@ryuenn3123/agentic-senior-core 2.0.8 → 2.0.10

package/.cursorrules

@@ -1,6 +1,6 @@
 # AGENTIC-SENIOR-CORE DYNAMIC GOVERNANCE RULESET
 
-Generated by Agentic-Senior-Core CLI v2.0.8
+Generated by Agentic-Senior-Core CLI v2.0.10
 Timestamp: 2026-04-08T14:58:53.570Z
 Selected profile: beginner
 Selected policy file: .agent-context/policies/llm-judge-threshold.json

package/.windsurfrules

@@ -1,6 +1,6 @@
 # AGENTIC-SENIOR-CORE DYNAMIC GOVERNANCE RULESET
 
-Generated by Agentic-Senior-Core CLI v2.0.8
+Generated by Agentic-Senior-Core CLI v2.0.10
 Timestamp: 2026-04-08T14:58:53.570Z
 Selected profile: beginner
 Selected policy file: .agent-context/policies/llm-judge-threshold.json

package/README.md

@@ -38,34 +38,61 @@ AI:  *Creates properly layered modules with Zod validation, typed errors,
 
 ## Quick Start
 
-### Zero-Install: GitHub Template (New user friendly!)
+### Method 1 (Recommended): npm package
 
-The absolute fastest way to start your next top-tier project is to use this repository as a template.
-The **Use this template** button is in the GitHub repository header (top-right area), not inside this README text.
-If you prefer a direct link, open: **[Create from template](https://github.com/fatidaprilian/Agentic-Senior-Core/generate)**.
-Your new repository will instantly possess all the rules, configurations, and AI context files directly out of the box — zero CLI needed.
+The npm package is already published. For most users, this is the default path.
 
-### Option 0: NPM Install (Local or Global)
+```bash
+npm exec --yes @ryuenn3123/agentic-senior-core launch
+npm exec --yes @ryuenn3123/agentic-senior-core init
+npx @ryuenn3123/agentic-senior-core init
+```
 
-If you already know you want the CLI from npm, use one of these paths:
+If you prefer a global install:
 
 ```bash
-npm exec --yes @ryuenn3123/agentic-senior-core init
 npm install -g @ryuenn3123/agentic-senior-core
 agentic-senior-core init
 ```
 
-### Option 1: Interactive via GitHub Source (Pre-publish friendly)
+Use team defaults with profile packs:
 
-If npm package publication is not ready yet, run the CLI directly from GitHub and still keep the full interactive experience.
+```bash
+npx @ryuenn3123/agentic-senior-core init --profile-pack startup
+```
+
+### Method 2: GitHub template and source execution
+
+Use this method if your team prefers source-based bootstrap or template-first onboarding.
+
+GitHub template:
+- **[Create from template](https://github.com/fatidaprilian/Agentic-Senior-Core/generate)**
+
+GitHub source execution (interactive):
 
 ```bash
 npm exec --yes --package=github:fatidaprilian/Agentic-Senior-Core agentic-senior-core init .
 ```
 
-This gives the same interactive prompts to choose your profile (`beginner`, `balanced`, `strict`), stack, blueprint, and CI guardrails.
+GitHub bootstrap scripts:
+- Windows: `scripts/init-project.ps1`
+- Linux/macOS: `scripts/init-project.sh`
+
+Windows PowerShell:
+
+```powershell
+powershell -ExecutionPolicy Bypass -File .\scripts\init-project.ps1 -TargetDirectory . -Profile balanced -Stack typescript -Blueprint api-nextjs -Ci true
+```
+
+Linux/macOS Bash:
+
+```bash
+bash ./scripts/init-project.sh . --profile balanced --stack typescript --blueprint api-nextjs --ci true
+```
+
+### Preset starters
 
-If you want a plug-and-play starter instead of answering every question, use a preset:
+Use presets when you want faster onboarding with less manual selection.
 
 ```bash
 npx @ryuenn3123/agentic-senior-core init --preset frontend-web
@@ -81,53 +108,51 @@ Expanded preset catalog:
 - `mobile-react-native`, `mobile-flutter`, `observability-platform`
 - `typescript-nestjs-service`, `java-enterprise-api`, `dotnet-enterprise-api`, `php-laravel-api`, `kubernetes-platform`
 
-### Option 2: GitHub Bootstrap Scripts (No npx required)
+### Newbie mode
 
-Run directly from this repository bootstrap script and inject rules into your project root.
-
-Bootstrap script paths: `scripts/init-project.ps1` (Windows) and `scripts/init-project.sh` (Linux/macOS).
-
-Windows PowerShell:
-
-```powershell
-powershell -ExecutionPolicy Bypass -File .\scripts\init-project.ps1 -TargetDirectory . -Profile balanced -Stack typescript -Blueprint api-nextjs -Ci true
-```
-
-Linux/macOS Bash:
+If you are new to stacks, blueprints, and guardrails, run:
 
 ```bash
-bash ./scripts/init-project.sh . --profile balanced --stack typescript --blueprint api-nextjs --ci true
+npx @ryuenn3123/agentic-senior-core init --newbie
 ```
 
-Both scripts clone Agentic-Senior-Core into a temporary directory, run the same CLI engine, then clean up automatically.
+### Important behavior
+
+- `init` does not copy repository workflows from this project into your target repository.
+- MCP server registration and trust/start are manual in IDE settings.
+- MCP workspace scaffold is opt-in via `--mcp-template` and creates `.vscode/mcp.json`.
 
-If you want interactive selection, omit `-Profile`, `-Stack`, `-Blueprint`, and `-Ci` on the script command.
+### MCP Setup in VS Code (No File Picker)
 
-### Option 3: Interactive Auto-Setup via npm/npx (Post-publish)
+If you are looking for a file picker in the MCP UI, that is expected because VS Code uses MCP server registration, not generic JSON file import.
 
-If you have an existing project and want to infuse it with Staff-level context:
+1. Generate workspace MCP config:
 
 ```bash
-npx @ryuenn3123/agentic-senior-core init
+npx @ryuenn3123/agentic-senior-core init --mcp-template
 ```
 
-Use team defaults (V2.0 track) with profile packs:
+2. Open Command Palette and run `MCP: Open Workspace Folder Configuration`.
+3. Confirm the file is `.vscode/mcp.json` with server `agentic-senior-core`.
+4. The generated server command is `npx -y @ryuenn3123/agentic-senior-core mcp`.
+5. Open Chat Customizations > MCP Servers, then trust/start the server.
 
-```bash
-npx @ryuenn3123/agentic-senior-core init --profile-pack startup
-```
+If logs repeatedly show `Waiting for server to respond to initialize request`, upgrade to the latest package version and regenerate the workspace config with `--mcp-template`.
 
-The CLI is smart. It auto-detects your current development stack, helps you build a governance profile (select from `beginner`, `balanced`, or `strict`), and writes the compiled rules straight to your root automatically!
+### CLI Command Reference
 
-Important behavior:
-- `init` does not copy repository workflows from this project into your target repository.
-- MCP server registration is manual in IDE settings.
-- If you want the MCP file scaffold, run `init` with `--mcp-template`.
+All available commands:
 
-If you are totally new to concepts like blueprints and guardrails, no problem — just run:
-```bash
-npx @ryuenn3123/agentic-senior-core init --newbie
-```
+| Command | Purpose | Example |
+|---------|---------|---------|
+| `launch` | Numbered onboarding launcher | `agentic-senior-core launch` |
+| `init` | Initialize governance in a project | `agentic-senior-core init . --profile balanced` |
+| `upgrade` | Upgrade existing governance safely | `agentic-senior-core upgrade . --dry-run` |
+| `optimize` | Manage token optimization profile | `agentic-senior-core optimize . --show` |
+| `mcp` | Start local MCP stdio server runtime | `agentic-senior-core mcp` |
+| `rollback` | Roll back from backup snapshot | `agentic-senior-core rollback .` |
+| `skill` | Select domain skill pack by tier | `agentic-senior-core skill frontend --tier advance` |
+| `--version` | Print CLI version | `agentic-senior-core --version` |
 
 ### Skill Selector
 
@@ -270,8 +295,8 @@ Our documentation has shifted into dedicated tracks to keep this README light:
 - **Automated Guardrails:** CI blueprints include LLM-as-a-Judge flow using `pr-checklist.md`.
 - **Pre-Publish Safety:** Built-in forbidden content checks detect hardcoded secrets and stray debugger artifacts before hitting the NPM registry.
 - **Machine-Readable CI Output:** LLM Judge emits `JSON_REPORT` payloads and writes `.agent-context/state/llm-judge-report.json` for PR/MR annotation tooling.
-- **MCP Self-Healing Loop:** `mcp.json` defines diagnostics + fix proposal workflow when lint/CI fails.
-- **MCP Registration Model:** IDE MCP server registration is manual; `mcp.json` is an optional template file (`--mcp-template`).
+- **MCP Runtime Server:** `scripts/mcp-server.mjs` exposes validate/test/release checks as MCP tools.
+- **MCP Registration Model:** IDE MCP server registration is manual; workspace config lives in `.vscode/mcp.json` (`--mcp-template`).
 
 ---
 
@@ -282,7 +307,9 @@ Our documentation has shifted into dedicated tracks to keep this README light:
 ├── .cursorrules                    # Dynamic compiled governance entry point
 ├── .windsurfrules                  # Dynamic compiled governance entry point
 ├── .agent-override.md              # Team-specific exceptions (scoped + expiry)
-├── mcp.json                        # Optional MCP template file (copied with --mcp-template)
+├── mcp.json                        # Governance metadata and knowledge-layer contract
+├── .vscode/
+│   └── mcp.json                    # VS Code MCP workspace server configuration
 ├── AGENTS.md                       # Universal agent discovery
 ├── .github/copilot-instructions.md # GitHub Copilot entry point
 ├── .gemini/instructions.md         # Antigravity / Gemini entry point
@@ -300,6 +327,7 @@ Our documentation has shifted into dedicated tracks to keep this README light:
 ├── scripts/
 │   ├── validate.mjs                # Repository validator
 │   ├── llm-judge.mjs               # LLM-as-a-Judge CI gate
+│   ├── mcp-server.mjs              # Local MCP stdio server (validate/test/release tools)
 │   ├── init-project.sh             # GitHub bootstrap script (Linux/macOS)
 │   └── init-project.ps1            # GitHub bootstrap script (Windows)
 ├── docs/
@@ -337,6 +365,19 @@ npm run report:quality-trend
 npm run report:governance-weekly
 ```
 
+## Release and npm Publish Flow
+
+This repository publishes to npm automatically through GitHub Actions on every push to `main`.
+
+Release checklist:
+1. Bump `package.json` version.
+2. Add matching release notes in `CHANGELOG.md`.
+3. Push to `main`.
+
+Important notes:
+- If the npm version already exists, publish will fail.
+- Publish requires valid `NPM_TOKEN` in repository secrets.
+
 ---
 
 ## Roadmap
@@ -362,7 +403,7 @@ npm run report:governance-weekly
 
 ### Current Forward Plan
 - V2.0: Skill marketplace trust tiers, transactional installs, rollback safety, and launch-menu onboarding.
-- V2.5: Cross-model benchmark harness and anti-regression quality gates.
+- V2.5: Cross-model benchmark harness, anti-regression quality gates, and advanced frontend design quality track (non-template UI direction, stronger UX craft, and frontend parity beyond baseline benchmark repos).
 - V3.0: Enterprise governance cloud, policy drift detection, and org-level override registry.
 
