@viberaven/mcp 1.0.6 → 1.1.0

package/README.md

@@ -10,45 +10,80 @@ This package exposes VibeRaven CLI actions as MCP tools for Codex, Claude Code,
 
 The MCP server wraps the stable CLI package: `npx -y viberaven`.
 
-## Run
-
-```bash
-npx -y @viberaven/mcp
-```
-
-You can also start the MCP server from the main CLI package:
-
-```bash
-npx -y viberaven mcp
-```
-
-## Tools
-
-- `viberaven_check_readiness` -> `npx -y viberaven --agent-mode`
-- `viberaven_verify` -> `npx -y viberaven --verify`
-- `viberaven_audit` -> `npx -y viberaven audit --vercel-supabase`
-- `viberaven_init_rules` -> `npx -y viberaven init`
-- `viberaven_clean_plan` -> `npx -y viberaven clean --plan`
-- `viberaven_strict_gate` -> `npx -y viberaven --agent-mode --strict --json`
-- `viberaven_gate_result` -> `npx -y viberaven --agent-mode --json`
-- `viberaven_context_map` -> `npx -y viberaven --condense`
+## Run
+
+```bash
+npx -y @viberaven/mcp
+```
+
+MCP config:
+
+```json
+{ "viberaven": { "command": "npx", "args": ["-y", "@viberaven/mcp"] } }
+```
+
+## Tools
+
+- `viberaven_check_readiness` -> `npx -y viberaven --agent-mode`
+- `viberaven_verify` -> `npx -y viberaven --verify`
+- `viberaven_audit` -> `npx -y viberaven audit --vercel-supabase`
+- `viberaven_init_rules` -> `npx -y viberaven init`
+- `viberaven_clean_plan` -> `npx -y viberaven clean --plan`
+- `viberaven_strict_gate` -> `npx -y viberaven --agent-mode --strict --json`
+- `viberaven_gate_result` -> `npx -y viberaven --agent-mode --json`
+- `viberaven_context_map` -> `npx -y viberaven --condense`
+- `viberaven_prp_current` -> read `.viberaven/prp.json`
+- `viberaven_prp_findings` -> list PRP findings
+- `viberaven_prp_next_action` -> return the first PRP next action
+- `viberaven_verify_url` -> URL-specific verification fallback; currently unsupported and not live URL proof
+- `viberaven_mark_manual_evidence` -> append manual PRP evidence; manual evidence is not live provider proof
 - `viberaven_heal_plan` -> `npx -y viberaven --heal --plan`
 - `viberaven_heal_prompt` -> `npx -y viberaven --heal --prompt`
 - `viberaven_heal_apply` -> `npx -y viberaven --heal --apply`
-- `viberaven_validate_npm_package` -> `npx -y viberaven validate-npm-package --json`
-
-`viberaven_check_readiness` is the canonical entrypoint. It runs VibeRaven as the Agent Context + Production Gate and writes `.viberaven/agent-tasklist.md`, `.viberaven/gate-result.json`, and `.viberaven/context-map.json`.
+- `viberaven_validate_npm_package` -> check npm package names before install
+
+`viberaven_check_readiness` is the canonical entrypoint. It runs VibeRaven as the Agent Context + Production Gate and writes `.viberaven/agent-tasklist.md`, `.viberaven/gate-result.json`, and `.viberaven/context-map.json`.
 
 After one fix, call `viberaven_verify`. Before deploy or CI pass, call `viberaven_strict_gate` or run:
 
 ```bash
-npx -y viberaven --strict
-```
-
-## Machine Artifact Contract
-
-```text
-docs/contracts/artifacts.md
+npx -y viberaven --strict
+```
+
+## VibeRaven Production Protocol
+
+VibeRaven 1.1.0 introduces the Production Protocol for AI-built apps.
+
+Run the canonical agent command:
+
+```bash
+npx -y viberaven --agent-mode
+```
+
+Then have the AI coding agent read:
+
+- `.viberaven/prp.json`
+- `.viberaven/mission-map.md`
+- `.viberaven/context-map.json`
+
+The agent should fix `nextActions` in order and must not claim production-ready while `decision.status` is `blocked`.
+
+## Production Protocol Resources
+
+The MCP server exposes VibeRaven Production Protocol artifacts directly:
+
+- `prp://current`
+- `prp://findings`
+- `prp://next-actions`
+- `prp://mission-map`
+- `prp://context-map`
+
+Use `viberaven_check_readiness` to generate the artifacts, then use `viberaven_prp_current`, `viberaven_prp_findings`, or `viberaven_prp_next_action` so agents can act without scraping terminal prose.
