@productbrain/mcp 0.0.1-beta.12 → 0.0.1-beta.14

package/dist/{chunk-KISCDOJ2.js → chunk-HLXF3QPE.js}

@@ -5,79 +5,149 @@ import {
 // src/tools/smart-capture.ts
 import { z } from "zod";
 
+// src/auth.ts
+import { AsyncLocalStorage } from "async_hooks";
+var requestStore = new AsyncLocalStorage();
+function runWithAuth(auth, fn) {
+  return requestStore.run(auth, fn);
+}
+function getRequestApiKey() {
+  return requestStore.getStore()?.apiKey;
+}
+var SESSION_TTL_MS = 30 * 60 * 1e3;
+var MAX_KEYS = 100;
+var keyStateMap = /* @__PURE__ */ new Map();
+function newKeyState() {
+  return {
+    workspaceId: null,
+    workspaceSlug: null,
+    workspaceName: null,
+    workspaceCreatedAt: null,
+    agentSessionId: null,
+    apiKeyId: null,
+    apiKeyScope: "readwrite",
+    sessionOriented: false,
+    sessionClosed: false,
+    lastAccess: Date.now()
+  };
+}
+function getKeyState(apiKey) {
+  let s = keyStateMap.get(apiKey);
+  if (!s) {
+    s = newKeyState();
+    keyStateMap.set(apiKey, s);
+    evictStale();
+  }
+  s.lastAccess = Date.now();
+  return s;
+}
+function evictStale() {
+  if (keyStateMap.size <= MAX_KEYS) return;
+  const now = Date.now();
+  for (const [key, s] of keyStateMap) {
+    if (now - s.lastAccess > SESSION_TTL_MS) keyStateMap.delete(key);
+  }
+  if (keyStateMap.size > MAX_KEYS) {
+    const sorted = [...keyStateMap.entries()].sort((a, b) => a[1].lastAccess - b[1].lastAccess);
+    for (let i = 0; i < sorted.length - MAX_KEYS; i++) {
+      keyStateMap.delete(sorted[i][0]);
+    }
+  }
+}
+
 // src/client.ts
 var DEFAULT_CLOUD_URL = "https://trustworthy-kangaroo-277.convex.site";
-var cachedWorkspaceId = null;
-var cachedWorkspaceSlug = null;
-var cachedWorkspaceName = null;
-var cachedWorkspaceCreatedAt = null;
-var cachedAgentSessionId = null;
-var cachedApiKeyId = null;
-var cachedApiKeyScope = "readwrite";
-var sessionOriented = false;
-var sessionClosed = false;
+var _stdioState = {
+  workspaceId: null,
+  workspaceSlug: null,
+  workspaceName: null,
+  workspaceCreatedAt: null,
+  agentSessionId: null,
+  apiKeyId: null,
+  apiKeyScope: "readwrite",
+  sessionOriented: false,
+  sessionClosed: false,
+  lastAccess: 0
+};
+function state() {
+  const reqKey = getRequestApiKey();
+  if (reqKey) return getKeyState(reqKey);
+  return _stdioState;
+}
+function getActiveApiKey() {
+  const fromRequest = getRequestApiKey();
+  if (fromRequest) return fromRequest;
+  const fromEnv = process.env.PRODUCTBRAIN_API_KEY;
+  if (!fromEnv) throw new Error("No API key available \u2014 set PRODUCTBRAIN_API_KEY or provide Bearer token");
+  return fromEnv;
+}
 function getAgentSessionId() {
-  return cachedAgentSessionId;
+  return state().agentSessionId;
 }
 function isSessionOriented() {
-  return sessionOriented;
+  return state().sessionOriented;
 }
 function setSessionOriented(value) {
-  sessionOriented = value;
+  state().sessionOriented = value;
 }
 async function startAgentSession() {
   const workspaceId = await getWorkspaceId();
-  if (!cachedApiKeyId) {
+  const s = state();
+  if (!s.apiKeyId) {
     throw new Error("Cannot start session: API key ID not resolved. Ensure workspace resolution completed.");
   }
   const result = await mcpCall("agent.startSession", {
     workspaceId,
-    apiKeyId: cachedApiKeyId
+    apiKeyId: s.apiKeyId
   });
-  cachedAgentSessionId = result.sessionId;
-  cachedApiKeyScope = result.toolsScope;
-  sessionOriented = false;
-  sessionClosed = false;
+  s.agentSessionId = result.sessionId;
+  s.apiKeyScope = result.toolsScope;
+  s.sessionOriented = false;
+  s.sessionClosed = false;
   return result;
 }
 async function closeAgentSession() {
-  if (!cachedAgentSessionId) return;
+  const s = state();
+  if (!s.agentSessionId) return;
   try {
     await mcpCall("agent.closeSession", {
-      sessionId: cachedAgentSessionId,
