@carrierllc/mcp 0.3.2 → 0.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carrierllc/mcp",
-  "version": "0.3.2",
+  "version": "0.4.1",
   "description": "Carrier MCP \u2014 natural-language control of MVNO/eSIM fleets via eSIMVault OCS. Stdio mode for direct integration with Claude Desktop, Cursor, Windsurf, and MCP-compatible clients. Ships the `carrier` CLI (plugin install + white-label eSIM storefront scaffold).",
   "license": "MIT",
   "author": "Carrier (Lifecycle Innovations Limited)",
@@ -14,15 +14,24 @@
   "files": [
     "dist",
     "plugin",
+    "README.md",
     "templates",
-    "README.md"
+    "!templates/**/node_modules",
+    "!templates/**/.open-next",
+    "!templates/**/.next",
+    "!templates/**/.turbo",
+    "!templates/**/.vercel",
+    "!templates/**/.wrangler",
+    "!templates/**/*.tsbuildinfo",
+    "!templates/**/.env.local"
   ],
   "scripts": {
     "build": "tsup",
     "type-check": "tsc --noEmit",
     "lint": "eslint src",
     "prepublishOnly": "pnpm run build",
-    "test": "pnpm run build && node --test test/*.test.js"
+    "test": "pnpm run build && node --test test/*.test.js",
+    "check:pack": "node scripts/check-pack-size.mjs"
   },
   "dependencies": {
     "@clack/prompts": "^0.7.0",
@@ -45,7 +54,8 @@
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "@carrier/ocs-client": "workspace:*",
-    "@carrier/ocs-spec": "workspace:*"
+    "@carrier/ocs-spec": "workspace:*",
+    "@carrier/screens": "workspace:*"
   },
   "keywords": [
     "mcp",

package/plugin/carrier/commands/storefront.md

@@ -1,6 +1,6 @@
 ---
 description: Scaffold, white-label, logo, and deploy your eSIM storefront
-argument-hint: "[create|logo|deploy|rebrand] [dir]"
+argument-hint: "[create|logo|deploy|targets|clerk|rebrand] [dir]"
 ---
 
 # Storefront
@@ -14,7 +14,26 @@ Works for **any developer** with Carrier MCP (`https://mcp.carrier.llc/mcp`) or
 - **logo** → `carrier site logo <dir>` or MCP tool `generate_storefront_logo`  
   Regenerates the mark. SVG always. PNG is added only when Carrier (or this box) has an OpenAI image key — optional, never required.
 - **rebrand** → edit `src/brand.config.ts`, then `carrier site logo <dir>` and rebuild.
-- **deploy** → `carrier site deploy <dir>` (Cloudflare Workers). Requires `wrangler login`.
+- **targets** → `carrier site targets <dir>`  
+  Shows which hosts are installed, logged in, and ready: Cloudflare, Vercel, Netlify, Fly. Names the one a deploy would pick.
+- **deploy** → `carrier site deploy <dir>`  
+  Picks a host automatically: one the project is already configured for, else Cloudflare (what the template is built for). Force with `--target cloudflare|vercel|netlify|fly`. Builds with the right script per host (`cf:build` for Cloudflare, `build` elsewhere), **stages runtime secrets before the code**, deploys, then **verifies the site actually serves** and repairs it once if it does not.  
+  Flags: `--no-secrets`, `--no-verify`, `--clerk`, `--domain`, `--autofix-agent`.
+- **clerk** → `carrier site clerk <dir>`  
+  Four tiers, best first: create via Platform API (`CLERK_PLATFORM_API_KEY`) → mint a **keyless** app with the Clerk CLI, no account needed → reuse keys already on the machine → print the dashboard steps. Writes keys to `.env.local` and sets allowed origins + redirect URLs. `--no-create` reuses only; `--production` pulls prod keys.
+
+Secrets are staged **before** the deploy, not after. On Cloudflare they ride along in the same version via `--secrets-file`, so there is never a moment where the new code is live without them — that gap is what made a green deploy serve 500s.
+
+After deploying, `/`, `/shop` and `/help` are probed. A failure is classified, not guessed at:
+
+| Symptom | Cause | What happens |
+|---|---|---|
+| `/` + `/shop` 500, `/help` 200 | `CARRIER_API_KEY` absent | re-stage, redeploy |
+| public pages fine, auth routes 5xx | Clerk keys absent | provision, rebuild, redeploy |
+| `/shop` 200 but no plans | catalog empty upstream | reported, not retried |
+| nothing reachable | deploy did not land | reported |
+
+One repair attempt, then re-probe. Still broken on Cloudflare → rolled back to the previous version and a non-zero exit. Never loops.
 
