mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 11:49:28 +00:00
Marius CiepluchandClaude Opus 4.8
9c917dd6aa
A zero-dependency MCP server over stdio (newline-delimited JSON-RPC 2.0) for OpenCode/IDE integration, exposing only stable project-level operations. - mcp.py: McpServer (pure handle() dispatch) + serve() stdio loop, stdlib-only. Ten tools: openultrasast.scan/status/findings/get_finding/evidence/artifacts/ benchmark/explain/propose_patch/export_report. scan/benchmark run the bounded analysis pipeline; NO tool accepts a free-form command — no shell, Docker, or internal hunter tools are exposed. propose_patch degrades visibly (patch oracle is a later phase). initialize/tools/list/tools/call/ping handled; notifications get no response; errors surface as JSON-RPC errors instead of crashing the loop. - cli: `ousast mcp` subcommand launches the stdio server (lazy import → keeps the mcp↔cli cycle one-directional). - tests/test_mcp.py: tool listing is exactly the narrow surface, surface-safety (no shell/exec/command tool), scan→status→findings→explain→evidence flow, export_report, propose_patch degradation, and the stdio loop round-trip. - README "MCP server" section; openrouter-sast-harness Phase 12 checked off. Verified end-to-end over real stdio (initialize → tools/list → scan). 179 passed, 4 skipped; ruff + mypy clean; detection gate PASS. Co-Authored-By: Claude Opus 4.8 <[email protected]>