[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_231":232,"_233":234},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_172":-5,"_20":173,"_22":174,"_175":176,"_177":178,"_26":179,"_24":180,"_181":-5,"_182":-5,"_183":55,"_184":185,"_186":55,"_187":-5,"_188":-5,"_189":190},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","canstralian","name","CyberGenie","branchName","main","version","path","shared","project",{"_34":119,"_13":14,"_47":120,"_121":-5,"_122":55,"_123":124,"_125":124,"_126":-5,"_127":-5,"_128":129,"_130":-5,"_131":55,"_132":-5,"_133":-5,"_134":68,"_135":136,"_137":-5,"_138":-5,"_139":-5,"_140":-5,"_141":142,"_143":142,"_144":145,"_146":145,"_147":145,"_148":142,"_149":142,"_150":151,"_152":153,"_154":155,"_156":55},"tree",[62,63,64],"file",{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":59,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_18":61},"contents",[33],"upstream","pull","ahead","behind","envVars",{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":57},"id","1b3cac84-534b-11f0-b305-f69ea79377d9","types.ts","fileId","1b3cad4c-534b-11f0-b305-f69ea79377d9","parentId","b798d0cf-77aa-41d8-bca1-8bc9de94dd9d","branchId","3de7c61e-531f-11f0-935e-f69ea79377d9","branchVersion",2,"latest",true,"createdAt",["D",1751024249296],0,"fileType","script","content","// Shared types for the MCP Code Analysis Server\n\nexport interface AnalysisRequest {\n code?: string;\n files?: string[];\n language: string;\n tools?: string[];\n config?: Record;\n}\n\nexport interface Finding {\n id: string;\n severity: 'error' | 'warning' | 'info';\n message: string;\n file?: string;\n line: number;\n column: number;\n endLine?: number;\n endColumn?: number;\n rule: string;\n category: 'security' | 'performance' | 'style' | 'bug' | 'maintainability';\n suggestion?: string;\n}\n\nexport interface ToolResult {\n tool: string;\n findings: Finding[];\n metadata: {\n executionTime: number;\n rulesApplied: number;\n version: string;\n exitCode?: number;\n stderr?: string;\n };\n}\n\nexport interface AnalysisResponse {\n results: ToolResult[];\n summary: {\n totalFindings: number;\n errors: number;\n warnings: number;\n info: number;\n toolsUsed: string[];\n totalExecutionTime: number;\n };\n}\n\nexport interface ToolCapability {\n name: string;\n displayName: string;\n description: string;\n supportedLanguages: string[];\n categories: string[];\n version: string;\n available: boolean;\n configSchema?: Record;\n}\n\nexport interface ToolsResponse {\n tools: ToolCapability[];\n totalAvailable: number;\n}\n\nexport interface HealthResponse {\n status: 'healthy' | 'degraded' | 'unhealthy';\n timestamp: string;\n version: string;\n tools: {\n name: string;\n status: 'available' | 'unavailable' | 'error';\n version?: string;\n }[];\n}","deleted",false,"label",[19,36],"1b3cb396-534b-11f0-b305-f69ea79377d9",["D",1751024249296],"directory",[19],{"_34":81,"_13":82,"_37":83,"_39":-5,"_41":42,"_43":84,"_45":46,"_47":85,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":86,"_18":87},{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":74,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":75,"_18":76},{"_34":65,"_13":66,"_37":67,"_39":-5,"_41":42,"_43":68,"_45":46,"_47":69,"_17":49,"_50":24,"_52":70,"_54":55,"_56":-5,"_71":72,"_18":73},"12fc8594-534b-11f0-8a90-f69ea79377d9","README.md","12fc862a-534b-11f0-8a90-f69ea79377d9",1,["D",1751024235463],"# MCP Code Analysis Server\n\nA pluggable MCP-compatible server that exposes a standardized `/analyze` API for CLI-based code analysis tools. This allows editors like Cursor or VS Code to request code analysis from various tools (Semgrep, ESLint, Pylint, etc.) and receive unified, structured results.