@caelo-cms/mcp-server 0.10.21 → 0.10.23

package/README.md

@@ -1,13 +1,23 @@
 # `@caelo-cms/mcp-server`
 
-MCP server exposing your Caelo CMS install's chat-runner as a single
-`caelo_chat` tool. Lets Claude Code (or any MCP-aware client) drive
-your install — read pages, propose edits, queue Owner-approval
-proposals, summarise plugin data — without opening the browser.
-
-This package is a thin shim. Every `caelo_chat` invocation becomes one
-HTTPS POST against your admin install's `/api/mcp/chat` endpoint, which
-dispatches into the same chat-runner that powers the live-edit overlay.
+MCP servers for your Caelo CMS install. Two surfaces, selected by the
+token's scope:
+
+- **`caelo_chat`** (default mode, scope `chat`) — one tool that talks
+  to Caelo's own AI agent. You describe an outcome; Caelo's chat-runner
+  does the work.
+- **Power-MCP** (`caelo-admin-mcp` binary / `caelo-mcp-server admin`,
+  scope `admin`) — the full chat-runner tool catalogue exposed
+  directly, so YOUR agent (Claude Code et al.) drives the tool loop and
+  Caelo makes no provider calls of its own. `caelo-mcp-server export`
+  additionally writes a CLAUDE.md + `.claude/skills/` tree generated
+  from the install's live context.
+
+Every mode is a thin shim: calls become HTTPS POSTs against your admin
+install's `/api/mcp/*` endpoints, which dispatch into the same
+chat-runner machinery that powers the live-edit overlay. See the
+[docs page](https://caelo-cms.com/mcp) for the full Power-MCP working
+model (work sessions, preview branches, approval gates).
 
 ## Install
 

package/dist/admin-server.d.ts

@@ -0,0 +1,6 @@
+export interface StartAdminOpts {
+    readonly adminUrl: string;
+    readonly token: string;
+}
+export declare function startAdminMcpServer(opts: StartAdminOpts): Promise<void>;
+//# sourceMappingURL=admin-server.d.ts.map

package/dist/admin-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-server.d.ts","sourceRoot":"","sources":["../src/admin-server.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAyED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAsI7E"}

package/dist/admin-server.js

@@ -0,0 +1,182 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * Issue #376 — the Power-MCP server (`caelo-admin-mcp` / `caelo-mcp-server
+ * admin`). Where the chat server exposes ONE tool that talks to Caelo's own
+ * AI, this server exposes the whole chat-runner tool catalogue so the
+ * CALLING agent (Claude Code et al.) drives the tool loop itself — no
+ * Caelo-side reasoning cost.
+ *
+ * The catalogue is fetched live from `/api/mcp/tools` at startup (an
+ * admin-scoped token is required; 'chat' tokens get a 401 with the fix).
+ * Two meta-tools are added locally:
+ *
+ * - `caelo_open_session` — opens (or resumes) the work session whose
+ *   preview branch every subsequent tool call writes to. The session id
+ *   is held here in process state so the agent doesn't thread it through
+ *   every call; it also rides the response so a restarted server can
+ *   resume via `chatSessionId`.
+ * - `caelo_get_context` — the composed site context (module model, tool
+ *   playbook, staging rules, site memory, skills index) the agent should
+ *   load once before working. For a checked-in variant, see
+ *   `caelo-mcp-server export`.
+ */
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { z } from "zod";
+import { postAdmin, resolveTimeoutMs } from "./http.js";
+const openSessionInput = z
+    .object({
+    title: z.string().min(1).max(200).optional(),
+    pageId: z.string().uuid().optional(),
+    chatSessionId: z.string().uuid().optional(),
+})
+    .strict();
+const OPEN_SESSION_TOOL = {
+    name: "caelo_open_session",
+    description: "Open (or resume) the Caelo work session your subsequent tool calls run in. Every write lands on the " +
+        "session's preview branch — invisible to the live site until the operator reviews and publishes in the " +
+        "Caelo admin. Call this ONCE before any other caelo tool; pass chatSessionId to resume an earlier " +
+        "session after a restart. Optional pageId binds the session to one page.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            title: { type: "string", description: "Session title shown in the Caelo admin chat list." },
+            pageId: { type: "string", description: "Optional page UUID to bind the session to." },
+            chatSessionId: {
+                type: "string",
+                description: "Resume this existing session instead of creating a new one.",
+            },
+        },
+    },
+};
+const GET_CONTEXT_TOOL = {
+    name: "caelo_get_context",
+    description: "Fetch the Caelo install's composed site context: how pages/modules/content instances fit together, " +
+        "the tool playbook, staging rules, site memory (brand voice, glossary) and the active skills index. " +
+        "Load this once before working; load individual skills on demand via the load_skill tool.",
+    inputSchema: { type: "object", properties: {} },
+};
+export async function startAdminMcpServer(opts) {
+    // Fetch the live catalogue up front — a bad URL or a chat-scoped token
+    // should fail loudly at startup, not on the first tool call.
+    const catalogue = await postAdmin({
+        adminUrl: opts.adminUrl,
+        token: opts.token,
+        path: "/api/mcp/tools",
+        body: {},
+        timeoutMs: resolveTimeoutMs(60_000),
+    });
+    const remoteByName = new Map(catalogue.tools.map((t) => [t.name, t]));
+    let currentSession = null;
+    const server = new Server({ name: "caelo-admin-mcp", version: "0.1.0" }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: [
+            OPEN_SESSION_TOOL,
+            GET_CONTEXT_TOOL,
+            ...catalogue.tools.map((t) => ({
+                name: t.name,
+                description: t.description,
+                inputSchema: t.inputSchema,
+            })),
+        ],
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (req) => {
+        const name = req.params.name;
+        try {
+            if (name === OPEN_SESSION_TOOL.name) {
+                const parsed = openSessionInput.safeParse(req.params.arguments ?? {});
+                if (!parsed.success) {
+                    return errorResult(`invalid arguments: ${parsed.error.message}`);
+                }
+                currentSession = await postAdmin({
+                    adminUrl: opts.adminUrl,
+                    token: opts.token,
+                    path: "/api/mcp/session",
+                    body: parsed.data,
+                    timeoutMs: resolveTimeoutMs(30_000),
+                });
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify(currentSession, null, 2) +
+                                "\nSession is active — subsequent caelo tool calls run on its preview branch. " +
+                                "The operator reviews + publishes in the Caelo admin.",
+                        },
+                    ],
+                };
+            }
+            if (name === GET_CONTEXT_TOOL.name) {
+                const context = await postAdmin({
+                    adminUrl: opts.adminUrl,
+                    token: opts.token,
+                    path: "/api/mcp/context",
+                    body: { includeSkillBodies: false },
+                    timeoutMs: resolveTimeoutMs(60_000),
+                });
+                return {
+                    content: [
+                        { type: "text", text: context.systemContext },
+                        {
+                            type: "text",
+                            text: JSON.stringify({ statusLine: context.statusLine, skills: context.skills }, null, 2),
+                        },
+                    ],
+                };
+            }
+            const remote = remoteByName.get(name);
+            if (!remote) {
+                return errorResult(`unknown tool: ${name}`);
+            }
+            if (!currentSession) {
+                return errorResult("no open work session — call caelo_open_session first. Every caelo write lands on a " +
+                    "session's preview branch; without one there is nothing to write to.");
+            }
+            const result = await postAdmin({
+                adminUrl: opts.adminUrl,
+                token: opts.token,
+                path: "/api/mcp/tool",
+                body: {
+                    toolName: name,
+                    args: req.params.arguments ?? {},
+                    chatSessionId: currentSession.chatSessionId,
+                },
+                timeoutMs: resolveTimeoutMs(120_000),
+            });
+            return {
+                ...(result.ok ? {} : { isError: true }),
+                content: [
+                    { type: "text", text: result.content },
+                    ...(result.image
+                        ? [
+                            {
+                                type: "image",
+                                data: result.image.base64,
+                                mimeType: result.image.mediaType,
+                            },
+                        ]
+                        : []),
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            requestId: result.requestId,
+                            cached: result.cached,
+                            ...(result.nextAction !== undefined ? { nextAction: result.nextAction } : {}),
+                        }),
+                    },
+                ],
+            };
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            return errorResult(`${name} failed: ${msg}`);
+        }
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+function errorResult(text) {
+    return { isError: true, content: [{ type: "text", text }] };
+}
+//# sourceMappingURL=admin-server.js.map

package/dist/admin-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-server.js","sourceRoot":"","sources":["../src/admin-server.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAyCxD,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,sGAAsG;QACtG,wGAAwG;QACxG,mGAAmG;QACnG,yEAAyE;IAC3E,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;YAC3F,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;YACrF,aAAa,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,6DAA6D;aAC3E;SACF;KACF;CACO,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,qGAAqG;QACrG,qGAAqG;QACrG,0FAA0F;IAC5F,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;CACvC,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAoB;IAC5D,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,SAAS,GAAG,MAAM,SAAS,CAA0B;QACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,EAAE;QACR,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtE,IAAI,cAAc,GAA+B,IAAI,CAAC;IAEtD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC7C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE;YACL,iBAAiB;YACjB,gBAAgB;YAChB,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;SACJ;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,IAAI,KAAK,iBAAiB,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,OAAO,WAAW,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,cAAc,GAAG,MAAM,SAAS,CAAsB;oBACpD,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EACF,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;gCACvC,+EAA+E;gCAC/E,sDAAsD;yBACzD;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,gBAAgB,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAqB;oBAClD,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE;oBACnC,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE;wBAC7C;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAC1D,IAAI,EACJ,CAAC,CACF;yBACF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,WAAW,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,WAAW,CAChB,qFAAqF;oBACnF,qEAAqE,CACxE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAsB;gBAClD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE;oBACJ,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE;oBAChC,aAAa,EAAE,cAAc,CAAC,aAAa;iBAC5C;gBACD,SAAS,EAAE,gBAAgB,CAAC,OAAO,CAAC;aACrC,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACvC,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE;oBACtC,GAAG,CAAC,MAAM,CAAC,KAAK;wBACd,CAAC,CAAC;4BACE;gCACE,IAAI,EAAE,OAAgB;gCACtB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;gCACzB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;6BACjC;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC9E,CAAC;qBACH;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,WAAW,CAAC,GAAG,IAAI,YAAY,GAAG,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAI/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC9D,CAAC"}

package/dist/admin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+export {};
+//# sourceMappingURL=admin.d.ts.map

package/dist/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":""}

package/dist/admin.js

@@ -0,0 +1,20 @@
+#!/usr/bin/env bun
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * `caelo-admin-mcp` — bin entry for the Power-MCP server (issue #376).
+ * Equivalent to `caelo-mcp-server admin`; exists as its own binary so the
+ * `claude mcp add` snippet stays a single flag-free command.
+ */
+import { startAdminMcpServer } from "./admin-server.js";
+const adminUrl = process.env.CAELO_ADMIN_URL;
+const token = process.env.CAELO_MCP_TOKEN;
+if (!adminUrl) {
+    console.error("CAELO_ADMIN_URL not set — point me at your admin install (e.g. https://admin.example.com)");
+    process.exit(2);
+}
+if (!token) {
+    console.error("CAELO_MCP_TOKEN not set — mint an ADMIN-scoped token at /security/mcp on your admin install");
+    process.exit(2);
+}
+await startAdminMcpServer({ adminUrl, token });
+//# sourceMappingURL=admin.js.map

package/dist/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":";AACA,mCAAmC;AAEnC;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CACX,2FAA2F,CAC5F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CACX,6FAA6F,CAC9F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC"}

package/dist/chat-bridge.d.ts

@@ -1,13 +1,3 @@
-/**
- * HTTP bridge — translates a `caelo_chat` MCP call into a single POST
- * against the admin install's `/api/mcp/chat` endpoint. The endpoint
- * dispatches `mcp.send_chat` (system-only op) which resolves the
- * bearer to a Caelo actor and drives `runChatTurn`.
- *
- * 30-second client-side timeout — chat-runner turns longer than that
- * are likely stuck (the runner has its own provider-call timeouts).
- * MCP clients see a clean error instead of a hung connection.
- */
 export interface SendChatOpts {
     readonly adminUrl: string;
     readonly token: string;

package/dist/chat-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat-bridge.d.ts","sourceRoot":"","sources":["../src/chat-bridge.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACzF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAID,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAgC1E"}
+{"version":3,"file":"chat-bridge.d.ts","sourceRoot":"","sources":["../src/chat-bridge.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACzF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAY1E"}

package/dist/chat-bridge.js

@@ -1,46 +1,27 @@
 // SPDX-License-Identifier: MPL-2.0
-const TIMEOUT_MS = 30_000;
+/**
+ * HTTP bridge — translates a `caelo_chat` MCP call into a single POST
+ * against the admin install's `/api/mcp/chat` endpoint. The endpoint
+ * dispatches `mcp.send_chat` (system-only op) which resolves the
+ * bearer to a Caelo actor and drives `runChatTurn`.
+ *
+ * 30-second default client-side timeout (override with
+ * `CAELO_MCP_TIMEOUT_MS`) — chat-runner turns longer than that are
+ * likely stuck (the runner has its own provider-call timeouts). MCP
+ * clients see a clean error instead of a hung connection.
+ */
+import { postAdmin, resolveTimeoutMs } from "./http.js";
 export async function sendChat(opts) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
-    try {
-        const url = `${opts.adminUrl.replace(/\/+$/, "")}/api/mcp/chat`;
-        const res = await fetch(url, {
-            method: "POST",
-            headers: {
-                "content-type": "application/json",
-                "x-caelo-mcp-token": opts.token,
-            },
-            body: JSON.stringify({
-                message: opts.message,
-                chatSessionId: opts.chatSessionId,
-                pageId: opts.pageId,
-            }),
-            signal: controller.signal,
-        });
-        if (!res.ok) {
-            const body = await safeText(res);
-            throw new Error(`HTTP ${res.status}: ${body || res.statusText}`);
-        }
-        const json = (await res.json());
-        return json;
-    }
-    catch (e) {
-        if (e instanceof Error && e.name === "AbortError") {
-            throw new Error(`timeout after ${TIMEOUT_MS / 1000}s`);
-        }
-        throw e;
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-async function safeText(res) {
-    try {
-        return (await res.text()).slice(0, 500);
-    }
-    catch {
-        return "";
-    }
+    return postAdmin({
+        adminUrl: opts.adminUrl,
+        token: opts.token,
+        path: "/api/mcp/chat",
+        body: {
+            message: opts.message,
+            chatSessionId: opts.chatSessionId,
+            pageId: opts.pageId,
+        },
+        timeoutMs: resolveTimeoutMs(30_000),
+    });
 }
 //# sourceMappingURL=chat-bridge.js.map

package/dist/chat-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"chat-bridge.js","sourceRoot":"","sources":["../src/chat-bridge.ts"],"names":[],"mappings":"AAAA,mCAAmC;AA8BnC,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,IAAI,CAAC,KAAK;aAChC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;YACF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"chat-bridge.js","sourceRoot":"","sources":["../src/chat-bridge.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAmBxD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,OAAO,SAAS,CAAiB;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB;QACD,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/export.d.ts

@@ -0,0 +1,23 @@
+export interface ExportSkill {
+    readonly slug: string;
+    readonly displayName: string;
+    readonly description: string;
+    readonly allowlistedTools: string[];
+    readonly body?: string;
+}
+export interface ExportContext {
+    readonly systemContext: string;
+    readonly statusLine: string | null;
+    readonly skills: ReadonlyArray<ExportSkill>;
+}
+export declare function renderClaudeMd(context: ExportContext, generatedAt: string): string;
+export declare function renderSkillMd(skill: ExportSkill): string;
+export interface RunExportOpts {
+    readonly adminUrl: string;
+    readonly token: string;
+    /** Directory the CLAUDE.md + .claude/skills tree lands in. */
+    readonly outDir: string;
+}
+/** Fetches the live context and writes the files. Returns written paths. */
+export declare function runExport(opts: RunExportOpts): Promise<string[]>;
+//# sourceMappingURL=export.d.ts.map

