@marchward/mcp-server 0.2.2

package/dist/tools.d.ts

@@ -0,0 +1,211 @@
+/**
+ * Marchward MCP Server — Tool definitions
+ *
+ * Each tool maps to a Marchward API capability. These tools let
+ * AI coding agents (Claude, Cursor, Copilot, etc.):
+ *   1. Check governance before taking actions (marchward_authorize)
+ *   2. Execute actions through Marchward's credential gateway (marchward_execute)
+ *   3. Register and manage agents (marchward_register_agent, marchward_list_agents)
+ *   4. Inspect decisions (marchward_get_decisions)
+ *   5. Check governance coverage (marchward_check_coverage)
+ *   6. Bind policies to agents (marchward_bind_policy)
+ *
+ * Tool names are marchward_* (stable as of v0.2.0). MCP clients discover
+ * tools dynamically at runtime; the names are not dual-listed because
+ * duplicate tools degrade agent tool-selection.
+ */
+import { z } from "zod";
+import { MarchwardAPIClient } from "./api-client.js";
+export declare const TOOL_DEFINITIONS: {
+    readonly marchward_authorize: {
+        readonly name: "marchward_authorize";
+        readonly description: "Check whether an action is allowed BEFORE the agent takes it. Call this first for any consequential or irreversible action (deploying, committing, publishing, deleting, moving money, calling an external API). Returns ALLOW, BLOCK, ESCALATE, or ALLOW_WITH_CONDITIONS, and writes a tamper-evident audit record. The agent and policy are resolved from your API key, so you usually only pass toolName.";
+        readonly inputSchema: z.ZodObject<{
+            toolName: z.ZodString;
+            arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            policyBundleId: z.ZodOptional<z.ZodString>;
+            agentId: z.ZodOptional<z.ZodString>;
+            mode: z.ZodOptional<z.ZodEnum<["HIC", "HITL", "HOTL"]>>;
+            context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, "strip", z.ZodTypeAny, {
+            toolName: string;
+            agentId?: string | undefined;
+            arguments?: Record<string, unknown> | undefined;
+            policyBundleId?: string | undefined;
+            mode?: "HIC" | "HITL" | "HOTL" | undefined;
+            context?: Record<string, unknown> | undefined;
+        }, {
+            toolName: string;
+            agentId?: string | undefined;
+            arguments?: Record<string, unknown> | undefined;
+            policyBundleId?: string | undefined;
+            mode?: "HIC" | "HITL" | "HOTL" | undefined;
+            context?: Record<string, unknown> | undefined;
+        }>;
+    };
+    readonly marchward_execute: {
+        readonly name: "marchward_execute";
+        readonly description: "Run an action through Marchward's credential-mediated gateway. Marchward evaluates policy, injects the real downstream credential server-side (the agent never holds it), enforces the cost cap and approval gates, then makes the call and records it. Use this for any call to a service whose credentials Marchward manages (GitHub, Stripe, Notion, etc.).";
+        readonly inputSchema: z.ZodObject<{
+            toolName: z.ZodString;
+            arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            policyBundleId: z.ZodString;
+            agentId: z.ZodString;
+            service: z.ZodString;
+            downstream: z.ZodObject<{
+                url: z.ZodString;
+                method: z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE"]>;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                body: z.ZodOptional<z.ZodUnknown>;
+            }, "strip", z.ZodTypeAny, {
+                method: "POST" | "GET" | "PUT" | "PATCH" | "DELETE";
+                url: string;
+                headers?: Record<string, string> | undefined;
+                body?: unknown;
+            }, {
+                method: "POST" | "GET" | "PUT" | "PATCH" | "DELETE";
+                url: string;
+                headers?: Record<string, string> | undefined;
+                body?: unknown;
+            }>;
+            mode: z.ZodOptional<z.ZodEnum<["HIC", "HITL", "HOTL"]>>;
+        }, "strip", z.ZodTypeAny, {
+            agentId: string;
+            toolName: string;
+            policyBundleId: string;
+            service: string;
+            downstream: {
+                method: "POST" | "GET" | "PUT" | "PATCH" | "DELETE";
+                url: string;
+                headers?: Record<string, string> | undefined;
+                body?: unknown;
+            };
+            arguments?: Record<string, unknown> | undefined;
+            mode?: "HIC" | "HITL" | "HOTL" | undefined;
+        }, {
+            agentId: string;
+            toolName: string;
+            policyBundleId: string;
+            service: string;
+            downstream: {
+                method: "POST" | "GET" | "PUT" | "PATCH" | "DELETE";
+                url: string;
+                headers?: Record<string, string> | undefined;
+                body?: unknown;
+            };
+            arguments?: Record<string, unknown> | undefined;
+            mode?: "HIC" | "HITL" | "HOTL" | undefined;
+        }>;
+    };
+    readonly marchward_register_agent: {
+        readonly name: "marchward_register_agent";
+        readonly description: "Register a new agent with Marchward so it is governed from its first action. Returns the agent record and its Marchward API key — the only credential the agent should hold. Call this when building or deploying a new agent.";
+        readonly inputSchema: z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            agentId: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            agentId?: string | undefined;
+            description?: string | undefined;
+        }, {
+            name: string;
+            agentId?: string | undefined;
+            description?: string | undefined;
+        }>;
+    };
+    readonly marchward_list_agents: {
+        readonly name: "marchward_list_agents";
+        readonly description: "List the agents registered under your account, with their IDs, status, last-seen time, and bound policy. Use to find an agentId or check what is under governance.";
+        readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    };
+    readonly marchward_get_decisions: {
+        readonly name: "marchward_get_decisions";
+        readonly description: "Review recent governance decisions (the audit trail). Filter by agent, tool name, or outcome (ALLOW/BLOCK/ESCALATE). Use to verify governance is active or to investigate what an agent actually did.";
+        readonly inputSchema: z.ZodObject<{
+            agentId: z.ZodOptional<z.ZodString>;
+            toolName: z.ZodOptional<z.ZodString>;
+            result: z.ZodOptional<z.ZodEnum<["ALLOW", "BLOCK", "ESCALATE", "ALLOW_WITH_CONDITIONS"]>>;
+            limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, "strip", z.ZodTypeAny, {
+            limit: number;
+            agentId?: string | undefined;
+            toolName?: string | undefined;
+            result?: "ALLOW" | "BLOCK" | "ESCALATE" | "ALLOW_WITH_CONDITIONS" | undefined;
+        }, {
+            agentId?: string | undefined;
+            toolName?: string | undefined;
+            result?: "ALLOW" | "BLOCK" | "ESCALATE" | "ALLOW_WITH_CONDITIONS" | undefined;
+            limit?: number | undefined;
+        }>;
+    };
+    readonly marchward_check_coverage: {
+        readonly name: "marchward_check_coverage";
+        readonly description: "Find governance gaps for an agent by comparing its declared tools against the tools it has actually called. Returns a coverage percentage and the uncovered tools, so ungoverned actions surface before they cause harm. This is the 'Dependabot for governance'.";
+        readonly inputSchema: z.ZodObject<{
+            agentId: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            agentId: string;
+        }, {
+            agentId: string;
+        }>;
+    };
+    readonly marchward_bind_policy: {
+        readonly name: "marchward_bind_policy";
+        readonly description: "Attach a governance policy to an agent. After binding, every authorize and execute call from that agent is evaluated against this policy.";
+        readonly inputSchema: z.ZodObject<{
+            agentId: z.ZodString;
+            policyBundleId: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            agentId: string;
+            policyBundleId: string;
+        }, {
+            agentId: string;
+            policyBundleId: string;
+        }>;
+    };
+};
+export declare function createToolHandlers(client: MarchwardAPIClient): {
+    marchward_authorize(args: z.infer<typeof TOOL_DEFINITIONS.marchward_authorize.inputSchema>): Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    }>;
+    marchward_execute(args: z.infer<typeof TOOL_DEFINITIONS.marchward_execute.inputSchema>): Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    }>;
+    marchward_register_agent(args: z.infer<typeof TOOL_DEFINITIONS.marchward_register_agent.inputSchema>): Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    }>;
+    marchward_list_agents(_args: z.infer<typeof TOOL_DEFINITIONS.marchward_list_agents.inputSchema>): Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    }>;
+    marchward_get_decisions(args: z.infer<typeof TOOL_DEFINITIONS.marchward_get_decisions.inputSchema>): Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    }>;
+    marchward_check_coverage(args: z.infer<typeof TOOL_DEFINITIONS.marchward_check_coverage.inputSchema>): Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    }>;
+    marchward_bind_policy(args: z.infer<typeof TOOL_DEFINITIONS.marchward_bind_policy.inputSchema>): Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    }>;
+};

package/dist/tools.js

@@ -0,0 +1,238 @@
+/**
+ * Marchward MCP Server — Tool definitions
+ *
+ * Each tool maps to a Marchward API capability. These tools let
+ * AI coding agents (Claude, Cursor, Copilot, etc.):
+ *   1. Check governance before taking actions (marchward_authorize)
+ *   2. Execute actions through Marchward's credential gateway (marchward_execute)
+ *   3. Register and manage agents (marchward_register_agent, marchward_list_agents)
+ *   4. Inspect decisions (marchward_get_decisions)
+ *   5. Check governance coverage (marchward_check_coverage)
+ *   6. Bind policies to agents (marchward_bind_policy)
+ *
+ * Tool names are marchward_* (stable as of v0.2.0). MCP clients discover
+ * tools dynamically at runtime; the names are not dual-listed because
+ * duplicate tools degrade agent tool-selection.
+ */
+import { z } from "zod";
+// ─── Tool Schemas ───────────────────────────────────────────────
+export const TOOL_DEFINITIONS = {
+    marchward_authorize: {
+        name: "marchward_authorize",
+        description: "Check whether an action is allowed BEFORE the agent takes it. Call this first for any consequential or irreversible action (deploying, committing, publishing, deleting, moving money, calling an external API). Returns ALLOW, BLOCK, ESCALATE, or ALLOW_WITH_CONDITIONS, and writes a tamper-evident audit record. The agent and policy are resolved from your API key, so you usually only pass toolName.",
+        inputSchema: z.object({
+            toolName: z
+                .string()
+                .describe("Name of the tool/action being authorized (e.g. 'github_commit', 'railway_deploy', 'notion_update')"),
+            arguments: z
+                .record(z.unknown())
+                .optional()
+                .describe("Arguments/parameters for the tool call"),
+            policyBundleId: z
+                .string()
+                .optional()
+                .describe("ID of the policy bundle to evaluate against (auto-resolved from API key → agent → policy if omitted)"),
+            agentId: z
+                .string()
+                .optional()
+                .describe("Agent ID (auto-resolved from API key if omitted)"),
+            mode: z
+                .enum(["HIC", "HITL", "HOTL"])
+                .optional()
+                .describe("Governance mode: HIC (human-in-command), HITL (human-in-the-loop), HOTL (human-on-the-loop)"),
+            context: z
+                .record(z.unknown())
+                .optional()
+                .describe("Additional context for policy evaluation"),
+        }),
+    },
+    marchward_execute: {
+        name: "marchward_execute",
+        description: "Run an action through Marchward's credential-mediated gateway. Marchward evaluates policy, injects the real downstream credential server-side (the agent never holds it), enforces the cost cap and approval gates, then makes the call and records it. Use this for any call to a service whose credentials Marchward manages (GitHub, Stripe, Notion, etc.).",
+        inputSchema: z.object({
+            toolName: z
+                .string()
+                .describe("Name of the tool/action being executed"),
+            arguments: z
+                .record(z.unknown())
+                .optional()
+                .describe("Arguments for the tool call"),
+            policyBundleId: z
+                .string()
+                .describe("Policy bundle ID to evaluate against"),
+            agentId: z.string().describe("Agent ID making the request"),
+            service: z
+                .string()
+                .describe("Service name for credential injection (e.g. 'github', 'railway', 'notion')"),
+            downstream: z.object({
+                url: z.string().describe("Full URL for the downstream API call"),
+                method: z
+                    .enum(["GET", "POST", "PUT", "PATCH", "DELETE"])
+                    .describe("HTTP method"),
+                headers: z
+                    .record(z.string())
+                    .optional()
+                    .describe("Additional headers"),
+                body: z.unknown().optional().describe("Request body"),
+            }),
+            mode: z.enum(["HIC", "HITL", "HOTL"]).optional(),
+        }),
+    },
+    marchward_register_agent: {
+        name: "marchward_register_agent",
+        description: "Register a new agent with Marchward so it is governed from its first action. Returns the agent record and its Marchward API key — the only credential the agent should hold. Call this when building or deploying a new agent.",
+        inputSchema: z.object({
+            name: z.string().describe("Human-readable name for the agent"),
+            description: z
+                .string()
+                .optional()
+                .describe("Description of what the agent does"),
+            agentId: z
+                .string()
+                .optional()
+                .describe("Custom agent ID (auto-generated from name if omitted)"),
+        }),
+    },
+    marchward_list_agents: {
+        name: "marchward_list_agents",
+        description: "List the agents registered under your account, with their IDs, status, last-seen time, and bound policy. Use to find an agentId or check what is under governance.",
+        inputSchema: z.object({}),
+    },
+    marchward_get_decisions: {
+        name: "marchward_get_decisions",
+        description: "Review recent governance decisions (the audit trail). Filter by agent, tool name, or outcome (ALLOW/BLOCK/ESCALATE). Use to verify governance is active or to investigate what an agent actually did.",
+        inputSchema: z.object({
+            agentId: z
+                .string()
+                .optional()
+                .describe("Filter decisions by agent ID"),
+            toolName: z
+                .string()
+                .optional()
+                .describe("Filter decisions by tool name"),
+            result: z
+                .enum(["ALLOW", "BLOCK", "ESCALATE", "ALLOW_WITH_CONDITIONS"])
+                .optional()
+                .describe("Filter by decision outcome"),
+            limit: z
+                .number()
+                .optional()
+                .default(20)
+                .describe("Number of decisions to return (default 20)"),
+        }),
+    },
+    marchward_check_coverage: {
+        name: "marchward_check_coverage",
+        description: "Find governance gaps for an agent by comparing its declared tools against the tools it has actually called. Returns a coverage percentage and the uncovered tools, so ungoverned actions surface before they cause harm. This is the 'Dependabot for governance'.",
+        inputSchema: z.object({
+            agentId: z.string().describe("Agent ID to check coverage for"),
+        }),
+    },
+    marchward_bind_policy: {
+        name: "marchward_bind_policy",
+        description: "Attach a governance policy to an agent. After binding, every authorize and execute call from that agent is evaluated against this policy.",
+        inputSchema: z.object({
+            agentId: z.string().describe("Agent ID to bind the policy to"),
+            policyBundleId: z.string().describe("Policy bundle ID to bind"),
+        }),
+    },
+};
+// ─── Tool Handlers ──────────────────────────────────────────────
+export function createToolHandlers(client) {
+    return {
+        async marchward_authorize(args) {
+            const result = await client.authorize(args);
+            const decision = result.result ?? result.decision ?? "UNKNOWN";
+            const decisionId = result.decisionId ?? "";
+            const explanation = result.explanation ?? [];
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            decision,
+                            decisionId,
+                            explanation,
+                            toolName: args.toolName,
+                            ...(args.policyBundleId ? { policyBundleId: args.policyBundleId } : {}),
+                            full: result,
+                        }, null, 2),
+                    },
+                ],
+            };
+        },
+        async marchward_execute(args) {
+            const result = await client.execute(args);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        },
+        async marchward_register_agent(args) {
+            const result = await client.createAgent(args);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            message: `Agent "${args.name}" registered successfully.`,
+                            ...result,
+                        }, null, 2),
+                    },
+                ],
+            };
+        },
+        async marchward_list_agents(_args) {
+            const result = await client.listAgents();
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        },
+        async marchward_get_decisions(args) {
+            const result = await client.listDecisions(args);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        },
+        async marchward_check_coverage(args) {
+            const result = await client.checkCoverage(args.agentId);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(result, null, 2),
+                    },
+                ],
+            };
+        },
+        async marchward_bind_policy(args) {
+            const result = await client.bindPolicy(args.agentId, args.policyBundleId);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            message: `Policy "${args.policyBundleId}" bound to agent "${args.agentId}".`,
+                            ...result,
+                        }, null, 2),
+                    },
+                ],
+            };
+        },
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,mEAAmE;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,8YAA8Y;QAChZ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,CACP,oGAAoG,CACrG;YACH,SAAS,EAAE,CAAC;iBACT,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnB,QAAQ,EAAE;iBACV,QAAQ,CAAC,wCAAwC,CAAC;YACrD,cAAc,EAAE,CAAC;iBACd,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,sGAAsG,CAAC;YACnH,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;iBAC7B,QAAQ,EAAE;iBACV,QAAQ,CACP,6FAA6F,CAC9F;YACH,OAAO,EAAE,CAAC;iBACP,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnB,QAAQ,EAAE;iBACV,QAAQ,CAAC,0CAA0C,CAAC;SACxD,CAAC;KACH;IAED,iBAAiB,EAAE;QACjB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,gWAAgW;QAClW,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,wCAAwC,CAAC;YACrD,SAAS,EAAE,CAAC;iBACT,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnB,QAAQ,EAAE;iBACV,QAAQ,CAAC,6BAA6B,CAAC;YAC1C,cAAc,EAAE,CAAC;iBACd,MAAM,EAAE;iBACR,QAAQ,CAAC,sCAAsC,CAAC;YACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC3D,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CACP,4EAA4E,CAC7E;YACH,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;gBAChE,MAAM,EAAE,CAAC;qBACN,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;qBAC/C,QAAQ,CAAC,aAAa,CAAC;gBAC1B,OAAO,EAAE,CAAC;qBACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;qBAClB,QAAQ,EAAE;qBACV,QAAQ,CAAC,oBAAoB,CAAC;gBACjC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;aACtD,CAAC;YACF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;SACjD,CAAC;KACH;IAED,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,gOAAgO;QAClO,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAC9D,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oCAAoC,CAAC;YACjD,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,uDAAuD,CACxD;SACJ,CAAC;KACH;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,oKAAoK;QACtK,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1B;IAED,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,uMAAuM;QACzM,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8BAA8B,CAAC;YAC3C,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,+BAA+B,CAAC;YAC5C,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;iBAC7D,QAAQ,EAAE;iBACV,QAAQ,CAAC,4BAA4B,CAAC;YACzC,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,4CAA4C,CAAC;SAC1D,CAAC;KACH;IAED,wBAAwB,EAAE;QACxB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,mQAAmQ;QACrQ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;SAC/D,CAAC;KACH;IAED,qBAAqB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,2IAA2I;QAC7I,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAC9D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SAChE,CAAC;KACH;CACO,CAAC;AAEX,mEAAmE;AAEnE,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO;QACL,KAAK,CAAC,mBAAmB,CAAC,IAAsE;YAC9F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAI,MAAc,CAAC,MAAM,IAAK,MAAc,CAAC,QAAQ,IAAI,SAAS,CAAC;YACjF,MAAM,UAAU,GAAI,MAAc,CAAC,UAAU,IAAI,EAAE,CAAC;YACpD,MAAM,WAAW,GAAI,MAAc,CAAC,WAAW,IAAI,EAAE,CAAC;YAEtD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,QAAQ;4BACR,UAAU;4BACV,WAAW;4BACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACvE,IAAI,EAAE,MAAM;yBACb,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,IAAoE;YAC1F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,wBAAwB,CAAC,IAA2E;YACxG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,OAAO,EAAE,UAAU,IAAI,CAAC,IAAI,4BAA4B;4BACxD,GAAG,MAAM;yBACV,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,KAAyE;YACnG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,uBAAuB,CAAC,IAA0E;YACtG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,wBAAwB,CAAC,IAA2E;YACxG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,IAAwE;YAClG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CACpC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,cAAc,CACpB,CAAC;YACF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,OAAO,EAAE,WAAW,IAAI,CAAC,cAAc,qBAAqB,IAAI,CAAC,OAAO,IAAI;4BAC5E,GAAG,MAAM;yBACV,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/glama.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://glama.ai/mcp/schemas/server.json",
+  "maintainers": ["marchward"]
+}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@marchward/mcp-server",
+  "version": "0.2.2",
+  "description": "Marchward MCP Server: governance layer for AI coding agents via Model Context Protocol",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "npx tsx src/index.ts",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run clean && npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "express": "^4.21.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "glama.json"
+  ]
+}