{
  "markdown": "<div align=\"center\">\n\n# ArchitectOS\n\n### AI-Native Repository Intelligence & Governance Engine\n\nArchitectOS analyzes your repository, explains its architecture, calculates change impact, and enforces guardrails for AI Agents (Claude Code / Cursor / Codex).\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)\n[![NPM Version](https://img.shields.io/badge/npm-v1.3.1-orange.svg)](https://www.npmjs.com/package/architectos)\n[![Dogfooded with ArchitectOS](https://img.shields.io/badge/ArchitectOS-Self--Hosted-emerald.svg)](https://github.com/cgseyhan/architectos)\n[![Node.js](https://img.shields.io/badge/node-%3E%3D20.0.0-green.svg)](https://nodejs.org/)\n[![MCP Ready](https://img.shields.io/badge/MCP-Native-purple.svg)](https://modelcontextprotocol.io/)\n\n</div>\n\n---\n\n> **Strict Product Mandate**: ArchitectOS **never** modifies user code directly; it exclusively analyzes, explains, calculates impact, and generates actionable refactoring plans. Code modifications are executed by AI Agents or human developers.\n\n---\n\n## ⚡ Quickstart & Core Commands\n\n```bash\n# 1. Initialize and review repository\nnpx architectos\n\n# 2. High-level repository health, security & UI review (with optional CI threshold)\narchitectos review\narchitectos review --threshold 80\n\n# 3. Component deep-dive (supports --why, --ui, --dead, --duplication, --taint)\narchitectos analyze toolbar.tsx\narchitectos analyze toolbar.tsx --why\narchitectos analyze --ui\narchitectos analyze --dead\narchitectos analyze --duplication\narchitectos analyze --taint auth.controller.ts\n\n# 4. View historical score timeline and trend\narchitectos history\n\n# 5. Cross-graph downstream change impact & risk rating\narchitectos impact auth.ts\n\n# 6. Structured refactoring migration plan\narchitectos plan toolbar.tsx\n\n# 7. Symbol resolver & natural language architecture query\narchitectos resolve WorkspaceRepository\narchitectos resolve \"Where is tenant isolation enforced?\"\n\n# 8. Native MCP server gateway & live watcher\narchitectos watch\narchitectos mcp\n```\n\n---\n\n## 🏛️ The ArchitectOS Pipeline\n\n```text\narchitectos review               # High-level health & problem breakdown (--threshold 80)\n      ↓\narchitectos analyze <target>     # Deep-dive (--why, --ui, --dead, --duplication, --taint)\n      ↓\narchitectos impact <target>      # Cross-graph downstream change risk\n      ↓\narchitectos plan <target>        # Step-by-step refactoring migration plan\n      ↓\narchitectos resolve <symbol>     # Hallucination shield & symbol resolver\n      ↓\narchitectos history              # Historical score timeline & trend tracking\n      ↓\nAI Agent / Developer executes refactor\n```\n\n---\n\n## 🎯 Engine Precision & Accuracy Features\n\n- **25 CWE-Mapped SAST Engine**: High-precision rules covering SQLi, XSS, RCE, ReDoS, Prototype Pollution, NoSQLi, Open Redirect, Unsafe Deserialization, and Weak Cryptography.\n- **Context-Aware Noise Filter**: Automatically suppresses false positives inside test blocks (`describe`/`it`), JSDoc comments, dead conditional branches, and when known sanitizers (`DOMPurify`, `escapeHtml`) are detected.\n- **Multi-File Taint Tracking Engine**: Traces untrusted user inputs (HTTP `req.body`/`searchParams`) down to dangerous execution sinks across multi-file import graphs.\n- **Code Duplication Scanner**: Token-fingerprinted Jaccard similarity engine detecting copy-pasted code blocks across monorepo packages.\n- **Framework Entrypoint Whitelist**: Eliminates false positives for Next.js (`GET`, `POST`, `generateMetadata`, `middleware`), Remix, Vitest, and CLI entrypoints.\n- **Tarjan SCC Cycle Detection**: Mathematically sound circular dependency cycle detection for complex monorepos.\n- **Public Scoring Transparency**: Fully documented formulas and deduction rules in [SCORING.md](SCORING.md).\n\n---\n\n## 🧪 Real-World Benchmark Verification (v1.2.1 Engine Breakdown)\n\nArchitectOS is battle-tested and dogfooded across major open-source codebases with transparent sub-metric scoring:\n\n| Repository | Files | Overall | Arch | Sec | Qual | AI | UI | Scan Speed | Top Focus Area |\n| :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- |\n| **`excalidraw/excalidraw`** | 520+ | **88/100** | 92 | 84 | 90 | 94 | 80 | **<18ms** | Canvas Component Decomposition |\n| **`calcom/cal.com`** | 1,400+ | **84/100** | 80 | 88 | 82 | 90 | 80 | **<45ms** | Booking Service Layer Isolation |\n| **`shadcn/ui`** | 120+ | **96/100** | 98 | 95 | 96 | 95 | 96 | **<8ms** | UI Component Primitive Boundaries |\n| **`cgseyhan/architectos`** | 51 | **100/100** | 100 | 100 | 100 | 100 | N/A | **<19ms** | Native Self-Hosted AST Governance |\n\n*Note: Pure CLI / backend repositories (e.g. `architectos`) omit UI Architecture scoring.*\n\n---\n\n## 🤖 Native MCP Server Integration\n\nAdd ArchitectOS to your Claude Code, Cursor, or Codex MCP configuration:\n\n```json\n{\n  \"mcpServers\": {\n    \"architectos\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"architectos\", \"mcp\"]\n    }\n  }\n}\n```\n\n### Registered MCP Tools\n- `architectos_review`: Repository health & problem breakdown.\n- `architectos_why`: Root-cause coupling analysis.\n- `architectos_impact`: Polyglot change impact calculator.\n- `architectos_plan`: Step-by-step migration refactoring plan.\n- `architectos_resolve`: Symbol resolver & hallucination shield.\n- `architectos_dead`: Unused exports & zombie code detector.\n- `architectos_ui`: Framework-agnostic UI component composition & boundary audit.\n- `architectos_remember`: Store persistent architectural guardrail rules.\n\n---\n\n## 📄 License\n\nMIT License © 2026 ArchitectOS Authors\n",
  "bytes": 5572,
  "sha": "2f3a47dc36f40fc2d803d34c009b46c8213f285f6e13151fc7ed25aa0860abc6",
  "repo_slug": "cgseyhan/architectos",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_cgseyhan_architectos_26fc2e74/readme"
}