feat: upload and install custom .mcpb bundles from web UI#170

Open

Ovaculos wants to merge 21 commits into

NimbleBrainInc:mainfrom

Ovaculos:feat/mcpb-upload

Commits on May 11, 2026

feat: upload and install custom .mcpb bundles from web UI

Ovaculos
and
claude
committed
style: fix biome formatting in bundle upload files

Ovaculos
and
claude
committed
fix: remove unused import and sort imports for lint

Ovaculos
and
claude
committed
test: add failing tests for PR #170 .mcpb upload fixes

Ovaculos
and
claude
committed
fix: prevent path traversal in .mcpb bundle upload

Ovaculos
and
claude
committed
fix: thread credentials and env vars through .mcpb startup branch

Ovaculos
and
claude
committed
fix: derive .mcpb server name and dataDir from manifest, not file path

Ovaculos
and
claude
committed
test: drop integration tests pending mpak-sdk@0.7.0 release

Ovaculos
and
claude
committed
fix: thread .mcpb path through uninstall, repair workspace.json filter

Ovaculos
and
claude
committed
fix(types): infer Request.formData() return type

Ovaculos
and
claude
committed
refactor(api): hoist node:fs and mpak-sdk imports in handleBundleUpload

Ovaculos
and
claude
committed
fix(bundles): confine manage_app.path to workspace bundles dir

Ovaculos
and
claude
committed
fix(api): validate uploaded .mcpb in tempfile before commit to bundles dir

Ovaculos
and
claude
committed
fix(api): randomize uploaded .mcpb filename to prevent silent overwrite

Ovaculos
and
claude
committed
fix(api): enforce MAX_BUNDLE_SIZE post-buffer in handleBundleUpload

Ovaculos
and
claude
committed
refactor(api): extract UploadedFileEntry helper, adopt in upload handlers

Ovaculos
and
claude
committed
feat(web): track upload phase explicitly in AboutTab

Ovaculos
and
claude
committed
test: import production filter in mcpb-upload unit test

Ovaculos
and
claude
committed
test: cover .mcpb path guard and upload integration

Ovaculos
and
claude
committed
docs: changelog entry for .mcpb upload feature

Ovaculos
and
claude
committed
fix(rebase): drop duplicate bundleEntryMatchesTarget, narrow AboutTab content type

Ovaculos
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: upload and install custom .mcpb bundles from web UI#170

feat: upload and install custom .mcpb bundles from web UI#170
Ovaculos wants to merge 21 commits into
NimbleBrainInc:mainfrom
Ovaculos:feat/mcpb-upload

Commits on May 11, 2026

feat: upload and install custom .mcpb bundles from web UI

style: fix biome formatting in bundle upload files

fix: remove unused import and sort imports for lint

test: add failing tests for PR #170 .mcpb upload fixes

fix: prevent path traversal in .mcpb bundle upload

fix: thread credentials and env vars through .mcpb startup branch

fix: derive .mcpb server name and dataDir from manifest, not file path

test: drop integration tests pending mpak-sdk@0.7.0 release

fix: thread .mcpb path through uninstall, repair workspace.json filter

fix(types): infer Request.formData() return type

refactor(api): hoist node:fs and mpak-sdk imports in handleBundleUpload

fix(bundles): confine manage_app.path to workspace bundles dir

fix(api): validate uploaded .mcpb in tempfile before commit to bundles dir

fix(api): randomize uploaded .mcpb filename to prevent silent overwrite

fix(api): enforce MAX_BUNDLE_SIZE post-buffer in handleBundleUpload

refactor(api): extract UploadedFileEntry helper, adopt in upload handlers

feat(web): track upload phase explicitly in AboutTab

test: import production filter in mcpb-upload unit test

test: cover .mcpb path guard and upload integration

docs: changelog entry for .mcpb upload feature

fix(rebase): drop duplicate bundleEntryMatchesTarget, narrow AboutTab content type