@thenavidm/slipway 0.1.8 → 0.1.9

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 What changed in Slipway, newest first.
 
+## 0.1.9, 2026-10-05: what Substack needed
+
+- **A resource can wait for an account.** `listed(env)` leaves a resource out until it returns true. Substack 2.2.3 offered its two resources only once a publication was connected; on Slipway they were always offered, and Claude Code then adds its own two resource tools to every message: 40 tokens in tool search, for reads that could only fail.
+- **The general help keeps its columns narrow.** Commands and settings each line up on their own, and an entry longer than 40 characters puts its help on the next line instead of pushing every other row out to its width. Substack's `login [<publication>] [--paste | --playwriter | --playwright]` started every description in the help at column 80, past the edge of a standard terminal; they now start at 34.
+
 ## 0.1.8, 2026-10-05: what Midjourney and Substack needed
 
 - **HTTP checks Origin.** A request whose `Origin` is another site is refused unless `<PREFIX>_HTTP_ALLOWED_ORIGINS` lists it, as the MCP transport spec asks: a page in a browser can send a request to a localhost server, and only that header says where it came from. Clients that are not browsers send none and are unaffected. Substack's own server did this before it moved.

package/README.md

@@ -574,6 +574,7 @@ See [CHANGELOG.md](CHANGELOG.md).
 | --- | --- | --- |
 | [Bluesky](https://github.com/thenavidm/bluesky-mcp-cli) | [`@thenavidm/bluesky-mcp-cli`](https://www.npmjs.com/package/@thenavidm/bluesky-mcp-cli) 2.0.0 | Posting, threads, replies, the timeline, search, feeds, lists, notifications and the social graph |
 | [Mastodon](https://github.com/thenavidm/mastodon-mcp-cli) | [`@thenavidm/mastodon-mcp-cli`](https://www.npmjs.com/package/@thenavidm/mastodon-mcp-cli) 2.0.0 | Posting, editing, threads, timelines, search, lists, notifications and following, on any instance |
+| [Midjourney](https://github.com/thenavidm/midjourney-mcp-cli) | [`@thenavidm/midjourney-mcp-cli`](https://www.npmjs.com/package/@thenavidm/midjourney-mcp-cli) 2.0.0 | Generating images and video, following jobs, downloads, moodboards, the account's library and the explore feeds, through a signed-in browser |
 | [Teachable](https://github.com/thenavidm/teachable-mcp-cli) | [`@thenavidm/teachable-mcp-cli`](https://www.npmjs.com/package/@thenavidm/teachable-mcp-cli) 3.0.0 | Courses, users, enrollments, pricing, coupons and transactions |
 | [Threads](https://github.com/thenavidm/threads-mcp-cli) | [`@thenavidm/threads-mcp-cli`](https://www.npmjs.com/package/@thenavidm/threads-mcp-cli) 2.0.0 | Posting, threads, carousels, replies and reply approvals, insights and keyword search |
 | [ThriveCart](https://github.com/thenavidm/thrivecart-mcp-cli) | [`@thenavidm/thrivecart-mcp-cli`](https://www.npmjs.com/package/@thenavidm/thrivecart-mcp-cli) 3.0.0 | Products and pricing, transactions and revenue, customers, subscriptions and affiliates, across several carts |

package/dist/app.d.ts

@@ -23,6 +23,12 @@ export type ResourceDefinition<Ctx> = {
     mimeType?: string;
     /** A string is sent as text; anything else as JSON. */
     read: (ctx: Ctx) => unknown | Promise<unknown>;
+    /**
+     * False leaves the resource out of the list, such as one that reads an account
+     * nobody has connected yet. A client that sees a resource may list it to the
+     * model on every message, so one that can only fail costs tokens for nothing.
+     */
+    listed?: (env: NodeJS.ProcessEnv) => boolean;
 };
 export type PromptDefinition<Ctx> = {
     name: string;

package/dist/cli/help.js

@@ -9,6 +9,8 @@ import { policyEnvNames, riskMark, visibility } from "../policy.js";
 import { firstSentence } from "../search.js";
 import { flagsFor } from "./flags.js";
 const COLUMN = 30;
+/** The widest entry the general help aligns the others to. */
+const WIDE = 40;
 /** The words the CLI owns, which no tool command may take. */
 export const BUILTINS = ["help", "tools", "schema", "agent-context", "which", "doctor", "login", "completion", "version", "data", "install"];
 export const GLOBAL_FLAGS = [
@@ -187,6 +189,15 @@ export function renderToolHelp(tool, bin, aliases = {}) {
     lines.push(``, `Risk: ${riskWords(tool)}`, ``);
     return lines.join("\n");
 }
+/**
+ * Two aligned columns. An entry longer than WIDE, such as a login that takes three
+ * flags, puts its help on the next line instead of padding every other row out to
+ * its width: on Substack that padding was a third of the general help's tokens.
+ */
+function table(rows) {
+    const width = Math.max(0, ...rows.map(([left]) => left.length).filter((length) => length <= WIDE)) + 3;
+    return ([left, help]) => (left.length <= WIDE ? `  ${left.padEnd(width)}${help}` : `  ${left}\n  ${" ".repeat(width)}${help}`);
+}
 export function renderGeneralHelp(app, bin) {
     const names = policyEnvNames(app.envPrefix);
     const cache = app.allTools.some((tool) => tool.cache);
@@ -233,19 +244,19 @@ export function renderGeneralHelp(app, bin) {
     ];
     // Flags that cannot apply here (jobs, the cache) are left out; agent-context lists every one.
     const flags = GLOBAL_FLAGS.map(([flag]) => flag).filter((flag) => flag !== "--agent" && (flag !== "--wait" || jobs) && (flag !== "--refresh" || cache));
-    const width = Math.max(...[...commands, ...settings].map(([left]) => left.length)) + 3;
-    const row = ([left, help]) => `  ${left.padEnd(width)}${help}`;
+    const commandRow = table(commands);
+    const settingRow = table(settings);
     const lines = [
         ``,
         `${app.title} ${app.version}`,
         ``,
-        ...commands.map(row),
+        ...commands.map(commandRow),
         `  Also: schema <command>, agent-context [--brief] (all of this as JSON), completion <shell>.`,
         ``,
         `Flags: ${flags.join(", ")}, and --agent: compact JSON, no prompts, never confirms a write.`,
         ``,
         `Settings:`,
-        ...settings.map(row),
+        ...settings.map(settingRow),
         ...(tuning.length ? [`  Also: ${tuning.join(", ")}, described in agent-context.`] : []),
         ``,
         `Exit codes: ${EXIT.ok} ok, ${EXIT.error} unexpected, ${EXIT.usage} usage or refused, ${EXIT.notFound} not found, ${EXIT.auth} auth, ${EXIT.api} API, ${EXIT.rateLimited} rate limited, ${EXIT.notConfigured} not configured`,

package/dist/server.js

@@ -69,7 +69,8 @@ export function buildServer(app, env) {
         for (const tool of app.tools(env))
             registerTool(server, app, tool, env, policy);
     for (const resource of app.definition.resources ?? [])
-        registerResource(server, app, resource, env);
+        if (resource.listed?.(env) ?? true)
+            registerResource(server, app, resource, env);
     for (const prompt of app.definition.prompts ?? [])
         registerPrompt(server, app, prompt, env);
     return server;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thenavidm/slipway",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Slipway, the TypeScript framework for MCP servers and agent-native CLIs. One tool definition ships an MCP server and a CLI, with write safety, typed results and release checks built in.",
   "type": "module",
   "license": "Apache-2.0",