@viberaven/mcp 1.0.7 → 1.1.0

package/README.md

@@ -10,57 +10,80 @@ This package exposes VibeRaven CLI actions as MCP tools for Codex, Claude Code,
 
 The MCP server wraps the stable CLI package: `npx -y viberaven`.
 
-## Run
-
-```bash
-npx -y @viberaven/mcp
-```
+## Run
+
+```bash
+npx -y @viberaven/mcp
+```
+
+MCP config:
+
+```json
+{ "viberaven": { "command": "npx", "args": ["-y", "@viberaven/mcp"] } }
+```
+
+## Tools
+
+- `viberaven_check_readiness` -> `npx -y viberaven --agent-mode`
+- `viberaven_verify` -> `npx -y viberaven --verify`
+- `viberaven_audit` -> `npx -y viberaven audit --vercel-supabase`
+- `viberaven_init_rules` -> `npx -y viberaven init`
+- `viberaven_clean_plan` -> `npx -y viberaven clean --plan`
+- `viberaven_strict_gate` -> `npx -y viberaven --agent-mode --strict --json`
+- `viberaven_gate_result` -> `npx -y viberaven --agent-mode --json`
+- `viberaven_context_map` -> `npx -y viberaven --condense`
+- `viberaven_prp_current` -> read `.viberaven/prp.json`
+- `viberaven_prp_findings` -> list PRP findings
+- `viberaven_prp_next_action` -> return the first PRP next action
+- `viberaven_verify_url` -> URL-specific verification fallback; currently unsupported and not live URL proof
+- `viberaven_mark_manual_evidence` -> append manual PRP evidence; manual evidence is not live provider proof
+- `viberaven_heal_plan` -> `npx -y viberaven --heal --plan`
+- `viberaven_heal_prompt` -> `npx -y viberaven --heal --prompt`
+- `viberaven_heal_apply` -> `npx -y viberaven --heal --apply`
+- `viberaven_validate_npm_package` -> check npm package names before install
+
+`viberaven_check_readiness` is the canonical entrypoint. It runs VibeRaven as the Agent Context + Production Gate and writes `.viberaven/agent-tasklist.md`, `.viberaven/gate-result.json`, and `.viberaven/context-map.json`.
 
-You can also start the MCP server from the main CLI package:
+After one fix, call `viberaven_verify`. Before deploy or CI pass, call `viberaven_strict_gate` or run:
 
 ```bash
-npx -y viberaven mcp
-```
-
-## Tools
-
-- `viberaven_check_readiness` -> `npx -y viberaven --agent-mode`
-- `viberaven_verify` -> `npx -y viberaven --verify`
-- `viberaven_audit` -> `npx -y viberaven audit --vercel-supabase`
-- `viberaven_init_rules` -> `npx -y viberaven init`
-- `viberaven_clean_plan` -> `npx -y viberaven clean --plan`
-- `viberaven_strict_gate` -> `npx -y viberaven --agent-mode --strict --json`
-- `viberaven_gate_result` -> `npx -y viberaven --agent-mode --json`
-- `viberaven_context_map` -> `npx -y viberaven --condense`
-- `viberaven_heal_plan` -> `npx -y viberaven --heal --plan`
-- `viberaven_heal_prompt` -> `npx -y viberaven --heal --prompt`
-- `viberaven_heal_apply` -> `npx -y viberaven --heal --apply`
-
-`viberaven_check_readiness` is the canonical entrypoint. It runs VibeRaven as the Agent Context + Production Gate and writes `.viberaven/agent-tasklist.md`, `.viberaven/gate-result.json`, `.viberaven/context-map.json`, and Launch Autopilot artifacts.
+npx -y viberaven --strict
+```
+
+## VibeRaven Production Protocol
+
+VibeRaven 1.1.0 introduces the Production Protocol for AI-built apps.
