@buildinternet/uploads 0.55.0 → 0.55.1

package/dist/cli.js

@@ -402,7 +402,7 @@ export async function runCli(argv) {
                 return 2;
             }
         }
-        // Best-effort; skipped for mcp, --quiet/--json, and opt-out env vars.
+        // Best-effort; skipped for mcp, update, --quiet/--json, and opt-out env vars.
         if (code === 0 && !showHelp) {
             await maybeHintUpdate({ quiet: quiet || json, command: parsed.command });
         }

package/dist/commands/install.d.ts

@@ -31,6 +31,12 @@ export declare function npmTooOldHint(version: string): string;
  */
 export declare function probeSkillTooling(run: CommandRunner): string | undefined;
 export declare function runStep(run: CommandRunner, command: string[]): StepResult;
+/**
+ * True when `mcp list` output already names this server.
+ * Matches a name token (Claude's `uploads: url` form, tables, JSON) and not
+ * a substring of a host like `agents.uploads.sh`.
+ */
+export declare function mcpListIncludesName(output: string, name: string): boolean;
 export declare function runInstall(args: string[], opts: {
     globals: GlobalFlags;
     json?: boolean;

package/dist/commands/install.js

@@ -1,6 +1,6 @@
 import { flagBool, flagString, parseCommandArgs, UsageError, } from "../cli-args.js";
 import { resolveConfig } from "../config.js";
-import { execRunner } from "../github-gh.js";
+import { execRunner, timedExecRunner } from "../github-gh.js";
 import { writeCommandHelp } from "../cli-style.js";
 import { HOOK_COMMAND, HOOK_INVOCATION, installHookManifests, } from "../hooks-install.js";
 export const DEFAULT_MCP_URL = "https://agents.uploads.sh/mcp";
@@ -36,7 +36,9 @@ export const MCP_CLIENTS = [
         // Codex HTTP MCP has no --header; auth is OAuth on first use (same as the
         // plugin's .mcp.json). Passing --bearer-token-env-var UPLOADS_TOKEN would
         // break machines that signed in via `uploads login` (token lives in the
-        // config file, not the environment).
+        // config file, not the environment). A second `mcp add` re-opens Codex's
+        // localhost callback ("Authentication complete. You may close this
+        // window.") — probe `mcp list` first so a refresh does not do that.
         command: (name, url) => ["codex", "mcp", "add", name, "--url", url],
     },
     {
@@ -58,9 +60,10 @@ workspace from the bearer token, so only the token is needed.
 Claude Code and Codex ship the same reminder via their plugins (same command:
 \`${HOOK_INVOCATION}\`) — install those plugins instead of relying on this step.
 
-Safe to re-run. An MCP server already registered under this name is reported
-as \`already configured\` and left as-is — including the token it was created
-with. To point it at a new token: \`<cli> mcp remove <name>\` first
+Safe to re-run. Before \`mcp add\`, install checks \`mcp list\`. A server that is
+already registered is reported as \`already configured\` and left as-is —
+including the token it was created with — so a refresh does not open a browser
+for OAuth. To point it at a new token: \`<cli> mcp remove <name>\` first
 (e.g. \`claude mcp remove uploads\`).
 
