@supericons/mcp 0.4.6

package/CHANGELOG.md

@@ -0,0 +1,78 @@
+# Changelog
+
+## 0.4.5 - 2026-05-14
+
+### Fixed
+
+- fixed hosted MCP runtime dependency packaging for Railway deployments
+- fixed hosted MCP fallback search for localized Chinese queries and solid icon styles
+- improved settings-page recommendations across English and supported localized slot labels
+
+## 0.4.4 - 2026-05-14
+
+### Fixed
+
+- improved `recommend_icons` for natural localized slot labels, including Chinese compound labels such as account/profile, notifications/settings, privacy/security, appearance/theme, and language/settings
+- made slot recommendations ignore individual hosted search failures instead of failing the whole recommendation response
+
+## 0.4.3 - 2026-05-14
+
+### Fixed
+
+- fixed npm/stdio multilingual search fallback so localized Chinese settings queries retry with the approved English concept when the hosted gateway returns no localized result
+
+## 0.4.2 - 2026-05-14
+
+### Fixed
+
+- added hosted MCP fallback support for multilingual search when the public search gateway returns no localized result
+- expanded Arabic category aliases so shorter queries such as `الأمان` match the same concepts as the full category label
+
+## 0.4.1 - 2026-05-05
+
+### Added
+
+- added official MCP Registry metadata through `mcpName` and `server.json`
+- documented both the hosted Streamable HTTP endpoint and the npm stdio package for registry discovery
+
+## 0.4.0 - 2026-05-03
+
+### Changed
+
+- switched the free icon search tools to hosted semantic search by default
+- removed bulk registry and icon-index JSON files from the npm package
+- kept a local fallback path for internal development when `SUPERICONS_ALLOW_LOCAL_SEARCH_FALLBACK=1`
+- packaged only the small runtime helpers needed for MCP startup and slot recommendations
+
+## 0.3.1 - 2026-04-14
+
+### Fixed
+
+- packaged the MCP runtime dependencies needed for clean npm installs:
+  - `material-export.js`
+  - `public/icon-index.json`
+  - `public/synonyms.json`
+- fixed the MCP server's package-local paths so installed copies no longer depend on repo-level `../public` or `../material-export.js`
+
+## 0.3.0 - 2026-04-11
+
+### Breaking changes
+
+- Motion Lab MCP input parameters now use `snake_case`:
+  - `duration_ms`
+  - `intensity_percent`
+- Motion Lab animated SVG responses now use `animated_svg` instead of `animatedSvg`
+
+### Added
+
+- `list_motion_presets` now returns the enriched Motion Lab preset metadata used by the agent library
+- `get_motion_recipe` now returns enriched preset guidance fields such as:
+  - `technical_output_notes`
+  - `visual_character`
+  - `emotional_tone`
+  - `recommended_contexts`
+  - `avoid_for`
+
+### Upgrade note
+
+If you have an existing MCP client config or wrapper using the old Motion Lab parameter names, update those callers before using `0.3.0`.

package/auth.js

@@ -0,0 +1,69 @@
+/**
+ * SuperIcons MCP: API Key Authentication
+ * Validates SUPERICONS_API_KEY env var via the validate-mcp-key Edge Function.
+ * Returns auth tier: anonymous, authenticated (free), pack buyer, or Pro.
+ */
+
+export const SUPABASE_URL = process.env.SUPERICONS_SUPABASE_URL || 'https://kcjmkakdhsqplvasgkjv.supabase.co';
+const FALLBACK_SUPABASE_PUBLISHABLE_KEY = 'sb_publishable_slbcWcnrQ45rkJPONFD7pw_hW0WpvBi';
+export const SUPABASE_ANON = process.env.SUPABASE_ANON_KEY || process.env.SUPERICONS_SUPABASE_ANON || FALLBACK_SUPABASE_PUBLISHABLE_KEY;
+
+export function getConfiguredApiKey() {
+  const apiKey = process.env.SUPERICONS_API_KEY;
+  if (typeof apiKey !== 'string') return null;
+  const trimmed = apiKey.trim();
+  return trimmed || null;
+}
+
+export async function hashApiKey(apiKey) {
+  const { createHash } = await import('crypto');
+  return createHash('sha256').update(apiKey).digest('hex');
+}
+
+/**
+ * Validate API key and determine auth tier.
+ * @returns {{ authenticated: boolean, isPro: boolean, purchasedSlugs: string[], userId: string|null, error: string|null }}
+ */
+export async function validateApiKey() {
+  const apiKey = getConfiguredApiKey();
+
+  // No key: anonymous tier (free icons only)
+  if (!apiKey) {
+    return { authenticated: false, isPro: false, purchasedSlugs: [], userId: null, error: null };
+  }
+
+  try {
+    // SHA-256 hash the key (never send the raw key over the network)
+    const keyHash = await hashApiKey(apiKey);
+
+    // Validate via Edge Function (server-side, bypasses RLS)
+    const res = await fetch(
+      `${SUPABASE_URL}/functions/v1/validate-mcp-key`,
+      {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          'apikey': SUPABASE_ANON,
+        },
+        body: JSON.stringify({ key_hash: keyHash }),
+      }
+    );
+
+    if (!res.ok) {
+      const body = await res.text();
+      return { authenticated: false, isPro: false, purchasedSlugs: [], userId: null, error: `Validation failed (${res.status}): ${body}` };
+    }
+
+    const result = await res.json();
+    return {
+      authenticated: result.authenticated ?? false,
+      isPro: result.isPro ?? false,
+      purchasedSlugs: result.purchasedSlugs ?? [],
+      userId: result.userId ?? null,
+      error: result.error ?? null,
+    };
+  } catch (err) {
+    console.error('[Auth] API key validation failed:', err.message);
+    return { authenticated: false, isPro: false, purchasedSlugs: [], userId: null, error: err.message };
+  }
+}

package/converter.js

@@ -0,0 +1,8 @@
+import {
+  convertPngToSvg,
+  convertSvgToPng,
+  getConverterMcpOptions,
+  inspectConverterInput,
+} from './runtime/converter-workflow.js';
+
+export { convertPngToSvg, convertSvgToPng, getConverterMcpOptions, inspectConverterInput };