@pharaoh-so/mcp 0.1.6 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,41 @@
+# Changelog
+
+All notable changes to `@pharaoh-so/mcp` will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.5] - 2026-03-24
+
+### Added
+- Inspect mode (`--inspect`) for MCP registry validation and debugging
+- Tool manifest JSON output for Glama and other MCP registries
+
+### Fixed
+- Improved error messages for connection failures
+
+## [0.1.3] - 2026-03-23
+
+### Added
+- `inspect-tools.json` bundled in package for offline tool schema access
+
+### Changed
+- Updated `@modelcontextprotocol/sdk` to ^1.26.0
+
+## [0.1.2] - 2026-03-22
+
+### Fixed
+- Credential file permissions set correctly on first write
+- Token refresh race condition when multiple requests arrive simultaneously
+
+## [0.1.0] - 2026-03-20
+
+### Added
+- Initial release
+- Stdio-to-SSE proxy for headless Pharaoh MCP connections
+- RFC 8628 device authorization flow
+- Automatic token refresh
+- Credential storage with restrictive file permissions (`0600`)
+- `--server` flag for custom Pharaoh instances
+- `--logout` flag to clear stored credentials
+- Support for all 19 Pharaoh MCP tools

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Pharaoh, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,31 +1,60 @@
 # @pharaoh-so/mcp
 
-Stdio-to-SSE proxy for [Pharaoh](https://pharaoh.so) — enables Claude Code in headless environments (VPS, SSH, CI) where a browser isn't available for OAuth.
+[![npm version](https://img.shields.io/npm/v/@pharaoh-so/mcp)](https://www.npmjs.com/package/@pharaoh-so/mcp)
+[![license](https://img.shields.io/npm/l/@pharaoh-so/mcp)](https://github.com/Pharaoh-so/pharaoh-mcp/blob/main/LICENSE)
+[![node](https://img.shields.io/node/v/@pharaoh-so/mcp)](https://nodejs.org)
+[![pharaoh MCP server](https://glama.ai/mcp/servers/Pharaoh-so/pharaoh/badges/score.svg)](https://glama.ai/mcp/servers/Pharaoh-so/pharaoh)
+
+MCP proxy for [Pharaoh](https://pharaoh.so) — maps codebases into queryable knowledge graphs for AI agents.
+
+Pharaoh gives AI coding assistants a complete architectural map of your codebase: every function, dependency, module, and connection. Instead of reading files one at a time, your AI agent queries the knowledge graph and gets instant answers about blast radius, unused code, dependency chains, and more.
+
+This package enables [Claude Code](https://docs.anthropic.com/en/docs/build-with-claude/claude-code) to connect to Pharaoh in **headless environments** (VPS, SSH, containers, CI) where a browser isn't available for OAuth. It acts as a stdio-to-SSE proxy, presenting itself as a local MCP server while relaying all communication to the remote Pharaoh server.
 
 ## Quick Start
 
-**Step 1 — Authenticate** (run in your terminal):
+### Step 1 — Authenticate
+
+Run the proxy directly to trigger the device authorization flow:
 
 ```bash
 npx @pharaoh-so/mcp
 ```
 
-This shows a device code and URL. Open the URL on any device (phone, laptop) to authorize. Credentials are saved to `~/.pharaoh/credentials.json` (valid for 7 days).
+This displays a device code and a URL. Open the URL on **any device** (phone, laptop, tablet) and enter the code to authorize. Credentials are saved to `~/.pharaoh/credentials.json` and remain valid for 7 days, with automatic re-authorization when they expire.
 
-**Step 2 — Add to Claude Code:**
+### Step 2 — Add to Claude Code
 
 ```bash
 claude mcp add pharaoh -- npx @pharaoh-so/mcp
 ```
 
-If you previously added pharaoh as SSE, remove it first:
+Verify the connection:
+
+```bash
+claude mcp list
+```
+
+You should see `pharaoh` listed as a **stdio** server.
+
+### Switching from SSE
+
+If you previously added Pharaoh as an SSE server, remove it first:
 
 ```bash
 claude mcp remove pharaoh
 claude mcp add pharaoh -- npx @pharaoh-so/mcp
 ```
 
-Verify with `claude mcp list` — it should show `pharaoh` as a **stdio** server, not SSE.
+### Desktop with Browser (Alternative)
+
+If you have a browser available (desktop, laptop), you can connect directly via SSE instead:
+
+```bash
+claude mcp add --transport sse pharaoh https://mcp.pharaoh.so/sse
+```
+
+This uses OAuth in the browser and doesn't require this package.
 
 ## How It Works
 
@@ -33,18 +62,213 @@ Verify with `claude mcp list` — it should show `pharaoh` as a **stdio** server
 Claude Code ← stdio → @pharaoh-so/mcp ← SSE/HTTP → mcp.pharaoh.so
 ```
 
-The proxy presents itself as an MCP server to Claude Code via stdio, and relays all messages to the remote Pharaoh server over SSE. Authentication uses the RFC 8628 device authorization flow — no browser required on the machine running Claude Code.
+The proxy implements the [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) specification:
+
+1. **Claude Code** launches the proxy as a child process and communicates via **stdio** (stdin/stdout)
+2. **The proxy** authenticates with Pharaoh using stored credentials (or triggers device flow)
+3. **All MCP messages** (tool calls, responses, notifications) are relayed to the remote Pharaoh server over **SSE** (Server-Sent Events)
+4. **Pharaoh** queries the knowledge graph and returns architectural data to the proxy
+5. **The proxy** forwards responses back to Claude Code via stdio
+
+Authentication uses [RFC 8628](https://datatracker.ietf.org/doc/html/rfc8628) (OAuth 2.0 Device Authorization Grant) — no browser is needed on the machine running Claude Code.
+
+## Available Tools
+
+Once connected, Pharaoh provides 19 MCP tools organized into four categories:
+
+### Orient (Free)
+
+| Tool | What it answers |
+|------|----------------|
+| `get_codebase_map` | What modules exist and how do they relate? |
+| `get_module_context` | What does this module look like before I modify it? |
+| `search_functions` | Does this function already exist somewhere? |
+| `get_design_system` | What UI components and tokens already exist? |
+
+### Investigate (Free + Pro)
+
+| Tool | What it answers |
+|------|----------------|
+| `get_blast_radius` | What breaks if I change this function/file/module? |
+| `query_dependencies` | How are these two modules connected? |
+| `check_reachability` | Is this function actually reachable from entry points? |
+| `get_vision_docs` | Is there a PRD or spec for this? |
+
+### Audit (Pro)
 
-## Options
+| Tool | What it answers |
+|------|----------------|
+| `get_vision_gaps` | What's specified but not built? What's built but not specified? |
+| `get_cross_repo_audit` | Are shared dependencies drifting between repos? |
+| `get_consolidation_opportunities` | Where is duplicate or overlapping logic? |
+| `get_unused_code` | What code is never called and safe to delete? |
+| `get_test_coverage` | Which modules/functions lack test coverage? |
+| `get_regression_risk` | How risky is this change to production? |
+
+### Manage (Free)
+
+| Tool | What it answers |
+|------|----------------|
+| `request_upload` | Map a local repo without installing the GitHub App |
+| `setup_environment` | Install recommended development plugins |
+| `pharaoh_account` | Check plan, toggle PR Guard, trigger refresh |
+| `pharaoh_feedback` | Report false positives or tool issues |
+| `pharaoh_admin` | Org-level administration |
+
+## Inspect Mode
+
+Use `--inspect` to dump the full tool manifest as JSON (useful for MCP registry validation and debugging):
+
+```bash
+npx @pharaoh-so/mcp --inspect
+```
+
+This outputs the complete list of tools with their schemas and exits immediately, without connecting to the server.
+
+## CLI Options
 
