werkmeister 0.14.0 → 0.15.0

package/dist/main.js

@@ -44,7 +44,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var define_SANDBOX_BUILD_default;
 var init_define_SANDBOX_BUILD = __esm({
   "<define:__SANDBOX_BUILD__>"() {
-    define_SANDBOX_BUILD_default = { sha: "5503d8809006bd32e3b203187be0e307fe0292ff", dirty: false };
+    define_SANDBOX_BUILD_default = { sha: "8bf0338bcc3351a5e1154beba68c1b6f9beea71a", dirty: false };
   }
 });
 
@@ -13276,7 +13276,7 @@ function writeWorkspaceSettings(workspaceRoot) {
   writeWorkspaceModel(workspaceRoot, readModel(workspaceRoot));
   writeAutoStopHook(workspaceRoot, readAutoStop(workspaceRoot));
 }
-var _HOOK_MARKER, _GATE_MARKER, _PR_GUARD_MARKER, _AUTO_STOP_MARKER, _SKILLS_SELF_HEAL, SESSION_START_COMMAND, PRE_TOOL_USE_GATE_COMMAND, PR_GUARD_COMMAND, SESSION_END_COMMAND, _SESSION_END_TIMEOUT_S, READ_ONLY_GIT_RULES, AUTONOMOUS_RULES, AUTONOMOUS_DENY, permissionsRecord, _strings;
+var _HOOK_MARKER, _GATE_MARKER, _PR_GUARD_MARKER, _AUTO_STOP_MARKER, _SKILLS_SELF_HEAL, SESSION_START_COMMAND, PRE_TOOL_USE_GATE_COMMAND, PR_GUARD_COMMAND, SESSION_END_COMMAND, _SESSION_END_TIMEOUT_S, READ_ONLY_GIT_RULES, PLUGIN_MCP_PREFIXES, pluginTool, AUTONOMOUS_RULES, AUTONOMOUS_DENY, permissionsRecord, _strings;
 var init_hooks_gen = __esm({
   "../../packages/sandbox-core/dist/hooks_gen.js"() {
     "use strict";
@@ -13299,6 +13299,11 @@ var init_hooks_gen = __esm({
       "Bash(git status:*)",
       "Bash(git ls-files:*)"
     ];
+    PLUGIN_MCP_PREFIXES = [
+      "mcp__plugin_werkmeister_workspaces__",
+      "mcp__plugin_sandbox-tools_sandbox-workspace__"
+    ];
+    pluginTool = (tool) => PLUGIN_MCP_PREFIXES.map((prefix) => `${prefix}${tool}`);
     AUTONOMOUS_RULES = [
       "Bash(git:*)",
       // `sandbox pr open` does the push and the PR; gh is read-only here.
@@ -13322,7 +13327,7 @@ var init_hooks_gen = __esm({
         "workspace-prs",
         "kube-context",
         "k8s-forwards-status"
-      ].map((tool) => `mcp__plugin_sandbox-tools_sandbox-workspace__${tool}`)
+      ].flatMap(pluginTool)
     ];
     AUTONOMOUS_DENY = [
       ...[
@@ -13365,7 +13370,7 @@ var init_hooks_gen = __esm({
         "claude-send",
         "claude-resume",
         "sandbox-connect"
-      ].map((tool) => `mcp__plugin_sandbox-tools_sandbox-workspace__${tool}`)
+      ].flatMap(pluginTool)
     ];
     permissionsRecord = (workspaceRoot) => path7.join(dotDir(workspaceRoot), "claude-permissions.json");
     _strings = (v) => Array.isArray(v) ? v.filter((r) => typeof r === "string") : [];
@@ -32507,7 +32512,7 @@ models:
   claude-sonnet-5:  { input: 3,  output: 15, cacheWrite: 3.75,  cacheRead: 0.30 }
   claude-haiku-4-5: { input: 1,  output: 5,  cacheWrite: 1.25,  cacheRead: 0.10 }
 `;
-    SANDBOX_MCP_SERVER = "sandbox";
+    SANDBOX_MCP_SERVER = "werkmeister";
     REGISTRY_DEFAULTS = {
       archetypes: {
         "node-web": {
@@ -54253,7 +54258,7 @@ function cacheSet(key, v) {
       await fs45.writeFile(tmp, JSON.stringify(store), "utf-8");
       await fs45.rename(tmp, file);
     } catch (e) {
-      console.error(`[sandbox-workspace] cache write failed for ${key}:`, e.message);
+      console.error(`[werkmeister] cache write failed for ${key}:`, e.message);
     }
   });
   writeChain = run34.catch(() => {
@@ -54266,7 +54271,7 @@ function runBatchOnce(keys, job) {
