drafted 1.17.18 → 1.18.1

package/README.md

@@ -1,44 +1,32 @@
 # Drafted
 
-Multi-tenant shared surface for AI-human collaboration. Drafted organizes agent-produced work into **projects** (frames on a zoomable real-time surface), **skills** (reusable operating procedures agents load), and a **wiki** (durable org knowledge) — with MCP tools for agents and a browser UI for humans.
-
-- Product vision and positioning: [PRODUCT.md](PRODUCT.md)
-- Architecture, development, and operations: [AGENTS.md](AGENTS.md)
-- Live: [drafted.live](https://drafted.live)
-
-## OKF-native
-
-Drafted is a native producer and consumer of the **Open Knowledge Format (OKF) v0.1** ([GoogleCloudPlatform/knowledge-catalog](https://github.com/GoogleCloudPlatform/knowledge-catalog)):
-
-- **The org wiki is an OKF v0.1 bundle.** Every page carries conformant YAML frontmatter (required `type`, one-line `description`, `tags`, synthesized `timestamp`; unknown keys preserved). `index.md` at every level is synthesized, `log.md` keeps the date-grouped change history, links resolve with or without `.md`, and broken links are legal. The wiki UI shows a live OKF conformance badge.
-- **Bundle exchange everywhere.** Export/import the wiki (`GET /api/wiki/export.tar.gz`, `POST /api/wiki/import`), the skill library (`skills/<slug>/SKILL.md` layout), and whole projects (`<layer>/<lane>/<file>.md` concepts; markdown links round-trip as connectors) — via HTTP or the MCP `wiki`, `skill`, and `project` tools, with dry-run reports.
+Shared surface for AI-human collaboration. MCP server and CLI for organizing agent work into projects, skills, and durable knowledge.
 
 ## Install
 
-**Claude Code, Codex, or any MCP client** — installs the MCP server, the Drafted skill, *and* the eight slash commands (into `~/.claude/commands/drafted/` and `~/.codex/prompts/drafted/`):
-
 ```bash
-curl -fsSL https://drafted.live/install.sh | bash        # macOS / Linux
-irm https://drafted.live/install.ps1 | iex               # Windows
+npm install -g drafted
 ```
 
-> Adding the MCP server on its own (e.g. `claude mcp add`) gives you the tools without the skill or the commands.
+## Usage
+
+### As an MCP server (for Claude Desktop, Claude Code, Codex, Cursor)
 
-**Claude on the web (claude.ai) and Cowork** — install the plugin, not the bare connector. The plugin bundles the Drafted connector *plus* the Drafted skill and the eight slash commands (`/drafted:onboard-drafted`, `/drafted:create-project`, `/drafted:create-skill`, `/drafted:ingest`, `/drafted:extract`, `/drafted:improve-wiki`, `/drafted:improve-skill`, `/drafted:improve-project-harness`); adding the connector URL on its own gives you the tools with none of the guidance.
+The MCP server is automatically available after install:
 
-> 1. Settings → Customize plugins → Add → Add marketplace → `https://github.com/ddfourtwo/drafted-web` → install **Drafted**.
-> 2. Settings → Connectors → find **Drafted** → **Connect**, then approve the sign-in.
->
-> Both halves matter: the plugin carries the skill and commands, the connector carries the tools. Installing the plugin does not sign you in to the connector.
+```bash
+drafted-mcp
+```
 
-## Quick start (developing Drafted itself)
+### As a CLI
 
 ```bash
-npm install && npm run dev   # Docker services + schema + server with hot reload
+drafted login
+drafted ls
+drafted write designs/default/hero.html < design.html
 ```
 
-- App: http://localhost:3477
-- Email inbox (magic links): http://localhost:8025
-- MinIO console: http://localhost:9001
+## Links
 
-Sign in with any email and grab the magic link from Mailpit.
+- **App**: https://drafted.live
+- **Docs**: https://drafted.live

package/cli/drafted.mjs

@@ -1679,7 +1679,7 @@ function emitSkillResult(format, obj) {
 
 skillCmd
   .command('add')
-  .description('Create a skill in Drafted from stdin JSON {name,description,content,tags?,triggerPatterns?}')
+  .description('Create a skill in Drafted from stdin JSON {name,description,content,readme,tags?,triggerPatterns?} — a README.md (readme field) is required (Phase 1 gate)')
   .option('--format <fmt>', 'output format: json or text', 'text')
   .action(async (opts) => {
     requireLogin();
@@ -1688,7 +1688,7 @@ skillCmd
     const server = getServerUrl().replace(/\/$/, '');
     const res = await authFetch(`${server}/api/skills`, {
       method: 'POST', headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ name: p.name, description: p.description, content: p.content, tags: p.tags, triggerPatterns: p.triggerPatterns, setup: p.setup }),
+      body: JSON.stringify({ name: p.name, description: p.description, content: p.content, tags: p.tags, triggerPatterns: p.triggerPatterns, setup: p.setup, readme: p.readme }),
     });
     const data = await res.json().catch(() => ({}));
     if (!res.ok) {
@@ -2125,10 +2125,11 @@ const repoCmd = program.command('repo').description('Registered git repos (org i
 
 repoCmd
   .command('add <url>')
-  .description('Link a GitHub repo to an org FOLDER — the server fetches it and indexes .agents/ skills/identities (repos are folder-scoped, never org-level)')
+  .description('Link a GitHub repo to an org FOLDER — the server fetches it and indexes .agents/ skills/identities (repos are folder-scoped, never org-level). --branch points at a named branch (fails loudly if missing instead of guessing).')
   .option('--org <org>', 'resolve against this Drafted org (id or name); scopes per-request without switching the session')
   .option('--folder <name>', 'folder to link the repo into (required)')
   .option('--slug <slug>', 'repo slug (defaults to the repo name from the URL)')
+  .option('--branch <name>', 'git branch to track (default: the repo default; fails loudly if the branch is missing)')
   .option('--description <desc>', 'short description')
   .option('--format <fmt>', 'output format: json or text', 'text')
   .action(async (url, opts) => {
@@ -2146,7 +2147,7 @@ repoCmd
     const folder = folders.find((f) => f.name === folderName);
     if (!folder) return fail(`no folder named "${folderName}" in this org`);
     // The server fetches + scans; the CLI only resolves the association.
-    const payload = { gitUrl: url, folderId: folder.id, slug: opts.slug, description: opts.description };
+    const payload = { gitUrl: url, folderId: folder.id, slug: opts.slug, description: opts.description, branch: opts.branch };
     const res = await authFetch(`${server}/api/repos`, {
       method: 'POST',
       headers: { 'Content-Type': 'application/json', ...orgHeaders },
@@ -2158,7 +2159,7 @@ repoCmd
     if (opts.format === 'json') {
       console.log(JSON.stringify({ ok: true, command: 'repo:add', data: { ...data, created } }));
     } else {
-      console.log([created ? 'added' : 'updated', data.slug || '', data.gitUrl || url, folderName, `skills:${data.skills ?? 0}`, `identities:${data.identities ?? 0}`].join('\t'));
+      console.log([created ? 'added' : 'updated', data.slug || '', data.gitUrl || url, folderName, `branch:${data.branch || '-'}`, `skills:${data.skills ?? 0}`, `identities:${data.identities ?? 0}`].join('\t'));
     }
   });
 repoCmd
@@ -2170,7 +2171,34 @@ repoCmd
     const data = await readApiGet('repo:list', '/api/repos', opts.org);
     const rows = data.repos || [];
     if (opts.format === 'json') { console.log(JSON.stringify(rows)); return; }
-    for (const r of rows) console.log([r.slug, r.folderName || '-', r.gitUrl, `skills:${r.skillCount ?? 0}`, `identities:${r.identityCount ?? 0}`].join('\t'));
+    for (const r of rows) console.log([r.slug, r.folderName || '-', r.gitUrl, `branch:${r.branch || '-'}`, `skills:${r.skillCount ?? 0}`, `identities:${r.identityCount ?? 0}`].join('\t'));
+  });
+
+repoCmd
+  .command('rescan <slugOrId>')
+  .description('Re-fetch the tracked branch and refresh a repo\'s .agents/ index (idempotent; reports staleness via lastScannedAt/Sha)')
+  .option('--org <org>', 'resolve against this Drafted org (id or name); scopes per-request without switching the session')
+  .option('--format <fmt>', 'output format: json or text', 'text')
+  .action(async (slugOrId, opts) => {
+    requireLogin();
+    const orgHeaders = opts.org ? { 'X-Drafted-Org': opts.org } : {};
+    const server = getServerUrl().replace(/\/$/, '');
+    // Resolve slug -> id via the list (same pattern as remove).
+    const isUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(slugOrId);
+    let id = isUuid ? slugOrId : null;
+    if (!id) {
+      const lookup = await authFetch(`${server}/api/repos`, { headers: orgHeaders });
+      const lj = await lookup.json().catch(() => ({}));
+      if (!lookup.ok) { const m = lj.error || `HTTP ${lookup.status}`; if (opts.format === 'json') console.log(JSON.stringify({ ok: false, command: 'repo:rescan', error: m })); else console.log(['error', m].join('\t')); process.exit(1); }
+      const found = (lj.repos || []).find((r) => r.slug === slugOrId);
+      if (!found) { const m = `no repo with slug "${slugOrId}"`; if (opts.format === 'json') console.log(JSON.stringify({ ok: false, command: 'repo:rescan', error: m })); else console.log(['error', m].join('\t')); process.exit(1); }
+      id = found.id;
+    }
+    const res = await authFetch(`${server}/api/repos/${encodeURIComponent(id)}/rescan`, { method: 'POST', headers: orgHeaders });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) { const m = data.error || `HTTP ${res.status}`; if (opts.format === 'json') console.log(JSON.stringify({ ok: false, command: 'repo:rescan', error: m })); else console.log(['error', m].join('\t')); process.exit(1); }
+    if (opts.format === 'json') console.log(JSON.stringify({ ok: true, command: 'repo:rescan', data }));
+    else console.log(['rescaned', data.slug || '', data.branch || '-', `skills:${data.skills ?? 0}`, `identities:${data.identities ?? 0}`].join('\t'));
   });
 
 repoCmd

package/mcp/server.mjs

@@ -18,7 +18,7 @@ import { AsyncLocalStorage } from 'node:async_hooks';
 import { z } from 'zod';
 import { registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
 import WebSocket from 'ws';
-import { LAYERS } from '../src/shared/constants.mjs';
+import { LAYERS } from '../shared/constants.mjs';
 import { emptyExcalidrawScene, stringifyExcalidrawScene } from '../src/shared/excalidraw.mjs';
 import { formatOkfLogEntry, appendOkfLogEntry } from '../src/shared/okf-log.mjs';
 import { createGateState, markSearched, g1Block, g2Block, g3Block, selectWithinBudget, wouldExceedBudget, budgetError, formatWikiIndex, PROJECT_CONTEXT_BUDGET_CHARS } from './gates.mjs';
@@ -350,6 +350,7 @@ const TOOL_ANNOTATIONS = {
   minion:              { title: 'Minions',             readOnlyHint: false, destructiveHint: true,  openWorldHint: false, description: 'Manage Minions: checklist-driven intake surfaces that guide a consumer through a checklist (via a shareable /c/<slug> link) and write a producible into the project. Dispatch by `action`: meta, list, get, create, update, enable, disable, delete. QA your own Minions with test_start/test_say/test_resolve — drive the checklist conversation yourself (works even when disabled). Requires the agent allowlist.' },
   trigger:             { title: 'Inbound triggers',    readOnlyHint: false, destructiveHint: true,  openWorldHint: true,  description: 'Manage inbound webhook triggers for the ACTIVE PROJECT: an external system (AppSheet bot, GitHub, form tool) POSTs to the trigger URL and the server runs an agent conversation in the project from the stored prompt template + payload. Dispatch by `action`: create (returns URL + secret token ONCE — relay it to the user immediately, not retrievable later), list, update (enable/disable, edit template, daily limit, executor), rotate (new token), test (fire a synthetic delivery), deliveries (audit log), delete; for executor="queue" triggers, pending/claim/complete let a LOCAL agent poll and work queued deliveries. Requires the agent allowlist.' },
   fs:                  { title: 'Filesystem',           readOnlyHint: false, destructiveHint: true,  openWorldHint: false, description: 'Navigate Drafted like a local filesystem: /wiki/<path> pages, /skills/<slug> procedures, /projects/<folder?>/<project>/<layer>/<lane>/<file> frames. Verbs: ls, read, write, edit, mv, rm, search.' },
+  repo:                { title: 'Git repos',           readOnlyHint: false, destructiveHint: true,  openWorldHint: true,  description: 'Registered git repos — the org index of .agents/ skills + identities. A connected repo is the source of truth for its skills; EVERY repo connected to ANY folder in the org is searchable and usable org-wide (no org-level repo — the union is the library). Skills from connected repos are readable via fs(read, path="/skills/<slug>") — fetched from git at read time, always fresh. Authoring a Drafted skill whose slug collides with a repo-indexed skill returns 409 repo_owned pointing at the repo. Dispatch by `action`: list (paginated, compact mode), add (link a repo to a folder, --branch optional), rescan (re-fetch the tracked branch), entries (search the index). Content stays in git; Drafted keeps a read-only index.' },
 };
 
