projscan 3.6.0 → 3.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +22 -21
- package/dist/cli/commands/collision.js +8 -1
- package/dist/cli/commands/collision.js.map +1 -1
- package/dist/cli/commands/coordinate.d.ts +4 -2
- package/dist/cli/commands/coordinate.js +73 -18
- package/dist/cli/commands/coordinate.js.map +1 -1
- package/dist/core/agentBrief.js +32 -2
- package/dist/core/agentBrief.js.map +1 -1
- package/dist/core/collisionDetector.d.ts +10 -0
- package/dist/core/collisionDetector.js +67 -1
- package/dist/core/collisionDetector.js.map +1 -1
- package/dist/core/coordination.d.ts +13 -0
- package/dist/core/coordination.js +53 -3
- package/dist/core/coordination.js.map +1 -1
- package/dist/core/preflight.js +50 -0
- package/dist/core/preflight.js.map +1 -1
- package/dist/mcp/tools/collision.js +15 -1
- package/dist/mcp/tools/collision.js.map +1 -1
- package/dist/mcp/tools/coordinateWatch.d.ts +4 -0
- package/dist/mcp/tools/coordinateWatch.js +138 -0
- package/dist/mcp/tools/coordinateWatch.js.map +1 -0
- package/dist/mcp/tools.js +2 -0
- package/dist/mcp/tools.js.map +1 -1
- package/dist/projscan-sbom.cdx.json +6 -6
- package/dist/tool-manifest.json +41 -3
- package/dist/types.d.ts +12 -2
- package/package.json +1 -1
package/dist/tool-manifest.json
CHANGED
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "projscan",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.7.0",
|
|
4
4
|
"mcpProtocolVersion": "2025-03-26",
|
|
5
|
-
"generatedAt": "2026-06-
|
|
6
|
-
"toolCount":
|
|
5
|
+
"generatedAt": "2026-06-05T15:33:37.612Z",
|
|
6
|
+
"toolCount": 47,
|
|
7
7
|
"tools": [
|
|
8
8
|
{
|
|
9
9
|
"name": "projscan_analyze",
|
|
@@ -1130,6 +1130,14 @@
|
|
|
1130
1130
|
"base_ref": {
|
|
1131
1131
|
"type": "string",
|
|
1132
1132
|
"description": "Base ref each worktree is diffed against to compute its changed files. Default: origin/main → main → master → HEAD~1, then the working tree."
|
|
1133
|
+
},
|
|
1134
|
+
"transitive": {
|
|
1135
|
+
"type": "boolean",
|
|
1136
|
+
"description": "Also report multi-hop dependency overlaps (one worktree changed a file another transitively imports), each with a `distance`. Default false — the 1-hop default stays precise; this trades precision for deeper recall."
|
|
1137
|
+
},
|
|
1138
|
+
"max_distance": {
|
|
1139
|
+
"type": "number",
|
|
1140
|
+
"description": "Max import hops when `transitive` is set. Default 5."
|
|
1133
1141
|
}
|
|
1134
1142
|
}
|
|
1135
1143
|
}
|
|
@@ -1211,6 +1219,36 @@
|
|
|
1211
1219
|
}
|
|
1212
1220
|
}
|
|
1213
1221
|
}
|
|
1222
|
+
},
|
|
1223
|
+
{
|
|
1224
|
+
"name": "projscan_coordinate_watch",
|
|
1225
|
+
"description": "Long-running swarm coordination watch across the repo's in-flight git worktrees. Polls on an interval and emits a `notifications/projscan/coordination_changed` notification whenever the coordination state changes — readiness (clear/caution/conflicted), collision counts, contended claims, or merge hotspots. Pairs with projscan_coordinate (one-shot): use this when an agent wants to react to other agents' changes without re-asking. Local-first. Actions: \"start\" (returns the initial summary + a watchId), \"stop\" (by watchId), \"list\".",
|
|
1226
|
+
"inputSchema": {
|
|
1227
|
+
"type": "object",
|
|
1228
|
+
"properties": {
|
|
1229
|
+
"action": {
|
|
1230
|
+
"type": "string",
|
|
1231
|
+
"enum": [
|
|
1232
|
+
"start",
|
|
1233
|
+
"stop",
|
|
1234
|
+
"list"
|
|
1235
|
+
],
|
|
1236
|
+
"description": "\"start\" begins polling (returns initial summary + watchId). \"stop\" cancels by id. \"list\" enumerates active watches."
|
|
1237
|
+
},
|
|
1238
|
+
"base_ref": {
|
|
1239
|
+
"type": "string",
|
|
1240
|
+
"description": "Base ref each worktree is diffed against. (start only)"
|
|
1241
|
+
},
|
|
1242
|
+
"interval_seconds": {
|
|
1243
|
+
"type": "number",
|
|
1244
|
+
"description": "Poll interval in seconds. Default 15, min 5, max 600. (start only)"
|
|
1245
|
+
},
|
|
1246
|
+
"watchId": {
|
|
1247
|
+
"type": "string",
|
|
1248
|
+
"description": "Watch id from a previous \"start\". (stop only)"
|
|
1249
|
+
}
|
|
1250
|
+
}
|
|
1251
|
+
}
|
|
1214
1252
|
}
|
|
1215
1253
|
]
|
|
1216
1254
|
}
|
package/dist/types.d.ts
CHANGED
|
@@ -219,7 +219,7 @@ export interface HealthScore {
|
|
|
219
219
|
}
|
|
220
220
|
export type PreflightMode = 'before_edit' | 'before_commit' | 'before_merge';
|
|
221
221
|
export type PreflightVerdict = 'proceed' | 'caution' | 'block';
|
|
222
|
-
export type PreflightReasonSource = 'doctor' | 'review' | 'taint' | 'session' | 'plugin' | 'supply-chain' | 'memory' | 'changed-files' | 'hotspots' | 'git' | 'format' | 'release';
|
|
222
|
+
export type PreflightReasonSource = 'doctor' | 'review' | 'taint' | 'session' | 'plugin' | 'supply-chain' | 'memory' | 'changed-files' | 'hotspots' | 'git' | 'format' | 'release' | 'coordination';
|
|
223
223
|
export interface PreflightReason {
|
|
224
224
|
severity: IssueSeverity;
|
|
225
225
|
source: PreflightReasonSource;
|
|
@@ -312,6 +312,16 @@ export interface PreflightEvidence {
|
|
|
312
312
|
warningIssues: number;
|
|
313
313
|
};
|
|
314
314
|
releaseScale?: PreflightReleaseScaleEvidence;
|
|
315
|
+
coordination?: {
|
|
316
|
+
available: boolean;
|
|
317
|
+
readiness: 'clear' | 'caution' | 'conflicted';
|
|
318
|
+
worktreeCount: number;
|
|
319
|
+
collisions: {
|
|
320
|
+
high: number;
|
|
321
|
+
medium: number;
|
|
322
|
+
};
|
|
323
|
+
contendedClaims: number;
|
|
324
|
+
};
|
|
315
325
|
}
|
|
316
326
|
export interface PreflightReport {
|
|
317
327
|
schemaVersion: 1;
|
|
@@ -1119,7 +1129,7 @@ export interface UnderstandReport {
|
|
|
1119
1129
|
truncated?: boolean;
|
|
1120
1130
|
}
|
|
1121
1131
|
export interface SessionCoordinationHint {
|
|
1122
|
-
id: 'current-worktree-check' | 'remembered-session-context' | 'resolve-conflicts';
|
|
1132
|
+
id: 'current-worktree-check' | 'remembered-session-context' | 'resolve-conflicts' | 'swarm-coordination';
|
|
1123
1133
|
label: string;
|
|
1124
1134
|
message: string;
|
|
1125
1135
|
command: string;
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "projscan",
|
|
3
3
|
"mcpName": "io.github.abhiyoheswaran1/projscan",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.7.0",
|
|
5
5
|
"description": "Agent-first code intelligence. MCP server (2025-03-26) with AST parsing for JavaScript, TypeScript, Python, Go, Java, Ruby, Rust, PHP, C#, Kotlin, Swift, and C++; repo understanding maps (projscan_understand), stable v3 semantic graph (projscan_semantic_graph), dataflow risk engine with bridge-helper detection (projscan_dataflow), code graph, file + per-function AST cyclomatic complexity, per-function fan-in + fan-out, coupling + cycle detection, structural PR diff with HTML reporter, coverage report with HTML reporter, intent-grounded one-call PR review (projscan_review with optional `intent` arg, new taint flows, contract changes, and newDataflowRisks) and long-running PR-watch mode with structured per-bucket deltas (projscan_review_watch), first-60-seconds workflow orientation (projscan_start), agent workplans (projscan_workplan), bug-hunt queues (projscan_bug_hunt), product-line planning (projscan_release_train), evidence packs (projscan_evidence_pack), regression planning (projscan_regression_plan), agent briefs (projscan_agent_brief), quality scorecards (projscan_quality_scorecard), and preflight with supply-chain IOC evidence, rule-driven fix suggestions + mechanical apply layer with rollback (projscan_apply_fix, projscan_fix_suggest, projscan_explain_issue), source-to-sink taint analysis (projscan_taint) with truncation reporting, transitive blast-radius analysis with cross-repo mode (projscan_impact for files and symbols), cross-repo workspace registration + intelligence (projscan_workspace_graph), per-function semantic search chunks (sub-file embeddings), per-rule confidence + severity drift + cost-summary analytics with live streaming (projscan_cost_summary), stable local analyzer + reporter plugin API (projscan_plugin, CLI --reporter, opt-in via PROJSCAN_PLUGINS_PREVIEW=1), monorepo workspace awareness with cross-package import policy + per-package dependencies / outdated / audit, BM25 + optional semantic search, cursor pagination, progress notifications, context-budgeted output, and a stable-surface CI guard. CLI on the side.",
|
|
6
6
|
"type": "module",
|
|
7
7
|
"main": "./dist/index.js",
|