 MCP (any authenticated Carrier user):
 
@@ -27,7 +46,37 @@ generate_storefront_logo
 
 Write the returned `svg` to `public/brand/logo.svg`. Nav and icons read that path.
 
-Wire-up:
-- `NEXT_PUBLIC_CARRIER_API_URL` in `.env.local`
-- Plans from `list_package_templates` / `pricing_plans`
-- Confirm `credential_status` before going live
+MCP over stdio (these drive host CLIs on your machine, so they are local-only):
+
+```
+list_deploy_targets        dir: ./storefront
+deploy_storefront          dir: ./storefront   [target, name, skip_build, push_secrets, verify, domain]
+provision_storefront_clerk dir: ./storefront   [name, production, no_create, url]
+```
+
+`deploy_storefront` returns `verified`, `diagnosis`, `probes` and `repair_hint`, so a caller can tell a working deployment from one that merely finished.
+
+Wire-up. Every key the template reads is declared in `TEMPLATE_ENV_KEYS`
+(`src/cli/lib/storefront-secrets.ts`) and a test fails the build if the template
+gains one that is not:
+
+| Key | Delivery | Missing means |
+|---|---|---|
+| `NEXT_PUBLIC_CARRIER_API_URL` | build-time | falls back to mock plans |
+| `NEXT_PUBLIC_APP_URL` | build-time | guest checkout builds broken URLs |
+| `NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY` | build-time | auth routes fail |
+| `CARRIER_API_KEY` | runtime secret | **`/` and `/shop` return 500** |
+| `CLERK_SECRET_KEY` | runtime secret | auth routes fail |
+| `STRIPE_SECRET_KEY` | runtime secret | guest checkout fails at request time |
+
+`NEXT_PUBLIC_*` values are inlined by Next at build time, so they must be in
+`.env.local` *before* the build — pushing one as a runtime secret looks like it
+worked and changes nothing.
+
+Also: plans come from `list_package_templates` / `pricing_plans`, and
+`credential_status` is worth confirming before going live.
+
+Creating a Clerk application through the Platform API needs a partner token and
+is not self-serve. The CLI's keyless mode covers that gap — it mints a claimable
+app with no account. Claim it at dashboard.clerk.com to keep it, and use
+`--production` for real production keys.

package/templates/storefront/next-env.d.ts

@@ -0,0 +1,7 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/types/routes.d.ts";
+import "./.next/types/root-params.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/templates/storefront/package-lock.json

@@ -107,9 +107,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -127,9 +124,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -147,9 +141,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -167,9 +158,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2550,9 +2538,6 @@
       "cpu": [
         "arm"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2569,9 +2554,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2588,9 +2570,6 @@
       "cpu": [
         "ppc64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2607,9 +2586,6 @@
       "cpu": [
         "riscv64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2626,9 +2602,6 @@
       "cpu": [
         "s390x"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2645,9 +2618,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2664,9 +2634,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2683,9 +2650,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -2702,9 +2666,6 @@
       "cpu": [
         "arm"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -2727,9 +2688,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -2752,9 +2710,6 @@
       "cpu": [
         "ppc64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -2777,9 +2732,6 @@
       "cpu": [
         "riscv64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -2802,9 +2754,6 @@
       "cpu": [
         "s390x"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -2827,9 +2776,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -2852,9 +2798,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -2877,9 +2820,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -3186,9 +3126,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -3205,9 +3142,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -3224,9 +3158,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -3243,9 +3174,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4298,9 +4226,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4318,9 +4243,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4338,9 +4260,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4358,9 +4277,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4944,9 +4860,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4961,9 +4874,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4978,9 +4888,6 @@
         "loong64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -4995,9 +4902,6 @@
         "loong64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5012,9 +4916,6 @@
         "ppc64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5029,9 +4930,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5046,9 +4944,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5063,9 +4958,6 @@
         "s390x"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5080,9 +4972,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5097,9 +4986,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -8794,9 +8680,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -8818,9 +8701,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -8842,9 +8722,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -8866,9 +8743,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -9197,9 +9071,6 @@
         "arm"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9217,9 +9088,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9237,9 +9105,6 @@
         "ppc64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9257,9 +9122,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9277,9 +9139,6 @@
         "s390x"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9297,9 +9156,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9317,9 +9173,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9337,9 +9190,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -9357,9 +9207,6 @@
         "arm"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -9383,9 +9230,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -9409,9 +9253,6 @@
         "ppc64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -9435,9 +9276,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -9461,9 +9299,6 @@
         "s390x"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -9487,9 +9322,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -9513,9 +9345,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -9539,9 +9368,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [