@vantageos/vantage-registry-mcp 1.4.0 → 1.6.0

package/README.md

@@ -53,7 +53,7 @@ Or set `CONVEX_URL` in `.env.local` at the repo root.
 
 | Tool | Description |
 |------|-------------|
-| `upsert_skill` | Create or update a skill (upsert by name) |
+| `upsert_skill` | Create or update a skill (upsert by name). **New in 1.6.0:** optional `vrBody` writes the full SKILL.md body (vrContent/hash/version) in the same call |
 | `list_skills` | List skills — optional `status` / `team` / `category` filters |
 | `list_skills_by_team` | List skills for a specific team |
 | `list_skills_by_category` | List skills for a specific category |
@@ -71,7 +71,7 @@ Or set `CONVEX_URL` in `.env.local` at the repo root.
 
 | Tool | Description |
 |------|-------------|
-| `upsert_hook` | Create or update a hook (upsert by name) |
+| `upsert_hook` | Create or update a hook (upsert by name). **New in 1.6.0:** optional `tests` array of hook test file paths |
 | `list_hooks` | List hooks — optional `status` / `event` / `scope` filters |
 | `get_hook` | Get a hook by Convex document ID |
 
@@ -113,6 +113,7 @@ list_templates(team="core", template_type="checklist")
 | `list_runbooks_by_category` | List runbooks for a specific category (uses byCategory index) |
 | `list_runbooks_by_team` | List runbooks for a specific team (uses byTeam index) |
 | `delete_runbook` | Soft-delete a runbook — sets status to `deprecated` |
+| `detect_runbook_drift` | Return per-runbook `vrHash` (sha256 of content) + category + version for drift comparison (added in 1.6.0) |
 
 **Runbook status values:** `draft | published | deprecated`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vantageos/vantage-registry-mcp",
-  "version": "1.4.0",
+  "version": "1.6.0",
   "description": "MCP server exposing VantageRegistry Convex functions as Claude Code tools",
   "type": "module",
   "bin": {

