@mgsoftwarebv/mcp-server-bridge 3.5.14 → 3.5.15

package/dist/index.js

@@ -94095,7 +94095,7 @@ var projects = pgTable(
     // Basic project management extensions
     color: text().default("#3B82F6").notNull(),
     projectCode: text("project_code"),
-    settings: jsonb().default({}),
+    settings: jsonb().$type().default({}),
     // Customer portal fields
     ownedByCustomer: boolean3("owned_by_customer").default(false),
     internal: boolean3().default(false).notNull(),
@@ -101312,7 +101312,11 @@ var teams = pgTable(
     // classifier allow-list filter. Default 30 mirrors `DEFAULT_TOOL_BUDGET_MAX`
     // in apps/api/src/ai/floris/skills/budget.ts. Read-resolver lands in
     // A5-impl.b; per-team toggles in A5-impl.c.
-    florisConfig: jsonb("floris_config").$type().default({ tool_budget_max: 30 }).notNull()
+    florisConfig: jsonb("floris_config").$type().default({ tool_budget_max: 30 }).notNull(),
+    // Per-team time-tracking policy (ticket 2026-REFRO-140). Currently holds the
+    // agent kill-switch `blockAgentDrafts`. Default `{}`; the resolver treats a
+    // missing flag as "block" so new teams are safe by default.
+    timeTrackingPolicy: jsonb("time_tracking_policy").$type().default({}).notNull()
   },
   (table) => [
     unique("teams_documents_email_id_key").on(table.documentsEmailId),
@@ -114381,6 +114385,43 @@ async function handleListGithubDirectory(input) {
 }
 
 // src/tools/hours.ts
+async function assertAgentMayLogHours(args2) {
+  const [team] = await db.select({ policy: schema_exports.teams.timeTrackingPolicy }).from(schema_exports.teams).where(eq(schema_exports.teams.id, args2.teamId)).limit(1);
+  let projectPolicy = {};
+  if (args2.projectId) {
+    const [project] = await db.select({ settings: schema_exports.projects.settings }).from(schema_exports.projects).where(eq(schema_exports.projects.id, args2.projectId)).limit(1);
+    const settings = project?.settings;
+    if (settings?.timeTracking && typeof settings.timeTracking === "object") {
+      projectPolicy = settings.timeTracking;
+    }
+  }
+  const teamBlocksAgents = team?.policy?.blockAgentDrafts ?? true;
+  const projectAllowAgents = projectPolicy.allowAgents;
+  const allowAgents = projectAllowAgents === void 0 || projectAllowAgents === null ? !teamBlocksAgents : Boolean(projectAllowAgents);
+  const enabled = projectPolicy.enabled !== false;
+  const requireTicket = projectPolicy.requireTicket === true;
+  const allowedTicketStatuses = Array.isArray(projectPolicy.allowedTicketStatuses) && projectPolicy.allowedTicketStatuses.length > 0 ? projectPolicy.allowedTicketStatuses : null;
+  if (!enabled) {
+    throw new Error(
+      "Blocked by time-tracking policy: time tracking is disabled for this project. No hours can be logged."
+    );
+  }
+  if (!allowAgents) {
+    throw new Error(
+      "Blocked by time-tracking policy: agents/automation may not log draft hours here. Ask a human to enable 'allow agents' on the project (or the team's agent time-tracking setting) before logging time."
+    );
+  }
+  if (requireTicket && !args2.hasTicket) {
+    throw new Error(
+      "Blocked by time-tracking policy: this project requires every time entry to be linked to a ticket. Pass a ticketId."
+    );
+  }
+  if (allowedTicketStatuses && args2.hasTicket && args2.ticketStatus && !allowedTicketStatuses.includes(args2.ticketStatus)) {
+    throw new Error(
+      `Blocked by time-tracking policy: time can only be booked on tickets with status: ${allowedTicketStatuses.join(", ")}. This ticket is "${args2.ticketStatus}".`
+    );
+  }
+}
 async function handleLogHours(input) {
   const ctx = getAuthContext();
   const {
@@ -114441,6 +114482,12 @@ async function handleLogHours(input) {
     if (!resolved.ok) return resolved.response;
     insertTeamId = resolved.teamId;
   }
+  await assertAgentMayLogHours({
+    teamId: insertTeamId,
+    projectId: project?.id ?? null,
+    hasTicket: Boolean(ticket?.id),
+    ticketStatus: ticket?.status ?? null
+  });
   const durationSeconds = Math.round(estimatedHours * 3600);
   const now2 = /* @__PURE__ */ new Date();
   let agendaEntry = null;