@vibecodetown/mcp-server 1.3.1 → 1.5.0

package/build/mcp/tools/bitnet/index.js

@@ -1,748 +1,13 @@
 /**
- * BitNet MCP Tools
- * ================
+ * BitNet MCP Tools (barrel)
  *
- * AI Auditor Agent for Vibe PM - Pre/Post check middleware.
- *
- * Tools:
- *   - bitnet.check: Run BitNet audit on changed files
- *   - bitnet.trace: Query audit trace history
- *
- * @module mcp/tools/bitnet
- */
-import { z } from "zod";
-import * as path from "node:path";
-import * as fs from "node:fs";
-import { v4 as uuid } from "uuid";
-import { runGit } from "../../cli.js";
-import { ensureDirSync, getBitnetTracePath, getVibeBitnetCacheDir } from "../../paths.js";
-import { LicenseManager } from "../../../license-manager.js";
-import { calcSlotLimits } from "../../../bitnet-worker/hw_slots.js";
-import { getMusuAdapter, isMusuAvailable, } from "../../runtime/index.js";
-import { emitEvent } from "../../events/emitter.js";
-import { getFeatureGate, POST_ANALYSIS_FEATURES, } from "../../../tier/index.js";
-export const VALID_RISK_TAGS = [
-    "ENV_CHANGE",
-    "BLACK_ZONE_TOUCH",
-    "YELLOW_ZONE_TOUCH",
-    "CONFIG_CHANGE",
-    "SECRET_DETECTED",
-    "PII_DETECTED",
-    "DELETE_COMMAND",
-    "PERMISSION_CHANGE",
-    "TEST_MISSING",
-    "DEPENDENCY_CHANGE",
-    "API_CHANGE",
-    "DB_SCHEMA_CHANGE",
-];
-// ============================================================
-// Input Schemas
-// ============================================================
-export const bitnetCheckInputSchema = z.object({
-    files: z.array(z.string()).optional().describe("변경된 파일 목록 (생략 시 git diff로 자동 감지)"),
-    context: z.string().optional().describe("추가 컨텍스트 (코드 스니펫 등)"),
-    project_id: z.string().optional().describe("프로젝트 ID (생략 시 현재 폴더 사용)"),
-});
-export const bitnetTraceInputSchema = z.object({
-    trace_id: z.string().optional().describe("특정 trace ID 조회"),
-    limit: z.number().optional().default(10).describe("최근 N개 조회"),
-    project_id: z.string().optional().describe("프로젝트 ID"),
-});
-// ============================================================
-// Output Schemas
-// ============================================================
-export const bitnetCheckOutputSchema = z.object({
-    status: z.enum(["OK", "WARNING", "ERROR"]),
-    verdict: z.enum(["GO", "BLOCK", "WARNING"]),
-    risk_tags: z.array(z.string()),
-    reason: z.string(),
-    next_actions: z.array(z.string()),
-    review_focus: z.array(z.string()),
-    trace_id: z.string(),
-    checked_files: z.array(z.string()),
-    timestamp: z.string(),
-});
-export const bitnetTraceOutputSchema = z.object({
-    status: z.enum(["OK", "ERROR"]),
-    traces: z.array(z.object({
-        trace_id: z.string(),
-        timestamp: z.string(),
-        verdict: z.enum(["GO", "BLOCK", "WARNING"]),
-        risk_tags: z.array(z.string()),
-        reason: z.string(),
-        files: z.array(z.string()),
-    })),
-    message: z.string().optional(),
-    // Pro tier fields
-    telemetry: z.object({
-        cpu_percent: z.number(),
-        memory_percent: z.number(),
-        active_jobs: z.number(),
-        completed_jobs: z.number(),
-    }).optional(),
-    pro_features: z.object({
-        extended_history: z.boolean(),
-        telemetry_available: z.boolean(),
-    }).optional(),
-});
-const FILE_PATTERNS = [
-    // BLACK zone - BLOCK
-    { pattern: /\.env(\.[a-z]+)?$/i, tag: "ENV_CHANGE", verdict: "BLOCK" },
-    { pattern: /credentials\.json$/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /secrets?\.ya?ml$/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /\.pem$/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /\.key$/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /id_rsa/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /private[_-]?key/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /api[_-]?key/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    // YELLOW zone - WARNING
-    { pattern: /config\/.*\.(ya?ml|json)$/i, tag: "CONFIG_CHANGE", verdict: "WARNING" },
-    { pattern: /\.config\.(js|ts|json)$/i, tag: "CONFIG_CHANGE", verdict: "WARNING" },
-    { pattern: /package(-lock)?\.json$/i, tag: "DEPENDENCY_CHANGE", verdict: "WARNING" },
-    { pattern: /yarn\.lock$/i, tag: "DEPENDENCY_CHANGE", verdict: "WARNING" },
-    { pattern: /pnpm-lock\.yaml$/i, tag: "DEPENDENCY_CHANGE", verdict: "WARNING" },
-    { pattern: /\.(sql|migration)$/i, tag: "DB_SCHEMA_CHANGE", verdict: "WARNING" },
-    { pattern: /migrations?\//i, tag: "DB_SCHEMA_CHANGE", verdict: "WARNING" },
-    { pattern: /api\/.*\.(ts|js)$/i, tag: "API_CHANGE", verdict: "WARNING" },
-    { pattern: /routes?\.(ts|js)$/i, tag: "API_CHANGE", verdict: "WARNING" },
-    { pattern: /docker-compose\.ya?ml$/i, tag: "CONFIG_CHANGE", verdict: "WARNING" },
-    { pattern: /Dockerfile$/i, tag: "CONFIG_CHANGE", verdict: "WARNING" },
-    { pattern: /\.github\/workflows\//i, tag: "CONFIG_CHANGE", verdict: "WARNING" },
-];
-const CONTENT_PATTERNS = [
-    // Dangerous commands
-    { pattern: /rm\s+-rf/i, tag: "DELETE_COMMAND", verdict: "BLOCK" },
-    { pattern: /DROP\s+(TABLE|DATABASE)/i, tag: "DELETE_COMMAND", verdict: "BLOCK" },
-    { pattern: /TRUNCATE\s+TABLE/i, tag: "DELETE_COMMAND", verdict: "WARNING" },
-    // Secrets in content
-    { pattern: /password\s*[:=]\s*["'][^"']+["']/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /api[_-]?key\s*[:=]\s*["'][^"']+["']/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-    { pattern: /secret\s*[:=]\s*["'][^"']+["']/i, tag: "SECRET_DETECTED", verdict: "BLOCK" },
-];
-const ACTION_RULES = [
-    { tag: "SECRET_DETECTED", action: "Remove credentials from commit", priority: 1 },
-    { tag: "BLACK_ZONE_TOUCH", action: "Revert changes to BLACK zone files", priority: 2 },
-    { tag: "DELETE_COMMAND", action: "Review destructive commands", priority: 3 },
-    { tag: "ENV_CHANGE", action: "Ensure environment variables are managed", priority: 10 },
-    { tag: "CONFIG_CHANGE", action: "Review configuration changes", priority: 11 },
-    { tag: "DEPENDENCY_CHANGE", action: "Run security audit on dependencies", priority: 12 },
-    { tag: "DB_SCHEMA_CHANGE", action: "Verify database migration plan", priority: 13 },
-    { tag: "API_CHANGE", action: "Update API documentation", priority: 14 },
-    { tag: "TEST_MISSING", action: "Add tests for changed code", priority: 17 },
-    { verdict: "BLOCK", action: "Resolve blocking issues before proceeding", priority: 50 },
-    { verdict: "WARNING", action: "Review flagged items before merge", priority: 51 },
-];
-// ============================================================
-// Helper Functions
-// ============================================================
-function generateTraceId() {
-    const now = new Date();
-    const date = now.toISOString().slice(0, 10);
-    const random = Math.random().toString(36).substring(2, 8).toUpperCase();
-    return `D-${date}-${random}`;
-}
-function upgradeVerdict(current, candidate) {
-    const priority = { GO: 0, WARNING: 1, BLOCK: 2 };
-    return priority[candidate] > priority[current] ? candidate : current;
-}
-function runRuleBasedInference(input, changedFiles) {
-    const riskTags = new Set();
-    let maxVerdict = "GO";
-    // 1. File pattern check
-    for (const file of changedFiles) {
-        for (const rule of FILE_PATTERNS) {
-            if (rule.pattern.test(file)) {
-                riskTags.add(rule.tag);
-                if (rule.verdict) {
-                    maxVerdict = upgradeVerdict(maxVerdict, rule.verdict);
-                }
-            }
-        }
-    }
-    // 2. Content pattern check
-    for (const rule of CONTENT_PATTERNS) {
-        if (rule.pattern.test(input)) {
-            riskTags.add(rule.tag);
-            if (rule.verdict) {
-                maxVerdict = upgradeVerdict(maxVerdict, rule.verdict);
-            }
-        }
-    }
-    // 3. Test missing check
-    const hasCodeChange = changedFiles.some((f) => /\.(ts|js|tsx|jsx|py|go|rs|java)$/.test(f) && !f.includes(".test.") && !f.includes(".spec."));
-    const hasTestChange = changedFiles.some((f) => f.includes(".test.") || f.includes(".spec.") || f.includes("__tests__"));
