@planu/cli 0.63.7 → 0.64.0

package/dist/tools/register-audit-trail-tools.js

@@ -0,0 +1,62 @@
+// tools/register-audit-trail-tools.ts — Registers audit_trail and generate_attestation tools (SPEC-167)
+import { z } from 'zod';
+import { safeLicensed } from './safe-handler.js';
+import { handleAuditTrail, handleGenerateAttestation } from './audit-trail-handler.js';
+const AUDIT_EVENT_TYPES = [
+    'spec.created',
+    'spec.updated',
+    'spec.status_changed',
+    'spec.approved',
+    'spec.drift_detected',
+    'spec.reconciled',
+    'tool.called',
+    'role.assigned',
+];
+export function registerAuditTrailTools(server) {
+    // audit_trail — SPEC-167
+    server.registerTool('audit_trail', {
+        description: 'Query the immutable audit log for a project. Supports filtering by specId, userId, eventType, and date range. Returns events with SHA-256 chain integrity status.',
+        annotations: { readOnlyHint: true },
+        inputSchema: {
+            projectId: z.string().min(1).max(500).describe('Project ID to query audit log for.'),
+            specId: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Filter events by spec ID (e.g. SPEC-001).'),
+            eventType: z
+                .enum(AUDIT_EVENT_TYPES)
+                .optional()
+                .describe('Filter by event type. Valid values: spec.created, spec.updated, spec.status_changed, spec.approved, spec.drift_detected, spec.reconciled, tool.called, role.assigned.'),
+            from: z
+                .string()
+                .optional()
+                .describe('ISO-8601 start date (inclusive). Example: 2026-01-01T00:00:00Z'),
+            to: z
+                .string()
+                .optional()
+                .describe('ISO-8601 end date (inclusive). Example: 2026-12-31T23:59:59Z'),
+            limit: z
+                .number()
+                .int()
+                .min(1)
+                .max(1000)
+                .optional()
+                .describe('Maximum number of events to return (default: 100, max: 1000).'),
+        },
+    }, safeLicensed('audit_trail', async (args) => handleAuditTrail(args)));
+    // generate_attestation — SPEC-167
+    server.registerTool('generate_attestation', {
+        description: 'Generate a compliance attestation document for a specific spec. Includes full audit history, chain integrity verification, and event summary for SOC2/HIPAA/ISO27001 audits.',
+        annotations: { readOnlyHint: true },
+        inputSchema: {
+            projectId: z.string().min(1).max(500).describe('Project ID.'),
+            specId: z
+                .string()
+                .min(1)
+                .max(500)
+                .describe('Spec ID to generate attestation for (e.g. SPEC-042).'),
+        },
+    }, safeLicensed('generate_attestation', async (args) => handleGenerateAttestation(args)));
+}
+//# sourceMappingURL=register-audit-trail-tools.js.map

package/dist/tools/register-audit-trail-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-audit-trail-tools.js","sourceRoot":"","sources":["../../src/tools/register-audit-trail-tools.ts"],"names":[],"mappings":"AAAA,wGAAwG;AAGxG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAEvF,MAAM,iBAAiB,GAAG;IACxB,cAAc;IACd,cAAc;IACd,qBAAqB;IACrB,eAAe;IACf,qBAAqB;IACrB,iBAAiB;IACjB,aAAa;IACb,eAAe;CACP,CAAC;AAEX,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,yBAAyB;IACzB,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EACT,mKAAmK;QACrK,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YACpF,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,2CAA2C,CAAC;YACxD,SAAS,EAAE,CAAC;iBACT,IAAI,CAAC,iBAAiB,CAAC;iBACvB,QAAQ,EAAE;iBACV,QAAQ,CACP,uKAAuK,CACxK;YACH,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,gEAAgE,CAAC;YAC7E,EAAE,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;YAC3E,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,+DAA+D,CAAC;SAC7E;KACF,EACD,YAAY,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;IAEF,kCAAkC;IAClC,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,8KAA8K;QAChL,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC7D,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,CAAC,sDAAsD,CAAC;SACpE;KACF,EACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CACtF,CAAC;AACJ,CAAC"}

package/dist/tools/register-decompose-tools.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerDecomposeTools(server: McpServer): void;
+//# sourceMappingURL=register-decompose-tools.d.ts.map

package/dist/tools/register-decompose-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-decompose-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-decompose-tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAiC9D"}

