@adia-ai/mcp 0.8.37 → 0.8.39

package/CHANGELOG.md

@@ -9,6 +9,23 @@
 > entire changelog was still `[Unreleased]` at fold time (minted at ADR-0048 P4,
 > never released under its own name) and is merged into the section below.
 
+## [0.8.39] — 2026-08-15
+
+### Added
+- **`get_catalog_ladder` on the `protocol` server (ADR-0050, gh#1291 phase 3) — 4 → 5 tools there (all-server total 43: gen-ui 31 · protocol 5 · factory 7).** ADR-0050's serving map gives the protocol server L0+L1; phase 1 held it at four tools because an L0-only enumerate tool duplicates `get_registry_map`. With L1 populated (44 curated widgets) the tool earns its place: an L1 entry carries its A2UI `template`, so a chat agent can enumerate a widget and emit it with no generation system and no corpus. No arguments returns the ladder summary — all five rungs with unit/composesTier/status/count plus a `servedHere` flag and the serving map in prose, so a client learns where L2–L4 live; `tier` (a two-value enum, `L0`|`L1`, so an unserved rung is refused at the schema rather than answered emptily) lists that rung's entry names; `tier` + `name` returns one entry's full record. **Isolation is unchanged by construction** — the tier index is data inside the zero-dependency `@adia-ai/a2ui` (`./catalog/tiers`), so the P4 module-graph walk still proves zero reach into `@adia-ai/gen-ui`/`@adia-ai/llm`/`@adia-ai/agent`. Zero tool-name overlap across the three servers (the factory smoke's ADR-0051 §4 assertion). **Purely additive** — no existing tool's input or output shape changed, so no versioning event; `protocol_status` deliberately did not grow catalog counters, which would have been an output-contract change for cosmetic value. gen-ui's `get_catalog_tiers` (all five rungs, for retrieval) is unchanged.
+
+### Maintenance
+- **`bin/` touched in this release window** (1 file(s), e.g. `bin/adia-mcp`) — carried by the entries above.
+
+## [0.8.38] — 2026-08-15
+
+### Added
+- **Third server: `adia-mcp factory` (ADR-0051, gh#1241).** The adia-factory MCP server — the developer toolbox for building adia-ui apps from any MCP-speaking harness — joins `gen-ui` and `protocol` as the third subcommand of the one bin, per gh#1240's one-package ruling. MCP config key: `adia-factory` (reserved). Seven tools over stdio, each wrapping an existing gated factory-plugin script (ADR-0051 §2 — no new business logic): `orient_app` (adia-info + record-lint), `scaffold_app`/`scaffold_page`/`scaffold_component` (adia-scaffold), `audit_structure` (adia-lint / adia-contract-check / record-lint / adia-scaffold inventory), `verify_surface` (adia-probe; Playwright lazy-loads from the target project per §6 — never a dependency of this package), and `factory_status`. Four doctrine resources (`adia://factory/{shell-selection,data-wiring,token-pairing-laws,pattern-index}`) are GENERATED from the plugin's skill files at build time (§3, `npm run build:factory-mcp-assets`); the wrapped scripts are vendored verbatim into `factory/vendor/` with a sha256 manifest, same single-source rule. New smoke gate `mcp:factory:smoke` (rides `npm run check` and the publish workflow) proves: asset freshness, the 7-tool/4-resource surface with live round-trips, every wrapped script's own selftest, zero tool-name overlap across all three servers (§4), tool/resource parity against `factory/public-surface.json` (the `adia-factory-public` reconciliation target — the assertion ADR-0051 deferred to this build), and the entrypoint-boundary isolation walk (§5: `factory/server.js`'s runtime module graph reaches no `@adia-ai/gen-ui`, no `@adia-ai/llm`, no `@adia-ai/agent`). `exports` gains `./factory/server.js`; TOOLS.md gains the third generated section.
+- **`get_catalog_tiers` on the `gen-ui` server (ADR-0050, gh#1243) — 30 → 31 tools on that server (all-server total 42: gen-ui 31 · protocol 4 · factory 7).** Enumerates the catalog's L0–L4 ladder from `@adia-ai/a2ui/catalog/tiers`: the summary by default (per rung: entry unit, the rung it composes, populated/reserved, count), one tier's entry names with `tier`, one entry's full record with `tier` + `name`. `composes` is the ladder edge a client follows to expand an entry into the rung below. ADR-0050's serving map puts retrieval across ALL tiers on this server; the protocol server keeps its four tools until L1 is curated (that is the tier a chat agent enumerates, and an L0-only tool there would duplicate `get_registry_map`). **Purely additive** — no existing tool's input or output shape changed.
+
+### Changed
+- **Package directory moved `packages/mcp` → `packages/gen-ui/mcp` (ADR-0049, gh#1244).** Directory move only — the npm name, exports, and API are unchanged.
+
 ## [0.8.37] — 2026-08-14
 
 ### Added
@@ -896,7 +913,7 @@ Companion to `@adia-ai/a2ui-compose@[Unreleased]` §87 zettel `ensureBooted()` r
 - **`mcp/scripts/smoke-engine-registry.mjs`** — retrieval-quality probes updated to match the post-§72 + §88 retrieval surface (composition-match strategy on canonical intents).
 - **`mcp/scripts/smoke-register-engine.mjs`** — engine-registry coverage adjusted; still 11/11.
 
-See root [CHANGELOG.md `[Unreleased]`](../../CHANGELOG.md) for the cross-cutting arc.
+See root [CHANGELOG.md `[Unreleased]`](../../../CHANGELOG.md) for the cross-cutting arc.
 ## [0.4.7] - 2026-05-12
 
 ### Changed — smoke + test scripts aligned to post-§72 retrieval surface
@@ -912,14 +929,14 @@ Companion to `@adia-ai/a2ui-compose@[Unreleased]` + `@adia-ai/a2ui-retrieval@[Un
 - **`mcp/scripts/eval-fix.mjs`** — retired the pattern-surface fix-up logic (no longer reachable; compositions are the canonical retrieval shape).
 - **`mcp/scripts/test-a2ui.mjs`** — assertions updated to reflect the post-§64 tool inventory.
 
-See root [CHANGELOG.md `[Unreleased]`](../../CHANGELOG.md) for the cross-cutting §64 arc narrative.
+See root [CHANGELOG.md `[Unreleased]`](../../../CHANGELOG.md) for the cross-cutting §64 arc narrative.
 ## [0.4.5] - 2026-05-12
 
 ### Ride-along (no source changes)
 
 Lockstep PATCH cut alongside `@adia-ai/web-components@0.4.5` (§61 CSS subpath exports + CustomEvent.detail sweep across 17 form-bearing primitives + slider reactivity test lock-in + §52 design-tokens export module + UI), `@adia-ai/web-modules@0.4.5` (§61 CSS subpath exports — six cluster `*.css` exports), `@adia-ai/a2ui-compose@0.4.5` (§56 system-prompt CORPUS CONTEXT block in monolithic strategies), `@adia-ai/llm@0.4.5` (§54 doc-comment path refresh). Source byte-identical to v0.4.4.
 
-Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4.0` covers `0.4.x` under semver). See root [CHANGELOG.md `## [0.4.5]`](../../CHANGELOG.md) for the cut narrative.
+Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4.0` covers `0.4.x` under semver). See root [CHANGELOG.md `## [0.4.5]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.4.4] - 2026-05-12
 
 ### Changed — fragment-retirement follow-through (§37, 2026-05-12)
@@ -928,14 +945,14 @@ Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4
 - **`mcp/scripts/smoke-zettel.mjs` — retired (37 lines).** Smoke depended on the removed fragment library; replaced functionally by `mcp/scripts/smoke-engine-registry.mjs` (engine path) and `scripts/test-chunks.mjs` (zettel composition path).
 - **`mcp/scripts/test-chunks.mjs` — 1-line tweak.** Threshold adjustment for the post-§40 annotated-chunk world.
 
-See root [CHANGELOG.md `[Unreleased]`](../../CHANGELOG.md) for the cross-cutting arc narrative.
+See root [CHANGELOG.md `[Unreleased]`](../../../CHANGELOG.md) for the cross-cutting arc narrative.
 ## [0.4.3] - 2026-05-11
 
 ### Ride-along (no source changes)
 
 Lockstep PATCH cut alongside `@adia-ai/web-components@0.4.3` (input-ui type=number locale + thousands grouping + hold-to-repeat) + `@adia-ai/a2ui-compose@0.4.3` + `@adia-ai/a2ui-retrieval@0.4.3` (process.env browser-compat fix) + `@adia-ai/a2ui-corpus@0.4.3` (catalog regen + chunks re-harvest with new settings-appearance pattern). Source byte-identical to v0.4.2.
 
-Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4.0` covers `0.4.x` under semver). See root [CHANGELOG.md `## [0.4.3]`](../../CHANGELOG.md) for the cut narrative.
+Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4.0` covers `0.4.x` under semver). See root [CHANGELOG.md `## [0.4.3]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.4.2] - 2026-05-11
 
 ### Added
@@ -946,39 +963,39 @@ Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4
 
 Lockstep PATCH cut alongside `@adia-ai/web-components@0.4.2` (`<input-ui type="number">` rewrite drops native `<input type=number>` wrapping) + `@adia-ai/web-modules@0.4.2` (`<editor-sidebar>` grid-track width-mirror fix + new `<theme-panel>` module). Apart from the script above, source byte-identical to v0.4.1.
 
-Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4.0` covers `0.4.x` under semver). See root [CHANGELOG.md `## [0.4.2]`](../../CHANGELOG.md) for the cut narrative.
+Internal `@adia-ai/*` dep ranges stay at `^0.4.0` (patch-cut asymmetry — `^0.4.0` covers `0.4.x` under semver). See root [CHANGELOG.md `## [0.4.2]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.4.1] - 2026-05-10
 
 ### Ride-along (no source changes)
 
 Lockstep PATCH cut alongside `@adia-ai/web-modules@0.4.1` (simple cluster) + `@adia-ai/a2ui-validator@0.4.1` (Phase 3 foundation) + `@adia-ai/a2ui-corpus@0.4.1` (fragment metrics reconciliation). Source byte-identical to v0.4.0.
 
-Internal `@adia-ai/*` dep ranges bumped from `^0.4.0` to `^0.4.1`. See root [CHANGELOG.md `## [0.4.1]`](../../CHANGELOG.md) for the cut narrative.
+Internal `@adia-ai/*` dep ranges bumped from `^0.4.0` to `^0.4.1`. See root [CHANGELOG.md `## [0.4.1]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.4.0] - 2026-05-10
 
 ### Ride-along (no source changes)
 
 Lockstep MINOR cut alongside `@adia-ai/web-modules@0.4.0` (ADR-0024 legacy shell shapes retired). Source byte-identical to v0.3.6.
 
-Internal `@adia-ai/*` dep ranges bumped from `^0.3.0` to `^0.4.0`. See root [CHANGELOG.md `## [0.4.0]`](../../CHANGELOG.md) for the cut narrative.
+Internal `@adia-ai/*` dep ranges bumped from `^0.3.0` to `^0.4.0`. See root [CHANGELOG.md `## [0.4.0]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.3.6] - 2026-05-10
 
 ### Ride-along (no source changes)
 
-Lockstep version bump only — source byte-identical to v0.3.5. Internal `@adia-ai/*` dep ranges remain at `^0.3.0`. See root [CHANGELOG.md `## [0.3.6]`](../../CHANGELOG.md) for the cut narrative.
+Lockstep version bump only — source byte-identical to v0.3.5. Internal `@adia-ai/*` dep ranges remain at `^0.3.0`. See root [CHANGELOG.md `## [0.3.6]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.3.5] - 2026-05-07
 
 ### Ride-along (no source changes)
 
-Lockstep version bump only — source byte-identical to v0.3.4. Internal `@adia-ai/*` dep ranges remain at `^0.3.0`. See root [CHANGELOG.md `## [0.3.5]`](../../CHANGELOG.md) for the cut narrative.
+Lockstep version bump only — source byte-identical to v0.3.4. Internal `@adia-ai/*` dep ranges remain at `^0.3.0`. See root [CHANGELOG.md `## [0.3.5]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.3.4] - 2026-05-07
 
 ### Ride-along (no source changes)
 
-Lockstep version bump only — source byte-identical to v0.3.3. Internal `@adia-ai/*` dep ranges remain at `^0.3.0`. See root [CHANGELOG.md `## [0.3.4]`](../../CHANGELOG.md) for the cut narrative.
+Lockstep version bump only — source byte-identical to v0.3.3. Internal `@adia-ai/*` dep ranges remain at `^0.3.0`. See root [CHANGELOG.md `## [0.3.4]`](../../../CHANGELOG.md) for the cut narrative.
 ## [0.3.3] - 2026-05-07
 
-**Lockstep cut.** All 9 published `@adia-ai/*` packages now share version `0.3.3`, governed by [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` ranges stay at `^0.3.0` (patch-cut asymmetry — caret floats `0.3.x`).
+**Lockstep cut.** All 9 published `@adia-ai/*` packages now share version `0.3.3`, governed by [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` ranges stay at `^0.3.0` (patch-cut asymmetry — caret floats `0.3.x`).
 
 ### Added
 
@@ -1016,7 +1033,7 @@ Lockstep version bump only — source byte-identical to v0.3.3. Internal `@adia-
 ## [0.3.2] - 2026-05-06
 
 **9-package lockstep patch cut to v0.3.2.** All lockstep members share
-one version per [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy).
+one version per [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy).
 Internal `@adia-ai/*` dep ranges unchanged at `^0.3.0`.
 
 ### Added
@@ -1040,7 +1057,7 @@ Internal `@adia-ai/*` dep ranges unchanged at `^0.3.0`.
 - `version`: `0.3.1` → `0.3.2`.
 ## [0.3.1] - 2026-05-06
 
-**9-package lockstep patch cut.** All 9 published `@adia-ai/*` packages bump 0.3.0 → 0.3.1 per [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges remain at `^0.3.0` (covers `0.3.1` under semver — patch-cut asymmetry).
+**9-package lockstep patch cut.** All 9 published `@adia-ai/*` packages bump 0.3.0 → 0.3.1 per [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges remain at `^0.3.0` (covers `0.3.1` under semver — patch-cut asymmetry).
 
 This package itself ships **no source changes** in v0.3.1. The cut bumps version only — substantive content lives in [`@adia-ai/web-components`](https://github.com/adiahealth/gen-ui-kit/releases/tag/web-components-v0.3.1) (folder-per-trait restructure; barrel API unchanged).
 
@@ -1050,7 +1067,7 @@ This package itself ships **no source changes** in v0.3.1. The cut bumps version
 - Internal `@adia-ai/*` dep ranges: unchanged at `^0.3.0` (covers `0.3.1` under semver — patch-cut asymmetry).
 ## [0.3.0] - 2026-05-05
 
-**9-package lockstep cut + new `@adia-ai/llm` dep.** All 9 published `@adia-ai/*` packages bump 0.2.5 → 0.3.0 per [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges bump `^0.2.0` → `^0.3.0`.
+**9-package lockstep cut + new `@adia-ai/llm` dep.** All 9 published `@adia-ai/*` packages bump 0.2.5 → 0.3.0 per [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges bump `^0.2.0` → `^0.3.0`.
 
 The MCP synthesis tool now resolves `createLLMAdapter` from `@adia-ai/llm` (9th lockstep package, first publish in this cut) rather than `@adia-ai/a2ui-compose/llm` (subpath dropped). Behavior unchanged.
 
@@ -1075,7 +1092,7 @@ If you depend on `@adia-ai/a2ui-mcp` directly (typically as a CLI via `npx adiau
 `@adia-ai/llm` is a transitive dep — npm install handles it.
 ## [0.2.5] - 2026-05-04
 
-**8-package lockstep cut.** All 8 published `@adia-ai/*` packages bump 0.2.4 → 0.2.5 per [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges remain at `^0.2.0` (covers 0.2.5 under semver — patch-cut asymmetry).
+**8-package lockstep cut.** All 8 published `@adia-ai/*` packages bump 0.2.4 → 0.2.5 per [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges remain at `^0.2.0` (covers 0.2.5 under semver — patch-cut asymmetry).
 
 This is a **patch cut on top of v0.2.4, no BREAKING changes.** Substantive content lives in `web-components` (new `<fields-ui>` form-grid primitive + `draggable-list-item` last-item drop-zone fix, both surfaced by the Tasks UI Playground at `.claude/docs/projects/tasks-playground/`); `a2ui-corpus` ships a catalog regen for the new `<fields-ui>` yaml. `a2ui-mcp` rides along at version bump only — no source change.
 
@@ -1085,7 +1102,7 @@ This is a **patch cut on top of v0.2.4, no BREAKING changes.** Substantive conte
 - Internal `@adia-ai/*` dep ranges: unchanged at `^0.2.0` (covers `0.2.5` under semver — patch-cut asymmetry).
 ## [0.2.4] - 2026-05-04
 
-**8-package lockstep cut.** All 8 published `@adia-ai/*` packages bump 0.2.3 → 0.2.4 per [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges remain at `^0.2.0` (covers 0.2.4 under semver — patch-cut asymmetry).
+**8-package lockstep cut.** All 8 published `@adia-ai/*` packages bump 0.2.3 → 0.2.4 per [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Internal `@adia-ai/*` dep ranges remain at `^0.2.0` (covers 0.2.4 under semver — patch-cut asymmetry).
 
 This is a **patch cut on top of v0.2.3, no BREAKING changes.** Substantive content lives in `web-components` (Tier 4 trait library lift, 11 new traits + 2 architectural rewrites, plus accumulated bug fixes); `a2ui-corpus` ships a catalog regen for the new `<demo-toggle-ui>` primitive. Six packages ride along at version + dep-range bump.
 
