ticketlens 0.38.31 → 0.38.32

package/README.md

@@ -453,7 +453,7 @@ Every note is scanned before saving — anything shaped like a real secret (API
 
 **Removing a note:** `ticketlens note delete --id="..." [--ticket=KEY]` removes a note from your local vault. Local only — if it was already pushed to a team, teammates who pulled it keep their copy; deleting it there too is a manager action from the Console (Admin > Recall).
 
-**Any MCP-capable AI harness:** `ticketlens mcp` starts a stdio [MCP](https://modelcontextprotocol.io) server exposing `fetch`, `triage`, `compliance`, `doctor`, `recall_add`, `recall_search`, `ticket_comment`, `ticket_transition`, `ticket_assign`, `ticket_duplicates`, `ticket_link`, `ticket_update`, and `ticket_create` as native tools — any MCP-compatible AI assistant, not just Claude Code, can call them directly instead of constructing a shell command. It's a thin adapter over the exact same code as the CLI commands above — same license gate per tool, same secret scan/local vault/tracker writes, same team sync — nothing is reimplemented. `fetch` and `doctor` are Free; `triage`'s base scan is Free with some options gated Pro/Team, same as the CLI (`ticketlens triage --help`); `compliance` is Free with a 3-checks/month cap, Pro unlimited; every other tool needs Pro. Point your harness's MCP config at it: `{ "command": "ticketlens", "args": ["mcp"] }` — or run `ticketlens mcp install` in a project to write that entry into its `.mcp.json` for you (creates the file if it doesn't exist, merges in if it does — never touches any other entry already there; `--dry-run` to preview first).
+**Any MCP-capable AI harness:** `ticketlens mcp` starts a stdio [MCP](https://modelcontextprotocol.io) server exposing `fetch`, `triage`, `compliance`, `review`, `standup`, `pr`, `doctor`, `recall_add`, `recall_search`, `ticket_comment`, `ticket_transition`, `ticket_assign`, `ticket_duplicates`, `ticket_link`, `ticket_update`, and `ticket_create` as native tools — any MCP-compatible AI assistant, not just Claude Code, can call them directly instead of constructing a shell command. It's a thin adapter over the exact same code as the CLI commands above — same license gate per tool, same secret scan/local vault/tracker writes, same team sync — nothing is reimplemented. `fetch`, `doctor`, and `standup` are Free; `triage`'s base scan is Free with some options gated Pro/Team, same as the CLI (`ticketlens triage --help`); `compliance` and `pr` are Free, sharing a 3-checks/month cap on their requirements-coverage section, Pro unlimited; `review` is Free for branch/files/ticket context, with its coverage/focus section requiring Pro as a plain license check — it does not draw from that same monthly counter; every other tool needs Pro. Point your harness's MCP config at it: `{ "command": "ticketlens", "args": ["mcp"] }` — or run `ticketlens mcp install` in a project to write that entry into its `.mcp.json` for you (creates the file if it doesn't exist, merges in if it does — never touches any other entry already there; `--dry-run` to preview first).
 
 `note add`'s save confirmation and `recall`'s search results are styled by default in a terminal; add `--plain` to either for bare, pipe-safe output. `recall` always shows each note's file ID (e.g. `[1784135399545-fe01c4.md]`) so you can open it directly (`cat ~/.ticketlens/recall/<PREFIX>/<id>`), or pass `--full` to print the full body content inline instead. Each result shows a relative time (`2h ago`, `3d ago`) rather than a bare date — the full-precision timestamp is always in the note file's own frontmatter.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ticketlens",
-  "version": "0.38.31",
+  "version": "0.38.32",
   "description": "Jira CLI for developers — fetch ticket context, triage your queue, and stop tab-switching. Zero dependencies, all local.",
   "type": "module",
   "bin": {

package/skills/jtb/SKILL.md

@@ -1,4 +1,4 @@
-<!-- jtb-skill-version: 0.36.0 -->
+<!-- jtb-skill-version: 0.37.0 -->
 ---
 name: jtb
 description: Fetch a Jira ticket's full context (description, comments, linked issues, code references) and assemble a structured TicketBrief for implementation planning. Use when user types /jtb, mentions a Jira ticket key, or wants to plan work from a Jira ticket.
@@ -127,6 +127,63 @@ Display the script's stdout directly. No plan mode. Stop here.
 
 ---
 
+### Standup subcommand
+
+If the first argument is `standup`:
+
+Run:
+```bash
+ticketlens standup $EXTRA_ARGS
+```
+
+Where `$EXTRA_ARGS` are any flags passed (e.g. `--since=48 --format=pr --profile=acme`).
+
+Summarizes recent git commits grouped by linked ticket key. `--since=N` (hours, default 24) or a git-compatible date expression (`--since="3 days ago"`); `--format=standup` (default) renders a per-ticket standup update, `--format=pr` renders the same grouped commits as PR-body-style markdown. Read-only, fully free tier — no license gate on any option.
+
+Display the script's stdout directly. No plan mode. Stop here.
+
+If this harness has TicketLens's MCP server configured (a tool named `standup` — often shown as `mcp__ticketlens__standup` — visible in your tool list), prefer it over the bash form: same output, no license gate, no shell command to construct. It accepts `since`/`format`/`profile`.
+
+---
+
+### PR subcommand
+
+If the first argument is `pr`:
+
+Run:
+```bash
+ticketlens pr PROJ-123 $EXTRA_ARGS
+```
+
+Where `$EXTRA_ARGS` are any flags passed (e.g. `--profile=acme`). Requires a ticket key as the first positional argument.
+
+Assembles a ready-to-paste PR description: what changed (from commits linked to the ticket), linked tickets, and — if the ticket has acceptance criteria — a requirements-coverage section. Read-only. The requirements-coverage section reuses the same Free-tier 3-checks/month counter as `--compliance`/`ticketlens compliance` — running `pr` on a ticket with acceptance criteria counts against that shared monthly limit; Pro removes the cap.
+
+Display the script's stdout directly. No plan mode. Stop here.
+
+If this harness has TicketLens's MCP server configured (a tool named `pr` — often shown as `mcp__ticketlens__pr` — visible in your tool list), prefer it over the bash form: same output, same shared compliance-counter caveat, no shell command to construct. It accepts `ticket`/`profile`.
+
+---
+
+### Review subcommand
+
+If the first argument is `review`:
+
+Run:
+```bash
+ticketlens review $EXTRA_ARGS
+```
+
+Where `$EXTRA_ARGS` are any flags passed (e.g. `--base=develop --profile=acme`). No required positional argument — operates on the current branch.
+
+Assembles PR review context from the current git branch: changed files, linked-ticket summaries from commits/branch name, and (Pro) a requirements-coverage / review-focus section extracted from the diff against acceptance criteria. `--base=BRANCH` (or its alias `--branch=BRANCH`) sets the diff base, auto-detecting `main`/`master`/`develop` when omitted. Read-only — never modifies the tracker or the repo. Free tier gets branch info, changed files, and ticket context; Pro adds the requirements-coverage and review-focus sections — same split as `--compliance`.
+
+Display the script's stdout directly. No plan mode. Stop here.
+
+If this harness has TicketLens's MCP server configured (a tool named `review` — often shown as `mcp__ticketlens__review` — visible in your tool list), prefer it over the bash form: same tier gate (Free: branch/files/tickets, Pro: +coverage/focus), no shell command to construct. It accepts `base`/`branch`/`profile` — `base` and `branch` are aliases; if both are given, `base` wins.
+
+---
+
 ### Fetch ticket workflow (default)
 
 ### Step 1: Validate environment

package/skills/jtb/scripts/fetch-ticket.mjs

@@ -336,17 +336,20 @@ async function countRecallInjection(recallNotes, configDir, opts) {
   }
 }
 
-function makeSpinner(s) {
-  // setInterval won't fire while spawnSync blocks the event loop, so we draw
-  // synchronously on update() and only use setInterval during async fetch phases.
-  if (!process.stderr.isTTY) return { update: () => {}, startAnim: () => {}, done: () => {} };
+// setInterval won't fire while spawnSync blocks the event loop, so we draw
+// synchronously on update() and only use setInterval during async fetch phases.
+// Both callers pass run()'s errStream, so the spinner shares the same isTTY and
+// write target as everything else the command emits: the real process.stderr for
+// a CLI user, the captured printErr under MCP (where the draws must not leak).
+function makeSpinner(s, { isTTY, write }) {
+  if (!isTTY) return { update: () => {}, startAnim: () => {}, done: () => {} };
   const frames = ['⠋','⠙','⠹','⠸','⠼','⠴','⠦','⠧','⠇','⠏'];
   let fi = 0, msg = '', lastW = 0, timerId = null, finished = false;
 
   const draw = () => {
     const raw = `  ${s.brand(frames[fi % frames.length])} ${s.dim(msg)}`;
     const vis = raw.replace(/\x1b\[[0-9;]*m/g, '');
-    process.stderr.write(`\r${raw}${' '.repeat(Math.max(0, lastW - vis.length))}`);
+    write(`\r${raw}${' '.repeat(Math.max(0, lastW - vis.length))}`);
     lastW = vis.length;
   };
 
@@ -360,7 +363,7 @@ function makeSpinner(s) {
       if (finished) return;
       finished = true;
       if (timerId) { clearInterval(timerId); timerId = null; }
-      process.stderr.write('\r\x1b[2K');
+      write('\r\x1b[2K');
     },
   };
 }
@@ -485,10 +488,10 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
   }
 
   const printFn = opts.print ?? ((chunk) => process.stdout.write(chunk));
-  // Mirrors printFn above — only the bare ticket-fetch path (from `const ticketKey =
-  // args.find(...)` onward) uses this; pr/ledger/compliance/review/standup/install-hooks
-  // above still write directly to the real process.stderr (out of scope for this change,
-  // each gets the same treatment when its own MCP tool is built).
+  // Mirrors printFn above — the bare ticket-fetch, compliance, pr, review, and standup
+  // paths all use this now (each has an MCP tool). `ledger` above still writes directly
+  // to the real process.stderr (no MCP tool yet); `install-hooks` is CLI-only and never
+  // gets one.
   const printErrFn = opts.printErr ?? ((chunk) => process.stderr.write(chunk));
   // Reused on every recursive self-call in the bare-fetch path (profile-prompt retries)
   // so an injected print/printErr survives the retry instead of silently reverting to
@@ -549,12 +552,12 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
     const { assemblePr } = await import('./lib/pr-assembler.mjs');
     const ticketKeyArg = args[1];
     if (!ticketKeyArg) {
-      process.stderr.write('Error: "pr" requires a ticket key. Usage: ticketlens pr PROJ-123\n');
+      printErrFn('Error: "pr" requires a ticket key. Usage: ticketlens pr PROJ-123\n');
       process.exitCode = 1;
       return;
     }
     if (!TICKET_KEY_PATTERN.test(ticketKeyArg)) {
-      process.stderr.write(`Error: "${ticketKeyArg}" is not a valid ticket key. Expected format: PROJ-123\n`);
+      printErrFn(`Error: "${ticketKeyArg}" is not a valid ticket key. Expected format: PROJ-123\n`);
       process.exitCode = 1;
       return;
     }
@@ -568,27 +571,33 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
       configDir: resolvedConfigDir,
       profileName: profileNamePr,
       cwd: process.cwd(),
-      onWarning: (w) => process.stderr.write(w + '\n'),
+      onWarning: (w) => printErrFn(w + '\n'),
       onProfileNotFound: () => {},
     });
 
     const hasAuthPr = connPr.pat || (connPr.email && connPr.apiToken);
     if (!connPr.baseUrl || !hasAuthPr) {
-      process.stderr.write('Error: No Jira credentials found. Run \'ticketlens init\' or set JIRA_BASE_URL + JIRA_API_TOKEN.\n');
+      printErrFn('Error: No Jira credentials found. Run \'ticketlens init\' or set JIRA_BASE_URL + JIRA_API_TOKEN.\n');
       process.exitCode = 1;
       return;
     }
 