 ```
---server <url>  Pharaoh server URL (default: https://mcp.pharaoh.so)
---logout        Clear stored credentials and exit
---help          Show help
+Usage: pharaoh-mcp [options]
+
+Options:
+  --server <url>   Pharaoh server URL (default: https://mcp.pharaoh.so)
+  --logout         Clear stored credentials and exit
+  --inspect        Output tool manifest as JSON and exit
+  --help           Show help
+  --version        Show version number
+```
+
+## Configuration
+
+### Credentials
+
+Credentials are stored at `~/.pharaoh/credentials.json` with `0600` permissions (owner-read/write only). The file contains:
+
+- **Access token** — used to authenticate MCP requests
+- **Refresh token** — used to obtain new access tokens when they expire
+- **Expiry timestamp** — tokens are refreshed automatically before expiration
+
+To clear credentials:
+
+```bash
+npx @pharaoh-so/mcp --logout
+```
+
+### Custom Server
+
+For self-hosted Pharaoh instances or development:
+
+```bash
+claude mcp add pharaoh -- npx @pharaoh-so/mcp --server https://your-pharaoh-instance.com
 ```
 
+### Environment Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `PHARAOH_SERVER_URL` | `https://mcp.pharaoh.so` | Pharaoh server URL (alternative to `--server`) |
+
+## Requirements
+
+- **Node.js** >= 18
+- **Claude Code** or any MCP-compatible AI client
+- A **Pharaoh account** — sign up at [pharaoh.so](https://pharaoh.so)
+
 ## Security
 
-- Credentials stored with `0600` permissions (owner-read/write only)
+- Credentials are stored with restrictive file permissions (`0600` — owner-read/write only)
+- Authentication uses the [RFC 8628](https://datatracker.ietf.org/doc/html/rfc8628) device authorization flow — no secrets are embedded in the package
+- All communication with the Pharaoh server uses HTTPS/TLS
+- No source code is ever transmitted — Pharaoh maps structural metadata (function names, file paths, dependency relationships) into a knowledge graph. Your code never leaves your machine.
+- Tokens expire after 7 days and are refreshed automatically
 - Only use trusted server URLs — the proxy sends your auth token to the configured server
-- Tokens expire after 7 days; re-authorization is automatic
+
+### Reporting Vulnerabilities
+
+If you discover a security vulnerability, please report it responsibly by emailing [security@pharaoh.so](mailto:security@pharaoh.so). Do not open a public issue.
+
+## Troubleshooting
+
+### "Connection refused" or "ECONNREFUSED"
+
+The Pharaoh server may be temporarily unavailable. Check [status.pharaoh.so](https://pharaoh.so) or try again in a few minutes.
+
+### "Token expired" or "401 Unauthorized"
+
+Re-authenticate by running the proxy directly:
+
+```bash
+npx @pharaoh-so/mcp
+```
+
+Or clear credentials and start fresh:
+
+```bash
+npx @pharaoh-so/mcp --logout
+npx @pharaoh-so/mcp
+```
+
+### "pharaoh" not showing in `claude mcp list`
+
+Make sure you added it with the correct command:
+
+```bash
+claude mcp add pharaoh -- npx @pharaoh-so/mcp
+```
+
+Note the `--` separator between `pharaoh` and `npx`.
+
+### Device code not working
+
+- Ensure you're opening the URL on a device with browser access
+- The device code expires after 15 minutes — request a new one by re-running the command
+- Check that you're logged into GitHub when authorizing
+
+### Slow startup
+
+The first run after installation may take a moment as npm downloads the package. Subsequent runs use the cached version. To pre-install globally:
+
+```bash
+npm install -g @pharaoh-so/mcp
+claude mcp add pharaoh -- pharaoh-mcp
+```
+
+## How Pharaoh Works
+
+Pharaoh parses your repositories using [tree-sitter](https://tree-sitter.github.io/) and maps structural metadata into a [Neo4j](https://neo4j.com/) knowledge graph. The graph contains:
+
+- **Functions** — names, signatures, complexity scores, export visibility
+- **Files** — paths, module membership, language classification
+- **Modules** — logical groupings detected from directory structure
+- **Dependencies** — import/export relationships, call chains, module connections
+- **Vision specs** — PRD/spec documents linked to implementation
+
+No source code is stored — only structural metadata. When an AI agent queries Pharaoh, it gets architectural facts in minimal tokens, not raw code dumps. This means your AI assistant can understand your entire codebase architecture without consuming its context window reading files one by one.
