@amirhosseinnateghi/vibed-mcp 0.1.6 → 0.1.7

package/dist/index.js

@@ -11191,9 +11191,94 @@ function formatReport(result) {
       out.push(`  \u2022 \u2026and ${result.inlineWarnings.length - 12} more`);
     }
   }
+  const usesBrowserStorage = [...result.warnings.map((w) => w.message), ...result.inlineWarnings].some(
+    (m) => /BROWSER_STORAGE|localStorage|sessionStorage|indexedDB/i.test(m)
+  );
+  if (usesBrowserStorage) {
+    out.push(
+      "",
+      "\u2139 Uses browser storage (blocked in the sandbox). Port it to `window.vibed.storage` \u2014 run `vibed storage` (or the vibed_storage_guide MCP tool) for the local + shared SDK."
+    );
+  }
   return out.join("\n");
 }
 
+// ../cli/src/storageGuide.ts
+var STORAGE_GUIDE = `# vibed storage \u2014 add persistence to a vibe (\`window.vibed.storage\`)
+
+A vibe is ONE static sandboxed HTML file with no backend. \`localStorage\`,
+\`sessionStorage\`, \`indexedDB\`, and cookies are BLOCKED \u2014 they throw in the
+sandbox (\`vibed check\` warns \`BROWSER_STORAGE\`). For anything you'd persist,
+use the injected \`window.vibed.storage\` SDK instead. The platform is the
+backend; you write zero server code.
+
+## Two rules that apply to EVERY call
+1. Every call returns a Promise that can reject \u2014 always guard it. When the vibe
+   runs OUTSIDE vibed (e.g. a local file, your \`vibed draft\`/\`preview\`), calls
+   reject with \`{ code: "no_host" }\`. The vibe must stay playable standalone, so
+   treat missing storage as "no saved data yet", never a crash.
+2. WRITES require the viewer to be signed in. If not, they reject with
+   \`{ code: "unauthenticated" }\` \u2014 catch it and show a gentle "sign in to save"
+   nudge. READS of shared data work for everyone.
+
+Publishing auto-detects SDK usage and turns storage on for the post \u2014 no flags.
+
+## Tier 1 \u2014 \`vibed.storage.local\`  (LOCAL: private, per-viewer, per-post)
+Each viewer gets their own private bucket for THIS post. Nobody else can read it.
+Use for: this player's high score, their settings, "resume where I left off".
+\`\`\`js
+await vibed.storage.local.set("best", 8200);
+const best = await vibed.storage.local.get("best");   // null if never set
+await vibed.storage.local.delete("best");
+\`\`\`
+
+## Tier 2 \u2014 \`vibed.storage.shared\`  (GLOBAL: one collective store for the whole post)
+Data every viewer of the post shares \u2014 leaderboards, votes, guestbooks, shared
+state. Organized into named "collections" (like tables) you invent.
+\`\`\`js
+// key/value doc with optimistic concurrency
+await vibed.storage.shared.set("state", "doc", { phase: "open" });        // \u2192 { value, version, ... }
+await vibed.storage.shared.set("state", "doc", next, { ifVersion: 3 });   // rejects { code: "conflict" }
+const doc = await vibed.storage.shared.get("state", "doc");               // null if missing
+await vibed.storage.shared.delete("state", "doc");
+
+// append-only list + query (guestbook, bets, submissions)
+await vibed.storage.shared.append("bets", { pick: "Argentina", stake: 50 });
+const mine = await vibed.storage.shared.query("bets", { mine: true });
+const feed = await vibed.storage.shared.query("bets", { sort: "-created", limit: 30 });
+
+// counter (poll / reactions)
+const { num } = await vibed.storage.shared.increment("votes", "argentina", 1);
+
+// leaderboard: submit a score (keep the best), read the top, get MY rank
+await vibed.storage.shared.submit("leaderboard", { score, keep: "max", meta: { emoji: "\u{1F427}" } });
+const top  = await vibed.storage.shared.query("leaderboard", { sort: "-num", limit: 10 });
+const rank = await vibed.storage.shared.rank("leaderboard");   // { rank, of, score } | null
+
+// live updates (polling now): re-renders when the collection changes; returns an unsubscribe fn
+const off = vibed.storage.shared.subscribe("leaderboard", (r) => render(r.rows), { intervalMs: 4000 });
+\`\`\`
+
+## Who is watching
+\`\`\`js
+const me = await vibed.storage.identity();  // { id, signedIn, name? } \u2014 stable per viewer; identify entries
+const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post's context
+\`\`\`
+
+## Limits (free tier \u2014 design within these)
+- Each value must be JSON-serializable and under the per-value byte cap
+  (rejects \`{ code: "too_large" }\`); \`invalid\` if it can't be JSON-stringified.
+- shared collections are for structured game/app state, NOT open chat/DM/messaging.
+
+## Porting a project that used browser storage (the \`BROWSER_STORAGE\` warning)
+1. Find every \`localStorage\`/\`sessionStorage\`/\`indexedDB\`/cookie use.
+2. Per-viewer state (settings, progress, personal best) \u2192 \`vibed.storage.local\`.
+3. Anything others should see (scores to compare, shared counters, submissions)
+   \u2192 the matching \`vibed.storage.shared\` primitive above.
+4. Make every call \`await\` + \`try/catch\`, with a standalone fallback (no_host).
+5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
+`;
+
 // ../cli/src/login.ts
 import { spawn } from "node:child_process";
 import { platform } from "node:os";
@@ -11386,16 +11471,22 @@ async function deleteExperience(client, idOrUrl) {
 }
 
 // src/index.ts
-var SERVER_INFO = { name: "vibed", version: "0.1.6" };
+var SERVER_INFO = { name: "vibed", version: "0.1.7" };
 var PROTOCOL_VERSION = "2024-11-05";
 var CATEGORIES2 = ["Game", "Invitation", "Story", "News", "Quiz", "Tool", "Art", "Other"];
 var pendingLogin = null;
 var str = (v, d = "") => typeof v === "string" ? v : d;
 var bool = (v, d) => typeof v === "boolean" ? v : d;
 var TOOLS = [
+  {
+    name: "vibed_storage_guide",
+    description: "How to add PERSISTENCE to a vibe: leaderboards, votes/polls, saved progress/high scores, guestbooks, or any shared state. A vibe is one static sandboxed file \u2014 localStorage/sessionStorage/indexedDB/cookies and backend calls are BLOCKED \u2014 so use the injected window.vibed.storage SDK instead. Returns the full primer for both tiers: `local` (private, per-viewer) and `shared` (collective, per-post). Call this BEFORE writing any save/leaderboard/multiplayer feature, or when vibed_check warns BROWSER_STORAGE.",
+    inputSchema: { type: "object", properties: {} },
+    run: async () => STORAGE_GUIDE
+  },
   {
     name: "vibed_check",
-    description: "Bundle the project into a single HTML file and validate it against vibed's sandbox rules (no network/auth). Returns whether it's publishable and, if not, the blockers to fix. Run this before vibed_publish.",
+    description: "Bundle the project into a single HTML file and validate it against vibed's sandbox rules (no network/auth). Returns whether it's publishable and, if not, the blockers to fix. Run this before vibed_publish. If it warns BROWSER_STORAGE (localStorage etc. throw in the sandbox), call vibed_storage_guide and port to window.vibed.storage.",
     inputSchema: {
       type: "object",
       properties: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amirhosseinnateghi/vibed-mcp",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "vibed MCP server — make it vibed from any MCP client (Codex, Cursor, Gemini, …): check, login, and publish tools",
   "license": "MIT",
   "type": "module",