@shipvo/mcp 0.0.3 → 0.0.5

package/dist/server.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 // Shipvo MCP: agents use Shipvo apps with no phone.
-//   PN_SIM=http://localhost:4545  PN_CONTROL=https://purenative-control.purenative.workers.dev  PN_OWNER_TOKEN=...  shipvo-mcp
+//   PN_SIM=http://localhost:4545  PN_CONTROL=https://api.shipvo.dev  PN_OWNER_TOKEN=...  shipvo-mcp
 // Remote (Streamable HTTP, what Claude, ChatGPT, Cursor connect to over the network):
 //   shipvo-mcp --http 8787  with PN_API_KEYS="key1,key2" (Authorization: Bearer <key>) → POST/GET/DELETE /mcp
 // Tools: list_apps, open_app, screen, tap, type, scroll, back, screenshot, end_session (UI simulator);
@@ -13,7 +13,7 @@ import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
 import { z } from "zod";
 const SIM = (process.env.PN_SIM ?? "http://localhost:4545").replace(/\/$/, "");
-const CONTROL = (process.env.PN_CONTROL ?? "https://purenative-control.purenative.workers.dev").replace(/\/$/, "");
+const CONTROL = (process.env.PN_CONTROL ?? "https://api.shipvo.dev").replace(/\/$/, "");
 const OWNER_TOKEN = process.env.PN_OWNER_TOKEN ?? "";
 // Apps this server can open. Hosted: the account's apps. Local: one app served by the simulator.
 const APPS = process.env.PN_APPS ? JSON.parse(process.env.PN_APPS)
@@ -32,29 +32,53 @@ const result = (sid, r) => { const s = sessions.get(sid); if (s)
 // (ChatGPT does), so an unknown id is forwarded and the simulator answers if it knows it.
 const need = (_sid) => { };
 function makeServer(ctx = {}) {
-    const server = new McpServer({ name: "shipvo", version: "0.0.1" }, { instructions: `You can use Shipvo apps the way a person uses them on a phone, without a phone.
+    const server = new McpServer({ name: "shipvo", version: "0.0.4" }, { instructions: `You can use Shipvo apps the way a person uses them on a phone, without a phone.
 Call open_app to get a session and the first screen. The screen is an accessibility tree: every button, field and text, with a [ref=eN]. Act with tap/type/scroll/back using refs, and read the screen that comes back each time.
 Only what is on screen is listed, like a phone: a horizontal product rail shows a few items, so "scroll right" on the rail (its ref) to see more; "scroll down" the page for the rest.
 System sheets (permission dialogs, the camera, the fingerprint prompt, payment prompts, notification banners, the share sheet) appear in the tree like any other screen: answer them by tapping, as a person would. Use set_device to decide what the phone has (a barcode in front of the camera, a location, whether the fingerprint matches, whether the payment is approved, network off) before the app asks for it.
 Finish a task by checking the final screen says what you expected (for example "Order placed"). Call end_session when done to get a report.` });
-    const allowed = (id) => (ctx.app ? id === ctx.app : !!APPS[id]);
-    server.tool("list_apps", "Apps this server can open, with what each one does.", {}, async () => text(Object.entries(APPS).filter(([id]) => allowed(id)).map(([id, a]) => `${id}: ${a.name}. ${a.description}`).join("\n") || `(this key opens ${ctx.app})`));
+    // ctx.app: the app(s) this key opens, comma-separated (the beta app plus any the key owner has registered).
+    const keyApps = ctx.app ? ctx.app.split(",").map((s) => s.trim()).filter(Boolean) : null;
+    const allowed = (id) => (keyApps ? keyApps.includes(id) : !!APPS[id]);
+    server.tool("list_apps", "Apps this server can open, with what each one does. Optional query filters by name, description or category (e.g. 'shop', 'douala').", { query: z.string().optional() }, async ({ query }) => {
+        const ids = keyApps ?? Object.keys(APPS);
+        const q = (query ?? "").toLowerCase();
+        let dir = {};
+        try {
+            const r = await fetch(`${CONTROL}/apps/public${q ? `?q=${encodeURIComponent(q)}` : ""}`);
+            if (r.ok)
+                for (const a of (await r.json()).apps)
+                    dir[a.app_id] = a;
+        }
+        catch { }
+        const lines = ids.map((id) => {
+            const d = dir[id] ?? APPS[id];
+            const desc = d ? `${d.name}. ${d.description}${"category" in d ? ` [${d.category}]` : ""}` : `published with shipvo`;
+            return q && !`${id} ${desc}`.toLowerCase().includes(q) ? null : `${id}: ${desc} (open_app("${id}@latest"))`;
+        }).filter(Boolean);
+        return text(lines.join("\n") || `no apps match "${query}"`);
+    });
     server.tool("open_app", "Open an app in a fresh phone-sized session and return its first screen.", {
         app: z.string().describe("App id from list_apps, optionally with a release: 'tide' (local build), 'tide@latest' or 'tide@r13' (the published release phones run)"),
         session: z.string().optional().describe("Session name (default: generated). One session is one phone."),
-        seed_cart: z.array(z.object({ id: z.string(), qty: z.number().int().positive() })).optional().describe("Start with these items already in the cart (test shortcuts)."),
+        seed_cart: z.array(z.object({ product_id: z.string().optional(), id: z.string().optional(), quantity: z.number().int().positive().optional(), qty: z.number().int().positive().optional() }).refine((l) => (l.product_id ?? l.id) && (l.quantity ?? l.qty), "each line needs product_id (or id) and quantity (or qty)")).optional().describe("Start with these items already in the cart (test shortcut). Each line: { product_id, quantity }; { id, qty } also works."),
         dark: z.boolean().optional().describe("Dark mode"),
     }, async ({ app, session, seed_cart, dark }) => {
         const id = app.split("@")[0];
         if (!allowed(id))
-            throw new Error(ctx.app ? `this key opens "${ctx.app}" only` : `unknown app "${id}". Apps: ${Object.keys(APPS).join(", ")}`);
+            throw new Error(keyApps ? `this key opens: ${keyApps.join(", ")}` : `unknown app "${id}". Apps: ${Object.keys(APPS).join(", ")}`);
         if (ctx.scope === "read")
             throw new Error("this key is read-only: it cannot open sessions");
         const sid = session ?? `${id}-${Date.now().toString(36)}`;
-        const r = await sim("/session", { session: sid, app, seed_cart, dark });
+        const r = await sim("/session", { session: sid, app, seed_cart: seed_cart?.map((l) => ({ ...l, product_id: l.product_id ?? l.id, quantity: l.quantity ?? l.qty })), dark });
         sessions.set(sid, { app: id, steps: 0, startedAt: Date.now() });
         return text(`session: ${sid}\napp: ${id} release: ${r.release ?? "local"}\n\n${r.screen ?? ""}`);
     });
+    server.tool("list_sessions", "Open simulator sessions (phones) on this server: id, app, release and when each started. Use to resume after a reconnect.", {}, async () => {
+        const r = await sim("/sessions", {});
+        const rows = (r.sessions ?? []).filter((s) => !keyApps || keyApps.includes(s.app));
+        return text(rows.length ? rows.map((s) => `${s.session}: ${s.app} release ${s.release}${s.started_at ? ` since ${s.started_at}` : ""}`).join("\n") : "no open sessions");
+    });
     const sid = z.string().describe("Session from open_app");
     const ref = z.string().regex(/^e\d+$/).describe("Element ref from the screen, e.g. e42");
     server.tool("screen", "The current screen as an accessibility tree with refs.", { session: sid }, async ({ session }) => { need(session); return result(session, await sim("/act", { session, action: "screen" })); });
@@ -103,8 +127,8 @@ Finish a task by checking the final screen says what you expected (for example "
     server.tool("owner_command", "Run an owner command against the live app (changes are audited; `publish` makes them live on every phone within seconds).", { app: z.string(), command: z.string(), args: z.record(z.unknown()).optional() }, async ({ app, command, args }) => {
         if (ctx.scope && ctx.scope !== "owner")
             throw new Error(`this key has scope "${ctx.scope}": owner commands need an owner key`);
-        if (ctx.app && app !== ctx.app)
-            throw new Error(`this key is for "${ctx.app}"`);
+        if (keyApps && !keyApps.includes(app))
+            throw new Error(`this key is for: ${keyApps.join(", ")}`);
         const token = ctx.ownerToken || OWNER_TOKEN;
         if (!token)
             throw new Error("owner commands are not enabled on this server.");
@@ -154,7 +178,7 @@ else {
             // One McpServer per client connection. Behind sim.shipvo.dev the Worker has checked the key and says which
             // app and scope it grants; locally there are no such headers and every app is allowed.
             const scope = req.headers["x-shipvo-scope"];
-            await makeServer({ app: req.headers["x-shipvo-app"] || undefined, scope, ownerToken: req.headers["x-shipvo-owner-token"] || undefined }).connect(transport);
+            await makeServer({ app: req.headers["x-shipvo-app"] || undefined, publicApps: req.headers["x-shipvo-public"] || undefined, scope, ownerToken: req.headers["x-shipvo-owner-token"] || undefined }).connect(transport);
         }
         let body = undefined;
         if (req.method === "POST") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipvo/mcp",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "type": "module",
   "license": "Apache-2.0",
   "description": "MCP server that lets AI agents open, see and operate Shipvo apps without a phone: a phone-sized simulator of the real app, plus the app's typed commands and owner API.",