@caravo/mcp 0.1.26 → 0.1.28

package/dist/index.js

@@ -35,6 +35,16 @@ checkForUpdate("@caravo/mcp", VERSION).then((info) => {
         process.stderr.write(`[caravo] update available: ${info.current} → ${info.latest} (will auto-update on next restart)\n`);
     }
 });
+/** Append update notice to the last text content block in a tool response */
+function appendUpdateNotice(result) {
+    if (!pendingUpdate)
+        return result;
+    const lastText = [...result.content].reverse().find((c) => c.type === "text" && c.text);
+    if (lastText && lastText.text) {
+        lastText.text += `\n\n⚠ Caravo MCP update available: ${pendingUpdate.current} → ${pendingUpdate.latest}. Restart the MCP server to auto-update.`;
+    }
+    return result;
+}
 // ─── Shared description blocks (used in both `instructions` and `search_tools`) ─
 const ABOUT_CARAVO = "Caravo (https://caravo.ai) — the API marketplace for AI agents. 200+ tools at $0.001–$0.05/call.\n" +
     "Docs & source: https://github.com/Caravo-AI/Caravo-MCP";
@@ -246,6 +256,35 @@ function stripDangerousFields(input) {
     }
     return cleaned;
 }
+/**
+ * Resolve local file paths in tool input to base64.
+ * Detects file:// URIs and absolute paths with image extensions.
+ * Runs locally so base64 never enters the LLM context.
+ */
+function resolveLocalFiles(input) {
+    const result = { ...input };
+    for (const [key, value] of Object.entries(result)) {
+        if (typeof value !== "string")
+            continue;
+        const filePath = toLocalPath(value);
+        if (!filePath)
+            continue;
+        if (!existsSync(filePath)) {
+            throw new Error(`Local file not found: ${filePath}`);
+        }
+        result[key] = readFileSync(filePath).toString("base64");
+    }
+    return result;
+}
+function toLocalPath(value) {
+    if (value.startsWith("file:///"))
+        return value.slice(7);
+    if (value.startsWith("file://"))
+        return value.slice(7);
+    if (/^\//.test(value) && /\.(png|jpe?g|gif|webp|bmp|svg|tiff?)$/i.test(value))
+        return value;
+    return null;
+}
 // ─── Favorites registration ────────────────────────────────────────────────────
 // Track registered fav tool handles for dynamic add/remove
 const registeredFavTools = new Map();
@@ -342,9 +381,10 @@ function buildPostExecPrompt(execId, toolId) {
 function makeFavToolHandler(tool) {
     return async (args) => {
         // Extract dry_run before passing remaining args to the API
-        const { dry_run, ...toolInput } = args;
+        const { dry_run, ...rawInput } = args;
+        const toolInput = resolveLocalFiles(rawInput);
         if (dry_run) {
-            return dryRunProbe(tool.id, toolInput);
+            return appendUpdateNotice(await dryRunProbe(tool.id, toolInput));
         }
         try {
             const result = await apiPost(`/api/tools/${tool.id}/execute`, toolInput);
@@ -357,26 +397,26 @@ function makeFavToolHandler(tool) {
                     ...formatOutput(result.output),
                     ...reviewLines,
                 ];
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: lines.join("\n") }],
-                };
+                });
             }
             if (result.x402Version || result.accepts) {
                 const price = `$${tool.pricing.price_per_call}`;
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: buildPaymentRequiredMessage(price) }],
                     isError: true,
-                };
+                });
             }
-            return {
+            return appendUpdateNotice({
                 content: [
                     { type: "text", text: `Error: ${safeJsonText(result, false)}` },
                 ],
                 isError: true,
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [
                     {
                         type: "text",
@@ -384,7 +424,7 @@ function makeFavToolHandler(tool) {
                     },
                 ],
                 isError: true,
-            };
+            });
         }
     };
 }
@@ -525,19 +565,15 @@ function registerAllTools(server) {
             params.set("per_page", String(per_page));
             params.set("view", "agent");
             const data = await apiGet(`/api/tools?${params}`);
-            let text = safeJsonText(data);
-            if (pendingUpdate) {
-                text += `\n\n[Update available: @caravo/mcp ${pendingUpdate.current} → ${pendingUpdate.latest}. Will auto-update on next MCP restart.]`;
-            }
-            return {
-                content: [{ type: "text", text }],
-            };
+            return appendUpdateNotice({
+                content: [{ type: "text", text: safeJsonText(data) }],
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     // ── Get tool info ────────────────────────────────────────────────────────────
@@ -556,21 +592,22 @@ function registerAllTools(server) {
         }
         try {
             const data = await apiGet(`/api/tools/${tool_id.trim()}`);
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: safeJsonText(data) }],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     // ── use_tool (meta-tool) ─────────────────────────────────────────────────────
     server.registerTool("use_tool", {
         description: "Execute any marketplace tool by ID. Use get_tool_info first to see the required input schema. " +
             "Paid tools auto-pay via x402 (wallet) or API key balance. " +
