@viberaven/mcp 1.4.3 → 1.5.0

package/README.md

@@ -8,9 +8,9 @@ Thin MCP wrapper for VibeRaven.
 
 This package exposes VibeRaven CLI actions as MCP tools for Codex, Claude Code, Cursor, and other agent runtimes. It does not contain VibeRaven backend logic and does not bypass VibeRaven login or scan quotas.
 
-The MCP server wraps the stable CLI package: `npx -y viberaven`.
-
-For agent-mode artifacts, use `npx -y viberaven --agent-mode`.
+The MCP server wraps the stable CLI package: `npx -y viberaven`.
+
+For agent-mode artifacts, use `npx -y viberaven --agent-mode`.
 
 ## Run
 

package/dist/lib/cli-runner.js

@@ -26,13 +26,57 @@ __export(cli_runner_exports, {
   buildHealArgs: () => buildHealArgs,
   buildNpxCommand: () => buildNpxCommand,
   buildToolArgs: () => buildToolArgs,
+  cliChildEnv: () => cliChildEnv,
+  cliNpxArgs: () => cliNpxArgs,
+  cliPackageSpec: () => cliPackageSpec,
+  mcpVersion: () => mcpVersion,
   resolveCwd: () => resolveCwd,
   runVibeRaven: () => runVibeRaven,
   safeStringArg: () => safeStringArg
 });
 module.exports = __toCommonJS(cli_runner_exports);
 var import_node_child_process = require("node:child_process");
+var import_node_fs = require("node:fs");
+var import_node_path = require("node:path");
 var CLI_PACKAGE = "@viberaven/cli";
+var MCP_PACKAGE = "@viberaven/mcp";
+var PLAIN_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+var cachedVersion;
+function mcpVersion() {
+  if (cachedVersion) return cachedVersion;
+  let found;
+  for (let dir = __dirname, depth = 0; depth < 4 && !found; depth += 1, dir = (0, import_node_path.dirname)(dir)) {
+    try {
+      const manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(dir, "package.json"), "utf8"));
+      if (manifest.name === MCP_PACKAGE && typeof manifest.version === "string") found = manifest.version;
+    } catch {
+    }
+  }
+  found ??= true ? "1.5.0" : void 0;
+  if (!found || !PLAIN_VERSION.test(found)) {
+    throw new Error(`Could not read a valid ${MCP_PACKAGE} version (got ${JSON.stringify(found)}), so the matching ${CLI_PACKAGE} cannot be pinned.`);
+  }
+  cachedVersion = found;
+  return found;
+}
+function cliPackageSpec() {
+  return `${CLI_PACKAGE}@${mcpVersion()}`;
+}
+var CLI_BIN = "viberaven";
+function cliNpxArgs(args) {
+  return ["-y", `--package=${cliPackageSpec()}`, "--", CLI_BIN, ...args];
+}
+var KEPT_NPM_CONFIG = /^(?:registry|.+:registry|proxy|https?_proxy|no_?proxy|cafile|ca|cert|key|strict_ssl|cache|offline|prefer_offline|prefer_online|fetch_.+|maxsockets|always_auth|_auth|_authtoken|.+:_auth|.+:_authtoken)$/;
+function cliChildEnv(env = process.env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    const lower = key.toLowerCase();
+    if (lower.startsWith("npm_package_") || lower.startsWith("npm_lifecycle_")) continue;
+    if (lower.startsWith("npm_config_") && !KEPT_NPM_CONFIG.test(lower.slice("npm_config_".length))) continue;
+    out[key] = value;
+  }
+  return out;
+}
 var spawnFn = import_node_child_process.spawn;
 function __setSpawnForTest(fn) {
   spawnFn = fn;
@@ -113,11 +157,17 @@ function buildToolArgs(name, args) {
   }
 }
 function runVibeRaven(args, cwd) {
+  let npxArgs;
+  try {
+    npxArgs = cliNpxArgs(args);
+  } catch (error) {
+    return Promise.resolve(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
+  }
   return new Promise((resolve) => {
-    const built = buildNpxCommand(["-y", CLI_PACKAGE, ...args]);
+    const built = buildNpxCommand(npxArgs);
     const child = spawnFn(built.command, built.args, {
       cwd: resolveCwd(cwd),
-      env: process.env,
+      env: cliChildEnv(),
       shell: built.shell,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -144,6 +194,10 @@ ${combined}` : ""}`);
   buildHealArgs,
   buildNpxCommand,
   buildToolArgs,
+  cliChildEnv,
+  cliNpxArgs,
+  cliPackageSpec,
+  mcpVersion,
   resolveCwd,
   runVibeRaven,
   safeStringArg

package/dist/server.js

@@ -175,7 +175,47 @@ var npmTools = [
 
 // src/lib/cli-runner.ts
 var import_node_child_process = require("node:child_process");
+var import_node_fs = require("node:fs");
+var import_node_path = require("node:path");
 var CLI_PACKAGE = "@viberaven/cli";
+var MCP_PACKAGE = "@viberaven/mcp";
+var PLAIN_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+var cachedVersion;
+function mcpVersion() {
+  if (cachedVersion) return cachedVersion;
+  let found;
+  for (let dir = __dirname, depth = 0; depth < 4 && !found; depth += 1, dir = (0, import_node_path.dirname)(dir)) {
+    try {
+      const manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(dir, "package.json"), "utf8"));
+      if (manifest.name === MCP_PACKAGE && typeof manifest.version === "string") found = manifest.version;
+    } catch {
+    }
+  }
+  found ??= true ? "1.5.0" : void 0;
+  if (!found || !PLAIN_VERSION.test(found)) {
+    throw new Error(`Could not read a valid ${MCP_PACKAGE} version (got ${JSON.stringify(found)}), so the matching ${CLI_PACKAGE} cannot be pinned.`);
+  }
+  cachedVersion = found;
+  return found;
+}
+function cliPackageSpec() {
+  return `${CLI_PACKAGE}@${mcpVersion()}`;
+}
+var CLI_BIN = "viberaven";
+function cliNpxArgs(args) {
+  return ["-y", `--package=${cliPackageSpec()}`, "--", CLI_BIN, ...args];
+}
+var KEPT_NPM_CONFIG = /^(?:registry|.+:registry|proxy|https?_proxy|no_?proxy|cafile|ca|cert|key|strict_ssl|cache|offline|prefer_offline|prefer_online|fetch_.+|maxsockets|always_auth|_auth|_authtoken|.+:_auth|.+:_authtoken)$/;
+function cliChildEnv(env = process.env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    const lower = key.toLowerCase();
+    if (lower.startsWith("npm_package_") || lower.startsWith("npm_lifecycle_")) continue;
+    if (lower.startsWith("npm_config_") && !KEPT_NPM_CONFIG.test(lower.slice("npm_config_".length))) continue;
+    out[key] = value;
+  }
+  return out;
+}
 var spawnFn = import_node_child_process.spawn;
 function safeStringArg(value, label) {
   if (typeof value !== "string") throw new Error(`Invalid ${label}: expected string`);
@@ -250,11 +290,17 @@ function buildToolArgs(name, args) {
   }
 }
 function runVibeRaven(args, cwd) {
+  let npxArgs;
+  try {
+    npxArgs = cliNpxArgs(args);
+  } catch (error) {
+    return Promise.resolve(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
+  }
   return new Promise((resolve) => {
-    const built = buildNpxCommand(["-y", CLI_PACKAGE, ...args]);
+    const built = buildNpxCommand(npxArgs);
     const child = spawnFn(built.command, built.args, {
       cwd: resolveCwd(cwd),
-      env: process.env,
+      env: cliChildEnv(),
       shell: built.shell,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -315,7 +361,7 @@ async function handleRequest(method, params) {
 }
 
 // src/server.ts
-var SERVER_INFO = { name: "viberaven-mcp", version: "1.4.3" };
+var SERVER_INFO = { name: "viberaven-mcp", version: "1.5.0" };
 var server = new import_server.Server(SERVER_INFO, { capabilities: { tools: {} } });
 server.setRequestHandler(
   import_types.ListToolsRequestSchema,

package/dist/tools/index.js

@@ -176,7 +176,47 @@ var npmTools = [
 
 // src/lib/cli-runner.ts
 var import_node_child_process = require("node:child_process");
+var import_node_fs = require("node:fs");
+var import_node_path = require("node:path");
 var CLI_PACKAGE = "@viberaven/cli";
+var MCP_PACKAGE = "@viberaven/mcp";
+var PLAIN_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+var cachedVersion;
+function mcpVersion() {
+  if (cachedVersion) return cachedVersion;
+  let found;
+  for (let dir = __dirname, depth = 0; depth < 4 && !found; depth += 1, dir = (0, import_node_path.dirname)(dir)) {
+    try {
+      const manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(dir, "package.json"), "utf8"));
+      if (manifest.name === MCP_PACKAGE && typeof manifest.version === "string") found = manifest.version;
+    } catch {
+    }
+  }
+  found ??= true ? "1.5.0" : void 0;
+  if (!found || !PLAIN_VERSION.test(found)) {
+    throw new Error(`Could not read a valid ${MCP_PACKAGE} version (got ${JSON.stringify(found)}), so the matching ${CLI_PACKAGE} cannot be pinned.`);
+  }
+  cachedVersion = found;
+  return found;
+}
+function cliPackageSpec() {
+  return `${CLI_PACKAGE}@${mcpVersion()}`;
+}
+var CLI_BIN = "viberaven";
+function cliNpxArgs(args) {
+  return ["-y", `--package=${cliPackageSpec()}`, "--", CLI_BIN, ...args];
+}
+var KEPT_NPM_CONFIG = /^(?:registry|.+:registry|proxy|https?_proxy|no_?proxy|cafile|ca|cert|key|strict_ssl|cache|offline|prefer_offline|prefer_online|fetch_.+|maxsockets|always_auth|_auth|_authtoken|.+:_auth|.+:_authtoken)$/;
+function cliChildEnv(env = process.env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    const lower = key.toLowerCase();
+    if (lower.startsWith("npm_package_") || lower.startsWith("npm_lifecycle_")) continue;
+    if (lower.startsWith("npm_config_") && !KEPT_NPM_CONFIG.test(lower.slice("npm_config_".length))) continue;
+    out[key] = value;
+  }
+  return out;
+}
 var spawnFn = import_node_child_process.spawn;
 function __setSpawnForTest(fn) {
   spawnFn = fn;
@@ -257,11 +297,17 @@ function buildToolArgs(name, args) {
   }
 }
 function runVibeRaven(args, cwd) {
+  let npxArgs;
+  try {
+    npxArgs = cliNpxArgs(args);
+  } catch (error) {
+    return Promise.resolve(`ERROR: ${error instanceof Error ? error.message : String(error)}`);
+  }
   return new Promise((resolve) => {
-    const built = buildNpxCommand(["-y", CLI_PACKAGE, ...args]);
+    const built = buildNpxCommand(npxArgs);
     const child = spawnFn(built.command, built.args, {
       cwd: resolveCwd(cwd),
-      env: process.env,
+      env: cliChildEnv(),
       shell: built.shell,
       stdio: ["ignore", "pipe", "pipe"]
     });

package/package.json

@@ -1,56 +1,56 @@
-{
-  "name": "@viberaven/mcp",
-  "version": "1.4.3",
-  "description": "MCP server for VibeRaven production-readiness: check_readiness, verify, heal, audit, and strict gate tools for Cursor, Claude Code, and Codex.",
-  "license": "MIT",
-  "author": "VibeRaven",
-  "mcpName": "io.github.ohad6k/viberaven",
-  "homepage": "https://viberaven.dev/mcp.md",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ohad6k/VibeRaven.git",
-    "directory": "packages/mcp"
-  },
-  "bugs": {
-    "url": "https://github.com/ohad6k/VibeRaven/issues"
-  },
-  "keywords": [
-    "viberaven",
-    "mcp",
-    "claude-code",
-    "codex",
-    "cursor",
-    "launch-readiness",
-    "production"
-  ],
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  },
-  "bin": {
-    "viberaven-mcp": "dist/server.js"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "engines": {
-    "node": ">=20"
-  },
-  "scripts": {
-    "build": "node scripts/build.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "presmoke": "npm run build",
-    "smoke": "node scripts/smoke.mjs",
-    "pretest": "npm run build",
-    "test": "vitest run"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0"
-  },
-  "devDependencies": {
-    "esbuild": "^0.25.0",
-    "typescript": "^5.8.0",
-    "vitest": "^3.2.0"
-  }
-}
+{
+  "name": "@viberaven/mcp",
+  "version": "1.5.0",
+  "description": "MCP server for VibeRaven production-readiness: check_readiness, verify, heal, audit, and strict gate tools for Cursor, Claude Code, and Codex.",
+  "license": "MIT",
+  "author": "VibeRaven",
+  "mcpName": "io.github.ohad6k/viberaven",
+  "homepage": "https://viberaven.dev/mcp.md",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ohad6k/VibeRaven.git",
+    "directory": "packages/mcp"
+  },
+  "bugs": {
+    "url": "https://github.com/ohad6k/VibeRaven/issues"
+  },
+  "keywords": [
+    "viberaven",
+    "mcp",
+    "claude-code",
+    "codex",
+    "cursor",
+    "launch-readiness",
+    "production"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "bin": {
+    "viberaven-mcp": "dist/server.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "presmoke": "npm run build",
+    "smoke": "node scripts/smoke.mjs",
+    "pretest": "npm run build",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.2.0"
+  }
+}