@vibescope/mcp-server 0.0.1 → 0.1.0

package/src/cli.ts

@@ -10,20 +10,12 @@
  *   2 = Error (allow exit with warning)
  */
 
-import { createClient } from '@supabase/supabase-js';
-import { createHash } from 'crypto';
 import { execSync } from 'child_process';
-import { normalizeGitUrl } from './utils.js';
 
 // ============================================================================
 // Types
 // ============================================================================
 
-export interface AuthContext {
-	userId: string;
-	apiKeyId: string;
-}
-
 export interface VerificationResult {
 	status: 'compliant' | 'non_compliant' | 'no_session' | 'error';
 	reason: string;
@@ -41,24 +33,34 @@ export interface VerificationResult {
 	};
 }
 
-interface TaskInfo {
-	id: string;
-	title: string;
-	progress_percentage: number;
-}
-
 // ============================================================================
-// Configuration
+// Configuration (read at runtime for testability)
 // ============================================================================
 
-const SUPABASE_URL = process.env.SUPABASE_URL || process.env.PUBLIC_SUPABASE_URL;
-const SUPABASE_SERVICE_KEY = process.env.SUPABASE_SERVICE_KEY;
-const API_KEY = process.env.VIBESCOPE_API_KEY;
+function getApiKey(): string | undefined {
+	return process.env.VIBESCOPE_API_KEY;
+}
+
+function getApiUrl(): string {
+	return process.env.VIBESCOPE_API_URL || 'https://vibescope.dev';
+}
 
 // ============================================================================
 // Git URL Detection
 // ============================================================================
 
+export function normalizeGitUrl(url: string): string {
+	// Remove .git suffix
+	let normalized = url.replace(/\.git$/, '');
+	// Convert SSH to HTTPS format
+	if (normalized.startsWith('git@')) {
+		normalized = normalized
+			.replace(/^git@/, 'https://')
+			.replace(/:([^/])/, '/$1');
+	}
+	return normalized;
+}
+
 export function detectGitUrl(): string | null {
 	try {
 		const url = execSync('git config --get remote.origin.url', {
@@ -67,47 +69,12 @@ export function detectGitUrl(): string | null {
 			stdio: ['pipe', 'pipe', 'pipe'],
 		}).trim();
 
-		// Normalize: remove .git suffix, convert SSH to HTTPS format
 		return normalizeGitUrl(url);
 	} catch {
 		return null;
 	}
 }
 
-// ============================================================================
-// Authentication (reused from index.ts)
-// ============================================================================
-
-export function hashApiKey(key: string): string {
-	return createHash('sha256').update(key).digest('hex');
-}
-
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-export async function validateApiKey(
-	supabase: any,
-	apiKey: string
-): Promise<AuthContext | null> {
-	const keyHash = hashApiKey(apiKey);
-
-	const { data, error } = await supabase
-		.from('api_keys')
-		.select('id, user_id')
-		.eq('key_hash', keyHash)
-		.single();
-
-	if (error || !data) {
-		return null;
-	}
-
-	// Cast to expected shape since we're using untyped client
-	const row = data as { id: string; user_id: string };
-
-	return {
-		userId: row.user_id,
-		apiKeyId: row.id,
-	};
-}
-
 // ============================================================================
 // Verification Logic
 // ============================================================================
@@ -116,251 +83,41 @@ export async function verify(
 	gitUrl?: string,
 	projectId?: string
 ): Promise<VerificationResult> {
-	// Check environment
-	if (!SUPABASE_URL || !SUPABASE_SERVICE_KEY) {
-		return {
-			status: 'error',
-			reason: 'Missing SUPABASE_URL or SUPABASE_SERVICE_KEY environment variables',
-		};
-	}
-
-	if (!API_KEY) {
+	// Check environment (read at runtime for testability)
+	const apiKey = getApiKey();
+	if (!apiKey) {
 		return {
 			status: 'error',
 			reason: 'VIBESCOPE_API_KEY environment variable not set',
 		};
 	}
 
-	const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_KEY);
-
-	// Validate API key
-	const auth = await validateApiKey(supabase, API_KEY);
-	if (!auth) {
-		return {
-			status: 'error',
-			reason: 'Invalid VIBESCOPE_API_KEY',
-		};
-	}
-
 	// Auto-detect git URL if not provided
 	if (!gitUrl && !projectId) {
 		gitUrl = detectGitUrl() || undefined;
 	}
 
-	// Find project
-	let projectQuery = supabase
-		.from('projects')
-		.select('id, name, git_url')
-		.eq('user_id', auth.userId);
-
-	if (projectId) {
-		projectQuery = projectQuery.eq('id', projectId);
-	} else if (gitUrl) {
-		projectQuery = projectQuery.eq('git_url', gitUrl);
-	} else {
-		return {
-			status: 'no_session',
-			reason: 'Could not detect git URL and no project_id provided',
-			continuation_prompt:
-				'Could not detect which project you are working on. Please call start_work_session(git_url: "...") with your repository URL.',
-		};
-	}
-
-	const { data: project, error: projectError } = await projectQuery.single();
-
-	if (projectError || !project) {
-		// Project not found - this is OK, might be an untracked repo
-		return {
-			status: 'compliant',
-			reason: `No Vibescope project found for ${gitUrl || projectId}. Untracked repository - exit allowed.`,
-			details: {
-				session_started: false,
-				project_id: null,
-				project_name: null,
-				git_url: gitUrl || null,
-				in_progress_tasks: 0,
-				tasks_completed_this_session: 0,
-				progress_logs_this_session: 0,
-				blockers_logged_this_session: 0,
-				session_duration_minutes: null,
-			},
-		};
-	}
-
-	// Check for agent session
-	const { data: session } = await supabase
-		.from('agent_sessions')
-		.select('id, last_synced_at, created_at')
-		.eq('api_key_id', auth.apiKeyId)
-		.eq('project_id', project.id)
-		.single();
-
-	if (!session) {
-		return {
-			status: 'non_compliant',
-			reason: 'No Vibescope session started for this project',
-			continuation_prompt: `[VIBESCOPE ENFORCEMENT] You have not started a Vibescope work session.
-
-BEFORE you can exit, you MUST call:
-  start_work_session(git_url: "${project.git_url || project.id}")
-
-This registers your session and gives you project context.`,
-			details: {
-				session_started: false,
-				project_id: project.id,
-				project_name: project.name,
-				git_url: project.git_url,
-				in_progress_tasks: 0,
-				tasks_completed_this_session: 0,
-				progress_logs_this_session: 0,
-				blockers_logged_this_session: 0,
-				session_duration_minutes: null,
-			},
-		};
-	}
-
-	const sessionStartTime = new Date(session.created_at);
-	const lastSyncTime = new Date(session.last_synced_at);
-	const now = new Date();
-	const sessionDurationMinutes = Math.round(
-		(now.getTime() - sessionStartTime.getTime()) / 60000
-	);
-
-	// Grace period: if session is less than 1 minute, allow exit
-	if (sessionDurationMinutes < 1) {
-		return {
-			status: 'compliant',
-			reason: 'Very short session (< 1 minute) - exit allowed',
-			details: {
-				session_started: true,
-				project_id: project.id,
-				project_name: project.name,
-				git_url: project.git_url,
-				in_progress_tasks: 0,
-				tasks_completed_this_session: 0,
-				progress_logs_this_session: 0,
-				blockers_logged_this_session: 0,
-				session_duration_minutes: sessionDurationMinutes,
-			},
-		};
-	}
-
-	// Check for in-progress tasks
-	const { data: inProgressTasks } = await supabase
-		.from('tasks')
-		.select('id, title, progress_percentage')
-		.eq('project_id', project.id)
-		.eq('status', 'in_progress');
-
-	const inProgressCount = inProgressTasks?.length || 0;
-
-	if (inProgressCount > 0) {
-		const taskList = (inProgressTasks as TaskInfo[])
-			.map((t) => `  - ${t.title} (${t.progress_percentage}% complete)`)
-			.join('\n');
-
-		return {
-			status: 'non_compliant',
