brewpage-mcp 1.16.3 → 1.16.5

package/README.md

@@ -17,7 +17,7 @@ Choosing a host? See how BrewPage compares with GitHub Pages, Netlify Drop, Tiin
 ## Quick Start
 
 ```bash
-npx -y brewpage-mcp@1.16.3
+npx -y brewpage-mcp@1.16.5
 ```
 
 Requires Node.js 20 or newer. This starts the stdio server for an MCP client.
@@ -50,7 +50,7 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.16.3"]
+      "args": ["-y", "brewpage-mcp@1.16.5"]
     }
   }
 }
@@ -61,7 +61,7 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
 Register a project-scoped stdio server:
 
 ```bash
-claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.16.3
+claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.16.5
 ```
 
 This writes `.mcp.json` in the project root. Use `--scope user` for user-scoped registration. See the [official Claude Code MCP guide](https://code.claude.com/docs/en/mcp).
@@ -75,7 +75,7 @@ Open **Settings > MCP** and add:
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.16.3"]
+      "args": ["-y", "brewpage-mcp@1.16.5"]
     }
   }
 }
@@ -89,7 +89,7 @@ Open the Cline MCP settings panel and add:
 {
   "brewpage": {
     "command": "npx",
-    "args": ["-y", "brewpage-mcp@1.16.3"]
+    "args": ["-y", "brewpage-mcp@1.16.5"]
   }
 }
 ```
@@ -97,7 +97,7 @@ Open the Cline MCP settings panel and add:
 ### Global Install
 
 ```bash
-npm install -g brewpage-mcp@1.16.3
+npm install -g brewpage-mcp@1.16.5
 brewpage-mcp
 ```
 
@@ -176,7 +176,7 @@ publish_html(content="<h1>Report</h1>...", format="HTML", ttlDays=15)
 
 Update an existing HTML or Markdown page in place, preserving its short URL. Requires the original `ownerToken` returned at creation.
 
-Parameters: `namespace` (string), `id` (string), `content` (string, the new body), `ownerToken` (string), `format` (optional HTML/Markdown alias or supported code language such as `json`, `yaml`, or `typescript`; omitted preserves the stored format).
+Parameters: `namespace` (string), `id` (string), `content` (string, the new body), `ownerToken` (string), `format` (optional HTML/Markdown alias or supported code language such as `json`, `yaml`, or `typescript`; omitted preserves the stored format), `tags` (optional; replace the stored tags, `[]` clears, omitted keeps them).
 
 An update never changes the link or delivery mode; an advisory `deliveryModeReason` and `Delivery notice:` line are printed when the server returns them.
 
@@ -250,7 +250,7 @@ publish_site(files=[{"path": "index.html", "content": "..."}, {"path": "style.cs
 
 Replace an owned site's complete file set at the same ID and primary link. Files absent from the new bundle are removed; matching files are overwritten and new files added. Hosting stays unchanged. The `publish_site` limits and status codes apply.
 
-Parameters: `namespace`, `id`, `ownerToken`, exactly one of `entryContent` or a non-empty `files` array of `{path, content}`, optional `entry` (default `index.html`), `ttlDays` (ignored; existing expiry is preserved and a `ttl-ignored` notice is returned), and `tags`.
+Parameters: `namespace`, `id`, `ownerToken`, exactly one of `entryContent` or a non-empty `files` array of `{path, content}`, optional `entry` (default `index.html`), `ttlDays` (ignored; existing expiry is preserved and a `ttl-ignored` notice is returned), and `tags` (optional; replace the stored tags, `[]` clears, omitted keeps them).
 
 ```text
 republish_site(namespace="public", id="aBcDeFgHiJ", ownerToken="tok_...", files=[{"path":"index.html","content":"<h1>Updated site</h1>"}])
@@ -530,6 +530,14 @@ Every publish response includes an **owner token** -- the only credential that a
 
 ## Changelog
 
+## 1.16.5 -- 2026-10-30
+
+- `update_html` takes optional `tags` (sent as `?tags=a,b`); `update_html` and `republish_site` tags replace the stored tags, `[]` clears them, omitted keeps them. A 429 on any write prints the server's `Retry-After` beside the verbatim body (`retryAfterSeconds`).
+
+## 1.16.4 -- 2026-10-30
+
+- Owner update tools (`update_html`, `republish_site`, `update_json`, `set_kv`) answer a 404 with the server body plus which publish tool makes a new copy; `delete_resource` relays the 404 unchanged.
+
 ## 1.16.3 -- 2026-10-30
 