+      sessionId: s.agentSessionId,
       status: "closed"
     });
   } finally {
-    sessionClosed = true;
-    cachedAgentSessionId = null;
-    sessionOriented = false;
+    s.sessionClosed = true;
+    s.agentSessionId = null;
+    s.sessionOriented = false;
   }
 }
 async function orphanAgentSession() {
-  if (!cachedAgentSessionId) return;
+  const s = state();
+  if (!s.agentSessionId) return;
   try {
     await mcpCall("agent.closeSession", {
-      sessionId: cachedAgentSessionId,
+      sessionId: s.agentSessionId,
       status: "orphaned"
     });
   } catch {
   } finally {
-    cachedAgentSessionId = null;
-    sessionOriented = false;
+    s.agentSessionId = null;
+    s.sessionOriented = false;
   }
 }
 function touchSessionActivity() {
-  if (!cachedAgentSessionId) return;
+  const s = state();
+  if (!s.agentSessionId) return;
   mcpCall("agent.touchSession", {
-    sessionId: cachedAgentSessionId
+    sessionId: s.agentSessionId
   }).catch(() => {
   });
 }
 async function recordSessionActivity(activity) {
-  if (!cachedAgentSessionId) return;
+  const s = state();
+  if (!s.agentSessionId) return;
   try {
     await mcpCall("agent.recordActivity", {
-      sessionId: cachedAgentSessionId,
+      sessionId: s.agentSessionId,
       ...activity
     });
   } catch {
@@ -94,6 +164,9 @@ function bootstrap() {
   }
   process.env.CONVEX_SITE_URL ??= process.env.PRODUCTBRAIN_URL ?? DEFAULT_CLOUD_URL;
 }
+function bootstrapHttp() {
+  process.env.CONVEX_SITE_URL ??= process.env.PRODUCTBRAIN_URL ?? DEFAULT_CLOUD_URL;
+}
 function getEnv(key) {
   const value = process.env[key];
   if (!value) throw new Error(`${key} environment variable is required`);
@@ -104,7 +177,7 @@ function shouldLogAudit(status) {
 }
 function audit(fn, status, durationMs, errorMsg) {
   const ts = (/* @__PURE__ */ new Date()).toISOString();
-  const workspace = cachedWorkspaceId ?? "unresolved";
+  const workspace = state().workspaceId ?? "unresolved";
   const entry = { ts, fn, workspace, status, durationMs };
   if (errorMsg) entry.error = errorMsg;
   auditBuffer.push(entry);
@@ -125,7 +198,7 @@ function getAuditLog() {
 }
 async function mcpCall(fn, args = {}) {
   const siteUrl = getEnv("CONVEX_SITE_URL").replace(/\/$/, "");
-  const apiKey = getEnv("PRODUCTBRAIN_API_KEY");
+  const apiKey = getActiveApiKey();
   const start = Date.now();
   let res;
   try {
@@ -147,19 +220,22 @@ async function mcpCall(fn, args = {}) {
     throw new Error(`MCP call "${fn}" failed (${res.status}): ${json.error ?? "unknown error"}`);
   }
   audit(fn, "ok", Date.now() - start);
-  if (cachedAgentSessionId && fn !== "agent.touchSession" && fn !== "agent.startSession") {
+  const s = state();
+  if (s.agentSessionId && fn !== "agent.touchSession" && fn !== "agent.startSession") {
     touchSessionActivity();
   }
   return json.data;
 }
-var resolveInFlight = null;
+var resolveInFlightMap = /* @__PURE__ */ new Map();
 async function getWorkspaceId() {
-  if (cachedWorkspaceId) return cachedWorkspaceId;
-  if (resolveInFlight) return resolveInFlight;
-  resolveInFlight = resolveWorkspaceWithRetry().finally(() => {
-    resolveInFlight = null;
-  });
-  return resolveInFlight;
+  const s = state();
+  if (s.workspaceId) return s.workspaceId;
+  const apiKey = getActiveApiKey();
+  const existing = resolveInFlightMap.get(apiKey);
+  if (existing) return existing;
+  const promise = resolveWorkspaceWithRetry().finally(() => resolveInFlightMap.delete(apiKey));
+  resolveInFlightMap.set(apiKey, promise);
+  return promise;
 }
 async function resolveWorkspaceWithRetry(maxRetries = 2) {
   let lastError = null;
@@ -171,13 +247,14 @@ async function resolveWorkspaceWithRetry(maxRetries = 2) {
           "API key is valid but no workspace is associated. Run `npx productbrain setup` or regenerate your key."