@@ -1105,7 +1122,7 @@ _Nothing yet._
 
 **Lockstep cut.** All 8 published `@adia-ai/*` packages bump
 0.2.2 → 0.2.3 per
-[`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy).
+[`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy).
 Patch cut — no breaking changes.
 
 ### Changed
@@ -1120,7 +1137,7 @@ Patch cut — no breaking changes.
 `@adia-ai/a2ui-mcp` source is byte-identical to `0.2.2`. The cut bumps version + the internal dep range entries only.
 ## [0.2.2] - 2026-05-02
 
-**Lockstep cut.** All 8 published `@adia-ai/*` packages bump 0.2.1 → 0.2.2 per [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Patch cut — no breaking changes.
+**Lockstep cut.** All 8 published `@adia-ai/*` packages bump 0.2.1 → 0.2.2 per [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Patch cut — no breaking changes.
 
 ### Changed
 
@@ -1138,7 +1155,7 @@ Patch cut — no breaking changes.
 ---
 ## [0.2.1] - 2026-05-02
 
-**Lockstep cut + `report_issue` trigger phrases + scope-drift auto-fire on canvas-drift detection.** All 8 published `@adia-ai/*` packages bump 0.2.0 → 0.2.1 per [`.claude/docs/specs/package-architecture.md` § 15](../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Patch cut — no breaking changes.
+**Lockstep cut + `report_issue` trigger phrases + scope-drift auto-fire on canvas-drift detection.** All 8 published `@adia-ai/*` packages bump 0.2.0 → 0.2.1 per [`.claude/docs/specs/package-architecture.md` § 15](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy). Patch cut — no breaking changes.
 
 ### Changed
 
@@ -1170,7 +1187,7 @@ When the composer's scope-drift gate (a2ui-compose) flags `result.scopeDrift.dri
 
 **Lockstep cut + corpus caret-lock fix.** All 8 published `@adia-ai/*`
 packages now share one version, governed by
-[`.claude/docs/specs/package-architecture.md` § 15 (Versioning Policy)](../../.claude/docs/specs/package-architecture.md#15-versioning-policy).
+[`.claude/docs/specs/package-architecture.md` § 15 (Versioning Policy)](../../../.claude/docs/specs/package-architecture.md#15-versioning-policy).
 
 This release **fixes a live shipping bug** in 0.1.3: the `dependencies`
 range `"@adia-ai/a2ui-corpus": "^0.0.6"` locked to *exactly* `0.0.6`
@@ -1211,7 +1228,7 @@ BREAKING changes.
 
 - **`compose_from_chunks` eval runner + hold-out set**. Closes the
   spec at
-  [`.claude/docs/specs/compose-from-chunks-eval.md`](../../.claude/docs/specs/compose-from-chunks-eval.md):
+  [`.claude/docs/specs/compose-from-chunks-eval.md`](../../../.claude/docs/specs/compose-from-chunks-eval.md):
   - `evals/compose-from-chunks-holdout.jsonl` — 20 intents (10
     single-turn compose + 10 multi-turn refine) across 9
     categories (data-display, forms, layout, data, data-viz,
@@ -1241,7 +1258,7 @@ BREAKING changes.
 ---
 ## [0.1.2] - 2026-05-01
 
-Phase 2 of [`.claude/docs/specs/semantic-validator.md`](../../.claude/docs/specs/semantic-validator.md)
+Phase 2 of [`.claude/docs/specs/semantic-validator.md`](../../../.claude/docs/specs/semantic-validator.md)
 **promoted to default**. When `--semantic` is set, `eval-diff.mjs`
 now gates on the combined score at threshold 80 by default, instead
 of running in Phase 1 shadow-mode. **Behavior change** — see § Opt
@@ -1297,7 +1314,7 @@ Pass rate drops from 83 → 79 (4 percentage points), all justified.
 
 ### Updated baseline thresholds
 
-Per [`.claude/docs/specs/semantic-validator.md`](../../.claude/docs/specs/semantic-validator.md)
+Per [`.claude/docs/specs/semantic-validator.md`](../../../.claude/docs/specs/semantic-validator.md)
 § Phase 2 status (2026-05-01):
 
 - `avgScore ≥ 88` (structural — unchanged)
@@ -1315,7 +1332,7 @@ Per [`.claude/docs/specs/semantic-validator.md`](../../.claude/docs/specs/semant
   threshold revalidation passes
 ## [0.1.1] - 2026-05-01
 
-Phase 2 of [`.claude/docs/specs/semantic-validator.md`](../../.claude/docs/specs/semantic-validator.md)
+Phase 2 of [`.claude/docs/specs/semantic-validator.md`](../../../.claude/docs/specs/semantic-validator.md)
 — opt-in combined-gating in `eval-diff.mjs` + new
 `semantic-stats.mjs` companion script. **No breaking changes.**
 Default `eval-diff` behavior unchanged — Phase 1 shadow-mode is
@@ -1386,7 +1403,7 @@ MCP tools that turn the chunk-composition pipeline from single-shot into a
 multi-turn surface, plus extends `compose_from_chunks` to mint a `state_id`
 for refinement chains.
 
