@yawlabs/aws-mcp 1.2.1 → 1.3.1

package/README.md

@@ -100,23 +100,39 @@ The rest -- SSO device-code re-login, CCAPI CRUD with dry-run diffs, multi-regio
 
 ## Install
 
+Add to your MCP client config (e.g. `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "aws": {
+      "command": "npx",
+      "args": ["-y", "@yawlabs/aws-mcp"]
+    }
+  }
+}
+```
+
+The `-y` flag is what gives you **auto-update on each session load**: every time your MCP client spawns the server, `npx` checks the registry for the latest `@yawlabs/aws-mcp` and downloads it if newer. The first launch in a fresh cache adds ~100-500 ms; subsequent launches use npm's cache (typical metadata-freshness window: 5 min) and add ~50 ms or less. Once the server is up, tool calls have zero auto-update overhead -- the check fires only on (re-)spawn. No separate install step is needed; `-y` covers both first-time install and ongoing updates.
+
+If you'd rather pin a specific version (no auto-update, but zero startup overhead), install globally and point the config at the installed binary:
+
 ```bash
 npm install -g @yawlabs/aws-mcp
 ```
 
-Or add to your MCP client config (e.g. `.mcp.json`):
-
 ```json
 {
   "mcpServers": {
     "aws": {
-      "command": "npx",
-      "args": ["-y", "@yawlabs/aws-mcp"]
+      "command": "aws-mcp"
     }
   }
 }
 ```
 
+You'll need to `npm install -g @yawlabs/aws-mcp@latest` manually when you want a newer version.
+
 ## Example session
 
 You ask the assistant to check a staging bucket, but your SSO token just expired. What the assistant does (and what you see):

package/dist/index.js

@@ -55453,6 +55453,14 @@ function isValidStatistic(s) {
   if (SIMPLE_STATS.some((stat) => stat.toLowerCase() === lower)) return true;
   return EXTENDED_STAT_RE.test(s);
 }
+function canonicalizeStatistic(s) {
+  const lower = s.toLowerCase();
+  for (const stat of SIMPLE_STATS) {
+    if (stat.toLowerCase() === lower) return stat;
+  }
+  if (EXTENDED_STAT_RE.test(s)) return lower;
+  return s;
+}
 var QUERY_ID_RE = /^[a-z][A-Za-z0-9_]*$/;
 var MAX_QUERIES = 100;
 var PERIOD_3H_MS = 3 * 60 * 60 * 1e3;
@@ -55505,7 +55513,7 @@ function buildMetricDataQueries(inputs, autoPeriod) {
         ...dimensions ? { Dimensions: dimensions } : {}
       },
       Period: q.period ?? autoPeriod,
-      Stat: q.statistic ?? "Average"
+      Stat: q.statistic !== void 0 ? canonicalizeStatistic(q.statistic) : "Average"
     };
     if (q.unit !== void 0) stat.Unit = q.unit;
     base.MetricStat = stat;
@@ -55682,7 +55690,6 @@ var metricsTools = [
 var DEFAULT_CONCURRENCY = 8;
 var MAX_CONCURRENCY = 32;
 var MAX_REGIONS = 32;
-var REGION_RE = /^[a-z][a-z0-9-]{2,30}$/;
 async function runWithConcurrency(inputs, concurrency, fn) {
   const results = new Array(inputs.length);
   let next = 0;
@@ -55735,11 +55742,11 @@ var multiRegionTools = [
       }
       const concurrency = i.concurrency ?? DEFAULT_CONCURRENCY;
       const results = await runWithConcurrency(regions, concurrency, async (region) => {
-        if (!REGION_RE.test(region)) {
+        if (!isValidRegionName(region)) {
           return {
             region,
             ok: false,
-            error: `Invalid region '${region}'. Must match /^[a-z][a-z0-9-]{2,30}$/.`,
+            error: `Invalid region '${region}'. Must match ${REGION_NAME_RE} (e.g. 'us-east-1').`,
             errorKind: "bad_input"
           };
         }
@@ -56639,6 +56646,12 @@ function defaultScriptHandlers() {
   const callTool = findTool("aws_call", callTools);
   const paginateTool = findTool("aws_paginate", paginateTools);
   const logsTailTool = findTool("aws_logs_tail", logsTools);
+  const metricsQueryTool = findTool("aws_metrics_query", metricsTools);
+  const iamSimulateTool = findTool("aws_iam_simulate", iamSimulateTools);
+  const multiRegionTool = findTool("aws_multi_region", multiRegionTools);
+  const assumeRoleTool = findTool("aws_assume_role", assumeTools);
+  const docsSearchTool = findTool("aws_docs_search", docsTools);
+  const docsReadTool = findTool("aws_docs_read", docsTools);
   const resourceGet = findTool("aws_resource_get", resourceTools);
   const resourceList = findTool("aws_resource_list", resourceTools);
   const resourceCreate = findTool("aws_resource_create", resourceTools);
@@ -56650,6 +56663,10 @@ function defaultScriptHandlers() {
     paginate: (input) => unwrap(paginateTool, input),
     paginateAll: buildPaginateAll(paginateTool),
     logsTail: (input) => unwrap(logsTailTool, input),
+    metricsQuery: (input) => unwrap(metricsQueryTool, input),
+    iamSimulate: (input) => unwrap(iamSimulateTool, input),
+    multiRegion: (input) => unwrap(multiRegionTool, input),
+    assumeRole: (input) => unwrap(assumeRoleTool, input),
     resource: {
       get: (input) => unwrap(resourceGet, input),
       list: (input) => unwrap(resourceList, input),
@@ -56657,6 +56674,10 @@ function defaultScriptHandlers() {
       update: (input) => unwrap(resourceUpdate, input),
       delete: (input) => unwrap(resourceDelete, input),
       status: (input) => unwrap(resourceStatus, input)
+    },
+    docs: {
+      search: (input) => unwrap(docsSearchTool, input),
+      read: (input) => unwrap(docsReadTool, input)
     }
   };
 }
@@ -56710,6 +56731,10 @@ async function runScript(opts, handlers = defaultScriptHandlers()) {
     paginate: wrapForRealm(handlers.paginate),
     paginateAll: wrapForRealm(handlers.paginateAll),
     logsTail: wrapForRealm(handlers.logsTail),
+    metricsQuery: wrapForRealm(handlers.metricsQuery),
+    iamSimulate: wrapForRealm(handlers.iamSimulate),
+    multiRegion: wrapForRealm(handlers.multiRegion),
+    assumeRole: wrapForRealm(handlers.assumeRole),
     resource: {
       get: wrapForRealm(handlers.resource.get),
       list: wrapForRealm(handlers.resource.list),
@@ -56717,6 +56742,10 @@ async function runScript(opts, handlers = defaultScriptHandlers()) {
       update: wrapForRealm(handlers.resource.update),
       delete: wrapForRealm(handlers.resource.delete),
       status: wrapForRealm(handlers.resource.status)
+    },
+    docs: {
+      search: wrapForRealm(handlers.docs.search),
+      read: wrapForRealm(handlers.docs.read)
     }
   };
   Object.assign(ctx, {
@@ -56801,7 +56830,7 @@ ${opts.code}
 var scriptTools = [
   {
     name: "aws_script",
-    description: "Run a short JavaScript snippet that orchestrates other aws-mcp tools (aws.call, aws.paginate, aws.paginateAll, aws.resource.*, aws.logsTail) and returns a combined result. Best for batched read+filter+aggregate workflows that would otherwise need N tool round-trips: 'list all Lambdas, fetch each one's config, return those with memory > 1024'. Use `return <value>` at the end to surface a result; console.log lines are captured and returned alongside. Helpers throw Errors on failure -- use try/catch. NOT a security sandbox -- treat the same as any other tool the model can call.",
+    description: "Run a short JavaScript snippet that orchestrates other aws-mcp tools (aws.call, aws.paginate, aws.paginateAll, aws.resource.*, aws.logsTail, aws.metricsQuery, aws.iamSimulate, aws.multiRegion, aws.assumeRole, aws.docs.{search,read}) and returns a combined result. Best for batched read+filter+aggregate workflows that would otherwise need N tool round-trips: 'list all Lambdas, fetch each one's config, return those with memory > 1024'. Use `return <value>` at the end to surface a result; console.log lines are captured and returned alongside. Helpers throw Errors on failure -- use try/catch. NOT a security sandbox -- treat the same as any other tool the model can call.",
     annotations: {
       title: "Run a JS snippet that orchestrates AWS tool calls",
       // The script may invoke destructive tools (resource.create/update/delete)
@@ -56813,7 +56842,7 @@ var scriptTools = [
     },
     inputSchema: external_exports3.object({
       code: external_exports3.string().min(1).describe(
-        "JavaScript snippet evaluated inside `(async () => { ... })()`. Use `return <value>` to surface a result. Bound globals: aws.call, aws.paginate, aws.paginateAll, aws.resource.{get,list,create,update,delete,status}, aws.logsTail, console (capture), JSON, Math, Date, Promise, Array, Object, String, Number, Boolean, Error, Intl, Atomics, SharedArrayBuffer, WebAssembly (compile blocked). Shadowed (undefined): require, import, process, fs, fetch + family, BroadcastChannel, setTimeout/Interval, queueMicrotask, Buffer, global, globalThis. NOT available (ReferenceError if used): URL, URLSearchParams, TextEncoder, TextDecoder, crypto, structuredClone, EventTarget, MessageChannel, performance. eval/Function are disabled (codeGeneration off). Tool helpers throw on failure -- wrap in try/catch when you want to handle errors per-call."
+        "JavaScript snippet evaluated inside `(async () => { ... })()`. Use `return <value>` to surface a result. Bound globals: aws.call, aws.paginate, aws.paginateAll, aws.resource.{get,list,create,update,delete,status}, aws.logsTail, aws.metricsQuery, aws.iamSimulate, aws.multiRegion, aws.assumeRole, aws.docs.{search,read}, console (capture), JSON, Math, Date, Promise, Array, Object, String, Number, Boolean, Error, Intl, Atomics, SharedArrayBuffer, WebAssembly (compile blocked). Intentionally NOT bound (call as sibling MCP tools instead): aws_list_profiles, the auth/session tools, and aws_script itself. Shadowed (undefined): require, import, process, fs, fetch + family, BroadcastChannel, setTimeout/Interval, queueMicrotask, Buffer, global, globalThis. NOT available (ReferenceError if used): URL, URLSearchParams, TextEncoder, TextDecoder, crypto, structuredClone, EventTarget, MessageChannel, performance. eval/Function are disabled (codeGeneration off). Tool helpers throw on failure -- wrap in try/catch when you want to handle errors per-call."
       ),
       timeoutMs: external_exports3.number().int().positive().max(MAX_TIMEOUT_MS).optional().describe(
         `Wall-clock timeout in milliseconds. Default ${DEFAULT_TIMEOUT_MS2}; max ${MAX_TIMEOUT_MS}. Covers evaluation plus every awaited aws.* call. On timeout the script stops being awaited and the tool returns an error, but any aws.* call already in flight is NOT cancelled -- it continues until its own per-call timeout (default 60s). Plan retries accordingly: a script that timed out mid 'resource.delete' may have completed the delete; re-issuing the same script can double-mutate.`
@@ -56914,7 +56943,7 @@ var sessionTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "1.2.1" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "1.3.1" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/aws-mcp",
-  "version": "1.2.1",
+  "version": "1.3.1",
   "mcpName": "io.github.YawLabs/aws-mcp",
   "description": "AWS MCP server — call any AWS API from AI assistants, with first-class SSO re-login (no more 'browser won't open' dead ends)",
   "license": "MIT",