uniquick 0.1.0

package/README.md

@@ -0,0 +1,75 @@
+# uniquick
+
+CLI + MCP server for **UniQuick** — deploy AI-built web apps (guestbooks, polls,
+dashboards, live multiplayer pages, AI tools) to the University of Illinois
+UniQuick platform. Visitors sign in silently with their `@illinois.edu` account;
+data, file storage, realtime, and AI are provided by the platform.
+
+Live at **https://uniquick.azurewebsites.net**.
+
+## 1. Get a deploy token (once)
+
+Open **https://uniquick.azurewebsites.net/token**, sign in with your
+`@illinois.edu` account, create a token, and copy it (shown once, looks like
+`qk_...`). Treat it like a password; revoke it from the same page any time.
+
+## 2a. Use it as an MCP server (recommended for Claude Code / Desktop)
+
+No clone, no install — one command:
+
+```bash
+claude mcp add uniquick --env UNIQUICK_TOKEN=qk_... -- npx -y -p uniquick uniquick-mcp
+```
+
+Your agent gains the tools `create_site`, `deploy_site`, `list_sites`,
+`delete_site`, `get_site_url`. Then just ask:
+
+> Create a UniQuick site called `team-poll` and deploy a ranked-choice voting page to it.
+
+By default `deploy_site` only deploys directories inside the MCP server's working
+directory (the exfiltration guard). Set `UNIQUICK_DEPLOY_ROOT` to widen it:
+`--env UNIQUICK_DEPLOY_ROOT=/path/to/projects`.
+
+## 2b. Or use the CLI directly
+
+```bash
+export UNIQUICK_TOKEN=qk_...
+npx -y uniquick token-check                       # verify auth
+npx -y uniquick create my-site --title "My Site"
+npx -y uniquick deploy ./my-site-dir --site my-site
+npx -y uniquick list
+npx -y uniquick delete <slug> --yes
+```
+
+Site names are auto-prefixed with your netid (`my-site` → `netid-my-site`); the
+create output shows the final id. Your site is served at
+`https://uniquick.azurewebsites.net/s/<slug>/`.
+
+## Building a site
+
+Make a folder with an `index.html` that loads the SDK:
+
+```html
+<script src="https://uniquick.azurewebsites.net/sdk.js"></script>
+<script type="module">
+  await quick.ready;                 // silent SSO done
+  quick.user;                        // { name, upn }
+  await quick.data.set("k", 42);     // per-site JSON store
+  const url = await quick.files.upload(file);   // hosted file
+  quick.ws.send("chat", "hi");       // realtime
+  const a = await quick.ai.chat("Summarize: " + text); // built-in AI, no key
+</script>
+```
+
+Full SDK reference (written for coding agents): paste
+**https://uniquick.azurewebsites.net/llms.txt** into your agent's context.
+
+## Configuration
+
+| Env | Default | Purpose |
+|-----|---------|---------|
+| `UNIQUICK_TOKEN` | — | Deploy token from `/token` (required) |
+| `UNIQUICK_URL` | `https://uniquick.azurewebsites.net` | Platform base URL |
+| `UNIQUICK_DEPLOY_ROOT` | cwd | Directories the MCP `deploy_site` tool may read from |
+
+Questions → vishal@illinois.edu.

