@atlashub/smartstack-cli 3.36.0 → 3.38.0

package/scripts/health-check.sh

@@ -0,0 +1,168 @@
+#!/bin/bash
+# SmartStack Health Check Script
+#
+# Usage: ./scripts/health-check.sh
+#
+# Exit codes:
+#   0 - All checks passed
+#   1 - Some checks failed
+#
+# This script can be used in CI/CD pipelines to verify SmartStack setup.
+
+set -e
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+ERRORS=0
+WARNINGS=0
+
+log_ok() {
+    echo -e "${GREEN}✓${NC} $1"
+}
+
+log_warn() {
+    echo -e "${YELLOW}⚠${NC} $1"
+    ((WARNINGS++))
+}
+
+log_error() {
+    echo -e "${RED}✗${NC} $1"
+    ((ERRORS++))
+}
+
+log_info() {
+    echo -e "${BLUE}ℹ${NC} $1"
+}
+
+echo ""
+echo "╔══════════════════════════════════════════════╗"
+echo "║      SmartStack Health Check                 ║"
+echo "╚══════════════════════════════════════════════╝"
+echo ""
+
+# Check Node.js
+echo "Checking dependencies..."
+
+if command -v node &> /dev/null; then
+    NODE_VERSION=$(node --version)
+    NODE_MAJOR=$(echo "$NODE_VERSION" | cut -d'.' -f1 | tr -d 'v')
+    if [ "$NODE_MAJOR" -ge 18 ]; then
+        log_ok "Node.js $NODE_VERSION"
+    else
+        log_error "Node.js $NODE_VERSION (requires 18+)"
+    fi
+else
+    log_error "Node.js not found"
+fi
+
+# Check npm
+if command -v npm &> /dev/null; then
+    log_ok "npm $(npm --version)"
+else
+    log_error "npm not found"
+fi
+
+# Check Git
+if command -v git &> /dev/null; then
+    log_ok "Git $(git --version | cut -d' ' -f3)"
+else
+    log_error "Git not found"
+fi
+
+# Check .NET SDK
+if command -v dotnet &> /dev/null; then
+    log_ok ".NET SDK $(dotnet --version)"
+else
+    log_warn ".NET SDK not found (optional for non-.NET projects)"
+fi
+
+echo ""
+echo "Checking Claude Code..."
+
+# Check Claude Code CLI
+if command -v claude &> /dev/null; then
+    log_ok "Claude Code CLI installed"
+
+    # Check MCP servers
+    echo ""
+    echo "Checking MCP servers..."
+
+    if claude mcp list 2>/dev/null | grep -qi "smartstack"; then
+        log_ok "SmartStack MCP available"
+    else
+        log_error "SmartStack MCP not installed"
+        log_info "  Install: npm install -g @atlashub/smartstack-mcp && claude mcp add smartstack -- npx @atlashub/smartstack-mcp"
+    fi
+
+    if claude mcp list 2>/dev/null | grep -qi "context7"; then
+        log_ok "Context7 MCP available"
+    else
+        log_error "Context7 MCP not installed"
+        log_info "  Install: claude mcp add context7 -- npx @upstash/context7-mcp"
+    fi
+else
+    log_error "Claude Code CLI not found"
+    log_info "  Install: curl -fsSL https://claude.ai/install.sh | bash"
+    log_info "  More info: https://code.claude.com/docs/en/setup"
+fi
+
+echo ""
+echo "Checking SmartStack CLI..."
+
+# Check SmartStack CLI
+if command -v smartstack &> /dev/null; then
+    log_ok "SmartStack CLI installed"
+
+    # Check templates installation
+    if [ -d "$HOME/.claude/commands" ] && [ -f "$HOME/.claude/commands/gitflow.md" ]; then
+        log_ok "SmartStack commands installed"
+    else
+        log_warn "SmartStack commands not installed"
+        log_info "  Run: smartstack install"
+    fi
+else
+    log_error "SmartStack CLI not found"
+    log_info "  Install: npm install -g @atlashub/smartstack-cli"
+fi
+
+# Check local Ralph config
+echo ""
+echo "Checking local project..."
+
+if [ -f ".ralph/ralph.config.yaml" ]; then
+    log_ok "Ralph configured in this project"
+else
+    log_warn "Ralph not configured in this project"
+    log_info "  Run: smartstack ralph init"
+fi
+
+if [ -d ".git" ]; then
+    BRANCH=$(git branch --show-current 2>/dev/null || echo "unknown")
+    log_ok "Git repository (branch: $BRANCH)"
+else
+    log_warn "Not a Git repository"
+fi
+
+# Summary
+echo ""
+echo "════════════════════════════════════════════════"
+
+if [ $ERRORS -eq 0 ]; then
+    if [ $WARNINGS -eq 0 ]; then
+        echo -e "${GREEN}All checks passed!${NC}"
+        echo "SmartStack is ready to use."
+    else
+        echo -e "${YELLOW}$WARNINGS warning(s)${NC}"
+        echo "SmartStack is usable but some features may be limited."
+    fi
+    exit 0
+else
+    echo -e "${RED}$ERRORS error(s), $WARNINGS warning(s)${NC}"
+    echo "Please fix the errors above before using SmartStack."
+    exit 1
+fi

