Skip to content

fix(npm): refuse operator CLI verbs and install worker deps - #33

Merged
ContextForgeAI merged 2 commits into
mainfrom
fix/npm-operator-cli-honesty
Sep 1, 2026
Merged

fix(npm): refuse operator CLI verbs and install worker deps#33
ContextForgeAI merged 2 commits into
mainfrom
fix/npm-operator-cli-honesty

Conversation

@ContextForgeAI

Copy link
Copy Markdown
Owner

Summary

  • npx ff-occam connect (and other tarball operator verbs) no longer start the MCP host with junk argv — they exit with a pointer to get-ff-occam / INSTALL.md.
  • npm release-cache path runs npm install under workers/ when node_modules is missing (fixes @mozilla/readability / extract breakage after bare download).
  • Docs: troubleshooting rows for npm connect and Linux AOT glibc ≥ 2.38; package READMEs + CHANGELOG.

Test plan

  • node --test packages/occam-mcp/test/operator-cli-guard.test.js
  • node --test packages/ff-occam/test/package.test.js (includes ff-occam connect refusal)
  • CI green on this PR
  • Optional: on a clean cache dir, npx @ff-occam/mcp installs workers then starts host

npx ff-occam connect was spawning the MCP host with junk argv. Refuse connect/doctor/… with a get-ff-occam pointer, and run workers npm install when the release cache lacks node_modules.
MkDocs strict build failed on ../INSTALL.md — use in-tree install.md like other docs pages.
@ContextForgeAI

Copy link
Copy Markdown
Owner Author

Autopilot pass: fixed MkDocs strict failure (troubleshooting link ../INSTALL.md\ → \install.md). All required checks green; mergeStateStatus=CLEAN; no open review threads.

@ContextForgeAI
ContextForgeAI merged commit 51724ae into main Sep 1, 2026
17 checks passed
@ContextForgeAI
ContextForgeAI deleted the fix/npm-operator-cli-honesty branch September 1, 2026 14:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant