rosett-ai 1.3.3

data/lib/rosett_ai/mcp/middleware/request_size.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Middleware
+      # Rack middleware that enforces maximum request body size.
+      #
+      # Returns 413 Payload Too Large for oversized requests.
+      # Default limit: 1 MB.
+      #
+      # @author hugo
+      # @author claude
+      class RequestSize
+        DEFAULT_MAX_SIZE = 1_048_576 # 1 MB
+
+        # @param app [#call] the next Rack application
+        # @param max_size [Integer] maximum request body size in bytes
+        def initialize(app, max_size: DEFAULT_MAX_SIZE)
+          @app = app
+          @max_size = max_size
+        end
+
+        # @param env [Hash] Rack environment
+        # @return [Array] Rack response triplet
+        def call(env)
+          content_length = env['CONTENT_LENGTH'].to_i
+          return payload_too_large(content_length) if content_length > @max_size
+
+          @app.call(env)
+        end
+
+        private
+
+        def payload_too_large(size)
+          body = JSON.generate(
+            jsonrpc: '2.0',
+            error: {
+              code: -32_600,
+              message: "Payload too large (#{size} bytes, max #{@max_size})"
+            },
+            id: nil
+          )
+          [413, { 'content-type' => 'application/json' }, [body]]
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/plugins.rb

@@ -0,0 +1,143 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    # Plugin auto-discovery and loading for MCP server.
+    #
+    # Discovers installed gems named `rosett-ai-mcp-*` and loads them
+    # as MCP server plugins. Convention: gem `rosett-ai-mcp-foo` defines
+    # `RosettAiMcp::Plugins::Foo` with a `.register(server)` method.
+    #
+    # Governance (built-in tools) is always loaded first.
+    #
+    # @author hugo
+    # @author claude
+    module Plugins
+      PLUGIN_MUTEX = Mutex.new
+
+      module_function
+
+      # Register a plugin class by name.
+      #
+      # @param name [Symbol] plugin name
+      # @param plugin_class [Class] plugin class with .register(server)
+      # @return [void]
+      def register(name, plugin_class)
+        PLUGIN_MUTEX.synchronize { plugin_registry[name.to_sym] = plugin_class }
+      end
+
+      # Check if a plugin is available (registered or gem installed).
+      #
+      # @param name [Symbol, String] plugin name
+      # @return [Boolean]
+      def available?(name)
+        PLUGIN_MUTEX.synchronize { plugin_registry.key?(name.to_sym) } || gem_available?(name)
+      end
+
+      # Load all discovered plugins and register with server.
+      #
+      # @param server [MCP::Server] the MCP server instance
+      # @param plugin_names [Array<String>] explicit plugins to load
+      # @return [Array<Symbol>] loaded plugin names
+      def load_all(server, plugin_names = [])
+        discovered = discover_plugin_gems
+        all_plugins = (discovered + plugin_names.map(&:to_sym)).uniq
+        loaded = []
+
+        all_plugins.each do |name|
+          loaded << name if load_plugin(server, name)
+        end
+        loaded
+      end
+
+      # Load a single plugin by name.
+      #
+      # @param server [MCP::Server] the MCP server instance
+      # @param name [Symbol, String] plugin name
+      # @return [Boolean] true if loaded successfully
+      def load_plugin(server, name)
+        sym = name.to_sym
+        plugin_class = PLUGIN_MUTEX.synchronize { plugin_registry[sym] }
+
+        if plugin_class
+          plugin_class.register(server)
+          return true
+        end
+
+        require_and_register_gem(server, sym)
+      rescue StandardError, LoadError => e
+        warn "[rai-mcp] Plugin load failed for #{name}: #{e.message}"
+        false
+      end
+
+      # Discover installed gems named rosett-ai-mcp-*.
+      #
+      # @return [Array<Symbol>] discovered plugin names
+      def discover_plugin_gems
+        discovered = []
+        Gem::Specification.each do |spec|
+          next unless spec.name.start_with?('rosett-ai-mcp-') && spec.name != 'rosett-ai-mcp'
+
+          plugin_name = spec.name.sub('rosett-ai-mcp-', '')
+          discovered << plugin_name.to_sym
+        end
+        discovered
+      rescue StandardError
+        []
+      end
+
+      # Read-only access to the plugin registry.
+      #
+      # @return [Hash] registered plugins
+      def registry
+        PLUGIN_MUTEX.synchronize { plugin_registry.dup }
+      end
+
+      # Reset the registry (for testing).
+      #
+      # @return [void]
+      def reset!
+        PLUGIN_MUTEX.synchronize { plugin_registry.clear }
+      end
+
+      # Thread-safe access to the plugin store.
+      #
+      # @return [Hash] mutable registry hash
+      def plugin_registry
+        @plugin_registry ||= {} # rubocop:disable ThreadSafety/ClassInstanceVariable
+      end
+
+      # Allowlist prefix for plugin constant resolution.
+      PLUGIN_NAMESPACE = 'RosettAiMcp::Plugins::'
+
+      class << self
+        private
+
+        def gem_available?(name)
+          Gem::Specification.find_by_name("rosett-ai-mcp-#{name}")
+          true
+        rescue Gem::MissingSpecError
+          false
+        end
+
+        def require_and_register_gem(server, name) # rubocop:disable Naming/PredicateMethod
+          gem_name = "rosett-ai-mcp-#{name}"
+          require gem_name.tr('-', '_')
+
+          plugin_class_name = name.to_s.split(/[-_]/).map(&:capitalize).join
+          qualified_name = "#{PLUGIN_NAMESPACE}#{plugin_class_name}"
+
+          # Safe constant resolution via Object.const_get with validated name
+          raise ArgumentError, "Invalid plugin name: #{name}" unless plugin_class_name.match?(/\A[A-Z][a-zA-Z0-9]*\z/)
+
+          plugin_module = Object.const_get(qualified_name) # rubocop:disable RosettAi/UnsafeConstGet
+          plugin_module.register(server)
+          true
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/prompts/compilation_prompt.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Prompts
+      # MCP prompt: compilation workflow.
+      #
+      # Provides a structured prompt for AI agents to compile
+      # rai behaviours and review the output.
+      #
+      # @author hugo
+      # @author claude
+      class CompilationPrompt
+        PROMPT_NAME = 'rai_compilation_workflow'
+        DESCRIPTION = 'Compile rai behaviours and review output'
+
+        # Generates the compilation prompt messages.
+        #
+        # @param engine [String] target engine (default 'claude')
+        # @return [Array<Hash>] MCP prompt messages
+        def call(engine: 'claude')
+          [
+            {
+              role: 'user',
+              content: {
+                type: 'text',
+                text: "Please compile rai behaviours for the '#{engine}' engine. " \
+                      'First run nncc_compile with simulate=true to preview changes, ' \
+                      'then review the diffs before confirming compilation.'
+              }
+            }
+          ]
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/prompts/compliance_prompt.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Prompts
+      # MCP prompt: compliance workflow.
+      #
+      # Provides a structured prompt for AI agents to run compliance
+      # checks and interpret the results.
+      #
+      # @author hugo
+      # @author claude
+      class CompliancePrompt
+        PROMPT_NAME = 'rai_compliance_workflow'
+        DESCRIPTION = 'Run compliance checks and interpret results'
+
+        # Generates the compliance prompt messages.
+        #
+        # @param scope [String, nil] optional scope ('cra', 'license', 'headers')
+        # @return [Array<Hash>] MCP prompt messages
+        def call(scope: nil)
+          scope_text = scope ? " focusing on #{scope} checks" : ''
+          [
+            {
+              role: 'user',
+              content: {
+                type: 'text',
+                text: "Please run rosett-ai compliance checks#{scope_text}. " \
+                      'Use the Rosett-AI_comply tool to check for violations, then ' \
+                      'review any findings and suggest remediation steps.'
+              }
+            }
+          ]
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/prompts/diagnostics_prompt.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Prompts
+      # MCP prompt: diagnostics workflow.
+      #
+      # Provides a structured prompt for AI agents to run diagnostics
+      # and troubleshoot issues.
+      #
+      # @author hugo
+      # @author claude
+      class DiagnosticsPrompt
+        PROMPT_NAME = 'rai_diagnostics_workflow'
+        DESCRIPTION = 'Run diagnostics and troubleshoot issues'
+
+        # Generates the diagnostics prompt messages.
+        #
+        # @param check [String, nil] specific check to focus on
+        # @return [Array<Hash>] MCP prompt messages
+        def call(check: nil)
+          check_text = check ? " specifically the '#{check}' check" : ''
+          [
+            {
+              role: 'user',
+              content: {
+                type: 'text',
+                text: "Please run rosett-ai diagnostics#{check_text}. " \
+                      'Use the Rosett-AI_doctor tool to check system health, then ' \
+                      'review any failures and suggest troubleshooting steps.'
+              }
+            }
+          ]
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/prompts/validation_prompt.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Prompts
+      # MCP prompt: validation workflow.
+      #
+      # Provides a structured prompt for AI agents to validate
+      # rai configuration and suggest fixes for any issues found.
+      #
+      # @author hugo
+      # @author claude
+      class ValidationPrompt
+        PROMPT_NAME = 'rai_validation_workflow'
+        DESCRIPTION = 'Validate rai configuration and suggest fixes'
+
+        # Generates the validation prompt messages.