         );
       }
-      cachedWorkspaceId = workspace._id;
-      cachedWorkspaceSlug = workspace.slug;
-      cachedWorkspaceName = workspace.name;
-      cachedWorkspaceCreatedAt = workspace.createdAt ?? null;
-      if (workspace.keyScope) cachedApiKeyScope = workspace.keyScope;
-      if (workspace.keyId) cachedApiKeyId = workspace.keyId;
-      return cachedWorkspaceId;
+      const s = state();
+      s.workspaceId = workspace._id;
+      s.workspaceSlug = workspace.slug;
+      s.workspaceName = workspace.name;
+      s.workspaceCreatedAt = workspace.createdAt ?? null;
+      if (workspace.keyScope) s.apiKeyScope = workspace.keyScope;
+      if (workspace.keyId) s.apiKeyId = workspace.keyId;
+      return s.workspaceId;
     } catch (err) {
       lastError = err;
       const isTransient = /network error|fetch failed|ECONNREFUSED|ETIMEDOUT/i.test(err.message);
@@ -194,11 +271,12 @@ async function resolveWorkspaceWithRetry(maxRetries = 2) {
 }
 async function getWorkspaceContext() {
   const workspaceId = await getWorkspaceId();
+  const s = state();
   return {
     workspaceId,
-    workspaceSlug: cachedWorkspaceSlug ?? "unknown",
-    workspaceName: cachedWorkspaceName ?? "unknown",
-    createdAt: cachedWorkspaceCreatedAt
+    workspaceSlug: s.workspaceSlug ?? "unknown",
+    workspaceName: s.workspaceName ?? "unknown",
+    createdAt: s.workspaceCreatedAt
   };
 }
 async function mcpQuery(fn, args = {}) {
@@ -210,36 +288,38 @@ async function mcpMutation(fn, args = {}) {
   return mcpCall(fn, { ...args, workspaceId });
 }
 function requireWriteAccess() {
-  if (!cachedAgentSessionId) {
+  const s = state();
+  if (!s.agentSessionId) {
     throw new Error(
       "Agent session required for write operations. Call `agent-start` first."
     );
   }
-  if (sessionClosed) {
+  if (s.sessionClosed) {
     throw new Error(
       "Agent session has been closed. Write tools are no longer available."
     );
   }
-  if (!sessionOriented) {
+  if (!s.sessionOriented) {
     throw new Error(
       "Orientation required before writing to the Chain. Call 'orient' first."
     );
   }
-  if (cachedApiKeyScope === "read") {
+  if (s.apiKeyScope === "read") {
     throw new Error(
       "This API key has read-only scope. Write tools are not available."
