specguard-mcp 0.1.10 → 0.1.12

package/README.md

@@ -34,7 +34,7 @@ refuses to boot and takes the tools that needed no configuration down with it.
 | --- | --- | --- | --- |
 | `SPECGUARD_ENDPOINT` | `get_repository_overview`, `list_repositories`, `add_repository`, `registrable_repositories` | — | your SpecGuard instance's root URL, **including the scheme** — e.g. `https://specguard.example.com`, or `http://localhost:3000`. A value with no scheme is refused by name (`SPECGUARD_ENDPOINT is not a usable URL: "sg.example.com"`) rather than surfacing later as an opaque failure. `SPECGUARD_URL` is accepted as an alias, and is the name every message uses when it is the one you set. A blank value counts as unset, so leaving `SPECGUARD_ENDPOINT` empty in a templated config falls through to `SPECGUARD_URL` instead of suppressing it |
 | `SPECGUARD_API_KEY` | `get_repository_overview` | — | an agent/CI API key (`sgk_…`) issued by that deployment |
-| `SPECGUARD_USER_API_KEY` | `list_repositories`, `add_repository`, `registrable_repositories`, `remove_repository`, `create_repository_api_key`, `revoke_repository_api_key`, `list_repository_members`, `add_repository_member`, `update_repository_member_permissions`, `remove_repository_member`, `rename_repository` | — | a **user** API key (`sgu_…`), minted from that deployment's account page. A different credential from the one above, not a second place to put the same value: SpecGuard decides which of them a request may use from the token's prefix, before it reads anything, and answers `401` for the other one. Set whichever your tools need — both, if you use both |
+| `SPECGUARD_USER_API_KEY` | `list_repositories`, `add_repository`, `registrable_repositories`, `remove_repository`, `create_repository_api_key`, `revoke_repository_api_key`, `list_repository_agent_keys`, `revoke_repository_agent_key`, `list_repository_agent_keys_presented_revoked`, `list_repository_members`, `add_repository_member`, `update_repository_member_permissions`, `remove_repository_member`, `rename_repository` | — | a **user** API key (`sgu_…`), minted from that deployment's account page. A different credential from the one above, not a second place to put the same value: SpecGuard decides which of them a request may use from the token's prefix, before it reads anything, and answers `401` for the other one. Set whichever your tools need — both, if you use both |
 | `SPECGUARD_LINT_COMMAND` | `lint_intent_annotations` | `specguard-lint` | the command that runs the linter. Most Ruby projects need `bundle exec specguard-lint` |
 | `SPECGUARD_TIMEOUT_MS` | HTTP tools | `30000` | how long a call to SpecGuard may take |
 
@@ -331,14 +331,23 @@ ask about*, which is the one question no other tool here can answer. `get_reposi
 no repository because its `sgk_…` key **is** the repository, so without this an agent can only report
 on a repository somebody already named for it.
 
-**This tool takes no arguments** — and not as an omission. The credential is the whole of the scope:
-the endpoint takes no parameters, and which repositories are in the answer is decided by SpecGuard
-from the person the key speaks for (owned, plus shared with them through a membership). A repository
-they neither own nor were given access to never enters the response, so it cannot be filtered *in*
-from this side either.
+The credential decides which repositories are *in* the answer (owned, plus shared with them
+through a membership); the three optional asks below narrow **within** that set — never around it.
+The endpoint has served them since SpecGuard's SPGD-940 (`ef6236d`), composed through the same
+`RepositoryNarrowing` concern the web grid reads, and this tool forwards them rather than
+re-deriving them. A repository the person neither owns nor was given access to never enters the
+response, so no ask can filter it *in* either. A blank value is no ask: passing an empty string
+and omitting the argument make the identical request.
+
+| argument | |
+| --- | --- |
+| `q` | keep only repositories whose `full_name` (`org/repo`) contains this substring, case-insensitively. A plain substring, not a pattern — the LIKE wildcards `%`/`_` are escaped server-side, so `org/my_repo` matches itself. A match-less ask is an empty list, not an error |
+| `role` | `"owned"` or `"shared"` — one half of the list's mix: the repositories this person owns, or the ones shared with them. Mind the spelling: the *ask* values are `owned`/`shared`, while each entry's `role` field reads `owner`/`member` — `role: "owner"` is not a valid ask and settles to no ask (full list, no error) |
+| `sort` | `"stale"` — re-order stalest-first: repositories CI has never ingested a run for first, then least-recently-ingested, with `full_name` breaking ties so two calls agree element for element. The same entries, a different order; the default order stays `full_name` ascending |
 
 The body comes back as SpecGuard serves it — `{"repositories": […]}`, each entry carrying `id`,
-`full_name`, `name`, `registered_at` and `role`, ordered by `full_name` ascending. The first four are
+`full_name`, `name`, `registered_at` and `role`, ordered by `full_name` ascending unless `sort`
+asks otherwise. The first four are
 deliberately the same four fields, under the same names, that `get_repository_overview` serves in its
 own `repository` block, so a client that reads one reads the other. `role` is `owner` or `member`:
 the list mixes repositories this person owns with repositories somebody shared with them, and nothing
@@ -539,6 +548,81 @@ means the key is revoked.
 It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
 `add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
 
+### `list_repository_agent_keys`
+
+Lists the agent keys (`sga_…` keys) covering a SpecGuard repository — the keys minted for people
+or automation principals from the /account page, each covering one or more repositories. One row
+per live key: `id`, `name`, `owner`, `token_hint`, `repository_count` (how many repositories the
+key's grant covers — the blast radius), `permissions` and `created_at`.
+
+| argument | |
+| --- | --- |
+| `repository_id` | the repository whose agent keys to list — its numeric `id`, as `add_repository` returns and `list_repositories` reports, not the `org/repo` handle |
+
+**The `id` here is the only way to name an agent key on this bridge.** Agent keys have no mint
+tool — the platform mints them web-only at /account, deliberately — so unlike `sgk_` keys there is
+no create response to read an id from. List first, then `revoke_repository_agent_key`. Revoked keys
+leave this listing (a retained revoked row is not a credential); whether a dead token is still
+arriving is `list_repository_agent_keys_presented_revoked`'s question.
+
+`token_hint` is a hint, never the token — the plaintext existed for exactly one response at mint
+time and nothing persisted it. Authorization is the `keys_manage` capability; a caller without it
+is refused `403` with SpecGuard's own sentence, verbatim.
+
+It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
+`add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
+
+### `revoke_repository_agent_key`
+
+Revokes one agent key (`sga_…`) on a SpecGuard repository. **Irreversible, and the blast radius is
+the key's whole stored set:** an agent key's grant (repository set + permission set) is stored once
+at mint time, so this one call cuts the token on EVERY repository the key covers, not just
+`repository_id`. Check `repository_count` on `list_repository_agent_keys` before cutting a
+multi-repository key.
+
+| argument | |
+| --- | --- |
+| `repository_id` | the repository whose key-administration scope the call is made under — its numeric `id`, as `add_repository` returns and `list_repositories` reports, not the `org/repo` handle. The cut itself lands on every repository in the key's stored set |
+| `key_id` | the id of the agent key to revoke, as served by `list_repository_agent_keys` — the only id source, because agent keys have no mint tool on this bridge |
+
+This endpoint answers **`200` with the disclosure body**, not the empty `204` the sgk_ sibling
+`revoke_repository_api_key` serves: an `agent_key` block carrying `revoked_at`, `repository_count`
+and the still-existing `repositories` names (plus `deleted_repository_count` when repositories
+have been deleted since mint) — the API's substitute for the web confirm dialog, so the body
+itself is the confirmation.
+
+The `key_id` is scoped to `repository_id`: a key whose stored set does not cover this repository,
+or one already revoked, is refused `404`, never a cross-repository cut. Authorization is the
+`keys_manage` capability; a caller without it is refused `403` with SpecGuard's own sentence,
+verbatim.
+
+It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
+`add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
+
+### `list_repository_agent_keys_presented_revoked`
+
+Lists REVOKED agent keys whose token is still arriving at the deployment after revocation — the
+verify half of offboarding. Run it after `revoke_repository_agent_key` to learn whether the dead
+token is still being presented somewhere: each row carries `id`, `name`, `owner`, `token_hint`
+(hunt this in whatever secret stores may still hold the dead token, and update them),
+`repository_count`, `revoked_at` and `last_refused_at`.
+
+| argument | |
+| --- | --- |
+| `repository_id` | the repository to triage — its numeric `id`, as `add_repository` returns and `list_repositories` reports, not the `org/repo` handle |
+
+Two readings, stated plainly: **`last_refused_at` is the last observed presentation** — a recency,
+never a claim that something is presenting the token right now. And **an empty
+`{"agent_keys": []}` is an answer** — nothing is still arriving — not an absence of tracking; read
+it as the offboarding having fully taken.
+
+`token_hint` is a hint, never the token — the plaintext existed for exactly one response at mint
+time and nothing persisted it. Authorization is the `keys_manage` capability; a caller without it
+is refused `403` with SpecGuard's own sentence, verbatim.
+
+It reads `SPECGUARD_USER_API_KEY` (`sgu_…`), the same credential as `list_repositories` and
+`add_repository` and a different one from the `sgk_…` key `get_repository_overview` uses.
+
 ### `list_repository_members`
 
 Lists who has access to a SpecGuard repository: one row per member with their `id` (the

package/dist/src/support/specguard-api.d.ts

@@ -54,6 +54,23 @@ export declare function patchJson(api: ApiConfig, path: string, body: Record<str
  * verbatim: only what happens to a SUCCESS body differs.
  */
 export declare function deleteJson(api: ApiConfig, path: string, fetchImpl: typeof globalThis.fetch): Promise<string>;
+/**
+ * `DELETE` that answers with a JSON body — the destructive verb's one non-empty
+ * answer, routed through `requestJson` rather than `deleteJson`'s raw-body
+ * handling.
+ *
+ * Every DELETE this surface served until now answered `204` with NO body — the
+ * reason `deleteJson` exists and returns raw text. The agent-key revoke
+ * (`DELETE /api/v1/repositories/:repository_id/agent_keys/:id`) answers `200`
+ * WITH a JSON disclosure body: the platform's substitute for the confirm dialog
+ * the web face shows, naming the full stored set the cut just landed on. The
+ * body is the point of the response, so this verb parses it — and re-deriving
+ * the status check and the not-JSON diagnosis here would be a third copy of the
+ * one check `requestJson` owns, which is exactly the argument `patchJson`'s
+ * header makes for its own 200-with-body case. `deleteJson` stays exported and
+ * byte-unchanged for the endpoints that legitimately answer empty.
+ */
+export declare function deleteJsonObject(api: ApiConfig, path: string, fetchImpl: typeof globalThis.fetch): Promise<Record<string, unknown>>;
 /**
  * `postJson`, narrowed exactly as `getJsonObject` narrows `getJson`.
  *

package/dist/src/support/specguard-api.js

@@ -77,6 +77,25 @@ export async function deleteJson(api, path, fetchImpl) {
         throw describeFailure(response.status, body, api);
     return body;
 }
+/**
+ * `DELETE` that answers with a JSON body — the destructive verb's one non-empty
+ * answer, routed through `requestJson` rather than `deleteJson`'s raw-body
+ * handling.
+ *
+ * Every DELETE this surface served until now answered `204` with NO body — the
+ * reason `deleteJson` exists and returns raw text. The agent-key revoke
+ * (`DELETE /api/v1/repositories/:repository_id/agent_keys/:id`) answers `200`
+ * WITH a JSON disclosure body: the platform's substitute for the confirm dialog
+ * the web face shows, naming the full stored set the cut just landed on. The
+ * body is the point of the response, so this verb parses it — and re-deriving
+ * the status check and the not-JSON diagnosis here would be a third copy of the
+ * one check `requestJson` owns, which is exactly the argument `patchJson`'s
+ * header makes for its own 200-with-body case. `deleteJson` stays exported and
+ * byte-unchanged for the endpoints that legitimately answer empty.
+ */
+export async function deleteJsonObject(api, path, fetchImpl) {
+    return asJsonObject(await requestJson(new URL(`${api.endpoint}${path}`), api, fetchImpl, { method: "DELETE" }));
+}
 /**
  * `postJson`, narrowed exactly as `getJsonObject` narrows `getJson`.
  *

package/dist/src/support/specguard-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"specguard-api.js","sourceRoot":"","sources":["../../../src/support/specguard-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAc,EACd,IAAY,EACZ,SAAkC;IAElC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAC/C,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EACjC,GAAG,EACH,SAAS,EACT,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,WAAW,CACxB,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,GAAG,GAAG,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,8BAA8B;YACvE,cAAc,GAAG,CAAC,gBAAgB,0DAA0D;YAC5F,gBAAgB,EAClB,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAgBnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IAErD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;QACzD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzB,6EAA6E;QAC7E,6EAA6E;QAC7E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,SAAS,CAAC,GAAG,EAAE;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE;oBACrC,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,eAAe;oBAC7B,sEAAsE;oBACtE,sEAAsE;oBACtE,gEAAgE;oBAChE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBAC9E;gBACD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC;YACF,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE5C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,KAAK,CAAC;QAE3C,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,uEAAuE;QACvE,8DAA8D;QAC9D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,IAAI,QAAQ,CAChB,mBAAmB,GAAG,CAAC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5F,SAAS,GAAG,CAAC,gBAAgB,0DAA0D,CAC1F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,wEAAwE;QACxE,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,QAAQ,CAAC,GAAc;IAC9B,OAAO,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,QAAQ,2BAA2B,GAAG,CAAC,gBAAgB,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,GAAc;IACnE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;QAEvD,OAAO,IAAI,QAAQ,CACjB,yCAAyC,QAAQ,eAAe,MAAM,kBAAkB;YACtF,GAAG,GAAG,CAAC,QAAQ,IAAI,SAAS,GAAG,EACjC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CACjB,GAAG,GAAG,CAAC,QAAQ,2CAA2C,GAAG,CAAC,gBAAgB,UAAU;YACtF,wCAAwC,EAC1C,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,sBAAsB,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAC3F,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7F,MAAM,OAAO,GAAI,MAAkC,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAE3E,OAAO,kCAAkC,MAAM,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"specguard-api.js","sourceRoot":"","sources":["../../../src/support/specguard-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAkB,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpE,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAc,EACd,IAAY,EACZ,SAAkC;IAElC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAC/C,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EACjC,GAAG,EACH,SAAS,EACT,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,IAAY,EACZ,SAAkC;IAElC,OAAO,YAAY,CACjB,MAAM,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,IAAY,EACZ,IAA6B,EAC7B,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,WAAW,CACxB,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAEpE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,GAAG,GAAG,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,8BAA8B;YACvE,cAAc,GAAG,CAAC,gBAAgB,0DAA0D;YAC5F,gBAAgB,EAClB,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc,EACd,IAAY,EACZ,KAAyC,EACzC,SAAkC;IAElC,OAAO,YAAY,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAgBnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAQ,EACR,GAAc,EACd,SAAkC,EAClC,OAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IAErD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;QACzD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzB,6EAA6E;QAC7E,6EAA6E;QAC7E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,SAAS,CAAC,GAAG,EAAE;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE;oBACrC,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,eAAe;oBAC7B,sEAAsE;oBACtE,sEAAsE;oBACtE,gEAAgE;oBAChE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBAC9E;gBACD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC;YACF,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE5C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,KAAK,CAAC;QAE3C,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,uEAAuE;QACvE,8DAA8D;QAC9D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,IAAI,QAAQ,CAChB,mBAAmB,GAAG,CAAC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5F,SAAS,GAAG,CAAC,gBAAgB,0DAA0D,CAC1F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,wEAAwE;QACxE,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,QAAQ,CAAC,GAAc;IAC9B,OAAO,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,QAAQ,2BAA2B,GAAG,CAAC,gBAAgB,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,GAAc;IACnE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;QAEvD,OAAO,IAAI,QAAQ,CACjB,yCAAyC,QAAQ,eAAe,MAAM,kBAAkB;YACtF,GAAG,GAAG,CAAC,QAAQ,IAAI,SAAS,GAAG,EACjC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CACjB,GAAG,GAAG,CAAC,QAAQ,2CAA2C,GAAG,CAAC,gBAAgB,UAAU;YACtF,wCAAwC,EAC1C,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,sBAAsB,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAC3F,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7F,MAAM,OAAO,GAAI,MAAkC,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAE3E,OAAO,kCAAkC,MAAM,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/src/tools/index.d.ts

@@ -146,6 +146,30 @@ import type { ToolDefinition } from "./types.js";
  * may not rename it. Before this tool the bridge's only rename path was
  * remove-and-re-register, which destroys every key, run and intent; this one
  * keeps them.
+ *
+ * == The fourteenth through sixteenth: the agent-key family
+ *
+ *   - `list_repository_agent_keys` and `revoke_repository_agent_key` wrap the
+ *     inventory and revoke of `user_repository_agent_keys` (shipped: SPGD-1004,
+ *     specguard `dfb9892`), and `list_repository_agent_keys_presented_revoked`
+ *     wraps the still-presented triage over the same controller (shipped:
+ *     SPGD-1023, specguard `533e77b`).
+ *
+ * The `sga_` noun's first bridge tools, and the gap they close is the one the
+ * platform controller's own header records: a `keys.manage` holder could
+ * already mint and revoke `sgk_` keys through this bridge but could not even
+ * LIST the agent keys covering a repository, so the offboarding arc — a
+ * departed member's agent key authenticating indefinitely — was not
+ * completable over the bridge at all. The family also forced the transport's
+ * third DELETE shape: this revoke answers `200` WITH a JSON disclosure body
+ * (the API's substitute for the web confirm dialog — the response that
+ * performs the cut also names every repository it landed on), so it routes
+ * through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-body handling, which the empty-204 endpoints keep
+ * unchanged. And the id the revoke needs is learnable ONLY from the listing:
+ * minting is deliberately web-only at /account, so unlike the `sgk_` pair
+ * there is no create response to read an id from — the list and revoke
+ * descriptions say so rather than leaving it implicit.
  */
 export declare const TOOLS: readonly ToolDefinition[];
 export type { ToolContext, ToolDefinition, ToolResult } from "./types.js";

package/dist/src/tools/index.js

@@ -3,6 +3,8 @@ import addRepositoryMember from "./add-repository-member.js";
 import createRepositoryApiKey from "./create-repository-api-key.js";
 import lintIntentAnnotations from "./lint-intent-annotations.js";
 import listRepositories from "./list-repositories.js";
+import listRepositoryAgentKeys from "./list-repository-agent-keys.js";
+import listRepositoryAgentKeysPresentedRevoked from "./list-repository-agent-keys-presented-revoked.js";
 import listRepositoryMembers from "./list-repository-members.js";
 import nearDuplicateClusters from "./near-duplicate-clusters.js";
 import getRepositoryOverview from "./repository-overview.js";
@@ -10,6 +12,7 @@ import registrableRepositories from "./registrable-repositories.js";
 import removeRepository from "./remove-repository.js";
 import removeRepositoryMember from "./remove-repository-member.js";
 import renameRepository from "./rename-repository.js";
+import revokeRepositoryAgentKey from "./revoke-repository-agent-key.js";
 import revokeRepositoryApiKey from "./revoke-repository-api-key.js";
 import updateRepositoryMemberPermissions from "./update-repository-member-permissions.js";
 /**
@@ -159,6 +162,30 @@ import updateRepositoryMemberPermissions from "./update-repository-member-permis
  * may not rename it. Before this tool the bridge's only rename path was
  * remove-and-re-register, which destroys every key, run and intent; this one
  * keeps them.
+ *
+ * == The fourteenth through sixteenth: the agent-key family
+ *
+ *   - `list_repository_agent_keys` and `revoke_repository_agent_key` wrap the
+ *     inventory and revoke of `user_repository_agent_keys` (shipped: SPGD-1004,
+ *     specguard `dfb9892`), and `list_repository_agent_keys_presented_revoked`
+ *     wraps the still-presented triage over the same controller (shipped:
+ *     SPGD-1023, specguard `533e77b`).
+ *
+ * The `sga_` noun's first bridge tools, and the gap they close is the one the
+ * platform controller's own header records: a `keys.manage` holder could
+ * already mint and revoke `sgk_` keys through this bridge but could not even
+ * LIST the agent keys covering a repository, so the offboarding arc — a
+ * departed member's agent key authenticating indefinitely — was not
+ * completable over the bridge at all. The family also forced the transport's
+ * third DELETE shape: this revoke answers `200` WITH a JSON disclosure body
+ * (the API's substitute for the web confirm dialog — the response that
+ * performs the cut also names every repository it landed on), so it routes
+ * through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-body handling, which the empty-204 endpoints keep
+ * unchanged. And the id the revoke needs is learnable ONLY from the listing:
+ * minting is deliberately web-only at /account, so unlike the `sgk_` pair
+ * there is no create response to read an id from — the list and revoke
+ * descriptions say so rather than leaving it implicit.
  */
 export const TOOLS = [
     lintIntentAnnotations,
@@ -175,5 +202,8 @@ export const TOOLS = [
     updateRepositoryMemberPermissions,
     removeRepositoryMember,
     renameRepository,
+    listRepositoryAgentKeys,
+    listRepositoryAgentKeysPresentedRevoked,
+    revokeRepositoryAgentKey,
 ];
 //# sourceMappingURL=index.js.map

package/dist/src/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,mBAAmB,MAAM,4BAA4B,CAAC;AAC7D,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,0BAA0B,CAAC;AAC7D,OAAO,uBAAuB,MAAM,+BAA+B,CAAC;AACpE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,sBAAsB,MAAM,+BAA+B,CAAC;AACnE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,iCAAiC,MAAM,2CAA2C,CAAC;AAG1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmJG;AACH,MAAM,CAAC,MAAM,KAAK,GAA8B;IAC9C,qBAAqB;IACrB,qBAAqB;IACrB,gBAAgB;IAChB,aAAa;IACb,uBAAuB;IACvB,gBAAgB;IAChB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,iCAAiC;IACjC,sBAAsB;IACtB,gBAAgB;CACjB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,mBAAmB,MAAM,4BAA4B,CAAC;AAC7D,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,uBAAuB,MAAM,iCAAiC,CAAC;AACtE,OAAO,uCAAuC,MAAM,mDAAmD,CAAC;AACxG,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,qBAAqB,MAAM,0BAA0B,CAAC;AAC7D,OAAO,uBAAuB,MAAM,+BAA+B,CAAC;AACpE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,sBAAsB,MAAM,+BAA+B,CAAC;AACnE,OAAO,gBAAgB,MAAM,wBAAwB,CAAC;AACtD,OAAO,wBAAwB,MAAM,kCAAkC,CAAC;AACxE,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AACpE,OAAO,iCAAiC,MAAM,2CAA2C,CAAC;AAG1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2KG;AACH,MAAM,CAAC,MAAM,KAAK,GAA8B;IAC9C,qBAAqB;IACrB,qBAAqB;IACrB,gBAAgB;IAChB,aAAa;IACb,uBAAuB;IACvB,gBAAgB;IAChB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,iCAAiC;IACjC,sBAAsB;IACtB,gBAAgB;IAChB,uBAAuB;IACvB,uCAAuC;IACvC,wBAAwB;CACzB,CAAC"}

package/dist/src/tools/list-repositories.d.ts

@@ -39,14 +39,41 @@ import type { ToolDefinition } from "./types.js";
  * makes a 401 or an unset variable name the one the OPERATOR of this tool has
  * to go and fix. See `config.ts`.
  *
- * == No arguments, because the credential is the whole question
+ * == The credential is the SCOPE, and the arguments narrow WITHIN it
  *
- * The endpoint takes no parameters: the person the `sgu_` key speaks for is the
- * entire scope of the answer, and `Repository.accessible_by` — owned UNION
- * shared-through-a-membership — is the platform's read-side boundary rather
- * than a filter this bridge could widen or narrow. A repository the person
- * neither owns nor is a member of never enters the response, so there is
- * nothing here for a parameter to select and nothing an argument could reach.
+ * This file first shipped argument-less on a premise that has since rotted: it
+ * said "the endpoint takes no parameters", because the person the `sgu_` key
+ * speaks for was the entire scope of the answer. That stopped being true on
+ * 2026-09-05, when specguard `ef6236d` (SPGD-940, #941) grew
+ * `GET /api/v1/repositories` three narrowing asks through the shared
+ * `RepositoryNarrowing` concern — `?q=` (case-insensitive substring on
+ * `github_full_name`, with the LIKE wildcards escaped server-side, so a
+ * literal `org/my_repo` does not widen into a pattern match), `?role=owned`
+ * and `?role=shared` (the exact partition of the accessible set into owned and
+ * shared halves), and `?sort=stale` (never-ingested repositories first, then
+ * least-recently-ingested, `github_full_name` breaking ties so the order is
+ * deterministic). The concern's own comment says the endpoint reads them "for
+ * a machine" — and this bridge IS that machine, so they are forwarded here
+ * rather than re-invented.
+ *
+ * What has NOT changed is which side of the boundary the asks sit on.
+ * `Repository.accessible_by` — owned UNION shared-through-a-membership — is
+ * still the platform's read-side boundary, and the controller chains every ask
+ * onto the relation that boundary already admitted
+ * (`narrow_repositories(authorized_repositories, …)`): a repository the person
+ * neither owns nor is a member of never ENTERS the relation, so no argument
+ * here widens the answer — it can only narrow, or re-order, what the
+ * credential already admits. Out-of-vocabulary values are the server's to
+ * clamp, not ours: an unknown `role` or `sort` settles to the no-ask, never a
+ * 400, which is also why a value that reaches the wire is passed through
+ * verbatim rather than validated against a second vocabulary here.
+ *
+ * Blank is no ask, and so is undefined: `optionalString` returns `undefined`
+ * for a blank value and `getJson` omits an `undefined` query entry, so
+ * declining an ask and omitting the argument are the same wire request — the
+ * established spelling in this codebase (`repository-overview.ts` states it
+ * as build-don't-stringify), and the reason the no-argument request below is
+ * byte-identical to the one this tool made before it had arguments at all.
  *
  * == The response is passed through, not re-modelled
  *
@@ -67,9 +94,11 @@ import type { ToolDefinition } from "./types.js";
  *
  * The order is `full_name` ascending, which the controller picks as the only
  * column a client can page or diff against without SpecGuard promising an id
- * ordering it has not designed. It is stated here for the same reason the other
- * tool states its orders: a list whose order is a coincidence and a list whose
- * order is a contract look identical in a response body.
+ * ordering it has not designed — and `?sort=stale` re-sequences exactly that
+ * loaded set rather than issuing a different query, so the entries never
+ * change, only their order does. It is stated here for the same reason the
+ * other tool states its orders: a list whose order is a coincidence and a list
+ * whose order is a contract look identical in a response body.
  */
 declare const listRepositories: ToolDefinition;
 export default listRepositories;

package/dist/src/tools/list-repositories.js

@@ -1,4 +1,5 @@
 import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js";
+import { optionalString } from "./args.js";
 /**
  * `GET /api/v1/repositories` as a tool — shipped today in the platform
  * (`specguard/config/routes.rb`, `Api::V1::UserRepositoriesController#index`).
@@ -39,14 +40,41 @@ import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js
  * makes a 401 or an unset variable name the one the OPERATOR of this tool has
  * to go and fix. See `config.ts`.
  *
- * == No arguments, because the credential is the whole question
+ * == The credential is the SCOPE, and the arguments narrow WITHIN it
  *
- * The endpoint takes no parameters: the person the `sgu_` key speaks for is the
- * entire scope of the answer, and `Repository.accessible_by` — owned UNION
- * shared-through-a-membership — is the platform's read-side boundary rather
- * than a filter this bridge could widen or narrow. A repository the person
- * neither owns nor is a member of never enters the response, so there is
- * nothing here for a parameter to select and nothing an argument could reach.
+ * This file first shipped argument-less on a premise that has since rotted: it
+ * said "the endpoint takes no parameters", because the person the `sgu_` key
+ * speaks for was the entire scope of the answer. That stopped being true on
+ * 2026-09-05, when specguard `ef6236d` (SPGD-940, #941) grew
+ * `GET /api/v1/repositories` three narrowing asks through the shared
+ * `RepositoryNarrowing` concern — `?q=` (case-insensitive substring on
+ * `github_full_name`, with the LIKE wildcards escaped server-side, so a
+ * literal `org/my_repo` does not widen into a pattern match), `?role=owned`
+ * and `?role=shared` (the exact partition of the accessible set into owned and
+ * shared halves), and `?sort=stale` (never-ingested repositories first, then
+ * least-recently-ingested, `github_full_name` breaking ties so the order is
+ * deterministic). The concern's own comment says the endpoint reads them "for
+ * a machine" — and this bridge IS that machine, so they are forwarded here
+ * rather than re-invented.
+ *
+ * What has NOT changed is which side of the boundary the asks sit on.
+ * `Repository.accessible_by` — owned UNION shared-through-a-membership — is
+ * still the platform's read-side boundary, and the controller chains every ask
+ * onto the relation that boundary already admitted
+ * (`narrow_repositories(authorized_repositories, …)`): a repository the person
+ * neither owns nor is a member of never ENTERS the relation, so no argument
+ * here widens the answer — it can only narrow, or re-order, what the
+ * credential already admits. Out-of-vocabulary values are the server's to
+ * clamp, not ours: an unknown `role` or `sort` settles to the no-ask, never a
+ * 400, which is also why a value that reaches the wire is passed through
+ * verbatim rather than validated against a second vocabulary here.
+ *
+ * Blank is no ask, and so is undefined: `optionalString` returns `undefined`
+ * for a blank value and `getJson` omits an `undefined` query entry, so
+ * declining an ask and omitting the argument are the same wire request — the
+ * established spelling in this codebase (`repository-overview.ts` states it
+ * as build-don't-stringify), and the reason the no-argument request below is
+ * byte-identical to the one this tool made before it had arguments at all.
  *
  * == The response is passed through, not re-modelled
  *
@@ -67,9 +95,11 @@ import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js
  *
  * The order is `full_name` ascending, which the controller picks as the only
  * column a client can page or diff against without SpecGuard promising an id
- * ordering it has not designed. It is stated here for the same reason the other
- * tool states its orders: a list whose order is a coincidence and a list whose
- * order is a contract look identical in a response body.
+ * ordering it has not designed — and `?sort=stale` re-sequences exactly that
+ * loaded set rather than issuing a different query, so the entries never
+ * change, only their order does. It is stated here for the same reason the
+ * other tool states its orders: a list whose order is a coincidence and a list
+ * whose order is a contract look identical in a response body.
  */
 const listRepositories = {
     name: "list_repositories",
@@ -82,7 +112,14 @@ const listRepositories = {
         "`role` is `owner` or `member`: the list mixes repositories this person owns with " +
         "repositories somebody shared with them, and nothing else distinguishes the two — read it " +
         "before assuming a repository is yours to administer. " +
-        "Ordered by `full_name` ascending, which is stable across calls. " +
+        "Three optional asks narrow WITHIN that set — none of them can widen it — all optional, " +
+        "composable on one call: `q` (case-insensitive substring on `full_name`), " +
+        "`role: \"owned\"` or `\"shared\"` (one half of the owned/shared mix — note the ask is " +
+        "spelled `owned`, not the response field's `owner`), and `sort: \"stale\"` (repositories " +
+        "CI has never ingested a run for first, then least-recently-ingested, `full_name` " +
+        "breaking ties). Omit them all and the request is the plain full list. " +
+        "Ordered by `full_name` ascending unless `sort` asks otherwise, and stable across calls " +
+        "either way. " +
         "The set is exactly what this person may see — a repository they neither own nor were given " +
         "access to is absent rather than filtered, so an empty list means no access, never an error. " +
         "Needs SPECGUARD_USER_API_KEY (an sgu_… key), which is a DIFFERENT credential from the " +
@@ -90,18 +127,77 @@ const listRepositories = {
         "place.",
     inputSchema: {
         type: "object",
-        // No properties, deliberately — see this file's header. Still CLOSED rather
-        // than merely empty: `additionalProperties: false` is advertised in
-        // `tools/list`, so a client that honours the schema REJECTS an invented
+        properties: {
+            q: {
+                type: "string",
+                description: "Keep only the repositories whose `github_full_name` (`org/repo`) CONTAINS this " +
+                    "substring, case-insensitively — the same ask the deployment's web grid reads. " +
+                    "A plain substring, not a pattern: the server matches with `ILIKE '%…%'` and escapes " +
+                    "the LIKE wildcards (`%`, `_`, `\\`) first, so `org/my_repo` matches itself rather " +
+                    "than widening into `my-repo` and `myxrepo`. " +
+                    "It narrows the SAME set the plain call serves — a repository the credential does not " +
+                    "admit never enters the response, so no `q` can make one appear — and an ask that " +
+                    "matches nothing is an empty list with a 200, the same answer as having no access, " +
+                    "not an error. " +
+                    "Blank (or null) is no ask: the request is then byte-identical to omitting the " +
+                    "argument.",
+            },
+            role: {
+                type: "string",
+                enum: ["owned", "shared"],
+                description: "Keep only ONE half of the list's mix: `owned` keeps the repositories this person " +
+                    "owns, `shared` keeps the ones somebody shared with them. The two partition the " +
+                    "accessible set exactly — a repository owned AND shared cannot exist by construction, " +
+                    "so nothing is lost by asking for one half — and both chain onto the credential " +
+                    "boundary, so neither half can be wider than the plain call's answer. " +
+                    "THE ASK VALUES ARE SPELLED DIFFERENTLY FROM THE RESPONSE FIELD: an entry's `role` is " +
+                    "`\"owner\"` or `\"member\"`, but the ask is `owned`/`shared` — send `role: " +
+                    "\"owner\"` and you are not asking for anything. A client that honours this schema " +
+                    "cannot send it (the enum refuses it before the call); a client that bypasses the " +
+                    "schema gets the server's clamp, where any value outside `owned`/`shared` settles to " +
+                    "the no-ask and the full list is served — never an error. " +
+                    "Blank (or null) is no ask: byte-identical to omitting the argument.",
+            },
+            sort: {
+                type: "string",
+                enum: ["stale"],
+                description: "Re-order the list stalest-first. The default order is `full_name` ascending, which " +
+                    "is stable across calls but says nothing about what needs attention; `stale` puts " +
+                    "the repositories CI has NEVER ingested a run for FIRST (never-ingested is the " +
+                    "stalest state on this list, not a zero), then least-recently-ingested, newest last, " +
+                    "with `github_full_name` breaking ties so two calls with the same data agree element " +
+                    "for element. " +
+                    "It re-sequences the loaded set rather than issuing a different query: the same " +
+                    "entries, a different order. `stale` is the only ordering the endpoint names — there " +
+                    "is deliberately no word for the default, because omitting the argument already " +
+                    "means it. " +
+                    "Any other value a schema-bypassing client sends settles to the server's no-ask clamp " +
+                    "(default order, no error); blank (or null) is no ask, byte-identical to omitting the " +
+                    "argument.",
+            },
+        },
+        // Still CLOSED rather than open: `additionalProperties: false` is advertised
+        // in `tools/list`, so a client that honours the schema REJECTS an invented
         // argument before the call is made. Nothing on this side refuses it —
-        // `server.ts` forwards `arguments` unvalidated and `run` ignores them — so
-        // an open schema would have the argument silently dropped and the call
-        // answered as if it had been honoured.
+        // `server.ts` forwards `arguments` unvalidated — so an open schema would
+        // have the argument silently dropped and the call answered as if it had
+        // been honoured. The enum vocabularies above are the server's own accepted
+        // values (`RepositoryNarrowing`'s ROLES and SORTS), not a second list this
+        // bridge keeps in step by hand.
         additionalProperties: false,
     },
-    async run(_args, context) {
+    async run(args, context) {
+        const q = optionalString(args["q"], "q");
+        const role = optionalString(args["role"], "role");
+        const sort = optionalString(args["sort"], "sort");
         const api = requireUserApiConfig(context.config);
-        const listing = await getJsonObject(api, "/api/v1/repositories", {}, context.fetch);
+        // Built, not stringified — the established rule for a query object
+        // (`repository-overview.ts`): `getJson` omits an `undefined` entry and sets
+        // everything else verbatim, so an ask declined (blank), omitted, or never
+        // defined all compose to the ONE request the caller meant, and with no asks
+        // at all the object is `{}` — the byte-identical request this tool made
+        // before it had arguments.
+        const listing = await getJsonObject(api, "/api/v1/repositories", { q, role, sort }, context.fetch);
         return {
             text: JSON.stringify(listing, null, 2),
             structured: listing,

package/dist/src/tools/list-repositories.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-repositories.js","sourceRoot":"","sources":["../../../src/tools/list-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGlF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,MAAM,gBAAgB,GAAmB;IACvC,IAAI,EAAE,mBAAmB;IACzB,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,2FAA2F;QAC3F,2FAA2F;QAC3F,6DAA6D;QAC7D,6FAA6F;QAC7F,wDAAwD;QACxD,mFAAmF;QACnF,2FAA2F;QAC3F,uDAAuD;QACvD,kEAAkE;QAClE,6FAA6F;QAC7F,8FAA8F;QAC9F,wFAAwF;QACxF,4FAA4F;QAC5F,QAAQ;IACV,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,4EAA4E;QAC5E,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,2EAA2E;QAC3E,uEAAuE;QACvE,uCAAuC;QACvC,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO;QACtB,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,sBAAsB,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAEpF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,UAAU,EAAE,OAAO;SACpB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"list-repositories.js","sourceRoot":"","sources":["../../../src/tools/list-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoGG;AACH,MAAM,gBAAgB,GAAmB;IACvC,IAAI,EAAE,mBAAmB;IACzB,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACT,2FAA2F;QAC3F,2FAA2F;QAC3F,6DAA6D;QAC7D,6FAA6F;QAC7F,wDAAwD;QACxD,mFAAmF;QACnF,2FAA2F;QAC3F,uDAAuD;QACvD,yFAAyF;QACzF,2EAA2E;QAC3E,wFAAwF;QACxF,0FAA0F;QAC1F,mFAAmF;QACnF,wEAAwE;QACxE,yFAAyF;QACzF,cAAc;QACd,6FAA6F;QAC7F,8FAA8F;QAC9F,wFAAwF;QACxF,4FAA4F;QAC5F,QAAQ;IACV,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,CAAC,EAAE;gBACD,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,iFAAiF;oBACjF,gFAAgF;oBAChF,sFAAsF;oBACtF,oFAAoF;oBACpF,8CAA8C;oBAC9C,uFAAuF;oBACvF,mFAAmF;oBACnF,oFAAoF;oBACpF,gBAAgB;oBAChB,gFAAgF;oBAChF,WAAW;aACd;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;gBACzB,WAAW,EACT,mFAAmF;oBACnF,iFAAiF;oBACjF,uFAAuF;oBACvF,iFAAiF;oBACjF,uEAAuE;oBACvE,uFAAuF;oBACvF,6EAA6E;oBAC7E,oFAAoF;oBACpF,mFAAmF;oBACnF,sFAAsF;oBACtF,2DAA2D;oBAC3D,qEAAqE;aACxE;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,WAAW,EACT,qFAAqF;oBACrF,mFAAmF;oBACnF,gFAAgF;oBAChF,sFAAsF;oBACtF,sFAAsF;oBACtF,eAAe;oBACf,iFAAiF;oBACjF,sFAAsF;oBACtF,iFAAiF;oBACjF,YAAY;oBACZ,uFAAuF;oBACvF,uFAAuF;oBACvF,WAAW;aACd;SACF;QACD,6EAA6E;QAC7E,2EAA2E;QAC3E,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,gCAAgC;QAChC,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO;QACrB,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,mEAAmE;QACnE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,wEAAwE;QACxE,2BAA2B;QAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,GAAG,EACH,sBAAsB,EACtB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EACjB,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,UAAU,EAAE,OAAO;SACpB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/src/tools/list-repository-agent-keys-presented-revoked.d.ts

@@ -0,0 +1,39 @@
+import type { ToolDefinition } from "./types.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys/presented_revoked` as a
+ * tool — shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#presented_revoked`, SPGD-1023,
+ * `533e77b`).
+ *
+ * == The verify half of the offboarding arc
+ *
+ * The listing and the revoke answer "what is live" and "cut this one"; neither
+ * can answer the question a revoker is left holding — "is the dead token still
+ * arriving?" — because both read LIVE rows only. The stamp this triage serves,
+ * `last_refused_at`, is written by the 401 failure path on RETAINED revoked
+ * rows, so it cannot ride a live row at all. This read is the bridge's only
+ * window onto it, behind the same `keys_manage` gate the other two actions
+ * answer to.
+ *
+ * == Two honesty clauses the description carries verbatim
+ *
+ * `last_refused_at` is the LAST observed presentation — a recency, never a
+ * present-tense claim that a client is presenting the token now. And an empty
+ * `{"agent_keys": []}` is an ANSWER — "no revoked key is still being
+ * presented" — not an absence of tracking; the endpoint serves the negative
+ * deliberately so the two are distinguishable. A tool that summarised an
+ * empty answer into a count of its own would erase exactly that distinction,
+ * which is why this one passes the body through.
+ *
+ * == Rows, pass-through
+ *
+ * One row per still-presented revoked key covering this repository: `id`,
+ * `name`, `owner`, `token_hint`, `repository_count` (the STORED set's size —
+ * the same blast-radius figure the revoke response discloses), `revoked_at`
+ * and `last_refused_at`. `token_hint` is what the remedy hunts for in the
+ * secret store — update whichever of them still holds the dead token — and it
+ * is never the token: the plaintext existed for exactly one response at mint
+ * time and nothing persisted it.
+ */
+declare const listRepositoryAgentKeysPresentedRevoked: ToolDefinition;
+export default listRepositoryAgentKeysPresentedRevoked;

