@cyanheads/mcp-ts-core 0.10.16 → 0.11.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyanheads/mcp-ts-core",
-  "version": "0.10.16",
+  "version": "0.11.0",
   "mcpName": "io.github.cyanheads/mcp-ts-core",
   "description": "Agent-native TypeScript framework for building MCP servers. Declarative definitions with auth, multi-backend storage, OpenTelemetry, and first-class support for Bun/Node/Cloudflare Workers.",
   "files": [
@@ -193,18 +193,18 @@
     "publish-mcp": "mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.4",
+    "@biomejs/biome": "2.5.5",
     "@cloudflare/vitest-pool-workers": "^0.18.6",
     "@cloudflare/workers-types": "5.20260706.1",
-    "@duckdb/node-api": "^1.5.4-r.1",
+    "@duckdb/node-api": "^1.5.5-r.1",
     "@hono/otel": "^1.1.2",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.220.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.220.0",
-    "@opentelemetry/instrumentation-http": "^0.220.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
+    "@opentelemetry/instrumentation-http": "^0.221.0",
     "@opentelemetry/instrumentation-pino": "^0.66.0",
     "@opentelemetry/resources": "^2.10.0",
     "@opentelemetry/sdk-metrics": "^2.10.0",
-    "@opentelemetry/sdk-node": "^0.220.0",
+    "@opentelemetry/sdk-node": "^0.221.0",
     "@opentelemetry/sdk-trace-node": "^2.10.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "@socketsecurity/bun-security-scanner": "^1.1.2",
@@ -216,14 +216,14 @@
     "@types/validator": "^13.15.10",
     "@vitest/coverage-istanbul": "4.1.10",
     "@vitest/ui": "4.1.10",
-    "better-sqlite3": "^12.11.1",
+    "better-sqlite3": "^13.0.1",
     "bun-types": "^1.3.14",
     "chrono-node": "^2.10.1",
     "clipboardy": "^5.3.1",
     "defuddle": "^0.19.2",
     "depcheck": "^1.4.7",
     "diff": "^9.0.0",
-    "execa": "^9.6.1",
+    "execa": "^10.0.0",
     "fast-check": "^4.9.0",
     "fast-xml-parser": "^5.10.1",
     "ignore": "^7.0.6",
@@ -239,7 +239,8 @@
     "sanitize-html": "^2.17.6",
     "tsc-alias": "^1.9.1",
     "typedoc": "^0.28.20",
-    "typescript": "^6.0.3",
+    "typescript": "^7.0.2",
+    "typescript-v6": "npm:typescript@^6.0.3",
     "unpdf": "^1.6.2",
     "validator": "^13.15.35",
     "vite": "8.1.5",
@@ -307,34 +308,34 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@duckdb/node-api": "^1.5.0",
-    "@hono/otel": "^1.1.1",
-    "@opentelemetry/instrumentation-http": "^0.215.0",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.215.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.215.0",
-    "@opentelemetry/instrumentation-pino": "^0.61.0",
-    "@opentelemetry/resources": "^2.7.0",
-    "@opentelemetry/sdk-metrics": "^2.7.0",
-    "@opentelemetry/sdk-node": "^0.215.0",
-    "@opentelemetry/sdk-trace-node": "^2.7.0",
-    "@opentelemetry/semantic-conventions": "^1.40.0",
-    "@supabase/supabase-js": "^2.103.3",
-    "better-sqlite3": "^12.0.0",
-    "chrono-node": "^2.9.0",
-    "defuddle": "^0.18.1",
+    "@duckdb/node-api": "^1.5.5-r.1",
+    "@hono/otel": "^1.1.2",
+    "@opentelemetry/instrumentation-http": "^0.221.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
+    "@opentelemetry/instrumentation-pino": "^0.66.0",
+    "@opentelemetry/resources": "^2.10.0",
+    "@opentelemetry/sdk-metrics": "^2.10.0",
+    "@opentelemetry/sdk-node": "^0.221.0",
+    "@opentelemetry/sdk-trace-node": "^2.10.0",
+    "@opentelemetry/semantic-conventions": "^1.43.0",
+    "@supabase/supabase-js": "^2.110.8",
+    "better-sqlite3": "^13.0.1",
+    "chrono-node": "^2.10.1",
+    "defuddle": "^0.19.2",
     "diff": "^9.0.0",
-    "fast-check": "^4.0.0",
+    "fast-check": "^4.9.0",
     "vitest": ">=4.0.0",
-    "fast-xml-parser": "^5.8.0",
-    "js-yaml": "^5.2.0",
-    "linkedom": "^0.18.12",
-    "node-cron": "^4.2.1",
-    "openai": "^6.34.0",
-    "papaparse": "^5.5.3",
+    "fast-xml-parser": "^5.10.1",
+    "js-yaml": "^5.2.2",
+    "linkedom": "^0.18.13",
+    "node-cron": "^4.6.0",
+    "openai": "^6.48.0",
+    "papaparse": "^5.5.4",
     "partial-json": "^0.1.7",
     "pdf-lib": "^1.17.1",
-    "sanitize-html": "^2.17.4",
-    "unpdf": "^1.6.0",
+    "sanitize-html": "^2.17.6",
+    "unpdf": "^1.6.2",
     "validator": "^13.15.35",
     "zod": "^4.4.3"
   },
@@ -426,5 +427,13 @@
     "vitest": {
       "optional": true
     }
+  },
+  "overrides": {
+    "brace-expansion": "^2.1.2",
+    "postcss": "^8.5.22",
+    "protobufjs": "^7.6.5",
+    "sharp": "^0.35.3",
+    "fast-uri": "^3.1.4",
+    "@hono/node-server": "^2.0.11"
   }
 }

package/scripts/check-dependency-specifiers.ts

@@ -12,11 +12,16 @@
  * Section-specific rules — `peer`/`optional` may legitimately float to "any
  * host version", so `*` and dist-tags are allowed there; `latest` never is:
  *
- *   | specifier                 | dependencies / devDependencies | peer / optional |
- *   |---------------------------|:------------------------------:|:---------------:|
- *   | latest                    | fail                           | fail            |
- *   | *                         | fail                           | allow           |
- *   | next / beta / canary / rc | fail                           | allow           |
+ *   | specifier                 | dependencies / devDependencies / overrides | peer / optional |
+ *   |---------------------------|:------------------------------------------:|:---------------:|
+ *   | latest                    | fail                                        | fail            |
+ *   | *                         | fail                                        | allow           |
+ *   | next / beta / canary / rc | fail                                        | allow           |
+ *
+ * `overrides` is held to the strict rule for a sharper reason than the rest: an
+ * override exists to force a transitive off a known-vulnerable version, so a
+ * floating specifier there re-resolves the very pin the entry was added to
+ * hold — the advisory silently returns while the block still looks present.
  *
  * Only the `workspaces` section of `bun.lock` is inspected — the `packages`
  * section records third-party packages' own nested declarations, which can
@@ -41,6 +46,7 @@ const DEP_SECTIONS = [
   'devDependencies',
   'peerDependencies',
   'optionalDependencies',
+  'overrides',
 ] as const;
 type DepSection = (typeof DEP_SECTIONS)[number];
 
@@ -67,7 +73,7 @@ function isFloating(specifier: string, section: DepSection): boolean {
   return spec === '*' || FLOATING_DIST_TAGS.has(spec);
 }
 
-/** Scan the four dependency sections of one manifest object. */
+/** Scan every dependency-declaring section of one manifest object. */
 function scanManifest(manifest: SectionedManifest, label: string): Offender[] {
   const offenders: Offender[] = [];
   for (const section of DEP_SECTIONS) {
@@ -138,7 +144,7 @@ function parseJsonc<T>(text: string): T {
 
 const offenders: Offender[] = [];
 
-// ── package.json (all four dependency sections) ──
+// ── package.json (every dependency-declaring section) ──
 const pkgPath = resolve(ROOT, 'package.json');
 if (existsSync(pkgPath)) {
   try {

package/scripts/clean-mcpb.ts

@@ -6,10 +6,14 @@
  *
  *   1. `mcpb clean <bundle>` — official dev-dependency prune + manifest
  *      validation (a measured real-world bundle dropped 61 MB → 12.9 MB).
- *   2. Exact-name strip of agent-doc entries nested under `node_modules/` —
- *      dependency-shipped `skills/`, `.claude/`, `.agents/` trees and stray
- *      `SKILL.md` files. Root-anchored `.mcpbignore` patterns cannot reach
- *      these by design (issues #146/#207); this is issue #230.
+ *   2. Exact-name strip of two entry classes nested under `node_modules/`,
+ *      which root-anchored `.mcpbignore` patterns cannot reach by design
+ *      (issues #146/#207):
+ *        a. Dependency-shipped agent docs — `skills/`, `.claude/`, `.agents/`
+ *           trees and stray `SKILL.md` files (issue #230).
+ *        b. Platform-specific native bindings, which would otherwise lock the
+ *           bundle to the build host's platform and push it past the 25 MB cap
+ *           registries enforce (issue #274).
  *   3. Re-list and assert zero matching entries remain.
  *
  * Entry names are passed to `zip -d` with `-nw` (no-wildcard) so they match
@@ -34,11 +38,33 @@ import { fileURLToPath } from 'node:url';
 export const AGENT_DOC_ENTRY =
   /^node_modules\/.*(?:\/skills\/|\/\.claude\/|\/\.agents\/|\/SKILL\.md$)/;
 
+/**
+ * Platform-specific native binding packages, which must not ship in a bundle.
+ * KEEP IN SYNC with `NATIVE_BINDING_ENTRY` in `scripts/lint-packaging.ts`
+ * (post-bundle content check) — a unit test asserts the two are identical.
+ *
+ * `mcpb pack` archives the whole project directory, so a native dependency
+ * contributes the build host's platform slice and nothing else — for
+ * `@duckdb/node-api` that is a ~108 MB `libduckdb` shared library. The bundle
+ * then runs only on the platform it was packed on, contradicting the
+ * cross-platform "Install in Claude Desktop" badge, and blows past the 25 MB
+ * cap registries enforce. Stripping them keeps the bundle portable and small;
+ * DuckDB is an optional peer loaded through `lazyImport`, so a server whose
+ * canvas is disabled (`CANVAS_PROVIDER_TYPE=none`, the default) is unaffected
+ * and one that enables it gets the helper's actionable install hint.
+ */
+export const NATIVE_BINDING_ENTRY = /^node_modules\/@duckdb\/node-bindings-[^/]+\//;
+
 /** Filter a bundle entry listing down to the agent-doc entries to strip. */
 export function filterAgentDocEntries(entries: string[]): string[] {
   return entries.filter((entry) => AGENT_DOC_ENTRY.test(entry));
 }
 
+/** Filter a bundle entry listing down to the native-binding entries to strip. */
+export function filterNativeBindingEntries(entries: string[]): string[] {
+  return entries.filter((entry) => NATIVE_BINDING_ENTRY.test(entry));
+}
+
 /** Listing a 12k-entry bundle exceeds execFileSync's 1 MB default buffer. */
 const MAX_LIST_BUFFER = 64 * 1024 * 1024;
 
@@ -81,35 +107,42 @@ function main(): void {
     process.exit(1);
   }
 
-  // 2. Exact-name strip of dependency-shipped agent docs.
-  let doomed: string[] = [];
+  // 2. Exact-name strip of dependency-shipped agent docs and platform natives.
+  let agentDocs: string[] = [];
+  let natives: string[] = [];
   try {
-    doomed = filterAgentDocEntries(listEntries(bundle));
+    const entries = listEntries(bundle);
+    agentDocs = filterAgentDocEntries(entries);
+    natives = filterNativeBindingEntries(entries);
+    const doomed = [...agentDocs, ...natives];
     for (let i = 0; i < doomed.length; i += DELETE_BATCH) {
       run('zip', ['-q', '-d', '-nw', bundle, ...doomed.slice(i, i + DELETE_BATCH)]);
     }
   } catch (err) {
     if ((err as NodeJS.ErrnoException).code === 'ENOENT') {
-      console.error(
-        '✗ Info-ZIP `zip`/`unzip` not found on PATH — required for the agent-doc strip.',
-      );
+      console.error('✗ Info-ZIP `zip`/`unzip` not found on PATH — required for the strip step.');
     } else {
-      console.error(`✗ Agent-doc strip failed: ${err instanceof Error ? err.message : err}`);
+      console.error(`✗ Bundle strip failed: ${err instanceof Error ? err.message : err}`);
     }
     process.exit(1);
   }
 
-  // 3. Verify: zero matching entries remain.
-  const remaining = filterAgentDocEntries(listEntries(bundle));
+  // 3. Verify: zero matching entries remain in either class.
+  const remainingEntries = listEntries(bundle);
+  const remaining = [
+    ...filterAgentDocEntries(remainingEntries),
+    ...filterNativeBindingEntries(remainingEntries),
+  ];
   if (remaining.length > 0) {
-    console.error(`✗ ${remaining.length} agent-doc entries still present after strip, e.g.:`);
+    console.error(`✗ ${remaining.length} entries still present after strip, e.g.:`);
     for (const entry of remaining.slice(0, 5)) console.error(`    ${entry}`);
     process.exit(1);
   }
 
   const sizeAfter = statSync(bundle).size;
   console.log(
-    `Bundle cleaned: ${mb(sizeBefore)} → ${mb(sizeAfter)} (${doomed.length} agent-doc entries stripped).`,
+    `Bundle cleaned: ${mb(sizeBefore)} → ${mb(sizeAfter)} ` +
+      `(${agentDocs.length} agent-doc, ${natives.length} native-binding entries stripped).`,
   );
 }
 

package/scripts/lint-packaging.ts

@@ -111,6 +111,13 @@ export const CRITICAL_RUNTIME_PATHS = [
 export const AGENT_DOC_ENTRY =
   /^node_modules\/.*(?:\/skills\/|\/\.claude\/|\/\.agents\/|\/SKILL\.md$)/;
 
+/**
+ * Platform-specific native binding packages that must not ship in a bundle.
+ * KEEP IN SYNC with `NATIVE_BINDING_ENTRY` in `scripts/clean-mcpb.ts` (the
+ * strip step this check verifies) — a unit test asserts the two are identical.
+ */
+export const NATIVE_BINDING_ENTRY = /^node_modules\/@duckdb\/node-bindings-[^/]+\//;
+
 /** The canonical in-code identity pair — both must equal the unscoped package name. */
 const IDENTITY_PAIR = ['name', 'title'] as const;
 
@@ -225,21 +232,37 @@ export async function checkBundleContent(raw: string): Promise<string[]> {
 
 /**
  * Check 8: a built bundle must contain zero `node_modules/**` agent-doc
- * entries. `scripts/clean-mcpb.ts` (wired into the `bundle` script) strips
- * them after `mcpb pack`.
+ * entries and zero platform-specific native bindings. `scripts/clean-mcpb.ts`
+ * (wired into the `bundle` script) strips both after `mcpb pack`.
  */
 export function checkBundleEntries(entries: string[], bundleLabel: string): string[] {
-  const offending = entries.filter((entry) => AGENT_DOC_ENTRY.test(entry));
-  if (offending.length === 0) return [];
-  const sample = offending
-    .slice(0, 5)
-    .map((entry) => `\n      ${entry}`)
-    .join('');
-  return [
-    `${bundleLabel} contains ${offending.length} node_modules agent-doc entries ` +
-      `(dependency-shipped skills/, .claude/, .agents/, SKILL.md) — re-run the \`bundle\` ` +
-      `script (scripts/clean-mcpb.ts strips them):${sample}`,
-  ];
+  const sampleOf = (offending: string[]) =>
+    offending
+      .slice(0, 5)
+      .map((entry) => `\n      ${entry}`)
+      .join('');
+
+  const errors: string[] = [];
+
+  const agentDocs = entries.filter((entry) => AGENT_DOC_ENTRY.test(entry));
+  if (agentDocs.length > 0) {
+    errors.push(
+      `${bundleLabel} contains ${agentDocs.length} node_modules agent-doc entries ` +
+        `(dependency-shipped skills/, .claude/, .agents/, SKILL.md) — re-run the \`bundle\` ` +
+        `script (scripts/clean-mcpb.ts strips them):${sampleOf(agentDocs)}`,
+    );
+  }
+
+  const natives = entries.filter((entry) => NATIVE_BINDING_ENTRY.test(entry));
+  if (natives.length > 0) {
+    errors.push(
+      `${bundleLabel} contains ${natives.length} platform-specific native binding entries — ` +
+        `the bundle would run only on the platform it was packed on. Re-run the \`bundle\` ` +
+        `script (scripts/clean-mcpb.ts strips them):${sampleOf(natives)}`,
+    );
+  }
+
+  return errors;
 }
 
 /**

package/skills/api-canvas/SKILL.md

@@ -4,7 +4,7 @@ description: >
   DataCanvas primitive reference — a Tier 3 SQL/analytical workspace for tabular MCP servers, backed by DuckDB. Use when registering tables from upstream APIs, running ad-hoc SQL across them, and exporting results. Covers the acquire → register → query → export flow, per-table TTL, the token-sharing pattern for multi-agent collaboration, env config, and Cloudflare Workers fail-closed behavior.
 metadata:
   author: cyanheads
-  version: "1.9"
+  version: "2.0"
   audience: external
   type: reference
 ---
@@ -205,7 +205,7 @@ const result = await instance.query("SELECT total FROM sales_by_region WHERE reg
 
 ### `instance.importFrom(sourceCanvasId, sourceTableName, options?)`
 
-Copy a table from another canvas the caller controls into this one. The lifecycle wrapper validates tenancy on both ids before the provider sees either. Round-trips through a sandbox-rooted Parquet temp file so `TIMESTAMP`/`DATE`/`BLOB` columns survive losslessly.
+Copy a table from another canvas the caller controls into this one. The lifecycle wrapper validates tenancy on both ids before the provider sees either. Round-trips through a Parquet file under the scratch root (`CANVAS_TEMP_PATH`) so `TIMESTAMP`/`DATE`/`BLOB` columns survive losslessly.
 
 ```ts
 const imported = await target.importFrom(source.canvasId, 'orders', { asName: 'orders_copy' });
@@ -222,7 +222,7 @@ Export a canvas table. Path-based exports are sandboxed to `CANVAS_EXPORT_PATH`
 // Path target — written inside the sandbox.
 await instance.export('g_with_obs', { format: 'parquet', path: 'observations.parquet' });
 
-// Stream target — copied to a temp file in the sandbox, piped to the stream, unlinked.
+// Stream target — copied to a file under the scratch root, piped to the stream, unlinked.
 await instance.export('g_with_obs', { format: 'csv', stream: writableStream });
 ```
 
@@ -274,6 +274,7 @@ If your tool surfaces row data via `structuredContent`, the JSON-safe shape flow
 | `CANVAS_PROVIDER_TYPE` | `canvas.providerType` | `none` (also: `duckdb`) |
 | `CANVAS_DEFAULT_MEMORY_LIMIT_MB` | `canvas.defaultMemoryLimitMb` | `1024` |
 | `CANVAS_EXPORT_PATH` | `canvas.exportRootPath` | `./.canvas-exports` |
+| `CANVAS_TEMP_PATH` | `canvas.tempRootPath` | `<os.tmpdir()>/mcp-canvas` |
 | `CANVAS_MAX_CANVASES_PER_TENANT` | `canvas.maxCanvasesPerTenant` | `100` |
 | `CANVAS_TTL_MS` | `canvas.ttlMs` | `86_400_000` (24 h) |
 | `CANVAS_ABSOLUTE_CAP_MS` | `canvas.absoluteCapMs` | `604_800_000` (7 d) |

package/skills/api-config/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Reference for core and server configuration in `@cyanheads/mcp-ts-core`. Covers env var tables with defaults, priority order, server-specific Zod schema pattern, and Workers lazy-parsing requirement.
 metadata:
   author: cyanheads
-  version: "1.8"
+  version: "1.9"
   audience: external
   type: reference
 ---
@@ -125,6 +125,7 @@ Activated when `OAUTH_PROXY_AUTHORIZATION_URL` or `OAUTH_PROXY_TOKEN_URL` is set
 | `CANVAS_PROVIDER_TYPE` | `canvas.providerType` | `none` | `none` \| `duckdb`. Set to `duckdb` to enable `core.canvas`. Fails closed on Cloudflare Workers (DuckDB has no V8-isolate build). |
 | `CANVAS_DEFAULT_MEMORY_LIMIT_MB` | `canvas.defaultMemoryLimitMb` | `1024` | Per-canvas DuckDB `memory_limit` PRAGMA value, in MB. |
 | `CANVAS_EXPORT_PATH` | `canvas.exportRootPath` | `./.canvas-exports` | Sandbox root for path-targeted exports. Absolute paths and `..` traversal are rejected. |
+| `CANVAS_TEMP_PATH` | `canvas.tempRootPath` | `<os.tmpdir()>/mcp-canvas` | Scratch root: DuckDB's `temp_directory` for queries that spill past `memory_limit`, plus the transient files behind stream exports and the spillover round-trip. Never resolves to the process cwd — DuckDB's own cwd-relative `.tmp` default fails on a non-root or read-only container rootfs. |
 | `CANVAS_MAX_CANVASES_PER_TENANT` | `canvas.maxCanvasesPerTenant` | `100` | Active canvas cap per tenant; throws `RateLimited` when exceeded. |
 | `CANVAS_TTL_MS` | `canvas.ttlMs` | `86400000` | Sliding TTL (24 h). Every operation extends the expiry. |
 | `CANVAS_ABSOLUTE_CAP_MS` | `canvas.absoluteCapMs` | `604800000` | Absolute cap from creation (7 d). Sliding window clamps to this. |