+
+## Machine Artifact Contract
+
+```text
+docs/contracts/artifacts.md
 https://viberaven.dev/schemas/gate-result.schema.json
 https://viberaven.dev/schemas/context-map.schema.json
 https://viberaven.dev/schemas/gap.schema.json

package/bin/server.js

@@ -1,383 +1,621 @@
 #!/usr/bin/env node
 const { spawn } = require('node:child_process');
+const { readFile, writeFile } = require('node:fs/promises');
+const { join } = require('node:path');
 let spawnChild = spawn;
-
-const SERVER_INFO = { name: 'viberaven-mcp', version: '1.0.6' };
+
+const SERVER_INFO = { name: 'viberaven-mcp', version: '1.1.0' };
 const CLI_PACKAGE = '@viberaven/cli';
-
-const cwdSchema = {
-  type: 'object',
-  properties: {
-    cwd: { type: 'string', description: 'Project root. Defaults to the MCP server working directory.' }
-  },
+const PRP_MISSING_MESSAGE = '.viberaven/prp.json not found. Run npx -y viberaven --agent-mode first.';
+const PRP_INVALID_JSON_MESSAGE = '.viberaven/prp.json is invalid JSON. Re-run npx -y viberaven --agent-mode.';
+
+const cwdSchema = {
+  type: 'object',
+  properties: {
+    cwd: { type: 'string', description: 'Project root. Defaults to the MCP server working directory.' }
+  },
+  additionalProperties: false
+};
+
+const healSchema = {
+  type: 'object',
+  properties: {
+    cwd: { type: 'string' },
+    target: { type: 'string' },
+    gap: { type: 'string' },
+    yes: { type: 'boolean' }
+  },
   additionalProperties: false
 };
 
-const healSchema = {
+const manualEvidenceSchema = {
   type: 'object',
   properties: {
     cwd: { type: 'string' },
-    target: { type: 'string' },
-    gap: { type: 'string' },
-    yes: { type: 'boolean' }
+    id: { type: 'string' },
+    summary: { type: 'string' },
+    source: { type: 'string' }
   },
+  required: ['id', 'summary'],
   additionalProperties: false
 };
 
-const TOOLS = [
-  {
-    name: 'viberaven_check_readiness',
-    description: 'Run the VibeRaven agent-mode production-readiness check and write .viberaven artifacts.',
-    inputSchema: cwdSchema
-  },
+const RESOURCES = [
   {
-    name: 'viberaven_verify',
-    description: 'Rescan and refresh VibeRaven production-readiness artifacts after a fix.',
-    inputSchema: cwdSchema
-  },
-  {
-    name: 'viberaven_audit',
-    description: 'Run local Vercel/Supabase production checks for RLS, service-role boundaries, and Vercel pooler usage.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        cwd: { type: 'string', description: 'Project root. Defaults to current working directory.' },
-        json: { type: 'boolean', description: 'Return JSON output.' }
-      },
-      additionalProperties: false
-    }
+    uri: 'prp://current',
+    name: 'Current VibeRaven Production Protocol',
+    mimeType: 'application/json'
   },
   {
-    name: 'viberaven_init_rules',
-    description: 'Install bounded VibeRaven rules into native AI instruction files.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        cwd: { type: 'string', description: 'Project root. Defaults to current working directory.' },
-        agents: { type: 'string', description: 'Comma-separated agent targets, or all.' },
-        dryRun: { type: 'boolean', description: 'Preview changes without writing files.' }
-      },
-      additionalProperties: false
-    }
+    uri: 'prp://findings',
+    name: 'VibeRaven PRP Findings',
+    mimeType: 'application/json'
   },
   {
-    name: 'viberaven_clean_plan',
-    description: 'Write a non-destructive context cleanup plan for generated artifacts and logs.',
-    inputSchema: cwdSchema
+    uri: 'prp://next-actions',
+    name: 'VibeRaven PRP Next Actions',
+    mimeType: 'application/json'
   },
   {
-    name: 'viberaven_strict_gate',
-    description: 'Run VibeRaven agent-mode strict gate and return the machine verdict.',
-    inputSchema: cwdSchema
+    uri: 'prp://mission-map',
+    name: 'VibeRaven Mission Map',
+    mimeType: 'text/markdown'
   },
   {
-    name: 'viberaven_gate_result',
-    description: 'Run VibeRaven agent-mode JSON output and return gate-result.json content.',
-    inputSchema: cwdSchema
-  },
+    uri: 'prp://context-map',
+    name: 'VibeRaven Context Map',
+    mimeType: 'application/json'
+  }
+];
+
+const TOOLS = [
+  {
+    name: 'viberaven_check_readiness',
+    description: 'Run the VibeRaven agent-mode production-readiness check and write .viberaven artifacts.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_verify',
+    description: 'Rescan and refresh VibeRaven production-readiness artifacts after a fix.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_audit',
+    description: 'Run local Vercel/Supabase production checks for RLS, service-role boundaries, and Vercel pooler usage.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        cwd: { type: 'string', description: 'Project root. Defaults to current working directory.' },
+        json: { type: 'boolean', description: 'Return JSON output.' }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: 'viberaven_init_rules',
+    description: 'Install bounded VibeRaven rules into native AI instruction files.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        cwd: { type: 'string', description: 'Project root. Defaults to current working directory.' },
+        agents: { type: 'string', description: 'Comma-separated agent targets, or all.' },
+        dryRun: { type: 'boolean', description: 'Preview changes without writing files.' }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: 'viberaven_clean_plan',
+    description: 'Write a non-destructive context cleanup plan for generated artifacts and logs.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_strict_gate',
+    description: 'Run VibeRaven agent-mode strict gate and return the machine verdict.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_gate_result',
+    description: 'Run VibeRaven agent-mode JSON output and return gate-result.json content.',
+    inputSchema: cwdSchema
+  },
   {
     name: 'viberaven_context_map',
     description: 'Refresh .viberaven/context-map.json from the last scan.',
     inputSchema: cwdSchema
   },
   {
-    name: 'viberaven_heal_plan',
-    description: 'Write a non-destructive VibeRaven heal plan for a target file or gap.',
-    inputSchema: healSchema
+    name: 'viberaven_prp_current',
+    description: 'Read .viberaven/prp.json, the VibeRaven Production Protocol truth object.',
+    inputSchema: cwdSchema
   },
   {
-    name: 'viberaven_heal_prompt',
-    description: 'Write an agent-ready VibeRaven heal prompt for a target file or gap.',
-    inputSchema: healSchema
+    name: 'viberaven_prp_findings',
+    description: 'List PRP findings from .viberaven/prp.json.',
+    inputSchema: cwdSchema
   },
   {
-    name: 'viberaven_heal_apply',
-    description: 'Apply a guarded VibeRaven repo-code heal recipe when supported.',
-    inputSchema: healSchema
+    name: 'viberaven_prp_next_action',
+    description: 'Return the first PRP next action from .viberaven/prp.json.',
+    inputSchema: cwdSchema
   },
   {
-    name: 'viberaven_validate_npm_package',
+    name: 'viberaven_verify_url',
     description:
-      'Check whether an npm package name exists and looks safe before install. Always run viberaven --agent-mode after adding dependencies.',
+      'Run VibeRaven verify for the current workspace. URL-specific verification is reported when supported by the CLI.',
     inputSchema: {
       type: 'object',
       properties: {
-        packageName: { type: 'string', description: 'Single npm package name to validate.' },
-        packageNames: {
-          type: 'array',
-          items: { type: 'string' },
-          description: 'Multiple npm package names to validate in one call.'
-        }
+        cwd: { type: 'string' },
+        url: { type: 'string' }
       },
       additionalProperties: false
     }
-  }
-];
-
-let buffer = Buffer.alloc(0);
-
-function main() {
-  if (process.argv.includes('--help') || process.argv.includes('-h')) {
-    console.log(`${SERVER_INFO.name} ${SERVER_INFO.version}`);
-    console.log(`MCP stdio server wrapping npx -y ${CLI_PACKAGE}.`);
-    process.exit(0);
-  }
-
-  process.stdin.on('data', (chunk) => {
-    buffer = Buffer.concat([buffer, chunk]);
-    drainMessages();
-  });
-}
-
-function drainMessages() {
-  while (true) {
-    const headerEnd = buffer.indexOf('\r\n\r\n');
-    if (headerEnd === -1) return;
-
-    const header = buffer.slice(0, headerEnd).toString('utf8');
-    const match = header.match(/content-length:\s*(\d+)/i);
-    if (!match) {
-      buffer = buffer.slice(headerEnd + 4);
-      continue;
-    }
-
-    const length = Number(match[1]);
-    const messageStart = headerEnd + 4;
-    const messageEnd = messageStart + length;
-    if (buffer.length < messageEnd) return;
-
-    const raw = buffer.slice(messageStart, messageEnd).toString('utf8');
-    buffer = buffer.slice(messageEnd);
-    void handleRawMessage(raw);
-  }
-}
-
-async function handleRawMessage(raw) {
-  let message;
-  try {
-    message = JSON.parse(raw);
-  } catch {
-    return;
-  }
-
-  if (!message || typeof message.method !== 'string') return;
-  if (message.id === undefined || message.id === null) return;
-
-  try {
-    const result = await handleRequest(message.method, message.params || {});
-    send({ jsonrpc: '2.0', id: message.id, result });
-  } catch (error) {
-    send({
-      jsonrpc: '2.0',
-      id: message.id,
-      error: {
-        code: -32000,
-        message: error instanceof Error ? error.message : String(error)
-      }
-    });
-  }
-}
-
-async function handleRequest(method, params) {
-  if (method === 'initialize') {
-    return {
+  },
+  {
+    name: 'viberaven_mark_manual_evidence',
+    description: 'Append manual evidence to PRP. Manual evidence is not live provider proof.',
+    inputSchema: manualEvidenceSchema
+  },
+  {
+    name: 'viberaven_heal_plan',
+    description: 'Write a non-destructive VibeRaven heal plan for a target file or gap.',
+    inputSchema: healSchema
+  },
+  {
+    name: 'viberaven_heal_prompt',
+    description: 'Write an agent-ready VibeRaven heal prompt for a target file or gap.',
+    inputSchema: healSchema
+  },
+  {
+    name: 'viberaven_heal_apply',
+    description: 'Apply a guarded VibeRaven repo-code heal recipe when supported.',
+    inputSchema: healSchema
+  },
+  {
+    name: 'viberaven_validate_npm_package',
+    description:
+      'Check whether an npm package name exists and looks safe before install. Always run viberaven --agent-mode after adding dependencies.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        packageName: { type: 'string', description: 'Single npm package name to validate.' },
+        packageNames: {
+          type: 'array',
+          items: { type: 'string' },
+          description: 'Multiple npm package names to validate in one call.'
+        }
+      },
+      additionalProperties: false
+    }
+  }
+];
+
+let buffer = Buffer.alloc(0);
+
+function main() {
+  if (process.argv.includes('--help') || process.argv.includes('-h')) {
+    console.log(`${SERVER_INFO.name} ${SERVER_INFO.version}`);
+    console.log(`MCP stdio server wrapping npx -y ${CLI_PACKAGE}.`);
+    process.exit(0);
+  }
+
+  process.stdin.on('data', (chunk) => {
+    buffer = Buffer.concat([buffer, chunk]);
+    drainMessages();
+  });
+}
+
+function drainMessages() {
+  while (true) {
+    const headerEnd = buffer.indexOf('\r\n\r\n');
+    if (headerEnd === -1) return;
+
+    const header = buffer.slice(0, headerEnd).toString('utf8');
+    const match = header.match(/content-length:\s*(\d+)/i);
+    if (!match) {
+      buffer = buffer.slice(headerEnd + 4);
+      continue;
+    }
+
+    const length = Number(match[1]);
+    const messageStart = headerEnd + 4;
+    const messageEnd = messageStart + length;
+    if (buffer.length < messageEnd) return;
+
+    const raw = buffer.slice(messageStart, messageEnd).toString('utf8');
+    buffer = buffer.slice(messageEnd);
+    void handleRawMessage(raw);
+  }
+}
+
+async function handleRawMessage(raw) {
+  let message;
+  try {
+    message = JSON.parse(raw);
+  } catch {
+    return;
+  }
+
+  if (!message || typeof message.method !== 'string') return;
+  if (message.id === undefined || message.id === null) return;
+
+  try {
+    const result = await handleRequest(message.method, message.params || {});
+    send({ jsonrpc: '2.0', id: message.id, result });
+  } catch (error) {
+    send({
+      jsonrpc: '2.0',
+      id: message.id,
+      error: {
+        code: -32000,
+        message: error instanceof Error ? error.message : String(error)
+      }
+    });
+  }
+}
+
+async function handleRequest(method, params) {
+  if (method === 'initialize') {
+    return {
       protocolVersion: params.protocolVersion || '2024-11-05',
-      capabilities: { tools: {} },
+      capabilities: { tools: {}, resources: {} },
       serverInfo: SERVER_INFO
     };
   }
+
+  if (method === 'tools/list') {
+    return { tools: TOOLS };
+  }
+
+  if (method === 'tools/call') {
+    const name = params.name;
+    const args = params.arguments || {};
+    const text = await callTool(name, args);
+    const parsed = parseJsonObjectFromToolText(text);
+    return {
+      content: [{ type: 'text', text }],
+      ...(parsed ? { structuredContent: parsed } : {})
+    };
+  }
 
-  if (method === 'tools/list') {
-    return { tools: TOOLS };
+  if (method === 'resources/list') {
+    return { resources: RESOURCES };
   }
 
-  if (method === 'tools/call') {
-    const name = params.name;
-    const args = params.arguments || {};
-    const text = await callTool(name, args);
-    const parsed = parseJsonObjectFromToolText(text);
-    return {
-      content: [{ type: 'text', text }],
-      ...(parsed ? { structuredContent: parsed } : {})
-    };
+  if (method === 'resources/read') {
+    const uri = params.uri;
+    const text = await readResourceText(uri, params.cwd);
+    return { contents: [{ uri, text }] };
   }
 
   throw new Error(`Unsupported MCP method: ${method}`);
 }
 
 async function callTool(name, args) {
-  return runVibeRaven(['-y', CLI_PACKAGE, ...buildToolArgs(name, args || {})], args && args.cwd);
-}
-
-function buildToolArgs(name, args) {
-  if (name === 'viberaven_check_readiness') {
-    return ['--agent-mode'];
-  }
-  if (name === 'viberaven_verify') {
-    return ['--verify'];
-  }
-  if (name === 'viberaven_audit') {
-    return ['audit', '--vercel-supabase', ...(args.json ? ['--json'] : [])];
-  }
-  if (name === 'viberaven_init_rules') {
-    const cliArgs = ['init'];
-    if (args.agents) cliArgs.push('--agents', safeStringArg(args.agents, 'agents'));
-    if (args.dryRun) cliArgs.push('--dry-run');
-    return cliArgs;
-  }
-  if (name === 'viberaven_clean_plan') {
-    return ['clean', '--plan'];
-  }
-  if (name === 'viberaven_strict_gate') {
-    return ['--agent-mode', '--strict', '--json'];
+  if (name === 'viberaven_prp_current') {
+    return readPrpText(args && args.cwd);
   }
-  if (name === 'viberaven_gate_result') {
-    return ['--agent-mode', '--json'];
+  if (name === 'viberaven_prp_findings') {
+    return readPrpFindingsText(args && args.cwd);
   }
-  if (name === 'viberaven_context_map') {
-    return ['--condense'];
+  if (name === 'viberaven_prp_next_action') {
+    return readPrpNextActionText(args && args.cwd);
   }
-  if (name === 'viberaven_heal_plan') {
-    return buildHealArgs(['--heal', '--plan'], args);
+  if (name === 'viberaven_verify_url' && Object.prototype.hasOwnProperty.call(args || {}, 'url')) {
+    return JSON.stringify(
+      {
+        ok: false,
+        unsupported: 'url-verification',
+        message: 'URL-specific verification is not supported yet; run viberaven_verify for workspace verification.',
+        fallbackTool: 'viberaven_verify'
+      },
+      null,
+      2
+    );
   }
-  if (name === 'viberaven_heal_prompt') {
-    return buildHealArgs(['--heal', '--prompt'], args);
+  if (name === 'viberaven_mark_manual_evidence') {
+    return markManualEvidence(args || {});
   }
-  if (name === 'viberaven_heal_apply') {
-    const cliArgs = buildHealArgs(['--heal', '--apply'], args);
-    if (args.yes === true) cliArgs.push('--yes');
-    return cliArgs;
+  return runVibeRaven(['-y', CLI_PACKAGE, ...buildToolArgs(name, args || {})], args && args.cwd);
+}
+
+function buildToolArgs(name, args) {
+  if (name === 'viberaven_check_readiness') {
+    return ['--agent-mode'];
+  }
+  if (name === 'viberaven_verify') {
+    return ['--verify'];
   }
-  if (name === 'viberaven_validate_npm_package') {
-    const names = [];
-    if (args.packageName) {
-      names.push(safeStringArg(args.packageName, 'packageName'));
-    }
-    if (Array.isArray(args.packageNames)) {
-      for (const entry of args.packageNames) {
-        names.push(safeStringArg(entry, 'packageName'));
-      }
-    }
-    if (names.length === 0) {
-      throw new Error('packageName or packageNames is required');
-    }
-    return ['validate-npm-package', '--json', ...names];
+  if (name === 'viberaven_verify_url') {
+    return ['--verify'];
   }
-  throw new Error(`Unknown VibeRaven tool: ${name}`);
+  if (name === 'viberaven_audit') {
+    return ['audit', '--vercel-supabase', ...(args.json ? ['--json'] : [])];
+  }
+  if (name === 'viberaven_init_rules') {
+    const cliArgs = ['init'];
+    if (args.agents) cliArgs.push('--agents', safeStringArg(args.agents, 'agents'));
+    if (args.dryRun) cliArgs.push('--dry-run');
+    return cliArgs;
+  }
+  if (name === 'viberaven_clean_plan') {
+    return ['clean', '--plan'];
+  }
+  if (name === 'viberaven_strict_gate') {
+    return ['--agent-mode', '--strict', '--json'];
+  }
+  if (name === 'viberaven_gate_result') {
+    return ['--agent-mode', '--json'];
+  }
+  if (name === 'viberaven_context_map') {
+    return ['--condense'];
+  }
+  if (name === 'viberaven_heal_plan') {
+    return buildHealArgs(['--heal', '--plan'], args);
+  }
+  if (name === 'viberaven_heal_prompt') {
+    return buildHealArgs(['--heal', '--prompt'], args);
+  }
+  if (name === 'viberaven_heal_apply') {
+    const cliArgs = buildHealArgs(['--heal', '--apply'], args);
+    if (args.yes === true) cliArgs.push('--yes');
+    return cliArgs;
+  }
+  if (name === 'viberaven_validate_npm_package') {
+    const names = [];
+    if (args.packageName) {
+      names.push(safeStringArg(args.packageName, 'packageName'));
+    }
+    if (Array.isArray(args.packageNames)) {
+      for (const entry of args.packageNames) {
+        names.push(safeStringArg(entry, 'packageName'));
+      }
+    }
+    if (names.length === 0) {
+      throw new Error('packageName or packageNames is required');
+    }
+    return ['validate-npm-package', '--json', ...names];
+  }
+  throw new Error(`Unknown VibeRaven tool: ${name}`);
+}
+
+function buildHealArgs(prefix, args) {
+  const cliArgs = [...prefix];
+  if (args.target) cliArgs.push('--target', safeStringArg(args.target, 'target'));
+  if (args.gap) cliArgs.push('--gap', safeStringArg(args.gap, 'gap'));
+  return cliArgs;
+}
+
+function safeStringArg(value, label) {
+  if (typeof value !== 'string') {
+    throw new Error(`Invalid ${label}: expected string`);
+  }
+
+  if (!value.trim()) {
+    throw new Error(`Invalid ${label}: expected non-empty string`);
+  }
+
+  if (/[&|<>^%!"\r\n]/.test(value)) {
+    throw new Error(`Unsafe characters in ${label}`);
+  }
+
+  return value;
+}
+
+function resolveCwd(cwd) {
+  if (cwd === undefined || cwd === null) {
+    return process.cwd();
+  }
+
+  if (typeof cwd !== 'string') {
+    throw new Error('Invalid cwd: expected string');
+  }
+
+  if (!cwd.trim()) {
+    throw new Error('Invalid cwd: expected non-empty string');
+  }
+
+  return cwd;
 }
 
-function buildHealArgs(prefix, args) {
-  const cliArgs = [...prefix];
-  if (args.target) cliArgs.push('--target', safeStringArg(args.target, 'target'));
-  if (args.gap) cliArgs.push('--gap', safeStringArg(args.gap, 'gap'));
-  return cliArgs;
+function prpPath(cwd) {
+  return join(resolveCwd(cwd), '.viberaven', 'prp.json');
 }
 
-function safeStringArg(value, label) {
-  if (typeof value !== 'string') {
-    throw new Error(`Invalid ${label}: expected string`);
+async function readPrpText(cwd) {
+  try {
+    return await readFile(prpPath(cwd), 'utf8');
+  } catch (error) {
+    if (error && error.code === 'ENOENT') {
+      return `ERROR: ${PRP_MISSING_MESSAGE}`;
+    }
+    throw error;
   }
+}
 
-  if (!value.trim()) {
-    throw new Error(`Invalid ${label}: expected non-empty string`);
+async function readExistingPrpJson(cwd) {
+  let text;
+  try {
+    text = await readFile(prpPath(cwd), 'utf8');
+  } catch (error) {
+    if (error && error.code === 'ENOENT') {
+      throw new Error(PRP_MISSING_MESSAGE);
+    }
+    throw error;
   }
 
-  if (/[&|<>^%!"\r\n]/.test(value)) {
-    throw new Error(`Unsafe characters in ${label}`);
+  try {
+    return JSON.parse(text);
+  } catch {
+    throw new Error(PRP_INVALID_JSON_MESSAGE);
   }
-
-  return value;
 }
 
-function resolveCwd(cwd) {
-  if (cwd === undefined || cwd === null) {
-    return process.cwd();
+async function readPrpFindingsText(cwd) {
+  try {
+    const prp = await readExistingPrpJson(cwd);
+    return JSON.stringify({ findings: prp.findings || [] }, null, 2);
+  } catch (error) {
+    return JSON.stringify({ error: errorMessage(error), findings: [] }, null, 2);
   }
+}
 
-  if (typeof cwd !== 'string') {
-    throw new Error('Invalid cwd: expected string');
+async function readPrpNextActionText(cwd) {
+  try {
+    const prp = await readExistingPrpJson(cwd);
+    return JSON.stringify({ nextAction: (prp.nextActions || [])[0] || null }, null, 2);
+  } catch (error) {
+    return JSON.stringify({ error: errorMessage(error), nextAction: null }, null, 2);
   }
+}
 
-  if (!cwd.trim()) {
-    throw new Error('Invalid cwd: expected non-empty string');
+async function readPrpNextActionsText(cwd) {
+  try {
+    const prp = await readExistingPrpJson(cwd);
+    return JSON.stringify({ nextActions: prp.nextActions || [] }, null, 2);
+  } catch (error) {
+    return JSON.stringify({ error: errorMessage(error), nextActions: [] }, null, 2);
   }
-
-  return cwd;
 }
 
-function buildNpxCommand(args) {
-  if (process.platform === 'win32') {
-    return {
-      command: 'cmd.exe',
-      args: ['/d', '/s', '/c', 'npx', ...args],
-      options: { shell: false }
-    };
+async function markManualEvidence(args) {
+  if (typeof args.id !== 'string' || !args.id.trim()) {
+    throw new Error('Invalid id: expected non-empty string');
+  }
+  if (typeof args.summary !== 'string' || !args.summary.trim()) {
+    throw new Error('Invalid summary: expected non-empty string');
   }
 
-  return {
-    command: 'npx',
-    args,
-    options: { shell: false }
-  };
-}
-
-function runVibeRaven(args, cwd) {
-  return new Promise((resolve) => {
-    const built = buildNpxCommand(args);
-    const child = spawnChild(built.command, built.args, {
-      cwd: resolveCwd(cwd),
-      env: process.env,
-      shell: built.options.shell,
-      stdio: ['ignore', 'pipe', 'pipe']
-    });
-    let stdout = '';
-    let stderr = '';
-    child.stdout.on('data', (chunk) => {
-      stdout += chunk.toString();
-    });
-    child.stderr.on('data', (chunk) => {
-      stderr += chunk.toString();
-    });
-    child.on('error', (error) => {
-      resolve(`ERROR: ${error.message}`);
-    });
-    child.on('close', (code) => {
-      const combined = `${stdout}${stderr}`.trim();
-      resolve(`exit ${code ?? 1}${combined ? `\n${combined}` : ''}`);
-    });
+  const prp = await readExistingPrpJson(args.cwd);
+  const evidence = Array.isArray(prp.evidence) ? prp.evidence : [];
+  evidence.push({
+    id: args.id,
+    kind: 'manual',
+    status: 'present',
+    source: typeof args.source === 'string' && args.source.trim() ? args.source : 'manual',
+    summary: `${args.summary} Manual confirmation is not live provider proof.`
   });
+  prp.evidence = evidence;
+  await writeFile(prpPath(args.cwd), `${JSON.stringify(prp, null, 2)}\n`);
