world-building-framework 0.2.2 → 0.2.3

package/README.md

@@ -26,7 +26,7 @@ npm install
 - `.gitignore`
 - `AGENTS.md`
 - a GitHub Pages workflow
-- Obsidian settings that hide tooling folders
+- Obsidian settings that keep `node_modules/` out of Obsidian's search and graph (Settings → Files and links → Excluded files)
 
 Then put it on GitHub:
 

package/dist/cli/commands/init.js

@@ -83,7 +83,8 @@ export async function runInit(options = {}) {
             outcome.skipped.push(".gitignore");
         }
     }
-    // Obsidian: hide tooling folders, so it doesn't list package READMEs.
+    // Obsidian: "Excluded files" (userIgnoreFilters), so package READMEs under node_modules
+    // don't show up in search and the graph view. Obsidian skips dot-folders like .wbf on its own.
     if (!exists(".obsidian/app.json")) {
         await writeRepoFile(dir, ".obsidian/app.json", JSON.stringify({ userIgnoreFilters: ["node_modules/", ".wbf/"] }, null, 2) + "\n");
         outcome.created.push(".obsidian/app.json");

package/dist/cli/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module";
 import { Command } from "commander";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
 import { createMcpServer } from "../mcp/server.js";
 import { runSchema } from "./commands/schema.js";
 import { runInit } from "./commands/init.js";

package/dist/mcp/server.d.ts

@@ -1,4 +1,4 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 /**
  * What every agent connecting to the server is told up front: the
  * world-vault skill's rules (skills/world-vault/SKILL.md), in terms of this

package/dist/mcp/server.js

@@ -1,6 +1,6 @@
 import { readFile } from "node:fs/promises";
 import path from "node:path";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 import { z } from "zod";
 import { readVaultFile } from "../core/vault/index.js";
 import { runSchema } from "../cli/commands/schema.js";
@@ -79,17 +79,17 @@ export function createMcpServer(options) {
     server.registerTool("search", {
         title: "Search the world",
         description: "Keyword search over titles, aliases and text. Each result has the file's id (the UUID you link with), title and score, and for entities entityType and tags.",
-        inputSchema: {
+        inputSchema: z.object({
             query: z.string().min(1).describe("Search terms"),
             tags: z.array(z.string()).optional().describe("Only files carrying all of these tags"),
             limit: z.number().int().positive().optional().describe("Maximum number of results"),
-        },
+        }),
         annotations: readOnly,
     }, ({ query, tags, limit }) => run(async () => ({ result: await runSearch(vault, query, { tags, limit }) })));
     server.registerTool("read", {
         title: "Read a file",
         description: "One file's id, frontmatter and body. Call it before update, which needs the file's complete new content.",
-        inputSchema: { id: z.string().describe("The file's UUID") },
+        inputSchema: z.object({ id: z.string().describe("The file's UUID") }),
         annotations: readOnly,
     }, ({ id }) => run(async () => {
         const file = await readVaultFile(resolveVaultDir(vault), id);
@@ -98,11 +98,11 @@ export function createMcpServer(options) {
     server.registerTool("validate", {
         title: "Validate",
         description: "Checks without writing anything. With frontmatter (and body): a candidate file, exactly as create would check it. With id: one existing file. With neither: the whole world.",
-        inputSchema: {
+        inputSchema: z.object({
             id: z.string().optional().describe("Check one existing file"),
             frontmatter: fileInput.frontmatter.optional(),
             body: fileInput.body,
-        },
+        }),
         annotations: readOnly,
     }, ({ id, frontmatter, body }) => run(async () => {
         const candidate = frontmatter ? { frontmatter, body } : undefined;
@@ -113,7 +113,7 @@ export function createMcpServer(options) {
     server.registerTool("create", {
         title: "Create a file",
         description: "Creates a new entity or event file under a new UUID, after the same checks as validate; on any error nothing is written. Returns the new id. Show the user the content and get their go-ahead first.",
-        inputSchema: fileInput,
+        inputSchema: z.object(fileInput),
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
     }, ({ frontmatter, body }) => run(async () => {
         const outcome = await runCreate(vault, { frontmatter, body });
@@ -122,7 +122,7 @@ export function createMcpServer(options) {
     server.registerTool("update", {
         title: "Correct a file",
         description: "Replaces an existing file's whole content, for corrections only; a change in the story is a new version (create with supersedes and causedBy). Call read first and send the complete content: fields you leave out are removed. type can't change. A changed title is also rewritten in other files' links. Show the user the change and get their go-ahead first.",
-        inputSchema: { id: z.string().describe("The file's UUID"), ...fileInput },
+        inputSchema: z.object({ id: z.string().describe("The file's UUID"), ...fileInput }),
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },
     }, ({ id, frontmatter, body }) => run(async () => {
         const outcome = await runUpdate(vault, id, { frontmatter, body });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "world-building-framework",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Build, search and publish fictional worlds from a vault of Markdown files: the wbf CLI and its core engine.",
   "license": "UNLICENSED",
   "type": "module",
@@ -32,7 +32,7 @@
     "prepublishOnly": "npm run typecheck && npm test"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.32.2",
+    "@modelcontextprotocol/server": "^2.4.0",
     "better-sqlite3": "^13.0.3",
     "commander": "^15.0.0",
     "gray-matter": "^4.0.3",
@@ -40,6 +40,7 @@
     "zod": "^4.6.7"
   },
   "devDependencies": {
+    "@modelcontextprotocol/client": "^2.4.0",
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^22.20.1",
     "glob": "^13.0.6",

package/templates/publish.yml

@@ -21,25 +21,30 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
+        with:
+          # Nothing here pushes, so the git token isn't kept around.
+          persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      # No npm cache: setup-node advises against caching in workflows with
+      # Pages and id-token permissions (cache poisoning), and the install is small.
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
-          cache: npm
+          package-manager-cache: false
 
       - name: Install the framework (version pinned in package.json)
         run: npm ci
 
       # Runs before publish so its base_url output (the Pages site's real
       # address) can be handed to Quartz.
-      - uses: actions/configure-pages@v5
+      - uses: actions/configure-pages@v6
         id: pages
 
       - name: Publish every build variant
         run: npx wbf publish --output ./site --base-url "${{ steps.pages.outputs.base_url }}"
 
-      - uses: actions/upload-pages-artifact@v3
+      - uses: actions/upload-pages-artifact@v5
         with:
           path: ./site
 
@@ -50,5 +55,5 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
-      - uses: actions/deploy-pages@v4
+      - uses: actions/deploy-pages@v5
         id: deployment