@event4u/agent-config 17.2.1 → 17.4.0

package/src/scripts/lint_marketplace.ts

@@ -17,6 +17,8 @@
  *   - metadata.version must match package.json (single source of truth)
  *   - every version field in BOTH .augment-plugin/ manifests matches
  *     package.json too — see check_augment_manifests()
+ *   - the Copilot plugin and Gemini extension match it in `version` and in the
+ *     pinned `npx` argument — see check_listing_manifests()
  *   - the union of plugins[].skills[] must be EXACTLY the pointer skill
  *     (./.claude-plugin/skills/install-agent-config) — a repopulated
  *     content-skill list FAILS by design
@@ -29,6 +31,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
+import { LISTING_MANIFESTS, listingVersionFindings } from "./_lib/listing_manifests.js";
 import { assertWatchlistResolves, DeadScopeError } from "./_lib/scan_scope.js";
 
 const ROOT = ".";
@@ -149,6 +152,34 @@ export function check_augment_manifests(
   }
 }
 
+/**
+ * The Copilot discovery plugin and the Gemini extension carry the package
+ * version AND pin it inside their `npx` arguments; a crawler installs from the
+ * default branch, so either copy drifting ships a stale server to every new
+ * install. Same sync rule as the Augment twins, plus the pin.
+ */
+export function check_listing_manifests(
+  pkgVersion: string,
+  errors: string[],
+  base: string = ROOT,
+): void {
+  for (const rel of LISTING_MANIFESTS) {
+    const file = path.join(base, rel);
+    if (!_exists(file)) {
+      errors.push(`${file} not found (a listing manifest the release version-syncs)`);
+      continue;
+    }
+    let data: unknown;
+    try {
+      data = JSON.parse(fs.readFileSync(file, "utf-8"));
+    } catch (e) {
+      errors.push(`${file} is not valid JSON: ${e instanceof Error ? e.message : String(e)}`);
+      continue;
+    }
+    errors.push(...listingVersionFindings(file, data, pkgVersion));
+  }
+}
+
 /** Resolve a key path, expanding `*` over array indices. Returns [label, value]. */
 function _resolveVersionField(
   data: JsonValue,
@@ -185,6 +216,7 @@ export function main(): number {
         ".claude-plugin/marketplace.json",
         ".augment-plugin/plugin.json",
         ".augment-plugin/marketplace.json",
+        ...LISTING_MANIFESTS,
         "package.json",
         `${POINTER_SKILL_ENTRY.replace(/^\.\//, "")}/SKILL.md`,
       ],
@@ -248,6 +280,7 @@ export function main(): number {
       }
       if (typeof pkgVersion === "string") {
         check_augment_manifests(pkgVersion, errors);
+        check_listing_manifests(pkgVersion, errors);
       }
     }
   } else {

package/src/scripts/lint_mcp_registry_manifest.ts

@@ -27,6 +27,7 @@ import * as path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
 import { assertWatchlistResolves, DeadScopeError } from './_lib/scan_scope.js';
+import { REGISTRY_DESCRIPTION_MAX, SERVER_SCHEMA_URL } from './build_mcp_registry_manifest.js';
 
 const _HERE = path.resolve(fileURLToPath(import.meta.url));
 // ROOT = Path(__file__).resolve().parents[2]
@@ -286,6 +287,37 @@ function _validateSchema(data: Json, schema: JsonObject): SchemaError | null {
     return errors.length ? errors[0]! : null;
 }
 
+/**
+ * What the live registry rejects or mis-installs, checked before a release
+ * publishes it: the schema pin, the 100-character description cap, and the
+ * `mcp-server` argument without which a client starts the bare CLI.
+ */
+export function checkRegistryPayload(server: JsonObject): string | null {
+    if (server['$schema'] !== SERVER_SCHEMA_URL) {
+        return `$schema must be ${SERVER_SCHEMA_URL} (got ${String(server['$schema'])})`;
+    }
+    const description = server['description'];
+    if (typeof description !== 'string' || description.length === 0) {
+        return 'description is missing — set package.json agentConfig.registryDescription';
+    }
+    if (description.length > REGISTRY_DESCRIPTION_MAX) {
+        return `description is ${description.length} characters; the registry accepts at most ${REGISTRY_DESCRIPTION_MAX}`;
+    }
+    const packages = server['packages'];
+    const first = Array.isArray(packages) ? (packages[0] as JsonObject | undefined) : undefined;
+    const args = first?.['packageArguments'];
+    const startsServer =
+        Array.isArray(args) &&
+        args.some((a) => {
+            const arg = a as JsonObject;
+            return arg['type'] === 'positional' && arg['value'] === 'mcp-server';
+        });
+    if (!startsServer) {
+        return 'the npm package entry has no positional `mcp-server` argument, so a client would start the CLI';
+    }
+    return null;
+}
+
 function main(argv: readonly string[]): number {
     let args: Args;
     try {
@@ -369,6 +401,10 @@ function main(argv: readonly string[]): number {
                 `(${String(pkg_for_gate['mcpName'])})`,
         );
     }
+    const registryProblem = checkRegistryPayload(server_payload);
+    if (registryProblem !== null) {
+        return _fail(`server.json: ${registryProblem}`);
+    }
 
     if (!args.quiet) {
         const registries = (manifest as JsonObject)['registries'];

package/src/scripts/mcp_server/consumer_tool_catalog.json

@@ -237,6 +237,9 @@
         "properties": {
           "area": {
             "type": "string"
+          },
+          "project": {
+            "type": "string"
           }
         },
         "additionalProperties": false
@@ -247,7 +250,7 @@
     },
     {
       "name": "graph_dead",
-      "description": "Symbols with no accepted reference that no declared entry point names. REFUSES (status `refused`) while a source is unreadable: with no exportedness recorded, an exported-but-unimported symbol is indistinguishable from a dead one. Never a deletion recommendation.",
+      "description": "Symbols no accepted reference and no declared entry point names. REFUSES (status `refused`) while a source is unreadable: without recorded exportedness an exported-but-unimported symbol looks dead. Never a deletion recommendation.",
       "side_effect": "ro",
       "implemented_on": [
         "stdio"
@@ -257,12 +260,46 @@
         "properties": {
           "entry_points": {
             "type": "string",
-            "description": "Path under this root to a newline-separated id/label list; `#` comments ok."
+            "description": "Path under this root: newline-separated ids or labels, `#` comments ok."
           },
           "accept_missing_exports": {
             "type": "boolean",
             "default": false,
             "description": "Answer anyway, accepting the gap. Never a default."
+          },
+          "project": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": false
+      },
+      "annotations": {
+        "readOnlyHint": true
+      }
+    },
+    {
+      "name": "graph_estate",
+      "description": "Estate index across registered projects: package users, where a name is used, advisory reach. Other graph tools take `project`.",
+      "side_effect": "ro",
+      "implemented_on": [
+        "stdio"
+      ],
+      "input_schema": {
+        "type": "object",
+        "required": [
+          "query"
+        ],
+        "properties": {
+          "query": {
+            "type": "string",
+            "enum": [
+              "where-used",
+              "projects-using",
+              "advisory-impact"
+            ]
+          },
+          "name": {
+            "type": "string"
           }
         },
         "additionalProperties": false
@@ -273,7 +310,7 @@
     },
     {
       "name": "graph_impact",
-      "description": "What a diff can break: callers, dependents and test files reaching the changed symbols. Walks only stated-fact edges, never a same-name guess, and reports the guesses refused. Runs `git diff` for the rev.",
+      "description": "What a diff can break: callers, dependents and test files reaching the changed symbols, over stated-fact edges only (refused guesses reported). Runs `git diff` for the rev.",
       "side_effect": "shell",
       "implemented_on": [
         "stdio"
@@ -298,6 +335,9 @@
             "type": "boolean",
             "default": false,
             "description": "Instead return changed symbols no test imports."
+          },
+          "project": {
+            "type": "string"
           }
         },
         "additionalProperties": false
@@ -315,7 +355,11 @@
       ],
       "input_schema": {
         "type": "object",
-        "properties": {},
+        "properties": {
+          "project": {
+            "type": "string"
+          }
+        },
         "additionalProperties": false
       },
       "annotations": {
@@ -324,7 +368,7 @@
     },
     {
       "name": "graph_node",
-      "description": "One symbol in full: where it is declared, what reaches it, what it reaches, and how connected it is. Resolves EXACTLY (node id, then label) and refuses anything it cannot — it never scores free text, so an answer is always about the node you named.",
+      "description": "One symbol in full: where it is declared, what reaches it, what it reaches, how connected it is. Resolves EXACTLY (node id, then label) and refuses anything else — never scores free text.",
       "side_effect": "ro",
       "implemented_on": [
         "stdio"
@@ -347,7 +391,7 @@
               "both"
             ],
             "default": "both",
-            "description": "Which edges to walk. `in` = who reaches it, `out` = what it reaches."
+            "description": "`in` = who reaches it, `out` = what it reaches."
           },
           "depth": {
             "type": "integer",
@@ -372,9 +416,13 @@
               "migrates",
               "persists",
               "relates",
+              "injects",
               "documents"
             ],
-            "description": "Restrict to one relation. Omit for all of them."
+            "description": "One relation only; omit for all."
+          },
+          "project": {
+            "type": "string"
           }
         },
         "additionalProperties": false
@@ -385,7 +433,7 @@
     },
     {
       "name": "graph_path",
-      "description": "The shortest relation chain between two symbols, direction preserved. Answers \"how does A reach B\" without reading the files between. `(no path found)` when unconnected is an answer.",
+      "description": "The shortest relation chain between two symbols, direction kept: how A reaches B without reading the files between. `(no path found)` is an answer.",
       "side_effect": "ro",
       "implemented_on": [
         "stdio"
@@ -408,8 +456,10 @@
           "budget": {
             "type": "integer",
             "minimum": 1,
-            "default": 1500,
-            "description": "Token budget for lines."
+            "default": 1500
+          },
+          "project": {
+            "type": "string"
           }
         },
         "additionalProperties": false
@@ -420,7 +470,7 @@
     },
     {
       "name": "graph_query",
-      "description": "A symbol's direct outgoing relations — calls, imports, uses, inherits — each line carrying its confidence and resolution mechanism. For \"what does this touch\" before reading a file.",
+      "description": "A symbol's direct outgoing relations (calls, imports, uses, inherits), each with its confidence and resolution mechanism: \"what does this touch\" before reading a file.",
       "side_effect": "ro",
       "implemented_on": [
         "stdio"
@@ -438,8 +488,10 @@
           "budget": {
             "type": "integer",
             "minimum": 1,
-            "default": 1500,
-            "description": "Token budget for lines."
+            "default": 1500
+          },
+          "project": {
+            "type": "string"
           }
         },
         "additionalProperties": false
@@ -450,7 +502,7 @@
     },
     {
       "name": "graph_tests_for",
-      "description": "Which test files exercise a symbol, derived from a test file importing it or its module. Empty means no test imports it — a finding, not an error.",
+      "description": "Test files that exercise a symbol: a test file imports it or its module. Empty means none does — a finding, not an error.",
       "side_effect": "ro",
       "implemented_on": [
         "stdio"
@@ -463,7 +515,10 @@
         "properties": {
           "symbol": {
             "type": "string",
-            "description": "Node id `<relpath>#<sym>`, label, or free text."
+            "description": "Node id, label, or free text."
+          },
+          "project": {
+            "type": "string"
           }
         },
         "additionalProperties": false