@homespunapps/mcp 1.0.0 → 1.0.1

package/README.md

@@ -1,6 +1,6 @@
 # @homespunapps/mcp
 
-A thin **stdio [Model Context Protocol](https://modelcontextprotocol.io) server** for [Homespun](https://github.com/aerolalit/homespun). It lets any MCP client — Claude Desktop, Cursor, Windsurf, Cline, your own host — hand a human a rich interactive UI by URL and get structured data back: forms, approvals, pickers, surveys, dashboards, diff/doc review, multi-step wizards.
+A thin **stdio [Model Context Protocol](https://modelcontextprotocol.io) server** for [Homespun](https://homespun.dev). It lets any MCP client (Claude Desktop, Cursor, Windsurf, Cline, your own host) hand a human a rich interactive UI by URL and get structured data back: forms, approvals, pickers, surveys, dashboards, diff/doc review, multi-step wizards.
 
 It is a wrapper, not a reimplementation: all relay I/O goes through [`@homespunapps/core`](https://www.npmjs.com/package/@homespunapps/core), and config is shared with the [`homespun` CLI](https://www.npmjs.com/package/@homespunapps/cli) (`~/.config/homespun/config.json`) — so the CLI and this server use the **same agent identity**.
 
@@ -84,7 +84,7 @@ All environment variables are optional — the defaults target the hosted relay
 
 | Variable | Default | Purpose |
 | --- | --- | --- |
-| `HOMESPUN_URL` | `https://homespun.dev` | Relay base URL. Set to point at a self-hosted relay. |
+| `HOMESPUN_URL` | `https://homespun.dev` | Relay base URL. Set to point at a different relay. |
 | `HOMESPUN_API_KEY` | _(auto-registered)_ | Agent API key. If unset, the server registers an agent on first use and saves the key to `~/.config/homespun/config.json` (shared with the CLI). |
 | `HOMESPUN_TOKEN` | — | Alias for `HOMESPUN_API_KEY` (for hosts that name secrets `*_TOKEN`). `HOMESPUN_API_KEY` wins if both are set. |
 | `HOMESPUN_AGENT_NAME` | `homespun-mcp` | Display name for the auto-registered agent. |

package/dist/index.js

@@ -69,7 +69,7 @@ Tools exposed: deploy_app, list_rows, get_row, upsert_row, update_row,
 delete_row, get_feed_events, apps, members, attachments, taste, key,
 feedback, agent, get_skill.
 
-See https://github.com/aerolalit/homespun for docs.
+See https://docs.homespun.dev for docs.
 `;
 main().catch((e) => {
     process.stderr.write(`homespun-mcp: fatal: ${e instanceof Error ? (e.stack ?? e.message) : String(e)}\n`);

package/dist/tools.js

@@ -157,7 +157,7 @@ const deployAppShape = {
         .string()
         .min(1)
         .describe("The app's UI as a complete HTML document (single file, up to the relay's size cap)."),
-    manifest: jsonObjectSchema.describe("The x-homespun-manifest capability document (a JSON object): app metadata, declared collections (+ per-collection write/delete role lists), external fetch hosts, CDN flag. Call get_skill for the full grammar before authoring one from scratch."),
+    manifest: jsonObjectSchema.describe("The x-homespun-manifest capability document (a JSON object). Eight extension keys: app metadata; collections (+ per-collection write/read/delete role lists); externalHosts (fetch allowlist); cdn (allow CDN scripts/styles); capabilities (Permissions-Policy opt-ins); embeds (iframe frame-src allowlist); notify (email-on-row rules); webhooks (signed HTTP POST on-row rules). Call get_skill for the full grammar before authoring one from scratch."),
     visibility: z
         .enum(["private", "link", "public"])
         .optional()
@@ -170,6 +170,21 @@ const deployAppShape = {
         .boolean()
         .optional()
         .describe("REDEPLOY only. Bypass the compat gate on a narrowing manifest change (a removed/narrowed collection is detached, never deleted)."),
+    assets: z
+        .array(z.object({
+        path: z
+            .string()
+            .describe("App-relative, same-origin reference the HTML uses, e.g. 'frames/000.jpg' or 'media/intro.mp4'. Relative ONLY: no leading '/', no '..' segment, no backslash, charset [A-Za-z0-9._/-], not under a reserved prefix (_hs, b)."),
+        content_base64: z
+            .string()
+            .describe("Standard base64 of the asset's raw bytes."),
+        mime: z
+            .string()
+            .optional()
+            .describe("Advisory content-type. The relay sniffs the REAL type from the bytes and enforces the attachment allowlist; omit it (or set application/octet-stream) for data files like CSV that don't magic-byte-sniff, so they are stored + served as an inert download."),
+    }))
+        .optional()
+        .describe("Optional bundle of files shipped WITH the app in ONE deploy: images, fonts, audio/video, data. Each asset is validated + stored app-scoped exactly like a normal attachment (byte-sniff, allowlist, size cap, quota, scan) and served at its `path` on the app's OWN origin, so the page references it by a stable same-origin path (`<img src=\"frames/000.jpg\">`, `<video src=\"media/intro.mp4\">`; media/font paths support HTTP Range). The whole deploy is rejected atomically if any asset fails validation. A redeploy's assets REPLACE the previous version's set. Bounded by the relay's per-deploy asset-count cap; total bytes by the per-app blob quota."),
 };
 const listRowsShape = {
     app_id: z.string().min(1).describe("The app id."),
@@ -248,12 +263,21 @@ const getFeedEventsShape = {
 };
 const appsShape = {
     action: z
-        .enum(["list", "show", "update", "delete", "wake"])
-        .describe("list: YOUR owning human's apps. show/update/delete/wake: act on one app (app_id)."),
+        .enum([
+        "list",
+        "show",
+        "update",
+        "delete",
+        "wake",
+        "domain_set",
+        "domain_status",
+        "domain_remove",
+    ])
+        .describe("list: YOUR owning human's apps. show/update/delete/wake: act on one app (app_id). domain_set/domain_status/domain_remove: manage the app's ONE custom domain (app_id; domain_set also needs domain)."),
     app_id: z
         .string()
         .optional()
-        .describe("Required for show/update/delete/wake."),
+        .describe("Required for show/update/delete/wake/domain_set/domain_status/domain_remove."),
     status: z
         .enum(["active", "dormant", "archived", "all"])
         .optional()
@@ -274,6 +298,10 @@ const appsShape = {
         .enum(["private", "link", "public"])
         .optional()
         .describe("update only. The new visibility (slug is immutable)."),
+    domain: z
+        .string()
+        .optional()
+        .describe("domain_set only. The bare custom domain to bind (e.g. app.example.com). The response's dns_records lists the DNS entries the domain owner must publish."),
 };
 const membersShape = {
     action: z
@@ -300,6 +328,8 @@ const attachmentsShape = {
     action: z
         .enum([
         "upload",
+        "presign",
+        "finalize",
         "download",
         "show",
         "list",
@@ -308,7 +338,17 @@ const attachmentsShape = {
         "revoke_token",
         "list_tokens",
     ])
-        .describe("Binary attachment operations. upload: read a local file (file_path) and upload it; scope agent|app. download: fetch bytes by attachment_id to out_path (absolute) or return base64. show: metadata only. list: the agent's attachments. delete: soft-delete. mint_token: mint a /b/<token> capability URL (returned ONCE). revoke_token / list_tokens: manage those tokens."),
