@seldonframe/mcp 1.0.0 → 1.0.2

package/src/client.js

@@ -1,194 +1,194 @@
-import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { VERSION } from "./welcome.js";
-
-const API_BASE =
-  process.env.SELDONFRAME_API_BASE ?? "https://app.seldonframe.com/api/v1";
-const API_KEY = process.env.SELDONFRAME_API_KEY;
-
-const SELDON_DIR = join(homedir(), ".seldonframe");
-const DEVICE_FILE = join(SELDON_DIR, "device.json");
-
-function loadDevice() {
-  if (!existsSync(DEVICE_FILE)) {
-    return { tokens: {}, default_workspace: null, created_at: null };
-  }
-  try {
-    const parsed = JSON.parse(readFileSync(DEVICE_FILE, "utf8"));
-    return {
-      tokens: parsed.tokens ?? {},
-      default_workspace: parsed.default_workspace ?? null,
-      created_at: parsed.created_at ?? null,
-    };
-  } catch {
-    return { tokens: {}, default_workspace: null, created_at: null };
-  }
-}
-
-function saveDevice(device) {
-  mkdirSync(SELDON_DIR, { recursive: true });
-  writeFileSync(DEVICE_FILE, JSON.stringify(device, null, 2));
-}
-
-export function rememberWorkspace({ workspace_id, bearer_token, make_default = true }) {
-  const d = loadDevice();
-  if (bearer_token) d.tokens[workspace_id] = bearer_token;
-  if (make_default || !d.default_workspace) d.default_workspace = workspace_id;
-  if (!d.created_at) d.created_at = new Date().toISOString();
-  saveDevice(d);
-}
-
-export function setDefaultWorkspace(workspace_id) {
-  const d = loadDevice();
-  d.default_workspace = workspace_id;
-  saveDevice(d);
-}
-
-// Remove a workspace's bearer token from the local device store. If it was the
-// default, clear the default pointer too. Used by revoke_bearer when the call
-// revokes the caller's own token — the device can't keep pretending it has
-// access.
-export function forgetWorkspace(workspace_id) {
-  const d = loadDevice();
-  delete d.tokens[workspace_id];
-  if (d.default_workspace === workspace_id) {
-    const remaining = Object.keys(d.tokens);
-    d.default_workspace = remaining[0] ?? null;
-  }
-  saveDevice(d);
-}
-
-export function getDefaultWorkspace() {
-  return loadDevice().default_workspace;
-}
-
-export function knownWorkspaceIds() {
-  return Object.keys(loadDevice().tokens);
-}
-
-export function hasApiKey() {
-  return !!API_KEY;
-}
-
-export function isFirstEverCall() {
-  const d = loadDevice();
-  return Object.keys(d.tokens).length === 0 && !API_KEY;
-}
-
-function resolveAuth(workspace_id) {
-  if (API_KEY) return `Bearer ${API_KEY}`;
-  const d = loadDevice();
-  const target = workspace_id ?? d.default_workspace;
-  if (target && d.tokens[target]) return `Bearer ${d.tokens[target]}`;
-  return null;
-}
-
-export function getWorkspaceBearer(workspace_id) {
-  const d = loadDevice();
-  const target = workspace_id ?? d.default_workspace;
-  if (!target) return null;
-  return d.tokens[target] ?? null;
-}
-
-export function getApiKey() {
-  return API_KEY ?? null;
-}
-
-function hintFor(status, data) {
-  if (status === 401) {
-    return " — credentials rejected. If you meant to use a paid capability, check SELDONFRAME_API_KEY at https://app.seldonframe.com/settings/api.";
-  }
-  if (status === 402) {
-    const need = data?.error?.requires ?? "a SeldonFrame API key";
-    return ` — this capability requires ${need}. Get one at https://app.seldonframe.com/settings/api and \`export SELDONFRAME_API_KEY=sk-…\`.`;
-  }
-  if (status === 409) {
-    return " — the requested resource already exists or conflicts with existing state.";
-  }
-  if (status === 429) return " — rate limited. Try again in a moment.";
-  return "";
-}
-
-export async function api(method, path, opts = {}) {
-  const {
-    body,
-    workspace_id,
-    allow_anonymous = false,
-    force_workspace_bearer = false,
-    extra_headers = {},
-  } = opts;
-
-  let auth = null;
-  if (force_workspace_bearer) {
