review-ready-mcp 0.1.0

package/README.md

@@ -0,0 +1,96 @@
+# review-ready-mcp
+
+**MCP server for [Review Ready](https://github.com/yurukusa/vscode-review-ready) — run pre-PR checks from Claude.**
+
+Ask Claude to check your code before opening a pull request. Claude will scan your changed files and flag debug statements, hardcoded secrets, TODO debt, and complexity spikes.
+
+## Quick Start
+
+### Claude Desktop
+
+Add to your `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "review-ready": {
+      "command": "npx",
+      "args": ["review-ready-mcp"]
+    }
+  }
+}
+```
+
+### Claude Code
+
+Add to your project's `.mcp.json` or global MCP settings:
+
+```json
+{
+  "mcpServers": {
+    "review-ready": {
+      "command": "npx",
+      "args": ["review-ready-mcp"]
+    }
+  }
+}
+```
+
+Then ask Claude: *"Check my changes before I push"* or *"Run review-ready on /path/to/my/repo"*
+
+## Tools
+
+### `check_changes`
+
+Runs all checks on the changed files in a git repository.
+
+```
+Input:
+  repo_path: string          — Absolute path to the git repo root
+  base_sha?: string          — Optional base commit SHA (for CI use)
+  head_sha?: string          — Optional head commit SHA (for CI use)
+  complexity_threshold?: number  — Branch count threshold (default: 10)
+```
+
+### `check_content`
+
+Checks a code snippet directly — no git required.
+
+```
+Input:
+  content: string            — The code to check
+  filename: string           — Filename for language-specific rules (e.g., "auth.ts")
+  complexity_threshold?: number  — Branch count threshold (default: 10)
+```
+
+## What it checks
+
+| Check | What it catches |
+|-------|----------------|
+| **Debug statements** | `console.log`, `debugger`, `print()`, `puts`, `fmt.Print`, `println!`, `var_dump`, `dd()` |
+| **TODO/FIXME debt** | `TODO`, `FIXME`, `HACK`, `XXX`, `TEMP`, `WTF`, `BUG` in new code |
+| **Secrets** | AWS keys, GitHub PATs, OpenAI keys, Slack tokens, hardcoded credentials |
+| **Large files** | Files over 500KB accidentally staged |
+| **Missing tests** | Source files changed without a test file (via `check_changes`) |
+| **Complexity** | High cyclomatic complexity in changed JS/TS code |
+
+## Example usage in Claude
+
+> **You:** Check my changes before I push. The repo is at /home/me/my-project.
+>
+> **Claude:** *(calls `check_changes` with repo_path="/home/me/my-project")*
+>
+> Found 2 errors, 1 warning, 0 info
+>
+> ✗ [no-debug-statements] Debug statement found: console.log(userData)  [src/auth.ts:42]
+> ✗ [no-secrets] Possible API key detected  [src/config.ts:8]
+> ⚠ [no-todo-in-changes] Unresolved marker: // TODO: validate token expiry  [src/auth.ts:67]
+
+---
+
+Also available as:
+- **GitHub Action**: `uses: yurukusa/review-ready@v0.1.0`
+- **VS Code Extension**: Search "Review Ready" in the marketplace
+- **npm library**: `npm install review-ready`
+
+Source: [github.com/yurukusa/vscode-review-ready](https://github.com/yurukusa/vscode-review-ready)

package/dist/checks.d.ts

@@ -0,0 +1,26 @@
+/**
+ * checks.ts — Review Ready check functions (copied from review-ready package)
+ * Pure functions: (FileChanges) → CheckResult[]
+ * No external dependencies — runs anywhere Node.js is installed.
+ */
+export interface CheckResult {
+    rule: string;
+    severity: 'error' | 'warning' | 'info';
+    message: string;
+    line?: number;
+    file?: string;
+}
+export interface FileChanges {
+    filename: string;
+    addedLines: string[];
+    addedLineNumbers: number[];
+    isNewFile: boolean;
+    sizeBytes: number;
+}
+export declare function checkDebugStatements(changes: FileChanges): CheckResult[];
+export declare function checkTodos(changes: FileChanges): CheckResult[];
+export declare function checkSecrets(changes: FileChanges): CheckResult[];
+export declare function checkLargeFile(changes: FileChanges): CheckResult[];
+export declare function checkTestExists(changes: FileChanges, allFiles: Set<string>): CheckResult[];
+export declare function checkComplexity(changes: FileChanges, threshold: number): CheckResult[];
+//# sourceMappingURL=checks.d.ts.map

package/dist/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAcD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,EAAE,CAaxE;AAKD,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,EAAE,CAQ9D;AAaD,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,EAAE,CAehE;AAGD,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,EAAE,CAKlE;AAWD,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,WAAW,EAAE,CAY1F;AAKD,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAUtF"}

package/dist/checks.js

@@ -0,0 +1,117 @@
+/**
+ * checks.ts — Review Ready check functions (copied from review-ready package)
+ * Pure functions: (FileChanges) → CheckResult[]
+ * No external dependencies — runs anywhere Node.js is installed.
+ */
+// ── Debug statements ─────────────────────────────────────────────────────────
+const DEBUG_PATTERNS = [
+    /\bconsole\.(log|debug|warn|error|trace|dir|table)\s*\(/,
+    /\bdebugger\b/,
+    /\bprint\s*\(/,
+    /\bputs\s/,
+    /\bfmt\.Print/,
+    /\bprintln!\s*\(/,
+    /\bvar_dump\s*\(/,
+    /\bdd\s*\(/,
+];
+export function checkDebugStatements(changes) {
+    const results = [];
+    changes.addedLines.forEach((line, idx) => {
+        const trimmed = line.trim();
+        if (trimmed.startsWith('//') || trimmed.startsWith('#') || trimmed.startsWith('*'))
+            return;
+        for (const pattern of DEBUG_PATTERNS) {
+            if (pattern.test(line)) {
+                results.push({ rule: 'no-debug-statements', severity: 'error', message: `Debug statement found: ${line.trim()}`, line: changes.addedLineNumbers[idx], file: changes.filename });
+                break;
+            }
+        }
+    });
+    return results;
+}
+// ── TODO/FIXME ───────────────────────────────────────────────────────────────
+const TODO_PATTERN = /\b(TODO|FIXME|HACK|XXX|TEMP|WTF|BUG)[\s:]/i;
+export function checkTodos(changes) {
+    const results = [];
+    changes.addedLines.forEach((line, idx) => {
+        if (TODO_PATTERN.test(line)) {
+            results.push({ rule: 'no-todo-in-changes', severity: 'warning', message: `Unresolved marker in new code: ${line.trim()}`, line: changes.addedLineNumbers[idx], file: changes.filename });
+        }
+    });
+    return results;
+}
+// ── Secrets ──────────────────────────────────────────────────────────────────
+const SECRET_PATTERNS = [
+    { pattern: /['"][A-Za-z0-9+/]{40,}['"]/, label: 'long base64-like string' },
+    { pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*['"][^'"]{8,}['"]/i, label: 'API key' },
+    { pattern: /(?:secret|password|passwd|pwd)\s*[:=]\s*['"][^'"]{4,}['"]/i, label: 'credential' },
+    { pattern: /(?:AKIA|ASIA)[A-Z0-9]{16}/, label: 'AWS access key' },
+    { pattern: /ghp_[A-Za-z0-9]{36}/, label: 'GitHub personal access token' },
+    { pattern: /sk-[A-Za-z0-9]{48}/, label: 'OpenAI API key' },
+    { pattern: /xox[baprs]-[A-Za-z0-9-]{10,}/, label: 'Slack token' },
+];
+export function checkSecrets(changes) {
+    const lowerName = changes.filename.toLowerCase();
+    if (lowerName.includes('test') || lowerName.includes('spec') || lowerName.includes('mock') || lowerName.includes('fixture') || lowerName.includes('example') || lowerName.endsWith('.md'))
+        return [];
+    const results = [];
+    changes.addedLines.forEach((line, idx) => {
+        const trimmed = line.trim();
+        if (trimmed.startsWith('//') || trimmed.startsWith('#'))
+            return;