 Detailed timeline and success metrics: [docs/roadmap.md](docs/roadmap.md)

package/bin/agentic-senior-core.js

@@ -11,6 +11,7 @@ import { CLI_VERSION } from '../lib/cli/constants.mjs';
 import { printUsage } from '../lib/cli/utils.mjs';
 import { runLaunchCommand } from '../lib/cli/commands/launch.mjs';
 import { runRollbackCommand } from '../lib/cli/commands/rollback.mjs';
+import { runMcpServerCommand } from '../lib/cli/commands/mcp.mjs';
 import { runOptimizeCommand, parseOptimizeArguments } from '../lib/cli/commands/optimize.mjs';
 import { runInitCommand, parseInitArguments } from '../lib/cli/commands/init.mjs';
 import { runUpgradeCommand, parseUpgradeArguments } from '../lib/cli/commands/upgrade.mjs';
@@ -63,6 +64,11 @@ async function main() {
     return;
   }
 
+  if (commandArgument === 'mcp') {
+    await runMcpServerCommand();
+    return;
+  }
+
   console.error(`Unknown command: ${commandArgument}`);
   printUsage();
   exit(1);

package/lib/cli/commands/init.mjs

@@ -429,7 +429,7 @@ export async function runInitCommand(targetDirectoryArgument, initOptions = {})
     console.log(`- Setup time: ${formatDuration(setupDurationMs)}`);
     console.log('- Generated files: .cursorrules, .windsurfrules, and .agent-context/state/onboarding-report.json');
     console.log(`- Repository workflows copied: no (workflows remain source-repo assets)`);
-    console.log(`- MCP template file: ${shouldIncludeMcpTemplate ? 'copied (mcp.json)' : 'not copied by default (use --mcp-template)'}`);
+    console.log(`- MCP template file: ${shouldIncludeMcpTemplate ? 'created (.vscode/mcp.json)' : 'not created by default (use --mcp-template)'}`);
     if (isTokenOptimizationEnabled) {
       console.log(`- Token optimization policy: enabled for ${selectedTokenAgentName}`);
     } else {

package/lib/cli/commands/mcp.mjs

@@ -0,0 +1,3 @@
+export async function runMcpServerCommand() {
+  await import('../../../scripts/mcp-server.mjs');
+}

package/lib/cli/utils.mjs

@@ -31,6 +31,7 @@ export function printUsage() {
   console.log('  agentic-senior-core init [target-directory] [--preset <name>] [--profile <beginner|balanced|strict>] [--profile-pack <name>] [--stack <name>] [--blueprint <name>] [--ci <true|false>] [--newbie] [--token-optimize] [--no-token-optimize] [--token-agent <name>]');
   console.log('  agentic-senior-core upgrade [target-directory] [--dry-run] [--yes] [--mcp-template]');
   console.log('  agentic-senior-core optimize [target-directory] [--agent <copilot|claude|cursor|windsurf|gemini|codex|cline>] [--enable|--disable] [--show]');
+  console.log('  agentic-senior-core mcp');
   console.log('  agentic-senior-core rollback [target-directory]');
   console.log('  agentic-senior-core skill [domain] [--tier <standard|advance|expert|above>] [--json]');
   console.log('  agentic-senior-core --version');
@@ -48,7 +49,7 @@ export function printUsage() {
   console.log('  --token-optimize  Explicitly enable token optimization policy during init (default behavior)');
   console.log('  --token-agent     Set token optimization agent target (copilot, claude, cursor, windsurf, gemini, codex, cline)');
   console.log('  --no-token-optimize  Disable token optimization policy during init');
-  console.log('  --mcp-template   Also copy mcp.json template (MCP server registration in IDE is still manual)');
+  console.log('  --mcp-template   Create .vscode/mcp.json workspace template (MCP trust/start remains manual in IDE)');
   console.log('  --dry-run    Preview upgrade without writing files');
   console.log('  --yes        Skip confirmation prompts for upgrade');
   console.log('  --agent      Target agent integration for token optimization mode');
@@ -129,14 +130,27 @@ export async function copyGovernanceAssetsToTarget(
   }
 
