@decionis/mcp 0.1.0

package/dist/index.js

@@ -0,0 +1,310 @@
+#!/usr/bin/env node
+import {
+  LocalDecionisGateway,
+  PolicyFileRepository,
+  normalizeVerdict,
+  sha256Hex
+} from "./chunk-QSCP7MRQ.js";
+
+// src/Server.ts
+import { createInterface } from "readline";
+var SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26", "2024-11-05"];
+var DEFAULT_PROTOCOL_VERSION = "2025-06-18";
+var isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+function rpcResult(id, result) {
+  return { jsonrpc: "2.0", id, result };
+}
+function rpcError(id, code, message) {
+  return { jsonrpc: "2.0", id, error: { code, message } };
+}
+var McpMessageHandler = class {
+  constructor(options) {
+    this.options = options;
+    this.toolsByName = new Map(options.tools.map((tool) => [tool.name, tool]));
+  }
+  toolsByName;
+  async handle(message) {
+    if (!isPlainObject(message) || message.jsonrpc !== "2.0" || typeof message.method !== "string") {
+      const id2 = isPlainObject(message) && "id" in message ? message.id : null;
+      return rpcError(id2, -32600, "Invalid JSON-RPC 2.0 request");
+    }
+    const { method, id } = message;
+    const isNotification = !("id" in message);
+    const params = isPlainObject(message.params) ? message.params : {};
+    if (isNotification) return null;
+    switch (method) {
+      case "initialize": {
+        const requested = typeof params.protocolVersion === "string" ? params.protocolVersion : "";
+        const protocolVersion = SUPPORTED_PROTOCOL_VERSIONS.includes(requested) ? requested : DEFAULT_PROTOCOL_VERSION;
+        return rpcResult(id, {
+          protocolVersion,
+          capabilities: { tools: { listChanged: false } },
+          serverInfo: this.options.serverInfo
+        });
+      }
+      case "ping":
+        return rpcResult(id, {});
+      case "tools/list":
+        return rpcResult(id, {
+          tools: this.options.tools.map(({ name, description, inputSchema }) => ({
+            name,
+            description,
+            inputSchema
+          }))
+        });
+      case "tools/call": {
+        const name = typeof params.name === "string" ? params.name : "";
+        const tool = this.toolsByName.get(name);
+        if (!tool) return rpcError(id, -32602, `Unknown tool: ${name || "(missing name)"}`);
+        const args = isPlainObject(params.arguments) ? params.arguments : {};
+        try {
+          const result = await tool.handler(args);
+          return rpcResult(id, { content: result.content, isError: result.isError ?? false });
+        } catch (err) {
+          return rpcResult(id, {
+            content: [
+              {
+                type: "text",
+                text: `Tool ${name} failed: ${err instanceof Error ? err.message : String(err)}`
+              }
+            ],
+            isError: true
+          });
+        }
+      }
+      default:
+        return rpcError(id, -32601, `Method not found: ${method}`);
+    }
+  }
+};
+var McpStdioServer = class {
+  static run(handler2, streams = {}) {
+    const input = streams.input ?? process.stdin;
+    const output = streams.output ?? process.stdout;
+    const rl = createInterface({ input, crlfDelay: Infinity });
+    const inFlight = /* @__PURE__ */ new Set();
+    return new Promise((resolve) => {
+      rl.on("line", (line) => {
+        const trimmed = line.trim();
+        if (!trimmed) return;
+        const work = (async () => {
+          let message;
+          try {
+            message = JSON.parse(trimmed);
+          } catch {
+            output.write(`${JSON.stringify(rpcError(null, -32700, "Parse error"))}
+`);
+            return;
+          }
+          try {
+            const response = await handler2(message);
+            if (response !== null) output.write(`${JSON.stringify(response)}
+`);
+          } catch (err) {
+            process.stderr.write(`decionis-mcp: handler error: ${String(err)}
+`);
+          }
+        })();
+        inFlight.add(work);
+        void work.finally(() => inFlight.delete(work));
+      });
+      rl.on("close", () => {
+        void Promise.allSettled([...inFlight]).then(() => resolve());
+      });
+    });
+  }
+};
+function createMcpHandler(options) {
+  const handler2 = new McpMessageHandler(options);
+  return async function handleMessage(message) {
+    return handler2.handle(message);
+  };
+}
+function runStdioServer(handler2, streams = {}) {
+  return McpStdioServer.run(handler2, streams);
+}
+
+// src/Tools.ts
+var text = (value) => [
+  { type: "text", text: typeof value === "string" ? value : JSON.stringify(value, null, 2) }
+];
+var isPlainObject2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var VERDICT_HELP = `# Decionis verdicts and rule grammar
+
+**Verdicts** (a rule's \`action\`): \`allow\` (execute), \`block\` (never execute),
+\`restrain\` (hold for human review), \`escalate\` (require an authorized approver).
+The protocol reports outcomes as APPROVE / REJECT / REVIEW / ESCALATE; this server
+also returns the normalized verdict (allow / block / review / escalate). When no
+rule matches, the platform holds the decision for review (outcome REVIEW).
+
+**Rules block** (in DECIONIS_POLICY.md):
+\`\`\`decionis
+{ "version": 1, "rules": [
+  { "name": "Block deploys during a change freeze",
+    "priority": 100, "domain": "*",
+    "all": [{ "field": "context.change_freeze", "op": "eq", "value": true }],
+    "action": "block" } ] }
+\`\`\`
+
+- Each rule has exactly one of \`all\` (AND) / \`any\` (OR).
+- Operators: eq, ne/neq, gt, gte, lt, lte, in (values array), not_in (values array),
+  exists, contains, matches (case-insensitive regex). Equality coerces numbers,
+  booleans, and lowercased text; arrays match on any element.
+- Fields resolve against the decision payload: \`context.<key>\` reads payload keys,
+  \`decision_type\` derives from the payload's \`action\` label, then the workflow key.