 function isMutatingToolCall(name, args = {}) {
@@ -2735,13 +2736,14 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
   ops: z.array(z.any()).optional().describe('[edit] hashline ops for text frames. Apply ONLY against a fresh fs(read) of the frame: each op = {type, lineHash, newContent} where type is one of replace | delete | insertAfter | insertBefore, and lineHash is the FULL anchor from the read output (line number + hash, e.g. the token left of the |, like 42srt) — NOT a bare hash. delete/replace consume the target line; at most one replace/delete per line per edit (combine into one replace). If an op targets a line that changed since read it is rejected — re-read and retry. Element ops for excalidraw ({id,x,y,...}), or structured ops for office'),
   state: z.any().optional().describe('[write] app-frame state (JSON) to persist for a deployed windowType:"app" frame; the canvas hydrates the app from it on load. Max 64KB.'),
   metadata: z.any().optional().describe('[write] JSON metadata to attach to the written frame (e.g. {"tour": {title, auto?, steps}} to define a guided tour on this frame). Max 64KB.'),
+  readme: z.string().optional().describe('[write] README.md markdown — required when authoring a NEW skill at /o/<org>/skills/<slug> (the Phase 1 README gate rejects a new skill without one). Stored as a supporting skill file so the skill directory is self-documenting.'),
   recursive: z.boolean().optional().describe('[ls] recurse into subdirectories'),
   lines: z.string().optional().describe('[read] line range (e.g. "1-50") — partial read; content is hashline-annotated so a later edit stays surgical'),
   pattern: z.string().optional().describe('[ls] filter filenames (e.g. "*.html")'),
   org: z.string().optional().describe('Org (id or name) for bare /wiki and /skills paths (org-scoped /o/<org>/... paths don\'t need it). Per-request only; project paths self-derive org from the project row.'),
   projectId: PROJECT_OVERRIDE_PARAM,
 }, async (args) => {
-  const { action, path: rawPath, to: rawTo, query, content, file_path, base64, googleType, title, ops, state, metadata, recursive, pattern, lines, org } = args;
+  const { action, path: rawPath, to: rawTo, query, content, file_path, base64, googleType, title, ops, state, metadata, readme, recursive, pattern, lines, org } = args;
   // Org-scoped path (Shape A): /o/<org>/<root>/... — strip the org segment here,
   // carry it as the per-request org scope (orgHeader), validate per-root below.
   // The PATH is the address; the org= param is legacy for bare roots only, and a
@@ -2925,8 +2927,15 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
       }
       case 'read': {
         if (!slug) return err(new Error('read /skills/<slug>'));
-        const s = await api('GET', `/api/skills/slug/${slug}`, undefined, orgHeader);
-        return ok(s?.content || '');
+        let s = null;
+        try { s = await api('GET', `/api/skills/slug/${slug}`, undefined, orgHeader); } catch { /* not in the skills table — fall through to the repo index */ }
+        if (s) return ok(s?.content || '');
+        // Phase 5 resolution: any repo connected to any folder in the org is
+        // readable org-wide. Content is fetched from git at read time (never
+        // stored) — always fresh from the tracked branch.
+        const gitSkill = await api('GET', `/api/repos/skill-content/${encodeURIComponent(slug)}`, undefined, orgHeader).catch(() => null);
+        if (gitSkill?.content != null) return ok(gitSkill.content);
+        return err(new Error(`skill not found: ${slug} — not in the Drafted library and not indexed from any connected repo (repo(action="entries", kind="skill") lists what is indexed)`));
       }
       case 'write': {
         if (!slug) return err(new Error('write /skills/<slug> requires a slug'));
@@ -2946,7 +2955,7 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
         const description = args.description || existing?.description || `Reusable procedure: ${name.toLowerCase()}`;
         const result = existing
           ? await api('PUT', `/api/skills/${existing.id}`, { content: text }, orgHeader)
-          : await api('POST', '/api/skills', { slug, name, content: text, description }, orgHeader);
+          : await api('POST', '/api/skills', { slug, name, content: text, description, ...(readme ? { readme } : {}) }, orgHeader);
         // Writing an archived skill restores it (update flow un-archives).
         if (result?.id && existing?.archived) {
           try { await api('POST', `/api/skills/${result.id}/restore`, undefined, orgHeader); } catch { /* best-effort */ }
@@ -3234,6 +3243,81 @@ tool('fs', 'Navigate Drafted like a local filesystem. An org is the top folder:
 
   return err(new Error(`unknown fs path: ${rawPath} — expected /o/<org>/wiki/..., /o/<org>/skills/..., or /o/<org>/projects/... (bare /wiki, /skills, /projects still work)`));
 });
+
+// ── repo tool: registered git repos (org substrate, Phase 4) ──────────
+// Agents reach the repos table through this tool. Content stays in git;
+// Drafted keeps a read-only index. `add`/`rescan` mutate; `list`/`entries`
+// are read-only and paginated with a compact mode (collection rule).
+tool('repo', 'Registered git repos — the org index of .agents/ skills + identities. A connected repo is the source of truth for its skills (git owns content, Drafted renders + indexes). Dispatch by `action`:\n- `list` — the org\'s linked repos (paginated, compact mode).\n- `add` — link a GitHub repo to a folder; the server fetches + indexes .agents/. `branch` points at a named branch (fails loudly if missing).\n- `rescan` — re-fetch the tracked branch and refresh the index.\n- `entries` — search the index across all the org\'s repos (skills + identities).\n\nAuthoring a Drafted skill whose slug collides with a repo-indexed skill returns 409 repo_owned pointing at the repo — commit to git instead.', {
+  action: z.enum(['list', 'add', 'rescan', 'entries']).describe('list: org repos; add: link a repo; rescan: re-fetch the tracked branch; entries: search the index.'),
+  gitUrl: z.string().optional().describe('[add] GitHub repo URL to link (e.g. https://github.com/owner/repo). Required for add.'),
+  folder: z.string().optional().describe('[add] folder name to link the repo into (required for add; repos are folder-scoped).'),
+  branch: z.string().optional().describe('[add] git branch to track (default: the repo default; fails loudly if the branch is missing).'),
+  slug: z.string().optional().describe('[add] repo slug (defaults to the repo name from the URL); [rescan] the repo slug or UUID.'),
+  repoId: z.string().optional().describe('[rescan] repo UUID (alternative to slug).'),
+  query: z.string().optional().describe('[entries] search term (matches name/description/slug).'),
+  kind: z.enum(['skill', 'identity']).optional().describe('[entries] filter to skill or identity.'),
+  limit: z.number().int().min(1).max(100).optional().describe('page size (default 25, max 100).'),
+  offset: z.number().int().min(0).optional().describe('page offset (default 0).'),
+  compact: z.boolean().optional().describe('list/entries: return only identity fields {slug,name,gitUrl} / {slug,name,kind} (default false).'),
+  org: z.string().optional().describe('Org (id or name) to scope this call; defaults to the session\'s working org.'),
+}, async (args) => {
+  const { action, gitUrl, folder, branch, slug, repoId, query, kind, limit, offset, compact, org } = args;
+  const orgHeader = org ? { 'X-Drafted-Org': org } : {};
+  const cap = Math.min(Math.max(1, Math.floor(Number(limit) || 25)), 100);
+  const start = Math.max(0, Math.floor(Number(offset) || 0));
+  if (action === 'list') {
+    const data = await api('GET', '/api/repos', undefined, orgHeader);
+    const rows = Array.isArray(data?.repos) ? data.repos : [];
+    const page = rows.slice(start, start + cap);
+    return ok({
