@mgsoftwarebv/mg-dashboard-mcp 7.4.11 → 7.4.13

package/dist/index.js

@@ -20,7 +20,7 @@ import { sql } from 'drizzle-orm';
 import { once } from 'events';
 import { lookup } from 'dns/promises';
 import { connect } from 'tls';
-import { pgTable, timestamp, uuid, jsonb, boolean, text, pgEnum, integer, uniqueIndex, index, check, bigint, doublePrecision, primaryKey, foreignKey, date, real } from 'drizzle-orm/pg-core';
+import { pgTable, timestamp, uuid, jsonb, boolean, text, customType, integer, date, real, index, uniqueIndex, pgEnum, check, bigint, doublePrecision, primaryKey, foreignKey } from 'drizzle-orm/pg-core';
 import { HeadObjectCommand, ListObjectsV2Command, DeleteObjectsCommand, S3Client, DeleteObjectCommand, CreateMultipartUploadCommand, UploadPartCommand, CompleteMultipartUploadCommand, AbortMultipartUploadCommand, PutObjectCommand, GetObjectCommand, CopyObjectCommand } from '@aws-sdk/client-s3';
 
 var __defProp = Object.defineProperty;
@@ -990,9 +990,9 @@ ${raw2.substring(0, 500)}` }] };
           return { content: [{ type: "text", text: `No environment variables for ${project}/${env}.` }] };
         }
         const lines = vars.map((v) => `${v.isSecret ? "[secret]" : "        "}  ${v.name}`).sort();
-        const text16 = `Env vars for ${project}/${env} (${vars.length}) \u2014 values hidden, use action="get" with a key:
+        const text19 = `Env vars for ${project}/${env} (${vars.length}) \u2014 values hidden, use action="get" with a key:
 ` + "-".repeat(50) + "\n" + lines.join("\n");
-        return { content: [{ type: "text", text: text16 }] };
+        return { content: [{ type: "text", text: text19 }] };
       }
       if (action === "get") {
         const key2 = String(args2.key ?? "");
@@ -1079,9 +1079,9 @@ async function fetchAndFormatRun(conn, proxy, sshExec2, instance, runId) {
     return { content: [{ type: "text", text: `Invalid API response:
 ${rawJson.substring(0, 500)}` }] };
   }
-  let text16 = formatRunDetail(run);
-  if (logs) text16 += "\n\n--- Logs ---\n" + logs;
-  return { content: [{ type: "text", text: text16 }] };
+  let text19 = formatRunDetail(run);
+  if (logs) text19 += "\n\n--- Logs ---\n" + logs;
+  return { content: [{ type: "text", text: text19 }] };
 }
 async function waitForCompletion(conn, proxy, sshExec2, instance, runId, waitSeconds) {
   const pollInterval = 3e3;
@@ -1103,10 +1103,10 @@ async function waitForCompletion(conn, proxy, sshExec2, instance, runId, waitSec
       continue;
     }
     if (TERMINAL_STATUSES.has(run.status)) {
-      let text16 = formatRunDetail(run);
+      let text19 = formatRunDetail(run);
       const logs = await fetchRunLogs(runId, conn, proxy, sshExec2);
-      if (logs) text16 += "\n\n--- Logs ---\n" + logs;
-      return { content: [{ type: "text", text: text16 }] };
+      if (logs) text19 += "\n\n--- Logs ---\n" + logs;
+      return { content: [{ type: "text", text: text19 }] };
     }
   }
   return {
@@ -3793,10 +3793,10 @@ var ZodObject = class _ZodObject extends ZodType {
   //   }) as any;
   //   return merged;
   // }
-  catchall(index13) {
+  catchall(index16) {
     return new _ZodObject({
       ...this._def,
-      catchall: index13
+      catchall: index16
     });
   }
   pick(mask) {
@@ -4114,9 +4114,9 @@ function mergeValues(a, b) {
       return { valid: false };
     }
     const newArray = [];
-    for (let index13 = 0; index13 < a.length; index13++) {
-      const itemA = a[index13];
-      const itemB = b[index13];
+    for (let index16 = 0; index16 < a.length; index16++) {
+      const itemA = a[index16];
+      const itemB = b[index16];
       const sharedValue = mergeValues(itemA, itemB);
       if (!sharedValue.valid) {
         return { valid: false };
@@ -4322,10 +4322,10 @@ var ZodMap = class extends ZodType {
     }
     const keyType = this._def.keyType;
     const valueType = this._def.valueType;
-    const pairs = [...ctx.data.entries()].map(([key, value], index13) => {
+    const pairs = [...ctx.data.entries()].map(([key, value], index16) => {
       return {
-        key: keyType._parse(new ParseInputLazyPath(ctx, key, ctx.path, [index13, "key"])),
-        value: valueType._parse(new ParseInputLazyPath(ctx, value, ctx.path, [index13, "value"]))
+        key: keyType._parse(new ParseInputLazyPath(ctx, key, ctx.path, [index16, "key"])),
+        value: valueType._parse(new ParseInputLazyPath(ctx, value, ctx.path, [index16, "value"]))
       };
     });
     if (ctx.common.async) {
@@ -5295,6 +5295,232 @@ pgTable("two_factor", {
   secret: text("secret").notNull(),
