@kaddo/mcp 3.102.0 → 3.104.0

package/dist/index.js

@@ -464,7 +464,9 @@ var configSchema = z.object({
   guard: z.unknown().optional(),
   scan: z.unknown().optional(),
   telemetry: z.object({
-    enabled: z.boolean().default(false)
+    consent: z.enum(["enabled", "disabled"]).optional(),
+    consentVersion: z.number().optional(),
+    enabled: z.boolean().optional()
   }).passthrough().optional()
 }).passthrough();
 function configPathFor(dir) {
@@ -10813,18 +10815,23 @@ import fs4 from "fs";
 import matter82 from "gray-matter";
 import matter92 from "gray-matter";
 import { parse as parseYaml92, stringify as stringifyYaml5 } from "yaml";
-function exists2(p2) {
-  return fs3.existsSync(p2);
+import { parse as parseYaml102, stringify as stringifyYaml6 } from "yaml";
+function exists2(p) {
+  return fs3.existsSync(p);
 }
-function readFile2(p2) {
-  return fs3.readFileSync(p2, "utf-8");
+function readFile2(p) {
+  return fs3.readFileSync(p, "utf-8");
+}
+function writeFile2(filePath, content) {
+  fs3.mkdirSync(path3.dirname(filePath), { recursive: true });
+  fs3.writeFileSync(filePath, content, "utf-8");
 }
 function readDir2(dirPath) {
   if (!exists2(dirPath)) return [];
   return fs3.readdirSync(dirPath);
 }
-function isFile2(p2) {
-  return exists2(p2) && fs3.statSync(p2).isFile();
+function isFile2(p) {
+  return exists2(p) && fs3.statSync(p).isFile();
 }
 function join3(...parts) {
   return path3.join(...parts);
@@ -10895,7 +10902,9 @@ var configSchema2 = z3.object({
   guard: z3.unknown().optional(),
   scan: z3.unknown().optional(),
   telemetry: z3.object({
-    enabled: z3.boolean().default(false)
+    consent: z3.enum(["enabled", "disabled"]).optional(),
+    consentVersion: z3.number().optional(),
+    enabled: z3.boolean().optional()
   }).passthrough().optional()
 }).passthrough();
 function configPathFor2(dir) {
@@ -11047,8 +11056,8 @@ function isActiveState2(s) {
   return ACTIVE_STATES3.includes(s);
 }
 function lifecycleFolderOf2(filePath) {
-  const p2 = filePath.replace(/\\/g, "/");
-  const m2 = p2.match(/\/delivery\/work-items\/([^/]+)\//);
+  const p = filePath.replace(/\\/g, "/");
+  const m2 = p.match(/\/delivery\/work-items\/([^/]+)\//);
   if (m2 && isLifecycleState2(m2[1])) return m2[1];
   return null;
 }
@@ -11061,8 +11070,8 @@ function lifecycleStateOf2(item) {
   return "ready";
 }
 var ARCH_DIR3 = "knowledge";
-function toPosix6(p2) {
-  return p2.replace(/\\/g, "/");
+function toPosix6(p) {
+  return p.replace(/\\/g, "/");
 }
 function relativeTo2(dir, filePath) {
   const base = toPosix6(dir).replace(/\/+$/, "");
@@ -12307,10 +12316,10 @@ ${QUALITY2}
 `;
 var EXTERNAL_PATH2 = ".kaddo/external.yml";
 function loadExternalRegistry2(dir) {
-  const p2 = join3(dir, EXTERNAL_PATH2);
-  if (!exists2(p2)) return [];
+  const p = join3(dir, EXTERNAL_PATH2);
+  if (!exists2(p)) return [];
   try {
-    const parsed = parseYaml62(readFile2(p2));
+    const parsed = parseYaml62(readFile2(p));
     return Array.isArray(parsed?.external) ? parsed.external : [];
   } catch {
     return [];
@@ -12322,8 +12331,8 @@ var ALL_STATUSES2 = ["draft", "ready", "in-progress", "blocked", "completed"];
 function scopeStatuses2(scope) {
   return scope === "all" ? { included: ALL_STATUSES2, excluded: ["archived"] } : { included: ACTIVE_STATUSES2, excluded: ["completed", "archived"] };
 }
-function toPosix22(p2) {
-  return p2.replace(/\\/g, "/");
+function toPosix22(p) {
+  return p.replace(/\\/g, "/");
 }
 function slug3(s) {
   return s.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
@@ -12461,8 +12470,8 @@ function buildGraph2(dir, config, opts = {}, now = /* @__PURE__ */ new Date()) {
   };
 }
 var KNOWLEDGE32 = "knowledge";
-function toPosix32(p2) {
-  return p2.replace(/\\/g, "/");
+function toPosix32(p) {
+  return p.replace(/\\/g, "/");
 }
 function slug22(s) {
