@systemdox/mcp-server 0.1.48 → 0.1.49

package/dist/index.js

@@ -3,42 +3,6 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// src/lib/config.ts
-var API_URL_DEFAULT = "https://api.puglieseweb.com/systemdox";
-function requireHttpsApiUrl(apiUrl) {
-  let parsed;
-  try {
-    parsed = new URL(apiUrl);
-  } catch {
-    throw new Error(
-      `SYSTEMDOX_API_URL is not a valid URL: ${apiUrl}`
-    );
-  }
-  if (parsed.protocol !== "https:") {
-    throw new Error(
-      `SYSTEMDOX_API_URL must use https:// \u2014 refusing to send the API key over ${parsed.protocol}// in cleartext. Got: ${apiUrl}`
-    );
-  }
-  return apiUrl;
-}
-function loadConfig() {
-  const apiKey = process.env.SYSTEMDOX_API_KEY;
-  if (!apiKey) {
-    throw new Error(
-      "SYSTEMDOX_API_KEY is required. Generate one at your SystemDox settings page."
-    );
-  }
-  const apiUrl = requireHttpsApiUrl(
-    process.env.SYSTEMDOX_API_URL ?? API_URL_DEFAULT
-  );
-  return {
-    apiKey,
-    apiUrl,
-    cacheTtlMs: parseInt(process.env.SYSTEMDOX_CACHE_TTL ?? "300", 10) * 1e3,
-    defaultOrg: process.env.SYSTEMDOX_DEFAULT_ORG
-  };
-}
-
 // src/lib/cache.ts
 var ResponseCache = class {
   store = /* @__PURE__ */ new Map();
@@ -268,6 +232,131 @@ var SystemDoxApiClient = class {
   }
 };
 
+// src/lib/team-setup-files.ts
+import { execFile } from "child_process";
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { homedir, userInfo } from "os";
+import { dirname, join } from "path";
+import { promisify } from "util";
+
+// src/lib/config.ts
+var API_URL_DEFAULT = "https://api.puglieseweb.com/systemdox";
+function requireHttpsApiUrl(apiUrl) {
+  let parsed;
+  try {
+    parsed = new URL(apiUrl);
+  } catch {
+    throw new Error(
+      `SYSTEMDOX_API_URL is not a valid URL: ${apiUrl}`
+    );
+  }
+  if (parsed.protocol !== "https:") {
+    throw new Error(
+      `SYSTEMDOX_API_URL must use https:// \u2014 refusing to send the API key over ${parsed.protocol}// in cleartext. Got: ${apiUrl}`
+    );
+  }
+  return apiUrl;
+}
+function loadConfig(apiKey = process.env.SYSTEMDOX_API_KEY) {
+  if (!apiKey) {
+    throw new Error(
+      "SYSTEMDOX_API_KEY is required. Generate one at your SystemDox settings page."
+    );
+  }
+  const apiUrl = requireHttpsApiUrl(
+    process.env.SYSTEMDOX_API_URL ?? API_URL_DEFAULT
+  );
+  return {
+    apiKey,
+    apiUrl,
+    cacheTtlMs: parseInt(process.env.SYSTEMDOX_CACHE_TTL ?? "300", 10) * 1e3,
+    defaultOrg: process.env.SYSTEMDOX_DEFAULT_ORG
+  };
+}
+
+// src/lib/team-setup-files.ts
+var SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function isWorkspace(value) {
+  return typeof value === "string" && value.length <= 64 && SLUG_RE.test(value);
+}
+function homeDir() {
+  return homedir();
+}
+function systemdoxDir() {
+  return join(homeDir(), ".claude", "systemdox");
+}
+function credentialsPath() {
+  return join(systemdoxDir(), "credentials.json");
+}
+function workspaceDir(workspace) {
+  if (!isWorkspace(workspace)) throw new Error(`${JSON.stringify(workspace)} is not a workspace name`);
+  return join(systemdoxDir(), workspace);
+}
+function statePath(workspace) {
+  return join(workspaceDir(workspace), "state.json");
+}
+async function readJson(path, empty) {
+  let text3;
+  try {
+    text3 = await readFile(path, "utf8");
+  } catch (e) {
+    if (e.code === "ENOENT") return empty;
+    throw e;
+  }
+  try {
+    return JSON.parse(text3);
+  } catch {
+    throw new Error(`${path} is not valid JSON: fix or remove it, then run this again`);
+  }
+}
+async function writeJsonAtomically(path, value, mode) {
+  await mkdir(dirname(path), { recursive: true });
+  const tmp = `${path}.${process.pid}.tmp`;
+  await writeFile(tmp, JSON.stringify(value, null, 2) + "\n", mode === void 0 ? "utf8" : { encoding: "utf8", mode });
+  await rename(tmp, path);
+}
+async function readCredentials() {
+  return readJson(credentialsPath(), {});
+}
+var run = promisify(execFile);
+async function localApiKey(env = process.env) {
+  if (env.SYSTEMDOX_API_KEY) return env.SYSTEMDOX_API_KEY;
+  const keys = Object.entries(await readCredentials()).filter(
+    (e) => typeof e[1]?.apiKey === "string" && e[1].apiKey.length > 0
+  );
+  const wanted = env.SYSTEMDOX_WORKSPACE;
+  if (wanted) {
+    const key = keys.find(([ws]) => ws === wanted)?.[1].apiKey;
+    if (key) return key;
+    throw new Error(
+      `~/.claude/systemdox/credentials.json holds no key for ${wanted} (SYSTEMDOX_WORKSPACE). Set SYSTEMDOX_API_KEY, or run npx -y @systemdox/mcp-server setup.`
+    );
+  }
+  if (keys.length === 1) return keys[0][1].apiKey;
+  if (keys.length > 1) {
+    throw new Error(
+      `~/.claude/systemdox/credentials.json holds keys for ${keys.map(([ws]) => ws).join(", ")}: set SYSTEMDOX_WORKSPACE to the workspace to use, or SYSTEMDOX_API_KEY to its key.`
+    );
+  }
+  throw new Error("No SystemDox key. Set SYSTEMDOX_API_KEY, or run npx -y @systemdox/mcp-server setup.");
+}
+async function loadLocalConfig(env = process.env) {
+  const apiKey = await localApiKey(env);
+  return loadConfig(apiKey);
+}
+async function readState(workspace) {
+  return readJson(statePath(workspace), {});
+}
+async function writeState(workspace, state) {
+  await writeJsonAtomically(statePath(workspace), state);
+}
+async function updateState(workspace, change) {
+  const state = await readState(workspace);
+  change(state);
+  await writeState(workspace, state);
+  return state;
+}
+
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
@@ -950,8 +1039,149 @@ ${notes.join("\n")}` : "")
   );
 }
 
