@amirhosseinnateghi/vibed-mcp 0.1.8 → 0.2.0

package/dist/index.js

@@ -6083,6 +6083,9 @@ var config = {
   // completion the server drops a notification (§7.1) — so a slow build never
   // traps them staring at a spinner.
   BUILDER_SLOW_MS: intEnv("BUILDER_SLOW_MS", 12e3),
+  /** Lite edits (ف۷) kill switch: set to "off" to force every edit turn back to
+   *  whole-file regeneration without deploying code. */
+  BUILDER_LITE_EDITS: strEnv("BUILDER_LITE_EDITS", "on"),
   DEFAULT_LOCALE: strEnv("DEFAULT_LOCALE", "en")
 };
 function strEnv(key, fallback) {
@@ -10222,10 +10225,11 @@ var STORAGE = {
   /** Max records returnable in one query page. */
   QUERY_MAX_LIMIT: intEnv("STORE_QUERY_MAX_LIMIT", 100),
   /**
-   * Platform kill-switch for anonymous shared writes. ON by default: the real
-   * gate is per-post owner opt-in (`anon_writes` + writePolicy `anyone`), so a
-   * post only accepts guest writes when its owner turns them on. Set the env to
-   * `false` to disable anon writes platform-wide regardless of per-post config.
+   * Platform kill-switch for anonymous shared writes. ON by default. The real
+   * gate is the per-post config (`anon_writes` + writePolicy `anyone`), which is
+   * guest-writable BY DEFAULT (a shared vibe should work for whoever opens the
+   * link) — an owner can lock it down per post. Set the env to `false` to disable
+   * anon writes platform-wide regardless of per-post config.
    */
   ANON_WRITES_AVAILABLE: boolEnv("STORE_ANON_WRITES_AVAILABLE", true)
 };
@@ -10339,9 +10343,39 @@ var patchExperienceSchema = external_exports.object({
   visibility: visibilitySchema.optional(),
   coverMode: coverModeSchema.optional()
 });
+var COMMENT_MEDIA = {
+  quality: 0.82,
+  maxEdge: 1600,
+  maxBytes: 8 * 1024 * 1024,
+  // video/* is the compressed comment clip (client-side MediaRecorder → mp4 on
+  // iOS, webm on Chromium); the client never sends a raw camera video as-is.
+  types: ["image/webp", "image/jpeg", "image/png", "image/gif", "video/mp4", "video/webm"]
+};
+var COMMENT_VIDEO = {
+  maxDurationSec: 60,
+  maxEdge: 720,
+  // 1 Mbps → a 60s clip is ~7.5MB, comfortably under the 10MB request-body cap.
+  bitsPerSecond: 1e6,
+  crf: 30,
+  maxUploadBytes: 120 * 1024 * 1024
+};
+var commentMediaSchema = external_exports.object({
+  key: external_exports.string().min(1).max(300),
+  type: external_exports.enum(COMMENT_MEDIA.types),
+  w: external_exports.number().int().positive().max(2e4),
+  h: external_exports.number().int().positive().max(2e4)
+});
+var commentVideoSchema = external_exports.object({ key: external_exports.string().min(1).max(300) });
 var commentSchema = external_exports.object({
-  body: external_exports.string().min(1).max(500),
-  parentId: external_exports.string().uuid().optional()
+  body: external_exports.string().max(500),
+  parentId: external_exports.string().uuid().optional(),
+  media: commentMediaSchema.optional(),
+  // ready image/GIF (compressed client-side)
+  video: commentVideoSchema.optional()
+  // raw video → transcoded async in the worker
+}).refine((d) => d.body.trim().length > 0 || !!d.media || !!d.video, {
+  message: "Write something or attach a photo or video.",
+  path: ["body"]
 });
 var eventSchema = external_exports.object({
   // "record"/"screenshot" fire when a viewer captures the vibe (see the in-iframe
@@ -10372,6 +10406,9 @@ var createTurnRequestSchema = external_exports.object({
   // A voice turn carries no text yet — the worker transcribes `voice` first (م۷).
   voice: voiceInputSchema.optional(),
   model: external_exports.string().max(100).optional()
+  // No editMode: lite edits (ف۷) proved themselves, so every edit takes that
+  // path and the server decides — a client can't ask for the slow rewrite.
