umtri-mcp 1.5.1 → 1.5.3

package/core/api-client.js

@@ -12,9 +12,14 @@ export function createApiClient({ baseUrl, getToken }) {
     return `Bearer ${token}`;
   }
 
+  // 서버가 "이 사용자가 MCP로 연결해 본 적 있음"을 기록하는 표시 — stdio·HTTP 공용.
+  async function headers() {
+    return { Authorization: await authHeader(), 'X-Umtri-Client': 'mcp' };
+  }
+
   async function get(path) {
     const res = await fetch(`${base}${path}`, {
-      headers: { Authorization: await authHeader() },
+      headers: await headers(),
     });
     if (!res.ok) {
       const body = await res.text().catch(() => '');
@@ -26,7 +31,7 @@ export function createApiClient({ baseUrl, getToken }) {
   async function mutate(method, path, body) {
     const init = {
       method,
-      headers: { Authorization: await authHeader() },
+      headers: await headers(),
     };
     if (body != null) {
       init.headers['Content-Type'] = 'application/json';

package/core/policy.js

@@ -44,6 +44,18 @@ const LAYER_LIMB_LABELS = [
   '모델', '서비스', '컨트롤러', '컴포넌트', '핸들러',
 ];
 
+// front trunk의 공통 limb에 들어가야 할 것들 — 따로 limb로 서면 공통이 여러 갈래로 흩어진다
+// (Coolus '공용 요소', TennisRepublic store-app '디자인 시스템'). 라벨에 포함되면 잡는다.
+const FRONT_COMMON_CONTENT = [
+  '디자인 시스템', '디자인 토큰', '공용 컴포넌트', '공통 컴포넌트', '공용 요소', '공통 요소',
+  '공용 ui', '공통 ui',
+  'design system', 'design tokens', 'shared components', 'common components', 'ui system', 'ui kit',
+];
+// 셸·레이아웃은 기능 이름에도 흔히 들어가서("매장 레이아웃 편집") 라벨 전체가 그 말일 때만 잡는다.
+const FRONT_COMMON_EXACT = ['앱 셸', '앱 틀', '레이아웃', '셸', 'app shell', 'shell', 'layout'];
+// 공통 limb다운 이름 — common 표시만 빠진 경우를 알린다.
+const COMMON_NAMES = ['공통', '공용', 'common', 'shared'];
+
 // Promotion signals — when a twig's description contains these, it might belong at limb level.
 // Derived from sidebar/auth/ui-system limb promotions on 2026-05-21.
 const PROMOTION_KEYWORDS = [
@@ -175,6 +187,23 @@ export function limbUnderTrunkChecks({ type, label, parentType, parentKind, meta
     });
   }
 
+  if (metadata?.common !== true) {
+    const lower = trimmed.toLowerCase();
+    if (COMMON_NAMES.includes(lower)) {
+      out.push({
+        rule: 'common-content-outside-common',
+        severity: 'info',
+        message: `Limb "${label}" reads like the trunk's common limb but is not marked. Set metadata.common=true on it (one per trunk) so the rules can find it. See umtri://rules/trunk-kinds.`,
+      });
+    } else if (parentKind === 'front' && (FRONT_COMMON_EXACT.includes(lower) || FRONT_COMMON_CONTENT.some(k => lower.includes(k)))) {
+      out.push({
+        rule: 'common-content-outside-common',
+        severity: 'info',
+        message: `Limb "${label}" holds what a front trunk keeps in its one common limb (app shell, design system, shared components). Make it a twig under the common limb (metadata.common=true) instead of a separate limb. See umtri://rules/trunk-kinds.`,
+      });
+    }
+  }
+
   if (metadata?.common === true && siblingCommonCount > 0) {
     out.push({
       rule: 'common-limb-duplicate',

package/core/resources/trunk-kinds.md

@@ -82,6 +82,7 @@ exists there, reuse its exact label.
 | `limb-domain-suffix` | A limb directly under a trunk ends in a kind suffix (`API`, `응답`, `테이블`, `관리`, `Table(s)`, `Admin`, `Management`). Drop it and reuse the domain name. |
 | `limb-layer-axis` | A limb is named after a technical layer. Split by the trunk kind's axis instead. |
 | `common-limb-duplicate` | The trunk already has a limb with `metadata.common: true`. |
+| `common-content-outside-common` | A front limb is named like common content (design system, shared components, app shell, layout), or a limb is named `공통`/`Common`/`Shared` without `metadata.common: true`. Make it a twig of the common limb, or mark it. |
 
 A table leaf (`metadata.table` set) may share its name with a first-class record — a `Bugs` table is not a bug — so `reserved-domain` does not fire on it.
 

package/core/resources/vocabulary.md

@@ -176,6 +176,7 @@ If you see one of these in the response, read it before proceeding:
 | `limb-domain-suffix`          | Limb under a trunk ends in `API`/`응답`/`테이블`/`관리`… — name the domain alone. |
 | `limb-layer-axis`             | Limb is a technical layer (State, Utils, Routes, Middleware…).     |
 | `common-limb-duplicate`       | The trunk already has its one common limb (`metadata.common`).    |
+| `common-content-outside-common` | Front limb holds common content (design system, shell…) outside the common limb, or a `공통` limb isn't marked. |
 
 ## Further reading (read only when relevant)
 

package/core/tools.js

@@ -177,7 +177,7 @@ function compressProjects(projects, { descMode = 'excerpt' } = {}) {
       openBugs: p.openBugs,
       seasonCount: p.seasonCount,
     };
-    // 팀 ground면 소속과 내 역할을 싣는다 — viewer면 쓰기 도구가 403으로 막힌다는 걸 미리 알 수 있게.
+    // 팀 ground면 소속과 내 역할을 싣는다 — viewer·reporter면 쓰기 도구가 403으로 막힌다는 걸 미리 알 수 있게.
     // personal이면 생략(대부분의 ground가 personal이라 매번 실으면 잡음이다).
     if (p.org && p.org.kind === 'team') {
       out.org = p.org.slug;
@@ -335,7 +335,7 @@ export function registerTools(server, { api }) {
     'list_projects',
     {
       title: 'List grounds (projects)',
-      description: 'Returns all grounds the authenticated user can access, with latest activity timestamp. Use this first to discover slugs for other tools. By default returns a summary view — each ground carries slug, name, isActive, transplanting, nodeCount, openBugs, seasonCount, nowSeasonLabel, latestActivityAt, plus a 200-char description excerpt. A ground that belongs to a team also carries org (the team slug) and role (owner/editor/viewer) — a viewer can read but every write tool returns 403 there. A ground with wiki pages also carries wikiCount — prose the tree cannot hold (conventions, decisions, glossary); read it with list_wiki. Pass view="full" for all fields (seedMeta — the ground\'s human-written intent: goal, endDate, budget, audience — plus typeCounts, raw metadata, timestamps); the icon base64 in metadata is always stripped (UI-only).',
+      description: 'Returns all grounds the authenticated user can access, with latest activity timestamp. Use this first to discover slugs for other tools. By default returns a summary view — each ground carries slug, name, isActive, transplanting, nodeCount, openBugs, seasonCount, nowSeasonLabel, latestActivityAt, plus a 200-char description excerpt. A ground that belongs to a team also carries org (the team slug) and role (owner/editor/reporter/viewer) — a viewer can read but every write tool returns 403 there; a reporter can only create_bug and update_bug. A ground with wiki pages also carries wikiCount — prose the tree cannot hold (conventions, decisions, glossary); read it with list_wiki. Pass view="full" for all fields (seedMeta — the ground\'s human-written intent: goal, endDate, budget, audience — plus typeCounts, raw metadata, timestamps); the icon base64 in metadata is always stripped (UI-only).',
       inputSchema: z.object({
         view: z.enum(['summary', 'full']).optional().describe('summary (default) for a compact list; full for every field.'),
       }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "umtri-mcp",
-  "version": "1.5.1",
+  "version": "1.5.3",
   "description": "MCP server for Umtri — give your AI coding agent a persistent map of your project's structure, dependencies, and bugs.",
   "mcpName": "io.umtri/umtri",
   "keywords": [