-// src/tools/get-context.ts
+// src/tools/get-change.ts
 import { z as z6 } from "zod";
+var GITHUB_NAME = "[A-Za-z0-9][A-Za-z0-9._-]{0,99}";
+var REPO_RE = new RegExp(`^${GITHUB_NAME}/${GITHUB_NAME}$`);
+var SLUG_RE2 = /^[a-z0-9]+(-[a-z0-9]+)*$/;
+var SLUG_MAX = 64;
+var PARTS = ["decision", "contract", "behaviour", "plan", "release"];
+var BRIEF = ["decision", "contract", "behaviour", "plan"];
+var PAST_REVIEW = /* @__PURE__ */ new Set(["passed", "being built", "done"]);
+function briefVerdict(states) {
+  const waiting = BRIEF.filter(
+    (part) => !(part === "decision" && states.decision === null) && !PAST_REVIEW.has(String(states[part]))
+  ).map((part) => `${part} is ${states[part] ?? "unknown"}`);
+  return waiting.length === 0 ? "The brief is passed" : `The brief is not passed: ${waiting.join(", ")}`;
+}
+function prLink(pr) {
+  return `[${pr.repo}#${pr.number}](${pr.url}) ${pr.state}`;
+}
+function fileSource(file) {
+  if (file.pullRequest) return prLink(file.pullRequest);
+  return file.direct ? "committed directly" : "\u2014";
+}
+function partPullRequests(change, part) {
+  const files = part === "contract" ? change.contract.files : part === "behaviour" ? change.behaviour.files : part === "plan" ? [change.plan.file] : [];
+  const prs = part === "decision" ? [change.decision?.pullRequest ?? null] : part === "release" ? change.release.prs : files.map((file) => file?.pullRequest ?? null);
+  const unique = /* @__PURE__ */ new Map();
+  for (const pr of prs) {
+    if (pr && !unique.has(`${pr.repo}#${pr.number}`)) unique.set(`${pr.repo}#${pr.number}`, pr);
+  }
+  return [...unique.values()].sort((a, b) => Number(b.state === "open") - Number(a.state === "open"));
+}
+function countsLine(counts) {
+  const tags = ["proposed", "built", "defect", "unbuilt", "open", "untagged"].filter((tag) => counts[tag] > 0).map((tag) => `${counts[tag]} ${tag}`);
+  return `${counts.total} scenario(s)` + (tags.length > 0 ? `: ${tags.join(", ")}` : "");
+}
+function partsTable(change) {
+  const rows = PARTS.filter((part) => !(part === "decision" && change.states.decision === null)).map((part) => {
+    const prs = partPullRequests(change, part);
+    return `| ${part} | ${change.states[part]} | ${prs.length > 0 ? prs.map(prLink).join(", ") : "\u2014"} |`;
+  });
+  return ["| Part | State | Pull request |", "|---|---|---|", ...rows].join("\n");
+}
+function decisionSection(change) {
+  const decision = change.decision;
+  if (decision === null) return "## Decision\n\nNone: the proposal names no ADR (a small change).";
+  const status = decision.status || "no record in a connected repository";
+  return `## Decision
+
+${decision.adr} \xB7 ${status}${decision.title ? ` \u2014 ${decision.title}` : ""}`;
+}
+function contractSection(change) {
+  const files = change.contract.files;
+  return "## Contract\n\n" + (files.length > 0 ? files.map((file) => `- ${file.path} \u2014 ${fileSource(file)}`).join("\n") : "No contract file yet (openapi.yaml, asyncapi.yaml or contract.md).");
+}
+function behaviourSection(change) {
+  const { files, counts } = change.behaviour;
+  if (files.length === 0) {
+    return `## Behaviour
+
+No feature file names this change. A feature file joins it when its path or its first ten lines name \`${change.slug}\`${change.decision ? ` or ${change.decision.adr}` : ""}.`;
+  }
+  const blocks = files.map(
+    (file) => [
+      `### ${file.path}`,
+      "",
+      [file.title, file.runner ? `runner ${file.runner}` : "", fileSource(file), countsLine(file.counts)].filter(Boolean).join(" \xB7 "),
+      "",
+      ...file.scenarios.map((s) => `- ${s.id || "(no id)"} \xB7 ${s.state || "untagged"} \xB7 ${s.title}`)
+    ].join("\n")
+  );
+  return ["## Behaviour", countsLine(counts), ...blocks].join("\n\n");
+}
+function planSection(change) {
+  const { file, draftId, board } = change.plan;
+  const boardLine = board ? `[#${board.number} ${board.title}](${board.url}) \u2014 todo ${board.items.todo} \xB7 in progress ${board.items.inProgress} \xB7 done ${board.items.done}` + (board.items.truncated ? " (counted over its first 500 items)" : "") : "none";
+  return [
+    "## Plan",
+    "",
+    `- plan.md: ${file ? `${file.path} \u2014 ${fileSource(file)}` : "none"}`,
+    `- Draft: ${draftId ?? "none"}`,
+    `- Board: ${boardLine}`
+  ].join("\n");
+}
+function releaseSection(change) {
+  const lines = change.release.prs.map(
+    (pr) => `- ${prLink(pr)} \xB7 ${pr.title} \xB7 ` + (pr.approvingReview ? `approved by ${pr.approvingReview.by} at ${pr.approvingReview.at}` : "no approving review on its head yet")
+  );
+  return `## Release
+
+${lines.length > 0 ? lines.join("\n") : "No release pull request is open."}`;
+}
+function formatChange(change) {
+  const header = `# ${change.title}
+
+\`${change.key}\` \xB7 size: ${change.size}` + (change.archived ? " \xB7 archived: read-only, done" : "") + ` \xB7 synced ${change.syncedAt}`;
+  return [
+    header,
+    partsTable(change),
+    decisionSection(change),
+    contractSection(change),
+    behaviourSection(change),
+    planSection(change),
+    releaseSection(change),
+    // Compact: a change's every scenario with its steps rides in this block.
+    "```json\n" + JSON.stringify(change) + "\n```",
+    briefVerdict(change.states)
+  ].join("\n\n");
+}
+function registerGetChange(server2, apiClient2) {
+  server2.registerTool(
+    "get_change",
+    {
+      title: "Get Change",
+      description: `Read one change (a specs/changes/<slug>/ folder of a connected repository) as SystemDox last synced it from GitHub: the state of each part of its brief (decision, contract, behaviour, plan) and of its release, each with its pull request; the decision's ADR and status; the contract files; every feature file that names the change, with its scenarios as id \xB7 state \xB7 title; the plan (plan.md, the draft, the board); the release pull requests; and the Change object as JSON. The last line says "The brief is passed" or "The brief is not passed: <part> is <state>". Call it before building a story, and stop if the brief is not passed or the story's scenarios are not proposed. Read-only.`,
+      inputSchema: {
+        repo: z6.string().regex(REPO_RE, "the repository as owner/name, e.g. acme/booking-api").describe("The repository that holds the change, as owner/name"),
+        slug: z6.string().max(SLUG_MAX).regex(SLUG_RE2, "a change folder's name: lower-case words joined by -, e.g. customer-reminders").describe("The change's folder name: specs/changes/<slug>/")
+      },
+      annotations: { readOnlyHint: true }
+    },
+    async ({ repo, slug }) => {
+      const [owner, name] = repo.split("/");
+      let change;
+      try {
+        change = await apiClient2.getFresh(
+          `/v1/changes/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/${encodeURIComponent(slug)}`
+        );
+      } catch (err) {
+        if (err.status === 404) {
+          return {
+            content: [{ type: "text", text: `No such change ${repo}/${slug}` }],
+            isError: true
+          };
+        }
+        throw err;
+      }
+      return { content: [{ type: "text", text: formatChange(change) }] };
+    }
+  );
+}
+
+// src/tools/get-context.ts
+import { z as z7 } from "zod";
 
 // src/lib/scoring.ts
 var WEIGHT_PATH = 0.4;
@@ -1518,13 +1748,13 @@ function registerGetContext(server2, apiClient2) {
       title: "Get Context",
       description: "Intelligent context aggregator: fetches checks, specs, docs, and tech stack, ranks them by relevance to your current task, and returns the full text of the highest-ranked items within a token budget \u2014 each with the ID needed to fetch the rest. Use this instead of calling individual tools when you want curated, relevant context.",
       inputSchema: {
-        task_description: z6.string().describe(
+        task_description: z7.string().describe(
           "What you're working on (e.g., 'add a new REST endpoint for user preferences')"
         ),
-        file_paths: z6.array(z6.string()).optional().describe(
+        file_paths: z7.array(z7.string()).optional().describe(
           "File paths being edited \u2014 used for language/category detection"
         ),
-        max_tokens: z6.number().optional().describe("Maximum token budget for the response (default: 4000)")
+        max_tokens: z7.number().optional().describe("Maximum token budget for the response (default: 4000)")
       }
     },
     async ({ task_description, file_paths, max_tokens }) => {
@@ -1541,7 +1771,7 @@ function registerGetContext(server2, apiClient2) {
 }
 
 // src/tools/create-guardrail.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 var DESCRIPTION2 = "Create a new check in SystemDox. Use this when you discover a pattern that should be enforced (banned pattern, required pattern, coding rule).";
 var CATEGORIES = [
   "imports",
@@ -1554,13 +1784,13 @@ var CATEGORIES = [
   "data-access"
 ];
 var inputSchema2 = () => ({
-  title: z7.string().describe("Short title for the check"),
-  description: z7.string().describe("Detailed description of what the check enforces and why"),
-  severity: z7.enum(["critical", "high", "medium", "low"]).describe("Severity level"),
-  category: z7.enum(CATEGORIES).optional().describe("Category (defaults to conventions)"),
-  pattern: z7.string().optional().describe("Bad code pattern that should be avoided"),
-  fix: z7.string().optional().describe("Correct code pattern to use instead"),
-  fitness_test: z7.string().optional().describe("Shell command to detect violations in CI")
+  title: z8.string().describe("Short title for the check"),
+  description: z8.string().describe("Detailed description of what the check enforces and why"),
+  severity: z8.enum(["critical", "high", "medium", "low"]).describe("Severity level"),
+  category: z8.enum(CATEGORIES).optional().describe("Category (defaults to conventions)"),
+  pattern: z8.string().optional().describe("Bad code pattern that should be avoided"),
+  fix: z8.string().optional().describe("Correct code pattern to use instead"),
+  fitness_test: z8.string().optional().describe("Shell command to detect violations in CI")
 });
 function registerCreateGuardrail(server2, apiClient2) {
   const handler = async ({
@@ -1626,7 +1856,7 @@ function registerCreateGuardrail(server2, apiClient2) {
 }
 
 // src/tools/update-spec.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 function registerUpdateSpec(server2, apiClient2) {
   server2.registerTool(
     "update_spec",
@@ -1634,12 +1864,12 @@ function registerUpdateSpec(server2, apiClient2) {
       title: "Update Spec",
       description: "Update an existing SystemDox spec's proposal, tasks, or requirements. Only draft specs can be modified \u2014 published specs must be versioned first.",
       inputSchema: {
-        draft_id: z8.string().describe("ID of the spec to update"),
-        section: z8.enum(["proposal", "tasks", "requirements"]).describe("Which section to update"),
-        content: z8.string().describe(
+        draft_id: z9.string().describe("ID of the spec to update"),
+        section: z9.enum(["proposal", "tasks", "requirements"]).describe("Which section to update"),
+        content: z9.string().describe(
           "New markdown content for the section. For requirements, provide the full requirement content."
         ),
-        requirement_name: z8.string().optional().describe(
+        requirement_name: z9.string().optional().describe(
           "Name of the requirement (required when section is 'requirements')"
         )
       },
@@ -1689,7 +1919,7 @@ function registerUpdateSpec(server2, apiClient2) {
 }
 
 // src/tools/report-decision.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 function registerReportDecision(server2, apiClient2) {
   server2.registerTool(
     "report_decision",
@@ -1697,11 +1927,11 @@ function registerReportDecision(server2, apiClient2) {
       title: "Report Decision",
       description: "Record an architecture decision made during development. Creates a draft ADR in SystemDox for human review.",
       inputSchema: {
-        title: z9.string().describe("Decision title (e.g., 'Use WebSocket for real-time updates')"),
-        context: z9.string().describe("What prompted this decision \u2014 the problem or constraint"),
-        decision: z9.string().describe("What was decided and why"),
-        consequences: z9.string().describe("What this decision means going forward \u2014 trade-offs, follow-up work"),
-        related_files: z9.array(z9.string()).optional().describe("File paths related to this decision")
+        title: z10.string().describe("Decision title (e.g., 'Use WebSocket for real-time updates')"),
+        context: z10.string().describe("What prompted this decision \u2014 the problem or constraint"),
+        decision: z10.string().describe("What was decided and why"),
+        consequences: z10.string().describe("What this decision means going forward \u2014 trade-offs, follow-up work"),
+        related_files: z10.array(z10.string()).optional().describe("File paths related to this decision")
       },
       annotations: {
         readOnlyHint: false
@@ -1752,7 +1982,7 @@ Status: draft \u2014 review in SystemDox before publishing.`
 }
 
 // src/tools/get-project-rules.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var CATEGORY_LABELS = {
   deployment: "Deployment",
   architecture: "Architecture",
@@ -1768,7 +1998,7 @@ function registerGetProjectRules(server2, apiClient2) {
       title: "Get Project Rules",
       description: "Retrieve project rules defined in SystemDox Standards. These are team-defined principles covering deployment, architecture, security, testing, and process. Filter by category to get only relevant rules.",
       inputSchema: {
-        category: z10.enum(["deployment", "architecture", "security", "testing", "process", "other"]).optional().describe("Filter by rule category")
+        category: z11.enum(["deployment", "architecture", "security", "testing", "process", "other"]).optional().describe("Filter by rule category")
       }
     },
     async ({ category }) => {
@@ -1820,7 +2050,7 @@ function registerGetProjectRules(server2, apiClient2) {
 }
 
 // src/tools/create-project-rule.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 function registerCreateProjectRule(server2, apiClient2) {
   server2.registerTool(
     "create_project_rule",
@@ -1828,10 +2058,10 @@ function registerCreateProjectRule(server2, apiClient2) {
       title: "Create Project Rule",
       description: "Create a new project rule in SystemDox Standards. Use this when you discover a team principle or convention that should be enforced across the project.",
       inputSchema: {
-        text: z11.string().describe(
+        text: z12.string().describe(
           "The rule statement \u2014 one enforceable principle per rule (e.g. 'All deployments MUST go through GitHub Actions workflows')"
         ),
-        category: z11.enum(["deployment", "architecture", "security", "testing", "process", "other"]).describe("Rule category")
+        category: z12.enum(["deployment", "architecture", "security", "testing", "process", "other"]).describe("Rule category")
       },
       annotations: {
         readOnlyHint: false
@@ -1902,7 +2132,7 @@ ${text3}`
 }
 
 // src/tools/create-prompt-template.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 function registerCreatePromptTemplate(server2, apiClient2) {
   server2.registerTool(
     "create_prompt_template",
@@ -1910,9 +2140,9 @@ function registerCreatePromptTemplate(server2, apiClient2) {
       title: "Create Prompt Template",
       description: "Create a new reusable prompt template in SystemDox Standards. Use this to store preconfigured prompts for common AI tasks like code reviews, documentation generation, or analysis frameworks.",
       inputSchema: {
-        name: z12.string().describe("Short name for the template"),
-        description: z12.string().optional().describe("Brief description of when to use this template"),
-        prompt: z12.string().describe("The full prompt text that Gen AI will use when generating content")
+        name: z13.string().describe("Short name for the template"),
+        description: z13.string().optional().describe("Brief description of when to use this template"),
+        prompt: z13.string().describe("The full prompt text that Gen AI will use when generating content")
       },
       annotations: {
         readOnlyHint: false
@@ -1941,16 +2171,16 @@ function registerCreatePromptTemplate(server2, apiClient2) {
 }
 
 // src/tools/skills.ts
-import { z as z13 } from "zod";
-import { homedir as homedir2 } from "os";
+import { z as z14 } from "zod";
+import { homedir as homedir3 } from "os";
 import { basename, resolve as resolve2 } from "path";
 
 // src/lib/skills.ts
 import { createHash } from "crypto";
-import { lstat, mkdir, readdir, readFile, rm, writeFile } from "fs/promises";
+import { lstat, mkdir as mkdir2, readdir, readFile as readFile2, rm as rm2, writeFile as writeFile2 } from "fs/promises";
 import { existsSync } from "fs";
-import { homedir } from "os";
-import { dirname, join, relative, resolve, sep } from "path";
+import { homedir as homedir2 } from "os";
+import { dirname as dirname2, join as join2, relative, resolve, sep } from "path";
 var MANIFEST_FILE = ".systemdox-skill.json";
 var ENTRY_FILE = "SKILL.md";
 var MAX_FILES = 100;
@@ -1986,12 +2216,12 @@ function frontmatterName(skillMd) {
   return line ? line[1].replace(/^(['"])(.*)\1$/, "$2") : void 0;
 }
 function defaultSkillDir(name) {
-  return join(homedir(), ".claude", "skills", name);
+  return join2(homedir2(), ".claude", "skills", name);
 }
 async function walk(root, { skipHidden }, dir = root, out = { files: [], links: [], hidden: [] }) {
   for (const entry of await readdir(dir, { withFileTypes: true })) {
     if (SKIPPED.has(entry.name) || entry.name.endsWith(".pyc")) continue;
-    const full = join(dir, entry.name);
+    const full = join2(dir, entry.name);
     const rel = relative(root, full).split(sep).join("/");
     if (entry.isSymbolicLink()) out.links.push(rel);
     else if (skipHidden && entry.name.startsWith(".")) out.hidden.push(rel);
@@ -2012,7 +2242,7 @@ async function readTextFiles(root, paths, what) {
     if (!isValidPath(path)) {
       throw new Error(`${path}: file names may use letters, digits, ".", "_" and "-" only`);
     }
-    const raw = await readFile(join(root, ...path.split("/")));
+    const raw = await readFile2(join2(root, ...path.split("/")));
     if (raw.includes(0)) throw new Error(`${path} is binary: ${what} holds text files only`);
     if (raw.length > MAX_FILE_BYTES) {
       throw new Error(`${path} is ${raw.length} bytes: a file holds at most ${MAX_FILE_BYTES}`);
@@ -2033,7 +2263,7 @@ async function readTextFiles(root, paths, what) {
 }
 async function readSkillDirectory(directory) {
   const root = resolve(directory);
-  if (!existsSync(join(root, ENTRY_FILE))) {
+  if (!existsSync(join2(root, ENTRY_FILE))) {
     throw new Error(`${root} has no ${ENTRY_FILE}: a skill folder holds SKILL.md at its root`);
   }
   const walked = await walk(root, { skipHidden: true });
@@ -2054,7 +2284,7 @@ function within(dest, path) {
 }
 async function readManifest(dest) {
   try {
-    return JSON.parse(await readFile(join(dest, MANIFEST_FILE), "utf8"));
+    return JSON.parse(await readFile2(join2(dest, MANIFEST_FILE), "utf8"));
   } catch {
     return void 0;
   }
@@ -2078,7 +2308,7 @@ async function installSkill(version, dest, { overwrite = false } = {}) {
   const edited = [];
   const untracked = [];
   for (const path of present) {
-    const content = await readFile(join(dest, ...path.split("/")), "utf8");
+    const content = await readFile2(join2(dest, ...path.split("/")), "utf8");
     if (Object.hasOwn(known, path)) {
       if (sha256(content) !== known[path]) edited.push(path);
     } else if (!incoming.has(path) || sha256(content) !== incoming.get(path).sha256) {
@@ -2091,8 +2321,8 @@ async function installSkill(version, dest, { overwrite = false } = {}) {
   const written = [];
   for (const f of version.files) {
     const full = within(dest, f.path);
-    await mkdir(dirname(full), { recursive: true });
-    await writeFile(full, f.content, "utf8");
+    await mkdir2(dirname2(full), { recursive: true });
+    await writeFile2(full, f.content, "utf8");
     written.push(f.path);
   }
   const removed = [];
@@ -2103,7 +2333,7 @@ async function installSkill(version, dest, { overwrite = false } = {}) {
       keptEdited.push(path);
       continue;
     }
-    await rm(within(dest, path));
+    await rm2(within(dest, path));
     removed.push(path);
   }
   const next = {
@@ -2112,7 +2342,7 @@ async function installSkill(version, dest, { overwrite = false } = {}) {
     installedAt: (/* @__PURE__ */ new Date()).toISOString(),
     files: Object.fromEntries(version.files.map((f) => [f.path, f.sha256]))
   };
-  await writeFile(join(dest, MANIFEST_FILE), JSON.stringify(next, null, 2) + "\n", "utf8");
+  await writeFile2(join2(dest, MANIFEST_FILE), JSON.stringify(next, null, 2) + "\n", "utf8");
   return {
     dest,
     version: version.version,
@@ -2142,15 +2372,15 @@ function describeInstall(name, r) {
 // src/tools/skills.ts
 var SKILLS = "/v1/standards/skills";
 function expandHome(path) {
-  return path.replace(/^~(?=$|[\\/])/, homedir2());
+  return path.replace(/^~(?=$|[\\/])/, homedir3());
 }
 function text(t) {
   return { content: [{ type: "text", text: t }] };
 }
 function registerSkillTools(server2, apiClient2, { localFiles }) {
-  const fileSchema = z13.object({
-    path: z13.string().describe('Path inside the skill folder, forward slashes, e.g. "references/guide.md"'),
