@nyuchi/mzizi-mcp 0.9.0 → 0.10.0

package/dist/stdio.js

@@ -3,40 +3,17 @@
  * stdio entry — for the MCP registry (`npx mzizi-mcp`) and local MCP clients
  * (Claude Code, etc.).
  *
- * Spawns the server over the stdio transport, using a long-lived Supabase
- * anon client. RLS on `component_documents` enforces read-only.
+ * Zero-config and credential-free: the registry data and skills are bundled
+ * into this package at build time (from the mzizi-registry commit pinned in
+ * `registry.pin.json`), so the registry tools need no network at all. The
+ * `docs_*` tools forward to the public docs MCP at docs.mzizi.dev.
  *
- * Zero-config: the public Mzizi registry URL + publishable key are baked in
- * as defaults (see defaults.ts — they are not secrets), so `npx mzizi-mcp`
- * works with no environment set. This is the sanctioned headless path: the
- * hosted mcp.mzizi.dev endpoint sits behind an interactive, browser-only
- * WorkOS signup gate that a headless agent cannot complete, whereas this bin
- * reads the same public registry directly.
- *
- * Env (optional — override the defaults to point at a fork / self-hosted
- * mirror):
- *   SUPABASE_URL              (or NEXT_PUBLIC_SUPABASE_URL)
- *   SUPABASE_PUBLISHABLE_KEY  (or NEXT_PUBLIC_SUPABASE_ANON_KEY)
+ * `MZIZI_API_BASE` is gone: there is no registry API to point at any more. To
+ * serve different registry content, build with a different pin.
  */
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { createClient } from "@supabase/supabase-js";
 import { createMziziMcpServer } from "./server.js";
-import { DEFAULT_SUPABASE_URL, DEFAULT_SUPABASE_PUBLISHABLE_KEY } from "./defaults.js";
 async function main() {
-    const url = process.env.SUPABASE_URL ?? process.env.NEXT_PUBLIC_SUPABASE_URL ?? DEFAULT_SUPABASE_URL;
-    const key = process.env.SUPABASE_PUBLISHABLE_KEY ??
-        process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY ??
-        DEFAULT_SUPABASE_PUBLISHABLE_KEY;
-    if (!url || !key) {
-        // Unreachable with the baked defaults, but keep an actionable message in
-        // case someone explicitly sets one var to an empty string.
-        process.stderr.write("mzizi-mcp: missing SUPABASE_URL or SUPABASE_PUBLISHABLE_KEY. Leave both unset to use " +
-            "the public Mzizi registry defaults, or set them to point at a fork / self-hosted mirror.\n");
-        process.exit(1);
-    }
-    const supabase = createClient(url, key, {
-        auth: { persistSession: false, autoRefreshToken: false },
-    });
     const server = await createMziziMcpServer();
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/dist/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAA;AAEtF,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,oBAAoB,CAAA;IAC1F,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,6BAA6B;QACzC,gCAAgC,CAAA;IAClC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjB,yEAAyE;QACzE,2DAA2D;QAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uFAAuF;YACrF,4FAA4F,CAC/F,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;QACtC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;KACzD,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,OAAO,IAAI,CAAC,CAAA;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,OAAO,IAAI,CAAC,CAAA;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/tools.d.ts

@@ -1,10 +1,13 @@
 /**
  * The Mzizi MCP tool surface — 10 tools, defined in code.
  *
- * Every one is backed by `mzizi.dev/api/v1` over HTTP. There is no Supabase client and
- * no `mcp_tool_registry` lookup: components are real files the Next.js app compiles and
- * serves, so the API is the single source of truth and this server is one of its
- * clients.
+ * Eight are free. `fundi` and `report_issue` act as a console user and need
+ * the WorkOS sign-in; `access.ts` says which is which and how to sign in.
+ *
+ * The registry tools answer from files bundled into this build (`registry.ts`,
+ * generated from mzizi-dev/mzizi-registry at the commit in `registry.pin.json`), and
+ * skills from the skill files in this repo. There is no database and no request-time
+ * registry API call. Docs are federated separately (`docs-federation.ts`).
  *
  * Defining the tools here rather than loading them from a table is the point. A
  * registry-driven surface changed what the server exposed whenever someone edited a
@@ -16,15 +19,51 @@
  * be checked mechanically rather than argued about.
  */
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { MziziApiClient } from "./api-client.js";
+import { type Registry } from "./registry.js";
 import type { FundiToolContext } from "./fundi-client.js";
 export declare const TOOL_PREFIX = "mzizi_";
 /** What each tool absorbed, so coverage against the old 62 is checkable. */
 export declare const TOOL_COVERAGE: Record<string, readonly string[]>;
+/**
+ * The caller's own issue desk, already bound to their identity.
+ *
+ * A narrow structural type rather than the `IssueDesk` class: `tools.ts` runs
+ * in the stdio bin too, where `cloudflare:workers` does not resolve, and
+ * importing the class for its type alone would pull the module in. The Worker
+ * passes a `DurableObjectStub`, which satisfies this shape.
+ */
+export type IssueDeskContext = {
+    open(input: {
+        kind: "feedback" | "observability" | "chaos";
+        message: string;
+        component?: string;
+        severity?: "low" | "medium" | "high" | "critical";
+        skill?: string;
+    }): Promise<unknown>;
+    get(id: string): Promise<unknown | null>;
+    list(limit?: number): Promise<unknown[]>;
+    retry(id: string): Promise<unknown | null>;
+};
 export type RegisterOptions = {
-    api: MziziApiClient;
+    /** The registry to answer from. Defaults to the one bundled into this build. */
+    registry?: () => Promise<Registry>;
     /** Registers the `fundi` tool only when this server is wired as a fundi caller. */
     fundi?: FundiToolContext;
+    /**
+     * The signed-in user's issue desk. Absent on the stdio bin and in
+     * `wrangler dev` — there is no Durable Object namespace and no user to key
+     * one by — in which case `report_issue` says so rather than pretending.
+     */
+    desk?: IssueDeskContext;
+    /**
+     * Set when the caller is anonymous on a server that offers sign-in (the
+     * Worker's free tier, see `access.ts`). The signed-in tools are still listed,
+     * and each refuses with a sign-in error rather than vanishing. `fundi` lists
+     * `mzizi_fundi` as well, and is true only when this server can reach fundi.
+     */
+    anonymous?: {
+        fundi: boolean;
+    };
 };
 export declare function registerMziziTools(server: McpServer, opts: RegisterOptions): string[];
 //# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACxE,OAAO,EAAE,cAAc,EAAkB,MAAM,iBAAiB,CAAA;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AASzD,eAAO,MAAM,WAAW,WAAW,CAAA;AAuCnC,4EAA4E;AAC5E,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAwC3D,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,cAAc,CAAA;IACnB,mFAAmF;IACnF,KAAK,CAAC,EAAE,gBAAgB,CAAA;CACzB,CAAA;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAkWrF"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAmB,KAAK,QAAQ,EAAe,MAAM,eAAe,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAW1D,eAAO,MAAM,WAAW,WAAW,CAAC;AA0DpC,4EAA4E;AAC5E,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CA0D3D,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,KAAK,EAAE;QACV,IAAI,EAAE,UAAU,GAAG,eAAe,GAAG,OAAO,CAAC;QAC7C,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;QAClD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,mFAAmF;IACnF,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;OAIG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;CAChC,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,eAAe,GACpB,MAAM,EAAE,CAwjBV"}