feat: event-driven parity, Windows shell detection, dirty build timestamps, and gatekeeper integration

stub/Cargo.toml

@@ -17,3 +17,6 @@ serde_json = "1.0.151"
 mcp-stdio = { version = "1.0.0", path = "../mcp-stdio" }
 regex = "1.13.1"
 async-channel = "2.5.0"
+
+[build-dependencies]
+chrono = "0.4.45"

stub/build.rs

@@ -1,22 +1,39 @@
 use std::process::Command;
 
 fn main() {
-    let git_hash = Command::new("git")
+    let mut git_hash = Command::new("git")
         .args(["rev-parse", "--short", "HEAD"])
         .output()
         .ok()
         .and_then(|out| String::from_utf8(out.stdout).ok())
         .unwrap_or_else(|| "unknown".to_string());
 
+    git_hash = git_hash.trim().to_string();
+
+    let is_dirty = Command::new("git")
+        .args(["status", "--porcelain"])
+        .output()
+        .is_ok_and(|out| !out.stdout.is_empty());
+
+    if is_dirty {
+        let dirty_ts = chrono::Local::now().format("%y.%m.%d.%H%M%S").to_string();
+        git_hash.push_str(&format!("-dirty-{dirty_ts}"));
+    }
+
     let git_date = Command::new("git")
         .args(["log", "-1", "--format=%cd", "--date=format:%y.%m.%d.%H%M%S"])
         .output()
         .ok()
         .and_then(|out| String::from_utf8(out.stdout).ok())
-        .unwrap_or_else(|| "unknown".to_string());
+        .map(|s| s.trim().to_string())
+        .filter(|s| !s.is_empty())
+        .unwrap_or_else(|| chrono::Local::now().format("%y.%m.%d.%H%M%S").to_string());
 
-    let version = format!("{} ({})", git_date.trim(), git_hash.trim());
+    let version = format!("v{git_date} ({git_hash})");
     println!("cargo:rustc-env=APP_VERSION={version}");
     println!("cargo:rerun-if-changed=../.git/HEAD");
     println!("cargo:rerun-if-changed=../.git/index");
+    println!("cargo:rerun-if-changed=src");
+    println!("cargo:rerun-if-changed=Cargo.toml");
+    println!("cargo:rerun-if-changed=build.rs");
 }