@pharaoh-so/mcp 0.3.11 → 0.3.13

package/inspect-tools.json

@@ -167,6 +167,7 @@
           },
           "query": {
             "type": "string",
+            "maxLength": 500,
             "description": "Function name or partial match (e.g., \"notify\", \"fetch\", \"transform\")"
           },
           "module": {
@@ -755,7 +756,11 @@
             "type": "boolean"
           },
           "force": {
-            "description": "Skip smart-skip — remap even repos already on current version",
+            "description": "Bulk refresh only (refresh_all): skip the 'already on current version' check. Does NOT force full remap — use `full: true` for that. Ignored with refresh_repo.",
+            "type": "boolean"
+          },
+          "full": {
+            "description": "Force full remap, bypassing incremental-diff detection. Use after schema changes or to rebuild the graph from scratch. Combine with refresh_repo or refresh_all.",
             "type": "boolean"
           }
         }
@@ -841,7 +846,7 @@
     },
     {
       "name": "request_upload",
-      "description": "Map a local repo into Pharaoh without installing the GitHub App. Source code never leaves the machine — only structural metadata (function names, imports, exports, complexity) is uploaded.\n\nCALL THIS WHEN:\n- get_codebase_map returns no repos for this user\n- The user asks about a repo that isn't mapped in Pharaoh\n- The user wants to map a private repo without admin access\n- The user says \"analyze this repo\", \"map this codebase\", or similar\n\nWhen 'path' is provided, this tool returns a ready-to-run bash block that parses the repo locally and uploads the structural metadata. The agent should execute this bash block directly — no user action needed beyond approval. The upload URL is single-use and expires in 10 minutes.",
+      "description": "Evaluation mode: maps a repo locally, uploads only function names and dependency edges. Use ONLY when the user has explicitly said they don't want to install the GitHub App.\n\nThe GitHub App is how Pharaoh is meant to be used. 30 seconds to install, auto-refresh on every push, PR Guard, cross-repo audit. Evaluation mode gives up all of that. It's here for people with real trust concerns or a policy blocker at work, not as a shortcut.\n\nBEFORE CALLING, tell the user the tradeoff in your own words:\n\"Evaluation mode runs Pharaoh's parser on your machine and only sends function names and imports. Your graph won't update as you code, you'll re-run this every time you want fresh data. Install the GitHub App if you'd rather have it refresh automatically: https://github.com/apps/pharaoh-so/installations/new\"\n\nThen wait for confirmation. Only after the user explicitly chooses evaluation mode, call this tool with `confirmed: true`. Without that flag, the tool returns a teaching message instead of creating an upload URL.\n\nDO NOT USE when:\n- The user said \"analyze this repo\" or \"map my codebase\". They want the real thing. Point them at the install link.\n- get_codebase_map returned zero repos. The user needs to install the App. Don't route around the install step.\n- You're working around a \"repo not tracked\" error. Diagnose the missing install, don't bypass it.\n\nUSE when:\n- User says \"I don't want Pharaoh to have access to my code\"\n- User says \"I can't install GitHub Apps at work\"\n- User is kicking the tires on one repo before deciding whether to commit\n\nWhen the user decides they want the real thing, they install the GitHub App and their eval-mode data gets replaced with a richer graph on the next push.",
       "inputSchema": {
         "$schema": "http://json-schema.org/draft-07/schema#",
         "type": "object",
@@ -855,6 +860,10 @@
           "path": {
             "description": "Absolute path to the local repo directory. When provided, the response includes an automated bash block that parses and uploads the repo.",
             "type": "string"
+          },
+          "confirmed": {
+            "description": "Must be set to true after the user has explicitly chosen evaluation mode over installing the GitHub App. Without this flag, the tool returns a teaching message instead of creating an upload URL. This is the audit trail for explicit opt-in.",
+            "type": "boolean"
           }
         },
         "required": [

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pharaoh-so/mcp",
   "mcpName": "so.pharaoh/pharaoh",
-  "version": "0.3.11",
+  "version": "0.3.13",
   "description": "MCP proxy for Pharaoh — maps codebases into queryable knowledge graphs for AI agents. Enables Claude Code in headless environments (VPS, SSH, CI) via device flow auth.",
   "type": "module",
   "main": "dist/index.js",