-Spec: [`.claude/docs/specs/genui-multiturn-architecture.md`](../../.claude/docs/specs/genui-multiturn-architecture.md) (Active v0.1.0).
+Spec: [`.claude/docs/specs/genui-multiturn-architecture.md`](../../../.claude/docs/specs/genui-multiturn-architecture.md) (Active v0.1.0).
 Plan: `.claude/docs/plans/genui-multiturn-rollout-2026-04-28.md` (Phase A scoped).
 ADR: `0008-multiturn-genui-architecture.md`.
 
@@ -1624,7 +1641,7 @@ before HTML is materialized.
 
 ### Convention reference
 
-- Spec: [`.claude/docs/specs/genui-chunk-marker.md`](../../.claude/docs/specs/genui-chunk-marker.md).
+- Spec: [`.claude/docs/specs/genui-chunk-marker.md`](../../../.claude/docs/specs/genui-chunk-marker.md).
 - Plan: `.claude/docs/plans/training-pipeline-chunk-harvest-2026-04-27.md`.
 
 ### Other

package/README.md

@@ -1,16 +1,18 @@
 # @adia-ai/mcp
 
-**Two MCP servers, one npm package, one bin.** ADR-0048 §3 ruled two distinct
+**Three MCP servers, one npm package, one bin.** ADR-0048 §3 ruled distinct
 servers ("they do different things"); gh#1240 (operator ruling 2026-08-14)
 unified only the *distribution* — before either predecessor name
 (`@adia-ai/gen-ui-mcp`, `@adia-ai/a2ui-protocol-mcp`) ever published a 0.8.x —
-into this one package.
+into this one package. ADR-0051 (gh#1241) added the third server, `factory`,
+as a third subcommand under the same one-package ruling.
 
 | You want to… | Run |
 |---|---|
 | Generate UI from an intent, search the training corpus, run evals, catalog-aware validation + anti-pattern scoring | `adia-mcp gen-ui` |
 | Check that an A2UI document is well-formed, whoever produced it; see which component types/wiring exist with no corpus and no model | `adia-mcp protocol` |
-| See the two-server menu | `adia-mcp` (bare) |
+| Build adia-ui APPS from any MCP harness — orient, scaffold, structural audit, the surface-qa browser gate, doctrine resources | `adia-mcp factory` |
+| See the three-server menu | `adia-mcp` (bare) |
 
 **The protocol server's four tool names are distinct from the gen-ui
 server's** (gh#1248 renamed them off their original same-named forms before
@@ -39,30 +41,38 @@ Claude Desktop / Cursor / any MCP host, `mcpServers` block:
     "a2ui-protocol": {
       "command": "npx",
       "args": ["-y", "@adia-ai/mcp", "protocol"]
+    },
+    "adia-factory": {
+      "command": "npx",
+      "args": ["-y", "@adia-ai/mcp", "factory"]
     }
   }
 }
 ```
 
+(`adia-factory` is the reserved config key for the factory server —
+ADR-0051's config-key ruling, 2026-08-14.)
+
 From a local checkout:
 
