@happyvertical/smrt-dev-mcp 0.40.59 → 0.40.61

package/AGENTS.md

@@ -65,11 +65,12 @@ member package owns, mirroring the member-excluded scan.
 
 ## Agent Skills
 
-Bundled skills live under `agent-skills/`. They are plain Markdown procedures
+Bundled skills live under `skills/`, the Agent Plugins fixed discovery
+location. They are plain Markdown procedures
 with YAML frontmatter (`name` and `description`) and harness-neutral body text.
 Skill-aware harnesses can parse the frontmatter; other harnesses can ignore it.
 
-- `agent-skills/smrt-code-review/SKILL.md` — downstream SMRT code review workflow.
+- `skills/smrt-code-review/SKILL.md` — downstream SMRT code review workflow.
   Agents should fetch it with `get-agent-skill`, then call `smrt-review` for
   deterministic context, inspect the actual diff, and produce a findings-first
   review.
@@ -97,7 +98,8 @@ launcher or a small wrapper script with an absolute Node path.
 - `src/index.ts` — MCP server setup, tool registration
 - `src/knowledge/index.ts` — deterministic SMRT, SDK, and downstream domain knowledge discovery; workspace-glob expansion, provenance, coverage, and diagnostics
 - `src/agent-skills.ts` — bundled skill registry and file loader
-- `agent-skills/smrt-code-review/SKILL.md` — downstream SMRT review procedure
+- `plugin.json` / `mcp.json` — Agent Plugins 1.0.0 portable root manifests
+- `skills/smrt-code-review/SKILL.md` — downstream SMRT review procedure
 - `src/tools/generate-smrt-class.ts` — class generation logic and package-ready templates
 - `src/tools/introspect-project.ts` — manifest-first project scanning, falling back to `@happyvertical/smrt-scanner`
 - `src/tools/review-smrt-project.ts` — advisory ecosystem-alignment checks for downstream projects
@@ -112,6 +114,15 @@ launcher or a small wrapper script with an absolute Node path.
   fallback
 - **Skill loading**: bundled skills must be included in `package.json` `files`
   because runtime reads them from the installed package directory
+- **Portable plugin boundary**: `mcp.json` launches only `./dist/index.js` from
+  the plugin root. Paths must remain contained after resolution. Clients, not
+  the package, provide the reserved `PLUGIN_ROOT` and `PLUGIN_DATA` environment
+  variables and manage OAuth or all other credentials; do not add secret-bearing
+  environment variables or headers to portable config.
+- **Working Draft compatibility**: Agent Plugins 1.0.0 remains a Working Draft.
+  Keep `plugin.json` and `mcp.json` pinned to the canonical 1.0.0 schema IDs,
+  validate against the packaged `schemas/agent-plugins-1.0.0/` snapshots
+  offline, and do not add streamable HTTP until #2147 provides the endpoint.
 - **Field type mapping**: `text`, `integer`, `decimal`, `boolean`, `datetime`, `json` — maps to SMRT field helpers (but prefer TypeScript defaults per framework convention)
 - **Never call `ManifestGenerator` from a tool path**: `generateSchemas` and
   friends write progress lines to **stdout** through the SDK logger, which is the

package/README.md

@@ -10,6 +10,37 @@ or architecture prompt bundles.
 pnpm install @happyvertical/smrt-dev-mcp
 ```
 
+## Agent Plugins package
+
+The published package root is a self-contained [Agent Plugins 1.0.0](https://agent-plugins.org/specification)
+plugin. Compatible clients discover `plugin.json`, `mcp.json`, and
+`skills/smrt-code-review/SKILL.md` directly from the installed package root.
+The shipped `mcp.json` declares only the local stdio server:
+
+```json
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "smrt-dev-mcp": { "type": "stdio", "command": "./dist/index.js" }
+  }
+}
+```
+
+The executable path is plugin-relative and must remain inside the resolved
+plugin root. Clients provide `PLUGIN_ROOT` (the resolved package root) and the
+client-managed, persistent `PLUGIN_DATA` directory; this package does not set
+or override either reserved environment variable. Portable configuration never
+contains credentials, secrets, authorization headers, or OAuth settings.
+Clients own authorization interaction and credential storage.
+
+Agent Plugins 1.0.0 is a Working Draft. This package targets only the canonical
+1.0.0 schema identifiers and includes pinned schema snapshots for offline
+validation; clients must not fetch schemas when loading the package.
+
+`streamable-http` is not shipped: its endpoint is gated on #2147. A future,
+credential-free configuration could declare a `streamable-http` URL only after
+that endpoint exists; it must not be inferred from this package today.
+
 ## Usage
 
 Add to your project-local `.mcp.json`, Codex MCP config, or Claude Desktop
@@ -135,6 +166,14 @@ manifest artifacts before falling back to raw manifest/doc scanning. The runtime
 `manifest.json` stays focused on object registration; `smrt-knowledge.json` is
 the agent/developer contract.
 
+## Cache Metadata
+
+The deploy-static `tools/list` and `prompts/list` catalogs advertise a one-day
+`private` cache lifetime. Workspace knowledge resources (`resources/list` and
+`resources/read`) are also `private`, but use `ttlMs: 0`: they are rebuilt from
+the current workspace on each request and have no transport-visible invalidation
+signal that could make a positive freshness promise honest.
+
 After using a model to update package docs or expertise, always run the
 deterministic checker again:
 
@@ -163,7 +202,8 @@ smrt knowledge:architecture-context "tenant-aware publishing workflow" --format
 
 ## Agent Skills
 
-The package ships harness-agnostic agent skills under `agent-skills/`.
+The package ships harness-agnostic agent skills under `skills/`, the fixed
+Agent Plugins discovery location.
 
 Downstream agents should fetch the review procedure before starting a formal
 s-m-r-t review: