@anyforge/mcp-server 2.0.0

package/README.md

@@ -0,0 +1,125 @@
+# AnyForge MCP Server
+
+Drive AnyForge from **Claude CLI** (Claude Code), Cursor, and other MCP
+clients: view and approve **HIL** notifications, read **programs /
+initiatives / work items**, **add and modify** work items, see **crew
+outputs**, and **interact with crews**.
+
+The server is a thin client over AnyForge's key-authenticated control
+API (`/api/v1/control/*`). It holds no business logic and never needs a
+Firebase login.
+
+> **User-facing setup guide:** [Drive AnyForge from Claude CLI](https://anyforge.ai/docs/mcp-server)
+> (`apps/www/content/docs/mcp-server.md`). This README is the in-repo
+> developer reference; the docs page is the canonical install walkthrough.
+
+## 1. Authorise this machine (once)
+
+```bash
+npx @anyforge/control init
+```
+
+This runs the device-auth flow and writes a long-lived `sk_anyforge_…`
+key to `~/.anyforge/credentials`. The MCP server reads that file — so
+you don't put any secret in your MCP config.
+
+> The key carries scopes (`read` / `write` / `approve`). A read-only key
+> can list and inspect but can't create work items or approve HILs.
+
+## 2. Register with Claude CLI
+
+```bash
+claude mcp add anyforge -- npx tsx /ABS/PATH/TO/packages/control/mcp-server/index.ts
+```
+
+- Add `--scope user` to make it available in every project, or
+  `--scope project` to commit it to this repo's `.mcp.json`.
+- No env vars are required — credentials come from
+  `~/.anyforge/credentials`.
+
+To point at a non-prod deployment or inline a key instead of using the
+credentials file, pass env vars:
+
+```bash
+claude mcp add anyforge \
+  -e ANYFORGE_API_URL=https://staging.anyforge.ai \
+  -e ANYFORGE_API_TOKEN=sk_anyforge_xxx \
+  -- npx tsx /ABS/PATH/TO/packages/control/mcp-server/index.ts
+```
+
+### Cursor / other clients
+
+Use the equivalent stdio MCP config (`command: npx`, `args: ["tsx",
+"…/index.ts"]`). The same credential resolution applies.
+
+## Tools
+
+| Tool | Scope | Description |
+|------|-------|-------------|
+| `anyforge_list_pending_approvals` | read | List HIL approvals awaiting a decision |
+| `anyforge_get_approval_detail` | read | Read one approval's plan / ADR / security context |
+| `anyforge_submit_approval` | approve | Approve or reject a HIL (resumes the crew) |
+| `anyforge_list_programs` | read | List programs |
+| `anyforge_get_program` | read | Get a program |
+| `anyforge_list_initiatives` | read | List initiatives with progress + spend |
+| `anyforge_get_initiative` | read | Initiative + crews + burn-down |
+| `anyforge_approve_backlog` | approve | Approve a proposed backlog (HIL #1) |
+| `anyforge_approve_task_proposal` | approve | Approve a mid-flight task proposal |
+| `anyforge_list_work_items` | read | List backlog items + crew state |
+| `anyforge_get_work_item` | read | Get one work item |
+| `anyforge_create_work_item` | write | Create a work item |
+| `anyforge_update_work_item` | write | Edit / advance / dispatch / archive / close |
+| `anyforge_get_crew` | read | Crew state + recent outputs + comments |
+| `anyforge_post_crew_comment` | write | Comment on / @-mention in a crew |
+| `anyforge_resume_crew` | approve | Resume a PAUSED/HALTED crew |
+| `anyforge_halt_crew` | approve | Halt a crew |
+
+## Example prompts
+
+- "What's waiting for my approval in AnyForge?" → `anyforge_list_pending_approvals`
+- "Show me the plan for approval `abc123` then approve it." → `anyforge_get_approval_detail` → `anyforge_submit_approval`
+- "Add a P1 bug: rate-limit the export endpoint." → `anyforge_create_work_item`
+- "What did crew `xyz` produce? Post a comment asking it to add tests." → `anyforge_get_crew` → `anyforge_post_crew_comment`
+
+## How it works
+
+```
+Claude CLI ──stdio──▶ MCP server ──HTTPS (Bearer sk_anyforge_…)──▶ /api/v1/control/* ──▶ shared control services
+```
+
+The `/api/v1/control/*` routes share the exact same service layer as the
+AnyForge web app, so the CLI and the dashboard behave identically.
+
+## Build & publish (maintainers)
+
+The package ships **compiled JS** (`dist/`), so end users can run
+`npx -y @anyforge/mcp-server` without a TypeScript toolchain. Source lives
+in `index.ts` / `lib/` / `tools/`; `tsc` emits `dist/` (shebang preserved,
+`.js` import specifiers already in source for NodeNext).
+
+```bash
+npm install          # includes the typescript devDependency
+npm run build        # tsc → dist/
+npm pack --dry-run   # verify the tarball: dist/ + README + package.json only
+```
+
+Publishing is automated. **Push a `mcp-server-v<version>` tag** and the
+`.github/workflows/publish-mcp-server.yml` workflow builds and runs
+`npm publish` (scoped public). Keep the tag version in sync with
+`package.json`:
+
+```bash
+cd packages/control/mcp-server
+npm version patch          # bumps package.json, e.g. 2.0.0 → 2.0.1
+git commit -am "chore(mcp): release mcp-server vX.Y.Z"   # if not committed by npm version
+git tag mcp-server-v$(node -p "require('./package.json').version")
+git push origin main --tags
+```
+
+> The workflow needs an `NPM_TOKEN` repo secret (an npm **automation**
+> token for an account with publish rights on the `@anyforge` scope). One-
+> time setup: `npm token create --read-only=false`, then add it under
+> GitHub → Settings → Secrets → Actions as `NPM_TOKEN`.
+>
+> To publish manually instead: `npm login && npm publish` from this
+> directory (`prepublishOnly` rebuilds `dist/` first).

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+/**
+ * AnyForge MCP Server
+ *
+ * Exposes AnyForge platform control as MCP tools so Claude CLI (Claude
+ * Code), Cursor, and other MCP clients can drive the platform: view and
+ * approve HIL notifications, read programs / initiatives / work items,
+ * add and modify work items, see crew outputs, and interact with crews.
+ *
+ * This process holds ZERO business logic — every tool is a thin call to
+ * the key-authenticated control API (/api/v1/control/*). Auth is the
+ * long-lived `sk_anyforge_` key from `~/.anyforge/credentials` (written
+ * by `npx @anyforge/control init`) or the ANYFORGE_API_TOKEN env var.
+ *
+ * Register with Claude CLI:
+ *   claude mcp add anyforge -- npx tsx <abs path>/index.ts
+ *
+ * See README.md for full setup.
+ */
+export {};

package/dist/index.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+/**
+ * AnyForge MCP Server
+ *
+ * Exposes AnyForge platform control as MCP tools so Claude CLI (Claude
+ * Code), Cursor, and other MCP clients can drive the platform: view and
+ * approve HIL notifications, read programs / initiatives / work items,
+ * add and modify work items, see crew outputs, and interact with crews.
+ *
+ * This process holds ZERO business logic — every tool is a thin call to
+ * the key-authenticated control API (/api/v1/control/*). Auth is the
+ * long-lived `sk_anyforge_` key from `~/.anyforge/credentials` (written
+ * by `npx @anyforge/control init`) or the ANYFORGE_API_TOKEN env var.
+ *
+ * Register with Claude CLI:
+ *   claude mcp add anyforge -- npx tsx <abs path>/index.ts
+ *
+ * See README.md for full setup.
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { hilTools } from './tools/hil.js';
+import { workTools } from './tools/work.js';
+import { initiativeTools } from './tools/initiatives.js';
+import { programTools } from './tools/programs.js';
+import { crewTools } from './tools/crews.js';
+// ─── Assemble the tool registry ──────────────────────────────────────
+const MODULES = [hilTools, workTools, initiativeTools, programTools, crewTools];
+const TOOLS = MODULES.flatMap(m => m.tools);
+const HANDLERS = Object.assign({}, ...MODULES.map(m => m.handlers));
+// ─── Server setup ────────────────────────────────────────────────────
+const server = new Server({ name: 'anyforge', version: '2.0.0' }, { capabilities: { tools: {} } });
+server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    const handler = HANDLERS[name];
+    if (!handler) {
+        return {
+            content: [{ type: 'text', text: `Error: unknown tool "${name}"` }],
+            isError: true,
+        };
+    }
+    try {
+        const result = await handler((args ?? {}));
+        return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+    }
+    catch (err) {
+        return {
+            content: [{ type: 'text', text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+// ─── Start ───────────────────────────────────────────────────────────
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error(`AnyForge MCP Server started (stdio, ${TOOLS.length} tools)`);
+}
+main().catch(err => {
+    console.error('MCP Server failed to start:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAA;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAG5C,wEAAwE;AAExE,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,CAAC,CAAA;AAE/E,MAAM,KAAK,GAAc,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AACtD,MAAM,QAAQ,GAAgC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEhG,wEAAwE;AAExE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EACtC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAA;AAED,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;AAEhF,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,IAAI,GAAG,EAAE,CAAC;YAClE,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAA;QACrE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC/F,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,wEAAwE;AAExE,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/B,OAAO,CAAC,KAAK,CAAC,uCAAuC,KAAK,CAAC,MAAM,SAAS,CAAC,CAAA;AAC7E,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/lib/apiClient.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Thin typed client over the AnyForge control API (/api/v1/control/*).
+ *
+ * The MCP server holds zero business logic — every tool handler calls
+ * callControl() and forwards the JSON. Auth is the long-lived
+ * sk_anyforge_ key resolved once and cached for the process lifetime.
+ *
+ * The control API speaks a `{ ok, data | error }` envelope. We unwrap
+ * it: on `ok` return `data`; otherwise throw a ControlApiError carrying
+ * the stable error code so the MCP layer surfaces an actionable message
+ * to Claude instead of a raw HTTP failure.
+ */
+export declare class ControlApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, status: number, detail?: string);
+}
+export declare function callControl<T = unknown>(method: 'GET' | 'POST' | 'PATCH' | 'DELETE', path: string, body?: unknown): Promise<T>;
+/** Build a `?a=b&c=d` query string from defined values only. */
+export declare function qs(params: Record<string, string | number | boolean | undefined>): string;

package/dist/lib/apiClient.js

@@ -0,0 +1,64 @@
+import { resolveCredentials } from './credentials.js';
+/**
+ * Thin typed client over the AnyForge control API (/api/v1/control/*).
+ *
+ * The MCP server holds zero business logic — every tool handler calls
+ * callControl() and forwards the JSON. Auth is the long-lived
+ * sk_anyforge_ key resolved once and cached for the process lifetime.
+ *
+ * The control API speaks a `{ ok, data | error }` envelope. We unwrap
+ * it: on `ok` return `data`; otherwise throw a ControlApiError carrying
+ * the stable error code so the MCP layer surfaces an actionable message
+ * to Claude instead of a raw HTTP failure.
+ */
+export class ControlApiError extends Error {
+    code;
+    status;
+    constructor(code, status, detail) {
+        super(detail ? `${code}: ${detail}` : code);
+        this.name = 'ControlApiError';
+        this.code = code;
+        this.status = status;
+    }
+}
+let cached = null;
+async function creds() {
+    if (!cached)
+        cached = await resolveCredentials();
+    return cached;
+}
+export async function callControl(method, path, body) {
+    const { apiKey, endpoint } = await creds();
+    const url = `${endpoint.replace(/\/$/, '')}/api/v1/control${path}`;
+    const res = await fetch(url, {
+        method,
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${apiKey}`,
+        },
+        ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+    });
+    let json;
+    try {
+        json = await res.json();
+    }
+    catch {
+        throw new ControlApiError('invalid_response', res.status, `non-JSON response from ${url}`);
+    }
+    if (!res.ok || json.ok === false) {
+        const code = typeof json.error === 'string' ? json.error : `http_${res.status}`;
+        const detail = typeof json.message === 'string' ? json.message
+            : typeof json.detail === 'string' ? json.detail
+                : undefined;
+        throw new ControlApiError(code, res.status, detail);
+    }
+    return json.data;
+}
+/** Build a `?a=b&c=d` query string from defined values only. */
+export function qs(params) {
+    const pairs = Object.entries(params)
+        .filter(([, v]) => v !== undefined && v !== '')
+        .map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`);
+    return pairs.length ? `?${pairs.join('&')}` : '';
+}
+//# sourceMappingURL=apiClient.js.map

package/dist/lib/apiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.js","sourceRoot":"","sources":["../../lib/apiClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAErD;;;;;;;;;;;GAWG;AAEH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAQ;IACZ,MAAM,CAAQ;IACvB,YAAY,IAAY,EAAE,MAAc,EAAE,MAAe;QACvD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED,IAAI,MAAM,GAAgD,IAAI,CAAA;AAE9D,KAAK,UAAU,KAAK;IAClB,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAA;IAChD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAA2C,EAC3C,IAAY,EACZ,IAAc;IAEd,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,IAAI,EAAE,CAAA;IAElE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,EAAE;SAClC;QACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAA;IAEF,IAAI,IAAgF,CAAA;IACpF,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,0BAA0B,GAAG,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;QAC/E,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;YAC5D,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;gBAC/C,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrD,CAAC;IAED,OAAO,IAAI,CAAC,IAAS,CAAA;AACvB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,EAAE,CAAC,MAA6D;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACjC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC/E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAClD,CAAC"}

package/dist/lib/credentials.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Resolve the AnyForge control credentials the MCP server uses to talk
+ * to /api/v1/control/*.
+ *
+ * Precedence:
+ *   1. Env vars (ANYFORGE_API_TOKEN + ANYFORGE_API_URL) — lets an MCP
+ *      config inline a key explicitly if desired.
+ *   2. ~/.anyforge/credentials — the file written by
+ *      `npx @anyforge/control init`. This is the default path, so a
+ *      user who has already run init needs zero secrets in their MCP
+ *      config: `claude mcp add anyforge -- npx tsx <path>/index.ts`.
+ *
+ * The key is a long-lived `sk_anyforge_…` token, so there's no
+ * expiry/refresh dance — unlike a Firebase ID token.
+ */
+export interface ResolvedCredentials {
+    apiKey: string;
+    endpoint: string;
+}
+export declare function resolveCredentials(): Promise<ResolvedCredentials>;

package/dist/lib/credentials.js

@@ -0,0 +1,33 @@
+import { promises as fs } from 'fs';
+import { homedir } from 'os';
+import { join } from 'path';
+const DEFAULT_ENDPOINT = 'https://anyforge.ai';
+const FILE = join(homedir(), '.anyforge', 'credentials');
+export async function resolveCredentials() {
+    const envKey = process.env.ANYFORGE_API_TOKEN;
+    const envUrl = process.env.ANYFORGE_API_URL;
+    if (envKey) {
+        return { apiKey: envKey, endpoint: envUrl || DEFAULT_ENDPOINT };
+    }
+    const fromFile = await readCredentialsFile();
+    if (fromFile?.apiKey) {
+        return {
+            apiKey: fromFile.apiKey,
+            endpoint: envUrl || fromFile.endpoint || DEFAULT_ENDPOINT,
+        };
+    }
+    throw new Error('No AnyForge credentials found. Run `npx @anyforge/control init` to authorise this machine, ' +
+        'or set ANYFORGE_API_TOKEN (and optionally ANYFORGE_API_URL) in the MCP server env.');
+}
+async function readCredentialsFile() {
+    try {
+        const text = await fs.readFile(FILE, 'utf8');
+        return JSON.parse(text);
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/lib/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../lib/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AA6B3B,MAAM,gBAAgB,GAAG,qBAAqB,CAAA;AAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;AAExD,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAA;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAE3C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,gBAAgB,EAAE,CAAA;IACjE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAE,CAAA;IAC5C,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,gBAAgB;SAC1D,CAAA;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,6FAA6F;QAC7F,oFAAoF,CACrF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAA;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/tools/crews.d.ts

@@ -0,0 +1,6 @@
+import type { ToolModule } from './types.js';
+/**
+ * Crew tools — see crew outputs and interact (operator comments,
+ * resume, halt).
+ */
+export declare const crewTools: ToolModule;

package/dist/tools/crews.js

@@ -0,0 +1,66 @@
+import { callControl, qs } from '../lib/apiClient.js';
+/**
+ * Crew tools — see crew outputs and interact (operator comments,
+ * resume, halt).
+ */
+export const crewTools = {
+    tools: [
+        {
+            name: 'anyforge_get_crew',
+            description: 'Get a crew with its recent chat messages (the crew output) and operator comments. ' +
+                'Use this to see what a crew produced and where it stands.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    crewId: { type: 'string', description: 'The crew id.' },
+                    messages: { type: 'number', description: 'How many recent chat/comment entries (default 50, max 200).' },
+                },
+                required: ['crewId'],
+            },
+        },
+        {
+            name: 'anyforge_post_crew_comment',
+            description: 'Post an operator comment on a crew (optionally @-mentioning teammates by uid). ' +
+                'Requires `write` scope.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    crewId: { type: 'string', description: 'The crew id.' },
+                    body: { type: 'string', description: 'Comment text (max 4000 chars).' },
+                    messageId: { type: 'string', description: 'Optional crewChat message id to anchor the comment to.' },
+                    mentionedUids: { type: 'array', items: { type: 'string' }, description: 'Optional uids to mention.' },
+                },
+                required: ['crewId', 'body'],
+            },
+        },
+        {
+            name: 'anyforge_resume_crew',
+            description: 'Resume a PAUSED or HALTED crew from its last checkpoint. Requires `approve` scope.',
+            inputSchema: {
+                type: 'object',
+                properties: { crewId: { type: 'string', description: 'The crew id.' } },
+                required: ['crewId'],
+            },
+        },
+        {
+            name: 'anyforge_halt_crew',
+            description: 'Halt a crew (terminal stop). Idempotent on already-finished crews. Requires `approve` scope.',
+            inputSchema: {
+                type: 'object',
+                properties: { crewId: { type: 'string', description: 'The crew id.' } },
+                required: ['crewId'],
+            },
+        },
+    ],
+    handlers: {
+        anyforge_get_crew: args => callControl('GET', `/crews/${encodeURIComponent(String(args.crewId))}${qs({ messages: args.messages })}`),
+        anyforge_post_crew_comment: args => callControl('POST', `/crews/${encodeURIComponent(String(args.crewId))}/comments`, {
+            body: args.body,
+            ...(args.messageId ? { messageId: args.messageId } : {}),
+            ...(Array.isArray(args.mentionedUids) ? { mentionedUids: args.mentionedUids } : {}),
+        }),
+        anyforge_resume_crew: args => callControl('POST', `/crews/${encodeURIComponent(String(args.crewId))}/resume`),
+        anyforge_halt_crew: args => callControl('POST', `/crews/${encodeURIComponent(String(args.crewId))}/halt`),
+    },
+};
+//# sourceMappingURL=crews.js.map

