@jagilber-org/index-server 1.28.10 → 1.28.19

package/dist/services/toolRegistry.zod.js

@@ -6,6 +6,8 @@ exports.hasZodSchema = hasZodSchema;
 const zod_1 = require("zod");
 const toolRegistry_1 = require("./toolRegistry");
 const runtimeConfig_1 = require("../config/runtimeConfig");
+const instructionSchema_1 = require("../schemas/instructionSchema");
+const instruction_1 = require("../models/instruction");
 /**
  * Complete Zod schema registry for all MCP index tools.
  * Zod schemas provide runtime validation with richer type inference.
@@ -35,7 +37,7 @@ const zDispatch = zod_1.z.object({
     keywords: zod_1.z.array(zod_1.z.string()).optional(),
     ids: zod_1.z.array(zod_1.z.string()).optional(),
     category: zod_1.z.string().optional(),
-    contentType: zod_1.z.enum(['instruction', 'template', 'workflow', 'reference', 'example', 'agent', 'chat-session']).optional(),
+    contentType: zod_1.z.enum(instruction_1.CONTENT_TYPES).optional(),
     text: zod_1.z.string().optional(),
     includeCategories: zod_1.z.boolean().optional(),
     caseSensitive: zod_1.z.boolean().optional(),
@@ -77,53 +79,82 @@ const zDispatch = zod_1.z.object({
 function zInstructionBody() {
     return zod_1.z.string().min(1).max((0, runtimeConfig_1.getRuntimeConfig)().index.bodyWarnLength);
 }
-function buildZIndexEntry() {
-    return zod_1.z.object({
+/**
+ * Per-field Zod refinements for the canonical INPUT_KEYS surface.
+ *
+ * The canonical schema (schemas/instruction.schema.json) is the single
+ * source of truth for which fields callers may submit on `index_add` /
+ * `index_import`. The Ajv `validateInput` validator (compiled from that
+ * canonical schema) is the authoritative type/format/length gate and runs
+ * inside the handler.
+ *
+ * This Zod schema sits in front of the handler in the default validation
+ * mode (transport.validateParams). Its job is therefore narrow:
+ *
+ *  1. Accept EVERY canonical input field — never reject a field the
+ *     canonical INPUT_SCHEMA accepts.
+ *  2. Reject truly unknown top-level entry keys (`.strict()`).
+ *  3. Provide light, fast checks (string length on body, enum on
+ *     audience/etc.) so obvious garbage fails before the handler runs.
+ *
+ * Anything missing from this map is still accepted (as `unknown`) — the
+ * canonical Ajv validator will reject malformed payloads with the precise
+ * JSON-Schema error.
+ */
+function buildEntryShape() {
+    const refinements = {
         id: zod_1.z.string().min(1),
-        title: zod_1.z.string().min(1).optional(),
+        title: zod_1.z.string().min(1),
         body: zInstructionBody(),
-        rationale: zod_1.z.string().optional(),
-        priority: zod_1.z.number().int().min(1).max(100).optional(),
-        audience: zod_1.z.string().optional(),
-        requirement: zod_1.z.string().optional(),
-        categories: zod_1.z.array(zod_1.z.string()).max(50).optional(),
-        deprecatedBy: zod_1.z.string().optional(),
-        riskScore: zod_1.z.number().optional(),
-        version: zod_1.z.string().optional(),
-        owner: zod_1.z.string().optional(),
-        status: zod_1.z.enum(['approved', 'draft', 'review', 'deprecated']).optional(),
-        priorityTier: zod_1.z.enum(['P1', 'P2', 'P3', 'P4']).optional(),
-        classification: zod_1.z.enum(['public', 'internal', 'restricted']).optional(),
-        lastReviewedAt: zod_1.z.string().optional(),
-        nextReviewDue: zod_1.z.string().optional(),
-        semanticSummary: zod_1.z.string().optional(),
-        changeLog: zod_1.z.array(zod_1.z.object({}).passthrough()).optional(),
-        contentType: zod_1.z.enum(['instruction', 'template', 'workflow', 'reference', 'example', 'agent', 'chat-session']).optional(),
-        extensions: zod_1.z.record(zod_1.z.string(), zExtensionValue).optional()
-    }).strict();
+        rationale: zod_1.z.string(),
+        priority: zod_1.z.number().int().min(1).max(100),
+        audience: zod_1.z.string(),
+        requirement: zod_1.z.string(),
+        categories: zod_1.z.array(zod_1.z.string()).max(50),
+        deprecatedBy: zod_1.z.string(),
+        riskScore: zod_1.z.number(),
+        version: zod_1.z.string(),
+        owner: zod_1.z.string(),
+        status: zod_1.z.enum(['approved', 'draft', 'review', 'deprecated']),
+        priorityTier: zod_1.z.enum(['P1', 'P2', 'P3', 'P4']),
+        classification: zod_1.z.enum(['public', 'internal', 'restricted']),
+        lastReviewedAt: zod_1.z.string(),
+        nextReviewDue: zod_1.z.string(),
+        semanticSummary: zod_1.z.string(),
+        changeLog: zod_1.z.array(zod_1.z.object({}).passthrough()),
+        contentType: zod_1.z.enum(instruction_1.CONTENT_TYPES),
+        extensions: zod_1.z.record(zod_1.z.string(), zExtensionValue),
+    };
+    const shape = {};
+    for (const key of instructionSchema_1.INPUT_KEYS) {
+        // Server-managed keys must never appear in the input shape.
+        if (instructionSchema_1.SERVER_MANAGED_KEYS.has(key))
+            continue;
+        const refined = refinements[key] ?? zod_1.z.unknown();
+        shape[key] = instructionSchema_1.REQUIRED_INPUT_KEYS.has(key) ? refined : refined.optional();
+    }
+    return shape;
 }
 function buildZAdd() {
+    // index_add allows the handler to default required fields (e.g. priority,
+    // audience), so the entry contract here mirrors the canonical surface but
+    // does NOT enforce REQUIRED_INPUT_KEYS at the Zod layer. The handler /
+    // canonical Ajv `validateInput` apply the per-tool required[] minimum.
+    const entry = zod_1.z.object(Object.fromEntries(Object.entries(buildEntryShape()).map(([k, v]) => {
+        const t = v;
+        return [k, t.isOptional() ? t : t.optional()];
+    }))).strict();
     return zod_1.z.object({
-        entry: buildZIndexEntry(),
+        entry,
         overwrite: zod_1.z.boolean().optional(),
         lax: zod_1.z.boolean().optional()
     }).strict();
 }
 function buildZImport() {
+    const entryItem = zod_1.z.object(buildEntryShape()).strict();
     return zod_1.z.object({
         entries: zod_1.z.union([
-            zod_1.z.array(zod_1.z.object({
-                id: zod_1.z.string(),
-                title: zod_1.z.string(),
-                body: zInstructionBody(),
-                rationale: zod_1.z.string().optional(),
-                priority: zod_1.z.number(),
-                audience: zod_1.z.string(),
-                requirement: zod_1.z.string(),
-                categories: zod_1.z.array(zod_1.z.string()).optional(),
-                extensions: zod_1.z.record(zod_1.z.string(), zExtensionValue).optional(),
-                mode: zod_1.z.string().optional()
-            }).passthrough()).min(1),
+            zod_1.z.array(entryItem).min(1),
             zod_1.z.string()
         ]).optional(),
         source: zod_1.z.string().optional(),
@@ -166,7 +197,7 @@ const zSearch = zod_1.z.object({
     limit: zod_1.z.number().int().min(1).max(100).default(50).optional(),
     includeCategories: zod_1.z.boolean().default(false).optional(),
     caseSensitive: zod_1.z.boolean().default(false).optional(),
-    contentType: zod_1.z.enum(['instruction', 'template', 'workflow', 'reference', 'example', 'agent']).optional()
+    contentType: zod_1.z.enum(instruction_1.CONTENT_TYPES).optional()
 }).strict();
 // ── Diagnostics ──────────────────────────────────────────────────────────────
 const zDiagnostics = zod_1.z.object({
@@ -182,6 +213,21 @@ const zFeedbackSubmit = zod_1.z.object({
     metadata: zod_1.z.object({}).passthrough().optional(),
     tags: zod_1.z.array(zod_1.z.string()).max(10).optional()
 }).strict();
+const zFeedbackManage = zod_1.z.object({
+    action: zod_1.z.enum(['submit', 'list', 'get', 'update', 'delete', 'stats']),
+    id: zod_1.z.string().min(1).optional(),
+    type: zod_1.z.enum(['issue', 'status', 'security', 'feature-request', 'bug-report', 'performance', 'usability', 'other']).optional(),
+    severity: zod_1.z.enum(['low', 'medium', 'high', 'critical']).optional(),
+    status: zod_1.z.enum(['new', 'acknowledged', 'in-progress', 'resolved', 'closed']).optional(),
+    title: zod_1.z.string().min(1).max(200).optional(),
+    description: zod_1.z.string().min(1).max(10000).optional(),
+    context: zod_1.z.object({}).passthrough().optional(),
+    metadata: zod_1.z.object({}).passthrough().optional(),
+    tags: zod_1.z.array(zod_1.z.string()).max(10).optional(),
+    limit: zod_1.z.number().int().min(1).max(200).optional(),
+    offset: zod_1.z.number().int().min(0).optional(),
+    since: zod_1.z.string().optional()
+}).strict();
 // ── Usage ────────────────────────────────────────────────────────────────────
 const zUsageTrack = zod_1.z.object({
     id: zod_1.z.string().min(1),
@@ -277,6 +323,7 @@ const zodMap = {
     'index_schema': zEmpty,
     // Admin tools
     'feedback_submit': zFeedbackSubmit,
+    'feedback_manage': zFeedbackManage,
     'meta_tools': zEmpty,
     'meta_activation_guide': zEmpty,
     'meta_check_activation': zMetaCheckActivation,

package/dist/versioning/schemaVersion.d.ts

@@ -1,4 +1,4 @@
-export declare const SCHEMA_VERSION = "5";
+export declare const SCHEMA_VERSION = "6";
 export interface MigrationResult {
     changed: boolean;
     notes?: string[];

package/dist/versioning/schemaVersion.js

@@ -6,7 +6,7 @@ exports.migrateInstructionRecord = migrateInstructionRecord;
 // Bump this when making a backward-incompatible on-disk schema change that
 // requires a migration rewrite. Migration logic should detect older versions
 // and transform + persist them once.
-exports.SCHEMA_VERSION = '5';
+exports.SCHEMA_VERSION = '6';
 // Helper function for review interval computation (matches ClassificationService logic)
 function computeReviewIntervalDays(tier, requirement) {
     // Shorter intervals for higher criticality
@@ -57,14 +57,6 @@ function migrateInstructionRecord(rec) {
         // no-op: optional metadata fields are already valid if present
         notes.push('v3→v4: added optional metadata fields to schema');
     }
-    // v4 → v5 migration: public persisted contentType "chat-session" was renamed
-    // to "workflow". Preserve the workflow/runbook semantics instead of falling
-    // through the generic invalid-enum fallback to "instruction".
-    if (prevVersion === '4' && rec.contentType === 'chat-session') {
-        rec.contentType = 'workflow';
-        changed = true;
-        notes.push('v4→v5: migrated legacy contentType "chat-session" to "workflow"');
-    }
     // Clean optional nullable fields that upstream tools may emit as null
     // (riskScore must be number or absent — null causes AJV rejection)
     if ('riskScore' in rec && rec.riskScore === null) {
@@ -107,13 +99,9 @@ function migrateInstructionRecord(rec) {
         CRITICAL: 'critical', OPTIONAL: 'optional', MANDATORY: 'mandatory',
         DEPRECATED: 'deprecated', REQUIRED: 'mandatory',
     };
-    const legacyContentTypeMap = {
-        'chat-session': 'workflow',
-    };
     const enumDefaults = {
         audience: { valid: ['individual', 'group', 'all'], fallback: 'all', legacy: legacyAudienceMap },
         requirement: { valid: ['mandatory', 'critical', 'recommended', 'optional', 'deprecated'], fallback: 'optional', legacy: legacyRequirementMap },
-        contentType: { valid: ['instruction', 'template', 'workflow', 'reference', 'example', 'agent'], fallback: 'instruction', legacy: legacyContentTypeMap },
         status: { valid: ['draft', 'review', 'approved', 'deprecated'], fallback: 'draft', legacy: legacyStatusMap },
         priorityTier: { valid: ['P1', 'P2', 'P3', 'P4'], fallback: 'P3' },
         classification: { valid: ['public', 'internal', 'restricted'], fallback: 'internal' },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jagilber-org/index-server",
-  "version": "1.28.10",
+  "version": "1.28.19",
   "mcpName": "io.github.jagilber-org/index-server",
   "description": "MCP instruction indexing server with search, CRUD, validation, and cross-repo knowledge promotion.",
   "publishConfig": {
@@ -15,11 +15,15 @@
     "dist/",
     "!dist/tests/",
     "schemas/",
+    "!schemas/json-schema/",
+    "!schemas/archive/",
     "templates/",
+    "scripts/client/",
     "scripts/build/copy-dashboard-assets.mjs",
     "scripts/hooks/setup-hooks.cjs",
     "scripts/build/generate-certs.mjs",
     "scripts/build/setup-wizard.mjs",
+    "scripts/build/setup-wizard-paths.mjs",
     "server.json",
     "README.md",
     "LICENSE",
@@ -35,11 +39,12 @@
   "scripts": {
     "setup": "node scripts/build/setup-wizard.mjs",
     "instructions:normalize": "node scripts/migration/normalize-instructions.js",
-    "build": "tsc -p tsconfig.json && node scripts/build/copy-dashboard-assets.mjs",
+    "build": "tsc -p tsconfig.json && node scripts/build/copy-dashboard-assets.mjs && node scripts/build/generate-tools-doc.mjs && node scripts/build/generate-tools-snapshot.mjs && node scripts/build/generate-schemas.mjs",
     "start": "node dist/server/index-server.js",
     "start-minimal": "node dist/minimal/index.js",
     "prestart": "npm run build",
     "pretest": "node scripts/testing/pretest-build-or-skip.mjs",
+    "build:ci": "node scripts/build/ci-build.mjs",
     "dev": "cross-env NODE_ENV=development node --watch dist/server/index-server.js",
     "build:watch": "tsc -w -p tsconfig.json",
     "check:dist": "npm run build && git diff --quiet --exit-code dist || (echo 'Dist out of date. Run npm run build and commit generated files.' && exit 1)",
@@ -82,14 +87,20 @@
     "perf:ci": "npm run perf:drift && npm run perf:trend && npm run perf:summary",
     "guard:env": "ts-node scripts/governance/enforce-config-usage.ts",
     "build:verify": "npm run typecheck && npm run build && npm run test:fast && npm run guard:env && npm run guard:decl",
+    "validate": "npm run build:verify",
+    "validate:template": "pwsh -NoProfile -File scripts/governance/validate-template-metadata.ps1 -RequireRepoAdoptionMatch",
+    "hooks:test": "pwsh -NoProfile -File scripts/testing/test-hook-regressions.ps1",
     "test:unit": "vitest run --config vitest.config.unit.ts",
     "test:unit:watch": "vitest --config vitest.config.unit.ts",
     "test:fast": "node scripts/testing/test-fast.mjs",
     "test:slow": "node scripts/testing/test-slow.mjs",
     "docs:tools": "node scripts/build/generate-tools-doc.mjs",
+    "schemas:generate": "node scripts/build/generate-schemas.mjs",
     "health:check": "node scripts/diagnostics/health-check.mjs",
     "guard:skips": "node scripts/governance/check-no-skips.mjs",
     "guard:baseline": "node scripts/governance/guard-baseline.mjs",
+    "guard:coverage": "node scripts/governance/check-coverage.mjs",
+    "guard:all": "npm run guard:env && npm run guard:skips && npm run guard:baseline && npm run guard:decl && npm run lint:instructions && npm run verify:manifest",
     "baseline:sentinel:update": "node scripts/governance/baseline-sentinel.mjs update",
     "baseline:sentinel:verify": "node scripts/governance/baseline-sentinel.mjs verify",
     "guard:decl": "node scripts/governance/guard-declarations.mjs",
@@ -147,7 +158,10 @@
     "@mermaid-js/layout-elk": {
       "uuid": "^14.0.0"
     },
-    "@types/express-serve-static-core": "5.0.7"
+    "@types/express-serve-static-core": "5.0.7",
+    "fast-uri": "^3.1.2",
+    "hono": "^4.12.18",
+    "ip-address": "^10.1.1"
   },
   "optionalScripts": {},
   "promptReviewCriteriaVersion": "1.0.0",