package/dist/src/tools/list-repository-agent-keys-presented-revoked.js

@@ -0,0 +1,89 @@
+import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js";
+import { requireString } from "./args.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys/presented_revoked` as a
+ * tool — shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#presented_revoked`, SPGD-1023,
+ * `533e77b`).
+ *
+ * == The verify half of the offboarding arc
+ *
+ * The listing and the revoke answer "what is live" and "cut this one"; neither
+ * can answer the question a revoker is left holding — "is the dead token still
+ * arriving?" — because both read LIVE rows only. The stamp this triage serves,
+ * `last_refused_at`, is written by the 401 failure path on RETAINED revoked
+ * rows, so it cannot ride a live row at all. This read is the bridge's only
+ * window onto it, behind the same `keys_manage` gate the other two actions
+ * answer to.
+ *
+ * == Two honesty clauses the description carries verbatim
+ *
+ * `last_refused_at` is the LAST observed presentation — a recency, never a
+ * present-tense claim that a client is presenting the token now. And an empty
+ * `{"agent_keys": []}` is an ANSWER — "no revoked key is still being
+ * presented" — not an absence of tracking; the endpoint serves the negative
+ * deliberately so the two are distinguishable. A tool that summarised an
+ * empty answer into a count of its own would erase exactly that distinction,
+ * which is why this one passes the body through.
+ *
+ * == Rows, pass-through
+ *
+ * One row per still-presented revoked key covering this repository: `id`,
+ * `name`, `owner`, `token_hint`, `repository_count` (the STORED set's size —
+ * the same blast-radius figure the revoke response discloses), `revoked_at`
+ * and `last_refused_at`. `token_hint` is what the remedy hunts for in the
+ * secret store — update whichever of them still holds the dead token — and it
+ * is never the token: the plaintext existed for exactly one response at mint
+ * time and nothing persisted it.
+ */
+const listRepositoryAgentKeysPresentedRevoked = {
+    name: "list_repository_agent_keys_presented_revoked",
+    title: "List still-presented revoked agent keys",
+    description: "Lists REVOKED agent keys whose token is still arriving at the deployment after revocation — " +
+        "the verify half of offboarding: run it after `revoke_repository_agent_key` to learn whether " +
+        "the dead token is still being presented somewhere. Each row carries `id`, `name`, `owner`, " +
+        "`token_hint` (hunt THIS in whatever secret stores may still hold the dead token, and update " +
+        "them), `repository_count`, `revoked_at` and `last_refused_at`. " +
+        "`last_refused_at` is the LAST observed presentation — a recency, never a present-tense claim " +
+        "that something is presenting the token right now. " +
+        "An empty `{\"agent_keys\": []}` is an ANSWER — nothing is still arriving — not an absence of " +
+        "tracking; read it as the offboarding having fully taken. " +
+        "`token_hint` is a hint, never the token — the plaintext existed for exactly one response at " +
+        "mint time and nothing persisted it. " +
+        "Authorization is the `keys_manage` capability — a caller without it is refused 403 in " +
+        "SpecGuard's own words. " +
+        "Takes `repository_id` (the numeric id `list_repositories` reports, not the `org/repo` handle). " +
+        "Needs SPECGUARD_USER_API_KEY (an sgu_… key), the same credential the other key-administration " +
+        "tools read and a DIFFERENT one from the sgk_… repository key `get_repository_overview` uses.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            repository_id: {
+                type: "string",
+                description: "The repository to triage — its numeric id, as `add_repository` returns and " +
+                    "`list_repositories` reports, not the `org/repo` handle.",
+            },
+        },
+        required: ["repository_id"],
+        // Closed for the reason every tool here states: `server.ts` forwards
+        // `arguments` unvalidated, so an open schema would let a misspelled argument
+        // be dropped silently.
+        additionalProperties: false,
+    },
+    async run(args, context) {
+        const repositoryId = requireString(args["repository_id"], "repository_id");
+        const api = requireUserApiConfig(context.config);
+        const body = await getJsonObject(api, `/api/v1/repositories/${encodeURIComponent(repositoryId)}/agent_keys/presented_revoked`, {}, context.fetch);
+        // Passed through unreshaped, the standing rule (`types.ts`: "A thin client
+        // that reshapes its upstream is not thin") — and the empty answer passes
+        // through with it: `{"agent_keys": []}` is the endpoint saying "nothing is
+        // still arriving", and a summary of it would erase the distinction between
+        // that answer and an absence of tracking.
+        return {
+            text: JSON.stringify(body, null, 2),
+            structured: body,
+        };
+    },
+};
+export default listRepositoryAgentKeysPresentedRevoked;
+//# sourceMappingURL=list-repository-agent-keys-presented-revoked.js.map

package/dist/src/tools/list-repository-agent-keys-presented-revoked.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-repository-agent-keys-presented-revoked.js","sourceRoot":"","sources":["../../../src/tools/list-repository-agent-keys-presented-revoked.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,uCAAuC,GAAmB;IAC9D,IAAI,EAAE,8CAA8C;IACpD,KAAK,EAAE,yCAAyC;IAChD,WAAW,EACT,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,8FAA8F;QAC9F,iEAAiE;QACjE,+FAA+F;QAC/F,oDAAoD;QACpD,+FAA+F;QAC/F,2DAA2D;QAC3D,8FAA8F;QAC9F,sCAAsC;QACtC,wFAAwF;QACxF,yBAAyB;QACzB,iGAAiG;QACjG,gGAAgG;QAChG,8FAA8F;IAChG,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,6EAA6E;oBAC7E,yDAAyD;aAC5D;SACF;QACD,QAAQ,EAAE,CAAC,eAAe,CAAC;QAC3B,qEAAqE;QACrE,6EAA6E;QAC7E,uBAAuB;QACvB,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO;QACrB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,GAAG,EACH,wBAAwB,kBAAkB,CAAC,YAAY,CAAC,+BAA+B,EACvF,EAAE,EACF,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,0CAA0C;QAC1C,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,uCAAuC,CAAC"}

package/dist/src/tools/list-repository-agent-keys.d.ts

@@ -0,0 +1,38 @@
+import type { ToolDefinition } from "./types.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys` as a tool — shipped in
+ * the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#index`, SPGD-1004, `dfb9892`).
+ *
+ * == The id source is THIS listing, and only this listing
+ *
+ * Agent keys have no mint tool on this bridge — deliberately: the platform
+ * mints them web-only at /account (the controller header states the rule), so
+ * unlike `sgk_` keys there is no create response to read an id from. The `id`
+ * each row serves is therefore the ONLY way an agent can name an agent key to
+ * `revoke_repository_agent_key`, and the description says so rather than
+ * leaving it implicit — an agent that arrives needing to cut a key without
+ * having listed first has no fallback path.
+ *
+ * == Rows, pass-through
+ *
+ * The endpoint answers `{agent_keys: [...]}`, one row per LIVE key covering
+ * this repository: `id`, `name`, `owner`, `token_hint`, `repository_count`
+ * (the size of the key's stored set — the blast radius a revoke would land
+ * on), `permissions` (rendered the way the web panel renders it, "read only"
+ * for the minimal grant) and `created_at`. `token_hint` is a hint and never
+ * the token: the plaintext existed for exactly one response at mint time and
+ * nothing persisted it. Revoked rows leave the listing — a retained revoked
+ * row is not a credential — and the still-presented triage over those rows is
+ * `list_repository_agent_keys_presented_revoked`.
+ *
+ * == No client-side capability probing
+ *
+ * The server gates at `current_repository(:keys_manage)`, the same gate the
+ * `sgk_` key pair answers to: a caller who cannot administer this
+ * repository's keys is refused 403 in SpecGuard's own words, and a caller who
+ * cannot see the repository at all gets the nil-is-404 fork. This tool
+ * predicts neither; it reports what came back.
+ */
+declare const listRepositoryAgentKeys: ToolDefinition;
+export default listRepositoryAgentKeys;

