plm-upload-mcp 1.0.0 → 1.0.1

package/index.mjs

@@ -43,6 +43,13 @@ const MIME = {
 }
 const mimeFor = (name) => MIME[extname(name).toLowerCase()] || 'application/octet-stream'
 
+// Supabase Storage rejects object keys with chars outside its safe set (notably
+// '[' ']', which the common "[SKU] Name" convention starts with) -> the store
+// call 400s with "storage upload failed: 400". The key is internal/UUID-prefixed
+// and never shown, so sanitize it to the safe set; the Drive display name (the
+// separate `upload` filename) keeps the original, brackets and all.
+const storageKeyName = (name) => name.replace(/[^\w !\-.*'()&$@=;:+,?/]/g, '_')
+
 // --- Auth: cache one access token, re-grant when it's near expiry. -----------
 let cached = { token: null, exp: 0 }
 async function getToken() {
@@ -80,7 +87,8 @@ async function uploadOne({ path, sku, skuName, category, bucket }) {
   const mimeType = mimeFor(filename)
   const token = await getToken()
 
-  const params = new URLSearchParams({ action: 'store', sku, filename, mimeType })
+  // Store under a storage-safe key; the Drive file keeps the original filename below.
+  const params = new URLSearchParams({ action: 'store', sku, filename: storageKeyName(filename), mimeType })
   const sResp = await fetch(`${EDGE}/drive-library?${params}`, {
     method: 'POST',
     headers: { 'content-type': mimeType, authorization: `Bearer ${token}` },
@@ -201,5 +209,18 @@ server.registerTool(
   },
 )
 
+// `node index.mjs --selftest` — verify the storage-key sanitizer without a server.
+if (process.argv.includes('--selftest')) {
+  const assert = (c, m) => { if (!c) { console.error('FAIL:', m); process.exit(1) } }
+  assert(storageKeyName('[MNT-0930-X0] HANDLEBAR MOUNT LEFT_260908.STEP')
+    === '_MNT-0930-X0_ HANDLEBAR MOUNT LEFT_260908.STEP', 'brackets -> _')
+  assert(storageKeyName('BRG-0245-X0 Bushing_260908.pdf')
+    === 'BRG-0245-X0 Bushing_260908.pdf', 'safe name unchanged')
+  const SAFE = /^[\w !\-.*'()&$@=;:+,?/]*$/
+  assert(SAFE.test(storageKeyName('a[b]c#d%e\\f"g<h>i.STEP')), 'all unsafe chars replaced')
+  console.log('selftest ok')
+  process.exit(0)
+}
+
 const transport = new StdioServerTransport()
 await server.connect(transport)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "plm-upload-mcp",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "MCP server to bulk-upload SolidWorks exports (STEP/PDF) into the LionsBot PLM by SKU.",
   "license": "UNLICENSED",
   "keywords": ["mcp", "modelcontextprotocol", "lionsbot", "plm", "solidworks"],