+  return JSON.stringify({ ok: true, evidenceId: args.id, kind: 'manual' }, null, 2);
 }
 
-function parseJsonObjectFromToolText(text) {
-  const jsonStart = text.indexOf('{');
-  if (jsonStart === -1) return undefined;
-  try {
-    return JSON.parse(text.slice(jsonStart));
-  } catch {
-    return undefined;
+async function readResourceText(uri, cwd) {
+  if (typeof uri !== 'string') {
+    throw new Error('Invalid resource uri: expected string');
   }
-}
 
-function send(message) {
-  const body = JSON.stringify(message);
-  process.stdout.write(`Content-Length: ${Buffer.byteLength(body, 'utf8')}\r\n\r\n${body}`);
+  if (uri === 'prp://current') {
+    return readPrpText(cwd);
+  }
+  if (uri === 'prp://findings') {
+    return readPrpFindingsText(cwd);
+  }
+  if (uri === 'prp://next-actions') {
+    return readPrpNextActionsText(cwd);
+  }
+  if (uri === 'prp://mission-map') {
+    try {
+      return await readFile(join(resolveCwd(cwd), '.viberaven', 'mission-map.md'), 'utf8');
+    } catch (error) {
+      if (error && error.code === 'ENOENT') {
+        return 'ERROR: .viberaven/mission-map.md not found. Run npx -y viberaven --agent-mode first.';
+      }
+      throw error;
+    }
+  }
+  if (uri === 'prp://context-map') {
+    try {
+      return await readFile(join(resolveCwd(cwd), '.viberaven', 'context-map.json'), 'utf8');
+    } catch (error) {
+      if (error && error.code === 'ENOENT') {
+        return 'ERROR: .viberaven/context-map.json not found. Run npx -y viberaven --agent-mode first.';
+      }
+      throw error;
+    }
+  }
+
+  throw new Error(`Unknown resource uri: ${uri}`);
 }
 
-if (require.main === module) {
-  main();
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
 }
 
-module.exports = {
-  TOOLS,
-  buildNpxCommand,
-  callTool,
-  handleRequest,
-  parseJsonObjectFromToolText,
-  safeStringArg,
-  __setSpawnForTest(spawnForTest) {
-    spawnChild = spawnForTest;
-  },
-  __resetSpawnForTest() {
-    spawnChild = spawn;
-  }
-};
+function buildNpxCommand(args) {
+  if (process.platform === 'win32') {
+    return {
+      command: 'cmd.exe',
+      args: ['/d', '/s', '/c', 'npx', ...args],
+      options: { shell: false }
+    };
+  }
+
+  return {
+    command: 'npx',
+    args,
+    options: { shell: false }
+  };
+}
+
+function runVibeRaven(args, cwd) {
+  return new Promise((resolve) => {
+    const built = buildNpxCommand(args);
+    const child = spawnChild(built.command, built.args, {
+      cwd: resolveCwd(cwd),
+      env: process.env,
+      shell: built.options.shell,
+      stdio: ['ignore', 'pipe', 'pipe']
+    });
+    let stdout = '';
+    let stderr = '';
+    child.stdout.on('data', (chunk) => {
+      stdout += chunk.toString();
+    });
+    child.stderr.on('data', (chunk) => {
+      stderr += chunk.toString();
+    });
+    child.on('error', (error) => {
+      resolve(`ERROR: ${error.message}`);
+    });
+    child.on('close', (code) => {
+      const combined = `${stdout}${stderr}`.trim();
+      resolve(`exit ${code ?? 1}${combined ? `\n${combined}` : ''}`);
+    });
+  });
+}
+
+function parseJsonObjectFromToolText(text) {
+  const jsonStart = text.indexOf('{');
+  if (jsonStart === -1) return undefined;
+  try {
+    return JSON.parse(text.slice(jsonStart));
+  } catch {
+    return undefined;
+  }
+}
+
+function send(message) {
+  const body = JSON.stringify(message);
+  process.stdout.write(`Content-Length: ${Buffer.byteLength(body, 'utf8')}\r\n\r\n${body}`);
+}
+
+if (require.main === module) {
+  main();
+}
+
+module.exports = {
+  TOOLS,
+  buildNpxCommand,
+  callTool,
+  handleRequest,
+  parseJsonObjectFromToolText,
+  safeStringArg,
+  __setSpawnForTest(spawnForTest) {
+    spawnChild = spawnForTest;
+  },
+  __resetSpawnForTest() {
+    spawnChild = spawn;
+  }
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viberaven/mcp",
-  "version": "1.0.6",
+  "version": "1.1.0",
   "description": "MCP server for VibeRaven production-readiness: check_readiness, verify, heal, audit, and strict gate tools for Cursor, Claude Code, and Codex.",
   "license": "UNLICENSED",
   "author": "VibeRaven",