-    const token = getWorkspaceBearer(workspace_id);
-    if (token) auth = `Bearer ${token}`;
-  } else {
-    auth = resolveAuth(workspace_id);
-  }
-
-  if (!auth && !allow_anonymous) {
-    throw new Error(
-      "No workspace available. Run create_workspace({ name: '…' }) first, or set SELDONFRAME_API_KEY.",
-    );
-  }
-  const headers = {
-    "Content-Type": "application/json",
-    "User-Agent": `seldonframe-mcp/${VERSION}`,
-    ...extra_headers,
-  };
-  if (auth) headers.Authorization = auth;
-
-  const res = await fetch(`${API_BASE}${path}`, {
-    method,
-    headers,
-    body: body === undefined ? undefined : JSON.stringify(body),
-  });
-  const text = await res.text();
-  let data;
-  try {
-    data = text ? JSON.parse(text) : {};
-  } catch {
-    data = { raw: text };
-  }
-  if (!res.ok) {
-    const msg = data?.error?.message ?? data?.message ?? text ?? res.statusText;
-    throw new Error(`Seldon API ${res.status}: ${msg}${hintFor(res.status, data)}`);
-  }
-  return data;
-}
-
-export async function fetchText(url, { maxBytes = 256 * 1024 } = {}) {
-  const res = await fetch(url, {
-    headers: { "User-Agent": `seldonframe-mcp/${VERSION} (+soul-compiler)` },
-    redirect: "follow",
-  });
-  if (!res.ok) {
-    throw new Error(`Fetch ${url} failed: ${res.status} ${res.statusText}`);
-  }
-  const raw = await res.text();
-  const truncated = raw.length > maxBytes;
-  const html = truncated ? raw.slice(0, maxBytes) : raw;
-  return { html, truncated, status: res.status, final_url: res.url };
-}
-
-export function htmlToText(html) {
-  return html
-    .replace(/<script[\s\S]*?<\/script>/gi, " ")
-    .replace(/<style[\s\S]*?<\/style>/gi, " ")
-    .replace(/<noscript[\s\S]*?<\/noscript>/gi, " ")
-    .replace(/<!--[\s\S]*?-->/g, " ")
-    .replace(/<(h[1-6]|p|li|br|div|section|article|header|footer)[^>]*>/gi, "\n")
-    .replace(/<[^>]+>/g, " ")
-    .replace(/&nbsp;/g, " ")
-    .replace(/&amp;/g, "&")
-    .replace(/&lt;/g, "<")
-    .replace(/&gt;/g, ">")
-    .replace(/&quot;/g, '"')
-    .replace(/&#39;/g, "'")
-    .replace(/[ \t]+/g, " ")
-    .replace(/\n{3,}/g, "\n\n")
-    .trim();
-}
-
-export const API_INFO = { base: API_BASE };
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { VERSION } from "./welcome.js";
+
+const API_BASE =
+  process.env.SELDONFRAME_API_BASE ?? "https://app.seldonframe.com/api/v1";
+const API_KEY = process.env.SELDONFRAME_API_KEY;
+
+const SELDON_DIR = join(homedir(), ".seldonframe");
+const DEVICE_FILE = join(SELDON_DIR, "device.json");
+
+function loadDevice() {
+  if (!existsSync(DEVICE_FILE)) {
+    return { tokens: {}, default_workspace: null, created_at: null };
+  }
+  try {
+    const parsed = JSON.parse(readFileSync(DEVICE_FILE, "utf8"));
+    return {
+      tokens: parsed.tokens ?? {},
+      default_workspace: parsed.default_workspace ?? null,
+      created_at: parsed.created_at ?? null,
+    };
+  } catch {
+    return { tokens: {}, default_workspace: null, created_at: null };
+  }
+}
+
+function saveDevice(device) {
+  mkdirSync(SELDON_DIR, { recursive: true });
+  writeFileSync(DEVICE_FILE, JSON.stringify(device, null, 2));
+}
+
+export function rememberWorkspace({ workspace_id, bearer_token, make_default = true }) {
+  const d = loadDevice();
+  if (bearer_token) d.tokens[workspace_id] = bearer_token;
+  if (make_default || !d.default_workspace) d.default_workspace = workspace_id;
+  if (!d.created_at) d.created_at = new Date().toISOString();
+  saveDevice(d);
+}
+
+export function setDefaultWorkspace(workspace_id) {
+  const d = loadDevice();
+  d.default_workspace = workspace_id;
+  saveDevice(d);
+}
+
+// Remove a workspace's bearer token from the local device store. If it was the
+// default, clear the default pointer too. Used by revoke_bearer when the call
+// revokes the caller's own token — the device can't keep pretending it has
+// access.
+export function forgetWorkspace(workspace_id) {
+  const d = loadDevice();
+  delete d.tokens[workspace_id];
+  if (d.default_workspace === workspace_id) {
+    const remaining = Object.keys(d.tokens);
+    d.default_workspace = remaining[0] ?? null;
+  }
+  saveDevice(d);
+}
+
+export function getDefaultWorkspace() {
+  return loadDevice().default_workspace;
+}
+
+export function knownWorkspaceIds() {
+  return Object.keys(loadDevice().tokens);
+}
+
+export function hasApiKey() {
+  return !!API_KEY;
+}
+
+export function isFirstEverCall() {
+  const d = loadDevice();
+  return Object.keys(d.tokens).length === 0 && !API_KEY;
+}
+
+function resolveAuth(workspace_id) {
+  if (API_KEY) return `Bearer ${API_KEY}`;
+  const d = loadDevice();
+  const target = workspace_id ?? d.default_workspace;
+  if (target && d.tokens[target]) return `Bearer ${d.tokens[target]}`;
+  return null;
+}
+
+export function getWorkspaceBearer(workspace_id) {
+  const d = loadDevice();
+  const target = workspace_id ?? d.default_workspace;
+  if (!target) return null;
+  return d.tokens[target] ?? null;
+}
+
+export function getApiKey() {
+  return API_KEY ?? null;
+}
+
+function hintFor(status, data) {
+  if (status === 401) {
+    return " — credentials rejected. If you meant to use a paid capability, check SELDONFRAME_API_KEY at https://app.seldonframe.com/settings/api.";
+  }
+  if (status === 402) {
+    const need = data?.error?.requires ?? "a SeldonFrame API key";
+    return ` — this capability requires ${need}. Get one at https://app.seldonframe.com/settings/api and \`export SELDONFRAME_API_KEY=sk-…\`.`;
+  }
+  if (status === 409) {
+    return " — the requested resource already exists or conflicts with existing state.";
+  }
+  if (status === 429) return " — rate limited. Try again in a moment.";
+  return "";
+}
+
+export async function api(method, path, opts = {}) {
+  const {
+    body,
+    workspace_id,
+    allow_anonymous = false,
+    force_workspace_bearer = false,
+    extra_headers = {},
+  } = opts;
+
+  let auth = null;
+  if (force_workspace_bearer) {
+    const token = getWorkspaceBearer(workspace_id);
+    if (token) auth = `Bearer ${token}`;
+  } else {
+    auth = resolveAuth(workspace_id);
+  }
+
+  if (!auth && !allow_anonymous) {
+    throw new Error(
+      "No workspace available. Run create_workspace({ name: '…' }) first, or set SELDONFRAME_API_KEY.",
+    );
+  }
+  const headers = {
+    "Content-Type": "application/json",
+    "User-Agent": `seldonframe-mcp/${VERSION}`,
+    ...extra_headers,
+  };
+  if (auth) headers.Authorization = auth;
+
+  const res = await fetch(`${API_BASE}${path}`, {
+    method,
+    headers,
+    body: body === undefined ? undefined : JSON.stringify(body),
+  });
+  const text = await res.text();
+  let data;
+  try {
+    data = text ? JSON.parse(text) : {};
+  } catch {
+    data = { raw: text };
+  }
+  if (!res.ok) {
+    const msg = data?.error?.message ?? data?.message ?? text ?? res.statusText;
+    throw new Error(`Seldon API ${res.status}: ${msg}${hintFor(res.status, data)}`);
+  }
+  return data;
+}
+
+export async function fetchText(url, { maxBytes = 256 * 1024 } = {}) {
+  const res = await fetch(url, {
+    headers: { "User-Agent": `seldonframe-mcp/${VERSION} (+soul-compiler)` },
+    redirect: "follow",
+  });
+  if (!res.ok) {
+    throw new Error(`Fetch ${url} failed: ${res.status} ${res.statusText}`);
+  }
+  const raw = await res.text();
+  const truncated = raw.length > maxBytes;
+  const html = truncated ? raw.slice(0, maxBytes) : raw;
+  return { html, truncated, status: res.status, final_url: res.url };
+}
+
+export function htmlToText(html) {
+  return html
+    .replace(/<script[\s\S]*?<\/script>/gi, " ")
+    .replace(/<style[\s\S]*?<\/style>/gi, " ")
+    .replace(/<noscript[\s\S]*?<\/noscript>/gi, " ")
+    .replace(/<!--[\s\S]*?-->/g, " ")
+    .replace(/<(h[1-6]|p|li|br|div|section|article|header|footer)[^>]*>/gi, "\n")
+    .replace(/<[^>]+>/g, " ")
+    .replace(/&nbsp;/g, " ")
+    .replace(/&amp;/g, "&")
+    .replace(/&lt;/g, "<")
+    .replace(/&gt;/g, ">")
+    .replace(/&quot;/g, '"')
+    .replace(/&#39;/g, "'")
+    .replace(/[ \t]+/g, " ")
+    .replace(/\n{3,}/g, "\n\n")
+    .trim();
+}
+
+export const API_INFO = { base: API_BASE };

package/src/index.js

@@ -1,49 +1,81 @@
-#!/usr/bin/env node
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import {
-  CallToolRequestSchema,
-  ListToolsRequestSchema,
-} from "@modelcontextprotocol/sdk/types.js";
-import { WELCOME_MARKDOWN, VERSION } from "./welcome.js";
-import { TOOLS, TOOL_MAP } from "./tools.js";
-
-const server = new Server(
-  { name: "seldonframe", version: VERSION },
-  {
-    capabilities: { tools: {} },
-    instructions: WELCOME_MARKDOWN,
-  },
-);
-
-server.setRequestHandler(ListToolsRequestSchema, async () => ({
-  tools: TOOLS.map(({ name, description, inputSchema }) => ({
-    name,
-    description,
-    inputSchema,
-  })),
-}));
-
-server.setRequestHandler(CallToolRequestSchema, async (req) => {
-  const tool = TOOL_MAP[req.params.name];
-  if (!tool) {
-    return {
-      isError: true,
-      content: [{ type: "text", text: `Unknown tool: ${req.params.name}` }],
-    };
-  }
-  try {
-    const result = await tool.handler(req.params.arguments ?? {});
-    return {
-      content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
-    };
-  } catch (err) {
-    return {
-      isError: true,
-      content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }],
-    };
-  }
-});
-
-const transport = new StdioServerTransport();
-await server.connect(transport);
+#!/usr/bin/env node
+
+// Node version gate — must run before any imports that could fail or
+// reach for fetch(). Without this, Node 16 users get a cryptic
+// "fetch is not defined" crash the moment the first tool calls the
+// SeldonFrame API.
+//
+// Per L-29 the cleanroom test in GitHub Codespaces (default image
+// ships Node v16.20.2 in some configurations) surfaced this
+// immediately on @seldonframe/mcp@1.0.0. Strict requirement is
+// documented in engines.node = ">=18" and reinforced here at runtime
+// so users get actionable next-steps instead of a stack trace.
+//
+// Implementation note: we use dynamic `await import()` for the SDK
+// modules below specifically so this gate runs BEFORE any SDK code
+// executes. Static `import` statements at the top of an ESM module
+// are hoisted and evaluated before any module-body code, which would
+// defeat the gate if the SDK ever started failing at import-time on
+// older Node versions.
+const [nodeMajor] = process.versions.node.split(".").map(Number);
+if (nodeMajor < 18) {
+  process.stderr.write(
+    `\n  SeldonFrame MCP requires Node.js 18 or later.\n` +
+      `  You are running Node.js ${process.versions.node}.\n\n` +
+      `  To fix:\n` +
+      `    nvm install 18 && nvm use 18\n` +
+      `  Or:\n` +
+      `    nvm install 20 && nvm use 20\n\n` +
+      `  Then retry:\n` +
+      `    claude mcp add seldonframe -- npx -y @seldonframe/mcp\n\n`,
+  );
+  process.exit(1);
+}
+
+const { Server } = await import("@modelcontextprotocol/sdk/server/index.js");
+const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
+const { CallToolRequestSchema, ListToolsRequestSchema } = await import(
+  "@modelcontextprotocol/sdk/types.js"
+);
+const { WELCOME_MARKDOWN, VERSION } = await import("./welcome.js");
+const { TOOLS, TOOL_MAP } = await import("./tools.js");
+
+const server = new Server(
+  { name: "seldonframe", version: VERSION },
+  {
+    capabilities: { tools: {} },
+    instructions: WELCOME_MARKDOWN,
+  },
+);
+
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+  tools: TOOLS.map(({ name, description, inputSchema }) => ({
+    name,
+    description,
+    inputSchema,
+  })),
+}));
+
+server.setRequestHandler(CallToolRequestSchema, async (req) => {
+  const tool = TOOL_MAP[req.params.name];
+  if (!tool) {
+    return {
+      isError: true,
+      content: [{ type: "text", text: `Unknown tool: ${req.params.name}` }],
+    };
+  }
+  try {
+    const result = await tool.handler(req.params.arguments ?? {});
+    return {
+      content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+    };
+  } catch (err) {
+    return {
+      isError: true,
+      content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }],
+    };
+  }
+});
+
+const transport = new StdioServerTransport();
+await server.connect(transport);