context-gatekeeper 0.3.0

package/dist/scripts/agents/base.js

@@ -0,0 +1,148 @@
+/**
+ * Base adapter interface for MCP-compatible agents.
+ *
+ * Each adapter encapsulates how a specific AI agent runtime
+ * spawns a child process and communicates with the
+ * Context Gatekeeper MCP server.
+ */
+import { spawn } from 'node:child_process';
+import { writeFileSync, mkdtempSync, rmSync, existsSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { resolve as resolvePath } from 'node:path';
+/**
+ * Abstract base class for agent adapters.
+ *
+ * Subclasses must implement `buildSpawnCommand` to construct the
+ * child process invocation. The base class handles:
+ *  - temp directory creation and cleanup
+ *  - MCP config file generation
+ *  - child process lifecycle (spawn, stdin/stdout JSON-RPC, kill)
+ */
+export class BaseAgentAdapter {
+    child = null;
+    dataDir;
+    mcpConfigPath;
+    config;
+    constructor(config) {
+        this.config = config;
+        this.dataDir =
+            config.dataDir ?? mkdtempSync(join(tmpdir(), `cg-${config.name}-`));
+        this.mcpConfigPath = join(this.dataDir, 'mcp-config.json');
+        writeFileSync(this.mcpConfigPath, JSON.stringify(config.mcpConfig, null, 2));
+    }
+    /** Spawn the agent child process. Returns the process handle. */
+    spawnAgent(prompt) {
+        const { command, args, env } = this.buildSpawnCommand();
+        const mergedEnv = {
+            ...process.env,
+            ...env,
+            DATA_DIR: this.dataDir,
+            ...(this.config.tokens?.read ? { CG_READ_TOKEN: this.config.tokens.read } : {}),
+            ...(this.config.tokens?.write ? { CG_WRITE_TOKEN: this.config.tokens.write } : {}),
+            ...(this.config.tokens?.watchdog ? { CG_WATCHDOG_TOKEN: this.config.tokens.watchdog } : {}),
+            CG_LOG_LEVEL: process.env.CG_LOG_LEVEL ?? 'warn',
+            MCP_CONFIG_PATH: this.mcpConfigPath,
+        };
+        this.child = spawn(command, [...args, prompt], {
+            env: mergedEnv,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            cwd: this.dataDir,
+        });
+        return this.child;
+    }
+    /** Read MCP server binary path from config. */
+    getMcpServerCommand() {
+        const cfg = this.config.mcpConfig;
+        // Shape A: { mcpServers: { 'context-gatekeeper': { command, args } } }
+        const a = cfg.mcpServers?.['context-gatekeeper'];
+        if (a)
+            return { command: a.command, args: a.args };
+        // Shape B (Continue.dev): { experimental: { modelContextProtocolServers: [{ name, command, args }] } }
+        const b = cfg
+            .experimental?.modelContextProtocolServers?.find((s) => s.name === 'context-gatekeeper');
+        if (b)
+            return { command: b.command, args: b.args };
+        throw new Error(`mcpServers.context-gatekeeper not configured for agent ${this.name}`);
+    }
+    /** Build environment variables for a direct MCP server subprocess test. */
+    buildMcpServerEnv(extra) {
+        const cg = this.getMcpServerCommand();
+        return {
+            ...process.env,
+            DATA_DIR: this.dataDir,
+            ...(this.config.tokens?.read ? { CG_READ_TOKEN: this.config.tokens.read } : {}),
+            ...(this.config.tokens?.write ? { CG_WRITE_TOKEN: this.config.tokens.write } : {}),
+            ...(this.config.tokens?.watchdog ? { CG_WATCHDOG_TOKEN: this.config.tokens.watchdog } : {}),
+            CG_LOG_LEVEL: process.env.CG_LOG_LEVEL ?? 'warn',
+            MCP_CONFIG_PATH: this.mcpConfigPath,
+            CG_SERVER_CMD: cg.command,
+            CG_SERVER_ARGS: cg.args.join(' '),
+            ...extra,
+        };
+    }
+    /** Wait for the child to exit. Resolves with the exit code. */
+    async waitForExit(timeoutMs = this.config.timeoutMs ?? 30000) {
+        if (!this.child)
+            throw new Error(`Agent ${this.name} not spawned`);
+        const child = this.child;
+        return new Promise((resolve, reject) => {
+            let stdout = '';
+            let stderr = '';
+            const timer = setTimeout(() => {
+                try {
+                    child.kill('SIGTERM');
+                }
+                catch { /* ignore */ }
+                reject(new Error(`Agent ${this.name} timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+            child.stdout?.on('data', (chunk) => { stdout += chunk.toString(); });
+            child.stderr?.on('data', (chunk) => { stderr += chunk.toString(); });
+            child.on('exit', (code) => {
+                clearTimeout(timer);
+                resolve({ code, stdout, stderr });
+            });
+            child.on('error', (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    }
+    /** Clean up temp directories. */
+    cleanup() {
+        try {
+            if (this.child && !this.child.killed) {
+                this.child.kill('SIGTERM');
+            }
+        }
+        catch { /* ignore */ }
+        if (existsSync(this.dataDir)) {
+            try {
+                rmSync(this.dataDir, { recursive: true, force: true });
+            }
+            catch { /* ignore */ }
+        }
+    }
+    /** Get the absolute path to the temp data directory for this agent run. */
+    getDataDir() {
+        return this.dataDir;
+    }
+}
+/** Resolve the MCP server binary path that will be used by all adapters. */
+export function resolveMcpServerBin() {
+    const pkgRoot = resolvePath(process.cwd());
+    const candidates = [
+        join(pkgRoot, 'dist', 'mcp', 'server.js'),
+        join(pkgRoot, 'src', 'mcp', 'server.ts'),
+    ];
+    for (const path of candidates) {
+        if (existsSync(path)) {
+            if (path.endsWith('.ts')) {
+                return { command: 'npx', args: ['tsx', path] };
+            }
+            return { command: process.execPath, args: [path] };
+        }
+    }
+    throw new Error(`Cannot find MCP server binary. Looked in: ${candidates.join(', ')}. Run 'npm run build' first.`);
+}
+//# sourceMappingURL=base.js.map

