[log] cmd/flags_difc: add debug logging for DIFC policy and mode resolution

[github-actions]

Adds debugLog calls to internal/cmd/flags_difc.go to improve troubleshooting of DIFC (guards) policy configuration at startup.

File modified

internal/cmd/flags_difc.go — reuses the existing package-level debugLog = logger.New("cmd:root") declared in root.go. No new logger declaration or imports needed.

Logging added

getDefaultDIFCMode (2 calls)

• Logs when MCP_GATEWAY_GUARDS_MODE env var is used and its value is valid
• Logs when the env var value is invalid and the fallback default (strict) is used

buildAllowOnlyPolicy (4 calls)

• Entry: logs all input parameters (public, owner, repo, minIntegrity) for full context
• Short-circuit path: logs when no scope/integrity is set, returning nil policy
• Scope resolved: logs the final repos value and resolved integrity level
• Success: logs that policy was built and validated successfully

parseDIFCSinkServerIDs (3 calls)

• Entry: logs the raw input string being parsed
• Duplicate detection: logs each deduplicated server ID that was skipped
• Result: logs the count and list of unique resolved server IDs

Quality checklist

• Exactly 1 file modified
• No test files modified
• Reuses existing debugLog logger (no new declaration needed)
• Logger namespace follows pkg:filename convention (cmd:root)
• No side effects in log arguments (all are existing local variables)
• Messages are meaningful and contextual
• No duplication with existing log calls
• Import statements unchanged

Generated by Go Logger Enhancement · ◷

[Copilot]

Pull request overview

Adds debug logging to internal/cmd/flags_difc.go to improve observability of DIFC (guards) policy configuration at startup, covering mode resolution, policy building, and sink server ID parsing.

Changes:

• Adds 9 debugLog calls across three functions (getDefaultDIFCMode, buildAllowOnlyPolicy, parseDIFCSinkServerIDs) to trace environment variable resolution, policy construction, and input parsing
• Reuses the existing package-level debugLog logger with no new imports or declarations

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.