# AMEVA MCP Advanced Toolkit

This repository provides a set of high-performance, WebAssembly (WASM) based Model Context Protocol (MCP) tools designed to enable secure, sandboxed, and zero-host-pollution operations directly within local runtime environments.

All operations are executed within the virtual memory of WASM runtimes compiled from Rust and C, ensuring zero-footprint local processing without host pollution or external network dependency.

Detailed tool-specific specifications, API schemas, and interface structures are available in the [WASM Engines Specification (Local File Link)](file:///c:/ameva/AMEVA-MCP-Advanced-Toolkit/wasm/README.md) and [WASM Engines Specification (GitHub Relative Link)](./wasm/README.md).

---

## Tool Suite Overview

| # | Tool Name | Engine/Language | Functional Description |
|---|-----------|-----------------|------------------------|
| 1 | `execute_sandbox` | C (QuickJS) | Zero-dependency, isolated JavaScript execution environment. |
| 2 | `disassemble_binary` | C (Capstone) | Local binary disassembler for x86/ARM machine code analysis. |
| 3 | `recover_file` | Rust | Raw byte structure parsing and reconstruction for damaged ZIP/PNG/JPEG/SQLite files. |
| 4 | `steg_encode` | Rust | Least Significant Bit (LSB) steganographic encoder. |
| 5 | `steg_decode` | Rust | Steganographic decoder to extract hidden payload from images. |
| 6 | `optimize_images` | Rust | High-speed, local image compression and format conversion (WebP/AVIF). |
| 7 | `process_dataframe` | Rust (Polars) | In-memory massive CSV/DataFrame query engine with SQL support. |
| 8 | `redact_pdf` | Rust | Secure personal identifiable information (PII) masking tool for PDF documents. |
| 9 | `scan_secrets` | Rust | Static analysis scanner for hardcoded API keys, tokens, and credentials. |
| 10 | `semantic_search` | Rust (ONNX) | In-browser semantic vector similarity search via local ONNX embeddings. |

---

## Build System

### Prerequisites
- Rust and target `wasm32-unknown-unknown`
- Node.js 18 or higher

### Build Environment Setup
```powershell
rustup target add wasm32-unknown-unknown
npm install
```

### Complete Compilation
```powershell
npm run build:all
```

---

## MCP Integration Configuration

To integrate this toolkit into Cursor, Claude Desktop, or other MCP clients, add the following configuration to your `mcpServers` profile:

```json
{
  "mcpServers": {
    "ameva-advanced": {
      "command": "node",
      "args": ["C:/ameva/AMEVA-MCP-Advanced-Toolkit/src/proxy.js"]
    }
  }
}
```

---

## Directory Structure

- [mcp_manifest.json](file:///c:/ameva/AMEVA-MCP-Advanced-Toolkit/mcp_manifest.json) : System-wide MCP tool schema definitions.
- [package.json](file:///c:/ameva/AMEVA-MCP-Advanced-Toolkit/package.json) : Build automation pipeline and dependencies.
- [src/proxy.js](file:///c:/ameva/AMEVA-MCP-Advanced-Toolkit/src/proxy.js) : JSON-RPC bridge handler bridging MCP clients to WASM modules.
- [wasm/](file:///c:/ameva/AMEVA-MCP-Advanced-Toolkit/wasm) : Sub-directory housing the source code and build workflows of the WASM engines.

---

## Security Principles

- **Zero Host Pollution**: No temporary or persistent files are written to the host filesystem during operations.
- **Offline First**: All computations are performed strictly inside the runtime's memory layout; network traffic is disabled.
- **Sandboxed Execution**: Virtual execution domains isolate operations, mitigating host-level security vulnerabilities.

---

AMEVA Universe — uno-km