@promptwheel/mcp 0.6.0

package/dist/run-state-bridge.js

@@ -0,0 +1,101 @@
+/**
+ * Thin bridge for recording quality signals from the MCP/plugin path.
+ *
+ * Reads and writes `.promptwheel/run-state.json` directly using the same
+ * format as CLI's `packages/cli/src/lib/run-state.ts`. Uses tmp+rename
+ * atomic write pattern. No mutex needed — MCP and CLI don't run
+ * simultaneously on the same project.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+// ---------------------------------------------------------------------------
+// File I/O
+// ---------------------------------------------------------------------------
+const RUN_STATE_FILE = 'run-state.json';
+function statePath(projectRoot) {
+    return path.join(projectRoot, '.promptwheel', RUN_STATE_FILE);
+}
+function readRunState(projectRoot) {
+    const fp = statePath(projectRoot);
+    if (!fs.existsSync(fp)) {
+        return {
+            totalCycles: 0,
+            lastDocsAuditCycle: 0,
+            lastRunAt: 0,
+            deferredProposals: [],
+            formulaStats: {},
+            recentCycles: [],
+            recentDiffs: [],
+        };
+    }
+    try {
+        const raw = fs.readFileSync(fp, 'utf-8');
+        const parsed = JSON.parse(raw);
+        return {
+            totalCycles: parsed.totalCycles ?? 0,
+            lastDocsAuditCycle: parsed.lastDocsAuditCycle ?? 0,
+            lastRunAt: parsed.lastRunAt ?? 0,
+            deferredProposals: Array.isArray(parsed.deferredProposals) ? parsed.deferredProposals : [],
+            formulaStats: parsed.formulaStats ?? {},
+            recentCycles: parsed.recentCycles,
+            recentDiffs: parsed.recentDiffs,
+            qualitySignals: parsed.qualitySignals ?? undefined,
+        };
+    }
+    catch (err) {
+        console.warn(`[promptwheel] failed to parse run-state.json: ${err instanceof Error ? err.message : String(err)}`);
+        return {
+            totalCycles: 0,
+            lastDocsAuditCycle: 0,
+            lastRunAt: 0,
+            deferredProposals: [],
+            formulaStats: {},
+            recentCycles: [],
+            recentDiffs: [],
+        };
+    }
+}
+function writeRunState(projectRoot, state) {
+    const fp = statePath(projectRoot);
+    const dir = path.dirname(fp);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    const tmp = fp + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify(state, null, 2) + '\n');
+    fs.renameSync(tmp, fp);
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Record an execution quality signal. Same format as CLI's recordQualitySignal.
+ */
+export function recordQualitySignal(projectRoot, signal) {
+    const state = readRunState(projectRoot);
+    const qs = state.qualitySignals ??= {
+        totalTickets: 0,
+        firstPassSuccess: 0,
+        retriedSuccess: 0,
+        qaPassed: 0,
+        qaFailed: 0,
+    };
+    switch (signal) {
+        case 'first_pass':
+            qs.totalTickets++;
+            qs.firstPassSuccess++;
+            break;
+        case 'retried':
+            qs.totalTickets++;
+            qs.retriedSuccess++;
+            break;
+        case 'qa_pass':
+            qs.qaPassed++;
+            break;
+        case 'qa_fail':
+            qs.qaFailed++;
+            break;
+    }
+    writeRunState(projectRoot, state);
+}
+//# sourceMappingURL=run-state-bridge.js.map

package/dist/run-state-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-state-bridge.js","sourceRoot":"","sources":["../src/run-state-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAyBlC,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,SAAS,SAAS,CAAC,WAAmB;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,WAAW,EAAE,CAAC;YACd,kBAAkB,EAAE,CAAC;YACrB,SAAS,EAAE,CAAC;YACZ,iBAAiB,EAAE,EAAE;YACrB,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;YACpC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,CAAC;YAClD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC;YAChC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE;YAC1F,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;SACnD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClH,OAAO;YACL,WAAW,EAAE,CAAC;YACd,kBAAkB,EAAE,CAAC;YACrB,SAAS,EAAE,CAAC;YACZ,iBAAiB,EAAE,EAAE;YACrB,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,KAAe;IACzD,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC;IACxB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7D,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,MAAwD;IAExD,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,KAAK,CAAC,cAAc,KAAK;QAClC,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,YAAY;YAAE,EAAE,CAAC,YAAY,EAAE,CAAC;YAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAAC,MAAM;QACnE,KAAK,SAAS;YAAE,EAAE,CAAC,YAAY,EAAE,CAAC;YAAC,EAAE,CAAC,cAAc,EAAE,CAAC;YAAC,MAAM;QAC9D,KAAK,SAAS;YAAE,EAAE,CAAC,QAAQ,EAAE,CAAC;YAAC,MAAM;QACrC,KAAK,SAAS;YAAE,EAAE,CAAC,QAAQ,EAAE,CAAC;YAAC,MAAM;IACvC,CAAC;IACD,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/scope-policy.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Scope Policy — derives and enforces file-level constraints for tickets.
+ *
+ * Used by the plan validator and PreToolUse hook to ensure
+ * agents only touch files they're allowed to.
+ *
+ * Shared constants (ALWAYS_DENIED, CREDENTIAL_PATTERNS, FILE_DENY_PATTERNS)
+ * and pure algorithms live in @promptwheel/core/scope/shared.
+ * This file adds MCP-specific policy derivation and minimatch-based validation.
+ */
+import { type Learning, type AdaptiveRiskAssessment } from '@promptwheel/core/learnings/shared';
+export { detectCredentialInContent as containsCredentials } from '@promptwheel/core/scope/shared';
+export interface ScopePolicy {
+    allowed_paths: string[];
+    denied_paths: string[];
+    denied_patterns: RegExp[];
+    max_files: number;
+    max_lines: number;
+    plan_required: boolean;
+    /** When set, file writes are only allowed inside this worktree directory */
+    worktree_root?: string;
+    /** Adaptive risk assessment when learnings are provided */
+    risk_assessment?: AdaptiveRiskAssessment;
+}
+export interface DeriveScopeInput {
+    allowedPaths: string[];
+    category: string;
+    maxLinesPerTicket: number;
+    /** When set, restricts file writes to this worktree directory */
+    worktreeRoot?: string;
+    /** Cross-run learnings for adaptive trust (optional, backward compatible) */
+    learnings?: Learning[];
+}
+export declare function deriveScopePolicy(input: DeriveScopeInput): ScopePolicy;
+export interface PlanFile {
+    path: string;
+    action: string;
+    reason: string;
+}
+export interface PlanValidationResult {
+    valid: boolean;
+    reason: string | null;
+    /** All violations found (empty when valid). Joined into `reason` for backward compat. */
+    violations: string[];
+}
+export declare function validatePlanScope(files: PlanFile[], estimatedLines: number, riskLevel: string, policy: ScopePolicy): PlanValidationResult;
+/**
+ * Check if a file path is inside a worktree directory.
+ * Normalizes both paths before comparison.
+ */
+export declare function isFileInWorktree(filePath: string, worktreeRoot: string): boolean;
+export declare function isFileAllowed(filePath: string, policy: ScopePolicy): boolean;
+export interface CategoryToolPolicy {
+    auto_approve_patterns: string[];
+    constraint_note?: string;
+}
+/**
+ * Per-category tool restrictions. Categories not listed here use defaults.
+ * - docs: can only edit markdown/text files
+ * - test: can only edit test files
+ * - security: full edit access but no npm install / arbitrary bash
+ *
+ * @deprecated Use ToolRegistry from @promptwheel/mcp/tool-registry instead.
+ * Kept for backward compatibility during migration.
+ */
+export declare const CATEGORY_TOOL_POLICIES: Record<string, CategoryToolPolicy>;
+/**
+ * Get the tool policy for a given category.
+ * Returns null if the category has no specific policy (use defaults).
+ *
+ * @deprecated Use ToolRegistry.getConstraintNote() instead.
+ */
+export declare function getCategoryToolPolicy(category: string | null): CategoryToolPolicy | null;
+/**
+ * Check if a file path is allowed by the category tool policy.
+ * Returns true if no category policy exists (= everything allowed).
+ * For docs: only *.md, *.mdx, *.txt, *.rst files.
+ * For test: only *.test.*, *.spec.*, __tests__/** files.
+ * Security has no file-type restrictions (only command restrictions).
+ */
+export declare function isCategoryFileAllowed(filePath: string, category: string | null): boolean;
+export declare function serializeScopePolicy(policy: ScopePolicy): Record<string, unknown>;
+//# sourceMappingURL=scope-policy.d.ts.map

package/dist/scope-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-policy.d.ts","sourceRoot":"","sources":["../src/scope-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,sBAAsB,EAC5B,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,yBAAyB,IAAI,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAiBlG,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAMD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW,CAwCtE;AAMD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yFAAyF;IACzF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,QAAQ,EAAE,EACjB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,GAClB,oBAAoB,CAyDtB;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAIhF;AAMD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CA8B5E;AAQD,MAAM,WAAW,kBAAkB;IACjC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CA0CrE,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,kBAAkB,GAAG,IAAI,CAGxF;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CA+BxF;AAMD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBjF"}

package/dist/scope-policy.js

@@ -0,0 +1,278 @@
+/**
+ * Scope Policy — derives and enforces file-level constraints for tickets.
+ *
+ * Used by the plan validator and PreToolUse hook to ensure
+ * agents only touch files they're allowed to.
+ *
+ * Shared constants (ALWAYS_DENIED, CREDENTIAL_PATTERNS, FILE_DENY_PATTERNS)
+ * and pure algorithms live in @promptwheel/core/scope/shared.
+ * This file adds MCP-specific policy derivation and minimatch-based validation.
+ */
+import * as nodePath from 'node:path';
+import { minimatch } from 'minimatch';
+import { ALWAYS_DENIED, FILE_DENY_PATTERNS, } from '@promptwheel/core/scope/shared';
+import { assessAdaptiveRisk, } from '@promptwheel/core/learnings/shared';
+// Re-export for existing consumers
+export { detectCredentialInContent as containsCredentials } from '@promptwheel/core/scope/shared';
+/**
+ * Normalize an allowed_path for minimatch:
+ * - Directory-style paths ending with `/` become `dir/**` (match anything inside)
+ * - Paths without globs or extensions that look like directories get `/**` appended
+ * - Everything else is left as-is
+ */
+function normalizeAllowedGlob(glob) {
+    if (glob.endsWith('/'))
+        return glob + '**';
+    return glob;
+}
+export function deriveScopePolicy(input) {
+    let maxFiles = 10;
+    let maxLines = input.category === 'test' ? 1000 : input.maxLinesPerTicket;
+    let planRequired = input.category !== 'docs';
+    let riskAssessment;
+    // Adaptive trust: adjust constraints based on failure history in learnings
+    if (input.learnings && input.learnings.length > 0) {
+        riskAssessment = assessAdaptiveRisk(input.learnings, input.allowedPaths);
+        switch (riskAssessment.level) {
+            case 'low':
+                maxFiles = 15;
+                maxLines = Math.round(maxLines * 1.5);
+                break;
+            case 'normal':
+                // No change — defaults
+                break;
+            case 'elevated':
+                maxFiles = 7;
+                planRequired = true;
+                break;
+            case 'high':
+                maxFiles = 5;
+                maxLines = Math.round(maxLines * 0.5);
+                planRequired = true;
+                break;
+        }
+    }
+    return {
+        allowed_paths: input.allowedPaths,
+        denied_paths: ALWAYS_DENIED,
+        denied_patterns: FILE_DENY_PATTERNS,
+        max_files: maxFiles,
+        max_lines: maxLines,
+        plan_required: planRequired,
+        worktree_root: input.worktreeRoot,
+        risk_assessment: riskAssessment,
+    };
+}
+export function validatePlanScope(files, estimatedLines, riskLevel, policy) {
+    const violations = [];
+    // 1. Must have files
+    if (!files || files.length === 0) {
+        return { valid: false, reason: 'Plan must include at least one file to touch', violations: ['Plan must include at least one file to touch'] };
+    }
+    // 2. Check estimated lines
+    if (estimatedLines > policy.max_lines) {
+        violations.push(`Estimated lines (${estimatedLines}) exceeds max (${policy.max_lines})`);
+    }
+    // 3. Check max files
+    if (files.length > policy.max_files) {
+        violations.push(`Plan touches ${files.length} files, max allowed is ${policy.max_files}`);
+    }
+    // 4. Valid risk level
+    if (!riskLevel || !['low', 'medium', 'high'].includes(riskLevel)) {
+        violations.push('Plan must specify risk_level: low, medium, or high');
+    }
+    // 5. Check each file against denied paths
+    for (const f of files) {
+        for (const deniedGlob of policy.denied_paths) {
+            if (minimatch(f.path, deniedGlob, { dot: true })) {
+                violations.push(`Plan touches denied path: ${f.path} (matches ${deniedGlob})`);
+            }
+        }
+    }
+    // 6. Check each file against denied patterns
+    for (const f of files) {
+        for (const pattern of policy.denied_patterns) {
+            if (pattern.test(f.path)) {
+                violations.push(`Plan touches sensitive file: ${f.path}`);
+            }
+        }
+    }
+    // 7. Check each file is within allowed_paths (if any specified)
+    if (policy.allowed_paths.length > 0) {
+        for (const f of files) {
+            const isAllowed = policy.allowed_paths.some(glob => minimatch(f.path, normalizeAllowedGlob(glob), { dot: true }));
+            if (!isAllowed) {
+                violations.push(`File ${f.path} is outside allowed paths: ${policy.allowed_paths.join(', ')}`);
+            }
+        }
+    }
+    if (violations.length > 0) {
+        return { valid: false, reason: violations.join('; '), violations };
+    }
+    return { valid: true, reason: null, violations: [] };
+}
+// ---------------------------------------------------------------------------
+// Worktree isolation check
+// ---------------------------------------------------------------------------
+/**
+ * Check if a file path is inside a worktree directory.
+ * Normalizes both paths before comparison.
+ */
+export function isFileInWorktree(filePath, worktreeRoot) {
+    const normalizedFile = nodePath.normalize(filePath).replace(/\\/g, '/');
+    const normalizedRoot = nodePath.normalize(worktreeRoot).replace(/\\/g, '/').replace(/\/$/, '');
+    return normalizedFile === normalizedRoot || normalizedFile.startsWith(normalizedRoot + '/');
+}
+// ---------------------------------------------------------------------------
+// Check a single file path (used by PreToolUse hook)
+// ---------------------------------------------------------------------------
+export function isFileAllowed(filePath, policy) {
+    // Worktree enforcement: if set, reject files outside the worktree
+    if (policy.worktree_root) {
+        if (!isFileInWorktree(filePath, policy.worktree_root)) {
+            return false;
+        }
+    }
+    // Check denied paths
+    for (const deniedGlob of policy.denied_paths) {
+        if (minimatch(filePath, deniedGlob, { dot: true })) {
+            return false;
+        }
+    }
+    // Check denied patterns
+    for (const pattern of policy.denied_patterns) {
+        if (pattern.test(filePath)) {
+            return false;
+        }
+    }
+    // Check allowed paths (empty = everything allowed)
+    if (policy.allowed_paths.length > 0) {
+        return policy.allowed_paths.some(glob => minimatch(filePath, normalizeAllowedGlob(glob), { dot: true }));
+    }
+    return true;
+}
+/**
+ * Per-category tool restrictions. Categories not listed here use defaults.
+ * - docs: can only edit markdown/text files
+ * - test: can only edit test files
+ * - security: full edit access but no npm install / arbitrary bash
+ *
+ * @deprecated Use ToolRegistry from @promptwheel/mcp/tool-registry instead.
+ * Kept for backward compatibility during migration.
