@abgov/nx-adsp 13.31.3 → 13.33.0

package/README.md

@@ -101,8 +101,9 @@ deploy details.
 
 ### `init`
 
-Sets up nx-adsp's own workspace-root concerns: registers the ADSP SDK MCP server
-(`@abgov/adsp-sdk-mcp-server`) in `.mcp.json`, and shared VS Code settings. Every app/service
+Sets up nx-adsp's own workspace-root concerns: installs the ADSP SDK MCP server
+(`@abgov/adsp-sdk-mcp-server`) as a dev dependency and registers it in `.mcp.json`, and shared
+VS Code settings. Every app/service
 generator below already runs this as one of its own steps — always run it directly right after
 installing the plugin, too, so grounded ADSP platform knowledge (tenant/realm/role model,
 `@abgov/adsp-service-sdk` reference) is available immediately, not only once you've scaffolded
@@ -114,10 +115,22 @@ npx nx g @abgov/nx-adsp:init
 ```
 
 No options. Idempotent — merges into existing `.mcp.json`/`.vscode/settings.json` without
-clobbering another server, a customized `adsp-sdk` entry, or unrelated settings; safe to re-run.
-Project-scoped MCP servers only load at session start, so reconnect (or restart) your MCP client
-after running this before relying on the new tools — the generator's own output says so as a
-reminder.
+clobbering another server, a customized `adsp-sdk` entry, a version you've pinned yourself, or
+unrelated settings; safe to re-run. Project-scoped MCP servers only load at session start, so
+install dependencies and then reconnect (or restart) your MCP client after running this before
+relying on the new tools — the generator's own output says so as a reminder.
+
+The server is a dev dependency rather than an on-demand `npx -y` fetch so that the version your
+agent executes is the one your lockfile resolved and `npm audit` can see — along with its
+transitive dependencies. The `.mcp.json` entry uses `npx --no`, which prefers the local install
+over anything in npm's `_npx` cache, and refuses to reach the registry for a version you haven't
+installed. Plain `npx` would fetch and run one silently, because npm assumes `--yes` whenever
+stdin isn't a TTY, as it never is for a stdio MCP server.
+
+One caveat worth knowing: `--no` treats an already-populated `_npx` cache entry as satisfying the
+request, so on a machine that previously ran the `npx -y` form it will use that cached copy rather
+than erroring. Run `npm install` before relying on the pin — with the dependency present, the
+local copy always wins.
 
 ---
 

package/migrations.json

@@ -6,6 +6,12 @@
       "description": "Wrap express-service's generated src/migrate.ts drizzle migrate() call in a Postgres advisory lock, so concurrent init containers serialize instead of racing.",
       "implementation": "./src/migrations/add-migrate-advisory-lock/add-migrate-advisory-lock",
       "prompt": "./src/migrations/add-migrate-advisory-lock/add-migrate-advisory-lock.md"
+    },
+    "pin-adsp-mcp-server": {
+      "version": "13.33.0",
+      "description": "Pin the adsp-sdk MCP server in .mcp.json to an @abgov/adsp-sdk-mcp-server dev dependency, so the version an agent executes is the one the lockfile resolved rather than whatever npx fetches at session start.",
+      "implementation": "./src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server",
+      "prompt": "./src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server.md"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abgov/nx-adsp",
-  "version": "13.31.3",
+  "version": "13.33.0",
   "license": "Apache-2.0",
   "main": "src/index.js",
   "description": "Government of Alberta - Nx plugin for ADSP apps.",

package/src/generators/express-service/express-service.spec.ts

@@ -95,7 +95,7 @@ describe('Express Service Generator', () => {
     const mcp = readJson(host, '.mcp.json');
     expect(mcp.mcpServers['adsp-sdk']).toEqual({
       command: 'npx',
-      args: ['-y', '@abgov/adsp-sdk-mcp-server'],
+      args: ['--no', '@abgov/adsp-sdk-mcp-server'],
     });
     // Agents are pointed at the tools, not left to guess the SDK.
     const agents = host.read('apps/test/AGENTS.md').toString();

package/src/generators/init/init.d.ts

@@ -1,2 +1,2 @@
 import { Tree } from '@nx/devkit';
-export default function (host: Tree): Promise<void>;
+export default function (host: Tree): Promise<() => void>;

package/src/generators/init/init.js

@@ -4,6 +4,7 @@ exports.default = default_1;
 const tslib_1 = require("tslib");
 const devkit_1 = require("@nx/devkit");
 const quality_1 = require("../../utils/quality");
+const mcp_1 = require("../../utils/mcp");
 // express-service writes CLIENT_SECRET, DATABASE_URL, and MONGODB_URI to
 // .env.local — these must be gitignored before any generator run can commit.
 // Idempotent: no-op if the patterns are already present.
@@ -33,9 +34,15 @@ function ensureEnvLocalGitignored(host) {
 function default_1(host) {
     return tslib_1.__awaiter(this, void 0, void 0, function* () {
         ensureEnvLocalGitignored(host);
-        (0, quality_1.addAdspMcpServer)(host);
+        (0, mcp_1.addAdspMcpServer)(host);
         (0, quality_1.addVsCodeSettings)(host);
         yield (0, devkit_1.formatFiles)(host);
+        // addAdspMcpServer adds a dev dependency, so standalone runs need the install.
+        // App/service generators discard this and return their own install task —
+        // same package.json in the same Tree, so the dependency still lands.
+        return () => {
+            (0, devkit_1.installPackagesTask)(host);
+        };
     });
 }
 //# sourceMappingURL=init.js.map

package/src/generators/init/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../../../../packages/nx-adsp/src/generators/init/init.ts"],"names":[],"mappings":";;AAmCA,4BAKC;;AAxCD,uCAA+C;AAC/C,iDAA0E;AAE1E,yEAAyE;AACzE,6EAA6E;AAC7E,yDAAyD;AACzD,MAAM,4BAA4B,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAEpE,SAAS,wBAAwB,CAAC,IAAU;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAC7B,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,IAAI,CAAC,KAAK,CACR,IAAI,EACJ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC7D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,oEAAoE;AACpE,6EAA6E;AAC7E,2EAA2E;AAC3E,0BAA0B;AAC1B,mBAA+B,IAAU;;QACvC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC;QACvB,IAAA,2BAAiB,EAAC,IAAI,CAAC,CAAC;QACxB,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CAAA"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../../../../packages/nx-adsp/src/generators/init/init.ts"],"names":[],"mappings":";;AAoCA,4BAWC;;AA/CD,uCAAoE;AACpE,iDAAwD;AACxD,yCAAmD;AAEnD,yEAAyE;AACzE,6EAA6E;AAC7E,yDAAyD;AACzD,MAAM,4BAA4B,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAEpE,SAAS,wBAAwB,CAAC,IAAU;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAC7B,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,IAAI,CAAC,KAAK,CACR,IAAI,EACJ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC7D,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,oEAAoE;AACpE,6EAA6E;AAC7E,2EAA2E;AAC3E,0BAA0B;AAC1B,mBAA+B,IAAU;;QACvC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAA,sBAAgB,EAAC,IAAI,CAAC,CAAC;QACvB,IAAA,2BAAiB,EAAC,IAAI,CAAC,CAAC;QACxB,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;QACxB,+EAA+E;QAC/E,0EAA0E;QAC1E,qEAAqE;QACrE,OAAO,GAAG,EAAE;YACV,IAAA,4BAAmB,EAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;IACJ,CAAC;CAAA"}

package/src/generators/init/init.spec.ts

@@ -16,7 +16,7 @@ describe('nx-adsp init generator', () => {
     const mcp = readJson(host, '.mcp.json');
     expect(mcp.mcpServers['adsp-sdk']).toEqual({
       command: 'npx',
-      args: ['-y', '@abgov/adsp-sdk-mcp-server'],
+      args: ['--no', '@abgov/adsp-sdk-mcp-server'],
     });
   });
 
@@ -38,6 +38,32 @@ describe('nx-adsp init generator', () => {
     });
   });
 
+  it('adds the MCP server as a dev dependency, so the lockfile pins what runs', async () => {
+    await generator(host);
+
+    const packageJson = readJson(host, 'package.json');
+    expect(
+      packageJson.devDependencies['@abgov/adsp-sdk-mcp-server'],
+    ).toBeDefined();
+    expect(
+      packageJson.dependencies?.['@abgov/adsp-sdk-mcp-server'],
+    ).toBeUndefined();
+  });
+
+  it('does not bump a version a team has already pinned', async () => {
+    writeJson(host, 'package.json', {
+      name: 'test-workspace',
+      devDependencies: { '@abgov/adsp-sdk-mcp-server': '1.11.0' },
+    });
+
+    await generator(host);
+
+    const packageJson = readJson(host, 'package.json');
+    expect(packageJson.devDependencies['@abgov/adsp-sdk-mcp-server']).toBe(
+      '1.11.0',
+    );
+  });
+
   it('reminds that a session reconnect is needed before the MCP server is usable', async () => {
     const logSpy = jest.spyOn(console, 'log').mockImplementation();
 

package/src/generators/init/schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/schema",
   "id": "NxAdspInit",
   "title": "nx-adsp workspace setup",
-  "description": "Sets up nx-adsp's own workspace-root concerns: registers the @abgov/adsp-sdk-mcp-server MCP server in .mcp.json, and shared VS Code settings. Run once per workspace, right after installing @abgov/nx-adsp — every app/service generator (express-service, react-app, angular-app, vue-app) already calls this as one of its own steps, but running it standalone lets grounded ADSP platform knowledge be available before any app exists, e.g. during a design pass. Idempotent — safe to re-run, never clobbers a customized entry.",
+  "description": "Sets up nx-adsp's own workspace-root concerns: installs the @abgov/adsp-sdk-mcp-server MCP server as a dev dependency and registers it in .mcp.json, and shared VS Code settings. Run once per workspace, right after installing @abgov/nx-adsp — every app/service generator (express-service, react-app, angular-app, vue-app) already calls this as one of its own steps, but running it standalone lets grounded ADSP platform knowledge be available before any app exists, e.g. during a design pass. Idempotent — safe to re-run, never clobbers a customized entry or a version you've pinned yourself.",
   "type": "object",
   "properties": {},
   "required": [],

package/src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server.d.ts

@@ -0,0 +1,7 @@
+import { Tree } from '@nx/devkit';
+interface MigrationReport {
+    nextSteps: string[];
+    agentContext?: string[];
+}
+export default function pinAdspMcpServer(tree: Tree): Promise<MigrationReport | undefined>;
+export {};

package/src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = pinAdspMcpServer;
+const tslib_1 = require("tslib");
+const devkit_1 = require("@nx/devkit");
+const MCP_PATH = '.mcp.json';
+const SERVER_KEY = 'adsp-sdk';
+const PACKAGE = '@abgov/adsp-sdk-mcp-server';
+// The version this migration pins to, and the entry it knows how to rewrite,
+// are both frozen literals rather than imports from utils/quality.ts. A
+// released migration has to keep applying the same change forever, so reading
+// the live value would let a later edit there silently change what this
+// migration does to an old workspace.
+const PINNED_VERSION = '^1.12.1';
+const PRIOR_ENTRY = { command: 'npx', args: ['-y', PACKAGE] };
+const PINNED_ENTRY = { command: 'npx', args: ['--no', PACKAGE] };
+// Only ever compared against the two-key entry this generator emits, so key
+// order is the sole structural difference JSON.stringify can't see — and
+// `args` is the one field whose order is meaningful.
+function isEntry(value, expected) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const keys = Object.keys(value);
+    if (keys.length !== Object.keys(expected).length)
+        return false;
+    return keys.every((key) => JSON.stringify(value[key]) ===
+        JSON.stringify(expected[key]));
+}
+function pinAdspMcpServer(tree) {
+    return tslib_1.__awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        // No .mcp.json, or no entry in it, means nx-adsp's init never ran here —
+        // there's no server to pin, and adding the dependency would be noise.
+        if (!tree.exists(MCP_PATH)) {
+            return undefined;
+        }
+        let entry;
+        try {
+            entry = (_c = (_b = JSON.parse((_a = tree.read(MCP_PATH, 'utf-8')) !== null && _a !== void 0 ? _a : '{}')) === null || _b === void 0 ? void 0 : _b.mcpServers) === null || _c === void 0 ? void 0 : _c[SERVER_KEY];
+        }
+        catch (_d) {
+            devkit_1.logger.warn(`[nx-adsp] ${MCP_PATH} is not valid JSON — left untouched. Re-run ` +
+                `\`nx g @abgov/nx-adsp:init\` once it parses.`);
+            return undefined;
+        }
+        if (entry === undefined) {
+            return undefined;
+        }
+        // Already pinned, by a newer generator or a previous run of this migration.
+        // Still ensure the dependency is present: the entry is only a real pin if
+        // there's a local install for `--no` to resolve.
+        const alreadyPinned = isEntry(entry, PINNED_ENTRY);
+        if (!alreadyPinned && !isEntry(entry, PRIOR_ENTRY)) {
+            devkit_1.logger.warn(`[nx-adsp] ${MCP_PATH}'s "${SERVER_KEY}" server is customised — left ` +
+                `untouched rather than rewritten.`);
+            return {
+                nextSteps: [
+                    `${MCP_PATH}'s "${SERVER_KEY}" entry differs from the generated one, so it was ` +
+                        `left as-is. If it still runs \`npx\` without \`--no\`, the version your agent ` +
+                        `executes is whatever the registry resolves at session start — outside your ` +
+                        `lockfile and invisible to \`npm audit\`. To pin it, add ${PACKAGE} to ` +
+                        `devDependencies and change the entry's args to ` +
+                        `${JSON.stringify(PINNED_ENTRY.args)}, keeping whatever else you've customised. ` +
+                        `An entry deliberately pointing at a local build needs no change.`,
+                ],
+                agentContext: [
+                    `${MCP_PATH} has a customised "${SERVER_KEY}" MCP server entry that this migration ` +
+                        `did not rewrite. Read it, and unless it points at a local build, pin it: add ` +
+                        `${PACKAGE} to devDependencies and set the entry's args to ` +
+                        `${JSON.stringify(PINNED_ENTRY.args)}. Preserve any other customisation.`,
+                ],
+            };
+        }
+        (0, devkit_1.addDependenciesToPackageJson)(tree, {}, { [PACKAGE]: PINNED_VERSION }, 'package.json', 
+        // Respect a version the workspace already chose.
+        true);
+        if (!alreadyPinned) {
+            (0, devkit_1.updateJson)(tree, MCP_PATH, (json) => (Object.assign(Object.assign({}, json), { mcpServers: Object.assign(Object.assign({}, json.mcpServers), { [SERVER_KEY]: PINNED_ENTRY }) })));
+        }
+        yield (0, devkit_1.formatFiles)(tree);
+        devkit_1.logger.info(`[nx-adsp] Pinned the ${SERVER_KEY} MCP server to a ${PACKAGE} dev dependency.`);
+        return {
+            nextSteps: [
+                `Install dependencies, then reconnect (or restart) your MCP client — in that order. ` +
+                    `\`npx --no\` will fall back to a copy left in npm's _npx cache by the previous ` +
+                    `\`npx -y\` form, so until the dependency is actually installed you'd still be ` +
+                    `running an unpinned version. Project-scoped MCP servers also load only at session ` +
+                    `start, so the entry stays inert until the reconnect.`,
+            ],
+        };
+    });
+}
+//# sourceMappingURL=pin-adsp-mcp-server.js.map

package/src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pin-adsp-mcp-server.js","sourceRoot":"","sources":["../../../../../../packages/nx-adsp/src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server.ts"],"names":[],"mappings":";;AAkDA,mCAqFC;;AAvID,uCAMoB;AAEpB,MAAM,QAAQ,GAAG,WAAW,CAAC;AAC7B,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAE7C,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,wEAAwE;AACxE,sCAAsC;AACtC,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9D,MAAM,YAAY,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAEjE,4EAA4E;AAC5E,yEAAyE;AACzE,qDAAqD;AACrD,SAAS,OAAO,CAAC,KAAc,EAAE,QAAiC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,IAAI,CAAC,KAAK,CACf,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAChC,CAAC;AACJ,CAAC;AAiBD,SAA8B,gBAAgB,CAC5C,IAAU;;;QAEV,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,MAAA,MAAA,IAAI,CAAC,KAAK,CAAC,MAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,mCAAI,IAAI,CAAC,0CAAE,UAAU,0CAClE,UAAU,CACX,CAAC;QACJ,CAAC;QAAC,WAAM,CAAC;YACP,eAAM,CAAC,IAAI,CACT,aAAa,QAAQ,8CAA8C;gBACjE,8CAA8C,CACjD,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,4EAA4E;QAC5E,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAEnD,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YACnD,eAAM,CAAC,IAAI,CACT,aAAa,QAAQ,OAAO,UAAU,gCAAgC;gBACpE,kCAAkC,CACrC,CAAC;YACF,OAAO;gBACL,SAAS,EAAE;oBACT,GAAG,QAAQ,OAAO,UAAU,oDAAoD;wBAC9E,gFAAgF;wBAChF,6EAA6E;wBAC7E,2DAA2D,OAAO,MAAM;wBACxE,iDAAiD;wBACjD,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,6CAA6C;wBACjF,kEAAkE;iBACrE;gBACD,YAAY,EAAE;oBACZ,GAAG,QAAQ,sBAAsB,UAAU,yCAAyC;wBAClF,+EAA+E;wBAC/E,GAAG,OAAO,kDAAkD;wBAC5D,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,qCAAqC;iBAC5E;aACF,CAAC;QACJ,CAAC;QAED,IAAA,qCAA4B,EAC1B,IAAI,EACJ,EAAE,EACF,EAAE,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,EAC7B,cAAc;QACd,iDAAiD;QACjD,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAA,mBAAU,EAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iCAChC,IAAI,KACP,UAAU,kCAAO,IAAI,CAAC,UAAU,KAAE,CAAC,UAAU,CAAC,EAAE,YAAY,OAC5D,CAAC,CAAC;QACN,CAAC;QAED,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;QACxB,eAAM,CAAC,IAAI,CACT,wBAAwB,UAAU,oBAAoB,OAAO,kBAAkB,CAChF,CAAC;QAEF,OAAO;YACL,SAAS,EAAE;gBACT,qFAAqF;oBACnF,iFAAiF;oBACjF,gFAAgF;oBAChF,oFAAoF;oBACpF,sDAAsD;aACzD;SACF,CAAC;IACJ,CAAC;CAAA"}

package/src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server.md

@@ -0,0 +1,36 @@
+# Pin the ADSP SDK MCP server
+
+The codemod half of this migration has already run. It rewrote the workspace-root
+`.mcp.json` `adsp-sdk` entry from `npx -y @abgov/adsp-sdk-mcp-server` to
+`npx --no @abgov/adsp-sdk-mcp-server` and added `@abgov/adsp-sdk-mcp-server` to
+`devDependencies` — **unless** the entry had been customised, in which case it warned and
+left it alone. Your job is only the customised case.
+
+## Why the change
+
+npm assumes `--yes` whenever stdin isn't a TTY, which is always true for a stdio MCP
+server. So the old `npx -y` form fetched and executed whatever the registry resolved at
+session start — the server _and_ its transitive dependencies
+(`@modelcontextprotocol/sdk`, `zod`, `@abgov/adsp-cli`), outside the lockfile and
+invisible to `npm audit`. `--no` resolves the local install instead and fails loudly if
+it's missing, so the version your agent executes is the one your lockfile pinned.
+
+## What to do
+
+Check `agentContext` for the entry that was skipped. If there is none, there is nothing
+to do — stop here and say so.
+
+Otherwise, read the `adsp-sdk` entry in `.mcp.json` and decide:
+
+- **It points at a local build** (e.g. `node /path/to/main.js`) — deliberate. Leave it,
+  and say why you left it.
+- **It runs `npx` in any other form** — pin it. Add
+  `@abgov/adsp-sdk-mcp-server` to `devDependencies` (use the version already named in the
+  entry's args if there is one, otherwise `^1.12.1`), then set the entry's `args` to
+  `["--no", "@abgov/adsp-sdk-mcp-server"]`. Preserve every other field on the entry, and
+  every other server in the file.
+
+Do not touch any other `mcpServers` entry — they belong to other plugins or to the team.
+
+Finish by telling the user to install dependencies and then reconnect their MCP client,
+since a project-scoped server loads only at session start.

package/src/migrations/pin-adsp-mcp-server/pin-adsp-mcp-server.spec.ts

@@ -0,0 +1,134 @@
+import { readJson, Tree, writeJson } from '@nx/devkit';
+import { createTreeWithEmptyWorkspace } from '@nx/devkit/testing';
+import migration from './pin-adsp-mcp-server';
+
+const PACKAGE = '@abgov/adsp-sdk-mcp-server';
+
+describe('pin-adsp-mcp-server migration', () => {
+  let tree: Tree;
+
+  beforeEach(() => {
+    tree = createTreeWithEmptyWorkspace({ layout: 'apps-libs' });
+  });
+
+  function writeMcpJson(entry: unknown, others: Record<string, unknown> = {}) {
+    writeJson(tree, '.mcp.json', {
+      mcpServers: { ...others, 'adsp-sdk': entry },
+    });
+  }
+
+  it('rewrites the fetching entry to the pinned form and adds the dev dependency', async () => {
+    writeMcpJson({ command: 'npx', args: ['-y', PACKAGE] });
+
+    await migration(tree);
+
+    expect(readJson(tree, '.mcp.json').mcpServers['adsp-sdk']).toEqual({
+      command: 'npx',
+      args: ['--no', PACKAGE],
+    });
+    expect(
+      readJson(tree, 'package.json').devDependencies[PACKAGE],
+    ).toBeDefined();
+  });
+
+  it('leaves other MCP servers alone', async () => {
+    writeMcpJson(
+      { command: 'npx', args: ['-y', PACKAGE] },
+      { other: { command: 'other-cmd', args: ['-y', 'something'] } },
+    );
+
+    await migration(tree);
+
+    expect(readJson(tree, '.mcp.json').mcpServers.other).toEqual({
+      command: 'other-cmd',
+      args: ['-y', 'something'],
+    });
+  });
+
+  it('is idempotent, and backfills the dependency for an already-pinned entry', async () => {
