@ductape/mcp 0.1.4 → 0.1.6

package/dist/index.js

@@ -31,20 +31,39 @@ There are THREE categories of operations. Use the right tool for each:
        These require an access key and CANNOT be done via ductape_execute (publishable key only).
        → Use ductape_cli instead. Examples:
            ductape_cli("products list")
-           ductape_cli("product create --name \\"My Product\\" --tag my-product")
-           ductape_cli("environments list my-product")
+           ductape_cli("products create --name \\"My Product\\" --tag my-product")
            ductape_cli("cloud connections list")
+           ductape_cli("link --product my-product --env dev")
        If the CLI is not installed, ductape_cli will return install instructions automatically.
+       NOTE: Environments and app actions are configured in the Workbench UI — there are no CLI commands for them.
+
+       DECLARATIVE SYNC  (apply sessions, notifications, events from code; run DB migrations)
+       → Also use ductape_cli. The project must be linked first (ductape init --link).
+           ductape_cli("apply")                        # sync all: sessions + notifications + events
+           ductape_cli("apply sessions")               # sessions only
+           ductape_cli("apply notifications")          # notifications only
+           ductape_cli("apply events")                 # event brokers only
+           ductape_cli("apply --dry-run")              # preview without changes
+           ductape_cli("db schema generate")           # diff schema.json → write migration files
+           ductape_cli("db schema generate --destructive")  # also generate drop operations
+           ductape_cli("db migrate")                   # apply pending migration files
+           ductape_cli("db migrate --dry-run")         # preview without applying
+           ductape_cli("db migrate --env prd")         # apply to a specific environment
+           ductape_cli("db migrate status")            # show applied vs pending migrations
+           ductape_cli("db migrate status --json")     # machine-readable status
+           ductape_cli("db migrate rollback")          # roll back last migration
+           ductape_cli("db migrate rollback -n 3")     # roll back last 3 migrations
 
   1. ASSET CREATION / UPDATE  (create, update, add, register… for ANY asset type)
        ALL creation and update operations require an access key and CANNOT go through ductape_execute.
        → Use ductape_cli for every create/update operation. Examples:
-           ductape_cli("app create --name \\"Email Service\\" --description \\"Transactional email\\"")
+           ductape_cli("apps create --name \\"Email Service\\" --description \\"Transactional email\\"")
            ductape_cli("apps list")
-           ductape_cli("actions list my-app-tag")
-       This applies to: products, apps, actions, auths, environments, databases, storage,
-       graphs, vectors, brokers, sessions, notifications, jobs, features, quotas, fallbacks,
-       healthchecks, caches, secrets, and webhooks.
+           ductape_cli("resources storage list")
+           ductape_cli("resources database create -f db-config.json")
+       This applies to: products, apps, and resources (databases, storage, caches, etc.),
+       cloud connections, and secrets. Environments, app actions, auths, features, quotas,
+       fallbacks, jobs, and healthchecks are configured in the Workbench UI.
 
