@amirhosseinnateghi/vibed-mcp 0.1.5 → 0.1.7

package/dist/index.js

@@ -10335,13 +10335,19 @@ var turnAttachmentSchema = external_exports.object({
   // NUL bytes break Postgres jsonb (and mean binary-not-text) — strip defensively.
   text: external_exports.string().max(5e4).transform((t) => t.replace(/\u0000/g, "")).optional()
 });
+var voiceInputSchema = external_exports.object({
+  key: external_exports.string().min(1).max(300),
+  mime: external_exports.string().max(100).default("audio/webm")
+});
 var createTurnRequestSchema = external_exports.object({
   clientTurnId: external_exports.string().uuid(),
   content: external_exports.string().max(4e3).default(""),
   attachments: external_exports.array(turnAttachmentSchema).max(6).optional(),
+  // A voice turn carries no text yet — the worker transcribes `voice` first (م۷).
+  voice: voiceInputSchema.optional(),
   model: external_exports.string().max(100).optional()
-}).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0, {
-  message: "Send a message or an attachment."
+}).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0 || !!v.voice, {
+  message: "Send a message, an attachment, or a voice recording."
 });
 var builderAttachmentSchema = external_exports.object({
   kind: external_exports.enum(["image", "file", "audio"]),
@@ -10475,6 +10481,13 @@ var buildEventSchema = external_exports.discriminatedUnion("type", [
   }),
   /** Friendly status chip ("index.html", "Fixing a couple of things…"). */
   external_exports.object({ ...base, type: external_exports.literal("status"), summary: external_exports.string() }),
+  /**
+   * The user's spoken words, transcribed server-side (م۷). A voice turn starts
+   * with empty `userText` and a "🎤 Transcribing…" bubble; this event fills the
+   * user bubble with the transcript the moment the worker finishes transcribing,
+   * before the build's prose begins.
+   */
+  external_exports.object({ ...base, type: external_exports.literal("transcript"), text: external_exports.string() }),
   /** First-message category classification. */
   external_exports.object({ ...base, type: external_exports.literal("category"), category: external_exports.string() }),
   /** The validated draft landed. Preview loads it from the draft URL. */
@@ -11178,9 +11191,94 @@ function formatReport(result) {
       out.push(`  \u2022 \u2026and ${result.inlineWarnings.length - 12} more`);
     }
   }
+  const usesBrowserStorage = [...result.warnings.map((w) => w.message), ...result.inlineWarnings].some(
+    (m) => /BROWSER_STORAGE|localStorage|sessionStorage|indexedDB/i.test(m)
+  );
+  if (usesBrowserStorage) {
+    out.push(
+      "",
+      "\u2139 Uses browser storage (blocked in the sandbox). Port it to `window.vibed.storage` \u2014 run `vibed storage` (or the vibed_storage_guide MCP tool) for the local + shared SDK."
+    );
+  }
   return out.join("\n");
 }
 
+// ../cli/src/storageGuide.ts
+var STORAGE_GUIDE = `# vibed storage \u2014 add persistence to a vibe (\`window.vibed.storage\`)
+
+A vibe is ONE static sandboxed HTML file with no backend. \`localStorage\`,
+\`sessionStorage\`, \`indexedDB\`, and cookies are BLOCKED \u2014 they throw in the
+sandbox (\`vibed check\` warns \`BROWSER_STORAGE\`). For anything you'd persist,
+use the injected \`window.vibed.storage\` SDK instead. The platform is the
+backend; you write zero server code.
+
+## Two rules that apply to EVERY call
+1. Every call returns a Promise that can reject \u2014 always guard it. When the vibe
+   runs OUTSIDE vibed (e.g. a local file, your \`vibed draft\`/\`preview\`), calls
+   reject with \`{ code: "no_host" }\`. The vibe must stay playable standalone, so
+   treat missing storage as "no saved data yet", never a crash.
+2. WRITES require the viewer to be signed in. If not, they reject with
+   \`{ code: "unauthenticated" }\` \u2014 catch it and show a gentle "sign in to save"
+   nudge. READS of shared data work for everyone.
+
+Publishing auto-detects SDK usage and turns storage on for the post \u2014 no flags.
+
+## Tier 1 \u2014 \`vibed.storage.local\`  (LOCAL: private, per-viewer, per-post)
+Each viewer gets their own private bucket for THIS post. Nobody else can read it.
+Use for: this player's high score, their settings, "resume where I left off".
+\`\`\`js
+await vibed.storage.local.set("best", 8200);
+const best = await vibed.storage.local.get("best");   // null if never set
+await vibed.storage.local.delete("best");
+\`\`\`
+
+## Tier 2 \u2014 \`vibed.storage.shared\`  (GLOBAL: one collective store for the whole post)
+Data every viewer of the post shares \u2014 leaderboards, votes, guestbooks, shared
+state. Organized into named "collections" (like tables) you invent.
+\`\`\`js
+// key/value doc with optimistic concurrency
+await vibed.storage.shared.set("state", "doc", { phase: "open" });        // \u2192 { value, version, ... }
+await vibed.storage.shared.set("state", "doc", next, { ifVersion: 3 });   // rejects { code: "conflict" }
+const doc = await vibed.storage.shared.get("state", "doc");               // null if missing
+await vibed.storage.shared.delete("state", "doc");
+
+// append-only list + query (guestbook, bets, submissions)
+await vibed.storage.shared.append("bets", { pick: "Argentina", stake: 50 });
+const mine = await vibed.storage.shared.query("bets", { mine: true });
+const feed = await vibed.storage.shared.query("bets", { sort: "-created", limit: 30 });
+
+// counter (poll / reactions)
+const { num } = await vibed.storage.shared.increment("votes", "argentina", 1);
+
+// leaderboard: submit a score (keep the best), read the top, get MY rank
+await vibed.storage.shared.submit("leaderboard", { score, keep: "max", meta: { emoji: "\u{1F427}" } });
+const top  = await vibed.storage.shared.query("leaderboard", { sort: "-num", limit: 10 });
+const rank = await vibed.storage.shared.rank("leaderboard");   // { rank, of, score } | null
+
+// live updates (polling now): re-renders when the collection changes; returns an unsubscribe fn
+const off = vibed.storage.shared.subscribe("leaderboard", (r) => render(r.rows), { intervalMs: 4000 });
+\`\`\`
+
+## Who is watching
+\`\`\`js
+const me = await vibed.storage.identity();  // { id, signedIn, name? } \u2014 stable per viewer; identify entries
+const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post's context
+\`\`\`
+
+## Limits (free tier \u2014 design within these)
+- Each value must be JSON-serializable and under the per-value byte cap
+  (rejects \`{ code: "too_large" }\`); \`invalid\` if it can't be JSON-stringified.
+- shared collections are for structured game/app state, NOT open chat/DM/messaging.
+
+## Porting a project that used browser storage (the \`BROWSER_STORAGE\` warning)
+1. Find every \`localStorage\`/\`sessionStorage\`/\`indexedDB\`/cookie use.
+2. Per-viewer state (settings, progress, personal best) \u2192 \`vibed.storage.local\`.
+3. Anything others should see (scores to compare, shared counters, submissions)
+   \u2192 the matching \`vibed.storage.shared\` primitive above.
+4. Make every call \`await\` + \`try/catch\`, with a standalone fallback (no_host).
+5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
+`;
+
 // ../cli/src/login.ts
 import { spawn } from "node:child_process";
 import { platform } from "node:os";
@@ -11232,6 +11330,7 @@ import { homedir } from "node:os";
 import { join as join2 } from "node:path";
 import { mkdir, readFile as readFile2, writeFile, chmod } from "node:fs/promises";
 var DEFAULT_API = "https://vibed.city";
+var LEGACY_API_DEFAULTS = /* @__PURE__ */ new Set(["https://web-production-834c9.up.railway.app"]);
 var dir = () => join2(homedir(), ".vibed");
 var file = () => join2(dir(), "config.json");
 async function readFileConfig() {
@@ -11243,7 +11342,8 @@ async function readFileConfig() {
 }
 async function loadConfig(overrides = {}) {
   const fromFile = await readFileConfig();
-  const apiBase = (overrides.api || process.env.VIBED_API || fromFile.apiBase || DEFAULT_API).replace(/\/$/, "");
+  let apiBase = (overrides.api || process.env.VIBED_API || fromFile.apiBase || DEFAULT_API).replace(/\/$/, "");
+  if (LEGACY_API_DEFAULTS.has(apiBase)) apiBase = DEFAULT_API;
   const token = process.env.VIBED_TOKEN || fromFile.token;
   return { apiBase, token };
 }
@@ -11371,16 +11471,22 @@ async function deleteExperience(client, idOrUrl) {
 }
 
 // src/index.ts
-var SERVER_INFO = { name: "vibed", version: "0.1.5" };
+var SERVER_INFO = { name: "vibed", version: "0.1.7" };
 var PROTOCOL_VERSION = "2024-11-05";
 var CATEGORIES2 = ["Game", "Invitation", "Story", "News", "Quiz", "Tool", "Art", "Other"];
 var pendingLogin = null;
 var str = (v, d = "") => typeof v === "string" ? v : d;
 var bool = (v, d) => typeof v === "boolean" ? v : d;
 var TOOLS = [
+  {
+    name: "vibed_storage_guide",
+    description: "How to add PERSISTENCE to a vibe: leaderboards, votes/polls, saved progress/high scores, guestbooks, or any shared state. A vibe is one static sandboxed file \u2014 localStorage/sessionStorage/indexedDB/cookies and backend calls are BLOCKED \u2014 so use the injected window.vibed.storage SDK instead. Returns the full primer for both tiers: `local` (private, per-viewer) and `shared` (collective, per-post). Call this BEFORE writing any save/leaderboard/multiplayer feature, or when vibed_check warns BROWSER_STORAGE.",
+    inputSchema: { type: "object", properties: {} },
+    run: async () => STORAGE_GUIDE
+  },
   {
     name: "vibed_check",
-    description: "Bundle the project into a single HTML file and validate it against vibed's sandbox rules (no network/auth). Returns whether it's publishable and, if not, the blockers to fix. Run this before vibed_publish.",
+    description: "Bundle the project into a single HTML file and validate it against vibed's sandbox rules (no network/auth). Returns whether it's publishable and, if not, the blockers to fix. Run this before vibed_publish. If it warns BROWSER_STORAGE (localStorage etc. throw in the sandbox), call vibed_storage_guide and port to window.vibed.storage.",
     inputSchema: {
       type: "object",
       properties: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amirhosseinnateghi/vibed-mcp",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "vibed MCP server — make it vibed from any MCP client (Codex, Cursor, Gemini, …): check, login, and publish tools",
   "license": "MIT",
   "type": "module",