@saiteja1123/mcp-server 1.1.6 → 1.1.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saiteja1123/mcp-server",
-  "version": "1.1.6",
+  "version": "1.1.8",
   "private": false,
   "license": "MIT",
   "description": "Vibesecur MCP security scanner — universal account config, multi-project CRU, folder locking, cross-IDE",

package/src/project-bindings.mjs

@@ -79,6 +79,24 @@ export function invalidateProjectsListCache() {
   projectsCache = { at: 0, projects: [] };
 }
 
+export function invalidateBindingCache(projectRoot) {
+  if (projectRoot) {
+    bindingCache.delete(cacheKey(projectRoot));
+    return;
+  }
+  bindingCache.clear();
+}
+
+async function isBindingStillValid(entry, apiBase) {
+  if (!entry?.installToken || !entry?.lockedRootHash) return false;
+  const verify = await verifyInstallBinding({
+    installToken: entry.installToken,
+    lockedRootHash: entry.lockedRootHash,
+    apiBase,
+  });
+  return !!(verify.ok && verify.json?.success);
+}
+
 async function writeServerLock(projectRoot, { installToken, lockedRootHash, account = 'server' }) {
   await createLock({
     rootPath: projectRoot,
@@ -167,7 +185,13 @@ export async function resolveBindingForScanPath({
     const root = path.resolve(entry.projectRoot);
     return target.startsWith(root + path.sep) || target === root;
   });
-  if (cached) return { ok: true, ...cached, resolvedRoot: target };
+  if (cached) {
+    if (await isBindingStillValid(cached, apiBase)) {
+      return { ok: true, ...cached, resolvedRoot: target };
+    }
+    bindingCache.delete(cacheKey(cached.projectRoot));
+    invalidateProjectsListCache();
+  }
 
   let projects = [];
   try {

package/src/server.js

@@ -16,6 +16,7 @@ import {
 } from './repo-scan.mjs';
 import { diagnosticLock } from './lock.mjs';
 import { persistRepoScanLog } from './api-scan.mjs';
+import { ensureProjectBinding } from './project-bindings.mjs';
 import { createBindingGuard, formatGuardError } from './security/pathGuard.js';
 import { registerLocalScanTool } from './tools/localScan.js';
 import { registerScanFileTool } from './tools/scanFile.js';
@@ -80,21 +81,41 @@ function humanRepoSummary(meta, agg) {
 }
 
 async function syncRepoScanToDashboard({ aggregate, findings, projectRoot, guard }) {
-  const installToken = guard.installToken || INSTALL_TOKEN;
-  const lockedRootHash = guard.lockedRootHash || guard.lock?.lockedRootHash || guard.lock?.rootHash;
+  let installToken = guard.installToken || INSTALL_TOKEN;
+  let lockedRootHash = guard.lockedRootHash || guard.lock?.lockedRootHash || guard.lock?.rootHash;
   if (!installToken || !lockedRootHash) {
     return { ok: false, reason: 'missing install token or locked root hash' };
   }
   try {
-    const logRes = await persistRepoScanLog({
+    let logRes = await persistRepoScanLog({
       aggregate,
       findings,
       projectRoot,
       installToken,
       lockedRootHash,
     });
+    const revoked = logRes?.json?.code === 'MCP_INSTALL_LOCK_INVALID'
+      || /revoked or invalid/i.test(String(logRes?.json?.error || logRes?.reason || ''));
+    if (!logRes?.ok && revoked && AUTH_TOKEN && projectRoot) {
+      const rebound = await ensureProjectBinding({
+        lockedRootPath: projectRoot,
+        authToken: AUTH_TOKEN,
+        apiBase: API_BASE,
+      });
+      if (rebound.ok) {
+        installToken = rebound.installToken;
+        lockedRootHash = rebound.lockedRootHash;
+        logRes = await persistRepoScanLog({
+          aggregate,
+          findings,
+          projectRoot,
+          installToken,
+          lockedRootHash,
+        });
+      }
+    }
     if (logRes?.ok && logRes.json?.success) {
-      return { ok: true, scanId: logRes.json?.data?.scanId || null };
+      return { ok: true, scanId: logRes.json?.data?.scanId || null, rebound: revoked && !!installToken };
     }
     return {
       ok: false,
@@ -482,22 +503,39 @@ server.registerTool('buildClaudePrompt', {
 });
 
 async function main() {
-  if (!INSTALL_TOKEN || !BOUND_ROOT) {
+  if (UNIVERSAL_MODE) {
+    if (!AUTH_TOKEN) {
+      throw new Error(
+        'Universal MCP mode requires VIBESECUR_AUTH_TOKEN. ' +
+        'Generate config from the dashboard (MCP page) or run: vibesecur-mcp init --mode=universal',
+      );
+    }
+    if (!API_BASE) {
+      throw new Error(
+        'Universal MCP mode requires VIBESECUR_API_BASE (e.g. http://localhost:4000 or https://vibesecur.onrender.com).',
+      );
+    }
+  } else if (!INSTALL_TOKEN || !BOUND_ROOT) {
     throw new Error(
-      'VIBESECUR_INSTALL_TOKEN and VIBESECUR_BOUND_ROOT are required. ' +
-      'Run "vibesecur-mcp bind <folder>" and update your MCP config env.',
+      'Missing MCP binding. Use universal mode (VIBESECUR_AUTH_TOKEN + VIBESECUR_API_BASE) or legacy bind ' +
+      '(VIBESECUR_INSTALL_TOKEN + VIBESECUR_BOUND_ROOT). Run "vibesecur-mcp init --mode=universal" for setup.',
     );
   }
-  const startupGuard = await guardPath(BOUND_ROOT);
-  if (!startupGuard.ok) {
-    throw new Error(`${startupGuard.code}: ${startupGuard.message}`);
+
+  if (!UNIVERSAL_MODE) {
+    const startupGuard = await guardPath(BOUND_ROOT);
+    if (!startupGuard.ok) {
+      throw new Error(`${startupGuard.code}: ${startupGuard.message}`);
+    }
   }
+
   const transport = new StdioServerTransport();
   await server.connect(transport);
   process.stderr.write(
     `[vibesecur] MCP server v${mcpPkg.version} started. ` +
-    `BoundRoot: ${BOUND_ROOT || 'unconfigured'}. ` +
-    `Lock: ${INSTALL_TOKEN ? 'set' : 'NOT SET'}.\n`,
+    `Mode: ${UNIVERSAL_MODE ? 'universal' : 'single-folder'}. ` +
+    `BoundRoot: ${BOUND_ROOT || (UNIVERSAL_MODE ? 'account-wide' : 'unconfigured')}. ` +
+    `Lock: ${INSTALL_TOKEN || AUTH_TOKEN ? 'set' : 'NOT SET'}.\n`,
   );
 }