareAudit(opts);
+        },
+    },
+    {
+        name: "astro_sessions",
+        category: "analysis",
+        searchHint: "astro sessions experimental session adapter compatibility node vercel cloudflare",
+        description: "Astro 5 Sessions API audit. Detects Astro.session.* / context.session.* usage; cross-checks experimental.session config + adapter compatibility. Issue codes SE01–SE04.",
+        schema: lazySchema(() => ({
+            project_root: z.string().optional(),
+            repo: z.string().optional(),
+        })),
+        handler: async (args) => {
+            const opts = {};
+            if (args.project_root != null)
+                opts.project_root = args.project_root;
+            if (args.repo != null)
+                opts.repo = args.repo;
+            return await astroSessionsAudit(opts);
+        },
+    },
+    {
+        name: "astro_db_audit",
+        category: "analysis",
+        searchHint: "astro db defineTable schema columns foreign key index n+1 query loop",
+        description: "Astro DB audit. Parses db/config.ts defineTable schemas; detects N+1 query patterns (db.select inside loops via AST), missing FK indexes (per-table scoped), reference cycles. Codes DB00–DB04.",
+        schema: lazySchema(() => ({
+            project_root: z.string().optional(),
+            repo: z.string().optional(),
+        })),
+        handler: async (args) => {
+            const opts = {};
+            if (args.project_root != null)
+                opts.project_root = args.project_root;
+            if (args.repo != null)
+                opts.repo = args.repo;
+            return await astroDbAudit(opts);
+        },
+    },
+    {
+        name: "astro_env_validator",
+        category: "analysis",
+        searchHint: "astro env envField schema astro:env client server context import.meta.env",
+        description: "Astro 5 astro:env validator. Parses env.schema (envField) and cross-checks against import.meta.env + astro:env/{client,server} imports. Codes EV01–EV04.",
+        schema: lazySchema(() => ({
+            project_root: z.string().optional(),
+            repo: z.string().optional(),
+        })),
+        handler: async (args) => {
+            const opts = {};
+            if (args.project_root != null)
+                opts.project_root = args.project_root;
+            if (args.repo != null)
+                opts.repo = args.repo;
+            return await astroEnvValidator(opts);
+        },
+    },
+    {
+        name: "astro_image_audit",
+        category: "analysis",
+        searchHint: "astro image img alt accessibility Picture astro:assets getImage optimization",
+        description: "Scans .astro pages for image usage: raw <img> vs <Image>/<Picture>, missing/empty alt attributes, getImage() without astro:assets import. Codes IM01–IM04.",
+        schema: lazySchema(() => ({
+            project_root: z.string().optional(),
+            repo: z.string().optional(),
+        })),
+        handler: async (args) => {
+            const opts = {};
+            if (args.project_root != null)
+                opts.project_root = args.project_root;
+            if (args.repo != null)
+                opts.repo = args.repo;
+            return await astroImageAudit(opts);
+        },
+    },
+    {
+        name: "astro_svg_components",
+        category: "analysis",
+        searchHint: "astro svg component import legacy ?component native astro 5",
+        description: "Detects *.svg?component imports, tracks per-file usage, flags legacy ?component on Astro 5+, surfaces PascalCase tags used without imports. Codes SV01–SV03.",
+        schema: lazySchema(() => ({
+            project_root: z.string().optional(),
+            repo: z.string().optional(),
+        })),
+        handler: async (args) => {
+            const opts = {};
+            if (args.project_root != null)
+                opts.project_root = args.project_root;
+            if (args.repo != null)
+                opts.repo = args.repo;
+            return await astroSvgComponents(opts);
+        },
+    },
     // --- Hono framework tools (Task 23) ---
     {
         name: "trace_middleware_chain",
@@ -3701,13 +3985,14 @@ const TOOL_DEFINITIONS = [
     {
         name: "analyze_schema",
         category: "analysis",
-        searchHint: "SQL schema ERD entity relationship tables views columns foreign key database migration",
-        description: "Analyze SQL schema: tables, views, columns, foreign keys, relationships. Output as JSON or Mermaid ERD.",
+        searchHint: "SQL schema ERD entity relationship tables views columns foreign key database migration MySQL Postgres SQLite dialect",
+        description: "Analyze SQL schema: tables, views, columns, foreign keys, relationships. Auto-detects dialect (mysql/postgres/sqlite/mssql) from schema fingerprints. Output as JSON or Mermaid ERD.",
         schema: lazySchema(() => ({
             repo: z.string().optional().describe("Repository identifier (default: auto-detected from CWD)"),
             file_pattern: z.string().optional().describe("Filter SQL files by pattern (e.g. 'migrations/')"),
             output_format: z.enum(["json", "mermaid"]).optional().describe("Output format (default: json)"),
             include_columns: zBool().describe("Include column details in output (default: true)"),
+            dialect: z.enum(["auto", "mysql", "postgres", "sqlite", "mssql", "unknown"]).optional().describe("Force dialect, or 'auto' to detect from ENGINE=InnoDB / SERIAL / AUTOINCREMENT etc. (default: auto)"),
         })),
         handler: async (args) => {
             const { analyzeSchema } = await import("./tools/sql-tools.js");
@@ -3718,9 +4003,11 @@ const TOOL_DEFINITIONS = [
                 opts.output_format = args.output_format;
             if (args.include_columns != null)
                 opts.include_columns = args.include_columns;
+            if (args.dialect != null)
+                opts.dialect = args.dialect;
             const result = await analyzeSchema(args.repo, opts);
             const parts = [];
-            parts.push(`Tables: ${result.tables.length} | Views: ${result.views.length} | Relationships: ${result.relationships.length}`);
+            parts.push(`Tables: ${result.tables.length} | Views: ${result.views.length} | Relationships: ${result.relationships.length} | Dialect: ${result.detected_dialect}`);
             if (result.warnings.length > 0)
                 parts.push(`Warnings: ${result.warnings.join("; ")}`);
             if (result.mermaid) {