Weavatrix Refactor

Weavatrix Refactor

The explicit source-write layer of the Weavatrix ecosystem; Core remains read-only.

Refactor across files without letting the agent guess.

Weavatrix Refactor is a native MCP server for coding agents. It finds a symbol through the repository graph, previews byte-exact edits, reports every same-named occurrence it could not prove, and writes only after an explicit, hash-bound confirmation.

The useful difference is not “AI can rename a word.” It is that the agent gets evidence before the write and a recoverable transaction after it.

Install

Run the native binary through npm:

npx -y weavatrix-refactor mcp /absolute/path/to/repository

Or install it with Cargo:

cargo install weavatrix-refactor --locked

weavatrix-refactor mcp /absolute/path/to/repository

An MCP client can start it directly. Prefer an absolute path, or Cursor's ${workspaceFolder} so the write server never follows the host process cwd:

{

"mcpServers": { "weavatrix-refactor": { "command": "npx", "args": ["-y", "weavatrix-refactor@1.0.15", "mcp", "${workspaceFolder}", "--profile=refactor"], "env": {"WEAVATRIX_ALLOW_SOURCE_EDITS": "1"} } } }

Leave WEAVATRIX_ALLOW_SOURCE_EDITS unset for preview-only sessions. Preview is a read; only a confirmed apply or rollback requires the gate. One process serves many calls at once. A call passes repository to select a child of the launch root; each child has its own graph, confirm token, and rollback, and a token from one child does not apply to another. Readers of one repository share a lock. A writer holds that lock alone, so another process receives REPO_BUSY and keeps its confirm token. Refactor does not expose Core's open_repo. A path outside the launch root needs --allow-retarget.

Install as a plugin

The repository also ships one plugin bundle for Cursor, Codex, Claude Code, and Grok Build. The plugin starts the extension-only profile, so it contributes the 12 Refactor methods without repeating Weavatrix Core's 43 read-only method definitions. Install the separate Weavatrix plugin when both surfaces are needed.

The bundled skill is optional and activates only for explicitly requested refactoring work. Its entry point stays short; each method has an individual reference card that is loaded only when needed.

• Cursor: search for Weavatrix Refactor after marketplace approval.
• Codex: add the Weavatrix/weavatrix-refactor marketplace from .agents/plugins, then add weavatrix-refactor@weavatrix-refactor.
• Claude Code: add the same repository marketplace from .claude-plugin, then install weavatrix-refactor@weavatrix-refactor.
• Grok Build: run grok plugin marketplace add Weavatrix/weavatrix-refactor, open /marketplace, and install it.

The plugin opens WEAVATRIX_ALLOW_SOURCE_EDITS=1, but every write still needs the exact preview's short-lived, plan-bound single-use token.

For a rename task, expose only the two tools the agent needs:

weavatrix-refactor mcp /absolute/path/to/repository --profile=rename

The rename profile keeps rename_symbol and rollback_last_apply; every unrelated graph and refactor tool is absent and cannot be called. Omit the option (or use --profile=refactor) for all 12 Refactor methods. The narrower catalog reduces repeated agent context; it does not weaken preview hashes, the write gate, the confirmation token, or rollback checks.

When Weavatrix Core is already installed as a separate MCP, expose only the 12 methods that Refactor adds:

weavatrix-refactor mcp /absolute/path/to/repository --profile=refactor

The refactor profile is the default for MCP and list-tools, including the marketplace plugin. The former full compatibility profile has been removed and is rejected by both commands: Refactor no longer republishes Core methods. Install Weavatrix Core as its own MCP when read-only repository intelligence is also needed.

A safe cross-file rename in three calls

Suppose two files declare resolveTarget. A bare name is ambiguous, so the server refuses to pick one and returns exact ids:

// rename_symbol

{"symbol":"resolveTarget","new_name":"locateTarget","output_format":"json"}

{ "status": "NOT_FOUND", "reason": "the name matches more than one symbol; pass one of the candidate ids", "candidates": [ "symbol:src/core.ts#function:resolveTarget@2:1", "symbol:src/shadow.ts#function:resolveTarget@3:1" ] }

Retry with the intended id. The result is still read-only: it contains the edit plan, content hashes, the proven edit count, and the references the backend refused to guess at.

// rename_symbol

{ "symbol": "symbol:src/core.ts#function:resolveTarget@2:1", "new_name": "locateTarget", "output_format": "json" }

{ "status": "PLANNED", "completeness": "PARTIAL", "renamedEdits": 7, "uncertainReferences": ["... three named locations ..."], "confirmToken": "single-use-token", "plan": {"schemaVersion":"weavatrix.edit-plan.v1","files":["..."]} }

After reviewing the plan, repeat the same operation with the same inputs and its token:

// rename_symbol

{ "symbol": "symbol:src/core.ts#function:resolveTarget@2:1", "new_name": "locateTarget", "mode": "apply", "confirm_token": "single-use-token", "output_format": "json" }

{"status":"APPLIED"}

This exact flow is exercised against the real stdio MCP server. The repository fixture requires seven edits across three files, preserves four traps (a longer identifier, string, comment, and unrelated shadow), and must still compile; it scores 12/12.

What is automatic today

The twelve tools do not all claim the same level of automation:

Refactor uses the Rust Weavatrix graph internally for evidence but never exports Core methods. Install the separate Weavatrix plugin for read-only repository intelligence. The Refactor MCP owns exactly its 12 extension methods; --profile=rename is an optional narrower two-method workflow.

Safety model and exact limits

• Ambiguous names fail with candidate ids instead of selecting the first match.
• PARTIAL means the graph proved the edits in the plan but did not prove that no other semantic references exist. uncertainReferences names the places requiring review.
• Every file in a plan carries a content hash. A changed working tree makes the preview stale instead of applying the old coordinates.
• Apply requires WEAVATRIX_ALLOW_SOURCE_EDITS=1 plus a short-lived, single-use token bound to that repository and exact recomputed plan.
• rollback_last_apply refuses to overwrite files that drifted after the transaction.
• Multi-file writes are journaled and crash-recoverable. Another Refactor process that is reading or writing the same repository receives REPO_BUSY until the call finishes. The confirm token stays usable.

Only edits with proven provenance are applied. A lexical or graph backend is deliberately more conservative than a language server and must not be read as a claim of full compiler semantics.

MCP methods

The default profile exposes these twelve methods. --profile=rename keeps only rename_symbol and rollback_last_apply. A planning method returns an edit plan. apply_edit_plan is the write for every plan except the two rename methods, which apply themselves when mode is "apply".

rename_symbol

Renames one symbol from the graph. A bare name that matches more than one symbol returns NOT_FOUND and the candidate ids. The preview lists the declaration and every call or reference the graph proves, plus import lines of files the graph proves import the declaring file. A same-named occurrence the graph does not prove stays in uncertainReferences and is left unchanged. Completeness stays PARTIAL. Repeat the same symbol and new_name with mode:"apply" and the preview token to write. A missing source span is NOT_A_SYMBOL. A route label is renamed as a path literal.

rename_related_symbols

Renames several symbols in one transaction. The sites are the same ones rename_symbol can prove, in every indexed language. Two symbols given one new name, or two edits of the same site, return CONFLICT. A chain or a swap is applied together and reported in ordering. Completeness stays PARTIAL. Preview returns the token; mode:"apply" with that token writes the whole batch.

change_signature

Plans an added or removed parameter in every indexed language. Kotlin is read with the Java tokenizer. A typed language copies the previous parameter's type. When the new parameter has a default, existing calls stay. Without a default, proven calls are edited when the call supplies a value. A call the graph missed is edited only when that name is declared once and its argument list can be read; otherwise the call is listed. The result stays PARTIAL. Spread arguments are reported and left unchanged. Apply the returned plan with apply_edit_plan.

edit_symbol

Plans a replacement or insertion inside one declaration. The range runs from the declaration through the matching brace or the indent block. When only the signature line can be located, the plan is PARTIAL and warns DECLARATION_END_UNPROVEN. Every plan warns that syntax was not checked. Apply it with apply_edit_plan.

bulk_replace

Plans a literal or regular-expression replacement over indexed code, in two stages: list the occurrences, then plan the ones you accept. Comments and strings are included only when include_trivia is true. An extension the tokenizer does not know still skips // comments, block comments, quotes, and a # that starts a line. The caps are 5000 files, 500 matches in one file, and 5000 matches in the plan. Apply the plan with apply_edit_plan.

organize_imports

Plans removal of a named binding whose identifier occurs once in the file. A Rust snake_case use, a Python from import or alias, a Go path segment, a Java import, a C# using, a C++ using name, and a Kotlin import are removed when that is true. A CamelCase Rust import such as use std::io::Write, a pub use, a bare Python import, a Go blank or dot import, a star import, a C++ #include, and a using namespace stay. JavaScript and TypeScript default and namespace imports stay uncertain. A file whose extension has no recognised import syntax returns NO_UNUSED_IMPORTS. Apply the plan with apply_edit_plan.

move_file

Plans the filesystem rename and the relative import rewrites in one transaction. A missing parent directory is created at a