package/dist/cli.js

@@ -0,0 +1,241 @@
+#!/usr/bin/env node
+
+// ../cli/uniquick.ts
+import { readFileSync, readdirSync, statSync, existsSync, realpathSync } from "node:fs";
+import { join, relative, extname, resolve, sep } from "node:path";
+import { pathToFileURL } from "node:url";
+var MIME = {
+  ".html": "text/html",
+  ".htm": "text/html",
+  ".js": "text/javascript",
+  ".mjs": "text/javascript",
+  ".css": "text/css",
+  ".json": "application/json",
+  ".txt": "text/plain",
+  ".md": "text/markdown",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".svg": "image/svg+xml",
+  ".ico": "image/x-icon",
+  ".webp": "image/webp",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".mp3": "audio/mpeg",
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
+  ".wasm": "application/wasm",
+  ".pdf": "application/pdf",
+  ".xml": "application/xml"
+};
+function mimeFor(path) {
+  return MIME[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+var MAX_FILE_BYTES = 5 * 1024 * 1024;
+var MAX_TOTAL_BYTES = 40 * 1024 * 1024;
+function buildManifest(dir, options = {}) {
+  const includeDotfiles = options.includeDotfiles ?? false;
+  const files = [];
+  let totalBytes = 0;
+  const walk = (current) => {
+    const entries = readdirSync(current, { withFileTypes: true }).sort(
+      (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
+    );
+    for (const entry of entries) {
+      const name = entry.name;
+      if (name === ".git" || name === "node_modules" || name === ".DS_Store") continue;
+      if (!includeDotfiles && name.startsWith(".")) continue;
+      if (entry.isSymbolicLink()) continue;
+      const full = join(current, name);
+      if (entry.isDirectory()) {
+        walk(full);
+      } else if (entry.isFile()) {
+        const rel = relative(dir, full).split(sep).join("/");
+        const size = statSync(full).size;
+        if (size > MAX_FILE_BYTES) {
+          throw new Error(
+            `file too large: ${rel} is ${(size / 1024 / 1024).toFixed(1)}MB (limit 5MB per file)`
+          );
+        }
+        totalBytes += size;
+        if (totalBytes > MAX_TOTAL_BYTES) {
+          throw new Error(
+            `deploy too large: total exceeds 40MB at ${rel} (${(totalBytes / 1024 / 1024).toFixed(1)}MB so far)`
+          );
+        }
+        files.push({
+          path: rel,
+          contentBase64: readFileSync(full).toString("base64"),
+          contentType: mimeFor(rel)
+        });
+      }
+    }
+  };
+  walk(dir);
+  return { files };
+}
+function checkDeployRoot(dir, root) {
+  const realRoot = realpathSync(resolve(root));
+  const realDir = realpathSync(resolve(dir));
+  if (realDir !== realRoot && !realDir.startsWith(realRoot + sep)) {
+    throw new Error(
+      `refusing to deploy '${dir}': it is outside the deploy root '${realRoot}'. Set UNIQUICK_DEPLOY_ROOT to a parent directory of your site files to allow it.`
+    );
+  }
+  return realDir;
+}
+function parseArgs(argv) {
+  const [command = "", ...rest] = argv;
+  const positional = [];
+  const flags = {};
+  for (let i = 0; i < rest.length; i++) {
+    const arg = rest[i];
+    if (arg.startsWith("--")) {
+      const name = arg.slice(2);
+      const next = rest[i + 1];
+      if (next !== void 0 && !next.startsWith("--")) {
+        flags[name] = next;
+        i++;
+      } else {
+        flags[name] = true;
+      }
+    } else {
+      positional.push(arg);
+    }
+  }
+  return { command, positional, flags };
+}
+var BASE = (process.env.UNIQUICK_URL ?? "https://uniquick.azurewebsites.net").replace(/\/+$/, "");
+function fail(msg) {
+  console.error(`error: ${msg}`);
+  process.exit(1);
+}
+function token() {
+  const t = process.env.UNIQUICK_TOKEN;
+  if (!t) {
+    fail(`UNIQUICK_TOKEN is not set.
