flowchart TD
    subgraph Layer1 ["Layer 1: Host Interface & IPC Stdio Transport"]
        Host["LLM Host (Claude Desktop / Antigravity / Cursor)"]
        StdioPipe["Bidirectional Stdio JSON-RPC 2.0 Pipe\n(Newline-delimited frames)"]
        Host <--> StdioPipe
    end

    subgraph Layer2 ["Layer 2: FastMCP Gateway & Policy Decorator"]
        FastMCPApp["FastMCP Application Core\n(Schema Inspection & Tool Registry)"]
        GateMiddleware["@_gate Decorator\n(Security Interceptor & Latency Profiler)"]
        StdioPipe <--> FastMCPApp
        FastMCPApp --> GateMiddleware
    end

    subgraph Layer3 ["Layer 3: Multi-Stage Security Guardrails (<0.05ms, 0 Tokens)"]
        PromptGuard["Adversarial Prompt Injection Interceptor\n(Ignore directives, DAN personas, System extraction)"]
        PIIMasker["PCI-DSS & GDPR PII Redactor\n(Credit cards, SSNs, emails, phones)"]
        SecretSuppressor["Outbound Credential Leak Redactor\n(Gemini, OpenAI, Anthropic, AWS, GitHub PATs)"]
        PathGuard["Path Traversal & Sensitive File Guard\n(Blocks .env, .pem, id_rsa, /etc/passwd)"]
        RateLimiter["TokenBucketRateLimiter\n(60 rpm burst capacity / 1 token/sec refill)"]
        GateMiddleware --> PromptGuard
        GateMiddleware --> PIIMasker
        GateMiddleware --> SecretSuppressor
        GateMiddleware --> PathGuard
        GateMiddleware --> RateLimiter
    end

    subgraph Layer4 ["Layer 4: 22-Tool Execution Matrix & Intelligence Fleet"]
        RepoTools["Repository Discovery (3 Tools)\nlist_my_repos, get_repo_info, list_branches"]
        CodeTools["Code Inspection & Search (5 Tools)\nget_file_contents, search_code, list_recent_commits, get_commit_details, compare_branches"]
        PRTools["PR Collaboration & Review (7 Tools)\nlist_pull_requests, get_pull_request, get_pr_diff, get_pr_files, list_pr_comments, review_pull_request, post_pr_comment"]
        GovTools["Governance & Release Automation (4 Tools)\naudit_repo_security_health, generate_release_notes, audit_dependency_vulnerabilities, simulate_pr_merge_readiness"]
        AnalyticsTools["Fleet Analytics & Telemetry (3 Tools)\ncalculate_developer_velocity_metrics, export_portfolio_governance_report, get_api_quota_telemetry"]
        GateMiddleware --> RepoTools
        GateMiddleware --> CodeTools
        GateMiddleware --> PRTools
        GateMiddleware --> GovTools
        GateMiddleware --> AnalyticsTools
    end

    subgraph Layer5 ["Layer 5: Scoped Upstream Client & GitHub Cloud"]
        ScopedClient["GitHubClient\n(Namespace auto-scoping: BigBro2454)"]
        PyGithubCore["PyGithub REST Engine"]
        UpstreamAPI["GitHub REST API v3\n(api.github.com)"]
        RepoTools --> ScopedClient
        CodeTools --> ScopedClient
        PRTools --> ScopedClient
        GovTools --> ScopedClient
        AnalyticsTools --> ScopedClient
        ScopedClient <--> PyGithubCore
        PyGithubCore <-->|HTTPS Bearer Auth| UpstreamAPI
    end

flowchart TD
    Req["Incoming MCP Tool Invocation Request"] --> Step1{"Adversarial Prompt<br/>Injection Check?"}
    Step1 -- "Adversarial Directive Detected" --> Block1["⛔ Reject with PROMPT_INJECTION_DETECTED<br/>(<0.05ms, 0 Tokens Burned)"]
    Step1 -- "Clean Query" --> Step2{"Sensitive File Path or<br/>Traversal Attempt?"}
    
    Step2 -- "Traversal or .env/.pem" --> Block2["⛔ Reject with SECURITY_POLICY_VIOLATION<br/>(Access Blocked)"]
    Step2 -- "Allowed Path" --> Step3{"Token Bucket Quota<br/>Available?"}

    Step3 -- "Quota Exhausted" --> Block3["⚠️ Return RATE_LIMIT_EXCEEDED<br/>(Quota Protected)"]
    Step3 -- "Tokens Acquired" --> Exec["⚡ Execute Tool via Scoped GitHubClient"]

    Exec --> Step4{"Outbound Content Contains<br/>Secrets or PII?"}
    Step4 -- "Credentials / PII Found" --> Redact["🛡️ Redact Secrets & Mask PII<br/>[REDACTED_CREDIT_CARD], [REDACTED_GEMINI_KEY]"]
    Step4 -- "Clean Payload" --> Pass["✅ Format JSON-RPC 2.0 Response Frame"]
    Redact --> Pass
    Pass --> Host["Return to Host via Stdio Pipe"]

# 1. Run live multi-stage security guardrails audit (prompt injection, PII, secrets, path traversal)
python server.py --guardrails

# 2. Run cross-model Vertex AI token economics & ROI benchmark
python server.py --economics

# 3. Run 22-tool fleet governance and health audit matrix
python server.py --governance

# 4. Batch export structured JSON & Markdown scorecards to directory
python server.py --export-reports telemetry/

# 5. Launch interactive single-page visual architecture dashboard
python server.py --dashboard

# 6. Run FastMCP inspector development mode
python server.py --dev

./.venv/bin/pytest tests/ -v

============================== 41 passed in 0.62s ==============================

{
  "mcpServers": {
    "github-personal": {
      "command": "/Users/ishan03/Workspace/projects/playground/github-mcp-server/.venv/bin/python3",
      "args": [
        "/Users/ishan03/Workspace/projects/playground/github-mcp-server/server.py"
      ],
      "env": {
        "GITHUB_TOKEN": "ghp_YOUR_PERSONAL_ACCESS_TOKEN"
      }
    }
  }
}