topos_evaluate_project
Recursively score all supported source files in a directory on SIMPLE, COMPOSABLE, and SECURE dimensions, with automatic language detection and project-wide rollup.
Instructions
Recursively score every supported source file in a directory on the
SIMPLE / COMPOSABLE / SECURE lattice, with a project rollup
(side-effecting).
Autodetects all supported languages (Python, Rust, JavaScript,
TypeScript, C++, Go) in one walk — no language argument — and skips
unsupported files. The rollup takes the project-wide minimum per
dimension (weakest file floors it). Returns a paginated per-file
table (worst first) plus per-language rollups; page with limit /
offset.
Unless no_composable is set, generates/refreshes .gitnexus when
missing or stale before scoring, same as topos_evaluate_file and
the CLI's topos evaluate — coupling_available/warnings explain
it when that isn't possible, without failing the evaluation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Directory to evaluate, walked recursively. Must resolve inside the trusted file root; paths outside it are refused. All supported languages are autodetected — no language argument is needed. | |
| allow | No | Dangerous-call patterns to acknowledge for this run only. | |
| limit | No | Per-file rows to return per page (1–500, default 25). | |
| offset | No | Zero-based row offset for pagination; pass the response's `next_offset` to fetch the next page. | |
| verbose | No | When true, include each file's raw metric values alongside scores. | |
| preferences | No | Optional ranking of simple/composable/secure (best first). The top-ranked generator sets scorer priority; omit to default to SIMPLE priority. | |
| gitnexus_dir | No | Path to a `.gitnexus` dependency-graph directory, for COMPOSABLE scoring. When omitted, it is auto-detected from the project root; if missing or stale, this tool generates/refreshes it first (see `no_composable`). If generation isn't possible (GitNexus not installed, generation failure), COMPOSABLE is reported as unavailable rather than failing the whole evaluation. | |
| no_composable | No | Skip GitNexus detection/generation; score SIMPLE/SECURE only, exactly like a missing `.gitnexus` did before this tool started generating it automatically. | |
| include_security_findings | No | When true, attach per-file SECURE findings to each entry; off by default to keep responses compact. |