pr-checkmate 3.3.0 → 4.0.1

package/dist/esm/utils/result-collector.d.ts

@@ -1,8 +1,24 @@
 export type CheckStatus = 'pass' | 'warn' | 'fail' | 'skip';
+/**
+ * One thing a check found, with where it is. Optional on every result: only the
+ * checks that can say where report it, and a result without any is not an error —
+ * it just has a summary and no location.
+ */
+export interface Finding {
+    file: string;
+    /** 1-based line in the file as it will be committed. */
+    line?: number;
+    /** Which rule or pattern matched, as the check names it. */
+    rule: string;
+    /** The offending text, shortened. Never a secret: scanners that find those leave it out. */
+    snippet?: string;
+    severity: 'error' | 'warn';
+}
 export interface CheckResult {
     name: string;
     status: CheckStatus;
     details?: string;
+    findings?: Finding[];
 }
 /**
  *
@@ -12,7 +28,7 @@ export declare class ResultCollector {
     /**
      *
      */
-    register(name: string, status: CheckStatus, details?: string): void;
+    register(name: string, status: CheckStatus, details?: string, findings?: Finding[]): void;
     /**
      *
      */

package/dist/esm/utils/result-collector.js

@@ -8,9 +8,14 @@ export class ResultCollector {
     /**
      *
      */
-    register(name, status, details) {
+    register(name, status, details, findings) {
         const idx = this.results.findIndex(r => r.name === name);
-        const entry = { name, status, ...(details && { details }) };
+        const entry = {
+            name,
+            status,
+            ...(details && { details }),
+            ...(findings && findings.length > 0 && { findings }),
+        };
         if (idx >= 0) {
             this.results[idx] = entry;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "3.3.0",
+    "version": "4.0.1",
     "description": "Security-first PR gate for CI: secret scanning, grype dependency scanning, SBOM — plus linting and formatting across 11 languages",
     "keywords": [
         "github-actions",
@@ -9,7 +9,11 @@
         "eslint",
         "prettier",
         "code-quality",
-        "automation"
+        "automation",
+        "mcp",
+        "model-context-protocol",
+        "ai-agents",
+        "claude-code"
     ],
     "main": "./dist/cjs/index.js",
     "module": "./dist/esm/index.js",
@@ -76,7 +80,7 @@
     },
     "homepage": "https://github.com/Mybono/pr_checkmate_public#readme",
     "author": "Artur Polishchuk",
-    "license": "SEE LICENSE IN LICENSE",
+    "license": "LicenseRef-PR-Checkmate-Proprietary",
     "dependencies": {
         "execa": "^9.6.0",
         "gitleaks-secret-scanner-fixed": "3.0.4",

package/pr-checkmate.schema.json

@@ -309,6 +309,41 @@
     "dockerfileSecurity": {
       "$ref": "#/$defs/toggleIgnorePaths"
     },
+    "agentInstructions": {
+      "$ref": "#/$defs/toggleIgnorePaths"
+    },
+    "mcp": {
+      "type": "object",
+      "description": "What the pr-checkmate MCP server offers an AI agent working in this project. Changes apply to the agent's next request.",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "false turns the server off for this project: it still connects, but offers no tools, resources or prompts. Default true."
+        },
+        "disabledTools": {
+          "type": "array",
+          "description": "Tools to hide from the agent.",
+          "items": {
+            "enum": [
+              "get_rules",
+              "check_changes",
+              "apply_fixes",
+              "scan_secrets",
+              "check_dependency",
+              "suggest_config",
+              "write_config",
+              "explain_config",
+              "verify"
+            ]
+          }
+        },
+        "readOnly": {
+          "type": "boolean",
+          "description": "Hide the tools that write files (apply_fixes, write_config), so the agent can only read and report. Default false."
+        }
+      }
+    },
     "migrationSafety": {
       "$ref": "#/$defs/toggleSeverity"
     },

package/src/config/cspell.json

@@ -1377,6 +1377,7 @@
     "samd",
     "samplerate",
     "sandboxing",
+    "sarif",
     "satoshis",
     "savgol",
     "sbom",

package/src/config/pr-checkmate.schema.json

@@ -309,6 +309,41 @@
     "dockerfileSecurity": {
       "$ref": "#/$defs/toggleIgnorePaths"
     },
+    "agentInstructions": {
+      "$ref": "#/$defs/toggleIgnorePaths"
+    },
+    "mcp": {
+      "type": "object",
+      "description": "What the pr-checkmate MCP server offers an AI agent working in this project. Changes apply to the agent's next request.",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "false turns the server off for this project: it still connects, but offers no tools, resources or prompts. Default true."
+        },
+        "disabledTools": {
+          "type": "array",
+          "description": "Tools to hide from the agent.",
+          "items": {
+            "enum": [
+              "get_rules",
+              "check_changes",
+              "apply_fixes",
+              "scan_secrets",
+              "check_dependency",
+              "suggest_config",
+              "write_config",
+              "explain_config",
+              "verify"
+            ]
+          }
+        },
+        "readOnly": {
+          "type": "boolean",
+          "description": "Hide the tools that write files (apply_fixes, write_config), so the agent can only read and report. Default false."
+        }
+      }
+    },
     "migrationSafety": {
       "$ref": "#/$defs/toggleSeverity"
     },