package/dist/tools/crews.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crews.js","sourceRoot":"","sources":["../../tools/crews.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAA;AAGrD;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAe;IACnC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,mBAAmB;YACzB,WAAW,EACT,oFAAoF;gBACpF,2DAA2D;YAC7D,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;oBACvD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6DAA6D,EAAE;iBACzG;gBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;SACF;QACD;YACE,IAAI,EAAE,4BAA4B;YAClC,WAAW,EACT,iFAAiF;gBACjF,yBAAyB;YAC3B,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;oBACvD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBACvE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;oBACpG,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE;iBACtG;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC7B;SACF;QACD;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,oFAAoF;YACjG,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE;gBACvE,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;SACF;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,8FAA8F;YAC3G,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE;gBACvE,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;SACF;KACF;IACD,QAAQ,EAAE;QACR,iBAAiB,EAAE,IAAI,CAAC,EAAE,CACxB,WAAW,CAAC,KAAK,EAAE,UAAU,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAA8B,EAAE,CAAC,EAAE,CAAC;QACjI,0BAA0B,EAAE,IAAI,CAAC,EAAE,CACjC,WAAW,CAAC,MAAM,EAAE,UAAU,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;YAChF,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC;QACJ,oBAAoB,EAAE,IAAI,CAAC,EAAE,CAC3B,WAAW,CAAC,MAAM,EAAE,UAAU,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;QACjF,kBAAkB,EAAE,IAAI,CAAC,EAAE,CACzB,WAAW,CAAC,MAAM,EAAE,UAAU,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;KAChF;CACF,CAAA"}

package/dist/tools/hil.d.ts

@@ -0,0 +1,7 @@
+import type { ToolModule } from './types.js';
+/**
+ * HIL (human-in-the-loop) approval tools — the headline capability:
+ * list what's awaiting the operator, read its context, and approve /
+ * reject from the CLI.
+ */
+export declare const hilTools: ToolModule;

package/dist/tools/hil.js

@@ -0,0 +1,56 @@
+import { callControl, qs } from '../lib/apiClient.js';
+/**
+ * HIL (human-in-the-loop) approval tools — the headline capability:
+ * list what's awaiting the operator, read its context, and approve /
+ * reject from the CLI.
+ */
+export const hilTools = {
+    tools: [
+        {
+            name: 'anyforge_list_pending_approvals',
+            description: 'List HIL approvals awaiting an operator decision for your company. Returns each ' +
+                'approval id, the crew it belongs to, plan summary, and the architecture / security ' +
+                'context. Use this to see what needs your sign-off.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    limit: { type: 'number', description: 'Max approvals to return (default 50, max 200).' },
+                },
+            },
+        },
+        {
+            name: 'anyforge_get_approval_detail',
+            description: 'Get the full detail of a single HIL approval by id (plan, ADR, security audit).',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    approvalId: { type: 'string', description: 'The HIL approval id.' },
+                },
+                required: ['approvalId'],
+            },
+        },
+        {
+            name: 'anyforge_submit_approval',
+            description: 'Submit a decision on a HIL approval. APPROVED resumes the crew past the gate; ' +
+                'REJECTED sends it back. Requires a key with the `approve` scope.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    approvalId: { type: 'string', description: 'The HIL approval id.' },
+                    decision: { type: 'string', description: "'APPROVED' or 'REJECTED'." },
+                    notes: { type: 'string', description: 'Optional reviewer notes (shown in the audit trail).' },
+                },
+                required: ['approvalId', 'decision'],
+            },
+        },
+    ],
+    handlers: {
+        anyforge_list_pending_approvals: args => callControl('GET', `/hil${qs({ limit: args.limit })}`),
+        anyforge_get_approval_detail: args => callControl('GET', `/hil/${encodeURIComponent(String(args.approvalId))}`),
+        anyforge_submit_approval: args => callControl('POST', `/hil/${encodeURIComponent(String(args.approvalId))}`, {
+            decision: args.decision,
+            ...(args.notes ? { notes: args.notes } : {}),
+        }),
+    },
+};
+//# sourceMappingURL=hil.js.map

package/dist/tools/hil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hil.js","sourceRoot":"","sources":["../../tools/hil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAA;AAGrD;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAe;IAClC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,iCAAiC;YACvC,WAAW,EACT,kFAAkF;gBAClF,qFAAqF;gBACrF,oDAAoD;YACtD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;iBACzF;aACF;SACF;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,WAAW,EAAE,iFAAiF;YAC9F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;iBACpE;gBACD,QAAQ,EAAE,CAAC,YAAY,CAAC;aACzB;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,gFAAgF;gBAChF,kEAAkE;YACpE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;oBACnE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBACtE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;iBAC9F;gBACD,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;aACrC;SACF;KACF;IACD,QAAQ,EAAE;QACR,+BAA+B,EAAE,IAAI,CAAC,EAAE,CACtC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAA2B,EAAE,CAAC,EAAE,CAAC;QAC9E,4BAA4B,EAAE,IAAI,CAAC,EAAE,CACnC,WAAW,CAAC,KAAK,EAAE,QAAQ,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC3E,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAC/B,WAAW,CAAC,MAAM,EAAE,QAAQ,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE;YACzE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;KACL;CACF,CAAA"}

