@kylewadegrove/cutline-mcp-cli 0.6.1 → 0.7.0

package/dist/commands/init.js

@@ -4,6 +4,7 @@ import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'node:fs';
 import { resolve, join } from 'node:path';
 import { getRefreshToken } from '../auth/keychain.js';
 import { fetchFirebaseApiKey } from '../utils/config.js';
+import { saveConfig, loadConfig } from '../utils/config-store.js';
 const CUTLINE_CONFIG = '.cutline/config.json';
 async function authenticate(options) {
     const refreshToken = await getRefreshToken();
@@ -33,6 +34,8 @@ async function authenticate(options) {
             tier: isPremium ? 'premium' : 'free',
             email: payload.email,
             uid: payload.user_id || payload.sub,
+            idToken,
+            baseUrl,
         };
     }
     catch {
@@ -206,6 +209,42 @@ export async function initCommand(options) {
     else {
         console.log(chalk.yellow('  No .cutline/config.json found — generating generic rules.'));
     }
+    // Generate API key for authenticated users (skips if one already exists)
+    let generatedApiKey = null;
+    if (auth?.idToken && auth.baseUrl) {
+        const existing = loadConfig();
+        if (existing.apiKey) {
+            console.log(chalk.dim('  API key: already configured'));
+        }
+        else {
+            const keySpinner = ora('Generating API key...').start();
+            try {
+                const keyRes = await fetch(`${auth.baseUrl}/mcpDataProxy`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        Authorization: `Bearer ${auth.idToken}`,
+                    },
+                    body: JSON.stringify({ action: 'apiKey.create', params: { name: 'cursor-ide' } }),
+                });
+                if (keyRes.ok) {
+                    const keyData = await keyRes.json();
+                    generatedApiKey = keyData.key;
+                    saveConfig({ apiKey: generatedApiKey });
+                    keySpinner.succeed(chalk.green('API key generated and saved'));
+                }
+                else {
+                    const errBody = await keyRes.text().catch(() => '');
+                    keySpinner.warn(chalk.yellow(`API key generation skipped (${keyRes.status})`));
+                    if (errBody)
+                        console.log(chalk.dim(`  ${errBody.slice(0, 120)}`));
+                }
+            }
+            catch (e) {
+                keySpinner.warn(chalk.yellow('API key generation skipped (network error)'));
+            }
+        }
+    }
     console.log();
     const filesWritten = [];
     // 1. Cursor rules
@@ -240,6 +279,16 @@ export async function initCommand(options) {
         console.log(chalk.dim('\n  Upgrade to Premium for product-specific constraint graphs and .cutline.md'));
         console.log(chalk.dim('  →'), chalk.cyan('cutline-mcp upgrade'), chalk.dim('or https://thecutline.ai/upgrade'));
     }
+    if (generatedApiKey) {
+        console.log();
+        console.log(chalk.bold('  API Key (shown once):'));
+        console.log(chalk.cyan(`  ${generatedApiKey}`));
+        console.log();
+        console.log(chalk.dim('  Add to your Cursor MCP config for best performance:'));
+        console.log(chalk.dim('    "env": { "CUTLINE_API_KEY": "') + chalk.cyan(generatedApiKey) + chalk.dim('" }'));
+        console.log();
+        console.log(chalk.dim('  Or it will be used automatically from ~/.cutline-mcp/config.json'));
+    }
     console.log();
     console.log(chalk.bold('  Next step:'));
     console.log(chalk.dim('  Run'), chalk.cyan('cutline-mcp setup'), chalk.dim('to get the MCP server config for your IDE.\n'));

package/dist/commands/setup.js

@@ -245,7 +245,9 @@ export async function setupCommand(options) {
         }
         const items = [
             { cmd: 'Run a deep dive on my product idea', desc: 'Pre-mortem analysis — risks, assumptions, experiments' },
-            { cmd: 'Run a code audit for my product', desc: 'Security scan + RGR remediation plan' },
+            { cmd: 'Plan this feature with constraints from my product', desc: 'RGR plan — constraint-aware implementation roadmap' },
+            { cmd: 'Run an audit over my code', desc: 'Quick security scan — safe for any codebase' },
+            { cmd: 'Run a code audit for my product', desc: 'Full engineering audit + RGR remediation plan' },
             { cmd: 'Check constraints for src/api/upload.ts', desc: 'Get NFR boundaries for a specific file' },
             { cmd: 'Generate .cutline.md for my product', desc: 'Write the constraint routing engine' },
             { cmd: 'What does my persona think about X?', desc: 'AI persona feedback on features' },

package/dist/commands/upgrade.js

@@ -88,7 +88,9 @@ export async function upgradeCommand(options) {
         console.log(chalk.bold('  Then ask your AI agent:\n'));
         const items = [
             { cmd: 'Run a deep dive on my product idea', desc: 'Pre-mortem analysis — risks, assumptions, experiments' },
-            { cmd: 'Run a code audit for my product', desc: 'Security scan + RGR remediation plan' },
+            { cmd: 'Plan this feature with constraints from my product', desc: 'RGR plan — constraint-aware implementation roadmap' },
+            { cmd: 'Run an audit over my code', desc: 'Quick security scan — safe for any codebase' },
+            { cmd: 'Run a code audit for my product', desc: 'Full engineering audit + RGR remediation plan' },
             { cmd: 'Generate .cutline.md for my product', desc: 'Write the constraint routing engine' },
         ];
         for (const item of items) {

package/dist/servers/chunk-DE7R7WKY.js

@@ -0,0 +1,331 @@
+// ../mcp/dist/mcp/src/schemas.js
+import { z } from "zod";
+var PMJsonSchema = z.object({
+  project: z.object({
+    name: z.string(),
+    brief: z.string(),
+    constraints: z.object({
+      team: z.string().optional(),
+      budget_usd: z.number().optional(),
+      deadline_days: z.number().int().optional(),
+      must_ship_scope: z.string().optional()
+    }).optional(),
+    reference_classes: z.array(z.string()).optional().default([])
+  }),
+  personas: z.object({
+    user_personas: z.array(z.object({
+      name: z.string(),
+      role: z.string().optional(),
+      segment: z.string().optional(),
+      is_buyer: z.boolean().optional(),
+      description: z.string(),
+      motivations: z.array(z.string()).optional(),
+      skills: z.array(z.string()).optional(),
+      objections: z.array(z.string()).optional()
+    })).optional(),
+    buyer_personas: z.array(z.object({
+      name: z.string(),
+      role: z.string().optional(),
+      segment: z.string().optional(),
+      is_buyer: z.boolean().optional(),
+      description: z.string(),
+      motivations: z.array(z.string()).optional(),
+      skills: z.array(z.string()).optional(),
+      objections: z.array(z.string()).optional()
+    })).optional()
+  }).optional(),
+  outside_view: z.object({
+    base_rates: z.array(z.object({
+      statement: z.string(),
+      p50: z.number().optional(),
+      p90: z.number().optional(),
+      source_hint: z.string().optional()
+    })).optional(),
+    failed_analogs: z.array(z.string()).optional(),
+    success_analogs: z.array(z.string()).optional()
+  }).optional(),
+  pricing: z.object({
+    monthly: z.number().optional(),
+    annual: z.number().optional(),
+    tiers: z.array(z.object({
+      name: z.string(),
+      price_month_usd: z.number(),
+      features: z.array(z.string()).optional()
+    })).optional(),
+    freemium: z.object({
+      enabled: z.boolean(),
+      features: z.array(z.string()).optional()
+    }).optional(),
+    trialDays: z.number().optional(),
+    adTier: z.object({
+      enabled: z.boolean(),
+      notes: z.string().optional()
+    }).optional(),
+    strategy: z.string().optional()
+  }).optional(),
+  kill_criteria: z.array(z.object({
+    name: z.string(),
+    threshold: z.string(),
+    status: z.enum(["unknown", "pass", "fail"]).optional(),
+    evidence: z.string().optional()
+  })).optional(),
+  decision: z.object({
+    recommendation: z.enum(["No-Go", "Revise", "Go (guarded)"]),
+    rationale: z.string(),
+    what_would_change_my_mind: z.string().optional(),
+    market_feasibility: z.object({
+      score: z.enum(["strong", "moderate", "weak"]),
+      rationale: z.string(),
+      nfr_coverage_pct: z.number().optional()
+    }).optional(),
+    productionalization_feasibility: z.object({
+      score: z.enum(["strong", "moderate", "weak"]),
+      rationale: z.string(),
+      nfr_coverage_pct: z.number().optional()
+    }).optional(),
+    engineering_time_reduction: z.object({
+      unassisted_hours: z.number(),
+      assisted_hours: z.number(),
+      speedup_factor: z.number()
+    }).optional()
+  }).optional(),
+  confidence: z.object({
+    p50: z.number(),
+    p75: z.number().optional(),
+    p90: z.number()
+  }).optional(),
+  risks: z.array(z.object({
+    area: z.enum(["Demand", "Channel", "UnitEcon", "Ops", "Legal", "Competition", "Tech"]).optional(),
+    description: z.string(),
+    likelihood: z.enum(["Low", "Med", "High"]).optional(),
+    impact: z.enum(["Low", "Med", "High", "Severe"]).optional(),
+    mitigation: z.string().optional(),
+    owner: z.string().optional()
+  })).optional(),
+  assumptions: z.array(z.object({
+    statement: z.string(),
+    falsifiable: z.boolean(),
+    owner: z.string(),
+    due_by: z.string()
+  })).optional(),
+  experiments: z.array(z.object({
+    name: z.string(),
+    cost_usd: z.number(),
+    days: z.number().int(),
+    reduces_uncertainty_on: z.array(z.string()),
+    success_criterion: z.string()
+  })).optional(),
+  competitors: z.array(z.object({
+    name: z.string(),
+    notes: z.string().optional()
+  })).optional(),
+  market: z.object({
+    tam_usd: z.number().optional(),
+    sam_usd: z.number().optional(),
+    som_3yr_usd: z.number().optional(),
+    method: z.string().optional(),
+    notes: z.string().optional(),
+    tam_rationale: z.array(z.string()).optional(),
+    sam_rationale: z.array(z.string()).optional(),
+    som_rationale: z.array(z.string()).optional(),
+    growth_cagr: z.number().optional(),
+    geo_scope: z.string().optional(),
+    segments: z.array(z.string()).optional(),
+    pricing_model: z.string().optional(),
+    arpa_usd: z.number().optional(),
+    adoption_notes: z.string().optional(),
+    icp: z.array(z.string()).optional(),
+    ease_of_spend: z.enum(["Low", "Med", "High"]).optional(),
+    ease_of_reach: z.enum(["Low", "Med", "High"]).optional(),
+    how_to_reach: z.array(z.string()).optional(),
+    channels: z.array(z.string()).optional(),
+    decision_makers: z.array(z.string()).optional(),
+    adoption_ramp: z.array(z.object({
+      month: z.number().int(),
+      adoption_pct: z.number().optional(),
+      revenue_usd: z.number().optional(),
+      notes: z.string().optional()
+    })).optional(),
+    sources: z.array(z.object({
+      title: z.string(),
+      url: z.string().optional(),
+      as_of: z.string().optional()
+    })).optional(),
+    confidence: z.object({
+      p50: z.number().optional(),
+      p90: z.number().optional()
+    }).optional()
+  }).optional(),
+  icp: z.object({
+    primary_icp: z.object({
+      title: z.string(),
+      description: z.string(),
+      demographics: z.object({
+        company_size: z.string(),
+        industry: z.string(),
+        geography: z.string(),
+        budget_range: z.string(),
+        job_titles: z.array(z.string()).optional(),
+        tech_stack: z.array(z.string()).optional()
+      }),
+      psychographics: z.object({
+        pain_points: z.array(z.string()),
+        goals: z.array(z.string()),
+        values: z.array(z.string()),
+        frustrations: z.array(z.string()).optional()
+      }),
+      buying_behavior: z.object({
+        decision_makers: z.array(z.string()),
+        buying_triggers: z.array(z.string()),
+        objections: z.array(z.string()),
+        sales_cycle_days: z.number().optional(),
+        preferred_channels: z.array(z.string()).optional()
+      }),
+      fit_score: z.number(),
+      rationale: z.string()
+    }),
+    secondary_icps: z.array(z.object({
+      title: z.string(),
+      description: z.string(),
+      key_differences: z.array(z.string()),
+      fit_score: z.number()
+    })).optional(),
+    anti_personas: z.array(z.object({
+      title: z.string(),
+      description: z.string(),
+      why_poor_fit: z.array(z.string())
+    })),
+    consulting_fit: z.object({
+      ideal_client_profile: z.string(),
+      engagement_signals: z.array(z.string()),
+      disqualifiers: z.array(z.string()),
+      stakeholder_map: z.array(z.string()).optional()
+    }).optional(),
+    sources: z.array(z.object({
+      title: z.string(),
+      url: z.string().optional(),
+      as_of: z.string().optional()
+    })).optional()
+  }).optional(),
+  metrics: z.object({
+    north_star: z.string().optional(),
+    leading: z.array(z.string()).optional(),
+    unit_econ: z.object({
+      target_cac: z.number().optional(),
+      target_gpm: z.number().optional(),
+      payback_months: z.number().optional()
+    }).optional()
+  }).optional(),
+  plan: z.object({
+    tasks: z.array(z.object({
+      id: z.string().optional(),
+      name: z.string(),
+      owner: z.enum(["Eng", "Design", "PM", "Compliance"]).optional(),
+      days: z.number().int(),
+      deps: z.array(z.string()).optional()
+    })).optional()
+  }).optional(),
+  notes: z.object({
+    pre_mortem: z.string().optional(),
+    evidence_gaps: z.array(z.string()).optional()
+  }).optional(),
+  role_summaries: z.array(z.object({
+    role: z.string(),
+    summary: z.string()
+  })).optional()
+}).passthrough();
+var RunInputSchema = z.object({
+  mode: z.enum(["product", "consulting"]).optional().default("product"),
+  project: z.object({
+    name: z.string(),
+    brief: z.string(),
+    constraints: z.object({
+      team: z.string().optional(),
+      budget_usd: z.number().optional(),
+      deadline_days: z.number().int().optional(),
+      must_ship_scope: z.string().optional()
+    }).optional(),
+    reference_classes: z.array(z.string()).optional().default([]),
+    tech_stack: z.array(z.string()).optional()
+  }),
+  client: z.object({
+    name: z.string().optional(),
+    industry: z.string().optional(),
+    size: z.enum(["startup", "smb", "enterprise"]).optional(),
+    stakeholders: z.array(z.object({
+      name: z.string(),
+      role: z.string().optional(),
+      influence: z.enum(["decision_maker", "influencer", "blocker", "champion"]).optional()
+    })).optional()
+  }).optional(),
+  kill_criteria: z.array(z.object({ name: z.string(), threshold: z.string() })).optional(),
+  pessimism: z.number().min(0).max(1).optional(),
+  organizationId: z.string().optional(),
+  productId: z.string().optional(),
+  seed_personas: z.object({
+    user_personas: z.array(z.object({
+      name: z.string(),
+      role: z.string().optional(),
+      segment: z.string().optional(),
+      is_buyer: z.boolean().optional(),
+      description: z.string(),
+      motivations: z.array(z.string()).optional(),
+      skills: z.array(z.string()).optional(),
+      objections: z.array(z.string()).optional()
+    })).optional(),
+    buyer_personas: z.array(z.object({
+      name: z.string(),
+      role: z.string().optional(),
+      segment: z.string().optional(),
+      is_buyer: z.boolean().optional(),
+      description: z.string(),
+      motivations: z.array(z.string()).optional(),
+      skills: z.array(z.string()).optional(),
+      objections: z.array(z.string()).optional()
+    })).optional()
+  }).optional(),
+  conversational_artifacts: z.object({
+    risks: z.array(z.object({
+      title: z.string(),
+      description: z.string().optional(),
+      category: z.string().optional(),
+      severity: z.enum(["low", "medium", "high", "critical"]).optional(),
+      likelihood: z.number().min(0).max(1).optional(),
+      impact: z.number().min(0).max(1).optional()
+    })).optional(),
+    assumptions: z.array(z.object({
+      statement: z.string(),
+      category: z.string().optional(),
+      confidence: z.number().min(0).max(1).optional(),
+      importance: z.number().min(0).max(1).optional()
+    })).optional(),
+    market_context: z.string().optional(),
+    competitors: z.array(z.object({
+      name: z.string(),
+      description: z.string().optional(),
+      threat_level: z.enum(["low", "medium", "high"]).optional()
+    })).optional(),
+    conversation_summary: z.string().optional(),
+    target_users: z.string().optional()
+  }).optional(),
+  code_context: z.object({
+    files_audited: z.array(z.string()).optional(),
+    ecosystem: z.object({
+      languages: z.array(z.string()).optional(),
+      frameworks: z.array(z.string()).optional(),
+      orms: z.array(z.string()).optional()
+    }).optional(),
+    binding_health: z.object({
+      healthy: z.number().optional(),
+      total: z.number().optional(),
+      coverage_pct: z.number().optional()
+    }).optional(),
+    sensitive_data_count: z.number().optional(),
+    security_gaps: z.array(z.string()).optional()
+  }).optional()
+});
+
+export {
+  PMJsonSchema,
+  RunInputSchema
+};