convex 1.48.0 → 1.49.0-alpha.0

package/src/cli/mcp.ts

@@ -1,3 +1,4 @@
+import path from "path";
 import { Command, Option } from "@commander-js/extra-typings";
 import { oneoffContext } from "../bundler/context.js";
 import { logError } from "../bundler/log.js";
@@ -6,6 +7,7 @@ import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import { actionDescription } from "./lib/command.js";
 import { checkAuthorization } from "./lib/login.js";
 import {
+  encodeDeploymentSelector,
   McpOptions,
   RequestContext,
   RequestCrash,
@@ -115,6 +117,14 @@ function enabledTools(
 export function makeServer(options: McpOptions) {
   const enabledToolsByName = enabledTools(options);
   const mutex = new Mutex();
+  const serverDirectory = process.cwd();
+  options = {
+    ...options,
+    envFile:
+      options.envFile === undefined
+        ? undefined
+        : path.resolve(serverDirectory, options.envFile),
+  };
   const server = new Server(
     {
       name: "Convex MCP Server",
@@ -128,17 +138,7 @@ export function makeServer(options: McpOptions) {
   );
   server.setRequestHandler("tools/call", async (request: CallToolRequest) => {
     const ctx = new RequestContext(options);
-    await initializeBigBrainAuth(ctx, options);
     try {
-      const authorized = await checkAuthorization(ctx, false);
-      if (!authorized) {
-        await ctx.crash({
-          exitCode: 1,
-          errorType: "fatal",
-          printedMessage:
-            "Not Authorized: Run `npx convex dev` to login to your Convex project.",
-        });
-      }
       if (!request.params.arguments) {
         await ctx.crash({
           exitCode: 1,
@@ -158,7 +158,44 @@ export function makeServer(options: McpOptions) {
 
       // Serialize tool handlers since they're mutating the current working directory.
       const result = await mutex.runExclusive(async () => {
-        return await convexTool.handler(ctx, input);
+        const projectDir =
+          "deploymentSelector" in input
+            ? ctx.decodeDeploymentSelectorUnchecked(input.deploymentSelector)
+                .projectDir
+            : (("projectDir" in input ? input.projectDir : undefined) ??
+              options.projectDir);
+        const previousDirectory = process.cwd();
+        try {
+          if (projectDir !== undefined)
+            process.chdir(path.resolve(serverDirectory, projectDir));
+          await initializeBigBrainAuth(ctx, options);
+          if (!(await checkAuthorization(ctx, false))) {
+            await ctx.crash({
+              exitCode: 1,
+              errorType: "fatal",
+              printedMessage:
+                "Not Authorized: Run `npx convex dev` to login to your Convex project.",
+            });
+          }
+          const absoluteDirectory = process.cwd();
+          const resolvedInput =
+            "deploymentSelector" in input
+              ? {
+                  ...input,
+                  deploymentSelector: encodeDeploymentSelector(
+                    absoluteDirectory,
+                    ctx.decodeDeploymentSelectorUnchecked(
+                      input.deploymentSelector,
+                    ).deployment,
+                  ),
+                }
+              : projectDir === undefined
+                ? input
+                : { ...input, projectDir: absoluteDirectory };
+          return await convexTool.handler(ctx, resolvedInput);
+        } finally {
+          process.chdir(previousDirectory);
+        }
       });
       return {
         content: [

package/src/cli/plugins.ts

@@ -0,0 +1,154 @@
+import { Command } from "@commander-js/extra-typings";
+import { chalkStderr } from "chalk";
+import { oneoffContext } from "../bundler/context.js";
+import {
+  logFailure,
+  logFinishedStep,
+  logMessage,
+  logOutput,
+  logWarning,
+  showSpinner,
+} from "../bundler/log.js";
+import { claudeCode } from "./lib/plugins/claudeCode.js";
+import { codex } from "./lib/plugins/codex.js";
+import { getNewestHarnessLocations } from "./lib/plugins/harness.js";
+import { logMarketplaces } from "./lib/plugins/marketplaces.js";
+import { logConvexSkills } from "./lib/plugins/skills.js";
+import { capture, run } from "./lib/plugins/utils.js";
+
+const harnesses = [claudeCode, codex];
+
+/**
+ * Puts the latest Convex plugin in each harness on this machine, so the
+ * harness knows Convex the next time it starts. It works through each
+ * harness's own CLI and never edits the harnesses' files.
+ *
+ * Supported harnesses, on macOS and Linux:
+ * - Claude Code: terminal, desktop app (macOS), VS Code extension.
+ * - Codex: terminal, ChatGPT desktop app (macOS), VS Code extension.
+ *
+ * Windows is currently not supported.
+ *
+ * Success, exits 0:
+ * - The harness has the latest Convex plugin: prints the version.
+ * - The harness isn't installed: says so.
+ *
+ * Failure, exits 1:
+ * - The install failed: says why and what to do.
+ * - The machine runs Windows: says it isn't supported yet.
+ */
+const pluginsInstall = new Command("install")
+  .summary("Install or upgrade the Convex plugin for Claude Code and Codex")
+  .description(
+    "Installs or upgrades the Convex plugin for Claude Code and Codex, in the\n" +
+      "terminal, the desktop app and the VS Code extension:\n" +
+      harnesses.map((h) => `  - ${h.name}: ${h.plugin}\n`).join("") +
+      "\nClaude Code or Codex is skipped when it isn't installed. Windows isn't\n" +
+      "supported yet.",
+  )
+  .allowExcessArguments(false)
+  .action(async () => {
+    const ctx = await oneoffContext({});
+    if (process.platform === "win32") {
+      return await ctx.crash({
+        exitCode: 1,
+        errorType: "fatal",
+        printedMessage:
+          "`npx convex plugins install` doesn't support Windows yet.",
+      });
+    }
+    const locations = await getNewestHarnessLocations();
+    let failed = false;
+    for (const {
+      id,
+      name,
+      plugin,
+      upgradeStep,
+      installSteps,
+      plugins,
+    } of harnesses) {
+      const cli = locations[id]?.path;
+      if (cli === undefined) {
+        logWarning(`${chalkStderr.yellow("⚠")} ${name}: not installed`);
+        continue;
+      }
+      showSpinner(`Installing the Convex plugin for ${name}…`);
+      let output = "";
+      let upgraded = true;
+      for (const args of installSteps) {
+        const step = await run(cli, args);
+        output += step.output;
+        // Only the upgrade step's failure matters. Others can fail harmlessly,
+        // like adding a marketplace that's already added from another source.
+        if (args === upgradeStep && !step.ok) upgraded = false;
+      }
+      const list = await capture(cli, ["plugin", "list", "--json"]);
+      const version =
+        list === null
+          ? undefined
+          : plugins(list)?.find((p) => `${p.name}@${p.marketplace}` === plugin)
+              ?.version;
+      if (version === undefined || !upgraded) {
+        failed = true;
+        logFailure(`${name}: couldn't install the Convex plugin`);
+        // The last lines of the harness's own output say why.
+        const tail = output.trim().split(/\r?\n/).slice(-10).join("\n");
+        if (tail !== "") logMessage(chalkStderr.gray(tail));
+        logMessage(
+          "Run `npx convex plugins install` again after fixing the error above.",
+        );
+      } else {
+        logFinishedStep(`${name}: Convex plugin ${version}`);
+      }
+    }
+    if (failed) {
+      return await ctx.crash({
+        exitCode: 1,
+        errorType: "fatal",
+        printedMessage: null,
+      });
+    }
+  });
+
+// When status is picked up again, check it against install. Install now
+// upgrades the plugin and reports the harnesses it didn't find.
+const pluginsStatus = new Command("status")
+  .summary("Show the Convex plugins and skills installed")
+  .description(
+    "Lists the Convex setup your coding agents load:\n" +
+      "  - Convex skills in the hidden folders of your home folder and this folder\n" +
+      "  - Convex marketplaces and plugins in Codex and Claude Code\n\n" +
+      "It only reads, and changes nothing.",
+  )
+  .allowExcessArguments(false)
+  .action(async () => {
+    await logConvexSkills();
+
+    const locations = await getNewestHarnessLocations();
+    for (const harness of harnesses) {
+      const cli = locations[harness.id]?.path;
+      const marketplaceList =
+        cli === undefined
+          ? null
+          : await capture(cli, ["plugin", "marketplace", "list", "--json"]);
+      const pluginList =
+        cli === undefined
+          ? null
+          : await capture(cli, ["plugin", "list", "--json"]);
+      if (marketplaceList === null || pluginList === null) {
+        logOutput(`${harness.name}: not installed`);
+        continue;
+      }
+      const marketplaces = harness.marketplaces(marketplaceList, pluginList);
+      if (marketplaces === null) {
+        logOutput(`${harness.name}: couldn't read its plugin lists`);
+        continue;
+      }
+      logMarketplaces(harness.name, marketplaces, await harness.latest());
+    }
+  });
+
+export const plugins = new Command("plugins")
+  .summary("Manage Convex plugins for coding agents")
+  .addCommand(pluginsInstall)
+  .addCommand(pluginsStatus, { hidden: true });

package/src/cli/program.ts

@@ -1,5 +1,6 @@
 import { Command } from "@commander-js/extra-typings";
 import { aiFiles } from "./aiFiles.js";
+import { account } from "./account.js";
 import { auth } from "./auth.js";
 import { codegen } from "./codegen.js";
 import { convexExport } from "./convexExport.js";
@@ -21,6 +22,7 @@ import { logout } from "./logout.js";
 import { logs } from "./logs.js";
 import { mcp } from "./mcp.js";
 import { networkTest } from "./network_test.js";
+import { plugins } from "./plugins.js";
 import { project } from "./project.js";
 import { reinit } from "./reinit.js";
 import { run } from "./run.js";
@@ -56,12 +58,14 @@ export function buildProgram() {
       .addCommand(codegen)
       .addCommand(update)
       .addCommand(logout)
+      .addCommand(account)
       .addCommand(networkTest, { hidden: true })
       .addCommand(integration, { hidden: true })
       .addCommand(functionSpec)
       .addCommand(insights)
       .addCommand(mcp)
       .addCommand(aiFiles)
+      .addCommand(plugins)
       .helpCommand("help <command>", "Show help for given <command>")
       .version(version)
       // Hide version and help so they don't clutter

package/src/index.ts

@@ -1 +1 @@
-export const version = "1.48.0";
+export const version = "1.49.0-alpha.0";

package/src/server/impl/actions_impl.ts

@@ -75,8 +75,9 @@ export type ServiceName = "ai-gateway";
  *
  * This function can only be called while an action is running. The credential
  * is scoped to the current deployment and should be sent as a bearer token.
- * The action runtime caches and refreshes credentials as needed, so call
- * this function whenever making a service request.
+ * Credentials expire a few minutes after they're issued. The action runtime
+ * caches and refreshes them as needed, so call this function whenever making
+ * a service request rather than reusing one credential for a long action.
  *
  * @param service - The service the credential may access.
  * @returns A JWT to send as `Authorization: Bearer <token>`. Keep it inside