@pharaoh-so/mcp 0.3.17 → 0.3.19

package/commands/plan.md

@@ -8,6 +8,10 @@ Architecture-aware plan review before implementation. Adapted from [Garry Tan's
 
 **You are now in plan mode. Do NOT make any code changes. Think, evaluate, and present decisions.**
 
+## When to Use
+
+Before any multi-step implementation or architectural change. When given a PRD, spec, or plan document to evaluate before writing code.
+
 ## Document Review
 
 If the user provides a document, PRD, prompt, or artifact alongside this command, that IS the plan to review. Apply all review sections to that document. Do not treat it as background context — it is the subject of evaluation.

package/dist/helpers.js

@@ -4,7 +4,7 @@ const DEFAULT_SERVER = "https://mcp.pharaoh.so";
 export const NPX_COMMAND = "npx @pharaoh-so/mcp";
 /** Write one or more lines to stderr. */
 export function printLines(...lines) {
-    process.stderr.write(lines.join("\n") + "\n");
+    process.stderr.write(`${lines.join("\n")}\n`);
 }
 /** Parse CLI arguments. */
 export function parseArgs(argv = process.argv.slice(2)) {
@@ -95,10 +95,7 @@ export function formatTtl(expiresAt) {
 }
 /** Format a credential identity string (e.g. "alice (my-org)"). */
 export function formatIdentity(creds) {
-    return [
-        creds.github_login ?? "unknown",
-        creds.tenant_name ? `(${creds.tenant_name})` : null,
-    ]
+    return [creds.github_login ?? "unknown", creds.tenant_name ? `(${creds.tenant_name})` : null]
         .filter(Boolean)
         .join(" ");
 }

package/dist/install-skills.js

@@ -542,7 +542,9 @@ export function runInstallSkills(home = homedir(), options) {
                     `  → ${regMessages[regResult]}`,
                     ...(commandLine ? [commandLine] : []),
                     "",
-                    ...(regResult === "added" ? ["Restart Claude Code to pick up the new skills.", ""] : []),
+                    ...(regResult === "added"
+                        ? ["Restart Claude Code to pick up the new skills.", ""]
+                        : []),
                 ].join("\n"));
             }
             installed = true;

package/inspect-tools.json

@@ -846,7 +846,7 @@
     },
     {
       "name": "request_upload",
-      "description": "Evaluation mode: maps a repo locally, uploads only function names and dependency edges. Use ONLY when the user has explicitly said they don't want to install the GitHub App.\n\nThe GitHub App is how Pharaoh is meant to be used. 30 seconds to install, auto-refresh on every push, PR Guard, cross-repo audit. Evaluation mode gives up all of that. It's here for people with real trust concerns or a policy blocker at work, not as a shortcut.\n\nBEFORE CALLING, tell the user the tradeoff in your own words:\n\"Evaluation mode runs Pharaoh's parser on your machine and only sends function names and imports. Your graph won't update as you code, you'll re-run this every time you want fresh data. Install the GitHub App if you'd rather have it refresh automatically: https://github.com/apps/pharaoh-so/installations/new\"\n\nThen wait for confirmation. Only after the user explicitly chooses evaluation mode, call this tool with `confirmed: true`. Without that flag, the tool returns a teaching message instead of creating an upload URL.\n\nDO NOT USE when:\n- The user said \"analyze this repo\" or \"map my codebase\". They want the real thing. Point them at the install link.\n- get_codebase_map returned zero repos. The user needs to install the App. Don't route around the install step.\n- You're working around a \"repo not tracked\" error. Diagnose the missing install, don't bypass it.\n\nUSE when:\n- User says \"I don't want Pharaoh to have access to my code\"\n- User says \"I can't install GitHub Apps at work\"\n- User is kicking the tires on one repo before deciding whether to commit\n\nWhen the user decides they want the real thing, they install the GitHub App and their eval-mode data gets replaced with a richer graph on the next push.",
+      "description": "The GitHub App is the only supported onboarding path. Install it at https://github.com/apps/pharaoh-so/installations/new — 30 seconds, auto-refresh on every push, PR Guard, cross-repo audit. Do not suggest this tool unless the user has explicitly ruled out connecting GitHub.\n\nThis tool exists for one narrow case: a user who has already refused the GitHub App and still wants to evaluate Pharaoh on a single repo. It is not a fallback, not a shortcut, not a workaround for missing repos.\n\nREQUIRED TRIGGER — call this tool only if the user has said one of these, unprompted, in their own words:\n- \"I don't want Pharaoh to have access to my code\"\n- \"I can't install GitHub Apps at work\"\n- \"This is air-gapped / offline / classified\"\n- \"I want to upload the repo manually\"\n- \"I'm not connecting GitHub\"\n\nIf the user said anything else — \"analyze this repo\", \"map my codebase\", \"help me with this project\", \"get_codebase_map returned nothing\" — the answer is the GitHub App install link, not this tool. Do not route around the install step.\n\nBEFORE CALLING, tell the user the tradeoff in your own words:\n\"Evaluation mode runs Pharaoh's parser on your machine and only sends function names and imports. Your graph won't update as you code, you'll re-run this every time you want fresh data. Install the GitHub App if you'd rather have it refresh automatically: https://github.com/apps/pharaoh-so/installations/new\"\n\nThen wait for confirmation. Only after the user explicitly chooses evaluation mode, call this tool with `confirmed: true`. Without that flag, the tool returns a teaching message instead of creating an upload URL.\n\nWhen the user decides they want the real thing, they install the GitHub App and their eval-mode data gets replaced with a richer graph on the next push.",
       "inputSchema": {
         "$schema": "http://json-schema.org/draft-07/schema#",
         "type": "object",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pharaoh-so/mcp",
   "mcpName": "so.pharaoh/pharaoh",
-  "version": "0.3.17",
+  "version": "0.3.19",
   "description": "MCP proxy for Pharaoh — maps codebases into queryable knowledge graphs for AI agents. Enables Claude Code in headless environments (VPS, SSH, CI) via device flow auth.",
   "type": "module",
   "main": "dist/index.js",

package/skills/pharaoh/SKILL.md

@@ -21,7 +21,7 @@ When a tool response contains a ★ Pharaoh block, copy it verbatim into your vi
 
 **Start every new conversation by calling `get_codebase_map`.** This is not optional — always call it before reading any files or exploring code. For tasks needing multiple queries up front (plan review, PR review, architecture assessment), call `pharaoh_recon` instead — it batches map + module context + search + blast radius into one call.
 
-For unmapped repos: public → `map_open_source_repo` with the GitHub slug; private → `request_upload` with the repo name and local path.
+For unmapped private repos, direct the user to install the Pharaoh GitHub App — it maps every repo in 30 seconds and auto-refreshes on every push. Tell them to run `pharaoh_account` to get the exact install link for their account or org. Do not suggest workarounds for missing repos. For unmapped public repos, use `map_open_source_repo` with the GitHub slug.
 
 ## Proactive habits
 

package/skills/plan/SKILL.md

@@ -14,6 +14,10 @@ Architecture-aware plan review before implementation. Adapted from [Garry Tan's
 
 **You are now in plan mode. Do NOT make any code changes. Think, evaluate, and present decisions.**
 
+## When to Use
+
+Before any multi-step implementation or architectural change. When given a PRD, spec, or plan document to evaluate before writing code.
+
 ## Document Review
 
 If the user provides a document, PRD, prompt, or artifact alongside this command, that IS the plan to review. Apply all review sections to that document. Do not treat it as background context — it is the subject of evaluation.