-    if (hasCodeChange && !hasTestChange) {
-        riskTags.add("TEST_MISSING");
-        maxVerdict = upgradeVerdict(maxVerdict, "WARNING");
-    }
-    // 4. Generate reason
-    const tagsArray = Array.from(riskTags);
-    let reason = "safe code change";
-    if (tagsArray.length > 0) {
-        const reasonMap = {
-            SECRET_DETECTED: "potential secret or credential detected",
-            BLACK_ZONE_TOUCH: "forbidden file in BLACK zone modified",
-            DELETE_COMMAND: "destructive command detected",
-            ENV_CHANGE: "environment file modification detected",
-            CONFIG_CHANGE: "configuration file change requires review",
-            DEPENDENCY_CHANGE: "dependency update requires security review",
-            DB_SCHEMA_CHANGE: "database schema change requires migration review",
-            API_CHANGE: "API endpoint change may affect clients",
-            TEST_MISSING: "code change without corresponding tests",
-            PII_DETECTED: "personally identifiable information detected",
-            PERMISSION_CHANGE: "file permission change detected",
-            YELLOW_ZONE_TOUCH: "sensitive file in YELLOW zone modified",
-        };
-        const priorityTags = [
-            "SECRET_DETECTED", "BLACK_ZONE_TOUCH", "DELETE_COMMAND", "ENV_CHANGE",
-            "DB_SCHEMA_CHANGE", "API_CHANGE", "CONFIG_CHANGE", "DEPENDENCY_CHANGE",
-            "TEST_MISSING",
-        ];
-        for (const tag of priorityTags) {
-            if (tagsArray.includes(tag)) {
-                reason = reasonMap[tag];
-                break;
-            }
-        }
-    }
-    return {
-        risk_tags: tagsArray,
-        verdict: maxVerdict,
-        reason,
-    };
-}
-function generateNextActions(output) {
-    const actions = [];
-    const addedActions = new Set();
-    // Tag-based actions
-    for (const rule of ACTION_RULES) {
-        if (rule.tag && output.risk_tags.includes(rule.tag)) {
-            if (!addedActions.has(rule.action)) {
-                actions.push({ action: rule.action, priority: rule.priority });
-                addedActions.add(rule.action);
-            }
-        }
-    }
-    // Verdict-based fallback
-    if (actions.length === 0) {
-        for (const rule of ACTION_RULES) {
-            if (rule.verdict === output.verdict) {
-                if (!addedActions.has(rule.action)) {
-                    actions.push({ action: rule.action, priority: rule.priority });
-                    addedActions.add(rule.action);
-                }
-            }
-        }
-    }
-    actions.sort((a, b) => a.priority - b.priority);
-    return actions.slice(0, 5).map((a) => a.action);
-}
-function generateReviewFocus(changedFiles) {
-    const fileCategories = [
-        { pattern: /\.env/i, priority: 1 },
-        { pattern: /(credential|secret|key|token)/i, priority: 2 },
-        { pattern: /config\//i, priority: 3 },
-        { pattern: /api\//i, priority: 4 },
-        { pattern: /(migration|schema)/i, priority: 5 },
-        { pattern: /package.*\.json$/i, priority: 6 },
-        { pattern: /(docker|kubernetes)/i, priority: 7 },
-        { pattern: /\.github\//i, priority: 8 },
-    ];
-    const categorized = [];
-    for (const file of changedFiles) {
-        for (const cat of fileCategories) {
-            if (cat.pattern.test(file)) {
-                categorized.push({ file, priority: cat.priority });
-                break;
-            }
-        }
-    }
-    categorized.sort((a, b) => a.priority - b.priority);
-    return categorized.slice(0, 5).map((c) => c.file);
-}
-function getChangedFilesFromGit(basePath) {
-    const result = runGit(["diff", "--name-only", "HEAD"], { cwd: basePath });
-    if (result.code !== 0)
-        return [];
-    return result.stdout
-        .split(/\r?\n/)
-        .map((line) => line.trim())
-        .filter(Boolean);
-}
-// ============================================================
-// Trace Storage
-// ============================================================
-function getTracePath(basePath) {
-    return getBitnetTracePath(basePath);
-}
-function loadTraces(basePath) {
-    const tracePath = getTracePath(basePath);
-    const legacyPath = path.join(basePath, ".vibe-agent", "bitnet_traces.json");
-    try {
-        if (fs.existsSync(tracePath)) {
-            const content = fs.readFileSync(tracePath, "utf-8");
-            return JSON.parse(content);
-        }
-        if (fs.existsSync(legacyPath)) {
-            const content = fs.readFileSync(legacyPath, "utf-8");
-            return JSON.parse(content);
-        }
-    }
-    catch {
-        // Ignore
-    }
-    return [];
-}
-function saveTrace(basePath, entry) {
-    const tracePath = getTracePath(basePath);
-    const dir = getVibeBitnetCacheDir(basePath);
-    try {
-        ensureDirSync(dir);
-        const traces = loadTraces(basePath);
-        traces.unshift(entry); // Prepend
-        // Keep only last 1000 traces
-        const trimmed = traces.slice(0, 1000);
-        fs.writeFileSync(tracePath, JSON.stringify(trimmed, null, 2));
-        // Emit bitnet trace event (artifact + signal)
-        const note = buildBitnetNote(entry);
-        emitEvent({
-            runId: entry.trace_id ?? "bitnet",
-            type: "artifact.bitnet_signal_written",
-            reason: "bitnet_trace_saved",
-            paths: [tracePath],
-            component: "bitnet",
-            workspaceRoot: basePath,
-            note,
-        });
-        const signalType = deriveBitnetSignalType(entry.verdict);
-        emitEvent({
-            runId: entry.trace_id ?? "bitnet",
-            type: signalType,
-            reason: "bitnet_trace_saved",
-            paths: [tracePath],
-            component: "bitnet",
-            workspaceRoot: basePath,
-            note,
-        });
-    }
-    catch {
-        // Ignore storage errors
-    }
-}
-export function buildBitnetNote(entry) {
-    const risks = (entry.risk_tags || []).join(",");
-    const files = (entry.files || []).join(",");
-    return `verdict=${entry.verdict}; risks=${risks}; files=${files}`;
-}
-export function deriveBitnetSignalType(verdict) {
-    return verdict === "BLOCK" ? "signal.doubt_created" : "signal.risk_changed";
-}
-/**
- * Run sanity check via musu Rust engine (if available)
- */
-async function runMusuSanityCheck(workspace, files) {
-    if (!isMusuAvailable()) {
-        return { success: false, error: "musu binary not available" };
-    }
-    const adapter = getMusuAdapter();
-    try {
-        if (adapter.getStatus() !== "running") {
-            await adapter.start();
-        }
-        const response = await adapter.submitWork({
-            job_id: uuid(),
-            job_type: "sanity_check",
-            scope: {
-                workspace,
-                paths: files,
-                exclude_globs: ["**/node_modules/**", "**/.git/**"],
-            },
-            timeout_ms: 10000,
-        });
-        return { success: true, result: response };
-    }
-    catch (e) {
-        return { success: false, error: e instanceof Error ? e.message : String(e) };
-    }
-}
-/**
- * Convert musu response to BitNetCheckResult
- */
-function convertMusuResult(response, files, traceId, timestamp) {
-    const issues = response.result?.issues ?? [];
-    const hasErrors = issues.some((i) => i.severity === "error");
-    const hasWarnings = issues.some((i) => i.severity === "warning");
-    // Map musu issues to risk tags
-    const riskTags = [];
-    for (const issue of issues) {
-        if (issue.type === "secret" || issue.message?.toLowerCase().includes("secret")) {
-            riskTags.push("SECRET_DETECTED");
-        }
-        else if (issue.type === "env" || issue.message?.toLowerCase().includes("env")) {
-            riskTags.push("ENV_CHANGE");
-        }
-        else if (issue.type === "config") {
-            riskTags.push("CONFIG_CHANGE");
-        }
-    }
-    const verdict = hasErrors ? "BLOCK" : hasWarnings ? "WARNING" : "GO";
-    const status = verdict === "GO" ? "OK" : verdict === "WARNING" ? "WARNING" : "ERROR";
-    return {
-        status,
-        verdict,
-        risk_tags: riskTags,
-        reason: response.status === "completed"
-            ? (hasErrors ? "musu sanity check found errors" : "musu sanity check passed")
-            : "musu check incomplete",
-        next_actions: hasErrors
-            ? ["fix_issues", "run_bitnet_check_again"]
-            : hasWarnings
-                ? ["review_warnings"]
-                : ["proceed"],
-        review_focus: files.slice(0, 5),
-        trace_id: traceId,
-        checked_files: files,
-        timestamp,
-    };
-}
-// ============================================================
-// Tool Handlers
-// ============================================================
-export async function bitnetCheck(input) {
-    const basePath = process.cwd();
-    const traceId = generateTraceId();
-    const timestamp = new Date().toISOString();
-    // Get files to check
-    let filesToCheck = input.files || [];
-    if (filesToCheck.length === 0) {
-        filesToCheck = getChangedFilesFromGit(basePath);
-    }
-    // Try musu Rust engine first (if available)
-    const musuResult = await runMusuSanityCheck(basePath, filesToCheck);
-    if (musuResult.success && musuResult.result) {
-        const result = convertMusuResult(musuResult.result, filesToCheck, traceId, timestamp);
-        // Save trace for musu result
-        const traceEntry = {
-            trace_id: traceId,
-            timestamp,
-            verdict: result.verdict,
-            risk_tags: result.risk_tags,
-            reason: result.reason,
-            files: filesToCheck,
-        };
-        saveTrace(basePath, traceEntry);
-        return result;
-    }
-    // Fallback to TypeScript rule-based inference
-    const context = input.context || "";
-    const output = runRuleBasedInference(context, filesToCheck);
-    // Generate actions
-    const nextActions = generateNextActions(output);
-    const reviewFocus = generateReviewFocus(filesToCheck);
-    // Save trace
-    const traceEntry = {
-        trace_id: traceId,
-        timestamp,
-        verdict: output.verdict,
-        risk_tags: output.risk_tags,
-        reason: output.reason,
-        files: filesToCheck,
-    };
-    saveTrace(basePath, traceEntry);
-    // Build result
-    const status = output.verdict === "GO" ? "OK" : output.verdict === "WARNING" ? "WARNING" : "ERROR";
-    return {
-        status,
-        verdict: output.verdict,
-        risk_tags: output.risk_tags,
-        reason: output.reason,
-        next_actions: nextActions,
-        review_focus: reviewFocus,
-        trace_id: traceId,
-        checked_files: filesToCheck,
-        timestamp,
-    };
-}
-export async function bitnetTrace(input) {
-    const basePath = process.cwd();
-    const traces = loadTraces(basePath);
-    const gate = getFeatureGate();
-    const isPro = gate.isAllowed(POST_ANALYSIS_FEATURES.BITNET_TRACE);
-    // Base result
-    let tracesToReturn;
-    let message;
-    if (input.trace_id) {
-        tracesToReturn = traces.filter((t) => t.trace_id === input.trace_id);
-        message = tracesToReturn.length > 0 ? undefined : "Trace not found";
-    }
-    else {
-        // Pro tier gets extended history (up to 100), Free tier gets 10
-        const maxLimit = isPro ? 100 : 10;
-        const limit = Math.min(input.limit || 10, maxLimit);
-        tracesToReturn = traces.slice(0, limit);
-    }
-    const result = {
-        status: "OK",
-        traces: tracesToReturn,
-        message,
-    };
-    // Pro tier: Add telemetry if musu is running
-    if (isPro) {
-        try {
-            const adapter = getMusuAdapter();
-            if (adapter.getStatus() === "running") {
-                const telemetry = await adapter.getTelemetry();
-                result.telemetry = {
-                    cpu_percent: telemetry.cpu_percent,
-                    memory_percent: telemetry.memory_percent,
-                    active_jobs: telemetry.active_jobs,
-                    completed_jobs: telemetry.completed_jobs,
-                };
-            }
-        }
-        catch {
-            // Telemetry unavailable, continue without it
-        }
-        result.pro_features = {
-            extended_history: true,
-            telemetry_available: !!result.telemetry,
-        };
-    }
-    return result;
-}
-function toolResult(data) {
-    return {
-        content: [{ type: "text", text: JSON.stringify(data, null, 2) }],
-        structuredContent: data,
-    };
-}
-function err(reason, message) {
-    const out = {
-        status: "ERROR",
-        reason,
-        message,
-    };
-    return {
-        content: [{ type: "text", text: JSON.stringify(out, null, 2) }],
-        structuredContent: out,
-        isError: true,
-    };
-}
-// ============================================================
-// MCP Tool Handlers
-// ============================================================
-export async function bitnetCheckHandler(input) {
-    try {
-        const result = await bitnetCheck(input);
-        const validated = bitnetCheckOutputSchema.parse(result);
-        return toolResult(validated);
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        return err("bitnet_check_failed", msg);
-    }
-}
-export async function bitnetTraceHandler(input) {
-    try {
-        const result = await bitnetTrace(input);
-        const validated = bitnetTraceOutputSchema.parse(result);
-        return toolResult(validated);
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        return err("bitnet_trace_failed", msg);
-    }
-}
-// ============================================================
-// Export
-// ============================================================
-export function defineBitNetTools() {
-    return {
-        // Input schemas
-        bitnetCheckInputSchema,
-        bitnetTraceInputSchema,
-        // Tool handlers
-        bitnetCheckHandler,
-        bitnetTraceHandler,
-    };
-}
-export const BITNET_TOOL_DESCRIPTIONS = {
-    "bitnet.check": "BitNet 감사. 변경 파일의 위험도 분석.",
-    "bitnet.trace": "BitNet 추적 이력 조회.",
-    "bitnet.signal": "BitNet Signal 생성. 자율 처리용 상태/추천/리스크 분석.",
-};
-import { guessState, determineRiskLevel, suggestNextActions, checkSSOTFiles, findCurrentRunId, } from "../vibe_pm/state-guesser.js";
-import { proposeAutopilot, loadAutopilotPolicy, } from "../vibe_pm/autopilot.js";
-// Signal input schema (extends check input)
-export const bitnetSignalInputSchema = z.object({
-    files: z.array(z.string()).optional().describe("변경된 파일 목록 (생략 시 git diff로 자동 감지)"),
-    context: z.string().optional().describe("추가 컨텍스트 (코드 스니펫 등)"),
-    project_id: z.string().optional().describe("프로젝트 ID (생략 시 현재 폴더 사용)"),
-    include_autopilot: z.boolean().optional().default(true).describe("Autopilot 제안 포함 여부"),
-});
-// Signal output schema
-export const bitnetSignalOutputSchema = z.object({
-    schema_version: z.literal("bitnet_signal.v1"),
-    state_guess: z.object({
-        phase: z.string(),
-        confidence: z.number(),
-        evidence: z.array(z.string()),
-    }),
-    next_actions: z.array(z.object({
-        tool: z.string(),
-        priority: z.number(),
-        reason: z.string(),
-        autopilot_eligible: z.boolean(),
-    })),
-    risk_signals: z.object({
-        level: z.string(),
-        tags: z.array(z.string()),
-        blocking: z.boolean(),
-    }),
-    trace_id: z.string(),
-    timestamp: z.string(),
-    checked_files: z.array(z.string()).optional(),
-    autopilot: z.object({
-        eligible: z.boolean(),
-        proposed_action: z.string().nullable(),
-        proposed_tool: z.string().nullable(),
-        reason: z.string(),
-        blocked_by: z.array(z.string()),
-    }).optional(),
-    tier_info: z.object({
-        plan: z.enum(["FREE", "PRO"]),
-        concurrent_slots: z.object({
-            used: z.number(),
-            max: z.number(),
-        }),
-        pro_features_available: z.array(z.string()),
-    }).optional(),
-});
-/**
- * Generate BitNet Signal for autonomous layer
- * Combines: risk analysis + state guess + next actions + autopilot proposal
- */
-export async function bitnetSignal(input) {
-    const basePath = process.cwd();
-    const timestamp = new Date().toISOString();
-    // 1. Run standard BitNet check first
-    const checkResult = await bitnetCheck({
-        files: input.files,
-        context: input.context,
-        project_id: input.project_id,
-    });
-    // 2. Determine risk level from tags
-    const riskLevel = determineRiskLevel(checkResult.risk_tags);
-    // 3. Guess current state
-    const stateGuess = guessState({
-        basePath,
-        riskTags: checkResult.risk_tags,
-        recentActivity: {
-            dirtyFileCount: checkResult.checked_files.length,
-            lastBitNetRun: new Date(),
-        },
-    });
-    // 4. Get SSOT files for action suggestions
-    const runId = findCurrentRunId(basePath);
-    const ssotFiles = runId ? checkSSOTFiles(basePath, runId) : {
-        ticket: false,
-        spec: false,
-        plan: false,
-        verdict: false,
-        decision: false,
-    };
-    // 5. Generate structured next_actions
-    const nextActions = suggestNextActions(stateGuess.phase, riskLevel, ssotFiles);
-    // 6. Build risk signals
-    const riskSignals = {
-        level: riskLevel,
-        tags: checkResult.risk_tags,
-        blocking: checkResult.verdict === "BLOCK",
-    };
-    // 7. Get tier info
-    const tierInfo = getTierInfo();
-    // 8. Build the signal
-    const signal = {
-        schema_version: "bitnet_signal.v1",
-        state_guess: stateGuess,
-        next_actions: nextActions,
-        risk_signals: riskSignals,
-        trace_id: checkResult.trace_id,
-        timestamp,
-        checked_files: checkResult.checked_files,
-    };
-    // 9. Optionally add autopilot proposal
-    if (input.include_autopilot !== false) {
-        const policy = loadAutopilotPolicy(basePath);
-        const autopilotProposal = proposeAutopilot(signal, policy);
-        return {
-            ...signal,
-            autopilot: autopilotProposal,
-            tier_info: tierInfo,
-        };
-    }
-    return {
-        ...signal,
-        tier_info: tierInfo,
-    };
-}
-/**
- * MCP Tool Handler for bitnet.signal
- */
-export async function bitnetSignalHandler(input) {
-    try {
-        const result = await bitnetSignal(input);
-        return toolResult(result);
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        return err("bitnet_signal_failed", msg);
-    }
-}
-/**
- * Get tier info for signal output
- */
-function getTierInfo() {
-    try {
-        const manager = new LicenseManager();
-        const entitlements = manager.loadEntitlements();
-        const slots = calcSlotLimits();
-        const isPro = entitlements.planEffective === "PRO";
-        const proFeatures = isPro
-            ? ["scorecard", "policy_analysis", "auto_fix", "bitnet_trace", "signal_logger", "bitnet_cache"]
-            : [];
-        return {
-            plan: entitlements.planEffective,
-            concurrent_slots: {
-                used: 0, // Would need queue stats for actual usage
-                max: isPro ? slots.paid : slots.free,
-            },
-            pro_features_available: proFeatures,
-        };
-    }
-    catch {
-        // FAIL-SAFE: Return FREE tier info on error
-        const slots = calcSlotLimits();
-        return {
-            plan: "FREE",
-            concurrent_slots: {
-                used: 0,
-                max: slots.free,
-            },
-            pro_features_available: [],
-        };
-    }
-}
-// Update defineBitNetTools to include signal
-export function defineBitNetToolsV2() {
-    return {
-        // Input schemas
-        bitnetCheckInputSchema,
-        bitnetTraceInputSchema,
-        bitnetSignalInputSchema,
-        // Tool handlers
-        bitnetCheckHandler,
-        bitnetTraceHandler,
-        bitnetSignalHandler,
-    };
-}
+ * This module preserves the public export surface while splitting implementation
+ * details into smaller modules under `./*`.
+ */
+export * from './types.js';
+export * from './schemas.js';
+export * from './rules.js';
+export * from './git.js';
+export * from './trace_store.js';
+export * from './context.js';
+export * from './api.js';