@axiomatic-labs/claudeflow 2.43.37 → 2.43.39

package/lib/install.js

@@ -8,11 +8,12 @@ const { writeLocalVersion, readLocalVersion } = require('./version.js');
 const ui = require('./ui.js');
 
 // claudeflow installs a small, namespaced footprint. Most of it is self-contained files that are simply
-// PLACED (playbooks, scripts, skills) — those can't conflict with the user's project. The only things
-// that need a MERGE (never a clobber) are .claude/settings.json (register our hooks alongside theirs)
-// and CLAUDE.md (upsert our guidance block between markers — user content outside stays untouched). That
-// merge lives here, in Node, so install works on every
-// platform with no shell dependency. The GitHub auth gate (auth.js/download.js) is untouched.
+// PLACED (playbooks, scripts, skills) — those can't conflict with the user's project. The things that need a
+// MERGE (never a clobber) are: .claude/settings.json (register our hooks + env alongside theirs), CLAUDE.md
+// (upsert our guidance block between markers — user content outside stays untouched), and the root .mcp.json
+// (seed the base MCP servers add-if-absent — never clobber a server the user configured). Those merges live
+// here, in Node, so install works on every platform with no shell dependency. The GitHub auth gate
+// (auth.js/download.js) is untouched.
 
 const CLAUDE_MARK = '<!-- claudeflow:begin -->';
 const CLAUDE_END = '<!-- claudeflow:end -->';
@@ -70,6 +71,27 @@ function mergeSettings(cwd, payloadSettings) {
   fs.writeFileSync(sp, JSON.stringify(data, null, 2) + '\n');
 }
 
+// Seed the BASE MCP server set (playwright for visual QA / browser_verification, context7 for live library
+// docs during Discover) into the project's root `.mcp.json` — the set the old framework shipped, restored.
+// ADD-IF-ABSENT by server key: create the file if missing, else merge in only the keys the user doesn't
+// already have (never clobber a server they configured). A corrupt/unexpected `.mcp.json` is left untouched
+// (don't risk eating the user's servers). Returns the number of servers added (0 = nothing to do). Like the
+// settings env-merge, a base server the user later removed is re-added on the next install — it's a BASE set.
+function mergeMcp(cwd, baseServers) {
+  if (!baseServers || !Object.keys(baseServers).length) return 0;
+  const mp = path.join(cwd, '.mcp.json');
+  let data = {};
+  if (fs.existsSync(mp)) {
+    try { data = JSON.parse(fs.readFileSync(mp, 'utf8')); } catch { return 0; }  // corrupt → don't clobber
+    if (typeof data !== 'object' || data === null || Array.isArray(data)) return 0;
+  }
+  const servers = data.mcpServers || (data.mcpServers = {});
+  let added = 0;
+  for (const k of Object.keys(baseServers)) { if (!(k in servers)) { servers[k] = baseServers[k]; added++; } }
+  if (added) fs.writeFileSync(mp, JSON.stringify(data, null, 2) + '\n');
+  return added;
+}
+
 // UPSERT the claudeflow guidance block. The snippet is a self-contained `<!-- claudeflow:begin -->…<!-- end -->`
 // region; everything OUTSIDE the markers is the user's own CLAUDE.md and is never touched. Behavior:
 //   • no CLAUDE.md            → create it with the block
@@ -102,7 +124,7 @@ function syncClaudeMd(cwd, snippetPath) {
 // Place + merge the framework from an extracted payload dir into a project. Pure filesystem, no network —
 // so it is testable on a throwaway dir.
 function installFromPayload(src, cwd) {
-  const out = { playbooks: 0, scripts: 0, skills: 0, agents: 0, claudeMd: false, failed: [] };
+  const out = { playbooks: 0, scripts: 0, skills: 0, agents: 0, mcp: 0, claudeMd: false, failed: [] };
   // Each placement step is ISOLATED: a failure in one (a copy error, a permission hiccup, a weird file in the
   // user's tree) must NOT abort the rest — above all it must not skip the settings/env + CLAUDE.md config, the
   // two steps a user most needs (the env block wires agent-teams + the autocompact window, etc.). Before this,
@@ -187,6 +209,16 @@ function installFromPayload(src, cwd) {
     out.claudeMd = syncClaudeMd(cwd, path.join(src, 'assets', 'CLAUDE.snippet.md'));
   });
 
+  // 7) .mcp.json — seed the base MCP servers (add-if-absent; never clobber the user's own servers).
+  step('mcp', () => {
+    const srcMcp = path.join(src, 'assets', 'mcp.base.json');
+    if (fs.existsSync(srcMcp)) {
+      let base = {};
+      try { base = JSON.parse(fs.readFileSync(srcMcp, 'utf8')).mcpServers || {}; } catch { base = {}; }
+      out.mcp = mergeMcp(cwd, base);
+    }
+  });
+
   return out;
 }
 
@@ -249,6 +281,7 @@ async function run() {
 
   ui.success(`claudeflow v${version} installed`);
   ui.info(`  ${summary.playbooks} playbooks · ${summary.scripts} scripts · ${summary.skills} skills`
+    + (summary.mcp ? ` · ${summary.mcp} MCP server${summary.mcp > 1 ? 's' : ''} added to .mcp.json` : '')
     + (summary.claudeMd ? ' · CLAUDE.md guidance synced' : ''));
   if (summary.failed && summary.failed.length) {
     ui.warn(`  some steps did not complete: ${summary.failed.join(', ')}. Re-run \`npx @axiomatic-labs/claudeflow@latest install\` (the @latest avoids a stale npx cache).`);
@@ -260,3 +293,4 @@ module.exports = run;
 module.exports.installFromPayload = installFromPayload;
 module.exports.mergeSettings = mergeSettings;
 module.exports.syncClaudeMd = syncClaudeMd;
+module.exports.mergeMcp = mergeMcp;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiomatic-labs/claudeflow",
-  "version": "2.43.37",
+  "version": "2.43.39",
   "description": "Claudeflow — AI-powered development toolkit for Claude Code. Skills, agents, hooks, and quality gates that ship production apps.",
   "bin": {
     "claudeflow": "./bin/cli.js"