@happyvertical/smrt-dev-mcp 0.40.61 → 0.40.63

package/AGENTS.md

@@ -44,6 +44,36 @@ amplify into unbounded filesystem work. Discovery also stops before package
 reads when more than 512 packages match, revalidates confinement immediately
 before reading each package, and runs at most eight scanner fallbacks at once.
 
+### Consumer apps (#2275)
+
+An app that installs the published packages authors none of them, so workspace
+discovery alone sees nothing. Every installed `@happyvertical/smrt-*` package,
+plus the known SDK packages, is resolved from the project's and each workspace
+package's `node_modules/@happyvertical` scope directory and marked
+`isInstalledDependency`. This is an enumeration, not a walk: pnpm materializes
+a store whose entries link back out to their siblings, so a descent reads the
+same package once per path that reaches it. Real paths deduplicate the result;
+each package is still read through its `node_modules` path, because a realpath
+escapes the root wherever an ancestor is a symlink. A workspace package linked
+into a sibling's `node_modules` is authored source and is never marked
+installed.
+
+- `--scope installed` reports exactly those packages. `local` and `package`
+  exclude them; `project` includes them; the index also lists them separately
+  as `installedPackages` (`schemaVersion: 3`). It is a reporting scope:
+  `dev:knowledge-check` has no authored packages to gate under it.
+- Each package carries `agentDocSha256`, the hash of its shipped `AGENTS.md`.
+  That is the drift signal a consumer diffs against a recorded baseline — a
+  version bump is not, because most releases do not touch a documented surface.
+- The freshness gate skips installed packages entirely: indexed, never checked.
+  A consumer cannot add an `AGENTS.md` to a dependency, and a published
+  package's artifact hashes cannot match its republished sources.
+- Coverage and the `no-smrt-objects-discovered` guard count authored packages
+  only. Dependencies ship their own objects, so counting them would make that
+  guard unreachable in exactly the projects most likely to have broken
+  discovery. A project whose own packages contribute nothing while its
+  dependencies do gets the `no-authored-smrt-objects` warning instead.
+
 Per package, objects resolve in this order, and the winner is recorded in
 `objectSource` with a reason:
 
@@ -52,7 +82,7 @@ Per package, objects resolve in this order, and the winner is recorded in
 3. `scanner` — `OxcScanner` + `ManifestAdapter` over the package's sources
 4. `none` — with a machine-readable reason
 
-The index exposes `coverage` and `diagnostics` (`schemaVersion: 2`). Zero
+The index exposes `coverage` and `diagnostics` (added in `schemaVersion: 2`). Zero
 discovered objects is an **error-grade** diagnostic that names the roots and
 artifact paths checked plus the fix, and it propagates into
 `smrt-architecture`/`smrt-review`/`reflect-*` results and prompt bundles.

package/README.md

@@ -124,7 +124,7 @@ dependency edge — by connected component, keeping the copy the others depend o
 and reports `duplicate-object-identity`. Unrelated packages that share a class
 name stay distinct.
 
-The index therefore carries two extra blocks (`schemaVersion: 2`):
+The index therefore carries two extra blocks (added in `schemaVersion: 2`):
 
 - `coverage` — `workspaceGlobs`, `workspaceGlobSource`, `packageDirs`,
   `packagesWithObjects`, and `packagesWithoutObjects` with a reason, the artifact
@@ -134,6 +134,13 @@ The index therefore carries two extra blocks (`schemaVersion: 2`):
   commands to fix it, so an unseen project is never reported as a project with no
   model. `smrt-architecture`, `smrt-review`, and the `reflect-*` tools surface it.
 
+`schemaVersion: 3` adds the consumer-app view: `installedPackages` lists every
+installed `@happyvertical/smrt-*` package plus the known SDK packages — the ones
+the project installs rather than authors — each with `isInstalledDependency`, its
+version, and `agentDocSha256`, the hash of its shipped `AGENTS.md`. That hash is
+what a downstream project diffs against a recorded baseline to find documentation
+drift. Reach it with `--scope installed`.
+
 ## Response Budgets
 
 Knowledge and introspection tools return a **summary** by default and accept
@@ -300,7 +307,7 @@ coverage, relationship-v2 counts, and freshness status.
 | Parameter | Type | Required | Description |
 |-----------|------|----------|-------------|
 | `rootDir` | `string` | No | Project root directory (default: cwd) |
-| `scope` | `string` | No | `project`, `local`, `package`, or `sdk` |
+| `scope` | `string` | No | `project`, `local`, `package`, `sdk`, or `installed` |
 | `package` | `string` | No | Package name or short name to focus |
 
 ### `check-knowledge-freshness`
@@ -323,7 +330,7 @@ Alias over the deterministic checker that emphasizes downstream
 | `rootDir` | `string` | No | Project root directory (default: cwd) |
 | `changed` | `boolean` | No | Limit stale-pattern checks to changed files |
 | `strict` | `boolean` | No | Treat stale-pattern findings as errors |
-| `scope` | `string` | No | `project`, `local`, `package`, or `sdk` |
+| `scope` | `string` | No | `project`, `local`, `package`, `sdk`, or `installed` |
 | `package` | `string` | No | Package name or short name to focus |
 
 ### `build-review-context`

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACN,KAAK,IAAI,EACV,MAAM,8BAA8B,CAAC;AAqBtC,eAAO,MAAM,cAAc,QAAuB,CAAC;AAwenD,eAAO,MAAM,KAAK,EAAE,IAAI,EAO0C,CAAC;AAEnE,wBAAgB,YAAY,IAAI,MAAM,CAgfrC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACN,KAAK,IAAI,EACV,MAAM,8BAA8B,CAAC;AAqBtC,eAAO,MAAM,cAAc,QAAuB,CAAC;AAwenD,eAAO,MAAM,KAAK,EAAE,IAAI,EAO0C,CAAC;AAEnE,wBAAgB,YAAY,IAAI,MAAM,CAkfrC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as checkKnowledgeFreshnessFromIndex, d as smrtReview, i as checkKnowledgeFreshness, n as buildKnowledgeIndex, r as buildReviewContext, s as packageDocPaths, t as buildArchitectureContext, u as smrtArchitecture } from "./knowledge-DUUhTM5u.js";
+import { a as checkKnowledgeFreshnessFromIndex, d as smrtReview, i as checkKnowledgeFreshness, n as buildKnowledgeIndex, r as buildReviewContext, s as packageDocPaths, t as buildArchitectureContext, u as smrtArchitecture } from "./knowledge-CCX7oQzQ.js";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -1330,7 +1330,8 @@ var TOOLS = [
 						"project",
 						"local",
 						"package",
-						"sdk"
+						"sdk",
+						"installed"
 					],
 					default: "project"
 				},
@@ -1371,7 +1372,8 @@ var TOOLS = [
 						"project",
 						"local",
 						"package",
-						"sdk"
+						"sdk",
+						"installed"
 					],
 					default: "project"
 				},
@@ -1420,7 +1422,8 @@ var TOOLS = [
 						"project",
 						"local",
 						"package",
-						"sdk"
+						"sdk",
+						"installed"
 					],
 					default: "project"
 				},
@@ -1500,7 +1503,8 @@ var TOOLS = [
 						"project",
 						"local",
 						"package",
-						"sdk"
+						"sdk",
+						"installed"
 					],
 					default: "project"
 				},
@@ -1625,7 +1629,7 @@ function createServer() {
 					},
 					{
 						name: "scope",
-						description: "Knowledge scope: project, local, package, or sdk.",
+						description: "Knowledge scope: project, local, package, sdk, or installed.",
 						required: false
 					},
 					{
@@ -1662,7 +1666,7 @@ function createServer() {
 					},
 					{
 						name: "scope",
-						description: "Knowledge scope: project, local, package, or sdk.",
+						description: "Knowledge scope: project, local, package, sdk, or installed.",
 						required: false
 					},
 					{
@@ -1947,7 +1951,8 @@ function sanitizeKnowledgeIndex(index) {
 		rootDir: ".",
 		packages,
 		smrtPackages: packages.filter((pkg) => pkg.kind === "smrt"),
-		sdkPackages: packages.filter((pkg) => pkg.kind === "sdk")
+		sdkPackages: packages.filter((pkg) => pkg.kind === "sdk"),
+		installedPackages: packages.filter((pkg) => pkg.isInstalledDependency)
 	};
 }
 /**