 ```bash
-node packages/mcp/bin/adia-mcp gen-ui       # stdio, local IDE
-node packages/mcp/bin/adia-mcp protocol     # stdio, protocol-only
-MCP_HTTP_PORT=3460 node packages/mcp/bin/adia-mcp gen-ui   # HTTP transport (gen-ui only)
+node packages/gen-ui/mcp/bin/adia-mcp gen-ui       # stdio, local IDE
+node packages/gen-ui/mcp/bin/adia-mcp protocol     # stdio, protocol-only
+node packages/gen-ui/mcp/bin/adia-mcp factory      # stdio, factory toolbox
+MCP_HTTP_PORT=3460 node packages/gen-ui/mcp/bin/adia-mcp gen-ui   # HTTP transport (gen-ui only)
 ```
 
 ## `gen-ui` — the generation server
 
-Wraps [`@adia-ai/gen-ui`](../gen-ui/compose). Exposes the generation engine,
+Wraps [`@adia-ai/gen-ui`](../engine/compose). Exposes the generation engine,
 component catalog, pattern library, validator, and training feedback loop as
 **30 MCP tools** for Claude Desktop, Claude Code, Cursor, Windsurf, and any
 deployed MCP-capable host.
 
 > Runtime only. Generation logic lives in `@adia-ai/gen-ui`; UI atoms in
-> [`@adia-ai/web-components`](../web-components); the A2UI protocol runtime
+> [`@adia-ai/web-components`](../../web-components); the A2UI protocol runtime
 > (renderer, registry, streams, wiring) in [`@adia-ai/a2ui`](../a2ui); corpus
-> in [`@adia-ai/gen-ui/corpus`](../gen-ui/corpus).
+> in [`@adia-ai/gen-ui/corpus`](../engine/corpus).
 
 ### Two transports, one tool surface
 
@@ -93,13 +103,13 @@ re-`initialize` to continue. stdio has no sessions and is unaffected.
 export ANTHROPIC_API_KEY=sk-ant-…   # at least one provider key, for generate_ui
 adia-mcp gen-ui                                        # global install, stdio
 npx @adia-ai/mcp gen-ui                                # via npx
-node packages/mcp/gen-ui/server.js                     # from local checkout
-MCP_HTTP_PORT=3460 node packages/mcp/gen-ui/server.js  # HTTP → 0.0.0.0:3460/mcp
+node packages/gen-ui/mcp/gen-ui/server.js                     # from local checkout
+MCP_HTTP_PORT=3460 node packages/gen-ui/mcp/gen-ui/server.js  # HTTP → 0.0.0.0:3460/mcp
 ```
 
 ### Tools
 
-**See [`TOOLS.md`](./TOOLS.md) for the full reference** (both servers,
+**See [`TOOLS.md`](./TOOLS.md) for the full reference** (all three servers,
 sectioned) — tool names, descriptions, grouping, argument schemas. Quick map
 for `gen-ui`:
 
@@ -142,13 +152,13 @@ Wraps [`@adia-ai/a2ui`](../a2ui) and nothing else. `@adia-ai/gen-ui` and
 `@adia-ai/llm` are deliberate **non**-dependencies of this surface — see
 [Why a separate server](#why-a-separate-server-not-just-a-shared-one).
 
-Four tools, no API key, no `.env`, **stdio only** (no HTTP mode — express and
+Five tools, no API key, no `.env`, **stdio only** (no HTTP mode — express and
 session-sweep belong to `gen-ui`): `validate_document` · `get_registry_map` ·
-`get_wiring_registry` · `protocol_status`.
+`get_wiring_registry` · `get_catalog_ladder` · `protocol_status`.
 
 ```bash
-node packages/mcp/protocol/server.js       # stdio only
-npm run mcp:protocol:smoke                 # boot + exercise all 4 tools + isolation proof
+node packages/gen-ui/mcp/protocol/server.js       # stdio only
+npm run mcp:protocol:smoke                 # boot + exercise all 5 tools + isolation proof
 ```
 
 ### Tool name disambiguation
@@ -172,6 +182,56 @@ itself (any producer's document), `gen-ui` answers questions about this
 producer's catalog. The rename only changed how a client asks; it changed
 neither shape.
 
