specguard-mcp 0.1.10 → 0.1.11

package/README.md

@@ -34,7 +34,7 @@ refuses to boot and takes the tools that needed no configuration down with it.
 | --- | --- | --- | --- |
 | `SPECGUARD_ENDPOINT` | `get_repository_overview`, `list_repositories`, `add_repository`, `registrable_repositories` | — | your SpecGuard instance's root URL, **including the scheme** — e.g. `https://specguard.example.com`, or `http://localhost:3000`. A value with no scheme is refused by name (`SPECGUARD_ENDPOINT is not a usable URL: "sg.example.com"`) rather than surfacing later as an opaque failure. `SPECGUARD_URL` is accepted as an alias, and is the name every message uses when it is the one you set. A blank value counts as unset, so leaving `SPECGUARD_ENDPOINT` empty in a templated config falls through to `SPECGUARD_URL` instead of suppressing it |
 | `SPECGUARD_API_KEY` | `get_repository_overview` | — | an agent/CI API key (`sgk_…`) issued by that deployment |
-| `SPECGUARD_USER_API_KEY` | `list_repositories`, `add_repository`, `registrable_repositories`, `remove_repository`, `create_repository_api_key`, `revoke_repository_api_key`, `list_repository_members`, `add_repository_member`, `update_repository_member_permissions`, `remove_repository_member`, `rename_repository` | — | a **user** API key (`sgu_…`), minted from that deployment's account page. A different credential from the one above, not a second place to put the same value: SpecGuard decides which of them a request may use from the token's prefix, before it reads anything, and answers `401` for the other one. Set whichever your tools need — both, if you use both |
+| `SPECGUARD_USER_API_KEY` | `list_repositories`, `add_repository`, `registrable_repositories`, `remove_repository`, `create_repository_api_key`, `revoke_repository_api_key`, `list_repository_agent_keys`, `revoke_repository_agent_key`, `list_repository_agent_keys_presented_revoked`, `list_repository_members`, `add_repository_member`, `update_repository_member_permissions`, `remove_repository_member`, `rename_repository` | — | a **user** API key (`sgu_…`), minted from that deployment's account page. A different credential from the one above, not a second place to put the same value: SpecGuard decides which of them a request may use from the token's prefix, before it reads anything, and answers `401` for the other one. Set whichever your tools need — both, if you use both |
 | `SPECGUARD_LINT_COMMAND` | `lint_intent_annotations` | `specguard-lint` | the command that runs the linter. Most Ruby projects need `bundle exec specguard-lint` |
 | `SPECGUARD_TIMEOUT_MS` | HTTP tools | `30000` | how long a call to SpecGuard may take |
 
@@ -539,6 +539,81 @@ means the key is revoked.
 It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
 `add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
 
+### `list_repository_agent_keys`
+
+Lists the agent keys (`sga_…` keys) covering a SpecGuard repository — the keys minted for people
+or automation principals from the /account page, each covering one or more repositories. One row
+per live key: `id`, `name`, `owner`, `token_hint`, `repository_count` (how many repositories the
+key's grant covers — the blast radius), `permissions` and `created_at`.
+
+| argument | |
+| --- | --- |
+| `repository_id` | the repository whose agent keys to list — its numeric `id`, as `add_repository` returns and `list_repositories` reports, not the `org/repo` handle |
+
+**The `id` here is the only way to name an agent key on this bridge.** Agent keys have no mint
+tool — the platform mints them web-only at /account, deliberately — so unlike `sgk_` keys there is
+no create response to read an id from. List first, then `revoke_repository_agent_key`. Revoked keys
+leave this listing (a retained revoked row is not a credential); whether a dead token is still
+arriving is `list_repository_agent_keys_presented_revoked`'s question.
+
+`token_hint` is a hint, never the token — the plaintext existed for exactly one response at mint
+time and nothing persisted it. Authorization is the `keys_manage` capability; a caller without it
+is refused `403` with SpecGuard's own sentence, verbatim.
+
+It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
+`add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
+
+### `revoke_repository_agent_key`
+
+Revokes one agent key (`sga_…`) on a SpecGuard repository. **Irreversible, and the blast radius is
+the key's whole stored set:** an agent key's grant (repository set + permission set) is stored once
+at mint time, so this one call cuts the token on EVERY repository the key covers, not just
+`repository_id`. Check `repository_count` on `list_repository_agent_keys` before cutting a
+multi-repository key.
+
+| argument | |
+| --- | --- |
+| `repository_id` | the repository whose key-administration scope the call is made under — its numeric `id`, as `add_repository` returns and `list_repositories` reports, not the `org/repo` handle. The cut itself lands on every repository in the key's stored set |
+| `key_id` | the id of the agent key to revoke, as served by `list_repository_agent_keys` — the only id source, because agent keys have no mint tool on this bridge |
+
+This endpoint answers **`200` with the disclosure body**, not the empty `204` the sgk_ sibling
+`revoke_repository_api_key` serves: an `agent_key` block carrying `revoked_at`, `repository_count`
+and the still-existing `repositories` names (plus `deleted_repository_count` when repositories
+have been deleted since mint) — the API's substitute for the web confirm dialog, so the body
+itself is the confirmation.
+
+The `key_id` is scoped to `repository_id`: a key whose stored set does not cover this repository,
+or one already revoked, is refused `404`, never a cross-repository cut. Authorization is the
+`keys_manage` capability; a caller without it is refused `403` with SpecGuard's own sentence,
+verbatim.
+
+It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
+`add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
+
+### `list_repository_agent_keys_presented_revoked`
+
+Lists REVOKED agent keys whose token is still arriving at the deployment after revocation — the
+verify half of offboarding. Run it after `revoke_repository_agent_key` to learn whether the dead
+token is still being presented somewhere: each row carries `id`, `name`, `owner`, `token_hint`
+(hunt this in whatever secret stores may still hold the dead token, and update them),
+`repository_count`, `revoked_at` and `last_refused_at`.
+
+| argument | |
+| --- | --- |
+| `repository_id` | the repository to triage — its numeric `id`, as `add_repository` returns and `list_repositories` reports, not the `org/repo` handle |
+
+Two readings, stated plainly: **`last_refused_at` is the last observed presentation** — a recency,
+never a claim that something is presenting the token right now. And **an empty
+`{"agent_keys": []}` is an answer** — nothing is still arriving — not an absence of tracking; read
+it as the offboarding having fully taken.
+
+`token_hint` is a hint, never the token — the plaintext existed for exactly one response at mint
+time and nothing persisted it. Authorization is the `keys_manage` capability; a caller without it
+is refused `403` with SpecGuard's own sentence, verbatim.
+
+It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
+`add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
+
 ### `list_repository_members`
 
