infrawise 0.4.2 → 0.5.0

package/README.md

@@ -1,9 +1,11 @@
 # Infrawise
 
-[![npm version](https://img.shields.io/npm/v/infrawise)](https://www.npmjs.com/package/infrawise)
-[![Publish to npm](https://github.com/Sidd27/infrawise/actions/workflows/npm-publish.yml/badge.svg)](https://github.com/Sidd27/infrawise/actions/workflows/npm-publish.yml)
-[![CI](https://github.com/Sidd27/infrawise/actions/workflows/ci.yml/badge.svg)](https://github.com/Sidd27/infrawise/actions/workflows/ci.yml)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+<table><tr>
+<td><a href="https://www.npmjs.com/package/infrawise"><img src="https://img.shields.io/npm/v/infrawise" alt="npm version"></a></td>
+<td><a href="https://github.com/Sidd27/infrawise/actions/workflows/npm-publish.yml"><img src="https://github.com/Sidd27/infrawise/actions/workflows/npm-publish.yml/badge.svg" alt="Publish to npm"></a></td>
+<td><a href="https://github.com/Sidd27/infrawise/actions/workflows/ci.yml"><img src="https://github.com/Sidd27/infrawise/actions/workflows/ci.yml/badge.svg" alt="CI"></a></td>
+<td><a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a></td>
+</tr></table>
 
 **Understand your infrastructure, not just your code.**
 
@@ -78,6 +80,8 @@ infrawise doctor
 infrawise analyze
 ```
 
+Or skip this step — `infrawise dev` auto-runs analysis if no cache exists.
+
 ```
 Findings (3 total)
 
@@ -104,11 +108,22 @@ infrawise dev
 ```
 
 ```
-✔ Tool server running
-✔ Context engine initialized
-
-MCP endpoint:      http://localhost:3000/mcp
-Available tools:   http://localhost:3000/mcp/tools
+  ✔ Config loaded          infrawise.yaml
+  ✔ Cached analysis loaded 42 nodes · 18 edges · 7 finding(s)
+  ✔ Server running
+
+  ┌────────────────────────────────────────────────────┐
+  │ MCP Server                                        │
+  ├────────────────────────────────────────────────────┤
+  │ POST http://localhost:3000/mcp                    │
+  │ GET  http://localhost:3000/health                 │
+  ├────────────────────────────────────────────────────┤
+  │ Tools (13 active)                                 │
+  │ get_infra_overview · get_graph_summary            │
+  │ ...                                               │
+  └────────────────────────────────────────────────────┘
+
+  Watching for file changes... Press Ctrl+C to stop
 ```
 
 ### Step 2: Add to your editor settings
@@ -160,41 +175,6 @@ To let Claude Code manage the server lifecycle automatically:
 
 ---
 
-## GitHub Action
-
-Add infrastructure analysis to any PR workflow. No `infrawise.yaml` required — the action auto-generates one from your AWS credentials.
-
-```yaml
-# .github/workflows/infrawise.yml
-name: Infrawise
-on: [pull_request]
-
-jobs:
-  analyze:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: Sidd27/infrawise@v0
-        with:
-          fail-on: high        # fail the PR on high severity findings (default)
-        env:
-          AWS_ACCESS_KEY_ID:     ${{ secrets.AWS_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          AWS_REGION:            ${{ secrets.AWS_REGION }}
-```
-
-If `infrawise.yaml` is not present in the repo, the action generates a minimal config with DynamoDB, Lambda, SQS, SNS, SSM, Secrets Manager, and RDS enabled — using `AWS_REGION` from the environment. Add an `infrawise.yaml` to your repo to customize which services to include or to add database connections.
-
-Findings appear as annotations on the PR diff and in the job summary.
-
-| Input | Default | Description |
-|---|---|---|
-| `version` | `latest` | infrawise version to install |
-| `fail-on` | `high` | Exit code 1 if findings at or above this severity (`high`, `medium`, `low`, `never`) |
-| `config` | `infrawise.yaml` | Path to config file — auto-generated if not present |
-
----
-
 ## CLI reference
 
 | Command | What it does |
@@ -202,7 +182,7 @@ Findings appear as annotations on the PR diff and in the job summary.
 | `infrawise init` | Detect AWS + repo, generate `infrawise.yaml` |
 | `infrawise auth` | Select or switch AWS profile |
 | `infrawise analyze` | Scan repo + AWS, build graph, print findings |
-| `infrawise dev` | Start MCP server at `http://localhost:3000/mcp` |
+| `infrawise dev` | Start MCP server — auto-analyzes if no cache, watches files for live refresh |
 | `infrawise doctor` | Validate AWS access, DB connectivity, and config |
 
 ---
@@ -425,7 +405,7 @@ src/
                 mongodb.ts, aws.ts, logs.ts, terraform.ts
   analyzers/    23 rule-based analyzers
   context/      Repository scanner (ts-morph AST)
-  server/       Fastify MCP HTTP server (plain JSON-RPC, no SDK)
+  server/       Fastify MCP server (@modelcontextprotocol/sdk, Streamable HTTP)
   cli/          CLI commands (Commander.js)
 ```
 
@@ -512,10 +492,9 @@ pnpm release major    # 0.1.2 → 1.0.0  (breaking changes)
 pnpm release 1.5.0    # explicit version
 
 git push origin main v1.2.3
-git push origin v1 --force   # update the floating major tag
 ```
 
-Pushing a `v*.*.*` tag creates a draft GitHub release. Publishing that release triggers npm publish automatically.
+`pnpm release` bumps the version, tags, and creates a draft GitHub release with notes generated from commit messages. Push the tag, then publish the draft on GitHub to trigger npm publish.
 
 ### PR checklist
 

package/dist/cli/commands/analyze.js

@@ -37,7 +37,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runAnalyze = runAnalyze;
-const fs = __importStar(require("fs"));
+exports.runCodeRefresh = runCodeRefresh;
 const path = __importStar(require("path"));
 const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
@@ -53,72 +53,19 @@ const context_1 = require("../../context");
 const graph_1 = require("../../graph");
 const analyzers_1 = require("../../analyzers");
 const utils_1 = require("../utils");
-const SEVERITY_RANK = { high: 3, medium: 2, low: 1, never: 0 };
-function mkSpinner(text, ci) {
-    if (ci) {
-        return {
-            succeed: (msg) => console.log(`  ✓ ${msg}`),
-            warn: (msg) => console.log(`  ⚠ ${msg}`),
-        };
-    }
+function mkSpinner(text) {
     return (0, ora_1.default)({ text: chalk_1.default.dim(text), color: 'cyan' }).start();
 }
-function emitCIOutput(findings, failOn) {
-    for (const f of findings) {
-        const level = f.severity === 'high' ? 'error' : f.severity === 'medium' ? 'warning' : 'notice';
-        console.log(`::${level} title=Infrawise [${f.severity.toUpperCase()}]::${f.issue} — ${f.description}`);
-    }
-    const summaryPath = process.env['GITHUB_STEP_SUMMARY'];
-    if (summaryPath) {
-        const high = findings.filter((f) => f.severity === 'high').length;
-        const medium = findings.filter((f) => f.severity === 'medium').length;
-        const low = findings.filter((f) => f.severity === 'low').length;
-        const rows = findings.map((f) => {
-            const icon = f.severity === 'high' ? '🔴' : f.severity === 'medium' ? '🟡' : '🔵';
-            return `| ${icon} ${f.severity.toUpperCase()} | ${f.issue} | ${f.recommendation} |`;
-        }).join('\n');
-        const summary = findings.length === 0
-            ? '## ✅ Infrawise — no issues found\n'
-            : [
-                '## Infrawise Analysis',
-                '',
-                `**${high} high · ${medium} medium · ${low} low**`,
-                '',
-                '| Severity | Issue | Recommendation |',
-                '|---|---|---|',
-                rows,
-            ].join('\n');
-        fs.appendFileSync(summaryPath, summary + '\n');
-    }
-    const threshold = SEVERITY_RANK[failOn] ?? 3;
-    const maxFound = Math.max(0, ...findings.map((f) => SEVERITY_RANK[f.severity] ?? 0));
-    if (maxFound >= threshold && threshold > 0) {
-        process.exit(1);
-    }
-}
 async function runAnalyze(options = {}) {
-    const ci = options.ci ?? false;
-    const failOn = options.failOn ?? 'high';
-    if (!ci)
-        (0, utils_1.printHeader)('Running Analysis');
+    (0, utils_1.printHeader)('Running Analysis');
     let config;
-    let isFallback = false;
     try {
         config = (0, core_1.loadConfig)(options.config);
-        if (!ci)
-            utils_1.log.success('Config loaded', options.config ?? 'infrawise.yaml');
+        utils_1.log.success('Config loaded', options.config ?? 'infrawise.yaml');
     }
     catch (err) {
-        const isNotFound = err instanceof Error && err.message.includes('not found at');
-        if (ci && isNotFound) {
-            config = { project: path.basename(process.cwd()) };
-            isFallback = true;
-            console.log('  ✓ No infrawise.yaml — running code-only analysis (repo scan + IaC)');
-        }
-        else {
-            console.error((0, core_1.formatError)(err));
-            process.exit(1);
-        }
+        console.error((0, core_1.formatError)(err));
+        process.exit(1);
     }
     const repoPath = options.repo ?? process.cwd();
     const awsCfg = { region: config.aws?.region, profile: config.aws?.profile, endpoint: config.aws?.endpoint };
@@ -129,7 +76,7 @@ async function runAnalyze(options = {}) {
     const servicesMeta = {};
     // ── DynamoDB ────────────────────────────────────────────────────────────────
     if (config.dynamodb?.enabled === true) {
-        const s = mkSpinner('Extracting DynamoDB tables...', ci);
+        const s = mkSpinner('Extracting DynamoDB tables...');
         try {
             const result = await (0, dynamodb_1.extractDynamoMetadata)(config);
             dynamoMeta.push(...result);
@@ -141,7 +88,7 @@ async function runAnalyze(options = {}) {
     }
     // ── PostgreSQL ──────────────────────────────────────────────────────────────
     if (config.postgres?.enabled && config.postgres.connectionString) {
-        const s = mkSpinner('Extracting PostgreSQL schema...', ci);
+        const s = mkSpinner('Extracting PostgreSQL schema...');
         try {
             const result = await (0, postgres_1.extractPostgresMetadata)(config.postgres.connectionString);
             postgresMeta.push(...result);
@@ -153,7 +100,7 @@ async function runAnalyze(options = {}) {
     }
     // ── MySQL ───────────────────────────────────────────────────────────────────
     if (config.mysql?.enabled && config.mysql.connectionString) {
-        const s = mkSpinner('Extracting MySQL schema...', ci);
+        const s = mkSpinner('Extracting MySQL schema...');
         try {
             const result = await (0, mysql_1.extractMySQLMetadata)(config.mysql.connectionString);
             mysqlMeta.push(...result);
@@ -165,7 +112,7 @@ async function runAnalyze(options = {}) {
     }
     // ── MongoDB ─────────────────────────────────────────────────────────────────
     if (config.mongodb?.enabled && config.mongodb.connectionString) {
-        const s = mkSpinner('Extracting MongoDB schema...', ci);
+        const s = mkSpinner('Extracting MongoDB schema...');
         try {
             const result = await (0, mongodb_1.extractMongoMetadata)(config.mongodb.connectionString, config.mongodb.databases);
             mongoMeta.push(...result);
@@ -177,7 +124,7 @@ async function runAnalyze(options = {}) {
     }
     // ── SQS ─────────────────────────────────────────────────────────────────────
     if (config.sqs?.enabled === true) {
-        const s = mkSpinner('Extracting SQS queues...', ci);
+        const s = mkSpinner('Extracting SQS queues...');
         try {
             const result = await (0, aws_1.extractSQSMetadata)(awsCfg);
             servicesMeta.sqs = result;
@@ -189,7 +136,7 @@ async function runAnalyze(options = {}) {
     }
     // ── SNS ─────────────────────────────────────────────────────────────────────
     if (config.sns?.enabled === true) {
-        const s = mkSpinner('Extracting SNS topics...', ci);
+        const s = mkSpinner('Extracting SNS topics...');
         try {
             const result = await (0, aws_1.extractSNSMetadata)(awsCfg);
             servicesMeta.sns = result;
@@ -201,7 +148,7 @@ async function runAnalyze(options = {}) {
     }
     // ── SSM Parameter Store ──────────────────────────────────────────────────────
     if (config.ssm?.enabled === true) {
-        const s = mkSpinner('Extracting SSM parameters...', ci);
+        const s = mkSpinner('Extracting SSM parameters...');
         try {
             const result = await (0, aws_1.extractSSMMetadata)({ ...awsCfg, paths: config.ssm?.paths });
             servicesMeta.ssm = result;
@@ -213,7 +160,7 @@ async function runAnalyze(options = {}) {
     }
     // ── Secrets Manager ──────────────────────────────────────────────────────────
     if (config.secretsManager?.enabled === true) {
-        const s = mkSpinner('Extracting Secrets Manager metadata...', ci);
+        const s = mkSpinner('Extracting Secrets Manager metadata...');
         try {
             const result = await (0, aws_1.extractSecretsMetadata)(awsCfg);
             servicesMeta.secrets = result;
@@ -225,7 +172,7 @@ async function runAnalyze(options = {}) {
     }
     // ── Lambda ───────────────────────────────────────────────────────────────────
     if (config.lambda?.enabled === true) {
-        const s = mkSpinner('Extracting Lambda functions...', ci);