     );
   }
 }
 async function recoverSessionState() {
-  if (!cachedWorkspaceId) return;
+  const s = state();
+  if (!s.workspaceId) return;
   try {
-    const session = await mcpCall("agent.getActiveSession", { workspaceId: cachedWorkspaceId });
+    const session = await mcpCall("agent.getActiveSession", { workspaceId: s.workspaceId });
     if (session && session.status === "active") {
-      cachedAgentSessionId = session._id;
-      sessionOriented = session.oriented;
-      cachedApiKeyScope = session.toolsScope;
-      sessionClosed = false;
+      s.agentSessionId = session._id;
+      s.sessionOriented = session.oriented;
+      s.apiKeyScope = session.toolsScope;
+      s.sessionClosed = false;
     }
   } catch {
   }
@@ -298,6 +378,12 @@ var COMMON_CHECKS = {
       return colls.size >= 2;
     },
     suggestion: () => "Try linking to entries in different collections (glossary, business-rules, strategy)."
+  },
+  hasType: {
+    id: "has-type",
+    label: "Has canonical type",
+    check: (ctx) => !!ctx.data?.canonicalKey || !!ctx.canonicalKey,
+    suggestion: () => "Classify this entry with a canonical type for better context assembly. Use update-entry to set canonicalKey."
   }
 };
 var PROFILES = /* @__PURE__ */ new Map([
@@ -331,6 +417,7 @@ var PROFILES = /* @__PURE__ */ new Map([
       COMMON_CHECKS.clearName,
       COMMON_CHECKS.hasDescription,
       COMMON_CHECKS.hasRelations,
+      COMMON_CHECKS.hasType,
       {
         id: "has-severity",
         label: "Severity specified",
@@ -371,6 +458,7 @@ var PROFILES = /* @__PURE__ */ new Map([
       COMMON_CHECKS.clearName,
       COMMON_CHECKS.hasDescription,
       COMMON_CHECKS.hasRelations,
+      COMMON_CHECKS.hasType,
       {
         id: "has-rationale",
         label: "Rationale provided",
@@ -415,6 +503,7 @@ var PROFILES = /* @__PURE__ */ new Map([
     },
     qualityChecks: [
       COMMON_CHECKS.clearName,
+      COMMON_CHECKS.hasType,
       {
         id: "has-canonical",
         label: "Canonical definition provided (>20 chars)",
@@ -450,6 +539,7 @@ var PROFILES = /* @__PURE__ */ new Map([
     },
     qualityChecks: [
       COMMON_CHECKS.clearName,
+      COMMON_CHECKS.hasType,
       {
         id: "has-rationale",
         label: "Rationale provided (>30 chars)",
@@ -478,6 +568,7 @@ var PROFILES = /* @__PURE__ */ new Map([
       COMMON_CHECKS.clearName,
       COMMON_CHECKS.hasDescription,
       COMMON_CHECKS.hasRelations,
+      COMMON_CHECKS.hasType,
       {
         id: "has-owner",
         label: "Owner assigned",
@@ -502,6 +593,7 @@ var PROFILES = /* @__PURE__ */ new Map([
       COMMON_CHECKS.clearName,
       COMMON_CHECKS.hasDescription,
       COMMON_CHECKS.hasRelations,
+      COMMON_CHECKS.hasType,
       {
         id: "has-behaviors",
         label: "Behaviors described",
@@ -520,6 +612,7 @@ var PROFILES = /* @__PURE__ */ new Map([
       COMMON_CHECKS.clearName,
       COMMON_CHECKS.hasDescription,
       COMMON_CHECKS.hasRelations,
+      COMMON_CHECKS.hasType,
       COMMON_CHECKS.diverseRelations
     ]
   }],
@@ -554,7 +647,8 @@ var PROFILES = /* @__PURE__ */ new Map([
     qualityChecks: [
       COMMON_CHECKS.clearName,
       COMMON_CHECKS.hasDescription,
-      COMMON_CHECKS.hasRelations
+      COMMON_CHECKS.hasRelations,
+      COMMON_CHECKS.hasType
     ]
   }],
   ["tracking-events", {
@@ -578,7 +672,8 @@ var FALLBACK_PROFILE = {
   qualityChecks: [
     COMMON_CHECKS.clearName,
     COMMON_CHECKS.hasDescription,
-    COMMON_CHECKS.hasRelations
+    COMMON_CHECKS.hasRelations,
+    COMMON_CHECKS.hasType
   ]
 };
 function generateEntryId(prefix) {
@@ -698,6 +793,7 @@ async function checkEntryQuality(entryId) {
     description,
     data: entry.data ?? {},
     entryId: entry.entryId ?? "",
+    canonicalKey: entry.canonicalKey,
     linksCreated,
     linksSuggested: [],
     collectionFields: []
@@ -740,11 +836,12 @@ function registerSmartCaptureTools(server) {
         name: z.string().describe("Display name \u2014 be specific (e.g. 'Convex adjacency list won't scale for graph traversal')"),
         description: z.string().describe("Full context \u2014 what's happening, why it matters, what you observed"),
         context: z.string().optional().describe("Optional additional context (e.g. 'Observed during gather-context calls taking 700ms+')"),
-        entryId: z.string().optional().describe("Optional custom entry ID (e.g. 'TEN-my-id'). Auto-generated if omitted.")