+  1. Open ${BASE}/token in a browser and sign in with your @illinois.edu account
+  2. Create a token and run: export UNIQUICK_TOKEN=qk_...`);
+  }
+  return t;
+}
+async function api(method, path, body) {
+  let res;
+  try {
+    res = await fetch(BASE + path, {
+      method,
+      headers: {
+        authorization: `Bearer ${token()}`,
+        ...body !== void 0 ? { "content-type": "application/json" } : {}
+      },
+      body: body !== void 0 ? JSON.stringify(body) : void 0
+    });
+  } catch (e) {
+    fail(`could not reach ${BASE} (${e?.message ?? e}). Is UNIQUICK_URL right?`);
+  }
+  const text = await res.text();
+  let parsed = null;
+  try {
+    parsed = text ? JSON.parse(text) : null;
+  } catch {
+  }
+  if (!res.ok) {
+    const detail = parsed?.error?.message ?? text.slice(0, 200) ?? res.statusText;
+    if (res.status === 401) {
+      fail(`authentication failed (401): ${detail}
+  Your UNIQUICK_TOKEN may be revoked \u2014 get a fresh one at ${BASE}/token`);
+    }
+    fail(`${method} ${path} failed (${res.status}): ${detail}`);
+  }
+  return parsed;
+}
+var USAGE = `uniquick \u2014 deploy AI-built sites to ${BASE}
+
+usage:
+  uniquick create <slug> --title <title> [--data-mode open|owner-write]
+  uniquick deploy <dir> --site <slug>
+  uniquick list
+  uniquick delete <slug> --yes
+  uniquick token-check
+
+  (from a repo checkout, prefix any command with: npx tsx cli/uniquick.ts)
+
+env:
+  UNIQUICK_URL    platform base URL (default https://uniquick.azurewebsites.net)
+  UNIQUICK_TOKEN  deploy token from ${BASE}/token`;
+async function main() {
+  const { command, positional, flags } = parseArgs(process.argv.slice(2));
+  switch (command) {
+    case "create": {
+      const slug = positional[0] ?? fail("usage: uniquick create <slug> --title <title> [--data-mode open|owner-write]");
+      const title = typeof flags.title === "string" ? flags.title : fail("--title <title> is required");
+      const dataMode = flags["data-mode"];
+      if (dataMode !== void 0 && dataMode !== "open" && dataMode !== "owner-write") {
+        fail("--data-mode must be 'open' or 'owner-write'");
+      }
+      const body = { slug, title };
+      if (typeof dataMode === "string") body.data_mode = dataMode;
+      const created = await api("POST", "/api/sites", body);
+      console.log(`Created site '${created.id}' -> ${BASE}/s/${created.id}/`);
+      break;
+    }
+    case "deploy": {
+      const dirArg = positional[0] ?? fail("usage: uniquick deploy <dir> --site <slug>");
+      const site = typeof flags.site === "string" ? flags.site : fail("--site <slug> is required");
+      const dir = resolve(dirArg);
+      if (!existsSync(dir)) fail(`directory not found: ${dir}`);
+      const manifest = buildManifest(dir);
+      if (manifest.files.length === 0) fail(`no files found in ${dir}`);
+      if (!manifest.files.some((f) => f.path === "index.html")) {
+        console.error(`warning: no top-level index.html \u2014 ${BASE}/s/${site}/ will 404`);
+      }
+      await api("POST", `/api/sites/${encodeURIComponent(site)}/deploy`, manifest);
+      console.log(`Deployed ${manifest.files.length} file(s) -> ${BASE}/s/${site}/`);
+      break;
+    }
+    case "list": {
+      const sites = await api("GET", "/api/sites");
+      if (!Array.isArray(sites) || sites.length === 0) {
+        console.log("no sites yet \u2014 try: npx tsx cli/uniquick.ts create my-site --title 'My Site'");
+        break;
+      }
+      for (const s of sites) {
+        console.log(`${s.id}	${s.data_mode}	${BASE}/s/${s.id}/	${s.title}`);
+      }
+      break;
+    }
+    case "delete": {
+      const slug = positional[0] ?? fail("usage: uniquick delete <slug> --yes");
+      if (flags.yes !== true) fail(`refusing to delete '${slug}' without --yes (this removes the site, its data, and its uploads)`);
+      await api("DELETE", `/api/sites/${encodeURIComponent(slug)}`);
+      console.log(`Deleted site '${slug}'`);
+      break;
+    }
+    case "token-check": {
+      const me = await api("GET", "/api/me");
+      console.log(`Token OK \u2014 authenticated as ${me.name} <${me.upn}> against ${BASE}`);
+      break;
+    }
+    case "":
+      console.log(USAGE);
+      break;
+    default:
+      console.error(`unknown command '${command}'
