@viberaven/mcp 1.3.0 → 1.3.5

package/README.md

@@ -1,66 +1,69 @@
-# @viberaven/mcp
-
-[![npm version](https://img.shields.io/npm/v/@viberaven/mcp)](https://www.npmjs.com/package/@viberaven/mcp)
-[![npm downloads](https://img.shields.io/npm/dw/@viberaven/mcp)](https://www.npmjs.com/package/@viberaven/mcp)
-[![license](https://img.shields.io/npm/l/@viberaven/mcp)](https://www.npmjs.com/package/@viberaven/mcp)
-
-Thin MCP wrapper for VibeRaven.
-
-This package exposes VibeRaven CLI actions as MCP tools for agent runtimes. It gives agents release context, provider context, and the answer to what changed before they patch a real app. It does not contain VibeRaven backend logic and does not bypass VibeRaven login or scan quotas.
-
+# @viberaven/mcp
+
+[![npm version](https://img.shields.io/npm/v/@viberaven/mcp)](https://www.npmjs.com/package/@viberaven/mcp)
+[![npm downloads](https://img.shields.io/npm/dw/@viberaven/mcp)](https://www.npmjs.com/package/@viberaven/mcp)
+[![license](https://img.shields.io/npm/l/@viberaven/mcp)](https://www.npmjs.com/package/@viberaven/mcp)
+
+Thin MCP wrapper for VibeRaven.
+
+This package exposes VibeRaven CLI actions as MCP tools for Codex, Claude Code, Cursor, and other agent runtimes. It does not contain VibeRaven backend logic and does not bypass VibeRaven login or scan quotas.
+
 The MCP server wraps the stable CLI package: `npx -y viberaven`.
 
-## Run
-
-```bash
-npx -y @viberaven/mcp
-```
-
-You can also start the MCP server from the main CLI package:
-
-```bash
-npx -y viberaven mcp
-```
-
-## Tools
-
-- `viberaven_check_readiness` -> `npx -y viberaven --agent-mode`
-- `viberaven_verify` -> `npx -y viberaven --verify`
-- `viberaven_audit` -> `npx -y viberaven audit --vercel-supabase`
-- `viberaven_init_rules` -> `npx -y viberaven init`
-- `viberaven_clean_plan` -> `npx -y viberaven clean --plan`
-- `viberaven_strict_gate` -> `npx -y viberaven --agent-mode --strict --json`
-- `viberaven_gate_result` -> `npx -y viberaven --agent-mode --json`
-- `viberaven_context_map` -> `npx -y viberaven --condense`
-- `viberaven_actions` -> `npx -y viberaven actions`
-- `viberaven_verify_action` -> `npx -y viberaven verify --action <id>`
-- `viberaven_heal_plan` -> `npx -y viberaven --heal --plan`
-- `viberaven_heal_prompt` -> `npx -y viberaven --heal --prompt`
-- `viberaven_heal_apply` -> `npx -y viberaven --heal --apply`
-- `viberaven_validate_npm_package` -> `npx -y viberaven validate-npm-package --json`
-
-`viberaven_check_readiness` is the artifact-loop entrypoint. It builds VibeRaven what-changed context and writes `.viberaven/agent-tasklist.md`, `.viberaven/gate-result.json`, and `.viberaven/context-map.json`.
-
-After one fix, call `viberaven_verify`. Before deploy or CI pass, call `viberaven_strict_gate` or run:
-
-```bash
-npx -y viberaven --strict
-```
-
-## Machine Artifact Contract
-
-```text
-docs/contracts/artifacts.md
-https://viberaven.dev/schemas/gate-result.schema.json
-https://viberaven.dev/schemas/context-map.schema.json
-https://viberaven.dev/schemas/gap.schema.json
-https://viberaven.dev/schemas/heal-result.schema.json
-```
-
-## Login
-
-If VibeRaven prints `LOGIN_URL_READY`, open that exact URL for the user, keep the MCP call alive, and do not ask for passwords, tokens, cookies, or other secrets.
-
-## Security
-
-The MCP package is public integration glue only. It returns CLI stdout/stderr and structured JSON content when available. It does not mutate provider dashboards and does not bypass VibeRaven login, managed API checks, or quota enforcement. Do not claim provider dashboard checks are fixed by repo-code edits.
+For agent-mode artifacts, use `npx -y viberaven --agent-mode`.
+
+## Run
+
+```bash
+npx -y @viberaven/mcp
+```
+
+You can also start the MCP server from the main CLI package:
+
+```bash
+npx -y viberaven mcp
+```
+
+## Tools
+
+- `viberaven_check_readiness` -> `npx -y viberaven check --json`
+- `viberaven_verify` -> `npx -y viberaven check --json`
+- `viberaven_audit` -> `npx -y viberaven audit --vercel-supabase`
+- `viberaven_init_rules` -> `npx -y viberaven init`
+- `viberaven_clean_plan` -> `npx -y viberaven clean --plan`
+- `viberaven_strict_gate` -> `npx -y viberaven --strict --json`
+- `viberaven_gate_result` -> `npx -y viberaven --json`
+- `viberaven_context_map` -> `npx -y viberaven --condense`
+- `viberaven_actions` -> `npx -y viberaven actions`
+- `viberaven_verify_action` -> `npx -y viberaven verify --action <id>`
+- `viberaven_heal_plan` -> `npx -y viberaven --heal --plan`
+- `viberaven_heal_prompt` -> `npx -y viberaven --heal --prompt`
+- `viberaven_heal_apply` -> `npx -y viberaven --heal --apply`
+- `viberaven_validate_npm_package` -> `npx -y viberaven validate-npm-package --json`
+
+`viberaven_check_readiness` is the canonical entrypoint. It runs the local `viberaven check` (no login, no API key, no telemetry) and writes `.viberaven/agent-tasklist.md`, `.viberaven/gate-result.json`, and `.viberaven/context-map.json`.
+
+After a batch of fixes, call `viberaven_verify`. Before deploy or CI pass, call `viberaven_strict_gate` or run:
+
+```bash
+npx -y viberaven --strict
+```
+
+## Machine Artifact Contract
+
+```text
+docs/contracts/artifacts.md
+https://viberaven.dev/schemas/gate-result.schema.json
+https://viberaven.dev/schemas/context-map.schema.json
+https://viberaven.dev/schemas/gap.schema.json
+https://viberaven.dev/schemas/heal-result.schema.json
+```
+
+## Login
+
+If VibeRaven prints `LOGIN_URL_READY`, open that exact URL for the user, keep the MCP call alive, and do not ask for passwords, tokens, cookies, or other secrets.
+
+## Security
+
+The MCP package is public integration glue only. It returns CLI stdout/stderr and structured JSON content when available. It does not mutate provider dashboards and does not bypass VibeRaven login, managed API checks, or quota enforcement. Do not claim provider dashboard checks are fixed by repo-code edits.
+

package/dist/lib/cli-runner.js

@@ -67,9 +67,9 @@ function buildHealArgs(prefix, args) {
 function buildToolArgs(name, args) {
   switch (name) {
     case "viberaven_check_readiness":
-      return ["--agent-mode"];
+      return ["check", "--json"];
     case "viberaven_verify":
-      return ["--verify"];
+      return ["check", "--json"];
     case "viberaven_audit":
       return ["audit", "--vercel-supabase", ...args.json ? ["--json"] : []];
     case "viberaven_init_rules": {
@@ -81,9 +81,9 @@ function buildToolArgs(name, args) {
     case "viberaven_clean_plan":
       return ["clean", "--plan"];
     case "viberaven_strict_gate":
-      return ["--agent-mode", "--strict", "--json"];
+      return ["--strict", "--json"];
     case "viberaven_gate_result":
-      return ["--agent-mode", "--json"];
+      return ["--json"];
     case "viberaven_context_map":
       return ["--condense"];
     case "viberaven_actions":

package/dist/server.js

@@ -38,27 +38,27 @@ var cwdSchema = {
 var readinessTools = [
   {
     name: "viberaven_check_readiness",
-    description: "Use when an agent needs release context and provider evidence before deploying, shipping to real users, or changing database/RLS, billing, deployment, storage, or runtime behavior. Builds the non-interactive artifact loop, writes .viberaven/agent-tasklist.md plus .viberaven/gate-result.json, and returns the next evidence-backed fix. Calling this first helps the agent patch from what changed instead of guessing from a symptom.",
+    description: "Run BEFORE deploying, shipping to real users, or touching auth, database/RLS, billing, webhooks, or environment variables. Runs the local `viberaven check` (no login, no API key, no telemetry) for launch blockers (missing RLS, leaked secrets, unbounded queries, unsigned webhooks) and writes a prioritized task list to .viberaven/agent-tasklist.md plus a machine verdict to .viberaven/gate-result.json. Calling this first avoids wasted code-generation re-runs by surfacing production risks before you write code.",
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_verify",
-    description: "Refresh VibeRaven artifacts after you apply one evidence-backed fix. Call this once per batch of fixes (not after every edit) to update .viberaven/gate-result.json and see whether the repo/provider context improved.",
+    description: "Re-run the local VibeRaven check after you apply fixes. Call this once per batch of fixes (not after every edit) to update .viberaven/gate-result.json and confirm whether the gate moved toward clear.",
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_strict_gate",
-    description: 'Run the strict artifact verdict and return JSON suitable for a deploy or CI pass. Use this when the workflow still depends on gate.status === "clear" from .viberaven/gate-result.json.',
+    description: 'Run the strict production gate and return the machine verdict. Call this right before a deploy or CI pass to confirm gate.status === "clear". Returns JSON suitable for blocking a pipeline.',
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_gate_result",
-    description: "Return the current contents of .viberaven/gate-result.json without re-scanning. Use this to read the last artifact verdict before deciding whether to deploy.",
+    description: "Return the current contents of .viberaven/gate-result.json without re-scanning. Use this to read the last machine verdict before deciding whether to deploy.",
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_context_map",
-    description: "Refresh and return .viberaven/context-map.json, a compact summary of the last context pass for the next agent step. Use this to load minimal release/provider context before acting on a gap.",
+    description: "Refresh and return .viberaven/context-map.json \u2014 a compact summary of the last scan for the next agent step. Use this to load minimal context before acting on a gap.",
     inputSchema: cwdSchema
   }
 ];
@@ -204,9 +204,9 @@ function buildHealArgs(prefix, args) {
 function buildToolArgs(name, args) {
   switch (name) {
     case "viberaven_check_readiness":
-      return ["--agent-mode"];
+      return ["check", "--json"];
     case "viberaven_verify":
-      return ["--verify"];
+      return ["check", "--json"];
     case "viberaven_audit":
       return ["audit", "--vercel-supabase", ...args.json ? ["--json"] : []];
     case "viberaven_init_rules": {
@@ -218,9 +218,9 @@ function buildToolArgs(name, args) {
     case "viberaven_clean_plan":
       return ["clean", "--plan"];
     case "viberaven_strict_gate":
-      return ["--agent-mode", "--strict", "--json"];
+      return ["--strict", "--json"];
     case "viberaven_gate_result":
-      return ["--agent-mode", "--json"];
+      return ["--json"];
     case "viberaven_context_map":
       return ["--condense"];
     case "viberaven_actions":
@@ -315,7 +315,7 @@ async function handleRequest(method, params) {
 }
 
 // src/server.ts
-var SERVER_INFO = { name: "viberaven-mcp", version: "1.3.0" };
+var SERVER_INFO = { name: "viberaven-mcp", version: "1.3.5" };
 var server = new import_server.Server(SERVER_INFO, { capabilities: { tools: {} } });
 server.setRequestHandler(
   import_types.ListToolsRequestSchema,

package/dist/tools/index.js

@@ -39,27 +39,27 @@ var cwdSchema = {
 var readinessTools = [
   {
     name: "viberaven_check_readiness",
-    description: "Use when an agent needs release context and provider evidence before deploying, shipping to real users, or changing database/RLS, billing, deployment, storage, or runtime behavior. Builds the non-interactive artifact loop, writes .viberaven/agent-tasklist.md plus .viberaven/gate-result.json, and returns the next evidence-backed fix. Calling this first helps the agent patch from what changed instead of guessing from a symptom.",
+    description: "Run BEFORE deploying, shipping to real users, or touching auth, database/RLS, billing, webhooks, or environment variables. Runs the local `viberaven check` (no login, no API key, no telemetry) for launch blockers (missing RLS, leaked secrets, unbounded queries, unsigned webhooks) and writes a prioritized task list to .viberaven/agent-tasklist.md plus a machine verdict to .viberaven/gate-result.json. Calling this first avoids wasted code-generation re-runs by surfacing production risks before you write code.",
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_verify",
-    description: "Refresh VibeRaven artifacts after you apply one evidence-backed fix. Call this once per batch of fixes (not after every edit) to update .viberaven/gate-result.json and see whether the repo/provider context improved.",
+    description: "Re-run the local VibeRaven check after you apply fixes. Call this once per batch of fixes (not after every edit) to update .viberaven/gate-result.json and confirm whether the gate moved toward clear.",
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_strict_gate",
-    description: 'Run the strict artifact verdict and return JSON suitable for a deploy or CI pass. Use this when the workflow still depends on gate.status === "clear" from .viberaven/gate-result.json.',
+    description: 'Run the strict production gate and return the machine verdict. Call this right before a deploy or CI pass to confirm gate.status === "clear". Returns JSON suitable for blocking a pipeline.',
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_gate_result",
-    description: "Return the current contents of .viberaven/gate-result.json without re-scanning. Use this to read the last artifact verdict before deciding whether to deploy.",
+    description: "Return the current contents of .viberaven/gate-result.json without re-scanning. Use this to read the last machine verdict before deciding whether to deploy.",
     inputSchema: cwdSchema
   },
   {
     name: "viberaven_context_map",
-    description: "Refresh and return .viberaven/context-map.json, a compact summary of the last context pass for the next agent step. Use this to load minimal release/provider context before acting on a gap.",
+    description: "Refresh and return .viberaven/context-map.json \u2014 a compact summary of the last scan for the next agent step. Use this to load minimal context before acting on a gap.",
     inputSchema: cwdSchema
   }
 ];
@@ -211,9 +211,9 @@ function buildHealArgs(prefix, args) {
 function buildToolArgs(name, args) {
   switch (name) {
     case "viberaven_check_readiness":
-      return ["--agent-mode"];
+      return ["check", "--json"];
     case "viberaven_verify":
-      return ["--verify"];
+      return ["check", "--json"];
     case "viberaven_audit":
       return ["audit", "--vercel-supabase", ...args.json ? ["--json"] : []];
     case "viberaven_init_rules": {
@@ -225,9 +225,9 @@ function buildToolArgs(name, args) {
     case "viberaven_clean_plan":
       return ["clean", "--plan"];
     case "viberaven_strict_gate":
-      return ["--agent-mode", "--strict", "--json"];
+      return ["--strict", "--json"];
     case "viberaven_gate_result":
-      return ["--agent-mode", "--json"];
+      return ["--json"];
     case "viberaven_context_map":
       return ["--condense"];
     case "viberaven_actions":

package/package.json

@@ -1,56 +1,56 @@
-{
-  "name": "@viberaven/mcp",
-  "version": "1.3.0",
-  "description": "MCP server for VibeRaven release context, provider context, and what-changed evidence before agents patch real apps.",
-  "license": "MIT",
-  "author": "VibeRaven",
-  "mcpName": "io.github.ohad6k/viberaven",
-  "homepage": "https://viberaven.dev/mcp.md",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ohad6k/VibeRaven.git",
-    "directory": "packages/mcp"
-  },
-  "bugs": {
-    "url": "https://github.com/ohad6k/VibeRaven/issues"
-  },
-  "keywords": [
-    "viberaven",
-    "mcp",
-    "claude-code",
-    "codex",
-    "cursor",
-    "launch-readiness",
-    "production"
-  ],
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  },
-  "bin": {
-    "viberaven-mcp": "dist/server.js"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "engines": {
-    "node": ">=20"
-  },
-  "scripts": {
-    "build": "node scripts/build.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "presmoke": "npm run build",
-    "smoke": "node scripts/smoke.mjs",
-    "pretest": "npm run build",
-    "test": "vitest run"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0"
-  },
-  "devDependencies": {
-    "esbuild": "^0.25.0",
-    "typescript": "^5.8.0",
-    "vitest": "^3.2.0"
-  }
-}
+{
+  "name": "@viberaven/mcp",
+  "version": "1.3.5",
+  "description": "MCP server for VibeRaven production-readiness: check_readiness, verify, heal, audit, and strict gate tools for Cursor, Claude Code, and Codex.",
+  "license": "MIT",
+  "author": "VibeRaven",
+  "mcpName": "io.github.ohad6k/viberaven",
+  "homepage": "https://viberaven.dev/mcp.md",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ohad6k/VibeRaven.git",
+    "directory": "packages/mcp"
+  },
+  "bugs": {
+    "url": "https://github.com/ohad6k/VibeRaven/issues"
+  },
+  "keywords": [
+    "viberaven",
+    "mcp",
+    "claude-code",
+    "codex",
+    "cursor",
+    "launch-readiness",
+    "production"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "bin": {
+    "viberaven-mcp": "dist/server.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "presmoke": "npm run build",
+    "smoke": "node scripts/smoke.mjs",
+    "pretest": "npm run build",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.2.0"
+  }
+}