+    writeMcpJson({ command: 'npx', args: ['--no', PACKAGE] });
+
+    await migration(tree);
+
+    expect(readJson(tree, '.mcp.json').mcpServers['adsp-sdk']).toEqual({
+      command: 'npx',
+      args: ['--no', PACKAGE],
+    });
+    expect(
+      readJson(tree, 'package.json').devDependencies[PACKAGE],
+    ).toBeDefined();
+  });
+
+  it('does not bump a version the workspace already chose', async () => {
+    writeJson(tree, 'package.json', {
+      name: 'test-workspace',
+      devDependencies: { [PACKAGE]: '1.11.0' },
+    });
+    writeMcpJson({ command: 'npx', args: ['-y', PACKAGE] });
+
+    await migration(tree);
+
+    expect(readJson(tree, 'package.json').devDependencies[PACKAGE]).toBe(
+      '1.11.0',
+    );
+  });
+
+  it('warns and skips a customised entry rather than rewriting it', async () => {
+    const custom = { command: 'node', args: ['/local/build/main.js'] };
+    writeMcpJson(custom);
+
+    const report = await migration(tree);
+
+    expect(readJson(tree, '.mcp.json').mcpServers['adsp-sdk']).toEqual(custom);
+    expect(
+      readJson(tree, 'package.json').devDependencies?.[PACKAGE],
+    ).toBeUndefined();
+    expect(report?.nextSteps.join('\n')).toContain('.mcp.json');
+    expect(report?.agentContext?.join('\n')).toContain('customised');
+  });
+
+  it('skips an entry that pins a version in args, since that is not the generated form', async () => {
+    const pinnedInArgs = { command: 'npx', args: ['-y', `${PACKAGE}@1.11.0`] };
+    writeMcpJson(pinnedInArgs);
+
+    const report = await migration(tree);
+
+    expect(readJson(tree, '.mcp.json').mcpServers['adsp-sdk']).toEqual(
+      pinnedInArgs,
+    );
+    expect(report?.nextSteps).toHaveLength(1);
+  });
+
+  it('does nothing when the workspace has no .mcp.json', async () => {
+    const report = await migration(tree);
+
+    expect(report).toBeUndefined();
+    expect(
+      readJson(tree, 'package.json').devDependencies?.[PACKAGE],
+    ).toBeUndefined();
+  });
+
+  it('does nothing when .mcp.json has no adsp-sdk server', async () => {
+    writeJson(tree, '.mcp.json', {
+      mcpServers: { other: { command: 'other-cmd', args: [] } },
+    });
+
+    const report = await migration(tree);
+
+    expect(report).toBeUndefined();
+    expect(
+      readJson(tree, 'package.json').devDependencies?.[PACKAGE],
+    ).toBeUndefined();
+  });
+
+  it('warns and leaves an unparseable .mcp.json untouched', async () => {
+    tree.write('.mcp.json', '{ not json');
+    const warn = jest.spyOn(console, 'warn').mockImplementation();
+
+    const report = await migration(tree);
+
+    expect(report).toBeUndefined();
+    expect(tree.read('.mcp.json', 'utf-8')).toBe('{ not json');
+    warn.mockRestore();
+  });
+});

package/src/utils/mcp.d.ts

@@ -0,0 +1,25 @@
+import { Tree } from '@nx/devkit';
+/**
+ * Registers the @abgov/adsp-sdk-mcp-server MCP server in the workspace-root
+ * `.mcp.json` so a coding agent (Claude Code and other MCP clients) can look up
+ * grounded ADSP docs and `@abgov/adsp-service-sdk` reference instead of guessing.
+ *
+ * It's a stdio knowledge server (no credentials), but wiring is not just config:
+ * it's also a dev dependency, so the version the client executes is the one the
+ * lockfile resolved and `npm audit` can see. `--no` is what makes that binding
+ * real — npm assumes `--yes` when stdin isn't a TTY, which is always the case for
+ * a stdio MCP server, so without it a resolution miss would silently fetch from
+ * the registry instead of failing. Merges into an existing `.mcp.json` and never
+ * clobbers a user-customized `adsp-sdk` entry (or a pinned version), so it's safe
+ * to re-run and to run for every generated service.
+ *
+ * The caller is responsible for the install task; every app/service generator
+ * already returns one for its own dependencies, and `init` returns one for this.
+ *
+ * The reconnect reminder lives here, not in each caller — project-scoped MCP
+ * servers load at session start, so a file write mid-session (whether from
+ * an app/service generator or the standalone `init` generator) leaves the
+ * entry configured but inert until the client reconnects, and every caller
+ * needs to say so, not just one.
+ */
+export declare function addAdspMcpServer(host: Tree): void;

package/src/utils/mcp.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addAdspMcpServer = addAdspMcpServer;
+const devkit_1 = require("@nx/devkit");
+// Pinned rather than floating: `npx` resolves a bare package name against the
+// local project, so the lockfile entry this produces is what pins the server
+// and its whole transitive closure (@modelcontextprotocol/sdk, zod,
+// @abgov/adsp-cli) — none of which `npm audit` can see when the server is
+// fetched on demand instead. Bumping it for already-scaffolded workspaces
+// needs a migration; consuming workspaces on Dependabot/Renovate get a
+// reviewable PR instead of silent per-machine version drift.
+const ADSP_MCP_SERVER_VERSION = '^1.12.1';
+/**
+ * Registers the @abgov/adsp-sdk-mcp-server MCP server in the workspace-root
+ * `.mcp.json` so a coding agent (Claude Code and other MCP clients) can look up
+ * grounded ADSP docs and `@abgov/adsp-service-sdk` reference instead of guessing.