+
+${USAGE}`);
+      process.exit(1);
+  }
+}
+var isMain = !!process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href;
+if (isMain) {
+  main().catch((e) => fail(e?.message ?? String(e)));
+}
+export {
+  MAX_FILE_BYTES,
+  MAX_TOTAL_BYTES,
+  buildManifest,
+  checkDeployRoot,
+  mimeFor,
+  parseArgs
+};

package/dist/mcp.js

@@ -0,0 +1,347 @@
+#!/usr/bin/env node
+
+// ../mcp/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { resolve as resolve2 } from "node:path";
+import { existsSync as existsSync2 } from "node:fs";
+
+// ../cli/uniquick.ts
+import { readFileSync, readdirSync, statSync, existsSync, realpathSync } from "node:fs";
+import { join, relative, extname, resolve, sep } from "node:path";
+import { pathToFileURL } from "node:url";
+var MIME = {
+  ".html": "text/html",
+  ".htm": "text/html",
+  ".js": "text/javascript",
+  ".mjs": "text/javascript",
+  ".css": "text/css",
+  ".json": "application/json",
+  ".txt": "text/plain",
+  ".md": "text/markdown",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".svg": "image/svg+xml",
+  ".ico": "image/x-icon",
+  ".webp": "image/webp",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".mp3": "audio/mpeg",
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
+  ".wasm": "application/wasm",
+  ".pdf": "application/pdf",
+  ".xml": "application/xml"
+};
+function mimeFor(path) {
+  return MIME[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+var MAX_FILE_BYTES = 5 * 1024 * 1024;
+var MAX_TOTAL_BYTES = 40 * 1024 * 1024;
+function buildManifest(dir, options = {}) {
+  const includeDotfiles = options.includeDotfiles ?? false;
+  const files = [];
+  let totalBytes = 0;
+  const walk = (current) => {
+    const entries = readdirSync(current, { withFileTypes: true }).sort(
+      (a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0
+    );
+    for (const entry of entries) {
+      const name = entry.name;
+      if (name === ".git" || name === "node_modules" || name === ".DS_Store") continue;
+      if (!includeDotfiles && name.startsWith(".")) continue;
+      if (entry.isSymbolicLink()) continue;
+      const full = join(current, name);
+      if (entry.isDirectory()) {
+        walk(full);
+      } else if (entry.isFile()) {
+        const rel = relative(dir, full).split(sep).join("/");
+        const size = statSync(full).size;
+        if (size > MAX_FILE_BYTES) {
+          throw new Error(
+            `file too large: ${rel} is ${(size / 1024 / 1024).toFixed(1)}MB (limit 5MB per file)`
+          );
+        }
+        totalBytes += size;
+        if (totalBytes > MAX_TOTAL_BYTES) {
+          throw new Error(
+            `deploy too large: total exceeds 40MB at ${rel} (${(totalBytes / 1024 / 1024).toFixed(1)}MB so far)`
+          );
+        }
+        files.push({
+          path: rel,
+          contentBase64: readFileSync(full).toString("base64"),
+          contentType: mimeFor(rel)
+        });
+      }
+    }
+  };
+  walk(dir);
+  return { files };
+}
+function checkDeployRoot(dir, root) {
+  const realRoot = realpathSync(resolve(root));
+  const realDir = realpathSync(resolve(dir));
+  if (realDir !== realRoot && !realDir.startsWith(realRoot + sep)) {
+    throw new Error(
+      `refusing to deploy '${dir}': it is outside the deploy root '${realRoot}'. Set UNIQUICK_DEPLOY_ROOT to a parent directory of your site files to allow it.`
+    );
+  }
+  return realDir;
+}
+function parseArgs(argv) {
+  const [command = "", ...rest] = argv;
+  const positional = [];
+  const flags = {};
+  for (let i = 0; i < rest.length; i++) {
+    const arg = rest[i];
+    if (arg.startsWith("--")) {
+      const name = arg.slice(2);
+      const next = rest[i + 1];
+      if (next !== void 0 && !next.startsWith("--")) {
+        flags[name] = next;
+        i++;
+      } else {
+        flags[name] = true;
+      }
+    } else {
+      positional.push(arg);
+    }
+  }
+  return { command, positional, flags };
+}
+var BASE = (process.env.UNIQUICK_URL ?? "https://uniquick.azurewebsites.net").replace(/\/+$/, "");
+function fail(msg) {
+  console.error(`error: ${msg}`);
+  process.exit(1);
+}
+function token() {
+  const t = process.env.UNIQUICK_TOKEN;
+  if (!t) {
+    fail(`UNIQUICK_TOKEN is not set.
+  1. Open ${BASE}/token in a browser and sign in with your @illinois.edu account
+  2. Create a token and run: export UNIQUICK_TOKEN=qk_...`);
+  }
+  return t;
+}
+async function api(method, path, body) {
+  let res;
+  try {
+    res = await fetch(BASE + path, {
+      method,
+      headers: {
+        authorization: `Bearer ${token()}`,
+        ...body !== void 0 ? { "content-type": "application/json" } : {}
+      },
+      body: body !== void 0 ? JSON.stringify(body) : void 0
+    });
+  } catch (e) {
+    fail(`could not reach ${BASE} (${e?.message ?? e}). Is UNIQUICK_URL right?`);
+  }
+  const text = await res.text();
+  let parsed = null;
+  try {
+    parsed = text ? JSON.parse(text) : null;
+  } catch {
+  }
+  if (!res.ok) {
+    const detail = parsed?.error?.message ?? text.slice(0, 200) ?? res.statusText;
+    if (res.status === 401) {
+      fail(`authentication failed (401): ${detail}
+  Your UNIQUICK_TOKEN may be revoked \u2014 get a fresh one at ${BASE}/token`);
+    }
+    fail(`${method} ${path} failed (${res.status}): ${detail}`);
+  }
+  return parsed;
+}
+var USAGE = `uniquick \u2014 deploy AI-built sites to ${BASE}
+
+usage:
+  uniquick create <slug> --title <title> [--data-mode open|owner-write]
+  uniquick deploy <dir> --site <slug>
+  uniquick list
+  uniquick delete <slug> --yes
+  uniquick token-check
+
+  (from a repo checkout, prefix any command with: npx tsx cli/uniquick.ts)
+
+env:
+  UNIQUICK_URL    platform base URL (default https://uniquick.azurewebsites.net)
+  UNIQUICK_TOKEN  deploy token from ${BASE}/token`;
+async function main() {
+  const { command, positional, flags } = parseArgs(process.argv.slice(2));
+  switch (command) {
+    case "create": {
+      const slug = positional[0] ?? fail("usage: uniquick create <slug> --title <title> [--data-mode open|owner-write]");
+      const title = typeof flags.title === "string" ? flags.title : fail("--title <title> is required");
+      const dataMode = flags["data-mode"];
+      if (dataMode !== void 0 && dataMode !== "open" && dataMode !== "owner-write") {
+        fail("--data-mode must be 'open' or 'owner-write'");
+      }
+      const body = { slug, title };
+      if (typeof dataMode === "string") body.data_mode = dataMode;
+      const created = await api("POST", "/api/sites", body);
+      console.log(`Created site '${created.id}' -> ${BASE}/s/${created.id}/`);
+      break;
+    }
+    case "deploy": {
+      const dirArg = positional[0] ?? fail("usage: uniquick deploy <dir> --site <slug>");
+      const site = typeof flags.site === "string" ? flags.site : fail("--site <slug> is required");
+      const dir = resolve(dirArg);
+      if (!existsSync(dir)) fail(`directory not found: ${dir}`);
+      const manifest = buildManifest(dir);
+      if (manifest.files.length === 0) fail(`no files found in ${dir}`);
+      if (!manifest.files.some((f) => f.path === "index.html")) {
+        console.error(`warning: no top-level index.html \u2014 ${BASE}/s/${site}/ will 404`);
+      }
+      await api("POST", `/api/sites/${encodeURIComponent(site)}/deploy`, manifest);
