@inbeat/standards 0.7.1 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.9.0](https://github.com/Genoux/ib-toolkit/compare/standards-v0.8.0...standards-v0.9.0) (2026-10-02)
+
+
+### Features
+
+* **standards:** gate production on vercel deployment checks ([#39](https://github.com/Genoux/ib-toolkit/issues/39)) ([98effa0](https://github.com/Genoux/ib-toolkit/commit/98effa011a8704b8ec53c334867a5ac2676b28e9))
+
+
+### Bug Fixes
+
+* **standards:** drop github from the curated mcp servers ([#37](https://github.com/Genoux/ib-toolkit/issues/37)) ([093a632](https://github.com/Genoux/ib-toolkit/commit/093a6325033de84bb264ab9b42d37cbef5d4c3bb))
+
+## [0.8.0](https://github.com/Genoux/ib-toolkit/compare/standards-v0.7.1...standards-v0.8.0) (2026-10-01)
+
+
+### Features
+
+* **standards:** arrow-key picker for ib mcp ([#34](https://github.com/Genoux/ib-toolkit/issues/34)) ([5349a74](https://github.com/Genoux/ib-toolkit/commit/5349a74c0bd8f828c19c845b6c33414558f3f3d3))
+
 ## [0.7.1](https://github.com/Genoux/ib-toolkit/compare/standards-v0.7.0...standards-v0.7.1) (2026-10-01)
 
 

package/agents/standard.md

@@ -107,6 +107,7 @@ Server actions are queued per client; never use them for reads.
 - Vitest colocated `*.test.ts` for every `server/` command, policy and `lib/` function;
   `*.integration.test.ts` against a Neon branch; Playwright in `tests/e2e` against previews.
 - CI: biome, tsc, dependency-cruiser, vitest, migration check, `ib check`, gitleaks.
+- Release: production holds on the Vercel Deployment Check `release`, set by the toolkit `release-gate.yml` after re-verifying (and migrating) the deployed commit.
 
 ### Commits
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inbeat/standards",
-  "version": "0.7.1",
+  "version": "0.9.0",
   "description": "Agent standards for inBeat apps: managed AGENTS.md block, skills under .agents/skills, ib CLI",
   "type": "module",
   "bin": {
@@ -31,7 +31,7 @@
     "test": "bun --bun vitest run"
   },
   "devDependencies": {
-    "@inbeat/config": "^0.7.1",
+    "@inbeat/config": "^0.9.0",
     "vitest": "^4.1.1"
   },
   "repository": {
@@ -42,5 +42,8 @@
   "publishConfig": {
     "access": "public"
   },
-  "license": "UNLICENSED"
+  "license": "UNLICENSED",
+  "dependencies": {
+    "@clack/prompts": "^1.8.1"
+  }
 }

package/skills/ib-toolkit/SKILL.md

@@ -64,7 +64,7 @@ export const GET = route({
 
 Sentry is already wired in the template.
 
-Run `ib mcp` to give your AI tool access to Vercel, GitHub, Sentry, Neon, Clerk, Cloudflare.
+Run `ib mcp` to give your AI tool access to Vercel, Sentry, Neon, Clerk, Cloudflare. For GitHub use the `gh` CLI.
 
 ### Auth (Clerk)
 

package/src/cli.ts

@@ -61,8 +61,6 @@ const commands: Record<string, () => number | Promise<number>> = {
   mcp: () =>
     runMcp(args, {
       cwd: process.cwd(),
-      stdin: process.stdin,
-      output: process.stdout,
       isTTY: Boolean(process.stdin.isTTY),
       out: console.info,
       err: console.error,

package/src/mcp-servers.ts

@@ -1,8 +1,15 @@
 export const CURATED_SERVERS: Record<string, string> = {
   vercel: "https://mcp.vercel.com",
-  github: "https://api.githubcopilot.com/mcp/readonly",
   sentry: "https://mcp.sentry.dev/mcp",
   neon: "https://mcp.neon.tech/mcp",
   clerk: "https://mcp.clerk.com/mcp",
   cloudflare: "https://mcp.cloudflare.com/mcp",
 };
+
+export const SERVER_HINTS: Record<string, string> = {
+  vercel: "Vercel projects and deployments",
+  sentry: "Sentry issues and errors",
+  neon: "Neon Postgres",
+  clerk: "Clerk auth docs and SDKs",
+  cloudflare: "Cloudflare API",
+};

package/src/mcp.ts

@@ -1,9 +1,8 @@
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { createInterface } from "node:readline";
-import type { Readable, Writable } from "node:stream";
 import { isDeepStrictEqual } from "node:util";
-import { CURATED_SERVERS } from "./mcp-servers";
+import * as clack from "@clack/prompts";
+import { CURATED_SERVERS, SERVER_HINTS } from "./mcp-servers";
 
 type Entry = (url: string) => Record<string, string>;
 type Applied = { text: string; notes: string[] };
@@ -192,7 +191,6 @@ export const USAGE = [
 ].join("\n");
 
 class UsageError extends Error {}
-class Aborted extends Error {}
 
 const FLAG = /^--(tools|servers)(?:=(.*))?$/;
 const splitList = (value: string) =>
@@ -227,54 +225,42 @@ function validate(label: string, names: string[], valid: string[]) {
   if (problem) throw new UsageError(problem);
 }
 
+export type Choice = { value: string; hint: string };
+export type Prompts = {
+  intro: (title: string) => void;
+  outro: (message: string) => void;
+  cancel: (message: string) => void;
+  select: (request: {
+    message: string;
+    choices: Choice[];
+    initialValues: string[];
+    required: boolean;
+  }) => Promise<string[] | null>;
+};
+
+const clackPrompts: Prompts = {
+  intro: clack.intro,
+  outro: clack.outro,
+  cancel: clack.cancel,
+  select: async ({ message, choices, initialValues, required }) => {
+    const picked = await clack.multiselect({
+      message,
+      options: choices.map(({ value, hint }) => ({ value, label: value, hint })),
+      initialValues,
+      required,
+    });
+    return clack.isCancel(picked) ? null : picked;
+  },
+};
+
 export type McpIo = {
   cwd: string;
-  stdin: Readable;
-  output: Writable;
   isTTY: boolean;
+  prompts?: Prompts;
   out: (text: string) => void;
   err: (text: string) => void;
 };
 
-const ATTEMPTS = 2;
-const PLAIN_INTEGER = /^\d+$/;
-
-function prompter(io: McpIo) {
-  const lines = createInterface({ input: io.stdin, output: io.output, terminal: true });
-  const nextLine = lines[Symbol.asyncIterator]();
-  // The workspace resolves two @types/node majors; readline's Interface loses its EventEmitter methods.
-  const emitter = lines as unknown as { once(event: "SIGINT", listener: () => void): void };
-  const interrupted = new Promise<never>((_, reject) =>
-    emitter.once("SIGINT", () => reject(new Aborted())),
-  );
-  interrupted.catch(() => {});
-
-  const ask = async (label: string, valid: string[], preselected: string[]) => {
-    let problem = "";
-    for (let attempt = 0; attempt < ATTEMPTS; attempt++) {
-      io.out(`${label}:`);
-      for (const [index, name] of valid.entries())
-        io.out(`  ${index + 1}) [${preselected.includes(name) ? "x" : " "}] ${name}`);
-      io.out(
-        `numbers or names, comma-separated; Enter keeps: ${preselected.join(", ") || "none"}; "none" clears`,
-      );
-      const { value, done } = await Promise.race([nextLine.next(), interrupted]);
-      if (done) throw new Aborted();
-      const answer = value.trim();
-      if (!answer) return preselected;
-      if (answer === "none") return [];
-      const names = splitList(answer).map((token) =>
-        PLAIN_INTEGER.test(token) ? (valid[Number(token) - 1] ?? token) : token,
-      );
-      problem = unknownNames(label, names, valid) ?? "";
-      if (!problem) return names;
-      io.err(problem);
-    }
-    throw new UsageError(problem);
-  };
-  return { ask, close: () => lines.close() };
-}
-
 const readIfExists = (path: string) => (existsSync(path) ? readFileSync(path, "utf8") : null);
 
 function currentlyConfigured(cwd: string) {
@@ -333,7 +319,8 @@ export async function runMcp(args: string[], io: McpIo): Promise<number> {
     io.out(USAGE);
     return 0;
   }
-  let prompt: ReturnType<typeof prompter> | undefined;
+  const prompts = io.prompts ?? clackPrompts;
+  let interactive = false;
   try {
     const { tools: toolFlag, servers: serverFlag } = parseMcpArgs(args);
     if (!io.isTTY && !(toolFlag && serverFlag)) {
@@ -348,10 +335,29 @@ export async function runMcp(args: string[], io: McpIo): Promise<number> {
     let tools = toolFlag;
     let servers = serverFlag;
     if (!tools || !servers) {
+      interactive = true;
+      prompts.intro("ib mcp");
       const configured = currentlyConfigured(io.cwd);
-      prompt = prompter(io);
-      tools ??= await prompt.ask("tool", toolNames, configured.tools);
-      servers ??= await prompt.ask("server", curatedNames, configured.servers);
+      tools ??=
+        (await prompts.select({
+          message: "AI tools",
+          choices: toolNames.map((value) => ({ value, hint: TOOLS[value].file })),
+          initialValues: configured.tools,
+          required: true,
+        })) ?? undefined;
+      servers ??=
+        tools &&
+        ((await prompts.select({
+          message: "MCP servers",
+          choices: curatedNames.map((value) => ({ value, hint: SERVER_HINTS[value] })),
+          initialValues: configured.servers,
+          required: false,
+        })) ??
+          undefined);
+      if (!tools || !servers) {
+        prompts.cancel("aborted");
+        return 130;
+      }
     }
 
     const { planned, failures } = plan(io.cwd, tools, servers);
@@ -367,17 +373,13 @@ export async function runMcp(args: string[], io: McpIo): Promise<number> {
         ? `updated:\n  ${changed.map(({ file }) => file).join("\n  ")}`
         : "already up to date",
     );
-    io.out("authenticate each server in your AI tool on first use");
+    const reminder = "authenticate each server in your AI tool on first use";
+    if (interactive) prompts.outro(reminder);
+    else io.out(reminder);
     return 0;
   } catch (error) {
-    if (error instanceof Aborted) {
-      io.err("aborted");
-      return 130;
-    }
     const message = error instanceof Error ? error.message : String(error);
     io.err(error instanceof UsageError ? `${message}\n${USAGE}` : message);
     return 1;
-  } finally {
-    prompt?.close();
   }
 }

package/template/.agents/skills/ib-toolkit/SKILL.md

@@ -64,7 +64,7 @@ export const GET = route({
 
 Sentry is already wired in the template.
 
-Run `ib mcp` to give your AI tool access to Vercel, GitHub, Sentry, Neon, Clerk, Cloudflare.
+Run `ib mcp` to give your AI tool access to Vercel, Sentry, Neon, Clerk, Cloudflare. For GitHub use the `gh` CLI.
 
 ### Auth (Clerk)
 

package/template/.github/workflows/ci.yml

@@ -2,13 +2,19 @@ name: CI
 
 on:
   pull_request:
-  push:
-    branches: [main]
+  repository_dispatch:
+    types: [vercel.deployment.ready]
 
 permissions:
   contents: read
   pull-requests: read
+  statuses: write
 
 jobs:
   verify:
+    if: github.event_name == 'pull_request'
     uses: Genoux/ib-toolkit/.github/workflows/verify.yml@main
+
+  release:
+    if: github.event_name == 'repository_dispatch' && github.event.client_payload.environment == 'production'
+    uses: Genoux/ib-toolkit/.github/workflows/release-gate.yml@main

package/template/AGENTS.md

@@ -110,6 +110,7 @@ Server actions are queued per client; never use them for reads.
 - Vitest colocated `*.test.ts` for every `server/` command, policy and `lib/` function;
   `*.integration.test.ts` against a Neon branch; Playwright in `tests/e2e` against previews.
 - CI: biome, tsc, dependency-cruiser, vitest, migration check, `ib check`, gitleaks.
+- Release: production holds on the Vercel Deployment Check `release`, set by the toolkit `release-gate.yml` after re-verifying (and migrating) the deployed commit.
 
 ### Commits