package/dist/scripts/agents/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["base.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAgB,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAwCnD;;;;;;;;GAQG;AACH,MAAM,OAAgB,gBAAgB;IAC1B,KAAK,GAAwB,IAAI,CAAC;IAClC,OAAO,CAAS;IAChB,aAAa,CAAS;IACtB,MAAM,CAAc;IAE9B,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO;YACV,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC3D,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IASD,iEAAiE;IACjE,UAAU,CAAC,MAAc;QACvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG;YAChB,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,GAAG;YACN,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM;YAChD,eAAe,EAAE,IAAI,CAAC,aAAa;SACpC,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE;YAC7C,GAAG,EAAE,SAA8B;YACnC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,OAAO;SAClB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,+CAA+C;IACrC,mBAAmB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAClC,uEAAuE;QACvE,MAAM,CAAC,GAAI,GAA4E,CAAC,UAAU,EAAE,CAAC,oBAAoB,CAAC,CAAC;QAC3H,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,uGAAuG;QACvG,MAAM,CAAC,GAAI,GAAqH;aAC7H,YAAY,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QAC3F,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,2EAA2E;IAC3E,iBAAiB,CAAC,KAA0C;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACtC,OAAO;YACL,GAAG,OAAO,CAAC,GAAG;YACd,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM;YAChD,eAAe,EAAE,IAAI,CAAC,aAAa;YACnC,aAAa,EAAE,EAAE,CAAC,OAAO;YACzB,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACjC,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK;QAC1D,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACrD,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,oBAAoB,SAAS,IAAI,CAAC,CAAC,CAAC;YACzE,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,OAAO;QACL,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC;KACzC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACjD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;AACpH,CAAC"}

