@rigstate/mcp 0.4.2 → 0.4.4

package/src/server/factory.ts

@@ -0,0 +1,78 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { ListToolsRequestSchema, ListResourcesRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { SERVER_NAME, SERVER_VERSION } from './types.js';
+import { registry } from '../lib/tool-registry.js';
+import { getProjectMorals } from '../resources/project-morals.js';
+
+// Import tool modules to trigger registration
+import '../tools/curator-tools.js';
+import '../tools/teacher-mode.js';
+import '../tools/get-project-context.js';
+import '../tools/query-brain.js';
+import '../tools/get-latest-decisions.js';
+import '../tools/save-decision.js';
+import '../tools/submit-idea.js';
+import '../tools/update-roadmap.js';
+import '../tools/run-architecture-audit.js';
+import '../tools/sync-ide-rules.ts';
+import '../tools/list-features.js';
+import '../tools/list-roadmap-tasks.js';
+import '../tools/get-next-roadmap-step.js';
+import '../tools/check-rules-sync.js';
+import '../tools/audit-integrity-gate.js';
+import '../tools/complete-roadmap-task.js';
+import '../tools/planning-tools.js';
+import '../tools/security-tools.js';
+import '../tools/arch-tools.js';
+
+export const TOOLS = [
+    {
+        name: 'write_to_file',
+        description: 'Guardian Lock: Blocks file writes if RIGSTATE_MODE is SUPERVISOR.',
+        inputSchema: { type: 'object', properties: {}, additionalProperties: true }
+    },
+    {
+        name: 'replace_file_content',
+        description: 'Guardian Lock: Blocks file edits if RIGSTATE_MODE is SUPERVISOR.',
+        inputSchema: { type: 'object', properties: {}, additionalProperties: true }
+    },
+    {
+        name: 'run_command',
+        description: 'Guardian Lock: Blocks commands if RIGSTATE_MODE is SUPERVISOR.',
+        inputSchema: { type: 'object', properties: {}, additionalProperties: true }
+    },
+    {
+        name: 'get_agent_status',
+        description: `Checks the status of the internal Frank Watcher agent.`,
+        inputSchema: { type: 'object', properties: {} }
+    }
+];
+
+
+export const RESOURCES = [
+    {
+        uri: 'rigstate://project_morals',
+        name: 'Project Morals & Sovereignty',
+        mimeType: 'text/markdown',
+        description: 'The core ethical and architectural DNA of the project.'
+    }
+];
+
+export function createMcpServer() {
+    const server = new Server(
+        { name: SERVER_NAME, version: SERVER_VERSION },
+        { capabilities: { tools: {}, resources: {} } }
+    );
+
+    // List Tools
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: [...TOOLS, ...registry.getTools()]
+    }));
+
+    // List Resources
+    server.setRequestHandler(ListResourcesRequestSchema, async () => ({
+        resources: RESOURCES
+    }));
+
+    return server;
+}

package/src/server/telemetry.ts

@@ -0,0 +1,122 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+import { WatcherState } from './types.js';
+import { generateProfessionalPdf } from '../tools/generate-professional-pdf.js';
+
+export let watcherState: WatcherState = {
+    isRunning: false,
+    lastCheck: null,
+    tasksFound: 0,
+    projectId: null
+};
+
+export async function startFrankWatcher(supabase: SupabaseClient, userId: string) {
+    if (watcherState.isRunning) return;
+    watcherState.isRunning = true;
+    console.error(`🤖 Frank Watcher started for user ${userId}`);
+
+    const checkTasks = async () => {
+        try {
+            watcherState.lastCheck = new Date().toISOString();
+
+            const { data: tasks, error } = await supabase
+                .from('agent_bridge')
+                .select('*')
+                .in('status', ['PENDING', 'APPROVED'])
+                .order('created_at', { ascending: true })
+                .limit(1);
+
+            if (error) return;
+
+            if (tasks && tasks.length > 0) {
+                const task = tasks[0];
+                watcherState.tasksFound++;
+
+                // Heartbeat Logic
+                if (task.proposal?.startsWith('ping') || (task.task_id === null && !task.proposal?.startsWith('report'))) {
+                    console.error(`\n⚡ HEARTBEAT: Frank received REAL-TIME PING for project ${task.project_id}. Response: PONG`);
+                    await supabase.from('agent_bridge').update({
+                        status: 'COMPLETED',
+                        summary: 'Pong! Frank is active and listening.',
+                        updated_at: new Date().toISOString()
+                    }).eq('id', task.id);
+                    return;
+                }
+
+                // Report Generation Logic
+                if (task.proposal?.startsWith('report')) {
+                    const parts = task.proposal.split(':');
+                    const signalType = parts[1];
+                    const reportType = signalType === 'MANIFEST' ? 'SYSTEM_MANIFEST' : 'INVESTOR_REPORT';
+                    console.error(`\n📄 Frank is generating ${reportType} report...`);
+
+                    try {
+                        const result = await generateProfessionalPdf(supabase, userId, task.project_id, reportType);
+                        await supabase.from('agent_bridge').update({
+                            status: 'COMPLETED',
+                            summary: `Report generated: ${reportType}.`,
+                            proposal: JSON.stringify(result.data),
+                            updated_at: new Date().toISOString()
+                        }).eq('id', task.id);
+                    } catch (genError: any) {
+                        await supabase.from('agent_bridge').update({
+                            status: 'FAILED',
+                            summary: `Generation failed: ${genError.message}`,
+                            updated_at: new Date().toISOString()
+                        }).eq('id', task.id);
+                    }
+                    return;
+                }
+
+                // Execution Logic
+                if (task.status === 'APPROVED') {
+                    console.error(`\n🏗️  Worker: EXECUTING approved task: [${task.id}]`);
+                    await supabase.from('agent_bridge').update({ status: 'EXECUTING', updated_at: new Date().toISOString() }).eq('id', task.id);
+
+                    await new Promise(resolve => setTimeout(resolve, 2000));
+
+                    const taskTitle = (task.roadmap_chunks as any)?.title || 'manual objective';
+                    const technicalSummary = `Processed ${task.task_id || 'manual task'}. Applied architectural alignment.`;
+                    const humanSummary = `Mission Accomplished for "${taskTitle}". 🚀`;
+
+                    await supabase.from('mission_reports').insert({
+                        bridge_id: task.id,
+                        project_id: task.project_id,
+                        task_id: task.task_id,
+                        human_summary: humanSummary,
+                        technical_summary: technicalSummary
+                    });
+
+                    await supabase.from('agent_bridge').update({
+                        status: 'COMPLETED',
+                        summary: humanSummary,
+                        execution_summary: technicalSummary,
+                        updated_at: new Date().toISOString(),
+                        completed_at: new Date().toISOString()
+                    }).eq('id', task.id);
+
+                    if (task.task_id) {
+                        await supabase.from('roadmap_chunks').update({ status: 'COMPLETED', completed_at: new Date().toISOString() }).eq('id', task.task_id);
+                    }
+                    return;
+                }
+
+                // Proposal Analysis Logic
+                const taskTitle = (task.roadmap_chunks as any)?.title || '';
+                let proposal = `Frank (Auto-Mode) has analyzed "${taskTitle}". Ready to proceed.`;
+
+                await supabase.from('agent_bridge').update({
+                    status: 'AWAITING_APPROVAL',
+                    proposal,
+                    updated_at: new Date().toISOString()
+                }).eq('id', task.id);
+            }
+        } catch (e) { }
+    };
+
+    const channel = supabase.channel('frank-watcher').on('postgres_changes', { event: '*', schema: 'public', table: 'agent_bridge' }, (payload: any) => {
+        if (payload.new.status === 'PENDING' || payload.new.status === 'APPROVED') checkTasks();
+    }).subscribe();
+
+    setInterval(checkTasks, 5000);
+    checkTasks();
+}

package/src/server/types.ts

@@ -0,0 +1,21 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+
+export interface WatcherState {
+    isRunning: boolean;
+    lastCheck: string | null;
+    tasksFound: number;
+    projectId: string | null;
+}
+
+export interface McpServerConfig {
+    name: string;
+    version: string;
+}
+
+export const SERVER_NAME = 'rigstate-mcp';
+export const SERVER_VERSION = '0.5.0'; // Evolutionary Update
+
+export interface AuthContext {
+    supabase: SupabaseClient;
+    userId: string;
+}