+        .describe("Binary attachment operations. upload: send bytes as an attachment inline; pass `content_base64` (base64 bytes, no filesystem) when you have bytes but no local file (e.g. an image you generated) or you are a hosted/remote agent, or `file_path` (absolute, read on the RELAY host) when the file is local to the relay; scope agent|app. presign + finalize: the LARGE-FILE path (e.g. a video). presign returns a { put_url, attachment_id }, then YOU PUT the raw bytes to put_url over HTTP out-of-band (bytes never pass through this tool / the model context as base64), then finalize confirms it. download: fetch bytes by attachment_id to out_path (absolute) or return base64. show: metadata only. list: the agent's attachments. delete: soft-delete. mint_token: mint a /b/<token> capability URL (returned ONCE). revoke_token / list_tokens: manage those tokens."),
+    size: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe("presign: the exact byte length you will PUT. Committed at presign and re-verified against the uploaded bytes at finalize."),
+    sha256: z
+        .string()
+        .optional()
+        .describe("presign: the hex SHA-256 (64 chars) of the exact bytes you will PUT. Committed at presign and re-verified against the uploaded bytes at finalize."),
     attachment_id: z
         .string()
         .optional()
@@ -316,7 +356,11 @@ const attachmentsShape = {
     file_path: z
         .string()
         .optional()
-        .describe("upload: ABSOLUTE path to the local file to upload."),
+        .describe("upload: ABSOLUTE path to a file read on the SERVER host running this MCP connector (the relay), NOT your machine. Only works when the file is local to the relay (e.g. a locally-run CLI). For a hosted or remote agent, use `content_base64` instead."),
+    content_base64: z
+        .string()
+        .optional()
+        .describe("upload: the file bytes as base64, uploaded WITHOUT any filesystem access. This is the upload path for hosted / remote agents (e.g. an image you just generated): pass it when you have bytes but no file on the relay host. If both `content_base64` and `file_path` are given, `content_base64` wins. The relay sniffs the real type and enforces the same size/allowlist/quota checks as a file upload."),
     scope: z
         .enum(["agent", "app"])
         .optional()
@@ -329,7 +373,7 @@ const attachmentsShape = {
     mime: z
         .string()
         .optional()
-        .describe("upload: advisory Content-Type (the relay sniffs the bytes regardless)."),
+        .describe("upload/presign: advisory Content-Type. The relay BYTE-SNIFFS the actual bytes and stores/serves that sniffed type regardless (a lying mime is caught, never served inline). Required for presign (scopes the upload URL + fails fast against the allowlist)."),
     out_path: z
         .string()
         .optional()
@@ -409,6 +453,50 @@ const agentShape = {
         .optional()
         .describe("The one-shot claim code (required for claim)."),
 };
+const communityShape = {
+    action: z
+        .enum(["publish", "list_pending", "get_submission", "approve", "reject"])
+        .describe("publish: publish one of YOUR apps as a community template (app_id; optional title/description/category/tags). The capture (html + manifest + the seed rows of seedOnInstall collections) lands PENDING review, installable by its returned direct link but not listed until approved. list_pending / get_submission / approve / reject are RELAY-OPERATOR-only review actions: list_pending (the review queue), get_submission (a submission's full html+manifest+seedRows, by snapshot_id), approve (snapshot_id, lists it in the gallery + supersedes the app's prior approved version), reject (snapshot_id + a required note that lands in the publisher's app feed)."),
+    app_id: z
+        .string()
+        .optional()
+        .describe("publish only. The id of an app YOU own to publish."),
+    title: z
+        .string()
+        .optional()
+        .describe("publish only. Listing title (1 to 80 chars). Defaults to the app's manifest name."),
+    description: z
+        .string()
+        .optional()
+        .describe("publish only. Listing blurb (up to 200 chars). Defaults to the manifest description."),
+    category: z
+        .string()
+        .optional()
+        .describe("publish only. Optional single-word category (e.g. 'household')."),
+    tags: z
+        .array(z.string())
+        .optional()
+        .describe("publish only. Up to 6 curation tags."),
+    snapshot_id: z
+        .string()
+        .optional()
+        .describe("Required for get_submission/approve/reject. The submission's snapshot id (from publish's response or list_pending)."),
+    note: z
+        .string()
+        .optional()
+        .describe("reject only. The required rejection note shown to the publisher (delivered to their app feed)."),
+    limit: z
+        .number()
+        .int()
+        .positive()
+        .max(200)
+        .optional()
+        .describe("list_pending only. Page size (1..200)."),
+    cursor: z
+        .string()
+        .optional()
