@nifrajs/cli 2.12.1 → 2.14.1

package/dist/manifest-tool.js

@@ -19,8 +19,8 @@ export function formatManifestDiff(diff) {
         : "No breaking manifest changes.");
     return lines.join("\n");
 }
-/** Build only after both assurance layers pass, then optionally create an operator-signed sidecar. */
-export async function runManifestEmit(cwd, options = {}) {
+/** Emit the manifest without printing. This is the execution seam used by all adapters. */
+export async function collectManifestEmit(cwd, options = {}) {
     const verification = await collectProjectVerification(cwd, {
         ...(options.config !== undefined ? { config: options.config } : {}),
     });
@@ -34,9 +34,9 @@ export async function runManifestEmit(cwd, options = {}) {
     if (assurance === undefined) {
         throw new Error("[nifra] assurance evaluation was unavailable for manifest emission");
     }
+    const path = resolve(cwd, options.out ?? config.manifest?.path ?? DEFAULT_MANIFEST_FILE);
     if (!assurance.ok || (capabilityProject !== undefined && !capabilityProject.report.ok)) {
-        console.error("[nifra] refusing to emit a manifest from failing assurance");
-        return false;
+        return { ok: false, path };
     }
     const manifest = await buildNifraManifest({
         source: config.source,
@@ -44,28 +44,42 @@ export async function runManifestEmit(cwd, options = {}) {
         assurance,
         ...(capabilityProject !== undefined ? { capabilities: capabilityProject.report } : {}),
     });
-    const path = resolve(cwd, options.out ?? config.manifest?.path ?? DEFAULT_MANIFEST_FILE);
     await Bun.write(path, `${serializeNifraManifest(manifest)}\n`);
+    let signaturePath;
     if (options.sign !== undefined) {
         if (config.manifest?.signer === undefined) {
             throw new Error("[nifra] --sign requires manifest.signer in nifra.assurance.ts; keep private keys behind that KMS/HSM callback.");
         }
         const signer = await config.manifest.signer(options.sign);
         const signature = await signNifraManifest(manifest, signer);
-        await Bun.write(`${path}.sig`, `${serializeNifraManifestSignature(signature)}\n`);
+        signaturePath = `${path}.sig`;
+        await Bun.write(signaturePath, `${serializeNifraManifestSignature(signature)}\n`);
     }
-    console.log(`[nifra] wrote manifest to ${path}${options.sign === undefined ? "" : ` and ${path}.sig`}`);
+    return { ok: true, path, manifest, ...(signaturePath === undefined ? {} : { signaturePath }) };
+}
+/** Build only after both assurance layers pass, then optionally create an operator-signed sidecar. */
+export async function runManifestEmit(cwd, options = {}) {
+    const result = await collectManifestEmit(cwd, options);
+    if (!result.ok) {
+        console.error("[nifra] refusing to emit a manifest from failing assurance");
+        return false;
+    }
+    console.log(`[nifra] wrote manifest to ${result.path}${result.signaturePath === undefined ? "" : ` and ${result.signaturePath}`}`);
     return true;
 }
 /** Diff two already-emitted, hash-verified artifacts. Suitable for deploy promotion gates. */
-export async function runManifestDiff(cwd, beforePath, afterPath, options = {}) {
+export async function collectManifestDiff(cwd, beforePath, afterPath) {
     const before = resolve(cwd, beforePath);
     const after = resolve(cwd, afterPath);
     if (!existsSync(before))
         throw new Error(`[nifra] manifest not found: ${before}`);
     if (!existsSync(after))
         throw new Error(`[nifra] manifest not found: ${after}`);
-    const diff = diffNifraManifests(await parseNifraManifest(await Bun.file(before).text(), before), await parseNifraManifest(await Bun.file(after).text(), after));
+    return diffNifraManifests(await parseNifraManifest(await Bun.file(before).text(), before), await parseNifraManifest(await Bun.file(after).text(), after));
+}
+/** Diff two already-emitted, hash-verified artifacts and print the result. */
+export async function runManifestDiff(cwd, beforePath, afterPath, options = {}) {
+    const diff = await collectManifestDiff(cwd, beforePath, afterPath);
     console.log(options.json === true
         ? JSON.stringify({ hasBreaking: diff.hasBreaking, changes: diff.changes }, null, 2)
         : formatManifestDiff(diff));

package/dist/manifest-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-tool.js","sourceRoot":"","sources":["../src/manifest-tool.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAElB,kBAAkB,EAClB,sBAAsB,EACtB,+BAA+B,EAC/B,iBAAiB,GAClB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAE9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAA;AAE1D,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAA;IAC5D,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAW,CAAA;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;SAC5B,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CACnC;SACA,GAAG,CACF,CAAC,MAAM,EAAE,EAAE,CACT,GAAG,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CACjK,CAAA;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAA;IACvF,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,WAAW;QACd,CAAC,CAAC,GAAG,QAAQ,4BAA4B,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;QACrE,CAAC,CAAC,+BAA+B,CACpC,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,UAAuF,EAAE;IAEzF,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE;QACzD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAA;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,CACJ,YAAY,CAAC,WAAW;YACxB,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAChF,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAA;IAClC,MAAM,SAAS,GAAG,YAAY,CAAC,cAAc,CAAA;IAC7C,MAAM,iBAAiB,GAAG,YAAY,CAAC,UAAU,CAAA;IACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC3E,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,YAAY,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,SAAS;QACT,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,qBAAqB,CAAC,CAAA;IACxF,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAE9D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC3D,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,CAAC,GAAG,CACT,6BAA6B,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,EAAE,CAC3F,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,UAAkB,EAClB,SAAiB,EACjB,UAAuC,EAAE;IAEzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACrC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAA;IACjF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;IAC/E,MAAM,IAAI,GAAG,kBAAkB,CAC7B,MAAM,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,EAC/D,MAAM,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAC9D,CAAA;IACD,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,IAAI,KAAK,IAAI;QACnB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAC7B,CAAA;IACD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAA;AAC1B,CAAC"}
+{"version":3,"file":"manifest-tool.js","sourceRoot":"","sources":["../src/manifest-tool.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAGlB,kBAAkB,EAClB,sBAAsB,EACtB,+BAA+B,EAC/B,iBAAiB,GAClB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAE9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAA;AAE1D,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAA;IAC5D,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAW,CAAA;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;SAC5B,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CACnC;SACA,GAAG,CACF,CAAC,MAAM,EAAE,EAAE,CACT,GAAG,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CACjK,CAAA;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAA;IACvF,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,WAAW;QACd,CAAC,CAAC,GAAG,QAAQ,4BAA4B,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;QACrE,CAAC,CAAC,+BAA+B,CACpC,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AASD,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,UAAuF,EAAE;IAEzF,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE;QACzD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAA;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,CACJ,YAAY,CAAC,WAAW;YACxB,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAChF,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAA;IAClC,MAAM,SAAS,GAAG,YAAY,CAAC,cAAc,CAAA;IAC7C,MAAM,iBAAiB,GAAG,YAAY,CAAC,UAAU,CAAA;IACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,qBAAqB,CAAC,CAAA;IACxF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,YAAY,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,SAAS;QACT,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC,CAAA;IACF,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAE9D,IAAI,aAAiC,CAAA;IACrC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC3D,aAAa,GAAG,GAAG,IAAI,MAAM,CAAA;QAC7B,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAA;AAChG,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,UAAuF,EAAE;IAEzF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC3E,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CAAC,GAAG,CACT,6BAA6B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,aAAa,EAAE,EAAE,CACtH,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,UAAkB,EAClB,SAAiB;IAEjB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACrC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAA;IACjF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAA;IAC/E,OAAO,kBAAkB,CACvB,MAAM,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,EAC/D,MAAM,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAC9D,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,UAAkB,EAClB,SAAiB,EACjB,UAAuC,EAAE;IAEzC,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;IAClE,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,IAAI,KAAK,IAAI;QACnB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAC7B,CAAA;IACD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAA;AAC1B,CAAC"}

package/dist/mcp-http.js

@@ -23,7 +23,7 @@ import { loadTypesCorpus } from "./types-search.js";
 export { examplesAppTool, examplesWidget } from "./mcp-app-tool.js";
 export { docsTools } from "./mcp-docs-tools.js";
 // Kept in lockstep with packages/cli/package.json by check:publish's version-consistency gate.
-const VERSION = "2.12.1";
+const VERSION = "2.14.1";
 const SERVER_INFO = { name: "nifra-docs", version: VERSION };
 // Derive the GET/health tool list from the tools actually served, so the line can never drift from them.
 const docsHealth = (tools) => `nifra docs MCP - POST JSON-RPC 2.0 here (methods: initialize, tools/list, tools/call). Tools: ${tools

package/dist/mcp.d.ts

@@ -34,6 +34,7 @@
  * minimal-surface choice as the rest of nifra. The pure dispatch lives in `./mcp-protocol.ts`; this
  * module is the I/O shell (stdin loop, tool wiring, the run subprocess).
  */
+import { type CommandCatalogEntry, type CommandSpec } from "./command-catalog.js";
 import type { LoadAppOptions, LoadedApp } from "./load.js";
 import { type McpPrompt, type McpResource, type McpServerFeatures, type McpTool } from "./mcp-protocol.js";
 import { type McpRootVerdict } from "./mcp-root.js";
@@ -85,6 +86,13 @@ export declare function projectFeatures(cwd: string, loadAppCached?: (outDirName
  */
 export declare function resolveProjectDir(root: string, dir: string | undefined): string | null;
 /** Build the project-scoped tools for `cwd`. */
+export interface CommandMcpToolOptions {
+    readonly cwd: string;
+    readonly loadAppCached?: () => Promise<LoadedApp>;
+}
+/** Adapt one executable catalog spec to its MCP descriptor and project-scoped handler. */
+export declare function toMcpTool(source: CommandSpec<unknown, unknown> | CommandCatalogEntry, options: CommandMcpToolOptions): McpTool;
+export declare function catalogProjectTools(cwd: string, loadAppCached?: () => Promise<LoadedApp>): McpTool[];
 export declare function projectTools(cwd: string, loadAppCached?: (outDirName?: string) => Promise<LoadedApp>): McpTool[];
 /** Extract tools registered via .tool() routes on the Nifra backend. Exported for the test that proves a
  * `server().tool()` route surfaces in `tools/list` and executes through `tools/call`. */

package/dist/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAYH,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAG1D,OAAO,EAOL,KAAK,SAAS,EAEd,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,OAAO,EAIb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAIL,KAAK,cAAc,EAMpB,MAAM,eAAe,CAAA;AAyBtB;mFACmF;AACnF,eAAO,MAAM,2BAA2B,OAAQ,CAAA;AAChD,eAAO,MAAM,6BAA6B,UAAY,CAAA;AAEtD,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAED,6GAA6G;AAC7G,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,SAAgC,GACvC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AA8FD;;;;;mGAKmG;AACnG,qBAAa,UAAU;IAkBnB,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAlBxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAOrB;IACH,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,MAAM,CAAI;IAClB,OAAO,CAAC,MAAM,CAAQ;gBAGpB,KAAK,EAAE,SAAS,GAAG,YAAY,EAC/B,GAAG,EAAE,MAAM,EACF,WAAW,EAAE,MAAM,EACX,KAAK,EAAE,MAAM;IAsBhC,IAAI,IAAI,IAAI;IAIN,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;YAwCtD,UAAU;YAiBV,UAAU;IAUxB,OAAO,CAAC,UAAU;CAkBnB;AAsFD,KAAK,eAAe,GAAG,CACrB,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAA;AAEvB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CACxD;AAmCD,qGAAqG;AACrG,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,sBAA2B,GACnC,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CA+B7C;AA0CD,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAA8B,GACtF,WAAW,EAAE,CAmCf;AAED,wBAAgB,cAAc,IAAI,SAAS,EAAE,CAkE5C;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAA8B,GACtF,iBAAiB,CAEnB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CA4BtF;AAWD,gDAAgD;AAChD,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAA8B,GACtF,OAAO,EAAE,CA61BX;AAOD;yFACyF;AACzF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,CAoD/D;AAYD,gHAAgH;AAChH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,EAAE,CAqBvE;AAWD,4GAA4G;AAC5G,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,CAgBnE;AA0HD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,EAAE,CAqB/E;AAED;oDACoD;AACpD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,CAKxF;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CA0Hf"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAQH,OAAO,EACL,KAAK,mBAAmB,EAExB,KAAK,WAAW,EAIjB,MAAM,sBAAsB,CAAA;AAI7B,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAG1D,OAAO,EAOL,KAAK,SAAS,EAEd,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,OAAO,EAIb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAIL,KAAK,cAAc,EAMpB,MAAM,eAAe,CAAA;AAwBtB;mFACmF;AACnF,eAAO,MAAM,2BAA2B,OAAQ,CAAA;AAChD,eAAO,MAAM,6BAA6B,UAAY,CAAA;AAEtD,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAED,6GAA6G;AAC7G,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,SAAgC,GACvC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AA8FD;;;;;mGAKmG;AACnG,qBAAa,UAAU;IAkBnB,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAlBxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAOrB;IACH,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,MAAM,CAAI;IAClB,OAAO,CAAC,MAAM,CAAQ;gBAGpB,KAAK,EAAE,SAAS,GAAG,YAAY,EAC/B,GAAG,EAAE,MAAM,EACF,WAAW,EAAE,MAAM,EACX,KAAK,EAAE,MAAM;IAsBhC,IAAI,IAAI,IAAI;IAIN,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;YAwCtD,UAAU;YAiBV,UAAU;IAUxB,OAAO,CAAC,UAAU;CAkBnB;AAsFD,KAAK,eAAe,GAAG,CACrB,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAA;AAEvB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CACxD;AAmCD,qGAAqG;AACrG,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