@danainnovations/cortex-mcp 1.0.99 → 1.0.101

package/dist/cli.js

@@ -3667,7 +3667,49 @@ async function startStdioServer(options) {
   const cortex = new CortexHttpClient(serverUrl, apiKey, endpoint);
   const server = new Server(
     { name: "cortex-mcp", version: "1.0.0" },
-    { capabilities: { tools: { listChanged: false } } }
+    {
+      capabilities: { tools: { listChanged: false } },
+      instructions: [
+        "You have access to Cortex, a multi-MCP gateway for building and deploying apps.",
+        "",
+        "## Vibe Coding Workflow \u2014 Building New Apps",
+        "",
+        "When a user asks you to build a NEW app, follow this pipeline:",
+        "",
+        "1. FIRST call sonance_brand__design_app to get the branded starter blueprint",
+        "2. Create a branded HTML proof-of-concept file and ask the user to review it before proceeding",
+        "3. After user approves, validate requirements:",
+        "   - Does it need a database? Only create a Supabase project if the app needs persistent user data",
+        "   - Does it need user auth? If yes, call supabase__setup_cortex_auth to set up Sign in with Cortex",
+        "4. Write Next.js code using Sonance Brand components (sonance_brand__get_components_by_category), not custom UI",
+        "5. Create a private GitHub repo (github__create_repository) and push code (github__push_files)",
+        "   - Never push .env files or secrets \u2014 include .gitignore and .env.example",
+        "   - Keep code modular: components in /components, utilities in /lib, no file over 300 lines",
+        "6. Set ALL environment variables on Vercel (vercel__set_env_vars_batch) BEFORE deploying:",
+        "   - Supabase: NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY",
+        "   - Auth (if set up): NEXT_PUBLIC_CORTEX_URL, NEXT_PUBLIC_CORTEX_CLIENT_ID, CORTEX_CLIENT_ID, CORTEX_CLIENT_SECRET",
+        "   - Extract all values from tool responses \u2014 never ask the user to provide or copy keys",
+        "7. Deploy to Vercel (vercel__deploy) and verify deployment succeeds (vercel__get_deployment)",
+        "   - If deployment fails, check logs (vercel__get_deployment_logs), fix code, push fix, and retry",
+        "   - Never tell the user the app is live without confirming READY status",
+        "8. After deployment is READY and auth is set up, register the redirect URI (supabase__add_redirect_uri)",
+        "9. Run quality checks: security_scan__scan_code_security, code_analysis__lint_directory, code_review__review_directory",
+        "10. Call sonance_brand__evaluate_design to verify brand compliance (must score Tier 3+ / >= 60)",
+        "",
+        "## Existing Projects",
+        "",
+        "For EXISTING projects (user references a repo name, project URL, or says 'add X to my app'),",
+        "skip the POC and go directly to the requested changes. All other guardrails still apply",
+        "(env vars, deploy verification, auth setup, quality checks, brand compliance).",
+        "",
+        "## Key Principles",
+        "",
+        "- The user should NEVER need to manually set environment variables, copy API keys, or configure auth",
+        "- Everything is automated through the MCP tools",
+        "- Always use Sonance Brand components and CSS tokens \u2014 never hardcode colors or write custom UI components",
+        "- Always verify deployments succeed before sharing URLs"
+      ].join("\n")
+    }
   );
   let initialized = false;
   async function ensureInitialized() {