     const adapterPr = resolveAdapter(connPr, { fetcher });
+    const complianceRunnerPr = opts.runComplianceCheck ?? runComplianceCheck;
 
     try {
       const md = await assemblePr(ticketKeyArg, {
         configDir: resolvedConfigDir,
         fetchTicketFn: (key, fOpts = {}) => adapterPr.fetchTicket(key, fOpts),
+        // assemblePr's own runComplianceCheckFn default has no stream override
+        // (compliance-checker.mjs's `stream = process.stderr`), so the Pro-gate
+        // upgrade prompt would leak to real stderr unless threaded here — same
+        // treatment as the compliance dispatch block above (`stream: errStream`).
+        runComplianceCheckFn: (o) => complianceRunnerPr({ ...o, stream: errStream }),
       });
       printFn(md + '\n');
     } catch (err) {
-      process.stderr.write(`Error: ${err.message}\n`);
+      printErrFn(`Error: ${err.message}\n`);
       process.exitCode = 1;
     }
     return;
@@ -710,7 +719,7 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
     const execFn = opts.execFn ?? spawnSync;
     const cwd = process.cwd();
 
-    const sErr = createStyler({ isTTY: process.stderr.isTTY });
+    const sErr = createStyler({ isTTY });
 
     // Validate flags before any git work
     const reviewFlags = args.slice(1);
@@ -721,28 +730,28 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
       // Detect --profile-NAME typo (dash instead of =)
       const profileDashM = flag.match(/^--profile-(.+)$/);
       if (profileDashM) {
-        process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--profile=${profileDashM[1]}`)}?\n`);
+        printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--profile=${profileDashM[1]}`)}?\n`);
         process.exitCode = 1;
         return;
       }
       const baseDashM = flag.match(/^--base-(.+)$/);
       if (baseDashM) {
-        process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--base=${baseDashM[1]}`)}?\n`);
+        printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--base=${baseDashM[1]}`)}?\n`);
         process.exitCode = 1;
         return;
       }
       const branchDashM = flag.match(/^--branch-(.+)$/);
       if (branchDashM) {
-        process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--branch=${branchDashM[1]}`)}?\n`);
+        printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--branch=${branchDashM[1]}`)}?\n`);
         process.exitCode = 1;
         return;
       }
-      process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Usage: ${sErr.cyan('ticketlens review [--base=BRANCH] [--branch=BRANCH] [--profile=NAME]')}\n`);
+      printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Usage: ${sErr.cyan('ticketlens review [--base=BRANCH] [--branch=BRANCH] [--profile=NAME]')}\n`);
       process.exitCode = 1;
       return;
     }
 
-    const spinner = makeSpinner(sErr);
+    const spinner = makeSpinner(sErr, errStream);
     const stderrNotes = [];
 
     // Resolve base branch: --base=BRANCH or auto-detect main/master/develop
@@ -756,7 +765,7 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
       const verifyR = execFn('git', ['rev-parse', '--verify', baseBranch], { encoding: 'utf8', cwd, timeout: 5_000 });
       if (verifyR.status !== 0) {
         spinner.done();
-        process.stderr.write(`${sErr.red('✖')} Branch "${baseBranch}" not found in this repository.\n`);
+        printErrFn(`${sErr.red('✖')} Branch "${baseBranch}" not found in this repository.\n`);
         process.exitCode = 1;
         return;
       }
@@ -794,10 +803,10 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
       const profiles = loadProfiles(resolvedConfigDir);
       if (!profiles?.profiles?.[profileNameR]) {
         spinner.done();
-        process.stderr.write(`${sErr.red('✖')} Profile "${profileNameR}" not found.\n`);
+        printErrFn(`${sErr.red('✖')} Profile "${profileNameR}" not found.\n`);
         const names = Object.keys(profiles?.profiles ?? {});
-        if (names.length > 0) process.stderr.write(`  ${sErr.dim('Available:')} ${names.join(', ')}\n`);
-        else process.stderr.write(`  Run ${sErr.cyan('ticketlens init')} to configure a profile.\n`);
+        if (names.length > 0) printErrFn(`  ${sErr.dim('Available:')} ${names.join(', ')}\n`);
+        else printErrFn(`  Run ${sErr.cyan('ticketlens init')} to configure a profile.\n`);
         process.exitCode = 1;
         return;
       }
@@ -839,8 +848,8 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
     }
 
     spinner.done();
-    for (const note of stderrNotes) process.stderr.write(note + '\n');
-    if (stderrNotes.length > 0) process.stderr.write('\n');
+    for (const note of stderrNotes) printErrFn(note + '\n');
+    if (stderrNotes.length > 0) printErrFn('\n');
 
     const isLic = opts.isLicensedFn ?? ((tier) => isLicensed(tier, resolvedConfigDir));
     const assembleFn = opts.assemblePrReviewFn ?? assemblePrReview;
@@ -867,7 +876,7 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
     const resolvedConfigDir = configDir ?? (await import('./lib/config.mjs')).DEFAULT_CONFIG_DIR;
     const execFn = opts.execFn ?? spawnSync;
     const cwd = process.cwd();
-    const sErr = createStyler({ isTTY: process.stderr.isTTY });
+    const sErr = createStyler({ isTTY });
 
     const standupFlags = args.slice(1);
 
@@ -878,29 +887,29 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
 
       const sinceDashM = flag.match(/^--since-(.+)$/);
       if (sinceDashM) {
-        process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--since=${sinceDashM[1]}`)}?\n`);
+        printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--since=${sinceDashM[1]}`)}?\n`);
         process.exitCode = 1;
         return;
       }
       const formatDashM = flag.match(/^--format-(.+)$/);
       if (formatDashM) {
-        process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--format=${formatDashM[1]}`)}?\n`);
+        printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--format=${formatDashM[1]}`)}?\n`);
         process.exitCode = 1;
         return;
       }
       const profileDashM = flag.match(/^--profile-(.+)$/);
       if (profileDashM) {
-        process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--profile=${profileDashM[1]}`)}?\n`);
+        printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Did you mean ${sErr.cyan(`--profile=${profileDashM[1]}`)}?\n`);
         process.exitCode = 1;
         return;
       }
       const formatValueM = flag.match(/^--format=(.+)$/);
       if (formatValueM) {
-        process.stderr.write(`${sErr.red('✖')} Invalid --format value: "${formatValueM[1]}". Expected: standup or pr\n`);
+        printErrFn(`${sErr.red('✖')} Invalid --format value: "${formatValueM[1]}". Expected: standup or pr\n`);
         process.exitCode = 1;
         return;
       }
-      process.stderr.write(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Usage: ${sErr.cyan('ticketlens standup [--since=N] [--format=standup|pr] [--profile=NAME]')}\n`);
+      printErrFn(`${sErr.red('✖')} Unknown flag: ${sErr.bold(flag)}\n  Usage: ${sErr.cyan('ticketlens standup [--since=N] [--format=standup|pr] [--profile=NAME]')}\n`);
       process.exitCode = 1;
       return;
     }
@@ -921,16 +930,16 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
     if (profileNameS) {
       const profiles = loadProfiles(resolvedConfigDir);
       if (!profiles?.profiles?.[profileNameS]) {
-        process.stderr.write(`${sErr.red('✖')} Profile "${profileNameS}" not found.\n`);
+        printErrFn(`${sErr.red('✖')} Profile "${profileNameS}" not found.\n`);
         const names = Object.keys(profiles?.profiles ?? {});
-        if (names.length > 0) process.stderr.write(`  ${sErr.dim('Available:')} ${names.join(', ')}\n`);
-        else process.stderr.write(`  Run ${sErr.cyan('ticketlens init')} to configure a profile.\n`);
+        if (names.length > 0) printErrFn(`  ${sErr.dim('Available:')} ${names.join(', ')}\n`);
+        else printErrFn(`  Run ${sErr.cyan('ticketlens init')} to configure a profile.\n`);
         process.exitCode = 1;
         return;
       }
     }
 
-    const spinner = makeSpinner(sErr);
+    const spinner = makeSpinner(sErr, errStream);
     const stderrNotes = [];
 
     spinner.update('Scanning git log…');
@@ -977,8 +986,8 @@ export async function run(args, envOrOpts = process.env, fetcher = globalThis.fe
     }
 
     spinner.done();
-    for (const note of stderrNotes) process.stderr.write(note + '\n');
-    if (stderrNotes.length > 0) process.stderr.write('\n');
+    for (const note of stderrNotes) printErrFn(note + '\n');
+    if (stderrNotes.length > 0) printErrFn('\n');
 
     const isPlain = standupFlags.includes('--plain');
     const assembleStandupFn = opts.assembleStandupFn ?? assembleStandup;

package/skills/jtb/scripts/lib/help.mjs

@@ -645,17 +645,21 @@ export function printMcpHelp({ stream = process.stdout } = {}) {
     `  ${s.bold(s.brand('ticketlens'))} ${s.bold('mcp')}`,
     '',
     `  Start an MCP (Model Context Protocol) stdio server exposing CLI actions as`,
-    `  native tools — ${s.cyan('fetch')}, ${s.cyan('triage')}, ${s.cyan('compliance')}, ${s.cyan('doctor')}, ${s.cyan('recall_add')}, ${s.cyan('recall_search')}, ${s.cyan('ticket_comment')},`,
-    `  ${s.cyan('ticket_transition')}, ${s.cyan('ticket_assign')}, ${s.cyan('ticket_duplicates')}, ${s.cyan('ticket_link')}, ${s.cyan('ticket_update')}, ${s.cyan('ticket_create')} — for any`,
-    `  MCP-compatible AI harness, not just Claude Code. Thin adapter over the same`,
-    `  code as ${s.cyan('TICKET-KEY')}/${s.cyan('doctor')}/${s.cyan('triage')}/${s.cyan('compliance')}/${s.cyan('note add')}/${s.cyan('recall')}/${s.cyan('comment')}/${s.cyan('transition')}/${s.cyan('assign')}/${s.cyan('duplicates')}/${s.cyan('link')}/${s.cyan('update')}/${s.cyan('create')}`,
-    `  above. ${s.cyan('fetch')} and ${s.cyan('doctor')} are Free; ${s.cyan('triage')} is Free with some Pro/Team-gated`,
-    `  options (see ${s.cyan('ticketlens triage --help')}); ${s.cyan('compliance')} is Free with a 3-checks/month cap,`,
-    `  Pro unlimited; every other tool needs Pro. ${s.cyan('ticket_transition')} is`,
-    `  destructive when called with \`target\`+\`confirm: true\`; ${s.cyan('ticket_assign')} is currently`,
-    `  self-assign only; ${s.cyan('ticket_duplicates')} is read-only; ${s.cyan('ticket_link')} on GitHub closes the`,
-    `  source issue as a duplicate — different semantics than Jira/Linear's relationship-only`,
-    `  add; ${s.cyan('ticket_update')} has no priority field on GitHub and can partially succeed;`,
+    `  native tools — ${s.cyan('fetch')}, ${s.cyan('triage')}, ${s.cyan('compliance')}, ${s.cyan('review')}, ${s.cyan('standup')}, ${s.cyan('pr')}, ${s.cyan('doctor')}, ${s.cyan('recall_add')}, ${s.cyan('recall_search')},`,
+    `  ${s.cyan('ticket_comment')}, ${s.cyan('ticket_transition')}, ${s.cyan('ticket_assign')}, ${s.cyan('ticket_duplicates')}, ${s.cyan('ticket_link')}, ${s.cyan('ticket_update')},`,
+    `  ${s.cyan('ticket_create')} — for any MCP-compatible AI harness, not just Claude Code. Thin`,
+    `  adapter over the same code as ${s.cyan('TICKET-KEY')}/${s.cyan('doctor')}/${s.cyan('triage')}/${s.cyan('compliance')}/${s.cyan('review')}/${s.cyan('standup')}/${s.cyan('pr')}/${s.cyan('note add')}/`,
+    `  ${s.cyan('recall')}/${s.cyan('comment')}/${s.cyan('transition')}/${s.cyan('assign')}/${s.cyan('duplicates')}/${s.cyan('link')}/${s.cyan('update')}/${s.cyan('create')} above.`,
+    `  ${s.cyan('fetch')}, ${s.cyan('doctor')}, and ${s.cyan('standup')} are Free; ${s.cyan('triage')} is Free with some Pro/Team-gated`,
+    `  options (see ${s.cyan('ticketlens triage --help')}); ${s.cyan('compliance')} and ${s.cyan('pr')} are Free, sharing a`,
+    `  3-checks/month cap on their requirements-coverage section, Pro unlimited;`,
+    `  ${s.cyan('review')} is Free for branch/files/ticket context — its coverage/focus section`,
+    `  requires Pro as a plain license check, not a draw on that same counter; every`,
+    `  other tool needs Pro. ${s.cyan('ticket_transition')} is destructive when called with`,
+    `  \`target\`+\`confirm: true\`; ${s.cyan('ticket_assign')} is currently self-assign only;`,
+    `  ${s.cyan('ticket_duplicates')} is read-only; ${s.cyan('ticket_link')} on GitHub closes the source issue as a`,
+    `  duplicate — different semantics than Jira/Linear's relationship-only add;`,
+    `  ${s.cyan('ticket_update')} has no priority field on GitHub and can partially succeed;`,
     `  ${s.cyan('ticket_create')} has no ticket key to target — --profile/the default profile picks the`,
     `  tracker, and it fabricates a real item, the highest blast radius of this family.`,
     `  Long-running — exits when the client closes stdin.`,

package/skills/jtb/scripts/lib/mcp-server.mjs

@@ -78,6 +78,42 @@ const TOOLS = [
       required: ['ticket'],
     },
   },
+  {
+    name: 'review',
+    description: 'Assemble PR review context from the current git branch — changed files, linked-ticket summaries, and (Pro) a requirements-coverage / review-focus section extracted from the diff against acceptance criteria. Read-only; never modifies the tracker or the repo. Free tier gets branch info, changed files, and ticket context; TicketLens Pro adds the requirements-coverage and review-focus sections — same split as the `compliance` tool.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        base: { type: 'string', description: 'Base branch to diff against. Auto-detects main/master/develop when omitted. Alias of `branch` — if both are given, `base` wins.' },
+        branch: { type: 'string', description: 'Alias for `base` — same effect, provided for parity with the CLI\'s `--branch=` flag.' },
+        profile: { type: 'string', description: 'Connection profile to target, overriding folder-based inference and the default profile.' },
+      },
+    },
+  },
+  {
+    name: 'standup',
+    description: 'Summarize recent git commits grouped by linked ticket — a standup update or, with format:"pr", PR-body-style formatting. Read-only, fully free tier — no license gate on any option.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        since: { type: 'string', description: 'How far back to scan — an integer number of hours ("24") or a git-compatible date expression ("3 days ago"). Defaults to 24 hours.' },
+        format: { type: 'string', enum: ['standup', 'pr'], description: 'Output shape: "standup" (default) groups commits under a per-ticket standup update; "pr" renders the same grouped commits as PR-body-style markdown.' },
+        profile: { type: 'string', description: 'Connection profile to target, overriding folder-based inference and the default profile.' },
+      },
+    },
+  },
+  {
+    name: 'pr',
+    description: 'Assemble a ready-to-paste PR description for a ticket — what changed (from linked commits), linked tickets, and (if the ticket has acceptance criteria) a requirements-coverage section. Read-only. The requirements-coverage section reuses the same Free-tier 3-checks/month counter as the `compliance` tool — calling `pr` on a ticket with acceptance criteria counts against that shared monthly limit; TicketLens Pro removes the cap.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        ticket: { type: 'string', description: 'Ticket key, e.g. PROJ-123.' },
+        profile: { type: 'string', description: 'Connection profile to target, overriding folder-based inference and the default profile.' },
+      },
+      required: ['ticket'],
+    },
+  },
   {
     name: 'doctor',
     description: 'Diagnose common TicketLens problems: profile configuration, license freshness, tracker connectivity, attachment cache health, MCP registration, and the Recall sync queue. Always returns structured JSON. Free tier, fully unrestricted — including fix.',
@@ -249,8 +285,8 @@ function buildFetchArgs({ ticket, profile, depth }) {
 
 /**
  * Shared by every dispatch that goes through fetch-ticket.mjs's `run()`
- * (currently `fetch` and `compliance` — `compliance` is just another
- * subcommand of that same function). `run()` has no {ok} return value
+ * (currently `fetch`, `compliance`, `review`, `standup`, and `pr` — all but
+ * `fetch` are subcommands of that same function). `run()` has no {ok} return value
  * (unlike every other wrapped function) — failure is signaled by mutating
  * process.exitCode, which is unsafe to read in a long-lived server (one
  * failed call would poison the whole process's exit code forever). Success
@@ -371,6 +407,51 @@ async function callCompliance(args, deps) {
   return callFetchTicketRun(buildComplianceArgs, args, deps, 'compliance check failed');
 }
 
+/**
+ * `review`/`standup`/`pr` are all subcommands of the same fetch-ticket.mjs
+ * `run()` that `callFetch`/`callCompliance` already wrap — reuse
+ * `runFetchTicketFn`, no new dependency. Each subcommand's error/progress
+ * paths (including makeSpinner's writes) were threaded through opts.printErr
+ * as part of adding these tools — see fetch-ticket.mjs's `review`/`standup`/
+ * `pr` dispatch blocks and makeSpinner's injectable {isTTY, write}.
+ */
+function buildReviewArgs({ base, branch, profile }) {
+  const args = ['review'];
+  if (base) args.push(`--base=${base}`);
+  else if (branch) args.push(`--branch=${branch}`);
+  if (profile) args.push(`--profile=${profile}`);
+  return args;
+}
+
+async function callReview(args, deps) {
+  return callFetchTicketRun(buildReviewArgs, args, deps, 'review failed');
+}
+
+function buildStandupArgs({ since, format, profile }) {
+  const args = ['standup'];
+  if (since !== undefined) args.push(`--since=${since}`);
+  if (format) args.push(`--format=${format}`);
+  if (profile) args.push(`--profile=${profile}`);
+  return args;
+}
+
+async function callStandup(args, deps) {
+  return callFetchTicketRun(buildStandupArgs, args, deps, 'standup failed');
+}
+
+function buildPrArgs({ ticket, profile }) {
+  const args = ['pr', ticket];
+  if (profile) args.push(`--profile=${profile}`);
+  return args;
+}
+
+async function callPr(args, deps) {
+  if (!args.ticket) {
+    return { isError: true, content: [{ type: 'text', text: 'Missing required argument: ticket' }] };
+  }
+  return callFetchTicketRun(buildPrArgs, args, deps, 'pr failed');
+}
+
 function buildDoctorArgs({ fix, profile }) {
   const args = ['--format=json'];
   if (fix === true) args.push('--fix');
@@ -597,6 +678,9 @@ async function handleToolsCall(params, deps) {
   if (name === 'fetch') return callFetch(args, deps);
   if (name === 'triage') return callTriage(args, deps);
   if (name === 'compliance') return callCompliance(args, deps);
+  if (name === 'review') return callReview(args, deps);
+  if (name === 'standup') return callStandup(args, deps);
+  if (name === 'pr') return callPr(args, deps);
   if (name === 'doctor') return callDoctor(args, deps);
   if (name === 'recall_add') return callRecallAdd(args, deps);
   if (name === 'recall_search') return callRecallSearch(args, deps);