drafted 1.7.22 → 1.7.24

package/cli/drafted.mjs

@@ -11,7 +11,7 @@ import { program } from 'commander';
 import { spawn, execSync } from 'child_process';
 import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, statSync, unlinkSync } from 'fs';
 import { join, dirname, basename, resolve } from 'path';
-import { homedir, tmpdir } from 'os';
+import { homedir, tmpdir, platform } from 'os';
 import { fileURLToPath } from 'url';
 import { DESIGN_SYSTEM_PROMPT, buildDesignPrompt } from './prompts.mjs';
 
@@ -140,6 +140,24 @@ function getServerUrl() {
   return `http://localhost:${process.env.DRAFTED_PORT || DEFAULT_PORT}`;
 }
 
+function buildUpdateCommand() {
+  const server = getServerUrl().replace(/\/$/, '');
+  if (platform() === 'win32') {
+    const script = `$tmp = Join-Path $env:TEMP "drafted-install.ps1"; Invoke-WebRequest -UseBasicParsing "${server}/install.ps1" -OutFile $tmp; powershell -NoProfile -ExecutionPolicy Bypass -File $tmp`;
+    return {
+      shell: 'powershell.exe',
+      args: ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-Command', script],
+      manualCommand: script,
+    };
+  }
+  const script = `tmp=$(mktemp); curl -fsSL ${server}/install.sh -o "$tmp" && bash "$tmp"`;
+  return {
+    shell: 'sh',
+    args: ['-lc', script],
+    manualCommand: script,
+  };
+}
+
 // --- Auth helpers ---
 
 function readAuth() {
@@ -347,6 +365,47 @@ program
     process.exit(1);
   });
 
+// Command: update
+program
+  .command('update')
+  .description('Update the npm-installed Drafted MCP daemon')
+  .option('--dry-run', 'Print update instructions without starting the updater')
+  .option('--yes', 'Start the updater out-of-process')
+  .action((options) => {
+    const update = buildUpdateCommand();
+    const data = {
+      started: false,
+      command: 'drafted update --yes',
+      dryRunCommand: 'drafted update --dry-run',
+      manualCommand: update.manualCommand,
+      restartRequired: true,
+      restartGuidance: 'Restart your agent/editor after updating so it starts the new drafted-mcp.',
+    };
+
+    if (options.yes && !options.dryRun) {
+      const child = spawn(update.shell, update.args, {
+        detached: true,
+        stdio: 'ignore',
+      });
+      child.unref();
+      data.started = true;
+    }
+
+    jsonOut(true, 'update', data);
+
+    if (data.started) {
+      console.log('Drafted updater started in the background.');
+    } else {
+      console.log('Drafted updater was not started.');
+      console.log('Run this command to update:');
+      console.log(`  ${data.command}`);
+      console.log('');
+      console.log('Manual updater command:');
+      console.log(`  ${data.manualCommand}`);
+    }
+    console.log(data.restartGuidance);
+  });
+
 // Command: logout
 program
   .command('logout')

package/mcp/server.mjs

@@ -186,6 +186,56 @@ const TOOL_ANNOTATIONS = {
   wiki:                { title: 'Wiki',                readOnlyHint: false, destructiveHint: true,  openWorldHint: false, description: 'Per-org wiki. Markdown pages with paths as hierarchy. Dispatch by `action`.' },
 };
 
+function isMutatingToolCall(name, args = {}) {
+  const action = args?.action;
+  switch (name) {
+    case 'project':
+      return ['create', 'update', 'move'].includes(action);
+    case 'template':
+      return ['create', 'update', 'delete', 'fork'].includes(action);
+    case 'layer':
+      return ['add', 'update', 'remove', 'reorder'].includes(action);
+    case 'frame':
+      return ![
+        'read', 'search', 'versions', 'read_version',
+        'get_sheet', 'read_sheet_values',
+        'get_doc', 'read_doc_content',
+        'get_slide', 'read_slide_content',
+        'get_excel', 'read_excel_range',
+      ].includes(action);
+    case 'asset':
+      return ['upload', 'rm'].includes(action);
+    case 'skill':
+      return ['add', 'update', 'remove', 'attach', 'detach', 'favorite', 'unfavorite', 'update_file'].includes(action);
+    case 'wiki':
+      return ['log', 'write', 'edit', 'mv', 'rm', 'source-register', 'bulk-write'].includes(action);
+    case 'rm':
+    case 'shape':
+    case 'group':
+    case 'connector':
+    case 'layout':
+      return true;
+    default:
+      return false;
+  }
+}
+
+async function getRequiredMcpUpdateError(name, args = {}) {
+  if (mcpMode() !== 'stdio') return null;
+  if (!isMutatingToolCall(name, args)) return null;
+  const updateMetadata = await getMcpUpdateMetadata();
+  if (!updateMetadata?.required) return null;
+  const instructions = buildInstalledMcpUpdateInstructions(updateMetadata);
+  return [
+    `Drafted MCP update required before running ${name}${args?.action ? `.${args.action}` : ''}.`,
+    `Current version: ${instructions.currentVersion || PACKAGE_VERSION}.`,
+    instructions.latestVersion ? `Latest version: ${instructions.latestVersion}.` : null,
+    instructions.minimumRequiredVersion ? `Minimum required version: ${instructions.minimumRequiredVersion}.` : null,
+    `Run: ${instructions.command}`,
+    `Then restart your agent/editor so it starts the updated drafted-mcp.`,
+  ].filter(Boolean).join(' ');
+}
+
 function tool(name, descOrSchema, schemaOrHandler, handler) {
   const ann = TOOL_ANNOTATIONS[name];
   if (!ann) throw new Error(`MCP tool "${name}" missing entry in TOOL_ANNOTATIONS`);
@@ -221,6 +271,8 @@ function tool(name, descOrSchema, schemaOrHandler, handler) {
     trackUmamiEvent(UMAMI_EVENTS.MCP_TOOL_CALLED, { tool: name, projectId: state.projectId || undefined, source: 'mcp' });
     reportInstallationEvent(UMAMI_EVENTS.DRAFTED_MCP_REQUEST, { tool: name });
     try {
+      const requiredUpdateError = await getRequiredMcpUpdateError(name, args?.[0] || {});
+      if (requiredUpdateError) return err(new Error(requiredUpdateError));
       return await cb(...args);
     } finally {
       state.currentTool = previousTool;
@@ -1559,6 +1611,62 @@ function normalizeMcpUpdatePolicy(policy) {
   };
 }
 
+function buildInstalledMcpUpdateInstructions(updateMetadata = null) {
+  const mode = updateMetadata?.mode || mcpMode();
+  const restart = updateMetadata?.restart || {
+    required: mode === 'stdio',
+    guidance: 'Restart agents after updating the npm-installed Drafted MCP daemon.',
+  };
+
+  if (mode !== 'stdio') {
+    return {
+      action: 'update_mcp',
+      started: false,
+      updateSupported: false,
+      mode,
+      currentVersion: updateMetadata?.currentVersion || PACKAGE_VERSION,
+      latestVersion: updateMetadata?.latestVersion || null,
+      updateAvailable: false,
+      required: false,
+      command: null,
+      dryRunCommand: null,
+      manualCommand: null,
+      restart: {
+        required: false,
+        guidance: restart.guidance || 'Hosted HTTP MCP updates with the Drafted server deploy.',
+      },
+      note: 'This session is using hosted HTTP MCP, so there is no npm-installed stdio daemon to update on this machine.',
+    };
+  }
+
+  const server = getServerUrl().replace(/\/$/, '');
+  const manualCommand = platform() === 'win32'
+    ? `$tmp = Join-Path $env:TEMP "drafted-install.ps1"; Invoke-WebRequest -UseBasicParsing "${server}/install.ps1" -OutFile $tmp; powershell -NoProfile -ExecutionPolicy Bypass -File $tmp`
+    : `tmp=$(mktemp); curl -fsSL ${server}/install.sh -o "$tmp" && bash "$tmp"`;
+
+  return {
+    action: 'update_mcp',
+    started: false,
+    updateSupported: true,
+    mode: 'stdio',
+    currentVersion: updateMetadata?.currentVersion || PACKAGE_VERSION,
+    latestVersion: updateMetadata?.latestVersion || null,
+    recommendedVersion: updateMetadata?.recommendedVersion || null,
+    minimumRequiredVersion: updateMetadata?.minimumRequiredVersion || null,
+    updateAvailable: !!updateMetadata?.updateAvailable,
+    required: !!updateMetadata?.required,
+    command: 'drafted update --yes',
+    dryRunCommand: 'drafted update --dry-run',
+    manualCommand,
+    restart: {
+      required: true,
+      guidance: restart.guidance || 'Restart agents after updating the npm-installed Drafted MCP daemon.',
+    },
+    note: 'This action is intentionally advisory: it does not replace the currently running MCP process. Run the command, then restart your agent/editor so it starts the updated drafted-mcp.',
+    mcpUpdate: updateMetadata || null,
+  };
+}
+
 async function getMcpUpdateMetadata() {
   const mode = mcpMode();
   try {
@@ -1592,12 +1700,17 @@ async function getMcpUpdateMetadata() {
 
 
 tool('get_org', {
-  action: z.enum(['get', 'switch']).optional().describe('Default: "get" returns active org and member info. Use "switch" with orgId to change the active org without opening a project.'),
+  action: z.enum(['get', 'switch', 'update_mcp']).optional().describe('Default: "get" returns active org and member info. Use "switch" with orgId to change the active org without opening a project. Use "update_mcp" to get explicit installed stdio MCP update instructions.'),
   orgId: z.string().optional().describe('[switch] target org ID to switch to. Must be one of the orgs the user is a member of.'),
 }, async (args = {}) => {
   try {
     const action = args.action || 'get';
 
+    if (action === 'update_mcp') {
+      const mcpUpdate = await getMcpUpdateMetadata();
+      return ok(buildInstalledMcpUpdateInstructions(mcpUpdate));
+    }
+
     if (action === 'switch') {
       if (!args.orgId) throw new Error('orgId is required for action=switch');
       await api('POST', '/auth/switch-org', { orgId: args.orgId });
@@ -1650,7 +1763,7 @@ tool('get_org', {
 
 // ── Filesystem tools (direct HTTP to /api/fs) ─────────────────────
 
-tool('frame', 'Frame CRUD in the ACTIVE PROJECT. Dispatch by `action`: read (by path, frame URL, or UUID), write (new frame or overwrite), Google Sheet actions (`get_sheet`, `read_sheet_values`, `write_sheet_values`, `append_sheet_rows`, `clear_sheet_range`, `update_sheet`), Google Doc actions (`get_doc`, `read_doc_content`, `write_doc_content`, `append_doc_content`, `clear_doc_content`, `update_doc`), Google Slide actions (`get_slide`, `read_slide_content`, `write_slide_content`, `append_slides`, `clear_slides`, `update_slide`), write_excalidraw (native editable Excalidraw diagram), edit (hashline ops), mv (rename/move), anchor (mark as required-read for the layer), search (match frame names). Use project(action="open") first. For listing use `ls`, for deletion use `rm`.\n\n**Google Workspace native content:** Create or attach Google Docs/Sheets/Slides with `frame(action="write", googleType=...)`. After that, populate native Google Docs with `write_doc_content`/`append_doc_content` and native Google Slides with `write_slide_content`/`append_slides`; read them with `read_doc_content`/`read_slide_content`. Do NOT use inline `frame.write(content)` or hashline `frame.edit` to populate Google Doc/Slide frames — those actions are for Drafted inline frame files, not native Workspace document bodies.\n\n**Write — content, binary, or Google Workspace frame:** Provide exactly one of `content` (HTML/markdown/text), `file_path` (absolute local file), `base64` (base64-encoded binary with optional `content_type`), or `googleType` (`google-doc`, `google-sheet`, `google-slide`). Call get_org first; when `googleDrive.connected` is true, strongly prefer Google Workspace frames for docs, sheets, and slides in that org. For inline content, filename extension matters: use `.html` for complete HTML documents and `.md` for Markdown. Never place a full HTML document in a `.md` or extensionless frame. For a new Google file, pass `googleType` and optional `title`; for an existing Google file, pass `googleType` plus `url` or `googleId`. For binary frames (images, PDFs, videos), use `file_path` when the file is local to the MCP host, or `base64` when the caller already has binary bytes.\n\n**Write — dimensions:** By default, frames use the layer\'s default size (e.g. 1440×900 for designs, 1440×3000 for wireframes). Often too large for small content. Use `autoSize: true` to measure HTML content and size to fit, or pass explicit `width`/`height`.', {
+tool('frame', 'Frame CRUD in the ACTIVE PROJECT. Dispatch by `action`: read (by path, frame URL, or UUID), write (new frame or overwrite), Google Sheet actions (`get_sheet`, `read_sheet_values`, `write_sheet_values`, `append_sheet_rows`, `clear_sheet_range`, `update_sheet`), Google Doc actions (`get_doc`, `read_doc_content`, `write_doc_content`, `append_doc_content`, `clear_doc_content`, `update_doc`), Google Slide actions (`get_slide`, `read_slide_content`, `write_slide_content`, `append_slides`, `clear_slides`, `update_slide`), write_excalidraw (native editable Excalidraw diagram), edit (hashline ops), mv (rename/move), anchor (mark as required-read for the layer), search (match frame names). Use project(action="open") first. For listing use `ls`, for deletion use `rm`.\n\n**Google Workspace native content:** Create or attach Google Docs/Sheets/Slides with `frame(action="write", googleType=...)`. After creating, immediately populate the native file using the matching write action in the same tool — do NOT leave it empty and do NOT tell the user you cannot write to it. For Sheets: `write_sheet_values` or `append_sheet_rows` (pass `path` or `googleId` from the create response). For Docs: `write_doc_content`/`append_doc_content`. For Slides: `write_slide_content`/`append_slides`. Read with `read_sheet_values`/`read_doc_content`/`read_slide_content`. Do NOT use inline `frame.write(content)` or hashline `frame.edit` to populate Google Workspace frames.\n\n**Write — content, binary, or Google Workspace frame:** Provide exactly one of `content` (HTML/markdown/text), `file_path` (absolute local file), `base64` (base64-encoded binary with optional `content_type`), or `googleType` (`google-doc`, `google-sheet`, `google-slide`). Call get_org first; when `googleDrive.connected` is true, strongly prefer Google Workspace frames for docs, sheets, and slides in that org. For inline content, filename extension matters: use `.html` for complete HTML documents and `.md` for Markdown. Never place a full HTML document in a `.md` or extensionless frame. For a new Google file, pass `googleType` and optional `title`; for an existing Google file, pass `googleType` plus `url` or `googleId`. For binary frames (images, PDFs, videos), use `file_path` when the file is local to the MCP host, or `base64` when the caller already has binary bytes.\n\n**Write — dimensions:** By default, frames use the layer\'s default size (e.g. 1440×900 for designs, 1440×3000 for wireframes). Often too large for small content. Use `autoSize: true` to measure HTML content and size to fit, or pass explicit `width`/`height`.', {
   action: z.enum(['read', 'write', 'write_sheet_values', 'read_sheet_values', 'append_sheet_rows', 'clear_sheet_range', 'get_sheet', 'update_sheet', 'get_doc', 'read_doc_content', 'write_doc_content', 'append_doc_content', 'clear_doc_content', 'update_doc', 'get_slide', 'read_slide_content', 'write_slide_content', 'append_slides', 'clear_slides', 'update_slide', 'write_excalidraw', 'edit', 'mv', 'anchor', 'search', 'versions', 'read_version', 'restore_version']).describe('Operation to perform. Use native Doc/Slide actions for Google Docs/Slides; do not use inline write/edit for native Workspace content.'),
   path: z.string().optional().describe('[read] /{layer}/{lane}/{filename}, frame URL, or UUID. [write|edit|anchor] /{layer}/{lane}/{filename}.'),
   lines: z.string().optional().describe('[read] line range (e.g. "1-50"). Omit to read all.'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.7.22",
+  "version": "1.7.24",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [