@stackwright-pro/mcp 0.2.0-alpha.80 → 0.2.0-alpha.81

package/dist/server.js

@@ -1613,24 +1613,28 @@ var import_path3 = require("path");
 var OTTER_NAME_TO_PHASE = [
   ["designer", "designer"],
   ["theme", "theme"],
+  ["scaffold", "scaffold"],
   ["api", "api"],
   ["auth", "auth"],
   ["dashboard", "dashboard"],
   ["data", "data"],
   ["page", "pages"],
   ["workflow", "workflow"],
+  ["services", "services"],
   ["polish", "polish"],
   ["geo", "geo"]
 ];
 var PHASE_TO_OTTER = {
   designer: "stackwright-pro-designer-otter",
   theme: "stackwright-pro-theme-otter",
+  scaffold: "stackwright-pro-scaffold-otter",
   api: "stackwright-pro-api-otter",
   auth: "stackwright-pro-auth-otter",
   pages: "stackwright-pro-page-otter",
   dashboard: "stackwright-pro-dashboard-otter",
   data: "stackwright-pro-data-otter",
   workflow: "stackwright-pro-workflow-otter",
+  services: "stackwright-services-otter",
   polish: "stackwright-pro-polish-otter",
   geo: "stackwright-pro-geo-otter"
 };
@@ -2015,7 +2019,7 @@ function registerOrchestrationTools(server2) {
 }
 
 // src/tools/pipeline.ts
-var import_zod11 = require("zod");
+var import_zod13 = require("zod");
 var import_fs5 = require("fs");
 var import_path5 = require("path");
 var import_crypto3 = require("crypto");
@@ -2343,7 +2347,343 @@ function registerArtifactSigningTools(server2) {
 }
 
 // src/tools/pipeline.ts
+var import_types3 = require("@stackwright-pro/types");
+
+// src/tools/get-schema.ts
+var import_zod12 = require("zod");
+var import_types2 = require("@stackwright-pro/types");
+
+// src/tools/validate-yaml-fragment.ts
+var import_zod11 = require("zod");
+var import_js_yaml = require("js-yaml");
 var import_types = require("@stackwright-pro/types");
+var SUPPORTED_SCHEMA_NAMES = [
+  "workflow_step",
+  "workflow_definition",
+  "workflow_field",
+  "workflow_action",
+  "navigation_item",
+  "auth_config"
+];
+var NavigationLinkSchema = import_zod11.z.lazy(
+  () => import_zod11.z.object({
+    label: import_zod11.z.string().min(1),
+    href: import_zod11.z.string().min(1),
+    children: import_zod11.z.array(NavigationLinkSchema).optional()
+  })
+);
+var NavigationSectionSchema = import_zod11.z.object({
+  section: import_zod11.z.string().min(1),
+  items: import_zod11.z.array(NavigationLinkSchema)
+});
+var NavigationItemSchema = import_zod11.z.union([
+  NavigationLinkSchema,
+  NavigationSectionSchema
+]);
+var FIELD_SYNONYMS = {
+  workflow_step: {
+    title: "label",
+    name: "label (at step level, use label: not name:)",
+    description: "message (use message: for step-level descriptive text)",
+    style: 'theme.variant \u2014 use theme: { variant: "primary" } not style: "primary"',
+    transitions: 'on_submit.transition \u2014 use on_submit: { transition: "next_step" } not transitions: [{then:...}]'
+  },
+  workflow_definition: {
+    title: "label",
+    name: "label (workflow-level label, not name:)",
+    description: "description is valid here \u2014 but message: is not (that is a step field)",
+    type: "id (workflows are identified by id:, not type:)"
+  },
+  workflow_field: {
+    id: "name (field-level identifier is name:, NOT id:)",
+    title: "label (field display text is label:, NOT title:)",
+    description: "placeholder or label (no description field on WorkflowField)"
+  },
+  workflow_action: {
+    style: 'theme.variant \u2014 use theme: { variant: "primary" } not style: "primary"',
+    then: "transition (action-level next-step is transition:, NOT then:)",
+    on_click: 'action: "service:..." (extract the service reference from on_click.action)',
+    title: "label (action display text is label:, NOT title:)",
+    name: "label (action display text is label:, NOT name:)"
+  },
+  navigation_item: {
+    children: "items (NavigationSection uses items: not children: \u2014 also use section: instead of label: for section headers)",
+    label: 'section (if this is a nav group/section, use section: "Title" and items: [...], not label:)',
+    title: "section (NavigationSection header field is section:, NOT title:)"
+  },
+  auth_config: {
+    method: 'type \u2014 auth config discriminates on type: "oidc" | "pki", NOT method:',
+    provider_type: 'type \u2014 use type: "oidc" or type: "pki"',
+    strategy: "type \u2014 top-level discriminator is type:, not strategy:"
+  }
+};
+function getSchema(name) {
+  switch (name) {
+    case "workflow_step":
+      return import_types.WorkflowStepSchema;
+    case "workflow_definition":
+      return import_types.WorkflowDefinitionSchema;
+    case "workflow_field":
+      return import_types.WorkflowFieldSchema;
+    case "workflow_action":
+      return import_types.WorkflowActionSchema;
+    case "navigation_item":
+      return NavigationItemSchema;
+    case "auth_config":
+      return import_types.authConfigSchema;
+  }
+}
+function enrichErrors(issues, synonyms) {
+  return issues.map((issue) => {
+    const pathStr = issue.path.join(".");
+    const lastSegment = issue.path[issue.path.length - 1];
+    const fieldName = typeof lastSegment === "string" ? lastSegment : void 0;
+    const didYouMean = fieldName ? synonyms[fieldName] : void 0;
+    return {
+      path: pathStr || "(root)",
+      message: issue.message,
+      ...didYouMean ? { didYouMean } : {}
+    };
+  });
+}
+function handleValidateYamlFragment(input) {
+  const { schemaName, yaml } = input;
+  if (!SUPPORTED_SCHEMA_NAMES.includes(schemaName)) {
+    return {
+      valid: false,
+      parseError: `Unknown schemaName: "${schemaName}". Supported: ${SUPPORTED_SCHEMA_NAMES.join(", ")}`
+    };
+  }
+  const name = schemaName;
+  let parsed;
+  try {
+    parsed = (0, import_js_yaml.load)(yaml);
+  } catch (err) {
+    return {
+      valid: false,
+      parseError: `YAML parse error: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  const schema = getSchema(name);
+  const result = schema.safeParse(parsed);
+  if (result.success) {
+    return { valid: true };
+  }
+  const synonyms = FIELD_SYNONYMS[name];
+  const errors = enrichErrors(result.error.issues, synonyms);
+  return { valid: false, errors };
+}
+function registerValidateYamlFragmentTool(server2) {
+  server2.tool(
+    "stackwright_pro_validate_yaml_fragment",
+    'Validates a YAML snippet against a canonical Zod schema before writing to disk. Returns actionable errors with "did you mean?" suggestions for common field-name drift (title vs label, id vs name, style vs theme.variant, etc.). Call this before stackwright_pro_safe_write to catch schema violations in-session.',
+    {
+      schemaName: import_zod11.z.enum(SUPPORTED_SCHEMA_NAMES).describe(
+        "Schema to validate against. One of: workflow_step, workflow_definition, workflow_field, workflow_action, navigation_item, auth_config"
+      ),
+      yaml: import_zod11.z.string().describe("YAML string to validate (can also be JSON \u2014 js-yaml parses both)")
+    },
+    async ({ schemaName, yaml }) => {
+      const result = handleValidateYamlFragment({ schemaName, yaml });
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+}
+
+// src/tools/get-schema.ts
+var NavigationLinkSchema2 = import_zod12.z.lazy(
+  () => import_zod12.z.object({
+    label: import_zod12.z.string().min(1),
+    href: import_zod12.z.string().min(1),
+    children: import_zod12.z.array(NavigationLinkSchema2).optional()
+  })
+);
+var NavigationSectionSchema2 = import_zod12.z.object({
+  section: import_zod12.z.string().min(1),
+  items: import_zod12.z.array(NavigationLinkSchema2)
+});
+var NavigationItemSchema2 = import_zod12.z.union([
+  NavigationLinkSchema2,
+  NavigationSectionSchema2
+]);
+function getZodSchema(name) {
+  switch (name) {
+    case "workflow_step":
+      return import_types2.WorkflowStepSchema;
+    case "workflow_definition":
+      return import_types2.WorkflowDefinitionSchema;
+    case "workflow_field":
+      return import_types2.WorkflowFieldSchema;
+    case "workflow_action":
+      return import_types2.WorkflowActionSchema;
+    case "navigation_item":
+      return NavigationItemSchema2;
+    case "auth_config":
+      return import_types2.authConfigSchema;
+  }
+}
+function formatType(node, depth = 0) {
+  if (node.const !== void 0) return JSON.stringify(node.const);
+  if (node.enum) return node.enum.map((v) => JSON.stringify(v)).join(" | ");
+  if (node.oneOf || node.anyOf) {
+    const branches = node.oneOf ?? node.anyOf ?? [];
+    return branches.map((b) => {
+      const disc = b.properties ? Object.entries(b.properties).filter(([, v]) => v.const !== void 0).map(([k, v]) => `${k}: ${JSON.stringify(v.const)}`).join(", ") : "";
+      return disc ? `{ ${disc}, ... }` : "{ ... }";
+    }).join(" | ");
+  }
+  if (node.type === "array" && node.items) {
+    return `${formatType(node.items, depth)}[]`;
+  }
+  if (node.type === "object" && node.properties && depth < 2) {
+    const inner = Object.entries(node.properties).map(([k, v]) => `${k}: ${formatType(v, depth + 1)}`).join(", ");
+    return `{ ${inner} }`;
+  }
+  const base = Array.isArray(node.type) ? node.type.join(" | ") : node.type ?? "unknown";
+  const constraints = [];
+  if (node.maxLength !== void 0) constraints.push(`max ${node.maxLength} chars`);
+  if (node.minLength !== void 0) constraints.push(`min ${node.minLength} chars`);
+  if (node.pattern) constraints.push(`pattern: ${node.pattern}`);
+  if (node.minimum !== void 0) constraints.push(`min ${node.minimum}`);
+  if (node.maximum !== void 0) constraints.push(`max ${node.maximum}`);
+  return constraints.length > 0 ? `${base} (${constraints.join(", ")})` : base;
+}
+function formatObjectSchema(node, schemaName, synonyms) {
+  const lines = [];
+  const displayName = schemaName.split("_").map((w) => w[0].toUpperCase() + w.slice(1)).join("");
+  lines.push(`${displayName}:`);
+  if (node.oneOf || node.anyOf) {
+    const branches = node.oneOf ?? node.anyOf ?? [];
+    lines.push("  Discriminated union \u2014 choose one variant:");
+    for (const branch of branches) {
+      const req = new Set(branch.required ?? []);
+      const disc = Object.entries(branch.properties ?? {}).filter(([, v]) => v.const !== void 0).map(([k, v]) => `${k}: ${JSON.stringify(v.const)}`).join(", ");
+      lines.push(`  VARIANT (${disc}):`);
+      for (const [field, fieldNode] of Object.entries(branch.properties ?? {})) {
+        if (fieldNode.const !== void 0) continue;
+        const isRequired = req.has(field);
+        const hint = synonyms[field] ? `  -- WARNING: use ${field}: not ${synonyms[field]}` : "";
+        lines.push(
+          `    ${isRequired ? "REQUIRED" : "optional"}: ${field}: ${formatType(fieldNode)}${hint}`
+        );
+      }
+    }
+    return lines.join("\n");
+  }
+  const required = new Set(node.required ?? []);
+  const properties = node.properties ?? {};
+  const requiredFields = Object.entries(properties).filter(([k]) => required.has(k));
+  const optionalFields = Object.entries(properties).filter(([k]) => !required.has(k));
+  if (requiredFields.length > 0) {
+    lines.push("  REQUIRED:");
+    for (const [field, fieldNode] of requiredFields) {
+      const typeStr = formatType(fieldNode);
+      const warn = synonyms[field] ? `  -- CAUTION: this schema uses ${field}` : "";
+      lines.push(`    ${field}: ${typeStr}${warn}`);
+    }
+  }
+  if (optionalFields.length > 0) {
+    lines.push("  OPTIONAL:");
+    for (const [field, fieldNode] of optionalFields) {
+      const typeStr = formatType(fieldNode);
+      lines.push(`    ${field}: ${typeStr}`);
+    }
+  }
+  return lines.join("\n");
+}
+function handleGetSchema(input) {
+  const { schemaName } = input;
+  if (!SUPPORTED_SCHEMA_NAMES.includes(schemaName)) {
+    return {
+      error: `Unknown schemaName: "${schemaName}". Supported: ${SUPPORTED_SCHEMA_NAMES.join(", ")}`
+    };
+  }
+  const name = schemaName;
+  const schema = getZodSchema(name);
+  const synonyms = FIELD_SYNONYMS[name];
+  let jsonSchema;
+  try {
+    const raw = import_zod12.z.toJSONSchema(schema, { unrepresentable: "any" });
+    jsonSchema = raw;
+  } catch {
+    jsonSchema = { type: "object", description: "Schema introspection unavailable for this type" };
+  }
+  const summary = formatObjectSchema(jsonSchema, name, synonyms);
+  const synonymWarnings = Object.entries(synonyms).map(
+    ([wrong, correct]) => `  WARNING: use "${correct}" \u2014 NOT "${wrong}"`
+  );
+  const fullText = [
+    summary,
+    "",
+    "FIELD NAME WARNINGS (common drift patterns):",
+    ...synonymWarnings
+  ].join("\n");
+  const tokenEstimate = Math.ceil(fullText.length / 4);
+  return {
+    schemaName: name,
+    summary,
+    synonymWarnings,
+    tokenEstimate
+  };
+}
+var PHASE_SCHEMA_NAMES = {
+  workflow: ["workflow_step", "workflow_definition", "workflow_field", "workflow_action"],
+  pages: ["navigation_item"],
+  dashboard: ["navigation_item"],
+  polish: ["navigation_item"],
+  auth: ["auth_config"]
+};
+function buildSchemaReferenceBlock(phase) {
+  const schemaNames = PHASE_SCHEMA_NAMES[phase];
+  if (!schemaNames || schemaNames.length === 0) return null;
+  const sections = [
+    "CANONICAL_SCHEMA_REFERENCE (authoritative \u2014 use exact field names below):",
+    ""
+  ];
+  for (const name of schemaNames) {
+    const result = handleGetSchema({ schemaName: name });
+    if ("error" in result) continue;
+    sections.push(result.summary);
+    if (result.synonymWarnings.length > 0) {
+      sections.push("  Common mistakes to avoid:");
+      sections.push(...result.synonymWarnings);
+    }
+    sections.push("");
+  }
+  return sections.join("\n");
+}
+function registerGetSchemaTool(server2) {
+  server2.tool(
+    "stackwright_pro_get_schema",
+    'Returns a compact, LLM-friendly summary of a canonical schema derived programmatically from Zod. Includes required/optional fields, types, constraints, and "did you mean?" warnings for common field-name drift. Use before authoring YAML to confirm exact field names.',
+    {
+      schemaName: import_zod12.z.enum(SUPPORTED_SCHEMA_NAMES).describe(
+        "Schema to summarize. One of: workflow_step, workflow_definition, workflow_field, workflow_action, navigation_item, auth_config"
+      )
+    },
+    async ({ schemaName }) => {
+      const result = handleGetSchema({ schemaName });
+      if ("error" in result) {
+        return {
+          content: [{ type: "text", text: JSON.stringify({ error: result.error }) }],
+          isError: true
+        };
+      }
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify(result, null, 2)
+          }
+        ]
+      };
+    }
+  );
+}
+
+// src/tools/pipeline.ts
 var PHASE_ORDER = [
   "designer",
   "theme",
@@ -2911,6 +3251,10 @@ ${JSON.stringify(content, null, 2)}`
     const artifactSchema = PHASE_ARTIFACT_SCHEMA[phase];
     parts.push("", "REQUIRED_ARTIFACT_SCHEMA:");
     parts.push(artifactSchema);
+    const schemaRef = buildSchemaReferenceBlock(phase);
+    if (schemaRef) {
+      parts.push("", schemaRef);
+    }
     parts.push("", "Execute using these answers and the upstream artifacts provided.");
     const prompt = parts.join("\n");
     const dependenciesSatisfied = missingDependencies.length === 0;
@@ -3285,7 +3629,7 @@ function handleValidateArtifact(input) {
     workflow: (artifact2) => {
       const workflowConfig = artifact2["workflowConfig"];
       if (!workflowConfig) return { success: true };
-      const result = import_types.WorkflowFileSchema.safeParse(workflowConfig);
+      const result = import_types3.WorkflowFileSchema.safeParse(workflowConfig);
       if (!result.success) {
         const issues = result.error.issues.slice(0, 3).map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
         return { success: false, error: { message: issues } };
@@ -3295,7 +3639,7 @@ function handleValidateArtifact(input) {
     auth: (artifact2) => {
       const authConfig = artifact2["authConfig"];
       if (!authConfig) return { success: true };
-      const result = import_types.authConfigSchema.safeParse(authConfig);
+      const result = import_types3.authConfigSchema.safeParse(authConfig);
       if (!result.success) {
         const issues = result.error.issues.slice(0, 3).map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
         return { success: false, error: { message: issues } };
@@ -3367,21 +3711,21 @@ function registerPipelineTools(server2) {
     "stackwright_pro_set_pipeline_state",
     `Atomic read\u2192modify\u2192write pipeline state. ${DESC}`,
     {
-      phase: import_zod11.z.string().optional().describe('Phase to update, e.g. "designer"'),
-      field: import_zod11.z.enum(["questionsCollected", "answered", "executed", "artifactWritten"]).optional().describe("Boolean field to set"),
-      value: boolCoerce(import_zod11.z.boolean().optional()).describe(
+      phase: import_zod13.z.string().optional().describe('Phase to update, e.g. "designer"'),
+      field: import_zod13.z.enum(["questionsCollected", "answered", "executed", "artifactWritten"]).optional().describe("Boolean field to set"),
+      value: boolCoerce(import_zod13.z.boolean().optional()).describe(
         'Value for the field \u2014 must be a JSON boolean (true/false), NOT the string "true"/"false"'
       ),
-      status: import_zod11.z.enum(["setup", "questions", "execution", "done"]).optional().describe("Top-level status override"),
-      incrementRetry: boolCoerce(import_zod11.z.boolean().optional()).describe(
+      status: import_zod13.z.enum(["setup", "questions", "execution", "done"]).optional().describe("Top-level status override"),
+      incrementRetry: boolCoerce(import_zod13.z.boolean().optional()).describe(
         "Bump retryCount by 1 \u2014 must be a JSON boolean"
       ),
       updates: jsonCoerce(
-        import_zod11.z.array(
-          import_zod11.z.object({
-            phase: import_zod11.z.string(),
-            field: import_zod11.z.enum(["questionsCollected", "answered", "executed", "artifactWritten"]),
-            value: import_zod11.z.boolean()
+        import_zod13.z.array(
+          import_zod13.z.object({
+            phase: import_zod13.z.string(),
+            field: import_zod13.z.enum(["questionsCollected", "answered", "executed", "artifactWritten"]),
+            value: import_zod13.z.boolean()
           })
         ).optional()
       ).describe("Batch updates \u2014 apply multiple field changes in one atomic read\u2192modify\u2192write")
@@ -3401,7 +3745,7 @@ function registerPipelineTools(server2) {
     "stackwright_pro_check_execution_ready",
     `Check all phases have answer files in .stackwright/answers/. If phase is provided, check only that phase. ${DESC}`,
     {
-      phase: import_zod11.z.string().optional().describe("If provided, check only this phase's readiness. Omit to check all phases.")
+      phase: import_zod13.z.string().optional().describe("If provided, check only this phase's readiness. Omit to check all phases.")
     },
     async ({ phase }) => res(handleCheckExecutionReady(void 0, phase))
   );
@@ -3421,9 +3765,9 @@ function registerPipelineTools(server2) {
     "stackwright_pro_write_phase_questions",
     `Parse otter question-collection response \u2192 .stackwright/questions/{phase}.json. Specialists may also call this directly with a parsed questions array. ${DESC}`,
     {
-      phase: import_zod11.z.string().optional().describe('Phase name, e.g. "designer" (required for direct write)'),
-      responseText: import_zod11.z.string().optional().describe("Raw LLM response from QUESTION_COLLECTION_MODE"),
-      questions: jsonCoerce(import_zod11.z.array(import_zod11.z.any()).optional()).describe(
+      phase: import_zod13.z.string().optional().describe('Phase name, e.g. "designer" (required for direct write)'),
+      responseText: import_zod13.z.string().optional().describe("Raw LLM response from QUESTION_COLLECTION_MODE"),
+      questions: jsonCoerce(import_zod13.z.array(import_zod13.z.any()).optional()).describe(
         "Questions array for direct specialist write"
       )
     },
@@ -3465,16 +3809,16 @@ function registerPipelineTools(server2) {
   server2.tool(
     "stackwright_pro_build_specialist_prompt",
     `Assemble execution prompt from answers + upstream artifacts. Foreman passes verbatim. ${DESC}`,
-    { phase: import_zod11.z.string().describe('Phase to build prompt for, e.g. "pages"') },
+    { phase: import_zod13.z.string().describe('Phase to build prompt for, e.g. "pages"') },
     async ({ phase }) => res(handleBuildSpecialistPrompt({ phase }))
   );
   server2.tool(
     "stackwright_pro_validate_artifact",
     `Validate and write artifact to .stackwright/artifacts/. Returns retryPrompt on failure. ${DESC}`,
     {
-      phase: import_zod11.z.string().describe('Phase that produced this artifact, e.g. "designer"'),
-      responseText: import_zod11.z.string().optional().describe("Raw response text from the specialist otter (Foreman-mediated path, legacy)"),
-      artifact: jsonCoerce(import_zod11.z.record(import_zod11.z.string(), import_zod11.z.unknown()).optional()).describe(
+      phase: import_zod13.z.string().describe('Phase that produced this artifact, e.g. "designer"'),
+      responseText: import_zod13.z.string().optional().describe("Raw response text from the specialist otter (Foreman-mediated path, legacy)"),
+      artifact: jsonCoerce(import_zod13.z.record(import_zod13.z.string(), import_zod13.z.unknown()).optional()).describe(
         "Artifact object to validate and write directly (specialist direct path \u2014 skips off-script detection and JSON parsing)"
       )
     },
@@ -3490,7 +3834,7 @@ function registerPipelineTools(server2) {
 }
 
 // src/tools/safe-write.ts
-var import_zod12 = require("zod");
+var import_zod14 = require("zod");
 var import_fs6 = require("fs");
 var import_path6 = require("path");
 var OTTER_WRITE_ALLOWLISTS = {
@@ -3890,10 +4234,10 @@ function registerSafeWriteTools(server2) {
     "stackwright_pro_safe_write",
     DESC,
     {
-      callerOtter: import_zod12.z.string().describe('The otter agent name requesting the write, e.g. "stackwright-pro-page-otter"'),
-      filePath: import_zod12.z.string().describe('Relative path from project root, e.g. "pages/dashboard/content.yml"'),
-      content: import_zod12.z.string().describe("File content to write"),
-      createDirectories: boolCoerce(import_zod12.z.boolean().optional().default(true)).describe(
+      callerOtter: import_zod14.z.string().describe('The otter agent name requesting the write, e.g. "stackwright-pro-page-otter"'),
+      filePath: import_zod14.z.string().describe('Relative path from project root, e.g. "pages/dashboard/content.yml"'),
+      content: import_zod14.z.string().describe("File content to write"),
+      createDirectories: boolCoerce(import_zod14.z.boolean().optional().default(true)).describe(
         "Create parent directories if they don't exist. Default: true"
       )
     },
@@ -3910,7 +4254,7 @@ function registerSafeWriteTools(server2) {
 }
 
 // src/tools/auth.ts
-var import_zod13 = require("zod");
+var import_zod15 = require("zod");
 var import_fs7 = require("fs");
 var import_path7 = require("path");
 function buildHierarchy(roles) {
@@ -4782,38 +5126,38 @@ function registerAuthTools(server2) {
     "stackwright_pro_configure_auth",
     "Generate authentication middleware and configuration for a Next.js Stackwright application. Writes `middleware.ts` from a secure template, appends/updates the `auth:` section in `stackwright.yml`, and generates `.env.example` with required environment variables. \u26A0\uFE0F For CAC/PKI: generated `middleware.ts` carries a SECURITY REVIEW REQUIRED comment \u2014 certificate chain validation must be verified by a DoD security officer before production deployment. This is the ONLY approved path to generating `middleware.ts`. Never write TypeScript auth files directly.",
     {
-      method: import_zod13.z.enum(["cac", "oidc", "oauth2", "none"]),
-      provider: import_zod13.z.enum(["azure-ad", "okta", "ping", "cognito", "custom"]).optional(),
+      method: import_zod15.z.enum(["cac", "oidc", "oauth2", "none"]),
+      provider: import_zod15.z.enum(["azure-ad", "okta", "ping", "cognito", "custom"]).optional(),
       // CAC
-      cacCaBundle: import_zod13.z.string().optional(),
-      cacEdipiLookup: import_zod13.z.string().optional(),
-      cacOcspEndpoint: import_zod13.z.string().optional(),
-      cacCertHeader: import_zod13.z.string().optional(),
+      cacCaBundle: import_zod15.z.string().optional(),
+      cacEdipiLookup: import_zod15.z.string().optional(),
+      cacOcspEndpoint: import_zod15.z.string().optional(),
+      cacCertHeader: import_zod15.z.string().optional(),
       // OIDC
-      oidcDiscoveryUrl: import_zod13.z.string().optional(),
-      oidcClientId: import_zod13.z.string().optional(),
-      oidcClientSecret: import_zod13.z.string().optional(),
-      oidcScopes: import_zod13.z.string().optional(),
-      oidcRoleClaim: import_zod13.z.string().optional(),
+      oidcDiscoveryUrl: import_zod15.z.string().optional(),
+      oidcClientId: import_zod15.z.string().optional(),
+      oidcClientSecret: import_zod15.z.string().optional(),
+      oidcScopes: import_zod15.z.string().optional(),
+      oidcRoleClaim: import_zod15.z.string().optional(),
       // OAuth2
-      oauth2AuthUrl: import_zod13.z.string().optional(),
-      oauth2TokenUrl: import_zod13.z.string().optional(),
-      oauth2ClientId: import_zod13.z.string().optional(),
-      oauth2ClientSecret: import_zod13.z.string().optional(),
-      oauth2Scopes: import_zod13.z.string().optional(),
+      oauth2AuthUrl: import_zod15.z.string().optional(),
+      oauth2TokenUrl: import_zod15.z.string().optional(),
+      oauth2ClientId: import_zod15.z.string().optional(),
+      oauth2ClientSecret: import_zod15.z.string().optional(),
+      oauth2Scopes: import_zod15.z.string().optional(),
       // RBAC
-      rbacRoles: jsonCoerce(import_zod13.z.array(import_zod13.z.string()).optional()),
-      rbacDefaultRole: import_zod13.z.string().optional(),
+      rbacRoles: jsonCoerce(import_zod15.z.array(import_zod15.z.string()).optional()),
+      rbacDefaultRole: import_zod15.z.string().optional(),
       // Audit
-      auditEnabled: boolCoerce(import_zod13.z.boolean().optional()),
-      auditRetentionDays: numCoerce(import_zod13.z.number().int().positive().optional()),
+      auditEnabled: boolCoerce(import_zod15.z.boolean().optional()),
+      auditRetentionDays: numCoerce(import_zod15.z.number().int().positive().optional()),
       // Routes
-      protectedRoutes: jsonCoerce(import_zod13.z.array(import_zod13.z.string()).optional()),
+      protectedRoutes: jsonCoerce(import_zod15.z.array(import_zod15.z.string()).optional()),
       // Injection for tests
-      _cwd: import_zod13.z.string().optional(),
-      devOnly: boolCoerce(import_zod13.z.boolean().optional()),
-      mockUsers: jsonCoerce(import_zod13.z.array(import_zod13.z.object({ name: import_zod13.z.string(), email: import_zod13.z.string() })).optional()),
-      nextMajorVersion: numCoerce(import_zod13.z.number().int().positive().optional())
+      _cwd: import_zod15.z.string().optional(),
+      devOnly: boolCoerce(import_zod15.z.boolean().optional()),
+      mockUsers: jsonCoerce(import_zod15.z.array(import_zod15.z.object({ name: import_zod15.z.string(), email: import_zod15.z.string() })).optional()),
+      nextMajorVersion: numCoerce(import_zod15.z.number().int().positive().optional())
