JVM Source Lens

Reality:3.0.0-SNAPSHOTaddedmaskSensitiveFields()as a protected helper exactly for this case. The agent didn't hallucinate — it was just blind.

Withjvmsrc(The 3-turn instant resolution)

User:Override the audit hook fromAbstractTradingService— is there a public utility method on it we should reuse?
- search_classes("AbstractTradingService")➔ Finds FQN & exact resolved library.
- get_class_structure(scope: "overview")➔ DiscoversmaskSensitiveFields()in3.0.0-SNAPSHOT.
- get_method_signature("maskSensitiveFields")➔ Gets accurate signature and generics.

Result:Writes the override correctly on the first try. No cache walking, no guessing, no wrong version.
- Build Tool Inquiry:jvmsrcqueries your active build tool (e.g., Gradle) for the exact resolved classpath configuration.
- Intelligent Caching:It caches the resolved classpath, tracking changes to build files to stay current.
- Precision AI Tools:Instead of full-code dumping, it exposes precise, high-granularity tools (signatures, structure, search) to keep context windows small and token usage ultra-low.

npm install -g jvmsrc # or use it directly via npx: npx jvmsrc <command>

[!IMPORTANT]
RequiresNode ≥ 20andJava onPATH(for CFR decompiler +javap).

Paste this into your AI assistant config (Cursor, Claude Code, Windsurf, etc.), then restart the host:

{ "mcpServers": { "jvmsrc": { "command": "jvmsrc", "args": ["mcp"] } } }

Optional:jvmsrc config(orjvmsrc config --project /path/to/gradle-project) prints a paste-ready block plus environment hints. Most users can skip it and copy the snippet above.

The MCP server runs over stdio viajvmsrc mcp. The default config needs no environment variables:

{ "mcpServers": { "jvmsrc": { "command": "jvmsrc", "args": ["mcp"] } } }

Private repository credentials (optional)

Only needed when your Gradle build requires credential env vars for a private Maven/Artifactory/Nexus-style repo. MCP hosts often donotinherit your interactive shell, so those vars must be set on thejvmsrc MCP process(then restart the server).

REPO_USER/REPO_PASSbelow aresample names only— they are not required by jvmsrc. Use whatever variable names your project’s Gradle scripts document:

{ "mcpServers": { "jvmsrc": { "command": "jvmsrc", "args": ["mcp"], "env": { "REPO_USER": "your-username", "REPO_PASS": "your-password" } } } }

Omit theenvblock entirely when the project does not need them.

[!TIP]
Every source response includessourceAvailable:truefor real sources (Javadoc, parameter names, generics),falsefor CFR decompilation (structure reliable, names may be synthetic).

[!NOTE]
Multimodule:omitmodulePathand jvmsrc auto-picks the unique owning module; on a miss it lists candidatemodulePaths.Methods:search_classesmatches declared method names when the index has source enrichment; for body text in a known JAR usesearch_in_artifact.get_class_sourcemethodNamesalso walks superclasses for unmatched names.

PrimarilyJava + Spring Bootprojects on Gradle. Other JVM languages (Kotlin, Scala) and Android work today on a best-effort basis and are on the roadmap as first-class targets — seeROADMAP.md.

Composite builds, Android-only layouts, and exotic configurations are not fully validated. SeeROADMAP.md.

- No telemetry.
- Local only— caches and diagnostics stay on disk; never writes under your project root.
- Subprocessesvia argv only (no shell interpolation) — seeSECURITY.md.
- OptionalJVMSRC_ALLOWED_ROOTSto lock down which projects jvmsrc may resolve.

jvmsrc com.example.MyClass -p /path/to/gradle-project # shorthand for get jvmsrc get com.example.MyClass -p /path/to/project -q > MyClass.java jvmsrc resolve -p /path/to/project --force-refresh jvmsrc config jdk-roots add /path/to/jdks # one-time JDK roots setup jvmsrc doctor java -p /path/to/project # check JDK requirement + selection jvmsrc diagnostics last # latest failure message jvmsrc mcp # run as MCP server

Defaults followenv-pathsconventions per OS. Full layout:SPEC.md§6.