guardvibe 3.0.35 → 3.0.36

package/build/tools/full-audit.d.ts

@@ -40,6 +40,10 @@ export interface AuditSection {
     details: string;
     /** Individual findings for this section — enables AI to see exactly what to fix */
     sectionFindings?: SectionFinding[];
+    /** True when sectionFindings array is shorter than findings (response-size cap). Read findings for the real count. */
+    truncated?: boolean;
+    /** Hint message when truncated — tells the agent how to retrieve the rest */
+    truncationHint?: string;
 }
 export interface AuditResult {
     verdict: AuditVerdict;

package/build/tools/full-audit.js

@@ -149,7 +149,20 @@ export async function runFullAudit(path, options) {
                 name: f.name,
                 fix: f.fix,
             }));
-            sections.push({ name: "code", status: "ok", ...counts, details: `Code ${codeGrade} (${codeScore}/100)`, sectionFindings: codeSectionFindings });
+            const codeTruncated = (counts.findings ?? 0) > codeSectionFindings.length;
+            sections.push({
+                name: "code",
+                status: "ok",
+                ...counts,
+                details: `Code ${codeGrade} (${codeScore}/100)`,
+                sectionFindings: codeSectionFindings,
+                ...(codeTruncated
+                    ? {
+                        truncated: true,
+                        truncationHint: `Showing top ${codeSectionFindings.length} of ${counts.findings} findings (sorted by severity). Call check_code on individual files for the rest, or use the CLI: npx guardvibe scan --format json.`,
+                    }
+                    : {}),
+            });
             for (const f of parsed.findings ?? []) {
                 allFindings.push({ ruleId: f.id ?? "unknown", severity: f.severity, file: f.file ?? "", line: f.line ?? 0 });
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "guardvibe",
-  "version": "3.0.35",
+  "version": "3.0.36",
   "mcpName": "io.github.goklab/guardvibe",
   "description": "Security MCP for vibe coding. 365 rules, 38 tools, CLI + doctor. Host security, auth coverage mapping, LLM-powered deep scan (IDOR/business logic), taint analysis. Plus Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.",
   "type": "module",