crukx-mcp 0.1.7 → 0.1.8

package/dist/{auth-J6323WQJ.js → auth-AY7JI6KG.js}

@@ -1,10 +1,12 @@
 import {
-  CONFIG_PATH,
   clearAuth,
   isTokenExpired,
   loadAuth,
   saveAuth
-} from "./chunk-SC34H3N5.js";
+} from "./chunk-NPZHH5C5.js";
+import {
+  CONFIG_PATH
+} from "./chunk-QY33WYZF.js";
 export {
   CONFIG_PATH,
   clearAuth,

package/dist/bin/cli.js

@@ -59,7 +59,7 @@ import { fileURLToPath } from "url";
 import { join as join2, dirname as pathDirname } from "path";
 var __dirname = pathDirname(fileURLToPath(import.meta.url));
 var program = new Command();
-program.name("crukx").description("Crukx CLI \u2014 reliability control plane for autonomous software engineering").version("0.1.7");
+program.name("crukx").description("Crukx CLI \u2014 reliability control plane for autonomous software engineering").version("0.1.8");
 program.command("login").description("Authenticate with Crukx via browser").option("--api-url <url>", "Crukx gateway URL", getConfig().CRUKX_API_URL).action(async (opts) => {
   process.stderr.write("Opening browser to complete login\u2026\n");
   let startData;
@@ -140,63 +140,146 @@ Expires: ${auth.expires_at}
 API: ${auth.api_url}
 `);
 });
-program.command("install").description("Auto-install Crukx into all detected MCP-compatible clients").option("--dry-run", "Show what would be changed without writing").action(async (opts) => {
+program.command("install").description("Auto-install Crukx into all detected MCP-compatible clients").option("--dry-run", "Show what would be changed without writing").option("--workspace", "Also write to .vscode/mcp.json in the current working directory").action(async (opts) => {
   const { existsSync: existsSync3, readFileSync: readFileSync3, writeFileSync: writeFileSync2 } = await import("fs");
   const { homedir: homedir2 } = await import("os");
   const home = homedir2();
+  const cwd = process.cwd();
   const SERVER_ENTRY = { command: "crukx", args: ["mcp"] };
-  function injectMcpServers(raw, key) {
+  function injectMcpServers(raw, key = "crukx") {
     const cfg = raw ? JSON.parse(raw) : {};
     cfg.mcpServers = { ...cfg.mcpServers ?? {}, [key]: SERVER_ENTRY };
     return JSON.stringify(cfg, null, 2);
   }
+  function injectVSCode(raw) {
+    const cfg = raw ? JSON.parse(raw) : {};
+    cfg.servers = { ...cfg.servers ?? {}, crukx: { type: "stdio", ...SERVER_ENTRY } };
+    return JSON.stringify(cfg, null, 2);
+  }
   const clients = [
+    // ── VS Code global (GitHub Copilot) ──────────────────────────────
     {
-      name: "VS Code (GitHub Copilot)",
+      name: "VS Code \u2014 global (~/.vscode/mcp.json)",
       configPath: join2(home, ".vscode", "mcp.json"),
-      detect: () => existsSync3(join2(home, ".vscode")) || existsSync3("/usr/share/code") || existsSync3("/Applications/Visual Studio Code.app"),
+      detect: () => existsSync3(join2(home, ".vscode")) || existsSync3("/usr/share/code") || existsSync3("/usr/bin/code") || existsSync3("/snap/bin/code") || existsSync3("/Applications/Visual Studio Code.app") || existsSync3("C:\\Users\\" + (process.env.USERNAME ?? "") + "\\AppData\\Local\\Programs\\Microsoft VS Code\\Code.exe"),
+      inject: injectVSCode
+    },
+    // ── VS Code workspace (current directory) ────────────────────────
+    {
+      name: "VS Code \u2014 workspace (.vscode/mcp.json)",
+      configPath: join2(cwd, ".vscode", "mcp.json"),
+      detect: () => opts.workspace === true || existsSync3(join2(cwd, ".vscode")) || existsSync3(join2(cwd, ".git")),
+      // any git repo gets workspace config
+      inject: injectVSCode
+    },
+    // ── VS Code settings.json (fallback for older Copilot versions) ──
+    {
+      name: "VS Code \u2014 settings.json (mcp servers)",
+      configPath: process.platform === "win32" ? join2(home, "AppData", "Roaming", "Code", "User", "settings.json") : process.platform === "darwin" ? join2(home, "Library", "Application Support", "Code", "User", "settings.json") : join2(home, ".config", "Code", "User", "settings.json"),
+      detect: () => existsSync3(process.platform === "win32" ? join2(home, "AppData", "Roaming", "Code", "User") : process.platform === "darwin" ? join2(home, "Library", "Application Support", "Code", "User") : join2(home, ".config", "Code", "User")),
       inject: (raw) => {
         const cfg = raw ? JSON.parse(raw) : {};
-        cfg.servers = { ...cfg.servers ?? {}, crukx: { type: "stdio", ...SERVER_ENTRY } };
+        cfg["mcp.servers"] = { ...cfg["mcp.servers"] ?? {}, crukx: { type: "stdio", ...SERVER_ENTRY } };
         return JSON.stringify(cfg, null, 2);
       }
     },
+    // ── Cursor ───────────────────────────────────────────────────────
     {
       name: "Cursor",
       configPath: join2(home, ".cursor", "mcp.json"),
-      detect: () => existsSync3(join2(home, ".cursor")) || existsSync3("/Applications/Cursor.app"),
-      inject: (raw) => injectMcpServers(raw, "crukx")
+      detect: () => existsSync3(join2(home, ".cursor")) || existsSync3("/Applications/Cursor.app") || existsSync3(join2(home, "AppData", "Local", "Programs", "cursor", "Cursor.exe")),
+      inject: injectMcpServers
     },
+    // ── Claude Desktop ───────────────────────────────────────────────
     {
       name: "Claude Desktop",
-      configPath: process.platform === "darwin" ? join2(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : join2(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json"),
-      detect: () => existsSync3("/Applications/Claude.app") || existsSync3(join2(home, "Library", "Application Support", "Claude")) || existsSync3(join2(home, "AppData", "Local", "AnthropicClaude")),
-      inject: (raw) => injectMcpServers(raw, "crukx")
+      configPath: process.platform === "darwin" ? join2(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : process.platform === "win32" ? join2(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json") : join2(home, ".config", "Claude", "claude_desktop_config.json"),
+      detect: () => existsSync3("/Applications/Claude.app") || existsSync3(join2(home, "Library", "Application Support", "Claude")) || existsSync3(join2(home, "AppData", "Local", "AnthropicClaude")) || existsSync3(join2(home, ".config", "Claude")),
+      inject: injectMcpServers
     },
+    // ── Kiro ─────────────────────────────────────────────────────────
     {
       name: "Kiro",
       configPath: join2(home, ".kiro", "settings", "mcp.json"),
       detect: () => existsSync3(join2(home, ".kiro")),
-      inject: (raw) => injectMcpServers(raw, "crukx")
+      inject: injectMcpServers
     },
+    // ── opencode ─────────────────────────────────────────────────────
     {
       name: "opencode",
       configPath: join2(home, ".config", "opencode", "config.json"),
       detect: () => existsSync3(join2(home, ".config", "opencode")),
       inject: (raw) => {
         const cfg = raw ? JSON.parse(raw) : {};
-        cfg.mcp = {
-          ...cfg.mcp ?? {},
-          crukx: { type: "local", command: ["crukx", "mcp"], enabled: true }
+        cfg.mcp = { ...cfg.mcp ?? {}, crukx: { type: "local", command: ["crukx", "mcp"], enabled: true } };
+        return JSON.stringify(cfg, null, 2);
+      }
+    },
+    // ── OpenAI Codex CLI ─────────────────────────────────────────────
+    {
+      name: "OpenAI Codex CLI",
+      configPath: join2(home, ".codex", "config.json"),
+      detect: () => existsSync3(join2(home, ".codex")) || existsSync3(join2(home, ".config", "codex")),
+      inject: injectMcpServers
+    },
+    // ── Windsurf (Codeium) ───────────────────────────────────────────
+    {
+      name: "Windsurf",
+      configPath: join2(home, ".codeium", "windsurf", "mcp_config.json"),
+      detect: () => existsSync3(join2(home, ".codeium")) || existsSync3("/Applications/Windsurf.app") || existsSync3(join2(home, "AppData", "Local", "Programs", "Windsurf", "Windsurf.exe")),
+      inject: injectMcpServers
+    },
+    // ── Zed ──────────────────────────────────────────────────────────
+    {
+      name: "Zed",
+      configPath: process.platform === "darwin" ? join2(home, "Library", "Application Support", "Zed", "settings.json") : join2(home, ".config", "zed", "settings.json"),
+      detect: () => existsSync3("/Applications/Zed.app") || existsSync3(join2(home, ".config", "zed")) || existsSync3(join2(home, "Library", "Application Support", "Zed")),
+      inject: (raw) => {
+        const cfg = raw ? JSON.parse(raw) : {};
+        cfg.context_servers = {
+          ...cfg.context_servers ?? {},
+          crukx: { command: { path: "crukx", args: ["mcp"] } }
         };