package/dist/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../src/export.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;CAC7C;AAMD,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CA0BlF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAYxD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,4EAA4E;AAC5E,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA2BtE"}

package/dist/export.js

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * Issue #376 — `caelo-mcp-server export`: writes a CLAUDE.md + one
+ * `.claude/skills/<slug>/SKILL.md` per active skill into a working
+ * directory, generated from the install's live context
+ * (`/api/mcp/context` with skill bodies included). Check the files into
+ * the repo an external agent (Claude Code) works from so the site
+ * context loads automatically at session start; re-run after skills or
+ * site memory change.
+ *
+ * The renderers are pure and exported for tests; `runExport` does the
+ * fetching + file I/O.
+ *
+ * Writing fetched content to disk is the feature, not an oversight
+ * (CodeQL flags the network→file flow): the source is the operator's OWN
+ * admin install, authenticated by their bearer, and the only
+ * path-influencing value is the skill slug — gated by SAFE_SLUG below so
+ * a hostile row cannot escape the out directory.
+ */
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { postAdmin, resolveTimeoutMs } from "./http.js";
+/** Path-safety gate for skill slugs — DB slugs already match this; a row
+ *  that doesn't is skipped rather than allowed to escape the out dir. */
+const SAFE_SLUG = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
+export function renderClaudeMd(context, generatedAt) {
+    const skillLines = context.skills.map((s) => `- ${s.slug}: ${s.description}`);
+    return [
+        "# Caelo site context",
+        "",
+        `<!-- Generated by \`caelo-mcp-server export\` at ${generatedAt}. Re-run to refresh; do not hand-edit. -->`,
+        "",
+        "This file describes the Caelo CMS install your `caelo-admin-mcp` MCP tools operate on.",
+        "Work happens through those tools: call `caelo_open_session` once, make changes with the",
+        "caelo tools (every write lands on the session's preview branch), and tell the operator to",
+        "review + publish in the Caelo admin. Never claim a change is live.",
+        "",
+        context.systemContext,
+        "",
+        "## Site status",
+        "",
+        context.statusLine ?? "Base setup complete.",
+        "",
+        "## Skills",
+        "",
+        "Full skill instructions live in `.claude/skills/<slug>/SKILL.md` — read the matching file",
+        "before the relevant work:",
+        "",
+        ...skillLines,
+        "",
+    ].join("\n");
+}
+export function renderSkillMd(skill) {
+    // JSON.stringify is YAML-compatible quoting — a description containing
+    // `#`, `:` or quotes must not break the frontmatter.
+    return [
+        "---",
+        `name: ${skill.slug}`,
+        `description: ${JSON.stringify(skill.description.replace(/\n/g, " "))}`,
+        "---",
+        "",
+        skill.body ?? "",
+        "",
+    ].join("\n");
+}
+/** Fetches the live context and writes the files. Returns written paths. */
+export async function runExport(opts) {
+    const context = await postAdmin({
+        adminUrl: opts.adminUrl,
+        token: opts.token,
+        path: "/api/mcp/context",
+        body: { includeSkillBodies: true },
+        timeoutMs: resolveTimeoutMs(60_000),
+    });
+    const written = [];
+    const claudeMdPath = join(opts.outDir, "CLAUDE.md");
+    await mkdir(opts.outDir, { recursive: true });
+    await writeFile(claudeMdPath, renderClaudeMd(context, new Date().toISOString()), "utf8");
+    written.push(claudeMdPath);
+    for (const skill of context.skills) {
+        if (!SAFE_SLUG.test(skill.slug)) {
+            console.error(`skipping skill with unsafe slug: ${JSON.stringify(skill.slug)}`);
+            continue;
+        }
+        const dir = join(opts.outDir, ".claude", "skills", skill.slug);
+        await mkdir(dir, { recursive: true });
+        const path = join(dir, "SKILL.md");
+        await writeFile(path, renderSkillMd(skill), "utf8");
+        written.push(path);
+    }
+    return written;
+}
+//# sourceMappingURL=export.js.map