package/server.js

@@ -56,7 +56,7 @@ var hookEventSchema = z.enum([
   "UserPromptSubmit"
 ]).describe("Hook lifecycle event");
 var runbookStatusSchema = z.enum(["draft", "published", "deprecated"]).describe("Runbook status");
-var templateTypeSchema = z.enum(["mission", "document", "checklist"]).describe("Template type");
+var templateTypeSchema = z.enum(["standard", "mission", "brief", "runbook", "document", "checklist"]).describe("Template type");
 var linkTypeSchema = z.enum(["uses", "produces", "references"]).describe(
   "Link type \u2014 uses: template consumed during execution, produces: output document generated, references: informational cross-reference"
 );
@@ -64,7 +64,7 @@ var convexUrl = loadConvexUrl();
 var convex = new ConvexHttpClient(convexUrl);
 var server = new McpServer({
   name: "vantage-registry",
-  version: "1.4.0"
+  version: "1.5.0"
 });
 server.tool(
   "upsert_team",
@@ -206,7 +206,7 @@ server.tool(
 );
 server.tool(
   "upsert_skill",
-  "Create or update a skill in VantageRegistry. Upserts by name+team \u2014 if a skill with the same name and team exists, it is updated.",
+  "Create or update a skill in VantageRegistry. Upserts by name+team \u2014 if a skill with the same name and team exists, it is updated. Pass vrBody to write the full SKILL.md body (vrContent/vrContentHash/vrContentVersion) in the SAME call \u2014 no separate upsert_skill_content needed (that tool remains for back-compat). Omit vrBody for metadata-only upsert.",
   {
     name: z.string().describe("Skill name \u2014 e.g. 'social-post', 'competitor-watch'"),
     team: z.string().describe("Team this skill belongs to"),
@@ -222,7 +222,10 @@ server.tool(
     price: z.number().optional().describe("Price in EUR (if paid)"),
     license: z.string().optional().describe("License \u2014 e.g. 'MIT', 'proprietary'"),
     publisherId: z.string().optional().describe("Publisher identifier"),
-    categories: z.array(z.string()).optional().describe("Categories beyond team name")
+    categories: z.array(z.string()).optional().describe("Categories beyond team name"),
+    vrBody: z.string().optional().describe(
+      "Full SKILL.md body. When passed, writes vrContent/vrContentHash/vrContentVersion in the same call. Omitted \u2192 metadata-only (unchanged)."
+    )
   },
   async (args) => {
     const id = await convex.mutation(api.skills.upsert, args);
@@ -666,7 +669,10 @@ server.tool(
     filePath: z.string().describe("File path relative to project root"),
     registered: z.boolean().describe("Whether this hook is registered in settings.json"),
     status: hookStatusSchema,
-    version: z.string().optional().describe("Semantic version \u2014 e.g. '1.0.0'")
+    version: z.string().optional().describe("Semantic version \u2014 e.g. '1.0.0'"),
+    tests: z.array(z.string()).optional().describe(
+      "Hook test file paths \u2014 e.g. ['hooks/tests/check-pii.test.py']. Omitted \u2192 not sent (back-compat)."
+    )
   },
   async (args) => {
     const id = await convex.mutation(api.hooks.upsert, args);
@@ -770,13 +776,20 @@ server.tool(
 );
 server.tool(
   "upsert_template",
-  "Create or update a template in VantageRegistry. Upserts by name.",
+  "Create or update a template in VantageRegistry. Upserts by name. contentHash is auto-computed server-side (sha256 of content) when omitted.",
   {
     name: z.string().describe("Template name \u2014 e.g. 'agent-brief', 'skill-md'"),
     team: z.string().optional().describe("Team this template belongs to \u2014 defaults to 'global'"),
     purpose: z.string().describe("What this template is used for"),
     content: z.string().describe("Full template content"),
-    version: z.string().optional().describe("Semantic version \u2014 e.g. '1.0.0'")
+    version: z.string().optional().describe("Semantic version \u2014 e.g. '1.0.0'"),
+    template_type: templateTypeSchema.optional().describe(
+      "Template type: standard, mission, brief, runbook, document, or checklist"
+    ),
+    category: z.string().optional().describe("Category \u2014 e.g. 'standards/fleet-shared'"),
+    contentHash: z.string().optional().describe("sha256 of content \u2014 auto-computed server-side when omitted"),
+    sourceCommit: z.string().optional().describe("Git commit SHA the template content was sourced from"),
+    sourceRepo: z.string().optional().describe("Git repo the template content was sourced from")
   },
   async (args) => {
     const id = await convex.mutation(api.templates.upsert, args);
@@ -820,6 +833,36 @@ server.tool(
     };
   }
 );
+server.tool(
+  "detect_template_drift",
+  "Return the VR-side sha256 contentHash + provenance (sourceCommit, sourceRepo) for each template in scope. IMPORTANT: Convex queries have no filesystem access. This tool returns the VR canonical contentHash so the caller can read the source file, compute its SHA256, and compare. name=<slug> filters to a single template; omit name to return every template.",
+  {
+    name: z.string().optional().describe("Template slug \u2014 filter to a single template")
+  },
+  async ({ name }) => {
+    const result = await convex.query(api.templates.detectTemplateDrift, {
+      name
+    });
+    return {
+      content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+    };
+  }
+);
+server.tool(
+  "list_templates_by_category",
+  "List templates for a specific category using the byCategory index.",
+  {
+    category: z.string().describe("Category to filter by \u2014 e.g. 'standards/fleet-shared'")
+  },
+  async ({ category }) => {
+    const result = await convex.query(api.templates.listTemplatesByCategory, {
+      category
+    });
+    return {
+      content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+    };
+  }
+);
 server.tool(
   "upsert_test_run",
   "Insert a skill quality test run and update denormalized quality fields on the parent skill (lastTestedAt, lastReviewerScore, lastEvalDelta, testStatus). reviewerScore format is 'X/Y' e.g. '37/45'. evalDelta is pp delta vs without-skill baseline.",
@@ -1224,6 +1267,21 @@ server.tool(
     }
   }
 );
+server.tool(
+  "detect_runbook_drift",
+  "Return the VR-side sha256 hash (vrHash) plus category and version for each runbook in scope. IMPORTANT: Convex queries have no filesystem access. This tool computes sha256(runbook.content) server-side and returns it as vrHash so the caller can compute disk SHA256 and compare. name=<slug> filters to a single runbook; omit name to return every runbook (bounded to 500).",
+  {
+    name: z.string().optional().describe("Runbook slug \u2014 filter to a single runbook")
+  },
+  async ({ name }) => {
+    const result = await convex.query(api.runbooks.detectRunbookDrift, {
+      name
+    });
+    return {
+      content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+    };
+  }
+);
 server.tool(
   "link_runbook_template",
   "Create or update a typed link between a runbook and a template in the runbook_template_links junction table. Upserts by (runbookId, templateId) pair \u2014 at-most-one link per pair. linkType controls the relationship semantics: 'uses' = template consumed during execution, 'produces' = output document generated by this runbook, 'references' = informational cross-reference. Returns {linkId, created: true} on insert or {linkId, created: false} on update.",
@@ -1400,7 +1458,16 @@ server.tool(
     }
   }
 );
-var componentKindSchema = z.enum(["skill", "agent", "hook", "plugin", "prompt", "runbook", "template"]).describe("Component kind");
+var componentKindSchema = z.enum([
+  "skill",
+  "agent",
+  "hook",
+  "plugin",
+  "prompt",
+  "runbook",
+  "template",
+  "ui-component"
+]).describe("Component kind");
 var componentStatusSchema = z.enum(["active", "deprecated", "experimental"]).describe("Component status");
 server.tool(
   "register_component",

package/server.ts

@@ -10,8 +10,8 @@
  *   upsert_plugin, list_plugins, get_plugin
  *   upsert_hook, list_hooks, get_hook
  *   upsert_prompt, list_prompts, get_prompt
- *   upsert_template, list_templates, get_template
- *   upsert_runbook, get_runbook, list_runbooks, list_runbooks_by_category, list_runbooks_by_team, delete_runbook
+ *   upsert_template, list_templates, get_template, detect_template_drift, list_templates_by_category
+ *   upsert_runbook, get_runbook, list_runbooks, list_runbooks_by_category, list_runbooks_by_team, delete_runbook, detect_runbook_drift
  *   link_runbook_template, unlink_runbook_template, list_templates_for_runbook, list_runbooks_for_template
  *   register_component, list_components, get_component, search_components, update_component, delete_component
  *   get_stats
@@ -112,7 +112,7 @@ const runbookStatusSchema = z
 	.describe("Runbook status");
 
 const templateTypeSchema = z
-	.enum(["mission", "document", "checklist"])
+	.enum(["standard", "mission", "brief", "runbook", "document", "checklist"])
 	.describe("Template type");
 
 const linkTypeSchema = z
@@ -130,7 +130,7 @@ const convex = new ConvexHttpClient(convexUrl);
 
 const server = new McpServer({
 	name: "vantage-registry",
-	version: "1.4.0",
+	version: "1.5.0",
 });
 
 // ═══════════════════════════════════════════════════════════════════════════════
@@ -317,7 +317,8 @@ server.tool(
 
 server.tool(
 	"upsert_skill",
-	"Create or update a skill in VantageRegistry. Upserts by name+team — if a skill with the same name and team exists, it is updated.",
+	"Create or update a skill in VantageRegistry. Upserts by name+team — if a skill with the same name and team exists, it is updated. " +
+		"Pass vrBody to write the full SKILL.md body (vrContent/vrContentHash/vrContentVersion) in the SAME call — no separate upsert_skill_content needed (that tool remains for back-compat). Omit vrBody for metadata-only upsert.",
 	{
 		name: z
 			.string()
@@ -344,6 +345,12 @@ server.tool(
 			.array(z.string())
 			.optional()
 			.describe("Categories beyond team name"),
+		vrBody: z
+			.string()
+			.optional()
+			.describe(
+				"Full SKILL.md body. When passed, writes vrContent/vrContentHash/vrContentVersion in the same call. Omitted → metadata-only (unchanged).",
+			),
 	},
 	async (args) => {
 		const id = await convex.mutation(api.skills.upsert, args);
@@ -985,6 +992,12 @@ server.tool(
 			.describe("Whether this hook is registered in settings.json"),
 		status: hookStatusSchema,
 		version: z.string().optional().describe("Semantic version — e.g. '1.0.0'"),
+		tests: z
+			.array(z.string())
+			.optional()
+			.describe(
+				"Hook test file paths — e.g. ['hooks/tests/check-pii.test.py']. Omitted → not sent (back-compat).",
+			),
 	},
 	async (args) => {
 		const id = await convex.mutation(api.hooks.upsert, args);
@@ -1115,7 +1128,8 @@ server.tool(
 
 server.tool(
 	"upsert_template",
-	"Create or update a template in VantageRegistry. Upserts by name.",
+	"Create or update a template in VantageRegistry. Upserts by name. " +
+		"contentHash is auto-computed server-side (sha256 of content) when omitted.",
 	{
 		name: z.string().describe("Template name — e.g. 'agent-brief', 'skill-md'"),
 		team: z
@@ -1125,6 +1139,27 @@ server.tool(
 		purpose: z.string().describe("What this template is used for"),
 		content: z.string().describe("Full template content"),
 		version: z.string().optional().describe("Semantic version — e.g. '1.0.0'"),
+		template_type: templateTypeSchema
+			.optional()
+			.describe(
+				"Template type: standard, mission, brief, runbook, document, or checklist",
+			),
+		category: z
+			.string()
+			.optional()
+			.describe("Category — e.g. 'standards/fleet-shared'"),
+		contentHash: z
+			.string()
+			.optional()
+			.describe("sha256 of content — auto-computed server-side when omitted"),
+		sourceCommit: z
+			.string()
+			.optional()
+			.describe("Git commit SHA the template content was sourced from"),
+		sourceRepo: z
+			.string()
+			.optional()
+			.describe("Git repo the template content was sourced from"),
 	},
 	async (args) => {
 		const id = await convex.mutation(api.templates.upsert, args);
@@ -1173,6 +1208,47 @@ server.tool(
 	},
 );
 
+server.tool(
+	"detect_template_drift",
+	"Return the VR-side sha256 contentHash + provenance (sourceCommit, sourceRepo) " +
+		"for each template in scope. IMPORTANT: Convex queries have no filesystem access. " +
+		"This tool returns the VR canonical contentHash so the caller can read the source " +
+		"file, compute its SHA256, and compare. name=<slug> filters to a single template; " +
+		"omit name to return every template.",
+	{
+		name: z
+			.string()
+			.optional()
+			.describe("Template slug — filter to a single template"),
+	},
+	async ({ name }) => {
+		const result = await convex.query(api.templates.detectTemplateDrift, {
+			name,
+		});
+		return {
+			content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+		};
+	},
+);
+
+server.tool(
+	"list_templates_by_category",
+	"List templates for a specific category using the byCategory index.",
+	{
+		category: z
+			.string()
+			.describe("Category to filter by — e.g. 'standards/fleet-shared'"),
+	},
+	async ({ category }) => {
+		const result = await convex.query(api.templates.listTemplatesByCategory, {
+			category,
+		});
+		return {
+			content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+		};
+	},
+);
+
 // ═══════════════════════════════════════════════════════════════════════════════
 // SKILL TEST RUNS
 // ═══════════════════════════════════════════════════════════════════════════════
@@ -1729,6 +1805,28 @@ server.tool(
 	},
 );
 
+server.tool(
+	"detect_runbook_drift",
+	"Return the VR-side sha256 hash (vrHash) plus category and version for each runbook in scope. " +
+		"IMPORTANT: Convex queries have no filesystem access. This tool computes sha256(runbook.content) " +
+		"server-side and returns it as vrHash so the caller can compute disk SHA256 and compare. " +
+		"name=<slug> filters to a single runbook; omit name to return every runbook (bounded to 500).",
+	{
+		name: z
+			.string()
+			.optional()
+			.describe("Runbook slug — filter to a single runbook"),
+	},
+	async ({ name }) => {
+		const result = await convex.query(api.runbooks.detectRunbookDrift, {
+			name,
+		});
+		return {
+			content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+		};
+	},
+);
+
 // ═══════════════════════════════════════════════════════════════════════════════
 // RUNBOOK ↔ TEMPLATE LINKS (Sprint B T4 — junction table typed links)
 // ═══════════════════════════════════════════════════════════════════════════════
@@ -1946,7 +2044,16 @@ server.tool(
 // ═══════════════════════════════════════════════════════════════════════════════
 
 const componentKindSchema = z
-	.enum(["skill", "agent", "hook", "plugin", "prompt", "runbook", "template"])
+	.enum([
+		"skill",
+		"agent",
+		"hook",
+		"plugin",
+		"prompt",
+		"runbook",
+		"template",
+		"ui-component",
+	])
 	.describe("Component kind");
 
 const componentStatusSchema = z