package/dist/tools/register-decompose-tools.js

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+import { handleDecomposeSpec } from './decompose-spec.js';
+import { safeLicensed } from './safe-handler.js';
+export function registerDecomposeTools(server) {
+    server.registerTool('decompose_spec', {
+        description: 'Auto-decompose a spec into independent agent tasks with non-overlapping file ownership. ' +
+            'Groups acceptance criteria by category (types, engine, storage, tool, tests), detects file conflicts, ' +
+            'resolves ownership, assigns model recommendations, and outputs a ready-to-execute orchestration plan ' +
+            'compatible with orchestrate_runtime.',
+        inputSchema: {
+            projectId: z
+                .string()
+                .max(500)
+                .describe('Project identifier — the path hash or slug used by other Planu tools'),
+            specId: z
+                .string()
+                .max(500)
+                .describe('Spec ID to decompose (e.g. "SPEC-042"). Must exist in the project.'),
+            maxTasks: z
+                .number()
+                .int()
+                .min(1)
+                .max(20)
+                .optional()
+                .describe('Maximum number of agent tasks to generate (default: 5, max: 20). ' +
+                'Excess work units are merged into the last task.'),
+        },
+        annotations: { readOnlyHint: true },
+    }, safeLicensed('decompose_spec', async (args) => handleDecomposeSpec(args)));
+}
+//# sourceMappingURL=register-decompose-tools.js.map

package/dist/tools/register-decompose-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-decompose-tools.js","sourceRoot":"","sources":["../../src/tools/register-decompose-tools.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,0FAA0F;YAC1F,wGAAwG;YACxG,uGAAuG;YACvG,sCAAsC;QACxC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,CAAC,sEAAsE,CAAC;YACnF,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,CAAC,oEAAoE,CAAC;YACjF,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,EAAE;iBACV,QAAQ,CACP,mEAAmE;gBACjE,kDAAkD,CACrD;SACJ;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,YAAY,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAA0B,CAAC,CAAC,CAChG,CAAC;AACJ,CAAC"}

package/dist/tools/register-federation-tools.d.ts

@@ -0,0 +1,6 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/**
+ * Registers the `federate_specs` and `federation_status` tools (SPEC-160).
+ */
+export declare function registerFederationTools(server: McpServer): void;
+//# sourceMappingURL=register-federation-tools.d.ts.map

package/dist/tools/register-federation-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-federation-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-federation-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAiE/D"}

package/dist/tools/register-federation-tools.js

@@ -0,0 +1,48 @@
+// tools/register-federation-tools.ts — Register multi-repo federation tools (SPEC-160)
+import { z } from 'zod';
+import { handleFederateSpecs } from './federate-specs.js';
+import { handleFederationStatus } from './federation-status.js';
+import { safeLicensed } from './safe-handler.js';
+/**
+ * Registers the `federate_specs` and `federation_status` tools (SPEC-160).
+ */
+export function registerFederationTools(server) {
+    // federate_specs — link a spec to one in another repository
+    server.registerTool('federate_specs', {
+        description: 'Link a spec in the current project to a spec in another local repository. ' +
+            'Declares cross-repo dependencies (e.g., "this API spec depends on the contract spec in the auth-service repo"). ' +
+            'Supports three relationship types: depends-on, consumed-by, shared-contract. ' +
+            'Stored in data/global/federation.json and resolved locally — no network calls.',
+        inputSchema: {
+            projectId: z.string().max(500).describe('Project ID (from init_project)'),
+            specId: z.string().max(500).describe('Spec ID in the current project (e.g., "SPEC-042")'),
+            linkedRepo: z
+                .string()
+                .max(4096)
+                .describe('Absolute or relative local path to the linked repository (e.g., "/home/user/api-server" or "../api-server")'),
+            linkedSpecId: z
+                .string()
+                .max(500)
+                .describe('Spec ID in the linked repository (e.g., "SPEC-007")'),
+            linkType: z
+                .enum(['depends-on', 'consumed-by', 'shared-contract'])
+                .describe('Relationship type: ' +
+                'depends-on (this spec depends on the linked spec), ' +
+                'consumed-by (this spec is consumed by the linked spec), ' +
+                'shared-contract (both specs share a contract)'),
+        },
+        annotations: { readOnlyHint: false },
+    }, safeLicensed('federate_specs', async (args) => handleFederateSpecs(args)));
+    // federation_status — show all federated specs and their health
+    server.registerTool('federation_status', {
+        description: 'Show all cross-repo spec federation links for a project and their health. ' +
+            'Checks whether linked repos are accessible locally, whether linked specs exist, ' +
+            'and whether they have changed since the last check (drift detection). ' +
+            'Returns a report with per-link status (OK / MISSING / BROKEN) and drift flags.',
+        inputSchema: {
+            projectId: z.string().max(500).describe('Project ID (from init_project)'),
+        },
+        annotations: { readOnlyHint: true },
+    }, safeLicensed('federation_status', async (args) => handleFederationStatus(args)));
+}
+//# sourceMappingURL=register-federation-tools.js.map

package/dist/tools/register-federation-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-federation-tools.js","sourceRoot":"","sources":["../../src/tools/register-federation-tools.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAGvF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,4DAA4D;IAC5D,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,4EAA4E;YAC5E,kHAAkH;YAClH,+EAA+E;YAC/E,gFAAgF;QAClF,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YACzF,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,CACP,6GAA6G,CAC9G;YACH,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,CAAC,qDAAqD,CAAC;YAClE,QAAQ,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;iBACtD,QAAQ,CACP,qBAAqB;gBACnB,qDAAqD;gBACrD,0DAA0D;gBAC1D,+CAA+C,CAClD;SACJ;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;KACrC,EACD,YAAY,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC5C,mBAAmB,CACjB,IAMC,CACF,CACF,CACF,CAAC;IAEF,gEAAgE;IAChE,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,4EAA4E;YAC5E,kFAAkF;YAClF,wEAAwE;YACxE,gFAAgF;QAClF,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;SAC1E;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,YAAY,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC/C,sBAAsB,CAAC,IAA6B,CAAC,CACtD,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/register-infrastructure-tools.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerInfrastructureTools(server: McpServer): void;
+//# sourceMappingURL=register-infrastructure-tools.d.ts.map

package/dist/tools/register-infrastructure-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-infrastructure-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-infrastructure-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAyCnE"}

package/dist/tools/register-infrastructure-tools.js

@@ -0,0 +1,34 @@
+// tools/register-infrastructure-tools.ts — Register generate_infrastructure tool (SPEC-171)
+import { z } from 'zod';
+import { handleGenerateInfrastructure } from './generate-infrastructure.js';
+import { safeTracked } from './safe-handler.js';
+export function registerInfrastructureTools(server) {
+    server.registerTool('generate_infrastructure', {
+        description: 'Generate Infrastructure-as-Code (IaC) from a spec. ' +
+            'Analyzes spec text for infrastructure signals (database, cache, queue, storage, deployment) ' +
+            'and generates Terraform, Docker Compose, Kubernetes manifests, or Railway config. ' +
+            'Includes monthly cost estimates for detected services.',
+        annotations: { readOnlyHint: true },
+        inputSchema: {
+            projectId: z.string().max(500).describe('Project ID (from init_project)'),
+            specId: z
+                .string()
+                .max(500)
+                .describe('Spec ID to analyze for infrastructure signals (e.g. SPEC-042)'),
+            formats: z
+                .array(z
+                .enum(['terraform', 'docker-compose', 'kubernetes', 'railway'])
+                .describe('Output format: terraform | docker-compose | kubernetes | railway'))
+                .max(4)
+                .optional()
+                .describe('IaC formats to generate: terraform | docker-compose | kubernetes | railway. ' +
+                'Default: [terraform, docker-compose]'),
+            environment: z
+                .enum(['dev', 'staging', 'prod'])
+                .optional()
+                .describe('Target environment: dev | staging | prod. ' +
+                'Affects instance sizing and cost estimates. Default: dev'),
+        },
+    }, safeTracked('generate_infrastructure', async (args) => handleGenerateInfrastructure(args)));
+}
+//# sourceMappingURL=register-infrastructure-tools.js.map

package/dist/tools/register-infrastructure-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-infrastructure-tools.js","sourceRoot":"","sources":["../../src/tools/register-infrastructure-tools.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAG5F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,UAAU,2BAA2B,CAAC,MAAiB;IAC3D,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,WAAW,EACT,qDAAqD;YACrD,8FAA8F;YAC9F,oFAAoF;YACpF,wDAAwD;QAC1D,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YACzE,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,OAAO,EAAE,CAAC;iBACP,KAAK,CACJ,CAAC;iBACE,IAAI,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;iBAC9D,QAAQ,CAAC,kEAAkE,CAAC,CAChF;iBACA,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CACP,8EAA8E;gBAC5E,sCAAsC,CACzC;YACH,WAAW,EAAE,CAAC;iBACX,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;iBAChC,QAAQ,EAAE;iBACV,QAAQ,CACP,4CAA4C;gBAC1C,0DAA0D,CAC7D;SACJ;KACF,EACD,WAAW,CAAC,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpD,4BAA4B,CAAC,IAAmC,CAAC,CAClE,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/register-living-spec-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-living-spec-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-living-spec-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAQzE;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA+E/D"}
+{"version":3,"file":"register-living-spec-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-living-spec-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAQzE;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA2E/D"}

package/dist/tools/register-living-spec-tools.js

@@ -14,10 +14,7 @@ export function registerLivingSpecTools(server) {
         annotations: { readOnlyHint: true },
         inputSchema: {
             projectId: z.string().max(500).describe('Project ID'),
-            projectPath: z
-                .string()
-                .max(4096)
-                .describe('Path to the project root directory'),
+            projectPath: z.string().max(4096).describe('Path to the project root directory'),
             specId: z
                 .string()
                 .max(500)
@@ -31,10 +28,7 @@ export function registerLivingSpecTools(server) {
         annotations: { readOnlyHint: true },
         inputSchema: {
             projectId: z.string().max(500).describe('Project ID'),
-            projectPath: z
-                .string()
-                .max(4096)
-                .describe('Path to the project root directory'),
+            projectPath: z.string().max(4096).describe('Path to the project root directory'),
             specId: z.string().max(500).describe('Spec ID to generate annotations for'),
         },
     }, safeLicensed('generate_annotations', async (args) => handleGenerateAnnotations(args)));

package/dist/tools/register-living-spec-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-living-spec-tools.js","sourceRoot":"","sources":["../../src/tools/register-living-spec-tools.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,uBAAuB;IACvB,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,yKAAyK;QAC3K,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,CAAC,oCAAoC,CAAC;YACjD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,4DAA4D,CAAC;SAC1E;KACF,EACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CACtF,CAAC;IAEF,uBAAuB;IACvB,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,wKAAwK;QAC1K,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,CAAC,oCAAoC,CAAC;YACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;SAC5E;KACF,EACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CACtF,CAAC;IAEF,uBAAuB;IACvB,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,wMAAwM;QAC1M,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;SAC5D;KACF,EACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CACrF,CAAC;IAEF,iBAAiB;IACjB,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,4QAA4Q;QAC9Q,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oFAAoF,CAAC;YACjG,YAAY,EAAE,CAAC;iBACZ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;iBAC3B,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,mDAAmD,CAAC;SACjE;KACF,EACD,YAAY,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"register-living-spec-tools.js","sourceRoot":"","sources":["../../src/tools/register-living-spec-tools.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,uBAAuB;IACvB,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,yKAAyK;QAC3K,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YAChF,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,4DAA4D,CAAC;SAC1E;KACF,EACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CACtF,CAAC;IAEF,uBAAuB;IACvB,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,wKAAwK;QAC1K,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YAChF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;SAC5E;KACF,EACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CACtF,CAAC;IAEF,uBAAuB;IACvB,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,WAAW,EACT,wMAAwM;QAC1M,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;SAC5D;KACF,EACD,YAAY,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CACrF,CAAC;IAEF,iBAAiB;IACjB,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,WAAW,EACT,4QAA4Q;QAC9Q,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,oFAAoF,CACrF;YACH,YAAY,EAAE,CAAC;iBACZ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;iBAC3B,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,mDAAmD,CAAC;SACjE;KACF,EACD,YAAY,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/dist/tools/register-observability-tools.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerObservabilityTools(server: McpServer): void;
+//# sourceMappingURL=register-observability-tools.d.ts.map

package/dist/tools/register-observability-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-observability-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-observability-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAuDlE"}

package/dist/tools/register-observability-tools.js

@@ -0,0 +1,48 @@
+// register-observability-tools.ts — Register OTel observability tools (SPEC-165)
+import { z } from 'zod';
+import { handleConfigureObservability } from './configure-observability.js';
+import { safe } from './safe-handler.js';
+export function registerObservabilityTools(server) {
+    server.registerTool('configure_observability', {
+        description: 'Configure OpenTelemetry (OTel) tracing and metrics for the Planu MCP server. ' +
+            'When enabled, every tool call becomes a span and spec lifecycle transitions are ' +
+            'exported as distributed traces. Uses OTLP/HTTP by default. ' +
+            'Requires @opentelemetry/api as a peer dependency for actual export; ' +
+            'when not installed, the server runs in no-op mode (zero overhead).',
+        inputSchema: {
+            enabled: z
+                .boolean()
+                .optional()
+                .describe('Enable or disable OTel tracing. Pass false to disable. Default: false (no-op mode).'),
+            endpoint: z
+                .url()
+                .optional()
+                .describe('OTLP exporter endpoint URL. Examples: http://localhost:4318 (OTLP/HTTP), ' +
+                'grpc://localhost:4317 (OTLP/gRPC). Required when enabled is true.'),
+            samplingRate: z
+                .number()
+                .min(0)
+                .max(1)
+                .optional()
+                .describe('Fraction of traces to sample. 1.0 = trace every call, 0.0 = trace nothing. ' +
+                'Default: 1.0. Valid range: 0..1.'),
+            resourceAttributes: z
+                .record(z.string(), z.string())
+                .optional()
+                .describe('Additional OTel resource attributes attached to every span. ' +
+                'Example: { "deployment.environment": "production", "team": "platform" }'),
+            serviceName: z
+                .string()
+                .min(1)
+                .max(200)
+                .optional()
+                .describe('Service name reported to the OTel backend. Default: planu-mcp-server.'),
+        },
+        annotations: {
+            title: 'Configure Observability',
+            readOnlyHint: false,
+            destructiveHint: false,
+        },
+    }, safe(async (args) => handleConfigureObservability(args)));
+}
+//# sourceMappingURL=register-observability-tools.js.map

package/dist/tools/register-observability-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-observability-tools.js","sourceRoot":"","sources":["../../src/tools/register-observability-tools.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAGjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,MAAM,UAAU,0BAA0B,CAAC,MAAiB;IAC1D,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,WAAW,EACT,+EAA+E;YAC/E,kFAAkF;YAClF,6DAA6D;YAC7D,sEAAsE;YACtE,oEAAoE;QACtE,WAAW,EAAE;YACX,OAAO,EAAE,CAAC;iBACP,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CACP,qFAAqF,CACtF;YACH,QAAQ,EAAE,CAAC;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,CACP,2EAA2E;gBACzE,mEAAmE,CACtE;YACH,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CACP,6EAA6E;gBAC3E,kCAAkC,CACrC;YACH,kBAAkB,EAAE,CAAC;iBAClB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;iBAC9B,QAAQ,EAAE;iBACV,QAAQ,CACP,8DAA8D;gBAC5D,yEAAyE,CAC5E;YACH,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,uEAAuE,CAAC;SACrF;QACD,WAAW,EAAE;YACX,KAAK,EAAE,yBAAyB;YAChC,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;SACvB;KACF,EACD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAmC,CAAC,CAAC,CACxF,CAAC;AACJ,CAAC"}

package/dist/tools/register-rbac-tools.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerRbacTools(server: McpServer): void;
+//# sourceMappingURL=register-rbac-tools.d.ts.map

package/dist/tools/register-rbac-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-rbac-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-rbac-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAwCzD"}

package/dist/tools/register-rbac-tools.js

@@ -0,0 +1,36 @@
+// tools/register-rbac-tools.ts — Registers RBAC tools on the MCP server (SPEC-166)
+import { ConfigureRolesInputSchema, AssignRoleInputSchema } from './schemas/rbac.js';
+import { safeLicensed } from './safe-handler.js';
+import { handleConfigureRoles } from './configure-roles-handler.js';
+import { handleAssignRole } from './assign-role-handler.js';
+export function registerRbacTools(server) {
+    // configure_roles — enable/disable RBAC for a project (Admin only when RBAC is on)
+    server.registerTool('configure_roles', {
+        description: 'Enable or disable Role-Based Access Control (RBAC) for a project. ' +
+            'When RBAC is enabled, users must have an assigned role to perform operations. ' +
+            'When disabled (default), all operations are allowed (single-user mode). ' +
+            'Use assign_role to grant users access after enabling RBAC.',
+        inputSchema: {
+            projectId: ConfigureRolesInputSchema.shape.projectId,
+            enabled: ConfigureRolesInputSchema.shape.enabled,
+        },
+        annotations: { title: 'Configure Roles (RBAC)', readOnlyHint: false },
+    }, safeLicensed('configure_roles', (args) => handleConfigureRoles(args)));
+    // assign_role — assign a user to a role (project-level or spec-level)
+    server.registerTool('assign_role', {
+        description: 'Assign a role to a user for a project or a specific spec. ' +
+            'Roles: Admin (full access), Architect (create/approve/configure), ' +
+            'Developer (read/update/implement), Reviewer (read/approve), Observer (read-only). ' +
+            'Spec-scoped assignments override project-level role for that spec. ' +
+            'Requires RBAC to be enabled via configure_roles.',
+        inputSchema: {
+            projectId: AssignRoleInputSchema.shape.projectId,
+            userId: AssignRoleInputSchema.shape.userId,
+            role: AssignRoleInputSchema.shape.role,
+            specId: AssignRoleInputSchema.shape.specId,
+            assignedBy: AssignRoleInputSchema.shape.assignedBy,
+        },
+        annotations: { title: 'Assign Role', readOnlyHint: false },
+    }, safeLicensed('assign_role', (args) => handleAssignRole(args)));
+}
+//# sourceMappingURL=register-rbac-tools.js.map

package/dist/tools/register-rbac-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-rbac-tools.js","sourceRoot":"","sources":["../../src/tools/register-rbac-tools.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAGnF,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,mFAAmF;IACnF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,WAAW,EACT,oEAAoE;YACpE,gFAAgF;YAChF,0EAA0E;YAC1E,4DAA4D;QAC9D,WAAW,EAAE;YACX,SAAS,EAAE,yBAAyB,CAAC,KAAK,CAAC,SAAS;YACpD,OAAO,EAAE,yBAAyB,CAAC,KAAK,CAAC,OAAO;SACjD;QACD,WAAW,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,KAAK,EAAE;KACtE,EACD,YAAY,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CACtE,CAAC;IAEF,sEAAsE;IACtE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EACT,4DAA4D;YAC5D,oEAAoE;YACpE,oFAAoF;YACpF,qEAAqE;YACrE,kDAAkD;QACpD,WAAW,EAAE;YACX,SAAS,EAAE,qBAAqB,CAAC,KAAK,CAAC,SAAS;YAChD,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM;YAC1C,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI;YACtC,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM;YAC1C,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,UAAU;SACnD;QACD,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE;KAC3D,EACD,YAAY,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC"}

package/dist/tools/register-spec-observability-tools.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerSpecObservabilityTools(server: McpServer): void;
+//# sourceMappingURL=register-spec-observability-tools.d.ts.map

package/dist/tools/register-spec-observability-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-spec-observability-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-spec-observability-tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA8BtE"}

package/dist/tools/register-spec-observability-tools.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { handleSpecUsageReport } from './spec-usage-report.js';
+import { safeLicensed } from './safe-handler.js';
+export function registerSpecObservabilityTools(server) {
+    server.registerTool('spec_usage_report', {
+        description: 'Generate a spec observability report showing which specs agents are actively using. ' +
+            'Identifies hot specs (frequently accessed), cold specs (approved but forgotten), ' +
+            'AC hotspots, and the tool-to-spec usage matrix. Useful for gap analysis and team focus.',
+        inputSchema: {
+            projectId: z.string().min(1).max(500).describe('Project ID (from init_project)'),
+            specId: z
+                .string()
+                .max(50)
+                .optional()
+                .describe('Optional: filter report to a single spec (e.g. "SPEC-042"). When omitted, returns full project report.'),
+            period: z
+                .enum(['day', 'week', 'month', 'all'])
+                .optional()
+                .describe('Time window for the report. Options: day | week | month | all. Defaults to week.'),
+        },
+        annotations: { title: 'Spec Usage Report', readOnlyHint: true },
+    }, safeLicensed('spec_usage_report', async (args) => handleSpecUsageReport(args)));
+}
+//# sourceMappingURL=register-spec-observability-tools.js.map

package/dist/tools/register-spec-observability-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-spec-observability-tools.js","sourceRoot":"","sources":["../../src/tools/register-spec-observability-tools.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,UAAU,8BAA8B,CAAC,MAAiB;IAC9D,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,sFAAsF;YACtF,mFAAmF;YACnF,yFAAyF;QAC3F,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAChF,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,EAAE;iBACV,QAAQ,CACP,wGAAwG,CACzG;YACH,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;iBACrC,QAAQ,EAAE;iBACV,QAAQ,CACP,kFAAkF,CACnF;SACJ;QACD,WAAW,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,IAAI,EAAE;KAChE,EACD,YAAY,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC/C,qBAAqB,CAAC,IAA4B,CAAC,CACpD,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/register-versioning-tools.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerVersioningTools(server: McpServer): void;
+//# sourceMappingURL=register-versioning-tools.d.ts.map

package/dist/tools/register-versioning-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-versioning-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-versioning-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAOzE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA4G/D"}

package/dist/tools/register-versioning-tools.js

@@ -0,0 +1,93 @@
+// tools/register-versioning-tools.ts — Registers spec versioning and branching tools (SPEC-168)
+import { z } from 'zod';
+import { safeLicensed } from './safe-handler.js';
+import { handleVersionSpec } from './version-spec.js';
+import { handleBranchSpec } from './branch-spec.js';
+import { handleMergeSpecBranch } from './merge-spec-branch.js';
+export function registerVersioningTools(server) {
+    // version_spec — Create a tagged version snapshot of a spec
+    server.registerTool('version_spec', {
+        description: 'Create a tagged version snapshot of a spec (e.g., v1.0.0, v1.1.0, v2.0.0). ' +
+            'Captures the full spec content at a point in time so you can compare or roll back. ' +
+            'Uses semantic versioning (vMAJOR.MINOR.PATCH). Tag is auto-incremented if not specified.',
+        annotations: { title: 'Version Spec' },
+        inputSchema: {
+            projectId: z.string().max(500).describe('Project ID'),
+            specId: z.string().max(500).describe('Spec ID to snapshot (e.g., "SPEC-042")'),
+            tag: z
+                .string()
+                .max(50)
+                .regex(/^v\d+\.\d+\.\d+$/)
+                .optional()
+                .describe('Semantic version tag (e.g., "v1.0.0"). Auto-incremented from latest if not provided.'),
+            message: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Human-readable description of what changed in this version'),
+            author: z.string().max(200).optional().describe('Author identifier for audit trail'),
+            specPath: z
+                .string()
+                .max(4096)
+                .optional()
+                .describe('Absolute path to the spec.md file to snapshot its content'),
+        },
+    }, safeLicensed('version_spec', async (args) => handleVersionSpec(args)));
+    // branch_spec — Create a spec branch for experimentation
+    server.registerTool('branch_spec', {
+        description: 'Create a spec branch for experimentation — try alternative approaches without affecting the main spec. ' +
+            'Useful for "what if we change the auth approach?" scenarios. ' +
+            'Branch name must be lowercase kebab-case (e.g., "auth-refactor", "alt-design-v2").',
+        annotations: { title: 'Branch Spec' },
+        inputSchema: {
+            projectId: z.string().max(500).describe('Project ID'),
+            specId: z.string().max(500).describe('Spec ID to branch (e.g., "SPEC-042")'),
+            branchName: z
+                .string()
+                .max(100)
+                .regex(/^[a-z][a-z0-9-]*$/)
+                .describe('Branch name in lowercase kebab-case (e.g., "auth-refactor", "v2-approach")'),
+            fromVersion: z
+                .string()
+                .max(50)
+                .optional()
+                .describe('Version tag to branch from (e.g., "v1.0.0"). Defaults to the latest version.'),
+            specPath: z
+                .string()
+                .max(4096)
+                .optional()
+                .describe('Absolute path to the spec.md file to use as branch starting content'),
+        },
+    }, safeLicensed('branch_spec', async (args) => handleBranchSpec(args)));
+    // merge_spec_branch — Merge a spec branch back into main
+    server.registerTool('merge_spec_branch', {
+        description: 'Merge an experimental spec branch back into the main spec. ' +
+            'Detects conflicts and creates a new version snapshot. ' +
+            'The branch is deleted after a successful merge. ' +
+            'Optionally provide resolvedContent if you have already resolved conflicts manually.',
+        annotations: { title: 'Merge Spec Branch' },
+        inputSchema: {
+            projectId: z.string().max(500).describe('Project ID'),
+            specId: z.string().max(500).describe('Spec ID to merge into (e.g., "SPEC-042")'),
+            branchName: z.string().max(100).describe('Name of the branch to merge (must exist)'),
+            resolvedContent: z
+                .string()
+                .max(100_000)
+                .optional()
+                .describe('Pre-resolved spec content to use as the merge result. ' +
+                'If not provided, the branch content is used directly (auto-merge).'),
+            newVersionTag: z
+                .string()
+                .max(50)
+                .regex(/^v\d+\.\d+\.\d+$/)
+                .optional()
+                .describe('Version tag for the merged snapshot (e.g., "v2.0.0"). Auto-incremented if not provided.'),
+            message: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Merge commit message describing what was merged'),
+        },
+    }, safeLicensed('merge_spec_branch', async (args) => handleMergeSpecBranch(args)));
+}
+//# sourceMappingURL=register-versioning-tools.js.map

package/dist/tools/register-versioning-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-versioning-tools.js","sourceRoot":"","sources":["../../src/tools/register-versioning-tools.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAGhG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,MAAM,UAAU,uBAAuB,CAAC,MAAiB;IACvD,4DAA4D;IAC5D,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,WAAW,EACT,6EAA6E;YAC7E,qFAAqF;YACrF,0FAA0F;QAC5F,WAAW,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;QACtC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAC9E,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,GAAG,CAAC,EAAE,CAAC;iBACP,KAAK,CAAC,kBAAkB,CAAC;iBACzB,QAAQ,EAAE;iBACV,QAAQ,CACP,sFAAsF,CACvF;YACH,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,4DAA4D,CAAC;YACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YACpF,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,2DAA2D,CAAC;SACzE;KACF,EACD,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CACtE,CAAC;IAEF,yDAAyD;IACzD,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,WAAW,EACT,yGAAyG;YACzG,+DAA+D;YAC/D,oFAAoF;QACtF,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;QACrC,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YAC5E,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,KAAK,CAAC,mBAAmB,CAAC;iBAC1B,QAAQ,CAAC,4EAA4E,CAAC;YACzF,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,EAAE;iBACV,QAAQ,CAAC,8EAA8E,CAAC;YAC3F,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,CAAC,IAAI,CAAC;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,qEAAqE,CAAC;SACnF;KACF,EACD,YAAY,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;IAEF,yDAAyD;IACzD,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,6DAA6D;YAC7D,wDAAwD;YACxD,kDAAkD;YAClD,qFAAqF;QACvF,WAAW,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;QAC3C,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YAChF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACpF,eAAe,EAAE,CAAC;iBACf,MAAM,EAAE;iBACR,GAAG,CAAC,OAAO,CAAC;iBACZ,QAAQ,EAAE;iBACV,QAAQ,CACP,wDAAwD;gBACtD,oEAAoE,CACvE;YACH,aAAa,EAAE,CAAC;iBACb,MAAM,EAAE;iBACR,GAAG,CAAC,EAAE,CAAC;iBACP,KAAK,CAAC,kBAAkB,CAAC;iBACzB,QAAQ,EAAE;iBACV,QAAQ,CACP,yFAAyF,CAC1F;YACH,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,GAAG,CAAC,GAAG,CAAC;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,iDAAiD,CAAC;SAC/D;KACF,EACD,YAAY,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC"}

package/dist/tools/register-well-known-tools.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerWellKnownTools(server: McpServer): void;
+//# sourceMappingURL=register-well-known-tools.d.ts.map

package/dist/tools/register-well-known-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-well-known-tools.d.ts","sourceRoot":"","sources":["../../src/tools/register-well-known-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAwC9D"}

package/dist/tools/register-well-known-tools.js

@@ -0,0 +1,36 @@
+// tools/register-well-known-tools.ts — SPEC-162: Register publish_registry and discover_registry tools
+import { safeTracked } from './safe-handler.js';
+import { PublishRegistryInputSchema, DiscoverRegistryInputSchema } from './schemas/well-known.js';
+import { handlePublishRegistry } from './publish-registry.js';
+import { handleDiscoverRegistry } from './discover-registry.js';
+export function registerWellKnownTools(server) {
+    // publish_registry — generates .well-known/planu.json
+    server.registerTool('publish_registry', {
+        description: 'Generate a .well-known/planu.json manifest from your project specs. ' +
+            'Follows RFC 8615 .well-known URI pattern (used by OpenID Connect, OAuth). ' +
+            'Other teams can discover and reference your specs using discover_registry.',
+        inputSchema: {
+            projectId: PublishRegistryInputSchema.shape.projectId,
+            outputPath: PublishRegistryInputSchema.shape.outputPath,
+            includePrivate: PublishRegistryInputSchema.shape.includePrivate,
+        },
+        annotations: {
+            title: 'Publish Registry Manifest',
+            destructiveHint: false,
+        },
+    }, safeTracked('publish_registry', async (args) => handlePublishRegistry(args)));
+    // discover_registry — reads and parses a manifest from a local file
+    server.registerTool('discover_registry', {
+        description: 'Read and validate a .well-known/planu.json manifest from a local file path. ' +
+            'Returns the project name, spec count, capabilities, and spec summaries. ' +
+            "Use this to discover specs from another team's project.",
+        inputSchema: {
+            manifestPath: DiscoverRegistryInputSchema.shape.manifestPath,
+        },
+        annotations: {
+            title: 'Discover Registry',
+            readOnlyHint: true,
+        },
+    }, safeTracked('discover_registry', async (args) => handleDiscoverRegistry(args)));
+}
+//# sourceMappingURL=register-well-known-tools.js.map

package/dist/tools/register-well-known-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-well-known-tools.js","sourceRoot":"","sources":["../../src/tools/register-well-known-tools.ts"],"names":[],"mappings":"AAAA,uGAAuG;AAGvG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,sDAAsD;IACtD,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,WAAW,EACT,sEAAsE;YACtE,4EAA4E;YAC5E,4EAA4E;QAC9E,WAAW,EAAE;YACX,SAAS,EAAE,0BAA0B,CAAC,KAAK,CAAC,SAAS;YACrD,UAAU,EAAE,0BAA0B,CAAC,KAAK,CAAC,UAAU;YACvD,cAAc,EAAE,0BAA0B,CAAC,KAAK,CAAC,cAAc;SAChE;QACD,WAAW,EAAE;YACX,KAAK,EAAE,2BAA2B;YAClC,eAAe,EAAE,KAAK;SACvB;KACF,EACD,WAAW,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAC7E,CAAC;IAEF,oEAAoE;IACpE,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,WAAW,EACT,8EAA8E;YAC9E,0EAA0E;YAC1E,yDAAyD;QAC3D,WAAW,EAAE;YACX,YAAY,EAAE,2BAA2B,CAAC,KAAK,CAAC,YAAY;SAC7D;QACD,WAAW,EAAE;YACX,KAAK,EAAE,mBAAmB;YAC1B,YAAY,EAAE,IAAI;SACnB;KACF,EACD,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC"}

package/dist/tools/repair-spec.d.ts

@@ -0,0 +1,9 @@
+import type { ToolResult, RepairSpecArgs } from '../types/index.js';
+/**
+ * Handle the repair_spec tool: auto-detect and fix common spec problems.
+ *
+ * In dry-run mode (default: false), returns detected issues without writing files.
+ * When dryRun=false, applies fixes to spec.md on disk.
+ */
+export declare function handleRepairSpec(args: RepairSpecArgs): Promise<ToolResult>;
+//# sourceMappingURL=repair-spec.d.ts.map

package/dist/tools/repair-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-spec.d.ts","sourceRoot":"","sources":["../../src/tools/repair-spec.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAa,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAO/E;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAiGhF"}