package/scripts/postinstall.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+// Simple postinstall script - displays PATH fix for Windows
+
+const isGlobal = process.env.npm_config_global === 'true';
+const isWindows = process.platform === 'win32';
+
+if (isGlobal && isWindows) {
+  const prefix = process.env.npm_config_prefix || '';
+  console.log(`
+\x1b[32m✅ SmartStack CLI installed!\x1b[0m
+
+\x1b[33mIf 'ss' command is not found, run this in PowerShell:\x1b[0m
+
+  \x1b[36m$env:PATH += ";${prefix || '$(npm config get prefix)'}"\x1b[0m
+
+Then: \x1b[36mss --version\x1b[0m
+`);
+}

package/templates/agents/ba-reader.md

@@ -123,13 +123,13 @@ Get a compact summary of all completed (specified) modules, for use as context w
 ### Customers (FEAT-011)
 Entities: Customer, Address, Contact
 BRs: BR-VAL-001 (email unique), BR-WF-001 (activation flow)
-Permissions: business.sales.customers.{read|create|update|delete}
+Permissions: sales.customers.{read|create|update|delete}
 FKs exposed: Customer.Id, Address.Id
 
 ### Products (FEAT-012)
 Entities: Product, Category, PriceHistory
 BRs: BR-VAL-002 (SKU format), BR-CALC-001 (price calculation)
-Permissions: business.sales.products.{read|create|update}
+Permissions: sales.products.{read|create|update}
 FKs exposed: Product.Id, Category.Id
 ```
 
@@ -289,11 +289,11 @@ Generate compact context for use by other skills and agents.
 - Interaction
 
 ## Permissions (5)
-- business.crm.contacts.create
-- business.crm.contacts.read
-- business.crm.contacts.update
-- business.crm.contacts.delete
-- business.crm.contacts.export
+- crm.contacts.create
+- crm.contacts.read
+- crm.contacts.update
+- crm.contacts.delete
+- crm.contacts.export
 
 ## Business Rules (4)
 - BR-VAL-001: Email must be unique
@@ -340,7 +340,7 @@ When encountering ID references, resolve them:
 **Format resolved references as inline citations:**
 - "UC-001 (Create new contact)"
 - "[BR-SEC-015: Sensitive data encryption required]"
-- "business.crm.contacts.create (used in UC-001, UC-003)"
+- "crm.contacts.create (used in UC-001, UC-003)"
 
 ## Error Handling
 
@@ -366,7 +366,7 @@ This agent provides context for:
 ```
 User: "What permissions does FEAT-042 need?"
 → Operation: answerQuestion(FEAT-042, "What permissions does this feature need?")
-→ Output: List of business.crm.contacts.* permissions with use case mapping
+→ Output: List of crm.contacts.* permissions with use case mapping
 
 User: "Find all features that use the Contact entity"
 → Operation: searchAcrossFeatures("Contact")

package/templates/agents/ba-writer.md

@@ -14,8 +14,8 @@ Write and update feature.json files for project-level (multi-app), application-l
 
 **Directory structure (3-tier hierarchy):**
 - Project-level (multi-app only): `docs/business-analyse/v{X.Y}/feature.json`
-- Application-level: `docs/{context}/{app}/business-analyse/v{X.Y}/feature.json`
-- Module-level: `docs/{context}/{app}/{module}/business-analyse/v{X.Y}/feature.json`
+- Application-level: `docs/{app}/business-analyse/v{X.Y}/feature.json`
+- Module-level: `docs/{app}/{module}/business-analyse/v{X.Y}/feature.json`
 
 > **Backward compatibility:** If only 1 application, the project level is NOT created. The application-level feature.json remains the master.
 