+  // BUILDER_LITE_EDITS=off remains the fleet-wide kill switch.
 }).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0 || !!v.voice, {
   message: "Send a message, an attachment, or a voice recording."
 });
@@ -10476,6 +10513,183 @@ var notifPrefsPatchSchema = external_exports.object({
   groups: external_exports.record(external_exports.enum(NOTIF_PREF_GROUPS), external_exports.boolean()).optional()
 });
 
+// ../shared/src/remix.ts
+var REMIX_GUIDE = `# Make it remix-friendly
+
+On vibed every published vibe is **remixable**: anyone can fork it and make it
+theirs, and the AI builder can be asked to change it. A vibe is only *really*
+remixable if a stranger \u2014 or a model editing it \u2014 can find the knobs without
+reading the whole file. Treat this as part of shipping, like mobile-first.
+
+It pays off twice: edits to a well-structured file are applied as small precise
+patches instead of regenerating the whole thing, which is faster, cheaper, and
+far less likely to break what already worked.
+
+## 1. One CONFIG block, at the top
+
+Every tunable lives in a single object at the top of the script \u2014 the first
+thing anyone sees:
+
+\`\`\`js
+const CONFIG = {
+  // --- Feel ---
+  gravity: 0.6,
+  jumpForce: -11,
+  pipeGap: 160,
+  pipeSpeed: 2.4,
+  // --- Look ---
+  skyColor: "#7ec8ff",
+  birdColor: "#ffd166",
+  // --- Words (all user-facing text) ---
+  title: "Tap to Fly",
+  gameOverText: "Ouch! Tap to try again",
+  scoreLabel: "Score",
+};
+\`\`\`
+
+Rules that make it useful:
+- **Literal values only** \u2014 numbers, strings, colors. No computed expressions.
+- **Everything reads from CONFIG.** If a number appears twice in the logic, it
+  belongs in CONFIG once.
+- **All user-facing text goes here too**, so rewording or translating a vibe is
+  one edit, not a hunt.
+
+## 2. Content separate from logic
+
+Questions, levels, items, cards, prompts \u2014 a labelled array right after CONFIG:
+
+\`\`\`js
+const QUESTIONS = [
+  { q: "Pick a color", options: ["Red", "Blue"], answer: 0 },
+  // add more here \u2014 same shape
+];
+\`\`\`
+
+Now "add five more questions" is a data edit anyone can make.
+
+## 3. Predictable section order
+
+Lay the script out in this order, each with a one-line banner comment:
+
+\`\`\`js
+// ============ CONFIG ============
+// ============ CONTENT ===========
+// ============ STATE =============
+// ============ HELPERS ===========
+// ============ RENDER ============
+// ============ INPUT =============
+// ============ INIT ==============
+\`\`\`
+
+A remixer (and a patching model) then knows where a change belongs before
+reading a single line.
+
+## 4. Write it plainly
+
+- Descriptive names: \`spawnEnemy()\`, not \`se()\`; \`playerSpeed\`, not \`ps\`.
+- Small functions that do one thing. One \`init()\` entry point, one game loop.
+- Two-space indent, no minification, no bundler output, no clever one-liners or
+  chained ternaries.
+- A short comment at each seam someone would want to change:
+  \`// Win condition \u2014 swap this for a timer, a score target, ...\`
+- Stable \`id\`/\`class\` names on the elements a remixer would target.
+- No dead code, and no copy-pasted near-identical blocks \u2014 factor them into one
+  function. (Duplicated blocks also make an automated edit ambiguous, so it
+  fails or lands in the wrong place.)
+
+## 5. Quick self-check before publishing
+
+- Could someone change the colors, speed, and all the words by editing only
+  CONFIG?
+- Could they add one more level/question/item by editing only the content array?
+- Is there any magic number or user-facing string outside those two blocks?
+- Would a stranger know where to add a feature within ten seconds of scrolling?