   backupCodes: text("backup_codes")
 });
+var WIKI_EMBEDDING_DIMENSIONS = 1536;
+var vector = customType({
+  dataType(config) {
+    return `vector(${config?.dimensions ?? WIKI_EMBEDDING_DIMENSIONS})`;
+  },
+  toDriver(value) {
+    return `[${value.join(",")}]`;
+  },
+  fromDriver(value) {
+    if (Array.isArray(value)) return value.map(Number);
+    if (typeof value !== "string") return [];
+    const trimmed = value.replace(/^\[/, "").replace(/\]$/, "");
+    if (!trimmed) return [];
+    return trimmed.split(",").map((part) => Number(part.trim()));
+  }
+});
+pgTable(
+  "wiki_page",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    slug: text("slug").notNull().unique(),
+    title: text("title").notNull().default(""),
+    summary: text("summary"),
+    content: text("content").notNull().default(""),
+    frontmatter: jsonb("frontmatter").$type(),
+    sources: jsonb("sources").$type(),
+    sourcesArchive: jsonb("sources_archive").$type(),
+    tags: text("tags").array().notNull().default([]),
+    status: text("status").notNull().default("draft"),
+    pageUpdatedOn: date("page_updated_on"),
+    contentHash: text("content_hash"),
+    /** Legacy app-layer cosine storage; dual-written with embeddingVec. */
+    embedding: real("embedding").array(),
+    embeddingVec: vector("embedding_vec", {
+      dimensions: WIKI_EMBEDDING_DIMENSIONS
+    }),
+    embeddingModel: text("embedding_model"),
+    embeddedAt: timestamp("embedded_at", { withTimezone: true }),
+    reviewedBy: text("reviewed_by"),
+    reviewedOn: date("reviewed_on"),
+    lastVerifiedOn: date("last_verified_on"),
+    verifyCount: integer("verify_count").notNull().default(0),
+    verifyNote: text("verify_note"),
+    dirty: boolean("dirty").notNull().default(false),
+    vaultSyncedAt: timestamp("vault_synced_at", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    index("idx_wiki_page_status").on(table.status),
+    index("idx_wiki_page_last_verified").on(table.lastVerifiedOn),
+    index("idx_wiki_page_dirty").on(table.dirty)
+  ]
+);
+pgTable(
+  "wiki_change_log",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    authorJob: text("author_job").notNull(),
+    summary: text("summary").notNull().default(""),
+    slugs: text("slugs").array().notNull().default([]),
+    syncedAt: timestamp("synced_at", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [index("idx_wiki_change_log_created").on(table.createdAt)]
+);
+pgTable(
+  "wiki_page_flag",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    pageSlug: text("page_slug").notNull(),
+    kind: text("kind").notNull(),
+    detail: text("detail").notNull().default(""),
+    sourceRef: text("source_ref"),
+    createdBy: text("created_by"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    resolvedAt: timestamp("resolved_at", { withTimezone: true }),
+    resolvedBy: text("resolved_by")
+  },
+  (table) => [index("idx_wiki_page_flag_created").on(table.createdAt)]
+);
+pgTable(
+  "wiki_page_evidence",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    pageSlug: text("page_slug").notNull(),
+    evidenceType: text("evidence_type").notNull(),
+    evidenceRef: text("evidence_ref").notNull(),
+    matchScore: real("match_score"),
+    matchReason: text("match_reason"),
+    snippet: text("snippet"),
+    status: text("status").notNull().default("pending"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    resolvedAt: timestamp("resolved_at", { withTimezone: true })
+  },
+  (table) => [
+    uniqueIndex("wiki_page_evidence_page_slug_evidence_type_evidence_ref_key").on(
+      table.pageSlug,
+      table.evidenceType,
+      table.evidenceRef
+    ),
+    index("idx_wiki_page_evidence_created").on(table.createdAt)
+  ]
+);
+pgTable(
+  "wiki_page_link",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    sourceSlug: text("source_slug").notNull(),
+    targetSlug: text("target_slug").notNull(),
+    kind: text("kind").notNull().default("wikilink"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    uniqueIndex("wiki_page_link_source_target_kind_key").on(
+      table.sourceSlug,
+      table.targetSlug,
+      table.kind
+    ),
+    index("idx_wiki_page_link_source").on(table.sourceSlug),
+    index("idx_wiki_page_link_target").on(table.targetSlug)
+  ]
+);
+pgTable(
+  "wiki_page_read",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    slug: text("slug").notNull(),
+    caller: text("caller"),
+    includedArchive: boolean("included_archive").notNull().default(false),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    index("idx_wiki_page_read_slug").on(table.slug, table.createdAt),
+    index("idx_wiki_page_read_created").on(table.createdAt)
+  ]
+);
+pgTable(
+  "wiki_verify_event",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    pageSlug: text("page_slug").notNull(),
+    outcome: text("outcome").notNull(),
+    runMode: text("run_mode"),
+    note: text("note"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    index("idx_wiki_verify_event_created").on(table.createdAt),
+    index("idx_wiki_verify_event_outcome_created").on(
+      table.outcome,
+      table.createdAt
+    )
+  ]
+);
+pgTable(
+  "wiki_search_log",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    query: text("query").notNull(),
+    hitCount: integer("hit_count").notNull().default(0),
+    topScore: real("top_score"),
+    topSlug: text("top_slug"),
+    caller: text("caller"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [index("idx_wiki_search_log_created").on(table.createdAt)]
+);
+pgTable(
+  "team_memory_search_log",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    query: text("query").notNull(),
+    hitCount: integer("hit_count").notNull().default(0),
+    topScore: real("top_score"),
+    topId: text("top_id"),
+    caller: text("caller"),
+    repo: text("repo"),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [index("idx_team_memory_search_log_created").on(table.createdAt)]
+);
+
+// ../db/src/schema/agent-memory.ts
+pgTable(
+  "agent_memory",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    conversationId: uuid("conversation_id"),
+    localConversationId: text("local_conversation_id"),
+    source: text("source").notNull().default("mirror"),
+    userId: text("user_id"),
+    hostId: uuid("host_id"),
+    workspaceId: uuid("workspace_id"),
+    gitRepository: text("git_repository"),
+    title: text("title").notNull().default(""),
+    summary: text("summary"),
+    content: text("content").notNull().default(""),
+    contentHash: text("content_hash"),
+    embedding: real("embedding").array(),
+    embeddingVec: vector("embedding_vec", {
+      dimensions: WIKI_EMBEDDING_DIMENSIONS
+    }),
+    embeddingModel: text("embedding_model"),
+    messageCount: integer("message_count").notNull().default(0),
+    startedAt: timestamp("started_at", { withTimezone: true }),
+    lastMessageAt: timestamp("last_message_at", { withTimezone: true }),
+    embeddedAt: timestamp("embedded_at", { withTimezone: true }),
+    resolved: boolean("resolved"),
+    category: text("category"),
+    tech: text("tech").array(),
+    kind: text("kind").notNull().default("human"),
+    symbols: text("symbols").array(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    uniqueIndex("uq_agent_memory_local_conversation").on(
+      table.localConversationId
+    ),
+    index("idx_agent_memory_repo").on(table.gitRepository),
+    index("idx_agent_memory_user").on(table.userId),
+    index("idx_agent_memory_kind").on(table.kind),
+    index("idx_agent_memory_category").on(table.category)
+  ]
+);
 var contentSourceType = pgEnum("content_source_type", [
   "own_site",
   "client_site",
@@ -6012,6 +6238,47 @@ pgTable(
     index("alert_rule_enabled_severity_idx").on(table.enabled, table.severity)
   ]
 );
+var cursorSkill = pgTable(
+  "cursor_skill",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    slug: text("slug").notNull(),
+    title: text("title").notNull().default(""),
+    currentVersion: integer("current_version").notNull().default(0),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    uniqueIndex("uq_cursor_skill_slug").on(table.slug)
+  ]
+);
+pgTable(
+  "cursor_skill_revision",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    skillId: uuid("skill_id").notNull().references(() => cursorSkill.id, { onDelete: "cascade" }),
+    version: integer("version").notNull(),
+    parentVersion: integer("parent_version"),
+    message: text("message").notNull().default(""),
+    files: jsonb("files").notNull().$type(),
+    fileHashes: jsonb("file_hashes").notNull().$type().default({}),
+    sourceRepo: text("source_repo"),
+    sourcePath: text("source_path"),
+    authorUserId: text("author_user_id"),
+    authorLabel: text("author_label"),
+    status: text("status").notNull().default("accepted"),
+    published: boolean("published").notNull().default(true),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    uniqueIndex("uq_cursor_skill_revision_skill_version").on(
+      table.skillId,
+      table.version
+    ),
+    index("idx_cursor_skill_revision_skill").on(table.skillId),
+    index("idx_cursor_skill_revision_created").on(table.createdAt)
+  ]
+);
 pgTable(
   "deployment_project_server",
   {
@@ -6388,6 +6655,49 @@ pgTable(
     index("github_webhook_secret_owner_idx").on(table.owner)
   ]
 );
+pgTable(
+  "handoff_loop_run",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    runSlug: text("run_slug").notNull(),
+    userId: text("user_id"),
+    gitRepository: text("git_repository"),
+    machine: text("machine"),
+    planSummary: text("plan_summary").notNull().default(""),
+    workerModel: text("worker_model").notNull().default(""),
+    outcome: text("outcome").notNull().default("completed"),
+    executeRounds: integer("execute_rounds").notNull().default(0),
+    planRoundTrips: integer("plan_round_trips").notNull().default(0),
+    questionsSelfAnswered: integer("questions_self_answered").notNull().default(0),
+    questionsEscalated: integer("questions_escalated").notNull().default(0),
+    protocolViolations: integer("protocol_violations").notNull().default(0),
+    reviewIssuesFound: integer("review_issues_found").notNull().default(0),
+    checklistInitial: integer("checklist_initial").notNull().default(0),
+    checklistProposed: integer("checklist_proposed").notNull().default(0),
+    checklistAccepted: integer("checklist_accepted").notNull().default(0),
+    checklistVerified: integer("checklist_verified").notNull().default(0),
+    inputTokens: bigint("input_tokens", { mode: "number" }).notNull().default(0),
+    outputTokens: bigint("output_tokens", { mode: "number" }).notNull().default(0),
+    cacheReadTokens: bigint("cache_read_tokens", { mode: "number" }).notNull().default(0),
+    totalDurationMs: bigint("total_duration_ms", { mode: "number" }).notNull().default(0),
+    retro: text("retro"),
+    metrics: jsonb("metrics"),
+    reviewed: boolean("reviewed").notNull().default(false),
+    reviewNotes: text("review_notes"),
+    reviewedAt: timestamp("reviewed_at", { withTimezone: true }),
+    startedAt: timestamp("started_at", { withTimezone: true }),
+    completedAt: timestamp("completed_at", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (table) => [
+    uniqueIndex("uq_handoff_loop_run_slug").on(table.runSlug),
+    index("idx_handoff_loop_run_user").on(table.userId),
+    index("idx_handoff_loop_run_outcome").on(table.outcome),
+    index("idx_handoff_loop_run_reviewed").on(table.reviewed),
+    index("idx_handoff_loop_run_created").on(table.createdAt)
+  ]
+);
 var managedSiteSyncMode = pgEnum("managed_site_sync_mode", [
   "sitemap",
   "git",
@@ -6493,6 +6803,8 @@ var refrontCustomer = pgTable(
     status: text("status"),
     teamId: text("team_id"),
     teamName: text("team_name"),
+    /** Alternative names from Refront (trading names / brands). */
+    aliases: text("aliases").array().notNull().default([]),
     syncedAt: timestamp("synced_at", { withTimezone: true }).notNull(),
     createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -6644,114 +6956,6 @@ pgTable(
     }).onDelete("cascade")
   ]
 );
-pgTable(
-  "wiki_page",
-  {
-    id: uuid("id").primaryKey().defaultRandom(),
-    slug: text("slug").notNull().unique(),
-    title: text("title").notNull().default(""),
-    summary: text("summary"),
-    content: text("content").notNull().default(""),
-    status: text("status").notNull().default("draft"),
-    pageUpdatedOn: date("page_updated_on"),
-    reviewedBy: text("reviewed_by"),
-    reviewedOn: date("reviewed_on"),
-    lastVerifiedOn: date("last_verified_on"),
-    verifyCount: integer("verify_count").notNull().default(0),
-    verifyNote: text("verify_note"),
-    dirty: boolean("dirty").notNull().default(false),
-    vaultSyncedAt: timestamp("vault_synced_at", { withTimezone: true }),
-    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
-  },
-  (table) => [
-    index("idx_wiki_page_status").on(table.status),
-    index("idx_wiki_page_last_verified").on(table.lastVerifiedOn),
-    index("idx_wiki_page_dirty").on(table.dirty)
-  ]
-);
-pgTable(
-  "wiki_change_log",
-  {
-    id: uuid("id").primaryKey().defaultRandom(),
-    authorJob: text("author_job").notNull(),
-    summary: text("summary").notNull().default(""),
-    slugs: text("slugs").array().notNull().default([]),
-    syncedAt: timestamp("synced_at", { withTimezone: true }),
-    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
-  },
-  (table) => [index("idx_wiki_change_log_created").on(table.createdAt)]
-);
-pgTable(
-  "wiki_page_flag",
-  {
-    id: uuid("id").primaryKey().defaultRandom(),
-    pageSlug: text("page_slug").notNull(),
-    kind: text("kind").notNull(),
-    detail: text("detail").notNull().default(""),
-    sourceRef: text("source_ref"),
-    createdBy: text("created_by"),
-    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
-    resolvedAt: timestamp("resolved_at", { withTimezone: true }),
-    resolvedBy: text("resolved_by")
-  },
-  (table) => [index("idx_wiki_page_flag_created").on(table.createdAt)]
-);
-pgTable(
-  "wiki_page_evidence",
-  {
-    id: uuid("id").primaryKey().defaultRandom(),
-    pageSlug: text("page_slug").notNull(),
-    evidenceType: text("evidence_type").notNull(),
-    evidenceRef: text("evidence_ref").notNull(),
-    matchScore: real("match_score"),
-    matchReason: text("match_reason"),
-    snippet: text("snippet"),
-    status: text("status").notNull().default("pending"),
-    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
-    resolvedAt: timestamp("resolved_at", { withTimezone: true })
-  },
-  (table) => [
-    uniqueIndex("wiki_page_evidence_page_slug_evidence_type_evidence_ref_key").on(
-      table.pageSlug,
-      table.evidenceType,
-      table.evidenceRef
-    ),
-    index("idx_wiki_page_evidence_created").on(table.createdAt)
-  ]
-);
-pgTable(
-  "wiki_page_read",
-  {
-    id: uuid("id").primaryKey().defaultRandom(),
-    slug: text("slug").notNull(),
-    caller: text("caller"),
-    includedArchive: boolean("included_archive").notNull().default(false),
-    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
-  },
-  (table) => [
-    index("idx_wiki_page_read_slug").on(table.slug, table.createdAt),
-    index("idx_wiki_page_read_created").on(table.createdAt)
-  ]
-);
-pgTable(
-  "wiki_verify_event",
-  {
-    id: uuid("id").primaryKey().defaultRandom(),
-    pageSlug: text("page_slug").notNull(),
-    outcome: text("outcome").notNull(),
-    runMode: text("run_mode"),
-    note: text("note"),
-    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
-  },
-  (table) => [
-    index("idx_wiki_verify_event_created").on(table.createdAt),
-    index("idx_wiki_verify_event_outcome_created").on(
-      table.outcome,
-      table.createdAt
-    )
-  ]
-);
 var wikiActor = pgTable(
   "wiki_actor",
   {
@@ -8074,6 +8278,7 @@ var TOOL_MODULE_MAP = {
   "dns-record": "domains",
   "cursor-remote-list": "cursor_remote",
   "cursor-remote-run": "cursor_remote",
+  // cursor-skill intentionally unmapped — any valid API key may pull shared skills
   ...TRIGGER_TOOL_MODULE_MAP
 };
 var SUPERADMIN_ONLY_TOOLS = /* @__PURE__ */ new Set(["trigger-env"]);
@@ -8635,7 +8840,7 @@ function getEncryptionKey() {
     throw new Error("ENCRYPTION_KEY must be a 64-character hex string");
   return buf;
 }
-function encrypt(text16) {
+function encrypt(text19) {
   const key = getEncryptionKey();
   const iv = randomBytes(ENC_IV_LENGTH);
   const cipher = createCipheriv(
@@ -8643,7 +8848,7 @@ function encrypt(text16) {
     new Uint8Array(key),
     new Uint8Array(iv)
   );
-  let encrypted = cipher.update(text16, "utf8", "hex");
+  let encrypted = cipher.update(text19, "utf8", "hex");
   encrypted += cipher.final("hex");
   const authTag = cipher.getAuthTag();
   return Buffer.concat([
@@ -9363,10 +9568,10 @@ async function r2GetObjectRange(bucket, key, range) {
     const body = result.Body;
     if (!body?.transformToString)
       throw new Error("R2 returned no readable body");
-    const text16 = await body.transformToString();
+    const text19 = await body.transformToString();
     const header = `# range: bytes ${range.offset}-${end} of ${size} (${effectiveLen} bytes)`;
     return `${header}
-${text16}`;
+${text19}`;
   } catch (e) {
     throw r2WrapError(bucket, key, e);
   }
@@ -9729,15 +9934,15 @@ async function sftpRead(opts, filePath, proxy, options) {
             clearTimeout(timer);
             cleanup?.();
             cleanup = void 0;
-            const text16 = Buffer.concat(
+            const text19 = Buffer.concat(
               chunks.map((ch) => new Uint8Array(ch))
             ).toString("utf-8");
             if (!isWholeFileRequest) {
               const header = `# range: bytes ${offset}-${offset + effectiveLen - 1} of ${total} (${effectiveLen} bytes)`;
               resolve(`${header}
-${text16}`);
+${text19}`);
             } else {
-              resolve(text16);
+              resolve(text19);
             }
           });
           rs.on("error", (e) => {
@@ -9783,7 +9988,9 @@ var RAW_JSON_TOOLS = /* @__PURE__ */ new Set([
   "save_content_quality_run",
   "link_content_pack_to_ticket",
   "managed-site",
-  "content-sync"
+  "content-sync",
+  // Skill registry metadata only (no file bodies) — must stay valid JSON.
+  "cursor-skill"
 ]);
 var TOOL_CACHE_TTL_MS = {
   "list-servers": 6e4,
@@ -9884,11 +10091,11 @@ function getKnownContainers(serverId, maxAgeMs = 5 * 6e4) {
   if (Date.now() - e.capturedAt > maxAgeMs) return void 0;
   return e.names;
 }
-function truncateForLLM(text16, maxBytes) {
-  const totalBytes = Buffer.byteLength(text16, "utf8");
+function truncateForLLM(text19, maxBytes) {
+  const totalBytes = Buffer.byteLength(text19, "utf8");
   if (totalBytes <= maxBytes)
-    return { text: text16, truncated: false, totalBytes, shownBytes: totalBytes };
-  const buf = Buffer.from(text16, "utf8");
+    return { text: text19, truncated: false, totalBytes, shownBytes: totalBytes };
+  const buf = Buffer.from(text19, "utf8");
   let cut = maxBytes;
   while (cut > 0 && (buf[cut] & 192) === 128) cut--;
   const head = buf.subarray(0, cut).toString("utf8");
@@ -9919,10 +10126,10 @@ function postprocessResult(result, meta) {
   if (!result.content?.length) return result;
   if (RAW_JSON_TOOLS.has(meta.toolName)) return result;
   const block = result.content[0];
-  let text16 = String(block.text ?? "");
-  const trunc = truncateForLLM(text16, RESPONSE_MAX_BYTES);
+  let text19 = String(block.text ?? "");
+  const trunc = truncateForLLM(text19, RESPONSE_MAX_BYTES);
   if (trunc.truncated) {
-    text16 = trunc.text + "\n\n... " + buildTruncationHint(
+    text19 = trunc.text + "\n\n... " + buildTruncationHint(
       meta.toolName,
       meta.args,
       trunc.totalBytes,
@@ -9936,11 +10143,11 @@ function postprocessResult(result, meta) {
     const parts = [`took ${tookStr}`, sizeStr];
     if (meta.serverIdLabel) parts.push(`server: ${meta.serverIdLabel}`);
     if (meta.cached) parts.push("cached");
-    text16 = `${text16}
+    text19 = `${text19}
 
 [${parts.join(", ")}]`;
   }
-  return { ...result, content: [{ ...block, text: text16 }] };
+  return { ...result, content: [{ ...block, text: text19 }] };
 }
 function buildPipelineScript(commands, shell, marker, stopOnError) {
   if (shell === "powershell") {
@@ -12595,10 +12802,38 @@ var TOOLS = [
       required: ["project", "prompt"]
     }
   },
+  // ----- Shared Cursor skills (metadata only; install via downloads ZIP) -----
+  {
+    name: "cursor-skill",
+    description: 'Shared Cursor skill registry (metadata only \u2014 never returns file bodies; MCP truncates large text). Actions: list (slugs+versions), status (localVersion vs tip), pull (install pointer only). To install bytes: GET https://dashboard.mgsoftware.nl/api/downloads/versions.txt (skills/<slug>.zip=N) then GET \u2026/api/downloads/skills/<slug>.zip and expand into .cursor/skills/<slug>/. Publish from mg-dashboard: bun scripts/skills/pack-and-publish.ts --slug <slug> --message "\u2026". No push via this tool.',
+    inputSchema: {
+      type: "object",
+      properties: {
+        action: {
+          type: "string",
+          enum: ["list", "status", "pull"],
+          description: "list = registry overview; status = local vs remote; pull = tip metadata + installCommand (no files)"
+        },
+        slug: {
+          type: "string",
+          description: "Required for status/pull. e.g. plan-handoff-loop"
+        },
+        localVersion: {
+          type: "number",
+          description: "For status: version from .cursor/skills/<slug>/.mg-skill.json (0 if missing)"
+        },
+        version: {
+          type: "number",
+          description: "For pull: optional specific revision (default tip)"
+        }
+      },
+      required: ["action"]
+    }
+  },
   // ----- Trigger.dev -----
   ...TRIGGER_TOOLS
 ];
-var MCP_VERSION = "7.3.0";
+var MCP_VERSION = "7.4.13";
 async function handleListTools() {
   if (!authContext) return { tools: TOOLS };
   const allowedTools = authContext.allowedTools;
@@ -12856,7 +13091,7 @@ async function executeToolCall(name, a, _serverId) {
             ]
           };
         }
-        const lines = data.hits.map((hit, index13) => {
+        const lines = data.hits.map((hit, index16) => {
           const when = hit.lastMessageAt ? new Date(hit.lastMessageAt).toISOString().slice(0, 10) : "unknown date";
           const repo = hit.repo ?? "unknown repo";
           const sim = hit.similarity !== null ? ` \xB7 ${(hit.similarity * 100).toFixed(0)}% match` : "";
@@ -12866,7 +13101,7 @@ async function executeToolCall(name, a, _serverId) {
             ...Array.isArray(hit.tech) ? hit.tech.slice(0, 4) : []
           ].filter(Boolean);
           const tags = facets.length > 0 ? ` \xB7 ${facets.join(", ")}` : "";
-          return `${index13 + 1}. [${repo} \xB7 ${when}${sim}${tags}] ${hit.title}
+          return `${index16 + 1}. [${repo} \xB7 ${when}${sim}${tags}] ${hit.title}
    id: ${hit.id}
    ${(hit.summary ?? hit.snippet).replace(/\s+/g, " ").slice(0, 500)}`;
         });
@@ -13073,12 +13308,12 @@ Searchable via search-team-memory once indexing completes (usually immediate).`
             ]
           };
         }
-        const lines = data.hits.map((hit, index13) => {
+        const lines = data.hits.map((hit, index16) => {
           const sim = hit.similarity !== null ? ` \xB7 ${Math.round(hit.similarity * 100)}% match` : "";
           const tags = hit.tags.length ? ` \xB7 ${hit.tags.slice(0, 5).join(", ")}` : "";
           const sources = hit.sources.length ? `
    sources: ${hit.sources.slice(0, 6).map((s) => `${s.type}:${s.ref}`).join(", ")}` : "";
-          return `${index13 + 1}. [${hit.status} \xB7 updated ${hit.pageUpdatedOn ?? "unknown"}${sim}${tags}] ${hit.title}
+          return `${index16 + 1}. [${hit.status} \xB7 updated ${hit.pageUpdatedOn ?? "unknown"}${sim}${tags}] ${hit.title}
    slug: ${hit.slug}${sources}
    ${(hit.summary ?? hit.snippet).replace(/\s+/g, " ").slice(0, 400)}`;
         });
@@ -14335,8 +14570,8 @@ ${sample.join("\n")}${files.length > 5 ? `
             };
           const filtered = sortRows(applyFilter(only.rows));
           if (format === "json") {
-            const text17 = filtered.map((c) => JSON.stringify(c)).join("\n") || "(no containers)";
-            return { content: [{ type: "text", text: text17 }] };
+            const text20 = filtered.map((c) => JSON.stringify(c)).join("\n") || "(no containers)";
+            return { content: [{ type: "text", text: text20 }] };
           }
           if (groupByProject) {
             const groups = /* @__PURE__ */ new Map();
@@ -14363,8 +14598,8 @@ ${sample.join("\n")}${files.length > 5 ? `
           }
           const header = `${"NAMES".padEnd(36)}  ${"IMAGE".padEnd(40)}  ${"STATUS".padEnd(24)}  ${"HEALTH".padEnd(10)}  ${"PORTS".padEnd(40)}  PROJECT`;
           const body = filtered.map((r) => `${fmtRow(r)}  ${r.Project || ""}`);
-          const text16 = filtered.length === 0 ? "(no containers match)" : [header, ...body].join("\n");
-          return { content: [{ type: "text", text: text16 }] };
+          const text19 = filtered.length === 0 ? "(no containers match)" : [header, ...body].join("\n");
+          return { content: [{ type: "text", text: text19 }] };
         }
         if (format === "json") {
           const lines = [];
@@ -16010,6 +16245,176 @@ ${lines.join("\n")}`
           return { content: [{ type: "text", text: okMessage }] };
         });
       }
+      // ----- Shared Cursor skills (pull) -----
+      case "cursor-skill": {
+        const action = String(a.action || "").trim().toLowerCase();
+        if (!["list", "status", "pull"].includes(action)) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: 'Error: action must be "list" | "status" | "pull"'
+              }
+            ]
+          };
+        }
+        if (action === "list") {
+          const rows = await db.execute(sql`
+            SELECT slug, title, current_version, updated_at
+            FROM cursor_skill
+            ORDER BY slug
+          `);
+          if (!rows.length) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: "No shared skills registered yet. Publish from mg-dashboard with scripts/skills/pack-and-publish.ts"
+                }
+              ]
+            };
+          }
+          const lines = rows.map(
+            (r) => `${r.slug}@${r.current_version}  ${r.title || ""}  (updated ${r.updated_at})`
+          );
+          return {
+            content: [
+              {
+                type: "text",
+                text: `${lines.join("\n")}
+
+Install: GET https://dashboard.mgsoftware.nl/api/downloads/versions.txt then \u2026/skills/<slug>.zip. Metadata: cursor-skill action=pull slug=\u2026`
+              }
+            ]
+          };
+        }
+        const slug = String(a.slug || "").trim().toLowerCase();
+        if (!slug) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Error: slug is required for action=${action}`
+              }
+            ]
+          };
+        }
