infrawise 0.8.2 → 0.8.7

package/dist/graph/index.js

@@ -22,7 +22,12 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
     }
     for (const table of postgresMeta) {
         const nodeId = `table:postgres:${table.schema}.${table.table}`;
-        addNode({ id: nodeId, type: 'table', name: `${table.schema}.${table.table}`, databaseType: 'postgres' });
+        addNode({
+            id: nodeId,
+            type: 'table',
+            name: `${table.schema}.${table.table}`,
+            databaseType: 'postgres',
+        });
         for (const indexName of table.indexes) {
             const indexNodeId = `index:${table.schema}.${table.table}:${indexName}`;
             addNode({ id: indexNodeId, type: 'index', name: indexName });
@@ -31,7 +36,12 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
     }
     for (const table of mysqlMeta) {
         const nodeId = `table:mysql:${table.schema}.${table.table}`;
-        addNode({ id: nodeId, type: 'table', name: `${table.schema}.${table.table}`, databaseType: 'mysql' });
+        addNode({
+            id: nodeId,
+            type: 'table',
+            name: `${table.schema}.${table.table}`,
+            databaseType: 'mysql',
+        });
         for (const indexName of table.indexes) {
             const indexNodeId = `index:${table.schema}.${table.table}:${indexName}`;
             addNode({ id: indexNodeId, type: 'index', name: indexName });
@@ -40,7 +50,12 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
     }
     for (const coll of mongoMeta) {
         const nodeId = `table:mongodb:${coll.database}.${coll.collection}`;
-        addNode({ id: nodeId, type: 'table', name: `${coll.database}.${coll.collection}`, databaseType: 'mongodb' });
+        addNode({
+            id: nodeId,
+            type: 'table',
+            name: `${coll.database}.${coll.collection}`,
+            databaseType: 'mongodb',
+        });
         for (const idx of coll.indexes) {
             if (idx.name === '_id_')
                 continue;
@@ -122,15 +137,34 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
             let sourceId;
             if (trigger.type === 'sqs') {
                 sourceId = `queue:aws:${trigger.sourceName}`;
-                addNode({ id: sourceId, type: 'queue', name: trigger.sourceName, provider: 'aws', hasDLQ: false, encrypted: false });
+                addNode({
+                    id: sourceId,
+                    type: 'queue',
+                    name: trigger.sourceName,
+                    provider: 'aws',
+                    hasDLQ: false,
+                    encrypted: false,
+                });
             }
             else if (trigger.type === 'dynamodb') {
                 sourceId = `table:dynamo:${trigger.sourceName}`;
-                addNode({ id: sourceId, type: 'table', name: trigger.sourceName, databaseType: 'dynamodb' });
+                addNode({
+                    id: sourceId,
+                    type: 'table',
+                    name: trigger.sourceName,
+                    databaseType: 'dynamodb',
+                });
             }
             else if (trigger.type === 'kinesis') {
                 sourceId = `queue:aws:${trigger.sourceName}`;
-                addNode({ id: sourceId, type: 'queue', name: trigger.sourceName, provider: 'aws', hasDLQ: false, encrypted: false });
+                addNode({
+                    id: sourceId,
+                    type: 'queue',
+                    name: trigger.sourceName,
+                    provider: 'aws',
+                    hasDLQ: false,
+                    encrypted: false,
+                });
             }
             else {
                 continue;
@@ -223,7 +257,14 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
         // AWS service operations create edges to service nodes
         if (op.serviceType === 'sqs') {
             const queueId = `queue:aws:${op.target}`;
-            addNode({ id: queueId, type: 'queue', name: op.target, provider: 'aws', hasDLQ: false, encrypted: false });
+            addNode({
+                id: queueId,
+                type: 'queue',
+                name: op.target,
+                provider: 'aws',
+                hasDLQ: false,
+                encrypted: false,
+            });
             edges.push({ from: funcNodeId, to: queueId, type: 'publishes_to' });
             continue;
         }
@@ -242,13 +283,26 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
         }
         if (op.serviceType === 'ssm') {
             const paramId = `parameter:aws:${op.target}`;
-            addNode({ id: paramId, type: 'parameter', name: op.target, provider: 'aws', paramType: 'String', tier: 'Standard' });
+            addNode({
+                id: paramId,
+                type: 'parameter',
+                name: op.target,
+                provider: 'aws',
+                paramType: 'String',
+                tier: 'Standard',
+            });
             edges.push({ from: funcNodeId, to: paramId, type: 'reads_parameter' });
             continue;
         }
         if (op.serviceType === 'secretsmanager') {
             const secretId = `secret:aws:${op.target}`;
-            addNode({ id: secretId, type: 'secret', name: op.target, provider: 'aws', rotationEnabled: false });
+            addNode({
+                id: secretId,
+                type: 'secret',
+                name: op.target,
+                provider: 'aws',
+                rotationEnabled: false,
+            });
             edges.push({ from: funcNodeId, to: secretId, type: 'reads_secret' });
             continue;
         }

package/dist/server/index.js

@@ -45,23 +45,43 @@ export function createMcpServer() {
         const buckets = getBucketNodes(currentGraph);
         return toText({
             summary: {
-                tables: tables.length, functions: functions.length,
-                queues: queues.length, topics: topics.length,
-                secrets: secrets.length, parameters: parameters.length,
-                logGroups: logGroups.length, lambdas: lambdas.length,
+                tables: tables.length,
+                functions: functions.length,
+                queues: queues.length,
+                topics: topics.length,
+                secrets: secrets.length,
+                parameters: parameters.length,
+                logGroups: logGroups.length,
+                lambdas: lambdas.length,
                 buckets: buckets.length,
-                totalNodes: currentGraph.nodes.length, totalEdges: currentGraph.edges.length,
+                totalNodes: currentGraph.nodes.length,
+                totalEdges: currentGraph.edges.length,
                 findings: summarizeFindings(currentFindings),
             },
             databases: tables.map((t) => ({ name: t.name, type: t.databaseType })),
-            queues: queues.map((q) => ({ name: q.name, hasDLQ: q.hasDLQ, encrypted: q.encrypted, approximateMessages: q.approximateMessages })),
+            queues: queues.map((q) => ({
+                name: q.name,
+                hasDLQ: q.hasDLQ,
+                encrypted: q.encrypted,
+                approximateMessages: q.approximateMessages,
+            })),
             topics: topics.map((t) => ({ name: t.name, subscriptions: t.subscriptionCount })),
             secrets: secrets.map((s) => ({ name: s.name, rotationEnabled: s.rotationEnabled })),
             parameters: parameters.map((p) => ({ name: p.name, type: p.paramType, tier: p.tier })),
             lambdas: lambdas.map((l) => ({ name: l.name, runtime: l.runtime, memoryMB: l.memoryMB })),
-            logGroups: logGroups.map((lg) => ({ name: lg.name, retentionDays: lg.retentionDays ?? 'never', errorCount: lg.errorCount })),
-            buckets: buckets.map((b) => ({ name: b.name, versioned: b.versioned, publicAccessBlocked: b.publicAccessBlocked })),
-            highFindings: currentFindings.filter((f) => f.severity === 'high').map((f) => ({ issue: f.issue, recommendation: f.recommendation })),
+            logGroups: logGroups.map((lg) => ({
+                name: lg.name,
+                retentionDays: lg.retentionDays ?? 'never',
+                errorCount: lg.errorCount,
+            })),
+            buckets: buckets.map((b) => ({
+                name: b.name,
+                versioned: b.versioned,
+                publicAccessBlocked: b.publicAccessBlocked,
+            })),
+            highFindings: currentFindings
+                .filter((f) => f.severity === 'high')
+                .map((f) => ({ issue: f.issue, recommendation: f.recommendation })),
         });
     }));
     mcp.registerTool('get_graph_summary', {
@@ -72,9 +92,12 @@ export function createMcpServer() {
         edges: currentGraph.edges,
         findings: currentFindings,
         summary: {
-            totalNodes: currentGraph.nodes.length, totalEdges: currentGraph.edges.length,
-            tables: getTableNodes(currentGraph).length, functions: getFunctionNodes(currentGraph).length,
-            queues: getQueueNodes(currentGraph).length, scans: getScanEdges(currentGraph).length,
+            totalNodes: currentGraph.nodes.length,
+            totalEdges: currentGraph.edges.length,
+            tables: getTableNodes(currentGraph).length,
+            functions: getFunctionNodes(currentGraph).length,
+            queues: getQueueNodes(currentGraph).length,
+            scans: getScanEdges(currentGraph).length,
             ...summarizeFindings(currentFindings),
         },
     })));
@@ -86,26 +109,44 @@ export function createMcpServer() {
         // Also check if there's a Lambda node with this name (for AWS-deployed functions)
         const lambdaNode = currentGraph.nodes.find((n) => n.type === 'lambda' && n.name === functionName);
         if (!funcNode && !lambdaNode) {
-            return toText({ function: functionName, found: false, issues: [], recommendations: [`Function "${functionName}" not found in the analyzed codebase.`] });
+            return toText({
+                function: functionName,
+                found: false,
+                issues: [],
+                recommendations: [`Function "${functionName}" not found in the analyzed codebase.`],
+            });
         }
         const outEdges = funcNode ? getOutgoingEdges(currentGraph, funcNode.id) : [];
         const relatedFindings = currentFindings.filter((f) => {
             const meta = f.metadata;
-            return meta?.functionName === functionName || String(meta?.callerFunctions ?? '').includes(functionName);
+            return (meta?.functionName === functionName ||
+                String(meta?.callerFunctions ?? '').includes(functionName));
         });
         const allTriggers = lambdaNode?.type === 'lambda' ? (lambdaNode.triggers ?? []) : [];
         return toText({
-            function: functionName, found: true,
+            function: functionName,
+            found: true,
             file: funcNode?.type === 'function' ? funcNode.file : undefined,
             triggers: allTriggers.map((t) => ({
-                type: t.type, source: t.sourceName, eventShape: t.eventShape,
+                type: t.type,
+                source: t.sourceName,
+                eventShape: t.eventShape,
                 ...(t.ruleName ? { ruleName: t.ruleName, eventPattern: t.eventPattern } : {}),
             })),
             accesses: outEdges.map((e) => {
                 const target = currentGraph.nodes.find((n) => n.id === e.to);
-                return { targetId: e.to, edgeType: e.type, targetName: target && 'name' in target ? target.name : e.to, targetType: target?.type };
+                return {
+                    targetId: e.to,
+                    edgeType: e.type,
+                    targetName: target && 'name' in target ? target.name : e.to,
+                    targetType: target?.type,
+                };
             }),
-            issues: relatedFindings.map((f) => ({ severity: f.severity, issue: f.issue, description: f.description })),
+            issues: relatedFindings.map((f) => ({
+                severity: f.severity,
+                issue: f.issue,
+                description: f.description,
+            })),
             recommendations: [...new Set(relatedFindings.map((f) => f.recommendation))],
         });
     }));
@@ -119,10 +160,20 @@ export function createMcpServer() {
         const sanitizedAttr = attribute.replace(/[^a-zA-Z0-9_]/g, '_');
         const sanitizedTable = tableName.replace(/[^a-zA-Z0-9_-]/g, '_');
         const indexName = `${sanitizedTable}-${sanitizedAttr}-index`;
-        const tableNode = currentGraph.nodes.find((n) => n.type === 'table' && n.databaseType === 'dynamodb' && 'name' in n && n.name === tableName);
+        const tableNode = currentGraph.nodes.find((n) => n.type === 'table' &&
+            n.databaseType === 'dynamodb' &&
+            'name' in n &&
+            n.name === tableName);
         return toText({