+ *
+ * It's a stdio knowledge server (no credentials), but wiring is not just config:
+ * it's also a dev dependency, so the version the client executes is the one the
+ * lockfile resolved and `npm audit` can see. `--no` is what makes that binding
+ * real — npm assumes `--yes` when stdin isn't a TTY, which is always the case for
+ * a stdio MCP server, so without it a resolution miss would silently fetch from
+ * the registry instead of failing. Merges into an existing `.mcp.json` and never
+ * clobbers a user-customized `adsp-sdk` entry (or a pinned version), so it's safe
+ * to re-run and to run for every generated service.
+ *
+ * The caller is responsible for the install task; every app/service generator
+ * already returns one for its own dependencies, and `init` returns one for this.
+ *
+ * The reconnect reminder lives here, not in each caller — project-scoped MCP
+ * servers load at session start, so a file write mid-session (whether from
+ * an app/service generator or the standalone `init` generator) leaves the
+ * entry configured but inert until the client reconnects, and every caller
+ * needs to say so, not just one.
+ */
+function addAdspMcpServer(host) {
+    const mcpPath = '.mcp.json';
+    const server = {
+        command: 'npx',
+        args: ['--no', '@abgov/adsp-sdk-mcp-server'],
+    };
+    (0, devkit_1.addDependenciesToPackageJson)(host, {}, { '@abgov/adsp-sdk-mcp-server': ADSP_MCP_SERVER_VERSION }, 'package.json', 
+    // A team may have pinned their own version; don't bump it out from under them.
+    true);
+    if (host.exists(mcpPath)) {
+        (0, devkit_1.updateJson)(host, mcpPath, (existing) => {
+            var _a, _b;
+            const mcpServers = Object.assign({}, ((_a = existing === null || existing === void 0 ? void 0 : existing.mcpServers) !== null && _a !== void 0 ? _a : {}));
+            // Preserve an existing entry (a team may have pinned a version or repointed
+            // it at a local build) — only add ours when it isn't already configured.
+            mcpServers['adsp-sdk'] = (_b = mcpServers['adsp-sdk']) !== null && _b !== void 0 ? _b : server;
+            return Object.assign(Object.assign({}, existing), { mcpServers });
+        });
+    }
+    else {
+        (0, devkit_1.writeJson)(host, mcpPath, { mcpServers: { 'adsp-sdk': server } });
+    }
+    console.log('\n✓ .mcp.json configures the ADSP SDK MCP server (adsp-sdk), pinned to the\n' +
+        '  @abgov/adsp-sdk-mcp-server dev dependency.\n' +
+        '  Project-scoped MCP servers load at session start, not on a mid-session file\n' +
+        '  change — install dependencies, then reconnect (or restart) your MCP client\n' +
+        '  before relying on it.\n');
+}
+//# sourceMappingURL=mcp.js.map

package/src/utils/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../../../packages/nx-adsp/src/utils/mcp.ts"],"names":[],"mappings":";;AAuCA,4CAmCC;AA1ED,uCAKoB;AAEpB,8EAA8E;AAC9E,6EAA6E;AAC7E,oEAAoE;AACpE,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,6DAA6D;AAC7D,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,gBAAgB,CAAC,IAAU;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC;IAC5B,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,MAAM,EAAE,4BAA4B,CAAC;KAC7C,CAAC;IAEF,IAAA,qCAA4B,EAC1B,IAAI,EACJ,EAAE,EACF,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,EACzD,cAAc;IACd,+EAA+E;IAC/E,IAAI,CACL,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,IAAA,mBAAU,EAAC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;;YACrC,MAAM,UAAU,qBAAQ,CAAC,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU,mCAAI,EAAE,CAAC,CAAE,CAAC;YACvD,4EAA4E;YAC5E,yEAAyE;YACzE,UAAU,CAAC,UAAU,CAAC,GAAG,MAAA,UAAU,CAAC,UAAU,CAAC,mCAAI,MAAM,CAAC;YAC1D,uCAAY,QAAQ,KAAE,UAAU,IAAG;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAA,kBAAS,EAAC,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,GAAG,CACT,8EAA8E;QAC5E,gDAAgD;QAChD,iFAAiF;QACjF,gFAAgF;QAChF,2BAA2B,CAC9B,CAAC;AACJ,CAAC"}

package/src/utils/quality.d.ts

@@ -114,19 +114,3 @@ export declare function addAxeAccessibilityCheck(host: Tree, e2eProjectRoot: str
  */
 export declare function fixExpressServiceE2eProject(host: Tree, e2eProjectRoot: string, port: number): void;
 export declare function addVsCodeSettings(host: Tree): void;
-/**
- * Registers the @abgov/adsp-sdk-mcp-server MCP server in the workspace-root
- * `.mcp.json` so a coding agent (Claude Code and other MCP clients) can look up
- * grounded ADSP docs and `@abgov/adsp-service-sdk` reference instead of guessing.
- *
- * It's a stdio knowledge server (no credentials, run via npx), so wiring is just
- * config. Merges into an existing `.mcp.json` and never clobbers a user-customized
- * `adsp-sdk` entry, so it's safe to re-run and to run for every generated service.
- *
- * The reconnect reminder lives here, not in each caller — project-scoped MCP
- * servers load at session start, so a file write mid-session (whether from
- * an app/service generator or the standalone `init` generator) leaves the
- * entry configured but inert until the client reconnects, and every caller
- * needs to say so, not just one.