+      console.log(`Deployed ${manifest.files.length} file(s) -> ${BASE}/s/${site}/`);
+      break;
+    }
+    case "list": {
+      const sites = await api("GET", "/api/sites");
+      if (!Array.isArray(sites) || sites.length === 0) {
+        console.log("no sites yet \u2014 try: npx tsx cli/uniquick.ts create my-site --title 'My Site'");
+        break;
+      }
+      for (const s of sites) {
+        console.log(`${s.id}	${s.data_mode}	${BASE}/s/${s.id}/	${s.title}`);
+      }
+      break;
+    }
+    case "delete": {
+      const slug = positional[0] ?? fail("usage: uniquick delete <slug> --yes");
+      if (flags.yes !== true) fail(`refusing to delete '${slug}' without --yes (this removes the site, its data, and its uploads)`);
+      await api("DELETE", `/api/sites/${encodeURIComponent(slug)}`);
+      console.log(`Deleted site '${slug}'`);
+      break;
+    }
+    case "token-check": {
+      const me = await api("GET", "/api/me");
+      console.log(`Token OK \u2014 authenticated as ${me.name} <${me.upn}> against ${BASE}`);
+      break;
+    }
+    case "":
+      console.log(USAGE);
+      break;
+    default:
+      console.error(`unknown command '${command}'
+
+${USAGE}`);
+      process.exit(1);
+  }
+}
+var isMain = !!process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href;
+if (isMain) {
+  main().catch((e) => fail(e?.message ?? String(e)));
+}
+
+// ../mcp/server.ts
+var BASE2 = (process.env.UNIQUICK_URL ?? "https://uniquick.azurewebsites.net").replace(/\/+$/, "");
+var TOKEN = process.env.UNIQUICK_TOKEN ?? "";
+var DEPLOY_ROOT = resolve2(process.env.UNIQUICK_DEPLOY_ROOT ?? process.cwd());
+var slugSchema = z.string().regex(/^[a-z0-9][a-z0-9-]{1,62}$/, "slug must match ^[a-z0-9][a-z0-9-]{1,62}$");
+async function api2(method, path, body) {
+  if (!TOKEN) {
+    throw new Error(`UNIQUICK_TOKEN is not set. Get one at ${BASE2}/token and pass it via --env when adding this MCP server.`);
+  }
+  const res = await fetch(BASE2 + path, {
+    method,
+    headers: {
+      authorization: `Bearer ${TOKEN}`,
+      ...body !== void 0 ? { "content-type": "application/json" } : {}
+    },
+    body: body !== void 0 ? JSON.stringify(body) : void 0
+  });
+  const text = await res.text();
+  let parsed = null;
+  try {
+    parsed = text ? JSON.parse(text) : null;
+  } catch {
+  }
+  if (!res.ok) {
+    const detail = parsed?.error?.message ?? text.slice(0, 200);
+    throw new Error(`${method} ${path} failed (${res.status}): ${detail}`);
+  }
+  return parsed;
+}
+function ok(text) {
+  return { content: [{ type: "text", text }] };
+}
+var server = new McpServer({ name: "uniquick", version: "1.0.0" });
+server.registerTool(
+  "create_site",
+  {
+    description: `Create a new UniQuick site. slug becomes the URL: ${BASE2}/s/<slug>/. data_mode 'open' (default) lets any signed-in visitor write data; 'owner-write' restricts data writes to the site owner.`,
+    inputSchema: {
+      slug: slugSchema.describe(
+        "URL slug, lowercase letters/digits/hyphens, e.g. 'guestbook'. The server prefixes it with your netid ('guestbook' becomes 'vishal-guestbook') \u2014 use the id from the response for later calls."
+      ),
+      title: z.string().describe("Human-readable site title"),
+      data_mode: z.enum(["open", "owner-write"]).optional()
+    }
+  },
+  async ({ slug, title, data_mode }) => {
+    const body = { slug, title };
+    if (data_mode) body.data_mode = data_mode;
+    const created = await api2("POST", "/api/sites", body);
+    return ok(`Created site '${created.id}'. Deploy files with deploy_site (site: '${created.id}'), then visit ${BASE2}/s/${created.id}/`);
+  }
+);
+server.registerTool(
+  "deploy_site",
+  {
+    description: "Deploy a local directory of static files (HTML/JS/CSS/images) to an existing UniQuick site. Walks the directory recursively and uploads every file (dotfiles, symlinks, .git, and node_modules are skipped; 5MB per-file / 40MB total limits). SECURITY: dir MUST be inside the configured deploy root (UNIQUICK_DEPLOY_ROOT, default: the server's working directory) \u2014 deploys from other locations (home directories, system paths, secret stores) are refused. Never deploy directories the user did not explicitly ask to publish.",
+    inputSchema: {
+      site: slugSchema.describe("Site slug to deploy to"),
+      dir: z.string().describe("Absolute path to the directory containing index.html (must be inside UNIQUICK_DEPLOY_ROOT)")
+    }
+  },
+  async ({ site, dir }) => {
+    const abs = resolve2(dir);
+    if (!existsSync2(abs)) throw new Error(`directory not found: ${abs}`);
+    const real = checkDeployRoot(abs, DEPLOY_ROOT);
+    const manifest = buildManifest(real);
+    if (manifest.files.length === 0) throw new Error(`no files found in ${real}`);
+    const warn = manifest.files.some((f) => f.path === "index.html") ? "" : "\nWarning: no top-level index.html \u2014 the site root will 404.";
+    await api2("POST", `/api/sites/${encodeURIComponent(site)}/deploy`, manifest);
+    return ok(`Deployed ${manifest.files.length} file(s) to ${BASE2}/s/${site}/${warn}`);
+  }
+);
+server.registerTool(
+  "list_sites",
+  {
+    description: "List the sites owned by the current deploy token, with URLs.",
+    inputSchema: {}
+  },
+  async () => {
+    const sites = await api2("GET", "/api/sites");
+    if (!Array.isArray(sites) || sites.length === 0) return ok("No sites yet. Use create_site first.");
+    const lines = sites.map((s) => `- ${s.id} (${s.data_mode}) "${s.title}" -> ${BASE2}/s/${s.id}/`);
+    return ok(lines.join("\n"));
+  }
+);
+server.registerTool(
+  "delete_site",
+  {
+    description: "Permanently delete a site, including its deployed files, KV data, and uploads. Irreversible.",
+    inputSchema: { slug: slugSchema.describe("Site slug to delete") }
+  },
+  async ({ slug }) => {
+    await api2("DELETE", `/api/sites/${encodeURIComponent(slug)}`);
+    return ok(`Deleted site '${slug}'.`);
+  }
+);
+server.registerTool(
+  "get_site_url",
+  {
+    description: "Return the public URL for a site slug.",
+    inputSchema: { slug: slugSchema }
+  },
+  async ({ slug }) => ok(`${BASE2}/s/${slug}/`)
+);
+var transport = new StdioServerTransport();
+await server.connect(transport);

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "uniquick",
+  "version": "0.1.0",
+  "description": "CLI + MCP server for UniQuick — deploy AI-built sites to the UIUC UniQuick platform with one prompt.",
+  "type": "module",
+  "bin": {
+    "uniquick": "dist/cli.js",
+    "uniquick-mcp": "dist/mcp.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "node build.mjs",
+    "prepack": "node build.mjs"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.0"
+  },
+  "keywords": [
+    "uniquick",
+    "mcp",
+    "model-context-protocol",
+    "illinois",
+    "deploy",
+    "static-sites"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gies-ai-experiments/uniquick.git",
+    "directory": "npm"
+  },
+  "homepage": "https://uniquick.azurewebsites.net"
+}