@danainnovations/cortex-mcp 1.0.109 → 1.0.112

package/dist/index.js

@@ -1041,30 +1041,34 @@ async function startStdioServer(options) {
       capabilities: { tools: { listChanged: false } },
       instructions: [
         "You have access to Cortex, a multi-MCP gateway for building and deploying apps.",
+        "When a user asks to build, create, or make an app, call the build_app tool to get the deployment workflow.",
         "",
         "## Vibe Coding Workflow \u2014 Building New Apps",
         "",
+        "**CRITICAL: You MUST create a branded HTML POC and get user approval BEFORE creating any infrastructure.**",
+        "",
         "When a user asks you to build a NEW app, follow this pipeline:",
         "",
         "1. FIRST call sonance_brand__design_app to get the branded starter blueprint",
-        "2. Create a branded HTML proof-of-concept file and ask the user to review it before proceeding",
-        "3. After user approves, validate requirements:",
+        "2. Create a branded HTML proof-of-concept file (via filesystem__write_file) and ask the user to review it in their browser",
+        "3. **STOP and WAIT for explicit user approval before proceeding**",
+        "4. After user approves, validate requirements:",
         "   - Does it need a database? Only create a Supabase project if the app needs persistent user data",
         "   - Does it need user auth? If yes, call supabase__setup_cortex_auth to set up Sign in with Cortex",
-        "4. Write Next.js code using Sonance Brand components (sonance_brand__get_components_by_category), not custom UI",
-        "5. Create a private GitHub repo (github__create_repository) and push code (github__push_files)",
+        "5. Write Next.js code using Sonance Brand components (sonance_brand__get_components_by_category), not custom UI",
+        "6. Create a private GitHub repo (github__create_repository) and push code (github__push_files)",
         "   - Never push .env files or secrets \u2014 include .gitignore and .env.example",
         "   - Keep code modular: components in /components, utilities in /lib, no file over 300 lines",
-        "6. Set ALL environment variables on Vercel (vercel__set_env_vars_batch) BEFORE deploying:",
+        "7. Set ALL environment variables on Vercel (vercel__set_env_vars_batch) BEFORE deploying:",
         "   - Supabase: NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY",
         "   - Auth (if set up): NEXT_PUBLIC_CORTEX_URL, NEXT_PUBLIC_CORTEX_CLIENT_ID, CORTEX_CLIENT_ID, CORTEX_CLIENT_SECRET",
         "   - Extract all values from tool responses \u2014 never ask the user to provide or copy keys",
-        "7. Deploy to Vercel (vercel__deploy) and verify deployment succeeds (vercel__get_deployment)",
+        "8. Deploy to Vercel (vercel__deploy) and verify deployment succeeds (vercel__get_deployment)",
         "   - If deployment fails, check logs (vercel__get_deployment_logs), fix code, push fix, and retry",
         "   - Never tell the user the app is live without confirming READY status",
-        "8. After deployment is READY and auth is set up, register the redirect URI (supabase__add_redirect_uri)",
-        "9. Run quality checks: security_scan__scan_code_security, code_analysis__lint_directory, code_review__review_directory",
-        "10. Call sonance_brand__evaluate_design to verify brand compliance (must score Tier 3+ / >= 60)",
+        "9. After deployment is READY and auth is set up, register the redirect URI (supabase__add_redirect_uri)",
+        "10. Run quality checks: security_scan__scan_code_security, code_analysis__lint_directory, code_review__review_directory",
+        "11. Call sonance_brand__evaluate_design to verify brand compliance (must score Tier 3+ / >= 60)",
         "",
         "## Existing Projects",
         "",
@@ -1112,14 +1116,16 @@ async function startStdioServer(options) {
     "",
     "Follow this pipeline when building apps with Cortex MCP tools.",
     "",
+    "**CRITICAL: For new apps, you MUST create a branded HTML POC and get user approval BEFORE creating any infrastructure (GitHub repo, Vercel project, Supabase project). Do not skip the POC gate.**",
+    "",
     "## New App (Greenfield)",
     "",
     "### Phase 1: Design & Approve",
     "1. Call `sonance_brand__design_app` with the app description to get the branded starter blueprint (CSS, components, layout)",
     "2. Call `sonance_brand__get_css_theme` for the full CSS variables and Tailwind config",
-    "3. Create a single branded HTML proof-of-concept file and show the user",
+    "3. Create a single branded HTML proof-of-concept file (via `filesystem__write_file`) and tell the user to open it in their browser",
     "4. Ask the user: 'Does this look right? Ready to build the full app?'",
-    "5. Do NOT proceed until the user approves",
+    "5. **STOP and WAIT** \u2014 Do NOT proceed until the user explicitly approves",
     "",
     "### Phase 2: Plan Infrastructure",
     "6. Determine if the app needs a database (user accounts, persistent data \u2192 yes; static content \u2192 no)",