@godxjp/ui 27.4.1 → 27.6.0

package/scripts/_agent-setup.mjs

@@ -16,12 +16,14 @@ import {
   existsSync,
   mkdirSync,
   readFileSync,
+  realpathSync,
   renameSync,
   statSync,
   unlinkSync,
   writeFileSync,
 } from "node:fs";
-import { basename, dirname, join } from "node:path";
+import { homedir } from "node:os";
+import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 /** This package's own root — the source of the version we stamp with. */
@@ -425,6 +427,83 @@ export function ensureMcpJson(root) {
   return created ? "created" : "added";
 }
 
+/**
+ * Registrations of the catalog server OUTSIDE the project — READ-ONLY (gh#722).
+ *
+ * `.mcp.json` is not the only place an agent's MCP servers come from. Claude Code keeps
+ * user-scoped servers in the top-level `mcpServers` of `~/.claude.json` (under
+ * `$CLAUDE_CONFIG_DIR` when that is set) and local-scoped ones — private to one checkout — under
+ * `projects[<absolute project path>].mcpServers` of the same file. Both are live beside the
+ * project's entry. Measured: a user-scoped `godxjp-ui` serving a ≤ 21.0.0 catalog answered next
+ * to the project's pinned `godx-ui`, and an agent took a removed component's page from it.
+ *
+ * That file belongs to the user, spans every project, and is not ours to edit: this only READS
+ * it. A missing, unreadable or malformed file yields nothing, silently. Returns
+ * `{ key, scope, pin }` per entry — never `env`, which is where secrets live.
+ */
+export function findOutOfProjectUiMcp(
+  root,
+  configDir = process.env.CLAUDE_CONFIG_DIR || homedir(),
+) {
+  try {
+    const read = readJsonFile(join(configDir, ".claude.json"));
+    if (read.state !== "ok") return [];
+    const found = [];
+    const collect = (servers, scope) => {
+      if (!servers || typeof servers !== "object" || Array.isArray(servers)) return;
+      for (const [key, entry] of Object.entries(servers)) {
+        if (!runsUiMcp(entry)) continue;
+        const parts = [entry.command, ...(Array.isArray(entry.args) ? entry.args : [])];
+        const pin = parts.find(
+          (part) => typeof part === "string" && /(^|\/)@godxjp\/ui-mcp(@|$)/.test(part),
+        );
+        found.push({ key, scope, pin });
+      }
+    };
+    collect(read.json.mcpServers, "user");
+    const projects = read.json.projects;
+    if (projects && typeof projects === "object" && !Array.isArray(projects)) {
+      const paths = new Set([resolve(root)]);
+      try {
+        paths.add(realpathSync(root));
+      } catch {
+        // A root that cannot be resolved is looked up by its given path only.
+      }
+      for (const path of paths) collect(projects[path]?.mcpServers, "local");
+    }
+    return found;
+  } catch {
+    return [];
+  }
+}
+
+const shellWord = (word) => (/^[\w.@/-]+$/.test(word) ? word : `'${word.replace(/'/g, "'\\''")}'`);
+
+/**
+ * What `sync-rules` and `init-agent` print about out-of-project registrations: key, pin, that it
+ * was left untouched, and the command that updates it. Empty string when there are none.
+ */
+export function outOfProjectUiMcpReport(root, configDir) {
+  const found = findOutOfProjectUiMcp(root, configDir);
+  if (found.length === 0) return "";
+  const expected = mcpServerFor(root).args[0];
+  let out =
+    `\n  @godxjp/ui → @godxjp/ui-mcp is ALSO registered outside this project, in Claude Code's ` +
+    `.claude.json.\n  It answers beside the project's .mcp.json entry (${expected}) and an agent ` +
+    `can call either — the tool names differ only by the key.\n`;
+  for (const { key, scope, pin } of found) {
+    const k = shellWord(key);
+    const runs = /@godxjp\/ui-mcp@\S+$/.test(pin ?? "")
+      ? pin
+      : `${pin ?? "@godxjp/ui-mcp"} (unpinned: resolves the latest release)`;
+    out +=
+      `    • "${key}" (${scope} scope) runs ${runs} — outside the project, left untouched.\n` +
+      `        remove it:  claude mcp remove ${k} -s ${scope}\n` +
+      `        or re-pin:  claude mcp remove ${k} -s ${scope} && claude mcp add ${k} -s ${scope} -- npx ${expected}\n`;
+  }
+  return out;
+}
+
 /** Ensure `.claude/settings.json` has the audit PostToolUse + workflow SessionStart hooks. */
 export function ensureClaudeHooks(root) {
   const path = join(root, ".claude", "settings.json");

package/scripts/cli.mjs

@@ -34,7 +34,11 @@ const HELP = {
   Refresh the package-owned agent files for the installed @godxjp/ui version: the godx-ui entry in
   .mcp.json, the managed CLAUDE.md block, .claude/godxjp-ui-workflow.md and .ai/rules/godxjp-ui.md.
   It is the postinstall step, run by hand — use it when the app installs with ignore-scripts=true,
-  where postinstall never runs and the rules go stale. Silent no-op in CI and when opted out.`,
+  where postinstall never runs and the rules go stale. Silent no-op in CI and when opted out.
+
+  It also READS Claude Code's ~/.claude.json and reports any @godxjp/ui-mcp registered there (user
+  scope, or local scope for this project): key, pin, and the claude mcp command that updates it.
+  That file is outside the project and is never written; env values are never printed.`,
   audit: `godxjp-ui audit [dir …] [--changed] [--format json] [--quiet] [--rules]
 
   Static UI-standardization audit over source (regex, no browser, fast). Exits non-zero on errors.

package/scripts/init-agent-kit.mjs

@@ -4,6 +4,7 @@ import {
   ensureClaudeHooks,
   ensureClaudeMd,
   ensureMcpJson,
+  outOfProjectUiMcpReport,
   shouldSkip,
   writeWorkflowMd,
 } from "./_agent-setup.mjs";
@@ -28,6 +29,8 @@ console.log(
 );
 console.log(`    • .claude/godxjp-ui-workflow.md — ${md ? "created" : "already present"}`);
 console.log(`    • CLAUDE.md — godxjp-ui mandate (${claudeMd})`);
+const outside = outOfProjectUiMcpReport(root);
+if (outside) console.log(outside);
 console.log(`
   The auto-audit hook now runs on every Write/Edit of a .tsx file and feeds findings
   back to the agent — it cannot skip the audit. Restart your agent to load the MCP + hooks.

package/scripts/postinstall.mjs

@@ -8,6 +8,7 @@ import {
   ensureClaudeMd,
   ensureMcpJson,
   ensureConsumerRules,
+  outOfProjectUiMcpReport,
   refreshGuineaPigSkill,
   shouldSkip,
   writeWorkflowMd,
@@ -25,6 +26,10 @@ try {
   if (r.startsWith("left untouched") || r.startsWith("present (custom godx-ui")) {
     console.log(`\n  @godxjp/ui → .mcp.json ${r}\n`);
   }
+  // A registration outside the project is reported whatever the project file says, before any of
+  // the quiet exits below: it is live beside ours and nothing here will ever change it (gh#722).
+  const outside = outOfProjectUiMcpReport(root);
+  if (outside) console.log(outside);
   // The mandate is plain text the agent reads every turn (CLAUDE.md block + workflow file). It
   // changes nothing in the dev loop, so it is installed by default: an agent that never saw the
   // but no mandate). Only the hooks — which DO change the loop — stay behind `init-agent`.