build-mcpb.sh

#!/usr/bin/env bash
set -euo pipefail

# Build MCP Bundle (mcpb) for Snyk Security
# Usage: ./build-mcpb.sh <version> <output_dir>

VERSION="${1}"
OUTPUT_DIR="${2}"
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
TEMP_DIR=$(mktemp -d)
CLI_DIR="${TEMP_DIR}/cli"

# Cleanup on exit
trap 'rm -rf "${TEMP_DIR}"' EXIT

echo "Building snyk.mcpb with version: ${VERSION}"
echo "Output directory: ${OUTPUT_DIR}"

# Ensure output directory exists
mkdir -p "${OUTPUT_DIR}"

# Convert OUTPUT_DIR to absolute path
OUTPUT_DIR="$(cd "${OUTPUT_DIR}" && pwd)"

git clone --depth 1 https://github.com/snyk/cli "$CLI_DIR"

# Get snyk-ls commit hash from go.mod
pushd "$CLI_DIR/cliv2"
  SNYK_LS_VERSION=$(grep "github.com/snyk/snyk-ls" go.mod | head -1 | awk '{print $2}')
  echo "Using snyk-ls version: ${SNYK_LS_VERSION}"

  # Extract commit hash from version (format: v0.0.0-YYYYMMDDHHMMSS-COMMITSHORT)
  COMMIT_HASH=$(echo "${SNYK_LS_VERSION}" | sed 's/.*-//')
  echo "Using commit hash: ${COMMIT_HASH}"
popd

rm -rf "$CLI_DIR"

# Update version in manifest.json
echo "Updating version in manifest.json to ${VERSION}..."
if [[ "$OSTYPE" == "darwin"* ]]; then
    # macOS
    sed -i '' "s/\"version\":[[:space:]]*\"[^\"]*\"/\"version\": \"${VERSION}\"/" "manifest.json"
else
    # Linux
    sed -i "s/\"version\":[[:space:]]*\"[^\"]*\"/\"version\": \"${VERSION}\"/" "manifest.json"
fi

# Install Snyk CLI as a bundled dependency so the binary is packaged inside the .mcpb
echo "Installing snyk@${VERSION} as bundled dependency..."
rm -rf node_modules package.json package-lock.json
cat > package.json <<PKGJSON
{
  "name": "snyk-mcpb",
  "version": "${VERSION}",
  "private": true,
  "dependencies": {
    "snyk": "${VERSION}"
  }
}
PKGJSON
npm install --production

# Build the mcpb file
echo "Building mcpb file..."
npx @anthropic-ai/mcpb pack . "${OUTPUT_DIR}/snyk.mcpb"

# Create SHA256 checksum
pushd "${OUTPUT_DIR}"
  echo "Creating SHA256 checksum..."
  if [[ "$OSTYPE" == "darwin"* ]]; then
      # macOS
      shasum -a 256 snyk.mcpb > snyk.mcpb.sha256
  else
      # Linux
      sha256sum snyk.mcpb > snyk.mcpb.sha256
  fi
popd

echo "Successfully built snyk.mcpb"
echo "Output files:"
echo "  - ${OUTPUT_DIR}/snyk.mcpb"
echo "  - ${OUTPUT_DIR}/snyk.mcpb.sha256"