@mgsoftwarebv/mg-dashboard-mcp 7.0.7 → 7.0.9

package/dist/index.js

@@ -619,6 +619,12 @@ var TERMINAL_STATUSES = /* @__PURE__ */ new Set([
   "INTERRUPTED",
   "EXPIRED"
 ]);
+var EXECUTE_PIPELINE_TASK = "execute-pipeline";
+function validateExecutePipelineTestPayload(payload) {
+  const stepIds = payload.stepIds;
+  if (Array.isArray(stepIds) && stepIds.length > 0) return null;
+  return 'execute-pipeline requires real stepIds from a release row. Use a lightweight task (e.g. "hello-world") for connectivity checks, or pass a payload with releaseId (UUID) and non-empty stepIds.';
+}
 var TRIGGER_SERVER_ID = "03659d55-e194-400d-b82a-bf6457371ded";
 var COMPOSE_PROJECT = "mg-dashboard-supabase-trigger";
 var PG_CONTAINER = `${COMPOSE_PROJECT}-postgres-1`;
@@ -678,10 +684,10 @@ var TRIGGER_TOOL_MODULE_MAP = {
   "trigger-run": "ci_cd"
 };
 async function discoverInstance(projectSlug, conn, proxy, sshExec2) {
-  const sql28 = `SELECT re.\\"apiKey\\" FROM \\"RuntimeEnvironment\\" re JOIN \\"Project\\" p ON re.\\"projectId\\" = p.id WHERE p.slug='${projectSlug}' AND re.slug='prod' LIMIT 1`;
+  const sql29 = `SELECT re.\\"apiKey\\" FROM \\"RuntimeEnvironment\\" re JOIN \\"Project\\" p ON re.\\"projectId\\" = p.id WHERE p.slug='${projectSlug}' AND re.slug='prod' LIMIT 1`;
   const cmd = [
     `PORT=$(docker port "${WA_CONTAINER}" 3000/tcp 2>/dev/null | head -1 | sed 's/.*://')`,
-    `KEY=$(docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql28}" 2>/dev/null | tr -d '[:space:]')`,
+    `KEY=$(docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql29}" 2>/dev/null | tr -d '[:space:]')`,
     'echo "$PORT|$KEY"'
   ].join(" && ");
   const result = await sshExec2(conn, cmd, proxy);
@@ -702,8 +708,8 @@ async function discoverInstance(projectSlug, conn, proxy, sshExec2) {
   return { port, apiKey: apiKey2 };
 }
 async function fetchRunLogs(runId, conn, proxy, sshExec2) {
-  const sql28 = `SELECT level, message, \\"isError\\", \\"createdAt\\" FROM \\"TaskEvent\\" WHERE \\"runId\\" = '${runId}' AND level IN ('INFO','WARN','ERROR','DEBUG','LOG','TRACE') ORDER BY \\"startTime\\" ASC LIMIT 200`;
-  const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql28}" 2>/dev/null`;
+  const sql29 = `SELECT level, message, \\"isError\\", \\"createdAt\\" FROM \\"TaskEvent\\" WHERE \\"runId\\" = '${runId}' AND level IN ('INFO','WARN','ERROR','DEBUG','LOG','TRACE') ORDER BY \\"startTime\\" ASC LIMIT 200`;
+  const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql29}" 2>/dev/null`;
   const result = await sshExec2(conn, cmd, proxy);
   const output = result.stdout.trim();
   if (!output) return "";
@@ -785,8 +791,8 @@ async function handleTriggerTool(name, args2, deps) {
   switch (name) {
     // -----------------------------------------------------------------
     case "trigger-list": {
-      const sql28 = 'SELECT slug, name FROM \\"Project\\" ORDER BY name';
-      const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql28}" 2>/dev/null`;
+      const sql29 = 'SELECT slug, name FROM \\"Project\\" ORDER BY name';
+      const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql29}" 2>/dev/null`;
       const result = await sshExec2(conn, cmd, proxy);
       const output = result.stdout.trim();
       if (!output) {
@@ -867,8 +873,15 @@ ${rawJson.substring(0, 500)}` }] };
             throw new Error(`Invalid JSON payload: ${String(args2.payload).substring(0, 200)}`);
           }
         }
+        const parsedPayload = JSON.parse(payload);
+        if (taskId === EXECUTE_PIPELINE_TASK) {
+          const validationError = validateExecutePipelineTestPayload(parsedPayload);
+          if (validationError) {
+            return { content: [{ type: "text", text: `Error: ${validationError}` }] };
+          }
+        }
