codecartographer-pi 0.17.0 → 0.17.1

package/dist/mcp-server/server.js

@@ -17,7 +17,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, McpError, } from "@modelcontextprotocol/sdk/types.js";
 import { mkdir, readFile, readdir, rename, writeFile } from "node:fs/promises";
 import { basename, isAbsolute, join } from "node:path";
-import { buildPhasePrompt, buildSkillPrompt, buildValidationSummary, BROADSIDE_DIR, broadsideDirFor, BROADSIDE_LENS_IDS, BROADSIDE_SKILL_NAME, canonicalPath, copyPackagedWorkspace, collectResultText, completeValidatedPhase, computePerPhaseTotals, computeTotals, createEmptyStatus, DEFAULT_PIPELINE_PATH, deriveSlug, discoverLibrary, describeScaffoldStaleness, estimateSubmitText, getLens, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isValidSlug, isWithinPathResolved, listBatchModels, listEntries, listGuideTopics, loadBroadsideConfig, modelsText, readGuide, listSkillNames, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, PACKAGE_VERSION, packagedWorkspaceDir, pathExists, PhasePreflightError, publishEntry, reindex as libraryReindex, refreshScaffold, resolvePhase, resolvePipelineChoice, readBroadsideSkill, runBroadsideCollect, runBroadsideStatus, runBroadsideSubmit, seedOrchestratorFiles, statusText, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../core/index.js";
+import { buildPhasePrompt, buildSkillPrompt, buildValidationSummary, BROADSIDE_DIR, broadsideDirFor, BROADSIDE_LENS_IDS, BROADSIDE_SKILL_NAME, canonicalPath, copyPackagedWorkspace, collectResultText, completeValidatedPhase, computePerPhaseTotals, computeTotals, createEmptyStatus, DEFAULT_PIPELINE_PATH, deriveSlug, discoverLibrary, describeScaffoldStaleness, detectProvenanceConflicts, estimateSubmitText, getLens, getNextEligiblePhase, getPipelineLabel, getWorkspaceState, isValidSlug, isWithinPathResolved, listBatchModels, listEntries, listGuideTopics, loadBroadsideConfig, modelsText, readGuide, listSkillNames, loadCodecartoConfig, loadUsage, loadYamlFile, normalizeForComparison, PACKAGE_VERSION, packagedWorkspaceDir, pathExists, PhasePreflightError, publishEntry, reindex as libraryReindex, refreshScaffold, resolvePhase, resolvePipelineChoice, readBroadsideSkill, runBroadsideCollect, runBroadsideStatus, runBroadsideSubmit, seedOrchestratorFiles, statusText, stringifySimpleYaml, switchPipeline, validatePhaseOutput, writeLibraryConfig, } from "../core/index.js";
 import { applyAmendment } from "../core/amendment.js";
 import { appendUsageRun } from "../core/usage.js";
 import { initLibrary } from "../core/library.js";
@@ -262,7 +262,7 @@ export async function handleComplete(args) {
     if (validation.overall === "FAIL" || validation.overall === "MISSING") {
         throw new McpError(ErrorCode.InvalidRequest, `Cannot complete ${validation.phaseId}: validation is ${validation.overall}.\n${buildValidationSummary(validation).join("\n")}`);
     }
-    const { updatedState, closeoutNotice, orchestratorCheckpoint } = await completeValidatedPhase(cwd, validation, "codecarto_complete").catch((error) => {
+    const { updatedState, closeoutNotice, orchestratorCheckpoint, warnings } = await completeValidatedPhase(cwd, validation, "codecarto_complete").catch((error) => {
         throw new McpError(ErrorCode.InvalidParams, error instanceof Error ? error.message : String(error));
     });
     // Record the run in the usage log (issue #100). MCP hosts execute phases in
@@ -303,6 +303,10 @@ export async function handleComplete(args) {
         lines.push(orchestratorCheckpoint);
     if (dashboardPath)
         lines.push(`Dashboard refreshed: ${dashboardPath}`);
+    for (const warning of validation.warnings ?? [])
+        lines.push(`NOTE: ${warning} Non-gating.`);
+    for (const warning of warnings)
+        lines.push(`NOTE: ${warning} Non-gating.`);
     return textResult(lines.join("\n"), {
         completedPhase: validation.phaseId,
         validation: validation.overall,
@@ -310,6 +314,7 @@ export async function handleComplete(args) {
         closeoutNotice,
         orchestratorCheckpoint,
         dashboardPath,
+        warnings: [...(validation.warnings ?? []), ...warnings],
     });
 }
 export async function handleSkill(args) {
@@ -472,6 +477,33 @@ async function resolveDefaultsFromWorkspace(cwd, overrides) {
     }
     return { pipeline, namespace };
 }
+// ---------- library provenance reporting ----------
+function conflictEntryLabel(conflict) {
+    return conflict.namespace ? `${conflict.namespace}/${conflict.slug}` : conflict.slug;
+}
+/**
+ * The report block appended to the list and reindex text results when an
+ * entry's versions disagree about source_repo (#148). Empty when there is
+ * nothing to report, so a healthy library's output does not change. Repair
+ * is manual by design: the framework does not rename or renumber versions,
+ * because entry paths are ABI.
+ */
+function provenanceConflictLines(conflicts) {
+    if (conflicts.length === 0)
+        return [];
+    const lines = [
+        "",
+        `Provenance conflicts — ${conflicts.length} ${conflicts.length === 1 ? "entry" : "entries"} whose versions disagree about source_repo:`,
+    ];
+    for (const conflict of conflicts) {
+        const others = conflict.disagreeing_versions
+            .map((v) => `v${v.version} records ${v.source_repo}`)
+            .join("; ");
+        lines.push(`  ${conflictEntryLabel(conflict)}: the index advertises ${conflict.source_repo} (v${conflict.latest_version}), but ${others}.`);
+    }
+    lines.push("These entries were merged by a slug collision before publish refused cross-project appends, so each version history spans more than one codebase (a repository that genuinely moved and was re-published with allow_source_repo_change leaves the same shape).", "Repair is manual: split the entry by hand — the framework does not rename or renumber versions, because entry paths are ABI.");
+    return lines;
+}
 // ---------- library handlers ----------
 export async function handlePublish(args) {
     const libraryPath = await resolveLibraryPath(args);
@@ -536,6 +568,7 @@ export async function handlePublish(args) {
     }, {
         forceNewVersion: args.force_new_version === true,
         allowSourceRepoChange: args.allow_source_repo_change === true,
+        allowConfidentialityMismatch: args.allow_confidentiality_mismatch === true,
     });
     const lines = [
         `Published ${result.namespace ? `${result.namespace}/` : ""}${result.slug} v${result.version} to ${libraryPath}`,
@@ -567,6 +600,10 @@ export async function handleLibraryList(args) {
     if (typeof args.source_repo === "string" && args.source_repo !== "")
         filter.source_repo = args.source_repo;
     const entries = await listEntries(libraryPath, filter);
+    // Computed over the listed entries only, read-only: one readdir per entry
+    // plus one small metadata read per older version.
+    const conflicts = await detectProvenanceConflicts(libraryPath, entries);
+    const conflicted = new Set(conflicts.map((c) => `${c.namespace ?? ""}/${c.slug}`));
     const summary = entries.length === 0
         ? `No entries match the filter in ${libraryPath}.`
         : [
@@ -574,8 +611,10 @@ export async function handleLibraryList(args) {
             ...entries.map((e) => {
                 const ns = e.namespace ? `${e.namespace}/` : "";
                 const tags = e.tags.length > 0 ? ` [${e.tags.slice(0, 4).join(", ")}${e.tags.length > 4 ? ", ..." : ""}]` : "";
-                return `  ${ns}${e.slug} v${e.latest_version} — ${e.headline}${tags}`;
+                const flag = conflicted.has(`${e.namespace ?? ""}/${e.slug}`) ? " — PROVENANCE CONFLICT (see below)" : "";
+                return `  ${ns}${e.slug} v${e.latest_version} — ${e.headline}${tags}${flag}`;
             }),
+            ...provenanceConflictLines(conflicts),
         ].join("\n");
     return textResult(summary, {
         libraryPath,
@@ -583,6 +622,7 @@ export async function handleLibraryList(args) {
         namespaced: marker.namespaced,
         count: entries.length,
         entries,
+        provenance_conflicts: conflicts,
     });
 }
 export async function handleLibraryReindex(args) {
@@ -593,17 +633,27 @@ export async function handleLibraryReindex(args) {
     }
     const index = await libraryReindex(libraryPath);
     const namespaces = index.namespaces.length > 0 ? index.namespaces.join(", ") : "(none)";
-    return textResult(`Reindexed ${libraryPath}: ${index.entry_count} ${index.entry_count === 1 ? "entry" : "entries"} across namespaces [${namespaces}].`, {
+    return textResult([
+        `Reindexed ${libraryPath}: ${index.entry_count} ${index.entry_count === 1 ? "entry" : "entries"} across namespaces [${namespaces}].`,
+        ...provenanceConflictLines(index.provenance_conflicts),
+    ].join("\n"), {
         libraryPath,
         libraryName: index.library_name,
         entry_count: index.entry_count,
         namespaces: index.namespaces,
+        provenance_conflicts: index.provenance_conflicts,
     });
 }
 export async function handleLibraryInit(args) {
     if (!args.library_path || typeof args.library_path !== "string") {
         throw new McpError(ErrorCode.InvalidParams, "library_path is required.");
     }
+    // Same rule as resolveLibraryPath for the other library tools: a relative
+    // path would resolve against the MCP server process's cwd and then be
+    // persisted verbatim into the user-global config (#134).
+    if (!isAbsolute(args.library_path)) {
+        throw new McpError(ErrorCode.InvalidParams, `library_path must be absolute, got: ${args.library_path}`);
+    }
     const libraryPath = args.library_path;
     const namespaced = !!args.namespace;
     const result = await initLibrary(libraryPath, {
@@ -1029,7 +1079,11 @@ const TOOLS = [
                 headline: { type: "string" },
                 tags: { type: "array", items: { type: "string" } },
                 capabilities: { type: "array", items: { type: "string" } },
-                confidentiality: { type: "string", enum: ["internal", "shared", "public"] },
+                confidentiality: {
+                    type: "string",
+                    enum: ["internal", "shared", "public"],
+                    description: "Classification of the entry. Defaults to internal. Ordered internal < shared < public; publish refuses an entry more restricted than the library's visibility unless allow_confidentiality_mismatch is set.",
+                },
                 model_metadata: {
                     type: "object",
                     properties: {
@@ -1046,13 +1100,17 @@ const TOOLS = [
                     type: "boolean",
                     description: "Permit publishing when the target entry already records a different source_repo. Off by default, because a mismatch usually means two projects derived the same slug and the spec would land in the wrong version history. Set only when the repository itself moved.",
                 },
+                allow_confidentiality_mismatch: {
+                    type: "boolean",
+                    description: "Permit publishing when the entry's confidentiality is more restricted than the library's visibility (internal < shared < public: an internal entry into a shared or public library, a shared entry into a public one). Off by default, because that direction exposes the spec to everyone the library reaches. An omitted confidentiality counts as internal. Set only when the exposure is intended; the recorded confidentiality is not changed.",
+                },
             },
             required: ["source_repo", "headline"],
         },
     },
     {
         name: "codecarto_library_list",
-        description: "List entries in a CodeCartographer library, optionally filtered by namespace, tag, slug, or source_repo. The library is identified by library_path (absolute) or by cwd's config.yaml.",
+        description: "List entries in a CodeCartographer library, optionally filtered by namespace, tag, slug, or source_repo. The library is identified by library_path (absolute) or by cwd's config.yaml. Flags entries whose versions disagree about source_repo (merged by a slug collision before publish refused cross-project appends); repair is manual.",
         inputSchema: {
             type: "object",
             properties: {
@@ -1067,7 +1125,7 @@ const TOOLS = [
     },
     {
         name: "codecarto_library_reindex",
-        description: "Regenerate index.yaml and INDEX.md for a CodeCartographer library from filesystem state. Use after manual edits or to resolve a git merge conflict on index.yaml.",
+        description: "Regenerate index.yaml and INDEX.md for a CodeCartographer library from filesystem state. Use after manual edits or to resolve a git merge conflict on index.yaml. Also reports entries whose versions disagree about source_repo (merged by a slug collision before publish refused cross-project appends); the index files are not changed and repair is manual.",
         inputSchema: {
             type: "object",
             properties: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codecartographer-pi",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "mcpName": "io.github.HuginnIndustries/codecartographer",
   "description": "Turn an unfamiliar codebase into a validated reimplementation spec, then synthesize confirmed specs and a product vision into a traceable plan.",
   "type": "module",
@@ -64,7 +64,7 @@
     "@modelcontextprotocol/sdk": "^1.29.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.80.10",
+    "@earendil-works/pi-coding-agent": ">=0.84.0",
     "@sinclair/typebox": "*"
   },
   "pi": {