fix: pre-commit stages only originally-staged files; add .npmrc

[ochafik]

Bug 1: Pre-commit hook stages unrelated WIP

.husky/pre-commit line 21 ran:

git diff --name-only --diff-filter=M | xargs -r git add

This stages every modified tracked file in the worktree, not just files that prettier:fix or build:all touched. If a contributor has unstaged WIP in other files, it gets silently swept into the commit.

Fix: Capture git diff --name-only --cached before running build/prettier, then only re-add that set. src/generated/ is staged explicitly since build:all regenerates it from spec.types.ts.

Manual test

=== BEFORE hook logic ===
--- staged ---
README.md
--- unstaged (WIP) ---
src/app.ts

=== After simulated prettier touches both files ===
staged:   README.md
unstaged: README.md, src/app.ts

=== AFTER new hook logic ===
--- staged ---
README.md              <- re-staged with prettier changes
--- unstaged ---
src/app.ts             <- WIP preserved

VERDICT: PASS

The OLD line 21 would have staged src/app.ts too (confirmed: it appears in git diff --name-only --diff-filter=M output).

Bug 2: No committed .npmrc

The maintainer's global npm config points to an internal registry, so a naive npm install writes non-public URLs into package-lock.json. The pre-commit hook detects this (line 11) but doesn't prevent it — hence the Docker regen dance in CLAUDE.md.

Fix: Commit a repo-root .npmrc with registry=https://registry.npmjs.org/. This overrides user-global config, so a plain npm i is now safe regardless of global settings.

The Docker regen remains useful for locking linux-amd64 optionalDependencies (sharp, rollup, bun) for CI, but is no longer required for registry purity. AGENTS.md updated to note this (CLAUDE.md is a symlink to AGENTS.md).

Files changed

• .husky/pre-commit — capture staged set before build, re-stage only that + src/generated/
• .npmrc — new, pins registry to npmjs.org
• AGENTS.md — note that .npmrc makes Docker regen optional

[pkg-pr-new]

Open in StackBlitz

@modelcontextprotocol/ext-apps

npm i https://pkg.pr.new/@modelcontextprotocol/ext-apps@538

@modelcontextprotocol/server-basic-preact

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-preact@538

@modelcontextprotocol/server-basic-react

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-react@538

@modelcontextprotocol/server-basic-solid

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-solid@538

@modelcontextprotocol/server-basic-svelte

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-svelte@538

@modelcontextprotocol/server-basic-vanillajs

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-vanillajs@538

@modelcontextprotocol/server-basic-vue

npm i https://pkg.pr.new/@modelcontextprotocol/server-basic-vue@538

@modelcontextprotocol/server-budget-allocator

npm i https://pkg.pr.new/@modelcontextprotocol/server-budget-allocator@538

@modelcontextprotocol/server-cohort-heatmap

npm i https://pkg.pr.new/@modelcontextprotocol/server-cohort-heatmap@538

@modelcontextprotocol/server-customer-segmentation

npm i https://pkg.pr.new/@modelcontextprotocol/server-customer-segmentation@538

@modelcontextprotocol/server-debug

npm i https://pkg.pr.new/@modelcontextprotocol/server-debug@538

@modelcontextprotocol/server-map

npm i https://pkg.pr.new/@modelcontextprotocol/server-map@538

@modelcontextprotocol/server-pdf

npm i https://pkg.pr.new/@modelcontextprotocol/server-pdf@538

@modelcontextprotocol/server-scenario-modeler

npm i https://pkg.pr.new/@modelcontextprotocol/server-scenario-modeler@538

@modelcontextprotocol/server-shadertoy

npm i https://pkg.pr.new/@modelcontextprotocol/server-shadertoy@538

@modelcontextprotocol/server-sheet-music

npm i https://pkg.pr.new/@modelcontextprotocol/server-sheet-music@538

@modelcontextprotocol/server-system-monitor

npm i https://pkg.pr.new/@modelcontextprotocol/server-system-monitor@538

@modelcontextprotocol/server-threejs

npm i https://pkg.pr.new/@modelcontextprotocol/server-threejs@538

@modelcontextprotocol/server-transcript

npm i https://pkg.pr.new/@modelcontextprotocol/server-transcript@538

@modelcontextprotocol/server-video-resource

npm i https://pkg.pr.new/@modelcontextprotocol/server-video-resource@538

@modelcontextprotocol/server-wiki-explorer

npm i https://pkg.pr.new/@modelcontextprotocol/server-wiki-explorer@538

commit: e11e067

[jonathanhefner]

.husky/pre-commit doesn't account for partially staged files (i.e., staged chunks), but that's no worse than before.

(Personally, I find .husky/pre-commit to be too invasive, so I disable it on my machine.)