+## `factory` — the adia-factory server
+
+The developer toolbox (ADR-0051, gh#1241): build adia-ui **apps** from any
+MCP-speaking harness (Claude Code, Hermes, Pi, …) — the adia-ui-factory
+plugin's capabilities without Claude-Code-specific skills/commands/agents.
+MCP config key: **`adia-factory`** (reserved).
+
+Seven tools, no API key, no `.env`, **stdio only**: `orient_app` ·
+`scaffold_app` · `scaffold_page` · `scaffold_component` · `audit_structure` ·
+`verify_surface` · `factory_status`. See [`TOOLS.md`](./TOOLS.md) for the
+full reference.
+
+**Every tool wraps an existing gated script** (ADR-0051 §2 — the server adds
+no business logic): the factory plugin's `adia-info`, `record-lint`,
+`adia-lint`, `adia-scaffold`, `adia-contract-check`, and `adia-probe`,
+vendored verbatim into `factory/vendor/` by
+`npm run build:factory-mcp-assets` (the plugin's own files stay the single
+source; the vendor manifest + `mcp:factory:smoke` keep the copies honest).
+
+**Doctrine ships as MCP resources generated from the skill files at build
+time** (ADR-0051 §3), never hand-copied:
+`adia://factory/{shell-selection,data-wiring,token-pairing-laws,pattern-index}`.
+
+Runtime needs:
+
+- **python3** — four of the wrapped scripts are stdlib-only Python 3.8+.
+  Absent, the affected tools return an actionable install message.
+- **Playwright is NOT a dependency** (ADR-0051 §6): `verify_surface`
+  lazy-loads it from the target project (`npm i -D playwright` there); every
+  other tool works without it. Keeps `npx -y @adia-ai/mcp` installs light.
+
+Deliberate **non**-dependencies, same posture as `protocol` (ADR-0051 §5):
+`@adia-ai/gen-ui` and `@adia-ai/llm` never appear in this server's runtime
+module graph — a developer wanting generation talks to `adia-mcp gen-ui`.
+`mcp:factory:smoke` walks the module graph from `factory/server.js` and
+fails on any reach, proves zero tool-name overlap with both sibling servers
+(ADR-0051 §4), and asserts tool-name/resource-URI conformance against
+[`factory/public-surface.json`](./factory/public-surface.json) — the
+checked-in surface definition minted for the `adia-factory-public` (remote
+claude.ai connector) reconciliation. Scope, honestly: this is
+**local-surface conformance** — the remote publishes no machine-readable
+manifest yet, so remote divergence is not detectable until that export
+exists (the file's `$comment` rules that its rosters then become an import
+of it, never a fork).
+
+```bash
+node packages/gen-ui/mcp/factory/server.js   # stdio only
+npm run mcp:factory:smoke                    # boot + exercise tools + freshness, zero-overlap, parity, isolation proofs
+```
+
 ### Why a separate server (not just a shared one)
 
 ADR-0048 Decision §3 and `.claude/docs/specs/a2ui-gen-ui-split.md` ## Interfaces
@@ -184,25 +244,30 @@ manifest live, not that boundary.
 
 ## Package exports
 
-`package.json`'s `exports` map declares exactly two subpaths — `./gen-ui/server.js`
-and `./protocol/server.js` — the two entry points the `packages/shims/a2ui-mcp`
-bin forwarder and the packed-boot probe reach by deep import
-(`@adia-ai/mcp/gen-ui/server.js`). This is an explicit **invariant**, not an
-accident of omission: without a declared `exports` map every file in `files`
-is deep-importable by default, which is what let that resolution work before
-this map existed. Adding ANY future subpath key here is fine; removing or
-renarrowing either of the two above breaks the shim silently for anyone still
-on the retired `@adia-ai/a2ui-mcp` name. Re-run `npm run probe:packed-boot`
-and `node scripts/verify/check-shim-bridges.mjs` after touching this map.
+`package.json`'s `exports` map declares three subpaths — `./gen-ui/server.js`,
+`./protocol/server.js`, and `./factory/server.js` (added by ADR-0051/gh#1241;
+adding a subpath is the safe direction). The first two are the entry points the packed-boot probe (and
+the published `@adia-ai/a2ui-mcp@0.8.37` bridge shim, frozen on the registry)
+reach by deep import (`@adia-ai/mcp/gen-ui/server.js`). This is an explicit
+**invariant**, not an accident of omission: without a declared `exports` map
+every file in `files` is deep-importable by default, which is what let that
+resolution work before this map existed. Adding ANY future subpath key here is
+fine; removing or renarrowing either of the first two silently breaks the
+published shim for anyone still on the retired, deprecated
+`@adia-ai/a2ui-mcp` name. Re-run `npm run probe:packed-boot` after touching
+this map.
 
 ## Local development
 
 ```bash
 npm run build:mcp-server            # gen-ui: server.ts + tools/*.ts -> .js (esbuild)
 npm run build:protocol-mcp-server   # protocol: server.ts + tools/*.ts -> .js (esbuild)
-npm run mcp:smoke                   # gen-ui: boot over stdio, exercise all 30 tools
-npm run mcp:protocol:smoke          # protocol: boot over stdio, exercise all 4 tools + isolation proof
-npm run build:mcp-tools-md          # regenerate TOOLS.md (both servers, sectioned) from the live tool lists
+npm run build:factory-mcp-server    # factory: server.ts + tools/*.ts -> .js (esbuild)
+npm run build:factory-mcp-assets    # factory: re-vendor scripts + re-derive doctrine resources from the plugin
+npm run mcp:smoke                   # gen-ui: boot over stdio, exercise all 31 tools
+npm run mcp:protocol:smoke          # protocol: boot over stdio, exercise all 5 tools + isolation proof
+npm run mcp:factory:smoke           # factory: asset freshness + boot + tools + zero-overlap/parity/isolation proofs
+npm run build:mcp-tools-md          # regenerate TOOLS.md (all three servers, sectioned) from the live tool lists
 ```
 
 ## License