nubase_cli 0.1.6 → 0.1.8

package/README.md

@@ -16,7 +16,7 @@ Installing skills starts a one-time browser authorization session and prints an
 npx -y nubase_cli@latest install-skills
 ```
 
-This installs the bundled Claude/Codex skills into your user skill directories, writes project MCP config for Claude Code, and starts browser authorization. Open the printed URL, sign in to Studio, choose a project, and approve. The URL includes a per-session UUID and points back to the temporary localhost callback started by the install command. After approval, the CLI writes project-local `.nubase/config.json` and closes the localhost callback server.
+This installs the bundled Claude/Codex skills into your user skill directories, writes a local project MCP bridge under `.nubase/mcp-bridge`, writes project MCP config for Claude Code, and starts browser authorization. Open the printed URL, sign in to Studio, choose a project, and approve. The URL includes a per-session UUID and points back to the temporary localhost callback started by the install command. After approval, the CLI writes project-local `.nubase/config.json` and closes the localhost callback server.
 
 Restart Claude Code in the project after installing, then run `/mcp` and confirm `nubase` is connected.
 
@@ -69,17 +69,21 @@ node packages/mcp-bridge/dist/src/index.js
 {
   "mcpServers": {
     "nubase": {
+      "type": "stdio",
       "command": "npx",
       "args": ["-y", "nubase_cli@latest"],
       "env": {
         "NUBASE_AGENT_ID": "claude-code",
-        "NUBASE_CONFIG": ".nubase/config.json"
+        "NUBASE_CONFIG": "/absolute/project/path/.nubase/config.json"
       }
     }
   }
 }
 ```
 
+The bridge code is shared across projects via the npm cache; only `.nubase/config.json`
+(holding this project's `projectKey`) is project-specific, pointed to by `NUBASE_CONFIG`.
+
 You may still set `NUBASE_URL` and `NUBASE_PROJECT_KEY` explicitly. Environment variables take precedence over the saved authorization config.
 
 ## Install Agent Skills
@@ -98,14 +102,15 @@ Targets:
 
 Use `--skills-scope project` to write `.claude/skills/nubase/**` and `.codex/skills/nubase/**` in the current project instead.
 
-By default, when the target includes `claude`, the command also creates or merges project `.mcp.json`:
+By default, when the target includes `claude`, the command creates or merges a project `.mcp.json` that runs the bridge via `npx` (shared across projects through the npm cache):
 
 ```json
 {
   "mcpServers": {
     "nubase": {
+      "type": "stdio",
       "command": "npx",
-      "args": ["-y", "nubase_cli@latest"],
+      "args": ["-y", "nubase_cli@<version>"],
       "env": {
         "NUBASE_AGENT_ID": "claude-code",
         "NUBASE_CONFIG": "/absolute/project/path/.nubase/config.json"
@@ -115,6 +120,10 @@ By default, when the target includes `claude`, the command also creates or merge
 }
 ```
 
+The `npx` spec is pinned to the installed CLI version for reproducibility. Pass
+`--mcp-delivery local` instead to copy a hermetic, version-pinned bridge into
+`.nubase/mcp-bridge` and reference it with `command: "node"` (no npm dependency at runtime).
+
 Use `--mcp both` to also write project `.codex/config.toml` for Codex. Use `--no-mcp` to skip MCP config.
 
 Installed structure:

package/dist/src/index.js

@@ -6,7 +6,7 @@ import { installSkills, parseInstallArgs } from './install-skills.js';
 import { McpStdioServer } from './mcp-stdio.js';
 import { NubaseClient } from './nubase-client.js';
 import { callTool, TOOLS } from './tools.js';
-const CLI_VERSION = '0.1.6';
+const CLI_VERSION = '0.1.8';
 if (process.argv[2] === 'install-skills') {
     const options = parseInstallArgs(process.argv.slice(3));
     const installed = await installSkills(options);
@@ -20,6 +20,9 @@ if (process.argv[2] === 'install-skills') {
         else if (file.endsWith('.gitignore')) {
             console.error(`Ensured Nubase local config is ignored by git: ${file}`);
         }
+        else if (file.includes(`${defaultPathSep()}.nubase${defaultPathSep()}mcp-bridge${defaultPathSep()}`)) {
+            console.error(`Installed Nubase local MCP bridge: ${file}`);
+        }
         else {
             console.error(`Installed Nubase skill: ${file}`);
         }
@@ -80,3 +83,6 @@ const server = new McpStdioServer(async (request) => {
     }
 });
 server.start();
+function defaultPathSep() {
+    return process.platform === 'win32' ? '\\' : '/';
+}

package/dist/src/install-skills.d.ts

@@ -1,6 +1,7 @@
 export type SkillTarget = 'claude' | 'codex' | 'both';
 export type SkillInstallScope = 'user' | 'project';
 export type McpInstallTarget = 'none' | 'claude' | 'codex' | 'both';
+export type McpDelivery = 'npx' | 'local';
 export interface InstallSkillsOptions {
     target: SkillTarget;
     projectDir: string;
@@ -9,6 +10,7 @@ export interface InstallSkillsOptions {
     skills?: boolean;
     skillsScope?: SkillInstallScope;
     mcp?: McpInstallTarget;
+    mcpDelivery?: McpDelivery;
     configPath?: string;
     homeDir?: string;
 }
@@ -21,5 +23,6 @@ export declare function parseInstallArgs(argv: string[]): {
     skills: boolean;
     skillsScope: SkillInstallScope;
     mcp: McpInstallTarget;
+    mcpDelivery: McpDelivery;
     configPath: string;
 };

package/dist/src/install-skills.js

@@ -1,4 +1,4 @@
-import { cp, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { cp, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -19,11 +19,22 @@ export async function installSkills(options) {
         }
     }
     const mcpTargets = resolveMcpTargets(options.mcp ?? 'claude', targets);
+    const mcpDelivery = options.mcpDelivery ?? 'npx';
+    let mcpCommand = null;
+    if (mcpTargets.length > 0) {
+        if (mcpDelivery === 'local') {
+            mcpCommand = await installProjectMcpBridge(options.projectDir);
+            installed.push(mcpCommand.entrypoint);
+        }
+        else {
+            mcpCommand = await npxMcpCommand();
+        }
+    }
     if (mcpTargets.includes('claude')) {
-        installed.push(await installClaudeMcpConfig(options.projectDir, configPath));
+        installed.push(await installClaudeMcpConfig(options.projectDir, configPath, mcpCommand));
     }
     if (mcpTargets.includes('codex')) {
-        installed.push(await installCodexMcpConfig(options.projectDir, configPath));
+        installed.push(await installCodexMcpConfig(options.projectDir, configPath, mcpCommand));
     }
     installed.push(await ensureProjectGitignore(options.projectDir));
     return installed;
@@ -35,6 +46,7 @@ export function parseInstallArgs(argv) {
     let skills = true;
     let skillsScope = 'user';
     let mcp = 'claude';
+    let mcpDelivery = 'npx';
     let configPath;
     const authArgs = ['--prompt-only'];
     for (let i = 0; i < argv.length; i += 1) {
@@ -78,6 +90,13 @@ export function parseInstallArgs(argv) {
             }
             skillsScope = value;
         }
+        else if (arg === '--mcp-delivery') {
+            const value = argv[++i];
+            if (value !== 'npx' && value !== 'local') {
+                throw new Error('--mcp-delivery must be npx or local');
+            }
+            mcpDelivery = value;
+        }
         else if (arg === '--config') {
             const value = argv[++i];
             if (!value)
@@ -96,12 +115,14 @@ export function parseInstallArgs(argv) {
     }
     configPath = configPath ?? projectConfigPath(projectDir);
     authArgs.push('--config', configPath);
-    return { target, projectDir, authorize, authArgs, skills, skillsScope, mcp, configPath };
+    return { target, projectDir, authorize, authArgs, skills, skillsScope, mcp, mcpDelivery, configPath };
 }
 function bundledSkillDir() {
+    return path.join(bundledPackageRoot(), 'skills', 'nubase');
+}
+function bundledPackageRoot() {
     const here = path.dirname(fileURLToPath(import.meta.url));
-    const packageRoot = path.resolve(here, '..', '..');
-    return path.join(packageRoot, 'skills', 'nubase');
+    return path.resolve(here, '..', '..');
 }
 function skillDestDir(target, scope, projectDir, homeDir) {
     if (scope === 'project') {
@@ -119,15 +140,44 @@ function resolveMcpTargets(mcp, skillTargets) {
     const requested = mcp === 'both' ? ['claude', 'codex'] : [mcp];
     return requested.filter((target) => skillTargets.includes(target));
 }
-async function installClaudeMcpConfig(projectDir, nubaseConfigPath) {
+async function npxMcpCommand() {
+    const spec = `nubase_cli@${await bundledPackageVersion()}`;
+    return { command: 'npx', args: ['-y', spec], entrypoint: spec };
+}
+async function bundledPackageVersion() {
+    try {
+        const raw = await readFile(path.join(bundledPackageRoot(), 'package.json'), 'utf8');
+        const version = JSON.parse(raw).version;
+        return typeof version === 'string' && version.trim() ? version.trim() : 'latest';
+    }
+    catch {
+        return 'latest';
+    }
+}
+async function installProjectMcpBridge(projectDir) {
+    const packageRoot = bundledPackageRoot();
+    const destRoot = path.join(projectDir, '.nubase', 'mcp-bridge');
+    await rm(destRoot, { recursive: true, force: true });
+    await mkdir(destRoot, { recursive: true, mode: 0o700 });
+    await cp(path.join(packageRoot, 'dist', 'src'), path.join(destRoot, 'dist', 'src'), { recursive: true, force: true });
+    await cp(path.join(packageRoot, 'skills'), path.join(destRoot, 'skills'), { recursive: true, force: true });
+    await cp(path.join(packageRoot, 'package.json'), path.join(destRoot, 'package.json'), { force: true });
+    const entrypoint = path.join(destRoot, 'dist', 'src', 'index.js');
+    return {
+        command: 'node',
+        args: [entrypoint],
+        entrypoint,
+    };
+}
+async function installClaudeMcpConfig(projectDir, nubaseConfigPath, mcpCommand) {
     const mcpConfigPath = path.join(projectDir, '.mcp.json');
     const config = await readProjectMcpConfig(mcpConfigPath);
     config.mcpServers = {
         ...(config.mcpServers ?? {}),
         nubase: {
             type: 'stdio',
-            command: 'npx',
-            args: ['-y', 'nubase_cli@latest'],
+            command: mcpCommand?.command ?? 'npx',
+            args: mcpCommand?.args ?? ['-y', 'nubase_cli@latest'],
             env: {
                 NUBASE_AGENT_ID: 'claude-code',
                 NUBASE_CONFIG: nubaseConfigPath,
@@ -137,11 +187,11 @@ async function installClaudeMcpConfig(projectDir, nubaseConfigPath) {
     await writeFile(mcpConfigPath, `${JSON.stringify(config, null, 2)}\n`, 'utf8');
     return mcpConfigPath;
 }
-async function installCodexMcpConfig(projectDir, nubaseConfigPath) {
+async function installCodexMcpConfig(projectDir, nubaseConfigPath, mcpCommand) {
     const configPath = path.join(projectDir, '.codex', 'config.toml');
     await mkdir(path.dirname(configPath), { recursive: true });
     const existing = await readTextIfExists(configPath);
-    const block = codexMcpBlock(nubaseConfigPath);
+    const block = codexMcpBlock(nubaseConfigPath, mcpCommand);
     const next = upsertCodexMcpBlock(existing, block);
     await writeFile(configPath, next, 'utf8');
     return configPath;
@@ -166,12 +216,14 @@ async function readTextIfExists(filePath) {
         throw err;
     }
 }
-function codexMcpBlock(configPath) {
+function codexMcpBlock(configPath, mcpCommand) {
+    const command = mcpCommand?.command ?? 'npx';
+    const args = mcpCommand?.args ?? ['-y', 'nubase_cli@latest'];
     return [
         '[mcp_servers.nubase]',
         'type = "stdio"',
-        'command = "npx"',
-        'args = ["-y", "nubase_cli@latest"]',
+        `command = "${escapeTomlString(command)}"`,
+        `args = [${args.map((arg) => `"${escapeTomlString(arg)}"`).join(', ')}]`,
         'startup_timeout_sec = 30',
         '',
         '[mcp_servers.nubase.env]',

