mcpmake 0.1.1 → 0.2.1

package/dist/cloud/web/charts.js

@@ -1,178 +0,0 @@
-/**
- * Server-rendered inline-SVG charts for the admin dashboard.
- *
- * The admin CSP forbids inline scripts and `unsafe-inline` (see `sendHtml` in
- * router.ts), so charts MUST be pure static SVG: no `<script>`, no `onclick`,
- * no inline JS. Hover values are exposed only via `<title>` elements.
- *
- * Every function is a pure `(numbers) -> string`, so they are trivially unit
- * testable and have no runtime dependencies. SVGs use a fixed `viewBox` and NO
- * width/height attributes — they scale to their container via CSS.
- *
- * SECURITY / CORRECTNESS: every numeric input is clamped to a finite number
- * (NaN / Infinity / non-number -> 0) BEFORE it is interpolated into any
- * `points=""`, `d=""`, or coordinate attribute. This is both a correctness
- * guard (a single bad sample can't blow up the whole path) and an injection
- * guard (no caller-controlled string ever reaches the SVG markup; only numbers
- * we produced ourselves are emitted).
- */
-/** Coerce any value to a finite number; NaN / Infinity / non-number -> 0. */
-function finite(n) {
-    return typeof n === 'number' && Number.isFinite(n) ? n : 0;
-}
-/** Round to at most `dp` decimals and return a clean string (no trailing zeros). */
-function fmt(n, dp = 2) {
-    const v = finite(n);
-    return Number(v.toFixed(dp)).toString();
-}
-/** Escape a label for safe inclusion in SVG text / title content. */
-function esc(s) {
-    return String(s)
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;');
-}
-const SPARK_W = 240;
-const SPARK_H = 48;
-/**
- * A single-series trend line (`<polyline>`).
- *
- * Y is scaled to the data's own min/max so small variations stay visible. With
- * 0 or 1 points an empty-but-valid SVG is returned (no NaN coordinates).
- */
-export function renderSparkline(values, opts = {}) {
-    const width = finite(opts.width) || SPARK_W;
-    const height = finite(opts.height) || SPARK_H;
-    const color = opts.color ?? 'var(--color-primary-hover, #8b5cf6)';
-    const unit = opts.unit ?? '';
-    const label = opts.label ?? '';
-    const data = (Array.isArray(values) ? values : []).map(finite);
-    const pad = 3;
-    const innerW = width - pad * 2;
-    const innerH = height - pad * 2;
-    if (data.length === 0) {
-        return `<svg class="chart chart--sparkline" viewBox="0 0 ${width} ${height}" preserveAspectRatio="none" role="img" aria-label="${esc(label || 'No data')}"><title>${esc(label ? label + ': no data' : 'No data')}</title></svg>`;
-    }
-    let min = Math.min(...data);
-    let max = Math.max(...data);
-    if (min === max) {
-        // Flat series — render a centred line rather than divide by zero.
-        min -= 1;
-        max += 1;
-    }
-    const range = max - min;
-    const xStep = data.length > 1 ? innerW / (data.length - 1) : 0;
-    const points = data
-        .map((v, i) => {
-        const x = pad + i * xStep;
-        const y = pad + innerH - ((v - min) / range) * innerH;
-        return `${fmt(x)},${fmt(y)}`;
-    })
-        .join(' ');
-    const last = data[data.length - 1];
-    const lastX = pad + (data.length - 1) * xStep;
-    const lastY = pad + innerH - ((last - min) / range) * innerH;
-    const titleText = label
-        ? `${label}: ${fmt(last, 1)}${unit} (latest)`
-        : `${fmt(last, 1)}${unit} (latest)`;
-    return (`<svg class="chart chart--sparkline" viewBox="0 0 ${width} ${height}" preserveAspectRatio="none" role="img" aria-label="${esc(titleText)}">` +
-        `<title>${esc(titleText)}</title>` +
-        `<polyline fill="none" stroke="${esc(color)}" stroke-width="2" stroke-linejoin="round" stroke-linecap="round" points="${points}" />` +
-        `<circle cx="${fmt(lastX)}" cy="${fmt(lastY)}" r="2.5" fill="${esc(color)}" />` +
-        `</svg>`);
-}
-const BARS_W = 240;
-const BARS_H = 80;
-/**
- * A simple vertical bar chart. Bars are scaled to the data max (0-baselined).
- */
-export function renderBars(values, opts = {}) {
-    const width = finite(opts.width) || BARS_W;
-    const height = finite(opts.height) || BARS_H;
-    const color = opts.color ?? 'var(--color-primary, #7c3aed)';
-    const unit = opts.unit ?? '';
-    const label = opts.label ?? '';
-    const labels = Array.isArray(opts.labels) ? opts.labels : [];
-    const data = (Array.isArray(values) ? values : []).map(finite);
-    const pad = 3;
-    const innerW = width - pad * 2;
-    const innerH = height - pad * 2;
-    if (data.length === 0) {
-        return `<svg class="chart chart--bars" viewBox="0 0 ${width} ${height}" preserveAspectRatio="none" role="img" aria-label="${esc(label || 'No data')}"><title>${esc(label ? label + ': no data' : 'No data')}</title></svg>`;
-    }
-    const max = Math.max(0, ...data);
-    const denom = max > 0 ? max : 1;
-    const slot = innerW / data.length;
-    const gap = Math.min(slot * 0.25, 3);
-    const barW = Math.max(slot - gap, 0.5);
-    const bars = data
-        .map((v, i) => {
-        const h = (Math.max(v, 0) / denom) * innerH;
-        const x = pad + i * slot + gap / 2;
-        const y = pad + innerH - h;
-        const lbl = labels[i] ? `${labels[i]}: ` : '';
-        const titleText = `${lbl}${fmt(v, 1)}${unit}`;
-        return (`<rect x="${fmt(x)}" y="${fmt(y)}" width="${fmt(barW)}" height="${fmt(h)}" rx="1" fill="${esc(color)}">` +
-            `<title>${esc(titleText)}</title>` +
-            `</rect>`);
-    })
-        .join('');
-    return (`<svg class="chart chart--bars" viewBox="0 0 ${width} ${height}" preserveAspectRatio="none" role="img" aria-label="${esc(label || 'Bar chart')}">` +
-        `<title>${esc(label || 'Bar chart')}</title>` +
-        bars +
-        `</svg>`);
-}
-const DUAL_W = 480;
-const DUAL_H = 140;
-/**
- * Two overlaid trend lines on a shared Y scale — built for the
- * requests-vs-errors time series. Both series share one min/max so they are
- * visually comparable. Missing / short series degrade gracefully.
- */
-export function renderDualLine(seriesA, seriesB, opts = {}) {
-    const width = finite(opts.width) || DUAL_W;
-    const height = finite(opts.height) || DUAL_H;
-    const colorA = opts.colorA ?? 'var(--color-primary-hover, #8b5cf6)';
-    const colorB = opts.colorB ?? 'var(--color-error, #ef4444)';
-    const labelA = opts.labelA ?? 'Series A';
-    const labelB = opts.labelB ?? 'Series B';
-    const unit = opts.unit ?? '';
-    const a = (Array.isArray(seriesA) ? seriesA : []).map(finite);
-    const b = (Array.isArray(seriesB) ? seriesB : []).map(finite);
-    const n = Math.max(a.length, b.length);
-    const pad = 6;
-    const innerW = width - pad * 2;
-    const innerH = height - pad * 2;
-    const ariaLabel = `${labelA} vs ${labelB}`;
-    if (n === 0) {
-        return `<svg class="chart chart--dual" viewBox="0 0 ${width} ${height}" preserveAspectRatio="none" role="img" aria-label="${esc(ariaLabel)}"><title>${esc(ariaLabel + ': no data')}</title></svg>`;
-    }
-    const all = [...a, ...b];
-    let min = Math.min(0, ...all);
-    let max = Math.max(...all);
-    if (min === max)
-        max = min + 1;
-    const range = max - min;
-    const xStep = n > 1 ? innerW / (n - 1) : 0;
-    const toPoints = (series) => series
-        .map((v, i) => {
-        const x = pad + i * xStep;
-        const y = pad + innerH - ((v - min) / range) * innerH;
-        return `${fmt(x)},${fmt(y)}`;
-    })
-        .join(' ');
-    const lastA = a.length ? a[a.length - 1] : 0;
-    const lastB = b.length ? b[b.length - 1] : 0;
-    const lineA = a.length
-        ? `<polyline fill="none" stroke="${esc(colorA)}" stroke-width="2" stroke-linejoin="round" stroke-linecap="round" points="${toPoints(a)}"><title>${esc(`${labelA}: ${fmt(lastA, 1)}${unit} (latest)`)}</title></polyline>`
-        : '';
-    const lineB = b.length
-        ? `<polyline fill="none" stroke="${esc(colorB)}" stroke-width="2" stroke-linejoin="round" stroke-linecap="round" points="${toPoints(b)}"><title>${esc(`${labelB}: ${fmt(lastB, 1)}${unit} (latest)`)}</title></polyline>`
-        : '';
-    return (`<svg class="chart chart--dual" viewBox="0 0 ${width} ${height}" preserveAspectRatio="none" role="img" aria-label="${esc(ariaLabel)}">` +
-        `<title>${esc(ariaLabel)}</title>` +
-        lineA +
-        lineB +
-        `</svg>`);
-}

package/dist/cloud/web/csrf.d.ts

@@ -1,14 +0,0 @@
-/**
- * CSRF protection for form submissions.
- *
- * Validates the _csrf field in POST bodies against the session's csrf token.
- */
-interface SessionLike {
-    csrfToken: string;
-}
-/**
- * Validate CSRF token from a form submission against the session.
- * Checks that `body._csrf` matches `session.csrfToken`.
- */
-export declare function validateCsrf(_req: import('node:http').IncomingMessage, body: Record<string, string>, session: SessionLike): boolean;
-export {};

package/dist/cloud/web/csrf.js

@@ -1,22 +0,0 @@
-/**
- * CSRF protection for form submissions.
- *
- * Validates the _csrf field in POST bodies against the session's csrf token.
- */
-/**
- * Validate CSRF token from a form submission against the session.
- * Checks that `body._csrf` matches `session.csrfToken`.
- */
-export function validateCsrf(_req, body, session) {
-    const formToken = body._csrf;
-    if (!formToken || typeof formToken !== 'string')
-        return false;
-    if (formToken.length !== session.csrfToken.length)
-        return false;
-    // Constant-time comparison
-    let diff = 0;
-    for (let i = 0; i < formToken.length; i++) {
-        diff |= formToken.charCodeAt(i) ^ session.csrfToken.charCodeAt(i);
-    }
-    return diff === 0;
-}

package/dist/cloud/web/docs.d.ts

@@ -1,40 +0,0 @@
-/**
- * In-app documentation: renders the project's Markdown docs to HTML so users
- * can read them in the web app. The product is proprietary, so we never expose
- * the raw `.md` files — only this rendered, curated subset is served.
- */
-export interface DocMeta {
-    /** URL slug under /docs/ */
-    slug: string;
-    /** Display title (sidebar + page heading) */
-    title: string;
-    /** Source filename in the docs/ directory */
-    file: string;
-    /** Short description (index cards + meta description) */
-    description: string;
-    /** Sidebar grouping */
-    category: string;
-}
-/**
- * The user-facing docs surfaced in the web app, in display order. Internal
- * drafts (e.g. the Show HN copy, the spec-migration engineering note) are
- * intentionally excluded.
- */
-export declare const DOCS: DocMeta[];
-export declare function getDoc(slug: string): DocMeta | undefined;
-/** Sidebar model grouped by category, with the active doc flagged. */
-export declare function getSidebar(activeSlug?: string): Array<{
-    category: string;
-    items: Array<{
-        slug: string;
-        title: string;
-        active: boolean;
-    }>;
-}>;
-/**
- * Render a doc to HTML (cached). Returns null if the slug is unknown or the
- * source file can't be read.
- */
-export declare function renderDoc(slug: string): string | null;
-/** Build the /docs overview HTML (cards grouped by category). */
-export declare function renderDocsIndexHtml(): string;

package/dist/cloud/web/docs.js

@@ -1,174 +0,0 @@
-/**
- * In-app documentation: renders the project's Markdown docs to HTML so users
- * can read them in the web app. The product is proprietary, so we never expose
- * the raw `.md` files — only this rendered, curated subset is served.
- */
-import { readFileSync, existsSync } from 'node:fs';
-import { resolve, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { marked } from 'marked';
-const __dirname = dirname(fileURLToPath(import.meta.url));
-/**
- * The user-facing docs surfaced in the web app, in display order. Internal
- * drafts (e.g. the Show HN copy, the spec-migration engineering note) are
- * intentionally excluded.
- */
-export const DOCS = [
-    {
-        slug: 'quickstart',
-        title: 'Cloud Quickstart',
-        file: 'quickstart.md',
-        description: 'Deploy a hosted MCP server and connect it to Claude, Cursor, or any MCP client.',
-        category: 'Getting started',
-    },
-    {
-        slug: 'website-servers',
-        title: 'Website MCP servers',
-        file: 'website-servers.md',
-        description: 'Generate, run, and keep website-based servers fresh (from url / from website / rescan).',
-        category: 'Guides',
-    },
-    {
-        slug: 'migrate-from-stainless',
-        title: 'Migrate off Stainless',
-        file: 'migrate-from-stainless.md',
-        description: 'Move from a generated Stainless SDK to an MCP server you own.',
-        category: 'Guides',
-    },
-    {
-        slug: 'cli',
-        title: 'CLI reference',
-        file: 'cli.md',
-        description: 'Every command, flag, default, and environment variable.',
-        category: 'Reference',
-    },
-];
-const DOC_BY_SLUG = new Map(DOCS.map((d) => [d.slug, d]));
-const SLUG_BY_FILE = new Map(DOCS.map((d) => [d.file, d.slug]));
-/** Resolve the docs/ directory across dev (tsx) and prod (dist) layouts. */
-function resolveDocsDir() {
-    const candidates = [
-        process.env.MCPMAKE_DOCS_DIR,
-        resolve(__dirname, '../../docs'), // dist/cloud/web -> dist/docs (build copy)
-        resolve(__dirname, '../../../docs'), // repo root from src/ or dist/ layout
-        resolve(process.cwd(), 'docs'),
-    ].filter((c) => Boolean(c));
-    for (const c of candidates) {
-        if (existsSync(resolve(c, 'cli.md')))
-            return c;
-    }
-    return resolve(__dirname, '../../../docs');
-}
-const DOCS_DIR = resolveDocsDir();
-const htmlCache = new Map();
-export function getDoc(slug) {
-    return DOC_BY_SLUG.get(slug);
-}
-/** Sidebar model grouped by category, with the active doc flagged. */
-export function getSidebar(activeSlug) {
-    const groups = [];
-    for (const d of DOCS) {
-        let group = groups.find((g) => g.category === d.category);
-        if (!group) {
-            group = { category: d.category, items: [] };
-            groups.push(group);
-        }
-        group.items.push({ slug: d.slug, title: d.title, active: d.slug === activeSlug });
-    }
-    return groups;
-}
-/**
- * Render a doc to HTML (cached). Returns null if the slug is unknown or the
- * source file can't be read.
- */
-export function renderDoc(slug) {
-    const meta = DOC_BY_SLUG.get(slug);
-    if (!meta)
-        return null;
-    const cached = htmlCache.get(slug);
-    if (cached !== undefined)
-        return cached;
-    let md;
-    try {
-        md = readFileSync(resolve(DOCS_DIR, meta.file), 'utf-8');
-    }
-    catch {
-        return null;
-    }
-    const html = renderMarkdown(md);
-    htmlCache.set(slug, html);
-    return html;
-}
-/** Build the /docs overview HTML (cards grouped by category). */
-export function renderDocsIndexHtml() {
-    const groups = getSidebar();
-    const sections = groups
-        .map((g) => {
-        const cards = g.items
-            .map((item) => {
-            const meta = DOC_BY_SLUG.get(item.slug);
-            return `<a class="docs-card" href="/docs/${meta.slug}"><h3>${escapeHtml(meta.title)}</h3><p>${escapeHtml(meta.description)}</p></a>`;
-        })
-            .join('');
-        return `<h2 id="${slugify(g.category)}">${escapeHtml(g.category)}</h2><div class="docs-card-grid">${cards}</div>`;
-    })
-        .join('');
-    return `<h1>Documentation</h1><p>Guides and reference for generating, deploying, and maintaining MCP servers with mcpmake.</p>${sections}`;
-}
-// ---------------------------------------------------------------------------
-// Markdown rendering
-// ---------------------------------------------------------------------------
-function renderMarkdown(md) {
-    const rewritten = rewriteInternalLinks(md);
-    const raw = marked.parse(rewritten, { gfm: true, async: false });
-    return addHeadingIds(raw);
-}
-/**
- * Rewrite repo-relative Markdown links so they resolve inside the web app:
- *   website-servers.md#x  -> /docs/website-servers#x
- *   ../README.md#x        -> /#x   (no in-app README page)
- * External URLs, absolute paths, and bare anchors are left untouched.
- */
-function rewriteInternalLinks(md) {
-    return md.replace(/\]\(([^)]+)\)/g, (match, rawTarget) => {
-        const target = rawTarget.trim();
-        if (/^(https?:|mailto:|#|\/)/.test(target))
-            return match;
-        const fileMatch = target.match(/^(?:\.\.\/)?([\w.-]+\.md)(#[^)]*)?$/i);
-        if (!fileMatch)
-            return match;
-        const file = fileMatch[1];
-        const anchor = fileMatch[2] ?? '';
-        const slug = SLUG_BY_FILE.get(file);
-        if (slug)
-            return `](/docs/${slug}${anchor})`;
-        if (/^readme\.md$/i.test(file))
-            return `](/${anchor})`;
-        // A doc we don't surface in-app: point at the docs index.
-        return `](/docs${anchor})`;
-    });
-}
-/** Add GitHub-style id attributes to headings so in-page anchors work. */
-function addHeadingIds(html) {
-    return html.replace(/<h([1-6])>([\s\S]*?)<\/h\1>/g, (_m, level, inner) => {
-        const text = inner.replace(/<[^>]+>/g, '');
-        const id = slugify(text);
-        return id ? `<h${level} id="${id}">${inner}</h${level}>` : `<h${level}>${inner}</h${level}>`;
-    });
-}
-function slugify(text) {
-    return text
-        .toLowerCase()
-        .trim()
-        .replace(/[^\w\s-]/g, '')
-        .replace(/\s+/g, '-')
-        .replace(/-+/g, '-')
-        .replace(/^-+|-+$/g, '');
-}
-function escapeHtml(s) {
-    return s
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;');
-}

package/dist/cloud/web/router.d.ts

@@ -1,25 +0,0 @@
-/**
- * Web route handler — serves HTML pages and static assets.
- *
- * Called before API routes in the main server. Returns `true` if the
- * request was handled, `false` to fall through to API routes.
- */
-import http from 'node:http';
-import type { ServerStore, PortAllocator } from '../store.js';
-import type { MetricsStore } from '../metrics.js';
-export interface WebContext {
-    domain: string;
-    store: ServerStore;
-    ports: PortAllocator;
-    metrics: MetricsStore;
-}
-/**
- * Handle web requests (HTML pages and static files).
- *
- * @returns `true` if handled, `false` to fall through to API routes.
- */
-export declare function handleWebRequest(req: http.IncomingMessage, res: http.ServerResponse, context: WebContext): Promise<boolean>;
-/**
- * Render a 500 error page. Exported for use in the main server error handler.
- */
-export declare function render500Page(res: http.ServerResponse): void;