Enclosure

Enclosure gives coding agents the context and guardrails they need to work confidently across projects. It combines reusable project guidance, architecture checks, diagrams, and scaffolding behind REST, Siren, and MCP.

Highlights

• Agent-ready workspace guidance and project-health checks

• Architecture contracts backed by Modwire and Mermaiden

• Reusable records and project scaffolding

• A Siren browser for exploring resources and actions

• One machine-wide MCP server for every local project

Related MCP server: MCP Inspector as MCP Server

Quick start

uv sync
uv run python manage.py migrate
make mcp

The local stack runs on 127.0.0.1:8000:

Use make dev when only the standard Django development server is needed.

Development

Run the complete verification suite before handoff:

make ci

After changing the TypeScript browser, rebuild its checked-in static assets:

make browser-build

Hard-refresh the browser after rebuilding to discard a cached bundle.

Machine-wide MCP server

The Compose runtime exposes MCP at http://127.0.0.1:8666/mcp and keeps the server running as enclosure-mcp. Configure .env as needed:

• ENCLOSURE_IMAGE requires an exact immutable SemVer release tag. Do not use the moving latest tag for the machine-wide runtime.

• ENCLOSURE_PROJECTS_DIR selects the host projects directory mounted into the container at the same absolute path.

• MODWIRE_CACHE_MAX_BYTES caps the persistent Modwire scan and analysis cache stored in the dedicated modwire-cache volume.

• PROJECT_HEALTH_MAX_CONCURRENCY bounds architecture-health processes across all web workers. Excess requests fail immediately instead of queueing.

• PROJECT_HEALTH_TIMEOUT_SECONDS bounds each architecture-health process; the default is 60 seconds. Client disconnects cancel it sooner.

• PROJECT_HEALTH_WORKER_READY_TIMEOUT_SECONDS bounds worker bootstrap before a request is accepted; the default is 15 seconds.

• PROJECT_HEALTH_CACHE_MAX_BYTES caps validated project-health stage results in the dedicated health-cache volume. Failed, canceled, and timed-out runs are never stored.

Start or update the runtime:

make runtime-config
make runtime-up
curl --fail http://127.0.0.1:8666/health/

/health/ remains the container liveness probe. Project-health capacity is reported by the existing project-health operation, which returns 503 rather than queueing when every execution slot is occupied.

runtime-up migrates with the selected image before starting MCP and retains the previous image locally as :previous. Back up PostgreSQL before deploying potentially irreversible migrations. Use make runtime-rollback to restore the retained image, and make runtime-down to remove only the MCP container.

Releases

GitHub Release tags are canonical. Stable releases publish SemVer, minor, latest, and commit-traceability image tags; prereleases never move latest. Docker Hub publication requires DOCKERHUB_USERNAME and DOCKERHUB_TOKEN in the repository configuration.

API attribution

The API is auth-free. Mutating record requests use X-Actor-Id and X-Actor-Type; supported actor types are user and agent.

License

Copyright (c) 2026 Tomasz Szpak. All rights reserved. Enclosure is proprietary software; see the LICENSE file for the complete terms.