 - Create `ownerToken` description: the token from the first create keeps publications under one owner; the owner-token banner adds that it goes as `ownerToken` on later publishes and updates; `publish_site` says static HTML, CSS and JS (incl. built bundles) run in the browser, PHP and other server code never run. Gemini context: save `ownerToken` privately, never in chat.

package/dist/tools.d.ts

@@ -1,6 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/server";
 export declare const DEFAULT_BASE_URL = "https://brewpage.app";
-export declare const USER_AGENT = "brewpage-mcp/1.16.3";
+export declare const USER_AGENT = "brewpage-mcp/1.16.5";
 export declare const OWNER_TOKEN_ENV = "BREWPAGE_OWNER_TOKEN";
 export interface ServerOptions {
     /** BrewPage origin for API calls; default https://brewpage.app. */

package/dist/tools.js

@@ -1,7 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/server";
 import { z } from "zod";
 export const DEFAULT_BASE_URL = "https://brewpage.app";
-export const USER_AGENT = "brewpage-mcp/1.16.3";
+export const USER_AGENT = "brewpage-mcp/1.16.5";
 export const OWNER_TOKEN_ENV = "BREWPAGE_OWNER_TOKEN";
 const READ_ONLY = { readOnlyHint: true };
 const DESTRUCTIVE = { readOnlyHint: false, destructiveHint: true };
@@ -54,18 +54,25 @@ function maskToken(token) {
 function textResult(text, isError = false) {
     return isError ? { content: [{ type: "text", text }], isError: true } : { content: [{ type: "text", text }] };
 }
-/** ` Retry-After: <value>.` for a busy 503 that sends the header, else empty. */
+/** ` Retry-After: <value>.` for a 429 or busy 503 that sends the header, else empty. */
 function retryAfterText(status, headers) {
-    const after = status === 503 ? headers?.get("retry-after") : null;
+    const after = status === 429 || status === 503 ? headers?.get("retry-after") : null;
     return after ? ` Retry-After: ${after}.` : "";
 }
-/** Owner-tool failure: the server answer verbatim plus a hint for a plain wrong-token 403 or a frozen old publication. */
+/** Create tool for each content update: a 404 update means the row is gone, so the agent publishes anew. */
+const PUBLISH_TOOL_FOR = {
+    "update HTML": "publish_html", "republish site": "publish_site", "update JSON": "publish_json", "set KV": "publish_kv",
+};
+/** Owner-tool failure: the server answer verbatim plus a hint for a wrong-token 403, a missing row or a frozen old publication. */
 function ownerFailure(operation, status, data, fromEnv, headers) {
     const lines = [`Failed to ${operation} (${status}): ${JSON.stringify(data)}${retryAfterText(status, headers)}`];
     const code = data?.code;
     if (status === 403 && (code === undefined || code === "OWNER_AUTHORIZATION_FAILED")) {
         lines.push(`Wrong owner token for this publication. Use ownerToken from create.${fromEnv ? ` Sent: ${OWNER_TOKEN_ENV}.` : ""}`);
     }
+    if (status === 404 && PUBLISH_TOOL_FOR[operation]) {
+        lines.push(`Use the ${PUBLISH_TOOL_FOR[operation]} tool to publish a new copy.`);
+    }
     if (status === 409 && code === OLD_READ_ONLY_CODE) {
         const { createUrl, republishUrl } = data;
         lines.push("Read-only old publication: cannot be updated. " +
@@ -209,7 +216,7 @@ export function createServer(options = {}) {
     const apiFetch = options.fetch ?? fetch;
     const server = new McpServer({
         name: "brewpage-mcp",
-        version: "1.16.3",
+        version: "1.16.5",
     });
     /** Caller argument first, then the configured default; `fromEnv` marks the configured one. */
     function ownerTokenFor(argument) {
@@ -420,9 +427,9 @@ export function createServer(options = {}) {
         if (!auth.token)
             return textResult(NO_OWNER_TOKEN, true);
         const path = apiPath(TYPE_SEGMENTS[type], namespace, id, "hosting");
-        const { ok, status, data } = await apiRequest("PATCH", path, { deliveryMode, expectedVersion }, { "X-Owner-Token": auth.token });
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("PATCH", path, { deliveryMode, expectedVersion }, { "X-Owner-Token": auth.token });
         if (!ok)
-            return ownerFailure("update hosting", status, data, auth.fromEnv);
+            return ownerFailure("update hosting", status, data, auth.fromEnv, answerHeaders);
         return {
