From ecfbaa62b69dac6f2e96465b2d57f99fec72a92f Mon Sep 17 00:00:00 2001
From: saravanakumardb1 <saravanakumardb1@users.noreply.github.com>
Date: Thu, 5 Mar 2026 13:16:07 -0800
Subject: [PATCH] =?UTF-8?q?docs(mcp-server):=20post-audit=20=E2=80=94=20do?=
 =?UTF-8?q?cument=20/api=20prefix=20bug,=20lysnrai=20path=20fixes,=20+17?=
 =?UTF-8?q?=20gap=20tools?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docs/MCP+A2A/EXECUTION_CHECKLIST.md | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/docs/MCP+A2A/EXECUTION_CHECKLIST.md b/docs/MCP+A2A/EXECUTION_CHECKLIST.md
index 68b04958..3ec44ec9 100644
--- a/docs/MCP+A2A/EXECUTION_CHECKLIST.md
+++ b/docs/MCP+A2A/EXECUTION_CHECKLIST.md
@@ -132,7 +132,32 @@ New files per product: `src/lib/<product>-client.ts` + `src/modules/<product>/<p
 
 - [x] 6 new env vars in `config.ts` + `.env.example`: `MINDLYST/LYSNRAI/JARVISJR/CHRONOMIND/NOMGAP/PEAKPULSE_BACKEND_URL`
 
-## 7) Phase 3+ quick sanity checks
+## 7) Phase 3 Post-Audit — Bug Fixes & Gap Fill ✅ COMPLETE
+
+### Commit c902266 — Critical bug fixes
+
+- [x] **`/api` prefix missing on ALL 6 product clients** — every route was 404 in production
+  - Root cause: all backends register routes with `{ prefix: '/api' }` but clients called paths without it
+  - Fix: single-line change per client — `${BASE_URL}/api${path}` in all 6 fetch helpers
+- [x] **LysnrAI client path `/organizations` → `/orgs`** — backend route is `GET /orgs` not `/organizations`
+- [x] **LysnrAI `lysnraiOrgsList` / `lysnraiApiTokensList` had fake `total` field** — backend doesn't return it
+- [x] **`lysnraiApiTokenRotate` calls non-existent endpoint** — `/api-tokens/:id/rotate` doesn't exist in backend; function and `lysnrai.apiTokens.rotate` tool both removed
+- [x] **`server.ts` description** — updated to include chronomind/nomgap/peakpulse namespaces
+
+### Commit 481760f — DOMAIN_PRODUCTS.md gap fill (+17 tools, total now 52)
+
+| Product        | New tools                                                                                                                                          |
+| -------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **MindLyst**   | `mindlyst.memory.get` — single item + full TriageResult                                                                                            |
+| **LysnrAI**    | `lysnrai.transcripts.get`, `lysnrai.orgs.get`                                                                                                      |
+| **JarvisJr**   | `jarvis.agents.create`, `jarvis.marketplace.listPending`, `jarvis.marketplace.certify`, `jarvis.marketplace.suspend`, `jarvis.marketplace.feature` |
+| **ChronoMind** | `chronomind.timers.create`, `chronomind.households.list`                                                                                           |
+| **NomGap**     | `nomgap.protocols.list`, `nomgap.bodyStages.list`                                                                                                  |
+| **PeakPulse**  | `peakpulse.sessions.get`                                                                                                                           |
+
+All new client functions verified against actual backend route files before addition.
+
+## 8) Phase 3+ quick sanity checks
 
 - If you make telemetry policy-aware clients:
   - ensure `GET /api/telemetry/config` consumption is cached (ETag) and privacy-safe.