Skip to content

openmcp: the OpenMCP catalog as a command, installed on first use - #67

Merged
ralyodio merged 2 commits into
masterfrom
openmcp
Sep 12, 2026
Merged

ralyodio merged 2 commits into
masterfrom
openmcp

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

What

openmcp joins agenticjobs and codeburn as a wrapped npm package: a launcher for @logicsrc/openmcp, the OpenMCP catalog client and reference server, pointed at the live catalog at openmcp.logicsrc.com.

  • bin/openmcp.ts + src/openmcp.ts: first run installs into ~/.local/share/cli-tools/vendor/openmcp (private prefix, because upstream's bin is also called openmcp); --self-update, --self-where; update, uninstall, where intercepted only for the copy we installed, handed through for one from upstream's installer or OPENMCP_BIN.
  • OPENMCP_BIN and OPENMCP_SPEC, same contract as the agenticjobs pair.
  • Node 24 floor warned, not refused, with upstream's one-line installer (which fetches its own Node 24) offered in both the floor and install-failure messages.
  • Registry summary, README table row, requirements, and a section.

Checks

  • vitest run test/openmcp.test.ts test/registry.test.ts: 47 pass.
  • tsc --noEmit: 3 errors, the same 3 already on master (argontv, free-names).
  • Real first run with XDG_DATA_HOME pointed at a temp dir: installed 0.2.0 with npm, relays listed the live catalog, where and uninstall --yes behaved.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Qh2dieNyPZ4Hx5g3XNJ1Eo

A launcher for @logicsrc/openmcp in the same shape as agenticjobs: everything
is handed through to upstream, the first run installs it into a private
prefix under ~/.local/share/cli-tools/vendor/openmcp so the name exists once
on PATH, --self-update and --self-where are ours, and update, uninstall and
where are answered here only for the copy we installed, since upstream reads
those from the manifest its own curl installer writes.

Node 24 is upstream's floor (node:sqlite); below it the command says so,
offers the one-line installer that brings its own Node, and tries anyway.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qh2dieNyPZ4Hx5g3XNJ1Eo
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

12 finding(s)

HIGH/CRITICAL: 4 | MEDIUM: 4 | LOW: 4

Severity Rule Location
HIGH sh-remote-script-execution root-ubuntu.sh:3227
HIGH sh-remote-script-execution root-ubuntu.sh:3228
HIGH sh-remote-script-execution root-ubuntu.sh:4840
HIGH sh-remote-script-execution root-ubuntu.sh:4844
MEDIUM sh-remote-script-execution root-ubuntu.sh:4993
MEDIUM sh-remote-script-execution root-ubuntu.sh:6055
MEDIUM redos-nested-quantifier src/domain-free.ts:56
MEDIUM redos-nested-quantifier src/mail.ts:1042
LOW secret-generic-credential src/credentials.ts:36
LOW secret-generic-api-key test/credentials.test.ts:208
LOW secret-generic-credential test/mail.test.ts:135
LOW secret-generic-credential test/shorten.test.ts:36

Snippets are redacted; ThreatCrush never prints matched credential material.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qh2dieNyPZ4Hx5g3XNJ1Eo
@ralyodio
ralyodio merged commit f2adbee into master Sep 12, 2026
5 checks passed
@ralyodio
ralyodio deleted the openmcp branch September 12, 2026 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant