@mobilenext/mobile-mcp 0.0.51 → 0.0.52

package/lib/index.js

@@ -14,6 +14,9 @@ const startSseServer = async (host, port) => {
     const app = (0, express_1.default)();
     const server = (0, server_1.createMcpServer)();
     const authToken = process.env.MOBILEMCP_AUTH;
+    if (!authToken) {
+        (0, logger_1.error)("WARNING: MOBILEMCP_AUTH is not set. The SSE server will accept unauthenticated connections. Set MOBILEMCP_AUTH to require Bearer token authentication.");
+    }
     if (authToken) {
         app.use((req, res, next) => {
             if (req.headers.authorization !== `Bearer ${authToken}`) {
@@ -23,6 +26,18 @@ const startSseServer = async (host, port) => {
             next();
         });
     }
+    // Block cross-origin requests — MCP clients are not browsers
+    app.use((req, res, next) => {
+        if (req.headers.origin) {
+            res.status(403).json({ error: "Cross-origin requests are not allowed" });
+            return;
+        }
+        if (req.method === "OPTIONS") {
+            res.status(403).end();
+            return;
+        }
+        next();
+    });
     let transport = null;
     app.post("/mcp", (req, res) => {
         if (transport) {
@@ -31,9 +46,13 @@ const startSseServer = async (host, port) => {
     });
     app.get("/mcp", (req, res) => {
         if (transport) {
-            transport.close();
+            res.status(409).json({ error: "Another client is already connected. Disconnect the existing client first." });
+            return;
         }
         transport = new sse_js_1.SSEServerTransport("/mcp", res);
+        transport.onclose = () => {
+            transport = null;
+        };
         server.connect(transport);
     });
     app.listen(port, host, () => {

package/lib/mobilecli.js

@@ -51,7 +51,7 @@ class Mobilecli {
             // We're inside node_modules, go to the last node_modules in the path
             const nodeModulesParts = pathParts.slice(0, lastNodeModulesIndex + 1);
             const lastNodeModulesPath = nodeModulesParts.join(node_path_1.sep);
-            const mobilecliPath = (0, node_path_1.join)(lastNodeModulesPath, "@mobilenext", "mobilecli", "bin", binaryName);
+            const mobilecliPath = (0, node_path_1.join)(lastNodeModulesPath, "mobilecli", "bin", binaryName);
             if ((0, node_fs_1.existsSync)(mobilecliPath)) {
                 return mobilecliPath;
             }
@@ -59,7 +59,7 @@ class Mobilecli {
         // Not in node_modules, look one directory up from current script
         const scriptDir = (0, node_path_1.dirname)(__filename);
         const parentDir = (0, node_path_1.dirname)(scriptDir);
-        const mobilecliPath = (0, node_path_1.join)(parentDir, "node_modules", "@mobilenext", "mobilecli", "bin", binaryName);
+        const mobilecliPath = (0, node_path_1.join)(parentDir, "node_modules", "mobilecli", "bin", binaryName);
         if ((0, node_fs_1.existsSync)(mobilecliPath)) {
             return mobilecliPath;
         }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mobilenext/mobile-mcp",
   "mcpName": "io.github.mobile-next/mobile-mcp",
-  "version": "0.0.51",
+  "version": "0.0.52",
   "description": "Mobile MCP",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
     "zod-to-json-schema": "3.25.0"
   },
   "optionalDependencies": {
-    "@mobilenext/mobilecli": "0.1.60"
+    "mobilecli": "0.2.0"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.2.0",