@unified-product-graph/mcp-server 0.8.4 → 0.8.5

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to `@unified-product-graph/mcp-server` are documented in this file. Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.8.5] - 2026-06-02
+
+Field-report fast-follow (tester report on 0.8.4).
+
+### Fixed
+- `skill_audit` no longer false-reports skills as out of sync on npm/npx installs. It resolved the canonical source from `process.cwd()/packages/upg-mcp-server/skills` — a monorepo-only path absent in a user's project — so every deployed skill came back unverifiable. It now resolves the skills bundled in the installed package (relative to the module), and treats a symlink to a byte-identical bundle, or a matching copy, as healthy: content match, not deployment method, is the signal.
+
+### Changed
+- The `prioritise` `type_mismatch` hint now points to the framework_exercise escape hatch (`apply_framework` / `upg apply`, then prioritise with `exercise_id`), so scoring a non-target entity type is discoverable.
+
 ## [0.8.4] - 2026-06-02
 
 Framework exercises, with the 0.8.3 launch fix folded in.

package/dist/index.js

@@ -10,7 +10,7 @@ import { UPGFileStore } from "@unified-product-graph/sdk";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import fs2 from "fs";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import * as path5 from "path";
 import {
   CallToolRequestSchema,
@@ -27778,7 +27778,8 @@ var pushToCloud = async (args, ctx) => {
 
 // src/tools/skills.ts
 import { existsSync as existsSync2, lstatSync, readlinkSync, readFileSync as readFileSync2, readdirSync as readdirSync2, realpathSync } from "fs";
-import { join as join5, resolve as resolve2 } from "path";
+import { join as join5, resolve as resolve2, dirname as dirname3 } from "path";
+import { fileURLToPath } from "url";
 function repoRoot() {
   return process.cwd();
 }
@@ -27789,8 +27790,40 @@ function canonicalisePath(p) {
     return p;
   }
 }
+function isSkillsDir(candidate) {
+  try {
+    if (!existsSync2(candidate)) return false;
+    return readdirSync2(candidate, { withFileTypes: true }).some(
+      (e) => (e.isDirectory() || e.isSymbolicLink()) && existsSync2(join5(candidate, e.name, "SKILL.md"))
+    );
+  } catch {
+    return false;
+  }
+}
+function resolveBundledSkillsDir() {
+  let md;
+  try {
+    md = dirname3(fileURLToPath(import.meta.url));
+  } catch {
+    md = process.cwd();
+  }
+  for (const c of [resolve2(md, "..", "skills"), resolve2(md, "..", "..", "skills"), resolve2(md, "skills")]) {
+    if (isSkillsDir(c)) return c;
+  }
+  let dir = md;
+  for (let i = 0; i < 12; i++) {
+    const mono = join5(dir, "packages", "upg-mcp-server", "skills");
+    if (isSkillsDir(mono)) return mono;
+    const parent = dirname3(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
 function sourceSkillsDir() {
-  return resolve2(repoRoot(), "packages/upg-mcp-server/skills");
+  const cwdPath = resolve2(repoRoot(), "packages/upg-mcp-server/skills");
+  if (existsSync2(cwdPath)) return cwdPath;
+  return resolveBundledSkillsDir() ?? cwdPath;
 }
 function deployedSkillsDir() {
   return resolve2(repoRoot(), ".claude/skills");
@@ -27833,6 +27866,21 @@ function auditOne(name) {
   const deployedExists = existsSync2(deployedPath);
   if (!sourceExists) issues.push("Canonical source SKILL.md is missing");
   if (!deployedExists) issues.push("Deployed SKILL.md is missing; run ./scripts/link-skills.sh");
+  let inSync = false;
+  let deployedFrontmatter = null;
+  let deployedFirstHeading = null;
+  if (deployedExists) {
+    const deployedBody = readFileSync2(deployedPath, "utf8");
+    deployedFrontmatter = parseFrontmatter(deployedBody);
+    deployedFirstHeading = firstHeading(deployedBody);
+    if (sourceExists) {
+      const sourceBody = readFileSync2(sourcePath, "utf8");
+      inSync = deployedBody === sourceBody;
+      if (!inSync) {
+        issues.push("Deployed SKILL.md differs from canonical source; symlink is stale or broken");
+      }
+    }
+  }
   let isSymlink = false;
   let symlinkTarget = null;
   if (existsSync2(deployedDir)) {
@@ -27840,32 +27888,17 @@ function auditOne(name) {
     isSymlink = stat.isSymbolicLink();
     if (isSymlink) {
       symlinkTarget = readlinkSync(deployedDir);
-      const targetReal = canonicalisePath(symlinkTarget);
-      const expectedReal = canonicalisePath(sourceDir);
-      if (targetReal !== expectedReal) {
-        issues.push(`Symlink points to ${symlinkTarget}, expected ${sourceDir}`);
+      if (!inSync && sourceExists) {
+        const targetReal = canonicalisePath(symlinkTarget);
+        const expectedReal = canonicalisePath(sourceDir);
+        if (targetReal !== expectedReal) {
+          issues.push(`Symlink points to ${symlinkTarget}, expected ${sourceDir}`);
+        }
       }
-    } else if (deployedExists) {
+    } else if (deployedExists && !inSync) {
       issues.push("Deployed entry is a real directory, not a symlink; stale copy will not pick up source updates; run ./scripts/link-skills.sh");
     }
   }
-  let inSync = false;
-  let deployedFrontmatter = null;
-  let deployedFirstHeading = null;
-  if (deployedExists && sourceExists) {
-    const deployedBody = readFileSync2(deployedPath, "utf8");
-    const sourceBody = readFileSync2(sourcePath, "utf8");
-    inSync = deployedBody === sourceBody;
-    deployedFrontmatter = parseFrontmatter(deployedBody);
-    deployedFirstHeading = firstHeading(deployedBody);
-    if (!inSync) {
-      issues.push("Deployed SKILL.md differs from canonical source; symlink is stale or broken");
-    }
-  } else if (deployedExists) {
-    const deployedBody = readFileSync2(deployedPath, "utf8");
-    deployedFrontmatter = parseFrontmatter(deployedBody);
-    deployedFirstHeading = firstHeading(deployedBody);
-  }
   return {
     name,
     deployed_path: deployedPath,
@@ -29417,7 +29450,7 @@ var SERVER_INSTRUCTIONS = [
 ].join("\n");
 function resolvePackageVersion() {
   try {
-    const here = path5.dirname(fileURLToPath(import.meta.url));
+    const here = path5.dirname(fileURLToPath2(import.meta.url));
     const pkgPath = path5.resolve(here, "..", "package.json");
     const raw = fs2.readFileSync(pkgPath, "utf-8");
     const pkg = JSON.parse(raw);
@@ -29475,7 +29508,7 @@ function createServer(store) {
 
 // src/index.ts
 import { nanoid } from "nanoid";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 import { realpathSync as realpathSync2 } from "fs";
 async function discoverUPGFile(explicitFile) {
   if (explicitFile) return path6.resolve(explicitFile);
@@ -29649,7 +29682,7 @@ ${lines.join("\n")}
 function isEntrypoint() {
   if (!process.argv[1]) return false;
   try {
-    return realpathSync2(process.argv[1]) === realpathSync2(fileURLToPath2(import.meta.url));
+    return realpathSync2(process.argv[1]) === realpathSync2(fileURLToPath3(import.meta.url));
   } catch {
     return false;
   }