@pharaoh-so/mcp 0.3.35 → 0.3.37

package/README.md

@@ -152,7 +152,7 @@ claude mcp add --scope user pharaoh -- npx @pharaoh-so/mcp --server https://your
 - Credentials are stored with restrictive file permissions (`0600` — owner-read/write only)
 - Authentication uses the [RFC 8628](https://datatracker.ietf.org/doc/html/rfc8628) device authorization flow — no secrets are embedded in the package
 - All communication with the Pharaoh server uses HTTPS/TLS
-- No source code is ever transmitted — Pharaoh maps structural metadata (function names, file paths, dependency relationships) into a knowledge graph. Your code never leaves your machine.
+- The proxy never reads or sends your local files. Pharaoh reads your code from GitHub through its GitHub App, maps it into a knowledge graph of structural metadata (function names, file paths, dependency relationships), and deletes the clone when mapping ends.
 - Tokens expire after 7 days and are refreshed automatically
 - Only use trusted server URLs — the proxy sends your auth token to the configured server
 

package/inspect-tools.json

@@ -245,7 +245,7 @@
     },
     {
       "name": "get_unused_code",
-      "description": "Find code nothing runs: functions no production entry point (endpoint, CLI command, cron job, event handler, worker, entry file) reaches. Pass `functions` to check whether specific functions are wired in.\n\nCALL THIS WHEN:\n• Cleaning up or refactoring a module: find what's dead before touching it\n• Before deleting a function: confirm nothing reaches it\n• After pushing new code: confirm the new functions are reachable from an entry point\n\nRETURNS:\n• Dead: unreached, named in no other file, and no production file imports its file. Safe to delete.\n• Possibly unused: unreached, but named in other files (string dispatch, dynamic loading) or its file is imported. Listed with the files that name it; check before deleting.\n• Used only by tests: exported functions only test files reference.\nWith `functions`: each one's status, and the call path from an entry point when it's reachable.",
+      "description": "Find code nothing runs: functions no production entry point (endpoint, CLI command, cron job, event handler, worker, entry file) reaches. Pass `functions` to check whether specific functions are wired in.\n\nCALL THIS WHEN:\n• Cleaning up or refactoring a module: find what's dead before touching it\n• Before deleting a function: confirm nothing reaches it\n• After pushing new code: confirm the new functions are reachable from an entry point\n\nRETURNS:\n• Dead: unreached, named in no other file, and no production file imports its file. Safe to delete.\n• Possibly unused: unreached, but named in other files (string dispatch, dynamic loading) or its file is imported. Listed with the files that name it; check before deleting.\n• Used only by tests: exported functions and class methods only test files reference.\nWith `functions`: each one's status, and the call path from an entry point when it's reachable.",
       "inputSchema": {
         "$schema": "http://json-schema.org/draft-07/schema#",
         "type": "object",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pharaoh-so/mcp",
   "mcpName": "so.pharaoh/pharaoh",
-  "version": "0.3.35",
+  "version": "0.3.37",
   "description": "MCP proxy for Pharaoh — maps codebases into queryable knowledge graphs for AI agents. Enables Claude Code in headless environments (VPS, SSH, CI) via device flow auth.",
   "type": "module",
   "main": "dist/index.js",