@yawlabs/mcph 0.47.7 → 0.47.8

package/dist/index.js

@@ -1435,7 +1435,7 @@ function pathFor(client, scope, os, base) {
   throw new Error(`Unhandled client: ${client}`);
 }
 function buildLaunchEntry(opts) {
-  const pkg = opts.pkg ?? "@yawlabs/mcph";
+  const pkg = opts.pkg ?? "@yawlabs/mcph@latest";
   const entry = opts.os === "windows" ? { command: "cmd", args: ["/c", "npx", "-y", pkg] } : { command: "npx", args: ["-y", pkg] };
   if (opts.token) entry.env = { MCPH_TOKEN: opts.token };
   return entry;
@@ -1650,7 +1650,7 @@ function selectFlakyNamespaces(entries, limit) {
 }
 
 // src/doctor-cmd.ts
-var VERSION = true ? "0.47.7" : "dev";
+var VERSION = true ? "0.47.8" : "dev";
 async function runDoctor(opts = {}) {
   if (opts.json) return runDoctorJson(opts);
   const lines = [];
@@ -2905,6 +2905,253 @@ import {
 } from "@modelcontextprotocol/sdk/types.js";
 import { request as request9 } from "undici";
 
+// src/auto-upgrade.ts
+import { spawn as spawn3 } from "child_process";
+
+// src/upgrade-cmd.ts
+import { spawn as spawn2 } from "child_process";
+var UPGRADE_USAGE = `Usage: mcph upgrade [--run] [--json]
+
+  Show (or execute) the command to upgrade @yawlabs/mcph to the latest version.
+
+  --run     If this install is global (npm install -g), spawn the upgrade
+            command. No-op for npx installs \u2014 they always fetch the latest.
+  --json    Emit a machine-readable snapshot ({ current, latest, stale,
+            method, command }) instead of prose.`;
+function parseUpgradeArgs(argv) {
+  const opts = {};
+  for (const a of argv) {
+    if (a === "--run") opts.run = true;
+    else if (a === "--json") opts.json = true;
+    else if (a === "--help" || a === "-h") return { ok: false, error: UPGRADE_USAGE };
+    else return { ok: false, error: `mcph upgrade: unknown argument "${a}"
+
+${UPGRADE_USAGE}` };
+  }
+  return { ok: true, options: opts };
+}
+function detectInstallMethod(argvPath) {
+  if (!argvPath) return "unknown";
+  const normalized = argvPath.replace(/\\/g, "/");
+  if (/\/_npx\//.test(normalized)) return "npx";
+  if (/\/npm\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "global-npm";
+  if (/\/lib\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "global-npm";
+  if (/\/AppData\/Roaming\/npm\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "global-npm";
+  if (/\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "local-node-modules";
+  if (/\/mcph\/(dist|src)\//.test(normalized)) return "dev-checkout";
+  return "unknown";
+}
+function buildUpgradePlan(input) {
+  const { current, latest, method } = input;
+  const stale = latest !== null && current !== "dev" && compareSemverLocal(current, latest) < 0;
+  let command;
+  switch (method) {
+    case "global-npm":
+      command = "npm install -g @yawlabs/mcph@latest";
+      break;
+    case "npx":
+      command = null;
+      break;
+    case "local-node-modules":
+      command = "npm install @yawlabs/mcph@latest";
+      break;
+    case "dev-checkout":
+      command = "git pull && npm run build";
+      break;
+    default:
+      command = "npm install -g @yawlabs/mcph@latest";
+      break;
+  }
+  return { current, latest, stale, method, command };
+}
+function compareSemverLocal(a, b) {
+  const parse = (s) => {
+    const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(s);
+    if (!m) return null;
+    return [Number(m[1]), Number(m[2]), Number(m[3])];
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  if (!pa || !pb) return 0;
+  for (let i = 0; i < 3; i++) {
+    if (pa[i] < pb[i]) return -1;
+    if (pa[i] > pb[i]) return 1;
+  }
+  return 0;
+}
+async function defaultFetchLatest() {
+  const ac = new AbortController();
+  const timer = setTimeout(() => ac.abort(), 3e3);
+  try {
+    const res = await fetch("https://registry.npmjs.org/@yawlabs/mcph/latest", {
+      signal: ac.signal,
+      headers: { accept: "application/json" }
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body.version === "string" ? body.version : null;
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function defaultSpawn(cmd, args) {
+  return new Promise((resolve4) => {
+    const child = spawn2(cmd, args, { stdio: "inherit", shell: process.platform === "win32" });
+    child.on("close", (code) => resolve4(typeof code === "number" ? code : 1));
+    child.on("error", () => resolve4(1));
+  });
+}
+async function runUpgrade(opts = {}) {
+  const write = opts.out ?? ((s) => process.stdout.write(s));
+  const writeErr = opts.err ?? ((s) => process.stderr.write(s));
+  const lines = [];
+  const print = (s = "") => {
+    lines.push(s);
+    write(`${s}
+`);
+  };
+  const printErr = (s) => {
+    lines.push(s);
+    writeErr(`${s}
+`);
+  };
+  const fetcher = opts.fetchLatest ?? defaultFetchLatest;
+  const current = opts.currentVersion ?? readCurrentVersion();
+  const argvPath = opts.argvPath ?? process.argv[1];
+  const method = detectInstallMethod(argvPath);
+  let latest;
+  try {
+    latest = await fetcher();
+  } catch {
+    latest = null;
+  }
+  const plan = buildUpgradePlan({ current, latest, method });
+  if (opts.json) {
+    print(JSON.stringify(plan, null, 2));
+    return { exitCode: plan.stale && !opts.run ? 1 : 0, lines };
+  }
+  if (latest === null) {
+    print("mcph upgrade: couldn't reach the npm registry (offline? firewall?).");
+    if (plan.command) {
+      print(`When you're back online, run:
+  ${plan.command}`);
+    } else {
+      print("Your install uses `npx -y` \u2014 just restart the MCP client when you're back online.");
+    }
+    return { exitCode: 0, lines };
+  }
+  print(`Current: ${current}`);
+  print(`Latest:  ${latest}`);
+  print(`Install: ${method}`);
+  if (!plan.stale) {
+    print("");
+    print("\u2713 You're on the latest version \u2014 nothing to do.");
+    return { exitCode: 0, lines };
+  }
+  print("");
+  if (method === "npx") {
+    print("Your install uses `npx -y` \u2014 restart the MCP client and it will fetch the new version.");
+    return { exitCode: 0, lines };
+  }
+  if (!plan.command) {
+    print("No upgrade command available for this install method.");
+    return { exitCode: 0, lines };
+  }
+  const autoRunnable = method === "global-npm";
+  if (!opts.run) {
+    if (autoRunnable) {
+      print(`Run:
+  ${plan.command}
+
+Or re-run with --run to upgrade in place.`);
+    } else {
+      print(`Suggested command (run it yourself; --run only works for global-npm installs):
+  ${plan.command}`);
+    }
+    return { exitCode: 1, lines };
+  }
+  if (!autoRunnable) {
+    printErr(
+      `mcph upgrade --run: install method "${method}" can't be upgraded automatically. Run manually:
+  ${plan.command}`
+    );
+    return { exitCode: 2, lines };
+  }
+  const runner = opts.spawnImpl ?? defaultSpawn;
+  print(`Running: ${plan.command}`);
+  const code = await runner("npm", ["install", "-g", "@yawlabs/mcph@latest"]);
+  if (code === 0) {
+    print("");
+    print(`\u2713 Upgraded @yawlabs/mcph to ${latest}.`);
+    return { exitCode: 0, lines };
+  }
+  printErr(`mcph upgrade: npm exited ${code}. Try running the command manually.`);
+  return { exitCode: 3, lines };
+}
+function readCurrentVersion() {
+  return true ? "0.47.8" : "dev";
+}
+
+// src/auto-upgrade.ts
+async function fetchLatestVersion2() {
+  const ac = new AbortController();
+  const timer = setTimeout(() => ac.abort(), 3e3);
+  try {
+    const res = await fetch("https://registry.npmjs.org/@yawlabs/mcph/latest", {
+      signal: ac.signal,
+      headers: { accept: "application/json" }
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body.version === "string" ? body.version : null;
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function defaultSpawn2(cmd, args) {
+  const child = spawn3(cmd, args, {
+    stdio: "ignore",
+    // Stay a child of this process (not detached) so it dies with mcph
+    // if mcph exits mid-install -- a half-finished `npm i -g` is fine
+    // (npm is atomic per package) and a re-run next startup completes it.
+    detached: false,
+    shell: process.platform === "win32"
+  });
+  child.on("close", (code) => {
+    if (code === 0) {
+      log("info", "mcph self-upgrade complete; the next client restart will run the new version");
+    } else {
+      log("warn", "mcph self-upgrade: npm exited non-zero", { code });
+    }
+  });
+  child.on("error", (err) => {
+    log("warn", "mcph self-upgrade: npm spawn failed", { error: err?.message });
+  });
+}
+async function maybeAutoUpgrade(deps = {}) {
+  const current = deps.currentVersion ?? (true ? "0.47.8" : "dev");
+  if (current === "dev") return;
+  const method = detectInstallMethod(deps.argvPath ?? process.argv[1]);
+  const latest = await (deps.fetchLatestImpl ?? fetchLatestVersion2)();
+  if (latest === null) return;
+  const plan = buildUpgradePlan({ current, latest, method });
+  if (!plan.stale) return;
+  if (method === "global-npm") {
+    log("info", "mcph is out of date; upgrading the global install in the background", { current, latest });
+    (deps.spawnImpl ?? defaultSpawn2)("npm", ["install", "-g", "@yawlabs/mcph@latest"]);
+    return;
+  }
+  log("info", "mcph is out of date; restart your MCP client to pick up the latest version", {
+    current,
+    latest,
+    method
+  });
+}
+
 // src/compliance.ts
 var GRADE_ORDER = {
   A: 4,
@@ -4500,7 +4747,7 @@ async function rerank(intent, candidateIds, limit) {
 }
 
 // src/runtime-detect.ts
-import { spawn as spawn2 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 import { request as request7 } from "undici";
 var PROBE_TIMEOUT_MS = 3e3;
 var RUNTIME_REPORT_PATH = "/api/connect/runtimes";
@@ -4558,7 +4805,7 @@ async function probe(name, p) {
     let stderr = "";
     let child;
     try {
-      child = spawn2(p.bin, p.args, {
+      child = spawn4(p.bin, p.args, {
         stdio: ["ignore", "pipe", "pipe"],
         // Windows needs a shell for PATH lookup of .cmd/.bat shims —
         // node/npx/uvx arrive as `npx.cmd` in PATH, and native spawn
@@ -4783,7 +5030,7 @@ import {
 } from "@modelcontextprotocol/sdk/types.js";
 
 // src/uv-bootstrap.ts
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { createHash } from "crypto";
 import { createWriteStream } from "fs";
 import fs from "fs/promises";
@@ -4836,7 +5083,7 @@ async function onPath(cmd) {
     };
     let child;
     try {
-      child = spawn3(cmd, ["--version"], {
+      child = spawn5(cmd, ["--version"], {
         stdio: "ignore",
         shell: false,
         windowsHide: process.platform === "win32"
@@ -4897,7 +5144,7 @@ async function extractArchive(archivePath, destDir) {
 }
 function runCommand(cmd, args) {
   return new Promise((resolve4, reject) => {
-    const child = spawn3(cmd, args, {
+    const child = spawn5(cmd, args, {
       stdio: ["ignore", "pipe", "pipe"],
       shell: false,
       windowsHide: process.platform === "win32"
@@ -5015,7 +5262,7 @@ function categorizeSpawnError(err) {
 }
 async function connectToUpstream(config, onDisconnect, onListChanged) {
   const client = new Client(
-    { name: "mcph", version: true ? "0.47.7" : "dev" },
+    { name: "mcph", version: true ? "0.47.8" : "dev" },
     { capabilities: {} }
   );
   let transport;
@@ -5323,7 +5570,7 @@ var ConnectServer = class _ConnectServer {
     this.apiUrl = apiUrl6;
     this.token = token6;
     this.server = new Server(
-      { name: "mcph", version: true ? "0.47.7" : "dev" },
+      { name: "mcph", version: true ? "0.47.8" : "dev" },
       {
         capabilities: {
           tools: { listChanged: true },
@@ -5609,6 +5856,7 @@ var ConnectServer = class _ConnectServer {
     await this.server.connect(transport);
     this.startPolling();
     this.prewarmDormantServers().catch((err) => log("warn", "Pre-warm failed", { error: err?.message }));
+    maybeAutoUpgrade().catch((err) => log("warn", "Auto-upgrade check failed", { error: err?.message }));
     if (isAutoLoadEnabled() && this.persistenceReady) {
       this.autoLoadRecurringPack().catch((err) => log("warn", "Auto-load failed", { error: err?.message }));
     }
@@ -7522,192 +7770,6 @@ function truncateVersion(v) {
   return v.length > 8 ? v.slice(0, 8) : v;
 }
 
-// src/upgrade-cmd.ts
-import { spawn as spawn4 } from "child_process";
-var UPGRADE_USAGE = `Usage: mcph upgrade [--run] [--json]
-
-  Show (or execute) the command to upgrade @yawlabs/mcph to the latest version.
-
-  --run     If this install is global (npm install -g), spawn the upgrade
-            command. No-op for npx installs \u2014 they always fetch the latest.
-  --json    Emit a machine-readable snapshot ({ current, latest, stale,
-            method, command }) instead of prose.`;
-function parseUpgradeArgs(argv) {
-  const opts = {};
-  for (const a of argv) {
-    if (a === "--run") opts.run = true;
-    else if (a === "--json") opts.json = true;
-    else if (a === "--help" || a === "-h") return { ok: false, error: UPGRADE_USAGE };
-    else return { ok: false, error: `mcph upgrade: unknown argument "${a}"
-
-${UPGRADE_USAGE}` };
-  }
-  return { ok: true, options: opts };
-}
-function detectInstallMethod(argvPath) {
-  if (!argvPath) return "unknown";
-  const normalized = argvPath.replace(/\\/g, "/");
-  if (/\/_npx\//.test(normalized)) return "npx";
-  if (/\/npm\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "global-npm";
-  if (/\/lib\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "global-npm";
-  if (/\/AppData\/Roaming\/npm\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "global-npm";
-  if (/\/node_modules\/@yawlabs\/mcph\//.test(normalized)) return "local-node-modules";
-  if (/\/mcph\/(dist|src)\//.test(normalized)) return "dev-checkout";
-  return "unknown";
-}
-function buildUpgradePlan(input) {
-  const { current, latest, method } = input;
-  const stale = latest !== null && current !== "dev" && compareSemverLocal(current, latest) < 0;
-  let command;
-  switch (method) {
-    case "global-npm":
-      command = "npm install -g @yawlabs/mcph@latest";
-      break;
-    case "npx":
-      command = null;
-      break;
-    case "local-node-modules":
-      command = "npm install @yawlabs/mcph@latest";
-      break;
-    case "dev-checkout":
-      command = "git pull && npm run build";
-      break;
-    default:
-      command = "npm install -g @yawlabs/mcph@latest";
-      break;
-  }
-  return { current, latest, stale, method, command };
-}
-function compareSemverLocal(a, b) {
-  const parse = (s) => {
-    const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(s);
-    if (!m) return null;
-    return [Number(m[1]), Number(m[2]), Number(m[3])];
-  };
-  const pa = parse(a);
-  const pb = parse(b);
-  if (!pa || !pb) return 0;
-  for (let i = 0; i < 3; i++) {
-    if (pa[i] < pb[i]) return -1;
-    if (pa[i] > pb[i]) return 1;
-  }
-  return 0;
-}
-async function defaultFetchLatest() {
-  const ac = new AbortController();
-  const timer = setTimeout(() => ac.abort(), 3e3);
-  try {
-    const res = await fetch("https://registry.npmjs.org/@yawlabs/mcph/latest", {
-      signal: ac.signal,
-      headers: { accept: "application/json" }
-    });
-    if (!res.ok) return null;
-    const body = await res.json();
-    return typeof body.version === "string" ? body.version : null;
-  } catch {
-    return null;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function defaultSpawn(cmd, args) {
-  return new Promise((resolve4) => {
-    const child = spawn4(cmd, args, { stdio: "inherit", shell: process.platform === "win32" });
-    child.on("close", (code) => resolve4(typeof code === "number" ? code : 1));
-    child.on("error", () => resolve4(1));
-  });
-}
-async function runUpgrade(opts = {}) {
-  const write = opts.out ?? ((s) => process.stdout.write(s));
-  const writeErr = opts.err ?? ((s) => process.stderr.write(s));
-  const lines = [];
-  const print = (s = "") => {
-    lines.push(s);
-    write(`${s}
-`);
-  };
-  const printErr = (s) => {
-    lines.push(s);
-    writeErr(`${s}
-`);
-  };
-  const fetcher = opts.fetchLatest ?? defaultFetchLatest;
-  const current = opts.currentVersion ?? readCurrentVersion();
-  const argvPath = opts.argvPath ?? process.argv[1];
-  const method = detectInstallMethod(argvPath);
-  let latest;
-  try {
-    latest = await fetcher();
-  } catch {
-    latest = null;
-  }
-  const plan = buildUpgradePlan({ current, latest, method });
-  if (opts.json) {
-    print(JSON.stringify(plan, null, 2));
-    return { exitCode: plan.stale && !opts.run ? 1 : 0, lines };
-  }
-  if (latest === null) {
-    print("mcph upgrade: couldn't reach the npm registry (offline? firewall?).");
-    if (plan.command) {
-      print(`When you're back online, run:
-  ${plan.command}`);
-    } else {
-      print("Your install uses `npx -y` \u2014 just restart the MCP client when you're back online.");
-    }
-    return { exitCode: 0, lines };
-  }
-  print(`Current: ${current}`);
-  print(`Latest:  ${latest}`);
-  print(`Install: ${method}`);
-  if (!plan.stale) {
-    print("");
-    print("\u2713 You're on the latest version \u2014 nothing to do.");
-    return { exitCode: 0, lines };
-  }
-  print("");
-  if (method === "npx") {
-    print("Your install uses `npx -y` \u2014 restart the MCP client and it will fetch the new version.");
-    return { exitCode: 0, lines };
-  }
-  if (!plan.command) {
-    print("No upgrade command available for this install method.");
-    return { exitCode: 0, lines };
-  }
-  const autoRunnable = method === "global-npm";
-  if (!opts.run) {
-    if (autoRunnable) {
-      print(`Run:
-  ${plan.command}
-
-Or re-run with --run to upgrade in place.`);
-    } else {
-      print(`Suggested command (run it yourself; --run only works for global-npm installs):
-  ${plan.command}`);
-    }
-    return { exitCode: 1, lines };
-  }
-  if (!autoRunnable) {
-    printErr(
-      `mcph upgrade --run: install method "${method}" can't be upgraded automatically. Run manually:
-  ${plan.command}`
-    );
-    return { exitCode: 2, lines };
-  }
-  const runner = opts.spawnImpl ?? defaultSpawn;
-  print(`Running: ${plan.command}`);
-  const code = await runner("npm", ["install", "-g", "@yawlabs/mcph@latest"]);
-  if (code === 0) {
-    print("");
-    print(`\u2713 Upgraded @yawlabs/mcph to ${latest}.`);
-    return { exitCode: 0, lines };
-  }
-  printErr(`mcph upgrade: npm exited ${code}. Try running the command manually.`);
-  return { exitCode: 3, lines };
-}
-function readCurrentVersion() {
-  return true ? "0.47.7" : "dev";
-}
-
 // src/index.ts
 var KNOWN_SUBCOMMANDS = [
   "compliance",
@@ -7873,7 +7935,7 @@ if (subcommand === "compliance") {
 `);
   process.exit(0);
 } else if (subcommand === "--version" || subcommand === "-V") {
-  process.stdout.write(`mcph ${true ? "0.47.7" : "dev"}
+  process.stdout.write(`mcph ${true ? "0.47.8" : "dev"}
 `);
   process.exit(0);
 } else if (subcommand && !subcommand.startsWith("-")) {
@@ -7890,7 +7952,7 @@ async function runServer() {
   const config = await loadMcphConfig();
   if (!config.token) {
     process.stderr.write(
-      '\n  mcph: no token resolved.\n\n  Quick start (recommended):\n    mcph install <claude-code|claude-desktop|cursor|vscode> --token mcp_pat_\u2026\n    Creates ~/.mcph/config.json so every MCP client picks up the token automatically.\n\n  Or set MCPH_TOKEN in your MCP client config:\n\n     {\n       "mcpServers": {\n         "mcp.hosting": {\n           "command": "npx",\n           "args": ["-y", "@yawlabs/mcph"],\n           "env": {\n             "MCPH_TOKEN": "mcp_pat_your_token_here"\n           }\n         }\n       }\n     }\n\n  Get a token at https://mcp.hosting \u2192 Settings \u2192 API Tokens, or run\n  `mcph doctor` to see exactly where mcph looked.\n\n'
+      '\n  mcph: no token resolved.\n\n  Quick start (recommended):\n    mcph install <claude-code|claude-desktop|cursor|vscode> --token mcp_pat_\u2026\n    Creates ~/.mcph/config.json so every MCP client picks up the token automatically.\n\n  Or set MCPH_TOKEN in your MCP client config:\n\n     {\n       "mcpServers": {\n         "mcp.hosting": {\n           "command": "npx",\n           "args": ["-y", "@yawlabs/mcph@latest"],\n           "env": {\n             "MCPH_TOKEN": "mcp_pat_your_token_here"\n           }\n         }\n       }\n     }\n\n  Get a token at https://mcp.hosting \u2192 Settings \u2192 API Tokens, or run\n  `mcph doctor` to see exactly where mcph looked.\n\n'
     );
     process.exit(1);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/mcph",
-  "version": "0.47.7",
+  "version": "0.47.8",
   "description": "mcp.hosting — one install, all your MCP servers, managed from the cloud",
   "license": "UNLICENSED",
   "author": "Yaw Labs <support@mcp.hosting> (https://mcp.hosting)",