@systemdox/mcp-server 0.1.44 → 0.1.46

package/dist/tools/team-setup.js

@@ -0,0 +1,242 @@
+#!/usr/bin/env node
+
+// src/tools/team-setup.ts
+import { z } from "zod";
+import { existsSync as existsSync2 } from "fs";
+import { lstat as lstat2 } from "fs/promises";
+import { homedir as homedir2 } from "os";
+import { join as join2, resolve as resolve2 } from "path";
+
+// src/lib/skills.ts
+import { createHash } from "crypto";
+import { lstat, mkdir, readdir, readFile, rm, writeFile } from "fs/promises";
+import { existsSync } from "fs";
+import { homedir } from "os";
+import { dirname, join, relative, resolve, sep } from "path";
+var MANIFEST_FILE = ".systemdox-skill.json";
+var MAX_FILES = 100;
+var MAX_FILE_BYTES = 256 * 1024;
+var MAX_TOTAL_BYTES = 1024 * 1024;
+var SEGMENT_RE = /^[A-Za-z0-9._-]+$/;
+var SKIPPED = /* @__PURE__ */ new Set([MANIFEST_FILE, ".git", "node_modules", "__pycache__", ".DS_Store"]);
+function isValidPath(path) {
+  return path.length > 0 && path.length <= 512 && !path.startsWith("/") && path.split("/").every((s) => SEGMENT_RE.test(s) && s !== "." && s !== "..");
+}
+async function walk(root, { skipHidden }, dir = root, out = { files: [], links: [], hidden: [] }) {
+  for (const entry of await readdir(dir, { withFileTypes: true })) {
+    if (SKIPPED.has(entry.name) || entry.name.endsWith(".pyc")) continue;
+    const full = join(dir, entry.name);
+    const rel = relative(root, full).split(sep).join("/");
+    if (entry.isSymbolicLink()) out.links.push(rel);
+    else if (skipHidden && entry.name.startsWith(".")) out.hidden.push(rel);
+    else if (entry.isDirectory()) await walk(root, { skipHidden }, full, out);
+    else if (entry.isFile()) out.files.push(rel);
+  }
+  out.files.sort();
+  return out;
+}
+async function readTextFiles(root, paths, what) {
+  if (paths.length > MAX_FILES) {
+    throw new Error(`${root} holds ${paths.length} files: ${what} holds at most ${MAX_FILES}`);
+  }
+  const decoder = new TextDecoder("utf-8", { fatal: true });
+  const files = [];
+  let total = 0;
+  for (const path of paths) {
+    if (!isValidPath(path)) {
+      throw new Error(`${path}: file names may use letters, digits, ".", "_" and "-" only`);
+    }
+    const raw = await readFile(join(root, ...path.split("/")));
+    if (raw.includes(0)) throw new Error(`${path} is binary: ${what} holds text files only`);
+    if (raw.length > MAX_FILE_BYTES) {
+      throw new Error(`${path} is ${raw.length} bytes: a file holds at most ${MAX_FILE_BYTES}`);
+    }
+    total += raw.length;
+    if (total > MAX_TOTAL_BYTES) {
+      throw new Error(`the files pass ${MAX_TOTAL_BYTES} bytes at ${path}`);
+    }
+    let content;
+    try {
+      content = decoder.decode(raw);
+    } catch {
+      throw new Error(`${path} is not UTF-8 text`);
+    }
+    files.push({ path, content });
+  }
+  return files;
+}
+
+// src/lib/person-values.ts
+var W = "[\\p{L}\\p{N}_]";
+var D = "\\p{Nd}";
+var WORD_OR = (extra) => `[\\p{L}\\p{N}_${extra}]`;
+var PERSON_ID = "(?:con|ctc|usr)_[0-9A-Za-z]{10,40}";
+var PERSON_TOKEN = `\`${PERSON_ID}\`(?:[ \\t]*\\([^()\\n]*\\))?`;
+var BEFORE = `(?<!${WORD_OR("+.:/\\\\\\-")})(?<!${D}[ -])`;
+var AFTER = `(?!${WORD_OR(":/\\\\")}|\\.${D}|[ -]?${D}|-${W})`;
+var E164 = `${BEFORE}\\+${D}+(?:[ -]${D}+)*${AFTER}`;
+var NATIONAL = `${BEFORE}0${D}*(?:[ -]${D}+)*${AFTER}`;
+var ATEXT = "[A-Za-z0-9!#$%&'*+/=?^_{|}~\\-]";
+var EMAIL_RE = "(?<![A-Za-z0-9!#$%&*+/=?^_{|}~.@\\-])[A-Za-z0-9_]" + ATEXT + "*(?:\\." + ATEXT + "+)*@(?:[A-Za-z0-9](?:[A-Za-z0-9\\-]{0,61}[A-Za-z0-9])?\\.)+[A-Za-z]{2,63}(?![A-Za-z0-9\\-]|\\.[A-Za-z0-9])";
+var HOME_PREFIX = "(?:[A-Za-z]:\\\\+Users\\\\+|[A-Za-z]:/+Users/+|/Users/|/home/)";
+var HOME = `(?<!${WORD_OR(".~:/\\\\$}\\-")})${HOME_PREFIX}[^\\\\/\\s"'\`<>|:*?]+`;
+var KEY_PREFIX = `(?<!${W})(?:pweb_[a-z]+_key_|sk-ant-|sk_live_|rk_live_|github_pat_|gh[pousr]_|sntrys_|xox[baprs]-)[A-Za-z0-9_\\-]{4,}`;
+
+// src/lib/team-setup-types.ts
+var PARTS = ["hooks", "mcp", "agents", "commands", "instructions"];
+var PERSON_ID_RE = new RegExp(`^${PERSON_ID}$`);
+
+// src/tools/team-setup.ts
+var LAYOUT = {
+  hooks: { files: ["hooks/hooks.json"], folders: [{ dir: "scripts", md: false }], required: "hooks/hooks.json" },
+  mcp: { files: [".mcp.json"], folders: [], required: ".mcp.json" },
+  agents: { files: [], folders: [{ dir: "agents", md: true }] },
+  commands: { files: [], folders: [{ dir: "commands", md: true }] },
+  instructions: { files: ["CLAUDE.md"], folders: [], required: "CLAUDE.md" }
+};
+function expandHome(path) {
+  return path.replace(/^~(?=$|[\\/])/, homedir2());
+}
+function text(t) {
+  return { content: [{ type: "text", text: t }] };
+}
+async function isLink(path) {
+  try {
+    return (await lstat2(path)).isSymbolicLink();
+  } catch (e) {
+    if (e.code === "ENOENT") return false;
+    throw e;
+  }
+}
+async function readPartDirectory(part, directory) {
+  const root = resolve2(directory);
+  const layout = LAYOUT[part];
+  const paths = [];
+  const leftOut = [];
+  const links = [];
+  for (const path of layout.files) {
+    const segments = path.split("/");
+    let present = true;
+    for (let i = 1; i <= segments.length; i++) {
+      const rel = segments.slice(0, i).join("/");
+      if (await isLink(join2(root, ...segments.slice(0, i)))) {
+        links.push(rel);
+        present = false;
+        break;
+      }
+    }
+    if (present && existsSync2(join2(root, ...segments))) paths.push(path);
+  }
+  for (const { dir, md } of layout.folders) {
+    const full = join2(root, dir);
+    if (await isLink(full)) {
+      links.push(dir);
+      continue;
+    }
+    if (!existsSync2(full)) continue;
+    const walked = await walk(full, { skipHidden: true });
+    links.push(...walked.links.map((p) => `${dir}/${p}`));
+    leftOut.push(...walked.hidden.map((p) => `${dir}/${p}`));
+    for (const p of walked.files) {
+      if (md && !p.endsWith(".md")) leftOut.push(`${dir}/${p}`);
+      else paths.push(`${dir}/${p}`);
+    }
+  }
+  if (links.length) {
+    throw new Error(
+      `${links.join(", ")}: links are not followed; copy the file into the folder. Nothing was sent.`
+    );
+  }
+  if (layout.required && !paths.includes(layout.required)) {
+    throw new Error(`${root} has no ${layout.required}: the ${part} part needs it. Nothing was sent.`);
+  }
+  if (!paths.length) {
+    throw new Error(
+      `${root} has no ${layout.folders.map((f) => `${f.dir}/*.md`).join(" or ")}: nothing to publish for ${part}.`
+    );
+  }
+  return { files: await readTextFiles(root, paths.sort(), `the ${part} part`), leftOut };
+}
+function describePerson(id, person) {
+  const lines = [`**${person.label ?? "(no label)"}**, \`${id}\``];
+  if (person.mergedInto) {
+    lines.push(`\`${id}\` was merged into \`${person.mergedInto}\`: these are \`${person.mergedInto}\`'s details.`);
+  }
+  lines.push(`- Name: ${person.name ?? "(none held)"}`);
+  lines.push(`- Phone number: ${person.phone ?? "(none held)"}`);
+  lines.push(`- Email address: ${person.email ?? "(none held)"}`);
+  const token = `\`${person.mergedInto ?? id}\`${person.label ? ` (${person.label})` : ""}`;
+  lines.push(
+    "",
+    `These details are for this session only. Do not write them into a memory file, a note or a commit: a memory names this person by the identifier, as ${token}. A memory file that holds the details is offered for rewriting again at the next sync.`
+  );
+  return lines.join("\n");
+}
+function registerTeamSetupTools(server, apiClient, { localFiles }) {
+  const fileSchema = z.object({
+    path: z.string().describe(`Path inside the part's folder, forward slashes, e.g. "hooks/hooks.json"`),
+    content: z.string().describe("The file's full text, exactly as it is")
+  });
+  server.registerTool(
+    "publish_setup_part",
+    {
+      title: "Publish Setup Part",
