@nonbot/mcp 0.0.0-stage → 0.2.0

package/dist/stdio.js

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+import { mkdir, writeFile, readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { resolveApiBase } from './core/config.js';
+import { createNonbotMcpServer } from './core/server.js';
+const BACKUP_DIR = join(homedir(), '.non.bot', 'backups');
+async function tokenFromCliAuth() {
+    try {
+        const configDir = process.env.NONBOT_CONFIG_DIR || join(homedir(), '.config', 'nonbot');
+        const profile = process.env.NONBOT_PROFILE;
+        const file = profile && /^[a-zA-Z0-9_-]{1,32}$/.test(profile)
+            ? join(configDir, 'profiles', `${profile}.json`)
+            : join(configDir, 'auth.json');
+        const parsed = JSON.parse(await readFile(file, 'utf8'));
+        return typeof parsed?.pat === 'string' && parsed.pat.startsWith('pat_') ? parsed.pat : '';
+    }
+    catch {
+        return '';
+    }
+}
+const PORTFOLIO_ID_SHAPE = /^[A-Za-z0-9_-]{1,80}$/;
+async function fileBackup(id, json) {
+    if (typeof id !== 'string' || !PORTFOLIO_ID_SHAPE.test(id)) {
+        throw new Error(`Refusing to back up portfolio with unsafe id shape: ${JSON.stringify(id)}`);
+    }
+    await mkdir(BACKUP_DIR, { recursive: true });
+    const file = join(BACKUP_DIR, `${id}-${Date.now()}.json`);
+    if (dirname(resolve(file)) !== resolve(BACKUP_DIR)) {
+        throw new Error('Refusing to write portfolio backup outside the backup directory');
+    }
+    await writeFile(file, JSON.stringify(json, null, 2), 'utf8');
+}
+const IMAGE_MIME = { png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', webp: 'image/webp', gif: 'image/gif' };
+async function readLocalImage(path) {
+    const ext = path.toLowerCase().split('.').pop() ?? '';
+    const mime = IMAGE_MIME[ext];
+    if (!mime)
+        throw new Error('file_path must be a .png, .jpg, .jpeg, .webp or .gif image');
+    const buf = await readFile(resolve(path));
+    if (buf.length > 2_200_000)
+        throw new Error(`The image is ${(buf.length / 1e6).toFixed(1)} MB; the limit is 2.2 MB — downscale it first`);
+    const magic = buf.subarray(0, 12);
+    const ok = mime === 'image/png' ? magic[0] === 0x89 && magic[1] === 0x50
+        : mime === 'image/jpeg' ? magic[0] === 0xff && magic[1] === 0xd8
+            : mime === 'image/gif' ? magic.toString('latin1', 0, 3) === 'GIF'
+                : magic.toString('latin1', 0, 4) === 'RIFF' && magic.toString('latin1', 8, 12) === 'WEBP';
+    if (!ok)
+        throw new Error('file_path is not the image its extension says it is');
+    return `data:${mime};base64,${buf.toString('base64')}`;
+}
+async function main() {
+    const inRun = typeof process.env.NONBOT_RUN_ID === 'string' && process.env.NONBOT_RUN_ID.length > 0;
+    const token = inRun
+        ? (process.env.NONBOT_PAT || '')
+        : (process.env.NON_BOT_API_TOKEN || (await tokenFromCliAuth()));
+    const ctx = {
+        apiBase: resolveApiBase(process.env.NON_BOT_API_BASE),
+        getToken: () => token,
+        readonly: process.env.NON_BOT_MCP_READONLY === '1',
+        backup: fileBackup,
+        readLocalImage,
+    };
+    const server = createNonbotMcpServer(ctx);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((err) => {
+    process.stderr.write(`nonbot-mcp failed to start: ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});

package/package.json

@@ -1,6 +1,67 @@
 {
   "name": "@nonbot/mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "type": "module",
+  "description": "The non.bot MCP server — one server for your portfolios, decision graph, and Runs. Runs over stdio (Claude Code, Cursor, VS Code) with a pat_ token. Built on MCP protocol 2025-11-25.",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "mcp-server",
+    "non.bot",
+    "portfolio",
+    "product-management",
+    "decision-graph",
+    "claude",
+    "claude-code",
+    "cursor",
+    "vscode"
+  ],
+  "license": "UNLICENSED",
+  "private": false,
+  "homepage": "https://non.bot/wiki/integrations",
+  "bugs": {
+    "url": "https://non.bot/contact"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/conrad-pm/nonbot.git",
+    "directory": "nonbot-mcp"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "nonbot-mcp": "dist/stdio.js"
+  },
+  "main": "dist/core/server.js",
+  "types": "dist/core/server.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "mcp": "tsx src/stdio.ts",
+    "dev": "tsx src/stdio.ts",
+    "start": "node dist/stdio.js",
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "gen:tools": "node scripts/gen-tool-table.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@cfworker/json-schema": "^4.1.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.19",
+    "tsx": "^4.22.4",
+    "typescript": "^5.7.0",
+    "vitest": "^4.1.8"
+  }
+}