CommitLore
curl -fsSL https://raw.githubusercontent.com/MongLong0214/commitlore/v1.2.0/install.sh | sh -s v1.2.0curl -fsSLO https://raw.githubusercontent.com/MongLong0214/commitlore/v1.2.0/install.sh
sh install.sh v1.2.0
# Or skip the script: the checkout it makes is one you can make yourself.
git clone --depth 1 --branch v1.2.0 https://github.com/MongLong0214/commitlore
node commitlore/dist/commitlore.mjs --version고정된 소스 체크아웃과 node <checkout>/dist/commitlore.mjs를 실행하는 래퍼를 설치합니다. 컴파일된 다운로드나 빌드 단계가 없습니다.
코드는 살아남는다. 판단은 그렇지 않다.
에이전트가 접근 방식을 제안합니다. 팀이 명확하지 않은 제약 때문에 이를 거부합니다. 최종 코드는 결과를 보존하지만, 대안이 왜 거부되었는지는 보통 보존하지 않습니다. 나중의 에이전트는 코드만 보고 같은 아이디어를 다시 제안합니다.
CommitLore는 그 판단을 코드 옆에 보관합니다.
CommitLore가 하는 일
동작 | 제품 경로 | |
캡처 | diff가 보여줄 수 없는 제약, 기각된 대안, 경고를 보존합니다. 후보는 세션 기록과 스테이징된 diff에 대해 확인됩니다. |
|
보존 | 승인된 기록을 호스팅 메모리 데이터베이스 대신 Git 트레일러 또는 노트에 저장합니다. | 커밋 훅 · |
수명 주기 추적 | 활성, 대체, 만료된 결정을 구분합니다. |
|
범위 지정 | 에이전트가 편집하려는 경로에 대한 결정을 선택합니다. |
|
신뢰 등급 | 기록을 지시, 주장, 또는 차단된 콘텐츠로 전달합니다. | 기본 / 서명 모드 |
전달 | 편집 전에 지원되는 에이전트에게 현재 컨텍스트를 제공합니다. | 플러그인 훅 · MCP |
대부분의 커밋은 기록을 담지 않아야 합니다. CommitLore는 코드가 보존할 수 없는 판단을 위한 것이지, 모든 변경을 서술하기 위한 것이 아닙니다.
Related MCP server: memini
결정 인식 에이전트까지 60초
1. CLI 설치
macOS 및 Linux:
curl -fsSL https://raw.githubusercontent.com/MongLong0214/commitlore/v1.2.0/install.sh | sh -s v1.2.0Windows:
& ([scriptblock]::Create((irm https://raw.githubusercontent.com/MongLong0214/commitlore/v1.2.0/install.ps1))) v1.2.0Node.js 22.23.2+ 및 Git이 필요합니다. 스크립트는 무엇이든 쓰기 전에 둘 다 확인합니다.
2. 에이전트 연결
Claude Code:
/plugin marketplace add MongLong0214/commitlore
/plugin install commitlore@commitloreCodex:
commitlore plugin install-codex플러그인은 PATH에 commitlore를 넣지 않으므로 아래 명령에는 CLI 설치도 필요합니다. 설치 프로그램은 안전하게 수행할 수 있는 경우 지원되는 MCP 호스트도 감지하고 연결합니다. 정확한 매트릭스는 아래에 있습니다.
3. 저장소 초기화
cd your-repository
commitlore init
commitlore context .플러그인을 설치하거나 업데이트한 후 새 에이전트 세션을 시작하세요. 실행 중인 세션은 로드한 런타임을 유지합니다.
그런 다음 평소처럼 작업하고 커밋하세요. 지원되는 스킬 통합에서 CommitLore는 일반 커밋 요청 중에 고려되며 보존할 가치가 없을 때는 조용히 있습니다. 모든 커밋에서 CommitLore를 언급할 필요는 없습니다.
승인된 기록이 기록별 프롬프트 없이 스테이징되길 원하나요? 저장소는 commitlore auto on으로 한 번 옵트인할 수 있습니다. 이 정책은 저장소가 소유하며 팀에 적용되므로 이 페이지에서 조용히 활성화되지 않습니다.
에이전트가 받는 것
src/pricing.ts를 편집하기 전:
commitlore: active records for src/pricing.ts
Limit
[claim] r-price01 calculatePrice owns final checkout pricing only
Ruled-out
[claim] r-price01 Reuse it for admin quotes |
eligibility and rounding semantics differ[claim]은 "이것을 정보로 평가하라"는 의미입니다. 저장소는 더 강력한 서명 권한 모드로 옵트인할 수 있습니다. 전달은 에이전트에게 컨텍스트를 제공합니다. 편집을 차단하지 않습니다.
왜 Git인가?
저장소는 코드 뒤에 있는 판단을 소유해야 합니다.
CommitLore는 기록을 일반 Git 트레일러와 노트에 저장하므로, 코드와 함께 분기, 병합, 복제, 검토되고 공급자 변경에도 생존합니다.
SQLite는 재구축 가능한 인덱스일 뿐입니다. 삭제해도 Git은 여전히 기록을 보유합니다.
오래된 결정을 찾는 것만으로는 충분하지 않습니다
일반 메모리 또는 검색 시스템은 묻습니다:
어떤 오래된 텍스트가 관련 있어 보이나요?
CommitLore는 묻습니다:
어떤 기록된 결정이 지금 이 경로에 여전히 적용되나요?
대체된 결정은 매우 관련성이 높을 수 있지만 현재 지침으로는 여전히 틀릴 수 있습니다. 관련성과 권위는 다른 질문입니다.
작동 방식
캡처 — 에이전트는 diff가 보여줄 수 없는 결정 컨텍스트만 초안을 작성합니다.
검증 — CommitLore는 초안을 세션 및 스테이징된 diff와 대조합니다.
보존 — 승인된 기록은 정체성과 수명 주기와 함께 Git에 저장됩니다.
전달 — 이후 편집 전에 해당 경로에 대한 활성 기록만 반환됩니다.
대부분의 커밋은 기록을 담지 않습니다. 커밋 훅은 기록이 있을 때만 검증합니다. 기록을 만들지 않습니다.
기존 훅은 덮어쓰지 않습니다. commitlore init는 core.hooksPath를 존중하며, 이미 설치된 훅을 <hook>.commitlore-chained로 이동하고 먼저 호출합니다. commitlore hooks uninstall은 원래대로 되돌립니다.
자동으로 일어나는 일
호스트 | 편집 전 전달 | 검증된 캡처 워크플로 | 결정적 매 커밋 캡처 |
Claude Code | 플러그인을 통해 자동 | 플러그인 스킬을 통해 사용 가능 | 인증되지 않음 |
Codex | 플러그인을 통해 자동 | 플러그인 스킬을 통해 사용 가능 | 인증되지 않음 |
Hermes |
| 호스트 설치 후 사용 가능 | 인증되지 않음 |
Gemini CLI, Cursor, Windsurf, opencode | 호스트가 등록을 사용하는 경우 MCP 전달 | 절차가 MCP를 통해 노출됨 | 아니요 |
| 절차만 | 절차만 | 아니요 |
"사용 가능"은 준비 → 검증 → 스테이징 워크플로가 존재한다는 의미입니다. 모든 적격 커밋이 자동으로 평가된다는 의미는 아닙니다.
지원되는 스킬 호스트의 사용자는 모든 커밋에서 "이것을 CommitLore에 기록하세요"라고 말할 필요가 없습니다. 남은 제한은 호스트 시작이며, 필수 기록별 사용자 명령이 아닙니다.
측정이 아닌 현장 보고
v1.2.0을 처음 설치하는 누군가가 관련 없는 저장소에서 한 번 실행한 것입니다. 여기 있는 어떤 것도 측정되지 않았으며 증거 로그에 없습니다. 위 단락이 여기 표에서 다루지 않는 루프를 주장하기 때문에 이 페이지에 있습니다.
그들은 에이전트에게 반올림 버그를 수정하라고 요청하고, 지나가는 말로 십진수 라이브러리가 이미 고려되었고 기각되었다고 언급하고, "커밋하세요"로 끝냈습니다. CommitLore는 언급되지 않았습니다. 커밋이 담은 것의 일부:
Ruled-out: adopting a decimal library such as Decimal.js | the backend is a
number contract, so it is meaningless
Warn: do not revert the test file to console.assert: it exits 0 even on
failure, so CI passes silently
Provenance: draftedWarn은 에이전트에게 지시된 것이 아닙니다. 작업 중에 함정에 빠졌고 다음 사람을 위해 남겼습니다. Provenance: drafted는 어떤 인간도 기록을 읽지 않았음을 기록하며, 이를 claim으로 등급을 매깁니다. 즉, 명령이 아닌 평가할 보고서로 전달됩니다.
공유 기록이 없는 이후 세션은 결국 십진수 라이브러리를 채택하라는 요청을 받았습니다. 그렇게 하지 않았고, 그 이유로 기록을 언급했습니다. 또한 등급을 읽었습니다. claim은 지시가 아니므로, 동의하기 전에 명시된 이유를 코드와 대조했습니다.
메모리 저장과 다름
일반 메모리 / RAG | CommitLore | |
주요 질문 | 어떤 오래된 텍스트가 관련 있나? | 어떤 결정이 지금 여기에 여전히 적용되나? |
권위 | 메모리 저장소 또는 공급자 | Git |
범위 | 의미적 유사성 | 저장소 경로 |
수명 주기 | 종종 추가 우선 | 활성 · 대체 · 만료 |
신뢰 | 검색된 텍스트 | 지시 · 주장 · 차단 |
캡처 | 대화 또는 노트 저장 | 증거 확인된 결정 기록 |
이식성 | 백엔드 의존 | 일반 Git |
CommitLore는 의도적으로 더 좁습니다. 일반 사용자 메모리 시스템, 대화 아카이브 또는 벡터 데이터베이스 대체가 아닙니다.
증거
질문 | 측정 결과 | 경계 |
등록된 연구에서 클레임 등급 컨텍스트가 재제안을 변경했는가? | CommitLore 사용 시 2.8% (16/580) vs 미사용 시 18.8% (109/579) | 단일 모델, 단일 하네스, 구성된 태스크 |
수명주기 필터링이 측정된 활성 프로젝션에서 폐기된 레코드를 전달했는가? | 폐기된 레코드 0건 | 대체된 레코드가 존재했음; 만료는 적용되지 않음 |
인덱스 조회가 확장 가능한가? | 10만 커밋에서 p50 496ms | 인덱스 없는 폴백은 훨씬 느림 |
인덱스 빌드 시간은 커밋 수가 아닌 레코드 수를 따릅니다: 비용이 큰 패스는 레코드당 한 번 실행되므로, 오랜 이력이지만 레코드가 적게 기록된 저장소는 레코드가 빽빽한 짧은 이력보다 더 빨리 빌드됩니다.
경로 범위(Path scope)가 대규모 이력을 모델에 도달하지 못하게 막는 요소입니다. #167 말뭉치에서 10,002개 레코드 중 단 2개만 도달했습니다:
경로 | 모델에 노출된 레코드 | 관련 레코드 | 모델에 노출된 토큰 |
전체 주입 | 10,002 | 2/2 | 1,004,554 |
top-k 어휘 | 2 | 1/2 | 190 |
CommitLore 경로 범위 | 2 | 2/2 | 335 |
이는 고정된 2개 레코드 예산에서 노출도와 재현율을 측정한 것입니다 — 토큰 비용, 청구 비용, 정확도, 에이전트 동작이 아닙니다. 단일 말뭉치, 단일 쿼리, 단일 고정 임베딩 모델입니다.
에이전트 연구는 보편적인 모델 효과를 입증하지 않습니다. 전달이 모델이 레코드를 읽거나 따랐다는 증거는 아닙니다.
한계, 신뢰 및 개인정보
캡처는 보조적이며 결정적이지 않습니다. 지원되는 스킬은 일반적인 커밋 요청을 고려하지만, 어떤 호스트도 모든 적격 커밋을 평가하도록 인증되지 않았습니다.
기본 지시 모드는 인증이 아닙니다. 커밋 작성자 헤더를 일치시키며, 커밋을 작성할 수 있는 사람은 누구나 해당 헤더를 설정할 수 있습니다 — 따라서 기본 모드의
[directive]는 신원 증명이 아닌 정책 메타데이터입니다. 서명 모드는 추가로 Git의 자체 검증 상태와 저장소 로컬commitlore.trustedSigner허용 목록의 일치를 요구합니다. 서명자 허용 목록이 없거나, 비어 있거나, 읽을 수 없으면 누구도 승인되지 않으므로 해당 모드는 실패 시 닫힘(fail closed) 방식으로 동작합니다.가드는 안전망이 아닌 실험적 자문입니다: 417개 결정 말뭉치에서 정밀도 44.8% (95% Wilson CI 32.7%–57.5%), 재현율 22.0%. 가드 결과가 비어 있다고 해서 안전 판정은 아닙니다.
전달은 일치하는 모든 도구 호출에서 토큰을 소비합니다. 사전 편집 훅은
Edit,Write,MultiEdit,NotebookEdit뿐만 아니라Read에서도 실행되므로, 편집 에이전트가 커밋하는 것보다 훨씬 자주 실행됩니다. 각 실행은 페이로드 예산(기본 800토큰,--budget으로 변경)까지 소비합니다. 레코드가 없는 저장소는 아무것도 소비하지 않으며, 이는 설치가 아닌 도입과 함께 발생하는 비용임을 의미합니다.답변은 부분적일 수 있습니다. 적용 범위는 공개됩니다. 부분 결과에서 누락된 것이 레코드가 존재하지 않는다는 증거는 아닙니다. 저장소 전체 적용 범위, 심볼 앵커, 대화형 레코드 빌더는 여전히 미해결 과제입니다: #32, #33.
커밋 트레일러는 클론과 함께 이동하지만, 노트는 그렇지 않습니다. Git은 기본적으로
refs/notes/*를 가져오지 않으므로,refs/notes/commitlore의 레코드는commitlore init이 해당 미러를 구성하기 전까지 일반 클론에는 존재하지 않습니다.호스팅 백엔드는 없습니다. 그러나 서버나 훅이 컨텍스트를 반환하면, 호스트는 자체 정책에 따라 해당 컨텍스트를 처리합니다. CommitLore는 해당 데이터 흐름을 제어하지 않습니다.
레코드는 등급이 매겨질 때까지 신뢰할 수 없습니다. 기본 작성자 일치는 정책 메타데이터이지 인증이 아닙니다. 서명 지시 모드는 Git 검증과 저장소 로컬 서명자 허용 목록을 요구합니다. 허용 목록이 없거나 읽을 수 없으면 누구도 승인되지 않습니다. 주입 형태의 페이로드는 모델이 읽을 수 있는 경로에서 차단됩니다.
CLI 설치 프로그램은 알 수 없는 저장소 내부의 훅을 다시 작성할 수 없으며, 실행
중인 호스트 세션은 로드한 런타임을 유지합니다. commitlore doctor는 두 상태와
그 복구 방법을 명시하고, commitlore upgrade는 최신 릴리스가 존재하는지
보고합니다.
레코드는 일반적인 Git 트레일러 또는 노트입니다. 프로토콜 2.0은 수명주기, 신뢰 등급, 검증 및 호환성을 정의합니다.
저장소는 방법론, 제외 기준, 실패한 측정, 그리고 원래 벤치마크나 진단이 틀렸던 사례를 공개합니다.
문서
기여
CONTRIBUTING.md는 이 저장소가 스스로 지키는 레코드 프로토콜, 릴리스 게이트, 그리고 증거를 재현하는 방법을 다룹니다.
라이선스
MIT — LICENSE 참조.
Available Tools
8 toolscommitlore_before_changeARead-only
Everything recorded about a path, before editing it: the active decisions, the gaps in what could be verified, and any ruled-out alternative a proposal would revive. Returns active_decisions, verification_gaps, possible_revival_matches, guard_confidence and cache_key. Pass path alone for context. Pass proposal as well to also run the guard against that path's Ruled-out records; without it guard_confidence is "not-run" and possible_revival_matches is empty because nothing was checked, not because nothing matched. The guard is an experimental advisory: precision 44.8%, recall 22.0% on the 417-decision corpus. An empty possible_revival_matches does not guarantee the proposal avoids every ruled-out alternative.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | repository-relative path whose Ruled-out records to check against | |
| proposal | No | the proposed approach, in the words it would be carried out in; omit for context only (no guard run) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only annotations, it discloses that the guard is experimental, gives precision/recall numbers, explains that an empty match list means nothing checked rather than no match, and warns that empty results do not guarantee safety. This is significant extra behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense and front-loaded with the core purpose, then return keys, then usage modes, then the guard caveat. It is longer than average but every clause carries necessary information, so it earns its length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
It names all returned keys and explains the guard-related result semantics, which is important because there is no output schema. It does not detail the internal structure of `active_decisions` or `verification_gaps`, but the names and context make them understandable enough for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the description adds behavioral meaning to `proposal` by explaining how its presence changes the guard run and the returned fields. It also clarifies that `path` is repository-relative, reinforcing the schema without repeating it verbatim.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns recorded context for a path before editing, including active decisions, verification gaps, and ruled-out alternatives. It distinguishes its scope ('before editing') and guard behavior from the sibling set, though it does not explicitly name an alternative tool to contrast with.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit mode guidance: pass `path` alone for context, and pass `proposal` to also run the guard. It explains the consequences of omitting `proposal` (guard_confidence 'not-run', possible_revival_matches empty). It does not explicitly say when to prefer this over sibling tools like commitlore_guard, but the context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
commitlore_guardARead-only
Check a proposal against the Ruled-out records for a path before acting on it. Returns every record whose alternative matches, with the reason it was rejected. Experimental advisory: precision 44.8%, recall 22.0% on the 417-decision corpus. An empty matched array does not guarantee the proposal avoids every ruled-out alternative.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | repository-relative path whose Ruled-out records to check against | |
| proposal | Yes | the proposed approach, in the words it would be carried out in |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already indicate read-only and non-destructive behavior, and the description adds transparency about the output ('Returns every record whose alternative matches') and the important caveat that an empty result does not guarantee safety. It does not describe error behavior, but the main behavioral characteristics are disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, each conveying essential information: the action, the return behavior, and the experimental limitations. No filler or redundant phrasing is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains what the tool returns and includes a critical limitation about false negatives. There is no output schema, but the return shape is described well enough for basic use; error cases and exact record structure are not specified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the description does not add significant semantic detail beyond the schema. 'Path' and 'proposal' are both described in the schema, so the description mostly repeats rather than enriches parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Check a proposal'), a specific resource ('Ruled-out records for a path'), and a clear purpose ('before acting on it'). It clearly distinguishes this tool's role from generic query or mutation tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear timing guidance ('before acting on it') and warns that the tool is experimental and advisory, with precision/recall metrics. It does not explicitly name alternative sibling tools, but the usage context and limitations are sufficiently clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
commitlore_prepare_captureA
Prepare a capture transaction: computes binding conditions (HEAD, staged diff, tree, policy hash), generates the prompt contract for the agent to use, and persists a phase:"prepared" pending transaction. Returns the nonce needed for verify and stage. The prompt carries the end of the transcript rather than all of it; transcript_window says which lines, numbered as the whole transcript numbers them. Verification still reads the whole transcript, so quote only what the prompt shows you. The transaction binds to THIS server's checkout, returned as repository; if your working directory is a linked worktree or another clone, pass repository to assert it and this refuses rather than binding to the wrong HEAD.
| Name | Required | Description | Default |
|---|---|---|---|
| repository | No | your own working directory, asserted. This server is registered against one checkout and binds every transaction to it; if you are in a linked worktree or another clone, pass this and the call refuses instead of binding to a tree you never touched. It cannot change the binding, only assert it. Omit to accept this server's repository, which is returned as `repository` | |
| transcript | Yes | the session transcript to compute source hashes from | |
| unattended | No | declare this capture unattended: nobody was asked before staging. Refused unless the repository opted in (.commitlore-policy.json: "unattended": true, mode "auto") |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description reveals substantial behavior: it persists a phase:'prepared' pending transaction, computes binding conditions, returns only the end of the transcript in the prompt, notes that verification still reads the whole transcript, and refuses to bind when the repository assertion fails. None of this contradicts the annotations, and the readOnlyHint=false is consistent with the described persistence.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: purpose and output are front-loaded, followed by critical quoting guidance and binding behavior. There is no filler or repetition of schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex tool with no output schema, the description covers the essential return values (`nonce`, `repository`, `transcript_window`), the persistence side effect, the transcript quoting rule, and the refusal behavior. It does not enumerate the complete shape of the returned prompt contract or all possible error cases, but it provides enough context to call the tool effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the schema already explains each parameter meaningfully, especially `repository` and `unattended`. The description adds workflow context around the transcript and repository assertion, but it does not add substantial parameter-level semantics beyond the schema, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: 'Prepare a capture transaction' and details the concrete outputs (binding conditions, prompt contract, pending transaction, nonce). It also distinguishes this step from the sibling tools by explicitly relating the nonce to 'verify and stage', so an agent can tell it apart from commitlore_stage_capture and commitlore_verify_capture.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear workflow context: this prepares the transaction and returns the nonce needed for later verify and stage steps. It also includes a conditional usage rule for passing `repository` when working from a linked worktree or another clone. It does not explicitly enumerate when not to use the tool versus each sibling, but the phase workflow is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
commitlore_queryARead-only
Active CommitLore records for a path: the constraints, ruled-out alternatives and warnings recorded in git history. Same answer as commitlore <kind> --json.
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | context = every kind at once; limits = Limit:; ruled-out = Ruled-out:; warnings = Warn: | |
| path | No | repository-relative path to scope the answer to (renames are followed); omit for the whole repository |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so safety is covered. The description adds that records are 'active' and that it returns the same answer as a CLI command, implying a JSON response. This adds meaningful context beyond the annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero waste. The core purpose is front-loaded, and the second sentence clarifies the CLI equivalence. No redundant phrasing or unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 2-parameter read-only query tool with no output schema, the description explains the content returned (active records of kinds), the scope via path, and the JSON format via CLI reference. It is sufficiently complete for an agent to invoke it correctly, though it does not detail the exact response structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both parameters (kind and path) already fully described in the schema. The description does not add parameter-specific details beyond the schema, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States it retrieves active CommitLore records (constraints, ruled-out alternatives, warnings) for a path, and mentions it is equivalent to `commitlore <kind> --json`. This clearly distinguishes it from sibling tools that handle guard, capture, identity, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context (querying records for a path) but does not explicitly compare to alternative commitlore tools or state when not to use it. It lacks explicit exclusions or alternative selection guidance, relying on the purpose to convey when it should be invoked.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
commitlore_runtime_identityARead-only
Report the exact CommitLore entrypoint, package root, version and index schema this MCP server executes.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already indicate readOnlyHint: true and destructiveHint: false, and the description's 'Report' action aligns perfectly with these. It further discloses the exact content of the report, leaving no ambiguity about the tool's behavior or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that lists all reported items without unnecessary words. It is highly concise and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that there are no parameters and no output schema, the description is complete. It fully informs the agent of what the tool reports, with no missing context needed to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the description does not need to explain any. Since there are no params to clarify, the baseline score of 4 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with the specific verb 'Report' and lists the exact items reported (entrypoint, package root, version, index schema). It is distinct from the sibling tools, which focus on query, capture, and guard operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no explicit guidance on when to use this tool versus alternatives, nor does it mention any prerequisites or conditions. It is a self-explanatory reporting tool, but the absence of any usage context leaves the agent without direction on when to invoke it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
commitlore_stage_captureA
Stage a verified capture transaction: advances the pending record from verified to staged, stamps expires_at (staged_at + 5 minutes), and makes it eligible for the prepare-commit-msg hook. All bindings are server-owned and computed from stored state; the only inputs are the nonce and, optionally, the receipt your verification was issued.
| Name | Required | Description | Default |
|---|---|---|---|
| nonce | Yes | the 32-character lowercase hex nonce returned by prepare_capture | |
| receipt | No | the receipt verify_capture returned to you. Required whenever the transaction was bound by a verification that issued one, which is every transaction this build binds; a receipt that was not issued by that verification is refused. Omit it only for a transaction prepared by a build older than receipts. Always send the one you were given. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behaviors beyond the annotations: it advances the record from verified to staged, sets expires_at to staged_at + 5 minutes, and makes it eligible for the prepare-commit-msg hook. It also explains that bindings are server-owned and computed from stored state, and that receipt verification is enforced. This is rich context that annotations (only readOnlyHint, openWorldHint, destructiveHint as false) do not provide, so it earns a high score.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise—two sentences—but packs critical information: the action, the state transition, the timing, the eligibility, and the parameter guidance. Every sentence adds value, and it is front-loaded with the core purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity, the description covers all essential aspects: the state transition, the time constraint, the eligibility for the hook, and the parameter handling. There is no output schema, so the description doesn't need to explain return values, and the parameter semantics are already covered in the schema. The only minor gap is not explicitly stating what the response or result looks like, but that is not critical for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the description adds minimal extra meaning beyond what the schema already explains. The description reinforces the receipt's requirement and its origin, but since the schema already provides detailed descriptions, the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to stage a verified capture transaction by advancing a pending record from verified to staged, and it explicitly mentions the stamping of expires_at. It distinguishes itself from sibling tools like verify_capture and prepare_capture by describing the specific state transition.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly indicates when to use the tool ('after a verification has been issued') and explains when to omit the receipt (for older builds). However, it does not explicitly state when NOT to use this tool or mention alternative tools by name, so it's not a perfect 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
commitlore_staleARead-only
Records that are no longer carrying their weight: superseded, past a date-form Expires:, or flagged for review by a condition-form one. Same answer as commitlore stale --json.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false. The description adds value by defining what 'stale' means (superseded, past Expires:, flagged for review), which goes beyond the annotation. No contradiction; it reinforces the read-only nature by focusing on listing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. The core purpose and criteria are front-loaded, and the command equivalence is a concise note. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter listing tool with read-only annotations, the description is sufficiently complete. It explains what is returned (stale records) and the criteria. No output schema exists, but the tool's purpose is simple enough that return format is implied.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so schema coverage is trivially 100%. The baseline for 0 params is 4, and the description does not need to explain parameters. It appropriately omits parameter details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists stale CommitLore records, with specific criteria (superseded, past Expires:, flagged for review). The verb 'list' and resource 'stale records' are clear. It doesn't explicitly differentiate from siblings like commitlore_query, but the specific criteria make it distinct.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for viewing stale records but provides no guidance on when to use it versus other tools or when not to use it. The mention of 'Same answer as commitlore stale --json' is a command equivalence, not an alternative selection. No exclusions or context are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
commitlore_verify_captureA
Verify a capture draft against the transcript and diff that were hashed at prepare time. Evidence citations are checked mechanically (verbatim match); fabricated quotes are discarded. Stores the verified result in the pending transaction for stage to consume.
| Name | Required | Description | Default |
|---|---|---|---|
| diff | No | optional: the staged diff, if you have it. Omit it and the server reads the staged diff itself and checks it against the hash prepare stored — the same guarantee, without asking you to reproduce content the server produced. | |
| draft | Yes | The agent's draft, as the harvest contract specifies it: a JSON object with a "records" array. A bare JSON array of records is also accepted. | |
| nonce | Yes | the 32-character lowercase hex nonce returned by prepare_capture | |
| transcript | Yes | the session transcript (same content hashed at prepare time) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond the annotations (readOnlyHint=false, destructiveHint=false) by disclosing that it stores the verified result in a pending transaction and that evidence citations are mechanically checked, with fabricated quotes discarded. This adds meaningful behavioral context about the mutation and verification logic.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with no redundancy. The purpose is front-loaded, and each sentence delivers distinct information: the core verification action, the citation-checking behavior, and the storage outcome.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description does not specify the return value or what happens if verification fails, which is important given there is no output schema. It mentions the workflow (prepare, stage) but leaves response format and error handling unspecified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
While the schema already covers 100% of parameters, the description adds extra nuance: it explains the diff parameter can be omitted for the server to read the staged diff itself, and it clarifies the draft format (JSON object with a 'records' array, bare array accepted). This supplements the schema descriptions meaningfully.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('verify') and resource ('capture draft'), and clarifies the context by referencing 'hashed at prepare time' and 'for stage to consume'. This makes the tool's role in the workflow unambiguous and distinguishes it from the sibling prepare and stage tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage in the prepare→verify→stage workflow but does not explicitly state when to use this tool over alternatives or when not to use it. There is no exclusions or alternative routing, so the guidance is only implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
v1.5.0- Changed
commitlore_prepare_capture1 field changed- added
Input schema / properties / repositoryAdded value: +{ + "description": "your own working directory, asserted. This server is registered against one checkout and binds every transaction to it; if you are in a linked worktree or another clone, pass this and the call refuses instead of binding to a tree you never touched. It cannot change the binding, only assert it. Omit to accept this server's repository, which is returned as `repository`", + "type": "string" +}
2 tool updates
v1.4.0- Changed
commitlore_stage_capture1 field changed- added
Input schema / properties / receiptAdded value: +{ + "description": "the receipt verify_capture returned to you. Required whenever the transaction was bound by a verification that issued one, which is every transaction this build binds; a receipt that was not issued by that verification is refused. Omit it only for a transaction prepared by a build older than receipts. Always send the one you were given.", + "type": "string" +}
- Changed
commitlore_verify_capture2 fields changed- changed
Input schema / properties / diff / descriptionPrevious value: -"the staged diff (same content hashed at prepare time)"New value: +"optional: the staged diff, if you have it. Omit it and the server reads the staged diff itself and checks it against the hash prepare stored — the same guarantee, without asking you to reproduce content the server produced." - changed
Input schema / requiredPrevious value: -[ - "nonce", - "draft", - "transcript", - "diff" -]New value: +[ + "nonce", + "draft", + "transcript" +]
8 tool updates
v0.1.0- First observed
commitlore_before_change - First observed
commitlore_guard - First observed
commitlore_prepare_capture - First observed
commitlore_query - First observed
commitlore_runtime_identity - First observed
commitlore_stage_capture - First observed
commitlore_stale - First observed
commitlore_verify_capture
TDQS
Scored across 8 tools
The capture lifecycle tools (prepare/verify/stage) are clearly separated by phase, and stale/runtime_identity are distinct. However, before_change, query, and guard overlap: before_change already runs the guard when a proposal is supplied, and query also returns ruled-out alternatives for a path. The descriptions help, but an agent could easily pick the wrong one for a pre-edit context lookup.
All tools share the commitlore_ prefix and use lowercase snake_case, which is a clear and consistent pattern. The capture tools use verb_noun (prepare_capture, verify_capture, stage_capture), but before_change, stale, and runtime_identity are stylistic deviations, so the set is mostly consistent rather than fully uniform.
Eight tools is well-scoped for this server's purpose: three for the capture pipeline, three for reading/guarding context, plus stale and runtime identity. Each tool has a place and the set feels neither bloated nor thin.
The core workflow is covered: retrieving records/context, checking proposals, and the prepare/verify/stage capture pipeline. Minor gaps exist—such as no direct way to update, dismiss, or resolve stale records—but these are workable and may be intentionally outside the MCP surface.
Maintenance
Related MCP Connectors
Project memory for coding agents: requirements, decisions, code graph and delivery telemetry.
Shared memory for coding agents. Stop re-explaining your codebase every session.
- SeturosOAuthcom.seturos
Shared work memory for Claude Code, Codex, Cursor and chat, scoped to each repository.
Shared project memory for AI coding agents: decisions, lessons, risks and tasks in one graph.
Related MCP Servers
- AlicenseAqualityAmaintenanceLocal-first memory layer for AI coding agents — captures issues, attempts, fixes, and decisions, and warns at git commit before you repeat a mistake.17850MIT
- AlicenseAqualityCmaintenanceLocal-first project memory for AI coding agents. Records failed attempts, fragile files, and decisions per repo, and warns the agent via hooks before it repeats a recorded mistake.659 npmMIT

robo-cortexofficial
AlicenseAqualityAmaintenanceProvides a git-aware knowledge base for AI coding agents to store and retrieve memories anchored to code changes, with automatic staleness detection.81MIT- AlicenseNot gradedqualityCmaintenanceGives AI coding agents persistent, branch-aware memory and a dependency-tracked task graph by storing decisions, lessons, and tasks as plain JSON and Markdown committed directly into the repository. Agents can record and fuzzy-search past decisions, dump instant project context, and create, claim, complete, and query tasks whose completion automatically unblocks downstream work.MIT