package/src/tools/analyze-database-performance.ts

@@ -0,0 +1,157 @@
+
+import { SupabaseClient } from '@supabase/supabase-js';
+import fs from 'fs/promises';
+import path from 'path';
+
+export interface AnalyzeDatabasePerformanceInput {
+    projectId: string;
+    filePaths: string[];
+}
+
+interface PerformanceIssue {
+    type: 'MISSING_INDEX' | 'N_PLUS_ONE' | 'UNOPTIMIZED_FILTER' | 'DEAD_TABLE';
+    severity: 'HIGH' | 'MEDIUM' | 'LOW';
+    file: string;
+    line?: number;
+    description: string;
+    suggestion: string;
+    codeSnippet?: string;
+}
+
+interface TableMetadata {
+    table_name: string;
+    indexed_columns: string[];
+    foreign_keys: { column: string, target_table: string }[];
+}
+
+export async function analyzeDatabasePerformance(
+    supabase: SupabaseClient,
+    input: AnalyzeDatabasePerformanceInput
+): Promise<{ issues: PerformanceIssue[], summary: string }> {
+    const issues: PerformanceIssue[] = [];
+
+    // 1. Fetch Database Metadata
+    const { data: rawMetadata, error } = await supabase.rpc('get_table_metadata', {
+        p_project_id: input.projectId
+    });
+
+    if (error) {
+        throw new Error(`Failed to fetch database metadata: ${error.message}`);
+    }
+
+    const metadata: TableMetadata[] = rawMetadata.map((t: any) => ({
+        table_name: t.t_name || t.table_name,
+        indexed_columns: t.indexed_columns || [],
+        foreign_keys: t.foreign_keys || []
+    }));
+
+    // Map for quick lookup
+    const tableMap = new Map<string, TableMetadata>();
+    metadata.forEach(t => tableMap.set(t.table_name, t));
+
+    // 2. Analyze Code Files
+    for (const filePath of input.filePaths) {
+        try {
+            const content = await fs.readFile(filePath, 'utf-8');
+            const lines = content.split('\n');
+
+            // --- ANALYSIS PATTERNS ---
+
+            // A. Detect N+1 Danger Zones (Loops with Await)
+            // Regex: .map(async ... await ... from('...'))
+            // This is complex for regex, using simple line heuristics
+            // If line contains 'await supabase' AND is inside a .map() block? Hard to detect scope.
+            // Simplified: If we see `await supabase` inside a loop structure in the same snippet?
+            // Let's stick to "Single Line Heuristics" for MVP robustness.
+
+            // B. Detect Unindexed Filters
+            // Pattern: .eq('column', val) or .filter('column', ...)
+            // We need to know WHICH table is being queried.
+            // Look for `from('tableName')` then track subsequent `.eq('col')`?
+            // AST would be better, but regex state machine is feasible for simple chains.
+
+            let currentTable: string | null = null;
+
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+
+                // 1. Identify Table Context
+                const fromMatch = line.match(/\.from\(['"]([a-zA-Z0-9_]+)['"]\)/);
+                if (fromMatch) {
+                    currentTable = fromMatch[1];
+                }
+
+                // Reset table context on semicolon (end of chain) mostly
+                if (line.includes(';')) {
+                    currentTable = null; // Conservative reset
+                }
+
+                // 2. Check for Missing Indexes
+                if (currentTable) {
+                    const eqMatch = line.match(/\.(eq|match|not|gt|gte|lt|lte|like|ilike)\(['"]([a-zA-Z0-9_]+)['"]/);
+                    if (eqMatch) {
+                        const colName = eqMatch[2];
+                        const tableMeta = tableMap.get(currentTable);
+
+                        if (tableMeta) {
+                            // Check if column is indexed
+                            // Note: Primary keys are usually indexed automatically, but get_table_metadata might typically return explicit indexes.
+                            // We should check if it's 'id' (usually PK) or in indexed_columns.
+                            const isIndexed = tableMeta.indexed_columns.includes(colName) || colName === 'id';
+                            const isForeignKey = tableMeta.foreign_keys.some(fk => fk.column === colName);
+
+                            if (!isIndexed) {
+                                issues.push({
+                                    type: 'MISSING_INDEX',
+                                    severity: isForeignKey ? 'HIGH' : 'MEDIUM', // Unindexed Foreign Keys are deadly
+                                    file: filePath,
+                                    line: i + 1,
+                                    description: `Query filters on unindexed column '${colName}' in table '${currentTable}'.`,
+                                    suggestion: `Create an index for '${currentTable}(${colName})'.`,
+                                    codeSnippet: line.trim()
+                                });
+                            }
+                        }
+                    }
+                }
+
+                // 3. Check for N+1 (Crudely)
+                if (line.includes('await supabase') && (line.includes('.map(') || lines[i - 1]?.includes('.map('))) {
+                    issues.push({
+                        type: 'N_PLUS_ONE',
+                        severity: 'HIGH',
+                        file: filePath,
+                        line: i + 1,
+                        description: `Potential N+1 Query detected. Await inside loop/map.`,
+                        suggestion: `Use Promise.all() or .in() operator instead of looping queries.`,
+                        codeSnippet: line.trim()
+                    });
+                }
+            }
+
+        } catch (e) {
+            console.warn(`Skipping file ${filePath}: ${e}`);
+        }
+    }
+
+    // 3. Summary Report
+    const highSev = issues.filter(i => i.severity === 'HIGH').length;
+    const medSev = issues.filter(i => i.severity === 'MEDIUM').length;
+
+    let summary = `## 🔍 Performance Audit Report\n`;
+    summary += `**Scanned Files:** ${input.filePaths.length}\n`;
+    summary += `**Issues Found:** ${issues.length} (🔴 ${highSev} High, 🟡 ${medSev} Medium)\n\n`;
+
+    if (issues.length === 0) {
+        summary += `✅ **Clean Scan:** No obvious performance bottlenecks detected based on current schema constraints.`;
+    } else {
+        summary += `### 🚨 Critical Findings\n`;
+        issues.filter(i => i.severity === 'HIGH').forEach(issue => {
+            summary += `- **${issue.type}** in \`${path.basename(issue.file)}:${issue.line}\`\n`;
+            summary += `  - ${issue.description}\n`;
+            summary += `  - 💡 *Fix:* ${issue.suggestion}\n`;
+        });
+    }
+
+    return { issues, summary };
+}

package/src/tools/arch-tools.ts

@@ -1,6 +1,22 @@
 import { promises as fs } from 'fs';
 import * as path from 'path';
 import { AnalyzeDependencyGraphInput } from '../lib/types.js';
+import { registry } from '../lib/tool-registry.js';
+import { AnalyzeDependencyGraphInputSchema } from '../lib/schemas.js';
+
+// ============================================
+// Tool Registration
+// ============================================
+
+registry.register({
+    name: 'analyze_dependency_graph',
+    description: `Einar's Tool: Architecture Integrity Scanner. Scans the codebase for circular dependencies and structural violations.`,
+    schema: AnalyzeDependencyGraphInputSchema,
+    handler: async (args, context) => {
+        const result = await analyzeDependencyGraph(args);
+        return { content: [{ type: 'text', text: (result as any).summary || 'Scan complete' }] };
+    }
+});
 
 /**
  * Einar's Tool: Architecture Integrity Scanner

package/src/tools/audit-integrity-gate.ts

@@ -0,0 +1,166 @@
+
+import { SupabaseClient } from '@supabase/supabase-js';
+import { analyzeDatabasePerformance } from './analyze-database-performance.js';
+import { auditRlsStatus, auditSecurityIntegrity } from './security-tools.js';
+import { IntegrityGateResponse, IntegrityCheckResult, AuditIntegrityGateInput } from '../lib/types.js';
+import { registry } from '../lib/tool-registry.js';
+import { AuditIntegrityGateInputSchema } from '../lib/schemas.js';
+
+// ============================================
+// Tool Registration
+// ============================================
+
+registry.register({
+    name: 'audit_integrity_gate',
+    description: `Runs the full Integrity Gate (Security + Performance checks). 
+Can trigger a SOFT LOCK if critical issues are found.`,
+    schema: AuditIntegrityGateInputSchema,
+    handler: async (args, context) => {
+        const result = await runAuditIntegrityGate(context.supabase, args);
+        return { content: [{ type: 'text', text: result.summary }] };
+    }
+});
+
+export async function runAuditIntegrityGate(
+    supabase: SupabaseClient,
+    input: AuditIntegrityGateInput
+): Promise<IntegrityGateResponse> {
+    const checks: IntegrityCheckResult[] = [];
+    let isSoftLocked = false;
+
+    // 1. Run Guardian Security Audit (RLS)
+    try {
+        const rlsResult = await auditRlsStatus(supabase, { projectId: input.projectId });
+        const unsecuredTables = rlsResult.unsecuredTables || [];
+
+        if (unsecuredTables.length > 0) {
+            isSoftLocked = true;
+            checks.push({
+                check: 'SECURITY',
+                status: 'FAIL',
+                message: `Found ${unsecuredTables.length} tables without RLS enabled.`,
+                details: unsecuredTables
+            });
+        } else {
+            checks.push({
+                check: 'SECURITY',
+                status: 'PASS',
+                message: 'All tables have Row Level Security enabled.'
+            });
+        }
+    } catch (e: any) {
+        checks.push({
+            check: 'SECURITY',
+            status: 'WARN',
+            message: `Failed to execute RLS audit: ${e.message}`
+        });
+    }
+
+    // 2. Run Fortress Security Matrix (Phase 7)
+    if (input.filePaths && input.filePaths.length > 0) {
+        for (const path of input.filePaths) {
+            try {
+                // We need to read the file content here or pass it? 
+                // auditSecurityIntegrity requires 'content'. 
+                // But auditIntegrityGate only gets filePaths.
+                // WE NEED TO READ THE FILE. 
+                // Since this runs on the server, we can use fs. 
+                // BUT we need to be careful about imports in this environment.
+                // Ideally, auditSecurityIntegrity should accept a path and read it, 
+                // but currently it accepts { filePath, content }.
+
+                // Let's assume we can read via fs if we are in Node environment (which MCP is).
+                const fs = await import('fs/promises');
+                const content = await fs.readFile(path, 'utf-8');
+
+                const securityResult = await auditSecurityIntegrity(supabase, {
