kiri-mcp-server 0.2.0

package/dist/indexer/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/indexer/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrF,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;YACnF,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/indexer/language.js

@@ -0,0 +1,34 @@
+const LANGUAGE_BY_EXTENSION = {
+    ".ts": "TypeScript",
+    ".tsx": "TypeScript",
+    ".js": "JavaScript",
+    ".jsx": "JavaScript",
+    ".json": "JSON",
+    ".md": "Markdown",
+    ".yml": "YAML",
+    ".yaml": "YAML",
+    ".py": "Python",
+    ".rs": "Rust",
+    ".go": "Go",
+    ".java": "Java",
+    ".rb": "Ruby",
+    ".c": "C",
+    ".h": "C",
+    ".cpp": "C++",
+    ".hpp": "C++",
+    ".cc": "C++",
+    ".hh": "C++",
+    ".cs": "C#",
+    ".php": "PHP",
+    ".swift": "Swift",
+    ".kt": "Kotlin",
+    ".m": "Objective-C",
+    ".mm": "Objective-C++",
+    ".scala": "Scala",
+    ".sh": "Shell",
+};
+export function detectLanguage(extension) {
+    const normalized = extension.toLowerCase();
+    return LANGUAGE_BY_EXTENSION[normalized] ?? null;
+}
+//# sourceMappingURL=language.js.map

package/dist/indexer/language.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"language.js","sourceRoot":"","sources":["../../src/indexer/language.ts"],"names":[],"mappings":"AAAA,MAAM,qBAAqB,GAA2B;IACpD,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,MAAM;IACb,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,eAAe;IACtB,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,qBAAqB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AACnD,CAAC"}

package/dist/indexer/pipeline/filters/denylist.js

@@ -0,0 +1,71 @@
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { parseSimpleYaml } from "../../../shared/utils/simpleYaml.js";
+/**
+ * Globパターンを正規表現に変換（ReDoS対策済み）
+ * @param pattern Globパターン文字列
+ * @returns コンパイル済み正規表現
+ * @throws パターンが長すぎる、または複雑すぎる場合
+ */
+function toRegex(pattern) {
+    // ReDoS対策: パターン長の制限
+    if (pattern.length > 500) {
+        throw new Error("Denylist pattern exceeds maximum length. Simplify the pattern.");
+    }
+    const normalized = pattern.endsWith("/") ? pattern.slice(0, -1) : pattern;
+    const escaped = normalized
+        .replace(/[.+^${}()|[\]\\]/g, "\\$&")
+        .replace(/\*\*/g, "::DOUBLESTAR::");
+    const withWildcards = escaped
+        .replace(/::DOUBLESTAR::/g, ".*")
+        .replace(/\*/g, "[^/]*")
+        .replace(/\?/g, ".");
+    const suffix = pattern.endsWith("/") ? "(?:/.*)?" : "";
+    // ReDoS対策: 最終パターンの複雑度チェック（ネストした量指定子）
+    const finalPattern = `^${withWildcards}${suffix}$`;
+    if (/(\*|\+|\{).*(\*|\+|\{).*(\*|\+|\{)/.test(finalPattern)) {
+        throw new Error("Denylist pattern is too complex. Use simpler glob patterns.");
+    }
+    return new RegExp(finalPattern);
+}
+function loadGitignore(repoRoot) {
+    try {
+        const raw = readFileSync(resolve(repoRoot, ".gitignore"), "utf8");
+        return raw
+            .split(/\r?\n/)
+            .map((line) => line.trim())
+            .filter((line) => line.length > 0 && !line.startsWith("#"));
+    }
+    catch {
+        return [];
+    }
+}
+export function loadDenylistConfig(configPath) {
+    const path = resolve(configPath ?? "config/denylist.yml");
+    const content = readFileSync(path, "utf8");
+    const parsed = parseSimpleYaml(content);
+    const patterns = Array.isArray(parsed.patterns)
+        ? parsed.patterns.filter((value) => typeof value === "string")
+        : [];
+    if (patterns.length === 0) {
+        throw new Error("config/denylist.yml must contain patterns array");
+    }
+    return { patterns };
+}
+export function createDenylistFilter(repoRoot, configPath) {
+    const { patterns } = loadDenylistConfig(configPath);
+    const gitignorePatterns = loadGitignore(repoRoot);
+    const combined = Array.from(new Set([...patterns, ...gitignorePatterns]));
+    const regexList = combined.map(toRegex);
+    const diffEntries = gitignorePatterns.filter((pattern) => !patterns.includes(pattern));
+    return {
+        isDenied(path) {
+            const normalized = path.startsWith("/") ? path.slice(1) : path;
+            return regexList.some((regex) => regex.test(normalized));
+        },
+        diff() {
+            return diffEntries;
+        },
+    };
+}
+//# sourceMappingURL=denylist.js.map

package/dist/indexer/pipeline/filters/denylist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"denylist.js","sourceRoot":"","sources":["../../../../src/indexer/pipeline/filters/denylist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAWtE;;;;;GAKG;AACH,SAAS,OAAO,CAAC,OAAe;IAC9B,oBAAoB;IACpB,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1E,MAAM,OAAO,GAAG,UAAU;SACvB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,OAAO;SAC1B,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;SAChC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvD,qCAAqC;IACrC,MAAM,YAAY,GAAG,IAAI,aAAa,GAAG,MAAM,GAAG,CAAC;IACnD,IAAI,oCAAoC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,GAAG;aACP,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAmB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,qBAAqB,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAA4B,CAAC;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC/E,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,UAAmB;IACxE,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvF,OAAO;QACL,QAAQ,CAAC,IAAY;YACnB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI;YACF,OAAO,WAAW,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/indexer/schema.js

@@ -0,0 +1,101 @@
+export async function ensureBaseSchema(db) {
+    await db.run(`
+    CREATE SEQUENCE IF NOT EXISTS repo_id_seq START 1
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS repo (
+      id INTEGER PRIMARY KEY DEFAULT nextval('repo_id_seq'),
+      root TEXT NOT NULL UNIQUE,
+      default_branch TEXT,
+      indexed_at TIMESTAMP
+    )
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS blob (
+      hash TEXT PRIMARY KEY,
+      size_bytes INTEGER,
+      line_count INTEGER,
+      content TEXT
+    )
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS tree (
+      repo_id INTEGER,
+      commit_hash TEXT,
+      path TEXT,
+      blob_hash TEXT,
+      ext TEXT,
+      lang TEXT,
+      is_binary BOOLEAN,
+      mtime TIMESTAMP,
+      PRIMARY KEY (repo_id, commit_hash, path)
+    )
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS file (
+      repo_id INTEGER,
+      path TEXT,
+      blob_hash TEXT,
+      ext TEXT,
+      lang TEXT,
+      is_binary BOOLEAN,
+      mtime TIMESTAMP,
+      PRIMARY KEY (repo_id, path)
+    )
+  `);
+    await db.run(`
+    CREATE INDEX IF NOT EXISTS idx_file_lang ON file(repo_id, lang)
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS symbol (
+      repo_id INTEGER,
+      path TEXT,
+      symbol_id BIGINT,
+      name TEXT,
+      kind TEXT,
+      range_start_line INTEGER,
+      range_end_line INTEGER,
+      signature TEXT,
+      doc TEXT,
+      PRIMARY KEY (repo_id, path, symbol_id)
+    )
+  `);
+    await db.run(`
+    CREATE INDEX IF NOT EXISTS idx_symbol_name ON symbol(repo_id, name)
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS snippet (
+      repo_id INTEGER,
+      path TEXT,
+      snippet_id BIGINT,
+      start_line INTEGER,
+      end_line INTEGER,
+      symbol_id BIGINT NULL,
+      PRIMARY KEY (repo_id, path, snippet_id)
+    )
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS dependency (
+      repo_id INTEGER,
+      src_path TEXT,
+      dst_kind TEXT,
+      dst TEXT,
+      rel TEXT,
+      PRIMARY KEY (repo_id, src_path, dst_kind, dst, rel)
+    )
+  `);
+    await db.run(`
+    CREATE INDEX IF NOT EXISTS idx_dep_src ON dependency(repo_id, src_path)
+  `);
+    await db.run(`
+    CREATE TABLE IF NOT EXISTS file_embedding (
+      repo_id INTEGER,
+      path TEXT,
+      dims INTEGER NOT NULL,
+      vector_json TEXT NOT NULL,
+      updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+      PRIMARY KEY (repo_id, path)
+    )
+  `);
+}
+//# sourceMappingURL=schema.js.map

package/dist/indexer/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/indexer/schema.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAgB;IACrD,MAAM,EAAE,CAAC,GAAG,CAAC;;GAEZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;GAOZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;GAOZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;;;;;;GAYZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;;;;;GAWZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;GAEZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;;;;;;;GAaZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;GAEZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;;;;GAUZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;;;GASZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;GAEZ,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC,GAAG,CAAC;;;;;;;;;GASZ,CAAC,CAAC;AACL,CAAC"}

package/dist/package.json

@@ -0,0 +1,93 @@
+{
+    "name": "kiri-mcp-server",
+    "version": "0.2.0",
+    "description": "KIRI context extraction platform",
+    "type": "module",
+    "packageManager": "pnpm@9.0.0",
+    "main": "./dist/src/index.js",
+    "module": "./dist/src/index.js",
+    "types": "./dist/src/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./dist/src/index.d.ts",
+            "import": "./dist/src/index.js"
+        },
+        "./package.json": "./package.json"
+    },
+    "bin": {
+        "kiri": "./dist/src/client/proxy.js",
+        "kiri-server": "./dist/src/server/main.js",
+        "kiri-daemon": "./dist/src/daemon/daemon.js"
+    },
+    "files": [
+        "dist/",
+        "config/",
+        "sql/"
+    ],
+    "keywords": [
+        "mcp",
+        "duckdb",
+        "context",
+        "llm",
+        "code-search",
+        "indexer"
+    ],
+    "license": "MIT",
+    "author": "CAPHTECH",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/CAPHTECH/kiri.git"
+    },
+    "bugs": {
+        "url": "https://github.com/CAPHTECH/kiri/issues"
+    },
+    "homepage": "https://github.com/CAPHTECH/kiri#readme",
+    "engines": {
+        "node": ">=20.0.0"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "scripts": {
+        "bootstrap": "pnpm install",
+        "build": "tsc --project tsconfig.build.json && pnpm run build:copy-assets",
+        "build:copy-assets": "tsx scripts/build/copy-assets.ts",
+        "dev": "tsx src/server/main.ts --port 8765",
+        "lint": "eslint \"{src,tests,scripts}/**/*.{ts,tsx}\" && prettier --check \"**/*.{ts,tsx,json,md,yml}\"",
+        "test": "vitest run --coverage",
+        "check": "pnpm run lint && pnpm run test",
+        "prepublishOnly": "pnpm run build"
+    },
+    "dependencies": {
+        "chokidar": "^4.0.3",
+        "duckdb": "^1.1.0",
+        "gpt-tokenizer": "^3.2.0",
+        "tree-sitter": "^0.22.0",
+        "tree-sitter-swift": "0.7.1",
+        "typescript": "^5.6.3",
+        "yaml": "^2.8.1",
+        "zod": "^4.1.12"
+    },
+    "devDependencies": {
+        "@types/node": "^22.7.4",
+        "@typescript-eslint/eslint-plugin": "^8.0.0",
+        "@typescript-eslint/parser": "^8.0.0",
+        "@vitest/coverage-v8": "^2.0.0",
+        "eslint": "^9.9.0",
+        "eslint-config-prettier": "^9.1.0",
+        "eslint-plugin-import": "^2.29.1",
+        "prettier": "^3.3.3",
+        "lint-staged": "^15.2.10",
+        "simple-git-hooks": "^2.10.0",
+        "tsx": "^4.16.5",
+        "vitest": "^2.0.5"
+    },
+    "simple-git-hooks": {
+        "pre-commit": "pnpm exec lint-staged"
+    },
+    "lint-staged": {
+        "*.{ts,tsx,json,md,yml}": [
+            "pnpm exec prettier --write"
+        ]
+    }
+}

package/dist/server/bootstrap.js

@@ -0,0 +1,19 @@
+import { assertSecurityBaseline, evaluateSecurityStatus, updateSecurityLock, } from "../shared/security/config.js";
+export function bootstrapServer(options = {}) {
+    const security = evaluateSecurityStatus(options.securityConfigPath, options.securityLockPath);
+    if (!security.matches) {
+        if (!security.lockHash && options.allowWriteLock) {
+            updateSecurityLock(security.hash, options.securityLockPath);
+            return {
+                security: {
+                    ...security,
+                    lockHash: security.hash,
+                    matches: true,
+                },
+            };
+        }
+        assertSecurityBaseline(options.securityConfigPath, options.securityLockPath);
+    }
+    return { security };
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/server/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/server/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AAYtC,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC5D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9F,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACjD,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC5D,OAAO;gBACL,QAAQ,EAAE;oBACR,GAAG,QAAQ;oBACX,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,OAAO,EAAE,IAAI;iBACd;aACF,CAAC;QACJ,CAAC;QACD,sBAAsB,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}

package/dist/server/context.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=context.js.map

package/dist/server/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/server/context.ts"],"names":[],"mappings":""}

package/dist/server/fallbacks/degradeController.js

@@ -0,0 +1,69 @@
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { join, relative as relativePath, resolve } from "node:path";
+export class DegradeController {
+    state = { active: false, reason: null, since: null };
+    repoRoot;
+    constructor(repoRoot) {
+        this.repoRoot = resolve(repoRoot);
+    }
+    get current() {
+        return this.state;
+    }
+    enable(reason) {
+        if (this.state.active) {
+            return;
+        }
+        this.state = { active: true, reason, since: new Date() };
+    }
+    disable() {
+        this.state = { active: false, reason: null, since: null };
+    }
+    async withResource(operation, reason) {
+        if (this.state.active) {
+            throw new Error(`Server is running in degrade mode: ${this.state.reason ?? "unknown"}. Only files.search is available.`);
+        }
+        try {
+            const result = await operation();
+            return result;
+        }
+        catch (error) {
+            this.enable(reason);
+            throw error;
+        }
+    }
+    search(query, limit = 20) {
+        const tokens = query.split(/\s+/).filter((token) => token.length > 0);
+        if (tokens.length === 0) {
+            return [];
+        }
+        const results = [];
+        this.walkFiles(this.repoRoot, (absolutePath, relativeFile) => {
+            if (results.length >= limit) {
+                return;
+            }
+            const content = readFileSync(absolutePath, "utf8");
+            const lines = content.split(/\r?\n/);
+            const matchIndex = lines.findIndex((line) => tokens.every((token) => line.includes(token)));
+            if (matchIndex >= 0) {
+                const preview = lines.slice(matchIndex, matchIndex + 3).join("\n");
+                results.push({ path: relativeFile, preview, matchLine: matchIndex + 1 });
+            }
+        });
+        return results;
+    }
+    walkFiles(root, visitor) {
+        const entries = readdirSync(root);
+        for (const entry of entries) {
+            const absolute = join(root, entry);
+            const relative = relativePath(this.repoRoot, absolute);
+            const stats = statSync(absolute);
+            if (stats.isDirectory()) {
+                this.walkFiles(absolute, visitor);
+            }
+            else if (stats.isFile()) {
+                visitor(absolute, relative);
+            }
+        }
+    }
+}
+//# sourceMappingURL=degradeController.js.map

package/dist/server/fallbacks/degradeController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"degradeController.js","sourceRoot":"","sources":["../../../src/server/fallbacks/degradeController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpE,MAAM,OAAO,iBAAiB;IACpB,KAAK,GAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1D,QAAQ,CAAS;IAElC,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,YAAY,CAAI,SAA2B,EAAE,MAAc;QAC/D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS,mCAAmC,CACxG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,KAAK,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAA0B,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE;YAC3D,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5F,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,OAAqD;QACnF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}