@amirhosseinnateghi/vibed-mcp 0.1.3 → 0.1.5

package/dist/index.js

@@ -1248,10 +1248,10 @@ var require_decode = __commonJS({
           this.state = EntityDecoderState.NumericDecimal;
           return this.stateNumericDecimal(str2, offset);
         };
-        EntityDecoder2.prototype.addToNumericResult = function(str2, start, end, base) {
+        EntityDecoder2.prototype.addToNumericResult = function(str2, start, end, base2) {
           if (start !== end) {
             var digitCount = end - start;
-            this.result = this.result * Math.pow(base, digitCount) + parseInt(str2.substr(start, digitCount), base);
+            this.result = this.result * Math.pow(base2, digitCount) + parseInt(str2.substr(start, digitCount), base2);
             this.consumed += digitCount;
           }
         };
@@ -6037,7 +6037,19 @@ var config = {
   // Light model that auto-tags the experience category. Falls back to a keyword
   // heuristic if the call fails.
   BUILDER_CLASSIFIER_MODEL: strEnv("BUILDER_CLASSIFIER_MODEL", "gemini-2.5-flash"),
-  BUILDER_MAX_TOKENS: intEnv("BUILDER_MAX_TOKENS", 8192),
+  // Speech-to-text model for the builder's voice input (docs/builder-architecture.md).
+  // Gemini 2.5 Flash transcribes the recorded clip via GapGPT's OpenAI-compatible
+  // chat API (an `input_audio` content part) — verified to accept the exact
+  // formats browsers produce (Chrome webm/opus, Safari mp4). It's multilingual,
+  // so Persian and English speech both work with no per-language config.
+  BUILDER_TRANSCRIBE_MODEL: strEnv("BUILDER_TRANSCRIBE_MODEL", "gemini-2.5-flash"),
+  // Upload cap for a voice clip. A minute of webm/opus is ~250KB; 8MB is ample
+  // headroom while still bounding what one request can hand the model.
+  BUILDER_TRANSCRIBE_MAX_BYTES: intEnv("BUILDER_TRANSCRIBE_MAX_BYTES", 8388608),
+  // Output budget per model call. 8k proved too small in prod — a rich game is
+  // ~7-8k tokens of file alone, and a truncated file used to slip through as a
+  // text dump. 24576 was probed OK against every catalog model on GapGPT.
+  BUILDER_MAX_TOKENS: intEnv("BUILDER_MAX_TOKENS", 24576),
   BUILDER_MAX_MESSAGES: intEnv("BUILDER_MAX_MESSAGES", 30),
   // Hard cap for a single build turn (across the model + one repair). The build
   // runs detached from the request, so this — not the browser — is what stops a
@@ -9779,23 +9791,23 @@ var ZodEffects = class extends ZodType {
     }
     if (effect.type === "transform") {
       if (ctx.common.async === false) {
-        const base = this._def.schema._parseSync({
+        const base2 = this._def.schema._parseSync({
           data: ctx.data,
           path: ctx.path,
           parent: ctx
         });
-        if (!isValid(base))
+        if (!isValid(base2))
           return INVALID;
-        const result = effect.transform(base.value, checkCtx);
+        const result = effect.transform(base2.value, checkCtx);
         if (result instanceof Promise) {
           throw new Error(`Asynchronous transform encountered during synchronous parse operation. Use .parseAsync instead.`);
         }
         return { status: status.value, value: result };
       } else {
-        return this._def.schema._parseAsync({ data: ctx.data, path: ctx.path, parent: ctx }).then((base) => {
-          if (!isValid(base))
+        return this._def.schema._parseAsync({ data: ctx.data, path: ctx.path, parent: ctx }).then((base2) => {
+          if (!isValid(base2))
             return INVALID;
-          return Promise.resolve(effect.transform(base.value, checkCtx)).then((result) => ({
+          return Promise.resolve(effect.transform(base2.value, checkCtx)).then((result) => ({
             status: status.value,
             value: result
           }));
@@ -10190,8 +10202,13 @@ var STORAGE = {
   // 256 KB
   /** Max records returnable in one query page. */
   QUERY_MAX_LIMIT: intEnv("STORE_QUERY_MAX_LIMIT", 100),
-  /** Whether anonymous (logged-out) shared writes may be enabled per post. */
-  ANON_WRITES_AVAILABLE: boolEnv("STORE_ANON_WRITES_AVAILABLE", false)
+  /**
+   * Platform kill-switch for anonymous shared writes. ON by default: the real
+   * gate is per-post owner opt-in (`anon_writes` + writePolicy `anyone`), so a
+   * post only accepts guest writes when its owner turns them on. Set the env to
+   * `false` to disable anon writes platform-wide regardless of per-post config.
+   */
+  ANON_WRITES_AVAILABLE: boolEnv("STORE_ANON_WRITES_AVAILABLE", true)
 };
 var COLLECTION_RE = /^[a-z0-9][a-z0-9:_-]{0,63}$/;
 var collectionSchemaStore = external_exports.string().regex(COLLECTION_RE, "invalid collection name");
@@ -10301,13 +10318,31 @@ var commentSchema = external_exports.object({
   parentId: external_exports.string().uuid().optional()
 });
 var eventSchema = external_exports.object({
-  kind: external_exports.enum(["impression", "play", "play_time", "share"]),
+  // "record"/"screenshot" fire when a viewer captures the vibe (see the in-iframe
+  // bridge capture flow, docs/architecture.md §5.4). Plain-text `viewEvents.kind`
+  // column, so new kinds need no migration.
+  kind: external_exports.enum(["impression", "play", "play_time", "share", "record", "screenshot"]),
   ms: external_exports.number().int().nonnegative().optional()
 });
 var createBuildSchema = external_exports.object({
   mode: external_exports.enum(["ai", "remix"]),
   remixParentId: external_exports.string().uuid().optional()
 });
+var turnAttachmentSchema = external_exports.object({
+  kind: external_exports.enum(["image", "audio", "file", "sketch"]),
+  key: external_exports.string().max(300).default(""),
+  name: external_exports.string().max(200),
+  // NUL bytes break Postgres jsonb (and mean binary-not-text) — strip defensively.
+  text: external_exports.string().max(5e4).transform((t) => t.replace(/\u0000/g, "")).optional()
+});
+var createTurnRequestSchema = external_exports.object({
+  clientTurnId: external_exports.string().uuid(),
+  content: external_exports.string().max(4e3).default(""),
+  attachments: external_exports.array(turnAttachmentSchema).max(6).optional(),
+  model: external_exports.string().max(100).optional()
+}).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0, {
+  message: "Send a message or an attachment."
+});
 var builderAttachmentSchema = external_exports.object({
   kind: external_exports.enum(["image", "file", "audio"]),
   name: external_exports.string().max(200),
@@ -10408,27 +10443,52 @@ var notifPrefsPatchSchema = external_exports.object({
   groups: external_exports.record(external_exports.enum(NOTIF_PREF_GROUPS), external_exports.boolean()).optional()
 });
 
-// ../shared/src/models.ts
-var BUILDER_MODELS = [
-  // ── Free (selectable now) — ONLY genuinely strong builders ─────────
-  // Curated 2026-07: every id verified against GapGPT with a real full-HTML
-  // build (not a ping). Weak/cheap models were removed on purpose — a bad
-  // first build costs more in user trust than the tokens save.
-  { id: "claude-sonnet-4-5-20250929", label: "Claude Sonnet 4.5", tier: "free", note: "Best for polished vibes \xB7 fast", vision: true },
-  { id: "claude-sonnet-4-20250514", label: "Claude Sonnet 4", tier: "free", note: "Reliable all-rounder", vision: true },
-  { id: "gpt-5.2", label: "GPT-5.2", tier: "free", note: "Strong generalist", vision: true },
-  { id: "gpt-5.3-codex", label: "GPT-5.3 Codex", tier: "free", note: "Code specialist" },
-  { id: "gemini-2.5-pro", label: "Gemini 2.5 Pro", tier: "free", note: "Great UI sense", vision: true },
-  { id: "deepseek-v4-pro", label: "DeepSeek V4 Pro", tier: "free", note: "Strong coder \xB7 great value" },
-  { id: "qwen3-coder-480b-a35b-instruct", label: "Qwen3 Coder 480B", tier: "free", note: "Fast, capable coder" },
-  // ── Subscription (locked until billing is enabled) — premium ──────
-  // Opus 4.8 is owner-only early access: locked for everyone, live for the owner.
-  { id: "claude-opus-4-8", label: "Claude Opus 4.8", tier: "subscription", note: "Top quality", vision: true, ownerOnly: true },
-  { id: "gpt-5.2-pro", label: "GPT-5.2 Pro", tier: "subscription", note: "Premium" },
-  { id: "gemini-3-pro-preview", label: "Gemini 3 Pro", tier: "subscription", note: "Premium", vision: true }
+// ../shared/src/builderEvents.ts
+var BUILD_EVENT_VERSION = 1;
+var BUILD_PHASES = [
+  "queued",
+  // accepted, waiting for a worker slot
+  "thinking",
+  // model connected, no visible output yet (keep-alives flowing)
+  "writing",
+  // streaming the vibe's code/prose
+  "validating",
+  // sandbox pass on the produced artifact
+  "repairing"
+  // one automatic fix round after a validation failure
 ];
-var FREE_IDS = new Set(BUILDER_MODELS.filter((m) => m.tier === "free").map((m) => m.id));
-var OWNER_MODEL_IDS = new Set(BUILDER_MODELS.filter((m) => m.ownerOnly).map((m) => m.id));
+var base = { v: external_exports.literal(BUILD_EVENT_VERSION), turnId: external_exports.string() };
+var buildEventSchema = external_exports.discriminatedUnion("type", [
+  /** Assistant prose delta (never contains the HTML code block). */
+  external_exports.object({ ...base, type: external_exports.literal("token"), text: external_exports.string() }),
+  /**
+   * Honest heartbeat, ~every 2s while the turn runs: real elapsed ms, real
+   * output-token count, and the executor's actual phase. The UI renders this
+   * as a live counter — a number that moves because work is happening.
+   */
+  external_exports.object({
+    ...base,
+    type: external_exports.literal("progress"),
+    phase: external_exports.enum(BUILD_PHASES),
+    elapsedMs: external_exports.number(),
+    tokensOut: external_exports.number()
+  }),
+  /** Friendly status chip ("index.html", "Fixing a couple of things…"). */
+  external_exports.object({ ...base, type: external_exports.literal("status"), summary: external_exports.string() }),
+  /** First-message category classification. */
+  external_exports.object({ ...base, type: external_exports.literal("category"), category: external_exports.string() }),
+  /** The validated draft landed. Preview loads it from the draft URL. */
+  external_exports.object({ ...base, type: external_exports.literal("artifact"), artifactKey: external_exports.string() }),
+  /** Terminal: failure with taxonomy code + human message. */
+  external_exports.object({
+    ...base,
+    type: external_exports.literal("error"),
+    code: external_exports.string(),
+    message: external_exports.string()
+  }),
+  /** Terminal: success. */
+  external_exports.object({ ...base, type: external_exports.literal("done") })
+]);
 
 // ../shared/src/i18n.ts
 var en = {
@@ -10462,6 +10522,21 @@ var en = {
   "share.title": "Share",
   "share.copyLink": "Copy link",
   "share.copied": "Link copied",
+  "capture.record": "Record",
+  "capture.screenshot": "Screenshot",
+  "capture.recording": "Recording",
+  "capture.stop": "Stop",
+  "capture.preparing": "Preparing\u2026",
+  "capture.processing": "Finishing\u2026",
+  "capture.preview.videoTitle": "Your clip",
+  "capture.preview.imageTitle": "Your screenshot",
+  "capture.save": "Save",
+  "capture.shareVia": "Share via\u2026",
+  "capture.retry": "Try again",
+  "capture.error": "Capture failed \u2014 try again.",
+  "capture.allowShare": "Allow \u201CShare this tab\u201D to record \u2014 it captures just the vibe.",
+  "capture.pickTab": "Choose \u201CThis Tab\u201D so it records only the vibe.",
+  "capture.unsupported": `This ${ITEM.one} can't be captured yet. Try again in a moment.`,
   "create.title": "Create",
   "create.buildWithAI": "Build with AI",
   "create.import": "Import",
@@ -10653,6 +10728,15 @@ function validate(html, opts) {
     errors.push({ code: "NOT_HTML", message: "Content is not parseable as HTML." });
     return { ok: false, errors, warnings };
   }
+  const scriptOpens = (html.match(/<script\b/gi) ?? []).length;
+  const scriptCloses = (html.match(/<\/script\s*>/gi) ?? []).length;
+  if (scriptOpens > scriptCloses) {
+    errors.push({
+      code: "TRUNCATED_DOC",
+      message: "The file ends mid-<script> \u2014 it looks cut off. Regenerate or paste the complete file."
