rosett-ai 1.3.3 → 1.5.9

data/README.md

@@ -4,8 +4,7 @@
 
 raictl is an engine-agnostic configuration management tool for AI-assisted development workflows.
 Define operational rules in generic YAML, then compile them to any supported AI tool's native format.
-v1.2.0 ships with Claude Code and AGENTS.md engines.
-Additional engines (Cursor, Copilot, Windsurf, Goose, Aider, Ollama, GPT-NeoX, Generic) are in development.
+Ships with Claude Code and AGENTS.md builtin engines; additional engines available as plugin gems.
 
 ```mermaid
 graph LR
@@ -50,10 +49,10 @@ graph LR
 
 | Field | Value |
 |-------|-------|
-| Version | <!-- rai:version -->1.2.0<!-- /rai:version --> |
+| Version | <!-- rai:version -->1.3.4<!-- /rai:version --> |
 | License | GPL-3.0-only |
-| Ruby | 3.3.10 (rbenv) |
-| Tests | <!-- rai:tests -->4672 RSpec specs<!-- /rai:tests --> |
+| Ruby | 3.4.8 (rbenv) |
+| Tests | <!-- rai:tests -->4477 RSpec specs<!-- /rai:tests --> |
 | Author | Hugo Antonio Sepulveda Manriquez |
 
 ## Quick Start
@@ -67,7 +66,7 @@ gem install rosett-ai
 ### Or install from .deb (Debian/Ubuntu)
 
 ```bash
-sudo dpkg -i rosett-ai_1.2.0-1_amd64.deb
+sudo dpkg -i rosett-ai_1.3.4-1_amd64.deb
 ```
 
 ### Initialize
@@ -125,6 +124,10 @@ mindmap
       YAML DoS Prevention
       Path Whitelisting
       Custom RuboCop Cops
+    MCP Server
+      33 Tools / 8 Resources
+      Systemd User Service
+      Enforcement Pipeline
     CLI
       Compile / Validate / Adopt
       Backup / Migrate / Doctor
@@ -143,6 +146,7 @@ mindmap
 - **GTK4/Adwaita Application** -- Crash-proof GUI with `safe_action()` wrapper pattern
 - **Behaviour Management** -- Priority-sorted rules (1-100 scale) with sensitivity filtering
 - **Adopt Analysis** -- Local structural checks with optional API-powered analysis
+- **MCP Server** -- Model Context Protocol server with 33 tools, 8 resources, 4 prompts; runs as a systemd user service
 - **Content Packs** -- Premium content delivery via Ed25519-signed JWT licensing
 - **Debian Packaging** -- `.deb` packages via fpm for core, gtk4, and qt6 variants
 - **i18n** -- Internationalisation with gettext/Qt locale compilation
@@ -178,6 +182,12 @@ graph TB
         GENERIC[engines/generic/]:::planned
     end
 
+    subgraph MCP_LAYER["MCP Layer"]
+        MCP_SRV[MCP Server]:::available
+        MCP_TOOLS[33 Tools]
+        MCP_RES[8 Resources]
+    end
+
     subgraph DESKTOP["Desktop Layer"]
         DBUS_SVC[D-Bus Service]
         GTK4[GTK4 App]
@@ -193,6 +203,10 @@ graph TB
     COMP --> YAML
     VALID --> YAML
     CONFIG --> PATH
+    MCP_SRV --> COMP
+    MCP_SRV --> VALID
+    MCP_TOOLS --> MCP_SRV
+    MCP_RES --> MCP_SRV
     DBUS_SVC --> COMP
     GTK4 -->|D-Bus IPC| DBUS_SVC
     FOCUS --> DBUS_SVC
@@ -228,10 +242,18 @@ raictl behaviour display              # Show behaviour configuration
 raictl config compile                 # Compile YAML scopes to JSON
 raictl design list                    # List design documents
 
+# MCP server
+raictl mcp serve                      # Start MCP JSON-RPC server
+raictl mcp status                     # Show MCP server status
+
 # Desktop
 raictl dbus start                     # Start D-Bus service
 raictl desktop gtk4                   # Launch GTK4 application
 
+# Compliance & provenance
+raictl comply                         # Run compliance checks (CRA, license, SPDX)
+raictl provenance add                 # Record AI contribution for HEAD commit
+
 # Backup
 raictl backup --global --local        # Back up all configurations
 ```
@@ -272,40 +294,32 @@ See [USAGE.md](doc/USAGE.md) for the full command reference.