-			reason: `You have ${inProgressCount} task(s) still in_progress`,
-			continuation_prompt: `[VIBESCOPE ENFORCEMENT] You have ${inProgressCount} task(s) still marked as in_progress:
-
-${taskList}
-
-You MUST either:
-1. Complete them: complete_task(task_id: "...", summary: "...")
-2. Log why you're stopping: log_progress(project_id: "${project.id}", summary: "Stopping because...")`,
-			details: {
-				session_started: true,
-				project_id: project.id,
-				project_name: project.name,
-				git_url: project.git_url,
-				in_progress_tasks: inProgressCount,
-				tasks_completed_this_session: 0,
-				progress_logs_this_session: 0,
-				blockers_logged_this_session: 0,
-				session_duration_minutes: sessionDurationMinutes,
+	try {
+		const response = await fetch(`${getApiUrl()}/api/mcp/verify`, {
+			method: 'POST',
+			headers: {
+				'Content-Type': 'application/json',
 			},
-		};
-	}
-
-	// Check for activity this session
-	const sessionStartIso = sessionStartTime.toISOString();
-
-	const [completedResult, progressResult, blockerResult] = await Promise.all([
-		// Tasks completed after session start
-		supabase
-			.from('tasks')
-			.select('id', { count: 'exact' })
-			.eq('project_id', project.id)
-			.eq('status', 'completed')
-			.gte('completed_at', sessionStartIso),
-
-		// Progress logs by agent after session start
-		supabase
-			.from('progress_logs')
-			.select('id', { count: 'exact' })
-			.eq('project_id', project.id)
-			.eq('created_by', 'agent')
-			.gte('created_at', sessionStartIso),
-
-		// Blockers logged by agent after session start
-		supabase
-			.from('blockers')
-			.select('id', { count: 'exact' })
-			.eq('project_id', project.id)
-			.eq('created_by', 'agent')
-			.gte('created_at', sessionStartIso),
-	]);
-
-	const tasksCompleted = completedResult.count || 0;
-	const progressLogsCount = progressResult.count || 0;
-	const blockersLogged = blockerResult.count || 0;
-
-	// Check if any tracked work was done
-	const anyWorkTracked =
-		tasksCompleted > 0 || progressLogsCount > 0 || blockersLogged > 0;
-
-	if (!anyWorkTracked && sessionDurationMinutes >= 5) {
+			body: JSON.stringify({
+				api_key: apiKey,
+				git_url: gitUrl,
+				project_id: projectId,
+			}),
+		});
+
+		const result = await response.json() as VerificationResult;
+		return result;
+	} catch (err) {
 		return {
-			status: 'non_compliant',
-			reason: `Session active for ${sessionDurationMinutes} minutes but no work was tracked`,
-			continuation_prompt: `[VIBESCOPE ENFORCEMENT] Your session has been active for ${sessionDurationMinutes} minutes but no work was tracked.
-
-The human is watching the dashboard and will see an empty session.
-
-You MUST either:
-1. Pick a task and work on it: get_next_task(project_id: "${project.id}")
-2. Log why you did nothing: log_progress(project_id: "${project.id}", summary: "No work done because...")`,
-			details: {
-				session_started: true,
-				project_id: project.id,
-				project_name: project.name,
-				git_url: project.git_url,
-				in_progress_tasks: 0,
-				tasks_completed_this_session: tasksCompleted,
-				progress_logs_this_session: progressLogsCount,
-				blockers_logged_this_session: blockersLogged,
-				session_duration_minutes: sessionDurationMinutes,
-			},
+			status: 'error',
+			reason: err instanceof Error ? err.message : 'Network error',
 		};
 	}
-
-	// All checks passed - compliant!
-	return {
-		status: 'compliant',
-		reason: 'All tracked work completed properly',
-		details: {
-			session_started: true,
-			project_id: project.id,
-			project_name: project.name,
-			git_url: project.git_url,
-			in_progress_tasks: 0,
-			tasks_completed_this_session: tasksCompleted,
-			progress_logs_this_session: progressLogsCount,
-			blockers_logged_this_session: blockersLogged,
-			session_duration_minutes: sessionDurationMinutes,
-		},
-	};
 }
 
 // ============================================================================
@@ -413,8 +170,7 @@ Exit Codes:
 
 Environment Variables:
   VIBESCOPE_API_KEY       Required - Your Vibescope API key
-  SUPABASE_URL            Required - Supabase project URL
-  SUPABASE_SERVICE_KEY    Required - Supabase service role key
+  VIBESCOPE_API_URL       Optional - API URL (default: https://vibescope.dev)
 `);
 		process.exit(0);
 	} else {

package/src/handlers/__test-setup__.ts

@@ -0,0 +1,210 @@
+/**
+ * Global Test Setup for Handler Tests
+ *
+ * This file is loaded before all tests via vitest.config.ts setupFiles.
+ * It provides a global mock for the API client used by migrated handlers.
+ */
+
+import { vi, beforeEach } from 'vitest';
+
+// Default success response for API calls
+const defaultSuccess = { ok: true, data: {} };
+const defaultError = { ok: false, error: 'Mock error' };
+
+// ============================================================================
+// Global Mock API Client
+// ============================================================================
+
+/**
+ * Mock API client with all methods stubbed.
+ * Tests can configure return values using mockResolvedValue/mockImplementation.
+ * Default return is a success response { ok: true, data: {} }
+ */
+export const mockApiClient = {
+	// Session
+	startSession: vi.fn(),
+	heartbeat: vi.fn(),
+	syncSession: vi.fn(),
+	endSession: vi.fn(),
+
+	// Project
+	listProjects: vi.fn(),
+	getProject: vi.fn(),
+	getProjectContext: vi.fn(),
+	createProject: vi.fn(),
+	updateProject: vi.fn(),
+	updateProjectReadme: vi.fn(),
+	getGitWorkflow: vi.fn(),
+
+	// Tasks
+	getTasks: vi.fn(),
+	getNextTask: vi.fn(),
+	createTask: vi.fn(),
+	updateTask: vi.fn(),
+	completeTask: vi.fn(),
+	deleteTask: vi.fn(),
+	addTaskReference: vi.fn(),
+	removeTaskReference: vi.fn(),
+	batchUpdateTasks: vi.fn(),
+	batchCompleteTasks: vi.fn(),
+
+	// Subtasks
+	addSubtask: vi.fn(),
+	getSubtasks: vi.fn(),
+
+	// Progress
+	logProgress: vi.fn(),
+	getActivityFeed: vi.fn(),
+
+	// Blockers
+	addBlocker: vi.fn(),
+	resolveBlocker: vi.fn(),
+	getBlockers: vi.fn(),
+	deleteBlocker: vi.fn(),
+
+	// Decisions
+	logDecision: vi.fn(),
+	getDecisions: vi.fn(),
+	deleteDecision: vi.fn(),
+
+	// Ideas
+	addIdea: vi.fn(),
+	updateIdea: vi.fn(),
+	getIdeas: vi.fn(),
+	deleteIdea: vi.fn(),
+	convertIdeaToTask: vi.fn(),
+
+	// Findings
+	addFinding: vi.fn(),
+	getFindings: vi.fn(),
+	updateFinding: vi.fn(),
+	deleteFinding: vi.fn(),
+
+	// Requests
+	getPendingRequests: vi.fn(),
+	acknowledgeRequest: vi.fn(),
+	answerQuestion: vi.fn(),
+
+	// Milestones
+	addMilestone: vi.fn(),
+	updateMilestone: vi.fn(),
+	completeMilestone: vi.fn(),
+	deleteMilestone: vi.fn(),
+	getMilestones: vi.fn(),
+
+	// Fallback
+	startFallbackActivity: vi.fn(),
+	stopFallbackActivity: vi.fn(),
+	getActivityHistory: vi.fn(),
+	getActivitySchedules: vi.fn(),
+
+	// Cost
+	getCostSummary: vi.fn(),
+	getCostAlerts: vi.fn(),
+	addCostAlert: vi.fn(),
+	updateCostAlert: vi.fn(),
+	deleteCostAlert: vi.fn(),
+	getTaskCosts: vi.fn(),
+
+	// Git Issues
+	addGitIssue: vi.fn(),
+	resolveGitIssue: vi.fn(),
+	getGitIssues: vi.fn(),
+	deleteGitIssue: vi.fn(),
+
+	// Organizations
+	listOrganizations: vi.fn(),
+	createOrganization: vi.fn(),
+	updateOrganization: vi.fn(),
+	deleteOrganization: vi.fn(),
+	listOrgMembers: vi.fn(),
+	inviteMember: vi.fn(),
+	updateMemberRole: vi.fn(),
+	removeMember: vi.fn(),
+	leaveOrganization: vi.fn(),
+	shareProjectWithOrg: vi.fn(),
+	updateProjectShare: vi.fn(),
+	unshareProject: vi.fn(),
+	listProjectShares: vi.fn(),
+
+	// Bodies of Work
+	createBodyOfWork: vi.fn(),
+	updateBodyOfWork: vi.fn(),
+	getBodyOfWork: vi.fn(),
+	getBodiesOfWork: vi.fn(),
+	deleteBodyOfWork: vi.fn(),
+	addTaskToBodyOfWork: vi.fn(),
+	removeTaskFromBodyOfWork: vi.fn(),
+	activateBodyOfWork: vi.fn(),
+	addTaskDependency: vi.fn(),
+	removeTaskDependency: vi.fn(),
+	getTaskDependencies: vi.fn(),
+	getNextBodyOfWorkTask: vi.fn(),
+
+	// Deployment
+	requestDeployment: vi.fn(),
+	claimDeploymentValidation: vi.fn(),
+	reportValidation: vi.fn(),
+	checkDeploymentStatus: vi.fn(),
+	startDeployment: vi.fn(),
+	completeDeployment: vi.fn(),
+	cancelDeployment: vi.fn(),
+	addDeploymentRequirement: vi.fn(),
+	completeDeploymentRequirement: vi.fn(),
+	getDeploymentRequirements: vi.fn(),
+	scheduleDeployment: vi.fn(),
+	getScheduledDeployments: vi.fn(),
+	updateScheduledDeployment: vi.fn(),
+	deleteScheduledDeployment: vi.fn(),
+	triggerScheduledDeployment: vi.fn(),
+	checkDueDeployments: vi.fn(),
+
+	// Validation
+	getTasksAwaitingValidation: vi.fn(),
+	claimValidation: vi.fn(),
+	validateTask: vi.fn(),
+
+	// Proxy (generic)
+	proxy: vi.fn(),
+};
+
+// ============================================================================
+// Mock the API Client Module
+// ============================================================================
+
+// Note: The path is relative to the test file location, not this setup file
+// This setup file is in src/handlers/, tests import from ../api-client.js
+vi.mock('../api-client.js', () => ({
+	getApiClient: () => mockApiClient,
+	initApiClient: vi.fn(),
+	VibescopeApiClient: vi.fn(),
+}));
+
+// Also mock with absolute-style path for tests outside handlers/
+vi.mock('../../api-client.js', () => ({
+	getApiClient: () => mockApiClient,
+	initApiClient: vi.fn(),
+	VibescopeApiClient: vi.fn(),
+}));
+
+// Export for test files that need direct access
+export { mockApiClient as __mockApiClient__ };
+
+// ============================================================================
+// Reset Mocks Before Each Test
+// ============================================================================
+
+/**
+ * Reset all mock functions before each test and set default return values.
+ * This ensures tests start with a clean slate and have sensible defaults.
+ */
+beforeEach(() => {
+	// Reset all mocks
+	Object.values(mockApiClient).forEach((mockFn) => {
+		if (typeof mockFn === 'function' && mockFn.mockReset) {
+			mockFn.mockReset();
+			// Set default return value to success
+			mockFn.mockResolvedValue({ ok: true, data: {} });
+		}
+	});
+});