@kaddo/mcp 3.100.0 → 3.102.0

package/README.md

@@ -34,7 +34,7 @@ directory set via the `KADDO_PROJECT_DIR` environment variable).
 }
 ```
 
-`cwd` must point to the project that contains `.kaddo/`, `knowledge/` and (optionally) `external/`.
+`cwd` must point to the project that contains `.kaddo/` and `knowledge/`.
 
 ## Resources
 
@@ -47,7 +47,7 @@ directory set via the `KADDO_PROJECT_DIR` environment variable).
 | `kaddo://graph-hints` | `.kaddo/graph-hints.md` + `.json` | weak/missing relationships |
 | `kaddo://work-items` | `knowledge/delivery/work-items/` | summarized Work Items |
 | `kaddo://roadmap` | `knowledge/delivery/roadmap.md` | delivery roadmap |
-| `kaddo://capsules` | `.kaddo/external.yml` + `external/` | external Knowledge Capsules |
+| `kaddo://capsules` | `.kaddo/external.yml` + `knowledge/external/` | external Knowledge Capsules |
 | `kaddo://agents` | `knowledge/agents/` | installed agent prompts |
 | `kaddo://skills` | `knowledge/skills/` | installed reusable skills (empty if none) |
 | `kaddo://skills/<id>` | `knowledge/skills/<id>/skill.md` | one reusable skill |
@@ -66,7 +66,7 @@ directory set via the `KADDO_PROJECT_DIR` environment variable).
 
 When a derived artifact is missing or stale, these tools regenerate it in place using the same core
 logic as the CLI — so the agent never has to leave the flow. They are deterministic (no LLM) and
-**only write under `.kaddo/`**; they never touch `knowledge/`, `src/`, `external/`,
+**only write under `.kaddo/`**; they never touch `knowledge/`, `src/`,
 `.kaddo/external.yml` or git.
 
 | Tool | Writes | CLI equivalent |
@@ -78,7 +78,7 @@ logic as the CLI — so the agent never has to leave the flow. They are determin
 | `kaddo_generate_capsule_draft` | `.kaddo/exports/<project>.capsule.md` + `.json` | `kaddo capsule export` |
 
 `kaddo_generate_capsule_draft` writes a **draft only** — it never registers/imports a capsule
-(`external/`, `.kaddo/external.yml` stay untouched; use the CLI `kaddo capsule add` for that).
+(`knowledge/external/`, `.kaddo/external.yml` stay untouched; use the CLI `kaddo capsule add` for that).
 
 Each tool returns `{ status, files_written, summary, warnings, next_suggested_resources }`. All
 writes pass through a central allowlist (`assertMcpDerivedWritePath`) that blocks any path outside
@@ -103,7 +103,7 @@ regenerate artifacts **only under `.kaddo/`**; everything else is read-only.
 
 ## Security
 
-The server only reads `.kaddo/`, `knowledge/` and `external/`. It never reads `src/`, `.git/`,
+The server only reads `.kaddo/` and `knowledge/`. It never reads `src/`, `.git/`,
 `node_modules/`, `dist/`, `build/` or `coverage/`, blocks path traversal, and never exposes
 secrets, tokens, env values, source code or PII.
 

package/dist/index.js

@@ -96,7 +96,7 @@ import matter from "gray-matter";
 import fs from "fs";
 import path from "path";
 import { parse as parseYaml } from "yaml";
-var ALLOWED_ROOTS = [".kaddo", "knowledge", "external"];
+var ALLOWED_ROOTS = [".kaddo", "knowledge"];
 var KaddoMcpError = class extends Error {
 };
 function projectRoot() {
@@ -391,7 +391,7 @@ import matter8 from "gray-matter";
 // ../cli/src/core/config.ts
 import { z } from "zod";
 import { parse as parseYaml2 } from "yaml";
-var PROJECT_STATES = ["new", "pre-ai", "legacy"];
+var PROJECT_STATES = ["new", "pre-ai", "legacy", "ai-assisted"];
 var TEAM_SIZES = ["indie", "small", "medium", "enterprise"];
 var REPOSITORY_STRUCTURES = ["monorepo", "multirepo"];
 var PROJECT_LANGUAGES = ["en", "es"];
@@ -414,7 +414,7 @@ var ConfigError = class extends Error {
     this.name = "ConfigError";
   }
 };
-var projectStateSchema = z.enum(["new", "pre-ai", "legacy"], {
+var projectStateSchema = z.enum(["new", "pre-ai", "legacy", "ai-assisted"], {
   errorMap: () => ({
     message: `project.state must be one of: ${PROJECT_STATES.join(", ")}`
   })
@@ -462,7 +462,10 @@ var configSchema = z.object({
   }).passthrough().optional(),
   knowledge: z.unknown().optional(),
   guard: z.unknown().optional(),
-  scan: z.unknown().optional()
+  scan: z.unknown().optional(),
+  telemetry: z.object({
+    enabled: z.boolean().default(false)
+  }).passthrough().optional()
 }).passthrough();
 function configPathFor(dir) {
   return join(dir, ".kaddo", "config.yml");
@@ -10498,7 +10501,7 @@ var RESOURCES = [
   {
     uri: "kaddo://capsules",
     name: "Kaddo knowledge capsules",
-    description: "External Knowledge Capsules from .kaddo/external.yml and external/.",
+    description: "External Knowledge Capsules from .kaddo/external.yml and knowledge/external/.",
     mimeType: "application/json",
     read: (root) => [
       {
@@ -10826,7 +10829,7 @@ function isFile2(p2) {
 function join3(...parts) {
   return path3.join(...parts);
 }
-var PROJECT_STATES2 = ["new", "pre-ai", "legacy"];
+var PROJECT_STATES2 = ["new", "pre-ai", "legacy", "ai-assisted"];
 var TEAM_SIZES2 = ["indie", "small", "medium", "enterprise"];
 var REPOSITORY_STRUCTURES2 = ["monorepo", "multirepo"];
 var PROJECT_LANGUAGES2 = ["en", "es"];
@@ -10842,7 +10845,7 @@ var ConfigError2 = class extends Error {
     this.name = "ConfigError";
   }
 };
-var projectStateSchema2 = z3.enum(["new", "pre-ai", "legacy"], {
+var projectStateSchema2 = z3.enum(["new", "pre-ai", "legacy", "ai-assisted"], {
   errorMap: () => ({
     message: `project.state must be one of: ${PROJECT_STATES2.join(", ")}`
   })
@@ -10890,7 +10893,10 @@ var configSchema2 = z3.object({
   }).passthrough().optional(),
   knowledge: z3.unknown().optional(),
   guard: z3.unknown().optional(),
-  scan: z3.unknown().optional()
+  scan: z3.unknown().optional(),
+  telemetry: z3.object({
+    enabled: z3.boolean().default(false)
+  }).passthrough().optional()
 }).passthrough();
 function configPathFor2(dir) {
   return join3(dir, ".kaddo", "config.yml");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kaddo/mcp",
-  "version": "3.100.0",
+  "version": "3.102.0",
   "description": "MCP server for Kaddo project knowledge: read-only resources/tools/prompts plus safe derived generation under .kaddo/.",
   "license": "MIT",
   "repository": {