+        .describe("list_pending only. Opaque cursor from a prior next_cursor."),
+};
 const getSkillShape = {
     version_only: z
         .boolean()
@@ -422,7 +510,7 @@ export const TOOLS = [
     // ----- v2 app lifecycle + data (discrete, hot-path) -----------------------
     {
         name: "deploy_app",
-        description: "Deploy a v2 app: an HTML document + a capability manifest (declared collections, external hosts, CDN flag), hosted at its own URL. Pass EITHER no `app_id` (create — mints a slug + URL) OR `app_id` (redeploy an existing app with new content). A redeploy that NARROWS the manifest (drops a collection, tightens a schema, revokes a role) is refused with manifest_incompatible_redeploy unless force:true; a narrowed collection is then detached, never deleted. BEFORE authoring: call get_skill for the manifest grammar. Returns { app_id, slug, url, version, visibility, created } (create) or { app_id, version, compat, breaks? } (redeploy).",
+        description: 'Deploy a v2 app: an HTML document + a capability manifest, hosted at its own URL. The manifest has eight extension keys: app metadata; collections (+ per-collection write/read/delete role lists); externalHosts (fetch allowlist); cdn (allow CDN scripts/styles); capabilities (Permissions-Policy opt-ins); embeds (iframe frame-src allowlist); notify (email-on-row rules); webhooks (signed HTTP POST on-row rules). Pass EITHER no `app_id` (create, mints a slug + URL) OR `app_id` (redeploy an existing app with new content). A redeploy that NARROWS the manifest (drops a collection, tightens a schema, revokes a role) is refused with manifest_incompatible_redeploy unless force:true; a narrowed collection is then detached, never deleted. Ship images/fonts/audio/video/data FILES with the app in the SAME call via `assets[]`: each is validated + stored app-scoped and served at its `path` on the app\'s own origin, so the HTML references it by a stable same-origin path (`<img src="frames/000.jpg">`, `<video src="media/clip.mp4">`), media and font paths support HTTP Range for seeking. A redeploy\'s assets replace the previous version\'s set. BEFORE authoring: call get_skill for the manifest grammar. Returns { app_id, slug, url, version, visibility, created } (create) or { app_id, version, compat, breaks? } (redeploy).',
         inputSchema: deployAppShape,
         annotations: {
             title: "Deploy App",
@@ -451,6 +539,7 @@ export const TOOLS = [
                         manifest: manifest.value,
                         visibility,
                         slug,
+                        assets: args["assets"],
                     }));
                 }
                 if (str(args, "html") === undefined) {
@@ -463,6 +552,7 @@ export const TOOLS = [
                     html: String(args["html"]),
                     manifest: manifest.value,
                     force: args["force"],
+                    assets: args["assets"],
                 });
                 return jsonResult(redeployed);
             }
@@ -611,7 +701,7 @@ export const TOOLS = [
     },
     {
         name: "apps",
-        description: "Manage v2 app lifecycle (deploy_app creates/redeploys; this tool covers the rest). ONE tool with an `action` enum: list (YOUR owning human's apps) | show (full detail incl. manifest) | update (visibility only — slug is immutable) | delete (soft-delete, idempotent) | wake (a dormant app; a no-op reporting the actual status otherwise).",
+        description: "Manage v2 app lifecycle (deploy_app creates/redeploys; this tool covers the rest). ONE tool with an `action` enum: list (YOUR owning human's apps) | show (full detail incl. manifest) | update (visibility only - slug is immutable) | delete (soft-delete, idempotent) | wake (a dormant app; a no-op reporting the actual status otherwise) | domain_set (bind ONE custom domain; returns the DNS records the domain owner must publish) | domain_status (the domain record, live-refreshed against Cloudflare when enabled; inspect last_error when it is not activating) | domain_remove (unbind the domain, idempotent).",
         inputSchema: appsShape,
         // Consolidated tool: read actions (list/show) + mutating ones (update/
         // delete/wake). Hint reflects delete, the most-privileged action.
@@ -662,6 +752,25 @@ export const TOOLS = [
                             return invalidArgs("wake requires `app_id`");
                         }
                         return jsonResult(await client.wakeApp(String(args["app_id"])));
+                    case "domain_set":
+                        if (str(args, "app_id") === undefined) {
+                            return invalidArgs("domain_set requires `app_id`");
+                        }
+                        if (str(args, "domain") === undefined) {
+                            return invalidArgs("domain_set requires `domain`");
+                        }
+                        return jsonResult(await client.setAppDomain(String(args["app_id"]), String(args["domain"])));
+                    case "domain_status":
+                        if (str(args, "app_id") === undefined) {
+                            return invalidArgs("domain_status requires `app_id`");
+                        }
+                        return jsonResult(await client.getAppDomain(String(args["app_id"])));
+                    case "domain_remove":
+                        if (str(args, "app_id") === undefined) {
+                            return invalidArgs("domain_remove requires `app_id`");
+                        }
+                        await client.deleteAppDomain(String(args["app_id"]));
+                        return jsonResult({ app_id: args["app_id"], domain_removed: true });
                     default:
                         return invalidArgs(`unknown apps action '${action}'`);
                 }
@@ -728,7 +837,7 @@ export const TOOLS = [
     // ----- consolidated management tools --------------------------------------
     {
         name: "attachments",
-        description: "Binary attachments (images, PDFs, audio, video) referenced from event payloads / input_data via `format: homespun-attachment-id`. ONE tool with an `action` enum: upload | download | show | list | delete | mint_token | revoke_token | list_tokens. upload reads an ABSOLUTE file_path; download writes to an ABSOLUTE out_path (or returns base64). Scope an upload to agent (default, reusable) or app. mint_token returns a /b/<token> capability URL (ONCE) a browser can GET without your API key.",
+        description: "Binary attachments (images, PDFs, audio, video) referenced from event payloads / input_data via `format: homespun-attachment-id`. ONE tool with an `action` enum: upload | presign | finalize | download | show | list | delete | mint_token | revoke_token | list_tokens. upload (inline) takes EITHER `content_base64` (base64 bytes, no filesystem; use when you generated the bytes in-session or run as a hosted/remote agent) OR `file_path` (ABSOLUTE path read on the RELAY host, only usable when the file is local to the relay). FOR A LARGE FILE (e.g. a video) use presign + finalize instead of base64: (1) presign with { mime, size, sha256, scope } returns { put_url, attachment_id }; (2) YOU PUT the raw bytes to put_url over plain HTTP out-of-band, so the bytes never route through this tool or the model context, which is why base64 inline is impractical at that size; (3) finalize with the attachment_id. At finalize the relay re-reads the stored bytes, BYTE-SNIFFS the real type, and enforces the same allowlist + size + sha256 + quota + scan checks as any upload, so a presign that lies about its mime is caught and never served inline. The presigned path requires the Azure storage backend; a filesystem self-host returns a clear not-supported error (use inline upload there). download writes to an ABSOLUTE out_path (or returns base64). Scope an upload to agent (default, reusable) or app. mint_token returns a /b/<token> capability URL (ONCE) a browser can GET without your API key.",
         inputSchema: attachmentsShape,
         // Consolidated tool: read actions (download/show/list/list_tokens) +
         // mutating ones (upload/delete/mint_token/revoke_token). openWorld:true
@@ -746,18 +855,38 @@ export const TOOLS = [
             try {
                 switch (action) {
                     case "upload": {
+                        // `content_base64` is the documented field; `content` is a silent
+                        // alias for callers that used the earlier name.
+                        const contentBase64 = str(args, "content_base64") ?? str(args, "content");
                         const filePath = str(args, "file_path");
-                        if (filePath === undefined)
-                            return invalidArgs("upload requires `file_path` (absolute)");
+                        if (contentBase64 === undefined && filePath === undefined)
+                            return invalidArgs("upload requires `content_base64` (base64 bytes) or `file_path` (a path local to the relay host)");
                         const scope = (str(args, "scope") ?? "agent");
                         if (scope === "app" && str(args, "app_id") === undefined)
                             return invalidArgs("scope=app requires `app_id`");
+                        // Inline bytes win when both are given: an explicit `content_base64`
+                        // is a deliberate no-filesystem upload, so never fall back to reading
+                        // a file the caller also happened to name. No readFileSync on this
+                        // path; the base64 is sent straight to the relay's inline route.
+                        if (contentBase64 !== undefined) {
+                            const ref = await client.uploadBlobInline(contentBase64, {
+                                scope,
+                                appId: str(args, "app_id"),
+                                filename: str(args, "filename"),
+                                mime: str(args, "mime"),
+                            });
+                            return jsonResult(ref);
+                        }
                         let bytes;
                         try {
                             bytes = readFileSync(filePath);
                         }
                         catch (e) {
-                            return invalidArgs(`failed to read file_path '${filePath}': ${e instanceof Error ? e.message : String(e)}`);
+                            // `file_path` is read on the MCP server / relay host, NOT the
+                            // calling agent's machine. For a hosted connector that host is
+                            // Homespun's infra, so a remote agent's path always ENOENTs even
+                            // when the file exists on its side. Say so, and point at the fix.
+                            return invalidArgs(`failed to read file_path '${filePath}' (${e instanceof Error ? e.message : String(e)}). Note: file_path is read on the MCP server / relay host, not on your machine, so it only works when the file is local to the relay (e.g. a locally-run CLI). For a hosted or remote agent, pass content_base64 with the file bytes instead.`);
                         }
                         const ref = await client.uploadBlob(bytes, {
                             scope,
@@ -767,6 +896,43 @@ export const TOOLS = [
                         });
                         return jsonResult(ref);
                     }
+                    case "presign": {
+                        // Large-file direct-to-storage: reserve a pending attachment + get a
+                        // PUT URL. The caller PUTs the bytes to put_url over HTTP, then calls
+                        // finalize. `mime` is advisory (re-sniffed at finalize); size +
+                        // sha256 are the commitment the finalize re-verifies against the
+                        // uploaded bytes.
+                        const mime = str(args, "mime");
+                        const size = args["size"];
+                        const sha256 = str(args, "sha256");
+                        if (mime === undefined ||
+                            typeof size !== "number" ||
+                            sha256 === undefined)
+                            return invalidArgs("presign requires `mime`, `size` (positive integer byte length), and `sha256` (hex sha-256 of the exact bytes you will PUT)");
+                        const scope = (str(args, "scope") ?? "agent");
+                        if (scope === "app" && str(args, "app_id") === undefined)
+                            return invalidArgs("scope=app requires `app_id`");
+                        const res = await client.presignBlob({
+                            mime,
+                            size,
+                            sha256,
+                            scope,
+                            appId: str(args, "app_id"),
+                            filename: str(args, "filename"),
+                        });
+                        // Surface it as { put_url, attachment_id, expires_at }; `put_url`
+                        // is the name the flow docs use for the out-of-band PUT target.
+                        return jsonResult({
+                            put_url: res.upload_url,
+                            attachment_id: res.attachment_id,
+                            expires_at: res.expires_at,
+                        });
+                    }
+                    case "finalize": {
+                        if (str(args, "attachment_id") === undefined)
+                            return invalidArgs("finalize requires `attachment_id`");
+                        return jsonResult(await client.finalizeBlob(String(args["attachment_id"])));
+                    }
                     case "download": {
                         if (str(args, "attachment_id") === undefined)
                             return invalidArgs("download requires `attachment_id`");
@@ -991,6 +1157,74 @@ export const TOOLS = [
             }
         },
     },
+    {
+        name: "community",
+        description: "Publish an app you own as a COMMUNITY TEMPLATE, and (relay operators only) review submissions. ONE tool with an `action` enum: publish | list_pending | get_submission | approve | reject. publish captures your live app (html + manifest + the seed rows of its seedOnInstall collections + listing metadata) into a PENDING template - installable by the returned direct link but NOT listed in the public gallery until an operator approves it; you must have a verified email and at most a few pending submissions at once. The review actions are limited to the relay's configured community reviewers: list_pending (the queue), get_submission (a submission's full content by snapshot_id), approve (list it in the gallery; a re-publish supersedes your app's prior approved version), reject (with a required note that lands in the publisher's app feed).",
+        inputSchema: communityShape,
+        // Consolidated tool: read actions (list_pending/get_submission) + mutating
+        // ones (publish/approve/reject). Hint reflects the most-privileged action.