   2. RUNTIME OPERATIONS  (run, dispatch, execute, start, send, produce, query, insert, update, delete…)
        The "input" field shape is product- and operation-specific — it is NOT derivable from Joi validators.
@@ -787,28 +806,22 @@ function buildSnippet(language, payload, operationFamily, method) {
         : buildTypeScriptSnippet(payload, operationFamily, method);
 }
 // ─── CLI helpers ─────────────────────────────────────────────────────────────
+// Per-process cache: avoids re-running whoami / workspaces use on every call.
+let authState = 'unknown';
+let workspaceSynced = false;
 const ADMIN_SUBCOMMANDS = [
-    'products', 'product',
-    'apps', 'app',
-    'workspaces', 'workspace',
-    'environments', 'environment',
+    'login', 'logout', 'whoami',
+    'profiles',
+    'workspaces',
+    'link', 'unlink', 'init',
+    'products', 'apps',
+    'resources',
     'cloud',
     'secrets',
-    'databases',
-    'storage',
-    'graphs',
-    'vectors',
-    'brokers',
-    'notifications',
-    'sessions',
-    'caches',
-    'jobs',
     'generate',
-    'resources',
-    'init',
-    'login',
-    'logout',
-    'whoami',
+    'apply',
+    'db',
+    'graph',
 ];
 function checkCli() {
     try {
@@ -819,6 +832,29 @@ function checkCli() {
         return { available: false };
     }
 }
+function checkLoginState() {
+    try {
+        execSync('ductape whoami --json', { encoding: 'utf8', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] });
+        authState = 'ok';
+        return 'ok';
+    }
+    catch {
+        authState = 'none';
+        return 'none';
+    }
+}
+function syncWorkspace() {
+    const target = process.env.DUCTAPE_WORKSPACE;
+    workspaceSynced = true; // mark done regardless so we don't retry on every call
+    if (!target)
+        return;
+    try {
+        execSync(`ductape workspaces use "${target}"`, { encoding: 'utf8', timeout: 10000, stdio: ['pipe', 'pipe', 'pipe'] });
+    }
+    catch {
+        // best-effort; if it fails the user will see workspace-mismatch errors on subsequent commands
+    }
+}
 function runCli(command) {
     const first = command.trim().split(/\s+/)[0];
     if (!ADMIN_SUBCOMMANDS.includes(first)) {
@@ -827,8 +863,14 @@ function runCli(command) {
             output: `Subcommand "${first}" is not in the allowed admin subcommand list. Allowed: ${ADMIN_SUBCOMMANDS.join(', ')}.`,
         };
     }
+    // Auto-inject --workspace on login if DUCTAPE_WORKSPACE is set and caller hasn't specified one
+    let finalCommand = command;
+    const ws = process.env.DUCTAPE_WORKSPACE;
+    if (first === 'login' && ws && !command.includes('--workspace') && !command.includes('--skip-workspace-select')) {
+        finalCommand = `${command} --workspace "${ws}"`;
+    }
     try {
-        const output = execSync(`ductape ${command}`, {
+        const output = execSync(`ductape ${finalCommand}`, {
             encoding: 'utf8',
             timeout: 30000,
             stdio: ['pipe', 'pipe', 'pipe'],
@@ -842,10 +884,14 @@ function runCli(command) {
 }
 const cliInputSchema = z.object({
     command: z.string().describe('The ductape CLI command to run, without the leading "ductape" word. ' +
-        'Examples: "products list", "product create --name \\"My Product\\" --tag my-product", ' +
-        '"environments list my-product", "cloud connections list".\n\n' +
-        'Use this tool for ALL administrative operations: creating or updating products, apps, ' +
-        'environments, resources, cloud connections, and workspace configuration.\n\n' +
+        'Examples: "products list", "products create --name \\"My Product\\" --tag my-product", ' +
+        '"apps list", "apps create -f app.json", "resources storage list", ' +
+        '"cloud connections list", "link --product my-product --env dev".\n\n' +
+        'Use this tool for administrative operations: creating or updating products, apps, ' +
+        'resources (databases, storage, caches…), cloud connections, secrets, ' +
+        'and for apply/migrate workflows.\n\n' +
+        'Note: environments, app actions, features, quotas, fallbacks, and jobs are configured ' +
+        'in the Workbench UI — there are no CLI commands for them.\n\n' +
         'The CLI uses the user\'s local logged-in session (ductape login) — no key is required.'),
 });
 async function loadMcpSdk() {
@@ -923,7 +969,45 @@ async function main() {
                 isError: true,
             };
         }
+        const firstWord = args.command.trim().split(/\s+/)[0];
+        const isAuthCommand = firstWord === 'login' || firstWord === 'logout';
+        if (!isAuthCommand) {
+            // Check login status once per process (cached after first call)
+            if (authState === 'unknown') {
+                checkLoginState();
+            }
+            if (authState === 'none') {
+                const wsFlag = process.env.DUCTAPE_WORKSPACE ? ` --workspace "${process.env.DUCTAPE_WORKSPACE}"` : '';
+                return {
+                    content: [{
+                            type: 'text',
+                            text: [
+                                'Not logged in to the Ductape CLI.',
+                                '',
+                                'Ask the user for their Ductape email and password, then call:',
+                                `  ductape_cli("login --email <email> --password <password>${wsFlag}")`,
+                                '',
+                                'Or the user can run `ductape login` in their terminal and then retry.',
+                            ].join('\n'),
+                        }],
+                    isError: true,
+                };
+            }
+            // Sync to the configured workspace once per process (best-effort)
+            if (!workspaceSynced) {
+                syncWorkspace();
+            }
+        }
         const result = runCli(args.command);
+        // Update cached state after auth commands
+        if (firstWord === 'login' && result.success) {
+            authState = 'ok';
+            workspaceSynced = false; // re-sync workspace after fresh login
+        }
+        if (firstWord === 'logout' && result.success) {
+            authState = 'none';
+            workspaceSynced = false;
+        }
         return {
             content: [{ type: 'text', text: result.output || '(no output)' }],
             ...(result.success ? {} : { isError: true }),
@@ -1035,11 +1119,17 @@ async function main() {
             title: 'Ductape CLI',
             description: 'Run a Ductape CLI command for administrative operations.\n\n' +
                 'USE THIS TOOL for any operation that creates or modifies platform configuration:\n' +
-                '  - Creating or updating products, apps, environments\n' +
-                '  - Managing cloud connections and resources\n' +
+                '  - Creating or updating products (products create/update) and apps (apps create/update)\n' +
+                '  - Importing an app from a Postman v2.1 or OpenAPI 3.0 file: "apps import <file> -t postman|openapi"\n' +
+                '  - Managing resources via "resources <type> <verb>" (databases, storage, caches…)\n' +
+                '  - Managing cloud connections and cloud-linked resources\n' +
                 '  - Listing workspaces, products, secrets\n' +
-                '  - Any operation that would require an access key via the SDK\n\n' +
-                'DO NOT use ductape_execute for these — it uses a publishable key which only ' +
+                '  - Linking a project folder: "link --product <tag> --env <slug>"\n' +
+                '  - Syncing sessions/notifications/events: "apply" or "apply sessions" etc.\n' +
+                '  - Running database migrations: "db migrate", "db schema generate"\n\n' +
+                'NOTE: Environments, app actions, auths, features, quotas, fallbacks, and jobs are ' +
+                'configured in the Workbench UI — the CLI does not have commands for them.\n\n' +
+                'DO NOT use ductape_execute for admin operations — it uses a publishable key which only ' +
                 'covers runtime operations. Administrative operations will fail with "Authentication failed".\n\n' +
                 'The CLI uses the user\'s local logged-in session (ductape login). ' +
                 'If the CLI is not installed, this tool will return install instructions automatically.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ductape/mcp",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "MCP server that exposes Ductape SDK operations via the backend proxy",
   "type": "module",
   "main": "dist/index.js",

package/src/index.ts

@@ -42,20 +42,39 @@ There are THREE categories of operations. Use the right tool for each:
        These require an access key and CANNOT be done via ductape_execute (publishable key only).
        → Use ductape_cli instead. Examples:
            ductape_cli("products list")
-           ductape_cli("product create --name \\"My Product\\" --tag my-product")
-           ductape_cli("environments list my-product")
+           ductape_cli("products create --name \\"My Product\\" --tag my-product")
            ductape_cli("cloud connections list")
+           ductape_cli("link --product my-product --env dev")
        If the CLI is not installed, ductape_cli will return install instructions automatically.
+       NOTE: Environments and app actions are configured in the Workbench UI — there are no CLI commands for them.
+
+       DECLARATIVE SYNC  (apply sessions, notifications, events from code; run DB migrations)
+       → Also use ductape_cli. The project must be linked first (ductape init --link).
+           ductape_cli("apply")                        # sync all: sessions + notifications + events
+           ductape_cli("apply sessions")               # sessions only
+           ductape_cli("apply notifications")          # notifications only
+           ductape_cli("apply events")                 # event brokers only
+           ductape_cli("apply --dry-run")              # preview without changes
+           ductape_cli("db schema generate")           # diff schema.json → write migration files
+           ductape_cli("db schema generate --destructive")  # also generate drop operations
+           ductape_cli("db migrate")                   # apply pending migration files
+           ductape_cli("db migrate --dry-run")         # preview without applying
+           ductape_cli("db migrate --env prd")         # apply to a specific environment
+           ductape_cli("db migrate status")            # show applied vs pending migrations
+           ductape_cli("db migrate status --json")     # machine-readable status
+           ductape_cli("db migrate rollback")          # roll back last migration
+           ductape_cli("db migrate rollback -n 3")     # roll back last 3 migrations
 
