@impetik/xeer-mcp 0.2.5 → 0.2.6

package/README.md

@@ -76,7 +76,7 @@ The generated registry is the complete MCP tool and exclusion surface:
 | `xeer_dev_stop` | `dev.stop` | `author` / `operator` | Stop a local development session and release its lease. | `sessionId?`: `string`<br>`cursor?`: `integer` [0..9007199254740991]; default `0` | `run-local` | writes; idempotent; reversible; non-destructive | `none` | `xeer.dev.v0` | none |
 | `xeer_diagnostics` | `diagnostics` | `author` / `operator` | Read the generated diagnostic catalogue. | `code?`: `string` | none | read-only; idempotent; reversible; non-destructive | `none` | `unversioned` | none |
 
-**CLI actions intentionally excluded from MCP (31).**
+**CLI actions intentionally excluded from MCP (34).**
 
 | CLI action | Action | Summary | Effects | Safety | Path policy | Output | Why no MCP tool |
 | --- | --- | --- | --- | --- | --- | --- | --- |
@@ -111,6 +111,9 @@ The generated registry is the complete MCP tool and exclusion surface:
 | `xeer token ls` | `token.ls` | List service token metadata. | `network-read`<br>`secret-metadata` | read-only; idempotent; reversible; non-destructive | `none` | `xeer.command.v0` | Service credential issuance and revocation are intentionally CLI-only. |
 | `xeer token revoke` | `token.revoke` | Revoke a service builder token. | `network-write`<br>`secret-write` | writes; idempotent; irreversible; destructive | `none` | `xeer.command.v0` | Service credential issuance and revocation are intentionally CLI-only. |
 | `xeer actions` | `actions` | Print the machine-readable action and safety catalogue. | none | read-only; idempotent; reversible; non-destructive | `none` | `xeer.command.v0` | Not exposed through MCP v0; use the CLI deliberately. |
+| `xeer db tables` | `db.tables` | List the tables of a running application database. | `read-state` | read-only; idempotent; reversible; non-destructive | `project-relative` | `xeer.command.v0` | Not exposed through MCP v0; use the CLI deliberately. |
+| `xeer db schema` | `db.schema` | Print the declared schema of a running application database. | `read-state` | read-only; idempotent; reversible; non-destructive | `project-relative` | `xeer.command.v0` | Not exposed through MCP v0; use the CLI deliberately. |
+| `xeer db exec` | `db.exec` | Run one SQL statement against a running application database. | `read-state`<br>`write-state` | writes; non-idempotent; irreversible; non-destructive | `project-relative` | `xeer.command.v0` | Destructive state replacement requires an explicit CLI invocation. |
 <!-- xeer-action-reference:end -->
 
 Every tool returns `{ protocol: "xeer.mcp-result.v0", action, ok, result?, error? }` both as

package/dist/dev-session.d.ts

@@ -1,4 +1,4 @@
-import type { Diagnostic, DevEvent } from '@impetik/xeer-spec';
+import type { Diagnostic, DevEvent } from '../vendor/spec/index.js';
 /**
  * `xeer dev` is a long-running process that streams `xeer.dev.v0` JSONL events;
  * an MCP tool call is a single request/response. This module reconciles the two

package/dist/network-policy.js

@@ -1,4 +1,4 @@
-import { DEFAULT_XEER_CONTROL_ORIGIN, exactHttpOrigin, isHostedXeerApplicationTarget, isLocalInspectorTarget, isLoopbackHostname, } from '@impetik/xeer-spec/network-policy';
+import { DEFAULT_XEER_CONTROL_ORIGIN, exactHttpOrigin, isHostedXeerApplicationTarget, isLocalInspectorTarget, isLoopbackHostname, } from '../vendor/spec/network-policy.js';
 const APP_ID = /^app_[A-Za-z0-9_-]{8,96}$/u;
 const APPLICATION_NAME = /^[a-z][a-z0-9-]{1,62}$/u;
 function configuredControlOrigins(value) {

package/dist/server.d.ts

@@ -1,5 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { type XeerMcpProfile } from '@impetik/xeer-spec/actions';
+import { type XeerMcpProfile } from '../vendor/spec/actions.js';
 import { DevSessionRegistry } from './dev-session.js';
 export interface XeerMcpServer {
     server: McpServer;

package/dist/server.js

@@ -3,9 +3,9 @@ import { isAbsolute, relative, sep } from 'node:path';
 import { McpServer, ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
 import { createAgentContext, readDocsIndex, readDocsPage, searchDocs } from '@impetik/xeer/agent-context';
-import { DIAGNOSTICS, DIAGNOSTIC_CODES, DIAGNOSTIC_FAMILIES, diagnosticDefinition, renderDiagnosticsReference, } from '@impetik/xeer-spec/diagnostics';
-import { actionDefinition, mcpAnnotations, } from '@impetik/xeer-spec/actions';
-import { isReviewReceiptId } from '@impetik/xeer-spec/review';
+import { DIAGNOSTICS, DIAGNOSTIC_CODES, DIAGNOSTIC_FAMILIES, diagnosticDefinition, renderDiagnosticsReference, } from '../vendor/spec/diagnostics.js';
+import { actionDefinition, mcpAnnotations, } from '../vendor/spec/actions.js';
+import { isReviewReceiptId } from '../vendor/spec/review.js';
 import { DevSessionRegistry } from './dev-session.js';
 import { controlOriginRefusal, inspectorTargetRefusal } from './network-policy.js';
 import { runXeerTests } from './test-run.js';
@@ -81,7 +81,7 @@ function toolPolicy(id) {
     }));
     return { title, description, inputSchema, annotations: mcpAnnotations(definition) };
 }
-/** Mirrors the Diagnostic interface in @impetik/xeer-spec, loosely so new fields pass through. */
+/** Mirrors the spec's `Diagnostic` interface, loosely so new fields pass through. */
 const diagnosticSchema = z.object({
     code: z.string(),
     severity: z.string(),

package/dist/test-run.d.ts

@@ -1,4 +1,4 @@
-import type { DevEvent, Diagnostic } from '@impetik/xeer-spec';
+import type { DevEvent, Diagnostic } from '../vendor/spec/index.js';
 /**
  * `xeer test --json` is the one command that streams instead of printing an
  * envelope: it reuses the `xeer.dev.v0` JSONL protocol so a consumer sees the

package/dist/xeer-cli.d.ts

@@ -1,4 +1,4 @@
-import type { Diagnostic } from '@impetik/xeer-spec';
+import type { Diagnostic } from '../vendor/spec/index.js';
 /**
  * Every tool in this server shells out to the `xeer` CLI with `--json` and
  * preserves the envelope it printed inside a versioned MCP result.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@impetik/xeer-mcp",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "type": "module",
   "description": "Model Context Protocol server for Xeer: the scaffold, check, dev, build, and deploy loop as agent tools.",
   "license": "MIT",
@@ -20,10 +20,14 @@
   ],
   "files": [
     "dist",
+    "vendor",
     "README.md",
     "LICENSE",
     "!dist/**/*.map",
-    "!dist/**/*.test.*"
+    "!dist/**/*.test.*",
+    "!vendor/**/*.map",
+    "!vendor/**/*.test.*",
+    "!vendor/**/*.test-stub.*"
   ],
   "publishConfig": {
     "access": "public"
@@ -43,14 +47,13 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.0.10",
-    "@impetik/xeer": "0.2.5",
-    "@impetik/xeer-spec": "0.2.5"
+    "@impetik/xeer": "0.2.6"
   },
   "devDependencies": {
     "@types/node": "^24.1.0"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && node ../../scripts/vendor-internal.mjs @impetik/xeer-mcp",
     "check": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run --testTimeout 120000",
     "test:smoke": "vitest run --config vitest.smoke.config.ts",