grok-cli-mcp 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Howard Peng
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,221 @@
+# grok-mcp
+
+[![npm version](https://img.shields.io/npm/v/grok-cli-mcp.svg)](https://www.npmjs.com/package/grok-cli-mcp)
+[![MCP Registry](https://img.shields.io/badge/MCP%20Registry-published-success)](https://registry.modelcontextprotocol.io/)
+
+> Use Grok (via the official xAI [Grok CLI](https://x.ai/news/grok-build-cli)) as a **peer code reviewer, adversary, and consultant** inside Claude Code, Cursor, Cline, OpenClaw, and any other MCP host.
+
+`grok-mcp` (npm: [`grok-cli-mcp`](https://www.npmjs.com/package/grok-cli-mcp)) is a [Model Context Protocol](https://modelcontextprotocol.io) server that wraps the `grok` CLI. It gives your primary agent (Claude, Cursor, etc.) four tools so it can delegate to Grok for second opinions without leaving the session:
+
+- `grok_review` — structured diff review with per-dimension scores
+- `grok_challenge` — adversarial bug/race/security hunting
+- `grok_consult` — multi-turn consultation (caller owns history)
+- `grok_chat` — one-shot questions
+
+English | [繁體中文](./README.zh-TW.md)
+
+## Why grok-mcp?
+
+Most "Grok MCP" packages expose Grok's chat/search/image capabilities so Claude can *use* Grok. `grok-mcp` does the opposite: it lets your main coding agent (Claude/Cursor/…) **ask Grok to review and attack its own work**. A different model challenging your primary catches bugs single-model loops miss.
+
+## What you get
+
+Four tools, all stateless, all stdout-only:
+
+| Tool | Use it for |
+|------|------------|
+| `grok_chat` | One-shot prompt → Grok's reply |
+| `grok_review` | Pass a unified diff (or auto-grab `git diff main...HEAD`) and get a per-dimension code review |
+| `grok_consult` | Replay a message history for multi-turn — caller owns the thread |
+| `grok_challenge` | Adversarial: ask Grok to find every bug, race, edge case, and security hole |
+
+## Prerequisites
+
+- Node.js ≥ 18
+- The Grok CLI installed:
+  ```bash
+  curl -fsSL https://x.ai/cli/install.sh | bash
+  ```
+- An auth method — either browser OAuth (`grok` once interactively) **or** an `XAI_API_KEY` from [console.x.ai](https://console.x.ai). See [Authentication](#authentication) below.
+
+## Install
+
+```bash
+npm install -g grok-cli-mcp
+# or use npx — no install needed
+npx grok-cli-mcp
+```
+
+## Authentication
+
+The wrapped Grok CLI supports two auth methods; `grok-mcp` inherits whichever is active.
+
+| Method | Best for | Rate limits |
+|--------|----------|-------------|
+| **API key** (`XAI_API_KEY` env var) | MCP / CI / automation | Pay-per-call, no subscription cap |
+| **Browser OAuth** (`grok` interactive login) | Local interactive use | Subject to your grok.com plan tier |
+
+Per [xAI's auth precedence](https://docs.x.ai/docs/api-reference#authentication), `XAI_API_KEY` always wins over `~/.grok/auth.json`. So you can keep your browser login for interactive `grok` use and override it *just for this MCP server* by setting `XAI_API_KEY` in the server's env block:
+
+```json
+{
+  "mcpServers": {
+    "grok": {
+      "command": "npx",
+      "args": ["-y", "grok-cli-mcp"],
+      "env": {
+        "XAI_API_KEY": "xai-...",
+        "GROK_MCP_TIMEOUT": "600000"
+      }
+    }
+  }
+}
+```
+
+Treat the key file as a secret — it ends up in your MCP host's config (e.g. `~/.claude.json`), which is plain JSON on disk.
+
+## Wire it into your MCP host
+
+### Claude Code
+
+Recommended — use `add-json` so the env block parses cleanly:
+
+```bash
+claude mcp add-json -s user grok '{
+  "command": "npx",
+  "args": ["-y", "grok-cli-mcp"],
+  "env": { "XAI_API_KEY": "xai-...", "GROK_MCP_TIMEOUT": "600000" }
+}'
+```
+
+> **Why `add-json` not `claude mcp add -e ...`?** The `-e KEY=val` flag is variadic and will greedily consume the server name as another env value if you pass more than one. `add-json` sidesteps that footgun entirely.
