openkrak-mcp 1.0.10 → 1.0.12

package/README.md

@@ -1,26 +1,14 @@
 # openkrak-mcp
 
-**AI coding intelligence for any coding agent — delivered as an MCP server.**
+MCP server for developer tooling. Performs static analysis on a software repository via the Dorchester engine and delivers a structured context brief to the language model before any file is accessed.
 
-OpenKrak pre-computes your repository's structure and delivers a structured intelligence brief (Mahadata) before your LLM runs. Less hallucination, lower token cost, faster answers.
-
----
-
-## The Problem
-
-Every time you ask your coding agent to modify code, the LLM starts blind — reading raw files, burning tokens, guessing dependencies.
-
-**Without OpenKrak:** LLM reads 50,000+ tokens of raw files. Slow. Expensive. Blind.  
-**With OpenKrak:** LLM reads a pre-computed Mahadata brief. Precise. Cheap. Aware.
-
-For simple tasks, OpenKrak replaces 50+ file reads with a single tool call.  
-For complex refactors, it cuts token usage 20-30% and eliminates blind exploration — the LLM knows exactly which files matter before it reads a single line.
+**Supported:** OpenCode (TUI + Desktop). Claude Code, Codex, and Cursor support in development.
 
 ---
 
 ## How It Works
 
-OpenKrak runs the **Dorchester engine** — a 6-step static analysis pipeline:
+OpenKrak runs the **Dorchester engine** — a six-step static analysis pipeline — on your repository before the language model executes any task.
 
 ```
 Repository
@@ -41,21 +29,10 @@ Blast Radius        — Ripple effects of any change mapped before commit
 Execution Gate      — Analysis validated and normalized
     │
     ▼
-Mahadata            — Structured intelligence brief delivered to your coding agent
+Mahadata            — Structured brief delivered to the language model
 ```
 
-Your codebase never leaves your machine. All analysis runs locally.
-
----
-
-## Supported Agents
-
-| Agent | Status |
-|-------|--------|
-| **OpenCode** | ✅ Supported |
-| Claude Code | 🔜 Coming soon |
-| Codex | 🔜 Coming soon |
-| Cursor | 🔜 Coming soon |
+All analysis runs locally. Your codebase does not leave your machine.
 
 ---
 
@@ -65,13 +42,25 @@ Your codebase never leaves your machine. All analysis runs locally.
 npm install -g openkrak-mcp
 ```
 
+Requires Node.js ≥ 18.
+
 ---
 
-## Setup — OpenCode
+## Setup
+
+OpenKrak works with both **OpenCode TUI** and **OpenCode Desktop**. The config file and setup steps are identical for both.
+
+### Config file location
+
+| Platform | Path |
+|----------|------|
+| Windows | `C:\Users\<username>\.config\opencode\opencode.jsonc` |
+| macOS | `~/.config/opencode/opencode.jsonc` |
+| Linux | `~/.config/opencode/opencode.jsonc` |
 
-### Step 1 — Edit config
+### Step 1 — Add OpenKrak to your config
 
-Open `~/.config/opencode/opencode.jsonc` and add the `mcp` block:
+Open the config file and add the `mcp` block:
 
 ```jsonc
 {
@@ -80,91 +69,76 @@ Open `~/.config/opencode/opencode.jsonc` and add the `mcp` block:
     "openkrak": {
       "type": "local",
       "enabled": true,
-      "command": ["openkrak-mcp"]
+      "command": ["npx", "openkrak-mcp"]
     }
   }
 }
 ```
 
-> **Windows path:** `C:\Users\<username>\.config\opencode\opencode.jsonc`  
-> **Mac/Linux path:** `~/.config/opencode/opencode.jsonc`
-
 ### Step 2 — Restart OpenCode
 
-Close and reopen OpenCode. You should see **openkrak Connected** in the top-right MCP panel.
+Close and reopen OpenCode (TUI or Desktop). Confirm **openkrak Connected** appears in the MCP panel.
 
-### Step 3 — Use it
+> **OpenCode Desktop:** MCP status is shown in the bottom status bar. Green dot = connected.  
+> **OpenCode TUI:** MCP status is shown in the top-right panel.
 
-Just open a repo and ask your agent anything. OpenKrak automatically runs before the LLM touches your files.
+### Step 3 — Run your first analysis
 
-Or call it explicitly:
+Open any repository in OpenCode and send a message:
 
 ```
-Use analyze_repo on /path/to/your/repo with objective "refactor the auth module"
+analyze_repo on /absolute/path/to/your/repo
 ```
 
+Or just start a coding task normally — OpenKrak runs automatically before the model reads any file.
+
 ---
 
-## Turning OpenKrak On / Off
+## Tools
 
-Change `"enabled"` in your config:
+| Tool | When to use |
+|------|-------------|
+| `analyze_repo` | Full pipeline. Call before any coding task on a new repo. Returns dependency graph, hotspot rankings, blast radius, and threat matrix. |
+| `get_mahadata` | Compact repo brief — structure, entry points, constraints, risk score. Use when you need repo-wide context without a full re-analysis. |
+| `get_hotspots` | Ranked list of high-risk files by complexity, coupling, and change frequency. Use before reviewing or refactoring. |
+| `blast_radius` | Impact map for a specific file. Which files, modules, and APIs are affected by a change. Use before modifying a critical file. |
 
-```jsonc
-// ON
-"enabled": true
+### Example prompts
 
-// OFF
-"enabled": false
 ```
-
-Then restart OpenCode. That's it.
-
-**Quick toggle scripts (optional):**
-
-Save these two files anywhere on your machine.
-
-`mcp-on.ps1` (Windows PowerShell):
-```powershell
-$config = Get-Content "$env:USERPROFILE\.config\opencode\opencode.jsonc" | ConvertFrom-Json -AsHashtable
-$config.mcp.openkrak.enabled = $true
-$config | ConvertTo-Json -Depth 10 | Set-Content "$env:USERPROFILE\.config\opencode\opencode.jsonc"
-Write-Host "OpenKrak: ON"
+analyze_repo on /path/to/repo with objective "refactor the auth module"
 ```
-
-`mcp-off.ps1` (Windows PowerShell):
-```powershell
-$config = Get-Content "$env:USERPROFILE\.config\opencode\opencode.jsonc" | ConvertFrom-Json -AsHashtable
-$config.mcp.openkrak.enabled = $false
-$config | ConvertTo-Json -Depth 10 | Set-Content "$env:USERPROFILE\.config\opencode\opencode.jsonc"
-Write-Host "OpenKrak: OFF"
 ```
-
-Run with:
-```powershell
-powershell -File mcp-on.ps1
-powershell -File mcp-off.ps1
+Run get_hotspots on /path/to/repo — which files should I avoid touching?
+```
+```
+blast_radius on /path/to/repo for file src/api/routes/user.ts
 ```
 
 ---
 
-## Tools
+## Enable / Disable
 
-Once connected, your coding agent has access to 4 tools:
+Set `"enabled"` in your config and restart OpenCode:
 
-| Tool | When to use |
-|------|-------------|
-| `analyze_repo` | Before any coding task — runs full Dorchester pipeline, returns dependency graph, hotspots, blast radius, threat matrix |
-| `get_mahadata` | Quick 500-token intelligence brief — repo structure, entry points, constraints, risk score |
-| `get_hotspots` | Which files are most dangerous to touch — ranked by complexity, coupling, change frequency |
-| `blast_radius` | Ripple effect of modifying a specific file — which files, modules, APIs will be affected |
+```jsonc
+"enabled": true   // on
+"enabled": false  // off
+```
 
 ---
 
-## Pro License (optional)
+## Pro License
 
-Free tier gives you **15 calls per 24 hours** — no account needed.
+Free tier is active by default — no account required.
 
-For unlimited calls, get a Pro key at **[openkrak.dev](https://openkrak.dev)**:
+| Plan | Price | Queries |
+|------|-------|---------|
+| Free | $0 | 15 per 24-hour rolling window |
+| Pro Monthly | $8 / month | Unlimited |
+| Pro Annual | $67.20 / year | Unlimited |
+
+To activate Pro, add your key to the config:
 
 ```jsonc
 {
@@ -173,7 +147,7 @@ For unlimited calls, get a Pro key at **[openkrak.dev](https://openkrak.dev)**:
     "openkrak": {
       "type": "local",
       "enabled": true,
-      "command": ["openkrak-mcp"],
+      "command": ["npx", "openkrak-mcp"],
       "env": {
         "OPENKRAK_KEY": "your-license-key"
       }
@@ -182,32 +156,22 @@ For unlimited calls, get a Pro key at **[openkrak.dev](https://openkrak.dev)**:
 }
 ```
 
-| Plan | Price | Limit |
-|------|-------|-------|
-| Free | $0 | 15 calls / 24h rolling |
-| Pro Monthly | $8/month | Unlimited |
-| Pro Annual | $67.20/year | Unlimited |
+License keys: [openkrak-web.vercel.app](https://openkrak-web.vercel.app). Delivered via email after purchase. No subscription, no auto-renewal.
 
 ---
 
-## Privacy
+## Notes
 
-- Your codebase **never leaves your machine**
-- Analysis runs 100% locally via the Dorchester engine
-- Only license validation calls hit the network (to verify your key)
-- No telemetry, no file uploads
+- Static analysis only. No AI inference in the pipeline.
+- Anonymous usage telemetry is collected (query count, tool name, error events). No source code or file contents are transmitted.
+- License validation requires a network call to the license server on each tool invocation.
 
 ---
 
-## Tech
+## Repository
 
-- **Protocol:** MCP (Model Context Protocol) — open standard by Anthropic
-- **Analysis:** Static, deterministic — not AI/probabilistic
-- **Runtime:** Node.js ≥ 18
-- **License:** MIT
+[github.com/FrnzJulianBergmann/openkrak](https://github.com/FrnzJulianBergmann/openkrak)
 
 ---
 
-## License
-
-MIT — © 2026 Faiz Hamizan
+MIT License — © 2026 Faiz Hamizan / Challanger Absolute Advance

package/dist/index.js

@@ -241794,7 +241794,7 @@ function inferLanguage(filePath) {
   if (filePath.endsWith(".js") || filePath.endsWith(".jsx")) return "javascript";
   return "unknown";
 }
-function extractRawEdges(filePath, ast, fileNodeId) {
+function extractRawEdges(filePath, ast, fileNodeId, tsconfigPaths2) {
   const edges = [];
   const symbolRanges = [];
   (0, import_typescript_estree3.simpleTraverse)(ast, {
@@ -241845,8 +241845,7 @@ function extractRawEdges(filePath, ast, fileNodeId) {
       if (node.type === "ImportDeclaration") {
         const importPath = node.source.value;
         const line = node.loc?.start.line ?? null;
-        const isBarrel = isBarrelPath(importPath);
-        const resolvedTarget = resolveImportTarget(filePath, importPath);
+        const resolvedTarget = resolveImportTarget(filePath, importPath, tsconfigPaths2);
         edges.push({
           from: importFromNodeId,
           to: resolvedTarget,
@@ -241875,7 +241874,7 @@ function extractRawEdges(filePath, ast, fileNodeId) {
         const sourceLiteral = node.source.type === "Literal" ? node.source.value : "<dynamic>";
         edges.push({
           from: fileNodeId,
-          to: resolveImportTarget(filePath, sourceLiteral),
+          to: resolveImportTarget(filePath, sourceLiteral, tsconfigPaths2),
           kind: "dynamic_import",
           file: filePath,
           line,
@@ -241889,7 +241888,6 @@ function extractRawEdges(filePath, ast, fileNodeId) {
         edges.push({
           from: fileNodeId,
           to: superName,
-          // resolved to node_id in assembly
           kind: "extend",
           file: filePath,
           line: node.loc.start.line,
@@ -241954,7 +241952,7 @@ function extractRawEdges(filePath, ast, fileNodeId) {
   });
   return edges;
 }
-function extractBarrelReExports(filePath, ast) {
+function extractBarrelReExports(filePath, ast, tsconfigPaths2) {
   const reExports = [];
   (0, import_typescript_estree3.simpleTraverse)(ast, {
     enter(node) {
@@ -241962,7 +241960,7 @@ function extractBarrelReExports(filePath, ast) {
         if (!node.source) return;
         const sourcePath = node.source.value;
         if (!sourcePath.startsWith(".")) return;
-        const resolvedSource = resolveImportTarget(filePath, sourcePath);
+        const resolvedSource = resolveImportTarget(filePath, sourcePath, tsconfigPaths2);
         if (node.type === "ExportAllDeclaration") {
           reExports.push({
             barrelFile: filePath,
@@ -241985,7 +241983,7 @@ function extractBarrelReExports(filePath, ast) {
   });
   return reExports;
 }
-function resolveImportTarget(fromFile, importPath) {
+function resolveImportTarget(fromFile, importPath, tsconfigPaths2) {
   if (importPath.startsWith(".")) {
     const dir = import_path3.default.dirname(fromFile);
     const resolved = import_path3.default.join(dir, importPath).replace(/\\/g, "/");
@@ -241995,11 +241993,29 @@ function resolveImportTarget(fromFile, importPath) {
     }
     return normalized;
   }
+  if (tsconfigPaths2) {
+    for (const [prefix, target] of Object.entries(tsconfigPaths2)) {
+      if (importPath.startsWith(prefix)) {
+        const rest = importPath.slice(prefix.length);
+        const resolved = (target + rest).replace(/\\/g, "/");
+        const normalized = resolved.replace(/\.js$/, ".ts");
+        if (!import_path3.default.extname(normalized)) {
+          return normalized + ".ts";
+        }
+        return normalized;
+      }
+    }
+  }
+  if (importPath.startsWith("@/")) {
+    const stripped = importPath.slice(2);
+    const normalized = stripped.replace(/\.js$/, ".ts");
+    if (!import_path3.default.extname(normalized)) {
+      return normalized + ".ts";
+    }
+    return normalized;
+  }
   return importPath;
 }
-function isBarrelPath(importPath) {
-  return importPath.endsWith("/index") || importPath.endsWith("/index.ts") || importPath.endsWith("/index.js") || importPath === "index";
-}
 function assembleGraph(allNodes, rawEdges, barrelReExports = []) {
   for (const node of allNodes) {
     node.id = node.id.replace(/\\/g, "/");
@@ -242511,7 +242527,14 @@ function inferModule(filePath) {
   return parts.length >= 2 ? parts[0] : null;
 }
 function isEntryPoint(filePath) {
-  return /\/(index|main|app|server|cli)\.(ts|js)x?$/.test(filePath);
+  const normalized = filePath.replace(/\\/g, "/");
+  if (/\/(index|main|server|cli)\.(ts|js)x?$/.test(normalized)) return true;
+  if (/^app\/.*page\.(ts|js)x?$/.test(normalized)) return true;
+  if (/^app\/layout\.(ts|js)x?$/.test(normalized)) return true;
+  if (/^app\/.*route\.(ts|js)x?$/.test(normalized)) return true;
+  if (/^pages\//.test(normalized) && /\.(ts|js)x?$/.test(normalized)) return true;
+  if (/^src\/(main|index|App)\.(ts|js)x?$/.test(normalized)) return true;
+  return false;
 }
 function walkAst(node, onEnter, onLeave) {
   if (!node || typeof node !== "object" || !("type" in node)) return;
@@ -242622,9 +242645,9 @@ async function runDeepStrike(store, opts) {
     for (const s of symbols) s.content_hash = currentHash;
     allNodes.push(...symbols);
     const fileNodeId = symbols.find((n) => n.kind === "file")?.id ?? `${relPath}::file::0`;
-    const rawEdges = extractRawEdges(relPath, ast, fileNodeId);
+    const rawEdges = extractRawEdges(relPath, ast, fileNodeId, tsconfigPaths);
     allRawEdges.push(...rawEdges);
-    const barrelReExports = extractBarrelReExports(relPath, ast);
+    const barrelReExports = extractBarrelReExports(relPath, ast, tsconfigPaths);
     allBarrelReExports.push(...barrelReExports);
     const secFindings = detectSecurityPatterns(relPath, content);
     allFindings.push(...secFindings);

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "openkrak-mcp",
-  "version": "1.0.10",
+  "version": "1.0.12",
   "description": "OpenKrak MCP Server - AI coding intelligence via Dorchester engine",
+  "mcpName": "io.github.FrnzJulianBergmann/openkrak",
   "type": "commonjs",
   "bin": {
     "openkrak-mcp": "dist/index.js"
@@ -9,7 +10,8 @@
   "main": "./dist/index.js",
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "server.json"
   ],
   "scripts": {
     "build": "tsup",

package/server.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.FrnzJulianBergmann/openkrak",
+  "title": "OpenKrak",
+  "description": "MCP server that performs static analysis on a repository via the Dorchester engine — dependency graph construction, complexity scoring, blast radius mapping — and delivers a structured context brief to the language model before any file is read.",
+  "version": "1.0.10",
+  "repository": {
+    "url": "https://github.com/FrnzJulianBergmann/openkrak",
+    "source": "github"
+  },
+  "websiteUrl": "https://openkrak-web.vercel.app",
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "openkrak-mcp",
+      "version": "1.0.10",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}