 Lists who has access to a SpecGuard repository: one row per member with their `id` (the

package/dist/src/support/specguard-api.d.ts

@@ -54,6 +54,23 @@ export declare function patchJson(api: ApiConfig, path: string, body: Record<str
  * verbatim: only what happens to a SUCCESS body differs.
  */
 export declare function deleteJson(api: ApiConfig, path: string, fetchImpl: typeof globalThis.fetch): Promise<string>;
+/**
+ * `DELETE` that answers with a JSON body — the destructive verb's one non-empty
+ * answer, routed through `requestJson` rather than `deleteJson`'s raw-body
+ * handling.
+ *
+ * Every DELETE this surface served until now answered `204` with NO body — the
+ * reason `deleteJson` exists and returns raw text. The agent-key revoke
+ * (`DELETE /api/v1/repositories/:repository_id/agent_keys/:id`) answers `200`
+ * WITH a JSON disclosure body: the platform's substitute for the confirm dialog
+ * the web face shows, naming the full stored set the cut just landed on. The
+ * body is the point of the response, so this verb parses it — and re-deriving
+ * the status check and the not-JSON diagnosis here would be a third copy of the
+ * one check `requestJson` owns, which is exactly the argument `patchJson`'s
+ * header makes for its own 200-with-body case. `deleteJson` stays exported and
+ * byte-unchanged for the endpoints that legitimately answer empty.
+ */
+export declare function deleteJsonObject(api: ApiConfig, path: string, fetchImpl: typeof globalThis.fetch): Promise<Record<string, unknown>>;
 /**
  * `postJson`, narrowed exactly as `getJsonObject` narrows `getJson`.
  *

package/dist/src/support/specguard-api.js

@@ -77,6 +77,25 @@ export async function deleteJson(api, path, fetchImpl) {
         throw describeFailure(response.status, body, api);
     return body;
 }
+/**
+ * `DELETE` that answers with a JSON body — the destructive verb's one non-empty
+ * answer, routed through `requestJson` rather than `deleteJson`'s raw-body
+ * handling.
+ *
+ * Every DELETE this surface served until now answered `204` with NO body — the
+ * reason `deleteJson` exists and returns raw text. The agent-key revoke
+ * (`DELETE /api/v1/repositories/:repository_id/agent_keys/:id`) answers `200`
+ * WITH a JSON disclosure body: the platform's substitute for the confirm dialog
+ * the web face shows, naming the full stored set the cut just landed on. The
+ * body is the point of the response, so this verb parses it — and re-deriving
+ * the status check and the not-JSON diagnosis here would be a third copy of the
+ * one check `requestJson` owns, which is exactly the argument `patchJson`'s
+ * header makes for its own 200-with-body case. `deleteJson` stays exported and
+ * byte-unchanged for the endpoints that legitimately answer empty.
+ */
+export async function deleteJsonObject(api, path, fetchImpl) {
+    return asJsonObject(await requestJson(new URL(`${api.endpoint}${path}`), api, fetchImpl, { method: "DELETE" }));
+}
 /**
  * `postJson`, narrowed exactly as `getJsonObject` narrows `getJson`.
  *