         const triggerBody = JSON.stringify({
-          payload: JSON.parse(payload),
+          payload: parsedPayload,
           options: { tags: ["mcp-test"], test: true }
         });
         const triggerJson = await triggerApi(
@@ -944,9 +957,9 @@ async function fetchAndFormatRun(conn, proxy, sshExec2, instance, runId) {
     return { content: [{ type: "text", text: `Invalid API response:
 ${rawJson.substring(0, 500)}` }] };
   }
-  let text6 = formatRunDetail(run);
-  if (logs) text6 += "\n\n--- Logs ---\n" + logs;
-  return { content: [{ type: "text", text: text6 }] };
+  let text7 = formatRunDetail(run);
+  if (logs) text7 += "\n\n--- Logs ---\n" + logs;
+  return { content: [{ type: "text", text: text7 }] };
 }
 async function waitForCompletion(conn, proxy, sshExec2, instance, runId, waitSeconds) {
   const pollInterval = 3e3;
@@ -968,10 +981,10 @@ async function waitForCompletion(conn, proxy, sshExec2, instance, runId, waitSec
       continue;
     }
     if (TERMINAL_STATUSES.has(run.status)) {
-      let text6 = formatRunDetail(run);
+      let text7 = formatRunDetail(run);
       const logs = await fetchRunLogs(runId, conn, proxy, sshExec2);
-      if (logs) text6 += "\n\n--- Logs ---\n" + logs;
-      return { content: [{ type: "text", text: text6 }] };
+      if (logs) text7 += "\n\n--- Logs ---\n" + logs;
+      return { content: [{ type: "text", text: text7 }] };
     }
   }
   return {
@@ -3658,10 +3671,10 @@ var ZodObject = class _ZodObject extends ZodType {
   //   }) as any;
   //   return merged;
   // }
-  catchall(index4) {
+  catchall(index5) {
     return new _ZodObject({
       ...this._def,
-      catchall: index4
+      catchall: index5
     });
   }
   pick(mask) {
@@ -3979,9 +3992,9 @@ function mergeValues(a, b) {
       return { valid: false };
     }
     const newArray = [];
-    for (let index4 = 0; index4 < a.length; index4++) {
-      const itemA = a[index4];
-      const itemB = b[index4];
+    for (let index5 = 0; index5 < a.length; index5++) {
+      const itemA = a[index5];
+      const itemB = b[index5];
       const sharedValue = mergeValues(itemA, itemB);
       if (!sharedValue.valid) {
         return { valid: false };
@@ -4187,10 +4200,10 @@ var ZodMap = class extends ZodType {
     }
     const keyType = this._def.keyType;
     const valueType = this._def.valueType;
-    const pairs = [...ctx.data.entries()].map(([key, value], index4) => {
+    const pairs = [...ctx.data.entries()].map(([key, value], index5) => {
       return {
-        key: keyType._parse(new ParseInputLazyPath(ctx, key, ctx.path, [index4, "key"])),
-        value: valueType._parse(new ParseInputLazyPath(ctx, value, ctx.path, [index4, "value"]))
+        key: keyType._parse(new ParseInputLazyPath(ctx, key, ctx.path, [index5, "key"])),
+        value: valueType._parse(new ParseInputLazyPath(ctx, value, ctx.path, [index5, "value"]))
       };
     });
     if (ctx.common.async) {
@@ -5716,7 +5729,30 @@ pgTable(
     index("github_token_owner_idx").on(table.owner)
   ]
 );
+pgTable(
+  "github_webhook_secret",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    label: text("label").notNull(),
+    owner: text("owner"),
+    notes: text("notes"),
+    secretEncrypted: text("secret_encrypted").notNull(),
+    enabled: boolean("enabled").notNull().default(true),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    index("github_webhook_secret_label_idx").on(table.label),
+    index("github_webhook_secret_owner_idx").on(table.owner)
+  ]
+);
+function assertPipelinePayload(payload) {
+  if (!payload.stepIds?.length) {
+    throw new Error("Cannot trigger execute-pipeline: stepIds is empty");
+  }
+}
 async function triggerPipeline(payload) {
+  assertPipelinePayload(payload);
   return tasks.trigger(
     "execute-pipeline",
     payload
@@ -6168,6 +6204,24 @@ async function createReleaseForStage(userId, params) {
   if (!triggerAuthorName && userId) {
     triggerAuthorName = await resolveUserDisplayName(userId);
   }
+  const enabledSteps = buildStepList(
+    stage,
+    profile,
+    await resolveBuildStepListOptions({
+      profile,
+      triggerSha,
+      githubToken: token,
+      isManual: triggerType === "manual" || triggerType === "mcp",
+      stageId: params.stageId,
+      deployRetryScripts: stage.deploy_retry_scripts
+    })
+  );
+  if (enabledSteps.length === 0) {
+    throw new CreateReleaseError(
+      "No pipeline steps configured for this stage (enable a PM2/Docker stage_app or deployment_project_server)",
+      "PRECONDITION_FAILED"
+    );
+  }
   const initialStatus = "running";
   let release;
   try {
@@ -6201,18 +6255,6 @@ async function createReleaseForStage(userId, params) {
       "INTERNAL_SERVER_ERROR"
     );
   }
-  const enabledSteps = buildStepList(
-    stage,
-    profile,
-    await resolveBuildStepListOptions({
-      profile,
-      triggerSha,
-      githubToken: token,
-      isManual: triggerType === "manual" || triggerType === "mcp",
-      stageId: params.stageId,
-      deployRetryScripts: stage.deploy_retry_scripts
-    })
-  );
   const stepIds = [];
   try {
     stepIds.push(...await insertReleaseSteps(release.id, enabledSteps));
@@ -6717,6 +6759,7 @@ var apiKey = getArg2("api-key") || process.env.MG_DASHBOARD_API_KEY;
 var sshKeyPath = getArg2("ssh-key") || process.env.MG_DASHBOARD_SSH_KEY;
 var databaseUrl = getArg2("database-url") || process.env.DATABASE_PRIMARY_POOLER_URL || process.env.DATABASE_PRIMARY_URL;
 var encryptionKey = getArg2("encryption-key") || process.env.ENCRYPTION_KEY;
+var dashboardBaseUrl = (getArg2("dashboard-url") || process.env.MG_DASHBOARD_BASE_URL || "https://dashboard.mgsoftware.nl").replace(/\/$/, "");
 var mijnhostApiKey = getArg2("mijnhost-api-key") || process.env.MIJNHOST_API_KEY;
 function isMijnhostViaSshProxyEnabled() {
   const arg = getArg2("mijnhost-via-ssh-proxy");
@@ -7435,7 +7478,7 @@ function getEncryptionKey() {
     throw new Error("ENCRYPTION_KEY must be a 64-character hex string");
   return buf;
 }
-function encrypt(text6) {
+function encrypt(text7) {
   const key = getEncryptionKey();
   const iv = randomBytes(ENC_IV_LENGTH);
   const cipher = createCipheriv(
@@ -7443,7 +7486,7 @@ function encrypt(text6) {
     new Uint8Array(key),
     new Uint8Array(iv)
   );
-  let encrypted = cipher.update(text6, "utf8", "hex");
+  let encrypted = cipher.update(text7, "utf8", "hex");
   encrypted += cipher.final("hex");
   const authTag = cipher.getAuthTag();
   return Buffer.concat([
@@ -8163,10 +8206,10 @@ async function r2GetObjectRange(bucket, key, range) {
     const body = result.Body;
     if (!body?.transformToString)
       throw new Error("R2 returned no readable body");
-    const text6 = await body.transformToString();
+    const text7 = await body.transformToString();
     const header = `# range: bytes ${range.offset}-${end} of ${size} (${effectiveLen} bytes)`;
     return `${header}
-${text6}`;
+${text7}`;
   } catch (e) {
     throw r2WrapError(bucket, key, e);
   }
@@ -8529,15 +8572,15 @@ async function sftpRead(opts, filePath, proxy, options) {
             clearTimeout(timer);
             cleanup?.();
             cleanup = void 0;
-            const text6 = Buffer.concat(
+            const text7 = Buffer.concat(
               chunks.map((ch) => new Uint8Array(ch))
             ).toString("utf-8");
             if (!isWholeFileRequest) {
               const header = `# range: bytes ${offset}-${offset + effectiveLen - 1} of ${total} (${effectiveLen} bytes)`;
               resolve(`${header}
-${text6}`);
+${text7}`);
             } else {
-              resolve(text6);
+              resolve(text7);
             }
           });
           rs.on("error", (e) => {
@@ -8667,11 +8710,11 @@ function getKnownContainers(serverId, maxAgeMs = 5 * 6e4) {
   if (Date.now() - e.capturedAt > maxAgeMs) return void 0;
   return e.names;
 }
-function truncateForLLM(text6, maxBytes) {
-  const totalBytes = Buffer.byteLength(text6, "utf8");
+function truncateForLLM(text7, maxBytes) {
+  const totalBytes = Buffer.byteLength(text7, "utf8");
   if (totalBytes <= maxBytes)
-    return { text: text6, truncated: false, totalBytes, shownBytes: totalBytes };
-  const buf = Buffer.from(text6, "utf8");
+    return { text: text7, truncated: false, totalBytes, shownBytes: totalBytes };
+  const buf = Buffer.from(text7, "utf8");
   let cut = maxBytes;
   while (cut > 0 && (buf[cut] & 192) === 128) cut--;
   const head = buf.subarray(0, cut).toString("utf8");
@@ -8701,10 +8744,10 @@ function isTransientSshError(stderr, exitCode) {
 function postprocessResult(result, meta) {
   if (!result.content?.length) return result;
   const block = result.content[0];
-  let text6 = String(block.text ?? "");
-  const trunc = truncateForLLM(text6, RESPONSE_MAX_BYTES);
+  let text7 = String(block.text ?? "");
+  const trunc = truncateForLLM(text7, RESPONSE_MAX_BYTES);
   if (trunc.truncated) {
-    text6 = trunc.text + "\n\n... " + buildTruncationHint(
+    text7 = trunc.text + "\n\n... " + buildTruncationHint(
       meta.toolName,
       meta.args,
       trunc.totalBytes,
@@ -8718,11 +8761,11 @@ function postprocessResult(result, meta) {
     const parts = [`took ${tookStr}`, sizeStr];
     if (meta.serverIdLabel) parts.push(`server: ${meta.serverIdLabel}`);
     if (meta.cached) parts.push("cached");
-    text6 = `${text6}
+    text7 = `${text7}
 
 [${parts.join(", ")}]`;
   }
-  return { ...result, content: [{ ...block, text: text6 }] };
+  return { ...result, content: [{ ...block, text: text7 }] };
 }
 function buildPipelineScript(commands, shell, marker, stopOnError) {
   if (shell === "powershell") {
@@ -9508,11 +9551,11 @@ CREATE TABLE IF NOT EXISTS _mcp_migrations (
   applied_by  TEXT
 );
 `.trim();
-function normaliseMigrationSql(sql28) {
-  return sql28.replace(/\r\n/g, "\n").trim() + "\n";
+function normaliseMigrationSql(sql29) {
+  return sql29.replace(/\r\n/g, "\n").trim() + "\n";
 }
-function migrationSha256(sql28) {
-  return createHash("sha256").update(normaliseMigrationSql(sql28), "utf8").digest("hex");
+function migrationSha256(sql29) {
+  return createHash("sha256").update(normaliseMigrationSql(sql29), "utf8").digest("hex");
 }
 function dollarQuoteTag(value) {
   let tag = "_mcp";
@@ -10748,6 +10791,34 @@ var TOOLS = [
       required: ["action", "domain", "type", "name"]
     }
   },
+  // ----- Team memory -----
+  {
+    name: "search-team-memory",
+    description: "Search the team's ENTIRE past Cursor history (every developer, every project) for how something was handled before. Use this FIRST, before investigating from scratch, whenever you: hit a non-trivial bug or error, are about to build something that may have been done before, need a project-specific convention/gotcha, or the user asks 'have we done X', 'how did we fix Y', or 'did we solve this already'. Hybrid semantic + keyword search over mirrored conversations. Returns ranked past chats with repo, date, a solution snippet and a similarity score. Phrase the query as the problem in natural language (e.g. 'release pipeline PM2 deploy fails with module not found').",
+    inputSchema: {
+      type: "object",
+      properties: {
+        query: {
+          type: "string",
+          description: "The problem/topic in natural language. Include error text, tool/module names, or symptoms for best recall."
+        },
+        repo: {
+          type: "string",
+          description: "Optional repo filter, e.g. 'github.com/MGSoftwareBV/mg-dashboard'. Omit to search across all projects."
+        },
+        scope: {
+          type: "string",
+          enum: ["team", "mine"],
+          description: "'team' (default) searches everyone's history; 'mine' restricts to the calling user's own conversations."
+        },
+        limit: {
+          type: "number",
+          description: "Max results to return (1-25, default 8)."
+        }
+      },
+      required: ["query"]
+    }
+  },
   // ----- Trigger.dev -----
   ...TRIGGER_TOOLS
 ];
@@ -10819,6 +10890,65 @@ async function executeToolCall(name, a, _serverId) {
   const ctx = authContext;
   try {
     switch (name) {
+      // ----- Team memory -----
+      case "search-team-memory": {
+        const query = typeof a.query === "string" ? a.query.trim() : "";
+        if (!query) {
+          return { content: [{ type: "text", text: "Error: query is required" }] };
+        }
+        const res = await fetch(`${dashboardBaseUrl}/api/team-memory/search`, {
+          method: "POST",
+          headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${apiKey}`
+          },
+          body: JSON.stringify({
+            query,
+            repo: typeof a.repo === "string" ? a.repo : void 0,
+            scope: a.scope === "mine" ? "mine" : "team",
+            limit: typeof a.limit === "number" ? a.limit : void 0
+          })
+        });
+        if (!res.ok) {
+          const detail = await res.text().catch(() => "");
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Error: team-memory search failed (${res.status}). ${detail.slice(0, 300)}`
+              }
+            ]
+          };
+        }
+        const data = await res.json();
+        if (data.count === 0) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `No prior team conversations matched "${query}". Proceed from scratch.`
+              }
+            ]
+          };
+        }
+        const lines = data.hits.map((hit, index5) => {
+          const when = hit.lastMessageAt ? new Date(hit.lastMessageAt).toISOString().slice(0, 10) : "unknown date";
+          const repo = hit.repo ?? "unknown repo";
+          const sim = hit.similarity !== null ? ` \xB7 ${(hit.similarity * 100).toFixed(0)}% match` : "";
+          return `${index5 + 1}. [${repo} \xB7 ${when}${sim}] ${hit.title}
+   ${(hit.summary ?? hit.snippet).replace(/\s+/g, " ").slice(0, 500)}`;
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Found ${data.count} prior conversation(s) (${data.mode} search) \u2014 reuse this before solving from scratch:
+
+` + lines.join("\n\n")
+            }
+          ]
+        };
+      }
       // ----- Servers -----
       case "list-servers": {
         const data = ctx.allowedServerIds !== null ? await db.execute(sql`
@@ -11777,8 +11907,8 @@ ${sample.join("\n")}${files.length > 5 ? `
             };
           const filtered = sortRows(applyFilter(only.rows));
           if (format === "json") {
-            const text7 = filtered.map((c) => JSON.stringify(c)).join("\n") || "(no containers)";
-            return { content: [{ type: "text", text: text7 }] };
+            const text8 = filtered.map((c) => JSON.stringify(c)).join("\n") || "(no containers)";
+            return { content: [{ type: "text", text: text8 }] };
           }
           if (groupByProject) {
             const groups = /* @__PURE__ */ new Map();
@@ -11805,8 +11935,8 @@ ${sample.join("\n")}${files.length > 5 ? `
           }
           const header = `${"NAMES".padEnd(36)}  ${"IMAGE".padEnd(40)}  ${"STATUS".padEnd(24)}  ${"HEALTH".padEnd(10)}  ${"PORTS".padEnd(40)}  PROJECT`;
           const body = filtered.map((r) => `${fmtRow(r)}  ${r.Project || ""}`);
-          const text6 = filtered.length === 0 ? "(no containers match)" : [header, ...body].join("\n");
-          return { content: [{ type: "text", text: text6 }] };
+          const text7 = filtered.length === 0 ? "(no containers match)" : [header, ...body].join("\n");
+          return { content: [{ type: "text", text: text7 }] };
         }
         if (format === "json") {
           const lines = [];