@rigstate/mcp 0.4.2

package/src/lib/supabase.ts

@@ -0,0 +1,120 @@
+/**
+ * Rigstate MCP Server - Supabase Client
+ * 
+ * Creates a Supabase client for MCP server operations.
+ * Uses the RIGSTATE_API_KEY to authenticate and determine the user context.
+ * 
+ * Required Environment Variables:
+ * - RIGSTATE_API_KEY: Your API key from https://rigstate.dev/settings/api-keys
+ * 
+ * Optional Environment Variables (defaults to production Rigstate):
+ * - RIGSTATE_SUPABASE_URL: Override Supabase URL
+ * - RIGSTATE_SUPABASE_ANON_KEY: Override Supabase anon key
+ */
+
+import { createClient as createSupabaseClient, SupabaseClient } from '@supabase/supabase-js';
+import { createHash } from 'crypto';
+
+// Production Rigstate configuration
+const PRODUCTION_SUPABASE_URL = 'https://gseblsxnfppsxbmtzcfj.supabase.co';
+const PRODUCTION_SUPABASE_ANON_KEY = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImdzZWJsc3huZnBwc3hibXR6Y2ZqIiwicm9sZSI6ImFub24iLCJpYXQiOjE3MzYxODIxNjgsImV4cCI6MjA1MTc1ODE2OH0.bltFf6_gNH-p3jH8lRY8dCRK6fmgxO8Hjp7UGx8xSxY';
+const PRODUCTION_SUPABASE_SERVICE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || '';
+
+// Environment configuration
+// Priority: Explicit MCP env > Next.js env > Production defaults
+const SUPABASE_URL =
+    process.env.RIGSTATE_SUPABASE_URL ||
+    process.env.NEXT_PUBLIC_SUPABASE_URL ||
+    PRODUCTION_SUPABASE_URL;
+
+const SUPABASE_ANON_KEY =
+    process.env.RIGSTATE_SUPABASE_ANON_KEY ||
+    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY ||
+    PRODUCTION_SUPABASE_ANON_KEY;
+
+const SUPABASE_SERVICE_KEY =
+    process.env.RIGSTATE_SUPABASE_SERVICE_KEY ||
+    process.env.SUPABASE_SERVICE_ROLE_KEY ||
+    PRODUCTION_SUPABASE_SERVICE_KEY;
+
+
+export interface AuthContext {
+    userId: string;
+    apiKeyId: string;
+    supabase: SupabaseClient;
+}
+
+/**
+ * Validates the RIGSTATE_API_KEY and returns the authenticated user context.
+ * 
+ * CRITICAL: API keys are stored as SHA-256 hashes in the database.
+ * We must hash the incoming key before lookup.
+ */
+export async function authenticateApiKey(apiKey: string): Promise<{
+    success: boolean;
+    error?: string;
+    context?: AuthContext;
+}> {
+    if (!apiKey) {
+        return { success: false, error: 'RIGSTATE_API_KEY is required' };
+    }
+
+    if (!apiKey.startsWith('sk_rigstate_')) {
+        return { success: false, error: 'Invalid API key format. Expected sk_rigstate_...' };
+    }
+
+    if (!SUPABASE_URL || !SUPABASE_ANON_KEY) {
+        return {
+            success: false,
+            error: 'Supabase configuration missing. Set RIGSTATE_SUPABASE_URL and RIGSTATE_SUPABASE_ANON_KEY.'
+        };
+    }
+
+    // Hash the API key with SHA-256 (same as web app)
+    const hashedKey = createHash('sha256').update(apiKey).digest('hex');
+
+    // Use service key if available to bypass RLS, otherwise anon key
+    const clientKey = SUPABASE_SERVICE_KEY || SUPABASE_ANON_KEY;
+    const supabase = createSupabaseClient(SUPABASE_URL, clientKey);
+
+    // Look up the API key by HASH (not plain text!)
