queue-aiops 0.9.4__tar.gz → 0.11.0__tar.gz

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "queue-aiops",
   "displayName": "Queue AIops",
-  "version": "0.9.4",
+  "version": "0.11.0",
   "description": "Governed redis + rabbitmq ops: memory/latency/backlog/churn RCA, policies. 28 tools.",
   "author": {
     "name": "Wei Zhou",

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/.mcp.json

@@ -5,7 +5,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "queue-aiops==0.9.4",
+        "queue-aiops==0.11.0",
         "queue-aiops-mcp"
       ]
     }

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## v0.11.0 — 2026-10-15
+
+### Fixed
+- The MCP server moved from a top-level `mcp_server` package to
+  `queue_aiops.mcp_server`. Every AIops tool used to ship its own top-level
+  `mcp_server`, so installing two of them into one environment merged the two
+  into one package: `queue-aiops-mcp` could start another tool's server, and
+  `queue-aiops undo` wrote audit and undo rows into the other tool's home
+  directory. Installs through `uvx`, the Claude Code plugin or the OpenClaw
+  bundle were isolated and unaffected. The `queue-aiops-mcp` command is
+  unchanged; only code that imported `mcp_server` directly must now import
+  `queue_aiops.mcp_server`.
+
+## v0.10.0 — 2026-10-15
+
+### Added
+- MCP tool annotations derived from each tool's governance `risk_level`, so
+  clients can gate approval from `tools/list` alone. `low` tools advertise
+  `readOnlyHint: true`; every other tool advertises `readOnlyHint: false` and
+  `destructiveHint: true`. The `medium` tier includes deletes and hard
+  power-offs, so a tool is never advertised as non-destructive on the strength
+  of its tier. `idempotentHint` only repeats an explicit declaration. The exact
+  level is published in `_meta` under `io.github.AIops-tools/riskLevel`. These
+  are hints for the client; audit and undo are unchanged.
+
 ## v0.9.4 — 2026-09-16
 
 ### Fixed

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: queue-aiops
-Version: 0.9.4
+Version: 0.11.0
 Summary: Governed AI-ops for redis + rabbitmq: memory-pressure/latency/queue-backlog/connection-churn RCAs, slowlog and SCAN-budgeted big-key sampling, queues/policies/nodes, and governed writes (config set, client kill, purge/delete queue, policies) with a built-in governance harness (audit, budget, undo, risk tiers)
 Author-email: Wei Zhou <zhouwei008@gmail.com>
 License-Expression: MIT

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/RELEASE_NOTES.md

@@ -1,5 +1,8 @@
 # Release notes — queue-aiops 0.4.0
 
+> Historical — this file covers the 0.4.0 release only and is not updated.
+> For every release since, see [CHANGELOG.md](CHANGELOG.md) and the GitHub releases.
+
 Previous release: 0.3.0.
 
 ## BREAKING — the authorization layer is removed

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/SECURITY.md

@@ -87,7 +87,7 @@ background services.
 ## Static Analysis
 
 ```bash
-uvx bandit -r queue_aiops/ mcp_server/
+uvx bandit -r queue_aiops/
 uv run ruff check .
 ```
 

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/openclaw.plugin.json

@@ -11,7 +11,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "queue-aiops==0.9.4",
+        "queue-aiops==0.11.0",
         "queue-aiops-mcp"
       ]
     }

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zw008/queue-aiops",
-  "version": "0.9.4",
+  "version": "0.11.0",
   "description": "Governed redis + rabbitmq ops: memory/latency/backlog/churn RCA, policies. 28 tools.",
   "private": true,
   "license": "MIT",

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "queue-aiops"
-version = "0.9.4"
+version = "0.11.0"
 description = "Governed AI-ops for redis + rabbitmq: memory-pressure/latency/queue-backlog/connection-churn RCAs, slowlog and SCAN-budgeted big-key sampling, queues/policies/nodes, and governed writes (config set, client kill, purge/delete queue, policies) with a built-in governance harness (audit, budget, undo, risk tiers)"
 readme = "README.md"
 license = "MIT"
@@ -29,10 +29,10 @@ dev = [
 
 [project.scripts]
 queue-aiops = "queue_aiops.cli:app"
-queue-aiops-mcp = "mcp_server.server:main"
+queue-aiops-mcp = "queue_aiops.mcp_server.server:main"
 
 [tool.hatch.build.targets.wheel]
-packages = ["queue_aiops", "mcp_server"]
+packages = ["queue_aiops"]
 
 [tool.ruff]
 line-length = 100
@@ -48,7 +48,7 @@ select = ["E", "F", "I", "N", "W", "UP"]
 "queue_aiops/governance/*.py" = ["E501", "N818"]
 # MCP server files are reflected by FastMCP/Pydantic; PEP 604 unions (X | None)
 # crash on older mcp/pydantic, so they intentionally use Optional[X].
-"mcp_server/**/*.py" = ["UP007", "UP045"]
+"queue_aiops/mcp_server/**/*.py" = ["UP007", "UP045"]
 # The MCP entry keeps an explicit Python-version guard even though the declared
 # minimum is already 3.11.
 "queue_aiops/cli/_root.py" = ["UP036"]

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/queue_aiops/cli/_root.py

@@ -53,7 +53,7 @@ def mcp_cmd() -> None:
         )
         raise typer.Exit(2)
 
-    from mcp_server.server import main as _mcp_main
+    from queue_aiops.mcp_server.server import main as _mcp_main
 
     _mcp_main()
 

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/queue_aiops/cli/rabbit_cmds.py

@@ -155,7 +155,7 @@ def rabbit_purge(
     dry_run: DryRunOption = False,
 ) -> None:
     """Purge all ready messages from a queue (IRREVERSIBLE, risk=high)."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     if dry_run:
         # Through the governed twin, so the preview is audited and any harness
@@ -178,7 +178,7 @@ def rabbit_delete_queue(
     dry_run: DryRunOption = False,
 ) -> None:
     """Delete a queue (risk=high; undo re-declares the captured definition)."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     if dry_run:
         # Through the governed twin, so the preview is audited and any harness
@@ -207,7 +207,7 @@ def rabbit_declare_queue(
     dry_run: DryRunOption = False,
 ) -> None:
     """Declare (create) a queue (undo deletes it when newly created)."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     if dry_run:
         # Through the governed twin, so the preview is audited and any harness
@@ -242,7 +242,7 @@ def rabbit_set_policy(
     dry_run: DryRunOption = False,
 ) -> None:
     """Create/update a policy (reversible — prior policy captured for undo)."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     try:
         definition_obj = json.loads(definition)
@@ -276,7 +276,7 @@ def rabbit_delete_policy(
     dry_run: DryRunOption = False,
 ) -> None:
     """Delete a policy (reversible — its definition is captured for undo)."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     if dry_run:
         # Through the governed twin, so the preview is audited and any harness

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/queue_aiops/cli/redis_cmds.py

@@ -134,7 +134,7 @@ def redis_config_set(
     dry_run: DryRunOption = False,
 ) -> None:
     """Set one config parameter (reversible — prior value captured for undo)."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     if dry_run:
         # Through the governed call: redis_config_set refuses the self-affecting
@@ -160,7 +160,7 @@ def redis_kill_client(
     dry_run: DryRunOption = False,
 ) -> None:
     """Disconnect one client (irreversible; its info is captured as priorState)."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     who = str(client_id) if client_id else addr
     if dry_run:

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/queue_aiops/cli/undo.py

@@ -1,7 +1,7 @@
 """``queue-aiops undo`` — list recorded undo tokens and apply them.
 
 Real execution is delegated to the ``@governed_tool``-wrapped functions in
-``mcp_server.tools.undo`` so an applied undo is audited on the SAME governance
+``queue_aiops.mcp_server.tools.undo`` so an applied undo is audited on the SAME governance
 path as any other write (the inverse tool it dispatches is itself governed).
 """
 
@@ -38,7 +38,7 @@ def undo_list_cmd(
     target: TargetOption = None,
 ) -> None:
     """List recorded, not-yet-applied undo tokens."""
-    from mcp_server.tools import undo as gov
+    from queue_aiops.mcp_server.tools import undo as gov
 
     console.print_json(json.dumps(gov.undo_list(limit=limit, target=target)))
 
@@ -49,7 +49,7 @@ def undo_apply_cmd(
     undo_id: UndoIdArg, target: TargetOption = None, dry_run: DryRunOption = False
 ) -> None:
     """Apply a recorded undo (dispatches its inverse tool; dry-run + confirm)."""
-    from mcp_server.tools import undo as gov
+    from queue_aiops.mcp_server.tools import undo as gov
 
     if dry_run:
         # This path already routed through the governed call, but rendered the

queue_aiops-0.11.0/queue_aiops/mcp_server/_annotations.py

@@ -0,0 +1,66 @@
+"""Derive MCP tool annotations from the governance risk level.
+
+Every tool already declares ``risk_level`` on ``@governed_tool``; this module
+publishes it to MCP clients as the standard ``ToolAnnotations`` hints plus the
+exact level under ``_meta``, so a client can gate approval without reading our
+docstrings.
+
+Only the safe direction is ever asserted:
+
+- ``low`` → ``readOnlyHint: true``. Backed by the smoke-test invariant that
+  ``risk_level == "low"`` exactly when the docstring says ``[READ]``.
+- anything else → ``readOnlyHint: false, destructiveHint: true``. The
+  ``medium`` tier is NOT non-destructive — it holds deletes, hard power-offs,
+  state kills and stat resets — so claiming ``destructiveHint: false`` from the
+  tier would tell a client it may skip approval for a delete. Over-warning
+  costs a confirmation prompt; under-warning costs data.
+- ``idempotentHint`` only echoes an explicit ``@governed_tool(idempotent=True)``
+  declaration; it is never inferred.
+- ``openWorldHint`` is left unset (spec default ``true``): every tool talks to
+  an external system.
+
+This file is identical across the AIops line; keep it that way.
+"""
+
+from typing import Any
+
+from mcp.types import ToolAnnotations
+
+RISK_META_KEY = "io.github.AIops-tools/riskLevel"
+RISK_LEVELS = frozenset({"low", "medium", "high", "critical"})
+
+
+def annotations_for(risk_level: str, idempotent: bool) -> ToolAnnotations:
+    """Return the MCP hints that a tool of ``risk_level`` may honestly claim."""
+    if risk_level not in RISK_LEVELS:
+        raise ValueError(
+            f"unknown risk_level {risk_level!r}; expected one of {sorted(RISK_LEVELS)}"
+        )
+    if risk_level == "low":
+        return ToolAnnotations(read_only_hint=True)
+    return ToolAnnotations(
+        read_only_hint=False,
+        destructive_hint=True,
+        idempotent_hint=idempotent,
+    )
+
+
+def apply_risk_annotations(server: Any) -> None:
+    """Replace every registered tool with a copy carrying its risk annotations.
+
+    Fails fast on a tool without ``@governed_tool`` metadata: an unannotated
+    tool would be advertised with the spec defaults, i.e. as a destructive
+    write with no stated risk level — wrong for a read, silent for a write.
+    """
+    tools = server._tool_manager._tools  # same private registry undo.py relies on
+    for name, tool in list(tools.items()):
+        risk_level = getattr(tool.fn, "_risk_level", None)
+        if risk_level is None:
+            raise RuntimeError(f"tool {name!r} has no @governed_tool risk_level")
+        idempotent = bool(getattr(tool.fn, "_idempotent", False))
+        tools[name] = tool.model_copy(
+            update={
+                "annotations": annotations_for(risk_level, idempotent),
+                "meta": {**(tool.meta or {}), RISK_META_KEY: risk_level},
+            }
+        )

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/_shared.py

@@ -1,8 +1,8 @@
 """Shared MCP server primitives: the MCPServer instance, connection helper,
 error sanitisation, and the ``@tool_errors`` decorator.
 
-Tool modules under ``mcp_server/tools/`` import ``mcp`` from here and register
-their ``@mcp.tool()`` functions onto it. ``mcp_server/server.py`` then imports
+Tool modules under ``queue_aiops/mcp_server/tools/`` import ``mcp`` from here and register
+their ``@mcp.tool()`` functions onto it. ``queue_aiops/mcp_server/server.py`` then imports
 those modules and runs the server.
 
 Keep ``Optional[X]`` (never PEP 604 ``X | None``) in any reflected tool

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/server.py

@@ -1,6 +1,6 @@
 """MCP server wrapping queue-aiops operations (stdio transport).
 
-Thin adapter layer: each ``@mcp.tool()`` function (in ``mcp_server/tools/``)
+Thin adapter layer: each ``@mcp.tool()`` function (in ``queue_aiops/mcp_server/tools/``)
 delegates to the ``queue_aiops`` ops package and is wrapped with the
 queue-aiops ``@governed_tool`` harness (audit / budget / undo / risk-tier).
 
@@ -17,11 +17,12 @@ License: MIT
 import logging
 import os
 
-from mcp_server._shared import _safe_error, mcp, tool_errors
+from queue_aiops.mcp_server._annotations import apply_risk_annotations
+from queue_aiops.mcp_server._shared import _safe_error, mcp, tool_errors
 
 # Importing the tool modules registers every @mcp.tool() onto the shared
 # `mcp` instance. Order does not matter; each module is self-contained.
-from mcp_server.tools import (  # noqa: F401 — side effects
+from queue_aiops.mcp_server.tools import (  # noqa: F401 — side effects
     analysis,
     overview,
     rabbit_reads,
@@ -30,6 +31,10 @@ from mcp_server.tools import (  # noqa: F401 — side effects
     writes,
 )
 
+# Publish each tool's governance risk level as MCP annotations. Runs after
+# every tool module has registered, so no tool is advertised unannotated.
+apply_risk_annotations(mcp)
+
 __all__ = ["mcp", "main", "_safe_error", "tool_errors"]
 
 logger = logging.getLogger(__name__)

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/tools/analysis.py

@@ -2,8 +2,8 @@
 
 from typing import Any, Optional
 
-from mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.governance import governed_tool
+from queue_aiops.mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.ops import analysis as ops
 from queue_aiops.ops._util import as_obj, num
 

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/tools/overview.py

@@ -2,8 +2,8 @@
 
 from typing import Optional
 
-from mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.governance import governed_tool
+from queue_aiops.mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.ops import overview as ops
 
 

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/tools/rabbit_reads.py

@@ -2,8 +2,8 @@
 
 from typing import Optional
 
-from mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.governance import governed_tool
+from queue_aiops.mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.ops import rabbit_reads as ops
 
 

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/tools/redis_reads.py

@@ -2,8 +2,8 @@
 
 from typing import Optional
 
-from mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.governance import governed_tool
+from queue_aiops.mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.ops import redis_reads as ops
 
 

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/tools/undo.py

@@ -16,26 +16,26 @@ design, inverses in this line key off ids/names, not credentials.
 import json
 from typing import Any, Optional
 
-from mcp_server._shared import mcp, tool_errors
 from queue_aiops.governance import governed_tool
 from queue_aiops.governance.undo import get_undo_store
+from queue_aiops.mcp_server._shared import mcp, tool_errors
 
 
 def _resolve_tool(name: str) -> Any:
     """Return the governed callable registered under ``name`` (or None).
 
     The CLI reaches this through ``undo apply``, whose process only imports
-    ``mcp_server.tools.undo`` — every other tool module is imported lazily inside
+    ``queue_aiops.mcp_server.tools.undo`` — every other tool module is imported lazily inside
     its own CLI command and so is absent here. Without forcing a full load,
     ``undo_apply`` would fail with "inverse tool not registered" for every write
     tool when driven from the CLI (the MCP entry point loads all modules, so it
-    never hit this). If the first lookup misses, import ``mcp_server.server`` —
+    never hit this). If the first lookup misses, import ``queue_aiops.mcp_server.server`` —
     which registers every ``@mcp.tool()`` as an import side effect — and retry.
     Imported lazily to avoid the undo↔server cycle.
     """
     tool = mcp._tool_manager._tools.get(name)
     if tool is None:
-        import mcp_server.server  # noqa: F401 — registers all tools as a side effect
+        import queue_aiops.mcp_server.server  # noqa: F401 — registers all tools as a side effect
 
         tool = mcp._tool_manager._tools.get(name)
     return getattr(tool, "fn", None) if tool else None

{queue_aiops-0.9.4 → queue_aiops-0.11.0/queue_aiops}/mcp_server/tools/writes.py

@@ -13,8 +13,8 @@ delete_policy = medium.
 
 from typing import Any, Optional
 
-from mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.governance import governed_tool
+from queue_aiops.mcp_server._shared import _get_connection, mcp, tool_errors
 from queue_aiops.ops import writes as ops
 
 # ── undo descriptors (built from the fetched before-state) ──────────────────

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/AIops-tools/Queue-AIops",
     "source": "github"
   },
-  "version": "0.9.4",
+  "version": "0.11.0",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "queue-aiops",
-      "version": "0.9.4",
+      "version": "0.11.0",
       "transport": {
         "type": "stdio"
       }

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/skills/queue-aiops/references/agent-guardrails.md

@@ -48,7 +48,7 @@ because fragmentation is checked before big keys. Do not let the model treat `fi
 as the headline — make it weigh every finding's `evidence` and say which one it acted on.
 (Earlier versions of this file claimed these lists were ranked worst-first. They never were.)
 
-Copy this into your agent's system prompt:
+Recommended setup for a local model (adapt it to your agent client):
 
 ```text
 You operate a RabbitMQ broker or a Redis instance through the queue-aiops MCP

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_analysis.py

@@ -244,7 +244,7 @@ def _scanned_sources():
     by the drift gate, so it is not this repo's to edit.
     """
     root = Path(ops.__file__).parents[2]
-    found = sorted(root.glob("queue_aiops/**/*.py")) + sorted(root.glob("mcp_server/**/*.py"))
+    found = sorted(root.glob("queue_aiops/**/*.py"))  # includes queue_aiops/mcp_server
     files = [p for p in found if "governance" not in p.parts]
     assert len(files) > 10, f"source sweep found only {len(files)} modules — the glob is wrong"
     return files

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_cli_audited.py

@@ -52,11 +52,12 @@ def _chain(fn):
 
 def _calls_an_mcp_tool(fn) -> bool:
     source = inspect.getsource(fn)
-    if "mcp_server" in source:
+    if "queue_aiops.mcp_server" in source:
         return True
     names = set()
     for node in ast.parse(open(inspect.getsourcefile(fn)).read()).body:
-        if isinstance(node, ast.ImportFrom) and (node.module or "").startswith("mcp_server"):
+        module = (node.module or "") if isinstance(node, ast.ImportFrom) else ""
+        if module.startswith("queue_aiops.mcp_server"):
             names |= {a.asname or a.name for a in node.names}
     used = {n.id for n in ast.walk(ast.parse(textwrap.dedent(source))) if isinstance(n, ast.Name)}
     return bool(names & used)

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_cli_governed_exit.py

@@ -28,7 +28,7 @@ import typer
 from queue_aiops.cli._common import checked
 
 CLI_DIR = pathlib.Path(__file__).resolve().parents[1] / "queue_aiops" / "cli"
-TOOLS_DIR = pathlib.Path(__file__).resolve().parents[1] / "mcp_server" / "tools"
+TOOLS_DIR = pathlib.Path(__file__).resolve().parents[1] / "queue_aiops" / "mcp_server" / "tools"
 
 #: Helpers that end the command non-zero when the payload reports a failure.
 CHECKERS = ['checked', 'dry_run_preview']

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_cli_rabbit_writes.py

@@ -44,7 +44,7 @@ def gov_home(tmp_path, monkeypatch):
 
 
 def _wire(monkeypatch, routes):
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     conn = rabbit_conn(routes)
     monkeypatch.setattr(gov, "_get_connection", lambda target=None: conn)

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_cli_writes.py

@@ -1,7 +1,7 @@
 """CLI confirmed-write path — past dry-run, through governance, onto disk.
 
 The CLI write commands delegate real execution to the ``@governed_tool``
-functions in ``mcp_server.tools``. These tests drive ``redis config-set`` and
+functions in ``queue_aiops.mcp_server.tools``. These tests drive ``redis config-set`` and
 ``rabbitmq purge`` PAST the dry-run branch and the double-confirm prompts and
 assert the call really went through the governed path (audit row on disk) —
 the regression test for the "CLI writes were unaudited" line-wide fix.
@@ -35,7 +35,7 @@ def gov_home(tmp_path, monkeypatch):
 @pytest.fixture
 def cache_conn(monkeypatch):
     """A fake redis connection wired into the governed write module."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     conn = redis_conn(config={"maxmemory-policy": "noeviction"})
     monkeypatch.setattr(gov, "_get_connection", lambda target=None: conn)
@@ -45,7 +45,7 @@ def cache_conn(monkeypatch):
 @pytest.fixture
 def broker_conn(monkeypatch):
     """A fake rabbitmq connection wired into the governed write module."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
 
     conn = rabbit_conn({
         ("GET", "/api/queues/%2F/orders"): {

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_gov_audit.py

@@ -2,7 +2,7 @@
 
 Portable across the whole tool line: references ONLY
 ``queue_aiops.governance.audit`` and binds state to an isolated home via
-``QUEUE_AIOPS_HOME``. No ops / cli / connection / mcp_server imports.
+``QUEUE_AIOPS_HOME``. No ops / cli / connection / queue_aiops.mcp_server imports.
 
 Exercises row writes with every column, query filters, stats aggregation,
 size-based rotation + archive cleanup, permission hardening, in-place column

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_gov_decorators.py

@@ -3,7 +3,7 @@
 Portable across the whole tool line: references ONLY
 ``queue_aiops.governance.*`` and binds state to an isolated home via
 ``QUEUE_AIOPS_HOME``. Every governed function under test is SYNTHETIC and
-defined inline — no real ops / cli / connection / mcp_server tool is imported.
+defined inline — no real ops / cli / connection / queue_aiops.mcp_server tool is imported.
 
 Exercises the async wrapper (audit parity with sync), the error-capture path
 with secret redaction, BudgetExceeded propagation, positional /

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_gov_patterns.py

@@ -2,7 +2,7 @@
 
 Portable across the whole tool line: references ONLY
 ``queue_aiops.governance.patterns`` and binds state to an isolated home via
-``QUEUE_AIOPS_HOME``. No ops / cli / connection / mcp_server imports.
+``QUEUE_AIOPS_HOME``. No ops / cli / connection / queue_aiops.mcp_server imports.
 
 Exercises pattern loading + signature validation, the armable preconditions,
 skill/tool/target matching, rate limiting, the circuit breaker's state

{queue_aiops-0.9.4 → queue_aiops-0.11.0}/tests/test_governance_persistence.py

@@ -124,7 +124,7 @@ def test_real_write_tool_persists_priorstate_undo(gov_home, monkeypatch):
     """End-to-end through a REAL product write tool: redis_config_set must
     capture the parameter's prior value before setting and persist the
     restore-undo on disk."""
-    from mcp_server.tools import writes as gov
+    from queue_aiops.mcp_server.tools import writes as gov
     from tests.fakes import redis_conn
 
     conn = redis_conn(config={"maxmemory-policy": "noeviction"})