@typeroll/mcp-server 0.45.81 → 0.45.83

package/AGENTS.md

@@ -1084,8 +1084,12 @@ choice; never ask for it as a prerequisite for your own work.
   `list_site_shares`. Site admin. Confirm the recipient first: a share gives
   every member of that Organization access.
 - **A person joining your Organization:** `create_organization_invite` returns
-  a link; the person signs in and joins as an editor. Creating Organizations,
-  switching Organization and redeeming invites remain signed-in portal actions.
+  a link; the person signs in and joins as an editor. It is single use unless
+  you set `max_uses` (up to 50), and `email` binds it to one address.
+  `list_organization_invites` shows each invite's state without its link, and
+  `revoke_organization_invite` stops a link immediately. Organization key.
+  Creating Organizations, switching Organization and redeeming invites remain
+  signed-in portal actions.
 
 ### "Turn on the portal's AI assistant" (and why you don't need it)
 
@@ -1298,7 +1302,7 @@ preview.
 | **Discovery** | `get_site`, `create_site`, `create_site_and_migrate`, `create_site_and_plan` (org-scoped key only — see below), `update_site` (incl. `ai_scripts_enabled`, admin), `list_versions`, `read_site_settings` |
 | **Site lifecycle** | `archive_site`, `restore_site`, `purge_site_media` (archived sites only, irreversible). Owner-organization admin, as in the portal. |
 | **Workflows** | `list_workflows`, `start_workflow` (write; `rebuild_deploy` admin), `get_workflow`, `approve_workflow` (only `paused_for_review`, with the user's consent) |
-| **Access** | `list_api_keys`, `revoke_api_key` (site admin), `list_organization_api_keys`, `revoke_organization_api_key` (organization key; new keys are created only in the portal), `list_site_shares`, `share_site`, `update_site_share`, `revoke_site_share` (site admin), `create_organization_invite` (organization key), `read_organization_ai_settings`, `set_organization_ai_key`, `remove_organization_ai_key`, `set_organization_ai_site_access` (the portal AI chat's own key and Sites; organization key) |
+| **Access** | `list_api_keys`, `revoke_api_key` (site admin), `list_organization_api_keys`, `revoke_organization_api_key` (organization key; new keys are created only in the portal), `list_site_shares`, `share_site`, `update_site_share`, `revoke_site_share` (site admin), `create_organization_invite`, `list_organization_invites`, `revoke_organization_invite` (organization key), `read_organization_ai_settings`, `set_organization_ai_key`, `remove_organization_ai_key`, `set_organization_ai_site_access` (the portal AI chat's own key and Sites; organization key) |
 | **Organization publishing** | `read_organization_publishing_connections`, `diagnose_organization_github_connection`, `diagnose_organization_cloudflare_connection`, `disconnect_organization_publishing_provider`, `connect_organization_cloudflare`, `prepare_organization_media_storage`, `save_organization_media_access`, plus builds, Hosting Groups, domains and media migration tools (organization key) |
 | **Insights** | `get_site_insights` — traffic, AI-assistant referrals, and first-party conversion events over 7/30/90 days. Read-only. Traffic is powered by Cloudflare Web Analytics in the account that hosts the site; a non-ok `status` carries a `reason` with the next step. Conversion rows come from validated Analytics attribution `click_event` targets and can be present even when the traffic provider is unavailable. |
 | **Pages — reads** | `list_pages`, `read_page`, `batch_read_pages` |

package/README.md

@@ -107,7 +107,8 @@ log.
    ```
 
    For a self-hosted portal, point `TYPEROLL_API_URL` at it (e.g.
-   `https://cms.example.com`).
+   `https://cms.example.com`). The stdio server and the `typeroll extension`
+   CLI require HTTPS, except on loopback hosts.
 
    For an optional agent-neutral workspace, run
    `npx @typeroll/mcp-server init ./my-site`. It creates project instructions,
@@ -131,7 +132,7 @@ log.
 
 | Var                | Required  | Description                                                                                                                                              |
 | ------------------ | --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `TYPEROLL_API_URL` | yes       | Base URL of your Typeroll portal.                                                                                                                        |
+| `TYPEROLL_API_URL` | yes       | Base URL of your Typeroll portal. Must use HTTPS; plain HTTP is accepted only for `localhost`, `127.0.0.1` or `[::1]`.                                   |
 | `TYPEROLL_API_KEY` | yes       | A `typeroll_live_…` bearer token.                                                                                                                        |
 | `TYPEROLL_SITE_ID` | sometimes | Pin to a specific site. Required when the key can access multiple sites; each stdio process targets one site. A single accessible site is auto-detected. |
 
@@ -151,7 +152,11 @@ typeroll extension promote 1.0.0
 ```
 
 The manifest defaults to `typeroll-extension.json`; use `--manifest` to select
-another file. Local validation is a fast preflight. The portal always performs
+another file. For a private Extension, `install` adds the site to the
+Extension's `allowed_site_ids`. A bare site id only matches a site of your own
+developer organization; to install on another organization's site, pass
+`--site <organization-id>/<site-id>`, which is written to the allow-list in
+that form. Local validation is a fast preflight. The portal always performs
 the complete schema, compatibility, origin and asset-hash validation.
 `extension configure` queues a production deploy by default; pass
 `--no-deploy` only when batching updates and deploy once afterwards.
@@ -191,8 +196,9 @@ the full reference + concrete operation recipes.
   `revoke_api_key`; revoking needs site admin) and organization API keys
   (`list_organization_api_keys`, `revoke_organization_api_key`),
   cross-organization sharing (`list_site_shares`, `share_site`,
-  `update_site_share`, `revoke_site_share`; site admin) and
-  `create_organization_invite` (editor invite link). A share never reaches
+  `update_site_share`, `revoke_site_share`; site admin) and editor invite
+  links (`create_organization_invite`, `list_organization_invites`,
+  `revoke_organization_invite`; organization key). A share never reaches
   further than the caller. New API keys are created only in the portal, so the
   secret never passes through an agent conversation.
 - **Portal AI assistant** — `read_organization_ai_settings`,
@@ -407,7 +413,9 @@ Use `read_app_documentation` to discover instructions for the selected site’s
 MCP 0.45.23 introduces an agent-neutral `typeroll init` workspace, optional
 client adapters, safe hash-based `init --update`, and read-only `typeroll doctor`.
 Use `workspace-mcp` to bind local calls to `typeroll.json`; no credentials are
-stored there. Recipes are optional rather than automatically injected.
+stored there. Because `typeroll.json` is committed, its `portal` receives the
+API key only when it is `https://app.typeroll.com` or matches a privately set
+`TYPEROLL_API_URL`. Recipes are optional rather than automatically injected.
 
 Compact mode exposes five discovery/execution tools instead of every schema.
 Choose `?tools=compact` on the hosted endpoint (Core 0.2.27+), `tool_mode` in the

package/dist/api-url.js

@@ -0,0 +1,23 @@
+const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+/** HTTPS, or plain HTTP only to a loopback host where the key never leaves the machine. */
+export function isSecureApiUrl(url) {
+    return url.protocol === 'https:' || (url.protocol === 'http:' && LOOPBACK_HOSTS.has(url.hostname));
+}
+/**
+ * Validate TYPEROLL_API_URL before an API key is attached to any request.
+ * Returns an error message, or null when the URL is acceptable.
+ */
+export function apiUrlProblem(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return 'TYPEROLL_API_URL must be an absolute URL such as https://app.typeroll.com.';
+    }
+    if (url.username || url.password)
+        return 'TYPEROLL_API_URL must not contain credentials.';
+    if (!isSecureApiUrl(url))
+        return 'TYPEROLL_API_URL must use HTTPS (HTTP is allowed only for localhost, 127.0.0.1 or [::1]).';
+    return null;
+}