+      totalAvailable: rows.length, offset: start, returned: page.length, truncated: start + page.length < rows.length,
+      repos: page.map(compact ? (r => ({ slug: r.slug, gitUrl: r.gitUrl, branch: r.branch })) : (r => ({
+        slug: r.slug, gitUrl: r.gitUrl, branch: r.branch, folder: r.folderName, defaultBranch: r.defaultBranch,
+        skills: r.skillCount, identities: r.identityCount, lastScannedAt: r.lastScannedAt, lastScannedSha: r.lastScannedSha,
+      }))),
+    });
+  }
+  if (action === 'add') {
+    if (!gitUrl) return err(new Error('add requires gitUrl (e.g. https://github.com/owner/repo)'));
+    if (!folder) return err(new Error('add requires folder (the folder name to link the repo into — repos are folder-scoped)'));
+    // Resolve folder name -> id in the target org.
+    const foldersRes = await api('GET', '/api/folders', undefined, orgHeader);
+    const folders = Array.isArray(foldersRes) ? foldersRes : (foldersRes?.folders || []);
+    const f = folders.find((x) => x.name === folder);
+    if (!f) return err(new Error(`no folder named "${folder}" in this org`));
+    const result = await api('POST', '/api/repos', { gitUrl, folderId: f.id, branch: branch || undefined, slug: slug || undefined }, orgHeader);
+    return ok({ slug: result.slug, gitUrl: result.gitUrl, branch: result.branch, skills: result.skills, identities: result.identities });
+  }
+  if (action === 'rescan') {
+    const id = repoId || await (async () => {
+      if (!slug) return null;
+      const data = await api('GET', '/api/repos', undefined, orgHeader);
+      const rows = Array.isArray(data?.repos) ? data.repos : [];
+      const found = rows.find((r) => r.slug === slug);
+      return found?.id || null;
+    })();
+    if (!id) return err(new Error('rescan requires slug or repoId'));
+    const result = await api('POST', `/api/repos/${encodeURIComponent(id)}/rescan`, undefined, orgHeader);
+    return ok({ slug: result.slug, gitUrl: result.gitUrl, branch: result.branch, skills: result.skills, identities: result.identities, lastScannedSha: result.lastScannedSha, lastScannedAt: result.lastScannedAt });
+  }
+  if (action === 'entries') {
+    const qs = new URLSearchParams();
+    if (query) qs.set('q', query);
+    if (kind) qs.set('kind', kind);
+    const data = await api('GET', `/api/repos/entries${qs.toString() ? '?' + qs : ''}`, undefined, orgHeader);
+    const rows = Array.isArray(data?.entries) ? data.entries : [];
+    const page = rows.slice(start, start + cap);
+    return ok({
+      totalAvailable: rows.length, offset: start, returned: page.length, truncated: start + page.length < rows.length,
+      entries: page.map(compact ? (e => ({ slug: e.slug, name: e.name, kind: e.kind })) : (e => ({
+        slug: e.slug, name: e.name, kind: e.kind, description: e.description, sourcePath: e.sourcePath,
+        readmePath: e.readmePath, status: e.status, statusReason: e.statusReason, repoSlug: e.repoSlug,
+      }))),
+    });
+  }
+  return err(new Error(`unknown repo action: ${action}`));
+});
 function normalizeMcpUpdatePolicy(policy) {
   const severity = policy?.policy?.severity || 'unknown';
   const updateAvailable = !!policy?.policy?.updateAvailable;

package/package.json

@@ -1,102 +1,38 @@
 {
   "name": "drafted",
-  "version": "1.17.18",
-  "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
+  "version": "1.18.1",
+  "description": "Shared surface for AI-human collaboration — MCP server and CLI",
   "type": "module",
-  "files": [
-    "cli/",
-    "mcp/",
-    "server/lib/umami.mjs",
-    "src/shared/",
-    "agent-instructions/",
-    "plugin/skills/",
-    "plugin/commands/",
-    "install-mcp.sh"
-  ],
   "bin": {
     "drafted": "./cli/drafted.mjs",
     "drafted-mcp": "./mcp/server.mjs"
   },
-  "scripts": {
-    "dev": "./dev.sh",
-    "dev:server": "tsx watch --import ./server/instrument.mjs server/server.mjs",
-    "dev:local": "node server/server-local.mjs",
-    "install-global": "npm install -g .",
-    "db:migrate": "psql $DATABASE_URL -f drizzle/migrate.sql",
-    "db:push": "drizzle-kit push",
-    "db:studio": "drizzle-kit studio",
-    "migrate-fs": "tsx server/migrate-fs.ts",
-    "db:clean-sessions": "tsx src/auth/cleanup.ts",
-    "import:legacy": "tsx scripts/import-legacy.mts",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "version": "node scripts/sync-versions.mjs && git add plugin/.claude-plugin/plugin.json .claude-plugin/marketplace.json web-plugin/plugin/.claude-plugin/plugin.json web-plugin/.claude-plugin/marketplace.json",
-    "version:check": "node scripts/sync-versions.mjs",
-    "postpublish": "bash scripts/sync-plugin.sh \"chore: sync plugin to v$npm_package_version\" && bash scripts/sync-web-plugin.sh \"chore: sync web-plugin to v$npm_package_version\"",
-    "deploy:check:google": "node scripts/check-google-drive-deploy.mjs",
-    "build:excalidraw": "node scripts/build-excalidraw-editor.mjs",
-    "build:office-viewer": "node scripts/build-office-viewer.mjs",
-    "prepublishOnly": "node scripts/check-npm-package.mjs",
-    "test:marketing": "node server/lib/marketing/test-marketing.mjs"
-  },
+  "files": [
+    "mcp/",
+    "cli/",
+    "shared/",
+    "skills/",
+    "README.md"
+  ],
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.1007.0",
-    "@aws-sdk/s3-request-presigner": "^3.1008.0",
-    "@clerk/backend": "^3.2.12",
-    "@clerk/express": "^2.1.4",
-    "@clerk/mcp-tools": "^0.3.1",
-    "@excalidraw/excalidraw": "^0.18.1",
-    "@modelcontextprotocol/ext-apps": "^1.6.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "@sentry/browser": "^10.53.1",
-    "@sentry/node": "^10.53.1",
-    "@xmldom/xmldom": "^0.9.10",
     "commander": "^11.1.0",
-    "dagre": "^0.8.5",
-    "docx": "^9.7.1",
-    "dotenv": "^17.3.1",
-    "drizzle-orm": "^0.45.1",
-    "esbuild": "^0.28.0",
-    "exceljs": "^4.4.0",
-    "express": "^4.18.2",
-    "jszip": "^3.10.1",
-    "lucide": "^1.16.0",
-    "mdast-util-from-markdown": "^2.0.3",
-    "multer": "^2.1.1",
-    "nodemailer": "^8.0.2",
-    "parse5": "^8.0.1",
-    "pg": "^8.20.0",
-    "playwright": "^1.58.2",
-    "puppeteer": "^24.37.5",
     "qrcode-terminal": "^0.12.0",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "sharp": "^0.34.5",
-    "ws": "^8.21.3",
-    "yaml": "^2.8.3",
+    "ws": "^8.16.0",
     "zod": "^4.3.6"
   },
   "keywords": [
+    "drafted",
     "design",
-    "canvas",
-    "preview",
-    "html",
-    "claude"
+    "mcp",
+    "claude",
+    "ai",
+    "canvas"
   ],
   "author": "ddfourtwo",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ddfourtwo/drafted.git"
   },
-  "license": "MIT",
-  "devDependencies": {
-    "@types/express": "^5.0.6",
-    "@types/nodemailer": "^7.0.11",
-    "@types/pg": "^8.18.0",
-    "docx-preview": "^0.3.7",
-    "drizzle-kit": "^0.31.9",
-    "tsx": "^4.19.0",
-    "typescript": "^5.9.3",
-    "vitest": "^3.2.4"
-  }
+  "license": "MIT"
 }