package/dist/src/support/specguard-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"specguard-api.js","sourceRoot":"","sources":["../../../src/support/specguard-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAc,EACd,IAAY,EACZ,SAAkC;IAElC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAC/C,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EACjC,GAAG,EACH,SAAS,EACT,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,WAAW,CACxB,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,GAAG,GAAG,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,8BAA8B;YACvE,cAAc,GAAG,CAAC,gBAAgB,0DAA0D;YAC5F,gBAAgB,EAClB,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAgBnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IAErD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;QACzD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzB,6EAA6E;QAC7E,6EAA6E;QAC7E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,SAAS,CAAC,GAAG,EAAE;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE;oBACrC,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,eAAe;oBAC7B,sEAAsE;oBACtE,sEAAsE;oBACtE,gEAAgE;oBAChE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBAC9E;gBACD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC;YACF,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE5C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,KAAK,CAAC;QAE3C,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,uEAAuE;QACvE,8DAA8D;QAC9D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,IAAI,QAAQ,CAChB,mBAAmB,GAAG,CAAC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5F,SAAS,GAAG,CAAC,gBAAgB,0DAA0D,CAC1F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,wEAAwE;QACxE,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,QAAQ,CAAC,GAAc;IAC9B,OAAO,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,QAAQ,2BAA2B,GAAG,CAAC,gBAAgB,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,GAAc;IACnE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;QAEvD,OAAO,IAAI,QAAQ,CACjB,yCAAyC,QAAQ,eAAe,MAAM,kBAAkB;YACtF,GAAG,GAAG,CAAC,QAAQ,IAAI,SAAS,GAAG,EACjC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CACjB,GAAG,GAAG,CAAC,QAAQ,2CAA2C,GAAG,CAAC,gBAAgB,UAAU;YACtF,wCAAwC,EAC1C,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,sBAAsB,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAC3F,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7F,MAAM,OAAO,GAAI,MAAkC,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAE3E,OAAO,kCAAkC,MAAM,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"specguard-api.js","sourceRoot":"","sources":["../../../src/support/specguard-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAc,EACd,IAAY,EACZ,SAAkC;IAElC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAC/C,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EACjC,GAAG,EACH,SAAS,EACT,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,IAAY,EACZ,SAAkC;IAElC,OAAO,YAAY,CACjB,MAAM,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,WAAW,CACxB,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,GAAG,GAAG,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,8BAA8B;YACvE,cAAc,GAAG,CAAC,gBAAgB,0DAA0D;YAC5F,gBAAgB,EAClB,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAgBnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IAErD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;QACzD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzB,6EAA6E;QAC7E,6EAA6E;QAC7E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,SAAS,CAAC,GAAG,EAAE;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE;oBACrC,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,eAAe;oBAC7B,sEAAsE;oBACtE,sEAAsE;oBACtE,gEAAgE;oBAChE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBAC9E;gBACD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC;YACF,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE5C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,KAAK,CAAC;QAE3C,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,uEAAuE;QACvE,8DAA8D;QAC9D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,IAAI,QAAQ,CAChB,mBAAmB,GAAG,CAAC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5F,SAAS,GAAG,CAAC,gBAAgB,0DAA0D,CAC1F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,wEAAwE;QACxE,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,QAAQ,CAAC,GAAc;IAC9B,OAAO,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,QAAQ,2BAA2B,GAAG,CAAC,gBAAgB,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,GAAc;IACnE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;QAEvD,OAAO,IAAI,QAAQ,CACjB,yCAAyC,QAAQ,eAAe,MAAM,kBAAkB;YACtF,GAAG,GAAG,CAAC,QAAQ,IAAI,SAAS,GAAG,EACjC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CACjB,GAAG,GAAG,CAAC,QAAQ,2CAA2C,GAAG,CAAC,gBAAgB,UAAU;YACtF,wCAAwC,EAC1C,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,sBAAsB,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAC3F,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7F,MAAM,OAAO,GAAI,MAAkC,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAE3E,OAAO,kCAAkC,MAAM,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/src/tools/index.d.ts

@@ -146,6 +146,30 @@ import type { ToolDefinition } from "./types.js";
  * may not rename it. Before this tool the bridge's only rename path was
  * remove-and-re-register, which destroys every key, run and intent; this one
  * keeps them.
+ *
+ * == The fourteenth through sixteenth: the agent-key family
+ *
+ *   - `list_repository_agent_keys` and `revoke_repository_agent_key` wrap the
+ *     inventory and revoke of `user_repository_agent_keys` (shipped: SPGD-1004,
+ *     specguard `dfb9892`), and `list_repository_agent_keys_presented_revoked`
+ *     wraps the still-presented triage over the same controller (shipped:
+ *     SPGD-1023, specguard `533e77b`).
+ *
+ * The `sga_` noun's first bridge tools, and the gap they close is the one the
+ * platform controller's own header records: a `keys.manage` holder could
+ * already mint and revoke `sgk_` keys through this bridge but could not even
+ * LIST the agent keys covering a repository, so the offboarding arc — a
+ * departed member's agent key authenticating indefinitely — was not
+ * completable over the bridge at all. The family also forced the transport's
+ * third DELETE shape: this revoke answers `200` WITH a JSON disclosure body
+ * (the API's substitute for the web confirm dialog — the response that
+ * performs the cut also names every repository it landed on), so it routes
+ * through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-body handling, which the empty-204 endpoints keep
+ * unchanged. And the id the revoke needs is learnable ONLY from the listing:
+ * minting is deliberately web-only at /account, so unlike the `sgk_` pair
+ * there is no create response to read an id from — the list and revoke
+ * descriptions say so rather than leaving it implicit.
  */
 export declare const TOOLS: readonly ToolDefinition[];
 export type { ToolContext, ToolDefinition, ToolResult } from "./types.js";

