@yugabytedb/meko-mcp 1.0.6 → 1.1.0

package/lib/clients/claude-desktop.mjs

@@ -8,7 +8,14 @@ import {
   readJsonFile,
   removeKeys,
 } from "../config.mjs";
-import { getRepoRoot, run } from "./common.mjs";
+import {
+  getInstallerVersion,
+  getRepoRoot,
+  markerIsStale,
+  readInstallerMarker,
+  run,
+  writeInstallerMarker,
+} from "./common.mjs";
 
 /**
  * Claude Desktop adapter.
@@ -24,13 +31,13 @@ import { getRepoRoot, run } from "./common.mjs";
  *   "meko": {
  *     "command": "npx",
  *     "args": ["-y", "mcp-remote", "<url>", "--transport", "http-only",
- *              "--header", "API_KEY:${MEKO_API_KEY}"],
+ *              "--header", "Authorization:Bearer ${MEKO_API_KEY}"],
  *     "env": { "MEKO_API_KEY": "<key>" }
  *   }
  *
  * The header uses the `${ENV_VAR}` interpolation form (documented by
- * mcp-remote) with no space around the colon — some clients mis-parse
- * space-containing `--header` args.
+ * mcp-remote) with no space around the colon after the header name —
+ * some clients mis-parse space-containing `--header` args.
  *
  * installSkills() runs skills/scripts/package-desktop-skill.sh to build the
  * .skill bundle and prints import instructions. Desktop has no programmatic
@@ -122,10 +129,17 @@ export function createClaudeDesktopAdapter(options = {}) {
       const repoRoot = repoRootResolver();
       const script = join(repoRoot, "skills", "scripts", "package-desktop-skill.sh");
       const output = join(repoRoot, "skills", "meko-mcp-tools-desktop.skill");
+      // The .skill output is a ZIP file, so we can't drop a marker inside it.
+      // Stamp the marker in the parent dir instead — it signals which
+      // installer version produced the bundle sitting alongside it, so a
+      // re-run can tell whether the existing .skill is stale.
+      const markerDir = dirname(output);
+      const currentVersion = getInstallerVersion();
 
       if (dryRun) {
         log.dim(`  Would run: bash ${script}`);
         log.dim(`  Would produce: ${output}`);
+        log.dim(`  Would write .meko-installer marker (version=${currentVersion}) in ${markerDir}`);
         return { marketplace: "skipped", skills: "dry-run", output };
       }
 
@@ -137,6 +151,17 @@ export function createClaudeDesktopAdapter(options = {}) {
         return { marketplace: "skipped", skills: "script-missing" };
       }
 
+      // If a previous build's marker is stale, warn visibly — the user has to
+      // re-drag the .skill into Claude Desktop's Extensions panel; we can't do
+      // that step for them. Keep rebuilding either way.
+      const existingMarker = readInstallerMarker(markerDir);
+      if (existsSync(output) && existingMarker && markerIsStale(markerDir, currentVersion)) {
+        log.warn(
+          `Claude Desktop .skill bundle was produced by installer ${existingMarker.version}. ` +
+            `Rebuilding — you will need to re-drag it into Claude Desktop > Settings > Extensions.`,
+        );
+      }
+
       try {
         packageRunner(script);
       } catch (err) {
@@ -149,6 +174,15 @@ export function createClaudeDesktopAdapter(options = {}) {
         return { marketplace: "skipped", skills: "error" };
       }
 
+      // Stamp the marker after a successful build so the next run knows what
+      // version the sibling .skill was produced by.
+      try {
+        writeInstallerMarker(markerDir);
+      } catch (err) {
+        // Marker is best-effort — a failure here doesn't invalidate the build.
+        log.warn(`Could not write .skill installer marker: ${err.message}`);
+      }
+
       log.info(`Built Meko skill bundle: ${output}`);
       log.info(
         "Install it in Claude Desktop: Settings > Extensions > Import skill, " +
@@ -228,10 +262,11 @@ export function buildMcpRemoteEntry({ url, apiKey }) {
   const args = ["-y", "mcp-remote", url, "--transport", "http-only"];
   const entry = { command: "npx", args };
   if (apiKey) {
-    // `API_KEY:${MEKO_API_KEY}` with no space around the colon — mcp-remote
-    // docs call out a spacing bug in some clients' arg parsing. The header
-    // name matches what the Meko server expects (see capture.js mcpPost).
-    args.push("--header", "API_KEY:${MEKO_API_KEY}");
+    // `Authorization:Bearer ${MEKO_API_KEY}` with no space around the colon
+    // after the header name — mcp-remote docs call out a spacing bug in some
+    // clients' arg parsing. The space between `Bearer` and the token value
+    // is part of the header value and is required by RFC 6750.
+    args.push("--header", "Authorization:Bearer ${MEKO_API_KEY}");
     entry.env = { MEKO_API_KEY: apiKey };
   }
   return entry;