htmlhost-mcp 1.6.0 → 1.7.0

package/README.md

@@ -4,6 +4,8 @@ An [MCP (Model Context Protocol)](https://modelcontextprotocol.io) server that l
 
 Works with **Cursor**, **Claude Desktop**, **Windsurf**, **Cline**, **Zed**, and any MCP-compatible tool.
 
+**Using Claude with saved htmlhost projects?** Open [htmlhost in Claude’s directory](https://claude.ai/directory/htmlhost), choose **Connect**, then sign in to htmlhost and approve. Enable htmlhost in your chat; the same connection works on web and mobile. No npm install or server URL is needed. The setup below is for coding tools working with local files.
+
 ## Editing contract
 
 The server sends clients instructions to follow **inspect → stage → validate → repair → deploy**, with matching guidance on its pull and deploy tools. Read the [agent guide](https://htmlhost.co/agents.md) before editing. Preserve separate project files and shared header/footer markers, inherit the existing design on new pages, and validate desktop/mobile rendering with the client's own tools. Report checks that could not run.
@@ -132,7 +134,7 @@ ttl       (optional)  Time-to-live: 1d, 7d, 30d, or never
 
 ### `list_sites`
 
-Returns all your sites, their URLs, sizes, TTLs, and plan usage, plus `shared`: the sites shared with you as a collaborator, with their owner. You can pull, deploy to and restore those with your own key; only the owner can delete them.
+Returns all your sites, their URLs, sizes, TTLs, and plan usage, plus `shared`: the sites shared with you, with their owner and your `role` (`admin`, `editor`, `contributor` or `viewer`). Admins and Editors pull, deploy to and restore those with your own key; Contributors pull and save drafts but can't publish; Viewers can't change them. Only the owner can delete a site.
 
 ### `get_site`
 
@@ -216,7 +218,7 @@ MIT
 
 ## Unpublished sites and drafts
 
-Unpublished websites remain private until publishing is explicitly confirmed. Collaborators can publish with confirmation; only owners can unpublish. The server also cancels deployments still running when someone unpublishes.
+Unpublished websites remain private until publishing is explicitly confirmed. Admins and Editors on a shared site can publish with confirmation and unpublish; Contributors save drafts only. The server also cancels deployments still running when someone unpublishes.
 
 - `deploy` / `deploy_html`: use `isDraft: true` to save without changing publication. To publish an unpublished site, obtain the user's explicit agreement to make it public, then pass `confirmPublish: true`.
 - `restore_version` also requires `confirmPublish: true` for an unpublished website; its general `confirm` argument is insufficient.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "htmlhost-mcp",
-  "version": "1.6.0",
-  "description": "MCP server for htmlhost.co \u2014 deploy, list, and manage sites from AI coding tools",
+  "version": "1.7.0",
+  "description": "MCP server for htmlhost.co — deploy, list, and manage sites from AI coding tools",
   "type": "module",
   "bin": {
     "htmlhost-mcp": "bin/htmlhost-mcp.mjs"

package/src/api.mjs

@@ -14,7 +14,7 @@ import { createHash } from "node:crypto";
 // ---------------------------------------------------------------------------
 const CONFIG_PATH = join(homedir(), ".htmlhostrc");
 /** Sent with every request, so the API can tell which version is calling. Kept in step with server.mjs. */
-export const CLIENT_VERSION = "1.6.0";
+export const CLIENT_VERSION = "1.7.0";
 const DEFAULT_API = "https://htmlhost.co";
 
 export function readConfig() {

package/src/server.mjs

@@ -69,7 +69,7 @@ export function createServer() {
       "For focused edits, inspect the element, parent layout and relevant styles first; expand investigation as needed without skipping validation. " +
       "When resuming staged work, verify the original project is unchanged and retain validation failures; never treat a pause as successful completion. " +
       "Keep HTML/CSS/JS as separate files. New pages inherit the site's design, header, footer and dependencies; preserve shared markers and synchronize shared copies. " +
-      "Check references, forms and desktop/mobile rendering with your own tools, and disclose unavailable checks. These hosting tools do not run the editor's validation loop. " +
+      "Check references, forms and desktop/mobile rendering with your own tools, and disclose unavailable checks. A frozen static render cannot verify animation playback. These hosting tools do not run the editor's validation loop. " +
       "Deploy the complete project folder with the existing slug when updating; do not replace a multi-file site with deploy_html or a lone HTML file.",
   });
 
@@ -135,9 +135,11 @@ export function createServer() {
     {
       title: "List sites",
       description:
-        "List the authenticated user's sites on htmlhost.co, and the sites shared with them as a collaborator (`shared`). " +
+        "List the authenticated user's sites on htmlhost.co, and the sites shared with them (`shared`, with the user's `role`). " +
         "Returns slug, URL, title, size, TTL, and expiration for each site. " +
-        "Shared sites can be pulled, deployed to and restored with this key like your own, but only their owner can delete them.",
+        "On a shared site the role decides: admin and editor pull, deploy and restore; contributor pulls and saves drafts " +
+        "(isDraft: true) but can't publish, so ask the owner, an admin or an editor to publish; viewer changes nothing. " +
+        "Only the owner can delete a site.",
       inputSchema: z.object({}),
     },
     wrap(async () => {
@@ -161,6 +163,9 @@ export function createServer() {
         url: `https://${s.slug}.htmlhost.co`,
         title: s.title || null,
         owner: s.owner || null,
+        role: s.role || "editor",
+        canEdit: s.canEdit ?? true,
+        canPublish: s.canPublish ?? true,
         isMultiPage: s.isMultiPage,
         isPublished: s.isPublished,
         draftVersion: s.draftVersion,
@@ -414,7 +419,7 @@ export function createServer() {
 
   server.registerTool("unpublish_site", {
     title: "Unpublish a website",
-    description: "Owner only: stop public serving while retaining files, saved drafts and history. Obtain the user's explicit confirmation first.",
+    description: "For the owner, an admin or an editor: stop public serving while retaining files, saved drafts and history. Obtain the user's explicit confirmation first.",
     inputSchema: z.object({ slug: z.string(), confirm: z.boolean().describe("True only after the user agrees to take this website offline") }),
   }, wrap(async ({ slug, confirm }) => {
     if (!isLoggedIn()) return NOT_SIGNED_IN;