feat(mendix-widgets-mcp): dockerize the server

Author: rahmanunver

automation/mendix-widgets-mcp/src/index.ts

@@ -0,0 +1,74 @@
+# Multi-stage build for mendix-pluggable-mcp
+FROM node:22-alpine AS base
+
+# Install pnpm
+RUN corepack enable && corepack prepare pnpm@10.17.0 --activate
+
+# Set working directory
+WORKDIR /app
+
+# Stage 1: Install dependencies for the entire monorepo
+FROM base AS deps
+
+# Copy root package files
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+
+# Copy pnpm configuration files (required for lockfile validation)
+COPY .pnpmfile.cjs .npmrc ./
+
+# Copy patches directory (required by pnpm)
+COPY patches ./patches/
+
+# Copy automation-utils dependency (complete structure)
+COPY automation/utils ./automation/utils/
+
+# Copy MCP server package files
+COPY mcp/package.json mcp/
+
+# Install all dependencies (ignore scripts to skip postinstall)
+RUN pnpm install --frozen-lockfile --filter @mendix/mendix-pluggable-mcp... --ignore-scripts
+
+# Stage 2: Build the MCP server
+FROM deps AS builder
+
+# Copy entire automation directory
+COPY automation ./automation/
+
+# Copy docs and packages directories (needed by MCP server at runtime)
+COPY docs ./docs/
+COPY packages ./packages/
+
+# Build the MCP server
+WORKDIR /app/mcp
+RUN pnpm build
+
+# Stage 3: Production image
+FROM base AS runner
+
+# Copy root configuration files
+COPY --from=builder /app/package.json /app/pnpm-lock.yaml /app/pnpm-workspace.yaml /app/
+COPY --from=builder /app/.pnpmfile.cjs /app/.npmrc /app/
+
+# Copy monorepo directories that MCP server needs to access
+COPY --from=builder /app/patches /app/patches/
+COPY --from=builder /app/automation /app/automation/
+COPY --from=builder /app/docs /app/docs/
+COPY --from=builder /app/packages /app/packages/
+
+# Install only production dependencies (ignore scripts to skip postinstall)
+WORKDIR /app
+RUN pnpm install --frozen-lockfile --filter @mendix/mendix-pluggable-mcp... --prod --ignore-scripts
+
+# Environment variables
+ENV NODE_ENV=production
+ENV MX_PROJECT_PATH=""
+ENV REPO_ROOT=/app
+
+# Set working directory to app root
+# When running with volume mounts, REPO_ROOT will be overridden to /workspace
+WORKDIR /app
+
+# Run the MCP server
+# The server binary is at /app/mcp/build/index.js
+# It will access repository files from REPO_ROOT (either /app or /workspace)
+CMD ["node", "/app/mcp/build/index.js"]

automation/mendix-widgets-mcp/.gitignore renamed to mcp/.gitignore

@@ -1,4 +1,4 @@
-# Mendix Widgets Copilot MCP Server
+# Mendix Widgets MCP Server
 
 An MCP (Model Context Protocol) server that provides AI-powered tooling for the `web-widgets` monorepo. Enables discovery, inspection, building, testing, property manipulation, and verification of Mendix widget packages through natural language interactions.
 
@@ -119,7 +119,7 @@ The MCP server is **pre-configured** for the team! Just follow these steps:
     pnpm run build:mcp
 
     # Or from the MCP directory:
-    cd automation/mendix-widgets-copilot && pnpm build
+    cd mcp && pnpm build
     ```
 
 2. **Restart Cursor** - The MCP server will be automatically available via the workspace configuration in `.cursor/mcp.json`
@@ -138,9 +138,9 @@ The workspace already includes the MCP configuration in `.cursor/mcp.json`:
 ```json
 {
     "mcpServers": {
-        "mendix-widgets-copilot": {
+        "mendix-pluggable-mcp": {
             "command": "node",
-            "args": ["automation/mendix-widgets-copilot/build/index.js"],
+            "args": ["mcp/build/index.js"],
             "env": {
                 "MX_PROJECT_PATH": "${workspaceFolder}/../test-project"
             },
@@ -155,7 +155,7 @@ The workspace already includes the MCP configuration in `.cursor/mcp.json`:
 For hot-reload during MCP server development:
 
 ```bash
-cd web-widgets/automation/mendix-widgets-copilot
+cd web-widgets/mcp
 pnpm dev
 ```
 

mcp/Dockerfile

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
+
+IMAGE_NAME="mendix-pluggable-mcp"
+IMAGE_TAG="latest"
+
+echo "Building Docker image for Mendix Widgets MCP Server..."
+echo "Repository root: ${REPO_ROOT}"
+
+# Clean up any orphaned containers
+echo "Cleaning up orphaned containers..."
+docker ps -a --filter "ancestor=${IMAGE_NAME}:${IMAGE_TAG}" -q | xargs -r docker rm -f 2>/dev/null || true
+
+cd "${REPO_ROOT}"
+
+# Build the Docker image
+docker build \
+  -t "${IMAGE_NAME}:${IMAGE_TAG}" \
+  -f mcp/Dockerfile \
+  .
+
+echo ""
+echo "Docker image built successfully!"
+echo "Image: ${IMAGE_NAME}:${IMAGE_TAG}"
+echo ""
+echo "To run the container:"
+echo "  docker run -i ${IMAGE_NAME}:${IMAGE_TAG}"
+echo ""
+echo "To run with volume mount for workspace:"
+echo "  docker run -i -v \"\$(pwd):/workspace\" -e CWD=/workspace ${IMAGE_NAME}:${IMAGE_TAG}"

automation/mendix-widgets-mcp/README.md renamed to mcp/README.md

@@ -1,7 +1,7 @@
 {
-    "name": "@mendix/mendix-widgets-copilot",
+    "name": "@mendix/mendix-pluggable-mcp",
     "version": "0.1.0",
-    "description": "Mendix Widgets Copilot MCP server for the web-widgets monorepo",
+    "description": "Mendix Widgets MCP server for the web-widgets monorepo",
     "license": "Apache-2.0",
     "private": true,
     "type": "module",
@@ -17,7 +17,6 @@
         "start": "node build/index.js"
     },
     "dependencies": {
-        "@mendix/automation-utils": "workspace:^",
         "@modelcontextprotocol/sdk": "^1.17.4",
         "fast-xml-parser": "^4.5.3",
         "zod": "^3.25.67"

mcp/docker-build.sh

@@ -18,9 +18,7 @@ export default {
         "path",
         "url",
         "child_process",
-        "util",
-        // Keep workspace dependencies external (they won't be bundled)
-        "@mendix/automation-utils"
+        "util"
     ],
     plugins: [
         // Handle JSON imports

automation/mendix-widgets-mcp/package.json renamed to mcp/package.json

@@ -43,9 +43,18 @@ export class Guardrails {
         const resolvedPath = resolve(targetPath);
         const relativePath = relative(this.repoRoot, resolvedPath);
 
+        // Debug logging
+        console.error(`[Guardrails] validatePath called with: ${targetPath}`);
+        console.error(`[Guardrails] repoRoot: ${this.repoRoot}`);
+        console.error(`[Guardrails] resolvedPath: ${resolvedPath}`);
+        console.error(`[Guardrails] relativePath: ${relativePath}`);
+
         // Must be within repo
         if (relativePath.startsWith("..")) {
-            throw new GuardrailError(`Path ${targetPath} is outside the repository`, "PATH_OUTSIDE_REPO");
+            throw new GuardrailError(
+                `Path ${targetPath} is outside the repository. RepoRoot: ${this.repoRoot}, Resolved: ${resolvedPath}, Relative: ${relativePath}`,
+                "PATH_OUTSIDE_REPO"
+            );
         }
 
         // Check against blocked paths
@@ -111,7 +120,11 @@ export class Guardrails {
      * Validate that a package path is a valid widget/module
      */
     async validatePackage(packagePath: string): Promise<string> {
-        const validatedPath = await this.validatePath(packagePath);
+        // First resolve the path - it might be relative or absolute
+        const resolvedPath = resolve(packagePath);
+
+        // Validate it's accessible
+        const validatedPath = await this.validatePath(resolvedPath);
 
         // Must have package.json
         const packageJsonPath = join(validatedPath, "package.json");
@@ -127,7 +140,7 @@ export class Guardrails {
 
         if (pathParts.length < 3 || pathParts[0] !== "packages") {
             throw new GuardrailError(
-                `${packagePath} is not in expected packages directory structure`,
+                `${packagePath} is not in expected packages directory structure. Path: ${relativePath}, Parts: ${pathParts.join("/")}`,
                 "INVALID_PACKAGE_STRUCTURE"
             );
         }

automation/mendix-widgets-mcp/rollup.config.mjs renamed to mcp/rollup.config.mjs

@@ -73,6 +73,29 @@ export async function resolveWidgetFiles(packagePath: string): Promise<{
     return { widgetName, srcPath, widgetXmlPath, editorConfigPath, editorPreviewPath };
 }
 
+/**
+ * Find a widget package by name (e.g., "combobox-web" or "@mendix/combobox-web")
+ * Returns the full path to the package directory
+ */
+export async function findWidgetByName(packagesDir: string, widgetName: string): Promise<string | null> {
+    const packages = await scanPackages(packagesDir);
+
+    // Normalize the widget name
+    const normalizedName = widgetName.startsWith("@mendix/") ? widgetName : `@mendix/${widgetName}`;
+
+    // Try exact match first
+    let found = packages.find(pkg => pkg.name === normalizedName);
+
+    // Try partial match (e.g., "combobox" matches "combobox-web")
+    if (!found) {
+        found = packages.find(
+            pkg => pkg.name.includes(widgetName.replace("@mendix/", "")) || pkg.path.includes(widgetName)
+        );
+    }
+
+    return found ? found.path : null;
+}
+
 export async function scanPackages(packagesDir: string): Promise<PackageInfo[]> {
     const packages: PackageInfo[] = [];