package/dist/scripts/agents/base.ts

@@ -0,0 +1,193 @@
+/**
+ * Base adapter interface for MCP-compatible agents.
+ *
+ * Each adapter encapsulates how a specific AI agent runtime
+ * spawns a child process and communicates with the
+ * Context Gatekeeper MCP server.
+ */
+
+import { spawn, ChildProcess } from 'node:child_process';
+import { writeFileSync, mkdtempSync, rmSync, existsSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { resolve as resolvePath } from 'node:path';
+
+export type PermissionLevel = 'read' | 'write' | 'watchdog';
+
+export interface AgentConfig {
+  /** Name of the agent (used in reports) */
+  name: string;
+  /** Path to the agent CLI binary */
+  cliPath?: string;
+  /** Optional arguments to pass before the prompt */
+  cliArgs?: string[];
+  /** MCP config object written to a temp file before spawning */
+  mcpConfig: Record<string, unknown>;
+  /** Token configuration for Watchdog tests */
+  tokens?: {
+    read?: string;
+    write?: string;
+    watchdog?: string;
+  };
+  /** Per-agent DATA_DIR override */
+  dataDir?: string;
+  /** Timeout in ms for any single tool call (default 30000) */
+  timeoutMs?: number;
+}
+
+export interface ToolCallResult {
+  agent: string;
+  tool: string;
+  success: boolean;
+  latencyMs: number;
+  payload?: unknown;
+  error?: string;
+  raw?: string;
+}
+
+export interface ToolCallRequest {
+  tool: string;
+  arguments: Record<string, unknown>;
+}
+
+/**
+ * Abstract base class for agent adapters.
+ *
+ * Subclasses must implement `buildSpawnCommand` to construct the
+ * child process invocation. The base class handles:
+ *  - temp directory creation and cleanup
+ *  - MCP config file generation
+ *  - child process lifecycle (spawn, stdin/stdout JSON-RPC, kill)
+ */
+export abstract class BaseAgentAdapter {
+  protected child: ChildProcess | null = null;
+  protected dataDir: string;
+  protected mcpConfigPath: string;
+  protected config: AgentConfig;
+
+  constructor(config: AgentConfig) {
+    this.config = config;
+    this.dataDir =
+      config.dataDir ?? mkdtempSync(join(tmpdir(), `cg-${config.name}-`));
+    this.mcpConfigPath = join(this.dataDir, 'mcp-config.json');
+    writeFileSync(this.mcpConfigPath, JSON.stringify(config.mcpConfig, null, 2));
+  }
+
+  abstract get name(): string;
+  abstract buildSpawnCommand(): {
+    command: string;
+    args: string[];
+    env: Record<string, string | undefined>;
+  };
+
+  /** Spawn the agent child process. Returns the process handle. */
+  spawnAgent(prompt: string): ChildProcess {
+    const { command, args, env } = this.buildSpawnCommand();
+    const mergedEnv = {
+      ...process.env,
+      ...env,
+      DATA_DIR: this.dataDir,
+      ...(this.config.tokens?.read ? { CG_READ_TOKEN: this.config.tokens.read } : {}),
+      ...(this.config.tokens?.write ? { CG_WRITE_TOKEN: this.config.tokens.write } : {}),
+      ...(this.config.tokens?.watchdog ? { CG_WATCHDOG_TOKEN: this.config.tokens.watchdog } : {}),
+      CG_LOG_LEVEL: process.env.CG_LOG_LEVEL ?? 'warn',
+      MCP_CONFIG_PATH: this.mcpConfigPath,
+    };
+    this.child = spawn(command, [...args, prompt], {
+      env: mergedEnv as NodeJS.ProcessEnv,
+      stdio: ['pipe', 'pipe', 'pipe'],
+      cwd: this.dataDir,
+    });
+    return this.child;
+  }
+
+  /** Read MCP server binary path from config. */
+  protected getMcpServerCommand(): { command: string; args: string[] } {
+    const cfg = this.config.mcpConfig;
+    // Shape A: { mcpServers: { 'context-gatekeeper': { command, args } } }
+    const a = (cfg as { mcpServers?: Record<string, { command: string; args: string[] }> }).mcpServers?.['context-gatekeeper'];
+    if (a) return { command: a.command, args: a.args };
+    // Shape B (Continue.dev): { experimental: { modelContextProtocolServers: [{ name, command, args }] } }
+    const b = (cfg as { experimental?: { modelContextProtocolServers?: Array<{ name: string; command: string; args: string[] }> } })
+      .experimental?.modelContextProtocolServers?.find((s) => s.name === 'context-gatekeeper');
+    if (b) return { command: b.command, args: b.args };
+    throw new Error(`mcpServers.context-gatekeeper not configured for agent ${this.name}`);
+  }
+
+  /** Build environment variables for a direct MCP server subprocess test. */
+  buildMcpServerEnv(extra?: Record<string, string | undefined>): Record<string, string | undefined> {
+    const cg = this.getMcpServerCommand();
+    return {
+      ...process.env,
+      DATA_DIR: this.dataDir,
+      ...(this.config.tokens?.read ? { CG_READ_TOKEN: this.config.tokens.read } : {}),
+      ...(this.config.tokens?.write ? { CG_WRITE_TOKEN: this.config.tokens.write } : {}),
+      ...(this.config.tokens?.watchdog ? { CG_WATCHDOG_TOKEN: this.config.tokens.watchdog } : {}),
+      CG_LOG_LEVEL: process.env.CG_LOG_LEVEL ?? 'warn',
+      MCP_CONFIG_PATH: this.mcpConfigPath,
+      CG_SERVER_CMD: cg.command,
+      CG_SERVER_ARGS: cg.args.join(' '),
+      ...extra,
+    };
+  }
+
+  /** Wait for the child to exit. Resolves with the exit code. */
+  async waitForExit(timeoutMs = this.config.timeoutMs ?? 30000): Promise<{ code: number | null; stdout: string; stderr: string }> {
+    if (!this.child) throw new Error(`Agent ${this.name} not spawned`);
+    const child = this.child;
+    return new Promise((resolve, reject) => {
+      let stdout = '';
+      let stderr = '';
+      const timer = setTimeout(() => {
+        try { child.kill('SIGTERM'); } catch { /* ignore */ }
+        reject(new Error(`Agent ${this.name} timed out after ${timeoutMs}ms`));
+      }, timeoutMs);
+
+      child.stdout?.on('data', (chunk: Buffer) => { stdout += chunk.toString(); });
+      child.stderr?.on('data', (chunk: Buffer) => { stderr += chunk.toString(); });
+      child.on('exit', (code) => {
+        clearTimeout(timer);
+        resolve({ code, stdout, stderr });
+      });
+      child.on('error', (err) => {
+        clearTimeout(timer);
+        reject(err);
+      });
+    });
+  }
+
+  /** Clean up temp directories. */
+  cleanup(): void {
+    try {
+      if (this.child && !this.child.killed) {
+        this.child.kill('SIGTERM');
+      }
+    } catch { /* ignore */ }
+    if (existsSync(this.dataDir)) {
+      try { rmSync(this.dataDir, { recursive: true, force: true }); } catch { /* ignore */ }
+    }
+  }
+
+  /** Get the absolute path to the temp data directory for this agent run. */
+  getDataDir(): string {
+    return this.dataDir;
+  }
+}
+
+/** Resolve the MCP server binary path that will be used by all adapters. */
+export function resolveMcpServerBin(): { command: string; args: string[] } {
+  const pkgRoot = resolvePath(process.cwd());
+  const candidates = [
+    join(pkgRoot, 'dist', 'mcp', 'server.js'),
+    join(pkgRoot, 'src', 'mcp', 'server.ts'),
+  ];
+  for (const path of candidates) {
+    if (existsSync(path)) {
+      if (path.endsWith('.ts')) {
+        return { command: 'npx', args: ['tsx', path] };
+      }
+      return { command: process.execPath, args: [path] };
+    }
+  }
+  throw new Error(`Cannot find MCP server binary. Looked in: ${candidates.join(', ')}. Run 'npm run build' first.`);
+}

package/dist/scripts/agents/claude-code.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Claude Code adapter.
+ *
+ * Claude Code reads `.mcp.json` from the project root. This adapter uses the
+ * same configuration shape and validates that the MCP server is discoverable
+ * by spawning it directly.
+ */
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+export declare class ClaudeCodeAdapter extends BaseAgentAdapter {
+    get name(): string;
+    buildSpawnCommand(): {
+        command: string;
+        args: string[];
+        env: Record<string, string | undefined>;
+    };
+    static buildMcpConfig(mcpBin: {
+        command: string;
+        args: string[];
+    }): AgentConfig['mcpConfig'];
+}
+//# sourceMappingURL=claude-code.d.ts.map

package/dist/scripts/agents/claude-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE1D,qBAAa,iBAAkB,SAAQ,gBAAgB;IACrD,IAAa,IAAI,IAAI,MAAM,CAE1B;IAEQ,iBAAiB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE;IAS1G,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,WAAW,CAAC,WAAW,CAAC;CAW7F"}

package/dist/scripts/agents/claude-code.js

@@ -0,0 +1,33 @@
+/**
+ * Claude Code adapter.
+ *
+ * Claude Code reads `.mcp.json` from the project root. This adapter uses the
+ * same configuration shape and validates that the MCP server is discoverable
+ * by spawning it directly.
+ */
+import { BaseAgentAdapter } from './base.ts';
+export class ClaudeCodeAdapter extends BaseAgentAdapter {
+    get name() {
+        return 'claude-code';
+    }
+    buildSpawnCommand() {
+        const cliPath = this.config.cliPath ?? 'claude';
+        return {
+            command: cliPath,
+            args: ['--mcp-config', this.mcpConfigPath, '--print', 'noop'],
+            env: this.buildMcpServerEnv(),
+        };
+    }
+    static buildMcpConfig(mcpBin) {
+        return {
+            mcpServers: {
+                'context-gatekeeper': {
+                    command: mcpBin.command,
+                    args: mcpBin.args,
+                    type: 'stdio',
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=claude-code.js.map

package/dist/scripts/agents/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAe,MAAM,WAAW,CAAC;AAE1D,MAAM,OAAO,iBAAkB,SAAQ,gBAAgB;IACrD,IAAa,IAAI;QACf,OAAO,aAAa,CAAC;IACvB,CAAC;IAEQ,iBAAiB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;YAC7D,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,MAA2C;QAC/D,OAAO;YACL,UAAU,EAAE;gBACV,oBAAoB,EAAE;oBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,OAAO;iBACd;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/scripts/agents/claude-code.ts

@@ -0,0 +1,36 @@
+/**
+ * Claude Code adapter.
+ *
+ * Claude Code reads `.mcp.json` from the project root. This adapter uses the
+ * same configuration shape and validates that the MCP server is discoverable
+ * by spawning it directly.
+ */
+
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+
+export class ClaudeCodeAdapter extends BaseAgentAdapter {
+  override get name(): string {
+    return 'claude-code';
+  }
+
+  override buildSpawnCommand(): { command: string; args: string[]; env: Record<string, string | undefined> } {
+    const cliPath = this.config.cliPath ?? 'claude';
+    return {
+      command: cliPath,
+      args: ['--mcp-config', this.mcpConfigPath, '--print', 'noop'],
+      env: this.buildMcpServerEnv(),
+    };
+  }
+
+  static buildMcpConfig(mcpBin: { command: string; args: string[] }): AgentConfig['mcpConfig'] {
+    return {
+      mcpServers: {
+        'context-gatekeeper': {
+          command: mcpBin.command,
+          args: mcpBin.args,
+          type: 'stdio',
+        },
+      },
+    };
+  }
+}

package/dist/scripts/agents/claude-desktop.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Claude Desktop adapter.
+ *
+ * Claude Desktop reads `~/Library/Application Support/Claude/claude_desktop_config.json`
+ * on macOS or `%APPDATA%/Claude/claude_desktop_config.json` on Windows.
+ *
+ * This adapter uses the same JSON shape and the same stdio-based MCP server
+ * contract that Claude Desktop launches. The adapter additionally exercises
+ * the optional `claude` CLI for headless smoke testing when available.
+ */
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+export declare class ClaudeDesktopAdapter extends BaseAgentAdapter {
+    get name(): string;
+    buildSpawnCommand(): {
+        command: string;
+        args: string[];
+        env: Record<string, string | undefined>;
+    };
+    /** Build the standard `claude_desktop_config.json` shape. */
+    static buildMcpConfig(mcpBin: {
+        command: string;
+        args: string[];
+    }): AgentConfig['mcpConfig'];
+}
+//# sourceMappingURL=claude-desktop.d.ts.map