package/dist/src/tools/index.js

@@ -3,6 +3,8 @@ import addRepositoryMember from "./add-repository-member.js";
 import createRepositoryApiKey from "./create-repository-api-key.js";
 import lintIntentAnnotations from "./lint-intent-annotations.js";
 import listRepositories from "./list-repositories.js";
+import listRepositoryAgentKeys from "./list-repository-agent-keys.js";
+import listRepositoryAgentKeysPresentedRevoked from "./list-repository-agent-keys-presented-revoked.js";
 import listRepositoryMembers from "./list-repository-members.js";
 import nearDuplicateClusters from "./near-duplicate-clusters.js";
 import getRepositoryOverview from "./repository-overview.js";
@@ -10,6 +12,7 @@ import registrableRepositories from "./registrable-repositories.js";
 import removeRepository from "./remove-repository.js";
 import removeRepositoryMember from "./remove-repository-member.js";
 import renameRepository from "./rename-repository.js";
+import revokeRepositoryAgentKey from "./revoke-repository-agent-key.js";
 import revokeRepositoryApiKey from "./revoke-repository-api-key.js";
 import updateRepositoryMemberPermissions from "./update-repository-member-permissions.js";
 /**
@@ -159,6 +162,30 @@ import updateRepositoryMemberPermissions from "./update-repository-member-permis
  * may not rename it. Before this tool the bridge's only rename path was
  * remove-and-re-register, which destroys every key, run and intent; this one
  * keeps them.
+ *
+ * == The fourteenth through sixteenth: the agent-key family
+ *
+ *   - `list_repository_agent_keys` and `revoke_repository_agent_key` wrap the
+ *     inventory and revoke of `user_repository_agent_keys` (shipped: SPGD-1004,
+ *     specguard `dfb9892`), and `list_repository_agent_keys_presented_revoked`
+ *     wraps the still-presented triage over the same controller (shipped:
+ *     SPGD-1023, specguard `533e77b`).
+ *
+ * The `sga_` noun's first bridge tools, and the gap they close is the one the
+ * platform controller's own header records: a `keys.manage` holder could
+ * already mint and revoke `sgk_` keys through this bridge but could not even
+ * LIST the agent keys covering a repository, so the offboarding arc — a
+ * departed member's agent key authenticating indefinitely — was not
+ * completable over the bridge at all. The family also forced the transport's
+ * third DELETE shape: this revoke answers `200` WITH a JSON disclosure body
+ * (the API's substitute for the web confirm dialog — the response that
+ * performs the cut also names every repository it landed on), so it routes
+ * through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-body handling, which the empty-204 endpoints keep
+ * unchanged. And the id the revoke needs is learnable ONLY from the listing:
+ * minting is deliberately web-only at /account, so unlike the `sgk_` pair
+ * there is no create response to read an id from — the list and revoke
+ * descriptions say so rather than leaving it implicit.
  */
 export const TOOLS = [
     lintIntentAnnotations,
@@ -175,5 +202,8 @@ export const TOOLS = [
     updateRepositoryMemberPermissions,
     removeRepositoryMember,
     renameRepository,
+    listRepositoryAgentKeys,
+    listRepositoryAgentKeysPresentedRevoked,
+    revokeRepositoryAgentKey,
 ];
 //# sourceMappingURL=index.js.map

package/dist/src/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,mBAAmB,MAAM,4BAA4B,CAAC;AAC7D,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,0BAA0B,CAAC;AAC7D,OAAO,uBAAuB,MAAM,+BAA+B,CAAC;AACpE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,sBAAsB,MAAM,+BAA+B,CAAC;AACnE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,iCAAiC,MAAM,2CAA2C,CAAC;AAG1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmJG;AACH,MAAM,CAAC,MAAM,KAAK,GAA8B;IAC9C,qBAAqB;IACrB,qBAAqB;IACrB,gBAAgB;IAChB,aAAa;IACb,uBAAuB;IACvB,gBAAgB;IAChB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,iCAAiC;IACjC,sBAAsB;IACtB,gBAAgB;CACjB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,mBAAmB,MAAM,4BAA4B,CAAC;AAC7D,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,uBAAuB,MAAM,iCAAiC,CAAC;AACtE,OAAO,uCAAuC,MAAM,mDAAmD,CAAC;AACxG,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,0BAA0B,CAAC;AAC7D,OAAO,uBAAuB,MAAM,+BAA+B,CAAC;AACpE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,sBAAsB,MAAM,+BAA+B,CAAC;AACnE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,wBAAwB,MAAM,kCAAkC,CAAC;AACxE,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,iCAAiC,MAAM,2CAA2C,CAAC;AAG1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2KG;AACH,MAAM,CAAC,MAAM,KAAK,GAA8B;IAC9C,qBAAqB;IACrB,qBAAqB;IACrB,gBAAgB;IAChB,aAAa;IACb,uBAAuB;IACvB,gBAAgB;IAChB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,iCAAiC;IACjC,sBAAsB;IACtB,gBAAgB;IAChB,uBAAuB;IACvB,uCAAuC;IACvC,wBAAwB;CACzB,CAAC"}

package/dist/src/tools/list-repository-agent-keys-presented-revoked.d.ts

@@ -0,0 +1,39 @@
+import type { ToolDefinition } from "./types.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys/presented_revoked` as a
+ * tool — shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#presented_revoked`, SPGD-1023,
+ * `533e77b`).
+ *
+ * == The verify half of the offboarding arc
+ *
+ * The listing and the revoke answer "what is live" and "cut this one"; neither
+ * can answer the question a revoker is left holding — "is the dead token still
+ * arriving?" — because both read LIVE rows only. The stamp this triage serves,
+ * `last_refused_at`, is written by the 401 failure path on RETAINED revoked
+ * rows, so it cannot ride a live row at all. This read is the bridge's only
+ * window onto it, behind the same `keys_manage` gate the other two actions
+ * answer to.
+ *
+ * == Two honesty clauses the description carries verbatim
+ *
+ * `last_refused_at` is the LAST observed presentation — a recency, never a
+ * present-tense claim that a client is presenting the token now. And an empty
+ * `{"agent_keys": []}` is an ANSWER — "no revoked key is still being
+ * presented" — not an absence of tracking; the endpoint serves the negative
+ * deliberately so the two are distinguishable. A tool that summarised an
+ * empty answer into a count of its own would erase exactly that distinction,
+ * which is why this one passes the body through.
+ *
+ * == Rows, pass-through
+ *
+ * One row per still-presented revoked key covering this repository: `id`,
+ * `name`, `owner`, `token_hint`, `repository_count` (the STORED set's size —
+ * the same blast-radius figure the revoke response discloses), `revoked_at`
+ * and `last_refused_at`. `token_hint` is what the remedy hunts for in the
+ * secret store — update whichever of them still holds the dead token — and it
+ * is never the token: the plaintext existed for exactly one response at mint
+ * time and nothing persisted it.
+ */
+declare const listRepositoryAgentKeysPresentedRevoked: ToolDefinition;
+export default listRepositoryAgentKeysPresentedRevoked;