+        for (const { pattern, label } of SECRET_PATTERNS) {
+            if (pattern.test(line)) {
+                results.push({ rule: 'no-secrets', severity: 'error', message: `Possible ${label} detected`, line: changes.addedLineNumbers[idx], file: changes.filename });
+                break;
+            }
+        }
+    });
+    return results;
+}
+// ── Large file ───────────────────────────────────────────────────────────────
+export function checkLargeFile(changes) {
+    if (changes.sizeBytes > 500 * 1024) {
+        return [{ rule: 'no-large-files', severity: 'warning', message: `File is ${(changes.sizeBytes / 1024).toFixed(0)} KB — is this intentional?`, file: changes.filename }];
+    }
+    return [];
+}
+// ── Test coverage ─────────────────────────────────────────────────────────────
+const SOURCE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx', '.py', '.rb', '.go', '.java']);
+const TEST_CONVENTIONS = [
+    (f) => f.replace(/\.(ts|tsx|js|jsx)$/, '.test.$1'),
+    (f) => f.replace(/\.(ts|tsx|js|jsx)$/, '.spec.$1'),
+    (f) => f.replace('/src/', '/tests/').replace(/\.(ts|tsx|js|jsx)$/, '.test.$1'),
+    (f) => { const r = f.replace(/\.(py)$/, '_test.$1'); return r !== f ? r : ''; },
+];
+export function checkTestExists(changes, allFiles) {
+    const ext = '.' + changes.filename.split('.').pop();
+    if (!SOURCE_EXTENSIONS.has(ext))
+        return [];
+    if (/\.(test|spec)\.(ts|tsx|js|jsx)$/.test(changes.filename))
+        return [];
+    if (changes.filename.includes('__tests__'))
+        return [];
+    const base = changes.filename.split('/').pop() ?? '';
+    if (/^(index|types|constants|config|main|app)\.(ts|tsx|js|jsx)$/.test(base))
+        return [];
+    const hasTest = TEST_CONVENTIONS.some(fn => { const r = fn(changes.filename); return r && allFiles.has(r); });
+    if (!hasTest) {
+        return [{ rule: 'test-file-exists', severity: 'info', message: `No test file found for ${base}`, file: changes.filename }];
+    }
+    return [];
+}
+// ── Complexity ───────────────────────────────────────────────────────────────
+const BRANCH_KEYWORDS = /\b(if|else if|while|for|case|catch|\?\s*[^:]+:|\&\&|\|\|)\b/g;
+export function checkComplexity(changes, threshold) {
+    const ext = '.' + changes.filename.split('.').pop();
+    if (!['.ts', '.tsx', '.js', '.jsx'].includes(ext))
+        return [];
+    if (changes.addedLines.length < 20)
+        return [];
+    const matches = changes.addedLines.join('\n').match(BRANCH_KEYWORDS);
+    const approxCC = (matches?.length ?? 0) + 1;
+    if (approxCC > threshold) {
+        return [{ rule: 'complexity-threshold', severity: 'warning', message: `New code has high apparent complexity (~${approxCC} branches) — consider breaking it up`, file: changes.filename }];
+    }
+    return [];
+}

package/dist/gitDiff.d.ts

@@ -0,0 +1,7 @@
+/**
+ * gitDiff.ts — Parse git diff output into FileChanges objects
+ */
+import type { FileChanges } from './checks.js';
+export declare function getChangedFiles(repoRoot: string, baseSha?: string, headSha?: string): FileChanges[];
+export declare function getAllProjectFiles(repoRoot: string): Set<string>;
+//# sourceMappingURL=gitDiff.d.ts.map

package/dist/gitDiff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitDiff.d.ts","sourceRoot":"","sources":["../src/gitDiff.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CA2CnG;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAKhE"}

package/dist/gitDiff.js

@@ -0,0 +1,88 @@
+/**
+ * gitDiff.ts — Parse git diff output into FileChanges objects
+ */
+import { execSync } from 'child_process';
+import * as fs from 'fs';
+import * as path from 'path';
+export function getChangedFiles(repoRoot, baseSha, headSha) {
+    const results = [];
+    let changedFilenames = [];
+    try {
+        if (baseSha && headSha) {
+            // GitHub Actions / specified range mode
+            const output = execSync(`git diff --name-only ${baseSha}..${headSha}`, { cwd: repoRoot, encoding: 'utf8' });
+            changedFilenames = output.trim().split('\n').filter(Boolean);
+        }
+        else {
+            // Local mode: staged + unstaged
+            const staged = execSync('git diff --cached --name-only', { cwd: repoRoot, encoding: 'utf8' });
+            const unstaged = execSync('git diff --name-only', { cwd: repoRoot, encoding: 'utf8' });
+            const all = new Set([...staged.trim().split('\n'), ...unstaged.trim().split('\n')].filter(Boolean));
+            changedFilenames = [...all];
+        }
+    }
+    catch {
+        return [];
+    }
+    for (const filename of changedFilenames) {
+        const fullPath = path.join(repoRoot, filename);
+        let sizeBytes = 0;
+        try {
+            sizeBytes = fs.statSync(fullPath).size;
+        }
+        catch { /* deleted */ }
+        let diffOutput = '';
+        try {
+            if (baseSha && headSha) {
+                diffOutput = execSync(`git diff ${baseSha}..${headSha} -U0 -- "${filename}"`, { cwd: repoRoot, encoding: 'utf8' });
+            }
+            else {
+                diffOutput = execSync(`git diff --cached -U0 -- "${filename}"`, { cwd: repoRoot, encoding: 'utf8' });
+                if (!diffOutput.trim()) {
+                    diffOutput = execSync(`git diff -U0 -- "${filename}"`, { cwd: repoRoot, encoding: 'utf8' });
+                }
+            }
+        }
+        catch {
+            continue;
+        }
+        const { addedLines, addedLineNumbers, isNewFile } = parseDiff(diffOutput);
+        results.push({ filename, addedLines, addedLineNumbers, isNewFile, sizeBytes });
+    }
+    return results;
+}
+export function getAllProjectFiles(repoRoot) {
+    try {
+        const out = execSync('git ls-files', { cwd: repoRoot, encoding: 'utf8' });
+        return new Set(out.trim().split('\n').filter(Boolean));
+    }
+    catch {
+        return new Set();
+    }
+}
+function parseDiff(diff) {
+    const lines = diff.split('\n');
+    const addedLines = [];
+    const addedLineNumbers = [];
+    let isNewFile = false;
+    let cur = 0;
+    for (const line of lines) {
+        if (line.startsWith('new file mode')) {
+            isNewFile = true;
+            continue;
+        }
+        const hunk = line.match(/^@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/);
+        if (hunk) {
+            cur = parseInt(hunk[1], 10);
+            continue;
+        }
+        if (line.startsWith('+') && !line.startsWith('+++')) {
+            addedLines.push(line.slice(1));
+            addedLineNumbers.push(cur++);
+        }
+        else if (line.startsWith(' ')) {
+            cur++;
+        }
+    }
+    return { addedLines, addedLineNumbers, isNewFile };
+}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+/**
+ * review-ready-mcp — MCP server for Review Ready pre-PR checks
+ *
+ * Exposes these tools to Claude and other MCP clients:
+ *   - check_changes: Run all Review Ready checks on a git repo's changed files
+ *   - check_content: Check a code snippet directly (no git required)
+ *
+ * Transport: stdio (local tool, intended to run on developer's machine)
+ *
+ * Usage in claude_desktop_config.json:
+ *   {
+ *     "mcpServers": {
+ *       "review-ready": {
+ *         "command": "npx",
+ *         "args": ["review-ready-mcp"]
+ *       }
+ *     }
+ *   }
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/index.js