+      description: "Publish one part of your team's Claude Code setup to SystemDox: `hooks` (hooks/hooks.json and the scripts/ it calls), `mcp` (.mcp.json), `agents` (agents/*.md), `commands` (commands/*.md) or `instructions` (CLAUDE.md). Every part but instructions makes a new version of the team plugin, which each member accepts at their next update. Publishing hooks, mcp, agents or commands needs the admin role. " + (localFiles ? "Pass `directory`: the server reads only the files the part accepts, byte for byte, and refuses a link, a binary file or a file too large before anything is sent. Never retype the files into `files` when the folder is on this computer." : "Pass every file of the part in `files`, exactly as it is."),
+      inputSchema: {
+        part: z.enum(PARTS).describe("Which part of the setup"),
+        ...localFiles ? {
+          directory: z.string().optional().describe(
+            "The folder on this computer: for hooks, the one holding hooks/hooks.json and scripts/; for mcp, the one holding .mcp.json; for instructions, the one holding CLAUDE.md; for agents or commands, the one holding agents/ or commands/"
+          )
+        } : {},
+        files: z.array(fileSchema).optional().describe(localFiles ? "Only when there is no folder to read" : "Every file of the part")
+      },
+      annotations: { readOnlyHint: false }
+    },
+    async (args) => {
+      let files;
+      let leftOut = [];
+      if (localFiles && args.directory) {
+        ({ files, leftOut } = await readPartDirectory(args.part, expandHome(args.directory)));
+      } else if (args.files?.length) {
+        files = args.files;
+      } else {
+        throw new Error(localFiles ? "Pass `directory` (or `files`)." : "Pass `files`.");
+      }
+      const { workspace } = await apiClient.getOwnTeamSetup();
+      const saved = await apiClient.publishPartVersion(workspace, args.part, files);
+      const lines = [`Published **${saved.part}** version ${saved.version}.`];
+      if (saved.part !== "instructions" && saved.pluginVersion !== void 0) {
+        lines.push(`Team plugin version ${saved.pluginVersion}; each member accepts it at their next update.`);
+      }
+      if (saved.replacedValues?.length) {
+        lines.push(
+          "Replaced by a reference to each member's own environment variable:",
+          ...saved.replacedValues.map((r) => `- ${r.server} ${r.field} ${r.name}: \${${r.name}}`)
+        );
+      }
+      if (leftOut.length) lines.push(`Left out (not part of ${args.part}): ${leftOut.join(", ")}`);
+      return text(lines.join("\n"));
+    }
+  );
+  server.registerTool(
+    "resolve_person",
+    {
+      title: "Resolve Person",
+      description: "Read back a person that a team memory names by identifier, written as `con_\u2026` (label), `ctc_\u2026` or `usr_\u2026`: their label, name, phone number and email address, from the vault that holds them. The details are for this session only: never write them into a memory file; the memory keeps the identifier. Writes nothing.",
+      inputSchema: {
+        id: z.string().regex(PERSON_ID_RE, "a con_, ctc_ or usr_ identifier, as written in the memory").describe("The identifier, e.g. con_01JC2Q8Y4M7T0X3K5N9P2R6S8V")
+      },
+      annotations: { readOnlyHint: true }
+    },
+    async (args) => {
+      const { workspace } = await apiClient.getOwnTeamSetup();
+      const person = await apiClient.resolvePerson(workspace, args.id);
+      return text(describePerson(args.id, person));
+    }
+  );
+}
+export {
+  readPartDirectory,
+  registerTeamSetupTools
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@systemdox/mcp-server",
-  "version": "0.1.44",
+  "version": "0.1.46",
   "mcpName": "io.github.puglieseweb/systemdox",
   "type": "module",
   "description": "Give AI coding agents your architecture context over MCP — checks, specs, ADRs, project rules, and docs from SystemDox, delivered at write time",