@happyvertical/smrt-dev-mcp 0.40.65 → 0.40.67

package/AGENTS.md

@@ -18,6 +18,7 @@ deterministic SMRT ecosystem knowledge, and portable agent workflows.
 | `build-domain-review-context` | Domain-scoped review context builder with `scope`/`package` filters |
 | `smrt-review` | Returns deterministic review findings and a reusable review prompt bundle |
 | `build-architecture-context` | Builds architecture planning context from an idea or docs |
+| `build-package-specialist-context` | Builds deterministic package-specific Workbench context and source references |
 | `build-domain-architecture-context` | Domain-scoped architecture context builder with `scope`/`package` filters |
 | `smrt-architecture` | Recommends SMRT/SDK packages, object-model sketch, risks, and questions |
 | `list-agent-skills` | Lists bundled harness-agnostic agent skills |
@@ -146,6 +147,16 @@ launcher or a small wrapper script with an absolute Node path.
 - **Domain artifacts first**: discovery must prefer `.smrt/smrt-knowledge.json`,
   then `dist/smrt-knowledge.json`, then source artifacts before raw manifest
   fallback
+- **Structural projection stays additive and sanitized**: schema-version-1
+  domain artifacts and raw-manifest fallback both carry tenant mode/field,
+  `cti`/`sti`, conflict columns, method signatures, and selected field schema
+  facts. Preserve `methods: string[]`; remove top-level and `_meta` sensitive
+  fields before deriving both fields and relationships, and remove their field
+  and snake-case column names from projected conflict columns.
+  If a custom tenant field is sensitive, retain scope/mode but omit its name.
+  A schema-v1 artifact without `sensitiveFieldsExcluded: true` is legacy: use
+  the owning raw manifest to allowlist its current non-sensitive fields and
+  structural identifiers, or omit uncorroborated field facts fail-closed.
 - **Skill loading**: bundled skills must be included in `package.json` `files`
   because runtime reads them from the installed package directory
 - **Portable plugin boundary**: `mcp.json` launches only `./dist/index.js` from
@@ -185,7 +196,8 @@ launcher or a small wrapper script with an absolute Node path.
 - **Budgets are enforced at the transport boundary**: `KnowledgePackage` carries
   the full `agentDoc` and domain manifest, so the MCP handlers project a compact
   package record unless `detail: 'full'`. Library callers (the CLI) still receive
-  the full objects.
+  the full objects. Structural object facts render into prompt Markdown only in
+  full detail; summary mode remains names/counts/paths.
 - **Private packages skip packaging checks**: the `files` allowlist governs npm
   publication, so `private: true` packages are exempt; authored docs are still
   required. A workspace root is exempt from both — but **only when member

package/README.md

@@ -154,10 +154,13 @@ Knowledge and introspection tools return a **summary** by default and accept
   budget.
 - `smrt-architecture`, `smrt-review`, and the `build-*-context` tools list
   authored `AGENTS.md` and module docs **by path** rather than embedding them,
-  and return compact package records.
+  and return compact package records. With `detail: "full"`, their prompt
+  bundles also render high-signal object facts: tenant mode/field, `cti`/`sti`
+  strategy, conflict columns, method signatures, and field
+  defaults/constraints/readonly/transient flags.
 
-The `smrt dev:knowledge-*` CLI commands request `detail: "full"`, so their output
-is unchanged.
+The `smrt dev:knowledge-*` CLI commands request `detail: "full"`, so they remain
+full-detail and unbudgeted.
 
 ## Knowledge Boundary
 
@@ -171,7 +174,16 @@ Downstream s-m-r-t packages/apps can publish their own scoped
 `.smrt/smrt-knowledge.json`, then `dist/smrt-knowledge.json`, then source
 manifest artifacts before falling back to raw manifest/doc scanning. The runtime
 `manifest.json` stays focused on object registration; `smrt-knowledge.json` is
-the agent/developer contract.
+the agent/developer contract. Its schema-version-1 structural keys are additive,
+and older artifacts without them remain readable. Sensitive fields are excluded
+from both the curated artifact and raw-manifest fallback projection, including
+legacy sensitivity flags under `_meta`.
+Sensitive field names and their snake-case column names are also removed from
+projected conflict columns. A sensitive custom tenant-field name is omitted
+while its tenant scope and mode remain available.
+New artifacts record `sensitiveFieldsExcluded: true`. For a legacy schema-v1
+artifact without that marker, the reader cross-checks the owning raw manifest
+and omits any field or structural identifier it cannot corroborate as safe.
 
 ## Cache Metadata
 
@@ -386,6 +398,18 @@ then return a model-ready architecture prompt bundle.
 | `focus` | `string` | No | Architecture concern to prioritize |
 | `detail` | `'summary' \| 'full'` | No | Default `summary`; `full` embeds authored docs and full package records |
 
+### `build-package-specialist-context`
+
+Build deterministic package-specific context for the Workbench, including the
+package's authored docs, manifests, routes, tests, prompts, and SDK dependency
+context.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `rootDir` | `string` | No | Project root directory (default: cwd) |
+| `package` | `string` | Yes | Package name or short package query |
+| `focus` | `string` | No | Package concern to prioritize |
+
 ### `build-domain-architecture-context`
 
 Domain-scoped alias for `build-architecture-context`.

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACP,MAAM,8BAA8B,CAAC;AAqBtC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAG1C,eAAO,MAAM,cAAc,QAAuB,CAAC;AAuBnD,wBAAgB,YAAY,IAAI,MAAM,CAkfrC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACP,MAAM,8BAA8B,CAAC;AAsBtC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAG1C,eAAO,MAAM,cAAc,QAAuB,CAAC;AA6BnD,wBAAgB,YAAY,IAAI,MAAM,CAgnBrC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as checkKnowledgeFreshnessFromIndex, d as smrtReview, f as REVIEW_SKILL_NAME, i as checkKnowledgeFreshness, n as buildKnowledgeIndex, p as TOOLS, r as buildReviewContext, s as packageDocPaths, t as buildArchitectureContext, u as smrtArchitecture } from "./knowledge-A7-gIjW4.js";
+import { a as checkKnowledgeFreshness, c as packageDocPaths, d as smrtArchitecture, f as smrtReview, i as buildReviewContext, m as TOOLS, n as buildKnowledgeIndex, o as checkKnowledgeFreshnessFromIndex, p as REVIEW_SKILL_NAME, r as buildPackageSpecialistContext, t as buildArchitectureContext } from "./knowledge-L22wrifG.js";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -1074,6 +1074,9 @@ var LIVE_KNOWLEDGE_CACHE_HINT = {
 	ttlMs: 0,
 	cacheScope: "private"
 };
+var WORKBENCH_PROJECT_URI = "smrt://workbench/project";
+var WORKBENCH_PACKAGE_PREFIX = "smrt://workbench/package/";
+var WORKBENCH_SPECIALIST_SUFFIX = "/specialist";
 function createServer() {
 	if (DEBUG) console.error(`[${SERVER_NAME}] Starting server v${SERVER_VERSION}`);
 	const server = new Server({
@@ -1230,13 +1233,33 @@ function createServer() {
 				description: "Composed SMRT, downstream domain, and HappyVertical SDK knowledge index.",
 				mimeType: "application/json"
 			},
+			{
+				uri: WORKBENCH_PROJECT_URI,
+				name: "smrt-workbench-project",
+				title: "SMRT Workbench Project",
+				description: "Workbench-facing package and knowledge resource index for the current project.",
+				mimeType: "application/json"
+			},
 			...index.packages.map((pkg) => ({
 				uri: `${KNOWLEDGE_PACKAGE_PREFIX}${encodeURIComponent(pkg.name)}`,
 				name: `smrt-domain-knowledge-${pkg.name}`,
 				title: `SMRT Domain Knowledge: ${pkg.name}`,
 				description: "Package-scoped SMRT domain knowledge, generated surfaces, and authored context.",
 				mimeType: "application/json"
-			}))
+			})),
+			...index.packages.filter((pkg) => pkg.kind !== "sdk").flatMap((pkg) => [{
+				uri: `${WORKBENCH_PACKAGE_PREFIX}${encodeURIComponent(pkg.name)}`,
+				name: `smrt-workbench-${pkg.name}`,
+				title: `SMRT Workbench Package: ${pkg.name}`,
+				description: "Workbench package resource with docs, manifest, knowledge, scripts, and surface metadata.",
+				mimeType: "application/json"
+			}, {
+				uri: `${WORKBENCH_PACKAGE_PREFIX}${encodeURIComponent(pkg.name)}${WORKBENCH_SPECIALIST_SUFFIX}`,
