@drop2run/mcp 0.4.2 → 0.5.0

package/README.md

@@ -66,10 +66,17 @@ lose it.
 | `publish_files` | Publishes files Claude wrote — a page, a markdown note, several files together |
 | `publish_dir` | Publishes a folder, given its absolute path |
 | `list_sites` | Lists the sites on the account |
+| `delete_site` | Deletes a site permanently, subdomain included — requires the subdomain repeated as `confirm` |
 
 Both publish tools take an optional `site` — a subdomain or site id to publish over. Leave it out and a
 new site is created.
 
+Both also take an optional `subdomain`, which names the new site instead of letting the server generate
+one. It is for a person who asked for a particular address: the name becomes the URL, cannot be changed
+afterwards, and a site made under a guessed one has to be deleted by hand. `site` and `subdomain` are
+opposites — one publishes over a site that exists, the other creates one that does not — so passing both
+is refused rather than resolved.
+
 Both sign-in tools answer "not approved yet" rather than failing while they wait, and calling them
 again keeps waiting on the same sign-in. Neither replaces a token that is already stored unless asked
 to with `replace`.
@@ -77,7 +84,9 @@ to with `replace`.
 ## Behaviour worth knowing
 
 **Publishing without a `site` creates a new one.** It never replaces your most recent site by default:
-"put this online" is not "and overwrite what I published last time".
+"put this online" is not "and overwrite what I published last time". Say what address you want and pass
+it as `subdomain`; say nothing and the name is generated, which is the right default for something
+nobody is going to link to.
 
 **A site can be documents instead of a built site.** A publish needs an `index.html` at the top level,
 or at least one `.md`, `.markdown` or `.pdf` file — those are served through the reader. So a single

package/dist/index.js

@@ -23,15 +23,41 @@ async function call(credentials, path, init = {}) {
   }
   return await response.json();
 }
+async function findSite(credentials, site) {
+  const wanted = site.trim().toLowerCase();
+  const found = (await listSites(credentials)).find(
+    (candidate) => candidate.siteId.toLowerCase() === wanted || candidate.subdomain.toLowerCase() === wanted
+  );
+  if (found === void 0) {
+    throw new Error(`No site of yours is called "${site}". \`drop2run ls\` shows what exists.`);
+  }
+  return found;
+}
+async function deleteSite(credentials, siteId) {
+  const response = await fetch(`${credentials.apiBaseUrl}/sites/${encodeURIComponent(siteId)}`, {
+    method: "DELETE",
+    headers: { Authorization: `Bearer ${credentials.token}` }
+  });
+  if (!response.ok) {
+    const problem = await response.json().catch(() => null);
+    throw new Error(problem?.detail ?? `The API answered ${response.status}.`);
+  }
+}
 async function listSites(credentials) {
   const body = await call(credentials, "sites");
   return body.sites;
 }
-async function createSite(credentials) {
+async function createSite(credentials, subdomain) {
   const created = await call(
     credentials,
     "sites",
-    { method: "POST", body: JSON.stringify({}) }
+    {
+      method: "POST",
+      // An absent field rather than a null one, because the API reads null, empty and missing the
+      // same way and a body carrying only what was asked for is the one that reads correctly in a
+      // log.
+      body: JSON.stringify(subdomain === void 0 ? {} : { subdomain })
+    }
   );
   return { ...created, name: null };
 }
@@ -284,6 +310,7 @@ const ClientErrorCode = {
   /** An upload kept failing after every retry. */
   UploadFailed: "upload_failed"
 };
+const ACCOUNT_HEADER = "X-Drop2Run-Account";
 const CLAIM_TOKEN_HEADER = "X-Claim-Token";
 async function prepareDeploy(siteId, files, options, signal) {
   const manifest = files.map((file) => ({
@@ -320,6 +347,7 @@ async function request(path, body, options, signal) {
   if (body !== void 0) headers["Content-Type"] = "application/json";
   if (options.claimToken) headers[CLAIM_TOKEN_HEADER] = options.claimToken;
   if (options.token) headers.Authorization = `Bearer ${options.token}`;
+  if (options.accountId) headers[ACCOUNT_HEADER] = options.accountId;
   const response = await doFetch(`${base}/${path}`, {
     method: "POST",
     headers,
@@ -613,7 +641,7 @@ async function uploadAll(targets, uploadUrl, files, onProgress, signal, deps = {
       });
       done += 1;
       uploadedBytes += file.bytes.length;
-      onProgress?.(done, targets.length, uploadedBytes);
+      onProgress?.(done, targets.length, uploadedBytes, file.path);
     }
   };
   const workers = Array.from(
@@ -708,12 +736,13 @@ async function deploy(source, siteId, onProgress, signal, options = {}) {
       prepared.upload,
       prepared.uploadUrl,
       hashed,
-      (done, _total, bytes) => onProgress({
+      (done, _total, bytes, path) => onProgress({
         type: "uploading",
         done: prepared.reused + done,
         total: prepared.total,
         bytes,
-        reused: prepared.reused
+        reused: prepared.reused,
+        path
       }),
       signal,
       options.upload
@@ -779,7 +808,15 @@ function escapesRoot(root, candidate) {
   const inside = relative(root, candidate);
   return inside === "" || inside.startsWith("..");
 }
-async function resolveSite(credentials, site) {
+async function resolveSite(credentials, site, subdomain) {
+  if (subdomain !== void 0) {
+    if (site !== void 0) {
+      throw new Error(
+        "Give either an existing site or a subdomain for a new one, not both: publishing over a site and creating one are different requests."
+      );
+    }
+    return await createSite(credentials, subdomain);
+  }
   if (site === void 0) return await createSite(credentials);
   const wanted = site.trim().toLowerCase();
   const found = (await listSites(credentials)).find(
@@ -787,13 +824,13 @@ async function resolveSite(credentials, site) {
   );
   if (found === void 0) {
     throw new Error(
-      `No site of yours is called "${site}". Leave the site out to publish to a new one, or use list_sites to see what exists.`
+      `No site of yours is called "${site}". Leave the site out to publish to a new one, or list your sites to see what exists.`
     );
   }
   return found;
 }
-async function publish(credentials, source, site) {
-  const target = await resolveSite(credentials, site);
+async function publish(credentials, source, site, onProgress, subdomain) {
+  const target = await resolveSite(credentials, site, subdomain);
   let files = 0;
   let url = target.url;
   let unchanged = false;
@@ -823,8 +860,8 @@ async function publish(credentials, source, site) {
   });
   return { url, siteId: target.siteId, subdomain: target.subdomain, files, unchanged };
 }
-function publishDirectory(credentials, directory, site) {
-  return publish(credentials, directorySource(directory), site);
+function publishDirectory(credentials, directory, site, onProgress, subdomain) {
+  return publish(credentials, directorySource(directory), site, onProgress, subdomain);
 }
 function cleanPath(path) {
   const cleaned = path.trim().replaceAll("\\", "/").replace(/^\.?\//, "");
@@ -838,7 +875,7 @@ function cleanPath(path) {
   }
   return cleaned;
 }
-async function publishFiles(credentials, files, site) {
+async function publishFiles(credentials, files, site, subdomain) {
   const encoder = new TextEncoder();
   const collected = files.map((file) => ({
     path: cleanPath(file.path),
@@ -849,7 +886,7 @@ async function publishFiles(credentials, files, site) {
     if (seen.has(file.path)) throw new Error(`Two files were given the same path: ${file.path}`);
     seen.add(file.path);
   }
-  return publish(credentials, async () => collected, site);
+  return publish(credentials, async () => collected, site, void 0, subdomain);
 }
 const DEFAULT_WAIT_SECONDS = 120;
 const MAX_WAIT_SECONDS = 240;
@@ -1027,7 +1064,7 @@ async function signInWithCode(waitSeconds, replace = false) {
     "Call this tool again to keep waiting. Nothing has been changed yet."
   ].join("\n");
 }
-const SERVER_VERSION = "0.4.2";
+const SERVER_VERSION = "0.5.0";
 const CREDENTIAL_WRITE = {
   readOnlyHint: false,
   destructiveHint: false,
@@ -1044,9 +1081,33 @@ const READS_ONLY = {
   readOnlyHint: true,
   openWorldHint: true
 };
+const PUBLISH_OUTPUT = {
+  url: z.string().describe("The live URL of the published site."),
+  siteId: z.string().describe("Identifier of the site, stable across publishes."),
+  subdomain: z.string().describe("The site's subdomain, which is what `site` accepts."),
+  files: z.number().int().describe("How many files the site now serves."),
+  unchanged: z.boolean().describe(
+    "True when every file already matched what the site served, so no new version was published."
+  )
+};
+const REMOVES_A_SITE = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: false,
+  openWorldHint: true
+};
+const SITE_OUTPUT = z.object({
+  siteId: z.string().describe("Identifier of the site."),
+  subdomain: z.string().describe("Its subdomain, which is what `site` accepts."),
+  url: z.string().describe("Its live URL."),
+  name: z.string().nullable().describe("What it is called, or null when it has no name.")
+});
 function say(text, isError = false) {
   return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
 }
+function report(text, structured) {
+  return { content: [{ type: "text", text }], structuredContent: structured };
+}
 async function withCredentials(work) {
   const credentials = loadCredentials();
   if (credentials === null) return say(missingCredentialsMessage("mcp"), true);
@@ -1054,7 +1115,8 @@ async function withCredentials(work) {
 }
 async function attempt(work) {
   try {
-    return say(await work());
+    const answer = await work();
+    return typeof answer === "string" ? say(answer) : answer;
   } catch (error) {
     return say(error instanceof Error ? error.message : String(error), true);
   }
@@ -1081,6 +1143,12 @@ function createServer() {
         "publish to a brand-new site; pass a subdomain to publish over an existing one. list_sites",
         "shows what already exists.",
         "",
+        "A new site gets a generated name unless `subdomain` asks for one. Pass it when the person",
+        "named the address they want, and otherwise leave it out — a name is what somebody will be",
+        "given as a URL, it cannot be changed later, and a site created under a guessed one has to",
+        "be deleted by hand. `site` and `subdomain` are opposites: one publishes over a site that",
+        "exists, the other creates one that does not. Never pass both.",
+        "",
         "A site needs an index.html at its top level, or at least one .md, .markdown or .pdf file,",
         "which publishes as a documents site and is read through a viewer. So one page goes at",
         "index.html, and a single note is a whole publish that needs no wrapping in HTML.",
@@ -1090,7 +1158,11 @@ function createServer() {
         "opened, login_code gives a short code to approve from another machine.",
         "",
         "Publishing over an existing site replaces what it serves, so ask before doing that to a",
-        "site the person did not name."
+        "site the person did not name.",
+        "",
+        "delete_site is permanent and frees the subdomain for anybody to claim. Ask the person for",
+        "the subdomain and pass what they say as `confirm` — do not fill it in from what you already",
+        "know, because being told it is the point of the step."
       ].join("\n")
     }
   );
@@ -1134,13 +1206,18 @@ function createServer() {
             content: z.string().describe("The file's contents.")
           })
         ).min(1).describe("The files to publish."),
-        site: z.string().optional().describe("Subdomain or site id to publish over. Omit to create a new site.")
+        site: z.string().optional().describe("Subdomain or site id to publish over. Omit to create a new site."),
+        subdomain: z.string().optional().describe(
+          "Subdomain to create the new site under, when the person asked for a particular address. Only for a new site: leave it out to publish over an existing one, and do not pass it together with `site`. Ask rather than inventing one — the name is the URL somebody will be given, it cannot be changed afterwards, and an unused site made under a guessed name has to be deleted by hand."
+        )
       },
+      outputSchema: PUBLISH_OUTPUT,
       annotations: REPLACES_A_SITE
     },
-    ({ files, site }) => withCredentials(
-      async (credentials) => describe(await publishFiles(credentials, files, site))
-    )
+    ({ files, site, subdomain }) => withCredentials(async (credentials) => {
+      const result = await publishFiles(credentials, files, site, subdomain);
+      return report(describe(result), { ...result });
+    })
   );
   server.registerTool(
     "publish_dir",
@@ -1149,13 +1226,49 @@ function createServer() {
       description: "Publishes a folder of static files and returns its URL. The folder needs an index.html at its root, or .md and .pdf files, which are served through the reader.",
       inputSchema: {
         path: z.string().min(1).describe("Absolute path of the folder to publish."),
-        site: z.string().optional().describe("Subdomain or site id to publish over. Omit to create a new site.")
+        site: z.string().optional().describe("Subdomain or site id to publish over. Omit to create a new site."),
+        subdomain: z.string().optional().describe(
+          "Subdomain to create the new site under, when the person asked for a particular address. Only for a new site: leave it out to publish over an existing one, and do not pass it together with `site`. Ask rather than inventing one — the name is the URL somebody will be given, it cannot be changed afterwards, and an unused site made under a guessed name has to be deleted by hand."
+        )
       },
+      outputSchema: PUBLISH_OUTPUT,
       annotations: REPLACES_A_SITE
     },
-    ({ path, site }) => withCredentials(
-      async (credentials) => describe(await publishDirectory(credentials, path, site))
-    )
+    ({ path, site, subdomain }) => withCredentials(async (credentials) => {
+      const result = await publishDirectory(credentials, path, site, void 0, subdomain);
+      return report(describe(result), { ...result });
+    })
+  );
+  server.registerTool(
+    "delete_site",
+    {
+      title: "Delete a site",
+      description: "Takes a site down permanently — its files, its history and its subdomain. Nothing here undoes it, and the subdomain becomes available for anybody to claim. Requires `confirm` to repeat the site's own subdomain exactly; ask the person for it rather than filling it in from what you already know, because that is the step this asks for.",
+      inputSchema: {
+        site: z.string().min(1).describe("Subdomain or site id to delete."),
+        confirm: z.string().min(1).describe(
+          "The subdomain of the site being deleted, repeated exactly. A mismatch refuses the call rather than guessing which site was meant."
+        )
+      },
+      outputSchema: {
+        siteId: z.string().describe("Identifier of the site that was deleted."),
+        subdomain: z.string().describe("Its subdomain, now unclaimed.")
+      },
+      annotations: REMOVES_A_SITE
+    },
+    ({ site, confirm }) => withCredentials(async (credentials) => {
+      const found = await findSite(credentials, site);
+      if (confirm.trim().toLowerCase() !== found.subdomain.toLowerCase()) {
+        throw new Error(
+          `Refusing to delete ${found.subdomain}: \`confirm\` said "${confirm}". Repeat the subdomain exactly to go ahead.`
+        );
+      }
+      await deleteSite(credentials, found.siteId);
+      return report(
+        `Deleted ${found.subdomain}. Its files and history are gone, and the subdomain is free for anybody to claim.`,
+        { siteId: found.siteId, subdomain: found.subdomain }
+      );
+    })
   );
   server.registerTool(
     "list_sites",
@@ -1163,14 +1276,15 @@ function createServer() {
       title: "List sites",
       description: "Lists the sites on this account, so a publish can go to one of them.",
       inputSchema: {},
+      outputSchema: { sites: z.array(SITE_OUTPUT).describe("Every site on this account.") },
       annotations: READS_ONLY
     },
     () => withCredentials(async (credentials) => {
       const sites = await listSites(credentials);
-      if (sites.length === 0) {
-        return "No sites on this account yet. Publishing without a `site` creates one.";
-      }
-      return sites.map((site) => `${site.subdomain} — ${site.url}${site.name ? ` — ${site.name}` : ""}`).join("\n");
+      const text = sites.length === 0 ? "No sites on this account yet. Publishing without a `site` creates one." : sites.map(
+        (site) => `${site.subdomain} — ${site.url}${site.name ? ` — ${site.name}` : ""}`
+      ).join("\n");
+      return report(text, { sites: sites.map((site) => ({ ...site })) });
     })
   );
   return server;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@drop2run/mcp",
-	"version": "0.4.2",
+	"version": "0.5.0",
 	"description": "MCP server that publishes a folder or an HTML page to Drop2Run and returns a live URL.",
 	"mcpName": "run.dropto/drop2run",
 	"license": "MIT",