@spark-apps/quickpeek 1.2.3 → 1.2.4

package/mcp.mjs

@@ -13,7 +13,8 @@
 // Deliberately NO delete tools: outputs are new files and the server never
 // removes anything a user recorded.
 
-import { readFileSync } from 'node:fs';
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
@@ -38,8 +39,16 @@ const protocolStdout = new Proxy(process.stdout, {
   },
 });
 
+// icons: MCP's Implementation schema (SDK 1.29+). A client that renders it
+// shows QuickPeek's own mark beside the server instead of a generic plug; one
+// that does not simply ignores the field.
 const server = new Server(
-  { name: 'quickpeek', version: pkg.version },
+  {
+    name: 'quickpeek',
+    version: pkg.version,
+    title: 'QuickPeek',
+    icons: [{ src: 'https://quickpeek.co/icons/icon-512x512.png', mimeType: 'image/png', sizes: ['512x512'] }],
+  },
   { capabilities: { tools: {} } }
 );
 
@@ -64,36 +73,100 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   }
 });
 
+/**
+ * Say so when the bundle is older than the sources it was built from.
+ *
+ * dist/mcp-tools.mjs is what actually answers every tool call, and nothing
+ * rebuilds it on the way in. A checkout whose src/ has moved on therefore
+ * serves an older QuickPeek than the code in front of you, and the difference
+ * shows up as missing output rather than an error - a stale bundle once
+ * produced demos with no intro card, no outro card and no length limit, and
+ * the three read as three separate regressions in features that were simply
+ * not compiled in yet.
+ *
+ * Warning only, and on stderr: a published install has no src/ to compare
+ * against, and no diagnostic is worth refusing to start over.
+ */
+function warnIfBundleStale() {
+  try {
+    const srcDir = fileURLToPath(new URL('./src', import.meta.url));
+    const bundle = fileURLToPath(new URL('./dist/mcp-tools.mjs', import.meta.url));
+    const builtAt = statSync(bundle).mtimeMs;
+    let newest = 0;
+    const walk = (dir) => {
+      for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        const full = `${dir}/${entry.name}`;
+        if (entry.isDirectory()) walk(full);
+        else if (entry.name.endsWith('.ts')) newest = Math.max(newest, statSync(full).mtimeMs);
+      }
+    };
+    walk(srcDir);
+    if (newest > builtAt) {
+      // Seconds under a minute: the usual case is "edited a file, restarted",
+      // and rounding that to "0 minute(s) older" reads as no gap at all.
+      const gapSecs = Math.round((newest - builtAt) / 1000);
+      const age = gapSecs < 60 ? `${gapSecs}s` : `${Math.round(gapSecs / 60)}min`;
+      console.error(
+        `quickpeek-mcp: dist/mcp-tools.mjs is ${age} older than src/ - ` +
+          `this server is running stale code. Run \`bun run build\` to rebuild it.`,
+      );
+    }
+  } catch {
+    // No src/ (a published install), or an unreadable tree: nothing to check.
+  }
+}
+
 async function main() {
+  warnIfBundleStale();
+
   const transport = new StdioServerTransport(process.stdin, protocolStdout);
   await server.connect(transport);
 
   // Elicitation is optional in MCP. The capability is checked per call, not
   // here: the client only declares it in `initialize`, which arrives after
-  // connect() resolves. null means "cannot prompt" and start_auth then falls
-  // back to a follow-up finish_auth call.
-  setElicit(async (message) => {
+  // connect() resolves. null means "cannot prompt" and the tools fall back
+  // to a two-call flow (status result now, follow-up call later).
+  setElicit(async (message, fields) => {
     if (!server.getClientCapabilities()?.elicitation) return null;
-    const result = await server.elicitInput({
-      message,
-      requestedSchema: {
-        type: 'object',
-        properties: {
-          signedIn: {
-            type: 'boolean',
-            title: 'Signed in?',
-            description: 'Confirm once you have finished signing in, so the session can be saved.',
-          },
+    const properties = {};
+    for (const f of fields) {
+      properties[f.name] =
+        f.type === 'enum'
+          ? {
+              type: 'string',
+              title: f.title,
+              ...(f.description ? { description: f.description } : {}),
+              enum: f.options,
+              ...(f.default ? { default: f.default } : {}),
+            }
+          : { type: 'boolean', title: f.title, ...(f.description ? { description: f.description } : {}) };
+    }
+    try {
+      const result = await server.elicitInput(
+        {
+          message,
+          requestedSchema: { type: 'object', properties, required: fields.map((f) => f.name) },
         },
-        required: ['signedIn'],
-      },
-    });
-    return result.action === 'accept' && result.content?.signedIn === true;
+        // The SDK's default request timeout is 60s. These prompts wait on a
+        // human signing into a website or reading a plan; give them 15 minutes.
+        { timeout: 15 * 60 * 1000 },
+      );
+      if (result.action === 'accept') return { action: 'accept', content: result.content ?? {} };
+      return { action: result.action === 'decline' ? 'decline' : 'cancel' };
+    } catch {
+      // A client may declare the capability yet choke on the form (or the
+      // request may time out unanswered). Treat it as "cannot prompt" so the
+      // tool degrades to the two-call flow instead of erroring the call.
+      return null;
+    }
   });
 
   // Read per call for the same reason as above: `initialize` has not arrived
-  // yet. Lets tools skip opening a sign-in window no prompt could ever confirm.
-  setCanElicit(() => !!server.getClientCapabilities()?.elicitation);
+  // yet. Lets tools skip opening a sign-in window no prompt could ever
+  // confirm. Checks `.form` specifically — elicitInput throws for url-only
+  // clients, and the SDK normalizes a legacy bare `elicitation: {}` to
+  // include form, so this stays true for older clients too.
+  setCanElicit(() => !!server.getClientCapabilities()?.elicitation?.form);
 }
 
 main().catch((e) => {

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@spark-apps/quickpeek",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "description": "Auto-generate demo videos for your web app with AI",
+  "mcpName": "co.quickpeek/quickpeek",
   "main": "dist/qp.js",
   "bin": {
     "quickpeek": "dist/qp.js",
@@ -28,6 +29,7 @@
   "scripts": {
     "dev": "npx tsx src/qp.ts",
     "build": "tsup",
+    "prepare": "tsup",
     "build:tsc": "tsc --noEmit",
     "lint": "biome check src",
     "lint:fix": "biome check --write src",
@@ -51,7 +53,7 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@spark-apps/video-kit": "^0.1.0",
+    "@spark-apps/video-kit": "^0.1.1",
     "chalk": "^5.6.2",
     "dotenv": "^17.3.1",
     "figlet": "^1.11.0",
@@ -63,6 +65,7 @@
   "devDependencies": {
     "@biomejs/biome": "^2.4.8",
     "@types/node": "^20.19.37",
+    "next": "^15.5.14",
     "tsup": "^8.5.1",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",

package/dist/scraping-C334VxX5.d.mts

@@ -1,335 +0,0 @@
-/**
- * Configuration types and defaults for QuickPeek
- */
-declare const VERSION = "1.2.3";
-declare const CONFIG_FILE = "quickpeek.config.json";
-type UserTier = 'free' | 'pro';
-interface Config {
-    lang?: string;
-    plan?: {
-        maxSteps: number;
-    };
-    browser?: {
-        extension?: string;
-    };
-    video: {
-        width: number;
-        height: number;
-        format: string;
-        preset: 'ultrafast' | 'superfast' | 'veryfast' | 'faster' | 'fast' | 'medium' | 'slow' | 'slower' | 'veryslow';
-        quality: number;
-        fps: number;
-        cursor: boolean;
-        highlight: false | 'outline' | 'full';
-        fadeIn: number;
-        fadeOut: number;
-        transitions: 'none' | 'fade' | 'blend';
-        contrast: number;
-        tempo: number;
-        stepDelay: number;
-        outro?: string;
-        zoom?: number;
-    };
-    audio?: {
-        voice?: string;
-        format: string;
-        bitrate: string;
-    };
-    music?: {
-        path: string;
-        volume: number;
-    };
-    timing: {
-        minStepDuration: number;
-    };
-    output: {
-        dir: string;
-    };
-}
-interface CaptionWordStyle {
-    color: string;
-    size: number;
-    bold: boolean;
-}
-interface CaptionStyle {
-    font: string;
-    outline: string;
-    outlineWidth: number;
-    shadow: number;
-    marginBottom: number;
-    regular: CaptionWordStyle;
-    highlight: CaptionWordStyle;
-}
-declare const DEFAULT_CONFIG: Config;
-declare const DEFAULT_CAPTIONS: CaptionStyle;
-
-/**
- * AI API client — Spark AI communication
- * Handles token management, rate limiting, and retries
- *
- * Two transports:
- * - Relay (default for the published CLI): quickpeek-web mints a short-lived
- *   per-user token from a registered email and proxies the chat server-side.
- *   No credential ships in the npm bundle.
- * - Direct (dev/server only): when SPARK_AI_KEY is present in the runtime
- *   environment (never baked at build time), call Spark AI directly. This is
- *   the path quickpeek-web itself uses server-side.
- */
-
-interface RateLimitInfo {
-    used: number;
-    limit: number;
-    tier: UserTier;
-    resetAt?: string;
-}
-interface AIResponse {
-    success: true;
-    content: string;
-    limits: RateLimitInfo;
-}
-interface AIError {
-    success: false;
-    error: string;
-    isRateLimit?: boolean;
-    isAuthError?: boolean;
-    retryAfterSeconds?: number;
-    /** Upstream HTTP status, when the failure was an HTTP response. */
-    status?: number;
-    /** Host that produced the failure, so relay vs backend is distinguishable. */
-    host?: string;
-    /** Raw response body (truncated), for the error log. */
-    detail?: string;
-}
-type AIResult = AIResponse | AIError;
-/** Called before each backoff so the CLI can explain a long pause. */
-type RetryNotice = (info: {
-    attempt: number;
-    status: number;
-    delayMs: number;
-    host: string;
-}) => void;
-interface ChatOptions {
-    onRetry?: RetryNotice;
-    /**
-     * Backoff before each 5xx retry. Defaults to SERVER_BACKOFF_MS, which is
-     * sized to fit inside a serverless function budget — callAI runs inside the
-     * quickpeek-web routes as well as the CLI. Interactive callers should pass
-     * CLI_BACKOFF_MS, which can afford to outwait the backend's closed window.
-     */
-    backoffMs?: number[];
-}
-/** Short enough to stay well inside a serverless maxDuration. */
-declare const SERVER_BACKOFF_MS: number[];
-/**
- * Long enough to outlast the AI backend's ~45-60s closed window (measured
- * 16 Aug 2026). Only safe where a human is waiting on a spinner.
- */
-declare const CLI_BACKOFF_MS: number[];
-/**
- * Direct Spark AI call using the runtime SPARK_AI_KEY (dev + server-side use).
- */
-declare function callAI(systemPrompt: string, userPrompt: string, tier?: UserTier, opts?: ChatOptions): Promise<AIResult>;
-/**
- * Relayed Spark AI call for the published CLI: authenticates with the user's
- * registered email via quickpeek-web, which holds the real key server-side
- * and enforces per-user daily limits.
- */
-declare function callAIViaRelay(systemPrompt: string, userPrompt: string, email: string, tier?: UserTier, opts?: ChatOptions): Promise<AIResult>;
-/**
- * Parse AI-generated plan JSON from response text
- */
-declare function parseAIPlanResponse(content: string): {
-    success: true;
-    plan: {
-        title?: string;
-        description?: string;
-        steps: Array<{
-            id?: number;
-            action?: string;
-            caption?: string;
-            target?: string;
-            value?: string;
-        }>;
-    };
-} | {
-    success: false;
-    error: string;
-};
-/**
- * Normalize a URL by adding https:// and stripping www prefix
- */
-declare function normalizeUrl(input: string): string;
-
-/**
- * Shared types for QuickPeek core
- */
-/** Action type suggested for an element based on its type */
-type SuggestedAction = 'click' | 'type' | 'upload' | 'drag' | 'select' | 'check';
-/** Element type discovered on a page */
-type ElementType = 'button' | 'input' | 'link' | 'text' | 'file' | 'select' | 'range' | 'checkbox';
-/** Discovered element from page crawl */
-interface ElementInfo {
-    /** Element type */
-    type: ElementType | string;
-    /** Display text/label for the element */
-    text: string;
-    /** CSS selector to target the element */
-    selector: string;
-    /** Suggested action for this element */
-    action?: SuggestedAction;
-    /** Simplified target name (just the text, for AI use) */
-    target?: string;
-}
-/** Highlight mode for UI elements */
-type HighlightMode = false | 'outline' | 'full';
-/** Step in a demo plan */
-interface Step {
-    id: number | string;
-    action: string;
-    target?: string;
-    value?: string;
-    caption?: string;
-    description?: string;
-    duration?: number;
-    zoom?: number | string;
-    partial?: string;
-    transition?: 'fade' | 'blend';
-    highlight?: HighlightMode;
-    mediaFile?: string;
-    mediaType?: 'image' | 'video';
-}
-/** Demo plan structure */
-interface Plan {
-    url: string;
-    title: string;
-    description: string;
-    lang?: string;
-    steps: Step[];
-}
-
-/**
- * Page crawling and interactive element extraction
- */
-
-/**
- * A selector matching one id.
- *
- * HTML ids are far more permissive than CSS identifiers: `description-(optional)`
- * is a perfectly legal id, but `#description-(optional)` is invalid CSS and
- * Playwright rejects it, so the step silently finds nothing. Anything that is
- * not identifier-safe gets the attribute form instead.
- */
-declare function idSelector(id: string): string;
-/**
- * Crawl a page and extract interactive elements with smart selectors
- * Results are cached in-memory for a few minutes to avoid duplicate browser launches
- * @param url - URL to crawl
- * @param task - Optional progress reporter (CLI uses ora spinners, web can omit)
- */
-declare function crawlPage(url: string, task?: (text: string) => {
-    succeed: (text?: string) => void;
-}, storageStatePath?: string, viewport?: {
-    width: number;
-    height: number;
-}): Promise<{
-    title: string;
-    elements: ElementInfo[];
-    scrollable: number;
-}>;
-
-/**
- * Utility functions for QuickPeek
- */
-/**
- * Get full language name from ISO code
- */
-declare function getLanguageName(lang?: string): string | null;
-
-/**
- * Convert rgba() or rgb() color string to hex
- */
-declare function rgbaToHex(color: string): string;
-
-/**
- * Parse partial field "start-end" into trim values
- * e.g., "0-3.5" -> { trimStart: 0, trimEnd: 3.5 }
- * e.g., "2-" -> { trimStart: 2, trimEnd: undefined }
- */
-declare function parsePartial(partial: string | undefined): {
-    trimStart?: number;
-    trimEnd?: number;
-};
-/**
- * Extract a message string from an unknown error value
- */
-declare function getErrorMessage(err: unknown): string;
-/**
- * Convert text to Title Case, keeping prepositions/articles lowercase
- * First word is always capitalized
- */
-declare function toTitleCase(text: string): string;
-
-/**
- * AI prompts for demo plan generation
- */
-
-declare function buildSystemPrompt(maxSteps: number): string;
-declare function buildUserPrompt(url: string, title: string, elements: ElementInfo[], langName: string | null, description: string | undefined, maxSteps: number, scrollable?: number): string;
-
-type Tier = 'free' | 'pro';
-declare const FEATURES: Record<string, string[]>;
-interface SparkSubscription {
-    payment_type: 'subscription' | 'one_time';
-    status: 'active' | 'trialing' | 'past_due' | 'canceled' | 'lifetime';
-    is_lifetime: boolean;
-    current_period_end: string;
-    cancel_at_period_end: boolean;
-    billing_interval: 'monthly' | 'yearly' | 'one_time';
-    price_id: string;
-    created_at: string;
-}
-interface SparkTrial {
-    is_expired: boolean;
-    days_remaining: number;
-    uses_remaining: number;
-    max_days: number;
-    max_uses: number;
-}
-interface SparkStatus {
-    subscription: SparkSubscription | null;
-    verified: boolean;
-    registered: boolean;
-    usage_count: number;
-    trial: SparkTrial | null;
-    message?: string;
-}
-declare const getStatus: (email: string) => Promise<SparkStatus>;
-declare function getStatusCached(email: string): Promise<SparkStatus>;
-declare function getTier(d: SparkStatus): Tier;
-declare const isPaid: (d: SparkStatus) => boolean;
-declare const hasAccess: (d: SparkStatus, min: Tier) => boolean;
-declare const hasTrialRemaining: (d: SparkStatus) => boolean;
-declare const showPaywall: (d: SparkStatus) => boolean;
-declare const isCanceling: (d: SparkStatus) => boolean;
-/** Resolve tier directly from an email — the most common consumer call. Falls back to 'free' on error. */
-declare function getTierByEmail(email: string): Promise<Tier>;
-/** Check whether an email is verified. Falls back to false on error. */
-declare function isVerified(email: string): Promise<boolean>;
-declare function pricingUrl(opts?: {
-    email?: string;
-    returnUrl?: string;
-}): string;
-
-/**
- * Shared constants for page scraping and element filtering
- * Used by both CLI and web versions
- */
-declare const EXCLUDED_LINK_PATTERNS: string[];
-/** CSS selectors for interactive page elements */
-declare const INTERACTIVE_SELECTORS: string[];
-/** Check if link text or href matches an excluded pattern */
-declare function isExcludedLink(text: string, href?: string): boolean;
-/** Check if a link should be skipped during crawling */
-declare function shouldSkipLink(text: string, href: string, currentPath: string): boolean;
-
-export { toTitleCase as $, type AIError as A, hasAccess as B, type Config as C, DEFAULT_CAPTIONS as D, EXCLUDED_LINK_PATTERNS as E, FEATURES as F, hasTrialRemaining as G, type HighlightMode as H, INTERACTIVE_SELECTORS as I, idSelector as J, isCanceling as K, isExcludedLink as L, isPaid as M, isVerified as N, normalizeUrl as O, type Plan as P, parseAIPlanResponse as Q, type RateLimitInfo as R, SERVER_BACKOFF_MS as S, type Tier as T, type UserTier as U, VERSION as V, parsePartial as W, pricingUrl as X, rgbaToHex as Y, shouldSkipLink as Z, showPaywall as _, type AIResponse as a, getTier as a0, type AIResult as b, CLI_BACKOFF_MS as c, CONFIG_FILE as d, type CaptionStyle as e, type CaptionWordStyle as f, type ChatOptions as g, DEFAULT_CONFIG as h, type ElementInfo as i, type ElementType as j, type RetryNotice as k, type SparkStatus as l, type SparkSubscription as m, type SparkTrial as n, type Step as o, type SuggestedAction as p, buildSystemPrompt as q, buildUserPrompt as r, callAI as s, callAIViaRelay as t, crawlPage as u, getErrorMessage as v, getLanguageName as w, getStatus as x, getStatusCached as y, getTierByEmail as z };