@tempo-ai/mcp 0.0.108-staging.2 → 0.0.108

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __tempoCreateRequire } from 'node:module'; const require = __tempoCreateRequire(import.meta.url);
 import {
   run
-} from "./chunk-ZREHCLUJ.js";
+} from "./chunk-TLB5CTFV.js";
 import "./chunk-KFUOQZBJ.js";
 
 // src/bin.ts

package/dist/{call-Y6OFNGWK.js → call-VWBUQAPD.js}

@@ -8,7 +8,7 @@ import {
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
 async function connectAggregate(options) {
-  const { createTempoAggregate } = await import("./serve-PVYMDC76.js");
+  const { createTempoAggregate } = await import("./serve-C7D3CKVT.js");
   const handle = await createTempoAggregate(options);
   const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
   const client = new Client({ name: "tempo-mcp-cli", version: "0" });
@@ -127,4 +127,4 @@ export {
   runCall,
   runTools
 };
-//# sourceMappingURL=call-Y6OFNGWK.js.map
+//# sourceMappingURL=call-VWBUQAPD.js.map

package/dist/{chunk-ZREHCLUJ.js → chunk-TLB5CTFV.js}

@@ -157,7 +157,7 @@ async function run(argv) {
         process.stderr.write(USAGE);
         return 1;
       }
-      const { runServe } = await import("./serve-PVYMDC76.js");
+      const { runServe } = await import("./serve-C7D3CKVT.js");
       return await runServe(options);
     }
     switch (subcommand) {
@@ -172,11 +172,11 @@ async function run(argv) {
         return await runToken(rest);
       }
       case "tools": {
-        const { runTools } = await import("./call-Y6OFNGWK.js");
+        const { runTools } = await import("./call-VWBUQAPD.js");
         return await runTools(rest);
       }
       case "call": {
-        const { runCall } = await import("./call-Y6OFNGWK.js");
+        const { runCall } = await import("./call-VWBUQAPD.js");
         return await runCall(rest);
       }
       default:
@@ -195,4 +195,4 @@ async function run(argv) {
 export {
   run
 };
-//# sourceMappingURL=chunk-ZREHCLUJ.js.map
+//# sourceMappingURL=chunk-TLB5CTFV.js.map

package/dist/index.js

@@ -1,7 +1,7 @@
 import { createRequire as __tempoCreateRequire } from 'node:module'; const require = __tempoCreateRequire(import.meta.url);
 import {
   run
-} from "./chunk-ZREHCLUJ.js";
+} from "./chunk-TLB5CTFV.js";
 import "./chunk-KFUOQZBJ.js";
 export {
   run

package/dist/{serve-PVYMDC76.js → serve-C7D3CKVT.js}

@@ -48572,6 +48572,8 @@ on:
 
 permissions:
   contents: read
+  # Compatibility with older CLIs during rollout; the current CLI publishes
+  # all statuses through the Tempo GitHub App instead of this token.
   statuses: write
   pull-requests: write
   # GitHub OIDC is the only credential Tempo accepts. No secret is stored.
@@ -48649,14 +48651,6 @@ jobs:
       # optimization, so a registry hiccup must not fail the run.
       - run: npx --yes @tempo-ai/visual-review@latest claim || echo "::warning::capture claim announcement unavailable; capture claims after setup"
 
-      - if: github.event_name == 'pull_request'
-        run: |
-          gh api "repos/\${{ github.repository }}/statuses/\${{ github.event.pull_request.head.sha }}" \\
-            -f state=pending -f context=visual-review \\
-            -f "description=capturing storyboards\u2026"
-        env:
-          GH_TOKEN: \${{ github.token }}
-
       - uses: pnpm/action-setup@v4
       - uses: actions/setup-node@v4
         with:
@@ -48695,16 +48689,13 @@ jobs:
         run: npx --yes @tempo-ai/visual-review@latest claim --release || echo "::warning::capture claim release unavailable; the lease expires on its own"
 
       - if: failure() && github.event_name == 'pull_request'
-        run: |
-          gh api "repos/\${{ github.repository }}/statuses/\${{ github.event.pull_request.head.sha }}" \\
-            -f state=failure -f context=visual-review \\
-            -f "description=capture failed \u2014 see workflow logs"
+        run: npx --yes @tempo-ai/visual-review@latest report --fallback-failure --sha \${{ github.event.pull_request.head.sha }}
         env:
           GH_TOKEN: \${{ github.token }}
 
-  # Polls the run until Tempo has compared it, then posts the verdict and the
-  # sticky PR comment. Approvals in the Tempo report flip the check afterwards
-  # without a CI re-run.
+  # Polls the run until Tempo has compared it, then posts the sticky PR
+  # comment. Tempo's GitHub App owns every status, including declarations,
+  # failures, and portal approvals \u2014 no CI re-run needed for an approval.
   report:
     needs: capture
     if: github.event_name == 'pull_request'
@@ -48874,6 +48865,9 @@ ${hostDirComment(tempoDir)}${tempoDir === "." ? "" : `      - run: cd ${tempoDir
 }
 function analyzeExistingWorkflow(workflow, options) {
   const body = workflow.split("\n").filter((line) => !/^\s*#/.test(line)).join("\n");
+  const hasClaimStart = /@tempo-ai\/visual-review@[^\s"']+[ \t]+claim(?=[ \t]*(?:$|[|&;#'"]))/m.test(
+    body.replace(/\\\r?\n[ \t]*/g, " ")
+  );
   const drift = [];
   const push = (item) => drift.push(item);
   if (!/id-token:\s*write/.test(body)) {
@@ -48892,7 +48886,7 @@ function analyzeExistingWorkflow(workflow, options) {
     push({
       code: "missing_permissions",
       message: `The workflow does not grant ${missingPermissions.join(", ")}.`,
-      fix: "Under `permissions:` grant `contents: read` (checkout), `statuses: write` (the pending / fallback `visual-review` status) and `pull-requests: write` (the sticky report comment)."
+      fix: "Under `permissions:` grant `contents: read` (checkout), `statuses: write` (compatibility with older CLI releases) and `pull-requests: write` (the sticky report comment). Current releases publish statuses through the Tempo GitHub App."
     });
   }
   if (!workflowHasPullRequestTrigger(body)) {
@@ -48935,7 +48929,7 @@ function analyzeExistingWorkflow(workflow, options) {
         fix: "Add `npx --yes @tempo-ai/visual-review@latest capture --parallel 2` (with `TEMPO_DEVSERVER_PROTECTED_ROOTS: ${{ github.workspace }}`) after the install and browser steps \u2014 without it nothing is captured or compared."
       });
     }
-    if (!/visual-review@[^\s"']+\s+claim\b/.test(body)) {
+    if (!hasClaimStart) {
       push({
         code: "missing_claim_step",
         message: "No `claim` step runs before dependency setup.",
@@ -48964,11 +48958,12 @@ function analyzeExistingWorkflow(workflow, options) {
       fix: "Gate capture on `!contains(github.event.pull_request.body, '<!-- tempo-no-visual-change -->')` and add the `no-visual-change` job that posts success."
     });
   }
-  if (!/state=pending/.test(body) || !/context=visual-review/.test(body)) {
+  const hasLegacyPendingStatus = /state=pending/.test(body) && /context=visual-review/.test(body);
+  if (!hasClaimStart && !hasLegacyPendingStatus) {
     push({
       code: "missing_pending_status",
       message: "The workflow never posts the `visual-review` status as pending.",
-      fix: "Post `-f state=pending -f context=visual-review` on the PR head at capture start so the check appears within a minute of the push instead of only when capture finishes."
+      fix: "Add `npx --yes @tempo-ai/visual-review@latest claim` after checkout and before dependency setup; it posts pending on the PR head through the Tempo GitHub App, so every visual-review status has the same publisher."
     });
   }
   return drift;
@@ -51339,7 +51334,7 @@ function buildBackends(runtime, toolsets, workspace) {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.0.108-staging.2";
+var CLI_VERSION = "0.0.108";
 
 // src/canvas-hooks.ts
 var import_pngjs4 = __toESM(require_png(), 1);
@@ -52276,4 +52271,4 @@ export {
   runServe,
   scopeParamsFor
 };
-//# sourceMappingURL=serve-PVYMDC76.js.map
+//# sourceMappingURL=serve-C7D3CKVT.js.map