   return s.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
@@ -12471,9 +12480,9 @@ function isAdr22(a2) {
   return toPosix32(a2.filePath).includes("/tech/decisions/") && Boolean(a2.type);
 }
 function capabilityHeadings2(dir) {
-  const p2 = join3(dir, KNOWLEDGE32, "product", "capabilities.md");
-  if (!exists2(p2)) return [];
-  return readFile2(p2).split(/\r?\n/).map((l2) => l2.match(/^#{2,3}\s+(.+?)\s*$/)).filter((m2) => Boolean(m2)).map((m2) => m2[1].trim()).filter((h2) => !/^(summary|resumen|overview|capabilities|capacidades)$/i.test(h2));
+  const p = join3(dir, KNOWLEDGE32, "product", "capabilities.md");
+  if (!exists2(p)) return [];
+  return readFile2(p).split(/\r?\n/).map((l2) => l2.match(/^#{2,3}\s+(.+?)\s*$/)).filter((m2) => Boolean(m2)).map((m2) => m2[1].trim()).filter((h2) => !/^(summary|resumen|overview|capabilities|capacidades)$/i.test(h2));
 }
 function humanMissing2(field) {
   switch (field) {
@@ -15779,7 +15788,7 @@ var AGENT_PROMPTS2 = [
   // Graph relationship quality (metadata hints → precise front matter — VS-056)
   { fileName: "graph-agent.md", content: GRAPH_AGENT2 }
   // Every official prompt ends with its responsibility boundaries + Agent Trace footer.
-].map((p2) => ({ fileName: p2.fileName, content: withResponsibilityTrace2(p2.fileName, p2.content) }));
+].map((p) => ({ fileName: p.fileName, content: withResponsibilityTrace2(p.fileName, p.content) }));
 function withAgentFrontMatter2(fileName, content) {
   const name = fileName.replace(/\.md$/, "");
   const fm = [
@@ -16418,8 +16427,8 @@ var TECHNICAL_RELATIONSHIP_TYPES = /* @__PURE__ */ new Set([
   "implemented-by"
 ]);
 var PROVENANCE = /* @__PURE__ */ new Set(["declared", "derived", "agent-reviewed"]);
-function isRelative(p2) {
-  return typeof p2 === "string" && p2.trim() !== "" && !/^([a-zA-Z]:[\\/]|\/)/.test(p2) && !p2.includes("..");
+function isRelative(p) {
+  return typeof p === "string" && p.trim() !== "" && !/^([a-zA-Z]:[\\/]|\/)/.test(p) && !p.includes("..");
 }
 function strList(v) {
   return Array.isArray(v) ? v.map((x2) => typeof x2 === "string" ? x2.trim() : "").filter(Boolean) : [];
@@ -16462,9 +16471,9 @@ function parseTopologyContent(raw, dir) {
     const moduleRaw = typeof e.module === "string" ? e.module.trim() : void 0;
     if (moduleRaw && !validModules.has(moduleRaw)) findings.push({ level: "warning", message: `Entity "${id}" references unregistered module "${moduleRaw}".` });
     const rawImpl = e.implementation ?? e.implementation_refs;
-    const implementation = strList(rawImpl).filter((p2) => {
-      if (isRelative(p2)) return true;
-      findings.push({ level: "warning", message: `Entity "${id}" implementation ref "${p2}" is not a safe relative path and was dropped.` });
+    const implementation = strList(rawImpl).filter((p) => {
+      if (isRelative(p)) return true;
+      findings.push({ level: "warning", message: `Entity "${id}" implementation ref "${p}" is not a safe relative path and was dropped.` });
       return false;
     });
     const prov = e.provenance;
@@ -16672,8 +16681,8 @@ function splitSections(body) {
   flush();
   return sections;
 }
-function isPlaceholder(text3) {
-  const t = text3.trim();
+function isPlaceholder(text22) {
+  const t = text22.trim();
   if (!t) return true;
   if (/^tbd$/i.test(t)) return true;
   if (/^_[^_]*_$/.test(t) && !t.includes("\n")) return true;
@@ -16700,15 +16709,15 @@ function extractBullets(body) {
   for (const line of body.split(/\r?\n/)) {
     const m2 = line.match(/^\s*[-*+]\s+(.*)$/);
     if (!m2) continue;
-    let text3 = m2[1].trim();
+    let text22 = m2[1].trim();
     let checked = null;
-    const cb = text3.match(/^\[([ xX])\]\s*(.*)$/);
+    const cb = text22.match(/^\[([ xX])\]\s*(.*)$/);
     if (cb) {
       checked = cb[1].toLowerCase() === "x";
-      text3 = cb[2].trim();
+      text22 = cb[2].trim();
     }
-    if (!text3 || isPlaceholder(text3)) continue;
-    out.push({ text: text3, checked });
+    if (!text22 || isPlaceholder(text22)) continue;
+    out.push({ text: text22, checked });
   }
   return out;
 }
@@ -17453,7 +17462,7 @@ var SECRET_PATTERNS = [
   /\.pfx$/i
 ];
 function filterSecretPaths(paths) {
-  return paths.filter((p2) => !SECRET_PATTERNS.some((re) => re.test(p2)));
+  return paths.filter((p) => !SECRET_PATTERNS.some((re) => re.test(p)));
 }
 function collectImplementationEvidence(dir, workItemId, input) {
   const artifacts = discoverWorkItems2(dir);
@@ -18484,6 +18493,92 @@ function createDefaultRegistry() {
   return registry22;
 }
 var registry = createDefaultRegistry();
+var CURRENT_CONSENT_VERSION = 1;
+var DEFERRAL_DURATION_MS = 24 * 60 * 60 * 1e3;
+function getConsentState(config) {
+  if (!config) return "unset";
+  const t = config.telemetry;
+  if (!t) return "unset";
+  if (t.consent === "enabled") return "enabled";
+  if (t.consent === "disabled") return "disabled";
+  if (t.consent === void 0) {
+    if (t.enabled === true) return "enabled";
+    if (t.enabled === false) return "disabled";
+  }
+  return "unset";
+}
+function persistConsent(dir, consent) {
+  const configPath = join3(dir, ".kaddo", "config.yml");
+  if (!exists2(configPath)) return;
+  const raw = readFile2(configPath);
+  const doc = parseYaml102(raw) ?? {};
+  const prev = doc.telemetry ?? {};
+  delete prev.enabled;
+  doc.telemetry = { ...prev, consent, consentVersion: CURRENT_CONSENT_VERSION };
+  writeFile2(configPath, stringifyYaml6(doc));
+}
+function isDeferralActive(dir) {
+  const p = join3(dir, ".kaddo", "telemetry-deferred.json");
+  if (!exists2(p)) return false;
+  try {
+    const data = JSON.parse(readFile2(p));
+    return data.deferredUntil > Date.now();
+  } catch {
+    return false;
+  }
+}
+function deferConsent(dir) {
+  const p = join3(dir, ".kaddo", "telemetry-deferred.json");
+  writeFile2(p, JSON.stringify({ deferredUntil: Date.now() + DEFERRAL_DURATION_MS }));
+}
+function consentNotice() {
+  return '[Telemetry consent] Anonymous usage telemetry has not been configured.\n  Collects: command usage, version, lifecycle events.\n  Never collects: source code, knowledge, prompts or PII.\n  Use kaddo_set_telemetry_consent to enable, disable, or defer ("not-now").';
+}
+var TELEMETRY_DIR = ".kaddo/telemetry";
+var IDENTITY_FILE = "identity.json";
+function identityPath(dir) {
+  return join3(dir, TELEMETRY_DIR, IDENTITY_FILE);
+}
+function loadIdentity(dir) {
+  const p = identityPath(dir);
+  if (!exists2(p)) return null;
+  try {
+    return JSON.parse(readFile2(p));
+  } catch {
+    return null;
+  }
+}
+var TELEMETRY_DIR2 = ".kaddo/telemetry";
+var BUFFER_FILE = "buffer.json";
+function bufferPath(dir) {
+  return join3(dir, TELEMETRY_DIR2, BUFFER_FILE);
+}
+function readBuffer(dir) {
+  const p = bufferPath(dir);
+  if (!exists2(p)) return [];
+  try {
+    const data = JSON.parse(readFile2(p));
+    return Array.isArray(data) ? data : [];
+  } catch {
+    return [];
+  }
+}
+function bufferSize(dir) {
+  return readBuffer(dir).length;
+}
+function getStatus(dir) {
+  const config = loadConfig2(dir);
+  const consent = getConsentState(config);
+  const enabled = consent === "enabled";
+  const identity = loadIdentity(dir);
+  return {
+    consent,
+    enabled,
+    registered: identity?.registered ?? false,
+    pendingEvents: enabled ? bufferSize(dir) : 0,
+    lastError: null
+  };
+}
 
 // src/tools.ts
 var ok = (data) => ({ ok: true, data });
@@ -18715,12 +18810,45 @@ function verifyWorkItemTool(root, args) {
     return fail("Work Item verification failed.");
   }
 }
+function telemetryStatusTool(root) {
+  const status = getStatus(root);
+  const result = {
+    consent: status.consent,
+    registered: status.registered,
+    pendingEvents: status.pendingEvents
+  };
