@codapult/guard 0.7.0 → 0.8.1

package/dist/mcp/tools/guard.js

@@ -4,6 +4,7 @@ import { guardErrorPayload } from '../../core/errors.js';
 import { analyzeProjectImpact } from '../../core/analysis/impact.js';
 import { z } from 'zod';
 import { runGuardVerification } from '../../core/verification/verify.js';
+import { auditGuardGovernance } from '../../core/audit/governance.js';
 const rootSchema = z.string().trim().min(1).optional().describe('Project path or workspace root.');
 function getGuardRoot(root) {
     return root ? findGuardRoot(root) : findGuardRoot();
@@ -450,9 +451,19 @@ export function registerGuardTools(server) {
                 .boolean()
                 .optional()
                 .describe('Override completionGate.projectChecks for this invocation.'),
+            policy_base: z
+                .string()
+                .trim()
+                .min(1)
+                .optional()
+                .describe('Git ref whose Guard policy should be used for this verification.'),
+            fail_on_policy_change: z
+                .boolean()
+                .optional()
+                .describe('Fail when the checked-out policy differs from policy_base.'),
             iteration: z.number().int().positive().default(1),
         },
-    }, ({ root: requestedRoot, checks, changed_only, requirement, tools, strict, project_checks, iteration, }) => {
+    }, ({ root: requestedRoot, checks, changed_only, requirement, tools, strict, project_checks, policy_base, fail_on_policy_change, iteration, }) => {
         const root = getGuardRoot(requestedRoot);
         const agent = loadAgentSafely(root);
         if ('error' in agent)
@@ -464,6 +475,8 @@ export function registerGuardTools(server) {
             tools,
             strict,
             projectChecks: project_checks,
+            policyBase: policy_base,
+            failOnPolicyChange: fail_on_policy_change,
         });
         const completionGate = agent.config.completionGate;
         return jsonToolResult({
@@ -475,6 +488,18 @@ export function registerGuardTools(server) {
             },
         }, result.status === 'fail');
     });
+    server.registerTool('codapult_guard_governance', {
+        title: 'Guard Governance Audit',
+        description: 'Audit declared proposal and approval provenance, policy bindings, and retained verification reachability. This reports metadata; it does not prove identity or signatures.',
+        inputSchema: { root: rootSchema },
+    }, ({ root: requestedRoot }) => {
+        try {
+            return jsonToolResult(auditGuardGovernance(getGuardRoot(requestedRoot)));
+        }
+        catch (error) {
+            return jsonToolResult({ status: 'fail', message: error instanceof Error ? error.message : String(error) }, true);
+        }
+    });
     server.registerTool('codapult_guard_audit', {
         title: 'Guard Audit',
         description: 'Run a full Guard audit, ignoring baseline suppression and validating contracts.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codapult/guard",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "mcpName": "io.github.codapult/guard",
   "description": "Local-first architecture guardrails for JavaScript and TypeScript projects, with first-class support for Next.js SaaS and AI-assisted development",
   "license": "MIT",