\n\n## Features\n\n- **Standardized API**: Single `/analyze` endpoint for all analysis tools\n- **Plugin Architecture**: Easy to add new analysis tools\n- **MCP Compatible**: Follows Model Context Protocol standards\n- **Unified Results**: Consistent output format across all tools\n- **Tool Discovery**: Automatic detection of available analysis tools\n- **Configurable**: Support for tool-specific configurations\n\n## API Endpoints\n\n### `POST /analyze`\nAnalyze code using specified tools and return unified results.\n\n**Request Body:**\n```json\n{\n \"code\": \"string\", // Code to analyze (optional if files provided)\n \"files\": [\"path1\", \"path2\"], // File paths to analyze (optional if code provided)\n \"language\": \"javascript\", // Programming language\n \"tools\": [\"semgrep\", \"eslint\"], // Analysis tools to use (optional, defaults to auto-detect)\n \"config\": { // Tool-specific configurations\n \"semgrep\": { \"rules\": [\"security\"] },\n \"eslint\": { \"extends\": [\"recommended\"] }\n }\n}\n```\n\n**Response:**\n```json\n{\n \"results\": [\n {\n \"tool\": \"semgrep\",\n \"findings\": [\n {\n \"id\": \"rule-id\",\n \"severity\": \"error|warning|info\",\n \"message\": \"Description of the issue\",\n \"file\": \"path/to/file.js\",\n \"line\": 42,\n \"column\": 10,\n \"endLine\": 42,\n \"endColumn\": 25,\n \"rule\": \"rule-name\",\n \"category\": \"security|performance|style|bug\"\n }\n ],\n \"metadata\": {\n \"executionTime\": 1.23,\n \"rulesApplied\": 150,\n \"version\": \"1.0.0\"\n }\n }\n ],\n \"summary\": {\n \"totalFindings\": 5,\n \"errors\": 2,\n \"warnings\": 3,\n \"info\": 0,\n \"toolsUsed\": [\"semgrep\", \"eslint\"]\n }\n}\n```\n\n### `GET /tools`\nList available analysis tools and their capabilities.\n\n### `GET /health`\nHealth check endpoint.\n\n## Project Structure\n\n```\n├── backend/\n│ ├── index.ts # Main Hono server\n│ ├── plugins/ # Analysis tool plugins\n│ │ ├── base.ts # Base plugin interface\n│ │ ├── semgrep.ts # Semgrep plugin\n│ │ ├── eslint.ts # ESLint plugin\n│ │ └── registry.ts # Plugin registry\n│ ├── services/\n│ │ ├── analyzer.ts # Main analysis service\n│ │ └── unifier.ts # Result unification service\n│ └── types/\n│ └── analysis.ts # Type definitions\n├── shared/\n│ └── types.ts # Shared types\n└── README.md\n```\n\n## Supported Tools\n\n- **Semgrep**: Static analysis for security, bugs, and code quality\n- **ESLint**: JavaScript/TypeScript linting\n- **Pylint**: Python code analysis\n- **ShellCheck**: Shell script analysis\n- **Bandit**: Python security analysis\n- **Extensible**: Easy to add more tools via plugin system\n\n## Usage\n\n1. Start the server (automatically deployed on Val Town)\n2. Send analysis requests to `/analyze`\n3. Receive unified results from multiple tools\n\n## Development\n\nThe server uses a plugin architecture where each analysis tool is implemented as a plugin that conforms to the `AnalysisPlugin` interface. New tools can be added by creating a new plugin file in the `backend/plugins/` directory.","children",[],[66],["D",1751024249296],[77],[19],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":78,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_71":79,"_18":80},["D",1751024249296],[],[19,36],"226ecc8a-534b-11f0-acb5-f69ea79377d9","backend","03ca57ab-b0bd-4f36-a844-678612099b5d",3,["D",1751024261372],[88,89],[82],{"_34":104,"_13":105,"_37":106,"_39":83,"_41":42,"_43":107,"_45":46,"_47":108,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":109,"_18":110},{"_34":90,"_13":91,"_37":92,"_39":83,"_41":42,"_43":84,"_45":46,"_47":93,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":94,"_18":95},"226ece38-534b-11f0-acb5-f69ea79377d9","types","88bc5ef7-b9a8-4069-9c28-e62fc16ee03a",["D",1751024261372],[96],[82,91],{"_34":97,"_13":98,"_37":99,"_39":92,"_41":42,"_43":84,"_45":46,"_47":100,"_17":49,"_50":51,"_52":101,"_54":55,"_56":-5,"_71":102,"_18":103},"226ec582-534b-11f0-acb5-f69ea79377d9","analysis.ts","226ec62c-534b-11f0-acb5-f69ea79377d9",["D",1751024261372],"import type { Finding, ToolResult, ToolCapability } from \"../../shared/types.ts\";\n\nexport interface AnalysisPlugin {\n name: string;\n displayName: string;\n description: string;\n supportedLanguages: string[];\n categories: string[];\n \n // Check if the tool is available on the system\n isAvailable(): Promise;\n \n // Get tool version\n getVersion(): Promise;\n \n // Get tool capabilities\n getCapabilities(): Promise;\n \n // Analyze code or files\n analyze(options: AnalysisOptions): Promise;\n \n // Validate configuration\n validateConfig(config: any): boolean;\n \n // Get default configuration\n getDefaultConfig(): Record;\n}\n\nexport interface AnalysisOptions {\n code?: string;\n files?: string[];\n language: string;\n config?: Record;\n workingDirectory?: string;\n}\n\nexport interface PluginExecutionContext {\n tempDir: string;\n workingDir: string;\n timeout: number;\n}\n\nexport interface CommandResult {\n stdout: string;\n stderr: string;\n exitCode: number;\n executionTime: number;\n}\n\n// Plugin registry interface\nexport interface PluginRegistry {\n register(plugin: AnalysisPlugin): void;\n getPlugin(name: string): AnalysisPlugin | undefined;\n getAllPlugins(): AnalysisPlugin[];\n getAvailablePlugins(): Promise;\n getPluginsForLanguage(language: string): AnalysisPlugin[];\n}",[],[82,91,98],"364a7182-534b-11f0-bd47-f69ea79377d9","plugins","ef35dacc-3ed7-4561-9c06-750cc4e659c8",4,["D",1751024294690],[111],[82,105],{"_34":112,"_13":113,"_37":114,"_39":106,"_41":42,"_43":107,"_45":46,"_47":115,"_17":49,"_50":51,"_52":116,"_54":55,"_56":-5,"_71":117,"_18":118},"364a5a9e-534b-11f0-bd47-f69ea79377d9","base.ts","364a5b70-534b-11f0-bd47-f69ea79377d9",["D",1751024294690],"import type { \n AnalysisPlugin, \n AnalysisOptions, \n CommandResult,\n PluginExecutionContext \n} from \"../types/analysis.ts\";\nimport type { Finding, ToolResult, ToolCapability } from \"../../shared/types.ts\";\n\nexport abstract class BaseAnalysisPlugin implements AnalysisPlugin {\n abstract name: string;\n abstract displayName: string;\n abstract description: string;\n abstract supportedLanguages: string[];\n abstract categories: string[];\n \n protected timeout = 30000; // 30 seconds default timeout\n \n abstract isAvailable(): Promise;\n abstract getVersion(): Promise;\n abstract analyze(options: AnalysisOptions): Promise;\n \n async getCapabilities(): Promise {\n const available = await this.isAvailable();\n const version = available ? await this.getVersion() : 'N/A';\n \n return {\n name: this.name,\n displayName: this.displayName,\n description: this.description,\n supportedLanguages: this.supportedLanguages,\n categories: this.categories,\n version,\n available,\n configSchema: this.getConfigSchema()\n };\n }\n \n validateConfig(config: any): boolean {\n // Default implementation - override in specific plugins\n return true;\n }\n \n getDefaultConfig(): Record {\n return {};\n }\n \n protected getConfigSchema(): Record {\n return {};\n }\n \n // Utility method to execute shell commands\n protected async