package/dist/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../src/export.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAgBxD;yEACyE;AACzE,MAAM,SAAS,GAAG,mCAAmC,CAAC;AAEtD,MAAM,UAAU,cAAc,CAAC,OAAsB,EAAE,WAAmB;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9E,OAAO;QACL,sBAAsB;QACtB,EAAE;QACF,oDAAoD,WAAW,4CAA4C;QAC3G,EAAE;QACF,wFAAwF;QACxF,yFAAyF;QACzF,2FAA2F;QAC3F,oEAAoE;QACpE,EAAE;QACF,OAAO,CAAC,aAAa;QACrB,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,OAAO,CAAC,UAAU,IAAI,sBAAsB;QAC5C,EAAE;QACF,WAAW;QACX,EAAE;QACF,2FAA2F;QAC3F,2BAA2B;QAC3B,EAAE;QACF,GAAG,UAAU;QACb,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,uEAAuE;IACvE,qDAAqD;IACrD,OAAO;QACL,KAAK;QACL,SAAS,KAAK,CAAC,IAAI,EAAE;QACrB,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE;QACvE,KAAK;QACL,EAAE;QACF,KAAK,CAAC,IAAI,IAAI,EAAE;QAChB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AASD,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAgB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAClC,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnC,MAAM,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared HTTP plumbing for both MCP surfaces (chat + admin). One POST
+ * per call against the admin install's /api/mcp/* endpoints, bearer in
+ * the `x-caelo-mcp-token` header, with an abortable client-side timeout.
+ *
+ * Timeouts default per call site (chat 30s, tool execution 120s — bulk
+ * ops and media imports legitimately run long) and can be overridden
+ * globally via `CAELO_MCP_TIMEOUT_MS`.
+ */
+export interface AdminPostOpts {
+    readonly adminUrl: string;
+    readonly token: string;
+    /** Path under the admin origin, e.g. "/api/mcp/tool". */
+    readonly path: string;
+    readonly body: unknown;
+    readonly timeoutMs: number;
+}
+/** The per-call default unless the operator set `CAELO_MCP_TIMEOUT_MS`. */
+export declare function resolveTimeoutMs(defaultMs: number): number;
+export declare function postAdmin<T>(opts: AdminPostOpts): Promise<T>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED,wBAAsB,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CA6BlE"}

package/dist/http.js

@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: MPL-2.0
+/** The per-call default unless the operator set `CAELO_MCP_TIMEOUT_MS`. */
+export function resolveTimeoutMs(defaultMs) {
+    const raw = process.env.CAELO_MCP_TIMEOUT_MS;
+    if (!raw)
+        return defaultMs;
+    const parsed = Number.parseInt(raw, 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : defaultMs;
+}
+export async function postAdmin(opts) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs);
+    try {
+        const url = `${opts.adminUrl.replace(/\/+$/, "")}${opts.path}`;
+        const res = await fetch(url, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-caelo-mcp-token": opts.token,
+            },
+            body: JSON.stringify(opts.body),
+            signal: controller.signal,
+        });
+        if (!res.ok) {
+            const body = await safeText(res);
+            throw new Error(`HTTP ${res.status}: ${body || res.statusText}`);
+        }
+        return (await res.json());
+    }
+    catch (e) {
+        if (e instanceof Error && e.name === "AbortError") {
+            throw new Error(`timeout after ${opts.timeoutMs / 1000}s (override with CAELO_MCP_TIMEOUT_MS)`);
+        }
+        throw e;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+async function safeText(res) {
+    try {
+        return (await res.text()).slice(0, 500);
+    }
+    catch {
+        return "";
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAqBnC,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAI,IAAmB;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,IAAI,CAAC,KAAK;aAChC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,CAAC,SAAS,GAAG,IAAI,wCAAwC,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/index.js

@@ -3,17 +3,25 @@
 /**
  * @caelo-cms/mcp-server — entrypoint.
  *
- * Reads `CAELO_ADMIN_URL` + `CAELO_MCP_TOKEN` from env, builds an MCP
- * server exposing exactly one tool (`caelo_chat`), and listens over
- * stdio (Claude Code's default invocation pattern).
+ * Three modes, selected by the first argument:
  *
- * Bridge model: this process is a thin shim. Every `caelo_chat` call
- * becomes a single HTTP POST against the admin install's
- * `/api/mcp/chat` endpoint, which dispatches into the chat-runner with
- * the resolved actor identity. The MCP server NEVER touches the
- * database directly — it just translates between MCP semantics and
- * the admin's HTTP surface.
+ * - (none)   — the chat MCP server: exactly one tool (`caelo_chat`) that
+ *              talks to Caelo's own AI agent. Works with any token scope.
+ * - `admin`  — the Power-MCP server (issue #376): the full chat-runner
+ *              tool catalogue for an external agent that drives the tool
+ *              loop itself. Requires an admin-scoped token. Also
+ *              available as the `caelo-admin-mcp` binary.
+ * - `export` — writes CLAUDE.md + .claude/skills/ files generated from
+ *              the install's live context into `--out <dir>` (default:
+ *              the current directory). Requires an admin-scoped token.
+ *
+ * Bridge model: every mode is a thin shim. Calls become HTTP POSTs
+ * against the admin install's `/api/mcp/*` endpoints, which dispatch
+ * system-scoped ops that resolve the bearer to a Caelo actor. The MCP
+ * server NEVER touches the database directly.
  */
+import { startAdminMcpServer } from "./admin-server.js";
+import { runExport } from "./export.js";
 import { startMcpServer } from "./server.js";
 const adminUrl = process.env.CAELO_ADMIN_URL;
 const token = process.env.CAELO_MCP_TOKEN;
@@ -25,5 +33,27 @@ if (!token) {
     console.error("CAELO_MCP_TOKEN not set — mint one at /security/mcp on your admin install");
     process.exit(2);
 }
-await startMcpServer({ adminUrl, token });
+const command = process.argv[2];
+if (command === "export") {
+    const outFlag = process.argv.indexOf("--out");
+    const outDir = outFlag !== -1 ? process.argv[outFlag + 1] : undefined;
+    if (outFlag !== -1 && !outDir) {
+        console.error("--out needs a directory argument");
+        process.exit(2);
+    }
+    const written = await runExport({ adminUrl, token, outDir: outDir ?? process.cwd() });
+    for (const path of written)
+        console.log(path);
+    console.log(`exported ${written.length} file(s) — re-run after skills or site memory change`);
+}
+else if (command === "admin") {
+    await startAdminMcpServer({ adminUrl, token });
+}
+else if (command !== undefined) {
+    console.error(`unknown command: ${command} (expected no command, "admin", or "export")`);
+    process.exit(2);
+}
+else {
+    await startMcpServer({ adminUrl, token });
+}
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,mCAAmC;AAEnC;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CACX,2FAA2F,CAC5F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,mCAAmC;AAEnC;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CACX,2FAA2F,CAC5F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEhC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,sDAAsD,CAAC,CAAC;AAChG,CAAC;KAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;IAC/B,MAAM,mBAAmB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACjD,CAAC;KAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,8CAA8C,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,CAAC;IACN,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@caelo-cms/mcp-server",
-  "version": "0.10.21",
+  "version": "0.10.23",
   "private": false,
   "license": "MPL-2.0",
-  "description": "MCP server exposing the Caelo CMS chat-runner as a `caelo_chat` tool. Lets Claude Code (or any MCP-aware client) drive a Caelo install from outside the browser.",
+  "description": "MCP servers for Caelo CMS: `caelo_chat` (talk to Caelo's own AI) and the admin-scoped Power-MCP (the full chat-runner tool catalogue, driven by your own agent). Lets Claude Code (or any MCP-aware client) drive a Caelo install from outside the browser.",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/caelo-cms/caelo-cms.git",
@@ -15,7 +15,8 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "bin": {
-    "caelo-mcp-server": "./dist/index.js"
+    "caelo-mcp-server": "./dist/index.js",
+    "caelo-admin-mcp": "./dist/admin.js"
   },
   "exports": {
     ".": {
@@ -36,7 +37,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
-    "zod": "4.3.6"
+    "zod": "4.4.3"
   },
   "publishConfig": {
     "access": "public"