refactor: reduce root package scripts by 31% (#939)

* refactor: reduce root package scripts

* docs: publish runtime architecture review (#940)

* docs: attach architecture review to issue 937

* style: format issue 937 architecture report

* docs: attach runtime architecture review to issue 941

* chore: scope architecture report PR to issue 941

* fix: apply CodeRabbit auto-fixes

Fixed 2 file(s) based on 2 unresolved review comments.

Co-authored-by: CodeRabbit <noreply@coderabbit.ai>

* fix: format runtime-architecture-review HTML report

Co-authored-by: Christoph Kieslich <9047291+chrisdoc@users.noreply.github.com>

---------

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai>
Co-authored-by: Gitar <noreply@gitar.ai>
Co-authored-by: Christoph Kieslich <9047291+chrisdoc@users.noreply.github.com>

* refactor: centralize Hevy endpoint policy (#944)

* refactor: centralize Hevy endpoint policy

* refactor(client): simplify retry failure transition

* feat(operations): route routine listing through shared operation (#946)

* feat(operations): route routine listing through shared operation

* refactor(cli): split command dispatchers

* fix(cli): avoid async dispatch wrappers

* refactor(node): separate embedding from runtime bootstrap (#947)

* refactor(node): separate embedding from runtime bootstrap

* fix(node): clean up embedding test diagnostics

* fix(node): include runtime chunk in Sentry source maps

* refactor(node): centralize process lifecycle (#948)

* refactor(node): centralize process lifecycle

* fix(node): satisfy lifecycle static analysis

* feat(worker): add safe tool observation (#949)

* feat(worker): add safe tool observation

* refactor(worker): simplify safe observation projection

* feat(node): bound HTTP session admission (#951)

* feat(node): bound HTTP session admission

* refactor(node): split HTTP request admission paths

* fix(node): satisfy HTTP admission lint

* fix(node): remove HTTP handler lint regressions

* test(core): add initial runtime contract matrix (#952)

* test(core): add initial runtime contract matrix

* fix(test): satisfy contract matrix lint

* fix(test): remove redundant async wrappers

* style(test): format contract fixture

* feat(operations): add routine retrieval operation (#953)

* feat(operations): add routine retrieval operation

* fix(test): remove redundant routine async wrapper

* feat(operations): add workout retrieval operation (#954)

* feat(operations): add workout retrieval operation

* fix(test): remove redundant workout async wrappers

* style(test): format workout fixture

* fix(deps): bump hono from 4.12.31 to 4.13.1 (#955)

Bumps [hono](https://github.com/honojs/hono) from 4.12.31 to 4.13.1.
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.31...v4.13.1)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.13.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* test(worker): configure CIMD compatibility in Vitest (#950)

* test(worker): configure CIMD compatibility in Vitest

* fix(test): harden Cloudflare Vitest runtime setup

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai>
Co-authored-by: Gitar <noreply@gitar.ai>
Co-authored-by: Christoph Kieslich <9047291+chrisdoc@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: 5 people

.changeset/lean-root-scripts.md

@@ -0,0 +1,4 @@
+---
+---
+
+Reduce the root package script surface while preserving internal lanes as Nx targets.

CONTRIBUTING.md

@@ -17,7 +17,7 @@ COPY packages/hevy-client/ ./packages/hevy-client/
 COPY packages/operations/ ./packages/operations/
 COPY packages/core/ ./packages/core/
 COPY packages/node/ ./packages/node/
-RUN npm run build:standalone
+RUN npm run build:standalone --workspace hevy-mcp
 
 FROM node:24-alpine AS runtime
 

Dockerfile

@@ -41,17 +41,16 @@ lane model. The generated contributor tables in
 [`docs/test-lanes.md`](./test-lanes.md) show the current lane and aggregate
 membership, while `project.json` is the source for target dependencies. Do not
 copy a target or member count into prose: derive the current graph with
-`npx nx show project repository --json` (or `npx nx graph`). Root aliases remain
-supported compatibility entrypoints; workflow steps invoke the corresponding
-Nx targets, so command text is not duplicated in the policy model.
+`npx nx show project repository --json` (or `npx nx graph`). Contributor-facing
+root aliases remain supported compatibility entrypoints; internal-only lanes
+use their corresponding Nx targets directly, so command text is not duplicated
+in the policy model.
 
-Run the dependency rules independently, through the combined boundary lane,
-and exercise the representative pack target:
+Run the dependency rules through the combined boundary lane and exercise the
+representative pack target:
 
 ```sh
-npm run check:dependency-cruiser
 npm run check:boundaries
-npx nx run repository:check:dependency-cruiser
 npx nx run repository:check:boundaries
 npx nx run repository:pack:artifacts --skip-nx-cache
 ```

docs/nx-dependency-cruiser-spike.md

@@ -297,11 +297,13 @@ these names rather than duplicating selectors:
 	"test:live": "node --env-file-if-exists=.env scripts/run-live-vitest.mjs HEVY_API_KEY tests/integration/hevy-mcp.integration.test.ts",
 	"test:nightly": "node --env-file-if-exists=.env tests/nightly/test_hevy_mcp.mjs",
 	"test:performance": "npm run build && vitest run tests/performance/performance.test.ts",
-	"test:coverage": "unit and mocked MCP coverage via their named lanes",
-	"test:pr": "npm run test:unit && npm run test:mcp && npm run test:contract && npm run test:stdio && npm run test:pack"
+	"test:pr": "nx run repository:test:pr"
 }
 ```
 
+Coverage uses the unit and mocked MCP commands with their existing
+`--coverage.reportsDirectory` arguments instead of a separate wrapper alias.
+
 `test:live` and `test:nightly` must fail fast with a clear message when they are
 explicitly invoked without required credentials. They should not silently turn
 an intentional live job into a skipped success.

docs/test-lanes.md

@@ -37,9 +37,7 @@
 	"scripts": {
 		"prepare": "node scripts/install-git-hooks.mjs",
 		"inspect": "npm run build && npx @modelcontextprotocol/inspector@latest node --env-file .env packages/node/dist/cli.mjs",
-		"inspect:npm": "npx @modelcontextprotocol/inspector@latest npx hevy-mcp@latest",
 		"measure:tokens": "tsx scripts/measure-token-cost.ts",
-		"update-dependencies": "npx --yes npm-check-updates --deep -u && npm install",
 		"test": "npm run build && node --env-file-if-exists=.env node_modules/vitest/vitest.mjs --run",
 		"test:unit": "vitest run --exclude 'tests/integration/**' --exclude 'tests/performance/**'",
 		"test:release-unit": "vitest run --exclude 'tests/integration/**'",
@@ -57,12 +55,10 @@
 		"test:live": "node --env-file-if-exists=.env scripts/run-live-vitest.mjs HEVY_API_KEY tests/integration/hevy-mcp.integration.test.ts",
 		"test:nightly": "node --env-file-if-exists=.env tests/nightly/test_hevy_mcp.mjs",
 		"test:performance": "npm run build && vitest run tests/performance/performance.test.ts",
-		"test:coverage": "npm run test:unit -- --coverage --coverage.reportsDirectory=coverage/unit && npm run test:mcp -- --coverage --coverage.reportsDirectory=coverage/mocked",
 		"test:pr": "nx run repository:test:pr",
 		"openapi": "node ./scripts/openapi-spec.js",
 		"check:openapi": "node ./scripts/check-openapi-spec.js",
 		"build": "npm run build --workspace hevy-mcp",
-		"build:standalone": "npm run build:standalone --workspace hevy-mcp",
 		"build:client": "npm run build:client --workspace @hevy-mcp/hevy-client && prettier --ignore-unknown --write packages/hevy-client/src/generated",
 		"prepack": "npm run check:server-manifest && npm run build",
 		"start": "node --env-file .env packages/node/dist/cli.mjs",
@@ -72,26 +68,12 @@
 		"check:types": "tsc --noEmit && npm run check:types --workspaces --if-present",
 		"check:control-plane": "node scripts/check-control-plane.mjs",
 		"check:generated": "node ./scripts/check-generated-client.mjs",
-		"check:boundaries": "node scripts/check-package-boundaries.mjs && npm run check:dependency-cruiser",
-		"check:exports": "node scripts/check-package-exports.mjs",
-		"check:publint": "publint run --strict --pack npm packages/node && publint run --strict --pack npm packages/cli",
-		"check:package-changesets": "node scripts/check-package-changesets.mjs",
+		"check:boundaries": "node scripts/check-package-boundaries.mjs && depcruise --config .dependency-cruiser.cjs packages",
 		"build:packages": "npm run build --workspaces --if-present",
-		"check:dependency-cruiser": "depcruise --config .dependency-cruiser.cjs packages",
-		"check:changeset": "env -u GIT_DIR -u GIT_WORK_TREE changeset status --since=origin/main && env -u GIT_DIR -u GIT_WORK_TREE npm run check:package-changesets -- --since origin/main",
-		"nx:affected": "nx affected --target=control-plane --base=origin/main --head=HEAD",
-		"nx:control-plane": "nx run repository:control-plane",
+		"check:changeset": "env -u GIT_DIR -u GIT_WORK_TREE changeset status --since=origin/main && env -u GIT_DIR -u GIT_WORK_TREE node scripts/check-package-changesets.mjs --since origin/main",
 		"check:server-manifest": "node scripts/server-manifest.mjs check",
-		"sync:server-manifest": "node scripts/server-manifest.mjs sync",
-		"version:changesets": "changeset version && npm run sync:server-manifest",
-		"version": "npm run sync:server-manifest && git add server.json packages/node/server.json",
-		"version:patch": "npm version patch",
-		"version:minor": "npm version minor",
-		"version:major": "npm version major",
-		"release": "changeset publish",
-		"commit": "commit",
+		"version": "node scripts/server-manifest.mjs sync && git add server.json packages/node/server.json",
 		"worker:dev": "wrangler dev --x-new-config",
-		"worker:deploy": "cross-env WRANGLER_MODE=production wrangler deploy --x-new-config --env production",
 		"worker:dry-run": "wrangler deploy --x-new-config --dry-run --outdir .wrangler/dry-run && node scripts/check-worker-bundle.mjs"
 	},
 	"devDependencies": {

docs/testing-strategy.md

@@ -15,15 +15,27 @@
 			"inputs": ["boundaryInputs", "controlPlaneInputs"]
 		},
 		"check:exports": {
+			"executor": "nx:run-commands",
+			"options": {
+				"command": "node scripts/check-package-exports.mjs"
+			},
 			"inputs": ["packageManifestInputs", "controlPlaneInputs"]
 		},
 		"check:publint": {
+			"executor": "nx:run-commands",
+			"options": {
+				"command": "publint run --strict --pack npm packages/node && publint run --strict --pack npm packages/cli"
+			},
 			"cache": false,
 			"dependsOn": ["build", "@chrisdoc/hevy-cli:build"],
 			"parallelism": false,
 			"inputs": ["validationInputs"]
 		},
 		"check:package-changesets": {
+			"executor": "nx:run-commands",
+			"options": {
+				"command": "node scripts/check-package-changesets.mjs"
+			},
 			"cache": false,
 			"inputs": ["packageManifestInputs", "{workspaceRoot}/.changeset/**/*.md"]
 		},
@@ -170,6 +182,10 @@
 			"inputs": ["validationInputs"]
 		},
 		"sync:server-manifest": {
+			"executor": "nx:run-commands",
+			"options": {
+				"command": "node scripts/server-manifest.mjs sync"
+			},
 			"cache": false,
 			"outputs": [
 				"{workspaceRoot}/server.json",
@@ -178,14 +194,6 @@
 			],
 			"inputs": ["manifestInputs"]
 		},
-		"test:coverage": {
-			"cache": false,
-			"outputs": [
-				"{workspaceRoot}/coverage/unit",
-				"{workspaceRoot}/coverage/mocked"
-			],
-			"inputs": ["validationInputs"]
-		},
 		"test:performance": {
 			"cache": false,
 			"outputs": ["{workspaceRoot}/test-results/performance/summary.json"],
@@ -210,21 +218,33 @@
 			"inputs": ["validationInputs"]
 		},
 		"version:changesets": {
+			"executor": "nx:run-commands",
+			"options": {
+				"command": "changeset version && node scripts/server-manifest.mjs sync"
+			},
 			"cache": false,
 			"inputs": ["packageManifestInputs", "{workspaceRoot}/.changeset/**/*.md"]
 		},
 		"version": {
 			"cache": false,
 			"inputs": ["packageManifestInputs", "controlPlaneInputs"]
 		},
-		"version:major": { "cache": false },
-		"version:minor": { "cache": false },
-		"version:patch": { "cache": false },
 		"release": {
+			"executor": "nx:run-commands",
+			"options": {
+				"command": "changeset publish"
+			},
 			"cache": false,
 			"inputs": ["packageManifestInputs", "controlPlaneInputs"]
 		},
-		"worker:deploy": { "cache": false },
+		"worker:deploy": {
+			"executor": "nx:run-commands",
+			"options": {
+				"command": "cross-env WRANGLER_MODE=production wrangler deploy --x-new-config --env production"
+			},
+			"cache": false,
+			"inputs": ["validationInputs"]
+		},
 		"control-plane": {
 			"executor": "nx:noop",
 			"dependsOn": [

package.json

@@ -230,7 +230,6 @@
 		},
 		{
 			"id": "package-exports",
-			"alias": "check:exports",
 			"selector": {
 				"kind": "control-plane",
 				"check": "exports"
@@ -245,7 +244,6 @@
 		},
 		{
 			"id": "package-publint",
-			"alias": "check:publint",
 			"selector": {
 				"kind": "control-plane",
 				"check": "publint"
@@ -260,7 +258,6 @@
 		},
 		{
 			"id": "package-changesets",
-			"alias": "check:package-changesets",
 			"selector": {
 				"kind": "control-plane",
 				"check": "changesets"