@homespunapps/mcp 1.6.60 → 1.6.61

package/dist/bin.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+// Process entry point for the `homespun-mcp` binary (see package.json's
+// `bin` field). Kept separate from index.ts, which is a pure module with no
+// top-level side effects, so index.ts can be imported by a test (or by
+// anything else) without starting a stdio server.
+//
+// npm installs a bin as a symlink (node_modules/.bin/homespun-mcp -> this
+// file), so an entry point cannot tell "am I the main module" apart from
+// "was I imported" by comparing process.argv[1] to import.meta.url: under a
+// symlink those two disagree (one is the link path, the other is the
+// resolved real path) and a guard built on that comparison silently never
+// runs main(). Unconditionally calling main() here, in a file whose only
+// job is to be the entry point, sidesteps the question entirely.
+import { main } from "./index.js";
+main().catch((e) => {
+    process.stderr.write(`homespun-mcp: fatal: ${e instanceof Error ? (e.stack ?? e.message) : String(e)}\n`);
+    process.exit(1);
+});

package/dist/index.d.ts

@@ -1,2 +1,3 @@
-#!/usr/bin/env node
-export {};
+export declare function wrapToolNames(names: string[], width: number): string;
+export declare const HELP: string;
+export declare function main(): Promise<void>;

package/dist/index.js

@@ -1,4 +1,3 @@
-#!/usr/bin/env node
 // `homespun-mcp` — a thin stdio Model Context Protocol server wrapping Homespun.
 //
 // Speaks MCP over stdio so any MCP client (Claude Desktop, Cursor, …) can use
@@ -14,34 +13,38 @@
 //   HOMESPUN_TOKEN            alias for HOMESPUN_API_KEY (for MCP host "*_TOKEN" config)
 //   HOMESPUN_AGENT_NAME       label for the auto-registered agent
 //   HOMESPUN_REGISTER_SECRET  registration secret (REGISTRATION_MODE=secret relays)
+//
+// This module is a pure library: no top-level side effects, so it can be
+// imported by a test (or by bin.ts) without starting a stdio server. The
+// process entry point lives in bin.ts, which is what `package.json`'s `bin`
+// field points at.
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { buildServer } from "./server.js";
+import { TOOLS } from "./tools.js";
 import { VERSION } from "./version.js";
-async function main() {
-    // --version / --help are answered locally without starting the transport, so
-    // a human poking at the binary gets a useful response instead of a hung
-    // stdio session waiting for JSON-RPC.
-    const argv = process.argv.slice(2);
-    if (argv.includes("--version") || argv.includes("-v")) {
-        process.stdout.write(`homespun-mcp ${VERSION}\n`);
-        return;
-    }
-    if (argv.includes("--help") || argv.includes("-h")) {
-        process.stdout.write(HELP);
-        return;
+// Derived from TOOLS so the banner can never drift from what the server
+// actually registers (it did, silently, for months, see #1659). Wrapped by
+// hand rather than left as one long line, since a flat 25-name line is
+// harder to scan than a handful of short ones.
+export function wrapToolNames(names, width) {
+    const words = names.map((name, i) => i < names.length - 1 ? `${name},` : `${name}.`);
+    const lines = [];
+    let current = "Tools exposed:";
+    for (const word of words) {
+        const next = `${current} ${word}`;
+        if (next.length > width && current !== "Tools exposed:") {
+            lines.push(current);
+            current = word;
+        }
+        else {
+            current = next;
+        }
     }
-    const server = buildServer({
-        agentName: process.env.HOMESPUN_AGENT_NAME,
-        registerSecret: process.env.HOMESPUN_REGISTER_SECRET,
-    });
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
-    // Stdio MCP servers run until the host closes stdin; keep the process alive.
-    // The transport resolves connect() immediately, so without this the event
-    // loop would otherwise stay open only because of the stdin reader — which is
-    // the intended behaviour. Nothing more to do here.
+    lines.push(current);
+    return lines.join("\n");
 }
-const HELP = `homespun-mcp ${VERSION} — Homespun Model Context Protocol server (stdio)
+const TOOLS_EXPOSED = wrapToolNames(TOOLS.map((t) => t.name), 74);
+export const HELP = `homespun-mcp ${VERSION}: Homespun Model Context Protocol server (stdio)
 
 Run by an MCP client over stdio; not meant to be invoked interactively. Add it
 to your MCP client config, e.g. Claude Desktop / Cursor:
@@ -65,13 +68,31 @@ Environment:
   HOMESPUN_AGENT_NAME       Display name for the auto-registered agent.
   HOMESPUN_REGISTER_SECRET  Registration secret (REGISTRATION_MODE=secret relays).
 
-Tools exposed: deploy_app, list_rows, get_row, upsert_row, update_row,
-delete_row, get_feed_events, apps, members, attachments, taste, key,
-feedback, agent, get_skill.
+${TOOLS_EXPOSED}
 
 See https://docs.homespun.dev for docs.
 `;
-main().catch((e) => {
-    process.stderr.write(`homespun-mcp: fatal: ${e instanceof Error ? (e.stack ?? e.message) : String(e)}\n`);
-    process.exit(1);
-});
+export async function main() {
+    // --version / --help are answered locally without starting the transport, so
+    // a human poking at the binary gets a useful response instead of a hung
+    // stdio session waiting for JSON-RPC.
+    const argv = process.argv.slice(2);
+    if (argv.includes("--version") || argv.includes("-v")) {
+        process.stdout.write(`homespun-mcp ${VERSION}\n`);
+        return;
+    }
+    if (argv.includes("--help") || argv.includes("-h")) {
+        process.stdout.write(HELP);
+        return;
+    }
+    const server = buildServer({
+        agentName: process.env.HOMESPUN_AGENT_NAME,
+        registerSecret: process.env.HOMESPUN_REGISTER_SECRET,
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // Stdio MCP servers run until the host closes stdin; keep the process alive.
+    // The transport resolves connect() immediately, so without this the event
+    // loop would otherwise stay open only because of the stdin reader, which is
+    // the intended behaviour. Nothing more to do here.
+}

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.6.60";
+export declare const VERSION = "1.6.61";

package/dist/version.js

@@ -1,3 +1,3 @@
 // Single source of the package version, reported in the MCP server's
 // serverInfo. Kept in sync with package.json by the release tooling.
-export const VERSION = "1.6.60";
+export const VERSION = "1.6.61";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@homespunapps/mcp",
   "mcpName": "dev.homespun/homespun",
-  "version": "1.6.60",
+  "version": "1.6.61",
   "description": "Model Context Protocol (stdio) server for Homespun: lets any MCP client (Claude Desktop, Cursor, …) deploy a multi-user web app with hosting, auth, a shared database and permissions included.",
   "license": "MIT",
   "type": "module",
@@ -24,7 +24,7 @@
     "access": "public"
   },
   "bin": {
-    "homespun-mcp": "dist/index.js"
+    "homespun-mcp": "dist/bin.js"
   },
   "exports": {
     "./tools": "./dist/tools.js",
@@ -46,7 +46,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@homespunapps/core": "^1.6.60",
+    "@homespunapps/core": "^1.6.61",
     "zod": "^4.4.3"
   },
   "devDependencies": {

package/server.json

@@ -3,14 +3,14 @@
   "name": "dev.homespun/homespun",
   "title": "Homespun",
   "description": "Deploy a multi-user web app from your agent: hosting, auth, database, and permissions.",
-  "version": "1.6.60",
+  "version": "1.6.61",
   "websiteUrl": "https://homespun.dev",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@homespunapps/mcp",
-      "version": "1.6.60",
+      "version": "1.6.61",
       "transport": {
         "type": "stdio"
       },