@vibecodetown/mcp-server 2.1.4 → 2.2.1

package/build/engine.js

@@ -1,5 +1,8 @@
 // adapters/mcp-ts/src/engine.ts
 // Engine execution using cached binaries (no PATH dependency)
+import { existsSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 import { ensureEngines } from "./bootstrap/installer.js";
 import { runCmd } from "./cli.js";
 import { TieredCache, createCacheKey } from "./cache/index.js";
@@ -104,3 +107,151 @@ export function invalidateEngineCache(pattern) {
 export function getEngineCacheStats() {
     return engineResultCache.stats();
 }
+// ============================================================
+// Python CLI Support (vibecoding_helper package)
+// ============================================================
+/**
+ * Python CLI commands that are safe to cache (read-only operations)
+ */
+const PYTHON_CACHEABLE_COMMANDS = new Set([
+    "memory-status",
+    "kce-status",
+    "entity-gate",
+    "show-ask-queue",
+]);
+function isDebugMode() {
+    const v = (process.env.VIBECODE_DEBUG ?? "").trim().toLowerCase();
+    return v === "1" || v === "true" || v === "yes" || v === "on";
+}
+/**
+ * Find repo root for Python import.
+ *
+ * Priority order:
+ * 1. VIBECODE_PYTHONPATH environment variable (explicit override)
+ * 2. MCP server directory (fallback for when MCP runs from user project)
+ * 3. startDir upwards search (heuristic: nearest ancestor with pyproject.toml or vibecoding_helper/)
+ *
+ * @param startDir - Directory to start searching from
+ * @returns Repo root path or null if not found
+ */
+export function findPythonRepoRoot(startDir) {
+    // Priority 1: VIBECODE_PYTHONPATH explicit override
+    const override = process.env.VIBECODE_PYTHONPATH?.trim();
+    if (override && existsSync(override)) {
+        return override;
+    }
+    // Priority 2: MCP server directory fallback
+    // When MCP runs from user project, we need to find the package from MCP installation
+    try {
+        const mcpDir = dirname(fileURLToPath(import.meta.url));
+        // mcpDir is typically: .../adapters/mcp-ts/build/
+        // repo root is: .../adapters/mcp-ts/build/../../../.. = repo root
+        const repoFromMcp = resolve(mcpDir, "..", "..", "..", "..");
+        const pkgFromMcp = join(repoFromMcp, "vibecoding_helper");
+        if (existsSync(pkgFromMcp)) {
+            return repoFromMcp;
+        }
+    }
+    catch {
+        // import.meta.url failed, continue to next priority
+    }
+    // Priority 3: startDir upwards search (original heuristic)
+    let current = resolve(startDir);
+    // Walk up until filesystem root
+    while (true) {
+        const pyproject = join(current, "pyproject.toml");
+        const pkgDir = join(current, "vibecoding_helper");
+        // Check for pyproject.toml or vibecoding_helper/ directory
+        if (existsSync(pyproject) || existsSync(pkgDir)) {
+            return current;
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            break; // Reached filesystem root
+        current = parent;
+    }
+    return null;
+}
+/**
+ * Build env for Python CLI so that 'python -m vibecoding_helper ...' can import
+ * even when MCP client ignores .mcp.json env (e.g., Claude Code).
+ *
+ * Priority:
+ * 1. VIBECODE_PYTHONPATH (explicit override)
+ * 2. Auto-detected repo root
+ * 3. Existing PYTHONPATH
+ *
+ * @param baseEnv - Base environment variables
+ * @param cwd - Current working directory for repo root detection
+ * @returns Environment with PYTHONPATH properly set
+ */
+export function buildPythonCliEnv(baseEnv, cwd) {
+    const env = { ...baseEnv };
+    const delim = process.platform === "win32" ? ";" : ":";
+    // Priority 1: Explicit override via VIBECODE_PYTHONPATH
+    const override = env.VIBECODE_PYTHONPATH?.trim();
+    // Priority 2: Auto-detect repo root
+    const repoRoot = override || findPythonRepoRoot(cwd);
+    if (!repoRoot)
+        return env;
+    // Parse existing PYTHONPATH
+    const existing = env.PYTHONPATH ?? "";
+    const parts = existing.split(delim).filter(Boolean);
+    // Avoid duplicate insertion
+    if (!parts.includes(repoRoot)) {
+        env.PYTHONPATH = [repoRoot, ...parts].join(delim);
+    }
+    else {
+        env.PYTHONPATH = parts.join(delim);
+    }
+    return env;
+}
+/**
+ * Run Python vibecoding_helper CLI command
+ * Uses `python -m vibecoding_helper` for cross-platform compatibility
+ *
+ * Automatically injects PYTHONPATH by detecting the package root,
+ * making it work without .mcp.json env configuration.
+ */
+export async function runPythonCli(args, opts) {
+    const pythonCmd = process.platform === "win32" ? "python" : "python3";
+    const fullArgs = ["-m", "vibecoding_helper", ...args];
+    const cwd = process.cwd();
+    // Auto-inject PYTHONPATH using buildPythonCliEnv
+    const env = buildPythonCliEnv(process.env, cwd);
+    if (isDebugMode()) {
+        const repoRoot = findPythonRepoRoot(cwd);
+        console.error(`[DEBUG runPythonCli] cmd=${pythonCmd} args=${JSON.stringify(fullArgs)}`);
+        console.error(`[DEBUG runPythonCli] PYTHONPATH=${env.PYTHONPATH ?? "(not set)"}`);
+        console.error(`[DEBUG runPythonCli] detected_root=${repoRoot ?? "(not found)"}`);
+        console.error(`[DEBUG runPythonCli] cwd=${cwd}`);
+    }
+    const result = await runCmd(pythonCmd, fullArgs, {
+        timeoutMs: opts?.timeoutMs ?? 120_000,
+        env,
+    });
+    if (isDebugMode()) {
+        console.error(`[DEBUG runPythonCli] code=${result.code} stdout=${result.stdout.slice(0, 200)} stderr=${result.stderr.slice(0, 200)}`);
+    }
+    return result;
+}
+/**
+ * Run Python CLI command with optional caching support
+ */
+export async function runPythonCliWithCache(args, opts) {
+    const subCommand = extractSubcommand(args);
+    const isCacheable = PYTHON_CACHEABLE_COMMANDS.has(subCommand) && !opts?.skipCache;
+    if (isCacheable) {
+        const cacheKey = createCacheKey("python-cli", ...args);
+        const cachedResult = engineResultCache.get(cacheKey);
+        if (cachedResult) {
+            return cachedResult;
+        }
+        const result = await runPythonCli(args, opts);
+        if (result.code === 0) {
+            engineResultCache.set(cacheKey, result);
+        }
+        return result;
+    }
+    return await runPythonCli(args, opts);
+}

package/build/errors.js

@@ -169,3 +169,110 @@ export function doNotTouchError(path, pattern) {
         recovery: "This path is protected and cannot be modified. Choose a different target.",
     });
 }
+// ============================================================
+// Error Detection Patterns (P1-4: Normalized string-based error detection)
+// ============================================================
+/**
+ * Centralized error string patterns for consistent detection across the codebase.
+ * Use these constants instead of hardcoded strings for maintainability.
+ */
+export const ErrorPatterns = {
+    // Bootstrap/download errors
+    DOWNLOAD_TIMEOUT: ["download_timeout", "AbortError"],
+    DOWNLOAD_404: ["404", "no_matching_asset", "download_failed:404"],
+    DOWNLOAD_FAILED: ["download_failed", "fetch"],
+    SHA_MISMATCH: ["sha_mismatch"],
+    SHA_MISSING: ["sha_missing_for_asset"],
+    BIN_NOT_FOUND: ["bin_not_found_after_extract"],
+    // Git errors
+    GIT_CONFLICT: ["conflict", "CONFLICT"],
+    // OPA/Policy errors
+    OPA_EVAL_FAILED: ["eval_failed", "opa_eval_failed", "opa exception", "opa_exception", "eval failed"],
+    OPA_MISSING: ["missing"],
+};
+/**
+ * Check if a message matches any of the given patterns.
+ * Case-insensitive matching for OPA patterns, case-sensitive for others.
+ */
+export function matchesErrorPattern(message, patterns, options = {}) {
+    const normalizedMessage = options.caseInsensitive ? message.toLowerCase() : message;
+    return patterns.some((pattern) => {
+        const normalizedPattern = options.caseInsensitive ? pattern.toLowerCase() : pattern;
+        return normalizedMessage.includes(normalizedPattern);
+    });
+}
+/**
+ * Check if message indicates a download timeout error.
+ */
+export function isDownloadTimeoutError(message) {
+    return matchesErrorPattern(message, ErrorPatterns.DOWNLOAD_TIMEOUT);
+}
+/**
+ * Check if message indicates a 404/not found error.
+ */
+export function isDownload404Error(message) {
+    return matchesErrorPattern(message, ErrorPatterns.DOWNLOAD_404);
+}
+/**
+ * Check if message indicates a general download failure.
+ */
+export function isDownloadFailedError(message) {
+    return matchesErrorPattern(message, ErrorPatterns.DOWNLOAD_FAILED);
+}
+/**
+ * Check if message indicates a git conflict.
+ */
+export function isGitConflictError(message) {
+    return matchesErrorPattern(message, ErrorPatterns.GIT_CONFLICT);
+}
+/**
+ * Check if message indicates an OPA evaluation failure.
+ * Always case-insensitive for OPA patterns.
+ */
+export function isOpaEvalFailedError(message) {
+    return matchesErrorPattern(message, ErrorPatterns.OPA_EVAL_FAILED, { caseInsensitive: true });
+}
+/**
+ * Check if message indicates OPA is missing.
+ */
+export function isOpaMissingError(message) {
+    return matchesErrorPattern(message, ErrorPatterns.OPA_MISSING, { caseInsensitive: true });
+}
+// ============================================================
+// P2-23: Error Message Formatting Utilities
+// ============================================================
+/**
+ * Format CLI command failure error message.
+ * @param command - The command that failed (e.g., "kce-status", "zoekt-evidence")
+ * @param exitCode - Exit code from the process
+ * @param stderr - Standard error output
+ * @param stdout - Standard output (used as fallback)
+ */
+export function formatCliError(command, exitCode, stderr, stdout) {
+    const detail = stderr || stdout || `exit_code=${exitCode ?? "unknown"}`;
+    return `${command} failed: ${detail}`;
+}
+/**
+ * Format JSON parsing error message.
+ * @param context - Context where parsing failed (e.g., "kce-status", "config")
+ * @param error - The parsing error
+ */
+export function formatJsonParseError(context, error) {
+    const msg = error instanceof Error ? error.message : String(error);
+    return `${context} invalid_json: ${msg}`;
+}
+/**
+ * Format schema validation error message.
+ * @param context - Context where validation failed
+ */
+export function formatSchemaError(context) {
+    return `${context} schema mismatch`;
+}
+/**
+ * Format user-facing Korean error message.
+ * @param action - What action failed (e.g., "프로젝트 초기화", "작업 지시서 생성")
+ * @param detail - Additional detail (optional)
+ */
+export function formatKoreanError(action, detail) {
+    return `${action} 실패${detail ? `: ${detail}` : ""}`;
+}

package/build/generated/bridge_build_seed_input.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeBuildSeedInputSchema = z.object({ "project_id": z.string().min(1), "run_id": z.string().min(1).optional(), "raw_user_intent": z.string().min(1).max(4000).optional(), "goal": z.string().min(1).max(2000).optional(), "user_story": z.string().min(1).max(2000).optional(), "acceptance": z.array(z.string().min(1).max(300)).min(3).max(12).optional(), "constraints": z.array(z.string().min(1).max(200)).max(12).optional(), "non_goals": z.array(z.string().min(1).max(200)).max(8).optional(), "scope_seed": z.object({ "include": z.array(z.string().min(1).max(300)).min(1).max(20), "exclude": z.array(z.string().min(1).max(300)).max(20), "do_not_touch": z.array(z.string().min(1).max(300)).max(20).optional() }).strict().optional(), "preferred_stack_hint": z.string().max(200).optional(), "risk_notes": z.array(z.string().min(1).max(200)).max(8).optional(), "overwrite": z.boolean().default(true), "write_files": z.boolean().default(true) }).strict().describe("SSOT schema for vibe_pm.bridge_build_seed MCP tool input");

package/build/generated/bridge_build_seed_output.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeBuildSeedOutputSchema = z.object({ "success": z.boolean(), "project_id": z.string().min(1), "run_id": z.string().min(1), "seed_path": z.string().min(1), "next_action": z.object({ "tool": z.literal("vibe_pm.create_work_order"), "reason": z.string().min(1) }).strict() }).strict().describe("SSOT schema for vibe_pm.bridge_build_seed MCP tool output");

package/build/generated/bridge_confirm_reference_input.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeConfirmReferenceInputSchema = z.object({ "project_id": z.string().min(1), "run_id": z.string().min(1).optional(), "selected_key": z.enum(["A", "B", "C"]), "raw_answer": z.string().min(1).max(1000), "notes": z.string().max(2000).optional(), "must_have_overrides": z.array(z.string().min(1).max(120)).max(12).optional(), "must_not_overrides": z.array(z.string().min(1).max(120)).max(12).optional(), "write_files": z.boolean().default(true) }).strict().describe("SSOT schema for vibe_pm.bridge_confirm_reference MCP tool input");

package/build/generated/bridge_confirm_reference_output.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeConfirmReferenceOutputSchema = z.object({ "success": z.boolean(), "project_id": z.string().min(1), "run_id": z.string().min(1), "confirmed_reference_path": z.string().min(1), "selected": z.object({ "key": z.enum(["A", "B", "C"]), "title": z.string().min(1).max(120), "primary_link": z.string().min(4).max(2000) }).strict(), "next_action": z.object({ "tool": z.literal("vibe_pm.bridge_build_seed"), "reason": z.string().min(1) }).strict() }).strict().describe("SSOT schema for vibe_pm.bridge_confirm_reference MCP tool output");

package/build/generated/bridge_confirmed_reference_file.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeConfirmedReferenceFileSchema = z.object({ "schema_version": z.literal("bridge.confirmed_reference.v1"), "run_id": z.string().min(6).max(128), "project_id": z.string().min(1).max(128).optional(), "created_at": z.string().datetime({ offset: true }), "selected": z.object({ "key": z.enum(["A", "B", "C"]), "title": z.string().min(1).max(120), "kind": z.enum(["oss_repo", "library", "product", "pattern", "doc"]), "primary_link": z.string().min(4).max(2000) }).strict(), "user_confirmation": z.object({ "raw_answer": z.string().min(1).max(1000), "notes": z.string().max(2000).optional(), "must_have_overrides": z.array(z.string().min(1).max(120)).max(12).optional(), "must_not_overrides": z.array(z.string().min(1).max(120)).max(12).optional() }).strict() }).strict();

package/build/generated/bridge_generate_references_input.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeGenerateReferencesInputSchema = z.object({ "project_id": z.string().min(1), "run_id": z.string().min(1).optional(), "raw_user_intent": z.string().min(1).max(4000), "keywords": z.array(z.string().min(1).max(80)).min(0).max(12).describe("선택. 비어 있으면 context_scan 산출물 기반으로 자동 보강합니다.").optional(), "constraints": z.array(z.string().min(1).max(120)).max(12).optional(), "must_have": z.array(z.string().min(1).max(120)).max(12).optional(), "must_not": z.array(z.string().min(1).max(120)).max(12).optional(), "candidates_seed": z.array(z.object({ "title": z.string().min(1).max(120), "kind": z.enum(["oss_repo", "library", "product", "pattern", "doc"]), "primary_link": z.string().min(4).max(2000), "why_similar": z.string().max(1200).optional(), "fit_summary": z.string().max(1200).optional() }).strict()).max(10).describe("Optional. If provided, the tool will use these candidates as the primary source instead of running external search.").optional(), "max_candidates": z.number().int().gte(2).lte(3).default(3), "write_files": z.boolean().default(true) }).strict().describe("SSOT schema for vibe_pm.bridge_generate_references MCP tool input");

package/build/generated/bridge_generate_references_output.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeGenerateReferencesOutputSchema = z.object({ "success": z.boolean(), "project_id": z.string().min(1), "run_id": z.string().min(1), "references_path": z.string().min(1), "candidates": z.array(z.object({ "key": z.enum(["A", "B", "C"]), "title": z.string().min(1).max(120), "primary_link": z.string().min(4).max(2000) }).strict()).min(2).max(3), "warnings": z.array(z.string()), "next_action": z.object({ "tool": z.literal("vibe_pm.bridge_confirm_reference"), "reason": z.string().min(1) }).strict() }).strict().describe("SSOT schema for vibe_pm.bridge_generate_references MCP tool output");

package/build/generated/bridge_references_file.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeReferencesFileSchema = z.object({ "schema_version": z.literal("bridge.references.v1"), "run_id": z.string().min(6).max(128), "project_id": z.string().min(1).max(128).optional(), "created_at": z.string().datetime({ offset: true }), "query": z.object({ "raw_user_intent": z.string().min(1).max(4000), "keywords": z.array(z.string().min(1).max(80)).min(1).max(12), "constraints": z.array(z.string().min(1).max(120)).max(12).optional(), "must_have": z.array(z.string().min(1).max(120)).max(12).optional(), "must_not": z.array(z.string().min(1).max(120)).max(12).optional() }).strict(), "candidates": z.array(z.object({ "key": z.enum(["A", "B", "C"]), "title": z.string().min(1).max(120), "kind": z.enum(["oss_repo", "library", "product", "pattern", "doc"]), "why_similar": z.string().min(1).max(1200), "fit_summary": z.string().max(1200).optional(), "confidence": z.number().int().gte(1).lte(5), "links": z.object({ "primary": z.string().min(4).max(2000), "secondary": z.array(z.string().min(4).max(2000)).max(5).optional() }).strict(), "evidence": z.object({ "source": z.enum(["github", "local_zoekt", "manual"]).optional(), "highlights": z.array(z.string().min(1).max(300)).max(8).optional() }).strict().optional() }).strict()).min(2).max(3) }).strict();

package/build/generated/bridge_work_order_seed_file.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const BridgeWorkOrderSeedFileSchema = z.object({ "schema_version": z.literal("bridge.work_order_seed.v1"), "run_id": z.string().min(6).max(128), "project_id": z.string().min(1).max(128).optional(), "created_at": z.string().datetime({ offset: true }), "intent": z.object({ "goal": z.string().min(1).max(2000), "user_story": z.string().min(1).max(2000), "acceptance": z.array(z.string().min(1).max(300)).min(3).max(12), "constraints": z.array(z.string().min(1).max(200)).max(12).optional(), "non_goals": z.array(z.string().min(1).max(200)).max(8).optional() }).strict(), "scope_seed": z.object({ "include": z.array(z.string().min(1).max(300)).min(1).max(20), "exclude": z.array(z.string().min(1).max(300)).max(20), "do_not_touch": z.array(z.string().min(1).max(300)).max(20).optional() }).strict(), "reference": z.object({ "key": z.enum(["A", "B", "C"]), "title": z.string().min(1).max(120), "primary_link": z.string().min(4).max(2000), "takeaways": z.array(z.string().min(1).max(200)).max(10).optional() }).strict(), "handoff": z.object({ "preferred_stack_hint": z.string().max(200).optional(), "risk_notes": z.array(z.string().min(1).max(200)).max(8).optional() }).strict().optional() }).strict();

package/build/generated/contracts_bundle_info.js

@@ -1,5 +1,5 @@
 // Auto-generated from schemas/contracts.version.json + schemas/contracts.lock.json
 // DO NOT EDIT MANUALLY - run scripts/generate-contracts.sh
-export const CONTRACTS_VERSION = "1.8.1";
-export const CONTRACTS_BUNDLE_SHA256 = "c3fa79c3342e45c7f4e17af6ecb852350d84a684c2078c756ae24d6b05643b89";
-export const CONTRACTS_SCHEMA_COUNT = 87;
+export const CONTRACTS_VERSION = "1.8.6";
+export const CONTRACTS_BUNDLE_SHA256 = "117ae96448d5d0bd988281ae7170facabc90c20da074d1d3e845c63cc734ba06";
+export const CONTRACTS_SCHEMA_COUNT = 103;

package/build/generated/index.js

@@ -3,6 +3,7 @@
 export * from "./selection_validation_result.js";
 export * from "./finalize_work_input.js";
 export * from "./briefing_input.js";
+export * from "./ingress_input.js";
 export * from "./get_decision_input.js";
 export * from "./submit_decision_input.js";
 export * from "./create_work_order_input.js";
@@ -18,6 +19,9 @@ export * from "./run_app_input.js";
 export * from "./export_output_input.js";
 export * from "./search_oss_input.js";
 export * from "./zoekt_evidence_input.js";
+export * from "./bridge_generate_references_input.js";
+export * from "./bridge_confirm_reference_input.js";
+export * from "./bridge_build_seed_input.js";
 export * from "./doctor_input.js";
 export * from "./update_input.js";
 export * from "./activate_input.js";
@@ -31,6 +35,7 @@ export * from "./vibe_pm_verdict.js";
 export * from "./create_work_order_output.js";
 export * from "./repair_plan_output.js";
 export * from "./briefing_output.js";
+export * from "./ingress_output.js";
 export * from "./get_decision_output.js";
 export * from "./submit_decision_output.js";
 export * from "./status_output.js";
@@ -40,6 +45,12 @@ export * from "./memory_retrieve_output.js";
 export * from "./memory_state_file.js";
 export * from "./vibe_repo_config.js";
 export * from "./current_work_order_file.js";
+export * from "./ingress_resolution_file.js";
+export * from "./ingress_summary_file.js";
+export * from "./bridge_references_file.js";
+export * from "./bridge_confirmed_reference_file.js";
+export * from "./bridge_work_order_seed_file.js";
+export * from "./message_template_id_mapping_file.js";
 export * from "./advisory_review_output.js";
 export * from "./scaffold_output.js";
 export * from "./finalize_work_output.js";
@@ -48,6 +59,9 @@ export * from "./run_app_output.js";
 export * from "./export_output_output.js";
 export * from "./search_oss_output.js";
 export * from "./zoekt_evidence_output.js";
+export * from "./bridge_generate_references_output.js";
+export * from "./bridge_confirm_reference_output.js";
+export * from "./bridge_build_seed_output.js";
 export * from "./doctor_output.js";
 export * from "./update_output.js";
 export * from "./activate_output.js";

package/build/generated/ingress_input.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const IngressInputSchema = z.object({ "project_id": z.string().min(1).describe("프로젝트 ID 또는 run_id (생략 시 최근 프로젝트 자동)").optional(), "run_id": z.string().min(1).describe("명시 run_id (project_id보다 우선)").optional(), "workspace_path": z.string().min(1).describe("업무 폴더(생략 시 현재 작업 폴더)").optional(), "resolution": z.enum(["INGRESS_RESOLVED_RESUME", "INGRESS_RESOLVED_NEW_TASK", "INGRESS_RESOLVED_ADOPT", "INGRESS_ABORTED"]).describe("Ingress 종료 상태"), "context_scan": z.boolean().describe("Context Scan 수행 여부(권장: true)").default(true), "write_files": z.boolean().describe("runs/<run_id>/ingress 산출물 파일 생성 여부(테스트용)").default(true) }).strict().describe("SSOT schema for vibe_pm.ingress MCP tool input");

package/build/generated/ingress_output.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const IngressOutputSchema = z.object({ "success": z.boolean(), "project_id": z.string().min(1), "run_id": z.string().min(1), "workspace_path": z.string().min(1), "has_vibe_state": z.boolean(), "resolution": z.enum(["INGRESS_RESOLVED_RESUME", "INGRESS_RESOLVED_NEW_TASK", "INGRESS_RESOLVED_ADOPT", "INGRESS_ABORTED"]), "context_scan_required": z.boolean(), "context_scan_completed": z.boolean(), "ingress_resolution_path": z.string().min(1), "artifacts": z.object({ "project_fingerprint": z.string().min(1).optional(), "repo_map": z.string().min(1).optional(), "entrypoints": z.string().min(1).optional(), "docs_index": z.string().min(1).optional(), "risk_flags": z.string().min(1).optional(), "ingress_summary": z.string().min(1).optional() }).strict().optional(), "warnings": z.array(z.string().min(1)).describe("Best-effort 경고 목록").optional(), "message": z.string().min(1), "next_action": z.union([z.object({ "tool": z.enum(["vibe_pm.get_decision", "vibe_pm.briefing", "vibe_pm.ingress"]), "reason": z.string().min(1) }).strict(), z.null()]) }).strict().describe("SSOT schema for vibe_pm.ingress MCP tool output");

package/build/generated/ingress_resolution_file.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const IngressResolutionFileSchema = z.object({ "schema_version": z.literal("ingress.resolution.v2"), "run_id": z.string().min(3).max(128), "project_id": z.string().min(1).max(128).optional(), "workspace_path": z.string().min(1).max(4096), "resolution": z.enum(["INGRESS_RESOLVED_RESUME", "INGRESS_RESOLVED_NEW_TASK", "INGRESS_RESOLVED_ADOPT", "INGRESS_ABORTED"]), "has_vibe_state": z.boolean(), "context_scan_required": z.boolean(), "context_scan_completed": z.boolean(), "created_at": z.string().datetime({ offset: true }) }).strict();

package/build/generated/ingress_summary_file.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const IngressSummaryFileSchema = z.object({ "format_version": z.literal("ingress.summary.v1"), "run_id": z.string().min(3).max(128), "project_id": z.string().min(1).max(128).optional(), "created_at": z.string().datetime({ offset: true }), "producer": z.object({ "name": z.string().min(1).max(120), "version": z.string().min(1).max(64), "build": z.string().min(1).max(128).optional() }).strict(), "pointers": z.object({ "project_fingerprint": z.string().min(1).max(512), "repo_map": z.string().min(1).max(512), "entrypoints": z.string().min(1).max(512), "docs_index": z.string().min(1).max(512), "risk_flags": z.string().min(1).max(512) }).strict(), "high_level": z.object({ "repo_kind_hint": z.string().max(200).optional(), "entrypoint_status": z.enum(["OK", "AMBIGUOUS", "NONE"]), "clarification_recommended": z.boolean(), "clarification_reasons": z.array(z.string().min(1).max(120)).max(12).optional(), "docs_index_count": z.number().int().gte(0) }).strict(), "consumption_policy": z.object({ "front_reads": z.array(z.string().min(1).max(120)).min(1).max(20), "bridge_reads": z.array(z.string().min(1).max(120)).min(1).max(20), "back_reads": z.array(z.string().min(1).max(120)).min(1).max(20) }).strict() }).strict();

package/build/generated/message_template_id_mapping_file.js

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export const MessageTemplateIdMappingFileSchema = z.object({ "version": z.literal("message_template_id_mapping.v1"), "description": z.string().min(0).max(2000).optional(), "default_locale": z.any(), "supported_locales": z.array(z.any()).min(1).refine((xs) => new Set(xs).size === xs.length, { message: "items must be unique" }), "human_language_policy": z.object({ "response_language_strategy": z.enum(["user_last_input", "fixed", "ask_once_on_conflict"]), "fallback_locale": z.any(), "max_confirmations_per_project": z.number().int().gte(0).lte(3) }).strict().optional(), "templates": z.object({ "GO-01": z.any(), "GO-02": z.any(), "FIX-01": z.any(), "FIX-02": z.any(), "BLOCK-01": z.any(), "BLOCK-02": z.any(), "TRIAGE-SKIP-01": z.any(), "TRIAGE-RUN-01": z.any(), "TRIAGE-RUN-02": z.any(), "ADV-01": z.any(), "ADV-02": z.any(), "WARN-01": z.any(), "WARN-02": z.any(), "SOFTBLOCK-01": z.any() }).strict(), "term_dictionary": z.object({ "entries": z.array(z.any()).min(1).max(200) }).strict() }).strict();

package/build/generated/run_app_input.js

@@ -1,2 +1,2 @@
 import { z } from "zod";
-export const RunAppInputSchema = z.object({ "mode": z.enum(["dev", "prod", "test"]).describe("실행 모드").default("dev"), "port": z.number().int().gte(1).lte(65535).describe("포트 번호 (선택사항)").optional(), "container": z.enum(["none", "podman"]).describe("실행 런타임 선택. 기본값은 기존 호스트 실행을 유지합니다.").default("none"), "container_image": z.string().regex(new RegExp("^[a-z0-9][a-z0-9./:_-]{0,199}$")).min(1).max(200).describe("컨테이너 이미지. 재현성을 위해 ':latest' 사용은 경고/차단 대상입니다(정책은 코드에서 강제).").optional(), "container_ports": z.array(z.number().int().gte(1).lte(65535)).max(32).refine((xs) => new Set(xs).size === xs.length, { message: "items must be unique" }).describe("컨테이너 포트 목록(선택). 생략 시 port(또는 프로젝트 디폴트 포트) 기반으로 자동 선택합니다.").optional(), "container_env": z.record(z.string().max(4096)).describe("컨테이너 환경변수(선택). allowlist 정책은 코드에서 강제합니다.").optional(), "container_mounts": z.array(z.object({ "host": z.string().min(1).max(512).describe("호스트 경로(상대/절대). repoRoot 밖 경로는 코드에서 차단합니다."), "container": z.string().regex(new RegExp("^/.*")).min(1).max(256).describe("컨테이너 내부 경로(절대 경로)"), "mode": z.enum(["ro", "rw"]).describe("마운트 모드") }).strict()).max(16).describe("컨테이너 마운트 목록(선택). 생략 시 repoRoot -> /work:rw 를 기본으로 사용합니다.").optional() }).strict().describe("SSOT schema for vibe_pm.run_app MCP tool input");
+export const RunAppInputSchema = z.object({ "mode": z.enum(["dev", "prod", "test"]).describe("실행 모드").default("dev"), "port": z.number().int().gte(1).lte(65535).describe("포트 번호 (선택사항)").optional(), "container": z.enum(["none", "podman"]).describe("실행 런타임 선택. 기본값은 기존 호스트 실행을 유지합니다.").default("none"), "container_image": z.string().regex(new RegExp("^[a-z0-9][a-z0-9./:_-]{0,199}$")).min(1).max(200).describe("컨테이너 이미지. 재현성을 위해 ':latest' 사용은 경고/차단 대상입니다(정책은 코드에서 강제).").optional(), "container_ports": z.array(z.number().int().gte(1).lte(65535)).max(32).refine((xs) => new Set(xs).size === xs.length, { message: "items must be unique" }).describe("컨테이너 포트 목록(선택). 생략 시 port(또는 프로젝트 디폴트 포트) 기반으로 자동 선택합니다.").optional(), "container_env": z.record(z.string().max(4096)).describe("컨테이너 환경변수(선택). allowlist 정책은 코드에서 강제합니다.").optional(), "container_mounts": z.array(z.object({ "host": z.string().min(1).max(512).describe("호스트 경로(상대/절대). repoRoot 밖 경로는 코드에서 차단합니다."), "container": z.string().regex(new RegExp("^/.*")).min(1).max(256).describe("컨테이너 내부 경로(절대 경로)"), "mode": z.enum(["ro", "rw"]).describe("마운트 모드") }).strict()).max(16).describe("컨테이너 마운트 목록(선택). 생략 시 repoRoot -> /work:rw 를 기본으로 사용합니다.").optional(), "option_key": z.enum(["A", "B", "C"]).describe("실행 후보가 여러 개일 때 선택 키(A/B/C). 후보가 1개면 생략 가능합니다.").optional() }).strict().describe("SSOT schema for vibe_pm.run_app MCP tool input");

package/build/index.js

@@ -1,4 +1,3 @@
-#!/usr/bin/env node
 // adapters/mcp-ts/src/index.ts
 // VibeCoding MCP Server (One-click Bootstrap)
 import * as fs from "node:fs";
@@ -51,6 +50,7 @@ const rp = defineReactPerfTools();
 // NEW: vibe_pm.* Tools (Recommended)
 // ============================================================
 server.tool("vibe_pm.briefing", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.briefing"], pm.briefingInputSchema.shape, async (input) => pm.vibePmBriefing(pm.briefingInputSchema.parse(input)));
+server.tool("vibe_pm.ingress", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.ingress"], pm.ingressInputSchema.shape, async (input) => pm.vibePmIngress(pm.ingressInputSchema.parse(input)));
 server.tool("vibe_pm.get_decision", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.get_decision"], pm.getDecisionInputSchema.shape, async (input) => pm.vibePmGetDecision(pm.getDecisionInputSchema.parse(input)));
 server.tool("vibe_pm.submit_decision", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.submit_decision"], pm.submitDecisionInputSchema.shape, async (input) => pm.vibePmSubmitDecision(pm.submitDecisionInputSchema.parse(input)));
 server.tool("vibe_pm.create_work_order", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.create_work_order"], pm.createWorkOrderInputSchema.shape, async (input) => pm.vibePmCreateWorkOrder(pm.createWorkOrderInputSchema.parse(input)));
@@ -70,6 +70,9 @@ server.tool("vibe_pm.run_app", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.run_app"], pm.
 server.tool("vibe_pm.export_output", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.export_output"], pm.exportOutputInputSchema.shape, async (input) => pm.vibePmExportOutput(pm.exportOutputInputSchema.parse(input)));
 server.tool("vibe_pm.search_oss", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.search_oss"], pm.searchOssInputSchema.shape, async (input) => pm.vibePmSearchOss(pm.searchOssInputSchema.parse(input)));
 server.tool("vibe_pm.zoekt_evidence", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.zoekt_evidence"], pm.zoektEvidenceInputSchema.shape, async (input) => pm.vibePmZoektEvidence(pm.zoektEvidenceInputSchema.parse(input)));
+server.tool("vibe_pm.bridge_generate_references", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.bridge_generate_references"], pm.bridgeGenerateReferencesInputSchema.shape, async (input) => pm.vibePmBridgeGenerateReferences(pm.bridgeGenerateReferencesInputSchema.parse(input)));
+server.tool("vibe_pm.bridge_confirm_reference", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.bridge_confirm_reference"], pm.bridgeConfirmReferenceInputSchema.shape, async (input) => pm.vibePmBridgeConfirmReference(pm.bridgeConfirmReferenceInputSchema.parse(input)));
+server.tool("vibe_pm.bridge_build_seed", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.bridge_build_seed"], pm.bridgeBuildSeedInputSchema.shape, async (input) => pm.vibePmBridgeBuildSeed(pm.bridgeBuildSeedInputSchema.parse(input)));
 server.tool("vibe_pm.gate", VIBE_PM_TOOL_DESCRIPTIONS["vibe_pm.gate"], pm.gateInputSchema.shape, async (input) => pm.vibePmGate(pm.gateInputSchema.parse(input)));
 // ============================================================
 // OPTIONAL: react_perf.* Tools (Performance Analysis)

package/build/local-mode/git.js

@@ -1,33 +1,47 @@
-import { spawnSync } from "node:child_process";
+/**
+ * Git utilities for local mode
+ *
+ * All git commands go through cli_invoker for centralized subprocess management.
+ *
+ * @module local-mode/git
+ */
+import { invokeGitSync } from "../runtime/cli_invoker.js";
+/**
+ * Get the git repository root directory
+ *
+ * @param cwd - Current working directory
+ * @returns Git root path or null if not in a git repository
+ */
 export function getGitRoot(cwd) {
-    const result = spawnSync("git", ["rev-parse", "--show-toplevel"], {
-        cwd,
-        encoding: "utf-8",
-        stdio: ["ignore", "pipe", "pipe"],
-    });
-    if (result.status !== 0)
+    const result = invokeGitSync(["rev-parse", "--show-toplevel"], cwd);
+    if (result.exitCode !== 0)
         return null;
-    const out = (result.stdout ?? "").trim();
+    const out = result.stdout.trim();
     return out.length > 0 ? out : null;
 }
+/**
+ * Get the configured git hooks path
+ *
+ * @param cwd - Current working directory (should be git root)
+ * @returns Configured hooks path or null if not set
+ */
 export function getGitHooksPath(cwd) {
-    const result = spawnSync("git", ["config", "--local", "--get", "core.hooksPath"], {
-        cwd,
-        encoding: "utf-8",
-        stdio: ["ignore", "pipe", "pipe"],
-    });
-    if (result.status !== 0)
+    const result = invokeGitSync(["config", "--local", "--get", "core.hooksPath"], cwd);
+    if (result.exitCode !== 0)
         return null;
-    const out = (result.stdout ?? "").trim();
+    const out = result.stdout.trim();
     return out.length > 0 ? out : null;
 }
+/**
+ * Set the git hooks path
+ *
+ * @param cwd - Current working directory (should be git root)
+ * @param hooksPath - Path to hooks directory
+ * @returns Success or error
+ */
 export function setGitHooksPath(cwd, hooksPath) {
-    const result = spawnSync("git", ["config", "--local", "core.hooksPath", hooksPath], {
-        cwd,
-        encoding: "utf-8",
-        stdio: ["ignore", "pipe", "pipe"],
-    });
-    if (result.status === 0)
+    const result = invokeGitSync(["config", "--local", "core.hooksPath", hooksPath], cwd);
+    if (result.exitCode === 0)
         return { ok: true };
-    return { ok: false, error: (result.stderr ?? "git config failed").trim() };
+    return { ok: false, error: (result.stderr || "git config failed").trim() };
 }

package/build/local-mode/paths.js

@@ -15,6 +15,7 @@ export function getVibeRepoPaths(repoRoot) {
         archiveDir: path.join(vibeDir, "archive"),
         hooksDir,
         libDir,
+        skillsDir: path.join(vibeDir, "skills"),
         validateScript: path.join(libDir, "validate.sh"),
         prePushHook: path.join(hooksDir, "pre-push"),
         ciWorkflowFile,