@promptprojectmanager/mcp-server 4.2.0 → 4.2.2

package/dist/index.js

@@ -22,6 +22,60 @@ import {
   ListToolsRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
 
+// src/types.ts
+function isAccessDenied(result) {
+  return typeof result === "object" && result !== null && "accessDenied" in result && result.accessDenied === true;
+}
+function parseWorkArgs(args) {
+  const parsed = args;
+  return {
+    ticketSlug: typeof parsed?.ticketSlug === "string" ? parsed.ticketSlug : void 0
+  };
+}
+function parseCloseArgs(args) {
+  const parsed = args;
+  const ticketSlug = typeof parsed?.ticketSlug === "string" ? parsed.ticketSlug : void 0;
+  if (!ticketSlug) return null;
+  return { ticketSlug };
+}
+function parseCreateArgs(args) {
+  const parsed = args;
+  const content = typeof parsed?.content === "string" ? parsed.content : void 0;
+  if (!content) return null;
+  return { content };
+}
+function parseSearchArgs(args) {
+  const parsed = args;
+  const query = typeof parsed?.query === "string" ? parsed.query : void 0;
+  if (!query || query.length < 3) return null;
+  return { query };
+}
+function parseGetArgs(args) {
+  const parsed = args;
+  const ticketSlug = typeof parsed?.ticketSlug === "string" ? parsed.ticketSlug : void 0;
+  if (!ticketSlug) return null;
+  return { ticketSlug };
+}
+function parseUpdateArgs(args) {
+  const parsed = args;
+  const ticketSlug = typeof parsed?.ticketSlug === "string" ? parsed.ticketSlug : void 0;
+  const content = typeof parsed?.content === "string" ? parsed.content : void 0;
+  if (!ticketSlug || !content) return null;
+  return { ticketSlug, content };
+}
+function parseRunPromptArgs(args) {
+  const parsed = args;
+  const slug = typeof parsed?.slug === "string" ? parsed.slug : void 0;
+  if (!slug) return null;
+  return { slug };
+}
+function parseSystemPromptsArgs(args) {
+  const parsed = args;
+  return {
+    search: typeof parsed?.search === "string" ? parsed.search : void 0
+  };
+}
+
 // src/prompt-builder.ts
 var AmbiguousPromptError = class extends Error {
   suggestions;
@@ -31,24 +85,13 @@ var AmbiguousPromptError = class extends Error {
     this.suggestions = suggestions;
   }
 };
-async function fetchAccountScopedPromptMetadataForProject(client, apiKey, projectSlug) {
-  try {
-    const metadata = await client.query("mcp_prompts:getAccountScopedPromptMetadataForProject", {
-      apiKey,
-      projectSlug
-    });
-    return metadata;
-  } catch (error) {
-    throw new Error(
-      `Failed to fetch account-scoped prompt metadata for project "${projectSlug}": ${error instanceof Error ? error.message : "Unknown error"}`
-    );
-  }
-}
 async function fetchAccountScopedPromptMetadataByToken(client, projectToken) {
   try {
-    const metadata = await client.query("mcp_prompts:getAccountScopedPromptMetadataByToken", {
-      projectToken
-    });
+    const typedClient = client;
+    const metadata = await typedClient.query(
+      "mcp_prompts:getAccountScopedPromptMetadataByToken",
+      { projectToken }
+    );
     return metadata;
   } catch (error) {
     throw new Error(
@@ -57,21 +100,14 @@ async function fetchAccountScopedPromptMetadataByToken(client, projectToken) {
   }
 }
 async function fetchAndExecuteAccountScopedPrompt(promptSlug, config, convexClient) {
-  if (!config.apiKey && !config.projectToken) {
-    throw new Error("Authentication required: provide API key or project token");
-  }
-  let result;
-  if (config.apiKey) {
-    result = await convexClient.query("mcp_prompts:getAccountScopedPromptBySlug", {
-      apiKey: config.apiKey,
-      promptSlug
-    });
-  } else {
-    result = await convexClient.query("mcp_prompts:getAccountScopedPromptBySlugByToken", {
+  const typedClient = convexClient;
+  const result = await typedClient.query(