 Usage:
@@ -187,6 +190,28 @@ function skillCommand(skill) {
 function isAlreadyConfigured(error) {
     return /already exists|already (configured|registered|present)|duplicate/i.test(error);
 }
+/**
+ * True when `mcp list` output already names this server.
+ * Matches a name token (Claude's `uploads: url` form, tables, JSON) and not
+ * a substring of a host like `agents.uploads.sh`.
+ */
+export function mcpListIncludesName(output, name) {
+    const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const token = new RegExp(`(?:^|[\\s"'\\[{,])${escaped}(?:[:\\s"',\\]}]|$)`, "m");
+    return token.test(output);
+}
+/** Best-effort `mcp list` probe. Never opens a browser; times out on the default runner. */
+const MCP_LIST_TIMEOUT_MS = 8_000;
+function probeMcpAlreadyConfigured(run, client, name) {
+    const probe = run === execRunner ? timedExecRunner(MCP_LIST_TIMEOUT_MS) : run;
+    try {
+        const output = probe(client.id, ["mcp", "list"]);
+        return mcpListIncludesName(output, name) ? "yes" : "no";
+    }
+    catch (err) {
+        return isEnoent(err) ? "missing" : "no";
+    }
+}
 function mcpStepKey(client) {
     return `mcp:${client.id}`;
 }
@@ -215,8 +240,25 @@ function partitionSteps(results) {
     }
     return { skills, mcp, other };
 }
-/** Run one client's `mcp add`; missing binaries skip, duplicates are already-configured. */
-function runMcpClientStep(run, command) {
+/**
+ * Run one client's `mcp add`. Probe `mcp list` first so a refresh does not
+ * re-run add — Codex (and some other clients) treat a second add as success
+ * and open a localhost OAuth callback even when the server is already there.
+ */
+function runMcpClientStep(run, client, name, url, bearer) {
+    const command = client.command(name, url, bearer);
+    const listed = probeMcpAlreadyConfigured(run, client, name);
+    if (listed === "yes") {
+        return { command, ok: true, skipped: "already-configured" };
+    }
+    if (listed === "missing") {
+        return {
+            command,
+            ok: true,
+            skipped: "missing-cli",
+            error: `${client.id} not found on PATH`,
+        };
+    }
     try {
         const output = run(command[0], command.slice(1)).trim();
         return { command, ok: true, output: output || undefined };
@@ -412,7 +454,7 @@ export async function runInstall(args, opts, help = false) {
                 results[key] = { command, ok: true, skipped: "dry-run" };
             }
             else {
-                results[key] = runMcpClientStep(run, command);
+                results[key] = runMcpClientStep(run, client, name, url, bearer);
             }
         }
     }

package/dist/commands/update.js

@@ -11,9 +11,9 @@ const UPDATE_HELP = `uploads update — update the CLI and refresh agent integra
 Upgrades the globally installed npm package, then re-runs \`uploads install\` so
 the agent skills match the new version. Skills drift on their own, so this
 refreshes them even when the CLI is already current. An MCP server already
-registered is left as-is (\`already configured\`) — \`claude mcp add\` (and the
-Codex/Grok equivalents) never overwrite an existing entry. A missing agent CLI
-is skipped so it does not fail the rest of the refresh.
+registered is left as-is (\`already configured\`) — install checks \`mcp list\`
+first so \`mcp add\` (and Codex's OAuth browser) does not run again. A missing
+agent CLI is skipped so it does not fail the rest of the refresh.
 
 Usage:
   uploads update [options]

package/dist/update-check.d.ts

@@ -6,7 +6,10 @@ export interface UpdateCache {
 }
 export interface UpdateCheckOptions {
     quiet?: boolean;
-    /** mcp is always skipped (stdio purity). */
+    /**
+     * `mcp` is always skipped (stdio purity). `update` is skipped so a successful
+     * upgrade does not immediately hint the old in-process version.
+     */
     command?: string;
     currentVersion?: string;
     cachePath?: string;

package/dist/update-check.js

@@ -3,7 +3,7 @@
  *
  * Checks the registry at most once per day, never throws, never blocks longer
  * than a short timeout, and writes only to stderr. Silence with --quiet,
- * UPLOADS_NO_UPDATE=1, or NO_UPDATE_NOTIFIER=1.
+ * `uploads update`, `uploads mcp`, UPLOADS_NO_UPDATE=1, or NO_UPDATE_NOTIFIER=1.
  */
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -75,7 +75,7 @@ export function writeUpdateCache(path, cache) {
 export async function checkForUpdate(opts = {}) {
     const current = opts.currentVersion ?? packageVersion();
     try {
-        if (opts.quiet || opts.command === "mcp") {
+        if (opts.quiet || opts.command === "mcp" || opts.command === "update") {
             return { current, updateAvailable: false };
         }
         if (truthyEnv("UPLOADS_NO_UPDATE") || truthyEnv("NO_UPDATE_NOTIFIER")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@buildinternet/uploads",
-  "version": "0.55.0",
+  "version": "0.55.1",
   "mcpName": "sh.uploads/mcp",
   "description": "CLI and client for uploads.sh — workspace-scoped image hosting for GitHub embeds",
   "type": "module",