+        annotations: {
+            title: "Community Templates",
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
+        handler: async (client, args) => {
+            const action = String(args["action"]);
+            try {
+                switch (action) {
+                    case "publish": {
+                        if (str(args, "app_id") === undefined) {
+                            return invalidArgs("publish requires `app_id`");
+                        }
+                        return jsonResult(await client.publishCommunityTemplate({
+                            appId: String(args["app_id"]),
+                            title: str(args, "title"),
+                            description: str(args, "description"),
+                            category: str(args, "category"),
+                            tags: Array.isArray(args["tags"])
+                                ? args["tags"]
+                                : undefined,
+                        }));
+                    }
+                    case "list_pending": {
+                        const opts = {};
+                        if (args["limit"] !== undefined)
+                            opts.limit = args["limit"];
+                        if (str(args, "cursor") !== undefined)
+                            opts.cursor = String(args["cursor"]);
+                        return jsonResult(await client.listCommunitySubmissions(opts));
+                    }
+                    case "get_submission":
+                        if (str(args, "snapshot_id") === undefined) {
+                            return invalidArgs("get_submission requires `snapshot_id`");
+                        }
+                        return jsonResult(await client.getCommunitySubmission(String(args["snapshot_id"])));
+                    case "approve":
+                        if (str(args, "snapshot_id") === undefined) {
+                            return invalidArgs("approve requires `snapshot_id`");
+                        }
+                        return jsonResult(await client.reviewCommunitySubmission(String(args["snapshot_id"]), { decision: "approve" }));
+                    case "reject": {
+                        if (str(args, "snapshot_id") === undefined) {
+                            return invalidArgs("reject requires `snapshot_id`");
+                        }
+                        const note = str(args, "note");
+                        if (note === undefined) {
+                            return invalidArgs("reject requires a non-empty `note`");
+                        }
+                        return jsonResult(await client.reviewCommunitySubmission(String(args["snapshot_id"]), { decision: "reject", note }));
+                    }
+                    default:
+                        return invalidArgs(`unknown community action '${action}'`);
+                }
+            }
+            catch (e) {
+                return errorResult(e);
+            }
+        },
+    },
     {
         name: "get_skill",
         description: "Fetch the relay's auto-updating SKILL.md (the full Homespun usage guide) — UNAUTHENTICATED, needs no API key. Call this to self-teach the Homespun workflow (events vs records, schema grammars, the poll loop) before driving the other tools. Pass version_only:true to get just the relay's skill version string (to check if a cached copy is stale).",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@homespunapps/mcp",
   "mcpName": "io.github.aerolalit/homespun",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Model Context Protocol (stdio) server for Homespun: lets any MCP client (Claude Desktop, Cursor, …) hand a human a rich interactive UI by URL and get structured data back.",
   "license": "MIT",
   "type": "module",
@@ -13,14 +13,9 @@
     "relay",
     "human-in-the-loop"
   ],
-  "homepage": "https://github.com/aerolalit/homespun#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/aerolalit/homespun.git",
-    "directory": "packages/mcp"
-  },
+  "homepage": "https://homespun.dev",
   "bugs": {
-    "url": "https://github.com/aerolalit/homespun/issues"
+    "url": "mailto:support@homespun.dev"
   },
   "engines": {
     "node": ">=20"

package/server.json

@@ -4,10 +4,7 @@
   "title": "Homespun",
   "description": "Hand a human a rich interactive UI by URL and get structured data back, from any MCP client.",
   "version": "0.0.29",
-  "repository": {
-    "url": "https://github.com/aerolalit/homespun",
-    "source": "github"
-  },
+  "websiteUrl": "https://homespun.dev",
   "packages": [
     {
       "registryType": "npm",
@@ -26,7 +23,7 @@
         },
         {
           "name": "HOMESPUN_URL",
-          "description": "Homespun relay base URL. Defaults to the hosted relay https://homespun.dev; set this to point at a self-hosted relay.",
+          "description": "Homespun relay base URL. Defaults to the hosted relay https://homespun.dev; set this to point at a different relay.",
           "isRequired": false,
           "isSecret": false
         },