feat(mcp): add postprocess policy operations tools

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

Author: tae2089

internal/mcp/deps.go

@@ -120,6 +120,8 @@ type IncrementalSyncer interface {
 type PostprocessPolicy interface {
 	Resolve(ctx context.Context, input postprocesspolicy.DecisionInput) (string, string, error)
 	RecordRun(ctx context.Context, record postprocesspolicy.RunRecord) error
+	Status(ctx context.Context, opts postprocesspolicy.StatusOptions) (*postprocesspolicy.StatusSummary, error)
+	Reset(ctx context.Context, tool string) error
 }
 
 // Deps collects the services and stores required by MCP handlers.

internal/mcp/handler_postprocess.go

@@ -0,0 +1,54 @@
+package mcp
+
+import (
+	"context"
+
+	"github.com/mark3labs/mcp-go/mcp"
+
+	postprocesspolicy "github.com/tae2089/code-context-graph/internal/postprocess/policy"
+)
+
+func (h *handlers) getPostprocessPolicy(ctx context.Context, request mcp.CallToolRequest) (*mcp.CallToolResult, error) {
+	ctx = h.applyWorkspace(ctx, request)
+	if h.deps.PostprocessPolicy == nil {
+		return mcp.NewToolResultError("postprocess policy engine not configured"), nil
+	}
+	tool := request.GetString("tool", "")
+	if tool != "" && !postprocesspolicy.ValidTool(tool) {
+		return mcp.NewToolResultError("tool must be build_or_update_graph or run_postprocess"), nil
+	}
+	recentLimit := request.GetInt("recent_limit", postprocesspolicy.DefaultStatusLimit)
+	if err := validatePositiveLimit(recentLimit); err != nil {
+		return finalizeToolResult("", err)
+	}
+	summary, err := h.deps.PostprocessPolicy.Status(ctx, postprocesspolicy.StatusOptions{
+		Namespace: requestNamespace(request),
+		Tool:      tool,
+		RecentLimit: recentLimit,
+	})
+	if err != nil {
+		return nil, err
+	}
+	result, err := marshalJSON(summary)
+	return finalizeToolResult(result, err)
+}
+
+func (h *handlers) resetPostprocessPolicy(ctx context.Context, request mcp.CallToolRequest) (*mcp.CallToolResult, error) {
+	ctx = h.applyWorkspace(ctx, request)
+	if h.deps.PostprocessPolicy == nil {
+		return mcp.NewToolResultError("postprocess policy engine not configured"), nil
+	}
+	tool := request.GetString("tool", "")
+	if !postprocesspolicy.ValidTool(tool) {
+		return mcp.NewToolResultError("tool must be build_or_update_graph or run_postprocess"), nil
+	}
+	if err := h.deps.PostprocessPolicy.Reset(ctx, tool); err != nil {
+		return nil, err
+	}
+	result, err := marshalJSON(map[string]any{
+		"status": "ok",
+		"tool":   tool,
+		"reset":  true,
+	})
+	return finalizeToolResult(result, err)
+}

internal/mcp/handlers_test.go

@@ -1653,6 +1653,70 @@ func TestRunPostprocess_RealPolicyStoreIsolatedByNamespaceAndTool(t *testing.T)
 	}
 }
 
+func TestGetPostprocessPolicy_UsesPolicyStatusSummary(t *testing.T) {
+	deps := setupTestDeps(t)
+	deps.PostprocessPolicy = &stubPostprocessPolicy{
+		statusSummary: &postprocesspolicy.StatusSummary{
+			Status: postprocesspolicy.StatusDegraded,
+			FailClosed: []postprocesspolicy.StateSnapshot{{
+				Namespace:           ctxns.DefaultNamespace,
+				Tool:                postprocesspolicy.ToolRunPostprocess,
+				Policy:              postprocesspolicy.PolicyFailClosed,
+				ConsecutiveFailures: 3,
+			}},
+		},
+	}
+
+	result := callTool(t, deps, "get_postprocess_policy", map[string]any{"tool": "run_postprocess", "recent_limit": 3})
+	if result.IsError {
+		t.Fatalf("get_postprocess_policy error: %s", getTextContent(result))
+	}
+	stub := deps.PostprocessPolicy.(*stubPostprocessPolicy)
+	if len(stub.statusInputs) != 1 {
+		t.Fatalf("status inputs = %d, want 1", len(stub.statusInputs))
+	}
+	if stub.statusInputs[0].Tool != postprocesspolicy.ToolRunPostprocess {
+		t.Fatalf("status tool = %q, want run_postprocess", stub.statusInputs[0].Tool)
+	}
+	var resp map[string]any
+	if err := json.Unmarshal([]byte(getTextContent(result)), &resp); err != nil {
+		t.Fatalf("expected JSON, got: %s", getTextContent(result))
+	}
+	if resp["status"] != "degraded" {
+		t.Fatalf("status = %v, want degraded", resp["status"])
+	}
+}
+
+func TestResetPostprocessPolicy_RecordsResetForTool(t *testing.T) {
+	deps := setupTestDeps(t)
+	deps.PostprocessPolicy = &stubPostprocessPolicy{}
+
+	result := callTool(t, deps, "reset_postprocess_policy", map[string]any{"tool": "run_postprocess"})
+	if result.IsError {
+		t.Fatalf("reset_postprocess_policy error: %s", getTextContent(result))
+	}
+	stub := deps.PostprocessPolicy.(*stubPostprocessPolicy)
+	if len(stub.resetTools) != 1 {
+		t.Fatalf("reset tools = %d, want 1", len(stub.resetTools))
+	}
+	if stub.resetTools[0] != postprocesspolicy.ToolRunPostprocess {
+		t.Fatalf("reset tool = %q, want run_postprocess", stub.resetTools[0])
+	}
+}
+
+func TestResetPostprocessPolicy_RejectsInvalidTool(t *testing.T) {
+	deps := setupTestDeps(t)
+	deps.PostprocessPolicy = &stubPostprocessPolicy{}
+
+	result := callTool(t, deps, "reset_postprocess_policy", map[string]any{"tool": "other"})
+	if !result.IsError {
+		t.Fatalf("expected invalid tool to fail, got: %s", getTextContent(result))
+	}
+	if !strings.Contains(getTextContent(result), "tool must be build_or_update_graph or run_postprocess") {
+		t.Fatalf("unexpected error: %s", getTextContent(result))
+	}
+}
+
 // ============================================================
 // 11.3 query_graph
 // ============================================================

internal/mcp/server_test.go

@@ -18,6 +18,8 @@ func TestMCPServer_ListTools(t *testing.T) {
 
 	expected := []string{
 		"parse_project",
+		"get_postprocess_policy",
+		"reset_postprocess_policy",
 		"get_node",
 		"get_impact_radius",
 		"search",
@@ -77,8 +79,8 @@ func TestMCPServer_ListTools_18(t *testing.T) {
 	srv := NewServer(deps)
 	tools := srv.ListTools()
 
-	if len(tools) != 31 {
-		t.Fatalf("expected 31 tools, got %d", len(tools))
+	if len(tools) != 33 {
+		t.Fatalf("expected 33 tools, got %d", len(tools))
 	}
 }
 
@@ -162,9 +164,11 @@ func TestMCPServer_ToolRequiredFlags(t *testing.T) {
 	srv := NewServer(deps)
 	tools := srv.ListTools()
 
-	expected := map[string][]string{
-		"parse_project":         {"path"},
-		"get_node":              {"qualified_name"},
+		expected := map[string][]string{
+			"parse_project":         {"path"},
+			"get_postprocess_policy": nil,
+			"reset_postprocess_policy": {"tool"},
+			"get_node":              {"qualified_name"},
 		"get_impact_radius":     {"qualified_name"},
 		"search":                {"query"},
 		"get_annotation":        {"qualified_name"},

internal/mcp/testhelpers_test.go

@@ -204,8 +204,13 @@ type stubPostprocessPolicy struct {
 	resolvedSource string
 	resolveErr     error
 	recordErr      error
+	statusErr      error
+	resetErr       error
+	statusSummary  *postprocesspolicy.StatusSummary
 	resolvedInputs []postprocesspolicy.DecisionInput
 	recordedRuns   []postprocesspolicy.RunRecord
+	statusInputs   []postprocesspolicy.StatusOptions
+	resetTools     []string
 }
 
 func (s *stubPostprocessPolicy) Resolve(ctx context.Context, input postprocesspolicy.DecisionInput) (string, string, error) {
@@ -221,6 +226,22 @@ func (s *stubPostprocessPolicy) RecordRun(ctx context.Context, record postproces
 	return s.recordErr
 }
 