 ```text
 rosett-ai/
 ├── bin/raictl                        # CLI executable
-├── lib/rosett_ai/                       # Ruby library (4800+ LOC)
-│   ├── engines/                    # Engine backends
-│   │   ├── claude/                 # Claude Code engine (7 components)
-│   │   ├── cursor/                # Cursor (Anysphere) engine
-│   │   ├── copilot/               # GitHub Copilot engine
-│   │   ├── windsurf/              # Windsurf (Codeium) engine
-│   │   ├── agents_md/             # AGENTS.md engine
-│   │   ├── goose/                 # Goose (Block) engine
-│   │   ├── aider/                 # Aider engine
-│   │   ├── generic/               # Generic markdown engine
-│   │   ├── ollama/                # Ollama engine
-│   │   └── gpt_neox/             # GPT-NeoX engine
-│   ├── compiler/                   # Compilation pipeline
-│   ├── desktop/                    # GTK4 app + GUI logger
-│   ├── dbus/                       # D-Bus service + focus adapters
-│   ├── validators/                 # Schema-based validators
-│   ├── licensing/                  # Ed25519 JWT license keys
-│   ├── content/                    # Content pack system
-│   ├── backup/                     # Backup with compression
-│   ├── thor/tasks/                 # 16 CLI subcommands
-│   └── ui/                         # UI adapter registry
-├── conf/                           # Configuration
-│   ├── behaviour/                  # Behaviour YAML files
-│   ├── design/                     # Design documents (21 files)
-│   ├── schemas/                    # JSON Schemas (10 files)
-│   ├── engines/                    # Per-engine config
-│   └── packaging/                  # Package variant configs
-├── spec/                           # RSpec tests (119 files)
-├── doc/                            # Documentation
-│   ├── decisions/                  # ADRs (001-007)
-│   └── changes/                    # Implementation notes
-├── locales/                        # i18n (en, fr, ar)
-├── packaging/                      # Debian scripts
-└── CLAUDE.md                       # Project instructions
+├── lib/rosett_ai/                    # Ruby library
+│   ├── compiler/                    # Compilation pipeline
+│   ├── engines/                     # Engine plugin registry + detector
+│   ├── mcp/                         # MCP server (33 tools, 8 resources)
+│   ├── desktop/                     # GTK4 app + GUI logger
+│   ├── dbus/                        # D-Bus service + focus adapters
+│   ├── validators/                  # Schema-based validators
+│   ├── comply/                      # CRA/license/SPDX compliance
+│   ├── provenance/                  # AI provenance tracking
+│   ├── licensing/                   # Ed25519 JWT license keys
+│   ├── content/                     # Content pack system
+│   ├── backup/                      # Backup with compression
+│   ├── thor/tasks/                  # CLI subcommands
+│   └── ui/                          # UI adapter registry
+├── conf/                            # Configuration
+│   ├── behaviour/                   # Behaviour YAML files
+│   ├── design/                      # Design documents
+│   ├── schemas/                     # JSON Schemas
+│   ├── mcp/                         # MCP server config
+│   └── packaging/                   # Package variant configs
+├── dist/                            # Systemd service units
+├── spec/                            # RSpec tests
+├── doc/                             # Documentation
+├── locales/                         # i18n (en, fr, ar)
+├── packaging/                       # Debian scripts
+└── share/                           # Desktop/D-Bus integration files
 ```
 
 ## Development
@@ -315,7 +329,7 @@ rosett-ai/
 ```bash
 git clone https://gitlab.com/neatnerds/foss/rosett-ai.git
 cd rosett-ai
-rbenv install 3.3.10
+rbenv install 3.4.8
 bundle install
 overcommit --install
 bin/raictl version
@@ -362,5 +376,5 @@ GPL-3.0-only
 
 ## Contact
 
-- Author: hugo@neatnerds.be
+- Author: query@neatnerds.be
 - Support: query@neatnerds.be

data/bin/raictl

@@ -0,0 +1,13 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+# NeatNerds Code Companion - CLI Executable
+# This is the main entry point for the rai command
+
+require 'rosett_ai'
+
+RosettAi::I18n::Utf8Checker.check!
+RosettAi::Thor::CLI.start(ARGV)

data/conf/adopt_redactions.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 patterns:
   - pattern: '(?i)\b[A-Z0-9._%+-]+@neatnerds\.be\b'
     replacement: '[EMAIL-REDACTED]'

data/conf/compliance/cra_rules.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 name: cra_compliance
 version: 1.0.0
 description: EU Cyber Resilience Act (CRA) compliance checks

data/conf/compliance/license_rules.yml

@@ -1,3 +1,5 @@
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 ---
 name: license_compliance
 version: 1.0.0

data/conf/mcp/server_defaults.yml

@@ -1,3 +1,5 @@
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 # frozen_string_literal: false
 # Default MCP server configuration for Rosett-AI.
 #

data/conf/mcp/trust.yml

@@ -1,3 +1,4 @@
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
 # SPDX-License-Identifier: GPL-3.0-only
 # Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
 #

data/conf/packaging/core.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 name: rosett-ai
 variant: core
 description: >-

data/conf/packaging/gtk4.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 name: rosett-ai-gtk4
 variant: gtk4
 description: >-

data/conf/packaging/qt6.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 name: rosett-ai-qt6
 variant: qt6
 description: >-

data/conf/policy/default_deny_list.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 # Default deny list patterns for AI tool access control.
 #
 # These patterns prevent AI tools from reading or modifying sensitive files.

data/conf/review/cli-command-audit.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <hugo@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 repository: rosett-ai
 audit_type: cli_commands
 created: "2026-03-23"

data/conf/review/design-docs.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <hugo@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 # Design Document Peer Review Registry — Rosett-AI core
 # Generated: 2026-03-15
 # Updated: 2026-03-16 (gap-fill design document review)

data/conf/review/design-questionnaire.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <hugo@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 # Design Document Peer Review Questionnaire
 # Version: 1.0.0
 # Used by: rai design peer review process

data/conf/review/questionnaire.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <hugo@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 # Test Peer Review Questionnaire Template
 # Version: 1.0.0
 # Used by: Rosett-AI test peer review process (see conf/design/test_peer_review.yml)

data/conf/review/rosett-ai-core.yml

@@ -1,4 +1,6 @@
 ---
+# SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <hugo@neatnerds.be>
+# SPDX-License-Identifier: GPL-3.0-only
 # Test Peer Review Registry — Rosett-AI core
 # Generated: 2026-03-14
 # Questionnaire: conf/review/questionnaire.yml

data/conf/schemas/ai_config_schema.json

@@ -30,7 +30,11 @@
         },
         "truncation_strategy": {
           "type": "string",
-          "enum": ["tail", "head", "middle"],
+          "enum": [
+            "tail",
+            "head",
+            "middle"
+          ],
           "description": "How to truncate input when exceeding context window"
         }
       }
@@ -41,7 +45,11 @@
       "properties": {
         "preferred_tier": {
           "type": "string",
-          "enum": ["economy", "standard", "premium"],
+          "enum": [
+            "economy",
+            "standard",
+            "premium"
+          ],
           "description": "Default cost tier preference (advisory only)"
         },
         "monthly_budget_note": {
@@ -69,5 +77,9 @@
       "description": "Engine-specific operational parameters (temperature, top_p, etc.)",
       "additionalProperties": true
     }
+  },
+  "$comment": {
+    "spdx": "SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be> | SPDX-License-Identifier: GPL-3.0-only",
+    "note": null
   }
 }

data/conf/schemas/autoqueue.schema.json

@@ -0,0 +1,153 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://gitlab.neatnerds.be/foss/rosett-ai/rosett-ai/schemas/autoqueue.schema.json",
+  "title": "NeatNerds Orchestrator Autoqueue",
+  "description": "Schema for the persistent orchestrator dispatch queue (autoqueue.yml). Validates queue items, priorities, tiers, lifecycle statuses, and inter-item dependencies.",
+  "$comment": {
+    "date": "2026-05-22",
+    "version": "0.2.0",
+    "source": "rosett-ai",
+    "changes_0.2.0": "Option A schema update: status enum extended to include deferred/stuck-killed/failed; dependencies items accept integer WP IDs in addition to aq-NNN strings; acceptance_summary required only for actionable statuses (queued/dispatched/blocked/done-with-followup)"
+  },
+  "type": "object",
+  "required": ["version", "items"],
+  "additionalProperties": true,
+  "properties": {
+    "version": {
+      "type": "string",
+      "description": "Schema version (semver)"
+    },
+    "last_updated": {
+      "type": "string",
+      "description": "ISO 8601 datetime of last modification"
+    },
+    "last_updated_by": {
+      "type": "string",
+      "description": "Session or agent that last modified the queue"
+    },
+    "cpu_budget": {
+      "type": "object",
+      "description": "Available CPU budget for dispatch decisions",
+      "properties": {
+        "total": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Total CPU cores available"
+        },
+        "reserved_orchestrator": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Cores reserved for the orchestrator session"
+        },
+        "reserved_system": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Cores reserved for system processes"
+        }
+      },
+      "additionalProperties": false
+    },
+    "items": {
+      "type": "array",
+      "description": "Ordered list of dispatch queue items",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "priority",
+          "tier",
+          "cpu_count",
+          "status"
+        ],
+        "if": {
+          "properties": {
+            "status": {"enum": ["queued", "dispatched", "blocked", "done-with-followup"]}
+          },
+          "required": ["status"]
+        },
+        "then": {
+          "required": ["acceptance_summary"]
+        },
+        "additionalProperties": true,
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^aq-\\d+$",
+            "description": "Unique queue item identifier (aq-NNN)"
+          },
+          "session_name": {
+            "type": "string",
+            "description": "Name of the worker session to be dispatched"
+          },
+          "priority": {
+            "type": "string",
+            "enum": ["immediate", "high", "normal", "low"],
+            "description": "Dispatch priority"
+          },
+          "tier": {
+            "type": "string",
+            "enum": ["micro", "standard", "campaign"],
+            "description": "Mission tier (determines CPU and time budget)"
+          },
+          "model": {
+            "type": "string",
+            "description": "Claude model to use for the dispatched session"
+          },
+          "cpu_count": {
+            "type": "integer",
+            "minimum": 1,
+            "description": "Number of CPU cores to pin for this session"
+          },
+          "status": {
+            "type": "string",
+            "enum": ["queued", "dispatched", "done", "done-with-followup", "blocked", "deferred", "stuck-killed", "failed"],
+            "description": "Current lifecycle status of the queue item. Terminal statuses: done, done-with-followup, deferred, stuck-killed, failed."
