git:20261013.cbd7ed5 to git:20261013.1fb932e

3 added, 1 removed. Audit A to A.

# @shadowclone/mcp

Serves the shadowclone tools to a connected agent over the MCP protocol on standard input and output. The `shadowclone mcp` command starts it.

(generated by `bun run guides`; do not edit by hand)

- Package name: `@shadowclone/mcp`

- - Workspace dependencies: `@shadowclone/changes`, `@shadowclone/cloud`, `@shadowclone/core`, `@shadowclone/environment`, `@shadowclone/learning`, `@shadowclone/sessions`, `@shadowclone/skills`

+ - Workspace dependencies: `@shadowclone/changes`, `@shadowclone/clones`, `@shadowclone/cloud`, `@shadowclone/core`, `@shadowclone/environment`, `@shadowclone/learning`, `@shadowclone/sessions`, `@shadowclone/skills`

- External dependencies: `zod`

- Export subpaths: `.`

## Owns

- `src/server.ts`: `serveMcp` and `handleMcpRequest`, the JSON-RPC loop.

- `src/protocol.ts`: request parsing and the context tool `shadowclone_context`.

- `src/preferences.ts`: `shadowclone_remember`, `shadowclone_history`, and `shadowclone_skills_status`.

- `src/bot.ts`: `shadowclone_bot`.

+ - `src/session.ts` and `sessionText.ts`: `shadowclone_session`.

## Rules

- Each tool parses its arguments with a strict schema. An invalid call returns an error.

- `shadowclone_remember` fails when the managed policy disables shadowclone.

- `shadowclone_bot` has no credential operation. The owner adds the bot token and the API key on GitHub.

- `shadowclone_bot` status waits at most 45 seconds for the check run. A later status call continues a run that is still in progress.

+ - `shadowclone_session` has no token field. The owner pastes tokens into the secrets file. Setup and skills pushes need `approve: true` after the owner agrees.

- The first `setup` call only lists the skill files. It pushes them after a second call with `approveSkills: true`.

- Context comes from `compileContext`, so it follows the same consent and scope as native delivery.

## Tests

Run `bun test` in this folder, or `bun test packages/mcp` from the root. The tests send synthetic requests to the handler. They start no agent and no GitHub call.

Update this file in the same commit when you change the package purpose, public exports, dependencies, or a rule above.