@runsnative/mcp-server 0.7.0 → 0.8.0

package/dist/bridge-client.js

@@ -7,6 +7,22 @@ export function clearLinkedPairId() { _linkedPairId = null; }
 // Authorization header (KUKAMANGA-wide env-read rule).
 const BASE_URL = (process.env['RUNSNATIVE_API_URL'] ?? 'https://api.runsnative.org/mcp').trim();
 const TOKEN = process.env['RUNSNATIVE_TENANT_TOKEN']?.trim();
+// Every worker path below is appended to BASE_URL verbatim ('/content',
+// '/pair/start', …), so BASE_URL must carry the '/mcp' prefix — which the default
+// above does. Pointing RUNSNATIVE_API_URL at the bare origin
+// ('https://api.runsnative.org') builds 'https://api.runsnative.org/content', so
+// every call 404s with a body that names no URL — which reads like a server or
+// auth fault rather than a config typo.
+//
+// JUNE-827 hit exactly this: the documented Claude Desktop config told owners to
+// set the bare origin, so a correctly-installed server failed every write and the
+// error gave no way to see why. Warn at startup instead of 404-ing silently later.
+// stderr only — stdout carries the MCP JSON-RPC frames and must not be polluted.
+if (process.env['RUNSNATIVE_API_URL'] && !/\/mcp\/?$/.test(BASE_URL)) {
+    process.stderr.write(`[runsnative-mcp] WARNING: RUNSNATIVE_API_URL is "${BASE_URL}", which does not end in "/mcp".\n` +
+        `[runsnative-mcp] Worker requests will resolve to "${BASE_URL}/content" and 404.\n` +
+        `[runsnative-mcp] Use "https://api.runsnative.org/mcp", or unset the variable to take the default.\n`);
+}
 export async function postWorkerApi(path, body) {
     const headers = { 'Content-Type': 'application/json' };
     if (TOKEN)

package/dist/server.js

@@ -18,6 +18,7 @@ import { GET_EMPHASIS_SCALE_TOOL, handleGetEmphasisScale } from './tools/get-emp
 import { GET_COMPLETENESS_MAP_TOOL, handleGetCompletenessMap } from './tools/get-completeness-map.js';
 import { LINK_SESSION_TOOL, handleLinkSession } from './tools/link-session.js';
 import { SET_SITE_CONTENT_TOOL, handleSetSiteContent } from './tools/set-site-content.js';
+import { PROMOTE_SITE_CONTENT_TOOL, handlePromoteSiteContent } from './tools/promote-site-content.js';
 import { handleSetTheme } from './tools/set-theme.js';
 import { handleSetSkin } from './tools/set-skin.js';
 import { handleSetMode } from './tools/set-mode.js';
@@ -74,6 +75,7 @@ export async function createRunsnativeServer() {
             GET_COMPLETENESS_MAP_TOOL,
             LINK_SESSION_TOOL,
             SET_SITE_CONTENT_TOOL,
+            PROMOTE_SITE_CONTENT_TOOL,
             ...SESSION_ENACT_TOOLS,
             GET_MARKER_CAPTURE_TOOL,
             RENDER_MARKER_CAPTURE_TOOL,
@@ -116,6 +118,8 @@ export async function createRunsnativeServer() {
                 return handleLinkSession(request.params.arguments ?? {});
             case 'set_site_content':
                 return handleSetSiteContent(request.params.arguments ?? {});
+            case 'promote_site_content':
+                return handlePromoteSiteContent(request.params.arguments ?? {});
             case 'set_theme':
                 return handleSetTheme(request.params.arguments ?? {});
             case 'set_skin':

package/dist/tools/promote-site-content.js

@@ -0,0 +1,58 @@
+import { McpError, ErrorCode } from '@modelcontextprotocol/sdk/types.js';
+import { postWorkerApi } from '../bridge-client.js';
+// Sibling of set_site_content (Authoring continuum A, JUNE-866): the publish
+// verb. Copies the caller's current PREVIEW version of a section into
+// PUBLISHED, unreviewed, no second confirm (change-authoring blast-radius
+// continuum v1 §12.2). Ordinary MCP tool — does not target a bound live
+// session, so no _meta.copresence, same as set_site_content.
+export const PROMOTE_SITE_CONTENT_TOOL = {
+    name: 'promote_site_content',
+    description: "Make the user's current preview edit for a site content section LIVE. Copies the section's " +
+        'current preview content to production (published) as-is — it does not take new content, only a ' +
+        'section key. Use this when the user says the preview looks right and they want to ship it ' +
+        '(e.g. "publish that" / "make it live"). There is no undo prompt: this action ships immediately. ' +
+        'Requires an authenticated RunsNative token whose role may edit this site.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            section_key: {
+                type: 'string',
+                description: "The section to publish, page-namespaced, e.g. 'index:les-heures'.",
+            },
+        },
+        required: ['section_key'],
+    },
+};
+export async function handlePromoteSiteContent(args) {
+    const sectionKey = args['section_key'];
+    if (typeof sectionKey !== 'string' || !sectionKey.trim()) {
+        throw new McpError(ErrorCode.InvalidParams, 'section_key must be a non-empty string');
+    }
+    const res = await postWorkerApi('/content/promote', { section_key: sectionKey.trim() });
+    if (res.status === 401) {
+        throw new McpError(ErrorCode.InvalidParams, 'Not authenticated. Set RUNSNATIVE_TENANT_TOKEN to a token that may edit this site.');
+    }
+    if (res.status === 403) {
+        throw new McpError(ErrorCode.InvalidParams, 'Your role does not permit publishing this site.');
+    }
+    if (res.status === 404) {
+        throw new McpError(ErrorCode.InvalidParams, 'No preview content for that section — nothing to publish.');
+    }
+    if (res.status === 400) {
+        const body = (await res.json().catch(() => ({})));
+        throw new McpError(ErrorCode.InvalidParams, body.error ?? 'Section rejected by the server.');
+    }
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new McpError(ErrorCode.InternalError, `Worker error ${res.status}: ${body}`);
+    }
+    const body = (await res.json());
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `Published "${body.section_key}" (version ${body.version}). The production site now shows this content.`,
+            },
+        ],
+    };
+}

package/dist/tools/render-surface.js

@@ -22,8 +22,15 @@ import { getLinkedPairId } from '../bridge-client.js';
 import { componentsBundle, iframeRuntime } from '../surface/assets.js';
 import { AGENT_SURFACE_URI, buildAgentSurfaceHtml } from '../surface/agent-surface.js';
 import { SURFACE_MIME_TYPE } from '../surface/package-surface.js';
-import { SurfaceHostSession, SurfaceHostStateError, } from '../../../surface-protocol/surface-host-client.js';
 import { engineGatewayTransport } from '../surface/engine-gateway-transport.js';
+let _surfaceHostClientModule;
+/** Lazy, memoized load of the surface-host-client runtime classes. */
+async function loadSurfaceHostClient() {
+    if (!_surfaceHostClientModule) {
+        _surfaceHostClientModule = await import('../surface/surface-host-client.js');
+    }
+    return _surfaceHostClientModule;
+}
 // ---------------------------------------------------------------------------
 // Module-level state — one active surface per MCP server process, and an
 // injectable transport (default: the engine gateway over HTTP).
@@ -110,6 +117,7 @@ export async function handleRenderSurface(args) {
     if (!route) {
         throw new McpError(ErrorCode.InvalidParams, 'render_surface requires a non-empty "route".');
     }
+    const { SurfaceHostSession } = await loadSurfaceHostClient();
     const session = new SurfaceHostSession({
         transport: _transport,
         agentSessionId: currentAgentSessionId(),
@@ -152,6 +160,9 @@ export async function handleSurfaceEvent(args) {
         outcome = await _session.submit(eventType, payload);
     }
     catch (e) {
+        // Already loaded — reaching here requires an active _session, which only
+        // handleRenderSurface (which loads the module first) can have set.
+        const { SurfaceHostStateError } = await loadSurfaceHostClient();
         if (e instanceof SurfaceHostStateError) {
             // Non-resumable (session-less) surface, or ordering violation — a clean
             // host-side signal, not a crash.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runsnative/mcp-server",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "type": "module",
   "files": [
     "dist/"