@yawlabs/caddy-mcp 2.5.7 → 2.5.9

package/README.md

@@ -306,7 +306,7 @@ npm install
 npm run lint       # Biome check
 npm run lint:fix   # Auto-fix
 npm run build      # tsup bundle
-npm test           # Vitest (781 unit tests, +39 POSIX-only unix-socket and launcher tests; +39 live-Caddy integration tests gated by CADDY_MCP_INTEGRATION=1)
+npm test           # Vitest (782 unit tests, +39 POSIX-only unix-socket and launcher tests; +39 live-Caddy integration tests gated by CADDY_MCP_INTEGRATION=1)
 npm run typecheck  # tsc --noEmit
 ```
 

package/bin/caddy-mcp.mjs

@@ -68,8 +68,8 @@
  * real oam 0.8.2 host, the MCP handshake never answered. Piping the streams
  * explicitly completes it, to both oam and Node. The sandbox spawn from a
  * supported oam host pipes too -- one rule for every oam host, verified with a
- * real handshake on 0.15.2. A Node host keeps `inherit`, which hands over the
- * same fds untouched.
+ * real handshake on 0.18.0 (first measured on 0.15.2). A Node host keeps
+ * `inherit`, which hands over the same fds untouched.
  *
  * The sandbox asks for a spawn; it does not guarantee one. Discovery can still
  * come up empty -- no usable oam binary, or a spawn that fails -- and under
@@ -112,7 +112,7 @@
  * "unauthenticated". The env list is derived from the shipped bundle.
  *
  * MINIMUM OAM VERSION
- * The latest oam release, 0.15.2 -- bump OAM_MIN when oam ships a newer one.
+ * The latest oam release, 0.18.0 -- bump OAM_MIN when oam ships a newer one.
  * Only the current oam is used and verified; an older one is passed over. The
  * floor is not cosmetic: before 0.9.0 `child_process.execFile` ran its
  * arguments through a SHELL, `exec` accepted `timeout` and ignored it,
@@ -142,7 +142,7 @@ import { delimiter, join } from "node:path";
 import { fileURLToPath } from "node:url";
 
 /** Oldest oam this server is served on. See MINIMUM OAM VERSION above. */
-const OAM_MIN = [0, 15, 2];
+const OAM_MIN = [0, 18, 0];
 
 /**
  * Bound on each `oam --version` probe. A healthy oam answers in milliseconds;
@@ -357,7 +357,7 @@ function sandboxFlags() {
   // Omitting the flag DENIES the category (oam reads an absent --allow-net as
   // false, a bare one as "*"), and denial costs nothing here: oam has no unix
   // socket transport at all, so api.ts's node:http `socketPath` dial cannot work
-  // under oam whether the grant is open or closed. Re-verified against oam 0.15.2 --
+  // under oam whether the grant is open or closed. Re-verified against oam 0.18.0 --
   // bare grant lets an unrelated host through, omitted grant denies it.
   //
   // This mirrors getMalformedUnixUrl's predicate in src/api.ts, NOT the stricter

package/dist/index.js

@@ -1633,7 +1633,14 @@ function registerRouteTools(server) {
         "Optional stable @id for the route. When set, repeat calls REPLACE the route in place (idempotent). When omitted, the route is APPENDED \u2014 calling twice with identical args creates a duplicate route. @ids are config-global in Caddy: if this id is already used by a non-route object the call refuses rather than clobbering it."
       )
     },
-    { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    // destructiveHint is TRUE because the hint covers the whole tool and a host
+    // gates on it before it can see whether the call carries an `id`: with one,
+    // an existing route under that @id is REPLACED wholesale by a PATCH -- its
+    // matchers, its handlers, a subroute holding a whole site's nested routes,
+    // all of it -- which is not the "only additive updates" MCP reserves
+    // destructiveHint:false for. Without an `id` the call only appends. Same
+    // worst-case rule as caddy_config_set and caddy_config_by_id.
+    { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
     async ({ from, to, server: srv, id }) => {
       const match = parseFrom(from.trim());
       if (match.host?.[0]?.trim() === "" || match.host === void 0 && match.path === void 0) {

package/dist/server.js

@@ -1631,7 +1631,14 @@ function registerRouteTools(server) {
         "Optional stable @id for the route. When set, repeat calls REPLACE the route in place (idempotent). When omitted, the route is APPENDED \u2014 calling twice with identical args creates a duplicate route. @ids are config-global in Caddy: if this id is already used by a non-route object the call refuses rather than clobbering it."
       )
     },
-    { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    // destructiveHint is TRUE because the hint covers the whole tool and a host
+    // gates on it before it can see whether the call carries an `id`: with one,
+    // an existing route under that @id is REPLACED wholesale by a PATCH -- its
+    // matchers, its handlers, a subroute holding a whole site's nested routes,
+    // all of it -- which is not the "only additive updates" MCP reserves
+    // destructiveHint:false for. Without an `id` the call only appends. Same
+    // worst-case rule as caddy_config_set and caddy_config_by_id.
+    { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
     async ({ from, to, server: srv, id }) => {
       const match = parseFrom(from.trim());
       if (match.host?.[0]?.trim() === "" || match.host === void 0 && match.path === void 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/caddy-mcp",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "mcpName": "io.github.YawLabs/caddy-mcp",
   "description": "Caddy MCP server for Claude Code, Cursor, and any MCP client: admin API, config, routes, reverse proxy, TLS, PKI, metrics",
   "license": "MIT",
@@ -38,15 +38,16 @@
     "start": "node dist/index.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/sdk": "^1.32.1",
     "zod": "^4.3.6"
   },
   "overrides": {
     "hono": "^4.13.5",
     "@hono/node-server": "^1.19.15",
     "postcss": "^8.5.23",
-    "ip-address": "^10.3.1",
-    "fast-uri": "^3.1.6",
+    "ip-address": "^10.7.3",
+    "proxy-addr": "^2.0.8",
+    "fast-uri": "^3.1.8",
     "qs": "^6.16.0",
     "esbuild": "^0.28.1"
   },