+    const { data: keyData, error: keyError } = await supabase
+        .from('api_keys')
+        .select('id, user_id, project_id, organization_id, scope')
+        .eq('key_hash', hashedKey)
+        .single();
+
+    if (keyError || !keyData) {
+        return { success: false, error: 'Invalid or revoked API key' };
+    }
+
+    // Update last_used_at timestamp (fire and forget)
+    supabase
+        .from('api_keys')
+        .update({ last_used_at: new Date().toISOString() })
+        .eq('id', keyData.id)
+        .then();
+
+    // Create a user-scoped client for subsequent operations
+    const userSupabase = createSupabaseClient(SUPABASE_URL, SUPABASE_ANON_KEY);
+
+    return {
+        success: true,
+        context: {
+            userId: keyData.user_id,
+            apiKeyId: keyData.id,
+            supabase: userSupabase
+        }
+    };
+}
+
+/**
+ * Creates a Supabase client using environment variables.
+ * For use after authentication has been established.
+ */
+export function createClient(): SupabaseClient {
+    if (!SUPABASE_URL || !SUPABASE_ANON_KEY) {
+        throw new Error('Supabase configuration missing. Set RIGSTATE_SUPABASE_URL and RIGSTATE_SUPABASE_ANON_KEY.');
+    }
+    return createSupabaseClient(SUPABASE_URL, SUPABASE_ANON_KEY);
+}

package/src/lib/tool-registry.ts

@@ -0,0 +1,134 @@
+import { z } from 'zod';
+import { SupabaseClient } from '@supabase/supabase-js';
+import { Tool } from '@modelcontextprotocol/sdk/types.js';
+
+/**
+ * Context provided to every tool execution.
+ * Contains authentication and database access.
+ */
+export interface ToolContext {
+    supabase: SupabaseClient;
+    userId: string;
+}
+
+/**
+ * A generic definition of a Tool.
+ * T corresponds to the Zod schema for input validation.
+ */
+export interface ToolDefinition<T extends z.ZodType> {
+    /** The unique name of the tool (e.g., 'list_features') */
+    name: string;
+    /** A helpful description for the AI */
+    description: string;
+    /** The Zod schema for input validation */
+    schema: T;
+    /** The function that executes the tool logic */
+    handler: (args: z.infer<T>, context: ToolContext) => Promise<{ content: Array<{ type: string; text: string }> }>;
+}
+
+/**
+ * The central registry for all MCP tools.
+ * Handles registration, listing, and execution.
+ */
+class ToolRegistry {
+    private tools: Map<string, ToolDefinition<any>> = new Map();
+
+    /**
+     * Registers a tool logic with the system.
+     */
+    register<T extends z.ZodType>(tool: ToolDefinition<T>) {
+        if (this.tools.has(tool.name)) {
+            console.warn(`Tool '${tool.name}' is already registered. Overwriting.`);
+        }
+        this.tools.set(tool.name, tool);
+    }
+
+    /**
+     * Returns the list of tools formatted for the MCP 'ListTools' request.
+     * Converts Zod schemas to JSON Schemas implicitly via manual type mapping or libraries.
+     * For now, we manually map 'inputSchema' as 'object' in the index.ts, 
+     * but here we prepare the definitions.
+     */
+    getTools(): Tool[] {
+        return Array.from(this.tools.values()).map(tool => {
+            // Very basic Zod -> JSON Schema mapping. 
+            // In a real robust system, use 'zod-to-json-schema'.
+            // Here we rely on the tool definer to keep it simple or we expand later.
+            // For now, we assume standard object schema.
+
+            // To avoid complex zod-to-json-schema dependency issues for now,
+            // we will construct a basic JSON schema representation 
+            // from the Zod shape if possible, or expect the tool to provide it?
+            // Let's rely on zod-to-json-schema if installed, or do a simple conversion.
+            // Actually, let's keep it simple: We just return the Tool interface required by MCP SDK.
+
+            // Hack for MVP: We assume the top level is always an object with properties.
+            // We can improve this reflection later.
+
+            return {
+                name: tool.name,
+                description: tool.description,
+                inputSchema: this.zodToJsonSchema(tool.schema)
+            };
+        });
+    }
+
+    /**
+     * Executes a tool by name.
+     * Validates input against schema before execution.
+     */
+    async callTool(name: string, args: any, context: ToolContext) {
+        const tool = this.tools.get(name);
+        if (!tool) {
+            throw new Error(`Tool '${name}' not found.`);
+        }
+
+        const parseResult = tool.schema.safeParse(args);
+        if (!parseResult.success) {
+            throw new Error(`Invalid arguments for tool '${name}': ${parseResult.error.message}`);
+        }
+
+        return await tool.handler(parseResult.data, context);
+    }
+
+    /**
+     * Basic helper to convert Zod Object to JSON Schema.
+     * Note: This is a simplified version. For complex types, use 'zod-to-json-schema'.
+     */
+    private zodToJsonSchema(schema: z.ZodType): any {
+        if (schema instanceof z.ZodObject) {
+            const shape = schema.shape;
+            const properties: Record<string, any> = {};
+            const required: string[] = [];
+
+            for (const key in shape) {
+                const field = shape[key];
+                // Accessing description if available in Zod (requires extended Zod or casting)
+                // Basic type mapping:
+                let type = 'string';
+                let description = field.description; // Leverages Zod's .describe()
+
+                if (field instanceof z.ZodNumber) type = 'number';
+                if (field instanceof z.ZodBoolean) type = 'boolean';
+                if (field instanceof z.ZodArray) type = 'array';
+
+                // Determine if optional
+                if (!field.isOptional()) {
+                    required.push(key);
+                }
+
+                properties[key] = { type, description };
+            }
+
+            return {
+                type: 'object',
+                properties,
+                required
+            };
+        }
+        // Fallback or other types
+        return { type: 'object', properties: {} };
+    }
+}
+
+export const registry = new ToolRegistry();

package/src/lib/types.ts

@@ -0,0 +1,415 @@
+/**
+ * Rigstate MCP Server - Types
+ * 
+ * Shared type definitions for the MCP server tools.
+ */
+
+import { z } from 'zod';
+
+// =============================================================================
+// PROJECT CONTEXT TYPES
+// =============================================================================
+
+export interface ProjectInfo {
+    id: string;
+    name: string;
+    description: string | null;
+    projectType: string | null;
+    createdAt: string;
+    lastIndexedAt: string | null;
+}
+
+export interface TechStackInfo {
+    framework: string | null;
+    orm: string | null;
+    database: string | null;
+    keyLibraries: string[];
+    topFolders: string[];
+}
+
+export interface ProjectContextResponse {
+    project: ProjectInfo;
+    techStack: TechStackInfo;
+    summary: string;
+}
+
+// =============================================================================
+// BRAIN/MEMORY TYPES
+// =============================================================================
+
+export interface MemoryRecord {
+    id: string;
+    content: string;
+    category: string;
+    tags: string[];
+    similarity?: number;
+    netVotes?: number;
+    createdAt: string;
+}
+
+export interface BrainQueryResponse {
+    query: string;
+    memories: MemoryRecord[];
+    formatted: string;
+}
+
+// =============================================================================
+// COUNCIL/DECISIONS TYPES
+// =============================================================================
+
+export interface CouncilSession {
+    id: string;
+    projectId: string;
+    recruitedAgents: string[];
+    feedbackSummary: Array<{
+        agentName: string;
+        emoji: string;
+        critiques: string[];