             content: [{ type: "text", text: formatUpdateResponse(data) }],
         };
@@ -443,9 +450,9 @@ export function createServer(options = {}) {
         if (!auth.token)
             return textResult(NO_OWNER_TOKEN, true);
         const path = apiPath(TYPE_SEGMENTS[type], namespace, id);
-        const { ok, status, data } = await apiRequest("DELETE", path, undefined, { "X-Owner-Token": auth.token });
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("DELETE", path, undefined, { "X-Owner-Token": auth.token });
         if (!ok)
-            return ownerFailure("delete", status, data, auth.fromEnv);
+            return ownerFailure("delete", status, data, auth.fromEnv, answerHeaders);
         return {
             content: [
                 {
@@ -670,7 +677,7 @@ export function createServer(options = {}) {
             tags: z
                 .array(z.string())
                 .optional()
-                .describe("Optional tags (replaces the site's existing tags)"),
+                .describe("Optional tags; replace the site's stored tags. Omit to keep them."),
         },
     }, async ({ namespace, id, ownerToken, entryContent, files, entry, ttlDays, tags }) => {
         const hasEntry = typeof entryContent === "string";
@@ -704,7 +711,7 @@ export function createServer(options = {}) {
             return textResult(NO_OWNER_TOKEN, true);
         const headers = { "X-Owner-Token": auth.token };
         const url = baseUrl + withQuery(apiPath("sites", namespace, id), [["entry", entry || undefined],
-            ["ttl", ttlDays || undefined], ["tags", tags && tags.length ? tags.join(",") : undefined]]);
+            ["ttl", ttlDays || undefined], ["tags", tags?.join(",")]]);
         const res = await bpFetch(url, { method: "PUT", headers, body: formData });
         const data = await res.json().catch(() => null);
         if (!res.ok)
@@ -751,20 +758,24 @@ export function createServer(options = {}) {
                 .string()
                 .optional()
                 .describe("Content format. Accepts (case-insensitive on html/markdown): 'html', 'markdown'/'md', or a code language — yaml, json, xml, csv, tsv, log, toml, ini, sql, sh, bat, env, javascript, typescript, tsx, jsx, css, properties, docker, txt. Omit to preserve the stored format."),
+            tags: z
+                .array(z.string())
+                .optional()
+                .describe("Optional tags; replace the page's stored tags ([] clears). Omit to keep them."),
         },
-    }, async ({ namespace, id, content, ownerToken, format }) => {
+    }, async ({ namespace, id, content, ownerToken, format, tags }) => {
         const body = { content };
         if (format)
             body.format = format;
         const auth = ownerTokenFor(ownerToken);
         if (!auth.token)
             return textResult(NO_OWNER_TOKEN, true);
-        const path = apiPath("html", namespace, id);
-        const { ok, status, data } = await apiRequest("PUT", path, body, {
+        const path = withQuery(apiPath("html", namespace, id), [["tags", tags?.join(",")]]);
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("PUT", path, body, {
             "X-Owner-Token": auth.token,
         });
         if (!ok)
-            return ownerFailure("update HTML", status, data, auth.fromEnv);
+            return ownerFailure("update HTML", status, data, auth.fromEnv, answerHeaders);
         return {
             content: [
                 {
@@ -821,7 +832,7 @@ export function createServer(options = {}) {
                 content: [
                     {
                         type: "text",
-                        text: `Failed to publish JSON (${res.status}): ${JSON.stringify(data)}`,
+                        text: `Failed to publish JSON (${res.status}): ${JSON.stringify(data)}${retryAfterText(res.status, res.headers)}`,
                     },
                 ],
                 isError: true,
@@ -900,7 +911,7 @@ export function createServer(options = {}) {
         });
         const data = await res.json().catch(() => null);
         if (!res.ok)
-            return ownerFailure("update JSON", res.status, data, auth.fromEnv);
+            return ownerFailure("update JSON", res.status, data, auth.fromEnv, res.headers);
         return {
             content: [
                 {
@@ -945,13 +956,13 @@ export function createServer(options = {}) {
             headers["X-Owner-Token"] = owner;
         if (deliveryMode)
             headers["X-Delivery-Mode"] = deliveryMode;
-        const { ok, status, data } = await apiRequest("POST", path, body, headers);
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("POST", path, body, headers);
         if (!ok) {
             return {
                 content: [
                     {
                         type: "text",
-                        text: `Failed to publish KV (${status}): ${JSON.stringify(data)}`,
+                        text: `Failed to publish KV (${status}): ${JSON.stringify(data)}${retryAfterText(status, answerHeaders)}`,
                     },
                 ],
                 isError: true,
@@ -982,11 +993,11 @@ export function createServer(options = {}) {
         if (!auth.token)
             return textResult(NO_OWNER_TOKEN, true);
         const path = apiPath("kv", namespace, id, key);
-        const { ok, status, data } = await apiRequest("PUT", path, body, {
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("PUT", path, body, {
             "X-Owner-Token": auth.token,
         });
         if (!ok)
-            return ownerFailure("set KV", status, data, auth.fromEnv);
+            return ownerFailure("set KV", status, data, auth.fromEnv, answerHeaders);
         return {
             content: [
                 {
@@ -1143,9 +1154,9 @@ export function createServer(options = {}) {
         if (!auth.token)
             return textResult(NO_OWNER_TOKEN, true);
         const path = apiPath(TYPE_SEGMENTS[type], namespace, id, "visibility");
-        const { ok, status, data } = await apiRequest("POST", path, { listed }, { "X-Owner-Token": auth.token });
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("POST", path, { listed }, { "X-Owner-Token": auth.token });
         if (!ok)
-            return ownerFailure("set visibility", status, data, auth.fromEnv);
+            return ownerFailure("set visibility", status, data, auth.fromEnv, answerHeaders);
         const result = data;
         return textResult([...credentialAlertLines(result), `LISTED: ${result.listed} · link unchanged`, ...noticeLines(result)].join("\n"));
     });
@@ -1160,9 +1171,9 @@ export function createServer(options = {}) {
         const auth = ownerTokenFor(ownerToken);
         if (!auth.token)
             return textResult(NO_OWNER_TOKEN, true);
-        const { ok, status, data } = await apiRequest("POST", "/api/owner-token/bind", { token }, { "X-Owner-Token": auth.token });
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("POST", "/api/owner-token/bind", { token }, { "X-Owner-Token": auth.token });
         if (!ok)
-            return textResult(`Failed to bind token (${status}): ${JSON.stringify(data)}`, true);
+            return textResult(`Failed to bind token (${status}): ${JSON.stringify(data)}${retryAfterText(status, answerHeaders)}`, true);
         const result = data;
         return textResult(`BOUND ${maskToken(token)} · ${result.active}/${result.max} active`);
     });
@@ -1179,9 +1190,9 @@ export function createServer(options = {}) {
         const auth = ownerTokenFor(ownerToken);
         if (!auth.token)
             return textResult(NO_OWNER_TOKEN, true);
-        const { ok, status, data } = await apiRequest("POST", "/api/owner-token/mint", { label, scope, expiresIn }, { "X-Owner-Token": auth.token });
+        const { ok, status, data, headers: answerHeaders } = await apiRequest("POST", "/api/owner-token/mint", { label, scope, expiresIn }, { "X-Owner-Token": auth.token });
         if (!ok)
-            return textResult(`Failed to mint token (${status}): ${JSON.stringify(data)}`, true);
+            return textResult(`Failed to mint token (${status}): ${JSON.stringify(data)}${retryAfterText(status, answerHeaders)}`, true);
         const result = data;
         return textResult([
             `MINTED · ${result.scope} · expires ${result.expiresAt ?? "never"}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brewpage-mcp",
-  "version": "1.16.3",
+  "version": "1.16.5",
   "mcpName": "io.github.kochetkov-ma/brewpage-mcp",
   "description": "MCP server for BrewPage — publish and manage HTML, sites, KV, JSON and files from AI assistants",
   "type": "module",