@commandable/mcp 0.2.1 → 0.4.0

package/.output/server/chunks/routes/mcp/static.mjs

@@ -0,0 +1,61 @@
+import { d as defineEventHandler, s as readBody, z as handleMcpHttp, A as setResponseStatus } from '../../nitro/nitro.mjs';
+import 'node:crypto';
+import '@modelcontextprotocol/sdk/server/index.js';
+import '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import '@modelcontextprotocol/sdk/types.js';
+import 'fastest-levenshtein';
+import 'node:url';
+import 'node:vm';
+import 'turndown';
+import 'marked';
+import 'node:util';
+import 'node:child_process';
+import 'node:fs/promises';
+import 'node:path';
+import 'node:os';
+import 'node:fs';
+import 'drizzle-orm';
+import 'node:buffer';
+import 'google-auth-library';
+import 'node:http';
+import 'node:https';
+import 'node:events';
+import 'better-sqlite3';
+import 'drizzle-orm/better-sqlite3';
+import 'drizzle-orm/node-postgres';
+import 'pg';
+import 'drizzle-orm/better-sqlite3/migrator';
+import 'drizzle-orm/node-postgres/migrator';
+import 'drizzle-orm/sqlite-core';
+import 'drizzle-orm/pg-core';
+import 'node:process';
+import 'js-yaml';
+import 'zod';
+import '@iconify/utils';
+import 'consola';
+
+const _static = defineEventHandler(async (event) => {
+  var _a, _b;
+  const method = event.node.req.method || "GET";
+  const body = method === "POST" ? await readBody(event) : void 0;
+  const result = await handleMcpHttp({
+    nodeReq: event.node.req,
+    nodeRes: event.node.res,
+    body,
+    endpoint: "static",
+    authApiKeyId: (_b = (_a = event.context.auth) == null ? void 0 : _a.apiKeyId) != null ? _b : null
+  });
+  if (result.kind === "handled") {
+    event._handled = true;
+    return;
+  }
+  setResponseStatus(event, result.statusCode);
+  return {
+    jsonrpc: "2.0",
+    error: { code: -32e3, message: result.message },
+    id: null
+  };
+});
+
+export { _static as default };
+//# sourceMappingURL=static.mjs.map

package/.output/server/chunks/routes/mcp/static.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.mjs","sources":["../../../../../server/routes/mcp/static.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,gBAAe,kBAAA,CAAmB,OAAO,KAAA,KAAU;AAHnD,EAAA,IAAA,EAAA,EAAA,EAAA;AAIE,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,MAAA,IAAU,KAAA;AACxC,EAAA,MAAM,OAAO,MAAA,KAAW,MAAA,GAAS,MAAM,QAAA,CAAS,KAAK,CAAA,GAAI,MAAA;AAEzD,EAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,IACjC,OAAA,EAAS,MAAM,IAAA,CAAK,GAAA;AAAA,IACpB,OAAA,EAAS,MAAM,IAAA,CAAK,GAAA;AAAA,IACpB,IAAA;AAAA,IACA,QAAA,EAAU,QAAA;AAAA,IACV,eAAc,EAAA,GAAA,CAAA,EAAA,GAAA,KAAA,CAAM,OAAA,CAAQ,IAAA,KAAd,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoB,aAApB,IAAA,GAAA,EAAA,GAAgC;AAAA,GAC/C,CAAA;AAED,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,KAAA,CAAM,QAAA,GAAW,IAAA;AACjB,IAAA;AAAA,EACF;AAEA,EAAA,iBAAA,CAAkB,KAAA,EAAO,OAAO,UAAU,CAAA;AAC1C,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,OAAO,EAAE,IAAA,EAAM,KAAA,EAAQ,OAAA,EAAS,OAAO,OAAA,EAAQ;AAAA,IAC/C,EAAA,EAAI;AAAA,GACN;AACF,CAAC,CAAA;;;;"}

package/.output/server/chunks/routes/mcp.mjs

@@ -1,31 +1,36 @@
-import { d as defineEventHandler, t as readBody, z as handleMcpHttp, A as setResponseStatus } from '../nitro/nitro.mjs';
-import '@modelcontextprotocol/sdk/types.js';
+import { d as defineEventHandler, s as readBody, z as handleMcpHttp, A as setResponseStatus } from '../nitro/nitro.mjs';
+import 'node:crypto';
 import '@modelcontextprotocol/sdk/server/index.js';
 import '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import 'node:crypto';
+import '@modelcontextprotocol/sdk/types.js';
 import 'fastest-levenshtein';
-import 'node:fs';
-import 'node:path';
 import 'node:url';
 import 'node:vm';
 import 'turndown';
 import 'marked';
+import 'node:util';
+import 'node:child_process';
+import 'node:fs/promises';
+import 'node:path';
+import 'node:os';
+import 'node:fs';
 import 'drizzle-orm';
 import 'node:buffer';
 import 'google-auth-library';
 import 'node:http';
 import 'node:https';
 import 'node:events';
-import 'node:os';
 import 'better-sqlite3';
 import 'drizzle-orm/better-sqlite3';
 import 'drizzle-orm/node-postgres';
 import 'pg';
+import 'drizzle-orm/better-sqlite3/migrator';
+import 'drizzle-orm/node-postgres/migrator';
+import 'drizzle-orm/sqlite-core';
+import 'drizzle-orm/pg-core';
 import 'node:process';
 import 'js-yaml';
 import 'zod';
-import 'drizzle-orm/sqlite-core';
-import 'drizzle-orm/pg-core';
 import '@iconify/utils';
 import 'consola';
 
@@ -37,7 +42,7 @@ const mcp = defineEventHandler(async (event) => {
     nodeReq: event.node.req,
     nodeRes: event.node.res,
     body,
-    endpoint: "static",
+    endpoint: "dynamic",
     authApiKeyId: (_b = (_a = event.context.auth) == null ? void 0 : _a.apiKeyId) != null ? _b : null
   });
   if (result.kind === "handled") {

package/.output/server/chunks/routes/mcp.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.mjs","sources":["../../../../server/routes/mcp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,YAAe,kBAAA,CAAmB,OAAO,KAAA,KAAU;AAHnD,EAAA,IAAA,EAAA,EAAA,EAAA;AAIE,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,MAAA,IAAU,KAAA;AACxC,EAAA,MAAM,OAAO,MAAA,KAAW,MAAA,GAAS,MAAM,QAAA,CAAS,KAAK,CAAA,GAAI,MAAA;AAEzD,EAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,IACjC,OAAA,EAAS,MAAM,IAAA,CAAK,GAAA;AAAA,IACpB,OAAA,EAAS,MAAM,IAAA,CAAK,GAAA;AAAA,IACpB,IAAA;AAAA,IACA,QAAA,EAAU,QAAA;AAAA,IACV,eAAc,EAAA,GAAA,CAAA,EAAA,GAAA,KAAA,CAAM,OAAA,CAAQ,IAAA,KAAd,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoB,aAApB,IAAA,GAAA,EAAA,GAAgC;AAAA,GAC/C,CAAA;AAED,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,KAAA,CAAM,QAAA,GAAW,IAAA;AACjB,IAAA;AAAA,EACF;AAEA,EAAA,iBAAA,CAAkB,KAAA,EAAO,OAAO,UAAU,CAAA;AAC1C,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,OAAO,EAAE,IAAA,EAAM,KAAA,EAAQ,OAAA,EAAS,OAAO,OAAA,EAAQ;AAAA,IAC/C,EAAA,EAAI;AAAA,GACN;AACF,CAAC,CAAA;;;;"}
+{"version":3,"file":"mcp.mjs","sources":["../../../../server/routes/mcp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,YAAe,kBAAA,CAAmB,OAAO,KAAA,KAAU;AAHnD,EAAA,IAAA,EAAA,EAAA,EAAA;AAIE,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,MAAA,IAAU,KAAA;AACxC,EAAA,MAAM,OAAO,MAAA,KAAW,MAAA,GAAS,MAAM,QAAA,CAAS,KAAK,CAAA,GAAI,MAAA;AAEzD,EAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,IACjC,OAAA,EAAS,MAAM,IAAA,CAAK,GAAA;AAAA,IACpB,OAAA,EAAS,MAAM,IAAA,CAAK,GAAA;AAAA,IACpB,IAAA;AAAA,IACA,QAAA,EAAU,SAAA;AAAA,IACV,eAAc,EAAA,GAAA,CAAA,EAAA,GAAA,KAAA,CAAM,OAAA,CAAQ,IAAA,KAAd,IAAA,GAAA,MAAA,GAAA,EAAA,CAAoB,aAApB,IAAA,GAAA,EAAA,GAAgC;AAAA,GAC/C,CAAA;AAED,EAAA,IAAI,MAAA,CAAO,SAAS,SAAA,EAAW;AAC7B,IAAA,KAAA,CAAM,QAAA,GAAW,IAAA;AACjB,IAAA;AAAA,EACF;AAEA,EAAA,iBAAA,CAAkB,KAAA,EAAO,OAAO,UAAU,CAAA;AAC1C,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,OAAO,EAAE,IAAA,EAAM,KAAA,EAAQ,OAAA,EAAS,OAAO,OAAA,EAAQ;AAAA,IAC/C,EAAA,EAAI;AAAA,GACN;AACF,CAAC,CAAA;;;;"}

