@master4n/master-cli 3.0.3 → 3.0.5

package/bin/utility/mcp-server.d.ts

@@ -0,0 +1,10 @@
+export declare const PROTOCOL_VERSION = "2025-06-18";
+/**
+ * Serve until stdin closes (client disconnect). Never returns.
+ *
+ * Requests are handled CONCURRENTLY: a slow tool call (`wait`, a long `http`
+ * probe) must not block `ping` or other calls behind it. JSON-RPC clients
+ * correlate responses by id, so out-of-order replies are fine; each reply is
+ * one atomic write, so concurrent lines never interleave.
+ */
+export declare function serveMcp(): Promise<never>;

package/bin/utility/mcp-tools.d.ts

@@ -0,0 +1,55 @@
+/** Commands an MCP client may not invoke. */
+export declare const DENYLIST: Record<string, string>;
+export declare const RUNNABLE: string[];
+export declare const TOOLS: ({
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            command?: undefined;
+            args?: undefined;
+        };
+        additionalProperties: boolean;
+        required?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            command: {
+                type: string;
+                description: string;
+                enum: string[];
+            };
+            args: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: string;
+            };
+        };
+        required: string[];
+        additionalProperties: boolean;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            command: {
+                type: string;
+                description: string;
+                enum?: undefined;
+            };
+            args?: undefined;
+        };
+        required: string[];
+        additionalProperties: boolean;
+    };
+})[];
+export declare function callTool(name: string, input: any): Promise<Record<string, unknown>>;

package/llms.txt

@@ -1,6 +1,6 @@
 # @master4n/master-cli (`mfn`)
 
-> 50 headless, JSON-first commands for AI agents and developers: extract instead
+> 51 headless, JSON-first commands for AI agents and developers: extract instead
 > of dump (token savers), compute instead of guess (hallucination killers),
 > one-call system/code/network facts, and cross-platform OS actions (clipboard,
 > notifications, trash, processes). Every command behaves identically for a
@@ -12,6 +12,12 @@
   global install; with it installed, the binary is `mfn`.
 - **Discover commands:** `mfn capabilities --json` returns the full manifest
   (`{ name, version, bin, conventions, docs, categories, commands:[{name,category,summary,examples}] }`).
+- **MCP server built in:** `mfn mcp` serves every command over the Model Context
+  Protocol (stdio) for MCP-only clients — tools `mfn_capabilities`, `mfn_run`
+  `{command, args[]}`, `mfn_help`; `update` is deny-listed. Requests are handled
+  concurrently (a slow `wait` never blocks `ping`). Client config:
+  `{ "command": "npx", "args": ["-y", "@master4n/master-cli", "mcp"] }`.
+  `mfn mcp --json` describes the server without starting it.
 - **Machine output:** pass `--json`, OR just pipe the command (when stdout is not
   a TTY the CLI auto-emits JSON). Output is exactly one object on stdout:
   success → `{ "ok": true, ... }`, failure → `{ "ok": false, "error", "message" }`.
@@ -109,8 +115,9 @@
 
 ## Guardrails (always on — there are no bypass flags)
 
-- File-content commands (`lines` `json` `schema` `diff` `freq` `regex -f`) refuse
-  credential/secret paths (`~/.ssh`, `.env*`, `*.pem`, `.npmrc`, …) → `SensitivePath`, exit 2.
+- File-content commands (`lines` `json` `schema` `diff` `freq` `regex -f`) and
+  `hash -f` refuse credential/secret paths (`~/.ssh`, `.env*`, `*.pem`, `.npmrc`, …)
+  → `SensitivePath`, exit 2 (a digest of a secrets file is offline-brute-forceable).
 - `clip` read redacts secret-shaped content (keys/JWTs/tokens) → `redacted:true`.
 - `env` redacts by name AND value shape; `dotenv` never reads values at all.
 - `http`/`wait -u` refuse cloud metadata endpoints (169.254.169.254 etc.) → `BlockedTarget`;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@master4n/master-cli",
-  "version": "3.0.3",
-  "description": "AI-agent-friendly command-line toolkit: timestamp/date conversion, JWT decoding, port killing, file finding, and directory trees — headless, --json, with a self-describing manifest.",
+  "version": "3.0.5",
+  "description": "AI-agent-friendly command-line toolkit: timestamp/date conversion, JWT decoding, port killing, file finding, and directory trees — headless, --json, with a self-describing manifest and a built-in MCP server (mfn mcp).",
   "type": "module",
   "repository": {
     "type": "git",
@@ -46,7 +46,10 @@
     "developer-cli",
     "agent-cli",
     "mfn",
-    "master-cli"
+    "master-cli",
+    "mcp",
+    "mcp-server",
+    "model-context-protocol"
   ],
   "author": "dwivna",
   "license": "MIT",