+    "mcp_prompts:getAccountScopedPromptBySlugByToken",
+    {
       projectToken: config.projectToken,
       promptSlug
-    });
-  }
+    }
+  );
   if (!result) {
     throw new Error(
       `Prompt "${promptSlug}" not found. Use system:prompts to list available prompts.`
@@ -102,87 +138,34 @@ async function fetchAndExecuteAccountScopedPrompt(promptSlug, config, convexClie
 
 // src/server.ts
 function buildAuthArgs(config) {
-  if (config.apiKey) {
-    return {
-      apiKey: config.apiKey,
-      agentName: config.agentName
-      // Pass agent name for identity resolution
-    };
-  }
-  if (config.projectToken) {
-    return { projectToken: config.projectToken };
-  }
-  return {};
+  return { projectToken: config.projectToken };
 }
 var SYSTEM_TOOLS = [
   // All tools are now project-scoped (see dynamic*Tools arrays below)
 ];
-async function startServer(config, convexClient) {
-  let tokenProjectSlug;
-  if (config.apiKey) {
-    console.error("[MCP] Validating API key...");
-    const validation = await validateApiKey(convexClient, config.apiKey);
-    if (!validation.valid) {
-      throw new Error(`Invalid API key: ${validation.error}`);
-    }
-    console.error(`[MCP] API key validated for user: ${validation.userId}`);
-  } else if (config.projectToken) {
-    console.error("[MCP] Validating project token...");
-    const validation = await validateProjectToken(convexClient, config.projectToken);
-    if (!validation.valid) {
-      throw new Error(`Invalid project token: ${validation.error}`);
-    }
-    tokenProjectSlug = validation.projectSlug;
-    console.error(`[MCP] Project token validated: "${validation.tokenName}" for project "${tokenProjectSlug}"`);
-  } else {
-    throw new Error("No authentication provided. Set PPM_API_KEY or PPM_PROJECT_TOKEN.");
-  }
-  let accountScopedPrompts = [];
-  let projectsForTickets = [];
-  console.error("[MCP] Fetching prompt and project metadata...");
-  if (config.apiKey) {
-    if (config.selectedProjects.length === 1) {
-      accountScopedPrompts = await fetchAccountScopedPromptMetadataForProject(
-        convexClient,
-        config.apiKey,
-        config.selectedProjects[0]
-      );
-      console.error(`[MCP] Using project-filtered prompt visibility for: ${config.selectedProjects[0]}`);
-    } else {
-      accountScopedPrompts = await fetchAccountScopedPromptMetadata(convexClient, config.apiKey);
-      if (config.selectedProjects.length > 1) {
-        console.error(`[MCP] Multiple projects specified - showing all prompts (no exclusion filtering)`);
-      }
-    }
-    const allProjects = await fetchMcpProjects(convexClient, config.apiKey);
-    if (config.selectedProjects.length > 0) {
-      const selectedSet = new Set(config.selectedProjects);
-      projectsForTickets = allProjects.filter((p) => selectedSet.has(p.slug));
-    } else {
-      projectsForTickets = allProjects;
-    }
-  } else if (config.projectToken && tokenProjectSlug) {
-    accountScopedPrompts = await fetchAccountScopedPromptMetadataByToken(
-      convexClient,
-      config.projectToken
-    );
-    console.error(`[MCP] Project token mode: loaded ${accountScopedPrompts.length} prompts`);
-    projectsForTickets = [{ slug: tokenProjectSlug, name: tokenProjectSlug }];
+async function startServer(config, convexClientRaw) {
+  const convexClient = convexClientRaw;
+  console.error("[MCP] Validating project token...");
+  const validation = await validateProjectToken(convexClient, config.projectToken);
+  if (!validation.valid) {
+    throw new Error(`Invalid project token: ${validation.error}`);
   }
+  const tokenProjectSlug = validation.projectSlug;
+  console.error(`[MCP] Project token validated: "${validation.tokenName}" for project "${tokenProjectSlug}"`);
+  console.error("[MCP] Fetching prompt metadata...");
+  const accountScopedPrompts = await fetchAccountScopedPromptMetadataByToken(
+    convexClient,
+    config.projectToken
+  );
+  console.error(`[MCP] Project token mode: loaded ${accountScopedPrompts.length} prompts`);
+  const projectsForTickets = [{ slug: tokenProjectSlug, name: tokenProjectSlug }];
   console.error(`[MCP] Found ${accountScopedPrompts.length} account-scoped prompts (global tools)`);
-  console.error(`[MCP] Found ${projectsForTickets.length} project(s) for ticket tools`);
-  if (accountScopedPrompts.length === 0 && config.apiKey) {
+  console.error(`[MCP] Ticket project scope: ${tokenProjectSlug} (token-scoped)`);
+  if (accountScopedPrompts.length === 0) {
     console.error(
-      "[MCP] WARNING: No account-scoped prompts found. Create prompts in the 'prompts' section to expose them via MCP."
+      "[MCP] WARNING: No prompts found. Create prompts in the 'prompts' section to expose them via MCP."
     );
   }
-  if (tokenProjectSlug) {
-    console.error(`[MCP] Ticket project scope: ${tokenProjectSlug} (token-scoped)`);
-  } else if (config.selectedProjects.length > 0) {
-    console.error(`[MCP] Ticket project filter: ${config.selectedProjects.join(", ")}`);
-  } else {
-    console.error(`[MCP] Ticket projects: ALL (${projectsForTickets.map((p) => p.slug).join(", ")})`);
-  }
   const projectSlugs = new Set(projectsForTickets.map((p) => p.slug));
   const dynamicTicketTools = [];
   for (const projectSlug of projectSlugs) {
@@ -595,8 +578,8 @@ This will execute the "code-review" prompt.`;
   server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const toolName = request.params.name;
     if (toolName === "system_run_prompt") {
-      const promptSlug = request.params.arguments?.slug;
-      if (!promptSlug) {
+      const parsedArgs = parseRunPromptArgs(request.params.arguments);
+      if (!parsedArgs) {
         return {
           content: [
             {
@@ -609,6 +592,7 @@ Use \`system_prompts\` to list available prompts.`
           isError: true
         };
       }
+      const { slug: promptSlug } = parsedArgs;
       try {
         const result = await fetchAndExecuteAccountScopedPrompt(
           promptSlug,
@@ -656,7 +640,7 @@ Example: \`system_run_prompt ${error.suggestions[0]}\``
       }
     }
     if (toolName === "system_prompts") {
-      const searchTerm = request.params.arguments?.search;
+      const { search: searchTerm } = parseSystemPromptsArgs(request.params.arguments);
       let filteredPrompts = [...accountScopedPrompts];
       if (searchTerm) {
         const lowerSearch = searchTerm.toLowerCase();
@@ -687,7 +671,7 @@ No prompts found.`
     const ticketTool = dynamicTicketTools.find((tt) => tt.name === toolName);
     if (ticketTool) {
       if (ticketTool.type === "work") {
-        const ticketSlug = request.params.arguments?.ticketSlug;
+        const { ticketSlug } = parseWorkArgs(request.params.arguments);
         try {
           const result = await convexClient.mutation(
             "mcp_tickets:workMcpTicket",
@@ -709,7 +693,7 @@ No prompts found.`
               ]
             };
           }
-          if ("accessDenied" in result && result.accessDenied) {
+          if (isAccessDenied(result)) {
             return {
               content: [
                 {
@@ -720,16 +704,17 @@ No prompts found.`
               isError: true
             };
           }
-          const startedInfo = result.startedAt ? `
-Started: ${new Date(result.startedAt).toISOString()}` : "";
-          const statusNote = result.wasOpened ? `_Ticket moved to working status. ${result.remainingTickets} ticket(s) remaining in queue._` : `_Resuming work on this ticket. ${result.remainingTickets} ticket(s) in queue._`;
+          const workResult = result;
+          const startedInfo = workResult.startedAt ? `