+                    projectId: input.projectId,
+                    filePath: path,
+                    content: content
+                });
+
+                if (!securityResult.passed) {
+                    isSoftLocked = true;
+                    checks.push({
+                        check: 'FORTRESS_MATRIX',
+                        status: 'FAIL',
+                        message: `Fortress Violations in ${path.split('/').pop()}`,
+                        details: securityResult.violations
+                    });
+                } else {
+                    checks.push({
+                        check: 'FORTRESS_MATRIX',
+                        status: 'PASS',
+                        message: `Fortress Secured: ${path.split('/').pop()}`
+                    });
+                }
+
+            } catch (e: any) {
+                checks.push({
+                    check: 'FORTRESS_MATRIX',
+                    status: 'WARN',
+                    message: `Failed to audit ${path}: ${e.message}`
+                });
+            }
+        }
+    }
+
+    // 3. Run Sindre Performance Audit (Indexes & N+1)
+    if (input.filePaths && input.filePaths.length > 0) {
+        try {
+            const perfResult = await analyzeDatabasePerformance(supabase, {
+                projectId: input.projectId,
+                filePaths: input.filePaths
+            });
+
+            const highSeverityIssues = perfResult.issues.filter(i => i.severity === 'HIGH');
+
+            if (highSeverityIssues.length > 0) {
+                isSoftLocked = true;
+                checks.push({
+                    check: 'PERFORMANCE',
+                    status: 'FAIL',
+                    message: `Found ${highSeverityIssues.length} Critical Performance Issues (N+1 or Missing Indexes).`,
+                    details: highSeverityIssues
+                });
+            } else if (perfResult.issues.length > 0) {
+                checks.push({
+                    check: 'PERFORMANCE',
+                    status: 'WARN',
+                    message: `Found ${perfResult.issues.length} non-critical performance hints.`,
+                    details: perfResult.issues
+                });
+            } else {
+                checks.push({
+                    check: 'PERFORMANCE',
+                    status: 'PASS',
+                    message: 'No performance bottlenecks detected in scanned files.'
+                });
+            }
+        } catch (e: any) {
+            checks.push({
+                check: 'PERFORMANCE',
+                status: 'WARN',
+                message: `Failed to execute Performance audit: ${e.message}`
+            });
+        }
+    } else {
+        checks.push({
+            check: 'PERFORMANCE',
+            status: 'WARN',
+            message: 'Skipped performance scan (no file paths provided).'
+        });
+    }
+
+    // 3. Construct Final Decision
+    const summary = isSoftLocked
+        ? `⛔ INTEGRITY GATE: SOFT LOCK ENGAGED. Critical issues found. Override required.`
+        : `✅ INTEGRITY GATE: PASSED. System is secure and optimized.`;
+
+    return {
+        passed: !isSoftLocked,
+        mode: isSoftLocked ? 'SOFT_LOCK' : 'OPEN',
+        checks,
+        summary
+    };
+}

package/src/tools/check-rules-sync.ts

@@ -1,6 +1,26 @@
 
 import { SupabaseClient } from '@supabase/supabase-js';
 import { CheckRulesSyncResponse } from '../lib/types.js';
+import { registry } from '../lib/tool-registry.js';
+import { CheckRulesSyncInputSchema } from '../lib/schemas.js';
+
+// ============================================
+// Tool Registration
+// ============================================
+
+registry.register({
+    name: 'check_rules_sync',
+    description: `Verifies if the IDE rules are present and belong to the correct project.`,
+    schema: CheckRulesSyncInputSchema,
+    handler: async (args, context) => {
+        const result = await checkRulesSync(
+            context.supabase,
+            args.projectId,
+            args.currentRulesContent
+        );
+        return { content: [{ type: 'text', text: result.message }] };
+    }
+});
 
 const RIGSTATE_START = "RIGSTATE_START";
 const RIGSTATE_END = "RIGSTATE_END";