+          },
+          "linked_wps": {
+            "type": "array",
+            "items": {
+              "type": "integer"
+            },
+            "description": "OpenProject WP IDs linked to this mission"
+          },
+          "dependencies": {
+            "type": "array",
+            "items": {
+              "oneOf": [
+                {"type": "string", "pattern": "^aq-\\d+$"},
+                {"type": "integer", "minimum": 1}
+              ]
+            },
+            "description": "Other autoqueue IDs (aq-NNN strings) or OpenProject WP IDs (integers) that must be done before this can pop"
+          },
+          "brief_path": {
+            "type": "string",
+            "description": "Absolute path to a pre-staged MISSION-BRIEF.md (optional)"
+          },
+          "rationale": {
+            "type": "string",
+            "description": "Why this item was queued"
+          },
+          "queued_at": {
+            "type": "string",
+            "description": "ISO 8601 datetime when the item was added"
+          },
+          "queued_by": {
+            "type": "string",
+            "description": "Session or agent that added this item"
+          },
+          "estimated_effort_hours": {
+            "type": "number",
+            "minimum": 0,
+            "description": "Estimated effort in hours"
+          },
+          "acceptance_summary": {
+            "type": "string",
+            "minLength": 1,
+            "description": "One-paragraph summary of what done looks like for this item"
+          }
+        }
+      }
+    }
+  }
+}

data/conf/schemas/behaviour_schema.json

@@ -7,10 +7,17 @@
     "date": "2026-04-17",
     "version": "1.3.0",
     "source": "rosett-ai",
-    "compatible_claude_code_versions": [">=0.1.0"]
+    "compatible_claude_code_versions": [
+      ">=0.1.0"
+    ],
+    "spdx": "SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be> | SPDX-License-Identifier: GPL-3.0-only"
   },
   "type": "object",
-  "required": ["name", "description", "rules"],
+  "required": [
+    "name",
+    "description",
+    "rules"
+  ],
   "additionalProperties": false,
   "properties": {
     "name": {
@@ -49,7 +56,11 @@
     },
     "scope": {
       "type": "string",
-      "enum": ["global", "project", "personal"],
+      "enum": [
+        "global",
+        "project",
+        "personal"
+      ],
       "description": "Compilation scope: global (to ~/.claude/rules/), project (to .claude/rules/), personal (to ~/.claude/rules/, not shared). Defaults to global when omitted."
     },
     "sensitive": {
@@ -69,7 +80,10 @@
       "description": "Operational rules for Claude Code (at least one required)",
       "items": {
         "type": "object",
-        "required": ["id", "description"],
+        "required": [
+          "id",
+          "description"
+        ],
         "properties": {
           "id": {
             "type": "string",
@@ -95,7 +109,11 @@
             "properties": {
               "type": {
                 "type": "string",
-                "enum": ["enforceable", "advisory", "informational"],
+                "enum": [
+                  "enforceable",
+                  "advisory",
+                  "informational"
+                ],
                 "description": "Enforcement tier: enforceable (hook-generatable), advisory (guidance only), informational (context only)"
               },
               "pattern": {
@@ -114,7 +132,11 @@
               },
               "action": {
                 "type": "string",
-                "enum": ["block", "warn", "log"],
+                "enum": [
+                  "block",
+                  "warn",
+                  "log"
+                ],
                 "description": "Enforcement action: block (reject tool call), warn (stderr warning), log (silent log)"
               },
               "message": {
@@ -122,7 +144,9 @@
                 "description": "Human-readable message shown when the rule triggers"
               }
             },
-            "required": ["type"],
+            "required": [
+              "type"
+            ],
             "additionalProperties": false
           }
         }

data/conf/schemas/compliance_rule_schema.json

@@ -6,10 +6,15 @@
   "$comment": {
     "date": "2026-03-16",
     "version": "1.0.0",
-    "source": "rosett-ai"
+    "source": "rosett-ai",
+    "spdx": "SPDX-FileCopyrightText: 2025-2026 Hugo Antonio Sepulveda Manriquez <query@neatnerds.be> | SPDX-License-Identifier: GPL-3.0-only"
   },
   "type": "object",
-  "required": ["name", "version", "rules"],
+  "required": [
+    "name",
+    "version",
+    "rules"
+  ],
   "additionalProperties": false,
   "properties": {
     "name": {
@@ -31,7 +36,11 @@
       "minItems": 1,
       "items": {
         "type": "object",
-        "required": ["id", "description", "severity"],
+        "required": [
+          "id",
+          "description",
+          "severity"
+        ],
         "additionalProperties": false,
         "properties": {
           "id": {
@@ -45,7 +54,11 @@
           },
           "severity": {
             "type": "string",
-            "enum": ["error", "warning", "info"],
+            "enum": [
+              "error",
+              "warning",
+              "info"
+            ],
             "description": "Severity level"
           },
           "check": {