weavatrix 1.17.7 → 1.17.8

package/README.md

@@ -12,7 +12,7 @@
 Weavatrix answers the questions agents otherwise invent: what breaks if this
 file changes, who consumes this n8n field, whether an MCP schema still
 accepts yesterday’s request, which viem call sites follow an ABI layout
-change, and whether `.weavatrix/architecture.json` still holds. **64
+change, and whether `.weavatrix/architecture.json` still holds. **65
 read-only operations**, one revision-bound graph, no LSP and no prompt pack.
 
 Codex, Claude Code, Cursor, and Grok get impact, architecture, APIs, Git
@@ -60,7 +60,7 @@ weavatrix mcp .
 ```toml
 [mcp_servers.weavatrix]
 command = "npx"
-args = ["-y", "weavatrix@1.17.7", "mcp", "."]
+args = ["-y", "weavatrix@1.17.8", "mcp", "."]
 ```
 
 Pass an absolute repository path when the Codex process cwd is not the project
@@ -69,7 +69,7 @@ you intend to analyze.
 ### Claude Code
 
 ```sh
-claude mcp add weavatrix -- npx -y weavatrix@1.17.7 mcp .
+claude mcp add weavatrix -- npx -y weavatrix@1.17.8 mcp .
 ```
 
 ### Cursor
@@ -82,7 +82,7 @@ the plugin for the same server name:
   "mcpServers": {
     "weavatrix": {
       "command": "npx",
-      "args": ["-y", "weavatrix@1.17.7", "mcp", "${workspaceFolder}", "--output-format=structured"]
+      "args": ["-y", "weavatrix@1.17.8", "mcp", "${workspaceFolder}", "--output-format=structured"]
     }
   }
 }
@@ -91,14 +91,14 @@ the plugin for the same server name:
 Profiles expose bounded views of the same engine:
 
 ```sh
-npx -y weavatrix@1.17.7 mcp . --profile=all
-npx -y weavatrix@1.17.7 mcp . --profile=code
-npx -y weavatrix@1.17.7 mcp . --profile=seo
-npx -y weavatrix@1.17.7 mcp . --profile=n8n
-npx -y weavatrix@1.17.7 mcp . --profile=dify
-npx -y weavatrix@1.17.7 mcp . --profile=agent
-npx -y weavatrix@1.17.7 mcp . --profile=diagram
-npx -y weavatrix@1.17.7 mcp . --profile=web3
+npx -y weavatrix@1.17.8 mcp . --profile=all
+npx -y weavatrix@1.17.8 mcp . --profile=code
+npx -y weavatrix@1.17.8 mcp . --profile=seo
+npx -y weavatrix@1.17.8 mcp . --profile=n8n
+npx -y weavatrix@1.17.8 mcp . --profile=dify
+npx -y weavatrix@1.17.8 mcp . --profile=agent
+npx -y weavatrix@1.17.8 mcp . --profile=diagram
+npx -y weavatrix@1.17.8 mcp . --profile=web3
 ```
 
 The package contains native binaries for Windows x64/arm64, macOS x64/arm64,
@@ -233,7 +233,7 @@ Three commits before `ec8bf30` this package was 1.9.2; the agent reads that
 follow-up to a diff without touching the worktree. Binary blobs fail closed
 instead of being decoded into garbage.
 
-## The 64 read-only operations
+## The 65 read-only operations
 
 | Workflow | Operations |
 | --- | --- |
@@ -243,7 +243,7 @@ instead of being decoded into garbage.
 | Health and quality | `find_duplicates`, `find_dead_code`, `run_audit`, `coverage_map`, `hot_path_review`, `perf_attribution` |
 | APIs and transports | `list_endpoints`, `trace_endpoint`, `trace_api_contract` |
 | Architecture | `architecture_inventory`, `get_architecture_contract`, `verify_architecture`, `verify_capabilities`, `explain_architecture_violation`, `propose_architecture_exception` |
-| Local CI | `ci_restrictions`, `explain_restriction` |
+| Local CI | `ci_restrictions`, `ci_protection`, `explain_restriction` |
 | Git and repositories | `git_history`, `git_read_blob`, `cross_repo_git`, `open_repo`, `list_known_repos`, `rebuild_graph` |
 | Native extensions | `semantic_link` |
 | n8n workflows | `n8n_inventory`, `n8n_trace`, `n8n_context` |
@@ -329,12 +329,12 @@ coding agent
     |
     | MCP over stdio
     v
-weavatrix 1.17.7
+weavatrix 1.17.8
     profile catalog · refresh · watcher · MCP framing
     |
     v
-weavatrix-rust 2.17.7
-    typed graph · analysis · 64 product operations including local CI, n8n, Dify, agent packages, Mermaid, and Web3
+weavatrix-rust 2.17.8
+    typed graph · analysis · 65 product operations including local CI, n8n, Dify, agent packages, Mermaid, and Web3
 ```
 
 This npm product owns MCP transport and native distribution. The

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "weavatrix",
-  "version": "1.17.7",
-  "weavatrixEngineVersion": "2.17.7",
-  "description": "Native repository intelligence for coding agents: 64 read-only MCP operations backed by typed evidence graphs, impact, architecture, local CI restrictions, APIs, Git, search, semantic links, n8n workflows, Dify apps, agent packages, Mermaid diagrams, and Web3 ABIs.",
+  "version": "1.17.8",
+  "weavatrixEngineVersion": "2.17.8",
+  "description": "Native repository intelligence for coding agents: 65 read-only MCP operations backed by typed evidence graphs, impact, architecture, local CI restrictions, APIs, Git, search, semantic links, n8n workflows, Dify apps, agent packages, Mermaid diagrams, and Web3 ABIs.",
   "author": "Sergii Ziborov <sergii.ziborov@gmail.com>",
   "license": "MIT",
   "homepage": "https://weavatrix.com",

package/server.json

@@ -2,19 +2,19 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.Weavatrix/weavatrix",
   "title": "Weavatrix",
-  "description": "Native Weavatrix MCP: 64 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3.",
+  "description": "Native Weavatrix MCP: 65 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3.",
   "repository": {
     "url": "https://github.com/Weavatrix/weavatrix",
     "source": "github"
   },
-  "version": "1.17.7",
+  "version": "1.17.8",
   "websiteUrl": "https://weavatrix.com",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "weavatrix",
-      "version": "1.17.7",
+      "version": "1.17.8",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"

package/skill/references/tool-routing.md

@@ -43,6 +43,7 @@ cannot silently switch to another repository. Pass an explicit
 
 - [`architecture_inventory`](tools/architecture_inventory.md) — Bounded architecture overview and evidence-bounded style hypotheses by default, with complete edge/cycle-candidate totals; `detail:"full"` gives paged evidence. Explain statuses and witnesses in prose, not as a JSON dump.
 - [`ci_restrictions`](tools/ci_restrictions.md) — Local GitHub Actions checks and conditional applicability.
+- [`ci_protection`](tools/ci_protection.md) — Candidate checks and declared rule bindings for an explicit file list. Not included in change or diff answers.
 - [`explain_restriction`](tools/explain_restriction.md) — One restriction and its evidence limits.
 - [`find_duplicates`](tools/find_duplicates.md) — Deterministic Type-1/2/3 clone families.
 - [`find_dead_code`](tools/find_dead_code.md) — Conservative unreferenced-symbol review queue.

package/skill/references/tools/ci_protection.md

@@ -0,0 +1,26 @@
+# `ci_protection`
+
+Bind an explicit file list to local CI checks and declared architecture rules.
+It does not run a workflow, read the git diff, or ride along on `change_impact`,
+`graph_diff`, `verified_change`, or `prepare_change`.
+
+## When to use
+
+After you already know the paths, ask which configured checks and declared
+rules are candidates for those paths. For the full restriction inventory,
+call `ci_restrictions`. For one finding, call `explain_restriction`.
+
+## Inputs
+
+- `files` (required): repository paths. The call does not discover them.
+- `output_format` and `expected_repository`: common MCP arguments.
+
+## Minimal call
+
+```json
+{"name":"ci_protection","arguments":{"files":["src/lib.rs"],"output_format":"structured"}}
+```
+
+`candidate_checks` and `declared_rule_bindings` are static candidates.
+Execution, path filters, and remote enforcement are not proven. The live
+MCP `tools/list` schema is authoritative.