@seleniumbox/sbox-mcp 0.4.0 → 0.4.2

package/README.md

@@ -56,6 +56,14 @@ Then use:
 
 Open Cursor from the directory that contains `node_modules`.
 
+**If you see `ENOTEMPTY: directory not empty, rmdir`** when using npx, the npx cache is in a bad state. Clear it and try again:
+
+```bash
+rm -rf ~/.npm/_npx
+```
+
+Then restart Cursor or reload MCP.
+
 ## Required environment variables
 
 | Variable    | Default                   | Description                          |
@@ -64,11 +72,16 @@ Open Cursor from the directory that contains `node_modules`.
 
 Optional:
 
-| Variable                | Default | Description                                |
-|-------------------------|---------|--------------------------------------------|
-| `PORT` / `MCP_PORT`     | `3344`  | Only used when running the REST server.   |
-| `MCP_DEBUG` / `DEBUG`   | off     | Set to `1` or `true` for request logging.  |
-| `MCP_REQUEST_TIMEOUT_MS`| `30000` | Timeout for outbound SBOX API requests.   |
+| Variable                 | Default     | Description                                                                 |
+|-------------------------|-------------|-----------------------------------------------------------------------------|
+| `PORT` / `MCP_PORT`     | `3344`      | Only used when running the REST server.                                    |
+| `MCP_DEBUG` / `DEBUG`   | off         | Set to `1` or `true` for request logging.                                  |
+| `MCP_REQUEST_TIMEOUT_MS`| `30000`     | Timeout for outbound SBOX API requests.                                    |
+| `SBOX_MCP_TOKEN_FILE`   | see below   | Override path for the persisted session token file (default: `~/.sbox-mcp/token`). |
+
+## Token cache
+
+After you log in via **sbox_open_login**, the session token is stored in memory and **on disk** so it survives MCP process restarts (e.g. when the IDE starts a new process per prompt). Default location: `~/.sbox-mcp/token`. The cache directory is created with mode `0700` and the token file with `0600`. Set `SBOX_MCP_TOKEN_FILE` to use a different path (only the token file; the directory is inferred for `last_poll_id`). If an API call returns 401 or “invalid token”, the cache is cleared so the next run will prompt for login again.
 
 ## Authentication flow
 

package/dist/index.js

@@ -10,9 +10,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const path_1 = __importDefault(require("path"));
 const index_1 = require("./mcp/tools/index");
-// Resolve SDK via Node's module resolution so it works when npx hoists deps (e.g. .npm/_npx/.../node_modules)
-const sdkPackagePath = require.resolve("@modelcontextprotocol/sdk/package.json");
-const sdkServerDir = path_1.default.join(path_1.default.dirname(sdkPackagePath), "dist", "cjs", "server");
+// Resolve SDK server dir via the package's "server" export (dist/cjs/server) so it works when npx hoists deps
+const sdkServerDir = path_1.default.dirname(require.resolve("@modelcontextprotocol/sdk/server"));
 const { McpServer } = require(path_1.default.join(sdkServerDir, "mcp.js"));
 const { StdioServerTransport } = require(path_1.default.join(sdkServerDir, "stdio.js"));
 const server = new McpServer({

package/dist/mcp-server.js

@@ -10,8 +10,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const path_1 = __importDefault(require("path"));
 const index_1 = require("./mcp/tools/index");
-const sdkPackagePath = require.resolve("@modelcontextprotocol/sdk/package.json");
-const sdkServerDir = path_1.default.join(path_1.default.dirname(sdkPackagePath), "dist", "cjs", "server");
+const sdkServerDir = path_1.default.dirname(require.resolve("@modelcontextprotocol/sdk/server"));
 const { McpServer } = require(path_1.default.join(sdkServerDir, "mcp.js"));
 const { StdioServerTransport } = require(path_1.default.join(sdkServerDir, "stdio.js"));
 const server = new McpServer({

package/dist/routes/mcp.routes.js

@@ -13,8 +13,7 @@ const express_1 = require("express");
 const path_1 = __importDefault(require("path"));
 const crypto_1 = require("crypto");
 const index_1 = require("../mcp/tools/index");
-const sdkPackagePath = require.resolve("@modelcontextprotocol/sdk/package.json");
-const sdkServerDir = path_1.default.join(path_1.default.dirname(sdkPackagePath), "dist", "cjs", "server");
+const sdkServerDir = path_1.default.dirname(require.resolve("@modelcontextprotocol/sdk/server"));
 const { McpServer } = require(path_1.default.join(sdkServerDir, "mcp.js"));
 const { StreamableHTTPServerTransport } = require(path_1.default.join(sdkServerDir, "streamableHttp.js"));
 const sessionMap = new Map();

package/dist/token-cache.d.ts

@@ -1,6 +1,7 @@
 /**
- * In-memory cache for the SBOX session token. Set on successful sbox_open_login,
+ * In-memory and file-backed cache for the SBOX session token. Set on successful sbox_open_login,
  * used by other tools when token is not passed. Cleared on 401/invalid token.
+ * File persistence ensures the token survives MCP process restarts (e.g. new process per IDE prompt).
  * lastPollId is set when we return device-flow (browser didn't open) so sbox_complete_login can use it.
  */
 export declare function getCachedToken(): string | null;

package/dist/token-cache.js

@@ -1,9 +1,13 @@
 "use strict";
 /**
- * In-memory cache for the SBOX session token. Set on successful sbox_open_login,
+ * In-memory and file-backed cache for the SBOX session token. Set on successful sbox_open_login,
  * used by other tools when token is not passed. Cleared on 401/invalid token.
+ * File persistence ensures the token survives MCP process restarts (e.g. new process per IDE prompt).
  * lastPollId is set when we return device-flow (browser didn't open) so sbox_complete_login can use it.
  */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getCachedToken = getCachedToken;
 exports.setCachedToken = setCachedToken;
@@ -11,22 +15,95 @@ exports.clearCachedToken = clearCachedToken;
 exports.setLastPollId = setLastPollId;
 exports.getLastPollId = getLastPollId;
 exports.resolveToken = resolveToken;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
 let cachedToken = null;
 let lastPollId = null;
+let memoryLoadedFromFile = false;
+function getTokenFilePath() {
+    if (process.env.SBOX_MCP_TOKEN_FILE)
+        return process.env.SBOX_MCP_TOKEN_FILE;
+    const dir = path_1.default.join(os_1.default.homedir(), ".sbox-mcp");
+    return path_1.default.join(dir, "token");
+}
+function loadTokenFromFile() {
+    if (memoryLoadedFromFile)
+        return;
+    memoryLoadedFromFile = true;
+    try {
+        const filePath = getTokenFilePath();
+        if (fs_1.default.existsSync(filePath)) {
+            const raw = fs_1.default.readFileSync(filePath, "utf-8").trim();
+            if (raw)
+                cachedToken = raw;
+        }
+    }
+    catch {
+        // ignore read errors (e.g. no file, permissions)
+    }
+}
+function saveTokenToFile(token) {
+    try {
+        const filePath = getTokenFilePath();
+        if (token) {
+            const dir = path_1.default.dirname(filePath);
+            if (!fs_1.default.existsSync(dir))
+                fs_1.default.mkdirSync(dir, { recursive: true, mode: 0o700 });
+            fs_1.default.writeFileSync(filePath, token, { mode: 0o600, encoding: "utf-8" });
+        }
+        else if (fs_1.default.existsSync(filePath)) {
+            fs_1.default.unlinkSync(filePath);
+        }
+    }
+    catch {
+        // ignore write errors
+    }
+}
 function getCachedToken() {
+    loadTokenFromFile();
     return cachedToken;
 }
 function setCachedToken(token) {
     cachedToken = token;
+    saveTokenToFile(token);
 }
 function clearCachedToken() {
     cachedToken = null;
+    saveTokenToFile(null);
+}
+const LAST_POLL_ID_FILE = "last_poll_id";
+function getCacheDir() {
+    if (process.env.SBOX_MCP_TOKEN_FILE)
+        return path_1.default.dirname(process.env.SBOX_MCP_TOKEN_FILE);
+    return path_1.default.join(os_1.default.homedir(), ".sbox-mcp");
 }
 function setLastPollId(pollId) {
     lastPollId = pollId;
+    try {
+        const dir = getCacheDir();
+        if (!fs_1.default.existsSync(dir))
+            fs_1.default.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        fs_1.default.writeFileSync(path_1.default.join(dir, LAST_POLL_ID_FILE), pollId, { mode: 0o600, encoding: "utf-8" });
+    }
+    catch {
+        // ignore
+    }
 }
 function getLastPollId() {
-    return lastPollId;
+    if (lastPollId)
+        return lastPollId;
+    try {
+        const filePath = path_1.default.join(getCacheDir(), LAST_POLL_ID_FILE);
+        if (fs_1.default.existsSync(filePath)) {
+            lastPollId = fs_1.default.readFileSync(filePath, "utf-8").trim() || null;
+            return lastPollId;
+        }
+    }
+    catch {
+        // ignore
+    }
+    return null;
 }
 /** Resolve token: prefer provided token, else cached. Returns null if neither. */
 function resolveToken(provided) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seleniumbox/sbox-mcp",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "SBOX MCP – Model Context Protocol server for Selenium Box.",
   "license": "Apache-2.0",
   "repository": {