# Install globally
npm install -g guardian-mcp-toolkit

# Audit any project (auto-detects structure & language)
guardian audit /path/to/your/project

# See what was detected
guardian audit . --format json

# Auto-remediate violations
guardian fix . --apply

# Watch mode — real-time feedback as you code
guardian watch .

┌─────────────────────────────────────────────────────────────┐
│                    Guardian Governance Platform               │
│                                                              │
│  ┌──────────┐    ┌────────────────┐    ┌─────────────────┐ │
│  │   CLI    │───▶│   MCP Server   │───▶│ Amazon Bedrock  │ │
│  │  (TUI)   │    │  (12 Agents)   │    │ (Claude Sonnet) │ │
│  └────┬─────┘    └───────┬────────┘    └─────────────────┘ │
│       │                   │                                  │
│       ▼                   ▼                                  │
│  ┌──────────┐    ┌────────────────┐    ┌─────────────────┐ │
│  │Dashboard │◀──▶│   EventBus     │───▶│   LSP Server    │ │
│  │(React/SSE)│   │  (real-time)   │    │ (IDE diagnostics)│ │
│  └──────────┘    └────────────────┘    └─────────────────┘ │
└─────────────────────────────────────────────────────────────┘

{
  "mcpServers": {
    "guardian": {
      "command": "guardian",
      "args": ["mcp", "serve"]
    }
  }
}

guardian audit .                      # Audit current directory
guardian audit src/ --format json     # JSON output to stdout
guardian audit . --fail-on warning    # Fail on warnings too (strict)
guardian audit . --fail-on error      # Fail only on errors (default)

guardian fix .              # Show proposed fixes (dry-run)
guardian fix . --apply      # Apply fixes automatically

guardian watch .                # Watch current directory
guardian watch src/ --port 4200 # Custom SSE port

guardian dashboard              # Opens http://localhost:4000
guardian dashboard --port 8080  # Custom port

guardian init     # Creates .guardian.json in current directory

guardian agent list             # Table of all agents with status
guardian agent enable ddd-guard # Enable a specific agent
guardian agent disable tdd-strict # Disable an agent

guardian hooks install    # Creates .git/hooks/pre-commit & pre-push

guardian mcp serve    # Listens on stdio for MCP protocol

{
  "version": "1.0.0",
  "executionMode": "local",
  "layers": [
    { "name": "domain", "paths": ["src/domain/**"], "allowedDependencies": [] },
    { "name": "application", "paths": ["src/services/**"], "allowedDependencies": ["domain"] },
    { "name": "infrastructure", "paths": ["src/infra/**"], "allowedDependencies": ["domain", "application"] },
    { "name": "presentation", "paths": ["src/api/**"], "allowedDependencies": ["application"] }
  ],
  "testConventions": [
    { "pattern": "**/*.test.ts" },
    { "pattern": "**/*_test.go" }
  ],
  "excludePaths": ["node_modules", "dist", "vendor", ".git"],
  "ddd": {
    "aggregates": {
      "Order": {
        "root": "src/domain/order/Order.ts",
        "internals": ["src/domain/order/OrderItem.ts", "src/domain/order/OrderStatus.ts"]
      }
    },
    "boundedContexts": {
      "orders": ["src/domain/order/**", "src/services/order/**"],
      "users": ["src/domain/user/**", "src/services/user/**"]
    }
  },
  "semantic_naming": {
    "enabled": true,
    "engine": "local",
    "banned_words": ["Manager", "Util", "Helper", "Service", "Base", "Common"]
  },
  "bedrock": {
    "enabled": false,
    "model_id": "anthropic.claude-3-5-sonnet-20241022-v2:0",
    "fallback_model_id": "anthropic.claude-3-haiku-20240307-v1:0"
  }
}

{
  "rules": [
    {
      "id": "no-axios-in-domain",
      "layer": "domain",
      "severity": "error",
      "message": "Domain layer cannot depend on HTTP libraries",
      "forbidden_imports": ["axios", "node-fetch", "got"]
    },
    {
      "id": "max-method-length",
      "severity": "warning",
      "message": "Methods should be concise",
      "max_lines": 30
    },
    {
      "id": "domain-must-export-interface",
      "layer": "domain",
      "severity": "warning",
      "message": "Domain files should export at least one interface",
      "required_patterns": ["export\\s+interface"]
    }
  ]
}

$ guardian fix .

  Guardian Fix — 3 fixes available:

  [FIX] src/domain/UserService.ts:3
        Action: Generate interface in domain layer and move implementation to infrastructure
        + export interface IUserRepository { ... }
        - import { PgUserRepo } from "../infrastructure/..."

  [FIX] src/domain/Order.ts:5
        Action: Add 'readonly' modifier to public property
        - public status: string
        + public readonly status: string

  [FIX] src/application/Handler.ts
        Action: Generate test skeleton: Handler.test.ts

  Use --apply to apply fixes automatically.

guardian dashboard

guardian watch src/

  ╭────────────────────────────────────────────────────╮
  │ ARCHITECTURAL DRIFT DETECTED                        │
  ╰────────────────────────────────────────────────────╯
   Agent    : [DDD-Guard]
   File     : src/domain/order/Order.ts:5
   Rule     : DDD_MUTABLE_PUBLIC_STATE

   Reasoning:
   Class 'Order' exposes mutable public property 'status'.
   This breaks aggregate encapsulation in DDD.

   Auto-Remediation:
   ❯ Run `guardian fix --target Order.ts`

name: Guardian Governance Audit
on: [pull_request]

jobs:
  audit:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: actions/checkout@v4
      - uses: guardian-mcp/action@v1
        with:
          path: '.'
          fail-on: 'error'
          generate-pr-comment: 'true'

- uses: actions/setup-node@v4
  with: { node-version: '20' }
- run: npm install -g guardian-mcp-toolkit
- run: guardian audit . --fail-on error

{ "executionMode": "cloud" }

cd infra
cdk deploy   # Deploys all Lambdas + API Gateway

guardian-mcp-toolkit/
├── packages/
│   ├── shared/            # Types, interfaces, EventBus, multi-lang parser
│   ├── server/            # MCP Server, Smart Router, AST Cache, Custom Rules Engine
│   ├── clean-guard/       # Clean Architecture agent (3 tools)
│   ├── tdd-strict/        # TDD agent (3 tools)
│   ├── ddd-guard/         # DDD agent (3 tools)
│   ├── security-guard/    # Security agent (2 tools)
│   ├── solid-copilot/     # SOLID agent + Bedrock integration (2 tools)
│   ├── concurrency-guard/ # Concurrency agent (1 tool)
│   ├── semantic-naming-guard/ # Naming agent + Level1/Level2 engines (1 tool)
│   ├── lang-specialists/  # 5 language-specific agents (5 tools)
│   ├── cli/               # Terminal UX (9 commands, FileWatcher, fixEngine)
│   ├── lsp/               # LSP Server (diagnostics + Code Actions)
│   ├── dashboard/         # Express server + React SPA (Chart.js)
│   └── lambda/            # AWS Lambda handlers (7 functions)
├── infra/                 # CDK Stack (Lambda + API Gateway)
├── action/                # GitHub Action (composite)
├── scripts/               # Deploy, bundle, and demo scripts
├── docs/                  # Pitch deck, metrics, demo script
└── .guardian.json         # Self-governance (Guardian audits itself)

pnpm test          # Run all tests (215+ across 39 files)
pnpm build         # Build all packages
pnpm test -- --run # Run without watch mode