@yugabytedb/meko-mcp 2.0.0 → 2.1.0

package/lib/clients/codex.mjs

@@ -77,14 +77,19 @@ const RC_FENCE_END = "# <<< meko mcp <<<";
 const SKILLS = [{ name: "meko-mcp-tools" }];
 // Codex hook timeouts are in SECONDS (Duration::from_secs in
 // codex-rs/hooks/src/engine/command_runner.rs), not milliseconds like Claude
-// Code / Cursor. Default is 600s if omitted; we cap SessionStart/SessionEnd
-// at 15s/30s to match the Claude Code values logically.
+// Code / Cursor. Codex hard-caps SessionEnd at three seconds, so its dedicated
+// handler only spools input and launches the actual capture in the background.
 const MEKO_HOOKS = [
   { event: "SessionStart", script: "session-start.sh", timeout: 15 },
   { event: "PreCompact", script: "pre-compact.sh" },
-  { event: "SessionEnd", script: "session-end.sh", timeout: 30 },
+  { event: "SessionEnd", script: "codex-session-end.sh", timeout: 3 },
+];
+// Include the former synchronous Codex SessionEnd handler so reinstall prunes
+// it instead of leaving both old and new handlers active.
+const MEKO_HOOK_SCRIPTS = [
+  ...MEKO_HOOKS.map((hook) => hook.script),
+  "session-end.sh",
 ];
-const MEKO_HOOK_SCRIPTS = MEKO_HOOKS.map((hook) => hook.script);
 
 /**
  * @param {{
@@ -196,10 +201,11 @@ export function createCodexAdapter(options = {}) {
         surfaces.app = app?.found ? app : null;
       }
 
+      let cliFound = false;
       if (surfaces.cli) {
         try {
           runCommand(`codex mcp get ${shellQuote(name)}`);
-          return { found: true, status: "Configured" };
+          cliFound = true;
         } catch {
           // fall through to TOML grep — `codex mcp get` exits non-zero when
           // the entry isn't present, but might also fail for unrelated
@@ -209,8 +215,17 @@ export function createCodexAdapter(options = {}) {
       }
       const path = settingsPathFor(scope, null);
       const raw = safeReadFile(path);
-      if (raw === null) return { found: false, status: "" };
-      return parseCodexConfigForServer(raw, name).found
+      if (raw !== null) {
+        const parsed = parseCodexConfigForServer(raw, name);
+        if (parsed.found) {
+          return {
+            found: true,
+            status: "Configured",
+            ...(parsed.url ? { url: parsed.url } : {}),
+          };
+        }
+      }
+      return cliFound
         ? { found: true, status: "Configured" }
         : { found: false, status: "" };
     },
@@ -640,7 +655,7 @@ function upsertCodexMekoHooks(hooksPath, hooksRoot, { envFilePath } = {}) {
 function buildCodexHookCommand(scriptPath, { envFilePath } = {}) {
   const parts = [];
   if (envFilePath) parts.push(`. ${shellQuote(envFilePath)}`);
-  parts.push(`bash ${shellQuote(scriptPath)}`);
+  parts.push(`MEKO_HOOK_CLIENT=codex bash ${shellQuote(scriptPath)}`);
   return parts.join(" && ");
 }
 

package/lib/clients/common.mjs

@@ -16,6 +16,8 @@ import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 export const MEKO_MCP_USER_AGENT = "meko-mcp-installer/1.0";
+export const MEKO_PRODUCTION_MCP_URL = "https://mcp.mekodata.ai/mcp";
+export const MEKO_PRODUCTION_CONSOLE_URL = "https://cloud.mekodata.ai";
 
 /**
  * @returns {string} Absolute repository root path.

package/lib/clients/cursor.mjs

@@ -75,8 +75,13 @@ export function createCursorAdapter(customPaths = {}) {
     detectExisting(name, { scope, projectRoot }) {
       const path = paths.getMcpPath(scope, projectRoot);
       const cfg = readJsonFile(path);
-      const found = Boolean(cfg?.mcpServers?.[name]);
-      return { found, status: found ? "Configured" : "" };
+      const entry = cfg?.mcpServers?.[name];
+      const found = Boolean(entry);
+      return {
+        found,
+        status: found ? "Configured" : "",
+        ...(typeof entry?.url === "string" ? { url: entry.url } : {}),
+      };
     },
     removeRegistration(name, { scope, projectRoot }) {
       const mcpPath = paths.getMcpPath(scope, projectRoot);

package/lib/detect.mjs

@@ -110,7 +110,7 @@ export function getClaudeCodeConfigPath() {
  *   `scope`      — "user" (default) or "project". Project scope looks under `projects[projectRoot].mcpServers`.
  *   `projectRoot` — absolute path used as the key into `projects[...]` when `scope === "project"`.
  *                   Ignored for user scope. Must be supplied by the caller for project scope.
- * @returns {{ found: boolean, status: string }}
+ * @returns {{ found: boolean, status: string, url?: string }}
  *   `found`  - true if a matching MCP entry exists at the scope-appropriate location.
  *   `status` - "Configured" when found, "" otherwise. (Kept as a string for
  *              API compatibility with the prior implementation; callers use
@@ -129,5 +129,10 @@ export function detectExistingMeko(serverName = "meko", options = {}) {
   if (!entry) {
     return { found: false, status: "" };
   }
-  return { found: true, status: "Configured" };
+  const url = typeof entry.url === "string" ? entry.url : undefined;
+  return {
+    found: true,
+    status: "Configured",
+    ...(url ? { url } : {}),
+  };
 }

package/lib/prompt.mjs

@@ -50,7 +50,7 @@ function question(query) {
  *
  * @example
  *   const choice = await askChoice('Connection type:', [
- *     { label: 'Cloud Meko', description: 'Hosted at mekodev.com' },
+ *     { label: 'Cloud Meko', description: 'Hosted at mekodata.ai' },
  *     { label: 'Local Meko', description: 'docker-compose stack' },
  *   ]);
  */

package/lib/url-selection.mjs

@@ -0,0 +1,55 @@
+import { MEKO_PRODUCTION_MCP_URL } from "./clients/common.mjs";
+
+function validHttpUrl(value) {
+  if (typeof value !== "string" || !value.trim()) return null;
+  const candidate = value.trim();
+  try {
+    const parsed = new URL(candidate);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return null;
+    parsed.pathname = parsed.pathname.replace(/\/+$/, "") || "/";
+    return { value: candidate, comparisonKey: parsed.toString() };
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Select the URL offered by interactive/non-interactive setup.
+ * Explicit CLI URLs are resolved before this helper is called.
+ */
+export function resolveSuggestedMcpUrl({
+  adapters,
+  clients,
+  name = "meko",
+  scope = "user",
+  projectRoot = process.cwd(),
+}) {
+  const existingUrlsByKey = new Map();
+  for (const client of clients) {
+    const adapter = adapters[client];
+    if (!adapter?.detectExisting) continue;
+    try {
+      const existing = adapter.detectExisting(name, { scope, projectRoot });
+      const url = existing?.found ? validHttpUrl(existing.url) : null;
+      if (url && !existingUrlsByKey.has(url.comparisonKey)) {
+        existingUrlsByKey.set(url.comparisonKey, url.value);
+      }
+    } catch {
+      // Existing-config discovery is advisory. Installation performs its own
+      // prerequisite and config checks later with actionable errors.
+    }
+  }
+
+  const uniqueUrls = [...existingUrlsByKey.values()];
+  if (uniqueUrls.length === 1) {
+    return { url: uniqueUrls[0], source: "existing", existingUrls: uniqueUrls };
+  }
+  if (uniqueUrls.length > 1) {
+    return { url: null, source: "conflict", existingUrls: uniqueUrls };
+  }
+  return {
+    url: MEKO_PRODUCTION_MCP_URL,
+    source: "production-default",
+    existingUrls: [],
+  };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yugabytedb/meko-mcp",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Single-line installer for Meko MCP Server across Claude and Cursor clients",
   "type": "module",
   "bin": {

package/assets/skills/meko-mcp-tools/references/tools-scope-permissions.md

@@ -1,71 +0,0 @@
-# Scope Permission Hierarchy and Per-Tool Requirements
-
-**WRONG:** `memory_add(scope="read", ...)` → PermissionError: requires 'write' or higher.
-**WRONG:** `memory_delete_all(scope="write", ...)` → PermissionError: requires 'admin'.
-
-## Scope Hierarchy
-
-```
-admin  (level 2)  -- can do everything
-  ↓
-write  (level 1)  -- can read + write, not admin-only
-  ↓
-read   (level 0)  -- can only read
-```
-
-Higher scopes include lower scopes. An unrecognized scope string always fails.
-
-## Per-Tool Requirements
-
-### read scope (9 tools)
-
-| Tool | Group |
-|------|-------|
-| `knowledgebase_search` | RAG |
-| `memory_search` | Memory |
-| `memory_get_by_id` | Memory |
-| `memory_get_all` | Memory |
-| `flush_pending_memory_candidates` | Memory |
-| `conversation_get` | Conversation |
-| `conversation_list` | Conversation |
-| `datapack_list` | Datapack |
-| `datapack_describe` | Datapack |
-
-### write scope (9 tools)
-
-| Tool | Group |
-|------|-------|
-| `memory_add` | Memory |
-| `memory_update` | Memory |
-| `memory_delete_by_id` | Memory |
-| `conversation_create` | Conversation |
-| `conversation_add_message` | Conversation |
-| `conversation_update` | Conversation |
-| `datapack_create` | Datapack |
-| `datapack_update` | Datapack |
-| `track_token_usage` | Observability |
-
-### admin scope (3 tools — destructive, irreversible)
-
-| Tool | Group |
-|------|-------|
-| `memory_delete_all` | Memory |
-| `conversation_delete` | Conversation |
-| `datapack_delete` | Datapack |
-
-Agent and knowledge-base lifecycle tools are not MCP-exposed — see "Platform capabilities NOT exposed via MCP" in `tools-overview.md`.
-
-## Best Practices
-
-1. **Use the minimum scope needed.** `scope="read"` for reads documents intent and prevents accidental writes.
-2. **The scope is a parameter, not an auth token.** When OAuth is enabled, the actual permission check happens against the OAuth token's claims. Both `scope` parameter and OAuth permissions must be satisfied.
-
-## Common Mistakes
-
-**WRONG:** `scope="all"` — there is no "all" scope. Valid values are exactly: `"read"`, `"write"`, `"admin"`. Nothing else.
-
-Other invalid values that will fail: `"readwrite"`, `"rw"`, `"full"`, `"any"`.
-
-The error `Insufficient scope: 'all'. This tool requires 'read' or higher.` means the scope string was not recognized as a valid value. Always use one of the three valid strings.
-
-**Default choice:** Start with `scope="read"` unless you specifically need to write or delete.

package/assets/skills/meko-mcp-tools-desktop/references/tools-scope-permissions.md

@@ -1,71 +0,0 @@
-# Scope Permission Hierarchy and Per-Tool Requirements
-
-**WRONG:** `memory_add(scope="read", ...)` → PermissionError: requires 'write' or higher.
-**WRONG:** `memory_delete_all(scope="write", ...)` → PermissionError: requires 'admin'.
-
-## Scope Hierarchy
-
-```
-admin  (level 2)  -- can do everything
-  ↓
-write  (level 1)  -- can read + write, not admin-only
-  ↓
-read   (level 0)  -- can only read
-```
-
-Higher scopes include lower scopes. An unrecognized scope string always fails.
-
-## Per-Tool Requirements
-
-### read scope (9 tools)
-
-| Tool | Group |
-|------|-------|
-| `knowledgebase_search` | RAG |
-| `memory_search` | Memory |
-| `memory_get_by_id` | Memory |
-| `memory_get_all` | Memory |
-| `flush_pending_memory_candidates` | Memory |
-| `conversation_get` | Conversation |
-| `conversation_list` | Conversation |
-| `datapack_list` | Datapack |
-| `datapack_describe` | Datapack |
-
-### write scope (9 tools)
-
-| Tool | Group |
-|------|-------|
-| `memory_add` | Memory |
-| `memory_update` | Memory |
-| `memory_delete_by_id` | Memory |
-| `conversation_create` | Conversation |
-| `conversation_add_message` | Conversation |
-| `conversation_update` | Conversation |
-| `datapack_create` | Datapack |
-| `datapack_update` | Datapack |
-| `track_token_usage` | Observability |
-
-### admin scope (3 tools — destructive, irreversible)
-
-| Tool | Group |
-|------|-------|
-| `memory_delete_all` | Memory |
-| `conversation_delete` | Conversation |
-| `datapack_delete` | Datapack |
-
-Agent and knowledge-base lifecycle tools are not MCP-exposed — see "Platform capabilities NOT exposed via MCP" in `tools-overview.md`.
-
-## Best Practices
-
-1. **Use the minimum scope needed.** `scope="read"` for reads documents intent and prevents accidental writes.
-2. **The scope is a parameter, not an auth token.** When OAuth is enabled, the actual permission check happens against the OAuth token's claims. Both `scope` parameter and OAuth permissions must be satisfied.
-
-## Common Mistakes
-
-**WRONG:** `scope="all"` — there is no "all" scope. Valid values are exactly: `"read"`, `"write"`, `"admin"`. Nothing else.
-
-Other invalid values that will fail: `"readwrite"`, `"rw"`, `"full"`, `"any"`.
-
-The error `Insufficient scope: 'all'. This tool requires 'read' or higher.` means the scope string was not recognized as a valid value. Always use one of the three valid strings.
-
-**Default choice:** Start with `scope="read"` unless you specifically need to write or delete.