+    });
+    return { ok: false, errors, warnings };
+  }
   if (on("frames") && root.querySelector("iframe, frame, object, embed")) {
     errors.push({
       code: "FRAME_TAG",
@@ -11147,7 +11231,7 @@ async function apiFetch({ apiBase, token }, method, path, body) {
 import { homedir } from "node:os";
 import { join as join2 } from "node:path";
 import { mkdir, readFile as readFile2, writeFile, chmod } from "node:fs/promises";
-var DEFAULT_API = "https://web-production-834c9.up.railway.app";
+var DEFAULT_API = "https://vibed.city";
 var dir = () => join2(homedir(), ".vibed");
 var file = () => join2(dir(), "config.json");
 async function readFileConfig() {
@@ -11256,22 +11340,38 @@ function normalizeCategory(input) {
   const match = CATEGORIES.find((c) => c.toLowerCase() === input.toLowerCase());
   return match ?? "Other";
 }
-async function publishArtifact(client, html, meta, projectDir) {
-  const imported = await apiFetch(client, "POST", "/imports", { html });
+async function importDraft(client, html) {
+  const r = await apiFetch(client, "POST", "/imports", { html });
+  return { draftArtifactKey: r.draftArtifactKey, previewUrl: r.previewUrl };
+}
+async function publishDraft(client, draftArtifactKey, meta, html, projectDir) {
   const exp = await apiFetch(client, "POST", "/experiences", {
-    title: meta.title?.trim() || inferTitle(html, projectDir),
+    title: meta.title?.trim() || (html ? inferTitle(html, projectDir ?? ".") : "Untitled"),
     caption: meta.caption ?? "",
     category: normalizeCategory(meta.category),
     tags: meta.tags ?? [],
     remixable: meta.remixable ?? true,
     visibility: meta.visibility ?? "public",
-    draftArtifactKey: imported.draftArtifactKey
+    draftArtifactKey
   });
   return { id: exp.id, status: exp.status, url: `${client.apiBase}/e/${exp.id}` };
 }
+async function publishArtifact(client, html, meta, projectDir) {
+  const { draftArtifactKey } = await importDraft(client, html);
+  return publishDraft(client, draftArtifactKey, meta, html, projectDir);
+}
+function experienceIdFrom(input) {
+  const m = input.match(/\/e\/([0-9a-f-]{36})/i);
+  return (m?.[1] ?? input.trim()).toLowerCase();
+}
+async function deleteExperience(client, idOrUrl) {
+  const id = experienceIdFrom(idOrUrl);
+  await apiFetch(client, "DELETE", `/experiences/${id}`);
+  return id;
+}
 
 // src/index.ts
-var SERVER_INFO = { name: "vibed", version: "0.1.0" };
+var SERVER_INFO = { name: "vibed", version: "0.1.5" };
 var PROTOCOL_VERSION = "2024-11-05";
 var CATEGORIES2 = ["Game", "Invitation", "Story", "News", "Quiz", "Tool", "Art", "Other"];
 var pendingLogin = null;
@@ -11346,12 +11446,47 @@ After the user approves, call vibed_login_wait.`;
       }
     }
   },
+  {
+    name: "vibed_draft",
+    description: "Bundle the project and upload it as a PRIVATE draft, returning a hosted, sandboxed PREVIEW link (\u2026/p/<id>/) and a draftKey. Publishes nothing \u2014 the link is in no feed, profile, or search; only someone with it can open it. Show the preview to the user, then call vibed_publish with the returned draftKey once they approve. Requires sign-in.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: { type: "string", description: "Project directory (default: current directory)" },
+        entry: { type: "string" },
+        build: { type: "boolean" },
+        api: { type: "string", description: "API base URL (default: production)" }
+      }
+    },
+    run: async (a) => {
+      const dir2 = resolve2(str(a.path, "."));
+      const cfg = await loadConfig({ api: str(a.api) || void 0 });
+      if (!cfg.token) return "Not signed in. Use vibed_login first.";
+      const result = await bundleProject(dir2, {
+        entry: str(a.entry) || void 0,
+        build: bool(a.build, true),
+        onLog: (m) => process.stderr.write(m + "\n")
+      });
+      if (!result.ok || !result.html) {
+        return `No preview \u2014 the project isn't vibeable yet.
