@de-otio/repo-aegis-mcp 0.2.0

package/README.md

@@ -0,0 +1,96 @@
+# @de-otio/repo-aegis-mcp
+
+> Model Context Protocol server wrapping repo-aegis as agent-readable tools.
+
+This package exposes the [repo-aegis](https://github.com/de-otio/repo-aegis)
+core library as a typed [MCP](https://modelcontextprotocol.io/) tool surface
+so a coding agent (Claude Code, Cursor, Aider, Cline, …) can drive it
+without shelling out to the CLI. Every tool returns the same JSON shape
+that `repo-aegis <command> --json` does, so the
+[agent operator guide](../../doc/agent-guide.md) — including its
+quick-reference table — applies unchanged.
+
+The server runs in-process: tool calls invoke `@de-otio/repo-aegis-core`
+directly. No subprocess spawn, no `--verbose` flag exposed, no path to
+literal markers.
+
+## Configuration (Claude Code)
+
+In `~/.claude/settings.json`:
+
+```json
+{
+  "mcpServers": {
+    "repo-aegis": {
+      "command": "repo-aegis-mcp"
+    }
+  }
+}
+```
+
+Once published to npm and installed globally, Claude Code (and any other
+MCP client) will spawn the bin over stdio and discover the tools below.
+
+For local development:
+
+```json
+{
+  "mcpServers": {
+    "repo-aegis": {
+      "command": "node",
+      "args": ["/abs/path/to/repo-aegis/packages/mcp/dist/index.js"]
+    }
+  }
+}
+```
+
+## Tools
+
+| Tool | What it does |
+|---|---|
+| `repo_aegis_status` | Repo class + allowed engagements + deny-set summary. Same shape as `repo-aegis status --json`. Call this first when landing in a new repo. |
+| `repo_aegis_check_path` | Scan a single file against the scoped deny set. Same shape as `repo-aegis check --path <file> --json`. |
+| `repo_aegis_check_staged` | Scan the staged diff. Same shape as `repo-aegis check --staged --json`. Pre-commit gate. |
+| `repo_aegis_engagements_list` | List engagements in the registry (id, name, dates, markerCount). Same shape as `repo-aegis engagements list --json`. |
+| `repo_aegis_engagements_show` | Show one engagement's metadata. Same shape as `repo-aegis engagements show <id> --json`. |
+| `repo_aegis_markers_test` | Probe a string against the scoped deny set; returns engagement attribution + redacted previews. Same shape as `repo-aegis markers test <s> --json`. |
+| `repo_aegis_markers_list` | List active marker files (engagement-id + redacted pattern previews). Same shape as `repo-aegis markers list --json`. |
+| `repo_aegis_audit` | Composite repo audit (marker scan, lockfile, fixtures, remote-vs-class). Same shape as `repo-aegis audit --json`. |
+| `aegis_classify_first_touch` | JIT classify a previously-unclassified repo from its git remote + the engagement registry's `githubOrgs` / `personalOrgs`. Returns `status: already-classified | applied | needs-confirmation | skipped` with `[SEC H-5]` redacted org names for ambiguous cases. |
+
+Three CLI flags are deliberately **not** exposed over MCP:
+
+- `--verbose` — the literal-reveal path is for a human at a terminal
+  only. Hooks and agents must never see literal markers.
+- `audit --org` — sends seed substrings (potentially customer-derived)
+  to GitHub code-search; cross-border data transfer requiring explicit
+  human consent.
+- `audit --published` / `audit --history` — long-running or
+  archive-extracting; CLI workflows.
+
+Mutating operations (`engagements add` / `end` / `remove`, `allow`,
+`deny`, `init`, `install …`) are also intentionally not exposed: those
+are user-confirmed compliance operations that should land at the
+terminal, not through an agent.
+
+## Redaction policy
+
+This applies everywhere in this server, by construction:
+
+- Every tool that scans content passes `revealMatches: false` to core's
+  `scanFile` / `scanStagedDiff` etc. (it's also the default — the
+  explicit setting is for audit clarity).
+- Every tool that exposes registry patterns redacts via
+  `core.redactMatch` before the value crosses the MCP boundary.
+- The `--verbose` CLI path is not exposed as an MCP input.
+- The `markers list` tool returns previews (`{ index, preview }`),
+  never literal patterns.
+
+If a tool result you receive ever contains a literal marker string,
+that's a bug — please file an issue.
+
+## License
+
+GPL-3.0-or-later. Copyright (C) 2026 Richard Myers and contributors.
+
+A De Otio tool — https://de-otio.org.

