@ossdeveloper/github-compliance 1.0.1 → 1.3.0

package/dist/plugin.js

@@ -16,7 +16,6 @@ var __export = (target, all) => {
 
 // database.ts
 import Database from "bun:sqlite";
-import { createHash } from "crypto";
 import { mkdir } from "fs";
 import { homedir } from "os";
 
@@ -79,12 +78,32 @@ var RECORD_TTL_MS = 30 * 60 * 1000;
 var RECORD_CLEANUP_AGE_MS = 7 * 24 * 60 * 60 * 1000;
 var CONTENT_PREVIEW_MAX_LENGTH = 500;
 
-// database.ts
-var DB_DIR = `${homedir()}/.opencode`;
-var DB_PATH = `${DB_DIR}/github-compliance.db`;
-var db = null;
-function uuid() {
-  return crypto.randomUUID();
+// contracts.ts
+import { createHash } from "crypto";
+var TOOL_PREFIX_NORMALIZE = {
+  github_issue_write: "issue_write",
+  github_issue_update: "issue_update",
+  github_pull_request_write: "pull_request_write",
+  github_pull_request_update: "pull_request_update",
+  github_add_issue_comment: "add_issue_comment",
+  github_add_pull_request_comment: "add_pull_request_comment",
+  github_pull_request_review: "pull_request_review",
+  github_pull_request_review_comment: "pull_request_review_comment",
+  github_create_pull_request: "create_pull_request",
+  github_update_issue: "update_issue",
+  github_update_pull_request: "update_pull_request",
+  github_push_files: "push_files",
+  github_create_branch: "create_branch",
+  github_create_or_update_file: "create_or_update_file",
+  github_delete_file: "delete_file",
+  github_create_repository: "create_repository",
+  github_create_pull_request_with_copilot: "create_pull_request_with_copilot",
+  github_update_pull_request_branch: "update_pull_request_branch",
+  github_reply_to_pull_request_comment: "reply_to_pull_request_comment",
+  github_add_reply_to_pull_request_comment: "add_reply_to_pull_request_comment"
+};
+function normalizeToolName(toolName) {
+  return TOOL_PREFIX_NORMALIZE[toolName] || toolName;
 }
 function computeContentHash(title, body) {
   const content = JSON.stringify({
@@ -93,6 +112,39 @@ function computeContentHash(title, body) {
   });
   return "sha256:" + createHash("sha256").update(content).digest("hex");
 }
+function extractRecordFields(toolName, args) {
+  const normalizedToolName = normalizeToolName(toolName);
+  if (!args || typeof args !== "object") {
+    return {
+      toolName: normalizedToolName,
+      owner: "",
+      repo: "",
+      title: null,
+      body: null,
+      contentHash: computeContentHash(null, null)
+    };
+  }
+  const owner = args.owner || "";
+  const repo = args.repo || "";
+  const title = args.title || null;
+  const body = args.body || null;
+  return {
+    toolName: normalizedToolName,
+    owner,
+    repo,
+    title,
+    body,
+    contentHash: computeContentHash(title, body)
+  };
+}
+
+// database.ts
+var DB_DIR = `${homedir()}/.opencode`;
+var DB_PATH = `${DB_DIR}/github-compliance.db`;
+var db = null;
+function uuid() {
+  return crypto.randomUUID();
+}
 async function initDatabase() {
   if (db)
     return;
@@ -318,7 +370,6 @@ async function logFailedAttempt(entry) {
 }
 
 // compliance.ts
-import { createHash as createHash2 } from "crypto";
 var GITHUB_WRITE_TOOLS_UNPREFIXED = [
   "issue_write",
   "issue_update",
@@ -346,27 +397,6 @@ var GITHUB_WRITE_TOOLS = [...GITHUB_WRITE_TOOLS_UNPREFIXED, ...GITHUB_WRITE_TOOL
 function isGitHubWriteTool(toolName) {
   return GITHUB_WRITE_TOOLS.includes(toolName);
 }
-function extractToolInfo(toolName, args) {
-  const owner = args?.owner || "";
-  const repo = args?.repo || "";
-  const title = args?.title || null;
-  const body = args?.body || null;
-  return {
-    toolName,
-    owner,
-    repo,
-    title,
-    body,
-    contentHash: computeContentHash2(title, body)
-  };
-}
-function computeContentHash2(title, body) {
-  const content = JSON.stringify({
-    title: title || "",
-    body: body || ""
-  });
-  return "sha256:" + createHash2("sha256").update(content).digest("hex");
-}
 function extractGitHubId(result) {
   if (!result || typeof result !== "object")
     return null;
@@ -474,7 +504,7 @@ ${baseError}
   return baseError;
 }
 
-// ../../zod/v4/classic/external.js
+// ../../node_modules/zod/v4/classic/external.js
 var exports_external = {};
 __export(exports_external, {
   xid: () => xid2,
@@ -704,7 +734,7 @@ __export(exports_external, {
   $brand: () => $brand
 });
 
-// ../../zod/v4/core/index.js
+// ../../node_modules/zod/v4/core/index.js
 var exports_core2 = {};
 __export(exports_core2, {
   version: () => version,
@@ -968,7 +998,7 @@ __export(exports_core2, {
   $ZodAny: () => $ZodAny
 });
 
-// ../../zod/v4/core/core.js
+// ../../node_modules/zod/v4/core/core.js
 var NEVER = Object.freeze({
   status: "aborted"
 });
@@ -1035,7 +1065,7 @@ function config(newConfig) {
     Object.assign(globalConfig, newConfig);
   return globalConfig;
 }
-// ../../zod/v4/core/util.js
+// ../../node_modules/zod/v4/core/util.js
 var exports_util = {};
 __export(exports_util, {
   unwrapMessage: () => unwrapMessage,
@@ -1664,7 +1694,7 @@ class Class {
   constructor(..._args) {}
 }
 
-// ../../zod/v4/core/errors.js
+// ../../node_modules/zod/v4/core/errors.js
 var initializer = (inst, def) => {
   inst.name = "$ZodError";
   Object.defineProperty(inst, "_zod", {
@@ -1807,7 +1837,7 @@ function prettifyError(error) {
 `);
 }
 
-// ../../zod/v4/core/parse.js
+// ../../node_modules/zod/v4/core/parse.js
 var _parse = (_Err) => (schema, value, _ctx, _params) => {
   const ctx = _ctx ? Object.assign(_ctx, { async: false }) : { async: false };
   const result = schema._zod.run({ value, issues: [] }, ctx);
@@ -1894,7 +1924,7 @@ var _safeDecodeAsync = (_Err) => async (schema, value, _ctx) => {
   return _safeParseAsync(_Err)(schema, value, _ctx);
 };
 var safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync($ZodRealError);
-// ../../zod/v4/core/regexes.js
+// ../../node_modules/zod/v4/core/regexes.js
 var exports_regexes = {};
 __export(exports_regexes, {
   xid: () => xid,
@@ -2046,7 +2076,7 @@ var sha512_hex = /^[0-9a-fA-F]{128}$/;
 var sha512_base64 = /* @__PURE__ */ fixedBase64(86, "==");
 var sha512_base64url = /* @__PURE__ */ fixedBase64url(86);
 
-// ../../zod/v4/core/checks.js
+// ../../node_modules/zod/v4/core/checks.js
 var $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
   var _a;
   inst._zod ?? (inst._zod = {});
@@ -2587,7 +2617,7 @@ var $ZodCheckOverwrite = /* @__PURE__ */ $constructor("$ZodCheckOverwrite", (ins
   };
 });
 
-// ../../zod/v4/core/doc.js
+// ../../node_modules/zod/v4/core/doc.js
 class Doc {
   constructor(args = []) {
     this.content = [];
@@ -2625,14 +2655,14 @@ class Doc {
   }
 }
 
-// ../../zod/v4/core/versions.js
+// ../../node_modules/zod/v4/core/versions.js
 var version = {
   major: 4,
   minor: 1,
   patch: 8
 };
 
-// ../../zod/v4/core/schemas.js
+// ../../node_modules/zod/v4/core/schemas.js
 var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
   var _a;
   inst ?? (inst = {});
@@ -4455,7 +4485,7 @@ function handleRefineResult(result, payload, input, inst) {
     payload.issues.push(issue(_iss));
   }
 }
-// ../../zod/v4/locales/index.js
+// ../../node_modules/zod/v4/locales/index.js
 var exports_locales = {};
 __export(exports_locales, {
   zhTW: () => zh_TW_default,
@@ -4506,7 +4536,7 @@ __export(exports_locales, {
   ar: () => ar_default
 });
 
-// ../../zod/v4/locales/ar.js
+// ../../node_modules/zod/v4/locales/ar.js
 var error = () => {
   const Sizable = {
     string: { unit: "\u062D\u0631\u0641", verb: "\u0623\u0646 \u064A\u062D\u0648\u064A" },
@@ -4622,7 +4652,7 @@ function ar_default() {
     localeError: error()
   };
 }
-// ../../zod/v4/locales/az.js
+// ../../node_modules/zod/v4/locales/az.js
 var error2 = () => {
   const Sizable = {
     string: { unit: "simvol", verb: "olmal\u0131d\u0131r" },
@@ -4737,7 +4767,7 @@ function az_default() {
     localeError: error2()
   };
 }
-// ../../zod/v4/locales/be.js
+// ../../node_modules/zod/v4/locales/be.js
 function getBelarusianPlural(count, one, few, many) {
   const absCount = Math.abs(count);
   const lastDigit = absCount % 10;
@@ -4901,7 +4931,7 @@ function be_default() {
     localeError: error3()
   };
 }
-// ../../zod/v4/locales/ca.js
+// ../../node_modules/zod/v4/locales/ca.js
 var error4 = () => {
   const Sizable = {
     string: { unit: "car\xE0cters", verb: "contenir" },
@@ -5018,7 +5048,7 @@ function ca_default() {
     localeError: error4()
   };
 }
-// ../../zod/v4/locales/cs.js
+// ../../node_modules/zod/v4/locales/cs.js
 var error5 = () => {
   const Sizable = {
     string: { unit: "znak\u016F", verb: "m\xEDt" },
@@ -5153,7 +5183,7 @@ function cs_default() {
     localeError: error5()
   };
 }
-// ../../zod/v4/locales/da.js
+// ../../node_modules/zod/v4/locales/da.js
 var error6 = () => {
   const Sizable = {
     string: { unit: "tegn", verb: "havde" },
@@ -5284,7 +5314,7 @@ function da_default() {
     localeError: error6()
   };
 }
-// ../../zod/v4/locales/de.js
+// ../../node_modules/zod/v4/locales/de.js
 var error7 = () => {
   const Sizable = {
     string: { unit: "Zeichen", verb: "zu haben" },
@@ -5400,7 +5430,7 @@ function de_default() {
     localeError: error7()
   };
 }
-// ../../zod/v4/locales/en.js
+// ../../node_modules/zod/v4/locales/en.js
 var parsedType = (data) => {
   const t = typeof data;
   switch (t) {
@@ -5517,7 +5547,7 @@ function en_default() {
     localeError: error8()
   };
 }
-// ../../zod/v4/locales/eo.js
+// ../../node_modules/zod/v4/locales/eo.js
 var parsedType2 = (data) => {
   const t = typeof data;
   switch (t) {
@@ -5633,7 +5663,7 @@ function eo_default() {
     localeError: error9()
   };
 }
-// ../../zod/v4/locales/es.js
+// ../../node_modules/zod/v4/locales/es.js
 var error10 = () => {
   const Sizable = {
     string: { unit: "caracteres", verb: "tener" },
@@ -5781,7 +5811,7 @@ function es_default() {
     localeError: error10()
   };
 }
-// ../../zod/v4/locales/fa.js
+// ../../node_modules/zod/v4/locales/fa.js
 var error11 = () => {
   const Sizable = {
     string: { unit: "\u06A9\u0627\u0631\u0627\u06A9\u062A\u0631", verb: "\u062F\u0627\u0634\u062A\u0647 \u0628\u0627\u0634\u062F" },
@@ -5903,7 +5933,7 @@ function fa_default() {
     localeError: error11()
   };
 }
-// ../../zod/v4/locales/fi.js
+// ../../node_modules/zod/v4/locales/fi.js
 var error12 = () => {
   const Sizable = {
     string: { unit: "merkki\xE4", subject: "merkkijonon" },
@@ -6025,7 +6055,7 @@ function fi_default() {
     localeError: error12()
   };
 }
-// ../../zod/v4/locales/fr.js
+// ../../node_modules/zod/v4/locales/fr.js
 var error13 = () => {
   const Sizable = {
     string: { unit: "caract\xE8res", verb: "avoir" },
@@ -6141,7 +6171,7 @@ function fr_default() {
     localeError: error13()
   };
 }
-// ../../zod/v4/locales/fr-CA.js
+// ../../node_modules/zod/v4/locales/fr-CA.js
 var error14 = () => {
   const Sizable = {
     string: { unit: "caract\xE8res", verb: "avoir" },
@@ -6258,7 +6288,7 @@ function fr_CA_default() {
     localeError: error14()
   };
 }
-// ../../zod/v4/locales/he.js
+// ../../node_modules/zod/v4/locales/he.js
 var error15 = () => {
   const Sizable = {
     string: { unit: "\u05D0\u05D5\u05EA\u05D9\u05D5\u05EA", verb: "\u05DC\u05DB\u05DC\u05D5\u05DC" },
@@ -6374,7 +6404,7 @@ function he_default() {
     localeError: error15()
   };
 }
-// ../../zod/v4/locales/hu.js
+// ../../node_modules/zod/v4/locales/hu.js
 var error16 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "legyen" },
@@ -6490,7 +6520,7 @@ function hu_default() {
     localeError: error16()
   };
 }
-// ../../zod/v4/locales/id.js
+// ../../node_modules/zod/v4/locales/id.js
 var error17 = () => {
   const Sizable = {
     string: { unit: "karakter", verb: "memiliki" },
@@ -6606,7 +6636,7 @@ function id_default() {
     localeError: error17()
   };
 }
-// ../../zod/v4/locales/is.js
+// ../../node_modules/zod/v4/locales/is.js
 var parsedType3 = (data) => {
   const t = typeof data;
   switch (t) {
@@ -6723,7 +6753,7 @@ function is_default() {
     localeError: error18()
   };
 }
-// ../../zod/v4/locales/it.js
+// ../../node_modules/zod/v4/locales/it.js
 var error19 = () => {
   const Sizable = {
     string: { unit: "caratteri", verb: "avere" },
@@ -6839,7 +6869,7 @@ function it_default() {
     localeError: error19()
   };
 }
-// ../../zod/v4/locales/ja.js
+// ../../node_modules/zod/v4/locales/ja.js
 var error20 = () => {
   const Sizable = {
     string: { unit: "\u6587\u5B57", verb: "\u3067\u3042\u308B" },
@@ -6954,7 +6984,7 @@ function ja_default() {
     localeError: error20()
   };
 }
-// ../../zod/v4/locales/ka.js
+// ../../node_modules/zod/v4/locales/ka.js
 var parsedType4 = (data) => {
   const t = typeof data;
   switch (t) {
@@ -7079,7 +7109,7 @@ function ka_default() {
     localeError: error21()
   };
 }
-// ../../zod/v4/locales/km.js
+// ../../node_modules/zod/v4/locales/km.js
 var error22 = () => {
   const Sizable = {
     string: { unit: "\u178F\u17BD\u17A2\u1780\u17D2\u179F\u179A", verb: "\u1782\u17BD\u179A\u1798\u17B6\u1793" },
@@ -7197,11 +7227,11 @@ function km_default() {
   };
 }
 
-// ../../zod/v4/locales/kh.js
+// ../../node_modules/zod/v4/locales/kh.js
 function kh_default() {
   return km_default();
 }
-// ../../zod/v4/locales/ko.js
+// ../../node_modules/zod/v4/locales/ko.js
 var error23 = () => {
   const Sizable = {
     string: { unit: "\uBB38\uC790", verb: "to have" },
@@ -7322,7 +7352,7 @@ function ko_default() {
     localeError: error23()
   };
 }
-// ../../zod/v4/locales/lt.js
+// ../../node_modules/zod/v4/locales/lt.js
 var parsedType5 = (data) => {
   const t = typeof data;
   return parsedTypeFromType(t, data);
@@ -7551,7 +7581,7 @@ function lt_default() {
     localeError: error24()
   };
 }
-// ../../zod/v4/locales/mk.js
+// ../../node_modules/zod/v4/locales/mk.js
 var error25 = () => {
   const Sizable = {
     string: { unit: "\u0437\u043D\u0430\u0446\u0438", verb: "\u0434\u0430 \u0438\u043C\u0430\u0430\u0442" },
@@ -7668,7 +7698,7 @@ function mk_default() {
     localeError: error25()
   };
 }
-// ../../zod/v4/locales/ms.js
+// ../../node_modules/zod/v4/locales/ms.js
 var error26 = () => {
   const Sizable = {
     string: { unit: "aksara", verb: "mempunyai" },
@@ -7784,7 +7814,7 @@ function ms_default() {
     localeError: error26()
   };
 }
-// ../../zod/v4/locales/nl.js
+// ../../node_modules/zod/v4/locales/nl.js
 var error27 = () => {
   const Sizable = {
     string: { unit: "tekens" },
@@ -7901,7 +7931,7 @@ function nl_default() {
     localeError: error27()
   };
 }
-// ../../zod/v4/locales/no.js
+// ../../node_modules/zod/v4/locales/no.js
 var error28 = () => {
   const Sizable = {
     string: { unit: "tegn", verb: "\xE5 ha" },
@@ -8017,7 +8047,7 @@ function no_default() {
     localeError: error28()
   };
 }
-// ../../zod/v4/locales/ota.js
+// ../../node_modules/zod/v4/locales/ota.js
 var error29 = () => {
   const Sizable = {
     string: { unit: "harf", verb: "olmal\u0131d\u0131r" },
@@ -8133,7 +8163,7 @@ function ota_default() {
     localeError: error29()
   };
 }
-// ../../zod/v4/locales/ps.js
+// ../../node_modules/zod/v4/locales/ps.js
 var error30 = () => {
   const Sizable = {
     string: { unit: "\u062A\u0648\u06A9\u064A", verb: "\u0648\u0644\u0631\u064A" },
@@ -8255,7 +8285,7 @@ function ps_default() {
     localeError: error30()
   };
 }
-// ../../zod/v4/locales/pl.js
+// ../../node_modules/zod/v4/locales/pl.js
 var error31 = () => {
   const Sizable = {
     string: { unit: "znak\xF3w", verb: "mie\u0107" },
@@ -8372,7 +8402,7 @@ function pl_default() {
     localeError: error31()
   };
 }
-// ../../zod/v4/locales/pt.js
+// ../../node_modules/zod/v4/locales/pt.js
 var error32 = () => {
   const Sizable = {
     string: { unit: "caracteres", verb: "ter" },
@@ -8488,7 +8518,7 @@ function pt_default() {
     localeError: error32()
   };
 }
-// ../../zod/v4/locales/ru.js
+// ../../node_modules/zod/v4/locales/ru.js
 function getRussianPlural(count, one, few, many) {
   const absCount = Math.abs(count);
   const lastDigit = absCount % 10;
@@ -8652,7 +8682,7 @@ function ru_default() {
     localeError: error33()
   };
 }
-// ../../zod/v4/locales/sl.js
+// ../../node_modules/zod/v4/locales/sl.js
 var error34 = () => {
   const Sizable = {
     string: { unit: "znakov", verb: "imeti" },
@@ -8769,7 +8799,7 @@ function sl_default() {
     localeError: error34()
   };
 }
-// ../../zod/v4/locales/sv.js
+// ../../node_modules/zod/v4/locales/sv.js
 var error35 = () => {
   const Sizable = {
     string: { unit: "tecken", verb: "att ha" },
@@ -8887,7 +8917,7 @@ function sv_default() {
     localeError: error35()
   };
 }
-// ../../zod/v4/locales/ta.js
+// ../../node_modules/zod/v4/locales/ta.js
 var error36 = () => {
   const Sizable = {
     string: { unit: "\u0B8E\u0BB4\u0BC1\u0BA4\u0BCD\u0BA4\u0BC1\u0B95\u0BCD\u0B95\u0BB3\u0BCD", verb: "\u0B95\u0BCA\u0BA3\u0BCD\u0B9F\u0BBF\u0BB0\u0BC1\u0B95\u0BCD\u0B95 \u0BB5\u0BC7\u0BA3\u0BCD\u0B9F\u0BC1\u0BAE\u0BCD" },
@@ -9004,7 +9034,7 @@ function ta_default() {
     localeError: error36()
   };
 }
-// ../../zod/v4/locales/th.js
+// ../../node_modules/zod/v4/locales/th.js
 var error37 = () => {
   const Sizable = {
     string: { unit: "\u0E15\u0E31\u0E27\u0E2D\u0E31\u0E01\u0E29\u0E23", verb: "\u0E04\u0E27\u0E23\u0E21\u0E35" },
@@ -9121,7 +9151,7 @@ function th_default() {
     localeError: error37()
   };
 }
-// ../../zod/v4/locales/tr.js
+// ../../node_modules/zod/v4/locales/tr.js
 var parsedType6 = (data) => {
   const t = typeof data;
   switch (t) {
@@ -9236,7 +9266,7 @@ function tr_default() {
     localeError: error38()
   };
 }
-// ../../zod/v4/locales/uk.js
+// ../../node_modules/zod/v4/locales/uk.js
 var error39 = () => {
   const Sizable = {
     string: { unit: "\u0441\u0438\u043C\u0432\u043E\u043B\u0456\u0432", verb: "\u043C\u0430\u0442\u0438\u043C\u0435" },
@@ -9353,11 +9383,11 @@ function uk_default() {
   };
 }
 
-// ../../zod/v4/locales/ua.js
+// ../../node_modules/zod/v4/locales/ua.js
 function ua_default() {
   return uk_default();
 }
-// ../../zod/v4/locales/ur.js
+// ../../node_modules/zod/v4/locales/ur.js
 var error40 = () => {
   const Sizable = {
     string: { unit: "\u062D\u0631\u0648\u0641", verb: "\u06C1\u0648\u0646\u0627" },
@@ -9474,7 +9504,7 @@ function ur_default() {
     localeError: error40()
   };
 }
-// ../../zod/v4/locales/vi.js
+// ../../node_modules/zod/v4/locales/vi.js
 var error41 = () => {
   const Sizable = {
     string: { unit: "k\xFD t\u1EF1", verb: "c\xF3" },
@@ -9590,7 +9620,7 @@ function vi_default() {
     localeError: error41()
   };
 }
-// ../../zod/v4/locales/zh-CN.js
+// ../../node_modules/zod/v4/locales/zh-CN.js
 var error42 = () => {
   const Sizable = {
     string: { unit: "\u5B57\u7B26", verb: "\u5305\u542B" },
@@ -9706,7 +9736,7 @@ function zh_CN_default() {
     localeError: error42()
   };
 }
-// ../../zod/v4/locales/zh-TW.js
+// ../../node_modules/zod/v4/locales/zh-TW.js
 var error43 = () => {
   const Sizable = {
     string: { unit: "\u5B57\u5143", verb: "\u64C1\u6709" },
@@ -9823,7 +9853,7 @@ function zh_TW_default() {
     localeError: error43()
   };
 }
-// ../../zod/v4/locales/yo.js
+// ../../node_modules/zod/v4/locales/yo.js
 var error44 = () => {
   const Sizable = {
     string: { unit: "\xE0mi", verb: "n\xED" },
@@ -9938,7 +9968,7 @@ function yo_default() {
     localeError: error44()
   };
 }
-// ../../zod/v4/core/registries.js
+// ../../node_modules/zod/v4/core/registries.js
 var $output = Symbol("ZodOutput");
 var $input = Symbol("ZodInput");
 
@@ -9989,7 +10019,7 @@ function registry() {
   return new $ZodRegistry;
 }
 var globalRegistry = /* @__PURE__ */ registry();
-// ../../zod/v4/core/api.js
+// ../../node_modules/zod/v4/core/api.js
 function _string(Class2, params) {
   return new Class2({
     type: "string",
@@ -10867,7 +10897,7 @@ function _stringFormat(Class2, format, fnOrRegex, _params = {}) {
   const inst = new Class2(def);
   return inst;
 }
-// ../../zod/v4/core/to-json-schema.js
+// ../../node_modules/zod/v4/core/to-json-schema.js
 class JSONSchemaGenerator {
   constructor(params) {
     this.counter = 0;
@@ -11671,9 +11701,9 @@ function isTransforming(_schema, _ctx) {
   }
   throw new Error(`Unknown schema type: ${def.type}`);
 }
-// ../../zod/v4/core/json-schema.js
+// ../../node_modules/zod/v4/core/json-schema.js
 var exports_json_schema = {};
-// ../../zod/v4/classic/iso.js
+// ../../node_modules/zod/v4/classic/iso.js
 var exports_iso = {};
 __export(exports_iso, {
   time: () => time2,
@@ -11714,7 +11744,7 @@ function duration2(params) {
   return _isoDuration(ZodISODuration, params);
 }
 
-// ../../zod/v4/classic/errors.js
+// ../../node_modules/zod/v4/classic/errors.js
 var initializer2 = (inst, issues) => {
   $ZodError.init(inst, issues);
   inst.name = "ZodError";
@@ -11749,7 +11779,7 @@ var ZodRealError = $constructor("ZodError", initializer2, {
   Parent: Error
 });
 
-// ../../zod/v4/classic/parse.js
+// ../../node_modules/zod/v4/classic/parse.js
 var parse3 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -11763,7 +11793,7 @@ var safeDecode2 = /* @__PURE__ */ _safeDecode(ZodRealError);
 var safeEncodeAsync2 = /* @__PURE__ */ _safeEncodeAsync(ZodRealError);
 var safeDecodeAsync2 = /* @__PURE__ */ _safeDecodeAsync(ZodRealError);
 
-// ../../zod/v4/classic/schemas.js
+// ../../node_modules/zod/v4/classic/schemas.js
 var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
   $ZodType.init(inst, def);
   inst.def = def;
@@ -12738,7 +12768,7 @@ function json(params) {
 function preprocess(fn, schema) {
   return pipe(transform(fn), schema);
 }
-// ../../zod/v4/classic/compat.js
+// ../../node_modules/zod/v4/classic/compat.js
 var ZodIssueCode = {
   invalid_type: "invalid_type",
   too_big: "too_big",
@@ -12762,7 +12792,7 @@ function getErrorMap() {
 }
 var ZodFirstPartyTypeKind;
 (function(ZodFirstPartyTypeKind2) {})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
-// ../../zod/v4/classic/coerce.js
+// ../../node_modules/zod/v4/classic/coerce.js
 var exports_coerce = {};
 __export(exports_coerce, {
   string: () => string3,
@@ -12787,61 +12817,67 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
-// ../../zod/v4/classic/external.js
+// ../../node_modules/zod/v4/classic/external.js
 config(en_default());
-// ../../@opencode-ai/plugin/dist/tool.js
+// ../../node_modules/@opencode-ai/plugin/dist/tool.js
 function tool(input) {
   return input;
 }
 tool.schema = exports_external;
 // tools.ts
 var createComplianceRecordTool = tool({
-  description: "Create a compliance record AFTER user approves the draft. MUST be called after explicit user approval. This records that human approval was obtained and allows the GitHub write operation to proceed.",
+  description: "Create compliance record",
   args: {
-    tool_name: tool.schema.string({ description: "GitHub tool name (e.g., issue_write, pull_request_write)" }),
-    owner: tool.schema.string({ description: "Repository owner (user or org)" }),
-    repo: tool.schema.string({ description: "Repository name" }),
-    title: tool.schema.string().optional({ description: "Issue/PR title" }),
-    body: tool.schema.string({ description: "Issue/PR body content" }),
-    github_username: tool.schema.string({ description: "GitHub username of human approver" }),
-    approved_at: tool.schema.string({ description: "ISO8601 timestamp when user approved" }),
-    checks: tool.schema.array(tool.schema.object({
-      check_type: tool.schema.string({ description: "Type of check performed" }),
-      passed: tool.schema.boolean({ description: "Whether check passed" }),
-      details: tool.schema.record(tool.schema.string(), tool.schema.any()).optional({ description: "Additional details" })
-    })).optional({ description: "List of compliance checks performed" })
+    tool_name: exports_external.string(),
+    owner: exports_external.string(),
+    repo: exports_external.string(),
+    title: exports_external.string().optional(),
+    body: exports_external.string(),
+    github_username: exports_external.string(),
+    approved_at: exports_external.string(),
+    checks: exports_external.string().optional()
   },
   async execute(args, _context) {
+    let checks3 = [];
+    if (args.checks) {
+      try {
+        checks3 = JSON.parse(args.checks);
+      } catch {
+        checks3 = [];
+      }
+    }
+    const body = Buffer.from(args.body, "base64").toString("utf-8");
+    const title = args.title ? Buffer.from(args.title, "base64").toString("utf-8") : null;
     const input = {
       tool_name: args.tool_name,
       owner: args.owner,
       repo: args.repo,
-      title: args.title || null,
-      body: args.body,
+      title,
+      body,
       github_username: args.github_username,
       approved_at: args.approved_at,
-      checks: args.checks || []
+      checks: checks3
     };
     const recordId = await createComplianceRecord(input);
-    return {
+    return JSON.stringify({
       success: true,
       record_id: recordId,
-      message: "Compliance record created. You may now execute the GitHub write operation.",
+      message: "Compliance record created",
       expires_at: new Date(Date.now() + 30 * 60 * 1000).toISOString()
-    };
+    });
   }
 });
 var getComplianceStatusTool = tool({
-  description: "Check if a valid compliance record exists for a planned GitHub write operation.",
+  description: "Check compliance status",
   args: {
-    tool_name: tool.schema.string({ description: "GitHub tool name" }),
-    owner: tool.schema.string({ description: "Repository owner" }),
-    repo: tool.schema.string({ description: "Repository name" }),
-    content_hash: tool.schema.string({ description: "SHA256 hash of the content (format: sha256:...)" })
+    tool_name: exports_external.string(),
+    owner: exports_external.string(),
+    repo: exports_external.string(),
+    content_hash: exports_external.string()
   },
   async execute(args, _context) {
     const status = await getComplianceStatus(args.tool_name, args.owner, args.repo, args.content_hash);
-    return status;
+    return JSON.stringify(status);
   }
 });
 var tools = {
@@ -12850,6 +12886,77 @@ var tools = {
 };
 
 // plugin.ts
+function isMcpTool(toolName) {
+  return toolName.startsWith("github_");
+}
+function extractToolInfoFromArgs(toolName, args) {
+  const fields = extractRecordFields(toolName, args);
+  return {
+    toolName: fields.toolName,
+    owner: fields.owner,
+    repo: fields.repo,
+    title: fields.title,
+    body: fields.body,
+    contentHash: fields.contentHash
+  };
+}
+function extractArgs(input, output) {
+  if (output.args && typeof output.args === "object") {
+    return output.args;
+  }
+  if (input.arguments && typeof input.arguments === "object") {
+    return input.arguments;
+  }
+  if (input.args && typeof input.args === "object") {
+    return input.args;
+  }
+  if (typeof input.arguments === "string") {
+    try {
+      return JSON.parse(input.arguments);
+    } catch {}
+  }
+  return null;
+}
+async function validateAndProcess(toolName, owner, repo, contentHash, toolInfo) {
+  const record2 = await getComplianceRecord(toolName, owner, repo, contentHash);
+  const validation = await validateCompliance(record2, {
+    toolName,
+    owner,
+    repo,
+    contentHash
+  });
+  if (!validation.valid) {
+    await logFailedAttempt({
+      tool_name: toolName,
+      owner,
+      repo,
+      reason: validation.reason,
+      content_hash: contentHash,
+      provided_record_id: record2?.id || null,
+      error_details: validation.message
+    });
+    return { allowed: false, record: record2, validation };
+  }
+  await markRecordUsed(record2.id);
+  return { allowed: true, record: record2, validation };
+}
+async function logSuccess(toolInfo, record2, result) {
+  const githubUrl = extractGitHubUrl(result);
+  const githubId = extractGitHubId(result);
+  await logAudit({
+    compliance_record_id: record2.id,
+    tool_name: toolInfo.toolName,
+    owner: toolInfo.owner,
+    repo: toolInfo.repo,
+    github_username: record2.github_username,
+    status: "success",
+    error_message: null,
+    github_url: githubUrl,
+    github_id: githubId,
+    executed_at: new Date().toISOString(),
+    content_preview: toolInfo.body ? toolInfo.body.substring(0, 500) : null
+  });
+}
 var GitHubCompliancePlugin = async (_ctx) => {
   await initDatabase();
   return {
@@ -12858,10 +12965,16 @@ var GitHubCompliancePlugin = async (_ctx) => {
       if (!isGitHubWriteTool(input.tool)) {
         return;
       }
+      const isMcp = isMcpTool(input.tool);
+      if (isMcp) {
+        output.__needsMcpValidation = true;
+        output.__mcpToolName = input.tool;
+        return;
+      }
       let toolInfo;
-      let record2 = null;
       try {
-        toolInfo = extractToolInfo(input.tool, input.args);
+        const args = extractArgs(input, output);
+        toolInfo = extractToolInfoFromArgs(input.tool, args);
       } catch (error45) {
         await logFailedAttempt({
           tool_name: input.tool,
@@ -12878,21 +12991,10 @@ var GitHubCompliancePlugin = async (_ctx) => {
         }));
       }
       try {
-        record2 = await getComplianceRecord(toolInfo.toolName, toolInfo.owner, toolInfo.repo, toolInfo.contentHash);
-        const validation = await validateCompliance(record2, toolInfo);
-        if (!validation.valid) {
-          await logFailedAttempt({
-            tool_name: toolInfo.toolName,
-            owner: toolInfo.owner,
-            repo: toolInfo.repo,
-            reason: validation.reason,
-            content_hash: toolInfo.contentHash,
-            provided_record_id: record2?.id || null,
-            error_details: validation.message
-          });
+        const { allowed, record: record2, validation } = await validateAndProcess(toolInfo.toolName, toolInfo.owner, toolInfo.repo, toolInfo.contentHash, toolInfo);
+        if (!allowed) {
           throw new Error(buildBlockedError(validation));
         }
-        await markRecordUsed(record2.id);
         output.__complianceRecordId = record2.id;
         output.__toolInfo = toolInfo;
       } catch (error45) {
@@ -12902,10 +13004,10 @@ var GitHubCompliancePlugin = async (_ctx) => {
         await logFailedAttempt({
           tool_name: toolInfo.toolName,
           owner: toolInfo.owner,
-          repo: toolInfo.repo,
+          toolInfo: toolInfo.repo,
           reason: ERROR_REASONS.UNEXPECTED_ERROR,
           content_hash: toolInfo.contentHash,
-          provided_record_id: record2?.id || null,
+          provided_record_id: null,
           error_details: error45 instanceof Error ? error45.message : String(error45)
         });
         throw new Error(buildBlockedError({
@@ -12919,26 +13021,63 @@ var GitHubCompliancePlugin = async (_ctx) => {
       if (!isGitHubWriteTool(input.tool)) {
         return;
       }
+      const isMcp = isMcpTool(input.tool);
+      const needsMcpValidation = output.__needsMcpValidation === true;
+      if (isMcp && needsMcpValidation) {
+        let toolInfo2;
+        try {
+          const args = input.args;
+          toolInfo2 = extractToolInfoFromArgs(input.tool, args || null);
+        } catch (error45) {
+          await logFailedAttempt({
+            tool_name: input.tool,
+            owner: "unknown",
+            repo: "unknown",
+            reason: ERROR_REASONS.EXTRACTION_ERROR,
+            content_hash: null,
+            error_details: `Failed to extract MCP tool info in after hook: ${error45 instanceof Error ? error45.message : String(error45)}`
+          });
+          return;
+        }
+        try {
+          const { allowed, record: record3, validation } = await validateAndProcess(toolInfo2.toolName, toolInfo2.owner, toolInfo2.repo, toolInfo2.contentHash, toolInfo2);
+          if (!allowed) {
+            await logFailedAttempt({
+              tool_name: toolInfo2.toolName,
+              owner: toolInfo2.owner,
+              repo: toolInfo2.repo,
+              reason: validation.reason,
+              content_hash: toolInfo2.contentHash,
+              provided_record_id: record3?.id || null,
+              error_details: "MCP tool executed without valid compliance record"
+            });
+            return;
+          }
+          if (record3) {
+            await logSuccess(toolInfo2, record3, output.result);
+          }
+        } catch (error45) {
+          await logFailedAttempt({
+            tool_name: toolInfo2.toolName,
+            owner: toolInfo2.owner,
+            repo: toolInfo2.repo,
+            reason: ERROR_REASONS.UNEXPECTED_ERROR,
+            content_hash: toolInfo2.contentHash,
+            provided_record_id: null,
+            error_details: error45 instanceof Error ? error45.message : String(error45)
+          });
+        }
+        return;
+      }
       const complianceRecordId = output.__complianceRecordId;
       const toolInfo = output.__toolInfo;
       if (!complianceRecordId || !toolInfo) {
         return;
       }
-      const githubUrl = extractGitHubUrl(output.result);
-      const githubId = extractGitHubId(output.result);
-      await logAudit({
-        compliance_record_id: complianceRecordId,
-        tool_name: toolInfo.toolName,
-        owner: toolInfo.owner,
-        repo: toolInfo.repo,
-        github_username: "unknown",
-        status: "success",
-        error_message: null,
-        github_url: githubUrl,
-        github_id: githubId,
-        executed_at: new Date().toISOString(),
-        content_preview: toolInfo.body ? toolInfo.body.substring(0, 500) : null
-      });
+      const record2 = await getComplianceRecord(toolInfo.toolName, toolInfo.owner, toolInfo.repo, toolInfo.contentHash);
+      if (record2) {
+        await logSuccess(toolInfo, record2, output.result);
+      }
     }
   };
 };