package/dist/src/tools/list-repository-agent-keys-presented-revoked.js

@@ -0,0 +1,89 @@
+import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js";
+import { requireString } from "./args.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys/presented_revoked` as a
+ * tool — shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#presented_revoked`, SPGD-1023,
+ * `533e77b`).
+ *
+ * == The verify half of the offboarding arc
+ *
+ * The listing and the revoke answer "what is live" and "cut this one"; neither
+ * can answer the question a revoker is left holding — "is the dead token still
+ * arriving?" — because both read LIVE rows only. The stamp this triage serves,
+ * `last_refused_at`, is written by the 401 failure path on RETAINED revoked
+ * rows, so it cannot ride a live row at all. This read is the bridge's only
+ * window onto it, behind the same `keys_manage` gate the other two actions
+ * answer to.
+ *
+ * == Two honesty clauses the description carries verbatim
+ *
+ * `last_refused_at` is the LAST observed presentation — a recency, never a
+ * present-tense claim that a client is presenting the token now. And an empty
+ * `{"agent_keys": []}` is an ANSWER — "no revoked key is still being
+ * presented" — not an absence of tracking; the endpoint serves the negative
+ * deliberately so the two are distinguishable. A tool that summarised an
+ * empty answer into a count of its own would erase exactly that distinction,
+ * which is why this one passes the body through.
+ *
+ * == Rows, pass-through
+ *
+ * One row per still-presented revoked key covering this repository: `id`,
+ * `name`, `owner`, `token_hint`, `repository_count` (the STORED set's size —
+ * the same blast-radius figure the revoke response discloses), `revoked_at`
+ * and `last_refused_at`. `token_hint` is what the remedy hunts for in the
+ * secret store — update whichever of them still holds the dead token — and it
+ * is never the token: the plaintext existed for exactly one response at mint
+ * time and nothing persisted it.
+ */
+const listRepositoryAgentKeysPresentedRevoked = {
+    name: "list_repository_agent_keys_presented_revoked",
+    title: "List still-presented revoked agent keys",
+    description: "Lists REVOKED agent keys whose token is still arriving at the deployment after revocation — " +
+        "the verify half of offboarding: run it after `revoke_repository_agent_key` to learn whether " +
+        "the dead token is still being presented somewhere. Each row carries `id`, `name`, `owner`, " +
+        "`token_hint` (hunt THIS in whatever secret stores may still hold the dead token, and update " +
+        "them), `repository_count`, `revoked_at` and `last_refused_at`. " +
+        "`last_refused_at` is the LAST observed presentation — a recency, never a present-tense claim " +
+        "that something is presenting the token right now. " +
+        "An empty `{\"agent_keys\": []}` is an ANSWER — nothing is still arriving — not an absence of " +
+        "tracking; read it as the offboarding having fully taken. " +
+        "`token_hint` is a hint, never the token — the plaintext existed for exactly one response at " +
+        "mint time and nothing persisted it. " +
+        "Authorization is the `keys_manage` capability — a caller without it is refused 403 in " +
+        "SpecGuard's own words. " +
+        "Takes `repository_id` (the numeric id `list_repositories` reports, not the `org/repo` handle). " +
+        "Needs SPECGUARD_USER_API_KEY (an sgu_… key), the same credential the other key-administration " +
+        "tools read and a DIFFERENT one from the sgk_… repository key `get_repository_overview` uses.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            repository_id: {
+                type: "string",
+                description: "The repository to triage — its numeric id, as `add_repository` returns and " +
+                    "`list_repositories` reports, not the `org/repo` handle.",
+            },
+        },
+        required: ["repository_id"],
+        // Closed for the reason every tool here states: `server.ts` forwards
+        // `arguments` unvalidated, so an open schema would let a misspelled argument
+        // be dropped silently.
+        additionalProperties: false,
+    },
+    async run(args, context) {
+        const repositoryId = requireString(args["repository_id"], "repository_id");
+        const api = requireUserApiConfig(context.config);
+        const body = await getJsonObject(api, `/api/v1/repositories/${encodeURIComponent(repositoryId)}/agent_keys/presented_revoked`, {}, context.fetch);
+        // Passed through unreshaped, the standing rule (`types.ts`: "A thin client
+        // that reshapes its upstream is not thin") — and the empty answer passes
+        // through with it: `{"agent_keys": []}` is the endpoint saying "nothing is
+        // still arriving", and a summary of it would erase the distinction between
+        // that answer and an absence of tracking.
+        return {
+            text: JSON.stringify(body, null, 2),
+            structured: body,
+        };
+    },
+};
+export default listRepositoryAgentKeysPresentedRevoked;
+//# sourceMappingURL=list-repository-agent-keys-presented-revoked.js.map

package/dist/src/tools/list-repository-agent-keys-presented-revoked.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-repository-agent-keys-presented-revoked.js","sourceRoot":"","sources":["../../../src/tools/list-repository-agent-keys-presented-revoked.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,uCAAuC,GAAmB;IAC9D,IAAI,EAAE,8CAA8C;IACpD,KAAK,EAAE,yCAAyC;IAChD,WAAW,EACT,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,8FAA8F;QAC9F,iEAAiE;QACjE,+FAA+F;QAC/F,oDAAoD;QACpD,+FAA+F;QAC/F,2DAA2D;QAC3D,8FAA8F;QAC9F,sCAAsC;QACtC,wFAAwF;QACxF,yBAAyB;QACzB,iGAAiG;QACjG,gGAAgG;QAChG,8FAA8F;IAChG,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,6EAA6E;oBAC7E,yDAAyD;aAC5D;SACF;QACD,QAAQ,EAAE,CAAC,eAAe,CAAC;QAC3B,qEAAqE;QACrE,6EAA6E;QAC7E,uBAAuB;QACvB,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO;QACrB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,GAAG,EACH,wBAAwB,kBAAkB,CAAC,YAAY,CAAC,+BAA+B,EACvF,EAAE,EACF,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,0CAA0C;QAC1C,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,uCAAuC,CAAC"}

