openkrak-mcp 1.0.0

package/README.md

@@ -0,0 +1,108 @@
+# openkrak-mcp
+
+**AI coding intelligence for any coding agent — delivered as an MCP server.**
+
+OpenKrak pre-computes your repository's structure and delivers a structured intelligence brief (Mahadata) before your LLM runs. Less hallucination, lower token cost, faster answers.
+
+---
+
+## The Problem
+
+Every time you ask Claude Code, OpenCode, or Cursor to modify code, the LLM starts blind — reading raw files, burning tokens, guessing dependencies.
+
+**Without OpenKrak:** LLM reads 50,000 tokens of raw files. Slow. Expensive. Blind.  
+**With OpenKrak:** LLM reads a pre-computed Mahadata brief. Precise. Cheap. Aware.
+
+---
+
+## How It Works
+
+OpenKrak runs the **Dorchester engine** — a 6-step static analysis pipeline:
+
+```
+Repository → DeepStrike → Hotspot Registry → Correlation Engine → Blast Radius → Execution Gate → Mahadata
+```
+
+The result is delivered as a structured brief to your coding agent via MCP before any code is touched.
+
+---
+
+## Install
+
+```bash
+npm install -g openkrak-mcp
+```
+
+## Usage
+
+### OpenCode
+```json
+// ~/.config/opencode/opencode.jsonc
+{
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "openkrak": {
+      "type": "local",
+      "enabled": true,
+      "command": ["npx", "openkrak-mcp"]
+    }
+  }
+}
+```
+
+### Claude Code
+```json
+// ~/.claude/mcp.json
+{
+  "mcpServers": {
+    "openkrak": {
+      "command": "npx",
+      "args": ["openkrak-mcp"],
+      "env": { "OPENKRAK_KEY": "your-license-key" }
+    }
+  }
+}
+```
+
+### Activate Pro (optional)
+```bash
+OPENKRAK_KEY=your-key npx openkrak-mcp
+```
+
+---
+
+## Tools
+
+| Tool | Description |
+|------|-------------|
+| `analyze_repo` | Full Dorchester pipeline — dependency graph, hotspots, blast radius, threat matrix |
+| `get_mahadata` | Compact 500-token intelligence brief for fast LLM context |
+| `get_hotspots` | Ranked list of high-risk files by complexity, coupling, change frequency |
+| `blast_radius` | Ripple effect map of modifying a specific file |
+
+---
+
+## Pricing
+
+| Plan | Price | Limit |
+|------|-------|-------|
+| Free | $0 | 15 calls / 24h |
+| Pro Monthly | $8/month | Unlimited |
+| Pro Annual | $67.20/year | Unlimited |
+
+Get a Pro key at **[openkrak.dev](https://openkrak.dev)**
+
+---
+
+## Tech
+
+- Protocol: MCP (Model Context Protocol) — open standard
+- Analysis: Static, deterministic — not AI/probabilistic
+- Privacy: Codebase never leaves your machine (Phase 1)
+- Compatible: Any MCP-compatible agent (OpenCode, Claude Code, Cursor, Codex)
+
+---
+
+## License
+
+MIT — © 2026 Faiz Hamizan

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,121 @@
+#!/usr/bin/env node
+// openkrak-mcp/src/index.ts
+// OpenKrak MCP Server — Entry Point
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { handleAnalyzeRepo } from "./tools/analyze_repo.js";
+import { handleGetHotspots } from "./tools/get_hotspots.js";
+import { handleBlastRadius } from "./tools/blast_radius.js";
+import { handleGetMahadata } from "./tools/get_mahadata.js";
+import { checkLicense } from "./license/check.js";
+const server = new Server({ name: "openkrak", version: "1.0.0" }, { capabilities: { tools: {} } });
+// ── Tool Registry ────────────────────────────────────────
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: [
+        {
+            name: "analyze_repo",
+            description: [
+                "ALWAYS call this FIRST before any coding task on a repository. DO NOT read any source files before calling this.",
+                "Runs the full Dorchester static analysis pipeline and returns a structured Mahadata brief: dependency graph, hotspots, blast radius, circular dependencies, entry points, and threat matrix.",
+                "After receiving the result, answer directly from the Mahadata. DO NOT read additional source files unless the user asks for specific line-level detail.",
+                "Call with the objective param set to what the user wants to do — this focuses the brief.",
+            ].join(" "),
+            inputSchema: {
+                type: "object",
+                properties: {
+                    path: { type: "string", description: "Absolute path to the repository root" },
+                    objective: { type: "string", description: "What the user intends to do — e.g. 'refactor auth module', 'add new feature X'" },
+                },
+                required: ["path"],
+            },
+        },
+        {
+            name: "get_mahadata",
+            description: [
+                "Returns the compact 500-token Mahadata intelligence brief for a repository.",
+                "Use this instead of reading source files when you need repo-wide context: structure, hotspots, entry points, constraints, threat score.",
+                "After receiving the brief, answer the user directly. DO NOT follow up with file reads — the brief contains pre-computed intelligence. Only read a specific file if the user asks for exact line-level content.",
+            ].join(" "),
+            inputSchema: {
+                type: "object",
+                properties: {
+                    path: { type: "string", description: "Absolute path to the repository root" },
+                    objective: { type: "string", description: "What the user intends to do" },
+                },
+                required: ["path"],
+            },
+        },
+        {
+            name: "get_hotspots",
+            description: [
+                "Returns ranked list of high-risk files: complexity score, coupling, change frequency, risk level.",
+                "Use this when the user asks which files are most dangerous to touch, or to prioritize review scope.",
+                "DO NOT read source files after this — the hotspot data is pre-computed.",
+            ].join(" "),
+            inputSchema: {
+                type: "object",
+                properties: {
+                    path: { type: "string", description: "Absolute path to the repository root" },
+                },
+                required: ["path"],
+            },
+        },
+        {
+            name: "blast_radius",
+            description: [
+                "Maps the ripple effect of modifying a specific file: which files, modules, services, and APIs will be affected.",
+                "Use this before making any change to understand the impact. Call with the exact file the user wants to modify.",
+                "DO NOT read source files to determine impact — this tool gives you the pre-computed dependency chain.",
+            ].join(" "),
+            inputSchema: {
+                type: "object",
+                properties: {
+                    path: { type: "string", description: "Absolute path to the repository root" },
+                    file: { type: "string", description: "Relative path to the file being changed (e.g. 'src/auth/index.ts')" },
+                },
+                required: ["path", "file"],
+            },
+        },
+    ],
+}));
+// ── Tool Dispatch ────────────────────────────────────────
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    // License gate — runs before every tool call
+    const license = await checkLicense();
+    if (!license.allowed) {
+        return {
+            content: [{ type: "text", text: `OpenKrak: ${license.reason}` }],
+            isError: true,
+        };
+    }
+    try {
+        switch (name) {
+            case "analyze_repo":
+                return await handleAnalyzeRepo(args);
+            case "get_hotspots":
+                return await handleGetHotspots(args);
+            case "blast_radius":
+                return await handleBlastRadius(args);
+            case "get_mahadata":
+                return await handleGetMahadata(args);
+            default:
+                return {
+                    content: [{ type: "text", text: `Unknown tool: ${name}` }],
+                    isError: true,
+                };
+        }
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            content: [{ type: "text", text: `OpenKrak error: ${message}` }],
+            isError: true,
+        };
+    }
+});
+// ── Start ────────────────────────────────────────────────
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,4BAA4B;AAC5B,oCAAoC;AAEpC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EACtC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE;QACL;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE;gBACX,kHAAkH;gBAClH,8LAA8L;gBAC9L,yJAAyJ;gBACzJ,0FAA0F;aAC3F,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBAC7E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gFAAgF,EAAE;iBAC7H;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE;gBACX,6EAA6E;gBAC7E,yIAAyI;gBACzI,gNAAgN;aACjN,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBAC7E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;iBAC1E;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE;gBACX,mGAAmG;gBACnG,qGAAqG;gBACrG,yEAAyE;aAC1E,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;iBAC9E;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE;gBACX,iHAAiH;gBACjH,gHAAgH;gBAChH,uGAAuG;aACxG,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBAC7E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oEAAoE,EAAE;iBAC5G;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aAC3B;SACF;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,4DAA4D;AAC5D,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjD,6CAA6C;IAC7C,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAChE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,cAAc;gBACjB,OAAO,MAAM,iBAAiB,CAAC,IAA4C,CAAC,CAAC;YAC/E,KAAK,cAAc;gBACjB,OAAO,MAAM,iBAAiB,CAAC,IAAwB,CAAC,CAAC;YAC3D,KAAK,cAAc;gBACjB,OAAO,MAAM,iBAAiB,CAAC,IAAsC,CAAC,CAAC;YACzE,KAAK,cAAc;gBACjB,OAAO,MAAM,iBAAiB,CAAC,IAA4C,CAAC,CAAC;YAC/E;gBACE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;oBAC1D,OAAO,EAAE,IAAI;iBACd,CAAC;QACN,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,OAAO,EAAE,EAAE,CAAC;YAC/D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,4DAA4D;AAC5D,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/license/check.d.ts

@@ -0,0 +1,8 @@
+export interface LicenseResult {
+    allowed: boolean;
+    tier: "pro" | "free" | "blocked";
+    reason?: string;
+    remaining?: number;
+}
+export declare function checkLicense(): Promise<LicenseResult>;
+//# sourceMappingURL=check.d.ts.map

package/dist/license/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/license/check.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAiD3D"}

package/dist/license/check.js

@@ -0,0 +1,59 @@
+// openkrak-mcp/src/license/check.ts
+// License gate — Free tier (CF Worker) or Pro (key validation)
+const WORKER_URL = "https://openkrak-license-server.openkrak.workers.dev";
+const PRO_KEY = process.env.OPENKRAK_KEY;
+// Machine fingerprint: hostname + username (matches CF KV key pattern)
+import { createHash } from "node:crypto";
+import { hostname, userInfo } from "node:os";
+function getFingerprint() {
+    const raw = `${hostname()}:${userInfo().username}`;
+    return createHash("sha256").update(raw).digest("hex").slice(0, 32);
+}
+export async function checkLicense() {
+    // Pro key path
+    if (PRO_KEY) {
+        try {
+            const res = await fetch(`${WORKER_URL}/v3/validate`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ key: PRO_KEY }),
+            });
+            const data = (await res.json());
+            if (data.valid) {
+                return { allowed: true, tier: "pro" };
+            }
+            return {
+                allowed: false,
+                tier: "blocked",
+                reason: `Pro key invalid: ${data.reason ?? "unknown"}. Get a key at openkrak.dev`,
+            };
+        }
+        catch {
+            // Network error — fail open for pro (offline grace)
+            return { allowed: true, tier: "pro" };
+        }
+    }
+    // Free tier path
+    const fp = getFingerprint();
+    try {
+        const res = await fetch(`${WORKER_URL}/v3/free-query`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ fingerprint: fp }),
+        });
+        const data = (await res.json());
+        if (data.allowed) {
+            return { allowed: true, tier: "free", remaining: data.remaining };
+        }
+        return {
+            allowed: false,
+            tier: "blocked",
+            reason: `Free tier limit reached (15 calls/24h). Upgrade at openkrak.dev — $8/month for unlimited.`,
+        };
+    }
+    catch {
+        // CF Worker unreachable — fail open (don't block users on network issues)
+        return { allowed: true, tier: "free" };
+    }
+}
+//# sourceMappingURL=check.js.map

package/dist/license/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/license/check.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,+DAA+D;AAE/D,MAAM,UAAU,GAAG,sDAAsD,CAAC;AAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;AAEzC,uEAAuE;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE7C,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,GAAG,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,eAAe;IACf,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,cAAc,EAAE;gBACnD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACvC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyC,CAAC;YACxE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACxC,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,oBAAoB,IAAI,CAAC,MAAM,IAAI,SAAS,6BAA6B;aAClF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;YACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,gBAAgB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACpE,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,2FAA2F;SACpG,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/tools/analyze_repo.d.ts

@@ -0,0 +1,17 @@
+export declare function handleAnalyzeRepo(args: {
+    path: string;
+    objective?: string;
+}): Promise<{
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=analyze_repo.d.ts.map

package/dist/tools/analyze_repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze_repo.d.ts","sourceRoot":"","sources":["../../src/tools/analyze_repo.ts"],"names":[],"mappings":"AAGA,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;;;;;;;;;;;;GA8CA"}

package/dist/tools/analyze_repo.js

@@ -0,0 +1,46 @@
+// openkrak-mcp/src/tools/analyze_repo.ts
+import { runPipeline } from "dorchester";
+export async function handleAnalyzeRepo(args) {
+    const result = await runPipeline({
+        repoPath: args.path,
+        objective: args.objective ?? "Analyze repository",
+    });
+    if (result.status === "failed") {
+        return {
+            content: [{ type: "text", text: `Analysis failed: ${result.error}` }],
+            isError: true,
+        };
+    }
+    const mahadata = result.mahadata;
+    const meta = mahadata.meta;
+    const repo = mahadata.repository;
+    const hotspots = mahadata.hotspots;
+    const findings = mahadata.findings;
+    const brief = mahadata.execution_brief;
+    const summary = [
+        `# OpenKrak Analysis — ${repo?.name ?? args.path}`,
+        `Status: ${result.status} (${result.durationMs}ms)`,
+        `Files: ${repo?.total_files ?? "?"} | LOC: ${repo?.total_loc ?? "?"}`,
+        `Language: ${repo?.primary_language ?? "?"} | Framework: ${repo?.framework ?? "none"}`,
+        ``,
+        `## Hotspots (${hotspots?.length ?? 0} files)`,
+        ...(hotspots?.slice(0, 5).map((h) => {
+            const hs = h;
+            return `- ${hs.path} [${hs.risk_level}] score: ${Number(hs.score).toFixed(2)}`;
+        }) ?? []),
+        ``,
+        `## Findings (${findings?.length ?? 0} total)`,
+        ``,
+        `## Execution Brief`,
+        brief?.objective ? `Objective: ${brief.objective}` : "",
+        brief?.repository_summary ? `Summary: ${brief.repository_summary}` : "",
+        ``,
+        `Scan ID: ${meta?.scan_id ?? "?"}`,
+    ]
+        .filter(Boolean)
+        .join("\n");
+    return {
+        content: [{ type: "text", text: summary }],
+    };
+}
+//# sourceMappingURL=analyze_repo.js.map

package/dist/tools/analyze_repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze_repo.js","sourceRoot":"","sources":["../../src/tools/analyze_repo.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAGvC;IACC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,oBAAoB;KAClD,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA2C,CAAC;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAiD,CAAC;IACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAiC,CAAC;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAiC,CAAC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAsD,CAAC;IAE9E,MAAM,OAAO,GAAG;QACd,yBAAyB,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE;QAClD,WAAW,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,KAAK;QACnD,UAAU,IAAI,EAAE,WAAW,IAAI,GAAG,WAAW,IAAI,EAAE,SAAS,IAAI,GAAG,EAAE;QACrE,aAAa,IAAI,EAAE,gBAAgB,IAAI,GAAG,iBAAiB,IAAI,EAAE,SAAS,IAAI,MAAM,EAAE;QACtF,EAAE;QACF,gBAAgB,QAAQ,EAAE,MAAM,IAAI,CAAC,SAAS;QAC9C,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;YAC3C,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,OAAO,KAAK,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,YAAY,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC,CAAC,IAAI,EAAE,CAAC;QACT,EAAE;QACF,gBAAgB,QAAQ,EAAE,MAAM,IAAI,CAAC,SAAS;QAC9C,EAAE;QACF,oBAAoB;QACpB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;QACvD,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE;QACvE,EAAE;QACF,YAAa,IAAI,EAAE,OAAkB,IAAI,GAAG,EAAE;KAC/C;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/tools/blast_radius.d.ts

@@ -0,0 +1,17 @@
+export declare function handleBlastRadius(args: {
+    path: string;
+    file: string;
+}): Promise<{
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=blast_radius.d.ts.map

package/dist/tools/blast_radius.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blast_radius.d.ts","sourceRoot":"","sources":["../../src/tools/blast_radius.ts"],"names":[],"mappings":"AAGA,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;GA8D3E"}

package/dist/tools/blast_radius.js

@@ -0,0 +1,58 @@
+// openkrak-mcp/src/tools/blast_radius.ts
+import { runPipeline } from "dorchester";
+export async function handleBlastRadius(args) {
+    const result = await runPipeline({
+        repoPath: args.path,
+        objective: `Blast radius for ${args.file}`,
+    });
+    if (result.status === "failed") {
+        return {
+            content: [{ type: "text", text: `Analysis failed: ${result.error}` }],
+            isError: true,
+        };
+    }
+    const mahadata = result.mahadata;
+    const blastRadiusAll = mahadata.blast_radius ?? [];
+    const entry = blastRadiusAll.find((b) => {
+        const br = b;
+        return (br.trigger_file === args.file ||
+            br.trigger_file?.endsWith(args.file));
+    });
+    if (!entry) {
+        const lines = [
+            `# Blast Radius — file not matched: ${args.file}`,
+            `Available trigger files: ${blastRadiusAll.length}`,
+            ...blastRadiusAll.slice(0, 10).map((b) => {
+                const br = b;
+                return `- ${br.trigger_file} (risk: ${Number(br.risk_score).toFixed(2)}, affects ${br.total_affected_files} files)`;
+            }),
+        ].join("\n");
+        return { content: [{ type: "text", text: lines }] };
+    }
+    const impact = entry.impact;
+    const lines = [
+        `# Blast Radius — ${entry.trigger_file}`,
+        `Risk Score: ${Number(entry.risk_score).toFixed(3)}`,
+        `Affected Files: ${entry.total_affected_files} | Modules: ${entry.total_affected_modules}`,
+        ``,
+        `## Affected Files (top 10)`,
+        ...(impact.files ?? []).slice(0, 10).map((f) => {
+            const fi = f;
+            return `- [${fi.impact_type}] ${fi.path} (depth: ${fi.depth}, confidence: ${Number(fi.confidence).toFixed(2)})`;
+        }),
+        ``,
+        `## Affected Modules`,
+        ...(impact.modules ?? []).map((m) => {
+            const mi = m;
+            return `- ${mi.name}: ${mi.impact_level}`;
+        }),
+        ``,
+        `## APIs at Risk`,
+        ...(impact.apis ?? []).map((a) => {
+            const ai = a;
+            return `- ${ai.endpoint}: ${ai.impact_level}`;
+        }),
+    ].join("\n");
+    return { content: [{ type: "text", text: lines }] };
+}
+//# sourceMappingURL=blast_radius.js.map

package/dist/tools/blast_radius.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blast_radius.js","sourceRoot":"","sources":["../../src/tools/blast_radius.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAoC;IAC1E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,SAAS,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;KAC3C,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAC5D,MAAM,cAAc,GAAI,QAAQ,CAAC,YAA0B,IAAI,EAAE,CAAC;IAElE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,OAAO,CACL,EAAE,CAAC,YAAY,KAAK,IAAI,CAAC,IAAI;YAC5B,EAAE,CAAC,YAAuB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CACjD,CAAC;IACJ,CAAC,CAAwC,CAAC;IAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG;YACZ,sCAAsC,IAAI,CAAC,IAAI,EAAE;YACjD,4BAA4B,cAAc,CAAC,MAAM,EAAE;YACnD,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;gBAChD,MAAM,EAAE,GAAG,CAA4B,CAAC;gBACxC,OAAO,KAAK,EAAE,CAAC,YAAY,WAAW,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,oBAAoB,SAAS,CAAC;YACtH,CAAC,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAmC,CAAC;IACzD,MAAM,KAAK,GAAG;QACZ,oBAAoB,KAAK,CAAC,YAAY,EAAE;QACxC,eAAe,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACpD,mBAAmB,KAAK,CAAC,oBAAoB,eAAe,KAAK,CAAC,sBAAsB,EAAE;QAC1F,EAAE;QACF,4BAA4B;QAC5B,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;YACtD,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,OAAO,MAAM,EAAE,CAAC,WAAW,KAAK,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,KAAK,iBAAiB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QAClH,CAAC,CAAC;QACF,EAAE;QACF,qBAAqB;QACrB,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;YAC3C,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,OAAO,KAAK,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,YAAY,EAAE,CAAC;QAC5C,CAAC,CAAC;QACF,EAAE;QACF,iBAAiB;QACjB,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;YACxC,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,OAAO,KAAK,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,YAAY,EAAE,CAAC;QAChD,CAAC,CAAC;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/tools/get_hotspots.d.ts

@@ -0,0 +1,16 @@
+export declare function handleGetHotspots(args: {
+    path: string;
+}): Promise<{
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=get_hotspots.d.ts.map

package/dist/tools/get_hotspots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_hotspots.d.ts","sourceRoot":"","sources":["../../src/tools/get_hotspots.ts"],"names":[],"mappings":"AAGA,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;GAqC7D"}

package/dist/tools/get_hotspots.js

@@ -0,0 +1,36 @@
+// openkrak-mcp/src/tools/get_hotspots.ts
+import { runPipeline } from "dorchester";
+export async function handleGetHotspots(args) {
+    const result = await runPipeline({
+        repoPath: args.path,
+        objective: "Identify hotspots",
+    });
+    if (result.status === "failed") {
+        return {
+            content: [{ type: "text", text: `Analysis failed: ${result.error}` }],
+            isError: true,
+        };
+    }
+    const mahadata = result.mahadata;
+    const hotspots = mahadata.hotspots ?? [];
+    if (hotspots.length === 0) {
+        return {
+            content: [{ type: "text", text: "No hotspots detected." }],
+        };
+    }
+    const lines = [
+        `# Hotspots — ${hotspots.length} files ranked by risk`,
+        "",
+        ...hotspots.map((h, i) => {
+            const hs = h;
+            const reasons = hs.reasons ?? [];
+            return [
+                `## ${i + 1}. ${hs.path}`,
+                `Risk: ${hs.risk_level} | Score: ${Number(hs.score).toFixed(3)} | Changes: ${hs.change_frequency}`,
+                `Reasons: ${reasons.map((r) => r.type).join(", ")}`,
+            ].join("\n");
+        }),
+    ].join("\n");
+    return { content: [{ type: "text", text: lines }] };
+}
+//# sourceMappingURL=get_hotspots.js.map

package/dist/tools/get_hotspots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_hotspots.js","sourceRoot":"","sources":["../../src/tools/get_hotspots.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAsB;IAC5D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAC5D,MAAM,QAAQ,GAAI,QAAQ,CAAC,QAAsB,IAAI,EAAE,CAAC;IAExD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,gBAAgB,QAAQ,CAAC,MAAM,uBAAuB;QACtD,EAAE;QACF,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE;YACxC,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,MAAM,OAAO,GAAI,EAAE,CAAC,OAA8C,IAAI,EAAE,CAAC;YACzE,OAAO;gBACL,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;gBACzB,SAAS,EAAE,CAAC,UAAU,aAAa,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,gBAAgB,EAAE;gBAClG,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/tools/get_mahadata.d.ts

@@ -0,0 +1,17 @@
+export declare function handleGetMahadata(args: {
+    path: string;
+    objective?: string;
+}): Promise<{
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: string;
+        text: string;
+    }[];
+    isError?: undefined;
+}>;
+//# sourceMappingURL=get_mahadata.d.ts.map

package/dist/tools/get_mahadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_mahadata.d.ts","sourceRoot":"","sources":["../../src/tools/get_mahadata.ts"],"names":[],"mappings":"AAGA,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;;;;;;;;;;;;GAoEA"}

package/dist/tools/get_mahadata.js

@@ -0,0 +1,64 @@
+// openkrak-mcp/src/tools/get_mahadata.ts
+import { runPipeline } from "dorchester";
+export async function handleGetMahadata(args) {
+    const result = await runPipeline({
+        repoPath: args.path,
+        objective: args.objective ?? "Analyze repository",
+    });
+    if (result.status === "failed") {
+        return {
+            content: [{ type: "text", text: `OpenKrak error: ${result.error}` }],
+            isError: true,
+        };
+    }
+    const m = result.mahadata;
+    const brief = m.execution_brief;
+    const threat = m.threat_matrix;
+    const repo = m.repository;
+    const hotspots = m.hotspots ?? [];
+    const blastRadius = m.blast_radius ?? [];
+    if (!brief) {
+        return {
+            content: [{ type: "text", text: "OpenKrak: no execution_brief generated." }],
+            isError: true,
+        };
+    }
+    const ctx = brief.critical_context ?? [];
+    const ph = brief.priority_hotspots ?? [];
+    const ep = brief.recommended_entry_points ?? [];
+    const constraints = brief.constraints ?? [];
+    const blockers = (threat?.blockers ?? []).length;
+    const warnings = (threat?.warnings ?? []).length;
+    // Top 3 hotspots compact
+    const topHotspots = hotspots.slice(0, 3).map((h) => {
+        const hs = h;
+        return `${hs.path}[${hs.risk_level},${Number(hs.score).toFixed(2)}]`;
+    });
+    // Top 3 blast radius compact
+    const topBlast = blastRadius.slice(0, 3).map((b) => {
+        const br = b;
+        return `${br.trigger_file}→${br.total_affected_files}files`;
+    });
+    // Compact ~500-token Mahadata brief
+    const lines = [
+        `[MAHADATA v2.1]`,
+        `repo:${repo?.name ?? args.path} | lang:${repo?.primary_language ?? "?"} | files:${repo?.total_files ?? "?"} | loc:${repo?.total_loc ?? "?"}`,
+        `objective:${brief.objective}`,
+        `summary:${brief.repository_summary}`,
+        ``,
+        `CTX: ${ctx.map((c) => `${c.key}=${c.value}`).join(" | ")}`,
+        ``,
+        `HOTSPOTS(top3): ${topHotspots.join(", ")}`,
+        `BLAST(top3): ${topBlast.join(", ")}`,
+        ``,
+        `ENTRY_POINTS:`,
+        ...ep.slice(0, 3).map((e) => `  ${e.path}${e.symbol ? `::${e.symbol}` : ""} — ${e.reason}`),
+        ``,
+        `CONSTRAINTS: ${constraints.slice(0, 3).join(" | ")}`,
+        `THREAT: risk=${Number(threat?.overall_risk_score ?? 0).toFixed(2)} | ${threat?.risk_summary ?? ""} | blockers:${blockers} warnings:${warnings}`,
+        ``,
+        `[END MAHADATA — use analyze_repo or blast_radius for full detail]`,
+    ].join("\n");
+    return { content: [{ type: "text", text: lines }] };
+}
+//# sourceMappingURL=get_mahadata.js.map

package/dist/tools/get_mahadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_mahadata.js","sourceRoot":"","sources":["../../src/tools/get_mahadata.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAGvC;IACC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,oBAAoB;KAClD,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACpE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,QAAmC,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,CAAC,eAAsD,CAAC;IACvE,MAAM,MAAM,GAAG,CAAC,CAAC,aAAoD,CAAC;IACtE,MAAM,IAAI,GAAG,CAAC,CAAC,UAAiD,CAAC;IACjE,MAAM,QAAQ,GAAI,CAAC,CAAC,QAAsB,IAAI,EAAE,CAAC;IACjD,MAAM,WAAW,GAAI,CAAC,CAAC,YAA0B,IAAI,EAAE,CAAC;IAExD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yCAAyC,EAAE,CAAC;YAC5E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAI,KAAK,CAAC,gBAAqD,IAAI,EAAE,CAAC;IAC/E,MAAM,EAAE,GAAI,KAAK,CAAC,iBAA8D,IAAI,EAAE,CAAC;IACvF,MAAM,EAAE,GAAI,KAAK,CAAC,wBAAsF,IAAI,EAAE,CAAC;IAC/G,MAAM,WAAW,GAAI,KAAK,CAAC,WAAwB,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,CAAE,MAAM,EAAE,QAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAE,MAAM,EAAE,QAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAEhE,yBAAyB;IACzB,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;QAC1D,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,OAAO,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;QAC1D,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,OAAO,GAAG,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,oBAAoB,OAAO,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,KAAK,GAAG;QACZ,iBAAiB;QACjB,QAAQ,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,WAAW,IAAI,EAAE,gBAAgB,IAAI,GAAG,YAAY,IAAI,EAAE,WAAW,IAAI,GAAG,UAAU,IAAI,EAAE,SAAS,IAAI,GAAG,EAAE;QAC7I,aAAa,KAAK,CAAC,SAAS,EAAE;QAC9B,WAAW,KAAK,CAAC,kBAAkB,EAAE;QACrC,EAAE;QACF,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QAC3D,EAAE;QACF,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC3C,gBAAgB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrC,EAAE;QACF,eAAe;QACf,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3F,EAAE;QACF,gBAAgB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACrD,gBAAgB,MAAM,CAAC,MAAM,EAAE,kBAAkB,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,YAAY,IAAI,EAAE,eAAe,QAAQ,aAAa,QAAQ,EAAE;QAChJ,EAAE;QACF,mEAAmE;KACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "openkrak-mcp",
+  "version": "1.0.0",
+  "description": "OpenKrak MCP Server — AI coding intelligence via Dorchester engine",
+  "type": "module",
+  "bin": {
+    "openkrak-mcp": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "dorchester": "file:../engine-dorchester"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.0.0"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}

package/src/index.ts

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+// openkrak-mcp/src/index.ts
+// OpenKrak MCP Server — Entry Point
+
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} from "@modelcontextprotocol/sdk/types.js";
+
+import { handleAnalyzeRepo } from "./tools/analyze_repo.js";
+import { handleGetHotspots } from "./tools/get_hotspots.js";
+import { handleBlastRadius } from "./tools/blast_radius.js";
+import { handleGetMahadata } from "./tools/get_mahadata.js";
+import { checkLicense } from "./license/check.js";
+
+const server = new Server(
+  { name: "openkrak", version: "1.0.0" },
+  { capabilities: { tools: {} } }
+);
+
+// ── Tool Registry ────────────────────────────────────────
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+  tools: [
+    {
+      name: "analyze_repo",
+      description: [
+        "ALWAYS call this FIRST before any coding task on a repository. DO NOT read any source files before calling this.",
+        "Runs the full Dorchester static analysis pipeline and returns a structured Mahadata brief: dependency graph, hotspots, blast radius, circular dependencies, entry points, and threat matrix.",
+        "After receiving the result, answer directly from the Mahadata. DO NOT read additional source files unless the user asks for specific line-level detail.",
+        "Call with the objective param set to what the user wants to do — this focuses the brief.",
+      ].join(" "),
+      inputSchema: {
+        type: "object",
+        properties: {
+          path: { type: "string", description: "Absolute path to the repository root" },
+          objective: { type: "string", description: "What the user intends to do — e.g. 'refactor auth module', 'add new feature X'" },
+        },
+        required: ["path"],
+      },
+    },
+    {
+      name: "get_mahadata",
+      description: [
+        "Returns the compact 500-token Mahadata intelligence brief for a repository.",
+        "Use this instead of reading source files when you need repo-wide context: structure, hotspots, entry points, constraints, threat score.",
+        "After receiving the brief, answer the user directly. DO NOT follow up with file reads — the brief contains pre-computed intelligence. Only read a specific file if the user asks for exact line-level content.",
+      ].join(" "),
+      inputSchema: {
+        type: "object",
+        properties: {
+          path: { type: "string", description: "Absolute path to the repository root" },
+          objective: { type: "string", description: "What the user intends to do" },
+        },
+        required: ["path"],
+      },
+    },
+    {
+      name: "get_hotspots",
+      description: [
+        "Returns ranked list of high-risk files: complexity score, coupling, change frequency, risk level.",
+        "Use this when the user asks which files are most dangerous to touch, or to prioritize review scope.",
+        "DO NOT read source files after this — the hotspot data is pre-computed.",
+      ].join(" "),
+      inputSchema: {
+        type: "object",
+        properties: {
+          path: { type: "string", description: "Absolute path to the repository root" },
+        },
+        required: ["path"],
+      },
+    },
+    {
+      name: "blast_radius",
+      description: [
+        "Maps the ripple effect of modifying a specific file: which files, modules, services, and APIs will be affected.",
+        "Use this before making any change to understand the impact. Call with the exact file the user wants to modify.",
+        "DO NOT read source files to determine impact — this tool gives you the pre-computed dependency chain.",
+      ].join(" "),
+      inputSchema: {
+        type: "object",
+        properties: {
+          path: { type: "string", description: "Absolute path to the repository root" },
+          file: { type: "string", description: "Relative path to the file being changed (e.g. 'src/auth/index.ts')" },
+        },
+        required: ["path", "file"],
+      },
+    },
+  ],
+}));
+
+// ── Tool Dispatch ────────────────────────────────────────
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const { name, arguments: args } = request.params;
+
+  // License gate — runs before every tool call
+  const license = await checkLicense();
+  if (!license.allowed) {
+    return {
+      content: [{ type: "text", text: `OpenKrak: ${license.reason}` }],
+      isError: true,
+    };
+  }
+
+  try {
+    switch (name) {
+      case "analyze_repo":
+        return await handleAnalyzeRepo(args as { path: string; objective?: string });
+      case "get_hotspots":
+        return await handleGetHotspots(args as { path: string });
+      case "blast_radius":
+        return await handleBlastRadius(args as { path: string; file: string });
+      case "get_mahadata":
+        return await handleGetMahadata(args as { path: string; objective?: string });
+      default:
+        return {
+          content: [{ type: "text", text: `Unknown tool: ${name}` }],
+          isError: true,
+        };
+    }
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+      content: [{ type: "text", text: `OpenKrak error: ${message}` }],
+      isError: true,
+    };
+  }
+});
+
+// ── Start ────────────────────────────────────────────────
+const transport = new StdioServerTransport();
+await server.connect(transport);

package/src/license/check.ts

@@ -0,0 +1,72 @@
+// openkrak-mcp/src/license/check.ts
+// License gate — Free tier (CF Worker) or Pro (key validation)
+
+const WORKER_URL = "https://openkrak-license-server.openkrak.workers.dev";
+const PRO_KEY = process.env.OPENKRAK_KEY;
+
+// Machine fingerprint: hostname + username (matches CF KV key pattern)
+import { createHash } from "node:crypto";
+import { hostname, userInfo } from "node:os";
+
+function getFingerprint(): string {
+  const raw = `${hostname()}:${userInfo().username}`;
+  return createHash("sha256").update(raw).digest("hex").slice(0, 32);
+}
+
+export interface LicenseResult {
+  allowed: boolean;
+  tier: "pro" | "free" | "blocked";
+  reason?: string;
+  remaining?: number;
+}
+
+export async function checkLicense(): Promise<LicenseResult> {
+  // Pro key path
+  if (PRO_KEY) {
+    try {
+      const res = await fetch(`${WORKER_URL}/v3/validate`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ key: PRO_KEY }),
+      });
+      const data = (await res.json()) as { valid?: boolean; reason?: string };
+      if (data.valid) {
+        return { allowed: true, tier: "pro" };
+      }
+      return {
+        allowed: false,
+        tier: "blocked",
+        reason: `Pro key invalid: ${data.reason ?? "unknown"}. Get a key at openkrak.dev`,
+      };
+    } catch {
+      // Network error — fail open for pro (offline grace)
+      return { allowed: true, tier: "pro" };
+    }
+  }
+
+  // Free tier path
+  const fp = getFingerprint();
+  try {
+    const res = await fetch(`${WORKER_URL}/v3/free-query`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ fingerprint: fp }),
+    });
+    const data = (await res.json()) as {
+      allowed?: boolean;
+      remaining?: number;
+      reason?: string;
+    };
+    if (data.allowed) {
+      return { allowed: true, tier: "free", remaining: data.remaining };
+    }
+    return {
+      allowed: false,
+      tier: "blocked",
+      reason: `Free tier limit reached (15 calls/24h). Upgrade at openkrak.dev — $8/month for unlimited.`,
+    };
+  } catch {
+    // CF Worker unreachable — fail open (don't block users on network issues)
+    return { allowed: true, tier: "free" };
+  }
+}

package/src/tools/analyze_repo.ts

@@ -0,0 +1,53 @@
+// openkrak-mcp/src/tools/analyze_repo.ts
+import { runPipeline } from "dorchester";
+
+export async function handleAnalyzeRepo(args: {
+  path: string;
+  objective?: string;
+}) {
+  const result = await runPipeline({
+    repoPath: args.path,
+    objective: args.objective ?? "Analyze repository",
+  });
+
+  if (result.status === "failed") {
+    return {
+      content: [{ type: "text", text: `Analysis failed: ${result.error}` }],
+      isError: true,
+    };
+  }
+
+  const mahadata = result.mahadata as Record<string, unknown>;
+  const meta = mahadata.meta as Record<string, unknown> | undefined;
+  const repo = mahadata.repository as Record<string, unknown> | undefined;
+  const hotspots = mahadata.hotspots as unknown[] | undefined;
+  const findings = mahadata.findings as unknown[] | undefined;
+  const brief = mahadata.execution_brief as Record<string, unknown> | undefined;
+
+  const summary = [
+    `# OpenKrak Analysis — ${repo?.name ?? args.path}`,
+    `Status: ${result.status} (${result.durationMs}ms)`,
+    `Files: ${repo?.total_files ?? "?"} | LOC: ${repo?.total_loc ?? "?"}`,
+    `Language: ${repo?.primary_language ?? "?"} | Framework: ${repo?.framework ?? "none"}`,
+    ``,
+    `## Hotspots (${hotspots?.length ?? 0} files)`,
+    ...(hotspots?.slice(0, 5).map((h: unknown) => {
+      const hs = h as Record<string, unknown>;
+      return `- ${hs.path} [${hs.risk_level}] score: ${Number(hs.score).toFixed(2)}`;
+    }) ?? []),
+    ``,
+    `## Findings (${findings?.length ?? 0} total)`,
+    ``,
+    `## Execution Brief`,
+    brief?.objective ? `Objective: ${brief.objective}` : "",
+    brief?.repository_summary ? `Summary: ${brief.repository_summary}` : "",
+    ``,
+    `Scan ID: ${(meta?.scan_id as string) ?? "?"}`,
+  ]
+    .filter(Boolean)
+    .join("\n");
+
+  return {
+    content: [{ type: "text", text: summary }],
+  };
+}

package/src/tools/blast_radius.ts

@@ -0,0 +1,66 @@
+// openkrak-mcp/src/tools/blast_radius.ts
+import { runPipeline } from "dorchester";
+
+export async function handleBlastRadius(args: { path: string; file: string }) {
+  const result = await runPipeline({
+    repoPath: args.path,
+    objective: `Blast radius for ${args.file}`,
+  });
+
+  if (result.status === "failed") {
+    return {
+      content: [{ type: "text", text: `Analysis failed: ${result.error}` }],
+      isError: true,
+    };
+  }
+
+  const mahadata = result.mahadata as Record<string, unknown>;
+  const blastRadiusAll = (mahadata.blast_radius as unknown[]) ?? [];
+
+  const entry = blastRadiusAll.find((b: unknown) => {
+    const br = b as Record<string, unknown>;
+    return (
+      br.trigger_file === args.file ||
+      (br.trigger_file as string)?.endsWith(args.file)
+    );
+  }) as Record<string, unknown> | undefined;
+
+  if (!entry) {
+    const lines = [
+      `# Blast Radius — file not matched: ${args.file}`,
+      `Available trigger files: ${blastRadiusAll.length}`,
+      ...blastRadiusAll.slice(0, 10).map((b: unknown) => {
+        const br = b as Record<string, unknown>;
+        return `- ${br.trigger_file} (risk: ${Number(br.risk_score).toFixed(2)}, affects ${br.total_affected_files} files)`;
+      }),
+    ].join("\n");
+    return { content: [{ type: "text", text: lines }] };
+  }
+
+  const impact = entry.impact as Record<string, unknown[]>;
+  const lines = [
+    `# Blast Radius — ${entry.trigger_file}`,
+    `Risk Score: ${Number(entry.risk_score).toFixed(3)}`,
+    `Affected Files: ${entry.total_affected_files} | Modules: ${entry.total_affected_modules}`,
+    ``,
+    `## Affected Files (top 10)`,
+    ...(impact.files ?? []).slice(0, 10).map((f: unknown) => {
+      const fi = f as Record<string, unknown>;
+      return `- [${fi.impact_type}] ${fi.path} (depth: ${fi.depth}, confidence: ${Number(fi.confidence).toFixed(2)})`;
+    }),
+    ``,
+    `## Affected Modules`,
+    ...(impact.modules ?? []).map((m: unknown) => {
+      const mi = m as Record<string, unknown>;
+      return `- ${mi.name}: ${mi.impact_level}`;
+    }),
+    ``,
+    `## APIs at Risk`,
+    ...(impact.apis ?? []).map((a: unknown) => {
+      const ai = a as Record<string, unknown>;
+      return `- ${ai.endpoint}: ${ai.impact_level}`;
+    }),
+  ].join("\n");
+
+  return { content: [{ type: "text", text: lines }] };
+}

package/src/tools/get_hotspots.ts

@@ -0,0 +1,41 @@
+// openkrak-mcp/src/tools/get_hotspots.ts
+import { runPipeline } from "dorchester";
+
+export async function handleGetHotspots(args: { path: string }) {
+  const result = await runPipeline({
+    repoPath: args.path,
+    objective: "Identify hotspots",
+  });
+
+  if (result.status === "failed") {
+    return {
+      content: [{ type: "text", text: `Analysis failed: ${result.error}` }],
+      isError: true,
+    };
+  }
+
+  const mahadata = result.mahadata as Record<string, unknown>;
+  const hotspots = (mahadata.hotspots as unknown[]) ?? [];
+
+  if (hotspots.length === 0) {
+    return {
+      content: [{ type: "text", text: "No hotspots detected." }],
+    };
+  }
+
+  const lines = [
+    `# Hotspots — ${hotspots.length} files ranked by risk`,
+    "",
+    ...hotspots.map((h: unknown, i: number) => {
+      const hs = h as Record<string, unknown>;
+      const reasons = (hs.reasons as { type: string; detail: string }[]) ?? [];
+      return [
+        `## ${i + 1}. ${hs.path}`,
+        `Risk: ${hs.risk_level} | Score: ${Number(hs.score).toFixed(3)} | Changes: ${hs.change_frequency}`,
+        `Reasons: ${reasons.map((r) => r.type).join(", ")}`,
+      ].join("\n");
+    }),
+  ].join("\n");
+
+  return { content: [{ type: "text", text: lines }] };
+}

package/src/tools/get_mahadata.ts

@@ -0,0 +1,75 @@
+// openkrak-mcp/src/tools/get_mahadata.ts
+import { runPipeline } from "dorchester";
+
+export async function handleGetMahadata(args: {
+  path: string;
+  objective?: string;
+}) {
+  const result = await runPipeline({
+    repoPath: args.path,
+    objective: args.objective ?? "Analyze repository",
+  });
+
+  if (result.status === "failed") {
+    return {
+      content: [{ type: "text", text: `OpenKrak error: ${result.error}` }],
+      isError: true,
+    };
+  }
+
+  const m = result.mahadata as Record<string, unknown>;
+  const brief = m.execution_brief as Record<string, unknown> | undefined;
+  const threat = m.threat_matrix as Record<string, unknown> | undefined;
+  const repo = m.repository as Record<string, unknown> | undefined;
+  const hotspots = (m.hotspots as unknown[]) ?? [];
+  const blastRadius = (m.blast_radius as unknown[]) ?? [];
+
+  if (!brief) {
+    return {
+      content: [{ type: "text", text: "OpenKrak: no execution_brief generated." }],
+      isError: true,
+    };
+  }
+
+  const ctx = (brief.critical_context as { key: string; value: string }[]) ?? [];
+  const ph = (brief.priority_hotspots as { path: string; why_relevant: string }[]) ?? [];
+  const ep = (brief.recommended_entry_points as { path: string; symbol: string | null; reason: string }[]) ?? [];
+  const constraints = (brief.constraints as string[]) ?? [];
+  const blockers = ((threat?.blockers as unknown[]) ?? []).length;
+  const warnings = ((threat?.warnings as unknown[]) ?? []).length;
+
+  // Top 3 hotspots compact
+  const topHotspots = hotspots.slice(0, 3).map((h: unknown) => {
+    const hs = h as Record<string, unknown>;
+    return `${hs.path}[${hs.risk_level},${Number(hs.score).toFixed(2)}]`;
+  });
+
+  // Top 3 blast radius compact
+  const topBlast = blastRadius.slice(0, 3).map((b: unknown) => {
+    const br = b as Record<string, unknown>;
+    return `${br.trigger_file}→${br.total_affected_files}files`;
+  });
+
+  // Compact ~500-token Mahadata brief
+  const lines = [
+    `[MAHADATA v2.1]`,
+    `repo:${repo?.name ?? args.path} | lang:${repo?.primary_language ?? "?"} | files:${repo?.total_files ?? "?"} | loc:${repo?.total_loc ?? "?"}`,
+    `objective:${brief.objective}`,
+    `summary:${brief.repository_summary}`,
+    ``,
+    `CTX: ${ctx.map((c) => `${c.key}=${c.value}`).join(" | ")}`,
+    ``,
+    `HOTSPOTS(top3): ${topHotspots.join(", ")}`,
+    `BLAST(top3): ${topBlast.join(", ")}`,
+    ``,
+    `ENTRY_POINTS:`,
+    ...ep.slice(0, 3).map((e) => `  ${e.path}${e.symbol ? `::${e.symbol}` : ""} — ${e.reason}`),
+    ``,
+    `CONSTRAINTS: ${constraints.slice(0, 3).join(" | ")}`,
+    `THREAT: risk=${Number(threat?.overall_risk_score ?? 0).toFixed(2)} | ${threat?.risk_summary ?? ""} | blockers:${blockers} warnings:${warnings}`,
+    ``,
+    `[END MAHADATA — use analyze_repo or blast_radius for full detail]`,
+  ].join("\n");
+
+  return { content: [{ type: "text", text: lines }] };
+}

package/tsconfig.json

@@ -0,0 +1,17 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist"]
+}