+
+If the answer to any of those is no, fix it before you publish \u2014 that is the
+difference between a vibe people fork and one they scroll past.`;
+var SMALL_VIBE_CHARS = 1200;
+var SMALL_VIBE_LINES = 40;
+var COMMENT_EXPECTED_LINES = 60;
+var SECTIONS_EXPECTED_LINES = 120;
+var MINIFIED_LINE_CHARS = 400;
+var MINIFIED_AVG_LINE_CHARS = 160;
+function authorScript(html) {
+  const parts = [];
+  const re = /<script\b([^>]*)>([\s\S]*?)<\/script\s*>/gi;
+  let m;
+  while (m = re.exec(html)) {
+    const attrs = m[1] ?? "";
+    if (/data-vibed-bridge/i.test(attrs)) continue;
+    if (/\bsrc=/i.test(attrs)) continue;
+    parts.push(m[2] ?? "");
+  }
+  return parts.join("\n");
+}
+function remixAudit(html) {
+  const script = authorScript(html ?? "");
+  const lines = script.split(/\r?\n/);
+  const codeLines = lines.filter((l) => l.trim() !== "");
+  const scriptLines = codeLines.length;
+  const scriptChars = codeLines.reduce((n, l) => n + l.trim().length, 0);
+  const avgLine = scriptLines > 0 ? scriptChars / scriptLines : 0;
+  const findings = [];
+  const longest = codeLines.reduce((n, l) => Math.max(n, l.trim().length), 0);
+  const denselyPacked = scriptChars > 600 && avgLine > MINIFIED_AVG_LINE_CHARS;
+  if (longest > MINIFIED_LINE_CHARS || denselyPacked) {
+    findings.push({
+      code: "MINIFIED",
+      blocking: true,
+      message: `The script averages ${Math.round(avgLine)} characters per line (longest ${longest}) \u2014 this looks minified or bundled.`,
+      fix: "Publish readable source: turn off minification for the vibe build, or inline the unminified code."
+    });
+  }
+  if (scriptLines >= SMALL_VIBE_LINES || scriptChars >= SMALL_VIBE_CHARS) {
+    if (!/\b(?:const|let|var)\s+CONFIG\s*=/.test(script)) {
+      findings.push({
+        code: "NO_CONFIG",
+        blocking: true,
+        message: "No `const CONFIG = { ... }` block \u2014 a remixer has to hunt through the logic to change anything.",
+        fix: "Move every tunable (speeds, sizes, colors, counts, durations) AND all user-facing text into one CONFIG object at the top, and read from it everywhere."
+      });
+    }
+    const cryptic = /* @__PURE__ */ new Set();
+    const decl = /\b(?:const|let|var)\s+([A-Za-z_$])\b(?!\s*[,)])/g;
+    let d;
+    while (d = decl.exec(script)) {
+      const name = d[1];
+      if (!"ijknxyt_".includes(name)) cryptic.add(name);
+    }
+    if (cryptic.size >= 5) {
+      findings.push({
+        code: "CRYPTIC_NAMES",
+        blocking: true,
+        message: `${cryptic.size} single-letter variables (${[...cryptic].slice(0, 6).join(", ")}) \u2014 the code reads as machine output.`,
+        fix: "Give variables and functions descriptive names (`playerSpeed`, not `p`)."
+      });
+    }
+    if (scriptLines >= COMMENT_EXPECTED_LINES) {
+      const comments = codeLines.filter((l) => /^\s*(\/\/|\/\*|\*)/.test(l)).length;
+      if (comments === 0) {
+        findings.push({
+          code: "NO_COMMENTS",
+          blocking: false,
+          message: "The script has no comments at all.",
+          fix: "Add a short note at each seam a remixer would change (the win condition, the spawn rule, the scoring)."
+        });
+      }
+    }
+    if (scriptLines >= SECTIONS_EXPECTED_LINES && !/CONFIG\s*=+\s*$|=== *CONFIG|-- *CONFIG/im.test(script)) {
+      findings.push({
+        code: "NO_SECTIONS",
+        blocking: false,
+        message: "No section banners in a long script.",
+        fix: "Split it with banner comments: CONFIG \u2192 CONTENT \u2192 STATE \u2192 helpers \u2192 render \u2192 input \u2192 init."