   1. ASSET CREATION / UPDATE  (create, update, add, register… for ANY asset type)
        ALL creation and update operations require an access key and CANNOT go through ductape_execute.
        → Use ductape_cli for every create/update operation. Examples:
-           ductape_cli("app create --name \\"Email Service\\" --description \\"Transactional email\\"")
+           ductape_cli("apps create --name \\"Email Service\\" --description \\"Transactional email\\"")
            ductape_cli("apps list")
-           ductape_cli("actions list my-app-tag")
-       This applies to: products, apps, actions, auths, environments, databases, storage,
-       graphs, vectors, brokers, sessions, notifications, jobs, features, quotas, fallbacks,
-       healthchecks, caches, secrets, and webhooks.
+           ductape_cli("resources storage list")
+           ductape_cli("resources database create -f db-config.json")
+       This applies to: products, apps, and resources (databases, storage, caches, etc.),
+       cloud connections, and secrets. Environments, app actions, auths, features, quotas,
+       fallbacks, jobs, and healthchecks are configured in the Workbench UI.
 
   2. RUNTIME OPERATIONS  (run, dispatch, execute, start, send, produce, query, insert, update, delete…)
        The "input" field shape is product- and operation-specific — it is NOT derivable from Joi validators.
@@ -831,28 +850,23 @@ function buildSnippet(
 
 // ─── CLI helpers ─────────────────────────────────────────────────────────────
 
+// Per-process cache: avoids re-running whoami / workspaces use on every call.
+let authState: 'unknown' | 'ok' | 'none' = 'unknown';
+let workspaceSynced = false;
+
 const ADMIN_SUBCOMMANDS = [
-  'products', 'product',
-  'apps', 'app',
-  'workspaces', 'workspace',
-  'environments', 'environment',
+  'login', 'logout', 'whoami',
+  'profiles',
+  'workspaces',
+  'link', 'unlink', 'init',
+  'products', 'apps',
+  'resources',
   'cloud',
   'secrets',
-  'databases',
-  'storage',
-  'graphs',
-  'vectors',
-  'brokers',
-  'notifications',
-  'sessions',
-  'caches',
-  'jobs',
   'generate',
-  'resources',
-  'init',
-  'login',
-  'logout',
-  'whoami',
+  'apply',
+  'db',
+  'graph',
 ];
 
 function checkCli(): { available: boolean; version?: string } {
@@ -864,6 +878,28 @@ function checkCli(): { available: boolean; version?: string } {
   }
 }
 
+function checkLoginState(): 'ok' | 'none' {
+  try {
+    execSync('ductape whoami --json', { encoding: 'utf8', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] });
+    authState = 'ok';
+    return 'ok';
+  } catch {
+    authState = 'none';
+    return 'none';
+  }
+}
+
+function syncWorkspace(): void {
+  const target = process.env.DUCTAPE_WORKSPACE;
+  workspaceSynced = true; // mark done regardless so we don't retry on every call
+  if (!target) return;
+  try {
+    execSync(`ductape workspaces use "${target}"`, { encoding: 'utf8', timeout: 10000, stdio: ['pipe', 'pipe', 'pipe'] });
+  } catch {
+    // best-effort; if it fails the user will see workspace-mismatch errors on subsequent commands
+  }
+}
+
 function runCli(command: string): { success: boolean; output: string } {
   const first = command.trim().split(/\s+/)[0];
   if (!ADMIN_SUBCOMMANDS.includes(first)) {
@@ -872,8 +908,14 @@ function runCli(command: string): { success: boolean; output: string } {
       output: `Subcommand "${first}" is not in the allowed admin subcommand list. Allowed: ${ADMIN_SUBCOMMANDS.join(', ')}.`,
     };
   }
+  // Auto-inject --workspace on login if DUCTAPE_WORKSPACE is set and caller hasn't specified one
+  let finalCommand = command;
+  const ws = process.env.DUCTAPE_WORKSPACE;
+  if (first === 'login' && ws && !command.includes('--workspace') && !command.includes('--skip-workspace-select')) {
+    finalCommand = `${command} --workspace "${ws}"`;
+  }
   try {
-    const output = execSync(`ductape ${command}`, {
+    const output = execSync(`ductape ${finalCommand}`, {
       encoding: 'utf8',
       timeout: 30000,
       stdio: ['pipe', 'pipe', 'pipe'],
@@ -888,10 +930,14 @@ function runCli(command: string): { success: boolean; output: string } {
 const cliInputSchema = z.object({
   command: z.string().describe(
     'The ductape CLI command to run, without the leading "ductape" word. ' +
-    'Examples: "products list", "product create --name \\"My Product\\" --tag my-product", ' +
-    '"environments list my-product", "cloud connections list".\n\n' +
-    'Use this tool for ALL administrative operations: creating or updating products, apps, ' +
-    'environments, resources, cloud connections, and workspace configuration.\n\n' +
+    'Examples: "products list", "products create --name \\"My Product\\" --tag my-product", ' +
+    '"apps list", "apps create -f app.json", "resources storage list", ' +
+    '"cloud connections list", "link --product my-product --env dev".\n\n' +
+    'Use this tool for administrative operations: creating or updating products, apps, ' +
+    'resources (databases, storage, caches…), cloud connections, secrets, ' +
+    'and for apply/migrate workflows.\n\n' +
+    'Note: environments, app actions, features, quotas, fallbacks, and jobs are configured ' +
+    'in the Workbench UI — there are no CLI commands for them.\n\n' +
     'The CLI uses the user\'s local logged-in session (ductape login) — no key is required.',
   ),
 });
@@ -981,7 +1027,50 @@ async function main() {
         isError: true,
       };
     }
+
+    const firstWord = args.command.trim().split(/\s+/)[0];
+    const isAuthCommand = firstWord === 'login' || firstWord === 'logout';
+
+    if (!isAuthCommand) {
+      // Check login status once per process (cached after first call)
+      if (authState === 'unknown') {
+        checkLoginState();
+      }
+      if (authState === 'none') {
+        const wsFlag = process.env.DUCTAPE_WORKSPACE ? ` --workspace "${process.env.DUCTAPE_WORKSPACE}"` : '';
+        return {
+          content: [{
+            type: 'text',
+            text: [
+              'Not logged in to the Ductape CLI.',
+              '',
+              'Ask the user for their Ductape email and password, then call:',
+              `  ductape_cli("login --email <email> --password <password>${wsFlag}")`,
+              '',
+              'Or the user can run `ductape login` in their terminal and then retry.',
+            ].join('\n'),
+          }],
+          isError: true,
+        };
+      }
+      // Sync to the configured workspace once per process (best-effort)
+      if (!workspaceSynced) {
+        syncWorkspace();
+      }
+    }
+
     const result = runCli(args.command);
+
+    // Update cached state after auth commands
+    if (firstWord === 'login' && result.success) {
+      authState = 'ok';
+      workspaceSynced = false; // re-sync workspace after fresh login
+    }
+    if (firstWord === 'logout' && result.success) {
+      authState = 'none';
+      workspaceSynced = false;
+    }
+
     return {
       content: [{ type: 'text', text: result.output || '(no output)' }],
       ...(result.success ? {} : { isError: true }),
@@ -1124,11 +1213,17 @@ async function main() {
         description:
           'Run a Ductape CLI command for administrative operations.\n\n' +
           'USE THIS TOOL for any operation that creates or modifies platform configuration:\n' +
-          '  - Creating or updating products, apps, environments\n' +
-          '  - Managing cloud connections and resources\n' +
+          '  - Creating or updating products (products create/update) and apps (apps create/update)\n' +
+          '  - Importing an app from a Postman v2.1 or OpenAPI 3.0 file: "apps import <file> -t postman|openapi"\n' +
+          '  - Managing resources via "resources <type> <verb>" (databases, storage, caches…)\n' +
+          '  - Managing cloud connections and cloud-linked resources\n' +
           '  - Listing workspaces, products, secrets\n' +
-          '  - Any operation that would require an access key via the SDK\n\n' +
-          'DO NOT use ductape_execute for these — it uses a publishable key which only ' +
+          '  - Linking a project folder: "link --product <tag> --env <slug>"\n' +
+          '  - Syncing sessions/notifications/events: "apply" or "apply sessions" etc.\n' +
+          '  - Running database migrations: "db migrate", "db schema generate"\n\n' +
+          'NOTE: Environments, app actions, auths, features, quotas, fallbacks, and jobs are ' +
+          'configured in the Workbench UI — the CLI does not have commands for them.\n\n' +
+          'DO NOT use ductape_execute for admin operations — it uses a publishable key which only ' +
           'covers runtime operations. Administrative operations will fail with "Authentication failed".\n\n' +
           'The CLI uses the user\'s local logged-in session (ductape login). ' +
           'If the CLI is not installed, this tool will return install instructions automatically.',