         return JSON.stringify(cfg, null, 2);
       }
+    },
+    // ── Continue (VS Code / JetBrains extension) ─────────────────────
+    {
+      name: "Continue",
+      configPath: join2(home, ".continue", "config.json"),
+      detect: () => existsSync3(join2(home, ".continue")),
+      inject: (raw) => {
+        const cfg = raw ? JSON.parse(raw) : {};
+        const existing = Array.isArray(cfg.mcpServers) ? cfg.mcpServers : [];
+        if (!existing.some((s) => s.name === "crukx")) {
+          existing.push({ name: "crukx", ...SERVER_ENTRY });
+        }
+        cfg.mcpServers = existing;
+        return JSON.stringify(cfg, null, 2);
+      }
+    },
+    // ── Cline (VS Code extension) ─────────────────────────────────────
+    {
+      name: "Cline",
+      configPath: process.platform === "win32" ? join2(home, "AppData", "Roaming", "Code", "User", "globalStorage", "saoudrizwan.claude-dev", "settings", "cline_mcp_settings.json") : process.platform === "darwin" ? join2(home, "Library", "Application Support", "Code", "User", "globalStorage", "saoudrizwan.claude-dev", "settings", "cline_mcp_settings.json") : join2(home, ".config", "Code", "User", "globalStorage", "saoudrizwan.claude-dev", "settings", "cline_mcp_settings.json"),
+      detect: () => existsSync3(process.platform === "win32" ? join2(home, "AppData", "Roaming", "Code", "User", "globalStorage", "saoudrizwan.claude-dev") : process.platform === "darwin" ? join2(home, "Library", "Application Support", "Code", "User", "globalStorage", "saoudrizwan.claude-dev") : join2(home, ".config", "Code", "User", "globalStorage", "saoudrizwan.claude-dev")),
+      inject: (raw) => {
+        const cfg = raw ? JSON.parse(raw) : { mcpServers: {} };
+        cfg.mcpServers = { ...cfg.mcpServers ?? {}, crukx: { ...SERVER_ENTRY, disabled: false, autoApprove: [] } };
+        return JSON.stringify(cfg, null, 2);
+      }
     }
   ];
-  const detected = clients.filter((c) => c.detect());
+  const detected = clients.filter((c) => {
+    try {
+      return c.detect();
+    } catch {
+      return false;
+    }
+  });
   if (detected.length === 0) {
     process.stdout.write(
-      "No supported MCP clients detected.\n\nSupported: VS Code, Cursor, Claude Desktop, Kiro, opencode\n\nManual setup: https://crukx.dev/docs/mcp\n"
+      "No supported MCP clients detected.\n\nSupported: VS Code, Cursor, Claude Desktop, Kiro, opencode, Codex CLI, Windsurf, Zed, Continue, Cline\n\nRun with --workspace to force-write .vscode/mcp.json in the current directory.\nManual setup: https://crukx.dev/docs/mcp\n"
     );
     return;
   }
@@ -208,7 +291,8 @@ program.command("install").description("Auto-install Crukx into all detected MCP
     const raw = existsSync3(client.configPath) ? readFileSync3(client.configPath, "utf-8") : null;
     try {
       const parsed = raw ? JSON.parse(raw) : {};
-      if (parsed?.mcpServers?.crukx || parsed?.servers?.crukx || parsed?.mcp?.crukx) {
+      const alreadyIn = parsed?.mcpServers?.crukx || parsed?.servers?.crukx || parsed?.mcp?.crukx || parsed?.["mcp.servers"]?.crukx || parsed?.context_servers?.crukx || Array.isArray(parsed?.mcpServers) && parsed.mcpServers.some((s) => s.name === "crukx");
+      if (alreadyIn) {
         process.stdout.write(`  \u2705 ${client.name} \u2014 already configured
 `);
         continue;
@@ -222,7 +306,7 @@ program.command("install").description("Auto-install Crukx into all detected MCP
     } else {
       mkdirSync2(dirname2(client.configPath), { recursive: true });
       writeFileSync2(client.configPath, newContent, "utf-8");
-      process.stdout.write(`  \u2705 ${client.name} \u2014 configured
+      process.stdout.write(`  \u2705 ${client.name} \u2014 configured (${client.configPath})
 `);
       installed++;
     }
@@ -232,7 +316,9 @@ program.command("install").description("Auto-install Crukx into all detected MCP
     process.stdout.write("Dry run complete. Remove --dry-run to apply.\n");
   } else if (installed > 0) {
     process.stdout.write(
-      `Installed in ${installed} client${installed > 1 ? "s" : ""}. Restart your editor, then ask:
+      `Installed in ${installed} client${installed > 1 ? "s" : ""}.
+
+Restart your editor, then ask your AI agent:
   "Run a Crukx audit on this file"
 `
     );

package/dist/chunk-NPZHH5C5.js

@@ -0,0 +1,33 @@
+import {
+  CONFIG_PATH
+} from "./chunk-QY33WYZF.js";
+
+// src/auth/index.ts
+import { mkdirSync, writeFileSync, readFileSync, existsSync } from "fs";
+import { dirname } from "path";
+function saveAuth(auth) {
+  mkdirSync(dirname(CONFIG_PATH), { recursive: true });
+  const existing = loadAuth() ?? {};
+  writeFileSync(CONFIG_PATH, JSON.stringify({ ...existing, ...auth }, null, 2));
+}
+function loadAuth() {
+  if (!existsSync(CONFIG_PATH)) return null;
+  try {
+    return JSON.parse(readFileSync(CONFIG_PATH, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function clearAuth() {
+  if (existsSync(CONFIG_PATH)) writeFileSync(CONFIG_PATH, "{}");
+}
+function isTokenExpired(auth) {
+  return new Date(auth.expires_at) <= new Date(Date.now() + 6e4);
+}
+
+export {
+  saveAuth,
+  loadAuth,
+  clearAuth,
+  isTokenExpired
+};

package/dist/{chunk-SC34H3N5.js → chunk-QY33WYZF.js}

@@ -1,7 +1,3 @@
-// src/auth/index.ts
-import { mkdirSync, writeFileSync, readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
-import { dirname } from "path";
-
 // src/config/index.ts
 import "dotenv/config";
 import { z } from "zod";
@@ -28,32 +24,7 @@ function getConfig() {
 }
 var CONFIG_PATH = join(homedir(), ".crukx", "config.json");
 
-// src/auth/index.ts
-function saveAuth(auth) {
-  mkdirSync(dirname(CONFIG_PATH), { recursive: true });
-  const existing = loadAuth() ?? {};
-  writeFileSync(CONFIG_PATH, JSON.stringify({ ...existing, ...auth }, null, 2));
-}
-function loadAuth() {
-  if (!existsSync2(CONFIG_PATH)) return null;
-  try {
-    return JSON.parse(readFileSync2(CONFIG_PATH, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function clearAuth() {
-  if (existsSync2(CONFIG_PATH)) writeFileSync(CONFIG_PATH, "{}");
-}
-function isTokenExpired(auth) {
-  return new Date(auth.expires_at) <= new Date(Date.now() + 6e4);
-}
-
 export {
   getConfig,
-  CONFIG_PATH,
-  saveAuth,
-  loadAuth,
-  clearAuth,
-  isTokenExpired
+  CONFIG_PATH
 };

package/dist/config-4D4N6QUQ.js

@@ -0,0 +1,8 @@
+import {
+  CONFIG_PATH,
+  getConfig
+} from "./chunk-QY33WYZF.js";
+export {
+  CONFIG_PATH,
+  getConfig
+};

package/dist/server.js

@@ -1,7 +1,9 @@
 import {
-  getConfig,
   loadAuth
-} from "./chunk-SC34H3N5.js";
+} from "./chunk-NPZHH5C5.js";
+import {
+  getConfig
+} from "./chunk-QY33WYZF.js";
 
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -375,6 +377,150 @@ The code looks clean \u2014 no specific remediation needed.`;
       }
     }
   );
+  server2.tool(
+    "self_heal",
+    [
+      "Autonomous self-healing loop: audit code \u2192 generate fixes using your LLM \u2192 re-audit to validate improvement.",
+      "",
+      "Inspired by the upskill generate\u2192evaluate\u2192refine pattern:",
+      "  1. Run a full Crukx audit on the code",
+      "  2. For each critical/high finding, generate a concrete fix using your configured LLM provider",
+      "  3. Apply all fixes to produce healed code",
+      "  4. Re-audit the healed code to validate the reliability score improved",
+      "  5. Return the fixed code + before/after score comparison",
+      "",
+      "Use this tool when:",
+      '- The user says "fix this", "heal this code", "auto-fix the issues"',
+      "- swarm_audit or security_scan found critical/high issues and the user wants them resolved",
+      "- You want to validate that a fix actually improves the reliability score",
+      "",
+      "Returns: healed code, score delta (before \u2192 after), and a summary of what was fixed."
+    ].join("\n"),
+    {
+      code: z2.string().describe(
+        "The code to heal. Paste the full file or snippet with issues."
+      ),
+      provider_url: z2.string().optional().describe(
+        'OpenAI-compatible API base URL of your LLM provider. Defaults to OpenRouter. Examples: "https://openrouter.ai/api/v1", "http://localhost:11434/v1" (Ollama), "https://api.openai.com/v1".'
+      ),
+      provider_key: z2.string().optional().describe(
+        "API key for your LLM provider. If omitted, uses the Crukx gateway key."
+      ),
+      model: z2.string().optional().describe(
+        'Model to use for generating fixes. Examples: "google/gemini-flash-1.5", "gpt-4o-mini", "llama3.2". Defaults to "google/gemini-flash-1.5".'
+      ),
+      max_iterations: z2.number().int().min(1).max(3).optional().describe(
+        "How many heal\u2192re-audit cycles to run (1\u20133). Default: 1. Use 2\u20133 for stubborn issues."
+      )
+    },
+    async ({ code, provider_url, provider_key, model, max_iterations }) => {
+      try {
+        const auth = (await import("./auth-AY7JI6KG.js")).loadAuth();
+        const cfg = (await import("./config-4D4N6QUQ.js")).getConfig();
+        const apiBase = (provider_url ?? "https://openrouter.ai/api/v1").replace(/\/$/, "");
+        const apiKey = provider_key ?? auth?.access_token ?? cfg.CRUKX_ACCESS_TOKEN ?? "";
+        const llmModel = model ?? "google/gemini-flash-1.5";
+        const iterations = max_iterations ?? 1;
+        const initialAudit = await swarmAudit({ diff: code });
+        const initialScore = initialAudit.summary.reliabilityScore;
+        const blocking = initialAudit.findings.filter(
+          (f) => f.severity === "critical" || f.severity === "high"
+        );
+        if (blocking.length === 0) {
+          return {
+            content: [{
+              type: "text",
+              text: [
+                `# Self-Heal Result`,
+                ``,
+                `**No critical or high issues found** \u2014 nothing to heal.`,
+                `**Score:** ${initialScore}/100 (Grade ${grade(initialScore)})`,
+                ``,
+                `The code is already clean. Run \`swarm_audit\` for full details.`
+              ].join("\n")
+            }]
+          };
+        }
+        let currentCode = code;
+        let currentScore = initialScore;
+        const healLog = [];
+        for (let i = 0; i < iterations; i++) {
+          const findingsList = blocking.slice(0, 10).map(
+            (f, idx) => `${idx + 1}. [${f.severity.toUpperCase()}] ${f.rule} at line ${f.line}: ${f.message}
+   Fix: ${f.suggestion ?? "apply best practice"}`
+          ).join("\n");
+          const healPrompt = `You are a senior engineer performing automated code healing.
+
+The following code has reliability/security issues that must be fixed:
+
+ISSUES TO FIX:
+${findingsList}
+
+CODE:
+\`\`\`
+${currentCode.slice(0, 1e4)}
+\`\`\`
+
+Return ONLY the complete fixed code with all issues resolved. No explanation, no markdown fences, just the raw fixed code.
+Preserve all existing functionality. Make minimal changes \u2014 only fix the listed issues.`;
+          const llmRes = await fetch(`${apiBase}/chat/completions`, {
+            method: "POST",
+            headers: {
+              "Authorization": `Bearer ${apiKey}`,
+              "Content-Type": "application/json",
+              "HTTP-Referer": "https://crukx.dev",
+              "X-Title": "Crukx Self-Heal"
+            },
+            body: JSON.stringify({
+              model: llmModel,
+              messages: [{ role: "user", content: healPrompt }],
+              temperature: 0.1,
+              max_tokens: 8192
+            }),
+            signal: AbortSignal.timeout(6e4)
+          });
+          if (!llmRes.ok) {
+            const err = await llmRes.text();
+            throw new Error(`LLM provider error ${llmRes.status}: ${err.slice(0, 200)}`);
+          }
+          const llmData = await llmRes.json();
+          const healedCode = llmData.choices?.[0]?.message?.content?.trim() ?? "";
+          if (!healedCode) throw new Error("LLM returned empty response");
+          currentCode = healedCode.replace(/^```[\w]*\n?/, "").replace(/\n?```$/, "");
+          const reAudit = await swarmAudit({ diff: currentCode });
+          const newScore = reAudit.summary.reliabilityScore;
+          const delta = newScore - currentScore;
+          healLog.push(
+            `**Iteration ${i + 1}:** ${currentScore} \u2192 ${newScore} (${delta >= 0 ? "+" : ""}${delta}) \u2014 ${reAudit.summary.criticalCount} critical, ${reAudit.summary.highCount} high remaining`
+          );
+          currentScore = newScore;
+          if (reAudit.summary.criticalCount === 0 && reAudit.summary.highCount === 0) break;
+        }
+        const totalDelta = currentScore - initialScore;
+        const lines = [
+          `# Self-Heal Complete`,
+          ``,
+          `**Score:** ${initialScore}/100 \u2192 ${currentScore}/100 (${totalDelta >= 0 ? "+" : ""}${totalDelta})`,
+          `**Gate:** ${gate(currentScore, 0, 0)}`,
+          `**Model used:** ${llmModel}`,
+          ``,
+          `## Heal Log`,
+          ...healLog,
+          ``,
+          `## Fixed Code`,
+          `\`\`\``,
+          currentCode,
+          `\`\`\``
+        ];
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+      } catch (err) {
+        return {
+          content: [{ type: "text", text: `\u274C Self-heal failed: ${err instanceof Error ? err.message : String(err)}` }],
+          isError: true
+        };
+      }
+    }
+  );
   server2.tool(
     "crukx_health",
     [
@@ -391,7 +537,7 @@ The code looks clean \u2014 no specific remediation needed.`;
     async () => {
       try {
         const result = await healthCheck();
-        const auth = (await import("./auth-J6323WQJ.js")).loadAuth();
+        const auth = (await import("./auth-AY7JI6KG.js")).loadAuth();
         const text = [
           `# Crukx Gateway Status`,
           ``,
@@ -424,7 +570,7 @@ Run \`crukx login\` to re-authenticate.`
 // src/server.ts
 var server = new McpServer({
   name: "crukx",
-  version: "0.1.3"
+  version: "0.1.8"
 }, {
   instructions: `You have access to Crukx \u2014 a 7-agent AI reliability engine for code quality, security, and correctness.
 
@@ -457,6 +603,10 @@ Use this when the user references a previous audit run.
 **crukx_health** \u2014 Verify gateway connectivity and auth.
 Use this if tools are returning errors or the user asks about connection status.
 
+**self_heal** \u2014 Autonomous fix loop: audit \u2192 generate fixes with your LLM \u2192 re-audit to validate improvement.
+Use this when the user says "fix this", "heal this code", or wants issues auto-resolved.
+Pass the code and optionally your provider URL/key/model. Returns fixed code + before/after score.
+
 ## When to use which tool
 
 | Situation | Tool |
@@ -465,6 +615,7 @@ Use this if tools are returning errors or the user asks about connection status.
 | "Is this code secure?" | security_scan |
 | "Quick score before merge" | reliability_score |
 | "How do I fix this?" | suggest_fix |
+| "Fix it for me / auto-heal" | self_heal |
 | "Show me audit #abc" | report_fetch |
 | "Is Crukx connected?" | crukx_health |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crukx-mcp",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Crukx MCP server — reliability control plane for autonomous software engineering",
   "type": "module",
   "main": "./dist/server.js",