 
-Launch Autopilot keeps the canonical agent command:
+Run the canonical agent command:
 
 ```bash
 npx -y viberaven --agent-mode
 ```
 
-MCP clients may pass `launchMode` to `viberaven_check_readiness`:
+Then have the AI coding agent read:
 
-- `manual`: show links and commands only
-- `ask`: default, ask before provider actions
-- `safe`: read-only provider checks and safe repo fixes
-- `full`: approved session mode; production deploy still needs final confirmation
+- `.viberaven/prp.json`
+- `.viberaven/mission-map.md`
+- `.viberaven/context-map.json`
 
-After one fix, call `viberaven_verify`. Before deploy or CI pass, call `viberaven_strict_gate` or run:
-
-```bash
-npx -y viberaven --strict
-```
-
-## Machine Artifact Contract
-
-```text
-docs/contracts/artifacts.md
+The agent should fix `nextActions` in order and must not claim production-ready while `decision.status` is `blocked`.
+
+## Production Protocol Resources
+
+The MCP server exposes VibeRaven Production Protocol artifacts directly:
+
+- `prp://current`
+- `prp://findings`
+- `prp://next-actions`
+- `prp://mission-map`
+- `prp://context-map`
+
+Use `viberaven_check_readiness` to generate the artifacts, then use `viberaven_prp_current`, `viberaven_prp_findings`, or `viberaven_prp_next_action` so agents can act without scraping terminal prose.
+
+## Machine Artifact Contract
+
+```text
+docs/contracts/artifacts.md
 https://viberaven.dev/schemas/gate-result.schema.json
 https://viberaven.dev/schemas/context-map.schema.json
 https://viberaven.dev/schemas/gap.schema.json

package/bin/server.js

@@ -1,24 +1,23 @@
-#!/usr/bin/env node
-const { spawn } = require('node:child_process');
-let spawnChild = spawn;
-
-const SERVER_INFO = { name: 'viberaven-mcp', version: '1.0.7' };
-const CLI_PACKAGE = '@viberaven/cli';
-
-const cwdSchema = {
-  type: 'object',
-  properties: {
-    cwd: { type: 'string', description: 'Project root. Defaults to the MCP server working directory.' },
-    launchMode: {
-      type: 'string',
-      enum: ['manual', 'ask', 'safe', 'full'],
-      description: 'Launch Autopilot permission mode. Defaults to ask.'
-    }
-  },
-  additionalProperties: false
-};
+#!/usr/bin/env node
+const { spawn } = require('node:child_process');
+const { readFile, writeFile } = require('node:fs/promises');
+const { join } = require('node:path');
+let spawnChild = spawn;
+
+const SERVER_INFO = { name: 'viberaven-mcp', version: '1.1.0' };
+const CLI_PACKAGE = '@viberaven/cli';
+const PRP_MISSING_MESSAGE = '.viberaven/prp.json not found. Run npx -y viberaven --agent-mode first.';
+const PRP_INVALID_JSON_MESSAGE = '.viberaven/prp.json is invalid JSON. Re-run npx -y viberaven --agent-mode.';
+
+const cwdSchema = {
+  type: 'object',
+  properties: {
+    cwd: { type: 'string', description: 'Project root. Defaults to the MCP server working directory.' }
+  },
+  additionalProperties: false
+};
 
-const healSchema = {
+const healSchema = {
   type: 'object',
   properties: {
     cwd: { type: 'string' },
@@ -26,16 +25,55 @@ const healSchema = {
     gap: { type: 'string' },
     yes: { type: 'boolean' }
   },
-  additionalProperties: false
-};
-
-const TOOLS = [
+  additionalProperties: false
+};
+
+const manualEvidenceSchema = {
+  type: 'object',
+  properties: {
+    cwd: { type: 'string' },
+    id: { type: 'string' },
+    summary: { type: 'string' },
+    source: { type: 'string' }
+  },
+  required: ['id', 'summary'],
+  additionalProperties: false
+};
+
+const RESOURCES = [
   {
-    name: 'viberaven_check_readiness',
-    description:
-      'Run VibeRaven agent-mode production-readiness and Launch Autopilot; writes .viberaven artifacts and one next launch action.',
-    inputSchema: cwdSchema
+    uri: 'prp://current',
+    name: 'Current VibeRaven Production Protocol',
+    mimeType: 'application/json'
+  },
+  {
+    uri: 'prp://findings',
+    name: 'VibeRaven PRP Findings',
+    mimeType: 'application/json'
+  },
+  {
+    uri: 'prp://next-actions',
+    name: 'VibeRaven PRP Next Actions',
+    mimeType: 'application/json'
+  },
+  {
+    uri: 'prp://mission-map',
+    name: 'VibeRaven Mission Map',
+    mimeType: 'text/markdown'
   },
+  {
+    uri: 'prp://context-map',
+    name: 'VibeRaven Context Map',
+    mimeType: 'application/json'
+  }
+];
+
+const TOOLS = [
+  {
+    name: 'viberaven_check_readiness',
+    description: 'Run the VibeRaven agent-mode production-readiness check and write .viberaven artifacts.',
+    inputSchema: cwdSchema
+  },
   {
     name: 'viberaven_verify',
     description: 'Rescan and refresh VibeRaven production-readiness artifacts after a fix.',
@@ -81,14 +119,47 @@ const TOOLS = [
     description: 'Run VibeRaven agent-mode JSON output and return gate-result.json content.',
     inputSchema: cwdSchema
   },
-  {
-    name: 'viberaven_context_map',
-    description: 'Refresh .viberaven/context-map.json from the last scan.',
-    inputSchema: cwdSchema
-  },
-  {
-    name: 'viberaven_heal_plan',
-    description: 'Write a non-destructive VibeRaven heal plan for a target file or gap.',
+  {
+    name: 'viberaven_context_map',
+    description: 'Refresh .viberaven/context-map.json from the last scan.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_prp_current',
+    description: 'Read .viberaven/prp.json, the VibeRaven Production Protocol truth object.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_prp_findings',
+    description: 'List PRP findings from .viberaven/prp.json.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_prp_next_action',
+    description: 'Return the first PRP next action from .viberaven/prp.json.',
+    inputSchema: cwdSchema
+  },
+  {
+    name: 'viberaven_verify_url',
+    description:
+      'Run VibeRaven verify for the current workspace. URL-specific verification is reported when supported by the CLI.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        cwd: { type: 'string' },
+        url: { type: 'string' }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: 'viberaven_mark_manual_evidence',
+    description: 'Append manual evidence to PRP. Manual evidence is not live provider proof.',
+    inputSchema: manualEvidenceSchema
+  },
+  {
+    name: 'viberaven_heal_plan',
+    description: 'Write a non-destructive VibeRaven heal plan for a target file or gap.',
     inputSchema: healSchema
   },
   {
@@ -187,17 +258,17 @@ async function handleRawMessage(raw) {
 async function handleRequest(method, params) {
   if (method === 'initialize') {
     return {
-      protocolVersion: params.protocolVersion || '2024-11-05',
-      capabilities: { tools: {} },
-      serverInfo: SERVER_INFO
-    };
-  }
+      protocolVersion: params.protocolVersion || '2024-11-05',
+      capabilities: { tools: {}, resources: {} },
+      serverInfo: SERVER_INFO
+    };
+  }
 
   if (method === 'tools/list') {
     return { tools: TOOLS };
   }
 
-  if (method === 'tools/call') {
+  if (method === 'tools/call') {
     const name = params.name;
     const args = params.arguments || {};
     const text = await callTool(name, args);
@@ -205,25 +276,62 @@ async function handleRequest(method, params) {
     return {
       content: [{ type: 'text', text }],
       ...(parsed ? { structuredContent: parsed } : {})
-    };
-  }
-