,sBAA2B,GACnC,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CA+B7C;AA0CD,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAA8B,GACtF,WAAW,EAAE,CAmCf;AAED,wBAAgB,cAAc,IAAI,SAAS,EAAE,CAkE5C;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAA8B,GACtF,iBAAiB,CAEnB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CA4BtF;AAWD,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;CAClD;AAED,0FAA0F;AAC1F,wBAAgB,SAAS,CACvB,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,mBAAmB,EAC3D,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CA+CT;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,MAAM,OAAO,CAAC,SAAS,CAA8B,GACnE,OAAO,EAAE,CAQX;AAED,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,aAAa,GAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAA8B,GACtF,OAAO,EAAE,CAocX;AAOD;yFACyF;AACzF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,CAoD/D;AAYD,gHAAgH;AAChH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,EAAE,CAqBvE;AAWD,4GAA4G;AAC5G,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,CAgBnE;AA0HD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,EAAE,CAqB/E;AAED;oDACoD;AACpD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,CAKxF;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CA0Hf"}

package/dist/mcp.js

@@ -40,16 +40,15 @@ import { basename, isAbsolute, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import { reflectRoutes } from "@nifrajs/core/reflection";
 import { Glob } from "bun";
+import { commandCatalog, commandMcpName, findCommandSpec, } from "./command-catalog.js";
 import { collectContractProof } from "./contract-proof.js";
 import { loadDocsCorpus } from "./docs-search.js";
 import { loadExamplesCorpus } from "./examples.js";
-import { describeProject } from "./introspect.js";
 import { detectMonorepo, loadMonorepoApps } from "./load.js";
 import { docsTools } from "./mcp-docs-tools.js";
 import { createMcpProtocolState, handleRpc, rpcError, } from "./mcp-protocol.js";
 import { applyClientRoots, detectToolingDrift, driftNote, pathsFromRootsResult, resolveRootState, rootInstructions, rootVerdict, } from "./mcp-root.js";
 import { loadTypesCorpus } from "./types-search.js";
-import { collectProjectWorkGraph } from "./work-graph.js";
 /** Path to a sibling child entry (`mcp-run` / `mcp-render` / `mcp-ws`), resolved next to this module (`.ts` in
  * dev, `.js` once built). Each runs in a FRESH subprocess per call so the project's current code loads. */
 function childPath(name) {
@@ -593,11 +592,66 @@ export function resolveProjectDir(root, dir) {
 function dirError(dir) {
     return JSON.stringify({ ok: false, error: `dir must be a subdirectory of the project root - "${dir}" escapes it.` }, null, 2);
 }
-/** Build the project-scoped tools for `cwd`. */
+/** Adapt one executable catalog spec to its MCP descriptor and project-scoped handler. */
+export function toMcpTool(source, options) {
+    const spec = "run" in source ? source : findCommandSpec(source.name);
+    if (spec === undefined)
+        throw new Error(`missing command spec for ${source.name}`);
+    const entry = "run" in source ? undefined : source;
+    const { cwd } = options;
+    const loadAppCached = options.loadAppCached ?? createCachedAppLoader(cwd);
+    return {
+        name: commandMcpName(entry?.name ?? spec.name),
+        description: entry?.summary ?? spec.summary,
+        inputSchema: entry?.inputSchema ?? spec.input.jsonSchema,
+        handler: async (args, context) => {
+            const raw = { ...args };
+            const dir = raw.dir;
+            if (dir !== undefined && typeof dir !== "string")
+                return dirError(undefined);
+            const target = resolveProjectDir(cwd, dir);
+            if (target === null)
+                return dirError(dir);
+            if (typeof raw.config === "string") {
+                const config = resolve(target, raw.config);
+                if (config !== target && !config.startsWith(`${target}${sep}`))
+                    return JSON.stringify({ ok: false, error: "config must stay inside the selected project directory" }, null, 2);
+            }
+            delete raw.dir;
+            let input;
+            try {
+                input = spec.input.parse(raw);
+            }
+            catch (error) {
+                return JSON.stringify({ ok: false, error: error instanceof Error ? error.message : String(error) }, null, 2);
+            }
+            const commandContext = {
+                cwd: target,
+                signal: context.signal,
+                progress: () => context.reportProgress?.(0.5, 1),
+                ...(target === cwd ? { loadApp: loadAppCached } : {}),
+            };
+            const output = await spec.run(input, commandContext);