+				name: `smrt-workbench-specialist-${pkg.name}`,
+				title: `SMRT Package Specialist: ${pkg.name}`,
+				description: "Deterministic package specialist prompt bundle and source list.",
+				mimeType: "application/json"
+			}])
 		] };
 	});
 	server.setRequestHandler("resources/read", async (request) => {
@@ -1254,6 +1277,42 @@ function createServer() {
 				text: JSON.stringify(sanitizeKnowledgeIndex(index), null, 2)
 			}] };
 		}
+		if (uri === WORKBENCH_PROJECT_URI) {
+			const index = await buildKnowledgeIndex();
+			return { contents: [{
+				uri,
+				mimeType: "application/json",
+				text: JSON.stringify({
+					project: sanitizeKnowledgeIndex(index),
+					workbenchResources: index.packages.filter((pkg) => pkg.kind !== "sdk").map((pkg) => ({
+						packageName: pkg.name,
+						packageUri: `${WORKBENCH_PACKAGE_PREFIX}${encodeURIComponent(pkg.name)}`,
+						specialistUri: `${WORKBENCH_PACKAGE_PREFIX}${encodeURIComponent(pkg.name)}${WORKBENCH_SPECIALIST_SUFFIX}`
+					}))
+				}, null, 2)
+			}] };
+		}
+		if (uri.startsWith(WORKBENCH_PACKAGE_PREFIX) && uri.endsWith(WORKBENCH_SPECIALIST_SUFFIX)) {
+			const specialist = await buildPackageSpecialistContext({ package: decodeURIComponent(uri.slice(25, -11)) });
+			return { contents: [{
+				uri,
+				mimeType: "application/json",
+				text: JSON.stringify(sanitizePackageSpecialist(specialist), null, 2)
+			}] };
+		}
+		if (uri.startsWith(WORKBENCH_PACKAGE_PREFIX)) {
+			const packageName = decodeURIComponent(uri.slice(25));
+			const pkg = (await buildKnowledgeIndex()).packages.find((item) => item.name === packageName);
+			if (!pkg) throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Unknown workbench package: ${packageName}`);
+			return { contents: [{
+				uri,
+				mimeType: "application/json",
+				text: JSON.stringify({
+					package: sanitizeKnowledgePackage(pkg),
+					specialistUri: `${WORKBENCH_PACKAGE_PREFIX}${encodeURIComponent(pkg.name)}${WORKBENCH_SPECIALIST_SUFFIX}`
+				}, null, 2)
+			}] };
+		}
 		if (uri.startsWith(KNOWLEDGE_PACKAGE_PREFIX)) {
 			const packageName = decodeURIComponent(uri.slice(25));
 			const pkg = (await buildKnowledgeIndex()).packages.find((item) => item.name === packageName);
@@ -1329,6 +1388,9 @@ function createServer() {
 				case "smrt-review":
 					result = JSON.stringify(compactContextResult(await smrtReview(args), detailArg(args)), null, 2);
 					break;
+				case "build-package-specialist-context":
+					result = JSON.stringify(sanitizePackageSpecialist(await buildPackageSpecialistContext(args)), null, 2);
+					break;
 				case "build-architecture-context":
 				case "build-domain-architecture-context":
 					result = JSON.stringify(compactContextResult(await buildArchitectureContext(args), detailArg(args)), null, 2);
@@ -1528,6 +1590,21 @@ function sanitizeKnowledgePackage(pkg) {
 		}))
 	};
 }
+function sanitizePackageSpecialist(specialist) {
+	return {
+		selectedPackage: sanitizeKnowledgePackage(specialist.selectedPackage),
+		selectedSdkPackages: specialist.selectedSdkPackages.map((pkg) => sanitizeKnowledgePackage(pkg)),
+		promptBundle: {
+			...specialist.promptBundle,
+			contextMarkdown: specialist.promptBundle.contextMarkdown.replace(/^Baseline root: .+$/m, "Baseline root: ."),
+			sourceFiles: sanitizePaths(specialist.promptBundle.sourceFiles)
+		},
+		sourceFiles: sanitizePaths(specialist.sourceFiles)
+	};
+}
+function sanitizePaths(paths) {
+	return paths.map(sanitizePath).filter((path) => typeof path === "string");
+}
 function sanitizePath(path) {
 	if (!path) return path;
 	if (path.startsWith("/") || /^[A-Za-z]:[\\/]/.test(path)) return "<absolute-path>";