-            table: tableName, attribute, found: !!tableNode,
-            index: { name: indexName, partitionKey: attribute, projectionType: 'ALL', billingMode: 'PAY_PER_REQUEST' },
+            table: tableName,
+            attribute,
+            found: !!tableNode,
+            index: {
+                name: indexName,
+                partitionKey: attribute,
+                projectionType: 'ALL',
+                billingMode: 'PAY_PER_REQUEST',
+            },
             rationale: `A GSI on "${attribute}" allows Query instead of Scan when filtering by this attribute.`,
             recommendation: `Add GSI "${indexName}" with partition key "${attribute}" to your IaC definition.`,
         });
@@ -138,11 +189,15 @@ export function createMcpServer() {
         const sanitizedTable = tableName.replace(/[^a-zA-Z0-9_]/g, '_');
         const indexName = `idx_${sanitizedTable}_${sanitizedCol}`;
         return toText({
-            table: tableName, column,
+            table: tableName,
+            column,
             recommendation: `CREATE INDEX CONCURRENTLY ${indexName} ON ${sanitizedTable} (${sanitizedCol});`,
             rationale: `An index on "${column}" eliminates sequential scans when filtering on this column.`,
-            notes: ['Use CONCURRENTLY to avoid locking the table', 'Run ANALYZE after creation',
-                `Partial index: CREATE INDEX CONCURRENTLY ${indexName}_partial ON ${sanitizedTable} (${sanitizedCol}) WHERE ${sanitizedCol} IS NOT NULL;`],
+            notes: [
+                'Use CONCURRENTLY to avoid locking the table',
+                'Run ANALYZE after creation',
+                `Partial index: CREATE INDEX CONCURRENTLY ${indexName}_partial ON ${sanitizedTable} (${sanitizedCol}) WHERE ${sanitizedCol} IS NOT NULL;`,
+            ],
         });
     }));
     mcp.registerTool('suggest_mongo_index', {
@@ -155,7 +210,8 @@ export function createMcpServer() {
         const sanitizedCollection = collection.replace(/[^a-zA-Z0-9_]/g, '_');
         const sanitizedField = field.replace(/[^a-zA-Z0-9_.]/g, '_');
         return toText({
-            collection, field,
+            collection,
+            field,
             recommendation: `db.${sanitizedCollection}.createIndex({ ${sanitizedField}: 1 })`,
             rationale: `An index on "${field}" eliminates full collection scans when filtering on this field.`,
             notes: [
@@ -176,11 +232,15 @@ export function createMcpServer() {
         const sanitizedTable = tableName.replace(/[^a-zA-Z0-9_]/g, '_');
         const indexName = `idx_${sanitizedTable}_${sanitizedCol}`;
         return toText({
-            table: tableName, column,
+            table: tableName,
+            column,
             recommendation: `ALTER TABLE ${sanitizedTable} ADD INDEX ${indexName} (${sanitizedCol});`,
             rationale: `An index on "${column}" eliminates full table scans when filtering on this column.`,
-            notes: ['MySQL InnoDB adds indexes online (no full lock for 5.6+)', 'EXPLAIN SELECT ... to verify after adding',
-                `Composite: ALTER TABLE ${sanitizedTable} ADD INDEX idx_composite (${sanitizedCol}, other_column);`],
+            notes: [
+                'MySQL InnoDB adds indexes online (no full lock for 5.6+)',
+                'EXPLAIN SELECT ... to verify after adding',
+                `Composite: ALTER TABLE ${sanitizedTable} ADD INDEX idx_composite (${sanitizedCol}, other_column);`,
+            ],
         });
     }));
     mcp.registerTool('get_queue_details', {
@@ -192,9 +252,15 @@ export function createMcpServer() {
         return toText({
             total: queues.length,
             queues: queues.map((q) => ({
-                name: q.name, provider: q.provider, hasDLQ: q.hasDLQ, encrypted: q.encrypted,
-                approximateMessages: q.approximateMessages, retentionDays: q.retentionDays,
-                findings: queueFindings.filter((f) => f.metadata.queueName === q.name).map((f) => ({ severity: f.severity, issue: f.issue })),
+                name: q.name,
+                provider: q.provider,
+                hasDLQ: q.hasDLQ,
+                encrypted: q.encrypted,
+                approximateMessages: q.approximateMessages,
+                retentionDays: q.retentionDays,
+                findings: queueFindings