+        #
+        # @param scope [String, nil] optional scope filter
+        # @return [Array<Hash>] MCP prompt messages
+        def call(scope: nil)
+          scope_text = scope ? " for scope '#{scope}'" : ''
+          [
+            {
+              role: 'user',
+              content: {
+                type: 'text',
+                text: "Please validate all rai configuration files#{scope_text}. " \
+                      'Use the Rosett-AI_validate tool to check for errors, then review ' \
+                      'any issues found and suggest specific fixes.'
+              }
+            }
+          ]
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/resources/behaviour_resource.rb

@@ -0,0 +1,127 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Resources
+      # MCP resource provider for rai behaviour files.
+      #
+      # Exposes behaviour YAML files as MCP resources with 3-tier lookup:
+      # project > XDG user > packaged. Supports tier query parameter
+      # to request a specific tier.
+      #
+      # URIs: rosett-ai://behaviour/{name}
+      #       rosett-ai://behaviour/{name}?tier=xdg
+      #
+      # @author hugo
+      # @author claude
+      class BehaviourResource
+        URI_PREFIX = 'rosett-ai://behaviour/'
+
+        TIER_DIRS = {
+          'project' => -> { RosettAi.conf_root.join('conf', 'behaviour') },
+          'xdg' => -> { RosettAi.paths.rai_conf_dir.join('behaviour') },
+          'packaged' => -> { RosettAi.paths.packaged_conf_dir.join('behaviour') }
+        }.freeze
+
+        # Lists all available behaviour resources across all tiers.
+        #
+        # @return [Array<Hash>] resource entries with :uri, :name, :description
+        def list
+          names = Set.new
+          tier_dirs.each_value do |dir|
+            next unless dir.directory?
+
+            dir.glob('*.yml').each { |path| names << path.basename('.yml').to_s }
+          end
+
+          names.sort.map { |name| resource_entry(name) }
+        end
+
+        # Reads a specific behaviour resource via 3-tier lookup.
+        #
+        # @param name [String] behaviour name, optionally with ?tier= query
+        # @return [Hash, nil] resource content with :uri, :content, :mime_type
+        def read(name)
+          base_name, tier = parse_name_and_tier(name)
+          path = tier ? find_in_tier(base_name, tier) : find_first(base_name)
+          return nil unless path&.exist?
+
+          {
+            uri: "#{URI_PREFIX}#{base_name}",
+            content: File.read(path),
+            mime_type: 'application/x-yaml',
+            tier: tier || detected_tier(path)
+          }
+        end
+
+        private
+
+        # @return [Hash{String => Pathname}]
+        def tier_dirs
+          TIER_DIRS.transform_values(&:call)
+        end
+
+        # @param raw [String] e.g. "criticalthinking?tier=xdg"
+        # @return [Array(String, String)] [base_name, tier]
+        def parse_name_and_tier(raw)
+          if raw.include?('?')
+            base, query = raw.split('?', 2)
+            tier = query[/tier=(\w+)/, 1]
+            [base, tier]
+          else
+            [raw, nil]
+          end
+        end
+
+        # @param name [String]
+        # @param tier [String]
+        # @return [Pathname, nil]
+        def find_in_tier(name, tier)
+          dir = tier_dirs[tier]
+          return nil unless dir&.directory?
+
+          path = dir.join("#{name}.yml")
+          path.exist? ? path : nil
+        end
+
+        # First-wins lookup: project > xdg > packaged.
+        #
+        # @param name [String]
+        # @return [Pathname, nil]
+        def find_first(name)
+          tier_dirs.each_value do |dir|
+            next unless dir.directory?
+
+            path = dir.join("#{name}.yml")
+            return path if path.exist?
+          end
+          nil
+        end
+
+        # @param path [Pathname]
+        # @return [String]
+        def detected_tier(path)
+          path_str = path.to_s
+          tier_dirs.each do |tier, dir|
+            return tier if path_str.start_with?(dir.to_s)
+          end
+          'unknown'
+        end
+
+        # @param name [String]
+        # @return [Hash]
+        def resource_entry(name)
+          {
+            uri: "#{URI_PREFIX}#{name}",
+            name: name,
+            description: "Behaviour configuration: #{name}",
+            mime_type: 'application/x-yaml'
+          }
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/resources/config_resource.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Resources
+      # MCP resource provider for compiled configuration.
+      #
+      # Exposes compiled configuration scopes as MCP resources.
+      #
+      # @author hugo
+      # @author claude
+      class ConfigResource
+        URI_PREFIX = 'rosett-ai://config/'
+        SCOPES = ['managed', 'user', 'project', 'local'].freeze
+
+        # Lists available config resources.
+        #
+        # @return [Array<Hash>] resource entries
+        def list
+          SCOPES.filter_map do |scope|
+            path = scope_path(scope)
+            next unless path&.exist?