package/dist/src/tools/list-repository-agent-keys.d.ts

@@ -0,0 +1,38 @@
+import type { ToolDefinition } from "./types.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys` as a tool — shipped in
+ * the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#index`, SPGD-1004, `dfb9892`).
+ *
+ * == The id source is THIS listing, and only this listing
+ *
+ * Agent keys have no mint tool on this bridge — deliberately: the platform
+ * mints them web-only at /account (the controller header states the rule), so
+ * unlike `sgk_` keys there is no create response to read an id from. The `id`
+ * each row serves is therefore the ONLY way an agent can name an agent key to
+ * `revoke_repository_agent_key`, and the description says so rather than
+ * leaving it implicit — an agent that arrives needing to cut a key without
+ * having listed first has no fallback path.
+ *
+ * == Rows, pass-through
+ *
+ * The endpoint answers `{agent_keys: [...]}`, one row per LIVE key covering
+ * this repository: `id`, `name`, `owner`, `token_hint`, `repository_count`
+ * (the size of the key's stored set — the blast radius a revoke would land
+ * on), `permissions` (rendered the way the web panel renders it, "read only"
+ * for the minimal grant) and `created_at`. `token_hint` is a hint and never
+ * the token: the plaintext existed for exactly one response at mint time and
+ * nothing persisted it. Revoked rows leave the listing — a retained revoked
+ * row is not a credential — and the still-presented triage over those rows is
+ * `list_repository_agent_keys_presented_revoked`.
+ *
+ * == No client-side capability probing
+ *
+ * The server gates at `current_repository(:keys_manage)`, the same gate the
+ * `sgk_` key pair answers to: a caller who cannot administer this
+ * repository's keys is refused 403 in SpecGuard's own words, and a caller who
+ * cannot see the repository at all gets the nil-is-404 fork. This tool
+ * predicts neither; it reports what came back.
+ */
+declare const listRepositoryAgentKeys: ToolDefinition;
+export default listRepositoryAgentKeys;

package/dist/src/tools/list-repository-agent-keys.js

@@ -0,0 +1,86 @@
+import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js";
+import { requireString } from "./args.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys` as a tool — shipped in
+ * the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#index`, SPGD-1004, `dfb9892`).
+ *
+ * == The id source is THIS listing, and only this listing
+ *
+ * Agent keys have no mint tool on this bridge — deliberately: the platform
+ * mints them web-only at /account (the controller header states the rule), so
+ * unlike `sgk_` keys there is no create response to read an id from. The `id`
+ * each row serves is therefore the ONLY way an agent can name an agent key to
+ * `revoke_repository_agent_key`, and the description says so rather than
+ * leaving it implicit — an agent that arrives needing to cut a key without
+ * having listed first has no fallback path.
+ *
+ * == Rows, pass-through
+ *
+ * The endpoint answers `{agent_keys: [...]}`, one row per LIVE key covering
+ * this repository: `id`, `name`, `owner`, `token_hint`, `repository_count`
+ * (the size of the key's stored set — the blast radius a revoke would land
+ * on), `permissions` (rendered the way the web panel renders it, "read only"
+ * for the minimal grant) and `created_at`. `token_hint` is a hint and never
+ * the token: the plaintext existed for exactly one response at mint time and
+ * nothing persisted it. Revoked rows leave the listing — a retained revoked
+ * row is not a credential — and the still-presented triage over those rows is
+ * `list_repository_agent_keys_presented_revoked`.
+ *
+ * == No client-side capability probing
+ *
+ * The server gates at `current_repository(:keys_manage)`, the same gate the
+ * `sgk_` key pair answers to: a caller who cannot administer this
+ * repository's keys is refused 403 in SpecGuard's own words, and a caller who
+ * cannot see the repository at all gets the nil-is-404 fork. This tool
+ * predicts neither; it reports what came back.
+ */
+const listRepositoryAgentKeys = {
+    name: "list_repository_agent_keys",
+    title: "List repository agent keys",
+    description: "Lists the agent keys (`sga_…` keys) covering a SpecGuard repository: one row per live key " +
+        "with its `id`, `name`, `owner`, `token_hint`, `repository_count` (how many repositories the " +
+        "key's grant covers — the blast radius), `permissions` and `created_at`. " +
+        "Agent keys have NO mint tool on this bridge — minting is deliberately web-only — so the `id` " +
+        "this listing serves is the ONLY way to name a key to `revoke_repository_agent_key`: list " +
+        "first, then revoke. " +
+        "Revoked keys leave this listing (a retained revoked row is not a credential); whether a dead " +
+        "token is still arriving is `list_repository_agent_keys_presented_revoked`'s question. " +
+        "`token_hint` is a hint, never the token — the plaintext existed for exactly one response at " +
+        "mint time and nothing persisted it. " +
+        "Authorization is the `keys_manage` capability — a caller without it is refused 403 in " +
+        "SpecGuard's own words. " +
+        "Takes `repository_id` (the numeric id `list_repositories` reports, not the `org/repo` handle). " +
+        "Needs SPECGUARD_USER_API_KEY (an sgu_… key), the same credential the other key-administration " +
+        "tools read and a DIFFERENT one from the sgk_… repository key `get_repository_overview` uses.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            repository_id: {
+                type: "string",
+                description: "The repository whose agent keys to list — its numeric id, as `add_repository` " +
+                    "returns and `list_repositories` reports, not the `org/repo` handle.",
+            },
+        },
+        required: ["repository_id"],
+        // Closed for the reason every tool here states: `server.ts` forwards
+        // `arguments` unvalidated, so an open schema would let a misspelled argument
+        // be dropped silently.
+        additionalProperties: false,
+    },
+    async run(args, context) {
+        const repositoryId = requireString(args["repository_id"], "repository_id");
+        const api = requireUserApiConfig(context.config);
+        const body = await getJsonObject(api, `/api/v1/repositories/${encodeURIComponent(repositoryId)}/agent_keys`, {}, context.fetch);
+        // Passed through unreshaped, the standing rule (`types.ts`: "A thin client
+        // that reshapes its upstream is not thin") — the rows are the controller's
+        // own serialization, and the `id` an agent needs for the revoke is one of
+        // the fields a reshape could drop.
+        return {
+            text: JSON.stringify(body, null, 2),
+            structured: body,
+        };
+    },
+};
+export default listRepositoryAgentKeys;
+//# sourceMappingURL=list-repository-agent-keys.js.map