package/dist/tools/initiatives.d.ts

@@ -0,0 +1,7 @@
+import type { ToolModule } from './types.js';
+/**
+ * Initiative tools — read initiatives + their crews/spend, and approve
+ * the proposed backlog / mid-flight task proposals (HIL #1 and task
+ * proposals).
+ */
+export declare const initiativeTools: ToolModule;

package/dist/tools/initiatives.js

@@ -0,0 +1,64 @@
+import { callControl, qs } from '../lib/apiClient.js';
+/**
+ * Initiative tools — read initiatives + their crews/spend, and approve
+ * the proposed backlog / mid-flight task proposals (HIL #1 and task
+ * proposals).
+ */
+export const initiativeTools = {
+    tools: [
+        {
+            name: 'anyforge_list_initiatives',
+            description: 'List initiatives with status, progress, token budget/spend. Optionally filter by a ' +
+                'comma-separated status list (DRAFT, BACKLOG_PROPOSED, IN_PROGRESS, COMPLETE, ARCHIVED).',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    status: { type: 'string', description: 'Comma-separated InitiativeStatus filter.' },
+                },
+            },
+        },
+        {
+            name: 'anyforge_get_initiative',
+            description: 'Get an initiative with its crews, lifetime spend, and daily burn-down series.',
+            inputSchema: {
+                type: 'object',
+                properties: { initiativeId: { type: 'string', description: 'The initiative id.' } },
+                required: ['initiativeId'],
+            },
+        },
+        {
+            name: 'anyforge_approve_backlog',
+            description: 'Approve the proposed backlog for an initiative (HIL #1). Promotes its BACKLOG items to ' +
+                'READY and moves the initiative to IN_PROGRESS. Requires `approve` scope.',
+            inputSchema: {
+                type: 'object',
+                properties: { initiativeId: { type: 'string', description: 'The initiative id.' } },
+                required: ['initiativeId'],
+            },
+        },
+        {
+            name: 'anyforge_approve_task_proposal',
+            description: 'Approve a mid-flight task proposal card, materialising a READY work item. Requires ' +
+                '`approve` scope.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    initiativeId: { type: 'string', description: 'The initiative id.' },
+                    crewId: { type: 'string', description: 'The crew whose chat holds the proposal card.' },
+                    messageId: { type: 'string', description: 'The task_proposal chat message id.' },
+                },
+                required: ['initiativeId', 'crewId', 'messageId'],
+            },
+        },
+    ],
+    handlers: {
+        anyforge_list_initiatives: args => callControl('GET', `/initiatives${qs({ status: args.status })}`),
+        anyforge_get_initiative: args => callControl('GET', `/initiatives/${encodeURIComponent(String(args.initiativeId))}`),
+        anyforge_approve_backlog: args => callControl('POST', `/initiatives/${encodeURIComponent(String(args.initiativeId))}/approve-backlog`),
+        anyforge_approve_task_proposal: args => callControl('POST', `/initiatives/${encodeURIComponent(String(args.initiativeId))}/approve-task-proposal`, {
+            crewId: args.crewId,
+            messageId: args.messageId,
+        }),
+    },
+};
+//# sourceMappingURL=initiatives.js.map

package/dist/tools/initiatives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initiatives.js","sourceRoot":"","sources":["../../tools/initiatives.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAA;AAGrD;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAe;IACzC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,2BAA2B;YACjC,WAAW,EACT,qFAAqF;gBACrF,yFAAyF;YAC3F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;iBACpF;aACF;SACF;QACD;YACE,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EAAE,+EAA+E;YAC5F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE;gBACnF,QAAQ,EAAE,CAAC,cAAc,CAAC;aAC3B;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,yFAAyF;gBACzF,0EAA0E;YAC5E,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE;gBACnF,QAAQ,EAAE,CAAC,cAAc,CAAC;aAC3B;SACF;QACD;YACE,IAAI,EAAE,gCAAgC;YACtC,WAAW,EACT,qFAAqF;gBACrF,kBAAkB;YACpB,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;oBACnE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;oBACvF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;iBACjF;gBACD,QAAQ,EAAE,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,CAAC;aAClD;SACF;KACF;IACD,QAAQ,EAAE;QACR,yBAAyB,EAAE,IAAI,CAAC,EAAE,CAChC,WAAW,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAA4B,EAAE,CAAC,EAAE,CAAC;QACxF,uBAAuB,EAAE,IAAI,CAAC,EAAE,CAC9B,WAAW,CAAC,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACrF,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAC/B,WAAW,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,kBAAkB,CAAC;QACtG,8BAA8B,EAAE,IAAI,CAAC,EAAE,CACrC,WAAW,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,wBAAwB,EAAE;YACzG,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;KACL;CACF,CAAA"}

package/dist/tools/programs.d.ts

@@ -0,0 +1,5 @@
+import type { ToolModule } from './types.js';
+/**
+ * Program tools — read the cross-initiative planning layer.
+ */
+export declare const programTools: ToolModule;

package/dist/tools/programs.js

@@ -0,0 +1,33 @@
+import { callControl, qs } from '../lib/apiClient.js';
+/**
+ * Program tools — read the cross-initiative planning layer.
+ */
+export const programTools = {
+    tools: [
+        {
+            name: 'anyforge_list_programs',
+            description: 'List programs (the cross-initiative planning grouping) with status and owner. ' +
+                'Optionally filter by comma-separated status (PLANNING, IN_PROGRESS, COMPLETE, CANCELLED).',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    status: { type: 'string', description: 'Comma-separated ProgramStatus filter.' },
+                },
+            },
+        },
+        {
+            name: 'anyforge_get_program',
+            description: 'Get a single program by id.',
+            inputSchema: {
+                type: 'object',
+                properties: { programId: { type: 'string', description: 'The program id.' } },
+                required: ['programId'],
+            },
+        },
+    ],
+    handlers: {
+        anyforge_list_programs: args => callControl('GET', `/programs${qs({ status: args.status })}`),
+        anyforge_get_program: args => callControl('GET', `/programs/${encodeURIComponent(String(args.programId))}`),
+    },
+};
+//# sourceMappingURL=programs.js.map

package/dist/tools/programs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"programs.js","sourceRoot":"","sources":["../../tools/programs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAA;AAGrD;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAe;IACtC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EACT,gFAAgF;gBAChF,2FAA2F;YAC7F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;iBACjF;aACF;SACF;QACD;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,6BAA6B;YAC1C,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE;gBAC7E,QAAQ,EAAE,CAAC,WAAW,CAAC;aACxB;SACF;KACF;IACD,QAAQ,EAAE;QACR,sBAAsB,EAAE,IAAI,CAAC,EAAE,CAC7B,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAA4B,EAAE,CAAC,EAAE,CAAC;QACrF,oBAAoB,EAAE,IAAI,CAAC,EAAE,CAC3B,WAAW,CAAC,KAAK,EAAE,aAAa,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;KAChF;CACF,CAAA"}

package/dist/tools/types.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared shapes for the MCP tool modules. Each domain file exports a
+ * `tools` array (the MCP tool definitions) and a `handlers` map
+ * (name → async function returning JSON-serialisable data). index.ts
+ * merges them and JSON-stringifies handler results into MCP text
+ * content.
+ */
+export interface ToolDef {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: 'object';
+        properties: Record<string, unknown>;
+        required?: string[];
+    };
+}
+export type ToolHandler = (args: Record<string, unknown>) => Promise<unknown>;
+export interface ToolModule {
+    tools: ToolDef[];
+    handlers: Record<string, ToolHandler>;
+}

package/dist/tools/types.js

@@ -0,0 +1,9 @@
+/**
+ * Shared shapes for the MCP tool modules. Each domain file exports a
+ * `tools` array (the MCP tool definitions) and a `handlers` map
+ * (name → async function returning JSON-serialisable data). index.ts
+ * merges them and JSON-stringifies handler results into MCP text
+ * content.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../tools/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/tools/work.d.ts

@@ -0,0 +1,5 @@
+import type { ToolModule } from './types.js';
+/**
+ * Work-item tools — read the backlog and add / modify items.
+ */
+export declare const workTools: ToolModule;

package/dist/tools/work.js

@@ -0,0 +1,89 @@
+import { callControl, qs } from '../lib/apiClient.js';
+/**
+ * Work-item tools — read the backlog and add / modify items.
+ */
+export const workTools = {
+    tools: [
+        {
+            name: 'anyforge_list_work_items',
+            description: 'List work items in the AnyForge backlog with status, priority, and any linked crew ' +
+                'state. By default archived items are excluded.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    includeArchived: { type: 'boolean', description: 'Include archived items (default false).' },
+                },
+            },
+        },
+        {
+            name: 'anyforge_get_work_item',
+            description: 'Get a single work item by id.',
+            inputSchema: {
+                type: 'object',
+                properties: { itemId: { type: 'string', description: 'The work item id.' } },
+                required: ['itemId'],
+            },
+        },
+        {
+            name: 'anyforge_create_work_item',
+            description: 'Create a new work item in the backlog (status BACKLOG). Requires `write` scope.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    title: { type: 'string', description: 'Work item title.' },
+                    description: { type: 'string', description: 'Detailed description.' },
+                    type: { type: 'string', description: 'FEATURE, BUG, ENHANCEMENT, KTLO, TECH_DEBT, INCIDENT.' },
+                    priority: { type: 'string', description: 'P0, P1, P2, P3.' },
+                    acceptanceCriteria: { type: 'string', description: 'Optional acceptance criteria.' },
+                    initiativeId: { type: 'string', description: 'Optional parent initiative id (allocates a {CODE}-NNN).' },
+                },
+                required: ['title', 'type', 'priority'],
+            },
+        },
+        {
+            name: 'anyforge_update_work_item',
+            description: 'Mutate a work item. `action` selects the operation: ' +
+                "'update' (edit title/description/type/priority/acceptanceCriteria/dependsOn), " +
+                "'advance' (BACKLOG→REFINED), 'approve_refinement' (REFINED→READY), " +
+                "'dispatch' (requires crewId), 'complete', 'archive', 'unarchive', 'reorder' (sortOrder), " +
+                "'close-as-fixed' (requires closedReason). Requires `write` scope.",
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    itemId: { type: 'string', description: 'The work item id.' },
+                    action: { type: 'string', description: 'The mutation to apply (see description).' },
+                    title: { type: 'string' },
+                    description: { type: 'string' },
+                    type: { type: 'string' },
+                    priority: { type: 'string' },
+                    acceptanceCriteria: { type: 'string' },
+                    bumpKind: { type: 'string', description: 'breaking | feat | fix | none.' },
+                    dependsOn: { type: 'array', items: { type: 'string' }, description: 'Work-item ids this depends on.' },
+                    crewId: { type: 'string', description: "For action='dispatch'." },
+                    crewType: { type: 'string' },
+                    sortOrder: { type: 'number', description: "For action='reorder'." },
+                    closedReason: { type: 'string', description: "For action='close-as-fixed'." },
+                    closedAsFixedByWorkItemId: { type: 'string' },
+                },
+                required: ['itemId', 'action'],
+            },
+        },
+    ],
+    handlers: {
+        anyforge_list_work_items: args => callControl('GET', `/work${qs({ includeArchived: args.includeArchived })}`),
+        anyforge_get_work_item: args => callControl('GET', `/work/${encodeURIComponent(String(args.itemId))}`),
+        anyforge_create_work_item: args => callControl('POST', '/work', {
+            title: args.title,
+            description: args.description,
+            type: args.type,
+            priority: args.priority,
+            ...(args.acceptanceCriteria ? { acceptanceCriteria: args.acceptanceCriteria } : {}),
+            ...(args.initiativeId ? { initiativeId: args.initiativeId } : {}),
+        }),
+        anyforge_update_work_item: args => {
+            const { itemId, ...rest } = args;
+            return callControl('PATCH', `/work/${encodeURIComponent(String(itemId))}`, rest);
+        },
+    },
+};
+//# sourceMappingURL=work.js.map

package/dist/tools/work.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work.js","sourceRoot":"","sources":["../../tools/work.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAA;AAGrD;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAe;IACnC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,qFAAqF;gBACrF,gDAAgD;YAClD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBAC7F;aACF;SACF;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,+BAA+B;YAC5C,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE;gBAC5E,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;SACF;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,WAAW,EAAE,iFAAiF;YAC9F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;oBAC1D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBACrE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;oBAC9F,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBAC5D,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;oBACpF,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yDAAyD,EAAE;iBACzG;gBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;aACxC;SACF;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,WAAW,EACT,sDAAsD;gBACtD,gFAAgF;gBAChF,qEAAqE;gBACrE,2FAA2F;gBAC3F,mEAAmE;YACrE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;oBAC5D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;oBACnF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;oBAC1E,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBACtG,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;oBACjE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBACnE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;oBAC7E,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC9C;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;aAC/B;SACF;KACF;IACD,QAAQ,EAAE;QACR,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAC/B,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAsC,EAAE,CAAC,EAAE,CAAC;QACpG,sBAAsB,EAAE,IAAI,CAAC,EAAE,CAC7B,WAAW,CAAC,KAAK,EAAE,SAAS,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACxE,yBAAyB,EAAE,IAAI,CAAC,EAAE,CAChC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;QACJ,yBAAyB,EAAE,IAAI,CAAC,EAAE;YAChC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;YAChC,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAClF,CAAC;KACF;CACF,CAAA"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@anyforge/mcp-server",
+  "version": "2.0.0",
+  "description": "AnyForge MCP Server — drive AnyForge (HIL approvals, initiatives, work items, crews) from Claude CLI, Cursor, and other MCP clients",
+  "type": "module",
+  "main": "./dist/index.js",
+  "bin": {
+    "anyforge-mcp-server": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "type-check": "tsc --noEmit",
+    "prepublishOnly": "npm run build",
+    "start": "npx tsx index.ts",
+    "dev": "npx tsx index.ts"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "anyforge",
+    "mcp",
+    "model-context-protocol",
+    "claude",
+    "claude-code"
+  ],
+  "license": "UNLICENSED",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.3"
+  }
+}