@arkheia/mcp-server 0.1.6 → 0.1.8

package/dist/index.js

@@ -91,9 +91,43 @@ function handleError(toolName, e) {
 // ---------------------------------------------------------------------------
 // Main
 // ---------------------------------------------------------------------------
+const CURRENT_VERSION = "0.1.7";
+async function checkForUpdate() {
+    // Check once per day — skip if checked recently
+    const markerPath = path.join(os.homedir(), '.arkheia', '.update-check');
+    try {
+        if (fs.existsSync(markerPath)) {
+            const age = Date.now() - fs.statSync(markerPath).mtimeMs;
+            if (age < 24 * 60 * 60 * 1000)
+                return; // checked within 24h
+        }
+    }
+    catch { }
+    try {
+        const resp = await fetch('https://registry.npmjs.org/@arkheia/mcp-server/latest', {
+            signal: AbortSignal.timeout(5000),
+        });
+        if (resp.ok) {
+            const data = await resp.json();
+            if (data.version && data.version !== CURRENT_VERSION) {
+                process.stderr.write(`[arkheia] Update available: ${CURRENT_VERSION} → ${data.version}\n` +
+                    `[arkheia] Run: npm update -g @arkheia/mcp-server\n`);
+            }
+        }
+        // Touch marker regardless of result
+        const dir = path.dirname(markerPath);
+        if (!fs.existsSync(dir))
+            fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(markerPath, new Date().toISOString());
+    }
+    catch {
+        // Network failure — silently skip, don't block startup
+    }
+}
 async function main() {
     loadConfig();
     checkCRLF();
+    checkForUpdate(); // fire-and-forget, don't await — never blocks startup
     const ARKHEIA_PROXY_URL = process.env.ARKHEIA_PROXY_URL || "http://localhost:8098";
     const ARKHEIA_HOSTED_URL = process.env.ARKHEIA_HOSTED_URL || "https://arkheia-proxy-production.up.railway.app";
     const ARKHEIA_API_KEY = process.env.ARKHEIA_API_KEY;
@@ -105,7 +139,7 @@ async function main() {
     const proxy = new proxy_client_js_1.ProxyClient(ARKHEIA_PROXY_URL, 10.0, ARKHEIA_HOSTED_URL, ARKHEIA_API_KEY);
     const server = new mcp_js_1.McpServer({ name: "arkheia-trust", version: "0.1.6" });
     // ── Detection & audit ──────────────────────────────────────────
-    server.tool("arkheia_verify", "Verify whether an AI response shows signs of fabrication. Call this on EVERY model response before acting on it.", { prompt: zod_1.z.string(), response: zod_1.z.string(), model: zod_1.z.string() }, async ({ prompt, response, model }) => {
+    server.tool("arkheia_verify", "Verify whether an AI response shows signs of fabrication. Call this on EVERY model response before acting on it. Risk guidance: HIGH = warn the user this response may be fabricated and include the detection_id, but still show them the response with the warning. MEDIUM = show with a brief confidence note. LOW = show normally. Never hide or suppress a response — always surface it to the user with the appropriate risk context.", { prompt: zod_1.z.string(), response: zod_1.z.string(), model: zod_1.z.string() }, async ({ prompt, response, model }) => {
         try {
             (0, tool_registry_js_1.check)("arkheia_verify");
             const result = await proxy.verify(prompt, response, model);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arkheia/mcp-server",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Arkheia MCP Server — Fabrication detection for AI agents. Know when your AI is making things up.",
   "main": "dist/index.js",
   "bin": {
@@ -17,7 +17,14 @@
     "scripts/",
     "README.md"
   ],
-  "keywords": ["mcp", "ai", "fabrication", "detection", "hallucination", "governance"],
+  "keywords": [
+    "mcp",
+    "ai",
+    "fabrication",
+    "detection",
+    "hallucination",
+    "governance"
+  ],
   "author": "Arkheia AI <dmurfet@arkheia.ai>",
   "license": "MIT",
   "engines": {