@stackwright-pro/mcp 0.2.0-alpha.85 → 0.2.0-alpha.90

package/dist/server.mjs

@@ -3379,6 +3379,26 @@ var PHASE_ARTIFACT_SCHEMA = {
     null,
     2
   ),
+  scaffold: JSON.stringify(
+    {
+      version: "1.0",
+      generatedBy: "stackwright-pro-scaffold-otter",
+      // REQUIRED: appRouterFiles is a required key — NOT 'files' (see swp-k3mb)
+      appRouterFiles: [
+        "app/layout.tsx",
+        "app/_components/page-client.tsx",
+        "app/page.tsx",
+        "app/[...slug]/page.tsx",
+        "app/_components/providers.tsx",
+        "app/not-found.tsx"
+      ],
+      title: "<title from stackwright.yml>",
+      hasCollectionEndpoints: false,
+      hasAuthConfig: true
+    },
+    null,
+    2
+  ),
   api: JSON.stringify(
     {
       version: "1.0",
@@ -3451,7 +3471,8 @@ var PHASE_ARTIFACT_SCHEMA = {
     {
       version: "1.0",
       generatedBy: "stackwright-pro-workflow-otter",
-      workflowConfig: {
+      // Root key is `workflow` — NOT `workflowConfig` (see swp-k7cl)
+      workflow: {
         id: "procurement-approval",
         route: "/procurement",
         files: ["workflows/procurement-approval.yml"],
@@ -3632,12 +3653,22 @@ function handleValidateArtifact(input) {
   }
   const PHASE_ZOD_VALIDATORS = {
     workflow: (artifact2) => {
-      const workflowConfig = artifact2["workflowConfig"];
-      if (!workflowConfig) return { success: true };
-      const result = WorkflowFileSchema.safeParse(workflowConfig);
-      if (!result.success) {
-        const issues = result.error.issues.slice(0, 3).map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-        return { success: false, error: { message: issues } };
+      const workflowData = artifact2["workflow"];
+      if (!workflowData) {
+        if (artifact2["workflowConfig"]) {
+          console.warn(
+            '[pipeline] DEPRECATED: workflow artifact uses "workflowConfig" key; rename to "workflow"'
+          );
+          return { success: true };
+        }
+        return { success: true };
+      }
+      if (typeof workflowData === "object" && workflowData !== null && "workflow" in workflowData) {
+        const result = WorkflowFileSchema.safeParse(workflowData);
+        if (!result.success) {
+          const issues = result.error.issues.slice(0, 3).map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+          return { success: false, error: { message: issues } };
+        }
       }
       return { success: true };
     },
@@ -4015,9 +4046,13 @@ function checkPageOwnership(cwd, slug, callerOtter) {
     contentTypes: existing.contentTypes
   };
 }
+var NEXTJS_BRACKET_SEGMENT_RE = /\[\[\.{3}[a-zA-Z_][a-zA-Z0-9_]*\]\]|\[\.{3}[a-zA-Z_][a-zA-Z0-9_]*\]|\[[a-zA-Z_][a-zA-Z0-9_]*\]/g;
+function stripNextjsBracketSegments(path3) {
+  return path3.replace(NEXTJS_BRACKET_SEGMENT_RE, "");
+}
 function checkPathAllowed(callerOtter, filePath) {
   const normalized = normalize(filePath);
-  if (normalized.includes("..")) {
+  if (stripNextjsBracketSegments(normalized).includes("..")) {
     return { allowed: false, error: 'Path traversal detected: ".." segments are not allowed' };
   }
   if (isAbsolute(normalized)) {
@@ -4913,7 +4948,7 @@ async function configureAuthHandler(params, cwd) {
   const detectedVersion = params.nextMajorVersion ?? detectNextMajorVersion(cwd);
   const useProxy = (detectedVersion ?? 0) >= 16;
   const conventionFile = useProxy ? "proxy.ts" : "middleware.ts";
-  if (method === "none") {
+  if (method === "none" && !devOnly) {
     return {
       content: [
         {
@@ -4926,16 +4961,19 @@ async function configureAuthHandler(params, cwd) {
             rbacDefaultRole: defaultRole,
             protectedRoutesCount: protectedRoutes.length,
             filesWritten: [],
-            securityWarning: null
+            securityWarning: null,
+            autoUpgradeWarning: null
           })
         }
       ]
     };
   }
+  const effectiveMethod = method === "none" ? "oidc" : method;
+  const autoUpgradeWarning = method === "none" ? "method: 'none' + devOnly: true was automatically upgraded to method: 'oidc' + devOnly: true. In DEV_ONLY_MODE, pass method: 'oidc' + devOnly: true directly (swp-5tmy)." : null;
   const filesWritten = [];
   try {
     const authFileContent = devOnly ? useProxy ? generateDevOnlyProxyContent(
-      method,
+      effectiveMethod,
       params,
       roles,
       defaultRole,
@@ -4944,7 +4982,7 @@ async function configureAuthHandler(params, cwd) {
       auditRetentionDays,
       protectedRoutes
     ) : generateDevOnlyMiddlewareContent(
-      method,
+      effectiveMethod,
       params,
       roles,
       defaultRole,
@@ -4953,7 +4991,7 @@ async function configureAuthHandler(params, cwd) {
       auditRetentionDays,
       protectedRoutes
     ) : useProxy ? generateProxyContent(
-      method,
+      effectiveMethod,
       params,
       roles,
       defaultRole,
@@ -4962,7 +5000,7 @@ async function configureAuthHandler(params, cwd) {
       auditRetentionDays,
       protectedRoutes
     ) : generateMiddlewareContent(
-      method,
+      effectiveMethod,
       params,
       roles,
       defaultRole,
@@ -4990,7 +5028,7 @@ async function configureAuthHandler(params, cwd) {
   }
   if (!devOnly) {
     try {
-      const envBlock = generateEnvBlock(method, params);
+      const envBlock = generateEnvBlock(effectiveMethod, params);
       const envPath = join6(cwd, ".env.example");
       if (existsSync7(envPath)) {
         const existing = readFileSync6(envPath, "utf8");
@@ -5060,7 +5098,7 @@ async function configureAuthHandler(params, cwd) {
   }
   try {
     const authYaml = devOnly ? generateDevOnlyYamlBlock(
-      method,
+      effectiveMethod,
       params,
       roles,
       defaultRole,
@@ -5070,7 +5108,7 @@ async function configureAuthHandler(params, cwd) {
       protectedRoutes,
       useProxy
     ) : generateYamlBlock(
-      method,
+      effectiveMethod,
       params,
       roles,
       defaultRole,
@@ -5100,14 +5138,14 @@ async function configureAuthHandler(params, cwd) {
       isError: true
     };
   }
-  const securityWarning = method === "cac" ? "SECURITY REVIEW REQUIRED \u2014 CAC certificate chain must be verified before production deployment" : null;
+  const securityWarning = effectiveMethod === "cac" ? "SECURITY REVIEW REQUIRED \u2014 CAC certificate chain must be verified before production deployment" : null;
   return {
     content: [
       {
         type: "text",
         text: JSON.stringify({
           success: true,
-          method,
+          method: effectiveMethod,
           provider: provider ?? null,
           rbacRoles: roles,
           rbacDefaultRole: defaultRole,
@@ -5116,6 +5154,7 @@ async function configureAuthHandler(params, cwd) {
           convention: useProxy ? "proxy" : "middleware",
           nextMajorVersion: params.nextMajorVersion ?? null,
           securityWarning,
+          autoUpgradeWarning,
           ...devOnly ? {
             devScripts: {
               written: filesWritten.includes("package.json"),
@@ -5191,7 +5230,7 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-auth-otter.json",
-    "539c7145e88dd2afa7f2417be8cfa8e0e7d82608d051271a20f9c7e4e77d98e7"
+    "07134125ab4f8c82ee015f27587e4d84bdeefca5ec211d1563bcb25b8aa61eb3"
   ],
   [
     "stackwright-pro-dashboard-otter.json",
@@ -5199,7 +5238,7 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-data-otter.json",
-    "b135cb0013edaa40baaf8a03f1d8795920dc0ce611183f047e55104bf8cf35be"
+    "709c8e49328908549fe87de181a5991e09c918ef24bbfe6948f9888f0c758c25"
   ],
   [
     "stackwright-pro-designer-otter.json",
@@ -5223,19 +5262,19 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-polish-otter.json",
-    "02cfa56354bfcd33af6d634ac647f38812a2353e487816b67edc2e9eb2c3e357"
+    "bd87327b9a9a62fabaee8837492ce943feae8bfc15e5d43b45ba0e84619daec3"
   ],
   [
     "stackwright-pro-scaffold-otter.json",
-    "ccbc9d20a65dcf7cc2eacb5ac3060cd95a10a3ef795883170684658872299e7b"
+    "91de5861f1406043d1d387388302fb1492211b81e2eea9777dec60e48f317f2a"
   ],
   [
     "stackwright-pro-theme-otter.json",
-    "a271eac375db9d014afb781536f60f2e6716a9054b12b9c35713af09a63912ff"
+    "fe10108e3ba67106751ea662f512bb5f4eb58f7abda26880ef4cf6b0f9feb944"
   ],
   [
     "stackwright-pro-workflow-otter.json",
-    "6cc800374de6e723a283e4757af97f7b8337c64ee78053d7e50a79e17314a049"
+    "5f6209fadc1355580e2455a16386f06bd7d5814f047b2dd5b33800abf6a48ff8"
   ],
   [
     "stackwright-services-otter.json",
@@ -5965,7 +6004,15 @@ var SCAFFOLD_FILES_TO_DELETE = [
   "content/posts/getting-started.yaml",
   "content/posts/hello-world.yaml"
 ];
+var GETTING_STARTED_SCAFFOLD_FINGERPRINTS = [
+  "Welcome to your new Stackwright",
+  "Petstore API",
+  "Petstore"
+];
+var POST_FILE_EXTENSIONS = [".yaml", ".yml", ".md", ".mdx"];
+var POSTS_COLLECTION_FILE = "_collection.yaml";
 var SCAFFOLD_DIRS_TO_PRUNE = [
+  "pages/getting-started",
   "content/posts"
   // Don't prune 'content' — user may have other content directories
 ];
@@ -6059,7 +6106,8 @@ function handleCleanupScaffold(_cwd) {
     rewritten: [],
     skipped: [],
     errors: [],
-    prunedDirs: []
+    prunedDirs: [],
+    cleanupWarnings: []
   };
   for (const relPath of SCAFFOLD_FILES_TO_DELETE) {
     const fullPath = join9(cwd, relPath);
@@ -6078,6 +6126,60 @@ function handleCleanupScaffold(_cwd) {
       result.errors.push(`Failed to delete ${relPath}: ${String(err)}`);
     }
   }
+  {
+    const relPath = "pages/getting-started/content.yml";
+    const fullPath = join9(cwd, relPath);
+    if (!existsSync9(fullPath)) {
+      result.skipped.push(relPath);
+    } else if (!isSafePath(fullPath)) {
+      result.errors.push(`Refusing to delete symlink: ${relPath}`);
+    } else {
+      const content = readFileSync9(fullPath, "utf-8");
+      const isScaffoldDefault = GETTING_STARTED_SCAFFOLD_FINGERPRINTS.some(
+        (marker) => content.includes(marker)
+      );
+      if (isScaffoldDefault) {
+        try {
+          unlinkSync2(fullPath);
+          result.deleted.push(relPath);
+        } catch (err) {
+          result.errors.push(`Failed to delete ${relPath}: ${String(err)}`);
+        }
+      } else {
+        result.cleanupWarnings.push(
+          `pages/getting-started/content.yml preserved \u2014 no scaffold fingerprint found (user-modified content)`
+        );
+      }
+    }
+  }
+  {
+    const relPath = `content/posts/${POSTS_COLLECTION_FILE}`;
+    const fullPath = join9(cwd, relPath);
+    const postsDir = join9(cwd, "content/posts");
+    if (!existsSync9(fullPath)) {
+      result.skipped.push(relPath);
+    } else if (!isSafePath(fullPath)) {
+      result.errors.push(`Refusing to delete symlink: ${relPath}`);
+    } else if (!existsSync9(postsDir)) {
+      result.skipped.push(relPath);
+    } else {
+      const userPostFiles = readdirSync3(postsDir).filter(
+        (f) => f !== POSTS_COLLECTION_FILE && POST_FILE_EXTENSIONS.some((ext) => f.endsWith(ext))
+      );
+      if (userPostFiles.length === 0) {
+        try {
+          unlinkSync2(fullPath);
+          result.deleted.push(relPath);
+        } catch (err) {
+          result.errors.push(`Failed to delete ${relPath}: ${String(err)}`);
+        }
+      } else {
+        result.cleanupWarnings.push(
+          `content/posts/_collection.yaml preserved \u2014 ${userPostFiles.length} user post file(s) exist: ${userPostFiles.slice(0, 3).join(", ")}`
+        );
+      }
+    }
+  }
   for (const relDir of SCAFFOLD_DIRS_TO_PRUNE) {
     const fullDir = join9(cwd, relDir);
     if (!existsSync9(fullDir)) continue;
@@ -6398,7 +6500,7 @@ var package_default = {
     "test:coverage": "vitest run --coverage"
   },
   name: "@stackwright-pro/mcp",
-  version: "0.2.0-alpha.82",
+  version: "0.2.0-alpha.90",
   description: "MCP tools for Stackwright Pro - Data Explorer, Security, ISR, and Dashboard generation",
   license: "SEE LICENSE IN LICENSE",
   main: "./dist/server.js",