-  throw new Error(`Unsupported MCP method: ${method}`);
-}
-
-async function callTool(name, args) {
-  return runVibeRaven(['-y', CLI_PACKAGE, ...buildToolArgs(name, args || {})], args && args.cwd);
-}
-
-function buildToolArgs(name, args) {
-  if (name === 'viberaven_check_readiness') {
-    return ['--agent-mode', ...launchModeArgs(args)];
+    };
+  }
+
+  if (method === 'resources/list') {
+    return { resources: RESOURCES };
+  }
+
+  if (method === 'resources/read') {
+    const uri = params.uri;
+    const text = await readResourceText(uri, params.cwd);
+    return { contents: [{ uri, text }] };
+  }
+
+  throw new Error(`Unsupported MCP method: ${method}`);
+}
+
+async function callTool(name, args) {
+  if (name === 'viberaven_prp_current') {
+    return readPrpText(args && args.cwd);
+  }
+  if (name === 'viberaven_prp_findings') {
+    return readPrpFindingsText(args && args.cwd);
+  }
+  if (name === 'viberaven_prp_next_action') {
+    return readPrpNextActionText(args && args.cwd);
   }
-  if (name === 'viberaven_verify') {
-    return ['--verify'];
+  if (name === 'viberaven_verify_url' && Object.prototype.hasOwnProperty.call(args || {}, 'url')) {
+    return JSON.stringify(
+      {
+        ok: false,
+        unsupported: 'url-verification',
+        message: 'URL-specific verification is not supported yet; run viberaven_verify for workspace verification.',
+        fallbackTool: 'viberaven_verify'
+      },
+      null,
+      2
+    );
+  }
+  if (name === 'viberaven_mark_manual_evidence') {
+    return markManualEvidence(args || {});
+  }
+  return runVibeRaven(['-y', CLI_PACKAGE, ...buildToolArgs(name, args || {})], args && args.cwd);
+}
+
+function buildToolArgs(name, args) {
+  if (name === 'viberaven_check_readiness') {
+    return ['--agent-mode'];
   }
-  if (name === 'viberaven_audit') {
-    return ['audit', '--vercel-supabase', ...(args.json ? ['--json'] : [])];
+  if (name === 'viberaven_verify') {
+    return ['--verify'];
+  }
+  if (name === 'viberaven_verify_url') {
+    return ['--verify'];
+  }
+  if (name === 'viberaven_audit') {
+    return ['audit', '--vercel-supabase', ...(args.json ? ['--json'] : [])];
   }
   if (name === 'viberaven_init_rules') {
     const cliArgs = ['init'];
@@ -270,16 +378,7 @@ function buildToolArgs(name, args) {
     return ['validate-npm-package', '--json', ...names];
   }
   throw new Error(`Unknown VibeRaven tool: ${name}`);
-}
-
-function launchModeArgs(args) {
-  if (!args.launchMode) return [];
-  const allowed = new Set(['manual', 'ask', 'safe', 'full']);
-  if (!allowed.has(args.launchMode)) {
-    throw new Error('Invalid launchMode');
-  }
-  return ['--launch-mode', args.launchMode];
-}
+}
 
 function buildHealArgs(prefix, args) {
   const cliArgs = [...prefix];
@@ -304,7 +403,7 @@ function safeStringArg(value, label) {
   return value;
 }
 
-function resolveCwd(cwd) {
+function resolveCwd(cwd) {
   if (cwd === undefined || cwd === null) {
     return process.cwd();
   }
@@ -317,10 +416,134 @@ function resolveCwd(cwd) {
     throw new Error('Invalid cwd: expected non-empty string');
   }
 
-  return cwd;
-}
-
-function buildNpxCommand(args) {
+  return cwd;
+}
+
+function prpPath(cwd) {
+  return join(resolveCwd(cwd), '.viberaven', 'prp.json');
+}
+
+async function readPrpText(cwd) {
+  try {
+    return await readFile(prpPath(cwd), 'utf8');
+  } catch (error) {
+    if (error && error.code === 'ENOENT') {
+      return `ERROR: ${PRP_MISSING_MESSAGE}`;
+    }
+    throw error;
+  }
+}
+
+async function readExistingPrpJson(cwd) {
+  let text;
+  try {
+    text = await readFile(prpPath(cwd), 'utf8');
+  } catch (error) {
+    if (error && error.code === 'ENOENT') {
+      throw new Error(PRP_MISSING_MESSAGE);
+    }
+    throw error;
+  }
+
+  try {
+    return JSON.parse(text);
+  } catch {
+    throw new Error(PRP_INVALID_JSON_MESSAGE);
+  }
+}
+
+async function readPrpFindingsText(cwd) {
+  try {
+    const prp = await readExistingPrpJson(cwd);
+    return JSON.stringify({ findings: prp.findings || [] }, null, 2);
+  } catch (error) {
+    return JSON.stringify({ error: errorMessage(error), findings: [] }, null, 2);
+  }
+}
+
+async function readPrpNextActionText(cwd) {
+  try {
+    const prp = await readExistingPrpJson(cwd);
+    return JSON.stringify({ nextAction: (prp.nextActions || [])[0] || null }, null, 2);
+  } catch (error) {
+    return JSON.stringify({ error: errorMessage(error), nextAction: null }, null, 2);
+  }
+}
+
+async function readPrpNextActionsText(cwd) {
+  try {
+    const prp = await readExistingPrpJson(cwd);
+    return JSON.stringify({ nextActions: prp.nextActions || [] }, null, 2);
+  } catch (error) {
+    return JSON.stringify({ error: errorMessage(error), nextActions: [] }, null, 2);
+  }
+}
+
+async function markManualEvidence(args) {
+  if (typeof args.id !== 'string' || !args.id.trim()) {
+    throw new Error('Invalid id: expected non-empty string');
+  }
+  if (typeof args.summary !== 'string' || !args.summary.trim()) {
+    throw new Error('Invalid summary: expected non-empty string');
+  }
+
+  const prp = await readExistingPrpJson(args.cwd);
+  const evidence = Array.isArray(prp.evidence) ? prp.evidence : [];
+  evidence.push({
+    id: args.id,
+    kind: 'manual',
+    status: 'present',
+    source: typeof args.source === 'string' && args.source.trim() ? args.source : 'manual',
+    summary: `${args.summary} Manual confirmation is not live provider proof.`
+  });
+  prp.evidence = evidence;
+  await writeFile(prpPath(args.cwd), `${JSON.stringify(prp, null, 2)}\n`);
+  return JSON.stringify({ ok: true, evidenceId: args.id, kind: 'manual' }, null, 2);
+}
+
+async function readResourceText(uri, cwd) {
+  if (typeof uri !== 'string') {
+    throw new Error('Invalid resource uri: expected string');
+  }
+
+  if (uri === 'prp://current') {
+    return readPrpText(cwd);
+  }
+  if (uri === 'prp://findings') {
+    return readPrpFindingsText(cwd);
+  }
+  if (uri === 'prp://next-actions') {
+    return readPrpNextActionsText(cwd);
+  }
+  if (uri === 'prp://mission-map') {
+    try {
+      return await readFile(join(resolveCwd(cwd), '.viberaven', 'mission-map.md'), 'utf8');
+    } catch (error) {
+      if (error && error.code === 'ENOENT') {
+        return 'ERROR: .viberaven/mission-map.md not found. Run npx -y viberaven --agent-mode first.';
+      }
+      throw error;
+    }
+  }
+  if (uri === 'prp://context-map') {
+    try {
+      return await readFile(join(resolveCwd(cwd), '.viberaven', 'context-map.json'), 'utf8');
+    } catch (error) {
+      if (error && error.code === 'ENOENT') {
+        return 'ERROR: .viberaven/context-map.json not found. Run npx -y viberaven --agent-mode first.';
+      }
+      throw error;
+    }
+  }
+
+  throw new Error(`Unknown resource uri: ${uri}`);
+}
+
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function buildNpxCommand(args) {
   if (process.platform === 'win32') {
     return {
       command: 'cmd.exe',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viberaven/mcp",
-  "version": "1.0.7",
+  "version": "1.1.0",
   "description": "MCP server for VibeRaven production-readiness: check_readiness, verify, heal, audit, and strict gate tools for Cursor, Claude Code, and Codex.",
   "license": "UNLICENSED",
   "author": "VibeRaven",