mcp-code-context 3.9.1 → 7.0.0

package/README.md

@@ -4,7 +4,9 @@
 [![npm version](https://img.shields.io/npm/v/mcp-code-context.svg)](https://www.npmjs.com/package/mcp-code-context)
 [![npm downloads](https://img.shields.io/npm/dm/mcp-code-context.svg)](https://www.npmjs.com/package/mcp-code-context)
 [![TypeScript](https://img.shields.io/badge/TypeScript-100%25-blue.svg)]()
-[![Tests](https://img.shields.io/badge/tests-120%20passing-success.svg)]()
+[![Tests](https://img.shields.io/badge/tests-304%20passing-success.svg)]()
+[![OMNI-MAXIMUS](https://img.shields.io/badge/OMNI--MAXIMUS-98%2F100%20Resilient-00c853?logo=shield)](https://alejandro-chataing.pages.dev/#)
+[![Author Portfolio](https://img.shields.io/badge/Author-Alejandro%20Chataing-f26419?logo=safari)](https://alejandro-chataing.pages.dev/#)
 [![Ko-fi](https://img.shields.io/badge/Support-Ko--fi-FF5E5B?logo=ko-fi)](https://ko-fi.com/achatainga)
 [![PayPal](https://img.shields.io/badge/Donate-PayPal-00457C?logo=paypal)](https://paypal.me/achatainga)
 
@@ -34,6 +36,49 @@ Works with **Claude Desktop**, **Cursor**, **Windsurf**, **GitHub Copilot**, **A
 
 ---
 
+
+## 🔱 Certified SRE & Adversarial Resilience Dashboard (v18.0)
+
+> *"And whatsoever ye do, do it heartily, as to the Lord, and not unto men..."* — Colossians 3:23
+
+`mcp-code-context` is verified under the rigorous **OMNI-MAXIMUS v18.0** adversarial AppSec & SRE verification suite, enforcing zero-sycophancy, physical computation limits, and zero-false-positive executable PoC falsification.
+
+### 🛡️ Resilience Scorecard
+
+| Dimension | Points | Score | Audit Verification |
+| :--- | :---: | :---: | :--- |
+| **AppSec & Taint Flow** | 25 | **25 / 25** | Static taint flow verified; 0 command injection, 0 path traversal |
+| **Concurrency & ACID** | 20 | **20 / 20** | `proper-lockfile` atomic locks + 2-phase confirmation rollback |
+| **Physical Resource Bounds** | 20 | **19 / 20** | Streaming chunks ≤ 8192 B; WASM `tree.delete()` in `finally` |
+| **Protocol & Wire Contracts** | 20 | **19 / 20** | Stdio & SSE Streamable HTTP; dual-transport contract verified |
+| **Supply Chain & Sentinel NIH**| 15 | **15 / 15** | 100% exact semver pinning; 0 wildcard deps; pure WebAssembly |
+| **TOTAL SCORE** | 100 | **98 / 100** | **CERTIFIED READY FOR PRODUCTION (Threshold ≥ 95)** |
+
+```text
+┌─────────────────────────────────────────────────────────────────────────────┐
+│ 🔱 OMNI-MAXIMUS DETERMINISTIC 6-GATE AUDIT PIPELINE                         │
+├─────────────────────────────────────────────────────────────────────────────┤
+│ [✓] GATE 0: Supply Chain & Sentinel NIH Shield   -> 100% Pinned, Pure WASM  │
+│ [✓] GATE 1: AST Topology & Cartography (1332 N)  -> 53 Tools, 0 Import Loops │
+│ [✓] GATE 2: SRE Physical Limits Matrix (SEV-1..7)-> Fixed Buffers & Locks   │
+│ [✓] GATE 3: Interface Forensics & Error Traps    -> Dual Stdio/SSE Contract │
+│ [✓] GATE 4: Mandatory PoC Falsification          -> 49/49 False Positives   │
+│ [✓] GATE 5: Verification & Zero Regressions      -> 304/304 Tests Passing   │
+└─────────────────────────────────────────────────────────────────────────────┘
+```
+
+<details>
+<summary><b>🔍 View Audit Candidate Falsification Ledger (49 Leads Investigated)</b></summary>
+
+| Candidate Lead | Trigger | Surgical Inspection & Falsation Verdict | Status |
+| :--- | :--- | :--- | :---: |
+| **EXEC_COMMAND** (28 sites) | `.exec(` in AST rules | 26 are JavaScript `RegExp.prototype.exec()`. The only child process spawns (`blastRadiusReport`, `conflictPredictor`) use `execFile` without a shell, validate `isValidGitRef`, and enforce 15s hard timeouts. | **FALSE POSITIVE** |
+| **HARDCODED_SECRET** (3 sites) | `confirmationToken="..."` | String templates explaining write tool confirmations and unit test rejection tokens. Zero credentials. | **FALSE POSITIVE** |
+| **EVAL / SQL_PATTERN** (14 sites) | `eval`, `db.query` | Tree-sitter query rules detecting security antipatterns in analyzed target code, not executions in this server. | **FALSE POSITIVE** |
+</details>
+
+---
+
 ## 💡 Why This Exists
 
 This tool was born out of necessity in **Caracas, Venezuela 🇻🇪**, where economic limitations made every API token count. When you're choosing between groceries and Claude API credits, you learn to optimize fast.
@@ -52,7 +97,7 @@ LLMs working with code face two bottlenecks:
 
 ## The Solution
 
-`mcp-code-context` provides **25 tools** — covering reading, writing, AST transformation, search, and session management — all operating at the **symbol level** (functions, classes, methods). Tools support a `className` scope to correctly isolate identical symbol names in the same file (e.g. Flutter `build()` methods). Read tools extract structural skeletons. Write tools splice changes into the exact AST location.
+`mcp-code-context` provides **53 tools** — covering reading, writing, AST transformation, search, and session management — all operating at the **symbol level** (functions, classes, methods). Tools support a `className` scope to correctly isolate identical symbol names in the same file (e.g. Flutter `build()` methods). Read tools extract structural skeletons. Write tools splice changes into the exact AST location.
 
 | File | Original | Compressed | Reduction |
 |------|----------|------------|-----------|
@@ -69,13 +114,41 @@ LLMs working with code face two bottlenecks:
 
 ---
 
+
+---
+
+## 🧠 First-Class Companion Agent Skill (`code-context-pro`)
+
+`mcp-code-context` is more than an MCP server: **it ships with its own first-class agent skill** located at [`skills/code-context-pro/SKILL.md`](skills/code-context-pro/SKILL.md).
+
+When loaded into **Claude Code**, **Cursor**, **Windsurf**, or **Antigravity**, this skill equips the AI agent with 3 non-negotiable architectural axioms:
+
+1. **Token Budget Invariant (< 20% Budget Consumption)**: Prohibits dumping files > 50 lines into context. Enforces `read_file_surgical(filePath, symbolName)` for surgical 15-line symbol extraction.
+2. **Zero-Guessing Architecture Map**: Forces agents to run `get_semantic_repo_map(directoryPath, format: "xml")` before refactoring, obtaining a complete structural skeleton at **12% of the token cost of raw files**.
+3. **Two-Phase Atomic Mutation (Preview -> Confirm)**: All write tools (`write_file_surgical`, `insert_symbol`, `rename_symbol`) generate dry-run diffs with ephemeral cryptographic `confirmationToken`s and automatic rolling backups before committing to disk.
+
+### 📦 How to Install the Companion Skill:
+- **Claude Code**: Copy `skills/code-context-pro` to `~/.claude/skills/code-context-pro/`
+- **Cursor**: Copy to `.cursor/skills/code-context-pro/`
+- **Antigravity**: Copy to `.agents/skills/code-context-pro/` or `~/.gemini/config/skills/`
+
+```mermaid
+flowchart TD
+    Start["Developer asks for code modification or exploration"] --> QueryType{"What is the goal?"}
+    QueryType -->|"Explore Architecture"| Map["Call get_semantic_repo_map\n(85% Token Compression)"]
+    QueryType -->|"Find Symbol by Name"| Sym["Call search_symbols\n(AST Query, not text regex)"]
+    QueryType -->|"Find Exact String / Text"| Grep["Call search_code_pattern\n(Fuzzy or Regex)"]
+    QueryType -->|"Read Specific Symbol"| SurgRead["read_file_surgical(filePath, symbolName)"]
+    QueryType -->|"Modify Code Safely"| SurgWrite["write_file_surgical (Preview -> Confirm)"]
+```
+
 ## Reliability & Testing
 
 Built to be robust and precise. Both read and write engines are tested against real-world, complex codebases (including nested generic types in Dart, complex interfaces in PHP, and multi-file rename operations) with a **100% test pass rate** across all languages and operations.
 
 ### Production-Ready Features
 
-| Feature | v3.6.x | v3.9.1 | Benefit |
+| Feature | v3.6.x | v3.8.0+ | Benefit |
 |---------|--------|--------|---------|
 | Multi-process safety | ✅ | ✅ | No file corruption |
 | Persistent cache | ✅ | ✅ | <100ms cache hits |
@@ -88,7 +161,37 @@ Built to be robust and precise. Both read and write engines are tested against r
 
 ## Features
 
-### What's New in v3.9.1
+### What's New in v7.0.0 (Enterprise Polyglot)
+
+| Feature | Description |
+|---------|-------------|
+| 🧬 **53 Pure AST WebAssembly Tools** | Full enterprise polyglot suite with zero native dependencies across TypeScript, Python, PHP, Dart, Java, Go, C#, Ruby, Rust, and Kotlin. |
+| 🔍 **`query_code_ast`** | Tree-sitter S-expression queries with syntax highlighting and regex capture filtering. |
+| ⚡ **`incremental_ast_diff`** | O(log N) tree diffing with `tree.edit()` for instantaneous change detection. |
+| 📊 **`get_ast_complexity_matrix`** | McCabe Cyclomatic and Sonar Cognitive complexity analysis. |
+| 🧪 **`generate_ast_mocks`** | Strongly-typed mocks/factories without LLM hallucination. |
+| 🧟 **`detect_dead_ast_symbols`** | Dead code and zombie export detection across the workspace. |
+| 🌐 **`resolve_lexical_scope`** | Complete lexical scope tree and variable shadowing detector. |
+| 🛡️ **`sql_ast_validator`** | Embedded SQL taint analysis and syntax validator. |
+| 🔄 **`ast_codemod_transpile`** | CST-preserving code transformations (CJS-to-ESM, console stripping). |
+| ⏱️ **`detect_async_eventloop_blockers`** | Event loop blocking calls detector in async functions. |
+| 🔐 **`verify_env_contract_drift`** | Drift auditor between code `process.env` calls and `.env.example`. |
+| 🚨 **`audit_error_handling_contracts`** | Empty catch and missing telemetry detector. |
+| 🛣️ **`extract_api_route_matrix`** | Static endpoint extraction for Express, FastAPI, and Rails. |
+| 🌳 **`flatten_class_hierarchy`** | Inheritance flattener resolving ancestor methods and traits. |
+| 🔁 **`detect_circular_dependencies`** | Tarjan's SCC O(V+E) import cycle detector. |
+| 📡 **Startup Diagnostics Signature** | Startup banner prints `[mcp-code-context] v7.0.0 running on stdio`. |
+
+### Previous: v3.9.2
+
+| Feature | Description |
+|---------|-------------|
+| 🛡️ **Smart Project Root Discovery** | `resolveProjectRoot` & `findProjectRoot` walk up directory trees finding `.git`, `package.json`, `composer.json`, etc. No more `outside project boundary ".../undefined"` security errors. |
+| 🔓 **Optional Schema Requirements** | `projectRoot` is now optional across all tools in `CORE_TOOLS` and `ADMIN_TOOLS`. LLM agents can perform surgical reads, writes, and searches with just `filePath` or `rootDir`. |
+| 🛡️ **SecurityValidator Fallback Guard** | `SecurityValidator` safely handles `undefined`/`null` inputs by falling back to `process.cwd()` instead of normalizing to literal `undefined`. |
+| 📡 **Startup Diagnostics Signature** | Startup diagnostics banner prints `[mcp-code-context] v3.9.2 running on stdio` on stdio initialization. |
+
+### Previous: v3.9.1
 
 | Feature | Description |
 |---------|-------------|
@@ -181,7 +284,7 @@ Built to be robust and precise. Both read and write engines are tested against r
 
 ### `get_semantic_repo_map` Tool
 
-- **Max files**: Limited to 2000 files to prevent timeouts (increased from 500 in v3.9.1)
+- **Max files**: Limited to 2000 files to prevent timeouts (increased from 500 in v3.8.0)
 - **Performance**: Synchronous I/O may take 10-30 seconds on large repositories
 - **Recommendation**: Use `@folder` syntax to target specific directories
 
@@ -208,13 +311,13 @@ npx -y mcp-code-context
 
 ---
 
-## Session State (v3.9.1+)
+## Session State (v3.8.0+)
 
-**Important**: v3.9.1 introduces **session-scoped state** for each MCP client connection. This prevents state leakage when multiple agents (Amazon Q, Kiro, Cursor, etc.) use the same server instance.
+**Important**: v3.8.0 introduced **session-scoped state** for each MCP client connection. This prevents state leakage when multiple agents (Amazon Q, Kiro, Cursor, etc.) use the same server instance.
 
 ### What Changed
 
-| Before (v3.6.x) | After (v3.9.1) |
+| Before (v3.6.x) | After (v3.8.0+) |
 |----------------|----------------|
 | Global `LockManager` (shared by all clients) | Session-scoped `sessionStates` Map |
 | Global `ConfirmationStore` (in-memory Map) | Session-scoped confirmation store + SQLite persistence |
@@ -353,7 +456,7 @@ Any MCP-compatible client can use this server. The transport is **stdio** (JSON-
 
 ## Tools
 
-### Tool Reference (25 tools)
+### Tool Reference (53 tools)
 
 #### Read Tools
 
@@ -549,7 +652,7 @@ npm run dev
 - **Portability:** 100% WASM - no native dependencies, works on all platforms
 - **Tests:** 83 passing (unit + integration + performance + stress)
 
-### v3.9.1 Key Changes
+### Architectural Evolution (v3.8.0+)
 
 | Component | Change | Benefit |
 |-----------|--------|---------|
@@ -622,4 +725,14 @@ See [CHANGELOG.md](CHANGELOG.md) for version history.
 
 ---
 
-**Built with ❤️ from Caracas, Venezuela 🇻🇪**
+## 👨‍💻 Author & Maintainer
+
+**Alejandro Chataing**  
+Full-Stack Systems Architect & Principal Software Engineer  
+🌐 **Website & Portfolio**: [https://alejandro-chataing.pages.dev/#](https://alejandro-chataing.pages.dev/#)  
+📧 **Contact**: [a.chataing.a@gmail.com](mailto:a.chataing.a@gmail.com)  
+🐙 **GitHub**: [@achatainga](https://github.com/achatainga)
+
+---
+
+**Built with ❤️ by [Alejandro Chataing](https://alejandro-chataing.pages.dev/#) from Caracas, Venezuela 🇻🇪**

package/dist/src/core/engine.d.ts

@@ -1,5 +1,5 @@
 /**
- * Core Engine - v3.9.1
+ * Core Engine - v7.0.0
  * ASYNC I/O: Migrated to fs.promises
  */
 import { Parser, Language } from "web-tree-sitter";

package/dist/src/core/engine.js

@@ -1,5 +1,5 @@
 /**
- * Core Engine - v3.9.1
+ * Core Engine - v7.0.0
  * ASYNC I/O: Migrated to fs.promises
  */
 import { Parser, Language } from "web-tree-sitter";

package/dist/src/core/indexManager.d.ts

@@ -1,5 +1,5 @@
 /**
- * Index Manager - v3.9.1
+ * Index Manager - v7.0.0
  * Persistent symbol index and dependency graph in ~/.mcp-code-context/index/
  * Enables O(1) search_symbols and analyze_impact queries.
  */

package/dist/src/core/indexManager.js

@@ -1,5 +1,5 @@
 /**
- * Index Manager - v3.9.1
+ * Index Manager - v7.0.0
  * Persistent symbol index and dependency graph in ~/.mcp-code-context/index/
  * Enables O(1) search_symbols and analyze_impact queries.
  */
@@ -53,35 +53,35 @@ export class IndexManager {
     initSchema() {
         if (!this.db)
             return;
-        this.db.run(`
-      CREATE TABLE IF NOT EXISTS files (
-        file_path   TEXT PRIMARY KEY,
-        file_hash   TEXT NOT NULL,
-        indexed_at  INTEGER NOT NULL
-      )
+        this.db.run(`
+      CREATE TABLE IF NOT EXISTS files (
+        file_path   TEXT PRIMARY KEY,
+        file_hash   TEXT NOT NULL,
+        indexed_at  INTEGER NOT NULL
+      )
     `);
-        this.db.run(`
-      CREATE TABLE IF NOT EXISTS symbols (
-        id          INTEGER PRIMARY KEY AUTOINCREMENT,
-        file_path   TEXT NOT NULL,
-        name        TEXT NOT NULL,
-        type        TEXT NOT NULL,
-        start_line  INTEGER NOT NULL DEFAULT 0,
-        end_line    INTEGER NOT NULL DEFAULT 0,
-        class_name  TEXT,
-        FOREIGN KEY (file_path) REFERENCES files(file_path) ON DELETE CASCADE
-      )
+        this.db.run(`
+      CREATE TABLE IF NOT EXISTS symbols (
+        id          INTEGER PRIMARY KEY AUTOINCREMENT,
+        file_path   TEXT NOT NULL,
+        name        TEXT NOT NULL,
+        type        TEXT NOT NULL,
+        start_line  INTEGER NOT NULL DEFAULT 0,
+        end_line    INTEGER NOT NULL DEFAULT 0,
+        class_name  TEXT,
+        FOREIGN KEY (file_path) REFERENCES files(file_path) ON DELETE CASCADE
+      )
     `);
         this.db.run(`CREATE INDEX IF NOT EXISTS idx_symbols_name      ON symbols(name)`);
         this.db.run(`CREATE INDEX IF NOT EXISTS idx_symbols_file      ON symbols(file_path)`);
         this.db.run(`CREATE INDEX IF NOT EXISTS idx_symbols_name_lower ON symbols(LOWER(name))`);
-        this.db.run(`
-      CREATE TABLE IF NOT EXISTS dependencies (
-        from_file   TEXT NOT NULL,
-        to_file     TEXT NOT NULL,
-        import_stmt TEXT,
-        PRIMARY KEY (from_file, to_file)
-      )
+        this.db.run(`
+      CREATE TABLE IF NOT EXISTS dependencies (
+        from_file   TEXT NOT NULL,
+        to_file     TEXT NOT NULL,
+        import_stmt TEXT,
+        PRIMARY KEY (from_file, to_file)
+      )
     `);
         this.db.run(`CREATE INDEX IF NOT EXISTS idx_deps_from ON dependencies(from_file)`);
         this.db.run(`CREATE INDEX IF NOT EXISTS idx_deps_to   ON dependencies(to_file)`);
@@ -115,7 +115,7 @@ export class IndexManager {
             // Delete old symbols for this file
             this.db.run("DELETE FROM symbols WHERE file_path = ?", [filePath]);
             // Insert new symbols
-            const symStmt = this.db.prepare(`INSERT INTO symbols (file_path, name, type, start_line, end_line, class_name)
+            const symStmt = this.db.prepare(`INSERT INTO symbols (file_path, name, type, start_line, end_line, class_name)
          VALUES (?, ?, ?, ?, ?, ?)`);
             for (const sym of symbols) {
                 symStmt.run([

package/dist/src/core/sessionManager.d.ts

@@ -1,5 +1,5 @@
 /**
- * Session Manager - v3.9.1
+ * Session Manager - v7.0.0
  * Manages per-MCP-client state isolation
  * Prevents state leakage between concurrent clients
  */

package/dist/src/core/sessionManager.js

@@ -1,5 +1,5 @@
 /**
- * Session Manager - v3.9.1
+ * Session Manager - v7.0.0
  * Manages per-MCP-client state isolation
  * Prevents state leakage between concurrent clients
  */

package/dist/src/core/validator.d.ts

@@ -1,5 +1,5 @@
 /**
- * Security Validator - v3.9.1
+ * Security Validator - v7.0.0
  * CRITICAL FIX: Path traversal check AFTER normalization
  */
 export interface ValidationResult {
@@ -9,7 +9,7 @@ export interface ValidationResult {
 }
 export declare class SecurityValidator {
     private projectRoot;
-    constructor(projectRoot: string);
+    constructor(projectRoot?: string);
     validateFilePath(filePath: string): Promise<ValidationResult>;
     validateFileSize(filePath: string, maxSize?: number): Promise<ValidationResult>;
 }

package/dist/src/core/validator.js

@@ -1,5 +1,5 @@
 /**
- * Security Validator - v3.9.1
+ * Security Validator - v7.0.0
  * CRITICAL FIX: Path traversal check AFTER normalization
  */
 import * as path from "node:path";
@@ -8,7 +8,13 @@ export class SecurityValidator {
     projectRoot;
     constructor(projectRoot) {
         // normalize: resolve + lowercase for case-insensitive Windows FS comparison
-        this.projectRoot = path.resolve(projectRoot).toLowerCase();
+        const safeRoot = projectRoot &&
+            projectRoot !== "undefined" &&
+            projectRoot !== "null" &&
+            projectRoot.trim().length > 0
+            ? projectRoot
+            : process.cwd();
+        this.projectRoot = path.resolve(safeRoot).toLowerCase();
     }
     async validateFilePath(filePath) {
         const resolved = path.resolve(filePath);

package/dist/src/core/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAQvC,MAAM,OAAO,iBAAiB;IACpB,WAAW,CAAS;IAE5B,YAAY,WAAmB;QAC7B,4EAA4E;QAC5E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/F,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,mBAAmB,QAAQ,kCAAkC,IAAI,CAAC,WAAW,GAAG;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YAE5C,IAAI,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/F,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,sBAAsB,QAAQ,wCAAwC,IAAI,CAAC,WAAW,GAAG;iBACjG,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oBAAoB,QAAQ,mBAAmB,QAAQ,IAAI;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB,EAAE,GAAG,IAAI,GAAG,IAAI;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACjD,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,mBAAmB,MAAM,sBAAsB,KAAK,IAAI;iBAChE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,kCAAkC,QAAQ,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAChH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAQvC,MAAM,OAAO,iBAAiB;IACpB,WAAW,CAAS;IAE5B,YAAY,WAAoB;QAC9B,4EAA4E;QAC5E,MAAM,QAAQ,GACZ,WAAW;YACX,WAAW,KAAK,WAAW;YAC3B,WAAW,KAAK,MAAM;YACtB,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/F,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,mBAAmB,QAAQ,kCAAkC,IAAI,CAAC,WAAW,GAAG;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YAE5C,IAAI,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/F,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,sBAAsB,QAAQ,wCAAwC,IAAI,CAAC,WAAW,GAAG;iBACjG,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oBAAoB,QAAQ,mBAAmB,QAAQ,IAAI;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB,EAAE,GAAG,IAAI,GAAG,IAAI;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACjD,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,mBAAmB,MAAM,sBAAsB,KAAK,IAAI;iBAChE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,kCAAkC,QAAQ,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAChH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/src/index.d.ts

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
 /**
- * mcp-code-context v3.9.1 - Tree-sitter WASM Edition (thin bootstrap)
+ * mcp-code-context v4.0.0 Enterprise - Tree-sitter WASM Edition
+ * Dual Transport Architecture: Stdio + Streamable HTTP / SSE
  */
-export {};
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+export declare function createServerInstance(): Server;

package/dist/src/index.js

@@ -1,9 +1,13 @@
 #!/usr/bin/env node
 /**
- * mcp-code-context v3.9.1 - Tree-sitter WASM Edition (thin bootstrap)
+ * mcp-code-context v4.0.0 Enterprise - Tree-sitter WASM Edition
+ * Dual Transport Architecture: Stdio + Streamable HTTP / SSE
  */
+import http from "node:http";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 import { CodeContextEngine } from "./core/engine.js";
 import { ParserRegistry } from "./parsers/registry.js";
@@ -13,35 +17,136 @@ import { TOOLS } from "./tools/toolDefinitions.js";
 import { setServerInstances } from "./tools/context.js";
 import { registerPipeline } from "./tools/pipeline.js";
 const SERVER_NAME = "mcp-code-context";
-const SERVER_VERSION = "3.9.1";
-const server = new Server({ name: SERVER_NAME, version: SERVER_VERSION }, { capabilities: { tools: {} } });
-server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
-registerPipeline(server);
+const SERVER_VERSION = "7.0.0";
+export function createServerInstance() {
+    const server = new Server({ name: SERVER_NAME, version: SERVER_VERSION }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
+    registerPipeline(server);
+    return server;
+}
+let httpServer = null;
+const sseTransports = new Map();
 async function main() {
     const engine = new CodeContextEngine();
     await engine.init();
     const registry = new ParserRegistry(engine);
     await registry.init();
     setServerInstances(engine, registry);
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
-    console.error(`[${SERVER_NAME}] v${SERVER_VERSION} running on stdio`);
+    const isHttp = process.argv.includes("--http") || process.env.MCP_TRANSPORT === "http";
+    if (isHttp) {
+        const portArg = process.argv.find((a) => a.startsWith("--port="));
+        const port = parseInt(process.env.PORT || (portArg ? portArg.split("=")[1] : "3000"), 10);
+        const host = process.env.HOST || "127.0.0.1";
+        // Setup stateless Streamable HTTP transport for /mcp endpoint
+        const streamableTransport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined, // Stateless mode for high-throughput single-endpoint MCP
+        });
+        const streamableServer = createServerInstance();
+        await streamableServer.connect(streamableTransport);
+        httpServer = http.createServer(async (req, res) => {
+            res.setHeader("Access-Control-Allow-Origin", "*");
+            res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS, DELETE");
+            res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Session-Id");
+            if (req.method === "OPTIONS") {
+                res.writeHead(200);
+                res.end();
+                return;
+            }
+            const url = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+            // Health check endpoint
+            if (url.pathname === "/" || url.pathname === "/health") {
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({
+                    status: "ok",
+                    server: SERVER_NAME,
+                    version: SERVER_VERSION,
+                    transports: {
+                        streamableHttp: "/mcp",
+                        legacySse: "/sse",
+                        legacyMessage: "/message",
+                        stdio: "available",
+                    },
+                    toolsCount: TOOLS.length,
+                }));
+                return;
+            }
+            // Modern Streamable HTTP endpoint (/mcp)
+            if (url.pathname === "/mcp") {
+                await streamableTransport.handleRequest(req, res);
+                return;
+            }
+            // Legacy SSE endpoint (/sse) for backward compatibility
+            if (url.pathname === "/sse") {
+                const transport = new SSEServerTransport("/message", res);
+                const server = createServerInstance();
+                sseTransports.set(transport.sessionId, { transport, server });
+                res.on("close", () => {
+                    sseTransports.delete(transport.sessionId);
+                });
+                await server.connect(transport);
+                return;
+            }
+            // Legacy SSE message endpoint (/message)
+            if (url.pathname === "/message" && req.method === "POST") {
+                const sessionId = url.searchParams.get("sessionId");
+                if (!sessionId) {
+                    res.writeHead(400, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ error: "Missing required 'sessionId' query parameter" }));
+                    return;
+                }
+                const session = sseTransports.get(sessionId);
+                if (!session) {
+                    res.writeHead(404, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ error: "SSE transport session not found or expired" }));
+                    return;
+                }
+                await session.transport.handlePostMessage(req, res);
+                return;
+            }
+            res.writeHead(404, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "Endpoint not found" }));
+        });
+        httpServer.listen(port, host, () => {
+            console.error(`[${SERVER_NAME}] v${SERVER_VERSION} listening on http://${host}:${port} (Streamable HTTP: /mcp | SSE: /sse)`);
+        });
+    }
+    else {
+        const server = createServerInstance();
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
+        console.error(`[${SERVER_NAME}] v${SERVER_VERSION} running on stdio`);
+    }
 }
 const shutdownHandler = () => {
-    globalSessionManager.shutdownAll()
+    if (httpServer) {
+        try {
+            httpServer.close();
+        }
+        catch {
+            // ignore
+        }
+    }
+    globalSessionManager
+        .shutdownAll()
         .then(() => globalAuditLogger.stop())
         .then(() => {
-        console.error('[shutdown] Cleanup complete. Exiting.');
+        console.error("[shutdown] Cleanup complete. Exiting.");
         process.exit(0);
     })
         .catch((err) => {
-        console.error('[shutdown] Session cleanup error:', err);
+        console.error("[shutdown] Session cleanup error:", err);
         process.exit(1);
     });
 };
-process.on("SIGINT", shutdownHandler);
-process.on("SIGTERM", shutdownHandler);
-process.on("exit", shutdownHandler);
+let isShuttingDown = false;
+const safeShutdown = () => {
+    if (isShuttingDown)
+        return;
+    isShuttingDown = true;
+    shutdownHandler();
+};
+process.on("SIGINT", safeShutdown);
+process.on("SIGTERM", safeShutdown);
 main().catch((error) => {
     console.error("Server error:", error);
     process.exit(1);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAEjF,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAEzB,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACvC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtB,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAErC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,WAAW,MAAM,cAAc,mBAAmB,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,EAAE;IAC3B,oBAAoB,CAAC,WAAW,EAAE;SAC/B,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;SACpC,IAAI,CAAC,GAAG,EAAE;QACT,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;AACtC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AACvC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAEpC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA;;;GAGG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,IAAI,UAAU,GAAuB,IAAI,CAAC;AAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6D,CAAC;AAE3F,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACvC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtB,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,CAAC;IAEvF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC;QAE7C,8DAA8D;QAC9D,MAAM,mBAAmB,GAAG,IAAI,6BAA6B,CAAC;YAC5D,kBAAkB,EAAE,SAAS,EAAE,yDAAyD;SACzF,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,oBAAoB,EAAE,CAAC;QAChD,MAAM,gBAAgB,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAEpD,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAChD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;YAC5E,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,2CAA2C,CAAC,CAAC;YAE3F,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YAEjF,wBAAwB;YACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACvD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,cAAc;oBACvB,UAAU,EAAE;wBACV,cAAc,EAAE,MAAM;wBACtB,SAAS,EAAE,MAAM;wBACjB,aAAa,EAAE,UAAU;wBACzB,KAAK,EAAE,WAAW;qBACnB;oBACD,UAAU,EAAE,KAAK,CAAC,MAAM;iBACzB,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,yCAAyC;YACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,mBAAmB,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,wDAAwD;YACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;gBACtC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAE9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACnB,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC5C,CAAC,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,yCAAyC;YACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACzD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACpD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC,CAAC;oBACnF,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC,CAAC;oBACjF,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YACjC,OAAO,CAAC,KAAK,CACX,IAAI,WAAW,MAAM,cAAc,wBAAwB,IAAI,IAAI,IAAI,sCAAsC,CAC9G,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,IAAI,WAAW,MAAM,cAAc,mBAAmB,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,EAAE;IAC3B,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,oBAAoB;SACjB,WAAW,EAAE;SACb,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;SACpC,IAAI,CAAC,GAAG,EAAE;QACT,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,IAAI,cAAc,GAAG,KAAK,CAAC;AAC3B,MAAM,YAAY,GAAG,GAAG,EAAE;IACxB,IAAI,cAAc;QAAE,OAAO;IAC3B,cAAc,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,CAAC;AACpB,CAAC,CAAC;AAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AACnC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAEpC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/operations/apiRoutes.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Zero-Runtime REST / FastAPI / Express Route Extractor
+ * v7.0.0 Enterprise AST Intelligence
+ */
+import { ParserRegistry } from "../parsers/registry.js";
+import type { ReadResult } from "./readCore.js";
+export interface ApiRouteItem {
+    method: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | "ALL" | "CUSTOM";
+    path: string;
+    handlerName: string;
+    line: number;
+    framework: "FastAPI" | "Express" | "NestJS" | "WP_REST" | "Generic";
+    pathParams: string[];
+}
+export interface ApiRouteMatrixReport {
+    filePath?: string;
+    totalRoutesFound: number;
+    routes: ApiRouteItem[];
+    summary: string;
+}
+export interface ApiRouteMatrixOptions {
+    filePath?: string;
+    code?: string;
+    content?: string;
+    projectRoot?: string;
+    registry?: ParserRegistry;
+}
+/**
+ * Extracts API routes from AST
+ */
+export declare function extractApiRouteMatrix(params: ApiRouteMatrixOptions): Promise<ReadResult>;