+- Give every rule an explicit \`priority\` (higher evaluates first) and keep
+  \`"domain": "*"\` so it applies to every decision the repo gates.
+
+**Before committing or running anything risky**, call \`decionis_evaluate\` with the
+action you intend to take (e.g. {"action": "production-deploy", "agent_generated": true})
+and abide by the verdict: allow \u2192 proceed; block \u2192 do not proceed; review/escalate \u2192
+stop and ask a human.`;
+var DecionisTools = class {
+  constructor(gateway2, policyFiles = new PolicyFileRepository()) {
+    this.gateway = gateway2;
+    this.policyFiles = policyFiles;
+  }
+  build() {
+    const gateway2 = this.gateway;
+    return [
+      {
+        name: "decionis_read_policy",
+        description: "Read and compile the repo's DECIONIS_POLICY.md governance policy: path, sha256, and the enforceable rules (name, verdict, priority, domain) or compile errors. Use this to learn what this repository allows, blocks, restrains, or escalates.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            path: {
+              type: "string",
+              description: "Policy file path (default: $DECIONIS_POLICY_PATH or ./DECIONIS_POLICY.md)"
+            }
+          },
+          additionalProperties: false
+        },
+        handler: async (args) => {
+          const file = await this.policyFiles.read(args.path);
+          if (!file.ok) return { content: text(file.message), isError: true };
+          const compiled = gateway2.compile(file.content);
+          return {
+            content: text({
+              path: file.path,
+              sha256: sha256Hex(file.content),
+              bytes: Buffer.byteLength(file.content, "utf8"),
+              rules: compiled === null ? "no ```decionis rules block \u2014 the file is prose-only documentation" : compiled.errors.length > 0 ? { compile_errors: compiled.errors } : compiled.rules.map((rule) => ({
+                name: rule.name,
+                verdict: rule.then.action,
+                priority: rule.priority,
+                domain: rule.decision_domain,
+                when: rule.when
+              }))
+            })
+          };
+        }
+      },
+      {
+        name: "decionis_evaluate",
+        description: "Evaluate a candidate action against the repo's DECIONIS_POLICY.md through the real Decionis protocol evaluator, entirely locally (no network, no credentials, nothing recorded). Call this BEFORE committing, deploying, migrating, or any risky action, and abide by the verdict: allow \u2192 proceed; block \u2192 do not proceed; review/escalate \u2192 stop and involve a human.",
+        inputSchema: {
+          type: "object",
+          required: ["payload"],
+          properties: {
+            payload: {
+              type: "object",
+              description: 'The candidate action, e.g. {"action": "production-deploy", "change_freeze": true, "agent_generated": true}'
+            },
+            workflow_key: {
+              type: "string",
+              description: "Optional workflow key for the gated surface."
+            },
+            mode: { type: "string", enum: ["shadow", "enforce"], description: "Default: shadow." },
+            path: { type: "string", description: "Policy file path override." }
+          },
+          additionalProperties: false
+        },
+        handler: async (args) => {
+          if (!isPlainObject2(args.payload)) {
+            return {
+              content: text("`payload` must be a JSON object describing the action."),
+              isError: true
+            };
+          }
+          const file = await this.policyFiles.read(args.path);
+          if (!file.ok) return { content: text(file.message), isError: true };
+          const workflowKey = typeof args.workflow_key === "string" ? args.workflow_key : null;
+          const published = await gateway2.publishPolicy(file.content, { workflowKey });
+          if (!published.ok) {
+            return {
+              content: text({
+                error: published.reason,
+                details: published.errors,
+                hint: published.reason === "no_rules_block" ? "Add a ```decionis rules block to make the policy enforceable \u2014 see decionis_verdict_help." : "Fix the rules block so it compiles; the platform enforces all-or-nothing."
+              }),
+              isError: true
+            };
+          }
+          const evaluated = await gateway2.evaluate({
+            payload: args.payload,
+            workflowKey,
+            mode: args.mode === "enforce" ? "enforce" : "shadow"
+          });
+          if (evaluated.status !== 200) {
+            return {
+              content: text({
+                error: `protocol evaluation failed (HTTP ${evaluated.status})`,
+                body: evaluated.body
+              }),
+              isError: true
+            };
+          }
+          const body = evaluated.body;
+          const policyEvaluation = isPlainObject2(body.policy_evaluation) ? body.policy_evaluation : {};
+          const evaluatedRuleCount = typeof policyEvaluation.evaluated_rule_count === "number" ? policyEvaluation.evaluated_rule_count : null;
+          return {
+            content: text({
+              verdict: normalizeVerdict(body.outcome),
+              outcome: body.outcome,
+              resolution: policyEvaluation.resolution ?? null,
+              selected_rule: policyEvaluation.selected_rule_name ?? null,
+              matched_rule_count: policyEvaluation.matched_rule_count ?? null,
+              evaluated_rule_count: evaluatedRuleCount,
+              decision_domain: policyEvaluation.decision_domain ?? body.decision_domain ?? null,
+              policy_version: published.version,
+              policy_sha256: published.sha256,
+              confidence: body.confidence ?? null,
+              note: "Local sandbox evaluation \u2014 nothing was recorded and no signed dossier was minted. CI runs through decionis/govern produce the signed, verifiable record.",
+              ...published.ruleCount > 0 && evaluatedRuleCount === 0 ? {
+                hint: `All ${published.ruleCount} compiled rule(s) were filtered out by the decision-domain match before evaluation. Add "domain": "*" to each rule so it applies to every decision this repo gates.`
+              } : {}
+            })
+          };
+        }
+      },
+      {
+        name: "decionis_verdict_help",
+        description: "Reference for Decionis verdicts (allow/block/restrain/escalate), the rules-block grammar and operators, and how an agent should behave on each verdict.",
+        inputSchema: { type: "object", properties: {}, additionalProperties: false },
+        handler: async () => ({ content: text(VERDICT_HELP) })
+      }
+    ];
+  }
+};
+function createDecionisTools(gateway2) {
+  return new DecionisTools(gateway2).build();
+}
+
+// src/index.ts
+var gateway = new LocalDecionisGateway();
+var handler = createMcpHandler({
+  serverInfo: { name: "decionis-mcp", version: "0.1.0" },
+  tools: createDecionisTools(gateway)
+});
+runStdioServer(handler).then(async () => {
+  await gateway.close();
+  process.exit(0);
+}).catch(async (err) => {
+  process.stderr.write(`decionis-mcp: fatal: ${String(err)}
+`);
+  await gateway.close().catch(() => {
+  });
+  process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/Server.ts","../src/Tools.ts","../src/index.ts"],"sourcesContent":["/**\n * Minimal MCP (Model Context Protocol) server core: JSON-RPC 2.0 over\n * newline-delimited stdio. Hand-rolled (no SDK dependency), matching the\n * protocol service's hand-rolled remote MCP surface. The message handler is\n * transport-agnostic and unit-testable; the stdio loop is a thin shell.\n */\n\nimport { createInterface } from \"node:readline\";\n\nexport const SUPPORTED_PROTOCOL_VERSIONS = [\"2025-06-18\", \"2025-03-26\", \"2024-11-05\"];\nconst DEFAULT_PROTOCOL_VERSION = \"2025-06-18\";\n\nexport interface ToolContent {\n  type: \"text\";\n  text: string;\n}\n\nexport interface ToolDefinition {\n  name: string;\n  description: string;\n  inputSchema: Record<string, unknown>;\n  handler: (\n    args: Record<string, unknown>,\n  ) => Promise<{ content: ToolContent[]; isError?: boolean }>;\n}\n\nexport interface ServerInfo {\n  name: string;\n  version: string;\n}\n\ntype JsonRpcResponse = Record<string, unknown>;\n\nconst isPlainObject = (v: unknown): v is Record<string, unknown> =>\n  typeof v === \"object\" && v !== null && !Array.isArray(v);\n\nfunction rpcResult(id: unknown, result: unknown): JsonRpcResponse {\n  return { jsonrpc: \"2.0\", id, result };\n}\n\nfunction rpcError(id: unknown, code: number, message: string): JsonRpcResponse {\n  return { jsonrpc: \"2.0\", id, error: { code, message } };\n}\n\n/**\n * The MCP message handler. Returns `null` for notifications (no reply) and\n * a JSON-RPC response object otherwise.\n */\nexport class McpMessageHandler {\n  private readonly toolsByName: Map<string, ToolDefinition>;\n\n  constructor(private readonly options: { serverInfo: ServerInfo; tools: ToolDefinition[] }) {\n    this.toolsByName = new Map(options.tools.map((tool) => [tool.name, tool]));\n  }\n\n  async handle(message: unknown): Promise<JsonRpcResponse | null> {\n    if (\n      !isPlainObject(message) ||\n      message.jsonrpc !== \"2.0\" ||\n      typeof message.method !== \"string\"\n    ) {\n      const id = isPlainObject(message) && \"id\" in message ? message.id : null;\n      return rpcError(id, -32600, \"Invalid JSON-RPC 2.0 request\");\n    }\n    const { method, id } = message;\n    const isNotification = !(\"id\" in message);\n    const params = isPlainObject(message.params) ? message.params : {};\n\n    if (isNotification) return null; // notifications/initialized, cancellations, …\n\n    switch (method) {\n      case \"initialize\": {\n        const requested = typeof params.protocolVersion === \"string\" ? params.protocolVersion : \"\";\n        const protocolVersion = SUPPORTED_PROTOCOL_VERSIONS.includes(requested)\n          ? requested\n          : DEFAULT_PROTOCOL_VERSION;\n        return rpcResult(id, {\n          protocolVersion,\n          capabilities: { tools: { listChanged: false } },\n          serverInfo: this.options.serverInfo,\n        });\n      }\n      case \"ping\":\n        return rpcResult(id, {});\n      case \"tools/list\":\n        return rpcResult(id, {\n          tools: this.options.tools.map(({ name, description, inputSchema }) => ({\n            name,\n            description,\n            inputSchema,\n          })),\n        });\n      case \"tools/call\": {\n        const name = typeof params.name === \"string\" ? params.name : \"\";\n        const tool = this.toolsByName.get(name);\n        if (!tool) return rpcError(id, -32602, `Unknown tool: ${name || \"(missing name)\"}`);\n        const args = isPlainObject(params.arguments) ? params.arguments : {};\n        try {\n          const result = await tool.handler(args);\n          return rpcResult(id, { content: result.content, isError: result.isError ?? false });\n        } catch (err) {\n          return rpcResult(id, {\n            content: [\n              {\n                type: \"text\",\n                text: `Tool ${name} failed: ${err instanceof Error ? err.message : String(err)}`,\n              },\n            ],\n            isError: true,\n          });\n        }\n      }\n      default:\n        return rpcError(id, -32601, `Method not found: ${method}`);\n    }\n  }\n}\n\n/**\n * Runs a message handler over stdio: one JSON message per line in, one per\n * line out. Only protocol JSON is ever written to stdout; diagnostics go to\n * stderr.\n */\nexport class McpStdioServer {\n  static run(\n    handler: (message: unknown) => Promise<JsonRpcResponse | null>,\n    streams: { input?: NodeJS.ReadableStream; output?: NodeJS.WritableStream } = {},\n  ): Promise<void> {\n    const input = streams.input ?? process.stdin;\n    const output = streams.output ?? process.stdout;\n    const rl = createInterface({ input, crlfDelay: Infinity });\n    const inFlight = new Set<Promise<void>>();\n\n    return new Promise((resolve) => {\n      rl.on(\"line\", (line) => {\n        const trimmed = line.trim();\n        if (!trimmed) return;\n        const work = (async () => {\n          let message: unknown;\n          try {\n            message = JSON.parse(trimmed);\n          } catch {\n            output.write(`${JSON.stringify(rpcError(null, -32700, \"Parse error\"))}\\n`);\n            return;\n          }\n          try {\n            const response = await handler(message);\n            if (response !== null) output.write(`${JSON.stringify(response)}\\n`);\n          } catch (err) {\n            process.stderr.write(`decionis-mcp: handler error: ${String(err)}\\n`);\n          }\n        })();\n        inFlight.add(work);\n        void work.finally(() => inFlight.delete(work));\n      });\n      rl.on(\"close\", () => {\n        // stdin EOF: drain in-flight handlers so no response is lost.\n        void Promise.allSettled([...inFlight]).then(() => resolve());\n      });\n    });\n  }\n}\n\n/**\n * Build the message handler. Returns `null` for notifications (no reply) and\n * a JSON-RPC response object otherwise.\n */\nexport function createMcpHandler(options: { serverInfo: ServerInfo; tools: ToolDefinition[] }) {\n  const handler = new McpMessageHandler(options);\n  return async function handleMessage(message: unknown): Promise<JsonRpcResponse | null> {\n    return handler.handle(message);\n  };\n}\n\n/**\n * Run the handler over stdio: one JSON message per line in, one per line out.\n * Only protocol JSON is ever written to stdout; diagnostics go to stderr.\n */\nexport function runStdioServer(\n  handler: (message: unknown) => Promise<JsonRpcResponse | null>,\n  streams: { input?: NodeJS.ReadableStream; output?: NodeJS.WritableStream } = {},\n): Promise<void> {\n  return McpStdioServer.run(handler, streams);\n}\n","/**\n * The Decionis MCP tools: read the repo's DECIONIS_POLICY.md, evaluate a\n * candidate action against it through the real protocol evaluator, and\n * explain the verdict vocabulary — so coding agents can check governance\n * constraints BEFORE committing or triggering anything.\n */\n\nimport { LocalDecionisGateway, normalizeVerdict } from \"./Gateway.js\";\nimport { PolicyFileRepository } from \"./agent/PolicyFileRepository.js\";\nimport { sha256Hex } from \"./RulesBlock.js\";\nimport type { ToolContent, ToolDefinition } from \"./Server.js\";\n\nconst text = (value: unknown): ToolContent[] => [\n  { type: \"text\", text: typeof value === \"string\" ? value : JSON.stringify(value, null, 2) },\n];\n\nconst isPlainObject = (v: unknown): v is Record<string, unknown> =>\n  typeof v === \"object\" && v !== null && !Array.isArray(v);\n\nconst VERDICT_HELP = `# Decionis verdicts and rule grammar\n\n**Verdicts** (a rule's \\`action\\`): \\`allow\\` (execute), \\`block\\` (never execute),\n\\`restrain\\` (hold for human review), \\`escalate\\` (require an authorized approver).\nThe protocol reports outcomes as APPROVE / REJECT / REVIEW / ESCALATE; this server\nalso returns the normalized verdict (allow / block / review / escalate). When no\nrule matches, the platform holds the decision for review (outcome REVIEW).\n\n**Rules block** (in DECIONIS_POLICY.md):\n\\`\\`\\`decionis\n{ \"version\": 1, \"rules\": [\n  { \"name\": \"Block deploys during a change freeze\",\n    \"priority\": 100, \"domain\": \"*\",\n    \"all\": [{ \"field\": \"context.change_freeze\", \"op\": \"eq\", \"value\": true }],\n    \"action\": \"block\" } ] }\n\\`\\`\\`\n\n- Each rule has exactly one of \\`all\\` (AND) / \\`any\\` (OR).\n- Operators: eq, ne/neq, gt, gte, lt, lte, in (values array), not_in (values array),\n  exists, contains, matches (case-insensitive regex). Equality coerces numbers,\n  booleans, and lowercased text; arrays match on any element.\n- Fields resolve against the decision payload: \\`context.<key>\\` reads payload keys,\n  \\`decision_type\\` derives from the payload's \\`action\\` label, then the workflow key.\n- Give every rule an explicit \\`priority\\` (higher evaluates first) and keep\n  \\`\"domain\": \"*\"\\` so it applies to every decision the repo gates.\n\n**Before committing or running anything risky**, call \\`decionis_evaluate\\` with the\naction you intend to take (e.g. {\"action\": \"production-deploy\", \"agent_generated\": true})\nand abide by the verdict: allow → proceed; block → do not proceed; review/escalate →\nstop and ask a human.`;\n\n/** Builds the Decionis tool set bound to a local gateway. */\nexport class DecionisTools {\n  constructor(\n    private readonly gateway: LocalDecionisGateway,\n    private readonly policyFiles: PolicyFileRepository = new PolicyFileRepository(),\n  ) {}\n\n  build(): ToolDefinition[] {\n    const gateway = this.gateway;\n    return [\n      {\n        name: \"decionis_read_policy\",\n        description:\n          \"Read and compile the repo's DECIONIS_POLICY.md governance policy: path, sha256, and the \" +\n          \"enforceable rules (name, verdict, priority, domain) or compile errors. Use this to learn \" +\n          \"what this repository allows, blocks, restrains, or escalates.\",\n        inputSchema: {\n          type: \"object\",\n          properties: {\n            path: {\n              type: \"string\",\n              description:\n                \"Policy file path (default: $DECIONIS_POLICY_PATH or ./DECIONIS_POLICY.md)\",\n            },\n          },\n          additionalProperties: false,\n        },\n        handler: async (args) => {\n          const file = await this.policyFiles.read(args.path);\n          if (!file.ok) return { content: text(file.message), isError: true };\n          const compiled = gateway.compile(file.content);\n          return {\n            content: text({\n              path: file.path,\n              sha256: sha256Hex(file.content),\n              bytes: Buffer.byteLength(file.content, \"utf8\"),\n              rules:\n                compiled === null\n                  ? \"no ```decionis rules block — the file is prose-only documentation\"\n                  : compiled.errors.length > 0\n                    ? { compile_errors: compiled.errors }\n                    : compiled.rules.map((rule) => ({\n                        name: rule.name,\n                        verdict: rule.then.action,\n                        priority: rule.priority,\n                        domain: rule.decision_domain,\n                        when: rule.when,\n                      })),\n            }),\n          };\n        },\n      },\n      {\n        name: \"decionis_evaluate\",\n        description:\n          \"Evaluate a candidate action against the repo's DECIONIS_POLICY.md through the real Decionis \" +\n          \"protocol evaluator, entirely locally (no network, no credentials, nothing recorded). Call this \" +\n          \"BEFORE committing, deploying, migrating, or any risky action, and abide by the verdict: \" +\n          \"allow → proceed; block → do not proceed; review/escalate → stop and involve a human.\",\n        inputSchema: {\n          type: \"object\",\n          required: [\"payload\"],\n          properties: {\n            payload: {\n              type: \"object\",\n              description:\n                'The candidate action, e.g. {\"action\": \"production-deploy\", \"change_freeze\": true, \"agent_generated\": true}',\n            },\n            workflow_key: {\n              type: \"string\",\n              description: \"Optional workflow key for the gated surface.\",\n            },\n            mode: { type: \"string\", enum: [\"shadow\", \"enforce\"], description: \"Default: shadow.\" },\n            path: { type: \"string\", description: \"Policy file path override.