nix-packages-mcp 1.0.0 → 1.0.1

package/README.md

@@ -18,3 +18,22 @@ node dist/index.js
 ```
 
 Data comes from the public nixpkgs channel.
+
+<!-- paywall -->
+## Premium tools
+
+These tools need a license key:
+
+* `list_attributes`
+* `attribute_groups`
+
+Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-nix-packages-mcp and set it in your MCP client config:
+
+```json
+"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
+```
+
+The key is checked against MCP Marketplace, cached for 24 hours, and keeps
+working offline once one check has succeeded. Every other tool on this server
+stays free.
+<!-- /paywall -->

package/dist/api.js

@@ -36,3 +36,148 @@ export async function search(args) {
         })
             .join('\n');
 }
+// ---- muxB tools:
+// channels.nixos.org's packages.json is gone, but two things it did not serve
+// are still published: the nix-releases bucket holds the channel release index,
+// and all-packages.nix in the nixpkgs tree is the authoritative attribute set.
+const RELEASES_BUCKET = 'https://nix-releases.s3.amazonaws.com';
+const ALL_PACKAGES_RAW = 'https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix';
+let releaseCache = new Map();
+let attributeCache = null;
+async function s3List(params, pages) {
+    const chunks = [];
+    let token = '';
+    for (let page = 0; page < pages; page++) {
+        const query = new URLSearchParams(params);
+        if (token)
+            query.set('continuation-token', token);
+        const res = await fetch(`${RELEASES_BUCKET}/?${query.toString()}`, {
+            headers: { 'User-Agent': 'mrfentmen-nix-packages-mcp/1.0' },
+            signal: AbortSignal.timeout(25000),
+        });
+        if (!res.ok)
+            throw new Error(`nix-releases bucket returned ${res.status}`);
+        const xml = await res.text();
+        chunks.push(xml.replace(/^[\s\S]*?<ListBucketResult[^>]*>/, '').replace(/<\/ListBucketResult>[\s\S]*$/, ''));
+        const next = /<NextContinuationToken>([^<]+)<\/NextContinuationToken>/.exec(xml);
+        if (!/<IsTruncated>true<\/IsTruncated>/.test(xml) || !next)
+            break;
+        token = next[1];
+    }
+    return chunks.join('');
+}
+// Everything under one channel directory, newest release first. A release
+// directory is a key with exactly two path segments under nixpkgs/.
+async function getReleases(series) {
+    const cached = releaseCache.get(series);
+    if (cached)
+        return cached;
+    const params = new URLSearchParams({ 'list-type': '2', prefix: `nixpkgs/${series}`, 'max-keys': '1000' });
+    const xml = await s3List(params, 6);
+    const rows = [];
+    const pattern = /<Key>([^<]+)<\/Key><LastModified>([^<]+)<\/LastModified>.*?<Size>(\d+)<\/Size>/g;
+    for (const m of xml.matchAll(pattern)) {
+        const parts = m[1].split('/');
+        if (parts.length !== 3)
+            continue;
+        rows.push({ series: parts[1], release: parts[2], modified: m[2], size: Number(m[3]) });
+    }
+    rows.sort((a, b) => b.modified.localeCompare(a.modified) || b.release.localeCompare(a.release));
+    releaseCache.set(series, rows);
+    return rows;
+}
+async function getAttributes() {
+    if (attributeCache)
+        return attributeCache;
+    const res = await fetch(ALL_PACKAGES_RAW, {
+        headers: { 'User-Agent': 'mrfentmen-nix-packages-mcp/1.0' },
+        signal: AbortSignal.timeout(40000),
+    });
+    if (!res.ok)
+        throw new Error(`raw.githubusercontent.com returned ${res.status}`);
+    const text = await res.text();
+    const out = [];
+    let group = '(ungrouped)';
+    for (const line of text.split('\n')) {
+        const head = /^ {2}###\s*(.+?)\.?\s*$/.exec(line);
+        if (head) {
+            group = head[1];
+            continue;
+        }
+        const attr = /^ {2}([A-Za-z_][A-Za-z0-9_.'-]*)\s*=\s*/.exec(line);
+        if (attr)
+            out.push({ attr: attr[1], group });
+    }
+    if (!out.length)
+        throw new Error('Could not read any top-level attributes out of all-packages.nix.');
+    attributeCache = out;
+    return out;
+}
+export async function listReleases(args) {
+    const series = (args.series ?? '').trim();
+    const limit = Math.max(1, Math.min(args.limit ?? 10, 40));
+    if (!series) {
+        // No filter: the channel directory listing, one level down.
+        const xml = await s3List(new URLSearchParams({ 'list-type': '2', prefix: 'nixpkgs/', delimiter: '/', 'max-keys': '1000' }), 3);
+        const channels = [];
+        for (const m of xml.matchAll(/<CommonPrefixes><Prefix>nixpkgs\/([^/<]+)\/<\/Prefix><\/CommonPrefixes>/g)) {
+            // The delimiter listing mixes channel directories (25.05) with every
+            // individual release directory (nixpkgs-25.05pre801581.abc); only the
+            // version-shaped names are channels.
+            if (/^\d\d(\.\d+)*(-[a-z0-9]+)*$/.test(m[1]))
+                channels.push(m[1]);
+        }
+        channels.sort((a, b) => b.localeCompare(a));
+        if (!channels.length)
+            throw new Error('The nix-releases bucket listed no nixpkgs channel directories.');
+        return [
+            `nixpkgs channels published in the nix-releases bucket - ${channels.length} channel directories, newest first, showing ${Math.min(limit, channels.length)}:`,
+            ...channels.slice(0, limit).map((c, i) => `${i + 1}. nixpkgs/${c}`),
+            channels.length > limit ? `...and ${channels.length - limit} older channels, raise limit to see them.` : '',
+        ]
+            .filter(Boolean)
+            .join('\n');
+    }
+    if (!/^[0-9][0-9A-Za-z.-]*$/.test(series))
+        throw new Error(`Series must look like 25.05 or 25.05-darwin, got "${series}".`);
+    const rows = await getReleases(series);
+    if (!rows.length)
+        return `The nix-releases bucket has no releases under nixpkgs/${series}.`;
+    return [
+        `nixpkgs ${series} channel releases, newest published first - ${rows.length} release directories, showing ${Math.min(limit, rows.length)}:`,
+        ...rows.slice(0, limit).map((r, i) => `${i + 1}. [${r.series}] ${r.release}\n   published ${r.modified.slice(0, 10)} · directory entry ${(r.size / 1024).toFixed(1)} KiB`),
+        rows.length > limit ? `...and ${rows.length - limit} older releases, raise limit to see them.` : '',
+    ]
+        .filter(Boolean)
+        .join('\n');
+}
+export async function listAttributes(args) {
+    const group = (args.group ?? '').trim().toLowerCase();
+    const limit = Math.max(1, Math.min(args.limit ?? 25, 200));
+    const all = await getAttributes();
+    const rows = group ? all.filter((a) => a.group.toLowerCase().includes(group)) : all;
+    if (!rows.length)
+        return `No top-level attribute falls in a group matching "${args.group ?? ''}".`;
+    return [
+        `Top-level nixpkgs attributes${group ? ` in groups matching "${args.group}"` : ''} - ${rows.length} of ${all.length}, showing ${Math.min(limit, rows.length)}:`,
+        ...rows.slice(0, limit).map((a, i) => `${i + 1}. ${a.attr}  [${a.group}]`),
+        rows.length > limit ? `...and ${rows.length - limit} more, raise limit to see them.` : '',
+    ]
+        .filter(Boolean)
+        .join('\n');
+}
+export async function attributeGroups(args) {
+    const limit = Math.max(1, Math.min(args.limit ?? 20, 60));
+    const all = await getAttributes();
+    const counts = new Map();
+    for (const a of all)
+        counts.set(a.group, (counts.get(a.group) ?? 0) + 1);
+    const sorted = [...counts.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]));
+    return [
+        `Top-level attributes in all-packages.nix by group - ${all.length} attributes in ${sorted.length} groups, showing ${Math.min(limit, sorted.length)}:`,
+        ...sorted.slice(0, limit).map(([g, n], i) => `${i + 1}. ${g}: ${n} attributes`),
+        sorted.length > limit ? `...and ${sorted.length - limit} smaller groups, raise limit to see them.` : '',
+    ]
+        .filter(Boolean)
+        .join('\n');
+}

package/dist/license.js

@@ -0,0 +1,79 @@
+// Premium tools on this server need a license key bought from MCP Marketplace.
+// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
+// that is not listed in PREMIUM keeps working without a key.
+const SLUG = "nix-packages-mcp";
+// Tools that need a key. Everything else is free.
+const PREMIUM = new Set([
+    "list_attributes",
+    "attribute_groups",
+]);
+const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
+// The license check calls the marketplace's verify endpoint directly instead of
+// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
+// check it makes is rejected by Supabase before it reaches the function. The
+// publishable key below is public by design - it ships in mcp-marketplace.io's
+// own JavaScript and only ever reaches their licence check.
+const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
+const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
+const OK_CACHE_MS = 60 * 60 * 1000;
+const BAD_CACHE_MS = 60 * 1000;
+const seen = new Map();
+const REASONS = {
+    missing_key: "no key is set",
+    invalid_format: "that key is not a valid MCP Marketplace key",
+    not_found: "that key was not found",
+    revoked: "that key has been revoked",
+    rotated: "that key was rotated, use your new one",
+    expired: "that key has expired, renew it",
+    rate_limited: "there were too many checks just now, try again shortly",
+    network_error: "the license server could not be reached",
+};
+function blocked(tool, reason) {
+    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
+    return `"${tool}" needs a license key, but ${why}. ` +
+        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
+}
+async function verify(key) {
+    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
+        method: "POST",
+        headers: {
+            apikey: PUBLISHABLE_KEY,
+            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ key, slug: SLUG }),
+        // an unusable key answers 400 with a JSON body, so read the body either way
+        signal: AbortSignal.timeout(15000),
+    });
+    const data = (await res.json());
+    if (typeof data?.valid !== "boolean")
+        return { valid: false, reason: "unexpected_response" };
+    return data;
+}
+/**
+ * Returns null when the caller may run the tool, or a short message telling
+ * them how to get a key.
+ *
+ * A good key is remembered for an hour, so a busy session does not hit the
+ * license server on every call and keeps working through a brief outage.
+ */
+export async function premiumRequired(tool) {
+    if (!PREMIUM.has(tool))
+        return null;
+    const key = process.env.MCP_LICENSE_KEY;
+    if (!key)
+        return blocked(tool, "missing_key");
+    const hit = seen.get(key);
+    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
+        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
+    }
+    let result;
+    try {
+        result = await verify(key);
+    }
+    catch {
+        result = { valid: false, reason: "network_error" };
+    }
+    seen.set(key, { ...result, at: Date.now() });
+    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
+}

package/dist/server.js

@@ -1,6 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { search } from "./api.js";
+import { search, listReleases, listAttributes, attributeGroups } from "./api.js";
+import { premiumRequired } from "./license.js";
 const text = (value) => ({ content: [{ type: "text", text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -20,5 +21,54 @@ export function createServer() {
             return textError(error(e));
         }
     });
+    server.registerTool("list_releases", {
+        title: "List nixpkgs channel releases",
+        description: "The nixpkgs channel release index from the nix-releases bucket: every 24.05/24.11/25.05 channel release with its git revision, publish date and nixexprs size.",
+        inputSchema: z.object({ series: z.string().describe("Series filter, e.g. '24.11' or '25.05'. Empty = all.").optional(), limit: z.number().describe("How many releases, 1-40.").default(10) }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await listReleases({ series: args.series, limit: args.limit }));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("list_attributes", {
+        title: "List top-level package attributes",
+        description: "The authoritative set of top-level nixpkgs attributes from all-packages.nix, optionally filtered to attributes in a group like APPLICATIONS or DEVELOPMENT.",
+        inputSchema: z.object({ group: z.string().describe("Group fragment, e.g. 'APPLICATIONS', 'COMPILERS'. Empty = all groups.").optional(), limit: z.number().describe("How many attributes, 1-200.").default(25) }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: list_attributes ----
+        const paywallMessage = await premiumRequired("list_attributes");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await listAttributes({ group: args.group, limit: args.limit }));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("attribute_groups", {
+        title: "Count package attributes by group",
+        description: "How many top-level nixpkgs attributes sit in each all-packages.nix group, largest first - the shape of the package collection.",
+        inputSchema: z.object({ limit: z.number().describe("How many groups, 1-60.").default(20) }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: attribute_groups ----
+        const paywallMessage = await premiumRequired("attribute_groups");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await attributeGroups({ limit: args.limit }));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
     return server;
 }

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0",
+  "version": "1.0.1",
   "type": "module",
   "repository": {
     "type": "git",