@mcpcloud/cli 0.20.0 → 0.20.1-next-20260906202728

package/dist/index.js

@@ -5571,6 +5571,9 @@ function describeDeployed(deployed) {
   return `${deployed.behindHead} commit${deployed.behindHead === 1 ? "" : "s"} behind HEAD`;
 }
 function describeWorkingTree(tree) {
+  if (tree.hydrated === false) {
+    return "not loaded yet — hydrates from the stored bundle on the next commit or sync";
+  }
   const parts = [];
   if (tree.added > 0)
     parts.push(`${tree.added} added`);
@@ -7344,6 +7347,17 @@ function reportDeployFailure(terminalEvent) {
   printError(`Deploy failed: ${reason ?? terminalEvent.message}`);
   return true;
 }
+async function isOnlyDeployment(args) {
+  try {
+    const listing = await api.get(`/api/v1/server/deployments?organizationId=${encodeURIComponent(args.orgId)}&serverId=${encodeURIComponent(args.serverId)}&limit=2`);
+    const rows = listing.deployments;
+    if (!Array.isArray(rows) || rows.length === 0)
+      return false;
+    return rows.every((row) => row.id === args.deploymentId);
+  } catch {
+    return false;
+  }
+}
 async function refreshDeploymentRow(args) {
   try {
     const refreshed = await api.get(`/api/v1/server/deployments?organizationId=${encodeURIComponent(args.orgId)}&serverId=${encodeURIComponent(args.serverId)}&limit=5`);
@@ -7458,6 +7472,9 @@ function registerServerLifecycleCommands(servers) {
         "terminal at": formatDate(terminalEvent.timestamp)
       } : {}
     });
+    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({ deploymentId: dep.deploymentId, orgId, serverId })) {
+      printWarn("This first deployment is public — anyone with the URL can call it. Redeploy with --access-mode privateOrg or unlisted to require sign-in (recommended when the upstream API needs credentials).");
+    }
     if (!opts.wait && dep.status === "queued") {
       printInfo(`Deploy is running in the background — follow with \`mcp deployments get ${dep.deploymentId}\` or rerun with --wait.`);
     }
@@ -7666,6 +7683,9 @@ function registerServerLifecycleCommands(servers) {
         "terminal at": formatDate(terminalEvent.timestamp)
       } : {}
     });
+    if (!accessMode && dep.accessMode === "public" && await isOnlyDeployment({ deploymentId: dep.deploymentId, orgId, serverId })) {
+      printWarn("This first deployment is public — anyone with the URL can call it. Redeploy with --access-mode privateOrg or unlisted to require sign-in (recommended when the upstream API needs credentials).");
+    }
     if (!opts.wait && dep.status === "queued") {
       printInfo(`Deploy is running in the background — follow with \`mcp deployments get ${dep.deploymentId}\` or rerun with --wait.`);
     }
@@ -8097,6 +8117,12 @@ function registerServerSpecCommands(servers) {
       "api source": data.apiSource.id ?? "—",
       project: projectId
     });
+    const warnings = Array.isArray(data.apiSource.warnings) ? data.apiSource.warnings.filter((warning) => typeof warning === "string") : [];
+    for (const warning of warnings.slice(0, 10))
+      printWarn(`  ! ${warning}`);
+    if (warnings.length > 10) {
+      printWarn(`  ! +${warnings.length - 10} more — \`mcp projects api-source ${data.apiSource.id ?? "<id>"}\` lists them all.`);
+    }
     printStep(`Next: \`mcp servers generate ${data.server.id} --out ./out\` or \`mcp servers deploy ${data.server.id} --wait\`.`);
   }));
   servers.command("generate <server>").description("Generate the server's TypeScript bundle (the exact code `deploy` ships) and optionally write it to disk — a dry-run for the codegen path. Wraps POST /api/v1/server/generate.").option("--org <organizationId>", "Organization ID").option("--project <project>", "Project (id or name; looked up from the server when omitted)").option("--out <dir>", "Write the generated files to this directory instead of just summarizing").option("--store", "Persist the bundle as the one `deploy` will ship. Required after editing prompts, resources or tool metadata: deploy reuses a server's existing bundle unchanged, so without this the change never reaches the deployed worker.").addHelpText("after", [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcpcloud/cli",
-  "version": "0.20.0",
+  "version": "0.20.1-next-20260906202728",
   "description": "The official CLI for MCPCloud — manage projects, servers, skills, and API keys from the terminal",
   "type": "module",
   "bin": {