     return;
   for (const k of fresh)
     inFlight.add(k);
-  void Promise.resolve().then(() => job(fresh)).catch((e) => console.error("[sandbox-workspace] background cache refresh failed:", e.message)).finally(() => {
+  void Promise.resolve().then(() => job(fresh)).catch((e) => console.error("[werkmeister] background cache refresh failed:", e.message)).finally(() => {
     for (const k of fresh)
       inFlight.delete(k);
   });
@@ -57378,13 +57383,13 @@ function loadRegistry(claudePluginsDir) {
   const plugins = typeof data === "object" && data !== null && !Array.isArray(data) ? data["plugins"] : void 0;
   return typeof plugins === "object" && plugins !== null && !Array.isArray(plugins) ? plugins : null;
 }
-function installedPlugin(claudePluginsDir) {
+function installedPlugin(claudePluginsDir, name = PLUGIN_NAME) {
   const plugins = loadRegistry(claudePluginsDir);
   if (plugins === null) {
     return [null, null];
   }
   for (const [key, entries] of Object.entries(plugins)) {
-    if (!key.startsWith(`${PLUGIN_NAME}@`) || !Array.isArray(entries)) {
+    if (!key.startsWith(`${name}@`) || !Array.isArray(entries)) {
       continue;
     }
     for (const entry of entries) {
@@ -57466,8 +57471,13 @@ function pluginDriftWarnings(repoPluginDir, claudePluginsDir) {
   }
   const [installedVersion2, installPath] = installedPlugin(claudePluginsDir);
   if (installPath === null) {
+    if (installedPlugin(claudePluginsDir, LEGACY_PLUGIN_NAME)[1] !== null) {
+      return [
+        `the ${LEGACY_PLUGIN_NAME} plugin was renamed ${PLUGIN_NAME}, and only the old one is installed \u2014 its skills are now ${PLUGIN_NAME}:diagnose, ${PLUGIN_NAME}:status, ${PLUGIN_NAME}:workspace, \u2026 Run \`w9r setup\` to switch over.`
+      ];
+    }
     return [
-      `${PLUGIN_NAME} plugin is not installed \u2014 the sandbox-* ops skills (sandbox-diagnose, sandbox-status, sandbox-workspace, \u2026) will not surface in Claude Code sessions. Run \`sandbox setup\` to install it (or use /plugin in Claude Code). The sb-* skills are unaffected \u2014 they are projected into each workspace by init-workspace.`
+      `${PLUGIN_NAME} plugin is not installed \u2014 the ops skills (${PLUGIN_NAME}:diagnose, ${PLUGIN_NAME}:status, ${PLUGIN_NAME}:workspace, \u2026) will not surface in Claude Code sessions. Run \`w9r setup\` to install it (or use /plugin in Claude Code). The sb-* skills are unaffected \u2014 they are projected into each workspace by init-workspace.`
     ];
   }
   const drift = skillDrift(path58.join(repoPluginDir, "skills"), path58.join(installPath, "skills"));
@@ -57483,14 +57493,15 @@ function pluginDriftWarnings(repoPluginDir, claudePluginsDir) {
   }
   return [`${lag}: ${drift.join("; ")} \u2014 ${REFRESH_HINT}.`];
 }
-var PLUGIN_NAME, REFRESH_HINT;
+var PLUGIN_NAME, LEGACY_PLUGIN_NAME, REFRESH_HINT;
 var init_plugin_check = __esm({
   "../../packages/sandbox-core/dist/plugin_check.js"() {
     "use strict";
     init_define_SANDBOX_BUILD();
     init_config();
-    PLUGIN_NAME = "sandbox-tools";
-    REFRESH_HINT = "run `sandbox setup` to refresh it so sessions pick up the current sandbox-* ops skills";
+    PLUGIN_NAME = "werkmeister";
+    LEGACY_PLUGIN_NAME = "sandbox-tools";
+    REFRESH_HINT = "run `w9r setup` to refresh it so sessions pick up the current werkmeister ops skills";
   }
 });
 
@@ -57629,6 +57640,53 @@ function briefOutput(out, maxLines = 4) {
     return out.trim().slice(0, 200);
   return lines.slice(0, maxLines).join("; ");
 }
+function retireLegacyPlugin(claudePluginsDir, runner, checkOnly) {
+  const label = `plugin ${LEGACY_PLUGIN.name} (renamed ${PLUGIN_NAME})`;
+  const installed = installedVersion(claudePluginsDir, LEGACY_PLUGIN) !== null;
+  const marketplaceKnown = LEGACY_PLUGIN.marketplace in knownMarketplaces(claudePluginsDir);
+  if (!installed && !marketplaceKnown)
+    return [];
+  if (checkOnly) {
+    return [
+      {
+        label,
+        ok: false,
+        detail: `old name still set up; run \`w9r setup\` to switch to ${PLUGIN_NAME}`
+      }
+    ];
+  }
+  const steps = [];
+  if (installed) {
+    const [rc, out] = runner([
+      "claude",
+      "plugin",
+      "uninstall",
+      `${LEGACY_PLUGIN.name}@${LEGACY_PLUGIN.marketplace}`
+    ]);
+    steps.push({
+      label,
+      ok: rc === 0,
+      detail: rc === 0 ? "uninstalled" : `uninstall failed: ${out}`
+    });
+    if (rc !== 0)
+      return steps;
+  }
+  if (marketplaceKnown) {
+    const [rc, out] = runner([
+      "claude",
+      "plugin",
+      "marketplace",
+      "remove",
+      LEGACY_PLUGIN.marketplace
+    ]);
+    steps.push({
+      label,
+      ok: rc === 0,
+      detail: rc === 0 ? `removed marketplace ${LEGACY_PLUGIN.marketplace}` : `marketplace remove failed: ${out}`
+    });
+  }
+  return steps;
+}
 function workspaceRepoUrl(slug) {
   return `https://github.com/${slug}.git`;
 }
@@ -58378,7 +58436,7 @@ async function runSetup(options = {}) {
   const checkOnly = options.checkOnly ?? false;
   const reposRoot = options.reposRoot ?? getReposRoot();
   const claudePluginsDir = options.claudePluginsDir ?? path60.join(os18.homedir(), ".claude", "plugins");
-  const repoPluginDir = options.repoPluginDir ?? path60.join(sandboxRoot(), "plugins", "sandbox-tools");
+  const repoPluginDir = options.repoPluginDir ?? path60.join(sandboxRoot(), "plugins", PLUGIN_NAME);
   const runner = options.runner ?? defaultRunner;
   const jira2 = options.jira ?? loadJira();
   const steps = [];
@@ -58393,15 +58451,19 @@ async function runSetup(options = {}) {
     steps.push({
       label: "claude CLI",
       ok: false,
-      detail: "not found on PATH \u2014 the sandbox-tools and ponytail plugins cannot be installed without it. Install Claude Code from https://claude.com/claude-code (the VS Code extension alone does not put `claude` on PATH), then re-run `sandbox setup`."
+      detail: `not found on PATH \u2014 the ${PLUGIN_NAME} and ponytail plugins cannot be installed without it. Install Claude Code from https://claude.com/claude-code (the VS Code extension alone does not put \`claude\` on PATH), then re-run \`sandbox setup\`.`
     });
   } else {
     for (const spec of REQUIRED_PLUGINS) {
       let driftProbe = null;
-      if (spec.name === "sandbox-tools") {
+      if (spec.name === PLUGIN_NAME) {
         driftProbe = () => pluginDriftWarnings(repoPluginDir, claudePluginsDir);
       }
-      steps.push(...syncPlugin(spec, claudePluginsDir, runner, checkOnly, driftProbe));
+      const synced = syncPlugin(spec, claudePluginsDir, runner, checkOnly, driftProbe);
+      steps.push(...synced);
+      if (spec.name === PLUGIN_NAME && (checkOnly || synced.every((step) => step.ok))) {
+        steps.push(...retireLegacyPlugin(claudePluginsDir, runner, checkOnly));
+      }
     }
     for (const spec of OPTIONAL_PLUGINS) {
       steps.push(...syncOptionalPlugin(spec, claudePluginsDir, runner, checkOnly, options.installOptionalPlugins ?? false));
@@ -58432,7 +58494,7 @@ async function runSetup(options = {}) {
   steps.push(...syncVscodeExtension(checkOnly, options.installVscodeExtension ?? false, vscodeExtensionState(runner), runner));
   return steps;
 }
-var REQUIRED_PLUGINS, OPTIONAL_PLUGINS, WORKSPACE_ROOT_REPO, isLogin, DEMO_SERVICES_REPO, DEMO_SERVICES_REPO_URL, workspaceRootSpec, DEMO_SERVICES_SPEC, LEGACY_CONFIG_DIR, JIRA_TOKEN_URL, JIRA_REQUIRED_KEYS, JIRA_CONFIG_SNIPPET, EDITOR_SCHEMAS, VSCODE_EXTENSION_ID, BUNDLED_VSIX_REL;
+var REQUIRED_PLUGINS, LEGACY_PLUGIN, OPTIONAL_PLUGINS, WORKSPACE_ROOT_REPO, isLogin, DEMO_SERVICES_REPO, DEMO_SERVICES_REPO_URL, workspaceRootSpec, DEMO_SERVICES_SPEC, LEGACY_CONFIG_DIR, JIRA_TOKEN_URL, JIRA_REQUIRED_KEYS, JIRA_CONFIG_SNIPPET, EDITOR_SCHEMAS, VSCODE_EXTENSION_ID, BUNDLED_VSIX_REL;
 var init_machine_setup = __esm({
   "../../packages/sandbox-core/dist/machine_setup.js"() {
     "use strict";
@@ -58449,11 +58511,11 @@ var init_machine_setup = __esm({
     init_test_run();
     REQUIRED_PLUGINS = [
       // This repo doubles as the marketplace: `.claude-plugin/marketplace.json` at
-      // the root serves `plugins/sandbox-tools`. `marketplace` must match the
+      // the root serves `plugins/werkmeister`. `marketplace` must match the
       // `name` field in that manifest, or install resolves nothing.
       {
-        name: "sandbox-tools",
-        marketplace: "sandbox",
+        name: "werkmeister",
+        marketplace: "werkmeister",
         source: "jbbz-sandbox/werkmeister@main"
       },
       {
@@ -58462,6 +58524,11 @@ var init_machine_setup = __esm({
         source: "DietrichGebert/ponytail"
       }
     ];
+    LEGACY_PLUGIN = {
+      name: LEGACY_PLUGIN_NAME,
+      marketplace: "sandbox",
+      source: "jbbz-sandbox/werkmeister@main"
+    };
     OPTIONAL_PLUGINS = [
       {
         // Not obra/superpowers directly: that repo's manifest names itself
@@ -58495,7 +58562,7 @@ var init_machine_setup = __esm({
       "services-fragment.schema.json": "**/.sandbox/services.yaml",
       "workspace.schema.json": "**/.sandbox/workspace.yml"
     };
-    VSCODE_EXTENSION_ID = "jbbz.vscode-plugin";
+    VSCODE_EXTENSION_ID = "jbbz.werkmeister-vscode";
     BUNDLED_VSIX_REL = path60.join("dist", "sandbox-workspaces.vsix");
   }
 });
@@ -58575,14 +58642,19 @@ function writeWorkspaceMcp(workspaceRoot, serverNames, definitions, vars2 = {})
       delete servers[name];
     }
   }
+  const legacy = servers[LEGACY_SERVER];
+  if (legacy?.headers?.["X-Sandbox-Feature"] !== void 0)
+    delete servers[LEGACY_SERVER];
   Object.assign(servers, wanted);
   fs53.writeFileSync(mcpPath, JSON.stringify(config, null, 2) + "\n");
   return mcpPath;
 }
+var LEGACY_SERVER;
 var init_mcp_gen = __esm({
   "../../packages/sandbox-core/dist/mcp_gen.js"() {
     "use strict";
     init_define_SANDBOX_BUILD();
+    LEGACY_SERVER = "sandbox";
   }
 });
 
@@ -63631,7 +63703,7 @@ import { execFileSync } from "node:child_process";
 import * as fs21 from "node:fs";
 import * as path22 from "node:path";
 var BUILD_STAMP = typeof define_SANDBOX_BUILD_default === "undefined" ? void 0 : define_SANDBOX_BUILD_default;
-var REBUILD_COMMAND = "npm run build --workspace sandbox-core && npm run build --workspace apps/cli";
+var REBUILD_COMMAND = "npm run build --workspace werkmeister-core && npm run build --workspace apps/cli";
 function staleBuildWarning(build, repoRoot) {
   if (!build?.sha || !fs21.existsSync(path22.join(repoRoot, ".git"))) return null;
   let head;
@@ -64366,7 +64438,7 @@ ${_RED}Interrupted${_RESET}`));
   for (const [name, description] of [
     [
       "dashboard",
-      "Launch the workspace dashboard's MCP server over stdio (Claude Desktop, the sandbox-tools plugin)"
+      "Launch the workspace dashboard's MCP server over stdio (Claude Desktop, the werkmeister plugin)"
     ],
     [
       "mcp",

package/dist/mcp.js

@@ -83141,6 +83141,11 @@ var READ_ONLY_GIT_RULES = [
   "Bash(git status:*)",
   "Bash(git ls-files:*)"
 ];
+var PLUGIN_MCP_PREFIXES = [
+  "mcp__plugin_werkmeister_workspaces__",
+  "mcp__plugin_sandbox-tools_sandbox-workspace__"
+];
+var pluginTool = (tool) => PLUGIN_MCP_PREFIXES.map((prefix) => `${prefix}${tool}`);
 var AUTONOMOUS_RULES = [
   "Bash(git:*)",
   // `sandbox pr open` does the push and the PR; gh is read-only here.
@@ -83164,7 +83169,7 @@ var AUTONOMOUS_RULES = [
     "workspace-prs",
     "kube-context",
     "k8s-forwards-status"
-  ].map((tool) => `mcp__plugin_sandbox-tools_sandbox-workspace__${tool}`)
+  ].flatMap(pluginTool)
 ];
 function autonomousRules(feature2, services) {
   if (!feature2)
@@ -83223,7 +83228,7 @@ var AUTONOMOUS_DENY = [
     "claude-send",
     "claude-resume",
     "sandbox-connect"
-  ].map((tool) => `mcp__plugin_sandbox-tools_sandbox-workspace__${tool}`)
+  ].flatMap(pluginTool)
 ];
 var permissionsRecord = (workspaceRoot) => path27.join(dotDir(workspaceRoot), "claude-permissions.json");
 function buildAllowRules(feature2, services, servicesConfig, archetypes) {
@@ -85906,8 +85911,9 @@ init_config();
 import * as fs39 from "node:fs";
 import * as os11 from "node:os";
 import * as path36 from "node:path";
-var PLUGIN_NAME = "sandbox-tools";
-var REFRESH_HINT = "run `sandbox setup` to refresh it so sessions pick up the current sandbox-* ops skills";
+var PLUGIN_NAME = "werkmeister";
+var LEGACY_PLUGIN_NAME = "sandbox-tools";
+var REFRESH_HINT = "run `w9r setup` to refresh it so sessions pick up the current werkmeister ops skills";
 function defaultRepoPluginDir() {
   return path36.join(sandboxRoot(), "plugins", PLUGIN_NAME);
 }
@@ -85936,13 +85942,13 @@ function loadRegistry(claudePluginsDir) {
   const plugins = typeof data === "object" && data !== null && !Array.isArray(data) ? data["plugins"] : void 0;
   return typeof plugins === "object" && plugins !== null && !Array.isArray(plugins) ? plugins : null;
 }
-function installedPlugin(claudePluginsDir) {
+function installedPlugin(claudePluginsDir, name = PLUGIN_NAME) {
   const plugins = loadRegistry(claudePluginsDir);
   if (plugins === null) {
     return [null, null];
   }
   for (const [key, entries] of Object.entries(plugins)) {
-    if (!key.startsWith(`${PLUGIN_NAME}@`) || !Array.isArray(entries)) {
+    if (!key.startsWith(`${name}@`) || !Array.isArray(entries)) {
       continue;
     }
     for (const entry of entries) {
@@ -86024,8 +86030,13 @@ function pluginDriftWarnings(repoPluginDir, claudePluginsDir) {
   }
   const [installedVersion, installPath] = installedPlugin(claudePluginsDir);
   if (installPath === null) {
+    if (installedPlugin(claudePluginsDir, LEGACY_PLUGIN_NAME)[1] !== null) {
+      return [
+        `the ${LEGACY_PLUGIN_NAME} plugin was renamed ${PLUGIN_NAME}, and only the old one is installed \u2014 its skills are now ${PLUGIN_NAME}:diagnose, ${PLUGIN_NAME}:status, ${PLUGIN_NAME}:workspace, \u2026 Run \`w9r setup\` to switch over.`
+      ];
+    }
     return [
-      `${PLUGIN_NAME} plugin is not installed \u2014 the sandbox-* ops skills (sandbox-diagnose, sandbox-status, sandbox-workspace, \u2026) will not surface in Claude Code sessions. Run \`sandbox setup\` to install it (or use /plugin in Claude Code). The sb-* skills are unaffected \u2014 they are projected into each workspace by init-workspace.`
+      `${PLUGIN_NAME} plugin is not installed \u2014 the ops skills (${PLUGIN_NAME}:diagnose, ${PLUGIN_NAME}:status, ${PLUGIN_NAME}:workspace, \u2026) will not surface in Claude Code sessions. Run \`w9r setup\` to install it (or use /plugin in Claude Code). The sb-* skills are unaffected \u2014 they are projected into each workspace by init-workspace.`
     ];
   }
   const drift = skillDrift(path36.join(repoPluginDir, "skills"), path36.join(installPath, "skills"));
@@ -86054,7 +86065,7 @@ import * as path37 from "node:path";
 
 // ../../packages/sandbox-core/dist/scaffold.js
 init_define_SANDBOX_BUILD();
-var SANDBOX_MCP_SERVER = "sandbox";
+var SANDBOX_MCP_SERVER = "werkmeister";
 var REGISTRY_DEFAULTS = {
   archetypes: {
     "node-web": {
@@ -86338,6 +86349,7 @@ var BUNDLED_VSIX_REL = path39.join("dist", "sandbox-workspaces.vsix");
 init_define_SANDBOX_BUILD();
 import * as fs42 from "node:fs";
 import * as path40 from "node:path";
+var LEGACY_SERVER = "sandbox";
 function resolveWorkspaceMcpServers(presentArchetypes2, archetypes) {
   const names = /* @__PURE__ */ new Set();
   for (const archName of Object.keys(presentArchetypes2)) {
@@ -86410,6 +86422,9 @@ function writeWorkspaceMcp(workspaceRoot, serverNames, definitions, vars2 = {})
       delete servers[name];
     }
   }
+  const legacy = servers[LEGACY_SERVER];
+  if (legacy?.headers?.["X-Sandbox-Feature"] !== void 0)
+    delete servers[LEGACY_SERVER];
   Object.assign(servers, wanted);
   fs42.writeFileSync(mcpPath, JSON.stringify(config2, null, 2) + "\n");
   return mcpPath;
@@ -89075,7 +89090,7 @@ function registerTools(server) {
 }
 function registerLifecycleTools(server) {
   server.registerTool(
-    "sandbox-up",
+    "up",
     {
       title: "Bring a feature up",
       description: "Allocate the feature's slot, start its containers, and point the reverse proxy at them. Returns the slot, port range, local services and their URLs.",
@@ -89087,10 +89102,10 @@ function registerLifecycleTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-down",
+    "down",
     {
       title: "Tear a feature down",
-      description: "Leave the feature's k8s intercepts, remove its containers, and release its slot. Does not reload the reverse proxy \u2014 call sandbox-proxy-reload after tearing down.",
+      description: "Leave the feature's k8s intercepts, remove its containers, and release its slot. Does not reload the reverse proxy \u2014 call proxy-reload after tearing down.",
       inputSchema: {
         ...FEATURE_ARG,
         removeVolumes: external_exports.boolean().optional().describe("Also remove the feature's named volumes. Default false.")
@@ -89107,10 +89122,10 @@ function registerLifecycleTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-stop",
+    "stop",
     {
       title: "Stop a feature's containers",
-      description: "Stop the containers, leaving them and the slot in place so sandbox-restart or sandbox-up can resume the feature.",
+      description: "Stop the containers, leaving them and the slot in place so restart or up can resume the feature.",
       inputSchema: { ...FEATURE_ARG }
     },
     async (args, extra) => adapt(async () => ({
@@ -89118,7 +89133,7 @@ function registerLifecycleTools(server) {
     }))
   );
   server.registerTool(
-    "sandbox-restart",
+    "restart",
     {
       title: "Restart a feature's containers",
       description: "Bounce the feature's containers, reusing its slot.",
@@ -89129,7 +89144,7 @@ function registerLifecycleTools(server) {
     }))
   );
   server.registerTool(
-    "sandbox-status",
+    "status",
     {
       title: "Sandbox status",
       description: "Everything `sandbox status` knows: infrastructure containers, the host web servers, k8s forwards, every feature's slot and containers, and telepresence intercepts. Host-side, so the k8s forward health reported here is the real one.",
@@ -89141,7 +89156,7 @@ function registerLifecycleTools(server) {
     }))
   );
   server.registerTool(
-    "sandbox-detect",
+    "detect",
     {
       title: "Generate a repo's service-registry fragment",
       description: "Scan a repo (package manifests, Dockerfiles, compose, Helm, k8s, kustomize) and propose its .sandbox/services.yaml. Returns the report, the proposed YAML and the questions the scan could not settle. Writes only with write: true. Answer questions by passing `answers` ({ item: <question id>, value, reason, files_read }); answers can only fill those questions.",
@@ -89189,7 +89204,7 @@ function registerLifecycleTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-services",
+    "services",
     {
       title: "Where a feature's services answer",
       description: "Every registered service and its endpoint for this feature \u2014 local container, k8s forward, or not configured.",
@@ -89202,7 +89217,7 @@ function registerLifecycleTools(server) {
     }))
   );
   server.registerTool(
-    "sandbox-logs",
+    "logs",
     {
       title: "Read a feature's container logs",
       description: "A bounded read of `docker compose logs` for the feature, optionally one service. This is not a subscription: it never follows, and returns the last `tail` lines.",
@@ -89221,7 +89236,7 @@ function registerLifecycleTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-remove",
+    "remove",
     {
       title: "Drop a service from a feature",
       description: "Remove one service from the feature's local services so it falls back to k8s: regenerate the workspace files, restart (or stop) the containers, re-point the proxy.",
@@ -89238,7 +89253,7 @@ function registerLifecycleTools(server) {
     }))
   );
   server.registerTool(
-    "sandbox-test",
+    "test",
     {
       title: "Run a feature's Playwright suite",
       description: "Run the feature's Playwright tests with SANDBOX_FEATURE set, so the suite carries the X-Feature routing cookie. Runs only when the workspace has a Playwright config; otherwise nothing runs and `message` lists each service's test command and validation guidance. A failing suite is a result (non-zero `status`), not an error.",
@@ -89260,7 +89275,7 @@ function registerLifecycleTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-proxy-reload",
+    "proxy-reload",
     {
       title: "Regenerate and reload the reverse proxy",
       description: "Rebuild the Caddyfile from the active features and hand it to Caddy, starting Caddy if it is down. Call this after tearing features down.",
@@ -89283,7 +89298,7 @@ var WORKSPACE_FIELDS = {
 };
 function registerAuthoringTools(server) {
   server.registerTool(
-    "sandbox-workspace",
+    "workspace",
     {
       title: "Create a sandbox workspace",
       description: "Create a workspace: git worktrees on a <user>/<workspace> branch under the workspaces root, then init-workspace. Runs `createWorkspace` in this process; with an `issue_id` the issue is fetched and stored in `.sandbox/issue.md` (the create fails if it can't be read). Non-interactive \u2014 every wizard input is an argument here. Never opens VS Code.",
@@ -89302,7 +89317,7 @@ function registerAuthoringTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-list-workspaces",
+    "list-workspaces",
     {
       title: "List sandbox workspaces",
       description: "Every workspace directory under the workspaces root, with its path, issue ID, labels and VS Code URI. Not scoped to a feature \u2014 this is the whole root, and it lists workspaces that were never brought up.",
@@ -89318,12 +89333,12 @@ function registerAuthoringTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-close-out",
+    "close-out",
     {
       title: "End a workspace",
       description: "The one way to end a workspace. After every PR shipped: close the issue, write closeout.md, commit and push every branch, tear the feature down, delete the workspace directory and the merged code branches. With `abandon` (a reason) when work is unshipped: record the reason, leave the issue, push and keep every branch, then remove. Destructive, and NOT scoped to your feature \u2014 it names a workspace. Nothing is deleted if any branch cannot be pushed.",
       inputSchema: {
-        name: external_exports.string().describe("Workspace directory name, as sandbox-list-workspaces reports it."),
+        name: external_exports.string().describe("Workspace directory name, as list-workspaces reports it."),
         abandon: external_exports.string().optional().describe(
           "Close out without shipping: why the work is abandoned. Recorded in closeout.md and the PR files."
         )
@@ -89342,7 +89357,7 @@ function registerAuthoringTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-init-workspace",
+    "init-workspace",
     {
       title: "Reconcile a workspace",
       description: `Re-run init-workspace against an existing workspace: reconcile worktrees, regenerate CLAUDE.md, .env, ${COMPOSE_FILE}, skills, agents, hooks and .mcp.json from .sandbox/workspace.yml plus any arguments given here.`,
@@ -89356,7 +89371,7 @@ function registerAuthoringTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-skills",
+    "skills",
     {
       title: "Check or sync a workspace's context layer",
       description: "`check` reports drift between the workspace's context layer and a fresh rendering; `sync` rewrites what drifted. The layer is the workspace's `context_strategy` (jit: sb-* skills and gate manifest; icm: standards and stage contracts).",
@@ -89373,7 +89388,7 @@ function registerAuthoringTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-standards",
+    "standards",
     {
       title: "Validate the standards tree",
       description: "Run every structural validator over the configured standards tree. Errors come back as data \u2014 an empty `errors` with a non-zero `moduleCount` is a clean tree.",
@@ -89382,7 +89397,7 @@ function registerAuthoringTools(server) {
     async () => adapt(async () => ({ ...checkStandards() }))
   );
   server.registerTool(
-    "sandbox-hooks",
+    "hooks",
     {
       title: "Refresh a workspace's context layer",
       description: "Refresh the workspace's context layer the way `sandbox up` does: jit re-merges its SessionStart and PreToolUse hooks into .claude/settings.json; icm removes any sandbox-managed hooks. Never touches hooks it does not own.",
@@ -89397,7 +89412,7 @@ function registerAuthoringTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-notes",
+    "notes",
     {
       title: "Read or graduate a workspace's notes",
       description: "`context` renders the session-start standards + notes block. `list` returns the workspace's notes. `graduate` scaffolds a decision note into a standards domain \u2014 domain and kind must be supplied, because the CLI's prompts are not available here.",
@@ -89444,7 +89459,7 @@ function registerAuthoringTools(server) {
 }
 function registerHostTools(server) {
   server.registerTool(
-    "sandbox-connect",
+    "connect",
     {
       title: "Start shared infrastructure",
       description: "Bring up the shared infra every feature depends on: generated proxy files, the corporate CA, the compose stack (caddy, k8s forwards, jaeger) and the host web servers. Host-wide, not scoped to your feature.",
@@ -89460,7 +89475,7 @@ function registerHostTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-open",
+    "open",
     {
       title: "Open a feature-tagged browser window",
       description: "Launch a browser window on the HOST, pre-configured with the feature's X-Feature routing cookie and tagged so it is unmistakably this feature's window. The window outlives this call; it closes when the user closes it.",
@@ -89500,7 +89515,7 @@ function registerHostTools(server) {
     })
   );
   server.registerTool(
-    "sandbox-intercept",
+    "intercept",
     {
       title: "Start or leave a k8s traffic intercept",
       description: "Route the slice of live k8s dev traffic carrying `x-feature: <feature>` to this feature's local container, or stop doing so. Runs host-side, where the telepresence root daemon lives \u2014 with exactly the authority a host terminal has.",
@@ -89540,7 +89555,7 @@ function registerHostTools(server) {
 