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+/**
+ * review-ready-mcp — MCP server for Review Ready pre-PR checks
+ *
+ * Exposes these tools to Claude and other MCP clients:
+ *   - check_changes: Run all Review Ready checks on a git repo's changed files
+ *   - check_content: Check a code snippet directly (no git required)
+ *
+ * Transport: stdio (local tool, intended to run on developer's machine)
+ *
+ * Usage in claude_desktop_config.json:
+ *   {
+ *     "mcpServers": {
+ *       "review-ready": {
+ *         "command": "npx",
+ *         "args": ["review-ready-mcp"]
+ *       }
+ *     }
+ *   }
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import * as path from 'path';
+import { checkDebugStatements, checkTodos, checkSecrets, checkLargeFile, checkTestExists, checkComplexity, } from './checks.js';
+import { getChangedFiles, getAllProjectFiles } from './gitDiff.js';
+// ── Server setup ──────────────────────────────────────────────────────────────
+const server = new McpServer({
+    name: 'review-ready-mcp-server',
+    version: '0.1.0',
+});
+// ── Helpers ────────────────────────────────────────────────────────────────────
+function formatResults(results) {
+    if (results.length === 0)
+        return '✓ All checks passed — ready to review!';
+    const errors = results.filter(r => r.severity === 'error');
+    const warnings = results.filter(r => r.severity === 'warning');
+    const infos = results.filter(r => r.severity === 'info');
+    const lines = [
+        `Found ${errors.length} error(s), ${warnings.length} warning(s), ${infos.length} info\n`,
+    ];
+    for (const r of results) {
+        const icon = r.severity === 'error' ? '✗' : r.severity === 'warning' ? '⚠' : 'ℹ';
+        const loc = r.file ? `${r.file}${r.line ? `:${r.line}` : ''}` : '';
+        const locStr = loc ? `  [${loc}]` : '';
+        lines.push(`${icon} [${r.rule}] ${r.message}${locStr}`);
+    }
+    return lines.join('\n');
+}
+function runAllChecks(changedFiles, allProjectFiles, complexityThreshold) {
+    const all = [];
+    for (const file of changedFiles) {
+        all.push(...checkDebugStatements(file));
+        all.push(...checkTodos(file));
+        all.push(...checkSecrets(file));
+        all.push(...checkLargeFile(file));
+        all.push(...checkTestExists(file, allProjectFiles));
+        all.push(...checkComplexity(file, complexityThreshold));
+    }
+    return all.sort((a, b) => {
+        const order = { error: 0, warning: 1, info: 2 };
+        return order[a.severity] - order[b.severity];
+    });
+}
+// ── Tool: check_changes ────────────────────────────────────────────────────────
+server.registerTool('check_changes', {
+    title: 'Check Changed Files',
+    description: `Run Review Ready pre-PR checks on all changed files in a git repository.
+
+Detects:
+- Debug statements (console.log, debugger, print(), etc.)
+- TODO/FIXME/HACK markers in newly added lines
+- Potential secrets (API keys, AWS credentials, tokens, passwords)
+- Accidentally staged large files (>500KB)
+- Source files missing corresponding test files
+- High cyclomatic complexity in JS/TS additions
+
+Returns a summary of issues with file paths and line numbers.`,
+    inputSchema: {
+        repo_path: z.string().describe('Absolute path to the git repository root. Use the workspace root when checking changes before opening a PR.'),
+        base_sha: z.string().optional().describe('Base commit SHA for diff (optional). If provided with head_sha, diffs between two commits instead of staged/unstaged.'),
+        head_sha: z.string().optional().describe('Head commit SHA for diff (optional). Used with base_sha.'),
+        complexity_threshold: z.number().optional().describe('Cyclomatic complexity threshold. Flag functions exceeding this branch count. Default: 10.'),
+    },
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+    },
+}, async ({ repo_path, base_sha, head_sha, complexity_threshold = 10 }) => {
+    const repoRoot = path.resolve(repo_path);
+    const changedFiles = getChangedFiles(repoRoot, base_sha, head_sha);
+    if (changedFiles.length === 0) {
+        const output = { status: 'ok', message: 'No changed files detected', results: [] };
+        return {
+            content: [{ type: 'text', text: '✓ No changed files detected — nothing to check.' }],
+            structuredContent: output,
+        };
+    }
+    const allProjectFiles = getAllProjectFiles(repoRoot);
+    const results = runAllChecks(changedFiles, allProjectFiles, complexity_threshold);
+    const structured = {
+        status: results.some(r => r.severity === 'error') ? 'error' : results.some(r => r.severity === 'warning') ? 'warning' : 'ok',
+        filesChecked: changedFiles.length,
+        totalIssues: results.length,
+        errors: results.filter(r => r.severity === 'error').length,
+        warnings: results.filter(r => r.severity === 'warning').length,
+        infos: results.filter(r => r.severity === 'info').length,
+        results,
+    };
+    return {
+        content: [{ type: 'text', text: formatResults(results) }],
+        structuredContent: structured,
+    };
+});
+// ── Tool: check_content ───────────────────────────────────────────────────────
+server.registerTool('check_content', {
+    title: 'Check Code Content',
+    description: `Run Review Ready checks on a code snippet directly — no git repository needed.
+
+Useful when reviewing a code block that Claude just generated, or when checking a file's content before committing.
+
+Detects: debug statements, TODO markers, secrets, and complexity issues.
+Note: test coverage check requires knowing all project files, so it's skipped in this mode.`,
+    inputSchema: {
+        content: z.string().describe('The code content to check. Can be a full file or a snippet.'),
+        filename: z.string().describe('The filename (e.g., "src/auth.ts") — used to apply language-specific rules and detect if it is a test file.'),
+        complexity_threshold: z.number().optional().describe('Cyclomatic complexity threshold. Default: 10.'),
+    },
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+    },
+}, async ({ content, filename, complexity_threshold = 10 }) => {
+    const lines = content.split('\n');
+    const changes = {
+        filename,
+        addedLines: lines,
+        addedLineNumbers: lines.map((_, i) => i + 1),
+        isNewFile: true,
+        sizeBytes: Buffer.byteLength(content, 'utf8'),
+    };
+    const results = [
+        ...checkDebugStatements(changes),
+        ...checkTodos(changes),
+        ...checkSecrets(changes),
+        ...checkLargeFile(changes),
+        ...checkComplexity(changes, complexity_threshold),
+        // Note: checkTestExists skipped — requires allProjectFiles context
+    ].sort((a, b) => {
+        const order = { error: 0, warning: 1, info: 2 };
+        return order[a.severity] - order[b.severity];
+    });
+    const structured = {
+        status: results.some(r => r.severity === 'error') ? 'error' : results.some(r => r.severity === 'warning') ? 'warning' : 'ok',
+        filename,
+        linesChecked: lines.length,
+        totalIssues: results.length,
+        results,
+    };
+    return {
+        content: [{ type: 'text', text: formatResults(results) }],
+        structuredContent: structured,
+    };
+});
+// ── Start server ──────────────────────────────────────────────────────────────
+const transport = new StdioServerTransport();
+await server.connect(transport);

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "review-ready-mcp",
+  "version": "0.1.0",
+  "description": "MCP server for Review Ready — run pre-PR checks (debug statements, secrets, TODO debt, complexity) from Claude",
+  "main": "dist/index.js",
+  "bin": {
+    "review-ready-mcp": "dist/index.js"
+  },
+  "type": "module",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "code-review",
+    "pr",
+    "git",
+    "claude"
+  ],
+  "author": "yurukusa",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/yurukusa/review-ready-mcp"
+  },
+  "files": [
+    "dist/"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc -watch",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.8.0",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.3.0"
+  }
+}