@rigstate/mcp 0.7.6 → 0.7.8

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rigstate/mcp",
-    "version": "0.7.6",
+    "version": "0.7.8",
     "description": "Rigstate MCP Server - Model Context Protocol for AI Editors",
     "type": "module",
     "main": "./dist/index.js",

package/src/lib/project-context-utils.ts

@@ -1,4 +1,4 @@
-import { ProjectContextResponse, TechStackInfo } from '../lib/types.js';
+import { TechStackInfo } from '../lib/types.js';
 
 export async function buildProjectSummary(
     project: any,
@@ -8,14 +8,15 @@ export async function buildProjectSummary(
     agentTasks: any[],
     roadmapItems: any[],
     stackDef: any,
-    supabase: any
+    supabase: any,
+    userId: string
 ): Promise<string> {
     const summaryParts: string[] = [];
 
     summaryParts.push(`Project Type: ${project.project_type?.toUpperCase() || 'UNKNOWN'}`);
 
     // Active Mission Parameters
-    if (stackDef) {
+    if (stackDef || activeTask || nextTask) {
         summaryParts.push('\n=== ACTIVE MISSION PARAMETERS ===');
         if (activeTask) {
             summaryParts.push(`⚠️  CURRENT OBJECTIVE: T-${activeTask.step_number}: ${activeTask.title}`);
@@ -44,17 +45,23 @@ export async function buildProjectSummary(
                 summaryParts.push(`   Tags: ${activeTask.tags.join(', ')}`);
             }
 
-            // Enhanced Feature Context
+            // Enhanced Feature Context (Secure)
             if (activeTask.feature_id) {
-                const { data: feature } = await supabase
-                    .from('project_features')
-                    .select('name, description')
-                    .eq('id', activeTask.feature_id)
-                    .single();
-
-                if (feature) {
-                    summaryParts.push(`\n   Parent Feature: ${feature.name}`);
-                    summaryParts.push(`   Feature Vision: ${feature.description}`);
+                try {
+                    const { data: dbFeatures } = await supabase
+                        .rpc('get_project_features_secure', {
+                            p_project_id: project.id,
+                            p_user_id: userId
+                        });
+
+                    const feature = dbFeatures?.find((f: any) => f.id === activeTask.feature_id);
+
+                    if (feature) {
+                        summaryParts.push(`\n   Parent Feature: ${feature.name}`);
+                        summaryParts.push(`   Feature Vision: ${feature.description}`);
+                    }
+                } catch (e) {
+                    console.warn('Feature context fetch failed', e);
                 }
             }
 
@@ -80,13 +87,15 @@ export async function buildProjectSummary(
         }
 
         summaryParts.push('\n=== CURRENT STACK ===');
-        if (stackDef.frontend) summaryParts.push(`Frontend: ${stackDef.frontend.framework} (${stackDef.frontend.language})`);
-        if (stackDef.backend) summaryParts.push(`Backend: ${stackDef.backend.service} (${stackDef.backend.database})`);
-        if (stackDef.styling) summaryParts.push(`Styling: ${stackDef.styling.framework} ${stackDef.styling.library || ''}`);
-        if (stackDef.hosting) summaryParts.push(`Infrastructure: ${stackDef.hosting.provider}`);
-    } else {
-        if (techStack.framework) summaryParts.push(`Framework: ${techStack.framework}`);
-        if (techStack.orm) summaryParts.push(`ORM: ${techStack.orm}`);
+        if (stackDef) {
+            if (stackDef.frontend) summaryParts.push(`Frontend: ${stackDef.frontend.framework} (${stackDef.frontend.language})`);
+            if (stackDef.backend) summaryParts.push(`Backend: ${stackDef.backend.service} (${stackDef.backend.database})`);
+            if (stackDef.styling) summaryParts.push(`Styling: ${stackDef.styling.framework} ${stackDef.styling.library || ''}`);
+            if (stackDef.hosting) summaryParts.push(`Infrastructure: ${stackDef.hosting.provider}`);
+        } else {
+            if (techStack.framework) summaryParts.push(`Framework: ${techStack.framework}`);
+            if (techStack.orm) summaryParts.push(`ORM: ${techStack.orm}`);
+        }
     }
 
     if (project.description) {
@@ -103,8 +112,8 @@ export async function buildProjectSummary(
 
         if (spec.featureList && Array.isArray(spec.featureList)) {
             summaryParts.push('\nKey Features & Nuances:');
-            spec.featureList.filter((f: any) => f.priority === 'MVP').forEach((f: any) => {
-                summaryParts.push(`- ${f.name}: ${f.description}`);
+            spec.featureList.filter((f: any) => f.priority === 'MVP' || f.priority === 'HIGH').slice(0, 10).forEach((f: any) => {
+                summaryParts.push(`- ${f.name}: ${f.description?.substring(0, 200)}`);
             });
         }
     }
@@ -124,7 +133,7 @@ export async function buildProjectSummary(
         summaryParts.push('\nLatest AI Executions:');
         agentTasks.forEach((t: any) => {
             const time = t.completed_at ? new Date(t.completed_at).toLocaleString() : 'Recently';
-            summaryParts.push(`- [${time}] ${t.roadmap_title || 'Task'}: ${t.execution_summary || 'Completed'}`);
+            summaryParts.push(`- [${time}] ${t.roadmap_title || 'Task'}: ${t.execution_summary?.substring(0, 100) || 'Completed'}`);
         });
     }
 

package/src/tools/get-project-context.ts

@@ -50,52 +50,54 @@ export async function getProjectContext(
     userId: string,
     projectId: string
 ): Promise<ProjectContextResponse> {
-    // Define RPC response type
-    interface ProjectContextRow {
-        id: string;
-        name: string;
-        description: string;
-        project_type: string;
-        created_at: string;
-        last_indexed_at: string;
-        detected_stack: any;
-        repository_tree: any;
-        architectural_dna: any;
-        functional_spec: any;
-    }
-
-    // Fetch project securely via RPC (bypasses RLS with strict checks)
-    const { data: rawData, error: projectError } = await supabase
-        .rpc('get_project_context_secure', {
-            p_project_id: projectId,
-            p_user_id: userId
-        })
-        .single();
+    // 1. Try secure RPC first
+    let projectRow: any = null;
+    let projectError: any = null;
 
-    const projectRow = rawData as ProjectContextRow;
-
-    if (projectError || !projectRow) {
-        console.error('Project fetch failed:', projectError);
-        throw new Error('Project not found or access denied');
+    try {
+        const { data, error } = await supabase
+            .rpc('get_project_context_secure', {
+                p_project_id: projectId,
+                p_user_id: userId
+            })
+            .single();
+
+        if (data && !error) {
+            projectRow = data;
+        } else {
+            projectError = error;
+        }
+    } catch (e) {
+        projectError = e;
     }
 
-    // Map RPC result to tool structure
-    const project = {
-        id: projectRow.id,
-        name: projectRow.name,
-        description: projectRow.description,
-        project_type: projectRow.project_type,
-        created_at: projectRow.created_at,
-        last_indexed_at: projectRow.last_indexed_at,
-        detected_stack: projectRow.detected_stack,
-        repository_tree: projectRow.repository_tree,
-        functional_spec: projectRow.functional_spec
-    };
+    // 2. Fallback to direct table query if RPC failed (Policies were updated to allow members)
+    if (!projectRow) {
+        console.error(`RPC get_project_context_secure failed for ${projectId}, falling back to direct query. Error:`, projectError);
+        const { data, error } = await supabase
+            .from('projects')
+            .select(`
+                id, name, description, project_type, created_at, last_indexed_at, detected_stack, repository_tree, functional_spec,
+                architectural_dna(stack_definition)
+            `)
+            .eq('id', projectId)
+            .single();
+
+        if (data) {
+            projectRow = {
+                ...data,
+                architectural_dna: Array.isArray(data.architectural_dna) ? data.architectural_dna[0] : data.architectural_dna
+            };
+        } else {
+            console.error('Project fetch failed completely:', error);
+            throw new Error(`Project ${projectId} not found or access denied. (User: ${userId})`);
+        }
+    }
 
-    // DNA is now directly available
-    const stackDef = (projectRow.architectural_dna as any)?.stack_definition;
+    const project = projectRow;
+    const stackDef = projectRow.architectural_dna?.stack_definition;
 
-    // Continuity Loop: Fetch Active & Next Tasks via secure RPC
+    // 3. Continuity Loop: Fetch Active & Next Tasks
     const { data: allChunks } = await supabase
         .rpc('get_roadmap_chunks_secure', {
             p_project_id: projectId,
@@ -103,14 +105,12 @@ export async function getProjectContext(
         });
 
     const tasks = (allChunks || []) as any[];
-
-    // In-memory filtering to match original logic
     const activeTask = tasks.find(t => ['IN_PROGRESS', 'ACTIVE'].includes(t.status));
     const nextTask = tasks
         .filter(t => ['PENDING', 'LOCKED'].includes(t.status))
         .sort((a, b) => a.step_number - b.step_number)[0];
 
-    // Fetch Digest Data via secure RPC
+    // 4. Fetch Digest Data
     const { data: agentTasks } = await supabase
         .rpc('get_agent_bridge_secure', {
             p_project_id: projectId,
@@ -122,7 +122,7 @@ export async function getProjectContext(
         .sort((a, b) => new Date(b.updated_at || b.created_at).getTime() - new Date(a.updated_at || a.created_at).getTime())
         .slice(0, 2);
 
-    // Parse tech stack from detected_stack
+    // 5. Build tech stack info
     const techStack: TechStackInfo = {
         framework: null,
         orm: null,
@@ -132,31 +132,21 @@ export async function getProjectContext(
     };
 
     if (project.detected_stack) {
-        const stack = project.detected_stack as {
-            dependencies?: Record<string, string>;
-            devDependencies?: Record<string, string>;
-        };
+        const stack = project.detected_stack as any;
         const allDeps = { ...stack.dependencies, ...stack.devDependencies };
 
         for (const [name, version] of Object.entries(allDeps)) {
             const cleanVersion = (version as string).replace(/[\^~]/g, '');
-
-            // Categorize
             if (name === 'next' || name === 'react' || name === 'vue' || name === 'angular' || name === 'svelte') {
-                if (!techStack.framework) {
-                    techStack.framework = `${KEY_LIBS[name] || name} ${cleanVersion}`;
-                }
+                if (!techStack.framework) techStack.framework = `${KEY_LIBS[name] || name} ${cleanVersion}`;
             } else if (name.includes('prisma') || name.includes('drizzle') || name.includes('typeorm')) {
-                if (!techStack.orm) {
-                    techStack.orm = `${KEY_LIBS[name] || name} ${cleanVersion}`;
-                }
+                if (!techStack.orm) techStack.orm = `${KEY_LIBS[name] || name} ${cleanVersion}`;
             } else if (KEY_LIBS[name]) {
                 techStack.keyLibraries.push(`${KEY_LIBS[name]} ${cleanVersion}`);
             }
         }
     }
 
-    // Extract top folders from repository tree
     if (project.repository_tree && Array.isArray(project.repository_tree)) {
         techStack.topFolders = [...new Set(
             project.repository_tree
@@ -165,7 +155,6 @@ export async function getProjectContext(
         )].slice(0, 10) as string[];
     }
 
-    // Build summary via utility
     const summary = await buildProjectSummary(
         project,
         techStack,
@@ -174,7 +163,8 @@ export async function getProjectContext(
         agentTasks || [],
         roadmapItems || [],
         stackDef,
-        supabase
+        supabase,
+        userId
     );
 
     const response: ProjectContextResponse = {
@@ -190,18 +180,14 @@ export async function getProjectContext(
         summary
     };
 
-    // Phase 8.5.5: Inject Global Context (Curator)
+    // Inject Global Context
     try {
         const curatorContext = await injectGlobalContext(supabase, userId, {
             frameworks: techStack.framework ? [techStack.framework] : [],
             libraries: techStack.keyLibraries
         });
-
-        if (curatorContext) {
-            response.summary += `\n\n=== CURATOR INTELLIGENCE ===${curatorContext}`;
-        }
+        if (curatorContext) response.summary += `\n\n=== CURATOR INTELLIGENCE ===${curatorContext}`;
     } catch (e: any) {
-        console.error('Failed to inject global context:', e);
         response.summary += `\n\n(Curator Context Unavailable: ${e.message})`;
     }
 

package/src/tools/list-features.ts

@@ -17,53 +17,45 @@ export const listFeaturesTool: ToolDefinition<typeof InputSchema> = {
 Useful for understanding the strategic context and major milestones.`,
     schema: InputSchema,
     handler: async ({ projectId }, { supabase, userId }) => {
-        // 1. Verify project access
-        const { data: hasAccess, error: accessError } = await supabase
-            .rpc('check_project_access_secure', {
-                p_project_id: projectId,
-                p_user_id: userId
-            });
+        // 1. Fetch project and features
+        let projectRow: any = null;
+        let dbFeatures: any[] = [];
+        let source = 'DB';
 
-        if (accessError || !hasAccess) {
-            throw new Error('Project not found or access denied');
+        try {
+            // Try secure gateway for project
+            const { data } = await supabase
+                .rpc('get_project_context_secure', { p_project_id: projectId, p_user_id: userId })
+                .single() as any;
+            projectRow = data;
+        } catch (e) {
+            // Fallback
+            const { data } = await supabase.from('projects').select('id, functional_spec').eq('id', projectId).single();
+            projectRow = data;
         }
 
-        // 2. Fetch project details
-        const { data: project, error: projectError } = await supabase
-            .from('projects')
-            .select('id, functional_spec')
-            .eq('id', projectId)
-            .single();
+        if (!projectRow) throw new Error(`Project ${projectId} not found or access denied.`);
 
-        if (projectError || !project) {
-            throw new Error('Project details not found');
+        try {
+            // Try secure gateway for features
+            const { data } = await supabase.rpc('get_project_features_secure', { p_project_id: projectId, p_user_id: userId });
+            dbFeatures = data || [];
+        } catch (e) {
+            // Fallback to direct table
+            const { data } = await supabase.from('project_features').select('id, name, description, status').eq('project_id', projectId);
+            dbFeatures = data || [];
         }
 
-        // 2. Primary Strategy: Fetch from 'project_features'
-        const { data: dbFeatures, error: dbError } = await supabase
-            .from('project_features')
-            .select('id, name, description, status')
-            .eq('project_id', projectId)
-            .neq('status', 'shadow') // Exclude shadow features by default unless asked
-            .order('created_at', { ascending: false });
-
         let featuresList: any[] = [];
-        let source = 'DB';
-
-        if (!dbError && dbFeatures && dbFeatures.length > 0) {
-            featuresList = dbFeatures.map(f => ({
-                ...f,
-                title: f.name // Map back to title specifically for uniform handling below
-            }));
+        if (dbFeatures && dbFeatures.length > 0) {
+            featuresList = dbFeatures.map((f: any) => ({ ...f, title: f.name }));
         } else {
-            // 3. Fallback Strategy: Extract from 'functional_spec'
+            // Fallback to spec
             source = 'FALLBACK_SPEC';
-            // Log warning (In a real system, use a structured logger. Here we console.error to stderr)
-            console.error(`[WARN] Project ${projectId}: 'project_features' empty or missing. Falling back to 'functional_spec'.`);
-
-            const spec = project.functional_spec as any;
-            if (spec && typeof spec === 'object' && Array.isArray(spec.features)) {
-                featuresList = spec.features.map((f: any) => ({
+            const spec = projectRow.functional_spec as any;
+            const features = spec?.featureList || spec?.features;
+            if (Array.isArray(features)) {
+                featuresList = features.map((f: any) => ({
                     id: 'legacy',
                     title: f.name || f.title,
                     description: f.description,
@@ -72,22 +64,15 @@ Useful for understanding the strategic context and major milestones.`,
             }
         }
 
-        // 4. Format Response
         if (featuresList.length === 0) {
-            return { content: [{ type: 'text', text: 'No active features found (checked DB and Spec).' }] };
+            return { content: [{ type: 'text', text: 'No active features found.' }] };
         }
 
         const formatted = `=== PROJECT FEATURES (Source: ${source}) ===\n` +
-            featuresList.map(f => {
-                return `- ${f.title} [${f.status}]`;
-            }).join('\n');
+            featuresList.map(f => `- ${f.title} [${f.status}]`).join('\n');
 
-        return {
-            content: [{ type: 'text', text: formatted }]
-        };
+        return { content: [{ type: 'text', text: formatted }] };
     }
 };
 
 registry.register(listFeaturesTool);
-
-

package/src/tools/planning-tools.ts

@@ -60,25 +60,56 @@ export async function saveToProjectBrain(
 
     const fullContent = `# ${title}\n\n${content}`;
 
-    const { data, error } = await supabase
-        .from('project_memories')
-        .insert({
-            project_id: projectId,
-            content: fullContent,
-            category: category.toLowerCase(),
-            tags: tags,
-            importance: (category === 'DECISION' || category === 'ARCHITECTURE') ? 9 : 5,
-            is_active: true,
-            source_type: 'chat_manual'
-        })
-        .select('id')
-        .single();
+    let memoryId: string | null = null;
+    let saveError: any = null;
+
+    try {
+        // 1. Try secure RPC
+        const { data, error } = await supabase.rpc('save_project_memory_secure', {
+            p_project_id: projectId,
+            p_user_id: userId,
+            p_content: fullContent,
+            p_category: category.toLowerCase(),
+            p_tags: tags || [],
+            p_importance: (category === 'DECISION' || category === 'ARCHITECTURE') ? 9 : 5
+        });
+        if (data && !error) {
+            memoryId = data;
+        } else {
+            saveError = error;
+        }
+    } catch (e) {
+        saveError = e;
+    }
 
-    if (error) throw new Error(`Failed to save memory: ${error.message}`);
+    // 2. Fallback to direct insert (RLS was updated to allow members)
+    if (!memoryId) {
+        console.warn('RPC save_project_memory_secure failed, trying direct insert. Error:', saveError);
+        const { data, error } = await supabase
+            .from('project_memories')
+            .insert({
+                project_id: projectId,
+                content: fullContent,
+                category: category.toLowerCase(),
+                tags: tags || [],
+                importance: (category === 'DECISION' || category === 'ARCHITECTURE') ? 9 : 5,
+                is_active: true,
+                source_type: 'chat_manual'
+            })
+            .select('id')
+            .single();
+
+        if (data) {
+            memoryId = data.id;
+        } else {
+            console.error('Direct insert failed:', error);
+            throw new Error(`Failed to save memory: ${error?.message || 'Unknown error'}`);
+        }
+    }
 
     return {
         success: true,
-        memoryId: data.id,
+        memoryId: memoryId,
         message: `✅ Saved [${category}] "${title}" to Project Brain.`
     };
 }