+        entryId: z.string().optional().describe("Optional custom entry ID (e.g. 'TEN-my-id'). Auto-generated if omitted."),
+        canonicalKey: z.string().optional().describe("Semantic type (e.g. 'decision', 'tension', 'vision'). Auto-assigned from collection if omitted.")
       },
       annotations: { destructiveHint: false }
     },
-    async ({ collection, name, description, context, entryId }) => {
+    async ({ collection, name, description, context, entryId, canonicalKey }) => {
       requireWriteAccess();
       const profile = PROFILES.get(collection) ?? FALLBACK_PROFILE;
       const col = await mcpQuery("chain.getCollection", { slug: collection });
@@ -815,6 +912,7 @@ Or use \`list-collections\` to see available collections.`
           name,
           status,
           data,
+          canonicalKey,
           createdBy: agentId ? `agent:${agentId}` : "capture"
         });
         await recordSessionActivity({ entryCreated: finalEntryId || internalId });
@@ -892,11 +990,25 @@ Use \`get-entry\` to inspect the existing entry, or \`update-entry\` to modify i
         context,
         data,
         entryId: finalEntryId,
+        canonicalKey,
         linksCreated,
         linksSuggested,
         collectionFields: col.fields ?? []
       };
       const quality = scoreQuality(captureCtx, profile);
+      let cardinalityWarning = null;
+      const resolvedCK = canonicalKey ?? captureCtx.canonicalKey;
+      if (resolvedCK) {
+        try {
+          const check = await mcpQuery("chain.checkCardinalityWarning", {
+            canonicalKey: resolvedCK
+          });
+          if (check?.warning) {
+            cardinalityWarning = check.warning;
+          }
+        } catch {
+        }
+      }
       const contradictionWarnings = await runContradictionCheck(name, description);
       if (contradictionWarnings.length > 0) {
         await recordSessionActivity({ contradictionWarning: true });
@@ -930,6 +1042,10 @@ Use \`get-entry\` to inspect the existing entry, or \`update-entry\` to modify i
         lines.push("");
         lines.push(`_To improve: \`update-entry entryId="${finalEntryId}"\` to fill missing fields._`);
       }
+      if (cardinalityWarning) {
+        lines.push("");
+        lines.push(`**Cardinality warning:** ${cardinalityWarning}`);
+      }
       if (contradictionWarnings.length > 0) {
         lines.push("");
         lines.push("\u26A0 Contradiction check: proposed entry matched existing governance entries:");
@@ -1279,6 +1395,7 @@ async function runContradictionCheck(name, description) {
 }
 
 export {
+  runWithAuth,
   getAgentSessionId,
   isSessionOriented,
   setSessionOriented,
@@ -1287,6 +1404,7 @@ export {
   orphanAgentSession,
   recordSessionActivity,
   bootstrap,
+  bootstrapHttp,
   getAuditLog,
   mcpCall,
   getWorkspaceId,
@@ -1300,4 +1418,4 @@ export {
   registerSmartCaptureTools,
   runContradictionCheck
 };
-//# sourceMappingURL=chunk-KISCDOJ2.js.map
+//# sourceMappingURL=chunk-HLXF3QPE.js.map