codebase-intelligence CLAUDE.md

A project guide for a TypeScript package that analyses codebases, builds dependency graphs, and provides code-understanding tools through MCP, a standard tool interface for AI clients.

In plain words
What is it for?
Tracing dependencies and call chains, finding important or unused code, measuring architecture, planning symbol renames, searching code, and exporting or importing graph data.
Why use it?
It explains the system's architecture and where parsing, graph analysis, search, impact analysis, and server code live.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/bntvllnt/codebase-intelligence/claude-md
Clone the repo
git clone --depth 1 https://github.com/bntvllnt/codebase-intelligence
Per session 2,108 This file is loaded in full into every session.
When invoked 2,108 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02108 $0.02108
Opus 5 $0.01054 $0.01054
Sonnet 5 $0.00422 $0.00422
Haiku 4.5 $0.00211 $0.00211

Measured yesterday against content hash 9505d251ea5f, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

codebase-intelligence CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 201 lines

How it starts

The opening of the file, as written. The whole thing — 201 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Codebase Intelligence - Claude Code Rules

Project Overview

npm package that analyzes TypeScript codebases — parses source, builds dependency graphs, computes architectural metrics, and exposes everything via MCP stdio for LLM-assisted code understanding.

Architecture

src/
  types/index.ts      <- All TypeScript interfaces (single source of truth)
  parser/index.ts     <- TS Compiler API parser (files, functions, imports)
  graph/index.ts      <- graphology graph builder + circular dep detection
  analyzer/index.ts   <- Metrics engine (PageRank, betweenness, cohesion, tension, churn, complexity, blast radius, dead exports)
  mcp/index.ts        <- MCP stdio server (16 tools, 2 prompts, 3 resources)
  mcp/hints.ts        <- Next-step hints for MCP tool responses
  server/graph-store.ts <- Global graph state (shared by CLI + MCP)
  impact/index.ts     <- Symbol-level impact analysis + rename planning
  search/index.ts     <- BM25 search engine
  process/index.ts    <- Entry point detection + call chain tracing
  community/index.ts  <- Louvain clustering
  persistence/index.ts <- Graph export/import to .code-visualizer/
  install/index.ts    <- Agent adoption: managed-block engine + per-agent files + skill (init)
  config/index.ts     <- Config discovery + zod validation (codebase-intelligence.json)
  rules/index.ts      <- Rules engine + registry (check command + MCP check tool)
  cli.ts              <- CLI entry point (commander)
docs/
  architecture.md     <- Pipeline, module map, data flow, design decisions
  data-model.md       <- All TypeScript interfaces with field descriptions
  metrics.md          <- Per-file + module metrics, force analysis, complexity scoring
  mcp-tools.md        <- 16 MCP tools: inputs, outputs, use cases, selection guide
specs/
  active/             <- Current spec

Pipeline

CLI args -> Parser (TS AST) -> Graph Builder (graphology) -> Analyzer (metrics) -> MCP stdio

Key Conventions

TypeScript

  • ESM modules ("type": "module")
  • Bundler module resolution
  • Strict mode enabled
  • All internal imports use .js extension (ESM convention)
  • Types defined in src/types/index.ts — import from there, never duplicate
  • import type for type-only imports (enforced by ESLint)

Read the full file on GitHub · 201 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 201 lines · 2,108 tokens per session scan A 9505d251ea5f

Subscribe to this mod's changes

codebase-intelligence CLAUDE.md is an instructions file published in the GitHub repository bntvllnt/codebase-intelligence (7 stars, last pushed 2mo ago), licensed MIT. It adds 2,108 tokens to every session, about $0.0105 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.