@tryvira/mcp 0.1.26 → 0.1.28

package/README.md

@@ -1,14 +1,14 @@
 # @tryvira/mcp
 
-MIT-licensed MCP client/server package. The Vira service, application, and
-backend remain proprietary and are governed separately.
+An MCP server for connecting MCP-compatible applications to Vira's governed AI
+behavior and runtime APIs. The package is MIT licensed.
 
 An npx-ready MCP server for Vira's existing scoped authority boundary.
 
 ## Run it
 
 ```bash
-npx @tryvira/mcp
+npx -y @tryvira/mcp@0.1.28
 ```
 
 The default transport is the official MCP transport. The legacy custom transport is an
@@ -40,7 +40,8 @@ execution requires the explicit `VIRA_MCP_ALLOW_EFFECTFUL=true` opt-in; producti
 accepts that shortcut. Set `VIRA_MCP_BIND_PUBLIC=true` only when an authenticated reverse
 proxy or equivalent network boundary is present.
 
-Effectful MCP tools remain authority-gated; the launcher does not create a second execution or telemetry path.
+Tools that change state or execute behavior are checked by Vira for credentials, scope,
+policy, evaluation, and release eligibility. The server does not bypass those checks.
 
 ## What a client can discover
 
@@ -75,5 +76,6 @@ Never paste real credentials into a checked-in client configuration. For local-o
 testing, use the local stack and its documented development credentials; the production
 authority path does not accept the local bypass.
 
-See [`docs/MCP_GUIDE.md`](../../docs/MCP_GUIDE.md) for JSON-RPC discovery, tool examples and
-authority/error behavior.
+See the [MCP guide](https://github.com/hrpering/tryvira/blob/main/docs/reference/mcp.md)
+and [tool catalog](https://github.com/hrpering/tryvira/blob/main/docs/reference/mcp-tools.md)
+for discovery, examples, and error behavior.

package/dist/cli.js

@@ -1346,7 +1346,13 @@ async function openPostgresRuntime(options = {}) {
         const id = path.split(/[\\/]/).pop().replace(/\.sql$/i, "");
         const migration = { id, sql: await readFile(path, "utf8") };
         if (id === "001_vnext_foundation") {
-          migration.legacyChecksums = ["d1a175e1b8af20bcf9bc650fb299626513532e4d18da429569251eff69475427"];
+          migration.legacyChecksums = [
+            "d1a175e1b8af20bcf9bc650fb299626513532e4d18da429569251eff69475427",
+            // VDS production was initialized by the earlier portable runner;
+            // accept its recorded checksum once, then rewrite to the current
+            // canonical checksum inside the migration transaction.
+            "4b7d5527be534551b6972a4a712a10b19d06502fc1492e326240efa426826df4"
+          ];
         }
         if (id === "019_postgres_explicit_public_deny_policies") {
           migration.legacyChecksums = ["162658a065737b36c0cedb6f1294d497074e69b5b744bbfe10e42363427c23a9"];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryvira/mcp",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "description": "Vira MCP client and npx-ready JSON-RPC launcher.",
   "keywords": [
     "vira",