-    content: z13.string().describe("The file's full text, exactly as it is")
+  const fileSchema = z14.object({
+    path: z14.string().describe('Path inside the skill folder, forward slashes, e.g. "references/guide.md"'),
+    content: z14.string().describe("The file's full text, exactly as it is")
   });
   server2.registerTool(
     "publish_skill",
@@ -2159,13 +2389,13 @@ function registerSkillTools(server2, apiClient2, { localFiles }) {
       description: localFiles ? "Publish a Claude Code skill folder (SKILL.md plus its references and scripts) to SystemDox so it can be installed on any computer. Pass `directory` (e.g. ~/.claude/skills/<name>): the server reads the files itself, byte for byte. Publishing a name again makes a new version. Never retype the files into `files` when the folder is on this computer." : "Publish a Claude Code skill (SKILL.md plus its references and scripts) to SystemDox so it can be installed on any computer. Pass every file of the folder in `files`, exactly as it is. Publishing a name again makes a new version.",
       inputSchema: {
         ...localFiles ? {
-          directory: z13.string().optional().describe("The skill folder on this computer, holding SKILL.md at its root")
+          directory: z14.string().optional().describe("The skill folder on this computer, holding SKILL.md at its root")
         } : {},
-        files: z13.array(fileSchema).optional().describe(localFiles ? "Only when there is no folder to read" : "Every file of the skill folder"),
-        name: z13.string().optional().describe("The skill's name; defaults to SKILL.md's frontmatter name and must match it"),
-        spaceId: z13.string().optional().describe("Space for a NEW skill (default: your default space)"),
-        note: z13.string().max(500).optional().describe(`A short change note for this version, shown in the console's history (e.g. "Fix the GA4 step")`),
-        baseVersion: z13.number().int().positive().optional().describe(
+        files: z14.array(fileSchema).optional().describe(localFiles ? "Only when there is no folder to read" : "Every file of the skill folder"),
+        name: z14.string().optional().describe("The skill's name; defaults to SKILL.md's frontmatter name and must match it"),
+        spaceId: z14.string().optional().describe("Space for a NEW skill (default: your default space)"),
+        note: z14.string().max(500).optional().describe(`A short change note for this version, shown in the console's history (e.g. "Fix the GA4 step")`),
+        baseVersion: z14.number().int().positive().optional().describe(
           "The version these files were edited from. When given, the publish is refused (SYD-K017) if someone published a newer version since, instead of replacing their changes"
         )
       },
@@ -2215,7 +2445,7 @@ Left out (hidden files are never part of a skill): ${skipped.join(", ")}` : "")
       const { skills } = await apiClient2.get(SKILLS);
       if (!skills.length) {
         return text(
-          `No skills published yet. Publish one with publish_skill; they appear at ${configLink("/docs/skills", await workspaceBase(apiClient2))}`
+          `No skills published yet. Publish one with publish_skill; they appear at ${configLink("/docs/team-setup/skills", await workspaceBase(apiClient2))}`
         );
       }
       return text(
@@ -2231,10 +2461,10 @@ Left out (hidden files are never part of a skill): ${skipped.join(", ")}` : "")
       title: "Install Skill",
       description: localFiles ? "Install a skill published to SystemDox onto this computer (default ~/.claude/skills/<name>/). Refuses, naming the files, when a file there was edited since it was installed, unless overwrite is true. Never runs anything." : "Fetch a skill published to SystemDox so you can install it: returns every file and the folder to write them into (default ~/.claude/skills/<name>/). Write each file exactly, then the manifest it shows.",
       inputSchema: {
-        name: z13.string().describe("The skill's name"),
-        version: z13.number().int().positive().optional().describe("A version number (default: the latest)"),
-        target: z13.string().optional().describe("Folder to install into, e.g. a repo's .claude/skills/<name>"),
-        ...localFiles ? { overwrite: z13.boolean().optional().describe("Replace files edited since they were installed") } : {}
+        name: z14.string().describe("The skill's name"),
+        version: z14.number().int().positive().optional().describe("A version number (default: the latest)"),
+        target: z14.string().optional().describe("Folder to install into, e.g. a repo's .claude/skills/<name>"),
+        ...localFiles ? { overwrite: z14.boolean().optional().describe("Replace files edited since they were installed") } : {}
       },
       annotations: { readOnlyHint: !localFiles }
     },
@@ -2280,7 +2510,7 @@ ${body}`
 }
 
 // src/tools/team-setup.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 import { existsSync as existsSync3 } from "fs";
 import { lstat as lstat2 } from "fs/promises";
 import { homedir as homedir4 } from "os";
@@ -2361,7 +2591,7 @@ function findSecrets(text3) {
 }
 
 // src/lib/team-setup-types.ts
-var PARTS = ["hooks", "mcp", "agents", "commands", "instructions"];
+var PARTS2 = ["hooks", "mcp", "agents", "commands", "instructions"];
 var PERSON_ID_RE = new RegExp(`^${PERSON_ID}$`);
 
 // src/sync-memory.ts
@@ -2638,63 +2868,6 @@ function lineDiff(before, after) {
   return out;
 }
 
-// src/lib/team-setup-files.ts
-import { execFile } from "child_process";
-import { chmod, mkdir as mkdir2, readFile as readFile2, rename, rm as rm2, writeFile as writeFile2 } from "fs/promises";
-import { homedir as homedir3, userInfo } from "os";
-import { dirname as dirname2, join as join2 } from "path";
-import { promisify } from "util";
-var SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-function isWorkspace(value) {
-  return typeof value === "string" && value.length <= 64 && SLUG_RE.test(value);
-}
-function homeDir() {
-  return homedir3();
-}
-function systemdoxDir() {
-  return join2(homeDir(), ".claude", "systemdox");
-}
-function workspaceDir(workspace) {
-  if (!isWorkspace(workspace)) throw new Error(`${JSON.stringify(workspace)} is not a workspace name`);
-  return join2(systemdoxDir(), workspace);
-}
-function statePath(workspace) {
-  return join2(workspaceDir(workspace), "state.json");
-}
-async function readJson(path, empty) {
-  let text3;
-  try {
-    text3 = await readFile2(path, "utf8");
-  } catch (e) {
-    if (e.code === "ENOENT") return empty;
-    throw e;
-  }
-  try {
-    return JSON.parse(text3);
-  } catch {
-    throw new Error(`${path} is not valid JSON: fix or remove it, then run this again`);
-  }
-}
-async function writeJsonAtomically(path, value, mode) {
-  await mkdir2(dirname2(path), { recursive: true });
-  const tmp = `${path}.${process.pid}.tmp`;
-  await writeFile2(tmp, JSON.stringify(value, null, 2) + "\n", mode === void 0 ? "utf8" : { encoding: "utf8", mode });
-  await rename(tmp, path);
-}
-var run = promisify(execFile);
-async function readState(workspace) {
-  return readJson(statePath(workspace), {});
-}
-async function writeState(workspace, state) {
-  await writeJsonAtomically(statePath(workspace), state);
-}
-async function updateState(workspace, change) {
-  const state = await readState(workspace);
-  change(state);
-  await writeState(workspace, state);
-  return state;
-}
-
 // src/sync-memory.ts
 var SYNC_MEMORY_COMMAND = "npx -y @systemdox/mcp-server sync-memory";
 var SyncFailed = class extends Error {
@@ -3280,9 +3453,9 @@ function describePerson(id, person) {
   return lines.join("\n");
 }
 function registerTeamSetupTools(server2, apiClient2, { localFiles }) {
-  const fileSchema = z14.object({
-    path: z14.string().describe(`Path inside the part's folder, forward slashes, e.g. "hooks/hooks.json"`),
-    content: z14.string().describe("The file's full text, exactly as it is")
+  const fileSchema = z15.object({
+    path: z15.string().describe(`Path inside the part's folder, forward slashes, e.g. "hooks/hooks.json"`),
+    content: z15.string().describe("The file's full text, exactly as it is")
   });
   server2.registerTool(
     "publish_setup_part",
@@ -3290,13 +3463,13 @@ function registerTeamSetupTools(server2, apiClient2, { localFiles }) {
       title: "Publish Setup Part",
       description: "Publish one part of your team's Claude Code setup to SystemDox: `hooks` (hooks/hooks.json and the scripts/ it calls), `mcp` (.mcp.json), `agents` (agents/*.md), `commands` (commands/*.md) or `instructions` (CLAUDE.md). Every part but instructions makes a new version of the team plugin, which each member accepts at their next update. Publishing hooks, mcp, agents or commands needs the admin role. " + (localFiles ? "Pass `directory`: the server reads only the files the part accepts, byte for byte, and refuses a link, a binary file or a file too large before anything is sent. Never retype the files into `files` when the folder is on this computer." : "Pass every file of the part in `files`, exactly as it is."),
       inputSchema: {
-        part: z14.enum(PARTS).describe("Which part of the setup"),
+        part: z15.enum(PARTS2).describe("Which part of the setup"),
         ...localFiles ? {
-          directory: z14.string().optional().describe(
+          directory: z15.string().optional().describe(
             "The folder on this computer: for hooks, the one holding hooks/hooks.json and scripts/; for mcp, the one holding .mcp.json; for instructions, the one holding CLAUDE.md; for agents or commands, the one holding agents/ or commands/"
           )
         } : {},
-        files: z14.array(fileSchema).optional().describe(localFiles ? "Only when there is no folder to read" : "Every file of the part")
+        files: z15.array(fileSchema).optional().describe(localFiles ? "Only when there is no folder to read" : "Every file of the part")
       },
       annotations: { readOnlyHint: false }
     },
@@ -3332,7 +3505,7 @@ function registerTeamSetupTools(server2, apiClient2, { localFiles }) {
       title: "Resolve Person",
       description: "Read back a person that a team memory names by identifier, written as `con_\u2026` (label), `ctc_\u2026` or `usr_\u2026`: their label, name, phone number and email address, from the vault that holds them. The details are for this session only: never write them into a memory file; the memory keeps the identifier. Writes nothing.",
       inputSchema: {
-        id: z14.string().regex(PERSON_ID_RE, "a con_, ctc_ or usr_ identifier, as written in the memory").describe("The identifier, e.g. con_01JC2Q8Y4M7T0X3K5N9P2R6S8V")
+        id: z15.string().regex(PERSON_ID_RE, "a con_, ctc_ or usr_ identifier, as written in the memory").describe("The identifier, e.g. con_01JC2Q8Y4M7T0X3K5N9P2R6S8V")
       },
       annotations: { readOnlyHint: true }
     },
@@ -3349,8 +3522,8 @@ function registerTeamSetupTools(server2, apiClient2, { localFiles }) {
       title: "Sync Memory",
       description: `Sync one project's team memory on this computer with SystemDox: pull the files the team changed, push the ones changed here, keep both texts of a file changed on both sides. It never answers for a person: a file that still holds a phone number, an email address or a home-folder path is skipped and listed, with the command for the member to run in their own terminal (\`${SYNC_MEMORY_COMMAND}\`). Pass dryRun to see what it would do without writing or sending anything.`,
       inputSchema: {
-        project: z14.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, "a project name: lower case letters, digits and -").optional().describe("The project's team memory, e.g. puglieseweb-ltd; needed when the workspace has more than one"),
-        dryRun: z14.boolean().optional().describe("Show what would be pulled, pushed, deleted, conflicted and skipped, and change nothing")
+        project: z15.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, "a project name: lower case letters, digits and -").optional().describe("The project's team memory, e.g. puglieseweb-ltd; needed when the workspace has more than one"),
+        dryRun: z15.boolean().optional().describe("Show what would be pulled, pushed, deleted, conflicted and skipped, and change nothing")
       },
       annotations: { readOnlyHint: false }
     },
@@ -3368,7 +3541,7 @@ function registerTeamSetupTools(server2, apiClient2, { localFiles }) {
 }
 
 // src/server.ts
-var SERVER_VERSION = true ? "0.1.48" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.1.49" : "0.0.0-dev";
 function createServer(apiClient2, { localFiles = false } = {}) {
   const server2 = new McpServer({
     name: "systemdox-mcp-server",
@@ -3380,6 +3553,7 @@ function createServer(apiClient2, { localFiles = false } = {}) {
   registerGetTechStack(server2, apiClient2);
   registerGetPlanningContext(server2, apiClient2);
   registerGetPlanBoard(server2, apiClient2);
+  registerGetChange(server2, apiClient2);
   registerGetContext(server2, apiClient2);
   registerGetProjectRules(server2, apiClient2);
   registerGetPromptTemplates(server2, apiClient2);
@@ -3394,7 +3568,13 @@ function createServer(apiClient2, { localFiles = false } = {}) {
 }
 
 // src/index.ts
-var config = loadConfig();
+var config;
+try {
+  config = await loadLocalConfig();
+} catch (err) {
+  console.error(`SystemDox MCP server: ${err.message}`);
+  process.exit(1);
+}
 var apiClient = new SystemDoxApiClient(config);
 var server = createServer(apiClient, { localFiles: true });
 async function main() {