+
+Or edit `~/.claude.json` directly. Minimal (OAuth fallback):
+
+```json
+{
+  "mcpServers": {
+    "grok": {
+      "command": "npx",
+      "args": ["-y", "grok-cli-mcp"]
+    }
+  }
+}
+```
+
+### Cursor
+
+Create `.cursor/mcp.json` (project) or `~/.cursor/mcp.json` (global):
+
+```json
+{
+  "mcpServers": {
+    "grok": {
+      "command": "npx",
+      "args": ["-y", "grok-cli-mcp"]
+    }
+  }
+}
+```
+
+### Cline (VS Code)
+
+Settings → Cline → MCP Servers:
+
+```json
+{
+  "grok": {
+    "command": "npx",
+    "args": ["-y", "grok-cli-mcp"]
+  }
+}
+```
+
+### Any other MCP host
+
+`grok-mcp` speaks plain stdio MCP. Point any client at `npx -y grok-cli-mcp` and it works.
+
+## Tool reference
+
+### `grok_chat`
+
+```json
+{ "prompt": "Explain consistent hashing in two sentences." }
+```
+
+Optional: `model` to override the default Grok model; `timeout` (seconds) to extend the per-call limit for long grok-4 reasoning. All four tools accept `timeout`.
+
+### `grok_review`
+
+```json
+{ "base_ref": "main", "focus": "security" }
+```
+
+If `diff` is omitted, runs `git diff <base_ref>...HEAD` in `cwd` (defaults to your host's working directory). Returns a markdown review with verdict, per-dimension scores (correctness / readability / architecture / security / performance), and concrete fix-it items.
+
+### `grok_consult`
+
+```json
+{
+  "messages": [
+    { "role": "system", "content": "You are a senior backend engineer." },
+    { "role": "user", "content": "How would you cache this query?" },
+    { "role": "assistant", "content": "Two options..." },
+    { "role": "user", "content": "What's the failure mode of option 2?" }
+  ]
+}
+```
+
+The server is stateless — the caller passes the full thread each time. Most MCP hosts handle this naturally.
+
+### `grok_challenge`
+
+```json
+{
+  "code": "function transfer(from, to, amount) { from.balance -= amount; to.balance += amount; }",
+  "context": "Node.js, called concurrently from HTTP handlers"
+}
+```
+
+Returns severity-ranked issues (Critical / High / Medium / Low) with concrete reproductions and patches.
+
+## Configuration
+
+| Env var | Default | Purpose |
+|---------|---------|---------|
+| `XAI_API_KEY` | *(unset — falls back to OAuth)* | API key from [console.x.ai](https://console.x.ai). When set, overrides `~/.grok/auth.json` and switches the server to pay-per-call billing with no subscription rate cap. See [Authentication](#authentication). |
+| `GROK_MCP_BIN` | `grok` | Path to the `grok` binary |
+| `GROK_MCP_TIMEOUT` | `300000` | Default per-call timeout in milliseconds |
+
+Model defaults live in the Grok CLI itself (`~/.grok/config.toml`).
+
+### Timeouts
+
+grok-4 is a reasoning model and long prompts routinely take longer than two minutes. The server's default per-call limit is **300s (5 min)**. You can change it three ways:
+
+- **Per call** — pass `timeout` (seconds) to any tool: `{ "prompt": "...", "timeout": 600 }`.
+- **Per server** — set `GROK_MCP_TIMEOUT` (milliseconds) in the MCP server's env.
+- **Host side** — the MCP host has its *own* request timeout that can fire before the server's. If calls still time out after raising the above, raise the host limit too. In Claude Code that's `MCP_TIMEOUT` (server startup) and `MCP_TOOL_TIMEOUT` (per tool call), both in milliseconds.
+
+On timeout the error includes any partial output Grok produced before the deadline, so you don't lose a near-complete answer.
+
+## Roadmap
+
+- **v0.1** — four stateless tools, stdio transport (current)
+- **Discoverability push (v0.1.3)** — naming unification, MCP Registry, Smithery, glama.ai, stronger positioning
+- **v0.2** — server-side session persistence so `grok_consult` can take a `conversation_id`
+- **v0.3** — streaming responses through MCP `progress` notifications
+
+## Development
+
+```bash
+git clone https://github.com/howardpen9/grok-mcp.git
+cd grok-mcp
+npm install
+npm test
+npm run build
+```
+
+## License
+
+MIT

package/README.zh-TW.md

@@ -0,0 +1,221 @@
+# grok-mcp
+
+[![npm version](https://img.shields.io/npm/v/grok-cli-mcp.svg)](https://www.npmjs.com/package/grok-cli-mcp)
+[![MCP Registry](https://img.shields.io/badge/MCP%20Registry-published-success)](https://registry.modelcontextprotocol.io/)
+
+> 讓 Claude Code、Cursor、Cline、OpenClaw 等 MCP host 透過官方 xAI [Grok CLI](https://x.ai/news/grok-build-cli)，把 **Grok 當成 code reviewer、adversary 與第二意見顧問** 使用。
+
+`grok-mcp`（npm 套件名 [`grok-cli-mcp`](https://www.npmjs.com/package/grok-cli-mcp)）是 [Model Context Protocol](https://modelcontextprotocol.io) server，將 `grok` CLI 包裝成工具，讓你的主要 agent（Claude、Cursor…）可以隨時叫 Grok 幫忙 review、挑戰、諮詢，而不用切換 session：
+
+- `grok_review` — 結構化 diff review，附五維度評分
+- `grok_challenge` — 對抗式找 bug / race / security hole
+- `grok_consult` — 多輪諮詢（caller 自己重送 history）
+- `grok_chat` — 一次性問答
+
+English: [README.md](./README.md)
+
+## 為什麼用 grok-mcp？
+
+市面上其他 "Grok MCP" 套件大多讓 Claude 可以「使用」Grok 的 chat / search / image 能力。`grok-mcp` 反過來：讓你的主要 coding agent（Claude / Cursor）**請 Grok 來 review、挑戰自己的產出**。換一個 model 攻擊主 agent 的盲點，能抓到單模型 loop 找不到的 bug。
+
+## 提供什麼
+
+四個 tool，全部 stateless：
+
+| Tool | 用途 |
+|------|------|
+| `grok_chat` | 一次性問答 |
+| `grok_review` | 給 diff（或自動 `git diff main...HEAD`），回結構化 code review |
+| `grok_consult` | 多輪對話，caller 自己重送 history |
+| `grok_challenge` | 對抗模式：請 Grok 找 bug、race condition、security hole |
+
+## 前置需求
+
+- Node.js ≥ 18
+- 已安裝 Grok CLI：
+  ```bash
+  curl -fsSL https://x.ai/cli/install.sh | bash
+  ```
+- 一種認證方式 — 瀏覽器 OAuth（互動跑一次 `grok`）**或**到 [console.x.ai](https://console.x.ai) 拿一把 `XAI_API_KEY`。詳見下方 [認證](#認證)。
+
+## 安裝
+
+```bash
+npm install -g grok-cli-mcp
+# 或直接 npx 不裝
+npx grok-cli-mcp
+```
+
+## 認證
+
+包裝的 Grok CLI 支援兩種認證方式，`grok-mcp` 繼承當前啟用的那一種。
+
+| 方式 | 適合場景 | Rate limit |
+|------|---------|-----------|
+| **API key**（`XAI_API_KEY` 環境變數）| MCP / CI / 自動化 | 按次計費，無訂閱配額上限 |
+| **瀏覽器 OAuth**（互動跑 `grok` 登入）| 本機互動使用 | 依你的 grok.com 訂閱方案 |
+
+依照 [xAI 認證優先順序](https://docs.x.ai/docs/api-reference#authentication)，`XAI_API_KEY` 永遠勝過 `~/.grok/auth.json`。所以可以保留瀏覽器登入給互動式 `grok` 用，**只在這個 MCP server 的 env block 加 `XAI_API_KEY`** 來覆蓋：
+
+```json
+{
+  "mcpServers": {
+    "grok": {
+      "command": "npx",
+      "args": ["-y", "grok-cli-mcp"],
+      "env": {
+        "XAI_API_KEY": "xai-...",
+        "GROK_MCP_TIMEOUT": "600000"
+      }
+    }
+  }
+}
+```
+
+注意 API key 等同密鑰 — 會寫進 MCP host 的設定檔（例如 `~/.claude.json`），磁碟上是明文 JSON。
+
+## 串到 MCP host
+
+### Claude Code
+
+推薦用 `add-json`，env block 才會正確 parse：
+
+```bash
+claude mcp add-json -s user grok '{
+  "command": "npx",
+  "args": ["-y", "grok-cli-mcp"],
+  "env": { "XAI_API_KEY": "xai-...", "GROK_MCP_TIMEOUT": "600000" }
+}'
+```
+
+> **為什麼不用 `claude mcp add -e ...`？** `-e KEY=val` 是 variadic flag，傳超過一個 `-e` 時，server 名字會被當成下一個 env value 吃掉。`add-json` 一次到位避開這個坑。
+
+或直接編輯 `~/.claude.json`，最簡寫法（fallback 到 OAuth）：
+
+```json
+{
+  "mcpServers": {
+    "grok": {
+      "command": "npx",
+      "args": ["-y", "grok-cli-mcp"]
+    }
+  }
+}
+```
+
+### Cursor
+
+`.cursor/mcp.json`（專案）或 `~/.cursor/mcp.json`（全域）：
+
+```json
+{
+  "mcpServers": {
+    "grok": {
+      "command": "npx",
+      "args": ["-y", "grok-cli-mcp"]
+    }
+  }
+}
+```
+
+### Cline (VS Code)
+
+Settings → Cline → MCP Servers：
+
+```json
+{
+  "grok": {
+    "command": "npx",
+    "args": ["-y", "grok-cli-mcp"]
+  }
+}
+```
+
+### 其他 MCP host
+
+`grok-mcp` 跑標準 stdio MCP。任何 client 指向 `npx -y grok-cli-mcp` 即可。
+
+## Tool 用法
+
+### `grok_chat`
+
+```json
+{ "prompt": "兩句話解釋 consistent hashing。" }
+```
+
+可選 `model` 覆寫預設 Grok model；`timeout`（秒）拉長單次 call 的時限，給 grok-4 長推理用。四個 tool 都接受 `timeout`。
+
+### `grok_review`
+
+```json
+{ "base_ref": "main", "focus": "security" }
+```
+
+沒給 `diff` 就跑 `git diff <base_ref>...HEAD`。回傳 markdown 評審，含整體判決、五維度評分（correctness / readability / architecture / security / performance）、具體修正建議。
+
+### `grok_consult`
+
+```json
+{
+  "messages": [
+    { "role": "system", "content": "你是資深後端工程師。" },
+    { "role": "user", "content": "這個 query 怎麼 cache？" },
+    { "role": "assistant", "content": "兩個方案..." },
+    { "role": "user", "content": "方案 2 的 failure mode 是什麼？" }
+  ]
+}
+```
+
+Server 不存 state，caller 每次帶完整 history。一般 MCP host 會自動處理。
+
+### `grok_challenge`
+
+```json
+{
+  "code": "function transfer(from, to, amount) { from.balance -= amount; to.balance += amount; }",
+  "context": "Node.js，HTTP handler 並發呼叫"
+}
+```
+
+回傳 severity 分級的問題（Critical / High / Medium / Low），含重現步驟與修補建議。
+
+## 設定
+
+| 環境變數 | 預設值 | 用途 |
+|---------|--------|------|
+| `XAI_API_KEY` | *（未設，fallback 到 OAuth）* | 到 [console.x.ai](https://console.x.ai) 拿。設定後會覆蓋 `~/.grok/auth.json`，切到按次計費、無訂閱配額上限。詳見 [認證](#認證)。 |
+| `GROK_MCP_BIN` | `grok` | grok binary 路徑 |
+| `GROK_MCP_TIMEOUT` | `300000` | 預設單次 call timeout（毫秒） |
+
+預設 model 設定在 Grok CLI 自己的 `~/.grok/config.toml`。
+
+### Timeout
+
+grok-4 是 reasoning model，長 prompt 動輒超過兩分鐘。Server 預設單次時限為 **300 秒（5 分鐘）**，有三種調整方式：
+
+- **單次 call** — 對任一 tool 傳 `timeout`（秒）：`{ "prompt": "...", "timeout": 600 }`。
+- **整個 server** — 在 MCP server 的環境變數設 `GROK_MCP_TIMEOUT`（毫秒）。
+- **Host 端** — MCP host 自己也有 request timeout，可能比 server 更早觸發。若上面兩項都調高仍超時，請一併拉高 host 的時限。在 Claude Code 是 `MCP_TIMEOUT`（server 啟動）與 `MCP_TOOL_TIMEOUT`（單次 tool call），單位皆為毫秒。
+
+超時時，錯誤訊息會附上 Grok 在截止前已產生的 partial 輸出，避免快完成的答案整個丟失。
+
+## Roadmap
+
+- **v0.1** — 四個 stateless tool、stdio transport（目前）
+- **Discoverability push（v0.1.3）** — 統一命名、MCP Registry、Smithery、glama.ai 上架、加強定位
+- **v0.2** — server 端 session 持久化，`grok_consult` 可帶 `conversation_id`
+- **v0.3** — 透過 MCP `progress` notification 做 streaming
+
+## 開發
+
+```bash
+git clone https://github.com/howardpen9/grok-mcp.git
+cd grok-mcp
+npm install
+npm test
+npm run build
+```
+
+## License
+
+MIT

package/dist/grok.d.ts

@@ -0,0 +1,29 @@
+export interface RunGrokOptions {
+    model?: string;
+    timeoutMs?: number;
+    cwd?: string;
+    extraArgs?: string[];
+}
+export interface RunGrokResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+export declare class GrokCliError extends Error {
+    readonly exitCode: number;
+    readonly stderr: string;
+    constructor(message: string, exitCode: number, stderr: string);
+}
+export declare class GrokTimeoutError extends Error {
+    readonly timeoutMs: number;
+    readonly partialStdout: string;
+    constructor(timeoutMs: number, partialStdout?: string);
+}
+export declare function runGrok(prompt: string, opts?: RunGrokOptions): Promise<RunGrokResult>;
+export declare function checkGrokAvailable(): Promise<{
+    ok: true;
+    version: string;
+} | {
+    ok: false;
+    reason: string;
+}>;

package/dist/grok.js

@@ -0,0 +1,120 @@
+import { spawn } from "node:child_process";
+import stripAnsi from "strip-ansi";
+export class GrokCliError extends Error {
+    exitCode;
+    stderr;
+    constructor(message, exitCode, stderr) {
+        super(message);
+        this.exitCode = exitCode;
+        this.stderr = stderr;
+        this.name = "GrokCliError";
+    }
+}
+export class GrokTimeoutError extends Error {
+    timeoutMs;
+    partialStdout;
+    constructor(timeoutMs, partialStdout = "") {
+        const seconds = Math.round(timeoutMs / 1000);
+        const hint = `grok CLI timed out after ${seconds}s. grok-4 reasoning on long prompts can exceed this. ` +
+            `Raise it per-call with the "timeout" parameter (seconds), or globally via the GROK_MCP_TIMEOUT env var (ms). ` +
+            `If the MCP host itself times out first, raise its limit too (e.g. Claude Code: MCP_TIMEOUT / MCP_TOOL_TIMEOUT).`;
+        const partial = partialStdout.trim()
+            ? `\n\n--- Partial output received before timeout ---\n${partialStdout.trim()}`
+            : "";
+        super(`${hint}${partial}`);
+        this.timeoutMs = timeoutMs;
+        this.partialStdout = partialStdout;
+        this.name = "GrokTimeoutError";
+    }
+}
+const DEFAULT_TIMEOUT_MS = Number(process.env.GROK_MCP_TIMEOUT ?? 300_000);
+const GROK_BIN = process.env.GROK_MCP_BIN ?? "grok";
+export async function runGrok(prompt, opts = {}) {
+    // Disable agentic behaviour by default: this is a text-completion wrapper,
+    // not an interactive coding session. Permission prompts would hang the
+    // headless subprocess (stdin is closed).
+    const args = ["-p", prompt];
+    if (opts.model)
+        args.push("--model", opts.model);
+    if (opts.extraArgs)
+        args.push(...opts.extraArgs);
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    return new Promise((resolve, reject) => {
+        const child = spawn(GROK_BIN, args, {
+            cwd: opts.cwd,
+            env: process.env,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let stdout = "";
+        let stderr = "";
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill("SIGTERM");
+            setTimeout(() => child.kill("SIGKILL"), 2_000).unref();
+        }, timeoutMs);
+        child.stdout.on("data", (chunk) => {
+            stdout += chunk.toString("utf8");
+        });
+        child.stderr.on("data", (chunk) => {
+            stderr += chunk.toString("utf8");
+        });
+        child.on("error", (err) => {
+            clearTimeout(timer);
+            if (err.code === "ENOENT") {
+                reject(new GrokCliError(`grok CLI not found in PATH (looked for "${GROK_BIN}"). Install with: curl -fsSL https://x.ai/cli/install.sh | bash`, 127, ""));
+                return;
+            }
+            reject(err);
+        });
+        child.on("close", (code) => {
+            clearTimeout(timer);
+            const cleanStdout = stripAnsi(stdout).trim();
+            const cleanStderr = stripAnsi(stderr).trim();
+            if (timedOut) {
+                reject(new GrokTimeoutError(timeoutMs, cleanStdout));
+                return;
+            }
+            if (code !== 0) {
+                const tail = cleanStderr.slice(-2000);
+                reject(new GrokCliError(`grok CLI exited with code ${code}${tail ? `: ${tail}` : ""}`, code ?? -1, cleanStderr));
+                return;
+            }
+            resolve({
+                stdout: cleanStdout,
+                stderr: cleanStderr,
+                exitCode: code ?? 0,
+            });
+        });
+    });
+}
+export async function checkGrokAvailable() {
+    return new Promise((resolve) => {
+        const child = spawn(GROK_BIN, ["--version"], {
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let out = "";
+        child.stdout.on("data", (c) => (out += c.toString("utf8")));
+        child.stderr.on("data", (c) => (out += c.toString("utf8")));
+        child.on("error", (err) => {
+            if (err.code === "ENOENT") {
+                resolve({
+                    ok: false,
+                    reason: `grok CLI not found in PATH (looked for "${GROK_BIN}"). Install with: curl -fsSL https://x.ai/cli/install.sh | bash`,
+                });
+            }
+            else {
+                resolve({ ok: false, reason: err.message });
+            }
+        });
+        child.on("close", (code) => {
+            if (code === 0) {
+                resolve({ ok: true, version: stripAnsi(out).trim() });
+            }
+            else {
+                resolve({ ok: false, reason: `grok --version exited with code ${code}` });
+            }
+        });
+    });
+}
+//# sourceMappingURL=grok.js.map

package/dist/grok.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok.js","sourceRoot":"","sources":["../src/grok.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,SAAS,MAAM,YAAY,CAAC;AAenC,MAAM,OAAO,YAAa,SAAQ,KAAK;IAGnB;IACA;IAHlB,YACE,OAAe,EACC,QAAgB,EAChB,MAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IACA;IAFlB,YACkB,SAAiB,EACjB,gBAAgB,EAAE;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GACR,4BAA4B,OAAO,uDAAuD;YAC1F,+GAA+G;YAC/G,iHAAiH,CAAC;QACpH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE;YAClC,CAAC,CAAC,uDAAuD,aAAa,CAAC,IAAI,EAAE,EAAE;YAC/E,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,GAAG,IAAI,GAAG,OAAO,EAAE,CAAC,CAAC;QAXX,cAAS,GAAT,SAAS,CAAQ;QACjB,kBAAa,GAAb,aAAa,CAAK;QAWlC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC;AAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,OAAuB,EAAE;IAEzB,2EAA2E;IAC3E,uEAAuE;IACvE,yCAAyC;IACzC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAEvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;YAClC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,CACJ,IAAI,YAAY,CACd,2CAA2C,QAAQ,iEAAiE,EACpH,GAAG,EACH,EAAE,CACH,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAE7C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,CACJ,IAAI,YAAY,CACd,6BAA6B,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC7D,IAAI,IAAI,CAAC,CAAC,EACV,WAAW,CACZ,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,OAAO,CAAC;gBACN,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,IAAI,IAAI,CAAC;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE;YAC3C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,2CAA2C,QAAQ,iEAAiE;iBAC7H,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,83 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { zodToJsonSchema } from "zod-to-json-schema";
+import { checkGrokAvailable } from "./grok.js";
+import { grokChat } from "./tools/chat.js";
+import { grokReview } from "./tools/review.js";
+import { grokConsult } from "./tools/consult.js";
+import { grokChallenge } from "./tools/challenge.js";
+const TOOLS = [grokChat, grokReview, grokConsult, grokChallenge];
+const here = dirname(fileURLToPath(import.meta.url));
+const pkg = JSON.parse(readFileSync(join(here, "..", "package.json"), "utf8"));
+async function main() {
+    const server = new Server({
+        name: "grok-mcp",
+        version: pkg.version,
+    }, {
+        capabilities: {
+            tools: {},
+        },
+    });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: TOOLS.map((t) => ({
+            name: t.name,
+            description: t.description,
+            inputSchema: zodToJsonSchema(t.inputSchema, { target: "openApi3" }),
+        })),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (req) => {
+        const tool = TOOLS.find((t) => t.name === req.params.name);
+        if (!tool) {
+            return {
+                isError: true,
+                content: [{ type: "text", text: `Unknown tool: ${req.params.name}` }],
+            };
+        }
+        const parsed = tool.inputSchema.safeParse(req.params.arguments ?? {});
+        if (!parsed.success) {
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: "text",
+                        text: `Invalid arguments for ${tool.name}:\n${JSON.stringify(parsed.error.format(), null, 2)}`,
+                    },
+                ],
+            };
+        }
+        try {
+            const result = await tool.handler(parsed.data);
+            return {
+                content: [{ type: "text", text: result }],
+            };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return {
+                isError: true,
+                content: [{ type: "text", text: msg }],
+            };
+        }
+    });
+    // Startup check: warn (to stderr, never stdout) if grok CLI missing.
+    const probe = await checkGrokAvailable();
+    if (!probe.ok) {
+        process.stderr.write(`[grok-mcp] WARN: ${probe.reason}\n`);
+    }
+    else {
+        process.stderr.write(`[grok-mcp] grok CLI detected: ${probe.version}\n`);
+    }
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    process.stderr.write("[grok-mcp] ready (stdio)\n");
+}
+main().catch((err) => {
+    process.stderr.write(`[grok-mcp] fatal: ${err instanceof Error ? err.stack ?? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,MAAM,KAAK,GAAiB,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAE/E,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAChC,CAAC;AAEzB,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;SACV;KACF,CACF,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAA4B;SAC/F,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;aACtE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,yBAAyB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBAC/F;iBACF;aACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;aACvC,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AACrD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/challenge.d.ts

@@ -0,0 +1 @@
+export declare const grokChallenge: import("./types.js").ErasedTool;

package/dist/tools/challenge.js

@@ -0,0 +1,46 @@
+import { z } from "zod";
+import { runGrok } from "../grok.js";
+import { defineTool, timeoutField, timeoutOpts } from "./types.js";
+const inputSchema = z.object({
+    code: z.string().min(1).describe("The code or design to attack."),
+    context: z
+        .string()
+        .optional()
+        .describe("Optional context: language, framework, intended behaviour, constraints."),
+    model: z.string().optional(),
+    timeout: timeoutField,
+});
+const CHALLENGE_TEMPLATE = (code, context) => `You are a hostile senior engineer tasked with breaking this code. Be specific and ruthless — vague concerns are useless.
+
+${context ? `Context: ${context}\n` : ""}For each issue you find, output:
+- Severity (Critical / High / Medium / Low)
+- Concrete reproduction (input, sequence of events, environment)
+- Why the current code fails
+- Smallest patch that would fix it
+
+Cover at minimum:
+- Edge cases (empty, null, very large, very small, unicode, malformed)
+- Concurrency / race conditions / re-entrancy
+- Error paths and partial failure
+- Security: injection, auth bypass, information leak, resource exhaustion
+- Backward / forward compatibility
+- Adversarial inputs designed to break invariants
+
+If you genuinely find nothing to break, say so explicitly and list the invariants you verified.
+
+--- CODE START ---
+${code}
+--- CODE END ---`;
+export const grokChallenge = defineTool({
+    name: "grok_challenge",
+    description: "Ask Grok to adversarially break a piece of code: edge cases, race conditions, security holes, adversarial inputs. Returns severity-ranked issues with reproductions.",
+    inputSchema,
+    async handler({ code, context, model, timeout }) {
+        const { stdout } = await runGrok(CHALLENGE_TEMPLATE(code, context), {
+            model,
+            ...timeoutOpts(timeout),
+        });
+        return stdout;
+    },
+});
+//# sourceMappingURL=challenge.js.map

package/dist/tools/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/tools/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACjE,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yEAAyE,CAAC;IACtF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE,CAAC;;EAE7D,OAAO,CAAC,CAAC,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;EAiBtC,IAAI;iBACW,CAAC;AAElB,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;IACtC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,sKAAsK;IACxK,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;QAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;YAClE,KAAK;YACL,GAAG,WAAW,CAAC,OAAO,CAAC;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/chat.d.ts