+            const value = spec.json?.(output, input) ?? output;
+            return typeof value === "string" ? value : JSON.stringify(value, null, 2);
+        },
+    };
+}
+export function catalogProjectTools(cwd, loadAppCached = createCachedAppLoader(cwd)) {
+    return commandCatalog
+        .filter((entry) => entry.transports.includes("mcp"))
+        .map((entry) => {
+        const spec = findCommandSpec(entry.name);
+        if (spec === undefined)
+            throw new Error(`missing command spec for ${entry.name}`);
+        return toMcpTool(spec, { cwd, loadAppCached });
+    });
+}
 export function projectTools(cwd, loadAppCached = createCachedAppLoader(cwd)) {
     const warmRun = createWarmHandler("mcp-run", cwd, "run");
     const warmRender = createWarmHandler("mcp-render", cwd, "render");
-    return [
+    const catalogTools = catalogProjectTools(cwd, () => loadAppCached());
+    const legacyTools = [
         {
             name: "nifra_contract_proof",
             description: "Compare the current route contract with its snapshot and join each changed route to its route-assurance and capability evidence. Returns hasBreaking as the gate. The typed-contract check is lazy and runs only when check is true.",
@@ -646,75 +700,6 @@ export function projectTools(cwd, loadAppCached = createCachedAppLoader(cwd)) {
                 }
             },
         },
-        {
-            name: "nifra_prove",
-            description: "Build the static verification work graph for this project. Pass changed files to get only impacted routes and the cheapest proof plan. The result includes a serializable evidence bundle and a machine-checkable stop condition. Requires a fresh build and never probes a running application.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    files: {
-                        type: "array",
-                        items: { type: "string" },
-                        description: "Project-relative changed files. Omit for a graph overview.",
-                    },
-                    minLevel: {
-                        type: "integer",
-                        minimum: 0,
-                        maximum: 4,
-                        description: "Required proof level for the stop condition. Defaults to 1.",
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args) => {
-                const files = args.files;
-                const minLevel = args.minLevel;
-                if ((files !== undefined &&
-                    (!Array.isArray(files) || files.some((file) => typeof file !== "string"))) ||
-                    (minLevel !== undefined &&
-                        (typeof minLevel !== "number" ||
-                            !Number.isInteger(minLevel) ||
-                            minLevel < 0 ||
-                            minLevel > 4))) {
-                    return JSON.stringify({
-                        ok: false,
-                        error: "files must be strings and minLevel must be an integer from 0 to 4",
-                    }, null, 2);
-                }
-                try {
-                    return JSON.stringify(await collectProjectWorkGraph(cwd, {
-                        ...(files === undefined ? {} : { changedFiles: files }),
-                        ...(minLevel === undefined ? {} : { minLevel }),
-                    }), null, 2);
-                }
-                catch (error) {
-                    return JSON.stringify({ ok: false, error: error instanceof Error ? error.message : "work graph failed" }, null, 2);
-                }
-            },
-        },
-        {
-            name: "nifra_context",
-            description: "Get this nifra project's surface. Call it once UNFILTERED for a tight INDEX: the route list (API routes as `METHOD path`, page routes as `pattern → file`) + framework conventions + a pointer - cheap even on a big app, no per-route schema dump. Then pass `path` (a route prefix like /api/orders) and/or `kind` (api|pages) to fetch the FULL contract for that slice (body/query/response TS shapes + the exact typed-client call form).",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    path: {
-                        type: "string",
-                        description: "Only routes whose path/pattern starts with this prefix.",
-                    },
-                    kind: {
-                        type: "string",
-                        enum: ["api", "pages"],
-                        description: "Limit to API routes or page routes.",
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args) => {
-                const filter = args;
-                return describeProject(await loadAppCached(), filter);
-            },
-        },
         {
             name: "nifra_explain",
             description: "Turn a nifra error into a STRUCTURED diagnostic instead of eyeballing a stack trace: a stable `code`, the top frame in YOUR source, a codeframe around the offending line, and - when nifra recognises the failure - the plain-language `cause` + `fix` + docs anchor. Pass `error` (and `stack` if you have it, e.g. from nifra_run/nifra_test output or a failing build) to explain a specific failure; or pass `port` to fetch the running dev server's most recent SSR failure from `/__nifra/last-error`. Returns the same JSON the dev overlay renders.",
@@ -844,25 +829,6 @@ export function projectTools(cwd, loadAppCached = createCachedAppLoader(cwd)) {
                 }
             },
         },
-        {
-            name: "nifra_routes",
-            description: "List this project's API routes as STRUCTURED JSON - each `{ method, path, call, body?, query?, response? }`, where `call` is the exact typed-client call form and the shapes are compact TS-typed contracts. For programmatic use (list_routes / get_route_schema) instead of parsing the nifra_context Markdown. No args = every route; pass `path` (a path or prefix like /api/orders) to narrow to those routes.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    path: {
-                        type: "string",
-                        description: "Only routes whose path starts with this prefix (omit for all routes).",
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args) => {
-                const { routesToJson } = await import("./introspect.js");
-                const { path } = args;
-                return JSON.stringify(routesToJson(await loadAppCached(), path), null, 2);
-            },
-        },
         {
             name: "nifra_openapi",
             description: 'Return this project\'s backend OpenAPI 3.1 document generated from backend.ts route schemas via @nifrajs/schema. Use `format:"json"` for machine edits (default) or `format:"yaml"` for humans. Pass `path` (a route prefix like /api/orders, mirroring nifra_routes) to narrow a large backend to operations under that prefix instead of the whole document. Frontend-only apps return a valid empty paths object.',
@@ -1043,180 +1009,6 @@ export function projectTools(cwd, loadAppCached = createCachedAppLoader(cwd)) {
                 return `${status}\n\n${renderScaffold(path, framework)}`;
             },
         },
-        {
-            name: "nifra_check",
-            description: 'Run the project\'s drift gate and return a structured result { ok, typecheck, diagnostics[], pipeline? }: typecheck (the frontend↔backend contract), plus lints for hand-rolled fetch() to your own API, untyped client("…") calls missing <typeof app>, and server-only imports in routes/. `pipeline` answers "which bundler does this app run on" (bun|vite, for dev AND build alike) without starting a server, and its `pipeline` diagnostics catch the hazards of having two: a plugin in the slot the other bundler reads (accepted, then never called), a dev toolchain imported by the file `nifra build` bundles into the production server, and `conditions` that cannot reach Bun\'s dev client bundle. Read it before adding a plugin or a compiler. Pass lintsOnly:true for a near-instant lint pass while iterating; run the full gate (default) to confirm the work is done - fix every diagnostic before finishing.',
-            inputSchema: {
-                type: "object",
-                properties: {
-                    lintsOnly: {
-                        type: "boolean",
-                        description: "Skip tsc; run only the near-instant source lints (inner-loop mode).",
-                    },
-                    dir: {
-                        type: "string",
-                        description: 'Run the check in this subdirectory (relative to the project root), e.g. "app" or "packages/api". Use it when the MCP server\'s root is a monorepo but you want to check just one app. Default: the project root.',
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args, context) => {
-                const { collectCheckResult } = await import("./check.js");
-                const opts = args;
-                const target = resolveProjectDir(cwd, opts.dir);
-                if (target === null)
-                    return dirError(opts.dir);
-                const result = await collectCheckResult(target, {
-                    lintsOnly: opts.lintsOnly ?? false,
-                    signal: context.signal,
-                    // Bound the result so a large project can't emit an MCP message big enough to break the stdio
-                    // transport (`-32000: Connection closed`). If `truncated` comes back, fix the shown diagnostics
-                    // and re-run. The scan already skips gitignored trees (walkSource), so this is the safety net.
