webcake-landing-mcp 1.5.10 → 1.5.11

package/dist/changelog.json

@@ -1,4 +1,11 @@
 [
+  {
+    "v": "1.5.11",
+    "d": "13/10/2026",
+    "type": "Fixed",
+    "en": "The HTTP server now answers HEAD requests the same way it answers GET on every public read-only route (/privacy, /privacy-policy, /terms, /tos,…",
+    "vi": "HTTP server nay trả lời request HEAD giống như GET trên mọi route công khai chỉ-đọc (/privacy, /privacy-policy, /terms, /tos, /favicon.ico,…"
+  },
   {
     "v": "1.5.10",
     "d": "13/10/2026",
@@ -33,12 +40,5 @@
     "type": "Fixed",
     "en": "The HTTP server now serves a 192px PNG at /favicon.ico, /favicon.png, and /apple-touch-icon.png (with matching <link rel=\"icon\">/<link…",
     "vi": "HTTP server nay phục vụ PNG 192px tại /favicon.ico, /favicon.png, và /apple-touch-icon.png (kèm thẻ <link rel=\"icon\">/<link rel=\"apple-touch-icon\">…"
-  },
-  {
-    "v": "1.5.5",
-    "d": "13/10/2026",
-    "type": "Fixed",
-    "en": "The page/source/sections/patches parameters on validate_page, create_page, update_page, add_section, and patch_page now declare a typed JSON Schema…",
-    "vi": "Các tham số page/source/sections/patches của validate_page, create_page, update_page, add_section, và patch_page nay khai báo JSON Schema có kiểu rõ…"
   }
 ]

package/dist/http.js

@@ -81,6 +81,12 @@ function iconPng() {
         return null;
     }
 }
+// Public pages/assets answer HEAD like GET (Node drops the body on HEAD): link
+// checkers — incl. the connector-directory form — probe with HEAD, and a 404
+// there made /privacy and /terms look missing.
+function isRead(req) {
+    return req.method === "GET" || req.method === "HEAD";
+}
 function sendJson(res, status, body) {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify(body));
@@ -186,12 +192,12 @@ function htmlError(res, status, message) {
 async function handleOAuth(req, res, path) {
     const issuer = publicBase(req);
     // ---- Metadata (RFC 8414 / RFC 9728) ----
-    if (req.method === "GET" && path === WELL_KNOWN_PR) {
+    if (isRead(req) && path === WELL_KNOWN_PR) {
         res.writeHead(200, { "content-type": "application/json", "access-control-allow-origin": "*" });
         res.end(JSON.stringify(protectedResourceMetadata(`${issuer}${MCP_PATH}`, issuer)));
         return true;
     }
-    if (req.method === "GET" && path === WELL_KNOWN_AS) {
+    if (isRead(req) && path === WELL_KNOWN_AS) {
         res.writeHead(200, { "content-type": "application/json", "access-control-allow-origin": "*" });
         res.end(JSON.stringify(authServerMetadata(issuer)));
         return true;
@@ -397,21 +403,21 @@ export async function startHttpServer(port) {
         const path = (req.url ?? "").split("?")[0];
         // Brand icon — clients (e.g. the claude.ai connector) fetch a favicon from the
         // server origin; without one they show a generic globe. Served raw as SVG.
-        if (req.method === "GET" && (path === "/favicon.ico" || path === "/favicon.png" || path === "/icon.png" || path === "/apple-touch-icon.png")) {
+        if (isRead(req) && (path === "/favicon.ico" || path === "/favicon.png" || path === "/icon.png" || path === "/apple-touch-icon.png")) {
             const png = iconPng();
             if (png) {
                 res.writeHead(200, { "content-type": "image/png", "cache-control": "public, max-age=86400" });
                 return res.end(png);
             }
         }
-        if (req.method === "GET" && (path === "/favicon.ico" || path === "/favicon.svg" || path === "/icon.svg")) {
+        if (isRead(req) && (path === "/favicon.ico" || path === "/favicon.svg" || path === "/icon.svg")) {
             res.writeHead(200, { "content-type": ICON_MIME, "cache-control": "public, max-age=86400" });
             return res.end(ICON_SVG);
         }
         // Social-card image referenced by the landing page's og:image / twitter:image.
         // PNG is the canonical og:image (unfurls everywhere); the SVG stays for clients
         // that prefer it (Slack/Telegram/Discord) and as a fallback if og.png is absent.
-        if (req.method === "GET" && path === "/og.png") {
+        if (isRead(req) && path === "/og.png") {
             const png = ogImagePng();
             if (png) {
                 res.writeHead(200, { "content-type": "image/png", "cache-control": "public, max-age=86400" });
@@ -421,21 +427,21 @@ export async function startHttpServer(port) {
             res.writeHead(200, { "content-type": ICON_MIME, "cache-control": "public, max-age=86400" });
             return res.end(ogImageSvg());
         }
-        if (req.method === "GET" && path === "/og.svg") {
+        if (isRead(req) && path === "/og.svg") {
             res.writeHead(200, { "content-type": ICON_MIME, "cache-control": "public, max-age=86400" });
             return res.end(ogImageSvg());
         }
         // Public legal pages — required URLs for the Claude/ChatGPT directory submission.
-        if (req.method === "GET" && (path === "/privacy" || path === "/privacy-policy")) {
+        if (isRead(req) && (path === "/privacy" || path === "/privacy-policy")) {
             res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "public, max-age=3600" });
             return res.end(privacyHtml());
         }
-        if (req.method === "GET" && (path === "/terms" || path === "/tos")) {
+        if (isRead(req) && (path === "/terms" || path === "/tos")) {
             res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "public, max-age=3600" });
             return res.end(termsHtml());
         }
         // Lightweight health check for hosting platforms.
-        if (req.method === "GET" && (path === "/" || path === "/health")) {
+        if (isRead(req) && (path === "/" || path === "/health")) {
             // A browser/connector probing the root with `Accept: text/html` gets a tiny
             // page that links the favicon (helps icon discovery); programmatic probes
             // (the container healthcheck uses `Accept: */*`) still get the JSON health.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "webcake-landing-mcp",
-  "version": "1.5.10",
+  "version": "1.5.11",
   "description": "MCP server exposing Webcake landing-page element schemas + AI usage hints, and persisting LLM-generated page sources to a Webcake backend.",
   "mcpName": "io.github.vuluu2k/webcake-landing-mcp",
   "type": "module",