+  if (status.consent === "unset" && !isDeferralActive(root)) {
+    result.notice = consentNotice();
+  }
+  return ok(result);
+}
+function setTelemetryConsentTool(root, args) {
+  const valid = ["enabled", "disabled", "not-now"];
+  if (!valid.includes(args.consent)) {
+    return fail(`consent must be one of: ${valid.join(", ")}`);
+  }
+  if (!args.confirm) {
+    const preview = {
+      action: args.consent,
+      effect: args.consent === "enabled" ? "Anonymous usage telemetry will be activated. Kaddo will send command usage, version, and lifecycle events to telemetry.kaddo.org. No source code, knowledge, prompts or PII is ever transmitted." : args.consent === "disabled" ? "Telemetry will be permanently disabled. No data will be sent. Kaddo will not ask again." : "Consent decision deferred for 24 hours. Telemetry remains inactive. Kaddo will remind again after the deferral expires.",
+      instruction: "Call again with confirm=true to apply."
+    };
+    return ok(preview);
+  }
+  if (args.consent === "not-now") {
+    deferConsent(root);
+    return ok({ applied: true, consent: "unset", deferred: true, message: "Consent deferred for 24 hours." });
+  }
+  const consent = args.consent;
+  persistConsent(root, consent);
+  return ok({ applied: true, consent, message: `Telemetry ${consent}.` });
+}
 
 // src/multirepo.ts
 import fs5 from "fs";
 import path4 from "path";
 import matter12 from "gray-matter";
-import { parse as parseYaml11, stringify as stringifyYaml6 } from "yaml";
+import { parse as parseYaml11, stringify as stringifyYaml7 } from "yaml";
 var ok2 = (data) => ({ ok: true, data });
 var fail2 = (message) => ({ ok: false, message });
 function moduleRepoPath(m2) {
@@ -18729,7 +18857,7 @@ function moduleRepoPath(m2) {
 function loadModulesDescriptor(root) {
   return readYaml(root, ".kaddo/modules.yml") ?? { modules: [] };
 }
-function loadConfig3(root) {
+function loadConfig4(root) {
   return readYaml(root, ".kaddo/config.yml");
 }
 function projectRole2(config) {
@@ -18795,7 +18923,7 @@ function slugify3(s) {
   return s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 40);
 }
 function modulesListTool(root, args) {
-  const config = loadConfig3(root);
+  const config = loadConfig4(root);
   if (!config) return fail2("No Kaddo config found. Run `kaddo init` first.");
   if (!isCore2(config)) return fail2("kaddo_modules_list can only be called from a core repository (project.role: core).");
   const descriptor = loadModulesDescriptor(root);
@@ -18823,7 +18951,7 @@ function modulesListTool(root, args) {
   });
 }
 function getModuleContextTool(root, args) {
-  const config = loadConfig3(root);
+  const config = loadConfig4(root);
   if (!config) return fail2("No Kaddo config found.");
   const descriptor = loadModulesDescriptor(root);
   const mod = (descriptor.modules ?? []).find((m2) => m2.id === args.module);
@@ -18917,7 +19045,7 @@ function validateWorkItemModulesTool(root, args) {
   });
 }
 function getWorkItemContextTool(root, args) {
-  const config = loadConfig3(root);
+  const config = loadConfig4(root);
   if (!config) return fail2("No Kaddo config found.");
   const items = listWorkItems(root);
   const wi = items.find((w3) => w3.id === args.workItemId);
@@ -19023,7 +19151,7 @@ function suggestBranchStrategyTool(root, args) {
   });
 }
 function exportCapsuleTool(root, args) {
-  const config = loadConfig3(root);
+  const config = loadConfig4(root);
   if (!config) return fail2("No Kaddo config found.");
   const role = projectRole2(config);
   const warnings = [];
@@ -19153,7 +19281,7 @@ function exportCapsuleTool(root, args) {
   return ok2({ exported: true, type: capsuleType, module: args.module ?? void 0, paths: { json: jsonPath, md: mdPath }, warnings });
 }
 function modulesDiscoverTool(root, args) {
-  const config = loadConfig3(root);
+  const config = loadConfig4(root);
   if (!config) return fail2("No Kaddo config found.");
   if (!isCore2(config)) return fail2("Module discovery is only available from a core repository.");
   const sysName = config.system?.name ?? config.project?.name ?? "";
@@ -19210,7 +19338,7 @@ function modulesDiscoverTool(root, args) {
         descriptor.modules.push({ id: d3.id, name: d3.id, path: d3.path, parent_system: sysName, status: "configured" });
       }
     }
-    const ymlContent = stringifyYaml6({ version: descriptor.version ?? 1, system: sysName, workspace_roots: workspaceRoots2, modules: descriptor.modules ?? [] });
+    const ymlContent = stringifyYaml7({ version: descriptor.version ?? 1, system: sysName, workspace_roots: workspaceRoots2, modules: descriptor.modules ?? [] });
     writeDerived(root, ".kaddo/modules.yml", ymlContent);
     return ok2({ discovered, applied: true });
   }
@@ -19256,7 +19384,7 @@ ${list3(data.owners)}
 }
 
 // ../cli/src/core/system-topology.ts
-import { parse as parseYaml12, stringify as stringifyYaml7 } from "yaml";
+import { parse as parseYaml12, stringify as stringifyYaml8 } from "yaml";
 import fs6 from "fs";
 import path5 from "path";
 import crypto from "crypto";
@@ -19771,7 +19899,7 @@ function systemImpactCandidatesTool(root, args) {
 
 // ../cli/src/services/integrations.ts
 import matter14 from "gray-matter";
-import { parse as parseYaml13, stringify as stringifyYaml8 } from "yaml";
+import { parse as parseYaml13, stringify as stringifyYaml9 } from "yaml";
 
 // ../cli/src/core/work-item-write.ts
 import fs7 from "fs";
@@ -22015,7 +22143,16 @@ function createServer(root) {
   server.registerTool(
     "kaddo_project_status",
     { title: "Kaddo project status", description: "Compact project status (state, phase, work items, ownership, graph quality, capsules).", inputSchema: {} },
-    async () => toolText(guarded(root, () => projectStatus(root)))
+    async () => {
+      const result = guarded(root, () => projectStatus(root));
+      if (result.ok) {
+        const config = loadConfig2(root);
+        if (getConsentState(config) === "unset" && !isDeferralActive(root)) {
+          result.data.telemetryNotice = consentNotice();
+        }
+      }
+      return toolText(result);
+    }
   );
   server.registerTool(
     "kaddo_list_work_items",
@@ -22340,6 +22477,27 @@ function createServer(root) {
     },
     async (args) => toolText(guarded(root, () => verifyWorkItemTool(root, args)))
   );
+  server.registerTool(
+    "kaddo_telemetry_status",
+    {
+      title: "Telemetry status",
+      description: "Read-only telemetry consent state, registration status, and pending events. Includes a consent notice when telemetry has not been configured.",
+      inputSchema: {}
+    },
+    async () => toolText(guarded(root, () => telemetryStatusTool(root)))
+  );
+  server.registerTool(
+    "kaddo_set_telemetry_consent",
+    {
+      title: "Set telemetry consent",
+      description: "Set telemetry consent to enabled, disabled, or not-now (defer 24h). Without confirm=true returns a preview of the action. With confirm=true applies the change. Writes only .kaddo/config.yml (consent field).",
+      inputSchema: {
+        consent: z4.enum(["enabled", "disabled", "not-now"]).describe("Consent decision: enable telemetry, disable it, or defer for 24 hours"),
+        confirm: z4.boolean().optional().describe("Must be true to apply the change")
+      }
+    },
+    async (args) => toolText(guarded(root, () => setTelemetryConsentTool(root, args)))
+  );
   let installedSkills = [];
   try {
     assertKaddoProject(root);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kaddo/mcp",
-  "version": "3.102.0",
+  "version": "3.104.0",
   "description": "MCP server for Kaddo project knowledge: read-only resources/tools/prompts plus safe derived generation under .kaddo/.",
   "license": "MIT",
   "repository": {