High-performance Rust MCP codebase intelligence and persistent memory engine for AI coding agents. Provides incremental git-based indexing, code chunk parsing, dependency tracking, failure vault, community solutions, and adversarial test generation.
CodeMemoryPrime exhibits significant definition quality gaps. While 15 tools are registered with descriptions and input schemas, most descriptions are terse (avg ~60 chars, well below the 194-char baseline). Parameter descriptions are sparse or missing entirely. Many tools lack output schema documentation. Tool names follow verb_noun convention but several are overly complex (e.g., 'generate_adversarial_test_harness', 'audit_and_sanitize_payload'). No tool annotations (readOnlyHint, destructiveHint, idempotentHint) are present despite clear risk levels. Error handling is not visible in the provided code, no recovery guidance, categorization, or actionable error messages. Security concerns: 'audit_and_sanitize_payload' accepts 'code' and 'text' as free-form strings with no validation hints; 'store_vault_failure' accepts 'signature' without explaining format or constraints.
Adapts code templates to domain-specific lexicon by mapping placeholder roles to domain context (sci-fi, western, medieval, retail, etc.)
Sanitizes code and text payloads by detecting prompt injection, malware patterns, and API key leaks; returns sanitized code and security verdict
Evaluates solution quality score (0-100) based on complexity, LOC brevity, quorum confirmations, and compiler exit code
Prunes orphaned AST chunks and stale session handoffs whose source files no longer exist on disk
Computes a normalized structural AST signature to deduplicate identical code with different variable names or formatting
Generates adversarial test harness with boundary, overflow, concurrency, and injection payload test cases for a given function
No output schemas documented. Tools return structured data (GitReindexSummary, etc.) but LLMs cannot see field names, types, or what to expect. Breaks downstream tool chaining and forces LLMs to guess response structure.
Tool names contain 'and' or are overly complex. 'audit_and_sanitize_payload' combines two concerns (audit + sanitize); 'generate_adversarial_test_harness' is 5 words. LLMs struggle to parse intent from long names. Split or simplify.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 46 | <=2025-11-25 | v2 |
Loads a session handoff record for a given project
Query recorded video analyses and architecture upgrades from research vault
Queries failure vault for dead-end patterns matching a query term, with staleness scoring and anti-tampering verification
Runs incremental re-indexing based on git status --porcelain to track modified, added, and deleted files
Classifies task workload and payload size to recommend Tier 1 (Lightweight) vs Tier 2 (Pro) models
Run full system preflight audit
Sync GPU roster and export local delta snapshot
Saves a session handoff record containing task goal, completed steps, open questions, and active files
Stores a failure record in the failure vault with HMAC anti-tampering signature
Descriptions are terse (avg ~60 chars vs 194-char baseline). Most lack WHEN to use, prerequisites, or side effects. E.g., 'Sync GPU roster and export local delta snapshot' is cryptic, what is a 'GPU roster'? What does 'delta snapshot' mean? Rewrite for clarity.
No tool annotations (readOnlyHint, destructiveHint, idempotentHint) despite clear risk levels. 'clean_stale_context' is DESTRUCTIVE but unmarked. 'run_preflight_audit' is READ_ONLY but unmarked. Agents cannot reason about safety without annotations.
Parameter descriptions missing or vague. 'endpoint' in run_sync_memory says 'Optional endpoint URL' but does not explain format, default, or what happens if omitted. 'signature' in store_vault_failure lacks format/length constraints. 'domain_context' in adapt_code_to_domain lists examples but no enum.