@proletariat/cli 0.3.26 → 0.3.28

package/dist/lib/agents/index.js

@@ -7,6 +7,7 @@ import { isValidAgentName, getSuggestedAgentNames, BUILTIN_THEMES, getThemePersi
 import { getWorkspaceRepositories, getActiveTheme } from '../database/index.js';
 import { styles } from '../styles.js';
 import { createDevcontainerConfig } from '../execution/devcontainer.js';
+import { getGitIdentity } from '../pr/index.js';
 /**
  * Detect the current agent name from environment or directory structure.
  * Returns null if not running in an agent context.
@@ -93,6 +94,11 @@ function getRemoteUrl(repoPath) {
 export async function createAgentWorktrees(workspacePath, agents, hqPath, options) {
     const mountMode = options?.mountMode || 'worktree'; // Default to worktree for real-time file sync
     const modeLabel = mountMode === 'worktree' ? 'worktree' : 'clone';
+    // Detect git identity once for all agents (TKT-934)
+    const gitIdentity = getGitIdentity();
+    if (!gitIdentity.name && !gitIdentity.email) {
+        console.log(chalk.yellow('Warning: Could not detect git identity for devcontainer. Commits may use default identity.'));
+    }
     if (hqPath) {
         // HQ mode - create worktrees/clones for all repos in repos/ directory
         const reposDir = path.join(hqPath, 'repos');
@@ -227,6 +233,8 @@ export async function createAgentWorktrees(workspacePath, agents, hqPath, option
                             agentDir,
                             repoWorktrees: mountMode === 'worktree' && createdRepos.length > 0 ? createdRepos : undefined,
                             mountMode,
+                            gitUserName: gitIdentity.name || undefined,
+                            gitUserEmail: gitIdentity.email || undefined,
                         });
                     }
                     console.log(chalk.green(`✅ Agent ${agent} created with ${createdRepos.length} ${modeLabel}(s)`));
@@ -249,6 +257,8 @@ export async function createAgentWorktrees(workspacePath, agents, hqPath, option
                         agentName: agent,
                         agentDir,
                         mountMode: mountMode,
+                        gitUserName: gitIdentity.name || undefined,
+                        gitUserEmail: gitIdentity.email || undefined,
                     });
                 }
                 console.log(chalk.green(`✅ Placeholder agent ${agent} created`));
@@ -367,6 +377,8 @@ export async function createAgentWorktrees(workspacePath, agents, hqPath, option
                         agentDir,
                         repoWorktrees: mountMode === 'worktree' ? [repoName] : undefined, // Only pass repos for worktree mode
                         mountMode,
+                        gitUserName: gitIdentity.name || undefined,
+                        gitUserEmail: gitIdentity.email || undefined,
                     });
                 }
                 console.log(chalk.green(`✅ Agent ${agent} created with ${modeLabel}`));

package/dist/lib/execution/devcontainer.d.ts

@@ -17,6 +17,10 @@ export interface DevcontainerOptions {
     prltChannel?: string;
     /** Mount mode: 'worktree' needs parent repo mounts + git wrapper, 'clone' is self-contained */
     mountMode?: MountMode;
+    /** Git user.name for commit attribution (detected from gh/git config on host) */
+    gitUserName?: string;
+    /** Git user.email for commit attribution (detected from gh/git config on host) */
+    gitUserEmail?: string;
 }
 export interface DevcontainerJson {
     name: string;

package/dist/lib/execution/devcontainer.js

@@ -106,6 +106,12 @@ export function generateDevcontainerJson(options, config) {
             PRLT_HOST_PATH: options.agentDir,
             // Mount mode - allows scripts to know if git wrapper is needed
             PRLT_MOUNT_MODE: mountMode,
+            // Git identity for commit attribution (detected from host's gh/git config)
+            ...(options.gitUserName ? { PRLT_GIT_USER_NAME: options.gitUserName } : {}),
+            ...(options.gitUserEmail ? { PRLT_GIT_USER_EMAIL: options.gitUserEmail } : {}),
+            // prlt channel info for version updates at container startup (TKT-954)
+            PRLT_REGISTRY: channel.registry,
+            ...(!useMount ? { PRLT_VERSION: channel.version || 'latest' } : {}),
             // /hq/.proletariat/bin contains prlt wrapper with ESM loader for native modules
             PATH: '/hq/.proletariat/bin:/home/node/.npm-global/bin:/usr/local/bin:/usr/bin:/bin',
         },
@@ -121,7 +127,7 @@ export function generateDevcontainerJson(options, config) {
  */
 export function generateDockerfile(options) {
     const timezone = options.timezone || 'America/Los_Angeles';
-    return `FROM node:20
+    return `FROM node:22
 
 # Ensure we run as root for apt-get and system setup
 USER root
@@ -452,11 +458,90 @@ else
     echo "Warning: No GitHub token found, git push will require manual auth"
 fi
 
-# Check if prlt is already installed globally (via npm from GitHub Packages)
+# Configure git user identity for commit attribution
+# Uses env vars set by host (from gh/git config), with fallback detection
+configure_git_identity() {
+    local git_name="\${PRLT_GIT_USER_NAME:-}"
+    local git_email="\${PRLT_GIT_USER_EMAIL:-}"
+
+    # Fallback: try gh api user if env vars are empty and gh is authenticated
+    if { [ -z "$git_name" ] || [ -z "$git_email" ]; } && command -v gh &> /dev/null && gh auth status &>/dev/null; then
+        if [ -z "$git_name" ]; then
+            git_name=$(gh api user -q '.name // .login' 2>/dev/null || true)
+        fi
+        if [ -z "$git_email" ]; then
+            git_email=$(gh api user -q '.email // empty' 2>/dev/null || true)
+            # Try emails API if public email is not set
+            if [ -z "$git_email" ]; then
+                git_email=$(gh api user/emails -q '[.[] | select(.primary)] | .[0].email' 2>/dev/null || true)
+            fi
+        fi
+    fi
+
+    # Fallback: try git config from mounted repos
+    if [ -z "$git_name" ] || [ -z "$git_email" ]; then
+        for repo_dir in /workspace/*/; do
+            if [ -d "$repo_dir/.git" ] || [ -f "$repo_dir/.git" ]; then
+                if [ -z "$git_name" ]; then
+                    git_name=$(/usr/bin/git -C "$repo_dir" config user.name 2>/dev/null || true)
+                fi
+                if [ -z "$git_email" ]; then
+                    git_email=$(/usr/bin/git -C "$repo_dir" config user.email 2>/dev/null || true)
+                fi
+                if [ -n "$git_name" ] && [ -n "$git_email" ]; then
+                    break
+                fi
+            fi
+        done
+    fi
+
+    # Apply git config
+    if [ -n "$git_name" ]; then
+        /usr/bin/git config --global user.name "$git_name"
+        echo "Git user.name set to: $git_name"
+    fi
+    if [ -n "$git_email" ]; then
+        /usr/bin/git config --global user.email "$git_email"
+        echo "Git user.email set to: $git_email"
+    fi
+
+    # Warning if identity could not be determined
+    if [ -z "$git_name" ] && [ -z "$git_email" ]; then
+        echo "Warning: Could not determine git identity. Commits may use default identity."
+        echo "  To fix: run 'gh auth login' or set git config user.name/user.email in your repo"
+    elif [ -z "$git_name" ]; then
+        echo "Warning: Could not determine git user.name"
+    elif [ -z "$git_email" ]; then
+        echo "Warning: Could not determine git user.email"
+    fi
+}
+
+configure_git_identity
+
+# Check if prlt is already installed globally (via npm)
+# TKT-954: Also check for updates - Docker layer caching may have installed an older version
 if command -v prlt &> /dev/null; then
     PRLT_PATH=$(which prlt)
     if [[ "$PRLT_PATH" == "/home/node/.npm-global/bin/prlt" ]]; then
-        echo "prlt installed via npm, no setup needed"
+        DESIRED_VERSION="\${PRLT_VERSION:-latest}"
+        CURRENT_VERSION=$(prlt --version 2>/dev/null | grep -oE '[0-9]+\\.[0-9]+\\.[0-9]+' || echo "unknown")
+
+        # Determine the target version to compare against
+        if [ "$DESIRED_VERSION" = "latest" ] || [ "$DESIRED_VERSION" = "dev" ] || [ "$DESIRED_VERSION" = "next" ]; then
+            # For tags, check npm registry for the actual version number
+            TARGET_VERSION=$(npm view "@proletariat/cli@\${DESIRED_VERSION}" version 2>/dev/null || echo "unknown")
+        else
+            # For pinned versions (e.g., "1.2.3"), use directly
+            TARGET_VERSION="$DESIRED_VERSION"
+        fi
+
+        if [ "$TARGET_VERSION" != "unknown" ] && [ "$CURRENT_VERSION" != "$TARGET_VERSION" ]; then
+            echo "Updating prlt from v\${CURRENT_VERSION} to v\${TARGET_VERSION} (channel: \${DESIRED_VERSION})..."
+            npm install -g "@proletariat/cli@\${DESIRED_VERSION}" 2>&1
+            echo "prlt updated successfully"
+        else
+            echo "prlt v\${CURRENT_VERSION} is up to date"
+        fi
         exit 0
     fi
 fi