@@ -0,0 +1 @@
+export declare const grokChat: import("./types.js").ErasedTool;

package/dist/tools/chat.js

@@ -0,0 +1,18 @@
+import { z } from "zod";
+import { runGrok } from "../grok.js";
+import { defineTool, timeoutField, timeoutOpts } from "./types.js";
+const inputSchema = z.object({
+    prompt: z.string().min(1).describe("The prompt to send to Grok."),
+    model: z.string().optional().describe("Override default Grok model (e.g. 'grok-4')."),
+    timeout: timeoutField,
+});
+export const grokChat = defineTool({
+    name: "grok_chat",
+    description: "Send a one-shot prompt to xAI Grok and return its reply. Stateless — for multi-turn use grok_consult.",
+    inputSchema,
+    async handler({ prompt, model, timeout }) {
+        const { stdout } = await runGrok(prompt, { model, ...timeoutOpts(timeout) });
+        return stdout;
+    },
+});
+//# sourceMappingURL=chat.js.map

package/dist/tools/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../src/tools/chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACjE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACrF,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC;IACjC,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,uGAAuG;IACzG,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;QACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/consult.d.ts

@@ -0,0 +1 @@
+export declare const grokConsult: import("./types.js").ErasedTool;

package/dist/tools/consult.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+import { runGrok } from "../grok.js";
+import { defineTool, timeoutField, timeoutOpts } from "./types.js";
+const messageSchema = z.object({
+    role: z.enum(["user", "assistant", "system"]),
+    content: z.string(),
+});
+const inputSchema = z.object({
+    messages: z
+        .array(messageSchema)
+        .min(1)
+        .describe("Conversation history. Caller maintains state across turns."),
+    model: z.string().optional(),
+    timeout: timeoutField,
+});
+function flattenMessages(messages) {
+    const parts = [];
+    for (const m of messages) {
+        if (m.role === "system") {
+            parts.push(`[SYSTEM]\n${m.content}\n`);
+        }
+        else if (m.role === "user") {
+            parts.push(`[USER]\n${m.content}\n`);
+        }
+        else {
+            parts.push(`[ASSISTANT]\n${m.content}\n`);
+        }
+    }
+    parts.push("[ASSISTANT]\n");
+    return parts.join("\n");
+}
+export const grokConsult = defineTool({
+    name: "grok_consult",
+    description: "Continue a conversation with Grok by replaying the full message history each call. Stateless on the server side — the caller owns the thread.",
+    inputSchema,
+    async handler({ messages, model, timeout }) {
+        const prompt = flattenMessages(messages);
+        const { stdout } = await runGrok(prompt, { model, ...timeoutOpts(timeout) });
+        return stdout;
+    },
+});
+//# sourceMappingURL=consult.js.map

package/dist/tools/consult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consult.js","sourceRoot":"","sources":["../../src/tools/consult.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,aAAa,CAAC;SACpB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,4DAA4D,CAAC;IACzE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,QAA8C;IACrE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,UAAU,CAAC;IACpC,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,+IAA+I;IACjJ,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/review.d.ts

@@ -0,0 +1 @@
+export declare const grokReview: import("./types.js").ErasedTool;

package/dist/tools/review.js

@@ -0,0 +1,71 @@
+import { spawn } from "node:child_process";
+import { z } from "zod";
+import { runGrok } from "../grok.js";
+import { defineTool, timeoutField, timeoutOpts } from "./types.js";
+const inputSchema = z.object({
+    diff: z.string().optional().describe("Unified diff to review. If omitted, runs `git diff <base_ref>`."),
+    base_ref: z
+        .string()
+        .optional()
+        .describe("Git ref to diff against when diff is not provided. Defaults to 'main'."),
+    focus: z
+        .string()
+        .optional()
+        .describe("Optional focus area (e.g. 'security', 'performance', 'API design')."),
+    model: z.string().optional(),
+    cwd: z.string().optional().describe("Working directory for git diff. Defaults to process cwd."),
+    timeout: timeoutField,
+});
+function gitDiff(baseRef, cwd) {
+    return new Promise((resolve, reject) => {
+        const child = spawn("git", ["diff", `${baseRef}...HEAD`], {
+            cwd,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let out = "";
+        let err = "";
+        child.stdout.on("data", (c) => (out += c.toString("utf8")));
+        child.stderr.on("data", (c) => (err += c.toString("utf8")));
+        child.on("error", reject);
+        child.on("close", (code) => {
+            if (code !== 0)
+                reject(new Error(`git diff failed: ${err.trim()}`));
+            else
+                resolve(out);
+        });
+    });
+}
+const REVIEW_TEMPLATE = (diff, focus) => `Review the unified diff below as a senior staff engineer. Reason only from the diff text — do not attempt to read files, run commands, or browse the web.
+
+${focus ? `Focus area: ${focus}\n\n` : ""}Score each dimension 1-10:
+1. Correctness
+2. Readability
+3. Architecture
+4. Security
+5. Performance
+
+Respond in markdown with:
+- One-line verdict (LGTM / Approve with comments / Request changes / Block)
+- Per-dimension score with a one-line justification
+- A short list of the most important concerns visible in the diff
+
+--- DIFF START ---
+${diff}
+--- DIFF END ---`;
+export const grokReview = defineTool({
+    name: "grok_review",
+    description: "Have Grok review a git diff. If no diff is provided, runs `git diff <base_ref>...HEAD` (default base: main). Returns a structured review with per-dimension scores.",
+    inputSchema,
+    async handler({ diff, base_ref, focus, model, cwd, timeout }) {
+        const actualDiff = diff ?? (await gitDiff(base_ref ?? "main", cwd));
+        if (!actualDiff.trim()) {
+            return "No diff to review (empty result from git diff).";
+        }
+        const { stdout } = await runGrok(REVIEW_TEMPLATE(actualDiff, focus), {
+            model,
+            ...timeoutOpts(timeout),
+        });
+        return stdout;
+    },
+});
+//# sourceMappingURL=review.js.map