+Started: ${new Date(workResult.startedAt).toISOString()}` : "";
+          const statusNote = workResult.wasOpened ? `_Ticket moved to working status. ${workResult.remainingTickets} ticket(s) remaining in queue._` : `_Resuming work on this ticket. ${workResult.remainingTickets} ticket(s) in queue._`;
           return {
             content: [
               {
                 type: "text",
-                text: `# Ticket: ${result.slug} [WORKING]${startedInfo}
+                text: `# Ticket: ${workResult.slug} [WORKING]${startedInfo}
 
-${result.content}
+${workResult.content}
 
 ---
 ${statusNote}`
@@ -750,8 +735,8 @@ ${statusNote}`
           };
         }
       } else if (ticketTool.type === "create") {
-        const content = request.params.arguments?.content;
-        if (!content) {
+        const parsedArgs = parseCreateArgs(request.params.arguments);
+        if (!parsedArgs) {
           return {
             content: [
               {
@@ -762,6 +747,7 @@ ${statusNote}`
             isError: true
           };
         }
+        const { content } = parsedArgs;
         try {
           const result = await convexClient.mutation(
             "mcp_tickets:createMcpTicket",
@@ -798,8 +784,8 @@ _Ticket created in backlog. Use \`tickets_work ${result.slug}\` to move it to wo
           };
         }
       } else if (ticketTool.type === "close") {
-        const ticketSlug = request.params.arguments?.ticketSlug;
-        if (!ticketSlug) {
+        const parsedArgs = parseCloseArgs(request.params.arguments);
+        if (!parsedArgs) {
           return {
             content: [
               {
@@ -810,6 +796,7 @@ _Ticket created in backlog. Use \`tickets_work ${result.slug}\` to move it to wo
             isError: true
           };
         }
+        const { ticketSlug } = parsedArgs;
         try {
           const result = await convexClient.mutation(
             "mcp_tickets:closeMcpTicket",
@@ -845,8 +832,8 @@ _Reminder: Ensure all embedded \`[RUN_PROMPT ...]\` directives were executed bef
           };
         }
       } else if (ticketTool.type === "search") {
-        const query = request.params.arguments?.query;
-        if (!query || query.length < 3) {
+        const parsedArgs = parseSearchArgs(request.params.arguments);
+        if (!parsedArgs) {
           return {
             content: [
               {
@@ -857,6 +844,7 @@ _Reminder: Ensure all embedded \`[RUN_PROMPT ...]\` directives were executed bef
             isError: true
           };
         }
+        const { query } = parsedArgs;
         try {
           const result = await convexClient.query(
             "mcp_tickets:searchMcpTickets",
@@ -906,8 +894,8 @@ ${formattedList}`
           };
         }
       } else if (ticketTool.type === "get") {
-        const ticketSlug = request.params.arguments?.ticketSlug;
-        if (!ticketSlug) {
+        const parsedArgs = parseGetArgs(request.params.arguments);
+        if (!parsedArgs) {
           return {
             content: [
               {
@@ -918,6 +906,7 @@ ${formattedList}`
             isError: true
           };
         }
+        const { ticketSlug } = parsedArgs;
         try {
           const result = await convexClient.query(
             "mcp_tickets:getMcpTicket",
@@ -937,7 +926,7 @@ ${formattedList}`
               ]
             };
           }
-          if ("accessDenied" in result && result.accessDenied) {
+          if (isAccessDenied(result)) {
             return {
               content: [
                 {
@@ -948,20 +937,21 @@ ${formattedList}`
               isError: true
             };
           }
-          const statusBadge = result.status.toUpperCase();
-          const startedInfo = result.startedAt ? `
-Started: ${new Date(result.startedAt).toISOString()}` : "";