+
+## Supported Languages
+
+- **TypeScript / JavaScript** — full support (functions, classes, imports, exports, JSX)
+- **Python** — full support (functions, classes, imports, decorators)
+- More languages planned via tree-sitter grammar support
+
+## Contributing
+
+Contributions are welcome. Please open an issue first to discuss what you'd like to change.
+
+1. Fork the repository
+2. Create your feature branch (`git checkout -b feature/amazing-feature`)
+3. Commit your changes (`git commit -m 'Add amazing feature'`)
+4. Push to the branch (`git push origin feature/amazing-feature`)
+5. Open a Pull Request
+
+## License
+
+[MIT](LICENSE) -- Pharaoh, Inc.
+
+## Links
+
+- [Pharaoh website](https://pharaoh.so)
+- [Documentation](https://docs.pharaoh.so)
+- [MCP specification](https://modelcontextprotocol.io/)
+- [Claude Code](https://docs.anthropic.com/en/docs/build-with-claude/claude-code)
+- [Report an issue](https://github.com/Pharaoh-so/pharaoh-mcp/issues)

package/dist/helpers.js

@@ -40,7 +40,7 @@ export function parseArgs(argv = process.argv.slice(2)) {
     return { server, logout };
 }
 export function printUsage() {
-    printLines("Usage: pharaoh-mcp [options]", "", "Options:", "  --server <url>  Pharaoh server URL (default: https://mcp.pharaoh.so)", "  --logout        Clear stored credentials and exit", "  --help, -h      Show this help", "", "Add to Claude Code:", "  claude mcp add pharaoh -- npx @pharaoh-so/mcp", "");
+    printLines("Usage: pharaoh-mcp [options]", "", "Options:", "  --server <url>    Pharaoh server URL (default: https://mcp.pharaoh.so)", "  --logout          Clear stored credentials and exit", "  --install-skills  Install Pharaoh skills to OpenClaw (~/.openclaw/skills/)", "  --help, -h        Show this help", "", "Add to Claude Code:", "  claude mcp add pharaoh -- npx @pharaoh-so/mcp", "");
 }
 /**
  * Validate that a server-supplied SSE URL shares the same origin as the configured server.

package/dist/index.js

@@ -26,6 +26,12 @@ async function main() {
         await runInspect();
         return;
     }
+    // Install-skills mode — copy bundled skills to ~/.openclaw/skills/
+    if (args.includes("--install-skills")) {
+        const { runInstallSkills } = await import("./install-skills.js");
+        runInstallSkills();
+        return;
+    }
     const { server, logout } = parseArgs(args);
     if (logout) {
         deleteCredentials();

package/dist/install-skills.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Detect whether OpenClaw is installed by checking for ~/.openclaw/.
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ * @returns True if ~/.openclaw/ exists.
+ */
+export declare function detectOpenClaw(home?: string): boolean;
+/**
+ * Copy all bundled skill directories to ~/.openclaw/skills/.
+ * Overwrites existing skill dirs on reinstall (cpSync recursive + force).
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ * @returns Number of skill directories copied.
+ */
+export declare function installSkills(home?: string): number;
+/**
+ * Read ~/.openclaw/openclaw.json, add the Pharaoh MCP server under `mcpServers`,
+ * and write it back. Creates the file if it does not exist. Does NOT overwrite
+ * an existing `pharaoh` entry — skips if already present.
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ * @returns True if the config was written/updated, false if pharaoh was already present.
+ */
+export declare function mergeOpenClawConfig(home?: string): boolean;
+/**
+ * Main entry point for --install-skills.
+ *
+ * Detects OpenClaw, copies skills, merges config, and prints a summary.
+ * If OpenClaw is not detected, prints manual installation instructions instead.
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ */
+export declare function runInstallSkills(home?: string): void;

package/dist/install-skills.js

@@ -0,0 +1,121 @@
+/**
+ * --install-skills implementation for the Pharaoh MCP proxy CLI.
+ *
+ * Copies bundled skill directories to ~/.openclaw/skills/ and merges
+ * the Pharaoh MCP server entry into ~/.openclaw/openclaw.json.
+ * If OpenClaw is not detected, prints manual installation instructions.
+ */
+import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/** Path to the bundled skills directory (one level up from dist/). */
+const BUNDLED_SKILLS_DIR = join(__dirname, "..", "skills");
+/**
+ * Detect whether OpenClaw is installed by checking for ~/.openclaw/.
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ * @returns True if ~/.openclaw/ exists.
+ */
+export function detectOpenClaw(home = homedir()) {
+    return existsSync(join(home, ".openclaw"));
+}
+/**
+ * Copy all bundled skill directories to ~/.openclaw/skills/.
+ * Overwrites existing skill dirs on reinstall (cpSync recursive + force).
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ * @returns Number of skill directories copied.
+ */
+export function installSkills(home = homedir()) {
+    const targetDir = join(home, ".openclaw", "skills");
+    if (!existsSync(targetDir)) {
+        mkdirSync(targetDir, { recursive: true });
+    }
+    const entries = readdirSync(BUNDLED_SKILLS_DIR, { withFileTypes: true });
+    const skillDirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
+    for (const skillName of skillDirs) {
+        const src = join(BUNDLED_SKILLS_DIR, skillName);
+        const dst = join(targetDir, skillName);
+        cpSync(src, dst, { recursive: true, force: true });
+    }
+    return skillDirs.length;
+}
+/**
+ * Read ~/.openclaw/openclaw.json, add the Pharaoh MCP server under `mcpServers`,
+ * and write it back. Creates the file if it does not exist. Does NOT overwrite
+ * an existing `pharaoh` entry — skips if already present.
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ * @returns True if the config was written/updated, false if pharaoh was already present.
+ */
+export function mergeOpenClawConfig(home = homedir()) {
+    const configPath = join(home, ".openclaw", "openclaw.json");
+    let config = {};
+    if (existsSync(configPath)) {
+        try {
+            const raw = readFileSync(configPath, "utf-8");
+            config = JSON.parse(raw);
+        }
+        catch {
+            // Corrupted JSON — refuse to overwrite to avoid losing existing config
+            process.stderr.write([
+                "Pharaoh: ~/.openclaw/openclaw.json exists but is not valid JSON.",
+                "Fix or delete it manually, then re-run --install-skills.",
+                "",
+            ].join("\n"));
+            return false;
+        }
+    }
+    if (!config.mcpServers) {
+        config.mcpServers = {};
+    }
+    // Don't overwrite an existing pharaoh entry
+    if (config.mcpServers.pharaoh) {
+        return false;
+    }
+    config.mcpServers.pharaoh = {
+        command: "npx",
+        args: ["@pharaoh-so/mcp"],
+    };
+    writeFileSync(configPath, JSON.stringify(config, null, "\t"));
+    return true;
+}
+/**
+ * Main entry point for --install-skills.
+ *
+ * Detects OpenClaw, copies skills, merges config, and prints a summary.
+ * If OpenClaw is not detected, prints manual installation instructions instead.
+ *
+ * @param home - Home directory override (defaults to os.homedir()).
+ */
+export function runInstallSkills(home = homedir()) {
+    const hasOpenClaw = detectOpenClaw(home);
+    if (!hasOpenClaw) {
+        process.stderr.write([
+            "Pharaoh: OpenClaw not detected (~/.openclaw/ not found).",
+            "",
+            "To install OpenClaw: https://openclaw.dev/install",
+            "",
+            "Or install skills manually:",
+            `  1. Copy the skills/ directory from this package to ~/.openclaw/skills/`,
+            `  2. Add Pharaoh to ~/.openclaw/openclaw.json under mcpServers:`,
+            `       "pharaoh": { "command": "npx", "args": ["@pharaoh-so/mcp"] }`,
+            "",
+        ].join("\n"));
+        return;
+    }
+    const count = installSkills(home);
+    const configUpdated = mergeOpenClawConfig(home);
+    const configMsg = configUpdated
+        ? "Pharaoh MCP server added to ~/.openclaw/openclaw.json"
+        : "Pharaoh already present in ~/.openclaw/openclaw.json — skipped";
+    process.stderr.write([
+        `Pharaoh: installed ${count} skills to ~/.openclaw/skills/`,
+        configMsg,
+        "",
+        "Restart OpenClaw to pick up the new skills.",
+        "",
+    ].join("\n"));
+}

package/inspect-tools.json

@@ -633,11 +633,21 @@
     },
     {
       "name": "setup_environment",
-      "description": "Set up the optimal Claude Code environment for this codebase — install Pharaoh's curated plugin bundle.\n\nCALL THIS WHEN:\n• The user says \"set up my environment\", \"install plugins\", or \"optimize my setup\"\n• You want to proactively improve the development experience with proven plugins\n• After noticing the user could benefit from LSP, security scanning, or code review tools\n\nRETURNS: A curated list of recommended plugins with install commands, tailored to the languages in this codebase. Run the install commands to set everything up.\n\nThis is a one-time setup. Once installed, plugins persist across sessions.",
+      "description": "Set up the optimal development environment for this codebase — install Pharaoh's curated plugin bundle.\n\nCALL THIS WHEN:\n• The user says \"set up my environment\", \"install plugins\", or \"optimize my setup\"\n• You want to proactively improve the development experience with proven plugins\n• After noticing the user could benefit from LSP, security scanning, or code review tools\n• The user is on OpenClaw or Cursor and wants to install Pharaoh skills/prompts\n\nRETURNS: A curated list of recommended plugins and install instructions, tailored to the client platform (claude-code, openclaw, or cursor) and languages in this codebase.\n\nThis is a one-time setup. Once installed, plugins persist across sessions.",
       "inputSchema": {
         "$schema": "http://json-schema.org/draft-07/schema#",
         "type": "object",
-        "properties": {}
+        "properties": {
+          "client": {
+            "description": "Client platform — determines install instructions format. Defaults to claude-code.",
+            "type": "string",
+            "enum": [
+              "claude-code",
+              "openclaw",
+              "cursor"
+            ]
+          }
+        }
       },
       "annotations": {
         "title": "Environment Setup",

package/package.json

@@ -1,33 +1,65 @@
 {
-	"name": "@pharaoh-so/mcp",
-	"version": "0.1.6",
-	"description": "Stdio-to-SSE proxy for Pharaoh MCP — enables headless environments (VPS, SSH, CI) via device flow auth",
-	"type": "module",
-	"main": "dist/index.js",
-	"bin": {
-		"pharaoh-mcp": "./dist/index.js"
-	},
-	"scripts": {
-		"build": "tsc && node -e \"const fs=require('fs'),f='dist/index.js',c=fs.readFileSync(f,'utf8');if(!c.startsWith('#!'))fs.writeFileSync(f,'#!/usr/bin/env node\\n'+c);fs.chmodSync(f,0o755)\"",
-		"typecheck": "tsc --noEmit",
-		"test": "vitest run",
-		"lint": "biome check src/"
-	},
-	"files": [
-		"dist",
-		"inspect-tools.json",
-		"README.md"
-	],
-	"license": "MIT",
-	"engines": {
-		"node": ">=18"
-	},
-	"dependencies": {
-		"@modelcontextprotocol/sdk": "^1.26.0"
-	},
-	"devDependencies": {
-		"@biomejs/biome": "^2.3.15",
-		"typescript": "^5.9.3",
-		"vitest": "^4.0.18"
-	}
-}
+  "name": "@pharaoh-so/mcp",
+  "version": "0.2.0",
+  "description": "MCP proxy for Pharaoh — maps codebases into queryable knowledge graphs for AI agents. Enables Claude Code in headless environments (VPS, SSH, CI) via device flow auth.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "pharaoh-mcp": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "skills",
+    "inspect-tools.json",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "pharaoh",
+    "codebase",
+    "knowledge-graph",
+    "code-analysis",
+    "architecture",
+    "ai-agent",
+    "claude",
+    "claude-code",
+    "developer-tools",
+    "static-analysis",
+    "dependency-graph"
+  ],
+  "author": "Pharaoh <hello@pharaoh.so> (https://pharaoh.so)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Pharaoh-so/pharaoh-mcp.git"
+  },
+  "homepage": "https://pharaoh.so",
+  "bugs": {
+    "url": "https://github.com/Pharaoh-so/pharaoh-mcp/issues"
+  },
+  "funding": {
+    "type": "individual",
+    "url": "https://pharaoh.so"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.3.15",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
+  },
+  "scripts": {
+    "build": "tsc && node -e \"const fs=require('fs'),f='dist/index.js',c=fs.readFileSync(f,'utf8');if(!c.startsWith('#!'))fs.writeFileSync(f,'#!/usr/bin/env node\\n'+c);fs.chmodSync(f,0o755)\"",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "lint": "biome check src/"
+  }
+}