package/dist/lib/mcp/helpers.d.ts

@@ -1,8 +1,23 @@
 /**
  * MCP Helper Functions
  */
+import { z } from 'zod';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import type { RequestHandlerExtra } from '@modelcontextprotocol/sdk/shared/protocol.js';
+import type { ServerRequest, ServerNotification } from '@modelcontextprotocol/sdk/types.js';
 import type { Ticket } from '../pmo/types.js';
 import type { McpToolResult } from './types.js';
+/**
+ * Register an MCP tool with strict parameter validation.
+ *
+ * Uses z.object().strict() so that unknown/extra parameters are rejected
+ * with a clear error instead of being silently stripped.
+ * See: https://github.com/anthropics/proletariat/issues/366
+ */
+export declare function strictTool<T extends Record<string, z.ZodType>>(server: McpServer, name: string, description: string, shape: T, handler: (params: {
+    [K in keyof T]: z.infer<T[K]>;
+}, extra: RequestHandlerExtra<ServerRequest, ServerNotification>) => CallToolResult | Promise<CallToolResult>): void;
 export declare function formatTicket(t: Ticket): {
     id: string;
     title: string;

package/dist/lib/mcp/helpers.js

@@ -1,6 +1,21 @@
 /**
  * MCP Helper Functions
  */
+import { z } from 'zod';
+/**
+ * Register an MCP tool with strict parameter validation.
+ *
+ * Uses z.object().strict() so that unknown/extra parameters are rejected
+ * with a clear error instead of being silently stripped.
+ * See: https://github.com/anthropics/proletariat/issues/366
+ */
+export function strictTool(server, name, description, shape, handler) {
+    const strictSchema = z.object(shape).strict();
+    server.registerTool(name, {
+        description,
+        inputSchema: strictSchema,
+    }, handler);
+}
 export function formatTicket(t) {
     return {
         id: t.id,

package/dist/lib/mcp/tools/action.js

@@ -2,9 +2,9 @@
  * MCP Action Tools
  */
 import { z } from 'zod';
-import { errorResponse } from '../helpers.js';
+import { errorResponse, strictTool } from '../helpers.js';
 export function registerActionTools(server, ctx) {
-    server.tool('action_list', 'List work actions', { include_builtin: z.boolean().optional() }, async (params) => {
+    strictTool(server, 'action_list', 'List work actions', { include_builtin: z.boolean().optional() }, async (params) => {
         try {
             const actions = await ctx.storage.listActions({
                 isBuiltin: params.include_builtin ? undefined : false,
@@ -29,7 +29,7 @@ export function registerActionTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('action_show', 'Get action details', { id: z.string().describe('Action ID') }, async (params) => {
+    strictTool(server, 'action_show', 'Get action details', { id: z.string().describe('Action ID') }, async (params) => {
         try {
             const action = await ctx.storage.getAction(params.id);
             if (!action)
@@ -45,7 +45,7 @@ export function registerActionTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('action_create', 'Create a work action', {
+    strictTool(server, 'action_create', 'Create a work action', {
         name: z.string().describe('Action name'),
         prompt: z.string().describe('Start prompt'),
         description: z.string().optional(),
@@ -71,7 +71,7 @@ export function registerActionTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('action_delete', 'Delete an action', { id: z.string().describe('Action ID') }, async (params) => {
+    strictTool(server, 'action_delete', 'Delete an action', { id: z.string().describe('Action ID') }, async (params) => {
         try {
             await ctx.storage.deleteAction(params.id);
             return {

package/dist/lib/mcp/tools/board.js

@@ -2,9 +2,9 @@
  * MCP Board Tools
  */
 import { z } from 'zod';
-import { errorResponse } from '../helpers.js';
+import { errorResponse, strictTool } from '../helpers.js';
 export function registerBoardTools(server, ctx) {
-    server.tool('board_show', 'Show the kanban board', { project: z.string().optional().describe('Project ID') }, async (params) => {
+    strictTool(server, 'board_show', 'Show the kanban board', { project: z.string().optional().describe('Project ID') }, async (params) => {
         try {
             let projectId = params.project;
             if (!projectId) {
@@ -43,7 +43,7 @@ export function registerBoardTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('board_columns', 'Get column names for a project', { project: z.string().optional().describe('Project ID') }, async (params) => {
+    strictTool(server, 'board_columns', 'Get column names for a project', { project: z.string().optional().describe('Project ID') }, async (params) => {
         try {
             let projectId = params.project;
             if (!projectId) {
@@ -64,7 +64,7 @@ export function registerBoardTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('board_create_column', 'Add a new column to the board', {
+    strictTool(server, 'board_create_column', 'Add a new column to the board', {
         project: z.string().describe('Project ID'),
         name: z.string().describe('Column name'),
         position: z.number().optional().describe('Position'),
@@ -82,7 +82,7 @@ export function registerBoardTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('board_rename_column', 'Rename a column', {
+    strictTool(server, 'board_rename_column', 'Rename a column', {
         project: z.string().describe('Project ID'),
         column_id: z.string().describe('Column ID'),
         name: z.string().describe('New name'),
@@ -100,7 +100,7 @@ export function registerBoardTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('board_move_column', 'Reorder a column', {
+    strictTool(server, 'board_move_column', 'Reorder a column', {
         project: z.string().describe('Project ID'),
         column_id: z.string().describe('Column ID'),
         position: z.number().describe('New position'),
@@ -118,7 +118,7 @@ export function registerBoardTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('board_delete_column', 'Delete a column', {
+    strictTool(server, 'board_delete_column', 'Delete a column', {
         project: z.string().describe('Project ID'),
         column_id: z.string().describe('Column ID'),
         cascade: z.boolean().optional().describe('Delete tickets in column'),