-          const closedInfo = result.closedAt ? `
-Closed: ${new Date(result.closedAt).toISOString()}` : "";
-          const assignedInfo = result.assignedTo ? `
-Assigned to: ${result.assignedTo}` : "\nUnassigned";
+          const getResult = result;
+          const statusBadge = getResult.status.toUpperCase();
+          const startedInfo = getResult.startedAt ? `
+Started: ${new Date(getResult.startedAt).toISOString()}` : "";
+          const closedInfo = getResult.closedAt ? `
+Closed: ${new Date(getResult.closedAt).toISOString()}` : "";
+          const assignedInfo = getResult.assignedTo ? `
+Assigned to: ${getResult.assignedTo}` : "\nUnassigned";
           return {
             content: [
               {
                 type: "text",
-                text: `# Ticket: ${result.slug} [${statusBadge}]${startedInfo}${closedInfo}${assignedInfo}
+                text: `# Ticket: ${getResult.slug} [${statusBadge}]${startedInfo}${closedInfo}${assignedInfo}
 
-${result.content}
+${getResult.content}
 
 ---
 _Read-only inspection. Use tickets_work to start working on this ticket._`
@@ -1047,30 +1037,44 @@ ${sections.join("\n\n")}`
           };
         }
       } else if (ticketTool.type === "update") {
-        const ticketSlug = request.params.arguments?.ticketSlug;
-        const content = request.params.arguments?.content;
-        if (!ticketSlug) {
-          return {
-            content: [
-              {
-                type: "text",
-                text: `Error: Missing ticketSlug parameter. Provide a ticket number (e.g., "102") or full slug.`
-              }
-            ],
-            isError: true
-          };
-        }
-        if (!content) {
+        const parsedArgs = parseUpdateArgs(request.params.arguments);
+        if (!parsedArgs) {
+          const args = request.params.arguments;
+          const hasTicketSlug = typeof args?.ticketSlug === "string" && args.ticketSlug;
+          const hasContent = typeof args?.content === "string" && args.content;
+          if (!hasTicketSlug) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: `Error: Missing ticketSlug parameter. Provide a ticket number (e.g., "102") or full slug.`
+                }
+              ],
+              isError: true
+            };
+          }
+          if (!hasContent) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: `Error: Missing content parameter. Provide the update content to append to the ticket.`
+                }
+              ],
+              isError: true
+            };
+          }
           return {
             content: [
               {
                 type: "text",
-                text: `Error: Missing content parameter. Provide the update content to append to the ticket.`
+                text: `Error: Missing required parameters.`
               }
             ],
             isError: true
           };
         }
+        const { ticketSlug, content } = parsedArgs;
         try {
           const result = await convexClient.mutation(
             "mcp_tickets:updateMcpTicket",
@@ -1143,23 +1147,13 @@ _Ticket content has been appended with your update._`
   return new Promise(() => {
   });
 }
-async function validateApiKey(client, apiKey) {
-  try {
-    const result = await client.query("apiKeys:validateApiKey", { key: apiKey });
-    if (result) {
-      return { valid: true, userId: result.userId };
-    }
-    return { valid: false, error: "Invalid API key" };
-  } catch (error) {
-    return {
-      valid: false,
-      error: error instanceof Error ? error.message : "Unknown error"
-    };
-  }
-}
 async function validateProjectToken(client, token) {
   try {
-    const result = await client.query("project_tokens:validateProjectToken", { token });
+    const typedClient = client;
