sentinel-ir-mcp 0.2.0 → 0.2.1

package/README.md

@@ -29,7 +29,7 @@ of safety. Python and other languages are not supported yet.
 |---|---|---|
 | `analyze_code` | `code` (string), optional `target` (file name) | compact IR of the given source |
 | `analyze_file` | `path` | compact IR of one file inside the allowed folders |
-| `analyze_directory` | optional `path`, `max_files` (default 50, max 500), `recursive` (default `true`) | one IR summary per file, sorted from highest to lowest risk, plus `riskCounts`, `truncated` and `skipped` |
+| `analyze_directory` | optional `path`, `max_files` (default 50, max 500), `recursive` (default `true`) | one IR summary per file, sorted from highest to lowest risk, plus `riskCounts`, `statusCounts` and `incomplete` (paths whose analysis did not finish; check them separately, their low risk is not evidence of safety); files that could not be read are listed in `skipped.unreadable` and are not counted as analyzed, `truncated` and `skipped` |
 
 Every tool returns the result twice: as JSON text (for clients that only read
 text) and as `structuredContent`. All three are annotated

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sentinel-ir-mcp",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "MCP server for sentinel-ir: lets AI agents (Claude Desktop, Cursor, Windsurf, ...) read a compact structural IR of JavaScript and TypeScript files instead of the raw source. Read-only, sandboxed to allowed folders.",
   "main": "src/server.js",
   "bin": {

package/src/analyze.js

@@ -34,7 +34,7 @@ async function analyzeFile(requested, roots, { maxFileBytes }) {
 // and hidden folders are skipped.
 async function collectFiles(dir, root, { maxFiles, maxFileBytes, recursive }) {
     const files = [];
-    const skipped = { tooLarge: [], symlinks: 0 };
+    const skipped = { tooLarge: [], symlinks: 0, unreadable: [] };
     let truncated = false;
     const queue = [dir];
     while (queue.length && !truncated) {
@@ -72,7 +72,14 @@ async function analyzeDirectory(requested, roots, { maxFiles, maxFileBytes, recu
     const { files, skipped, truncated } = await collectFiles(real, root, { maxFiles, maxFileBytes, recursive });
     const results = [];
     for (const { full, rel } of files) {
-        const ir = await analyzeCode(await fs.readFile(full, "utf8"), rel);
+        // One file that cannot be read or analyzed must not hide the others.
+        let ir;
+        try {
+            ir = await analyzeCode(await fs.readFile(full, "utf8"), rel);
+        } catch {
+            skipped.unreadable.push(rel);
+            continue;
+        }
         results.push({
             path: rel,
             analysisStatus: ir.analysisStatus,
@@ -90,6 +97,11 @@ async function analyzeDirectory(requested, roots, { maxFiles, maxFileBytes, recu
     const riskCounts = { critical: 0, high: 0, medium: 0, low: 0 };
     for (const r of results) if (r.risk in riskCounts) riskCounts[r.risk]++;
 
+    // Files whose analysis did not finish are listed on their own: their risk
+    // is not reliable, so sorting alone would bury them under riskier files.
+    const incomplete = results.filter((r) => r.analysisStatus !== "complete").map((r) => r.path).sort();
+    const statusCounts = { complete: results.length - incomplete.length, incomplete: incomplete.length };
+
     return {
         folder: display,
         analyzed: results.length,
@@ -97,6 +109,8 @@ async function analyzeDirectory(requested, roots, { maxFiles, maxFileBytes, recu
         maxFiles,
         skipped,
         riskCounts,
+        statusCounts,
+        incomplete,
         files: results
     };
 }

package/src/server.js

@@ -29,6 +29,7 @@ const INSTRUCTIONS =
     "Prefer analyze_file or analyze_directory over reading raw source when you only need structure " +
     "or risk, then read the raw source of the files that matter. Supported: JavaScript (.js, .mjs, .cjs) and TypeScript (.ts, .mts, .cts, .tsx); the language is picked from the file extension. " +
     "Rely on analysisStatus, world.risk, forbidden and facts; analysisStatus \"incomplete\" means the file did not parse cleanly. " +
+    "analyze_directory lists such files separately in 'incomplete'; their low risk is not evidence of safety. " +
     "Read-only: nothing is written, executed or sent over the network. " + UNTRUSTED_NOTE;
 
 function ok(value) {
@@ -106,7 +107,10 @@ function createServer(options = {}) {
             "Scan a folder inside the allowed folders and return one compact IR summary per JavaScript or TypeScript file, " +
             "sorted from highest to lowest risk, plus risk counts. Skips node_modules, .git, hidden folders " +
             `and symlinks. Analyzes at most max_files files (default ${limits.maxFiles}); 'truncated' tells ` +
-            "you when there were more. Use analyze_file for the full IR of a single file. " + UNTRUSTED_NOTE,
+            "you when there were more. 'incomplete' lists files whose analysis did not finish (e.g. parse errors); " +
+            "their risk is not reliable, check them separately. statusCounts counts complete vs incomplete. " +
+            "Files that could not be read are listed in skipped.unreadable and are not counted as analyzed. " +
+            "Use analyze_file for the full IR of a single file. " + UNTRUSTED_NOTE,
         inputSchema: {
             path: z.string().min(1).optional().describe("Folder path, absolute or relative to the first allowed folder (default: the first allowed folder)"),
             max_files: z.number().int().min(1).max(DEFAULT_LIMITS.hardMaxFiles).optional()