@dypai-ai/mcp 1.0.7 → 1.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dypai-ai/mcp",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "DYPAI MCP Server — AI agent toolkit for building and deploying full-stack apps",
   "type": "module",
   "main": "src/index.js",
@@ -17,8 +17,7 @@
     "deploy",
     "backend",
     "database",
-    "api",
-    "cloudflare-pages"
+    "api"
   ],
   "license": "MIT",
   "repository": {

package/src/auto-update.js

@@ -0,0 +1,198 @@
+/**
+ * Self-update for @dypai-ai/mcp.
+ *
+ * On startup, checks the npm registry for a newer version. If found, performs
+ * the appropriate update (clear npx cache or `npm install -g`) and exits with
+ * code 0 so the host (Cursor / Claude / Trae / VSCode) re-spawns the process
+ * with the freshly installed version.
+ *
+ * Throttled to one check every 6h to avoid hammering the registry.
+ *
+ * Disable with:  DYPAI_NO_AUTOUPDATE=1
+ */
+
+import { readFileSync, writeFileSync, existsSync, rmSync, readdirSync, statSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { homedir, tmpdir } from "node:os";
+import { execSync } from "node:child_process";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PKG_PATH = join(__dirname, "..", "package.json");
+const PKG_NAME = "@dypai-ai/mcp";
+const REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
+const CHECK_TIMEOUT_MS = 2000;
+const THROTTLE_HOURS = 6;
+const STATE_FILE = join(tmpdir(), "dypai-mcp-update-state.json");
+
+function log(msg) {
+  // stderr — stdout is reserved for the MCP protocol
+  console.error(`[dypai-mcp:auto-update] ${msg}`);
+}
+
+function readState() {
+  try { return JSON.parse(readFileSync(STATE_FILE, "utf-8")); } catch { return {}; }
+}
+
+function writeState(state) {
+  try { writeFileSync(STATE_FILE, JSON.stringify(state)); } catch {}
+}
+
+function getCurrentVersion() {
+  try { return JSON.parse(readFileSync(PKG_PATH, "utf-8")).version; }
+  catch { return null; }
+}
+
+/** semver compare: returns 1 if a > b, -1 if a < b, 0 if equal. */
+function compareVersions(a, b) {
+  const pa = String(a).split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = String(b).split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i += 1) {
+    if ((pa[i] || 0) > (pb[i] || 0)) return 1;
+    if ((pa[i] || 0) < (pb[i] || 0)) return -1;
+  }
+  return 0;
+}
+
+async function fetchLatestManifest() {
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), CHECK_TIMEOUT_MS);
+  try {
+    const res = await fetch(REGISTRY_URL, { signal: ctrl.signal });
+    if (!res.ok) return null;
+    return await res.json();
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+/**
+ * After npm publish there's a 30s–2min window where the registry knows the
+ * version but the tarball is not yet replicated across the CDN. If we clear
+ * the cache and exit during that window, the next spawn fails to download
+ * and the MCP becomes unusable.
+ *
+ * This does a HEAD on the tarball URL with a small timeout. Returns true only
+ * if the artifact is actually retrievable.
+ */
+async function isTarballReady(tarballUrl) {
+  if (!tarballUrl) return false;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), CHECK_TIMEOUT_MS);
+  try {
+    const res = await fetch(tarballUrl, { method: "HEAD", signal: ctrl.signal });
+    return res.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+/** Detect how this process is running so we know how to update. */
+function detectInstallMethod() {
+  const scriptPath = process.argv[1] || "";
+  if (scriptPath.includes("/_npx/")) return "npx";
+  if (scriptPath.includes("/node_modules/") && scriptPath.includes("/.bin/")) return "global";
+  // global installs typically resolve to /usr/local/lib/... on mac/linux or %APPDATA%/npm on windows
+  if (scriptPath.includes("/lib/node_modules/")) return "global";
+  if (scriptPath.match(/[\\/]npm[\\/]node_modules[\\/]/)) return "global";
+  return "unknown";
+}
+
+/** Wipe ONLY this package's cache from the user's npx cache directory. */
+function clearNpxCacheForPackage() {
+  const npxRoot = join(homedir(), ".npm", "_npx");
+  if (!existsSync(npxRoot)) return false;
+
+  let cleared = 0;
+  for (const dir of readdirSync(npxRoot)) {
+    const fullPath = join(npxRoot, dir);
+    try {
+      if (!statSync(fullPath).isDirectory()) continue;
+      const pkgManifest = join(fullPath, "node_modules", PKG_NAME, "package.json");
+      if (existsSync(pkgManifest)) {
+        rmSync(fullPath, { recursive: true, force: true });
+        cleared += 1;
+      }
+    } catch { /* ignore */ }
+  }
+  return cleared > 0;
+}
+
+function installGlobalLatest() {
+  try {
+    execSync(`npm install -g ${PKG_NAME}@latest`, {
+      stdio: "pipe",
+      timeout: 60_000,
+    });
+    return true;
+  } catch (e) {
+    log(`global install failed: ${e.message?.slice(0, 200)}`);
+    return false;
+  }
+}
+
+/**
+ * Main entry point — call once at startup.
+ * Returns quickly. Exits the process if an update was applied.
+ */
+export async function checkForUpdates({ force = false } = {}) {
+  if (process.env.DYPAI_NO_AUTOUPDATE === "1") return { skipped: "disabled" };
+
+  const current = getCurrentVersion();
+  if (!current) return { skipped: "no current version" };
+
+  // Throttle
+  if (!force) {
+    const state = readState();
+    if (state.lastCheckAt) {
+      const hoursAgo = (Date.now() - state.lastCheckAt) / 3_600_000;
+      if (hoursAgo < THROTTLE_HOURS) return { skipped: "throttled" };
+    }
+  }
+
+  const manifest = await fetchLatestManifest();
+  const latest = manifest?.version || null;
+  const tarballUrl = manifest?.dist?.tarball || null;
+  writeState({ lastCheckAt: Date.now(), lastSeenLatest: latest, current });
+
+  if (!latest) return { skipped: "registry unreachable" };
+  if (compareVersions(latest, current) <= 0) return { uptodate: true, current };
+
+  log(`update available: ${current} → ${latest}`);
+
+  // Critical safety: don't clear the cache until the new tarball is actually
+  // downloadable. Right after `npm publish` the version is visible in the
+  // registry metadata up to ~2 min before the tarball replicates to all CDNs.
+  // If we clear the cache + exit during that window, next spawn fails.
+  const ready = await isTarballReady(tarballUrl);
+  if (!ready) {
+    log(`new version ${latest} not yet downloadable from CDN; will retry later`);
+    return { skipped: "tarball not ready" };
+  }
+
+  const method = detectInstallMethod();
+  let updated = false;
+
+  if (method === "npx") {
+    log(`tarball verified — clearing npx cache so the next spawn pulls ${PKG_NAME}@${latest}`);
+    updated = clearNpxCacheForPackage();
+  } else if (method === "global") {
+    log(`tarball verified — running: npm install -g ${PKG_NAME}@latest`);
+    updated = installGlobalLatest();
+  } else {
+    log(`unknown install method (script=${process.argv[1] || "?"}); skipping self-update`);
+    return { skipped: "unknown install method" };
+  }
+
+  if (!updated) {
+    log("update step did not succeed; continuing with current version");
+    return { skipped: "update failed" };
+  }
+
+  log(`updated to ${latest}. Exiting so the IDE re-spawns the MCP with the new version.`);
+  process.exit(0);
+}

package/src/index.js

@@ -20,6 +20,7 @@
  */
 
 import { createInterface } from "readline"
+import { checkForUpdates } from "./auto-update.js"
 import { deployTool } from "./tools/deploy.js"
 import { scaffoldTool } from "./tools/scaffold.js"
 import { addDomainTool, listDomainsTool, removeDomainTool } from "./tools/domains.js"
@@ -27,6 +28,13 @@ import { frontendStatusTool, buildStatusTool, listDeploymentsTool, getDeployment
 import { bulkUpsertTool } from "./tools/bulk-upsert.js"
 import { proxyToolCall } from "./tools/proxy.js"
 
+// ── Self-update ─────────────────────────────────────────────────────────────
+// Throttled (6h) check against the npm registry. If a newer version is
+// available, the update is performed and the process exits cleanly so the
+// IDE re-spawns it with the latest. Disable with DYPAI_NO_AUTOUPDATE=1.
+// Network failures are silently ignored — never blocks startup more than ~2s.
+await checkForUpdates().catch(() => {})
+
 // ── Local tools (filesystem access) ─────────────────────────────────────────
 
 const LOCAL_TOOLS = [
@@ -65,7 +73,8 @@ const FALLBACK_REMOTE_TOOLS = [
   { name: "get_auth_users", description: "List users.", inputSchema: { type: "object", properties: { project_id: { type: "string" } }, required: [] } },
   { name: "list_buckets", description: "List storage buckets.", inputSchema: { type: "object", properties: { project_id: { type: "string" } }, required: [] } },
   { name: "search_docs", description: "Search documentation.", inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] } },
-  { name: "search_templates", description: "Search workflow templates.", inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] } },
+  { name: "search_workflow_templates", description: "Search workflow templates.", inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] } },
+  { name: "search_project_templates", description: "Search project starter templates.", inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] } },
   { name: "search_nodes", description: "Search workflow nodes.", inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] } },
 ]
 
@@ -74,7 +83,7 @@ const REMOTE_TOOLS = [
   // ── Project ───────────────────────────────────────────────────────────────
   { name: "list_projects", description: "Lists all projects you have access to across your organizations. Returns project id, name, description, organization, subscription plan, and status. Use this as the first step to discover which projects are available, then pass project_id to other tools.", inputSchema: { type: "object", properties: { organization_id: { type: "string", description: "Optional. Filter projects by organization UUID." } }, required: [] } },
   { name: "get_project", description: "Gets detailed information about a specific project. Returns project name, description, organization, plan, status, engine URL, frontend slug, and timestamps.", inputSchema: { type: "object", properties: { project_id: { type: "string" } }, required: ["project_id"] } },
-  { name: "create_project", description: "Create a new DYPAI project (free plan). Creates a full project with database, API engine, GitHub repo, and frontend hosting. Provisioning takes ~1 minute.", inputSchema: { type: "object", properties: { name: { type: "string", description: "Project name (e.g. 'My Veterinary App')" }, organization_id: { type: "string", description: "Optional. Uses default org if omitted." }, description: { type: "string" }, template_slug: { type: "string", description: "Optional. Start from a template (e.g. 'clinic', 'gym'). Use search_templates to browse." } }, required: ["name"] } },
+  { name: "create_project", description: "Create a new DYPAI project (free plan). Creates a full project with database, API engine, GitHub repo, and frontend hosting. Provisioning takes ~1 minute.", inputSchema: { type: "object", properties: { name: { type: "string", description: "Project name (e.g. 'My Veterinary App')" }, organization_id: { type: "string", description: "Optional. Uses default org if omitted." }, description: { type: "string" }, template_slug: { type: "string", description: "Optional. Start from a project template (e.g. 'clinic', 'gym', 'blank'). Use search_project_templates to browse." } }, required: ["name"] } },
   { name: "get_app_credentials", description: "Lists available credentials in the current application. Returns API keys, anon key, service role key, and engine URL needed for SDK configuration.", inputSchema: { type: "object", properties: { project_id: { type: "string" } }, required: [] } },
 
   // ── Database ──────────────────────────────────────────────────────────────
@@ -105,7 +114,8 @@ const REMOTE_TOOLS = [
 
   // ── Knowledge ─────────────────────────────────────────────────────────────
   { name: "search_docs", description: "Search DYPAI documentation. Use this when unsure about SDK usage, auth patterns, workflow nodes, or platform features. Returns relevant documentation chunks.", inputSchema: { type: "object", properties: { query: { type: "string", description: "What you want to learn about" } }, required: ["query"] } },
-  { name: "search_templates", description: "Search workflow templates by description. Returns ready-to-use workflow code for common patterns: CRUD operations, payment gateways, email sending, AI chatbots, data pipelines, etc.", inputSchema: { type: "object", properties: { query: { type: "string", description: "What the workflow should do (e.g. 'send email', 'stripe payment')" }, category: { type: "string", description: "Optional: AI, Database, Payments, Communication, Logic, Storage" } }, required: ["query"] } },
+  { name: "search_workflow_templates", description: "Search workflow templates by description. Returns ready-to-use workflow code for common patterns: CRUD operations, payment gateways, email sending, AI chatbots, data pipelines, etc.", inputSchema: { type: "object", properties: { query: { type: "string", description: "What the workflow should do (e.g. 'send email', 'stripe payment')" }, category: { type: "string", description: "Optional: AI, Database, Payments, Communication, Logic, Storage" } }, required: ["query"] } },
+  { name: "search_project_templates", description: "Search project starter templates by description. Returns template metadata and slugs for starters like clinic, gym, waitlist, blank, auth, or landing.", inputSchema: { type: "object", properties: { query: { type: "string", description: "What kind of project starter you need (e.g. 'gym app', 'landing page', 'auth starter')" }, category: { type: "string", description: "Optional category filter" } }, required: ["query"] } },
 ]
 
 // ── Server Instructions ──────────────────────────────────────────────────────
@@ -122,9 +132,10 @@ const SERVER_INSTRUCTIONS = `You are building full-stack applications on the DYP
 1. Create tables with execute_sql (check get_app_tables first to avoid duplicates)
 2. Create endpoints with create_endpoint using workflow_code
 3. Test with test_workflow immediately after creating/updating
-4. Use search_templates to find ready-made workflow patterns
-5. Use search_nodes to discover available node types
-6. Use search_docs when unsure about patterns
+4. Use search_workflow_templates to find ready-made workflow patterns
+5. Use search_project_templates when the user wants a starter app or template-based project
+6. Use search_nodes to discover available node types
+7. Use search_docs when unsure about patterns
 
 ## Build Frontend
 - SDK client is already configured at src/lib/dypai.ts — just import it:

package/src/tools/deploy.js

@@ -133,13 +133,13 @@ export const deployTool = {
   name: "deploy_frontend",
   description: `Deploy frontend source code from a local directory.
 
-Reads all source files from the specified directory, uploads them to DYPAI,
-and Cloudflare Pages automatically builds and deploys the project.
-
-Supports: React, Vite, Next.js, Astro, SvelteKit, Nuxt, CRA, and more.
+Reads all source files from the specified directory and uploads them to DYPAI.
 The build runs in the cloud — no local Node.js or npm required.
 
-After deploying, the site is live at https://{slug}.dypai.app within ~1 minute.`,
+Supports: React, Vite, Next.js, Astro, SvelteKit, Nuxt, Vue, CRA, and more.
+DYPAI auto-detects the framework and routes to the optimal backend.
+
+After deploying, the site is live at https://{slug}.dypai.app within ~30s.`,
 
   inputSchema: {
     type: "object",
@@ -227,7 +227,6 @@ After deploying, the site is live at https://{slug}.dypai.app within ~1 minute.`
           files_pushed: files.length,
           size_bytes: total,
           framework: label,
-          build: "cloudflare_pages",
           build_status: "building",
           message: `Deployed ${files.length} files (${Math.round(total / 1024)} KB). ${label} build still in progress at ${result.url} — use get_build_status to check progress.`,
         }
@@ -239,7 +238,6 @@ After deploying, the site is live at https://{slug}.dypai.app within ~1 minute.`
           url: result.url,
           files_pushed: files.length,
           framework: label,
-          build: "cloudflare_pages",
           build_status: "failure",
           build_error: buildResult.error,
           message: `Deploy pushed ${files.length} files but the ${label} build FAILED. Build error:\n${buildResult.error}`,
@@ -258,7 +256,6 @@ After deploying, the site is live at https://{slug}.dypai.app within ~1 minute.`
         skipped_files: skipped.length > 0 ? skipped : undefined,
         size_bytes: total,
         framework: label,
-        build: "cloudflare_pages",
         build_status: "success",
         build_duration: buildResult.duration,
         message: `Deployed ${files.length} files (${Math.round(total / 1024)} KB). ${label} build succeeded${buildResult.duration ? ` in ${buildResult.duration}s` : ""}. Live at ${result.url}${skippedMsg}`,

package/src/tools/scaffold.js

@@ -19,7 +19,7 @@ Scaffolds a project directory with:
 - MCP config for your IDE
 - .env with engine URL
 
-Use search_templates first to find available templates, then pass the template slug here.
+Use search_project_templates first to find available templates, then pass the template slug here.
 Or use "blank" for an empty starter project.`,
 
   inputSchema: {
@@ -35,7 +35,7 @@ Or use "blank" for an empty starter project.`,
       },
       template: {
         type: "string",
-        description: 'Template slug (e.g. "clinic", "gym", "blank"). Use search_templates to find available templates.',
+        description: 'Template slug (e.g. "clinic", "gym", "blank"). Use search_project_templates to find available templates.',
         default: "blank",
       },
     },