+ */
+export const CATEGORY_TOOL_POLICIES = {
+    docs: {
+        auto_approve_patterns: [
+            'Read(*)', 'Glob(*)', 'Grep(*)',
+            'Edit(*.md)', 'Edit(*.mdx)', 'Edit(*.txt)', 'Edit(*.rst)',
+            'Write(*.md)', 'Write(*.mdx)', 'Write(*.txt)', 'Write(*.rst)',
+            'Bash(git diff*)', 'Bash(git status*)',
+        ],
+        constraint_note: 'This is a **docs** ticket. You may ONLY edit markdown and text files (*.md, *.mdx, *.txt, *.rst). Do NOT modify source code, config files, or any other file types.',
+    },
+    test: {
+        auto_approve_patterns: [
+            'Read(*)', 'Glob(*)', 'Grep(*)',
+            'Edit(*.test.*)', 'Edit(*.spec.*)', 'Edit(*__tests__*)',
+            'Edit(test_*)', 'Edit(*_test.go)', 'Edit(*_test.py)', 'Edit(*Test.java)',
+            'Write(*.test.*)', 'Write(*.spec.*)', 'Write(*__tests__*)',
+            'Write(test_*)', 'Write(*_test.go)', 'Write(*_test.py)', 'Write(*Test.java)',
+            'Bash(npm test*)', 'Bash(npx vitest*)', 'Bash(npx jest*)', 'Bash(npx tsc*)',
+            'Bash(pytest*)', 'Bash(cargo test*)', 'Bash(go test*)', 'Bash(mvn test*)',
+            'Bash(./gradlew test*)', 'Bash(bundle exec rspec*)', 'Bash(mix test*)',
+            'Bash(dotnet test*)', 'Bash(swift test*)', 'Bash(make test*)',
+            'Bash(dart test*)', 'Bash(flutter test*)', 'Bash(sbt test*)',
+            'Bash(stack test*)', 'Bash(cabal test*)', 'Bash(zig build test*)',
+            'Bash(ctest*)', 'Bash(phpunit*)',
+            'Bash(git diff*)', 'Bash(git status*)',
+        ],
+        constraint_note: 'This is a **test** ticket. You may ONLY edit test files (*.test.*, *.spec.*, __tests__/**, test_*.py, *_test.go, *Test.java, etc.). Do NOT modify production source code.',
+    },
+    security: {
+        auto_approve_patterns: [
+            'Read(*)', 'Glob(*)', 'Grep(*)', 'Edit(*)', 'Write(*)',
+            'Bash(npm test*)', 'Bash(npx vitest*)', 'Bash(npx tsc*)',
+            'Bash(pytest*)', 'Bash(cargo test*)', 'Bash(go test*)', 'Bash(mvn test*)',
+            'Bash(./gradlew test*)', 'Bash(make test*)',
+            'Bash(dart test*)', 'Bash(flutter test*)', 'Bash(sbt test*)',
+            'Bash(stack test*)', 'Bash(cabal test*)', 'Bash(zig build test*)',
+            'Bash(ctest*)', 'Bash(dotnet test*)', 'Bash(swift test*)',
+            'Bash(mix test*)', 'Bash(bundle exec rspec*)', 'Bash(phpunit*)',
+            'Bash(git diff*)', 'Bash(git status*)',
+        ],
+        constraint_note: 'This is a **security** ticket. You have full read/edit access but MUST NOT install new dependencies (`npm install`, `pip install`, `cargo add`, `go get`, `bundle add`, `composer require`, etc.). Do NOT run arbitrary shell commands beyond testing and type-checking.',
+    },
+};
+/**
+ * Get the tool policy for a given category.
+ * Returns null if the category has no specific policy (use defaults).
+ *
+ * @deprecated Use ToolRegistry.getConstraintNote() instead.
+ */
+export function getCategoryToolPolicy(category) {
+    if (!category)
+        return null;
+    return CATEGORY_TOOL_POLICIES[category] ?? null;
+}
+// ---------------------------------------------------------------------------
+// Enforce category file-type restrictions
+// ---------------------------------------------------------------------------
+/**
+ * Check if a file path is allowed by the category tool policy.
+ * Returns true if no category policy exists (= everything allowed).
+ * For docs: only *.md, *.mdx, *.txt, *.rst files.
+ * For test: only *.test.*, *.spec.*, __tests__/** files.
+ * Security has no file-type restrictions (only command restrictions).
+ */
+export function isCategoryFileAllowed(filePath, category) {
+    if (!category)
+        return true;
+    const CATEGORY_FILE_PATTERNS = {
+        docs: ['*.md', '*.mdx', '*.txt', '*.rst', '**/*.md', '**/*.mdx', '**/*.txt', '**/*.rst'],
+        test: [
+            // JS/TS
+            '*.test.*', '*.spec.*', '**/*.test.*', '**/*.spec.*', '**/__tests__/**', '__tests__/**',
+            // Python
+            'test_*', '**/test_*', '*_test.py', '**/*_test.py', '**/tests/**', 'tests/**', '**/conftest.py',
+            // Go
+            '*_test.go', '**/*_test.go',
+            // Rust (tests/ dir)
+            'tests/**', '**/tests/**',
+            // Java/Kotlin
+            '*Test.java', '**/*Test.java', '*Test.kt', '**/*Test.kt', '**/src/test/**',
+            // Ruby
+            '*_spec.rb', '**/*_spec.rb', '**/spec/**',
+            // Elixir
+            '*_test.exs', '**/*_test.exs',
+            // Swift
+            '*Tests.swift', '**/*Tests.swift',
+            // PHP
+            '*Test.php', '**/*Test.php',
+        ],
+    };
+    const patterns = CATEGORY_FILE_PATTERNS[category];
+    if (!patterns)
+        return true; // no restrictions for this category (e.g. security, fix, refactor)
+    return patterns.some(glob => minimatch(filePath, glob, { dot: true }));
+}
+// ---------------------------------------------------------------------------
+// Serialize policy for MCP tool response (RegExp → string)
+// ---------------------------------------------------------------------------
+export function serializeScopePolicy(policy) {
+    const result = {
+        allowed_paths: policy.allowed_paths,
+        denied_paths: policy.denied_paths,
+        denied_patterns: policy.denied_patterns.map(r => r.source),
+        max_files: policy.max_files,
+        max_lines: policy.max_lines,
+        plan_required: policy.plan_required,
+    };
+    if (policy.worktree_root) {
+        result.worktree_root = policy.worktree_root;
+    }
+    if (policy.risk_assessment) {
+        result.risk_assessment = policy.risk_assessment;
+    }
+    return result;
+}
+//# sourceMappingURL=scope-policy.js.map

package/dist/scope-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-policy.js","sourceRoot":"","sources":["../src/scope-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,QAAQ,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,aAAa,EACb,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,GAGnB,MAAM,oCAAoC,CAAC;AAE5C,mCAAmC;AACnC,OAAO,EAAE,yBAAyB,IAAI,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAElG;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAiCD,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC1E,IAAI,YAAY,GAAG,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;IAC7C,IAAI,cAAkD,CAAC;IAEvD,2EAA2E;IAC3E,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAEzE,QAAQ,cAAc,CAAC,KAAK,EAAE,CAAC;YAC7B,KAAK,KAAK;gBACR,QAAQ,GAAG,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;gBACtC,MAAM;YACR,KAAK,QAAQ;gBACX,uBAAuB;gBACvB,MAAM;YACR,KAAK,UAAU;gBACb,QAAQ,GAAG,CAAC,CAAC;gBACb,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,KAAK,MAAM;gBACT,QAAQ,GAAG,CAAC,CAAC;gBACb,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;gBACtC,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,YAAY,EAAE,aAAa;QAC3B,eAAe,EAAE,kBAAkB;QACnC,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,eAAe,EAAE,cAAc;KAChC,CAAC;AACJ,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAC/B,KAAiB,EACjB,cAAsB,EACtB,SAAiB,EACjB,MAAmB;IAEnB,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,qBAAqB;IACrB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,UAAU,EAAE,CAAC,8CAA8C,CAAC,EAAE,CAAC;IAChJ,CAAC;IAED,2BAA2B;IAC3B,IAAI,cAAc,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,oBAAoB,cAAc,kBAAkB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,MAAM,0BAA0B,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,UAAU,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,IAAI,aAAa,UAAU,GAAG,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjD,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAC7D,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,8BAA8B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,YAAoB;IACrE,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/F,OAAO,cAAc,KAAK,cAAc,IAAI,cAAc,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;AAC9F,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAmB;IACjE,kEAAkE;IAClE,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAaD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAuC;IACxE,IAAI,EAAE;QACJ,qBAAqB,EAAE;YACrB,SAAS,EAAE,SAAS,EAAE,SAAS;YAC/B,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa;YACzD,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc;YAC7D,iBAAiB,EAAE,mBAAmB;SACvC;QACD,eAAe,EAAE,qKAAqK;KACvL;IACD,IAAI,EAAE;QACJ,qBAAqB,EAAE;YACrB,SAAS,EAAE,SAAS,EAAE,SAAS;YAC/B,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB;YACvD,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB;YACxE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB;YAC1D,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB;YAC5E,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB;YAC3E,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB;YACzE,uBAAuB,EAAE,0BAA0B,EAAE,iBAAiB;YACtE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB;YAC7D,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB;YAC5D,mBAAmB,EAAE,mBAAmB,EAAE,uBAAuB;YACjE,cAAc,EAAE,gBAAgB;YAChC,iBAAiB,EAAE,mBAAmB;SACvC;QACD,eAAe,EAAE,2KAA2K;KAC7L;IACD,QAAQ,EAAE;QACR,qBAAqB,EAAE;YACrB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU;YACtD,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB;YACxD,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB;YACzE,uBAAuB,EAAE,kBAAkB;YAC3C,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB;YAC5D,mBAAmB,EAAE,mBAAmB,EAAE,uBAAuB;YACjE,cAAc,EAAE,oBAAoB,EAAE,mBAAmB;YACzD,iBAAiB,EAAE,0BAA0B,EAAE,gBAAgB;YAC/D,iBAAiB,EAAE,mBAAmB;SACvC;QACD,eAAe,EAAE,0QAA0Q;KAC5R;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAuB;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,sBAAsB,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAuB;IAC7E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,sBAAsB,GAA6B;QACvD,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;QACxF,IAAI,EAAE;YACJ,QAAQ;YACR,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc;YACvF,SAAS;YACT,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB;YAC/F,KAAK;YACL,WAAW,EAAE,cAAc;YAC3B,oBAAoB;YACpB,UAAU,EAAE,aAAa;YACzB,cAAc;YACd,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB;YAC1E,OAAO;YACP,WAAW,EAAE,cAAc,EAAE,YAAY;YACzC,SAAS;YACT,YAAY,EAAE,eAAe;YAC7B,QAAQ;YACR,cAAc,EAAE,iBAAiB;YACjC,MAAM;YACN,WAAW,EAAE,cAAc;SAC5B;KACF,CAAC;IAEF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,CAAC,mEAAmE;IAE/F,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,2DAA2D;AAC3D,8EAA8E;AAE9E,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,MAAM,MAAM,GAA4B;QACtC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC;IACF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,18 @@
+/**
+ * MCP Server setup and tool registration
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { DatabaseAdapter } from '@promptwheel/core';
+import { SessionManager } from './state.js';
+export interface ServerOptions {
+    db: DatabaseAdapter;
+    projectPath: string;
+    projectName?: string;
+    /** Register trajectory tools (default: true for backward compat, plugins may set false) */
+    trajectoryTools?: boolean;
+}
+export declare function createServer(options: ServerOptions): Promise<{
+    server: McpServer;
+    state: SessionManager;
+}>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAO5C,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,eAAe,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;IAClE,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC,CA2BD"}

package/dist/server.js

@@ -0,0 +1,35 @@
+/**
+ * MCP Server setup and tool registration
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { repos } from '@promptwheel/core';
+import { SessionManager } from './state.js';
+import { registerSessionTools } from './tools/session.js';
+import { registerExecuteTools } from './tools/execute.js';
+import { registerGitTools } from './tools/git.js';
+import { registerIntelligenceTools } from './tools/intelligence.js';
+import { registerTrajectoryTools } from './tools/trajectory.js';
+export async function createServer(options) {