\" },\n          },\n          additionalProperties: false,\n        },\n        handler: async (args) => {\n          if (!isPlainObject(args.payload)) {\n            return {\n              content: text(\"`payload` must be a JSON object describing the action.\"),\n              isError: true,\n            };\n          }\n          const file = await this.policyFiles.read(args.path);\n          if (!file.ok) return { content: text(file.message), isError: true };\n          const workflowKey = typeof args.workflow_key === \"string\" ? args.workflow_key : null;\n\n          const published = await gateway.publishPolicy(file.content, { workflowKey });\n          if (!published.ok) {\n            return {\n              content: text({\n                error: published.reason,\n                details: published.errors,\n                hint:\n                  published.reason === \"no_rules_block\"\n                    ? \"Add a ```decionis rules block to make the policy enforceable — see decionis_verdict_help.\"\n                    : \"Fix the rules block so it compiles; the platform enforces all-or-nothing.\",\n              }),\n              isError: true,\n            };\n          }\n\n          const evaluated = await gateway.evaluate({\n            payload: args.payload,\n            workflowKey,\n            mode: args.mode === \"enforce\" ? \"enforce\" : \"shadow\",\n          });\n          if (evaluated.status !== 200) {\n            return {\n              content: text({\n                error: `protocol evaluation failed (HTTP ${evaluated.status})`,\n                body: evaluated.body,\n              }),\n              isError: true,\n            };\n          }\n\n          const body = evaluated.body;\n          const policyEvaluation = isPlainObject(body.policy_evaluation)\n            ? body.policy_evaluation\n            : {};\n          const evaluatedRuleCount =\n            typeof policyEvaluation.evaluated_rule_count === \"number\"\n              ? policyEvaluation.evaluated_rule_count\n              : null;\n\n          return {\n            content: text({\n              verdict: normalizeVerdict(body.outcome),\n              outcome: body.outcome,\n              resolution: policyEvaluation.resolution ?? null,\n              selected_rule: policyEvaluation.selected_rule_name ?? null,\n              matched_rule_count: policyEvaluation.matched_rule_count ?? null,\n              evaluated_rule_count: evaluatedRuleCount,\n              decision_domain: policyEvaluation.decision_domain ?? body.decision_domain ?? null,\n              policy_version: published.version,\n              policy_sha256: published.sha256,\n              confidence: body.confidence ?? null,\n              note:\n                \"Local sandbox evaluation — nothing was recorded and no signed dossier was minted. \" +\n                \"CI runs through decionis/govern produce the signed, verifiable record.\",\n              ...(published.ruleCount > 0 && evaluatedRuleCount === 0\n                ? {\n                    hint:\n                      `All ${published.ruleCount} compiled rule(s) were filtered out by the decision-domain ` +\n                      'match before evaluation. Add \"domain\": \"*\" to each rule so it applies to every ' +\n                      \"decision this repo gates.\",\n                  }\n                : {}),\n            }),\n          };\n        },\n      },\n      {\n        name: \"decionis_verdict_help\",\n        description:\n          \"Reference for Decionis verdicts (allow/block/restrain/escalate), the rules-block grammar and \" +\n          \"operators, and how an agent should behave on each verdict.\",\n        inputSchema: { type: \"object\", properties: {}, additionalProperties: false },\n        handler: async () => ({ content: text(VERDICT_HELP) }),\n      },\n    ];\n  }\n}\n\n/** Functional alias for {@link DecionisTools.build}. */\nexport function createDecionisTools(gateway: LocalDecionisGateway): ToolDefinition[] {\n  return new DecionisTools(gateway).build();\n}\n","// Decionis local MCP server — stdio entrypoint.\n// Lets AI coding agents (Claude Code, Cursor, …) read DECIONIS_POLICY.md and\n// evaluate candidate actions through the real @decionis/protocol evaluator\n// before they commit, deploy, or migrate anything.\n\nimport { LocalDecionisGateway } from \"./Gateway.js\";\nimport { createMcpHandler, runStdioServer } from \"./Server.js\";\nimport { createDecionisTools } from \"./Tools.js\";\n\nconst gateway = new LocalDecionisGateway();\nconst handler = createMcpHandler({\n  serverInfo: { name: \"decionis-mcp\", version: \"0.1.0\" },\n  tools: createDecionisTools(gateway),\n});\n\nrunStdioServer(handler)\n  .then(async () => {\n    await gateway.close();\n    process.exit(0);\n  })\n  .catch(async (err) => {\n    process.stderr.write(`decionis-mcp: fatal: ${String(err)}\\n`);\n    await gateway.close().catch(() => {});\n    process.exit(1);\n  });\n"],"mappings":";;;;;;;;;AAOA,SAAS,uBAAuB;AAEzB,IAAM,8BAA8B,CAAC,cAAc,cAAc,YAAY;AACpF,IAAM,2BAA2B;AAuBjC,IAAM,gBAAgB,CAAC,MACrB,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAEzD,SAAS,UAAU,IAAa,QAAkC;AAChE,SAAO,EAAE,SAAS,OAAO,IAAI,OAAO;AACtC;AAEA,SAAS,SAAS,IAAa,MAAc,SAAkC;AAC7E,SAAO,EAAE,SAAS,OAAO,IAAI,OAAO,EAAE,MAAM,QAAQ,EAAE;AACxD;AAMO,IAAM,oBAAN,MAAwB;AAAA,EAG7B,YAA6B,SAA8D;AAA9D;AAC3B,SAAK,cAAc,IAAI,IAAI,QAAQ,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,EAC3E;AAAA,EAJiB;AAAA,EAMjB,MAAM,OAAO,SAAmD;AAC9D,QACE,CAAC,cAAc,OAAO,KACtB,QAAQ,YAAY,SACpB,OAAO,QAAQ,WAAW,UAC1B;AACA,YAAMA,MAAK,cAAc,OAAO,KAAK,QAAQ,UAAU,QAAQ,KAAK;AACpE,aAAO,SAASA,KAAI,QAAQ,8BAA8B;AAAA,IAC5D;AACA,UAAM,EAAE,QAAQ,GAAG,IAAI;AACvB,UAAM,iBAAiB,EAAE,QAAQ;AACjC,UAAM,SAAS,cAAc,QAAQ,MAAM,IAAI,QAAQ,SAAS,CAAC;AAEjE,QAAI,eAAgB,QAAO;AAE3B,YAAQ,QAAQ;AAAA,MACd,KAAK,cAAc;AACjB,cAAM,YAAY,OAAO,OAAO,oBAAoB,WAAW,OAAO,kBAAkB;AACxF,cAAM,kBAAkB,4BAA4B,SAAS,SAAS,IAClE,YACA;AACJ,eAAO,UAAU,IAAI;AAAA,UACnB;AAAA,UACA,cAAc,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;AAAA,UAC9C,YAAY,KAAK,QAAQ;AAAA,QAC3B,CAAC;AAAA,MACH;AAAA,MACA,KAAK;AACH,eAAO,UAAU,IAAI,CAAC,CAAC;AAAA,MACzB,KAAK;AACH,eAAO,UAAU,IAAI;AAAA,UACnB,OAAO,KAAK,QAAQ,MAAM,IAAI,CAAC,EAAE,MAAM,aAAa,YAAY,OAAO;AAAA,YACrE;AAAA,YACA;AAAA,YACA;AAAA,UACF,EAAE;AAAA,QACJ,CAAC;AAAA,MACH,KAAK,cAAc;AACjB,cAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,cAAM,OAAO,KAAK,YAAY,IAAI,IAAI;AACtC,YAAI,CAAC,KAAM,QAAO,SAAS,IAAI,QAAQ,iBAAiB,QAAQ,gBAAgB,EAAE;AAClF,cAAM,OAAO,cAAc,OAAO,SAAS,IAAI,OAAO,YAAY,CAAC;AACnE,YAAI;AACF,gBAAM,SAAS,MAAM,KAAK,QAAQ,IAAI;AACtC,iBAAO,UAAU,IAAI,EAAE,SAAS,OAAO,SAAS,SAAS,OAAO,WAAW,MAAM,CAAC;AAAA,QACpF,SAAS,KAAK;AACZ,iBAAO,UAAU,IAAI;AAAA,YACnB,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,QAAQ,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,cAChF;AAAA,YACF;AAAA,YACA,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA;AACE,eAAO,SAAS,IAAI,QAAQ,qBAAqB,MAAM,EAAE;AAAA,IAC7D;AAAA,EACF;AACF;AAOO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,OAAO,IACLC,UACA,UAA6E,CAAC,GAC/D;AACf,UAAM,QAAQ,QAAQ,SAAS,QAAQ;AACvC,UAAM,SAAS,QAAQ,UAAU,QAAQ;AACzC,UAAM,KAAK,gBAAgB,EAAE,OAAO,WAAW,SAAS,CAAC;AACzD,UAAM,WAAW,oBAAI,IAAmB;AAExC,WAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,SAAG,GAAG,QAAQ,CAAC,SAAS;AACtB,cAAM,UAAU,KAAK,KAAK;AAC1B,YAAI,CAAC,QAAS;AACd,cAAM,QAAQ,YAAY;AACxB,cAAI;AACJ,cAAI;AACF,sBAAU,KAAK,MAAM,OAAO;AAAA,UAC9B,QAAQ;AACN,mBAAO,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,QAAQ,aAAa,CAAC,CAAC;AAAA,CAAI;AACzE;AAAA,UACF;AACA,cAAI;AACF,kBAAM,WAAW,MAAMA,SAAQ,OAAO;AACtC,gBAAI,aAAa,KAAM,QAAO,MAAM,GAAG,KAAK,UAAU,QAAQ,CAAC;AAAA,CAAI;AAAA,UACrE,SAAS,KAAK;AACZ,oBAAQ,OAAO,MAAM,gCAAgC,OAAO,GAAG,CAAC;AAAA,CAAI;AAAA,UACtE;AAAA,QACF,GAAG;AACH,iBAAS,IAAI,IAAI;AACjB,aAAK,KAAK,QAAQ,MAAM,SAAS,OAAO,IAAI,CAAC;AAAA,MAC/C,CAAC;AACD,SAAG,GAAG,SAAS,MAAM;AAEnB,aAAK,QAAQ,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,KAAK,MAAM,QAAQ,CAAC;AAAA,MAC7D,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;AAMO,SAAS,iBAAiB,SAA8D;AAC7F,QAAMA,WAAU,IAAI,kBAAkB,OAAO;AAC7C,SAAO,eAAe,cAAc,SAAmD;AACrF,WAAOA,SAAQ,OAAO,OAAO;AAAA,EAC/B;AACF;AAMO,SAAS,eACdA,UACA,UAA6E,CAAC,GAC/D;AACf,SAAO,eAAe,IAAIA,UAAS,OAAO;AAC5C;;;AC3KA,IAAM,OAAO,CAAC,UAAkC;AAAA,EAC9C,EAAE,MAAM,QAAQ,MAAM,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE;AAC3F;AAEA,IAAMC,iBAAgB,CAAC,MACrB,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAEzD,IAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgCd,IAAM,gBAAN,MAAoB;AAAA,EACzB,YACmBC,UACA,cAAoC,IAAI,qBAAqB,GAC9E;AAFiB,mBAAAA;AACA;AAAA,EAChB;AAAA,EAEH,QAA0B;AACxB,UAAMA,WAAU,KAAK;AACrB,WAAO;AAAA,MACL;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,QAGF,aAAa;AAAA,UACX,MAAM;AAAA,UACN,YAAY;AAAA,YACV,MAAM;AAAA,cACJ,MAAM;AAAA,cACN,aACE;AAAA,YACJ;AAAA,UACF;AAAA,UACA,sBAAsB;AAAA,QACxB;AAAA,QACA,SAAS,OAAO,SAAS;AACvB,gBAAM,OAAO,MAAM,KAAK,YAAY,KAAK,KAAK,IAAI;AAClD,cAAI,CAAC,KAAK,GAAI,QAAO,EAAE,SAAS,KAAK,KAAK,OAAO,GAAG,SAAS,KAAK;AAClE,gBAAM,WAAWA,SAAQ,QAAQ,KAAK,OAAO;AAC7C,iBAAO;AAAA,YACL,SAAS,KAAK;AAAA,cACZ,MAAM,KAAK;AAAA,cACX,QAAQ,UAAU,KAAK,OAAO;AAAA,cAC9B,OAAO,OAAO,WAAW,KAAK,SAAS,MAAM;AAAA,cAC7C,OACE,aAAa,OACT,2EACA,SAAS,OAAO,SAAS,IACvB,EAAE,gBAAgB,SAAS,OAAO,IAClC,SAAS,MAAM,IAAI,CAAC,UAAU;AAAA,gBAC5B,MAAM,KAAK;AAAA,gBACX,SAAS,KAAK,KAAK;AAAA,gBACnB,UAAU,KAAK;AAAA,gBACf,QAAQ,KAAK;AAAA,gBACb,MAAM,KAAK;AAAA,cACb,EAAE;AAAA,YACZ,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,QAIF,aAAa;AAAA,UACX,MAAM;AAAA,UACN,UAAU,CAAC,SAAS;AAAA,UACpB,YAAY;AAAA,YACV,SAAS;AAAA,cACP,MAAM;AAAA,cACN,aACE;AAAA,YACJ;AAAA,YACA,cAAc;AAAA,cACZ,MAAM;AAAA,cACN,aAAa;AAAA,YACf;AAAA,YACA,MAAM,EAAE,MAAM,UAAU,MAAM,CAAC,UAAU,SAAS,GAAG,aAAa,mBAAmB;AAAA,YACrF,MAAM,EAAE,MAAM,UAAU,aAAa,6BAA6B;AAAA,UACpE;AAAA,UACA,sBAAsB;AAAA,QACxB;AAAA,QACA,SAAS,OAAO,SAAS;AACvB,cAAI,CAACD,eAAc,KAAK,OAAO,GAAG;AAChC,mBAAO;AAAA,cACL,SAAS,KAAK,wDAAwD;AAAA,cACtE,SAAS;AAAA,YACX;AAAA,UACF;AACA,gBAAM,OAAO,MAAM,KAAK,YAAY,KAAK,KAAK,IAAI;AAClD,cAAI,CAAC,KAAK,GAAI,QAAO,EAAE,SAAS,KAAK,KAAK,OAAO,GAAG,SAAS,KAAK;AAClE,gBAAM,cAAc,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe;AAEhF,gBAAM,YAAY,MAAMC,SAAQ,cAAc,KAAK,SAAS,EAAE,YAAY,CAAC;AAC3E,cAAI,CAAC,UAAU,IAAI;AACjB,mBAAO;AAAA,cACL,SAAS,KAAK;AAAA,gBACZ,OAAO,UAAU;AAAA,gBACjB,SAAS,UAAU;AAAA,gBACnB,MACE,UAAU,WAAW,mBACjB,mGACA;AAAA,cACR,CAAC;AAAA,cACD,SAAS;AAAA,YACX;AAAA,UACF;AAEA,gBAAM,YAAY,MAAMA,SAAQ,SAAS;AAAA,YACvC,SAAS,KAAK;AAAA,YACd;AAAA,YACA,MAAM,KAAK,SAAS,YAAY,YAAY;AAAA,UAC9C,CAAC;AACD,cAAI,UAAU,WAAW,KAAK;AAC5B,mBAAO;AAAA,cACL,SAAS,KAAK;AAAA,gBACZ,OAAO,oCAAoC,UAAU,MAAM;AAAA,gBAC3D,MAAM,UAAU;AAAA,cAClB,CAAC;AAAA,cACD,SAAS;AAAA,YACX;AAAA,UACF;AAEA,gBAAM,OAAO,UAAU;AACvB,gBAAM,mBAAmBD,eAAc,KAAK,iBAAiB,IACzD,KAAK,oBACL,CAAC;AACL,gBAAM,qBACJ,OAAO,iBAAiB,yBAAyB,WAC7C,iBAAiB,uBACjB;AAEN,iBAAO;AAAA,YACL,SAAS,KAAK;AAAA,cACZ,SAAS,iBAAiB,KAAK,OAAO;AAAA,cACtC,SAAS,KAAK;AAAA,cACd,YAAY,iBAAiB,cAAc;AAAA,cAC3C,eAAe,iBAAiB,sBAAsB;AAAA,cACtD,oBAAoB,iBAAiB,sBAAsB;AAAA,cAC3D,sBAAsB;AAAA,cACtB,iBAAiB,iBAAiB,mBAAmB,KAAK,mBAAmB;AAAA,cAC7E,gBAAgB,UAAU;AAAA,cAC1B,eAAe,UAAU;AAAA,cACzB,YAAY,KAAK,cAAc;AAAA,cAC/B,MACE;AAAA,cAEF,GAAI,UAAU,YAAY,KAAK,uBAAuB,IAClD;AAAA,gBACE,MACE,OAAO,UAAU,SAAS;AAAA,cAG9B,IACA,CAAC;AAAA,YACP,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,QAEF,aAAa,EAAE,MAAM,UAAU,YAAY,CAAC,GAAG,sBAAsB,MAAM;AAAA,QAC3E,SAAS,aAAa,EAAE,SAAS,KAAK,YAAY,EAAE;AAAA,MACtD;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,oBAAoBC,UAAiD;AACnF,SAAO,IAAI,cAAcA,QAAO,EAAE,MAAM;AAC1C;;;AClNA,IAAM,UAAU,IAAI,qBAAqB;AACzC,IAAM,UAAU,iBAAiB;AAAA,EAC/B,YAAY,EAAE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,EACrD,OAAO,oBAAoB,OAAO;AACpC,CAAC;AAED,eAAe,OAAO,EACnB,KAAK,YAAY;AAChB,QAAM,QAAQ,MAAM;AACpB,UAAQ,KAAK,CAAC;AAChB,CAAC,EACA,MAAM,OAAO,QAAQ;AACpB,UAAQ,OAAO,MAAM,wBAAwB,OAAO,GAAG,CAAC;AAAA,CAAI;AAC5D,QAAM,QAAQ,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACpC,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":["id","handler","isPlainObject","gateway"]}

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@decionis/mcp",
+  "version": "0.1.0",
+  "description": "Decionis MCP policy tools and native Codex, Copilot, and Claude execution hooks.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "keywords": [
+    "decionis",
+    "mcp",
+    "model-context-protocol",
+    "ai-agents",
+    "agent-permissions",
+    "policy",
+    "guardrails",
+    "pretooluse",
+    "hooks",
+    "claude-code",
+    "codex",
+    "copilot"
+  ],
+  "homepage": "https://decionis.com/docs/protocol-mcp",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/decionis/decionis.git",
+    "directory": "apps/mcp"
+  },
+  "bin": {
+    "decionis-mcp": "./dist/index.js",
+    "decionis-agent-hook": "./dist/AgentHookCli.js",
+    "decionis-managed-agent-hook": "./dist/ManagedAgentHookCli.js"
+  },
+  "exports": {
+    "./agent": {
+      "types": "./dist/agent/AgentIndex.d.ts",
+      "import": "./dist/agent/AgentIndex.js"
+    }
+  },
+  "files": [
+    "dist",
+    "templates",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1",
+    "fast-json-stringify": "^7.0.1",
+    "fastify": "^5.10.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.30",
+    "@typescript-eslint/eslint-plugin": "^8.44.0",
+    "@typescript-eslint/parser": "^8.44.0",
+    "tsup": "^8.0.2",
+    "tsx": "^4.19.2",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.8",
+    "@decionis/protocol": "0.0.0",
+    "@decionis/shared": "0.0.0"
+  },
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "agent-hook": "tsx src/AgentHookCli.ts",
+    "managed-agent-hook": "tsx src/managed/ManagedAgentHookCli.ts",
+    "build": "tsup",
+    "package:managed": "pnpm run build && node scripts/PackageManagedArtifacts.mjs",
+    "npm:smoke": "node scripts/NpmPackSmoke.mjs",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --check . --ignore-path ../../.prettierignore",
+    "format:fix": "prettier --write . --ignore-path ../../.prettierignore"
+  }
+}

package/templates/ClaudeSettings.json

@@ -0,0 +1,17 @@
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "decionis-agent-hook claude",
+            "timeout": 10,
+            "statusMessage": "Checking Decionis policy"
+          }
+        ]
+      }
+    ]
+  }
+}

package/templates/CodexHooks.json

@@ -0,0 +1,18 @@
+{
+  "description": "Block Codex tool execution unless Decionis policy allows it.",
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "decionis-agent-hook codex",
+            "timeout": 10,
+            "statusMessage": "Checking Decionis policy"
+          }
+        ]
+      }
+    ]
+  }
+}

package/templates/CopilotHooks.json

@@ -0,0 +1,12 @@
+{
+  "version": 1,
+  "hooks": {
+    "preToolUse": [
+      {
+        "type": "command",
+        "command": "decionis-agent-hook copilot",
+        "timeoutSec": 10
+      }
+    ]
+  }
+}

package/templates/managed/AgentGateConfig.example.json

@@ -0,0 +1,6 @@
+{
+  "gateUrl": "https://protocol.decionis.com/v1/protocol/evaluate-decision",
+  "apiKey": "CHANGE-ME-ORG-RUNTIME-KEY",
+  "orgId": "CHANGE-ME-ORG-ID",
+  "timeoutMs": 4000
+}