- */
-export declare function addAdspMcpServer(host: Tree): void;

package/src/utils/quality.js

@@ -7,7 +7,6 @@ exports.guardPlaywrightWebServer = guardPlaywrightWebServer;
 exports.addAxeAccessibilityCheck = addAxeAccessibilityCheck;
 exports.fixExpressServiceE2eProject = fixExpressServiceE2eProject;
 exports.addVsCodeSettings = addVsCodeSettings;
-exports.addAdspMcpServer = addAdspMcpServer;
 const devkit_1 = require("@nx/devkit");
 /**
  * Rewrites the project-level eslint.config.mjs to add:
@@ -295,39 +294,4 @@ function addVsCodeSettings(host) {
         (0, devkit_1.writeJson)(host, settingsPath, settings);
     }
 }
-/**
- * Registers the @abgov/adsp-sdk-mcp-server MCP server in the workspace-root
- * `.mcp.json` so a coding agent (Claude Code and other MCP clients) can look up
- * grounded ADSP docs and `@abgov/adsp-service-sdk` reference instead of guessing.
- *
- * It's a stdio knowledge server (no credentials, run via npx), so wiring is just
- * config. Merges into an existing `.mcp.json` and never clobbers a user-customized
- * `adsp-sdk` entry, so it's safe to re-run and to run for every generated service.
- *
- * The reconnect reminder lives here, not in each caller — project-scoped MCP
- * servers load at session start, so a file write mid-session (whether from
- * an app/service generator or the standalone `init` generator) leaves the
- * entry configured but inert until the client reconnects, and every caller
- * needs to say so, not just one.
- */
-function addAdspMcpServer(host) {
-    const mcpPath = '.mcp.json';
-    const server = { command: 'npx', args: ['-y', '@abgov/adsp-sdk-mcp-server'] };
-    if (host.exists(mcpPath)) {
-        (0, devkit_1.updateJson)(host, mcpPath, (existing) => {
-            var _a, _b;
-            const mcpServers = Object.assign({}, ((_a = existing === null || existing === void 0 ? void 0 : existing.mcpServers) !== null && _a !== void 0 ? _a : {}));
-            // Preserve an existing entry (a team may have pinned a version or repointed
-            // it at a local build) — only add ours when it isn't already configured.
-            mcpServers['adsp-sdk'] = (_b = mcpServers['adsp-sdk']) !== null && _b !== void 0 ? _b : server;
-            return Object.assign(Object.assign({}, existing), { mcpServers });
-        });
-    }
-    else {
-        (0, devkit_1.writeJson)(host, mcpPath, { mcpServers: { 'adsp-sdk': server } });
-    }
-    console.log('\n✓ .mcp.json configures the ADSP SDK MCP server (adsp-sdk).\n' +
-        '  Project-scoped MCP servers load at session start, not on a mid-session file\n' +
-        '  change — reconnect (or restart) your MCP client now before relying on it.\n');
-}
 //# sourceMappingURL=quality.js.map

package/src/utils/quality.js.map

@@ -1 +1 @@
-{"version":3,"file":"quality.js","sourceRoot":"","sources":["../../../../../packages/nx-adsp/src/utils/quality.ts"],"names":[],"mappings":";;AAgBA,sDA0CC;AAiBD,sDAgBC;AAOD,4CAeC;AAoBD,4DAmBC;AAoED,4DAOC;AAuDD,kEA8CC;AAED,8CAkBC;AAiBD,4CAqBC;AAlYD,uCAMoB;AAEpB;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CACnC,IAAU,EACV,WAAmB,EACnB,aAAuB;;IAEvB,MAAM,UAAU,GAAG,GAAG,WAAW,oBAAoB,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CACpC,6CAA6C,CAC9C,CAAC;IACF,MAAM,cAAc,GAAG,MAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAG,CAAC,CAAC,mCAAI,yBAAyB,CAAC;IACzE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CACR,UAAU,EACV,2BAA2B,cAAc;;;;;;;;;;;;;;;cAe/B,YAAY;;;;;;;;CAQzB,CACE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,qBAAqB,CAAC,IAAU,EAAE,WAAmB;IACnE,MAAM,QAAQ,GAAG,GAAG,WAAW,kBAAkB,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO;IAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,8EAA8E;IAC9E,iEAAiE;IACjE,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAC/B,uCAAuC,EACvC,gJAAgJ,CACjJ,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAAU,EAAE,WAAmB;IAC9D,MAAM,MAAM,GAAG,IAAA,iCAAwB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,CAAC,OAAO,mCACT,MAAM,CAAC,OAAO,KACjB,OAAO,EAAE;YACP,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,IAAI;YACX,OAAO,EAAE;gBACP,OAAO,EAAE,iDAAiD;gBAC1D,GAAG,EAAE,eAAe;aACrB;SACF,GACF,CAAC;IACF,IAAA,mCAA0B,EAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,wBAAwB,CACtC,IAAU,EACV,cAAsB;IAEtB,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,GAAG,cAAc,sBAAsB,GAAG,EAAE,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YAAE,SAAS;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvE,OAAO;QACT,IAAI,CAAC,KAAK,CACR,UAAU,EACV,GAAG,CAAC,OAAO,CACT,cAAc,EACd,iDAAiD,CAClD,CACF,CAAC;QACF,OAAO;IACT,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDxB,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CACtC,IAAU,EACV,cAAsB;IAEtB,MAAM,QAAQ,GAAG,GAAG,cAAc,mBAAmB,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO;IAClC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,SAAgB,2BAA2B,CACzC,IAAU,EACV,cAAsB,EACtB,IAAY;IAEZ,MAAM,cAAc,GAAG,GAAG,cAAc,kBAAkB,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI;aACb,IAAI,CAAC,cAAc,CAAC;aACpB,QAAQ,EAAE;aACV,OAAO,CACN,uCAAuC,EACvC,6BAA6B,CAC9B;aACA,OAAO,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,cAAc,gBAAgB,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,KAAK,CACR,IAAI,EACJ,IAAI;aACD,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,EAAE;aACV,OAAO,CACN,2DAA2D,EAC3D,iDAAiD,IAAI,EAAE,CACxD,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,cAAc,4BAA4B,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CACR,aAAa,EACb,IAAI;aACD,IAAI,CAAC,aAAa,CAAC;aACnB,QAAQ,EAAE;aACV,OAAO,CACN,gCAAgC,EAChC,wBAAwB,IAAI,GAAG,CAChC,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,IAAU;IAC1C,MAAM,YAAY,GAAG,uBAAuB,CAAC;IAC7C,MAAM,QAAQ,GAAG;QACf,qBAAqB,EAAE,IAAI;QAC3B,yBAAyB,EAAE,wBAAwB;QACnD,0BAA0B,EAAE;YAC1B,sBAAsB,EAAE,UAAU;SACnC;KACF,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,IAAA,mBAAU,EAAC,IAAI,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iCACxC,QAAQ,GACR,QAAQ,EACX,CAAC,CAAC;IACN,CAAC;SAAM,CAAC;QACN,IAAA,kBAAS,EAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,gBAAgB,CAAC,IAAU;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC;IAC5B,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,4BAA4B,CAAC,EAAE,CAAC;IAE9E,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,IAAA,mBAAU,EAAC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;;YACrC,MAAM,UAAU,qBAAQ,CAAC,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU,mCAAI,EAAE,CAAC,CAAE,CAAC;YACvD,4EAA4E;YAC5E,yEAAyE;YACzE,UAAU,CAAC,UAAU,CAAC,GAAG,MAAA,UAAU,CAAC,UAAU,CAAC,mCAAI,MAAM,CAAC;YAC1D,uCAAY,QAAQ,KAAE,UAAU,IAAG;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAA,kBAAS,EAAC,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,GAAG,CACT,gEAAgE;QAC9D,iFAAiF;QACjF,+EAA+E,CAClF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"quality.js","sourceRoot":"","sources":["../../../../../packages/nx-adsp/src/utils/quality.ts"],"names":[],"mappings":";;AAgBA,sDA0CC;AAiBD,sDAgBC;AAOD,4CAeC;AAoBD,4DAmBC;AAoED,4DAOC;AAuDD,kEA8CC;AAED,8CAkBC;AA5VD,uCAMoB;AAEpB;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CACnC,IAAU,EACV,WAAmB,EACnB,aAAuB;;IAEvB,MAAM,UAAU,GAAG,GAAG,WAAW,oBAAoB,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CACpC,6CAA6C,CAC9C,CAAC;IACF,MAAM,cAAc,GAAG,MAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAG,CAAC,CAAC,mCAAI,yBAAyB,CAAC;IACzE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CACR,UAAU,EACV,2BAA2B,cAAc;;;;;;;;;;;;;;;cAe/B,YAAY;;;;;;;;CAQzB,CACE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,qBAAqB,CAAC,IAAU,EAAE,WAAmB;IACnE,MAAM,QAAQ,GAAG,GAAG,WAAW,kBAAkB,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO;IAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,8EAA8E;IAC9E,iEAAiE;IACjE,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAC/B,uCAAuC,EACvC,gJAAgJ,CACjJ,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAAU,EAAE,WAAmB;IAC9D,MAAM,MAAM,GAAG,IAAA,iCAAwB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,CAAC,OAAO,mCACT,MAAM,CAAC,OAAO,KACjB,OAAO,EAAE;YACP,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,IAAI;YACX,OAAO,EAAE;gBACP,OAAO,EAAE,iDAAiD;gBAC1D,GAAG,EAAE,eAAe;aACrB;SACF,GACF,CAAC;IACF,IAAA,mCAA0B,EAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,wBAAwB,CACtC,IAAU,EACV,cAAsB;IAEtB,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,GAAG,cAAc,sBAAsB,GAAG,EAAE,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YAAE,SAAS;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvE,OAAO;QACT,IAAI,CAAC,KAAK,CACR,UAAU,EACV,GAAG,CAAC,OAAO,CACT,cAAc,EACd,iDAAiD,CAClD,CACF,CAAC;QACF,OAAO;IACT,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDxB,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CACtC,IAAU,EACV,cAAsB;IAEtB,MAAM,QAAQ,GAAG,GAAG,cAAc,mBAAmB,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO;IAClC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,SAAgB,2BAA2B,CACzC,IAAU,EACV,cAAsB,EACtB,IAAY;IAEZ,MAAM,cAAc,GAAG,GAAG,cAAc,kBAAkB,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI;aACb,IAAI,CAAC,cAAc,CAAC;aACpB,QAAQ,EAAE;aACV,OAAO,CACN,uCAAuC,EACvC,6BAA6B,CAC9B;aACA,OAAO,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,cAAc,gBAAgB,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,KAAK,CACR,IAAI,EACJ,IAAI;aACD,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,EAAE;aACV,OAAO,CACN,2DAA2D,EAC3D,iDAAiD,IAAI,EAAE,CACxD,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,cAAc,4BAA4B,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CACR,aAAa,EACb,IAAI;aACD,IAAI,CAAC,aAAa,CAAC;aACnB,QAAQ,EAAE;aACV,OAAO,CACN,gCAAgC,EAChC,wBAAwB,IAAI,GAAG,CAChC,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,IAAU;IAC1C,MAAM,YAAY,GAAG,uBAAuB,CAAC;IAC7C,MAAM,QAAQ,GAAG;QACf,qBAAqB,EAAE,IAAI;QAC3B,yBAAyB,EAAE,wBAAwB;QACnD,0BAA0B,EAAE;YAC1B,sBAAsB,EAAE,UAAU;SACnC;KACF,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,IAAA,mBAAU,EAAC,IAAI,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iCACxC,QAAQ,GACR,QAAQ,EACX,CAAC,CAAC;IACN,CAAC;SAAM,CAAC;QACN,IAAA,kBAAS,EAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}