+                    .filter((f) => f.metadata.queueName === q.name)
+                    .map((f) => ({ severity: f.severity, issue: f.issue })),
             })),
         });
     }));
@@ -203,7 +269,15 @@ export function createMcpServer() {
         inputSchema: z.object({}),
     }, logged('get_topic_details', async () => {
         const topics = getTopicNodes(currentGraph);
-        return toText({ total: topics.length, topics: topics.map((t) => ({ name: t.name, provider: t.provider, subscriptionCount: t.subscriptionCount, encrypted: t.encrypted })) });
+        return toText({
+            total: topics.length,
+            topics: topics.map((t) => ({
+                name: t.name,
+                provider: t.provider,
+                subscriptionCount: t.subscriptionCount,
+                encrypted: t.encrypted,
+            })),
+        });
     }));
     mcp.registerTool('get_secrets_overview', {
         description: 'Returns all Secrets Manager secrets with rotation status and rotation interval. Secret values are never returned. Call this when checking which secrets exist, confirming rotation is enabled before a security review, or identifying secrets that lack rotation.',
@@ -212,10 +286,16 @@ export function createMcpServer() {
         const secrets = getSecretNodes(currentGraph);
         const secretFindings = currentFindings.filter((f) => f.metadata?.secretName);
         return toText({
-            total: secrets.length, note: 'Secret values are never included in this response.',
+            total: secrets.length,
+            note: 'Secret values are never included in this response.',
             secrets: secrets.map((s) => ({
-                name: s.name, provider: s.provider, rotationEnabled: s.rotationEnabled, rotationDays: s.rotationDays,
-                findings: secretFindings.filter((f) => f.metadata.secretName === s.name).map((f) => ({ severity: f.severity, issue: f.issue })),
+                name: s.name,
+                provider: s.provider,
+                rotationEnabled: s.rotationEnabled,
+                rotationDays: s.rotationDays,
+                findings: secretFindings
+                    .filter((f) => f.metadata.secretName === s.name)
+                    .map((f) => ({ severity: f.severity, issue: f.issue })),
             })),
         });
     }));
@@ -225,8 +305,14 @@ export function createMcpServer() {
     }, logged('get_parameter_overview', async () => {
         const parameters = getParameterNodes(currentGraph);
         return toText({
-            total: parameters.length, note: 'Parameter values are never included in this response.',
-            parameters: parameters.map((p) => ({ name: p.name, provider: p.provider, type: p.paramType, tier: p.tier })),
+            total: parameters.length,
+            note: 'Parameter values are never included in this response.',
+            parameters: parameters.map((p) => ({
+                name: p.name,
+                provider: p.provider,
+                type: p.paramType,
+                tier: p.tier,
+            })),
         });
     }));
     mcp.registerTool('get_lambda_overview', {
@@ -236,12 +322,24 @@ export function createMcpServer() {
         const lambdas = getLambdaNodes(currentGraph);
         const lambdaFindings = currentFindings.filter((f) => f.metadata?.functionName);
         return toText({
-            total: lambdas.length, note: 'Environment variable values are never included.',
+            total: lambdas.length,
+            note: 'Environment variable values are never included.',
             lambdas: lambdas.map((l) => ({
-                name: l.name, runtime: l.runtime, memoryMB: l.memoryMB, timeoutSec: l.timeoutSec,
-                envVarCount: l.envVarKeys?.length ?? 0, envVarKeys: l.envVarKeys,
-                triggers: (l.triggers ?? []).map((t) => ({ type: t.type, source: t.sourceName, eventShape: t.eventShape, state: t.state })),
-                findings: lambdaFindings.filter((f) => f.metadata.functionName === l.name).map((f) => ({ severity: f.severity, issue: f.issue })),
+                name: l.name,
+                runtime: l.runtime,
+                memoryMB: l.memoryMB,
+                timeoutSec: l.timeoutSec,
+                envVarCount: l.envVarKeys?.length ?? 0,
+                envVarKeys: l.envVarKeys,