 // ../mcp/src/main.ts
 function createServer2() {
-  const server = new McpServer({ name: "sandbox", version: "0.1.0" });
+  const server = new McpServer({ name: "werkmeister", version: "0.1.0" });
   registerTools(server);
   return server;
 }

package/infra/schemas/workspace.schema.json

@@ -26,7 +26,7 @@
     "autonomous": {
       "type": "boolean",
       "default": false,
-      "description": "icm: run stage 01 to `sandbox pr open` with self-checks instead of human checks. Every strategy: add the Bash and sandbox-workspace MCP allow rules a headless session needs to .claude/settings.json (recorded in .sandbox/claude-permissions.json, removed when this turns off)."
+      "description": "icm: run stage 01 to `sandbox pr open` with self-checks instead of human checks. Every strategy: add the Bash and werkmeister workspaces MCP allow rules a headless session needs to .claude/settings.json (recorded in .sandbox/claude-permissions.json, removed when this turns off)."
     },
     "model": {
       "type": "string",

package/infra/skills/sb-test/SKILL.md

@@ -20,7 +20,7 @@ description: "Begin the test phase in a sandbox workspace. Use when running or w
   assertions with suspected causes, and open questions.
 - **Verifying the running feature.** The tester agents run a proxy smoke check (curl
   through Caddy with the `X-Feature` cookie) when the containers are up. For a headed
-  browser session against the feature URL, use the `sandbox-tools:sandbox-feature-test`
+  browser session against the feature URL, use the `werkmeister:feature-test`
   plugin skill; the URL and cookie are in `.sandbox/sandbox-context.md`. That applies to
   URL-addressed services only; libraries, CLIs and extensions follow the "How to validate"
   section of the same file.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "werkmeister",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Multi-feature concurrent development orchestrator CLI tool",
   "type": "module",
   "engines": {
@@ -53,7 +53,7 @@
     "@types/node": "^22.13.0",
     "commander": "^13.1.0",
     "esbuild": "^0.24.0",
-    "sandbox-core": "^0.14.0",
+    "werkmeister-core": "^0.15.0",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
     "vitest": "^3.0.0",

package/werkmeister

@@ -5,7 +5,7 @@ set -euo pipefail
 
 # Load machine-global config exports (generated by `sandbox config` from
 # ~/.sandbox/config.yaml) so the CLI inherits SANDBOX_* without a per-client env block.
-# ~/.werkmeister wins when it exists, else ~/.sandbox (SW-7), same as sandbox-core's dotDir.
+# ~/.werkmeister wins when it exists, else ~/.sandbox (SW-7), same as werkmeister-core's dotDir.
 for d in .werkmeister .sandbox; do
     if [ -d "$HOME/$d" ]; then
         [ -f "$HOME/$d/env.sh" ] && . "$HOME/$d/env.sh"
@@ -74,7 +74,7 @@ fi
 
 # `dashboard` and `mcp` are sibling apps, not CLI subcommands: each has its own
 # dist/main.js. Both are launched here over stdio, which is what an MCP client
-# (Claude Desktop, the sandbox-tools plugin) needs -- their HTTP modes are
+# (Claude Desktop, the werkmeister plugin) needs -- their HTTP modes are
 # started by `sandbox connect` as managed WebApps, which execs those same
 # entrypoints directly without --stdio. That is why neither verb takes a
 # transport flag; extra args are still forwarded, so an explicit --stdio from an
@@ -85,7 +85,7 @@ fi
 # package as dist/mcp.js (esbuild.mjs), so `mcp` always has a target. The
 # dashboard (Jira, PRs, MCP Apps UI) is checkout-only; where it is missing its
 # verb falls back to the headless server, which carries the same sandbox-*
-# verbs, so the sandbox-tools plugin's `sandbox dashboard` MCP entry keeps
+# verbs, so the werkmeister plugin's `w9r dashboard` MCP entry keeps
 # working on a package install instead of failing at every session start.
 case "${1:-}" in
     dashboard) app_dir="sandbox-dashboard" ;;