package/dist/scripts/agents/claude-desktop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-desktop.d.ts","sourceRoot":"","sources":["claude-desktop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE1D,qBAAa,oBAAqB,SAAQ,gBAAgB;IACxD,IAAa,IAAI,IAAI,MAAM,CAE1B;IAEQ,iBAAiB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE;IAS1G,6DAA6D;IAC7D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,WAAW,CAAC,WAAW,CAAC;CAU7F"}

package/dist/scripts/agents/claude-desktop.js

@@ -0,0 +1,36 @@
+/**
+ * Claude Desktop adapter.
+ *
+ * Claude Desktop reads `~/Library/Application Support/Claude/claude_desktop_config.json`
+ * on macOS or `%APPDATA%/Claude/claude_desktop_config.json` on Windows.
+ *
+ * This adapter uses the same JSON shape and the same stdio-based MCP server
+ * contract that Claude Desktop launches. The adapter additionally exercises
+ * the optional `claude` CLI for headless smoke testing when available.
+ */
+import { BaseAgentAdapter } from './base.ts';
+export class ClaudeDesktopAdapter extends BaseAgentAdapter {
+    get name() {
+        return 'claude-desktop';
+    }
+    buildSpawnCommand() {
+        const cg = this.getMcpServerCommand();
+        return {
+            command: cg.command,
+            args: cg.args,
+            env: this.buildMcpServerEnv(),
+        };
+    }
+    /** Build the standard `claude_desktop_config.json` shape. */
+    static buildMcpConfig(mcpBin) {
+        return {
+            mcpServers: {
+                'context-gatekeeper': {
+                    command: mcpBin.command,
+                    args: mcpBin.args,
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=claude-desktop.js.map

package/dist/scripts/agents/claude-desktop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-desktop.js","sourceRoot":"","sources":["claude-desktop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,gBAAgB,EAAe,MAAM,WAAW,CAAC;AAE1D,MAAM,OAAO,oBAAqB,SAAQ,gBAAgB;IACxD,IAAa,IAAI;QACf,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEQ,iBAAiB;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,CAAC,cAAc,CAAC,MAA2C;QAC/D,OAAO;YACL,UAAU,EAAE;gBACV,oBAAoB,EAAE;oBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/scripts/agents/claude-desktop.ts

@@ -0,0 +1,39 @@
+/**
+ * Claude Desktop adapter.
+ *
+ * Claude Desktop reads `~/Library/Application Support/Claude/claude_desktop_config.json`
+ * on macOS or `%APPDATA%/Claude/claude_desktop_config.json` on Windows.
+ *
+ * This adapter uses the same JSON shape and the same stdio-based MCP server
+ * contract that Claude Desktop launches. The adapter additionally exercises
+ * the optional `claude` CLI for headless smoke testing when available.
+ */
+
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+
+export class ClaudeDesktopAdapter extends BaseAgentAdapter {
+  override get name(): string {
+    return 'claude-desktop';
+  }
+
+  override buildSpawnCommand(): { command: string; args: string[]; env: Record<string, string | undefined> } {
+    const cg = this.getMcpServerCommand();
+    return {
+      command: cg.command,
+      args: cg.args,
+      env: this.buildMcpServerEnv(),
+    };
+  }
+
+  /** Build the standard `claude_desktop_config.json` shape. */
+  static buildMcpConfig(mcpBin: { command: string; args: string[] }): AgentConfig['mcpConfig'] {
+    return {
+      mcpServers: {
+        'context-gatekeeper': {
+          command: mcpBin.command,
+          args: mcpBin.args,
+        },
+      },
+    };
+  }
+}

package/dist/scripts/agents/cline.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Cline adapter.
+ *
+ * Cline reads MCP server configs from VSCode workspace settings. This adapter
+ * uses the Cline CLI (`cline`) when available, falling back to a direct MCP
+ * stdio invocation. The MCP server configuration shape matches what Cline
+ * generates internally.
+ */
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+export declare class ClineAdapter extends BaseAgentAdapter {
+    get name(): string;
+    buildSpawnCommand(): {
+        command: string;
+        args: string[];
+        env: Record<string, string | undefined>;
+    };
+    static buildMcpConfig(mcpBin: {
+        command: string;
+        args: string[];
+    }): AgentConfig['mcpConfig'];
+}
+//# sourceMappingURL=cline.d.ts.map

package/dist/scripts/agents/cline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cline.d.ts","sourceRoot":"","sources":["cline.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE1D,qBAAa,YAAa,SAAQ,gBAAgB;IAChD,IAAa,IAAI,IAAI,MAAM,CAE1B;IAEQ,iBAAiB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE;IAU1G,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,WAAW,CAAC,WAAW,CAAC;CAW7F"}

package/dist/scripts/agents/cline.js

@@ -0,0 +1,35 @@
+/**
+ * Cline adapter.
+ *
+ * Cline reads MCP server configs from VSCode workspace settings. This adapter
+ * uses the Cline CLI (`cline`) when available, falling back to a direct MCP
+ * stdio invocation. The MCP server configuration shape matches what Cline
+ * generates internally.
+ */
+import { BaseAgentAdapter } from './base.ts';
+export class ClineAdapter extends BaseAgentAdapter {
+    get name() {
+        return 'cline';
+    }
+    buildSpawnCommand() {
+        const cliPath = this.config.cliPath ?? 'cline';
+        const prompt = this.config.cliArgs?.[0] ?? 'noop';
+        return {
+            command: cliPath,
+            args: ['--mcp-config', this.mcpConfigPath, '--prompt', prompt, '--output', 'json'],
+            env: this.buildMcpServerEnv(),
+        };
+    }
+    static buildMcpConfig(mcpBin) {
+        return {
+            mcpServers: {
+                'context-gatekeeper': {
+                    command: mcpBin.command,
+                    args: mcpBin.args,
+                    disabled: false,
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=cline.js.map

package/dist/scripts/agents/cline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cline.js","sourceRoot":"","sources":["cline.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAe,MAAM,WAAW,CAAC;AAE1D,MAAM,OAAO,YAAa,SAAQ,gBAAgB;IAChD,IAAa,IAAI;QACf,OAAO,OAAO,CAAC;IACjB,CAAC;IAEQ,iBAAiB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;YAClF,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,MAA2C;QAC/D,OAAO;YACL,UAAU,EAAE;gBACV,oBAAoB,EAAE;oBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ,EAAE,KAAK;iBAChB;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/scripts/agents/cline.ts

@@ -0,0 +1,38 @@
+/**
+ * Cline adapter.
+ *
+ * Cline reads MCP server configs from VSCode workspace settings. This adapter
+ * uses the Cline CLI (`cline`) when available, falling back to a direct MCP
+ * stdio invocation. The MCP server configuration shape matches what Cline
+ * generates internally.
+ */
+
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+
+export class ClineAdapter extends BaseAgentAdapter {
+  override get name(): string {
+    return 'cline';
+  }
+
+  override buildSpawnCommand(): { command: string; args: string[]; env: Record<string, string | undefined> } {
+    const cliPath = this.config.cliPath ?? 'cline';
+    const prompt = this.config.cliArgs?.[0] ?? 'noop';
+    return {
+      command: cliPath,
+      args: ['--mcp-config', this.mcpConfigPath, '--prompt', prompt, '--output', 'json'],
+      env: this.buildMcpServerEnv(),
+    };
+  }
+
+  static buildMcpConfig(mcpBin: { command: string; args: string[] }): AgentConfig['mcpConfig'] {
+    return {
+      mcpServers: {
+        'context-gatekeeper': {
+          command: mcpBin.command,
+          args: mcpBin.args,
+          disabled: false,
+        },
+      },
+    };
+  }
+}