myhotlunchbox-mcp 0.1.0 → 0.2.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for My Hot Lunchbox — order school lunches, manage students, and track payments via natural language",
-    "version": "0.1.0"
+    "version": "0.2.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "My Hot Lunchbox",
       "source": "./",
       "description": "MCP server for My Hot Lunchbox — school lunch calendar, ordering, and payments. Signs in server-side with the parent account credentials.",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "myhotlunchbox-mcp",
   "displayName": "My Hot Lunchbox",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "MCP server for My Hot Lunchbox — order school lunches, manage students, and track payments via natural language",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -31736,6 +31736,10 @@ var MhlbAuth = class _MhlbAuth {
 };
 
 // src/client.ts
+var PDF_MAGIC = [37, 80, 68, 70];
+function isPdf(bytes) {
+  return bytes.length >= PDF_MAGIC.length && PDF_MAGIC.every((b, i) => bytes[i] === b);
+}
 function buildQuery(query) {
   if (!query) return "";
   const params = new URLSearchParams();
@@ -31867,10 +31871,12 @@ var MhlbClient = class {
     }
     const contentType = res.headers.get("content-type") ?? "application/octet-stream";
     const bytes = new Uint8Array(await res.arrayBuffer());
-    if (/text\/html|application\/json/i.test(contentType)) {
+    if (!isPdf(bytes)) {
       throw new McpToolError(
-        `My Hot Lunchbox returned ${contentType} for POST ${path}, not a document.`,
-        { hint: "The session may have lapsed. Run mhlb_session_reset and retry." }
+        `My Hot Lunchbox returned ${contentType} for POST ${path}, not a PDF.`,
+        {
+          hint: "The session may have lapsed into a sign-in page. Run mhlb_session_reset and retry; if it persists, check the request arguments."
+        }
       );
     }
     return { bytes, contentType };
@@ -31885,7 +31891,7 @@ var MhlbClient = class {
 };
 
 // src/version.ts
-var VERSION = "0.1.0";
+var VERSION = "0.2.0";
 
 // src/tools/_shared.ts
 function preview(action, request, notes) {
@@ -32378,20 +32384,38 @@ function findTotal(payload) {
 }
 
 // src/tools/reports.ts
-import { mkdirSync, writeFileSync, existsSync } from "node:fs";
+import { mkdirSync, writeFileSync } from "node:fs";
 import { isAbsolute, join, resolve } from "node:path";
 var MAX_INLINE_BYTES = 75e4;
 function outputDir(env = process.env) {
   const configured = readEnvVar("MYHOTLUNCHBOX_OUTPUT_DIR", { env });
   return configured ? resolve(configured) : process.cwd();
 }
-function nonClobberingPath(dir, filename) {
+function* candidateNames(filename) {
   const dot = filename.lastIndexOf(".");
   const stem = dot > 0 ? filename.slice(0, dot) : filename;
   const ext = dot > 0 ? filename.slice(dot) : "";
-  let candidate = join(dir, filename);
-  for (let n = 2; existsSync(candidate); n += 1) candidate = join(dir, `${stem} (${n})${ext}`);
-  return candidate;
+  yield filename;
+  for (let n = 2; ; n += 1) yield `${stem} (${n})${ext}`;
+}
+var MAX_NAME_ATTEMPTS = 1e3;
+function writeWithoutClobbering(dir, filename, bytes) {
+  let attempts = 0;
+  for (const name of candidateNames(filename)) {
+    if (attempts >= MAX_NAME_ATTEMPTS) break;
+    attempts += 1;
+    const candidate = join(dir, name);
+    try {
+      writeFileSync(candidate, bytes, { flag: "wx" });
+      return candidate;
+    } catch (err) {
+      if (err.code !== "EEXIST") throw err;
+    }
+  }
+  throw new McpToolError(
+    `Could not find a free filename for "${filename}" in ${dir} after ${MAX_NAME_ATTEMPTS} attempts.`,
+    { hint: "Clear out old reports, pass an explicit filename, or set MYHOTLUNCHBOX_OUTPUT_DIR elsewhere." }
+  );
 }
 function safeName(name) {
   if (name.trim() === "") {
@@ -32425,9 +32449,9 @@ function deliver(bytes, contentType, filename, inline) {
   let path;
   try {
     mkdirSync(dir, { recursive: true });
-    path = nonClobberingPath(dir, filename);
-    writeFileSync(path, bytes);
+    path = writeWithoutClobbering(dir, filename, bytes);
   } catch (cause) {
+    if (cause instanceof McpToolError) throw cause;
     throw new McpToolError(`Could not write the report into ${dir}.`, {
       hint: "Set MYHOTLUNCHBOX_OUTPUT_DIR to a writable directory, or call again with inline: true.",
       cause

package/dist/client.js

@@ -1,6 +1,12 @@
 import { McpToolError, RateLimitError, UnreachableError, truncateErrorMessage } from '@chrischall/mcp-utils';
 import { MhlbAuth, scrubCredentials } from './auth.js';
 import { API_PREFIX, loadConfig } from './config.js';
+/** `%PDF` — the four magic bytes every PDF starts with. */
+const PDF_MAGIC = [0x25, 0x50, 0x44, 0x46];
+/** Whether a body really is a PDF, regardless of what the header claimed. */
+export function isPdf(bytes) {
+    return bytes.length >= PDF_MAGIC.length && PDF_MAGIC.every((b, i) => bytes[i] === b);
+}
 /**
  * Build a query string, dropping unset entries so an absent optional never
  * serializes as the literal `"undefined"`.
@@ -132,10 +138,15 @@ export class MhlbClient {
         }
         const contentType = res.headers.get('content-type') ?? 'application/octet-stream';
         const bytes = new Uint8Array(await res.arrayBuffer());
-        // A 200 carrying HTML is the session having lapsed into a sign-in page.
-        // Writing that to disk as a .pdf would look like success.
-        if (/text\/html|application\/json/i.test(contentType)) {
-            throw new McpToolError(`My Hot Lunchbox returned ${contentType} for POST ${path}, not a document.`, { hint: 'The session may have lapsed. Run mhlb_session_reset and retry.' });
+        // Check the bytes, not the header. A deny-list of content types misses
+        // `text/plain` and a response with no content-type at all, either of which
+        // would be written to disk as a `.pdf` and look like success. The magic
+        // bytes are already in hand, and they are total.
+        if (!isPdf(bytes)) {
+            throw new McpToolError(`My Hot Lunchbox returned ${contentType} for POST ${path}, not a PDF.`, {
+                hint: 'The session may have lapsed into a sign-in page. Run mhlb_session_reset and retry; ' +
+                    'if it persists, check the request arguments.',
+            });
         }
         return { bytes, contentType };
     }

package/dist/tools/reports.js

@@ -1,4 +1,4 @@
-import { mkdirSync, writeFileSync, existsSync } from 'node:fs';
+import { mkdirSync, writeFileSync } from 'node:fs';
 import { isAbsolute, join, resolve } from 'node:path';
 import { McpToolError, readEnvVar, toolAnnotations, PositiveInt, IsoDate } from '@chrischall/mcp-utils';
 import { z } from 'zod';
@@ -16,15 +16,43 @@ export function outputDir(env = process.env) {
     const configured = readEnvVar('MYHOTLUNCHBOX_OUTPUT_DIR', { env });
     return configured ? resolve(configured) : process.cwd();
 }
-/** Append ` (2)`, ` (3)`, … rather than clobbering an existing report. */
-export function nonClobberingPath(dir, filename) {
+/** Candidate names in order: `r.pdf`, `r (2).pdf`, `r (3).pdf`, … */
+export function* candidateNames(filename) {
     const dot = filename.lastIndexOf('.');
     const stem = dot > 0 ? filename.slice(0, dot) : filename;
     const ext = dot > 0 ? filename.slice(dot) : '';
-    let candidate = join(dir, filename);
-    for (let n = 2; existsSync(candidate); n += 1)
-        candidate = join(dir, `${stem} (${n})${ext}`);
-    return candidate;
+    yield filename;
+    for (let n = 2;; n += 1)
+        yield `${stem} (${n})${ext}`;
+}
+/** How many suffixed names to try before giving up. Exported so tests track
+ * the real limit rather than hardcoding a copy of it. */
+export const MAX_NAME_ATTEMPTS = 1000;
+/**
+ * Write the report without ever overwriting an existing file.
+ *
+ * `existsSync` followed by a default-flag `writeFileSync` is a TOCTOU race:
+ * two concurrent print calls landing on the same default filename both see it
+ * free and the second silently clobbers the first. `wx` makes the check and
+ * the create one atomic operation, so the loser retries the next name instead.
+ */
+export function writeWithoutClobbering(dir, filename, bytes) {
+    let attempts = 0;
+    for (const name of candidateNames(filename)) {
+        if (attempts >= MAX_NAME_ATTEMPTS)
+            break;
+        attempts += 1;
+        const candidate = join(dir, name);
+        try {
+            writeFileSync(candidate, bytes, { flag: 'wx' });
+            return candidate;
+        }
+        catch (err) {
+            if (err.code !== 'EEXIST')
+                throw err;
+        }
+    }
+    throw new McpToolError(`Could not find a free filename for "${filename}" in ${dir} after ${MAX_NAME_ATTEMPTS} attempts.`, { hint: 'Clear out old reports, pass an explicit filename, or set MYHOTLUNCHBOX_OUTPUT_DIR elsewhere.' });
 }
 /** Reject a filename that would escape the output directory. */
 function safeName(name) {
@@ -56,10 +84,13 @@ function deliver(bytes, contentType, filename, inline) {
     let path;
     try {
         mkdirSync(dir, { recursive: true });
-        path = nonClobberingPath(dir, filename);
-        writeFileSync(path, bytes);
+        path = writeWithoutClobbering(dir, filename, bytes);
     }
     catch (cause) {
+        // Let an already-actionable error through rather than burying it under a
+        // generic permissions message.
+        if (cause instanceof McpToolError)
+            throw cause;
         throw new McpToolError(`Could not write the report into ${dir}.`, {
             hint: 'Set MYHOTLUNCHBOX_OUTPUT_DIR to a writable directory, or call again with inline: true.',
             cause,

package/dist/version.js

@@ -1,2 +1,2 @@
 /** Single source of truth for the server version; release-please rewrites it. */
-export const VERSION = '0.1.0'; // x-release-please-version
+export const VERSION = '0.2.0'; // x-release-please-version

package/mint.yaml

@@ -0,0 +1,68 @@
+# How this MCP wants to be hosted on mcp-host (see mcp-host/docs/HOSTING-MANIFEST.md).
+#
+# The FILENAME is load-bearing: mcp-host matches it exactly, against
+# HOSTING_MANIFEST_FILE in packages/core/src/hosting-manifest-schema.ts. A name
+# the reader does not expect is not an error — it is simply never found, and the
+# registration preview falls back to inference with nothing to notice. If this
+# file ever looks ignored, check that constant first.
+#
+# This file is a PROPOSAL, never an application. It is read at the resolved pin
+# by the registration preview and rendered for a human; nothing here changes a
+# registration until an owner saves it through the ordinary write path. It is
+# NOT covered by the tarball integrity check, so it carries no secrets and
+# nothing that decides what runs.
+version: 1
+
+name: My Hot Lunchbox
+slug: myhotlunchbox
+summary: School lunch calendar, ordering and payments for a My Hot Lunchbox parent account.
+
+env:
+  - name: MYHOTLUNCHBOX_USERNAME
+    secret: false
+    required: true
+    help: The email address you sign in to ordernow.myhotlunchbox.com with.
+
+  - name: MYHOTLUNCHBOX_PASSWORD
+    secret: true
+    required: true
+    # No default, deliberately: this is the credential itself.
+    help: >-
+      Password for that account. Used for a server-side OAuth2 password grant;
+      the refresh token it returns renews the session, so no browser or
+      extension is involved and nothing is written to disk.
+
+  - name: MYHOTLUNCHBOX_BASE_URL
+    secret: false
+    required: false
+    default: https://ordernow.myhotlunchbox.com
+    help: Origin of the ordering app. Override only if it moves.
+
+  - name: MYHOTLUNCHBOX_OUTPUT_DIR
+    secret: false
+    required: false
+    # No default: on a hosted child the working directory is the runner's, not
+    # the caller's, so a written file is somewhere they cannot reach. Left unset
+    # so the path in the result is at least honest about being server-side.
+    help: >-
+      Directory the three print tools write PDFs into. On a hosted registration
+      the filesystem belongs to the runner, so prefer calling those tools with
+      inline: true and taking the bytes back in the result.
+
+state:
+  # Sessions live in memory for the life of the child and are re-established by
+  # signing in again, so a cold start costs one login and loses nothing.
+  dataDir: false
+
+identity:
+  # Credentials are per-registration secrets, not per-caller, so one shared
+  # child is correct. Setting this true would cost a uid and a state dir per
+  # caller and buy nothing.
+  perUserChild: false
+
+egress:
+  # Every request goes to the ordering app; there is no other upstream, no
+  # analytics and no browser bridge. Honoured on the isolated tier, a proposal
+  # elsewhere.
+  allow:
+    - ordernow.myhotlunchbox.com

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "myhotlunchbox-mcp",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "mcpName": "io.github.chrischall/myhotlunchbox-mcp",
   "description": "My Hot Lunchbox MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -30,7 +30,8 @@
     ".claude-plugin",
     "skills/",
     ".mcp.json",
-    "server.json"
+    "server.json",
+    "mint.yaml"
   ],
   "scripts": {
     "build": "tsc && npm run bundle",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/myhotlunchbox-mcp",
     "source": "github"
   },
-  "version": "0.1.0",
+  "version": "0.2.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "myhotlunchbox-mcp",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "transport": {
         "type": "stdio"
       },

package/skills/myhotlunchbox/references/endpoints.md

@@ -101,7 +101,9 @@ mhlb_pdf /parentReports/printOrders \
   '{"orderStatus":1,"eventDate":"2026-09-14","studentIds":[111627]}' \
   'Orders Details.pdf'
 
-# One transaction receipt — send the whole record from transactionsList
+# One transaction receipt — send the record from transactionDetails.
+# (A transactionsList ROW is a different shape and renders a thinner PDF;
+#  the list is only used here to get the id.)
 ID=$(mhlb_get /event/transactionsList | jq -r '.transactions[0].id')
 mhlb_get "/event/transactionDetails?id=$ID" | jq -c '. + {isCreditType:false}' > tx.json
 mhlb_pdf /parentReports/printTransactions "$(cat tx.json)" 'Transaction.pdf'
@@ -113,12 +115,8 @@ date and status. Treat a 500 from either as a bad request, not an outage.
 
 `printTransactions` wants the record from `/event/transactionDetails`, **not** a
 row from `/event/transactionsList` — both render, but they are different shapes
-and different documents. Get the id from the list, then fetch the record:
-
-```sh
-ID=$(mhlb_get /event/transactionsList | jq -r '.transactions[0].id')
-mhlb_get "/event/transactionDetails?id=$ID" | jq -c '. + {isCreditType:false}' > tx.json
-```
+and different documents. The list is only used to get the id, as the recipe
+above does.
 
 ## Writes — all UNVERIFIED