+                triggers: (l.triggers ?? []).map((t) => ({
+                    type: t.type,
+                    source: t.sourceName,
+                    eventShape: t.eventShape,
+                    state: t.state,
+                })),
+                findings: lambdaFindings
+                    .filter((f) => f.metadata.functionName === l.name)
+                    .map((f) => ({ severity: f.severity, issue: f.issue })),
             })),
         });
     }));
@@ -261,7 +359,7 @@ export function createMcpServer() {
                     .filter((e) => e.from === r.id && e.type === 'triggers')
                     .map((e) => currentGraph.nodes.find((n) => n.id === e.to))
                     .filter(Boolean)
-                    .map((n) => n && 'name' in n ? n.name : ''),
+                    .map((n) => (n && 'name' in n ? n.name : '')),
             })),
         });
     }));
@@ -288,13 +386,20 @@ export function createMcpServer() {
     }));
     mcp.registerTool('get_log_errors', {
         description: 'Returns recent error pattern summaries from CloudWatch log groups: pattern counts and frequencies grouped by log group. Raw log messages are never returned. Use the optional logGroup filter to scope to one group by name substring. Call this when investigating errors or identifying log groups with no retention policy.',
-        inputSchema: z.object({ logGroup: z.string().describe('Filter to a specific log group name (optional)').optional() }),
+        inputSchema: z.object({
+            logGroup: z.string().describe('Filter to a specific log group name (optional)').optional(),
+        }),
     }, logged('get_log_errors', async ({ logGroup: filterName }) => {
         const logGroups = getLogGroupNodes(currentGraph).filter((lg) => !filterName || lg.name.includes(filterName));
         return toText({
             note: 'Only error patterns and counts are returned — no raw log messages.',
             windowHours: 24,
-            logGroups: logGroups.map((lg) => ({ name: lg.name, retentionDays: lg.retentionDays ?? 'never-expires', errorCount: lg.errorCount, topErrorPatterns: lg.topErrorPatterns })),
+            logGroups: logGroups.map((lg) => ({
+                name: lg.name,
+                retentionDays: lg.retentionDays ?? 'never-expires',
+                errorCount: lg.errorCount,
+                topErrorPatterns: lg.topErrorPatterns,
+            })),
         });
     }));
     return mcp;
@@ -303,9 +408,9 @@ export function createMcpServer() {
 export function createServer(port = 3000) {
     const fastify = Fastify({ logger: false });
     fastify.register(cors, { origin: true });
-    const mcp = createMcpServer();
     fastify.get('/health', async () => ({
-        status: 'ok', version,
+        status: 'ok',
+        version,
         graphNodes: currentGraph.nodes.length,
         graphEdges: currentGraph.edges.length,
         findings: currentFindings.length,
@@ -320,13 +425,27 @@ export function createServer(port = 3000) {
         repository: 'https://github.com/Sidd27/infrawise',
         transports: [{ type: 'streamable-http', url: `http://localhost:${port}/mcp` }],
         tools: [
-            'get_infra_overview', 'get_graph_summary', 'analyze_function',
-            'suggest_gsi', 'postgres_index_suggestions', 'suggest_mongo_index', 'mysql_index_suggestions',
-            'get_queue_details', 'get_topic_details', 'get_secrets_overview', 'get_parameter_overview',
-            'get_lambda_overview', 'get_eventbridge_details', 'get_s3_overview', 'get_log_errors',
+            'get_infra_overview',
+            'get_graph_summary',
+            'analyze_function',
+            'suggest_gsi',
+            'postgres_index_suggestions',
+            'suggest_mongo_index',
+            'mysql_index_suggestions',
+            'get_queue_details',
+            'get_topic_details',
+            'get_secrets_overview',
+            'get_parameter_overview',
+            'get_lambda_overview',
+            'get_eventbridge_details',
+            'get_s3_overview',
+            'get_log_errors',
         ],
     }));
     fastify.post('/mcp', async (request, reply) => {
+        // Fresh McpServer per request: connect() is one-shot per instance and throws if called
+        // on a live server, so a shared instance breaks under concurrent requests.
+        const mcp = createMcpServer();
         const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
         reply.raw.on('close', () => transport.close());
         await mcp.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infrawise",
-  "version": "0.8.2",
+  "version": "0.8.7",
   "mcpName": "io.github.Sidd27/infrawise",
   "description": "CLI-first infrastructure intelligence platform — analyzes DynamoDB, PostgreSQL, MySQL, MongoDB, SQS, SNS, SSM, Secrets Manager, Lambda, S3, CloudWatch Logs and exposes findings as an MCP server for Claude Code",
   "keywords": [
@@ -59,24 +59,30 @@
     "coverage": "vitest run --coverage",
     "lint": "eslint src",
     "typecheck": "tsc",
+    "format": "prettier --write src",
+    "generate-diagrams": "mmdc -i docs/architecture.mmd -o docs/architecture.svg --backgroundColor transparent",
     "dev": "node dist/cli/index.js dev",
-    "release": "node scripts/release.js"
+    "release": "node scripts/release.js",
+    "prepare": "simple-git-hooks"
+  },
+  "simple-git-hooks": {
+    "pre-commit": "pnpm format && git add src/ && pnpm lint && pnpm typecheck && pnpm test"
   },
   "dependencies": {
     "@aws-sdk/client-cloudwatch-logs": "^3.1048.0",
-    "@aws-sdk/client-s3": "^3.1048.0",
     "@aws-sdk/client-dynamodb": "^3.1048.0",
     "@aws-sdk/client-eventbridge": "^3.1051.0",
     "@aws-sdk/client-lambda": "^3.1048.0",
     "@aws-sdk/client-rds": "^3.1048.0",
+    "@aws-sdk/client-s3": "^3.1048.0",
     "@aws-sdk/client-secrets-manager": "^3.1048.0",
     "@aws-sdk/client-sns": "^3.1048.0",
     "@aws-sdk/client-sqs": "^3.1048.0",
     "@aws-sdk/client-ssm": "^3.1048.0",
     "@aws-sdk/credential-providers": "^3.1048.0",
+    "@fastify/cors": "^11.2.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "chalk": "^5.6.2",
-    "@fastify/cors": "^11.2.0",
     "commander": "^15.0.0",
     "fastify": "^5.8.5",
     "inquirer": "^14.0.2",
@@ -91,6 +97,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@mermaid-js/mermaid-cli": "^11.15.0",
     "@types/inquirer": "^9.0.9",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^25.8.0",
@@ -99,6 +106,8 @@
     "@typescript-eslint/parser": "^8.59.3",
     "@vitest/coverage-v8": "^4.1.6",
     "eslint": "^10.4.0",
+    "prettier": "^3.8.3",
+    "simple-git-hooks": "^2.13.1",
     "typescript": "^6.0.3",
     "vite": "^8.0.13",
     "vitest": "^4.1.6"
@@ -113,6 +122,10 @@
   "pnpm": {
     "overrides": {
       "qs": ">=6.15.2"
-    }
+    },
+    "allowedBuildScripts": [
+      "puppeteer",
+      "simple-git-hooks"
+    ]
   }
 }