@velixir/mcp 0.3.0 → 0.3.1

package/README.md

@@ -39,7 +39,7 @@ Point the editor's MCP settings at the same command (`npx -y @velixir/mcp`).
 | --- | --- | --- |
 | `directory` | yes | Absolute path to the app's source directory. |
 | `name` | no | Short name for the app; becomes part of the URL. |
-| `language` | no | node, python, go, ruby, php, java, elixir, rust, dotnet, deno, fsharp. Auto-detected if omitted. |
+| `language` | no | node, python, go, ruby, php, java, elixir, rust, dotnet, deno, fsharp. Detected from the project files if omitted; pass it when the folder mixes languages. |
 | `port` | no | Only if the app hard-codes a port instead of reading the `PORT` env var. |
 
 It returns the live URL, a claim URL (give this to the user), when the claim window closes, a **deployment ID** (pass it to `logs`), and a status URL to poll.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velixir/mcp",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Deploy web apps in any language to Velixir (the European cloud) straight from your AI agent: point deploy at a directory for a live URL and claim link, then read logs to debug what you shipped.",
   "type": "module",
   "bin": {

package/src/index.js

@@ -30,22 +30,49 @@ const IGNORED_DIRS = new Set([
   ".venv", "venv", "__pycache__", ".pytest_cache", ".gradle", ".idea", ".vs",
 ]);
 
+// Folders that hold credentials, never source.
+const SECRET_DIRS = new Set([".ssh", ".aws", ".gnupg", ".docker", ".kube", ".azure"]);
+
+// Files that hold secrets. An agent deploys whatever folder it was working in, and that folder
+// usually has the user's .env in it. An unclaimed deploy is public for its whole window, so a
+// secret uploaded here is a secret leaked. Example files (.env.example) are kept: they document
+// variables without values and some apps read them at start-up.
+const SECRET_FILE = [
+  /^\.env$/i,
+  /^\.env\.(?!example$|sample$|template$|dist$|defaults$).+/i,
+  /\.(pem|key|p12|pfx|jks|keystore|kdbx|ppk)$/i,
+  /^id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/i,
+  /^\.(npmrc|pypirc|netrc|git-credentials|pgpass)$/i,
+  /^(credentials|service[-_]?account.*)\.json$/i,
+];
+
+function isSecret(segments) {
+  const file = segments[segments.length - 1] ?? "";
+  return segments.some((seg) => SECRET_DIRS.has(seg)) || SECRET_FILE.some((re) => re.test(file));
+}
+
 async function tarballOf(dir) {
+  const skippedSecrets = [];
   const stream = tarCreate(
     {
       gzip: true,
       cwd: dir,
       portable: true,
       filter: (entryPath) => {
-        const segments = entryPath.split(/[\\/]/).filter(Boolean);
-        return !segments.some((seg) => IGNORED_DIRS.has(seg));
+        const segments = entryPath.split(/[\\/]/).filter((s) => s && s !== ".");
+        if (segments.some((seg) => IGNORED_DIRS.has(seg))) return false;
+        if (isSecret(segments)) {
+          skippedSecrets.push(segments.join("/"));
+          return false;
+        }
+        return true;
       },
     },
     ["."],
   );
   const chunks = [];
   for await (const chunk of stream) chunks.push(chunk);
-  return Buffer.concat(chunks);
+  return { buffer: Buffer.concat(chunks), skippedSecrets };
 }
 
 // Anonymous reads are rate limited per client (a burst, then one every two seconds). Tell the
@@ -55,7 +82,7 @@ function rateLimited(res) {
   return { isError: true, content: [{ type: "text", text: `Rate limited by Velixir. Wait about ${wait} seconds before calling this again, and avoid polling in a tight loop.` }] };
 }
 
-const server = new McpServer({ name: "velixir", version: "0.3.0" });
+const server = new McpServer({ name: "velixir", version: "0.3.1" });
 
 server.tool(
   "deploy",
@@ -71,7 +98,7 @@ server.tool(
     language: z
       .string()
       .optional()
-      .describe("Primary language (node, python, go, ruby, php, java, elixir, rust, dotnet, deno, fsharp). Auto-detected from the source if omitted."),
+      .describe("Primary language (node, python, go, ruby, php, java, elixir, rust, dotnet, deno, fsharp). Detected from the project files (package.json, go.mod, *.csproj and so on) if omitted; pass it when the folder mixes languages."),
     port: z
       .number()
       .int()
@@ -85,9 +112,9 @@ server.tool(
       return { isError: true, content: [{ type: "text", text: `Not a directory: ${dir}` }] };
     }
 
-    let tar;
+    let tar, skippedSecrets;
     try {
-      tar = await tarballOf(dir);
+      ({ buffer: tar, skippedSecrets } = await tarballOf(dir));
     } catch (err) {
       return { isError: true, content: [{ type: "text", text: `Could not package the source: ${err?.message ?? err}` }] };
     }
@@ -124,6 +151,9 @@ server.tool(
         ? `Deployment ID: ${data.deployment_id}\n(Use the "logs" tool with this ID to see build/runtime logs and debug if the app doesn't come up.)`
         : null,
       data.status_url ? `Deployment status: ${data.status_url}` : null,
+      skippedSecrets.length
+        ? `Not uploaded, because they look like secrets: ${skippedSecrets.slice(0, 10).join(", ")}${skippedSecrets.length > 10 ? ` and ${skippedSecrets.length - 10} more` : ""}. If the app needs these values, the user can set them as environment variables after claiming it.`
+        : null,
     ].filter(Boolean);
 
     return { content: [{ type: "text", text: lines.join("\n") }] };