create-disposabl-app 0.1.1 → 0.1.2

package/dist/index.js

@@ -8,7 +8,7 @@ import { fileURLToPath } from "node:url";
 import { Command, CommanderError } from "commander";
 import * as p2 from "@clack/prompts";
 // package.json
-var version = "0.1.1";
+var version = "0.1.2";
 
 // options.ts
 var platforms = [

package/dist/templates/default/apps/web/vite.config.ts

@@ -36,8 +36,6 @@ const config = defineConfig(({ mode }) => {
       tailwindcss(),
       tanstackStart({
         router: kitRouter,
-        // A separate mask keeps shell generation from replacing the prerendered home page.
-        spa: { enabled: true, maskPath: "/?shell" },
         prerender: {
           enabled: true,
           autoStaticPathsDiscovery: true,

package/dist/templates/default/bun.lock

@@ -130,7 +130,7 @@
     },
     "packages/create-disposabl-app": {
       "name": "create-disposabl-app",
-      "version": "0.1.1",
+      "version": "0.1.2",
       "bin": {
         "create-disposabl-app": "dist/index.js",
       },

package/dist/templates/default/disposabl.json

@@ -1,5 +1,9 @@
 {
   "version": "0.1.0",
-  "platforms": ["web", "mcp"],
-  "features": ["authentication"]
+  "platforms": [
+    "web"
+  ],
+  "features": [
+    "authentication"
+  ]
 }

package/dist/templates/default/packages/backend/README.md

@@ -23,3 +23,11 @@ npm create convex@latest -t bare
 App drafts require `website`; `cli`, `typescript`, and `python` require `api`, and `openai` and `claude` require `mcp`. App lists currently return at most 100 records. Existing records without platforms read as `website`.
 
 Boat requires `BOAT_API_KEY` in the Convex deployment. Set `SANDBOX_OPENAI_API_KEY` to a separately scoped, budget-limited OpenAI API key before sending a message; it is exposed to code inside the sandbox. Creation and resume use `noEnv: true`. Codex credentials are written to protected files in its sandbox home, and healthy running sandboxes are reused without stopping them. The user-scoped MCP key is revoked on completion or after one hour, so long-running prompts can lose MCP access. An uncertain prompt submission stays locked for review instead of being retried automatically. Live sandbox provisioning, Codex credential loading, and dispatch have not been verified.
+
+# MCP tools
+
+Run `bun run dev` at the workspace root to start Turbo, or in this directory to start only the backend with `convex dev`.
+
+The function builders still accept `platforms: true`, per-platform flags, and the legacy `mcp` flag. MCP server creation is still controlled by `disposabl.json`.
+
+Tool discovery and platform generation are removed for now. The MCP server receives `createMcpTools({})`, so its tool list stays empty even when MCP is enabled and internal functions have `platforms: true`. The tool adapter remains available for future use.

package/dist/templates/default/packages/disposabl-kit/package.json

@@ -54,7 +54,6 @@
     "./client/hooks/*": "./client/hooks/*.ts",
     "./server/http": "./server/http.ts",
     "./server/lib/functions": "./server/lib/functions.ts",
-    "./server/lib/static-routes": "./server/lib/static-routes.ts",
     "./client/vite.config": "./client/vite.config.ts"
   }
 }

package/dist/templates/default/packages/disposabl-kit/server/http.ts

@@ -1,86 +1,42 @@
 import { getAuthUserId } from "@convex-dev/auth/server";
-import { McpServer, tool } from "@convex-dev/mcp";
-import { registerStaticRoutes } from "./lib/static-routes";
+import { McpServer } from "@convex-dev/mcp";
+import { registerStaticRoutes } from "@convex-dev/static-hosting";
 import { httpRouter } from "convex/server";
-import { v } from "convex/values";
-import config from "../../../disposabl.json";
-import { components, internal } from "../../backend/convex/_generated/api";
-import type { Doc, Id } from "../../backend/convex/_generated/dataModel";
+import { components } from "../../backend/convex/_generated/api";
 import { env } from "../../backend/convex/_generated/server";
-import schema from "../../backend/convex/schema";
+import { createMcpTools } from "./lib/mcp-tools";
 import { getPlatforms } from "./lib/platforms";
 
 export { tool } from "@convex-dev/mcp";
 export type { McpServerOptions, McpUser, ToolCtx } from "@convex-dev/mcp";
 
-const mcp = new McpServer(components.mcp, {
-  name: "disposabl",
-  title: "Disposabl",
-  version: config.version,
-  siteUrl: env.CONVEX_SITE_URL,
-  consentUrl: `${env.CONVEX_SITE_URL}/consent`,
-  scopes: {
-    "todos:read": "Read your todos.",
-    "todos:write": "Create todos for your account.",
-  },
-  tools: {
-    create_todo: tool({
-      description: "Create a todo for the signed-in user.",
-      args: { title: v.string() },
-      returns: v.id("todos"),
-      annotations: { destructiveHint: false, openWorldHint: false },
-      scope: "todos:write",
-      handler: async (ctx, args, user): Promise<Id<"todos">> =>
-        await ctx.runMutation(internal.todos.internal.create, {
-          ...args,
-          userId: user.userId,
-        }),
-    }),
-    list_todos: tool({
-      description: "List the signed-in user's 100 most recent todos.",
-      args: {},
-      returns: v.array(schema.doc("todos")),
-      annotations: {
-        readOnlyHint: true,
-        idempotentHint: true,
-        openWorldHint: false,
-      },
-      scope: "todos:read",
-      handler: async (ctx, _args, user): Promise<Doc<"todos">[]> =>
-        await ctx.runQuery(internal.todos.internal.list, {
-          userId: user.userId,
-        }),
-    }),
-    get_todo: tool({
-      description: "Get one of the signed-in user's todos by ID.",
-      args: { id: v.id("todos") },
-      returns: v.union(schema.doc("todos"), v.null()),
-      annotations: {
-        readOnlyHint: true,
-        idempotentHint: true,
-        openWorldHint: false,
-      },
-      scope: "todos:read",
-      handler: async (ctx, args, user): Promise<Doc<"todos"> | null> =>
-        await ctx.runQuery(internal.todos.internal.get, {
-          ...args,
-          userId: user.userId,
-        }),
-    }),
-  },
-});
+const mcp = getPlatforms().isMcpEnabled
+  ? new McpServer(components.mcp, {
+      name: "disposabl",
+      title: "Disposabl",
+      version: "1.0.0",
+      siteUrl: env.CONVEX_SITE_URL,
+      consentUrl: `${env.CONVEX_SITE_URL}/consent`,
+      scopes: {},
+      // Discovery is disabled; platform flags do not register tools yet.
+      tools: createMcpTools({}),
+    })
+  : undefined;
 
+// Keep the enabled API types for consumers; disabled exports are absent at runtime.
 export const {
   getAuthRequest,
   authorize,
   listConnections,
   revokeConnection,
   createApiKey,
-} = mcp.api({ getUserId: getAuthUserId });
+} =
+  mcp?.api({ getUserId: getAuthUserId }) ??
+  ({} as ReturnType<McpServer["api"]>);
 
 export default function createHttpRouter() {
   const http = httpRouter();
-  if (getPlatforms().isMcpEnabled) mcp.registerRoutes(http);
+  mcp?.registerRoutes(http);
   registerStaticRoutes(http, components.staticHosting);
   return http;
 }

package/dist/templates/default/packages/disposabl-kit/server/lib/functions.ts

@@ -26,9 +26,15 @@ const withPlatforms = <TDefinition, TResult extends object>(
       mcp?: boolean;
     },
   ): TResult => {
+    const mcpEnabled =
+      definition.platforms === undefined
+        ? definition.mcp === true
+        : definition.platforms === true ||
+          (typeof definition.platforms === "object" &&
+            definition.platforms.mcp === true);
     return Object.assign(builder(definition), {
       platforms: definition.platforms,
-      mcp: definition.mcp ?? definition.platforms?.mcp ?? false,
+      mcp: mcpEnabled ? (definition.mcp ?? true) : false,
       args: definition.args,
       returns: definition.returns,
     });

package/dist/templates/default/packages/disposabl-kit/server/lib/mcp-tools.ts

@@ -0,0 +1,47 @@
+import { tool, type ToolDefinition } from "@convex-dev/mcp";
+import { makeFunctionReference as reference } from "convex/server";
+import type { GenericValidator, PropertyValidators } from "convex/values";
+
+type PlatformFunction = {
+  isInternal?: boolean;
+  isQuery?: boolean;
+  isMutation?: boolean;
+  mcp?: boolean;
+  args: PropertyValidators;
+  returns: GenericValidator;
+};
+
+/** Adapt opted-in internal functions without duplicating their validators. */
+export function createMcpTools(
+  modules: Record<string, Record<string, unknown>>,
+) {
+  const tools: Record<string, ToolDefinition> = Object.create(null);
+  for (const [path, exports] of Object.entries(modules)) {
+    for (const [exportName, value] of Object.entries(exports)) {
+      const fn = value as PlatformFunction | null;
+      if (!fn?.isInternal || !fn.mcp) continue;
+      const id = `${path}:${exportName}`;
+      const name = id.replace(/[^A-Za-z0-9_.-]/g, "_");
+      if (Object.hasOwn(tools, name))
+        throw new Error(`Duplicate MCP tool name: ${name}`);
+      const { userId, ...args } = fn.args;
+      tools[name] = tool({
+        description: `Call ${id}.`,
+        ...(fn.isQuery ? { annotations: { readOnlyHint: true } } : {}),
+        args,
+        returns: fn.returns,
+        handler: async (ctx, input, user) => {
+          const params = {
+            ...input,
+            ...(userId ? { userId: user.userId } : {}),
+          };
+          if (fn.isQuery) return ctx.runQuery(reference<"query">(id), params);
+          if (fn.isMutation)
+            return ctx.runMutation(reference<"mutation">(id), params);
+          return ctx.runAction(reference<"action">(id), params);
+        },
+      });
+    }
+  }
+  return tools;
+}

package/dist/templates/default/packages/disposabl-kit/server/lib/platforms.ts

@@ -1,6 +1,6 @@
 import config from "../../../../disposabl.json";
 
-export type Platforms = { api?: boolean; mcp?: boolean };
+export type Platforms = boolean | { api?: boolean; mcp?: boolean };
 
 /** The generated app config is the source of truth for enabled transports. */
 export function getPlatforms() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-disposabl-app",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Create a Disposabl app",
   "type": "module",
   "license": "MIT",

package/dist/templates/default/packages/disposabl-kit/server/lib/static-routes.ts

@@ -1,56 +0,0 @@
-import type { ComponentApi } from "@convex-dev/static-hosting/_generated/component";
-import { httpActionGeneric, type HttpRouter } from "convex/server";
-
-/** Serve build output by convention, without a second list of application routes. */
-export function registerStaticRoutes(
-  http: HttpRouter,
-  component: ComponentApi,
-) {
-  const handler = httpActionGeneric(async (ctx, request) => {
-    let pathname: string;
-    try {
-      pathname = decodeURIComponent(new URL(request.url).pathname);
-    } catch {
-      return new Response("Bad Request", { status: 400 });
-    }
-
-    const resolve = (path: string) =>
-      ctx.runQuery(component.lib.resolveAssetForHttp, {
-        path,
-        spaFallback: false,
-      });
-    const path = pathname === "/" ? "/index.html" : pathname;
-    let asset = await resolve(path);
-    let shell = path === "/_shell.html";
-    if (!asset && !pathname.split("/").filter(Boolean).at(-1)?.includes(".")) {
-      asset = await resolve(`${pathname.replace(/\/$/, "")}/index.html`);
-      if (!asset) {
-        asset = await resolve("/_shell.html");
-        shell = true;
-      }
-    }
-    if (!asset) return new Response("Not Found", { status: 404 });
-
-    const html = asset.contentType.startsWith("text/html");
-    const headers = {
-      "Content-Type": asset.contentType,
-      "Cache-Control": html ? "no-store" : "public, max-age=0, must-revalidate",
-      "X-Content-Type-Options": "nosniff",
-      ...(shell ? { "X-Robots-Tag": "noindex, nofollow" } : {}),
-    };
-    if (asset.blobId && !html) {
-      return new Response(null, {
-        status: 302,
-        headers: { ...headers, Location: `/fs/blobs/${asset.blobId}` },
-      });
-    }
-    if (!asset.storageUrl) return new Response("Not Found", { status: 404 });
-    const response = await fetch(asset.storageUrl, {
-      signal: AbortSignal.timeout(15_000),
-    });
-    if (!response.ok) return new Response("Storage error", { status: 502 });
-    return new Response(response.body, { headers });
-  });
-
-  http.route({ pathPrefix: "/", method: "GET", handler });
-}