+        if (action === "status") {
+          const localVersion = Number(a.localVersion ?? 0);
+          const rows = await db.execute(sql`
+            SELECT current_version, title
+            FROM cursor_skill
+            WHERE slug = ${slug}
+            LIMIT 1
+          `);
+          const tip = rows[0];
+          if (!tip) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: JSON.stringify(
+                    {
+                      state: "unknown",
+                      slug,
+                      localVersion,
+                      remoteVersion: null,
+                      hint: "Skill not in registry"
+                    },
+                    null,
+                    2
+                  )
+                }
+              ]
+            };
+          }
+          const remoteVersion = Number(tip.current_version);
+          const state = localVersion >= remoteVersion && localVersion > 0 ? "up-to-date" : remoteVersion > localVersion ? "behind" : "up-to-date";
+          return {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(
+                  {
+                    state,
+                    slug,
+                    title: tip.title,
+                    localVersion,
+                    remoteVersion,
+                    next: state === "behind" ? `GET https://dashboard.mgsoftware.nl/api/downloads/skills/${slug}.zip \u2192 expand into .cursor/skills/${slug}/` : "No pull needed"
+                  },
+                  null,
+                  2
+                )
+              }
+            ]
+          };
+        }
+        const skills = await db.execute(sql`
+          SELECT id, current_version, title
+          FROM cursor_skill
+          WHERE slug = ${slug}
+          LIMIT 1
+        `);
+        const skill = skills[0];
+        if (!skill) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Error: skill "${slug}" not found in registry`
+              }
+            ]
+          };
+        }
+        const wantVersion = typeof a.version === "number" && Number.isFinite(a.version) ? Math.floor(a.version) : Number(skill.current_version);
+        const revisions = await db.execute(sql`
+          SELECT version, message, created_at
+          FROM cursor_skill_revision
+          WHERE skill_id = ${skill.id} AND version = ${wantVersion}
+          LIMIT 1
+        `);
+        const rev = revisions[0];
+        if (!rev) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Error: revision ${wantVersion} not found for ${slug}`
+              }
+            ]
+          };
+        }
+        const installPath = `.cursor/skills/${slug}`;
+        const zipDownloadsUrl = `${dashboardBaseUrl}/api/downloads/skills/${slug}.zip`;
+        const versionsUrl = `${dashboardBaseUrl}/api/downloads/versions.txt`;
+        const installCommand = `Invoke-WebRequest '${zipDownloadsUrl}' -OutFile skill.zip; Expand into ${installPath}/ (check ${versionsUrl} for tip version)`;
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(
+                {
+                  slug,
+                  title: skill.title,
+                  version: rev.version,
+                  message: rev.message,
+                  createdAt: rev.created_at,
+                  installPath,
+                  zipApiPath: `/api/cursor-skill/${slug}/zip`,
+                  zipApiUrl: `${dashboardBaseUrl}/api/cursor-skill/${slug}/zip`,
+                  zipDownloadsUrl,
+                  versionsUrl,
+                  installCommand,
+                  instruction: `Do NOT expect file bodies from this tool. Download ZIP from \`${zipDownloadsUrl}\` (or compare tip via \`${versionsUrl}\` line skills/${slug}.zip=N) into ${installPath}/. Then re-read SKILL.md from disk. Do not commit unless the user asks. Publish: bun scripts/skills/pack-and-publish.ts --slug <slug> --message "\u2026".`
+                },
+                null,
+                2
+              )
+            }
+          ]
+        };
+      }
       default:
         if (TRIGGER_TOOL_NAMES.has(name)) {
           return handleTriggerTool(name, a, { sshExec, getServerConnection });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mgsoftwarebv/mg-dashboard-mcp",
-  "version": "7.4.11",
+  "version": "7.4.13",
   "description": "MCP Server for MG Dashboard - SSH, SFTP, Docker, domains, DNS, and environment config tools for Cursor",
   "type": "module",
   "main": "dist/index.js",