package/.output/server/index.mjs

@@ -1,31 +1,36 @@
 import process from 'node:process';globalThis._importMeta_={url:import.meta.url,env:process.env};import 'node:http';
 import 'node:https';
 export { a7 as default } from './chunks/nitro/nitro.mjs';
-import '@modelcontextprotocol/sdk/types.js';
+import 'node:crypto';
 import '@modelcontextprotocol/sdk/server/index.js';
 import '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import 'node:crypto';
+import '@modelcontextprotocol/sdk/types.js';
 import 'fastest-levenshtein';
-import 'node:fs';
-import 'node:path';
 import 'node:url';
 import 'node:vm';
 import 'turndown';
 import 'marked';
+import 'node:util';
+import 'node:child_process';
+import 'node:fs/promises';
+import 'node:path';
+import 'node:os';
+import 'node:fs';
 import 'drizzle-orm';
 import 'node:buffer';
 import 'google-auth-library';
 import 'node:events';
-import 'node:os';
 import 'better-sqlite3';
 import 'drizzle-orm/better-sqlite3';
 import 'drizzle-orm/node-postgres';
 import 'pg';
+import 'drizzle-orm/better-sqlite3/migrator';
+import 'drizzle-orm/node-postgres/migrator';
+import 'drizzle-orm/sqlite-core';
+import 'drizzle-orm/pg-core';
 import 'node:process';
 import 'js-yaml';
 import 'zod';
-import 'drizzle-orm/sqlite-core';
-import 'drizzle-orm/pg-core';
 import '@iconify/utils';
 import 'consola';
 //# sourceMappingURL=index.mjs.map

package/.output/server/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.mjs","sources":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/.output/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commandable/mcp-prod",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "type": "module",
   "private": true,
   "dependencies": {

package/README.md

@@ -5,7 +5,8 @@ This workspace is the published `@commandable/mcp` package.
 It owns:
 
 - the Nuxt management UI
-- the `/mcp` read endpoint
+- the `/mcp` dynamic endpoint
+- the `/mcp/static` compatibility endpoint
 - the `/mcp/create` create endpoint
 - the local server lifecycle CLI
 - the human-facing `create` and `connect` commands
@@ -29,6 +30,14 @@ yarn install
 yarn workspace @commandable/mcp dev
 ```
 
+If you are testing file-processing tools locally, install the extractor dependency on the host first:
+
+```bash
+pip3 install -r packages/core/src/file-extractor/requirements.txt
+```
+
+Without that dependency, the app still boots normally but file-processing-backed tools stay hidden and the status/doctor surfaces report file processing as disabled. The Docker image already includes the required runtime.
+
 For the full local product flow, prefer the root scripts:
 
 ```bash
@@ -46,7 +55,14 @@ npx -y @commandable/mcp create --transport http --url <create-url> --api-key <ap
 npx -y @commandable/mcp connect --transport http --url <read-url> --api-key <api-key>
 ```
 
+Recommended URLs:
+
+- dynamic: `<base-url>/mcp`
+- static: `<base-url>/mcp/static`
+- create: `<base-url>/mcp/create`
+
 ## Notes
 
 - The old embedded-bundle-in-another-package model is gone.
 - This package now publishes and runs the built Nuxt app directly.
+- `/_commandable/status` includes a `fileProcessing` block so hosts can verify whether extraction-backed tools are enabled.

package/bin/cli.mjs

@@ -1,13 +1,11 @@
-import crypto from 'node:crypto'
 import { spawn, spawnSync } from 'node:child_process'
+import crypto from 'node:crypto'
 import { existsSync, mkdirSync, openSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
 import { resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
-import { createRequire } from 'node:module'
 import { isCancel, note, select } from '@clack/prompts'
-import picocolors from 'picocolors'
 import {
-  SqlCredentialStore,
   applyConfig,
   createApiKey,
   createDbFromEnv,
@@ -16,13 +14,20 @@ import {
   getCommandableDir,
   getOrCreateEncryptionSecret,
   loadConfig,
+  SqlCredentialStore,
 } from '@commandable/mcp-core'
+import picocolors from 'picocolors'
 
 const require = createRequire(import.meta.url)
 const pkg = require('../package.json')
+
 const COMMANDABLE_VERSION = String(pkg.version || '0.0.0')
 const packageRoot = resolve(fileURLToPath(new URL('..', import.meta.url)))
 const serverEntry = resolve(packageRoot, '.output', 'server', 'index.mjs')
+const DIGITS_ONLY_RE = /^\d+$/
+const PID_LINE_RE = /^\d+$/
+const SAFE_SHELL_ARG_RE = /^[\w./:=@-]+$/
+const SINGLE_QUOTE_RE = /'/g
 const CLAUDE_CODE_STDIO_ENV_KEYS = [
   'COMMANDABLE_SPACE_ID',
   'COMMANDABLE_DATA_DIR',
@@ -49,7 +54,7 @@ function getFlagValue(flag) {
 
 function getUiPort() {
   const raw = process.env.COMMANDABLE_UI_PORT
-  return raw && /^\d+$/.test(raw) ? Number(raw) : 23432
+  return raw && DIGITS_ONLY_RE.test(raw) ? Number(raw) : 23432
 }
 
 function getBaseUrl() {
@@ -75,7 +80,7 @@ function readDaemonPid() {
   try {
     const raw = readFileSync(daemonPidPath(), 'utf8')
     const lines = raw.split('\n').map(line => line.trim()).filter(Boolean)
-    const pid = lines[0] && /^\d+$/.test(lines[0]) ? Number(lines[0]) : null
+    const pid = lines[0] && PID_LINE_RE.test(lines[0]) ? Number(lines[0]) : null
     const version = lines[1] || null
     return pid ? { pid, version } : null
   }
@@ -100,12 +105,16 @@ function stopDaemonProcess() {
     try {
       process.kill(info.pid, 'SIGTERM')
     }
-    catch {}
+    catch {
+      // Ignore if process already exited.
+    }
   }
   try {
     unlinkSync(daemonPidPath())
   }
-  catch {}
+  catch {
+    // Ignore missing pid file.
+  }
   return { stopped: !!info?.pid, pid: info?.pid ?? null }
 }
 
@@ -119,7 +128,9 @@ async function fetchJsonWithTimeout(url, timeoutMs) {
     try {
       json = text ? JSON.parse(text) : null
     }
-    catch {}
+    catch {
+      // Ignore invalid JSON payloads.
+    }
     return { ok: response.ok, status: response.status, json }
   }
   finally {
@@ -166,9 +177,9 @@ function getClaudeCodeEnvEntries() {
 }
 
 function quoteShellArg(value) {
-  if (/^[A-Za-z0-9_./:=@-]+$/.test(value))
+  if (SAFE_SHELL_ARG_RE.test(value))
     return value
-  return `'${value.replace(/'/g, `'\"'\"'`)}'`
+  return `'${value.replace(SINGLE_QUOTE_RE, `'"'"'`)}'`
 }
 
 function makeReadModeConfig() {
@@ -176,7 +187,7 @@ function makeReadModeConfig() {
     mcpServers: {
       commandable: {
         command: 'npx',
-        args: ['-y', '@commandable/mcp-connect'],
+        args: ['-y', '@commandable/mcp-connect', 'static-mode'],
       },
     },
   }
@@ -265,11 +276,15 @@ async function startManagementUi({ restart }) {
     try {
       process.kill(child.pid, 'SIGTERM')
     }
-    catch {}
+    catch {
+      // Ignore if process already exited.
+    }
     try {
       unlinkSync(daemonPidPath())
     }
-    catch {}
+    catch {
+      // Ignore missing pid file.
+    }
     console.error(`Commandable management UI failed to start at ${baseUrl}`)
     console.error(`Check the daemon log at ${logPath}`)
     process.exit(1)
@@ -308,7 +323,8 @@ async function runServe() {
   console.error(picocolors.green(`Commandable local instance ${ui.reused ? 'ready' : 'running'}.`))
   console.error(`${picocolors.dim('Base URL:')} ${baseUrl}`)
   console.error(`${picocolors.dim('Management UI:')} ${baseUrl}/`)
-  console.error(`${picocolors.dim('MCP endpoint:')} ${baseUrl}/mcp`)
+  console.error(`${picocolors.dim('Dynamic MCP endpoint:')} ${baseUrl}/mcp`)
+  console.error(`${picocolors.dim('Static MCP endpoint:')} ${baseUrl}/mcp/static`)
   console.error(`${picocolors.dim('Create endpoint:')} ${baseUrl}/mcp/create`)
   console.error(`${picocolors.dim('Data dir:')} ${getCommandableDir()}`)
   console.error(`${picocolors.dim('SQLite:')} ${getSqlitePathForLocalState()}`)
@@ -401,6 +417,7 @@ async function runDoctor() {
       versionMatch: !!runningVersion && runningVersion === COMMANDABLE_VERSION,
       status: probe?.json ?? null,
     },
+    fileProcessing: probe?.json?.fileProcessing ?? null,
   }, null, 2))
 }
 
@@ -515,8 +532,8 @@ function help(exitCode = 0) {
     '',
     picocolors.bold('Notes'),
     `- ${picocolors.bold('Serve')}: starts or reuses the local Commandable instance.`,
-    `- ${picocolors.bold('Create')}: Claude Code authoring flow. Prints or applies ${picocolors.cyan('claude mcp add')}.`,
-    `- ${picocolors.bold('Connect')}: prints read-client connection details.`,
+    `- ${picocolors.bold('Create')}: Claude Code authoring flow. Prints or applies ${picocolors.cyan('claude mcp add')} for builder mode.`,
+    `- ${picocolors.bold('Connect')}: prints compatibility client connection details (stdio static-mode or HTTP /mcp by default).`,
     '',
   ].join('\n'))
   process.exit(exitCode)

package/package.json

@@ -1,27 +1,33 @@
 {
   "name": "@commandable/mcp",
-  "version": "0.2.1",
+  "type": "module",
+  "version": "0.4.0",
+  "packageManager": "yarn@4.12.0",
   "description": "Commandable app/server package for local management UI, HTTP endpoints, and human-facing CLI flows.",
   "license": "AGPL-3.0-only",
+  "homepage": "https://github.com/commandable/commandable-mcp#readme",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/commandable/commandable-mcp.git",
     "directory": "app"
   },
-  "homepage": "https://github.com/commandable/commandable-mcp#readme",
   "bugs": {
     "url": "https://github.com/commandable/commandable-mcp/issues"
   },
-  "engines": {
-    "node": ">=18"
-  },
-  "type": "module",
   "bin": {
     "commandable-mcp": "./bin/commandable-mcp.mjs"
   },
   "publishConfig": {
     "access": "public"
   },
+  "files": [
+    ".output",
+    "README.md",
+    "bin"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
   "scripts": {
     "build": "nuxt build",
     "dev": "nuxt dev",
@@ -34,7 +40,7 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.0.1",
-    "@commandable/mcp-core": "0.2.1",
+    "@commandable/mcp-core": "0.8.0",
     "@iconify-json/lucide": "^1.2.90",
     "@iconify-json/simple-icons": "^1.2.70",
     "@nuxt/ui": "^4.4.0",
@@ -44,15 +50,10 @@
     "tailwindcss": "^4.1.18"
   },
   "devDependencies": {
+    "@antfu/eslint-config": "^7.7.3",
     "@nuxt/eslint": "^1.15.1",
     "eslint": "^10.0.0",
     "typescript": "^5.9.3",
     "vue-tsc": "^3.2.4"
-  },
-  "files": [
-    ".output",
-    "bin",
-    "README.md"
-  ],
-  "packageManager": "yarn@4.12.0"
+  }
 }