@drop2run/mcp 0.4.1 → 0.4.3

package/README.md

@@ -7,13 +7,18 @@ Full documentation at [dropto.run/docs/mcp](https://dropto.run/docs/mcp).
 
 ## Setup
 
+**Claude Desktop** — download [`drop2run.mcpb`](https://dropto.run/drop2run.mcpb) and open it. Claude
+shows an install dialog; that is the whole of it. No terminal, no config file to edit, and nothing to
+install first — Claude for macOS and Windows ships the node this runs on.
+
 **Claude Code** — one command:
 
 ```bash
 claude mcp add drop2run -s user -- npx -y @drop2run/mcp
 ```
 
-**Claude Desktop** — add this to `claude_desktop_config.json`, then restart the app:
+**Claude Desktop, from npm instead** — if you would rather run the published package than the bundle,
+add this to `claude_desktop_config.json` and restart the app:
 
 ```json
 {
@@ -61,6 +66,7 @@ lose it.
 | `publish_files` | Publishes files Claude wrote — a page, a markdown note, several files together |
 | `publish_dir` | Publishes a folder, given its absolute path |
 | `list_sites` | Lists the sites on the account |
+| `delete_site` | Deletes a site permanently, subdomain included — requires the subdomain repeated as `confirm` |
 
 Both publish tools take an optional `site` — a subdomain or site id to publish over. Leave it out and a
 new site is created.

package/dist/index.js

@@ -23,6 +23,26 @@ async function call(credentials, path, init = {}) {
   }
   return await response.json();
 }
+async function findSite(credentials, site) {
+  const wanted = site.trim().toLowerCase();
+  const found = (await listSites(credentials)).find(
+    (candidate) => candidate.siteId.toLowerCase() === wanted || candidate.subdomain.toLowerCase() === wanted
+  );
+  if (found === void 0) {
+    throw new Error(`No site of yours is called "${site}". \`drop2run ls\` shows what exists.`);
+  }
+  return found;
+}
+async function deleteSite(credentials, siteId) {
+  const response = await fetch(`${credentials.apiBaseUrl}/sites/${encodeURIComponent(siteId)}`, {
+    method: "DELETE",
+    headers: { Authorization: `Bearer ${credentials.token}` }
+  });
+  if (!response.ok) {
+    const problem = await response.json().catch(() => null);
+    throw new Error(problem?.detail ?? `The API answered ${response.status}.`);
+  }
+}
 async function listSites(credentials) {
   const body = await call(credentials, "sites");
   return body.sites;
@@ -1027,10 +1047,50 @@ async function signInWithCode(waitSeconds, replace = false) {
     "Call this tool again to keep waiting. Nothing has been changed yet."
   ].join("\n");
 }
-const SERVER_VERSION = "0.4.1";
+const SERVER_VERSION = "0.4.3";
+const CREDENTIAL_WRITE = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  idempotentHint: false,
+  openWorldHint: true
+};
+const REPLACES_A_SITE = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: false,
+  openWorldHint: true
+};
+const READS_ONLY = {
+  readOnlyHint: true,
+  openWorldHint: true
+};
+const PUBLISH_OUTPUT = {
+  url: z.string().describe("The live URL of the published site."),
+  siteId: z.string().describe("Identifier of the site, stable across publishes."),
+  subdomain: z.string().describe("The site's subdomain, which is what `site` accepts."),
+  files: z.number().int().describe("How many files the site now serves."),
+  unchanged: z.boolean().describe(
+    "True when every file already matched what the site served, so no new version was published."
+  )
+};
+const REMOVES_A_SITE = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: false,
+  openWorldHint: true
+};
+const SITE_OUTPUT = z.object({
+  siteId: z.string().describe("Identifier of the site."),
+  subdomain: z.string().describe("Its subdomain, which is what `site` accepts."),
+  url: z.string().describe("Its live URL."),
+  name: z.string().nullable().describe("What it is called, or null when it has no name.")
+});
 function say(text, isError = false) {
   return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
 }
+function report(text, structured) {
+  return { content: [{ type: "text", text }], structuredContent: structured };
+}
 async function withCredentials(work) {
   const credentials = loadCredentials();
   if (credentials === null) return say(missingCredentialsMessage("mcp"), true);
@@ -1038,7 +1098,8 @@ async function withCredentials(work) {
 }
 async function attempt(work) {
   try {
-    return say(await work());
+    const answer = await work();
+    return typeof answer === "string" ? say(answer) : answer;
   } catch (error) {
     return say(error instanceof Error ? error.message : String(error), true);
   }
@@ -1074,7 +1135,11 @@ function createServer() {
         "opened, login_code gives a short code to approve from another machine.",
         "",
         "Publishing over an existing site replaces what it serves, so ask before doing that to a",
-        "site the person did not name."
+        "site the person did not name.",
+        "",
+        "delete_site is permanent and frees the subdomain for anybody to claim. Ask the person for",
+        "the subdomain and pass what they say as `confirm` — do not fill it in from what you already",
+        "know, because being told it is the point of the step."
       ].join("\n")
     }
   );
@@ -1088,7 +1153,8 @@ function createServer() {
         replace: z.boolean().optional().describe(
           "Sign in even though a token is already stored. Use when switching accounts, or when the stored token is being refused."
         )
-      }
+      },
+      annotations: CREDENTIAL_WRITE
     },
     ({ waitSeconds, replace }) => attempt(() => signInWithBrowser(waitSeconds, replace))
   );
@@ -1100,7 +1166,8 @@ function createServer() {
       inputSchema: {
         waitSeconds: z.number().int().min(5).max(MAX_WAIT_SECONDS).optional().describe("How long a waiting call polls before answering. Default 120."),
         replace: z.boolean().optional().describe("Sign in even though a token is already stored.")
-      }
+      },
+      annotations: CREDENTIAL_WRITE
     },
     ({ waitSeconds, replace }) => attempt(() => signInWithCode(waitSeconds, replace))
   );
@@ -1117,11 +1184,14 @@ function createServer() {
           })
         ).min(1).describe("The files to publish."),
         site: z.string().optional().describe("Subdomain or site id to publish over. Omit to create a new site.")
-      }
+      },
+      outputSchema: PUBLISH_OUTPUT,
+      annotations: REPLACES_A_SITE
     },
-    ({ files, site }) => withCredentials(
-      async (credentials) => describe(await publishFiles(credentials, files, site))
-    )
+    ({ files, site }) => withCredentials(async (credentials) => {
+      const result = await publishFiles(credentials, files, site);
+      return report(describe(result), { ...result });
+    })
   );
   server.registerTool(
     "publish_dir",
@@ -1131,25 +1201,61 @@ function createServer() {
       inputSchema: {
         path: z.string().min(1).describe("Absolute path of the folder to publish."),
         site: z.string().optional().describe("Subdomain or site id to publish over. Omit to create a new site.")
-      }
+      },
+      outputSchema: PUBLISH_OUTPUT,
+      annotations: REPLACES_A_SITE
     },
-    ({ path, site }) => withCredentials(
-      async (credentials) => describe(await publishDirectory(credentials, path, site))
-    )
+    ({ path, site }) => withCredentials(async (credentials) => {
+      const result = await publishDirectory(credentials, path, site);
+      return report(describe(result), { ...result });
+    })
+  );
+  server.registerTool(
+    "delete_site",
+    {
+      title: "Delete a site",
+      description: "Takes a site down permanently — its files, its history and its subdomain. Nothing here undoes it, and the subdomain becomes available for anybody to claim. Requires `confirm` to repeat the site's own subdomain exactly; ask the person for it rather than filling it in from what you already know, because that is the step this asks for.",
+      inputSchema: {
+        site: z.string().min(1).describe("Subdomain or site id to delete."),
+        confirm: z.string().min(1).describe(
+          "The subdomain of the site being deleted, repeated exactly. A mismatch refuses the call rather than guessing which site was meant."
+        )
+      },
+      outputSchema: {
+        siteId: z.string().describe("Identifier of the site that was deleted."),
+        subdomain: z.string().describe("Its subdomain, now unclaimed.")
+      },
+      annotations: REMOVES_A_SITE
+    },
+    ({ site, confirm }) => withCredentials(async (credentials) => {
+      const found = await findSite(credentials, site);
+      if (confirm.trim().toLowerCase() !== found.subdomain.toLowerCase()) {
+        throw new Error(
+          `Refusing to delete ${found.subdomain}: \`confirm\` said "${confirm}". Repeat the subdomain exactly to go ahead.`
+        );
+      }
+      await deleteSite(credentials, found.siteId);
+      return report(
+        `Deleted ${found.subdomain}. Its files and history are gone, and the subdomain is free for anybody to claim.`,
+        { siteId: found.siteId, subdomain: found.subdomain }
+      );
+    })
   );
   server.registerTool(
     "list_sites",
     {
       title: "List sites",
       description: "Lists the sites on this account, so a publish can go to one of them.",
-      inputSchema: {}
+      inputSchema: {},
+      outputSchema: { sites: z.array(SITE_OUTPUT).describe("Every site on this account.") },
+      annotations: READS_ONLY
     },
     () => withCredentials(async (credentials) => {
       const sites = await listSites(credentials);
-      if (sites.length === 0) {
-        return "No sites on this account yet. Publishing without a `site` creates one.";
-      }
-      return sites.map((site) => `${site.subdomain} — ${site.url}${site.name ? ` — ${site.name}` : ""}`).join("\n");
+      const text = sites.length === 0 ? "No sites on this account yet. Publishing without a `site` creates one." : sites.map(
+        (site) => `${site.subdomain} — ${site.url}${site.name ? ` — ${site.name}` : ""}`
+      ).join("\n");
+      return report(text, { sites: sites.map((site) => ({ ...site })) });
     })
   );
   return server;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@drop2run/mcp",
-	"version": "0.4.1",
+	"version": "0.4.3",
 	"description": "MCP server that publishes a folder or an HTML page to Drop2Run and returns a live URL.",
 	"mcpName": "run.dropto/drop2run",
 	"license": "MIT",
@@ -42,7 +42,8 @@
 		"test": "vitest run",
 		"lint": "biome check .",
 		"format": "biome check --write .",
-		"build": "vite build"
+		"build": "vite build",
+		"build:mcpb": "node scripts/build-mcpb.mjs"
 	},
 	"dependencies": {
 		"@modelcontextprotocol/sdk": "^1.30.0",