+    const { db, projectPath, projectName } = options;
+    // Ensure project exists
+    const project = await repos.projects.ensureForRepo(db, {
+        name: projectName ?? projectPath.split('/').pop() ?? 'unknown',
+        rootPath: projectPath,
+    });
+    const state = new SessionManager(db, project, projectPath);
+    const getState = () => state;
+    const server = new McpServer({
+        name: 'promptwheel',
+        version: '0.6.0',
+    });
+    // Register tool groups
+    registerSessionTools(server, getState);
+    registerExecuteTools(server, getState);
+    registerGitTools(server, getState);
+    registerIntelligenceTools(server, getState);
+    if (options.trajectoryTools !== false) {
+        registerTrajectoryTools(server, getState);
+    }
+    return { server, state };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAUhE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAsB;IAIvD,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEjD,wBAAwB;IACxB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE;QACrD,IAAI,EAAE,WAAW,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS;QAC9D,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC;IAE7B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,uBAAuB;IACvB,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnC,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QACtC,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/spindle.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Spindle Loop Detection — MCP server adaptation.
+ *
+ * Monitors agent execution for unproductive patterns:
+ * - Oscillation: diffs flip-flopping (A→B→A)
+ * - Repetition: similar outputs repeated
+ * - Stalling: no file changes for N iterations
+ * - QA ping-pong: alternating test/lint failures
+ * - Command signature: same command fails repeatedly
+ *
+ * Ported from packages/cli/src/lib/spindle.ts, adapted for the
+ * event-driven MCP architecture.
+ */
+import type { SpindleState } from './types.js';
+export interface SpindleConfig {
+    similarityThreshold: number;
+    maxSimilarOutputs: number;
+    maxStallIterations: number;
+    maxCommandFailures: number;
+    maxQaPingPong: number;
+    maxFileEdits: number;
+}
+export declare const DEFAULT_SPINDLE_CONFIG: SpindleConfig;
+export type SpindleReason = 'oscillation' | 'repetition' | 'stalling' | 'qa_ping_pong' | 'command_failure';
+export interface SpindleCheckResult {
+    shouldAbort: boolean;
+    shouldBlock: boolean;
+    reason?: SpindleReason;
+    confidence: number;
+    diagnostics: Record<string, unknown>;
+    risk: 'none' | 'low' | 'medium' | 'high';
+}
+export declare function checkSpindle(spindle: SpindleState, config?: SpindleConfig): SpindleCheckResult;
+export declare function recordOutput(spindle: SpindleState, output: string): void;
+export declare function recordDiff(spindle: SpindleState, diff: string | null): void;
+export declare function recordCommandFailure(spindle: SpindleState, command: string, error: string): void;
+export declare function recordPlanHash(spindle: SpindleState, plan: unknown): void;
+export declare function recordTicketResult(spindle: SpindleState, changedFiles: string[], diff: string | null): void;
+/** Get file edit frequency warnings — wraps shared function, handles optional field */
+export declare function getFileEditWarnings(spindle: SpindleState, threshold?: number): string[];
+//# sourceMappingURL=spindle.d.ts.map

package/dist/spindle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spindle.d.ts","sourceRoot":"","sources":["../src/spindle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAa/C,MAAM,WAAW,aAAa;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,sBAAsB,EAAE,aAOpC,CAAC;AAMF,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,YAAY,GACZ,UAAU,GACV,cAAc,GACd,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC1C;AAcD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,YAAY,EACrB,MAAM,GAAE,aAAsC,GAC7C,kBAAkB,CA8EpB;AAMD,wBAAgB,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAKxE;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CA4B3E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIhG;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAIzE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAE3G;AA8ED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,GAAE,MAAU,GAAG,MAAM,EAAE,CAG1F"}