@swarmdo/cli 1.12.0 → 1.13.0

package/dist/src/mcp-tools/license-tools.js

@@ -0,0 +1,57 @@
+/**
+ * License MCP Tool
+ *
+ * Let an agent audit dependency licenses in-session — e.g. before adding a
+ * package or approving a release — against an allow/deny policy. Deterministic;
+ * shares the pure engine in ../license/license.ts with the CLI command. The
+ * caller passes the dependency list (name/version/license), so no fs access.
+ */
+import { auditLicenses } from '../license/license.js';
+const licenseCheckTool = {
+    name: 'license_check',
+    description: 'Audit a dependency list against a license allow/deny policy. Returns violations (denied, not-allowed, or unknown license) plus a license breakdown. Use before adding a dependency or approving a release to keep a permissive tree clean. Deterministic; pass the deps directly.',
+    category: 'license',
+    tags: ['license', 'compliance', 'supply-chain', 'ci'],
+    inputSchema: {
+        type: 'object',
+        properties: {
+            deps: {
+                type: 'array',
+                description: 'dependencies to audit',
+                items: {
+                    type: 'object',
+                    properties: {
+                        name: { type: 'string' },
+                        version: { type: 'string' },
+                        license: { type: 'string', description: 'SPDX id/expression (e.g. MIT, "(MIT OR Apache-2.0)", or UNKNOWN)' },
+                    },
+                    required: ['name', 'license'],
+                },
+            },
+            allow: { type: 'array', items: { type: 'string' }, description: 'SPDX allowlist; a dep must match at least one' },
+            deny: { type: 'array', items: { type: 'string' }, description: 'SPDX denylist; any match is a violation' },
+            allowUnknown: { type: 'boolean', description: 'treat UNKNOWN as allowed even under an allowlist', default: false },
+        },
+        required: ['deps'],
+    },
+    handler: async (params) => {
+        if (!Array.isArray(params.deps))
+            return { error: true, message: 'deps[] is required' };
+        const deps = params.deps
+            .filter((d) => !!d && typeof d === 'object')
+            .map((d) => ({
+            name: String(d.name ?? '?'),
+            version: String(d.version ?? '0.0.0'),
+            license: String(d.license ?? 'UNKNOWN'),
+        }));
+        const policy = {
+            allow: Array.isArray(params.allow) ? params.allow.filter((x) => typeof x === 'string') : undefined,
+            deny: Array.isArray(params.deny) ? params.deny.filter((x) => typeof x === 'string') : undefined,
+            allowUnknown: params.allowUnknown === true,
+        };
+        const report = auditLicenses(deps, policy);
+        return { clean: report.violations.length === 0, total: report.total, violations: report.violations, byLicense: report.byLicense };
+    },
+};
+export const licenseTools = [licenseCheckTool];
+//# sourceMappingURL=license-tools.js.map

package/dist/src/mcp-tools/license-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-tools.js","sourceRoot":"","sources":["../../../src/mcp-tools/license-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,aAAa,EAAuC,MAAM,uBAAuB,CAAC;AAE3F,MAAM,gBAAgB,GAAY;IAChC,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,mRAAmR;IACrR,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC;IACrD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,uBAAuB;gBACpC,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kEAAkE,EAAE;qBAC7G;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;iBAC9B;aACF;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,+CAA+C,EAAE;YACjH,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;YAC1G,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kDAAkD,EAAE,OAAO,EAAE,KAAK,EAAE;SACnH;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;KACnB;IACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QACvF,MAAM,IAAI,GAAiB,MAAM,CAAC,IAAI;aACnC,MAAM,CAAC,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;aAClF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,MAAM,CAAE,CAAwB,CAAC,IAAI,IAAI,GAAG,CAAC;YACnD,OAAO,EAAE,MAAM,CAAE,CAA2B,CAAC,OAAO,IAAI,OAAO,CAAC;YAChE,OAAO,EAAE,MAAM,CAAE,CAA2B,CAAC,OAAO,IAAI,SAAS,CAAC;SACnE,CAAC,CAAC,CAAC;QACN,MAAM,MAAM,GAAkB;YAC5B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/G,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5G,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,IAAI;SAC3C,CAAC;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACpI,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAc,CAAC,gBAAgB,CAAC,CAAC"}