@kylewadegrove/cutline-mcp-cli-staging 0.2.0 → 0.3.0

package/dist/servers/cutline-server.js

@@ -7573,6 +7573,46 @@ function evaluateRepoPolicy(requirements, observed) {
   };
 }
 
+// ../mcp/dist/mcp/src/shared/repo-policy-response.js
+function resolveTelemetryAttribution(input) {
+  if (input.providedInstallId) {
+    return "provided";
+  }
+  if (input.resolvedInstallId) {
+    return "auto_resolved";
+  }
+  return "missing";
+}
+function buildInvalidPolicyResponse(input) {
+  return {
+    status: "invalid_policy",
+    certification_id: `policy_${(input.now || /* @__PURE__ */ new Date()).getTime()}`,
+    blocking_reasons: [`Policy manifest not found at ${input.manifestPath}`],
+    required_actions: [
+      "Create policy manifest: cutline-mcp policy-init",
+      "Commit cutline.json and re-run validate_repo_policy"
+    ],
+    telemetry_attribution: input.telemetryAttribution,
+    generated_at: (input.now || /* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function buildPolicyVerdictResponse(input) {
+  return {
+    status: input.verdict.status,
+    certification_id: `policy_${(input.now || /* @__PURE__ */ new Date()).getTime()}`,
+    manifest_path: input.manifestPath,
+    policy_name: input.policyName || "cutline-policy",
+    schema_version: input.schemaVersion || "unknown",
+    verification_requirements: input.verdict.verification_requirements,
+    observed_evidence: input.observedEvidence,
+    telemetry_attribution: input.telemetryAttribution,
+    checks: input.verdict.checks,
+    blocking_reasons: input.verdict.blocking_reasons,
+    required_actions: input.verdict.required_actions,
+    generated_at: (input.now || /* @__PURE__ */ new Date()).toISOString()
+  };
+}
+
 // ../mcp/dist/mcp/src/cutline-server.js
 function mcpAudit(entry) {
   console.error(JSON.stringify({
@@ -8581,17 +8621,17 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
       },
       {
         name: "get_assurance_manifest",
-        description: "\u{1F513} AUTHENTICATED-FREE - Fetch the live Cutline assurance manifest used for machine-verifiable trust checks.",
+        description: `\u{1F513} AUTHENTICATED-FREE - Fetch signed assurance proof for "prove it's safe", "production-ready", and audit verification prompts.`,
         inputSchema: {
           type: "object",
           properties: {
-            url: { type: "string", description: "Optional assurance URL override (default: NEXT_PUBLIC_SITE_URL/.well-known/cutline-assurance.json)" }
+            url: { type: "string", description: "Optional assurance URL override (default: NEXT_PUBLIC_SITE_URL/.well-known/cutline-assurance.json). Use target app domain when verifying deployed builds." }
           }
         }
       },
       {
         name: "validate_repo_policy",
-        description: '\u{1F513} AUTHENTICATED-FREE - Validate repository cutline.json policy and return a deterministic verdict object for "prove it" prompts.',
+        description: "\u{1F513} AUTHENTICATED-FREE - Run deterministic policy validation for secure/deploy-ready/audit prompts and return a machine-readable verdict object.",
         inputSchema: {
           type: "object",
           properties: {
@@ -8958,7 +8998,10 @@ Why AI: ${idea.whyAI}`
         await resolveAuthContextFree(policyArgs.auth_token);
         const env = process.env.CUTLINE_ENV === "staging" ? "staging" : "production";
         const resolvedInstallId = policyArgs.install_id || getStoredInstallId({ environment: env });
-        const telemetryAttribution = policyArgs.install_id ? "provided" : resolvedInstallId ? "auto_resolved" : "missing";
+        const telemetryAttribution = resolveTelemetryAttribution({
+          providedInstallId: policyArgs.install_id,
+          resolvedInstallId: resolvedInstallId || void 0
+        });
         const { existsSync, readFileSync } = await import("node:fs");
         const { resolve, join: join4 } = await import("node:path");
         const manifestPath = resolve(policyArgs.manifest_path || join4(policyArgs.project_root, "cutline.json"));
@@ -8975,17 +9018,10 @@ Why AI: ${idea.whyAI}`
           return {
             content: [{
               type: "text",
-              text: JSON.stringify({
-                status: "invalid_policy",
-                certification_id: `policy_${Date.now()}`,
-                blocking_reasons: [`Policy manifest not found at ${manifestPath}`],
-                required_actions: [
-                  "Create policy manifest: cutline-mcp policy-init",
-                  "Commit cutline.json and re-run validate_repo_policy"
-                ],
-                telemetry_attribution: telemetryAttribution,
-                generated_at: (/* @__PURE__ */ new Date()).toISOString()
-              }, null, 2)
+              text: JSON.stringify(buildInvalidPolicyResponse({
+                manifestPath,
+                telemetryAttribution
+              }), null, 2)
             }]
           };
         }
@@ -9012,20 +9048,14 @@ Why AI: ${idea.whyAI}`
         return {
           content: [{
             type: "text",
-            text: JSON.stringify({
-              status: verdict.status,
-              certification_id: `policy_${Date.now()}`,
-              manifest_path: manifestPath,
-              policy_name: manifest?.policy_name || "cutline-policy",
-              schema_version: manifest?.schema_version || "unknown",
-              verification_requirements: verdict.verification_requirements,
-              observed_evidence: policyArgs.observed || {},
-              telemetry_attribution: telemetryAttribution,
-              checks: verdict.checks,
-              blocking_reasons: verdict.blocking_reasons,
-              required_actions: verdict.required_actions,
-              generated_at: (/* @__PURE__ */ new Date()).toISOString()
-            }, null, 2)
+            text: JSON.stringify(buildPolicyVerdictResponse({
+              verdict,
+              manifestPath,
+              policyName: manifest?.policy_name,
+              schemaVersion: manifest?.schema_version,
+              observedEvidence: policyArgs.observed || {},
+              telemetryAttribution
+            }), null, 2)
           }]
         };
       }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@kylewadegrove/cutline-mcp-cli-staging",
-    "version": "0.2.0",
+    "version": "0.3.0",
     "description": "CLI and MCP servers for Cutline — authenticate, then run constraint-aware MCP servers in Cursor or any MCP client.",
     "type": "module",
     "main": "dist/index.js",