package/dist/tools/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/tools/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IACvG,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACrF,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAC/F,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,OAAe,EAAE,GAAY;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,OAAO,SAAS,CAAC,EAAE;YACxD,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;;gBAC/D,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,KAAc,EAAE,EAAE,CAAC;;EAExD,KAAK,CAAC,CAAC,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;EAavC,IAAI;iBACW,CAAC;AAElB,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC;IACnC,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,qKAAqK;IACvK,WAAW;IACX,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACvB,OAAO,iDAAiD,CAAC;QAC3D,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE;YACnE,KAAK;YACL,GAAG,WAAW,CAAC,OAAO,CAAC;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/types.d.ts

@@ -0,0 +1,20 @@
+import { z } from "zod";
+export interface ToolDefinition<S extends z.ZodTypeAny> {
+    name: string;
+    description: string;
+    inputSchema: S;
+    handler: (input: z.infer<S>) => Promise<string>;
+}
+export interface ErasedTool {
+    name: string;
+    description: string;
+    inputSchema: z.ZodTypeAny;
+    handler: (input: unknown) => Promise<string>;
+}
+export declare function defineTool<S extends z.ZodTypeAny>(def: ToolDefinition<S>): ErasedTool;
+/** Shared per-call timeout field (seconds). All tools expose this. */
+export declare const timeoutField: z.ZodOptional<z.ZodNumber>;
+/** Convert an optional seconds value into the { timeoutMs } shape runGrok expects. */
+export declare function timeoutOpts(timeout?: number): {
+    timeoutMs?: number;
+};

package/dist/tools/types.js

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export function defineTool(def) {
+    return def;
+}
+/** Shared per-call timeout field (seconds). All tools expose this. */
+export const timeoutField = z
+    .number()
+    .positive()
+    .optional()
+    .describe("Per-call timeout in seconds. Defaults to 300. Raise for long grok-4 reasoning.");
+/** Convert an optional seconds value into the { timeoutMs } shape runGrok expects. */
+export function timeoutOpts(timeout) {
+    return timeout === undefined ? {} : { timeoutMs: Math.round(timeout * 1000) };
+}
+//# sourceMappingURL=types.js.map

package/dist/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,MAAM,UAAU,UAAU,CAAyB,GAAsB;IACvE,OAAO,GAA4B,CAAC;AACtC,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,QAAQ,EAAE;KACV,QAAQ,CAAC,gFAAgF,CAAC,CAAC;AAE9F,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;AAChF,CAAC"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "grok-cli-mcp",
+  "version": "0.1.3",
+  "description": "MCP server that wraps the xAI Grok CLI. Exposes grok_chat, grok_review, grok_consult, and grok_challenge so Claude Code, Cursor, Cline, and other MCP hosts can use Grok as a peer reviewer, adversary, and second-opinion consultant.",
+  "type": "module",
+  "bin": {
+    "grok-cli-mcp": "dist/index.js"
+  },
+  "main": "dist/index.js",
+  "mcpName": "io.github.howardpen9/grok-mcp",
+  "files": [
+    "dist",
+    "README.md",
+    "README.zh-TW.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "grok",
+    "xai",
+    "ai",
+    "claude-code",
+    "cursor",
+    "cline",
+    "code-review",
+    "adversarial-testing",
+    "second-opinion"
+  ],
+  "author": "Howard Peng <howard.peng.tw@gmail.com>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/howardpen9/grok-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/howardpen9/grok-mcp/issues"
+  },
+  "homepage": "https://github.com/howardpen9/grok-mcp#readme",
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "strip-ansi": "^7.1.0",
+    "zod": "^3.23.8",
+    "zod-to-json-schema": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  }
+}