-                    maxDiagnostics: 100,
-                });
-                return JSON.stringify(result.structuredDiagnostics === undefined
-                    ? result
-                    : { ...result, diagnostics: result.structuredDiagnostics }, null, 2);
-            },
-        },
-        {
-            name: "nifra_fix",
-            description: "Automatically fix diagnostic lints (such as rewriting hand-rolled fetch() calls to the typed nifra client, adding generic types to client factory calls, and resolving dependency drift in package.json). Runs diagnostics, applies all mechanical edit suggestions, applies doctor dependency fixes, and returns the remaining unresolved diagnostics.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    code: {
-                        type: "string",
-                        description: "Apply the registered recipe for one stable diagnostic code when available.",
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args, context) => {
-                const { collectCheckResult } = await import("./check.js");
-                const { applyDiagnosticRecipe } = await import("./fix-recipes.js");
-                const { applyDoctorAutoFix } = await import("./doctor.js");
-                const { resolveInsideProject } = await import("./project-path.js");
-                const { writeFile, readFile } = await import("node:fs/promises");
-                let doctorResult = null;
-                try {
-                    doctorResult = await applyDoctorAutoFix(cwd);
-                }
-                catch {
-                    // ignore doctor errors
-                }
-                const checkResult = await collectCheckResult(cwd, {
-                    lintsOnly: true,
-                    signal: context.signal,
-                    maxDiagnostics: 100,
-                });
-                const requestedCode = args.code;
-                const recipeFixed = [];
-                if (typeof requestedCode === "string") {
-                    for (const diagnostic of checkResult.structuredDiagnostics ?? []) {
-                        if (diagnostic.code !== requestedCode)
-                            continue;
-                        recipeFixed.push(...(await applyDiagnosticRecipe(cwd, diagnostic)));
-                    }
-                }
-                const fixed = [];
-                for (const diag of checkResult.diagnostics) {
-                    if (diag.file && diag.line && diag.suggestion?.kind === "edit" && diag.suggestion.diff) {
-                        try {
-                            const diffLines = diag.suggestion.diff.split("\n");
-                            const beforeLine = diffLines.find((l) => l.startsWith("-"))?.slice(1);
-                            const afterLine = diffLines.find((l) => l.startsWith("+"))?.slice(1);
-                            if (beforeLine !== undefined && afterLine !== undefined) {
-                                const filePath = await resolveInsideProject(cwd, diag.file);
-                                if (filePath === undefined)
-                                    continue;
-                                const content = await readFile(filePath, "utf-8");
-                                const lines = content.split("\n");
-                                const idx = diag.line - 1;
-                                if (lines[idx] === beforeLine) {
-                                    lines[idx] = afterLine;
-                                    await writeFile(filePath, lines.join("\n"), "utf-8");
-                                    fixed.push({
-                                        file: diag.file,
-                                        line: diag.line,
-                                        title: diag.suggestion.title,
-                                    });
-                                }
-                            }
-                        }
-                        catch {
-                            // ignore edit errors
-                        }
-                    }
-                }
-                const finalResult = await collectCheckResult(cwd, {
-                    lintsOnly: false,
-                    signal: context.signal,
-                    maxDiagnostics: 100,
-                });
-                return JSON.stringify({
-                    ok: finalResult.ok,
-                    fixed,
-                    recipeFixed,
-                    doctorFixed: doctorResult?.fixed ?? [],
-                    remainingDiagnostics: finalResult.diagnostics,
-                }, null, 2);
-            },
-        },
-        {
-            name: "nifra_assure",
-            description: "Evaluate nifra.assurance.ts and return the complete route-assurance report: every reflected route's first matching policy rule, enforcement evidence, missing/forbidden evidence, and the fail-closed ok bit. Use after adding or changing routes/security middleware; fix every finding before finishing.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    config: {
-                        type: "string",
-                        description: "Config path relative to the selected project directory. Default: nifra.assurance.ts.",
-                    },
-                    bundle: {
-                        type: "boolean",
-                        description: "Return the single gate bundle with verdict and explicit skipped gates.",
-                    },
-                    strict: {
-                        type: "boolean",
-                        description: "Treat warning diagnostics as failures in the bundle.",
-                    },
-                    hydration: {
-                        type: "boolean",
-                        description: "Run the hydration assurance gate.",
-                    },
-                    interact: {
-                        type: "boolean",
-                        description: "Run declared hydration probes after the client mounts.",
-                    },
-                    dir: {
-                        type: "string",
-                        description: 'Evaluate this project subdirectory (relative to the MCP root), e.g. "apps/api". Default: the project root.',
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args) => {
-                const opts = args;
-                const target = resolveProjectDir(cwd, opts.dir);
-                if (target === null)
-                    return dirError(opts.dir);
-                const config = opts.config === undefined ? undefined : resolve(target, opts.config);
-                if (config !== undefined && config !== target && !config.startsWith(target + sep)) {
-                    return JSON.stringify({ ok: false, error: "config must stay inside the selected project directory" }, null, 2);
-                }
-                const { collectAssuranceReport, collectAssureBundle } = await import("./assure.js");
-                if (opts.bundle === true || opts.strict === true || opts.hydration === true) {
-                    return JSON.stringify(await collectAssureBundle(target, {
-                        ...(config === undefined ? {} : { config }),
-                        ...(opts.strict === undefined ? {} : { strict: opts.strict }),
-                        ...(opts.hydration === undefined ? {} : { hydration: opts.hydration }),
-                        ...(opts.interact === undefined ? {} : { interact: opts.interact }),
-                    }), null, 2);
-                }
-                return JSON.stringify(await collectAssuranceReport(target, config), null, 2);
-            },
-        },
         {
             name: "nifra_hydrate",
             description: "Run the hydration assurance gate and return stable NF-H diagnostics.",
@@ -1237,90 +1029,8 @@ export function projectTools(cwd, loadAppCached = createCachedAppLoader(cwd)) {
                 return JSON.stringify(await runHydrationAssurance(target, { interact: opts.interact === true }), null, 2);
             },
         },
-        {
-            name: "nifra_replay",
-            description: "Validate and dispatch a token-only replay metadata file.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    file: { type: "string", description: "Replay file relative to the project root." },
-                },
-                required: ["file"],
-                additionalProperties: false,
-            },
-            handler: async (args) => {
-                const file = args.file;
-                if (typeof file !== "string" || file.trim() === "")
-                    return JSON.stringify({ ok: false, error: "file is required" });
-                const { runReplay } = await import("./replay.js");
-                try {
-                    return JSON.stringify(await runReplay(cwd, file), null, 2);
-                }
-                catch (error) {
-                    return JSON.stringify({ ok: false, error: error instanceof Error ? error.message : String(error) }, null, 2);
-                }
-            },
-        },
-        {
-            name: "nifra_levels",
-            description: "Compute this project's verification ladder and return { achieved, levels[] }, where each level carries { level, name, ok, reasons[] }. The ladder is cumulative: L0 typed contract (nifra check), L1 route assurance, L2 reviewed capability lockfile, L3 route trust manifest in sync, L4 contract invariants, so a level only holds when every level below it holds, and `achieved` is -1 when even L0 fails. This is the single gate that reports what a change actually proves: run it after finishing work, and treat any `reasons` on a level the project already claimed as a regression to fix.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    config: {
-                        type: "string",
-                        description: "Assurance config path relative to the selected project directory. Default: nifra.assurance.ts.",
-                    },
-                    seed: {
-                        type: "number",
-                        description: "Deterministic seed for the L4 invariant run. Default 1.",
-                    },
-                    dir: {
-                        type: "string",
-                        description: 'Evaluate this project subdirectory (relative to the MCP root), e.g. "apps/api". Default: the project root.',
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args) => {
-                const opts = args;
-                const target = resolveProjectDir(cwd, opts.dir);
-                if (target === null)
-                    return dirError(opts.dir);
-                if (opts.seed !== undefined && !Number.isSafeInteger(opts.seed)) {
-                    return JSON.stringify({ ok: false, error: "seed must be a safe integer" }, null, 2);
-                }
-                const config = opts.config === undefined ? undefined : resolve(target, opts.config);
-                if (config !== undefined && config !== target && !config.startsWith(target + sep)) {
-                    return JSON.stringify({ ok: false, error: "config must stay inside the selected project directory" }, null, 2);
-                }
-                const { collectVerificationLevels } = await import("./levels-tool.js");
-                return JSON.stringify(await collectVerificationLevels(target, {
-                    ...(opts.config === undefined ? {} : { config: opts.config }),
-                    ...(opts.seed === undefined ? {} : { seed: opts.seed }),
-                }), null, 2);
-            },
-        },
-        {
-            name: "nifra_doctor",
-            description: "Check this project for packages imported in source but NOT declared in package.json - the Bun-workspace trap where an import resolves at runtime (hoisting/workspace) so tests pass and `bun install` says no changes, yet tsc fails and a fresh/standalone install can't resolve it. Also reports `pipeline`: which bundler (bun|vite) this app's dev AND build phases run on and why, plus config hazards that only exist because there are two - a plugin sitting in the slot the other bundler reads (accepted, then never called), a dev toolchain imported by the file `nifra build` bundles into the production server (builds clean, dies at startup), and `conditions` that cannot reach the client bundle Bun's dev server serves. Returns { ok, ran, findings[], pipeline?, fixed?, skippedFixes? }. Pass autoFix:true to update package.json only when the dependency version can be inferred locally from an ancestor package.json or installed package metadata; otherwise the tool returns the exact bun add command to run.",
-            inputSchema: {
-                type: "object",
-                properties: {
-                    autoFix: {
-                        type: "boolean",
-                        description: "When true, write safe package.json fixes using only locally inferred versions. Does not run install or use the network.",
-                    },
-                },
-                additionalProperties: false,
-            },
-            handler: async (args) => {
-                const opts = args;
-                const { applyDoctorAutoFix, collectDoctorResult } = await import("./doctor.js");
-                return JSON.stringify(opts.autoFix === true ? await applyDoctorAutoFix(cwd) : await collectDoctorResult(cwd), null, 2);
-            },
-        },
     ];
+    return [...catalogTools, ...legacyTools];
 }
 /** Extract tools registered via .tool() routes on the Nifra backend. Exported for the test that proves a
  * `server().tool()` route surfaces in `tools/list` and executes through `tools/call`. */