+        const s = mkSpinner('Extracting Lambda functions...');
         try {
             const result = await (0, aws_1.extractLambdaMetadata)(awsCfg);
             servicesMeta.lambda = result;
@@ -237,7 +184,7 @@ async function runAnalyze(options = {}) {
     }
     // ── RDS ──────────────────────────────────────────────────────────────────────
     if (config.rds?.enabled === true) {
-        const s = mkSpinner('Extracting RDS instances...', ci);
+        const s = mkSpinner('Extracting RDS instances...');
         try {
             const result = await (0, aws_1.extractRDSMetadata)(awsCfg);
             servicesMeta.rds = result;
@@ -249,7 +196,7 @@ async function runAnalyze(options = {}) {
     }
     // ── CloudWatch Logs ──────────────────────────────────────────────────────────
     if (config.cloudwatchLogs?.enabled) {
-        const s = mkSpinner('Sampling CloudWatch Logs (errors only, max 50 groups)...', ci);
+        const s = mkSpinner('Sampling CloudWatch Logs (errors only, max 50 groups)...');
         try {
             const result = await (0, logs_1.extractLogsMetadata)({
                 ...awsCfg,
@@ -267,7 +214,7 @@ async function runAnalyze(options = {}) {
     // ── IaC schema (Terraform / CloudFormation / CDK) ────────────────────────────
     let iacDriftAnalyzer;
     {
-        const s = mkSpinner('Extracting IaC schema (Terraform / CloudFormation / CDK)...', ci);
+        const s = mkSpinner('Extracting IaC schema (Terraform / CloudFormation / CDK)...');
         try {
             const iacSchema = await (0, terraform_1.extractIaCSchema)(repoPath);
             const total = iacSchema.dynamoTables.length + iacSchema.rdsInstances.length +
@@ -285,7 +232,7 @@ async function runAnalyze(options = {}) {
     // ── Repository scan ──────────────────────────────────────────────────────────
     let operations;
     {
-        const s = mkSpinner(`Scanning ${path.basename(repoPath)} for service usage...`, ci);
+        const s = mkSpinner(`Scanning ${path.basename(repoPath)} for service usage...`);
         try {
             operations = await (0, context_1.scanRepository)(repoPath);
             s.succeed(chalk_1.default.green('Repository scanned') + chalk_1.default.dim(`  ${operations.length} service operation(s) found`));
@@ -298,30 +245,30 @@ async function runAnalyze(options = {}) {
     // ── Build graph ──────────────────────────────────────────────────────────────
     let graph;
     {
-        const s = mkSpinner('Building infrastructure graph...', ci);
+        const s = mkSpinner('Building infrastructure graph...');
         graph = (0, graph_1.buildGraph)(operations, dynamoMeta, postgresMeta, mysqlMeta, mongoMeta, servicesMeta);
         s.succeed(chalk_1.default.green('Graph built') + chalk_1.default.dim(`  ${graph.nodes.length} nodes, ${graph.edges.length} edges`));
     }
     // ── Run analyzers ────────────────────────────────────────────────────────────
     let findings;
     {
-        const s = mkSpinner('Running analyzers...', ci);
+        const s = mkSpinner('Running analyzers...');
         const analyzers = [
-            ...(config.dynamodb?.enabled === true || isFallback ? [
+            ...(config.dynamodb?.enabled === true ? [
                 new analyzers_1.FullTableScanAnalyzer(),
                 new analyzers_1.MissingGSIAnalyzer(),
                 new analyzers_1.HotPartitionAnalyzer(),
             ] : []),
-            ...(config.postgres?.enabled || isFallback ? [
+            ...(config.postgres?.enabled ? [
                 new analyzers_1.MissingIndexAnalyzer(),
                 new analyzers_1.NplusOneAnalyzer(),
                 new analyzers_1.LargeSelectAnalyzer(),
             ] : []),
-            ...(config.mysql?.enabled || isFallback ? [
+            ...(config.mysql?.enabled ? [
                 new analyzers_1.MissingMySQLIndexAnalyzer(),
                 new analyzers_1.MySQLFullTableScanAnalyzer(),
             ] : []),
-            ...(config.mongodb?.enabled || isFallback ? [
+            ...(config.mongodb?.enabled ? [
                 new analyzers_1.MissingMongoIndexAnalyzer(),
                 new analyzers_1.MongoCollectionScanAnalyzer(),
             ] : []),
@@ -356,11 +303,8 @@ async function runAnalyze(options = {}) {
     (0, core_1.writeCache)('graph', graph);
     (0, core_1.writeCache)('findings', findings);
     (0, core_1.writeCache)('operations', operations);
+    (0, core_1.writeCache)('meta', { dynamoMeta, postgresMeta, mysqlMeta, mongoMeta, servicesMeta });
     // ── Output ────────────────────────────────────────────────────────────────────
-    if (ci) {
-        emitCIOutput(findings, failOn);
-        return;
-    }
     console.log('');
     if (findings.length === 0) {
         console.log(`  ${chalk_1.default.green.bold('✓ No issues found!')}  ${chalk_1.default.dim('Your infrastructure looks clean.')}`);
@@ -378,3 +322,62 @@ async function runAnalyze(options = {}) {
     utils_1.log.info(`Run ${chalk_1.default.cyan('infrawise dev')} to explore via the MCP server`);
     console.log('');
 }
+async function runCodeRefresh(repoPath, config) {
+    const cached = (0, core_1.readCache)('meta', Infinity);
+    const dynamoMeta = cached?.dynamoMeta ?? [];
+    const postgresMeta = cached?.postgresMeta ?? [];
+    const mysqlMeta = cached?.mysqlMeta ?? [];
+    const mongoMeta = cached?.mongoMeta ?? [];
+    const servicesMeta = cached?.servicesMeta ?? {};
+    // Re-run IaC schema (pure file scan, no AWS calls)
+    let iacDriftAnalyzer;
+    try {
+        const iacSchema = await (0, terraform_1.extractIaCSchema)(repoPath);
+        iacDriftAnalyzer = new analyzers_1.IaCDriftAnalyzer();
+        iacDriftAnalyzer.setIaCSchema(iacSchema);
+    }
+    catch {
+        // IaC scan is best-effort
+    }
+    // Re-run repo scan
+    let operations;
+    try {
+        operations = await (0, context_1.scanRepository)(repoPath);
+    }
+    catch {
+        operations = [];
+    }
+    const graph = (0, graph_1.buildGraph)(operations, dynamoMeta, postgresMeta, mysqlMeta, mongoMeta, servicesMeta);
+    const analyzers = [
+        ...(config.dynamodb?.enabled === true ? [
+            new analyzers_1.FullTableScanAnalyzer(), new analyzers_1.MissingGSIAnalyzer(), new analyzers_1.HotPartitionAnalyzer(),
+        ] : []),
+        ...(config.postgres?.enabled ? [
+            new analyzers_1.MissingIndexAnalyzer(), new analyzers_1.NplusOneAnalyzer(), new analyzers_1.LargeSelectAnalyzer(),
+        ] : []),
+        ...(config.mysql?.enabled ? [
+            new analyzers_1.MissingMySQLIndexAnalyzer(), new analyzers_1.MySQLFullTableScanAnalyzer(),
+        ] : []),
+        ...(config.mongodb?.enabled ? [
+            new analyzers_1.MissingMongoIndexAnalyzer(), new analyzers_1.MongoCollectionScanAnalyzer(),
+        ] : []),
+        ...(config.sqs?.enabled === true ? [
+            new analyzers_1.MissingDLQAnalyzer(), new analyzers_1.UnencryptedQueueAnalyzer(), new analyzers_1.LargeQueueBacklogAnalyzer(),
+        ] : []),
+        ...(config.secretsManager?.enabled === true ? [new analyzers_1.MissingSecretRotationAnalyzer()] : []),
+        ...(config.cloudwatchLogs?.enabled ? [new analyzers_1.MissingLogRetentionAnalyzer()] : []),
+        ...(config.lambda?.enabled === true ? [
+            new analyzers_1.LambdaDefaultMemoryAnalyzer(), new analyzers_1.LambdaHighTimeoutAnalyzer(),
+        ] : []),
+        ...(config.rds?.enabled === true ? [
+            new analyzers_1.RDSPubliclyAccessibleAnalyzer(), new analyzers_1.RDSNoBackupAnalyzer(), new analyzers_1.RDSUnencryptedAnalyzer(),
+            new analyzers_1.RDSNoDeletionProtectionAnalyzer(), new analyzers_1.RDSNoMultiAZAnalyzer(),
+        ] : []),
+        ...(iacDriftAnalyzer ? [iacDriftAnalyzer] : []),
+    ];
+    const findings = await (0, analyzers_1.runAllAnalyzers)(graph, analyzers);
+    (0, core_1.writeCache)('graph', graph);
+    (0, core_1.writeCache)('findings', findings);
+    (0, core_1.writeCache)('operations', operations);
+    return { graph, findings };
+}

package/dist/cli/commands/dev.js

@@ -1,14 +1,50 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runDev = runDev;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
 const core_1 = require("../../core");
 const server_1 = require("../../server");
 const utils_1 = require("../utils");
+const analyze_1 = require("./analyze");
 const BOX_W = 52;
 const TOOL_MAP = [
     { name: 'get_infra_overview' },
@@ -67,7 +103,8 @@ async function runDev(options = {}) {
         console.error((0, core_1.formatError)(err));
         process.exit(1);
     }
-    // Load cached state
+    const repoPath = process.cwd();
+    // Auto-analyze if no cache
     const cachedGraph = (0, core_1.readCache)('graph');
     const cachedFindings = (0, core_1.readCache)('findings');
     if (cachedGraph && cachedFindings) {
@@ -75,9 +112,12 @@ async function runDev(options = {}) {
         (0, server_1.setGraphState)(cachedGraph, cachedFindings);
     }
     else {
-        utils_1.log.warn('No cached analysis found');
-        utils_1.log.dim(`Run ${chalk_1.default.cyan('infrawise analyze')} first for full results`);
-        (0, server_1.setGraphState)({ nodes: [], edges: [] }, []);
+        utils_1.log.warn('No cache found — running analysis now...');
+        console.log('');
+        await (0, analyze_1.runAnalyze)({ repo: repoPath, config: options.config });
+        const freshGraph = (0, core_1.readCache)('graph') ?? { nodes: [], edges: [] };
+        const freshFindings = (0, core_1.readCache)('findings') ?? [];
+        (0, server_1.setGraphState)(freshGraph, freshFindings);
     }
     console.log('');
     // Start server
@@ -90,7 +130,6 @@ async function runDev(options = {}) {
     const inactiveTools = TOOL_MAP.filter((t) => !isEnabled(config, t.service)).map((t) => t.name);
     // URL rows
     const mcpUrl = `http://localhost:${port}/mcp`;
-    const toolsUrl = `http://localhost:${port}/mcp/tools`;
     const healthUrl = `http://localhost:${port}/health`;
     // Print box
     console.log('');
@@ -98,7 +137,6 @@ async function runDev(options = {}) {
     boxLine('  MCP Server', chalk_1.default.bold('  MCP Server'));
     boxDivider();
     boxLine(`  POST ${mcpUrl}`, `  ${chalk_1.default.dim('POST')} ${chalk_1.default.cyan(mcpUrl)}`);
-    boxLine(`  GET  ${toolsUrl}`, `  ${chalk_1.default.dim('GET')}  ${chalk_1.default.cyan(toolsUrl)}`);
     boxLine(`  GET  ${healthUrl}`, `  ${chalk_1.default.dim('GET')}  ${chalk_1.default.cyan(healthUrl)}`);
     boxDivider();
     const activeLabel = `  Tools (${activeTools.length} active${inactiveTools.length > 0 ? ` · ${inactiveTools.length} off` : ''})`;
@@ -118,7 +156,49 @@ async function runDev(options = {}) {
     console.log(chalk_1.default.dim('  Add via CLI:'));
     console.log(chalk_1.default.dim(`  claude mcp add --transport http infrawise ${mcpUrl}`));
     console.log('');
-    console.log(chalk_1.default.dim('  Press Ctrl+C to stop\n'));
+    console.log(chalk_1.default.dim('  Watching for file changes... Press Ctrl+C to stop\n'));
+    // File watch — re-run code analysis on save, skip slow AWS/DB extraction
+    let debounceTimer = null;
+    let refreshing = false;
+    const configFile = path.resolve(options.config ?? 'infrawise.yaml');
+    try {
+        fs.watch(repoPath, { recursive: true }, (_, filename) => {
+            if (!filename)
+                return;
+            const abs = path.join(repoPath, filename);
+            if (abs === configFile) {
+                console.log(chalk_1.default.dim('\n  infrawise.yaml changed — restart to apply config changes\n'));
+                return;
+            }
+            const ext = path.extname(filename);
+            if (!['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs'].includes(ext))
+                return;
+            if (filename.includes('node_modules') || filename.startsWith('.infrawise'))
+                return;
+            if (debounceTimer)
+                clearTimeout(debounceTimer);
+            debounceTimer = setTimeout(async () => {
+                if (refreshing)
+                    return;
+                refreshing = true;
+                const spin = (0, ora_1.default)({ text: chalk_1.default.dim('Refreshing code analysis...'), color: 'cyan' }).start();
+                try {
+                    const { graph, findings } = await (0, analyze_1.runCodeRefresh)(repoPath, config);
+                    (0, server_1.setGraphState)(graph, findings);
+                    spin.succeed(chalk_1.default.green('Analysis refreshed') + chalk_1.default.dim(`  ${graph.nodes.length} nodes · ${findings.length} finding(s)`));
+                }
+                catch (err) {
+                    spin.warn(chalk_1.default.yellow('Refresh failed') + chalk_1.default.dim(`  ${err instanceof Error ? err.message : String(err)}`));
+                }
+                finally {
+                    refreshing = false;
+                }
+            }, 2000);
+        });
+    }
+    catch {
+        // fs.watch may not support recursive on all platforms — silently skip
+    }
     process.on('SIGINT', () => {
         console.log(chalk_1.default.dim('\n  Shutting down...\n'));
         process.exit(0);

package/dist/cli/index.js

@@ -37,17 +37,12 @@ program
     .option('-c, --config <path>', 'Path to infrawise.yaml', 'infrawise.yaml')
     .option('-r, --repo <path>', 'Path to repository to scan', process.cwd())
     .option('--no-cache', 'Skip reading/writing the cache')
-    .option('--ci', 'CI mode: GitHub annotations output, job summary, exit code on findings')
-    .option('--fail-on <severity>', 'Exit 1 if findings at or above this severity (high|medium|low|never)', 'high')
     .action(async (options) => {
-    if (!options.ci)
-        (0, utils_1.printBanner)();
+    (0, utils_1.printBanner)();
     await (0, analyze_1.runAnalyze)({
         config: options.config !== 'infrawise.yaml' ? options.config : undefined,
         repo: options.repo,
         noCache: !options.cache,
-        ci: options.ci ?? false,
-        failOn: options.failOn ?? 'high',
     });
 });
 program

package/dist/core/config.js

@@ -74,6 +74,7 @@ exports.InfrawiseConfigSchema = zod_1.z.object({
     secretsManager: zod_1.z.object({ enabled: zod_1.z.boolean().optional().default(true) }).optional(),
     lambda: zod_1.z.object({ enabled: zod_1.z.boolean().optional().default(true) }).optional(),
     rds: zod_1.z.object({ enabled: zod_1.z.boolean().optional().default(false) }).optional(),
+    kafka: zod_1.z.object({ enabled: zod_1.z.boolean().optional().default(false) }).optional(),
     cloudwatchLogs: zod_1.z.object({
         enabled: zod_1.z.boolean().optional().default(false),
         logGroupPrefixes: zod_1.z.array(zod_1.z.string()).optional(),

package/dist/server/index.js

@@ -5,10 +5,17 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.currentFindings = exports.currentGraph = void 0;
 exports.setGraphState = setGraphState;
+exports.createMcpServer = createMcpServer;
 exports.createServer = createServer;
+const fs_1 = require("fs");
+const path_1 = require("path");
 const fastify_1 = __importDefault(require("fastify"));
 const cors_1 = __importDefault(require("@fastify/cors"));
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
+const zod_1 = require("zod");
 const core_1 = require("../core");
+const { version } = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(__dirname, '../../package.json'), 'utf8'));
 const analyzers_1 = require("../analyzers");
 const graph_1 = require("../graph");
 // ── State ────────────────────────────────────────────────────────────────────
@@ -20,317 +27,249 @@ function setGraphState(graph, findings) {
     exports.currentGraph = currentGraph = graph;
     exports.currentFindings = currentFindings = findings;
 }
+// ── Helpers ──────────────────────────────────────────────────────────────────
 function toText(data) {
     return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
 }
-// ── Tools ────────────────────────────────────────────────────────────────────
-const TOOLS = [
-    {
-        name: 'get_infra_overview',
+function logged(name, fn) {
+    return async (args) => {
+        const hasArgs = Object.keys(args).length > 0;
+        core_1.logger.info(`→ ${name}${hasArgs ? `  ${JSON.stringify(args)}` : ''}`);
+        return fn(args);
+    };
+}
+// ── MCP Server ────────────────────────────────────────────────────────────────
+function createMcpServer() {
+    const mcp = new mcp_js_1.McpServer({ name: 'infrawise', version });
+    mcp.registerTool('get_infra_overview', {
         description: 'Returns a complete snapshot of all infrastructure: databases, queues, topics, secrets, parameters, log groups, lambdas, and all findings. Start here for a full picture.',
-        inputSchema: { type: 'object', properties: {} },
-        handler: async () => {
-            const tables = (0, graph_1.getTableNodes)(currentGraph);
-            const queues = (0, graph_1.getQueueNodes)(currentGraph);
-            const topics = (0, graph_1.getTopicNodes)(currentGraph);
-            const secrets = (0, graph_1.getSecretNodes)(currentGraph);
-            const parameters = (0, graph_1.getParameterNodes)(currentGraph);
-            const logGroups = (0, graph_1.getLogGroupNodes)(currentGraph);
-            const lambdas = (0, graph_1.getLambdaNodes)(currentGraph);
-            const functions = (0, graph_1.getFunctionNodes)(currentGraph);
-            return toText({
-                summary: {
-                    tables: tables.length, functions: functions.length,
-                    queues: queues.length, topics: topics.length,
-                    secrets: secrets.length, parameters: parameters.length,
-                    logGroups: logGroups.length, lambdas: lambdas.length,
-                    totalNodes: currentGraph.nodes.length, totalEdges: currentGraph.edges.length,
-                    findings: (0, analyzers_1.summarizeFindings)(currentFindings),
-                },
-                databases: tables.map((t) => ({ name: t.name, type: t.databaseType })),
-                queues: queues.map((q) => ({ name: q.name, hasDLQ: q.hasDLQ, encrypted: q.encrypted, approximateMessages: q.approximateMessages })),
-                topics: topics.map((t) => ({ name: t.name, subscriptions: t.subscriptionCount })),
-                secrets: secrets.map((s) => ({ name: s.name, rotationEnabled: s.rotationEnabled })),
-                parameters: parameters.map((p) => ({ name: p.name, type: p.paramType, tier: p.tier })),
-                lambdas: lambdas.map((l) => ({ name: l.name, runtime: l.runtime, memoryMB: l.memoryMB })),
-                logGroups: logGroups.map((lg) => ({ name: lg.name, retentionDays: lg.retentionDays ?? 'never', errorCount: lg.errorCount })),
-                highFindings: currentFindings.filter((f) => f.severity === 'high').map((f) => ({ issue: f.issue, recommendation: f.recommendation })),
-            });
-        },
-    },
-    {
-        name: 'get_graph_summary',
-        description: 'Returns the full infrastructure graph (all nodes and edges) plus findings summary.',
-        inputSchema: { type: 'object', properties: {} },
-        handler: async () => toText({
-            nodes: currentGraph.nodes,
-            edges: currentGraph.edges,
-            findings: currentFindings,
+        inputSchema: zod_1.z.object({}),
+    }, logged('get_infra_overview', async () => {
+        const tables = (0, graph_1.getTableNodes)(currentGraph);
+        const queues = (0, graph_1.getQueueNodes)(currentGraph);
+        const topics = (0, graph_1.getTopicNodes)(currentGraph);
+        const secrets = (0, graph_1.getSecretNodes)(currentGraph);
+        const parameters = (0, graph_1.getParameterNodes)(currentGraph);
+        const logGroups = (0, graph_1.getLogGroupNodes)(currentGraph);
+        const lambdas = (0, graph_1.getLambdaNodes)(currentGraph);
+        const functions = (0, graph_1.getFunctionNodes)(currentGraph);
+        return toText({
             summary: {
+                tables: tables.length, functions: functions.length,
+                queues: queues.length, topics: topics.length,
+                secrets: secrets.length, parameters: parameters.length,
+                logGroups: logGroups.length, lambdas: lambdas.length,
                 totalNodes: currentGraph.nodes.length, totalEdges: currentGraph.edges.length,
-                tables: (0, graph_1.getTableNodes)(currentGraph).length, functions: (0, graph_1.getFunctionNodes)(currentGraph).length,
-                queues: (0, graph_1.getQueueNodes)(currentGraph).length, scans: (0, graph_1.getScanEdges)(currentGraph).length,
-                ...(0, analyzers_1.summarizeFindings)(currentFindings),
+                findings: (0, analyzers_1.summarizeFindings)(currentFindings),
             },
-        }),
-    },
-    {
-        name: 'analyze_function',
-        description: 'Analyze a specific function for all infrastructure issues: DB queries, queue publishing, secret access, etc.',
-        inputSchema: {
-            type: 'object',
-            properties: { function: { type: 'string', description: 'Function name to analyze' } },
-            required: ['function'],
-        },
-        handler: async ({ function: functionName }) => {
-            const funcNode = currentGraph.nodes.find((n) => n.type === 'function' && n.name === functionName);
-            if (!funcNode) {
-                return toText({ function: functionName, found: false, issues: [], recommendations: [`Function "${String(functionName)}" not found in the analyzed codebase.`] });
-            }
-            const outEdges = (0, graph_1.getOutgoingEdges)(currentGraph, funcNode.id);
-            const relatedFindings = currentFindings.filter((f) => {
-                const meta = f.metadata;
-                return meta?.functionName === functionName || String(meta?.callerFunctions ?? '').includes(String(functionName));
-            });
-            return toText({
-                function: functionName, found: true,
-                file: funcNode.type === 'function' ? funcNode.file : undefined,
-                accesses: outEdges.map((e) => {
-                    const target = currentGraph.nodes.find((n) => n.id === e.to);
-                    return { targetId: e.to, edgeType: e.type, targetName: target && 'name' in target ? target.name : e.to, targetType: target?.type };
-                }),
-                issues: relatedFindings.map((f) => ({ severity: f.severity, issue: f.issue, description: f.description })),
-                recommendations: [...new Set(relatedFindings.map((f) => f.recommendation))],
-            });
+            databases: tables.map((t) => ({ name: t.name, type: t.databaseType })),
+            queues: queues.map((q) => ({ name: q.name, hasDLQ: q.hasDLQ, encrypted: q.encrypted, approximateMessages: q.approximateMessages })),
+            topics: topics.map((t) => ({ name: t.name, subscriptions: t.subscriptionCount })),
+            secrets: secrets.map((s) => ({ name: s.name, rotationEnabled: s.rotationEnabled })),
+            parameters: parameters.map((p) => ({ name: p.name, type: p.paramType, tier: p.tier })),
+            lambdas: lambdas.map((l) => ({ name: l.name, runtime: l.runtime, memoryMB: l.memoryMB })),
+            logGroups: logGroups.map((lg) => ({ name: lg.name, retentionDays: lg.retentionDays ?? 'never', errorCount: lg.errorCount })),
+            highFindings: currentFindings.filter((f) => f.severity === 'high').map((f) => ({ issue: f.issue, recommendation: f.recommendation })),
+        });
+    }));
+    mcp.registerTool('get_graph_summary', {
+        description: 'Returns the full infrastructure graph (all nodes and edges) plus findings summary.',
+        inputSchema: zod_1.z.object({}),
+    }, logged('get_graph_summary', async () => toText({
+        nodes: currentGraph.nodes,
+        edges: currentGraph.edges,
+        findings: currentFindings,
+        summary: {
+            totalNodes: currentGraph.nodes.length, totalEdges: currentGraph.edges.length,
+            tables: (0, graph_1.getTableNodes)(currentGraph).length, functions: (0, graph_1.getFunctionNodes)(currentGraph).length,
+            queues: (0, graph_1.getQueueNodes)(currentGraph).length, scans: (0, graph_1.getScanEdges)(currentGraph).length,
+            ...(0, analyzers_1.summarizeFindings)(currentFindings),
         },
-    },
-    {
-        name: 'suggest_gsi',
+    })));
+    mcp.registerTool('analyze_function', {
+        description: 'Analyze a specific function for all infrastructure issues: DB queries, queue publishing, secret access, etc.',
+        inputSchema: zod_1.z.object({ function: zod_1.z.string().describe('Function name to analyze') }),
+    }, logged('analyze_function', async ({ function: functionName }) => {
+        const funcNode = currentGraph.nodes.find((n) => n.type === 'function' && n.name === functionName);
+        if (!funcNode) {
+            return toText({ function: functionName, found: false, issues: [], recommendations: [`Function "${functionName}" not found in the analyzed codebase.`] });
+        }
+        const outEdges = (0, graph_1.getOutgoingEdges)(currentGraph, funcNode.id);
+        const relatedFindings = currentFindings.filter((f) => {
+            const meta = f.metadata;
+            return meta?.functionName === functionName || String(meta?.callerFunctions ?? '').includes(functionName);
+        });
+        return toText({
+            function: functionName, found: true,
+            file: funcNode.type === 'function' ? funcNode.file : undefined,
+            accesses: outEdges.map((e) => {
+                const target = currentGraph.nodes.find((n) => n.id === e.to);
+                return { targetId: e.to, edgeType: e.type, targetName: target && 'name' in target ? target.name : e.to, targetType: target?.type };
+            }),
+            issues: relatedFindings.map((f) => ({ severity: f.severity, issue: f.issue, description: f.description })),
+            recommendations: [...new Set(relatedFindings.map((f) => f.recommendation))],
+        });
+    }));
+    mcp.registerTool('suggest_gsi', {
         description: 'Get GSI suggestions for a DynamoDB table and attribute',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                table: { type: 'string', description: 'DynamoDB table name' },
-                attribute: { type: 'string', description: 'Attribute to create the GSI on' },
-            },
-            required: ['table', 'attribute'],
-        },
-        handler: async ({ table: tableName, attribute }) => {
-            const sanitizedAttr = String(attribute).replace(/[^a-zA-Z0-9_]/g, '_');
-            const indexName = `${String(tableName)}-${sanitizedAttr}-index`;
-            const tableNode = currentGraph.nodes.find((n) => n.type === 'table' && n.databaseType === 'dynamodb' && 'name' in n && n.name === tableName);
-            return toText({
-                table: tableName, attribute, found: !!tableNode,
-                index: { name: indexName, partitionKey: attribute, projectionType: 'ALL', billingMode: 'PAY_PER_REQUEST' },
-                rationale: `A GSI on "${String(attribute)}" allows Query instead of Scan when filtering by this attribute.`,
-                recommendation: `Add GSI "${indexName}" with partition key "${String(attribute)}" to your IaC definition.`,
-            });
-        },
-    },
-    {
-        name: 'postgres_index_suggestions',
+        inputSchema: zod_1.z.object({
+            table: zod_1.z.string().describe('DynamoDB table name'),
+            attribute: zod_1.z.string().describe('Attribute to create the GSI on'),
+        }),
+    }, logged('suggest_gsi', async ({ table: tableName, attribute }) => {
+        const sanitizedAttr = attribute.replace(/[^a-zA-Z0-9_]/g, '_');
+        const indexName = `${tableName}-${sanitizedAttr}-index`;
+        const tableNode = currentGraph.nodes.find((n) => n.type === 'table' && n.databaseType === 'dynamodb' && 'name' in n && n.name === tableName);
+        return toText({
+            table: tableName, attribute, found: !!tableNode,
+            index: { name: indexName, partitionKey: attribute, projectionType: 'ALL', billingMode: 'PAY_PER_REQUEST' },
+            rationale: `A GSI on "${attribute}" allows Query instead of Scan when filtering by this attribute.`,
+            recommendation: `Add GSI "${indexName}" with partition key "${attribute}" to your IaC definition.`,
+        });
+    }));
+    mcp.registerTool('postgres_index_suggestions', {
         description: 'Get PostgreSQL index suggestions for a table column',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                table: { type: 'string', description: 'PostgreSQL table name' },
-                column: { type: 'string', description: 'Column name to index' },
-            },
-            required: ['table', 'column'],
-        },
-        handler: async ({ table: tableName, column }) => {
-            const sanitizedCol = String(column).replace(/[^a-zA-Z0-9_]/g, '_');
-            const sanitizedTable = String(tableName).replace(/[^a-zA-Z0-9_]/g, '_');
-            const indexName = `idx_${sanitizedTable}_${sanitizedCol}`;
-            return toText({
-                table: tableName, column,
-                recommendation: `CREATE INDEX CONCURRENTLY ${indexName} ON ${String(tableName)} (${String(column)});`,
-                rationale: `An index on "${String(column)}" eliminates sequential scans when filtering on this column.`,
-                notes: ['Use CONCURRENTLY to avoid locking the table', 'Run ANALYZE after creation',
-                    `Partial index: CREATE INDEX CONCURRENTLY ${indexName}_partial ON ${String(tableName)} (${String(column)}) WHERE ${String(column)} IS NOT NULL;`],
-            });
-        },
-    },
-    {
-        name: 'suggest_mongo_index',
+        inputSchema: zod_1.z.object({
+            table: zod_1.z.string().describe('PostgreSQL table name'),
+            column: zod_1.z.string().describe('Column name to index'),
+        }),
+    }, logged('postgres_index_suggestions', async ({ table: tableName, column }) => {
+        const sanitizedCol = column.replace(/[^a-zA-Z0-9_]/g, '_');
+        const sanitizedTable = tableName.replace(/[^a-zA-Z0-9_]/g, '_');
+        const indexName = `idx_${sanitizedTable}_${sanitizedCol}`;
+        return toText({
+            table: tableName, column,
+            recommendation: `CREATE INDEX CONCURRENTLY ${indexName} ON ${tableName} (${column});`,
+            rationale: `An index on "${column}" eliminates sequential scans when filtering on this column.`,
+            notes: ['Use CONCURRENTLY to avoid locking the table', 'Run ANALYZE after creation',
+                `Partial index: CREATE INDEX CONCURRENTLY ${indexName}_partial ON ${tableName} (${column}) WHERE ${column} IS NOT NULL;`],
+        });
+    }));
+    mcp.registerTool('suggest_mongo_index', {
         description: 'Get index suggestions for a MongoDB collection field',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                collection: { type: 'string', description: 'MongoDB collection name' },
-                field: { type: 'string', description: 'Field name to index' },
-            },
-            required: ['collection', 'field'],
-        },
-        handler: async ({ collection, field }) => toText({
-            collection, field,
-            recommendation: `db.${String(collection)}.createIndex({ ${String(field)}: 1 })`,
-            rationale: `An index on "${String(field)}" eliminates full collection scans when filtering on this field.`,
-            notes: [
-                `Compound: db.${String(collection)}.createIndex({ ${String(field)}: 1, otherField: 1 })`,
-                `Text: db.${String(collection)}.createIndex({ ${String(field)}: "text" })`,
-                `Verify: db.${String(collection)}.explain("executionStats").find({ ${String(field)}: value })`,
-            ],
+        inputSchema: zod_1.z.object({
+            collection: zod_1.z.string().describe('MongoDB collection name'),
+            field: zod_1.z.string().describe('Field name to index'),
         }),
-    },
-    {
-        name: 'mysql_index_suggestions',
+    }, logged('suggest_mongo_index', async ({ collection, field }) => toText({
+        collection, field,
+        recommendation: `db.${collection}.createIndex({ ${field}: 1 })`,
+        rationale: `An index on "${field}" eliminates full collection scans when filtering on this field.`,
+        notes: [
+            `Compound: db.${collection}.createIndex({ ${field}: 1, otherField: 1 })`,
+            `Text: db.${collection}.createIndex({ ${field}: "text" })`,
+            `Verify: db.${collection}.explain("executionStats").find({ ${field}: value })`,
+        ],
+    })));
+    mcp.registerTool('mysql_index_suggestions', {
         description: 'Get MySQL index suggestions for a table column',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                table: { type: 'string', description: 'MySQL table name' },
-                column: { type: 'string', description: 'Column name to index' },
-            },
-            required: ['table', 'column'],
-        },
-        handler: async ({ table: tableName, column }) => {
-            const sanitizedCol = String(column).replace(/[^a-zA-Z0-9_]/g, '_');
-            const sanitizedTable = String(tableName).replace(/[^a-zA-Z0-9_]/g, '_');
-            const indexName = `idx_${sanitizedTable}_${sanitizedCol}`;
-            return toText({
-                table: tableName, column,
-                recommendation: `ALTER TABLE ${String(tableName)} ADD INDEX ${indexName} (${String(column)});`,
-                rationale: `An index on "${String(column)}" eliminates full table scans when filtering on this column.`,
-                notes: ['MySQL InnoDB adds indexes online (no full lock for 5.6+)', 'EXPLAIN SELECT ... to verify after adding',
-                    `Composite: ALTER TABLE ${String(tableName)} ADD INDEX idx_composite (${String(column)}, other_column);`],
-            });
-        },
-    },
-    {
-        name: 'get_queue_details',
+        inputSchema: zod_1.z.object({
+            table: zod_1.z.string().describe('MySQL table name'),
+            column: zod_1.z.string().describe('Column name to index'),
+        }),
+    }, logged('mysql_index_suggestions', async ({ table: tableName, column }) => {
+        const sanitizedCol = column.replace(/[^a-zA-Z0-9_]/g, '_');
+        const sanitizedTable = tableName.replace(/[^a-zA-Z0-9_]/g, '_');
+        const indexName = `idx_${sanitizedTable}_${sanitizedCol}`;
+        return toText({
+            table: tableName, column,
+            recommendation: `ALTER TABLE ${tableName} ADD INDEX ${indexName} (${column});`,
+            rationale: `An index on "${column}" eliminates full table scans when filtering on this column.`,
+            notes: ['MySQL InnoDB adds indexes online (no full lock for 5.6+)', 'EXPLAIN SELECT ... to verify after adding',
+                `Composite: ALTER TABLE ${tableName} ADD INDEX idx_composite (${column}, other_column);`],
+        });
+    }));
+    mcp.registerTool('get_queue_details', {
         description: 'Returns all SQS queues with DLQ status, encryption, message counts, and retention.',
-        inputSchema: { type: 'object', properties: {} },
-        handler: async () => {
-            const queues = (0, graph_1.getQueueNodes)(currentGraph);
-            const queueFindings = currentFindings.filter((f) => f.metadata?.queueName);
-            return toText({
-                total: queues.length,
-                queues: queues.map((q) => ({
-                    name: q.name, provider: q.provider, hasDLQ: q.hasDLQ, encrypted: q.encrypted,
-                    approximateMessages: q.approximateMessages, retentionDays: q.retentionDays,
-                    findings: queueFindings.filter((f) => f.metadata.queueName === q.name).map((f) => ({ severity: f.severity, issue: f.issue })),
-                })),
-            });
-        },
-    },
-    {
-        name: 'get_topic_details',
+        inputSchema: zod_1.z.object({}),
+    }, logged('get_queue_details', async () => {
+        const queues = (0, graph_1.getQueueNodes)(currentGraph);
+        const queueFindings = currentFindings.filter((f) => f.metadata?.queueName);
+        return toText({
+            total: queues.length,
+            queues: queues.map((q) => ({
+                name: q.name, provider: q.provider, hasDLQ: q.hasDLQ, encrypted: q.encrypted,
+                approximateMessages: q.approximateMessages, retentionDays: q.retentionDays,
+                findings: queueFindings.filter((f) => f.metadata.queueName === q.name).map((f) => ({ severity: f.severity, issue: f.issue })),
+            })),
+        });
+    }));
+    mcp.registerTool('get_topic_details', {
         description: 'Returns all SNS topics with subscription counts and protocols.',
-        inputSchema: { type: 'object', properties: {} },
-        handler: async () => {
-            const topics = (0, graph_1.getTopicNodes)(currentGraph);
-            return toText({ total: topics.length, topics: topics.map((t) => ({ name: t.name, provider: t.provider, subscriptionCount: t.subscriptionCount, encrypted: t.encrypted })) });
-        },
-    },
-    {
-        name: 'get_secrets_overview',
+        inputSchema: zod_1.z.object({}),
+    }, logged('get_topic_details', async () => {
+        const topics = (0, graph_1.getTopicNodes)(currentGraph);
+        return toText({ total: topics.length, topics: topics.map((t) => ({ name: t.name, provider: t.provider, subscriptionCount: t.subscriptionCount, encrypted: t.encrypted })) });
+    }));
+    mcp.registerTool('get_secrets_overview', {
         description: 'Returns all Secrets Manager secrets: names, rotation status. Secret VALUES are never included.',
-        inputSchema: { type: 'object', properties: {} },
-        handler: async () => {
-            const secrets = (0, graph_1.getSecretNodes)(currentGraph);
-            const secretFindings = currentFindings.filter((f) => f.metadata?.secretName);
-            return toText({
-                total: secrets.length, note: 'Secret values are never included in this response.',
-                secrets: secrets.map((s) => ({
-                    name: s.name, provider: s.provider, rotationEnabled: s.rotationEnabled, rotationDays: s.rotationDays,
-                    findings: secretFindings.filter((f) => f.metadata.secretName === s.name).map((f) => ({ severity: f.severity, issue: f.issue })),
-                })),
-            });
-        },
-    },
-    {
-        name: 'get_parameter_overview',
+        inputSchema: zod_1.z.object({}),
+    }, logged('get_secrets_overview', async () => {
+        const secrets = (0, graph_1.getSecretNodes)(currentGraph);
+        const secretFindings = currentFindings.filter((f) => f.metadata?.secretName);
+        return toText({
+            total: secrets.length, note: 'Secret values are never included in this response.',
+            secrets: secrets.map((s) => ({
+                name: s.name, provider: s.provider, rotationEnabled: s.rotationEnabled, rotationDays: s.rotationDays,
+                findings: secretFindings.filter((f) => f.metadata.secretName === s.name).map((f) => ({ severity: f.severity, issue: f.issue })),
+            })),
+        });
+    }));
+    mcp.registerTool('get_parameter_overview', {
         description: 'Returns all SSM Parameter Store parameters: names, types, tiers. Parameter VALUES are never included.',
-        inputSchema: { type: 'object', properties: {} },
-        handler: async () => {
-            const parameters = (0, graph_1.getParameterNodes)(currentGraph);
-            return toText({
-                total: parameters.length, note: 'Parameter values are never included in this response.',
-                parameters: parameters.map((p) => ({ name: p.name, provider: p.provider, type: p.paramType, tier: p.tier })),
-            });
-        },
-    },
-    {
-        name: 'get_lambda_overview',
+        inputSchema: zod_1.z.object({}),
+    }, logged('get_parameter_overview', async () => {
+        const parameters = (0, graph_1.getParameterNodes)(currentGraph);
+        return toText({
+            total: parameters.length, note: 'Parameter values are never included in this response.',
+            parameters: parameters.map((p) => ({ name: p.name, provider: p.provider, type: p.paramType, tier: p.tier })),
+        });
+    }));
+    mcp.registerTool('get_lambda_overview', {
         description: 'Returns all Lambda functions: runtime, memory, timeout, env var key names (values never included).',
-        inputSchema: { type: 'object', properties: {} },
-        handler: async () => {
-            const lambdas = (0, graph_1.getLambdaNodes)(currentGraph);
-            const lambdaFindings = currentFindings.filter((f) => f.metadata?.functionName);
-            return toText({
-                total: lambdas.length, note: 'Environment variable values are never included.',
-                lambdas: lambdas.map((l) => ({
-                    name: l.name, runtime: l.runtime, memoryMB: l.memoryMB, timeoutSec: l.timeoutSec,
-                    envVarCount: l.envVarKeys?.length ?? 0, envVarKeys: l.envVarKeys,
-                    findings: lambdaFindings.filter((f) => f.metadata.functionName === l.name).map((f) => ({ severity: f.severity, issue: f.issue })),
-                })),
-            });
-        },
-    },
-    {
-        name: 'get_log_errors',
+        inputSchema: zod_1.z.object({}),
+    }, logged('get_lambda_overview', async () => {
+        const lambdas = (0, graph_1.getLambdaNodes)(currentGraph);
+        const lambdaFindings = currentFindings.filter((f) => f.metadata?.functionName);
+        return toText({
+            total: lambdas.length, note: 'Environment variable values are never included.',
+            lambdas: lambdas.map((l) => ({
+                name: l.name, runtime: l.runtime, memoryMB: l.memoryMB, timeoutSec: l.timeoutSec,
+                envVarCount: l.envVarKeys?.length ?? 0, envVarKeys: l.envVarKeys,
+                findings: lambdaFindings.filter((f) => f.metadata.functionName === l.name).map((f) => ({ severity: f.severity, issue: f.issue })),
+            })),
+        });
+    }));
+    mcp.registerTool('get_log_errors', {
         description: 'Returns recent error patterns from CloudWatch log groups. Returns pattern counts and frequencies — never raw log messages.',
-        inputSchema: {
-            type: 'object',
-            properties: { logGroup: { type: 'string', description: 'Filter to a specific log group name (optional)' } },
-        },
-        handler: async ({ logGroup: filterName }) => {
-            const logGroups = (0, graph_1.getLogGroupNodes)(currentGraph).filter((lg) => !filterName || lg.name.includes(String(filterName)));
-            return toText({
-                note: 'Only error patterns and counts are returned — no raw log messages.',
-                windowHours: 24,
-                logGroups: logGroups.map((lg) => ({ name: lg.name, retentionDays: lg.retentionDays ?? 'never-expires', errorCount: lg.errorCount, topErrorPatterns: lg.topErrorPatterns })),
-            });
-        },
-    },
-];
-const ok = (id, result) => ({ jsonrpc: '2.0', id, result });
-const rpcErr = (id, code, message) => ({ jsonrpc: '2.0', id, error: { code, message } });
-async function handleMcp(body) {
-    const { method, params = {}, id } = body;
-    if (method === 'initialize') {
-        return ok(id, { protocolVersion: '2024-11-05', capabilities: { tools: {} }, serverInfo: { name: 'infrawise', version: '0.1.0' } });
-    }
-    if (method === 'notifications/initialized' || method === 'ping') {
-        return id != null ? ok(id, {}) : null;
-    }
-    if (method === 'tools/list') {
-        return ok(id, { tools: TOOLS.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema })) });
-    }
-    if (method === 'tools/call') {
-        const { name, arguments: args = {} } = params;
-        const tool = TOOLS.find((t) => t.name === name);
-        if (!tool)
-            return rpcErr(id, -32601, `Unknown tool: ${name}`);
-        core_1.logger.info(`→ ${name}${Object.keys(args).length ? `  ${JSON.stringify(args)}` : ''}`);
-        try {
-            return ok(id, await tool.handler(args));
-        }
-        catch (e) {
-            return rpcErr(id, -32603, e instanceof Error ? e.message : String(e));
-        }
-    }
-    return rpcErr(id, -32601, `Method not found: ${method}`);
+        inputSchema: zod_1.z.object({ logGroup: zod_1.z.string().describe('Filter to a specific log group name (optional)').optional() }),
+    }, logged('get_log_errors', async ({ logGroup: filterName }) => {
+        const logGroups = (0, graph_1.getLogGroupNodes)(currentGraph).filter((lg) => !filterName || lg.name.includes(filterName));
+        return toText({
+            note: 'Only error patterns and counts are returned — no raw log messages.',
+            windowHours: 24,
+            logGroups: logGroups.map((lg) => ({ name: lg.name, retentionDays: lg.retentionDays ?? 'never-expires', errorCount: lg.errorCount, topErrorPatterns: lg.topErrorPatterns })),
+        });
+    }));
+    return mcp;
 }
 // ── Fastify server ────────────────────────────────────────────────────────────
 function createServer(port = 3000) {
     const fastify = (0, fastify_1.default)({ logger: false });
     fastify.register(cors_1.default, { origin: true });
+    const mcp = createMcpServer();
     fastify.get('/health', async () => ({
-        status: 'ok', version: '0.1.0',
+        status: 'ok', version,
         graphNodes: currentGraph.nodes.length,
         graphEdges: currentGraph.edges.length,
         findings: currentFindings.length,
     }));
-    fastify.get('/mcp/tools', async () => ({
-        tools: TOOLS.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema })),
-    }));
     fastify.post('/mcp', async (request, reply) => {
-        const response = await handleMcp(request.body);
-        if (response === null)
-            return reply.code(204).send();
-        return response;
+        const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+        reply.raw.on('close', () => transport.close());
+        await mcp.connect(transport);
+        await transport.handleRequest(request.raw, reply.raw, request.body);
+        return reply;
     });
     return {
         fastify,

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "infrawise",
-  "version": "0.4.2",
+  "version": "0.5.0",
+  "mcpName": "io.github.Sidd27/infrawise",
   "description": "CLI-first infrastructure intelligence platform — analyzes DynamoDB, PostgreSQL, MySQL, MongoDB, SQS, SNS, SSM, Secrets Manager, Lambda, CloudWatch Logs and exposes findings as an MCP server for Claude Code",
   "keywords": [
     "infrastructure",
@@ -60,8 +61,9 @@
     "@aws-sdk/client-ssm": "^3.0.0",
     "@aws-sdk/credential-providers": "^3.0.0",
     "@fastify/cors": "^9.0.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "chalk": "^4.1.2",
-    "commander": "^12.0.0",
+    "commander": "^14.0.3",
     "fastify": "^4.26.0",
     "inquirer": "^8.2.7",
     "js-yaml": "^4.1.0",