aiquila-mcp 0.3.8 → 0.3.10

package/dist/auth/store.js

@@ -14,7 +14,9 @@ function ensureDir(dir) {
         mkdirSync(dir, { recursive: true });
     }
     catch (err) {
-        logger.warn({ dir, err }, '[state] Failed to create state directory');
+        // Best-effort: probeStateDir() (called from startup) is the authoritative
+        // check. Logging here would spam non-HTTP transports that never persist.
+        logger.debug({ dir, err }, '[state] mkdir failed (probe will report fatal if writes break)');
     }
 }
 function loadJson(filePath) {
@@ -41,13 +43,50 @@ function saveJson(filePath, data) {
         renameSync(tmp, filePath);
     }
     catch (err) {
-        logger.warn({ file: filePath, err }, '[state] Failed to save state file');
         try {
             unlinkSync(tmp);
         }
         catch {
             // ignore cleanup failure
         }
+        throw err;
+    }
+}
+export class StateDirNotWritableError extends Error {
+    dir;
+    cause;
+    constructor(dir, cause) {
+        super(`State directory ${dir} is not writable (${cause.code}). ` +
+            `Fix volume ownership, then restart. For Docker named volumes:\n` +
+            `  docker compose exec -u 0 mcp chown -R node:node ${dir}\n` +
+            `  docker compose restart mcp`);
+        this.dir = dir;
+        this.cause = cause;
+        this.name = 'StateDirNotWritableError';
+    }
+}
+/**
+ * Verifies the state directory is usable before the server starts accepting
+ * requests. Writes and removes a sentinel file. Throws StateDirNotWritableError
+ * on any filesystem permission / read-only / out-of-space failure so the
+ * caller can log a fatal-level remediation message and exit.
+ */
+export function probeStateDir(dir = stateDir()) {
+    try {
+        mkdirSync(dir, { recursive: true });
+        const probe = join(dir, '.write-probe');
+        writeFileSync(probe, String(process.pid), 'utf8');
+        unlinkSync(probe);
+    }
+    catch (err) {
+        const errno = err;
+        if (errno.code === 'EACCES' ||
+            errno.code === 'EPERM' ||
+            errno.code === 'EROFS' ||
+            errno.code === 'ENOSPC') {
+            throw new StateDirNotWritableError(dir, errno);
+        }
+        throw err;
     }
 }
 export class ClientsStore {

package/dist/transports/http.js

@@ -7,6 +7,7 @@ import { mcpAuthRouter } from '@modelcontextprotocol/sdk/server/auth/router.js';
 import { requireBearerAuth } from '@modelcontextprotocol/sdk/server/auth/middleware/bearerAuth.js';
 import { createServer, SERVER_VERSION } from '../server.js';
 import { NextcloudOAuthProvider } from '../auth/provider.js';
+import { probeStateDir, StateDirNotWritableError } from '../auth/store.js';
 import { loginHandler } from '../auth/login.js';
 import { logger } from '../logger.js';
 import { fetchStatus } from '../client/ocs.js';
@@ -176,6 +177,17 @@ export async function startHttp() {
         if (!registrationEnabled && !hasStaticClient) {
             logger.warn('No clients configured. Set MCP_CLIENT_ID or MCP_REGISTRATION_ENABLED=true');
         }
+        try {
+            probeStateDir();
+        }
+        catch (err) {
+            if (err instanceof StateDirNotWritableError) {
+                logger.fatal({ dir: err.dir, code: err.cause.code }, `[startup] State directory is not writable — refresh tokens cannot be persisted. ` +
+                    `Fix volume ownership and restart:\n  docker compose exec -u 0 mcp chown -R node:node ${err.dir}\n  docker compose restart mcp`);
+                process.exit(1);
+            }
+            throw err;
+        }
         const provider = new NextcloudOAuthProvider();
         // When gated dynamic registration is desired, require a bearer token on POST /register.
         if (registrationEnabled && registrationToken) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiquila-mcp",
-  "version": "0.3.8",
+  "version": "0.3.10",
   "description": "AIquila - MCP server for Nextcloud integration",
   "type": "module",
   "main": "dist/index.js",