+    const result = await typedClient.query(
+      "project_tokens:validateProjectToken",
+      { token }
+    );
     if (result && result.valid) {
       return {
         valid: true,
@@ -1178,87 +1172,30 @@ async function validateProjectToken(client, token) {
     };
   }
 }
-async function fetchAccountScopedPromptMetadata(client, apiKey) {
-  try {
-    const metadata = await client.query("mcp_prompts:getAccountScopedPromptMetadata", {
-      apiKey
-    });
-    return metadata;
-  } catch (error) {
-    throw new Error(
-      `Failed to fetch account-scoped prompt metadata: ${error instanceof Error ? error.message : "Unknown error"}`
-    );
-  }
-}
-async function fetchMcpProjects(client, apiKey) {
-  try {
-    const projects = await client.query("mcp_prompts:getMcpProjects", {
-      apiKey
-    });
-    return projects;
-  } catch (error) {
-    throw new Error(
-      `Failed to fetch projects: ${error instanceof Error ? error.message : "Unknown error"}`
-    );
-  }
-}
 
 // src/index.ts
 async function main() {
   try {
     const argv = minimist(process.argv.slice(2));
     const isDev = argv.dev === true;
-    const projectsArg = argv.projects || argv.p;
-    let selectedProjects = [];
-    if (projectsArg) {
-      if (Array.isArray(projectsArg)) {
-        selectedProjects = projectsArg.flatMap((p) => String(p).split(","));
-      } else {
-        selectedProjects = String(projectsArg).split(",");
-      }
-      selectedProjects = selectedProjects.map((s) => s.trim()).filter(Boolean);
-    }
-    const apiKey = process.env.PPM_API_KEY || process.env.THEPROMPTEDITOR_API_KEY;
     const projectToken = process.env.PPM_PROJECT_TOKEN;
-    const ppmAgent = process.env.PPM_AGENT;
-    if (!apiKey && !projectToken) {
+    if (!projectToken) {
       console.error(
-        "[MCP] ERROR: Missing authentication. Provide either PPM_API_KEY or PPM_PROJECT_TOKEN"
+        "[MCP] ERROR: Missing authentication. Set PPM_PROJECT_TOKEN environment variable."
       );
       console.error(
-        "[MCP] Options:"
+        "[MCP] Example:"
       );
-      console.error("[MCP]   export PPM_API_KEY=your_api_key_here        # Full access to all projects");
-      console.error("[MCP]   export PPM_PROJECT_TOKEN=ppt_...            # Scoped access to one project (tickets only)");
+      console.error("[MCP]   export PPM_PROJECT_TOKEN=wst_...    # Get from project settings");
       process.exit(1);
     }
-    if (apiKey) {
-      console.error("[MCP] Auth mode: API Key (full access)");
-      if (projectToken) {
-        console.error("[MCP] Note: PPM_PROJECT_TOKEN ignored when PPM_API_KEY is set");
-      }
-      if (ppmAgent) {
-        console.error(`[MCP] Agent identity: ${ppmAgent}`);
-      }
-    } else {
-      console.error("[MCP] Auth mode: Project Token (scoped access, tickets only)");
-      if (ppmAgent) {
-        console.error("[MCP] Note: PPM_AGENT ignored when using PPM_PROJECT_TOKEN directly");
-      }
-    }
+    console.error("[MCP] Auth mode: Project Token");
     const convexClient = createConvexClient(isDev);
     const convexUrl = isDev ? "https://hallowed-shrimp-344.convex.cloud" : "https://trustworthy-squirrel-735.convex.cloud";
     const config = {
-      apiKey: apiKey || void 0,
-      // Use undefined if not set (not empty string)
-      projectToken: apiKey ? void 0 : projectToken,
-      // Only use token if no API key
+      projectToken,
       isDev,
-      convexUrl,
-      selectedProjects,
-      // Project slugs to filter (empty = all projects)
-      agentName: apiKey && ppmAgent ? ppmAgent : void 0
-      // Only use agent name with API key auth
+      convexUrl
     };
     await startServer(config, convexClient);
     console.error("[MCP] WARNING: startServer promise resolved unexpectedly!");