+        approved: boolean;
+    }>;
+    durationMs: number | null;
+    sprintsCount: number | null;
+    tasksCount: number | null;
+    createdAt: string;
+}
+
+export interface RoadmapStep {
+    id: string;
+    stepNumber: number;
+    title: string;
+    status: string;
+    sprintFocus: string | null;
+}
+
+export interface DecisionsResponse {
+    sessions: CouncilSession[];
+    activeRoadmapStep: RoadmapStep | null;
+    summary: string;
+}
+
+// =============================================================================
+// ZOD SCHEMAS FOR TOOL INPUTS
+// =============================================================================
+
+export const QueryBrainInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    query: z.string().min(1, 'Query is required'),
+    limit: z.number().min(1).max(20).optional().default(8),
+    threshold: z.number().min(0).max(1).optional().default(0.5)
+});
+
+export const GetProjectContextInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID')
+});
+
+export const GetLatestDecisionsInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    limit: z.number().min(1).max(10).optional().default(5)
+});
+
+// =============================================================================
+// WRITE OPERATION SCHEMAS
+// =============================================================================
+
+export const SaveDecisionInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    title: z.string().min(1, 'Title is required').max(200, 'Title too long'),
+    decision: z.string().min(1, 'Decision content is required'),
+    rationale: z.string().optional(),
+    category: z.enum(['decision', 'architecture', 'constraint', 'tech_stack', 'design_rule']).optional().default('decision'),
+    tags: z.array(z.string()).optional().default([])
+});
+
+export const SubmitIdeaInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    title: z.string().min(1, 'Title is required').max(200, 'Title too long'),
+    description: z.string().min(1, 'Description is required'),
+    category: z.enum(['feature', 'improvement', 'experiment', 'pivot']).optional().default('feature'),
+    tags: z.array(z.string()).optional().default([])
+});
+
+export const UpdateRoadmapInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    chunkId: z.string().uuid('Invalid chunk ID').optional(),
+    title: z.string().optional(),
+    status: z.enum(['LOCKED', 'ACTIVE', 'COMPLETED'])
+});
+
+export const RunArchitectureAuditInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    filePath: z.string().min(1, 'File path is required'),
+    content: z.string().min(1, 'Content is required')
+});
+
+export const ListRoadmapTasksInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID')
+});
+
+
+
+// =============================================================================
+// TEACHER MODE SCHEMAS
+// =============================================================================
+
+export const RefineLogicInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    originalReasoning: z.string().min(1, 'Original reasoning is required'),
+    userCorrection: z.string().min(1, 'User correction is required'),
+    scope: z.enum(['project', 'global']).optional().default('project')
+});
+
+export const GetLearnedInstructionsInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID').optional()
+});
+
+// =============================================================================
+// RESPONSE TYPES
+// =============================================================================
+
+export interface SaveDecisionResponse {
+    success: boolean;
+    memoryId: string;
+    message: string;
+}
+
+export interface SubmitIdeaResponse {
+    success: boolean;
+    ideaId: string;
+    message: string;
+}
+
+export interface UpdateRoadmapResponse {
+    success: boolean;
+    chunkId: string;
+    previousStatus: string;
+    newStatus: string;
+    message: string;
+}
+
+export interface AuditViolation {
+    type: string;
+    severity: 'LOW' | 'MEDIUM' | 'HIGH';
+    title: string;
+    description: string;
+    lineNumber?: number;
+    recommendation: string;
+}
+
+export interface ArchitectureAuditResponse {
+    passed: boolean;
+    score: number;
+    violations: AuditViolation[];
+    summary: string;
+}
+
+export type QueryBrainInput = z.infer<typeof QueryBrainInputSchema>;
+export type GetProjectContextInput = z.infer<typeof GetProjectContextInputSchema>;
+export type GetLatestDecisionsInput = z.infer<typeof GetLatestDecisionsInputSchema>;
+export type SaveDecisionInput = z.infer<typeof SaveDecisionInputSchema>;
+export type SubmitIdeaInput = z.infer<typeof SubmitIdeaInputSchema>;
+export type UpdateRoadmapInput = z.infer<typeof UpdateRoadmapInputSchema>;
+export type RunArchitectureAuditInput = z.infer<typeof RunArchitectureAuditInputSchema>;
+export type ListRoadmapTasksInput = z.infer<typeof ListRoadmapTasksInputSchema>;
+
+
+export interface ListRoadmapTasksResponse {
+    tasks: Array<{
+        id: string;
+        title: string;
+        priority: string;
+        status: string;
+        step_number?: number;
+    }>;
+    formatted: string;
+}
+
+
+export const CheckAgentBridgeInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    action: z.enum(['check', 'update', 'submit_for_review']).optional().default('check'),
+    bridgeId: z.string().uuid('Invalid bridge ID').optional(),
+    status: z.enum(['PENDING', 'NEEDS_REVIEW', 'AWAITING_APPROVAL', 'APPROVED', 'REJECTED', 'EXECUTING', 'COMPLETED', 'FAILED']).optional(),
+    summary: z.string().optional(),
+    execution_summary: z.string().optional(),
+    proposal: z.string().optional()
+});
+
+export const CheckRulesSyncInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    currentRulesContent: z.string().optional() // Provide content to check, or tool tries to read file
+});
+
+export type CheckAgentBridgeInput = z.infer<typeof CheckAgentBridgeInputSchema>;
+
+export interface AgentBridgeTask {
+    id: string;
+    project_id: string;
+    task_id: string;
+    status: string;
+    summary: string | null;
+    execution_summary: string | null;
+    proposal: string | null;
+    created_at: string;
+    completed_at: string | null;
+    task_title?: string;
+    task_description?: string;
+    task_content?: string;
+}
+
+export interface CheckAgentBridgeResponse {
+    success: boolean;
+    task?: AgentBridgeTask;
+    message: string;
+}
+
+export interface CheckRulesSyncResponse {
+    synced: boolean;
+    message: string;
+    shouldTriggerSync: boolean;
+    missingBlock?: boolean;
+    offlineMode?: boolean;
+}
+
+export interface RoadmapChunk {
+    id: string;
+    project_id: string;
+    title: string;
+    description: string | null;
+    status: string;
+    priority: string;
+    step_number: number;
+    prompt_content?: string;
+}
+
+// =============================================================================
+// PENDING TASKS SCHEMAS (get_pending_tasks & update_task_status)
+// =============================================================================
+
+export const GetPendingTasksInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID')
+});
+
+export const UpdateTaskStatusInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    taskId: z.string().uuid('Invalid task ID'),
+    status: z.enum(['EXECUTING', 'COMPLETED', 'FAILED']),
+    executionSummary: z.string().optional()
+});
+
+export type GetPendingTasksInput = z.infer<typeof GetPendingTasksInputSchema>;
+export type UpdateTaskStatusInput = z.infer<typeof UpdateTaskStatusInputSchema>;
+
+export const GetNextRoadmapStepInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    currentStepId: z.string().uuid('Invalid step ID').optional()
+});
+
+export const GenerateProfessionalPDFInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    reportType: z.enum(['SYSTEM_MANIFEST', 'INVESTOR_REPORT'])
+});
+
+export const ArchaeologicalScanInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    gitLog: z.string().describe('Git log output in format: hash:X\\ndate:X\\nauthor:X\\nmessage\\n---COMMIT---\\n...'),
+    fileTree: z.array(z.string()).describe('Array of file/directory paths in the repository')
+});
+
+export const ImportGhostFeaturesInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    features: z.array(z.object({
+        id: z.string(),
+        title: z.string(),
+        description: z.string(),
+        status: z.literal('COMPLETED'),
+        source: z.enum(['git', 'filesystem', 'combined']),
+        evidence: z.array(z.string()),
+        estimatedCompletionDate: z.string(),
+        priority: z.number()
+    }))
+});
+
+// =============================================================================
+// STRUCTURAL SHIELD (EINAR & SVEN)
+// =============================================================================
+
+export const AnalyzeDependencyGraphInputSchema = z.object({
+    path: z.string().min(1, 'Path is required').default('src')
+});
+
+export const AuditRlsStatusInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID').optional()
+});
+
+export type AnalyzeDependencyGraphInput = z.infer<typeof AnalyzeDependencyGraphInputSchema>;
+export type AuditRlsStatusInput = z.infer<typeof AuditRlsStatusInputSchema>;
+
+// =============================================================================
+// INTELLIGENCE CORE (MAJA & ASTRID)
+// =============================================================================
+
+export const QueryProjectBrainInputSchema = QueryBrainInputSchema; // Reuse existing structure
+
+export const FetchPackageHealthInputSchema = z.object({
+    packageName: z.string().min(1, 'Package name is required')
+});
+
+export type QueryProjectBrainInput = z.infer<typeof QueryProjectBrainInputSchema>;
+export type FetchPackageHealthInput = z.infer<typeof FetchPackageHealthInputSchema>;
+
+// =============================================================================
+// ACTIVE MEMORY & PLANNING (MAJA & KINE)
+// =============================================================================
+
+export const SaveToProjectBrainInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    title: z.string().min(1, 'Title is required'),
+    content: z.string().min(1, 'Content is required'),
+    category: z.enum(['DECISION', 'ARCHITECTURE', 'NOTE', 'LESSON_LEARNED']).default('NOTE'),
+    tags: z.array(z.string()).optional().default([])
+});
+
+export const UpdateRoadmapStatusInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    chunkId: z.string().uuid('Invalid chunk ID'),
+    status: z.enum(['TODO', 'IN_PROGRESS', 'COMPLETED'])
+});
+
+export const AddRoadmapChunkInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID'),
+    title: z.string().min(1, 'Title is required'),
+    description: z.string().optional(),
+    featureId: z.string().optional(),
+    priority: z.enum(['LOW', 'MEDIUM', 'HIGH']).default('MEDIUM')
+});
+
+export type SaveToProjectBrainInput = z.infer<typeof SaveToProjectBrainInputSchema>;
+export type UpdateRoadmapStatusInput = z.infer<typeof UpdateRoadmapStatusInputSchema>;
+export type AddRoadmapChunkInput = z.infer<typeof AddRoadmapChunkInputSchema>;
+
+// =============================================================================
+// UI/UX & RESEARCH (LINUS & ASTRID)
+// =============================================================================
+
+export const AnalyzeUiComponentInputSchema = z.object({
+    filePath: z.string().describe('Absolute path to the component file (.tsx, .css)')
+});
+
+export const ApplyDesignSystemInputSchema = z.object({
+    filePath: z.string().describe('Absolute path to the file to fix')
+});
+
+export const FetchUiLibraryDocsInputSchema = z.object({
+    componentName: z.string().describe('Name of the component (e.g. "button", "card")'),
+    library: z.enum(['shadcn', 'lucide']).default('shadcn')
+});
+
+export type AnalyzeUiComponentInput = z.infer<typeof AnalyzeUiComponentInputSchema>;
+export type ApplyDesignSystemInput = z.infer<typeof ApplyDesignSystemInputSchema>;
+export type FetchUiLibraryDocsInput = z.infer<typeof FetchUiLibraryDocsInputSchema>;
+
+export const GenerateCursorRulesInputSchema = z.object({
+    projectId: z.string().uuid('Invalid project ID')
+});
+
+export type GenerateCursorRulesInput = z.infer<typeof GenerateCursorRulesInputSchema>;

package/src/lib/utils.ts

@@ -0,0 +1,10 @@
+
+/**
+ * MCP Utilities
+ */
+
+export function extractFirstSentence(text: string): string {
+    if (!text) return '';
+    const match = text.match(/^[^.!?]*[.!?]/);
+    return match ? match[0].trim() : text.slice(0, 100) + '...';
+}