+
+            {
+              uri: "#{URI_PREFIX}#{scope}",
+              name: "config-#{scope}",
+              description: "Compiled configuration: #{scope} scope",
+              mime_type: 'application/json'
+            }
+          end
+        end
+
+        # Reads a specific config scope.
+        #
+        # @param scope [String] scope name (managed, user, project, local)
+        # @return [Hash, nil] resource content
+        def read(scope)
+          return nil unless SCOPES.include?(scope)
+
+          path = scope_path(scope)
+          return nil unless path&.exist?
+
+          {
+            uri: "#{URI_PREFIX}#{scope}",
+            content: File.read(path),
+            mime_type: 'application/json'
+          }
+        end
+
+        private
+
+        # @param scope [String]
+        # @return [Pathname, nil]
+        def scope_path(scope)
+          case scope
+          when 'managed'
+            Pathname.new(File.expand_path('~/.claude/settings.json'))
+          when 'user'
+            Pathname.new(File.expand_path('~/.claude/settings.local.json'))
+          when 'project'
+            RosettAi.root.join('.claude', 'settings.json')
+          when 'local'
+            RosettAi.root.join('.claude', 'settings.local.json')
+          end
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/resources/design_resource.rb

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Resources
+      # MCP resource provider for rai design documents.
+      #
+      # Exposes design YAML files as MCP resources with
+      # URIs in the format rosett-ai://design/{name}.
+      #
+      # @author hugo
+      # @author claude
+      class DesignResource
+        URI_PREFIX = 'rosett-ai://design/'
+
+        # Lists all available design resources.
+        #
+        # @return [Array<Hash>] resource entries with :uri, :name, :description
+        def list
+          dir = RosettAi.root.join('conf', 'design')
+          return [] unless dir.directory?
+
+          dir.glob('*.yml').map { |path| resource_entry(path) }
+        end
+
+        # Reads a specific design resource.
+        #
+        # @param name [String] design name (without .yml)
+        # @return [Hash, nil] resource content with :uri, :content, :mime_type
+        def read(name)
+          path = RosettAi.root.join('conf', 'design', "#{name}.yml")
+          return nil unless path.exist?
+
+          {
+            uri: "#{URI_PREFIX}#{name}",
+            content: File.read(path),
+            mime_type: 'application/x-yaml'
+          }
+        end
+
+        private
+
+        def resource_entry(path)
+          name = path.basename('.yml').to_s
+          {
+            uri: "#{URI_PREFIX}#{name}",
+            name: name,
+            description: "Design document: #{name}",
+            mime_type: 'application/x-yaml'
+          }
+        end
+      end
+    end
+  end
+end

data/lib/rosett_ai/mcp/resources/hooks_resource.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
+
+module RosettAi
+  module Mcp
+    module Resources
+      # MCP resource provider for installed hook scripts.
+      #
+      # Exposes installed rai enforcement hooks as MCP resources
+      # with URIs in the format rosett-ai://hooks/{scope}.
+      #
+      # @author hugo
+      # @author claude
+      class HooksResource
+        URI_PREFIX = 'rosett-ai://hooks/'
+
+        SCOPES = {
+          'global' => -> { RosettAi.paths.global_dir.join('hooks') },
+          'project' => -> { RosettAi.context.project_root.join('.claude', 'hooks') }
+        }.freeze
+
+        # Lists available hook resources.
+        #
+        # @return [Array<Hash>] resource entries
+        def list
+          SCOPES.filter_map do |scope, dir_factory|
+            dir = safe_dir(dir_factory)
+            next unless dir&.directory? && dir.glob('*.rb').any?
+
+            {
+              uri: "#{URI_PREFIX}#{scope}",
+              name: "hooks-#{scope}",
+              description: "Installed hooks: #{scope} scope",
+              mime_type: 'text/x-ruby'
+            }
+          end
+        end
+
+        # Reads hooks for a specific scope.
+        #
+        # @param scope [String] 'global' or 'project'
+        # @return [Hash, nil] resource content
+        def read(scope)
+          dir_factory = SCOPES[scope]
+          return nil unless dir_factory
+
+          dir = safe_dir(dir_factory)
+          return nil unless dir&.directory?
+
+          scripts = dir.glob('*.rb').map { |path| File.read(path) }
+          return nil if scripts.empty?
+
+          {
+            uri: "#{URI_PREFIX}#{scope}",
+            content: scripts.join("\n\n# --- next hook ---\n\n"),
+            mime_type: 'text/x-ruby'
+          }
+        end
+
+        private
+
+        # @param factory [Proc]
+        # @return [Pathname, nil]
+        def safe_dir(factory)
+          factory.call
+        rescue StandardError
+          nil
+        end
+      end
+    end
+  end
+end