openkrak-mcp 1.0.18 → 1.0.19

package/dist/index.js

@@ -242516,7 +242516,7 @@ function detectSecurityPatterns(filePath, content) {
 }
 async function classifyTopology(repoRoot, allFiles) {
   const type = await detectProjectType(repoRoot);
-  const framework = await detectFramework(repoRoot);
+  const framework = await detectFramework(repoRoot, allFiles);
   const entryPoints = detectEntryPoints(allFiles);
   const layers = detectLayers(allFiles);
   const modules = detectModules(allFiles);
@@ -242539,9 +242539,8 @@ async function detectProjectType(repoRoot) {
   }
   return "monolith";
 }
-async function detectFramework(repoRoot) {
+async function readFrameworkFromPkg(pkgPath) {
   try {
-    const pkgPath = import_path4.default.join(repoRoot, "package.json");
     const pkg = JSON.parse(await import_promises3.default.readFile(pkgPath, "utf-8"));
     const deps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (deps["next"]) return `next@${deps["next"].replace(/[\^~]/g, "")}`;
@@ -242558,30 +242557,68 @@ async function detectFramework(repoRoot) {
     if (deps["@angular/core"]) return "angular";
   } catch {
   }
-  try {
-    await import_promises3.default.access(import_path4.default.join(repoRoot, "next.config.js"));
-    return "next";
-  } catch {
-  }
-  try {
-    await import_promises3.default.access(import_path4.default.join(repoRoot, "next.config.mjs"));
-    return "next";
-  } catch {
+  return null;
+}
+async function findSubPackageRoots(repoRoot, allFiles) {
+  const candidates = /* @__PURE__ */ new Set();
+  for (const f of allFiles) {
+    const parts = f.split("/");
+    if (parts.length >= 1) candidates.add(parts[0]);
+    if (parts.length >= 2) candidates.add(`${parts[0]}/${parts[1]}`);
   }
-  try {
-    await import_promises3.default.access(import_path4.default.join(repoRoot, "next.config.ts"));
-    return "next";
-  } catch {
+  const roots = [];
+  for (const candidate of candidates) {
+    const pkgPath = import_path4.default.join(repoRoot, candidate, "package.json");
+    try {
+      await import_promises3.default.access(pkgPath);
+      roots.push(candidate);
+    } catch {
+    }
   }
-  try {
-    await import_promises3.default.access(import_path4.default.join(repoRoot, "vite.config.ts"));
-    return "vite";
-  } catch {
+  return roots;
+}
+async function detectFramework(repoRoot, allFiles) {
+  const rootFramework = await readFrameworkFromPkg(import_path4.default.join(repoRoot, "package.json"));
+  if (rootFramework) return rootFramework;
+  const configChecks = [
+    ["next.config.js", "next"],
+    ["next.config.mjs", "next"],
+    ["next.config.ts", "next"],
+    ["vite.config.ts", "vite"],
+    ["astro.config.mjs", "astro"]
+  ];
+  for (const [cfg, name] of configChecks) {
+    try {
+      await import_promises3.default.access(import_path4.default.join(repoRoot, cfg));
+      return name;
+    } catch {
+    }
   }
-  try {
-    await import_promises3.default.access(import_path4.default.join(repoRoot, "astro.config.mjs"));
-    return "astro";
-  } catch {
+  if (allFiles && allFiles.length > 0) {
+    const subRoots = await findSubPackageRoots(repoRoot, allFiles);
+    const detected = [];
+    for (const subRoot of subRoots) {
+      const fw = await readFrameworkFromPkg(import_path4.default.join(repoRoot, subRoot, "package.json"));
+      if (fw && !detected.includes(fw)) detected.push(fw);
+    }
+    for (const subRoot of subRoots) {
+      for (const [cfg, name] of configChecks) {
+        try {
+          await import_promises3.default.access(import_path4.default.join(repoRoot, subRoot, cfg));
+          if (!detected.includes(name)) detected.push(name);
+        } catch {
+        }
+      }
+    }
+    if (detected.length === 1) return detected[0];
+    if (detected.length > 1) {
+      const prefixCount = /* @__PURE__ */ new Map();
+      for (const d of detected) {
+        const prefix = d.split("@")[0];
+        prefixCount.set(prefix, (prefixCount.get(prefix) ?? 0) + 1);
+      }
+      return [...prefixCount.entries()].map(([fw, count]) => count > 1 ? `${fw} (\xD7${count})` : fw).join(", ");
+    }
   }
   return null;
 }
@@ -242593,11 +242630,15 @@ function detectEntryPoints(files) {
       entries.push({ path: f, type });
       continue;
     }
-    if (/^app\/.*page\.(ts|js)x?$/.test(f) || /^app\/layout\.(ts|js)x?$/.test(f)) {
+    if (/(?:^|\/)app\/.*page\.(ts|js)x?$/.test(f) || /(?:^|\/)app\/layout\.(ts|js)x?$/.test(f)) {
+      entries.push({ path: f, type: "api" });
+      continue;
+    }
+    if (/(?:^|\/)app\/.*(?:loading|error|not-found)\.(ts|js)x?$/.test(f)) {
       entries.push({ path: f, type: "api" });
       continue;
     }
-    if (/^app\/.*route\.(ts|js)x?$/.test(f) || /^pages\/api\//.test(f)) {
+    if (/(?:^|\/)app\/.*route\.(ts|js)x?$/.test(f) || /(?:^|\/)pages\/api\//.test(f)) {
       entries.push({ path: f, type: "api" });
       continue;
     }
@@ -243034,6 +243075,73 @@ function buildImpactChains(candidates) {
 function describeMechanism(root, related, depth) {
   return `${root.type} in ${root.file} propagates via ${depth} dependency hop(s) to ${related.type} in ${related.file}`;
 }
+var CROSS_BUNDLE_SAFE_EXPORTS = /* @__PURE__ */ new Set([
+  // action_contracts
+  "ActionType",
+  "PlannedAction",
+  "ShellCommandSpec",
+  "TEST_COMMAND_WHITELIST",
+  "SENSITIVE_KEY_RE",
+  "DESTRUCTIVE_RE",
+  // orchestrator / plan
+  "OrchestratorPlan",
+  "OrchestratorStep",
+  // contracts / store
+  "MahadataStore",
+  "InMemoryMahadataStore",
+  "Mahadata",
+  "TokenCounter",
+  "LLMClientConfig",
+  // handlers exposed via MCP tool layer
+  "handleAnalyzeRepo",
+  "handleBlastRadius",
+  "handleGetHotspots",
+  "handleGetMahadata",
+  // shared utilities
+  "calculateRiskScore",
+  "assembleGraph",
+  "classifyTopology",
+  "resolveTaskDependencies",
+  // constants / prompts
+  "SYSTEM_PROMPT",
+  "JSON_TAG_RE",
+  // Next.js / framework reserved exports — always safe
+  "metadata",
+  "nextConfig",
+  "geistSans",
+  "geistMono",
+  "default"
+  // default exports are always externally consumable
+]);
+var SAFE_EXPORT_PREFIXES = [
+  "handle",
+  // MCP handlers
+  "create",
+  // factory functions
+  "build",
+  // builder functions
+  "run"
+  // runner functions exposed to orchestrator
+];
+var CROSS_BUNDLE_BARREL_PATTERNS = [
+  /\/contracts\/index\.ts$/,
+  /\/action_contracts\/index\.ts$/,
+  /\/action_layer\/index\.ts$/,
+  /\/shared\/index\.ts$/,
+  /\/shared\/logger\/index\.ts$/,
+  /\/orchestrator\/index\.ts$/
+];
+function isCrossBundleSafeSymbol(symbolName, filePath) {
+  if (CROSS_BUNDLE_SAFE_EXPORTS.has(symbolName)) return true;
+  for (const prefix of SAFE_EXPORT_PREFIXES) {
+    if (symbolName.startsWith(prefix)) return true;
+  }
+  if (symbolName === "logger" || symbolName.startsWith("logger")) return true;
+  for (const pattern of CROSS_BUNDLE_BARREL_PATTERNS) {
+    if (pattern.test(filePath)) return true;
+  }
+  return false;
+}
 function tagNoise(findings, chains) {
   const suppressionReasons = /* @__PURE__ */ new Map();
   const severityOrder = {
@@ -243043,6 +243151,17 @@ function tagNoise(findings, chains) {
     low: 1,
     info: 0
   };
+  for (const f of findings) {
+    if (f.type !== "dead_code") continue;
+    if (suppressionReasons.has(f.id)) continue;
+    const symbolName = f.symbol ? f.symbol.split("::")[1] ?? f.symbol : "";
+    if (isCrossBundleSafeSymbol(symbolName, f.file)) {
+      suppressionReasons.set(
+        f.id,
+        `Cross-bundle false positive: '${symbolName}' is a known exported interface consumed outside this scan boundary.`
+      );
+    }
+  }
   const groupedByFileType = /* @__PURE__ */ new Map();
   for (const f of findings) {
     const key = `${f.file}::${f.type}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openkrak-mcp",
-  "version": "1.0.18",
+  "version": "1.0.19",
   "description": "OpenKrak MCP Server - AI coding intelligence via Dorchester engine",
   "mcpName": "io.github.FrnzJulianBergmann/openkrak",
   "type": "commonjs",