package/dist/src/tools/list-repository-agent-keys.js

@@ -0,0 +1,86 @@
+import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js";
+import { requireString } from "./args.js";
+/**
+ * `GET /api/v1/repositories/:repository_id/agent_keys` as a tool — shipped in
+ * the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#index`, SPGD-1004, `dfb9892`).
+ *
+ * == The id source is THIS listing, and only this listing
+ *
+ * Agent keys have no mint tool on this bridge — deliberately: the platform
+ * mints them web-only at /account (the controller header states the rule), so
+ * unlike `sgk_` keys there is no create response to read an id from. The `id`
+ * each row serves is therefore the ONLY way an agent can name an agent key to
+ * `revoke_repository_agent_key`, and the description says so rather than
+ * leaving it implicit — an agent that arrives needing to cut a key without
+ * having listed first has no fallback path.
+ *
+ * == Rows, pass-through
+ *
+ * The endpoint answers `{agent_keys: [...]}`, one row per LIVE key covering
+ * this repository: `id`, `name`, `owner`, `token_hint`, `repository_count`
+ * (the size of the key's stored set — the blast radius a revoke would land
+ * on), `permissions` (rendered the way the web panel renders it, "read only"
+ * for the minimal grant) and `created_at`. `token_hint` is a hint and never
+ * the token: the plaintext existed for exactly one response at mint time and
+ * nothing persisted it. Revoked rows leave the listing — a retained revoked
+ * row is not a credential — and the still-presented triage over those rows is
+ * `list_repository_agent_keys_presented_revoked`.
+ *
+ * == No client-side capability probing
+ *
+ * The server gates at `current_repository(:keys_manage)`, the same gate the
+ * `sgk_` key pair answers to: a caller who cannot administer this
+ * repository's keys is refused 403 in SpecGuard's own words, and a caller who
+ * cannot see the repository at all gets the nil-is-404 fork. This tool
+ * predicts neither; it reports what came back.
+ */
+const listRepositoryAgentKeys = {
+    name: "list_repository_agent_keys",
+    title: "List repository agent keys",
+    description: "Lists the agent keys (`sga_…` keys) covering a SpecGuard repository: one row per live key " +
+        "with its `id`, `name`, `owner`, `token_hint`, `repository_count` (how many repositories the " +
+        "key's grant covers — the blast radius), `permissions` and `created_at`. " +
+        "Agent keys have NO mint tool on this bridge — minting is deliberately web-only — so the `id` " +
+        "this listing serves is the ONLY way to name a key to `revoke_repository_agent_key`: list " +
+        "first, then revoke. " +
+        "Revoked keys leave this listing (a retained revoked row is not a credential); whether a dead " +
+        "token is still arriving is `list_repository_agent_keys_presented_revoked`'s question. " +
+        "`token_hint` is a hint, never the token — the plaintext existed for exactly one response at " +
+        "mint time and nothing persisted it. " +
+        "Authorization is the `keys_manage` capability — a caller without it is refused 403 in " +
+        "SpecGuard's own words. " +
+        "Takes `repository_id` (the numeric id `list_repositories` reports, not the `org/repo` handle). " +
+        "Needs SPECGUARD_USER_API_KEY (an sgu_… key), the same credential the other key-administration " +
+        "tools read and a DIFFERENT one from the sgk_… repository key `get_repository_overview` uses.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            repository_id: {
+                type: "string",
+                description: "The repository whose agent keys to list — its numeric id, as `add_repository` " +
+                    "returns and `list_repositories` reports, not the `org/repo` handle.",
+            },
+        },
+        required: ["repository_id"],
+        // Closed for the reason every tool here states: `server.ts` forwards
+        // `arguments` unvalidated, so an open schema would let a misspelled argument
+        // be dropped silently.
+        additionalProperties: false,
+    },
+    async run(args, context) {
+        const repositoryId = requireString(args["repository_id"], "repository_id");
+        const api = requireUserApiConfig(context.config);
+        const body = await getJsonObject(api, `/api/v1/repositories/${encodeURIComponent(repositoryId)}/agent_keys`, {}, context.fetch);
+        // Passed through unreshaped, the standing rule (`types.ts`: "A thin client
+        // that reshapes its upstream is not thin") — the rows are the controller's
+        // own serialization, and the `id` an agent needs for the revoke is one of
+        // the fields a reshape could drop.
+        return {
+            text: JSON.stringify(body, null, 2),
+            structured: body,
+        };
+    },
+};
+export default listRepositoryAgentKeys;
+//# sourceMappingURL=list-repository-agent-keys.js.map

package/dist/src/tools/list-repository-agent-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-repository-agent-keys.js","sourceRoot":"","sources":["../../../src/tools/list-repository-agent-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,uBAAuB,GAAmB;IAC9C,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,4BAA4B;IACnC,WAAW,EACT,4FAA4F;QAC5F,8FAA8F;QAC9F,0EAA0E;QAC1E,+FAA+F;QAC/F,2FAA2F;QAC3F,sBAAsB;QACtB,+FAA+F;QAC/F,wFAAwF;QACxF,8FAA8F;QAC9F,sCAAsC;QACtC,wFAAwF;QACxF,yBAAyB;QACzB,iGAAiG;QACjG,gGAAgG;QAChG,8FAA8F;IAChG,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,gFAAgF;oBAChF,qEAAqE;aACxE;SACF;QACD,QAAQ,EAAE,CAAC,eAAe,CAAC;QAC3B,qEAAqE;QACrE,6EAA6E;QAC7E,uBAAuB;QACvB,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO;QACrB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,GAAG,EACH,wBAAwB,kBAAkB,CAAC,YAAY,CAAC,aAAa,EACrE,EAAE,EACF,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,mCAAmC;QACnC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/src/tools/registrable-repositories.d.ts

@@ -42,10 +42,15 @@ import type { ToolDefinition } from "./types.js";
  * ago" is a different fact from "you never had one", and the tool description
  * is where an agent learns to branch on it.
  *
- * == No arguments, for the same reason `list_repositories` has none
+ * == No arguments, for the same reason `list_repositories` used to have none
  *
  * The credential is the whole of the scope. The endpoint takes no parameters,
- * and nothing an argument could select reaches this answer.
+ * and nothing an argument could select reaches this answer. (`list_repositories`
+ * argued the same way and argued it the same amount — until its endpoint grew
+ * the SPGD-940 narrowing asks and the tool grew the arguments that forward
+ * them. This endpoint has grown no asks, so the argument-less shape here is
+ * still the honest one, and the sentence above keeps saying so rather than
+ * inheriting a reason that moved.)
  */
 declare const registrableRepositories: ToolDefinition;
 export default registrableRepositories;

package/dist/src/tools/registrable-repositories.js

@@ -42,10 +42,15 @@ import { getJsonObject, requireUserApiConfig } from "../support/specguard-api.js
  * ago" is a different fact from "you never had one", and the tool description
  * is where an agent learns to branch on it.
  *
- * == No arguments, for the same reason `list_repositories` has none
+ * == No arguments, for the same reason `list_repositories` used to have none
  *
  * The credential is the whole of the scope. The endpoint takes no parameters,
- * and nothing an argument could select reaches this answer.
+ * and nothing an argument could select reaches this answer. (`list_repositories`
+ * argued the same way and argued it the same amount — until its endpoint grew
+ * the SPGD-940 narrowing asks and the tool grew the arguments that forward
+ * them. This endpoint has grown no asks, so the argument-less shape here is
+ * still the honest one, and the sentence above keeps saying so rather than
+ * inheriting a reason that moved.)
  */
 const registrableRepositories = {
     name: "registrable_repositories",

package/dist/src/tools/registrable-repositories.js.map

@@ -1 +1 @@
-{"version":3,"file":"registrable-repositories.js","sourceRoot":"","sources":["../../../src/tools/registrable-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGlF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,uBAAuB,GAAmB;IAC9C,IAAI,EAAE,0BAA0B;IAChC,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACT,4FAA4F;QAC5F,2FAA2F;QAC3F,sFAAsF;QACtF,6FAA6F;QAC7F,qFAAqF;QACrF,6FAA6F;QAC7F,yFAAyF;QACzF,mFAAmF;QACnF,8FAA8F;QAC9F,yFAAyF;QACzF,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,wFAAwF;QACxF,4FAA4F;QAC5F,yFAAyF;QACzF,mFAAmF;QACnF,wFAAwF;QACxF,sFAAsF;QACtF,6EAA6E;IAC/E,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,4CAA4C;QAC5C,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO;QACtB,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,GAAG,EACH,kCAAkC,EAClC,EAAE,EACF,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,UAAU,EAAE,OAAO;SACpB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"registrable-repositories.js","sourceRoot":"","sources":["../../../src/tools/registrable-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGlF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAM,uBAAuB,GAAmB;IAC9C,IAAI,EAAE,0BAA0B;IAChC,KAAK,EAAE,0BAA0B;IACjC,WAAW,EACT,4FAA4F;QAC5F,2FAA2F;QAC3F,sFAAsF;QACtF,6FAA6F;QAC7F,qFAAqF;QACrF,6FAA6F;QAC7F,yFAAyF;QACzF,mFAAmF;QACnF,8FAA8F;QAC9F,yFAAyF;QACzF,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,wFAAwF;QACxF,4FAA4F;QAC5F,yFAAyF;QACzF,mFAAmF;QACnF,wFAAwF;QACxF,sFAAsF;QACtF,6EAA6E;IAC/E,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,4CAA4C;QAC5C,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO;QACtB,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,GAAG,EACH,kCAAkC,EAClC,EAAE,EACF,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,UAAU,EAAE,OAAO;SACpB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/src/tools/revoke-repository-agent-key.d.ts

@@ -0,0 +1,45 @@
+import type { ToolDefinition } from "./types.js";
+/**
+ * `DELETE /api/v1/repositories/:repository_id/agent_keys/:id` as a tool —
+ * shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#destroy`, SPGD-1004, `dfb9892`).
+ *
+ * == The blast radius is the whole stored set
+ *
+ * An agent key's grant — a repository set and a permission set — is chosen
+ * once at mint time and stored ONCE, so revocation cuts the token on EVERY
+ * repository in the set, not only the one this call names. On the web a
+ * confirm dialog names that set BEFORE the cut; over the API there is no
+ * dialog, so the disclosure travels in the response that performs it: count
+ * first, then the still-existing names, with `deleted_repository_count`
+ * present only when repositories have been deleted since mint and dropped out
+ * of the names. The tool passes the body through rather than answering with a
+ * summary of its own — the deployment already wrote the confirmation, and a
+ * second wording of it is a second fact free to drift from the first.
+ *
+ * == 200 WITH a body, not the sibling's 204
+ *
+ * `revoke_repository_api_key` says "a 204 means revoked" because every
+ * endpoint this bridge's DELETEs served until now answered empty. This one
+ * deliberately does not: the disclosure body IS the confirmation, so the call
+ * routes through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-text handling. The difference is carried in the
+ * description because a caller pattern-matching on the sibling's contract
+ * would otherwise misread the shape of success here.
+ *
+ * == The id is scoped, and both forks are 404
+ *
+ * `AgentApiKey.live.find` + `covers?` — a key id that is revoked already (a
+ * retained revoked row is not a credential) or whose stored set does not cover
+ * THIS repository is a 404, never a cross-repository cut. The bridge relies on
+ * that server scoping entirely and adds no client-side check of its own, for
+ * the reason every tool here states: the server is the gate.
+ *
+ * == The id source
+ *
+ * No mint tool exists (deliberately web-only), so the id comes from
+ * `list_repository_agent_keys` alone — stated in the description rather than
+ * left implicit.
+ */
+declare const revokeRepositoryAgentKey: ToolDefinition;
+export default revokeRepositoryAgentKey;

package/dist/src/tools/revoke-repository-agent-key.js

@@ -0,0 +1,104 @@
+import { deleteJsonObject, requireUserApiConfig } from "../support/specguard-api.js";
+import { requireString } from "./args.js";
+/**
+ * `DELETE /api/v1/repositories/:repository_id/agent_keys/:id` as a tool —
+ * shipped in the platform (`specguard/config/routes.rb`,
+ * `Api::V1::UserRepositoryAgentKeysController#destroy`, SPGD-1004, `dfb9892`).
+ *
+ * == The blast radius is the whole stored set
+ *
+ * An agent key's grant — a repository set and a permission set — is chosen
+ * once at mint time and stored ONCE, so revocation cuts the token on EVERY
+ * repository in the set, not only the one this call names. On the web a
+ * confirm dialog names that set BEFORE the cut; over the API there is no
+ * dialog, so the disclosure travels in the response that performs it: count
+ * first, then the still-existing names, with `deleted_repository_count`
+ * present only when repositories have been deleted since mint and dropped out
+ * of the names. The tool passes the body through rather than answering with a
+ * summary of its own — the deployment already wrote the confirmation, and a
+ * second wording of it is a second fact free to drift from the first.
+ *
+ * == 200 WITH a body, not the sibling's 204
+ *
+ * `revoke_repository_api_key` says "a 204 means revoked" because every
+ * endpoint this bridge's DELETEs served until now answered empty. This one
+ * deliberately does not: the disclosure body IS the confirmation, so the call
+ * routes through `deleteJsonObject` — `requestJson`'s parse — rather than
+ * `deleteJson`'s raw-text handling. The difference is carried in the
+ * description because a caller pattern-matching on the sibling's contract
+ * would otherwise misread the shape of success here.
+ *
+ * == The id is scoped, and both forks are 404
+ *
+ * `AgentApiKey.live.find` + `covers?` — a key id that is revoked already (a
+ * retained revoked row is not a credential) or whose stored set does not cover
+ * THIS repository is a 404, never a cross-repository cut. The bridge relies on
+ * that server scoping entirely and adds no client-side check of its own, for
+ * the reason every tool here states: the server is the gate.
+ *
+ * == The id source
+ *
+ * No mint tool exists (deliberately web-only), so the id comes from
+ * `list_repository_agent_keys` alone — stated in the description rather than
+ * left implicit.
+ */
+const revokeRepositoryAgentKey = {
+    name: "revoke_repository_agent_key",
+    title: "Revoke repository agent key",
+    description: "Revokes one agent key (`sga_…` key) on a SpecGuard repository. IRREVERSIBLE, and the blast " +
+        "radius is the key's WHOLE stored set: the grant (repository set + permission set) is stored " +
+        "once at mint time, so this one call cuts the token on EVERY repository the key covers, not " +
+        "just `repository_id` — check `repository_count` on `list_repository_agent_keys` BEFORE " +
+        "cutting a multi-repository key. " +
+        "Answers `200` WITH the disclosure body — an `agent_key` block carrying `revoked_at`, " +
+        "`repository_count` and the still-existing `repositories` names, plus " +
+        "`deleted_repository_count` when some have been deleted since mint — NOT the empty 204 the " +
+        "sgk_ sibling `revoke_repository_api_key` serves; the body itself is the confirmation. " +
+        "The `key_id` is scoped to `repository_id`: a key whose stored set does not cover this " +
+        "repository, or one already revoked, is refused 404, never a cross-repository cut. " +
+        "Agent keys have NO mint tool on this bridge (minting is deliberately web-only), so take " +
+        "`key_id` from `list_repository_agent_keys` — list first, then revoke. " +
+        "Authorization is the `keys_manage` capability — a caller without it is refused 403 in " +
+        "SpecGuard's own words. " +
+        "Takes `repository_id` (the numeric id `list_repositories` reports) and `key_id`. " +
+        "Needs SPECGUARD_USER_API_KEY (an sgu_… key), the same credential the other key-administration " +
+        "tools read and a DIFFERENT one from the sgk_… repository key `get_repository_overview` uses.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            repository_id: {
+                type: "string",
+                description: "The repository whose key-administration scope the call is made under — its numeric " +
+                    "id, as `add_repository` returns and `list_repositories` reports, not the `org/repo` " +
+                    "handle. The CUT, however, lands on every repository in the key's stored set.",
+            },
+            key_id: {
+                type: "string",
+                description: "The id of the agent key to revoke, as served by `list_repository_agent_keys` — " +
+                    "the only id source, because agent keys have no mint tool on this bridge. Scoped to " +
+                    "`repository_id`: a key whose stored set excludes this repository, or one already " +
+                    "revoked, is refused 404.",
+            },
+        },
+        required: ["repository_id", "key_id"],
+        // Closed for the reason every tool here states — and on a DESTRUCTIVE path,
+        // a silently dropped misspelled argument must not be able to leave the
+        // agent believing it revoked a key the call never named.
+        additionalProperties: false,
+    },
+    async run(args, context) {
+        const repositoryId = requireString(args["repository_id"], "repository_id");
+        const keyId = requireString(args["key_id"], "key_id");
+        const api = requireUserApiConfig(context.config);
+        // The 200 disclosure body, passed through unreshaped in both halves — the
+        // deployment already wrote the confirmation (the stored set, count first),
+        // and this is the API's substitute for the web confirm dialog.
+        const disclosure = await deleteJsonObject(api, `/api/v1/repositories/${encodeURIComponent(repositoryId)}/agent_keys/${encodeURIComponent(keyId)}`, context.fetch);
+        return {
+            text: JSON.stringify(disclosure, null, 2),
+            structured: disclosure,
+        };
+    },
+};
+export default revokeRepositoryAgentKey;
+//# sourceMappingURL=revoke-repository-agent-key.js.map

package/dist/src/tools/revoke-repository-agent-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-repository-agent-key.js","sourceRoot":"","sources":["../../../src/tools/revoke-repository-agent-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,wBAAwB,GAAmB;IAC/C,IAAI,EAAE,6BAA6B;IACnC,KAAK,EAAE,6BAA6B;IACpC,WAAW,EACT,6FAA6F;QAC7F,8FAA8F;QAC9F,6FAA6F;QAC7F,yFAAyF;QACzF,kCAAkC;QAClC,uFAAuF;QACvF,uEAAuE;QACvE,4FAA4F;QAC5F,wFAAwF;QACxF,wFAAwF;QACxF,oFAAoF;QACpF,0FAA0F;QAC1F,wEAAwE;QACxE,wFAAwF;QACxF,yBAAyB;QACzB,mFAAmF;QACnF,gGAAgG;QAChG,8FAA8F;IAChG,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,qFAAqF;oBACrF,sFAAsF;oBACtF,8EAA8E;aACjF;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,iFAAiF;oBACjF,qFAAqF;oBACrF,mFAAmF;oBACnF,0BAA0B;aAC7B;SACF;QACD,QAAQ,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC;QACrC,4EAA4E;QAC5E,uEAAuE;QACvE,yDAAyD;QACzD,oBAAoB,EAAE,KAAK;KAC5B;IAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO;QACrB,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEtD,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEjD,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,GAAG,EACH,wBAAwB,kBAAkB,CAAC,YAAY,CAAC,eAAe,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAClG,OAAO,CAAC,KAAK,CACd,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,wBAAwB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specguard-mcp",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "MCP server exposing SpecGuard suite intelligence to AI coding agents",
   "license": "ISC",
   "type": "module",