@yawlabs/npmjs-mcp 0.11.12 → 0.11.13

package/dist/index.js

@@ -31105,8 +31105,12 @@ async function request(baseUrl, path, options) {
         debug(`${method} ${url2} -> ${res.status} ${elapsed}ms`);
         return { ok: true, status: res.status };
       }
-      const data = await res.json();
+      const text = await res.text();
       debug(`${method} ${url2} -> ${res.status} ${elapsed}ms`);
+      if (text.length === 0) {
+        return { ok: true, status: res.status };
+      }
+      const data = JSON.parse(text);
       return { ok: true, status: res.status, data };
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -32153,6 +32157,15 @@ function classifyHookTarget(target) {
   return { type: "package", name: target };
 }
 function validateHookTarget(target) {
+  if (typeof target !== "string" || target.length === 0) {
+    return "Hook target is empty.";
+  }
+  if (target === "~") {
+    return "Hook target '~' is missing the username (use '~your-username').";
+  }
+  if (target === "@") {
+    return "Hook target '@' is missing the scope (use '@scope' or '@scope/pkg').";
+  }
   const { type, name } = classifyHookTarget(target);
   if (type === "owner") return validateUsername(name);
   if (type === "scope") return validateScope(name);
@@ -32675,6 +32688,8 @@ var packageTools = [
       version: external_exports.string().optional().describe("Semver version or dist-tag (default: 'latest')")
     }),
     handler: async (input) => {
+      const nameErr = validatePackageName(input.name);
+      if (nameErr) return { ok: false, status: 400, error: nameErr };
       const ver = input.version ?? "latest";
       let typesPackage;
       if (input.name.startsWith("@")) {
@@ -33254,6 +33269,13 @@ var workflowTools = [
                 });
                 canPublishHeadless = false;
               }
+            } else if (twoFactorAuth === "disabled" && readWriteTokens.length === 0) {
+              checks.push({
+                check: "Token capability",
+                status: "fail",
+                detail: `2FA is disabled but no read-write tokens found out of ${totalTokens} total. Need a token with publish permissions.`
+              });
+              canPublishHeadless = false;
             }
             if (isScoped && scope) {
               checks.push({
@@ -33425,7 +33447,19 @@ var writeTools = [
       for (const v of affected) {
         packument.versions[v].deprecated = input.message;
       }
-      const putRes = await registryPutAuth(`/${encPkg(input.name)}`, packument);
+      if (!packument._rev) {
+        return {
+          ok: false,
+          status: 500,
+          error: `Packument for ${input.name} missing _rev -- cannot deprecate. Try again; this is usually transient.`
+        };
+      }
+      delete packument._revisions;
+      delete packument._attachments;
+      const putRes = await registryPutAuth(
+        `/${encPkg(input.name)}/-rev/${encodeURIComponent(packument._rev)}`,
+        packument
+      );
       if (!putRes.ok) return translateError(putRes, { pkg: input.name, op: "deprecate (write)" });
       return {
         ok: true,
@@ -33475,7 +33509,19 @@ var writeTools = [
       for (const v of affected) {
         packument.versions[v].deprecated = "";
       }
-      const putRes = await registryPutAuth(`/${encPkg(input.name)}`, packument);
+      if (!packument._rev) {
+        return {
+          ok: false,
+          status: 500,
+          error: `Packument for ${input.name} missing _rev -- cannot undeprecate. Try again; this is usually transient.`
+        };
+      }
+      delete packument._revisions;
+      delete packument._attachments;
+      const putRes = await registryPutAuth(
+        `/${encPkg(input.name)}/-rev/${encodeURIComponent(packument._rev)}`,
+        packument
+      );
       if (!putRes.ok) return translateError(putRes, { pkg: input.name, op: "undeprecate (write)" });
       return {
         ok: true,
@@ -34247,7 +34293,7 @@ var writeTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "0.11.12" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.11.13" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version" || subcommand === "-v" || subcommand === "-V") {
   console.log(version2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/npmjs-mcp",
-  "version": "0.11.12",
+  "version": "0.11.13",
   "mcpName": "io.github.YawLabs/npmjs-mcp",
   "description": "npm registry MCP server — package intelligence, security audits, and dependency analysis for AI assistants",
   "license": "MIT",