+      });
+    }
+  }
+  return { ok: !findings.some((f) => f.blocking), findings, scriptLines };
+}
+
 // ../shared/src/builderEvents.ts
 var BUILD_EVENT_VERSION = 1;
 var BUILD_PHASES = [
@@ -11133,8 +11347,10 @@ async function bundleProject(projectDir, opts = {}) {
     allowedOrigins
   });
   const result = validate(html, { maxBytes, allowedOrigins, policy: opts.policy });
+  const remix = remixAudit(html);
   return {
-    ok: result.ok,
+    ok: result.ok && remix.ok,
+    remix,
     html,
     policy: opts.policy,
     entry: resolved.entry,
@@ -11195,12 +11411,28 @@ function formatReport(result) {
     result.sizeBytes != null ? `size: ${fmtSize(result.sizeBytes)}` : null
   ].filter(Boolean).join("  \xB7  ");
   if (where) out.push(where);
+  const remixBlockers = (result.remix?.findings ?? []).filter((f) => f.blocking);
   if (result.ok) {
     out.push("\u2713 Vibeable \u2014 this project can be published to vibed.");
-  } else {
+  } else if (result.blockers.length > 0) {
     out.push(`\u2717 Not vibeable yet \u2014 ${result.blockers.length} blocker(s):`);
     out.push(...summarize(result).lines);
   }
+  if (remixBlockers.length > 0) {
+    out.push("");
+    out.push(`\u2717 Not remixable yet \u2014 ${remixBlockers.length} thing(s) to fix before publishing:`);
+    for (const f of remixBlockers) {
+      out.push(`  \u2022 ${f.message}`);
+      out.push(`    \u2192 ${f.fix}`);
+    }
+    out.push("  Run `vibed remixable` for the full guide.");
+  }
+  const remixAdvice = (result.remix?.findings ?? []).filter((f) => !f.blocking);
+  if (remixAdvice.length > 0) {
+    out.push("");
+    out.push("Remix polish (not blocking):");
+    for (const f of remixAdvice) out.push(`  \u2022 ${f.message} \u2192 ${f.fix}`);
+  }
   if (result.policy && ruleActive("no_vertical_scroll", result.policy)) {
     out.push(
       "",
@@ -11500,7 +11732,8 @@ async function deleteExperience(client, idOrUrl) {
 }
 
 // src/index.ts
-var SERVER_INFO = { name: "vibed", version: "0.1.8" };
+var MCP_VERSION = true ? "0.2.0" : "0.0.0-dev";
+var SERVER_INFO = { name: "vibed", version: MCP_VERSION };
 var PROTOCOL_VERSION = "2024-11-05";
 var pendingLogin = null;
 var str = (v, d = "") => typeof v === "string" ? v : d;
@@ -11512,9 +11745,15 @@ var TOOLS = [
     inputSchema: { type: "object", properties: {} },
     run: async () => STORAGE_GUIDE
   },
+  {
+    name: "vibed_remix_guide",
+    description: "How to write a vibe that others can actually REMIX \u2014 vibed's signature loop, where every published vibe is someone else's starting point (and may later be edited by the AI builder). Returns the authoring rules: one CONFIG block at the top holding every tunable and all user-facing text, content/data separated from logic, a predictable section order, and plainly written code. Call this BEFORE writing a vibe, and follow it while building \u2014 the same structure is what lets later edits be applied as small precise patches instead of rewriting the whole file.",
+    inputSchema: { type: "object", properties: {} },
+    run: async () => REMIX_GUIDE
+  },
   {
     name: "vibed_check",
-    description: "Bundle the project into a single HTML file and validate it against vibed's sandbox rules (no network/auth). Returns whether it's publishable and, if not, the blockers to fix. Run this before vibed_publish. If it warns BROWSER_STORAGE (localStorage etc. throw in the sandbox), call vibed_storage_guide and port to window.vibed.storage.",
+    description: "Bundle the project into a single HTML file and validate it against vibed's sandbox rules (no network/auth). Returns whether it's publishable and, if not, the blockers to fix. Run this before vibed_publish. If it warns BROWSER_STORAGE (localStorage etc. throw in the sandbox), call vibed_storage_guide and port to window.vibed.storage. This also audits REMIX-FRIENDLINESS (readable code, a CONFIG block holding every tunable and all user-facing text) and REFUSES a file that fails \u2014 call vibed_remix_guide and fix it.",
     inputSchema: {
       type: "object",
       properties: {
@@ -11582,7 +11821,7 @@ After the user approves, call vibed_login_wait.`;
   },
   {
     name: "vibed_draft",
-    description: "Bundle the project and upload it as a PRIVATE draft, returning a hosted, sandboxed PREVIEW link (\u2026/p/<id>/) and a draftKey. Publishes nothing \u2014 the link is in no feed, profile, or search; only someone with it can open it. Show the preview to the user, then call vibed_publish with the returned draftKey once they approve. Requires sign-in.",
+    description: "THE DEFAULT for 'make it vibed' / 'publish to vibed': bundle the project and upload it as a PRIVATE draft, returning a hosted, sandboxed PREVIEW link (\u2026/p/<id>/) and a draftKey. Publishes NOTHING \u2014 the link is in no feed, profile, or search; only someone with it can open it. Give the user the preview link, then STOP and let them review \u2014 'make it vibed' means preview first, NOT publish. Only call vibed_publish after the user explicitly tells you to publish this draft. Requires sign-in. BEFORE drafting, make the single HTML file remix-friendly \u2014 a file-top comment, tunable constants (speed/difficulty/colors/text) grouped and labeled near the top, clear names, comments on the non-obvious WHY, readable not minified \u2014 because remix is core to vibed and its AI builder edits THIS file to fork it.",
     inputSchema: {
       type: "object",
       properties: {
@@ -11613,7 +11852,7 @@ Show it to the user. To publish it, call vibed_publish with draftKey: ${d.draftA
   },
   {
     name: "vibed_publish",
-    description: "Publish a vibed Experience. Pass draftKey (from vibed_draft) to promote an already-previewed draft \u2014 the recommended flow \u2014 or pass path to bundle + publish in one shot. Requires sign-in (vibed_whoami / vibed_login). Confirm the title and tags with the user first \u2014 publishing is public. Returns the published URL, or the blockers if it isn't vibeable.",
+    description: "Make a draft PUBLIC. Publishing is public and hard to undo \u2014 do NOT call this unless the user has EXPLICITLY told you to publish (e.g. 'publish it', 'post it', 'go ahead'). 'make it vibed' is NOT a publish instruction, and 'looks good' is not either \u2014 when unsure, ask and wait. Default flow: vibed_draft \u2192 user reviews the preview \u2192 user says publish \u2192 this. Pass draftKey (from vibed_draft) to promote the previewed draft (preferred); passing path bundles + publishes in one shot and SKIPS the preview \u2014 only do that if the user asked to skip it. Requires sign-in. Confirm the title and tags first. Returns the published URL.",
     inputSchema: {
       type: "object",
       properties: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@amirhosseinnateghi/vibed-mcp",
-  "version": "0.1.8",
-  "description": "vibed MCP server — make it vibed from any MCP client (Codex, Cursor, Gemini, …): check, login, and publish tools",
+  "version": "0.2.0",
+  "description": "vibed MCP server \u2014 make it vibed from any MCP client (Codex, Cursor, Gemini, \u2026): check, login, and publish tools",
   "license": "MIT",
   "type": "module",
   "bin": {
@@ -15,7 +15,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "esbuild src/index.ts --bundle --platform=node --target=node20 --format=esm --outfile=dist/index.js && chmod +x dist/index.js",
+    "build": "esbuild src/index.ts --bundle --platform=node --target=node20 --format=esm --define:__VIBED_MCP_VERSION__='\"0.2.0\"' --outfile=dist/index.js && chmod +x dist/index.js",
     "prepublishOnly": "pnpm build",
     "dev": "tsx src/index.ts",
     "typecheck": "tsc --noEmit",