   if (shouldIncludeMcpTemplate) {
-    const sourceMcpPath = path.join(REPO_ROOT, 'mcp.json');
-    const targetMcpPath = path.join(resolvedTargetDirectoryPath, 'mcp.json');
-
-    if (
-      await pathExists(sourceMcpPath)
-      && path.resolve(sourceMcpPath) !== path.resolve(targetMcpPath)
-    ) {
-      await fs.copyFile(sourceMcpPath, targetMcpPath);
+    const vscodeDirectoryPath = path.join(resolvedTargetDirectoryPath, '.vscode');
+    const workspaceMcpConfigurationPath = path.join(vscodeDirectoryPath, 'mcp.json');
+
+    const workspaceMcpConfiguration = {
+      $schema: 'vscode://schemas/mcp',
+      servers: {
+        'agentic-senior-core': {
+          type: 'stdio',
+          command: 'npx',
+          args: ['-y', '@ryuenn3123/agentic-senior-core', 'mcp'],
+        },
+      },
+    };
+
+    if (!(await pathExists(workspaceMcpConfigurationPath))) {
+      await ensureDirectory(vscodeDirectoryPath);
+      await fs.writeFile(
+        workspaceMcpConfigurationPath,
+        JSON.stringify(workspaceMcpConfiguration, null, 2) + '\n',
+        'utf8'
+      );
     }
   }
 }

package/mcp.json

@@ -1,5 +1,4 @@
 {
-  "$schema": "https://modelcontextprotocol.io/schemas/mcp.json",
   "version": "1.0",
   "name": "agentic-senior-core",
   "description": "MCP configuration for governance-aware diagnostics and self-healing workflows with full knowledge injection.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ryuenn3123/agentic-senior-core",
-  "version": "2.0.8",
+  "version": "2.0.10",
   "type": "module",
   "description": "Force your AI Agent to code like a Staff Engineer, not a Junior.",
   "bin": {
@@ -53,6 +53,6 @@
     "report:quality-trend": "node ./scripts/quality-trend-report.mjs",
     "report:governance-weekly": "node ./scripts/governance-weekly-report.mjs",
     "validate": "node ./scripts/validate.mjs",
-    "test": "node --test ./tests/cli-smoke.test.mjs ./tests/llm-judge.test.mjs ./tests/enterprise-ops.test.mjs ./tests/skill-tier-gate.test.mjs"
+    "test": "node --test ./tests/cli-smoke.test.mjs ./tests/mcp-server.test.mjs ./tests/llm-judge.test.mjs ./tests/enterprise-ops.test.mjs ./tests/skill-tier-gate.test.mjs"
   }
 }

package/scripts/mcp-server.mjs

@@ -0,0 +1,371 @@
+#!/usr/bin/env node
+
+import { readFileSync } from 'node:fs';
+import { spawn } from 'node:child_process';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const SCRIPT_FILE_PATH = fileURLToPath(import.meta.url);
+const REPOSITORY_ROOT = resolve(dirname(SCRIPT_FILE_PATH), '..');
+const PACKAGE_VERSION = JSON.parse(
+  readFileSync(resolve(REPOSITORY_ROOT, 'package.json'), 'utf8')
+).version;
+const DEFAULT_PROTOCOL_VERSION = '2024-11-05';
+
+const TEST_SUITE_ARGS = {
+  full: ['--test', './tests/cli-smoke.test.mjs', './tests/llm-judge.test.mjs', './tests/enterprise-ops.test.mjs', './tests/skill-tier-gate.test.mjs'],
+  cli: ['--test', './tests/cli-smoke.test.mjs'],
+  enterprise: ['--test', './tests/enterprise-ops.test.mjs'],
+  'llm-judge': ['--test', './tests/llm-judge.test.mjs'],
+  'skill-tier': ['--test', './tests/skill-tier-gate.test.mjs'],
+};
+
+const TOOL_DEFINITIONS = [
+  {
+    name: 'validate',
+    description: 'Run repository validation checks.',
+    inputSchema: {
+      type: 'object',
+      properties: {},
+      additionalProperties: false,
+    },
+  },
+  {
+    name: 'test',
+    description: 'Run test suites (full or targeted).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        suite: {
+          type: 'string',
+          enum: ['full', 'cli', 'enterprise', 'llm-judge', 'skill-tier'],
+          description: 'Target test suite. Defaults to full.',
+        },
+      },
+      additionalProperties: false,
+    },
+  },
+  {
+    name: 'release_gate',
+    description: 'Run release gate checks.',
+    inputSchema: {
+      type: 'object',
+      properties: {},
+      additionalProperties: false,
+    },
+  },
+  {
+    name: 'forbidden_content_check',
+    description: 'Run forbidden content scan used by publish gate.',
+    inputSchema: {
+      type: 'object',
+      properties: {},
+      additionalProperties: false,
+    },
+  },
+];
+
+let incomingBuffer = Buffer.alloc(0);
+
+function findHeaderTerminator(buffer) {
+  const crlfHeaderEndIndex = buffer.indexOf('\r\n\r\n');
+  if (crlfHeaderEndIndex !== -1) {
+    return {
+      headerEndIndex: crlfHeaderEndIndex,
+      delimiterLength: 4,
+      lineSeparator: '\r\n',
+    };
+  }
+
+  const lfHeaderEndIndex = buffer.indexOf('\n\n');
+  if (lfHeaderEndIndex !== -1) {
+    return {
+      headerEndIndex: lfHeaderEndIndex,
+      delimiterLength: 2,
+      lineSeparator: '\n',
+    };
+  }
+
+  return null;
+}
+
+function writeMessage(payload) {
+  const serializedPayload = JSON.stringify(payload);
+  const payloadLength = Buffer.byteLength(serializedPayload, 'utf8');
+  process.stdout.write(`Content-Length: ${payloadLength}\r\n\r\n${serializedPayload}`);
+}
+
+function sendResponse(id, result) {
+  writeMessage({
+    jsonrpc: '2.0',
+    id,
+    result,
+  });
+}
+
+function sendError(id, code, message, data) {
+  writeMessage({
+    jsonrpc: '2.0',
+    id,
+    error: {
+      code,
+      message,
+      data,
+    },
+  });
+}
+
+function normalizeToolName(rawToolName) {
+  return typeof rawToolName === 'string' ? rawToolName.trim() : '';
+}
+
+function buildCommandOutput(commandLabel, commandArguments, exitCode, stdoutContent, stderrContent) {
+  const outputSections = [
+    `Command: node ${commandArguments.join(' ')}`,
+    `Exit code: ${exitCode}`,
+  ];
+
+  if (stdoutContent.trim().length > 0) {
+    outputSections.push(`STDOUT:\n${stdoutContent.trimEnd()}`);
+  }
+
+  if (stderrContent.trim().length > 0) {
+    outputSections.push(`STDERR:\n${stderrContent.trimEnd()}`);
+  }
+
+  return [
+    `[${commandLabel}]`,
+    outputSections.join('\n\n'),
+  ].join('\n\n');
+}
+
+function runNodeCommand(commandLabel, commandArguments) {
+  return new Promise((resolveResult) => {
+    const childProcess = spawn(process.execPath, commandArguments, {
+      cwd: REPOSITORY_ROOT,
+      env: process.env,
+    });
+
+    let stdoutContent = '';
+    let stderrContent = '';
+
+    childProcess.stdout.on('data', (chunk) => {
+      stdoutContent += chunk.toString('utf8');
+    });
+
+    childProcess.stderr.on('data', (chunk) => {
+      stderrContent += chunk.toString('utf8');
+    });
+
+    childProcess.on('error', (error) => {
+      resolveResult({
+        content: [
+          {
+            type: 'text',
+            text: `[${commandLabel}] Failed to start command: ${error.message}`,
+          },
+        ],
+        isError: true,
+      });
+    });
+
+    childProcess.on('close', (exitCode) => {
+      const normalizedExitCode = typeof exitCode === 'number' ? exitCode : 1;
+      resolveResult({
+        content: [
+          {
+            type: 'text',
+            text: buildCommandOutput(
+              commandLabel,
+              commandArguments,
+              normalizedExitCode,
+              stdoutContent,
+              stderrContent
+            ),
+          },
+        ],
+        isError: normalizedExitCode !== 0,
+      });
+    });
+  });
+}
+
+async function executeToolCall(toolName, toolArguments = {}) {
+  if (toolName === 'validate') {
+    return runNodeCommand('validate', ['./scripts/validate.mjs']);
+  }
+
+  if (toolName === 'test') {
+    const requestedSuite = typeof toolArguments.suite === 'string'
+      ? toolArguments.suite
+      : 'full';
+
+    const selectedSuite = TEST_SUITE_ARGS[requestedSuite] ? requestedSuite : 'full';
+    return runNodeCommand(`test:${selectedSuite}`, TEST_SUITE_ARGS[selectedSuite]);
+  }
+
+  if (toolName === 'release_gate') {
+    return runNodeCommand('release_gate', ['./scripts/release-gate.mjs']);
+  }
+
+  if (toolName === 'forbidden_content_check') {
+    return runNodeCommand('forbidden_content_check', ['./scripts/forbidden-content-check.mjs']);
+  }
+
+  return {
+    content: [
+      {
+        type: 'text',
+        text: `Unknown tool: ${toolName}`,
+      },
+    ],
+    isError: true,
+  };
+}
+
+async function handleRequest(requestMessage) {
+  const requestId = requestMessage.id;
+  const requestMethod = requestMessage.method;
+  const requestParams = requestMessage.params || {};
+
+  if (typeof requestMethod !== 'string') {
+    if (typeof requestId !== 'undefined') {
+      sendError(requestId, -32600, 'Invalid Request');
+    }
+    return;
+  }
+
+  if (requestMethod === 'initialize') {
+    const negotiatedProtocolVersion = typeof requestParams.protocolVersion === 'string'
+      ? requestParams.protocolVersion
+      : DEFAULT_PROTOCOL_VERSION;
+
+    sendResponse(requestId, {
+      protocolVersion: negotiatedProtocolVersion,
+      capabilities: {
+        tools: {
+          listChanged: false,
+        },
+      },
+      serverInfo: {
+        name: 'agentic-senior-core',
+        version: PACKAGE_VERSION,
+      },
+    });
+    return;
+  }
+
+  if (requestMethod === 'notifications/initialized') {
+    return;
+  }
+
+  if (requestMethod === 'ping') {
+    if (typeof requestId !== 'undefined') {
+      sendResponse(requestId, {});
+    }
+    return;
+  }
+
+  if (requestMethod === 'tools/list') {
+    sendResponse(requestId, {
+      tools: TOOL_DEFINITIONS,
+    });
+    return;
+  }
+
+  if (requestMethod === 'tools/call') {
+    const requestedToolName = normalizeToolName(requestParams.name);
+
+    if (!requestedToolName) {
+      sendError(requestId, -32602, 'Invalid params: tool name is required');
+      return;
+    }
+
+    const toolResult = await executeToolCall(requestedToolName, requestParams.arguments || {});
+    sendResponse(requestId, toolResult);
+    return;
+  }
+
+  if (typeof requestId !== 'undefined') {
+    sendError(requestId, -32601, `Method not found: ${requestMethod}`);
+  }
+}
+
+function readNextFramedMessage() {
+  const headerTerminator = findHeaderTerminator(incomingBuffer);
+  if (!headerTerminator) {
+    return null;
+  }
+
+  const { headerEndIndex, delimiterLength, lineSeparator } = headerTerminator;
+
+  const rawHeader = incomingBuffer.slice(0, headerEndIndex).toString('utf8');
+  const headerLines = rawHeader.split(lineSeparator);
+  let contentLength = null;
+
+  for (const headerLine of headerLines) {
+    const separatorIndex = headerLine.indexOf(':');
+    if (separatorIndex === -1) {
+      continue;
+    }
+
+    const headerName = headerLine.slice(0, separatorIndex).trim().toLowerCase();
+    const headerValue = headerLine.slice(separatorIndex + 1).trim();
+
+    if (headerName === 'content-length') {
+      contentLength = Number.parseInt(headerValue, 10);
+      break;
+    }
+  }
+
+  if (!Number.isFinite(contentLength) || contentLength < 0) {
+    incomingBuffer = Buffer.alloc(0);
+    return null;
+  }
+
+  const bodyStartIndex = headerEndIndex + delimiterLength;
+  const frameEndIndex = bodyStartIndex + contentLength;
+
+  if (incomingBuffer.length < frameEndIndex) {
+    return null;
+  }
+
+  const rawMessage = incomingBuffer.slice(bodyStartIndex, frameEndIndex).toString('utf8');
+  incomingBuffer = incomingBuffer.slice(frameEndIndex);
+  return rawMessage;
+}
+
+function processIncomingBuffer() {
+  while (true) {
+    const framedMessage = readNextFramedMessage();
+    if (framedMessage === null) {
+      return;
+    }
+
+    let parsedRequest;
+    try {
+      parsedRequest = JSON.parse(framedMessage);
+    } catch {
+      continue;
+    }
+
+    Promise.resolve(handleRequest(parsedRequest)).catch((error) => {
+      if (typeof parsedRequest?.id !== 'undefined') {
+        sendError(parsedRequest.id, -32603, 'Internal error', String(error?.message || error));
+      }
+    });
+  }
+}
+
+process.stdin.on('data', (chunk) => {
+  incomingBuffer = Buffer.concat([incomingBuffer, chunk]);
+  processIncomingBuffer();
+});
+
+process.stdin.on('end', () => {
+  process.exit(0);
+});
+
+process.on('SIGINT', () => {
+  process.exit(0);
+});

package/scripts/validate.mjs

@@ -151,6 +151,7 @@ async function validateRequiredFiles() {
     'scripts/benchmark-gate.mjs',
     'scripts/benchmark-intelligence.mjs',
     'scripts/governance-weekly-report.mjs',
+    'scripts/mcp-server.mjs',
     'scripts/frontend-usability-audit.mjs',
     'scripts/release-gate.mjs',
     'scripts/generate-sbom.mjs',
@@ -175,11 +176,13 @@ async function validateRequiredFiles() {
     '.agent-context/state/benchmark-watchlist.json',
     '.agent-context/state/skill-platform.json',
     '.agent-context/skills/index.json',
+    '.vscode/mcp.json',
     '.github/workflows/release-gate.yml',
     '.github/workflows/sbom-compliance.yml',
     '.github/workflows/benchmark-intelligence.yml',
     '.github/workflows/governance-weekly-report.yml',
     'tests/cli-smoke.test.mjs',
+    'tests/mcp-server.test.mjs',
     'tests/llm-judge.test.mjs',
     'tests/enterprise-ops.test.mjs',
     'LICENSE',
@@ -700,6 +703,8 @@ async function validateMcpConfiguration() {
   const mcpConfiguration = JSON.parse(await readTextFile(join(ROOT_DIR, 'mcp.json')));
   const lintServerCommand = mcpConfiguration.servers?.lint?.command;
   const testServerCommand = mcpConfiguration.servers?.test?.command;
+  const workspaceMcpConfiguration = JSON.parse(await readTextFile(join(ROOT_DIR, '.vscode', 'mcp.json')));
+  const workspaceServerConfig = workspaceMcpConfiguration.servers?.['agentic-senior-core'];
 
   if (lintServerCommand === 'node') {
     pass('MCP lint server uses Node');
@@ -712,6 +717,24 @@ async function validateMcpConfiguration() {
   } else {
     fail('MCP test server must use Node');
   }
+
+  if (workspaceMcpConfiguration.$schema === 'vscode://schemas/mcp') {
+    pass('Workspace MCP config uses trusted VS Code schema');
+  } else {
+    fail('Workspace MCP config must use $schema: vscode://schemas/mcp');
+  }
+
+  if (workspaceServerConfig?.command === 'node') {
+    pass('Workspace MCP server command uses Node');
+  } else {
+    fail('Workspace MCP server command must use Node');
+  }
+
+  if (Array.isArray(workspaceServerConfig?.args) && workspaceServerConfig.args.includes('./scripts/mcp-server.mjs')) {
+    pass('Workspace MCP server points to scripts/mcp-server.mjs');
+  } else {
+    fail('Workspace MCP server must include ./scripts/mcp-server.mjs argument');
+  }
 }
 
 async function validateHumanWritingGovernance() {