     },
     async (params) => {
       const cwd = params._cwd ?? process.cwd();
@@ -4829,59 +5173,59 @@ var import_path8 = require("path");
 var _checksums = /* @__PURE__ */ new Map([
   [
     "stackwright-pro-api-otter.json",
-    "1b9fea59a3e5b1e1015229a4e8d1231b6b87e1d12f23a81ecbbd79fe8657a2e0"
+    "1610b34c2bfd89aa18ef62fe052fe5aaba21cb2aa9c5d58a4fff06af2a1f0e6e"
   ],
   [
     "stackwright-pro-auth-otter.json",
-    "f91f82468da9c273fbe6481a3a40957d4c7aa3fa72528c492b6ac5d8e06a563a"
+    "5a876d3614e62a7817e69bbe7fe7cc6976035ccaa0e7c29fb1e1a32caf8cea93"
   ],
   [
     "stackwright-pro-dashboard-otter.json",
-    "9c319d311801730e8dc9bc142eebb8fc5a7f48da48fa0b8d8c3b7431652447be"
+    "9550e565fb467d7956cf6b50e7b30a481e6e4b26d609dfe1f0d8f991fc6681de"
   ],
   [
     "stackwright-pro-data-otter.json",
-    "f39061981caf0bd14e4eb83e74ac200450425536d14b8c00d60be94759a1ca9d"
+    "5cd8caca50bfcc00ebaf1f9a83158e5580e0e51d25495244f8465d9c20f31e17"
   ],
   [
     "stackwright-pro-designer-otter.json",
-    "af09ac8f06385bdbac63e2820daa2ff7d38b8ff1ff383c161f07e3fb9d9359c5"
+    "d44b307299c2b65568a708920b819eec7d3b5fe1191ace24b166cbfb2d6e5209"
   ],
   [
     "stackwright-pro-domain-expert-otter.json",
-    "41e3a5838f05f6a51ed272860dd2d5b1df1f20bfc847eb8f39be109b89738e99"
+    "dc060aacdf67ee5758921c72225aa669a76cb962f0f8eedf1741f58f18e870d3"
   ],
   [
     "stackwright-pro-foreman-otter.json",
-    "4948b8189223e4ced81b632cca7d14b79fde85f204483ab8e847182692c4ee57"
+    "ab3d821d9217ccbe112d68ce25798bfe637aef15814168037caa2a98994e8d2d"
   ],
   [
     "stackwright-pro-geo-otter.json",
-    "ff1191af8108cc70c09afe6a99b008dcb46f71e20f884da1ee424e431868a1b6"
+    "3c9fc96e79d9ac22be8a293cf3ec904c4ed033842864107515aacdf71285791c"
   ],
   [
     "stackwright-pro-page-otter.json",
-    "cdd878857c1d809c60263693ab0c6cbb45087fd9c3eeda5b4628bd7026d2bded"
+    "0057ea97f7c2e33a8673140f59a0237eb627d82c676af3fae4faa31033598e03"
   ],
   [
     "stackwright-pro-polish-otter.json",
-    "e5f88d054dd536646f48e5d47cbd64f825f493100002309b90c912fa69ef279e"
+    "1e534dfbc5644a5efbc566d77b512929760715365d54ce030da177a535c23ea6"
   ],
   [
     "stackwright-pro-scaffold-otter.json",
-    "c9950a34cc6a729a2ad22a4052afc3d7f9b033fe390d9edba4014b76e1d076b6"
+    "2ed0adb316aaecb849153d44f52b177de539f21d4a7ce5ae4cc1c3c7470e15d4"
   ],
   [
     "stackwright-pro-theme-otter.json",
-    "532d9ca7db6911a09ce5029a8c74c89360bdf6cb8ede8c2636866b509cbe06f9"
+    "730bc16b24b4612552389fe9de662f233044bcbf5ef1e0f27f2cc1e1af4c989f"
   ],
   [
     "stackwright-pro-workflow-otter.json",
-    "80eb6c8d3f079e00533dcb4a3c7fd6baae4d5f4192ab6c27c85d2de5359592fd"
+    "8ece2a1f1ec30163600b5ce8b666c915ab0d00a1fa70c38ed58d1bb20cbd9979"
   ],
   [
     "stackwright-services-otter.json",
-    "b8a252d6a2c5090138899925d3ea95bf3339b6e49adc276a1f5f7304b4ae5134"
+    "2a36a07eaf34b59a2dab7059f3748a5742ff1f6b80b4bd6a739c59cf114703d6"
   ]
 ]);
 Object.freeze(_checksums);
@@ -5097,7 +5441,7 @@ function registerIntegrityTools(server2) {
 }
 
 // src/tools/domain.ts
-var import_zod14 = require("zod");
+var import_zod16 = require("zod");
 var import_fs9 = require("fs");
 var import_path9 = require("path");
 function handleListCollections(input) {
@@ -5483,7 +5827,7 @@ function registerDomainTools(server2) {
     "stackwright_pro_resolve_data_strategy",
     "Look up the data freshness strategy configuration from the user's answer. Returns mechanism, revalidation seconds, required packages, and the exact MCP tool call to make. Replaces the strategy table in the data-otter prompt.",
     {
-      strategy: import_zod14.z.string().describe(
+      strategy: import_zod16.z.string().describe(
         'The data-1 answer value: "pulse-fast", "isr-fast", "isr-standard", or "isr-slow"'
       )
     },
@@ -5493,7 +5837,7 @@ function registerDomainTools(server2) {
     "stackwright_pro_validate_workflow",
     "Validate a workflow definition against the Stackwright workflow schema. Checks step ID uniqueness, transition targets, terminal state existence, and service references. Call this after the workflow otter produces output.",
     {
-      workflow: jsonCoerce(import_zod14.z.record(import_zod14.z.string(), import_zod14.z.unknown()).optional()).describe(
+      workflow: jsonCoerce(import_zod16.z.record(import_zod16.z.string(), import_zod16.z.unknown()).optional()).describe(
         "Parsed workflow object. If omitted, reads from .stackwright/artifacts/workflow-config.json"
       )
     },
@@ -5502,7 +5846,7 @@ function registerDomainTools(server2) {
 }
 
 // src/tools/type-schemas.ts
-var import_zod15 = require("zod");
+var import_zod17 = require("zod");
 function buildTypeSchemaSummary() {
   return {
     version: "1.0",
@@ -5579,7 +5923,7 @@ function registerTypeSchemasTool(server2) {
     "stackwright_pro_get_type_schemas",
     "Returns a structured summary of all canonical @stackwright-pro/types schemas, organized by domain. Use this to determine which otter owns a given schema and what artifact key to expect.",
     {
-      format: import_zod15.z.enum(["full", "domains-only"]).optional().default("full").describe("full = complete summary with all fields; domains-only = just domain names")
+      format: import_zod17.z.enum(["full", "domains-only"]).optional().default("full").describe("full = complete summary with all fields; domains-only = just domain names")
     },
     async ({ format }) => {
       const summary = buildTypeSchemaSummary();
@@ -5768,7 +6112,7 @@ function registerScaffoldCleanupTools(server2) {
 }
 
 // src/tools/contrast.ts
-var import_zod16 = require("zod");
+var import_zod18 = require("zod");
 function linearizeChannel(c255) {
   const c = c255 / 255;
   return c <= 0.04045 ? c / 12.92 : Math.pow((c + 0.055) / 1.055, 2.4);
@@ -5940,8 +6284,8 @@ function registerContrastTools(server2) {
     "stackwright_pro_check_contrast",
     'Compute the exact WCAG 2.1 contrast ratio between a foreground and background color. Returns the ratio and AA/AAA pass/fail flags. Use this to verify any foreground/background color pair before writing it to the token set. Accepts #RGB, #RRGGBB, hsl(...), or shadcn HSL format ("H S% L%").',
     {
-      fg: import_zod16.z.string().describe("Foreground (text) color \u2014 hex or HSL"),
-      bg: import_zod16.z.string().describe("Background color \u2014 hex or HSL")
+      fg: import_zod18.z.string().describe("Foreground (text) color \u2014 hex or HSL"),
+      bg: import_zod18.z.string().describe("Background color \u2014 hex or HSL")
     },
     async ({ fg, bg }) => {
       let result;
@@ -5971,8 +6315,8 @@ function registerContrastTools(server2) {
     "stackwright_pro_derive_accessible_palette",
     'Given a seed color (treated as a background), derive the best accessible foreground (text) color that meets the target contrast ratio. Evaluates #ffffff and #000000 against the seed and picks whichever satisfies the target ratio with the highest contrast. Use this for every {name}-foreground token derivation instead of guessing white vs black. Accepts #RGB, #RRGGBB, hsl(...), or shadcn HSL format ("H S% L%").',
     {
-      seed: import_zod16.z.string().describe("Background (seed) color \u2014 hex or HSL"),
-      targetRatio: numCoerce(import_zod16.z.number().default(4.5)).describe(
+      seed: import_zod18.z.string().describe("Background (seed) color \u2014 hex or HSL"),
+      targetRatio: numCoerce(import_zod18.z.number().default(4.5)).describe(
         "Minimum required contrast ratio (default 4.5 for WCAG AA)"
       )
     },
@@ -6009,9 +6353,11 @@ function registerContrastTools(server2) {
 // package.json
 var package_default = {
   dependencies: {
-    "@stackwright-pro/types": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.10.0",
     "@stackwright-pro/cli-data-explorer": "workspace:*",
+    "@stackwright-pro/types": "workspace:*",
+    "@types/js-yaml": "^4.0.9",
+    "js-yaml": "^4.2.0",
     zod: "^4.4.3"
   },
   devDependencies: {
@@ -6029,7 +6375,7 @@ var package_default = {
     "test:coverage": "vitest run --coverage"
   },
   name: "@stackwright-pro/mcp",
-  version: "0.2.0-alpha.80",
+  version: "0.2.0-alpha.81",
   description: "MCP tools for Stackwright Pro - Data Explorer, Security, ISR, and Dashboard generation",
   license: "SEE LICENSE IN LICENSE",
   main: "./dist/server.js",
@@ -6083,6 +6429,8 @@ registerIntegrityTools(server);
 registerArtifactSigningTools(server);
 registerDomainTools(server);
 registerTypeSchemasTool(server);
+registerValidateYamlFragmentTool(server);
+registerGetSchemaTool(server);
 registerScaffoldCleanupTools(server);
 registerContrastTools(server);
 async function main() {