executeCommand(\n command: string, \n args: string[], \n options: { cwd?: string; timeout?: number } = {}\n ): Promise {\n const startTime = Date.now();\n \n try {\n // In Val Town, we'll simulate command execution since we can't run arbitrary commands\n // In a real environment, this would use Deno.Command or similar\n const result = await this.simulateCommand(command, args, options);\n \n return {\n ...result,\n executionTime: (Date.now() - startTime) / 1000\n };\n } catch (error) {\n return {\n stdout: '',\n stderr: error instanceof Error ? error.message : 'Unknown error',\n exitCode: 1,\n executionTime: (Date.now() - startTime) / 1000\n };\n }\n }\n \n // Simulate command execution for Val Town environment\n // In a real environment, this would be replaced with actual command execution\n protected async simulateCommand(\n command: string, \n args: string[], \n options: { cwd?: string; timeout?: number } = {}\n ): Promise> {\n // This is a simulation for the Val Town environment\n // In production, you'd replace this with actual command execution\n \n if (command === 'semgrep' && args.includes('--version')) {\n return {\n stdout: 'semgrep 1.45.0',\n stderr: '',\n exitCode: 0\n };\n }\n \n if (command === 'eslint' && args.includes('--version')) {\n return {\n stdout: 'v8.50.0',\n stderr: '',\n exitCode: 0\n };\n }\n \n if (command === 'pylint' && args.includes('--version')) {\n return {\n stdout: 'pylint 2.17.0',\n stderr: '',\n exitCode: 0\n };\n }\n \n // Simulate analysis results\n if (command === 'semgrep' && args.includes('--json')) {\n return {\n stdout: JSON.stringify({\n results: [\n {\n check_id: 'javascript.lang.security.audit.xss.direct-response-write',\n path: 'example.js',\n start: { line: 10, col: 5 },\n end: { line: 10, col: 25 },\n message: 'Potential XSS vulnerability',\n severity: 'ERROR',\n extra: {\n message: 'Direct write to response without sanitization',\n metadata: { category: 'security' }\n }\n }\n ]\n }),\n stderr: '',\n exitCode: 0\n };\n }\n \n // Default simulation\n return {\n stdout: '[]',\n stderr: '',\n exitCode: 0\n };\n }\n \n // Utility method to create temporary files\n protected async createTempFile(content: string, extension: string): Promise {\n // In Val Town, we'll use a simple approach\n // In production, you'd create actual temp files\n const filename = `temp_${Date.now()}.${extension}`;\n return filename;\n }\n \n // Utility method to normalize findings\n protected normalizeFinding(\n rawFinding: any, \n tool: string, \n file?: string\n ): Finding {\n return {\n id: rawFinding.id || rawFinding.check_id || `${tool}-${Date.now()}`,\n severity: this.normalizeSeverity(rawFinding.severity),\n message: rawFinding.message || rawFinding.description || 'No description',\n file: file || rawFinding.path || rawFinding.file,\n line: rawFinding.line || rawFinding.start?.line || 1,\n column: rawFinding.column || rawFinding.start?.col || 1,\n endLine: rawFinding.endLine || rawFinding.end?.line,\n endColumn: rawFinding.endColumn || rawFinding.end?.col,\n rule: rawFinding.rule || rawFinding.check_id || rawFinding.ruleId || 'unknown',\n category: this.normalizeCategory(rawFinding.category || rawFinding.type),\n suggestion: rawFinding.suggestion || rawFinding.fix\n };\n }\n \n private normalizeSeverity(severity: any): 'error' | 'warning' | 'info' {\n if (!severity) return 'info';\n \n const s = severity.toString().toLowerCase();\n if (s.includes('error') || s.includes('critical') || s.includes('high')) {\n return 'error';\n }\n if (s.includes('warn') || s.includes('medium')) {\n return 'warning';\n }\n return 'info';\n }\n \n private normalizeCategory(category: any): Finding['category'] {\n if (!category) return 'bug';\n \n const c = category.toString().toLowerCase();\n if (c.includes('security')) return 'security';\n if (c.includes('performance')) return 'performance';\n if (c.includes('style') || c.includes('format')) return 'style';\n if (c.includes('maintain')) return 'maintainability';\n return 'bug';\n }\n}",[],[82,105,113],"3de630ba-531f-11f0-935e-f69ea79377d9",["D",1751005409604],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","6ba47c70-3ce3-11f0-8a84-ab0596bba6f5","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","a956f3ab-c5b6-4f16-a22e-9bcb0079d529","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_171":167},"org",{"_11":12,"_165":-5,"_166":167,"_128":129,"_168":169,"_170":55},"branch",{"_17":107,"_13":16,"_34":42,"_157":119,"_158":-5,"_159":-5,"_160":-5,"_161":-5,"_162":-5,"_163":14,"_164":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJ5dncxVUwwR0NJUlhncHZ1a2NHMXZxS1g5ZSJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":119,"_13":14,"_47":227,"_121":-5,"_122":55,"_123":124,"_125":124,"_126":-5,"_127":-5,"_128":129,"_130":-5,"_131":55,"_132":-5,"_133":-5,"_134":68,"_135":136,"_137":-5,"_138":-5,"_139":-5,"_140":-5,"_141":142,"_143":142,"_144":145,"_146":145,"_147":145,"_148":142,"_149":142,"_150":228,"_152":229,"_154":230,"_156":55},[203,208,210],"files",[203,204,205,206,207,208,209,210],"counts",{"_194":49,"_195":68,"_196":49,"_32":197,"_198":199},[192],{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":59,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_18":191},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_18":193},[19,36],"pulls","branches","forks",{"_200":49,"_202":49},"connections",{"_200":49,"_201":49},"count","unfilledCount","emptyCount",{"_34":81,"_13":82,"_37":83,"_39":-5,"_41":42,"_43":84,"_45":46,"_47":85,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":225,"_18":226},{"_34":104,"_13":105,"_37":106,"_39":83,"_41":42,"_43":107,"_45":46,"_47":108,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":223,"_18":224},{"_34":112,"_13":113,"_37":114,"_39":106,"_41":42,"_43":107,"_45":46,"_47":115,"_17":49,"_50":51,"_52":116,"_54":55,"_56":-5,"_71":221,"_18":222},{"_34":90,"_13":91,"_37":92,"_39":83,"_41":42,"_43":84,"_45":46,"_47":93,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":219,"_18":220},{"_34":97,"_13":98,"_37":99,"_39":92,"_41":42,"_43":84,"_45":46,"_47":100,"_17":49,"_50":51,"_52":101,"_54":55,"_56":-5,"_71":217,"_18":218},{"_34":58,"_13":19,"_37":40,"_39":-5,"_41":42,"_43":44,"_45":46,"_47":74,"_17":49,"_50":60,"_52":-5,"_54":55,"_56":-5,"_71":215,"_18":216},{"_34":35,"_13":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":78,"_17":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_71":213,"_18":214},{"_34":65,"_13":66,"_37":67,"_39":-5,"_41":42,"_43":68,"_45":46,"_47":69,"_17":49,"_50":24,"_52":70,"_54":55,"_56":-5,"_71":211,"_18":212},[],[66],[],[19,36],[209],[19],[],[82,91,98],[207],[82,91],[],[82,105,113],[205],[82,105],[204,206],[82],["D",1751005409604],{"_11":12,"_171":167},{"_11":12,"_165":-5,"_166":167,"_128":129,"_168":169,"_170":55},{"_17":107,"_13":16,"_34":42,"_157":119,"_158":-5,"_159":-5,"_160":-5,"_161":-5,"_162":-5,"_163":14,"_164":12},"ctx",{"_150":-5,"_188":264,"_265":266,"_267":268,"_269":55,"_270":55,"_271":55,"_272":46,"_273":-5,"_274":-7,"_275":-7,"_276":49,"_277":55,"_278":55,"_279":-5,"_280":55,"_281":55,"_282":55,"_283":-5},"ENV",{"_235":236,"_237":238,"_239":16,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]