+
+${formatReport(result)}`;
+      }
+      const d = await importDraft({ apiBase: cfg.apiBase, token: cfg.token }, result.html);
+      return `\u2713 Private preview (not published): ${d.previewUrl ?? "(no preview URL)"}
+Show it to the user. To publish it, call vibed_publish with draftKey: ${d.draftArtifactKey}`;
+    }
+  },
   {
     name: "vibed_publish",
-    description: "Bundle the project and publish it as a vibed Experience. Requires sign-in (vibed_whoami / vibed_login). Confirm the title and category with the user first \u2014 publishing is public. Returns the published URL, or the blockers if it isn't vibeable.",
+    description: "Publish a vibed Experience. Pass draftKey (from vibed_draft) to promote an already-previewed draft \u2014 the recommended flow \u2014 or pass path to bundle + publish in one shot. Requires sign-in (vibed_whoami / vibed_login). Confirm the title and category with the user first \u2014 publishing is public. Returns the published URL, or the blockers if it isn't vibeable.",
     inputSchema: {
       type: "object",
       properties: {
+        draftKey: {
+          type: "string",
+          description: "Promote this draft (from vibed_draft) instead of bundling path"
+        },
         path: { type: "string", description: "Project directory (default: current directory)" },
         title: { type: "string", description: "Title (default: page <title>/<h1>/folder name)" },
         category: { type: "string", enum: CATEGORIES2, description: "Experience category" },
@@ -11365,9 +11500,23 @@ After the user approves, call vibed_login_wait.`;
       }
     },
     run: async (a) => {
-      const dir2 = resolve2(str(a.path, "."));
       const cfg = await loadConfig({ api: str(a.api) || void 0 });
       if (!cfg.token) return "Not signed in. Use vibed_login first.";
+      const client = { apiBase: cfg.apiBase, token: cfg.token };
+      const meta = {
+        title: str(a.title) || void 0,
+        category: str(a.category) || void 0,
+        tags: Array.isArray(a.tags) ? a.tags : void 0,
+        caption: str(a.caption) || void 0,
+        remixable: bool(a.remixable, true),
+        visibility: bool(a.unlisted, false) ? "unlisted" : "public"
+      };
+      const draftKey = str(a.draftKey);
+      if (draftKey) {
+        const outcome2 = await publishDraft(client, draftKey, meta);
+        return `\u2713 Published (${outcome2.status}): ${outcome2.url}`;
+      }
+      const dir2 = resolve2(str(a.path, "."));
       const result = await bundleProject(dir2, {
         entry: str(a.entry) || void 0,
         build: bool(a.build, true),
@@ -11378,21 +11527,29 @@ After the user approves, call vibed_login_wait.`;
 
 ${formatReport(result)}`;
       }
-      const outcome = await publishArtifact(
-        { apiBase: cfg.apiBase, token: cfg.token },
-        result.html,
-        {
-          title: str(a.title) || void 0,
-          category: str(a.category) || void 0,
-          tags: Array.isArray(a.tags) ? a.tags : void 0,
-          caption: str(a.caption) || void 0,
-          remixable: bool(a.remixable, true),
-          visibility: bool(a.unlisted, false) ? "unlisted" : "public"
-        },
-        dir2
-      );
+      const outcome = await publishArtifact(client, result.html, meta, dir2);
       return `\u2713 Published (${outcome.status}): ${outcome.url}`;
     }
+  },
+  {
+    name: "vibed_delete",
+    description: "Delete one of your vibed posts, by experience id or a \u2026/e/<id> share URL. Owner-only (the server rejects deleting someone else's post). Destructive \u2014 confirm the specific post with the user first. Requires sign-in.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        target: { type: "string", description: "Experience id or https://\u2026/e/<id> URL" },
+        api: { type: "string", description: "API base URL (default: production)" }
+      },
+      required: ["target"]
+    },
+    run: async (a) => {
+      const target = str(a.target);
+      if (!target) return "Provide the post's id or its \u2026/e/<id> URL.";
+      const cfg = await loadConfig({ api: str(a.api) || void 0 });
+      if (!cfg.token) return "Not signed in. Use vibed_login first.";
+      const id = await deleteExperience({ apiBase: cfg.apiBase, token: cfg.token }, target);
+      return `\u2713 Deleted post ${id}.`;
+    }
   }
 ];
 function write(msg) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amirhosseinnateghi/vibed-mcp",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "vibed MCP server — make it vibed from any MCP client (Codex, Cursor, Gemini, …): check, login, and publish tools",
   "license": "MIT",
   "type": "module",