@@ -29,7 +29,6 @@ Create an initial feature.json with metadata and draft status.
 - scope: "project", "application", or "module" (default: "module")
 - Optional: applicationRef (FEAT-NNN of master, required when scope = "module" in app mode)
 - Optional: projectRef (PROJ-NNN of project master, required when scope = "application" in project mode)
-- Optional: context (default: "business", allows "platform" or "personal" in project mode)
 - Optional: initialSections for pre-populated content
 
 **Process:**
@@ -37,8 +36,8 @@ Create an initial feature.json with metadata and draft status.
 2. Increment FEAT-NNN (or PROJ-NNN) identifier
 3. Create directory structure based on scope:
    - If scope = "project": `docs/business-analyse/v1.0/`
-   - If scope = "application": `docs/{context}/{app}/business-analyse/v1.0/`
-   - If scope = "module": `docs/{context}/{app}/{module}/business-analyse/v1.0/`
+   - If scope = "application": `docs/{app}/business-analyse/v1.0/`
+   - If scope = "module": `docs/{app}/{module}/business-analyse/v1.0/`
 4. Generate initial feature.json with:
    - **`$schema`**: relative path to the deployed schema file (MANDATORY — see $schema rules below)
    - id: FEAT-NNN (from config)
@@ -104,7 +103,7 @@ Update the applications array and dependency graph in a project-level feature.js
 
 **Input:**
 - projectId: PROJ-NNN of the project feature.json
-- applications: array of application objects (code, name, context, tablePrefix, icon, description, applicationRoles[], scope, dependencies[], estimatedComplexity)
+- applications: array of application objects (code, name, tablePrefix, icon, description, applicationRoles[], scope, dependencies[], estimatedComplexity)
 - applicationDependencyGraph: object with edges[], topologicalOrder[], layers[]
 
 **Process:**
@@ -432,7 +431,7 @@ Perform these structural checks before every write:
 - BR IDs: must match `BR-(VAL|CALC|WF|SEC|DATA)-[A-Z]{2,4}-\d{3}` (e.g., BR-SEC-RM-042) — module prefix MANDATORY in multi-module mode
 - UC IDs: must match `UC-[A-Z]{2,4}-\d{3}` (e.g., UC-RM-007) — module prefix MANDATORY in multi-module mode
 - FR IDs: must match `FR-[A-Z]{2,4}-\d{3}` (e.g., FR-RM-012) — module prefix MANDATORY in multi-module mode
-- Permission paths: must match `business\.{app}\.{module}\.{resource}\.{action}` (e.g., business.crm.contacts.read)
+- Permission paths: must match `{app}\.{module}\.{resource}\.{action}` (e.g., crm.contacts.read)
 
 **Metadata:**
 - id, version, status, scope are required
@@ -442,7 +441,7 @@ Perform these structural checks before every write:
 
 **Cross-references:**
 - All BR-XXX, UC-XXX, FR-XXX referenced must be defined in their respective sections
-- Permission paths must use full format with 5 segments: `business.{app}.{module}.{resource}.{action}`
+- Permission paths must use full format with 4 segments: `{app}.{module}.{resource}.{action}`
 
 **Application-scope specific:**
 - `modules[]` must exist and be non-empty after decomposition
@@ -593,19 +592,17 @@ docs/business-analyse/
   v1.0/
     feature.json                          ← PROJECT (multi-app master, only if 2+ apps)
 
-docs/{context}/{app}/business-analyse/
+docs/{app}/business-analyse/
   v1.0/
     feature.json                          ← APPLICATION (master)
 
-docs/{context}/{app}/{module}/business-analyse/
+docs/{app}/{module}/business-analyse/
   v1.0/
     feature.json                          ← MODULE (detailed)
   v1.1/
     feature.json
 ```
 
-> **{context}** = "business" (default) | "platform" | "personal" — determined per application in project mode.
-
 Versions are stored as separate files in versioned directories. Always store feature.json at the root of each version folder.
 
 ## Config Management
@@ -762,15 +759,15 @@ If a module feature.json exceeds 500KB despite incremental operations:
 ## $schema Reference Rules (MANDATORY)
 
 > **Every feature.json MUST include a `$schema` field** pointing to the deployed schema file via relative path.
-> Schemas are deployed by step-00-init to: `docs/business/{app}/business-analyse/schemas/`
+> Schemas are deployed by step-00-init to: `docs/{app}/business-analyse/schemas/`
 
 **$schema paths by scope:**
 
 | Scope | Feature.json location | $schema value |
 |-------|----------------------|---------------|
 | project | `docs/business-analyse/v1.0/feature.json` | `"../schemas/project-schema.json"` |
-| application | `docs/{context}/{app}/business-analyse/v1.0/feature.json` | `"../schemas/application-schema.json"` |
-| module | `docs/{context}/{app}/{module}/business-analyse/v1.0/feature.json` | `"../../../business-analyse/schemas/feature-schema.json"` |
+| application | `docs/{app}/business-analyse/v1.0/feature.json` | `"../schemas/application-schema.json"` |
+| module | `docs/{app}/{module}/business-analyse/v1.0/feature.json` | `"../../../business-analyse/schemas/feature-schema.json"` |
 
 **Rules:**
 - `$schema` is ALWAYS the FIRST field in feature.json (before `id`)

package/templates/agents/code-reviewer.md

@@ -2,7 +2,7 @@
 name: code-reviewer
 description: Expert code reviewer for PR analysis. Use when reviewing code changes for security, logic, clean code, or feature-specific behavior. Accepts focus area and file list. Returns structured findings table.
 tools: Read, Grep, Glob, Skill
-model: haiku
+model: sonnet
 ---
 
 <role>

package/templates/agents/docs-context-reader.md

@@ -66,7 +66,7 @@ For each module found, extract:
 - Feature status (draft/analysed/specified/approved/handed-off)
 - Use Case IDs (UC-001, UC-002...)
 - Business Rule IDs (BR-001, BR-002...)
-- Permission paths (business.app.module.action)
+- Permission paths (app.module.action)
 - Last update dates (from metadata.updatedAt)
 - Validation decision (APPROVED/REJECTED/pending)
 - Version (from folder name v1.0, v1.1, etc.)

package/templates/agents/gitflow/merge.md

@@ -19,15 +19,11 @@ Safe PR merge with review checklist. Supports GitHub and Azure DevOps.
 CONFIG_FILE=""
 if [ -f ".claude/gitflow/config.json" ]; then
   CONFIG_FILE=".claude/gitflow/config.json"
-elif [ -f ".gitflow/config.json" ]; then
-  CONFIG_FILE=".gitflow/config.json"
 else
   # Try develop worktree
   DEVELOP_PATH=$(git worktree list --porcelain 2>/dev/null | grep -A1 "branch refs/heads/develop" | grep "^worktree " | sed 's/^worktree //')
   if [ -n "$DEVELOP_PATH" ] && [ -f "$DEVELOP_PATH/.claude/gitflow/config.json" ]; then
     CONFIG_FILE="$DEVELOP_PATH/.claude/gitflow/config.json"
-  elif [ -n "$DEVELOP_PATH" ] && [ -f "$DEVELOP_PATH/.gitflow/config.json" ]; then
-    CONFIG_FILE="$DEVELOP_PATH/.gitflow/config.json"
   fi
 fi
 

package/templates/agents/gitflow/pr.md

@@ -21,15 +21,11 @@ Create PR with auto-generated description, Azure DevOps and GitHub support.
 CONFIG_FILE=""
 if [ -f ".claude/gitflow/config.json" ]; then
   CONFIG_FILE=".claude/gitflow/config.json"
-elif [ -f ".gitflow/config.json" ]; then
-  CONFIG_FILE=".gitflow/config.json"
 else
   # Try develop worktree
   DEVELOP_PATH=$(git worktree list --porcelain 2>/dev/null | grep -A1 "branch refs/heads/develop" | grep "^worktree " | sed 's/^worktree //')
   if [ -n "$DEVELOP_PATH" ] && [ -f "$DEVELOP_PATH/.claude/gitflow/config.json" ]; then
     CONFIG_FILE="$DEVELOP_PATH/.claude/gitflow/config.json"
-  elif [ -n "$DEVELOP_PATH" ] && [ -f "$DEVELOP_PATH/.gitflow/config.json" ]; then
-    CONFIG_FILE="$DEVELOP_PATH/.gitflow/config.json"
   fi
 fi
 

package/templates/agents/gitflow/start.md

@@ -45,13 +45,38 @@ FULL_BRANCH="${type}/${BRANCH_NAME}"
 
 ### 4. Create Branch + Worktree
 
-```bash
-# Worktree paths from config or convention:
-# feature → ../features/{name}
-# release → ../releases/v{version}
-# hotfix  → ../hotfixes/{name}
+> **FORBIDDEN — Numbered directories:**
+> - `03-Release`, `04-Feature`, `05-Hotfix` — NEVER create these
+> - Only `01-Main` and `02-Develop` are numbered (permanent worktrees created at init)
+> - Features go in `{root}/features/{name}`, releases in `{root}/releases/v{version}`, hotfixes in `{root}/hotfixes/{name}`
+> - The path MUST come from `config.json → worktrees.structure.{features|releases|hotfixes}`
 
+```bash
+# 1. Read config (MANDATORY — paths come from here, NEVER improvised)
+read_gitflow_config || { echo "ERROR: No config. Run /gitflow init"; exit 1; }
+
+# 2. Resolve path from CONFIG (NEVER improvise numbered directories)
+case "$branch_type" in
+  feature) WORKTREE_PATH="$GF_FEATURES_PATH/$BRANCH_NAME" ;;
+  release) WORKTREE_PATH="$GF_RELEASES_PATH/v$VERSION" ;;
+  hotfix)  WORKTREE_PATH="$GF_HOTFIXES_PATH/$BRANCH_NAME" ;;
+esac
+
+# 3. Create worktree
+mkdir -p "$(dirname "$WORKTREE_PATH")"
 git worktree add -b "$FULL_BRANCH" "$WORKTREE_PATH" "origin/$BASE_BRANCH"
+
+# 4. POST-CREATION VALIDATION (BLOCKING)
+CREATED_PATH=$(git worktree list | grep "$FULL_BRANCH" | awk '{print $1}')
+BASENAME=$(basename "$CREATED_PATH")
+if [[ "$BASENAME" =~ ^[0-9]{2}- ]] && [[ "$BASENAME" != "01-Main" ]] && [[ "$BASENAME" != "02-Develop" ]]; then
+  echo "BLOCKING ERROR: Worktree created with numbered prefix: $CREATED_PATH"
+  echo "Expected path: $WORKTREE_PATH"
+  git worktree remove "$CREATED_PATH" --force
+  git branch -D "$FULL_BRANCH" 2>/dev/null
+  echo "Removed invalid worktree. Recreating at correct path..."
+  git worktree add -b "$FULL_BRANCH" "$WORKTREE_PATH" "origin/$BASE_BRANCH"
+fi
 ```
 
 ### 5. Push Branch to Remote (AUTOMATIC)

package/templates/mcp-scaffolding/frontend/nav-routes.ts.hbs

@@ -11,11 +11,11 @@
  */
 
 export interface NavRoute {
-  /** NavRoute path (e.g., "platform.administration.users") */
+  /** NavRoute path (e.g., "administration.users") */
   navRoute: string;
-  /** API endpoint path (e.g., "/api/platform/administration/users") */
+  /** API endpoint path (e.g., "/api/administration/users") */
   api: string;
-  /** Frontend route path (e.g., "/platform/administration/users") */
+  /** Frontend route path (e.g., "/administration/users") */
   web: string;
   /** Required permissions to access this route */
   permissions: string[];
@@ -72,43 +72,43 @@ export function hasRoutePermission(navRoute: string, userPermissions: string[]):
 }
 
 /**
- * Get all routes for a context (e.g., "platform")
+ * Get all routes for an application (e.g., "administration")
  */
-export function getRoutesByContext(context: string): NavRoute[] {
-  return Object.values(ROUTES).filter(r => r.navRoute.startsWith(`${context}.`));
+export function getRoutesByApplication(application: string): NavRoute[] {
+  return Object.values(ROUTES).filter(r => r.navRoute.startsWith(`${application}.`));
 }
 
 /**
- * Get all routes for a context and application (e.g., "platform.administration")
+ * Get all routes for an application and module (e.g., "administration.users")
  */
-export function getRoutesByApplication(context: string, application: string): NavRoute[] {
-  const prefix = `${context}.${application}`;
+export function getRoutesByModule(application: string, module: string): NavRoute[] {
+  const prefix = `${application}.${module}`;
   return Object.values(ROUTES).filter(r => r.navRoute.startsWith(`${prefix}.`) || r.navRoute === prefix);
 }
 
 /**
- * Get all unique contexts
+ * Get all unique applications
  */
-export function getContexts(): string[] {
-  const contexts = new Set<string>();
+export function getApplications(): string[] {
+  const applications = new Set<string>();
   for (const route of Object.values(ROUTES)) {
-    contexts.add(route.navRoute.split('.')[0]);
+    applications.add(route.navRoute.split('.')[0]);
   }
-  return Array.from(contexts);
+  return Array.from(applications);
 }
 
 /**
- * Get all unique applications within a context
+ * Get all unique modules within an application
  */
-export function getApplications(context: string): string[] {
-  const apps = new Set<string>();
+export function getModules(application: string): string[] {
+  const modules = new Set<string>();
   for (const route of Object.values(ROUTES)) {
     const parts = route.navRoute.split('.');
-    if (parts[0] === context && parts.length >= 2) {
-      apps.add(parts[1]);
+    if (parts[0] === application && parts.length >= 2) {
+      modules.add(parts[1]);
     }
   }
-  return Array.from(apps);
+  return Array.from(modules);
 }
 
 /**

package/templates/mcp-scaffolding/frontend/routes.tsx.hbs

@@ -19,7 +19,7 @@ import { ProtectedRoute, PermissionGuard } from './guards';
 // Layouts
 // ============================================================================
 
-{{#each contexts}}
+{{#each applications}}
 import { {{capitalize this}}Layout } from '../layouts/{{capitalize this}}Layout';
 {{/each}}
 
@@ -52,38 +52,30 @@ const routes: RouteObject[] = [
     element: <Navigate to="{{defaultPath}}" replace />,
   },
 
-{{#each contextTree}}
-  // {{uppercase @key}} Context
+{{#each applicationTree}}
+  // {{uppercase @key}} Application
   {
     path: '{{@key}}',
     element: <{{capitalize @key}}Layout />,
     children: [
 {{#each this}}
-      // {{uppercase @key}} Application
       {
-        path: '{{@key}}',
-        children: [
-{{#each this}}
-          {
-            path: '{{modulePath this.navRoute}}',
+        path: '{{modulePath this.navRoute}}',
 {{#if this.permissions.length}}
-            element: (
-              <PermissionGuard permissions={ROUTES['{{this.navRoute}}'].permissions}>
-                <Suspense fallback={<PageLoader />}>
-                  <{{pageName this.navRoute}}Page />
-                </Suspense>
-              </PermissionGuard>
-            ),
+        element: (
+          <PermissionGuard permissions={ROUTES['{{this.navRoute}}'].permissions}>
+            <Suspense fallback={<PageLoader />}>
+              <{{pageName this.navRoute}}Page />
+            </Suspense>
+          </PermissionGuard>
+        ),
 {{else}}
-            element: (
-              <Suspense fallback={<PageLoader />}>
-                <{{pageName this.navRoute}}Page />
-              </Suspense>
-            ),
+        element: (
+          <Suspense fallback={<PageLoader />}>
+            <{{pageName this.navRoute}}Page />
+          </Suspense>
+        ),
 {{/if}}
-          },
-{{/each}}
-        ],
       },
 {{/each}}
     ],

package/templates/mcp-scaffolding/migrations/seed-roles.cs.hbs

@@ -152,8 +152,8 @@ public partial class {{migrationName}} : Migration
                 FROM core.auth_Permissions
                 WHERE IsDeleted = 0
                   AND Code NOT LIKE '%.delete'
-                  AND Code NOT LIKE 'platform.administration.users.%'
-                  AND Code NOT LIKE 'platform.administration.roles.%';
+                  AND Code NOT LIKE 'administration.users.%'
+                  AND Code NOT LIKE 'administration.roles.%';
 
                 PRINT 'Read, create, update permissions granted to Contributor (excluding user management)';
             END

package/templates/skills/_resources/mcp-validate-documentation-spec.md

@@ -129,9 +129,9 @@ FOR each module:
       "issues": [
         {
           "type": "endpoint_mismatch",
-          "documented": ["GET /api/business/sla", "POST /api/business/sla"],
-          "actual": ["GET /api/business/sla", "POST /api/business/sla", "PATCH /api/business/sla/{id}/status"],
-          "message": "Endpoint PATCH /api/business/sla/{id}/status exists in code but not in documentation"
+          "documented": ["GET /api/support/sla", "POST /api/support/sla"],
+          "actual": ["GET /api/support/sla", "POST /api/support/sla", "PATCH /api/support/sla/{id}/status"],
+          "message": "Endpoint PATCH /api/support/sla/{id}/status exists in code but not in documentation"
         }
       ]
     }

package/templates/skills/_shared.md

@@ -19,11 +19,11 @@ Domain → Application → Infrastructure → API → Web
 ### Layers
 | Layer | Responsibility | Namespace | Folder Hierarchy |
 |-------|-----------------|-----------|------------------|
-| Domain | Entities, ValueObjects | `SmartStack.Domain.{Context}.{App}.{Module}` | `Domain/{Context}/{App}/{Module}/` |
-| Application | Interfaces (Common), DTOs | `SmartStack.Application.Common.Interfaces` / `.{Context}.{App}.{Module}.DTOs` | `Application/Common/Interfaces/` + `Application/{Context}/{App}/{Module}/DTOs/` |
-| Infrastructure | Service Impl, EF Core | `SmartStack.Infrastructure.Services.{Context}.{App}.{Module}` | `Infrastructure/Services/{Context}/{App}/{Module}/` + `Persistence/Configurations/{Context}/{App}/{Module}/` |
-| API | Controllers, Middleware | `SmartStack.Api.Controllers.{Context}` | `Api/Controllers/{Context}/` |
-| Web | React components, pages | N/A | `pages/{context}/{app}/{module}/` + `components/{context}/{module}/` |
+| Domain | Entities, ValueObjects | `SmartStack.Domain.{App}.{Module}` | `Domain/{App}/{Module}/` |
+| Application | Interfaces (Common), DTOs | `SmartStack.Application.Common.Interfaces` / `.{App}.{Module}.DTOs` | `Application/Common/Interfaces/` + `Application/{App}/{Module}/DTOs/` |
+| Infrastructure | Service Impl, EF Core | `SmartStack.Infrastructure.Services.{App}.{Module}` | `Infrastructure/Services/{App}/{Module}/` + `Persistence/Configurations/{App}/{Module}/` |
+| API | Controllers, Middleware | `SmartStack.Api.Controllers` | `Api/Controllers/` |
+| Web | React components, pages | N/A | `pages/{app}/{module}/` + `components/{module}/` |
 
 ## Permissions (2 mandatory files)
 
@@ -31,10 +31,10 @@ Domain → Application → Infrastructure → API → Web
 ```csharp
 public static class {Module}
 {
-    public const string View = "{context}.{app}.{module}.view";
-    public const string Create = "{context}.{app}.{module}.create";
-    public const string Update = "{context}.{app}.{module}.update";
-    public const string Delete = "{context}.{app}.{module}.delete";
+    public const string View = "{app}.{module}.view";
+    public const string Create = "{app}.{module}.create";
+    public const string Update = "{app}.{module}.update";
+    public const string Delete = "{app}.{module}.delete";
 }
 ```
 
@@ -59,14 +59,12 @@ builder.HasData(
 ### i18n Structure
 ```json
 {
-  "{context}": {
-    "{application}": {
-      "{module}": {
-        "title": "...",
-        "fields": { ... },
-        "actions": { ... },
-        "messages": { ... }
-      }
+  "{application}": {
+    "{module}": {
+      "title": "...",
+      "fields": { ... },
+      "actions": { ... },
+      "messages": { ... }
     }
   }
 }