package/dist/src/mcp-stdio.js

@@ -47,25 +47,18 @@ export class McpStdioServer {
         }
     }
     readMessage() {
-        const headerEnd = this.buffer.indexOf('\r\n\r\n');
-        if (headerEnd === -1)
+        // MCP stdio transport frames messages as newline-delimited JSON
+        // (one JSON-RPC object per line, no embedded newlines).
+        const newlineIndex = this.buffer.indexOf('\n');
+        if (newlineIndex === -1)
             return null;
-        const header = this.buffer.subarray(0, headerEnd).toString('utf8');
-        const match = /Content-Length:\s*(\d+)/i.exec(header);
-        if (!match) {
-            throw new Error('Missing Content-Length header');
-        }
-        const length = Number(match[1]);
-        const bodyStart = headerEnd + 4;
-        const bodyEnd = bodyStart + length;
-        if (this.buffer.length < bodyEnd)
-            return null;
-        const body = this.buffer.subarray(bodyStart, bodyEnd).toString('utf8');
-        this.buffer = this.buffer.subarray(bodyEnd);
-        return JSON.parse(body);
+        const line = this.buffer.subarray(0, newlineIndex).toString('utf8').trim();
+        this.buffer = this.buffer.subarray(newlineIndex + 1);
+        if (!line)
+            return this.readMessage();
+        return JSON.parse(line);
     }
     write(message) {
-        const body = JSON.stringify(message);
-        stdout.write(`Content-Length: ${Buffer.byteLength(body, 'utf8')}\r\n\r\n${body}`);
+        stdout.write(`${JSON.stringify(message)}\n`);
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nubase_cli",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "private": false,
   "type": "module",
   "bin": {

package/skills/nubase/SKILL.md

@@ -67,6 +67,7 @@ By default this writes:
 - `~/.claude/skills/nubase/**`
 - `~/.codex/skills/nubase/**`
 - project `.mcp.json` with a `nubase` stdio MCP server for Claude Code
+- project `.nubase/mcp-bridge/**` local MCP bridge runtime, so agent startup does not depend on `npx @latest`
 - project `.nubase/config.json` after browser authorization
 
 After installing, restart Claude Code in the project and run `/mcp`. The `nubase` server must be connected before this skill can call `nubase_overview`, `memory_context`, or other MCP tools.
@@ -77,11 +78,12 @@ Expected `.mcp.json` shape:
 {
   "mcpServers": {
     "nubase": {
+      "type": "stdio",
       "command": "npx",
       "args": ["-y", "nubase_cli@latest"],
       "env": {
         "NUBASE_AGENT_ID": "claude-code",
-        "NUBASE_CONFIG": ".nubase/config.json"
+        "NUBASE_CONFIG": "/absolute/project/path/.nubase/config.json"
       }
     }
   }