[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_232":233,"_234":235},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_173":-5,"_20":174,"_22":175,"_176":177,"_178":179,"_26":180,"_24":181,"_182":-5,"_183":-5,"_184":55,"_185":186,"_187":55,"_188":-5,"_189":-5,"_190":191},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","canstralian","name","CyberGenie","branchName","main","version","path","backend/types","project",{"_34":120,"_13":14,"_47":121,"_122":-5,"_123":55,"_124":125,"_126":125,"_127":-5,"_128":-5,"_129":130,"_131":-5,"_132":55,"_133":-5,"_134":-5,"_135":71,"_136":137,"_138":-5,"_139":-5,"_140":-5,"_141":-5,"_142":143,"_144":143,"_145":146,"_147":146,"_148":146,"_149":143,"_150":143,"_151":152,"_153":154,"_155":156,"_157":55},"tree",[65,66,67],"file",{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":62,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_18":64},"contents",[33],"upstream","pull","ahead","behind","envVars",{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":57},"id","226ec582-534b-11f0-acb5-f69ea79377d9","analysis.ts","fileId","226ec62c-534b-11f0-acb5-f69ea79377d9","parentId","88bc5ef7-b9a8-4069-9c28-e62fc16ee03a","branchId","3de7c61e-531f-11f0-935e-f69ea79377d9","branchVersion",3,"latest",true,"createdAt",["D",1751024261372],0,"fileType","script","content","import type { Finding, ToolResult, ToolCapability } from \"../../shared/types.ts\";\n\nexport interface AnalysisPlugin {\n name: string;\n displayName: string;\n description: string;\n supportedLanguages: string[];\n categories: string[];\n \n // Check if the tool is available on the system\n isAvailable(): Promise;\n \n // Get tool version\n getVersion(): Promise;\n \n // Get tool capabilities\n getCapabilities(): Promise;\n \n // Analyze code or files\n analyze(options: AnalysisOptions): Promise;\n \n // Validate configuration\n validateConfig(config: any): boolean;\n \n // Get default configuration\n getDefaultConfig(): Record;\n}\n\nexport interface AnalysisOptions {\n code?: string;\n files?: string[];\n language: string;\n config?: Record;\n workingDirectory?: string;\n}\n\nexport interface PluginExecutionContext {\n tempDir: string;\n workingDir: string;\n timeout: number;\n}\n\nexport interface CommandResult {\n stdout: string;\n stderr: string;\n exitCode: number;\n executionTime: number;\n}\n\n// Plugin registry interface\nexport interface PluginRegistry {\n register(plugin: AnalysisPlugin): void;\n getPlugin(name: string): AnalysisPlugin | undefined;\n getAllPlugins(): AnalysisPlugin[];\n getAvailablePlugins(): Promise;\n getPluginsForLanguage(language: string): AnalysisPlugin[];\n}","deleted",false,"label",[58,59,36],"backend","types","226ece38-534b-11f0-acb5-f69ea79377d9","03ca57ab-b0bd-4f36-a844-678612099b5d",["D",1751024261372],"directory",[58,59],{"_34":92,"_13":58,"_37":61,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":93,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":94,"_18":95},{"_34":77,"_13":78,"_37":79,"_39":-5,"_41":42,"_43":80,"_45":46,"_47":81,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":82,"_18":83},{"_34":68,"_13":69,"_37":70,"_39":-5,"_41":42,"_43":71,"_45":46,"_47":72,"_17":49,"_50":24,"_52":73,"_54":55,"_56":-5,"_74":75,"_18":76},"12fc8594-534b-11f0-8a90-f69ea79377d9","README.md","12fc862a-534b-11f0-8a90-f69ea79377d9",1,["D",1751024235463],"# MCP Code Analysis Server\n\nA pluggable MCP-compatible server that exposes a standardized `/analyze` API for CLI-based code analysis tools. This allows editors like Cursor or VS Code to request code analysis from various tools (Semgrep, ESLint, Pylint, etc.) and receive unified, structured results.\n\n## Features\n\n- **Standardized API**: Single `/analyze` endpoint for all analysis tools\n- **Plugin Architecture**: Easy to add new analysis tools\n- **MCP Compatible**: Follows Model Context Protocol standards\n- **Unified Results**: Consistent output format across all tools\n- **Tool Discovery**: Automatic detection of available analysis tools\n- **Configurable**: Support for tool-specific configurations\n\n## API Endpoints\n\n### `POST /analyze`\nAnalyze code using specified tools and return unified results.\n\n**Request Body:**\n```json\n{\n \"code\": \"string\", // Code to analyze (optional if files provided)\n \"files\": [\"path1\", \"path2\"], // File paths to analyze (optional if code provided)\n \"language\": \"javascript\", // Programming language\n \"tools\": [\"semgrep\", \"eslint\"], // Analysis tools to use (optional, defaults to auto-detect)\n \"config\": { // Tool-specific configurations\n \"semgrep\": { \"rules\": [\"security\"] },\n \"eslint\": { \"extends\": [\"recommended\"] }\n }\n}\n```\n\n**Response:**\n```json\n{\n \"results\": [\n {\n \"tool\": \"semgrep\",\n \"findings\": [\n {\n \"id\": \"rule-id\",\n \"severity\": \"error|warning|info\",\n \"message\": \"Description of the issue\",\n \"file\": \"path/to/file.js\",\n \"line\": 42,\n \"column\": 10,\n \"endLine\": 42,\n \"endColumn\": 25,\n \"rule\": \"rule-name\",\n \"category\": \"security|performance|style|bug\"\n }\n ],\n \"metadata\": {\n \"executionTime\": 1.23,\n \"rulesApplied\": 150,\n \"version\": \"1.0.0\"\n }\n }\n ],\n \"summary\": {\n \"totalFindings\": 5,\n \"errors\": 2,\n \"warnings\": 3,\n \"info\": 0,\n \"toolsUsed\": [\"semgrep\", \"eslint\"]\n }\n}\n```\n\n### `GET /tools`\nList available analysis tools and their capabilities.\n\n### `GET /health`\nHealth check endpoint.\n\n## Project Structure\n\n```\n├── backend/\n│ ├── index.ts # Main Hono server\n│ ├── plugins/ # Analysis tool plugins\n│ │ ├── base.ts # Base plugin interface\n│ │ ├── semgrep.ts # Semgrep plugin\n│ │ ├── eslint.ts # ESLint plugin\n│ │ └── registry.ts # Plugin registry\n│ ├── services/\n│ │ ├── analyzer.ts # Main analysis service\n│ │ └── unifier.ts # Result unification service\n│ └── types/\n│ └── analysis.ts # Type definitions\n├── shared/\n│ └── types.ts # Shared types\n└── README.md\n```\n\n## Supported Tools\n\n- **Semgrep**: Static analysis for security, bugs, and code quality\n- **ESLint**: JavaScript/TypeScript linting\n- **Pylint**: Python code analysis\n- **ShellCheck**: Shell script analysis\n- **Bandit**: Python security analysis\n- **Extensible**: Easy to add more tools via plugin system\n\n## Usage\n\n1. Start the server (automatically deployed on Val Town)\n2. Send analysis requests to `/analyze`\n3. Receive unified results from multiple tools\n\n## Development\n\nThe server uses a plugin architecture where each analysis tool is implemented as a plugin that conforms to the `AnalysisPlugin` interface. New tools can be added by creating a new plugin file in the `backend/plugins/` directory.","children",[],[69],"1b3cb396-534b-11f0-b305-f69ea79377d9","shared","b798d0cf-77aa-41d8-bca1-8bc9de94dd9d",2,["D",1751024249296],[84],[78],{"_34":85,"_13":86,"_37":87,"_39":79,"_41":42,"_43":80,"_45":46,"_47":88,"_17":49,"_50":51,"_52":89,"_54":55,"_56":-5,"_74":90,"_18":91},"1b3cac84-534b-11f0-b305-f69ea79377d9","types.ts","1b3cad4c-534b-11f0-b305-f69ea79377d9",["D",1751024249296],"// Shared types for the MCP Code Analysis Server\n\nexport interface AnalysisRequest {\n code?: string;\n files?: string[];\n language: string;\n tools?: string[];\n config?: Record;\n}\n\nexport interface Finding {\n id: string;\n severity: 'error' | 'warning' | 'info';\n message: string;\n file?: string;\n line: number;\n column: number;\n endLine?: number;\n endColumn?: number;\n rule: string;\n category: 'security' | 'performance' | 'style' | 'bug' | 'maintainability';\n suggestion?: string;\n}\n\nexport interface ToolResult {\n tool: string;\n findings: Finding[];\n metadata: {\n executionTime: number;\n rulesApplied: number;\n version: string;\n exitCode?: number;\n stderr?: string;\n };\n}\n\nexport interface AnalysisResponse {\n results: ToolResult[];\n summary: {\n totalFindings: number;\n errors: number;\n warnings: number;\n info: number;\n toolsUsed: string[];\n totalExecutionTime: number;\n };\n}\n\nexport interface ToolCapability {\n name: string;\n displayName: string;\n description: string;\n supportedLanguages: string[];\n categories: string[];\n version: string;\n available: boolean;\n configSchema?: Record;\n}\n\nexport interface ToolsResponse {\n tools: ToolCapability[];\n totalAvailable: number;\n}\n\nexport interface HealthResponse {\n status: 'healthy' | 'degraded' | 'unhealthy';\n timestamp: string;\n version: string;\n tools: {\n name: string;\n status: 'available' | 'unavailable' | 'error';\n version?: string;\n }[];\n}",[],[78,86],"226ecc8a-534b-11f0-acb5-f69ea79377d9",["D",1751024261372],[96,97],[58],{"_34":105,"_13":106,"_37":107,"_39":61,"_41":42,"_43":108,"_45":46,"_47":109,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":110,"_18":111},{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":98,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":99,"_18":100},["D",1751024261372],[101],[58,59],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":102,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_74":103,"_18":104},["D",1751024261372],[],[58,59,36],"364a7182-534b-11f0-bd47-f69ea79377d9","plugins","ef35dacc-3ed7-4561-9c06-750cc4e659c8",4,["D",1751024294690],[112],[58,106],{"_34":113,"_13":114,"_37":115,"_39":107,"_41":42,"_43":108,"_45":46,"_47":116,"_17":49,"_50":51,"_52":117,"_54":55,"_56":-5,"_74":118,"_18":119},"364a5a9e-534b-11f0-bd47-f69ea79377d9","base.ts","364a5b70-534b-11f0-bd47-f69ea79377d9",["D",1751024294690],"import type { \n AnalysisPlugin, \n AnalysisOptions, \n CommandResult,\n PluginExecutionContext \n} from \"../types/analysis.ts\";\nimport type { Finding, ToolResult, ToolCapability } from \"../../shared/types.ts\";\n\nexport abstract class BaseAnalysisPlugin implements AnalysisPlugin {\n abstract name: string;\n abstract displayName: string;\n abstract description: string;\n abstract supportedLanguages: string[];\n abstract categories: string[];\n \n protected timeout = 30000; // 30 seconds default timeout\n \n abstract isAvailable(): Promise;\n abstract getVersion(): Promise;\n abstract analyze(options: AnalysisOptions): Promise;\n \n async getCapabilities(): Promise {\n const available = await this.isAvailable();\n const version = available ? await this.getVersion() : 'N/A';\n \n return {\n name: this.name,\n displayName: this.displayName,\n description: this.description,\n supportedLanguages: this.supportedLanguages,\n categories: this.categories,\n version,\n available,\n configSchema: this.getConfigSchema()\n };\n }\n \n validateConfig(config: any): boolean {\n // Default implementation - override in specific plugins\n return true;\n }\n \n getDefaultConfig(): Record {\n return {};\n }\n \n protected getConfigSchema(): Record {\n return {};\n }\n \n // Utility method to execute shell commands\n protected async executeCommand(\n command: string, \n args: string[], \n options: { cwd?: string; timeout?: number } = {}\n ): Promise {\n const startTime = Date.now();\n \n try {\n // In Val Town, we'll simulate command execution since we can't run arbitrary commands\n // In a real environment, this would use Deno.Command or similar\n const result = await this.simulateCommand(command, args, options);\n \n return {\n ...result,\n executionTime: (Date.now() - startTime) / 1000\n };\n } catch (error) {\n return {\n stdout: '',\n stderr: error instanceof Error ? error.message : 'Unknown error',\n exitCode: 1,\n executionTime: (Date.now() - startTime) / 1000\n };\n }\n }\n \n // Simulate command execution for Val Town environment\n // In a real environment, this would be replaced with actual command execution\n protected async simulateCommand(\n command: string, \n args: string[], \n options: { cwd?: string; timeout?: number } = {}\n ): Promise> {\n // This is a simulation for the Val Town environment\n // In production, you'd replace this with actual command execution\n \n if (command === 'semgrep' && args.includes('--version')) {\n return {\n stdout: 'semgrep 1.45.0',\n stderr: '',\n exitCode: 0\n };\n }\n \n if (command === 'eslint' && args.includes('--version')) {\n return {\n stdout: 'v8.50.0',\n stderr: '',\n exitCode: 0\n };\n }\n \n if (command === 'pylint' && args.includes('--version')) {\n return {\n stdout: 'pylint 2.17.0',\n stderr: '',\n exitCode: 0\n };\n }\n \n // Simulate analysis results\n if (command === 'semgrep' && args.includes('--json')) {\n return {\n stdout: JSON.stringify({\n results: [\n {\n check_id: 'javascript.lang.security.audit.xss.direct-response-write',\n path: 'example.js',\n start: { line: 10, col: 5 },\n end: { line: 10, col: 25 },\n message: 'Potential XSS vulnerability',\n severity: 'ERROR',\n extra: {\n message: 'Direct write to response without sanitization',\n metadata: { category: 'security' }\n }\n }\n ]\n }),\n stderr: '',\n exitCode: 0\n };\n }\n \n // Default simulation\n return {\n stdout: '[]',\n stderr: '',\n exitCode: 0\n };\n }\n \n // Utility method to create temporary files\n protected async createTempFile(content: string, extension: string): Promise {\n // In Val Town, we'll use a simple approach\n // In production, you'd create actual temp files\n const filename = `temp_${Date.now()}.${extension}`;\n return filename;\n }\n \n // Utility method to normalize findings\n protected normalizeFinding(\n rawFinding: any, \n tool: string, \n file?: string\n ): Finding {\n return {\n id: rawFinding.id || rawFinding.check_id || `${tool}-${Date.now()}`,\n severity: this.normalizeSeverity(rawFinding.severity),\n message: rawFinding.message || rawFinding.description || 'No description',\n file: file || rawFinding.path || rawFinding.file,\n line: rawFinding.line || rawFinding.start?.line || 1,\n column: rawFinding.column || rawFinding.start?.col || 1,\n endLine: rawFinding.endLine || rawFinding.end?.line,\n endColumn: rawFinding.endColumn || rawFinding.end?.col,\n rule: rawFinding.rule || rawFinding.check_id || rawFinding.ruleId || 'unknown',\n category: this.normalizeCategory(rawFinding.category || rawFinding.type),\n suggestion: rawFinding.suggestion || rawFinding.fix\n };\n }\n \n private normalizeSeverity(severity: any): 'error' | 'warning' | 'info' {\n if (!severity) return 'info';\n \n const s = severity.toString().toLowerCase();\n if (s.includes('error') || s.includes('critical') || s.includes('high')) {\n return 'error';\n }\n if (s.includes('warn') || s.includes('medium')) {\n return 'warning';\n }\n return 'info';\n }\n \n private normalizeCategory(category: any): Finding['category'] {\n if (!category) return 'bug';\n \n const c = category.toString().toLowerCase();\n if (c.includes('security')) return 'security';\n if (c.includes('performance')) return 'performance';\n if (c.includes('style') || c.includes('format')) return 'style';\n if (c.includes('maintain')) return 'maintainability';\n return 'bug';\n }\n}",[],[58,106,114],"3de630ba-531f-11f0-935e-f69ea79377d9",["D",1751005409604],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","6ba47c70-3ce3-11f0-8a84-ab0596bba6f5","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","a956f3ab-c5b6-4f16-a22e-9bcb0079d529","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_172":168},"org",{"_11":12,"_166":-5,"_167":168,"_129":130,"_169":170,"_171":55},"branch",{"_17":108,"_13":16,"_34":42,"_158":120,"_159":-5,"_160":-5,"_161":-5,"_162":-5,"_163":-5,"_164":14,"_165":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ5dncxVUwwR0NJUlhncHZ1a2NHMXZxS1g5ZSJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":120,"_13":14,"_47":228,"_122":-5,"_123":55,"_124":125,"_126":125,"_127":-5,"_128":-5,"_129":130,"_131":-5,"_132":55,"_133":-5,"_134":-5,"_135":71,"_136":137,"_138":-5,"_139":-5,"_140":-5,"_141":-5,"_142":143,"_144":143,"_145":146,"_147":146,"_148":146,"_149":143,"_150":143,"_151":229,"_153":230,"_155":231,"_157":55},[204,209,211],"files",[204,205,206,207,208,209,210,211],"counts",{"_195":49,"_196":71,"_197":49,"_32":198,"_199":200},[193],{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":62,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_18":192},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[58,59],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":194},[58,59,36],"pulls","branches","forks",{"_201":49,"_203":49},"connections",{"_201":49,"_202":49},"count","unfilledCount","emptyCount",{"_34":92,"_13":58,"_37":61,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":93,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":226,"_18":227},{"_34":105,"_13":106,"_37":107,"_39":61,"_41":42,"_43":108,"_45":46,"_47":109,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":224,"_18":225},{"_34":113,"_13":114,"_37":115,"_39":107,"_41":42,"_43":108,"_45":46,"_47":116,"_17":49,"_50":51,"_52":117,"_54":55,"_56":-5,"_74":222,"_18":223},{"_34":60,"_13":59,"_37":40,"_39":61,"_41":42,"_43":44,"_45":46,"_47":98,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":220,"_18":221},{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":102,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_74":218,"_18":219},{"_34":77,"_13":78,"_37":79,"_39":-5,"_41":42,"_43":80,"_45":46,"_47":81,"_17":49,"_50":63,"_52":-5,"_54":55,"_56":-5,"_74":216,"_18":217},{"_34":85,"_13":86,"_37":87,"_39":79,"_41":42,"_43":80,"_45":46,"_47":88,"_17":49,"_50":51,"_52":89,"_54":55,"_56":-5,"_74":214,"_18":215},{"_34":68,"_13":69,"_37":70,"_39":-5,"_41":42,"_43":71,"_45":46,"_47":72,"_17":49,"_50":24,"_52":73,"_54":55,"_56":-5,"_74":212,"_18":213},[],[69],[],[78,86],[210],[78],[],[58,59,36],[208],[58,59],[],[58,106,114],[206],[58,106],[205,207],[58],["D",1751005409604],{"_11":12,"_172":168},{"_11":12,"_166":-5,"_167":168,"_129":130,"_169":170,"_171":55},{"_17":108,"_13":16,"_34":42,"_158":120,"_159":-5,"_160":-5,"_161":-5,"_162":-5,"_163":-5,"_164":14,"_165":12},"ctx",{"_151":-5,"_189":265,"_266":267,"_268":269,"_270":55,"_271":55,"_272":55,"_273":46,"_274":-5,"_275":-7,"_276":-7,"_277":49,"_278":55,"_279":55,"_280":-5,"_281":55,"_282":55,"_283":55,"_284":-5},"ENV",{"_236":237,"_238":239,"_240":16,"_241":242,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]