@n-dx/web 0.1.0

package/dist/server/routes-mcp.js

@@ -0,0 +1,175 @@
+/**
+ * MCP over HTTP routes — mounts rex and sourcevision MCP servers on the web server.
+ *
+ * POST/GET/DELETE /mcp/rex          — Rex MCP endpoint (Streamable HTTP transport)
+ * POST/GET/DELETE /mcp/sourcevision — Sourcevision MCP endpoint (Streamable HTTP transport)
+ *
+ * Each endpoint manages its own transport + MCP server lifecycle.
+ * Sessions are stateful (session ID generated per initialize request).
+ *
+ * Unlike the REST API routes (which read JSON files from disk and shell
+ * out to CLIs), MCP routes require the actual MCP server factory
+ * functions at runtime.  These are the **only** cross-package runtime
+ * imports in the web package, isolated in gateway modules.
+ *
+ * @see ./rex-gateway.ts — Rex runtime gateway
+ * @see ./domain-gateway.ts — Sourcevision runtime gateway
+ */
+import { randomUUID } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { createRexMcpServer } from "./rex-gateway.js";
+import { createSourcevisionMcpServer } from "./domain-gateway.js";
+const MCP_REX_PATH = "/mcp/rex";
+const MCP_SV_PATH = "/mcp/sourcevision";
+/** Session maps keyed by session ID. */
+const rexSessions = new Map();
+const svSessions = new Map();
+// ── Session TTL cleanup ──────────────────────────────────────────────────────
+/** Maximum session idle time before automatic cleanup (15 minutes). */
+const SESSION_TTL_MS = 15 * 60 * 1000;
+/** How often to sweep for stale sessions (5 minutes). */
+const SESSION_SWEEP_INTERVAL_MS = 5 * 60 * 1000;
+/** Sweep a session map, closing sessions idle longer than SESSION_TTL_MS. */
+function sweepStaleSessions(sessions) {
+    const now = Date.now();
+    for (const [sid, session] of sessions) {
+        if (now - session.lastActivityAt > SESSION_TTL_MS) {
+            session.transport.close().catch(() => { });
+            sessions.delete(sid);
+        }
+    }
+}
+/** Periodic sweep timer (started lazily on first session creation). */
+let sweepTimer = null;
+function ensureSweepTimer() {
+    if (sweepTimer)
+        return;
+    sweepTimer = setInterval(() => {
+        sweepStaleSessions(rexSessions);
+        sweepStaleSessions(svSessions);
+        // Stop the timer if no sessions remain — avoid holding the process open
+        if (rexSessions.size === 0 && svSessions.size === 0 && sweepTimer) {
+            clearInterval(sweepTimer);
+            sweepTimer = null;
+        }
+    }, SESSION_SWEEP_INTERVAL_MS);
+    // Don't prevent process exit
+    if (sweepTimer.unref)
+        sweepTimer.unref();
+}
+/** Factory that creates a Rex MCP server instance. */
+const createRexServer = async (ctx) => createRexMcpServer(ctx.projectDir);
+/** Factory that creates a Sourcevision MCP server instance. */
+const createSvServer = (ctx) => createSourcevisionMcpServer(ctx.projectDir);
+/**
+ * Create a new MCP session: transport + server, connected but not yet handling requests.
+ * The session is registered in the session map once the transport assigns a session ID
+ * (which happens during the first handleRequest call for the initialize request).
+ */
+async function createSession(ctx, sessions, factory) {
+    const server = await factory(ctx);
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: () => randomUUID(),
+    });
+    transport.onclose = () => {
+        const sid = transport.sessionId;
+        if (sid)
+            sessions.delete(sid);
+    };
+    await server.connect(transport);
+    ensureSweepTimer();
+    return { transport, server, lastActivityAt: Date.now() };
+}
+/**
+ * Look up an existing session by the Mcp-Session-Id header, or return null
+ * if no session header is present (indicating an initialization request).
+ */
+function findSession(req, sessions) {
+    const sessionId = req.headers["mcp-session-id"];
+    if (!sessionId || typeof sessionId !== "string")
+        return null;
+    return sessions.get(sessionId) ?? null;
+}
+/**
+ * Handle an MCP HTTP request for a given endpoint.
+ *
+ * - POST without session header → create new session, delegate to transport, register session
+ * - POST/GET/DELETE with session header → delegate to existing transport
+ * - Unknown session → 404
+ */
+async function handleMcpRequest(req, res, ctx, sessions, factory) {
+    const method = req.method || "GET";
+    // POST requests: either initialization (no session) or existing session
+    if (method === "POST") {
+        const existing = findSession(req, sessions);
+        if (existing) {
+            existing.lastActivityAt = Date.now();
+            await existing.transport.handleRequest(req, res);
+            return true;
+        }
+        // No session header — this should be an initialization request.
+        // Create transport + server, handle the request, then register the session.
+        const session = await createSession(ctx, sessions, factory);
+        await session.transport.handleRequest(req, res);
+        // After handleRequest, the transport has generated a session ID
+        const sid = session.transport.sessionId;
+        if (sid)
+            sessions.set(sid, session);
+        return true;
+    }
+    // GET (SSE streaming) and DELETE (session termination) require an existing session
+    if (method === "GET" || method === "DELETE") {
+        const existing = findSession(req, sessions);
+        if (!existing) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "No valid session. Send an initialization request first." }));
+            return true;
+        }
+        existing.lastActivityAt = Date.now();
+        await existing.transport.handleRequest(req, res);
+        return true;
+    }
+    // Unsupported method
+    res.writeHead(405, { "Content-Type": "application/json", Allow: "GET, POST, DELETE" });
+    res.end(JSON.stringify({ error: "Method not allowed" }));
+    return true;
+}
+/**
+ * Route handler for MCP endpoints.
+ *
+ * Handles `/mcp/rex` and `/mcp/sourcevision` paths.
+ * Returns `true` if the request was handled, `false` otherwise.
+ */
+export async function handleMcpRoute(req, res, ctx) {
+    const url = req.url ?? "/";
+    // Strip query string for path matching
+    const path = url.split("?")[0];
+    if (path === MCP_REX_PATH) {
+        return handleMcpRequest(req, res, ctx, rexSessions, createRexServer);
+    }
+    if (path === MCP_SV_PATH) {
+        return handleMcpRequest(req, res, ctx, svSessions, createSvServer);
+    }
+    return false;
+}
+/**
+ * Close all active MCP sessions and stop the sweep timer.
+ * Used for graceful shutdown.
+ */
+export async function closeAllMcpSessions() {
+    if (sweepTimer) {
+        clearInterval(sweepTimer);
+        sweepTimer = null;
+    }
+    const closers = [];
+    for (const session of rexSessions.values()) {
+        closers.push(session.transport.close());
+    }
+    for (const session of svSessions.values()) {
+        closers.push(session.transport.close());
+    }
+    await Promise.allSettled(closers);
+    rexSessions.clear();
+    svSessions.clear();
+}
+//# sourceMappingURL=routes-mcp.js.map

package/dist/server/routes-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-mcp.js","sourceRoot":"","sources":["../../src/server/routes-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAGlE,MAAM,YAAY,GAAG,UAAU,CAAC;AAChC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAaxC,wCAAwC;AACxC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAClD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEjD,gFAAgF;AAEhF,uEAAuE;AACvE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,yDAAyD;AACzD,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,6EAA6E;AAC7E,SAAS,kBAAkB,CAAC,QAAiC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,IAAI,GAAG,GAAG,OAAO,CAAC,cAAc,GAAG,cAAc,EAAE,CAAC;YAClD,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC1C,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,IAAI,UAAU,GAA0C,IAAI,CAAC;AAE7D,SAAS,gBAAgB;IACvB,IAAI,UAAU;QAAE,OAAO;IACvB,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5B,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAChC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,wEAAwE;QACxE,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YAClE,aAAa,CAAC,UAAU,CAAC,CAAC;YAC1B,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC9B,6BAA6B;IAC7B,IAAI,UAAU,CAAC,KAAK;QAAE,UAAU,CAAC,KAAK,EAAE,CAAC;AAC3C,CAAC;AAID,sDAAsD;AACtD,MAAM,eAAe,GAAqB,KAAK,EAAE,GAAG,EAAE,EAAE,CACtD,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAErC,+DAA+D;AAC/D,MAAM,cAAc,GAAqB,CAAC,GAAG,EAAE,EAAE,CAC/C,2BAA2B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAE9C;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAkB,EAClB,QAAiC,EACjC,OAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;KACvC,CAAC,CAAC;IACH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;QACvB,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC;QAChC,IAAI,GAAG;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,gBAAgB,EAAE,CAAC;IACnB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,GAAoB,EACpB,QAAiC;IAEjC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAoB,EACpB,GAAmB,EACnB,GAAkB,EAClB,QAAiC,EACjC,OAAyB;IAEzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IAEnC,wEAAwE;IACxE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,gEAAgE;QAChE,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,gEAAgE;QAChE,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;QACxC,IAAI,GAAG;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mFAAmF;IACnF,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAC,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,MAAM,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACvF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAoB,EACpB,GAAmB,EACnB,GAAkB;IAElB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC3B,uCAAuC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,OAAO,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,UAAU,EAAE,CAAC;QACf,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC"}

package/dist/server/routes-notion.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Notion integration configuration API routes.
+ *
+ * Manages Notion API credentials (token + database ID) through the
+ * adapter registry, validates connection health, validates the database
+ * schema, and provides configuration endpoints for the dashboard UI.
+ *
+ * Credentials are stored via the adapter registry's redaction mechanism:
+ * sensitive fields (token) are replaced with `{ __redacted, envVar, hint }`
+ * in `.rex/adapters.json`, and the real value must be provided via
+ * environment variable at runtime.
+ *
+ * GET  /api/notion/config       — current Notion adapter config (masked)
+ * PUT  /api/notion/config       — save/update Notion adapter config
+ * POST /api/notion/test         — test connection to Notion API
+ * POST /api/notion/schema       — validate database schema for PRD mapping
+ * POST /api/notion/schema/fix   — create missing properties in database
+ * DELETE /api/notion/config     — remove Notion adapter config
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { ServerContext } from "./types.js";
+/** Handle Notion config API requests. Returns true if the request was handled. */
+export declare function handleNotionRoute(req: IncomingMessage, res: ServerResponse, ctx: ServerContext): Promise<boolean>;