+func (s *stubPostprocessPolicy) Status(ctx context.Context, opts postprocesspolicy.StatusOptions) (*postprocesspolicy.StatusSummary, error) {
+	s.statusInputs = append(s.statusInputs, opts)
+	if s.statusErr != nil {
+		return nil, s.statusErr
+	}
+	if s.statusSummary == nil {
+		return &postprocesspolicy.StatusSummary{Status: postprocesspolicy.StatusOK}, nil
+	}
+	return s.statusSummary, nil
+}
+
+func (s *stubPostprocessPolicy) Reset(ctx context.Context, tool string) error {
+	s.resetTools = append(s.resetTools, tool)
+	return s.resetErr
+}
+
 type realPostprocessPolicy struct {
 	engine *postprocesspolicy.Engine
 	store  *postprocesspolicy.Store
@@ -241,6 +262,14 @@ func (p *realPostprocessPolicy) RecordRun(ctx context.Context, record postproces
 	return p.store.RecordRun(ctx, record)
 }
 
+func (p *realPostprocessPolicy) Status(ctx context.Context, opts postprocesspolicy.StatusOptions) (*postprocesspolicy.StatusSummary, error) {
+	return p.store.Status(ctx, opts)
+}
+
+func (p *realPostprocessPolicy) Reset(ctx context.Context, tool string) error {
+	return p.store.Reset(ctx, tool)
+}
+
 func setupTestDepsWithRealPostprocessPolicy(t *testing.T) *Deps {
 	t.Helper()
 	deps := setupTestDeps(t)

internal/mcp/tools_parse.go

@@ -23,7 +23,7 @@ func parseTools(h *handlers) []server.ServerTool {
 				mcp.WithString("path", mcp.Description("Project directory path to parse"), mcp.Required()),
 				mcp.WithBoolean("full_rebuild", mcp.Description("If true, do a full rebuild; if false, use incremental sync")),
 				mcp.WithString("postprocess", mcp.Description("Postprocessing mode: full, minimal, or none (default: full)")),
-				mcp.WithString("postprocess_policy", mcp.Description("Postprocessing failure policy: degraded or fail_closed (default: degraded)")),
+				mcp.WithString("postprocess_policy", mcp.Description("Postprocessing failure policy: degraded or fail_closed (default: auto -> degraded, escalates to fail_closed after repeated failures)")),
 				mcp.WithArray("include_paths", mcp.Description("Only include specific sub-paths (e.g. [\"src/api\", \"src/auth\"])"), mcp.WithStringItems()),
 				mcp.WithBoolean("replace", mcp.Description("When true (default), incremental include_paths replaces prior namespace graph state outside the included scope; when false, preserves out-of-scope files")),
 				mcp.WithNumber("max_file_bytes", mcp.Description("Maximum bytes allowed per parsed source file; overrides server default when set")),

internal/mcp/tools_postprocess.go

@@ -0,0 +1,26 @@
+package mcp
+
+import (
+	"github.com/mark3labs/mcp-go/mcp"
+	"github.com/mark3labs/mcp-go/server"
+)
+
+func postprocessTools(h *handlers) []server.ServerTool {
+	return []server.ServerTool{
+		{
+			Tool: mcp.NewTool("get_postprocess_policy", withNamespaceParam(
+				mcp.WithDescription("Inspect automatic postprocess policy state, fail_closed entries, and recent failures for the current namespace or across namespaces"),
+				mcp.WithString("tool", mcp.Description("Optional tool filter: build_or_update_graph or run_postprocess")),
+				mcp.WithNumber("recent_limit", mcp.Description("Maximum recent failures returned (default: 5)"), mcp.DefaultNumber(5)),
+			)...),
+			Handler: h.getPostprocessPolicy,
+		},
+		{
+			Tool: mcp.NewTool("reset_postprocess_policy", withNamespaceParam(
+				mcp.WithDescription("Reset automatic postprocess failure streak for a tool by recording a reset marker run in the current namespace"),
+				mcp.WithString("tool", mcp.Description("Tool to reset: build_or_update_graph or run_postprocess"), mcp.Required()),
+			)...),
+			Handler: h.resetPostprocessPolicy,
+		},
+	}
+}

internal/mcp/tools_register.go

@@ -5,6 +5,7 @@ import "github.com/mark3labs/mcp-go/server"
 func registerTools(srv *server.MCPServer, h *handlers) {
 	var tools []server.ServerTool
 	tools = append(tools, parseTools(h)...)
+	tools = append(tools, postprocessTools(h)...)
 	tools = append(tools, queryTools(h)...)
 	tools = append(tools, analysisTools(h)...)
 	tools = append(tools, graphTools(h)...)