@mangtre/mcp 0.1.0

package/LICENSE

@@ -0,0 +1,26 @@
+Măng — Proprietary License
+
+Copyright © 2026 RumitX. All rights reserved.
+
+This software and its source code (the "Software"), including the Măng shell,
+the @mangtre/* packages, and the bundled mini-apps in this repository, are the
+confidential and proprietary property of RumitX.
+
+No license, right, or permission is granted to any person to use, copy, modify,
+merge, publish, distribute, sublicense, sell, or create derivative works of the
+Software, in whole or in part, without the prior written consent of RumitX.
+
+Unauthorized copying, distribution, or use of the Software, via any medium, is
+strictly prohibited.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL RUMITX BE LIABLE
+FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY ARISING FROM, OUT OF, OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+Note: this proprietary notice protects the codebase during the early (NOW)
+horizon. When Măng opens to third-party creators, a separate license may be
+issued for the fork-able starter kit.
+
+For licensing inquiries: RumitX — https://rumitx.com

package/dist/index.js

@@ -0,0 +1,196 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+
+// src/tools.ts
+import { existsSync } from "fs";
+import { readFile } from "fs/promises";
+import { resolve } from "path";
+import {
+  ApiError,
+  apiFetch,
+  checkBundle,
+  extractManifestComment,
+  loadAuth,
+  scaffoldApp
+} from "@mangtre/cli/lib";
+var DEFAULT_BUNDLE = "dist/app.js";
+function getStandard() {
+  return [
+    "# chu\u1EA9n M\u0103ng \u2014 what a mini-app MUST satisfy",
+    "",
+    "Contract: export `{ manifest, mount }` from ONE ESM file. `mount(root, sdk) => unmount`.",
+    "Reach the outside world ONLY via `sdk.*` (storage/theme/data/\u2026) \u2014 never raw fetch/storage/eval.",
+    "",
+    "Manifest (Zod-validated): id (lowercase slug 3\u201340), name, icon (emoji), version (semver),",
+    "permissions[] (storage|theme|ai|identity|context|data), optional commands[], surfaces[], flow[].",
+    "Declare a `flow` (lu\u1ED3ng ch\xEDnh): each step's `checkpoint` must match a `data-mang-checkpoint` el.",
+    "",
+    "Hard limits (FAIL): bundle \u2264 2 MB \xB7 no eval / new Function / remote import() / WebSocket.",
+    "Warnings: direct fetch / localStorage / document.write (route through sdk.* instead).",
+    "Design: desktop-responsive (verify 1440px + 390px), use @mangtre/ui for auto light/dark.",
+    "",
+    "Build: `mang build` (Vite lib \u2192 dist/app.js + the // mang-manifest: line). Preflight: `mang check`.",
+    "Publish: `mang login` then `mang publish`. These mirror the server gate exactly."
+  ].join("\n");
+}
+function formatReport(r) {
+  const lines = [];
+  if (!r.manifestFound) lines.push("\u26A0\uFE0F no manifest comment found \u2014 run `mang build` first.");
+  for (const f of r.findings)
+    lines.push(`${f.severity === "fail" ? "\u2716" : "\u26A0"} [${f.check}] ${f.message}`);
+  lines.push(
+    r.passed ? `\u2705 PASS \u2014 ${(r.bytes / 1024).toFixed(0)} KB. Ready to publish.` : `\u274C FAIL \u2014 ${r.findings.filter((f) => f.severity === "fail").length} error(s).`
+  );
+  return lines.join("\n");
+}
+async function runCheck(args) {
+  let source = args.source;
+  if (!source) {
+    const path = args.bundlePath ?? DEFAULT_BUNDLE;
+    const abs = resolve(process.cwd(), path);
+    if (!existsSync(abs)) return `\u274C Bundle not found: ${path}. Run \`mang build\` first.`;
+    source = await readFile(abs, "utf8");
+  }
+  return formatReport(checkBundle({ source, appId: args.appId }));
+}
+async function runScaffold(args) {
+  const targetDir = resolve(process.cwd(), args.dir ?? args.slug);
+  const written = await scaffoldApp({
+    slug: args.slug,
+    name: args.name ?? args.slug,
+    icon: args.icon ?? "\u{1F331}",
+    targetDir
+  });
+  return `\u2705 Scaffolded "${args.slug}" (${written.length} files) at ${args.dir ?? args.slug}.
+Next: pnpm install \u2192 mang build \u2192 mang publish.`;
+}
+function asManifest(v) {
+  if (v && typeof v === "object" && !Array.isArray(v)) {
+    const m = v;
+    if (["id", "name", "icon", "version"].every((k) => typeof m[k] === "string")) {
+      return m;
+    }
+  }
+  return null;
+}
+async function runWhoami() {
+  const auth = loadAuth();
+  if (!auth) return "Not logged in. Run `mang login` in a terminal first.";
+  try {
+    const me = await apiFetch("/v1/me", {
+      base: auth.api,
+      token: auth.token
+    });
+    return `Logged in as @${me.handle} (${me.roles.join(", ")}) on ${auth.api}.`;
+  } catch (err) {
+    return `Auth token invalid (${err.message}). Run \`mang login\` again.`;
+  }
+}
+async function runStatus() {
+  const auth = loadAuth();
+  if (!auth) return "Not logged in. Run `mang login` first.";
+  const data = await apiFetch("/v1/apps/mine", { base: auth.api, token: auth.token });
+  if (data.apps.length === 0) return "No apps yet. Use scaffold \u2192 mang build \u2192 publish.";
+  return data.apps.map((a) => {
+    const v = a.versions[0];
+    return `\u2022 ${a.nameVi} (${a.id}) \u2014 ${a.status}${v ? ` \xB7 v${v.version}: ${v.status}` : ""}`;
+  }).join("\n");
+}
+async function runPublish(args) {
+  const auth = loadAuth();
+  if (!auth) return "Not logged in. Run `mang login` first.";
+  const path = args.bundlePath ?? DEFAULT_BUNDLE;
+  const abs = resolve(process.cwd(), path);
+  if (!existsSync(abs)) return `\u274C Bundle not found: ${path}. Run \`mang build\` first.`;
+  const source = await readFile(abs, "utf8");
+  const manifest = asManifest(extractManifestComment(source));
+  if (!manifest) return "\u274C Bundle missing a valid manifest comment. Run `mang build`.";
+  const report = checkBundle({ source, manifest });
+  if (!report.passed) return `\u274C Preflight failed \u2014 fix these first:
+${formatReport(report)}`;
+  try {
+    await apiFetch("/v1/apps", {
+      base: auth.api,
+      token: auth.token,
+      body: { id: manifest.id, nameVi: manifest.name, icon: manifest.icon }
+    });
+  } catch (err) {
+    if (!(err instanceof ApiError) || err.status !== 409) {
+      return `\u274C Could not create app: ${err.message}`;
+    }
+    const mine = await apiFetch("/v1/apps/mine", {
+      base: auth.api,
+      token: auth.token
+    }).catch(() => ({ apps: [] }));
+    if (!mine.apps.some((a) => a.id === manifest.id)) {
+      return `\u274C Slug "${manifest.id}" belongs to another creator.`;
+    }
+  }
+  const form = new FormData();
+  form.set("bundle", new Blob([source], { type: "text/javascript" }), "app.js");
+  form.set("version", manifest.version);
+  form.set("manifest", JSON.stringify(manifest));
+  const res = await apiFetch(
+    `/v1/apps/${manifest.id}/versions`,
+    { base: auth.api, token: auth.token, body: form }
+  );
+  return `\u{1F680} Published v${manifest.version} (${res.status}). Version: ${res.versionId}. Track with the status tool.`;
+}
+
+// src/index.ts
+var text = (s) => ({ content: [{ type: "text", text: s }] });
+var guard = (fn) => async (a) => {
+  try {
+    return text(await fn(a));
+  } catch (err) {
+    return text(`\u274C ${err instanceof Error ? err.message : String(err)}`);
+  }
+};
+var server = new McpServer({ name: "mang-moc", version: "0.0.0" });
+server.tool(
+  "mang_get_standard",
+  "Return the 'chu\u1EA9n M\u0103ng' standard a mini-app must satisfy (contract, manifest, limits, design).",
+  guard(() => getStandard())
+);
+server.tool(
+  "mang_check",
+  "Offline preflight a built mini-app bundle against the exact server gate. Returns fail/warn findings.",
+  {
+    bundlePath: z.string().optional().describe("Path to the built bundle (default dist/app.js)."),
+    source: z.string().optional().describe("Bundle source text (use instead of bundlePath)."),
+    appId: z.string().optional().describe("Claimed app id (defaults to the manifest id).")
+  },
+  guard(runCheck)
+);
+server.tool(
+  "mang_scaffold",
+  "Create a new standard-compliant mini-app (React + @mangtre/ui, declared flow). Returns files written.",
+  {
+    slug: z.string().describe("App id / folder slug (lowercase, 3\u201340 chars)."),
+    name: z.string().optional().describe("Display name."),
+    icon: z.string().optional().describe("Emoji icon."),
+    dir: z.string().optional().describe("Target directory (default ./<slug>).")
+  },
+  guard(runScaffold)
+);
+server.tool(
+  "mang_whoami",
+  "Show the logged-in creator (reads the token `mang login` stored), or a hint to log in.",
+  guard(() => runWhoami())
+);
+server.tool(
+  "mang_status",
+  "List my published apps + each one's latest review state. Requires `mang login`.",
+  guard(() => runStatus())
+);
+server.tool(
+  "mang_publish",
+  "Preflight + publish a built bundle to M\u0103ng (creates the app on first publish). Requires `mang login`.",
+  { bundlePath: z.string().optional().describe("Path to the built bundle (default dist/app.js).") },
+  guard(runPublish)
+);
+await server.connect(new StdioServerTransport());

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@mangtre/mcp",
+  "version": "0.1.0",
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "mang-mcp": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "zod": "^3.24.1",
+    "@mangtre/cli": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.17.6",
+    "tsup": "^8.3.5",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}