@viberaven/mcp 1.0.2 → 1.0.4

package/README.md

@@ -57,3 +57,4 @@ If VibeRaven prints `LOGIN_URL_READY`, open that exact URL for the user, keep th
 ## Security
 
 The MCP package is public integration glue only. It returns CLI stdout/stderr and structured JSON content when available. It does not mutate provider dashboards and does not bypass VibeRaven login, managed API checks, or quota enforcement. Do not claim provider dashboard checks are fixed by repo-code edits.
+

package/bin/server.js

@@ -2,7 +2,7 @@
 const { spawn } = require('node:child_process');
 let spawnChild = spawn;
 
-const SERVER_INFO = { name: 'viberaven-mcp', version: '1.0.0' };
+const SERVER_INFO = { name: 'viberaven-mcp', version: '1.0.4' };
 const CLI_PACKAGE = '@viberaven/cli';
 
 const cwdSchema = {
@@ -94,6 +94,23 @@ const TOOLS = [
     name: 'viberaven_heal_apply',
     description: 'Apply a guarded VibeRaven repo-code heal recipe when supported.',
     inputSchema: healSchema
+  },
+  {
+    name: 'viberaven_validate_npm_package',
+    description:
+      'Check whether an npm package name exists and looks safe before install. Always run viberaven --agent-mode after adding dependencies.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        packageName: { type: 'string', description: 'Single npm package name to validate.' },
+        packageNames: {
+          type: 'array',
+          items: { type: 'string' },
+          description: 'Multiple npm package names to validate in one call.'
+        }
+      },
+      additionalProperties: false
+    }
   }
 ];
 
@@ -231,6 +248,21 @@ function buildToolArgs(name, args) {
     if (args.yes === true) cliArgs.push('--yes');
     return cliArgs;
   }
+  if (name === 'viberaven_validate_npm_package') {
+    const names = [];
+    if (args.packageName) {
+      names.push(safeStringArg(args.packageName, 'packageName'));
+    }
+    if (Array.isArray(args.packageNames)) {
+      for (const entry of args.packageNames) {
+        names.push(safeStringArg(entry, 'packageName'));
+      }
+    }
+    if (names.length === 0) {
+      throw new Error('packageName or packageNames is required');
+    }
+    return ['validate-npm-package', '--json', ...names];
+  }
   throw new Error(`Unknown VibeRaven tool: ${name}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viberaven/mcp",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Thin MCP wrapper around the VibeRaven CLI for agent launch-readiness workflows.",
   "license": "UNLICENSED",
   "author": "VibeRaven",