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+// Bin entry for the repo-aegis MCP server. Spawns the McpServer over stdio
+// and waits forever — the parent (Claude Code, Cursor, etc.) drives it via
+// JSON-RPC over stdin/stdout.
+//
+// Keep this file tiny. The server itself is built in `server.ts` so it can
+// be imported from tests without triggering stdio attach.
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { buildServer } from "./server.js";
+const server = buildServer();
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,4CAA4C;AAC5C,qDAAqD;AACrD,2EAA2E;AAC3E,2EAA2E;AAC3E,8BAA8B;AAC9B,EAAE;AACF,2EAA2E;AAC3E,0DAA0D;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;AAC7B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,16 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * Build a new {@link McpServer} with every repo-aegis tool registered.
+ *
+ * Pure factory — no I/O, no transport, no side effects until the caller
+ * invokes `server.connect(transport)`. Tests use this entrypoint with an
+ * in-memory transport pair; the bin entry uses it with stdio.
+ *
+ * **Redaction policy**: every tool calls into `@de-otio/repo-aegis-core`
+ * with `revealMatches: false` (the core default, but explicit in our
+ * tools). MCP clients are agents, and agents must never see literal
+ * matched markers — that's the whole point of redacting hits in the
+ * first place.
+ */
+export declare function buildServer(): McpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAkBpE;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,IAAI,SAAS,CASvC"}

package/dist/server.js

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { registerStatusTool } from "./tools/status.js";
+import { registerCheckTools } from "./tools/check.js";
+import { registerMarkersTools } from "./tools/markers.js";
+import { registerEngagementsTools } from "./tools/engagements.js";
+import { registerAuditTool } from "./tools/audit.js";
+import { registerFirstTouchTool } from "./tools/first-touch.js";
+/**
+ * Server identity. Bumping `version` is a coordinated change with the
+ * package.json `version` field — both must move together so a connected
+ * client can detect changes via `serverInfo`.
+ */
+const SERVER_INFO = {
+    name: "repo-aegis-mcp",
+    version: "0.0.1",
+};
+/**
+ * Build a new {@link McpServer} with every repo-aegis tool registered.
+ *
+ * Pure factory — no I/O, no transport, no side effects until the caller
+ * invokes `server.connect(transport)`. Tests use this entrypoint with an
+ * in-memory transport pair; the bin entry uses it with stdio.
+ *
+ * **Redaction policy**: every tool calls into `@de-otio/repo-aegis-core`
+ * with `revealMatches: false` (the core default, but explicit in our
+ * tools). MCP clients are agents, and agents must never see literal
+ * matched markers — that's the whole point of redacting hits in the
+ * first place.
+ */
+export function buildServer() {
+    const server = new McpServer(SERVER_INFO);
+    registerStatusTool(server);
+    registerCheckTools(server);
+    registerMarkersTools(server);
+    registerEngagementsTools(server);
+    registerAuditTool(server);
+    registerFirstTouchTool(server);
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;CACR,CAAC;AAEX;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1C,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server.test.d.ts.map

package/dist/server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.d.ts","sourceRoot":"","sources":["../src/server.test.ts"],"names":[],"mappings":""}

package/dist/server.test.js

@@ -0,0 +1,171 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+// Copyright (C) 2026 Richard Myers and contributors.
+// Smoke test for the MCP server: boot it with an in-memory transport pair,
+// list tools, and call one tool end-to-end. Verifies that:
+//   - every tool the server should register is actually registered;
+//   - a non-trivial tool (status) returns valid JSON of the expected shape;
+//   - the redaction policy holds (no literal markers in any output).
+//
+// Skips gracefully if the MCP SDK isn't installed in node_modules — useful
+// in environments where the workspace install hasn't run yet.
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+const EXPECTED_TOOLS = [
+    "repo_aegis_status",
+    "repo_aegis_check_path",
+    "repo_aegis_check_staged",
+    "repo_aegis_engagements_list",
+    "repo_aegis_engagements_show",
+    "repo_aegis_markers_test",
+    "repo_aegis_markers_list",
+    "repo_aegis_audit",
+    "aegis_classify_first_touch",
+];
+async function loadHarness() {
+    try {
+        const [{ buildServer }, { Client }, { InMemoryTransport }] = await Promise.all([
+            import("./server.js"),
+            import("@modelcontextprotocol/sdk/client/index.js"),
+            import("@modelcontextprotocol/sdk/inMemory.js"),
+        ]);
+        return { buildServer, Client, InMemoryTransport };
+    }
+    catch {
+        return null;
+    }
+}
+const harness = await loadHarness();
+if (!harness) {
+    describe("repo-aegis MCP server (skipped: SDK not installed)", () => {
+        it("skips when @modelcontextprotocol/sdk isn't resolvable", { skip: true }, () => {
+            /* skipped */
+        });
+    });
+}
+else {
+    const { buildServer, Client, InMemoryTransport } = harness;
+    let tmp;
+    let home;
+    let repo;
+    before(async () => {
+        tmp = mkdtempSync(join(tmpdir(), "repo-aegis-mcp-test-"));
+        home = join(tmp, "home");
+        const markersDir = join(home, "markers");
+        const stateDir = join(home, "state");
+        mkdirSync(markersDir, { recursive: true });
+        mkdirSync(stateDir, { recursive: true });
+        // No engagements / no marker files: status should report an empty
+        // deny set and zero patterns. We do NOT scaffold a registry.yaml here
+        // because we're testing the "fresh install" path; loadRegistry's
+        // RegistryNotFoundError is silently absorbed by the status tool.
+        process.env["REPO_AEGIS_HOME"] = home;
+        repo = join(tmp, "repo");
+        mkdirSync(repo, { recursive: true });
+        execFileSync("git", ["init", "-q"], { cwd: repo });
+        execFileSync("git", ["config", "user.name", "test"], { cwd: repo });
+        execFileSync("git", ["config", "user.email", "test@example.com"], { cwd: repo });
+        // Class: private-strict (default). No engagements.
+    });
+    after(() => {
+        delete process.env["REPO_AEGIS_HOME"];
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    describe("repo-aegis MCP server", () => {
+        it("registers every expected tool", async () => {
+            const server = buildServer();
+            const client = new Client({ name: "test-client", version: "0.0.0" });
+            const [serverTransport, clientTransport] = InMemoryTransport.createLinkedPair();
+            await Promise.all([server.connect(serverTransport), client.connect(clientTransport)]);
+            try {
+                const list = await client.listTools();
+                const names = list.tools.map(t => t.name).sort();
+                for (const expected of EXPECTED_TOOLS) {
+                    assert.ok(names.includes(expected), `expected tool ${expected} to be registered; got ${names.join(", ")}`);
+                }
+            }
+            finally {
+                await client.close();
+                await server.close();
+            }
+        });
+        it("repo_aegis_status returns the canonical shape against a tmp git repo", async () => {
+            const server = buildServer();
+            const client = new Client({ name: "test-client", version: "0.0.0" });
+            const [serverTransport, clientTransport] = InMemoryTransport.createLinkedPair();
+            await Promise.all([server.connect(serverTransport), client.connect(clientTransport)]);
+            try {
+                const result = await client.callTool({
+                    name: "repo_aegis_status",
+                    arguments: { cwd: repo },
+                });
+                assert.equal(result.isError, undefined);
+                const content = result.content;
+                assert.ok(content && content.length > 0, "expected content array");
+                const text = content[0].text;
+                assert.ok(typeof text === "string", "expected text content");
+                const parsed = JSON.parse(text);
+                assert.equal(parsed.repo.isGitRepo, true);
+                assert.equal(parsed.repo.class, "private-strict");
+                assert.deepEqual(parsed.repo.engagements, []);
+                assert.equal(parsed.denySet.patternCount, 0);
+                assert.deepEqual(parsed.allowedEngagements, []);
+            }
+            finally {
+                await client.close();
+                await server.close();
+            }
+        });
+        it("repo_aegis_markers_test redacts the input and returns no hits when deny set is empty", async () => {
+            const server = buildServer();
+            const client = new Client({ name: "test-client", version: "0.0.0" });
+            const [serverTransport, clientTransport] = InMemoryTransport.createLinkedPair();
+            await Promise.all([server.connect(serverTransport), client.connect(clientTransport)]);
+            try {
+                const result = await client.callTool({
+                    name: "repo_aegis_markers_test",
+                    arguments: { input: "some-private-string", cwd: repo },
+                });
+                assert.equal(result.isError, undefined);
+                const content = result.content;
+                const parsed = JSON.parse(content[0].text);
+                // Input must be redacted in the response — never returned verbatim.
+                assert.notEqual(parsed.input, "some-private-string");
+                assert.ok(parsed.input.length > 0);
+                assert.deepEqual(parsed.hits, []);
+                // Avoid asserting "input does not contain literal" too eagerly — the
+                // redactMatch preview keeps a short prefix. The important invariant
+                // is "not equal to literal", which we check above.
+                void writeFileSync; // keep import used
+            }
+            finally {
+                await client.close();
+                await server.close();
+            }
+        });
+        it("repo_aegis_engagements_list returns REGISTRY_NOT_FOUND when no registry exists", async () => {
+            const server = buildServer();
+            const client = new Client({ name: "test-client", version: "0.0.0" });
+            const [serverTransport, clientTransport] = InMemoryTransport.createLinkedPair();
+            await Promise.all([server.connect(serverTransport), client.connect(clientTransport)]);
+            try {
+                const result = await client.callTool({
+                    name: "repo_aegis_engagements_list",
+                    arguments: {},
+                });
+                assert.equal(result.isError, true);
+                const content = result.content;
+                const parsed = JSON.parse(content[0].text);
+                assert.equal(parsed.code, "REGISTRY_NOT_FOUND");
+            }
+            finally {
+                await client.close();
+                await server.close();
+            }
+        });
+    });
+}
+//# sourceMappingURL=server.test.js.map

package/dist/server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.js","sourceRoot":"","sources":["../src/server.test.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,qDAAqD;AACrD,2EAA2E;AAC3E,2DAA2D;AAC3D,oEAAoE;AACpE,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,8DAA8D;AAC9D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,SAAS,EACT,WAAW,EACX,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,cAAc,GAAG;IACrB,mBAAmB;IACnB,uBAAuB;IACvB,yBAAyB;IACzB,6BAA6B;IAC7B,6BAA6B;IAC7B,yBAAyB;IACzB,yBAAyB;IACzB,kBAAkB;IAClB,4BAA4B;CACpB,CAAC;AAEX,KAAK,UAAU,WAAW;IAKxB,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7E,MAAM,CAAC,aAAa,CAAC;YACrB,MAAM,CAAC,2CAA2C,CAAC;YACnD,MAAM,CAAC,uCAAuC,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;AAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;IACb,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAClE,EAAE,CAAC,uDAAuD,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;YAC/E,aAAa;QACf,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAE3D,IAAI,GAAW,CAAC;IAChB,IAAI,IAAY,CAAC;IACjB,IAAI,IAAY,CAAC;IAEjB,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAC1D,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,kEAAkE;QAClE,sEAAsE;QACtE,iEAAiE;QACjE,iEAAiE;QACjE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC;QAEtC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,mDAAmD;IACrD,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;YAChF,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;oBACtC,MAAM,CAAC,EAAE,CACP,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACxB,iBAAiB,QAAQ,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;gBACJ,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;YAChF,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;oBACnC,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;iBACzB,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA4D,CAAC;gBACpF,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;gBACnE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;gBAC9B,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,EAAE,uBAAuB,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAM7B,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;gBAClD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;gBAC7C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAClD,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;YACpG,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;YAChF,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;oBACnC,IAAI,EAAE,yBAAyB;oBAC/B,SAAS,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,GAAG,EAAE,IAAI,EAAE;iBACvD,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA4D,CAAC;gBACpF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,CAG1C,CAAC;gBACF,oEAAoE;gBACpE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;gBACrD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACnC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClC,qEAAqE;gBACrE,oEAAoE;gBACpE,mDAAmD;gBACnD,KAAK,aAAa,CAAC,CAAC,mBAAmB;YACzC,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;YAC9F,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;YAChF,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;oBACnC,IAAI,EAAE,6BAA6B;oBACnC,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAgD,CAAC;gBACxE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAqC,CAAC;gBAChF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YAClD,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/_util.d.ts

@@ -0,0 +1,26 @@
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+/**
+ * Wrap a JSON-shaped value as the canonical MCP tool result.
+ *
+ * Every repo-aegis MCP tool returns the same JSON shape that the CLI
+ * emits with `--json`, so the agent-guide quick-reference table applies
+ * unchanged. We expose it via two channels:
+ *   1. `content[0].text` — pretty-printed JSON, the legacy-compatible
+ *      surface every MCP client can read.
+ *   2. `structuredContent` — the parsed object, for clients that prefer
+ *      the typed shape over re-parsing the text.
+ */
+export declare function jsonResult(value: unknown): CallToolResult;
+/**
+ * Wrap a thrown Error as an MCP tool error result. Tools should let
+ * unexpected errors propagate (the SDK will translate them), but for
+ * known/expected failure modes (e.g. registry-not-found, not-a-git-repo)
+ * we'd rather return a structured error than a generic JSON-RPC error
+ * so the agent can read `code` and act on it.
+ */
+export declare function errorResult(payload: {
+    code?: string;
+    error: string;
+    details?: unknown;
+}): CallToolResult;
+//# sourceMappingURL=_util.d.ts.map

package/dist/tools/_util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_util.d.ts","sourceRoot":"","sources":["../../src/tools/_util.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAMzD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,cAAc,CAMxG"}

package/dist/tools/_util.js

@@ -0,0 +1,33 @@
+/**
+ * Wrap a JSON-shaped value as the canonical MCP tool result.
+ *
+ * Every repo-aegis MCP tool returns the same JSON shape that the CLI
+ * emits with `--json`, so the agent-guide quick-reference table applies
+ * unchanged. We expose it via two channels:
+ *   1. `content[0].text` — pretty-printed JSON, the legacy-compatible
+ *      surface every MCP client can read.
+ *   2. `structuredContent` — the parsed object, for clients that prefer
+ *      the typed shape over re-parsing the text.
+ */
+export function jsonResult(value) {
+    const text = JSON.stringify(value, null, 2);
+    return {
+        content: [{ type: "text", text }],
+        structuredContent: value,
+    };
+}
+/**
+ * Wrap a thrown Error as an MCP tool error result. Tools should let
+ * unexpected errors propagate (the SDK will translate them), but for
+ * known/expected failure modes (e.g. registry-not-found, not-a-git-repo)
+ * we'd rather return a structured error than a generic JSON-RPC error
+ * so the agent can read `code` and act on it.
+ */
+export function errorResult(payload) {
+    return {
+        content: [{ type: "text", text: JSON.stringify(payload, null, 2) }],
+        structuredContent: payload,
+        isError: true,
+    };
+}
+//# sourceMappingURL=_util.js.map

package/dist/tools/_util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_util.js","sourceRoot":"","sources":["../../src/tools/_util.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,iBAAiB,EAAE,KAAgC;KACpD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,OAA4D;IACtF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACnE,iBAAiB,EAAE,OAAkC;QACrD,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/tools/audit.d.ts

@@ -0,0 +1,20 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * `repo_aegis_audit` — composite repo health check.
+ *
+ * Runs the same default checks as `repo-aegis audit --json` minus the
+ * network-dependent / archive-extracting flags (`--org`, `--published`,
+ * `--history`). Those are intentionally omitted from the MCP surface:
+ *
+ *   - `--org` is a cross-border data transfer and requires explicit
+ *     human consent (`--accept-cross-border` or the matching env var).
+ *     The agent must never opt the user in to that.
+ *   - `--published` extracts archives to a temp dir; that's a CLI
+ *     workflow, not an interactive-agent one.
+ *   - `--history` is slow (full git-log sweep per pattern). If the user
+ *     wants it, they run the CLI directly.
+ *
+ * Hits are returned with `matchPreview` already redacted by core.
+ */
+export declare function registerAuditTool(server: McpServer): void;
+//# sourceMappingURL=audit.d.ts.map

package/dist/tools/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/tools/audit.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA0QzE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA2CzD"}