package/dist/src/tools/list-repository-agent-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-repository-agent-keys.js","sourceRoot":"","sources":["../../../src/tools/list-repository-agent-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,uBAAuB,GAAmB;IAC9C,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,4BAA4B;IACnC,WAAW,EACT,4FAA4F;QAC5F,8FAA8F;QAC9F,0EAA0E;QAC1E,+FAA+F;QAC/F,2FAA2F;QAC3F,sBAAsB;QACtB,+FAA+F;QAC/F,wFAAwF;QACxF,8FAA8F;QAC9F,sCAAsC;QACtC,wFAAwF;QACxF,yBAAyB;QACzB,iGAAiG;QACjG,gGAAgG;QAChG,8FAA8F;IAChG,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,gFAAgF;oBAChF,qEAAqE;aACxE;SACF;QACD,QAAQ,EAAE,CAAC,eAAe,CAAC;QAC3B,qEAAqE;QACrE,6EAA6E;QAC7E,uBAAuB;QACvB,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO;QACrB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,GAAG,EACH,wBAAwB,kBAAkB,CAAC,YAAY,CAAC,aAAa,EACrE,EAAE,EACF,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,mCAAmC;QACnC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/src/tools/revoke-repository-agent-key.d.ts

@@ -0,0 +1,45 @@
+import type { ToolDefinition } from "./types.js";
+/**
+ * `DELETE /api/v1/repositories/:repository_id/agent_keys/:id` as a tool —
+ * shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#destroy`, SPGD-1004, `dfb9892`).
+ *
+ * == The blast radius is the whole stored set
+ *
+ * An agent key's grant — a repository set and a permission set — is chosen
+ * once at mint time and stored ONCE, so revocation cuts the token on EVERY
+ * repository in the set, not only the one this call names. On the web a
+ * confirm dialog names that set BEFORE the cut; over the API there is no
+ * dialog, so the disclosure travels in the response that performs it: count
+ * first, then the still-existing names, with `deleted_repository_count`
+ * present only when repositories have been deleted since mint and dropped out
+ * of the names. The tool passes the body through rather than answering with a
+ * summary of its own — the deployment already wrote the confirmation, and a
+ * second wording of it is a second fact free to drift from the first.
+ *
+ * == 200 WITH a body, not the sibling's 204
+ *
+ * `revoke_repository_api_key` says "a 204 means revoked" because every
+ * endpoint this bridge's DELETEs served until now answered empty. This one
+ * deliberately does not: the disclosure body IS the confirmation, so the call
+ * routes through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-text handling. The difference is carried in the
+ * description because a caller pattern-matching on the sibling's contract
+ * would otherwise misread the shape of success here.
+ *
+ * == The id is scoped, and both forks are 404
+ *
+ * `AgentApiKey.live.find` + `covers?` — a key id that is revoked already (a
+ * retained revoked row is not a credential) or whose stored set does not cover
+ * THIS repository is a 404, never a cross-repository cut. The bridge relies on
+ * that server scoping entirely and adds no client-side check of its own, for
+ * the reason every tool here states: the server is the gate.
+ *
+ * == The id source
+ *
+ * No mint tool exists (deliberately web-only), so the id comes from
+ * `list_repository_agent_keys` alone — stated in the description rather than
+ * left implicit.
+ */
+declare const revokeRepositoryAgentKey: ToolDefinition;
+export default revokeRepositoryAgentKey;

package/dist/src/tools/revoke-repository-agent-key.js

@@ -0,0 +1,104 @@
+import { deleteJsonObject, requireUserApiConfig } from "../support/specguard-api.js";
+import { requireString } from "./args.js";
+/**
+ * `DELETE /api/v1/repositories/:repository_id/agent_keys/:id` as a tool —
+ * shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#destroy`, SPGD-1004, `dfb9892`).
+ *
+ * == The blast radius is the whole stored set
+ *
+ * An agent key's grant — a repository set and a permission set — is chosen
+ * once at mint time and stored ONCE, so revocation cuts the token on EVERY
+ * repository in the set, not only the one this call names. On the web a
+ * confirm dialog names that set BEFORE the cut; over the API there is no
+ * dialog, so the disclosure travels in the response that performs it: count
+ * first, then the still-existing names, with `deleted_repository_count`
+ * present only when repositories have been deleted since mint and dropped out
+ * of the names. The tool passes the body through rather than answering with a
+ * summary of its own — the deployment already wrote the confirmation, and a
+ * second wording of it is a second fact free to drift from the first.
+ *
+ * == 200 WITH a body, not the sibling's 204
+ *
+ * `revoke_repository_api_key` says "a 204 means revoked" because every
+ * endpoint this bridge's DELETEs served until now answered empty. This one
+ * deliberately does not: the disclosure body IS the confirmation, so the call
+ * routes through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-text handling. The difference is carried in the
+ * description because a caller pattern-matching on the sibling's contract
+ * would otherwise misread the shape of success here.
+ *
+ * == The id is scoped, and both forks are 404
+ *
+ * `AgentApiKey.live.find` + `covers?` — a key id that is revoked already (a
+ * retained revoked row is not a credential) or whose stored set does not cover
+ * THIS repository is a 404, never a cross-repository cut. The bridge relies on
+ * that server scoping entirely and adds no client-side check of its own, for
+ * the reason every tool here states: the server is the gate.
+ *
+ * == The id source
+ *
+ * No mint tool exists (deliberately web-only), so the id comes from
+ * `list_repository_agent_keys` alone — stated in the description rather than
+ * left implicit.
+ */
+const revokeRepositoryAgentKey = {
+    name: "revoke_repository_agent_key",
+    title: "Revoke repository agent key",
+    description: "Revokes one agent key (`sga_…` key) on a SpecGuard repository. IRREVERSIBLE, and the blast " +
+        "radius is the key's WHOLE stored set: the grant (repository set + permission set) is stored " +
+        "once at mint time, so this one call cuts the token on EVERY repository the key covers, not " +
+        "just `repository_id` — check `repository_count` on `list_repository_agent_keys` BEFORE " +
+        "cutting a multi-repository key. " +
+        "Answers `200` WITH the disclosure body — an `agent_key` block carrying `revoked_at`, " +
+        "`repository_count` and the still-existing `repositories` names, plus " +
+        "`deleted_repository_count` when some have been deleted since mint — NOT the empty 204 the " +
+        "sgk_ sibling `revoke_repository_api_key` serves; the body itself is the confirmation. " +
+        "The `key_id` is scoped to `repository_id`: a key whose stored set does not cover this " +
+        "repository, or one already revoked, is refused 404, never a cross-repository cut. " +
+        "Agent keys have NO mint tool on this bridge (minting is deliberately web-only), so take " +
+        "`key_id` from `list_repository_agent_keys` — list first, then revoke. " +
+        "Authorization is the `keys_manage` capability — a caller without it is refused 403 in " +
+        "SpecGuard's own words. " +
+        "Takes `repository_id` (the numeric id `list_repositories` reports) and `key_id`. " +
+        "Needs SPECGUARD_USER_API_KEY (an sgu_… key), the same credential the other key-administration " +
+        "tools read and a DIFFERENT one from the sgk_… repository key `get_repository_overview` uses.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            repository_id: {
+                type: "string",
+                description: "The repository whose key-administration scope the call is made under — its numeric " +
+                    "id, as `add_repository` returns and `list_repositories` reports, not the `org/repo` " +
+                    "handle. The CUT, however, lands on every repository in the key's stored set.",
+            },
+            key_id: {
+                type: "string",
+                description: "The id of the agent key to revoke, as served by `list_repository_agent_keys` — " +
+                    "the only id source, because agent keys have no mint tool on this bridge. Scoped to " +
+                    "`repository_id`: a key whose stored set excludes this repository, or one already " +
+                    "revoked, is refused 404.",
+            },
+        },
+        required: ["repository_id", "key_id"],
+        // Closed for the reason every tool here states — and on a DESTRUCTIVE path,
+        // a silently dropped misspelled argument must not be able to leave the
+        // agent believing it revoked a key the call never named.
+        additionalProperties: false,
+    },
+    async run(args, context) {
+        const repositoryId = requireString(args["repository_id"], "repository_id");
+        const keyId = requireString(args["key_id"], "key_id");
+        const api = requireUserApiConfig(context.config);
+        // The 200 disclosure body, passed through unreshaped in both halves — the
+        // deployment already wrote the confirmation (the stored set, count first),
+        // and this is the API's substitute for the web confirm dialog.
+        const disclosure = await deleteJsonObject(api, `/api/v1/repositories/${encodeURIComponent(repositoryId)}/agent_keys/${encodeURIComponent(keyId)}`, context.fetch);
+        return {
+            text: JSON.stringify(disclosure, null, 2),
+            structured: disclosure,
+        };
+    },
+};
+export default revokeRepositoryAgentKey;
+//# sourceMappingURL=revoke-repository-agent-key.js.map

package/dist/src/tools/revoke-repository-agent-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-repository-agent-key.js","sourceRoot":"","sources":["../../../src/tools/revoke-repository-agent-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,wBAAwB,GAAmB;IAC/C,IAAI,EAAE,6BAA6B;IACnC,KAAK,EAAE,6BAA6B;IACpC,WAAW,EACT,6FAA6F;QAC7F,8FAA8F;QAC9F,6FAA6F;QAC7F,yFAAyF;QACzF,kCAAkC;QAClC,uFAAuF;QACvF,uEAAuE;QACvE,4FAA4F;QAC5F,wFAAwF;QACxF,wFAAwF;QACxF,oFAAoF;QACpF,0FAA0F;QAC1F,wEAAwE;QACxE,wFAAwF;QACxF,yBAAyB;QACzB,mFAAmF;QACnF,gGAAgG;QAChG,8FAA8F;IAChG,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,qFAAqF;oBACrF,sFAAsF;oBACtF,8EAA8E;aACjF;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,iFAAiF;oBACjF,qFAAqF;oBACrF,mFAAmF;oBACnF,0BAA0B;aAC7B;SACF;QACD,QAAQ,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC;QACrC,4EAA4E;QAC5E,uEAAuE;QACvE,yDAAyD;QACzD,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO;QACrB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEtD,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,GAAG,EACH,wBAAwB,kBAAkB,CAAC,YAAY,CAAC,eAAe,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAClG,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,wBAAwB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specguard-mcp",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "MCP server exposing SpecGuard suite intelligence to AI coding agents",
   "license": "ISC",
   "type": "module",