+            "File upload tip: For tools that accept file input, you can pass a local file path (e.g., /path/to/photo.jpg) or file:// URI — it will be auto-converted to base64. Prefer passing a URL when available. " +
             "After using a tool, check existing reviews first — upvote one if it matches your experience, or write a new review if none captures your feedback.",
         inputSchema: {
             tool_id: z.string().describe("The tool ID or slug to execute (e.g., 'black-forest-labs/flux.1-schnell' or 'alice/imagen-4')"),
@@ -582,15 +619,15 @@ function registerAllTools(server) {
     }, async ({ tool_id, input, dry_run }) => {
         const validationError = validateToolId(tool_id);
         if (validationError) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${validationError}` }],
                 isError: true,
-            };
+            });
         }
-        const cleanInput = stripDangerousFields(input);
+        const cleanInput = resolveLocalFiles(stripDangerousFields(input));
         // Dry-run mode: probe cost without executing or paying
         if (dry_run) {
-            return dryRunProbe(tool_id.trim(), cleanInput);
+            return appendUpdateNotice(await dryRunProbe(tool_id.trim(), cleanInput));
         }
         try {
             const result = await apiPost(`/api/tools/${tool_id.trim()}/execute`, cleanInput);
@@ -603,28 +640,28 @@ function registerAllTools(server) {
                     ...formatOutput(result.output),
                     ...reviewLines,
                 ];
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: lines.join("\n") }],
-                };
+                });
             }
             if (result.x402Version || result.accepts) {
                 const price = result.accepts?.[0]?.amount
                     ? `$${(parseInt(result.accepts[0].amount) / 1e6).toFixed(6)}`
                     : "?";
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: buildPaymentRequiredMessage(price) }],
                     isError: true,
-                };
+                });
             }
-            return {
+            return appendUpdateNotice({
                 content: [
                     { type: "text", text: `Error: ${safeJsonText(result, false)}` },
                 ],
                 isError: true,
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [
                     {
                         type: "text",
@@ -632,7 +669,7 @@ function registerAllTools(server) {
                     },
                 ],
                 isError: true,
-            };
+            });
         }
     });
     // ── Submit review / upvote ───────────────────────────────────────────────────
@@ -686,12 +723,12 @@ function registerAllTools(server) {
                             lines.push(`This was a 5/5 review — consider saving tool_id="${upvotedToolId}" to your memory for future reuse.`);
                         }
                     }
-                    return { content: [{ type: "text", text: lines.join("\n") }] };
+                    return appendUpdateNotice({ content: [{ type: "text", text: lines.join("\n") }] });
                 }
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: result.error ? `Error: ${result.error}` : safeJsonText(result) }],
                     isError: true,
-                };
+                });
             }
             // New review mode
             if (rating == null || !comment) {
@@ -718,10 +755,10 @@ function registerAllTools(server) {
                 agent_id,
             });
             if (result.error) {
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: `Error: ${result.error}` }],
                     isError: true,
-                };
+                });
             }
             // The API returns the review record with tool_id derived from execution
             const reviewToolId = result.tool_id || "unknown";
@@ -736,13 +773,13 @@ function registerAllTools(server) {
                     lines.push(`This tool scored 5/5 — consider saving tool_id="${reviewToolId}" to your memory for future reuse.`);
                 }
             }
-            return { content: [{ type: "text", text: lines.join("\n") }] };
+            return appendUpdateNotice({ content: [{ type: "text", text: lines.join("\n") }] });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     // ── Wallet info ──────────────────────────────────────────────────────────────
@@ -804,14 +841,14 @@ function registerAllTools(server) {
         else {
             info.note = "Send USDC on Base to this address to enable automatic x402 payments.";
         }
-        return {
+        return appendUpdateNotice({
             content: [
                 {
                     type: "text",
                     text: JSON.stringify(info, null, 2),
                 },
             ],
-        };
+        });
     });
     // ── Login (browser-based account connect) ────────────────────────────────────
     server.registerTool("login", {
@@ -893,7 +930,9 @@ function registerAllTools(server) {
             "Removes the saved API key and unregisters all favorited tools from this session.",
         inputSchema: {},
     }, async () => {
-        if (!API_KEY) {
+        // Check both in-memory key and config file (key may have been set by CLI login after MCP started)
+        const configKey = loadConfig().api_key;
+        if (!API_KEY && !configKey) {
             return {
                 content: [{ type: "text", text: "Not logged in — already using x402 wallet payments." }],
             };
@@ -902,9 +941,11 @@ function registerAllTools(server) {
         API_KEY = undefined;
         // 2. Remove key from config file
         try {
-            const config = loadConfig();
-            delete config.api_key;
-            saveConfig(config);
+            if (configKey) {
+                const config = loadConfig();
+                delete config.api_key;
+                saveConfig(config);
+            }
         }
         catch {
             // config file may not exist — that's fine
@@ -939,15 +980,15 @@ function registerAllTools(server) {
     }, async () => {
         try {
             const data = await apiGet("/api/tags");
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: safeJsonText(data) }],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     // ── List providers ───────────────────────────────────────────────────────────
@@ -957,15 +998,15 @@ function registerAllTools(server) {
     }, async () => {
         try {
             const data = await apiGet("/api/providers");
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: safeJsonText(data) }],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     // ── Tool Requests ───────────────────────────────────────────────────────────
@@ -992,15 +1033,15 @@ function registerAllTools(server) {
             params.set("page", String(page));
             params.set("per_page", String(per_page));
             const data = await apiGet(`/api/tool-requests?${params}`);
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: safeJsonText(data) }],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     server.registerTool("request_tool", {
@@ -1024,12 +1065,12 @@ function registerAllTools(server) {
                 agent_id,
             });
             if (result.error) {
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: `Error: ${result.error}` }],
                     isError: true,
-                };
+                });
             }
-            return {
+            return appendUpdateNotice({
                 content: [
                     {
                         type: "text",
@@ -1042,13 +1083,13 @@ function registerAllTools(server) {
                         ].join("\n"),
                     },
                 ],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     server.registerTool("upvote_tool_request", {
@@ -1064,21 +1105,21 @@ function registerAllTools(server) {
                 execution_id,
             });
             if (result.error) {
-                return {
+                return appendUpdateNotice({
                     content: [{ type: "text", text: `Error: ${result.error}` }],
                     isError: true,
-                };
+                });
             }
             const action = result.action === "already_upvoted" ? "Already upvoted" : "Upvoted";
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `✓ ${action} tool request ${request_id}` }],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     // ── Favorites management ─────────────────────────────────────────────────────
@@ -1106,7 +1147,7 @@ function registerAllTools(server) {
                 };
             }
             const tools = result.data ?? [];
-            return {
+            return appendUpdateNotice({
                 content: [
                     {
                         type: "text",
@@ -1122,13 +1163,13 @@ function registerAllTools(server) {
                         }),
                     },
                 ],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     server.registerTool("favorite_tool", {
@@ -1165,7 +1206,7 @@ function registerAllTools(server) {
             if (tool) {
                 registerFavTool(server, tool);
             }
-            return {
+            return appendUpdateNotice({
                 content: [
                     {
                         type: "text",
@@ -1177,13 +1218,13 @@ function registerAllTools(server) {
                         ].join("\n"),
                     },
                 ],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
     server.registerTool("unfavorite_tool", {
@@ -1218,7 +1259,7 @@ function registerAllTools(server) {
                 registered.remove();
                 registeredFavTools.delete(tool_id);
             }
-            return {
+            return appendUpdateNotice({
                 content: [
                     {
                         type: "text",
@@ -1227,13 +1268,13 @@ function registerAllTools(server) {
                             : `"${tool_id}" was not in your favorites.`,
                     },
                 ],
-            };
+            });
         }
         catch (err) {
-            return {
+            return appendUpdateNotice({
                 content: [{ type: "text", text: `Error: ${err instanceof Error ? err.message : String(err)}` }],
                 isError: true,
-            };
+            });
         }
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caravo/mcp",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "description": "The API marketplace built for autonomous AI agents. Search, execute, and pay for 200+ tools at $0.001–0.05 per call.",
   "type": "module",
   "bin": {