@avocadostudio-ai/mcp-server 0.29.0 → 0.30.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avocadostudio-ai/mcp-server",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "description": "Avocado Studio MCP server — exposes page/block/discovery tools over the Model Context Protocol.",
   "license": "Apache-2.0",
   "type": "module",
@@ -37,7 +37,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6",
-    "@avocadostudio-ai/shared": "^0.29.0"
+    "@avocadostudio-ai/shared": "^0.30.0"
   },
   "devDependencies": {
     "@types/node": "^22.13.10",

package/dist/tools/scope.d.ts

@@ -1,9 +0,0 @@
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { buildPageDoc } from "@avocadostudio-ai/migration-sdk";
-export declare function checkUrl(raw: string, allowLocalhost: boolean): {
-    url: URL;
-} | {
-    error: string;
-};
-export declare function registerScopeTools(server: McpServer): void;
-export declare function report(url: URL, page: ReturnType<typeof buildPageDoc>["page"], decisions: ReturnType<typeof buildPageDoc>["decisions"], includePage: boolean): string;

package/dist/tools/scope.js

@@ -1,132 +0,0 @@
-import { z } from "zod";
-import { extractSections, buildPageDoc } from "@avocadostudio-ai/migration-sdk";
-/*
- * "What would my site look like in Avocado?" — answered before anybody wires
- * anything.
- *
- * This is the question every adopter asks first and the one the product could
- * not answer: the only route to a reply was a week of integration work. The
- * pieces existed — the section classifier and the page mapper — with no surface
- * in front of them.
- *
- * It reads. It never writes: no session, no draft, no orchestrator call. What
- * comes back is a proposal a person accepts or throws away, which is the only
- * safe shape for a tool whose input is a URL somebody typed.
- *
- * No model is involved, so it is free, fast, and gives the same answer twice.
- * That last property is the point: an agent can re-run it after a change and
- * diff the result, which it cannot do with anything that samples.
- */
-/**
- * Hosts a URL may not resolve to unless the caller says so.
- *
- * This server accepts a URL from a model and fetches it. Unguarded, that is a
- * request forgery primitive pointed at whatever the server can reach — cloud
- * metadata endpoints first. Local addresses are still reachable with
- * `allowLocalhost: true`, because scoping a site you are running on your own
- * machine is a real thing to want and the caller saying so makes it a choice.
- */
-const BLOCKED_HOST = [
-    /^localhost$/i,
-    /^127\./,
-    /^0\./,
-    /^10\./,
-    /^192\.168\./,
-    /^172\.(1[6-9]|2\d|3[01])\./,
-    /^169\.254\./, // link-local, which is where cloud metadata lives
-    /^\[?::1\]?$/,
-    /\.local$/i,
-    /\.internal$/i,
-];
-export function checkUrl(raw, allowLocalhost) {
-    let url;
-    try {
-        url = new URL(raw);
-    }
-    catch {
-        return { error: `Not a URL: ${raw}. Pass an absolute http(s) URL, for example https://example.com/about.` };
-    }
-    if (url.protocol !== "http:" && url.protocol !== "https:") {
-        return { error: `Only http and https are supported; got ${url.protocol}` };
-    }
-    if (!allowLocalhost && BLOCKED_HOST.some((p) => p.test(url.hostname))) {
-        return {
-            error: `Refusing to fetch ${url.hostname}: it is a local or private address. ` +
-                `If you meant to scope a site running on this machine, pass allowLocalhost: true.`,
-        };
-    }
-    return { url };
-}
-export function registerScopeTools(server) {
-    server.tool("avocado-scope-url", "Read a live web page and report what it would become as Avocado blocks: how many sections it has, which built-in block each one maps to, and which sections could not be mapped and why. Read-only — it fetches the URL and returns a proposal, and writes nothing. Call this before planning a migration or an integration, and to answer 'what would my site look like in Avocado' without wiring anything up. Deterministic and free: no model is involved, so the same page always gives the same answer.", {
-        url: z.string().describe("Absolute http(s) URL of the page to scope, e.g. https://example.com/about"),
-        allowLocalhost: z
-            .boolean()
-            .optional()
-            .describe("Permit local and private addresses. Default false, because this server fetches whatever URL it is given. Set it to scope a site running on this machine."),
-        includePage: z
-            .boolean()
-            .optional()
-            .describe("Include the full proposed PageDoc as JSON. Default false — the summary is what a person reads, and the document can be large."),
-    }, async ({ url: raw, allowLocalhost = false, includePage = false }) => {
-        const checked = checkUrl(raw, allowLocalhost);
-        if ("error" in checked) {
-            return { content: [{ type: "text", text: checked.error }], isError: true };
-        }
-        const url = checked.url;
-        let html;
-        try {
-            const res = await fetch(url, {
-                headers: { "User-Agent": "AvocadoStudio/scope (+https://docs.avocadostudio.dev)" },
-                redirect: "follow",
-                signal: AbortSignal.timeout(20_000),
-            });
-            if (!res.ok) {
-                return {
-                    content: [{ type: "text", text: `${url} answered ${res.status} ${res.statusText}.` }],
-                    isError: true,
-                };
-            }
-            html = await res.text();
-        }
-        catch (err) {
-            const reason = err instanceof Error ? err.message : String(err);
-            return { content: [{ type: "text", text: `Could not fetch ${url}: ${reason}` }], isError: true };
-        }
-        const sections = extractSections(html, url.toString());
-        const { page, decisions } = buildPageDoc({
-            slug: url.pathname || "/",
-            title: html.match(/<title[^>]*>([^<]*)<\/title>/i)?.[1]?.trim() || url.hostname,
-            // The caller stamps the page when it decides to keep it. Scoping is a
-            // read, and a mapper that reads a clock is not deterministic.
-            updatedAt: "1970-01-01T00:00:00.000Z",
-            sections,
-        });
-        return { content: [{ type: "text", text: report(url, page, decisions, includePage) }] };
-    });
-}
-export function report(url, page, decisions, includePage) {
-    const counts = new Map();
-    for (const b of page.blocks)
-        counts.set(b.type, (counts.get(b.type) ?? 0) + 1);
-    const lines = [
-        `${url}`,
-        `${decisions.length} sections found, ${page.blocks.length} mapped to blocks.`,
-        "",
-        "section  becomes          note",
-    ];
-    for (const d of decisions) {
-        const becomes = d.mappedTo ?? "(dropped)";
-        const note = d.reason ? (d.mappedTo === null ? d.reason : `was ${d.downgradedFrom} — ${d.reason}`) : "";
-        lines.push(`${String(d.sectionIndex).padEnd(8)} ${becomes.padEnd(16)} ${note}`);
-    }
-    lines.push("", `Result: ${[...counts].map(([t, n]) => `${t}×${n}`).join(", ") || "(nothing mappable)"}`);
-    const poor = page.blocks.filter((b) => b.type === "RichText").length;
-    if (page.blocks.length > 0 && poor / page.blocks.length > 0.5) {
-        lines.push("", "More than half this page came out as RichText, which means the structure did not survive.", "That is usually a sign the page's sections are worth declaring as the site's own block", "types rather than mapped onto the built-ins — see the avocado-blocks skill.");
-    }
-    lines.push("", "This is a proposal. Nothing was written, no session was created, and the page's", "updatedAt is a placeholder — stamp it when you decide to keep it.");
-    if (includePage)
-        lines.push("", JSON.stringify(page, null, 2));
-    return lines.join("\n");
-}