@cotrrackpro-dev/sdk 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -2,6 +2,29 @@
 
 All notable changes to `@cotrackpro/sdk` are documented here.
 
+## 0.1.2 - 2026-07-06
+
+No SDK changes — version bumped in lockstep with the CLI's 0.1.2 legibility pass
+(a new `cotrackpro glossary` command + per-command help examples) so the preview
+packages republish together.
+
+## 0.1.1 - 2026-07-06
+
+### diagram
+- **approve helpers** — `approveMarkdown`, `isApproved`, and the `STATUS_LINE_RE`
+  / `APPROVED_STATUS_RE` constants: one shared, line-anchored source of truth for
+  the approval-doc `Status` line, used by the CLI's `diagram approve` and the
+  scaffold "approve before build" gate so they can't drift.
+- **validateMermaid** — stronger, still parser-free: flags unbalanced
+  `[](){}` brackets and arrow edges with a missing endpoint (bare-id edges stay
+  valid Mermaid).
+
+### nocode
+- **assemble** — `deriveMcp`, `deriveVariables`, and `repairApp`: derive an app's
+  `settings.mcp` allow-list and `variables` from its node graph (union-merge,
+  non-destructive), the shared core behind the CLI's `nocode fix` and the web
+  builder's canvas.
+
 ## 0.1.0 - 2026-07-05
 
 Initial public release. Synced the catalog from the canonical

package/dist/diagram/mermaid.d.ts

@@ -8,3 +8,27 @@ export declare function toMermaid(d: Diagram): string;
  * Set the status to `Approved` once signed off (the scaffold gate looks for it).
  */
 export declare function toMarkdown(d: Diagram, meta?: ApprovalMeta): string;
+/** The approval-doc status line (`- **Status:** …`), wherever it sits in the doc.
+ *  The leading list dash is optional so a hand-written doc matches too. */
+export declare const STATUS_LINE_RE: RegExp;
+/**
+ * Line-anchored test for a genuinely-approved doc: the Status line itself must
+ * begin with `Approved`. Deliberately strict — the Draft template's line starts
+ * with `Draft` (even though the word "Approved" appears later in its hint), so
+ * this won't false-match an unreviewed document. The scaffold "approve before
+ * build" gate uses this.
+ */
+export declare const APPROVED_STATUS_RE: RegExp;
+/** True when the approval doc's Status line reads `Approved`. */
+export declare function isApproved(markdown: string): boolean;
+/**
+ * Flip an approval doc's Status line to `Approved`, optionally stamping the
+ * approver/date. Returns the rewritten markdown, or `null` if there is no
+ * `- **Status:**` line to flip (so the caller can tell the user to generate the
+ * doc with `diagram extract` first). Idempotent — approving an approved doc is a
+ * no-op on the status token.
+ */
+export declare function approveMarkdown(markdown: string, meta?: {
+    by?: string;
+    date?: string;
+}): string | null;

package/dist/diagram/mermaid.js

@@ -47,4 +47,36 @@ export function toMarkdown(d, meta = {}) {
         "",
     ].join("\n");
 }
+/** The approval-doc status line (`- **Status:** …`), wherever it sits in the doc.
+ *  The leading list dash is optional so a hand-written doc matches too. */
+export const STATUS_LINE_RE = /^[ \t]*-?[ \t]*\*\*Status:\*\*.*$/im;
+/**
+ * Line-anchored test for a genuinely-approved doc: the Status line itself must
+ * begin with `Approved`. Deliberately strict — the Draft template's line starts
+ * with `Draft` (even though the word "Approved" appears later in its hint), so
+ * this won't false-match an unreviewed document. The scaffold "approve before
+ * build" gate uses this.
+ */
+export const APPROVED_STATUS_RE = /^[ \t]*-?[ \t]*\*\*Status:\*\*[ \t]*Approved\b/im;
+/** True when the approval doc's Status line reads `Approved`. */
+export function isApproved(markdown) {
+    return APPROVED_STATUS_RE.test(markdown);
+}
+/**
+ * Flip an approval doc's Status line to `Approved`, optionally stamping the
+ * approver/date. Returns the rewritten markdown, or `null` if there is no
+ * `- **Status:**` line to flip (so the caller can tell the user to generate the
+ * doc with `diagram extract` first). Idempotent — approving an approved doc is a
+ * no-op on the status token.
+ */
+export function approveMarkdown(markdown, meta = {}) {
+    if (!STATUS_LINE_RE.test(markdown))
+        return null;
+    let out = markdown.replace(STATUS_LINE_RE, "- **Status:** Approved");
+    if (meta.by) {
+        const stamp = `- **Approved by:** ${meta.by}` + (meta.date ? `  **Date:** ${meta.date}` : "");
+        out = out.replace(/^[ \t]*-[ \t]*\*\*Approved by:\*\*.*$/im, stamp);
+    }
+    return out;
+}
 //# sourceMappingURL=mermaid.js.map

package/dist/diagram/mermaid.js.map

@@ -1 +1 @@
-{"version":3,"file":"mermaid.js","sourceRoot":"","sources":["../../src/diagram/mermaid.ts"],"names":[],"mappings":"AAGA,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,CAAc;IAC9B,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAChC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC;QAC1C,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;QAC5C,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;QACtC,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC;IACpC,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,MAAM,KAAK,GAAG,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,OAAqB,EAAE;IAC5D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC1E,OAAO;QACL,KAAK;QACL,EAAE;QACF,wFAAwF;QACxF,sEAAsE;QACtE,EAAE;QACF,YAAY;QACZ,SAAS,CAAC,CAAC,CAAC;QACZ,KAAK;QACL,EAAE;QACF,aAAa;QACb,EAAE;QACF,iBAAiB,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE;QACrC,2BAA2B,IAAI,CAAC,eAAe,IAAI,GAAG,EAAE;QACxD,sBAAsB,IAAI,CAAC,UAAU,IAAI,cAAc,EAAE;QACzD,uDAAuD;QACvD,gEAAgE;QAChE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"mermaid.js","sourceRoot":"","sources":["../../src/diagram/mermaid.ts"],"names":[],"mappings":"AAGA,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,CAAc;IAC9B,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAChC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC;QAC1C,KAAK,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;QAC5C,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;QACtC,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC;IACpC,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,MAAM,KAAK,GAAG,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,OAAqB,EAAE;IAC5D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC1E,OAAO;QACL,KAAK;QACL,EAAE;QACF,wFAAwF;QACxF,sEAAsE;QACtE,EAAE;QACF,YAAY;QACZ,SAAS,CAAC,CAAC,CAAC;QACZ,KAAK;QACL,EAAE;QACF,aAAa;QACb,EAAE;QACF,iBAAiB,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE;QACrC,2BAA2B,IAAI,CAAC,eAAe,IAAI,GAAG,EAAE;QACxD,sBAAsB,IAAI,CAAC,UAAU,IAAI,cAAc,EAAE;QACzD,uDAAuD;QACvD,gEAAgE;QAChE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;2EAC2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAErF,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAuC,EAAE;IACzF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,sBAAsB,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9F,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/diagram/validate.js

@@ -37,6 +37,28 @@ export function validateMermaid(src) {
     const body = trimmed.split(/\r?\n/).slice(1).filter((l) => l.trim());
     if (body.length === 0)
         errors.push("diagram has no nodes or edges");
+    // Balanced node-shape brackets — the most common hand-editing breakage.
+    for (const [open, close, name] of [["[", "]", "square"], ["(", ")", "round"], ["{", "}", "curly"]]) {
+        const opens = trimmed.split(open).length - 1;
+        const closes = trimmed.split(close).length - 1;
+        if (opens !== closes)
+            errors.push(`unbalanced ${name} brackets ('${open}' × ${opens}, '${close}' × ${closes})`);
+    }
+    // Edge sanity: an arrow edge must have a node on each side. Strip node-shape
+    // contents and edge labels first so `--` inside a label can't look like a link.
+    const EDGE = /-\.?-*>|={2,}>/;
+    for (const raw of body) {
+        const stripped = raw
+            .replace(/\[[^\]]*\]/g, "[]")
+            .replace(/\([^)]*\)/g, "()")
+            .replace(/\{[^}]*\}/g, "{}")
+            .replace(/\|[^|]*\|/g, " ");
+        if (!EDGE.test(stripped))
+            continue;
+        const parts = stripped.split(/-\.?-*>|={2,}>/).map((p) => p.trim());
+        if (parts.some((p) => p === ""))
+            errors.push(`edge with a missing endpoint: "${raw.trim()}"`);
+    }
     return { valid: errors.length === 0, errors };
 }
 /** Extract the first ```mermaid fenced block from a markdown document. */

package/dist/diagram/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/diagram/validate.ts"],"names":[],"mappings":"AAGA,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC"}
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/diagram/validate.ts"],"names":[],"mappings":"AAGA,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAEpE,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAU,EAAE,CAAC;QAC5G,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,eAAe,IAAI,OAAO,KAAK,MAAM,KAAK,OAAO,MAAM,GAAG,CAAC,CAAC;IAClH,CAAC;IAED,6EAA6E;IAC7E,gFAAgF;IAChF,MAAM,IAAI,GAAG,gBAAgB,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,GAAG;aACjB,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;aAC5B,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC;aAC3B,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC;aAC3B,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC"}

package/dist/nocode/assemble.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Derive the parts of a NoCodeApp that a graph implies but a hand-editor
+ * shouldn't have to maintain — `settings.mcp` (every mcpTool node's server must
+ * be declared or `validateApp` rejects it) and `variables` (each producing
+ * node's output). This is the same logic the browser builder runs on its canvas
+ * (`apps/builder/src/lib/assemble.ts`), lifted into the shared core so the CLI's
+ * `nocode fix` and the builder derive identically. Import-free by construction.
+ */
+import type { AppNode, McpRef, Variable, NoCodeApp } from "./types.js";
+/** The distinct `{serverId, toolName}` of every mcpTool node — the MCP allow-list. */
+export declare function deriveMcp(nodes: AppNode[]): McpRef[];
+/** Variables the graph produces, in node order: each input's variable + each step's `out`. */
+export declare function deriveVariables(nodes: AppNode[]): Variable[];
+/**
+ * Repair an app so it validates: ensure `settings.mcp` covers every mcpTool node
+ * and `variables` covers every produced value — WITHOUT dropping anything the
+ * author already declared (union by key). Safe on a partial/hand-stripped app:
+ * missing `nodes`/`variables`/`settings` are treated as empty and defaulted.
+ */
+export declare function repairApp(app: NoCodeApp): NoCodeApp;

package/dist/nocode/assemble.js

@@ -0,0 +1,65 @@
+function str(v) {
+    return typeof v === "string" ? v : "";
+}
+/** The distinct `{serverId, toolName}` of every mcpTool node — the MCP allow-list. */
+export function deriveMcp(nodes) {
+    const seen = new Set();
+    const refs = [];
+    for (const n of nodes) {
+        if (n.type !== "mcpTool")
+            continue;
+        const serverId = str(n.data.serverId);
+        const toolName = str(n.data.toolName);
+        if (!serverId || !toolName)
+            continue;
+        const key = `${serverId}::${toolName}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        const argMapping = (n.data.argMapping && typeof n.data.argMapping === "object" ? n.data.argMapping : {});
+        refs.push({ serverId, toolName, argMapping });
+    }
+    return refs;
+}
+/** Variables the graph produces, in node order: each input's variable + each step's `out`. */
+export function deriveVariables(nodes) {
+    const seen = new Set();
+    const vars = [];
+    const add = (key, type) => {
+        if (!key || seen.has(key))
+            return;
+        seen.add(key);
+        vars.push({ key, type, scope: "local" });
+    };
+    for (const n of nodes) {
+        if (n.type === "input")
+            add(str(n.data.variable) || str(n.data.key), "string");
+        else if (n.type === "mcpTool")
+            add(str(n.data.out), "json");
+        else if (n.type === "transform" || n.type === "condition")
+            add(str(n.data.out), "string");
+    }
+    return vars;
+}
+/**
+ * Repair an app so it validates: ensure `settings.mcp` covers every mcpTool node
+ * and `variables` covers every produced value — WITHOUT dropping anything the
+ * author already declared (union by key). Safe on a partial/hand-stripped app:
+ * missing `nodes`/`variables`/`settings` are treated as empty and defaulted.
+ */
+export function repairApp(app) {
+    const nodes = Array.isArray(app.nodes) ? app.nodes : [];
+    const existingVars = Array.isArray(app.variables) ? app.variables : [];
+    const varKeys = new Set(existingVars.map((v) => v.key));
+    const variables = [...existingVars, ...deriveVariables(nodes).filter((v) => !varKeys.has(v.key))];
+    const existingMcp = Array.isArray(app.settings?.mcp) ? app.settings.mcp : [];
+    const mcpKeys = new Set(existingMcp.map((m) => `${m.serverId}::${m.toolName}`));
+    const mcp = [...existingMcp, ...deriveMcp(nodes).filter((m) => !mcpKeys.has(`${m.serverId}::${m.toolName}`))];
+    return {
+        ...app,
+        nodes,
+        variables,
+        settings: { ...app.settings, storage: app.settings?.storage ?? "memory", mcp },
+    };
+}
+//# sourceMappingURL=assemble.js.map

package/dist/nocode/assemble.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assemble.js","sourceRoot":"","sources":["../../src/nocode/assemble.ts"],"names":[],"mappings":"AAUA,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,KAAgB;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,GAAG,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAA2B,CAAC;QACnI,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAAkB,EAAQ,EAAE;QACpD,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;aAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;aACvD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAc;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAElG,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAE9G,OAAO;QACL,GAAG,GAAG;QACN,KAAK;QACL,SAAS;QACT,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,EAAE,GAAG,EAAE;KAC/E,CAAC;AACJ,CAAC"}

package/dist/nocode/core.d.ts

@@ -10,3 +10,4 @@ export * from "./runtime.js";
 export * from "./mermaid.js";
 export * from "./prompt.js";
 export * from "./examples.js";
+export * from "./assemble.js";

package/dist/nocode/core.js

@@ -10,4 +10,5 @@ export * from "./runtime.js";
 export * from "./mermaid.js";
 export * from "./prompt.js";
 export * from "./examples.js";
+export * from "./assemble.js";
 //# sourceMappingURL=core.js.map

package/dist/nocode/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/nocode/core.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/nocode/core.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cotrrackpro-dev/sdk",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Typed TypeScript SDK for the CoTrackPro platform — transport, pluggable auth, typed API resources, and MCP/artifact bindings. Consumed by the CLI and every cotrackpro* repo.",
   "license": "MIT",
   "type": "module",