@faable/faable 4.7.0 → 4.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/mcp/http.js CHANGED
@@ -186,7 +186,7 @@ const llms_txt = (base = PUBLIC_URL) => [
186
186
  '> Connects Claude, Cursor and any MCP client to Faable Deploy and Faable Auth: read apps, deployments, build and runtime logs, traffic and domains, and deploy; see who logs in to your apps, count and find users, and suspend them — without leaving the editor.',
187
187
  '',
188
188
  oauth_enabled()
189
- ? `Endpoint: ${base}/mcp (Streamable HTTP). Sign in with OAuth: an MCP client discovers it from the 401 (\`resource_metadata\`), opens a Faable sign-in and consent screen where the user picks one project and what the agent may do (\`deploy:read\`, \`deploy:deploy\`; \`deploy:write\` is asked for the first time a write tool is called). Or send a Faable API key: \`Authorization: Bearer <key>\` (project settings → API keys). Either way it acts on one project only.`
189
+ ? `Endpoint: ${base}/mcp (Streamable HTTP). Sign in with OAuth: an MCP client discovers it from the 401 (\`resource_metadata\`), opens a Faable sign-in and consent screen where the user picks one project and what the agent may do (\`deploy:read\`, \`deploy:deploy\`; \`deploy:write\`, and \`auth:read\` / \`auth:write\` for the Faable Auth tools, are asked for the first time a tool needs them). Or send a Faable API key: \`Authorization: Bearer <key>\` (project settings → API keys). Either way it acts on one project only.`
190
190
  : `Endpoint: ${base}/mcp (Streamable HTTP). Authenticate with a Faable API key: \`Authorization: Bearer <key>\` (create one in the dashboard, project settings → API keys). The key belongs to one project and only acts there.`,
191
191
  '',
192
192
  `- \`${base}/mcp/<project>\` pins every call to one project.`,
package/dist/mcp/oauth.js CHANGED
@@ -26,7 +26,9 @@ const DEFAULT_SCOPES = ['deploy:read', 'deploy:deploy'];
26
26
  const ALL_SCOPES = [
27
27
  'deploy:read',
28
28
  'deploy:deploy',
29
- 'deploy:write'
29
+ 'deploy:write',
30
+ 'auth:read',
31
+ 'auth:write'
30
32
  ];
31
33
  const DEPLOY_TOOLS = new Set(['deploy_app', 'redeploy', 'cancel_deployment']);
32
34
  /** The permission a tool needs — the same split the api enforces. */
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@faable/faable",
3
- "version": "4.7.0",
3
+ "version": "4.8.0",
4
4
  "main": "dist/index.js",
5
5
  "license": "MIT",
6
6
  "author": "Marc Pomar <marc@faable.com>",