package/dist/lib/mcp/tools/category.js

@@ -2,9 +2,9 @@
  * MCP Category Tools
  */
 import { z } from 'zod';
-import { errorResponse } from '../helpers.js';
+import { errorResponse, strictTool } from '../helpers.js';
 export function registerCategoryTools(server, ctx) {
-    server.tool('category_list', 'List categories', { type: z.enum(['ticket', 'status']).optional() }, async (params) => {
+    strictTool(server, 'category_list', 'List categories', { type: z.enum(['ticket', 'status']).optional() }, async (params) => {
         try {
             const categories = await ctx.storage.listCategories({ type: params.type });
             return {
@@ -26,7 +26,7 @@ export function registerCategoryTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('category_create', 'Create a category', {
+    strictTool(server, 'category_create', 'Create a category', {
         name: z.string().describe('Category name'),
         type: z.enum(['ticket', 'status']).describe('Category type'),
         description: z.string().optional(),
@@ -50,7 +50,7 @@ export function registerCategoryTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('category_rename', 'Rename a category', {
+    strictTool(server, 'category_rename', 'Rename a category', {
         id: z.string().describe('Category ID'),
         name: z.string().describe('New name'),
     }, async (params) => {
@@ -67,7 +67,7 @@ export function registerCategoryTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('category_delete', 'Delete a category', { id: z.string().describe('Category ID') }, async (params) => {
+    strictTool(server, 'category_delete', 'Delete a category', { id: z.string().describe('Category ID') }, async (params) => {
         try {
             await ctx.storage.deleteCategory(params.id);
             return {

package/dist/lib/mcp/tools/cli-passthrough.js

@@ -5,9 +5,9 @@
  * They're wrapped for MCP but return formatted text output.
  */
 import { z } from 'zod';
-import { errorResponse, textResponse } from '../helpers.js';
+import { errorResponse, textResponse, strictTool } from '../helpers.js';
 export function registerAgentTools(server, ctx) {
-    server.tool('agent_list', 'List all agents', { type: z.enum(['staff', 'temp', 'all']).optional() }, async (params) => {
+    strictTool(server, 'agent_list', 'List all agents', { type: z.enum(['staff', 'temp', 'all']).optional() }, async (params) => {
         try {
             const typeFlag = params.type ? `--type ${params.type}` : '';
             const output = ctx.runCommand(`prlt agent list ${typeFlag} --json 2>/dev/null || prlt agent list ${typeFlag}`);
@@ -17,7 +17,7 @@ export function registerAgentTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('agent_status', 'Check agent status', {}, async () => {
+    strictTool(server, 'agent_status', 'Check agent status', {}, async () => {
         try {
             const output = ctx.runCommand('prlt agent status --json 2>/dev/null || prlt agent status');
             return textResponse(output);
@@ -26,7 +26,7 @@ export function registerAgentTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('agent_add', 'Add new agents', {
+    strictTool(server, 'agent_add', 'Add new agents', {
         names: z.array(z.string()).optional().describe('Agent names'),
         theme: z.string().optional().describe('Theme for names'),
         clone: z.boolean().optional().describe('Use git clone instead of worktree'),
@@ -42,7 +42,7 @@ export function registerAgentTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('agent_remove', 'Remove an agent', { name: z.string().describe('Agent name') }, async (params) => {
+    strictTool(server, 'agent_remove', 'Remove an agent', { name: z.string().describe('Agent name') }, async (params) => {
         try {
             const output = ctx.runCommand(`prlt agent remove ${params.name} --json`);
             return textResponse(output);
@@ -53,7 +53,7 @@ export function registerAgentTools(server, ctx) {
     });
 }
 export function registerDockerTools(server, ctx) {
-    server.tool('docker_status', 'Check Docker daemon status', {}, async () => {
+    strictTool(server, 'docker_status', 'Check Docker daemon status', {}, async () => {
         try {
             const output = ctx.runCommand('prlt docker status');
             return textResponse(output);
@@ -62,7 +62,7 @@ export function registerDockerTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('docker_list', 'List Docker containers', {}, async () => {
+    strictTool(server, 'docker_list', 'List Docker containers', {}, async () => {
         try {
             const output = ctx.runCommand('prlt docker list');
             return textResponse(output);
@@ -71,7 +71,7 @@ export function registerDockerTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('docker_start', 'Start Docker containers', { agent: z.string().optional().describe('Agent name') }, async (params) => {
+    strictTool(server, 'docker_start', 'Start Docker containers', { agent: z.string().optional().describe('Agent name') }, async (params) => {
         try {
             const agentArg = params.agent || '';
             const output = ctx.runCommand(`prlt docker start ${agentArg}`);
@@ -81,7 +81,7 @@ export function registerDockerTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('docker_stop', 'Stop Docker containers', { agent: z.string().optional().describe('Agent name') }, async (params) => {
+    strictTool(server, 'docker_stop', 'Stop Docker containers', { agent: z.string().optional().describe('Agent name') }, async (params) => {
         try {
             const agentArg = params.agent || '';
             const output = ctx.runCommand(`prlt docker stop ${agentArg}`);
@@ -91,7 +91,7 @@ export function registerDockerTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('docker_logs', 'Get container logs', {
+    strictTool(server, 'docker_logs', 'Get container logs', {
         agent: z.string().describe('Agent name'),
         lines: z.number().optional().describe('Number of lines'),
     }, async (params) => {
@@ -106,7 +106,7 @@ export function registerDockerTools(server, ctx) {
     });
 }
 export function registerRepoTools(server, ctx) {
-    server.tool('repo_list', 'List repositories in workspace', {}, async () => {
+    strictTool(server, 'repo_list', 'List repositories in workspace', {}, async () => {
         try {
             const output = ctx.runCommand('prlt repo list');
             return textResponse(output);
@@ -115,7 +115,7 @@ export function registerRepoTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('repo_add', 'Add a repository', {
+    strictTool(server, 'repo_add', 'Add a repository', {
         path: z.string().describe('Repository path or URL'),
         name: z.string().optional().describe('Name for the repo'),
     }, async (params) => {
@@ -128,7 +128,7 @@ export function registerRepoTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('repo_remove', 'Remove a repository', { name: z.string().describe('Repository name') }, async (params) => {
+    strictTool(server, 'repo_remove', 'Remove a repository', { name: z.string().describe('Repository name') }, async (params) => {
         try {
             const output = ctx.runCommand(`prlt repo remove ${params.name}`);
             return textResponse(output);
@@ -139,7 +139,7 @@ export function registerRepoTools(server, ctx) {
     });
 }
 export function registerBranchTools(server, ctx) {
-    server.tool('branch_list', 'List branches', {}, async () => {
+    strictTool(server, 'branch_list', 'List branches', {}, async () => {
         try {
             const output = ctx.runCommand('prlt branch list');
             return textResponse(output);
@@ -148,7 +148,7 @@ export function registerBranchTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('branch_create', 'Create a branch for a ticket', {
+    strictTool(server, 'branch_create', 'Create a branch for a ticket', {
         ticket_id: z.string().describe('Ticket ID'),
         name: z.string().optional().describe('Branch name override'),
     }, async (params) => {
@@ -161,7 +161,7 @@ export function registerBranchTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('branch_where', 'Show which ticket/branch you are on', {}, async () => {
+    strictTool(server, 'branch_where', 'Show which ticket/branch you are on', {}, async () => {
         try {
             const output = ctx.runCommand('prlt branch where');
             return textResponse(output);
@@ -172,7 +172,7 @@ export function registerBranchTools(server, ctx) {
     });
 }
 export function registerGitHubTools(server, ctx) {
-    server.tool('gh_status', 'Check GitHub CLI status', {}, async () => {
+    strictTool(server, 'gh_status', 'Check GitHub CLI status', {}, async () => {
         try {
             const output = ctx.runCommand('prlt gh status');
             return textResponse(output);
@@ -181,7 +181,7 @@ export function registerGitHubTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('gh_login', 'Login to GitHub', {}, async () => {
+    strictTool(server, 'gh_login', 'Login to GitHub', {}, async () => {
         try {
             const output = ctx.runCommand('prlt gh login');
             return textResponse(output);
@@ -190,7 +190,7 @@ export function registerGitHubTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('pr_create', 'Create a pull request', {
+    strictTool(server, 'pr_create', 'Create a pull request', {
         ticket_id: z.string().optional().describe('Ticket ID'),
         title: z.string().optional().describe('PR title'),
         body: z.string().optional().describe('PR body'),
@@ -208,7 +208,7 @@ export function registerGitHubTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('pr_list', 'List pull requests', {}, async () => {
+    strictTool(server, 'pr_list', 'List pull requests', {}, async () => {
         try {
             const output = ctx.runCommand('prlt pr list');
             return textResponse(output);
@@ -217,7 +217,7 @@ export function registerGitHubTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('pr_status', 'Check PR status', {}, async () => {
+    strictTool(server, 'pr_status', 'Check PR status', {}, async () => {
         try {
             const output = ctx.runCommand('prlt pr status');
             return textResponse(output);
@@ -228,7 +228,7 @@ export function registerGitHubTools(server, ctx) {
     });
 }
 export function registerInitTools(server, ctx) {
-    server.tool('init', 'Initialize an HQ workspace', {
+    strictTool(server, 'init', 'Initialize an HQ workspace', {
         name: z.string().describe('HQ name'),
         path: z.string().optional().describe('HQ path'),
         repos: z.array(z.string()).optional().describe('Repository paths'),
@@ -247,7 +247,7 @@ export function registerInitTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('pmo_init', 'Initialize PMO in existing workspace', {
+    strictTool(server, 'pmo_init', 'Initialize PMO in existing workspace', {
         template: z.string().optional().describe('Board template'),
         name: z.string().optional().describe('Board name'),
     }, async (params) => {
@@ -263,7 +263,7 @@ export function registerInitTools(server, ctx) {
     });
 }
 export function registerUtilityTools(server, ctx) {
-    server.tool('whoami', 'Show current context (agent, workspace)', {}, async () => {
+    strictTool(server, 'whoami', 'Show current context (agent, workspace)', {}, async () => {
         try {
             const output = ctx.runCommand('prlt whoami');
             return textResponse(output);
@@ -272,7 +272,7 @@ export function registerUtilityTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('commit', 'Create a commit with ticket reference', {
+    strictTool(server, 'commit', 'Create a commit with ticket reference', {
         message: z.string().describe('Commit message'),
         ticket_id: z.string().optional().describe('Ticket ID'),
     }, async (params) => {
@@ -285,7 +285,7 @@ export function registerUtilityTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('execution_list', 'List work executions', {}, async () => {
+    strictTool(server, 'execution_list', 'List work executions', {}, async () => {
         try {
             const output = ctx.runCommand('prlt execution list');
             return textResponse(output);
@@ -294,7 +294,7 @@ export function registerUtilityTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('execution_view', 'View execution details', { id: z.string().describe('Execution ID') }, async (params) => {
+    strictTool(server, 'execution_view', 'View execution details', { id: z.string().describe('Execution ID') }, async (params) => {
         try {
             const output = ctx.runCommand(`prlt execution view ${params.id}`);
             return textResponse(output);
@@ -303,7 +303,7 @@ export function registerUtilityTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('execution_logs', 'Get execution logs', { id: z.string().describe('Execution ID') }, async (params) => {
+    strictTool(server, 'execution_logs', 'Get execution logs', { id: z.string().describe('Execution ID') }, async (params) => {
         try {
             const output = ctx.runCommand(`prlt execution logs ${params.id}`);
             return textResponse(output);
@@ -312,7 +312,7 @@ export function registerUtilityTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('session_list', 'List tmux sessions', {}, async () => {
+    strictTool(server, 'session_list', 'List tmux sessions', {}, async () => {
         try {
             const output = ctx.runCommand('prlt session list');
             return textResponse(output);
@@ -321,7 +321,7 @@ export function registerUtilityTools(server, ctx) {
             return errorResponse(error);
         }
     });
-    server.tool('config_show', 'Show configuration', {}, async () => {
+    strictTool(server, 'config_show', 'Show configuration', {}, async () => {
         try {
             const output = ctx.runCommand('prlt config');
             return textResponse(output);